sys/linux: add descriptions of qat_adf_ctl

Add descriptions for qat_adf_ctl. It might need an intel qat device.
Update #533.

3 files changed, 141 insertions, 1 deletions

diff --git a/sys/linux/dev_qat_adf_ctl.txt b/sys/linux/dev_qat_adf_ctl.txt
new file mode 100644
index 000000000..25d646c72
--- /dev/null
+++ b/sys/linux/dev_qat_adf_ctl.txt
@@ -0,0 +1,116 @@
+# Copyright 2020 syzkaller project authors. All rights reserved.
+# Use of this source code is governed by Apache 2 LICENSE that can be found in the LICENSE file.
+
+# NEED: These descriptions need an actual Intel QAT device or an emulation so we can fuzz deeper into the subsystem.
+# /dev/qat_adf_ctl is only the control interface, and currently ioctl$IOCTL_GET_NUM_DEVICES returns 0 on qemu.
+
+include <linux/fcntl.h>
+include <drivers/crypto/qat/qat_common/adf_cfg_user.h>
+include <drivers/crypto/qat/qat_common/adf_cfg_common.h>
+resource fd_qat[fd]
+
+openat$qat_adf_ctl(fd const[AT_FDCWD], file ptr[in, string["/dev/qat_adf_ctl"]], flags flags[open_flags], mode const[0]) fd_qat
+ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(fd fd_qat, cmd const[IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS], arg ptr[in, adf_user_cfg_ctl_data])
+ioctl$IOCTL_STOP_ACCEL_DEV(fd fd_qat, cmd const[IOCTL_STOP_ACCEL_DEV], arg ptr[in, adf_user_cfg_ctl_data])
+ioctl$IOCTL_START_ACCEL_DEV(fd fd_qat, cmd const[IOCTL_START_ACCEL_DEV], arg ptr[in, adf_user_cfg_ctl_data])
+ioctl$IOCTL_GET_NUM_DEVICES(fd fd_qat, cmd const[IOCTL_GET_NUM_DEVICES], arg ptr[out, int32])
+ioctl$IOCTL_STATUS_ACCEL_DEV(fd fd_qat, cmd const[IOCTL_STATUS_ACCEL_DEV], arg ptr[inout, adf_dev_status_info])
+
+adf_user_cfg_ctl_data {
+	config_section	adf_ptr64[adf_user_cfg_section]
+	device_id	int8
+} [packed]
+
+# Section
+
+adf_user_cfg_section {
+	name	string[qat_section_name, ADF_CFG_MAX_SECTION_LEN_IN_BYTES]
+	params	adf_ptr64[adf_user_cfg_key_val]
+	next	adf_ptr64[adf_user_cfg_section]
+} [packed]
+
+qat_section_name = "GENERAL", "KERNEL", "Accelerator", "Accelerator0", "Accelerator1"
+
+# Key-values
+
+adf_user_cfg_key_val [
+	adf_dec	adf_user_cfg_key_val_t[ADF_DEC, adf_user_cfg_val_dec]
+	adf_hex	adf_user_cfg_key_val_t[ADF_HEX, adf_user_cfg_val_hex]
+	adf_str	adf_user_cfg_key_val_t[ADF_STR, adf_user_cfg_val_str]
+]
+
+type adf_user_cfg_key_val_t[TYPE, VAL] {
+	key	adf_user_cfg_key
+	val	VAL
+	next	adf_ptr64[adf_user_cfg_key_val]
+	type	const[TYPE, int32]
+} [packed]
+
+# Key
+
+adf_user_cfg_key [
+	normal	string[adf_user_cfg_normal_keys, ADF_CFG_MAX_KEY_LEN_IN_BYTES]
+	format	adf_user_cfg_format_keys
+	bank	adf_user_cfg_bank_keys
+]
+
+adf_user_cfg_format_keys {
+	prefix	stringnoz[adf_user_cfg_format_keys_prefix]
+	number	stringnoz[adf_user_cfg_numbers]
+	postfix	string[adf_user_cfg_format_keys_postfix, ADF_KEYS_POSTFIX_MAX_LEN]
+} [size[ADF_CFG_MAX_KEY_LEN_IN_BYTES]]
+
+adf_user_cfg_bank_keys {
+	prefix	stringnoz["Bank"]
+	number	stringnoz[adf_user_cfg_numbers]
+	postfix	string[adf_user_cfg_bank_keys_postfix, ADF_KEYS_POSTFIX_MAX_LEN]
+} [size[ADF_CFG_MAX_KEY_LEN_IN_BYTES]]
+
+adf_user_cfg_normal_keys = "NumberCyInstances", "NumberDcInstances"
+adf_user_cfg_numbers = "0", "1", "2", "3", "4", "5"
+adf_user_cfg_format_keys_prefix = "Cy", "Dc"
+adf_user_cfg_format_keys_postfix = "NumConcurrentSymRequests", "NumConcurrentAsymRequests", "NumConcurrentRequests", "RingAsymTx", "RingSymTx", "RingAsymRx", "RingSymRx", "RingTx", "RingRx", "BankNumber"
+adf_user_cfg_bank_keys_postfix = "InterruptCoalescingEnabled", "InterruptCoalescingTimerNs", "InterruptCoalescingNumResponses", "CoreAffinity"
+
+# This constant 32 needs to be at least the length of the longest string in
+# adf_user_cfg_format_keys_postfix and adf_user_cfg_bank_keys_postfix
+define ADF_KEYS_POSTFIX_MAX_LEN	32
+
+# Value
+
+adf_user_cfg_val_dec {
+	val	fmt[dec, intptr]
+	null	const[0, int8]
+} [packed, size[ADF_CFG_MAX_VAL_LEN_IN_BYTES]]
+
+adf_user_cfg_val_hex {
+	val	fmt[hex, intptr]
+	null	const[0, int8]
+} [packed, size[ADF_CFG_MAX_VAL_LEN_IN_BYTES]]
+
+adf_user_cfg_val_str {
+	val	array[int8, ADF_CFG_MAX_VAL_LEN_IN_BYTES]
+}
+
+# Ptr
+
+type adf_ptr64[T] {
+	ptr	ptr[in, T, opt]
+} [size[8]]
+
+adf_dev_status_info {
+	type			flags[adf_device_type, int32]
+	accel_id		int32
+	instance_id		int32
+	num_ae			int8
+	num_accel		int8
+	num_logical_accel	int8
+	banks_per_accel		int8
+	state			int8
+	bus			int8
+	dev			int8
+	fun			int8
+	name			array[int8, MAX_DEVICE_NAME_SIZE]
+}
+
+adf_device_type = DEV_UNKNOWN, DEV_DH895XCC, DEV_DH895XCCVF, DEV_C62X, DEV_C62XVF, DEV_C3XXX, DEV_C3XXXVF
diff --git a/sys/linux/dev_qat_adf_ctl.txt.const b/sys/linux/dev_qat_adf_ctl.txt.const
new file mode 100644
index 000000000..193f269cd
--- /dev/null
+++ b/sys/linux/dev_qat_adf_ctl.txt.const
@@ -0,0 +1,25 @@
+# Code generated by syz-sysgen. DO NOT EDIT.
+arches = 386, amd64, arm, arm64, mips64le, ppc64le, riscv64, s390x
+ADF_CFG_MAX_KEY_LEN_IN_BYTES = 64
+ADF_CFG_MAX_SECTION_LEN_IN_BYTES = 64
+ADF_CFG_MAX_VAL_LEN_IN_BYTES = 64
+ADF_DEC = 0
+ADF_HEX = 1
+ADF_KEYS_POSTFIX_MAX_LEN = 32
+ADF_STR = 2
+AT_FDCWD = 18446744073709551516
+DEV_C3XXX = 5
+DEV_C3XXXVF = 6
+DEV_C62X = 3
+DEV_C62XVF = 4
+DEV_DH895XCC = 1
+DEV_DH895XCCVF = 2
+DEV_UNKNOWN = 0
+IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS = 1074356480, mips64le:ppc64le:2148098304
+IOCTL_GET_NUM_DEVICES = 1074028804, mips64le:ppc64le:2147770628
+IOCTL_START_ACCEL_DEV = 1074356482, mips64le:ppc64le:2148098306
+IOCTL_STATUS_ACCEL_DEV = 1074028803, mips64le:ppc64le:2147770627
+IOCTL_STOP_ACCEL_DEV = 1074356481, mips64le:ppc64le:2148098305
+MAX_DEVICE_NAME_SIZE = 32
+__NR_ioctl = 54, amd64:16, arm64:riscv64:29, mips64le:5015
+__NR_openat = 56, 386:295, amd64:257, arm:322, mips64le:5247, ppc64le:286, s390x:288
diff --git a/sys/linux/sys.txt b/sys/linux/sys.txt
index e823841cb..c55f9573b 100644
--- a/sys/linux/sys.txt
+++ b/sys/linux/sys.txt
@@ -550,7 +550,6 @@ syz_open_dev$media(dev ptr[in, string["/dev/media#"]], id intptr, flags flags[op
 openat$null(fd const[AT_FDCWD], file ptr[in, string["/dev/null"]], flags flags[open_flags], mode const[0]) fd
 openat$zero(fd const[AT_FDCWD], file ptr[in, string["/dev/zero"]], flags flags[open_flags], mode const[0]) fd
 openat$full(fd const[AT_FDCWD], file ptr[in, string["/dev/full"]], flags flags[open_flags], mode const[0]) fd
-openat$qat_adf_ctl(fd const[AT_FDCWD], file ptr[in, string["/dev/qat_adf_ctl"]], flags flags[open_flags], mode const[0]) fd
 openat$irnet(fd const[AT_FDCWD], file ptr[in, string["/dev/irnet"]], flags flags[open_flags], mode const[0]) fd
 openat$hwrng(fd const[AT_FDCWD], file ptr[in, string["/dev/hwrng"]], flags flags[open_flags], mode const[0]) fd
 openat$hpet(fd const[AT_FDCWD], file ptr[in, string["/dev/hpet"]], flags flags[open_flags], mode const[0]) fd