[PATCH 4/6] nvme/ioctl: pass iov_iter to nvme_map_user_request()
From: Caleb Sander Mateos
Date: Wed Sep 09 2026 - 18:44:17 EST
To allow nvme_map_user_request() to accept an io_uring registered buffer
(represented as a ITER_BVEC iov_iter) for the metadata buffer, pass it
as an iov_iter argument. Move the conversions from user address-length
pairs into iov_iters to the callers. A NULL iov_iter pointer represents
no metadata buffer.
Signed-off-by: Caleb Sander Mateos <csander@xxxxxxxxxxxxxxx>
---
drivers/nvme/host/ioctl.c | 46 +++++++++++++++++++++++----------------
1 file changed, 27 insertions(+), 19 deletions(-)
diff --git a/drivers/nvme/host/ioctl.c b/drivers/nvme/host/ioctl.c
index e69c49c334a0..8e722184ecf1 100644
--- a/drivers/nvme/host/ioctl.c
+++ b/drivers/nvme/host/ioctl.c
@@ -152,21 +152,20 @@ static struct request *nvme_alloc_user_request(struct request_queue *q,
nvme_req(req)->flags |= NVME_REQ_USERCMD;
return req;
}
static int nvme_map_user_request(struct request *req, u64 ubuffer,
- unsigned bufflen, void __user *meta_buffer, unsigned meta_len,
- struct iov_iter *iter, unsigned int flags)
+ unsigned bufflen, struct iov_iter *iter,
+ struct iov_iter *meta_iter, unsigned int flags)
{
struct request_queue *q = req->q;
struct nvme_ns *ns = q->queuedata;
struct block_device *bdev = ns ? ns->disk->part0 : NULL;
bool supports_metadata = bdev && blk_get_integrity(bdev->bd_disk);
- bool has_metadata = meta_buffer && meta_len;
int ret;
- if (has_metadata && !supports_metadata)
+ if (meta_iter && !supports_metadata)
return -EINVAL;
if (iter)
ret = blk_rq_map_user_iov(q, req, NULL, iter, GFP_KERNEL);
else
@@ -174,16 +173,12 @@ static int nvme_map_user_request(struct request *req, u64 ubuffer,
bufflen, GFP_KERNEL, flags & NVME_IOCTL_VEC, 0,
0, rq_data_dir(req));
if (ret)
return ret;
- if (has_metadata) {
- struct iov_iter meta_iter;
-
- iov_iter_ubuf(&meta_iter, rq_data_dir(req), meta_buffer,
- meta_len);
- ret = blk_rq_integrity_map_user(req, &meta_iter);
+ if (meta_iter) {
+ ret = blk_rq_integrity_map_user(req, meta_iter);
if (ret)
goto out_unmap;
}
return ret;
@@ -210,12 +205,20 @@ static int nvme_submit_user_cmd(struct request_queue *q,
if (IS_ERR(req))
return PTR_ERR(req);
req->timeout = timeout;
if (ubuffer && bufflen) {
- ret = nvme_map_user_request(req, ubuffer, bufflen, meta_buffer,
- meta_len, NULL, flags);
+ struct iov_iter meta_iter;
+ struct iov_iter *map_meta_iter = NULL;
+
+ if (meta_buffer && meta_len) {
+ iov_iter_ubuf(&meta_iter, rq_data_dir(req), meta_buffer,
+ meta_len);
+ map_meta_iter = &meta_iter;
+ }
+ ret = nvme_map_user_request(req, ubuffer, bufflen, NULL,
+ map_meta_iter, flags);
if (ret)
goto out_free_req;
}
bio = req->bio;
@@ -480,18 +483,19 @@ static int nvme_uring_cmd_io(struct nvme_ctrl *ctrl, struct nvme_ns *ns,
const struct nvme_uring_cmd *cmd = io_uring_sqe128_cmd(ioucmd->sqe,
struct nvme_uring_cmd);
struct request_queue *q = ns ? ns->queue : ctrl->admin_q;
bool open_for_write = ioucmd->file->f_mode & FMODE_WRITE;
struct nvme_command c;
- struct iov_iter iter;
- struct iov_iter *map_iter = NULL;
+ struct iov_iter iter, meta_iter;
+ struct iov_iter *map_iter = NULL, *map_meta_iter = NULL;
struct request *req;
blk_opf_t rq_flags = 0;
blk_mq_req_flags_t blk_flags = 0;
u32 metadata_len, data_len;
u64 metadata, addr;
u32 timeout_ms;
+ int ddir;
int ret;
c.common.opcode = READ_ONCE(cmd->opcode);
c.common.flags = READ_ONCE(cmd->flags);
if (c.common.flags)
@@ -520,13 +524,12 @@ static int nvme_uring_cmd_io(struct nvme_ctrl *ctrl, struct nvme_ns *ns,
addr = READ_ONCE(cmd->addr);
data_len = READ_ONCE(cmd->data_len);
metadata_len = READ_ONCE(cmd->metadata_len);
timeout_ms = READ_ONCE(cmd->timeout_ms);
+ ddir = nvme_is_write(&c) ? WRITE : READ;
if (data_len && (ioucmd->flags & IORING_URING_CMD_FIXED)) {
- int ddir = nvme_is_write(&c) ? WRITE : READ;
-
if (vec)
ret = io_uring_cmd_import_fixed_vec(ioucmd,
u64_to_user_ptr(addr), data_len,
ddir, &iter, issue_flags);
else
@@ -535,10 +538,15 @@ static int nvme_uring_cmd_io(struct nvme_ctrl *ctrl, struct nvme_ns *ns,
if (ret < 0)
return ret;
map_iter = &iter;
}
+ if (data_len && metadata && metadata_len) {
+ iov_iter_ubuf(&meta_iter, ddir, nvme_to_user_ptr(metadata),
+ metadata_len);
+ map_meta_iter = &meta_iter;
+ }
if (issue_flags & IO_URING_F_NONBLOCK) {
rq_flags |= REQ_NOWAIT;
blk_flags = BLK_MQ_REQ_NOWAIT;
}
@@ -549,13 +557,13 @@ static int nvme_uring_cmd_io(struct nvme_ctrl *ctrl, struct nvme_ns *ns,
if (IS_ERR(req))
return PTR_ERR(req);
req->timeout = timeout_ms ? msecs_to_jiffies(timeout_ms) : 0;
if (data_len) {
- ret = nvme_map_user_request(req, addr, data_len,
- nvme_to_user_ptr(metadata), metadata_len,
- map_iter, vec ? NVME_IOCTL_VEC : 0);
+ ret = nvme_map_user_request(req, addr, data_len, map_iter,
+ map_meta_iter,
+ vec ? NVME_IOCTL_VEC : 0);
if (ret)
goto out_free_req;
}
/* to free bio on completion, as req->bio will be null at that time */
--
2.55.0