xref: /openbmc/linux/drivers/block/nbd.c (revision ca55b2fef3a9373fcfc30f82fd26bc7fccbda732)
1 /*
2  * Network block device - make block devices work over TCP
3  *
4  * Note that you can not swap over this thing, yet. Seems to work but
5  * deadlocks sometimes - you can not swap over TCP in general.
6  *
7  * Copyright 1997-2000, 2008 Pavel Machek <pavel@ucw.cz>
8  * Parts copyright 2001 Steven Whitehouse <steve@chygwyn.com>
9  *
10  * This file is released under GPLv2 or later.
11  *
12  * (part of code stolen from loop.c)
13  */
14 
15 #include <linux/major.h>
16 
17 #include <linux/blkdev.h>
18 #include <linux/module.h>
19 #include <linux/init.h>
20 #include <linux/sched.h>
21 #include <linux/fs.h>
22 #include <linux/bio.h>
23 #include <linux/stat.h>
24 #include <linux/errno.h>
25 #include <linux/file.h>
26 #include <linux/ioctl.h>
27 #include <linux/mutex.h>
28 #include <linux/compiler.h>
29 #include <linux/err.h>
30 #include <linux/kernel.h>
31 #include <linux/slab.h>
32 #include <net/sock.h>
33 #include <linux/net.h>
34 #include <linux/kthread.h>
35 #include <linux/types.h>
36 #include <linux/debugfs.h>
37 
38 #include <asm/uaccess.h>
39 #include <asm/types.h>
40 
41 #include <linux/nbd.h>
42 
43 struct nbd_device {
44 	u32 flags;
45 	struct socket * sock;	/* If == NULL, device is not ready, yet	*/
46 	int magic;
47 
48 	spinlock_t queue_lock;
49 	struct list_head queue_head;	/* Requests waiting result */
50 	struct request *active_req;
51 	wait_queue_head_t active_wq;
52 	struct list_head waiting_queue;	/* Requests to be sent */
53 	wait_queue_head_t waiting_wq;
54 
55 	struct mutex tx_lock;
56 	struct gendisk *disk;
57 	int blksize;
58 	loff_t bytesize;
59 	int xmit_timeout;
60 	bool disconnect; /* a disconnect has been requested by user */
61 
62 	struct timer_list timeout_timer;
63 	spinlock_t tasks_lock;
64 	struct task_struct *task_recv;
65 	struct task_struct *task_send;
66 
67 #if IS_ENABLED(CONFIG_DEBUG_FS)
68 	struct dentry *dbg_dir;
69 #endif
70 };
71 
72 #if IS_ENABLED(CONFIG_DEBUG_FS)
73 static struct dentry *nbd_dbg_dir;
74 #endif
75 
76 #define nbd_name(nbd) ((nbd)->disk->disk_name)
77 
78 #define NBD_MAGIC 0x68797548
79 
80 static unsigned int nbds_max = 16;
81 static struct nbd_device *nbd_dev;
82 static int max_part;
83 
84 /*
85  * Use just one lock (or at most 1 per NIC). Two arguments for this:
86  * 1. Each NIC is essentially a synchronization point for all servers
87  *    accessed through that NIC so there's no need to have more locks
88  *    than NICs anyway.
89  * 2. More locks lead to more "Dirty cache line bouncing" which will slow
90  *    down each lock to the point where they're actually slower than just
91  *    a single lock.
92  * Thanks go to Jens Axboe and Al Viro for their LKML emails explaining this!
93  */
94 static DEFINE_SPINLOCK(nbd_lock);
95 
96 static inline struct device *nbd_to_dev(struct nbd_device *nbd)
97 {
98 	return disk_to_dev(nbd->disk);
99 }
100 
101 static const char *nbdcmd_to_ascii(int cmd)
102 {
103 	switch (cmd) {
104 	case  NBD_CMD_READ: return "read";
105 	case NBD_CMD_WRITE: return "write";
106 	case  NBD_CMD_DISC: return "disconnect";
107 	case NBD_CMD_FLUSH: return "flush";
108 	case  NBD_CMD_TRIM: return "trim/discard";
109 	}
110 	return "invalid";
111 }
112 
113 static void nbd_end_request(struct nbd_device *nbd, struct request *req)
114 {
115 	int error = req->errors ? -EIO : 0;
116 	struct request_queue *q = req->q;
117 	unsigned long flags;
118 
119 	dev_dbg(nbd_to_dev(nbd), "request %p: %s\n", req,
120 		error ? "failed" : "done");
121 
122 	spin_lock_irqsave(q->queue_lock, flags);
123 	__blk_end_request_all(req, error);
124 	spin_unlock_irqrestore(q->queue_lock, flags);
125 }
126 
127 /*
128  * Forcibly shutdown the socket causing all listeners to error
129  */
130 static void sock_shutdown(struct nbd_device *nbd)
131 {
132 	if (!nbd->sock)
133 		return;
134 
135 	dev_warn(disk_to_dev(nbd->disk), "shutting down socket\n");
136 	kernel_sock_shutdown(nbd->sock, SHUT_RDWR);
137 	nbd->sock = NULL;
138 	del_timer_sync(&nbd->timeout_timer);
139 }
140 
141 static void nbd_xmit_timeout(unsigned long arg)
142 {
143 	struct nbd_device *nbd = (struct nbd_device *)arg;
144 	unsigned long flags;
145 
146 	if (list_empty(&nbd->queue_head))
147 		return;
148 
149 	nbd->disconnect = true;
150 
151 	spin_lock_irqsave(&nbd->tasks_lock, flags);
152 
153 	if (nbd->task_recv)
154 		force_sig(SIGKILL, nbd->task_recv);
155 
156 	if (nbd->task_send)
157 		force_sig(SIGKILL, nbd->task_send);
158 
159 	spin_unlock_irqrestore(&nbd->tasks_lock, flags);
160 
161 	dev_err(nbd_to_dev(nbd), "Connection timed out, killed receiver and sender, shutting down connection\n");
162 }
163 
164 /*
165  *  Send or receive packet.
166  */
167 static int sock_xmit(struct nbd_device *nbd, int send, void *buf, int size,
168 		int msg_flags)
169 {
170 	struct socket *sock = nbd->sock;
171 	int result;
172 	struct msghdr msg;
173 	struct kvec iov;
174 	sigset_t blocked, oldset;
175 	unsigned long pflags = current->flags;
176 
177 	if (unlikely(!sock)) {
178 		dev_err(disk_to_dev(nbd->disk),
179 			"Attempted %s on closed socket in sock_xmit\n",
180 			(send ? "send" : "recv"));
181 		return -EINVAL;
182 	}
183 
184 	/* Allow interception of SIGKILL only
185 	 * Don't allow other signals to interrupt the transmission */
186 	siginitsetinv(&blocked, sigmask(SIGKILL));
187 	sigprocmask(SIG_SETMASK, &blocked, &oldset);
188 
189 	current->flags |= PF_MEMALLOC;
190 	do {
191 		sock->sk->sk_allocation = GFP_NOIO | __GFP_MEMALLOC;
192 		iov.iov_base = buf;
193 		iov.iov_len = size;
194 		msg.msg_name = NULL;
195 		msg.msg_namelen = 0;
196 		msg.msg_control = NULL;
197 		msg.msg_controllen = 0;
198 		msg.msg_flags = msg_flags | MSG_NOSIGNAL;
199 
200 		if (send)
201 			result = kernel_sendmsg(sock, &msg, &iov, 1, size);
202 		else
203 			result = kernel_recvmsg(sock, &msg, &iov, 1, size,
204 						msg.msg_flags);
205 
206 		if (result <= 0) {
207 			if (result == 0)
208 				result = -EPIPE; /* short read */
209 			break;
210 		}
211 		size -= result;
212 		buf += result;
213 	} while (size > 0);
214 
215 	sigprocmask(SIG_SETMASK, &oldset, NULL);
216 	tsk_restore_flags(current, pflags, PF_MEMALLOC);
217 
218 	if (!send && nbd->xmit_timeout)
219 		mod_timer(&nbd->timeout_timer, jiffies + nbd->xmit_timeout);
220 
221 	return result;
222 }
223 
224 static inline int sock_send_bvec(struct nbd_device *nbd, struct bio_vec *bvec,
225 		int flags)
226 {
227 	int result;
228 	void *kaddr = kmap(bvec->bv_page);
229 	result = sock_xmit(nbd, 1, kaddr + bvec->bv_offset,
230 			   bvec->bv_len, flags);
231 	kunmap(bvec->bv_page);
232 	return result;
233 }
234 
235 /* always call with the tx_lock held */
236 static int nbd_send_req(struct nbd_device *nbd, struct request *req)
237 {
238 	int result, flags;
239 	struct nbd_request request;
240 	unsigned long size = blk_rq_bytes(req);
241 	u32 type;
242 
243 	if (req->cmd_type == REQ_TYPE_DRV_PRIV)
244 		type = NBD_CMD_DISC;
245 	else if (req->cmd_flags & REQ_DISCARD)
246 		type = NBD_CMD_TRIM;
247 	else if (req->cmd_flags & REQ_FLUSH)
248 		type = NBD_CMD_FLUSH;
249 	else if (rq_data_dir(req) == WRITE)
250 		type = NBD_CMD_WRITE;
251 	else
252 		type = NBD_CMD_READ;
253 
254 	memset(&request, 0, sizeof(request));
255 	request.magic = htonl(NBD_REQUEST_MAGIC);
256 	request.type = htonl(type);
257 	if (type != NBD_CMD_FLUSH && type != NBD_CMD_DISC) {
258 		request.from = cpu_to_be64((u64)blk_rq_pos(req) << 9);
259 		request.len = htonl(size);
260 	}
261 	memcpy(request.handle, &req, sizeof(req));
262 
263 	dev_dbg(nbd_to_dev(nbd), "request %p: sending control (%s@%llu,%uB)\n",
264 		req, nbdcmd_to_ascii(type),
265 		(unsigned long long)blk_rq_pos(req) << 9, blk_rq_bytes(req));
266 	result = sock_xmit(nbd, 1, &request, sizeof(request),
267 			(type == NBD_CMD_WRITE) ? MSG_MORE : 0);
268 	if (result <= 0) {
269 		dev_err(disk_to_dev(nbd->disk),
270 			"Send control failed (result %d)\n", result);
271 		return -EIO;
272 	}
273 
274 	if (type == NBD_CMD_WRITE) {
275 		struct req_iterator iter;
276 		struct bio_vec bvec;
277 		/*
278 		 * we are really probing at internals to determine
279 		 * whether to set MSG_MORE or not...
280 		 */
281 		rq_for_each_segment(bvec, req, iter) {
282 			flags = 0;
283 			if (!rq_iter_last(bvec, iter))
284 				flags = MSG_MORE;
285 			dev_dbg(nbd_to_dev(nbd), "request %p: sending %d bytes data\n",
286 				req, bvec.bv_len);
287 			result = sock_send_bvec(nbd, &bvec, flags);
288 			if (result <= 0) {
289 				dev_err(disk_to_dev(nbd->disk),
290 					"Send data failed (result %d)\n",
291 					result);
292 				return -EIO;
293 			}
294 		}
295 	}
296 	return 0;
297 }
298 
299 static struct request *nbd_find_request(struct nbd_device *nbd,
300 					struct request *xreq)
301 {
302 	struct request *req, *tmp;
303 	int err;
304 
305 	err = wait_event_interruptible(nbd->active_wq, nbd->active_req != xreq);
306 	if (unlikely(err))
307 		return ERR_PTR(err);
308 
309 	spin_lock(&nbd->queue_lock);
310 	list_for_each_entry_safe(req, tmp, &nbd->queue_head, queuelist) {
311 		if (req != xreq)
312 			continue;
313 		list_del_init(&req->queuelist);
314 		spin_unlock(&nbd->queue_lock);
315 		return req;
316 	}
317 	spin_unlock(&nbd->queue_lock);
318 
319 	return ERR_PTR(-ENOENT);
320 }
321 
322 static inline int sock_recv_bvec(struct nbd_device *nbd, struct bio_vec *bvec)
323 {
324 	int result;
325 	void *kaddr = kmap(bvec->bv_page);
326 	result = sock_xmit(nbd, 0, kaddr + bvec->bv_offset, bvec->bv_len,
327 			MSG_WAITALL);
328 	kunmap(bvec->bv_page);
329 	return result;
330 }
331 
332 /* NULL returned = something went wrong, inform userspace */
333 static struct request *nbd_read_stat(struct nbd_device *nbd)
334 {
335 	int result;
336 	struct nbd_reply reply;
337 	struct request *req;
338 
339 	reply.magic = 0;
340 	result = sock_xmit(nbd, 0, &reply, sizeof(reply), MSG_WAITALL);
341 	if (result <= 0) {
342 		dev_err(disk_to_dev(nbd->disk),
343 			"Receive control failed (result %d)\n", result);
344 		return ERR_PTR(result);
345 	}
346 
347 	if (ntohl(reply.magic) != NBD_REPLY_MAGIC) {
348 		dev_err(disk_to_dev(nbd->disk), "Wrong magic (0x%lx)\n",
349 				(unsigned long)ntohl(reply.magic));
350 		return ERR_PTR(-EPROTO);
351 	}
352 
353 	req = nbd_find_request(nbd, *(struct request **)reply.handle);
354 	if (IS_ERR(req)) {
355 		result = PTR_ERR(req);
356 		if (result != -ENOENT)
357 			return ERR_PTR(result);
358 
359 		dev_err(disk_to_dev(nbd->disk), "Unexpected reply (%p)\n",
360 			reply.handle);
361 		return ERR_PTR(-EBADR);
362 	}
363 
364 	if (ntohl(reply.error)) {
365 		dev_err(disk_to_dev(nbd->disk), "Other side returned error (%d)\n",
366 			ntohl(reply.error));
367 		req->errors++;
368 		return req;
369 	}
370 
371 	dev_dbg(nbd_to_dev(nbd), "request %p: got reply\n", req);
372 	if (rq_data_dir(req) != WRITE) {
373 		struct req_iterator iter;
374 		struct bio_vec bvec;
375 
376 		rq_for_each_segment(bvec, req, iter) {
377 			result = sock_recv_bvec(nbd, &bvec);
378 			if (result <= 0) {
379 				dev_err(disk_to_dev(nbd->disk), "Receive data failed (result %d)\n",
380 					result);
381 				req->errors++;
382 				return req;
383 			}
384 			dev_dbg(nbd_to_dev(nbd), "request %p: got %d bytes data\n",
385 				req, bvec.bv_len);
386 		}
387 	}
388 	return req;
389 }
390 
391 static ssize_t pid_show(struct device *dev,
392 			struct device_attribute *attr, char *buf)
393 {
394 	struct gendisk *disk = dev_to_disk(dev);
395 	struct nbd_device *nbd = (struct nbd_device *)disk->private_data;
396 
397 	return sprintf(buf, "%d\n", task_pid_nr(nbd->task_recv));
398 }
399 
400 static struct device_attribute pid_attr = {
401 	.attr = { .name = "pid", .mode = S_IRUGO},
402 	.show = pid_show,
403 };
404 
405 static int nbd_thread_recv(struct nbd_device *nbd)
406 {
407 	struct request *req;
408 	int ret;
409 	unsigned long flags;
410 
411 	BUG_ON(nbd->magic != NBD_MAGIC);
412 
413 	sk_set_memalloc(nbd->sock->sk);
414 
415 	spin_lock_irqsave(&nbd->tasks_lock, flags);
416 	nbd->task_recv = current;
417 	spin_unlock_irqrestore(&nbd->tasks_lock, flags);
418 
419 	ret = device_create_file(disk_to_dev(nbd->disk), &pid_attr);
420 	if (ret) {
421 		dev_err(disk_to_dev(nbd->disk), "device_create_file failed!\n");
422 
423 		spin_lock_irqsave(&nbd->tasks_lock, flags);
424 		nbd->task_recv = NULL;
425 		spin_unlock_irqrestore(&nbd->tasks_lock, flags);
426 
427 		return ret;
428 	}
429 
430 	while (1) {
431 		req = nbd_read_stat(nbd);
432 		if (IS_ERR(req)) {
433 			ret = PTR_ERR(req);
434 			break;
435 		}
436 
437 		nbd_end_request(nbd, req);
438 	}
439 
440 	device_remove_file(disk_to_dev(nbd->disk), &pid_attr);
441 
442 	spin_lock_irqsave(&nbd->tasks_lock, flags);
443 	nbd->task_recv = NULL;
444 	spin_unlock_irqrestore(&nbd->tasks_lock, flags);
445 
446 	if (signal_pending(current)) {
447 		siginfo_t info;
448 
449 		ret = dequeue_signal_lock(current, &current->blocked, &info);
450 		dev_warn(nbd_to_dev(nbd), "pid %d, %s, got signal %d\n",
451 			 task_pid_nr(current), current->comm, ret);
452 		mutex_lock(&nbd->tx_lock);
453 		sock_shutdown(nbd);
454 		mutex_unlock(&nbd->tx_lock);
455 		ret = -ETIMEDOUT;
456 	}
457 
458 	return ret;
459 }
460 
461 static void nbd_clear_que(struct nbd_device *nbd)
462 {
463 	struct request *req;
464 
465 	BUG_ON(nbd->magic != NBD_MAGIC);
466 
467 	/*
468 	 * Because we have set nbd->sock to NULL under the tx_lock, all
469 	 * modifications to the list must have completed by now.  For
470 	 * the same reason, the active_req must be NULL.
471 	 *
472 	 * As a consequence, we don't need to take the spin lock while
473 	 * purging the list here.
474 	 */
475 	BUG_ON(nbd->sock);
476 	BUG_ON(nbd->active_req);
477 
478 	while (!list_empty(&nbd->queue_head)) {
479 		req = list_entry(nbd->queue_head.next, struct request,
480 				 queuelist);
481 		list_del_init(&req->queuelist);
482 		req->errors++;
483 		nbd_end_request(nbd, req);
484 	}
485 
486 	while (!list_empty(&nbd->waiting_queue)) {
487 		req = list_entry(nbd->waiting_queue.next, struct request,
488 				 queuelist);
489 		list_del_init(&req->queuelist);
490 		req->errors++;
491 		nbd_end_request(nbd, req);
492 	}
493 	dev_dbg(disk_to_dev(nbd->disk), "queue cleared\n");
494 }
495 
496 
497 static void nbd_handle_req(struct nbd_device *nbd, struct request *req)
498 {
499 	if (req->cmd_type != REQ_TYPE_FS)
500 		goto error_out;
501 
502 	if (rq_data_dir(req) == WRITE &&
503 	    (nbd->flags & NBD_FLAG_READ_ONLY)) {
504 		dev_err(disk_to_dev(nbd->disk),
505 			"Write on read-only\n");
506 		goto error_out;
507 	}
508 
509 	req->errors = 0;
510 
511 	mutex_lock(&nbd->tx_lock);
512 	if (unlikely(!nbd->sock)) {
513 		mutex_unlock(&nbd->tx_lock);
514 		dev_err(disk_to_dev(nbd->disk),
515 			"Attempted send on closed socket\n");
516 		goto error_out;
517 	}
518 
519 	nbd->active_req = req;
520 
521 	if (nbd->xmit_timeout && list_empty_careful(&nbd->queue_head))
522 		mod_timer(&nbd->timeout_timer, jiffies + nbd->xmit_timeout);
523 
524 	if (nbd_send_req(nbd, req) != 0) {
525 		dev_err(disk_to_dev(nbd->disk), "Request send failed\n");
526 		req->errors++;
527 		nbd_end_request(nbd, req);
528 	} else {
529 		spin_lock(&nbd->queue_lock);
530 		list_add_tail(&req->queuelist, &nbd->queue_head);
531 		spin_unlock(&nbd->queue_lock);
532 	}
533 
534 	nbd->active_req = NULL;
535 	mutex_unlock(&nbd->tx_lock);
536 	wake_up_all(&nbd->active_wq);
537 
538 	return;
539 
540 error_out:
541 	req->errors++;
542 	nbd_end_request(nbd, req);
543 }
544 
545 static int nbd_thread_send(void *data)
546 {
547 	struct nbd_device *nbd = data;
548 	struct request *req;
549 	unsigned long flags;
550 
551 	spin_lock_irqsave(&nbd->tasks_lock, flags);
552 	nbd->task_send = current;
553 	spin_unlock_irqrestore(&nbd->tasks_lock, flags);
554 
555 	set_user_nice(current, MIN_NICE);
556 	while (!kthread_should_stop() || !list_empty(&nbd->waiting_queue)) {
557 		/* wait for something to do */
558 		wait_event_interruptible(nbd->waiting_wq,
559 					 kthread_should_stop() ||
560 					 !list_empty(&nbd->waiting_queue));
561 
562 		if (signal_pending(current)) {
563 			siginfo_t info;
564 			int ret;
565 
566 			ret = dequeue_signal_lock(current, &current->blocked,
567 						  &info);
568 			dev_warn(nbd_to_dev(nbd), "pid %d, %s, got signal %d\n",
569 				 task_pid_nr(current), current->comm, ret);
570 			mutex_lock(&nbd->tx_lock);
571 			sock_shutdown(nbd);
572 			mutex_unlock(&nbd->tx_lock);
573 			break;
574 		}
575 
576 		/* extract request */
577 		if (list_empty(&nbd->waiting_queue))
578 			continue;
579 
580 		spin_lock_irq(&nbd->queue_lock);
581 		req = list_entry(nbd->waiting_queue.next, struct request,
582 				 queuelist);
583 		list_del_init(&req->queuelist);
584 		spin_unlock_irq(&nbd->queue_lock);
585 
586 		/* handle request */
587 		nbd_handle_req(nbd, req);
588 	}
589 
590 	spin_lock_irqsave(&nbd->tasks_lock, flags);
591 	nbd->task_send = NULL;
592 	spin_unlock_irqrestore(&nbd->tasks_lock, flags);
593 
594 	/* Clear maybe pending signals */
595 	if (signal_pending(current)) {
596 		siginfo_t info;
597 		dequeue_signal_lock(current, &current->blocked, &info);
598 	}
599 
600 	return 0;
601 }
602 
603 /*
604  * We always wait for result of write, for now. It would be nice to make it optional
605  * in future
606  * if ((rq_data_dir(req) == WRITE) && (nbd->flags & NBD_WRITE_NOCHK))
607  *   { printk( "Warning: Ignoring result!\n"); nbd_end_request( req ); }
608  */
609 
610 static void nbd_request_handler(struct request_queue *q)
611 		__releases(q->queue_lock) __acquires(q->queue_lock)
612 {
613 	struct request *req;
614 
615 	while ((req = blk_fetch_request(q)) != NULL) {
616 		struct nbd_device *nbd;
617 
618 		spin_unlock_irq(q->queue_lock);
619 
620 		nbd = req->rq_disk->private_data;
621 
622 		BUG_ON(nbd->magic != NBD_MAGIC);
623 
624 		dev_dbg(nbd_to_dev(nbd), "request %p: dequeued (flags=%x)\n",
625 			req, req->cmd_type);
626 
627 		if (unlikely(!nbd->sock)) {
628 			dev_err(disk_to_dev(nbd->disk),
629 				"Attempted send on closed socket\n");
630 			req->errors++;
631 			nbd_end_request(nbd, req);
632 			spin_lock_irq(q->queue_lock);
633 			continue;
634 		}
635 
636 		spin_lock_irq(&nbd->queue_lock);
637 		list_add_tail(&req->queuelist, &nbd->waiting_queue);
638 		spin_unlock_irq(&nbd->queue_lock);
639 
640 		wake_up(&nbd->waiting_wq);
641 
642 		spin_lock_irq(q->queue_lock);
643 	}
644 }
645 
646 static int nbd_dev_dbg_init(struct nbd_device *nbd);
647 static void nbd_dev_dbg_close(struct nbd_device *nbd);
648 
649 /* Must be called with tx_lock held */
650 
651 static int __nbd_ioctl(struct block_device *bdev, struct nbd_device *nbd,
652 		       unsigned int cmd, unsigned long arg)
653 {
654 	switch (cmd) {
655 	case NBD_DISCONNECT: {
656 		struct request sreq;
657 
658 		dev_info(disk_to_dev(nbd->disk), "NBD_DISCONNECT\n");
659 		if (!nbd->sock)
660 			return -EINVAL;
661 
662 		mutex_unlock(&nbd->tx_lock);
663 		fsync_bdev(bdev);
664 		mutex_lock(&nbd->tx_lock);
665 		blk_rq_init(NULL, &sreq);
666 		sreq.cmd_type = REQ_TYPE_DRV_PRIV;
667 
668 		/* Check again after getting mutex back.  */
669 		if (!nbd->sock)
670 			return -EINVAL;
671 
672 		nbd->disconnect = true;
673 
674 		nbd_send_req(nbd, &sreq);
675 		return 0;
676 	}
677 
678 	case NBD_CLEAR_SOCK: {
679 		struct socket *sock = nbd->sock;
680 		nbd->sock = NULL;
681 		nbd_clear_que(nbd);
682 		BUG_ON(!list_empty(&nbd->queue_head));
683 		BUG_ON(!list_empty(&nbd->waiting_queue));
684 		kill_bdev(bdev);
685 		if (sock)
686 			sockfd_put(sock);
687 		return 0;
688 	}
689 
690 	case NBD_SET_SOCK: {
691 		struct socket *sock;
692 		int err;
693 		if (nbd->sock)
694 			return -EBUSY;
695 		sock = sockfd_lookup(arg, &err);
696 		if (sock) {
697 			nbd->sock = sock;
698 			if (max_part > 0)
699 				bdev->bd_invalidated = 1;
700 			nbd->disconnect = false; /* we're connected now */
701 			return 0;
702 		}
703 		return -EINVAL;
704 	}
705 
706 	case NBD_SET_BLKSIZE:
707 		nbd->blksize = arg;
708 		nbd->bytesize &= ~(nbd->blksize-1);
709 		bdev->bd_inode->i_size = nbd->bytesize;
710 		set_blocksize(bdev, nbd->blksize);
711 		set_capacity(nbd->disk, nbd->bytesize >> 9);
712 		return 0;
713 
714 	case NBD_SET_SIZE:
715 		nbd->bytesize = arg & ~(nbd->blksize-1);
716 		bdev->bd_inode->i_size = nbd->bytesize;
717 		set_blocksize(bdev, nbd->blksize);
718 		set_capacity(nbd->disk, nbd->bytesize >> 9);
719 		return 0;
720 
721 	case NBD_SET_TIMEOUT:
722 		nbd->xmit_timeout = arg * HZ;
723 		if (arg)
724 			mod_timer(&nbd->timeout_timer,
725 				  jiffies + nbd->xmit_timeout);
726 		else
727 			del_timer_sync(&nbd->timeout_timer);
728 
729 		return 0;
730 
731 	case NBD_SET_FLAGS:
732 		nbd->flags = arg;
733 		return 0;
734 
735 	case NBD_SET_SIZE_BLOCKS:
736 		nbd->bytesize = ((u64) arg) * nbd->blksize;
737 		bdev->bd_inode->i_size = nbd->bytesize;
738 		set_blocksize(bdev, nbd->blksize);
739 		set_capacity(nbd->disk, nbd->bytesize >> 9);
740 		return 0;
741 
742 	case NBD_DO_IT: {
743 		struct task_struct *thread;
744 		struct socket *sock;
745 		int error;
746 
747 		if (nbd->task_recv)
748 			return -EBUSY;
749 		if (!nbd->sock)
750 			return -EINVAL;
751 
752 		mutex_unlock(&nbd->tx_lock);
753 
754 		if (nbd->flags & NBD_FLAG_READ_ONLY)
755 			set_device_ro(bdev, true);
756 		if (nbd->flags & NBD_FLAG_SEND_TRIM)
757 			queue_flag_set_unlocked(QUEUE_FLAG_DISCARD,
758 				nbd->disk->queue);
759 		if (nbd->flags & NBD_FLAG_SEND_FLUSH)
760 			blk_queue_flush(nbd->disk->queue, REQ_FLUSH);
761 		else
762 			blk_queue_flush(nbd->disk->queue, 0);
763 
764 		thread = kthread_run(nbd_thread_send, nbd, "%s",
765 				     nbd_name(nbd));
766 		if (IS_ERR(thread)) {
767 			mutex_lock(&nbd->tx_lock);
768 			return PTR_ERR(thread);
769 		}
770 
771 		nbd_dev_dbg_init(nbd);
772 		error = nbd_thread_recv(nbd);
773 		nbd_dev_dbg_close(nbd);
774 		kthread_stop(thread);
775 
776 		mutex_lock(&nbd->tx_lock);
777 
778 		sock_shutdown(nbd);
779 		sock = nbd->sock;
780 		nbd->sock = NULL;
781 		nbd_clear_que(nbd);
782 		kill_bdev(bdev);
783 		queue_flag_clear_unlocked(QUEUE_FLAG_DISCARD, nbd->disk->queue);
784 		set_device_ro(bdev, false);
785 		if (sock)
786 			sockfd_put(sock);
787 		nbd->flags = 0;
788 		nbd->bytesize = 0;
789 		bdev->bd_inode->i_size = 0;
790 		set_capacity(nbd->disk, 0);
791 		if (max_part > 0)
792 			blkdev_reread_part(bdev);
793 		if (nbd->disconnect) /* user requested, ignore socket errors */
794 			return 0;
795 		return error;
796 	}
797 
798 	case NBD_CLEAR_QUE:
799 		/*
800 		 * This is for compatibility only.  The queue is always cleared
801 		 * by NBD_DO_IT or NBD_CLEAR_SOCK.
802 		 */
803 		return 0;
804 
805 	case NBD_PRINT_DEBUG:
806 		dev_info(disk_to_dev(nbd->disk),
807 			"next = %p, prev = %p, head = %p\n",
808 			nbd->queue_head.next, nbd->queue_head.prev,
809 			&nbd->queue_head);
810 		return 0;
811 	}
812 	return -ENOTTY;
813 }
814 
815 static int nbd_ioctl(struct block_device *bdev, fmode_t mode,
816 		     unsigned int cmd, unsigned long arg)
817 {
818 	struct nbd_device *nbd = bdev->bd_disk->private_data;
819 	int error;
820 
821 	if (!capable(CAP_SYS_ADMIN))
822 		return -EPERM;
823 
824 	BUG_ON(nbd->magic != NBD_MAGIC);
825 
826 	mutex_lock(&nbd->tx_lock);
827 	error = __nbd_ioctl(bdev, nbd, cmd, arg);
828 	mutex_unlock(&nbd->tx_lock);
829 
830 	return error;
831 }
832 
833 static const struct block_device_operations nbd_fops =
834 {
835 	.owner =	THIS_MODULE,
836 	.ioctl =	nbd_ioctl,
837 };
838 
839 #if IS_ENABLED(CONFIG_DEBUG_FS)
840 
841 static int nbd_dbg_tasks_show(struct seq_file *s, void *unused)
842 {
843 	struct nbd_device *nbd = s->private;
844 
845 	if (nbd->task_recv)
846 		seq_printf(s, "recv: %d\n", task_pid_nr(nbd->task_recv));
847 	if (nbd->task_send)
848 		seq_printf(s, "send: %d\n", task_pid_nr(nbd->task_send));
849 
850 	return 0;
851 }
852 
853 static int nbd_dbg_tasks_open(struct inode *inode, struct file *file)
854 {
855 	return single_open(file, nbd_dbg_tasks_show, inode->i_private);
856 }
857 
858 static const struct file_operations nbd_dbg_tasks_ops = {
859 	.open = nbd_dbg_tasks_open,
860 	.read = seq_read,
861 	.llseek = seq_lseek,
862 	.release = single_release,
863 };
864 
865 static int nbd_dbg_flags_show(struct seq_file *s, void *unused)
866 {
867 	struct nbd_device *nbd = s->private;
868 	u32 flags = nbd->flags;
869 
870 	seq_printf(s, "Hex: 0x%08x\n\n", flags);
871 
872 	seq_puts(s, "Known flags:\n");
873 
874 	if (flags & NBD_FLAG_HAS_FLAGS)
875 		seq_puts(s, "NBD_FLAG_HAS_FLAGS\n");
876 	if (flags & NBD_FLAG_READ_ONLY)
877 		seq_puts(s, "NBD_FLAG_READ_ONLY\n");
878 	if (flags & NBD_FLAG_SEND_FLUSH)
879 		seq_puts(s, "NBD_FLAG_SEND_FLUSH\n");
880 	if (flags & NBD_FLAG_SEND_TRIM)
881 		seq_puts(s, "NBD_FLAG_SEND_TRIM\n");
882 
883 	return 0;
884 }
885 
886 static int nbd_dbg_flags_open(struct inode *inode, struct file *file)
887 {
888 	return single_open(file, nbd_dbg_flags_show, inode->i_private);
889 }
890 
891 static const struct file_operations nbd_dbg_flags_ops = {
892 	.open = nbd_dbg_flags_open,
893 	.read = seq_read,
894 	.llseek = seq_lseek,
895 	.release = single_release,
896 };
897 
898 static int nbd_dev_dbg_init(struct nbd_device *nbd)
899 {
900 	struct dentry *dir;
901 	struct dentry *f;
902 
903 	dir = debugfs_create_dir(nbd_name(nbd), nbd_dbg_dir);
904 	if (IS_ERR_OR_NULL(dir)) {
905 		dev_err(nbd_to_dev(nbd), "Failed to create debugfs dir for '%s' (%ld)\n",
906 			nbd_name(nbd), PTR_ERR(dir));
907 		return PTR_ERR(dir);
908 	}
909 	nbd->dbg_dir = dir;
910 
911 	f = debugfs_create_file("tasks", 0444, dir, nbd, &nbd_dbg_tasks_ops);
912 	if (IS_ERR_OR_NULL(f)) {
913 		dev_err(nbd_to_dev(nbd), "Failed to create debugfs file 'tasks', %ld\n",
914 			PTR_ERR(f));
915 		return PTR_ERR(f);
916 	}
917 
918 	f = debugfs_create_u64("size_bytes", 0444, dir, &nbd->bytesize);
919 	if (IS_ERR_OR_NULL(f)) {
920 		dev_err(nbd_to_dev(nbd), "Failed to create debugfs file 'size_bytes', %ld\n",
921 			PTR_ERR(f));
922 		return PTR_ERR(f);
923 	}
924 
925 	f = debugfs_create_u32("timeout", 0444, dir, &nbd->xmit_timeout);
926 	if (IS_ERR_OR_NULL(f)) {
927 		dev_err(nbd_to_dev(nbd), "Failed to create debugfs file 'timeout', %ld\n",
928 			PTR_ERR(f));
929 		return PTR_ERR(f);
930 	}
931 
932 	f = debugfs_create_u32("blocksize", 0444, dir, &nbd->blksize);
933 	if (IS_ERR_OR_NULL(f)) {
934 		dev_err(nbd_to_dev(nbd), "Failed to create debugfs file 'blocksize', %ld\n",
935 			PTR_ERR(f));
936 		return PTR_ERR(f);
937 	}
938 
939 	f = debugfs_create_file("flags", 0444, dir, &nbd, &nbd_dbg_flags_ops);
940 	if (IS_ERR_OR_NULL(f)) {
941 		dev_err(nbd_to_dev(nbd), "Failed to create debugfs file 'flags', %ld\n",
942 			PTR_ERR(f));
943 		return PTR_ERR(f);
944 	}
945 
946 	return 0;
947 }
948 
949 static void nbd_dev_dbg_close(struct nbd_device *nbd)
950 {
951 	debugfs_remove_recursive(nbd->dbg_dir);
952 }
953 
954 static int nbd_dbg_init(void)
955 {
956 	struct dentry *dbg_dir;
957 
958 	dbg_dir = debugfs_create_dir("nbd", NULL);
959 	if (IS_ERR(dbg_dir))
960 		return PTR_ERR(dbg_dir);
961 
962 	nbd_dbg_dir = dbg_dir;
963 
964 	return 0;
965 }
966 
967 static void nbd_dbg_close(void)
968 {
969 	debugfs_remove_recursive(nbd_dbg_dir);
970 }
971 
972 #else  /* IS_ENABLED(CONFIG_DEBUG_FS) */
973 
974 static int nbd_dev_dbg_init(struct nbd_device *nbd)
975 {
976 	return 0;
977 }
978 
979 static void nbd_dev_dbg_close(struct nbd_device *nbd)
980 {
981 }
982 
983 static int nbd_dbg_init(void)
984 {
985 	return 0;
986 }
987 
988 static void nbd_dbg_close(void)
989 {
990 }
991 
992 #endif
993 
994 /*
995  * And here should be modules and kernel interface
996  *  (Just smiley confuses emacs :-)
997  */
998 
999 static int __init nbd_init(void)
1000 {
1001 	int err = -ENOMEM;
1002 	int i;
1003 	int part_shift;
1004 
1005 	BUILD_BUG_ON(sizeof(struct nbd_request) != 28);
1006 
1007 	if (max_part < 0) {
1008 		printk(KERN_ERR "nbd: max_part must be >= 0\n");
1009 		return -EINVAL;
1010 	}
1011 
1012 	part_shift = 0;
1013 	if (max_part > 0) {
1014 		part_shift = fls(max_part);
1015 
1016 		/*
1017 		 * Adjust max_part according to part_shift as it is exported
1018 		 * to user space so that user can know the max number of
1019 		 * partition kernel should be able to manage.
1020 		 *
1021 		 * Note that -1 is required because partition 0 is reserved
1022 		 * for the whole disk.
1023 		 */
1024 		max_part = (1UL << part_shift) - 1;
1025 	}
1026 
1027 	if ((1UL << part_shift) > DISK_MAX_PARTS)
1028 		return -EINVAL;
1029 
1030 	if (nbds_max > 1UL << (MINORBITS - part_shift))
1031 		return -EINVAL;
1032 
1033 	nbd_dev = kcalloc(nbds_max, sizeof(*nbd_dev), GFP_KERNEL);
1034 	if (!nbd_dev)
1035 		return -ENOMEM;
1036 
1037 	for (i = 0; i < nbds_max; i++) {
1038 		struct gendisk *disk = alloc_disk(1 << part_shift);
1039 		if (!disk)
1040 			goto out;
1041 		nbd_dev[i].disk = disk;
1042 		/*
1043 		 * The new linux 2.5 block layer implementation requires
1044 		 * every gendisk to have its very own request_queue struct.
1045 		 * These structs are big so we dynamically allocate them.
1046 		 */
1047 		disk->queue = blk_init_queue(nbd_request_handler, &nbd_lock);
1048 		if (!disk->queue) {
1049 			put_disk(disk);
1050 			goto out;
1051 		}
1052 		/*
1053 		 * Tell the block layer that we are not a rotational device
1054 		 */
1055 		queue_flag_set_unlocked(QUEUE_FLAG_NONROT, disk->queue);
1056 		queue_flag_clear_unlocked(QUEUE_FLAG_ADD_RANDOM, disk->queue);
1057 		disk->queue->limits.discard_granularity = 512;
1058 		blk_queue_max_discard_sectors(disk->queue, UINT_MAX);
1059 		disk->queue->limits.discard_zeroes_data = 0;
1060 		blk_queue_max_hw_sectors(disk->queue, 65536);
1061 		disk->queue->limits.max_sectors = 256;
1062 	}
1063 
1064 	if (register_blkdev(NBD_MAJOR, "nbd")) {
1065 		err = -EIO;
1066 		goto out;
1067 	}
1068 
1069 	printk(KERN_INFO "nbd: registered device at major %d\n", NBD_MAJOR);
1070 
1071 	nbd_dbg_init();
1072 
1073 	for (i = 0; i < nbds_max; i++) {
1074 		struct gendisk *disk = nbd_dev[i].disk;
1075 		nbd_dev[i].magic = NBD_MAGIC;
1076 		INIT_LIST_HEAD(&nbd_dev[i].waiting_queue);
1077 		spin_lock_init(&nbd_dev[i].queue_lock);
1078 		spin_lock_init(&nbd_dev[i].tasks_lock);
1079 		INIT_LIST_HEAD(&nbd_dev[i].queue_head);
1080 		mutex_init(&nbd_dev[i].tx_lock);
1081 		init_timer(&nbd_dev[i].timeout_timer);
1082 		nbd_dev[i].timeout_timer.function = nbd_xmit_timeout;
1083 		nbd_dev[i].timeout_timer.data = (unsigned long)&nbd_dev[i];
1084 		init_waitqueue_head(&nbd_dev[i].active_wq);
1085 		init_waitqueue_head(&nbd_dev[i].waiting_wq);
1086 		nbd_dev[i].blksize = 1024;
1087 		nbd_dev[i].bytesize = 0;
1088 		disk->major = NBD_MAJOR;
1089 		disk->first_minor = i << part_shift;
1090 		disk->fops = &nbd_fops;
1091 		disk->private_data = &nbd_dev[i];
1092 		sprintf(disk->disk_name, "nbd%d", i);
1093 		set_capacity(disk, 0);
1094 		add_disk(disk);
1095 	}
1096 
1097 	return 0;
1098 out:
1099 	while (i--) {
1100 		blk_cleanup_queue(nbd_dev[i].disk->queue);
1101 		put_disk(nbd_dev[i].disk);
1102 	}
1103 	kfree(nbd_dev);
1104 	return err;
1105 }
1106 
1107 static void __exit nbd_cleanup(void)
1108 {
1109 	int i;
1110 
1111 	nbd_dbg_close();
1112 
1113 	for (i = 0; i < nbds_max; i++) {
1114 		struct gendisk *disk = nbd_dev[i].disk;
1115 		nbd_dev[i].magic = 0;
1116 		if (disk) {
1117 			del_gendisk(disk);
1118 			blk_cleanup_queue(disk->queue);
1119 			put_disk(disk);
1120 		}
1121 	}
1122 	unregister_blkdev(NBD_MAJOR, "nbd");
1123 	kfree(nbd_dev);
1124 	printk(KERN_INFO "nbd: unregistered device at major %d\n", NBD_MAJOR);
1125 }
1126 
1127 module_init(nbd_init);
1128 module_exit(nbd_cleanup);
1129 
1130 MODULE_DESCRIPTION("Network Block Device");
1131 MODULE_LICENSE("GPL");
1132 
1133 module_param(nbds_max, int, 0444);
1134 MODULE_PARM_DESC(nbds_max, "number of network block devices to initialize (default: 16)");
1135 module_param(max_part, int, 0444);
1136 MODULE_PARM_DESC(max_part, "number of partitions per device (default: 0)");
1137