1 /* 2 * Virtio Block Device 3 * 4 * Copyright IBM, Corp. 2007 5 * 6 * Authors: 7 * Anthony Liguori <aliguori@us.ibm.com> 8 * 9 * This work is licensed under the terms of the GNU GPL, version 2. See 10 * the COPYING file in the top-level directory. 11 * 12 */ 13 14 #include "qemu/osdep.h" 15 #include "qemu/defer-call.h" 16 #include "qapi/error.h" 17 #include "qemu/iov.h" 18 #include "qemu/module.h" 19 #include "qemu/error-report.h" 20 #include "qemu/main-loop.h" 21 #include "block/block_int.h" 22 #include "trace.h" 23 #include "hw/block/block.h" 24 #include "hw/qdev-properties.h" 25 #include "sysemu/blockdev.h" 26 #include "sysemu/block-ram-registrar.h" 27 #include "sysemu/sysemu.h" 28 #include "sysemu/runstate.h" 29 #include "hw/virtio/virtio-blk.h" 30 #include "scsi/constants.h" 31 #ifdef __linux__ 32 # include <scsi/sg.h> 33 #endif 34 #include "hw/virtio/virtio-bus.h" 35 #include "migration/qemu-file-types.h" 36 #include "hw/virtio/virtio-access.h" 37 #include "hw/virtio/virtio-blk-common.h" 38 #include "qemu/coroutine.h" 39 40 static void virtio_blk_init_request(VirtIOBlock *s, VirtQueue *vq, 41 VirtIOBlockReq *req) 42 { 43 req->dev = s; 44 req->vq = vq; 45 req->qiov.size = 0; 46 req->in_len = 0; 47 req->next = NULL; 48 req->mr_next = NULL; 49 } 50 51 static void virtio_blk_free_request(VirtIOBlockReq *req) 52 { 53 g_free(req); 54 } 55 56 static void virtio_blk_req_complete(VirtIOBlockReq *req, unsigned char status) 57 { 58 VirtIOBlock *s = req->dev; 59 VirtIODevice *vdev = VIRTIO_DEVICE(s); 60 61 trace_virtio_blk_req_complete(vdev, req, status); 62 63 stb_p(&req->in->status, status); 64 iov_discard_undo(&req->inhdr_undo); 65 iov_discard_undo(&req->outhdr_undo); 66 virtqueue_push(req->vq, &req->elem, req->in_len); 67 if (s->ioeventfd_started && !s->ioeventfd_disabled) { 68 virtio_notify_irqfd(vdev, req->vq); 69 } else { 70 virtio_notify(vdev, req->vq); 71 } 72 } 73 74 static int virtio_blk_handle_rw_error(VirtIOBlockReq *req, int error, 75 bool is_read, bool acct_failed) 76 { 77 VirtIOBlock *s = req->dev; 78 BlockErrorAction action = blk_get_error_action(s->blk, is_read, error); 79 80 if (action == BLOCK_ERROR_ACTION_STOP) { 81 /* Break the link as the next request is going to be parsed from the 82 * ring again. Otherwise we may end up doing a double completion! */ 83 req->mr_next = NULL; 84 85 WITH_QEMU_LOCK_GUARD(&s->rq_lock) { 86 req->next = s->rq; 87 s->rq = req; 88 } 89 } else if (action == BLOCK_ERROR_ACTION_REPORT) { 90 virtio_blk_req_complete(req, VIRTIO_BLK_S_IOERR); 91 if (acct_failed) { 92 block_acct_failed(blk_get_stats(s->blk), &req->acct); 93 } 94 virtio_blk_free_request(req); 95 } 96 97 blk_error_action(s->blk, action, is_read, error); 98 return action != BLOCK_ERROR_ACTION_IGNORE; 99 } 100 101 static void virtio_blk_rw_complete(void *opaque, int ret) 102 { 103 VirtIOBlockReq *next = opaque; 104 VirtIOBlock *s = next->dev; 105 VirtIODevice *vdev = VIRTIO_DEVICE(s); 106 107 while (next) { 108 VirtIOBlockReq *req = next; 109 next = req->mr_next; 110 trace_virtio_blk_rw_complete(vdev, req, ret); 111 112 if (req->qiov.nalloc != -1) { 113 /* If nalloc is != -1 req->qiov is a local copy of the original 114 * external iovec. It was allocated in submit_requests to be 115 * able to merge requests. */ 116 qemu_iovec_destroy(&req->qiov); 117 } 118 119 if (ret) { 120 int p = virtio_ldl_p(VIRTIO_DEVICE(s), &req->out.type); 121 bool is_read = !(p & VIRTIO_BLK_T_OUT); 122 /* Note that memory may be dirtied on read failure. If the 123 * virtio request is not completed here, as is the case for 124 * BLOCK_ERROR_ACTION_STOP, the memory may not be copied 125 * correctly during live migration. While this is ugly, 126 * it is acceptable because the device is free to write to 127 * the memory until the request is completed (which will 128 * happen on the other side of the migration). 129 */ 130 if (virtio_blk_handle_rw_error(req, -ret, is_read, true)) { 131 continue; 132 } 133 } 134 135 virtio_blk_req_complete(req, VIRTIO_BLK_S_OK); 136 block_acct_done(blk_get_stats(s->blk), &req->acct); 137 virtio_blk_free_request(req); 138 } 139 } 140 141 static void virtio_blk_flush_complete(void *opaque, int ret) 142 { 143 VirtIOBlockReq *req = opaque; 144 VirtIOBlock *s = req->dev; 145 146 if (ret && virtio_blk_handle_rw_error(req, -ret, 0, true)) { 147 return; 148 } 149 150 virtio_blk_req_complete(req, VIRTIO_BLK_S_OK); 151 block_acct_done(blk_get_stats(s->blk), &req->acct); 152 virtio_blk_free_request(req); 153 } 154 155 static void virtio_blk_discard_write_zeroes_complete(void *opaque, int ret) 156 { 157 VirtIOBlockReq *req = opaque; 158 VirtIOBlock *s = req->dev; 159 bool is_write_zeroes = (virtio_ldl_p(VIRTIO_DEVICE(s), &req->out.type) & 160 ~VIRTIO_BLK_T_BARRIER) == VIRTIO_BLK_T_WRITE_ZEROES; 161 162 if (ret && virtio_blk_handle_rw_error(req, -ret, false, is_write_zeroes)) { 163 return; 164 } 165 166 virtio_blk_req_complete(req, VIRTIO_BLK_S_OK); 167 if (is_write_zeroes) { 168 block_acct_done(blk_get_stats(s->blk), &req->acct); 169 } 170 virtio_blk_free_request(req); 171 } 172 173 #ifdef __linux__ 174 175 typedef struct { 176 VirtIOBlockReq *req; 177 struct sg_io_hdr hdr; 178 } VirtIOBlockIoctlReq; 179 180 static void virtio_blk_ioctl_complete(void *opaque, int status) 181 { 182 VirtIOBlockIoctlReq *ioctl_req = opaque; 183 VirtIOBlockReq *req = ioctl_req->req; 184 VirtIOBlock *s = req->dev; 185 VirtIODevice *vdev = VIRTIO_DEVICE(s); 186 struct virtio_scsi_inhdr *scsi; 187 struct sg_io_hdr *hdr; 188 189 scsi = (void *)req->elem.in_sg[req->elem.in_num - 2].iov_base; 190 191 if (status) { 192 status = VIRTIO_BLK_S_UNSUPP; 193 virtio_stl_p(vdev, &scsi->errors, 255); 194 goto out; 195 } 196 197 hdr = &ioctl_req->hdr; 198 /* 199 * From SCSI-Generic-HOWTO: "Some lower level drivers (e.g. ide-scsi) 200 * clear the masked_status field [hence status gets cleared too, see 201 * block/scsi_ioctl.c] even when a CHECK_CONDITION or COMMAND_TERMINATED 202 * status has occurred. However they do set DRIVER_SENSE in driver_status 203 * field. Also a (sb_len_wr > 0) indicates there is a sense buffer. 204 */ 205 if (hdr->status == 0 && hdr->sb_len_wr > 0) { 206 hdr->status = CHECK_CONDITION; 207 } 208 209 virtio_stl_p(vdev, &scsi->errors, 210 hdr->status | (hdr->msg_status << 8) | 211 (hdr->host_status << 16) | (hdr->driver_status << 24)); 212 virtio_stl_p(vdev, &scsi->residual, hdr->resid); 213 virtio_stl_p(vdev, &scsi->sense_len, hdr->sb_len_wr); 214 virtio_stl_p(vdev, &scsi->data_len, hdr->dxfer_len); 215 216 out: 217 virtio_blk_req_complete(req, status); 218 virtio_blk_free_request(req); 219 g_free(ioctl_req); 220 } 221 222 #endif 223 224 static VirtIOBlockReq *virtio_blk_get_request(VirtIOBlock *s, VirtQueue *vq) 225 { 226 VirtIOBlockReq *req = virtqueue_pop(vq, sizeof(VirtIOBlockReq)); 227 228 if (req) { 229 virtio_blk_init_request(s, vq, req); 230 } 231 return req; 232 } 233 234 static int virtio_blk_handle_scsi_req(VirtIOBlockReq *req) 235 { 236 int status = VIRTIO_BLK_S_OK; 237 struct virtio_scsi_inhdr *scsi = NULL; 238 VirtIOBlock *blk = req->dev; 239 VirtIODevice *vdev = VIRTIO_DEVICE(blk); 240 VirtQueueElement *elem = &req->elem; 241 242 #ifdef __linux__ 243 int i; 244 VirtIOBlockIoctlReq *ioctl_req; 245 BlockAIOCB *acb; 246 #endif 247 248 /* 249 * We require at least one output segment each for the virtio_blk_outhdr 250 * and the SCSI command block. 251 * 252 * We also at least require the virtio_blk_inhdr, the virtio_scsi_inhdr 253 * and the sense buffer pointer in the input segments. 254 */ 255 if (elem->out_num < 2 || elem->in_num < 3) { 256 status = VIRTIO_BLK_S_IOERR; 257 goto fail; 258 } 259 260 /* 261 * The scsi inhdr is placed in the second-to-last input segment, just 262 * before the regular inhdr. 263 */ 264 scsi = (void *)elem->in_sg[elem->in_num - 2].iov_base; 265 266 if (!virtio_has_feature(blk->host_features, VIRTIO_BLK_F_SCSI)) { 267 status = VIRTIO_BLK_S_UNSUPP; 268 goto fail; 269 } 270 271 /* 272 * No support for bidirection commands yet. 273 */ 274 if (elem->out_num > 2 && elem->in_num > 3) { 275 status = VIRTIO_BLK_S_UNSUPP; 276 goto fail; 277 } 278 279 #ifdef __linux__ 280 ioctl_req = g_new0(VirtIOBlockIoctlReq, 1); 281 ioctl_req->req = req; 282 ioctl_req->hdr.interface_id = 'S'; 283 ioctl_req->hdr.cmd_len = elem->out_sg[1].iov_len; 284 ioctl_req->hdr.cmdp = elem->out_sg[1].iov_base; 285 ioctl_req->hdr.dxfer_len = 0; 286 287 if (elem->out_num > 2) { 288 /* 289 * If there are more than the minimally required 2 output segments 290 * there is write payload starting from the third iovec. 291 */ 292 ioctl_req->hdr.dxfer_direction = SG_DXFER_TO_DEV; 293 ioctl_req->hdr.iovec_count = elem->out_num - 2; 294 295 for (i = 0; i < ioctl_req->hdr.iovec_count; i++) { 296 ioctl_req->hdr.dxfer_len += elem->out_sg[i + 2].iov_len; 297 } 298 299 ioctl_req->hdr.dxferp = elem->out_sg + 2; 300 301 } else if (elem->in_num > 3) { 302 /* 303 * If we have more than 3 input segments the guest wants to actually 304 * read data. 305 */ 306 ioctl_req->hdr.dxfer_direction = SG_DXFER_FROM_DEV; 307 ioctl_req->hdr.iovec_count = elem->in_num - 3; 308 for (i = 0; i < ioctl_req->hdr.iovec_count; i++) { 309 ioctl_req->hdr.dxfer_len += elem->in_sg[i].iov_len; 310 } 311 312 ioctl_req->hdr.dxferp = elem->in_sg; 313 } else { 314 /* 315 * Some SCSI commands don't actually transfer any data. 316 */ 317 ioctl_req->hdr.dxfer_direction = SG_DXFER_NONE; 318 } 319 320 ioctl_req->hdr.sbp = elem->in_sg[elem->in_num - 3].iov_base; 321 ioctl_req->hdr.mx_sb_len = elem->in_sg[elem->in_num - 3].iov_len; 322 323 acb = blk_aio_ioctl(blk->blk, SG_IO, &ioctl_req->hdr, 324 virtio_blk_ioctl_complete, ioctl_req); 325 if (!acb) { 326 g_free(ioctl_req); 327 status = VIRTIO_BLK_S_UNSUPP; 328 goto fail; 329 } 330 return -EINPROGRESS; 331 #else 332 abort(); 333 #endif 334 335 fail: 336 /* Just put anything nonzero so that the ioctl fails in the guest. */ 337 if (scsi) { 338 virtio_stl_p(vdev, &scsi->errors, 255); 339 } 340 return status; 341 } 342 343 static void virtio_blk_handle_scsi(VirtIOBlockReq *req) 344 { 345 int status; 346 347 status = virtio_blk_handle_scsi_req(req); 348 if (status != -EINPROGRESS) { 349 virtio_blk_req_complete(req, status); 350 virtio_blk_free_request(req); 351 } 352 } 353 354 static inline void submit_requests(VirtIOBlock *s, MultiReqBuffer *mrb, 355 int start, int num_reqs, int niov) 356 { 357 BlockBackend *blk = s->blk; 358 QEMUIOVector *qiov = &mrb->reqs[start]->qiov; 359 int64_t sector_num = mrb->reqs[start]->sector_num; 360 bool is_write = mrb->is_write; 361 BdrvRequestFlags flags = 0; 362 363 if (num_reqs > 1) { 364 int i; 365 struct iovec *tmp_iov = qiov->iov; 366 int tmp_niov = qiov->niov; 367 368 /* mrb->reqs[start]->qiov was initialized from external so we can't 369 * modify it here. We need to initialize it locally and then add the 370 * external iovecs. */ 371 qemu_iovec_init(qiov, niov); 372 373 for (i = 0; i < tmp_niov; i++) { 374 qemu_iovec_add(qiov, tmp_iov[i].iov_base, tmp_iov[i].iov_len); 375 } 376 377 for (i = start + 1; i < start + num_reqs; i++) { 378 qemu_iovec_concat(qiov, &mrb->reqs[i]->qiov, 0, 379 mrb->reqs[i]->qiov.size); 380 mrb->reqs[i - 1]->mr_next = mrb->reqs[i]; 381 } 382 383 trace_virtio_blk_submit_multireq(VIRTIO_DEVICE(mrb->reqs[start]->dev), 384 mrb, start, num_reqs, 385 sector_num << BDRV_SECTOR_BITS, 386 qiov->size, is_write); 387 block_acct_merge_done(blk_get_stats(blk), 388 is_write ? BLOCK_ACCT_WRITE : BLOCK_ACCT_READ, 389 num_reqs - 1); 390 } 391 392 if (blk_ram_registrar_ok(&s->blk_ram_registrar)) { 393 flags |= BDRV_REQ_REGISTERED_BUF; 394 } 395 396 if (is_write) { 397 blk_aio_pwritev(blk, sector_num << BDRV_SECTOR_BITS, qiov, 398 flags, virtio_blk_rw_complete, 399 mrb->reqs[start]); 400 } else { 401 blk_aio_preadv(blk, sector_num << BDRV_SECTOR_BITS, qiov, 402 flags, virtio_blk_rw_complete, 403 mrb->reqs[start]); 404 } 405 } 406 407 static int multireq_compare(const void *a, const void *b) 408 { 409 const VirtIOBlockReq *req1 = *(VirtIOBlockReq **)a, 410 *req2 = *(VirtIOBlockReq **)b; 411 412 /* 413 * Note that we can't simply subtract sector_num1 from sector_num2 414 * here as that could overflow the return value. 415 */ 416 if (req1->sector_num > req2->sector_num) { 417 return 1; 418 } else if (req1->sector_num < req2->sector_num) { 419 return -1; 420 } else { 421 return 0; 422 } 423 } 424 425 static void virtio_blk_submit_multireq(VirtIOBlock *s, MultiReqBuffer *mrb) 426 { 427 int i = 0, start = 0, num_reqs = 0, niov = 0, nb_sectors = 0; 428 uint32_t max_transfer; 429 int64_t sector_num = 0; 430 431 if (mrb->num_reqs == 1) { 432 submit_requests(s, mrb, 0, 1, -1); 433 mrb->num_reqs = 0; 434 return; 435 } 436 437 max_transfer = blk_get_max_transfer(mrb->reqs[0]->dev->blk); 438 439 qsort(mrb->reqs, mrb->num_reqs, sizeof(*mrb->reqs), 440 &multireq_compare); 441 442 for (i = 0; i < mrb->num_reqs; i++) { 443 VirtIOBlockReq *req = mrb->reqs[i]; 444 if (num_reqs > 0) { 445 /* 446 * NOTE: We cannot merge the requests in below situations: 447 * 1. requests are not sequential 448 * 2. merge would exceed maximum number of IOVs 449 * 3. merge would exceed maximum transfer length of backend device 450 */ 451 if (sector_num + nb_sectors != req->sector_num || 452 niov > blk_get_max_iov(s->blk) - req->qiov.niov || 453 req->qiov.size > max_transfer || 454 nb_sectors > (max_transfer - 455 req->qiov.size) / BDRV_SECTOR_SIZE) { 456 submit_requests(s, mrb, start, num_reqs, niov); 457 num_reqs = 0; 458 } 459 } 460 461 if (num_reqs == 0) { 462 sector_num = req->sector_num; 463 nb_sectors = niov = 0; 464 start = i; 465 } 466 467 nb_sectors += req->qiov.size / BDRV_SECTOR_SIZE; 468 niov += req->qiov.niov; 469 num_reqs++; 470 } 471 472 submit_requests(s, mrb, start, num_reqs, niov); 473 mrb->num_reqs = 0; 474 } 475 476 static void virtio_blk_handle_flush(VirtIOBlockReq *req, MultiReqBuffer *mrb) 477 { 478 VirtIOBlock *s = req->dev; 479 480 block_acct_start(blk_get_stats(s->blk), &req->acct, 0, 481 BLOCK_ACCT_FLUSH); 482 483 /* 484 * Make sure all outstanding writes are posted to the backing device. 485 */ 486 if (mrb->is_write && mrb->num_reqs > 0) { 487 virtio_blk_submit_multireq(s, mrb); 488 } 489 blk_aio_flush(s->blk, virtio_blk_flush_complete, req); 490 } 491 492 static bool virtio_blk_sect_range_ok(VirtIOBlock *dev, 493 uint64_t sector, size_t size) 494 { 495 uint64_t nb_sectors = size >> BDRV_SECTOR_BITS; 496 uint64_t total_sectors; 497 498 if (nb_sectors > BDRV_REQUEST_MAX_SECTORS) { 499 return false; 500 } 501 if (sector & dev->sector_mask) { 502 return false; 503 } 504 if (size % dev->conf.conf.logical_block_size) { 505 return false; 506 } 507 blk_get_geometry(dev->blk, &total_sectors); 508 if (sector > total_sectors || nb_sectors > total_sectors - sector) { 509 return false; 510 } 511 return true; 512 } 513 514 static uint8_t virtio_blk_handle_discard_write_zeroes(VirtIOBlockReq *req, 515 struct virtio_blk_discard_write_zeroes *dwz_hdr, bool is_write_zeroes) 516 { 517 VirtIOBlock *s = req->dev; 518 VirtIODevice *vdev = VIRTIO_DEVICE(s); 519 uint64_t sector; 520 uint32_t num_sectors, flags, max_sectors; 521 uint8_t err_status; 522 int bytes; 523 524 sector = virtio_ldq_p(vdev, &dwz_hdr->sector); 525 num_sectors = virtio_ldl_p(vdev, &dwz_hdr->num_sectors); 526 flags = virtio_ldl_p(vdev, &dwz_hdr->flags); 527 max_sectors = is_write_zeroes ? s->conf.max_write_zeroes_sectors : 528 s->conf.max_discard_sectors; 529 530 /* 531 * max_sectors is at most BDRV_REQUEST_MAX_SECTORS, this check 532 * make us sure that "num_sectors << BDRV_SECTOR_BITS" can fit in 533 * the integer variable. 534 */ 535 if (unlikely(num_sectors > max_sectors)) { 536 err_status = VIRTIO_BLK_S_IOERR; 537 goto err; 538 } 539 540 bytes = num_sectors << BDRV_SECTOR_BITS; 541 542 if (unlikely(!virtio_blk_sect_range_ok(s, sector, bytes))) { 543 err_status = VIRTIO_BLK_S_IOERR; 544 goto err; 545 } 546 547 /* 548 * The device MUST set the status byte to VIRTIO_BLK_S_UNSUPP for discard 549 * and write zeroes commands if any unknown flag is set. 550 */ 551 if (unlikely(flags & ~VIRTIO_BLK_WRITE_ZEROES_FLAG_UNMAP)) { 552 err_status = VIRTIO_BLK_S_UNSUPP; 553 goto err; 554 } 555 556 if (is_write_zeroes) { /* VIRTIO_BLK_T_WRITE_ZEROES */ 557 int blk_aio_flags = 0; 558 559 if (flags & VIRTIO_BLK_WRITE_ZEROES_FLAG_UNMAP) { 560 blk_aio_flags |= BDRV_REQ_MAY_UNMAP; 561 } 562 563 block_acct_start(blk_get_stats(s->blk), &req->acct, bytes, 564 BLOCK_ACCT_WRITE); 565 566 blk_aio_pwrite_zeroes(s->blk, sector << BDRV_SECTOR_BITS, 567 bytes, blk_aio_flags, 568 virtio_blk_discard_write_zeroes_complete, req); 569 } else { /* VIRTIO_BLK_T_DISCARD */ 570 /* 571 * The device MUST set the status byte to VIRTIO_BLK_S_UNSUPP for 572 * discard commands if the unmap flag is set. 573 */ 574 if (unlikely(flags & VIRTIO_BLK_WRITE_ZEROES_FLAG_UNMAP)) { 575 err_status = VIRTIO_BLK_S_UNSUPP; 576 goto err; 577 } 578 579 blk_aio_pdiscard(s->blk, sector << BDRV_SECTOR_BITS, bytes, 580 virtio_blk_discard_write_zeroes_complete, req); 581 } 582 583 return VIRTIO_BLK_S_OK; 584 585 err: 586 if (is_write_zeroes) { 587 block_acct_invalid(blk_get_stats(s->blk), BLOCK_ACCT_WRITE); 588 } 589 return err_status; 590 } 591 592 typedef struct ZoneCmdData { 593 VirtIOBlockReq *req; 594 struct iovec *in_iov; 595 unsigned in_num; 596 union { 597 struct { 598 unsigned int nr_zones; 599 BlockZoneDescriptor *zones; 600 } zone_report_data; 601 struct { 602 int64_t offset; 603 } zone_append_data; 604 }; 605 } ZoneCmdData; 606 607 /* 608 * check zoned_request: error checking before issuing requests. If all checks 609 * passed, return true. 610 * append: true if only zone append requests issued. 611 */ 612 static bool check_zoned_request(VirtIOBlock *s, int64_t offset, int64_t len, 613 bool append, uint8_t *status) { 614 BlockDriverState *bs = blk_bs(s->blk); 615 int index; 616 617 if (!virtio_has_feature(s->host_features, VIRTIO_BLK_F_ZONED)) { 618 *status = VIRTIO_BLK_S_UNSUPP; 619 return false; 620 } 621 622 if (offset < 0 || len < 0 || len > (bs->total_sectors << BDRV_SECTOR_BITS) 623 || offset > (bs->total_sectors << BDRV_SECTOR_BITS) - len) { 624 *status = VIRTIO_BLK_S_ZONE_INVALID_CMD; 625 return false; 626 } 627 628 if (append) { 629 if (bs->bl.write_granularity) { 630 if ((offset % bs->bl.write_granularity) != 0) { 631 *status = VIRTIO_BLK_S_ZONE_UNALIGNED_WP; 632 return false; 633 } 634 } 635 636 index = offset / bs->bl.zone_size; 637 if (BDRV_ZT_IS_CONV(bs->wps->wp[index])) { 638 *status = VIRTIO_BLK_S_ZONE_INVALID_CMD; 639 return false; 640 } 641 642 if (len / 512 > bs->bl.max_append_sectors) { 643 if (bs->bl.max_append_sectors == 0) { 644 *status = VIRTIO_BLK_S_UNSUPP; 645 } else { 646 *status = VIRTIO_BLK_S_ZONE_INVALID_CMD; 647 } 648 return false; 649 } 650 } 651 return true; 652 } 653 654 static void virtio_blk_zone_report_complete(void *opaque, int ret) 655 { 656 ZoneCmdData *data = opaque; 657 VirtIOBlockReq *req = data->req; 658 VirtIODevice *vdev = VIRTIO_DEVICE(req->dev); 659 struct iovec *in_iov = data->in_iov; 660 unsigned in_num = data->in_num; 661 int64_t zrp_size, n, j = 0; 662 int64_t nz = data->zone_report_data.nr_zones; 663 int8_t err_status = VIRTIO_BLK_S_OK; 664 665 trace_virtio_blk_zone_report_complete(vdev, req, nz, ret); 666 if (ret) { 667 err_status = VIRTIO_BLK_S_ZONE_INVALID_CMD; 668 goto out; 669 } 670 671 struct virtio_blk_zone_report zrp_hdr = (struct virtio_blk_zone_report) { 672 .nr_zones = cpu_to_le64(nz), 673 }; 674 zrp_size = sizeof(struct virtio_blk_zone_report) 675 + sizeof(struct virtio_blk_zone_descriptor) * nz; 676 n = iov_from_buf(in_iov, in_num, 0, &zrp_hdr, sizeof(zrp_hdr)); 677 if (n != sizeof(zrp_hdr)) { 678 virtio_error(vdev, "Driver provided input buffer that is too small!"); 679 err_status = VIRTIO_BLK_S_ZONE_INVALID_CMD; 680 goto out; 681 } 682 683 for (size_t i = sizeof(zrp_hdr); i < zrp_size; 684 i += sizeof(struct virtio_blk_zone_descriptor), ++j) { 685 struct virtio_blk_zone_descriptor desc = 686 (struct virtio_blk_zone_descriptor) { 687 .z_start = cpu_to_le64(data->zone_report_data.zones[j].start 688 >> BDRV_SECTOR_BITS), 689 .z_cap = cpu_to_le64(data->zone_report_data.zones[j].cap 690 >> BDRV_SECTOR_BITS), 691 .z_wp = cpu_to_le64(data->zone_report_data.zones[j].wp 692 >> BDRV_SECTOR_BITS), 693 }; 694 695 switch (data->zone_report_data.zones[j].type) { 696 case BLK_ZT_CONV: 697 desc.z_type = VIRTIO_BLK_ZT_CONV; 698 break; 699 case BLK_ZT_SWR: 700 desc.z_type = VIRTIO_BLK_ZT_SWR; 701 break; 702 case BLK_ZT_SWP: 703 desc.z_type = VIRTIO_BLK_ZT_SWP; 704 break; 705 default: 706 g_assert_not_reached(); 707 } 708 709 switch (data->zone_report_data.zones[j].state) { 710 case BLK_ZS_RDONLY: 711 desc.z_state = VIRTIO_BLK_ZS_RDONLY; 712 break; 713 case BLK_ZS_OFFLINE: 714 desc.z_state = VIRTIO_BLK_ZS_OFFLINE; 715 break; 716 case BLK_ZS_EMPTY: 717 desc.z_state = VIRTIO_BLK_ZS_EMPTY; 718 break; 719 case BLK_ZS_CLOSED: 720 desc.z_state = VIRTIO_BLK_ZS_CLOSED; 721 break; 722 case BLK_ZS_FULL: 723 desc.z_state = VIRTIO_BLK_ZS_FULL; 724 break; 725 case BLK_ZS_EOPEN: 726 desc.z_state = VIRTIO_BLK_ZS_EOPEN; 727 break; 728 case BLK_ZS_IOPEN: 729 desc.z_state = VIRTIO_BLK_ZS_IOPEN; 730 break; 731 case BLK_ZS_NOT_WP: 732 desc.z_state = VIRTIO_BLK_ZS_NOT_WP; 733 break; 734 default: 735 g_assert_not_reached(); 736 } 737 738 /* TODO: it takes O(n^2) time complexity. Optimizations required. */ 739 n = iov_from_buf(in_iov, in_num, i, &desc, sizeof(desc)); 740 if (n != sizeof(desc)) { 741 virtio_error(vdev, "Driver provided input buffer " 742 "for descriptors that is too small!"); 743 err_status = VIRTIO_BLK_S_ZONE_INVALID_CMD; 744 } 745 } 746 747 out: 748 virtio_blk_req_complete(req, err_status); 749 virtio_blk_free_request(req); 750 g_free(data->zone_report_data.zones); 751 g_free(data); 752 } 753 754 static void virtio_blk_handle_zone_report(VirtIOBlockReq *req, 755 struct iovec *in_iov, 756 unsigned in_num) 757 { 758 VirtIOBlock *s = req->dev; 759 VirtIODevice *vdev = VIRTIO_DEVICE(s); 760 unsigned int nr_zones; 761 ZoneCmdData *data; 762 int64_t zone_size, offset; 763 uint8_t err_status; 764 765 if (req->in_len < sizeof(struct virtio_blk_inhdr) + 766 sizeof(struct virtio_blk_zone_report) + 767 sizeof(struct virtio_blk_zone_descriptor)) { 768 virtio_error(vdev, "in buffer too small for zone report"); 769 return; 770 } 771 772 /* start byte offset of the zone report */ 773 offset = virtio_ldq_p(vdev, &req->out.sector) << BDRV_SECTOR_BITS; 774 if (!check_zoned_request(s, offset, 0, false, &err_status)) { 775 goto out; 776 } 777 nr_zones = (req->in_len - sizeof(struct virtio_blk_inhdr) - 778 sizeof(struct virtio_blk_zone_report)) / 779 sizeof(struct virtio_blk_zone_descriptor); 780 trace_virtio_blk_handle_zone_report(vdev, req, 781 offset >> BDRV_SECTOR_BITS, nr_zones); 782 783 zone_size = sizeof(BlockZoneDescriptor) * nr_zones; 784 data = g_malloc(sizeof(ZoneCmdData)); 785 data->req = req; 786 data->in_iov = in_iov; 787 data->in_num = in_num; 788 data->zone_report_data.nr_zones = nr_zones; 789 data->zone_report_data.zones = g_malloc(zone_size), 790 791 blk_aio_zone_report(s->blk, offset, &data->zone_report_data.nr_zones, 792 data->zone_report_data.zones, 793 virtio_blk_zone_report_complete, data); 794 return; 795 out: 796 virtio_blk_req_complete(req, err_status); 797 virtio_blk_free_request(req); 798 } 799 800 static void virtio_blk_zone_mgmt_complete(void *opaque, int ret) 801 { 802 VirtIOBlockReq *req = opaque; 803 VirtIOBlock *s = req->dev; 804 VirtIODevice *vdev = VIRTIO_DEVICE(s); 805 int8_t err_status = VIRTIO_BLK_S_OK; 806 trace_virtio_blk_zone_mgmt_complete(vdev, req,ret); 807 808 if (ret) { 809 err_status = VIRTIO_BLK_S_ZONE_INVALID_CMD; 810 } 811 812 virtio_blk_req_complete(req, err_status); 813 virtio_blk_free_request(req); 814 } 815 816 static int virtio_blk_handle_zone_mgmt(VirtIOBlockReq *req, BlockZoneOp op) 817 { 818 VirtIOBlock *s = req->dev; 819 VirtIODevice *vdev = VIRTIO_DEVICE(s); 820 BlockDriverState *bs = blk_bs(s->blk); 821 int64_t offset = virtio_ldq_p(vdev, &req->out.sector) << BDRV_SECTOR_BITS; 822 uint64_t len; 823 uint64_t capacity = bs->total_sectors << BDRV_SECTOR_BITS; 824 uint8_t err_status = VIRTIO_BLK_S_OK; 825 826 uint32_t type = virtio_ldl_p(vdev, &req->out.type); 827 if (type == VIRTIO_BLK_T_ZONE_RESET_ALL) { 828 /* Entire drive capacity */ 829 offset = 0; 830 len = capacity; 831 trace_virtio_blk_handle_zone_reset_all(vdev, req, 0, 832 bs->total_sectors); 833 } else { 834 if (bs->bl.zone_size > capacity - offset) { 835 /* The zoned device allows the last smaller zone. */ 836 len = capacity - bs->bl.zone_size * (bs->bl.nr_zones - 1); 837 } else { 838 len = bs->bl.zone_size; 839 } 840 trace_virtio_blk_handle_zone_mgmt(vdev, req, op, 841 offset >> BDRV_SECTOR_BITS, 842 len >> BDRV_SECTOR_BITS); 843 } 844 845 if (!check_zoned_request(s, offset, len, false, &err_status)) { 846 goto out; 847 } 848 849 blk_aio_zone_mgmt(s->blk, op, offset, len, 850 virtio_blk_zone_mgmt_complete, req); 851 852 return 0; 853 out: 854 virtio_blk_req_complete(req, err_status); 855 virtio_blk_free_request(req); 856 return err_status; 857 } 858 859 static void virtio_blk_zone_append_complete(void *opaque, int ret) 860 { 861 ZoneCmdData *data = opaque; 862 VirtIOBlockReq *req = data->req; 863 VirtIODevice *vdev = VIRTIO_DEVICE(req->dev); 864 int64_t append_sector, n; 865 uint8_t err_status = VIRTIO_BLK_S_OK; 866 867 if (ret) { 868 err_status = VIRTIO_BLK_S_ZONE_INVALID_CMD; 869 goto out; 870 } 871 872 virtio_stq_p(vdev, &append_sector, 873 data->zone_append_data.offset >> BDRV_SECTOR_BITS); 874 n = iov_from_buf(data->in_iov, data->in_num, 0, &append_sector, 875 sizeof(append_sector)); 876 if (n != sizeof(append_sector)) { 877 virtio_error(vdev, "Driver provided input buffer less than size of " 878 "append_sector"); 879 err_status = VIRTIO_BLK_S_ZONE_INVALID_CMD; 880 goto out; 881 } 882 trace_virtio_blk_zone_append_complete(vdev, req, append_sector, ret); 883 884 out: 885 virtio_blk_req_complete(req, err_status); 886 virtio_blk_free_request(req); 887 g_free(data); 888 } 889 890 static int virtio_blk_handle_zone_append(VirtIOBlockReq *req, 891 struct iovec *out_iov, 892 struct iovec *in_iov, 893 uint64_t out_num, 894 unsigned in_num) { 895 VirtIOBlock *s = req->dev; 896 VirtIODevice *vdev = VIRTIO_DEVICE(s); 897 uint8_t err_status = VIRTIO_BLK_S_OK; 898 899 int64_t offset = virtio_ldq_p(vdev, &req->out.sector) << BDRV_SECTOR_BITS; 900 int64_t len = iov_size(out_iov, out_num); 901 902 trace_virtio_blk_handle_zone_append(vdev, req, offset >> BDRV_SECTOR_BITS); 903 if (!check_zoned_request(s, offset, len, true, &err_status)) { 904 goto out; 905 } 906 907 ZoneCmdData *data = g_malloc(sizeof(ZoneCmdData)); 908 data->req = req; 909 data->in_iov = in_iov; 910 data->in_num = in_num; 911 data->zone_append_data.offset = offset; 912 qemu_iovec_init_external(&req->qiov, out_iov, out_num); 913 914 block_acct_start(blk_get_stats(s->blk), &req->acct, len, 915 BLOCK_ACCT_ZONE_APPEND); 916 917 blk_aio_zone_append(s->blk, &data->zone_append_data.offset, &req->qiov, 0, 918 virtio_blk_zone_append_complete, data); 919 return 0; 920 921 out: 922 virtio_blk_req_complete(req, err_status); 923 virtio_blk_free_request(req); 924 return err_status; 925 } 926 927 static int virtio_blk_handle_request(VirtIOBlockReq *req, MultiReqBuffer *mrb) 928 { 929 uint32_t type; 930 struct iovec *in_iov = req->elem.in_sg; 931 struct iovec *out_iov = req->elem.out_sg; 932 unsigned in_num = req->elem.in_num; 933 unsigned out_num = req->elem.out_num; 934 VirtIOBlock *s = req->dev; 935 VirtIODevice *vdev = VIRTIO_DEVICE(s); 936 937 if (req->elem.out_num < 1 || req->elem.in_num < 1) { 938 virtio_error(vdev, "virtio-blk missing headers"); 939 return -1; 940 } 941 942 if (unlikely(iov_to_buf(out_iov, out_num, 0, &req->out, 943 sizeof(req->out)) != sizeof(req->out))) { 944 virtio_error(vdev, "virtio-blk request outhdr too short"); 945 return -1; 946 } 947 948 iov_discard_front_undoable(&out_iov, &out_num, sizeof(req->out), 949 &req->outhdr_undo); 950 951 if (in_iov[in_num - 1].iov_len < sizeof(struct virtio_blk_inhdr)) { 952 virtio_error(vdev, "virtio-blk request inhdr too short"); 953 iov_discard_undo(&req->outhdr_undo); 954 return -1; 955 } 956 957 /* We always touch the last byte, so just see how big in_iov is. */ 958 req->in_len = iov_size(in_iov, in_num); 959 req->in = (void *)in_iov[in_num - 1].iov_base 960 + in_iov[in_num - 1].iov_len 961 - sizeof(struct virtio_blk_inhdr); 962 iov_discard_back_undoable(in_iov, &in_num, sizeof(struct virtio_blk_inhdr), 963 &req->inhdr_undo); 964 965 type = virtio_ldl_p(vdev, &req->out.type); 966 967 /* VIRTIO_BLK_T_OUT defines the command direction. VIRTIO_BLK_T_BARRIER 968 * is an optional flag. Although a guest should not send this flag if 969 * not negotiated we ignored it in the past. So keep ignoring it. */ 970 switch (type & ~(VIRTIO_BLK_T_OUT | VIRTIO_BLK_T_BARRIER)) { 971 case VIRTIO_BLK_T_IN: 972 { 973 bool is_write = type & VIRTIO_BLK_T_OUT; 974 req->sector_num = virtio_ldq_p(vdev, &req->out.sector); 975 976 if (is_write) { 977 qemu_iovec_init_external(&req->qiov, out_iov, out_num); 978 trace_virtio_blk_handle_write(vdev, req, req->sector_num, 979 req->qiov.size / BDRV_SECTOR_SIZE); 980 } else { 981 qemu_iovec_init_external(&req->qiov, in_iov, in_num); 982 trace_virtio_blk_handle_read(vdev, req, req->sector_num, 983 req->qiov.size / BDRV_SECTOR_SIZE); 984 } 985 986 if (!virtio_blk_sect_range_ok(s, req->sector_num, req->qiov.size)) { 987 virtio_blk_req_complete(req, VIRTIO_BLK_S_IOERR); 988 block_acct_invalid(blk_get_stats(s->blk), 989 is_write ? BLOCK_ACCT_WRITE : BLOCK_ACCT_READ); 990 virtio_blk_free_request(req); 991 return 0; 992 } 993 994 block_acct_start(blk_get_stats(s->blk), &req->acct, req->qiov.size, 995 is_write ? BLOCK_ACCT_WRITE : BLOCK_ACCT_READ); 996 997 /* merge would exceed maximum number of requests or IO direction 998 * changes */ 999 if (mrb->num_reqs > 0 && (mrb->num_reqs == VIRTIO_BLK_MAX_MERGE_REQS || 1000 is_write != mrb->is_write || 1001 !s->conf.request_merging)) { 1002 virtio_blk_submit_multireq(s, mrb); 1003 } 1004 1005 assert(mrb->num_reqs < VIRTIO_BLK_MAX_MERGE_REQS); 1006 mrb->reqs[mrb->num_reqs++] = req; 1007 mrb->is_write = is_write; 1008 break; 1009 } 1010 case VIRTIO_BLK_T_FLUSH: 1011 virtio_blk_handle_flush(req, mrb); 1012 break; 1013 case VIRTIO_BLK_T_ZONE_REPORT: 1014 virtio_blk_handle_zone_report(req, in_iov, in_num); 1015 break; 1016 case VIRTIO_BLK_T_ZONE_OPEN: 1017 virtio_blk_handle_zone_mgmt(req, BLK_ZO_OPEN); 1018 break; 1019 case VIRTIO_BLK_T_ZONE_CLOSE: 1020 virtio_blk_handle_zone_mgmt(req, BLK_ZO_CLOSE); 1021 break; 1022 case VIRTIO_BLK_T_ZONE_FINISH: 1023 virtio_blk_handle_zone_mgmt(req, BLK_ZO_FINISH); 1024 break; 1025 case VIRTIO_BLK_T_ZONE_RESET: 1026 virtio_blk_handle_zone_mgmt(req, BLK_ZO_RESET); 1027 break; 1028 case VIRTIO_BLK_T_ZONE_RESET_ALL: 1029 virtio_blk_handle_zone_mgmt(req, BLK_ZO_RESET); 1030 break; 1031 case VIRTIO_BLK_T_SCSI_CMD: 1032 virtio_blk_handle_scsi(req); 1033 break; 1034 case VIRTIO_BLK_T_GET_ID: 1035 { 1036 /* 1037 * NB: per existing s/n string convention the string is 1038 * terminated by '\0' only when shorter than buffer. 1039 */ 1040 const char *serial = s->conf.serial ? s->conf.serial : ""; 1041 size_t size = MIN(strlen(serial) + 1, 1042 MIN(iov_size(in_iov, in_num), 1043 VIRTIO_BLK_ID_BYTES)); 1044 iov_from_buf(in_iov, in_num, 0, serial, size); 1045 virtio_blk_req_complete(req, VIRTIO_BLK_S_OK); 1046 virtio_blk_free_request(req); 1047 break; 1048 } 1049 case VIRTIO_BLK_T_ZONE_APPEND & ~VIRTIO_BLK_T_OUT: 1050 /* 1051 * Passing out_iov/out_num and in_iov/in_num is not safe 1052 * to access req->elem.out_sg directly because it may be 1053 * modified by virtio_blk_handle_request(). 1054 */ 1055 virtio_blk_handle_zone_append(req, out_iov, in_iov, out_num, in_num); 1056 break; 1057 /* 1058 * VIRTIO_BLK_T_DISCARD and VIRTIO_BLK_T_WRITE_ZEROES are defined with 1059 * VIRTIO_BLK_T_OUT flag set. We masked this flag in the switch statement, 1060 * so we must mask it for these requests, then we will check if it is set. 1061 */ 1062 case VIRTIO_BLK_T_DISCARD & ~VIRTIO_BLK_T_OUT: 1063 case VIRTIO_BLK_T_WRITE_ZEROES & ~VIRTIO_BLK_T_OUT: 1064 { 1065 struct virtio_blk_discard_write_zeroes dwz_hdr; 1066 size_t out_len = iov_size(out_iov, out_num); 1067 bool is_write_zeroes = (type & ~VIRTIO_BLK_T_BARRIER) == 1068 VIRTIO_BLK_T_WRITE_ZEROES; 1069 uint8_t err_status; 1070 1071 /* 1072 * Unsupported if VIRTIO_BLK_T_OUT is not set or the request contains 1073 * more than one segment. 1074 */ 1075 if (unlikely(!(type & VIRTIO_BLK_T_OUT) || 1076 out_len > sizeof(dwz_hdr))) { 1077 virtio_blk_req_complete(req, VIRTIO_BLK_S_UNSUPP); 1078 virtio_blk_free_request(req); 1079 return 0; 1080 } 1081 1082 if (unlikely(iov_to_buf(out_iov, out_num, 0, &dwz_hdr, 1083 sizeof(dwz_hdr)) != sizeof(dwz_hdr))) { 1084 iov_discard_undo(&req->inhdr_undo); 1085 iov_discard_undo(&req->outhdr_undo); 1086 virtio_error(vdev, "virtio-blk discard/write_zeroes header" 1087 " too short"); 1088 return -1; 1089 } 1090 1091 err_status = virtio_blk_handle_discard_write_zeroes(req, &dwz_hdr, 1092 is_write_zeroes); 1093 if (err_status != VIRTIO_BLK_S_OK) { 1094 virtio_blk_req_complete(req, err_status); 1095 virtio_blk_free_request(req); 1096 } 1097 1098 break; 1099 } 1100 default: 1101 virtio_blk_req_complete(req, VIRTIO_BLK_S_UNSUPP); 1102 virtio_blk_free_request(req); 1103 } 1104 return 0; 1105 } 1106 1107 void virtio_blk_handle_vq(VirtIOBlock *s, VirtQueue *vq) 1108 { 1109 VirtIOBlockReq *req; 1110 MultiReqBuffer mrb = {}; 1111 bool suppress_notifications = virtio_queue_get_notification(vq); 1112 1113 defer_call_begin(); 1114 1115 do { 1116 if (suppress_notifications) { 1117 virtio_queue_set_notification(vq, 0); 1118 } 1119 1120 while ((req = virtio_blk_get_request(s, vq))) { 1121 if (virtio_blk_handle_request(req, &mrb)) { 1122 virtqueue_detach_element(req->vq, &req->elem, 0); 1123 virtio_blk_free_request(req); 1124 break; 1125 } 1126 } 1127 1128 if (suppress_notifications) { 1129 virtio_queue_set_notification(vq, 1); 1130 } 1131 } while (!virtio_queue_empty(vq)); 1132 1133 if (mrb.num_reqs) { 1134 virtio_blk_submit_multireq(s, &mrb); 1135 } 1136 1137 defer_call_end(); 1138 } 1139 1140 static void virtio_blk_handle_output(VirtIODevice *vdev, VirtQueue *vq) 1141 { 1142 VirtIOBlock *s = (VirtIOBlock *)vdev; 1143 1144 if (!s->ioeventfd_disabled && !s->ioeventfd_started) { 1145 /* Some guests kick before setting VIRTIO_CONFIG_S_DRIVER_OK so start 1146 * ioeventfd here instead of waiting for .set_status(). 1147 */ 1148 virtio_device_start_ioeventfd(vdev); 1149 if (!s->ioeventfd_disabled) { 1150 return; 1151 } 1152 } 1153 1154 virtio_blk_handle_vq(s, vq); 1155 } 1156 1157 static void virtio_blk_dma_restart_bh(void *opaque) 1158 { 1159 VirtIOBlockReq *req = opaque; 1160 VirtIOBlock *s = req->dev; /* we're called with at least one request */ 1161 1162 MultiReqBuffer mrb = {}; 1163 1164 while (req) { 1165 VirtIOBlockReq *next = req->next; 1166 if (virtio_blk_handle_request(req, &mrb)) { 1167 /* Device is now broken and won't do any processing until it gets 1168 * reset. Already queued requests will be lost: let's purge them. 1169 */ 1170 while (req) { 1171 next = req->next; 1172 virtqueue_detach_element(req->vq, &req->elem, 0); 1173 virtio_blk_free_request(req); 1174 req = next; 1175 } 1176 break; 1177 } 1178 req = next; 1179 } 1180 1181 if (mrb.num_reqs) { 1182 virtio_blk_submit_multireq(s, &mrb); 1183 } 1184 1185 /* Paired with inc in virtio_blk_dma_restart_cb() */ 1186 blk_dec_in_flight(s->conf.conf.blk); 1187 } 1188 1189 static void virtio_blk_dma_restart_cb(void *opaque, bool running, 1190 RunState state) 1191 { 1192 VirtIOBlock *s = opaque; 1193 uint16_t num_queues = s->conf.num_queues; 1194 1195 if (!running) { 1196 return; 1197 } 1198 1199 /* Split the device-wide s->rq request list into per-vq request lists */ 1200 g_autofree VirtIOBlockReq **vq_rq = g_new0(VirtIOBlockReq *, num_queues); 1201 VirtIOBlockReq *rq; 1202 1203 WITH_QEMU_LOCK_GUARD(&s->rq_lock) { 1204 rq = s->rq; 1205 s->rq = NULL; 1206 } 1207 1208 while (rq) { 1209 VirtIOBlockReq *next = rq->next; 1210 uint16_t idx = virtio_get_queue_index(rq->vq); 1211 1212 /* Only num_queues vqs were created so vq_rq[idx] is within bounds */ 1213 assert(idx < num_queues); 1214 rq->next = vq_rq[idx]; 1215 vq_rq[idx] = rq; 1216 rq = next; 1217 } 1218 1219 /* Schedule a BH to submit the requests in each vq's AioContext */ 1220 for (uint16_t i = 0; i < num_queues; i++) { 1221 if (!vq_rq[i]) { 1222 continue; 1223 } 1224 1225 /* Paired with dec in virtio_blk_dma_restart_bh() */ 1226 blk_inc_in_flight(s->conf.conf.blk); 1227 1228 aio_bh_schedule_oneshot(s->vq_aio_context[i], 1229 virtio_blk_dma_restart_bh, 1230 vq_rq[i]); 1231 } 1232 } 1233 1234 static void virtio_blk_reset(VirtIODevice *vdev) 1235 { 1236 VirtIOBlock *s = VIRTIO_BLK(vdev); 1237 VirtIOBlockReq *req; 1238 1239 /* Dataplane has stopped... */ 1240 assert(!s->ioeventfd_started); 1241 1242 /* ...but requests may still be in flight. */ 1243 blk_drain(s->blk); 1244 1245 /* We drop queued requests after blk_drain() because blk_drain() itself can 1246 * produce them. */ 1247 WITH_QEMU_LOCK_GUARD(&s->rq_lock) { 1248 while (s->rq) { 1249 req = s->rq; 1250 s->rq = req->next; 1251 1252 /* No other threads can access req->vq here */ 1253 virtqueue_detach_element(req->vq, &req->elem, 0); 1254 1255 virtio_blk_free_request(req); 1256 } 1257 } 1258 1259 blk_set_enable_write_cache(s->blk, s->original_wce); 1260 } 1261 1262 /* coalesce internal state, copy to pci i/o region 0 1263 */ 1264 static void virtio_blk_update_config(VirtIODevice *vdev, uint8_t *config) 1265 { 1266 VirtIOBlock *s = VIRTIO_BLK(vdev); 1267 BlockConf *conf = &s->conf.conf; 1268 BlockDriverState *bs = blk_bs(s->blk); 1269 struct virtio_blk_config blkcfg; 1270 uint64_t capacity; 1271 int64_t length; 1272 int blk_size = conf->logical_block_size; 1273 1274 blk_get_geometry(s->blk, &capacity); 1275 memset(&blkcfg, 0, sizeof(blkcfg)); 1276 virtio_stq_p(vdev, &blkcfg.capacity, capacity); 1277 virtio_stl_p(vdev, &blkcfg.seg_max, 1278 s->conf.seg_max_adjust ? s->conf.queue_size - 2 : 128 - 2); 1279 virtio_stw_p(vdev, &blkcfg.geometry.cylinders, conf->cyls); 1280 virtio_stl_p(vdev, &blkcfg.blk_size, blk_size); 1281 virtio_stw_p(vdev, &blkcfg.min_io_size, conf->min_io_size / blk_size); 1282 virtio_stl_p(vdev, &blkcfg.opt_io_size, conf->opt_io_size / blk_size); 1283 blkcfg.geometry.heads = conf->heads; 1284 /* 1285 * We must ensure that the block device capacity is a multiple of 1286 * the logical block size. If that is not the case, let's use 1287 * sector_mask to adopt the geometry to have a correct picture. 1288 * For those devices where the capacity is ok for the given geometry 1289 * we don't touch the sector value of the geometry, since some devices 1290 * (like s390 dasd) need a specific value. Here the capacity is already 1291 * cyls*heads*secs*blk_size and the sector value is not block size 1292 * divided by 512 - instead it is the amount of blk_size blocks 1293 * per track (cylinder). 1294 */ 1295 length = blk_getlength(s->blk); 1296 if (length > 0 && length / conf->heads / conf->secs % blk_size) { 1297 blkcfg.geometry.sectors = conf->secs & ~s->sector_mask; 1298 } else { 1299 blkcfg.geometry.sectors = conf->secs; 1300 } 1301 blkcfg.size_max = 0; 1302 blkcfg.physical_block_exp = get_physical_block_exp(conf); 1303 blkcfg.alignment_offset = 0; 1304 blkcfg.wce = blk_enable_write_cache(s->blk); 1305 virtio_stw_p(vdev, &blkcfg.num_queues, s->conf.num_queues); 1306 if (virtio_has_feature(s->host_features, VIRTIO_BLK_F_DISCARD)) { 1307 uint32_t discard_granularity = conf->discard_granularity; 1308 if (discard_granularity == -1 || !s->conf.report_discard_granularity) { 1309 discard_granularity = blk_size; 1310 } 1311 virtio_stl_p(vdev, &blkcfg.max_discard_sectors, 1312 s->conf.max_discard_sectors); 1313 virtio_stl_p(vdev, &blkcfg.discard_sector_alignment, 1314 discard_granularity >> BDRV_SECTOR_BITS); 1315 /* 1316 * We support only one segment per request since multiple segments 1317 * are not widely used and there are no userspace APIs that allow 1318 * applications to submit multiple segments in a single call. 1319 */ 1320 virtio_stl_p(vdev, &blkcfg.max_discard_seg, 1); 1321 } 1322 if (virtio_has_feature(s->host_features, VIRTIO_BLK_F_WRITE_ZEROES)) { 1323 virtio_stl_p(vdev, &blkcfg.max_write_zeroes_sectors, 1324 s->conf.max_write_zeroes_sectors); 1325 blkcfg.write_zeroes_may_unmap = 1; 1326 virtio_stl_p(vdev, &blkcfg.max_write_zeroes_seg, 1); 1327 } 1328 if (bs->bl.zoned != BLK_Z_NONE) { 1329 switch (bs->bl.zoned) { 1330 case BLK_Z_HM: 1331 blkcfg.zoned.model = VIRTIO_BLK_Z_HM; 1332 break; 1333 case BLK_Z_HA: 1334 blkcfg.zoned.model = VIRTIO_BLK_Z_HA; 1335 break; 1336 default: 1337 g_assert_not_reached(); 1338 } 1339 1340 virtio_stl_p(vdev, &blkcfg.zoned.zone_sectors, 1341 bs->bl.zone_size / 512); 1342 virtio_stl_p(vdev, &blkcfg.zoned.max_active_zones, 1343 bs->bl.max_active_zones); 1344 virtio_stl_p(vdev, &blkcfg.zoned.max_open_zones, 1345 bs->bl.max_open_zones); 1346 virtio_stl_p(vdev, &blkcfg.zoned.write_granularity, blk_size); 1347 virtio_stl_p(vdev, &blkcfg.zoned.max_append_sectors, 1348 bs->bl.max_append_sectors); 1349 } else { 1350 blkcfg.zoned.model = VIRTIO_BLK_Z_NONE; 1351 } 1352 memcpy(config, &blkcfg, s->config_size); 1353 } 1354 1355 static void virtio_blk_set_config(VirtIODevice *vdev, const uint8_t *config) 1356 { 1357 VirtIOBlock *s = VIRTIO_BLK(vdev); 1358 struct virtio_blk_config blkcfg; 1359 1360 memcpy(&blkcfg, config, s->config_size); 1361 1362 blk_set_enable_write_cache(s->blk, blkcfg.wce != 0); 1363 } 1364 1365 static uint64_t virtio_blk_get_features(VirtIODevice *vdev, uint64_t features, 1366 Error **errp) 1367 { 1368 VirtIOBlock *s = VIRTIO_BLK(vdev); 1369 1370 /* Firstly sync all virtio-blk possible supported features */ 1371 features |= s->host_features; 1372 1373 virtio_add_feature(&features, VIRTIO_BLK_F_SEG_MAX); 1374 virtio_add_feature(&features, VIRTIO_BLK_F_GEOMETRY); 1375 virtio_add_feature(&features, VIRTIO_BLK_F_TOPOLOGY); 1376 virtio_add_feature(&features, VIRTIO_BLK_F_BLK_SIZE); 1377 if (virtio_has_feature(features, VIRTIO_F_VERSION_1)) { 1378 if (virtio_has_feature(s->host_features, VIRTIO_BLK_F_SCSI)) { 1379 error_setg(errp, "Please set scsi=off for virtio-blk devices in order to use virtio 1.0"); 1380 return 0; 1381 } 1382 } else { 1383 virtio_clear_feature(&features, VIRTIO_F_ANY_LAYOUT); 1384 virtio_add_feature(&features, VIRTIO_BLK_F_SCSI); 1385 } 1386 1387 if (blk_enable_write_cache(s->blk) || 1388 (s->conf.x_enable_wce_if_config_wce && 1389 virtio_has_feature(features, VIRTIO_BLK_F_CONFIG_WCE))) { 1390 virtio_add_feature(&features, VIRTIO_BLK_F_WCE); 1391 } 1392 if (!blk_is_writable(s->blk)) { 1393 virtio_add_feature(&features, VIRTIO_BLK_F_RO); 1394 } 1395 if (s->conf.num_queues > 1) { 1396 virtio_add_feature(&features, VIRTIO_BLK_F_MQ); 1397 } 1398 1399 return features; 1400 } 1401 1402 static void virtio_blk_set_status(VirtIODevice *vdev, uint8_t status) 1403 { 1404 VirtIOBlock *s = VIRTIO_BLK(vdev); 1405 1406 if (!(status & (VIRTIO_CONFIG_S_DRIVER | VIRTIO_CONFIG_S_DRIVER_OK))) { 1407 assert(!s->ioeventfd_started); 1408 } 1409 1410 if (!(status & VIRTIO_CONFIG_S_DRIVER_OK)) { 1411 return; 1412 } 1413 1414 /* A guest that supports VIRTIO_BLK_F_CONFIG_WCE must be able to send 1415 * cache flushes. Thus, the "auto writethrough" behavior is never 1416 * necessary for guests that support the VIRTIO_BLK_F_CONFIG_WCE feature. 1417 * Leaving it enabled would break the following sequence: 1418 * 1419 * Guest started with "-drive cache=writethrough" 1420 * Guest sets status to 0 1421 * Guest sets DRIVER bit in status field 1422 * Guest reads host features (WCE=0, CONFIG_WCE=1) 1423 * Guest writes guest features (WCE=0, CONFIG_WCE=1) 1424 * Guest writes 1 to the WCE configuration field (writeback mode) 1425 * Guest sets DRIVER_OK bit in status field 1426 * 1427 * s->blk would erroneously be placed in writethrough mode. 1428 */ 1429 if (!virtio_vdev_has_feature(vdev, VIRTIO_BLK_F_CONFIG_WCE)) { 1430 blk_set_enable_write_cache(s->blk, 1431 virtio_vdev_has_feature(vdev, 1432 VIRTIO_BLK_F_WCE)); 1433 } 1434 } 1435 1436 static void virtio_blk_save_device(VirtIODevice *vdev, QEMUFile *f) 1437 { 1438 VirtIOBlock *s = VIRTIO_BLK(vdev); 1439 1440 WITH_QEMU_LOCK_GUARD(&s->rq_lock) { 1441 VirtIOBlockReq *req = s->rq; 1442 1443 while (req) { 1444 qemu_put_sbyte(f, 1); 1445 1446 if (s->conf.num_queues > 1) { 1447 qemu_put_be32(f, virtio_get_queue_index(req->vq)); 1448 } 1449 1450 qemu_put_virtqueue_element(vdev, f, &req->elem); 1451 req = req->next; 1452 } 1453 } 1454 1455 qemu_put_sbyte(f, 0); 1456 } 1457 1458 static int virtio_blk_load_device(VirtIODevice *vdev, QEMUFile *f, 1459 int version_id) 1460 { 1461 VirtIOBlock *s = VIRTIO_BLK(vdev); 1462 1463 while (qemu_get_sbyte(f)) { 1464 unsigned nvqs = s->conf.num_queues; 1465 unsigned vq_idx = 0; 1466 VirtIOBlockReq *req; 1467 1468 if (nvqs > 1) { 1469 vq_idx = qemu_get_be32(f); 1470 1471 if (vq_idx >= nvqs) { 1472 error_report("Invalid virtqueue index in request list: %#x", 1473 vq_idx); 1474 return -EINVAL; 1475 } 1476 } 1477 1478 req = qemu_get_virtqueue_element(vdev, f, sizeof(VirtIOBlockReq)); 1479 virtio_blk_init_request(s, virtio_get_queue(vdev, vq_idx), req); 1480 1481 WITH_QEMU_LOCK_GUARD(&s->rq_lock) { 1482 req->next = s->rq; 1483 s->rq = req; 1484 } 1485 } 1486 1487 return 0; 1488 } 1489 1490 static void virtio_resize_cb(void *opaque) 1491 { 1492 VirtIODevice *vdev = opaque; 1493 1494 assert(qemu_get_current_aio_context() == qemu_get_aio_context()); 1495 virtio_notify_config(vdev); 1496 } 1497 1498 static void virtio_blk_resize(void *opaque) 1499 { 1500 VirtIODevice *vdev = VIRTIO_DEVICE(opaque); 1501 1502 /* 1503 * virtio_notify_config() needs to acquire the BQL, 1504 * so it can't be called from an iothread. Instead, schedule 1505 * it to be run in the main context BH. 1506 */ 1507 aio_bh_schedule_oneshot(qemu_get_aio_context(), virtio_resize_cb, vdev); 1508 } 1509 1510 static void virtio_blk_ioeventfd_detach(VirtIOBlock *s) 1511 { 1512 VirtIODevice *vdev = VIRTIO_DEVICE(s); 1513 1514 for (uint16_t i = 0; i < s->conf.num_queues; i++) { 1515 VirtQueue *vq = virtio_get_queue(vdev, i); 1516 virtio_queue_aio_detach_host_notifier(vq, s->vq_aio_context[i]); 1517 } 1518 } 1519 1520 static void virtio_blk_ioeventfd_attach(VirtIOBlock *s) 1521 { 1522 VirtIODevice *vdev = VIRTIO_DEVICE(s); 1523 1524 for (uint16_t i = 0; i < s->conf.num_queues; i++) { 1525 VirtQueue *vq = virtio_get_queue(vdev, i); 1526 virtio_queue_aio_attach_host_notifier(vq, s->vq_aio_context[i]); 1527 } 1528 } 1529 1530 /* Suspend virtqueue ioeventfd processing during drain */ 1531 static void virtio_blk_drained_begin(void *opaque) 1532 { 1533 VirtIOBlock *s = opaque; 1534 1535 if (s->ioeventfd_started) { 1536 virtio_blk_ioeventfd_detach(s); 1537 } 1538 } 1539 1540 /* Resume virtqueue ioeventfd processing after drain */ 1541 static void virtio_blk_drained_end(void *opaque) 1542 { 1543 VirtIOBlock *s = opaque; 1544 1545 if (s->ioeventfd_started) { 1546 virtio_blk_ioeventfd_attach(s); 1547 } 1548 } 1549 1550 static const BlockDevOps virtio_block_ops = { 1551 .resize_cb = virtio_blk_resize, 1552 .drained_begin = virtio_blk_drained_begin, 1553 .drained_end = virtio_blk_drained_end, 1554 }; 1555 1556 static bool 1557 validate_iothread_vq_mapping_list(IOThreadVirtQueueMappingList *list, 1558 uint16_t num_queues, Error **errp) 1559 { 1560 g_autofree unsigned long *vqs = bitmap_new(num_queues); 1561 g_autoptr(GHashTable) iothreads = 1562 g_hash_table_new(g_str_hash, g_str_equal); 1563 1564 for (IOThreadVirtQueueMappingList *node = list; node; node = node->next) { 1565 const char *name = node->value->iothread; 1566 uint16List *vq; 1567 1568 if (!iothread_by_id(name)) { 1569 error_setg(errp, "IOThread \"%s\" object does not exist", name); 1570 return false; 1571 } 1572 1573 if (!g_hash_table_add(iothreads, (gpointer)name)) { 1574 error_setg(errp, 1575 "duplicate IOThread name \"%s\" in iothread-vq-mapping", 1576 name); 1577 return false; 1578 } 1579 1580 if (node != list) { 1581 if (!!node->value->vqs != !!list->value->vqs) { 1582 error_setg(errp, "either all items in iothread-vq-mapping " 1583 "must have vqs or none of them must have it"); 1584 return false; 1585 } 1586 } 1587 1588 for (vq = node->value->vqs; vq; vq = vq->next) { 1589 if (vq->value >= num_queues) { 1590 error_setg(errp, "vq index %u for IOThread \"%s\" must be " 1591 "less than num_queues %u in iothread-vq-mapping", 1592 vq->value, name, num_queues); 1593 return false; 1594 } 1595 1596 if (test_and_set_bit(vq->value, vqs)) { 1597 error_setg(errp, "cannot assign vq %u to IOThread \"%s\" " 1598 "because it is already assigned", vq->value, name); 1599 return false; 1600 } 1601 } 1602 } 1603 1604 if (list->value->vqs) { 1605 for (uint16_t i = 0; i < num_queues; i++) { 1606 if (!test_bit(i, vqs)) { 1607 error_setg(errp, 1608 "missing vq %u IOThread assignment in iothread-vq-mapping", 1609 i); 1610 return false; 1611 } 1612 } 1613 } 1614 1615 return true; 1616 } 1617 1618 /** 1619 * apply_iothread_vq_mapping: 1620 * @iothread_vq_mapping_list: The mapping of virtqueues to IOThreads. 1621 * @vq_aio_context: The array of AioContext pointers to fill in. 1622 * @num_queues: The length of @vq_aio_context. 1623 * @errp: If an error occurs, a pointer to the area to store the error. 1624 * 1625 * Fill in the AioContext for each virtqueue in the @vq_aio_context array given 1626 * the iothread-vq-mapping parameter in @iothread_vq_mapping_list. 1627 * 1628 * Returns: %true on success, %false on failure. 1629 **/ 1630 static bool apply_iothread_vq_mapping( 1631 IOThreadVirtQueueMappingList *iothread_vq_mapping_list, 1632 AioContext **vq_aio_context, 1633 uint16_t num_queues, 1634 Error **errp) 1635 { 1636 IOThreadVirtQueueMappingList *node; 1637 size_t num_iothreads = 0; 1638 size_t cur_iothread = 0; 1639 1640 if (!validate_iothread_vq_mapping_list(iothread_vq_mapping_list, 1641 num_queues, errp)) { 1642 return false; 1643 } 1644 1645 for (node = iothread_vq_mapping_list; node; node = node->next) { 1646 num_iothreads++; 1647 } 1648 1649 for (node = iothread_vq_mapping_list; node; node = node->next) { 1650 IOThread *iothread = iothread_by_id(node->value->iothread); 1651 AioContext *ctx = iothread_get_aio_context(iothread); 1652 1653 /* Released in virtio_blk_vq_aio_context_cleanup() */ 1654 object_ref(OBJECT(iothread)); 1655 1656 if (node->value->vqs) { 1657 uint16List *vq; 1658 1659 /* Explicit vq:IOThread assignment */ 1660 for (vq = node->value->vqs; vq; vq = vq->next) { 1661 assert(vq->value < num_queues); 1662 vq_aio_context[vq->value] = ctx; 1663 } 1664 } else { 1665 /* Round-robin vq:IOThread assignment */ 1666 for (unsigned i = cur_iothread; i < num_queues; 1667 i += num_iothreads) { 1668 vq_aio_context[i] = ctx; 1669 } 1670 } 1671 1672 cur_iothread++; 1673 } 1674 1675 return true; 1676 } 1677 1678 /* Context: BQL held */ 1679 static bool virtio_blk_vq_aio_context_init(VirtIOBlock *s, Error **errp) 1680 { 1681 VirtIODevice *vdev = VIRTIO_DEVICE(s); 1682 VirtIOBlkConf *conf = &s->conf; 1683 BusState *qbus = BUS(qdev_get_parent_bus(DEVICE(vdev))); 1684 VirtioBusClass *k = VIRTIO_BUS_GET_CLASS(qbus); 1685 1686 if (conf->iothread && conf->iothread_vq_mapping_list) { 1687 error_setg(errp, 1688 "iothread and iothread-vq-mapping properties cannot be set " 1689 "at the same time"); 1690 return false; 1691 } 1692 1693 if (conf->iothread || conf->iothread_vq_mapping_list) { 1694 if (!k->set_guest_notifiers || !k->ioeventfd_assign) { 1695 error_setg(errp, 1696 "device is incompatible with iothread " 1697 "(transport does not support notifiers)"); 1698 return false; 1699 } 1700 if (!virtio_device_ioeventfd_enabled(vdev)) { 1701 error_setg(errp, "ioeventfd is required for iothread"); 1702 return false; 1703 } 1704 1705 /* 1706 * If ioeventfd is (re-)enabled while the guest is running there could 1707 * be block jobs that can conflict. 1708 */ 1709 if (blk_op_is_blocked(conf->conf.blk, BLOCK_OP_TYPE_DATAPLANE, errp)) { 1710 error_prepend(errp, "cannot start virtio-blk ioeventfd: "); 1711 return false; 1712 } 1713 } 1714 1715 s->vq_aio_context = g_new(AioContext *, conf->num_queues); 1716 1717 if (conf->iothread_vq_mapping_list) { 1718 if (!apply_iothread_vq_mapping(conf->iothread_vq_mapping_list, 1719 s->vq_aio_context, 1720 conf->num_queues, 1721 errp)) { 1722 g_free(s->vq_aio_context); 1723 s->vq_aio_context = NULL; 1724 return false; 1725 } 1726 } else if (conf->iothread) { 1727 AioContext *ctx = iothread_get_aio_context(conf->iothread); 1728 for (unsigned i = 0; i < conf->num_queues; i++) { 1729 s->vq_aio_context[i] = ctx; 1730 } 1731 1732 /* Released in virtio_blk_vq_aio_context_cleanup() */ 1733 object_ref(OBJECT(conf->iothread)); 1734 } else { 1735 AioContext *ctx = qemu_get_aio_context(); 1736 for (unsigned i = 0; i < conf->num_queues; i++) { 1737 s->vq_aio_context[i] = ctx; 1738 } 1739 } 1740 1741 return true; 1742 } 1743 1744 /* Context: BQL held */ 1745 static void virtio_blk_vq_aio_context_cleanup(VirtIOBlock *s) 1746 { 1747 VirtIOBlkConf *conf = &s->conf; 1748 1749 assert(!s->ioeventfd_started); 1750 1751 if (conf->iothread_vq_mapping_list) { 1752 IOThreadVirtQueueMappingList *node; 1753 1754 for (node = conf->iothread_vq_mapping_list; node; node = node->next) { 1755 IOThread *iothread = iothread_by_id(node->value->iothread); 1756 object_unref(OBJECT(iothread)); 1757 } 1758 } 1759 1760 if (conf->iothread) { 1761 object_unref(OBJECT(conf->iothread)); 1762 } 1763 1764 g_free(s->vq_aio_context); 1765 s->vq_aio_context = NULL; 1766 } 1767 1768 /* Context: BQL held */ 1769 static int virtio_blk_start_ioeventfd(VirtIODevice *vdev) 1770 { 1771 VirtIOBlock *s = VIRTIO_BLK(vdev); 1772 BusState *qbus = BUS(qdev_get_parent_bus(DEVICE(s))); 1773 VirtioBusClass *k = VIRTIO_BUS_GET_CLASS(qbus); 1774 unsigned i; 1775 unsigned nvqs = s->conf.num_queues; 1776 Error *local_err = NULL; 1777 int r; 1778 1779 if (s->ioeventfd_started || s->ioeventfd_starting) { 1780 return 0; 1781 } 1782 1783 s->ioeventfd_starting = true; 1784 1785 /* Set up guest notifier (irq) */ 1786 r = k->set_guest_notifiers(qbus->parent, nvqs, true); 1787 if (r != 0) { 1788 error_report("virtio-blk failed to set guest notifier (%d), " 1789 "ensure -accel kvm is set.", r); 1790 goto fail_guest_notifiers; 1791 } 1792 1793 /* 1794 * Batch all the host notifiers in a single transaction to avoid 1795 * quadratic time complexity in address_space_update_ioeventfds(). 1796 */ 1797 memory_region_transaction_begin(); 1798 1799 /* Set up virtqueue notify */ 1800 for (i = 0; i < nvqs; i++) { 1801 r = virtio_bus_set_host_notifier(VIRTIO_BUS(qbus), i, true); 1802 if (r != 0) { 1803 int j = i; 1804 1805 fprintf(stderr, "virtio-blk failed to set host notifier (%d)\n", r); 1806 while (i--) { 1807 virtio_bus_set_host_notifier(VIRTIO_BUS(qbus), i, false); 1808 } 1809 1810 /* 1811 * The transaction expects the ioeventfds to be open when it 1812 * commits. Do it now, before the cleanup loop. 1813 */ 1814 memory_region_transaction_commit(); 1815 1816 while (j--) { 1817 virtio_bus_cleanup_host_notifier(VIRTIO_BUS(qbus), j); 1818 } 1819 goto fail_host_notifiers; 1820 } 1821 } 1822 1823 memory_region_transaction_commit(); 1824 1825 /* 1826 * Try to change the AioContext so that block jobs and other operations can 1827 * co-locate their activity in the same AioContext. If it fails, nevermind. 1828 */ 1829 assert(nvqs > 0); /* enforced during ->realize() */ 1830 r = blk_set_aio_context(s->conf.conf.blk, s->vq_aio_context[0], 1831 &local_err); 1832 if (r < 0) { 1833 warn_report_err(local_err); 1834 } 1835 1836 /* 1837 * These fields must be visible to the IOThread when it processes the 1838 * virtqueue, otherwise it will think ioeventfd has not started yet. 1839 * 1840 * Make sure ->ioeventfd_started is false when blk_set_aio_context() is 1841 * called above so that draining does not cause the host notifier to be 1842 * detached/attached prematurely. 1843 */ 1844 s->ioeventfd_starting = false; 1845 s->ioeventfd_started = true; 1846 smp_wmb(); /* paired with aio_notify_accept() on the read side */ 1847 1848 /* Get this show started by hooking up our callbacks */ 1849 for (i = 0; i < nvqs; i++) { 1850 VirtQueue *vq = virtio_get_queue(vdev, i); 1851 AioContext *ctx = s->vq_aio_context[i]; 1852 1853 /* Kick right away to begin processing requests already in vring */ 1854 event_notifier_set(virtio_queue_get_host_notifier(vq)); 1855 1856 if (!blk_in_drain(s->conf.conf.blk)) { 1857 virtio_queue_aio_attach_host_notifier(vq, ctx); 1858 } 1859 } 1860 return 0; 1861 1862 fail_host_notifiers: 1863 k->set_guest_notifiers(qbus->parent, nvqs, false); 1864 fail_guest_notifiers: 1865 s->ioeventfd_disabled = true; 1866 s->ioeventfd_starting = false; 1867 return -ENOSYS; 1868 } 1869 1870 /* Stop notifications for new requests from guest. 1871 * 1872 * Context: BH in IOThread 1873 */ 1874 static void virtio_blk_ioeventfd_stop_vq_bh(void *opaque) 1875 { 1876 VirtQueue *vq = opaque; 1877 EventNotifier *host_notifier = virtio_queue_get_host_notifier(vq); 1878 1879 virtio_queue_aio_detach_host_notifier(vq, qemu_get_current_aio_context()); 1880 1881 /* 1882 * Test and clear notifier after disabling event, in case poll callback 1883 * didn't have time to run. 1884 */ 1885 virtio_queue_host_notifier_read(host_notifier); 1886 } 1887 1888 /* Context: BQL held */ 1889 static void virtio_blk_stop_ioeventfd(VirtIODevice *vdev) 1890 { 1891 VirtIOBlock *s = VIRTIO_BLK(vdev); 1892 BusState *qbus = qdev_get_parent_bus(DEVICE(s)); 1893 VirtioBusClass *k = VIRTIO_BUS_GET_CLASS(qbus); 1894 unsigned i; 1895 unsigned nvqs = s->conf.num_queues; 1896 1897 if (!s->ioeventfd_started || s->ioeventfd_stopping) { 1898 return; 1899 } 1900 1901 /* Better luck next time. */ 1902 if (s->ioeventfd_disabled) { 1903 s->ioeventfd_disabled = false; 1904 s->ioeventfd_started = false; 1905 return; 1906 } 1907 s->ioeventfd_stopping = true; 1908 1909 if (!blk_in_drain(s->conf.conf.blk)) { 1910 for (i = 0; i < nvqs; i++) { 1911 VirtQueue *vq = virtio_get_queue(vdev, i); 1912 AioContext *ctx = s->vq_aio_context[i]; 1913 1914 aio_wait_bh_oneshot(ctx, virtio_blk_ioeventfd_stop_vq_bh, vq); 1915 } 1916 } 1917 1918 /* 1919 * Batch all the host notifiers in a single transaction to avoid 1920 * quadratic time complexity in address_space_update_ioeventfds(). 1921 */ 1922 memory_region_transaction_begin(); 1923 1924 for (i = 0; i < nvqs; i++) { 1925 virtio_bus_set_host_notifier(VIRTIO_BUS(qbus), i, false); 1926 } 1927 1928 /* 1929 * The transaction expects the ioeventfds to be open when it 1930 * commits. Do it now, before the cleanup loop. 1931 */ 1932 memory_region_transaction_commit(); 1933 1934 for (i = 0; i < nvqs; i++) { 1935 virtio_bus_cleanup_host_notifier(VIRTIO_BUS(qbus), i); 1936 } 1937 1938 /* 1939 * Set ->ioeventfd_started to false before draining so that host notifiers 1940 * are not detached/attached anymore. 1941 */ 1942 s->ioeventfd_started = false; 1943 1944 /* Wait for virtio_blk_dma_restart_bh() and in flight I/O to complete */ 1945 blk_drain(s->conf.conf.blk); 1946 1947 /* 1948 * Try to switch bs back to the QEMU main loop. If other users keep the 1949 * BlockBackend in the iothread, that's ok 1950 */ 1951 blk_set_aio_context(s->conf.conf.blk, qemu_get_aio_context(), NULL); 1952 1953 /* Clean up guest notifier (irq) */ 1954 k->set_guest_notifiers(qbus->parent, nvqs, false); 1955 1956 s->ioeventfd_stopping = false; 1957 } 1958 1959 static void virtio_blk_device_realize(DeviceState *dev, Error **errp) 1960 { 1961 VirtIODevice *vdev = VIRTIO_DEVICE(dev); 1962 VirtIOBlock *s = VIRTIO_BLK(dev); 1963 VirtIOBlkConf *conf = &s->conf; 1964 Error *err = NULL; 1965 unsigned i; 1966 1967 if (!conf->conf.blk) { 1968 error_setg(errp, "drive property not set"); 1969 return; 1970 } 1971 if (!blk_is_inserted(conf->conf.blk)) { 1972 error_setg(errp, "Device needs media, but drive is empty"); 1973 return; 1974 } 1975 if (conf->num_queues == VIRTIO_BLK_AUTO_NUM_QUEUES) { 1976 conf->num_queues = 1; 1977 } 1978 if (!conf->num_queues) { 1979 error_setg(errp, "num-queues property must be larger than 0"); 1980 return; 1981 } 1982 if (conf->queue_size <= 2) { 1983 error_setg(errp, "invalid queue-size property (%" PRIu16 "), " 1984 "must be > 2", conf->queue_size); 1985 return; 1986 } 1987 if (!is_power_of_2(conf->queue_size) || 1988 conf->queue_size > VIRTQUEUE_MAX_SIZE) { 1989 error_setg(errp, "invalid queue-size property (%" PRIu16 "), " 1990 "must be a power of 2 (max %d)", 1991 conf->queue_size, VIRTQUEUE_MAX_SIZE); 1992 return; 1993 } 1994 1995 if (!blkconf_apply_backend_options(&conf->conf, 1996 !blk_supports_write_perm(conf->conf.blk), 1997 true, errp)) { 1998 return; 1999 } 2000 s->original_wce = blk_enable_write_cache(conf->conf.blk); 2001 if (!blkconf_geometry(&conf->conf, NULL, 65535, 255, 255, errp)) { 2002 return; 2003 } 2004 2005 if (!blkconf_blocksizes(&conf->conf, errp)) { 2006 return; 2007 } 2008 2009 BlockDriverState *bs = blk_bs(conf->conf.blk); 2010 if (bs->bl.zoned != BLK_Z_NONE) { 2011 virtio_add_feature(&s->host_features, VIRTIO_BLK_F_ZONED); 2012 if (bs->bl.zoned == BLK_Z_HM) { 2013 virtio_clear_feature(&s->host_features, VIRTIO_BLK_F_DISCARD); 2014 } 2015 } 2016 2017 if (virtio_has_feature(s->host_features, VIRTIO_BLK_F_DISCARD) && 2018 (!conf->max_discard_sectors || 2019 conf->max_discard_sectors > BDRV_REQUEST_MAX_SECTORS)) { 2020 error_setg(errp, "invalid max-discard-sectors property (%" PRIu32 ")" 2021 ", must be between 1 and %d", 2022 conf->max_discard_sectors, (int)BDRV_REQUEST_MAX_SECTORS); 2023 return; 2024 } 2025 2026 if (virtio_has_feature(s->host_features, VIRTIO_BLK_F_WRITE_ZEROES) && 2027 (!conf->max_write_zeroes_sectors || 2028 conf->max_write_zeroes_sectors > BDRV_REQUEST_MAX_SECTORS)) { 2029 error_setg(errp, "invalid max-write-zeroes-sectors property (%" PRIu32 2030 "), must be between 1 and %d", 2031 conf->max_write_zeroes_sectors, 2032 (int)BDRV_REQUEST_MAX_SECTORS); 2033 return; 2034 } 2035 2036 s->config_size = virtio_get_config_size(&virtio_blk_cfg_size_params, 2037 s->host_features); 2038 virtio_init(vdev, VIRTIO_ID_BLOCK, s->config_size); 2039 2040 qemu_mutex_init(&s->rq_lock); 2041 2042 s->blk = conf->conf.blk; 2043 s->rq = NULL; 2044 s->sector_mask = (s->conf.conf.logical_block_size / BDRV_SECTOR_SIZE) - 1; 2045 2046 for (i = 0; i < conf->num_queues; i++) { 2047 virtio_add_queue(vdev, conf->queue_size, virtio_blk_handle_output); 2048 } 2049 qemu_coroutine_inc_pool_size(conf->num_queues * conf->queue_size / 2); 2050 2051 /* Don't start ioeventfd if transport does not support notifiers. */ 2052 if (!virtio_device_ioeventfd_enabled(vdev)) { 2053 s->ioeventfd_disabled = true; 2054 } 2055 2056 virtio_blk_vq_aio_context_init(s, &err); 2057 if (err != NULL) { 2058 error_propagate(errp, err); 2059 for (i = 0; i < conf->num_queues; i++) { 2060 virtio_del_queue(vdev, i); 2061 } 2062 virtio_cleanup(vdev); 2063 return; 2064 } 2065 2066 /* 2067 * This must be after virtio_init() so virtio_blk_dma_restart_cb() gets 2068 * called after ->start_ioeventfd() has already set blk's AioContext. 2069 */ 2070 s->change = 2071 qdev_add_vm_change_state_handler(dev, virtio_blk_dma_restart_cb, s); 2072 2073 blk_ram_registrar_init(&s->blk_ram_registrar, s->blk); 2074 blk_set_dev_ops(s->blk, &virtio_block_ops, s); 2075 2076 blk_iostatus_enable(s->blk); 2077 2078 add_boot_device_lchs(dev, "/disk@0,0", 2079 conf->conf.lcyls, 2080 conf->conf.lheads, 2081 conf->conf.lsecs); 2082 } 2083 2084 static void virtio_blk_device_unrealize(DeviceState *dev) 2085 { 2086 VirtIODevice *vdev = VIRTIO_DEVICE(dev); 2087 VirtIOBlock *s = VIRTIO_BLK(dev); 2088 VirtIOBlkConf *conf = &s->conf; 2089 unsigned i; 2090 2091 blk_drain(s->blk); 2092 del_boot_device_lchs(dev, "/disk@0,0"); 2093 virtio_blk_vq_aio_context_cleanup(s); 2094 for (i = 0; i < conf->num_queues; i++) { 2095 virtio_del_queue(vdev, i); 2096 } 2097 qemu_coroutine_dec_pool_size(conf->num_queues * conf->queue_size / 2); 2098 qemu_mutex_destroy(&s->rq_lock); 2099 blk_ram_registrar_destroy(&s->blk_ram_registrar); 2100 qemu_del_vm_change_state_handler(s->change); 2101 blockdev_mark_auto_del(s->blk); 2102 virtio_cleanup(vdev); 2103 } 2104 2105 static void virtio_blk_instance_init(Object *obj) 2106 { 2107 VirtIOBlock *s = VIRTIO_BLK(obj); 2108 2109 device_add_bootindex_property(obj, &s->conf.conf.bootindex, 2110 "bootindex", "/disk@0,0", 2111 DEVICE(obj)); 2112 } 2113 2114 static const VMStateDescription vmstate_virtio_blk = { 2115 .name = "virtio-blk", 2116 .minimum_version_id = 2, 2117 .version_id = 2, 2118 .fields = (const VMStateField[]) { 2119 VMSTATE_VIRTIO_DEVICE, 2120 VMSTATE_END_OF_LIST() 2121 }, 2122 }; 2123 2124 static Property virtio_blk_properties[] = { 2125 DEFINE_BLOCK_PROPERTIES(VirtIOBlock, conf.conf), 2126 DEFINE_BLOCK_ERROR_PROPERTIES(VirtIOBlock, conf.conf), 2127 DEFINE_BLOCK_CHS_PROPERTIES(VirtIOBlock, conf.conf), 2128 DEFINE_PROP_STRING("serial", VirtIOBlock, conf.serial), 2129 DEFINE_PROP_BIT64("config-wce", VirtIOBlock, host_features, 2130 VIRTIO_BLK_F_CONFIG_WCE, true), 2131 #ifdef __linux__ 2132 DEFINE_PROP_BIT64("scsi", VirtIOBlock, host_features, 2133 VIRTIO_BLK_F_SCSI, false), 2134 #endif 2135 DEFINE_PROP_BIT("request-merging", VirtIOBlock, conf.request_merging, 0, 2136 true), 2137 DEFINE_PROP_UINT16("num-queues", VirtIOBlock, conf.num_queues, 2138 VIRTIO_BLK_AUTO_NUM_QUEUES), 2139 DEFINE_PROP_UINT16("queue-size", VirtIOBlock, conf.queue_size, 256), 2140 DEFINE_PROP_BOOL("seg-max-adjust", VirtIOBlock, conf.seg_max_adjust, true), 2141 DEFINE_PROP_LINK("iothread", VirtIOBlock, conf.iothread, TYPE_IOTHREAD, 2142 IOThread *), 2143 DEFINE_PROP_IOTHREAD_VQ_MAPPING_LIST("iothread-vq-mapping", VirtIOBlock, 2144 conf.iothread_vq_mapping_list), 2145 DEFINE_PROP_BIT64("discard", VirtIOBlock, host_features, 2146 VIRTIO_BLK_F_DISCARD, true), 2147 DEFINE_PROP_BOOL("report-discard-granularity", VirtIOBlock, 2148 conf.report_discard_granularity, true), 2149 DEFINE_PROP_BIT64("write-zeroes", VirtIOBlock, host_features, 2150 VIRTIO_BLK_F_WRITE_ZEROES, true), 2151 DEFINE_PROP_UINT32("max-discard-sectors", VirtIOBlock, 2152 conf.max_discard_sectors, BDRV_REQUEST_MAX_SECTORS), 2153 DEFINE_PROP_UINT32("max-write-zeroes-sectors", VirtIOBlock, 2154 conf.max_write_zeroes_sectors, BDRV_REQUEST_MAX_SECTORS), 2155 DEFINE_PROP_BOOL("x-enable-wce-if-config-wce", VirtIOBlock, 2156 conf.x_enable_wce_if_config_wce, true), 2157 DEFINE_PROP_END_OF_LIST(), 2158 }; 2159 2160 static void virtio_blk_class_init(ObjectClass *klass, void *data) 2161 { 2162 DeviceClass *dc = DEVICE_CLASS(klass); 2163 VirtioDeviceClass *vdc = VIRTIO_DEVICE_CLASS(klass); 2164 2165 device_class_set_props(dc, virtio_blk_properties); 2166 dc->vmsd = &vmstate_virtio_blk; 2167 set_bit(DEVICE_CATEGORY_STORAGE, dc->categories); 2168 vdc->realize = virtio_blk_device_realize; 2169 vdc->unrealize = virtio_blk_device_unrealize; 2170 vdc->get_config = virtio_blk_update_config; 2171 vdc->set_config = virtio_blk_set_config; 2172 vdc->get_features = virtio_blk_get_features; 2173 vdc->set_status = virtio_blk_set_status; 2174 vdc->reset = virtio_blk_reset; 2175 vdc->save = virtio_blk_save_device; 2176 vdc->load = virtio_blk_load_device; 2177 vdc->start_ioeventfd = virtio_blk_start_ioeventfd; 2178 vdc->stop_ioeventfd = virtio_blk_stop_ioeventfd; 2179 } 2180 2181 static const TypeInfo virtio_blk_info = { 2182 .name = TYPE_VIRTIO_BLK, 2183 .parent = TYPE_VIRTIO_DEVICE, 2184 .instance_size = sizeof(VirtIOBlock), 2185 .instance_init = virtio_blk_instance_init, 2186 .class_init = virtio_blk_class_init, 2187 }; 2188 2189 static void virtio_register_types(void) 2190 { 2191 type_register_static(&virtio_blk_info); 2192 } 2193 2194 type_init(virtio_register_types) 2195