188eea45cSKlaus Jensen /* 288eea45cSKlaus Jensen * QEMU NVM Express Controller 388eea45cSKlaus Jensen * 488eea45cSKlaus Jensen * Copyright (c) 2012, Intel Corporation 588eea45cSKlaus Jensen * 688eea45cSKlaus Jensen * Written by Keith Busch <keith.busch@intel.com> 788eea45cSKlaus Jensen * 888eea45cSKlaus Jensen * This code is licensed under the GNU GPL v2 or later. 988eea45cSKlaus Jensen */ 1088eea45cSKlaus Jensen 1188eea45cSKlaus Jensen /** 1288eea45cSKlaus Jensen * Reference Specs: http://www.nvmexpress.org, 1.4, 1.3, 1.2, 1.1, 1.0e 1388eea45cSKlaus Jensen * 1488eea45cSKlaus Jensen * https://nvmexpress.org/developers/nvme-specification/ 1588eea45cSKlaus Jensen * 1688eea45cSKlaus Jensen * 1788eea45cSKlaus Jensen * Notes on coding style 1888eea45cSKlaus Jensen * --------------------- 1988eea45cSKlaus Jensen * While QEMU coding style prefers lowercase hexadecimals in constants, the 2088eea45cSKlaus Jensen * NVMe subsystem use thes format from the NVMe specifications in the comments 2188eea45cSKlaus Jensen * (i.e. 'h' suffix instead of '0x' prefix). 2288eea45cSKlaus Jensen * 2388eea45cSKlaus Jensen * Usage 2488eea45cSKlaus Jensen * ----- 2588eea45cSKlaus Jensen * See docs/system/nvme.rst for extensive documentation. 2688eea45cSKlaus Jensen * 2788eea45cSKlaus Jensen * Add options: 2888eea45cSKlaus Jensen * -drive file=<file>,if=none,id=<drive_id> 2988eea45cSKlaus Jensen * -device nvme-subsys,id=<subsys_id>,nqn=<nqn_id> 3088eea45cSKlaus Jensen * -device nvme,serial=<serial>,id=<bus_name>, \ 3188eea45cSKlaus Jensen * cmb_size_mb=<cmb_size_mb[optional]>, \ 3288eea45cSKlaus Jensen * [pmrdev=<mem_backend_file_id>,] \ 3388eea45cSKlaus Jensen * max_ioqpairs=<N[optional]>, \ 3488eea45cSKlaus Jensen * aerl=<N[optional]>,aer_max_queued=<N[optional]>, \ 3588eea45cSKlaus Jensen * mdts=<N[optional]>,vsl=<N[optional]>, \ 3688eea45cSKlaus Jensen * zoned.zasl=<N[optional]>, \ 37cccc2651SNiklas Cassel * zoned.auto_transition=<on|off[optional]>, \ 3844c2c094SLukasz Maniak * sriov_max_vfs=<N[optional]> \ 3988eea45cSKlaus Jensen * subsys=<subsys_id> 4088eea45cSKlaus Jensen * -device nvme-ns,drive=<drive_id>,bus=<bus_name>,nsid=<nsid>,\ 4188eea45cSKlaus Jensen * zoned=<true|false[optional]>, \ 4288eea45cSKlaus Jensen * subsys=<subsys_id>,detached=<true|false[optional]> 4388eea45cSKlaus Jensen * 4488eea45cSKlaus Jensen * Note cmb_size_mb denotes size of CMB in MB. CMB is assumed to be at 4588eea45cSKlaus Jensen * offset 0 in BAR2 and supports only WDS, RDS and SQS for now. By default, the 4688eea45cSKlaus Jensen * device will use the "v1.4 CMB scheme" - use the `legacy-cmb` parameter to 4788eea45cSKlaus Jensen * always enable the CMBLOC and CMBSZ registers (v1.3 behavior). 4888eea45cSKlaus Jensen * 4988eea45cSKlaus Jensen * Enabling pmr emulation can be achieved by pointing to memory-backend-file. 5088eea45cSKlaus Jensen * For example: 5188eea45cSKlaus Jensen * -object memory-backend-file,id=<mem_id>,share=on,mem-path=<file_path>, \ 5288eea45cSKlaus Jensen * size=<size> .... -device nvme,...,pmrdev=<mem_id> 5388eea45cSKlaus Jensen * 5488eea45cSKlaus Jensen * The PMR will use BAR 4/5 exclusively. 5588eea45cSKlaus Jensen * 5688eea45cSKlaus Jensen * To place controller(s) and namespace(s) to a subsystem, then provide 5788eea45cSKlaus Jensen * nvme-subsys device as above. 5888eea45cSKlaus Jensen * 5988eea45cSKlaus Jensen * nvme subsystem device parameters 6088eea45cSKlaus Jensen * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 6188eea45cSKlaus Jensen * - `nqn` 6288eea45cSKlaus Jensen * This parameter provides the `<nqn_id>` part of the string 6388eea45cSKlaus Jensen * `nqn.2019-08.org.qemu:<nqn_id>` which will be reported in the SUBNQN field 6488eea45cSKlaus Jensen * of subsystem controllers. Note that `<nqn_id>` should be unique per 6588eea45cSKlaus Jensen * subsystem, but this is not enforced by QEMU. If not specified, it will 6688eea45cSKlaus Jensen * default to the value of the `id` parameter (`<subsys_id>`). 6788eea45cSKlaus Jensen * 6888eea45cSKlaus Jensen * nvme device parameters 6988eea45cSKlaus Jensen * ~~~~~~~~~~~~~~~~~~~~~~ 7088eea45cSKlaus Jensen * - `subsys` 7188eea45cSKlaus Jensen * Specifying this parameter attaches the controller to the subsystem and 7288eea45cSKlaus Jensen * the SUBNQN field in the controller will report the NQN of the subsystem 7388eea45cSKlaus Jensen * device. This also enables multi controller capability represented in 7488eea45cSKlaus Jensen * Identify Controller data structure in CMIC (Controller Multi-path I/O and 7588eea45cSKlaus Jensen * Namesapce Sharing Capabilities). 7688eea45cSKlaus Jensen * 7788eea45cSKlaus Jensen * - `aerl` 7888eea45cSKlaus Jensen * The Asynchronous Event Request Limit (AERL). Indicates the maximum number 7988eea45cSKlaus Jensen * of concurrently outstanding Asynchronous Event Request commands support 8088eea45cSKlaus Jensen * by the controller. This is a 0's based value. 8188eea45cSKlaus Jensen * 8288eea45cSKlaus Jensen * - `aer_max_queued` 8388eea45cSKlaus Jensen * This is the maximum number of events that the device will enqueue for 8488eea45cSKlaus Jensen * completion when there are no outstanding AERs. When the maximum number of 8588eea45cSKlaus Jensen * enqueued events are reached, subsequent events will be dropped. 8688eea45cSKlaus Jensen * 8788eea45cSKlaus Jensen * - `mdts` 8888eea45cSKlaus Jensen * Indicates the maximum data transfer size for a command that transfers data 8988eea45cSKlaus Jensen * between host-accessible memory and the controller. The value is specified 9088eea45cSKlaus Jensen * as a power of two (2^n) and is in units of the minimum memory page size 9188eea45cSKlaus Jensen * (CAP.MPSMIN). The default value is 7 (i.e. 512 KiB). 9288eea45cSKlaus Jensen * 9388eea45cSKlaus Jensen * - `vsl` 9488eea45cSKlaus Jensen * Indicates the maximum data size limit for the Verify command. Like `mdts`, 9588eea45cSKlaus Jensen * this value is specified as a power of two (2^n) and is in units of the 9688eea45cSKlaus Jensen * minimum memory page size (CAP.MPSMIN). The default value is 7 (i.e. 512 9788eea45cSKlaus Jensen * KiB). 9888eea45cSKlaus Jensen * 9988eea45cSKlaus Jensen * - `zoned.zasl` 10088eea45cSKlaus Jensen * Indicates the maximum data transfer size for the Zone Append command. Like 10188eea45cSKlaus Jensen * `mdts`, the value is specified as a power of two (2^n) and is in units of 10288eea45cSKlaus Jensen * the minimum memory page size (CAP.MPSMIN). The default value is 0 (i.e. 10388eea45cSKlaus Jensen * defaulting to the value of `mdts`). 10488eea45cSKlaus Jensen * 105cccc2651SNiklas Cassel * - `zoned.auto_transition` 106cccc2651SNiklas Cassel * Indicates if zones in zone state implicitly opened can be automatically 107cccc2651SNiklas Cassel * transitioned to zone state closed for resource management purposes. 108cccc2651SNiklas Cassel * Defaults to 'on'. 109cccc2651SNiklas Cassel * 11044c2c094SLukasz Maniak * - `sriov_max_vfs` 11144c2c094SLukasz Maniak * Indicates the maximum number of PCIe virtual functions supported 11244c2c094SLukasz Maniak * by the controller. The default value is 0. Specifying a non-zero value 11344c2c094SLukasz Maniak * enables reporting of both SR-IOV and ARI capabilities by the NVMe device. 11444c2c094SLukasz Maniak * Virtual function controllers will not report SR-IOV capability. 11544c2c094SLukasz Maniak * 11688eea45cSKlaus Jensen * nvme namespace device parameters 11788eea45cSKlaus Jensen * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 11888eea45cSKlaus Jensen * - `shared` 11988eea45cSKlaus Jensen * When the parent nvme device (as defined explicitly by the 'bus' parameter 12088eea45cSKlaus Jensen * or implicitly by the most recently defined NvmeBus) is linked to an 12188eea45cSKlaus Jensen * nvme-subsys device, the namespace will be attached to all controllers in 12288eea45cSKlaus Jensen * the subsystem. If set to 'off' (the default), the namespace will remain a 12388eea45cSKlaus Jensen * private namespace and may only be attached to a single controller at a 12488eea45cSKlaus Jensen * time. 12588eea45cSKlaus Jensen * 12688eea45cSKlaus Jensen * - `detached` 12788eea45cSKlaus Jensen * This parameter is only valid together with the `subsys` parameter. If left 12888eea45cSKlaus Jensen * at the default value (`false/off`), the namespace will be attached to all 12988eea45cSKlaus Jensen * controllers in the NVMe subsystem at boot-up. If set to `true/on`, the 130eeef4329SGollu Appalanaidu * namespace will be available in the subsystem but not attached to any 13188eea45cSKlaus Jensen * controllers. 13288eea45cSKlaus Jensen * 13388eea45cSKlaus Jensen * Setting `zoned` to true selects Zoned Command Set at the namespace. 13488eea45cSKlaus Jensen * In this case, the following namespace properties are available to configure 13588eea45cSKlaus Jensen * zoned operation: 13688eea45cSKlaus Jensen * zoned.zone_size=<zone size in bytes, default: 128MiB> 13788eea45cSKlaus Jensen * The number may be followed by K, M, G as in kilo-, mega- or giga-. 13888eea45cSKlaus Jensen * 13988eea45cSKlaus Jensen * zoned.zone_capacity=<zone capacity in bytes, default: zone size> 14088eea45cSKlaus Jensen * The value 0 (default) forces zone capacity to be the same as zone 14188eea45cSKlaus Jensen * size. The value of this property may not exceed zone size. 14288eea45cSKlaus Jensen * 14388eea45cSKlaus Jensen * zoned.descr_ext_size=<zone descriptor extension size, default 0> 14488eea45cSKlaus Jensen * This value needs to be specified in 64B units. If it is zero, 14588eea45cSKlaus Jensen * namespace(s) will not support zone descriptor extensions. 14688eea45cSKlaus Jensen * 14788eea45cSKlaus Jensen * zoned.max_active=<Maximum Active Resources (zones), default: 0> 14888eea45cSKlaus Jensen * The default value means there is no limit to the number of 14988eea45cSKlaus Jensen * concurrently active zones. 15088eea45cSKlaus Jensen * 15188eea45cSKlaus Jensen * zoned.max_open=<Maximum Open Resources (zones), default: 0> 15288eea45cSKlaus Jensen * The default value means there is no limit to the number of 15388eea45cSKlaus Jensen * concurrently open zones. 15488eea45cSKlaus Jensen * 15588eea45cSKlaus Jensen * zoned.cross_read=<enable RAZB, default: false> 15688eea45cSKlaus Jensen * Setting this property to true enables Read Across Zone Boundaries. 15788eea45cSKlaus Jensen */ 15888eea45cSKlaus Jensen 15988eea45cSKlaus Jensen #include "qemu/osdep.h" 16088eea45cSKlaus Jensen #include "qemu/cutils.h" 16188eea45cSKlaus Jensen #include "qemu/error-report.h" 16288eea45cSKlaus Jensen #include "qemu/log.h" 16388eea45cSKlaus Jensen #include "qemu/units.h" 16488eea45cSKlaus Jensen #include "qapi/error.h" 16588eea45cSKlaus Jensen #include "qapi/visitor.h" 16688eea45cSKlaus Jensen #include "sysemu/sysemu.h" 16788eea45cSKlaus Jensen #include "sysemu/block-backend.h" 16888eea45cSKlaus Jensen #include "sysemu/hostmem.h" 16988eea45cSKlaus Jensen #include "hw/pci/msix.h" 17044c2c094SLukasz Maniak #include "hw/pci/pcie_sriov.h" 17188eea45cSKlaus Jensen #include "migration/vmstate.h" 17288eea45cSKlaus Jensen 17388eea45cSKlaus Jensen #include "nvme.h" 17405f7ae45SKlaus Jensen #include "dif.h" 17588eea45cSKlaus Jensen #include "trace.h" 17688eea45cSKlaus Jensen 17788eea45cSKlaus Jensen #define NVME_MAX_IOQPAIRS 0xffff 17888eea45cSKlaus Jensen #define NVME_DB_SIZE 4 17988eea45cSKlaus Jensen #define NVME_SPEC_VER 0x00010400 18088eea45cSKlaus Jensen #define NVME_CMB_BIR 2 18188eea45cSKlaus Jensen #define NVME_PMR_BIR 4 18288eea45cSKlaus Jensen #define NVME_TEMPERATURE 0x143 18388eea45cSKlaus Jensen #define NVME_TEMPERATURE_WARNING 0x157 18488eea45cSKlaus Jensen #define NVME_TEMPERATURE_CRITICAL 0x175 18588eea45cSKlaus Jensen #define NVME_NUM_FW_SLOTS 1 18688eea45cSKlaus Jensen #define NVME_DEFAULT_MAX_ZA_SIZE (128 * KiB) 18744c2c094SLukasz Maniak #define NVME_MAX_VFS 127 18844c2c094SLukasz Maniak #define NVME_VF_OFFSET 0x1 18944c2c094SLukasz Maniak #define NVME_VF_STRIDE 1 19088eea45cSKlaus Jensen 19188eea45cSKlaus Jensen #define NVME_GUEST_ERR(trace, fmt, ...) \ 19288eea45cSKlaus Jensen do { \ 19388eea45cSKlaus Jensen (trace_##trace)(__VA_ARGS__); \ 19488eea45cSKlaus Jensen qemu_log_mask(LOG_GUEST_ERROR, #trace \ 19588eea45cSKlaus Jensen " in %s: " fmt "\n", __func__, ## __VA_ARGS__); \ 19688eea45cSKlaus Jensen } while (0) 19788eea45cSKlaus Jensen 19888eea45cSKlaus Jensen static const bool nvme_feature_support[NVME_FID_MAX] = { 19988eea45cSKlaus Jensen [NVME_ARBITRATION] = true, 20088eea45cSKlaus Jensen [NVME_POWER_MANAGEMENT] = true, 20188eea45cSKlaus Jensen [NVME_TEMPERATURE_THRESHOLD] = true, 20288eea45cSKlaus Jensen [NVME_ERROR_RECOVERY] = true, 20388eea45cSKlaus Jensen [NVME_VOLATILE_WRITE_CACHE] = true, 20488eea45cSKlaus Jensen [NVME_NUMBER_OF_QUEUES] = true, 20588eea45cSKlaus Jensen [NVME_INTERRUPT_COALESCING] = true, 20688eea45cSKlaus Jensen [NVME_INTERRUPT_VECTOR_CONF] = true, 20788eea45cSKlaus Jensen [NVME_WRITE_ATOMICITY] = true, 20888eea45cSKlaus Jensen [NVME_ASYNCHRONOUS_EVENT_CONF] = true, 20988eea45cSKlaus Jensen [NVME_TIMESTAMP] = true, 210d0c0697bSNaveen Nagar [NVME_HOST_BEHAVIOR_SUPPORT] = true, 21188eea45cSKlaus Jensen [NVME_COMMAND_SET_PROFILE] = true, 21288eea45cSKlaus Jensen }; 21388eea45cSKlaus Jensen 21488eea45cSKlaus Jensen static const uint32_t nvme_feature_cap[NVME_FID_MAX] = { 21588eea45cSKlaus Jensen [NVME_TEMPERATURE_THRESHOLD] = NVME_FEAT_CAP_CHANGE, 21688eea45cSKlaus Jensen [NVME_ERROR_RECOVERY] = NVME_FEAT_CAP_CHANGE | NVME_FEAT_CAP_NS, 21788eea45cSKlaus Jensen [NVME_VOLATILE_WRITE_CACHE] = NVME_FEAT_CAP_CHANGE, 21888eea45cSKlaus Jensen [NVME_NUMBER_OF_QUEUES] = NVME_FEAT_CAP_CHANGE, 21988eea45cSKlaus Jensen [NVME_ASYNCHRONOUS_EVENT_CONF] = NVME_FEAT_CAP_CHANGE, 22088eea45cSKlaus Jensen [NVME_TIMESTAMP] = NVME_FEAT_CAP_CHANGE, 221d0c0697bSNaveen Nagar [NVME_HOST_BEHAVIOR_SUPPORT] = NVME_FEAT_CAP_CHANGE, 22288eea45cSKlaus Jensen [NVME_COMMAND_SET_PROFILE] = NVME_FEAT_CAP_CHANGE, 22388eea45cSKlaus Jensen }; 22488eea45cSKlaus Jensen 22588eea45cSKlaus Jensen static const uint32_t nvme_cse_acs[256] = { 22688eea45cSKlaus Jensen [NVME_ADM_CMD_DELETE_SQ] = NVME_CMD_EFF_CSUPP, 22788eea45cSKlaus Jensen [NVME_ADM_CMD_CREATE_SQ] = NVME_CMD_EFF_CSUPP, 22888eea45cSKlaus Jensen [NVME_ADM_CMD_GET_LOG_PAGE] = NVME_CMD_EFF_CSUPP, 22988eea45cSKlaus Jensen [NVME_ADM_CMD_DELETE_CQ] = NVME_CMD_EFF_CSUPP, 23088eea45cSKlaus Jensen [NVME_ADM_CMD_CREATE_CQ] = NVME_CMD_EFF_CSUPP, 23188eea45cSKlaus Jensen [NVME_ADM_CMD_IDENTIFY] = NVME_CMD_EFF_CSUPP, 23288eea45cSKlaus Jensen [NVME_ADM_CMD_ABORT] = NVME_CMD_EFF_CSUPP, 23388eea45cSKlaus Jensen [NVME_ADM_CMD_SET_FEATURES] = NVME_CMD_EFF_CSUPP, 23488eea45cSKlaus Jensen [NVME_ADM_CMD_GET_FEATURES] = NVME_CMD_EFF_CSUPP, 23588eea45cSKlaus Jensen [NVME_ADM_CMD_ASYNC_EV_REQ] = NVME_CMD_EFF_CSUPP, 23688eea45cSKlaus Jensen [NVME_ADM_CMD_NS_ATTACHMENT] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_NIC, 23788eea45cSKlaus Jensen [NVME_ADM_CMD_FORMAT_NVM] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 23888eea45cSKlaus Jensen }; 23988eea45cSKlaus Jensen 24088eea45cSKlaus Jensen static const uint32_t nvme_cse_iocs_none[256]; 24188eea45cSKlaus Jensen 24288eea45cSKlaus Jensen static const uint32_t nvme_cse_iocs_nvm[256] = { 24388eea45cSKlaus Jensen [NVME_CMD_FLUSH] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 24488eea45cSKlaus Jensen [NVME_CMD_WRITE_ZEROES] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 24588eea45cSKlaus Jensen [NVME_CMD_WRITE] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 24688eea45cSKlaus Jensen [NVME_CMD_READ] = NVME_CMD_EFF_CSUPP, 24788eea45cSKlaus Jensen [NVME_CMD_DSM] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 24888eea45cSKlaus Jensen [NVME_CMD_VERIFY] = NVME_CMD_EFF_CSUPP, 24988eea45cSKlaus Jensen [NVME_CMD_COPY] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 25088eea45cSKlaus Jensen [NVME_CMD_COMPARE] = NVME_CMD_EFF_CSUPP, 25188eea45cSKlaus Jensen }; 25288eea45cSKlaus Jensen 25388eea45cSKlaus Jensen static const uint32_t nvme_cse_iocs_zoned[256] = { 25488eea45cSKlaus Jensen [NVME_CMD_FLUSH] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 25588eea45cSKlaus Jensen [NVME_CMD_WRITE_ZEROES] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 25688eea45cSKlaus Jensen [NVME_CMD_WRITE] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 25788eea45cSKlaus Jensen [NVME_CMD_READ] = NVME_CMD_EFF_CSUPP, 25888eea45cSKlaus Jensen [NVME_CMD_DSM] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 25988eea45cSKlaus Jensen [NVME_CMD_VERIFY] = NVME_CMD_EFF_CSUPP, 26088eea45cSKlaus Jensen [NVME_CMD_COPY] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 26188eea45cSKlaus Jensen [NVME_CMD_COMPARE] = NVME_CMD_EFF_CSUPP, 26288eea45cSKlaus Jensen [NVME_CMD_ZONE_APPEND] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 26388eea45cSKlaus Jensen [NVME_CMD_ZONE_MGMT_SEND] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 26488eea45cSKlaus Jensen [NVME_CMD_ZONE_MGMT_RECV] = NVME_CMD_EFF_CSUPP, 26588eea45cSKlaus Jensen }; 26688eea45cSKlaus Jensen 26788eea45cSKlaus Jensen static void nvme_process_sq(void *opaque); 26888eea45cSKlaus Jensen 26988eea45cSKlaus Jensen static uint16_t nvme_sqid(NvmeRequest *req) 27088eea45cSKlaus Jensen { 27188eea45cSKlaus Jensen return le16_to_cpu(req->sq->sqid); 27288eea45cSKlaus Jensen } 27388eea45cSKlaus Jensen 27488eea45cSKlaus Jensen static void nvme_assign_zone_state(NvmeNamespace *ns, NvmeZone *zone, 27588eea45cSKlaus Jensen NvmeZoneState state) 27688eea45cSKlaus Jensen { 27788eea45cSKlaus Jensen if (QTAILQ_IN_USE(zone, entry)) { 27888eea45cSKlaus Jensen switch (nvme_get_zone_state(zone)) { 27988eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 28088eea45cSKlaus Jensen QTAILQ_REMOVE(&ns->exp_open_zones, zone, entry); 28188eea45cSKlaus Jensen break; 28288eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 28388eea45cSKlaus Jensen QTAILQ_REMOVE(&ns->imp_open_zones, zone, entry); 28488eea45cSKlaus Jensen break; 28588eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 28688eea45cSKlaus Jensen QTAILQ_REMOVE(&ns->closed_zones, zone, entry); 28788eea45cSKlaus Jensen break; 28888eea45cSKlaus Jensen case NVME_ZONE_STATE_FULL: 28988eea45cSKlaus Jensen QTAILQ_REMOVE(&ns->full_zones, zone, entry); 29088eea45cSKlaus Jensen default: 29188eea45cSKlaus Jensen ; 29288eea45cSKlaus Jensen } 29388eea45cSKlaus Jensen } 29488eea45cSKlaus Jensen 29588eea45cSKlaus Jensen nvme_set_zone_state(zone, state); 29688eea45cSKlaus Jensen 29788eea45cSKlaus Jensen switch (state) { 29888eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 29988eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&ns->exp_open_zones, zone, entry); 30088eea45cSKlaus Jensen break; 30188eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 30288eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&ns->imp_open_zones, zone, entry); 30388eea45cSKlaus Jensen break; 30488eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 30588eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&ns->closed_zones, zone, entry); 30688eea45cSKlaus Jensen break; 30788eea45cSKlaus Jensen case NVME_ZONE_STATE_FULL: 30888eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&ns->full_zones, zone, entry); 30988eea45cSKlaus Jensen case NVME_ZONE_STATE_READ_ONLY: 31088eea45cSKlaus Jensen break; 31188eea45cSKlaus Jensen default: 31288eea45cSKlaus Jensen zone->d.za = 0; 31388eea45cSKlaus Jensen } 31488eea45cSKlaus Jensen } 31588eea45cSKlaus Jensen 316e321b4cdSKlaus Jensen static uint16_t nvme_zns_check_resources(NvmeNamespace *ns, uint32_t act, 317e321b4cdSKlaus Jensen uint32_t opn, uint32_t zrwa) 31888eea45cSKlaus Jensen { 31988eea45cSKlaus Jensen if (ns->params.max_active_zones != 0 && 32088eea45cSKlaus Jensen ns->nr_active_zones + act > ns->params.max_active_zones) { 32188eea45cSKlaus Jensen trace_pci_nvme_err_insuff_active_res(ns->params.max_active_zones); 32288eea45cSKlaus Jensen return NVME_ZONE_TOO_MANY_ACTIVE | NVME_DNR; 32388eea45cSKlaus Jensen } 324e321b4cdSKlaus Jensen 32588eea45cSKlaus Jensen if (ns->params.max_open_zones != 0 && 32688eea45cSKlaus Jensen ns->nr_open_zones + opn > ns->params.max_open_zones) { 32788eea45cSKlaus Jensen trace_pci_nvme_err_insuff_open_res(ns->params.max_open_zones); 32888eea45cSKlaus Jensen return NVME_ZONE_TOO_MANY_OPEN | NVME_DNR; 32988eea45cSKlaus Jensen } 33088eea45cSKlaus Jensen 331e321b4cdSKlaus Jensen if (zrwa > ns->zns.numzrwa) { 332e321b4cdSKlaus Jensen return NVME_NOZRWA | NVME_DNR; 333e321b4cdSKlaus Jensen } 334e321b4cdSKlaus Jensen 33588eea45cSKlaus Jensen return NVME_SUCCESS; 33688eea45cSKlaus Jensen } 33788eea45cSKlaus Jensen 338e321b4cdSKlaus Jensen /* 339e321b4cdSKlaus Jensen * Check if we can open a zone without exceeding open/active limits. 340e321b4cdSKlaus Jensen * AOR stands for "Active and Open Resources" (see TP 4053 section 2.5). 341e321b4cdSKlaus Jensen */ 342e321b4cdSKlaus Jensen static uint16_t nvme_aor_check(NvmeNamespace *ns, uint32_t act, uint32_t opn) 343e321b4cdSKlaus Jensen { 344e321b4cdSKlaus Jensen return nvme_zns_check_resources(ns, act, opn, 0); 345e321b4cdSKlaus Jensen } 346e321b4cdSKlaus Jensen 34788eea45cSKlaus Jensen static bool nvme_addr_is_cmb(NvmeCtrl *n, hwaddr addr) 34888eea45cSKlaus Jensen { 34988eea45cSKlaus Jensen hwaddr hi, lo; 35088eea45cSKlaus Jensen 35188eea45cSKlaus Jensen if (!n->cmb.cmse) { 35288eea45cSKlaus Jensen return false; 35388eea45cSKlaus Jensen } 35488eea45cSKlaus Jensen 35588eea45cSKlaus Jensen lo = n->params.legacy_cmb ? n->cmb.mem.addr : n->cmb.cba; 35688eea45cSKlaus Jensen hi = lo + int128_get64(n->cmb.mem.size); 35788eea45cSKlaus Jensen 35888eea45cSKlaus Jensen return addr >= lo && addr < hi; 35988eea45cSKlaus Jensen } 36088eea45cSKlaus Jensen 36188eea45cSKlaus Jensen static inline void *nvme_addr_to_cmb(NvmeCtrl *n, hwaddr addr) 36288eea45cSKlaus Jensen { 36388eea45cSKlaus Jensen hwaddr base = n->params.legacy_cmb ? n->cmb.mem.addr : n->cmb.cba; 36488eea45cSKlaus Jensen return &n->cmb.buf[addr - base]; 36588eea45cSKlaus Jensen } 36688eea45cSKlaus Jensen 36788eea45cSKlaus Jensen static bool nvme_addr_is_pmr(NvmeCtrl *n, hwaddr addr) 36888eea45cSKlaus Jensen { 36988eea45cSKlaus Jensen hwaddr hi; 37088eea45cSKlaus Jensen 37188eea45cSKlaus Jensen if (!n->pmr.cmse) { 37288eea45cSKlaus Jensen return false; 37388eea45cSKlaus Jensen } 37488eea45cSKlaus Jensen 37588eea45cSKlaus Jensen hi = n->pmr.cba + int128_get64(n->pmr.dev->mr.size); 37688eea45cSKlaus Jensen 37788eea45cSKlaus Jensen return addr >= n->pmr.cba && addr < hi; 37888eea45cSKlaus Jensen } 37988eea45cSKlaus Jensen 38088eea45cSKlaus Jensen static inline void *nvme_addr_to_pmr(NvmeCtrl *n, hwaddr addr) 38188eea45cSKlaus Jensen { 38288eea45cSKlaus Jensen return memory_region_get_ram_ptr(&n->pmr.dev->mr) + (addr - n->pmr.cba); 38388eea45cSKlaus Jensen } 38488eea45cSKlaus Jensen 385736b0164SKlaus Jensen static inline bool nvme_addr_is_iomem(NvmeCtrl *n, hwaddr addr) 386736b0164SKlaus Jensen { 387736b0164SKlaus Jensen hwaddr hi, lo; 388736b0164SKlaus Jensen 389736b0164SKlaus Jensen /* 390736b0164SKlaus Jensen * The purpose of this check is to guard against invalid "local" access to 391736b0164SKlaus Jensen * the iomem (i.e. controller registers). Thus, we check against the range 392736b0164SKlaus Jensen * covered by the 'bar0' MemoryRegion since that is currently composed of 393736b0164SKlaus Jensen * two subregions (the NVMe "MBAR" and the MSI-X table/pba). Note, however, 394736b0164SKlaus Jensen * that if the device model is ever changed to allow the CMB to be located 395736b0164SKlaus Jensen * in BAR0 as well, then this must be changed. 396736b0164SKlaus Jensen */ 397736b0164SKlaus Jensen lo = n->bar0.addr; 398736b0164SKlaus Jensen hi = lo + int128_get64(n->bar0.size); 399736b0164SKlaus Jensen 400736b0164SKlaus Jensen return addr >= lo && addr < hi; 401736b0164SKlaus Jensen } 402736b0164SKlaus Jensen 40388eea45cSKlaus Jensen static int nvme_addr_read(NvmeCtrl *n, hwaddr addr, void *buf, int size) 40488eea45cSKlaus Jensen { 40588eea45cSKlaus Jensen hwaddr hi = addr + size - 1; 40688eea45cSKlaus Jensen if (hi < addr) { 40788eea45cSKlaus Jensen return 1; 40888eea45cSKlaus Jensen } 40988eea45cSKlaus Jensen 41088eea45cSKlaus Jensen if (n->bar.cmbsz && nvme_addr_is_cmb(n, addr) && nvme_addr_is_cmb(n, hi)) { 41188eea45cSKlaus Jensen memcpy(buf, nvme_addr_to_cmb(n, addr), size); 41288eea45cSKlaus Jensen return 0; 41388eea45cSKlaus Jensen } 41488eea45cSKlaus Jensen 41588eea45cSKlaus Jensen if (nvme_addr_is_pmr(n, addr) && nvme_addr_is_pmr(n, hi)) { 41688eea45cSKlaus Jensen memcpy(buf, nvme_addr_to_pmr(n, addr), size); 41788eea45cSKlaus Jensen return 0; 41888eea45cSKlaus Jensen } 41988eea45cSKlaus Jensen 42088eea45cSKlaus Jensen return pci_dma_read(&n->parent_obj, addr, buf, size); 42188eea45cSKlaus Jensen } 42288eea45cSKlaus Jensen 423e080ce86SPhilippe Mathieu-Daudé static int nvme_addr_write(NvmeCtrl *n, hwaddr addr, const void *buf, int size) 42488eea45cSKlaus Jensen { 42588eea45cSKlaus Jensen hwaddr hi = addr + size - 1; 42688eea45cSKlaus Jensen if (hi < addr) { 42788eea45cSKlaus Jensen return 1; 42888eea45cSKlaus Jensen } 42988eea45cSKlaus Jensen 43088eea45cSKlaus Jensen if (n->bar.cmbsz && nvme_addr_is_cmb(n, addr) && nvme_addr_is_cmb(n, hi)) { 43188eea45cSKlaus Jensen memcpy(nvme_addr_to_cmb(n, addr), buf, size); 43288eea45cSKlaus Jensen return 0; 43388eea45cSKlaus Jensen } 43488eea45cSKlaus Jensen 43588eea45cSKlaus Jensen if (nvme_addr_is_pmr(n, addr) && nvme_addr_is_pmr(n, hi)) { 43688eea45cSKlaus Jensen memcpy(nvme_addr_to_pmr(n, addr), buf, size); 43788eea45cSKlaus Jensen return 0; 43888eea45cSKlaus Jensen } 43988eea45cSKlaus Jensen 44088eea45cSKlaus Jensen return pci_dma_write(&n->parent_obj, addr, buf, size); 44188eea45cSKlaus Jensen } 44288eea45cSKlaus Jensen 44388eea45cSKlaus Jensen static bool nvme_nsid_valid(NvmeCtrl *n, uint32_t nsid) 44488eea45cSKlaus Jensen { 44588eea45cSKlaus Jensen return nsid && 44688eea45cSKlaus Jensen (nsid == NVME_NSID_BROADCAST || nsid <= NVME_MAX_NAMESPACES); 44788eea45cSKlaus Jensen } 44888eea45cSKlaus Jensen 44988eea45cSKlaus Jensen static int nvme_check_sqid(NvmeCtrl *n, uint16_t sqid) 45088eea45cSKlaus Jensen { 45188eea45cSKlaus Jensen return sqid < n->params.max_ioqpairs + 1 && n->sq[sqid] != NULL ? 0 : -1; 45288eea45cSKlaus Jensen } 45388eea45cSKlaus Jensen 45488eea45cSKlaus Jensen static int nvme_check_cqid(NvmeCtrl *n, uint16_t cqid) 45588eea45cSKlaus Jensen { 45688eea45cSKlaus Jensen return cqid < n->params.max_ioqpairs + 1 && n->cq[cqid] != NULL ? 0 : -1; 45788eea45cSKlaus Jensen } 45888eea45cSKlaus Jensen 45988eea45cSKlaus Jensen static void nvme_inc_cq_tail(NvmeCQueue *cq) 46088eea45cSKlaus Jensen { 46188eea45cSKlaus Jensen cq->tail++; 46288eea45cSKlaus Jensen if (cq->tail >= cq->size) { 46388eea45cSKlaus Jensen cq->tail = 0; 46488eea45cSKlaus Jensen cq->phase = !cq->phase; 46588eea45cSKlaus Jensen } 46688eea45cSKlaus Jensen } 46788eea45cSKlaus Jensen 46888eea45cSKlaus Jensen static void nvme_inc_sq_head(NvmeSQueue *sq) 46988eea45cSKlaus Jensen { 47088eea45cSKlaus Jensen sq->head = (sq->head + 1) % sq->size; 47188eea45cSKlaus Jensen } 47288eea45cSKlaus Jensen 47388eea45cSKlaus Jensen static uint8_t nvme_cq_full(NvmeCQueue *cq) 47488eea45cSKlaus Jensen { 47588eea45cSKlaus Jensen return (cq->tail + 1) % cq->size == cq->head; 47688eea45cSKlaus Jensen } 47788eea45cSKlaus Jensen 47888eea45cSKlaus Jensen static uint8_t nvme_sq_empty(NvmeSQueue *sq) 47988eea45cSKlaus Jensen { 48088eea45cSKlaus Jensen return sq->head == sq->tail; 48188eea45cSKlaus Jensen } 48288eea45cSKlaus Jensen 48388eea45cSKlaus Jensen static void nvme_irq_check(NvmeCtrl *n) 48488eea45cSKlaus Jensen { 48549e03457SKlaus Jensen uint32_t intms = ldl_le_p(&n->bar.intms); 48649e03457SKlaus Jensen 48788eea45cSKlaus Jensen if (msix_enabled(&(n->parent_obj))) { 48888eea45cSKlaus Jensen return; 48988eea45cSKlaus Jensen } 49049e03457SKlaus Jensen if (~intms & n->irq_status) { 49188eea45cSKlaus Jensen pci_irq_assert(&n->parent_obj); 49288eea45cSKlaus Jensen } else { 49388eea45cSKlaus Jensen pci_irq_deassert(&n->parent_obj); 49488eea45cSKlaus Jensen } 49588eea45cSKlaus Jensen } 49688eea45cSKlaus Jensen 49788eea45cSKlaus Jensen static void nvme_irq_assert(NvmeCtrl *n, NvmeCQueue *cq) 49888eea45cSKlaus Jensen { 49988eea45cSKlaus Jensen if (cq->irq_enabled) { 50088eea45cSKlaus Jensen if (msix_enabled(&(n->parent_obj))) { 50188eea45cSKlaus Jensen trace_pci_nvme_irq_msix(cq->vector); 50288eea45cSKlaus Jensen msix_notify(&(n->parent_obj), cq->vector); 50388eea45cSKlaus Jensen } else { 50488eea45cSKlaus Jensen trace_pci_nvme_irq_pin(); 50588eea45cSKlaus Jensen assert(cq->vector < 32); 50688eea45cSKlaus Jensen n->irq_status |= 1 << cq->vector; 50788eea45cSKlaus Jensen nvme_irq_check(n); 50888eea45cSKlaus Jensen } 50988eea45cSKlaus Jensen } else { 51088eea45cSKlaus Jensen trace_pci_nvme_irq_masked(); 51188eea45cSKlaus Jensen } 51288eea45cSKlaus Jensen } 51388eea45cSKlaus Jensen 51488eea45cSKlaus Jensen static void nvme_irq_deassert(NvmeCtrl *n, NvmeCQueue *cq) 51588eea45cSKlaus Jensen { 51688eea45cSKlaus Jensen if (cq->irq_enabled) { 51788eea45cSKlaus Jensen if (msix_enabled(&(n->parent_obj))) { 51888eea45cSKlaus Jensen return; 51988eea45cSKlaus Jensen } else { 52088eea45cSKlaus Jensen assert(cq->vector < 32); 52183d7ed5cSKlaus Jensen if (!n->cq_pending) { 52288eea45cSKlaus Jensen n->irq_status &= ~(1 << cq->vector); 52383d7ed5cSKlaus Jensen } 52488eea45cSKlaus Jensen nvme_irq_check(n); 52588eea45cSKlaus Jensen } 52688eea45cSKlaus Jensen } 52788eea45cSKlaus Jensen } 52888eea45cSKlaus Jensen 52988eea45cSKlaus Jensen static void nvme_req_clear(NvmeRequest *req) 53088eea45cSKlaus Jensen { 53188eea45cSKlaus Jensen req->ns = NULL; 53288eea45cSKlaus Jensen req->opaque = NULL; 53388eea45cSKlaus Jensen req->aiocb = NULL; 53488eea45cSKlaus Jensen memset(&req->cqe, 0x0, sizeof(req->cqe)); 53588eea45cSKlaus Jensen req->status = NVME_SUCCESS; 53688eea45cSKlaus Jensen } 53788eea45cSKlaus Jensen 53888eea45cSKlaus Jensen static inline void nvme_sg_init(NvmeCtrl *n, NvmeSg *sg, bool dma) 53988eea45cSKlaus Jensen { 54088eea45cSKlaus Jensen if (dma) { 54188eea45cSKlaus Jensen pci_dma_sglist_init(&sg->qsg, &n->parent_obj, 0); 54288eea45cSKlaus Jensen sg->flags = NVME_SG_DMA; 54388eea45cSKlaus Jensen } else { 54488eea45cSKlaus Jensen qemu_iovec_init(&sg->iov, 0); 54588eea45cSKlaus Jensen } 54688eea45cSKlaus Jensen 54788eea45cSKlaus Jensen sg->flags |= NVME_SG_ALLOC; 54888eea45cSKlaus Jensen } 54988eea45cSKlaus Jensen 55088eea45cSKlaus Jensen static inline void nvme_sg_unmap(NvmeSg *sg) 55188eea45cSKlaus Jensen { 55288eea45cSKlaus Jensen if (!(sg->flags & NVME_SG_ALLOC)) { 55388eea45cSKlaus Jensen return; 55488eea45cSKlaus Jensen } 55588eea45cSKlaus Jensen 55688eea45cSKlaus Jensen if (sg->flags & NVME_SG_DMA) { 55788eea45cSKlaus Jensen qemu_sglist_destroy(&sg->qsg); 55888eea45cSKlaus Jensen } else { 55988eea45cSKlaus Jensen qemu_iovec_destroy(&sg->iov); 56088eea45cSKlaus Jensen } 56188eea45cSKlaus Jensen 56288eea45cSKlaus Jensen memset(sg, 0x0, sizeof(*sg)); 56388eea45cSKlaus Jensen } 56488eea45cSKlaus Jensen 56588eea45cSKlaus Jensen /* 56688eea45cSKlaus Jensen * When metadata is transfered as extended LBAs, the DPTR mapped into `sg` 56788eea45cSKlaus Jensen * holds both data and metadata. This function splits the data and metadata 56888eea45cSKlaus Jensen * into two separate QSG/IOVs. 56988eea45cSKlaus Jensen */ 57088eea45cSKlaus Jensen static void nvme_sg_split(NvmeSg *sg, NvmeNamespace *ns, NvmeSg *data, 57188eea45cSKlaus Jensen NvmeSg *mdata) 57288eea45cSKlaus Jensen { 57388eea45cSKlaus Jensen NvmeSg *dst = data; 57488eea45cSKlaus Jensen uint32_t trans_len, count = ns->lbasz; 57588eea45cSKlaus Jensen uint64_t offset = 0; 57688eea45cSKlaus Jensen bool dma = sg->flags & NVME_SG_DMA; 57788eea45cSKlaus Jensen size_t sge_len; 57888eea45cSKlaus Jensen size_t sg_len = dma ? sg->qsg.size : sg->iov.size; 57988eea45cSKlaus Jensen int sg_idx = 0; 58088eea45cSKlaus Jensen 58188eea45cSKlaus Jensen assert(sg->flags & NVME_SG_ALLOC); 58288eea45cSKlaus Jensen 58388eea45cSKlaus Jensen while (sg_len) { 58488eea45cSKlaus Jensen sge_len = dma ? sg->qsg.sg[sg_idx].len : sg->iov.iov[sg_idx].iov_len; 58588eea45cSKlaus Jensen 58688eea45cSKlaus Jensen trans_len = MIN(sg_len, count); 58788eea45cSKlaus Jensen trans_len = MIN(trans_len, sge_len - offset); 58888eea45cSKlaus Jensen 58988eea45cSKlaus Jensen if (dst) { 59088eea45cSKlaus Jensen if (dma) { 59188eea45cSKlaus Jensen qemu_sglist_add(&dst->qsg, sg->qsg.sg[sg_idx].base + offset, 59288eea45cSKlaus Jensen trans_len); 59388eea45cSKlaus Jensen } else { 59488eea45cSKlaus Jensen qemu_iovec_add(&dst->iov, 59588eea45cSKlaus Jensen sg->iov.iov[sg_idx].iov_base + offset, 59688eea45cSKlaus Jensen trans_len); 59788eea45cSKlaus Jensen } 59888eea45cSKlaus Jensen } 59988eea45cSKlaus Jensen 60088eea45cSKlaus Jensen sg_len -= trans_len; 60188eea45cSKlaus Jensen count -= trans_len; 60288eea45cSKlaus Jensen offset += trans_len; 60388eea45cSKlaus Jensen 60488eea45cSKlaus Jensen if (count == 0) { 60588eea45cSKlaus Jensen dst = (dst == data) ? mdata : data; 60688eea45cSKlaus Jensen count = (dst == data) ? ns->lbasz : ns->lbaf.ms; 60788eea45cSKlaus Jensen } 60888eea45cSKlaus Jensen 60988eea45cSKlaus Jensen if (sge_len == offset) { 61088eea45cSKlaus Jensen offset = 0; 61188eea45cSKlaus Jensen sg_idx++; 61288eea45cSKlaus Jensen } 61388eea45cSKlaus Jensen } 61488eea45cSKlaus Jensen } 61588eea45cSKlaus Jensen 61688eea45cSKlaus Jensen static uint16_t nvme_map_addr_cmb(NvmeCtrl *n, QEMUIOVector *iov, hwaddr addr, 61788eea45cSKlaus Jensen size_t len) 61888eea45cSKlaus Jensen { 61988eea45cSKlaus Jensen if (!len) { 62088eea45cSKlaus Jensen return NVME_SUCCESS; 62188eea45cSKlaus Jensen } 62288eea45cSKlaus Jensen 62388eea45cSKlaus Jensen trace_pci_nvme_map_addr_cmb(addr, len); 62488eea45cSKlaus Jensen 62588eea45cSKlaus Jensen if (!nvme_addr_is_cmb(n, addr) || !nvme_addr_is_cmb(n, addr + len - 1)) { 62688eea45cSKlaus Jensen return NVME_DATA_TRAS_ERROR; 62788eea45cSKlaus Jensen } 62888eea45cSKlaus Jensen 62988eea45cSKlaus Jensen qemu_iovec_add(iov, nvme_addr_to_cmb(n, addr), len); 63088eea45cSKlaus Jensen 63188eea45cSKlaus Jensen return NVME_SUCCESS; 63288eea45cSKlaus Jensen } 63388eea45cSKlaus Jensen 63488eea45cSKlaus Jensen static uint16_t nvme_map_addr_pmr(NvmeCtrl *n, QEMUIOVector *iov, hwaddr addr, 63588eea45cSKlaus Jensen size_t len) 63688eea45cSKlaus Jensen { 63788eea45cSKlaus Jensen if (!len) { 63888eea45cSKlaus Jensen return NVME_SUCCESS; 63988eea45cSKlaus Jensen } 64088eea45cSKlaus Jensen 64188eea45cSKlaus Jensen if (!nvme_addr_is_pmr(n, addr) || !nvme_addr_is_pmr(n, addr + len - 1)) { 64288eea45cSKlaus Jensen return NVME_DATA_TRAS_ERROR; 64388eea45cSKlaus Jensen } 64488eea45cSKlaus Jensen 64588eea45cSKlaus Jensen qemu_iovec_add(iov, nvme_addr_to_pmr(n, addr), len); 64688eea45cSKlaus Jensen 64788eea45cSKlaus Jensen return NVME_SUCCESS; 64888eea45cSKlaus Jensen } 64988eea45cSKlaus Jensen 65088eea45cSKlaus Jensen static uint16_t nvme_map_addr(NvmeCtrl *n, NvmeSg *sg, hwaddr addr, size_t len) 65188eea45cSKlaus Jensen { 65288eea45cSKlaus Jensen bool cmb = false, pmr = false; 65388eea45cSKlaus Jensen 65488eea45cSKlaus Jensen if (!len) { 65588eea45cSKlaus Jensen return NVME_SUCCESS; 65688eea45cSKlaus Jensen } 65788eea45cSKlaus Jensen 65888eea45cSKlaus Jensen trace_pci_nvme_map_addr(addr, len); 65988eea45cSKlaus Jensen 660736b0164SKlaus Jensen if (nvme_addr_is_iomem(n, addr)) { 661736b0164SKlaus Jensen return NVME_DATA_TRAS_ERROR; 662736b0164SKlaus Jensen } 663736b0164SKlaus Jensen 66488eea45cSKlaus Jensen if (nvme_addr_is_cmb(n, addr)) { 66588eea45cSKlaus Jensen cmb = true; 66688eea45cSKlaus Jensen } else if (nvme_addr_is_pmr(n, addr)) { 66788eea45cSKlaus Jensen pmr = true; 66888eea45cSKlaus Jensen } 66988eea45cSKlaus Jensen 67088eea45cSKlaus Jensen if (cmb || pmr) { 67188eea45cSKlaus Jensen if (sg->flags & NVME_SG_DMA) { 67288eea45cSKlaus Jensen return NVME_INVALID_USE_OF_CMB | NVME_DNR; 67388eea45cSKlaus Jensen } 67488eea45cSKlaus Jensen 67523421473SPadmakar Kalghatgi if (sg->iov.niov + 1 > IOV_MAX) { 67623421473SPadmakar Kalghatgi goto max_mappings_exceeded; 67723421473SPadmakar Kalghatgi } 67823421473SPadmakar Kalghatgi 67988eea45cSKlaus Jensen if (cmb) { 68088eea45cSKlaus Jensen return nvme_map_addr_cmb(n, &sg->iov, addr, len); 68188eea45cSKlaus Jensen } else { 68288eea45cSKlaus Jensen return nvme_map_addr_pmr(n, &sg->iov, addr, len); 68388eea45cSKlaus Jensen } 68488eea45cSKlaus Jensen } 68588eea45cSKlaus Jensen 68688eea45cSKlaus Jensen if (!(sg->flags & NVME_SG_DMA)) { 68788eea45cSKlaus Jensen return NVME_INVALID_USE_OF_CMB | NVME_DNR; 68888eea45cSKlaus Jensen } 68988eea45cSKlaus Jensen 69023421473SPadmakar Kalghatgi if (sg->qsg.nsg + 1 > IOV_MAX) { 69123421473SPadmakar Kalghatgi goto max_mappings_exceeded; 69223421473SPadmakar Kalghatgi } 69323421473SPadmakar Kalghatgi 69488eea45cSKlaus Jensen qemu_sglist_add(&sg->qsg, addr, len); 69588eea45cSKlaus Jensen 69688eea45cSKlaus Jensen return NVME_SUCCESS; 69723421473SPadmakar Kalghatgi 69823421473SPadmakar Kalghatgi max_mappings_exceeded: 69923421473SPadmakar Kalghatgi NVME_GUEST_ERR(pci_nvme_ub_too_many_mappings, 70023421473SPadmakar Kalghatgi "number of mappings exceed 1024"); 70123421473SPadmakar Kalghatgi return NVME_INTERNAL_DEV_ERROR | NVME_DNR; 70288eea45cSKlaus Jensen } 70388eea45cSKlaus Jensen 70488eea45cSKlaus Jensen static inline bool nvme_addr_is_dma(NvmeCtrl *n, hwaddr addr) 70588eea45cSKlaus Jensen { 70688eea45cSKlaus Jensen return !(nvme_addr_is_cmb(n, addr) || nvme_addr_is_pmr(n, addr)); 70788eea45cSKlaus Jensen } 70888eea45cSKlaus Jensen 70988eea45cSKlaus Jensen static uint16_t nvme_map_prp(NvmeCtrl *n, NvmeSg *sg, uint64_t prp1, 71088eea45cSKlaus Jensen uint64_t prp2, uint32_t len) 71188eea45cSKlaus Jensen { 71288eea45cSKlaus Jensen hwaddr trans_len = n->page_size - (prp1 % n->page_size); 71388eea45cSKlaus Jensen trans_len = MIN(len, trans_len); 71488eea45cSKlaus Jensen int num_prps = (len >> n->page_bits) + 1; 71588eea45cSKlaus Jensen uint16_t status; 71688eea45cSKlaus Jensen int ret; 71788eea45cSKlaus Jensen 71888eea45cSKlaus Jensen trace_pci_nvme_map_prp(trans_len, len, prp1, prp2, num_prps); 71988eea45cSKlaus Jensen 72088eea45cSKlaus Jensen nvme_sg_init(n, sg, nvme_addr_is_dma(n, prp1)); 72188eea45cSKlaus Jensen 72288eea45cSKlaus Jensen status = nvme_map_addr(n, sg, prp1, trans_len); 72388eea45cSKlaus Jensen if (status) { 72488eea45cSKlaus Jensen goto unmap; 72588eea45cSKlaus Jensen } 72688eea45cSKlaus Jensen 72788eea45cSKlaus Jensen len -= trans_len; 72888eea45cSKlaus Jensen if (len) { 72988eea45cSKlaus Jensen if (len > n->page_size) { 73088eea45cSKlaus Jensen uint64_t prp_list[n->max_prp_ents]; 73188eea45cSKlaus Jensen uint32_t nents, prp_trans; 73288eea45cSKlaus Jensen int i = 0; 73388eea45cSKlaus Jensen 73488eea45cSKlaus Jensen /* 73588eea45cSKlaus Jensen * The first PRP list entry, pointed to by PRP2 may contain offset. 73688eea45cSKlaus Jensen * Hence, we need to calculate the number of entries in based on 73788eea45cSKlaus Jensen * that offset. 73888eea45cSKlaus Jensen */ 73988eea45cSKlaus Jensen nents = (n->page_size - (prp2 & (n->page_size - 1))) >> 3; 74088eea45cSKlaus Jensen prp_trans = MIN(n->max_prp_ents, nents) * sizeof(uint64_t); 74188eea45cSKlaus Jensen ret = nvme_addr_read(n, prp2, (void *)prp_list, prp_trans); 74288eea45cSKlaus Jensen if (ret) { 74388eea45cSKlaus Jensen trace_pci_nvme_err_addr_read(prp2); 74488eea45cSKlaus Jensen status = NVME_DATA_TRAS_ERROR; 74588eea45cSKlaus Jensen goto unmap; 74688eea45cSKlaus Jensen } 74788eea45cSKlaus Jensen while (len != 0) { 74888eea45cSKlaus Jensen uint64_t prp_ent = le64_to_cpu(prp_list[i]); 74988eea45cSKlaus Jensen 75088eea45cSKlaus Jensen if (i == nents - 1 && len > n->page_size) { 75188eea45cSKlaus Jensen if (unlikely(prp_ent & (n->page_size - 1))) { 75288eea45cSKlaus Jensen trace_pci_nvme_err_invalid_prplist_ent(prp_ent); 75388eea45cSKlaus Jensen status = NVME_INVALID_PRP_OFFSET | NVME_DNR; 75488eea45cSKlaus Jensen goto unmap; 75588eea45cSKlaus Jensen } 75688eea45cSKlaus Jensen 75788eea45cSKlaus Jensen i = 0; 75888eea45cSKlaus Jensen nents = (len + n->page_size - 1) >> n->page_bits; 75988eea45cSKlaus Jensen nents = MIN(nents, n->max_prp_ents); 76088eea45cSKlaus Jensen prp_trans = nents * sizeof(uint64_t); 76188eea45cSKlaus Jensen ret = nvme_addr_read(n, prp_ent, (void *)prp_list, 76288eea45cSKlaus Jensen prp_trans); 76388eea45cSKlaus Jensen if (ret) { 76488eea45cSKlaus Jensen trace_pci_nvme_err_addr_read(prp_ent); 76588eea45cSKlaus Jensen status = NVME_DATA_TRAS_ERROR; 76688eea45cSKlaus Jensen goto unmap; 76788eea45cSKlaus Jensen } 76888eea45cSKlaus Jensen prp_ent = le64_to_cpu(prp_list[i]); 76988eea45cSKlaus Jensen } 77088eea45cSKlaus Jensen 77188eea45cSKlaus Jensen if (unlikely(prp_ent & (n->page_size - 1))) { 77288eea45cSKlaus Jensen trace_pci_nvme_err_invalid_prplist_ent(prp_ent); 77388eea45cSKlaus Jensen status = NVME_INVALID_PRP_OFFSET | NVME_DNR; 77488eea45cSKlaus Jensen goto unmap; 77588eea45cSKlaus Jensen } 77688eea45cSKlaus Jensen 77788eea45cSKlaus Jensen trans_len = MIN(len, n->page_size); 77888eea45cSKlaus Jensen status = nvme_map_addr(n, sg, prp_ent, trans_len); 77988eea45cSKlaus Jensen if (status) { 78088eea45cSKlaus Jensen goto unmap; 78188eea45cSKlaus Jensen } 78288eea45cSKlaus Jensen 78388eea45cSKlaus Jensen len -= trans_len; 78488eea45cSKlaus Jensen i++; 78588eea45cSKlaus Jensen } 78688eea45cSKlaus Jensen } else { 78788eea45cSKlaus Jensen if (unlikely(prp2 & (n->page_size - 1))) { 78888eea45cSKlaus Jensen trace_pci_nvme_err_invalid_prp2_align(prp2); 78988eea45cSKlaus Jensen status = NVME_INVALID_PRP_OFFSET | NVME_DNR; 79088eea45cSKlaus Jensen goto unmap; 79188eea45cSKlaus Jensen } 79288eea45cSKlaus Jensen status = nvme_map_addr(n, sg, prp2, len); 79388eea45cSKlaus Jensen if (status) { 79488eea45cSKlaus Jensen goto unmap; 79588eea45cSKlaus Jensen } 79688eea45cSKlaus Jensen } 79788eea45cSKlaus Jensen } 79888eea45cSKlaus Jensen 79988eea45cSKlaus Jensen return NVME_SUCCESS; 80088eea45cSKlaus Jensen 80188eea45cSKlaus Jensen unmap: 80288eea45cSKlaus Jensen nvme_sg_unmap(sg); 80388eea45cSKlaus Jensen return status; 80488eea45cSKlaus Jensen } 80588eea45cSKlaus Jensen 80688eea45cSKlaus Jensen /* 80788eea45cSKlaus Jensen * Map 'nsgld' data descriptors from 'segment'. The function will subtract the 80888eea45cSKlaus Jensen * number of bytes mapped in len. 80988eea45cSKlaus Jensen */ 81088eea45cSKlaus Jensen static uint16_t nvme_map_sgl_data(NvmeCtrl *n, NvmeSg *sg, 81188eea45cSKlaus Jensen NvmeSglDescriptor *segment, uint64_t nsgld, 81288eea45cSKlaus Jensen size_t *len, NvmeCmd *cmd) 81388eea45cSKlaus Jensen { 81488eea45cSKlaus Jensen dma_addr_t addr, trans_len; 81588eea45cSKlaus Jensen uint32_t dlen; 81688eea45cSKlaus Jensen uint16_t status; 81788eea45cSKlaus Jensen 81888eea45cSKlaus Jensen for (int i = 0; i < nsgld; i++) { 81988eea45cSKlaus Jensen uint8_t type = NVME_SGL_TYPE(segment[i].type); 82088eea45cSKlaus Jensen 82188eea45cSKlaus Jensen switch (type) { 82288eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_BIT_BUCKET: 82388eea45cSKlaus Jensen if (cmd->opcode == NVME_CMD_WRITE) { 82488eea45cSKlaus Jensen continue; 82588eea45cSKlaus Jensen } 82688eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_DATA_BLOCK: 82788eea45cSKlaus Jensen break; 82888eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_SEGMENT: 82988eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_LAST_SEGMENT: 83088eea45cSKlaus Jensen return NVME_INVALID_NUM_SGL_DESCRS | NVME_DNR; 83188eea45cSKlaus Jensen default: 83288eea45cSKlaus Jensen return NVME_SGL_DESCR_TYPE_INVALID | NVME_DNR; 83388eea45cSKlaus Jensen } 83488eea45cSKlaus Jensen 83588eea45cSKlaus Jensen dlen = le32_to_cpu(segment[i].len); 83688eea45cSKlaus Jensen 83788eea45cSKlaus Jensen if (!dlen) { 83888eea45cSKlaus Jensen continue; 83988eea45cSKlaus Jensen } 84088eea45cSKlaus Jensen 84188eea45cSKlaus Jensen if (*len == 0) { 84288eea45cSKlaus Jensen /* 84388eea45cSKlaus Jensen * All data has been mapped, but the SGL contains additional 84488eea45cSKlaus Jensen * segments and/or descriptors. The controller might accept 84588eea45cSKlaus Jensen * ignoring the rest of the SGL. 84688eea45cSKlaus Jensen */ 84788eea45cSKlaus Jensen uint32_t sgls = le32_to_cpu(n->id_ctrl.sgls); 84888eea45cSKlaus Jensen if (sgls & NVME_CTRL_SGLS_EXCESS_LENGTH) { 84988eea45cSKlaus Jensen break; 85088eea45cSKlaus Jensen } 85188eea45cSKlaus Jensen 85288eea45cSKlaus Jensen trace_pci_nvme_err_invalid_sgl_excess_length(dlen); 85388eea45cSKlaus Jensen return NVME_DATA_SGL_LEN_INVALID | NVME_DNR; 85488eea45cSKlaus Jensen } 85588eea45cSKlaus Jensen 85688eea45cSKlaus Jensen trans_len = MIN(*len, dlen); 85788eea45cSKlaus Jensen 85888eea45cSKlaus Jensen if (type == NVME_SGL_DESCR_TYPE_BIT_BUCKET) { 85988eea45cSKlaus Jensen goto next; 86088eea45cSKlaus Jensen } 86188eea45cSKlaus Jensen 86288eea45cSKlaus Jensen addr = le64_to_cpu(segment[i].addr); 86388eea45cSKlaus Jensen 86488eea45cSKlaus Jensen if (UINT64_MAX - addr < dlen) { 86588eea45cSKlaus Jensen return NVME_DATA_SGL_LEN_INVALID | NVME_DNR; 86688eea45cSKlaus Jensen } 86788eea45cSKlaus Jensen 86888eea45cSKlaus Jensen status = nvme_map_addr(n, sg, addr, trans_len); 86988eea45cSKlaus Jensen if (status) { 87088eea45cSKlaus Jensen return status; 87188eea45cSKlaus Jensen } 87288eea45cSKlaus Jensen 87388eea45cSKlaus Jensen next: 87488eea45cSKlaus Jensen *len -= trans_len; 87588eea45cSKlaus Jensen } 87688eea45cSKlaus Jensen 87788eea45cSKlaus Jensen return NVME_SUCCESS; 87888eea45cSKlaus Jensen } 87988eea45cSKlaus Jensen 88088eea45cSKlaus Jensen static uint16_t nvme_map_sgl(NvmeCtrl *n, NvmeSg *sg, NvmeSglDescriptor sgl, 88188eea45cSKlaus Jensen size_t len, NvmeCmd *cmd) 88288eea45cSKlaus Jensen { 88388eea45cSKlaus Jensen /* 88488eea45cSKlaus Jensen * Read the segment in chunks of 256 descriptors (one 4k page) to avoid 88588eea45cSKlaus Jensen * dynamically allocating a potentially huge SGL. The spec allows the SGL 88688eea45cSKlaus Jensen * to be larger (as in number of bytes required to describe the SGL 88788eea45cSKlaus Jensen * descriptors and segment chain) than the command transfer size, so it is 88888eea45cSKlaus Jensen * not bounded by MDTS. 88988eea45cSKlaus Jensen */ 89088eea45cSKlaus Jensen const int SEG_CHUNK_SIZE = 256; 89188eea45cSKlaus Jensen 89288eea45cSKlaus Jensen NvmeSglDescriptor segment[SEG_CHUNK_SIZE], *sgld, *last_sgld; 89388eea45cSKlaus Jensen uint64_t nsgld; 89488eea45cSKlaus Jensen uint32_t seg_len; 89588eea45cSKlaus Jensen uint16_t status; 89688eea45cSKlaus Jensen hwaddr addr; 89788eea45cSKlaus Jensen int ret; 89888eea45cSKlaus Jensen 89988eea45cSKlaus Jensen sgld = &sgl; 90088eea45cSKlaus Jensen addr = le64_to_cpu(sgl.addr); 90188eea45cSKlaus Jensen 90288eea45cSKlaus Jensen trace_pci_nvme_map_sgl(NVME_SGL_TYPE(sgl.type), len); 90388eea45cSKlaus Jensen 90488eea45cSKlaus Jensen nvme_sg_init(n, sg, nvme_addr_is_dma(n, addr)); 90588eea45cSKlaus Jensen 90688eea45cSKlaus Jensen /* 90788eea45cSKlaus Jensen * If the entire transfer can be described with a single data block it can 90888eea45cSKlaus Jensen * be mapped directly. 90988eea45cSKlaus Jensen */ 91088eea45cSKlaus Jensen if (NVME_SGL_TYPE(sgl.type) == NVME_SGL_DESCR_TYPE_DATA_BLOCK) { 91188eea45cSKlaus Jensen status = nvme_map_sgl_data(n, sg, sgld, 1, &len, cmd); 91288eea45cSKlaus Jensen if (status) { 91388eea45cSKlaus Jensen goto unmap; 91488eea45cSKlaus Jensen } 91588eea45cSKlaus Jensen 91688eea45cSKlaus Jensen goto out; 91788eea45cSKlaus Jensen } 91888eea45cSKlaus Jensen 91988eea45cSKlaus Jensen for (;;) { 92088eea45cSKlaus Jensen switch (NVME_SGL_TYPE(sgld->type)) { 92188eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_SEGMENT: 92288eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_LAST_SEGMENT: 92388eea45cSKlaus Jensen break; 92488eea45cSKlaus Jensen default: 92588eea45cSKlaus Jensen return NVME_INVALID_SGL_SEG_DESCR | NVME_DNR; 92688eea45cSKlaus Jensen } 92788eea45cSKlaus Jensen 92888eea45cSKlaus Jensen seg_len = le32_to_cpu(sgld->len); 92988eea45cSKlaus Jensen 93088eea45cSKlaus Jensen /* check the length of the (Last) Segment descriptor */ 93188eea45cSKlaus Jensen if ((!seg_len || seg_len & 0xf) && 93288eea45cSKlaus Jensen (NVME_SGL_TYPE(sgld->type) != NVME_SGL_DESCR_TYPE_BIT_BUCKET)) { 93388eea45cSKlaus Jensen return NVME_INVALID_SGL_SEG_DESCR | NVME_DNR; 93488eea45cSKlaus Jensen } 93588eea45cSKlaus Jensen 93688eea45cSKlaus Jensen if (UINT64_MAX - addr < seg_len) { 93788eea45cSKlaus Jensen return NVME_DATA_SGL_LEN_INVALID | NVME_DNR; 93888eea45cSKlaus Jensen } 93988eea45cSKlaus Jensen 94088eea45cSKlaus Jensen nsgld = seg_len / sizeof(NvmeSglDescriptor); 94188eea45cSKlaus Jensen 94288eea45cSKlaus Jensen while (nsgld > SEG_CHUNK_SIZE) { 94388eea45cSKlaus Jensen if (nvme_addr_read(n, addr, segment, sizeof(segment))) { 94488eea45cSKlaus Jensen trace_pci_nvme_err_addr_read(addr); 94588eea45cSKlaus Jensen status = NVME_DATA_TRAS_ERROR; 94688eea45cSKlaus Jensen goto unmap; 94788eea45cSKlaus Jensen } 94888eea45cSKlaus Jensen 94988eea45cSKlaus Jensen status = nvme_map_sgl_data(n, sg, segment, SEG_CHUNK_SIZE, 95088eea45cSKlaus Jensen &len, cmd); 95188eea45cSKlaus Jensen if (status) { 95288eea45cSKlaus Jensen goto unmap; 95388eea45cSKlaus Jensen } 95488eea45cSKlaus Jensen 95588eea45cSKlaus Jensen nsgld -= SEG_CHUNK_SIZE; 95688eea45cSKlaus Jensen addr += SEG_CHUNK_SIZE * sizeof(NvmeSglDescriptor); 95788eea45cSKlaus Jensen } 95888eea45cSKlaus Jensen 95988eea45cSKlaus Jensen ret = nvme_addr_read(n, addr, segment, nsgld * 96088eea45cSKlaus Jensen sizeof(NvmeSglDescriptor)); 96188eea45cSKlaus Jensen if (ret) { 96288eea45cSKlaus Jensen trace_pci_nvme_err_addr_read(addr); 96388eea45cSKlaus Jensen status = NVME_DATA_TRAS_ERROR; 96488eea45cSKlaus Jensen goto unmap; 96588eea45cSKlaus Jensen } 96688eea45cSKlaus Jensen 96788eea45cSKlaus Jensen last_sgld = &segment[nsgld - 1]; 96888eea45cSKlaus Jensen 96988eea45cSKlaus Jensen /* 97088eea45cSKlaus Jensen * If the segment ends with a Data Block or Bit Bucket Descriptor Type, 97188eea45cSKlaus Jensen * then we are done. 97288eea45cSKlaus Jensen */ 97388eea45cSKlaus Jensen switch (NVME_SGL_TYPE(last_sgld->type)) { 97488eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_DATA_BLOCK: 97588eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_BIT_BUCKET: 97688eea45cSKlaus Jensen status = nvme_map_sgl_data(n, sg, segment, nsgld, &len, cmd); 97788eea45cSKlaus Jensen if (status) { 97888eea45cSKlaus Jensen goto unmap; 97988eea45cSKlaus Jensen } 98088eea45cSKlaus Jensen 98188eea45cSKlaus Jensen goto out; 98288eea45cSKlaus Jensen 98388eea45cSKlaus Jensen default: 98488eea45cSKlaus Jensen break; 98588eea45cSKlaus Jensen } 98688eea45cSKlaus Jensen 98788eea45cSKlaus Jensen /* 98888eea45cSKlaus Jensen * If the last descriptor was not a Data Block or Bit Bucket, then the 98988eea45cSKlaus Jensen * current segment must not be a Last Segment. 99088eea45cSKlaus Jensen */ 99188eea45cSKlaus Jensen if (NVME_SGL_TYPE(sgld->type) == NVME_SGL_DESCR_TYPE_LAST_SEGMENT) { 99288eea45cSKlaus Jensen status = NVME_INVALID_SGL_SEG_DESCR | NVME_DNR; 99388eea45cSKlaus Jensen goto unmap; 99488eea45cSKlaus Jensen } 99588eea45cSKlaus Jensen 99688eea45cSKlaus Jensen sgld = last_sgld; 99788eea45cSKlaus Jensen addr = le64_to_cpu(sgld->addr); 99888eea45cSKlaus Jensen 99988eea45cSKlaus Jensen /* 100088eea45cSKlaus Jensen * Do not map the last descriptor; it will be a Segment or Last Segment 100188eea45cSKlaus Jensen * descriptor and is handled by the next iteration. 100288eea45cSKlaus Jensen */ 100388eea45cSKlaus Jensen status = nvme_map_sgl_data(n, sg, segment, nsgld - 1, &len, cmd); 100488eea45cSKlaus Jensen if (status) { 100588eea45cSKlaus Jensen goto unmap; 100688eea45cSKlaus Jensen } 100788eea45cSKlaus Jensen } 100888eea45cSKlaus Jensen 100988eea45cSKlaus Jensen out: 101088eea45cSKlaus Jensen /* if there is any residual left in len, the SGL was too short */ 101188eea45cSKlaus Jensen if (len) { 101288eea45cSKlaus Jensen status = NVME_DATA_SGL_LEN_INVALID | NVME_DNR; 101388eea45cSKlaus Jensen goto unmap; 101488eea45cSKlaus Jensen } 101588eea45cSKlaus Jensen 101688eea45cSKlaus Jensen return NVME_SUCCESS; 101788eea45cSKlaus Jensen 101888eea45cSKlaus Jensen unmap: 101988eea45cSKlaus Jensen nvme_sg_unmap(sg); 102088eea45cSKlaus Jensen return status; 102188eea45cSKlaus Jensen } 102288eea45cSKlaus Jensen 102388eea45cSKlaus Jensen uint16_t nvme_map_dptr(NvmeCtrl *n, NvmeSg *sg, size_t len, 102488eea45cSKlaus Jensen NvmeCmd *cmd) 102588eea45cSKlaus Jensen { 102688eea45cSKlaus Jensen uint64_t prp1, prp2; 102788eea45cSKlaus Jensen 102888eea45cSKlaus Jensen switch (NVME_CMD_FLAGS_PSDT(cmd->flags)) { 102988eea45cSKlaus Jensen case NVME_PSDT_PRP: 103088eea45cSKlaus Jensen prp1 = le64_to_cpu(cmd->dptr.prp1); 103188eea45cSKlaus Jensen prp2 = le64_to_cpu(cmd->dptr.prp2); 103288eea45cSKlaus Jensen 103388eea45cSKlaus Jensen return nvme_map_prp(n, sg, prp1, prp2, len); 103488eea45cSKlaus Jensen case NVME_PSDT_SGL_MPTR_CONTIGUOUS: 103588eea45cSKlaus Jensen case NVME_PSDT_SGL_MPTR_SGL: 103688eea45cSKlaus Jensen return nvme_map_sgl(n, sg, cmd->dptr.sgl, len, cmd); 103788eea45cSKlaus Jensen default: 103888eea45cSKlaus Jensen return NVME_INVALID_FIELD; 103988eea45cSKlaus Jensen } 104088eea45cSKlaus Jensen } 104188eea45cSKlaus Jensen 104288eea45cSKlaus Jensen static uint16_t nvme_map_mptr(NvmeCtrl *n, NvmeSg *sg, size_t len, 104388eea45cSKlaus Jensen NvmeCmd *cmd) 104488eea45cSKlaus Jensen { 104588eea45cSKlaus Jensen int psdt = NVME_CMD_FLAGS_PSDT(cmd->flags); 104688eea45cSKlaus Jensen hwaddr mptr = le64_to_cpu(cmd->mptr); 104788eea45cSKlaus Jensen uint16_t status; 104888eea45cSKlaus Jensen 104988eea45cSKlaus Jensen if (psdt == NVME_PSDT_SGL_MPTR_SGL) { 105088eea45cSKlaus Jensen NvmeSglDescriptor sgl; 105188eea45cSKlaus Jensen 105288eea45cSKlaus Jensen if (nvme_addr_read(n, mptr, &sgl, sizeof(sgl))) { 105388eea45cSKlaus Jensen return NVME_DATA_TRAS_ERROR; 105488eea45cSKlaus Jensen } 105588eea45cSKlaus Jensen 105688eea45cSKlaus Jensen status = nvme_map_sgl(n, sg, sgl, len, cmd); 105788eea45cSKlaus Jensen if (status && (status & 0x7ff) == NVME_DATA_SGL_LEN_INVALID) { 105888eea45cSKlaus Jensen status = NVME_MD_SGL_LEN_INVALID | NVME_DNR; 105988eea45cSKlaus Jensen } 106088eea45cSKlaus Jensen 106188eea45cSKlaus Jensen return status; 106288eea45cSKlaus Jensen } 106388eea45cSKlaus Jensen 106488eea45cSKlaus Jensen nvme_sg_init(n, sg, nvme_addr_is_dma(n, mptr)); 106588eea45cSKlaus Jensen status = nvme_map_addr(n, sg, mptr, len); 106688eea45cSKlaus Jensen if (status) { 106788eea45cSKlaus Jensen nvme_sg_unmap(sg); 106888eea45cSKlaus Jensen } 106988eea45cSKlaus Jensen 107088eea45cSKlaus Jensen return status; 107188eea45cSKlaus Jensen } 107288eea45cSKlaus Jensen 107388eea45cSKlaus Jensen static uint16_t nvme_map_data(NvmeCtrl *n, uint32_t nlb, NvmeRequest *req) 107488eea45cSKlaus Jensen { 107588eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 107688eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 10772a132309SKlaus Jensen bool pi = !!NVME_ID_NS_DPS_TYPE(ns->id_ns.dps); 10782a132309SKlaus Jensen bool pract = !!(le16_to_cpu(rw->control) & NVME_RW_PRINFO_PRACT); 107988eea45cSKlaus Jensen size_t len = nvme_l2b(ns, nlb); 108088eea45cSKlaus Jensen uint16_t status; 108188eea45cSKlaus Jensen 1082ac0b34c5SKlaus Jensen if (nvme_ns_ext(ns) && 1083ac0b34c5SKlaus Jensen !(pi && pract && ns->lbaf.ms == nvme_pi_tuple_size(ns))) { 108488eea45cSKlaus Jensen NvmeSg sg; 108588eea45cSKlaus Jensen 108688eea45cSKlaus Jensen len += nvme_m2b(ns, nlb); 108788eea45cSKlaus Jensen 108888eea45cSKlaus Jensen status = nvme_map_dptr(n, &sg, len, &req->cmd); 108988eea45cSKlaus Jensen if (status) { 109088eea45cSKlaus Jensen return status; 109188eea45cSKlaus Jensen } 109288eea45cSKlaus Jensen 109388eea45cSKlaus Jensen nvme_sg_init(n, &req->sg, sg.flags & NVME_SG_DMA); 109488eea45cSKlaus Jensen nvme_sg_split(&sg, ns, &req->sg, NULL); 109588eea45cSKlaus Jensen nvme_sg_unmap(&sg); 109688eea45cSKlaus Jensen 109788eea45cSKlaus Jensen return NVME_SUCCESS; 109888eea45cSKlaus Jensen } 109988eea45cSKlaus Jensen 110088eea45cSKlaus Jensen return nvme_map_dptr(n, &req->sg, len, &req->cmd); 110188eea45cSKlaus Jensen } 110288eea45cSKlaus Jensen 110388eea45cSKlaus Jensen static uint16_t nvme_map_mdata(NvmeCtrl *n, uint32_t nlb, NvmeRequest *req) 110488eea45cSKlaus Jensen { 110588eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 110688eea45cSKlaus Jensen size_t len = nvme_m2b(ns, nlb); 110788eea45cSKlaus Jensen uint16_t status; 110888eea45cSKlaus Jensen 110988eea45cSKlaus Jensen if (nvme_ns_ext(ns)) { 111088eea45cSKlaus Jensen NvmeSg sg; 111188eea45cSKlaus Jensen 111288eea45cSKlaus Jensen len += nvme_l2b(ns, nlb); 111388eea45cSKlaus Jensen 111488eea45cSKlaus Jensen status = nvme_map_dptr(n, &sg, len, &req->cmd); 111588eea45cSKlaus Jensen if (status) { 111688eea45cSKlaus Jensen return status; 111788eea45cSKlaus Jensen } 111888eea45cSKlaus Jensen 111988eea45cSKlaus Jensen nvme_sg_init(n, &req->sg, sg.flags & NVME_SG_DMA); 112088eea45cSKlaus Jensen nvme_sg_split(&sg, ns, NULL, &req->sg); 112188eea45cSKlaus Jensen nvme_sg_unmap(&sg); 112288eea45cSKlaus Jensen 112388eea45cSKlaus Jensen return NVME_SUCCESS; 112488eea45cSKlaus Jensen } 112588eea45cSKlaus Jensen 112688eea45cSKlaus Jensen return nvme_map_mptr(n, &req->sg, len, &req->cmd); 112788eea45cSKlaus Jensen } 112888eea45cSKlaus Jensen 112988eea45cSKlaus Jensen static uint16_t nvme_tx_interleaved(NvmeCtrl *n, NvmeSg *sg, uint8_t *ptr, 113088eea45cSKlaus Jensen uint32_t len, uint32_t bytes, 113188eea45cSKlaus Jensen int32_t skip_bytes, int64_t offset, 113288eea45cSKlaus Jensen NvmeTxDirection dir) 113388eea45cSKlaus Jensen { 113488eea45cSKlaus Jensen hwaddr addr; 113588eea45cSKlaus Jensen uint32_t trans_len, count = bytes; 113688eea45cSKlaus Jensen bool dma = sg->flags & NVME_SG_DMA; 113788eea45cSKlaus Jensen int64_t sge_len; 113888eea45cSKlaus Jensen int sg_idx = 0; 113988eea45cSKlaus Jensen int ret; 114088eea45cSKlaus Jensen 114188eea45cSKlaus Jensen assert(sg->flags & NVME_SG_ALLOC); 114288eea45cSKlaus Jensen 114388eea45cSKlaus Jensen while (len) { 114488eea45cSKlaus Jensen sge_len = dma ? sg->qsg.sg[sg_idx].len : sg->iov.iov[sg_idx].iov_len; 114588eea45cSKlaus Jensen 114688eea45cSKlaus Jensen if (sge_len - offset < 0) { 114788eea45cSKlaus Jensen offset -= sge_len; 114888eea45cSKlaus Jensen sg_idx++; 114988eea45cSKlaus Jensen continue; 115088eea45cSKlaus Jensen } 115188eea45cSKlaus Jensen 115288eea45cSKlaus Jensen if (sge_len == offset) { 115388eea45cSKlaus Jensen offset = 0; 115488eea45cSKlaus Jensen sg_idx++; 115588eea45cSKlaus Jensen continue; 115688eea45cSKlaus Jensen } 115788eea45cSKlaus Jensen 115888eea45cSKlaus Jensen trans_len = MIN(len, count); 115988eea45cSKlaus Jensen trans_len = MIN(trans_len, sge_len - offset); 116088eea45cSKlaus Jensen 116188eea45cSKlaus Jensen if (dma) { 116288eea45cSKlaus Jensen addr = sg->qsg.sg[sg_idx].base + offset; 116388eea45cSKlaus Jensen } else { 116488eea45cSKlaus Jensen addr = (hwaddr)(uintptr_t)sg->iov.iov[sg_idx].iov_base + offset; 116588eea45cSKlaus Jensen } 116688eea45cSKlaus Jensen 116788eea45cSKlaus Jensen if (dir == NVME_TX_DIRECTION_TO_DEVICE) { 116888eea45cSKlaus Jensen ret = nvme_addr_read(n, addr, ptr, trans_len); 116988eea45cSKlaus Jensen } else { 117088eea45cSKlaus Jensen ret = nvme_addr_write(n, addr, ptr, trans_len); 117188eea45cSKlaus Jensen } 117288eea45cSKlaus Jensen 117388eea45cSKlaus Jensen if (ret) { 117488eea45cSKlaus Jensen return NVME_DATA_TRAS_ERROR; 117588eea45cSKlaus Jensen } 117688eea45cSKlaus Jensen 117788eea45cSKlaus Jensen ptr += trans_len; 117888eea45cSKlaus Jensen len -= trans_len; 117988eea45cSKlaus Jensen count -= trans_len; 118088eea45cSKlaus Jensen offset += trans_len; 118188eea45cSKlaus Jensen 118288eea45cSKlaus Jensen if (count == 0) { 118388eea45cSKlaus Jensen count = bytes; 118488eea45cSKlaus Jensen offset += skip_bytes; 118588eea45cSKlaus Jensen } 118688eea45cSKlaus Jensen } 118788eea45cSKlaus Jensen 118888eea45cSKlaus Jensen return NVME_SUCCESS; 118988eea45cSKlaus Jensen } 119088eea45cSKlaus Jensen 11918d3a17beSPhilippe Mathieu-Daudé static uint16_t nvme_tx(NvmeCtrl *n, NvmeSg *sg, void *ptr, uint32_t len, 119288eea45cSKlaus Jensen NvmeTxDirection dir) 119388eea45cSKlaus Jensen { 119488eea45cSKlaus Jensen assert(sg->flags & NVME_SG_ALLOC); 119588eea45cSKlaus Jensen 119688eea45cSKlaus Jensen if (sg->flags & NVME_SG_DMA) { 1197392e48afSPhilippe Mathieu-Daudé const MemTxAttrs attrs = MEMTXATTRS_UNSPECIFIED; 1198bfa30f39SPhilippe Mathieu-Daudé dma_addr_t residual; 119988eea45cSKlaus Jensen 120088eea45cSKlaus Jensen if (dir == NVME_TX_DIRECTION_TO_DEVICE) { 1201f02b664aSPhilippe Mathieu-Daudé dma_buf_write(ptr, len, &residual, &sg->qsg, attrs); 120288eea45cSKlaus Jensen } else { 1203f02b664aSPhilippe Mathieu-Daudé dma_buf_read(ptr, len, &residual, &sg->qsg, attrs); 120488eea45cSKlaus Jensen } 120588eea45cSKlaus Jensen 120688eea45cSKlaus Jensen if (unlikely(residual)) { 120788eea45cSKlaus Jensen trace_pci_nvme_err_invalid_dma(); 120888eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 120988eea45cSKlaus Jensen } 121088eea45cSKlaus Jensen } else { 121188eea45cSKlaus Jensen size_t bytes; 121288eea45cSKlaus Jensen 121388eea45cSKlaus Jensen if (dir == NVME_TX_DIRECTION_TO_DEVICE) { 121488eea45cSKlaus Jensen bytes = qemu_iovec_to_buf(&sg->iov, 0, ptr, len); 121588eea45cSKlaus Jensen } else { 121688eea45cSKlaus Jensen bytes = qemu_iovec_from_buf(&sg->iov, 0, ptr, len); 121788eea45cSKlaus Jensen } 121888eea45cSKlaus Jensen 121988eea45cSKlaus Jensen if (unlikely(bytes != len)) { 122088eea45cSKlaus Jensen trace_pci_nvme_err_invalid_dma(); 122188eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 122288eea45cSKlaus Jensen } 122388eea45cSKlaus Jensen } 122488eea45cSKlaus Jensen 122588eea45cSKlaus Jensen return NVME_SUCCESS; 122688eea45cSKlaus Jensen } 122788eea45cSKlaus Jensen 12288d3a17beSPhilippe Mathieu-Daudé static inline uint16_t nvme_c2h(NvmeCtrl *n, void *ptr, uint32_t len, 122988eea45cSKlaus Jensen NvmeRequest *req) 123088eea45cSKlaus Jensen { 123188eea45cSKlaus Jensen uint16_t status; 123288eea45cSKlaus Jensen 123388eea45cSKlaus Jensen status = nvme_map_dptr(n, &req->sg, len, &req->cmd); 123488eea45cSKlaus Jensen if (status) { 123588eea45cSKlaus Jensen return status; 123688eea45cSKlaus Jensen } 123788eea45cSKlaus Jensen 123888eea45cSKlaus Jensen return nvme_tx(n, &req->sg, ptr, len, NVME_TX_DIRECTION_FROM_DEVICE); 123988eea45cSKlaus Jensen } 124088eea45cSKlaus Jensen 12418d3a17beSPhilippe Mathieu-Daudé static inline uint16_t nvme_h2c(NvmeCtrl *n, void *ptr, uint32_t len, 124288eea45cSKlaus Jensen NvmeRequest *req) 124388eea45cSKlaus Jensen { 124488eea45cSKlaus Jensen uint16_t status; 124588eea45cSKlaus Jensen 124688eea45cSKlaus Jensen status = nvme_map_dptr(n, &req->sg, len, &req->cmd); 124788eea45cSKlaus Jensen if (status) { 124888eea45cSKlaus Jensen return status; 124988eea45cSKlaus Jensen } 125088eea45cSKlaus Jensen 125188eea45cSKlaus Jensen return nvme_tx(n, &req->sg, ptr, len, NVME_TX_DIRECTION_TO_DEVICE); 125288eea45cSKlaus Jensen } 125388eea45cSKlaus Jensen 12548d3a17beSPhilippe Mathieu-Daudé uint16_t nvme_bounce_data(NvmeCtrl *n, void *ptr, uint32_t len, 125588eea45cSKlaus Jensen NvmeTxDirection dir, NvmeRequest *req) 125688eea45cSKlaus Jensen { 125788eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 125888eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 12592a132309SKlaus Jensen bool pi = !!NVME_ID_NS_DPS_TYPE(ns->id_ns.dps); 12602a132309SKlaus Jensen bool pract = !!(le16_to_cpu(rw->control) & NVME_RW_PRINFO_PRACT); 126188eea45cSKlaus Jensen 1262ac0b34c5SKlaus Jensen if (nvme_ns_ext(ns) && 1263ac0b34c5SKlaus Jensen !(pi && pract && ns->lbaf.ms == nvme_pi_tuple_size(ns))) { 126488eea45cSKlaus Jensen return nvme_tx_interleaved(n, &req->sg, ptr, len, ns->lbasz, 126588eea45cSKlaus Jensen ns->lbaf.ms, 0, dir); 126688eea45cSKlaus Jensen } 126788eea45cSKlaus Jensen 126888eea45cSKlaus Jensen return nvme_tx(n, &req->sg, ptr, len, dir); 126988eea45cSKlaus Jensen } 127088eea45cSKlaus Jensen 12718d3a17beSPhilippe Mathieu-Daudé uint16_t nvme_bounce_mdata(NvmeCtrl *n, void *ptr, uint32_t len, 127288eea45cSKlaus Jensen NvmeTxDirection dir, NvmeRequest *req) 127388eea45cSKlaus Jensen { 127488eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 127588eea45cSKlaus Jensen uint16_t status; 127688eea45cSKlaus Jensen 127788eea45cSKlaus Jensen if (nvme_ns_ext(ns)) { 127888eea45cSKlaus Jensen return nvme_tx_interleaved(n, &req->sg, ptr, len, ns->lbaf.ms, 127988eea45cSKlaus Jensen ns->lbasz, ns->lbasz, dir); 128088eea45cSKlaus Jensen } 128188eea45cSKlaus Jensen 128288eea45cSKlaus Jensen nvme_sg_unmap(&req->sg); 128388eea45cSKlaus Jensen 128488eea45cSKlaus Jensen status = nvme_map_mptr(n, &req->sg, len, &req->cmd); 128588eea45cSKlaus Jensen if (status) { 128688eea45cSKlaus Jensen return status; 128788eea45cSKlaus Jensen } 128888eea45cSKlaus Jensen 128988eea45cSKlaus Jensen return nvme_tx(n, &req->sg, ptr, len, dir); 129088eea45cSKlaus Jensen } 129188eea45cSKlaus Jensen 129288eea45cSKlaus Jensen static inline void nvme_blk_read(BlockBackend *blk, int64_t offset, 129388eea45cSKlaus Jensen BlockCompletionFunc *cb, NvmeRequest *req) 129488eea45cSKlaus Jensen { 129588eea45cSKlaus Jensen assert(req->sg.flags & NVME_SG_ALLOC); 129688eea45cSKlaus Jensen 129788eea45cSKlaus Jensen if (req->sg.flags & NVME_SG_DMA) { 129888eea45cSKlaus Jensen req->aiocb = dma_blk_read(blk, &req->sg.qsg, offset, BDRV_SECTOR_SIZE, 129988eea45cSKlaus Jensen cb, req); 130088eea45cSKlaus Jensen } else { 130188eea45cSKlaus Jensen req->aiocb = blk_aio_preadv(blk, offset, &req->sg.iov, 0, cb, req); 130288eea45cSKlaus Jensen } 130388eea45cSKlaus Jensen } 130488eea45cSKlaus Jensen 130588eea45cSKlaus Jensen static inline void nvme_blk_write(BlockBackend *blk, int64_t offset, 130688eea45cSKlaus Jensen BlockCompletionFunc *cb, NvmeRequest *req) 130788eea45cSKlaus Jensen { 130888eea45cSKlaus Jensen assert(req->sg.flags & NVME_SG_ALLOC); 130988eea45cSKlaus Jensen 131088eea45cSKlaus Jensen if (req->sg.flags & NVME_SG_DMA) { 131188eea45cSKlaus Jensen req->aiocb = dma_blk_write(blk, &req->sg.qsg, offset, BDRV_SECTOR_SIZE, 131288eea45cSKlaus Jensen cb, req); 131388eea45cSKlaus Jensen } else { 131488eea45cSKlaus Jensen req->aiocb = blk_aio_pwritev(blk, offset, &req->sg.iov, 0, cb, req); 131588eea45cSKlaus Jensen } 131688eea45cSKlaus Jensen } 131788eea45cSKlaus Jensen 131888eea45cSKlaus Jensen static void nvme_post_cqes(void *opaque) 131988eea45cSKlaus Jensen { 132088eea45cSKlaus Jensen NvmeCQueue *cq = opaque; 132188eea45cSKlaus Jensen NvmeCtrl *n = cq->ctrl; 132288eea45cSKlaus Jensen NvmeRequest *req, *next; 132383d7ed5cSKlaus Jensen bool pending = cq->head != cq->tail; 132488eea45cSKlaus Jensen int ret; 132588eea45cSKlaus Jensen 132688eea45cSKlaus Jensen QTAILQ_FOREACH_SAFE(req, &cq->req_list, entry, next) { 132788eea45cSKlaus Jensen NvmeSQueue *sq; 132888eea45cSKlaus Jensen hwaddr addr; 132988eea45cSKlaus Jensen 133088eea45cSKlaus Jensen if (nvme_cq_full(cq)) { 133188eea45cSKlaus Jensen break; 133288eea45cSKlaus Jensen } 133388eea45cSKlaus Jensen 133488eea45cSKlaus Jensen sq = req->sq; 133588eea45cSKlaus Jensen req->cqe.status = cpu_to_le16((req->status << 1) | cq->phase); 133688eea45cSKlaus Jensen req->cqe.sq_id = cpu_to_le16(sq->sqid); 133788eea45cSKlaus Jensen req->cqe.sq_head = cpu_to_le16(sq->head); 133888eea45cSKlaus Jensen addr = cq->dma_addr + cq->tail * n->cqe_size; 133988eea45cSKlaus Jensen ret = pci_dma_write(&n->parent_obj, addr, (void *)&req->cqe, 134088eea45cSKlaus Jensen sizeof(req->cqe)); 134188eea45cSKlaus Jensen if (ret) { 134288eea45cSKlaus Jensen trace_pci_nvme_err_addr_write(addr); 134388eea45cSKlaus Jensen trace_pci_nvme_err_cfs(); 134449e03457SKlaus Jensen stl_le_p(&n->bar.csts, NVME_CSTS_FAILED); 134588eea45cSKlaus Jensen break; 134688eea45cSKlaus Jensen } 134788eea45cSKlaus Jensen QTAILQ_REMOVE(&cq->req_list, req, entry); 134888eea45cSKlaus Jensen nvme_inc_cq_tail(cq); 134988eea45cSKlaus Jensen nvme_sg_unmap(&req->sg); 135088eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&sq->req_list, req, entry); 135188eea45cSKlaus Jensen } 135288eea45cSKlaus Jensen if (cq->tail != cq->head) { 135383d7ed5cSKlaus Jensen if (cq->irq_enabled && !pending) { 135483d7ed5cSKlaus Jensen n->cq_pending++; 135583d7ed5cSKlaus Jensen } 135683d7ed5cSKlaus Jensen 135788eea45cSKlaus Jensen nvme_irq_assert(n, cq); 135888eea45cSKlaus Jensen } 135988eea45cSKlaus Jensen } 136088eea45cSKlaus Jensen 136188eea45cSKlaus Jensen static void nvme_enqueue_req_completion(NvmeCQueue *cq, NvmeRequest *req) 136288eea45cSKlaus Jensen { 136388eea45cSKlaus Jensen assert(cq->cqid == req->sq->cqid); 136488eea45cSKlaus Jensen trace_pci_nvme_enqueue_req_completion(nvme_cid(req), cq->cqid, 1365f1c97407SKlaus Jensen le32_to_cpu(req->cqe.result), 1366f1c97407SKlaus Jensen le32_to_cpu(req->cqe.dw1), 136788eea45cSKlaus Jensen req->status); 136888eea45cSKlaus Jensen 136988eea45cSKlaus Jensen if (req->status) { 137088eea45cSKlaus Jensen trace_pci_nvme_err_req_status(nvme_cid(req), nvme_nsid(req->ns), 137188eea45cSKlaus Jensen req->status, req->cmd.opcode); 137288eea45cSKlaus Jensen } 137388eea45cSKlaus Jensen 137488eea45cSKlaus Jensen QTAILQ_REMOVE(&req->sq->out_req_list, req, entry); 137588eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&cq->req_list, req, entry); 137688eea45cSKlaus Jensen timer_mod(cq->timer, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) + 500); 137788eea45cSKlaus Jensen } 137888eea45cSKlaus Jensen 137988eea45cSKlaus Jensen static void nvme_process_aers(void *opaque) 138088eea45cSKlaus Jensen { 138188eea45cSKlaus Jensen NvmeCtrl *n = opaque; 138288eea45cSKlaus Jensen NvmeAsyncEvent *event, *next; 138388eea45cSKlaus Jensen 138488eea45cSKlaus Jensen trace_pci_nvme_process_aers(n->aer_queued); 138588eea45cSKlaus Jensen 138688eea45cSKlaus Jensen QTAILQ_FOREACH_SAFE(event, &n->aer_queue, entry, next) { 138788eea45cSKlaus Jensen NvmeRequest *req; 138888eea45cSKlaus Jensen NvmeAerResult *result; 138988eea45cSKlaus Jensen 139088eea45cSKlaus Jensen /* can't post cqe if there is nothing to complete */ 139188eea45cSKlaus Jensen if (!n->outstanding_aers) { 139288eea45cSKlaus Jensen trace_pci_nvme_no_outstanding_aers(); 139388eea45cSKlaus Jensen break; 139488eea45cSKlaus Jensen } 139588eea45cSKlaus Jensen 139688eea45cSKlaus Jensen /* ignore if masked (cqe posted, but event not cleared) */ 139788eea45cSKlaus Jensen if (n->aer_mask & (1 << event->result.event_type)) { 139888eea45cSKlaus Jensen trace_pci_nvme_aer_masked(event->result.event_type, n->aer_mask); 139988eea45cSKlaus Jensen continue; 140088eea45cSKlaus Jensen } 140188eea45cSKlaus Jensen 140288eea45cSKlaus Jensen QTAILQ_REMOVE(&n->aer_queue, event, entry); 140388eea45cSKlaus Jensen n->aer_queued--; 140488eea45cSKlaus Jensen 140588eea45cSKlaus Jensen n->aer_mask |= 1 << event->result.event_type; 140688eea45cSKlaus Jensen n->outstanding_aers--; 140788eea45cSKlaus Jensen 140888eea45cSKlaus Jensen req = n->aer_reqs[n->outstanding_aers]; 140988eea45cSKlaus Jensen 141088eea45cSKlaus Jensen result = (NvmeAerResult *) &req->cqe.result; 141188eea45cSKlaus Jensen result->event_type = event->result.event_type; 141288eea45cSKlaus Jensen result->event_info = event->result.event_info; 141388eea45cSKlaus Jensen result->log_page = event->result.log_page; 141488eea45cSKlaus Jensen g_free(event); 141588eea45cSKlaus Jensen 141688eea45cSKlaus Jensen trace_pci_nvme_aer_post_cqe(result->event_type, result->event_info, 141788eea45cSKlaus Jensen result->log_page); 141888eea45cSKlaus Jensen 141988eea45cSKlaus Jensen nvme_enqueue_req_completion(&n->admin_cq, req); 142088eea45cSKlaus Jensen } 142188eea45cSKlaus Jensen } 142288eea45cSKlaus Jensen 142388eea45cSKlaus Jensen static void nvme_enqueue_event(NvmeCtrl *n, uint8_t event_type, 142488eea45cSKlaus Jensen uint8_t event_info, uint8_t log_page) 142588eea45cSKlaus Jensen { 142688eea45cSKlaus Jensen NvmeAsyncEvent *event; 142788eea45cSKlaus Jensen 142888eea45cSKlaus Jensen trace_pci_nvme_enqueue_event(event_type, event_info, log_page); 142988eea45cSKlaus Jensen 143088eea45cSKlaus Jensen if (n->aer_queued == n->params.aer_max_queued) { 143188eea45cSKlaus Jensen trace_pci_nvme_enqueue_event_noqueue(n->aer_queued); 143288eea45cSKlaus Jensen return; 143388eea45cSKlaus Jensen } 143488eea45cSKlaus Jensen 143588eea45cSKlaus Jensen event = g_new(NvmeAsyncEvent, 1); 143688eea45cSKlaus Jensen event->result = (NvmeAerResult) { 143788eea45cSKlaus Jensen .event_type = event_type, 143888eea45cSKlaus Jensen .event_info = event_info, 143988eea45cSKlaus Jensen .log_page = log_page, 144088eea45cSKlaus Jensen }; 144188eea45cSKlaus Jensen 144288eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&n->aer_queue, event, entry); 144388eea45cSKlaus Jensen n->aer_queued++; 144488eea45cSKlaus Jensen 144588eea45cSKlaus Jensen nvme_process_aers(n); 144688eea45cSKlaus Jensen } 144788eea45cSKlaus Jensen 144888eea45cSKlaus Jensen static void nvme_smart_event(NvmeCtrl *n, uint8_t event) 144988eea45cSKlaus Jensen { 145088eea45cSKlaus Jensen uint8_t aer_info; 145188eea45cSKlaus Jensen 145288eea45cSKlaus Jensen /* Ref SPEC <Asynchronous Event Information 0x2013 SMART / Health Status> */ 145388eea45cSKlaus Jensen if (!(NVME_AEC_SMART(n->features.async_config) & event)) { 145488eea45cSKlaus Jensen return; 145588eea45cSKlaus Jensen } 145688eea45cSKlaus Jensen 145788eea45cSKlaus Jensen switch (event) { 145888eea45cSKlaus Jensen case NVME_SMART_SPARE: 145988eea45cSKlaus Jensen aer_info = NVME_AER_INFO_SMART_SPARE_THRESH; 146088eea45cSKlaus Jensen break; 146188eea45cSKlaus Jensen case NVME_SMART_TEMPERATURE: 146288eea45cSKlaus Jensen aer_info = NVME_AER_INFO_SMART_TEMP_THRESH; 146388eea45cSKlaus Jensen break; 146488eea45cSKlaus Jensen case NVME_SMART_RELIABILITY: 146588eea45cSKlaus Jensen case NVME_SMART_MEDIA_READ_ONLY: 146688eea45cSKlaus Jensen case NVME_SMART_FAILED_VOLATILE_MEDIA: 146788eea45cSKlaus Jensen case NVME_SMART_PMR_UNRELIABLE: 146888eea45cSKlaus Jensen aer_info = NVME_AER_INFO_SMART_RELIABILITY; 146988eea45cSKlaus Jensen break; 147088eea45cSKlaus Jensen default: 147188eea45cSKlaus Jensen return; 147288eea45cSKlaus Jensen } 147388eea45cSKlaus Jensen 147488eea45cSKlaus Jensen nvme_enqueue_event(n, NVME_AER_TYPE_SMART, aer_info, NVME_LOG_SMART_INFO); 147588eea45cSKlaus Jensen } 147688eea45cSKlaus Jensen 147788eea45cSKlaus Jensen static void nvme_clear_events(NvmeCtrl *n, uint8_t event_type) 147888eea45cSKlaus Jensen { 147988eea45cSKlaus Jensen n->aer_mask &= ~(1 << event_type); 148088eea45cSKlaus Jensen if (!QTAILQ_EMPTY(&n->aer_queue)) { 148188eea45cSKlaus Jensen nvme_process_aers(n); 148288eea45cSKlaus Jensen } 148388eea45cSKlaus Jensen } 148488eea45cSKlaus Jensen 148588eea45cSKlaus Jensen static inline uint16_t nvme_check_mdts(NvmeCtrl *n, size_t len) 148688eea45cSKlaus Jensen { 148788eea45cSKlaus Jensen uint8_t mdts = n->params.mdts; 148888eea45cSKlaus Jensen 148988eea45cSKlaus Jensen if (mdts && len > n->page_size << mdts) { 149088eea45cSKlaus Jensen trace_pci_nvme_err_mdts(len); 149188eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 149288eea45cSKlaus Jensen } 149388eea45cSKlaus Jensen 149488eea45cSKlaus Jensen return NVME_SUCCESS; 149588eea45cSKlaus Jensen } 149688eea45cSKlaus Jensen 149788eea45cSKlaus Jensen static inline uint16_t nvme_check_bounds(NvmeNamespace *ns, uint64_t slba, 149888eea45cSKlaus Jensen uint32_t nlb) 149988eea45cSKlaus Jensen { 150088eea45cSKlaus Jensen uint64_t nsze = le64_to_cpu(ns->id_ns.nsze); 150188eea45cSKlaus Jensen 150288eea45cSKlaus Jensen if (unlikely(UINT64_MAX - slba < nlb || slba + nlb > nsze)) { 150388eea45cSKlaus Jensen trace_pci_nvme_err_invalid_lba_range(slba, nlb, nsze); 150488eea45cSKlaus Jensen return NVME_LBA_RANGE | NVME_DNR; 150588eea45cSKlaus Jensen } 150688eea45cSKlaus Jensen 150788eea45cSKlaus Jensen return NVME_SUCCESS; 150888eea45cSKlaus Jensen } 150988eea45cSKlaus Jensen 1510ff0ac2c8SKlaus Jensen static int nvme_block_status_all(NvmeNamespace *ns, uint64_t slba, 1511ff0ac2c8SKlaus Jensen uint32_t nlb, int flags) 151288eea45cSKlaus Jensen { 151388eea45cSKlaus Jensen BlockDriverState *bs = blk_bs(ns->blkconf.blk); 151488eea45cSKlaus Jensen 151588eea45cSKlaus Jensen int64_t pnum = 0, bytes = nvme_l2b(ns, nlb); 151688eea45cSKlaus Jensen int64_t offset = nvme_l2b(ns, slba); 151788eea45cSKlaus Jensen int ret; 151888eea45cSKlaus Jensen 151988eea45cSKlaus Jensen /* 152088eea45cSKlaus Jensen * `pnum` holds the number of bytes after offset that shares the same 152188eea45cSKlaus Jensen * allocation status as the byte at offset. If `pnum` is different from 152288eea45cSKlaus Jensen * `bytes`, we should check the allocation status of the next range and 152388eea45cSKlaus Jensen * continue this until all bytes have been checked. 152488eea45cSKlaus Jensen */ 152588eea45cSKlaus Jensen do { 152688eea45cSKlaus Jensen bytes -= pnum; 152788eea45cSKlaus Jensen 152888eea45cSKlaus Jensen ret = bdrv_block_status(bs, offset, bytes, &pnum, NULL, NULL); 152988eea45cSKlaus Jensen if (ret < 0) { 1530ff0ac2c8SKlaus Jensen return ret; 153188eea45cSKlaus Jensen } 153288eea45cSKlaus Jensen 153388eea45cSKlaus Jensen 1534ff0ac2c8SKlaus Jensen trace_pci_nvme_block_status(offset, bytes, pnum, ret, 1535ff0ac2c8SKlaus Jensen !!(ret & BDRV_BLOCK_ZERO)); 153688eea45cSKlaus Jensen 1537ff0ac2c8SKlaus Jensen if (!(ret & flags)) { 1538ff0ac2c8SKlaus Jensen return 1; 153988eea45cSKlaus Jensen } 154088eea45cSKlaus Jensen 154188eea45cSKlaus Jensen offset += pnum; 154288eea45cSKlaus Jensen } while (pnum != bytes); 154388eea45cSKlaus Jensen 1544ff0ac2c8SKlaus Jensen return 0; 1545ff0ac2c8SKlaus Jensen } 1546ff0ac2c8SKlaus Jensen 1547ff0ac2c8SKlaus Jensen static uint16_t nvme_check_dulbe(NvmeNamespace *ns, uint64_t slba, 1548ff0ac2c8SKlaus Jensen uint32_t nlb) 1549ff0ac2c8SKlaus Jensen { 1550ff0ac2c8SKlaus Jensen int ret; 1551ff0ac2c8SKlaus Jensen Error *err = NULL; 1552ff0ac2c8SKlaus Jensen 1553ff0ac2c8SKlaus Jensen ret = nvme_block_status_all(ns, slba, nlb, BDRV_BLOCK_DATA); 1554ff0ac2c8SKlaus Jensen if (ret) { 1555ff0ac2c8SKlaus Jensen if (ret < 0) { 1556ff0ac2c8SKlaus Jensen error_setg_errno(&err, -ret, "unable to get block status"); 1557ff0ac2c8SKlaus Jensen error_report_err(err); 1558ff0ac2c8SKlaus Jensen 1559ff0ac2c8SKlaus Jensen return NVME_INTERNAL_DEV_ERROR; 1560ff0ac2c8SKlaus Jensen } 1561ff0ac2c8SKlaus Jensen 1562ff0ac2c8SKlaus Jensen return NVME_DULB; 1563ff0ac2c8SKlaus Jensen } 1564ff0ac2c8SKlaus Jensen 156588eea45cSKlaus Jensen return NVME_SUCCESS; 156688eea45cSKlaus Jensen } 156788eea45cSKlaus Jensen 156888eea45cSKlaus Jensen static void nvme_aio_err(NvmeRequest *req, int ret) 156988eea45cSKlaus Jensen { 157088eea45cSKlaus Jensen uint16_t status = NVME_SUCCESS; 157188eea45cSKlaus Jensen Error *local_err = NULL; 157288eea45cSKlaus Jensen 157388eea45cSKlaus Jensen switch (req->cmd.opcode) { 157488eea45cSKlaus Jensen case NVME_CMD_READ: 157588eea45cSKlaus Jensen status = NVME_UNRECOVERED_READ; 157688eea45cSKlaus Jensen break; 157788eea45cSKlaus Jensen case NVME_CMD_FLUSH: 157888eea45cSKlaus Jensen case NVME_CMD_WRITE: 157988eea45cSKlaus Jensen case NVME_CMD_WRITE_ZEROES: 158088eea45cSKlaus Jensen case NVME_CMD_ZONE_APPEND: 158188eea45cSKlaus Jensen status = NVME_WRITE_FAULT; 158288eea45cSKlaus Jensen break; 158388eea45cSKlaus Jensen default: 158488eea45cSKlaus Jensen status = NVME_INTERNAL_DEV_ERROR; 158588eea45cSKlaus Jensen break; 158688eea45cSKlaus Jensen } 158788eea45cSKlaus Jensen 158888eea45cSKlaus Jensen trace_pci_nvme_err_aio(nvme_cid(req), strerror(-ret), status); 158988eea45cSKlaus Jensen 159088eea45cSKlaus Jensen error_setg_errno(&local_err, -ret, "aio failed"); 159188eea45cSKlaus Jensen error_report_err(local_err); 159288eea45cSKlaus Jensen 159388eea45cSKlaus Jensen /* 159488eea45cSKlaus Jensen * Set the command status code to the first encountered error but allow a 159588eea45cSKlaus Jensen * subsequent Internal Device Error to trump it. 159688eea45cSKlaus Jensen */ 159788eea45cSKlaus Jensen if (req->status && status != NVME_INTERNAL_DEV_ERROR) { 159888eea45cSKlaus Jensen return; 159988eea45cSKlaus Jensen } 160088eea45cSKlaus Jensen 160188eea45cSKlaus Jensen req->status = status; 160288eea45cSKlaus Jensen } 160388eea45cSKlaus Jensen 160488eea45cSKlaus Jensen static inline uint32_t nvme_zone_idx(NvmeNamespace *ns, uint64_t slba) 160588eea45cSKlaus Jensen { 160688eea45cSKlaus Jensen return ns->zone_size_log2 > 0 ? slba >> ns->zone_size_log2 : 160788eea45cSKlaus Jensen slba / ns->zone_size; 160888eea45cSKlaus Jensen } 160988eea45cSKlaus Jensen 161088eea45cSKlaus Jensen static inline NvmeZone *nvme_get_zone_by_slba(NvmeNamespace *ns, uint64_t slba) 161188eea45cSKlaus Jensen { 161288eea45cSKlaus Jensen uint32_t zone_idx = nvme_zone_idx(ns, slba); 161388eea45cSKlaus Jensen 1614189a8bf7SKlaus Jensen if (zone_idx >= ns->num_zones) { 1615189a8bf7SKlaus Jensen return NULL; 1616189a8bf7SKlaus Jensen } 1617189a8bf7SKlaus Jensen 161888eea45cSKlaus Jensen return &ns->zone_array[zone_idx]; 161988eea45cSKlaus Jensen } 162088eea45cSKlaus Jensen 162188eea45cSKlaus Jensen static uint16_t nvme_check_zone_state_for_write(NvmeZone *zone) 162288eea45cSKlaus Jensen { 162388eea45cSKlaus Jensen uint64_t zslba = zone->d.zslba; 162488eea45cSKlaus Jensen 162588eea45cSKlaus Jensen switch (nvme_get_zone_state(zone)) { 162688eea45cSKlaus Jensen case NVME_ZONE_STATE_EMPTY: 162788eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 162888eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 162988eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 163088eea45cSKlaus Jensen return NVME_SUCCESS; 163188eea45cSKlaus Jensen case NVME_ZONE_STATE_FULL: 163288eea45cSKlaus Jensen trace_pci_nvme_err_zone_is_full(zslba); 163388eea45cSKlaus Jensen return NVME_ZONE_FULL; 163488eea45cSKlaus Jensen case NVME_ZONE_STATE_OFFLINE: 163588eea45cSKlaus Jensen trace_pci_nvme_err_zone_is_offline(zslba); 163688eea45cSKlaus Jensen return NVME_ZONE_OFFLINE; 163788eea45cSKlaus Jensen case NVME_ZONE_STATE_READ_ONLY: 163888eea45cSKlaus Jensen trace_pci_nvme_err_zone_is_read_only(zslba); 163988eea45cSKlaus Jensen return NVME_ZONE_READ_ONLY; 164088eea45cSKlaus Jensen default: 164188eea45cSKlaus Jensen assert(false); 164288eea45cSKlaus Jensen } 164388eea45cSKlaus Jensen 164488eea45cSKlaus Jensen return NVME_INTERNAL_DEV_ERROR; 164588eea45cSKlaus Jensen } 164688eea45cSKlaus Jensen 164788eea45cSKlaus Jensen static uint16_t nvme_check_zone_write(NvmeNamespace *ns, NvmeZone *zone, 164888eea45cSKlaus Jensen uint64_t slba, uint32_t nlb) 164988eea45cSKlaus Jensen { 165088eea45cSKlaus Jensen uint64_t zcap = nvme_zone_wr_boundary(zone); 165188eea45cSKlaus Jensen uint16_t status; 165288eea45cSKlaus Jensen 165388eea45cSKlaus Jensen status = nvme_check_zone_state_for_write(zone); 165488eea45cSKlaus Jensen if (status) { 165588eea45cSKlaus Jensen return status; 165688eea45cSKlaus Jensen } 165788eea45cSKlaus Jensen 1658e321b4cdSKlaus Jensen if (zone->d.za & NVME_ZA_ZRWA_VALID) { 1659e321b4cdSKlaus Jensen uint64_t ezrwa = zone->w_ptr + 2 * ns->zns.zrwas; 1660e321b4cdSKlaus Jensen 1661e321b4cdSKlaus Jensen if (slba < zone->w_ptr || slba + nlb > ezrwa) { 1662e321b4cdSKlaus Jensen trace_pci_nvme_err_zone_invalid_write(slba, zone->w_ptr); 166388eea45cSKlaus Jensen return NVME_ZONE_INVALID_WRITE; 166488eea45cSKlaus Jensen } 1665e321b4cdSKlaus Jensen } else { 1666e321b4cdSKlaus Jensen if (unlikely(slba != zone->w_ptr)) { 1667e321b4cdSKlaus Jensen trace_pci_nvme_err_write_not_at_wp(slba, zone->d.zslba, 1668e321b4cdSKlaus Jensen zone->w_ptr); 1669e321b4cdSKlaus Jensen return NVME_ZONE_INVALID_WRITE; 1670e321b4cdSKlaus Jensen } 1671e321b4cdSKlaus Jensen } 167288eea45cSKlaus Jensen 167388eea45cSKlaus Jensen if (unlikely((slba + nlb) > zcap)) { 167488eea45cSKlaus Jensen trace_pci_nvme_err_zone_boundary(slba, nlb, zcap); 167588eea45cSKlaus Jensen return NVME_ZONE_BOUNDARY_ERROR; 167688eea45cSKlaus Jensen } 167788eea45cSKlaus Jensen 167888eea45cSKlaus Jensen return NVME_SUCCESS; 167988eea45cSKlaus Jensen } 168088eea45cSKlaus Jensen 168188eea45cSKlaus Jensen static uint16_t nvme_check_zone_state_for_read(NvmeZone *zone) 168288eea45cSKlaus Jensen { 168388eea45cSKlaus Jensen switch (nvme_get_zone_state(zone)) { 168488eea45cSKlaus Jensen case NVME_ZONE_STATE_EMPTY: 168588eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 168688eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 168788eea45cSKlaus Jensen case NVME_ZONE_STATE_FULL: 168888eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 168988eea45cSKlaus Jensen case NVME_ZONE_STATE_READ_ONLY: 169088eea45cSKlaus Jensen return NVME_SUCCESS; 169188eea45cSKlaus Jensen case NVME_ZONE_STATE_OFFLINE: 169288eea45cSKlaus Jensen trace_pci_nvme_err_zone_is_offline(zone->d.zslba); 169388eea45cSKlaus Jensen return NVME_ZONE_OFFLINE; 169488eea45cSKlaus Jensen default: 169588eea45cSKlaus Jensen assert(false); 169688eea45cSKlaus Jensen } 169788eea45cSKlaus Jensen 169888eea45cSKlaus Jensen return NVME_INTERNAL_DEV_ERROR; 169988eea45cSKlaus Jensen } 170088eea45cSKlaus Jensen 170188eea45cSKlaus Jensen static uint16_t nvme_check_zone_read(NvmeNamespace *ns, uint64_t slba, 170288eea45cSKlaus Jensen uint32_t nlb) 170388eea45cSKlaus Jensen { 1704189a8bf7SKlaus Jensen NvmeZone *zone; 1705189a8bf7SKlaus Jensen uint64_t bndry, end; 170688eea45cSKlaus Jensen uint16_t status; 170788eea45cSKlaus Jensen 1708189a8bf7SKlaus Jensen zone = nvme_get_zone_by_slba(ns, slba); 1709189a8bf7SKlaus Jensen assert(zone); 1710189a8bf7SKlaus Jensen 1711189a8bf7SKlaus Jensen bndry = nvme_zone_rd_boundary(ns, zone); 1712189a8bf7SKlaus Jensen end = slba + nlb; 1713189a8bf7SKlaus Jensen 171488eea45cSKlaus Jensen status = nvme_check_zone_state_for_read(zone); 171588eea45cSKlaus Jensen if (status) { 171688eea45cSKlaus Jensen ; 171788eea45cSKlaus Jensen } else if (unlikely(end > bndry)) { 171888eea45cSKlaus Jensen if (!ns->params.cross_zone_read) { 171988eea45cSKlaus Jensen status = NVME_ZONE_BOUNDARY_ERROR; 172088eea45cSKlaus Jensen } else { 172188eea45cSKlaus Jensen /* 172288eea45cSKlaus Jensen * Read across zone boundary - check that all subsequent 172388eea45cSKlaus Jensen * zones that are being read have an appropriate state. 172488eea45cSKlaus Jensen */ 172588eea45cSKlaus Jensen do { 172688eea45cSKlaus Jensen zone++; 172788eea45cSKlaus Jensen status = nvme_check_zone_state_for_read(zone); 172888eea45cSKlaus Jensen if (status) { 172988eea45cSKlaus Jensen break; 173088eea45cSKlaus Jensen } 173188eea45cSKlaus Jensen } while (end > nvme_zone_rd_boundary(ns, zone)); 173288eea45cSKlaus Jensen } 173388eea45cSKlaus Jensen } 173488eea45cSKlaus Jensen 173588eea45cSKlaus Jensen return status; 173688eea45cSKlaus Jensen } 173788eea45cSKlaus Jensen 173888eea45cSKlaus Jensen static uint16_t nvme_zrm_finish(NvmeNamespace *ns, NvmeZone *zone) 173988eea45cSKlaus Jensen { 174088eea45cSKlaus Jensen switch (nvme_get_zone_state(zone)) { 174188eea45cSKlaus Jensen case NVME_ZONE_STATE_FULL: 174288eea45cSKlaus Jensen return NVME_SUCCESS; 174388eea45cSKlaus Jensen 174488eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 174588eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 174688eea45cSKlaus Jensen nvme_aor_dec_open(ns); 174788eea45cSKlaus Jensen /* fallthrough */ 174888eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 174988eea45cSKlaus Jensen nvme_aor_dec_active(ns); 1750e321b4cdSKlaus Jensen 1751e321b4cdSKlaus Jensen if (zone->d.za & NVME_ZA_ZRWA_VALID) { 1752e321b4cdSKlaus Jensen zone->d.za &= ~NVME_ZA_ZRWA_VALID; 1753e321b4cdSKlaus Jensen if (ns->params.numzrwa) { 1754e321b4cdSKlaus Jensen ns->zns.numzrwa++; 1755e321b4cdSKlaus Jensen } 1756e321b4cdSKlaus Jensen } 1757e321b4cdSKlaus Jensen 175888eea45cSKlaus Jensen /* fallthrough */ 175988eea45cSKlaus Jensen case NVME_ZONE_STATE_EMPTY: 176088eea45cSKlaus Jensen nvme_assign_zone_state(ns, zone, NVME_ZONE_STATE_FULL); 176188eea45cSKlaus Jensen return NVME_SUCCESS; 176288eea45cSKlaus Jensen 176388eea45cSKlaus Jensen default: 176488eea45cSKlaus Jensen return NVME_ZONE_INVAL_TRANSITION; 176588eea45cSKlaus Jensen } 176688eea45cSKlaus Jensen } 176788eea45cSKlaus Jensen 176888eea45cSKlaus Jensen static uint16_t nvme_zrm_close(NvmeNamespace *ns, NvmeZone *zone) 176988eea45cSKlaus Jensen { 177088eea45cSKlaus Jensen switch (nvme_get_zone_state(zone)) { 177188eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 177288eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 177388eea45cSKlaus Jensen nvme_aor_dec_open(ns); 177488eea45cSKlaus Jensen nvme_assign_zone_state(ns, zone, NVME_ZONE_STATE_CLOSED); 177588eea45cSKlaus Jensen /* fall through */ 177688eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 177788eea45cSKlaus Jensen return NVME_SUCCESS; 177888eea45cSKlaus Jensen 177988eea45cSKlaus Jensen default: 178088eea45cSKlaus Jensen return NVME_ZONE_INVAL_TRANSITION; 178188eea45cSKlaus Jensen } 178288eea45cSKlaus Jensen } 178388eea45cSKlaus Jensen 178463d96e4fSKlaus Jensen static uint16_t nvme_zrm_reset(NvmeNamespace *ns, NvmeZone *zone) 178563d96e4fSKlaus Jensen { 178663d96e4fSKlaus Jensen switch (nvme_get_zone_state(zone)) { 178763d96e4fSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 178863d96e4fSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 178963d96e4fSKlaus Jensen nvme_aor_dec_open(ns); 179063d96e4fSKlaus Jensen /* fallthrough */ 179163d96e4fSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 179263d96e4fSKlaus Jensen nvme_aor_dec_active(ns); 1793e321b4cdSKlaus Jensen 1794e321b4cdSKlaus Jensen if (zone->d.za & NVME_ZA_ZRWA_VALID) { 1795e321b4cdSKlaus Jensen if (ns->params.numzrwa) { 1796e321b4cdSKlaus Jensen ns->zns.numzrwa++; 1797e321b4cdSKlaus Jensen } 1798e321b4cdSKlaus Jensen } 1799e321b4cdSKlaus Jensen 180063d96e4fSKlaus Jensen /* fallthrough */ 180163d96e4fSKlaus Jensen case NVME_ZONE_STATE_FULL: 180263d96e4fSKlaus Jensen zone->w_ptr = zone->d.zslba; 180363d96e4fSKlaus Jensen zone->d.wp = zone->w_ptr; 180463d96e4fSKlaus Jensen nvme_assign_zone_state(ns, zone, NVME_ZONE_STATE_EMPTY); 180563d96e4fSKlaus Jensen /* fallthrough */ 180663d96e4fSKlaus Jensen case NVME_ZONE_STATE_EMPTY: 180763d96e4fSKlaus Jensen return NVME_SUCCESS; 180863d96e4fSKlaus Jensen 180963d96e4fSKlaus Jensen default: 181063d96e4fSKlaus Jensen return NVME_ZONE_INVAL_TRANSITION; 181163d96e4fSKlaus Jensen } 181263d96e4fSKlaus Jensen } 181363d96e4fSKlaus Jensen 181488eea45cSKlaus Jensen static void nvme_zrm_auto_transition_zone(NvmeNamespace *ns) 181588eea45cSKlaus Jensen { 181688eea45cSKlaus Jensen NvmeZone *zone; 181788eea45cSKlaus Jensen 181888eea45cSKlaus Jensen if (ns->params.max_open_zones && 181988eea45cSKlaus Jensen ns->nr_open_zones == ns->params.max_open_zones) { 182088eea45cSKlaus Jensen zone = QTAILQ_FIRST(&ns->imp_open_zones); 182188eea45cSKlaus Jensen if (zone) { 182288eea45cSKlaus Jensen /* 182388eea45cSKlaus Jensen * Automatically close this implicitly open zone. 182488eea45cSKlaus Jensen */ 182588eea45cSKlaus Jensen QTAILQ_REMOVE(&ns->imp_open_zones, zone, entry); 182688eea45cSKlaus Jensen nvme_zrm_close(ns, zone); 182788eea45cSKlaus Jensen } 182888eea45cSKlaus Jensen } 182988eea45cSKlaus Jensen } 183088eea45cSKlaus Jensen 183188eea45cSKlaus Jensen enum { 183288eea45cSKlaus Jensen NVME_ZRM_AUTO = 1 << 0, 1833e321b4cdSKlaus Jensen NVME_ZRM_ZRWA = 1 << 1, 183488eea45cSKlaus Jensen }; 183588eea45cSKlaus Jensen 1836cccc2651SNiklas Cassel static uint16_t nvme_zrm_open_flags(NvmeCtrl *n, NvmeNamespace *ns, 1837cccc2651SNiklas Cassel NvmeZone *zone, int flags) 183888eea45cSKlaus Jensen { 183988eea45cSKlaus Jensen int act = 0; 184088eea45cSKlaus Jensen uint16_t status; 184188eea45cSKlaus Jensen 184288eea45cSKlaus Jensen switch (nvme_get_zone_state(zone)) { 184388eea45cSKlaus Jensen case NVME_ZONE_STATE_EMPTY: 184488eea45cSKlaus Jensen act = 1; 184588eea45cSKlaus Jensen 184688eea45cSKlaus Jensen /* fallthrough */ 184788eea45cSKlaus Jensen 184888eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 1849cccc2651SNiklas Cassel if (n->params.auto_transition_zones) { 185088eea45cSKlaus Jensen nvme_zrm_auto_transition_zone(ns); 1851cccc2651SNiklas Cassel } 1852e321b4cdSKlaus Jensen status = nvme_zns_check_resources(ns, act, 1, 1853e321b4cdSKlaus Jensen (flags & NVME_ZRM_ZRWA) ? 1 : 0); 185488eea45cSKlaus Jensen if (status) { 185588eea45cSKlaus Jensen return status; 185688eea45cSKlaus Jensen } 185788eea45cSKlaus Jensen 185888eea45cSKlaus Jensen if (act) { 185988eea45cSKlaus Jensen nvme_aor_inc_active(ns); 186088eea45cSKlaus Jensen } 186188eea45cSKlaus Jensen 186288eea45cSKlaus Jensen nvme_aor_inc_open(ns); 186388eea45cSKlaus Jensen 186488eea45cSKlaus Jensen if (flags & NVME_ZRM_AUTO) { 186588eea45cSKlaus Jensen nvme_assign_zone_state(ns, zone, NVME_ZONE_STATE_IMPLICITLY_OPEN); 186688eea45cSKlaus Jensen return NVME_SUCCESS; 186788eea45cSKlaus Jensen } 186888eea45cSKlaus Jensen 186988eea45cSKlaus Jensen /* fallthrough */ 187088eea45cSKlaus Jensen 187188eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 187288eea45cSKlaus Jensen if (flags & NVME_ZRM_AUTO) { 187388eea45cSKlaus Jensen return NVME_SUCCESS; 187488eea45cSKlaus Jensen } 187588eea45cSKlaus Jensen 187688eea45cSKlaus Jensen nvme_assign_zone_state(ns, zone, NVME_ZONE_STATE_EXPLICITLY_OPEN); 187788eea45cSKlaus Jensen 187888eea45cSKlaus Jensen /* fallthrough */ 187988eea45cSKlaus Jensen 188088eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 1881e321b4cdSKlaus Jensen if (flags & NVME_ZRM_ZRWA) { 1882e321b4cdSKlaus Jensen ns->zns.numzrwa--; 1883e321b4cdSKlaus Jensen 1884e321b4cdSKlaus Jensen zone->d.za |= NVME_ZA_ZRWA_VALID; 1885e321b4cdSKlaus Jensen } 1886e321b4cdSKlaus Jensen 188788eea45cSKlaus Jensen return NVME_SUCCESS; 188888eea45cSKlaus Jensen 188988eea45cSKlaus Jensen default: 189088eea45cSKlaus Jensen return NVME_ZONE_INVAL_TRANSITION; 189188eea45cSKlaus Jensen } 189288eea45cSKlaus Jensen } 189388eea45cSKlaus Jensen 1894cccc2651SNiklas Cassel static inline uint16_t nvme_zrm_auto(NvmeCtrl *n, NvmeNamespace *ns, 1895cccc2651SNiklas Cassel NvmeZone *zone) 189688eea45cSKlaus Jensen { 1897cccc2651SNiklas Cassel return nvme_zrm_open_flags(n, ns, zone, NVME_ZRM_AUTO); 189888eea45cSKlaus Jensen } 189988eea45cSKlaus Jensen 190088eea45cSKlaus Jensen static void nvme_advance_zone_wp(NvmeNamespace *ns, NvmeZone *zone, 190188eea45cSKlaus Jensen uint32_t nlb) 190288eea45cSKlaus Jensen { 190388eea45cSKlaus Jensen zone->d.wp += nlb; 190488eea45cSKlaus Jensen 190588eea45cSKlaus Jensen if (zone->d.wp == nvme_zone_wr_boundary(zone)) { 190688eea45cSKlaus Jensen nvme_zrm_finish(ns, zone); 190788eea45cSKlaus Jensen } 190888eea45cSKlaus Jensen } 190988eea45cSKlaus Jensen 1910e321b4cdSKlaus Jensen static void nvme_zoned_zrwa_implicit_flush(NvmeNamespace *ns, NvmeZone *zone, 1911e321b4cdSKlaus Jensen uint32_t nlbc) 1912e321b4cdSKlaus Jensen { 1913e321b4cdSKlaus Jensen uint16_t nzrwafgs = DIV_ROUND_UP(nlbc, ns->zns.zrwafg); 1914e321b4cdSKlaus Jensen 1915e321b4cdSKlaus Jensen nlbc = nzrwafgs * ns->zns.zrwafg; 1916e321b4cdSKlaus Jensen 1917e321b4cdSKlaus Jensen trace_pci_nvme_zoned_zrwa_implicit_flush(zone->d.zslba, nlbc); 1918e321b4cdSKlaus Jensen 1919e321b4cdSKlaus Jensen zone->w_ptr += nlbc; 1920e321b4cdSKlaus Jensen 1921e321b4cdSKlaus Jensen nvme_advance_zone_wp(ns, zone, nlbc); 1922e321b4cdSKlaus Jensen } 1923e321b4cdSKlaus Jensen 192488eea45cSKlaus Jensen static void nvme_finalize_zoned_write(NvmeNamespace *ns, NvmeRequest *req) 192588eea45cSKlaus Jensen { 192688eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 192788eea45cSKlaus Jensen NvmeZone *zone; 192888eea45cSKlaus Jensen uint64_t slba; 192988eea45cSKlaus Jensen uint32_t nlb; 193088eea45cSKlaus Jensen 193188eea45cSKlaus Jensen slba = le64_to_cpu(rw->slba); 193288eea45cSKlaus Jensen nlb = le16_to_cpu(rw->nlb) + 1; 193388eea45cSKlaus Jensen zone = nvme_get_zone_by_slba(ns, slba); 1934189a8bf7SKlaus Jensen assert(zone); 193588eea45cSKlaus Jensen 1936e321b4cdSKlaus Jensen if (zone->d.za & NVME_ZA_ZRWA_VALID) { 1937e321b4cdSKlaus Jensen uint64_t ezrwa = zone->w_ptr + ns->zns.zrwas - 1; 1938e321b4cdSKlaus Jensen uint64_t elba = slba + nlb - 1; 1939e321b4cdSKlaus Jensen 1940e321b4cdSKlaus Jensen if (elba > ezrwa) { 1941e321b4cdSKlaus Jensen nvme_zoned_zrwa_implicit_flush(ns, zone, elba - ezrwa); 1942e321b4cdSKlaus Jensen } 1943e321b4cdSKlaus Jensen 1944e321b4cdSKlaus Jensen return; 1945e321b4cdSKlaus Jensen } 1946e321b4cdSKlaus Jensen 194788eea45cSKlaus Jensen nvme_advance_zone_wp(ns, zone, nlb); 194888eea45cSKlaus Jensen } 194988eea45cSKlaus Jensen 195088eea45cSKlaus Jensen static inline bool nvme_is_write(NvmeRequest *req) 195188eea45cSKlaus Jensen { 195288eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 195388eea45cSKlaus Jensen 195488eea45cSKlaus Jensen return rw->opcode == NVME_CMD_WRITE || 195588eea45cSKlaus Jensen rw->opcode == NVME_CMD_ZONE_APPEND || 195688eea45cSKlaus Jensen rw->opcode == NVME_CMD_WRITE_ZEROES; 195788eea45cSKlaus Jensen } 195888eea45cSKlaus Jensen 195938f4ac65SKlaus Jensen static AioContext *nvme_get_aio_context(BlockAIOCB *acb) 196038f4ac65SKlaus Jensen { 196138f4ac65SKlaus Jensen return qemu_get_aio_context(); 196238f4ac65SKlaus Jensen } 196338f4ac65SKlaus Jensen 196488eea45cSKlaus Jensen static void nvme_misc_cb(void *opaque, int ret) 196588eea45cSKlaus Jensen { 196688eea45cSKlaus Jensen NvmeRequest *req = opaque; 196788eea45cSKlaus Jensen 196838f4ac65SKlaus Jensen trace_pci_nvme_misc_cb(nvme_cid(req)); 196988eea45cSKlaus Jensen 197088eea45cSKlaus Jensen if (ret) { 197188eea45cSKlaus Jensen nvme_aio_err(req, ret); 197288eea45cSKlaus Jensen } 197388eea45cSKlaus Jensen 197488eea45cSKlaus Jensen nvme_enqueue_req_completion(nvme_cq(req), req); 197588eea45cSKlaus Jensen } 197688eea45cSKlaus Jensen 197788eea45cSKlaus Jensen void nvme_rw_complete_cb(void *opaque, int ret) 197888eea45cSKlaus Jensen { 197988eea45cSKlaus Jensen NvmeRequest *req = opaque; 198088eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 198188eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 198288eea45cSKlaus Jensen BlockAcctCookie *acct = &req->acct; 198388eea45cSKlaus Jensen BlockAcctStats *stats = blk_get_stats(blk); 198488eea45cSKlaus Jensen 198588eea45cSKlaus Jensen trace_pci_nvme_rw_complete_cb(nvme_cid(req), blk_name(blk)); 198688eea45cSKlaus Jensen 198788eea45cSKlaus Jensen if (ret) { 198888eea45cSKlaus Jensen block_acct_failed(stats, acct); 198988eea45cSKlaus Jensen nvme_aio_err(req, ret); 199088eea45cSKlaus Jensen } else { 199188eea45cSKlaus Jensen block_acct_done(stats, acct); 199288eea45cSKlaus Jensen } 199388eea45cSKlaus Jensen 199488eea45cSKlaus Jensen if (ns->params.zoned && nvme_is_write(req)) { 199588eea45cSKlaus Jensen nvme_finalize_zoned_write(ns, req); 199688eea45cSKlaus Jensen } 199788eea45cSKlaus Jensen 199888eea45cSKlaus Jensen nvme_enqueue_req_completion(nvme_cq(req), req); 199988eea45cSKlaus Jensen } 200088eea45cSKlaus Jensen 200188eea45cSKlaus Jensen static void nvme_rw_cb(void *opaque, int ret) 200288eea45cSKlaus Jensen { 200388eea45cSKlaus Jensen NvmeRequest *req = opaque; 200488eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 200588eea45cSKlaus Jensen 200688eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 200788eea45cSKlaus Jensen 200888eea45cSKlaus Jensen trace_pci_nvme_rw_cb(nvme_cid(req), blk_name(blk)); 200988eea45cSKlaus Jensen 201088eea45cSKlaus Jensen if (ret) { 201188eea45cSKlaus Jensen goto out; 201288eea45cSKlaus Jensen } 201388eea45cSKlaus Jensen 201488eea45cSKlaus Jensen if (ns->lbaf.ms) { 201588eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 201688eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 201788eea45cSKlaus Jensen uint32_t nlb = (uint32_t)le16_to_cpu(rw->nlb) + 1; 201888eea45cSKlaus Jensen uint64_t offset = nvme_moff(ns, slba); 201988eea45cSKlaus Jensen 202088eea45cSKlaus Jensen if (req->cmd.opcode == NVME_CMD_WRITE_ZEROES) { 202188eea45cSKlaus Jensen size_t mlen = nvme_m2b(ns, nlb); 202288eea45cSKlaus Jensen 202388eea45cSKlaus Jensen req->aiocb = blk_aio_pwrite_zeroes(blk, offset, mlen, 202488eea45cSKlaus Jensen BDRV_REQ_MAY_UNMAP, 202588eea45cSKlaus Jensen nvme_rw_complete_cb, req); 202688eea45cSKlaus Jensen return; 202788eea45cSKlaus Jensen } 202888eea45cSKlaus Jensen 202988eea45cSKlaus Jensen if (nvme_ns_ext(ns) || req->cmd.mptr) { 203088eea45cSKlaus Jensen uint16_t status; 203188eea45cSKlaus Jensen 203288eea45cSKlaus Jensen nvme_sg_unmap(&req->sg); 203388eea45cSKlaus Jensen status = nvme_map_mdata(nvme_ctrl(req), nlb, req); 203488eea45cSKlaus Jensen if (status) { 203588eea45cSKlaus Jensen ret = -EFAULT; 203688eea45cSKlaus Jensen goto out; 203788eea45cSKlaus Jensen } 203888eea45cSKlaus Jensen 203988eea45cSKlaus Jensen if (req->cmd.opcode == NVME_CMD_READ) { 204088eea45cSKlaus Jensen return nvme_blk_read(blk, offset, nvme_rw_complete_cb, req); 204188eea45cSKlaus Jensen } 204288eea45cSKlaus Jensen 204388eea45cSKlaus Jensen return nvme_blk_write(blk, offset, nvme_rw_complete_cb, req); 204488eea45cSKlaus Jensen } 204588eea45cSKlaus Jensen } 204688eea45cSKlaus Jensen 204788eea45cSKlaus Jensen out: 204888eea45cSKlaus Jensen nvme_rw_complete_cb(req, ret); 204988eea45cSKlaus Jensen } 205088eea45cSKlaus Jensen 205188eea45cSKlaus Jensen static void nvme_verify_cb(void *opaque, int ret) 205288eea45cSKlaus Jensen { 205388eea45cSKlaus Jensen NvmeBounceContext *ctx = opaque; 205488eea45cSKlaus Jensen NvmeRequest *req = ctx->req; 205588eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 205688eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 205788eea45cSKlaus Jensen BlockAcctCookie *acct = &req->acct; 205888eea45cSKlaus Jensen BlockAcctStats *stats = blk_get_stats(blk); 205988eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 206088eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 20612a132309SKlaus Jensen uint8_t prinfo = NVME_RW_PRINFO(le16_to_cpu(rw->control)); 206288eea45cSKlaus Jensen uint16_t apptag = le16_to_cpu(rw->apptag); 206388eea45cSKlaus Jensen uint16_t appmask = le16_to_cpu(rw->appmask); 206444219b60SNaveen Nagar uint64_t reftag = le32_to_cpu(rw->reftag); 206544219b60SNaveen Nagar uint64_t cdw3 = le32_to_cpu(rw->cdw3); 206688eea45cSKlaus Jensen uint16_t status; 206788eea45cSKlaus Jensen 206844219b60SNaveen Nagar reftag |= cdw3 << 32; 206944219b60SNaveen Nagar 20702a132309SKlaus Jensen trace_pci_nvme_verify_cb(nvme_cid(req), prinfo, apptag, appmask, reftag); 207188eea45cSKlaus Jensen 207288eea45cSKlaus Jensen if (ret) { 207388eea45cSKlaus Jensen block_acct_failed(stats, acct); 207488eea45cSKlaus Jensen nvme_aio_err(req, ret); 207588eea45cSKlaus Jensen goto out; 207688eea45cSKlaus Jensen } 207788eea45cSKlaus Jensen 207888eea45cSKlaus Jensen block_acct_done(stats, acct); 207988eea45cSKlaus Jensen 208088eea45cSKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 208188eea45cSKlaus Jensen status = nvme_dif_mangle_mdata(ns, ctx->mdata.bounce, 208288eea45cSKlaus Jensen ctx->mdata.iov.size, slba); 208388eea45cSKlaus Jensen if (status) { 208488eea45cSKlaus Jensen req->status = status; 208588eea45cSKlaus Jensen goto out; 208688eea45cSKlaus Jensen } 208788eea45cSKlaus Jensen 208888eea45cSKlaus Jensen req->status = nvme_dif_check(ns, ctx->data.bounce, ctx->data.iov.size, 208988eea45cSKlaus Jensen ctx->mdata.bounce, ctx->mdata.iov.size, 20902a132309SKlaus Jensen prinfo, slba, apptag, appmask, &reftag); 209188eea45cSKlaus Jensen } 209288eea45cSKlaus Jensen 209388eea45cSKlaus Jensen out: 209488eea45cSKlaus Jensen qemu_iovec_destroy(&ctx->data.iov); 209588eea45cSKlaus Jensen g_free(ctx->data.bounce); 209688eea45cSKlaus Jensen 209788eea45cSKlaus Jensen qemu_iovec_destroy(&ctx->mdata.iov); 209888eea45cSKlaus Jensen g_free(ctx->mdata.bounce); 209988eea45cSKlaus Jensen 210088eea45cSKlaus Jensen g_free(ctx); 210188eea45cSKlaus Jensen 210288eea45cSKlaus Jensen nvme_enqueue_req_completion(nvme_cq(req), req); 210388eea45cSKlaus Jensen } 210488eea45cSKlaus Jensen 210588eea45cSKlaus Jensen 210688eea45cSKlaus Jensen static void nvme_verify_mdata_in_cb(void *opaque, int ret) 210788eea45cSKlaus Jensen { 210888eea45cSKlaus Jensen NvmeBounceContext *ctx = opaque; 210988eea45cSKlaus Jensen NvmeRequest *req = ctx->req; 211088eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 211188eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 211288eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 211388eea45cSKlaus Jensen uint32_t nlb = le16_to_cpu(rw->nlb) + 1; 211488eea45cSKlaus Jensen size_t mlen = nvme_m2b(ns, nlb); 211588eea45cSKlaus Jensen uint64_t offset = nvme_moff(ns, slba); 211688eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 211788eea45cSKlaus Jensen 211888eea45cSKlaus Jensen trace_pci_nvme_verify_mdata_in_cb(nvme_cid(req), blk_name(blk)); 211988eea45cSKlaus Jensen 212088eea45cSKlaus Jensen if (ret) { 212188eea45cSKlaus Jensen goto out; 212288eea45cSKlaus Jensen } 212388eea45cSKlaus Jensen 212488eea45cSKlaus Jensen ctx->mdata.bounce = g_malloc(mlen); 212588eea45cSKlaus Jensen 212688eea45cSKlaus Jensen qemu_iovec_reset(&ctx->mdata.iov); 212788eea45cSKlaus Jensen qemu_iovec_add(&ctx->mdata.iov, ctx->mdata.bounce, mlen); 212888eea45cSKlaus Jensen 212988eea45cSKlaus Jensen req->aiocb = blk_aio_preadv(blk, offset, &ctx->mdata.iov, 0, 213088eea45cSKlaus Jensen nvme_verify_cb, ctx); 213188eea45cSKlaus Jensen return; 213288eea45cSKlaus Jensen 213388eea45cSKlaus Jensen out: 213488eea45cSKlaus Jensen nvme_verify_cb(ctx, ret); 213588eea45cSKlaus Jensen } 213688eea45cSKlaus Jensen 213788eea45cSKlaus Jensen struct nvme_compare_ctx { 213888eea45cSKlaus Jensen struct { 213988eea45cSKlaus Jensen QEMUIOVector iov; 214088eea45cSKlaus Jensen uint8_t *bounce; 214188eea45cSKlaus Jensen } data; 214288eea45cSKlaus Jensen 214388eea45cSKlaus Jensen struct { 214488eea45cSKlaus Jensen QEMUIOVector iov; 214588eea45cSKlaus Jensen uint8_t *bounce; 214688eea45cSKlaus Jensen } mdata; 214788eea45cSKlaus Jensen }; 214888eea45cSKlaus Jensen 214988eea45cSKlaus Jensen static void nvme_compare_mdata_cb(void *opaque, int ret) 215088eea45cSKlaus Jensen { 215188eea45cSKlaus Jensen NvmeRequest *req = opaque; 215288eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 215388eea45cSKlaus Jensen NvmeCtrl *n = nvme_ctrl(req); 215488eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 21552a132309SKlaus Jensen uint8_t prinfo = NVME_RW_PRINFO(le16_to_cpu(rw->control)); 215688eea45cSKlaus Jensen uint16_t apptag = le16_to_cpu(rw->apptag); 215788eea45cSKlaus Jensen uint16_t appmask = le16_to_cpu(rw->appmask); 215844219b60SNaveen Nagar uint64_t reftag = le32_to_cpu(rw->reftag); 215944219b60SNaveen Nagar uint64_t cdw3 = le32_to_cpu(rw->cdw3); 216088eea45cSKlaus Jensen struct nvme_compare_ctx *ctx = req->opaque; 216188eea45cSKlaus Jensen g_autofree uint8_t *buf = NULL; 216288eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 216388eea45cSKlaus Jensen BlockAcctCookie *acct = &req->acct; 216488eea45cSKlaus Jensen BlockAcctStats *stats = blk_get_stats(blk); 216588eea45cSKlaus Jensen uint16_t status = NVME_SUCCESS; 216688eea45cSKlaus Jensen 216744219b60SNaveen Nagar reftag |= cdw3 << 32; 216844219b60SNaveen Nagar 216988eea45cSKlaus Jensen trace_pci_nvme_compare_mdata_cb(nvme_cid(req)); 217088eea45cSKlaus Jensen 217188eea45cSKlaus Jensen if (ret) { 217288eea45cSKlaus Jensen block_acct_failed(stats, acct); 217388eea45cSKlaus Jensen nvme_aio_err(req, ret); 217488eea45cSKlaus Jensen goto out; 217588eea45cSKlaus Jensen } 217688eea45cSKlaus Jensen 217788eea45cSKlaus Jensen buf = g_malloc(ctx->mdata.iov.size); 217888eea45cSKlaus Jensen 217988eea45cSKlaus Jensen status = nvme_bounce_mdata(n, buf, ctx->mdata.iov.size, 218088eea45cSKlaus Jensen NVME_TX_DIRECTION_TO_DEVICE, req); 218188eea45cSKlaus Jensen if (status) { 218288eea45cSKlaus Jensen req->status = status; 218388eea45cSKlaus Jensen goto out; 218488eea45cSKlaus Jensen } 218588eea45cSKlaus Jensen 218688eea45cSKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 218788eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 218888eea45cSKlaus Jensen uint8_t *bufp; 218988eea45cSKlaus Jensen uint8_t *mbufp = ctx->mdata.bounce; 219088eea45cSKlaus Jensen uint8_t *end = mbufp + ctx->mdata.iov.size; 219188eea45cSKlaus Jensen int16_t pil = 0; 219288eea45cSKlaus Jensen 219388eea45cSKlaus Jensen status = nvme_dif_check(ns, ctx->data.bounce, ctx->data.iov.size, 21942a132309SKlaus Jensen ctx->mdata.bounce, ctx->mdata.iov.size, prinfo, 21950ca5c3ccSKlaus Jensen slba, apptag, appmask, &reftag); 219688eea45cSKlaus Jensen if (status) { 219788eea45cSKlaus Jensen req->status = status; 219888eea45cSKlaus Jensen goto out; 219988eea45cSKlaus Jensen } 220088eea45cSKlaus Jensen 220188eea45cSKlaus Jensen /* 220288eea45cSKlaus Jensen * When formatted with protection information, do not compare the DIF 220388eea45cSKlaus Jensen * tuple. 220488eea45cSKlaus Jensen */ 220588eea45cSKlaus Jensen if (!(ns->id_ns.dps & NVME_ID_NS_DPS_FIRST_EIGHT)) { 2206ac0b34c5SKlaus Jensen pil = ns->lbaf.ms - nvme_pi_tuple_size(ns); 220788eea45cSKlaus Jensen } 220888eea45cSKlaus Jensen 220988eea45cSKlaus Jensen for (bufp = buf; mbufp < end; bufp += ns->lbaf.ms, mbufp += ns->lbaf.ms) { 221088eea45cSKlaus Jensen if (memcmp(bufp + pil, mbufp + pil, ns->lbaf.ms - pil)) { 221188eea45cSKlaus Jensen req->status = NVME_CMP_FAILURE; 221288eea45cSKlaus Jensen goto out; 221388eea45cSKlaus Jensen } 221488eea45cSKlaus Jensen } 221588eea45cSKlaus Jensen 221688eea45cSKlaus Jensen goto out; 221788eea45cSKlaus Jensen } 221888eea45cSKlaus Jensen 221988eea45cSKlaus Jensen if (memcmp(buf, ctx->mdata.bounce, ctx->mdata.iov.size)) { 222088eea45cSKlaus Jensen req->status = NVME_CMP_FAILURE; 222188eea45cSKlaus Jensen goto out; 222288eea45cSKlaus Jensen } 222388eea45cSKlaus Jensen 222488eea45cSKlaus Jensen block_acct_done(stats, acct); 222588eea45cSKlaus Jensen 222688eea45cSKlaus Jensen out: 222788eea45cSKlaus Jensen qemu_iovec_destroy(&ctx->data.iov); 222888eea45cSKlaus Jensen g_free(ctx->data.bounce); 222988eea45cSKlaus Jensen 223088eea45cSKlaus Jensen qemu_iovec_destroy(&ctx->mdata.iov); 223188eea45cSKlaus Jensen g_free(ctx->mdata.bounce); 223288eea45cSKlaus Jensen 223388eea45cSKlaus Jensen g_free(ctx); 223488eea45cSKlaus Jensen 223588eea45cSKlaus Jensen nvme_enqueue_req_completion(nvme_cq(req), req); 223688eea45cSKlaus Jensen } 223788eea45cSKlaus Jensen 223888eea45cSKlaus Jensen static void nvme_compare_data_cb(void *opaque, int ret) 223988eea45cSKlaus Jensen { 224088eea45cSKlaus Jensen NvmeRequest *req = opaque; 224188eea45cSKlaus Jensen NvmeCtrl *n = nvme_ctrl(req); 224288eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 224388eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 224488eea45cSKlaus Jensen BlockAcctCookie *acct = &req->acct; 224588eea45cSKlaus Jensen BlockAcctStats *stats = blk_get_stats(blk); 224688eea45cSKlaus Jensen 224788eea45cSKlaus Jensen struct nvme_compare_ctx *ctx = req->opaque; 224888eea45cSKlaus Jensen g_autofree uint8_t *buf = NULL; 224988eea45cSKlaus Jensen uint16_t status; 225088eea45cSKlaus Jensen 225188eea45cSKlaus Jensen trace_pci_nvme_compare_data_cb(nvme_cid(req)); 225288eea45cSKlaus Jensen 225388eea45cSKlaus Jensen if (ret) { 225488eea45cSKlaus Jensen block_acct_failed(stats, acct); 225588eea45cSKlaus Jensen nvme_aio_err(req, ret); 225688eea45cSKlaus Jensen goto out; 225788eea45cSKlaus Jensen } 225888eea45cSKlaus Jensen 225988eea45cSKlaus Jensen buf = g_malloc(ctx->data.iov.size); 226088eea45cSKlaus Jensen 226188eea45cSKlaus Jensen status = nvme_bounce_data(n, buf, ctx->data.iov.size, 226288eea45cSKlaus Jensen NVME_TX_DIRECTION_TO_DEVICE, req); 226388eea45cSKlaus Jensen if (status) { 226488eea45cSKlaus Jensen req->status = status; 226588eea45cSKlaus Jensen goto out; 226688eea45cSKlaus Jensen } 226788eea45cSKlaus Jensen 226888eea45cSKlaus Jensen if (memcmp(buf, ctx->data.bounce, ctx->data.iov.size)) { 226988eea45cSKlaus Jensen req->status = NVME_CMP_FAILURE; 227088eea45cSKlaus Jensen goto out; 227188eea45cSKlaus Jensen } 227288eea45cSKlaus Jensen 227388eea45cSKlaus Jensen if (ns->lbaf.ms) { 227488eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 227588eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 227688eea45cSKlaus Jensen uint32_t nlb = le16_to_cpu(rw->nlb) + 1; 227788eea45cSKlaus Jensen size_t mlen = nvme_m2b(ns, nlb); 227888eea45cSKlaus Jensen uint64_t offset = nvme_moff(ns, slba); 227988eea45cSKlaus Jensen 228088eea45cSKlaus Jensen ctx->mdata.bounce = g_malloc(mlen); 228188eea45cSKlaus Jensen 228288eea45cSKlaus Jensen qemu_iovec_init(&ctx->mdata.iov, 1); 228388eea45cSKlaus Jensen qemu_iovec_add(&ctx->mdata.iov, ctx->mdata.bounce, mlen); 228488eea45cSKlaus Jensen 228588eea45cSKlaus Jensen req->aiocb = blk_aio_preadv(blk, offset, &ctx->mdata.iov, 0, 228688eea45cSKlaus Jensen nvme_compare_mdata_cb, req); 228788eea45cSKlaus Jensen return; 228888eea45cSKlaus Jensen } 228988eea45cSKlaus Jensen 229088eea45cSKlaus Jensen block_acct_done(stats, acct); 229188eea45cSKlaus Jensen 229288eea45cSKlaus Jensen out: 229388eea45cSKlaus Jensen qemu_iovec_destroy(&ctx->data.iov); 229488eea45cSKlaus Jensen g_free(ctx->data.bounce); 229588eea45cSKlaus Jensen g_free(ctx); 229688eea45cSKlaus Jensen 229788eea45cSKlaus Jensen nvme_enqueue_req_completion(nvme_cq(req), req); 229888eea45cSKlaus Jensen } 229988eea45cSKlaus Jensen 2300d7d1474fSKlaus Jensen typedef struct NvmeDSMAIOCB { 2301d7d1474fSKlaus Jensen BlockAIOCB common; 2302d7d1474fSKlaus Jensen BlockAIOCB *aiocb; 2303d7d1474fSKlaus Jensen NvmeRequest *req; 2304d7d1474fSKlaus Jensen QEMUBH *bh; 2305d7d1474fSKlaus Jensen int ret; 2306d7d1474fSKlaus Jensen 2307d7d1474fSKlaus Jensen NvmeDsmRange *range; 2308d7d1474fSKlaus Jensen unsigned int nr; 2309d7d1474fSKlaus Jensen unsigned int idx; 2310d7d1474fSKlaus Jensen } NvmeDSMAIOCB; 2311d7d1474fSKlaus Jensen 2312d7d1474fSKlaus Jensen static void nvme_dsm_cancel(BlockAIOCB *aiocb) 2313d7d1474fSKlaus Jensen { 2314d7d1474fSKlaus Jensen NvmeDSMAIOCB *iocb = container_of(aiocb, NvmeDSMAIOCB, common); 2315d7d1474fSKlaus Jensen 2316d7d1474fSKlaus Jensen /* break nvme_dsm_cb loop */ 2317d7d1474fSKlaus Jensen iocb->idx = iocb->nr; 2318d7d1474fSKlaus Jensen iocb->ret = -ECANCELED; 2319d7d1474fSKlaus Jensen 2320d7d1474fSKlaus Jensen if (iocb->aiocb) { 2321d7d1474fSKlaus Jensen blk_aio_cancel_async(iocb->aiocb); 2322d7d1474fSKlaus Jensen iocb->aiocb = NULL; 2323d7d1474fSKlaus Jensen } else { 2324d7d1474fSKlaus Jensen /* 2325d7d1474fSKlaus Jensen * We only reach this if nvme_dsm_cancel() has already been called or 2326d7d1474fSKlaus Jensen * the command ran to completion and nvme_dsm_bh is scheduled to run. 2327d7d1474fSKlaus Jensen */ 2328d7d1474fSKlaus Jensen assert(iocb->idx == iocb->nr); 2329d7d1474fSKlaus Jensen } 2330d7d1474fSKlaus Jensen } 2331d7d1474fSKlaus Jensen 2332d7d1474fSKlaus Jensen static const AIOCBInfo nvme_dsm_aiocb_info = { 2333d7d1474fSKlaus Jensen .aiocb_size = sizeof(NvmeDSMAIOCB), 2334d7d1474fSKlaus Jensen .cancel_async = nvme_dsm_cancel, 2335d7d1474fSKlaus Jensen }; 2336d7d1474fSKlaus Jensen 2337d7d1474fSKlaus Jensen static void nvme_dsm_bh(void *opaque) 2338d7d1474fSKlaus Jensen { 2339d7d1474fSKlaus Jensen NvmeDSMAIOCB *iocb = opaque; 2340d7d1474fSKlaus Jensen 2341d7d1474fSKlaus Jensen iocb->common.cb(iocb->common.opaque, iocb->ret); 2342d7d1474fSKlaus Jensen 2343d7d1474fSKlaus Jensen qemu_bh_delete(iocb->bh); 2344d7d1474fSKlaus Jensen iocb->bh = NULL; 2345d7d1474fSKlaus Jensen qemu_aio_unref(iocb); 2346d7d1474fSKlaus Jensen } 2347d7d1474fSKlaus Jensen 2348d7d1474fSKlaus Jensen static void nvme_dsm_cb(void *opaque, int ret); 2349d7d1474fSKlaus Jensen 2350d7d1474fSKlaus Jensen static void nvme_dsm_md_cb(void *opaque, int ret) 2351d7d1474fSKlaus Jensen { 2352d7d1474fSKlaus Jensen NvmeDSMAIOCB *iocb = opaque; 2353d7d1474fSKlaus Jensen NvmeRequest *req = iocb->req; 2354d7d1474fSKlaus Jensen NvmeNamespace *ns = req->ns; 2355d7d1474fSKlaus Jensen NvmeDsmRange *range; 2356d7d1474fSKlaus Jensen uint64_t slba; 2357d7d1474fSKlaus Jensen uint32_t nlb; 2358d7d1474fSKlaus Jensen 2359d7d1474fSKlaus Jensen if (ret < 0) { 2360d7d1474fSKlaus Jensen iocb->ret = ret; 2361d7d1474fSKlaus Jensen goto done; 2362d7d1474fSKlaus Jensen } 2363d7d1474fSKlaus Jensen 2364d7d1474fSKlaus Jensen if (!ns->lbaf.ms) { 2365d7d1474fSKlaus Jensen nvme_dsm_cb(iocb, 0); 2366d7d1474fSKlaus Jensen return; 2367d7d1474fSKlaus Jensen } 2368d7d1474fSKlaus Jensen 2369d7d1474fSKlaus Jensen range = &iocb->range[iocb->idx - 1]; 2370d7d1474fSKlaus Jensen slba = le64_to_cpu(range->slba); 2371d7d1474fSKlaus Jensen nlb = le32_to_cpu(range->nlb); 2372d7d1474fSKlaus Jensen 2373d7d1474fSKlaus Jensen /* 2374d7d1474fSKlaus Jensen * Check that all block were discarded (zeroed); otherwise we do not zero 2375d7d1474fSKlaus Jensen * the metadata. 2376d7d1474fSKlaus Jensen */ 2377d7d1474fSKlaus Jensen 2378d7d1474fSKlaus Jensen ret = nvme_block_status_all(ns, slba, nlb, BDRV_BLOCK_ZERO); 2379d7d1474fSKlaus Jensen if (ret) { 2380d7d1474fSKlaus Jensen if (ret < 0) { 2381d7d1474fSKlaus Jensen iocb->ret = ret; 2382d7d1474fSKlaus Jensen goto done; 2383d7d1474fSKlaus Jensen } 2384d7d1474fSKlaus Jensen 2385d7d1474fSKlaus Jensen nvme_dsm_cb(iocb, 0); 238651c45326SDmitry Tikhov return; 2387d7d1474fSKlaus Jensen } 2388d7d1474fSKlaus Jensen 2389d7d1474fSKlaus Jensen iocb->aiocb = blk_aio_pwrite_zeroes(ns->blkconf.blk, nvme_moff(ns, slba), 2390d7d1474fSKlaus Jensen nvme_m2b(ns, nlb), BDRV_REQ_MAY_UNMAP, 2391d7d1474fSKlaus Jensen nvme_dsm_cb, iocb); 2392d7d1474fSKlaus Jensen return; 2393d7d1474fSKlaus Jensen 2394d7d1474fSKlaus Jensen done: 2395d7d1474fSKlaus Jensen iocb->aiocb = NULL; 2396d7d1474fSKlaus Jensen qemu_bh_schedule(iocb->bh); 2397d7d1474fSKlaus Jensen } 2398d7d1474fSKlaus Jensen 2399d7d1474fSKlaus Jensen static void nvme_dsm_cb(void *opaque, int ret) 2400d7d1474fSKlaus Jensen { 2401d7d1474fSKlaus Jensen NvmeDSMAIOCB *iocb = opaque; 2402d7d1474fSKlaus Jensen NvmeRequest *req = iocb->req; 2403d7d1474fSKlaus Jensen NvmeCtrl *n = nvme_ctrl(req); 2404d7d1474fSKlaus Jensen NvmeNamespace *ns = req->ns; 2405d7d1474fSKlaus Jensen NvmeDsmRange *range; 2406d7d1474fSKlaus Jensen uint64_t slba; 2407d7d1474fSKlaus Jensen uint32_t nlb; 2408d7d1474fSKlaus Jensen 2409d7d1474fSKlaus Jensen if (ret < 0) { 2410d7d1474fSKlaus Jensen iocb->ret = ret; 2411d7d1474fSKlaus Jensen goto done; 2412d7d1474fSKlaus Jensen } 2413d7d1474fSKlaus Jensen 2414d7d1474fSKlaus Jensen next: 2415d7d1474fSKlaus Jensen if (iocb->idx == iocb->nr) { 2416d7d1474fSKlaus Jensen goto done; 2417d7d1474fSKlaus Jensen } 2418d7d1474fSKlaus Jensen 2419d7d1474fSKlaus Jensen range = &iocb->range[iocb->idx++]; 2420d7d1474fSKlaus Jensen slba = le64_to_cpu(range->slba); 2421d7d1474fSKlaus Jensen nlb = le32_to_cpu(range->nlb); 2422d7d1474fSKlaus Jensen 2423d7d1474fSKlaus Jensen trace_pci_nvme_dsm_deallocate(slba, nlb); 2424d7d1474fSKlaus Jensen 2425d7d1474fSKlaus Jensen if (nlb > n->dmrsl) { 2426d7d1474fSKlaus Jensen trace_pci_nvme_dsm_single_range_limit_exceeded(nlb, n->dmrsl); 2427d7d1474fSKlaus Jensen goto next; 2428d7d1474fSKlaus Jensen } 2429d7d1474fSKlaus Jensen 2430d7d1474fSKlaus Jensen if (nvme_check_bounds(ns, slba, nlb)) { 2431d7d1474fSKlaus Jensen trace_pci_nvme_err_invalid_lba_range(slba, nlb, 2432d7d1474fSKlaus Jensen ns->id_ns.nsze); 2433d7d1474fSKlaus Jensen goto next; 2434d7d1474fSKlaus Jensen } 2435d7d1474fSKlaus Jensen 2436d7d1474fSKlaus Jensen iocb->aiocb = blk_aio_pdiscard(ns->blkconf.blk, nvme_l2b(ns, slba), 2437d7d1474fSKlaus Jensen nvme_l2b(ns, nlb), 2438d7d1474fSKlaus Jensen nvme_dsm_md_cb, iocb); 2439d7d1474fSKlaus Jensen return; 2440d7d1474fSKlaus Jensen 2441d7d1474fSKlaus Jensen done: 2442d7d1474fSKlaus Jensen iocb->aiocb = NULL; 2443d7d1474fSKlaus Jensen qemu_bh_schedule(iocb->bh); 2444d7d1474fSKlaus Jensen } 2445d7d1474fSKlaus Jensen 244688eea45cSKlaus Jensen static uint16_t nvme_dsm(NvmeCtrl *n, NvmeRequest *req) 244788eea45cSKlaus Jensen { 244888eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 244988eea45cSKlaus Jensen NvmeDsmCmd *dsm = (NvmeDsmCmd *) &req->cmd; 245088eea45cSKlaus Jensen uint32_t attr = le32_to_cpu(dsm->attributes); 245188eea45cSKlaus Jensen uint32_t nr = (le32_to_cpu(dsm->nr) & 0xff) + 1; 245288eea45cSKlaus Jensen uint16_t status = NVME_SUCCESS; 245388eea45cSKlaus Jensen 2454d7d1474fSKlaus Jensen trace_pci_nvme_dsm(nr, attr); 245588eea45cSKlaus Jensen 245688eea45cSKlaus Jensen if (attr & NVME_DSMGMT_AD) { 2457d7d1474fSKlaus Jensen NvmeDSMAIOCB *iocb = blk_aio_get(&nvme_dsm_aiocb_info, ns->blkconf.blk, 2458d7d1474fSKlaus Jensen nvme_misc_cb, req); 245988eea45cSKlaus Jensen 2460d7d1474fSKlaus Jensen iocb->req = req; 2461d7d1474fSKlaus Jensen iocb->bh = qemu_bh_new(nvme_dsm_bh, iocb); 2462d7d1474fSKlaus Jensen iocb->ret = 0; 2463d7d1474fSKlaus Jensen iocb->range = g_new(NvmeDsmRange, nr); 2464d7d1474fSKlaus Jensen iocb->nr = nr; 2465d7d1474fSKlaus Jensen iocb->idx = 0; 2466d7d1474fSKlaus Jensen 2467d7d1474fSKlaus Jensen status = nvme_h2c(n, (uint8_t *)iocb->range, sizeof(NvmeDsmRange) * nr, 2468d7d1474fSKlaus Jensen req); 246988eea45cSKlaus Jensen if (status) { 247088eea45cSKlaus Jensen return status; 247188eea45cSKlaus Jensen } 247288eea45cSKlaus Jensen 2473d7d1474fSKlaus Jensen req->aiocb = &iocb->common; 2474d7d1474fSKlaus Jensen nvme_dsm_cb(iocb, 0); 247588eea45cSKlaus Jensen 2476d7d1474fSKlaus Jensen return NVME_NO_COMPLETE; 247788eea45cSKlaus Jensen } 247888eea45cSKlaus Jensen 247988eea45cSKlaus Jensen return status; 248088eea45cSKlaus Jensen } 248188eea45cSKlaus Jensen 248288eea45cSKlaus Jensen static uint16_t nvme_verify(NvmeCtrl *n, NvmeRequest *req) 248388eea45cSKlaus Jensen { 248488eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 248588eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 248688eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 248788eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 248888eea45cSKlaus Jensen uint32_t nlb = le16_to_cpu(rw->nlb) + 1; 248988eea45cSKlaus Jensen size_t len = nvme_l2b(ns, nlb); 249088eea45cSKlaus Jensen int64_t offset = nvme_l2b(ns, slba); 24912a132309SKlaus Jensen uint8_t prinfo = NVME_RW_PRINFO(le16_to_cpu(rw->control)); 249288eea45cSKlaus Jensen uint32_t reftag = le32_to_cpu(rw->reftag); 249388eea45cSKlaus Jensen NvmeBounceContext *ctx = NULL; 249488eea45cSKlaus Jensen uint16_t status; 249588eea45cSKlaus Jensen 249688eea45cSKlaus Jensen trace_pci_nvme_verify(nvme_cid(req), nvme_nsid(ns), slba, nlb); 249788eea45cSKlaus Jensen 249888eea45cSKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 24992a132309SKlaus Jensen status = nvme_check_prinfo(ns, prinfo, slba, reftag); 250088eea45cSKlaus Jensen if (status) { 250188eea45cSKlaus Jensen return status; 250288eea45cSKlaus Jensen } 250388eea45cSKlaus Jensen 25042a132309SKlaus Jensen if (prinfo & NVME_PRINFO_PRACT) { 250588eea45cSKlaus Jensen return NVME_INVALID_PROT_INFO | NVME_DNR; 250688eea45cSKlaus Jensen } 250788eea45cSKlaus Jensen } 250888eea45cSKlaus Jensen 250988eea45cSKlaus Jensen if (len > n->page_size << n->params.vsl) { 251088eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 251188eea45cSKlaus Jensen } 251288eea45cSKlaus Jensen 251388eea45cSKlaus Jensen status = nvme_check_bounds(ns, slba, nlb); 251488eea45cSKlaus Jensen if (status) { 251588eea45cSKlaus Jensen return status; 251688eea45cSKlaus Jensen } 251788eea45cSKlaus Jensen 251888eea45cSKlaus Jensen if (NVME_ERR_REC_DULBE(ns->features.err_rec)) { 251988eea45cSKlaus Jensen status = nvme_check_dulbe(ns, slba, nlb); 252088eea45cSKlaus Jensen if (status) { 252188eea45cSKlaus Jensen return status; 252288eea45cSKlaus Jensen } 252388eea45cSKlaus Jensen } 252488eea45cSKlaus Jensen 252588eea45cSKlaus Jensen ctx = g_new0(NvmeBounceContext, 1); 252688eea45cSKlaus Jensen ctx->req = req; 252788eea45cSKlaus Jensen 252888eea45cSKlaus Jensen ctx->data.bounce = g_malloc(len); 252988eea45cSKlaus Jensen 253088eea45cSKlaus Jensen qemu_iovec_init(&ctx->data.iov, 1); 253188eea45cSKlaus Jensen qemu_iovec_add(&ctx->data.iov, ctx->data.bounce, len); 253288eea45cSKlaus Jensen 253388eea45cSKlaus Jensen block_acct_start(blk_get_stats(blk), &req->acct, ctx->data.iov.size, 253488eea45cSKlaus Jensen BLOCK_ACCT_READ); 253588eea45cSKlaus Jensen 253688eea45cSKlaus Jensen req->aiocb = blk_aio_preadv(ns->blkconf.blk, offset, &ctx->data.iov, 0, 253788eea45cSKlaus Jensen nvme_verify_mdata_in_cb, ctx); 253888eea45cSKlaus Jensen return NVME_NO_COMPLETE; 253988eea45cSKlaus Jensen } 254088eea45cSKlaus Jensen 2541796d2068SKlaus Jensen typedef struct NvmeCopyAIOCB { 2542796d2068SKlaus Jensen BlockAIOCB common; 2543796d2068SKlaus Jensen BlockAIOCB *aiocb; 2544796d2068SKlaus Jensen NvmeRequest *req; 2545796d2068SKlaus Jensen QEMUBH *bh; 2546796d2068SKlaus Jensen int ret; 2547796d2068SKlaus Jensen 254844219b60SNaveen Nagar void *ranges; 254944219b60SNaveen Nagar unsigned int format; 2550796d2068SKlaus Jensen int nr; 2551796d2068SKlaus Jensen int idx; 2552796d2068SKlaus Jensen 2553796d2068SKlaus Jensen uint8_t *bounce; 2554796d2068SKlaus Jensen QEMUIOVector iov; 2555796d2068SKlaus Jensen struct { 2556796d2068SKlaus Jensen BlockAcctCookie read; 2557796d2068SKlaus Jensen BlockAcctCookie write; 2558796d2068SKlaus Jensen } acct; 2559796d2068SKlaus Jensen 256044219b60SNaveen Nagar uint64_t reftag; 2561796d2068SKlaus Jensen uint64_t slba; 2562796d2068SKlaus Jensen 2563796d2068SKlaus Jensen NvmeZone *zone; 2564796d2068SKlaus Jensen } NvmeCopyAIOCB; 2565796d2068SKlaus Jensen 2566796d2068SKlaus Jensen static void nvme_copy_cancel(BlockAIOCB *aiocb) 256788eea45cSKlaus Jensen { 2568796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = container_of(aiocb, NvmeCopyAIOCB, common); 2569796d2068SKlaus Jensen 2570796d2068SKlaus Jensen iocb->ret = -ECANCELED; 2571796d2068SKlaus Jensen 2572796d2068SKlaus Jensen if (iocb->aiocb) { 2573796d2068SKlaus Jensen blk_aio_cancel_async(iocb->aiocb); 2574796d2068SKlaus Jensen iocb->aiocb = NULL; 2575796d2068SKlaus Jensen } 2576796d2068SKlaus Jensen } 2577796d2068SKlaus Jensen 2578796d2068SKlaus Jensen static const AIOCBInfo nvme_copy_aiocb_info = { 2579796d2068SKlaus Jensen .aiocb_size = sizeof(NvmeCopyAIOCB), 2580796d2068SKlaus Jensen .cancel_async = nvme_copy_cancel, 2581796d2068SKlaus Jensen }; 2582796d2068SKlaus Jensen 2583796d2068SKlaus Jensen static void nvme_copy_bh(void *opaque) 2584796d2068SKlaus Jensen { 2585796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = opaque; 2586796d2068SKlaus Jensen NvmeRequest *req = iocb->req; 258788eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 2588796d2068SKlaus Jensen BlockAcctStats *stats = blk_get_stats(ns->blkconf.blk); 2589796d2068SKlaus Jensen 2590796d2068SKlaus Jensen if (iocb->idx != iocb->nr) { 2591796d2068SKlaus Jensen req->cqe.result = cpu_to_le32(iocb->idx); 2592796d2068SKlaus Jensen } 2593796d2068SKlaus Jensen 2594796d2068SKlaus Jensen qemu_iovec_destroy(&iocb->iov); 2595796d2068SKlaus Jensen g_free(iocb->bounce); 2596796d2068SKlaus Jensen 2597796d2068SKlaus Jensen qemu_bh_delete(iocb->bh); 2598796d2068SKlaus Jensen iocb->bh = NULL; 2599796d2068SKlaus Jensen 2600796d2068SKlaus Jensen if (iocb->ret < 0) { 2601796d2068SKlaus Jensen block_acct_failed(stats, &iocb->acct.read); 2602796d2068SKlaus Jensen block_acct_failed(stats, &iocb->acct.write); 2603796d2068SKlaus Jensen } else { 2604796d2068SKlaus Jensen block_acct_done(stats, &iocb->acct.read); 2605796d2068SKlaus Jensen block_acct_done(stats, &iocb->acct.write); 2606796d2068SKlaus Jensen } 2607796d2068SKlaus Jensen 2608796d2068SKlaus Jensen iocb->common.cb(iocb->common.opaque, iocb->ret); 2609796d2068SKlaus Jensen qemu_aio_unref(iocb); 2610796d2068SKlaus Jensen } 2611796d2068SKlaus Jensen 2612796d2068SKlaus Jensen static void nvme_copy_cb(void *opaque, int ret); 2613796d2068SKlaus Jensen 261444219b60SNaveen Nagar static void nvme_copy_source_range_parse_format0(void *ranges, int idx, 261544219b60SNaveen Nagar uint64_t *slba, uint32_t *nlb, 261644219b60SNaveen Nagar uint16_t *apptag, 261744219b60SNaveen Nagar uint16_t *appmask, 261844219b60SNaveen Nagar uint64_t *reftag) 261944219b60SNaveen Nagar { 262044219b60SNaveen Nagar NvmeCopySourceRangeFormat0 *_ranges = ranges; 262144219b60SNaveen Nagar 262244219b60SNaveen Nagar if (slba) { 262344219b60SNaveen Nagar *slba = le64_to_cpu(_ranges[idx].slba); 262444219b60SNaveen Nagar } 262544219b60SNaveen Nagar 262644219b60SNaveen Nagar if (nlb) { 262744219b60SNaveen Nagar *nlb = le16_to_cpu(_ranges[idx].nlb) + 1; 262844219b60SNaveen Nagar } 262944219b60SNaveen Nagar 263044219b60SNaveen Nagar if (apptag) { 263144219b60SNaveen Nagar *apptag = le16_to_cpu(_ranges[idx].apptag); 263244219b60SNaveen Nagar } 263344219b60SNaveen Nagar 263444219b60SNaveen Nagar if (appmask) { 263544219b60SNaveen Nagar *appmask = le16_to_cpu(_ranges[idx].appmask); 263644219b60SNaveen Nagar } 263744219b60SNaveen Nagar 263844219b60SNaveen Nagar if (reftag) { 263944219b60SNaveen Nagar *reftag = le32_to_cpu(_ranges[idx].reftag); 264044219b60SNaveen Nagar } 264144219b60SNaveen Nagar } 264244219b60SNaveen Nagar 264344219b60SNaveen Nagar static void nvme_copy_source_range_parse_format1(void *ranges, int idx, 264444219b60SNaveen Nagar uint64_t *slba, uint32_t *nlb, 264544219b60SNaveen Nagar uint16_t *apptag, 264644219b60SNaveen Nagar uint16_t *appmask, 264744219b60SNaveen Nagar uint64_t *reftag) 264844219b60SNaveen Nagar { 264944219b60SNaveen Nagar NvmeCopySourceRangeFormat1 *_ranges = ranges; 265044219b60SNaveen Nagar 265144219b60SNaveen Nagar if (slba) { 265244219b60SNaveen Nagar *slba = le64_to_cpu(_ranges[idx].slba); 265344219b60SNaveen Nagar } 265444219b60SNaveen Nagar 265544219b60SNaveen Nagar if (nlb) { 265644219b60SNaveen Nagar *nlb = le16_to_cpu(_ranges[idx].nlb) + 1; 265744219b60SNaveen Nagar } 265844219b60SNaveen Nagar 265944219b60SNaveen Nagar if (apptag) { 266044219b60SNaveen Nagar *apptag = le16_to_cpu(_ranges[idx].apptag); 266144219b60SNaveen Nagar } 266244219b60SNaveen Nagar 266344219b60SNaveen Nagar if (appmask) { 266444219b60SNaveen Nagar *appmask = le16_to_cpu(_ranges[idx].appmask); 266544219b60SNaveen Nagar } 266644219b60SNaveen Nagar 266744219b60SNaveen Nagar if (reftag) { 266844219b60SNaveen Nagar *reftag = 0; 266944219b60SNaveen Nagar 267044219b60SNaveen Nagar *reftag |= (uint64_t)_ranges[idx].sr[4] << 40; 267144219b60SNaveen Nagar *reftag |= (uint64_t)_ranges[idx].sr[5] << 32; 267244219b60SNaveen Nagar *reftag |= (uint64_t)_ranges[idx].sr[6] << 24; 267344219b60SNaveen Nagar *reftag |= (uint64_t)_ranges[idx].sr[7] << 16; 267444219b60SNaveen Nagar *reftag |= (uint64_t)_ranges[idx].sr[8] << 8; 267544219b60SNaveen Nagar *reftag |= (uint64_t)_ranges[idx].sr[9]; 267644219b60SNaveen Nagar } 267744219b60SNaveen Nagar } 267844219b60SNaveen Nagar 267944219b60SNaveen Nagar static void nvme_copy_source_range_parse(void *ranges, int idx, uint8_t format, 268044219b60SNaveen Nagar uint64_t *slba, uint32_t *nlb, 268144219b60SNaveen Nagar uint16_t *apptag, uint16_t *appmask, 268244219b60SNaveen Nagar uint64_t *reftag) 268344219b60SNaveen Nagar { 268444219b60SNaveen Nagar switch (format) { 268544219b60SNaveen Nagar case NVME_COPY_FORMAT_0: 268644219b60SNaveen Nagar nvme_copy_source_range_parse_format0(ranges, idx, slba, nlb, apptag, 268744219b60SNaveen Nagar appmask, reftag); 268844219b60SNaveen Nagar break; 268944219b60SNaveen Nagar 269044219b60SNaveen Nagar case NVME_COPY_FORMAT_1: 269144219b60SNaveen Nagar nvme_copy_source_range_parse_format1(ranges, idx, slba, nlb, apptag, 269244219b60SNaveen Nagar appmask, reftag); 269344219b60SNaveen Nagar break; 269444219b60SNaveen Nagar 269544219b60SNaveen Nagar default: 269644219b60SNaveen Nagar abort(); 269744219b60SNaveen Nagar } 269844219b60SNaveen Nagar } 269944219b60SNaveen Nagar 2700796d2068SKlaus Jensen static void nvme_copy_out_completed_cb(void *opaque, int ret) 2701796d2068SKlaus Jensen { 2702796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = opaque; 2703796d2068SKlaus Jensen NvmeRequest *req = iocb->req; 2704796d2068SKlaus Jensen NvmeNamespace *ns = req->ns; 270544219b60SNaveen Nagar uint32_t nlb; 270644219b60SNaveen Nagar 270744219b60SNaveen Nagar nvme_copy_source_range_parse(iocb->ranges, iocb->idx, iocb->format, NULL, 270844219b60SNaveen Nagar &nlb, NULL, NULL, NULL); 2709796d2068SKlaus Jensen 2710796d2068SKlaus Jensen if (ret < 0) { 2711796d2068SKlaus Jensen iocb->ret = ret; 2712796d2068SKlaus Jensen goto out; 2713796d2068SKlaus Jensen } else if (iocb->ret < 0) { 2714796d2068SKlaus Jensen goto out; 2715796d2068SKlaus Jensen } 2716796d2068SKlaus Jensen 2717796d2068SKlaus Jensen if (ns->params.zoned) { 2718796d2068SKlaus Jensen nvme_advance_zone_wp(ns, iocb->zone, nlb); 2719796d2068SKlaus Jensen } 2720796d2068SKlaus Jensen 2721796d2068SKlaus Jensen iocb->idx++; 2722796d2068SKlaus Jensen iocb->slba += nlb; 2723796d2068SKlaus Jensen out: 2724796d2068SKlaus Jensen nvme_copy_cb(iocb, iocb->ret); 2725796d2068SKlaus Jensen } 2726796d2068SKlaus Jensen 2727796d2068SKlaus Jensen static void nvme_copy_out_cb(void *opaque, int ret) 2728796d2068SKlaus Jensen { 2729796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = opaque; 2730796d2068SKlaus Jensen NvmeRequest *req = iocb->req; 2731796d2068SKlaus Jensen NvmeNamespace *ns = req->ns; 2732796d2068SKlaus Jensen uint32_t nlb; 2733796d2068SKlaus Jensen size_t mlen; 2734796d2068SKlaus Jensen uint8_t *mbounce; 2735796d2068SKlaus Jensen 2736796d2068SKlaus Jensen if (ret < 0) { 2737796d2068SKlaus Jensen iocb->ret = ret; 2738796d2068SKlaus Jensen goto out; 2739796d2068SKlaus Jensen } else if (iocb->ret < 0) { 2740796d2068SKlaus Jensen goto out; 2741796d2068SKlaus Jensen } 2742796d2068SKlaus Jensen 2743796d2068SKlaus Jensen if (!ns->lbaf.ms) { 2744796d2068SKlaus Jensen nvme_copy_out_completed_cb(iocb, 0); 2745796d2068SKlaus Jensen return; 2746796d2068SKlaus Jensen } 2747796d2068SKlaus Jensen 274844219b60SNaveen Nagar nvme_copy_source_range_parse(iocb->ranges, iocb->idx, iocb->format, NULL, 274944219b60SNaveen Nagar &nlb, NULL, NULL, NULL); 2750796d2068SKlaus Jensen 2751796d2068SKlaus Jensen mlen = nvme_m2b(ns, nlb); 2752796d2068SKlaus Jensen mbounce = iocb->bounce + nvme_l2b(ns, nlb); 2753796d2068SKlaus Jensen 2754796d2068SKlaus Jensen qemu_iovec_reset(&iocb->iov); 2755796d2068SKlaus Jensen qemu_iovec_add(&iocb->iov, mbounce, mlen); 2756796d2068SKlaus Jensen 2757796d2068SKlaus Jensen iocb->aiocb = blk_aio_pwritev(ns->blkconf.blk, nvme_moff(ns, iocb->slba), 2758796d2068SKlaus Jensen &iocb->iov, 0, nvme_copy_out_completed_cb, 2759796d2068SKlaus Jensen iocb); 2760796d2068SKlaus Jensen 2761796d2068SKlaus Jensen return; 2762796d2068SKlaus Jensen 2763796d2068SKlaus Jensen out: 2764796d2068SKlaus Jensen nvme_copy_cb(iocb, ret); 2765796d2068SKlaus Jensen } 2766796d2068SKlaus Jensen 2767796d2068SKlaus Jensen static void nvme_copy_in_completed_cb(void *opaque, int ret) 2768796d2068SKlaus Jensen { 2769796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = opaque; 2770796d2068SKlaus Jensen NvmeRequest *req = iocb->req; 2771796d2068SKlaus Jensen NvmeNamespace *ns = req->ns; 2772796d2068SKlaus Jensen uint32_t nlb; 277344219b60SNaveen Nagar uint64_t slba; 277444219b60SNaveen Nagar uint16_t apptag, appmask; 277544219b60SNaveen Nagar uint64_t reftag; 2776796d2068SKlaus Jensen size_t len; 2777796d2068SKlaus Jensen uint16_t status; 2778796d2068SKlaus Jensen 2779796d2068SKlaus Jensen if (ret < 0) { 2780796d2068SKlaus Jensen iocb->ret = ret; 2781796d2068SKlaus Jensen goto out; 2782796d2068SKlaus Jensen } else if (iocb->ret < 0) { 2783796d2068SKlaus Jensen goto out; 2784796d2068SKlaus Jensen } 2785796d2068SKlaus Jensen 278644219b60SNaveen Nagar nvme_copy_source_range_parse(iocb->ranges, iocb->idx, iocb->format, &slba, 278744219b60SNaveen Nagar &nlb, &apptag, &appmask, &reftag); 2788796d2068SKlaus Jensen len = nvme_l2b(ns, nlb); 2789796d2068SKlaus Jensen 2790796d2068SKlaus Jensen trace_pci_nvme_copy_out(iocb->slba, nlb); 2791796d2068SKlaus Jensen 2792796d2068SKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 279388eea45cSKlaus Jensen NvmeCopyCmd *copy = (NvmeCopyCmd *)&req->cmd; 279488eea45cSKlaus Jensen 2795796d2068SKlaus Jensen uint16_t prinfor = ((copy->control[0] >> 4) & 0xf); 2796796d2068SKlaus Jensen uint16_t prinfow = ((copy->control[2] >> 2) & 0xf); 279788eea45cSKlaus Jensen 2798796d2068SKlaus Jensen size_t mlen = nvme_m2b(ns, nlb); 2799796d2068SKlaus Jensen uint8_t *mbounce = iocb->bounce + nvme_l2b(ns, nlb); 2800796d2068SKlaus Jensen 28012e8f952aSDmitry Tikhov status = nvme_dif_mangle_mdata(ns, mbounce, mlen, slba); 28022e8f952aSDmitry Tikhov if (status) { 28032e8f952aSDmitry Tikhov goto invalid; 28042e8f952aSDmitry Tikhov } 2805796d2068SKlaus Jensen status = nvme_dif_check(ns, iocb->bounce, len, mbounce, mlen, prinfor, 2806796d2068SKlaus Jensen slba, apptag, appmask, &reftag); 2807796d2068SKlaus Jensen if (status) { 2808796d2068SKlaus Jensen goto invalid; 2809796d2068SKlaus Jensen } 2810796d2068SKlaus Jensen 2811796d2068SKlaus Jensen apptag = le16_to_cpu(copy->apptag); 2812796d2068SKlaus Jensen appmask = le16_to_cpu(copy->appmask); 2813796d2068SKlaus Jensen 2814796d2068SKlaus Jensen if (prinfow & NVME_PRINFO_PRACT) { 2815796d2068SKlaus Jensen status = nvme_check_prinfo(ns, prinfow, iocb->slba, iocb->reftag); 2816796d2068SKlaus Jensen if (status) { 2817796d2068SKlaus Jensen goto invalid; 2818796d2068SKlaus Jensen } 2819796d2068SKlaus Jensen 2820796d2068SKlaus Jensen nvme_dif_pract_generate_dif(ns, iocb->bounce, len, mbounce, mlen, 2821796d2068SKlaus Jensen apptag, &iocb->reftag); 2822796d2068SKlaus Jensen } else { 2823796d2068SKlaus Jensen status = nvme_dif_check(ns, iocb->bounce, len, mbounce, mlen, 2824796d2068SKlaus Jensen prinfow, iocb->slba, apptag, appmask, 2825796d2068SKlaus Jensen &iocb->reftag); 2826796d2068SKlaus Jensen if (status) { 2827796d2068SKlaus Jensen goto invalid; 2828796d2068SKlaus Jensen } 2829796d2068SKlaus Jensen } 2830796d2068SKlaus Jensen } 2831796d2068SKlaus Jensen 2832796d2068SKlaus Jensen status = nvme_check_bounds(ns, iocb->slba, nlb); 2833796d2068SKlaus Jensen if (status) { 2834796d2068SKlaus Jensen goto invalid; 2835796d2068SKlaus Jensen } 2836796d2068SKlaus Jensen 2837796d2068SKlaus Jensen if (ns->params.zoned) { 2838796d2068SKlaus Jensen status = nvme_check_zone_write(ns, iocb->zone, iocb->slba, nlb); 2839796d2068SKlaus Jensen if (status) { 2840796d2068SKlaus Jensen goto invalid; 2841796d2068SKlaus Jensen } 2842796d2068SKlaus Jensen 2843e321b4cdSKlaus Jensen if (!(iocb->zone->d.za & NVME_ZA_ZRWA_VALID)) { 2844796d2068SKlaus Jensen iocb->zone->w_ptr += nlb; 2845796d2068SKlaus Jensen } 2846e321b4cdSKlaus Jensen } 2847796d2068SKlaus Jensen 2848796d2068SKlaus Jensen qemu_iovec_reset(&iocb->iov); 2849796d2068SKlaus Jensen qemu_iovec_add(&iocb->iov, iocb->bounce, len); 2850796d2068SKlaus Jensen 2851796d2068SKlaus Jensen iocb->aiocb = blk_aio_pwritev(ns->blkconf.blk, nvme_l2b(ns, iocb->slba), 2852796d2068SKlaus Jensen &iocb->iov, 0, nvme_copy_out_cb, iocb); 2853796d2068SKlaus Jensen 2854796d2068SKlaus Jensen return; 2855796d2068SKlaus Jensen 2856796d2068SKlaus Jensen invalid: 2857796d2068SKlaus Jensen req->status = status; 2858796d2068SKlaus Jensen iocb->aiocb = NULL; 2859796d2068SKlaus Jensen if (iocb->bh) { 2860796d2068SKlaus Jensen qemu_bh_schedule(iocb->bh); 2861796d2068SKlaus Jensen } 2862796d2068SKlaus Jensen 2863796d2068SKlaus Jensen return; 2864796d2068SKlaus Jensen 2865796d2068SKlaus Jensen out: 2866796d2068SKlaus Jensen nvme_copy_cb(iocb, ret); 2867796d2068SKlaus Jensen } 2868796d2068SKlaus Jensen 2869796d2068SKlaus Jensen static void nvme_copy_in_cb(void *opaque, int ret) 2870796d2068SKlaus Jensen { 2871796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = opaque; 2872796d2068SKlaus Jensen NvmeRequest *req = iocb->req; 2873796d2068SKlaus Jensen NvmeNamespace *ns = req->ns; 2874796d2068SKlaus Jensen uint64_t slba; 2875796d2068SKlaus Jensen uint32_t nlb; 2876796d2068SKlaus Jensen 2877796d2068SKlaus Jensen if (ret < 0) { 2878796d2068SKlaus Jensen iocb->ret = ret; 2879796d2068SKlaus Jensen goto out; 2880796d2068SKlaus Jensen } else if (iocb->ret < 0) { 2881796d2068SKlaus Jensen goto out; 2882796d2068SKlaus Jensen } 2883796d2068SKlaus Jensen 2884796d2068SKlaus Jensen if (!ns->lbaf.ms) { 2885796d2068SKlaus Jensen nvme_copy_in_completed_cb(iocb, 0); 2886796d2068SKlaus Jensen return; 2887796d2068SKlaus Jensen } 2888796d2068SKlaus Jensen 288944219b60SNaveen Nagar nvme_copy_source_range_parse(iocb->ranges, iocb->idx, iocb->format, &slba, 289044219b60SNaveen Nagar &nlb, NULL, NULL, NULL); 2891796d2068SKlaus Jensen 2892796d2068SKlaus Jensen qemu_iovec_reset(&iocb->iov); 2893796d2068SKlaus Jensen qemu_iovec_add(&iocb->iov, iocb->bounce + nvme_l2b(ns, nlb), 2894796d2068SKlaus Jensen nvme_m2b(ns, nlb)); 2895796d2068SKlaus Jensen 2896796d2068SKlaus Jensen iocb->aiocb = blk_aio_preadv(ns->blkconf.blk, nvme_moff(ns, slba), 2897796d2068SKlaus Jensen &iocb->iov, 0, nvme_copy_in_completed_cb, 2898796d2068SKlaus Jensen iocb); 2899796d2068SKlaus Jensen return; 2900796d2068SKlaus Jensen 2901796d2068SKlaus Jensen out: 2902796d2068SKlaus Jensen nvme_copy_cb(iocb, iocb->ret); 2903796d2068SKlaus Jensen } 2904796d2068SKlaus Jensen 2905796d2068SKlaus Jensen static void nvme_copy_cb(void *opaque, int ret) 2906796d2068SKlaus Jensen { 2907796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = opaque; 2908796d2068SKlaus Jensen NvmeRequest *req = iocb->req; 2909796d2068SKlaus Jensen NvmeNamespace *ns = req->ns; 2910796d2068SKlaus Jensen uint64_t slba; 2911796d2068SKlaus Jensen uint32_t nlb; 2912796d2068SKlaus Jensen size_t len; 291388eea45cSKlaus Jensen uint16_t status; 291488eea45cSKlaus Jensen 2915796d2068SKlaus Jensen if (ret < 0) { 2916796d2068SKlaus Jensen iocb->ret = ret; 2917796d2068SKlaus Jensen goto done; 2918796d2068SKlaus Jensen } else if (iocb->ret < 0) { 2919796d2068SKlaus Jensen goto done; 292088eea45cSKlaus Jensen } 292188eea45cSKlaus Jensen 2922796d2068SKlaus Jensen if (iocb->idx == iocb->nr) { 2923796d2068SKlaus Jensen goto done; 292488eea45cSKlaus Jensen } 292588eea45cSKlaus Jensen 292644219b60SNaveen Nagar nvme_copy_source_range_parse(iocb->ranges, iocb->idx, iocb->format, &slba, 292744219b60SNaveen Nagar &nlb, NULL, NULL, NULL); 2928796d2068SKlaus Jensen len = nvme_l2b(ns, nlb); 292988eea45cSKlaus Jensen 2930796d2068SKlaus Jensen trace_pci_nvme_copy_source_range(slba, nlb); 293188eea45cSKlaus Jensen 2932796d2068SKlaus Jensen if (nlb > le16_to_cpu(ns->id_ns.mssrl)) { 293388eea45cSKlaus Jensen status = NVME_CMD_SIZE_LIMIT | NVME_DNR; 2934796d2068SKlaus Jensen goto invalid; 293588eea45cSKlaus Jensen } 293688eea45cSKlaus Jensen 2937796d2068SKlaus Jensen status = nvme_check_bounds(ns, slba, nlb); 293888eea45cSKlaus Jensen if (status) { 2939796d2068SKlaus Jensen goto invalid; 294088eea45cSKlaus Jensen } 294188eea45cSKlaus Jensen 294288eea45cSKlaus Jensen if (NVME_ERR_REC_DULBE(ns->features.err_rec)) { 2943796d2068SKlaus Jensen status = nvme_check_dulbe(ns, slba, nlb); 294488eea45cSKlaus Jensen if (status) { 2945796d2068SKlaus Jensen goto invalid; 294688eea45cSKlaus Jensen } 294788eea45cSKlaus Jensen } 294888eea45cSKlaus Jensen 294988eea45cSKlaus Jensen if (ns->params.zoned) { 2950796d2068SKlaus Jensen status = nvme_check_zone_read(ns, slba, nlb); 295188eea45cSKlaus Jensen if (status) { 2952796d2068SKlaus Jensen goto invalid; 295388eea45cSKlaus Jensen } 295488eea45cSKlaus Jensen } 295588eea45cSKlaus Jensen 2956796d2068SKlaus Jensen qemu_iovec_reset(&iocb->iov); 2957796d2068SKlaus Jensen qemu_iovec_add(&iocb->iov, iocb->bounce, len); 2958796d2068SKlaus Jensen 2959796d2068SKlaus Jensen iocb->aiocb = blk_aio_preadv(ns->blkconf.blk, nvme_l2b(ns, slba), 2960796d2068SKlaus Jensen &iocb->iov, 0, nvme_copy_in_cb, iocb); 2961796d2068SKlaus Jensen return; 2962796d2068SKlaus Jensen 2963796d2068SKlaus Jensen invalid: 2964796d2068SKlaus Jensen req->status = status; 2965796d2068SKlaus Jensen done: 2966796d2068SKlaus Jensen iocb->aiocb = NULL; 2967796d2068SKlaus Jensen if (iocb->bh) { 2968796d2068SKlaus Jensen qemu_bh_schedule(iocb->bh); 2969796d2068SKlaus Jensen } 297088eea45cSKlaus Jensen } 297188eea45cSKlaus Jensen 2972796d2068SKlaus Jensen 2973796d2068SKlaus Jensen static uint16_t nvme_copy(NvmeCtrl *n, NvmeRequest *req) 2974796d2068SKlaus Jensen { 2975796d2068SKlaus Jensen NvmeNamespace *ns = req->ns; 2976796d2068SKlaus Jensen NvmeCopyCmd *copy = (NvmeCopyCmd *)&req->cmd; 2977796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = blk_aio_get(&nvme_copy_aiocb_info, ns->blkconf.blk, 2978796d2068SKlaus Jensen nvme_misc_cb, req); 2979796d2068SKlaus Jensen uint16_t nr = copy->nr + 1; 2980796d2068SKlaus Jensen uint8_t format = copy->control[0] & 0xf; 2981796d2068SKlaus Jensen uint16_t prinfor = ((copy->control[0] >> 4) & 0xf); 2982796d2068SKlaus Jensen uint16_t prinfow = ((copy->control[2] >> 2) & 0xf); 298344219b60SNaveen Nagar size_t len = sizeof(NvmeCopySourceRangeFormat0); 2984796d2068SKlaus Jensen 2985796d2068SKlaus Jensen uint16_t status; 2986796d2068SKlaus Jensen 2987796d2068SKlaus Jensen trace_pci_nvme_copy(nvme_cid(req), nvme_nsid(ns), nr, format); 2988796d2068SKlaus Jensen 2989796d2068SKlaus Jensen iocb->ranges = NULL; 2990796d2068SKlaus Jensen iocb->zone = NULL; 2991796d2068SKlaus Jensen 2992796d2068SKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps) && 2993796d2068SKlaus Jensen ((prinfor & NVME_PRINFO_PRACT) != (prinfow & NVME_PRINFO_PRACT))) { 2994796d2068SKlaus Jensen status = NVME_INVALID_FIELD | NVME_DNR; 2995796d2068SKlaus Jensen goto invalid; 2996796d2068SKlaus Jensen } 2997796d2068SKlaus Jensen 2998796d2068SKlaus Jensen if (!(n->id_ctrl.ocfs & (1 << format))) { 2999796d2068SKlaus Jensen trace_pci_nvme_err_copy_invalid_format(format); 3000796d2068SKlaus Jensen status = NVME_INVALID_FIELD | NVME_DNR; 3001796d2068SKlaus Jensen goto invalid; 3002796d2068SKlaus Jensen } 3003796d2068SKlaus Jensen 3004796d2068SKlaus Jensen if (nr > ns->id_ns.msrc + 1) { 300588eea45cSKlaus Jensen status = NVME_CMD_SIZE_LIMIT | NVME_DNR; 3006796d2068SKlaus Jensen goto invalid; 300788eea45cSKlaus Jensen } 300888eea45cSKlaus Jensen 300944219b60SNaveen Nagar if (ns->pif && format != 0x1) { 301044219b60SNaveen Nagar status = NVME_INVALID_FORMAT | NVME_DNR; 301144219b60SNaveen Nagar goto invalid; 301244219b60SNaveen Nagar } 3013796d2068SKlaus Jensen 301444219b60SNaveen Nagar if (ns->pif) { 301544219b60SNaveen Nagar len = sizeof(NvmeCopySourceRangeFormat1); 301644219b60SNaveen Nagar } 301744219b60SNaveen Nagar 301844219b60SNaveen Nagar iocb->format = format; 301944219b60SNaveen Nagar iocb->ranges = g_malloc_n(nr, len); 302044219b60SNaveen Nagar status = nvme_h2c(n, (uint8_t *)iocb->ranges, len * nr, req); 3021796d2068SKlaus Jensen if (status) { 3022796d2068SKlaus Jensen goto invalid; 302388eea45cSKlaus Jensen } 302488eea45cSKlaus Jensen 3025796d2068SKlaus Jensen iocb->slba = le64_to_cpu(copy->sdlba); 3026796d2068SKlaus Jensen 3027796d2068SKlaus Jensen if (ns->params.zoned) { 3028796d2068SKlaus Jensen iocb->zone = nvme_get_zone_by_slba(ns, iocb->slba); 3029796d2068SKlaus Jensen if (!iocb->zone) { 3030796d2068SKlaus Jensen status = NVME_LBA_RANGE | NVME_DNR; 3031796d2068SKlaus Jensen goto invalid; 3032796d2068SKlaus Jensen } 3033796d2068SKlaus Jensen 3034796d2068SKlaus Jensen status = nvme_zrm_auto(n, ns, iocb->zone); 3035796d2068SKlaus Jensen if (status) { 3036796d2068SKlaus Jensen goto invalid; 3037796d2068SKlaus Jensen } 3038796d2068SKlaus Jensen } 3039796d2068SKlaus Jensen 3040796d2068SKlaus Jensen iocb->req = req; 3041796d2068SKlaus Jensen iocb->bh = qemu_bh_new(nvme_copy_bh, iocb); 3042796d2068SKlaus Jensen iocb->ret = 0; 3043796d2068SKlaus Jensen iocb->nr = nr; 3044796d2068SKlaus Jensen iocb->idx = 0; 3045796d2068SKlaus Jensen iocb->reftag = le32_to_cpu(copy->reftag); 304644219b60SNaveen Nagar iocb->reftag |= (uint64_t)le32_to_cpu(copy->cdw3) << 32; 3047796d2068SKlaus Jensen iocb->bounce = g_malloc_n(le16_to_cpu(ns->id_ns.mssrl), 3048796d2068SKlaus Jensen ns->lbasz + ns->lbaf.ms); 3049796d2068SKlaus Jensen 3050796d2068SKlaus Jensen qemu_iovec_init(&iocb->iov, 1); 3051796d2068SKlaus Jensen 3052796d2068SKlaus Jensen block_acct_start(blk_get_stats(ns->blkconf.blk), &iocb->acct.read, 0, 305388eea45cSKlaus Jensen BLOCK_ACCT_READ); 3054796d2068SKlaus Jensen block_acct_start(blk_get_stats(ns->blkconf.blk), &iocb->acct.write, 0, 3055796d2068SKlaus Jensen BLOCK_ACCT_WRITE); 305688eea45cSKlaus Jensen 3057796d2068SKlaus Jensen req->aiocb = &iocb->common; 3058796d2068SKlaus Jensen nvme_copy_cb(iocb, 0); 305988eea45cSKlaus Jensen 306088eea45cSKlaus Jensen return NVME_NO_COMPLETE; 306188eea45cSKlaus Jensen 3062796d2068SKlaus Jensen invalid: 3063796d2068SKlaus Jensen g_free(iocb->ranges); 3064796d2068SKlaus Jensen qemu_aio_unref(iocb); 306588eea45cSKlaus Jensen return status; 306688eea45cSKlaus Jensen } 306788eea45cSKlaus Jensen 306888eea45cSKlaus Jensen static uint16_t nvme_compare(NvmeCtrl *n, NvmeRequest *req) 306988eea45cSKlaus Jensen { 307088eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 307188eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 307288eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 307388eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 307488eea45cSKlaus Jensen uint32_t nlb = le16_to_cpu(rw->nlb) + 1; 30752a132309SKlaus Jensen uint8_t prinfo = NVME_RW_PRINFO(le16_to_cpu(rw->control)); 307688eea45cSKlaus Jensen size_t data_len = nvme_l2b(ns, nlb); 307788eea45cSKlaus Jensen size_t len = data_len; 307888eea45cSKlaus Jensen int64_t offset = nvme_l2b(ns, slba); 307988eea45cSKlaus Jensen struct nvme_compare_ctx *ctx = NULL; 308088eea45cSKlaus Jensen uint16_t status; 308188eea45cSKlaus Jensen 308288eea45cSKlaus Jensen trace_pci_nvme_compare(nvme_cid(req), nvme_nsid(ns), slba, nlb); 308388eea45cSKlaus Jensen 30842a132309SKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps) && (prinfo & NVME_PRINFO_PRACT)) { 308588eea45cSKlaus Jensen return NVME_INVALID_PROT_INFO | NVME_DNR; 308688eea45cSKlaus Jensen } 308788eea45cSKlaus Jensen 308888eea45cSKlaus Jensen if (nvme_ns_ext(ns)) { 308988eea45cSKlaus Jensen len += nvme_m2b(ns, nlb); 309088eea45cSKlaus Jensen } 309188eea45cSKlaus Jensen 309288eea45cSKlaus Jensen status = nvme_check_mdts(n, len); 309388eea45cSKlaus Jensen if (status) { 309488eea45cSKlaus Jensen return status; 309588eea45cSKlaus Jensen } 309688eea45cSKlaus Jensen 309788eea45cSKlaus Jensen status = nvme_check_bounds(ns, slba, nlb); 309888eea45cSKlaus Jensen if (status) { 309988eea45cSKlaus Jensen return status; 310088eea45cSKlaus Jensen } 310188eea45cSKlaus Jensen 310288eea45cSKlaus Jensen if (NVME_ERR_REC_DULBE(ns->features.err_rec)) { 310388eea45cSKlaus Jensen status = nvme_check_dulbe(ns, slba, nlb); 310488eea45cSKlaus Jensen if (status) { 310588eea45cSKlaus Jensen return status; 310688eea45cSKlaus Jensen } 310788eea45cSKlaus Jensen } 310888eea45cSKlaus Jensen 310988eea45cSKlaus Jensen status = nvme_map_dptr(n, &req->sg, len, &req->cmd); 311088eea45cSKlaus Jensen if (status) { 311188eea45cSKlaus Jensen return status; 311288eea45cSKlaus Jensen } 311388eea45cSKlaus Jensen 311488eea45cSKlaus Jensen ctx = g_new(struct nvme_compare_ctx, 1); 311588eea45cSKlaus Jensen ctx->data.bounce = g_malloc(data_len); 311688eea45cSKlaus Jensen 311788eea45cSKlaus Jensen req->opaque = ctx; 311888eea45cSKlaus Jensen 311988eea45cSKlaus Jensen qemu_iovec_init(&ctx->data.iov, 1); 312088eea45cSKlaus Jensen qemu_iovec_add(&ctx->data.iov, ctx->data.bounce, data_len); 312188eea45cSKlaus Jensen 312288eea45cSKlaus Jensen block_acct_start(blk_get_stats(blk), &req->acct, data_len, 312388eea45cSKlaus Jensen BLOCK_ACCT_READ); 312488eea45cSKlaus Jensen req->aiocb = blk_aio_preadv(blk, offset, &ctx->data.iov, 0, 312588eea45cSKlaus Jensen nvme_compare_data_cb, req); 312688eea45cSKlaus Jensen 312788eea45cSKlaus Jensen return NVME_NO_COMPLETE; 312888eea45cSKlaus Jensen } 312988eea45cSKlaus Jensen 313038f4ac65SKlaus Jensen typedef struct NvmeFlushAIOCB { 313138f4ac65SKlaus Jensen BlockAIOCB common; 313238f4ac65SKlaus Jensen BlockAIOCB *aiocb; 313338f4ac65SKlaus Jensen NvmeRequest *req; 313438f4ac65SKlaus Jensen QEMUBH *bh; 313538f4ac65SKlaus Jensen int ret; 313638f4ac65SKlaus Jensen 313738f4ac65SKlaus Jensen NvmeNamespace *ns; 313838f4ac65SKlaus Jensen uint32_t nsid; 313938f4ac65SKlaus Jensen bool broadcast; 314038f4ac65SKlaus Jensen } NvmeFlushAIOCB; 314138f4ac65SKlaus Jensen 314238f4ac65SKlaus Jensen static void nvme_flush_cancel(BlockAIOCB *acb) 314338f4ac65SKlaus Jensen { 314438f4ac65SKlaus Jensen NvmeFlushAIOCB *iocb = container_of(acb, NvmeFlushAIOCB, common); 314538f4ac65SKlaus Jensen 314638f4ac65SKlaus Jensen iocb->ret = -ECANCELED; 314738f4ac65SKlaus Jensen 314838f4ac65SKlaus Jensen if (iocb->aiocb) { 314938f4ac65SKlaus Jensen blk_aio_cancel_async(iocb->aiocb); 315038f4ac65SKlaus Jensen } 315138f4ac65SKlaus Jensen } 315238f4ac65SKlaus Jensen 315338f4ac65SKlaus Jensen static const AIOCBInfo nvme_flush_aiocb_info = { 315438f4ac65SKlaus Jensen .aiocb_size = sizeof(NvmeFlushAIOCB), 315538f4ac65SKlaus Jensen .cancel_async = nvme_flush_cancel, 315638f4ac65SKlaus Jensen .get_aio_context = nvme_get_aio_context, 315738f4ac65SKlaus Jensen }; 315838f4ac65SKlaus Jensen 315938f4ac65SKlaus Jensen static void nvme_flush_ns_cb(void *opaque, int ret) 316038f4ac65SKlaus Jensen { 316138f4ac65SKlaus Jensen NvmeFlushAIOCB *iocb = opaque; 316238f4ac65SKlaus Jensen NvmeNamespace *ns = iocb->ns; 316338f4ac65SKlaus Jensen 316438f4ac65SKlaus Jensen if (ret < 0) { 316538f4ac65SKlaus Jensen iocb->ret = ret; 316638f4ac65SKlaus Jensen goto out; 316738f4ac65SKlaus Jensen } else if (iocb->ret < 0) { 316838f4ac65SKlaus Jensen goto out; 316938f4ac65SKlaus Jensen } 317038f4ac65SKlaus Jensen 317138f4ac65SKlaus Jensen if (ns) { 317238f4ac65SKlaus Jensen trace_pci_nvme_flush_ns(iocb->nsid); 317338f4ac65SKlaus Jensen 317438f4ac65SKlaus Jensen iocb->ns = NULL; 317538f4ac65SKlaus Jensen iocb->aiocb = blk_aio_flush(ns->blkconf.blk, nvme_flush_ns_cb, iocb); 317638f4ac65SKlaus Jensen return; 317738f4ac65SKlaus Jensen } 317838f4ac65SKlaus Jensen 317938f4ac65SKlaus Jensen out: 318038f4ac65SKlaus Jensen iocb->aiocb = NULL; 318138f4ac65SKlaus Jensen qemu_bh_schedule(iocb->bh); 318238f4ac65SKlaus Jensen } 318338f4ac65SKlaus Jensen 318438f4ac65SKlaus Jensen static void nvme_flush_bh(void *opaque) 318538f4ac65SKlaus Jensen { 318638f4ac65SKlaus Jensen NvmeFlushAIOCB *iocb = opaque; 318738f4ac65SKlaus Jensen NvmeRequest *req = iocb->req; 318838f4ac65SKlaus Jensen NvmeCtrl *n = nvme_ctrl(req); 318938f4ac65SKlaus Jensen int i; 319038f4ac65SKlaus Jensen 319138f4ac65SKlaus Jensen if (iocb->ret < 0) { 319238f4ac65SKlaus Jensen goto done; 319338f4ac65SKlaus Jensen } 319438f4ac65SKlaus Jensen 319538f4ac65SKlaus Jensen if (iocb->broadcast) { 319638f4ac65SKlaus Jensen for (i = iocb->nsid + 1; i <= NVME_MAX_NAMESPACES; i++) { 319738f4ac65SKlaus Jensen iocb->ns = nvme_ns(n, i); 319838f4ac65SKlaus Jensen if (iocb->ns) { 319938f4ac65SKlaus Jensen iocb->nsid = i; 320038f4ac65SKlaus Jensen break; 320138f4ac65SKlaus Jensen } 320238f4ac65SKlaus Jensen } 320338f4ac65SKlaus Jensen } 320438f4ac65SKlaus Jensen 320538f4ac65SKlaus Jensen if (!iocb->ns) { 320638f4ac65SKlaus Jensen goto done; 320738f4ac65SKlaus Jensen } 320838f4ac65SKlaus Jensen 320938f4ac65SKlaus Jensen nvme_flush_ns_cb(iocb, 0); 321038f4ac65SKlaus Jensen return; 321138f4ac65SKlaus Jensen 321238f4ac65SKlaus Jensen done: 321338f4ac65SKlaus Jensen qemu_bh_delete(iocb->bh); 321438f4ac65SKlaus Jensen iocb->bh = NULL; 321538f4ac65SKlaus Jensen 321638f4ac65SKlaus Jensen iocb->common.cb(iocb->common.opaque, iocb->ret); 321738f4ac65SKlaus Jensen 321838f4ac65SKlaus Jensen qemu_aio_unref(iocb); 321938f4ac65SKlaus Jensen 322038f4ac65SKlaus Jensen return; 322138f4ac65SKlaus Jensen } 322238f4ac65SKlaus Jensen 322388eea45cSKlaus Jensen static uint16_t nvme_flush(NvmeCtrl *n, NvmeRequest *req) 322488eea45cSKlaus Jensen { 322538f4ac65SKlaus Jensen NvmeFlushAIOCB *iocb; 322688eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(req->cmd.nsid); 322788eea45cSKlaus Jensen uint16_t status; 322888eea45cSKlaus Jensen 322938f4ac65SKlaus Jensen iocb = qemu_aio_get(&nvme_flush_aiocb_info, NULL, nvme_misc_cb, req); 323088eea45cSKlaus Jensen 323138f4ac65SKlaus Jensen iocb->req = req; 323238f4ac65SKlaus Jensen iocb->bh = qemu_bh_new(nvme_flush_bh, iocb); 323338f4ac65SKlaus Jensen iocb->ret = 0; 323438f4ac65SKlaus Jensen iocb->ns = NULL; 323538f4ac65SKlaus Jensen iocb->nsid = 0; 323638f4ac65SKlaus Jensen iocb->broadcast = (nsid == NVME_NSID_BROADCAST); 323738f4ac65SKlaus Jensen 323838f4ac65SKlaus Jensen if (!iocb->broadcast) { 323938f4ac65SKlaus Jensen if (!nvme_nsid_valid(n, nsid)) { 324038f4ac65SKlaus Jensen status = NVME_INVALID_NSID | NVME_DNR; 324138f4ac65SKlaus Jensen goto out; 324288eea45cSKlaus Jensen } 324388eea45cSKlaus Jensen 324438f4ac65SKlaus Jensen iocb->ns = nvme_ns(n, nsid); 324538f4ac65SKlaus Jensen if (!iocb->ns) { 324638f4ac65SKlaus Jensen status = NVME_INVALID_FIELD | NVME_DNR; 324738f4ac65SKlaus Jensen goto out; 324838f4ac65SKlaus Jensen } 324938f4ac65SKlaus Jensen 325038f4ac65SKlaus Jensen iocb->nsid = nsid; 325138f4ac65SKlaus Jensen } 325238f4ac65SKlaus Jensen 325338f4ac65SKlaus Jensen req->aiocb = &iocb->common; 325438f4ac65SKlaus Jensen qemu_bh_schedule(iocb->bh); 325538f4ac65SKlaus Jensen 325688eea45cSKlaus Jensen return NVME_NO_COMPLETE; 325788eea45cSKlaus Jensen 325838f4ac65SKlaus Jensen out: 325938f4ac65SKlaus Jensen qemu_bh_delete(iocb->bh); 326038f4ac65SKlaus Jensen iocb->bh = NULL; 326138f4ac65SKlaus Jensen qemu_aio_unref(iocb); 326288eea45cSKlaus Jensen 326388eea45cSKlaus Jensen return status; 326488eea45cSKlaus Jensen } 326588eea45cSKlaus Jensen 326688eea45cSKlaus Jensen static uint16_t nvme_read(NvmeCtrl *n, NvmeRequest *req) 326788eea45cSKlaus Jensen { 326888eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 326988eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 327088eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 327188eea45cSKlaus Jensen uint32_t nlb = (uint32_t)le16_to_cpu(rw->nlb) + 1; 32722a132309SKlaus Jensen uint8_t prinfo = NVME_RW_PRINFO(le16_to_cpu(rw->control)); 327388eea45cSKlaus Jensen uint64_t data_size = nvme_l2b(ns, nlb); 327488eea45cSKlaus Jensen uint64_t mapped_size = data_size; 327588eea45cSKlaus Jensen uint64_t data_offset; 327688eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 327788eea45cSKlaus Jensen uint16_t status; 327888eea45cSKlaus Jensen 327988eea45cSKlaus Jensen if (nvme_ns_ext(ns)) { 328088eea45cSKlaus Jensen mapped_size += nvme_m2b(ns, nlb); 328188eea45cSKlaus Jensen 328288eea45cSKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 32832a132309SKlaus Jensen bool pract = prinfo & NVME_PRINFO_PRACT; 328488eea45cSKlaus Jensen 3285ac0b34c5SKlaus Jensen if (pract && ns->lbaf.ms == nvme_pi_tuple_size(ns)) { 328688eea45cSKlaus Jensen mapped_size = data_size; 328788eea45cSKlaus Jensen } 328888eea45cSKlaus Jensen } 328988eea45cSKlaus Jensen } 329088eea45cSKlaus Jensen 329188eea45cSKlaus Jensen trace_pci_nvme_read(nvme_cid(req), nvme_nsid(ns), nlb, mapped_size, slba); 329288eea45cSKlaus Jensen 329388eea45cSKlaus Jensen status = nvme_check_mdts(n, mapped_size); 329488eea45cSKlaus Jensen if (status) { 329588eea45cSKlaus Jensen goto invalid; 329688eea45cSKlaus Jensen } 329788eea45cSKlaus Jensen 329888eea45cSKlaus Jensen status = nvme_check_bounds(ns, slba, nlb); 329988eea45cSKlaus Jensen if (status) { 330088eea45cSKlaus Jensen goto invalid; 330188eea45cSKlaus Jensen } 330288eea45cSKlaus Jensen 330388eea45cSKlaus Jensen if (ns->params.zoned) { 330488eea45cSKlaus Jensen status = nvme_check_zone_read(ns, slba, nlb); 330588eea45cSKlaus Jensen if (status) { 330688eea45cSKlaus Jensen trace_pci_nvme_err_zone_read_not_ok(slba, nlb, status); 330788eea45cSKlaus Jensen goto invalid; 330888eea45cSKlaus Jensen } 330988eea45cSKlaus Jensen } 331088eea45cSKlaus Jensen 331188eea45cSKlaus Jensen if (NVME_ERR_REC_DULBE(ns->features.err_rec)) { 331288eea45cSKlaus Jensen status = nvme_check_dulbe(ns, slba, nlb); 331388eea45cSKlaus Jensen if (status) { 331488eea45cSKlaus Jensen goto invalid; 331588eea45cSKlaus Jensen } 331688eea45cSKlaus Jensen } 331788eea45cSKlaus Jensen 331888eea45cSKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 331988eea45cSKlaus Jensen return nvme_dif_rw(n, req); 332088eea45cSKlaus Jensen } 332188eea45cSKlaus Jensen 332288eea45cSKlaus Jensen status = nvme_map_data(n, nlb, req); 332388eea45cSKlaus Jensen if (status) { 332488eea45cSKlaus Jensen goto invalid; 332588eea45cSKlaus Jensen } 332688eea45cSKlaus Jensen 332788eea45cSKlaus Jensen data_offset = nvme_l2b(ns, slba); 332888eea45cSKlaus Jensen 332988eea45cSKlaus Jensen block_acct_start(blk_get_stats(blk), &req->acct, data_size, 333088eea45cSKlaus Jensen BLOCK_ACCT_READ); 333188eea45cSKlaus Jensen nvme_blk_read(blk, data_offset, nvme_rw_cb, req); 333288eea45cSKlaus Jensen return NVME_NO_COMPLETE; 333388eea45cSKlaus Jensen 333488eea45cSKlaus Jensen invalid: 333588eea45cSKlaus Jensen block_acct_invalid(blk_get_stats(blk), BLOCK_ACCT_READ); 333688eea45cSKlaus Jensen return status | NVME_DNR; 333788eea45cSKlaus Jensen } 333888eea45cSKlaus Jensen 333988eea45cSKlaus Jensen static uint16_t nvme_do_write(NvmeCtrl *n, NvmeRequest *req, bool append, 334088eea45cSKlaus Jensen bool wrz) 334188eea45cSKlaus Jensen { 334288eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 334388eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 334488eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 334588eea45cSKlaus Jensen uint32_t nlb = (uint32_t)le16_to_cpu(rw->nlb) + 1; 334688eea45cSKlaus Jensen uint16_t ctrl = le16_to_cpu(rw->control); 33472a132309SKlaus Jensen uint8_t prinfo = NVME_RW_PRINFO(ctrl); 334888eea45cSKlaus Jensen uint64_t data_size = nvme_l2b(ns, nlb); 334988eea45cSKlaus Jensen uint64_t mapped_size = data_size; 335088eea45cSKlaus Jensen uint64_t data_offset; 335188eea45cSKlaus Jensen NvmeZone *zone; 335288eea45cSKlaus Jensen NvmeZonedResult *res = (NvmeZonedResult *)&req->cqe; 335388eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 335488eea45cSKlaus Jensen uint16_t status; 335588eea45cSKlaus Jensen 335688eea45cSKlaus Jensen if (nvme_ns_ext(ns)) { 335788eea45cSKlaus Jensen mapped_size += nvme_m2b(ns, nlb); 335888eea45cSKlaus Jensen 335988eea45cSKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 33602a132309SKlaus Jensen bool pract = prinfo & NVME_PRINFO_PRACT; 336188eea45cSKlaus Jensen 3362ac0b34c5SKlaus Jensen if (pract && ns->lbaf.ms == nvme_pi_tuple_size(ns)) { 336388eea45cSKlaus Jensen mapped_size -= nvme_m2b(ns, nlb); 336488eea45cSKlaus Jensen } 336588eea45cSKlaus Jensen } 336688eea45cSKlaus Jensen } 336788eea45cSKlaus Jensen 336888eea45cSKlaus Jensen trace_pci_nvme_write(nvme_cid(req), nvme_io_opc_str(rw->opcode), 336988eea45cSKlaus Jensen nvme_nsid(ns), nlb, mapped_size, slba); 337088eea45cSKlaus Jensen 337188eea45cSKlaus Jensen if (!wrz) { 337288eea45cSKlaus Jensen status = nvme_check_mdts(n, mapped_size); 337388eea45cSKlaus Jensen if (status) { 337488eea45cSKlaus Jensen goto invalid; 337588eea45cSKlaus Jensen } 337688eea45cSKlaus Jensen } 337788eea45cSKlaus Jensen 337888eea45cSKlaus Jensen status = nvme_check_bounds(ns, slba, nlb); 337988eea45cSKlaus Jensen if (status) { 338088eea45cSKlaus Jensen goto invalid; 338188eea45cSKlaus Jensen } 338288eea45cSKlaus Jensen 338388eea45cSKlaus Jensen if (ns->params.zoned) { 338488eea45cSKlaus Jensen zone = nvme_get_zone_by_slba(ns, slba); 3385189a8bf7SKlaus Jensen assert(zone); 338688eea45cSKlaus Jensen 338788eea45cSKlaus Jensen if (append) { 338888eea45cSKlaus Jensen bool piremap = !!(ctrl & NVME_RW_PIREMAP); 338988eea45cSKlaus Jensen 3390e321b4cdSKlaus Jensen if (unlikely(zone->d.za & NVME_ZA_ZRWA_VALID)) { 3391e321b4cdSKlaus Jensen return NVME_INVALID_ZONE_OP | NVME_DNR; 3392e321b4cdSKlaus Jensen } 3393e321b4cdSKlaus Jensen 339488eea45cSKlaus Jensen if (unlikely(slba != zone->d.zslba)) { 339588eea45cSKlaus Jensen trace_pci_nvme_err_append_not_at_start(slba, zone->d.zslba); 339688eea45cSKlaus Jensen status = NVME_INVALID_FIELD; 339788eea45cSKlaus Jensen goto invalid; 339888eea45cSKlaus Jensen } 339988eea45cSKlaus Jensen 340088eea45cSKlaus Jensen if (n->params.zasl && 340188eea45cSKlaus Jensen data_size > (uint64_t)n->page_size << n->params.zasl) { 340288eea45cSKlaus Jensen trace_pci_nvme_err_zasl(data_size); 340388eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 340488eea45cSKlaus Jensen } 340588eea45cSKlaus Jensen 340688eea45cSKlaus Jensen slba = zone->w_ptr; 340788eea45cSKlaus Jensen rw->slba = cpu_to_le64(slba); 340888eea45cSKlaus Jensen res->slba = cpu_to_le64(slba); 340988eea45cSKlaus Jensen 341088eea45cSKlaus Jensen switch (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 341188eea45cSKlaus Jensen case NVME_ID_NS_DPS_TYPE_1: 341288eea45cSKlaus Jensen if (!piremap) { 341388eea45cSKlaus Jensen return NVME_INVALID_PROT_INFO | NVME_DNR; 341488eea45cSKlaus Jensen } 341588eea45cSKlaus Jensen 341688eea45cSKlaus Jensen /* fallthrough */ 341788eea45cSKlaus Jensen 341888eea45cSKlaus Jensen case NVME_ID_NS_DPS_TYPE_2: 341988eea45cSKlaus Jensen if (piremap) { 342088eea45cSKlaus Jensen uint32_t reftag = le32_to_cpu(rw->reftag); 342188eea45cSKlaus Jensen rw->reftag = cpu_to_le32(reftag + (slba - zone->d.zslba)); 342288eea45cSKlaus Jensen } 342388eea45cSKlaus Jensen 342488eea45cSKlaus Jensen break; 342588eea45cSKlaus Jensen 342688eea45cSKlaus Jensen case NVME_ID_NS_DPS_TYPE_3: 342788eea45cSKlaus Jensen if (piremap) { 342888eea45cSKlaus Jensen return NVME_INVALID_PROT_INFO | NVME_DNR; 342988eea45cSKlaus Jensen } 343088eea45cSKlaus Jensen 343188eea45cSKlaus Jensen break; 343288eea45cSKlaus Jensen } 343388eea45cSKlaus Jensen } 343488eea45cSKlaus Jensen 343588eea45cSKlaus Jensen status = nvme_check_zone_write(ns, zone, slba, nlb); 343688eea45cSKlaus Jensen if (status) { 343788eea45cSKlaus Jensen goto invalid; 343888eea45cSKlaus Jensen } 343988eea45cSKlaus Jensen 3440cccc2651SNiklas Cassel status = nvme_zrm_auto(n, ns, zone); 344188eea45cSKlaus Jensen if (status) { 344288eea45cSKlaus Jensen goto invalid; 344388eea45cSKlaus Jensen } 344488eea45cSKlaus Jensen 3445e321b4cdSKlaus Jensen if (!(zone->d.za & NVME_ZA_ZRWA_VALID)) { 344688eea45cSKlaus Jensen zone->w_ptr += nlb; 344788eea45cSKlaus Jensen } 3448e321b4cdSKlaus Jensen } 344988eea45cSKlaus Jensen 345088eea45cSKlaus Jensen data_offset = nvme_l2b(ns, slba); 345188eea45cSKlaus Jensen 345288eea45cSKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 345388eea45cSKlaus Jensen return nvme_dif_rw(n, req); 345488eea45cSKlaus Jensen } 345588eea45cSKlaus Jensen 345688eea45cSKlaus Jensen if (!wrz) { 345788eea45cSKlaus Jensen status = nvme_map_data(n, nlb, req); 345888eea45cSKlaus Jensen if (status) { 345988eea45cSKlaus Jensen goto invalid; 346088eea45cSKlaus Jensen } 346188eea45cSKlaus Jensen 346288eea45cSKlaus Jensen block_acct_start(blk_get_stats(blk), &req->acct, data_size, 346388eea45cSKlaus Jensen BLOCK_ACCT_WRITE); 346488eea45cSKlaus Jensen nvme_blk_write(blk, data_offset, nvme_rw_cb, req); 346588eea45cSKlaus Jensen } else { 346688eea45cSKlaus Jensen req->aiocb = blk_aio_pwrite_zeroes(blk, data_offset, data_size, 346788eea45cSKlaus Jensen BDRV_REQ_MAY_UNMAP, nvme_rw_cb, 346888eea45cSKlaus Jensen req); 346988eea45cSKlaus Jensen } 347088eea45cSKlaus Jensen 347188eea45cSKlaus Jensen return NVME_NO_COMPLETE; 347288eea45cSKlaus Jensen 347388eea45cSKlaus Jensen invalid: 347488eea45cSKlaus Jensen block_acct_invalid(blk_get_stats(blk), BLOCK_ACCT_WRITE); 347588eea45cSKlaus Jensen return status | NVME_DNR; 347688eea45cSKlaus Jensen } 347788eea45cSKlaus Jensen 347888eea45cSKlaus Jensen static inline uint16_t nvme_write(NvmeCtrl *n, NvmeRequest *req) 347988eea45cSKlaus Jensen { 348088eea45cSKlaus Jensen return nvme_do_write(n, req, false, false); 348188eea45cSKlaus Jensen } 348288eea45cSKlaus Jensen 348388eea45cSKlaus Jensen static inline uint16_t nvme_write_zeroes(NvmeCtrl *n, NvmeRequest *req) 348488eea45cSKlaus Jensen { 348588eea45cSKlaus Jensen return nvme_do_write(n, req, false, true); 348688eea45cSKlaus Jensen } 348788eea45cSKlaus Jensen 348888eea45cSKlaus Jensen static inline uint16_t nvme_zone_append(NvmeCtrl *n, NvmeRequest *req) 348988eea45cSKlaus Jensen { 349088eea45cSKlaus Jensen return nvme_do_write(n, req, true, false); 349188eea45cSKlaus Jensen } 349288eea45cSKlaus Jensen 349388eea45cSKlaus Jensen static uint16_t nvme_get_mgmt_zone_slba_idx(NvmeNamespace *ns, NvmeCmd *c, 349488eea45cSKlaus Jensen uint64_t *slba, uint32_t *zone_idx) 349588eea45cSKlaus Jensen { 349688eea45cSKlaus Jensen uint32_t dw10 = le32_to_cpu(c->cdw10); 349788eea45cSKlaus Jensen uint32_t dw11 = le32_to_cpu(c->cdw11); 349888eea45cSKlaus Jensen 349988eea45cSKlaus Jensen if (!ns->params.zoned) { 350088eea45cSKlaus Jensen trace_pci_nvme_err_invalid_opc(c->opcode); 350188eea45cSKlaus Jensen return NVME_INVALID_OPCODE | NVME_DNR; 350288eea45cSKlaus Jensen } 350388eea45cSKlaus Jensen 350488eea45cSKlaus Jensen *slba = ((uint64_t)dw11) << 32 | dw10; 350588eea45cSKlaus Jensen if (unlikely(*slba >= ns->id_ns.nsze)) { 350688eea45cSKlaus Jensen trace_pci_nvme_err_invalid_lba_range(*slba, 0, ns->id_ns.nsze); 350788eea45cSKlaus Jensen *slba = 0; 350888eea45cSKlaus Jensen return NVME_LBA_RANGE | NVME_DNR; 350988eea45cSKlaus Jensen } 351088eea45cSKlaus Jensen 351188eea45cSKlaus Jensen *zone_idx = nvme_zone_idx(ns, *slba); 351288eea45cSKlaus Jensen assert(*zone_idx < ns->num_zones); 351388eea45cSKlaus Jensen 351488eea45cSKlaus Jensen return NVME_SUCCESS; 351588eea45cSKlaus Jensen } 351688eea45cSKlaus Jensen 351788eea45cSKlaus Jensen typedef uint16_t (*op_handler_t)(NvmeNamespace *, NvmeZone *, NvmeZoneState, 351888eea45cSKlaus Jensen NvmeRequest *); 351988eea45cSKlaus Jensen 352088eea45cSKlaus Jensen enum NvmeZoneProcessingMask { 352188eea45cSKlaus Jensen NVME_PROC_CURRENT_ZONE = 0, 352288eea45cSKlaus Jensen NVME_PROC_OPENED_ZONES = 1 << 0, 352388eea45cSKlaus Jensen NVME_PROC_CLOSED_ZONES = 1 << 1, 352488eea45cSKlaus Jensen NVME_PROC_READ_ONLY_ZONES = 1 << 2, 352588eea45cSKlaus Jensen NVME_PROC_FULL_ZONES = 1 << 3, 352688eea45cSKlaus Jensen }; 352788eea45cSKlaus Jensen 352888eea45cSKlaus Jensen static uint16_t nvme_open_zone(NvmeNamespace *ns, NvmeZone *zone, 352988eea45cSKlaus Jensen NvmeZoneState state, NvmeRequest *req) 353088eea45cSKlaus Jensen { 3531e321b4cdSKlaus Jensen NvmeZoneSendCmd *cmd = (NvmeZoneSendCmd *)&req->cmd; 3532e321b4cdSKlaus Jensen int flags = 0; 3533e321b4cdSKlaus Jensen 3534e321b4cdSKlaus Jensen if (cmd->zsflags & NVME_ZSFLAG_ZRWA_ALLOC) { 3535e321b4cdSKlaus Jensen uint16_t ozcs = le16_to_cpu(ns->id_ns_zoned->ozcs); 3536e321b4cdSKlaus Jensen 3537e321b4cdSKlaus Jensen if (!(ozcs & NVME_ID_NS_ZONED_OZCS_ZRWASUP)) { 3538e321b4cdSKlaus Jensen return NVME_INVALID_ZONE_OP | NVME_DNR; 3539e321b4cdSKlaus Jensen } 3540e321b4cdSKlaus Jensen 3541e321b4cdSKlaus Jensen if (zone->w_ptr % ns->zns.zrwafg) { 3542e321b4cdSKlaus Jensen return NVME_NOZRWA | NVME_DNR; 3543e321b4cdSKlaus Jensen } 3544e321b4cdSKlaus Jensen 3545e321b4cdSKlaus Jensen flags = NVME_ZRM_ZRWA; 3546e321b4cdSKlaus Jensen } 3547e321b4cdSKlaus Jensen 3548e321b4cdSKlaus Jensen return nvme_zrm_open_flags(nvme_ctrl(req), ns, zone, flags); 354988eea45cSKlaus Jensen } 355088eea45cSKlaus Jensen 355188eea45cSKlaus Jensen static uint16_t nvme_close_zone(NvmeNamespace *ns, NvmeZone *zone, 355288eea45cSKlaus Jensen NvmeZoneState state, NvmeRequest *req) 355388eea45cSKlaus Jensen { 355488eea45cSKlaus Jensen return nvme_zrm_close(ns, zone); 355588eea45cSKlaus Jensen } 355688eea45cSKlaus Jensen 355788eea45cSKlaus Jensen static uint16_t nvme_finish_zone(NvmeNamespace *ns, NvmeZone *zone, 355888eea45cSKlaus Jensen NvmeZoneState state, NvmeRequest *req) 355988eea45cSKlaus Jensen { 356088eea45cSKlaus Jensen return nvme_zrm_finish(ns, zone); 356188eea45cSKlaus Jensen } 356288eea45cSKlaus Jensen 356388eea45cSKlaus Jensen static uint16_t nvme_offline_zone(NvmeNamespace *ns, NvmeZone *zone, 356488eea45cSKlaus Jensen NvmeZoneState state, NvmeRequest *req) 356588eea45cSKlaus Jensen { 356688eea45cSKlaus Jensen switch (state) { 356788eea45cSKlaus Jensen case NVME_ZONE_STATE_READ_ONLY: 356888eea45cSKlaus Jensen nvme_assign_zone_state(ns, zone, NVME_ZONE_STATE_OFFLINE); 356988eea45cSKlaus Jensen /* fall through */ 357088eea45cSKlaus Jensen case NVME_ZONE_STATE_OFFLINE: 357188eea45cSKlaus Jensen return NVME_SUCCESS; 357288eea45cSKlaus Jensen default: 357388eea45cSKlaus Jensen return NVME_ZONE_INVAL_TRANSITION; 357488eea45cSKlaus Jensen } 357588eea45cSKlaus Jensen } 357688eea45cSKlaus Jensen 357788eea45cSKlaus Jensen static uint16_t nvme_set_zd_ext(NvmeNamespace *ns, NvmeZone *zone) 357888eea45cSKlaus Jensen { 357988eea45cSKlaus Jensen uint16_t status; 358088eea45cSKlaus Jensen uint8_t state = nvme_get_zone_state(zone); 358188eea45cSKlaus Jensen 358288eea45cSKlaus Jensen if (state == NVME_ZONE_STATE_EMPTY) { 358388eea45cSKlaus Jensen status = nvme_aor_check(ns, 1, 0); 358488eea45cSKlaus Jensen if (status) { 358588eea45cSKlaus Jensen return status; 358688eea45cSKlaus Jensen } 358788eea45cSKlaus Jensen nvme_aor_inc_active(ns); 358888eea45cSKlaus Jensen zone->d.za |= NVME_ZA_ZD_EXT_VALID; 358988eea45cSKlaus Jensen nvme_assign_zone_state(ns, zone, NVME_ZONE_STATE_CLOSED); 359088eea45cSKlaus Jensen return NVME_SUCCESS; 359188eea45cSKlaus Jensen } 359288eea45cSKlaus Jensen 359388eea45cSKlaus Jensen return NVME_ZONE_INVAL_TRANSITION; 359488eea45cSKlaus Jensen } 359588eea45cSKlaus Jensen 359688eea45cSKlaus Jensen static uint16_t nvme_bulk_proc_zone(NvmeNamespace *ns, NvmeZone *zone, 359788eea45cSKlaus Jensen enum NvmeZoneProcessingMask proc_mask, 359888eea45cSKlaus Jensen op_handler_t op_hndlr, NvmeRequest *req) 359988eea45cSKlaus Jensen { 360088eea45cSKlaus Jensen uint16_t status = NVME_SUCCESS; 360188eea45cSKlaus Jensen NvmeZoneState zs = nvme_get_zone_state(zone); 360288eea45cSKlaus Jensen bool proc_zone; 360388eea45cSKlaus Jensen 360488eea45cSKlaus Jensen switch (zs) { 360588eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 360688eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 360788eea45cSKlaus Jensen proc_zone = proc_mask & NVME_PROC_OPENED_ZONES; 360888eea45cSKlaus Jensen break; 360988eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 361088eea45cSKlaus Jensen proc_zone = proc_mask & NVME_PROC_CLOSED_ZONES; 361188eea45cSKlaus Jensen break; 361288eea45cSKlaus Jensen case NVME_ZONE_STATE_READ_ONLY: 361388eea45cSKlaus Jensen proc_zone = proc_mask & NVME_PROC_READ_ONLY_ZONES; 361488eea45cSKlaus Jensen break; 361588eea45cSKlaus Jensen case NVME_ZONE_STATE_FULL: 361688eea45cSKlaus Jensen proc_zone = proc_mask & NVME_PROC_FULL_ZONES; 361788eea45cSKlaus Jensen break; 361888eea45cSKlaus Jensen default: 361988eea45cSKlaus Jensen proc_zone = false; 362088eea45cSKlaus Jensen } 362188eea45cSKlaus Jensen 362288eea45cSKlaus Jensen if (proc_zone) { 362388eea45cSKlaus Jensen status = op_hndlr(ns, zone, zs, req); 362488eea45cSKlaus Jensen } 362588eea45cSKlaus Jensen 362688eea45cSKlaus Jensen return status; 362788eea45cSKlaus Jensen } 362888eea45cSKlaus Jensen 362988eea45cSKlaus Jensen static uint16_t nvme_do_zone_op(NvmeNamespace *ns, NvmeZone *zone, 363088eea45cSKlaus Jensen enum NvmeZoneProcessingMask proc_mask, 363188eea45cSKlaus Jensen op_handler_t op_hndlr, NvmeRequest *req) 363288eea45cSKlaus Jensen { 363388eea45cSKlaus Jensen NvmeZone *next; 363488eea45cSKlaus Jensen uint16_t status = NVME_SUCCESS; 363588eea45cSKlaus Jensen int i; 363688eea45cSKlaus Jensen 363788eea45cSKlaus Jensen if (!proc_mask) { 363888eea45cSKlaus Jensen status = op_hndlr(ns, zone, nvme_get_zone_state(zone), req); 363988eea45cSKlaus Jensen } else { 364088eea45cSKlaus Jensen if (proc_mask & NVME_PROC_CLOSED_ZONES) { 364188eea45cSKlaus Jensen QTAILQ_FOREACH_SAFE(zone, &ns->closed_zones, entry, next) { 364288eea45cSKlaus Jensen status = nvme_bulk_proc_zone(ns, zone, proc_mask, op_hndlr, 364388eea45cSKlaus Jensen req); 364488eea45cSKlaus Jensen if (status && status != NVME_NO_COMPLETE) { 364588eea45cSKlaus Jensen goto out; 364688eea45cSKlaus Jensen } 364788eea45cSKlaus Jensen } 364888eea45cSKlaus Jensen } 364988eea45cSKlaus Jensen if (proc_mask & NVME_PROC_OPENED_ZONES) { 365088eea45cSKlaus Jensen QTAILQ_FOREACH_SAFE(zone, &ns->imp_open_zones, entry, next) { 365188eea45cSKlaus Jensen status = nvme_bulk_proc_zone(ns, zone, proc_mask, op_hndlr, 365288eea45cSKlaus Jensen req); 365388eea45cSKlaus Jensen if (status && status != NVME_NO_COMPLETE) { 365488eea45cSKlaus Jensen goto out; 365588eea45cSKlaus Jensen } 365688eea45cSKlaus Jensen } 365788eea45cSKlaus Jensen 365888eea45cSKlaus Jensen QTAILQ_FOREACH_SAFE(zone, &ns->exp_open_zones, entry, next) { 365988eea45cSKlaus Jensen status = nvme_bulk_proc_zone(ns, zone, proc_mask, op_hndlr, 366088eea45cSKlaus Jensen req); 366188eea45cSKlaus Jensen if (status && status != NVME_NO_COMPLETE) { 366288eea45cSKlaus Jensen goto out; 366388eea45cSKlaus Jensen } 366488eea45cSKlaus Jensen } 366588eea45cSKlaus Jensen } 366688eea45cSKlaus Jensen if (proc_mask & NVME_PROC_FULL_ZONES) { 366788eea45cSKlaus Jensen QTAILQ_FOREACH_SAFE(zone, &ns->full_zones, entry, next) { 366888eea45cSKlaus Jensen status = nvme_bulk_proc_zone(ns, zone, proc_mask, op_hndlr, 366988eea45cSKlaus Jensen req); 367088eea45cSKlaus Jensen if (status && status != NVME_NO_COMPLETE) { 367188eea45cSKlaus Jensen goto out; 367288eea45cSKlaus Jensen } 367388eea45cSKlaus Jensen } 367488eea45cSKlaus Jensen } 367588eea45cSKlaus Jensen 367688eea45cSKlaus Jensen if (proc_mask & NVME_PROC_READ_ONLY_ZONES) { 367788eea45cSKlaus Jensen for (i = 0; i < ns->num_zones; i++, zone++) { 367888eea45cSKlaus Jensen status = nvme_bulk_proc_zone(ns, zone, proc_mask, op_hndlr, 367988eea45cSKlaus Jensen req); 368088eea45cSKlaus Jensen if (status && status != NVME_NO_COMPLETE) { 368188eea45cSKlaus Jensen goto out; 368288eea45cSKlaus Jensen } 368388eea45cSKlaus Jensen } 368488eea45cSKlaus Jensen } 368588eea45cSKlaus Jensen } 368688eea45cSKlaus Jensen 368788eea45cSKlaus Jensen out: 368888eea45cSKlaus Jensen return status; 368988eea45cSKlaus Jensen } 369088eea45cSKlaus Jensen 369163d96e4fSKlaus Jensen typedef struct NvmeZoneResetAIOCB { 369263d96e4fSKlaus Jensen BlockAIOCB common; 369363d96e4fSKlaus Jensen BlockAIOCB *aiocb; 369463d96e4fSKlaus Jensen NvmeRequest *req; 369563d96e4fSKlaus Jensen QEMUBH *bh; 369663d96e4fSKlaus Jensen int ret; 369763d96e4fSKlaus Jensen 369863d96e4fSKlaus Jensen bool all; 369963d96e4fSKlaus Jensen int idx; 370063d96e4fSKlaus Jensen NvmeZone *zone; 370163d96e4fSKlaus Jensen } NvmeZoneResetAIOCB; 370263d96e4fSKlaus Jensen 370363d96e4fSKlaus Jensen static void nvme_zone_reset_cancel(BlockAIOCB *aiocb) 370463d96e4fSKlaus Jensen { 370563d96e4fSKlaus Jensen NvmeZoneResetAIOCB *iocb = container_of(aiocb, NvmeZoneResetAIOCB, common); 370663d96e4fSKlaus Jensen NvmeRequest *req = iocb->req; 370763d96e4fSKlaus Jensen NvmeNamespace *ns = req->ns; 370863d96e4fSKlaus Jensen 370963d96e4fSKlaus Jensen iocb->idx = ns->num_zones; 371063d96e4fSKlaus Jensen 371163d96e4fSKlaus Jensen iocb->ret = -ECANCELED; 371263d96e4fSKlaus Jensen 371363d96e4fSKlaus Jensen if (iocb->aiocb) { 371463d96e4fSKlaus Jensen blk_aio_cancel_async(iocb->aiocb); 371563d96e4fSKlaus Jensen iocb->aiocb = NULL; 371663d96e4fSKlaus Jensen } 371763d96e4fSKlaus Jensen } 371863d96e4fSKlaus Jensen 371963d96e4fSKlaus Jensen static const AIOCBInfo nvme_zone_reset_aiocb_info = { 372063d96e4fSKlaus Jensen .aiocb_size = sizeof(NvmeZoneResetAIOCB), 372163d96e4fSKlaus Jensen .cancel_async = nvme_zone_reset_cancel, 372263d96e4fSKlaus Jensen }; 372363d96e4fSKlaus Jensen 372463d96e4fSKlaus Jensen static void nvme_zone_reset_bh(void *opaque) 372563d96e4fSKlaus Jensen { 372663d96e4fSKlaus Jensen NvmeZoneResetAIOCB *iocb = opaque; 372763d96e4fSKlaus Jensen 372863d96e4fSKlaus Jensen iocb->common.cb(iocb->common.opaque, iocb->ret); 372963d96e4fSKlaus Jensen 373063d96e4fSKlaus Jensen qemu_bh_delete(iocb->bh); 373163d96e4fSKlaus Jensen iocb->bh = NULL; 373263d96e4fSKlaus Jensen qemu_aio_unref(iocb); 373363d96e4fSKlaus Jensen } 373463d96e4fSKlaus Jensen 373563d96e4fSKlaus Jensen static void nvme_zone_reset_cb(void *opaque, int ret); 373663d96e4fSKlaus Jensen 373763d96e4fSKlaus Jensen static void nvme_zone_reset_epilogue_cb(void *opaque, int ret) 373863d96e4fSKlaus Jensen { 373963d96e4fSKlaus Jensen NvmeZoneResetAIOCB *iocb = opaque; 374063d96e4fSKlaus Jensen NvmeRequest *req = iocb->req; 374163d96e4fSKlaus Jensen NvmeNamespace *ns = req->ns; 374263d96e4fSKlaus Jensen int64_t moff; 374363d96e4fSKlaus Jensen int count; 374463d96e4fSKlaus Jensen 374563d96e4fSKlaus Jensen if (ret < 0) { 374663d96e4fSKlaus Jensen nvme_zone_reset_cb(iocb, ret); 374763d96e4fSKlaus Jensen return; 374863d96e4fSKlaus Jensen } 374963d96e4fSKlaus Jensen 375063d96e4fSKlaus Jensen if (!ns->lbaf.ms) { 375163d96e4fSKlaus Jensen nvme_zone_reset_cb(iocb, 0); 375263d96e4fSKlaus Jensen return; 375363d96e4fSKlaus Jensen } 375463d96e4fSKlaus Jensen 375563d96e4fSKlaus Jensen moff = nvme_moff(ns, iocb->zone->d.zslba); 375663d96e4fSKlaus Jensen count = nvme_m2b(ns, ns->zone_size); 375763d96e4fSKlaus Jensen 375863d96e4fSKlaus Jensen iocb->aiocb = blk_aio_pwrite_zeroes(ns->blkconf.blk, moff, count, 375963d96e4fSKlaus Jensen BDRV_REQ_MAY_UNMAP, 376063d96e4fSKlaus Jensen nvme_zone_reset_cb, iocb); 376163d96e4fSKlaus Jensen return; 376263d96e4fSKlaus Jensen } 376363d96e4fSKlaus Jensen 376463d96e4fSKlaus Jensen static void nvme_zone_reset_cb(void *opaque, int ret) 376563d96e4fSKlaus Jensen { 376663d96e4fSKlaus Jensen NvmeZoneResetAIOCB *iocb = opaque; 376763d96e4fSKlaus Jensen NvmeRequest *req = iocb->req; 376863d96e4fSKlaus Jensen NvmeNamespace *ns = req->ns; 376963d96e4fSKlaus Jensen 377063d96e4fSKlaus Jensen if (ret < 0) { 377163d96e4fSKlaus Jensen iocb->ret = ret; 377263d96e4fSKlaus Jensen goto done; 377363d96e4fSKlaus Jensen } 377463d96e4fSKlaus Jensen 377563d96e4fSKlaus Jensen if (iocb->zone) { 377663d96e4fSKlaus Jensen nvme_zrm_reset(ns, iocb->zone); 377763d96e4fSKlaus Jensen 377863d96e4fSKlaus Jensen if (!iocb->all) { 377963d96e4fSKlaus Jensen goto done; 378063d96e4fSKlaus Jensen } 378163d96e4fSKlaus Jensen } 378263d96e4fSKlaus Jensen 378363d96e4fSKlaus Jensen while (iocb->idx < ns->num_zones) { 378463d96e4fSKlaus Jensen NvmeZone *zone = &ns->zone_array[iocb->idx++]; 378563d96e4fSKlaus Jensen 378663d96e4fSKlaus Jensen switch (nvme_get_zone_state(zone)) { 378763d96e4fSKlaus Jensen case NVME_ZONE_STATE_EMPTY: 378863d96e4fSKlaus Jensen if (!iocb->all) { 378963d96e4fSKlaus Jensen goto done; 379063d96e4fSKlaus Jensen } 379163d96e4fSKlaus Jensen 379263d96e4fSKlaus Jensen continue; 379363d96e4fSKlaus Jensen 379463d96e4fSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 379563d96e4fSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 379663d96e4fSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 379763d96e4fSKlaus Jensen case NVME_ZONE_STATE_FULL: 379863d96e4fSKlaus Jensen iocb->zone = zone; 379963d96e4fSKlaus Jensen break; 380063d96e4fSKlaus Jensen 380163d96e4fSKlaus Jensen default: 380263d96e4fSKlaus Jensen continue; 380363d96e4fSKlaus Jensen } 380463d96e4fSKlaus Jensen 380563d96e4fSKlaus Jensen trace_pci_nvme_zns_zone_reset(zone->d.zslba); 380663d96e4fSKlaus Jensen 380763d96e4fSKlaus Jensen iocb->aiocb = blk_aio_pwrite_zeroes(ns->blkconf.blk, 380863d96e4fSKlaus Jensen nvme_l2b(ns, zone->d.zslba), 380963d96e4fSKlaus Jensen nvme_l2b(ns, ns->zone_size), 381063d96e4fSKlaus Jensen BDRV_REQ_MAY_UNMAP, 381163d96e4fSKlaus Jensen nvme_zone_reset_epilogue_cb, 381263d96e4fSKlaus Jensen iocb); 381363d96e4fSKlaus Jensen return; 381463d96e4fSKlaus Jensen } 381563d96e4fSKlaus Jensen 381663d96e4fSKlaus Jensen done: 381763d96e4fSKlaus Jensen iocb->aiocb = NULL; 381863d96e4fSKlaus Jensen if (iocb->bh) { 381963d96e4fSKlaus Jensen qemu_bh_schedule(iocb->bh); 382063d96e4fSKlaus Jensen } 382163d96e4fSKlaus Jensen } 382263d96e4fSKlaus Jensen 3823e321b4cdSKlaus Jensen static uint16_t nvme_zone_mgmt_send_zrwa_flush(NvmeCtrl *n, NvmeZone *zone, 3824e321b4cdSKlaus Jensen uint64_t elba, NvmeRequest *req) 3825e321b4cdSKlaus Jensen { 3826e321b4cdSKlaus Jensen NvmeNamespace *ns = req->ns; 3827e321b4cdSKlaus Jensen uint16_t ozcs = le16_to_cpu(ns->id_ns_zoned->ozcs); 3828e321b4cdSKlaus Jensen uint64_t wp = zone->d.wp; 3829e321b4cdSKlaus Jensen uint32_t nlb = elba - wp + 1; 3830e321b4cdSKlaus Jensen uint16_t status; 3831e321b4cdSKlaus Jensen 3832e321b4cdSKlaus Jensen 3833e321b4cdSKlaus Jensen if (!(ozcs & NVME_ID_NS_ZONED_OZCS_ZRWASUP)) { 3834e321b4cdSKlaus Jensen return NVME_INVALID_ZONE_OP | NVME_DNR; 3835e321b4cdSKlaus Jensen } 3836e321b4cdSKlaus Jensen 3837e321b4cdSKlaus Jensen if (!(zone->d.za & NVME_ZA_ZRWA_VALID)) { 3838e321b4cdSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 3839e321b4cdSKlaus Jensen } 3840e321b4cdSKlaus Jensen 3841e321b4cdSKlaus Jensen if (elba < wp || elba > wp + ns->zns.zrwas) { 3842e321b4cdSKlaus Jensen return NVME_ZONE_BOUNDARY_ERROR | NVME_DNR; 3843e321b4cdSKlaus Jensen } 3844e321b4cdSKlaus Jensen 3845e321b4cdSKlaus Jensen if (nlb % ns->zns.zrwafg) { 3846e321b4cdSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 3847e321b4cdSKlaus Jensen } 3848e321b4cdSKlaus Jensen 3849e321b4cdSKlaus Jensen status = nvme_zrm_auto(n, ns, zone); 3850e321b4cdSKlaus Jensen if (status) { 3851e321b4cdSKlaus Jensen return status; 3852e321b4cdSKlaus Jensen } 3853e321b4cdSKlaus Jensen 3854e321b4cdSKlaus Jensen zone->w_ptr += nlb; 3855e321b4cdSKlaus Jensen 3856e321b4cdSKlaus Jensen nvme_advance_zone_wp(ns, zone, nlb); 3857e321b4cdSKlaus Jensen 3858e321b4cdSKlaus Jensen return NVME_SUCCESS; 3859e321b4cdSKlaus Jensen } 3860e321b4cdSKlaus Jensen 386188eea45cSKlaus Jensen static uint16_t nvme_zone_mgmt_send(NvmeCtrl *n, NvmeRequest *req) 386288eea45cSKlaus Jensen { 38636190d92fSKlaus Jensen NvmeZoneSendCmd *cmd = (NvmeZoneSendCmd *)&req->cmd; 386488eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 386588eea45cSKlaus Jensen NvmeZone *zone; 386663d96e4fSKlaus Jensen NvmeZoneResetAIOCB *iocb; 386788eea45cSKlaus Jensen uint8_t *zd_ext; 386888eea45cSKlaus Jensen uint64_t slba = 0; 386988eea45cSKlaus Jensen uint32_t zone_idx = 0; 387088eea45cSKlaus Jensen uint16_t status; 38716190d92fSKlaus Jensen uint8_t action = cmd->zsa; 387288eea45cSKlaus Jensen bool all; 387388eea45cSKlaus Jensen enum NvmeZoneProcessingMask proc_mask = NVME_PROC_CURRENT_ZONE; 387488eea45cSKlaus Jensen 38756190d92fSKlaus Jensen all = cmd->zsflags & NVME_ZSFLAG_SELECT_ALL; 387688eea45cSKlaus Jensen 387788eea45cSKlaus Jensen req->status = NVME_SUCCESS; 387888eea45cSKlaus Jensen 387988eea45cSKlaus Jensen if (!all) { 38806190d92fSKlaus Jensen status = nvme_get_mgmt_zone_slba_idx(ns, &req->cmd, &slba, &zone_idx); 388188eea45cSKlaus Jensen if (status) { 388288eea45cSKlaus Jensen return status; 388388eea45cSKlaus Jensen } 388488eea45cSKlaus Jensen } 388588eea45cSKlaus Jensen 388688eea45cSKlaus Jensen zone = &ns->zone_array[zone_idx]; 3887e321b4cdSKlaus Jensen if (slba != zone->d.zslba && action != NVME_ZONE_ACTION_ZRWA_FLUSH) { 388888eea45cSKlaus Jensen trace_pci_nvme_err_unaligned_zone_cmd(action, slba, zone->d.zslba); 388988eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 389088eea45cSKlaus Jensen } 389188eea45cSKlaus Jensen 389288eea45cSKlaus Jensen switch (action) { 389388eea45cSKlaus Jensen 389488eea45cSKlaus Jensen case NVME_ZONE_ACTION_OPEN: 389588eea45cSKlaus Jensen if (all) { 389688eea45cSKlaus Jensen proc_mask = NVME_PROC_CLOSED_ZONES; 389788eea45cSKlaus Jensen } 389888eea45cSKlaus Jensen trace_pci_nvme_open_zone(slba, zone_idx, all); 389988eea45cSKlaus Jensen status = nvme_do_zone_op(ns, zone, proc_mask, nvme_open_zone, req); 390088eea45cSKlaus Jensen break; 390188eea45cSKlaus Jensen 390288eea45cSKlaus Jensen case NVME_ZONE_ACTION_CLOSE: 390388eea45cSKlaus Jensen if (all) { 390488eea45cSKlaus Jensen proc_mask = NVME_PROC_OPENED_ZONES; 390588eea45cSKlaus Jensen } 390688eea45cSKlaus Jensen trace_pci_nvme_close_zone(slba, zone_idx, all); 390788eea45cSKlaus Jensen status = nvme_do_zone_op(ns, zone, proc_mask, nvme_close_zone, req); 390888eea45cSKlaus Jensen break; 390988eea45cSKlaus Jensen 391088eea45cSKlaus Jensen case NVME_ZONE_ACTION_FINISH: 391188eea45cSKlaus Jensen if (all) { 391288eea45cSKlaus Jensen proc_mask = NVME_PROC_OPENED_ZONES | NVME_PROC_CLOSED_ZONES; 391388eea45cSKlaus Jensen } 391488eea45cSKlaus Jensen trace_pci_nvme_finish_zone(slba, zone_idx, all); 391588eea45cSKlaus Jensen status = nvme_do_zone_op(ns, zone, proc_mask, nvme_finish_zone, req); 391688eea45cSKlaus Jensen break; 391788eea45cSKlaus Jensen 391888eea45cSKlaus Jensen case NVME_ZONE_ACTION_RESET: 391988eea45cSKlaus Jensen trace_pci_nvme_reset_zone(slba, zone_idx, all); 392088eea45cSKlaus Jensen 392163d96e4fSKlaus Jensen iocb = blk_aio_get(&nvme_zone_reset_aiocb_info, ns->blkconf.blk, 392263d96e4fSKlaus Jensen nvme_misc_cb, req); 392388eea45cSKlaus Jensen 392463d96e4fSKlaus Jensen iocb->req = req; 392563d96e4fSKlaus Jensen iocb->bh = qemu_bh_new(nvme_zone_reset_bh, iocb); 392663d96e4fSKlaus Jensen iocb->ret = 0; 392763d96e4fSKlaus Jensen iocb->all = all; 392863d96e4fSKlaus Jensen iocb->idx = zone_idx; 392963d96e4fSKlaus Jensen iocb->zone = NULL; 393088eea45cSKlaus Jensen 393163d96e4fSKlaus Jensen req->aiocb = &iocb->common; 393263d96e4fSKlaus Jensen nvme_zone_reset_cb(iocb, 0); 393388eea45cSKlaus Jensen 393463d96e4fSKlaus Jensen return NVME_NO_COMPLETE; 393588eea45cSKlaus Jensen 393688eea45cSKlaus Jensen case NVME_ZONE_ACTION_OFFLINE: 393788eea45cSKlaus Jensen if (all) { 393888eea45cSKlaus Jensen proc_mask = NVME_PROC_READ_ONLY_ZONES; 393988eea45cSKlaus Jensen } 394088eea45cSKlaus Jensen trace_pci_nvme_offline_zone(slba, zone_idx, all); 394188eea45cSKlaus Jensen status = nvme_do_zone_op(ns, zone, proc_mask, nvme_offline_zone, req); 394288eea45cSKlaus Jensen break; 394388eea45cSKlaus Jensen 394488eea45cSKlaus Jensen case NVME_ZONE_ACTION_SET_ZD_EXT: 394588eea45cSKlaus Jensen trace_pci_nvme_set_descriptor_extension(slba, zone_idx); 394688eea45cSKlaus Jensen if (all || !ns->params.zd_extension_size) { 394788eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 394888eea45cSKlaus Jensen } 394988eea45cSKlaus Jensen zd_ext = nvme_get_zd_extension(ns, zone_idx); 395088eea45cSKlaus Jensen status = nvme_h2c(n, zd_ext, ns->params.zd_extension_size, req); 395188eea45cSKlaus Jensen if (status) { 395288eea45cSKlaus Jensen trace_pci_nvme_err_zd_extension_map_error(zone_idx); 395388eea45cSKlaus Jensen return status; 395488eea45cSKlaus Jensen } 395588eea45cSKlaus Jensen 395688eea45cSKlaus Jensen status = nvme_set_zd_ext(ns, zone); 395788eea45cSKlaus Jensen if (status == NVME_SUCCESS) { 395888eea45cSKlaus Jensen trace_pci_nvme_zd_extension_set(zone_idx); 395988eea45cSKlaus Jensen return status; 396088eea45cSKlaus Jensen } 396188eea45cSKlaus Jensen break; 396288eea45cSKlaus Jensen 3963e321b4cdSKlaus Jensen case NVME_ZONE_ACTION_ZRWA_FLUSH: 3964e321b4cdSKlaus Jensen if (all) { 3965e321b4cdSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 3966e321b4cdSKlaus Jensen } 3967e321b4cdSKlaus Jensen 3968e321b4cdSKlaus Jensen return nvme_zone_mgmt_send_zrwa_flush(n, zone, slba, req); 3969e321b4cdSKlaus Jensen 397088eea45cSKlaus Jensen default: 397188eea45cSKlaus Jensen trace_pci_nvme_err_invalid_mgmt_action(action); 397288eea45cSKlaus Jensen status = NVME_INVALID_FIELD; 397388eea45cSKlaus Jensen } 397488eea45cSKlaus Jensen 397588eea45cSKlaus Jensen if (status == NVME_ZONE_INVAL_TRANSITION) { 397688eea45cSKlaus Jensen trace_pci_nvme_err_invalid_zone_state_transition(action, slba, 397788eea45cSKlaus Jensen zone->d.za); 397888eea45cSKlaus Jensen } 397988eea45cSKlaus Jensen if (status) { 398088eea45cSKlaus Jensen status |= NVME_DNR; 398188eea45cSKlaus Jensen } 398288eea45cSKlaus Jensen 398388eea45cSKlaus Jensen return status; 398488eea45cSKlaus Jensen } 398588eea45cSKlaus Jensen 398688eea45cSKlaus Jensen static bool nvme_zone_matches_filter(uint32_t zafs, NvmeZone *zl) 398788eea45cSKlaus Jensen { 398888eea45cSKlaus Jensen NvmeZoneState zs = nvme_get_zone_state(zl); 398988eea45cSKlaus Jensen 399088eea45cSKlaus Jensen switch (zafs) { 399188eea45cSKlaus Jensen case NVME_ZONE_REPORT_ALL: 399288eea45cSKlaus Jensen return true; 399388eea45cSKlaus Jensen case NVME_ZONE_REPORT_EMPTY: 399488eea45cSKlaus Jensen return zs == NVME_ZONE_STATE_EMPTY; 399588eea45cSKlaus Jensen case NVME_ZONE_REPORT_IMPLICITLY_OPEN: 399688eea45cSKlaus Jensen return zs == NVME_ZONE_STATE_IMPLICITLY_OPEN; 399788eea45cSKlaus Jensen case NVME_ZONE_REPORT_EXPLICITLY_OPEN: 399888eea45cSKlaus Jensen return zs == NVME_ZONE_STATE_EXPLICITLY_OPEN; 399988eea45cSKlaus Jensen case NVME_ZONE_REPORT_CLOSED: 400088eea45cSKlaus Jensen return zs == NVME_ZONE_STATE_CLOSED; 400188eea45cSKlaus Jensen case NVME_ZONE_REPORT_FULL: 400288eea45cSKlaus Jensen return zs == NVME_ZONE_STATE_FULL; 400388eea45cSKlaus Jensen case NVME_ZONE_REPORT_READ_ONLY: 400488eea45cSKlaus Jensen return zs == NVME_ZONE_STATE_READ_ONLY; 400588eea45cSKlaus Jensen case NVME_ZONE_REPORT_OFFLINE: 400688eea45cSKlaus Jensen return zs == NVME_ZONE_STATE_OFFLINE; 400788eea45cSKlaus Jensen default: 400888eea45cSKlaus Jensen return false; 400988eea45cSKlaus Jensen } 401088eea45cSKlaus Jensen } 401188eea45cSKlaus Jensen 401288eea45cSKlaus Jensen static uint16_t nvme_zone_mgmt_recv(NvmeCtrl *n, NvmeRequest *req) 401388eea45cSKlaus Jensen { 401488eea45cSKlaus Jensen NvmeCmd *cmd = (NvmeCmd *)&req->cmd; 401588eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 401688eea45cSKlaus Jensen /* cdw12 is zero-based number of dwords to return. Convert to bytes */ 401788eea45cSKlaus Jensen uint32_t data_size = (le32_to_cpu(cmd->cdw12) + 1) << 2; 401888eea45cSKlaus Jensen uint32_t dw13 = le32_to_cpu(cmd->cdw13); 401988eea45cSKlaus Jensen uint32_t zone_idx, zra, zrasf, partial; 402088eea45cSKlaus Jensen uint64_t max_zones, nr_zones = 0; 402188eea45cSKlaus Jensen uint16_t status; 402288eea45cSKlaus Jensen uint64_t slba; 402388eea45cSKlaus Jensen NvmeZoneDescr *z; 402488eea45cSKlaus Jensen NvmeZone *zone; 402588eea45cSKlaus Jensen NvmeZoneReportHeader *header; 402688eea45cSKlaus Jensen void *buf, *buf_p; 402788eea45cSKlaus Jensen size_t zone_entry_sz; 402888eea45cSKlaus Jensen int i; 402988eea45cSKlaus Jensen 403088eea45cSKlaus Jensen req->status = NVME_SUCCESS; 403188eea45cSKlaus Jensen 403288eea45cSKlaus Jensen status = nvme_get_mgmt_zone_slba_idx(ns, cmd, &slba, &zone_idx); 403388eea45cSKlaus Jensen if (status) { 403488eea45cSKlaus Jensen return status; 403588eea45cSKlaus Jensen } 403688eea45cSKlaus Jensen 403788eea45cSKlaus Jensen zra = dw13 & 0xff; 403888eea45cSKlaus Jensen if (zra != NVME_ZONE_REPORT && zra != NVME_ZONE_REPORT_EXTENDED) { 403988eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 404088eea45cSKlaus Jensen } 404188eea45cSKlaus Jensen if (zra == NVME_ZONE_REPORT_EXTENDED && !ns->params.zd_extension_size) { 404288eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 404388eea45cSKlaus Jensen } 404488eea45cSKlaus Jensen 404588eea45cSKlaus Jensen zrasf = (dw13 >> 8) & 0xff; 404688eea45cSKlaus Jensen if (zrasf > NVME_ZONE_REPORT_OFFLINE) { 404788eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 404888eea45cSKlaus Jensen } 404988eea45cSKlaus Jensen 405088eea45cSKlaus Jensen if (data_size < sizeof(NvmeZoneReportHeader)) { 405188eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 405288eea45cSKlaus Jensen } 405388eea45cSKlaus Jensen 405488eea45cSKlaus Jensen status = nvme_check_mdts(n, data_size); 405588eea45cSKlaus Jensen if (status) { 405688eea45cSKlaus Jensen return status; 405788eea45cSKlaus Jensen } 405888eea45cSKlaus Jensen 405988eea45cSKlaus Jensen partial = (dw13 >> 16) & 0x01; 406088eea45cSKlaus Jensen 406188eea45cSKlaus Jensen zone_entry_sz = sizeof(NvmeZoneDescr); 406288eea45cSKlaus Jensen if (zra == NVME_ZONE_REPORT_EXTENDED) { 406388eea45cSKlaus Jensen zone_entry_sz += ns->params.zd_extension_size; 406488eea45cSKlaus Jensen } 406588eea45cSKlaus Jensen 406688eea45cSKlaus Jensen max_zones = (data_size - sizeof(NvmeZoneReportHeader)) / zone_entry_sz; 406788eea45cSKlaus Jensen buf = g_malloc0(data_size); 406888eea45cSKlaus Jensen 406988eea45cSKlaus Jensen zone = &ns->zone_array[zone_idx]; 407088eea45cSKlaus Jensen for (i = zone_idx; i < ns->num_zones; i++) { 407188eea45cSKlaus Jensen if (partial && nr_zones >= max_zones) { 407288eea45cSKlaus Jensen break; 407388eea45cSKlaus Jensen } 407488eea45cSKlaus Jensen if (nvme_zone_matches_filter(zrasf, zone++)) { 407588eea45cSKlaus Jensen nr_zones++; 407688eea45cSKlaus Jensen } 407788eea45cSKlaus Jensen } 407888eea45cSKlaus Jensen header = (NvmeZoneReportHeader *)buf; 407988eea45cSKlaus Jensen header->nr_zones = cpu_to_le64(nr_zones); 408088eea45cSKlaus Jensen 408188eea45cSKlaus Jensen buf_p = buf + sizeof(NvmeZoneReportHeader); 408288eea45cSKlaus Jensen for (; zone_idx < ns->num_zones && max_zones > 0; zone_idx++) { 408388eea45cSKlaus Jensen zone = &ns->zone_array[zone_idx]; 408488eea45cSKlaus Jensen if (nvme_zone_matches_filter(zrasf, zone)) { 408588eea45cSKlaus Jensen z = (NvmeZoneDescr *)buf_p; 408688eea45cSKlaus Jensen buf_p += sizeof(NvmeZoneDescr); 408788eea45cSKlaus Jensen 408888eea45cSKlaus Jensen z->zt = zone->d.zt; 408988eea45cSKlaus Jensen z->zs = zone->d.zs; 409088eea45cSKlaus Jensen z->zcap = cpu_to_le64(zone->d.zcap); 409188eea45cSKlaus Jensen z->zslba = cpu_to_le64(zone->d.zslba); 409288eea45cSKlaus Jensen z->za = zone->d.za; 409388eea45cSKlaus Jensen 409488eea45cSKlaus Jensen if (nvme_wp_is_valid(zone)) { 409588eea45cSKlaus Jensen z->wp = cpu_to_le64(zone->d.wp); 409688eea45cSKlaus Jensen } else { 409788eea45cSKlaus Jensen z->wp = cpu_to_le64(~0ULL); 409888eea45cSKlaus Jensen } 409988eea45cSKlaus Jensen 410088eea45cSKlaus Jensen if (zra == NVME_ZONE_REPORT_EXTENDED) { 410188eea45cSKlaus Jensen if (zone->d.za & NVME_ZA_ZD_EXT_VALID) { 410288eea45cSKlaus Jensen memcpy(buf_p, nvme_get_zd_extension(ns, zone_idx), 410388eea45cSKlaus Jensen ns->params.zd_extension_size); 410488eea45cSKlaus Jensen } 410588eea45cSKlaus Jensen buf_p += ns->params.zd_extension_size; 410688eea45cSKlaus Jensen } 410788eea45cSKlaus Jensen 410888eea45cSKlaus Jensen max_zones--; 410988eea45cSKlaus Jensen } 411088eea45cSKlaus Jensen } 411188eea45cSKlaus Jensen 411288eea45cSKlaus Jensen status = nvme_c2h(n, (uint8_t *)buf, data_size, req); 411388eea45cSKlaus Jensen 411488eea45cSKlaus Jensen g_free(buf); 411588eea45cSKlaus Jensen 411688eea45cSKlaus Jensen return status; 411788eea45cSKlaus Jensen } 411888eea45cSKlaus Jensen 411988eea45cSKlaus Jensen static uint16_t nvme_io_cmd(NvmeCtrl *n, NvmeRequest *req) 412088eea45cSKlaus Jensen { 412188eea45cSKlaus Jensen NvmeNamespace *ns; 412288eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(req->cmd.nsid); 412388eea45cSKlaus Jensen 412488eea45cSKlaus Jensen trace_pci_nvme_io_cmd(nvme_cid(req), nsid, nvme_sqid(req), 412588eea45cSKlaus Jensen req->cmd.opcode, nvme_io_opc_str(req->cmd.opcode)); 412688eea45cSKlaus Jensen 412788eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid)) { 412888eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 412988eea45cSKlaus Jensen } 413088eea45cSKlaus Jensen 413188eea45cSKlaus Jensen /* 413288eea45cSKlaus Jensen * In the base NVM command set, Flush may apply to all namespaces 413388eea45cSKlaus Jensen * (indicated by NSID being set to FFFFFFFFh). But if that feature is used 413488eea45cSKlaus Jensen * along with TP 4056 (Namespace Types), it may be pretty screwed up. 413588eea45cSKlaus Jensen * 413688eea45cSKlaus Jensen * If NSID is indeed set to FFFFFFFFh, we simply cannot associate the 413788eea45cSKlaus Jensen * opcode with a specific command since we cannot determine a unique I/O 413888eea45cSKlaus Jensen * command set. Opcode 0h could have any other meaning than something 413988eea45cSKlaus Jensen * equivalent to flushing and say it DOES have completely different 414088eea45cSKlaus Jensen * semantics in some other command set - does an NSID of FFFFFFFFh then 414188eea45cSKlaus Jensen * mean "for all namespaces, apply whatever command set specific command 414288eea45cSKlaus Jensen * that uses the 0h opcode?" Or does it mean "for all namespaces, apply 414388eea45cSKlaus Jensen * whatever command that uses the 0h opcode if, and only if, it allows NSID 414488eea45cSKlaus Jensen * to be FFFFFFFFh"? 414588eea45cSKlaus Jensen * 414688eea45cSKlaus Jensen * Anyway (and luckily), for now, we do not care about this since the 414788eea45cSKlaus Jensen * device only supports namespace types that includes the NVM Flush command 414888eea45cSKlaus Jensen * (NVM and Zoned), so always do an NVM Flush. 414988eea45cSKlaus Jensen */ 415088eea45cSKlaus Jensen if (req->cmd.opcode == NVME_CMD_FLUSH) { 415188eea45cSKlaus Jensen return nvme_flush(n, req); 415288eea45cSKlaus Jensen } 415388eea45cSKlaus Jensen 415488eea45cSKlaus Jensen ns = nvme_ns(n, nsid); 415588eea45cSKlaus Jensen if (unlikely(!ns)) { 415688eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 415788eea45cSKlaus Jensen } 415888eea45cSKlaus Jensen 415988eea45cSKlaus Jensen if (!(ns->iocs[req->cmd.opcode] & NVME_CMD_EFF_CSUPP)) { 416088eea45cSKlaus Jensen trace_pci_nvme_err_invalid_opc(req->cmd.opcode); 416188eea45cSKlaus Jensen return NVME_INVALID_OPCODE | NVME_DNR; 416288eea45cSKlaus Jensen } 416388eea45cSKlaus Jensen 416488eea45cSKlaus Jensen if (ns->status) { 416588eea45cSKlaus Jensen return ns->status; 416688eea45cSKlaus Jensen } 416788eea45cSKlaus Jensen 4168c53a9a91SPankaj Raghav if (NVME_CMD_FLAGS_FUSE(req->cmd.flags)) { 4169c53a9a91SPankaj Raghav return NVME_INVALID_FIELD; 4170c53a9a91SPankaj Raghav } 4171c53a9a91SPankaj Raghav 417288eea45cSKlaus Jensen req->ns = ns; 417388eea45cSKlaus Jensen 417488eea45cSKlaus Jensen switch (req->cmd.opcode) { 417588eea45cSKlaus Jensen case NVME_CMD_WRITE_ZEROES: 417688eea45cSKlaus Jensen return nvme_write_zeroes(n, req); 417788eea45cSKlaus Jensen case NVME_CMD_ZONE_APPEND: 417888eea45cSKlaus Jensen return nvme_zone_append(n, req); 417988eea45cSKlaus Jensen case NVME_CMD_WRITE: 418088eea45cSKlaus Jensen return nvme_write(n, req); 418188eea45cSKlaus Jensen case NVME_CMD_READ: 418288eea45cSKlaus Jensen return nvme_read(n, req); 418388eea45cSKlaus Jensen case NVME_CMD_COMPARE: 418488eea45cSKlaus Jensen return nvme_compare(n, req); 418588eea45cSKlaus Jensen case NVME_CMD_DSM: 418688eea45cSKlaus Jensen return nvme_dsm(n, req); 418788eea45cSKlaus Jensen case NVME_CMD_VERIFY: 418888eea45cSKlaus Jensen return nvme_verify(n, req); 418988eea45cSKlaus Jensen case NVME_CMD_COPY: 419088eea45cSKlaus Jensen return nvme_copy(n, req); 419188eea45cSKlaus Jensen case NVME_CMD_ZONE_MGMT_SEND: 419288eea45cSKlaus Jensen return nvme_zone_mgmt_send(n, req); 419388eea45cSKlaus Jensen case NVME_CMD_ZONE_MGMT_RECV: 419488eea45cSKlaus Jensen return nvme_zone_mgmt_recv(n, req); 419588eea45cSKlaus Jensen default: 419688eea45cSKlaus Jensen assert(false); 419788eea45cSKlaus Jensen } 419888eea45cSKlaus Jensen 419988eea45cSKlaus Jensen return NVME_INVALID_OPCODE | NVME_DNR; 420088eea45cSKlaus Jensen } 420188eea45cSKlaus Jensen 420288eea45cSKlaus Jensen static void nvme_free_sq(NvmeSQueue *sq, NvmeCtrl *n) 420388eea45cSKlaus Jensen { 420488eea45cSKlaus Jensen n->sq[sq->sqid] = NULL; 420588eea45cSKlaus Jensen timer_free(sq->timer); 420688eea45cSKlaus Jensen g_free(sq->io_req); 420788eea45cSKlaus Jensen if (sq->sqid) { 420888eea45cSKlaus Jensen g_free(sq); 420988eea45cSKlaus Jensen } 421088eea45cSKlaus Jensen } 421188eea45cSKlaus Jensen 421288eea45cSKlaus Jensen static uint16_t nvme_del_sq(NvmeCtrl *n, NvmeRequest *req) 421388eea45cSKlaus Jensen { 421488eea45cSKlaus Jensen NvmeDeleteQ *c = (NvmeDeleteQ *)&req->cmd; 421588eea45cSKlaus Jensen NvmeRequest *r, *next; 421688eea45cSKlaus Jensen NvmeSQueue *sq; 421788eea45cSKlaus Jensen NvmeCQueue *cq; 421888eea45cSKlaus Jensen uint16_t qid = le16_to_cpu(c->qid); 421988eea45cSKlaus Jensen 422088eea45cSKlaus Jensen if (unlikely(!qid || nvme_check_sqid(n, qid))) { 422188eea45cSKlaus Jensen trace_pci_nvme_err_invalid_del_sq(qid); 422288eea45cSKlaus Jensen return NVME_INVALID_QID | NVME_DNR; 422388eea45cSKlaus Jensen } 422488eea45cSKlaus Jensen 422588eea45cSKlaus Jensen trace_pci_nvme_del_sq(qid); 422688eea45cSKlaus Jensen 422788eea45cSKlaus Jensen sq = n->sq[qid]; 422888eea45cSKlaus Jensen while (!QTAILQ_EMPTY(&sq->out_req_list)) { 422988eea45cSKlaus Jensen r = QTAILQ_FIRST(&sq->out_req_list); 4230e76fb260SKlaus Jensen assert(r->aiocb); 423188eea45cSKlaus Jensen blk_aio_cancel(r->aiocb); 423288eea45cSKlaus Jensen } 423388eea45cSKlaus Jensen 423488eea45cSKlaus Jensen assert(QTAILQ_EMPTY(&sq->out_req_list)); 423588eea45cSKlaus Jensen 423688eea45cSKlaus Jensen if (!nvme_check_cqid(n, sq->cqid)) { 423788eea45cSKlaus Jensen cq = n->cq[sq->cqid]; 423888eea45cSKlaus Jensen QTAILQ_REMOVE(&cq->sq_list, sq, entry); 423988eea45cSKlaus Jensen 424088eea45cSKlaus Jensen nvme_post_cqes(cq); 424188eea45cSKlaus Jensen QTAILQ_FOREACH_SAFE(r, &cq->req_list, entry, next) { 424288eea45cSKlaus Jensen if (r->sq == sq) { 424388eea45cSKlaus Jensen QTAILQ_REMOVE(&cq->req_list, r, entry); 424488eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&sq->req_list, r, entry); 424588eea45cSKlaus Jensen } 424688eea45cSKlaus Jensen } 424788eea45cSKlaus Jensen } 424888eea45cSKlaus Jensen 424988eea45cSKlaus Jensen nvme_free_sq(sq, n); 425088eea45cSKlaus Jensen return NVME_SUCCESS; 425188eea45cSKlaus Jensen } 425288eea45cSKlaus Jensen 425388eea45cSKlaus Jensen static void nvme_init_sq(NvmeSQueue *sq, NvmeCtrl *n, uint64_t dma_addr, 425488eea45cSKlaus Jensen uint16_t sqid, uint16_t cqid, uint16_t size) 425588eea45cSKlaus Jensen { 425688eea45cSKlaus Jensen int i; 425788eea45cSKlaus Jensen NvmeCQueue *cq; 425888eea45cSKlaus Jensen 425988eea45cSKlaus Jensen sq->ctrl = n; 426088eea45cSKlaus Jensen sq->dma_addr = dma_addr; 426188eea45cSKlaus Jensen sq->sqid = sqid; 426288eea45cSKlaus Jensen sq->size = size; 426388eea45cSKlaus Jensen sq->cqid = cqid; 426488eea45cSKlaus Jensen sq->head = sq->tail = 0; 426588eea45cSKlaus Jensen sq->io_req = g_new0(NvmeRequest, sq->size); 426688eea45cSKlaus Jensen 426788eea45cSKlaus Jensen QTAILQ_INIT(&sq->req_list); 426888eea45cSKlaus Jensen QTAILQ_INIT(&sq->out_req_list); 426988eea45cSKlaus Jensen for (i = 0; i < sq->size; i++) { 427088eea45cSKlaus Jensen sq->io_req[i].sq = sq; 427188eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&(sq->req_list), &sq->io_req[i], entry); 427288eea45cSKlaus Jensen } 427388eea45cSKlaus Jensen sq->timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, nvme_process_sq, sq); 427488eea45cSKlaus Jensen 427588eea45cSKlaus Jensen assert(n->cq[cqid]); 427688eea45cSKlaus Jensen cq = n->cq[cqid]; 427788eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&(cq->sq_list), sq, entry); 427888eea45cSKlaus Jensen n->sq[sqid] = sq; 427988eea45cSKlaus Jensen } 428088eea45cSKlaus Jensen 428188eea45cSKlaus Jensen static uint16_t nvme_create_sq(NvmeCtrl *n, NvmeRequest *req) 428288eea45cSKlaus Jensen { 428388eea45cSKlaus Jensen NvmeSQueue *sq; 428488eea45cSKlaus Jensen NvmeCreateSq *c = (NvmeCreateSq *)&req->cmd; 428588eea45cSKlaus Jensen 428688eea45cSKlaus Jensen uint16_t cqid = le16_to_cpu(c->cqid); 428788eea45cSKlaus Jensen uint16_t sqid = le16_to_cpu(c->sqid); 428888eea45cSKlaus Jensen uint16_t qsize = le16_to_cpu(c->qsize); 428988eea45cSKlaus Jensen uint16_t qflags = le16_to_cpu(c->sq_flags); 429088eea45cSKlaus Jensen uint64_t prp1 = le64_to_cpu(c->prp1); 429188eea45cSKlaus Jensen 429288eea45cSKlaus Jensen trace_pci_nvme_create_sq(prp1, sqid, cqid, qsize, qflags); 429388eea45cSKlaus Jensen 429488eea45cSKlaus Jensen if (unlikely(!cqid || nvme_check_cqid(n, cqid))) { 429588eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_sq_cqid(cqid); 429688eea45cSKlaus Jensen return NVME_INVALID_CQID | NVME_DNR; 429788eea45cSKlaus Jensen } 429888eea45cSKlaus Jensen if (unlikely(!sqid || sqid > n->params.max_ioqpairs || 429988eea45cSKlaus Jensen n->sq[sqid] != NULL)) { 430088eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_sq_sqid(sqid); 430188eea45cSKlaus Jensen return NVME_INVALID_QID | NVME_DNR; 430288eea45cSKlaus Jensen } 430349e03457SKlaus Jensen if (unlikely(!qsize || qsize > NVME_CAP_MQES(ldq_le_p(&n->bar.cap)))) { 430488eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_sq_size(qsize); 430588eea45cSKlaus Jensen return NVME_MAX_QSIZE_EXCEEDED | NVME_DNR; 430688eea45cSKlaus Jensen } 430788eea45cSKlaus Jensen if (unlikely(prp1 & (n->page_size - 1))) { 430888eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_sq_addr(prp1); 430988eea45cSKlaus Jensen return NVME_INVALID_PRP_OFFSET | NVME_DNR; 431088eea45cSKlaus Jensen } 431188eea45cSKlaus Jensen if (unlikely(!(NVME_SQ_FLAGS_PC(qflags)))) { 431288eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_sq_qflags(NVME_SQ_FLAGS_PC(qflags)); 431388eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 431488eea45cSKlaus Jensen } 431588eea45cSKlaus Jensen sq = g_malloc0(sizeof(*sq)); 431688eea45cSKlaus Jensen nvme_init_sq(sq, n, prp1, sqid, cqid, qsize + 1); 431788eea45cSKlaus Jensen return NVME_SUCCESS; 431888eea45cSKlaus Jensen } 431988eea45cSKlaus Jensen 432088eea45cSKlaus Jensen struct nvme_stats { 432188eea45cSKlaus Jensen uint64_t units_read; 432288eea45cSKlaus Jensen uint64_t units_written; 432388eea45cSKlaus Jensen uint64_t read_commands; 432488eea45cSKlaus Jensen uint64_t write_commands; 432588eea45cSKlaus Jensen }; 432688eea45cSKlaus Jensen 432788eea45cSKlaus Jensen static void nvme_set_blk_stats(NvmeNamespace *ns, struct nvme_stats *stats) 432888eea45cSKlaus Jensen { 432988eea45cSKlaus Jensen BlockAcctStats *s = blk_get_stats(ns->blkconf.blk); 433088eea45cSKlaus Jensen 433188eea45cSKlaus Jensen stats->units_read += s->nr_bytes[BLOCK_ACCT_READ] >> BDRV_SECTOR_BITS; 433288eea45cSKlaus Jensen stats->units_written += s->nr_bytes[BLOCK_ACCT_WRITE] >> BDRV_SECTOR_BITS; 433388eea45cSKlaus Jensen stats->read_commands += s->nr_ops[BLOCK_ACCT_READ]; 433488eea45cSKlaus Jensen stats->write_commands += s->nr_ops[BLOCK_ACCT_WRITE]; 433588eea45cSKlaus Jensen } 433688eea45cSKlaus Jensen 433788eea45cSKlaus Jensen static uint16_t nvme_smart_info(NvmeCtrl *n, uint8_t rae, uint32_t buf_len, 433888eea45cSKlaus Jensen uint64_t off, NvmeRequest *req) 433988eea45cSKlaus Jensen { 434088eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(req->cmd.nsid); 434188eea45cSKlaus Jensen struct nvme_stats stats = { 0 }; 434288eea45cSKlaus Jensen NvmeSmartLog smart = { 0 }; 434388eea45cSKlaus Jensen uint32_t trans_len; 434488eea45cSKlaus Jensen NvmeNamespace *ns; 434588eea45cSKlaus Jensen time_t current_ms; 434688eea45cSKlaus Jensen 434788eea45cSKlaus Jensen if (off >= sizeof(smart)) { 434888eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 434988eea45cSKlaus Jensen } 435088eea45cSKlaus Jensen 435188eea45cSKlaus Jensen if (nsid != 0xffffffff) { 435288eea45cSKlaus Jensen ns = nvme_ns(n, nsid); 435388eea45cSKlaus Jensen if (!ns) { 435488eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 435588eea45cSKlaus Jensen } 435688eea45cSKlaus Jensen nvme_set_blk_stats(ns, &stats); 435788eea45cSKlaus Jensen } else { 435888eea45cSKlaus Jensen int i; 435988eea45cSKlaus Jensen 436088eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 436188eea45cSKlaus Jensen ns = nvme_ns(n, i); 436288eea45cSKlaus Jensen if (!ns) { 436388eea45cSKlaus Jensen continue; 436488eea45cSKlaus Jensen } 436588eea45cSKlaus Jensen nvme_set_blk_stats(ns, &stats); 436688eea45cSKlaus Jensen } 436788eea45cSKlaus Jensen } 436888eea45cSKlaus Jensen 436988eea45cSKlaus Jensen trans_len = MIN(sizeof(smart) - off, buf_len); 437088eea45cSKlaus Jensen smart.critical_warning = n->smart_critical_warning; 437188eea45cSKlaus Jensen 437288eea45cSKlaus Jensen smart.data_units_read[0] = cpu_to_le64(DIV_ROUND_UP(stats.units_read, 437388eea45cSKlaus Jensen 1000)); 437488eea45cSKlaus Jensen smart.data_units_written[0] = cpu_to_le64(DIV_ROUND_UP(stats.units_written, 437588eea45cSKlaus Jensen 1000)); 437688eea45cSKlaus Jensen smart.host_read_commands[0] = cpu_to_le64(stats.read_commands); 437788eea45cSKlaus Jensen smart.host_write_commands[0] = cpu_to_le64(stats.write_commands); 437888eea45cSKlaus Jensen 437988eea45cSKlaus Jensen smart.temperature = cpu_to_le16(n->temperature); 438088eea45cSKlaus Jensen 438188eea45cSKlaus Jensen if ((n->temperature >= n->features.temp_thresh_hi) || 438288eea45cSKlaus Jensen (n->temperature <= n->features.temp_thresh_low)) { 438388eea45cSKlaus Jensen smart.critical_warning |= NVME_SMART_TEMPERATURE; 438488eea45cSKlaus Jensen } 438588eea45cSKlaus Jensen 438688eea45cSKlaus Jensen current_ms = qemu_clock_get_ms(QEMU_CLOCK_VIRTUAL); 438788eea45cSKlaus Jensen smart.power_on_hours[0] = 438888eea45cSKlaus Jensen cpu_to_le64((((current_ms - n->starttime_ms) / 1000) / 60) / 60); 438988eea45cSKlaus Jensen 439088eea45cSKlaus Jensen if (!rae) { 439188eea45cSKlaus Jensen nvme_clear_events(n, NVME_AER_TYPE_SMART); 439288eea45cSKlaus Jensen } 439388eea45cSKlaus Jensen 439488eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *) &smart + off, trans_len, req); 439588eea45cSKlaus Jensen } 439688eea45cSKlaus Jensen 439788eea45cSKlaus Jensen static uint16_t nvme_fw_log_info(NvmeCtrl *n, uint32_t buf_len, uint64_t off, 439888eea45cSKlaus Jensen NvmeRequest *req) 439988eea45cSKlaus Jensen { 440088eea45cSKlaus Jensen uint32_t trans_len; 440188eea45cSKlaus Jensen NvmeFwSlotInfoLog fw_log = { 440288eea45cSKlaus Jensen .afi = 0x1, 440388eea45cSKlaus Jensen }; 440488eea45cSKlaus Jensen 440588eea45cSKlaus Jensen if (off >= sizeof(fw_log)) { 440688eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 440788eea45cSKlaus Jensen } 440888eea45cSKlaus Jensen 440988eea45cSKlaus Jensen strpadcpy((char *)&fw_log.frs1, sizeof(fw_log.frs1), "1.0", ' '); 441088eea45cSKlaus Jensen trans_len = MIN(sizeof(fw_log) - off, buf_len); 441188eea45cSKlaus Jensen 441288eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *) &fw_log + off, trans_len, req); 441388eea45cSKlaus Jensen } 441488eea45cSKlaus Jensen 441588eea45cSKlaus Jensen static uint16_t nvme_error_info(NvmeCtrl *n, uint8_t rae, uint32_t buf_len, 441688eea45cSKlaus Jensen uint64_t off, NvmeRequest *req) 441788eea45cSKlaus Jensen { 441888eea45cSKlaus Jensen uint32_t trans_len; 441988eea45cSKlaus Jensen NvmeErrorLog errlog; 442088eea45cSKlaus Jensen 442188eea45cSKlaus Jensen if (off >= sizeof(errlog)) { 442288eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 442388eea45cSKlaus Jensen } 442488eea45cSKlaus Jensen 442588eea45cSKlaus Jensen if (!rae) { 442688eea45cSKlaus Jensen nvme_clear_events(n, NVME_AER_TYPE_ERROR); 442788eea45cSKlaus Jensen } 442888eea45cSKlaus Jensen 442988eea45cSKlaus Jensen memset(&errlog, 0x0, sizeof(errlog)); 443088eea45cSKlaus Jensen trans_len = MIN(sizeof(errlog) - off, buf_len); 443188eea45cSKlaus Jensen 443288eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *)&errlog, trans_len, req); 443388eea45cSKlaus Jensen } 443488eea45cSKlaus Jensen 443588eea45cSKlaus Jensen static uint16_t nvme_changed_nslist(NvmeCtrl *n, uint8_t rae, uint32_t buf_len, 443688eea45cSKlaus Jensen uint64_t off, NvmeRequest *req) 443788eea45cSKlaus Jensen { 443888eea45cSKlaus Jensen uint32_t nslist[1024]; 443988eea45cSKlaus Jensen uint32_t trans_len; 444088eea45cSKlaus Jensen int i = 0; 444188eea45cSKlaus Jensen uint32_t nsid; 444288eea45cSKlaus Jensen 4443e2c57529SKlaus Jensen if (off >= sizeof(nslist)) { 4444e2c57529SKlaus Jensen trace_pci_nvme_err_invalid_log_page_offset(off, sizeof(nslist)); 4445e2c57529SKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 4446e2c57529SKlaus Jensen } 4447e2c57529SKlaus Jensen 444888eea45cSKlaus Jensen memset(nslist, 0x0, sizeof(nslist)); 444988eea45cSKlaus Jensen trans_len = MIN(sizeof(nslist) - off, buf_len); 445088eea45cSKlaus Jensen 445188eea45cSKlaus Jensen while ((nsid = find_first_bit(n->changed_nsids, NVME_CHANGED_NSID_SIZE)) != 445288eea45cSKlaus Jensen NVME_CHANGED_NSID_SIZE) { 445388eea45cSKlaus Jensen /* 445488eea45cSKlaus Jensen * If more than 1024 namespaces, the first entry in the log page should 445588eea45cSKlaus Jensen * be set to FFFFFFFFh and the others to 0 as spec. 445688eea45cSKlaus Jensen */ 445788eea45cSKlaus Jensen if (i == ARRAY_SIZE(nslist)) { 445888eea45cSKlaus Jensen memset(nslist, 0x0, sizeof(nslist)); 445988eea45cSKlaus Jensen nslist[0] = 0xffffffff; 446088eea45cSKlaus Jensen break; 446188eea45cSKlaus Jensen } 446288eea45cSKlaus Jensen 446388eea45cSKlaus Jensen nslist[i++] = nsid; 446488eea45cSKlaus Jensen clear_bit(nsid, n->changed_nsids); 446588eea45cSKlaus Jensen } 446688eea45cSKlaus Jensen 446788eea45cSKlaus Jensen /* 446888eea45cSKlaus Jensen * Remove all the remaining list entries in case returns directly due to 446988eea45cSKlaus Jensen * more than 1024 namespaces. 447088eea45cSKlaus Jensen */ 447188eea45cSKlaus Jensen if (nslist[0] == 0xffffffff) { 447288eea45cSKlaus Jensen bitmap_zero(n->changed_nsids, NVME_CHANGED_NSID_SIZE); 447388eea45cSKlaus Jensen } 447488eea45cSKlaus Jensen 447588eea45cSKlaus Jensen if (!rae) { 447688eea45cSKlaus Jensen nvme_clear_events(n, NVME_AER_TYPE_NOTICE); 447788eea45cSKlaus Jensen } 447888eea45cSKlaus Jensen 447988eea45cSKlaus Jensen return nvme_c2h(n, ((uint8_t *)nslist) + off, trans_len, req); 448088eea45cSKlaus Jensen } 448188eea45cSKlaus Jensen 448288eea45cSKlaus Jensen static uint16_t nvme_cmd_effects(NvmeCtrl *n, uint8_t csi, uint32_t buf_len, 448388eea45cSKlaus Jensen uint64_t off, NvmeRequest *req) 448488eea45cSKlaus Jensen { 448588eea45cSKlaus Jensen NvmeEffectsLog log = {}; 448688eea45cSKlaus Jensen const uint32_t *src_iocs = NULL; 448788eea45cSKlaus Jensen uint32_t trans_len; 448888eea45cSKlaus Jensen 448988eea45cSKlaus Jensen if (off >= sizeof(log)) { 449088eea45cSKlaus Jensen trace_pci_nvme_err_invalid_log_page_offset(off, sizeof(log)); 449188eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 449288eea45cSKlaus Jensen } 449388eea45cSKlaus Jensen 449449e03457SKlaus Jensen switch (NVME_CC_CSS(ldl_le_p(&n->bar.cc))) { 449588eea45cSKlaus Jensen case NVME_CC_CSS_NVM: 449688eea45cSKlaus Jensen src_iocs = nvme_cse_iocs_nvm; 449788eea45cSKlaus Jensen /* fall through */ 449888eea45cSKlaus Jensen case NVME_CC_CSS_ADMIN_ONLY: 449988eea45cSKlaus Jensen break; 450088eea45cSKlaus Jensen case NVME_CC_CSS_CSI: 450188eea45cSKlaus Jensen switch (csi) { 450288eea45cSKlaus Jensen case NVME_CSI_NVM: 450388eea45cSKlaus Jensen src_iocs = nvme_cse_iocs_nvm; 450488eea45cSKlaus Jensen break; 450588eea45cSKlaus Jensen case NVME_CSI_ZONED: 450688eea45cSKlaus Jensen src_iocs = nvme_cse_iocs_zoned; 450788eea45cSKlaus Jensen break; 450888eea45cSKlaus Jensen } 450988eea45cSKlaus Jensen } 451088eea45cSKlaus Jensen 451188eea45cSKlaus Jensen memcpy(log.acs, nvme_cse_acs, sizeof(nvme_cse_acs)); 451288eea45cSKlaus Jensen 451388eea45cSKlaus Jensen if (src_iocs) { 451488eea45cSKlaus Jensen memcpy(log.iocs, src_iocs, sizeof(log.iocs)); 451588eea45cSKlaus Jensen } 451688eea45cSKlaus Jensen 451788eea45cSKlaus Jensen trans_len = MIN(sizeof(log) - off, buf_len); 451888eea45cSKlaus Jensen 451988eea45cSKlaus Jensen return nvme_c2h(n, ((uint8_t *)&log) + off, trans_len, req); 452088eea45cSKlaus Jensen } 452188eea45cSKlaus Jensen 452288eea45cSKlaus Jensen static uint16_t nvme_get_log(NvmeCtrl *n, NvmeRequest *req) 452388eea45cSKlaus Jensen { 452488eea45cSKlaus Jensen NvmeCmd *cmd = &req->cmd; 452588eea45cSKlaus Jensen 452688eea45cSKlaus Jensen uint32_t dw10 = le32_to_cpu(cmd->cdw10); 452788eea45cSKlaus Jensen uint32_t dw11 = le32_to_cpu(cmd->cdw11); 452888eea45cSKlaus Jensen uint32_t dw12 = le32_to_cpu(cmd->cdw12); 452988eea45cSKlaus Jensen uint32_t dw13 = le32_to_cpu(cmd->cdw13); 453088eea45cSKlaus Jensen uint8_t lid = dw10 & 0xff; 453188eea45cSKlaus Jensen uint8_t lsp = (dw10 >> 8) & 0xf; 453288eea45cSKlaus Jensen uint8_t rae = (dw10 >> 15) & 0x1; 453388eea45cSKlaus Jensen uint8_t csi = le32_to_cpu(cmd->cdw14) >> 24; 453488eea45cSKlaus Jensen uint32_t numdl, numdu; 453588eea45cSKlaus Jensen uint64_t off, lpol, lpou; 453688eea45cSKlaus Jensen size_t len; 453788eea45cSKlaus Jensen uint16_t status; 453888eea45cSKlaus Jensen 453988eea45cSKlaus Jensen numdl = (dw10 >> 16); 454088eea45cSKlaus Jensen numdu = (dw11 & 0xffff); 454188eea45cSKlaus Jensen lpol = dw12; 454288eea45cSKlaus Jensen lpou = dw13; 454388eea45cSKlaus Jensen 454488eea45cSKlaus Jensen len = (((numdu << 16) | numdl) + 1) << 2; 454588eea45cSKlaus Jensen off = (lpou << 32ULL) | lpol; 454688eea45cSKlaus Jensen 454788eea45cSKlaus Jensen if (off & 0x3) { 454888eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 454988eea45cSKlaus Jensen } 455088eea45cSKlaus Jensen 455188eea45cSKlaus Jensen trace_pci_nvme_get_log(nvme_cid(req), lid, lsp, rae, len, off); 455288eea45cSKlaus Jensen 455388eea45cSKlaus Jensen status = nvme_check_mdts(n, len); 455488eea45cSKlaus Jensen if (status) { 455588eea45cSKlaus Jensen return status; 455688eea45cSKlaus Jensen } 455788eea45cSKlaus Jensen 455888eea45cSKlaus Jensen switch (lid) { 455988eea45cSKlaus Jensen case NVME_LOG_ERROR_INFO: 456088eea45cSKlaus Jensen return nvme_error_info(n, rae, len, off, req); 456188eea45cSKlaus Jensen case NVME_LOG_SMART_INFO: 456288eea45cSKlaus Jensen return nvme_smart_info(n, rae, len, off, req); 456388eea45cSKlaus Jensen case NVME_LOG_FW_SLOT_INFO: 456488eea45cSKlaus Jensen return nvme_fw_log_info(n, len, off, req); 456588eea45cSKlaus Jensen case NVME_LOG_CHANGED_NSLIST: 456688eea45cSKlaus Jensen return nvme_changed_nslist(n, rae, len, off, req); 456788eea45cSKlaus Jensen case NVME_LOG_CMD_EFFECTS: 456888eea45cSKlaus Jensen return nvme_cmd_effects(n, csi, len, off, req); 456988eea45cSKlaus Jensen default: 457088eea45cSKlaus Jensen trace_pci_nvme_err_invalid_log_page(nvme_cid(req), lid); 457188eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 457288eea45cSKlaus Jensen } 457388eea45cSKlaus Jensen } 457488eea45cSKlaus Jensen 457588eea45cSKlaus Jensen static void nvme_free_cq(NvmeCQueue *cq, NvmeCtrl *n) 457688eea45cSKlaus Jensen { 457788eea45cSKlaus Jensen n->cq[cq->cqid] = NULL; 457888eea45cSKlaus Jensen timer_free(cq->timer); 457988eea45cSKlaus Jensen if (msix_enabled(&n->parent_obj)) { 458088eea45cSKlaus Jensen msix_vector_unuse(&n->parent_obj, cq->vector); 458188eea45cSKlaus Jensen } 458288eea45cSKlaus Jensen if (cq->cqid) { 458388eea45cSKlaus Jensen g_free(cq); 458488eea45cSKlaus Jensen } 458588eea45cSKlaus Jensen } 458688eea45cSKlaus Jensen 458788eea45cSKlaus Jensen static uint16_t nvme_del_cq(NvmeCtrl *n, NvmeRequest *req) 458888eea45cSKlaus Jensen { 458988eea45cSKlaus Jensen NvmeDeleteQ *c = (NvmeDeleteQ *)&req->cmd; 459088eea45cSKlaus Jensen NvmeCQueue *cq; 459188eea45cSKlaus Jensen uint16_t qid = le16_to_cpu(c->qid); 459288eea45cSKlaus Jensen 459388eea45cSKlaus Jensen if (unlikely(!qid || nvme_check_cqid(n, qid))) { 459488eea45cSKlaus Jensen trace_pci_nvme_err_invalid_del_cq_cqid(qid); 459588eea45cSKlaus Jensen return NVME_INVALID_CQID | NVME_DNR; 459688eea45cSKlaus Jensen } 459788eea45cSKlaus Jensen 459888eea45cSKlaus Jensen cq = n->cq[qid]; 459988eea45cSKlaus Jensen if (unlikely(!QTAILQ_EMPTY(&cq->sq_list))) { 460088eea45cSKlaus Jensen trace_pci_nvme_err_invalid_del_cq_notempty(qid); 460188eea45cSKlaus Jensen return NVME_INVALID_QUEUE_DEL; 460288eea45cSKlaus Jensen } 460383d7ed5cSKlaus Jensen 460483d7ed5cSKlaus Jensen if (cq->irq_enabled && cq->tail != cq->head) { 460583d7ed5cSKlaus Jensen n->cq_pending--; 460683d7ed5cSKlaus Jensen } 460783d7ed5cSKlaus Jensen 460888eea45cSKlaus Jensen nvme_irq_deassert(n, cq); 460988eea45cSKlaus Jensen trace_pci_nvme_del_cq(qid); 461088eea45cSKlaus Jensen nvme_free_cq(cq, n); 461188eea45cSKlaus Jensen return NVME_SUCCESS; 461288eea45cSKlaus Jensen } 461388eea45cSKlaus Jensen 461488eea45cSKlaus Jensen static void nvme_init_cq(NvmeCQueue *cq, NvmeCtrl *n, uint64_t dma_addr, 461588eea45cSKlaus Jensen uint16_t cqid, uint16_t vector, uint16_t size, 461688eea45cSKlaus Jensen uint16_t irq_enabled) 461788eea45cSKlaus Jensen { 461888eea45cSKlaus Jensen int ret; 461988eea45cSKlaus Jensen 462088eea45cSKlaus Jensen if (msix_enabled(&n->parent_obj)) { 462188eea45cSKlaus Jensen ret = msix_vector_use(&n->parent_obj, vector); 462288eea45cSKlaus Jensen assert(ret == 0); 462388eea45cSKlaus Jensen } 462488eea45cSKlaus Jensen cq->ctrl = n; 462588eea45cSKlaus Jensen cq->cqid = cqid; 462688eea45cSKlaus Jensen cq->size = size; 462788eea45cSKlaus Jensen cq->dma_addr = dma_addr; 462888eea45cSKlaus Jensen cq->phase = 1; 462988eea45cSKlaus Jensen cq->irq_enabled = irq_enabled; 463088eea45cSKlaus Jensen cq->vector = vector; 463188eea45cSKlaus Jensen cq->head = cq->tail = 0; 463288eea45cSKlaus Jensen QTAILQ_INIT(&cq->req_list); 463388eea45cSKlaus Jensen QTAILQ_INIT(&cq->sq_list); 463488eea45cSKlaus Jensen n->cq[cqid] = cq; 463588eea45cSKlaus Jensen cq->timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, nvme_post_cqes, cq); 463688eea45cSKlaus Jensen } 463788eea45cSKlaus Jensen 463888eea45cSKlaus Jensen static uint16_t nvme_create_cq(NvmeCtrl *n, NvmeRequest *req) 463988eea45cSKlaus Jensen { 464088eea45cSKlaus Jensen NvmeCQueue *cq; 464188eea45cSKlaus Jensen NvmeCreateCq *c = (NvmeCreateCq *)&req->cmd; 464288eea45cSKlaus Jensen uint16_t cqid = le16_to_cpu(c->cqid); 464388eea45cSKlaus Jensen uint16_t vector = le16_to_cpu(c->irq_vector); 464488eea45cSKlaus Jensen uint16_t qsize = le16_to_cpu(c->qsize); 464588eea45cSKlaus Jensen uint16_t qflags = le16_to_cpu(c->cq_flags); 464688eea45cSKlaus Jensen uint64_t prp1 = le64_to_cpu(c->prp1); 464788eea45cSKlaus Jensen 464888eea45cSKlaus Jensen trace_pci_nvme_create_cq(prp1, cqid, vector, qsize, qflags, 464988eea45cSKlaus Jensen NVME_CQ_FLAGS_IEN(qflags) != 0); 465088eea45cSKlaus Jensen 465188eea45cSKlaus Jensen if (unlikely(!cqid || cqid > n->params.max_ioqpairs || 465288eea45cSKlaus Jensen n->cq[cqid] != NULL)) { 465388eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_cq_cqid(cqid); 465488eea45cSKlaus Jensen return NVME_INVALID_QID | NVME_DNR; 465588eea45cSKlaus Jensen } 465649e03457SKlaus Jensen if (unlikely(!qsize || qsize > NVME_CAP_MQES(ldq_le_p(&n->bar.cap)))) { 465788eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_cq_size(qsize); 465888eea45cSKlaus Jensen return NVME_MAX_QSIZE_EXCEEDED | NVME_DNR; 465988eea45cSKlaus Jensen } 466088eea45cSKlaus Jensen if (unlikely(prp1 & (n->page_size - 1))) { 466188eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_cq_addr(prp1); 466288eea45cSKlaus Jensen return NVME_INVALID_PRP_OFFSET | NVME_DNR; 466388eea45cSKlaus Jensen } 466488eea45cSKlaus Jensen if (unlikely(!msix_enabled(&n->parent_obj) && vector)) { 466588eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_cq_vector(vector); 466688eea45cSKlaus Jensen return NVME_INVALID_IRQ_VECTOR | NVME_DNR; 466788eea45cSKlaus Jensen } 466888eea45cSKlaus Jensen if (unlikely(vector >= n->params.msix_qsize)) { 466988eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_cq_vector(vector); 467088eea45cSKlaus Jensen return NVME_INVALID_IRQ_VECTOR | NVME_DNR; 467188eea45cSKlaus Jensen } 467288eea45cSKlaus Jensen if (unlikely(!(NVME_CQ_FLAGS_PC(qflags)))) { 467388eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_cq_qflags(NVME_CQ_FLAGS_PC(qflags)); 467488eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 467588eea45cSKlaus Jensen } 467688eea45cSKlaus Jensen 467788eea45cSKlaus Jensen cq = g_malloc0(sizeof(*cq)); 467888eea45cSKlaus Jensen nvme_init_cq(cq, n, prp1, cqid, vector, qsize + 1, 467988eea45cSKlaus Jensen NVME_CQ_FLAGS_IEN(qflags)); 468088eea45cSKlaus Jensen 468188eea45cSKlaus Jensen /* 468288eea45cSKlaus Jensen * It is only required to set qs_created when creating a completion queue; 468388eea45cSKlaus Jensen * creating a submission queue without a matching completion queue will 468488eea45cSKlaus Jensen * fail. 468588eea45cSKlaus Jensen */ 468688eea45cSKlaus Jensen n->qs_created = true; 468788eea45cSKlaus Jensen return NVME_SUCCESS; 468888eea45cSKlaus Jensen } 468988eea45cSKlaus Jensen 469088eea45cSKlaus Jensen static uint16_t nvme_rpt_empty_id_struct(NvmeCtrl *n, NvmeRequest *req) 469188eea45cSKlaus Jensen { 469288eea45cSKlaus Jensen uint8_t id[NVME_IDENTIFY_DATA_SIZE] = {}; 469388eea45cSKlaus Jensen 469488eea45cSKlaus Jensen return nvme_c2h(n, id, sizeof(id), req); 469588eea45cSKlaus Jensen } 469688eea45cSKlaus Jensen 469788eea45cSKlaus Jensen static uint16_t nvme_identify_ctrl(NvmeCtrl *n, NvmeRequest *req) 469888eea45cSKlaus Jensen { 469988eea45cSKlaus Jensen trace_pci_nvme_identify_ctrl(); 470088eea45cSKlaus Jensen 470188eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *)&n->id_ctrl, sizeof(n->id_ctrl), req); 470288eea45cSKlaus Jensen } 470388eea45cSKlaus Jensen 470488eea45cSKlaus Jensen static uint16_t nvme_identify_ctrl_csi(NvmeCtrl *n, NvmeRequest *req) 470588eea45cSKlaus Jensen { 470688eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 470788eea45cSKlaus Jensen uint8_t id[NVME_IDENTIFY_DATA_SIZE] = {}; 470888eea45cSKlaus Jensen NvmeIdCtrlNvm *id_nvm = (NvmeIdCtrlNvm *)&id; 470988eea45cSKlaus Jensen 471088eea45cSKlaus Jensen trace_pci_nvme_identify_ctrl_csi(c->csi); 471188eea45cSKlaus Jensen 471288eea45cSKlaus Jensen switch (c->csi) { 471388eea45cSKlaus Jensen case NVME_CSI_NVM: 471488eea45cSKlaus Jensen id_nvm->vsl = n->params.vsl; 471588eea45cSKlaus Jensen id_nvm->dmrsl = cpu_to_le32(n->dmrsl); 471688eea45cSKlaus Jensen break; 471788eea45cSKlaus Jensen 471888eea45cSKlaus Jensen case NVME_CSI_ZONED: 471988eea45cSKlaus Jensen ((NvmeIdCtrlZoned *)&id)->zasl = n->params.zasl; 472088eea45cSKlaus Jensen break; 472188eea45cSKlaus Jensen 472288eea45cSKlaus Jensen default: 472388eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 472488eea45cSKlaus Jensen } 472588eea45cSKlaus Jensen 472688eea45cSKlaus Jensen return nvme_c2h(n, id, sizeof(id), req); 472788eea45cSKlaus Jensen } 472888eea45cSKlaus Jensen 472988eea45cSKlaus Jensen static uint16_t nvme_identify_ns(NvmeCtrl *n, NvmeRequest *req, bool active) 473088eea45cSKlaus Jensen { 473188eea45cSKlaus Jensen NvmeNamespace *ns; 473288eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 473388eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(c->nsid); 473488eea45cSKlaus Jensen 473588eea45cSKlaus Jensen trace_pci_nvme_identify_ns(nsid); 473688eea45cSKlaus Jensen 473788eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid) || nsid == NVME_NSID_BROADCAST) { 473888eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 473988eea45cSKlaus Jensen } 474088eea45cSKlaus Jensen 474188eea45cSKlaus Jensen ns = nvme_ns(n, nsid); 474288eea45cSKlaus Jensen if (unlikely(!ns)) { 474388eea45cSKlaus Jensen if (!active) { 474488eea45cSKlaus Jensen ns = nvme_subsys_ns(n->subsys, nsid); 474588eea45cSKlaus Jensen if (!ns) { 474688eea45cSKlaus Jensen return nvme_rpt_empty_id_struct(n, req); 474788eea45cSKlaus Jensen } 474888eea45cSKlaus Jensen } else { 474988eea45cSKlaus Jensen return nvme_rpt_empty_id_struct(n, req); 475088eea45cSKlaus Jensen } 475188eea45cSKlaus Jensen } 475288eea45cSKlaus Jensen 47533553c48fSGollu Appalanaidu if (active || ns->csi == NVME_CSI_NVM) { 475488eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *)&ns->id_ns, sizeof(NvmeIdNs), req); 475588eea45cSKlaus Jensen } 475688eea45cSKlaus Jensen 475788eea45cSKlaus Jensen return NVME_INVALID_CMD_SET | NVME_DNR; 475888eea45cSKlaus Jensen } 475988eea45cSKlaus Jensen 47605f4eb94dSGollu Appalanaidu static uint16_t nvme_identify_ctrl_list(NvmeCtrl *n, NvmeRequest *req, 47615f4eb94dSGollu Appalanaidu bool attached) 476288eea45cSKlaus Jensen { 476388eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 47645f4eb94dSGollu Appalanaidu uint32_t nsid = le32_to_cpu(c->nsid); 476588eea45cSKlaus Jensen uint16_t min_id = le16_to_cpu(c->ctrlid); 476688eea45cSKlaus Jensen uint16_t list[NVME_CONTROLLER_LIST_SIZE] = {}; 476788eea45cSKlaus Jensen uint16_t *ids = &list[1]; 476888eea45cSKlaus Jensen NvmeNamespace *ns; 476988eea45cSKlaus Jensen NvmeCtrl *ctrl; 477088eea45cSKlaus Jensen int cntlid, nr_ids = 0; 477188eea45cSKlaus Jensen 47725f4eb94dSGollu Appalanaidu trace_pci_nvme_identify_ctrl_list(c->cns, min_id); 477388eea45cSKlaus Jensen 47745f4eb94dSGollu Appalanaidu if (!n->subsys) { 477588eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 477688eea45cSKlaus Jensen } 477788eea45cSKlaus Jensen 47785f4eb94dSGollu Appalanaidu if (attached) { 47795f4eb94dSGollu Appalanaidu if (nsid == NVME_NSID_BROADCAST) { 47805f4eb94dSGollu Appalanaidu return NVME_INVALID_FIELD | NVME_DNR; 47815f4eb94dSGollu Appalanaidu } 47825f4eb94dSGollu Appalanaidu 47835f4eb94dSGollu Appalanaidu ns = nvme_subsys_ns(n->subsys, nsid); 478488eea45cSKlaus Jensen if (!ns) { 478588eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 478688eea45cSKlaus Jensen } 47875f4eb94dSGollu Appalanaidu } 478888eea45cSKlaus Jensen 478988eea45cSKlaus Jensen for (cntlid = min_id; cntlid < ARRAY_SIZE(n->subsys->ctrls); cntlid++) { 479088eea45cSKlaus Jensen ctrl = nvme_subsys_ctrl(n->subsys, cntlid); 479188eea45cSKlaus Jensen if (!ctrl) { 479288eea45cSKlaus Jensen continue; 479388eea45cSKlaus Jensen } 479488eea45cSKlaus Jensen 47955f4eb94dSGollu Appalanaidu if (attached && !nvme_ns(ctrl, nsid)) { 479688eea45cSKlaus Jensen continue; 479788eea45cSKlaus Jensen } 479888eea45cSKlaus Jensen 479988eea45cSKlaus Jensen ids[nr_ids++] = cntlid; 480088eea45cSKlaus Jensen } 480188eea45cSKlaus Jensen 480288eea45cSKlaus Jensen list[0] = nr_ids; 480388eea45cSKlaus Jensen 480488eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *)list, sizeof(list), req); 480588eea45cSKlaus Jensen } 480688eea45cSKlaus Jensen 48075e6f963fSLukasz Maniak static uint16_t nvme_identify_pri_ctrl_cap(NvmeCtrl *n, NvmeRequest *req) 48085e6f963fSLukasz Maniak { 48095e6f963fSLukasz Maniak trace_pci_nvme_identify_pri_ctrl_cap(le16_to_cpu(n->pri_ctrl_cap.cntlid)); 48105e6f963fSLukasz Maniak 48115e6f963fSLukasz Maniak return nvme_c2h(n, (uint8_t *)&n->pri_ctrl_cap, 48125e6f963fSLukasz Maniak sizeof(NvmePriCtrlCap), req); 48135e6f963fSLukasz Maniak } 48145e6f963fSLukasz Maniak 4815*99f48ae7SLukasz Maniak static uint16_t nvme_identify_sec_ctrl_list(NvmeCtrl *n, NvmeRequest *req) 4816*99f48ae7SLukasz Maniak { 4817*99f48ae7SLukasz Maniak NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 4818*99f48ae7SLukasz Maniak uint16_t pri_ctrl_id = le16_to_cpu(n->pri_ctrl_cap.cntlid); 4819*99f48ae7SLukasz Maniak uint16_t min_id = le16_to_cpu(c->ctrlid); 4820*99f48ae7SLukasz Maniak uint8_t num_sec_ctrl = n->sec_ctrl_list.numcntl; 4821*99f48ae7SLukasz Maniak NvmeSecCtrlList list = {0}; 4822*99f48ae7SLukasz Maniak uint8_t i; 4823*99f48ae7SLukasz Maniak 4824*99f48ae7SLukasz Maniak for (i = 0; i < num_sec_ctrl; i++) { 4825*99f48ae7SLukasz Maniak if (n->sec_ctrl_list.sec[i].scid >= min_id) { 4826*99f48ae7SLukasz Maniak list.numcntl = num_sec_ctrl - i; 4827*99f48ae7SLukasz Maniak memcpy(&list.sec, n->sec_ctrl_list.sec + i, 4828*99f48ae7SLukasz Maniak list.numcntl * sizeof(NvmeSecCtrlEntry)); 4829*99f48ae7SLukasz Maniak break; 4830*99f48ae7SLukasz Maniak } 4831*99f48ae7SLukasz Maniak } 4832*99f48ae7SLukasz Maniak 4833*99f48ae7SLukasz Maniak trace_pci_nvme_identify_sec_ctrl_list(pri_ctrl_id, list.numcntl); 4834*99f48ae7SLukasz Maniak 4835*99f48ae7SLukasz Maniak return nvme_c2h(n, (uint8_t *)&list, sizeof(list), req); 4836*99f48ae7SLukasz Maniak } 4837*99f48ae7SLukasz Maniak 483888eea45cSKlaus Jensen static uint16_t nvme_identify_ns_csi(NvmeCtrl *n, NvmeRequest *req, 483988eea45cSKlaus Jensen bool active) 484088eea45cSKlaus Jensen { 484188eea45cSKlaus Jensen NvmeNamespace *ns; 484288eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 484388eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(c->nsid); 484488eea45cSKlaus Jensen 484588eea45cSKlaus Jensen trace_pci_nvme_identify_ns_csi(nsid, c->csi); 484688eea45cSKlaus Jensen 484788eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid) || nsid == NVME_NSID_BROADCAST) { 484888eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 484988eea45cSKlaus Jensen } 485088eea45cSKlaus Jensen 485188eea45cSKlaus Jensen ns = nvme_ns(n, nsid); 485288eea45cSKlaus Jensen if (unlikely(!ns)) { 485388eea45cSKlaus Jensen if (!active) { 485488eea45cSKlaus Jensen ns = nvme_subsys_ns(n->subsys, nsid); 485588eea45cSKlaus Jensen if (!ns) { 485688eea45cSKlaus Jensen return nvme_rpt_empty_id_struct(n, req); 485788eea45cSKlaus Jensen } 485888eea45cSKlaus Jensen } else { 485988eea45cSKlaus Jensen return nvme_rpt_empty_id_struct(n, req); 486088eea45cSKlaus Jensen } 486188eea45cSKlaus Jensen } 486288eea45cSKlaus Jensen 48633553c48fSGollu Appalanaidu if (c->csi == NVME_CSI_NVM) { 486444219b60SNaveen Nagar return nvme_c2h(n, (uint8_t *)&ns->id_ns_nvm, sizeof(NvmeIdNsNvm), 486544219b60SNaveen Nagar req); 486688eea45cSKlaus Jensen } else if (c->csi == NVME_CSI_ZONED && ns->csi == NVME_CSI_ZONED) { 486788eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *)ns->id_ns_zoned, sizeof(NvmeIdNsZoned), 486888eea45cSKlaus Jensen req); 486988eea45cSKlaus Jensen } 487088eea45cSKlaus Jensen 487188eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 487288eea45cSKlaus Jensen } 487388eea45cSKlaus Jensen 487488eea45cSKlaus Jensen static uint16_t nvme_identify_nslist(NvmeCtrl *n, NvmeRequest *req, 487588eea45cSKlaus Jensen bool active) 487688eea45cSKlaus Jensen { 487788eea45cSKlaus Jensen NvmeNamespace *ns; 487888eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 487988eea45cSKlaus Jensen uint32_t min_nsid = le32_to_cpu(c->nsid); 488088eea45cSKlaus Jensen uint8_t list[NVME_IDENTIFY_DATA_SIZE] = {}; 488188eea45cSKlaus Jensen static const int data_len = sizeof(list); 488288eea45cSKlaus Jensen uint32_t *list_ptr = (uint32_t *)list; 488388eea45cSKlaus Jensen int i, j = 0; 488488eea45cSKlaus Jensen 488588eea45cSKlaus Jensen trace_pci_nvme_identify_nslist(min_nsid); 488688eea45cSKlaus Jensen 488788eea45cSKlaus Jensen /* 488888eea45cSKlaus Jensen * Both FFFFFFFFh (NVME_NSID_BROADCAST) and FFFFFFFFEh are invalid values 488988eea45cSKlaus Jensen * since the Active Namespace ID List should return namespaces with ids 489088eea45cSKlaus Jensen * *higher* than the NSID specified in the command. This is also specified 489188eea45cSKlaus Jensen * in the spec (NVM Express v1.3d, Section 5.15.4). 489288eea45cSKlaus Jensen */ 489388eea45cSKlaus Jensen if (min_nsid >= NVME_NSID_BROADCAST - 1) { 489488eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 489588eea45cSKlaus Jensen } 489688eea45cSKlaus Jensen 489788eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 489888eea45cSKlaus Jensen ns = nvme_ns(n, i); 489988eea45cSKlaus Jensen if (!ns) { 490088eea45cSKlaus Jensen if (!active) { 490188eea45cSKlaus Jensen ns = nvme_subsys_ns(n->subsys, i); 490288eea45cSKlaus Jensen if (!ns) { 490388eea45cSKlaus Jensen continue; 490488eea45cSKlaus Jensen } 490588eea45cSKlaus Jensen } else { 490688eea45cSKlaus Jensen continue; 490788eea45cSKlaus Jensen } 490888eea45cSKlaus Jensen } 490988eea45cSKlaus Jensen if (ns->params.nsid <= min_nsid) { 491088eea45cSKlaus Jensen continue; 491188eea45cSKlaus Jensen } 491288eea45cSKlaus Jensen list_ptr[j++] = cpu_to_le32(ns->params.nsid); 491388eea45cSKlaus Jensen if (j == data_len / sizeof(uint32_t)) { 491488eea45cSKlaus Jensen break; 491588eea45cSKlaus Jensen } 491688eea45cSKlaus Jensen } 491788eea45cSKlaus Jensen 491888eea45cSKlaus Jensen return nvme_c2h(n, list, data_len, req); 491988eea45cSKlaus Jensen } 492088eea45cSKlaus Jensen 492188eea45cSKlaus Jensen static uint16_t nvme_identify_nslist_csi(NvmeCtrl *n, NvmeRequest *req, 492288eea45cSKlaus Jensen bool active) 492388eea45cSKlaus Jensen { 492488eea45cSKlaus Jensen NvmeNamespace *ns; 492588eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 492688eea45cSKlaus Jensen uint32_t min_nsid = le32_to_cpu(c->nsid); 492788eea45cSKlaus Jensen uint8_t list[NVME_IDENTIFY_DATA_SIZE] = {}; 492888eea45cSKlaus Jensen static const int data_len = sizeof(list); 492988eea45cSKlaus Jensen uint32_t *list_ptr = (uint32_t *)list; 493088eea45cSKlaus Jensen int i, j = 0; 493188eea45cSKlaus Jensen 493288eea45cSKlaus Jensen trace_pci_nvme_identify_nslist_csi(min_nsid, c->csi); 493388eea45cSKlaus Jensen 493488eea45cSKlaus Jensen /* 493588eea45cSKlaus Jensen * Same as in nvme_identify_nslist(), FFFFFFFFh/FFFFFFFFEh are invalid. 493688eea45cSKlaus Jensen */ 493788eea45cSKlaus Jensen if (min_nsid >= NVME_NSID_BROADCAST - 1) { 493888eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 493988eea45cSKlaus Jensen } 494088eea45cSKlaus Jensen 494188eea45cSKlaus Jensen if (c->csi != NVME_CSI_NVM && c->csi != NVME_CSI_ZONED) { 494288eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 494388eea45cSKlaus Jensen } 494488eea45cSKlaus Jensen 494588eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 494688eea45cSKlaus Jensen ns = nvme_ns(n, i); 494788eea45cSKlaus Jensen if (!ns) { 494888eea45cSKlaus Jensen if (!active) { 494988eea45cSKlaus Jensen ns = nvme_subsys_ns(n->subsys, i); 495088eea45cSKlaus Jensen if (!ns) { 495188eea45cSKlaus Jensen continue; 495288eea45cSKlaus Jensen } 495388eea45cSKlaus Jensen } else { 495488eea45cSKlaus Jensen continue; 495588eea45cSKlaus Jensen } 495688eea45cSKlaus Jensen } 495788eea45cSKlaus Jensen if (ns->params.nsid <= min_nsid || c->csi != ns->csi) { 495888eea45cSKlaus Jensen continue; 495988eea45cSKlaus Jensen } 496088eea45cSKlaus Jensen list_ptr[j++] = cpu_to_le32(ns->params.nsid); 496188eea45cSKlaus Jensen if (j == data_len / sizeof(uint32_t)) { 496288eea45cSKlaus Jensen break; 496388eea45cSKlaus Jensen } 496488eea45cSKlaus Jensen } 496588eea45cSKlaus Jensen 496688eea45cSKlaus Jensen return nvme_c2h(n, list, data_len, req); 496788eea45cSKlaus Jensen } 496888eea45cSKlaus Jensen 496988eea45cSKlaus Jensen static uint16_t nvme_identify_ns_descr_list(NvmeCtrl *n, NvmeRequest *req) 497088eea45cSKlaus Jensen { 497188eea45cSKlaus Jensen NvmeNamespace *ns; 497288eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 497388eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(c->nsid); 497488eea45cSKlaus Jensen uint8_t list[NVME_IDENTIFY_DATA_SIZE] = {}; 49756870cfb8SHeinrich Schuchardt uint8_t *pos = list; 497688eea45cSKlaus Jensen struct { 497788eea45cSKlaus Jensen NvmeIdNsDescr hdr; 497888eea45cSKlaus Jensen uint8_t v[NVME_NIDL_UUID]; 49795f4884c4SKlaus Jensen } QEMU_PACKED uuid = {}; 49806870cfb8SHeinrich Schuchardt struct { 49816870cfb8SHeinrich Schuchardt NvmeIdNsDescr hdr; 49826870cfb8SHeinrich Schuchardt uint64_t v; 49835f4884c4SKlaus Jensen } QEMU_PACKED eui64 = {}; 498488eea45cSKlaus Jensen struct { 498588eea45cSKlaus Jensen NvmeIdNsDescr hdr; 498688eea45cSKlaus Jensen uint8_t v; 49875f4884c4SKlaus Jensen } QEMU_PACKED csi = {}; 498888eea45cSKlaus Jensen 498988eea45cSKlaus Jensen trace_pci_nvme_identify_ns_descr_list(nsid); 499088eea45cSKlaus Jensen 499188eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid) || nsid == NVME_NSID_BROADCAST) { 499288eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 499388eea45cSKlaus Jensen } 499488eea45cSKlaus Jensen 499588eea45cSKlaus Jensen ns = nvme_ns(n, nsid); 499688eea45cSKlaus Jensen if (unlikely(!ns)) { 499788eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 499888eea45cSKlaus Jensen } 499988eea45cSKlaus Jensen 50009f2e1acfSKlaus Jensen if (!qemu_uuid_is_null(&ns->params.uuid)) { 50016870cfb8SHeinrich Schuchardt uuid.hdr.nidt = NVME_NIDT_UUID; 50026870cfb8SHeinrich Schuchardt uuid.hdr.nidl = NVME_NIDL_UUID; 50036870cfb8SHeinrich Schuchardt memcpy(uuid.v, ns->params.uuid.data, NVME_NIDL_UUID); 50046870cfb8SHeinrich Schuchardt memcpy(pos, &uuid, sizeof(uuid)); 50056870cfb8SHeinrich Schuchardt pos += sizeof(uuid); 50069f2e1acfSKlaus Jensen } 500788eea45cSKlaus Jensen 50086870cfb8SHeinrich Schuchardt if (ns->params.eui64) { 50096870cfb8SHeinrich Schuchardt eui64.hdr.nidt = NVME_NIDT_EUI64; 50106870cfb8SHeinrich Schuchardt eui64.hdr.nidl = NVME_NIDL_EUI64; 50116870cfb8SHeinrich Schuchardt eui64.v = cpu_to_be64(ns->params.eui64); 50126870cfb8SHeinrich Schuchardt memcpy(pos, &eui64, sizeof(eui64)); 50136870cfb8SHeinrich Schuchardt pos += sizeof(eui64); 50146870cfb8SHeinrich Schuchardt } 50156870cfb8SHeinrich Schuchardt 50166870cfb8SHeinrich Schuchardt csi.hdr.nidt = NVME_NIDT_CSI; 50176870cfb8SHeinrich Schuchardt csi.hdr.nidl = NVME_NIDL_CSI; 50186870cfb8SHeinrich Schuchardt csi.v = ns->csi; 50196870cfb8SHeinrich Schuchardt memcpy(pos, &csi, sizeof(csi)); 50206870cfb8SHeinrich Schuchardt pos += sizeof(csi); 502188eea45cSKlaus Jensen 502288eea45cSKlaus Jensen return nvme_c2h(n, list, sizeof(list), req); 502388eea45cSKlaus Jensen } 502488eea45cSKlaus Jensen 502588eea45cSKlaus Jensen static uint16_t nvme_identify_cmd_set(NvmeCtrl *n, NvmeRequest *req) 502688eea45cSKlaus Jensen { 502788eea45cSKlaus Jensen uint8_t list[NVME_IDENTIFY_DATA_SIZE] = {}; 502888eea45cSKlaus Jensen static const int data_len = sizeof(list); 502988eea45cSKlaus Jensen 503088eea45cSKlaus Jensen trace_pci_nvme_identify_cmd_set(); 503188eea45cSKlaus Jensen 503288eea45cSKlaus Jensen NVME_SET_CSI(*list, NVME_CSI_NVM); 503388eea45cSKlaus Jensen NVME_SET_CSI(*list, NVME_CSI_ZONED); 503488eea45cSKlaus Jensen 503588eea45cSKlaus Jensen return nvme_c2h(n, list, data_len, req); 503688eea45cSKlaus Jensen } 503788eea45cSKlaus Jensen 503888eea45cSKlaus Jensen static uint16_t nvme_identify(NvmeCtrl *n, NvmeRequest *req) 503988eea45cSKlaus Jensen { 504088eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 504188eea45cSKlaus Jensen 504288eea45cSKlaus Jensen trace_pci_nvme_identify(nvme_cid(req), c->cns, le16_to_cpu(c->ctrlid), 504388eea45cSKlaus Jensen c->csi); 504488eea45cSKlaus Jensen 504588eea45cSKlaus Jensen switch (c->cns) { 504688eea45cSKlaus Jensen case NVME_ID_CNS_NS: 504788eea45cSKlaus Jensen return nvme_identify_ns(n, req, true); 504888eea45cSKlaus Jensen case NVME_ID_CNS_NS_PRESENT: 504988eea45cSKlaus Jensen return nvme_identify_ns(n, req, false); 505088eea45cSKlaus Jensen case NVME_ID_CNS_NS_ATTACHED_CTRL_LIST: 50515f4eb94dSGollu Appalanaidu return nvme_identify_ctrl_list(n, req, true); 50525f4eb94dSGollu Appalanaidu case NVME_ID_CNS_CTRL_LIST: 50535f4eb94dSGollu Appalanaidu return nvme_identify_ctrl_list(n, req, false); 50545e6f963fSLukasz Maniak case NVME_ID_CNS_PRIMARY_CTRL_CAP: 50555e6f963fSLukasz Maniak return nvme_identify_pri_ctrl_cap(n, req); 5056*99f48ae7SLukasz Maniak case NVME_ID_CNS_SECONDARY_CTRL_LIST: 5057*99f48ae7SLukasz Maniak return nvme_identify_sec_ctrl_list(n, req); 505888eea45cSKlaus Jensen case NVME_ID_CNS_CS_NS: 505988eea45cSKlaus Jensen return nvme_identify_ns_csi(n, req, true); 506088eea45cSKlaus Jensen case NVME_ID_CNS_CS_NS_PRESENT: 506188eea45cSKlaus Jensen return nvme_identify_ns_csi(n, req, false); 506288eea45cSKlaus Jensen case NVME_ID_CNS_CTRL: 506388eea45cSKlaus Jensen return nvme_identify_ctrl(n, req); 506488eea45cSKlaus Jensen case NVME_ID_CNS_CS_CTRL: 506588eea45cSKlaus Jensen return nvme_identify_ctrl_csi(n, req); 506688eea45cSKlaus Jensen case NVME_ID_CNS_NS_ACTIVE_LIST: 506788eea45cSKlaus Jensen return nvme_identify_nslist(n, req, true); 506888eea45cSKlaus Jensen case NVME_ID_CNS_NS_PRESENT_LIST: 506988eea45cSKlaus Jensen return nvme_identify_nslist(n, req, false); 507088eea45cSKlaus Jensen case NVME_ID_CNS_CS_NS_ACTIVE_LIST: 507188eea45cSKlaus Jensen return nvme_identify_nslist_csi(n, req, true); 507288eea45cSKlaus Jensen case NVME_ID_CNS_CS_NS_PRESENT_LIST: 507388eea45cSKlaus Jensen return nvme_identify_nslist_csi(n, req, false); 507488eea45cSKlaus Jensen case NVME_ID_CNS_NS_DESCR_LIST: 507588eea45cSKlaus Jensen return nvme_identify_ns_descr_list(n, req); 507688eea45cSKlaus Jensen case NVME_ID_CNS_IO_COMMAND_SET: 507788eea45cSKlaus Jensen return nvme_identify_cmd_set(n, req); 507888eea45cSKlaus Jensen default: 507988eea45cSKlaus Jensen trace_pci_nvme_err_invalid_identify_cns(le32_to_cpu(c->cns)); 508088eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 508188eea45cSKlaus Jensen } 508288eea45cSKlaus Jensen } 508388eea45cSKlaus Jensen 508488eea45cSKlaus Jensen static uint16_t nvme_abort(NvmeCtrl *n, NvmeRequest *req) 508588eea45cSKlaus Jensen { 508688eea45cSKlaus Jensen uint16_t sqid = le32_to_cpu(req->cmd.cdw10) & 0xffff; 508788eea45cSKlaus Jensen 508888eea45cSKlaus Jensen req->cqe.result = 1; 508988eea45cSKlaus Jensen if (nvme_check_sqid(n, sqid)) { 509088eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 509188eea45cSKlaus Jensen } 509288eea45cSKlaus Jensen 509388eea45cSKlaus Jensen return NVME_SUCCESS; 509488eea45cSKlaus Jensen } 509588eea45cSKlaus Jensen 509688eea45cSKlaus Jensen static inline void nvme_set_timestamp(NvmeCtrl *n, uint64_t ts) 509788eea45cSKlaus Jensen { 509888eea45cSKlaus Jensen trace_pci_nvme_setfeat_timestamp(ts); 509988eea45cSKlaus Jensen 510088eea45cSKlaus Jensen n->host_timestamp = le64_to_cpu(ts); 510188eea45cSKlaus Jensen n->timestamp_set_qemu_clock_ms = qemu_clock_get_ms(QEMU_CLOCK_VIRTUAL); 510288eea45cSKlaus Jensen } 510388eea45cSKlaus Jensen 510488eea45cSKlaus Jensen static inline uint64_t nvme_get_timestamp(const NvmeCtrl *n) 510588eea45cSKlaus Jensen { 510688eea45cSKlaus Jensen uint64_t current_time = qemu_clock_get_ms(QEMU_CLOCK_VIRTUAL); 510788eea45cSKlaus Jensen uint64_t elapsed_time = current_time - n->timestamp_set_qemu_clock_ms; 510888eea45cSKlaus Jensen 510988eea45cSKlaus Jensen union nvme_timestamp { 511088eea45cSKlaus Jensen struct { 511188eea45cSKlaus Jensen uint64_t timestamp:48; 511288eea45cSKlaus Jensen uint64_t sync:1; 511388eea45cSKlaus Jensen uint64_t origin:3; 511488eea45cSKlaus Jensen uint64_t rsvd1:12; 511588eea45cSKlaus Jensen }; 511688eea45cSKlaus Jensen uint64_t all; 511788eea45cSKlaus Jensen }; 511888eea45cSKlaus Jensen 511988eea45cSKlaus Jensen union nvme_timestamp ts; 512088eea45cSKlaus Jensen ts.all = 0; 512188eea45cSKlaus Jensen ts.timestamp = n->host_timestamp + elapsed_time; 512288eea45cSKlaus Jensen 512388eea45cSKlaus Jensen /* If the host timestamp is non-zero, set the timestamp origin */ 512488eea45cSKlaus Jensen ts.origin = n->host_timestamp ? 0x01 : 0x00; 512588eea45cSKlaus Jensen 512688eea45cSKlaus Jensen trace_pci_nvme_getfeat_timestamp(ts.all); 512788eea45cSKlaus Jensen 512888eea45cSKlaus Jensen return cpu_to_le64(ts.all); 512988eea45cSKlaus Jensen } 513088eea45cSKlaus Jensen 513188eea45cSKlaus Jensen static uint16_t nvme_get_feature_timestamp(NvmeCtrl *n, NvmeRequest *req) 513288eea45cSKlaus Jensen { 513388eea45cSKlaus Jensen uint64_t timestamp = nvme_get_timestamp(n); 513488eea45cSKlaus Jensen 513588eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *)×tamp, sizeof(timestamp), req); 513688eea45cSKlaus Jensen } 513788eea45cSKlaus Jensen 513888eea45cSKlaus Jensen static uint16_t nvme_get_feature(NvmeCtrl *n, NvmeRequest *req) 513988eea45cSKlaus Jensen { 514088eea45cSKlaus Jensen NvmeCmd *cmd = &req->cmd; 514188eea45cSKlaus Jensen uint32_t dw10 = le32_to_cpu(cmd->cdw10); 514288eea45cSKlaus Jensen uint32_t dw11 = le32_to_cpu(cmd->cdw11); 514388eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(cmd->nsid); 514488eea45cSKlaus Jensen uint32_t result; 514588eea45cSKlaus Jensen uint8_t fid = NVME_GETSETFEAT_FID(dw10); 514688eea45cSKlaus Jensen NvmeGetFeatureSelect sel = NVME_GETFEAT_SELECT(dw10); 514788eea45cSKlaus Jensen uint16_t iv; 514888eea45cSKlaus Jensen NvmeNamespace *ns; 514988eea45cSKlaus Jensen int i; 515088eea45cSKlaus Jensen 515188eea45cSKlaus Jensen static const uint32_t nvme_feature_default[NVME_FID_MAX] = { 515288eea45cSKlaus Jensen [NVME_ARBITRATION] = NVME_ARB_AB_NOLIMIT, 515388eea45cSKlaus Jensen }; 515488eea45cSKlaus Jensen 515588eea45cSKlaus Jensen trace_pci_nvme_getfeat(nvme_cid(req), nsid, fid, sel, dw11); 515688eea45cSKlaus Jensen 515788eea45cSKlaus Jensen if (!nvme_feature_support[fid]) { 515888eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 515988eea45cSKlaus Jensen } 516088eea45cSKlaus Jensen 516188eea45cSKlaus Jensen if (nvme_feature_cap[fid] & NVME_FEAT_CAP_NS) { 516288eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid) || nsid == NVME_NSID_BROADCAST) { 516388eea45cSKlaus Jensen /* 516488eea45cSKlaus Jensen * The Reservation Notification Mask and Reservation Persistence 516588eea45cSKlaus Jensen * features require a status code of Invalid Field in Command when 516688eea45cSKlaus Jensen * NSID is FFFFFFFFh. Since the device does not support those 516788eea45cSKlaus Jensen * features we can always return Invalid Namespace or Format as we 516888eea45cSKlaus Jensen * should do for all other features. 516988eea45cSKlaus Jensen */ 517088eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 517188eea45cSKlaus Jensen } 517288eea45cSKlaus Jensen 517388eea45cSKlaus Jensen if (!nvme_ns(n, nsid)) { 517488eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 517588eea45cSKlaus Jensen } 517688eea45cSKlaus Jensen } 517788eea45cSKlaus Jensen 517888eea45cSKlaus Jensen switch (sel) { 517988eea45cSKlaus Jensen case NVME_GETFEAT_SELECT_CURRENT: 518088eea45cSKlaus Jensen break; 518188eea45cSKlaus Jensen case NVME_GETFEAT_SELECT_SAVED: 518288eea45cSKlaus Jensen /* no features are saveable by the controller; fallthrough */ 518388eea45cSKlaus Jensen case NVME_GETFEAT_SELECT_DEFAULT: 518488eea45cSKlaus Jensen goto defaults; 518588eea45cSKlaus Jensen case NVME_GETFEAT_SELECT_CAP: 518688eea45cSKlaus Jensen result = nvme_feature_cap[fid]; 518788eea45cSKlaus Jensen goto out; 518888eea45cSKlaus Jensen } 518988eea45cSKlaus Jensen 519088eea45cSKlaus Jensen switch (fid) { 519188eea45cSKlaus Jensen case NVME_TEMPERATURE_THRESHOLD: 519288eea45cSKlaus Jensen result = 0; 519388eea45cSKlaus Jensen 519488eea45cSKlaus Jensen /* 519588eea45cSKlaus Jensen * The controller only implements the Composite Temperature sensor, so 519688eea45cSKlaus Jensen * return 0 for all other sensors. 519788eea45cSKlaus Jensen */ 519888eea45cSKlaus Jensen if (NVME_TEMP_TMPSEL(dw11) != NVME_TEMP_TMPSEL_COMPOSITE) { 519988eea45cSKlaus Jensen goto out; 520088eea45cSKlaus Jensen } 520188eea45cSKlaus Jensen 520288eea45cSKlaus Jensen switch (NVME_TEMP_THSEL(dw11)) { 520388eea45cSKlaus Jensen case NVME_TEMP_THSEL_OVER: 520488eea45cSKlaus Jensen result = n->features.temp_thresh_hi; 520588eea45cSKlaus Jensen goto out; 520688eea45cSKlaus Jensen case NVME_TEMP_THSEL_UNDER: 520788eea45cSKlaus Jensen result = n->features.temp_thresh_low; 520888eea45cSKlaus Jensen goto out; 520988eea45cSKlaus Jensen } 521088eea45cSKlaus Jensen 521188eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 521288eea45cSKlaus Jensen case NVME_ERROR_RECOVERY: 521388eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid)) { 521488eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 521588eea45cSKlaus Jensen } 521688eea45cSKlaus Jensen 521788eea45cSKlaus Jensen ns = nvme_ns(n, nsid); 521888eea45cSKlaus Jensen if (unlikely(!ns)) { 521988eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 522088eea45cSKlaus Jensen } 522188eea45cSKlaus Jensen 522288eea45cSKlaus Jensen result = ns->features.err_rec; 522388eea45cSKlaus Jensen goto out; 522488eea45cSKlaus Jensen case NVME_VOLATILE_WRITE_CACHE: 522588eea45cSKlaus Jensen result = 0; 522688eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 522788eea45cSKlaus Jensen ns = nvme_ns(n, i); 522888eea45cSKlaus Jensen if (!ns) { 522988eea45cSKlaus Jensen continue; 523088eea45cSKlaus Jensen } 523188eea45cSKlaus Jensen 523288eea45cSKlaus Jensen result = blk_enable_write_cache(ns->blkconf.blk); 523388eea45cSKlaus Jensen if (result) { 523488eea45cSKlaus Jensen break; 523588eea45cSKlaus Jensen } 523688eea45cSKlaus Jensen } 523788eea45cSKlaus Jensen trace_pci_nvme_getfeat_vwcache(result ? "enabled" : "disabled"); 523888eea45cSKlaus Jensen goto out; 523988eea45cSKlaus Jensen case NVME_ASYNCHRONOUS_EVENT_CONF: 524088eea45cSKlaus Jensen result = n->features.async_config; 524188eea45cSKlaus Jensen goto out; 524288eea45cSKlaus Jensen case NVME_TIMESTAMP: 524388eea45cSKlaus Jensen return nvme_get_feature_timestamp(n, req); 5244d0c0697bSNaveen Nagar case NVME_HOST_BEHAVIOR_SUPPORT: 5245d0c0697bSNaveen Nagar return nvme_c2h(n, (uint8_t *)&n->features.hbs, 5246d0c0697bSNaveen Nagar sizeof(n->features.hbs), req); 524788eea45cSKlaus Jensen default: 524888eea45cSKlaus Jensen break; 524988eea45cSKlaus Jensen } 525088eea45cSKlaus Jensen 525188eea45cSKlaus Jensen defaults: 525288eea45cSKlaus Jensen switch (fid) { 525388eea45cSKlaus Jensen case NVME_TEMPERATURE_THRESHOLD: 525488eea45cSKlaus Jensen result = 0; 525588eea45cSKlaus Jensen 525688eea45cSKlaus Jensen if (NVME_TEMP_TMPSEL(dw11) != NVME_TEMP_TMPSEL_COMPOSITE) { 525788eea45cSKlaus Jensen break; 525888eea45cSKlaus Jensen } 525988eea45cSKlaus Jensen 526088eea45cSKlaus Jensen if (NVME_TEMP_THSEL(dw11) == NVME_TEMP_THSEL_OVER) { 526188eea45cSKlaus Jensen result = NVME_TEMPERATURE_WARNING; 526288eea45cSKlaus Jensen } 526388eea45cSKlaus Jensen 526488eea45cSKlaus Jensen break; 526588eea45cSKlaus Jensen case NVME_NUMBER_OF_QUEUES: 526688eea45cSKlaus Jensen result = (n->params.max_ioqpairs - 1) | 526788eea45cSKlaus Jensen ((n->params.max_ioqpairs - 1) << 16); 526888eea45cSKlaus Jensen trace_pci_nvme_getfeat_numq(result); 526988eea45cSKlaus Jensen break; 527088eea45cSKlaus Jensen case NVME_INTERRUPT_VECTOR_CONF: 527188eea45cSKlaus Jensen iv = dw11 & 0xffff; 527288eea45cSKlaus Jensen if (iv >= n->params.max_ioqpairs + 1) { 527388eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 527488eea45cSKlaus Jensen } 527588eea45cSKlaus Jensen 527688eea45cSKlaus Jensen result = iv; 527788eea45cSKlaus Jensen if (iv == n->admin_cq.vector) { 527888eea45cSKlaus Jensen result |= NVME_INTVC_NOCOALESCING; 527988eea45cSKlaus Jensen } 528088eea45cSKlaus Jensen break; 528188eea45cSKlaus Jensen default: 528288eea45cSKlaus Jensen result = nvme_feature_default[fid]; 528388eea45cSKlaus Jensen break; 528488eea45cSKlaus Jensen } 528588eea45cSKlaus Jensen 528688eea45cSKlaus Jensen out: 528788eea45cSKlaus Jensen req->cqe.result = cpu_to_le32(result); 528888eea45cSKlaus Jensen return NVME_SUCCESS; 528988eea45cSKlaus Jensen } 529088eea45cSKlaus Jensen 529188eea45cSKlaus Jensen static uint16_t nvme_set_feature_timestamp(NvmeCtrl *n, NvmeRequest *req) 529288eea45cSKlaus Jensen { 529388eea45cSKlaus Jensen uint16_t ret; 529488eea45cSKlaus Jensen uint64_t timestamp; 529588eea45cSKlaus Jensen 529688eea45cSKlaus Jensen ret = nvme_h2c(n, (uint8_t *)×tamp, sizeof(timestamp), req); 529788eea45cSKlaus Jensen if (ret) { 529888eea45cSKlaus Jensen return ret; 529988eea45cSKlaus Jensen } 530088eea45cSKlaus Jensen 530188eea45cSKlaus Jensen nvme_set_timestamp(n, timestamp); 530288eea45cSKlaus Jensen 530388eea45cSKlaus Jensen return NVME_SUCCESS; 530488eea45cSKlaus Jensen } 530588eea45cSKlaus Jensen 530688eea45cSKlaus Jensen static uint16_t nvme_set_feature(NvmeCtrl *n, NvmeRequest *req) 530788eea45cSKlaus Jensen { 530888eea45cSKlaus Jensen NvmeNamespace *ns = NULL; 530988eea45cSKlaus Jensen 531088eea45cSKlaus Jensen NvmeCmd *cmd = &req->cmd; 531188eea45cSKlaus Jensen uint32_t dw10 = le32_to_cpu(cmd->cdw10); 531288eea45cSKlaus Jensen uint32_t dw11 = le32_to_cpu(cmd->cdw11); 531388eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(cmd->nsid); 531488eea45cSKlaus Jensen uint8_t fid = NVME_GETSETFEAT_FID(dw10); 531588eea45cSKlaus Jensen uint8_t save = NVME_SETFEAT_SAVE(dw10); 5316763c05dfSNaveen Nagar uint16_t status; 531788eea45cSKlaus Jensen int i; 531888eea45cSKlaus Jensen 531988eea45cSKlaus Jensen trace_pci_nvme_setfeat(nvme_cid(req), nsid, fid, save, dw11); 532088eea45cSKlaus Jensen 532188eea45cSKlaus Jensen if (save && !(nvme_feature_cap[fid] & NVME_FEAT_CAP_SAVE)) { 532288eea45cSKlaus Jensen return NVME_FID_NOT_SAVEABLE | NVME_DNR; 532388eea45cSKlaus Jensen } 532488eea45cSKlaus Jensen 532588eea45cSKlaus Jensen if (!nvme_feature_support[fid]) { 532688eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 532788eea45cSKlaus Jensen } 532888eea45cSKlaus Jensen 532988eea45cSKlaus Jensen if (nvme_feature_cap[fid] & NVME_FEAT_CAP_NS) { 533088eea45cSKlaus Jensen if (nsid != NVME_NSID_BROADCAST) { 533188eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid)) { 533288eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 533388eea45cSKlaus Jensen } 533488eea45cSKlaus Jensen 533588eea45cSKlaus Jensen ns = nvme_ns(n, nsid); 533688eea45cSKlaus Jensen if (unlikely(!ns)) { 533788eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 533888eea45cSKlaus Jensen } 533988eea45cSKlaus Jensen } 534088eea45cSKlaus Jensen } else if (nsid && nsid != NVME_NSID_BROADCAST) { 534188eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid)) { 534288eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 534388eea45cSKlaus Jensen } 534488eea45cSKlaus Jensen 534588eea45cSKlaus Jensen return NVME_FEAT_NOT_NS_SPEC | NVME_DNR; 534688eea45cSKlaus Jensen } 534788eea45cSKlaus Jensen 534888eea45cSKlaus Jensen if (!(nvme_feature_cap[fid] & NVME_FEAT_CAP_CHANGE)) { 534988eea45cSKlaus Jensen return NVME_FEAT_NOT_CHANGEABLE | NVME_DNR; 535088eea45cSKlaus Jensen } 535188eea45cSKlaus Jensen 535288eea45cSKlaus Jensen switch (fid) { 535388eea45cSKlaus Jensen case NVME_TEMPERATURE_THRESHOLD: 535488eea45cSKlaus Jensen if (NVME_TEMP_TMPSEL(dw11) != NVME_TEMP_TMPSEL_COMPOSITE) { 535588eea45cSKlaus Jensen break; 535688eea45cSKlaus Jensen } 535788eea45cSKlaus Jensen 535888eea45cSKlaus Jensen switch (NVME_TEMP_THSEL(dw11)) { 535988eea45cSKlaus Jensen case NVME_TEMP_THSEL_OVER: 536088eea45cSKlaus Jensen n->features.temp_thresh_hi = NVME_TEMP_TMPTH(dw11); 536188eea45cSKlaus Jensen break; 536288eea45cSKlaus Jensen case NVME_TEMP_THSEL_UNDER: 536388eea45cSKlaus Jensen n->features.temp_thresh_low = NVME_TEMP_TMPTH(dw11); 536488eea45cSKlaus Jensen break; 536588eea45cSKlaus Jensen default: 536688eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 536788eea45cSKlaus Jensen } 536888eea45cSKlaus Jensen 536988eea45cSKlaus Jensen if ((n->temperature >= n->features.temp_thresh_hi) || 537088eea45cSKlaus Jensen (n->temperature <= n->features.temp_thresh_low)) { 53719235a72aSKlaus Jensen nvme_smart_event(n, NVME_SMART_TEMPERATURE); 537288eea45cSKlaus Jensen } 537388eea45cSKlaus Jensen 537488eea45cSKlaus Jensen break; 537588eea45cSKlaus Jensen case NVME_ERROR_RECOVERY: 537688eea45cSKlaus Jensen if (nsid == NVME_NSID_BROADCAST) { 537788eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 537888eea45cSKlaus Jensen ns = nvme_ns(n, i); 537988eea45cSKlaus Jensen 538088eea45cSKlaus Jensen if (!ns) { 538188eea45cSKlaus Jensen continue; 538288eea45cSKlaus Jensen } 538388eea45cSKlaus Jensen 538488eea45cSKlaus Jensen if (NVME_ID_NS_NSFEAT_DULBE(ns->id_ns.nsfeat)) { 538588eea45cSKlaus Jensen ns->features.err_rec = dw11; 538688eea45cSKlaus Jensen } 538788eea45cSKlaus Jensen } 538888eea45cSKlaus Jensen 538988eea45cSKlaus Jensen break; 539088eea45cSKlaus Jensen } 539188eea45cSKlaus Jensen 539288eea45cSKlaus Jensen assert(ns); 539388eea45cSKlaus Jensen if (NVME_ID_NS_NSFEAT_DULBE(ns->id_ns.nsfeat)) { 539488eea45cSKlaus Jensen ns->features.err_rec = dw11; 539588eea45cSKlaus Jensen } 539688eea45cSKlaus Jensen break; 539788eea45cSKlaus Jensen case NVME_VOLATILE_WRITE_CACHE: 539888eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 539988eea45cSKlaus Jensen ns = nvme_ns(n, i); 540088eea45cSKlaus Jensen if (!ns) { 540188eea45cSKlaus Jensen continue; 540288eea45cSKlaus Jensen } 540388eea45cSKlaus Jensen 540488eea45cSKlaus Jensen if (!(dw11 & 0x1) && blk_enable_write_cache(ns->blkconf.blk)) { 540588eea45cSKlaus Jensen blk_flush(ns->blkconf.blk); 540688eea45cSKlaus Jensen } 540788eea45cSKlaus Jensen 540888eea45cSKlaus Jensen blk_set_enable_write_cache(ns->blkconf.blk, dw11 & 1); 540988eea45cSKlaus Jensen } 541088eea45cSKlaus Jensen 541188eea45cSKlaus Jensen break; 541288eea45cSKlaus Jensen 541388eea45cSKlaus Jensen case NVME_NUMBER_OF_QUEUES: 541488eea45cSKlaus Jensen if (n->qs_created) { 541588eea45cSKlaus Jensen return NVME_CMD_SEQ_ERROR | NVME_DNR; 541688eea45cSKlaus Jensen } 541788eea45cSKlaus Jensen 541888eea45cSKlaus Jensen /* 541988eea45cSKlaus Jensen * NVMe v1.3, Section 5.21.1.7: FFFFh is not an allowed value for NCQR 542088eea45cSKlaus Jensen * and NSQR. 542188eea45cSKlaus Jensen */ 542288eea45cSKlaus Jensen if ((dw11 & 0xffff) == 0xffff || ((dw11 >> 16) & 0xffff) == 0xffff) { 542388eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 542488eea45cSKlaus Jensen } 542588eea45cSKlaus Jensen 542688eea45cSKlaus Jensen trace_pci_nvme_setfeat_numq((dw11 & 0xffff) + 1, 542788eea45cSKlaus Jensen ((dw11 >> 16) & 0xffff) + 1, 542888eea45cSKlaus Jensen n->params.max_ioqpairs, 542988eea45cSKlaus Jensen n->params.max_ioqpairs); 543088eea45cSKlaus Jensen req->cqe.result = cpu_to_le32((n->params.max_ioqpairs - 1) | 543188eea45cSKlaus Jensen ((n->params.max_ioqpairs - 1) << 16)); 543288eea45cSKlaus Jensen break; 543388eea45cSKlaus Jensen case NVME_ASYNCHRONOUS_EVENT_CONF: 543488eea45cSKlaus Jensen n->features.async_config = dw11; 543588eea45cSKlaus Jensen break; 543688eea45cSKlaus Jensen case NVME_TIMESTAMP: 543788eea45cSKlaus Jensen return nvme_set_feature_timestamp(n, req); 5438d0c0697bSNaveen Nagar case NVME_HOST_BEHAVIOR_SUPPORT: 5439763c05dfSNaveen Nagar status = nvme_h2c(n, (uint8_t *)&n->features.hbs, 5440d0c0697bSNaveen Nagar sizeof(n->features.hbs), req); 5441763c05dfSNaveen Nagar if (status) { 5442763c05dfSNaveen Nagar return status; 5443763c05dfSNaveen Nagar } 5444763c05dfSNaveen Nagar 5445763c05dfSNaveen Nagar for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 5446763c05dfSNaveen Nagar ns = nvme_ns(n, i); 5447763c05dfSNaveen Nagar 5448763c05dfSNaveen Nagar if (!ns) { 5449763c05dfSNaveen Nagar continue; 5450763c05dfSNaveen Nagar } 5451763c05dfSNaveen Nagar 5452763c05dfSNaveen Nagar ns->id_ns.nlbaf = ns->nlbaf - 1; 5453763c05dfSNaveen Nagar if (!n->features.hbs.lbafee) { 5454763c05dfSNaveen Nagar ns->id_ns.nlbaf = MIN(ns->id_ns.nlbaf, 15); 5455763c05dfSNaveen Nagar } 5456763c05dfSNaveen Nagar } 5457763c05dfSNaveen Nagar 5458763c05dfSNaveen Nagar return status; 545988eea45cSKlaus Jensen case NVME_COMMAND_SET_PROFILE: 546088eea45cSKlaus Jensen if (dw11 & 0x1ff) { 546188eea45cSKlaus Jensen trace_pci_nvme_err_invalid_iocsci(dw11 & 0x1ff); 546288eea45cSKlaus Jensen return NVME_CMD_SET_CMB_REJECTED | NVME_DNR; 546388eea45cSKlaus Jensen } 546488eea45cSKlaus Jensen break; 546588eea45cSKlaus Jensen default: 546688eea45cSKlaus Jensen return NVME_FEAT_NOT_CHANGEABLE | NVME_DNR; 546788eea45cSKlaus Jensen } 546888eea45cSKlaus Jensen return NVME_SUCCESS; 546988eea45cSKlaus Jensen } 547088eea45cSKlaus Jensen 547188eea45cSKlaus Jensen static uint16_t nvme_aer(NvmeCtrl *n, NvmeRequest *req) 547288eea45cSKlaus Jensen { 547388eea45cSKlaus Jensen trace_pci_nvme_aer(nvme_cid(req)); 547488eea45cSKlaus Jensen 547588eea45cSKlaus Jensen if (n->outstanding_aers > n->params.aerl) { 547688eea45cSKlaus Jensen trace_pci_nvme_aer_aerl_exceeded(); 547788eea45cSKlaus Jensen return NVME_AER_LIMIT_EXCEEDED; 547888eea45cSKlaus Jensen } 547988eea45cSKlaus Jensen 548088eea45cSKlaus Jensen n->aer_reqs[n->outstanding_aers] = req; 548188eea45cSKlaus Jensen n->outstanding_aers++; 548288eea45cSKlaus Jensen 548388eea45cSKlaus Jensen if (!QTAILQ_EMPTY(&n->aer_queue)) { 548488eea45cSKlaus Jensen nvme_process_aers(n); 548588eea45cSKlaus Jensen } 548688eea45cSKlaus Jensen 548788eea45cSKlaus Jensen return NVME_NO_COMPLETE; 548888eea45cSKlaus Jensen } 548988eea45cSKlaus Jensen 549088eea45cSKlaus Jensen static void nvme_update_dmrsl(NvmeCtrl *n) 549188eea45cSKlaus Jensen { 549288eea45cSKlaus Jensen int nsid; 549388eea45cSKlaus Jensen 549488eea45cSKlaus Jensen for (nsid = 1; nsid <= NVME_MAX_NAMESPACES; nsid++) { 549588eea45cSKlaus Jensen NvmeNamespace *ns = nvme_ns(n, nsid); 549688eea45cSKlaus Jensen if (!ns) { 549788eea45cSKlaus Jensen continue; 549888eea45cSKlaus Jensen } 549988eea45cSKlaus Jensen 550088eea45cSKlaus Jensen n->dmrsl = MIN_NON_ZERO(n->dmrsl, 550188eea45cSKlaus Jensen BDRV_REQUEST_MAX_BYTES / nvme_l2b(ns, 1)); 550288eea45cSKlaus Jensen } 550388eea45cSKlaus Jensen } 550488eea45cSKlaus Jensen 550588eea45cSKlaus Jensen static void nvme_select_iocs_ns(NvmeCtrl *n, NvmeNamespace *ns) 550688eea45cSKlaus Jensen { 550749e03457SKlaus Jensen uint32_t cc = ldl_le_p(&n->bar.cc); 550849e03457SKlaus Jensen 550988eea45cSKlaus Jensen ns->iocs = nvme_cse_iocs_none; 551088eea45cSKlaus Jensen switch (ns->csi) { 551188eea45cSKlaus Jensen case NVME_CSI_NVM: 551249e03457SKlaus Jensen if (NVME_CC_CSS(cc) != NVME_CC_CSS_ADMIN_ONLY) { 551388eea45cSKlaus Jensen ns->iocs = nvme_cse_iocs_nvm; 551488eea45cSKlaus Jensen } 551588eea45cSKlaus Jensen break; 551688eea45cSKlaus Jensen case NVME_CSI_ZONED: 551749e03457SKlaus Jensen if (NVME_CC_CSS(cc) == NVME_CC_CSS_CSI) { 551888eea45cSKlaus Jensen ns->iocs = nvme_cse_iocs_zoned; 551949e03457SKlaus Jensen } else if (NVME_CC_CSS(cc) == NVME_CC_CSS_NVM) { 552088eea45cSKlaus Jensen ns->iocs = nvme_cse_iocs_nvm; 552188eea45cSKlaus Jensen } 552288eea45cSKlaus Jensen break; 552388eea45cSKlaus Jensen } 552488eea45cSKlaus Jensen } 552588eea45cSKlaus Jensen 552688eea45cSKlaus Jensen static uint16_t nvme_ns_attachment(NvmeCtrl *n, NvmeRequest *req) 552788eea45cSKlaus Jensen { 552888eea45cSKlaus Jensen NvmeNamespace *ns; 552988eea45cSKlaus Jensen NvmeCtrl *ctrl; 553088eea45cSKlaus Jensen uint16_t list[NVME_CONTROLLER_LIST_SIZE] = {}; 553188eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(req->cmd.nsid); 553288eea45cSKlaus Jensen uint32_t dw10 = le32_to_cpu(req->cmd.cdw10); 553307a3dfa7SNaveen Nagar uint8_t sel = dw10 & 0xf; 553488eea45cSKlaus Jensen uint16_t *nr_ids = &list[0]; 553588eea45cSKlaus Jensen uint16_t *ids = &list[1]; 553688eea45cSKlaus Jensen uint16_t ret; 553788eea45cSKlaus Jensen int i; 553888eea45cSKlaus Jensen 553988eea45cSKlaus Jensen trace_pci_nvme_ns_attachment(nvme_cid(req), dw10 & 0xf); 554088eea45cSKlaus Jensen 554188eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid)) { 554288eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 554388eea45cSKlaus Jensen } 554488eea45cSKlaus Jensen 554588eea45cSKlaus Jensen ns = nvme_subsys_ns(n->subsys, nsid); 554688eea45cSKlaus Jensen if (!ns) { 554788eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 554888eea45cSKlaus Jensen } 554988eea45cSKlaus Jensen 555088eea45cSKlaus Jensen ret = nvme_h2c(n, (uint8_t *)list, 4096, req); 555188eea45cSKlaus Jensen if (ret) { 555288eea45cSKlaus Jensen return ret; 555388eea45cSKlaus Jensen } 555488eea45cSKlaus Jensen 555588eea45cSKlaus Jensen if (!*nr_ids) { 555688eea45cSKlaus Jensen return NVME_NS_CTRL_LIST_INVALID | NVME_DNR; 555788eea45cSKlaus Jensen } 555888eea45cSKlaus Jensen 555988eea45cSKlaus Jensen *nr_ids = MIN(*nr_ids, NVME_CONTROLLER_LIST_SIZE - 1); 556088eea45cSKlaus Jensen for (i = 0; i < *nr_ids; i++) { 556188eea45cSKlaus Jensen ctrl = nvme_subsys_ctrl(n->subsys, ids[i]); 556288eea45cSKlaus Jensen if (!ctrl) { 556388eea45cSKlaus Jensen return NVME_NS_CTRL_LIST_INVALID | NVME_DNR; 556488eea45cSKlaus Jensen } 556588eea45cSKlaus Jensen 556607a3dfa7SNaveen Nagar switch (sel) { 556707a3dfa7SNaveen Nagar case NVME_NS_ATTACHMENT_ATTACH: 556888eea45cSKlaus Jensen if (nvme_ns(ctrl, nsid)) { 556988eea45cSKlaus Jensen return NVME_NS_ALREADY_ATTACHED | NVME_DNR; 557088eea45cSKlaus Jensen } 557188eea45cSKlaus Jensen 557288eea45cSKlaus Jensen if (ns->attached && !ns->params.shared) { 557388eea45cSKlaus Jensen return NVME_NS_PRIVATE | NVME_DNR; 557488eea45cSKlaus Jensen } 557588eea45cSKlaus Jensen 557688eea45cSKlaus Jensen nvme_attach_ns(ctrl, ns); 557788eea45cSKlaus Jensen nvme_select_iocs_ns(ctrl, ns); 557807a3dfa7SNaveen Nagar 557907a3dfa7SNaveen Nagar break; 558007a3dfa7SNaveen Nagar 558107a3dfa7SNaveen Nagar case NVME_NS_ATTACHMENT_DETACH: 558288eea45cSKlaus Jensen if (!nvme_ns(ctrl, nsid)) { 558388eea45cSKlaus Jensen return NVME_NS_NOT_ATTACHED | NVME_DNR; 558488eea45cSKlaus Jensen } 558588eea45cSKlaus Jensen 558688eea45cSKlaus Jensen ctrl->namespaces[nsid] = NULL; 558788eea45cSKlaus Jensen ns->attached--; 558888eea45cSKlaus Jensen 558988eea45cSKlaus Jensen nvme_update_dmrsl(ctrl); 559007a3dfa7SNaveen Nagar 559107a3dfa7SNaveen Nagar break; 559207a3dfa7SNaveen Nagar 559307a3dfa7SNaveen Nagar default: 559407a3dfa7SNaveen Nagar return NVME_INVALID_FIELD | NVME_DNR; 559588eea45cSKlaus Jensen } 559688eea45cSKlaus Jensen 559788eea45cSKlaus Jensen /* 559888eea45cSKlaus Jensen * Add namespace id to the changed namespace id list for event clearing 559988eea45cSKlaus Jensen * via Get Log Page command. 560088eea45cSKlaus Jensen */ 560188eea45cSKlaus Jensen if (!test_and_set_bit(nsid, ctrl->changed_nsids)) { 560288eea45cSKlaus Jensen nvme_enqueue_event(ctrl, NVME_AER_TYPE_NOTICE, 560388eea45cSKlaus Jensen NVME_AER_INFO_NOTICE_NS_ATTR_CHANGED, 560488eea45cSKlaus Jensen NVME_LOG_CHANGED_NSLIST); 560588eea45cSKlaus Jensen } 560688eea45cSKlaus Jensen } 560788eea45cSKlaus Jensen 560888eea45cSKlaus Jensen return NVME_SUCCESS; 560988eea45cSKlaus Jensen } 561088eea45cSKlaus Jensen 56113bcf26d3SKlaus Jensen typedef struct NvmeFormatAIOCB { 56123bcf26d3SKlaus Jensen BlockAIOCB common; 56133bcf26d3SKlaus Jensen BlockAIOCB *aiocb; 56143bcf26d3SKlaus Jensen QEMUBH *bh; 56153bcf26d3SKlaus Jensen NvmeRequest *req; 56163bcf26d3SKlaus Jensen int ret; 561788eea45cSKlaus Jensen 56183bcf26d3SKlaus Jensen NvmeNamespace *ns; 56193bcf26d3SKlaus Jensen uint32_t nsid; 56203bcf26d3SKlaus Jensen bool broadcast; 56213bcf26d3SKlaus Jensen int64_t offset; 5622a6de6ed5SKlaus Jensen 5623a6de6ed5SKlaus Jensen uint8_t lbaf; 5624a6de6ed5SKlaus Jensen uint8_t mset; 5625a6de6ed5SKlaus Jensen uint8_t pi; 5626a6de6ed5SKlaus Jensen uint8_t pil; 56273bcf26d3SKlaus Jensen } NvmeFormatAIOCB; 56283bcf26d3SKlaus Jensen 56293bcf26d3SKlaus Jensen static void nvme_format_bh(void *opaque); 56303bcf26d3SKlaus Jensen 56313bcf26d3SKlaus Jensen static void nvme_format_cancel(BlockAIOCB *aiocb) 56323bcf26d3SKlaus Jensen { 56333bcf26d3SKlaus Jensen NvmeFormatAIOCB *iocb = container_of(aiocb, NvmeFormatAIOCB, common); 56343bcf26d3SKlaus Jensen 56353bcf26d3SKlaus Jensen if (iocb->aiocb) { 56363bcf26d3SKlaus Jensen blk_aio_cancel_async(iocb->aiocb); 56373bcf26d3SKlaus Jensen } 56383bcf26d3SKlaus Jensen } 56393bcf26d3SKlaus Jensen 56403bcf26d3SKlaus Jensen static const AIOCBInfo nvme_format_aiocb_info = { 56413bcf26d3SKlaus Jensen .aiocb_size = sizeof(NvmeFormatAIOCB), 56423bcf26d3SKlaus Jensen .cancel_async = nvme_format_cancel, 56433bcf26d3SKlaus Jensen .get_aio_context = nvme_get_aio_context, 56443bcf26d3SKlaus Jensen }; 56453bcf26d3SKlaus Jensen 5646a6de6ed5SKlaus Jensen static void nvme_format_set(NvmeNamespace *ns, uint8_t lbaf, uint8_t mset, 5647a6de6ed5SKlaus Jensen uint8_t pi, uint8_t pil) 56483bcf26d3SKlaus Jensen { 5649763c05dfSNaveen Nagar uint8_t lbafl = lbaf & 0xf; 5650763c05dfSNaveen Nagar uint8_t lbafu = lbaf >> 4; 5651763c05dfSNaveen Nagar 56523bcf26d3SKlaus Jensen trace_pci_nvme_format_set(ns->params.nsid, lbaf, mset, pi, pil); 56533bcf26d3SKlaus Jensen 56543bcf26d3SKlaus Jensen ns->id_ns.dps = (pil << 3) | pi; 5655763c05dfSNaveen Nagar ns->id_ns.flbas = (lbafu << 5) | (mset << 4) | lbafl; 56563bcf26d3SKlaus Jensen 56573bcf26d3SKlaus Jensen nvme_ns_init_format(ns); 56583bcf26d3SKlaus Jensen } 56593bcf26d3SKlaus Jensen 56603bcf26d3SKlaus Jensen static void nvme_format_ns_cb(void *opaque, int ret) 56613bcf26d3SKlaus Jensen { 56623bcf26d3SKlaus Jensen NvmeFormatAIOCB *iocb = opaque; 56633bcf26d3SKlaus Jensen NvmeNamespace *ns = iocb->ns; 56643bcf26d3SKlaus Jensen int bytes; 56653bcf26d3SKlaus Jensen 56663bcf26d3SKlaus Jensen if (ret < 0) { 56673bcf26d3SKlaus Jensen iocb->ret = ret; 56683bcf26d3SKlaus Jensen goto done; 56693bcf26d3SKlaus Jensen } 56703bcf26d3SKlaus Jensen 56713bcf26d3SKlaus Jensen assert(ns); 56723bcf26d3SKlaus Jensen 56733bcf26d3SKlaus Jensen if (iocb->offset < ns->size) { 56743bcf26d3SKlaus Jensen bytes = MIN(BDRV_REQUEST_MAX_BYTES, ns->size - iocb->offset); 56753bcf26d3SKlaus Jensen 56763bcf26d3SKlaus Jensen iocb->aiocb = blk_aio_pwrite_zeroes(ns->blkconf.blk, iocb->offset, 56773bcf26d3SKlaus Jensen bytes, BDRV_REQ_MAY_UNMAP, 56783bcf26d3SKlaus Jensen nvme_format_ns_cb, iocb); 56793bcf26d3SKlaus Jensen 56803bcf26d3SKlaus Jensen iocb->offset += bytes; 56813bcf26d3SKlaus Jensen return; 56823bcf26d3SKlaus Jensen } 56833bcf26d3SKlaus Jensen 5684a6de6ed5SKlaus Jensen nvme_format_set(ns, iocb->lbaf, iocb->mset, iocb->pi, iocb->pil); 56853bcf26d3SKlaus Jensen ns->status = 0x0; 56863bcf26d3SKlaus Jensen iocb->ns = NULL; 56873bcf26d3SKlaus Jensen iocb->offset = 0; 56883bcf26d3SKlaus Jensen 56893bcf26d3SKlaus Jensen done: 56903bcf26d3SKlaus Jensen iocb->aiocb = NULL; 56913bcf26d3SKlaus Jensen qemu_bh_schedule(iocb->bh); 56923bcf26d3SKlaus Jensen } 56933bcf26d3SKlaus Jensen 56943bcf26d3SKlaus Jensen static uint16_t nvme_format_check(NvmeNamespace *ns, uint8_t lbaf, uint8_t pi) 56953bcf26d3SKlaus Jensen { 569688eea45cSKlaus Jensen if (ns->params.zoned) { 569788eea45cSKlaus Jensen return NVME_INVALID_FORMAT | NVME_DNR; 569888eea45cSKlaus Jensen } 569988eea45cSKlaus Jensen 570088eea45cSKlaus Jensen if (lbaf > ns->id_ns.nlbaf) { 570188eea45cSKlaus Jensen return NVME_INVALID_FORMAT | NVME_DNR; 570288eea45cSKlaus Jensen } 570388eea45cSKlaus Jensen 5704ac0b34c5SKlaus Jensen if (pi && (ns->id_ns.lbaf[lbaf].ms < nvme_pi_tuple_size(ns))) { 570588eea45cSKlaus Jensen return NVME_INVALID_FORMAT | NVME_DNR; 570688eea45cSKlaus Jensen } 570788eea45cSKlaus Jensen 570888eea45cSKlaus Jensen if (pi && pi > NVME_ID_NS_DPS_TYPE_3) { 570988eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 571088eea45cSKlaus Jensen } 571188eea45cSKlaus Jensen 571288eea45cSKlaus Jensen return NVME_SUCCESS; 571388eea45cSKlaus Jensen } 571488eea45cSKlaus Jensen 57153bcf26d3SKlaus Jensen static void nvme_format_bh(void *opaque) 571688eea45cSKlaus Jensen { 57173bcf26d3SKlaus Jensen NvmeFormatAIOCB *iocb = opaque; 57183bcf26d3SKlaus Jensen NvmeRequest *req = iocb->req; 57193bcf26d3SKlaus Jensen NvmeCtrl *n = nvme_ctrl(req); 572044219b60SNaveen Nagar uint32_t dw10 = le32_to_cpu(req->cmd.cdw10); 572144219b60SNaveen Nagar uint8_t lbaf = dw10 & 0xf; 572244219b60SNaveen Nagar uint8_t pi = (dw10 >> 5) & 0x7; 572388eea45cSKlaus Jensen uint16_t status; 572488eea45cSKlaus Jensen int i; 572588eea45cSKlaus Jensen 57263bcf26d3SKlaus Jensen if (iocb->ret < 0) { 57273bcf26d3SKlaus Jensen goto done; 572888eea45cSKlaus Jensen } 572988eea45cSKlaus Jensen 57303bcf26d3SKlaus Jensen if (iocb->broadcast) { 57313bcf26d3SKlaus Jensen for (i = iocb->nsid + 1; i <= NVME_MAX_NAMESPACES; i++) { 57323bcf26d3SKlaus Jensen iocb->ns = nvme_ns(n, i); 57333bcf26d3SKlaus Jensen if (iocb->ns) { 57343bcf26d3SKlaus Jensen iocb->nsid = i; 573588eea45cSKlaus Jensen break; 573688eea45cSKlaus Jensen } 573788eea45cSKlaus Jensen } 573888eea45cSKlaus Jensen } 573988eea45cSKlaus Jensen 57403bcf26d3SKlaus Jensen if (!iocb->ns) { 57413bcf26d3SKlaus Jensen goto done; 574288eea45cSKlaus Jensen } 574388eea45cSKlaus Jensen 574444219b60SNaveen Nagar status = nvme_format_check(iocb->ns, lbaf, pi); 57453bcf26d3SKlaus Jensen if (status) { 57463bcf26d3SKlaus Jensen req->status = status; 57473bcf26d3SKlaus Jensen goto done; 57483bcf26d3SKlaus Jensen } 57493bcf26d3SKlaus Jensen 57503bcf26d3SKlaus Jensen iocb->ns->status = NVME_FORMAT_IN_PROGRESS; 57513bcf26d3SKlaus Jensen nvme_format_ns_cb(iocb, 0); 57523bcf26d3SKlaus Jensen return; 57533bcf26d3SKlaus Jensen 57543bcf26d3SKlaus Jensen done: 57553bcf26d3SKlaus Jensen qemu_bh_delete(iocb->bh); 57563bcf26d3SKlaus Jensen iocb->bh = NULL; 57573bcf26d3SKlaus Jensen 57583bcf26d3SKlaus Jensen iocb->common.cb(iocb->common.opaque, iocb->ret); 57593bcf26d3SKlaus Jensen 57603bcf26d3SKlaus Jensen qemu_aio_unref(iocb); 57613bcf26d3SKlaus Jensen } 57623bcf26d3SKlaus Jensen 57633bcf26d3SKlaus Jensen static uint16_t nvme_format(NvmeCtrl *n, NvmeRequest *req) 57643bcf26d3SKlaus Jensen { 57653bcf26d3SKlaus Jensen NvmeFormatAIOCB *iocb; 57663bcf26d3SKlaus Jensen uint32_t nsid = le32_to_cpu(req->cmd.nsid); 5767a6de6ed5SKlaus Jensen uint32_t dw10 = le32_to_cpu(req->cmd.cdw10); 5768a6de6ed5SKlaus Jensen uint8_t lbaf = dw10 & 0xf; 5769a6de6ed5SKlaus Jensen uint8_t mset = (dw10 >> 4) & 0x1; 5770a6de6ed5SKlaus Jensen uint8_t pi = (dw10 >> 5) & 0x7; 5771a6de6ed5SKlaus Jensen uint8_t pil = (dw10 >> 8) & 0x1; 5772763c05dfSNaveen Nagar uint8_t lbafu = (dw10 >> 12) & 0x3; 57733bcf26d3SKlaus Jensen uint16_t status; 57743bcf26d3SKlaus Jensen 57753bcf26d3SKlaus Jensen iocb = qemu_aio_get(&nvme_format_aiocb_info, NULL, nvme_misc_cb, req); 57763bcf26d3SKlaus Jensen 57773bcf26d3SKlaus Jensen iocb->req = req; 57783bcf26d3SKlaus Jensen iocb->bh = qemu_bh_new(nvme_format_bh, iocb); 57793bcf26d3SKlaus Jensen iocb->ret = 0; 57803bcf26d3SKlaus Jensen iocb->ns = NULL; 57813bcf26d3SKlaus Jensen iocb->nsid = 0; 5782a6de6ed5SKlaus Jensen iocb->lbaf = lbaf; 5783a6de6ed5SKlaus Jensen iocb->mset = mset; 5784a6de6ed5SKlaus Jensen iocb->pi = pi; 5785a6de6ed5SKlaus Jensen iocb->pil = pil; 57863bcf26d3SKlaus Jensen iocb->broadcast = (nsid == NVME_NSID_BROADCAST); 57873bcf26d3SKlaus Jensen iocb->offset = 0; 57883bcf26d3SKlaus Jensen 5789763c05dfSNaveen Nagar if (n->features.hbs.lbafee) { 5790763c05dfSNaveen Nagar iocb->lbaf |= lbafu << 4; 5791763c05dfSNaveen Nagar } 5792763c05dfSNaveen Nagar 57933bcf26d3SKlaus Jensen if (!iocb->broadcast) { 57943bcf26d3SKlaus Jensen if (!nvme_nsid_valid(n, nsid)) { 57953bcf26d3SKlaus Jensen status = NVME_INVALID_NSID | NVME_DNR; 57963bcf26d3SKlaus Jensen goto out; 57973bcf26d3SKlaus Jensen } 57983bcf26d3SKlaus Jensen 57993bcf26d3SKlaus Jensen iocb->ns = nvme_ns(n, nsid); 58003bcf26d3SKlaus Jensen if (!iocb->ns) { 58013bcf26d3SKlaus Jensen status = NVME_INVALID_FIELD | NVME_DNR; 58023bcf26d3SKlaus Jensen goto out; 58033bcf26d3SKlaus Jensen } 58043bcf26d3SKlaus Jensen } 58053bcf26d3SKlaus Jensen 58063bcf26d3SKlaus Jensen req->aiocb = &iocb->common; 58073bcf26d3SKlaus Jensen qemu_bh_schedule(iocb->bh); 58083bcf26d3SKlaus Jensen 58093bcf26d3SKlaus Jensen return NVME_NO_COMPLETE; 58103bcf26d3SKlaus Jensen 58113bcf26d3SKlaus Jensen out: 58123bcf26d3SKlaus Jensen qemu_bh_delete(iocb->bh); 58133bcf26d3SKlaus Jensen iocb->bh = NULL; 58143bcf26d3SKlaus Jensen qemu_aio_unref(iocb); 58153bcf26d3SKlaus Jensen return status; 581688eea45cSKlaus Jensen } 581788eea45cSKlaus Jensen 581888eea45cSKlaus Jensen static uint16_t nvme_admin_cmd(NvmeCtrl *n, NvmeRequest *req) 581988eea45cSKlaus Jensen { 582088eea45cSKlaus Jensen trace_pci_nvme_admin_cmd(nvme_cid(req), nvme_sqid(req), req->cmd.opcode, 582188eea45cSKlaus Jensen nvme_adm_opc_str(req->cmd.opcode)); 582288eea45cSKlaus Jensen 582388eea45cSKlaus Jensen if (!(nvme_cse_acs[req->cmd.opcode] & NVME_CMD_EFF_CSUPP)) { 582488eea45cSKlaus Jensen trace_pci_nvme_err_invalid_admin_opc(req->cmd.opcode); 582588eea45cSKlaus Jensen return NVME_INVALID_OPCODE | NVME_DNR; 582688eea45cSKlaus Jensen } 582788eea45cSKlaus Jensen 582888eea45cSKlaus Jensen /* SGLs shall not be used for Admin commands in NVMe over PCIe */ 582988eea45cSKlaus Jensen if (NVME_CMD_FLAGS_PSDT(req->cmd.flags) != NVME_PSDT_PRP) { 583088eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 583188eea45cSKlaus Jensen } 583288eea45cSKlaus Jensen 5833c53a9a91SPankaj Raghav if (NVME_CMD_FLAGS_FUSE(req->cmd.flags)) { 5834c53a9a91SPankaj Raghav return NVME_INVALID_FIELD; 5835c53a9a91SPankaj Raghav } 5836c53a9a91SPankaj Raghav 583788eea45cSKlaus Jensen switch (req->cmd.opcode) { 583888eea45cSKlaus Jensen case NVME_ADM_CMD_DELETE_SQ: 583988eea45cSKlaus Jensen return nvme_del_sq(n, req); 584088eea45cSKlaus Jensen case NVME_ADM_CMD_CREATE_SQ: 584188eea45cSKlaus Jensen return nvme_create_sq(n, req); 584288eea45cSKlaus Jensen case NVME_ADM_CMD_GET_LOG_PAGE: 584388eea45cSKlaus Jensen return nvme_get_log(n, req); 584488eea45cSKlaus Jensen case NVME_ADM_CMD_DELETE_CQ: 584588eea45cSKlaus Jensen return nvme_del_cq(n, req); 584688eea45cSKlaus Jensen case NVME_ADM_CMD_CREATE_CQ: 584788eea45cSKlaus Jensen return nvme_create_cq(n, req); 584888eea45cSKlaus Jensen case NVME_ADM_CMD_IDENTIFY: 584988eea45cSKlaus Jensen return nvme_identify(n, req); 585088eea45cSKlaus Jensen case NVME_ADM_CMD_ABORT: 585188eea45cSKlaus Jensen return nvme_abort(n, req); 585288eea45cSKlaus Jensen case NVME_ADM_CMD_SET_FEATURES: 585388eea45cSKlaus Jensen return nvme_set_feature(n, req); 585488eea45cSKlaus Jensen case NVME_ADM_CMD_GET_FEATURES: 585588eea45cSKlaus Jensen return nvme_get_feature(n, req); 585688eea45cSKlaus Jensen case NVME_ADM_CMD_ASYNC_EV_REQ: 585788eea45cSKlaus Jensen return nvme_aer(n, req); 585888eea45cSKlaus Jensen case NVME_ADM_CMD_NS_ATTACHMENT: 585988eea45cSKlaus Jensen return nvme_ns_attachment(n, req); 586088eea45cSKlaus Jensen case NVME_ADM_CMD_FORMAT_NVM: 586188eea45cSKlaus Jensen return nvme_format(n, req); 586288eea45cSKlaus Jensen default: 586388eea45cSKlaus Jensen assert(false); 586488eea45cSKlaus Jensen } 586588eea45cSKlaus Jensen 586688eea45cSKlaus Jensen return NVME_INVALID_OPCODE | NVME_DNR; 586788eea45cSKlaus Jensen } 586888eea45cSKlaus Jensen 586988eea45cSKlaus Jensen static void nvme_process_sq(void *opaque) 587088eea45cSKlaus Jensen { 587188eea45cSKlaus Jensen NvmeSQueue *sq = opaque; 587288eea45cSKlaus Jensen NvmeCtrl *n = sq->ctrl; 587388eea45cSKlaus Jensen NvmeCQueue *cq = n->cq[sq->cqid]; 587488eea45cSKlaus Jensen 587588eea45cSKlaus Jensen uint16_t status; 587688eea45cSKlaus Jensen hwaddr addr; 587788eea45cSKlaus Jensen NvmeCmd cmd; 587888eea45cSKlaus Jensen NvmeRequest *req; 587988eea45cSKlaus Jensen 588088eea45cSKlaus Jensen while (!(nvme_sq_empty(sq) || QTAILQ_EMPTY(&sq->req_list))) { 588188eea45cSKlaus Jensen addr = sq->dma_addr + sq->head * n->sqe_size; 588288eea45cSKlaus Jensen if (nvme_addr_read(n, addr, (void *)&cmd, sizeof(cmd))) { 588388eea45cSKlaus Jensen trace_pci_nvme_err_addr_read(addr); 588488eea45cSKlaus Jensen trace_pci_nvme_err_cfs(); 588549e03457SKlaus Jensen stl_le_p(&n->bar.csts, NVME_CSTS_FAILED); 588688eea45cSKlaus Jensen break; 588788eea45cSKlaus Jensen } 588888eea45cSKlaus Jensen nvme_inc_sq_head(sq); 588988eea45cSKlaus Jensen 589088eea45cSKlaus Jensen req = QTAILQ_FIRST(&sq->req_list); 589188eea45cSKlaus Jensen QTAILQ_REMOVE(&sq->req_list, req, entry); 589288eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&sq->out_req_list, req, entry); 589388eea45cSKlaus Jensen nvme_req_clear(req); 589488eea45cSKlaus Jensen req->cqe.cid = cmd.cid; 589588eea45cSKlaus Jensen memcpy(&req->cmd, &cmd, sizeof(NvmeCmd)); 589688eea45cSKlaus Jensen 589788eea45cSKlaus Jensen status = sq->sqid ? nvme_io_cmd(n, req) : 589888eea45cSKlaus Jensen nvme_admin_cmd(n, req); 589988eea45cSKlaus Jensen if (status != NVME_NO_COMPLETE) { 590088eea45cSKlaus Jensen req->status = status; 590188eea45cSKlaus Jensen nvme_enqueue_req_completion(cq, req); 590288eea45cSKlaus Jensen } 590388eea45cSKlaus Jensen } 590488eea45cSKlaus Jensen } 590588eea45cSKlaus Jensen 590688eea45cSKlaus Jensen static void nvme_ctrl_reset(NvmeCtrl *n) 590788eea45cSKlaus Jensen { 590888eea45cSKlaus Jensen NvmeNamespace *ns; 590988eea45cSKlaus Jensen int i; 591088eea45cSKlaus Jensen 591188eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 591288eea45cSKlaus Jensen ns = nvme_ns(n, i); 591388eea45cSKlaus Jensen if (!ns) { 591488eea45cSKlaus Jensen continue; 591588eea45cSKlaus Jensen } 591688eea45cSKlaus Jensen 591788eea45cSKlaus Jensen nvme_ns_drain(ns); 591888eea45cSKlaus Jensen } 591988eea45cSKlaus Jensen 592088eea45cSKlaus Jensen for (i = 0; i < n->params.max_ioqpairs + 1; i++) { 592188eea45cSKlaus Jensen if (n->sq[i] != NULL) { 592288eea45cSKlaus Jensen nvme_free_sq(n->sq[i], n); 592388eea45cSKlaus Jensen } 592488eea45cSKlaus Jensen } 592588eea45cSKlaus Jensen for (i = 0; i < n->params.max_ioqpairs + 1; i++) { 592688eea45cSKlaus Jensen if (n->cq[i] != NULL) { 592788eea45cSKlaus Jensen nvme_free_cq(n->cq[i], n); 592888eea45cSKlaus Jensen } 592988eea45cSKlaus Jensen } 593088eea45cSKlaus Jensen 593188eea45cSKlaus Jensen while (!QTAILQ_EMPTY(&n->aer_queue)) { 593288eea45cSKlaus Jensen NvmeAsyncEvent *event = QTAILQ_FIRST(&n->aer_queue); 593388eea45cSKlaus Jensen QTAILQ_REMOVE(&n->aer_queue, event, entry); 593488eea45cSKlaus Jensen g_free(event); 593588eea45cSKlaus Jensen } 593688eea45cSKlaus Jensen 593744c2c094SLukasz Maniak if (!pci_is_vf(&n->parent_obj) && n->params.sriov_max_vfs) { 593844c2c094SLukasz Maniak pcie_sriov_pf_disable_vfs(&n->parent_obj); 593944c2c094SLukasz Maniak } 594044c2c094SLukasz Maniak 594188eea45cSKlaus Jensen n->aer_queued = 0; 594288eea45cSKlaus Jensen n->outstanding_aers = 0; 594388eea45cSKlaus Jensen n->qs_created = false; 594488eea45cSKlaus Jensen } 594588eea45cSKlaus Jensen 594688eea45cSKlaus Jensen static void nvme_ctrl_shutdown(NvmeCtrl *n) 594788eea45cSKlaus Jensen { 594888eea45cSKlaus Jensen NvmeNamespace *ns; 594988eea45cSKlaus Jensen int i; 595088eea45cSKlaus Jensen 595188eea45cSKlaus Jensen if (n->pmr.dev) { 595288eea45cSKlaus Jensen memory_region_msync(&n->pmr.dev->mr, 0, n->pmr.dev->size); 595388eea45cSKlaus Jensen } 595488eea45cSKlaus Jensen 595588eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 595688eea45cSKlaus Jensen ns = nvme_ns(n, i); 595788eea45cSKlaus Jensen if (!ns) { 595888eea45cSKlaus Jensen continue; 595988eea45cSKlaus Jensen } 596088eea45cSKlaus Jensen 596188eea45cSKlaus Jensen nvme_ns_shutdown(ns); 596288eea45cSKlaus Jensen } 596388eea45cSKlaus Jensen } 596488eea45cSKlaus Jensen 596588eea45cSKlaus Jensen static void nvme_select_iocs(NvmeCtrl *n) 596688eea45cSKlaus Jensen { 596788eea45cSKlaus Jensen NvmeNamespace *ns; 596888eea45cSKlaus Jensen int i; 596988eea45cSKlaus Jensen 597088eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 597188eea45cSKlaus Jensen ns = nvme_ns(n, i); 597288eea45cSKlaus Jensen if (!ns) { 597388eea45cSKlaus Jensen continue; 597488eea45cSKlaus Jensen } 597588eea45cSKlaus Jensen 597688eea45cSKlaus Jensen nvme_select_iocs_ns(n, ns); 597788eea45cSKlaus Jensen } 597888eea45cSKlaus Jensen } 597988eea45cSKlaus Jensen 598088eea45cSKlaus Jensen static int nvme_start_ctrl(NvmeCtrl *n) 598188eea45cSKlaus Jensen { 598249e03457SKlaus Jensen uint64_t cap = ldq_le_p(&n->bar.cap); 598349e03457SKlaus Jensen uint32_t cc = ldl_le_p(&n->bar.cc); 598449e03457SKlaus Jensen uint32_t aqa = ldl_le_p(&n->bar.aqa); 598549e03457SKlaus Jensen uint64_t asq = ldq_le_p(&n->bar.asq); 598649e03457SKlaus Jensen uint64_t acq = ldq_le_p(&n->bar.acq); 598749e03457SKlaus Jensen uint32_t page_bits = NVME_CC_MPS(cc) + 12; 598888eea45cSKlaus Jensen uint32_t page_size = 1 << page_bits; 598988eea45cSKlaus Jensen 599088eea45cSKlaus Jensen if (unlikely(n->cq[0])) { 599188eea45cSKlaus Jensen trace_pci_nvme_err_startfail_cq(); 599288eea45cSKlaus Jensen return -1; 599388eea45cSKlaus Jensen } 599488eea45cSKlaus Jensen if (unlikely(n->sq[0])) { 599588eea45cSKlaus Jensen trace_pci_nvme_err_startfail_sq(); 599688eea45cSKlaus Jensen return -1; 599788eea45cSKlaus Jensen } 599849e03457SKlaus Jensen if (unlikely(asq & (page_size - 1))) { 599949e03457SKlaus Jensen trace_pci_nvme_err_startfail_asq_misaligned(asq); 600088eea45cSKlaus Jensen return -1; 600188eea45cSKlaus Jensen } 600249e03457SKlaus Jensen if (unlikely(acq & (page_size - 1))) { 600349e03457SKlaus Jensen trace_pci_nvme_err_startfail_acq_misaligned(acq); 600488eea45cSKlaus Jensen return -1; 600588eea45cSKlaus Jensen } 600649e03457SKlaus Jensen if (unlikely(!(NVME_CAP_CSS(cap) & (1 << NVME_CC_CSS(cc))))) { 600749e03457SKlaus Jensen trace_pci_nvme_err_startfail_css(NVME_CC_CSS(cc)); 600888eea45cSKlaus Jensen return -1; 600988eea45cSKlaus Jensen } 601049e03457SKlaus Jensen if (unlikely(NVME_CC_MPS(cc) < NVME_CAP_MPSMIN(cap))) { 601188eea45cSKlaus Jensen trace_pci_nvme_err_startfail_page_too_small( 601249e03457SKlaus Jensen NVME_CC_MPS(cc), 601349e03457SKlaus Jensen NVME_CAP_MPSMIN(cap)); 601488eea45cSKlaus Jensen return -1; 601588eea45cSKlaus Jensen } 601649e03457SKlaus Jensen if (unlikely(NVME_CC_MPS(cc) > 601749e03457SKlaus Jensen NVME_CAP_MPSMAX(cap))) { 601888eea45cSKlaus Jensen trace_pci_nvme_err_startfail_page_too_large( 601949e03457SKlaus Jensen NVME_CC_MPS(cc), 602049e03457SKlaus Jensen NVME_CAP_MPSMAX(cap)); 602188eea45cSKlaus Jensen return -1; 602288eea45cSKlaus Jensen } 602349e03457SKlaus Jensen if (unlikely(NVME_CC_IOCQES(cc) < 602488eea45cSKlaus Jensen NVME_CTRL_CQES_MIN(n->id_ctrl.cqes))) { 602588eea45cSKlaus Jensen trace_pci_nvme_err_startfail_cqent_too_small( 602649e03457SKlaus Jensen NVME_CC_IOCQES(cc), 602749e03457SKlaus Jensen NVME_CTRL_CQES_MIN(cap)); 602888eea45cSKlaus Jensen return -1; 602988eea45cSKlaus Jensen } 603049e03457SKlaus Jensen if (unlikely(NVME_CC_IOCQES(cc) > 603188eea45cSKlaus Jensen NVME_CTRL_CQES_MAX(n->id_ctrl.cqes))) { 603288eea45cSKlaus Jensen trace_pci_nvme_err_startfail_cqent_too_large( 603349e03457SKlaus Jensen NVME_CC_IOCQES(cc), 603449e03457SKlaus Jensen NVME_CTRL_CQES_MAX(cap)); 603588eea45cSKlaus Jensen return -1; 603688eea45cSKlaus Jensen } 603749e03457SKlaus Jensen if (unlikely(NVME_CC_IOSQES(cc) < 603888eea45cSKlaus Jensen NVME_CTRL_SQES_MIN(n->id_ctrl.sqes))) { 603988eea45cSKlaus Jensen trace_pci_nvme_err_startfail_sqent_too_small( 604049e03457SKlaus Jensen NVME_CC_IOSQES(cc), 604149e03457SKlaus Jensen NVME_CTRL_SQES_MIN(cap)); 604288eea45cSKlaus Jensen return -1; 604388eea45cSKlaus Jensen } 604449e03457SKlaus Jensen if (unlikely(NVME_CC_IOSQES(cc) > 604588eea45cSKlaus Jensen NVME_CTRL_SQES_MAX(n->id_ctrl.sqes))) { 604688eea45cSKlaus Jensen trace_pci_nvme_err_startfail_sqent_too_large( 604749e03457SKlaus Jensen NVME_CC_IOSQES(cc), 604849e03457SKlaus Jensen NVME_CTRL_SQES_MAX(cap)); 604988eea45cSKlaus Jensen return -1; 605088eea45cSKlaus Jensen } 605149e03457SKlaus Jensen if (unlikely(!NVME_AQA_ASQS(aqa))) { 605288eea45cSKlaus Jensen trace_pci_nvme_err_startfail_asqent_sz_zero(); 605388eea45cSKlaus Jensen return -1; 605488eea45cSKlaus Jensen } 605549e03457SKlaus Jensen if (unlikely(!NVME_AQA_ACQS(aqa))) { 605688eea45cSKlaus Jensen trace_pci_nvme_err_startfail_acqent_sz_zero(); 605788eea45cSKlaus Jensen return -1; 605888eea45cSKlaus Jensen } 605988eea45cSKlaus Jensen 606088eea45cSKlaus Jensen n->page_bits = page_bits; 606188eea45cSKlaus Jensen n->page_size = page_size; 606288eea45cSKlaus Jensen n->max_prp_ents = n->page_size / sizeof(uint64_t); 606349e03457SKlaus Jensen n->cqe_size = 1 << NVME_CC_IOCQES(cc); 606449e03457SKlaus Jensen n->sqe_size = 1 << NVME_CC_IOSQES(cc); 606549e03457SKlaus Jensen nvme_init_cq(&n->admin_cq, n, acq, 0, 0, NVME_AQA_ACQS(aqa) + 1, 1); 606649e03457SKlaus Jensen nvme_init_sq(&n->admin_sq, n, asq, 0, 0, NVME_AQA_ASQS(aqa) + 1); 606788eea45cSKlaus Jensen 606888eea45cSKlaus Jensen nvme_set_timestamp(n, 0ULL); 606988eea45cSKlaus Jensen 607088eea45cSKlaus Jensen QTAILQ_INIT(&n->aer_queue); 607188eea45cSKlaus Jensen 607288eea45cSKlaus Jensen nvme_select_iocs(n); 607388eea45cSKlaus Jensen 607488eea45cSKlaus Jensen return 0; 607588eea45cSKlaus Jensen } 607688eea45cSKlaus Jensen 607788eea45cSKlaus Jensen static void nvme_cmb_enable_regs(NvmeCtrl *n) 607888eea45cSKlaus Jensen { 607949e03457SKlaus Jensen uint32_t cmbloc = ldl_le_p(&n->bar.cmbloc); 608049e03457SKlaus Jensen uint32_t cmbsz = ldl_le_p(&n->bar.cmbsz); 608188eea45cSKlaus Jensen 608249e03457SKlaus Jensen NVME_CMBLOC_SET_CDPCILS(cmbloc, 1); 608349e03457SKlaus Jensen NVME_CMBLOC_SET_CDPMLS(cmbloc, 1); 608449e03457SKlaus Jensen NVME_CMBLOC_SET_BIR(cmbloc, NVME_CMB_BIR); 608549e03457SKlaus Jensen stl_le_p(&n->bar.cmbloc, cmbloc); 608649e03457SKlaus Jensen 608749e03457SKlaus Jensen NVME_CMBSZ_SET_SQS(cmbsz, 1); 608849e03457SKlaus Jensen NVME_CMBSZ_SET_CQS(cmbsz, 0); 608949e03457SKlaus Jensen NVME_CMBSZ_SET_LISTS(cmbsz, 1); 609049e03457SKlaus Jensen NVME_CMBSZ_SET_RDS(cmbsz, 1); 609149e03457SKlaus Jensen NVME_CMBSZ_SET_WDS(cmbsz, 1); 609249e03457SKlaus Jensen NVME_CMBSZ_SET_SZU(cmbsz, 2); /* MBs */ 609349e03457SKlaus Jensen NVME_CMBSZ_SET_SZ(cmbsz, n->params.cmb_size_mb); 609449e03457SKlaus Jensen stl_le_p(&n->bar.cmbsz, cmbsz); 609588eea45cSKlaus Jensen } 609688eea45cSKlaus Jensen 609788eea45cSKlaus Jensen static void nvme_write_bar(NvmeCtrl *n, hwaddr offset, uint64_t data, 609888eea45cSKlaus Jensen unsigned size) 609988eea45cSKlaus Jensen { 610049e03457SKlaus Jensen uint64_t cap = ldq_le_p(&n->bar.cap); 610149e03457SKlaus Jensen uint32_t cc = ldl_le_p(&n->bar.cc); 610249e03457SKlaus Jensen uint32_t intms = ldl_le_p(&n->bar.intms); 610349e03457SKlaus Jensen uint32_t csts = ldl_le_p(&n->bar.csts); 610449e03457SKlaus Jensen uint32_t pmrsts = ldl_le_p(&n->bar.pmrsts); 610549e03457SKlaus Jensen 610688eea45cSKlaus Jensen if (unlikely(offset & (sizeof(uint32_t) - 1))) { 610788eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_misaligned32, 610888eea45cSKlaus Jensen "MMIO write not 32-bit aligned," 610988eea45cSKlaus Jensen " offset=0x%"PRIx64"", offset); 611088eea45cSKlaus Jensen /* should be ignored, fall through for now */ 611188eea45cSKlaus Jensen } 611288eea45cSKlaus Jensen 611388eea45cSKlaus Jensen if (unlikely(size < sizeof(uint32_t))) { 611488eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_toosmall, 611588eea45cSKlaus Jensen "MMIO write smaller than 32-bits," 611688eea45cSKlaus Jensen " offset=0x%"PRIx64", size=%u", 611788eea45cSKlaus Jensen offset, size); 611888eea45cSKlaus Jensen /* should be ignored, fall through for now */ 611988eea45cSKlaus Jensen } 612088eea45cSKlaus Jensen 612188eea45cSKlaus Jensen switch (offset) { 6122a316aa50SKlaus Jensen case NVME_REG_INTMS: 612388eea45cSKlaus Jensen if (unlikely(msix_enabled(&(n->parent_obj)))) { 612488eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_intmask_with_msix, 612588eea45cSKlaus Jensen "undefined access to interrupt mask set" 612688eea45cSKlaus Jensen " when MSI-X is enabled"); 612788eea45cSKlaus Jensen /* should be ignored, fall through for now */ 612888eea45cSKlaus Jensen } 612949e03457SKlaus Jensen intms |= data; 613049e03457SKlaus Jensen stl_le_p(&n->bar.intms, intms); 613188eea45cSKlaus Jensen n->bar.intmc = n->bar.intms; 613249e03457SKlaus Jensen trace_pci_nvme_mmio_intm_set(data & 0xffffffff, intms); 613388eea45cSKlaus Jensen nvme_irq_check(n); 613488eea45cSKlaus Jensen break; 6135a316aa50SKlaus Jensen case NVME_REG_INTMC: 613688eea45cSKlaus Jensen if (unlikely(msix_enabled(&(n->parent_obj)))) { 613788eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_intmask_with_msix, 613888eea45cSKlaus Jensen "undefined access to interrupt mask clr" 613988eea45cSKlaus Jensen " when MSI-X is enabled"); 614088eea45cSKlaus Jensen /* should be ignored, fall through for now */ 614188eea45cSKlaus Jensen } 614249e03457SKlaus Jensen intms &= ~data; 614349e03457SKlaus Jensen stl_le_p(&n->bar.intms, intms); 614488eea45cSKlaus Jensen n->bar.intmc = n->bar.intms; 614549e03457SKlaus Jensen trace_pci_nvme_mmio_intm_clr(data & 0xffffffff, intms); 614688eea45cSKlaus Jensen nvme_irq_check(n); 614788eea45cSKlaus Jensen break; 6148a316aa50SKlaus Jensen case NVME_REG_CC: 614988eea45cSKlaus Jensen trace_pci_nvme_mmio_cfg(data & 0xffffffff); 615049e03457SKlaus Jensen 615188eea45cSKlaus Jensen /* Windows first sends data, then sends enable bit */ 615249e03457SKlaus Jensen if (!NVME_CC_EN(data) && !NVME_CC_EN(cc) && 615349e03457SKlaus Jensen !NVME_CC_SHN(data) && !NVME_CC_SHN(cc)) 615488eea45cSKlaus Jensen { 615549e03457SKlaus Jensen cc = data; 615688eea45cSKlaus Jensen } 615788eea45cSKlaus Jensen 615849e03457SKlaus Jensen if (NVME_CC_EN(data) && !NVME_CC_EN(cc)) { 615949e03457SKlaus Jensen cc = data; 616049e03457SKlaus Jensen 616149e03457SKlaus Jensen /* flush CC since nvme_start_ctrl() needs the value */ 616249e03457SKlaus Jensen stl_le_p(&n->bar.cc, cc); 616388eea45cSKlaus Jensen if (unlikely(nvme_start_ctrl(n))) { 616488eea45cSKlaus Jensen trace_pci_nvme_err_startfail(); 616549e03457SKlaus Jensen csts = NVME_CSTS_FAILED; 616688eea45cSKlaus Jensen } else { 616788eea45cSKlaus Jensen trace_pci_nvme_mmio_start_success(); 616849e03457SKlaus Jensen csts = NVME_CSTS_READY; 616988eea45cSKlaus Jensen } 617049e03457SKlaus Jensen } else if (!NVME_CC_EN(data) && NVME_CC_EN(cc)) { 617188eea45cSKlaus Jensen trace_pci_nvme_mmio_stopped(); 617288eea45cSKlaus Jensen nvme_ctrl_reset(n); 617349e03457SKlaus Jensen cc = 0; 617449e03457SKlaus Jensen csts &= ~NVME_CSTS_READY; 617588eea45cSKlaus Jensen } 617649e03457SKlaus Jensen 617749e03457SKlaus Jensen if (NVME_CC_SHN(data) && !(NVME_CC_SHN(cc))) { 617888eea45cSKlaus Jensen trace_pci_nvme_mmio_shutdown_set(); 617988eea45cSKlaus Jensen nvme_ctrl_shutdown(n); 618049e03457SKlaus Jensen cc = data; 618149e03457SKlaus Jensen csts |= NVME_CSTS_SHST_COMPLETE; 618249e03457SKlaus Jensen } else if (!NVME_CC_SHN(data) && NVME_CC_SHN(cc)) { 618388eea45cSKlaus Jensen trace_pci_nvme_mmio_shutdown_cleared(); 618449e03457SKlaus Jensen csts &= ~NVME_CSTS_SHST_COMPLETE; 618549e03457SKlaus Jensen cc = data; 618688eea45cSKlaus Jensen } 618749e03457SKlaus Jensen 618849e03457SKlaus Jensen stl_le_p(&n->bar.cc, cc); 618949e03457SKlaus Jensen stl_le_p(&n->bar.csts, csts); 619049e03457SKlaus Jensen 619188eea45cSKlaus Jensen break; 6192a316aa50SKlaus Jensen case NVME_REG_CSTS: 619388eea45cSKlaus Jensen if (data & (1 << 4)) { 619488eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_ssreset_w1c_unsupported, 619588eea45cSKlaus Jensen "attempted to W1C CSTS.NSSRO" 619688eea45cSKlaus Jensen " but CAP.NSSRS is zero (not supported)"); 619788eea45cSKlaus Jensen } else if (data != 0) { 619888eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_ro_csts, 619988eea45cSKlaus Jensen "attempted to set a read only bit" 620088eea45cSKlaus Jensen " of controller status"); 620188eea45cSKlaus Jensen } 620288eea45cSKlaus Jensen break; 6203a316aa50SKlaus Jensen case NVME_REG_NSSR: 620488eea45cSKlaus Jensen if (data == 0x4e564d65) { 620588eea45cSKlaus Jensen trace_pci_nvme_ub_mmiowr_ssreset_unsupported(); 620688eea45cSKlaus Jensen } else { 620788eea45cSKlaus Jensen /* The spec says that writes of other values have no effect */ 620888eea45cSKlaus Jensen return; 620988eea45cSKlaus Jensen } 621088eea45cSKlaus Jensen break; 6211a316aa50SKlaus Jensen case NVME_REG_AQA: 621249e03457SKlaus Jensen stl_le_p(&n->bar.aqa, data); 621388eea45cSKlaus Jensen trace_pci_nvme_mmio_aqattr(data & 0xffffffff); 621488eea45cSKlaus Jensen break; 6215a316aa50SKlaus Jensen case NVME_REG_ASQ: 621649e03457SKlaus Jensen stn_le_p(&n->bar.asq, size, data); 621788eea45cSKlaus Jensen trace_pci_nvme_mmio_asqaddr(data); 621888eea45cSKlaus Jensen break; 6219a316aa50SKlaus Jensen case NVME_REG_ASQ + 4: 622049e03457SKlaus Jensen stl_le_p((uint8_t *)&n->bar.asq + 4, data); 622149e03457SKlaus Jensen trace_pci_nvme_mmio_asqaddr_hi(data, ldq_le_p(&n->bar.asq)); 622288eea45cSKlaus Jensen break; 6223a316aa50SKlaus Jensen case NVME_REG_ACQ: 622488eea45cSKlaus Jensen trace_pci_nvme_mmio_acqaddr(data); 622549e03457SKlaus Jensen stn_le_p(&n->bar.acq, size, data); 622688eea45cSKlaus Jensen break; 6227a316aa50SKlaus Jensen case NVME_REG_ACQ + 4: 622849e03457SKlaus Jensen stl_le_p((uint8_t *)&n->bar.acq + 4, data); 622949e03457SKlaus Jensen trace_pci_nvme_mmio_acqaddr_hi(data, ldq_le_p(&n->bar.acq)); 623088eea45cSKlaus Jensen break; 6231a316aa50SKlaus Jensen case NVME_REG_CMBLOC: 623288eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_cmbloc_reserved, 623388eea45cSKlaus Jensen "invalid write to reserved CMBLOC" 623488eea45cSKlaus Jensen " when CMBSZ is zero, ignored"); 623588eea45cSKlaus Jensen return; 6236a316aa50SKlaus Jensen case NVME_REG_CMBSZ: 623788eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_cmbsz_readonly, 623888eea45cSKlaus Jensen "invalid write to read only CMBSZ, ignored"); 623988eea45cSKlaus Jensen return; 6240a316aa50SKlaus Jensen case NVME_REG_CMBMSC: 624149e03457SKlaus Jensen if (!NVME_CAP_CMBS(cap)) { 624288eea45cSKlaus Jensen return; 624388eea45cSKlaus Jensen } 624488eea45cSKlaus Jensen 624549e03457SKlaus Jensen stn_le_p(&n->bar.cmbmsc, size, data); 624688eea45cSKlaus Jensen n->cmb.cmse = false; 624788eea45cSKlaus Jensen 624888eea45cSKlaus Jensen if (NVME_CMBMSC_CRE(data)) { 624988eea45cSKlaus Jensen nvme_cmb_enable_regs(n); 625088eea45cSKlaus Jensen 625188eea45cSKlaus Jensen if (NVME_CMBMSC_CMSE(data)) { 625249e03457SKlaus Jensen uint64_t cmbmsc = ldq_le_p(&n->bar.cmbmsc); 625349e03457SKlaus Jensen hwaddr cba = NVME_CMBMSC_CBA(cmbmsc) << CMBMSC_CBA_SHIFT; 625488eea45cSKlaus Jensen if (cba + int128_get64(n->cmb.mem.size) < cba) { 625549e03457SKlaus Jensen uint32_t cmbsts = ldl_le_p(&n->bar.cmbsts); 625649e03457SKlaus Jensen NVME_CMBSTS_SET_CBAI(cmbsts, 1); 625749e03457SKlaus Jensen stl_le_p(&n->bar.cmbsts, cmbsts); 625888eea45cSKlaus Jensen return; 625988eea45cSKlaus Jensen } 626088eea45cSKlaus Jensen 626188eea45cSKlaus Jensen n->cmb.cba = cba; 626288eea45cSKlaus Jensen n->cmb.cmse = true; 626388eea45cSKlaus Jensen } 626488eea45cSKlaus Jensen } else { 626588eea45cSKlaus Jensen n->bar.cmbsz = 0; 626688eea45cSKlaus Jensen n->bar.cmbloc = 0; 626788eea45cSKlaus Jensen } 626888eea45cSKlaus Jensen 626988eea45cSKlaus Jensen return; 6270a316aa50SKlaus Jensen case NVME_REG_CMBMSC + 4: 627149e03457SKlaus Jensen stl_le_p((uint8_t *)&n->bar.cmbmsc + 4, data); 627288eea45cSKlaus Jensen return; 627388eea45cSKlaus Jensen 6274a316aa50SKlaus Jensen case NVME_REG_PMRCAP: 627588eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_pmrcap_readonly, 627688eea45cSKlaus Jensen "invalid write to PMRCAP register, ignored"); 627788eea45cSKlaus Jensen return; 6278a316aa50SKlaus Jensen case NVME_REG_PMRCTL: 627949e03457SKlaus Jensen if (!NVME_CAP_PMRS(cap)) { 62802b02aabcSKlaus Jensen return; 62812b02aabcSKlaus Jensen } 62822b02aabcSKlaus Jensen 628349e03457SKlaus Jensen stl_le_p(&n->bar.pmrctl, data); 628488eea45cSKlaus Jensen if (NVME_PMRCTL_EN(data)) { 628588eea45cSKlaus Jensen memory_region_set_enabled(&n->pmr.dev->mr, true); 628649e03457SKlaus Jensen pmrsts = 0; 628788eea45cSKlaus Jensen } else { 628888eea45cSKlaus Jensen memory_region_set_enabled(&n->pmr.dev->mr, false); 628949e03457SKlaus Jensen NVME_PMRSTS_SET_NRDY(pmrsts, 1); 629088eea45cSKlaus Jensen n->pmr.cmse = false; 629188eea45cSKlaus Jensen } 629249e03457SKlaus Jensen stl_le_p(&n->bar.pmrsts, pmrsts); 629388eea45cSKlaus Jensen return; 6294a316aa50SKlaus Jensen case NVME_REG_PMRSTS: 629588eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_pmrsts_readonly, 629688eea45cSKlaus Jensen "invalid write to PMRSTS register, ignored"); 629788eea45cSKlaus Jensen return; 6298a316aa50SKlaus Jensen case NVME_REG_PMREBS: 629988eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_pmrebs_readonly, 630088eea45cSKlaus Jensen "invalid write to PMREBS register, ignored"); 630188eea45cSKlaus Jensen return; 6302a316aa50SKlaus Jensen case NVME_REG_PMRSWTP: 630388eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_pmrswtp_readonly, 630488eea45cSKlaus Jensen "invalid write to PMRSWTP register, ignored"); 630588eea45cSKlaus Jensen return; 6306a316aa50SKlaus Jensen case NVME_REG_PMRMSCL: 630749e03457SKlaus Jensen if (!NVME_CAP_PMRS(cap)) { 630888eea45cSKlaus Jensen return; 630988eea45cSKlaus Jensen } 631088eea45cSKlaus Jensen 631149e03457SKlaus Jensen stl_le_p(&n->bar.pmrmscl, data); 631288eea45cSKlaus Jensen n->pmr.cmse = false; 631388eea45cSKlaus Jensen 631449e03457SKlaus Jensen if (NVME_PMRMSCL_CMSE(data)) { 631549e03457SKlaus Jensen uint64_t pmrmscu = ldl_le_p(&n->bar.pmrmscu); 631649e03457SKlaus Jensen hwaddr cba = pmrmscu << 32 | 631749e03457SKlaus Jensen (NVME_PMRMSCL_CBA(data) << PMRMSCL_CBA_SHIFT); 631888eea45cSKlaus Jensen if (cba + int128_get64(n->pmr.dev->mr.size) < cba) { 631949e03457SKlaus Jensen NVME_PMRSTS_SET_CBAI(pmrsts, 1); 632049e03457SKlaus Jensen stl_le_p(&n->bar.pmrsts, pmrsts); 632188eea45cSKlaus Jensen return; 632288eea45cSKlaus Jensen } 632388eea45cSKlaus Jensen 632488eea45cSKlaus Jensen n->pmr.cmse = true; 632588eea45cSKlaus Jensen n->pmr.cba = cba; 632688eea45cSKlaus Jensen } 632788eea45cSKlaus Jensen 632888eea45cSKlaus Jensen return; 6329a316aa50SKlaus Jensen case NVME_REG_PMRMSCU: 633049e03457SKlaus Jensen if (!NVME_CAP_PMRS(cap)) { 633188eea45cSKlaus Jensen return; 633288eea45cSKlaus Jensen } 633388eea45cSKlaus Jensen 633449e03457SKlaus Jensen stl_le_p(&n->bar.pmrmscu, data); 633588eea45cSKlaus Jensen return; 633688eea45cSKlaus Jensen default: 633788eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_invalid, 633888eea45cSKlaus Jensen "invalid MMIO write," 633988eea45cSKlaus Jensen " offset=0x%"PRIx64", data=%"PRIx64"", 634088eea45cSKlaus Jensen offset, data); 634188eea45cSKlaus Jensen break; 634288eea45cSKlaus Jensen } 634388eea45cSKlaus Jensen } 634488eea45cSKlaus Jensen 634588eea45cSKlaus Jensen static uint64_t nvme_mmio_read(void *opaque, hwaddr addr, unsigned size) 634688eea45cSKlaus Jensen { 634788eea45cSKlaus Jensen NvmeCtrl *n = (NvmeCtrl *)opaque; 634888eea45cSKlaus Jensen uint8_t *ptr = (uint8_t *)&n->bar; 634988eea45cSKlaus Jensen 635088eea45cSKlaus Jensen trace_pci_nvme_mmio_read(addr, size); 635188eea45cSKlaus Jensen 635288eea45cSKlaus Jensen if (unlikely(addr & (sizeof(uint32_t) - 1))) { 635388eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiord_misaligned32, 635488eea45cSKlaus Jensen "MMIO read not 32-bit aligned," 635588eea45cSKlaus Jensen " offset=0x%"PRIx64"", addr); 635688eea45cSKlaus Jensen /* should RAZ, fall through for now */ 635788eea45cSKlaus Jensen } else if (unlikely(size < sizeof(uint32_t))) { 635888eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiord_toosmall, 635988eea45cSKlaus Jensen "MMIO read smaller than 32-bits," 636088eea45cSKlaus Jensen " offset=0x%"PRIx64"", addr); 636188eea45cSKlaus Jensen /* should RAZ, fall through for now */ 636288eea45cSKlaus Jensen } 636388eea45cSKlaus Jensen 63645029de44SKlaus Jensen if (addr > sizeof(n->bar) - size) { 63655029de44SKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiord_invalid_ofs, 63665029de44SKlaus Jensen "MMIO read beyond last register," 63675029de44SKlaus Jensen " offset=0x%"PRIx64", returning 0", addr); 63685029de44SKlaus Jensen 63695029de44SKlaus Jensen return 0; 63705029de44SKlaus Jensen } 63715029de44SKlaus Jensen 637288eea45cSKlaus Jensen /* 637388eea45cSKlaus Jensen * When PMRWBM bit 1 is set then read from 637488eea45cSKlaus Jensen * from PMRSTS should ensure prior writes 637588eea45cSKlaus Jensen * made it to persistent media 637688eea45cSKlaus Jensen */ 6377a316aa50SKlaus Jensen if (addr == NVME_REG_PMRSTS && 637849e03457SKlaus Jensen (NVME_PMRCAP_PMRWBM(ldl_le_p(&n->bar.pmrcap)) & 0x02)) { 637988eea45cSKlaus Jensen memory_region_msync(&n->pmr.dev->mr, 0, n->pmr.dev->size); 638088eea45cSKlaus Jensen } 63815029de44SKlaus Jensen 638249e03457SKlaus Jensen return ldn_le_p(ptr + addr, size); 638388eea45cSKlaus Jensen } 638488eea45cSKlaus Jensen 638588eea45cSKlaus Jensen static void nvme_process_db(NvmeCtrl *n, hwaddr addr, int val) 638688eea45cSKlaus Jensen { 638788eea45cSKlaus Jensen uint32_t qid; 638888eea45cSKlaus Jensen 638988eea45cSKlaus Jensen if (unlikely(addr & ((1 << 2) - 1))) { 639088eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_db_wr_misaligned, 639188eea45cSKlaus Jensen "doorbell write not 32-bit aligned," 639288eea45cSKlaus Jensen " offset=0x%"PRIx64", ignoring", addr); 639388eea45cSKlaus Jensen return; 639488eea45cSKlaus Jensen } 639588eea45cSKlaus Jensen 639688eea45cSKlaus Jensen if (((addr - 0x1000) >> 2) & 1) { 639788eea45cSKlaus Jensen /* Completion queue doorbell write */ 639888eea45cSKlaus Jensen 639988eea45cSKlaus Jensen uint16_t new_head = val & 0xffff; 640088eea45cSKlaus Jensen int start_sqs; 640188eea45cSKlaus Jensen NvmeCQueue *cq; 640288eea45cSKlaus Jensen 640388eea45cSKlaus Jensen qid = (addr - (0x1000 + (1 << 2))) >> 3; 640488eea45cSKlaus Jensen if (unlikely(nvme_check_cqid(n, qid))) { 640588eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_db_wr_invalid_cq, 640688eea45cSKlaus Jensen "completion queue doorbell write" 640788eea45cSKlaus Jensen " for nonexistent queue," 640888eea45cSKlaus Jensen " sqid=%"PRIu32", ignoring", qid); 640988eea45cSKlaus Jensen 641088eea45cSKlaus Jensen /* 641188eea45cSKlaus Jensen * NVM Express v1.3d, Section 4.1 state: "If host software writes 641288eea45cSKlaus Jensen * an invalid value to the Submission Queue Tail Doorbell or 641388eea45cSKlaus Jensen * Completion Queue Head Doorbell regiter and an Asynchronous Event 641488eea45cSKlaus Jensen * Request command is outstanding, then an asynchronous event is 641588eea45cSKlaus Jensen * posted to the Admin Completion Queue with a status code of 641688eea45cSKlaus Jensen * Invalid Doorbell Write Value." 641788eea45cSKlaus Jensen * 641888eea45cSKlaus Jensen * Also note that the spec includes the "Invalid Doorbell Register" 641988eea45cSKlaus Jensen * status code, but nowhere does it specify when to use it. 642088eea45cSKlaus Jensen * However, it seems reasonable to use it here in a similar 642188eea45cSKlaus Jensen * fashion. 642288eea45cSKlaus Jensen */ 642388eea45cSKlaus Jensen if (n->outstanding_aers) { 642488eea45cSKlaus Jensen nvme_enqueue_event(n, NVME_AER_TYPE_ERROR, 642588eea45cSKlaus Jensen NVME_AER_INFO_ERR_INVALID_DB_REGISTER, 642688eea45cSKlaus Jensen NVME_LOG_ERROR_INFO); 642788eea45cSKlaus Jensen } 642888eea45cSKlaus Jensen 642988eea45cSKlaus Jensen return; 643088eea45cSKlaus Jensen } 643188eea45cSKlaus Jensen 643288eea45cSKlaus Jensen cq = n->cq[qid]; 643388eea45cSKlaus Jensen if (unlikely(new_head >= cq->size)) { 643488eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_db_wr_invalid_cqhead, 643588eea45cSKlaus Jensen "completion queue doorbell write value" 643688eea45cSKlaus Jensen " beyond queue size, sqid=%"PRIu32"," 643788eea45cSKlaus Jensen " new_head=%"PRIu16", ignoring", 643888eea45cSKlaus Jensen qid, new_head); 643988eea45cSKlaus Jensen 644088eea45cSKlaus Jensen if (n->outstanding_aers) { 644188eea45cSKlaus Jensen nvme_enqueue_event(n, NVME_AER_TYPE_ERROR, 644288eea45cSKlaus Jensen NVME_AER_INFO_ERR_INVALID_DB_VALUE, 644388eea45cSKlaus Jensen NVME_LOG_ERROR_INFO); 644488eea45cSKlaus Jensen } 644588eea45cSKlaus Jensen 644688eea45cSKlaus Jensen return; 644788eea45cSKlaus Jensen } 644888eea45cSKlaus Jensen 644988eea45cSKlaus Jensen trace_pci_nvme_mmio_doorbell_cq(cq->cqid, new_head); 645088eea45cSKlaus Jensen 645188eea45cSKlaus Jensen start_sqs = nvme_cq_full(cq) ? 1 : 0; 645288eea45cSKlaus Jensen cq->head = new_head; 645388eea45cSKlaus Jensen if (start_sqs) { 645488eea45cSKlaus Jensen NvmeSQueue *sq; 645588eea45cSKlaus Jensen QTAILQ_FOREACH(sq, &cq->sq_list, entry) { 645688eea45cSKlaus Jensen timer_mod(sq->timer, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) + 500); 645788eea45cSKlaus Jensen } 645888eea45cSKlaus Jensen timer_mod(cq->timer, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) + 500); 645988eea45cSKlaus Jensen } 646088eea45cSKlaus Jensen 646188eea45cSKlaus Jensen if (cq->tail == cq->head) { 646283d7ed5cSKlaus Jensen if (cq->irq_enabled) { 646383d7ed5cSKlaus Jensen n->cq_pending--; 646483d7ed5cSKlaus Jensen } 646583d7ed5cSKlaus Jensen 646688eea45cSKlaus Jensen nvme_irq_deassert(n, cq); 646788eea45cSKlaus Jensen } 646888eea45cSKlaus Jensen } else { 646988eea45cSKlaus Jensen /* Submission queue doorbell write */ 647088eea45cSKlaus Jensen 647188eea45cSKlaus Jensen uint16_t new_tail = val & 0xffff; 647288eea45cSKlaus Jensen NvmeSQueue *sq; 647388eea45cSKlaus Jensen 647488eea45cSKlaus Jensen qid = (addr - 0x1000) >> 3; 647588eea45cSKlaus Jensen if (unlikely(nvme_check_sqid(n, qid))) { 647688eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_db_wr_invalid_sq, 647788eea45cSKlaus Jensen "submission queue doorbell write" 647888eea45cSKlaus Jensen " for nonexistent queue," 647988eea45cSKlaus Jensen " sqid=%"PRIu32", ignoring", qid); 648088eea45cSKlaus Jensen 648188eea45cSKlaus Jensen if (n->outstanding_aers) { 648288eea45cSKlaus Jensen nvme_enqueue_event(n, NVME_AER_TYPE_ERROR, 648388eea45cSKlaus Jensen NVME_AER_INFO_ERR_INVALID_DB_REGISTER, 648488eea45cSKlaus Jensen NVME_LOG_ERROR_INFO); 648588eea45cSKlaus Jensen } 648688eea45cSKlaus Jensen 648788eea45cSKlaus Jensen return; 648888eea45cSKlaus Jensen } 648988eea45cSKlaus Jensen 649088eea45cSKlaus Jensen sq = n->sq[qid]; 649188eea45cSKlaus Jensen if (unlikely(new_tail >= sq->size)) { 649288eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_db_wr_invalid_sqtail, 649388eea45cSKlaus Jensen "submission queue doorbell write value" 649488eea45cSKlaus Jensen " beyond queue size, sqid=%"PRIu32"," 649588eea45cSKlaus Jensen " new_tail=%"PRIu16", ignoring", 649688eea45cSKlaus Jensen qid, new_tail); 649788eea45cSKlaus Jensen 649888eea45cSKlaus Jensen if (n->outstanding_aers) { 649988eea45cSKlaus Jensen nvme_enqueue_event(n, NVME_AER_TYPE_ERROR, 650088eea45cSKlaus Jensen NVME_AER_INFO_ERR_INVALID_DB_VALUE, 650188eea45cSKlaus Jensen NVME_LOG_ERROR_INFO); 650288eea45cSKlaus Jensen } 650388eea45cSKlaus Jensen 650488eea45cSKlaus Jensen return; 650588eea45cSKlaus Jensen } 650688eea45cSKlaus Jensen 650788eea45cSKlaus Jensen trace_pci_nvme_mmio_doorbell_sq(sq->sqid, new_tail); 650888eea45cSKlaus Jensen 650988eea45cSKlaus Jensen sq->tail = new_tail; 651088eea45cSKlaus Jensen timer_mod(sq->timer, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) + 500); 651188eea45cSKlaus Jensen } 651288eea45cSKlaus Jensen } 651388eea45cSKlaus Jensen 651488eea45cSKlaus Jensen static void nvme_mmio_write(void *opaque, hwaddr addr, uint64_t data, 651588eea45cSKlaus Jensen unsigned size) 651688eea45cSKlaus Jensen { 651788eea45cSKlaus Jensen NvmeCtrl *n = (NvmeCtrl *)opaque; 651888eea45cSKlaus Jensen 651988eea45cSKlaus Jensen trace_pci_nvme_mmio_write(addr, data, size); 652088eea45cSKlaus Jensen 652188eea45cSKlaus Jensen if (addr < sizeof(n->bar)) { 652288eea45cSKlaus Jensen nvme_write_bar(n, addr, data, size); 652388eea45cSKlaus Jensen } else { 652488eea45cSKlaus Jensen nvme_process_db(n, addr, data); 652588eea45cSKlaus Jensen } 652688eea45cSKlaus Jensen } 652788eea45cSKlaus Jensen 652888eea45cSKlaus Jensen static const MemoryRegionOps nvme_mmio_ops = { 652988eea45cSKlaus Jensen .read = nvme_mmio_read, 653088eea45cSKlaus Jensen .write = nvme_mmio_write, 653188eea45cSKlaus Jensen .endianness = DEVICE_LITTLE_ENDIAN, 653288eea45cSKlaus Jensen .impl = { 653388eea45cSKlaus Jensen .min_access_size = 2, 653488eea45cSKlaus Jensen .max_access_size = 8, 653588eea45cSKlaus Jensen }, 653688eea45cSKlaus Jensen }; 653788eea45cSKlaus Jensen 653888eea45cSKlaus Jensen static void nvme_cmb_write(void *opaque, hwaddr addr, uint64_t data, 653988eea45cSKlaus Jensen unsigned size) 654088eea45cSKlaus Jensen { 654188eea45cSKlaus Jensen NvmeCtrl *n = (NvmeCtrl *)opaque; 654288eea45cSKlaus Jensen stn_le_p(&n->cmb.buf[addr], size, data); 654388eea45cSKlaus Jensen } 654488eea45cSKlaus Jensen 654588eea45cSKlaus Jensen static uint64_t nvme_cmb_read(void *opaque, hwaddr addr, unsigned size) 654688eea45cSKlaus Jensen { 654788eea45cSKlaus Jensen NvmeCtrl *n = (NvmeCtrl *)opaque; 654888eea45cSKlaus Jensen return ldn_le_p(&n->cmb.buf[addr], size); 654988eea45cSKlaus Jensen } 655088eea45cSKlaus Jensen 655188eea45cSKlaus Jensen static const MemoryRegionOps nvme_cmb_ops = { 655288eea45cSKlaus Jensen .read = nvme_cmb_read, 655388eea45cSKlaus Jensen .write = nvme_cmb_write, 655488eea45cSKlaus Jensen .endianness = DEVICE_LITTLE_ENDIAN, 655588eea45cSKlaus Jensen .impl = { 655688eea45cSKlaus Jensen .min_access_size = 1, 655788eea45cSKlaus Jensen .max_access_size = 8, 655888eea45cSKlaus Jensen }, 655988eea45cSKlaus Jensen }; 656088eea45cSKlaus Jensen 656188eea45cSKlaus Jensen static void nvme_check_constraints(NvmeCtrl *n, Error **errp) 656288eea45cSKlaus Jensen { 656388eea45cSKlaus Jensen NvmeParams *params = &n->params; 656488eea45cSKlaus Jensen 656588eea45cSKlaus Jensen if (params->num_queues) { 656688eea45cSKlaus Jensen warn_report("num_queues is deprecated; please use max_ioqpairs " 656788eea45cSKlaus Jensen "instead"); 656888eea45cSKlaus Jensen 656988eea45cSKlaus Jensen params->max_ioqpairs = params->num_queues - 1; 657088eea45cSKlaus Jensen } 657188eea45cSKlaus Jensen 657288eea45cSKlaus Jensen if (n->namespace.blkconf.blk && n->subsys) { 657388eea45cSKlaus Jensen error_setg(errp, "subsystem support is unavailable with legacy " 657488eea45cSKlaus Jensen "namespace ('drive' property)"); 657588eea45cSKlaus Jensen return; 657688eea45cSKlaus Jensen } 657788eea45cSKlaus Jensen 657888eea45cSKlaus Jensen if (params->max_ioqpairs < 1 || 657988eea45cSKlaus Jensen params->max_ioqpairs > NVME_MAX_IOQPAIRS) { 658088eea45cSKlaus Jensen error_setg(errp, "max_ioqpairs must be between 1 and %d", 658188eea45cSKlaus Jensen NVME_MAX_IOQPAIRS); 658288eea45cSKlaus Jensen return; 658388eea45cSKlaus Jensen } 658488eea45cSKlaus Jensen 658588eea45cSKlaus Jensen if (params->msix_qsize < 1 || 658688eea45cSKlaus Jensen params->msix_qsize > PCI_MSIX_FLAGS_QSIZE + 1) { 658788eea45cSKlaus Jensen error_setg(errp, "msix_qsize must be between 1 and %d", 658888eea45cSKlaus Jensen PCI_MSIX_FLAGS_QSIZE + 1); 658988eea45cSKlaus Jensen return; 659088eea45cSKlaus Jensen } 659188eea45cSKlaus Jensen 659288eea45cSKlaus Jensen if (!params->serial) { 659388eea45cSKlaus Jensen error_setg(errp, "serial property not set"); 659488eea45cSKlaus Jensen return; 659588eea45cSKlaus Jensen } 659688eea45cSKlaus Jensen 659788eea45cSKlaus Jensen if (n->pmr.dev) { 659888eea45cSKlaus Jensen if (host_memory_backend_is_mapped(n->pmr.dev)) { 659988eea45cSKlaus Jensen error_setg(errp, "can't use already busy memdev: %s", 660088eea45cSKlaus Jensen object_get_canonical_path_component(OBJECT(n->pmr.dev))); 660188eea45cSKlaus Jensen return; 660288eea45cSKlaus Jensen } 660388eea45cSKlaus Jensen 660488eea45cSKlaus Jensen if (!is_power_of_2(n->pmr.dev->size)) { 660588eea45cSKlaus Jensen error_setg(errp, "pmr backend size needs to be power of 2 in size"); 660688eea45cSKlaus Jensen return; 660788eea45cSKlaus Jensen } 660888eea45cSKlaus Jensen 660988eea45cSKlaus Jensen host_memory_backend_set_mapped(n->pmr.dev, true); 661088eea45cSKlaus Jensen } 661188eea45cSKlaus Jensen 661288eea45cSKlaus Jensen if (n->params.zasl > n->params.mdts) { 661388eea45cSKlaus Jensen error_setg(errp, "zoned.zasl (Zone Append Size Limit) must be less " 661488eea45cSKlaus Jensen "than or equal to mdts (Maximum Data Transfer Size)"); 661588eea45cSKlaus Jensen return; 661688eea45cSKlaus Jensen } 661788eea45cSKlaus Jensen 661888eea45cSKlaus Jensen if (!n->params.vsl) { 661988eea45cSKlaus Jensen error_setg(errp, "vsl must be non-zero"); 662088eea45cSKlaus Jensen return; 662188eea45cSKlaus Jensen } 662244c2c094SLukasz Maniak 662344c2c094SLukasz Maniak if (params->sriov_max_vfs) { 662444c2c094SLukasz Maniak if (!n->subsys) { 662544c2c094SLukasz Maniak error_setg(errp, "subsystem is required for the use of SR-IOV"); 662644c2c094SLukasz Maniak return; 662744c2c094SLukasz Maniak } 662844c2c094SLukasz Maniak 662944c2c094SLukasz Maniak if (params->sriov_max_vfs > NVME_MAX_VFS) { 663044c2c094SLukasz Maniak error_setg(errp, "sriov_max_vfs must be between 0 and %d", 663144c2c094SLukasz Maniak NVME_MAX_VFS); 663244c2c094SLukasz Maniak return; 663344c2c094SLukasz Maniak } 663444c2c094SLukasz Maniak 663544c2c094SLukasz Maniak if (params->cmb_size_mb) { 663644c2c094SLukasz Maniak error_setg(errp, "CMB is not supported with SR-IOV"); 663744c2c094SLukasz Maniak return; 663844c2c094SLukasz Maniak } 663944c2c094SLukasz Maniak 664044c2c094SLukasz Maniak if (n->pmr.dev) { 664144c2c094SLukasz Maniak error_setg(errp, "PMR is not supported with SR-IOV"); 664244c2c094SLukasz Maniak return; 664344c2c094SLukasz Maniak } 664444c2c094SLukasz Maniak } 664588eea45cSKlaus Jensen } 664688eea45cSKlaus Jensen 664788eea45cSKlaus Jensen static void nvme_init_state(NvmeCtrl *n) 664888eea45cSKlaus Jensen { 66495e6f963fSLukasz Maniak NvmePriCtrlCap *cap = &n->pri_ctrl_cap; 6650*99f48ae7SLukasz Maniak NvmeSecCtrlList *list = &n->sec_ctrl_list; 6651*99f48ae7SLukasz Maniak NvmeSecCtrlEntry *sctrl; 6652*99f48ae7SLukasz Maniak int i; 66535e6f963fSLukasz Maniak 665488eea45cSKlaus Jensen /* add one to max_ioqpairs to account for the admin queue pair */ 665588eea45cSKlaus Jensen n->reg_size = pow2ceil(sizeof(NvmeBar) + 665688eea45cSKlaus Jensen 2 * (n->params.max_ioqpairs + 1) * NVME_DB_SIZE); 665788eea45cSKlaus Jensen n->sq = g_new0(NvmeSQueue *, n->params.max_ioqpairs + 1); 665888eea45cSKlaus Jensen n->cq = g_new0(NvmeCQueue *, n->params.max_ioqpairs + 1); 665988eea45cSKlaus Jensen n->temperature = NVME_TEMPERATURE; 666088eea45cSKlaus Jensen n->features.temp_thresh_hi = NVME_TEMPERATURE_WARNING; 666188eea45cSKlaus Jensen n->starttime_ms = qemu_clock_get_ms(QEMU_CLOCK_VIRTUAL); 666288eea45cSKlaus Jensen n->aer_reqs = g_new0(NvmeRequest *, n->params.aerl + 1); 66635e6f963fSLukasz Maniak 6664*99f48ae7SLukasz Maniak list->numcntl = cpu_to_le16(n->params.sriov_max_vfs); 6665*99f48ae7SLukasz Maniak for (i = 0; i < n->params.sriov_max_vfs; i++) { 6666*99f48ae7SLukasz Maniak sctrl = &list->sec[i]; 6667*99f48ae7SLukasz Maniak sctrl->pcid = cpu_to_le16(n->cntlid); 6668*99f48ae7SLukasz Maniak sctrl->vfn = cpu_to_le16(i + 1); 6669*99f48ae7SLukasz Maniak } 6670*99f48ae7SLukasz Maniak 66715e6f963fSLukasz Maniak cap->cntlid = cpu_to_le16(n->cntlid); 667288eea45cSKlaus Jensen } 667388eea45cSKlaus Jensen 667488eea45cSKlaus Jensen static void nvme_init_cmb(NvmeCtrl *n, PCIDevice *pci_dev) 667588eea45cSKlaus Jensen { 667688eea45cSKlaus Jensen uint64_t cmb_size = n->params.cmb_size_mb * MiB; 667749e03457SKlaus Jensen uint64_t cap = ldq_le_p(&n->bar.cap); 667888eea45cSKlaus Jensen 667988eea45cSKlaus Jensen n->cmb.buf = g_malloc0(cmb_size); 668088eea45cSKlaus Jensen memory_region_init_io(&n->cmb.mem, OBJECT(n), &nvme_cmb_ops, n, 668188eea45cSKlaus Jensen "nvme-cmb", cmb_size); 668288eea45cSKlaus Jensen pci_register_bar(pci_dev, NVME_CMB_BIR, 668388eea45cSKlaus Jensen PCI_BASE_ADDRESS_SPACE_MEMORY | 668488eea45cSKlaus Jensen PCI_BASE_ADDRESS_MEM_TYPE_64 | 668588eea45cSKlaus Jensen PCI_BASE_ADDRESS_MEM_PREFETCH, &n->cmb.mem); 668688eea45cSKlaus Jensen 668749e03457SKlaus Jensen NVME_CAP_SET_CMBS(cap, 1); 668849e03457SKlaus Jensen stq_le_p(&n->bar.cap, cap); 668988eea45cSKlaus Jensen 669088eea45cSKlaus Jensen if (n->params.legacy_cmb) { 669188eea45cSKlaus Jensen nvme_cmb_enable_regs(n); 669288eea45cSKlaus Jensen n->cmb.cmse = true; 669388eea45cSKlaus Jensen } 669488eea45cSKlaus Jensen } 669588eea45cSKlaus Jensen 669688eea45cSKlaus Jensen static void nvme_init_pmr(NvmeCtrl *n, PCIDevice *pci_dev) 669788eea45cSKlaus Jensen { 669849e03457SKlaus Jensen uint32_t pmrcap = ldl_le_p(&n->bar.pmrcap); 669988eea45cSKlaus Jensen 670049e03457SKlaus Jensen NVME_PMRCAP_SET_RDS(pmrcap, 1); 670149e03457SKlaus Jensen NVME_PMRCAP_SET_WDS(pmrcap, 1); 670249e03457SKlaus Jensen NVME_PMRCAP_SET_BIR(pmrcap, NVME_PMR_BIR); 670349e03457SKlaus Jensen /* Turn on bit 1 support */ 670449e03457SKlaus Jensen NVME_PMRCAP_SET_PMRWBM(pmrcap, 0x02); 670549e03457SKlaus Jensen NVME_PMRCAP_SET_CMSS(pmrcap, 1); 670649e03457SKlaus Jensen stl_le_p(&n->bar.pmrcap, pmrcap); 670749e03457SKlaus Jensen 670849e03457SKlaus Jensen pci_register_bar(pci_dev, NVME_PMR_BIR, 670988eea45cSKlaus Jensen PCI_BASE_ADDRESS_SPACE_MEMORY | 671088eea45cSKlaus Jensen PCI_BASE_ADDRESS_MEM_TYPE_64 | 671188eea45cSKlaus Jensen PCI_BASE_ADDRESS_MEM_PREFETCH, &n->pmr.dev->mr); 671288eea45cSKlaus Jensen 671388eea45cSKlaus Jensen memory_region_set_enabled(&n->pmr.dev->mr, false); 671488eea45cSKlaus Jensen } 671588eea45cSKlaus Jensen 671644c2c094SLukasz Maniak static void nvme_init_sriov(NvmeCtrl *n, PCIDevice *pci_dev, uint16_t offset, 671744c2c094SLukasz Maniak uint64_t bar_size) 671844c2c094SLukasz Maniak { 671944c2c094SLukasz Maniak uint16_t vf_dev_id = n->params.use_intel_id ? 672044c2c094SLukasz Maniak PCI_DEVICE_ID_INTEL_NVME : PCI_DEVICE_ID_REDHAT_NVME; 672144c2c094SLukasz Maniak 672244c2c094SLukasz Maniak pcie_sriov_pf_init(pci_dev, offset, "nvme", vf_dev_id, 672344c2c094SLukasz Maniak n->params.sriov_max_vfs, n->params.sriov_max_vfs, 672444c2c094SLukasz Maniak NVME_VF_OFFSET, NVME_VF_STRIDE); 672544c2c094SLukasz Maniak 672644c2c094SLukasz Maniak pcie_sriov_pf_init_vf_bar(pci_dev, 0, PCI_BASE_ADDRESS_SPACE_MEMORY | 672744c2c094SLukasz Maniak PCI_BASE_ADDRESS_MEM_TYPE_64, bar_size); 672844c2c094SLukasz Maniak } 672944c2c094SLukasz Maniak 673088eea45cSKlaus Jensen static int nvme_init_pci(NvmeCtrl *n, PCIDevice *pci_dev, Error **errp) 673188eea45cSKlaus Jensen { 673288eea45cSKlaus Jensen uint8_t *pci_conf = pci_dev->config; 673388eea45cSKlaus Jensen uint64_t bar_size, msix_table_size, msix_pba_size; 673488eea45cSKlaus Jensen unsigned msix_table_offset, msix_pba_offset; 673588eea45cSKlaus Jensen int ret; 673688eea45cSKlaus Jensen 673788eea45cSKlaus Jensen Error *err = NULL; 673888eea45cSKlaus Jensen 673988eea45cSKlaus Jensen pci_conf[PCI_INTERRUPT_PIN] = 1; 674088eea45cSKlaus Jensen pci_config_set_prog_interface(pci_conf, 0x2); 674188eea45cSKlaus Jensen 674288eea45cSKlaus Jensen if (n->params.use_intel_id) { 674388eea45cSKlaus Jensen pci_config_set_vendor_id(pci_conf, PCI_VENDOR_ID_INTEL); 674444c2c094SLukasz Maniak pci_config_set_device_id(pci_conf, PCI_DEVICE_ID_INTEL_NVME); 674588eea45cSKlaus Jensen } else { 674688eea45cSKlaus Jensen pci_config_set_vendor_id(pci_conf, PCI_VENDOR_ID_REDHAT); 674788eea45cSKlaus Jensen pci_config_set_device_id(pci_conf, PCI_DEVICE_ID_REDHAT_NVME); 674888eea45cSKlaus Jensen } 674988eea45cSKlaus Jensen 675088eea45cSKlaus Jensen pci_config_set_class(pci_conf, PCI_CLASS_STORAGE_EXPRESS); 675188eea45cSKlaus Jensen pcie_endpoint_cap_init(pci_dev, 0x80); 675244c2c094SLukasz Maniak if (n->params.sriov_max_vfs) { 675344c2c094SLukasz Maniak pcie_ari_init(pci_dev, 0x100, 1); 675444c2c094SLukasz Maniak } 675588eea45cSKlaus Jensen 675688eea45cSKlaus Jensen bar_size = QEMU_ALIGN_UP(n->reg_size, 4 * KiB); 675788eea45cSKlaus Jensen msix_table_offset = bar_size; 675888eea45cSKlaus Jensen msix_table_size = PCI_MSIX_ENTRY_SIZE * n->params.msix_qsize; 675988eea45cSKlaus Jensen 676088eea45cSKlaus Jensen bar_size += msix_table_size; 676188eea45cSKlaus Jensen bar_size = QEMU_ALIGN_UP(bar_size, 4 * KiB); 676288eea45cSKlaus Jensen msix_pba_offset = bar_size; 676388eea45cSKlaus Jensen msix_pba_size = QEMU_ALIGN_UP(n->params.msix_qsize, 64) / 8; 676488eea45cSKlaus Jensen 676588eea45cSKlaus Jensen bar_size += msix_pba_size; 676688eea45cSKlaus Jensen bar_size = pow2ceil(bar_size); 676788eea45cSKlaus Jensen 676888eea45cSKlaus Jensen memory_region_init(&n->bar0, OBJECT(n), "nvme-bar0", bar_size); 676988eea45cSKlaus Jensen memory_region_init_io(&n->iomem, OBJECT(n), &nvme_mmio_ops, n, "nvme", 677088eea45cSKlaus Jensen n->reg_size); 677188eea45cSKlaus Jensen memory_region_add_subregion(&n->bar0, 0, &n->iomem); 677288eea45cSKlaus Jensen 677344c2c094SLukasz Maniak if (pci_is_vf(pci_dev)) { 677444c2c094SLukasz Maniak pcie_sriov_vf_register_bar(pci_dev, 0, &n->bar0); 677544c2c094SLukasz Maniak } else { 677688eea45cSKlaus Jensen pci_register_bar(pci_dev, 0, PCI_BASE_ADDRESS_SPACE_MEMORY | 677788eea45cSKlaus Jensen PCI_BASE_ADDRESS_MEM_TYPE_64, &n->bar0); 677844c2c094SLukasz Maniak } 677988eea45cSKlaus Jensen ret = msix_init(pci_dev, n->params.msix_qsize, 678088eea45cSKlaus Jensen &n->bar0, 0, msix_table_offset, 678188eea45cSKlaus Jensen &n->bar0, 0, msix_pba_offset, 0, &err); 678288eea45cSKlaus Jensen if (ret < 0) { 678388eea45cSKlaus Jensen if (ret == -ENOTSUP) { 678488eea45cSKlaus Jensen warn_report_err(err); 678588eea45cSKlaus Jensen } else { 678688eea45cSKlaus Jensen error_propagate(errp, err); 678788eea45cSKlaus Jensen return ret; 678888eea45cSKlaus Jensen } 678988eea45cSKlaus Jensen } 679088eea45cSKlaus Jensen 679188eea45cSKlaus Jensen if (n->params.cmb_size_mb) { 679288eea45cSKlaus Jensen nvme_init_cmb(n, pci_dev); 679388eea45cSKlaus Jensen } 679488eea45cSKlaus Jensen 679588eea45cSKlaus Jensen if (n->pmr.dev) { 679688eea45cSKlaus Jensen nvme_init_pmr(n, pci_dev); 679788eea45cSKlaus Jensen } 679888eea45cSKlaus Jensen 679944c2c094SLukasz Maniak if (!pci_is_vf(pci_dev) && n->params.sriov_max_vfs) { 680044c2c094SLukasz Maniak nvme_init_sriov(n, pci_dev, 0x120, bar_size); 680144c2c094SLukasz Maniak } 680244c2c094SLukasz Maniak 680388eea45cSKlaus Jensen return 0; 680488eea45cSKlaus Jensen } 680588eea45cSKlaus Jensen 680688eea45cSKlaus Jensen static void nvme_init_subnqn(NvmeCtrl *n) 680788eea45cSKlaus Jensen { 680888eea45cSKlaus Jensen NvmeSubsystem *subsys = n->subsys; 680988eea45cSKlaus Jensen NvmeIdCtrl *id = &n->id_ctrl; 681088eea45cSKlaus Jensen 681188eea45cSKlaus Jensen if (!subsys) { 681288eea45cSKlaus Jensen snprintf((char *)id->subnqn, sizeof(id->subnqn), 681388eea45cSKlaus Jensen "nqn.2019-08.org.qemu:%s", n->params.serial); 681488eea45cSKlaus Jensen } else { 681588eea45cSKlaus Jensen pstrcpy((char *)id->subnqn, sizeof(id->subnqn), (char*)subsys->subnqn); 681688eea45cSKlaus Jensen } 681788eea45cSKlaus Jensen } 681888eea45cSKlaus Jensen 681988eea45cSKlaus Jensen static void nvme_init_ctrl(NvmeCtrl *n, PCIDevice *pci_dev) 682088eea45cSKlaus Jensen { 682188eea45cSKlaus Jensen NvmeIdCtrl *id = &n->id_ctrl; 682288eea45cSKlaus Jensen uint8_t *pci_conf = pci_dev->config; 682349e03457SKlaus Jensen uint64_t cap = ldq_le_p(&n->bar.cap); 682488eea45cSKlaus Jensen 682588eea45cSKlaus Jensen id->vid = cpu_to_le16(pci_get_word(pci_conf + PCI_VENDOR_ID)); 682688eea45cSKlaus Jensen id->ssvid = cpu_to_le16(pci_get_word(pci_conf + PCI_SUBSYSTEM_VENDOR_ID)); 682788eea45cSKlaus Jensen strpadcpy((char *)id->mn, sizeof(id->mn), "QEMU NVMe Ctrl", ' '); 6828fbba243bSKlaus Jensen strpadcpy((char *)id->fr, sizeof(id->fr), QEMU_VERSION, ' '); 682988eea45cSKlaus Jensen strpadcpy((char *)id->sn, sizeof(id->sn), n->params.serial, ' '); 683088eea45cSKlaus Jensen 683188eea45cSKlaus Jensen id->cntlid = cpu_to_le16(n->cntlid); 683288eea45cSKlaus Jensen 683388eea45cSKlaus Jensen id->oaes = cpu_to_le32(NVME_OAES_NS_ATTR); 6834763c05dfSNaveen Nagar id->ctratt |= cpu_to_le32(NVME_CTRATT_ELBAS); 683588eea45cSKlaus Jensen 683688eea45cSKlaus Jensen id->rab = 6; 683788eea45cSKlaus Jensen 683888eea45cSKlaus Jensen if (n->params.use_intel_id) { 683988eea45cSKlaus Jensen id->ieee[0] = 0xb3; 684088eea45cSKlaus Jensen id->ieee[1] = 0x02; 684188eea45cSKlaus Jensen id->ieee[2] = 0x00; 684288eea45cSKlaus Jensen } else { 684388eea45cSKlaus Jensen id->ieee[0] = 0x00; 684488eea45cSKlaus Jensen id->ieee[1] = 0x54; 684588eea45cSKlaus Jensen id->ieee[2] = 0x52; 684688eea45cSKlaus Jensen } 684788eea45cSKlaus Jensen 684888eea45cSKlaus Jensen id->mdts = n->params.mdts; 684988eea45cSKlaus Jensen id->ver = cpu_to_le32(NVME_SPEC_VER); 685088eea45cSKlaus Jensen id->oacs = cpu_to_le16(NVME_OACS_NS_MGMT | NVME_OACS_FORMAT); 685188eea45cSKlaus Jensen id->cntrltype = 0x1; 685288eea45cSKlaus Jensen 685388eea45cSKlaus Jensen /* 685488eea45cSKlaus Jensen * Because the controller always completes the Abort command immediately, 685588eea45cSKlaus Jensen * there can never be more than one concurrently executing Abort command, 685688eea45cSKlaus Jensen * so this value is never used for anything. Note that there can easily be 685788eea45cSKlaus Jensen * many Abort commands in the queues, but they are not considered 685888eea45cSKlaus Jensen * "executing" until processed by nvme_abort. 685988eea45cSKlaus Jensen * 686088eea45cSKlaus Jensen * The specification recommends a value of 3 for Abort Command Limit (four 686188eea45cSKlaus Jensen * concurrently outstanding Abort commands), so lets use that though it is 686288eea45cSKlaus Jensen * inconsequential. 686388eea45cSKlaus Jensen */ 686488eea45cSKlaus Jensen id->acl = 3; 686588eea45cSKlaus Jensen id->aerl = n->params.aerl; 686688eea45cSKlaus Jensen id->frmw = (NVME_NUM_FW_SLOTS << 1) | NVME_FRMW_SLOT1_RO; 686788eea45cSKlaus Jensen id->lpa = NVME_LPA_NS_SMART | NVME_LPA_CSE | NVME_LPA_EXTENDED; 686888eea45cSKlaus Jensen 686988eea45cSKlaus Jensen /* recommended default value (~70 C) */ 687088eea45cSKlaus Jensen id->wctemp = cpu_to_le16(NVME_TEMPERATURE_WARNING); 687188eea45cSKlaus Jensen id->cctemp = cpu_to_le16(NVME_TEMPERATURE_CRITICAL); 687288eea45cSKlaus Jensen 687388eea45cSKlaus Jensen id->sqes = (0x6 << 4) | 0x6; 687488eea45cSKlaus Jensen id->cqes = (0x4 << 4) | 0x4; 687588eea45cSKlaus Jensen id->nn = cpu_to_le32(NVME_MAX_NAMESPACES); 687688eea45cSKlaus Jensen id->oncs = cpu_to_le16(NVME_ONCS_WRITE_ZEROES | NVME_ONCS_TIMESTAMP | 687788eea45cSKlaus Jensen NVME_ONCS_FEATURES | NVME_ONCS_DSM | 687888eea45cSKlaus Jensen NVME_ONCS_COMPARE | NVME_ONCS_COPY); 687988eea45cSKlaus Jensen 688088eea45cSKlaus Jensen /* 688188eea45cSKlaus Jensen * NOTE: If this device ever supports a command set that does NOT use 0x0 688288eea45cSKlaus Jensen * as a Flush-equivalent operation, support for the broadcast NSID in Flush 688388eea45cSKlaus Jensen * should probably be removed. 688488eea45cSKlaus Jensen * 688588eea45cSKlaus Jensen * See comment in nvme_io_cmd. 688688eea45cSKlaus Jensen */ 688788eea45cSKlaus Jensen id->vwc = NVME_VWC_NSID_BROADCAST_SUPPORT | NVME_VWC_PRESENT; 688888eea45cSKlaus Jensen 688944219b60SNaveen Nagar id->ocfs = cpu_to_le16(NVME_OCFS_COPY_FORMAT_0 | NVME_OCFS_COPY_FORMAT_1); 689088eea45cSKlaus Jensen id->sgls = cpu_to_le32(NVME_CTRL_SGLS_SUPPORT_NO_ALIGN | 689188eea45cSKlaus Jensen NVME_CTRL_SGLS_BITBUCKET); 689288eea45cSKlaus Jensen 689388eea45cSKlaus Jensen nvme_init_subnqn(n); 689488eea45cSKlaus Jensen 689588eea45cSKlaus Jensen id->psd[0].mp = cpu_to_le16(0x9c4); 689688eea45cSKlaus Jensen id->psd[0].enlat = cpu_to_le32(0x10); 689788eea45cSKlaus Jensen id->psd[0].exlat = cpu_to_le32(0x4); 689888eea45cSKlaus Jensen 689988eea45cSKlaus Jensen if (n->subsys) { 690088eea45cSKlaus Jensen id->cmic |= NVME_CMIC_MULTI_CTRL; 690188eea45cSKlaus Jensen } 690288eea45cSKlaus Jensen 690349e03457SKlaus Jensen NVME_CAP_SET_MQES(cap, 0x7ff); 690449e03457SKlaus Jensen NVME_CAP_SET_CQR(cap, 1); 690549e03457SKlaus Jensen NVME_CAP_SET_TO(cap, 0xf); 690649e03457SKlaus Jensen NVME_CAP_SET_CSS(cap, NVME_CAP_CSS_NVM); 690749e03457SKlaus Jensen NVME_CAP_SET_CSS(cap, NVME_CAP_CSS_CSI_SUPP); 690849e03457SKlaus Jensen NVME_CAP_SET_CSS(cap, NVME_CAP_CSS_ADMIN_ONLY); 690949e03457SKlaus Jensen NVME_CAP_SET_MPSMAX(cap, 4); 691049e03457SKlaus Jensen NVME_CAP_SET_CMBS(cap, n->params.cmb_size_mb ? 1 : 0); 691149e03457SKlaus Jensen NVME_CAP_SET_PMRS(cap, n->pmr.dev ? 1 : 0); 691249e03457SKlaus Jensen stq_le_p(&n->bar.cap, cap); 691388eea45cSKlaus Jensen 691449e03457SKlaus Jensen stl_le_p(&n->bar.vs, NVME_SPEC_VER); 691588eea45cSKlaus Jensen n->bar.intmc = n->bar.intms = 0; 691688eea45cSKlaus Jensen } 691788eea45cSKlaus Jensen 691888eea45cSKlaus Jensen static int nvme_init_subsys(NvmeCtrl *n, Error **errp) 691988eea45cSKlaus Jensen { 692088eea45cSKlaus Jensen int cntlid; 692188eea45cSKlaus Jensen 692288eea45cSKlaus Jensen if (!n->subsys) { 692388eea45cSKlaus Jensen return 0; 692488eea45cSKlaus Jensen } 692588eea45cSKlaus Jensen 692688eea45cSKlaus Jensen cntlid = nvme_subsys_register_ctrl(n, errp); 692788eea45cSKlaus Jensen if (cntlid < 0) { 692888eea45cSKlaus Jensen return -1; 692988eea45cSKlaus Jensen } 693088eea45cSKlaus Jensen 693188eea45cSKlaus Jensen n->cntlid = cntlid; 693288eea45cSKlaus Jensen 693388eea45cSKlaus Jensen return 0; 693488eea45cSKlaus Jensen } 693588eea45cSKlaus Jensen 693688eea45cSKlaus Jensen void nvme_attach_ns(NvmeCtrl *n, NvmeNamespace *ns) 693788eea45cSKlaus Jensen { 693888eea45cSKlaus Jensen uint32_t nsid = ns->params.nsid; 693988eea45cSKlaus Jensen assert(nsid && nsid <= NVME_MAX_NAMESPACES); 694088eea45cSKlaus Jensen 694188eea45cSKlaus Jensen n->namespaces[nsid] = ns; 694288eea45cSKlaus Jensen ns->attached++; 694388eea45cSKlaus Jensen 694488eea45cSKlaus Jensen n->dmrsl = MIN_NON_ZERO(n->dmrsl, 694588eea45cSKlaus Jensen BDRV_REQUEST_MAX_BYTES / nvme_l2b(ns, 1)); 694688eea45cSKlaus Jensen } 694788eea45cSKlaus Jensen 694888eea45cSKlaus Jensen static void nvme_realize(PCIDevice *pci_dev, Error **errp) 694988eea45cSKlaus Jensen { 695088eea45cSKlaus Jensen NvmeCtrl *n = NVME(pci_dev); 695188eea45cSKlaus Jensen NvmeNamespace *ns; 695288eea45cSKlaus Jensen Error *local_err = NULL; 695344c2c094SLukasz Maniak NvmeCtrl *pn = NVME(pcie_sriov_get_pf(pci_dev)); 695444c2c094SLukasz Maniak 695544c2c094SLukasz Maniak if (pci_is_vf(pci_dev)) { 695644c2c094SLukasz Maniak /* 695744c2c094SLukasz Maniak * VFs derive settings from the parent. PF's lifespan exceeds 695844c2c094SLukasz Maniak * that of VF's, so it's safe to share params.serial. 695944c2c094SLukasz Maniak */ 696044c2c094SLukasz Maniak memcpy(&n->params, &pn->params, sizeof(NvmeParams)); 696144c2c094SLukasz Maniak n->subsys = pn->subsys; 696244c2c094SLukasz Maniak } 696388eea45cSKlaus Jensen 696488eea45cSKlaus Jensen nvme_check_constraints(n, &local_err); 696588eea45cSKlaus Jensen if (local_err) { 696688eea45cSKlaus Jensen error_propagate(errp, local_err); 696788eea45cSKlaus Jensen return; 696888eea45cSKlaus Jensen } 696988eea45cSKlaus Jensen 6970d637e1dcSPeter Maydell qbus_init(&n->bus, sizeof(NvmeBus), TYPE_NVME_BUS, 697188eea45cSKlaus Jensen &pci_dev->qdev, n->parent_obj.qdev.id); 697288eea45cSKlaus Jensen 697388eea45cSKlaus Jensen if (nvme_init_subsys(n, errp)) { 697488eea45cSKlaus Jensen error_propagate(errp, local_err); 697588eea45cSKlaus Jensen return; 697688eea45cSKlaus Jensen } 69775e6f963fSLukasz Maniak nvme_init_state(n); 69785e6f963fSLukasz Maniak if (nvme_init_pci(n, pci_dev, errp)) { 69795e6f963fSLukasz Maniak return; 69805e6f963fSLukasz Maniak } 698188eea45cSKlaus Jensen nvme_init_ctrl(n, pci_dev); 698288eea45cSKlaus Jensen 698388eea45cSKlaus Jensen /* setup a namespace if the controller drive property was given */ 698488eea45cSKlaus Jensen if (n->namespace.blkconf.blk) { 698588eea45cSKlaus Jensen ns = &n->namespace; 698688eea45cSKlaus Jensen ns->params.nsid = 1; 698788eea45cSKlaus Jensen 69885e4f6bccSKlaus Jensen if (nvme_ns_setup(ns, errp)) { 698988eea45cSKlaus Jensen return; 699088eea45cSKlaus Jensen } 699188eea45cSKlaus Jensen 699288eea45cSKlaus Jensen nvme_attach_ns(n, ns); 699388eea45cSKlaus Jensen } 699488eea45cSKlaus Jensen } 699588eea45cSKlaus Jensen 699688eea45cSKlaus Jensen static void nvme_exit(PCIDevice *pci_dev) 699788eea45cSKlaus Jensen { 699888eea45cSKlaus Jensen NvmeCtrl *n = NVME(pci_dev); 699988eea45cSKlaus Jensen NvmeNamespace *ns; 700088eea45cSKlaus Jensen int i; 700188eea45cSKlaus Jensen 700288eea45cSKlaus Jensen nvme_ctrl_reset(n); 700388eea45cSKlaus Jensen 70045ffbaeedSKlaus Jensen if (n->subsys) { 700588eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 700688eea45cSKlaus Jensen ns = nvme_ns(n, i); 70075ffbaeedSKlaus Jensen if (ns) { 70085ffbaeedSKlaus Jensen ns->attached--; 70095ffbaeedSKlaus Jensen } 701088eea45cSKlaus Jensen } 701188eea45cSKlaus Jensen 7012b0fde9e8SKlaus Jensen nvme_subsys_unregister_ctrl(n->subsys, n); 7013b0fde9e8SKlaus Jensen } 7014b0fde9e8SKlaus Jensen 701588eea45cSKlaus Jensen g_free(n->cq); 701688eea45cSKlaus Jensen g_free(n->sq); 701788eea45cSKlaus Jensen g_free(n->aer_reqs); 701888eea45cSKlaus Jensen 701988eea45cSKlaus Jensen if (n->params.cmb_size_mb) { 702088eea45cSKlaus Jensen g_free(n->cmb.buf); 702188eea45cSKlaus Jensen } 702288eea45cSKlaus Jensen 702388eea45cSKlaus Jensen if (n->pmr.dev) { 702488eea45cSKlaus Jensen host_memory_backend_set_mapped(n->pmr.dev, false); 702588eea45cSKlaus Jensen } 702644c2c094SLukasz Maniak 702744c2c094SLukasz Maniak if (!pci_is_vf(pci_dev) && n->params.sriov_max_vfs) { 702844c2c094SLukasz Maniak pcie_sriov_pf_exit(pci_dev); 702944c2c094SLukasz Maniak } 703044c2c094SLukasz Maniak 703188eea45cSKlaus Jensen msix_uninit(pci_dev, &n->bar0, &n->bar0); 703288eea45cSKlaus Jensen memory_region_del_subregion(&n->bar0, &n->iomem); 703388eea45cSKlaus Jensen } 703488eea45cSKlaus Jensen 703588eea45cSKlaus Jensen static Property nvme_props[] = { 703688eea45cSKlaus Jensen DEFINE_BLOCK_PROPERTIES(NvmeCtrl, namespace.blkconf), 703788eea45cSKlaus Jensen DEFINE_PROP_LINK("pmrdev", NvmeCtrl, pmr.dev, TYPE_MEMORY_BACKEND, 703888eea45cSKlaus Jensen HostMemoryBackend *), 703988eea45cSKlaus Jensen DEFINE_PROP_LINK("subsys", NvmeCtrl, subsys, TYPE_NVME_SUBSYS, 704088eea45cSKlaus Jensen NvmeSubsystem *), 704188eea45cSKlaus Jensen DEFINE_PROP_STRING("serial", NvmeCtrl, params.serial), 704288eea45cSKlaus Jensen DEFINE_PROP_UINT32("cmb_size_mb", NvmeCtrl, params.cmb_size_mb, 0), 704388eea45cSKlaus Jensen DEFINE_PROP_UINT32("num_queues", NvmeCtrl, params.num_queues, 0), 704488eea45cSKlaus Jensen DEFINE_PROP_UINT32("max_ioqpairs", NvmeCtrl, params.max_ioqpairs, 64), 704588eea45cSKlaus Jensen DEFINE_PROP_UINT16("msix_qsize", NvmeCtrl, params.msix_qsize, 65), 704688eea45cSKlaus Jensen DEFINE_PROP_UINT8("aerl", NvmeCtrl, params.aerl, 3), 704788eea45cSKlaus Jensen DEFINE_PROP_UINT32("aer_max_queued", NvmeCtrl, params.aer_max_queued, 64), 704888eea45cSKlaus Jensen DEFINE_PROP_UINT8("mdts", NvmeCtrl, params.mdts, 7), 704988eea45cSKlaus Jensen DEFINE_PROP_UINT8("vsl", NvmeCtrl, params.vsl, 7), 705088eea45cSKlaus Jensen DEFINE_PROP_BOOL("use-intel-id", NvmeCtrl, params.use_intel_id, false), 705188eea45cSKlaus Jensen DEFINE_PROP_BOOL("legacy-cmb", NvmeCtrl, params.legacy_cmb, false), 705288eea45cSKlaus Jensen DEFINE_PROP_UINT8("zoned.zasl", NvmeCtrl, params.zasl, 0), 7053cccc2651SNiklas Cassel DEFINE_PROP_BOOL("zoned.auto_transition", NvmeCtrl, 7054cccc2651SNiklas Cassel params.auto_transition_zones, true), 705544c2c094SLukasz Maniak DEFINE_PROP_UINT8("sriov_max_vfs", NvmeCtrl, params.sriov_max_vfs, 0), 705688eea45cSKlaus Jensen DEFINE_PROP_END_OF_LIST(), 705788eea45cSKlaus Jensen }; 705888eea45cSKlaus Jensen 705988eea45cSKlaus Jensen static void nvme_get_smart_warning(Object *obj, Visitor *v, const char *name, 706088eea45cSKlaus Jensen void *opaque, Error **errp) 706188eea45cSKlaus Jensen { 706288eea45cSKlaus Jensen NvmeCtrl *n = NVME(obj); 706388eea45cSKlaus Jensen uint8_t value = n->smart_critical_warning; 706488eea45cSKlaus Jensen 706588eea45cSKlaus Jensen visit_type_uint8(v, name, &value, errp); 706688eea45cSKlaus Jensen } 706788eea45cSKlaus Jensen 706888eea45cSKlaus Jensen static void nvme_set_smart_warning(Object *obj, Visitor *v, const char *name, 706988eea45cSKlaus Jensen void *opaque, Error **errp) 707088eea45cSKlaus Jensen { 707188eea45cSKlaus Jensen NvmeCtrl *n = NVME(obj); 707288eea45cSKlaus Jensen uint8_t value, old_value, cap = 0, index, event; 707388eea45cSKlaus Jensen 707488eea45cSKlaus Jensen if (!visit_type_uint8(v, name, &value, errp)) { 707588eea45cSKlaus Jensen return; 707688eea45cSKlaus Jensen } 707788eea45cSKlaus Jensen 707888eea45cSKlaus Jensen cap = NVME_SMART_SPARE | NVME_SMART_TEMPERATURE | NVME_SMART_RELIABILITY 707988eea45cSKlaus Jensen | NVME_SMART_MEDIA_READ_ONLY | NVME_SMART_FAILED_VOLATILE_MEDIA; 708049e03457SKlaus Jensen if (NVME_CAP_PMRS(ldq_le_p(&n->bar.cap))) { 708188eea45cSKlaus Jensen cap |= NVME_SMART_PMR_UNRELIABLE; 708288eea45cSKlaus Jensen } 708388eea45cSKlaus Jensen 708488eea45cSKlaus Jensen if ((value & cap) != value) { 708588eea45cSKlaus Jensen error_setg(errp, "unsupported smart critical warning bits: 0x%x", 708688eea45cSKlaus Jensen value & ~cap); 708788eea45cSKlaus Jensen return; 708888eea45cSKlaus Jensen } 708988eea45cSKlaus Jensen 709088eea45cSKlaus Jensen old_value = n->smart_critical_warning; 709188eea45cSKlaus Jensen n->smart_critical_warning = value; 709288eea45cSKlaus Jensen 709388eea45cSKlaus Jensen /* only inject new bits of smart critical warning */ 709488eea45cSKlaus Jensen for (index = 0; index < NVME_SMART_WARN_MAX; index++) { 709588eea45cSKlaus Jensen event = 1 << index; 709688eea45cSKlaus Jensen if (value & ~old_value & event) 709788eea45cSKlaus Jensen nvme_smart_event(n, event); 709888eea45cSKlaus Jensen } 709988eea45cSKlaus Jensen } 710088eea45cSKlaus Jensen 710188eea45cSKlaus Jensen static const VMStateDescription nvme_vmstate = { 710288eea45cSKlaus Jensen .name = "nvme", 710388eea45cSKlaus Jensen .unmigratable = 1, 710488eea45cSKlaus Jensen }; 710588eea45cSKlaus Jensen 710688eea45cSKlaus Jensen static void nvme_class_init(ObjectClass *oc, void *data) 710788eea45cSKlaus Jensen { 710888eea45cSKlaus Jensen DeviceClass *dc = DEVICE_CLASS(oc); 710988eea45cSKlaus Jensen PCIDeviceClass *pc = PCI_DEVICE_CLASS(oc); 711088eea45cSKlaus Jensen 711188eea45cSKlaus Jensen pc->realize = nvme_realize; 711288eea45cSKlaus Jensen pc->exit = nvme_exit; 711388eea45cSKlaus Jensen pc->class_id = PCI_CLASS_STORAGE_EXPRESS; 711488eea45cSKlaus Jensen pc->revision = 2; 711588eea45cSKlaus Jensen 711688eea45cSKlaus Jensen set_bit(DEVICE_CATEGORY_STORAGE, dc->categories); 711788eea45cSKlaus Jensen dc->desc = "Non-Volatile Memory Express"; 711888eea45cSKlaus Jensen device_class_set_props(dc, nvme_props); 711988eea45cSKlaus Jensen dc->vmsd = &nvme_vmstate; 712088eea45cSKlaus Jensen } 712188eea45cSKlaus Jensen 712288eea45cSKlaus Jensen static void nvme_instance_init(Object *obj) 712388eea45cSKlaus Jensen { 712488eea45cSKlaus Jensen NvmeCtrl *n = NVME(obj); 712588eea45cSKlaus Jensen 712688eea45cSKlaus Jensen device_add_bootindex_property(obj, &n->namespace.blkconf.bootindex, 712788eea45cSKlaus Jensen "bootindex", "/namespace@1,0", 712888eea45cSKlaus Jensen DEVICE(obj)); 712988eea45cSKlaus Jensen 713088eea45cSKlaus Jensen object_property_add(obj, "smart_critical_warning", "uint8", 713188eea45cSKlaus Jensen nvme_get_smart_warning, 713288eea45cSKlaus Jensen nvme_set_smart_warning, NULL, NULL); 713388eea45cSKlaus Jensen } 713488eea45cSKlaus Jensen 713588eea45cSKlaus Jensen static const TypeInfo nvme_info = { 713688eea45cSKlaus Jensen .name = TYPE_NVME, 713788eea45cSKlaus Jensen .parent = TYPE_PCI_DEVICE, 713888eea45cSKlaus Jensen .instance_size = sizeof(NvmeCtrl), 713988eea45cSKlaus Jensen .instance_init = nvme_instance_init, 714088eea45cSKlaus Jensen .class_init = nvme_class_init, 714188eea45cSKlaus Jensen .interfaces = (InterfaceInfo[]) { 714288eea45cSKlaus Jensen { INTERFACE_PCIE_DEVICE }, 714388eea45cSKlaus Jensen { } 714488eea45cSKlaus Jensen }, 714588eea45cSKlaus Jensen }; 714688eea45cSKlaus Jensen 714788eea45cSKlaus Jensen static const TypeInfo nvme_bus_info = { 714888eea45cSKlaus Jensen .name = TYPE_NVME_BUS, 714988eea45cSKlaus Jensen .parent = TYPE_BUS, 715088eea45cSKlaus Jensen .instance_size = sizeof(NvmeBus), 715188eea45cSKlaus Jensen }; 715288eea45cSKlaus Jensen 715388eea45cSKlaus Jensen static void nvme_register_types(void) 715488eea45cSKlaus Jensen { 715588eea45cSKlaus Jensen type_register_static(&nvme_info); 715688eea45cSKlaus Jensen type_register_static(&nvme_bus_info); 715788eea45cSKlaus Jensen } 715888eea45cSKlaus Jensen 715988eea45cSKlaus Jensen type_init(nvme_register_types) 7160