xref: /freebsd/sys/dev/hyperv/hvsock/hv_sock.c (revision ec0ea6efa1ad229d75c394c1a9b9cac33af2b1d3)
1 /*-
2  * SPDX-License-Identifier: BSD-2-Clause-FreeBSD
3  *
4  * Copyright (c) 2020 Microsoft Corp.
5  * All rights reserved.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  * 1. Redistributions of source code must retain the above copyright
11  *    notice unmodified, this list of conditions, and the following
12  *    disclaimer.
13  * 2. Redistributions in binary form must reproduce the above copyright
14  *    notice, this list of conditions and the following disclaimer in the
15  *    documentation and/or other materials provided with the distribution.
16  *
17  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
18  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
19  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
20  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
21  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
22  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
23  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
24  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
25  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
26  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27  */
28 
29 #include <sys/cdefs.h>
30 __FBSDID("$FreeBSD$");
31 
32 #include <sys/param.h>
33 #include <sys/bus.h>
34 #include <sys/domain.h>
35 #include <sys/lock.h>
36 #include <sys/kernel.h>
37 #include <sys/types.h>
38 #include <sys/malloc.h>
39 #include <sys/module.h>
40 #include <sys/mutex.h>
41 #include <sys/proc.h>
42 #include <sys/protosw.h>
43 #include <sys/socket.h>
44 #include <sys/sysctl.h>
45 #include <sys/sysproto.h>
46 #include <sys/systm.h>
47 #include <sys/sockbuf.h>
48 #include <sys/sx.h>
49 #include <sys/uio.h>
50 
51 #include <net/vnet.h>
52 
53 #include <dev/hyperv/vmbus/vmbus_reg.h>
54 
55 #include "hv_sock.h"
56 
57 #define HVSOCK_DBG_NONE			0x0
58 #define HVSOCK_DBG_INFO			0x1
59 #define HVSOCK_DBG_ERR			0x2
60 #define HVSOCK_DBG_VERBOSE		0x3
61 
62 
63 SYSCTL_NODE(_net, OID_AUTO, hvsock, CTLFLAG_RD, 0, "HyperV socket");
64 
65 static int hvs_dbg_level;
66 SYSCTL_INT(_net_hvsock, OID_AUTO, hvs_dbg_level, CTLFLAG_RWTUN, &hvs_dbg_level,
67     0, "hyperv socket debug level: 0 = none, 1 = info, 2 = error, 3 = verbose");
68 
69 
70 #define HVSOCK_DBG(level, ...) do {					\
71 	if (hvs_dbg_level >= (level))					\
72 		printf(__VA_ARGS__);					\
73 	} while (0)
74 
75 MALLOC_DEFINE(M_HVSOCK, "hyperv_socket", "hyperv socket control structures");
76 
77 static int hvs_dom_probe(void);
78 
79 /* The MTU is 16KB per host side's design */
80 #define HVSOCK_MTU_SIZE		(1024 * 16)
81 #define HVSOCK_SEND_BUF_SZ	(PAGE_SIZE - sizeof(struct vmpipe_proto_header))
82 
83 #define HVSOCK_HEADER_LEN	(sizeof(struct hvs_pkt_header))
84 
85 #define HVSOCK_PKT_LEN(payload_len)	(HVSOCK_HEADER_LEN + \
86 					 roundup2(payload_len, 8) + \
87 					 sizeof(uint64_t))
88 
89 
90 static struct domain		hv_socket_domain;
91 
92 /*
93  * HyperV Transport sockets
94  */
95 static struct pr_usrreqs	hvs_trans_usrreqs = {
96 	.pru_attach =		hvs_trans_attach,
97 	.pru_bind =		hvs_trans_bind,
98 	.pru_listen =		hvs_trans_listen,
99 	.pru_accept =		hvs_trans_accept,
100 	.pru_connect =		hvs_trans_connect,
101 	.pru_peeraddr =		hvs_trans_peeraddr,
102 	.pru_sockaddr =		hvs_trans_sockaddr,
103 	.pru_soreceive =	hvs_trans_soreceive,
104 	.pru_sosend =		hvs_trans_sosend,
105 	.pru_disconnect =	hvs_trans_disconnect,
106 	.pru_close =		hvs_trans_close,
107 	.pru_detach =		hvs_trans_detach,
108 	.pru_shutdown =		hvs_trans_shutdown,
109 	.pru_abort =		hvs_trans_abort,
110 };
111 
112 /*
113  * Definitions of protocols supported in HyperV socket domain
114  */
115 static struct protosw		hv_socket_protosw[] = {
116 {
117 	.pr_type =		SOCK_STREAM,
118 	.pr_domain =		&hv_socket_domain,
119 	.pr_protocol =		HYPERV_SOCK_PROTO_TRANS,
120 	.pr_flags =		PR_CONNREQUIRED,
121 	.pr_init =		hvs_trans_init,
122 	.pr_usrreqs =		&hvs_trans_usrreqs,
123 },
124 };
125 
126 static struct domain		hv_socket_domain = {
127 	.dom_family =		AF_HYPERV,
128 	.dom_name =		"hyperv",
129 	.dom_probe =		hvs_dom_probe,
130 	.dom_protosw =		hv_socket_protosw,
131 	.dom_protoswNPROTOSW =	&hv_socket_protosw[nitems(hv_socket_protosw)]
132 };
133 
134 VNET_DOMAIN_SET(hv_socket_);
135 
136 #define MAX_PORT			((uint32_t)0xFFFFFFFF)
137 #define MIN_PORT			((uint32_t)0x0)
138 
139 /* 00000000-facb-11e6-bd58-64006a7986d3 */
140 static const struct hyperv_guid srv_id_template = {
141 	.hv_guid = {
142 	    0x00, 0x00, 0x00, 0x00, 0xcb, 0xfa, 0xe6, 0x11,
143 	    0xbd, 0x58, 0x64, 0x00, 0x6a, 0x79, 0x86, 0xd3 }
144 };
145 
146 static int		hvsock_br_callback(void *, int, void *);
147 static uint32_t		hvsock_canread_check(struct hvs_pcb *);
148 static uint32_t		hvsock_canwrite_check(struct hvs_pcb *);
149 static int		hvsock_send_data(struct vmbus_channel *chan,
150     struct uio *uio, uint32_t to_write, struct sockbuf *sb);
151 
152 
153 
154 /* Globals */
155 static struct sx		hvs_trans_socks_sx;
156 static struct mtx		hvs_trans_socks_mtx;
157 static LIST_HEAD(, hvs_pcb)	hvs_trans_bound_socks;
158 static LIST_HEAD(, hvs_pcb)	hvs_trans_connected_socks;
159 static uint32_t			previous_auto_bound_port;
160 
161 static void
162 hvsock_print_guid(struct hyperv_guid *guid)
163 {
164 	unsigned char *p = (unsigned char *)guid;
165 
166 	HVSOCK_DBG(HVSOCK_DBG_INFO,
167 	    "0x%x-0x%x-0x%x-0x%x-0x%x-0x%x-0x%x-0x%x-0x%x-0x%x-0x%x\n",
168 	    *(unsigned int *)p,
169 	    *((unsigned short *) &p[4]),
170 	    *((unsigned short *) &p[6]),
171 	    p[8], p[9], p[10], p[11], p[12], p[13], p[14], p[15]);
172 }
173 
174 static bool
175 is_valid_srv_id(const struct hyperv_guid *id)
176 {
177 	return !memcmp(&id->hv_guid[4],
178 	    &srv_id_template.hv_guid[4], sizeof(struct hyperv_guid) - 4);
179 }
180 
181 static unsigned int
182 get_port_by_srv_id(const struct hyperv_guid *srv_id)
183 {
184 	return *((const unsigned int *)srv_id);
185 }
186 
187 static void
188 set_port_by_srv_id(struct hyperv_guid *srv_id, unsigned int port)
189 {
190 	*((unsigned int *)srv_id) = port;
191 }
192 
193 
194 static void
195 __hvs_remove_pcb_from_list(struct hvs_pcb *pcb, unsigned char list)
196 {
197 	struct hvs_pcb *p = NULL;
198 
199 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE, "%s: pcb is %p\n", __func__, pcb);
200 
201 	if (!pcb)
202 		return;
203 
204 	if (list & HVS_LIST_BOUND) {
205 		LIST_FOREACH(p, &hvs_trans_bound_socks, bound_next)
206 			if  (p == pcb)
207 				LIST_REMOVE(p, bound_next);
208 	}
209 
210 	if (list & HVS_LIST_CONNECTED) {
211 		LIST_FOREACH(p, &hvs_trans_connected_socks, connected_next)
212 			if (p == pcb)
213 				LIST_REMOVE(pcb, connected_next);
214 	}
215 }
216 
217 static void
218 __hvs_remove_socket_from_list(struct socket *so, unsigned char list)
219 {
220 	struct hvs_pcb *pcb = so2hvspcb(so);
221 
222 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE, "%s: pcb is %p\n", __func__, pcb);
223 
224 	__hvs_remove_pcb_from_list(pcb, list);
225 }
226 
227 static void
228 __hvs_insert_socket_on_list(struct socket *so, unsigned char list)
229 {
230 	struct hvs_pcb *pcb = so2hvspcb(so);
231 
232 	if (list & HVS_LIST_BOUND)
233 		LIST_INSERT_HEAD(&hvs_trans_bound_socks,
234 		   pcb, bound_next);
235 
236 	if (list & HVS_LIST_CONNECTED)
237 		LIST_INSERT_HEAD(&hvs_trans_connected_socks,
238 		   pcb, connected_next);
239 }
240 
241 void
242 hvs_remove_socket_from_list(struct socket *so, unsigned char list)
243 {
244 	if (!so || !so->so_pcb) {
245 		HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
246 		    "%s: socket or so_pcb is null\n", __func__);
247 		return;
248 	}
249 
250 	mtx_lock(&hvs_trans_socks_mtx);
251 	__hvs_remove_socket_from_list(so, list);
252 	mtx_unlock(&hvs_trans_socks_mtx);
253 }
254 
255 static void
256 hvs_insert_socket_on_list(struct socket *so, unsigned char list)
257 {
258 	if (!so || !so->so_pcb) {
259 		HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
260 		    "%s: socket or so_pcb is null\n", __func__);
261 		return;
262 	}
263 
264 	mtx_lock(&hvs_trans_socks_mtx);
265 	__hvs_insert_socket_on_list(so, list);
266 	mtx_unlock(&hvs_trans_socks_mtx);
267 }
268 
269 static struct socket *
270 __hvs_find_socket_on_list(struct sockaddr_hvs *addr, unsigned char list)
271 {
272 	struct hvs_pcb *p = NULL;
273 
274 	if (list & HVS_LIST_BOUND)
275 		LIST_FOREACH(p, &hvs_trans_bound_socks, bound_next)
276 			if (p->so != NULL &&
277 			    addr->hvs_port == p->local_addr.hvs_port)
278 				return p->so;
279 
280 	if (list & HVS_LIST_CONNECTED)
281 		LIST_FOREACH(p, &hvs_trans_connected_socks, connected_next)
282 			if (p->so != NULL &&
283 			    addr->hvs_port == p->local_addr.hvs_port)
284 				return p->so;
285 
286 	return NULL;
287 }
288 
289 static struct socket *
290 hvs_find_socket_on_list(struct sockaddr_hvs *addr, unsigned char list)
291 {
292 	struct socket *s = NULL;
293 
294 	mtx_lock(&hvs_trans_socks_mtx);
295 	s = __hvs_find_socket_on_list(addr, list);
296 	mtx_unlock(&hvs_trans_socks_mtx);
297 
298 	return s;
299 }
300 
301 static inline void
302 hvs_addr_set(struct sockaddr_hvs *addr, unsigned int port)
303 {
304 	memset(addr, 0, sizeof(*addr));
305 	addr->sa_family = AF_HYPERV;
306 	addr->sa_len = sizeof(*addr);
307 	addr->hvs_port = port;
308 }
309 
310 void
311 hvs_addr_init(struct sockaddr_hvs *addr, const struct hyperv_guid *svr_id)
312 {
313 	hvs_addr_set(addr, get_port_by_srv_id(svr_id));
314 }
315 
316 int
317 hvs_trans_lock(void)
318 {
319 	sx_xlock(&hvs_trans_socks_sx);
320 	return (0);
321 }
322 
323 void
324 hvs_trans_unlock(void)
325 {
326 	sx_xunlock(&hvs_trans_socks_sx);
327 }
328 
329 static int
330 hvs_dom_probe(void)
331 {
332 
333 	/* Don't even give us a chance to attach on non-HyperV. */
334 	if (vm_guest != VM_GUEST_HV)
335 		return (ENXIO);
336 	return (0);
337 }
338 
339 void
340 hvs_trans_init(void)
341 {
342 	/* Skip initialization of globals for non-default instances. */
343 	if (!IS_DEFAULT_VNET(curvnet))
344 		return;
345 
346 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
347 	    "%s: HyperV Socket hvs_trans_init called\n", __func__);
348 
349 	/* Initialize Globals */
350 	previous_auto_bound_port = MAX_PORT;
351 	sx_init(&hvs_trans_socks_sx, "hvs_trans_sock_sx");
352 	mtx_init(&hvs_trans_socks_mtx,
353 	    "hvs_trans_socks_mtx", NULL, MTX_DEF);
354 	LIST_INIT(&hvs_trans_bound_socks);
355 	LIST_INIT(&hvs_trans_connected_socks);
356 }
357 
358 /*
359  * Called in two cases:
360  * 1) When user calls socket();
361  * 2) When we accept new incoming conneciton and call sonewconn().
362  */
363 int
364 hvs_trans_attach(struct socket *so, int proto, struct thread *td)
365 {
366 	struct hvs_pcb *pcb = so2hvspcb(so);
367 
368 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
369 	    "%s: HyperV Socket hvs_trans_attach called\n", __func__);
370 
371 	if (so->so_type != SOCK_STREAM)
372 		return (ESOCKTNOSUPPORT);
373 
374 	if (proto != 0 && proto != HYPERV_SOCK_PROTO_TRANS)
375 		return (EPROTONOSUPPORT);
376 
377 	if (pcb != NULL)
378 		return (EISCONN);
379 	pcb = malloc(sizeof(struct hvs_pcb), M_HVSOCK, M_NOWAIT | M_ZERO);
380 	if (pcb == NULL)
381 		return (ENOMEM);
382 
383 	pcb->so = so;
384 	so->so_pcb = (void *)pcb;
385 
386 	return (0);
387 }
388 
389 void
390 hvs_trans_detach(struct socket *so)
391 {
392 	struct hvs_pcb *pcb;
393 
394 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
395 	    "%s: HyperV Socket hvs_trans_detach called\n", __func__);
396 
397 	(void) hvs_trans_lock();
398 	pcb = so2hvspcb(so);
399 	if (pcb == NULL) {
400 		hvs_trans_unlock();
401 		return;
402 	}
403 
404 	if (SOLISTENING(so)) {
405 		bzero(pcb, sizeof(*pcb));
406 		free(pcb, M_HVSOCK);
407 	}
408 
409 	so->so_pcb = NULL;
410 
411 	hvs_trans_unlock();
412 }
413 
414 int
415 hvs_trans_bind(struct socket *so, struct sockaddr *addr, struct thread *td)
416 {
417 	struct hvs_pcb *pcb = so2hvspcb(so);
418 	struct sockaddr_hvs *sa = (struct sockaddr_hvs *) addr;
419 	int error = 0;
420 
421 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
422 	    "%s: HyperV Socket hvs_trans_bind called\n", __func__);
423 
424 	if (sa == NULL) {
425 		return (EINVAL);
426 	}
427 
428 	if (pcb == NULL) {
429 		return (EINVAL);
430 	}
431 
432 	if (sa->sa_family != AF_HYPERV) {
433 		HVSOCK_DBG(HVSOCK_DBG_ERR,
434 		    "%s: Not supported, sa_family is %u\n",
435 		    __func__, sa->sa_family);
436 		return (EAFNOSUPPORT);
437 	}
438 	if (sa->sa_len != sizeof(*sa)) {
439 		HVSOCK_DBG(HVSOCK_DBG_ERR,
440 		    "%s: Not supported, sa_len is %u\n",
441 		    __func__, sa->sa_len);
442 		return (EINVAL);
443 	}
444 
445 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
446 	    "%s: binding port = 0x%x\n", __func__, sa->hvs_port);
447 
448 	mtx_lock(&hvs_trans_socks_mtx);
449 	if (__hvs_find_socket_on_list(sa,
450 	    HVS_LIST_BOUND | HVS_LIST_CONNECTED)) {
451 		error = EADDRINUSE;
452 	} else {
453 		/*
454 		 * The address is available for us to bind.
455 		 * Add socket to the bound list.
456 		 */
457 		hvs_addr_set(&pcb->local_addr, sa->hvs_port);
458 		hvs_addr_set(&pcb->remote_addr, HVADDR_PORT_ANY);
459 		__hvs_insert_socket_on_list(so, HVS_LIST_BOUND);
460 	}
461 	mtx_unlock(&hvs_trans_socks_mtx);
462 
463 	return (error);
464 }
465 
466 int
467 hvs_trans_listen(struct socket *so, int backlog, struct thread *td)
468 {
469 	struct hvs_pcb *pcb = so2hvspcb(so);
470 	struct socket *bound_so;
471 	int error;
472 
473 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
474 	    "%s: HyperV Socket hvs_trans_listen called\n", __func__);
475 
476 	if (pcb == NULL)
477 		return (EINVAL);
478 
479 	/* Check if the address is already bound and it was by us. */
480 	bound_so = hvs_find_socket_on_list(&pcb->local_addr, HVS_LIST_BOUND);
481 	if (bound_so == NULL || bound_so != so) {
482 		HVSOCK_DBG(HVSOCK_DBG_ERR,
483 		    "%s: Address not bound or not by us.\n", __func__);
484 		return (EADDRNOTAVAIL);
485 	}
486 
487 	SOCK_LOCK(so);
488 	error = solisten_proto_check(so);
489 	if (error == 0)
490 		solisten_proto(so, backlog);
491 	SOCK_UNLOCK(so);
492 
493 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
494 	    "%s: HyperV Socket listen error = %d\n", __func__, error);
495 	return (error);
496 }
497 
498 int
499 hvs_trans_accept(struct socket *so, struct sockaddr **nam)
500 {
501 	struct hvs_pcb *pcb = so2hvspcb(so);
502 
503 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
504 	    "%s: HyperV Socket hvs_trans_accept called\n", __func__);
505 
506 	if (pcb == NULL)
507 		return (EINVAL);
508 
509 	*nam = sodupsockaddr((struct sockaddr *) &pcb->remote_addr,
510 	    M_NOWAIT);
511 
512 	return ((*nam == NULL) ? ENOMEM : 0);
513 }
514 
515 int
516 hvs_trans_connect(struct socket *so, struct sockaddr *nam, struct thread *td)
517 {
518 	struct hvs_pcb *pcb = so2hvspcb(so);
519 	struct sockaddr_hvs *raddr = (struct sockaddr_hvs *)nam;
520 	bool found_auto_bound_port = false;
521 	int i, error = 0;
522 
523 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
524 	    "%s: HyperV Socket hvs_trans_connect called, remote port is %x\n",
525 	    __func__, raddr->hvs_port);
526 
527 	if (pcb == NULL)
528 		return (EINVAL);
529 
530 	/* Verify the remote address */
531 	if (raddr == NULL)
532 		return (EINVAL);
533 	if (raddr->sa_family != AF_HYPERV)
534 		return (EAFNOSUPPORT);
535 	if (raddr->sa_len != sizeof(*raddr))
536 		return (EINVAL);
537 
538 	mtx_lock(&hvs_trans_socks_mtx);
539 	if (so->so_state &
540 	    (SS_ISCONNECTED|SS_ISDISCONNECTING|SS_ISCONNECTING)) {
541 			HVSOCK_DBG(HVSOCK_DBG_ERR,
542 			    "%s: socket connect in progress\n",
543 			    __func__);
544 			error = EINPROGRESS;
545 			goto out;
546 	}
547 
548 	/*
549 	 * Find an available port for us to auto bind the local
550 	 * address.
551 	 */
552 	hvs_addr_set(&pcb->local_addr, 0);
553 
554 	for (i = previous_auto_bound_port - 1;
555 	    i != previous_auto_bound_port; i --) {
556 		if (i == MIN_PORT)
557 			i = MAX_PORT;
558 
559 		pcb->local_addr.hvs_port = i;
560 
561 		if (__hvs_find_socket_on_list(&pcb->local_addr,
562 		    HVS_LIST_BOUND | HVS_LIST_CONNECTED) == NULL) {
563 			found_auto_bound_port = true;
564 			previous_auto_bound_port = i;
565 			HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
566 			    "%s: found local bound port is %x\n",
567 			    __func__, pcb->local_addr.hvs_port);
568 			break;
569 		}
570 	}
571 
572 	if (found_auto_bound_port == true) {
573 		/* Found available port for auto bound, put on list */
574 		__hvs_insert_socket_on_list(so, HVS_LIST_BOUND);
575 		/* Set VM service ID */
576 		pcb->vm_srv_id = srv_id_template;
577 		set_port_by_srv_id(&pcb->vm_srv_id, pcb->local_addr.hvs_port);
578 		/* Set host service ID and remote port */
579 		pcb->host_srv_id = srv_id_template;
580 		set_port_by_srv_id(&pcb->host_srv_id, raddr->hvs_port);
581 		hvs_addr_set(&pcb->remote_addr, raddr->hvs_port);
582 
583 		/* Change the socket state to SS_ISCONNECTING */
584 		soisconnecting(so);
585 	} else {
586 		HVSOCK_DBG(HVSOCK_DBG_ERR,
587 		    "%s: No local port available for auto bound\n",
588 		    __func__);
589 		error = EADDRINUSE;
590 	}
591 
592 	HVSOCK_DBG(HVSOCK_DBG_INFO, "Connect vm_srv_id is ");
593 	hvsock_print_guid(&pcb->vm_srv_id);
594 	HVSOCK_DBG(HVSOCK_DBG_INFO, "Connect host_srv_id is ");
595 	hvsock_print_guid(&pcb->host_srv_id);
596 
597 out:
598 	mtx_unlock(&hvs_trans_socks_mtx);
599 
600 	if (found_auto_bound_port == true)
601 		 vmbus_req_tl_connect(&pcb->vm_srv_id, &pcb->host_srv_id);
602 
603 	return (error);
604 }
605 
606 int
607 hvs_trans_disconnect(struct socket *so)
608 {
609 	struct hvs_pcb *pcb;
610 
611 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
612 	    "%s: HyperV Socket hvs_trans_disconnect called\n", __func__);
613 
614 	(void) hvs_trans_lock();
615 	pcb = so2hvspcb(so);
616 	if (pcb == NULL) {
617 		hvs_trans_unlock();
618 		return (EINVAL);
619 	}
620 
621 	/* If socket is already disconnected, skip this */
622 	if ((so->so_state & SS_ISDISCONNECTED) == 0)
623 		soisdisconnecting(so);
624 
625 	hvs_trans_unlock();
626 
627 	return (0);
628 }
629 
630 struct hvs_callback_arg {
631 	struct uio *uio;
632 	struct sockbuf *sb;
633 };
634 
635 int
636 hvs_trans_soreceive(struct socket *so, struct sockaddr **paddr,
637     struct uio *uio, struct mbuf **mp0, struct mbuf **controlp, int *flagsp)
638 {
639 	struct hvs_pcb *pcb = so2hvspcb(so);
640 	struct sockbuf *sb;
641 	ssize_t orig_resid;
642 	uint32_t canread, to_read;
643 	int flags, error = 0;
644 	struct hvs_callback_arg cbarg;
645 
646 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
647 	    "%s: HyperV Socket hvs_trans_soreceive called\n", __func__);
648 
649 	if (so->so_type != SOCK_STREAM)
650 		return (EINVAL);
651 	if (pcb == NULL)
652 		return (EINVAL);
653 
654 	if (flagsp != NULL)
655 		flags = *flagsp &~ MSG_EOR;
656 	else
657 		flags = 0;
658 
659 	if (flags & MSG_PEEK)
660 		return (EOPNOTSUPP);
661 
662 	/* If no space to copy out anything */
663 	if (uio->uio_resid == 0 || uio->uio_rw != UIO_READ)
664 		return (EINVAL);
665 
666 	orig_resid = uio->uio_resid;
667 
668 	/* Prevent other readers from entering the socket. */
669 	error = SOCK_IO_RECV_LOCK(so, SBLOCKWAIT(flags));
670 	if (error) {
671 		HVSOCK_DBG(HVSOCK_DBG_ERR,
672 		    "%s: soiolock returned error = %d\n", __func__, error);
673 		return (error);
674 	}
675 
676 	sb = &so->so_rcv;
677 	SOCKBUF_LOCK(sb);
678 
679 	cbarg.uio = uio;
680 	cbarg.sb = sb;
681 	/*
682 	 * If the socket is closing, there might still be some data
683 	 * in rx br to read. However we need to make sure
684 	 * the channel is still open.
685 	 */
686 	if ((sb->sb_state & SBS_CANTRCVMORE) &&
687 	    (so->so_state & SS_ISDISCONNECTED)) {
688 		/* Other thread already closed the channel */
689 		error = EPIPE;
690 		goto out;
691 	}
692 
693 	while (true) {
694 		while (uio->uio_resid > 0 &&
695 		    (canread = hvsock_canread_check(pcb)) > 0) {
696 			to_read = MIN(canread, uio->uio_resid);
697 			HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
698 			    "%s: to_read = %u, skip = %u\n", __func__, to_read,
699 			    (unsigned int)(sizeof(struct hvs_pkt_header) +
700 			    pcb->recv_data_off));
701 
702 			error = vmbus_chan_recv_peek_call(pcb->chan, to_read,
703 			    sizeof(struct hvs_pkt_header) + pcb->recv_data_off,
704 			    hvsock_br_callback, (void *)&cbarg);
705 			/*
706 			 * It is possible socket is disconnected becasue
707 			 * we released lock in hvsock_br_callback. So we
708 			 * need to check the state to make sure it is not
709 			 * disconnected.
710 			 */
711 			if (error || so->so_state & SS_ISDISCONNECTED) {
712 				break;
713 			}
714 
715 			pcb->recv_data_len -= to_read;
716 			pcb->recv_data_off += to_read;
717 		}
718 
719 		if (error)
720 			break;
721 
722 		/* Abort if socket has reported problems. */
723 		if (so->so_error) {
724 			if (so->so_error == ESHUTDOWN &&
725 			    orig_resid > uio->uio_resid) {
726 				/*
727 				 * Although we got a FIN, we also received
728 				 * some data in this round. Delivery it
729 				 * to user.
730 				 */
731 				error = 0;
732 			} else {
733 				if (so->so_error != ESHUTDOWN)
734 					error = so->so_error;
735 			}
736 
737 			break;
738 		}
739 
740 		/* Cannot received more. */
741 		if (sb->sb_state & SBS_CANTRCVMORE)
742 			break;
743 
744 		/* We are done if buffer has been filled */
745 		if (uio->uio_resid == 0)
746 			break;
747 
748 		if (!(flags & MSG_WAITALL) && orig_resid > uio->uio_resid)
749 			break;
750 
751 		/* Buffer ring is empty and we shall not block */
752 		if ((so->so_state & SS_NBIO) ||
753 		    (flags & (MSG_DONTWAIT|MSG_NBIO))) {
754 			if (orig_resid == uio->uio_resid) {
755 				/* We have not read anything */
756 				error = EAGAIN;
757 			}
758 			HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
759 			    "%s: non blocked read return, error %d.\n",
760 			    __func__, error);
761 			break;
762 		}
763 
764 		/*
765 		 * Wait and block until (more) data comes in.
766 		 * Note: Drops the sockbuf lock during wait.
767 		 */
768 		error = sbwait(sb);
769 
770 		if (error)
771 			break;
772 
773 		HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
774 		    "%s: wake up from sbwait, read available is %u\n",
775 		    __func__, vmbus_chan_read_available(pcb->chan));
776 	}
777 
778 out:
779 	SOCKBUF_UNLOCK(sb);
780 	SOCK_IO_RECV_UNLOCK(so);
781 
782 	/* We recieved a FIN in this call */
783 	if (so->so_error == ESHUTDOWN) {
784 		if (so->so_snd.sb_state & SBS_CANTSENDMORE) {
785 			/* Send has already closed */
786 			soisdisconnecting(so);
787 		} else {
788 			/* Just close the receive side */
789 			socantrcvmore(so);
790 		}
791 	}
792 
793 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
794 	    "%s: returning error = %d, so_error = %d\n",
795 	    __func__, error, so->so_error);
796 
797 	return (error);
798 }
799 
800 int
801 hvs_trans_sosend(struct socket *so, struct sockaddr *addr, struct uio *uio,
802     struct mbuf *top, struct mbuf *controlp, int flags, struct thread *td)
803 {
804 	struct hvs_pcb *pcb = so2hvspcb(so);
805 	struct sockbuf *sb;
806 	ssize_t orig_resid;
807 	uint32_t canwrite, to_write;
808 	int error = 0;
809 
810 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
811 	    "%s: HyperV Socket hvs_trans_sosend called, uio_resid = %zd\n",
812 	    __func__, uio->uio_resid);
813 
814 	if (so->so_type != SOCK_STREAM)
815 		return (EINVAL);
816 	if (pcb == NULL)
817 		return (EINVAL);
818 
819 	/* If nothing to send */
820 	if (uio->uio_resid == 0 || uio->uio_rw != UIO_WRITE)
821 		return (EINVAL);
822 
823 	orig_resid = uio->uio_resid;
824 
825 	/* Prevent other writers from entering the socket. */
826 	error = SOCK_IO_SEND_LOCK(so, SBLOCKWAIT(flags));
827 	if (error) {
828 		HVSOCK_DBG(HVSOCK_DBG_ERR,
829 		    "%s: soiolocak returned error = %d\n", __func__, error);
830 		return (error);
831 	}
832 
833 	sb = &so->so_snd;
834 	SOCKBUF_LOCK(sb);
835 
836 	if ((sb->sb_state & SBS_CANTSENDMORE) ||
837 	    so->so_error == ESHUTDOWN) {
838 		error = EPIPE;
839 		goto out;
840 	}
841 
842 	while (uio->uio_resid > 0) {
843 		canwrite = hvsock_canwrite_check(pcb);
844 		if (canwrite == 0) {
845 			/* We have sent some data */
846 			if (orig_resid > uio->uio_resid)
847 				break;
848 			/*
849 			 * We have not sent any data and it is
850 			 * non-blocked io
851 			 */
852 			if (so->so_state & SS_NBIO ||
853 			    (flags & (MSG_NBIO | MSG_DONTWAIT)) != 0) {
854 				error = EWOULDBLOCK;
855 				break;
856 			} else {
857 				/*
858 				 * We are here because there is no space on
859 				 * send buffer ring. Signal the other side
860 				 * to read and free more space.
861 				 * Sleep wait until space avaiable to send
862 				 * Note: Drops the sockbuf lock during wait.
863 				 */
864 				error = sbwait(sb);
865 
866 				if (error)
867 					break;
868 
869 				HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
870 				    "%s: wake up from sbwait, space avail on "
871 				    "tx ring is %u\n",
872 				    __func__,
873 				    vmbus_chan_write_available(pcb->chan));
874 
875 				continue;
876 			}
877 		}
878 		to_write = MIN(canwrite, uio->uio_resid);
879 		to_write = MIN(to_write, HVSOCK_SEND_BUF_SZ);
880 
881 		HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
882 		    "%s: canwrite is %u, to_write = %u\n", __func__,
883 		    canwrite, to_write);
884 		error = hvsock_send_data(pcb->chan, uio, to_write, sb);
885 
886 		if (error)
887 			break;
888 	}
889 
890 out:
891 	SOCKBUF_UNLOCK(sb);
892 	SOCK_IO_SEND_UNLOCK(so);
893 
894 	return (error);
895 }
896 
897 int
898 hvs_trans_peeraddr(struct socket *so, struct sockaddr **nam)
899 {
900 	struct hvs_pcb *pcb = so2hvspcb(so);
901 
902 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
903 	    "%s: HyperV Socket hvs_trans_peeraddr called\n", __func__);
904 
905 	if (pcb == NULL)
906 		return (EINVAL);
907 
908 	*nam = sodupsockaddr((struct sockaddr *) &pcb->remote_addr, M_NOWAIT);
909 
910 	return ((*nam == NULL)? ENOMEM : 0);
911 }
912 
913 int
914 hvs_trans_sockaddr(struct socket *so, struct sockaddr **nam)
915 {
916 	struct hvs_pcb *pcb = so2hvspcb(so);
917 
918 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
919 	    "%s: HyperV Socket hvs_trans_sockaddr called\n", __func__);
920 
921 	if (pcb == NULL)
922 		return (EINVAL);
923 
924 	*nam = sodupsockaddr((struct sockaddr *) &pcb->local_addr, M_NOWAIT);
925 
926 	return ((*nam == NULL)? ENOMEM : 0);
927 }
928 
929 void
930 hvs_trans_close(struct socket *so)
931 {
932 	struct hvs_pcb *pcb;
933 
934 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
935 	    "%s: HyperV Socket hvs_trans_close called\n", __func__);
936 
937 	(void) hvs_trans_lock();
938 	pcb = so2hvspcb(so);
939 	if (!pcb) {
940 		hvs_trans_unlock();
941 		return;
942 	}
943 
944 	if (so->so_state & SS_ISCONNECTED) {
945 		/* Send a FIN to peer */
946 		HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
947 		    "%s: hvs_trans_close sending a FIN to host\n", __func__);
948 		(void) hvsock_send_data(pcb->chan, NULL, 0, NULL);
949 	}
950 
951 	if (so->so_state &
952 	    (SS_ISCONNECTED|SS_ISCONNECTING|SS_ISDISCONNECTING))
953 		soisdisconnected(so);
954 
955 	pcb->chan = NULL;
956 	pcb->so = NULL;
957 
958 	if (SOLISTENING(so)) {
959 		mtx_lock(&hvs_trans_socks_mtx);
960 		/* Remove from bound list */
961 		__hvs_remove_socket_from_list(so, HVS_LIST_BOUND);
962 		mtx_unlock(&hvs_trans_socks_mtx);
963 	}
964 
965 	hvs_trans_unlock();
966 
967 	return;
968 }
969 
970 void
971 hvs_trans_abort(struct socket *so)
972 {
973 	struct hvs_pcb *pcb = so2hvspcb(so);
974 
975 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
976 	    "%s: HyperV Socket hvs_trans_abort called\n", __func__);
977 
978 	(void) hvs_trans_lock();
979 	if (pcb == NULL) {
980 		hvs_trans_unlock();
981 		return;
982 	}
983 
984 	if (SOLISTENING(so)) {
985 		mtx_lock(&hvs_trans_socks_mtx);
986 		/* Remove from bound list */
987 		__hvs_remove_socket_from_list(so, HVS_LIST_BOUND);
988 		mtx_unlock(&hvs_trans_socks_mtx);
989 	}
990 
991 	if (so->so_state & SS_ISCONNECTED) {
992 		(void) sodisconnect(so);
993 	}
994 	hvs_trans_unlock();
995 
996 	return;
997 }
998 
999 int
1000 hvs_trans_shutdown(struct socket *so)
1001 {
1002 	struct hvs_pcb *pcb = so2hvspcb(so);
1003 	struct sockbuf *sb;
1004 
1005 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1006 	    "%s: HyperV Socket hvs_trans_shutdown called\n", __func__);
1007 
1008 	if (pcb == NULL)
1009 		return (EINVAL);
1010 
1011 	/*
1012 	 * Only get called with the shutdown method is SHUT_WR or
1013 	 * SHUT_RDWR.
1014 	 * When the method is SHUT_RD or SHUT_RDWR, the caller
1015 	 * already set the SBS_CANTRCVMORE on receive side socket
1016 	 * buffer.
1017 	 */
1018 	if ((so->so_rcv.sb_state & SBS_CANTRCVMORE) == 0) {
1019 		/*
1020 		 * SHUT_WR only case.
1021 		 * Receive side is still open. Just close
1022 		 * the send side.
1023 		 */
1024 		socantsendmore(so);
1025 	} else {
1026 		/* SHUT_RDWR case */
1027 		if (so->so_state & SS_ISCONNECTED) {
1028 			/* Send a FIN to peer */
1029 			sb = &so->so_snd;
1030 			SOCKBUF_LOCK(sb);
1031 			(void) hvsock_send_data(pcb->chan, NULL, 0, sb);
1032 			SOCKBUF_UNLOCK(sb);
1033 
1034 			soisdisconnecting(so);
1035 		}
1036 	}
1037 
1038 	return (0);
1039 }
1040 
1041 /* In the VM, we support Hyper-V Sockets with AF_HYPERV, and the endpoint is
1042  * <port> (see struct sockaddr_hvs).
1043  *
1044  * On the host, Hyper-V Sockets are supported by Winsock AF_HYPERV:
1045  * https://docs.microsoft.com/en-us/virtualization/hyper-v-on-windows/user-
1046  * guide/make-integration-service, and the endpoint is <VmID, ServiceId> with
1047  * the below sockaddr:
1048  *
1049  * struct SOCKADDR_HV
1050  * {
1051  *    ADDRESS_FAMILY Family;
1052  *    USHORT Reserved;
1053  *    GUID VmId;
1054  *    GUID ServiceId;
1055  * };
1056  * Note: VmID is not used by FreeBSD VM and actually it isn't transmitted via
1057  * VMBus, because here it's obvious the host and the VM can easily identify
1058  * each other. Though the VmID is useful on the host, especially in the case
1059  * of Windows container, FreeBSD VM doesn't need it at all.
1060  *
1061  * To be compatible with similar infrastructure in Linux VMs, we have
1062  * to limit the available GUID space of SOCKADDR_HV so that we can create
1063  * a mapping between FreeBSD AF_HYPERV port and SOCKADDR_HV Service GUID.
1064  * The rule of writing Hyper-V Sockets apps on the host and in FreeBSD VM is:
1065  *
1066  ****************************************************************************
1067  * The only valid Service GUIDs, from the perspectives of both the host and *
1068  * FreeBSD VM, that can be connected by the other end, must conform to this *
1069  * format: <port>-facb-11e6-bd58-64006a7986d3.                              *
1070  ****************************************************************************
1071  *
1072  * When we write apps on the host to connect(), the GUID ServiceID is used.
1073  * When we write apps in FreeBSD VM to connect(), we only need to specify the
1074  * port and the driver will form the GUID and use that to request the host.
1075  *
1076  * From the perspective of FreeBSD VM, the remote ephemeral port (i.e. the
1077  * auto-generated remote port for a connect request initiated by the host's
1078  * connect()) is set to HVADDR_PORT_UNKNOWN, which is not realy used on the
1079  * FreeBSD guest.
1080  */
1081 
1082 /*
1083  * Older HyperV hosts (vmbus version 'VMBUS_VERSION_WIN10' or before)
1084  * restricts HyperV socket ring buffer size to six 4K pages. Newer
1085  * HyperV hosts doen't have this limit.
1086  */
1087 #define HVS_RINGBUF_RCV_SIZE	(PAGE_SIZE * 6)
1088 #define HVS_RINGBUF_SND_SIZE	(PAGE_SIZE * 6)
1089 #define HVS_RINGBUF_MAX_SIZE	(PAGE_SIZE * 64)
1090 
1091 struct hvsock_sc {
1092 	device_t		dev;
1093 	struct hvs_pcb		*pcb;
1094 	struct vmbus_channel	*channel;
1095 };
1096 
1097 static bool
1098 hvsock_chan_readable(struct vmbus_channel *chan)
1099 {
1100 	uint32_t readable = vmbus_chan_read_available(chan);
1101 
1102 	return (readable >= HVSOCK_PKT_LEN(0));
1103 }
1104 
1105 static void
1106 hvsock_chan_cb(struct vmbus_channel *chan, void *context)
1107 {
1108 	struct hvs_pcb *pcb = (struct hvs_pcb *) context;
1109 	struct socket *so;
1110 	uint32_t canwrite;
1111 
1112 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1113 	    "%s: host send us a wakeup on rb data, pcb = %p\n",
1114 	    __func__, pcb);
1115 
1116 	/*
1117 	 * Check if the socket is still attached and valid.
1118 	 * Here we know channel is still open. Need to make
1119 	 * sure the socket has not been closed or freed.
1120 	 */
1121 	(void) hvs_trans_lock();
1122 	so = hsvpcb2so(pcb);
1123 
1124 	if (pcb->chan != NULL && so != NULL) {
1125 		/*
1126 		 * Wake up reader if there are data to read.
1127 		 */
1128 		SOCKBUF_LOCK(&(so)->so_rcv);
1129 
1130 		HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1131 		    "%s: read available = %u\n", __func__,
1132 		    vmbus_chan_read_available(pcb->chan));
1133 
1134 		if (hvsock_chan_readable(pcb->chan))
1135 			sorwakeup_locked(so);
1136 		else
1137 			SOCKBUF_UNLOCK(&(so)->so_rcv);
1138 
1139 		/*
1140 		 * Wake up sender if space becomes available to write.
1141 		 */
1142 		SOCKBUF_LOCK(&(so)->so_snd);
1143 		canwrite = hvsock_canwrite_check(pcb);
1144 
1145 		HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1146 		    "%s: canwrite = %u\n", __func__, canwrite);
1147 
1148 		if (canwrite > 0) {
1149 			sowwakeup_locked(so);
1150 		} else {
1151 			SOCKBUF_UNLOCK(&(so)->so_snd);
1152 		}
1153 	}
1154 
1155 	hvs_trans_unlock();
1156 
1157 	return;
1158 }
1159 
1160 static int
1161 hvsock_br_callback(void *datap, int cplen, void *cbarg)
1162 {
1163 	struct hvs_callback_arg *arg = (struct hvs_callback_arg *)cbarg;
1164 	struct uio *uio = arg->uio;
1165 	struct sockbuf *sb = arg->sb;
1166 	int error = 0;
1167 
1168 	if (cbarg == NULL || datap == NULL)
1169 		return (EINVAL);
1170 
1171 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1172 	    "%s: called, uio_rw = %s, uio_resid = %zd, cplen = %u, "
1173 	    "datap = %p\n",
1174 	    __func__, (uio->uio_rw == UIO_READ) ? "read from br":"write to br",
1175 	    uio->uio_resid, cplen, datap);
1176 
1177 	if (sb)
1178 		SOCKBUF_UNLOCK(sb);
1179 
1180 	error = uiomove(datap, cplen, uio);
1181 
1182 	if (sb)
1183 		SOCKBUF_LOCK(sb);
1184 
1185 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1186 	    "%s: after uiomove, uio_resid = %zd, error = %d\n",
1187 	    __func__, uio->uio_resid, error);
1188 
1189 	return (error);
1190 }
1191 
1192 static int
1193 hvsock_send_data(struct vmbus_channel *chan, struct uio *uio,
1194     uint32_t to_write, struct sockbuf *sb)
1195 {
1196 	struct hvs_pkt_header hvs_pkt;
1197 	int hvs_pkthlen, hvs_pktlen, pad_pktlen, hlen, error = 0;
1198 	uint64_t pad = 0;
1199 	struct iovec iov[3];
1200 	struct hvs_callback_arg cbarg;
1201 
1202 	if (chan == NULL)
1203 		return (ENOTCONN);
1204 
1205 	hlen = sizeof(struct vmbus_chanpkt_hdr);
1206 	hvs_pkthlen = sizeof(struct hvs_pkt_header);
1207 	hvs_pktlen = hvs_pkthlen + to_write;
1208 	pad_pktlen = VMBUS_CHANPKT_TOTLEN(hvs_pktlen);
1209 
1210 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1211 	    "%s: hlen = %u, hvs_pkthlen = %u, hvs_pktlen = %u, "
1212 	    "pad_pktlen = %u, data_len = %u\n",
1213 	    __func__, hlen, hvs_pkthlen, hvs_pktlen, pad_pktlen, to_write);
1214 
1215 	hvs_pkt.chan_pkt_hdr.cph_type = VMBUS_CHANPKT_TYPE_INBAND;
1216 	hvs_pkt.chan_pkt_hdr.cph_flags = 0;
1217 	VMBUS_CHANPKT_SETLEN(hvs_pkt.chan_pkt_hdr.cph_hlen, hlen);
1218 	VMBUS_CHANPKT_SETLEN(hvs_pkt.chan_pkt_hdr.cph_tlen, pad_pktlen);
1219 	hvs_pkt.chan_pkt_hdr.cph_xactid = 0;
1220 
1221 	hvs_pkt.vmpipe_pkt_hdr.vmpipe_pkt_type = 1;
1222 	hvs_pkt.vmpipe_pkt_hdr.vmpipe_data_size = to_write;
1223 
1224 	cbarg.uio = uio;
1225 	cbarg.sb = sb;
1226 
1227 	if (uio && to_write > 0) {
1228 		iov[0].iov_base = &hvs_pkt;
1229 		iov[0].iov_len = hvs_pkthlen;
1230 		iov[1].iov_base = NULL;
1231 		iov[1].iov_len = to_write;
1232 		iov[2].iov_base = &pad;
1233 		iov[2].iov_len = pad_pktlen - hvs_pktlen;
1234 
1235 		error = vmbus_chan_iov_send(chan, iov, 3,
1236 		    hvsock_br_callback, &cbarg);
1237 	} else {
1238 		if (to_write == 0) {
1239 			iov[0].iov_base = &hvs_pkt;
1240 			iov[0].iov_len = hvs_pkthlen;
1241 			iov[1].iov_base = &pad;
1242 			iov[1].iov_len = pad_pktlen - hvs_pktlen;
1243 			error = vmbus_chan_iov_send(chan, iov, 2, NULL, NULL);
1244 		}
1245 	}
1246 
1247 	if (error) {
1248 		HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1249 		    "%s: error = %d\n", __func__, error);
1250 	}
1251 
1252 	return (error);
1253 }
1254 
1255 /*
1256  * Check if we have data on current ring buffer to read
1257  * or not. If not, advance the ring buffer read index to
1258  * next packet. Update the recev_data_len and recev_data_off
1259  * to new value.
1260  * Return the number of bytes can read.
1261  */
1262 static uint32_t
1263 hvsock_canread_check(struct hvs_pcb *pcb)
1264 {
1265 	uint32_t advance;
1266 	uint32_t tlen, hlen, dlen;
1267 	uint32_t bytes_canread = 0;
1268 	int error;
1269 
1270 	if (pcb == NULL || pcb->chan == NULL) {
1271 		pcb->so->so_error = EIO;
1272 		return (0);
1273 	}
1274 
1275 	/* Still have data not read yet on current packet */
1276 	if (pcb->recv_data_len > 0)
1277 		return (pcb->recv_data_len);
1278 
1279 	if (pcb->rb_init)
1280 		advance =
1281 		    VMBUS_CHANPKT_GETLEN(pcb->hvs_pkt.chan_pkt_hdr.cph_tlen);
1282 	else
1283 		advance = 0;
1284 
1285 	bytes_canread = vmbus_chan_read_available(pcb->chan);
1286 
1287 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1288 	    "%s: bytes_canread on br = %u, advance = %u\n",
1289 	    __func__, bytes_canread, advance);
1290 
1291 	if (pcb->rb_init && bytes_canread == (advance + sizeof(uint64_t))) {
1292 		/*
1293 		 * Nothing to read. Need to advance the rindex before
1294 		 * calling sbwait, so host knows to wake us up when data
1295 		 * is available to read on rb.
1296 		 */
1297 		error = vmbus_chan_recv_idxadv(pcb->chan, advance);
1298 		if (error) {
1299 			HVSOCK_DBG(HVSOCK_DBG_ERR,
1300 			    "%s: after calling vmbus_chan_recv_idxadv, "
1301 			    "got error = %d\n",  __func__, error);
1302 			return (0);
1303 		} else {
1304 			pcb->rb_init = false;
1305 			pcb->recv_data_len = 0;
1306 			pcb->recv_data_off = 0;
1307 			bytes_canread = vmbus_chan_read_available(pcb->chan);
1308 
1309 			HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1310 			    "%s: advanced %u bytes, "
1311 			    " bytes_canread on br now = %u\n",
1312 			    __func__, advance, bytes_canread);
1313 
1314 			if (bytes_canread == 0)
1315 				return (0);
1316 			else
1317 				advance = 0;
1318 		}
1319 	}
1320 
1321 	if (bytes_canread <
1322 	    advance + (sizeof(struct hvs_pkt_header) + sizeof(uint64_t)))
1323 		return (0);
1324 
1325 	error = vmbus_chan_recv_peek(pcb->chan, &pcb->hvs_pkt,
1326 	    sizeof(struct hvs_pkt_header), advance);
1327 
1328 	/* Don't have anything to read */
1329 	if (error) {
1330 		HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1331 		    "%s: after calling vmbus_chan_recv_peek, got error = %d\n",
1332 		    __func__, error);
1333 		return (0);
1334 	}
1335 
1336 	/*
1337 	 * We just read in a new packet header. Do some sanity checks.
1338 	 */
1339 	tlen = VMBUS_CHANPKT_GETLEN(pcb->hvs_pkt.chan_pkt_hdr.cph_tlen);
1340 	hlen = VMBUS_CHANPKT_GETLEN(pcb->hvs_pkt.chan_pkt_hdr.cph_hlen);
1341 	dlen = pcb->hvs_pkt.vmpipe_pkt_hdr.vmpipe_data_size;
1342 	if (__predict_false(hlen < sizeof(struct vmbus_chanpkt_hdr)) ||
1343 	    __predict_false(hlen > tlen) ||
1344 	    __predict_false(tlen < dlen + sizeof(struct hvs_pkt_header))) {
1345 		HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1346 		    "invalid tlen(%u), hlen(%u) or dlen(%u)\n",
1347 		    tlen, hlen, dlen);
1348 		pcb->so->so_error = EIO;
1349 		return (0);
1350 	}
1351 	if (pcb->rb_init == false)
1352 		pcb->rb_init = true;
1353 
1354 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1355 	    "Got new pkt tlen(%u), hlen(%u) or dlen(%u)\n",
1356 	    tlen, hlen, dlen);
1357 
1358 	/* The other side has sent a close FIN */
1359 	if (dlen == 0) {
1360 		HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1361 		    "%s: Received FIN from other side\n", __func__);
1362 		/* inform the caller by seting so_error to ESHUTDOWN */
1363 		pcb->so->so_error = ESHUTDOWN;
1364 	}
1365 
1366 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1367 	    "%s: canread on receive ring is %u \n", __func__, dlen);
1368 
1369 	pcb->recv_data_len = dlen;
1370 	pcb->recv_data_off = 0;
1371 
1372 	return (pcb->recv_data_len);
1373 }
1374 
1375 static uint32_t
1376 hvsock_canwrite_check(struct hvs_pcb *pcb)
1377 {
1378 	uint32_t writeable;
1379 	uint32_t ret;
1380 
1381 	if (pcb == NULL || pcb->chan == NULL)
1382 		return (0);
1383 
1384 	writeable = vmbus_chan_write_available(pcb->chan);
1385 
1386 	/*
1387 	 * We must always reserve a 0-length-payload packet for the FIN.
1388 	 */
1389 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1390 	    "%s: writeable is %u, should be greater than %ju\n",
1391 	    __func__, writeable,
1392 	    (uintmax_t)(HVSOCK_PKT_LEN(1) + HVSOCK_PKT_LEN(0)));
1393 
1394 	if (writeable < HVSOCK_PKT_LEN(1) + HVSOCK_PKT_LEN(0)) {
1395 		/*
1396 		 * The Tx ring seems full.
1397 		 */
1398 		return (0);
1399 	}
1400 
1401 	ret = writeable - HVSOCK_PKT_LEN(0) - HVSOCK_PKT_LEN(0);
1402 
1403 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1404 	    "%s: available size is %u\n", __func__, rounddown2(ret, 8));
1405 
1406 	return (rounddown2(ret, 8));
1407 }
1408 
1409 static void
1410 hvsock_set_chan_pending_send_size(struct vmbus_channel *chan)
1411 {
1412 	vmbus_chan_set_pending_send_size(chan,
1413 	    HVSOCK_PKT_LEN(HVSOCK_SEND_BUF_SZ));
1414 }
1415 
1416 static int
1417 hvsock_open_channel(struct vmbus_channel *chan, struct socket *so)
1418 {
1419 	unsigned int rcvbuf, sndbuf;
1420 	struct hvs_pcb *pcb = so2hvspcb(so);
1421 	int ret;
1422 
1423 	if (vmbus_current_version < VMBUS_VERSION_WIN10_V5) {
1424 		sndbuf = HVS_RINGBUF_SND_SIZE;
1425 		rcvbuf = HVS_RINGBUF_RCV_SIZE;
1426 	} else {
1427 		sndbuf = MAX(so->so_snd.sb_hiwat, HVS_RINGBUF_SND_SIZE);
1428 		sndbuf = MIN(sndbuf, HVS_RINGBUF_MAX_SIZE);
1429 		sndbuf = rounddown2(sndbuf, PAGE_SIZE);
1430 		rcvbuf = MAX(so->so_rcv.sb_hiwat, HVS_RINGBUF_RCV_SIZE);
1431 		rcvbuf = MIN(rcvbuf, HVS_RINGBUF_MAX_SIZE);
1432 		rcvbuf = rounddown2(rcvbuf, PAGE_SIZE);
1433 	}
1434 
1435 	/*
1436 	 * Can only read whatever user provided size of data
1437 	 * from ring buffer. Turn off batched reading.
1438 	 */
1439 	vmbus_chan_set_readbatch(chan, false);
1440 
1441 	ret = vmbus_chan_open(chan, sndbuf, rcvbuf, NULL, 0,
1442 	    hvsock_chan_cb, pcb);
1443 
1444 	if (ret != 0) {
1445 		HVSOCK_DBG(HVSOCK_DBG_ERR,
1446 		    "%s: failed to open hvsock channel, sndbuf = %u, "
1447 		    "rcvbuf = %u\n", __func__, sndbuf, rcvbuf);
1448 	} else {
1449 		HVSOCK_DBG(HVSOCK_DBG_INFO,
1450 		    "%s: hvsock channel opened, sndbuf = %u, i"
1451 		    "rcvbuf = %u\n", __func__, sndbuf, rcvbuf);
1452 		/*
1453 		 * Se the pending send size so to receive wakeup
1454 		 * signals from host when there is enough space on
1455 		 * rx buffer ring to write.
1456 		 */
1457 		hvsock_set_chan_pending_send_size(chan);
1458 	}
1459 
1460 	return ret;
1461 }
1462 
1463 /*
1464  * Guest is listening passively on the socket. Open channel and
1465  * create a new socket for the conneciton.
1466  */
1467 static void
1468 hvsock_open_conn_passive(struct vmbus_channel *chan, struct socket *so,
1469     struct hvsock_sc *sc)
1470 {
1471 	struct socket *new_so;
1472 	struct hvs_pcb *new_pcb, *pcb;
1473 	int error;
1474 
1475 	/* Do nothing if socket is not listening */
1476 	if (!SOLISTENING(so)) {
1477 		HVSOCK_DBG(HVSOCK_DBG_ERR,
1478 		    "%s: socket is not a listening one\n", __func__);
1479 		return;
1480 	}
1481 
1482 	/*
1483 	 * Create a new socket. This will call pru_attach to complete
1484 	 * the socket initialization and put the new socket onto
1485 	 * listening socket's sol_incomp list, waiting to be promoted
1486 	 * to sol_comp list.
1487 	 * The new socket created has ref count 0. There is no other
1488 	 * thread that changes the state of this new one at the
1489 	 * moment, so we don't need to hold its lock while opening
1490 	 * channel and filling out its pcb information.
1491 	 */
1492 	new_so = sonewconn(so, 0);
1493 	if (!new_so)
1494 		HVSOCK_DBG(HVSOCK_DBG_ERR,
1495 		    "%s: creating new socket failed\n", __func__);
1496 
1497 	/*
1498 	 * Now open the vmbus channel. If it fails, the socket will be
1499 	 * on the listening socket's sol_incomp queue until it is
1500 	 * replaced and aborted.
1501 	 */
1502 	error = hvsock_open_channel(chan, new_so);
1503 	if (error) {
1504 		new_so->so_error = error;
1505 		return;
1506 	}
1507 
1508 	pcb = so->so_pcb;
1509 	new_pcb = new_so->so_pcb;
1510 
1511 	hvs_addr_set(&(new_pcb->local_addr), pcb->local_addr.hvs_port);
1512 	/* Remote port is unknown to guest in this type of conneciton */
1513 	hvs_addr_set(&(new_pcb->remote_addr), HVADDR_PORT_UNKNOWN);
1514 	new_pcb->chan = chan;
1515 	new_pcb->recv_data_len = 0;
1516 	new_pcb->recv_data_off = 0;
1517 	new_pcb->rb_init = false;
1518 
1519 	new_pcb->vm_srv_id = *vmbus_chan_guid_type(chan);
1520 	new_pcb->host_srv_id = *vmbus_chan_guid_inst(chan);
1521 
1522 	hvs_insert_socket_on_list(new_so, HVS_LIST_CONNECTED);
1523 
1524 	sc->pcb = new_pcb;
1525 
1526 	/*
1527 	 * Change the socket state to SS_ISCONNECTED. This will promote
1528 	 * the socket to sol_comp queue and wake up the thread which
1529 	 * is accepting connection.
1530 	 */
1531 	soisconnected(new_so);
1532 }
1533 
1534 
1535 /*
1536  * Guest is actively connecting to host.
1537  */
1538 static void
1539 hvsock_open_conn_active(struct vmbus_channel *chan, struct socket *so)
1540 {
1541 	struct hvs_pcb *pcb;
1542 	int error;
1543 
1544 	error = hvsock_open_channel(chan, so);
1545 	if (error) {
1546 		so->so_error = error;
1547 		return;
1548 	}
1549 
1550 	pcb = so->so_pcb;
1551 	pcb->chan = chan;
1552 	pcb->recv_data_len = 0;
1553 	pcb->recv_data_off = 0;
1554 	pcb->rb_init = false;
1555 
1556 	mtx_lock(&hvs_trans_socks_mtx);
1557 	__hvs_remove_socket_from_list(so, HVS_LIST_BOUND);
1558 	__hvs_insert_socket_on_list(so, HVS_LIST_CONNECTED);
1559 	mtx_unlock(&hvs_trans_socks_mtx);
1560 
1561 	/*
1562 	 * Change the socket state to SS_ISCONNECTED. This will wake up
1563 	 * the thread sleeping in connect call.
1564 	 */
1565 	soisconnected(so);
1566 }
1567 
1568 static void
1569 hvsock_open_connection(struct vmbus_channel *chan, struct hvsock_sc *sc)
1570 {
1571 	struct hyperv_guid *inst_guid, *type_guid;
1572 	bool conn_from_host;
1573 	struct sockaddr_hvs addr;
1574 	struct socket *so;
1575 	struct hvs_pcb *pcb;
1576 
1577 	type_guid = (struct hyperv_guid *) vmbus_chan_guid_type(chan);
1578 	inst_guid = (struct hyperv_guid *) vmbus_chan_guid_inst(chan);
1579 	conn_from_host = vmbus_chan_is_hvs_conn_from_host(chan);
1580 
1581 	HVSOCK_DBG(HVSOCK_DBG_INFO, "type_guid is ");
1582 	hvsock_print_guid(type_guid);
1583 	HVSOCK_DBG(HVSOCK_DBG_INFO, "inst_guid is ");
1584 	hvsock_print_guid(inst_guid);
1585 	HVSOCK_DBG(HVSOCK_DBG_INFO, "connection %s host\n",
1586 	    (conn_from_host == true ) ? "from" : "to");
1587 
1588 	/*
1589 	 * The listening port should be in [0, MAX_LISTEN_PORT]
1590 	 */
1591 	if (!is_valid_srv_id(type_guid))
1592 		return;
1593 
1594 	/*
1595 	 * There should be a bound socket already created no matter
1596 	 * it is a passive or active connection.
1597 	 * For host initiated connection (passive on guest side),
1598 	 * the  type_guid contains the port which guest is bound and
1599 	 * listening.
1600 	 * For the guest initiated connection (active on guest side),
1601 	 * the inst_guid contains the port that guest has auto bound
1602 	 * to.
1603 	 */
1604 	hvs_addr_init(&addr, conn_from_host ? type_guid : inst_guid);
1605 	so = hvs_find_socket_on_list(&addr, HVS_LIST_BOUND);
1606 	if (!so) {
1607 		HVSOCK_DBG(HVSOCK_DBG_ERR,
1608 		    "%s: no bound socket found for port %u\n",
1609 		    __func__, addr.hvs_port);
1610 		return;
1611 	}
1612 
1613 	if (conn_from_host) {
1614 		hvsock_open_conn_passive(chan, so, sc);
1615 	} else {
1616 		(void) hvs_trans_lock();
1617 		pcb = so->so_pcb;
1618 		if (pcb && pcb->so) {
1619 			sc->pcb = so2hvspcb(so);
1620 			hvsock_open_conn_active(chan, so);
1621 		} else {
1622 			HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1623 			    "%s: channel detached before open\n", __func__);
1624 		}
1625 		hvs_trans_unlock();
1626 	}
1627 
1628 }
1629 
1630 static int
1631 hvsock_probe(device_t dev)
1632 {
1633 	struct vmbus_channel *channel = vmbus_get_channel(dev);
1634 
1635 	if (!channel || !vmbus_chan_is_hvs(channel)) {
1636 		HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1637 		    "hvsock_probe called but not a hvsock channel id %u\n",
1638 		    vmbus_chan_id(channel));
1639 
1640 		return ENXIO;
1641 	} else {
1642 		HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1643 		    "hvsock_probe got a hvsock channel id %u\n",
1644 		    vmbus_chan_id(channel));
1645 
1646 		return BUS_PROBE_DEFAULT;
1647 	}
1648 }
1649 
1650 static int
1651 hvsock_attach(device_t dev)
1652 {
1653 	struct vmbus_channel *channel = vmbus_get_channel(dev);
1654 	struct hvsock_sc *sc = (struct hvsock_sc *)device_get_softc(dev);
1655 
1656 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE, "hvsock_attach called.\n");
1657 
1658 	hvsock_open_connection(channel, sc);
1659 
1660 	/*
1661 	 * Always return success. On error the host will rescind the device
1662 	 * in 30 seconds and we can do cleanup at that time in
1663 	 * vmbus_chan_msgproc_chrescind().
1664 	 */
1665 	return (0);
1666 }
1667 
1668 static int
1669 hvsock_detach(device_t dev)
1670 {
1671 	struct hvsock_sc *sc = (struct hvsock_sc *)device_get_softc(dev);
1672 	struct socket *so;
1673 	int retry;
1674 
1675 	if (bootverbose)
1676 		device_printf(dev, "hvsock_detach called.\n");
1677 
1678 	HVSOCK_DBG(HVSOCK_DBG_VERBOSE, "hvsock_detach called.\n");
1679 
1680 	if (sc->pcb != NULL) {
1681 		(void) hvs_trans_lock();
1682 
1683 		so = hsvpcb2so(sc->pcb);
1684 		if (so) {
1685 			/* Close the connection */
1686 			if (so->so_state &
1687 			    (SS_ISCONNECTED|SS_ISCONNECTING|SS_ISDISCONNECTING))
1688 				soisdisconnected(so);
1689 		}
1690 
1691 		mtx_lock(&hvs_trans_socks_mtx);
1692 		__hvs_remove_pcb_from_list(sc->pcb,
1693 		    HVS_LIST_BOUND | HVS_LIST_CONNECTED);
1694 		mtx_unlock(&hvs_trans_socks_mtx);
1695 
1696 		/*
1697 		 * Close channel while no reader and sender are working
1698 		 * on the buffer rings.
1699 		 */
1700 		if (so) {
1701 			retry = 0;
1702 			while (SOCK_IO_RECV_LOCK(so, 0) == EWOULDBLOCK) {
1703 				/*
1704 				 * Someone is reading, rx br is busy
1705 				 */
1706 				soisdisconnected(so);
1707 				DELAY(500);
1708 				HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1709 				    "waiting for rx reader to exit, "
1710 				    "retry = %d\n", retry++);
1711 			}
1712 			retry = 0;
1713 			while (SOCK_IO_SEND_LOCK(so, 0) == EWOULDBLOCK) {
1714 				/*
1715 				 * Someone is sending, tx br is busy
1716 				 */
1717 				soisdisconnected(so);
1718 				DELAY(500);
1719 				HVSOCK_DBG(HVSOCK_DBG_VERBOSE,
1720 				    "waiting for tx sender to exit, "
1721 				    "retry = %d\n", retry++);
1722 			}
1723 		}
1724 
1725 
1726 		bzero(sc->pcb, sizeof(struct hvs_pcb));
1727 		free(sc->pcb, M_HVSOCK);
1728 		sc->pcb = NULL;
1729 
1730 		if (so) {
1731 			SOCK_IO_RECV_UNLOCK(so);
1732 			SOCK_IO_SEND_UNLOCK(so);
1733 			so->so_pcb = NULL;
1734 		}
1735 
1736 		hvs_trans_unlock();
1737 	}
1738 
1739 	vmbus_chan_close(vmbus_get_channel(dev));
1740 
1741 	return (0);
1742 }
1743 
1744 static device_method_t hvsock_methods[] = {
1745 	/* Device interface */
1746 	DEVMETHOD(device_probe, hvsock_probe),
1747 	DEVMETHOD(device_attach, hvsock_attach),
1748 	DEVMETHOD(device_detach, hvsock_detach),
1749 	DEVMETHOD_END
1750 };
1751 
1752 static driver_t hvsock_driver = {
1753 	"hv_sock",
1754 	hvsock_methods,
1755 	sizeof(struct hvsock_sc)
1756 };
1757 
1758 static devclass_t hvsock_devclass;
1759 
1760 DRIVER_MODULE(hvsock, vmbus, hvsock_driver, hvsock_devclass, NULL, NULL);
1761 MODULE_VERSION(hvsock, 1);
1762 MODULE_DEPEND(hvsock, vmbus, 1, 1, 1);
1763