188eea45cSKlaus Jensen /* 288eea45cSKlaus Jensen * QEMU NVM Express Controller 388eea45cSKlaus Jensen * 488eea45cSKlaus Jensen * Copyright (c) 2012, Intel Corporation 588eea45cSKlaus Jensen * 688eea45cSKlaus Jensen * Written by Keith Busch <keith.busch@intel.com> 788eea45cSKlaus Jensen * 888eea45cSKlaus Jensen * This code is licensed under the GNU GPL v2 or later. 988eea45cSKlaus Jensen */ 1088eea45cSKlaus Jensen 1188eea45cSKlaus Jensen /** 1288eea45cSKlaus Jensen * Reference Specs: http://www.nvmexpress.org, 1.4, 1.3, 1.2, 1.1, 1.0e 1388eea45cSKlaus Jensen * 1488eea45cSKlaus Jensen * https://nvmexpress.org/developers/nvme-specification/ 1588eea45cSKlaus Jensen * 1688eea45cSKlaus Jensen * 1788eea45cSKlaus Jensen * Notes on coding style 1888eea45cSKlaus Jensen * --------------------- 1988eea45cSKlaus Jensen * While QEMU coding style prefers lowercase hexadecimals in constants, the 2088eea45cSKlaus Jensen * NVMe subsystem use thes format from the NVMe specifications in the comments 2188eea45cSKlaus Jensen * (i.e. 'h' suffix instead of '0x' prefix). 2288eea45cSKlaus Jensen * 2388eea45cSKlaus Jensen * Usage 2488eea45cSKlaus Jensen * ----- 2588eea45cSKlaus Jensen * See docs/system/nvme.rst for extensive documentation. 2688eea45cSKlaus Jensen * 2788eea45cSKlaus Jensen * Add options: 2888eea45cSKlaus Jensen * -drive file=<file>,if=none,id=<drive_id> 2988eea45cSKlaus Jensen * -device nvme-subsys,id=<subsys_id>,nqn=<nqn_id> 3088eea45cSKlaus Jensen * -device nvme,serial=<serial>,id=<bus_name>, \ 3188eea45cSKlaus Jensen * cmb_size_mb=<cmb_size_mb[optional]>, \ 3288eea45cSKlaus Jensen * [pmrdev=<mem_backend_file_id>,] \ 3388eea45cSKlaus Jensen * max_ioqpairs=<N[optional]>, \ 3488eea45cSKlaus Jensen * aerl=<N[optional]>,aer_max_queued=<N[optional]>, \ 3588eea45cSKlaus Jensen * mdts=<N[optional]>,vsl=<N[optional]>, \ 3688eea45cSKlaus Jensen * zoned.zasl=<N[optional]>, \ 37cccc2651SNiklas Cassel * zoned.auto_transition=<on|off[optional]>, \ 3888eea45cSKlaus Jensen * subsys=<subsys_id> 3988eea45cSKlaus Jensen * -device nvme-ns,drive=<drive_id>,bus=<bus_name>,nsid=<nsid>,\ 4088eea45cSKlaus Jensen * zoned=<true|false[optional]>, \ 4188eea45cSKlaus Jensen * subsys=<subsys_id>,detached=<true|false[optional]> 4288eea45cSKlaus Jensen * 4388eea45cSKlaus Jensen * Note cmb_size_mb denotes size of CMB in MB. CMB is assumed to be at 4488eea45cSKlaus Jensen * offset 0 in BAR2 and supports only WDS, RDS and SQS for now. By default, the 4588eea45cSKlaus Jensen * device will use the "v1.4 CMB scheme" - use the `legacy-cmb` parameter to 4688eea45cSKlaus Jensen * always enable the CMBLOC and CMBSZ registers (v1.3 behavior). 4788eea45cSKlaus Jensen * 4888eea45cSKlaus Jensen * Enabling pmr emulation can be achieved by pointing to memory-backend-file. 4988eea45cSKlaus Jensen * For example: 5088eea45cSKlaus Jensen * -object memory-backend-file,id=<mem_id>,share=on,mem-path=<file_path>, \ 5188eea45cSKlaus Jensen * size=<size> .... -device nvme,...,pmrdev=<mem_id> 5288eea45cSKlaus Jensen * 5388eea45cSKlaus Jensen * The PMR will use BAR 4/5 exclusively. 5488eea45cSKlaus Jensen * 5588eea45cSKlaus Jensen * To place controller(s) and namespace(s) to a subsystem, then provide 5688eea45cSKlaus Jensen * nvme-subsys device as above. 5788eea45cSKlaus Jensen * 5888eea45cSKlaus Jensen * nvme subsystem device parameters 5988eea45cSKlaus Jensen * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 6088eea45cSKlaus Jensen * - `nqn` 6188eea45cSKlaus Jensen * This parameter provides the `<nqn_id>` part of the string 6288eea45cSKlaus Jensen * `nqn.2019-08.org.qemu:<nqn_id>` which will be reported in the SUBNQN field 6388eea45cSKlaus Jensen * of subsystem controllers. Note that `<nqn_id>` should be unique per 6488eea45cSKlaus Jensen * subsystem, but this is not enforced by QEMU. If not specified, it will 6588eea45cSKlaus Jensen * default to the value of the `id` parameter (`<subsys_id>`). 6688eea45cSKlaus Jensen * 6788eea45cSKlaus Jensen * nvme device parameters 6888eea45cSKlaus Jensen * ~~~~~~~~~~~~~~~~~~~~~~ 6988eea45cSKlaus Jensen * - `subsys` 7088eea45cSKlaus Jensen * Specifying this parameter attaches the controller to the subsystem and 7188eea45cSKlaus Jensen * the SUBNQN field in the controller will report the NQN of the subsystem 7288eea45cSKlaus Jensen * device. This also enables multi controller capability represented in 7388eea45cSKlaus Jensen * Identify Controller data structure in CMIC (Controller Multi-path I/O and 7488eea45cSKlaus Jensen * Namesapce Sharing Capabilities). 7588eea45cSKlaus Jensen * 7688eea45cSKlaus Jensen * - `aerl` 7788eea45cSKlaus Jensen * The Asynchronous Event Request Limit (AERL). Indicates the maximum number 7888eea45cSKlaus Jensen * of concurrently outstanding Asynchronous Event Request commands support 7988eea45cSKlaus Jensen * by the controller. This is a 0's based value. 8088eea45cSKlaus Jensen * 8188eea45cSKlaus Jensen * - `aer_max_queued` 8288eea45cSKlaus Jensen * This is the maximum number of events that the device will enqueue for 8388eea45cSKlaus Jensen * completion when there are no outstanding AERs. When the maximum number of 8488eea45cSKlaus Jensen * enqueued events are reached, subsequent events will be dropped. 8588eea45cSKlaus Jensen * 8688eea45cSKlaus Jensen * - `mdts` 8788eea45cSKlaus Jensen * Indicates the maximum data transfer size for a command that transfers data 8888eea45cSKlaus Jensen * between host-accessible memory and the controller. The value is specified 8988eea45cSKlaus Jensen * as a power of two (2^n) and is in units of the minimum memory page size 9088eea45cSKlaus Jensen * (CAP.MPSMIN). The default value is 7 (i.e. 512 KiB). 9188eea45cSKlaus Jensen * 9288eea45cSKlaus Jensen * - `vsl` 9388eea45cSKlaus Jensen * Indicates the maximum data size limit for the Verify command. Like `mdts`, 9488eea45cSKlaus Jensen * this value is specified as a power of two (2^n) and is in units of the 9588eea45cSKlaus Jensen * minimum memory page size (CAP.MPSMIN). The default value is 7 (i.e. 512 9688eea45cSKlaus Jensen * KiB). 9788eea45cSKlaus Jensen * 9888eea45cSKlaus Jensen * - `zoned.zasl` 9988eea45cSKlaus Jensen * Indicates the maximum data transfer size for the Zone Append command. Like 10088eea45cSKlaus Jensen * `mdts`, the value is specified as a power of two (2^n) and is in units of 10188eea45cSKlaus Jensen * the minimum memory page size (CAP.MPSMIN). The default value is 0 (i.e. 10288eea45cSKlaus Jensen * defaulting to the value of `mdts`). 10388eea45cSKlaus Jensen * 104cccc2651SNiklas Cassel * - `zoned.auto_transition` 105cccc2651SNiklas Cassel * Indicates if zones in zone state implicitly opened can be automatically 106cccc2651SNiklas Cassel * transitioned to zone state closed for resource management purposes. 107cccc2651SNiklas Cassel * Defaults to 'on'. 108cccc2651SNiklas Cassel * 10988eea45cSKlaus Jensen * nvme namespace device parameters 11088eea45cSKlaus Jensen * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 11188eea45cSKlaus Jensen * - `shared` 11288eea45cSKlaus Jensen * When the parent nvme device (as defined explicitly by the 'bus' parameter 11388eea45cSKlaus Jensen * or implicitly by the most recently defined NvmeBus) is linked to an 11488eea45cSKlaus Jensen * nvme-subsys device, the namespace will be attached to all controllers in 11588eea45cSKlaus Jensen * the subsystem. If set to 'off' (the default), the namespace will remain a 11688eea45cSKlaus Jensen * private namespace and may only be attached to a single controller at a 11788eea45cSKlaus Jensen * time. 11888eea45cSKlaus Jensen * 11988eea45cSKlaus Jensen * - `detached` 12088eea45cSKlaus Jensen * This parameter is only valid together with the `subsys` parameter. If left 12188eea45cSKlaus Jensen * at the default value (`false/off`), the namespace will be attached to all 12288eea45cSKlaus Jensen * controllers in the NVMe subsystem at boot-up. If set to `true/on`, the 12388eea45cSKlaus Jensen * namespace will be be available in the subsystem not not attached to any 12488eea45cSKlaus Jensen * controllers. 12588eea45cSKlaus Jensen * 12688eea45cSKlaus Jensen * Setting `zoned` to true selects Zoned Command Set at the namespace. 12788eea45cSKlaus Jensen * In this case, the following namespace properties are available to configure 12888eea45cSKlaus Jensen * zoned operation: 12988eea45cSKlaus Jensen * zoned.zone_size=<zone size in bytes, default: 128MiB> 13088eea45cSKlaus Jensen * The number may be followed by K, M, G as in kilo-, mega- or giga-. 13188eea45cSKlaus Jensen * 13288eea45cSKlaus Jensen * zoned.zone_capacity=<zone capacity in bytes, default: zone size> 13388eea45cSKlaus Jensen * The value 0 (default) forces zone capacity to be the same as zone 13488eea45cSKlaus Jensen * size. The value of this property may not exceed zone size. 13588eea45cSKlaus Jensen * 13688eea45cSKlaus Jensen * zoned.descr_ext_size=<zone descriptor extension size, default 0> 13788eea45cSKlaus Jensen * This value needs to be specified in 64B units. If it is zero, 13888eea45cSKlaus Jensen * namespace(s) will not support zone descriptor extensions. 13988eea45cSKlaus Jensen * 14088eea45cSKlaus Jensen * zoned.max_active=<Maximum Active Resources (zones), default: 0> 14188eea45cSKlaus Jensen * The default value means there is no limit to the number of 14288eea45cSKlaus Jensen * concurrently active zones. 14388eea45cSKlaus Jensen * 14488eea45cSKlaus Jensen * zoned.max_open=<Maximum Open Resources (zones), default: 0> 14588eea45cSKlaus Jensen * The default value means there is no limit to the number of 14688eea45cSKlaus Jensen * concurrently open zones. 14788eea45cSKlaus Jensen * 14888eea45cSKlaus Jensen * zoned.cross_read=<enable RAZB, default: false> 14988eea45cSKlaus Jensen * Setting this property to true enables Read Across Zone Boundaries. 15088eea45cSKlaus Jensen */ 15188eea45cSKlaus Jensen 15288eea45cSKlaus Jensen #include "qemu/osdep.h" 15388eea45cSKlaus Jensen #include "qemu/cutils.h" 15488eea45cSKlaus Jensen #include "qemu/error-report.h" 15588eea45cSKlaus Jensen #include "qemu/log.h" 15688eea45cSKlaus Jensen #include "qemu/units.h" 15788eea45cSKlaus Jensen #include "qapi/error.h" 15888eea45cSKlaus Jensen #include "qapi/visitor.h" 15988eea45cSKlaus Jensen #include "sysemu/sysemu.h" 16088eea45cSKlaus Jensen #include "sysemu/block-backend.h" 16188eea45cSKlaus Jensen #include "sysemu/hostmem.h" 16288eea45cSKlaus Jensen #include "hw/pci/msix.h" 16388eea45cSKlaus Jensen #include "migration/vmstate.h" 16488eea45cSKlaus Jensen 16588eea45cSKlaus Jensen #include "nvme.h" 16688eea45cSKlaus Jensen #include "trace.h" 16788eea45cSKlaus Jensen 16888eea45cSKlaus Jensen #define NVME_MAX_IOQPAIRS 0xffff 16988eea45cSKlaus Jensen #define NVME_DB_SIZE 4 17088eea45cSKlaus Jensen #define NVME_SPEC_VER 0x00010400 17188eea45cSKlaus Jensen #define NVME_CMB_BIR 2 17288eea45cSKlaus Jensen #define NVME_PMR_BIR 4 17388eea45cSKlaus Jensen #define NVME_TEMPERATURE 0x143 17488eea45cSKlaus Jensen #define NVME_TEMPERATURE_WARNING 0x157 17588eea45cSKlaus Jensen #define NVME_TEMPERATURE_CRITICAL 0x175 17688eea45cSKlaus Jensen #define NVME_NUM_FW_SLOTS 1 17788eea45cSKlaus Jensen #define NVME_DEFAULT_MAX_ZA_SIZE (128 * KiB) 17888eea45cSKlaus Jensen 17988eea45cSKlaus Jensen #define NVME_GUEST_ERR(trace, fmt, ...) \ 18088eea45cSKlaus Jensen do { \ 18188eea45cSKlaus Jensen (trace_##trace)(__VA_ARGS__); \ 18288eea45cSKlaus Jensen qemu_log_mask(LOG_GUEST_ERROR, #trace \ 18388eea45cSKlaus Jensen " in %s: " fmt "\n", __func__, ## __VA_ARGS__); \ 18488eea45cSKlaus Jensen } while (0) 18588eea45cSKlaus Jensen 18688eea45cSKlaus Jensen static const bool nvme_feature_support[NVME_FID_MAX] = { 18788eea45cSKlaus Jensen [NVME_ARBITRATION] = true, 18888eea45cSKlaus Jensen [NVME_POWER_MANAGEMENT] = true, 18988eea45cSKlaus Jensen [NVME_TEMPERATURE_THRESHOLD] = true, 19088eea45cSKlaus Jensen [NVME_ERROR_RECOVERY] = true, 19188eea45cSKlaus Jensen [NVME_VOLATILE_WRITE_CACHE] = true, 19288eea45cSKlaus Jensen [NVME_NUMBER_OF_QUEUES] = true, 19388eea45cSKlaus Jensen [NVME_INTERRUPT_COALESCING] = true, 19488eea45cSKlaus Jensen [NVME_INTERRUPT_VECTOR_CONF] = true, 19588eea45cSKlaus Jensen [NVME_WRITE_ATOMICITY] = true, 19688eea45cSKlaus Jensen [NVME_ASYNCHRONOUS_EVENT_CONF] = true, 19788eea45cSKlaus Jensen [NVME_TIMESTAMP] = true, 19888eea45cSKlaus Jensen [NVME_COMMAND_SET_PROFILE] = true, 19988eea45cSKlaus Jensen }; 20088eea45cSKlaus Jensen 20188eea45cSKlaus Jensen static const uint32_t nvme_feature_cap[NVME_FID_MAX] = { 20288eea45cSKlaus Jensen [NVME_TEMPERATURE_THRESHOLD] = NVME_FEAT_CAP_CHANGE, 20388eea45cSKlaus Jensen [NVME_ERROR_RECOVERY] = NVME_FEAT_CAP_CHANGE | NVME_FEAT_CAP_NS, 20488eea45cSKlaus Jensen [NVME_VOLATILE_WRITE_CACHE] = NVME_FEAT_CAP_CHANGE, 20588eea45cSKlaus Jensen [NVME_NUMBER_OF_QUEUES] = NVME_FEAT_CAP_CHANGE, 20688eea45cSKlaus Jensen [NVME_ASYNCHRONOUS_EVENT_CONF] = NVME_FEAT_CAP_CHANGE, 20788eea45cSKlaus Jensen [NVME_TIMESTAMP] = NVME_FEAT_CAP_CHANGE, 20888eea45cSKlaus Jensen [NVME_COMMAND_SET_PROFILE] = NVME_FEAT_CAP_CHANGE, 20988eea45cSKlaus Jensen }; 21088eea45cSKlaus Jensen 21188eea45cSKlaus Jensen static const uint32_t nvme_cse_acs[256] = { 21288eea45cSKlaus Jensen [NVME_ADM_CMD_DELETE_SQ] = NVME_CMD_EFF_CSUPP, 21388eea45cSKlaus Jensen [NVME_ADM_CMD_CREATE_SQ] = NVME_CMD_EFF_CSUPP, 21488eea45cSKlaus Jensen [NVME_ADM_CMD_GET_LOG_PAGE] = NVME_CMD_EFF_CSUPP, 21588eea45cSKlaus Jensen [NVME_ADM_CMD_DELETE_CQ] = NVME_CMD_EFF_CSUPP, 21688eea45cSKlaus Jensen [NVME_ADM_CMD_CREATE_CQ] = NVME_CMD_EFF_CSUPP, 21788eea45cSKlaus Jensen [NVME_ADM_CMD_IDENTIFY] = NVME_CMD_EFF_CSUPP, 21888eea45cSKlaus Jensen [NVME_ADM_CMD_ABORT] = NVME_CMD_EFF_CSUPP, 21988eea45cSKlaus Jensen [NVME_ADM_CMD_SET_FEATURES] = NVME_CMD_EFF_CSUPP, 22088eea45cSKlaus Jensen [NVME_ADM_CMD_GET_FEATURES] = NVME_CMD_EFF_CSUPP, 22188eea45cSKlaus Jensen [NVME_ADM_CMD_ASYNC_EV_REQ] = NVME_CMD_EFF_CSUPP, 22288eea45cSKlaus Jensen [NVME_ADM_CMD_NS_ATTACHMENT] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_NIC, 22388eea45cSKlaus Jensen [NVME_ADM_CMD_FORMAT_NVM] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 22488eea45cSKlaus Jensen }; 22588eea45cSKlaus Jensen 22688eea45cSKlaus Jensen static const uint32_t nvme_cse_iocs_none[256]; 22788eea45cSKlaus Jensen 22888eea45cSKlaus Jensen static const uint32_t nvme_cse_iocs_nvm[256] = { 22988eea45cSKlaus Jensen [NVME_CMD_FLUSH] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 23088eea45cSKlaus Jensen [NVME_CMD_WRITE_ZEROES] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 23188eea45cSKlaus Jensen [NVME_CMD_WRITE] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 23288eea45cSKlaus Jensen [NVME_CMD_READ] = NVME_CMD_EFF_CSUPP, 23388eea45cSKlaus Jensen [NVME_CMD_DSM] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 23488eea45cSKlaus Jensen [NVME_CMD_VERIFY] = NVME_CMD_EFF_CSUPP, 23588eea45cSKlaus Jensen [NVME_CMD_COPY] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 23688eea45cSKlaus Jensen [NVME_CMD_COMPARE] = NVME_CMD_EFF_CSUPP, 23788eea45cSKlaus Jensen }; 23888eea45cSKlaus Jensen 23988eea45cSKlaus Jensen static const uint32_t nvme_cse_iocs_zoned[256] = { 24088eea45cSKlaus Jensen [NVME_CMD_FLUSH] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 24188eea45cSKlaus Jensen [NVME_CMD_WRITE_ZEROES] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 24288eea45cSKlaus Jensen [NVME_CMD_WRITE] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 24388eea45cSKlaus Jensen [NVME_CMD_READ] = NVME_CMD_EFF_CSUPP, 24488eea45cSKlaus Jensen [NVME_CMD_DSM] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 24588eea45cSKlaus Jensen [NVME_CMD_VERIFY] = NVME_CMD_EFF_CSUPP, 24688eea45cSKlaus Jensen [NVME_CMD_COPY] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 24788eea45cSKlaus Jensen [NVME_CMD_COMPARE] = NVME_CMD_EFF_CSUPP, 24888eea45cSKlaus Jensen [NVME_CMD_ZONE_APPEND] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 24988eea45cSKlaus Jensen [NVME_CMD_ZONE_MGMT_SEND] = NVME_CMD_EFF_CSUPP | NVME_CMD_EFF_LBCC, 25088eea45cSKlaus Jensen [NVME_CMD_ZONE_MGMT_RECV] = NVME_CMD_EFF_CSUPP, 25188eea45cSKlaus Jensen }; 25288eea45cSKlaus Jensen 25388eea45cSKlaus Jensen static void nvme_process_sq(void *opaque); 25488eea45cSKlaus Jensen 25588eea45cSKlaus Jensen static uint16_t nvme_sqid(NvmeRequest *req) 25688eea45cSKlaus Jensen { 25788eea45cSKlaus Jensen return le16_to_cpu(req->sq->sqid); 25888eea45cSKlaus Jensen } 25988eea45cSKlaus Jensen 26088eea45cSKlaus Jensen static void nvme_assign_zone_state(NvmeNamespace *ns, NvmeZone *zone, 26188eea45cSKlaus Jensen NvmeZoneState state) 26288eea45cSKlaus Jensen { 26388eea45cSKlaus Jensen if (QTAILQ_IN_USE(zone, entry)) { 26488eea45cSKlaus Jensen switch (nvme_get_zone_state(zone)) { 26588eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 26688eea45cSKlaus Jensen QTAILQ_REMOVE(&ns->exp_open_zones, zone, entry); 26788eea45cSKlaus Jensen break; 26888eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 26988eea45cSKlaus Jensen QTAILQ_REMOVE(&ns->imp_open_zones, zone, entry); 27088eea45cSKlaus Jensen break; 27188eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 27288eea45cSKlaus Jensen QTAILQ_REMOVE(&ns->closed_zones, zone, entry); 27388eea45cSKlaus Jensen break; 27488eea45cSKlaus Jensen case NVME_ZONE_STATE_FULL: 27588eea45cSKlaus Jensen QTAILQ_REMOVE(&ns->full_zones, zone, entry); 27688eea45cSKlaus Jensen default: 27788eea45cSKlaus Jensen ; 27888eea45cSKlaus Jensen } 27988eea45cSKlaus Jensen } 28088eea45cSKlaus Jensen 28188eea45cSKlaus Jensen nvme_set_zone_state(zone, state); 28288eea45cSKlaus Jensen 28388eea45cSKlaus Jensen switch (state) { 28488eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 28588eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&ns->exp_open_zones, zone, entry); 28688eea45cSKlaus Jensen break; 28788eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 28888eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&ns->imp_open_zones, zone, entry); 28988eea45cSKlaus Jensen break; 29088eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 29188eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&ns->closed_zones, zone, entry); 29288eea45cSKlaus Jensen break; 29388eea45cSKlaus Jensen case NVME_ZONE_STATE_FULL: 29488eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&ns->full_zones, zone, entry); 29588eea45cSKlaus Jensen case NVME_ZONE_STATE_READ_ONLY: 29688eea45cSKlaus Jensen break; 29788eea45cSKlaus Jensen default: 29888eea45cSKlaus Jensen zone->d.za = 0; 29988eea45cSKlaus Jensen } 30088eea45cSKlaus Jensen } 30188eea45cSKlaus Jensen 30288eea45cSKlaus Jensen /* 30388eea45cSKlaus Jensen * Check if we can open a zone without exceeding open/active limits. 30488eea45cSKlaus Jensen * AOR stands for "Active and Open Resources" (see TP 4053 section 2.5). 30588eea45cSKlaus Jensen */ 30688eea45cSKlaus Jensen static int nvme_aor_check(NvmeNamespace *ns, uint32_t act, uint32_t opn) 30788eea45cSKlaus Jensen { 30888eea45cSKlaus Jensen if (ns->params.max_active_zones != 0 && 30988eea45cSKlaus Jensen ns->nr_active_zones + act > ns->params.max_active_zones) { 31088eea45cSKlaus Jensen trace_pci_nvme_err_insuff_active_res(ns->params.max_active_zones); 31188eea45cSKlaus Jensen return NVME_ZONE_TOO_MANY_ACTIVE | NVME_DNR; 31288eea45cSKlaus Jensen } 31388eea45cSKlaus Jensen if (ns->params.max_open_zones != 0 && 31488eea45cSKlaus Jensen ns->nr_open_zones + opn > ns->params.max_open_zones) { 31588eea45cSKlaus Jensen trace_pci_nvme_err_insuff_open_res(ns->params.max_open_zones); 31688eea45cSKlaus Jensen return NVME_ZONE_TOO_MANY_OPEN | NVME_DNR; 31788eea45cSKlaus Jensen } 31888eea45cSKlaus Jensen 31988eea45cSKlaus Jensen return NVME_SUCCESS; 32088eea45cSKlaus Jensen } 32188eea45cSKlaus Jensen 32288eea45cSKlaus Jensen static bool nvme_addr_is_cmb(NvmeCtrl *n, hwaddr addr) 32388eea45cSKlaus Jensen { 32488eea45cSKlaus Jensen hwaddr hi, lo; 32588eea45cSKlaus Jensen 32688eea45cSKlaus Jensen if (!n->cmb.cmse) { 32788eea45cSKlaus Jensen return false; 32888eea45cSKlaus Jensen } 32988eea45cSKlaus Jensen 33088eea45cSKlaus Jensen lo = n->params.legacy_cmb ? n->cmb.mem.addr : n->cmb.cba; 33188eea45cSKlaus Jensen hi = lo + int128_get64(n->cmb.mem.size); 33288eea45cSKlaus Jensen 33388eea45cSKlaus Jensen return addr >= lo && addr < hi; 33488eea45cSKlaus Jensen } 33588eea45cSKlaus Jensen 33688eea45cSKlaus Jensen static inline void *nvme_addr_to_cmb(NvmeCtrl *n, hwaddr addr) 33788eea45cSKlaus Jensen { 33888eea45cSKlaus Jensen hwaddr base = n->params.legacy_cmb ? n->cmb.mem.addr : n->cmb.cba; 33988eea45cSKlaus Jensen return &n->cmb.buf[addr - base]; 34088eea45cSKlaus Jensen } 34188eea45cSKlaus Jensen 34288eea45cSKlaus Jensen static bool nvme_addr_is_pmr(NvmeCtrl *n, hwaddr addr) 34388eea45cSKlaus Jensen { 34488eea45cSKlaus Jensen hwaddr hi; 34588eea45cSKlaus Jensen 34688eea45cSKlaus Jensen if (!n->pmr.cmse) { 34788eea45cSKlaus Jensen return false; 34888eea45cSKlaus Jensen } 34988eea45cSKlaus Jensen 35088eea45cSKlaus Jensen hi = n->pmr.cba + int128_get64(n->pmr.dev->mr.size); 35188eea45cSKlaus Jensen 35288eea45cSKlaus Jensen return addr >= n->pmr.cba && addr < hi; 35388eea45cSKlaus Jensen } 35488eea45cSKlaus Jensen 35588eea45cSKlaus Jensen static inline void *nvme_addr_to_pmr(NvmeCtrl *n, hwaddr addr) 35688eea45cSKlaus Jensen { 35788eea45cSKlaus Jensen return memory_region_get_ram_ptr(&n->pmr.dev->mr) + (addr - n->pmr.cba); 35888eea45cSKlaus Jensen } 35988eea45cSKlaus Jensen 36088eea45cSKlaus Jensen static int nvme_addr_read(NvmeCtrl *n, hwaddr addr, void *buf, int size) 36188eea45cSKlaus Jensen { 36288eea45cSKlaus Jensen hwaddr hi = addr + size - 1; 36388eea45cSKlaus Jensen if (hi < addr) { 36488eea45cSKlaus Jensen return 1; 36588eea45cSKlaus Jensen } 36688eea45cSKlaus Jensen 36788eea45cSKlaus Jensen if (n->bar.cmbsz && nvme_addr_is_cmb(n, addr) && nvme_addr_is_cmb(n, hi)) { 36888eea45cSKlaus Jensen memcpy(buf, nvme_addr_to_cmb(n, addr), size); 36988eea45cSKlaus Jensen return 0; 37088eea45cSKlaus Jensen } 37188eea45cSKlaus Jensen 37288eea45cSKlaus Jensen if (nvme_addr_is_pmr(n, addr) && nvme_addr_is_pmr(n, hi)) { 37388eea45cSKlaus Jensen memcpy(buf, nvme_addr_to_pmr(n, addr), size); 37488eea45cSKlaus Jensen return 0; 37588eea45cSKlaus Jensen } 37688eea45cSKlaus Jensen 37788eea45cSKlaus Jensen return pci_dma_read(&n->parent_obj, addr, buf, size); 37888eea45cSKlaus Jensen } 37988eea45cSKlaus Jensen 38088eea45cSKlaus Jensen static int nvme_addr_write(NvmeCtrl *n, hwaddr addr, void *buf, int size) 38188eea45cSKlaus Jensen { 38288eea45cSKlaus Jensen hwaddr hi = addr + size - 1; 38388eea45cSKlaus Jensen if (hi < addr) { 38488eea45cSKlaus Jensen return 1; 38588eea45cSKlaus Jensen } 38688eea45cSKlaus Jensen 38788eea45cSKlaus Jensen if (n->bar.cmbsz && nvme_addr_is_cmb(n, addr) && nvme_addr_is_cmb(n, hi)) { 38888eea45cSKlaus Jensen memcpy(nvme_addr_to_cmb(n, addr), buf, size); 38988eea45cSKlaus Jensen return 0; 39088eea45cSKlaus Jensen } 39188eea45cSKlaus Jensen 39288eea45cSKlaus Jensen if (nvme_addr_is_pmr(n, addr) && nvme_addr_is_pmr(n, hi)) { 39388eea45cSKlaus Jensen memcpy(nvme_addr_to_pmr(n, addr), buf, size); 39488eea45cSKlaus Jensen return 0; 39588eea45cSKlaus Jensen } 39688eea45cSKlaus Jensen 39788eea45cSKlaus Jensen return pci_dma_write(&n->parent_obj, addr, buf, size); 39888eea45cSKlaus Jensen } 39988eea45cSKlaus Jensen 40088eea45cSKlaus Jensen static bool nvme_nsid_valid(NvmeCtrl *n, uint32_t nsid) 40188eea45cSKlaus Jensen { 40288eea45cSKlaus Jensen return nsid && 40388eea45cSKlaus Jensen (nsid == NVME_NSID_BROADCAST || nsid <= NVME_MAX_NAMESPACES); 40488eea45cSKlaus Jensen } 40588eea45cSKlaus Jensen 40688eea45cSKlaus Jensen static int nvme_check_sqid(NvmeCtrl *n, uint16_t sqid) 40788eea45cSKlaus Jensen { 40888eea45cSKlaus Jensen return sqid < n->params.max_ioqpairs + 1 && n->sq[sqid] != NULL ? 0 : -1; 40988eea45cSKlaus Jensen } 41088eea45cSKlaus Jensen 41188eea45cSKlaus Jensen static int nvme_check_cqid(NvmeCtrl *n, uint16_t cqid) 41288eea45cSKlaus Jensen { 41388eea45cSKlaus Jensen return cqid < n->params.max_ioqpairs + 1 && n->cq[cqid] != NULL ? 0 : -1; 41488eea45cSKlaus Jensen } 41588eea45cSKlaus Jensen 41688eea45cSKlaus Jensen static void nvme_inc_cq_tail(NvmeCQueue *cq) 41788eea45cSKlaus Jensen { 41888eea45cSKlaus Jensen cq->tail++; 41988eea45cSKlaus Jensen if (cq->tail >= cq->size) { 42088eea45cSKlaus Jensen cq->tail = 0; 42188eea45cSKlaus Jensen cq->phase = !cq->phase; 42288eea45cSKlaus Jensen } 42388eea45cSKlaus Jensen } 42488eea45cSKlaus Jensen 42588eea45cSKlaus Jensen static void nvme_inc_sq_head(NvmeSQueue *sq) 42688eea45cSKlaus Jensen { 42788eea45cSKlaus Jensen sq->head = (sq->head + 1) % sq->size; 42888eea45cSKlaus Jensen } 42988eea45cSKlaus Jensen 43088eea45cSKlaus Jensen static uint8_t nvme_cq_full(NvmeCQueue *cq) 43188eea45cSKlaus Jensen { 43288eea45cSKlaus Jensen return (cq->tail + 1) % cq->size == cq->head; 43388eea45cSKlaus Jensen } 43488eea45cSKlaus Jensen 43588eea45cSKlaus Jensen static uint8_t nvme_sq_empty(NvmeSQueue *sq) 43688eea45cSKlaus Jensen { 43788eea45cSKlaus Jensen return sq->head == sq->tail; 43888eea45cSKlaus Jensen } 43988eea45cSKlaus Jensen 44088eea45cSKlaus Jensen static void nvme_irq_check(NvmeCtrl *n) 44188eea45cSKlaus Jensen { 44288eea45cSKlaus Jensen if (msix_enabled(&(n->parent_obj))) { 44388eea45cSKlaus Jensen return; 44488eea45cSKlaus Jensen } 44588eea45cSKlaus Jensen if (~n->bar.intms & n->irq_status) { 44688eea45cSKlaus Jensen pci_irq_assert(&n->parent_obj); 44788eea45cSKlaus Jensen } else { 44888eea45cSKlaus Jensen pci_irq_deassert(&n->parent_obj); 44988eea45cSKlaus Jensen } 45088eea45cSKlaus Jensen } 45188eea45cSKlaus Jensen 45288eea45cSKlaus Jensen static void nvme_irq_assert(NvmeCtrl *n, NvmeCQueue *cq) 45388eea45cSKlaus Jensen { 45488eea45cSKlaus Jensen if (cq->irq_enabled) { 45588eea45cSKlaus Jensen if (msix_enabled(&(n->parent_obj))) { 45688eea45cSKlaus Jensen trace_pci_nvme_irq_msix(cq->vector); 45788eea45cSKlaus Jensen msix_notify(&(n->parent_obj), cq->vector); 45888eea45cSKlaus Jensen } else { 45988eea45cSKlaus Jensen trace_pci_nvme_irq_pin(); 46088eea45cSKlaus Jensen assert(cq->vector < 32); 46188eea45cSKlaus Jensen n->irq_status |= 1 << cq->vector; 46288eea45cSKlaus Jensen nvme_irq_check(n); 46388eea45cSKlaus Jensen } 46488eea45cSKlaus Jensen } else { 46588eea45cSKlaus Jensen trace_pci_nvme_irq_masked(); 46688eea45cSKlaus Jensen } 46788eea45cSKlaus Jensen } 46888eea45cSKlaus Jensen 46988eea45cSKlaus Jensen static void nvme_irq_deassert(NvmeCtrl *n, NvmeCQueue *cq) 47088eea45cSKlaus Jensen { 47188eea45cSKlaus Jensen if (cq->irq_enabled) { 47288eea45cSKlaus Jensen if (msix_enabled(&(n->parent_obj))) { 47388eea45cSKlaus Jensen return; 47488eea45cSKlaus Jensen } else { 47588eea45cSKlaus Jensen assert(cq->vector < 32); 47688eea45cSKlaus Jensen n->irq_status &= ~(1 << cq->vector); 47788eea45cSKlaus Jensen nvme_irq_check(n); 47888eea45cSKlaus Jensen } 47988eea45cSKlaus Jensen } 48088eea45cSKlaus Jensen } 48188eea45cSKlaus Jensen 48288eea45cSKlaus Jensen static void nvme_req_clear(NvmeRequest *req) 48388eea45cSKlaus Jensen { 48488eea45cSKlaus Jensen req->ns = NULL; 48588eea45cSKlaus Jensen req->opaque = NULL; 48688eea45cSKlaus Jensen req->aiocb = NULL; 48788eea45cSKlaus Jensen memset(&req->cqe, 0x0, sizeof(req->cqe)); 48888eea45cSKlaus Jensen req->status = NVME_SUCCESS; 48988eea45cSKlaus Jensen } 49088eea45cSKlaus Jensen 49188eea45cSKlaus Jensen static inline void nvme_sg_init(NvmeCtrl *n, NvmeSg *sg, bool dma) 49288eea45cSKlaus Jensen { 49388eea45cSKlaus Jensen if (dma) { 49488eea45cSKlaus Jensen pci_dma_sglist_init(&sg->qsg, &n->parent_obj, 0); 49588eea45cSKlaus Jensen sg->flags = NVME_SG_DMA; 49688eea45cSKlaus Jensen } else { 49788eea45cSKlaus Jensen qemu_iovec_init(&sg->iov, 0); 49888eea45cSKlaus Jensen } 49988eea45cSKlaus Jensen 50088eea45cSKlaus Jensen sg->flags |= NVME_SG_ALLOC; 50188eea45cSKlaus Jensen } 50288eea45cSKlaus Jensen 50388eea45cSKlaus Jensen static inline void nvme_sg_unmap(NvmeSg *sg) 50488eea45cSKlaus Jensen { 50588eea45cSKlaus Jensen if (!(sg->flags & NVME_SG_ALLOC)) { 50688eea45cSKlaus Jensen return; 50788eea45cSKlaus Jensen } 50888eea45cSKlaus Jensen 50988eea45cSKlaus Jensen if (sg->flags & NVME_SG_DMA) { 51088eea45cSKlaus Jensen qemu_sglist_destroy(&sg->qsg); 51188eea45cSKlaus Jensen } else { 51288eea45cSKlaus Jensen qemu_iovec_destroy(&sg->iov); 51388eea45cSKlaus Jensen } 51488eea45cSKlaus Jensen 51588eea45cSKlaus Jensen memset(sg, 0x0, sizeof(*sg)); 51688eea45cSKlaus Jensen } 51788eea45cSKlaus Jensen 51888eea45cSKlaus Jensen /* 51988eea45cSKlaus Jensen * When metadata is transfered as extended LBAs, the DPTR mapped into `sg` 52088eea45cSKlaus Jensen * holds both data and metadata. This function splits the data and metadata 52188eea45cSKlaus Jensen * into two separate QSG/IOVs. 52288eea45cSKlaus Jensen */ 52388eea45cSKlaus Jensen static void nvme_sg_split(NvmeSg *sg, NvmeNamespace *ns, NvmeSg *data, 52488eea45cSKlaus Jensen NvmeSg *mdata) 52588eea45cSKlaus Jensen { 52688eea45cSKlaus Jensen NvmeSg *dst = data; 52788eea45cSKlaus Jensen uint32_t trans_len, count = ns->lbasz; 52888eea45cSKlaus Jensen uint64_t offset = 0; 52988eea45cSKlaus Jensen bool dma = sg->flags & NVME_SG_DMA; 53088eea45cSKlaus Jensen size_t sge_len; 53188eea45cSKlaus Jensen size_t sg_len = dma ? sg->qsg.size : sg->iov.size; 53288eea45cSKlaus Jensen int sg_idx = 0; 53388eea45cSKlaus Jensen 53488eea45cSKlaus Jensen assert(sg->flags & NVME_SG_ALLOC); 53588eea45cSKlaus Jensen 53688eea45cSKlaus Jensen while (sg_len) { 53788eea45cSKlaus Jensen sge_len = dma ? sg->qsg.sg[sg_idx].len : sg->iov.iov[sg_idx].iov_len; 53888eea45cSKlaus Jensen 53988eea45cSKlaus Jensen trans_len = MIN(sg_len, count); 54088eea45cSKlaus Jensen trans_len = MIN(trans_len, sge_len - offset); 54188eea45cSKlaus Jensen 54288eea45cSKlaus Jensen if (dst) { 54388eea45cSKlaus Jensen if (dma) { 54488eea45cSKlaus Jensen qemu_sglist_add(&dst->qsg, sg->qsg.sg[sg_idx].base + offset, 54588eea45cSKlaus Jensen trans_len); 54688eea45cSKlaus Jensen } else { 54788eea45cSKlaus Jensen qemu_iovec_add(&dst->iov, 54888eea45cSKlaus Jensen sg->iov.iov[sg_idx].iov_base + offset, 54988eea45cSKlaus Jensen trans_len); 55088eea45cSKlaus Jensen } 55188eea45cSKlaus Jensen } 55288eea45cSKlaus Jensen 55388eea45cSKlaus Jensen sg_len -= trans_len; 55488eea45cSKlaus Jensen count -= trans_len; 55588eea45cSKlaus Jensen offset += trans_len; 55688eea45cSKlaus Jensen 55788eea45cSKlaus Jensen if (count == 0) { 55888eea45cSKlaus Jensen dst = (dst == data) ? mdata : data; 55988eea45cSKlaus Jensen count = (dst == data) ? ns->lbasz : ns->lbaf.ms; 56088eea45cSKlaus Jensen } 56188eea45cSKlaus Jensen 56288eea45cSKlaus Jensen if (sge_len == offset) { 56388eea45cSKlaus Jensen offset = 0; 56488eea45cSKlaus Jensen sg_idx++; 56588eea45cSKlaus Jensen } 56688eea45cSKlaus Jensen } 56788eea45cSKlaus Jensen } 56888eea45cSKlaus Jensen 56988eea45cSKlaus Jensen static uint16_t nvme_map_addr_cmb(NvmeCtrl *n, QEMUIOVector *iov, hwaddr addr, 57088eea45cSKlaus Jensen size_t len) 57188eea45cSKlaus Jensen { 57288eea45cSKlaus Jensen if (!len) { 57388eea45cSKlaus Jensen return NVME_SUCCESS; 57488eea45cSKlaus Jensen } 57588eea45cSKlaus Jensen 57688eea45cSKlaus Jensen trace_pci_nvme_map_addr_cmb(addr, len); 57788eea45cSKlaus Jensen 57888eea45cSKlaus Jensen if (!nvme_addr_is_cmb(n, addr) || !nvme_addr_is_cmb(n, addr + len - 1)) { 57988eea45cSKlaus Jensen return NVME_DATA_TRAS_ERROR; 58088eea45cSKlaus Jensen } 58188eea45cSKlaus Jensen 58288eea45cSKlaus Jensen qemu_iovec_add(iov, nvme_addr_to_cmb(n, addr), len); 58388eea45cSKlaus Jensen 58488eea45cSKlaus Jensen return NVME_SUCCESS; 58588eea45cSKlaus Jensen } 58688eea45cSKlaus Jensen 58788eea45cSKlaus Jensen static uint16_t nvme_map_addr_pmr(NvmeCtrl *n, QEMUIOVector *iov, hwaddr addr, 58888eea45cSKlaus Jensen size_t len) 58988eea45cSKlaus Jensen { 59088eea45cSKlaus Jensen if (!len) { 59188eea45cSKlaus Jensen return NVME_SUCCESS; 59288eea45cSKlaus Jensen } 59388eea45cSKlaus Jensen 59488eea45cSKlaus Jensen if (!nvme_addr_is_pmr(n, addr) || !nvme_addr_is_pmr(n, addr + len - 1)) { 59588eea45cSKlaus Jensen return NVME_DATA_TRAS_ERROR; 59688eea45cSKlaus Jensen } 59788eea45cSKlaus Jensen 59888eea45cSKlaus Jensen qemu_iovec_add(iov, nvme_addr_to_pmr(n, addr), len); 59988eea45cSKlaus Jensen 60088eea45cSKlaus Jensen return NVME_SUCCESS; 60188eea45cSKlaus Jensen } 60288eea45cSKlaus Jensen 60388eea45cSKlaus Jensen static uint16_t nvme_map_addr(NvmeCtrl *n, NvmeSg *sg, hwaddr addr, size_t len) 60488eea45cSKlaus Jensen { 60588eea45cSKlaus Jensen bool cmb = false, pmr = false; 60688eea45cSKlaus Jensen 60788eea45cSKlaus Jensen if (!len) { 60888eea45cSKlaus Jensen return NVME_SUCCESS; 60988eea45cSKlaus Jensen } 61088eea45cSKlaus Jensen 61188eea45cSKlaus Jensen trace_pci_nvme_map_addr(addr, len); 61288eea45cSKlaus Jensen 61388eea45cSKlaus Jensen if (nvme_addr_is_cmb(n, addr)) { 61488eea45cSKlaus Jensen cmb = true; 61588eea45cSKlaus Jensen } else if (nvme_addr_is_pmr(n, addr)) { 61688eea45cSKlaus Jensen pmr = true; 61788eea45cSKlaus Jensen } 61888eea45cSKlaus Jensen 61988eea45cSKlaus Jensen if (cmb || pmr) { 62088eea45cSKlaus Jensen if (sg->flags & NVME_SG_DMA) { 62188eea45cSKlaus Jensen return NVME_INVALID_USE_OF_CMB | NVME_DNR; 62288eea45cSKlaus Jensen } 62388eea45cSKlaus Jensen 62488eea45cSKlaus Jensen if (cmb) { 62588eea45cSKlaus Jensen return nvme_map_addr_cmb(n, &sg->iov, addr, len); 62688eea45cSKlaus Jensen } else { 62788eea45cSKlaus Jensen return nvme_map_addr_pmr(n, &sg->iov, addr, len); 62888eea45cSKlaus Jensen } 62988eea45cSKlaus Jensen } 63088eea45cSKlaus Jensen 63188eea45cSKlaus Jensen if (!(sg->flags & NVME_SG_DMA)) { 63288eea45cSKlaus Jensen return NVME_INVALID_USE_OF_CMB | NVME_DNR; 63388eea45cSKlaus Jensen } 63488eea45cSKlaus Jensen 63588eea45cSKlaus Jensen qemu_sglist_add(&sg->qsg, addr, len); 63688eea45cSKlaus Jensen 63788eea45cSKlaus Jensen return NVME_SUCCESS; 63888eea45cSKlaus Jensen } 63988eea45cSKlaus Jensen 64088eea45cSKlaus Jensen static inline bool nvme_addr_is_dma(NvmeCtrl *n, hwaddr addr) 64188eea45cSKlaus Jensen { 64288eea45cSKlaus Jensen return !(nvme_addr_is_cmb(n, addr) || nvme_addr_is_pmr(n, addr)); 64388eea45cSKlaus Jensen } 64488eea45cSKlaus Jensen 64588eea45cSKlaus Jensen static uint16_t nvme_map_prp(NvmeCtrl *n, NvmeSg *sg, uint64_t prp1, 64688eea45cSKlaus Jensen uint64_t prp2, uint32_t len) 64788eea45cSKlaus Jensen { 64888eea45cSKlaus Jensen hwaddr trans_len = n->page_size - (prp1 % n->page_size); 64988eea45cSKlaus Jensen trans_len = MIN(len, trans_len); 65088eea45cSKlaus Jensen int num_prps = (len >> n->page_bits) + 1; 65188eea45cSKlaus Jensen uint16_t status; 65288eea45cSKlaus Jensen int ret; 65388eea45cSKlaus Jensen 65488eea45cSKlaus Jensen trace_pci_nvme_map_prp(trans_len, len, prp1, prp2, num_prps); 65588eea45cSKlaus Jensen 65688eea45cSKlaus Jensen nvme_sg_init(n, sg, nvme_addr_is_dma(n, prp1)); 65788eea45cSKlaus Jensen 65888eea45cSKlaus Jensen status = nvme_map_addr(n, sg, prp1, trans_len); 65988eea45cSKlaus Jensen if (status) { 66088eea45cSKlaus Jensen goto unmap; 66188eea45cSKlaus Jensen } 66288eea45cSKlaus Jensen 66388eea45cSKlaus Jensen len -= trans_len; 66488eea45cSKlaus Jensen if (len) { 66588eea45cSKlaus Jensen if (len > n->page_size) { 66688eea45cSKlaus Jensen uint64_t prp_list[n->max_prp_ents]; 66788eea45cSKlaus Jensen uint32_t nents, prp_trans; 66888eea45cSKlaus Jensen int i = 0; 66988eea45cSKlaus Jensen 67088eea45cSKlaus Jensen /* 67188eea45cSKlaus Jensen * The first PRP list entry, pointed to by PRP2 may contain offset. 67288eea45cSKlaus Jensen * Hence, we need to calculate the number of entries in based on 67388eea45cSKlaus Jensen * that offset. 67488eea45cSKlaus Jensen */ 67588eea45cSKlaus Jensen nents = (n->page_size - (prp2 & (n->page_size - 1))) >> 3; 67688eea45cSKlaus Jensen prp_trans = MIN(n->max_prp_ents, nents) * sizeof(uint64_t); 67788eea45cSKlaus Jensen ret = nvme_addr_read(n, prp2, (void *)prp_list, prp_trans); 67888eea45cSKlaus Jensen if (ret) { 67988eea45cSKlaus Jensen trace_pci_nvme_err_addr_read(prp2); 68088eea45cSKlaus Jensen status = NVME_DATA_TRAS_ERROR; 68188eea45cSKlaus Jensen goto unmap; 68288eea45cSKlaus Jensen } 68388eea45cSKlaus Jensen while (len != 0) { 68488eea45cSKlaus Jensen uint64_t prp_ent = le64_to_cpu(prp_list[i]); 68588eea45cSKlaus Jensen 68688eea45cSKlaus Jensen if (i == nents - 1 && len > n->page_size) { 68788eea45cSKlaus Jensen if (unlikely(prp_ent & (n->page_size - 1))) { 68888eea45cSKlaus Jensen trace_pci_nvme_err_invalid_prplist_ent(prp_ent); 68988eea45cSKlaus Jensen status = NVME_INVALID_PRP_OFFSET | NVME_DNR; 69088eea45cSKlaus Jensen goto unmap; 69188eea45cSKlaus Jensen } 69288eea45cSKlaus Jensen 69388eea45cSKlaus Jensen i = 0; 69488eea45cSKlaus Jensen nents = (len + n->page_size - 1) >> n->page_bits; 69588eea45cSKlaus Jensen nents = MIN(nents, n->max_prp_ents); 69688eea45cSKlaus Jensen prp_trans = nents * sizeof(uint64_t); 69788eea45cSKlaus Jensen ret = nvme_addr_read(n, prp_ent, (void *)prp_list, 69888eea45cSKlaus Jensen prp_trans); 69988eea45cSKlaus Jensen if (ret) { 70088eea45cSKlaus Jensen trace_pci_nvme_err_addr_read(prp_ent); 70188eea45cSKlaus Jensen status = NVME_DATA_TRAS_ERROR; 70288eea45cSKlaus Jensen goto unmap; 70388eea45cSKlaus Jensen } 70488eea45cSKlaus Jensen prp_ent = le64_to_cpu(prp_list[i]); 70588eea45cSKlaus Jensen } 70688eea45cSKlaus Jensen 70788eea45cSKlaus Jensen if (unlikely(prp_ent & (n->page_size - 1))) { 70888eea45cSKlaus Jensen trace_pci_nvme_err_invalid_prplist_ent(prp_ent); 70988eea45cSKlaus Jensen status = NVME_INVALID_PRP_OFFSET | NVME_DNR; 71088eea45cSKlaus Jensen goto unmap; 71188eea45cSKlaus Jensen } 71288eea45cSKlaus Jensen 71388eea45cSKlaus Jensen trans_len = MIN(len, n->page_size); 71488eea45cSKlaus Jensen status = nvme_map_addr(n, sg, prp_ent, trans_len); 71588eea45cSKlaus Jensen if (status) { 71688eea45cSKlaus Jensen goto unmap; 71788eea45cSKlaus Jensen } 71888eea45cSKlaus Jensen 71988eea45cSKlaus Jensen len -= trans_len; 72088eea45cSKlaus Jensen i++; 72188eea45cSKlaus Jensen } 72288eea45cSKlaus Jensen } else { 72388eea45cSKlaus Jensen if (unlikely(prp2 & (n->page_size - 1))) { 72488eea45cSKlaus Jensen trace_pci_nvme_err_invalid_prp2_align(prp2); 72588eea45cSKlaus Jensen status = NVME_INVALID_PRP_OFFSET | NVME_DNR; 72688eea45cSKlaus Jensen goto unmap; 72788eea45cSKlaus Jensen } 72888eea45cSKlaus Jensen status = nvme_map_addr(n, sg, prp2, len); 72988eea45cSKlaus Jensen if (status) { 73088eea45cSKlaus Jensen goto unmap; 73188eea45cSKlaus Jensen } 73288eea45cSKlaus Jensen } 73388eea45cSKlaus Jensen } 73488eea45cSKlaus Jensen 73588eea45cSKlaus Jensen return NVME_SUCCESS; 73688eea45cSKlaus Jensen 73788eea45cSKlaus Jensen unmap: 73888eea45cSKlaus Jensen nvme_sg_unmap(sg); 73988eea45cSKlaus Jensen return status; 74088eea45cSKlaus Jensen } 74188eea45cSKlaus Jensen 74288eea45cSKlaus Jensen /* 74388eea45cSKlaus Jensen * Map 'nsgld' data descriptors from 'segment'. The function will subtract the 74488eea45cSKlaus Jensen * number of bytes mapped in len. 74588eea45cSKlaus Jensen */ 74688eea45cSKlaus Jensen static uint16_t nvme_map_sgl_data(NvmeCtrl *n, NvmeSg *sg, 74788eea45cSKlaus Jensen NvmeSglDescriptor *segment, uint64_t nsgld, 74888eea45cSKlaus Jensen size_t *len, NvmeCmd *cmd) 74988eea45cSKlaus Jensen { 75088eea45cSKlaus Jensen dma_addr_t addr, trans_len; 75188eea45cSKlaus Jensen uint32_t dlen; 75288eea45cSKlaus Jensen uint16_t status; 75388eea45cSKlaus Jensen 75488eea45cSKlaus Jensen for (int i = 0; i < nsgld; i++) { 75588eea45cSKlaus Jensen uint8_t type = NVME_SGL_TYPE(segment[i].type); 75688eea45cSKlaus Jensen 75788eea45cSKlaus Jensen switch (type) { 75888eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_BIT_BUCKET: 75988eea45cSKlaus Jensen if (cmd->opcode == NVME_CMD_WRITE) { 76088eea45cSKlaus Jensen continue; 76188eea45cSKlaus Jensen } 76288eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_DATA_BLOCK: 76388eea45cSKlaus Jensen break; 76488eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_SEGMENT: 76588eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_LAST_SEGMENT: 76688eea45cSKlaus Jensen return NVME_INVALID_NUM_SGL_DESCRS | NVME_DNR; 76788eea45cSKlaus Jensen default: 76888eea45cSKlaus Jensen return NVME_SGL_DESCR_TYPE_INVALID | NVME_DNR; 76988eea45cSKlaus Jensen } 77088eea45cSKlaus Jensen 77188eea45cSKlaus Jensen dlen = le32_to_cpu(segment[i].len); 77288eea45cSKlaus Jensen 77388eea45cSKlaus Jensen if (!dlen) { 77488eea45cSKlaus Jensen continue; 77588eea45cSKlaus Jensen } 77688eea45cSKlaus Jensen 77788eea45cSKlaus Jensen if (*len == 0) { 77888eea45cSKlaus Jensen /* 77988eea45cSKlaus Jensen * All data has been mapped, but the SGL contains additional 78088eea45cSKlaus Jensen * segments and/or descriptors. The controller might accept 78188eea45cSKlaus Jensen * ignoring the rest of the SGL. 78288eea45cSKlaus Jensen */ 78388eea45cSKlaus Jensen uint32_t sgls = le32_to_cpu(n->id_ctrl.sgls); 78488eea45cSKlaus Jensen if (sgls & NVME_CTRL_SGLS_EXCESS_LENGTH) { 78588eea45cSKlaus Jensen break; 78688eea45cSKlaus Jensen } 78788eea45cSKlaus Jensen 78888eea45cSKlaus Jensen trace_pci_nvme_err_invalid_sgl_excess_length(dlen); 78988eea45cSKlaus Jensen return NVME_DATA_SGL_LEN_INVALID | NVME_DNR; 79088eea45cSKlaus Jensen } 79188eea45cSKlaus Jensen 79288eea45cSKlaus Jensen trans_len = MIN(*len, dlen); 79388eea45cSKlaus Jensen 79488eea45cSKlaus Jensen if (type == NVME_SGL_DESCR_TYPE_BIT_BUCKET) { 79588eea45cSKlaus Jensen goto next; 79688eea45cSKlaus Jensen } 79788eea45cSKlaus Jensen 79888eea45cSKlaus Jensen addr = le64_to_cpu(segment[i].addr); 79988eea45cSKlaus Jensen 80088eea45cSKlaus Jensen if (UINT64_MAX - addr < dlen) { 80188eea45cSKlaus Jensen return NVME_DATA_SGL_LEN_INVALID | NVME_DNR; 80288eea45cSKlaus Jensen } 80388eea45cSKlaus Jensen 80488eea45cSKlaus Jensen status = nvme_map_addr(n, sg, addr, trans_len); 80588eea45cSKlaus Jensen if (status) { 80688eea45cSKlaus Jensen return status; 80788eea45cSKlaus Jensen } 80888eea45cSKlaus Jensen 80988eea45cSKlaus Jensen next: 81088eea45cSKlaus Jensen *len -= trans_len; 81188eea45cSKlaus Jensen } 81288eea45cSKlaus Jensen 81388eea45cSKlaus Jensen return NVME_SUCCESS; 81488eea45cSKlaus Jensen } 81588eea45cSKlaus Jensen 81688eea45cSKlaus Jensen static uint16_t nvme_map_sgl(NvmeCtrl *n, NvmeSg *sg, NvmeSglDescriptor sgl, 81788eea45cSKlaus Jensen size_t len, NvmeCmd *cmd) 81888eea45cSKlaus Jensen { 81988eea45cSKlaus Jensen /* 82088eea45cSKlaus Jensen * Read the segment in chunks of 256 descriptors (one 4k page) to avoid 82188eea45cSKlaus Jensen * dynamically allocating a potentially huge SGL. The spec allows the SGL 82288eea45cSKlaus Jensen * to be larger (as in number of bytes required to describe the SGL 82388eea45cSKlaus Jensen * descriptors and segment chain) than the command transfer size, so it is 82488eea45cSKlaus Jensen * not bounded by MDTS. 82588eea45cSKlaus Jensen */ 82688eea45cSKlaus Jensen const int SEG_CHUNK_SIZE = 256; 82788eea45cSKlaus Jensen 82888eea45cSKlaus Jensen NvmeSglDescriptor segment[SEG_CHUNK_SIZE], *sgld, *last_sgld; 82988eea45cSKlaus Jensen uint64_t nsgld; 83088eea45cSKlaus Jensen uint32_t seg_len; 83188eea45cSKlaus Jensen uint16_t status; 83288eea45cSKlaus Jensen hwaddr addr; 83388eea45cSKlaus Jensen int ret; 83488eea45cSKlaus Jensen 83588eea45cSKlaus Jensen sgld = &sgl; 83688eea45cSKlaus Jensen addr = le64_to_cpu(sgl.addr); 83788eea45cSKlaus Jensen 83888eea45cSKlaus Jensen trace_pci_nvme_map_sgl(NVME_SGL_TYPE(sgl.type), len); 83988eea45cSKlaus Jensen 84088eea45cSKlaus Jensen nvme_sg_init(n, sg, nvme_addr_is_dma(n, addr)); 84188eea45cSKlaus Jensen 84288eea45cSKlaus Jensen /* 84388eea45cSKlaus Jensen * If the entire transfer can be described with a single data block it can 84488eea45cSKlaus Jensen * be mapped directly. 84588eea45cSKlaus Jensen */ 84688eea45cSKlaus Jensen if (NVME_SGL_TYPE(sgl.type) == NVME_SGL_DESCR_TYPE_DATA_BLOCK) { 84788eea45cSKlaus Jensen status = nvme_map_sgl_data(n, sg, sgld, 1, &len, cmd); 84888eea45cSKlaus Jensen if (status) { 84988eea45cSKlaus Jensen goto unmap; 85088eea45cSKlaus Jensen } 85188eea45cSKlaus Jensen 85288eea45cSKlaus Jensen goto out; 85388eea45cSKlaus Jensen } 85488eea45cSKlaus Jensen 85588eea45cSKlaus Jensen for (;;) { 85688eea45cSKlaus Jensen switch (NVME_SGL_TYPE(sgld->type)) { 85788eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_SEGMENT: 85888eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_LAST_SEGMENT: 85988eea45cSKlaus Jensen break; 86088eea45cSKlaus Jensen default: 86188eea45cSKlaus Jensen return NVME_INVALID_SGL_SEG_DESCR | NVME_DNR; 86288eea45cSKlaus Jensen } 86388eea45cSKlaus Jensen 86488eea45cSKlaus Jensen seg_len = le32_to_cpu(sgld->len); 86588eea45cSKlaus Jensen 86688eea45cSKlaus Jensen /* check the length of the (Last) Segment descriptor */ 86788eea45cSKlaus Jensen if ((!seg_len || seg_len & 0xf) && 86888eea45cSKlaus Jensen (NVME_SGL_TYPE(sgld->type) != NVME_SGL_DESCR_TYPE_BIT_BUCKET)) { 86988eea45cSKlaus Jensen return NVME_INVALID_SGL_SEG_DESCR | NVME_DNR; 87088eea45cSKlaus Jensen } 87188eea45cSKlaus Jensen 87288eea45cSKlaus Jensen if (UINT64_MAX - addr < seg_len) { 87388eea45cSKlaus Jensen return NVME_DATA_SGL_LEN_INVALID | NVME_DNR; 87488eea45cSKlaus Jensen } 87588eea45cSKlaus Jensen 87688eea45cSKlaus Jensen nsgld = seg_len / sizeof(NvmeSglDescriptor); 87788eea45cSKlaus Jensen 87888eea45cSKlaus Jensen while (nsgld > SEG_CHUNK_SIZE) { 87988eea45cSKlaus Jensen if (nvme_addr_read(n, addr, segment, sizeof(segment))) { 88088eea45cSKlaus Jensen trace_pci_nvme_err_addr_read(addr); 88188eea45cSKlaus Jensen status = NVME_DATA_TRAS_ERROR; 88288eea45cSKlaus Jensen goto unmap; 88388eea45cSKlaus Jensen } 88488eea45cSKlaus Jensen 88588eea45cSKlaus Jensen status = nvme_map_sgl_data(n, sg, segment, SEG_CHUNK_SIZE, 88688eea45cSKlaus Jensen &len, cmd); 88788eea45cSKlaus Jensen if (status) { 88888eea45cSKlaus Jensen goto unmap; 88988eea45cSKlaus Jensen } 89088eea45cSKlaus Jensen 89188eea45cSKlaus Jensen nsgld -= SEG_CHUNK_SIZE; 89288eea45cSKlaus Jensen addr += SEG_CHUNK_SIZE * sizeof(NvmeSglDescriptor); 89388eea45cSKlaus Jensen } 89488eea45cSKlaus Jensen 89588eea45cSKlaus Jensen ret = nvme_addr_read(n, addr, segment, nsgld * 89688eea45cSKlaus Jensen sizeof(NvmeSglDescriptor)); 89788eea45cSKlaus Jensen if (ret) { 89888eea45cSKlaus Jensen trace_pci_nvme_err_addr_read(addr); 89988eea45cSKlaus Jensen status = NVME_DATA_TRAS_ERROR; 90088eea45cSKlaus Jensen goto unmap; 90188eea45cSKlaus Jensen } 90288eea45cSKlaus Jensen 90388eea45cSKlaus Jensen last_sgld = &segment[nsgld - 1]; 90488eea45cSKlaus Jensen 90588eea45cSKlaus Jensen /* 90688eea45cSKlaus Jensen * If the segment ends with a Data Block or Bit Bucket Descriptor Type, 90788eea45cSKlaus Jensen * then we are done. 90888eea45cSKlaus Jensen */ 90988eea45cSKlaus Jensen switch (NVME_SGL_TYPE(last_sgld->type)) { 91088eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_DATA_BLOCK: 91188eea45cSKlaus Jensen case NVME_SGL_DESCR_TYPE_BIT_BUCKET: 91288eea45cSKlaus Jensen status = nvme_map_sgl_data(n, sg, segment, nsgld, &len, cmd); 91388eea45cSKlaus Jensen if (status) { 91488eea45cSKlaus Jensen goto unmap; 91588eea45cSKlaus Jensen } 91688eea45cSKlaus Jensen 91788eea45cSKlaus Jensen goto out; 91888eea45cSKlaus Jensen 91988eea45cSKlaus Jensen default: 92088eea45cSKlaus Jensen break; 92188eea45cSKlaus Jensen } 92288eea45cSKlaus Jensen 92388eea45cSKlaus Jensen /* 92488eea45cSKlaus Jensen * If the last descriptor was not a Data Block or Bit Bucket, then the 92588eea45cSKlaus Jensen * current segment must not be a Last Segment. 92688eea45cSKlaus Jensen */ 92788eea45cSKlaus Jensen if (NVME_SGL_TYPE(sgld->type) == NVME_SGL_DESCR_TYPE_LAST_SEGMENT) { 92888eea45cSKlaus Jensen status = NVME_INVALID_SGL_SEG_DESCR | NVME_DNR; 92988eea45cSKlaus Jensen goto unmap; 93088eea45cSKlaus Jensen } 93188eea45cSKlaus Jensen 93288eea45cSKlaus Jensen sgld = last_sgld; 93388eea45cSKlaus Jensen addr = le64_to_cpu(sgld->addr); 93488eea45cSKlaus Jensen 93588eea45cSKlaus Jensen /* 93688eea45cSKlaus Jensen * Do not map the last descriptor; it will be a Segment or Last Segment 93788eea45cSKlaus Jensen * descriptor and is handled by the next iteration. 93888eea45cSKlaus Jensen */ 93988eea45cSKlaus Jensen status = nvme_map_sgl_data(n, sg, segment, nsgld - 1, &len, cmd); 94088eea45cSKlaus Jensen if (status) { 94188eea45cSKlaus Jensen goto unmap; 94288eea45cSKlaus Jensen } 94388eea45cSKlaus Jensen } 94488eea45cSKlaus Jensen 94588eea45cSKlaus Jensen out: 94688eea45cSKlaus Jensen /* if there is any residual left in len, the SGL was too short */ 94788eea45cSKlaus Jensen if (len) { 94888eea45cSKlaus Jensen status = NVME_DATA_SGL_LEN_INVALID | NVME_DNR; 94988eea45cSKlaus Jensen goto unmap; 95088eea45cSKlaus Jensen } 95188eea45cSKlaus Jensen 95288eea45cSKlaus Jensen return NVME_SUCCESS; 95388eea45cSKlaus Jensen 95488eea45cSKlaus Jensen unmap: 95588eea45cSKlaus Jensen nvme_sg_unmap(sg); 95688eea45cSKlaus Jensen return status; 95788eea45cSKlaus Jensen } 95888eea45cSKlaus Jensen 95988eea45cSKlaus Jensen uint16_t nvme_map_dptr(NvmeCtrl *n, NvmeSg *sg, size_t len, 96088eea45cSKlaus Jensen NvmeCmd *cmd) 96188eea45cSKlaus Jensen { 96288eea45cSKlaus Jensen uint64_t prp1, prp2; 96388eea45cSKlaus Jensen 96488eea45cSKlaus Jensen switch (NVME_CMD_FLAGS_PSDT(cmd->flags)) { 96588eea45cSKlaus Jensen case NVME_PSDT_PRP: 96688eea45cSKlaus Jensen prp1 = le64_to_cpu(cmd->dptr.prp1); 96788eea45cSKlaus Jensen prp2 = le64_to_cpu(cmd->dptr.prp2); 96888eea45cSKlaus Jensen 96988eea45cSKlaus Jensen return nvme_map_prp(n, sg, prp1, prp2, len); 97088eea45cSKlaus Jensen case NVME_PSDT_SGL_MPTR_CONTIGUOUS: 97188eea45cSKlaus Jensen case NVME_PSDT_SGL_MPTR_SGL: 97288eea45cSKlaus Jensen return nvme_map_sgl(n, sg, cmd->dptr.sgl, len, cmd); 97388eea45cSKlaus Jensen default: 97488eea45cSKlaus Jensen return NVME_INVALID_FIELD; 97588eea45cSKlaus Jensen } 97688eea45cSKlaus Jensen } 97788eea45cSKlaus Jensen 97888eea45cSKlaus Jensen static uint16_t nvme_map_mptr(NvmeCtrl *n, NvmeSg *sg, size_t len, 97988eea45cSKlaus Jensen NvmeCmd *cmd) 98088eea45cSKlaus Jensen { 98188eea45cSKlaus Jensen int psdt = NVME_CMD_FLAGS_PSDT(cmd->flags); 98288eea45cSKlaus Jensen hwaddr mptr = le64_to_cpu(cmd->mptr); 98388eea45cSKlaus Jensen uint16_t status; 98488eea45cSKlaus Jensen 98588eea45cSKlaus Jensen if (psdt == NVME_PSDT_SGL_MPTR_SGL) { 98688eea45cSKlaus Jensen NvmeSglDescriptor sgl; 98788eea45cSKlaus Jensen 98888eea45cSKlaus Jensen if (nvme_addr_read(n, mptr, &sgl, sizeof(sgl))) { 98988eea45cSKlaus Jensen return NVME_DATA_TRAS_ERROR; 99088eea45cSKlaus Jensen } 99188eea45cSKlaus Jensen 99288eea45cSKlaus Jensen status = nvme_map_sgl(n, sg, sgl, len, cmd); 99388eea45cSKlaus Jensen if (status && (status & 0x7ff) == NVME_DATA_SGL_LEN_INVALID) { 99488eea45cSKlaus Jensen status = NVME_MD_SGL_LEN_INVALID | NVME_DNR; 99588eea45cSKlaus Jensen } 99688eea45cSKlaus Jensen 99788eea45cSKlaus Jensen return status; 99888eea45cSKlaus Jensen } 99988eea45cSKlaus Jensen 100088eea45cSKlaus Jensen nvme_sg_init(n, sg, nvme_addr_is_dma(n, mptr)); 100188eea45cSKlaus Jensen status = nvme_map_addr(n, sg, mptr, len); 100288eea45cSKlaus Jensen if (status) { 100388eea45cSKlaus Jensen nvme_sg_unmap(sg); 100488eea45cSKlaus Jensen } 100588eea45cSKlaus Jensen 100688eea45cSKlaus Jensen return status; 100788eea45cSKlaus Jensen } 100888eea45cSKlaus Jensen 100988eea45cSKlaus Jensen static uint16_t nvme_map_data(NvmeCtrl *n, uint32_t nlb, NvmeRequest *req) 101088eea45cSKlaus Jensen { 101188eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 101288eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 10132a132309SKlaus Jensen bool pi = !!NVME_ID_NS_DPS_TYPE(ns->id_ns.dps); 10142a132309SKlaus Jensen bool pract = !!(le16_to_cpu(rw->control) & NVME_RW_PRINFO_PRACT); 101588eea45cSKlaus Jensen size_t len = nvme_l2b(ns, nlb); 101688eea45cSKlaus Jensen uint16_t status; 101788eea45cSKlaus Jensen 10182a132309SKlaus Jensen if (nvme_ns_ext(ns) && !(pi && pract && ns->lbaf.ms == 8)) { 101988eea45cSKlaus Jensen NvmeSg sg; 102088eea45cSKlaus Jensen 102188eea45cSKlaus Jensen len += nvme_m2b(ns, nlb); 102288eea45cSKlaus Jensen 102388eea45cSKlaus Jensen status = nvme_map_dptr(n, &sg, len, &req->cmd); 102488eea45cSKlaus Jensen if (status) { 102588eea45cSKlaus Jensen return status; 102688eea45cSKlaus Jensen } 102788eea45cSKlaus Jensen 102888eea45cSKlaus Jensen nvme_sg_init(n, &req->sg, sg.flags & NVME_SG_DMA); 102988eea45cSKlaus Jensen nvme_sg_split(&sg, ns, &req->sg, NULL); 103088eea45cSKlaus Jensen nvme_sg_unmap(&sg); 103188eea45cSKlaus Jensen 103288eea45cSKlaus Jensen return NVME_SUCCESS; 103388eea45cSKlaus Jensen } 103488eea45cSKlaus Jensen 103588eea45cSKlaus Jensen return nvme_map_dptr(n, &req->sg, len, &req->cmd); 103688eea45cSKlaus Jensen } 103788eea45cSKlaus Jensen 103888eea45cSKlaus Jensen static uint16_t nvme_map_mdata(NvmeCtrl *n, uint32_t nlb, NvmeRequest *req) 103988eea45cSKlaus Jensen { 104088eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 104188eea45cSKlaus Jensen size_t len = nvme_m2b(ns, nlb); 104288eea45cSKlaus Jensen uint16_t status; 104388eea45cSKlaus Jensen 104488eea45cSKlaus Jensen if (nvme_ns_ext(ns)) { 104588eea45cSKlaus Jensen NvmeSg sg; 104688eea45cSKlaus Jensen 104788eea45cSKlaus Jensen len += nvme_l2b(ns, nlb); 104888eea45cSKlaus Jensen 104988eea45cSKlaus Jensen status = nvme_map_dptr(n, &sg, len, &req->cmd); 105088eea45cSKlaus Jensen if (status) { 105188eea45cSKlaus Jensen return status; 105288eea45cSKlaus Jensen } 105388eea45cSKlaus Jensen 105488eea45cSKlaus Jensen nvme_sg_init(n, &req->sg, sg.flags & NVME_SG_DMA); 105588eea45cSKlaus Jensen nvme_sg_split(&sg, ns, NULL, &req->sg); 105688eea45cSKlaus Jensen nvme_sg_unmap(&sg); 105788eea45cSKlaus Jensen 105888eea45cSKlaus Jensen return NVME_SUCCESS; 105988eea45cSKlaus Jensen } 106088eea45cSKlaus Jensen 106188eea45cSKlaus Jensen return nvme_map_mptr(n, &req->sg, len, &req->cmd); 106288eea45cSKlaus Jensen } 106388eea45cSKlaus Jensen 106488eea45cSKlaus Jensen static uint16_t nvme_tx_interleaved(NvmeCtrl *n, NvmeSg *sg, uint8_t *ptr, 106588eea45cSKlaus Jensen uint32_t len, uint32_t bytes, 106688eea45cSKlaus Jensen int32_t skip_bytes, int64_t offset, 106788eea45cSKlaus Jensen NvmeTxDirection dir) 106888eea45cSKlaus Jensen { 106988eea45cSKlaus Jensen hwaddr addr; 107088eea45cSKlaus Jensen uint32_t trans_len, count = bytes; 107188eea45cSKlaus Jensen bool dma = sg->flags & NVME_SG_DMA; 107288eea45cSKlaus Jensen int64_t sge_len; 107388eea45cSKlaus Jensen int sg_idx = 0; 107488eea45cSKlaus Jensen int ret; 107588eea45cSKlaus Jensen 107688eea45cSKlaus Jensen assert(sg->flags & NVME_SG_ALLOC); 107788eea45cSKlaus Jensen 107888eea45cSKlaus Jensen while (len) { 107988eea45cSKlaus Jensen sge_len = dma ? sg->qsg.sg[sg_idx].len : sg->iov.iov[sg_idx].iov_len; 108088eea45cSKlaus Jensen 108188eea45cSKlaus Jensen if (sge_len - offset < 0) { 108288eea45cSKlaus Jensen offset -= sge_len; 108388eea45cSKlaus Jensen sg_idx++; 108488eea45cSKlaus Jensen continue; 108588eea45cSKlaus Jensen } 108688eea45cSKlaus Jensen 108788eea45cSKlaus Jensen if (sge_len == offset) { 108888eea45cSKlaus Jensen offset = 0; 108988eea45cSKlaus Jensen sg_idx++; 109088eea45cSKlaus Jensen continue; 109188eea45cSKlaus Jensen } 109288eea45cSKlaus Jensen 109388eea45cSKlaus Jensen trans_len = MIN(len, count); 109488eea45cSKlaus Jensen trans_len = MIN(trans_len, sge_len - offset); 109588eea45cSKlaus Jensen 109688eea45cSKlaus Jensen if (dma) { 109788eea45cSKlaus Jensen addr = sg->qsg.sg[sg_idx].base + offset; 109888eea45cSKlaus Jensen } else { 109988eea45cSKlaus Jensen addr = (hwaddr)(uintptr_t)sg->iov.iov[sg_idx].iov_base + offset; 110088eea45cSKlaus Jensen } 110188eea45cSKlaus Jensen 110288eea45cSKlaus Jensen if (dir == NVME_TX_DIRECTION_TO_DEVICE) { 110388eea45cSKlaus Jensen ret = nvme_addr_read(n, addr, ptr, trans_len); 110488eea45cSKlaus Jensen } else { 110588eea45cSKlaus Jensen ret = nvme_addr_write(n, addr, ptr, trans_len); 110688eea45cSKlaus Jensen } 110788eea45cSKlaus Jensen 110888eea45cSKlaus Jensen if (ret) { 110988eea45cSKlaus Jensen return NVME_DATA_TRAS_ERROR; 111088eea45cSKlaus Jensen } 111188eea45cSKlaus Jensen 111288eea45cSKlaus Jensen ptr += trans_len; 111388eea45cSKlaus Jensen len -= trans_len; 111488eea45cSKlaus Jensen count -= trans_len; 111588eea45cSKlaus Jensen offset += trans_len; 111688eea45cSKlaus Jensen 111788eea45cSKlaus Jensen if (count == 0) { 111888eea45cSKlaus Jensen count = bytes; 111988eea45cSKlaus Jensen offset += skip_bytes; 112088eea45cSKlaus Jensen } 112188eea45cSKlaus Jensen } 112288eea45cSKlaus Jensen 112388eea45cSKlaus Jensen return NVME_SUCCESS; 112488eea45cSKlaus Jensen } 112588eea45cSKlaus Jensen 112688eea45cSKlaus Jensen static uint16_t nvme_tx(NvmeCtrl *n, NvmeSg *sg, uint8_t *ptr, uint32_t len, 112788eea45cSKlaus Jensen NvmeTxDirection dir) 112888eea45cSKlaus Jensen { 112988eea45cSKlaus Jensen assert(sg->flags & NVME_SG_ALLOC); 113088eea45cSKlaus Jensen 113188eea45cSKlaus Jensen if (sg->flags & NVME_SG_DMA) { 113288eea45cSKlaus Jensen uint64_t residual; 113388eea45cSKlaus Jensen 113488eea45cSKlaus Jensen if (dir == NVME_TX_DIRECTION_TO_DEVICE) { 113588eea45cSKlaus Jensen residual = dma_buf_write(ptr, len, &sg->qsg); 113688eea45cSKlaus Jensen } else { 113788eea45cSKlaus Jensen residual = dma_buf_read(ptr, len, &sg->qsg); 113888eea45cSKlaus Jensen } 113988eea45cSKlaus Jensen 114088eea45cSKlaus Jensen if (unlikely(residual)) { 114188eea45cSKlaus Jensen trace_pci_nvme_err_invalid_dma(); 114288eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 114388eea45cSKlaus Jensen } 114488eea45cSKlaus Jensen } else { 114588eea45cSKlaus Jensen size_t bytes; 114688eea45cSKlaus Jensen 114788eea45cSKlaus Jensen if (dir == NVME_TX_DIRECTION_TO_DEVICE) { 114888eea45cSKlaus Jensen bytes = qemu_iovec_to_buf(&sg->iov, 0, ptr, len); 114988eea45cSKlaus Jensen } else { 115088eea45cSKlaus Jensen bytes = qemu_iovec_from_buf(&sg->iov, 0, ptr, len); 115188eea45cSKlaus Jensen } 115288eea45cSKlaus Jensen 115388eea45cSKlaus Jensen if (unlikely(bytes != len)) { 115488eea45cSKlaus Jensen trace_pci_nvme_err_invalid_dma(); 115588eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 115688eea45cSKlaus Jensen } 115788eea45cSKlaus Jensen } 115888eea45cSKlaus Jensen 115988eea45cSKlaus Jensen return NVME_SUCCESS; 116088eea45cSKlaus Jensen } 116188eea45cSKlaus Jensen 116288eea45cSKlaus Jensen static inline uint16_t nvme_c2h(NvmeCtrl *n, uint8_t *ptr, uint32_t len, 116388eea45cSKlaus Jensen NvmeRequest *req) 116488eea45cSKlaus Jensen { 116588eea45cSKlaus Jensen uint16_t status; 116688eea45cSKlaus Jensen 116788eea45cSKlaus Jensen status = nvme_map_dptr(n, &req->sg, len, &req->cmd); 116888eea45cSKlaus Jensen if (status) { 116988eea45cSKlaus Jensen return status; 117088eea45cSKlaus Jensen } 117188eea45cSKlaus Jensen 117288eea45cSKlaus Jensen return nvme_tx(n, &req->sg, ptr, len, NVME_TX_DIRECTION_FROM_DEVICE); 117388eea45cSKlaus Jensen } 117488eea45cSKlaus Jensen 117588eea45cSKlaus Jensen static inline uint16_t nvme_h2c(NvmeCtrl *n, uint8_t *ptr, uint32_t len, 117688eea45cSKlaus Jensen NvmeRequest *req) 117788eea45cSKlaus Jensen { 117888eea45cSKlaus Jensen uint16_t status; 117988eea45cSKlaus Jensen 118088eea45cSKlaus Jensen status = nvme_map_dptr(n, &req->sg, len, &req->cmd); 118188eea45cSKlaus Jensen if (status) { 118288eea45cSKlaus Jensen return status; 118388eea45cSKlaus Jensen } 118488eea45cSKlaus Jensen 118588eea45cSKlaus Jensen return nvme_tx(n, &req->sg, ptr, len, NVME_TX_DIRECTION_TO_DEVICE); 118688eea45cSKlaus Jensen } 118788eea45cSKlaus Jensen 118888eea45cSKlaus Jensen uint16_t nvme_bounce_data(NvmeCtrl *n, uint8_t *ptr, uint32_t len, 118988eea45cSKlaus Jensen NvmeTxDirection dir, NvmeRequest *req) 119088eea45cSKlaus Jensen { 119188eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 119288eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 11932a132309SKlaus Jensen bool pi = !!NVME_ID_NS_DPS_TYPE(ns->id_ns.dps); 11942a132309SKlaus Jensen bool pract = !!(le16_to_cpu(rw->control) & NVME_RW_PRINFO_PRACT); 119588eea45cSKlaus Jensen 11962a132309SKlaus Jensen if (nvme_ns_ext(ns) && !(pi && pract && ns->lbaf.ms == 8)) { 119788eea45cSKlaus Jensen return nvme_tx_interleaved(n, &req->sg, ptr, len, ns->lbasz, 119888eea45cSKlaus Jensen ns->lbaf.ms, 0, dir); 119988eea45cSKlaus Jensen } 120088eea45cSKlaus Jensen 120188eea45cSKlaus Jensen return nvme_tx(n, &req->sg, ptr, len, dir); 120288eea45cSKlaus Jensen } 120388eea45cSKlaus Jensen 120488eea45cSKlaus Jensen uint16_t nvme_bounce_mdata(NvmeCtrl *n, uint8_t *ptr, uint32_t len, 120588eea45cSKlaus Jensen NvmeTxDirection dir, NvmeRequest *req) 120688eea45cSKlaus Jensen { 120788eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 120888eea45cSKlaus Jensen uint16_t status; 120988eea45cSKlaus Jensen 121088eea45cSKlaus Jensen if (nvme_ns_ext(ns)) { 121188eea45cSKlaus Jensen return nvme_tx_interleaved(n, &req->sg, ptr, len, ns->lbaf.ms, 121288eea45cSKlaus Jensen ns->lbasz, ns->lbasz, dir); 121388eea45cSKlaus Jensen } 121488eea45cSKlaus Jensen 121588eea45cSKlaus Jensen nvme_sg_unmap(&req->sg); 121688eea45cSKlaus Jensen 121788eea45cSKlaus Jensen status = nvme_map_mptr(n, &req->sg, len, &req->cmd); 121888eea45cSKlaus Jensen if (status) { 121988eea45cSKlaus Jensen return status; 122088eea45cSKlaus Jensen } 122188eea45cSKlaus Jensen 122288eea45cSKlaus Jensen return nvme_tx(n, &req->sg, ptr, len, dir); 122388eea45cSKlaus Jensen } 122488eea45cSKlaus Jensen 122588eea45cSKlaus Jensen static inline void nvme_blk_read(BlockBackend *blk, int64_t offset, 122688eea45cSKlaus Jensen BlockCompletionFunc *cb, NvmeRequest *req) 122788eea45cSKlaus Jensen { 122888eea45cSKlaus Jensen assert(req->sg.flags & NVME_SG_ALLOC); 122988eea45cSKlaus Jensen 123088eea45cSKlaus Jensen if (req->sg.flags & NVME_SG_DMA) { 123188eea45cSKlaus Jensen req->aiocb = dma_blk_read(blk, &req->sg.qsg, offset, BDRV_SECTOR_SIZE, 123288eea45cSKlaus Jensen cb, req); 123388eea45cSKlaus Jensen } else { 123488eea45cSKlaus Jensen req->aiocb = blk_aio_preadv(blk, offset, &req->sg.iov, 0, cb, req); 123588eea45cSKlaus Jensen } 123688eea45cSKlaus Jensen } 123788eea45cSKlaus Jensen 123888eea45cSKlaus Jensen static inline void nvme_blk_write(BlockBackend *blk, int64_t offset, 123988eea45cSKlaus Jensen BlockCompletionFunc *cb, NvmeRequest *req) 124088eea45cSKlaus Jensen { 124188eea45cSKlaus Jensen assert(req->sg.flags & NVME_SG_ALLOC); 124288eea45cSKlaus Jensen 124388eea45cSKlaus Jensen if (req->sg.flags & NVME_SG_DMA) { 124488eea45cSKlaus Jensen req->aiocb = dma_blk_write(blk, &req->sg.qsg, offset, BDRV_SECTOR_SIZE, 124588eea45cSKlaus Jensen cb, req); 124688eea45cSKlaus Jensen } else { 124788eea45cSKlaus Jensen req->aiocb = blk_aio_pwritev(blk, offset, &req->sg.iov, 0, cb, req); 124888eea45cSKlaus Jensen } 124988eea45cSKlaus Jensen } 125088eea45cSKlaus Jensen 125188eea45cSKlaus Jensen static void nvme_post_cqes(void *opaque) 125288eea45cSKlaus Jensen { 125388eea45cSKlaus Jensen NvmeCQueue *cq = opaque; 125488eea45cSKlaus Jensen NvmeCtrl *n = cq->ctrl; 125588eea45cSKlaus Jensen NvmeRequest *req, *next; 125688eea45cSKlaus Jensen int ret; 125788eea45cSKlaus Jensen 125888eea45cSKlaus Jensen QTAILQ_FOREACH_SAFE(req, &cq->req_list, entry, next) { 125988eea45cSKlaus Jensen NvmeSQueue *sq; 126088eea45cSKlaus Jensen hwaddr addr; 126188eea45cSKlaus Jensen 126288eea45cSKlaus Jensen if (nvme_cq_full(cq)) { 126388eea45cSKlaus Jensen break; 126488eea45cSKlaus Jensen } 126588eea45cSKlaus Jensen 126688eea45cSKlaus Jensen sq = req->sq; 126788eea45cSKlaus Jensen req->cqe.status = cpu_to_le16((req->status << 1) | cq->phase); 126888eea45cSKlaus Jensen req->cqe.sq_id = cpu_to_le16(sq->sqid); 126988eea45cSKlaus Jensen req->cqe.sq_head = cpu_to_le16(sq->head); 127088eea45cSKlaus Jensen addr = cq->dma_addr + cq->tail * n->cqe_size; 127188eea45cSKlaus Jensen ret = pci_dma_write(&n->parent_obj, addr, (void *)&req->cqe, 127288eea45cSKlaus Jensen sizeof(req->cqe)); 127388eea45cSKlaus Jensen if (ret) { 127488eea45cSKlaus Jensen trace_pci_nvme_err_addr_write(addr); 127588eea45cSKlaus Jensen trace_pci_nvme_err_cfs(); 127688eea45cSKlaus Jensen n->bar.csts = NVME_CSTS_FAILED; 127788eea45cSKlaus Jensen break; 127888eea45cSKlaus Jensen } 127988eea45cSKlaus Jensen QTAILQ_REMOVE(&cq->req_list, req, entry); 128088eea45cSKlaus Jensen nvme_inc_cq_tail(cq); 128188eea45cSKlaus Jensen nvme_sg_unmap(&req->sg); 128288eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&sq->req_list, req, entry); 128388eea45cSKlaus Jensen } 128488eea45cSKlaus Jensen if (cq->tail != cq->head) { 128588eea45cSKlaus Jensen nvme_irq_assert(n, cq); 128688eea45cSKlaus Jensen } 128788eea45cSKlaus Jensen } 128888eea45cSKlaus Jensen 128988eea45cSKlaus Jensen static void nvme_enqueue_req_completion(NvmeCQueue *cq, NvmeRequest *req) 129088eea45cSKlaus Jensen { 129188eea45cSKlaus Jensen assert(cq->cqid == req->sq->cqid); 129288eea45cSKlaus Jensen trace_pci_nvme_enqueue_req_completion(nvme_cid(req), cq->cqid, 1293f1c97407SKlaus Jensen le32_to_cpu(req->cqe.result), 1294f1c97407SKlaus Jensen le32_to_cpu(req->cqe.dw1), 129588eea45cSKlaus Jensen req->status); 129688eea45cSKlaus Jensen 129788eea45cSKlaus Jensen if (req->status) { 129888eea45cSKlaus Jensen trace_pci_nvme_err_req_status(nvme_cid(req), nvme_nsid(req->ns), 129988eea45cSKlaus Jensen req->status, req->cmd.opcode); 130088eea45cSKlaus Jensen } 130188eea45cSKlaus Jensen 130288eea45cSKlaus Jensen QTAILQ_REMOVE(&req->sq->out_req_list, req, entry); 130388eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&cq->req_list, req, entry); 130488eea45cSKlaus Jensen timer_mod(cq->timer, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) + 500); 130588eea45cSKlaus Jensen } 130688eea45cSKlaus Jensen 130788eea45cSKlaus Jensen static void nvme_process_aers(void *opaque) 130888eea45cSKlaus Jensen { 130988eea45cSKlaus Jensen NvmeCtrl *n = opaque; 131088eea45cSKlaus Jensen NvmeAsyncEvent *event, *next; 131188eea45cSKlaus Jensen 131288eea45cSKlaus Jensen trace_pci_nvme_process_aers(n->aer_queued); 131388eea45cSKlaus Jensen 131488eea45cSKlaus Jensen QTAILQ_FOREACH_SAFE(event, &n->aer_queue, entry, next) { 131588eea45cSKlaus Jensen NvmeRequest *req; 131688eea45cSKlaus Jensen NvmeAerResult *result; 131788eea45cSKlaus Jensen 131888eea45cSKlaus Jensen /* can't post cqe if there is nothing to complete */ 131988eea45cSKlaus Jensen if (!n->outstanding_aers) { 132088eea45cSKlaus Jensen trace_pci_nvme_no_outstanding_aers(); 132188eea45cSKlaus Jensen break; 132288eea45cSKlaus Jensen } 132388eea45cSKlaus Jensen 132488eea45cSKlaus Jensen /* ignore if masked (cqe posted, but event not cleared) */ 132588eea45cSKlaus Jensen if (n->aer_mask & (1 << event->result.event_type)) { 132688eea45cSKlaus Jensen trace_pci_nvme_aer_masked(event->result.event_type, n->aer_mask); 132788eea45cSKlaus Jensen continue; 132888eea45cSKlaus Jensen } 132988eea45cSKlaus Jensen 133088eea45cSKlaus Jensen QTAILQ_REMOVE(&n->aer_queue, event, entry); 133188eea45cSKlaus Jensen n->aer_queued--; 133288eea45cSKlaus Jensen 133388eea45cSKlaus Jensen n->aer_mask |= 1 << event->result.event_type; 133488eea45cSKlaus Jensen n->outstanding_aers--; 133588eea45cSKlaus Jensen 133688eea45cSKlaus Jensen req = n->aer_reqs[n->outstanding_aers]; 133788eea45cSKlaus Jensen 133888eea45cSKlaus Jensen result = (NvmeAerResult *) &req->cqe.result; 133988eea45cSKlaus Jensen result->event_type = event->result.event_type; 134088eea45cSKlaus Jensen result->event_info = event->result.event_info; 134188eea45cSKlaus Jensen result->log_page = event->result.log_page; 134288eea45cSKlaus Jensen g_free(event); 134388eea45cSKlaus Jensen 134488eea45cSKlaus Jensen trace_pci_nvme_aer_post_cqe(result->event_type, result->event_info, 134588eea45cSKlaus Jensen result->log_page); 134688eea45cSKlaus Jensen 134788eea45cSKlaus Jensen nvme_enqueue_req_completion(&n->admin_cq, req); 134888eea45cSKlaus Jensen } 134988eea45cSKlaus Jensen } 135088eea45cSKlaus Jensen 135188eea45cSKlaus Jensen static void nvme_enqueue_event(NvmeCtrl *n, uint8_t event_type, 135288eea45cSKlaus Jensen uint8_t event_info, uint8_t log_page) 135388eea45cSKlaus Jensen { 135488eea45cSKlaus Jensen NvmeAsyncEvent *event; 135588eea45cSKlaus Jensen 135688eea45cSKlaus Jensen trace_pci_nvme_enqueue_event(event_type, event_info, log_page); 135788eea45cSKlaus Jensen 135888eea45cSKlaus Jensen if (n->aer_queued == n->params.aer_max_queued) { 135988eea45cSKlaus Jensen trace_pci_nvme_enqueue_event_noqueue(n->aer_queued); 136088eea45cSKlaus Jensen return; 136188eea45cSKlaus Jensen } 136288eea45cSKlaus Jensen 136388eea45cSKlaus Jensen event = g_new(NvmeAsyncEvent, 1); 136488eea45cSKlaus Jensen event->result = (NvmeAerResult) { 136588eea45cSKlaus Jensen .event_type = event_type, 136688eea45cSKlaus Jensen .event_info = event_info, 136788eea45cSKlaus Jensen .log_page = log_page, 136888eea45cSKlaus Jensen }; 136988eea45cSKlaus Jensen 137088eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&n->aer_queue, event, entry); 137188eea45cSKlaus Jensen n->aer_queued++; 137288eea45cSKlaus Jensen 137388eea45cSKlaus Jensen nvme_process_aers(n); 137488eea45cSKlaus Jensen } 137588eea45cSKlaus Jensen 137688eea45cSKlaus Jensen static void nvme_smart_event(NvmeCtrl *n, uint8_t event) 137788eea45cSKlaus Jensen { 137888eea45cSKlaus Jensen uint8_t aer_info; 137988eea45cSKlaus Jensen 138088eea45cSKlaus Jensen /* Ref SPEC <Asynchronous Event Information 0x2013 SMART / Health Status> */ 138188eea45cSKlaus Jensen if (!(NVME_AEC_SMART(n->features.async_config) & event)) { 138288eea45cSKlaus Jensen return; 138388eea45cSKlaus Jensen } 138488eea45cSKlaus Jensen 138588eea45cSKlaus Jensen switch (event) { 138688eea45cSKlaus Jensen case NVME_SMART_SPARE: 138788eea45cSKlaus Jensen aer_info = NVME_AER_INFO_SMART_SPARE_THRESH; 138888eea45cSKlaus Jensen break; 138988eea45cSKlaus Jensen case NVME_SMART_TEMPERATURE: 139088eea45cSKlaus Jensen aer_info = NVME_AER_INFO_SMART_TEMP_THRESH; 139188eea45cSKlaus Jensen break; 139288eea45cSKlaus Jensen case NVME_SMART_RELIABILITY: 139388eea45cSKlaus Jensen case NVME_SMART_MEDIA_READ_ONLY: 139488eea45cSKlaus Jensen case NVME_SMART_FAILED_VOLATILE_MEDIA: 139588eea45cSKlaus Jensen case NVME_SMART_PMR_UNRELIABLE: 139688eea45cSKlaus Jensen aer_info = NVME_AER_INFO_SMART_RELIABILITY; 139788eea45cSKlaus Jensen break; 139888eea45cSKlaus Jensen default: 139988eea45cSKlaus Jensen return; 140088eea45cSKlaus Jensen } 140188eea45cSKlaus Jensen 140288eea45cSKlaus Jensen nvme_enqueue_event(n, NVME_AER_TYPE_SMART, aer_info, NVME_LOG_SMART_INFO); 140388eea45cSKlaus Jensen } 140488eea45cSKlaus Jensen 140588eea45cSKlaus Jensen static void nvme_clear_events(NvmeCtrl *n, uint8_t event_type) 140688eea45cSKlaus Jensen { 140788eea45cSKlaus Jensen n->aer_mask &= ~(1 << event_type); 140888eea45cSKlaus Jensen if (!QTAILQ_EMPTY(&n->aer_queue)) { 140988eea45cSKlaus Jensen nvme_process_aers(n); 141088eea45cSKlaus Jensen } 141188eea45cSKlaus Jensen } 141288eea45cSKlaus Jensen 141388eea45cSKlaus Jensen static inline uint16_t nvme_check_mdts(NvmeCtrl *n, size_t len) 141488eea45cSKlaus Jensen { 141588eea45cSKlaus Jensen uint8_t mdts = n->params.mdts; 141688eea45cSKlaus Jensen 141788eea45cSKlaus Jensen if (mdts && len > n->page_size << mdts) { 141888eea45cSKlaus Jensen trace_pci_nvme_err_mdts(len); 141988eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 142088eea45cSKlaus Jensen } 142188eea45cSKlaus Jensen 142288eea45cSKlaus Jensen return NVME_SUCCESS; 142388eea45cSKlaus Jensen } 142488eea45cSKlaus Jensen 142588eea45cSKlaus Jensen static inline uint16_t nvme_check_bounds(NvmeNamespace *ns, uint64_t slba, 142688eea45cSKlaus Jensen uint32_t nlb) 142788eea45cSKlaus Jensen { 142888eea45cSKlaus Jensen uint64_t nsze = le64_to_cpu(ns->id_ns.nsze); 142988eea45cSKlaus Jensen 143088eea45cSKlaus Jensen if (unlikely(UINT64_MAX - slba < nlb || slba + nlb > nsze)) { 143188eea45cSKlaus Jensen trace_pci_nvme_err_invalid_lba_range(slba, nlb, nsze); 143288eea45cSKlaus Jensen return NVME_LBA_RANGE | NVME_DNR; 143388eea45cSKlaus Jensen } 143488eea45cSKlaus Jensen 143588eea45cSKlaus Jensen return NVME_SUCCESS; 143688eea45cSKlaus Jensen } 143788eea45cSKlaus Jensen 1438ff0ac2c8SKlaus Jensen static int nvme_block_status_all(NvmeNamespace *ns, uint64_t slba, 1439ff0ac2c8SKlaus Jensen uint32_t nlb, int flags) 144088eea45cSKlaus Jensen { 144188eea45cSKlaus Jensen BlockDriverState *bs = blk_bs(ns->blkconf.blk); 144288eea45cSKlaus Jensen 144388eea45cSKlaus Jensen int64_t pnum = 0, bytes = nvme_l2b(ns, nlb); 144488eea45cSKlaus Jensen int64_t offset = nvme_l2b(ns, slba); 144588eea45cSKlaus Jensen int ret; 144688eea45cSKlaus Jensen 144788eea45cSKlaus Jensen /* 144888eea45cSKlaus Jensen * `pnum` holds the number of bytes after offset that shares the same 144988eea45cSKlaus Jensen * allocation status as the byte at offset. If `pnum` is different from 145088eea45cSKlaus Jensen * `bytes`, we should check the allocation status of the next range and 145188eea45cSKlaus Jensen * continue this until all bytes have been checked. 145288eea45cSKlaus Jensen */ 145388eea45cSKlaus Jensen do { 145488eea45cSKlaus Jensen bytes -= pnum; 145588eea45cSKlaus Jensen 145688eea45cSKlaus Jensen ret = bdrv_block_status(bs, offset, bytes, &pnum, NULL, NULL); 145788eea45cSKlaus Jensen if (ret < 0) { 1458ff0ac2c8SKlaus Jensen return ret; 145988eea45cSKlaus Jensen } 146088eea45cSKlaus Jensen 146188eea45cSKlaus Jensen 1462ff0ac2c8SKlaus Jensen trace_pci_nvme_block_status(offset, bytes, pnum, ret, 1463ff0ac2c8SKlaus Jensen !!(ret & BDRV_BLOCK_ZERO)); 146488eea45cSKlaus Jensen 1465ff0ac2c8SKlaus Jensen if (!(ret & flags)) { 1466ff0ac2c8SKlaus Jensen return 1; 146788eea45cSKlaus Jensen } 146888eea45cSKlaus Jensen 146988eea45cSKlaus Jensen offset += pnum; 147088eea45cSKlaus Jensen } while (pnum != bytes); 147188eea45cSKlaus Jensen 1472ff0ac2c8SKlaus Jensen return 0; 1473ff0ac2c8SKlaus Jensen } 1474ff0ac2c8SKlaus Jensen 1475ff0ac2c8SKlaus Jensen static uint16_t nvme_check_dulbe(NvmeNamespace *ns, uint64_t slba, 1476ff0ac2c8SKlaus Jensen uint32_t nlb) 1477ff0ac2c8SKlaus Jensen { 1478ff0ac2c8SKlaus Jensen int ret; 1479ff0ac2c8SKlaus Jensen Error *err = NULL; 1480ff0ac2c8SKlaus Jensen 1481ff0ac2c8SKlaus Jensen ret = nvme_block_status_all(ns, slba, nlb, BDRV_BLOCK_DATA); 1482ff0ac2c8SKlaus Jensen if (ret) { 1483ff0ac2c8SKlaus Jensen if (ret < 0) { 1484ff0ac2c8SKlaus Jensen error_setg_errno(&err, -ret, "unable to get block status"); 1485ff0ac2c8SKlaus Jensen error_report_err(err); 1486ff0ac2c8SKlaus Jensen 1487ff0ac2c8SKlaus Jensen return NVME_INTERNAL_DEV_ERROR; 1488ff0ac2c8SKlaus Jensen } 1489ff0ac2c8SKlaus Jensen 1490ff0ac2c8SKlaus Jensen return NVME_DULB; 1491ff0ac2c8SKlaus Jensen } 1492ff0ac2c8SKlaus Jensen 149388eea45cSKlaus Jensen return NVME_SUCCESS; 149488eea45cSKlaus Jensen } 149588eea45cSKlaus Jensen 149688eea45cSKlaus Jensen static void nvme_aio_err(NvmeRequest *req, int ret) 149788eea45cSKlaus Jensen { 149888eea45cSKlaus Jensen uint16_t status = NVME_SUCCESS; 149988eea45cSKlaus Jensen Error *local_err = NULL; 150088eea45cSKlaus Jensen 150188eea45cSKlaus Jensen switch (req->cmd.opcode) { 150288eea45cSKlaus Jensen case NVME_CMD_READ: 150388eea45cSKlaus Jensen status = NVME_UNRECOVERED_READ; 150488eea45cSKlaus Jensen break; 150588eea45cSKlaus Jensen case NVME_CMD_FLUSH: 150688eea45cSKlaus Jensen case NVME_CMD_WRITE: 150788eea45cSKlaus Jensen case NVME_CMD_WRITE_ZEROES: 150888eea45cSKlaus Jensen case NVME_CMD_ZONE_APPEND: 150988eea45cSKlaus Jensen status = NVME_WRITE_FAULT; 151088eea45cSKlaus Jensen break; 151188eea45cSKlaus Jensen default: 151288eea45cSKlaus Jensen status = NVME_INTERNAL_DEV_ERROR; 151388eea45cSKlaus Jensen break; 151488eea45cSKlaus Jensen } 151588eea45cSKlaus Jensen 151688eea45cSKlaus Jensen trace_pci_nvme_err_aio(nvme_cid(req), strerror(-ret), status); 151788eea45cSKlaus Jensen 151888eea45cSKlaus Jensen error_setg_errno(&local_err, -ret, "aio failed"); 151988eea45cSKlaus Jensen error_report_err(local_err); 152088eea45cSKlaus Jensen 152188eea45cSKlaus Jensen /* 152288eea45cSKlaus Jensen * Set the command status code to the first encountered error but allow a 152388eea45cSKlaus Jensen * subsequent Internal Device Error to trump it. 152488eea45cSKlaus Jensen */ 152588eea45cSKlaus Jensen if (req->status && status != NVME_INTERNAL_DEV_ERROR) { 152688eea45cSKlaus Jensen return; 152788eea45cSKlaus Jensen } 152888eea45cSKlaus Jensen 152988eea45cSKlaus Jensen req->status = status; 153088eea45cSKlaus Jensen } 153188eea45cSKlaus Jensen 153288eea45cSKlaus Jensen static inline uint32_t nvme_zone_idx(NvmeNamespace *ns, uint64_t slba) 153388eea45cSKlaus Jensen { 153488eea45cSKlaus Jensen return ns->zone_size_log2 > 0 ? slba >> ns->zone_size_log2 : 153588eea45cSKlaus Jensen slba / ns->zone_size; 153688eea45cSKlaus Jensen } 153788eea45cSKlaus Jensen 153888eea45cSKlaus Jensen static inline NvmeZone *nvme_get_zone_by_slba(NvmeNamespace *ns, uint64_t slba) 153988eea45cSKlaus Jensen { 154088eea45cSKlaus Jensen uint32_t zone_idx = nvme_zone_idx(ns, slba); 154188eea45cSKlaus Jensen 1542189a8bf7SKlaus Jensen if (zone_idx >= ns->num_zones) { 1543189a8bf7SKlaus Jensen return NULL; 1544189a8bf7SKlaus Jensen } 1545189a8bf7SKlaus Jensen 154688eea45cSKlaus Jensen return &ns->zone_array[zone_idx]; 154788eea45cSKlaus Jensen } 154888eea45cSKlaus Jensen 154988eea45cSKlaus Jensen static uint16_t nvme_check_zone_state_for_write(NvmeZone *zone) 155088eea45cSKlaus Jensen { 155188eea45cSKlaus Jensen uint64_t zslba = zone->d.zslba; 155288eea45cSKlaus Jensen 155388eea45cSKlaus Jensen switch (nvme_get_zone_state(zone)) { 155488eea45cSKlaus Jensen case NVME_ZONE_STATE_EMPTY: 155588eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 155688eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 155788eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 155888eea45cSKlaus Jensen return NVME_SUCCESS; 155988eea45cSKlaus Jensen case NVME_ZONE_STATE_FULL: 156088eea45cSKlaus Jensen trace_pci_nvme_err_zone_is_full(zslba); 156188eea45cSKlaus Jensen return NVME_ZONE_FULL; 156288eea45cSKlaus Jensen case NVME_ZONE_STATE_OFFLINE: 156388eea45cSKlaus Jensen trace_pci_nvme_err_zone_is_offline(zslba); 156488eea45cSKlaus Jensen return NVME_ZONE_OFFLINE; 156588eea45cSKlaus Jensen case NVME_ZONE_STATE_READ_ONLY: 156688eea45cSKlaus Jensen trace_pci_nvme_err_zone_is_read_only(zslba); 156788eea45cSKlaus Jensen return NVME_ZONE_READ_ONLY; 156888eea45cSKlaus Jensen default: 156988eea45cSKlaus Jensen assert(false); 157088eea45cSKlaus Jensen } 157188eea45cSKlaus Jensen 157288eea45cSKlaus Jensen return NVME_INTERNAL_DEV_ERROR; 157388eea45cSKlaus Jensen } 157488eea45cSKlaus Jensen 157588eea45cSKlaus Jensen static uint16_t nvme_check_zone_write(NvmeNamespace *ns, NvmeZone *zone, 157688eea45cSKlaus Jensen uint64_t slba, uint32_t nlb) 157788eea45cSKlaus Jensen { 157888eea45cSKlaus Jensen uint64_t zcap = nvme_zone_wr_boundary(zone); 157988eea45cSKlaus Jensen uint16_t status; 158088eea45cSKlaus Jensen 158188eea45cSKlaus Jensen status = nvme_check_zone_state_for_write(zone); 158288eea45cSKlaus Jensen if (status) { 158388eea45cSKlaus Jensen return status; 158488eea45cSKlaus Jensen } 158588eea45cSKlaus Jensen 158688eea45cSKlaus Jensen if (unlikely(slba != zone->w_ptr)) { 158788eea45cSKlaus Jensen trace_pci_nvme_err_write_not_at_wp(slba, zone->d.zslba, zone->w_ptr); 158888eea45cSKlaus Jensen return NVME_ZONE_INVALID_WRITE; 158988eea45cSKlaus Jensen } 159088eea45cSKlaus Jensen 159188eea45cSKlaus Jensen if (unlikely((slba + nlb) > zcap)) { 159288eea45cSKlaus Jensen trace_pci_nvme_err_zone_boundary(slba, nlb, zcap); 159388eea45cSKlaus Jensen return NVME_ZONE_BOUNDARY_ERROR; 159488eea45cSKlaus Jensen } 159588eea45cSKlaus Jensen 159688eea45cSKlaus Jensen return NVME_SUCCESS; 159788eea45cSKlaus Jensen } 159888eea45cSKlaus Jensen 159988eea45cSKlaus Jensen static uint16_t nvme_check_zone_state_for_read(NvmeZone *zone) 160088eea45cSKlaus Jensen { 160188eea45cSKlaus Jensen switch (nvme_get_zone_state(zone)) { 160288eea45cSKlaus Jensen case NVME_ZONE_STATE_EMPTY: 160388eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 160488eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 160588eea45cSKlaus Jensen case NVME_ZONE_STATE_FULL: 160688eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 160788eea45cSKlaus Jensen case NVME_ZONE_STATE_READ_ONLY: 160888eea45cSKlaus Jensen return NVME_SUCCESS; 160988eea45cSKlaus Jensen case NVME_ZONE_STATE_OFFLINE: 161088eea45cSKlaus Jensen trace_pci_nvme_err_zone_is_offline(zone->d.zslba); 161188eea45cSKlaus Jensen return NVME_ZONE_OFFLINE; 161288eea45cSKlaus Jensen default: 161388eea45cSKlaus Jensen assert(false); 161488eea45cSKlaus Jensen } 161588eea45cSKlaus Jensen 161688eea45cSKlaus Jensen return NVME_INTERNAL_DEV_ERROR; 161788eea45cSKlaus Jensen } 161888eea45cSKlaus Jensen 161988eea45cSKlaus Jensen static uint16_t nvme_check_zone_read(NvmeNamespace *ns, uint64_t slba, 162088eea45cSKlaus Jensen uint32_t nlb) 162188eea45cSKlaus Jensen { 1622189a8bf7SKlaus Jensen NvmeZone *zone; 1623189a8bf7SKlaus Jensen uint64_t bndry, end; 162488eea45cSKlaus Jensen uint16_t status; 162588eea45cSKlaus Jensen 1626189a8bf7SKlaus Jensen zone = nvme_get_zone_by_slba(ns, slba); 1627189a8bf7SKlaus Jensen assert(zone); 1628189a8bf7SKlaus Jensen 1629189a8bf7SKlaus Jensen bndry = nvme_zone_rd_boundary(ns, zone); 1630189a8bf7SKlaus Jensen end = slba + nlb; 1631189a8bf7SKlaus Jensen 163288eea45cSKlaus Jensen status = nvme_check_zone_state_for_read(zone); 163388eea45cSKlaus Jensen if (status) { 163488eea45cSKlaus Jensen ; 163588eea45cSKlaus Jensen } else if (unlikely(end > bndry)) { 163688eea45cSKlaus Jensen if (!ns->params.cross_zone_read) { 163788eea45cSKlaus Jensen status = NVME_ZONE_BOUNDARY_ERROR; 163888eea45cSKlaus Jensen } else { 163988eea45cSKlaus Jensen /* 164088eea45cSKlaus Jensen * Read across zone boundary - check that all subsequent 164188eea45cSKlaus Jensen * zones that are being read have an appropriate state. 164288eea45cSKlaus Jensen */ 164388eea45cSKlaus Jensen do { 164488eea45cSKlaus Jensen zone++; 164588eea45cSKlaus Jensen status = nvme_check_zone_state_for_read(zone); 164688eea45cSKlaus Jensen if (status) { 164788eea45cSKlaus Jensen break; 164888eea45cSKlaus Jensen } 164988eea45cSKlaus Jensen } while (end > nvme_zone_rd_boundary(ns, zone)); 165088eea45cSKlaus Jensen } 165188eea45cSKlaus Jensen } 165288eea45cSKlaus Jensen 165388eea45cSKlaus Jensen return status; 165488eea45cSKlaus Jensen } 165588eea45cSKlaus Jensen 165688eea45cSKlaus Jensen static uint16_t nvme_zrm_finish(NvmeNamespace *ns, NvmeZone *zone) 165788eea45cSKlaus Jensen { 165888eea45cSKlaus Jensen switch (nvme_get_zone_state(zone)) { 165988eea45cSKlaus Jensen case NVME_ZONE_STATE_FULL: 166088eea45cSKlaus Jensen return NVME_SUCCESS; 166188eea45cSKlaus Jensen 166288eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 166388eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 166488eea45cSKlaus Jensen nvme_aor_dec_open(ns); 166588eea45cSKlaus Jensen /* fallthrough */ 166688eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 166788eea45cSKlaus Jensen nvme_aor_dec_active(ns); 166888eea45cSKlaus Jensen /* fallthrough */ 166988eea45cSKlaus Jensen case NVME_ZONE_STATE_EMPTY: 167088eea45cSKlaus Jensen nvme_assign_zone_state(ns, zone, NVME_ZONE_STATE_FULL); 167188eea45cSKlaus Jensen return NVME_SUCCESS; 167288eea45cSKlaus Jensen 167388eea45cSKlaus Jensen default: 167488eea45cSKlaus Jensen return NVME_ZONE_INVAL_TRANSITION; 167588eea45cSKlaus Jensen } 167688eea45cSKlaus Jensen } 167788eea45cSKlaus Jensen 167888eea45cSKlaus Jensen static uint16_t nvme_zrm_close(NvmeNamespace *ns, NvmeZone *zone) 167988eea45cSKlaus Jensen { 168088eea45cSKlaus Jensen switch (nvme_get_zone_state(zone)) { 168188eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 168288eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 168388eea45cSKlaus Jensen nvme_aor_dec_open(ns); 168488eea45cSKlaus Jensen nvme_assign_zone_state(ns, zone, NVME_ZONE_STATE_CLOSED); 168588eea45cSKlaus Jensen /* fall through */ 168688eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 168788eea45cSKlaus Jensen return NVME_SUCCESS; 168888eea45cSKlaus Jensen 168988eea45cSKlaus Jensen default: 169088eea45cSKlaus Jensen return NVME_ZONE_INVAL_TRANSITION; 169188eea45cSKlaus Jensen } 169288eea45cSKlaus Jensen } 169388eea45cSKlaus Jensen 169463d96e4fSKlaus Jensen static uint16_t nvme_zrm_reset(NvmeNamespace *ns, NvmeZone *zone) 169563d96e4fSKlaus Jensen { 169663d96e4fSKlaus Jensen switch (nvme_get_zone_state(zone)) { 169763d96e4fSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 169863d96e4fSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 169963d96e4fSKlaus Jensen nvme_aor_dec_open(ns); 170063d96e4fSKlaus Jensen /* fallthrough */ 170163d96e4fSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 170263d96e4fSKlaus Jensen nvme_aor_dec_active(ns); 170363d96e4fSKlaus Jensen /* fallthrough */ 170463d96e4fSKlaus Jensen case NVME_ZONE_STATE_FULL: 170563d96e4fSKlaus Jensen zone->w_ptr = zone->d.zslba; 170663d96e4fSKlaus Jensen zone->d.wp = zone->w_ptr; 170763d96e4fSKlaus Jensen nvme_assign_zone_state(ns, zone, NVME_ZONE_STATE_EMPTY); 170863d96e4fSKlaus Jensen /* fallthrough */ 170963d96e4fSKlaus Jensen case NVME_ZONE_STATE_EMPTY: 171063d96e4fSKlaus Jensen return NVME_SUCCESS; 171163d96e4fSKlaus Jensen 171263d96e4fSKlaus Jensen default: 171363d96e4fSKlaus Jensen return NVME_ZONE_INVAL_TRANSITION; 171463d96e4fSKlaus Jensen } 171563d96e4fSKlaus Jensen } 171663d96e4fSKlaus Jensen 171788eea45cSKlaus Jensen static void nvme_zrm_auto_transition_zone(NvmeNamespace *ns) 171888eea45cSKlaus Jensen { 171988eea45cSKlaus Jensen NvmeZone *zone; 172088eea45cSKlaus Jensen 172188eea45cSKlaus Jensen if (ns->params.max_open_zones && 172288eea45cSKlaus Jensen ns->nr_open_zones == ns->params.max_open_zones) { 172388eea45cSKlaus Jensen zone = QTAILQ_FIRST(&ns->imp_open_zones); 172488eea45cSKlaus Jensen if (zone) { 172588eea45cSKlaus Jensen /* 172688eea45cSKlaus Jensen * Automatically close this implicitly open zone. 172788eea45cSKlaus Jensen */ 172888eea45cSKlaus Jensen QTAILQ_REMOVE(&ns->imp_open_zones, zone, entry); 172988eea45cSKlaus Jensen nvme_zrm_close(ns, zone); 173088eea45cSKlaus Jensen } 173188eea45cSKlaus Jensen } 173288eea45cSKlaus Jensen } 173388eea45cSKlaus Jensen 173488eea45cSKlaus Jensen enum { 173588eea45cSKlaus Jensen NVME_ZRM_AUTO = 1 << 0, 173688eea45cSKlaus Jensen }; 173788eea45cSKlaus Jensen 1738cccc2651SNiklas Cassel static uint16_t nvme_zrm_open_flags(NvmeCtrl *n, NvmeNamespace *ns, 1739cccc2651SNiklas Cassel NvmeZone *zone, int flags) 174088eea45cSKlaus Jensen { 174188eea45cSKlaus Jensen int act = 0; 174288eea45cSKlaus Jensen uint16_t status; 174388eea45cSKlaus Jensen 174488eea45cSKlaus Jensen switch (nvme_get_zone_state(zone)) { 174588eea45cSKlaus Jensen case NVME_ZONE_STATE_EMPTY: 174688eea45cSKlaus Jensen act = 1; 174788eea45cSKlaus Jensen 174888eea45cSKlaus Jensen /* fallthrough */ 174988eea45cSKlaus Jensen 175088eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 1751cccc2651SNiklas Cassel if (n->params.auto_transition_zones) { 175288eea45cSKlaus Jensen nvme_zrm_auto_transition_zone(ns); 1753cccc2651SNiklas Cassel } 175488eea45cSKlaus Jensen status = nvme_aor_check(ns, act, 1); 175588eea45cSKlaus Jensen if (status) { 175688eea45cSKlaus Jensen return status; 175788eea45cSKlaus Jensen } 175888eea45cSKlaus Jensen 175988eea45cSKlaus Jensen if (act) { 176088eea45cSKlaus Jensen nvme_aor_inc_active(ns); 176188eea45cSKlaus Jensen } 176288eea45cSKlaus Jensen 176388eea45cSKlaus Jensen nvme_aor_inc_open(ns); 176488eea45cSKlaus Jensen 176588eea45cSKlaus Jensen if (flags & NVME_ZRM_AUTO) { 176688eea45cSKlaus Jensen nvme_assign_zone_state(ns, zone, NVME_ZONE_STATE_IMPLICITLY_OPEN); 176788eea45cSKlaus Jensen return NVME_SUCCESS; 176888eea45cSKlaus Jensen } 176988eea45cSKlaus Jensen 177088eea45cSKlaus Jensen /* fallthrough */ 177188eea45cSKlaus Jensen 177288eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 177388eea45cSKlaus Jensen if (flags & NVME_ZRM_AUTO) { 177488eea45cSKlaus Jensen return NVME_SUCCESS; 177588eea45cSKlaus Jensen } 177688eea45cSKlaus Jensen 177788eea45cSKlaus Jensen nvme_assign_zone_state(ns, zone, NVME_ZONE_STATE_EXPLICITLY_OPEN); 177888eea45cSKlaus Jensen 177988eea45cSKlaus Jensen /* fallthrough */ 178088eea45cSKlaus Jensen 178188eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 178288eea45cSKlaus Jensen return NVME_SUCCESS; 178388eea45cSKlaus Jensen 178488eea45cSKlaus Jensen default: 178588eea45cSKlaus Jensen return NVME_ZONE_INVAL_TRANSITION; 178688eea45cSKlaus Jensen } 178788eea45cSKlaus Jensen } 178888eea45cSKlaus Jensen 1789cccc2651SNiklas Cassel static inline uint16_t nvme_zrm_auto(NvmeCtrl *n, NvmeNamespace *ns, 1790cccc2651SNiklas Cassel NvmeZone *zone) 179188eea45cSKlaus Jensen { 1792cccc2651SNiklas Cassel return nvme_zrm_open_flags(n, ns, zone, NVME_ZRM_AUTO); 179388eea45cSKlaus Jensen } 179488eea45cSKlaus Jensen 1795cccc2651SNiklas Cassel static inline uint16_t nvme_zrm_open(NvmeCtrl *n, NvmeNamespace *ns, 1796cccc2651SNiklas Cassel NvmeZone *zone) 179788eea45cSKlaus Jensen { 1798cccc2651SNiklas Cassel return nvme_zrm_open_flags(n, ns, zone, 0); 179988eea45cSKlaus Jensen } 180088eea45cSKlaus Jensen 180188eea45cSKlaus Jensen static void nvme_advance_zone_wp(NvmeNamespace *ns, NvmeZone *zone, 180288eea45cSKlaus Jensen uint32_t nlb) 180388eea45cSKlaus Jensen { 180488eea45cSKlaus Jensen zone->d.wp += nlb; 180588eea45cSKlaus Jensen 180688eea45cSKlaus Jensen if (zone->d.wp == nvme_zone_wr_boundary(zone)) { 180788eea45cSKlaus Jensen nvme_zrm_finish(ns, zone); 180888eea45cSKlaus Jensen } 180988eea45cSKlaus Jensen } 181088eea45cSKlaus Jensen 181188eea45cSKlaus Jensen static void nvme_finalize_zoned_write(NvmeNamespace *ns, NvmeRequest *req) 181288eea45cSKlaus Jensen { 181388eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 181488eea45cSKlaus Jensen NvmeZone *zone; 181588eea45cSKlaus Jensen uint64_t slba; 181688eea45cSKlaus Jensen uint32_t nlb; 181788eea45cSKlaus Jensen 181888eea45cSKlaus Jensen slba = le64_to_cpu(rw->slba); 181988eea45cSKlaus Jensen nlb = le16_to_cpu(rw->nlb) + 1; 182088eea45cSKlaus Jensen zone = nvme_get_zone_by_slba(ns, slba); 1821189a8bf7SKlaus Jensen assert(zone); 182288eea45cSKlaus Jensen 182388eea45cSKlaus Jensen nvme_advance_zone_wp(ns, zone, nlb); 182488eea45cSKlaus Jensen } 182588eea45cSKlaus Jensen 182688eea45cSKlaus Jensen static inline bool nvme_is_write(NvmeRequest *req) 182788eea45cSKlaus Jensen { 182888eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 182988eea45cSKlaus Jensen 183088eea45cSKlaus Jensen return rw->opcode == NVME_CMD_WRITE || 183188eea45cSKlaus Jensen rw->opcode == NVME_CMD_ZONE_APPEND || 183288eea45cSKlaus Jensen rw->opcode == NVME_CMD_WRITE_ZEROES; 183388eea45cSKlaus Jensen } 183488eea45cSKlaus Jensen 183538f4ac65SKlaus Jensen static AioContext *nvme_get_aio_context(BlockAIOCB *acb) 183638f4ac65SKlaus Jensen { 183738f4ac65SKlaus Jensen return qemu_get_aio_context(); 183838f4ac65SKlaus Jensen } 183938f4ac65SKlaus Jensen 184088eea45cSKlaus Jensen static void nvme_misc_cb(void *opaque, int ret) 184188eea45cSKlaus Jensen { 184288eea45cSKlaus Jensen NvmeRequest *req = opaque; 184388eea45cSKlaus Jensen 184438f4ac65SKlaus Jensen trace_pci_nvme_misc_cb(nvme_cid(req)); 184588eea45cSKlaus Jensen 184688eea45cSKlaus Jensen if (ret) { 184788eea45cSKlaus Jensen nvme_aio_err(req, ret); 184888eea45cSKlaus Jensen } 184988eea45cSKlaus Jensen 185088eea45cSKlaus Jensen nvme_enqueue_req_completion(nvme_cq(req), req); 185188eea45cSKlaus Jensen } 185288eea45cSKlaus Jensen 185388eea45cSKlaus Jensen void nvme_rw_complete_cb(void *opaque, int ret) 185488eea45cSKlaus Jensen { 185588eea45cSKlaus Jensen NvmeRequest *req = opaque; 185688eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 185788eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 185888eea45cSKlaus Jensen BlockAcctCookie *acct = &req->acct; 185988eea45cSKlaus Jensen BlockAcctStats *stats = blk_get_stats(blk); 186088eea45cSKlaus Jensen 186188eea45cSKlaus Jensen trace_pci_nvme_rw_complete_cb(nvme_cid(req), blk_name(blk)); 186288eea45cSKlaus Jensen 186388eea45cSKlaus Jensen if (ret) { 186488eea45cSKlaus Jensen block_acct_failed(stats, acct); 186588eea45cSKlaus Jensen nvme_aio_err(req, ret); 186688eea45cSKlaus Jensen } else { 186788eea45cSKlaus Jensen block_acct_done(stats, acct); 186888eea45cSKlaus Jensen } 186988eea45cSKlaus Jensen 187088eea45cSKlaus Jensen if (ns->params.zoned && nvme_is_write(req)) { 187188eea45cSKlaus Jensen nvme_finalize_zoned_write(ns, req); 187288eea45cSKlaus Jensen } 187388eea45cSKlaus Jensen 187488eea45cSKlaus Jensen nvme_enqueue_req_completion(nvme_cq(req), req); 187588eea45cSKlaus Jensen } 187688eea45cSKlaus Jensen 187788eea45cSKlaus Jensen static void nvme_rw_cb(void *opaque, int ret) 187888eea45cSKlaus Jensen { 187988eea45cSKlaus Jensen NvmeRequest *req = opaque; 188088eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 188188eea45cSKlaus Jensen 188288eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 188388eea45cSKlaus Jensen 188488eea45cSKlaus Jensen trace_pci_nvme_rw_cb(nvme_cid(req), blk_name(blk)); 188588eea45cSKlaus Jensen 188688eea45cSKlaus Jensen if (ret) { 188788eea45cSKlaus Jensen goto out; 188888eea45cSKlaus Jensen } 188988eea45cSKlaus Jensen 189088eea45cSKlaus Jensen if (ns->lbaf.ms) { 189188eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 189288eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 189388eea45cSKlaus Jensen uint32_t nlb = (uint32_t)le16_to_cpu(rw->nlb) + 1; 189488eea45cSKlaus Jensen uint64_t offset = nvme_moff(ns, slba); 189588eea45cSKlaus Jensen 189688eea45cSKlaus Jensen if (req->cmd.opcode == NVME_CMD_WRITE_ZEROES) { 189788eea45cSKlaus Jensen size_t mlen = nvme_m2b(ns, nlb); 189888eea45cSKlaus Jensen 189988eea45cSKlaus Jensen req->aiocb = blk_aio_pwrite_zeroes(blk, offset, mlen, 190088eea45cSKlaus Jensen BDRV_REQ_MAY_UNMAP, 190188eea45cSKlaus Jensen nvme_rw_complete_cb, req); 190288eea45cSKlaus Jensen return; 190388eea45cSKlaus Jensen } 190488eea45cSKlaus Jensen 190588eea45cSKlaus Jensen if (nvme_ns_ext(ns) || req->cmd.mptr) { 190688eea45cSKlaus Jensen uint16_t status; 190788eea45cSKlaus Jensen 190888eea45cSKlaus Jensen nvme_sg_unmap(&req->sg); 190988eea45cSKlaus Jensen status = nvme_map_mdata(nvme_ctrl(req), nlb, req); 191088eea45cSKlaus Jensen if (status) { 191188eea45cSKlaus Jensen ret = -EFAULT; 191288eea45cSKlaus Jensen goto out; 191388eea45cSKlaus Jensen } 191488eea45cSKlaus Jensen 191588eea45cSKlaus Jensen if (req->cmd.opcode == NVME_CMD_READ) { 191688eea45cSKlaus Jensen return nvme_blk_read(blk, offset, nvme_rw_complete_cb, req); 191788eea45cSKlaus Jensen } 191888eea45cSKlaus Jensen 191988eea45cSKlaus Jensen return nvme_blk_write(blk, offset, nvme_rw_complete_cb, req); 192088eea45cSKlaus Jensen } 192188eea45cSKlaus Jensen } 192288eea45cSKlaus Jensen 192388eea45cSKlaus Jensen out: 192488eea45cSKlaus Jensen nvme_rw_complete_cb(req, ret); 192588eea45cSKlaus Jensen } 192688eea45cSKlaus Jensen 192788eea45cSKlaus Jensen static void nvme_verify_cb(void *opaque, int ret) 192888eea45cSKlaus Jensen { 192988eea45cSKlaus Jensen NvmeBounceContext *ctx = opaque; 193088eea45cSKlaus Jensen NvmeRequest *req = ctx->req; 193188eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 193288eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 193388eea45cSKlaus Jensen BlockAcctCookie *acct = &req->acct; 193488eea45cSKlaus Jensen BlockAcctStats *stats = blk_get_stats(blk); 193588eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 193688eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 19372a132309SKlaus Jensen uint8_t prinfo = NVME_RW_PRINFO(le16_to_cpu(rw->control)); 193888eea45cSKlaus Jensen uint16_t apptag = le16_to_cpu(rw->apptag); 193988eea45cSKlaus Jensen uint16_t appmask = le16_to_cpu(rw->appmask); 194088eea45cSKlaus Jensen uint32_t reftag = le32_to_cpu(rw->reftag); 194188eea45cSKlaus Jensen uint16_t status; 194288eea45cSKlaus Jensen 19432a132309SKlaus Jensen trace_pci_nvme_verify_cb(nvme_cid(req), prinfo, apptag, appmask, reftag); 194488eea45cSKlaus Jensen 194588eea45cSKlaus Jensen if (ret) { 194688eea45cSKlaus Jensen block_acct_failed(stats, acct); 194788eea45cSKlaus Jensen nvme_aio_err(req, ret); 194888eea45cSKlaus Jensen goto out; 194988eea45cSKlaus Jensen } 195088eea45cSKlaus Jensen 195188eea45cSKlaus Jensen block_acct_done(stats, acct); 195288eea45cSKlaus Jensen 195388eea45cSKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 195488eea45cSKlaus Jensen status = nvme_dif_mangle_mdata(ns, ctx->mdata.bounce, 195588eea45cSKlaus Jensen ctx->mdata.iov.size, slba); 195688eea45cSKlaus Jensen if (status) { 195788eea45cSKlaus Jensen req->status = status; 195888eea45cSKlaus Jensen goto out; 195988eea45cSKlaus Jensen } 196088eea45cSKlaus Jensen 196188eea45cSKlaus Jensen req->status = nvme_dif_check(ns, ctx->data.bounce, ctx->data.iov.size, 196288eea45cSKlaus Jensen ctx->mdata.bounce, ctx->mdata.iov.size, 19632a132309SKlaus Jensen prinfo, slba, apptag, appmask, &reftag); 196488eea45cSKlaus Jensen } 196588eea45cSKlaus Jensen 196688eea45cSKlaus Jensen out: 196788eea45cSKlaus Jensen qemu_iovec_destroy(&ctx->data.iov); 196888eea45cSKlaus Jensen g_free(ctx->data.bounce); 196988eea45cSKlaus Jensen 197088eea45cSKlaus Jensen qemu_iovec_destroy(&ctx->mdata.iov); 197188eea45cSKlaus Jensen g_free(ctx->mdata.bounce); 197288eea45cSKlaus Jensen 197388eea45cSKlaus Jensen g_free(ctx); 197488eea45cSKlaus Jensen 197588eea45cSKlaus Jensen nvme_enqueue_req_completion(nvme_cq(req), req); 197688eea45cSKlaus Jensen } 197788eea45cSKlaus Jensen 197888eea45cSKlaus Jensen 197988eea45cSKlaus Jensen static void nvme_verify_mdata_in_cb(void *opaque, int ret) 198088eea45cSKlaus Jensen { 198188eea45cSKlaus Jensen NvmeBounceContext *ctx = opaque; 198288eea45cSKlaus Jensen NvmeRequest *req = ctx->req; 198388eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 198488eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 198588eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 198688eea45cSKlaus Jensen uint32_t nlb = le16_to_cpu(rw->nlb) + 1; 198788eea45cSKlaus Jensen size_t mlen = nvme_m2b(ns, nlb); 198888eea45cSKlaus Jensen uint64_t offset = nvme_moff(ns, slba); 198988eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 199088eea45cSKlaus Jensen 199188eea45cSKlaus Jensen trace_pci_nvme_verify_mdata_in_cb(nvme_cid(req), blk_name(blk)); 199288eea45cSKlaus Jensen 199388eea45cSKlaus Jensen if (ret) { 199488eea45cSKlaus Jensen goto out; 199588eea45cSKlaus Jensen } 199688eea45cSKlaus Jensen 199788eea45cSKlaus Jensen ctx->mdata.bounce = g_malloc(mlen); 199888eea45cSKlaus Jensen 199988eea45cSKlaus Jensen qemu_iovec_reset(&ctx->mdata.iov); 200088eea45cSKlaus Jensen qemu_iovec_add(&ctx->mdata.iov, ctx->mdata.bounce, mlen); 200188eea45cSKlaus Jensen 200288eea45cSKlaus Jensen req->aiocb = blk_aio_preadv(blk, offset, &ctx->mdata.iov, 0, 200388eea45cSKlaus Jensen nvme_verify_cb, ctx); 200488eea45cSKlaus Jensen return; 200588eea45cSKlaus Jensen 200688eea45cSKlaus Jensen out: 200788eea45cSKlaus Jensen nvme_verify_cb(ctx, ret); 200888eea45cSKlaus Jensen } 200988eea45cSKlaus Jensen 201088eea45cSKlaus Jensen struct nvme_compare_ctx { 201188eea45cSKlaus Jensen struct { 201288eea45cSKlaus Jensen QEMUIOVector iov; 201388eea45cSKlaus Jensen uint8_t *bounce; 201488eea45cSKlaus Jensen } data; 201588eea45cSKlaus Jensen 201688eea45cSKlaus Jensen struct { 201788eea45cSKlaus Jensen QEMUIOVector iov; 201888eea45cSKlaus Jensen uint8_t *bounce; 201988eea45cSKlaus Jensen } mdata; 202088eea45cSKlaus Jensen }; 202188eea45cSKlaus Jensen 202288eea45cSKlaus Jensen static void nvme_compare_mdata_cb(void *opaque, int ret) 202388eea45cSKlaus Jensen { 202488eea45cSKlaus Jensen NvmeRequest *req = opaque; 202588eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 202688eea45cSKlaus Jensen NvmeCtrl *n = nvme_ctrl(req); 202788eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 20282a132309SKlaus Jensen uint8_t prinfo = NVME_RW_PRINFO(le16_to_cpu(rw->control)); 202988eea45cSKlaus Jensen uint16_t apptag = le16_to_cpu(rw->apptag); 203088eea45cSKlaus Jensen uint16_t appmask = le16_to_cpu(rw->appmask); 203188eea45cSKlaus Jensen uint32_t reftag = le32_to_cpu(rw->reftag); 203288eea45cSKlaus Jensen struct nvme_compare_ctx *ctx = req->opaque; 203388eea45cSKlaus Jensen g_autofree uint8_t *buf = NULL; 203488eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 203588eea45cSKlaus Jensen BlockAcctCookie *acct = &req->acct; 203688eea45cSKlaus Jensen BlockAcctStats *stats = blk_get_stats(blk); 203788eea45cSKlaus Jensen uint16_t status = NVME_SUCCESS; 203888eea45cSKlaus Jensen 203988eea45cSKlaus Jensen trace_pci_nvme_compare_mdata_cb(nvme_cid(req)); 204088eea45cSKlaus Jensen 204188eea45cSKlaus Jensen if (ret) { 204288eea45cSKlaus Jensen block_acct_failed(stats, acct); 204388eea45cSKlaus Jensen nvme_aio_err(req, ret); 204488eea45cSKlaus Jensen goto out; 204588eea45cSKlaus Jensen } 204688eea45cSKlaus Jensen 204788eea45cSKlaus Jensen buf = g_malloc(ctx->mdata.iov.size); 204888eea45cSKlaus Jensen 204988eea45cSKlaus Jensen status = nvme_bounce_mdata(n, buf, ctx->mdata.iov.size, 205088eea45cSKlaus Jensen NVME_TX_DIRECTION_TO_DEVICE, req); 205188eea45cSKlaus Jensen if (status) { 205288eea45cSKlaus Jensen req->status = status; 205388eea45cSKlaus Jensen goto out; 205488eea45cSKlaus Jensen } 205588eea45cSKlaus Jensen 205688eea45cSKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 205788eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 205888eea45cSKlaus Jensen uint8_t *bufp; 205988eea45cSKlaus Jensen uint8_t *mbufp = ctx->mdata.bounce; 206088eea45cSKlaus Jensen uint8_t *end = mbufp + ctx->mdata.iov.size; 206188eea45cSKlaus Jensen int16_t pil = 0; 206288eea45cSKlaus Jensen 206388eea45cSKlaus Jensen status = nvme_dif_check(ns, ctx->data.bounce, ctx->data.iov.size, 20642a132309SKlaus Jensen ctx->mdata.bounce, ctx->mdata.iov.size, prinfo, 20650ca5c3ccSKlaus Jensen slba, apptag, appmask, &reftag); 206688eea45cSKlaus Jensen if (status) { 206788eea45cSKlaus Jensen req->status = status; 206888eea45cSKlaus Jensen goto out; 206988eea45cSKlaus Jensen } 207088eea45cSKlaus Jensen 207188eea45cSKlaus Jensen /* 207288eea45cSKlaus Jensen * When formatted with protection information, do not compare the DIF 207388eea45cSKlaus Jensen * tuple. 207488eea45cSKlaus Jensen */ 207588eea45cSKlaus Jensen if (!(ns->id_ns.dps & NVME_ID_NS_DPS_FIRST_EIGHT)) { 207688eea45cSKlaus Jensen pil = ns->lbaf.ms - sizeof(NvmeDifTuple); 207788eea45cSKlaus Jensen } 207888eea45cSKlaus Jensen 207988eea45cSKlaus Jensen for (bufp = buf; mbufp < end; bufp += ns->lbaf.ms, mbufp += ns->lbaf.ms) { 208088eea45cSKlaus Jensen if (memcmp(bufp + pil, mbufp + pil, ns->lbaf.ms - pil)) { 208188eea45cSKlaus Jensen req->status = NVME_CMP_FAILURE; 208288eea45cSKlaus Jensen goto out; 208388eea45cSKlaus Jensen } 208488eea45cSKlaus Jensen } 208588eea45cSKlaus Jensen 208688eea45cSKlaus Jensen goto out; 208788eea45cSKlaus Jensen } 208888eea45cSKlaus Jensen 208988eea45cSKlaus Jensen if (memcmp(buf, ctx->mdata.bounce, ctx->mdata.iov.size)) { 209088eea45cSKlaus Jensen req->status = NVME_CMP_FAILURE; 209188eea45cSKlaus Jensen goto out; 209288eea45cSKlaus Jensen } 209388eea45cSKlaus Jensen 209488eea45cSKlaus Jensen block_acct_done(stats, acct); 209588eea45cSKlaus Jensen 209688eea45cSKlaus Jensen out: 209788eea45cSKlaus Jensen qemu_iovec_destroy(&ctx->data.iov); 209888eea45cSKlaus Jensen g_free(ctx->data.bounce); 209988eea45cSKlaus Jensen 210088eea45cSKlaus Jensen qemu_iovec_destroy(&ctx->mdata.iov); 210188eea45cSKlaus Jensen g_free(ctx->mdata.bounce); 210288eea45cSKlaus Jensen 210388eea45cSKlaus Jensen g_free(ctx); 210488eea45cSKlaus Jensen 210588eea45cSKlaus Jensen nvme_enqueue_req_completion(nvme_cq(req), req); 210688eea45cSKlaus Jensen } 210788eea45cSKlaus Jensen 210888eea45cSKlaus Jensen static void nvme_compare_data_cb(void *opaque, int ret) 210988eea45cSKlaus Jensen { 211088eea45cSKlaus Jensen NvmeRequest *req = opaque; 211188eea45cSKlaus Jensen NvmeCtrl *n = nvme_ctrl(req); 211288eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 211388eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 211488eea45cSKlaus Jensen BlockAcctCookie *acct = &req->acct; 211588eea45cSKlaus Jensen BlockAcctStats *stats = blk_get_stats(blk); 211688eea45cSKlaus Jensen 211788eea45cSKlaus Jensen struct nvme_compare_ctx *ctx = req->opaque; 211888eea45cSKlaus Jensen g_autofree uint8_t *buf = NULL; 211988eea45cSKlaus Jensen uint16_t status; 212088eea45cSKlaus Jensen 212188eea45cSKlaus Jensen trace_pci_nvme_compare_data_cb(nvme_cid(req)); 212288eea45cSKlaus Jensen 212388eea45cSKlaus Jensen if (ret) { 212488eea45cSKlaus Jensen block_acct_failed(stats, acct); 212588eea45cSKlaus Jensen nvme_aio_err(req, ret); 212688eea45cSKlaus Jensen goto out; 212788eea45cSKlaus Jensen } 212888eea45cSKlaus Jensen 212988eea45cSKlaus Jensen buf = g_malloc(ctx->data.iov.size); 213088eea45cSKlaus Jensen 213188eea45cSKlaus Jensen status = nvme_bounce_data(n, buf, ctx->data.iov.size, 213288eea45cSKlaus Jensen NVME_TX_DIRECTION_TO_DEVICE, req); 213388eea45cSKlaus Jensen if (status) { 213488eea45cSKlaus Jensen req->status = status; 213588eea45cSKlaus Jensen goto out; 213688eea45cSKlaus Jensen } 213788eea45cSKlaus Jensen 213888eea45cSKlaus Jensen if (memcmp(buf, ctx->data.bounce, ctx->data.iov.size)) { 213988eea45cSKlaus Jensen req->status = NVME_CMP_FAILURE; 214088eea45cSKlaus Jensen goto out; 214188eea45cSKlaus Jensen } 214288eea45cSKlaus Jensen 214388eea45cSKlaus Jensen if (ns->lbaf.ms) { 214488eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 214588eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 214688eea45cSKlaus Jensen uint32_t nlb = le16_to_cpu(rw->nlb) + 1; 214788eea45cSKlaus Jensen size_t mlen = nvme_m2b(ns, nlb); 214888eea45cSKlaus Jensen uint64_t offset = nvme_moff(ns, slba); 214988eea45cSKlaus Jensen 215088eea45cSKlaus Jensen ctx->mdata.bounce = g_malloc(mlen); 215188eea45cSKlaus Jensen 215288eea45cSKlaus Jensen qemu_iovec_init(&ctx->mdata.iov, 1); 215388eea45cSKlaus Jensen qemu_iovec_add(&ctx->mdata.iov, ctx->mdata.bounce, mlen); 215488eea45cSKlaus Jensen 215588eea45cSKlaus Jensen req->aiocb = blk_aio_preadv(blk, offset, &ctx->mdata.iov, 0, 215688eea45cSKlaus Jensen nvme_compare_mdata_cb, req); 215788eea45cSKlaus Jensen return; 215888eea45cSKlaus Jensen } 215988eea45cSKlaus Jensen 216088eea45cSKlaus Jensen block_acct_done(stats, acct); 216188eea45cSKlaus Jensen 216288eea45cSKlaus Jensen out: 216388eea45cSKlaus Jensen qemu_iovec_destroy(&ctx->data.iov); 216488eea45cSKlaus Jensen g_free(ctx->data.bounce); 216588eea45cSKlaus Jensen g_free(ctx); 216688eea45cSKlaus Jensen 216788eea45cSKlaus Jensen nvme_enqueue_req_completion(nvme_cq(req), req); 216888eea45cSKlaus Jensen } 216988eea45cSKlaus Jensen 2170d7d1474fSKlaus Jensen typedef struct NvmeDSMAIOCB { 2171d7d1474fSKlaus Jensen BlockAIOCB common; 2172d7d1474fSKlaus Jensen BlockAIOCB *aiocb; 2173d7d1474fSKlaus Jensen NvmeRequest *req; 2174d7d1474fSKlaus Jensen QEMUBH *bh; 2175d7d1474fSKlaus Jensen int ret; 2176d7d1474fSKlaus Jensen 2177d7d1474fSKlaus Jensen NvmeDsmRange *range; 2178d7d1474fSKlaus Jensen unsigned int nr; 2179d7d1474fSKlaus Jensen unsigned int idx; 2180d7d1474fSKlaus Jensen } NvmeDSMAIOCB; 2181d7d1474fSKlaus Jensen 2182d7d1474fSKlaus Jensen static void nvme_dsm_cancel(BlockAIOCB *aiocb) 2183d7d1474fSKlaus Jensen { 2184d7d1474fSKlaus Jensen NvmeDSMAIOCB *iocb = container_of(aiocb, NvmeDSMAIOCB, common); 2185d7d1474fSKlaus Jensen 2186d7d1474fSKlaus Jensen /* break nvme_dsm_cb loop */ 2187d7d1474fSKlaus Jensen iocb->idx = iocb->nr; 2188d7d1474fSKlaus Jensen iocb->ret = -ECANCELED; 2189d7d1474fSKlaus Jensen 2190d7d1474fSKlaus Jensen if (iocb->aiocb) { 2191d7d1474fSKlaus Jensen blk_aio_cancel_async(iocb->aiocb); 2192d7d1474fSKlaus Jensen iocb->aiocb = NULL; 2193d7d1474fSKlaus Jensen } else { 2194d7d1474fSKlaus Jensen /* 2195d7d1474fSKlaus Jensen * We only reach this if nvme_dsm_cancel() has already been called or 2196d7d1474fSKlaus Jensen * the command ran to completion and nvme_dsm_bh is scheduled to run. 2197d7d1474fSKlaus Jensen */ 2198d7d1474fSKlaus Jensen assert(iocb->idx == iocb->nr); 2199d7d1474fSKlaus Jensen } 2200d7d1474fSKlaus Jensen } 2201d7d1474fSKlaus Jensen 2202d7d1474fSKlaus Jensen static const AIOCBInfo nvme_dsm_aiocb_info = { 2203d7d1474fSKlaus Jensen .aiocb_size = sizeof(NvmeDSMAIOCB), 2204d7d1474fSKlaus Jensen .cancel_async = nvme_dsm_cancel, 2205d7d1474fSKlaus Jensen }; 2206d7d1474fSKlaus Jensen 2207d7d1474fSKlaus Jensen static void nvme_dsm_bh(void *opaque) 2208d7d1474fSKlaus Jensen { 2209d7d1474fSKlaus Jensen NvmeDSMAIOCB *iocb = opaque; 2210d7d1474fSKlaus Jensen 2211d7d1474fSKlaus Jensen iocb->common.cb(iocb->common.opaque, iocb->ret); 2212d7d1474fSKlaus Jensen 2213d7d1474fSKlaus Jensen qemu_bh_delete(iocb->bh); 2214d7d1474fSKlaus Jensen iocb->bh = NULL; 2215d7d1474fSKlaus Jensen qemu_aio_unref(iocb); 2216d7d1474fSKlaus Jensen } 2217d7d1474fSKlaus Jensen 2218d7d1474fSKlaus Jensen static void nvme_dsm_cb(void *opaque, int ret); 2219d7d1474fSKlaus Jensen 2220d7d1474fSKlaus Jensen static void nvme_dsm_md_cb(void *opaque, int ret) 2221d7d1474fSKlaus Jensen { 2222d7d1474fSKlaus Jensen NvmeDSMAIOCB *iocb = opaque; 2223d7d1474fSKlaus Jensen NvmeRequest *req = iocb->req; 2224d7d1474fSKlaus Jensen NvmeNamespace *ns = req->ns; 2225d7d1474fSKlaus Jensen NvmeDsmRange *range; 2226d7d1474fSKlaus Jensen uint64_t slba; 2227d7d1474fSKlaus Jensen uint32_t nlb; 2228d7d1474fSKlaus Jensen 2229d7d1474fSKlaus Jensen if (ret < 0) { 2230d7d1474fSKlaus Jensen iocb->ret = ret; 2231d7d1474fSKlaus Jensen goto done; 2232d7d1474fSKlaus Jensen } 2233d7d1474fSKlaus Jensen 2234d7d1474fSKlaus Jensen if (!ns->lbaf.ms) { 2235d7d1474fSKlaus Jensen nvme_dsm_cb(iocb, 0); 2236d7d1474fSKlaus Jensen return; 2237d7d1474fSKlaus Jensen } 2238d7d1474fSKlaus Jensen 2239d7d1474fSKlaus Jensen range = &iocb->range[iocb->idx - 1]; 2240d7d1474fSKlaus Jensen slba = le64_to_cpu(range->slba); 2241d7d1474fSKlaus Jensen nlb = le32_to_cpu(range->nlb); 2242d7d1474fSKlaus Jensen 2243d7d1474fSKlaus Jensen /* 2244d7d1474fSKlaus Jensen * Check that all block were discarded (zeroed); otherwise we do not zero 2245d7d1474fSKlaus Jensen * the metadata. 2246d7d1474fSKlaus Jensen */ 2247d7d1474fSKlaus Jensen 2248d7d1474fSKlaus Jensen ret = nvme_block_status_all(ns, slba, nlb, BDRV_BLOCK_ZERO); 2249d7d1474fSKlaus Jensen if (ret) { 2250d7d1474fSKlaus Jensen if (ret < 0) { 2251d7d1474fSKlaus Jensen iocb->ret = ret; 2252d7d1474fSKlaus Jensen goto done; 2253d7d1474fSKlaus Jensen } 2254d7d1474fSKlaus Jensen 2255d7d1474fSKlaus Jensen nvme_dsm_cb(iocb, 0); 2256d7d1474fSKlaus Jensen } 2257d7d1474fSKlaus Jensen 2258d7d1474fSKlaus Jensen iocb->aiocb = blk_aio_pwrite_zeroes(ns->blkconf.blk, nvme_moff(ns, slba), 2259d7d1474fSKlaus Jensen nvme_m2b(ns, nlb), BDRV_REQ_MAY_UNMAP, 2260d7d1474fSKlaus Jensen nvme_dsm_cb, iocb); 2261d7d1474fSKlaus Jensen return; 2262d7d1474fSKlaus Jensen 2263d7d1474fSKlaus Jensen done: 2264d7d1474fSKlaus Jensen iocb->aiocb = NULL; 2265d7d1474fSKlaus Jensen qemu_bh_schedule(iocb->bh); 2266d7d1474fSKlaus Jensen } 2267d7d1474fSKlaus Jensen 2268d7d1474fSKlaus Jensen static void nvme_dsm_cb(void *opaque, int ret) 2269d7d1474fSKlaus Jensen { 2270d7d1474fSKlaus Jensen NvmeDSMAIOCB *iocb = opaque; 2271d7d1474fSKlaus Jensen NvmeRequest *req = iocb->req; 2272d7d1474fSKlaus Jensen NvmeCtrl *n = nvme_ctrl(req); 2273d7d1474fSKlaus Jensen NvmeNamespace *ns = req->ns; 2274d7d1474fSKlaus Jensen NvmeDsmRange *range; 2275d7d1474fSKlaus Jensen uint64_t slba; 2276d7d1474fSKlaus Jensen uint32_t nlb; 2277d7d1474fSKlaus Jensen 2278d7d1474fSKlaus Jensen if (ret < 0) { 2279d7d1474fSKlaus Jensen iocb->ret = ret; 2280d7d1474fSKlaus Jensen goto done; 2281d7d1474fSKlaus Jensen } 2282d7d1474fSKlaus Jensen 2283d7d1474fSKlaus Jensen next: 2284d7d1474fSKlaus Jensen if (iocb->idx == iocb->nr) { 2285d7d1474fSKlaus Jensen goto done; 2286d7d1474fSKlaus Jensen } 2287d7d1474fSKlaus Jensen 2288d7d1474fSKlaus Jensen range = &iocb->range[iocb->idx++]; 2289d7d1474fSKlaus Jensen slba = le64_to_cpu(range->slba); 2290d7d1474fSKlaus Jensen nlb = le32_to_cpu(range->nlb); 2291d7d1474fSKlaus Jensen 2292d7d1474fSKlaus Jensen trace_pci_nvme_dsm_deallocate(slba, nlb); 2293d7d1474fSKlaus Jensen 2294d7d1474fSKlaus Jensen if (nlb > n->dmrsl) { 2295d7d1474fSKlaus Jensen trace_pci_nvme_dsm_single_range_limit_exceeded(nlb, n->dmrsl); 2296d7d1474fSKlaus Jensen goto next; 2297d7d1474fSKlaus Jensen } 2298d7d1474fSKlaus Jensen 2299d7d1474fSKlaus Jensen if (nvme_check_bounds(ns, slba, nlb)) { 2300d7d1474fSKlaus Jensen trace_pci_nvme_err_invalid_lba_range(slba, nlb, 2301d7d1474fSKlaus Jensen ns->id_ns.nsze); 2302d7d1474fSKlaus Jensen goto next; 2303d7d1474fSKlaus Jensen } 2304d7d1474fSKlaus Jensen 2305d7d1474fSKlaus Jensen iocb->aiocb = blk_aio_pdiscard(ns->blkconf.blk, nvme_l2b(ns, slba), 2306d7d1474fSKlaus Jensen nvme_l2b(ns, nlb), 2307d7d1474fSKlaus Jensen nvme_dsm_md_cb, iocb); 2308d7d1474fSKlaus Jensen return; 2309d7d1474fSKlaus Jensen 2310d7d1474fSKlaus Jensen done: 2311d7d1474fSKlaus Jensen iocb->aiocb = NULL; 2312d7d1474fSKlaus Jensen qemu_bh_schedule(iocb->bh); 2313d7d1474fSKlaus Jensen } 2314d7d1474fSKlaus Jensen 231588eea45cSKlaus Jensen static uint16_t nvme_dsm(NvmeCtrl *n, NvmeRequest *req) 231688eea45cSKlaus Jensen { 231788eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 231888eea45cSKlaus Jensen NvmeDsmCmd *dsm = (NvmeDsmCmd *) &req->cmd; 231988eea45cSKlaus Jensen uint32_t attr = le32_to_cpu(dsm->attributes); 232088eea45cSKlaus Jensen uint32_t nr = (le32_to_cpu(dsm->nr) & 0xff) + 1; 232188eea45cSKlaus Jensen uint16_t status = NVME_SUCCESS; 232288eea45cSKlaus Jensen 2323d7d1474fSKlaus Jensen trace_pci_nvme_dsm(nr, attr); 232488eea45cSKlaus Jensen 232588eea45cSKlaus Jensen if (attr & NVME_DSMGMT_AD) { 2326d7d1474fSKlaus Jensen NvmeDSMAIOCB *iocb = blk_aio_get(&nvme_dsm_aiocb_info, ns->blkconf.blk, 2327d7d1474fSKlaus Jensen nvme_misc_cb, req); 232888eea45cSKlaus Jensen 2329d7d1474fSKlaus Jensen iocb->req = req; 2330d7d1474fSKlaus Jensen iocb->bh = qemu_bh_new(nvme_dsm_bh, iocb); 2331d7d1474fSKlaus Jensen iocb->ret = 0; 2332d7d1474fSKlaus Jensen iocb->range = g_new(NvmeDsmRange, nr); 2333d7d1474fSKlaus Jensen iocb->nr = nr; 2334d7d1474fSKlaus Jensen iocb->idx = 0; 2335d7d1474fSKlaus Jensen 2336d7d1474fSKlaus Jensen status = nvme_h2c(n, (uint8_t *)iocb->range, sizeof(NvmeDsmRange) * nr, 2337d7d1474fSKlaus Jensen req); 233888eea45cSKlaus Jensen if (status) { 233988eea45cSKlaus Jensen return status; 234088eea45cSKlaus Jensen } 234188eea45cSKlaus Jensen 2342d7d1474fSKlaus Jensen req->aiocb = &iocb->common; 2343d7d1474fSKlaus Jensen nvme_dsm_cb(iocb, 0); 234488eea45cSKlaus Jensen 2345d7d1474fSKlaus Jensen return NVME_NO_COMPLETE; 234688eea45cSKlaus Jensen } 234788eea45cSKlaus Jensen 234888eea45cSKlaus Jensen return status; 234988eea45cSKlaus Jensen } 235088eea45cSKlaus Jensen 235188eea45cSKlaus Jensen static uint16_t nvme_verify(NvmeCtrl *n, NvmeRequest *req) 235288eea45cSKlaus Jensen { 235388eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 235488eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 235588eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 235688eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 235788eea45cSKlaus Jensen uint32_t nlb = le16_to_cpu(rw->nlb) + 1; 235888eea45cSKlaus Jensen size_t len = nvme_l2b(ns, nlb); 235988eea45cSKlaus Jensen int64_t offset = nvme_l2b(ns, slba); 23602a132309SKlaus Jensen uint8_t prinfo = NVME_RW_PRINFO(le16_to_cpu(rw->control)); 236188eea45cSKlaus Jensen uint32_t reftag = le32_to_cpu(rw->reftag); 236288eea45cSKlaus Jensen NvmeBounceContext *ctx = NULL; 236388eea45cSKlaus Jensen uint16_t status; 236488eea45cSKlaus Jensen 236588eea45cSKlaus Jensen trace_pci_nvme_verify(nvme_cid(req), nvme_nsid(ns), slba, nlb); 236688eea45cSKlaus Jensen 236788eea45cSKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 23682a132309SKlaus Jensen status = nvme_check_prinfo(ns, prinfo, slba, reftag); 236988eea45cSKlaus Jensen if (status) { 237088eea45cSKlaus Jensen return status; 237188eea45cSKlaus Jensen } 237288eea45cSKlaus Jensen 23732a132309SKlaus Jensen if (prinfo & NVME_PRINFO_PRACT) { 237488eea45cSKlaus Jensen return NVME_INVALID_PROT_INFO | NVME_DNR; 237588eea45cSKlaus Jensen } 237688eea45cSKlaus Jensen } 237788eea45cSKlaus Jensen 237888eea45cSKlaus Jensen if (len > n->page_size << n->params.vsl) { 237988eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 238088eea45cSKlaus Jensen } 238188eea45cSKlaus Jensen 238288eea45cSKlaus Jensen status = nvme_check_bounds(ns, slba, nlb); 238388eea45cSKlaus Jensen if (status) { 238488eea45cSKlaus Jensen return status; 238588eea45cSKlaus Jensen } 238688eea45cSKlaus Jensen 238788eea45cSKlaus Jensen if (NVME_ERR_REC_DULBE(ns->features.err_rec)) { 238888eea45cSKlaus Jensen status = nvme_check_dulbe(ns, slba, nlb); 238988eea45cSKlaus Jensen if (status) { 239088eea45cSKlaus Jensen return status; 239188eea45cSKlaus Jensen } 239288eea45cSKlaus Jensen } 239388eea45cSKlaus Jensen 239488eea45cSKlaus Jensen ctx = g_new0(NvmeBounceContext, 1); 239588eea45cSKlaus Jensen ctx->req = req; 239688eea45cSKlaus Jensen 239788eea45cSKlaus Jensen ctx->data.bounce = g_malloc(len); 239888eea45cSKlaus Jensen 239988eea45cSKlaus Jensen qemu_iovec_init(&ctx->data.iov, 1); 240088eea45cSKlaus Jensen qemu_iovec_add(&ctx->data.iov, ctx->data.bounce, len); 240188eea45cSKlaus Jensen 240288eea45cSKlaus Jensen block_acct_start(blk_get_stats(blk), &req->acct, ctx->data.iov.size, 240388eea45cSKlaus Jensen BLOCK_ACCT_READ); 240488eea45cSKlaus Jensen 240588eea45cSKlaus Jensen req->aiocb = blk_aio_preadv(ns->blkconf.blk, offset, &ctx->data.iov, 0, 240688eea45cSKlaus Jensen nvme_verify_mdata_in_cb, ctx); 240788eea45cSKlaus Jensen return NVME_NO_COMPLETE; 240888eea45cSKlaus Jensen } 240988eea45cSKlaus Jensen 2410796d2068SKlaus Jensen typedef struct NvmeCopyAIOCB { 2411796d2068SKlaus Jensen BlockAIOCB common; 2412796d2068SKlaus Jensen BlockAIOCB *aiocb; 2413796d2068SKlaus Jensen NvmeRequest *req; 2414796d2068SKlaus Jensen QEMUBH *bh; 2415796d2068SKlaus Jensen int ret; 2416796d2068SKlaus Jensen 2417796d2068SKlaus Jensen NvmeCopySourceRange *ranges; 2418796d2068SKlaus Jensen int nr; 2419796d2068SKlaus Jensen int idx; 2420796d2068SKlaus Jensen 2421796d2068SKlaus Jensen uint8_t *bounce; 2422796d2068SKlaus Jensen QEMUIOVector iov; 2423796d2068SKlaus Jensen struct { 2424796d2068SKlaus Jensen BlockAcctCookie read; 2425796d2068SKlaus Jensen BlockAcctCookie write; 2426796d2068SKlaus Jensen } acct; 2427796d2068SKlaus Jensen 2428796d2068SKlaus Jensen uint32_t reftag; 2429796d2068SKlaus Jensen uint64_t slba; 2430796d2068SKlaus Jensen 2431796d2068SKlaus Jensen NvmeZone *zone; 2432796d2068SKlaus Jensen } NvmeCopyAIOCB; 2433796d2068SKlaus Jensen 2434796d2068SKlaus Jensen static void nvme_copy_cancel(BlockAIOCB *aiocb) 243588eea45cSKlaus Jensen { 2436796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = container_of(aiocb, NvmeCopyAIOCB, common); 2437796d2068SKlaus Jensen 2438796d2068SKlaus Jensen iocb->ret = -ECANCELED; 2439796d2068SKlaus Jensen 2440796d2068SKlaus Jensen if (iocb->aiocb) { 2441796d2068SKlaus Jensen blk_aio_cancel_async(iocb->aiocb); 2442796d2068SKlaus Jensen iocb->aiocb = NULL; 2443796d2068SKlaus Jensen } 2444796d2068SKlaus Jensen } 2445796d2068SKlaus Jensen 2446796d2068SKlaus Jensen static const AIOCBInfo nvme_copy_aiocb_info = { 2447796d2068SKlaus Jensen .aiocb_size = sizeof(NvmeCopyAIOCB), 2448796d2068SKlaus Jensen .cancel_async = nvme_copy_cancel, 2449796d2068SKlaus Jensen }; 2450796d2068SKlaus Jensen 2451796d2068SKlaus Jensen static void nvme_copy_bh(void *opaque) 2452796d2068SKlaus Jensen { 2453796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = opaque; 2454796d2068SKlaus Jensen NvmeRequest *req = iocb->req; 245588eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 2456796d2068SKlaus Jensen BlockAcctStats *stats = blk_get_stats(ns->blkconf.blk); 2457796d2068SKlaus Jensen 2458796d2068SKlaus Jensen if (iocb->idx != iocb->nr) { 2459796d2068SKlaus Jensen req->cqe.result = cpu_to_le32(iocb->idx); 2460796d2068SKlaus Jensen } 2461796d2068SKlaus Jensen 2462796d2068SKlaus Jensen qemu_iovec_destroy(&iocb->iov); 2463796d2068SKlaus Jensen g_free(iocb->bounce); 2464796d2068SKlaus Jensen 2465796d2068SKlaus Jensen qemu_bh_delete(iocb->bh); 2466796d2068SKlaus Jensen iocb->bh = NULL; 2467796d2068SKlaus Jensen 2468796d2068SKlaus Jensen if (iocb->ret < 0) { 2469796d2068SKlaus Jensen block_acct_failed(stats, &iocb->acct.read); 2470796d2068SKlaus Jensen block_acct_failed(stats, &iocb->acct.write); 2471796d2068SKlaus Jensen } else { 2472796d2068SKlaus Jensen block_acct_done(stats, &iocb->acct.read); 2473796d2068SKlaus Jensen block_acct_done(stats, &iocb->acct.write); 2474796d2068SKlaus Jensen } 2475796d2068SKlaus Jensen 2476796d2068SKlaus Jensen iocb->common.cb(iocb->common.opaque, iocb->ret); 2477796d2068SKlaus Jensen qemu_aio_unref(iocb); 2478796d2068SKlaus Jensen } 2479796d2068SKlaus Jensen 2480796d2068SKlaus Jensen static void nvme_copy_cb(void *opaque, int ret); 2481796d2068SKlaus Jensen 2482796d2068SKlaus Jensen static void nvme_copy_out_completed_cb(void *opaque, int ret) 2483796d2068SKlaus Jensen { 2484796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = opaque; 2485796d2068SKlaus Jensen NvmeRequest *req = iocb->req; 2486796d2068SKlaus Jensen NvmeNamespace *ns = req->ns; 2487796d2068SKlaus Jensen NvmeCopySourceRange *range = &iocb->ranges[iocb->idx]; 2488796d2068SKlaus Jensen uint32_t nlb = le32_to_cpu(range->nlb) + 1; 2489796d2068SKlaus Jensen 2490796d2068SKlaus Jensen if (ret < 0) { 2491796d2068SKlaus Jensen iocb->ret = ret; 2492796d2068SKlaus Jensen goto out; 2493796d2068SKlaus Jensen } else if (iocb->ret < 0) { 2494796d2068SKlaus Jensen goto out; 2495796d2068SKlaus Jensen } 2496796d2068SKlaus Jensen 2497796d2068SKlaus Jensen if (ns->params.zoned) { 2498796d2068SKlaus Jensen nvme_advance_zone_wp(ns, iocb->zone, nlb); 2499796d2068SKlaus Jensen } 2500796d2068SKlaus Jensen 2501796d2068SKlaus Jensen iocb->idx++; 2502796d2068SKlaus Jensen iocb->slba += nlb; 2503796d2068SKlaus Jensen out: 2504796d2068SKlaus Jensen nvme_copy_cb(iocb, iocb->ret); 2505796d2068SKlaus Jensen } 2506796d2068SKlaus Jensen 2507796d2068SKlaus Jensen static void nvme_copy_out_cb(void *opaque, int ret) 2508796d2068SKlaus Jensen { 2509796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = opaque; 2510796d2068SKlaus Jensen NvmeRequest *req = iocb->req; 2511796d2068SKlaus Jensen NvmeNamespace *ns = req->ns; 2512796d2068SKlaus Jensen NvmeCopySourceRange *range; 2513796d2068SKlaus Jensen uint32_t nlb; 2514796d2068SKlaus Jensen size_t mlen; 2515796d2068SKlaus Jensen uint8_t *mbounce; 2516796d2068SKlaus Jensen 2517796d2068SKlaus Jensen if (ret < 0) { 2518796d2068SKlaus Jensen iocb->ret = ret; 2519796d2068SKlaus Jensen goto out; 2520796d2068SKlaus Jensen } else if (iocb->ret < 0) { 2521796d2068SKlaus Jensen goto out; 2522796d2068SKlaus Jensen } 2523796d2068SKlaus Jensen 2524796d2068SKlaus Jensen if (!ns->lbaf.ms) { 2525796d2068SKlaus Jensen nvme_copy_out_completed_cb(iocb, 0); 2526796d2068SKlaus Jensen return; 2527796d2068SKlaus Jensen } 2528796d2068SKlaus Jensen 2529796d2068SKlaus Jensen range = &iocb->ranges[iocb->idx]; 2530796d2068SKlaus Jensen nlb = le32_to_cpu(range->nlb) + 1; 2531796d2068SKlaus Jensen 2532796d2068SKlaus Jensen mlen = nvme_m2b(ns, nlb); 2533796d2068SKlaus Jensen mbounce = iocb->bounce + nvme_l2b(ns, nlb); 2534796d2068SKlaus Jensen 2535796d2068SKlaus Jensen qemu_iovec_reset(&iocb->iov); 2536796d2068SKlaus Jensen qemu_iovec_add(&iocb->iov, mbounce, mlen); 2537796d2068SKlaus Jensen 2538796d2068SKlaus Jensen iocb->aiocb = blk_aio_pwritev(ns->blkconf.blk, nvme_moff(ns, iocb->slba), 2539796d2068SKlaus Jensen &iocb->iov, 0, nvme_copy_out_completed_cb, 2540796d2068SKlaus Jensen iocb); 2541796d2068SKlaus Jensen 2542796d2068SKlaus Jensen return; 2543796d2068SKlaus Jensen 2544796d2068SKlaus Jensen out: 2545796d2068SKlaus Jensen nvme_copy_cb(iocb, ret); 2546796d2068SKlaus Jensen } 2547796d2068SKlaus Jensen 2548796d2068SKlaus Jensen static void nvme_copy_in_completed_cb(void *opaque, int ret) 2549796d2068SKlaus Jensen { 2550796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = opaque; 2551796d2068SKlaus Jensen NvmeRequest *req = iocb->req; 2552796d2068SKlaus Jensen NvmeNamespace *ns = req->ns; 2553796d2068SKlaus Jensen NvmeCopySourceRange *range; 2554796d2068SKlaus Jensen uint32_t nlb; 2555796d2068SKlaus Jensen size_t len; 2556796d2068SKlaus Jensen uint16_t status; 2557796d2068SKlaus Jensen 2558796d2068SKlaus Jensen if (ret < 0) { 2559796d2068SKlaus Jensen iocb->ret = ret; 2560796d2068SKlaus Jensen goto out; 2561796d2068SKlaus Jensen } else if (iocb->ret < 0) { 2562796d2068SKlaus Jensen goto out; 2563796d2068SKlaus Jensen } 2564796d2068SKlaus Jensen 2565796d2068SKlaus Jensen range = &iocb->ranges[iocb->idx]; 2566796d2068SKlaus Jensen nlb = le32_to_cpu(range->nlb) + 1; 2567796d2068SKlaus Jensen len = nvme_l2b(ns, nlb); 2568796d2068SKlaus Jensen 2569796d2068SKlaus Jensen trace_pci_nvme_copy_out(iocb->slba, nlb); 2570796d2068SKlaus Jensen 2571796d2068SKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 257288eea45cSKlaus Jensen NvmeCopyCmd *copy = (NvmeCopyCmd *)&req->cmd; 257388eea45cSKlaus Jensen 2574796d2068SKlaus Jensen uint16_t prinfor = ((copy->control[0] >> 4) & 0xf); 2575796d2068SKlaus Jensen uint16_t prinfow = ((copy->control[2] >> 2) & 0xf); 257688eea45cSKlaus Jensen 2577796d2068SKlaus Jensen uint16_t apptag = le16_to_cpu(range->apptag); 2578796d2068SKlaus Jensen uint16_t appmask = le16_to_cpu(range->appmask); 2579796d2068SKlaus Jensen uint32_t reftag = le32_to_cpu(range->reftag); 2580796d2068SKlaus Jensen 2581796d2068SKlaus Jensen uint64_t slba = le64_to_cpu(range->slba); 2582796d2068SKlaus Jensen size_t mlen = nvme_m2b(ns, nlb); 2583796d2068SKlaus Jensen uint8_t *mbounce = iocb->bounce + nvme_l2b(ns, nlb); 2584796d2068SKlaus Jensen 2585796d2068SKlaus Jensen status = nvme_dif_check(ns, iocb->bounce, len, mbounce, mlen, prinfor, 2586796d2068SKlaus Jensen slba, apptag, appmask, &reftag); 2587796d2068SKlaus Jensen if (status) { 2588796d2068SKlaus Jensen goto invalid; 2589796d2068SKlaus Jensen } 2590796d2068SKlaus Jensen 2591796d2068SKlaus Jensen apptag = le16_to_cpu(copy->apptag); 2592796d2068SKlaus Jensen appmask = le16_to_cpu(copy->appmask); 2593796d2068SKlaus Jensen 2594796d2068SKlaus Jensen if (prinfow & NVME_PRINFO_PRACT) { 2595796d2068SKlaus Jensen status = nvme_check_prinfo(ns, prinfow, iocb->slba, iocb->reftag); 2596796d2068SKlaus Jensen if (status) { 2597796d2068SKlaus Jensen goto invalid; 2598796d2068SKlaus Jensen } 2599796d2068SKlaus Jensen 2600796d2068SKlaus Jensen nvme_dif_pract_generate_dif(ns, iocb->bounce, len, mbounce, mlen, 2601796d2068SKlaus Jensen apptag, &iocb->reftag); 2602796d2068SKlaus Jensen } else { 2603796d2068SKlaus Jensen status = nvme_dif_check(ns, iocb->bounce, len, mbounce, mlen, 2604796d2068SKlaus Jensen prinfow, iocb->slba, apptag, appmask, 2605796d2068SKlaus Jensen &iocb->reftag); 2606796d2068SKlaus Jensen if (status) { 2607796d2068SKlaus Jensen goto invalid; 2608796d2068SKlaus Jensen } 2609796d2068SKlaus Jensen } 2610796d2068SKlaus Jensen } 2611796d2068SKlaus Jensen 2612796d2068SKlaus Jensen status = nvme_check_bounds(ns, iocb->slba, nlb); 2613796d2068SKlaus Jensen if (status) { 2614796d2068SKlaus Jensen goto invalid; 2615796d2068SKlaus Jensen } 2616796d2068SKlaus Jensen 2617796d2068SKlaus Jensen if (ns->params.zoned) { 2618796d2068SKlaus Jensen status = nvme_check_zone_write(ns, iocb->zone, iocb->slba, nlb); 2619796d2068SKlaus Jensen if (status) { 2620796d2068SKlaus Jensen goto invalid; 2621796d2068SKlaus Jensen } 2622796d2068SKlaus Jensen 2623796d2068SKlaus Jensen iocb->zone->w_ptr += nlb; 2624796d2068SKlaus Jensen } 2625796d2068SKlaus Jensen 2626796d2068SKlaus Jensen qemu_iovec_reset(&iocb->iov); 2627796d2068SKlaus Jensen qemu_iovec_add(&iocb->iov, iocb->bounce, len); 2628796d2068SKlaus Jensen 2629796d2068SKlaus Jensen iocb->aiocb = blk_aio_pwritev(ns->blkconf.blk, nvme_l2b(ns, iocb->slba), 2630796d2068SKlaus Jensen &iocb->iov, 0, nvme_copy_out_cb, iocb); 2631796d2068SKlaus Jensen 2632796d2068SKlaus Jensen return; 2633796d2068SKlaus Jensen 2634796d2068SKlaus Jensen invalid: 2635796d2068SKlaus Jensen req->status = status; 2636796d2068SKlaus Jensen iocb->aiocb = NULL; 2637796d2068SKlaus Jensen if (iocb->bh) { 2638796d2068SKlaus Jensen qemu_bh_schedule(iocb->bh); 2639796d2068SKlaus Jensen } 2640796d2068SKlaus Jensen 2641796d2068SKlaus Jensen return; 2642796d2068SKlaus Jensen 2643796d2068SKlaus Jensen out: 2644796d2068SKlaus Jensen nvme_copy_cb(iocb, ret); 2645796d2068SKlaus Jensen } 2646796d2068SKlaus Jensen 2647796d2068SKlaus Jensen static void nvme_copy_in_cb(void *opaque, int ret) 2648796d2068SKlaus Jensen { 2649796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = opaque; 2650796d2068SKlaus Jensen NvmeRequest *req = iocb->req; 2651796d2068SKlaus Jensen NvmeNamespace *ns = req->ns; 2652796d2068SKlaus Jensen NvmeCopySourceRange *range; 2653796d2068SKlaus Jensen uint64_t slba; 2654796d2068SKlaus Jensen uint32_t nlb; 2655796d2068SKlaus Jensen 2656796d2068SKlaus Jensen if (ret < 0) { 2657796d2068SKlaus Jensen iocb->ret = ret; 2658796d2068SKlaus Jensen goto out; 2659796d2068SKlaus Jensen } else if (iocb->ret < 0) { 2660796d2068SKlaus Jensen goto out; 2661796d2068SKlaus Jensen } 2662796d2068SKlaus Jensen 2663796d2068SKlaus Jensen if (!ns->lbaf.ms) { 2664796d2068SKlaus Jensen nvme_copy_in_completed_cb(iocb, 0); 2665796d2068SKlaus Jensen return; 2666796d2068SKlaus Jensen } 2667796d2068SKlaus Jensen 2668796d2068SKlaus Jensen range = &iocb->ranges[iocb->idx]; 2669796d2068SKlaus Jensen slba = le64_to_cpu(range->slba); 2670796d2068SKlaus Jensen nlb = le32_to_cpu(range->nlb) + 1; 2671796d2068SKlaus Jensen 2672796d2068SKlaus Jensen qemu_iovec_reset(&iocb->iov); 2673796d2068SKlaus Jensen qemu_iovec_add(&iocb->iov, iocb->bounce + nvme_l2b(ns, nlb), 2674796d2068SKlaus Jensen nvme_m2b(ns, nlb)); 2675796d2068SKlaus Jensen 2676796d2068SKlaus Jensen iocb->aiocb = blk_aio_preadv(ns->blkconf.blk, nvme_moff(ns, slba), 2677796d2068SKlaus Jensen &iocb->iov, 0, nvme_copy_in_completed_cb, 2678796d2068SKlaus Jensen iocb); 2679796d2068SKlaus Jensen return; 2680796d2068SKlaus Jensen 2681796d2068SKlaus Jensen out: 2682796d2068SKlaus Jensen nvme_copy_cb(iocb, iocb->ret); 2683796d2068SKlaus Jensen } 2684796d2068SKlaus Jensen 2685796d2068SKlaus Jensen static void nvme_copy_cb(void *opaque, int ret) 2686796d2068SKlaus Jensen { 2687796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = opaque; 2688796d2068SKlaus Jensen NvmeRequest *req = iocb->req; 2689796d2068SKlaus Jensen NvmeNamespace *ns = req->ns; 2690796d2068SKlaus Jensen NvmeCopySourceRange *range; 2691796d2068SKlaus Jensen uint64_t slba; 2692796d2068SKlaus Jensen uint32_t nlb; 2693796d2068SKlaus Jensen size_t len; 269488eea45cSKlaus Jensen uint16_t status; 269588eea45cSKlaus Jensen 2696796d2068SKlaus Jensen if (ret < 0) { 2697796d2068SKlaus Jensen iocb->ret = ret; 2698796d2068SKlaus Jensen goto done; 2699796d2068SKlaus Jensen } else if (iocb->ret < 0) { 2700796d2068SKlaus Jensen goto done; 270188eea45cSKlaus Jensen } 270288eea45cSKlaus Jensen 2703796d2068SKlaus Jensen if (iocb->idx == iocb->nr) { 2704796d2068SKlaus Jensen goto done; 270588eea45cSKlaus Jensen } 270688eea45cSKlaus Jensen 2707796d2068SKlaus Jensen range = &iocb->ranges[iocb->idx]; 2708796d2068SKlaus Jensen slba = le64_to_cpu(range->slba); 2709796d2068SKlaus Jensen nlb = le32_to_cpu(range->nlb) + 1; 2710796d2068SKlaus Jensen len = nvme_l2b(ns, nlb); 271188eea45cSKlaus Jensen 2712796d2068SKlaus Jensen trace_pci_nvme_copy_source_range(slba, nlb); 271388eea45cSKlaus Jensen 2714796d2068SKlaus Jensen if (nlb > le16_to_cpu(ns->id_ns.mssrl)) { 271588eea45cSKlaus Jensen status = NVME_CMD_SIZE_LIMIT | NVME_DNR; 2716796d2068SKlaus Jensen goto invalid; 271788eea45cSKlaus Jensen } 271888eea45cSKlaus Jensen 2719796d2068SKlaus Jensen status = nvme_check_bounds(ns, slba, nlb); 272088eea45cSKlaus Jensen if (status) { 2721796d2068SKlaus Jensen goto invalid; 272288eea45cSKlaus Jensen } 272388eea45cSKlaus Jensen 272488eea45cSKlaus Jensen if (NVME_ERR_REC_DULBE(ns->features.err_rec)) { 2725796d2068SKlaus Jensen status = nvme_check_dulbe(ns, slba, nlb); 272688eea45cSKlaus Jensen if (status) { 2727796d2068SKlaus Jensen goto invalid; 272888eea45cSKlaus Jensen } 272988eea45cSKlaus Jensen } 273088eea45cSKlaus Jensen 273188eea45cSKlaus Jensen if (ns->params.zoned) { 2732796d2068SKlaus Jensen status = nvme_check_zone_read(ns, slba, nlb); 273388eea45cSKlaus Jensen if (status) { 2734796d2068SKlaus Jensen goto invalid; 273588eea45cSKlaus Jensen } 273688eea45cSKlaus Jensen } 273788eea45cSKlaus Jensen 2738796d2068SKlaus Jensen qemu_iovec_reset(&iocb->iov); 2739796d2068SKlaus Jensen qemu_iovec_add(&iocb->iov, iocb->bounce, len); 2740796d2068SKlaus Jensen 2741796d2068SKlaus Jensen iocb->aiocb = blk_aio_preadv(ns->blkconf.blk, nvme_l2b(ns, slba), 2742796d2068SKlaus Jensen &iocb->iov, 0, nvme_copy_in_cb, iocb); 2743796d2068SKlaus Jensen return; 2744796d2068SKlaus Jensen 2745796d2068SKlaus Jensen invalid: 2746796d2068SKlaus Jensen req->status = status; 2747796d2068SKlaus Jensen done: 2748796d2068SKlaus Jensen iocb->aiocb = NULL; 2749796d2068SKlaus Jensen if (iocb->bh) { 2750796d2068SKlaus Jensen qemu_bh_schedule(iocb->bh); 2751796d2068SKlaus Jensen } 275288eea45cSKlaus Jensen } 275388eea45cSKlaus Jensen 2754796d2068SKlaus Jensen 2755796d2068SKlaus Jensen static uint16_t nvme_copy(NvmeCtrl *n, NvmeRequest *req) 2756796d2068SKlaus Jensen { 2757796d2068SKlaus Jensen NvmeNamespace *ns = req->ns; 2758796d2068SKlaus Jensen NvmeCopyCmd *copy = (NvmeCopyCmd *)&req->cmd; 2759796d2068SKlaus Jensen NvmeCopyAIOCB *iocb = blk_aio_get(&nvme_copy_aiocb_info, ns->blkconf.blk, 2760796d2068SKlaus Jensen nvme_misc_cb, req); 2761796d2068SKlaus Jensen uint16_t nr = copy->nr + 1; 2762796d2068SKlaus Jensen uint8_t format = copy->control[0] & 0xf; 2763796d2068SKlaus Jensen uint16_t prinfor = ((copy->control[0] >> 4) & 0xf); 2764796d2068SKlaus Jensen uint16_t prinfow = ((copy->control[2] >> 2) & 0xf); 2765796d2068SKlaus Jensen 2766796d2068SKlaus Jensen uint16_t status; 2767796d2068SKlaus Jensen 2768796d2068SKlaus Jensen trace_pci_nvme_copy(nvme_cid(req), nvme_nsid(ns), nr, format); 2769796d2068SKlaus Jensen 2770796d2068SKlaus Jensen iocb->ranges = NULL; 2771796d2068SKlaus Jensen iocb->zone = NULL; 2772796d2068SKlaus Jensen 2773796d2068SKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps) && 2774796d2068SKlaus Jensen ((prinfor & NVME_PRINFO_PRACT) != (prinfow & NVME_PRINFO_PRACT))) { 2775796d2068SKlaus Jensen status = NVME_INVALID_FIELD | NVME_DNR; 2776796d2068SKlaus Jensen goto invalid; 2777796d2068SKlaus Jensen } 2778796d2068SKlaus Jensen 2779796d2068SKlaus Jensen if (!(n->id_ctrl.ocfs & (1 << format))) { 2780796d2068SKlaus Jensen trace_pci_nvme_err_copy_invalid_format(format); 2781796d2068SKlaus Jensen status = NVME_INVALID_FIELD | NVME_DNR; 2782796d2068SKlaus Jensen goto invalid; 2783796d2068SKlaus Jensen } 2784796d2068SKlaus Jensen 2785796d2068SKlaus Jensen if (nr > ns->id_ns.msrc + 1) { 278688eea45cSKlaus Jensen status = NVME_CMD_SIZE_LIMIT | NVME_DNR; 2787796d2068SKlaus Jensen goto invalid; 278888eea45cSKlaus Jensen } 278988eea45cSKlaus Jensen 2790796d2068SKlaus Jensen iocb->ranges = g_new(NvmeCopySourceRange, nr); 2791796d2068SKlaus Jensen 2792796d2068SKlaus Jensen status = nvme_h2c(n, (uint8_t *)iocb->ranges, 2793796d2068SKlaus Jensen sizeof(NvmeCopySourceRange) * nr, req); 2794796d2068SKlaus Jensen if (status) { 2795796d2068SKlaus Jensen goto invalid; 279688eea45cSKlaus Jensen } 279788eea45cSKlaus Jensen 2798796d2068SKlaus Jensen iocb->slba = le64_to_cpu(copy->sdlba); 2799796d2068SKlaus Jensen 2800796d2068SKlaus Jensen if (ns->params.zoned) { 2801796d2068SKlaus Jensen iocb->zone = nvme_get_zone_by_slba(ns, iocb->slba); 2802796d2068SKlaus Jensen if (!iocb->zone) { 2803796d2068SKlaus Jensen status = NVME_LBA_RANGE | NVME_DNR; 2804796d2068SKlaus Jensen goto invalid; 2805796d2068SKlaus Jensen } 2806796d2068SKlaus Jensen 2807796d2068SKlaus Jensen status = nvme_zrm_auto(n, ns, iocb->zone); 2808796d2068SKlaus Jensen if (status) { 2809796d2068SKlaus Jensen goto invalid; 2810796d2068SKlaus Jensen } 2811796d2068SKlaus Jensen } 2812796d2068SKlaus Jensen 2813796d2068SKlaus Jensen iocb->req = req; 2814796d2068SKlaus Jensen iocb->bh = qemu_bh_new(nvme_copy_bh, iocb); 2815796d2068SKlaus Jensen iocb->ret = 0; 2816796d2068SKlaus Jensen iocb->nr = nr; 2817796d2068SKlaus Jensen iocb->idx = 0; 2818796d2068SKlaus Jensen iocb->reftag = le32_to_cpu(copy->reftag); 2819796d2068SKlaus Jensen iocb->bounce = g_malloc_n(le16_to_cpu(ns->id_ns.mssrl), 2820796d2068SKlaus Jensen ns->lbasz + ns->lbaf.ms); 2821796d2068SKlaus Jensen 2822796d2068SKlaus Jensen qemu_iovec_init(&iocb->iov, 1); 2823796d2068SKlaus Jensen 2824796d2068SKlaus Jensen block_acct_start(blk_get_stats(ns->blkconf.blk), &iocb->acct.read, 0, 282588eea45cSKlaus Jensen BLOCK_ACCT_READ); 2826796d2068SKlaus Jensen block_acct_start(blk_get_stats(ns->blkconf.blk), &iocb->acct.write, 0, 2827796d2068SKlaus Jensen BLOCK_ACCT_WRITE); 282888eea45cSKlaus Jensen 2829796d2068SKlaus Jensen req->aiocb = &iocb->common; 2830796d2068SKlaus Jensen nvme_copy_cb(iocb, 0); 283188eea45cSKlaus Jensen 283288eea45cSKlaus Jensen return NVME_NO_COMPLETE; 283388eea45cSKlaus Jensen 2834796d2068SKlaus Jensen invalid: 2835796d2068SKlaus Jensen g_free(iocb->ranges); 2836796d2068SKlaus Jensen qemu_aio_unref(iocb); 283788eea45cSKlaus Jensen return status; 283888eea45cSKlaus Jensen } 283988eea45cSKlaus Jensen 284088eea45cSKlaus Jensen static uint16_t nvme_compare(NvmeCtrl *n, NvmeRequest *req) 284188eea45cSKlaus Jensen { 284288eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 284388eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 284488eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 284588eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 284688eea45cSKlaus Jensen uint32_t nlb = le16_to_cpu(rw->nlb) + 1; 28472a132309SKlaus Jensen uint8_t prinfo = NVME_RW_PRINFO(le16_to_cpu(rw->control)); 284888eea45cSKlaus Jensen size_t data_len = nvme_l2b(ns, nlb); 284988eea45cSKlaus Jensen size_t len = data_len; 285088eea45cSKlaus Jensen int64_t offset = nvme_l2b(ns, slba); 285188eea45cSKlaus Jensen struct nvme_compare_ctx *ctx = NULL; 285288eea45cSKlaus Jensen uint16_t status; 285388eea45cSKlaus Jensen 285488eea45cSKlaus Jensen trace_pci_nvme_compare(nvme_cid(req), nvme_nsid(ns), slba, nlb); 285588eea45cSKlaus Jensen 28562a132309SKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps) && (prinfo & NVME_PRINFO_PRACT)) { 285788eea45cSKlaus Jensen return NVME_INVALID_PROT_INFO | NVME_DNR; 285888eea45cSKlaus Jensen } 285988eea45cSKlaus Jensen 286088eea45cSKlaus Jensen if (nvme_ns_ext(ns)) { 286188eea45cSKlaus Jensen len += nvme_m2b(ns, nlb); 286288eea45cSKlaus Jensen } 286388eea45cSKlaus Jensen 286488eea45cSKlaus Jensen status = nvme_check_mdts(n, len); 286588eea45cSKlaus Jensen if (status) { 286688eea45cSKlaus Jensen return status; 286788eea45cSKlaus Jensen } 286888eea45cSKlaus Jensen 286988eea45cSKlaus Jensen status = nvme_check_bounds(ns, slba, nlb); 287088eea45cSKlaus Jensen if (status) { 287188eea45cSKlaus Jensen return status; 287288eea45cSKlaus Jensen } 287388eea45cSKlaus Jensen 287488eea45cSKlaus Jensen if (NVME_ERR_REC_DULBE(ns->features.err_rec)) { 287588eea45cSKlaus Jensen status = nvme_check_dulbe(ns, slba, nlb); 287688eea45cSKlaus Jensen if (status) { 287788eea45cSKlaus Jensen return status; 287888eea45cSKlaus Jensen } 287988eea45cSKlaus Jensen } 288088eea45cSKlaus Jensen 288188eea45cSKlaus Jensen status = nvme_map_dptr(n, &req->sg, len, &req->cmd); 288288eea45cSKlaus Jensen if (status) { 288388eea45cSKlaus Jensen return status; 288488eea45cSKlaus Jensen } 288588eea45cSKlaus Jensen 288688eea45cSKlaus Jensen ctx = g_new(struct nvme_compare_ctx, 1); 288788eea45cSKlaus Jensen ctx->data.bounce = g_malloc(data_len); 288888eea45cSKlaus Jensen 288988eea45cSKlaus Jensen req->opaque = ctx; 289088eea45cSKlaus Jensen 289188eea45cSKlaus Jensen qemu_iovec_init(&ctx->data.iov, 1); 289288eea45cSKlaus Jensen qemu_iovec_add(&ctx->data.iov, ctx->data.bounce, data_len); 289388eea45cSKlaus Jensen 289488eea45cSKlaus Jensen block_acct_start(blk_get_stats(blk), &req->acct, data_len, 289588eea45cSKlaus Jensen BLOCK_ACCT_READ); 289688eea45cSKlaus Jensen req->aiocb = blk_aio_preadv(blk, offset, &ctx->data.iov, 0, 289788eea45cSKlaus Jensen nvme_compare_data_cb, req); 289888eea45cSKlaus Jensen 289988eea45cSKlaus Jensen return NVME_NO_COMPLETE; 290088eea45cSKlaus Jensen } 290188eea45cSKlaus Jensen 290238f4ac65SKlaus Jensen typedef struct NvmeFlushAIOCB { 290338f4ac65SKlaus Jensen BlockAIOCB common; 290438f4ac65SKlaus Jensen BlockAIOCB *aiocb; 290538f4ac65SKlaus Jensen NvmeRequest *req; 290638f4ac65SKlaus Jensen QEMUBH *bh; 290738f4ac65SKlaus Jensen int ret; 290838f4ac65SKlaus Jensen 290938f4ac65SKlaus Jensen NvmeNamespace *ns; 291038f4ac65SKlaus Jensen uint32_t nsid; 291138f4ac65SKlaus Jensen bool broadcast; 291238f4ac65SKlaus Jensen } NvmeFlushAIOCB; 291338f4ac65SKlaus Jensen 291438f4ac65SKlaus Jensen static void nvme_flush_cancel(BlockAIOCB *acb) 291538f4ac65SKlaus Jensen { 291638f4ac65SKlaus Jensen NvmeFlushAIOCB *iocb = container_of(acb, NvmeFlushAIOCB, common); 291738f4ac65SKlaus Jensen 291838f4ac65SKlaus Jensen iocb->ret = -ECANCELED; 291938f4ac65SKlaus Jensen 292038f4ac65SKlaus Jensen if (iocb->aiocb) { 292138f4ac65SKlaus Jensen blk_aio_cancel_async(iocb->aiocb); 292238f4ac65SKlaus Jensen } 292338f4ac65SKlaus Jensen } 292438f4ac65SKlaus Jensen 292538f4ac65SKlaus Jensen static const AIOCBInfo nvme_flush_aiocb_info = { 292638f4ac65SKlaus Jensen .aiocb_size = sizeof(NvmeFlushAIOCB), 292738f4ac65SKlaus Jensen .cancel_async = nvme_flush_cancel, 292838f4ac65SKlaus Jensen .get_aio_context = nvme_get_aio_context, 292938f4ac65SKlaus Jensen }; 293038f4ac65SKlaus Jensen 293138f4ac65SKlaus Jensen static void nvme_flush_ns_cb(void *opaque, int ret) 293238f4ac65SKlaus Jensen { 293338f4ac65SKlaus Jensen NvmeFlushAIOCB *iocb = opaque; 293438f4ac65SKlaus Jensen NvmeNamespace *ns = iocb->ns; 293538f4ac65SKlaus Jensen 293638f4ac65SKlaus Jensen if (ret < 0) { 293738f4ac65SKlaus Jensen iocb->ret = ret; 293838f4ac65SKlaus Jensen goto out; 293938f4ac65SKlaus Jensen } else if (iocb->ret < 0) { 294038f4ac65SKlaus Jensen goto out; 294138f4ac65SKlaus Jensen } 294238f4ac65SKlaus Jensen 294338f4ac65SKlaus Jensen if (ns) { 294438f4ac65SKlaus Jensen trace_pci_nvme_flush_ns(iocb->nsid); 294538f4ac65SKlaus Jensen 294638f4ac65SKlaus Jensen iocb->ns = NULL; 294738f4ac65SKlaus Jensen iocb->aiocb = blk_aio_flush(ns->blkconf.blk, nvme_flush_ns_cb, iocb); 294838f4ac65SKlaus Jensen return; 294938f4ac65SKlaus Jensen } 295038f4ac65SKlaus Jensen 295138f4ac65SKlaus Jensen out: 295238f4ac65SKlaus Jensen iocb->aiocb = NULL; 295338f4ac65SKlaus Jensen qemu_bh_schedule(iocb->bh); 295438f4ac65SKlaus Jensen } 295538f4ac65SKlaus Jensen 295638f4ac65SKlaus Jensen static void nvme_flush_bh(void *opaque) 295738f4ac65SKlaus Jensen { 295838f4ac65SKlaus Jensen NvmeFlushAIOCB *iocb = opaque; 295938f4ac65SKlaus Jensen NvmeRequest *req = iocb->req; 296038f4ac65SKlaus Jensen NvmeCtrl *n = nvme_ctrl(req); 296138f4ac65SKlaus Jensen int i; 296238f4ac65SKlaus Jensen 296338f4ac65SKlaus Jensen if (iocb->ret < 0) { 296438f4ac65SKlaus Jensen goto done; 296538f4ac65SKlaus Jensen } 296638f4ac65SKlaus Jensen 296738f4ac65SKlaus Jensen if (iocb->broadcast) { 296838f4ac65SKlaus Jensen for (i = iocb->nsid + 1; i <= NVME_MAX_NAMESPACES; i++) { 296938f4ac65SKlaus Jensen iocb->ns = nvme_ns(n, i); 297038f4ac65SKlaus Jensen if (iocb->ns) { 297138f4ac65SKlaus Jensen iocb->nsid = i; 297238f4ac65SKlaus Jensen break; 297338f4ac65SKlaus Jensen } 297438f4ac65SKlaus Jensen } 297538f4ac65SKlaus Jensen } 297638f4ac65SKlaus Jensen 297738f4ac65SKlaus Jensen if (!iocb->ns) { 297838f4ac65SKlaus Jensen goto done; 297938f4ac65SKlaus Jensen } 298038f4ac65SKlaus Jensen 298138f4ac65SKlaus Jensen nvme_flush_ns_cb(iocb, 0); 298238f4ac65SKlaus Jensen return; 298338f4ac65SKlaus Jensen 298438f4ac65SKlaus Jensen done: 298538f4ac65SKlaus Jensen qemu_bh_delete(iocb->bh); 298638f4ac65SKlaus Jensen iocb->bh = NULL; 298738f4ac65SKlaus Jensen 298838f4ac65SKlaus Jensen iocb->common.cb(iocb->common.opaque, iocb->ret); 298938f4ac65SKlaus Jensen 299038f4ac65SKlaus Jensen qemu_aio_unref(iocb); 299138f4ac65SKlaus Jensen 299238f4ac65SKlaus Jensen return; 299338f4ac65SKlaus Jensen } 299438f4ac65SKlaus Jensen 299588eea45cSKlaus Jensen static uint16_t nvme_flush(NvmeCtrl *n, NvmeRequest *req) 299688eea45cSKlaus Jensen { 299738f4ac65SKlaus Jensen NvmeFlushAIOCB *iocb; 299888eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(req->cmd.nsid); 299988eea45cSKlaus Jensen uint16_t status; 300088eea45cSKlaus Jensen 300138f4ac65SKlaus Jensen iocb = qemu_aio_get(&nvme_flush_aiocb_info, NULL, nvme_misc_cb, req); 300288eea45cSKlaus Jensen 300338f4ac65SKlaus Jensen iocb->req = req; 300438f4ac65SKlaus Jensen iocb->bh = qemu_bh_new(nvme_flush_bh, iocb); 300538f4ac65SKlaus Jensen iocb->ret = 0; 300638f4ac65SKlaus Jensen iocb->ns = NULL; 300738f4ac65SKlaus Jensen iocb->nsid = 0; 300838f4ac65SKlaus Jensen iocb->broadcast = (nsid == NVME_NSID_BROADCAST); 300938f4ac65SKlaus Jensen 301038f4ac65SKlaus Jensen if (!iocb->broadcast) { 301138f4ac65SKlaus Jensen if (!nvme_nsid_valid(n, nsid)) { 301238f4ac65SKlaus Jensen status = NVME_INVALID_NSID | NVME_DNR; 301338f4ac65SKlaus Jensen goto out; 301488eea45cSKlaus Jensen } 301588eea45cSKlaus Jensen 301638f4ac65SKlaus Jensen iocb->ns = nvme_ns(n, nsid); 301738f4ac65SKlaus Jensen if (!iocb->ns) { 301838f4ac65SKlaus Jensen status = NVME_INVALID_FIELD | NVME_DNR; 301938f4ac65SKlaus Jensen goto out; 302038f4ac65SKlaus Jensen } 302138f4ac65SKlaus Jensen 302238f4ac65SKlaus Jensen iocb->nsid = nsid; 302338f4ac65SKlaus Jensen } 302438f4ac65SKlaus Jensen 302538f4ac65SKlaus Jensen req->aiocb = &iocb->common; 302638f4ac65SKlaus Jensen qemu_bh_schedule(iocb->bh); 302738f4ac65SKlaus Jensen 302888eea45cSKlaus Jensen return NVME_NO_COMPLETE; 302988eea45cSKlaus Jensen 303038f4ac65SKlaus Jensen out: 303138f4ac65SKlaus Jensen qemu_bh_delete(iocb->bh); 303238f4ac65SKlaus Jensen iocb->bh = NULL; 303338f4ac65SKlaus Jensen qemu_aio_unref(iocb); 303488eea45cSKlaus Jensen 303588eea45cSKlaus Jensen return status; 303688eea45cSKlaus Jensen } 303788eea45cSKlaus Jensen 303888eea45cSKlaus Jensen static uint16_t nvme_read(NvmeCtrl *n, NvmeRequest *req) 303988eea45cSKlaus Jensen { 304088eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 304188eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 304288eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 304388eea45cSKlaus Jensen uint32_t nlb = (uint32_t)le16_to_cpu(rw->nlb) + 1; 30442a132309SKlaus Jensen uint8_t prinfo = NVME_RW_PRINFO(le16_to_cpu(rw->control)); 304588eea45cSKlaus Jensen uint64_t data_size = nvme_l2b(ns, nlb); 304688eea45cSKlaus Jensen uint64_t mapped_size = data_size; 304788eea45cSKlaus Jensen uint64_t data_offset; 304888eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 304988eea45cSKlaus Jensen uint16_t status; 305088eea45cSKlaus Jensen 305188eea45cSKlaus Jensen if (nvme_ns_ext(ns)) { 305288eea45cSKlaus Jensen mapped_size += nvme_m2b(ns, nlb); 305388eea45cSKlaus Jensen 305488eea45cSKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 30552a132309SKlaus Jensen bool pract = prinfo & NVME_PRINFO_PRACT; 305688eea45cSKlaus Jensen 305788eea45cSKlaus Jensen if (pract && ns->lbaf.ms == 8) { 305888eea45cSKlaus Jensen mapped_size = data_size; 305988eea45cSKlaus Jensen } 306088eea45cSKlaus Jensen } 306188eea45cSKlaus Jensen } 306288eea45cSKlaus Jensen 306388eea45cSKlaus Jensen trace_pci_nvme_read(nvme_cid(req), nvme_nsid(ns), nlb, mapped_size, slba); 306488eea45cSKlaus Jensen 306588eea45cSKlaus Jensen status = nvme_check_mdts(n, mapped_size); 306688eea45cSKlaus Jensen if (status) { 306788eea45cSKlaus Jensen goto invalid; 306888eea45cSKlaus Jensen } 306988eea45cSKlaus Jensen 307088eea45cSKlaus Jensen status = nvme_check_bounds(ns, slba, nlb); 307188eea45cSKlaus Jensen if (status) { 307288eea45cSKlaus Jensen goto invalid; 307388eea45cSKlaus Jensen } 307488eea45cSKlaus Jensen 307588eea45cSKlaus Jensen if (ns->params.zoned) { 307688eea45cSKlaus Jensen status = nvme_check_zone_read(ns, slba, nlb); 307788eea45cSKlaus Jensen if (status) { 307888eea45cSKlaus Jensen trace_pci_nvme_err_zone_read_not_ok(slba, nlb, status); 307988eea45cSKlaus Jensen goto invalid; 308088eea45cSKlaus Jensen } 308188eea45cSKlaus Jensen } 308288eea45cSKlaus Jensen 308388eea45cSKlaus Jensen if (NVME_ERR_REC_DULBE(ns->features.err_rec)) { 308488eea45cSKlaus Jensen status = nvme_check_dulbe(ns, slba, nlb); 308588eea45cSKlaus Jensen if (status) { 308688eea45cSKlaus Jensen goto invalid; 308788eea45cSKlaus Jensen } 308888eea45cSKlaus Jensen } 308988eea45cSKlaus Jensen 309088eea45cSKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 309188eea45cSKlaus Jensen return nvme_dif_rw(n, req); 309288eea45cSKlaus Jensen } 309388eea45cSKlaus Jensen 309488eea45cSKlaus Jensen status = nvme_map_data(n, nlb, req); 309588eea45cSKlaus Jensen if (status) { 309688eea45cSKlaus Jensen goto invalid; 309788eea45cSKlaus Jensen } 309888eea45cSKlaus Jensen 309988eea45cSKlaus Jensen data_offset = nvme_l2b(ns, slba); 310088eea45cSKlaus Jensen 310188eea45cSKlaus Jensen block_acct_start(blk_get_stats(blk), &req->acct, data_size, 310288eea45cSKlaus Jensen BLOCK_ACCT_READ); 310388eea45cSKlaus Jensen nvme_blk_read(blk, data_offset, nvme_rw_cb, req); 310488eea45cSKlaus Jensen return NVME_NO_COMPLETE; 310588eea45cSKlaus Jensen 310688eea45cSKlaus Jensen invalid: 310788eea45cSKlaus Jensen block_acct_invalid(blk_get_stats(blk), BLOCK_ACCT_READ); 310888eea45cSKlaus Jensen return status | NVME_DNR; 310988eea45cSKlaus Jensen } 311088eea45cSKlaus Jensen 311188eea45cSKlaus Jensen static uint16_t nvme_do_write(NvmeCtrl *n, NvmeRequest *req, bool append, 311288eea45cSKlaus Jensen bool wrz) 311388eea45cSKlaus Jensen { 311488eea45cSKlaus Jensen NvmeRwCmd *rw = (NvmeRwCmd *)&req->cmd; 311588eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 311688eea45cSKlaus Jensen uint64_t slba = le64_to_cpu(rw->slba); 311788eea45cSKlaus Jensen uint32_t nlb = (uint32_t)le16_to_cpu(rw->nlb) + 1; 311888eea45cSKlaus Jensen uint16_t ctrl = le16_to_cpu(rw->control); 31192a132309SKlaus Jensen uint8_t prinfo = NVME_RW_PRINFO(ctrl); 312088eea45cSKlaus Jensen uint64_t data_size = nvme_l2b(ns, nlb); 312188eea45cSKlaus Jensen uint64_t mapped_size = data_size; 312288eea45cSKlaus Jensen uint64_t data_offset; 312388eea45cSKlaus Jensen NvmeZone *zone; 312488eea45cSKlaus Jensen NvmeZonedResult *res = (NvmeZonedResult *)&req->cqe; 312588eea45cSKlaus Jensen BlockBackend *blk = ns->blkconf.blk; 312688eea45cSKlaus Jensen uint16_t status; 312788eea45cSKlaus Jensen 312888eea45cSKlaus Jensen if (nvme_ns_ext(ns)) { 312988eea45cSKlaus Jensen mapped_size += nvme_m2b(ns, nlb); 313088eea45cSKlaus Jensen 313188eea45cSKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 31322a132309SKlaus Jensen bool pract = prinfo & NVME_PRINFO_PRACT; 313388eea45cSKlaus Jensen 313488eea45cSKlaus Jensen if (pract && ns->lbaf.ms == 8) { 313588eea45cSKlaus Jensen mapped_size -= nvme_m2b(ns, nlb); 313688eea45cSKlaus Jensen } 313788eea45cSKlaus Jensen } 313888eea45cSKlaus Jensen } 313988eea45cSKlaus Jensen 314088eea45cSKlaus Jensen trace_pci_nvme_write(nvme_cid(req), nvme_io_opc_str(rw->opcode), 314188eea45cSKlaus Jensen nvme_nsid(ns), nlb, mapped_size, slba); 314288eea45cSKlaus Jensen 314388eea45cSKlaus Jensen if (!wrz) { 314488eea45cSKlaus Jensen status = nvme_check_mdts(n, mapped_size); 314588eea45cSKlaus Jensen if (status) { 314688eea45cSKlaus Jensen goto invalid; 314788eea45cSKlaus Jensen } 314888eea45cSKlaus Jensen } 314988eea45cSKlaus Jensen 315088eea45cSKlaus Jensen status = nvme_check_bounds(ns, slba, nlb); 315188eea45cSKlaus Jensen if (status) { 315288eea45cSKlaus Jensen goto invalid; 315388eea45cSKlaus Jensen } 315488eea45cSKlaus Jensen 315588eea45cSKlaus Jensen if (ns->params.zoned) { 315688eea45cSKlaus Jensen zone = nvme_get_zone_by_slba(ns, slba); 3157189a8bf7SKlaus Jensen assert(zone); 315888eea45cSKlaus Jensen 315988eea45cSKlaus Jensen if (append) { 316088eea45cSKlaus Jensen bool piremap = !!(ctrl & NVME_RW_PIREMAP); 316188eea45cSKlaus Jensen 316288eea45cSKlaus Jensen if (unlikely(slba != zone->d.zslba)) { 316388eea45cSKlaus Jensen trace_pci_nvme_err_append_not_at_start(slba, zone->d.zslba); 316488eea45cSKlaus Jensen status = NVME_INVALID_FIELD; 316588eea45cSKlaus Jensen goto invalid; 316688eea45cSKlaus Jensen } 316788eea45cSKlaus Jensen 316888eea45cSKlaus Jensen if (n->params.zasl && 316988eea45cSKlaus Jensen data_size > (uint64_t)n->page_size << n->params.zasl) { 317088eea45cSKlaus Jensen trace_pci_nvme_err_zasl(data_size); 317188eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 317288eea45cSKlaus Jensen } 317388eea45cSKlaus Jensen 317488eea45cSKlaus Jensen slba = zone->w_ptr; 317588eea45cSKlaus Jensen rw->slba = cpu_to_le64(slba); 317688eea45cSKlaus Jensen res->slba = cpu_to_le64(slba); 317788eea45cSKlaus Jensen 317888eea45cSKlaus Jensen switch (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 317988eea45cSKlaus Jensen case NVME_ID_NS_DPS_TYPE_1: 318088eea45cSKlaus Jensen if (!piremap) { 318188eea45cSKlaus Jensen return NVME_INVALID_PROT_INFO | NVME_DNR; 318288eea45cSKlaus Jensen } 318388eea45cSKlaus Jensen 318488eea45cSKlaus Jensen /* fallthrough */ 318588eea45cSKlaus Jensen 318688eea45cSKlaus Jensen case NVME_ID_NS_DPS_TYPE_2: 318788eea45cSKlaus Jensen if (piremap) { 318888eea45cSKlaus Jensen uint32_t reftag = le32_to_cpu(rw->reftag); 318988eea45cSKlaus Jensen rw->reftag = cpu_to_le32(reftag + (slba - zone->d.zslba)); 319088eea45cSKlaus Jensen } 319188eea45cSKlaus Jensen 319288eea45cSKlaus Jensen break; 319388eea45cSKlaus Jensen 319488eea45cSKlaus Jensen case NVME_ID_NS_DPS_TYPE_3: 319588eea45cSKlaus Jensen if (piremap) { 319688eea45cSKlaus Jensen return NVME_INVALID_PROT_INFO | NVME_DNR; 319788eea45cSKlaus Jensen } 319888eea45cSKlaus Jensen 319988eea45cSKlaus Jensen break; 320088eea45cSKlaus Jensen } 320188eea45cSKlaus Jensen } 320288eea45cSKlaus Jensen 320388eea45cSKlaus Jensen status = nvme_check_zone_write(ns, zone, slba, nlb); 320488eea45cSKlaus Jensen if (status) { 320588eea45cSKlaus Jensen goto invalid; 320688eea45cSKlaus Jensen } 320788eea45cSKlaus Jensen 3208cccc2651SNiklas Cassel status = nvme_zrm_auto(n, ns, zone); 320988eea45cSKlaus Jensen if (status) { 321088eea45cSKlaus Jensen goto invalid; 321188eea45cSKlaus Jensen } 321288eea45cSKlaus Jensen 321388eea45cSKlaus Jensen zone->w_ptr += nlb; 321488eea45cSKlaus Jensen } 321588eea45cSKlaus Jensen 321688eea45cSKlaus Jensen data_offset = nvme_l2b(ns, slba); 321788eea45cSKlaus Jensen 321888eea45cSKlaus Jensen if (NVME_ID_NS_DPS_TYPE(ns->id_ns.dps)) { 321988eea45cSKlaus Jensen return nvme_dif_rw(n, req); 322088eea45cSKlaus Jensen } 322188eea45cSKlaus Jensen 322288eea45cSKlaus Jensen if (!wrz) { 322388eea45cSKlaus Jensen status = nvme_map_data(n, nlb, req); 322488eea45cSKlaus Jensen if (status) { 322588eea45cSKlaus Jensen goto invalid; 322688eea45cSKlaus Jensen } 322788eea45cSKlaus Jensen 322888eea45cSKlaus Jensen block_acct_start(blk_get_stats(blk), &req->acct, data_size, 322988eea45cSKlaus Jensen BLOCK_ACCT_WRITE); 323088eea45cSKlaus Jensen nvme_blk_write(blk, data_offset, nvme_rw_cb, req); 323188eea45cSKlaus Jensen } else { 323288eea45cSKlaus Jensen req->aiocb = blk_aio_pwrite_zeroes(blk, data_offset, data_size, 323388eea45cSKlaus Jensen BDRV_REQ_MAY_UNMAP, nvme_rw_cb, 323488eea45cSKlaus Jensen req); 323588eea45cSKlaus Jensen } 323688eea45cSKlaus Jensen 323788eea45cSKlaus Jensen return NVME_NO_COMPLETE; 323888eea45cSKlaus Jensen 323988eea45cSKlaus Jensen invalid: 324088eea45cSKlaus Jensen block_acct_invalid(blk_get_stats(blk), BLOCK_ACCT_WRITE); 324188eea45cSKlaus Jensen return status | NVME_DNR; 324288eea45cSKlaus Jensen } 324388eea45cSKlaus Jensen 324488eea45cSKlaus Jensen static inline uint16_t nvme_write(NvmeCtrl *n, NvmeRequest *req) 324588eea45cSKlaus Jensen { 324688eea45cSKlaus Jensen return nvme_do_write(n, req, false, false); 324788eea45cSKlaus Jensen } 324888eea45cSKlaus Jensen 324988eea45cSKlaus Jensen static inline uint16_t nvme_write_zeroes(NvmeCtrl *n, NvmeRequest *req) 325088eea45cSKlaus Jensen { 325188eea45cSKlaus Jensen return nvme_do_write(n, req, false, true); 325288eea45cSKlaus Jensen } 325388eea45cSKlaus Jensen 325488eea45cSKlaus Jensen static inline uint16_t nvme_zone_append(NvmeCtrl *n, NvmeRequest *req) 325588eea45cSKlaus Jensen { 325688eea45cSKlaus Jensen return nvme_do_write(n, req, true, false); 325788eea45cSKlaus Jensen } 325888eea45cSKlaus Jensen 325988eea45cSKlaus Jensen static uint16_t nvme_get_mgmt_zone_slba_idx(NvmeNamespace *ns, NvmeCmd *c, 326088eea45cSKlaus Jensen uint64_t *slba, uint32_t *zone_idx) 326188eea45cSKlaus Jensen { 326288eea45cSKlaus Jensen uint32_t dw10 = le32_to_cpu(c->cdw10); 326388eea45cSKlaus Jensen uint32_t dw11 = le32_to_cpu(c->cdw11); 326488eea45cSKlaus Jensen 326588eea45cSKlaus Jensen if (!ns->params.zoned) { 326688eea45cSKlaus Jensen trace_pci_nvme_err_invalid_opc(c->opcode); 326788eea45cSKlaus Jensen return NVME_INVALID_OPCODE | NVME_DNR; 326888eea45cSKlaus Jensen } 326988eea45cSKlaus Jensen 327088eea45cSKlaus Jensen *slba = ((uint64_t)dw11) << 32 | dw10; 327188eea45cSKlaus Jensen if (unlikely(*slba >= ns->id_ns.nsze)) { 327288eea45cSKlaus Jensen trace_pci_nvme_err_invalid_lba_range(*slba, 0, ns->id_ns.nsze); 327388eea45cSKlaus Jensen *slba = 0; 327488eea45cSKlaus Jensen return NVME_LBA_RANGE | NVME_DNR; 327588eea45cSKlaus Jensen } 327688eea45cSKlaus Jensen 327788eea45cSKlaus Jensen *zone_idx = nvme_zone_idx(ns, *slba); 327888eea45cSKlaus Jensen assert(*zone_idx < ns->num_zones); 327988eea45cSKlaus Jensen 328088eea45cSKlaus Jensen return NVME_SUCCESS; 328188eea45cSKlaus Jensen } 328288eea45cSKlaus Jensen 328388eea45cSKlaus Jensen typedef uint16_t (*op_handler_t)(NvmeNamespace *, NvmeZone *, NvmeZoneState, 328488eea45cSKlaus Jensen NvmeRequest *); 328588eea45cSKlaus Jensen 328688eea45cSKlaus Jensen enum NvmeZoneProcessingMask { 328788eea45cSKlaus Jensen NVME_PROC_CURRENT_ZONE = 0, 328888eea45cSKlaus Jensen NVME_PROC_OPENED_ZONES = 1 << 0, 328988eea45cSKlaus Jensen NVME_PROC_CLOSED_ZONES = 1 << 1, 329088eea45cSKlaus Jensen NVME_PROC_READ_ONLY_ZONES = 1 << 2, 329188eea45cSKlaus Jensen NVME_PROC_FULL_ZONES = 1 << 3, 329288eea45cSKlaus Jensen }; 329388eea45cSKlaus Jensen 329488eea45cSKlaus Jensen static uint16_t nvme_open_zone(NvmeNamespace *ns, NvmeZone *zone, 329588eea45cSKlaus Jensen NvmeZoneState state, NvmeRequest *req) 329688eea45cSKlaus Jensen { 3297cccc2651SNiklas Cassel return nvme_zrm_open(nvme_ctrl(req), ns, zone); 329888eea45cSKlaus Jensen } 329988eea45cSKlaus Jensen 330088eea45cSKlaus Jensen static uint16_t nvme_close_zone(NvmeNamespace *ns, NvmeZone *zone, 330188eea45cSKlaus Jensen NvmeZoneState state, NvmeRequest *req) 330288eea45cSKlaus Jensen { 330388eea45cSKlaus Jensen return nvme_zrm_close(ns, zone); 330488eea45cSKlaus Jensen } 330588eea45cSKlaus Jensen 330688eea45cSKlaus Jensen static uint16_t nvme_finish_zone(NvmeNamespace *ns, NvmeZone *zone, 330788eea45cSKlaus Jensen NvmeZoneState state, NvmeRequest *req) 330888eea45cSKlaus Jensen { 330988eea45cSKlaus Jensen return nvme_zrm_finish(ns, zone); 331088eea45cSKlaus Jensen } 331188eea45cSKlaus Jensen 331288eea45cSKlaus Jensen static uint16_t nvme_offline_zone(NvmeNamespace *ns, NvmeZone *zone, 331388eea45cSKlaus Jensen NvmeZoneState state, NvmeRequest *req) 331488eea45cSKlaus Jensen { 331588eea45cSKlaus Jensen switch (state) { 331688eea45cSKlaus Jensen case NVME_ZONE_STATE_READ_ONLY: 331788eea45cSKlaus Jensen nvme_assign_zone_state(ns, zone, NVME_ZONE_STATE_OFFLINE); 331888eea45cSKlaus Jensen /* fall through */ 331988eea45cSKlaus Jensen case NVME_ZONE_STATE_OFFLINE: 332088eea45cSKlaus Jensen return NVME_SUCCESS; 332188eea45cSKlaus Jensen default: 332288eea45cSKlaus Jensen return NVME_ZONE_INVAL_TRANSITION; 332388eea45cSKlaus Jensen } 332488eea45cSKlaus Jensen } 332588eea45cSKlaus Jensen 332688eea45cSKlaus Jensen static uint16_t nvme_set_zd_ext(NvmeNamespace *ns, NvmeZone *zone) 332788eea45cSKlaus Jensen { 332888eea45cSKlaus Jensen uint16_t status; 332988eea45cSKlaus Jensen uint8_t state = nvme_get_zone_state(zone); 333088eea45cSKlaus Jensen 333188eea45cSKlaus Jensen if (state == NVME_ZONE_STATE_EMPTY) { 333288eea45cSKlaus Jensen status = nvme_aor_check(ns, 1, 0); 333388eea45cSKlaus Jensen if (status) { 333488eea45cSKlaus Jensen return status; 333588eea45cSKlaus Jensen } 333688eea45cSKlaus Jensen nvme_aor_inc_active(ns); 333788eea45cSKlaus Jensen zone->d.za |= NVME_ZA_ZD_EXT_VALID; 333888eea45cSKlaus Jensen nvme_assign_zone_state(ns, zone, NVME_ZONE_STATE_CLOSED); 333988eea45cSKlaus Jensen return NVME_SUCCESS; 334088eea45cSKlaus Jensen } 334188eea45cSKlaus Jensen 334288eea45cSKlaus Jensen return NVME_ZONE_INVAL_TRANSITION; 334388eea45cSKlaus Jensen } 334488eea45cSKlaus Jensen 334588eea45cSKlaus Jensen static uint16_t nvme_bulk_proc_zone(NvmeNamespace *ns, NvmeZone *zone, 334688eea45cSKlaus Jensen enum NvmeZoneProcessingMask proc_mask, 334788eea45cSKlaus Jensen op_handler_t op_hndlr, NvmeRequest *req) 334888eea45cSKlaus Jensen { 334988eea45cSKlaus Jensen uint16_t status = NVME_SUCCESS; 335088eea45cSKlaus Jensen NvmeZoneState zs = nvme_get_zone_state(zone); 335188eea45cSKlaus Jensen bool proc_zone; 335288eea45cSKlaus Jensen 335388eea45cSKlaus Jensen switch (zs) { 335488eea45cSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 335588eea45cSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 335688eea45cSKlaus Jensen proc_zone = proc_mask & NVME_PROC_OPENED_ZONES; 335788eea45cSKlaus Jensen break; 335888eea45cSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 335988eea45cSKlaus Jensen proc_zone = proc_mask & NVME_PROC_CLOSED_ZONES; 336088eea45cSKlaus Jensen break; 336188eea45cSKlaus Jensen case NVME_ZONE_STATE_READ_ONLY: 336288eea45cSKlaus Jensen proc_zone = proc_mask & NVME_PROC_READ_ONLY_ZONES; 336388eea45cSKlaus Jensen break; 336488eea45cSKlaus Jensen case NVME_ZONE_STATE_FULL: 336588eea45cSKlaus Jensen proc_zone = proc_mask & NVME_PROC_FULL_ZONES; 336688eea45cSKlaus Jensen break; 336788eea45cSKlaus Jensen default: 336888eea45cSKlaus Jensen proc_zone = false; 336988eea45cSKlaus Jensen } 337088eea45cSKlaus Jensen 337188eea45cSKlaus Jensen if (proc_zone) { 337288eea45cSKlaus Jensen status = op_hndlr(ns, zone, zs, req); 337388eea45cSKlaus Jensen } 337488eea45cSKlaus Jensen 337588eea45cSKlaus Jensen return status; 337688eea45cSKlaus Jensen } 337788eea45cSKlaus Jensen 337888eea45cSKlaus Jensen static uint16_t nvme_do_zone_op(NvmeNamespace *ns, NvmeZone *zone, 337988eea45cSKlaus Jensen enum NvmeZoneProcessingMask proc_mask, 338088eea45cSKlaus Jensen op_handler_t op_hndlr, NvmeRequest *req) 338188eea45cSKlaus Jensen { 338288eea45cSKlaus Jensen NvmeZone *next; 338388eea45cSKlaus Jensen uint16_t status = NVME_SUCCESS; 338488eea45cSKlaus Jensen int i; 338588eea45cSKlaus Jensen 338688eea45cSKlaus Jensen if (!proc_mask) { 338788eea45cSKlaus Jensen status = op_hndlr(ns, zone, nvme_get_zone_state(zone), req); 338888eea45cSKlaus Jensen } else { 338988eea45cSKlaus Jensen if (proc_mask & NVME_PROC_CLOSED_ZONES) { 339088eea45cSKlaus Jensen QTAILQ_FOREACH_SAFE(zone, &ns->closed_zones, entry, next) { 339188eea45cSKlaus Jensen status = nvme_bulk_proc_zone(ns, zone, proc_mask, op_hndlr, 339288eea45cSKlaus Jensen req); 339388eea45cSKlaus Jensen if (status && status != NVME_NO_COMPLETE) { 339488eea45cSKlaus Jensen goto out; 339588eea45cSKlaus Jensen } 339688eea45cSKlaus Jensen } 339788eea45cSKlaus Jensen } 339888eea45cSKlaus Jensen if (proc_mask & NVME_PROC_OPENED_ZONES) { 339988eea45cSKlaus Jensen QTAILQ_FOREACH_SAFE(zone, &ns->imp_open_zones, entry, next) { 340088eea45cSKlaus Jensen status = nvme_bulk_proc_zone(ns, zone, proc_mask, op_hndlr, 340188eea45cSKlaus Jensen req); 340288eea45cSKlaus Jensen if (status && status != NVME_NO_COMPLETE) { 340388eea45cSKlaus Jensen goto out; 340488eea45cSKlaus Jensen } 340588eea45cSKlaus Jensen } 340688eea45cSKlaus Jensen 340788eea45cSKlaus Jensen QTAILQ_FOREACH_SAFE(zone, &ns->exp_open_zones, entry, next) { 340888eea45cSKlaus Jensen status = nvme_bulk_proc_zone(ns, zone, proc_mask, op_hndlr, 340988eea45cSKlaus Jensen req); 341088eea45cSKlaus Jensen if (status && status != NVME_NO_COMPLETE) { 341188eea45cSKlaus Jensen goto out; 341288eea45cSKlaus Jensen } 341388eea45cSKlaus Jensen } 341488eea45cSKlaus Jensen } 341588eea45cSKlaus Jensen if (proc_mask & NVME_PROC_FULL_ZONES) { 341688eea45cSKlaus Jensen QTAILQ_FOREACH_SAFE(zone, &ns->full_zones, entry, next) { 341788eea45cSKlaus Jensen status = nvme_bulk_proc_zone(ns, zone, proc_mask, op_hndlr, 341888eea45cSKlaus Jensen req); 341988eea45cSKlaus Jensen if (status && status != NVME_NO_COMPLETE) { 342088eea45cSKlaus Jensen goto out; 342188eea45cSKlaus Jensen } 342288eea45cSKlaus Jensen } 342388eea45cSKlaus Jensen } 342488eea45cSKlaus Jensen 342588eea45cSKlaus Jensen if (proc_mask & NVME_PROC_READ_ONLY_ZONES) { 342688eea45cSKlaus Jensen for (i = 0; i < ns->num_zones; i++, zone++) { 342788eea45cSKlaus Jensen status = nvme_bulk_proc_zone(ns, zone, proc_mask, op_hndlr, 342888eea45cSKlaus Jensen req); 342988eea45cSKlaus Jensen if (status && status != NVME_NO_COMPLETE) { 343088eea45cSKlaus Jensen goto out; 343188eea45cSKlaus Jensen } 343288eea45cSKlaus Jensen } 343388eea45cSKlaus Jensen } 343488eea45cSKlaus Jensen } 343588eea45cSKlaus Jensen 343688eea45cSKlaus Jensen out: 343788eea45cSKlaus Jensen return status; 343888eea45cSKlaus Jensen } 343988eea45cSKlaus Jensen 344063d96e4fSKlaus Jensen typedef struct NvmeZoneResetAIOCB { 344163d96e4fSKlaus Jensen BlockAIOCB common; 344263d96e4fSKlaus Jensen BlockAIOCB *aiocb; 344363d96e4fSKlaus Jensen NvmeRequest *req; 344463d96e4fSKlaus Jensen QEMUBH *bh; 344563d96e4fSKlaus Jensen int ret; 344663d96e4fSKlaus Jensen 344763d96e4fSKlaus Jensen bool all; 344863d96e4fSKlaus Jensen int idx; 344963d96e4fSKlaus Jensen NvmeZone *zone; 345063d96e4fSKlaus Jensen } NvmeZoneResetAIOCB; 345163d96e4fSKlaus Jensen 345263d96e4fSKlaus Jensen static void nvme_zone_reset_cancel(BlockAIOCB *aiocb) 345363d96e4fSKlaus Jensen { 345463d96e4fSKlaus Jensen NvmeZoneResetAIOCB *iocb = container_of(aiocb, NvmeZoneResetAIOCB, common); 345563d96e4fSKlaus Jensen NvmeRequest *req = iocb->req; 345663d96e4fSKlaus Jensen NvmeNamespace *ns = req->ns; 345763d96e4fSKlaus Jensen 345863d96e4fSKlaus Jensen iocb->idx = ns->num_zones; 345963d96e4fSKlaus Jensen 346063d96e4fSKlaus Jensen iocb->ret = -ECANCELED; 346163d96e4fSKlaus Jensen 346263d96e4fSKlaus Jensen if (iocb->aiocb) { 346363d96e4fSKlaus Jensen blk_aio_cancel_async(iocb->aiocb); 346463d96e4fSKlaus Jensen iocb->aiocb = NULL; 346563d96e4fSKlaus Jensen } 346663d96e4fSKlaus Jensen } 346763d96e4fSKlaus Jensen 346863d96e4fSKlaus Jensen static const AIOCBInfo nvme_zone_reset_aiocb_info = { 346963d96e4fSKlaus Jensen .aiocb_size = sizeof(NvmeZoneResetAIOCB), 347063d96e4fSKlaus Jensen .cancel_async = nvme_zone_reset_cancel, 347163d96e4fSKlaus Jensen }; 347263d96e4fSKlaus Jensen 347363d96e4fSKlaus Jensen static void nvme_zone_reset_bh(void *opaque) 347463d96e4fSKlaus Jensen { 347563d96e4fSKlaus Jensen NvmeZoneResetAIOCB *iocb = opaque; 347663d96e4fSKlaus Jensen 347763d96e4fSKlaus Jensen iocb->common.cb(iocb->common.opaque, iocb->ret); 347863d96e4fSKlaus Jensen 347963d96e4fSKlaus Jensen qemu_bh_delete(iocb->bh); 348063d96e4fSKlaus Jensen iocb->bh = NULL; 348163d96e4fSKlaus Jensen qemu_aio_unref(iocb); 348263d96e4fSKlaus Jensen } 348363d96e4fSKlaus Jensen 348463d96e4fSKlaus Jensen static void nvme_zone_reset_cb(void *opaque, int ret); 348563d96e4fSKlaus Jensen 348663d96e4fSKlaus Jensen static void nvme_zone_reset_epilogue_cb(void *opaque, int ret) 348763d96e4fSKlaus Jensen { 348863d96e4fSKlaus Jensen NvmeZoneResetAIOCB *iocb = opaque; 348963d96e4fSKlaus Jensen NvmeRequest *req = iocb->req; 349063d96e4fSKlaus Jensen NvmeNamespace *ns = req->ns; 349163d96e4fSKlaus Jensen int64_t moff; 349263d96e4fSKlaus Jensen int count; 349363d96e4fSKlaus Jensen 349463d96e4fSKlaus Jensen if (ret < 0) { 349563d96e4fSKlaus Jensen nvme_zone_reset_cb(iocb, ret); 349663d96e4fSKlaus Jensen return; 349763d96e4fSKlaus Jensen } 349863d96e4fSKlaus Jensen 349963d96e4fSKlaus Jensen if (!ns->lbaf.ms) { 350063d96e4fSKlaus Jensen nvme_zone_reset_cb(iocb, 0); 350163d96e4fSKlaus Jensen return; 350263d96e4fSKlaus Jensen } 350363d96e4fSKlaus Jensen 350463d96e4fSKlaus Jensen moff = nvme_moff(ns, iocb->zone->d.zslba); 350563d96e4fSKlaus Jensen count = nvme_m2b(ns, ns->zone_size); 350663d96e4fSKlaus Jensen 350763d96e4fSKlaus Jensen iocb->aiocb = blk_aio_pwrite_zeroes(ns->blkconf.blk, moff, count, 350863d96e4fSKlaus Jensen BDRV_REQ_MAY_UNMAP, 350963d96e4fSKlaus Jensen nvme_zone_reset_cb, iocb); 351063d96e4fSKlaus Jensen return; 351163d96e4fSKlaus Jensen } 351263d96e4fSKlaus Jensen 351363d96e4fSKlaus Jensen static void nvme_zone_reset_cb(void *opaque, int ret) 351463d96e4fSKlaus Jensen { 351563d96e4fSKlaus Jensen NvmeZoneResetAIOCB *iocb = opaque; 351663d96e4fSKlaus Jensen NvmeRequest *req = iocb->req; 351763d96e4fSKlaus Jensen NvmeNamespace *ns = req->ns; 351863d96e4fSKlaus Jensen 351963d96e4fSKlaus Jensen if (ret < 0) { 352063d96e4fSKlaus Jensen iocb->ret = ret; 352163d96e4fSKlaus Jensen goto done; 352263d96e4fSKlaus Jensen } 352363d96e4fSKlaus Jensen 352463d96e4fSKlaus Jensen if (iocb->zone) { 352563d96e4fSKlaus Jensen nvme_zrm_reset(ns, iocb->zone); 352663d96e4fSKlaus Jensen 352763d96e4fSKlaus Jensen if (!iocb->all) { 352863d96e4fSKlaus Jensen goto done; 352963d96e4fSKlaus Jensen } 353063d96e4fSKlaus Jensen } 353163d96e4fSKlaus Jensen 353263d96e4fSKlaus Jensen while (iocb->idx < ns->num_zones) { 353363d96e4fSKlaus Jensen NvmeZone *zone = &ns->zone_array[iocb->idx++]; 353463d96e4fSKlaus Jensen 353563d96e4fSKlaus Jensen switch (nvme_get_zone_state(zone)) { 353663d96e4fSKlaus Jensen case NVME_ZONE_STATE_EMPTY: 353763d96e4fSKlaus Jensen if (!iocb->all) { 353863d96e4fSKlaus Jensen goto done; 353963d96e4fSKlaus Jensen } 354063d96e4fSKlaus Jensen 354163d96e4fSKlaus Jensen continue; 354263d96e4fSKlaus Jensen 354363d96e4fSKlaus Jensen case NVME_ZONE_STATE_EXPLICITLY_OPEN: 354463d96e4fSKlaus Jensen case NVME_ZONE_STATE_IMPLICITLY_OPEN: 354563d96e4fSKlaus Jensen case NVME_ZONE_STATE_CLOSED: 354663d96e4fSKlaus Jensen case NVME_ZONE_STATE_FULL: 354763d96e4fSKlaus Jensen iocb->zone = zone; 354863d96e4fSKlaus Jensen break; 354963d96e4fSKlaus Jensen 355063d96e4fSKlaus Jensen default: 355163d96e4fSKlaus Jensen continue; 355263d96e4fSKlaus Jensen } 355363d96e4fSKlaus Jensen 355463d96e4fSKlaus Jensen trace_pci_nvme_zns_zone_reset(zone->d.zslba); 355563d96e4fSKlaus Jensen 355663d96e4fSKlaus Jensen iocb->aiocb = blk_aio_pwrite_zeroes(ns->blkconf.blk, 355763d96e4fSKlaus Jensen nvme_l2b(ns, zone->d.zslba), 355863d96e4fSKlaus Jensen nvme_l2b(ns, ns->zone_size), 355963d96e4fSKlaus Jensen BDRV_REQ_MAY_UNMAP, 356063d96e4fSKlaus Jensen nvme_zone_reset_epilogue_cb, 356163d96e4fSKlaus Jensen iocb); 356263d96e4fSKlaus Jensen return; 356363d96e4fSKlaus Jensen } 356463d96e4fSKlaus Jensen 356563d96e4fSKlaus Jensen done: 356663d96e4fSKlaus Jensen iocb->aiocb = NULL; 356763d96e4fSKlaus Jensen if (iocb->bh) { 356863d96e4fSKlaus Jensen qemu_bh_schedule(iocb->bh); 356963d96e4fSKlaus Jensen } 357063d96e4fSKlaus Jensen } 357163d96e4fSKlaus Jensen 357288eea45cSKlaus Jensen static uint16_t nvme_zone_mgmt_send(NvmeCtrl *n, NvmeRequest *req) 357388eea45cSKlaus Jensen { 357488eea45cSKlaus Jensen NvmeCmd *cmd = (NvmeCmd *)&req->cmd; 357588eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 357688eea45cSKlaus Jensen NvmeZone *zone; 357763d96e4fSKlaus Jensen NvmeZoneResetAIOCB *iocb; 357888eea45cSKlaus Jensen uint8_t *zd_ext; 357988eea45cSKlaus Jensen uint32_t dw13 = le32_to_cpu(cmd->cdw13); 358088eea45cSKlaus Jensen uint64_t slba = 0; 358188eea45cSKlaus Jensen uint32_t zone_idx = 0; 358288eea45cSKlaus Jensen uint16_t status; 358388eea45cSKlaus Jensen uint8_t action; 358488eea45cSKlaus Jensen bool all; 358588eea45cSKlaus Jensen enum NvmeZoneProcessingMask proc_mask = NVME_PROC_CURRENT_ZONE; 358688eea45cSKlaus Jensen 358788eea45cSKlaus Jensen action = dw13 & 0xff; 358863d96e4fSKlaus Jensen all = !!(dw13 & 0x100); 358988eea45cSKlaus Jensen 359088eea45cSKlaus Jensen req->status = NVME_SUCCESS; 359188eea45cSKlaus Jensen 359288eea45cSKlaus Jensen if (!all) { 359388eea45cSKlaus Jensen status = nvme_get_mgmt_zone_slba_idx(ns, cmd, &slba, &zone_idx); 359488eea45cSKlaus Jensen if (status) { 359588eea45cSKlaus Jensen return status; 359688eea45cSKlaus Jensen } 359788eea45cSKlaus Jensen } 359888eea45cSKlaus Jensen 359988eea45cSKlaus Jensen zone = &ns->zone_array[zone_idx]; 360088eea45cSKlaus Jensen if (slba != zone->d.zslba) { 360188eea45cSKlaus Jensen trace_pci_nvme_err_unaligned_zone_cmd(action, slba, zone->d.zslba); 360288eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 360388eea45cSKlaus Jensen } 360488eea45cSKlaus Jensen 360588eea45cSKlaus Jensen switch (action) { 360688eea45cSKlaus Jensen 360788eea45cSKlaus Jensen case NVME_ZONE_ACTION_OPEN: 360888eea45cSKlaus Jensen if (all) { 360988eea45cSKlaus Jensen proc_mask = NVME_PROC_CLOSED_ZONES; 361088eea45cSKlaus Jensen } 361188eea45cSKlaus Jensen trace_pci_nvme_open_zone(slba, zone_idx, all); 361288eea45cSKlaus Jensen status = nvme_do_zone_op(ns, zone, proc_mask, nvme_open_zone, req); 361388eea45cSKlaus Jensen break; 361488eea45cSKlaus Jensen 361588eea45cSKlaus Jensen case NVME_ZONE_ACTION_CLOSE: 361688eea45cSKlaus Jensen if (all) { 361788eea45cSKlaus Jensen proc_mask = NVME_PROC_OPENED_ZONES; 361888eea45cSKlaus Jensen } 361988eea45cSKlaus Jensen trace_pci_nvme_close_zone(slba, zone_idx, all); 362088eea45cSKlaus Jensen status = nvme_do_zone_op(ns, zone, proc_mask, nvme_close_zone, req); 362188eea45cSKlaus Jensen break; 362288eea45cSKlaus Jensen 362388eea45cSKlaus Jensen case NVME_ZONE_ACTION_FINISH: 362488eea45cSKlaus Jensen if (all) { 362588eea45cSKlaus Jensen proc_mask = NVME_PROC_OPENED_ZONES | NVME_PROC_CLOSED_ZONES; 362688eea45cSKlaus Jensen } 362788eea45cSKlaus Jensen trace_pci_nvme_finish_zone(slba, zone_idx, all); 362888eea45cSKlaus Jensen status = nvme_do_zone_op(ns, zone, proc_mask, nvme_finish_zone, req); 362988eea45cSKlaus Jensen break; 363088eea45cSKlaus Jensen 363188eea45cSKlaus Jensen case NVME_ZONE_ACTION_RESET: 363288eea45cSKlaus Jensen trace_pci_nvme_reset_zone(slba, zone_idx, all); 363388eea45cSKlaus Jensen 363463d96e4fSKlaus Jensen iocb = blk_aio_get(&nvme_zone_reset_aiocb_info, ns->blkconf.blk, 363563d96e4fSKlaus Jensen nvme_misc_cb, req); 363688eea45cSKlaus Jensen 363763d96e4fSKlaus Jensen iocb->req = req; 363863d96e4fSKlaus Jensen iocb->bh = qemu_bh_new(nvme_zone_reset_bh, iocb); 363963d96e4fSKlaus Jensen iocb->ret = 0; 364063d96e4fSKlaus Jensen iocb->all = all; 364163d96e4fSKlaus Jensen iocb->idx = zone_idx; 364263d96e4fSKlaus Jensen iocb->zone = NULL; 364388eea45cSKlaus Jensen 364463d96e4fSKlaus Jensen req->aiocb = &iocb->common; 364563d96e4fSKlaus Jensen nvme_zone_reset_cb(iocb, 0); 364688eea45cSKlaus Jensen 364763d96e4fSKlaus Jensen return NVME_NO_COMPLETE; 364888eea45cSKlaus Jensen 364988eea45cSKlaus Jensen case NVME_ZONE_ACTION_OFFLINE: 365088eea45cSKlaus Jensen if (all) { 365188eea45cSKlaus Jensen proc_mask = NVME_PROC_READ_ONLY_ZONES; 365288eea45cSKlaus Jensen } 365388eea45cSKlaus Jensen trace_pci_nvme_offline_zone(slba, zone_idx, all); 365488eea45cSKlaus Jensen status = nvme_do_zone_op(ns, zone, proc_mask, nvme_offline_zone, req); 365588eea45cSKlaus Jensen break; 365688eea45cSKlaus Jensen 365788eea45cSKlaus Jensen case NVME_ZONE_ACTION_SET_ZD_EXT: 365888eea45cSKlaus Jensen trace_pci_nvme_set_descriptor_extension(slba, zone_idx); 365988eea45cSKlaus Jensen if (all || !ns->params.zd_extension_size) { 366088eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 366188eea45cSKlaus Jensen } 366288eea45cSKlaus Jensen zd_ext = nvme_get_zd_extension(ns, zone_idx); 366388eea45cSKlaus Jensen status = nvme_h2c(n, zd_ext, ns->params.zd_extension_size, req); 366488eea45cSKlaus Jensen if (status) { 366588eea45cSKlaus Jensen trace_pci_nvme_err_zd_extension_map_error(zone_idx); 366688eea45cSKlaus Jensen return status; 366788eea45cSKlaus Jensen } 366888eea45cSKlaus Jensen 366988eea45cSKlaus Jensen status = nvme_set_zd_ext(ns, zone); 367088eea45cSKlaus Jensen if (status == NVME_SUCCESS) { 367188eea45cSKlaus Jensen trace_pci_nvme_zd_extension_set(zone_idx); 367288eea45cSKlaus Jensen return status; 367388eea45cSKlaus Jensen } 367488eea45cSKlaus Jensen break; 367588eea45cSKlaus Jensen 367688eea45cSKlaus Jensen default: 367788eea45cSKlaus Jensen trace_pci_nvme_err_invalid_mgmt_action(action); 367888eea45cSKlaus Jensen status = NVME_INVALID_FIELD; 367988eea45cSKlaus Jensen } 368088eea45cSKlaus Jensen 368188eea45cSKlaus Jensen if (status == NVME_ZONE_INVAL_TRANSITION) { 368288eea45cSKlaus Jensen trace_pci_nvme_err_invalid_zone_state_transition(action, slba, 368388eea45cSKlaus Jensen zone->d.za); 368488eea45cSKlaus Jensen } 368588eea45cSKlaus Jensen if (status) { 368688eea45cSKlaus Jensen status |= NVME_DNR; 368788eea45cSKlaus Jensen } 368888eea45cSKlaus Jensen 368988eea45cSKlaus Jensen return status; 369088eea45cSKlaus Jensen } 369188eea45cSKlaus Jensen 369288eea45cSKlaus Jensen static bool nvme_zone_matches_filter(uint32_t zafs, NvmeZone *zl) 369388eea45cSKlaus Jensen { 369488eea45cSKlaus Jensen NvmeZoneState zs = nvme_get_zone_state(zl); 369588eea45cSKlaus Jensen 369688eea45cSKlaus Jensen switch (zafs) { 369788eea45cSKlaus Jensen case NVME_ZONE_REPORT_ALL: 369888eea45cSKlaus Jensen return true; 369988eea45cSKlaus Jensen case NVME_ZONE_REPORT_EMPTY: 370088eea45cSKlaus Jensen return zs == NVME_ZONE_STATE_EMPTY; 370188eea45cSKlaus Jensen case NVME_ZONE_REPORT_IMPLICITLY_OPEN: 370288eea45cSKlaus Jensen return zs == NVME_ZONE_STATE_IMPLICITLY_OPEN; 370388eea45cSKlaus Jensen case NVME_ZONE_REPORT_EXPLICITLY_OPEN: 370488eea45cSKlaus Jensen return zs == NVME_ZONE_STATE_EXPLICITLY_OPEN; 370588eea45cSKlaus Jensen case NVME_ZONE_REPORT_CLOSED: 370688eea45cSKlaus Jensen return zs == NVME_ZONE_STATE_CLOSED; 370788eea45cSKlaus Jensen case NVME_ZONE_REPORT_FULL: 370888eea45cSKlaus Jensen return zs == NVME_ZONE_STATE_FULL; 370988eea45cSKlaus Jensen case NVME_ZONE_REPORT_READ_ONLY: 371088eea45cSKlaus Jensen return zs == NVME_ZONE_STATE_READ_ONLY; 371188eea45cSKlaus Jensen case NVME_ZONE_REPORT_OFFLINE: 371288eea45cSKlaus Jensen return zs == NVME_ZONE_STATE_OFFLINE; 371388eea45cSKlaus Jensen default: 371488eea45cSKlaus Jensen return false; 371588eea45cSKlaus Jensen } 371688eea45cSKlaus Jensen } 371788eea45cSKlaus Jensen 371888eea45cSKlaus Jensen static uint16_t nvme_zone_mgmt_recv(NvmeCtrl *n, NvmeRequest *req) 371988eea45cSKlaus Jensen { 372088eea45cSKlaus Jensen NvmeCmd *cmd = (NvmeCmd *)&req->cmd; 372188eea45cSKlaus Jensen NvmeNamespace *ns = req->ns; 372288eea45cSKlaus Jensen /* cdw12 is zero-based number of dwords to return. Convert to bytes */ 372388eea45cSKlaus Jensen uint32_t data_size = (le32_to_cpu(cmd->cdw12) + 1) << 2; 372488eea45cSKlaus Jensen uint32_t dw13 = le32_to_cpu(cmd->cdw13); 372588eea45cSKlaus Jensen uint32_t zone_idx, zra, zrasf, partial; 372688eea45cSKlaus Jensen uint64_t max_zones, nr_zones = 0; 372788eea45cSKlaus Jensen uint16_t status; 372888eea45cSKlaus Jensen uint64_t slba; 372988eea45cSKlaus Jensen NvmeZoneDescr *z; 373088eea45cSKlaus Jensen NvmeZone *zone; 373188eea45cSKlaus Jensen NvmeZoneReportHeader *header; 373288eea45cSKlaus Jensen void *buf, *buf_p; 373388eea45cSKlaus Jensen size_t zone_entry_sz; 373488eea45cSKlaus Jensen int i; 373588eea45cSKlaus Jensen 373688eea45cSKlaus Jensen req->status = NVME_SUCCESS; 373788eea45cSKlaus Jensen 373888eea45cSKlaus Jensen status = nvme_get_mgmt_zone_slba_idx(ns, cmd, &slba, &zone_idx); 373988eea45cSKlaus Jensen if (status) { 374088eea45cSKlaus Jensen return status; 374188eea45cSKlaus Jensen } 374288eea45cSKlaus Jensen 374388eea45cSKlaus Jensen zra = dw13 & 0xff; 374488eea45cSKlaus Jensen if (zra != NVME_ZONE_REPORT && zra != NVME_ZONE_REPORT_EXTENDED) { 374588eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 374688eea45cSKlaus Jensen } 374788eea45cSKlaus Jensen if (zra == NVME_ZONE_REPORT_EXTENDED && !ns->params.zd_extension_size) { 374888eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 374988eea45cSKlaus Jensen } 375088eea45cSKlaus Jensen 375188eea45cSKlaus Jensen zrasf = (dw13 >> 8) & 0xff; 375288eea45cSKlaus Jensen if (zrasf > NVME_ZONE_REPORT_OFFLINE) { 375388eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 375488eea45cSKlaus Jensen } 375588eea45cSKlaus Jensen 375688eea45cSKlaus Jensen if (data_size < sizeof(NvmeZoneReportHeader)) { 375788eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 375888eea45cSKlaus Jensen } 375988eea45cSKlaus Jensen 376088eea45cSKlaus Jensen status = nvme_check_mdts(n, data_size); 376188eea45cSKlaus Jensen if (status) { 376288eea45cSKlaus Jensen return status; 376388eea45cSKlaus Jensen } 376488eea45cSKlaus Jensen 376588eea45cSKlaus Jensen partial = (dw13 >> 16) & 0x01; 376688eea45cSKlaus Jensen 376788eea45cSKlaus Jensen zone_entry_sz = sizeof(NvmeZoneDescr); 376888eea45cSKlaus Jensen if (zra == NVME_ZONE_REPORT_EXTENDED) { 376988eea45cSKlaus Jensen zone_entry_sz += ns->params.zd_extension_size; 377088eea45cSKlaus Jensen } 377188eea45cSKlaus Jensen 377288eea45cSKlaus Jensen max_zones = (data_size - sizeof(NvmeZoneReportHeader)) / zone_entry_sz; 377388eea45cSKlaus Jensen buf = g_malloc0(data_size); 377488eea45cSKlaus Jensen 377588eea45cSKlaus Jensen zone = &ns->zone_array[zone_idx]; 377688eea45cSKlaus Jensen for (i = zone_idx; i < ns->num_zones; i++) { 377788eea45cSKlaus Jensen if (partial && nr_zones >= max_zones) { 377888eea45cSKlaus Jensen break; 377988eea45cSKlaus Jensen } 378088eea45cSKlaus Jensen if (nvme_zone_matches_filter(zrasf, zone++)) { 378188eea45cSKlaus Jensen nr_zones++; 378288eea45cSKlaus Jensen } 378388eea45cSKlaus Jensen } 378488eea45cSKlaus Jensen header = (NvmeZoneReportHeader *)buf; 378588eea45cSKlaus Jensen header->nr_zones = cpu_to_le64(nr_zones); 378688eea45cSKlaus Jensen 378788eea45cSKlaus Jensen buf_p = buf + sizeof(NvmeZoneReportHeader); 378888eea45cSKlaus Jensen for (; zone_idx < ns->num_zones && max_zones > 0; zone_idx++) { 378988eea45cSKlaus Jensen zone = &ns->zone_array[zone_idx]; 379088eea45cSKlaus Jensen if (nvme_zone_matches_filter(zrasf, zone)) { 379188eea45cSKlaus Jensen z = (NvmeZoneDescr *)buf_p; 379288eea45cSKlaus Jensen buf_p += sizeof(NvmeZoneDescr); 379388eea45cSKlaus Jensen 379488eea45cSKlaus Jensen z->zt = zone->d.zt; 379588eea45cSKlaus Jensen z->zs = zone->d.zs; 379688eea45cSKlaus Jensen z->zcap = cpu_to_le64(zone->d.zcap); 379788eea45cSKlaus Jensen z->zslba = cpu_to_le64(zone->d.zslba); 379888eea45cSKlaus Jensen z->za = zone->d.za; 379988eea45cSKlaus Jensen 380088eea45cSKlaus Jensen if (nvme_wp_is_valid(zone)) { 380188eea45cSKlaus Jensen z->wp = cpu_to_le64(zone->d.wp); 380288eea45cSKlaus Jensen } else { 380388eea45cSKlaus Jensen z->wp = cpu_to_le64(~0ULL); 380488eea45cSKlaus Jensen } 380588eea45cSKlaus Jensen 380688eea45cSKlaus Jensen if (zra == NVME_ZONE_REPORT_EXTENDED) { 380788eea45cSKlaus Jensen if (zone->d.za & NVME_ZA_ZD_EXT_VALID) { 380888eea45cSKlaus Jensen memcpy(buf_p, nvme_get_zd_extension(ns, zone_idx), 380988eea45cSKlaus Jensen ns->params.zd_extension_size); 381088eea45cSKlaus Jensen } 381188eea45cSKlaus Jensen buf_p += ns->params.zd_extension_size; 381288eea45cSKlaus Jensen } 381388eea45cSKlaus Jensen 381488eea45cSKlaus Jensen max_zones--; 381588eea45cSKlaus Jensen } 381688eea45cSKlaus Jensen } 381788eea45cSKlaus Jensen 381888eea45cSKlaus Jensen status = nvme_c2h(n, (uint8_t *)buf, data_size, req); 381988eea45cSKlaus Jensen 382088eea45cSKlaus Jensen g_free(buf); 382188eea45cSKlaus Jensen 382288eea45cSKlaus Jensen return status; 382388eea45cSKlaus Jensen } 382488eea45cSKlaus Jensen 382588eea45cSKlaus Jensen static uint16_t nvme_io_cmd(NvmeCtrl *n, NvmeRequest *req) 382688eea45cSKlaus Jensen { 382788eea45cSKlaus Jensen NvmeNamespace *ns; 382888eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(req->cmd.nsid); 382988eea45cSKlaus Jensen 383088eea45cSKlaus Jensen trace_pci_nvme_io_cmd(nvme_cid(req), nsid, nvme_sqid(req), 383188eea45cSKlaus Jensen req->cmd.opcode, nvme_io_opc_str(req->cmd.opcode)); 383288eea45cSKlaus Jensen 383388eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid)) { 383488eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 383588eea45cSKlaus Jensen } 383688eea45cSKlaus Jensen 383788eea45cSKlaus Jensen /* 383888eea45cSKlaus Jensen * In the base NVM command set, Flush may apply to all namespaces 383988eea45cSKlaus Jensen * (indicated by NSID being set to FFFFFFFFh). But if that feature is used 384088eea45cSKlaus Jensen * along with TP 4056 (Namespace Types), it may be pretty screwed up. 384188eea45cSKlaus Jensen * 384288eea45cSKlaus Jensen * If NSID is indeed set to FFFFFFFFh, we simply cannot associate the 384388eea45cSKlaus Jensen * opcode with a specific command since we cannot determine a unique I/O 384488eea45cSKlaus Jensen * command set. Opcode 0h could have any other meaning than something 384588eea45cSKlaus Jensen * equivalent to flushing and say it DOES have completely different 384688eea45cSKlaus Jensen * semantics in some other command set - does an NSID of FFFFFFFFh then 384788eea45cSKlaus Jensen * mean "for all namespaces, apply whatever command set specific command 384888eea45cSKlaus Jensen * that uses the 0h opcode?" Or does it mean "for all namespaces, apply 384988eea45cSKlaus Jensen * whatever command that uses the 0h opcode if, and only if, it allows NSID 385088eea45cSKlaus Jensen * to be FFFFFFFFh"? 385188eea45cSKlaus Jensen * 385288eea45cSKlaus Jensen * Anyway (and luckily), for now, we do not care about this since the 385388eea45cSKlaus Jensen * device only supports namespace types that includes the NVM Flush command 385488eea45cSKlaus Jensen * (NVM and Zoned), so always do an NVM Flush. 385588eea45cSKlaus Jensen */ 385688eea45cSKlaus Jensen if (req->cmd.opcode == NVME_CMD_FLUSH) { 385788eea45cSKlaus Jensen return nvme_flush(n, req); 385888eea45cSKlaus Jensen } 385988eea45cSKlaus Jensen 386088eea45cSKlaus Jensen ns = nvme_ns(n, nsid); 386188eea45cSKlaus Jensen if (unlikely(!ns)) { 386288eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 386388eea45cSKlaus Jensen } 386488eea45cSKlaus Jensen 386588eea45cSKlaus Jensen if (!(ns->iocs[req->cmd.opcode] & NVME_CMD_EFF_CSUPP)) { 386688eea45cSKlaus Jensen trace_pci_nvme_err_invalid_opc(req->cmd.opcode); 386788eea45cSKlaus Jensen return NVME_INVALID_OPCODE | NVME_DNR; 386888eea45cSKlaus Jensen } 386988eea45cSKlaus Jensen 387088eea45cSKlaus Jensen if (ns->status) { 387188eea45cSKlaus Jensen return ns->status; 387288eea45cSKlaus Jensen } 387388eea45cSKlaus Jensen 387488eea45cSKlaus Jensen req->ns = ns; 387588eea45cSKlaus Jensen 387688eea45cSKlaus Jensen switch (req->cmd.opcode) { 387788eea45cSKlaus Jensen case NVME_CMD_WRITE_ZEROES: 387888eea45cSKlaus Jensen return nvme_write_zeroes(n, req); 387988eea45cSKlaus Jensen case NVME_CMD_ZONE_APPEND: 388088eea45cSKlaus Jensen return nvme_zone_append(n, req); 388188eea45cSKlaus Jensen case NVME_CMD_WRITE: 388288eea45cSKlaus Jensen return nvme_write(n, req); 388388eea45cSKlaus Jensen case NVME_CMD_READ: 388488eea45cSKlaus Jensen return nvme_read(n, req); 388588eea45cSKlaus Jensen case NVME_CMD_COMPARE: 388688eea45cSKlaus Jensen return nvme_compare(n, req); 388788eea45cSKlaus Jensen case NVME_CMD_DSM: 388888eea45cSKlaus Jensen return nvme_dsm(n, req); 388988eea45cSKlaus Jensen case NVME_CMD_VERIFY: 389088eea45cSKlaus Jensen return nvme_verify(n, req); 389188eea45cSKlaus Jensen case NVME_CMD_COPY: 389288eea45cSKlaus Jensen return nvme_copy(n, req); 389388eea45cSKlaus Jensen case NVME_CMD_ZONE_MGMT_SEND: 389488eea45cSKlaus Jensen return nvme_zone_mgmt_send(n, req); 389588eea45cSKlaus Jensen case NVME_CMD_ZONE_MGMT_RECV: 389688eea45cSKlaus Jensen return nvme_zone_mgmt_recv(n, req); 389788eea45cSKlaus Jensen default: 389888eea45cSKlaus Jensen assert(false); 389988eea45cSKlaus Jensen } 390088eea45cSKlaus Jensen 390188eea45cSKlaus Jensen return NVME_INVALID_OPCODE | NVME_DNR; 390288eea45cSKlaus Jensen } 390388eea45cSKlaus Jensen 390488eea45cSKlaus Jensen static void nvme_free_sq(NvmeSQueue *sq, NvmeCtrl *n) 390588eea45cSKlaus Jensen { 390688eea45cSKlaus Jensen n->sq[sq->sqid] = NULL; 390788eea45cSKlaus Jensen timer_free(sq->timer); 390888eea45cSKlaus Jensen g_free(sq->io_req); 390988eea45cSKlaus Jensen if (sq->sqid) { 391088eea45cSKlaus Jensen g_free(sq); 391188eea45cSKlaus Jensen } 391288eea45cSKlaus Jensen } 391388eea45cSKlaus Jensen 391488eea45cSKlaus Jensen static uint16_t nvme_del_sq(NvmeCtrl *n, NvmeRequest *req) 391588eea45cSKlaus Jensen { 391688eea45cSKlaus Jensen NvmeDeleteQ *c = (NvmeDeleteQ *)&req->cmd; 391788eea45cSKlaus Jensen NvmeRequest *r, *next; 391888eea45cSKlaus Jensen NvmeSQueue *sq; 391988eea45cSKlaus Jensen NvmeCQueue *cq; 392088eea45cSKlaus Jensen uint16_t qid = le16_to_cpu(c->qid); 392188eea45cSKlaus Jensen 392288eea45cSKlaus Jensen if (unlikely(!qid || nvme_check_sqid(n, qid))) { 392388eea45cSKlaus Jensen trace_pci_nvme_err_invalid_del_sq(qid); 392488eea45cSKlaus Jensen return NVME_INVALID_QID | NVME_DNR; 392588eea45cSKlaus Jensen } 392688eea45cSKlaus Jensen 392788eea45cSKlaus Jensen trace_pci_nvme_del_sq(qid); 392888eea45cSKlaus Jensen 392988eea45cSKlaus Jensen sq = n->sq[qid]; 393088eea45cSKlaus Jensen while (!QTAILQ_EMPTY(&sq->out_req_list)) { 393188eea45cSKlaus Jensen r = QTAILQ_FIRST(&sq->out_req_list); 3932*e76fb260SKlaus Jensen assert(r->aiocb); 393388eea45cSKlaus Jensen blk_aio_cancel(r->aiocb); 393488eea45cSKlaus Jensen } 393588eea45cSKlaus Jensen 393688eea45cSKlaus Jensen assert(QTAILQ_EMPTY(&sq->out_req_list)); 393788eea45cSKlaus Jensen 393888eea45cSKlaus Jensen if (!nvme_check_cqid(n, sq->cqid)) { 393988eea45cSKlaus Jensen cq = n->cq[sq->cqid]; 394088eea45cSKlaus Jensen QTAILQ_REMOVE(&cq->sq_list, sq, entry); 394188eea45cSKlaus Jensen 394288eea45cSKlaus Jensen nvme_post_cqes(cq); 394388eea45cSKlaus Jensen QTAILQ_FOREACH_SAFE(r, &cq->req_list, entry, next) { 394488eea45cSKlaus Jensen if (r->sq == sq) { 394588eea45cSKlaus Jensen QTAILQ_REMOVE(&cq->req_list, r, entry); 394688eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&sq->req_list, r, entry); 394788eea45cSKlaus Jensen } 394888eea45cSKlaus Jensen } 394988eea45cSKlaus Jensen } 395088eea45cSKlaus Jensen 395188eea45cSKlaus Jensen nvme_free_sq(sq, n); 395288eea45cSKlaus Jensen return NVME_SUCCESS; 395388eea45cSKlaus Jensen } 395488eea45cSKlaus Jensen 395588eea45cSKlaus Jensen static void nvme_init_sq(NvmeSQueue *sq, NvmeCtrl *n, uint64_t dma_addr, 395688eea45cSKlaus Jensen uint16_t sqid, uint16_t cqid, uint16_t size) 395788eea45cSKlaus Jensen { 395888eea45cSKlaus Jensen int i; 395988eea45cSKlaus Jensen NvmeCQueue *cq; 396088eea45cSKlaus Jensen 396188eea45cSKlaus Jensen sq->ctrl = n; 396288eea45cSKlaus Jensen sq->dma_addr = dma_addr; 396388eea45cSKlaus Jensen sq->sqid = sqid; 396488eea45cSKlaus Jensen sq->size = size; 396588eea45cSKlaus Jensen sq->cqid = cqid; 396688eea45cSKlaus Jensen sq->head = sq->tail = 0; 396788eea45cSKlaus Jensen sq->io_req = g_new0(NvmeRequest, sq->size); 396888eea45cSKlaus Jensen 396988eea45cSKlaus Jensen QTAILQ_INIT(&sq->req_list); 397088eea45cSKlaus Jensen QTAILQ_INIT(&sq->out_req_list); 397188eea45cSKlaus Jensen for (i = 0; i < sq->size; i++) { 397288eea45cSKlaus Jensen sq->io_req[i].sq = sq; 397388eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&(sq->req_list), &sq->io_req[i], entry); 397488eea45cSKlaus Jensen } 397588eea45cSKlaus Jensen sq->timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, nvme_process_sq, sq); 397688eea45cSKlaus Jensen 397788eea45cSKlaus Jensen assert(n->cq[cqid]); 397888eea45cSKlaus Jensen cq = n->cq[cqid]; 397988eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&(cq->sq_list), sq, entry); 398088eea45cSKlaus Jensen n->sq[sqid] = sq; 398188eea45cSKlaus Jensen } 398288eea45cSKlaus Jensen 398388eea45cSKlaus Jensen static uint16_t nvme_create_sq(NvmeCtrl *n, NvmeRequest *req) 398488eea45cSKlaus Jensen { 398588eea45cSKlaus Jensen NvmeSQueue *sq; 398688eea45cSKlaus Jensen NvmeCreateSq *c = (NvmeCreateSq *)&req->cmd; 398788eea45cSKlaus Jensen 398888eea45cSKlaus Jensen uint16_t cqid = le16_to_cpu(c->cqid); 398988eea45cSKlaus Jensen uint16_t sqid = le16_to_cpu(c->sqid); 399088eea45cSKlaus Jensen uint16_t qsize = le16_to_cpu(c->qsize); 399188eea45cSKlaus Jensen uint16_t qflags = le16_to_cpu(c->sq_flags); 399288eea45cSKlaus Jensen uint64_t prp1 = le64_to_cpu(c->prp1); 399388eea45cSKlaus Jensen 399488eea45cSKlaus Jensen trace_pci_nvme_create_sq(prp1, sqid, cqid, qsize, qflags); 399588eea45cSKlaus Jensen 399688eea45cSKlaus Jensen if (unlikely(!cqid || nvme_check_cqid(n, cqid))) { 399788eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_sq_cqid(cqid); 399888eea45cSKlaus Jensen return NVME_INVALID_CQID | NVME_DNR; 399988eea45cSKlaus Jensen } 400088eea45cSKlaus Jensen if (unlikely(!sqid || sqid > n->params.max_ioqpairs || 400188eea45cSKlaus Jensen n->sq[sqid] != NULL)) { 400288eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_sq_sqid(sqid); 400388eea45cSKlaus Jensen return NVME_INVALID_QID | NVME_DNR; 400488eea45cSKlaus Jensen } 400588eea45cSKlaus Jensen if (unlikely(!qsize || qsize > NVME_CAP_MQES(n->bar.cap))) { 400688eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_sq_size(qsize); 400788eea45cSKlaus Jensen return NVME_MAX_QSIZE_EXCEEDED | NVME_DNR; 400888eea45cSKlaus Jensen } 400988eea45cSKlaus Jensen if (unlikely(prp1 & (n->page_size - 1))) { 401088eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_sq_addr(prp1); 401188eea45cSKlaus Jensen return NVME_INVALID_PRP_OFFSET | NVME_DNR; 401288eea45cSKlaus Jensen } 401388eea45cSKlaus Jensen if (unlikely(!(NVME_SQ_FLAGS_PC(qflags)))) { 401488eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_sq_qflags(NVME_SQ_FLAGS_PC(qflags)); 401588eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 401688eea45cSKlaus Jensen } 401788eea45cSKlaus Jensen sq = g_malloc0(sizeof(*sq)); 401888eea45cSKlaus Jensen nvme_init_sq(sq, n, prp1, sqid, cqid, qsize + 1); 401988eea45cSKlaus Jensen return NVME_SUCCESS; 402088eea45cSKlaus Jensen } 402188eea45cSKlaus Jensen 402288eea45cSKlaus Jensen struct nvme_stats { 402388eea45cSKlaus Jensen uint64_t units_read; 402488eea45cSKlaus Jensen uint64_t units_written; 402588eea45cSKlaus Jensen uint64_t read_commands; 402688eea45cSKlaus Jensen uint64_t write_commands; 402788eea45cSKlaus Jensen }; 402888eea45cSKlaus Jensen 402988eea45cSKlaus Jensen static void nvme_set_blk_stats(NvmeNamespace *ns, struct nvme_stats *stats) 403088eea45cSKlaus Jensen { 403188eea45cSKlaus Jensen BlockAcctStats *s = blk_get_stats(ns->blkconf.blk); 403288eea45cSKlaus Jensen 403388eea45cSKlaus Jensen stats->units_read += s->nr_bytes[BLOCK_ACCT_READ] >> BDRV_SECTOR_BITS; 403488eea45cSKlaus Jensen stats->units_written += s->nr_bytes[BLOCK_ACCT_WRITE] >> BDRV_SECTOR_BITS; 403588eea45cSKlaus Jensen stats->read_commands += s->nr_ops[BLOCK_ACCT_READ]; 403688eea45cSKlaus Jensen stats->write_commands += s->nr_ops[BLOCK_ACCT_WRITE]; 403788eea45cSKlaus Jensen } 403888eea45cSKlaus Jensen 403988eea45cSKlaus Jensen static uint16_t nvme_smart_info(NvmeCtrl *n, uint8_t rae, uint32_t buf_len, 404088eea45cSKlaus Jensen uint64_t off, NvmeRequest *req) 404188eea45cSKlaus Jensen { 404288eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(req->cmd.nsid); 404388eea45cSKlaus Jensen struct nvme_stats stats = { 0 }; 404488eea45cSKlaus Jensen NvmeSmartLog smart = { 0 }; 404588eea45cSKlaus Jensen uint32_t trans_len; 404688eea45cSKlaus Jensen NvmeNamespace *ns; 404788eea45cSKlaus Jensen time_t current_ms; 404888eea45cSKlaus Jensen 404988eea45cSKlaus Jensen if (off >= sizeof(smart)) { 405088eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 405188eea45cSKlaus Jensen } 405288eea45cSKlaus Jensen 405388eea45cSKlaus Jensen if (nsid != 0xffffffff) { 405488eea45cSKlaus Jensen ns = nvme_ns(n, nsid); 405588eea45cSKlaus Jensen if (!ns) { 405688eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 405788eea45cSKlaus Jensen } 405888eea45cSKlaus Jensen nvme_set_blk_stats(ns, &stats); 405988eea45cSKlaus Jensen } else { 406088eea45cSKlaus Jensen int i; 406188eea45cSKlaus Jensen 406288eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 406388eea45cSKlaus Jensen ns = nvme_ns(n, i); 406488eea45cSKlaus Jensen if (!ns) { 406588eea45cSKlaus Jensen continue; 406688eea45cSKlaus Jensen } 406788eea45cSKlaus Jensen nvme_set_blk_stats(ns, &stats); 406888eea45cSKlaus Jensen } 406988eea45cSKlaus Jensen } 407088eea45cSKlaus Jensen 407188eea45cSKlaus Jensen trans_len = MIN(sizeof(smart) - off, buf_len); 407288eea45cSKlaus Jensen smart.critical_warning = n->smart_critical_warning; 407388eea45cSKlaus Jensen 407488eea45cSKlaus Jensen smart.data_units_read[0] = cpu_to_le64(DIV_ROUND_UP(stats.units_read, 407588eea45cSKlaus Jensen 1000)); 407688eea45cSKlaus Jensen smart.data_units_written[0] = cpu_to_le64(DIV_ROUND_UP(stats.units_written, 407788eea45cSKlaus Jensen 1000)); 407888eea45cSKlaus Jensen smart.host_read_commands[0] = cpu_to_le64(stats.read_commands); 407988eea45cSKlaus Jensen smart.host_write_commands[0] = cpu_to_le64(stats.write_commands); 408088eea45cSKlaus Jensen 408188eea45cSKlaus Jensen smart.temperature = cpu_to_le16(n->temperature); 408288eea45cSKlaus Jensen 408388eea45cSKlaus Jensen if ((n->temperature >= n->features.temp_thresh_hi) || 408488eea45cSKlaus Jensen (n->temperature <= n->features.temp_thresh_low)) { 408588eea45cSKlaus Jensen smart.critical_warning |= NVME_SMART_TEMPERATURE; 408688eea45cSKlaus Jensen } 408788eea45cSKlaus Jensen 408888eea45cSKlaus Jensen current_ms = qemu_clock_get_ms(QEMU_CLOCK_VIRTUAL); 408988eea45cSKlaus Jensen smart.power_on_hours[0] = 409088eea45cSKlaus Jensen cpu_to_le64((((current_ms - n->starttime_ms) / 1000) / 60) / 60); 409188eea45cSKlaus Jensen 409288eea45cSKlaus Jensen if (!rae) { 409388eea45cSKlaus Jensen nvme_clear_events(n, NVME_AER_TYPE_SMART); 409488eea45cSKlaus Jensen } 409588eea45cSKlaus Jensen 409688eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *) &smart + off, trans_len, req); 409788eea45cSKlaus Jensen } 409888eea45cSKlaus Jensen 409988eea45cSKlaus Jensen static uint16_t nvme_fw_log_info(NvmeCtrl *n, uint32_t buf_len, uint64_t off, 410088eea45cSKlaus Jensen NvmeRequest *req) 410188eea45cSKlaus Jensen { 410288eea45cSKlaus Jensen uint32_t trans_len; 410388eea45cSKlaus Jensen NvmeFwSlotInfoLog fw_log = { 410488eea45cSKlaus Jensen .afi = 0x1, 410588eea45cSKlaus Jensen }; 410688eea45cSKlaus Jensen 410788eea45cSKlaus Jensen if (off >= sizeof(fw_log)) { 410888eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 410988eea45cSKlaus Jensen } 411088eea45cSKlaus Jensen 411188eea45cSKlaus Jensen strpadcpy((char *)&fw_log.frs1, sizeof(fw_log.frs1), "1.0", ' '); 411288eea45cSKlaus Jensen trans_len = MIN(sizeof(fw_log) - off, buf_len); 411388eea45cSKlaus Jensen 411488eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *) &fw_log + off, trans_len, req); 411588eea45cSKlaus Jensen } 411688eea45cSKlaus Jensen 411788eea45cSKlaus Jensen static uint16_t nvme_error_info(NvmeCtrl *n, uint8_t rae, uint32_t buf_len, 411888eea45cSKlaus Jensen uint64_t off, NvmeRequest *req) 411988eea45cSKlaus Jensen { 412088eea45cSKlaus Jensen uint32_t trans_len; 412188eea45cSKlaus Jensen NvmeErrorLog errlog; 412288eea45cSKlaus Jensen 412388eea45cSKlaus Jensen if (off >= sizeof(errlog)) { 412488eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 412588eea45cSKlaus Jensen } 412688eea45cSKlaus Jensen 412788eea45cSKlaus Jensen if (!rae) { 412888eea45cSKlaus Jensen nvme_clear_events(n, NVME_AER_TYPE_ERROR); 412988eea45cSKlaus Jensen } 413088eea45cSKlaus Jensen 413188eea45cSKlaus Jensen memset(&errlog, 0x0, sizeof(errlog)); 413288eea45cSKlaus Jensen trans_len = MIN(sizeof(errlog) - off, buf_len); 413388eea45cSKlaus Jensen 413488eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *)&errlog, trans_len, req); 413588eea45cSKlaus Jensen } 413688eea45cSKlaus Jensen 413788eea45cSKlaus Jensen static uint16_t nvme_changed_nslist(NvmeCtrl *n, uint8_t rae, uint32_t buf_len, 413888eea45cSKlaus Jensen uint64_t off, NvmeRequest *req) 413988eea45cSKlaus Jensen { 414088eea45cSKlaus Jensen uint32_t nslist[1024]; 414188eea45cSKlaus Jensen uint32_t trans_len; 414288eea45cSKlaus Jensen int i = 0; 414388eea45cSKlaus Jensen uint32_t nsid; 414488eea45cSKlaus Jensen 414588eea45cSKlaus Jensen memset(nslist, 0x0, sizeof(nslist)); 414688eea45cSKlaus Jensen trans_len = MIN(sizeof(nslist) - off, buf_len); 414788eea45cSKlaus Jensen 414888eea45cSKlaus Jensen while ((nsid = find_first_bit(n->changed_nsids, NVME_CHANGED_NSID_SIZE)) != 414988eea45cSKlaus Jensen NVME_CHANGED_NSID_SIZE) { 415088eea45cSKlaus Jensen /* 415188eea45cSKlaus Jensen * If more than 1024 namespaces, the first entry in the log page should 415288eea45cSKlaus Jensen * be set to FFFFFFFFh and the others to 0 as spec. 415388eea45cSKlaus Jensen */ 415488eea45cSKlaus Jensen if (i == ARRAY_SIZE(nslist)) { 415588eea45cSKlaus Jensen memset(nslist, 0x0, sizeof(nslist)); 415688eea45cSKlaus Jensen nslist[0] = 0xffffffff; 415788eea45cSKlaus Jensen break; 415888eea45cSKlaus Jensen } 415988eea45cSKlaus Jensen 416088eea45cSKlaus Jensen nslist[i++] = nsid; 416188eea45cSKlaus Jensen clear_bit(nsid, n->changed_nsids); 416288eea45cSKlaus Jensen } 416388eea45cSKlaus Jensen 416488eea45cSKlaus Jensen /* 416588eea45cSKlaus Jensen * Remove all the remaining list entries in case returns directly due to 416688eea45cSKlaus Jensen * more than 1024 namespaces. 416788eea45cSKlaus Jensen */ 416888eea45cSKlaus Jensen if (nslist[0] == 0xffffffff) { 416988eea45cSKlaus Jensen bitmap_zero(n->changed_nsids, NVME_CHANGED_NSID_SIZE); 417088eea45cSKlaus Jensen } 417188eea45cSKlaus Jensen 417288eea45cSKlaus Jensen if (!rae) { 417388eea45cSKlaus Jensen nvme_clear_events(n, NVME_AER_TYPE_NOTICE); 417488eea45cSKlaus Jensen } 417588eea45cSKlaus Jensen 417688eea45cSKlaus Jensen return nvme_c2h(n, ((uint8_t *)nslist) + off, trans_len, req); 417788eea45cSKlaus Jensen } 417888eea45cSKlaus Jensen 417988eea45cSKlaus Jensen static uint16_t nvme_cmd_effects(NvmeCtrl *n, uint8_t csi, uint32_t buf_len, 418088eea45cSKlaus Jensen uint64_t off, NvmeRequest *req) 418188eea45cSKlaus Jensen { 418288eea45cSKlaus Jensen NvmeEffectsLog log = {}; 418388eea45cSKlaus Jensen const uint32_t *src_iocs = NULL; 418488eea45cSKlaus Jensen uint32_t trans_len; 418588eea45cSKlaus Jensen 418688eea45cSKlaus Jensen if (off >= sizeof(log)) { 418788eea45cSKlaus Jensen trace_pci_nvme_err_invalid_log_page_offset(off, sizeof(log)); 418888eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 418988eea45cSKlaus Jensen } 419088eea45cSKlaus Jensen 419188eea45cSKlaus Jensen switch (NVME_CC_CSS(n->bar.cc)) { 419288eea45cSKlaus Jensen case NVME_CC_CSS_NVM: 419388eea45cSKlaus Jensen src_iocs = nvme_cse_iocs_nvm; 419488eea45cSKlaus Jensen /* fall through */ 419588eea45cSKlaus Jensen case NVME_CC_CSS_ADMIN_ONLY: 419688eea45cSKlaus Jensen break; 419788eea45cSKlaus Jensen case NVME_CC_CSS_CSI: 419888eea45cSKlaus Jensen switch (csi) { 419988eea45cSKlaus Jensen case NVME_CSI_NVM: 420088eea45cSKlaus Jensen src_iocs = nvme_cse_iocs_nvm; 420188eea45cSKlaus Jensen break; 420288eea45cSKlaus Jensen case NVME_CSI_ZONED: 420388eea45cSKlaus Jensen src_iocs = nvme_cse_iocs_zoned; 420488eea45cSKlaus Jensen break; 420588eea45cSKlaus Jensen } 420688eea45cSKlaus Jensen } 420788eea45cSKlaus Jensen 420888eea45cSKlaus Jensen memcpy(log.acs, nvme_cse_acs, sizeof(nvme_cse_acs)); 420988eea45cSKlaus Jensen 421088eea45cSKlaus Jensen if (src_iocs) { 421188eea45cSKlaus Jensen memcpy(log.iocs, src_iocs, sizeof(log.iocs)); 421288eea45cSKlaus Jensen } 421388eea45cSKlaus Jensen 421488eea45cSKlaus Jensen trans_len = MIN(sizeof(log) - off, buf_len); 421588eea45cSKlaus Jensen 421688eea45cSKlaus Jensen return nvme_c2h(n, ((uint8_t *)&log) + off, trans_len, req); 421788eea45cSKlaus Jensen } 421888eea45cSKlaus Jensen 421988eea45cSKlaus Jensen static uint16_t nvme_get_log(NvmeCtrl *n, NvmeRequest *req) 422088eea45cSKlaus Jensen { 422188eea45cSKlaus Jensen NvmeCmd *cmd = &req->cmd; 422288eea45cSKlaus Jensen 422388eea45cSKlaus Jensen uint32_t dw10 = le32_to_cpu(cmd->cdw10); 422488eea45cSKlaus Jensen uint32_t dw11 = le32_to_cpu(cmd->cdw11); 422588eea45cSKlaus Jensen uint32_t dw12 = le32_to_cpu(cmd->cdw12); 422688eea45cSKlaus Jensen uint32_t dw13 = le32_to_cpu(cmd->cdw13); 422788eea45cSKlaus Jensen uint8_t lid = dw10 & 0xff; 422888eea45cSKlaus Jensen uint8_t lsp = (dw10 >> 8) & 0xf; 422988eea45cSKlaus Jensen uint8_t rae = (dw10 >> 15) & 0x1; 423088eea45cSKlaus Jensen uint8_t csi = le32_to_cpu(cmd->cdw14) >> 24; 423188eea45cSKlaus Jensen uint32_t numdl, numdu; 423288eea45cSKlaus Jensen uint64_t off, lpol, lpou; 423388eea45cSKlaus Jensen size_t len; 423488eea45cSKlaus Jensen uint16_t status; 423588eea45cSKlaus Jensen 423688eea45cSKlaus Jensen numdl = (dw10 >> 16); 423788eea45cSKlaus Jensen numdu = (dw11 & 0xffff); 423888eea45cSKlaus Jensen lpol = dw12; 423988eea45cSKlaus Jensen lpou = dw13; 424088eea45cSKlaus Jensen 424188eea45cSKlaus Jensen len = (((numdu << 16) | numdl) + 1) << 2; 424288eea45cSKlaus Jensen off = (lpou << 32ULL) | lpol; 424388eea45cSKlaus Jensen 424488eea45cSKlaus Jensen if (off & 0x3) { 424588eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 424688eea45cSKlaus Jensen } 424788eea45cSKlaus Jensen 424888eea45cSKlaus Jensen trace_pci_nvme_get_log(nvme_cid(req), lid, lsp, rae, len, off); 424988eea45cSKlaus Jensen 425088eea45cSKlaus Jensen status = nvme_check_mdts(n, len); 425188eea45cSKlaus Jensen if (status) { 425288eea45cSKlaus Jensen return status; 425388eea45cSKlaus Jensen } 425488eea45cSKlaus Jensen 425588eea45cSKlaus Jensen switch (lid) { 425688eea45cSKlaus Jensen case NVME_LOG_ERROR_INFO: 425788eea45cSKlaus Jensen return nvme_error_info(n, rae, len, off, req); 425888eea45cSKlaus Jensen case NVME_LOG_SMART_INFO: 425988eea45cSKlaus Jensen return nvme_smart_info(n, rae, len, off, req); 426088eea45cSKlaus Jensen case NVME_LOG_FW_SLOT_INFO: 426188eea45cSKlaus Jensen return nvme_fw_log_info(n, len, off, req); 426288eea45cSKlaus Jensen case NVME_LOG_CHANGED_NSLIST: 426388eea45cSKlaus Jensen return nvme_changed_nslist(n, rae, len, off, req); 426488eea45cSKlaus Jensen case NVME_LOG_CMD_EFFECTS: 426588eea45cSKlaus Jensen return nvme_cmd_effects(n, csi, len, off, req); 426688eea45cSKlaus Jensen default: 426788eea45cSKlaus Jensen trace_pci_nvme_err_invalid_log_page(nvme_cid(req), lid); 426888eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 426988eea45cSKlaus Jensen } 427088eea45cSKlaus Jensen } 427188eea45cSKlaus Jensen 427288eea45cSKlaus Jensen static void nvme_free_cq(NvmeCQueue *cq, NvmeCtrl *n) 427388eea45cSKlaus Jensen { 427488eea45cSKlaus Jensen n->cq[cq->cqid] = NULL; 427588eea45cSKlaus Jensen timer_free(cq->timer); 427688eea45cSKlaus Jensen if (msix_enabled(&n->parent_obj)) { 427788eea45cSKlaus Jensen msix_vector_unuse(&n->parent_obj, cq->vector); 427888eea45cSKlaus Jensen } 427988eea45cSKlaus Jensen if (cq->cqid) { 428088eea45cSKlaus Jensen g_free(cq); 428188eea45cSKlaus Jensen } 428288eea45cSKlaus Jensen } 428388eea45cSKlaus Jensen 428488eea45cSKlaus Jensen static uint16_t nvme_del_cq(NvmeCtrl *n, NvmeRequest *req) 428588eea45cSKlaus Jensen { 428688eea45cSKlaus Jensen NvmeDeleteQ *c = (NvmeDeleteQ *)&req->cmd; 428788eea45cSKlaus Jensen NvmeCQueue *cq; 428888eea45cSKlaus Jensen uint16_t qid = le16_to_cpu(c->qid); 428988eea45cSKlaus Jensen 429088eea45cSKlaus Jensen if (unlikely(!qid || nvme_check_cqid(n, qid))) { 429188eea45cSKlaus Jensen trace_pci_nvme_err_invalid_del_cq_cqid(qid); 429288eea45cSKlaus Jensen return NVME_INVALID_CQID | NVME_DNR; 429388eea45cSKlaus Jensen } 429488eea45cSKlaus Jensen 429588eea45cSKlaus Jensen cq = n->cq[qid]; 429688eea45cSKlaus Jensen if (unlikely(!QTAILQ_EMPTY(&cq->sq_list))) { 429788eea45cSKlaus Jensen trace_pci_nvme_err_invalid_del_cq_notempty(qid); 429888eea45cSKlaus Jensen return NVME_INVALID_QUEUE_DEL; 429988eea45cSKlaus Jensen } 430088eea45cSKlaus Jensen nvme_irq_deassert(n, cq); 430188eea45cSKlaus Jensen trace_pci_nvme_del_cq(qid); 430288eea45cSKlaus Jensen nvme_free_cq(cq, n); 430388eea45cSKlaus Jensen return NVME_SUCCESS; 430488eea45cSKlaus Jensen } 430588eea45cSKlaus Jensen 430688eea45cSKlaus Jensen static void nvme_init_cq(NvmeCQueue *cq, NvmeCtrl *n, uint64_t dma_addr, 430788eea45cSKlaus Jensen uint16_t cqid, uint16_t vector, uint16_t size, 430888eea45cSKlaus Jensen uint16_t irq_enabled) 430988eea45cSKlaus Jensen { 431088eea45cSKlaus Jensen int ret; 431188eea45cSKlaus Jensen 431288eea45cSKlaus Jensen if (msix_enabled(&n->parent_obj)) { 431388eea45cSKlaus Jensen ret = msix_vector_use(&n->parent_obj, vector); 431488eea45cSKlaus Jensen assert(ret == 0); 431588eea45cSKlaus Jensen } 431688eea45cSKlaus Jensen cq->ctrl = n; 431788eea45cSKlaus Jensen cq->cqid = cqid; 431888eea45cSKlaus Jensen cq->size = size; 431988eea45cSKlaus Jensen cq->dma_addr = dma_addr; 432088eea45cSKlaus Jensen cq->phase = 1; 432188eea45cSKlaus Jensen cq->irq_enabled = irq_enabled; 432288eea45cSKlaus Jensen cq->vector = vector; 432388eea45cSKlaus Jensen cq->head = cq->tail = 0; 432488eea45cSKlaus Jensen QTAILQ_INIT(&cq->req_list); 432588eea45cSKlaus Jensen QTAILQ_INIT(&cq->sq_list); 432688eea45cSKlaus Jensen n->cq[cqid] = cq; 432788eea45cSKlaus Jensen cq->timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, nvme_post_cqes, cq); 432888eea45cSKlaus Jensen } 432988eea45cSKlaus Jensen 433088eea45cSKlaus Jensen static uint16_t nvme_create_cq(NvmeCtrl *n, NvmeRequest *req) 433188eea45cSKlaus Jensen { 433288eea45cSKlaus Jensen NvmeCQueue *cq; 433388eea45cSKlaus Jensen NvmeCreateCq *c = (NvmeCreateCq *)&req->cmd; 433488eea45cSKlaus Jensen uint16_t cqid = le16_to_cpu(c->cqid); 433588eea45cSKlaus Jensen uint16_t vector = le16_to_cpu(c->irq_vector); 433688eea45cSKlaus Jensen uint16_t qsize = le16_to_cpu(c->qsize); 433788eea45cSKlaus Jensen uint16_t qflags = le16_to_cpu(c->cq_flags); 433888eea45cSKlaus Jensen uint64_t prp1 = le64_to_cpu(c->prp1); 433988eea45cSKlaus Jensen 434088eea45cSKlaus Jensen trace_pci_nvme_create_cq(prp1, cqid, vector, qsize, qflags, 434188eea45cSKlaus Jensen NVME_CQ_FLAGS_IEN(qflags) != 0); 434288eea45cSKlaus Jensen 434388eea45cSKlaus Jensen if (unlikely(!cqid || cqid > n->params.max_ioqpairs || 434488eea45cSKlaus Jensen n->cq[cqid] != NULL)) { 434588eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_cq_cqid(cqid); 434688eea45cSKlaus Jensen return NVME_INVALID_QID | NVME_DNR; 434788eea45cSKlaus Jensen } 434888eea45cSKlaus Jensen if (unlikely(!qsize || qsize > NVME_CAP_MQES(n->bar.cap))) { 434988eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_cq_size(qsize); 435088eea45cSKlaus Jensen return NVME_MAX_QSIZE_EXCEEDED | NVME_DNR; 435188eea45cSKlaus Jensen } 435288eea45cSKlaus Jensen if (unlikely(prp1 & (n->page_size - 1))) { 435388eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_cq_addr(prp1); 435488eea45cSKlaus Jensen return NVME_INVALID_PRP_OFFSET | NVME_DNR; 435588eea45cSKlaus Jensen } 435688eea45cSKlaus Jensen if (unlikely(!msix_enabled(&n->parent_obj) && vector)) { 435788eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_cq_vector(vector); 435888eea45cSKlaus Jensen return NVME_INVALID_IRQ_VECTOR | NVME_DNR; 435988eea45cSKlaus Jensen } 436088eea45cSKlaus Jensen if (unlikely(vector >= n->params.msix_qsize)) { 436188eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_cq_vector(vector); 436288eea45cSKlaus Jensen return NVME_INVALID_IRQ_VECTOR | NVME_DNR; 436388eea45cSKlaus Jensen } 436488eea45cSKlaus Jensen if (unlikely(!(NVME_CQ_FLAGS_PC(qflags)))) { 436588eea45cSKlaus Jensen trace_pci_nvme_err_invalid_create_cq_qflags(NVME_CQ_FLAGS_PC(qflags)); 436688eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 436788eea45cSKlaus Jensen } 436888eea45cSKlaus Jensen 436988eea45cSKlaus Jensen cq = g_malloc0(sizeof(*cq)); 437088eea45cSKlaus Jensen nvme_init_cq(cq, n, prp1, cqid, vector, qsize + 1, 437188eea45cSKlaus Jensen NVME_CQ_FLAGS_IEN(qflags)); 437288eea45cSKlaus Jensen 437388eea45cSKlaus Jensen /* 437488eea45cSKlaus Jensen * It is only required to set qs_created when creating a completion queue; 437588eea45cSKlaus Jensen * creating a submission queue without a matching completion queue will 437688eea45cSKlaus Jensen * fail. 437788eea45cSKlaus Jensen */ 437888eea45cSKlaus Jensen n->qs_created = true; 437988eea45cSKlaus Jensen return NVME_SUCCESS; 438088eea45cSKlaus Jensen } 438188eea45cSKlaus Jensen 438288eea45cSKlaus Jensen static uint16_t nvme_rpt_empty_id_struct(NvmeCtrl *n, NvmeRequest *req) 438388eea45cSKlaus Jensen { 438488eea45cSKlaus Jensen uint8_t id[NVME_IDENTIFY_DATA_SIZE] = {}; 438588eea45cSKlaus Jensen 438688eea45cSKlaus Jensen return nvme_c2h(n, id, sizeof(id), req); 438788eea45cSKlaus Jensen } 438888eea45cSKlaus Jensen 438988eea45cSKlaus Jensen static uint16_t nvme_identify_ctrl(NvmeCtrl *n, NvmeRequest *req) 439088eea45cSKlaus Jensen { 439188eea45cSKlaus Jensen trace_pci_nvme_identify_ctrl(); 439288eea45cSKlaus Jensen 439388eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *)&n->id_ctrl, sizeof(n->id_ctrl), req); 439488eea45cSKlaus Jensen } 439588eea45cSKlaus Jensen 439688eea45cSKlaus Jensen static uint16_t nvme_identify_ctrl_csi(NvmeCtrl *n, NvmeRequest *req) 439788eea45cSKlaus Jensen { 439888eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 439988eea45cSKlaus Jensen uint8_t id[NVME_IDENTIFY_DATA_SIZE] = {}; 440088eea45cSKlaus Jensen NvmeIdCtrlNvm *id_nvm = (NvmeIdCtrlNvm *)&id; 440188eea45cSKlaus Jensen 440288eea45cSKlaus Jensen trace_pci_nvme_identify_ctrl_csi(c->csi); 440388eea45cSKlaus Jensen 440488eea45cSKlaus Jensen switch (c->csi) { 440588eea45cSKlaus Jensen case NVME_CSI_NVM: 440688eea45cSKlaus Jensen id_nvm->vsl = n->params.vsl; 440788eea45cSKlaus Jensen id_nvm->dmrsl = cpu_to_le32(n->dmrsl); 440888eea45cSKlaus Jensen break; 440988eea45cSKlaus Jensen 441088eea45cSKlaus Jensen case NVME_CSI_ZONED: 441188eea45cSKlaus Jensen ((NvmeIdCtrlZoned *)&id)->zasl = n->params.zasl; 441288eea45cSKlaus Jensen break; 441388eea45cSKlaus Jensen 441488eea45cSKlaus Jensen default: 441588eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 441688eea45cSKlaus Jensen } 441788eea45cSKlaus Jensen 441888eea45cSKlaus Jensen return nvme_c2h(n, id, sizeof(id), req); 441988eea45cSKlaus Jensen } 442088eea45cSKlaus Jensen 442188eea45cSKlaus Jensen static uint16_t nvme_identify_ns(NvmeCtrl *n, NvmeRequest *req, bool active) 442288eea45cSKlaus Jensen { 442388eea45cSKlaus Jensen NvmeNamespace *ns; 442488eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 442588eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(c->nsid); 442688eea45cSKlaus Jensen 442788eea45cSKlaus Jensen trace_pci_nvme_identify_ns(nsid); 442888eea45cSKlaus Jensen 442988eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid) || nsid == NVME_NSID_BROADCAST) { 443088eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 443188eea45cSKlaus Jensen } 443288eea45cSKlaus Jensen 443388eea45cSKlaus Jensen ns = nvme_ns(n, nsid); 443488eea45cSKlaus Jensen if (unlikely(!ns)) { 443588eea45cSKlaus Jensen if (!active) { 443688eea45cSKlaus Jensen ns = nvme_subsys_ns(n->subsys, nsid); 443788eea45cSKlaus Jensen if (!ns) { 443888eea45cSKlaus Jensen return nvme_rpt_empty_id_struct(n, req); 443988eea45cSKlaus Jensen } 444088eea45cSKlaus Jensen } else { 444188eea45cSKlaus Jensen return nvme_rpt_empty_id_struct(n, req); 444288eea45cSKlaus Jensen } 444388eea45cSKlaus Jensen } 444488eea45cSKlaus Jensen 44453553c48fSGollu Appalanaidu if (active || ns->csi == NVME_CSI_NVM) { 444688eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *)&ns->id_ns, sizeof(NvmeIdNs), req); 444788eea45cSKlaus Jensen } 444888eea45cSKlaus Jensen 444988eea45cSKlaus Jensen return NVME_INVALID_CMD_SET | NVME_DNR; 445088eea45cSKlaus Jensen } 445188eea45cSKlaus Jensen 445288eea45cSKlaus Jensen static uint16_t nvme_identify_ns_attached_list(NvmeCtrl *n, NvmeRequest *req) 445388eea45cSKlaus Jensen { 445488eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 445588eea45cSKlaus Jensen uint16_t min_id = le16_to_cpu(c->ctrlid); 445688eea45cSKlaus Jensen uint16_t list[NVME_CONTROLLER_LIST_SIZE] = {}; 445788eea45cSKlaus Jensen uint16_t *ids = &list[1]; 445888eea45cSKlaus Jensen NvmeNamespace *ns; 445988eea45cSKlaus Jensen NvmeCtrl *ctrl; 446088eea45cSKlaus Jensen int cntlid, nr_ids = 0; 446188eea45cSKlaus Jensen 446288eea45cSKlaus Jensen trace_pci_nvme_identify_ns_attached_list(min_id); 446388eea45cSKlaus Jensen 446488eea45cSKlaus Jensen if (c->nsid == NVME_NSID_BROADCAST) { 446588eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 446688eea45cSKlaus Jensen } 446788eea45cSKlaus Jensen 446888eea45cSKlaus Jensen ns = nvme_subsys_ns(n->subsys, c->nsid); 446988eea45cSKlaus Jensen if (!ns) { 447088eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 447188eea45cSKlaus Jensen } 447288eea45cSKlaus Jensen 447388eea45cSKlaus Jensen for (cntlid = min_id; cntlid < ARRAY_SIZE(n->subsys->ctrls); cntlid++) { 447488eea45cSKlaus Jensen ctrl = nvme_subsys_ctrl(n->subsys, cntlid); 447588eea45cSKlaus Jensen if (!ctrl) { 447688eea45cSKlaus Jensen continue; 447788eea45cSKlaus Jensen } 447888eea45cSKlaus Jensen 447988eea45cSKlaus Jensen if (!nvme_ns(ctrl, c->nsid)) { 448088eea45cSKlaus Jensen continue; 448188eea45cSKlaus Jensen } 448288eea45cSKlaus Jensen 448388eea45cSKlaus Jensen ids[nr_ids++] = cntlid; 448488eea45cSKlaus Jensen } 448588eea45cSKlaus Jensen 448688eea45cSKlaus Jensen list[0] = nr_ids; 448788eea45cSKlaus Jensen 448888eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *)list, sizeof(list), req); 448988eea45cSKlaus Jensen } 449088eea45cSKlaus Jensen 449188eea45cSKlaus Jensen static uint16_t nvme_identify_ns_csi(NvmeCtrl *n, NvmeRequest *req, 449288eea45cSKlaus Jensen bool active) 449388eea45cSKlaus Jensen { 449488eea45cSKlaus Jensen NvmeNamespace *ns; 449588eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 449688eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(c->nsid); 449788eea45cSKlaus Jensen 449888eea45cSKlaus Jensen trace_pci_nvme_identify_ns_csi(nsid, c->csi); 449988eea45cSKlaus Jensen 450088eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid) || nsid == NVME_NSID_BROADCAST) { 450188eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 450288eea45cSKlaus Jensen } 450388eea45cSKlaus Jensen 450488eea45cSKlaus Jensen ns = nvme_ns(n, nsid); 450588eea45cSKlaus Jensen if (unlikely(!ns)) { 450688eea45cSKlaus Jensen if (!active) { 450788eea45cSKlaus Jensen ns = nvme_subsys_ns(n->subsys, nsid); 450888eea45cSKlaus Jensen if (!ns) { 450988eea45cSKlaus Jensen return nvme_rpt_empty_id_struct(n, req); 451088eea45cSKlaus Jensen } 451188eea45cSKlaus Jensen } else { 451288eea45cSKlaus Jensen return nvme_rpt_empty_id_struct(n, req); 451388eea45cSKlaus Jensen } 451488eea45cSKlaus Jensen } 451588eea45cSKlaus Jensen 45163553c48fSGollu Appalanaidu if (c->csi == NVME_CSI_NVM) { 451788eea45cSKlaus Jensen return nvme_rpt_empty_id_struct(n, req); 451888eea45cSKlaus Jensen } else if (c->csi == NVME_CSI_ZONED && ns->csi == NVME_CSI_ZONED) { 451988eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *)ns->id_ns_zoned, sizeof(NvmeIdNsZoned), 452088eea45cSKlaus Jensen req); 452188eea45cSKlaus Jensen } 452288eea45cSKlaus Jensen 452388eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 452488eea45cSKlaus Jensen } 452588eea45cSKlaus Jensen 452688eea45cSKlaus Jensen static uint16_t nvme_identify_nslist(NvmeCtrl *n, NvmeRequest *req, 452788eea45cSKlaus Jensen bool active) 452888eea45cSKlaus Jensen { 452988eea45cSKlaus Jensen NvmeNamespace *ns; 453088eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 453188eea45cSKlaus Jensen uint32_t min_nsid = le32_to_cpu(c->nsid); 453288eea45cSKlaus Jensen uint8_t list[NVME_IDENTIFY_DATA_SIZE] = {}; 453388eea45cSKlaus Jensen static const int data_len = sizeof(list); 453488eea45cSKlaus Jensen uint32_t *list_ptr = (uint32_t *)list; 453588eea45cSKlaus Jensen int i, j = 0; 453688eea45cSKlaus Jensen 453788eea45cSKlaus Jensen trace_pci_nvme_identify_nslist(min_nsid); 453888eea45cSKlaus Jensen 453988eea45cSKlaus Jensen /* 454088eea45cSKlaus Jensen * Both FFFFFFFFh (NVME_NSID_BROADCAST) and FFFFFFFFEh are invalid values 454188eea45cSKlaus Jensen * since the Active Namespace ID List should return namespaces with ids 454288eea45cSKlaus Jensen * *higher* than the NSID specified in the command. This is also specified 454388eea45cSKlaus Jensen * in the spec (NVM Express v1.3d, Section 5.15.4). 454488eea45cSKlaus Jensen */ 454588eea45cSKlaus Jensen if (min_nsid >= NVME_NSID_BROADCAST - 1) { 454688eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 454788eea45cSKlaus Jensen } 454888eea45cSKlaus Jensen 454988eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 455088eea45cSKlaus Jensen ns = nvme_ns(n, i); 455188eea45cSKlaus Jensen if (!ns) { 455288eea45cSKlaus Jensen if (!active) { 455388eea45cSKlaus Jensen ns = nvme_subsys_ns(n->subsys, i); 455488eea45cSKlaus Jensen if (!ns) { 455588eea45cSKlaus Jensen continue; 455688eea45cSKlaus Jensen } 455788eea45cSKlaus Jensen } else { 455888eea45cSKlaus Jensen continue; 455988eea45cSKlaus Jensen } 456088eea45cSKlaus Jensen } 456188eea45cSKlaus Jensen if (ns->params.nsid <= min_nsid) { 456288eea45cSKlaus Jensen continue; 456388eea45cSKlaus Jensen } 456488eea45cSKlaus Jensen list_ptr[j++] = cpu_to_le32(ns->params.nsid); 456588eea45cSKlaus Jensen if (j == data_len / sizeof(uint32_t)) { 456688eea45cSKlaus Jensen break; 456788eea45cSKlaus Jensen } 456888eea45cSKlaus Jensen } 456988eea45cSKlaus Jensen 457088eea45cSKlaus Jensen return nvme_c2h(n, list, data_len, req); 457188eea45cSKlaus Jensen } 457288eea45cSKlaus Jensen 457388eea45cSKlaus Jensen static uint16_t nvme_identify_nslist_csi(NvmeCtrl *n, NvmeRequest *req, 457488eea45cSKlaus Jensen bool active) 457588eea45cSKlaus Jensen { 457688eea45cSKlaus Jensen NvmeNamespace *ns; 457788eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 457888eea45cSKlaus Jensen uint32_t min_nsid = le32_to_cpu(c->nsid); 457988eea45cSKlaus Jensen uint8_t list[NVME_IDENTIFY_DATA_SIZE] = {}; 458088eea45cSKlaus Jensen static const int data_len = sizeof(list); 458188eea45cSKlaus Jensen uint32_t *list_ptr = (uint32_t *)list; 458288eea45cSKlaus Jensen int i, j = 0; 458388eea45cSKlaus Jensen 458488eea45cSKlaus Jensen trace_pci_nvme_identify_nslist_csi(min_nsid, c->csi); 458588eea45cSKlaus Jensen 458688eea45cSKlaus Jensen /* 458788eea45cSKlaus Jensen * Same as in nvme_identify_nslist(), FFFFFFFFh/FFFFFFFFEh are invalid. 458888eea45cSKlaus Jensen */ 458988eea45cSKlaus Jensen if (min_nsid >= NVME_NSID_BROADCAST - 1) { 459088eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 459188eea45cSKlaus Jensen } 459288eea45cSKlaus Jensen 459388eea45cSKlaus Jensen if (c->csi != NVME_CSI_NVM && c->csi != NVME_CSI_ZONED) { 459488eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 459588eea45cSKlaus Jensen } 459688eea45cSKlaus Jensen 459788eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 459888eea45cSKlaus Jensen ns = nvme_ns(n, i); 459988eea45cSKlaus Jensen if (!ns) { 460088eea45cSKlaus Jensen if (!active) { 460188eea45cSKlaus Jensen ns = nvme_subsys_ns(n->subsys, i); 460288eea45cSKlaus Jensen if (!ns) { 460388eea45cSKlaus Jensen continue; 460488eea45cSKlaus Jensen } 460588eea45cSKlaus Jensen } else { 460688eea45cSKlaus Jensen continue; 460788eea45cSKlaus Jensen } 460888eea45cSKlaus Jensen } 460988eea45cSKlaus Jensen if (ns->params.nsid <= min_nsid || c->csi != ns->csi) { 461088eea45cSKlaus Jensen continue; 461188eea45cSKlaus Jensen } 461288eea45cSKlaus Jensen list_ptr[j++] = cpu_to_le32(ns->params.nsid); 461388eea45cSKlaus Jensen if (j == data_len / sizeof(uint32_t)) { 461488eea45cSKlaus Jensen break; 461588eea45cSKlaus Jensen } 461688eea45cSKlaus Jensen } 461788eea45cSKlaus Jensen 461888eea45cSKlaus Jensen return nvme_c2h(n, list, data_len, req); 461988eea45cSKlaus Jensen } 462088eea45cSKlaus Jensen 462188eea45cSKlaus Jensen static uint16_t nvme_identify_ns_descr_list(NvmeCtrl *n, NvmeRequest *req) 462288eea45cSKlaus Jensen { 462388eea45cSKlaus Jensen NvmeNamespace *ns; 462488eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 462588eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(c->nsid); 462688eea45cSKlaus Jensen uint8_t list[NVME_IDENTIFY_DATA_SIZE] = {}; 46276870cfb8SHeinrich Schuchardt uint8_t *pos = list; 462888eea45cSKlaus Jensen struct { 462988eea45cSKlaus Jensen NvmeIdNsDescr hdr; 463088eea45cSKlaus Jensen uint8_t v[NVME_NIDL_UUID]; 46316870cfb8SHeinrich Schuchardt } QEMU_PACKED uuid; 46326870cfb8SHeinrich Schuchardt struct { 46336870cfb8SHeinrich Schuchardt NvmeIdNsDescr hdr; 46346870cfb8SHeinrich Schuchardt uint64_t v; 46356870cfb8SHeinrich Schuchardt } QEMU_PACKED eui64; 463688eea45cSKlaus Jensen struct { 463788eea45cSKlaus Jensen NvmeIdNsDescr hdr; 463888eea45cSKlaus Jensen uint8_t v; 46396870cfb8SHeinrich Schuchardt } QEMU_PACKED csi; 464088eea45cSKlaus Jensen 464188eea45cSKlaus Jensen trace_pci_nvme_identify_ns_descr_list(nsid); 464288eea45cSKlaus Jensen 464388eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid) || nsid == NVME_NSID_BROADCAST) { 464488eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 464588eea45cSKlaus Jensen } 464688eea45cSKlaus Jensen 464788eea45cSKlaus Jensen ns = nvme_ns(n, nsid); 464888eea45cSKlaus Jensen if (unlikely(!ns)) { 464988eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 465088eea45cSKlaus Jensen } 465188eea45cSKlaus Jensen 465288eea45cSKlaus Jensen /* 46536870cfb8SHeinrich Schuchardt * If the EUI-64 field is 0 and the NGUID field is 0, the namespace must 46546870cfb8SHeinrich Schuchardt * provide a valid Namespace UUID in the Namespace Identification Descriptor 46556870cfb8SHeinrich Schuchardt * data structure. QEMU does not yet support setting NGUID. 465688eea45cSKlaus Jensen */ 46576870cfb8SHeinrich Schuchardt uuid.hdr.nidt = NVME_NIDT_UUID; 46586870cfb8SHeinrich Schuchardt uuid.hdr.nidl = NVME_NIDL_UUID; 46596870cfb8SHeinrich Schuchardt memcpy(uuid.v, ns->params.uuid.data, NVME_NIDL_UUID); 46606870cfb8SHeinrich Schuchardt memcpy(pos, &uuid, sizeof(uuid)); 46616870cfb8SHeinrich Schuchardt pos += sizeof(uuid); 466288eea45cSKlaus Jensen 46636870cfb8SHeinrich Schuchardt if (ns->params.eui64) { 46646870cfb8SHeinrich Schuchardt eui64.hdr.nidt = NVME_NIDT_EUI64; 46656870cfb8SHeinrich Schuchardt eui64.hdr.nidl = NVME_NIDL_EUI64; 46666870cfb8SHeinrich Schuchardt eui64.v = cpu_to_be64(ns->params.eui64); 46676870cfb8SHeinrich Schuchardt memcpy(pos, &eui64, sizeof(eui64)); 46686870cfb8SHeinrich Schuchardt pos += sizeof(eui64); 46696870cfb8SHeinrich Schuchardt } 46706870cfb8SHeinrich Schuchardt 46716870cfb8SHeinrich Schuchardt csi.hdr.nidt = NVME_NIDT_CSI; 46726870cfb8SHeinrich Schuchardt csi.hdr.nidl = NVME_NIDL_CSI; 46736870cfb8SHeinrich Schuchardt csi.v = ns->csi; 46746870cfb8SHeinrich Schuchardt memcpy(pos, &csi, sizeof(csi)); 46756870cfb8SHeinrich Schuchardt pos += sizeof(csi); 467688eea45cSKlaus Jensen 467788eea45cSKlaus Jensen return nvme_c2h(n, list, sizeof(list), req); 467888eea45cSKlaus Jensen } 467988eea45cSKlaus Jensen 468088eea45cSKlaus Jensen static uint16_t nvme_identify_cmd_set(NvmeCtrl *n, NvmeRequest *req) 468188eea45cSKlaus Jensen { 468288eea45cSKlaus Jensen uint8_t list[NVME_IDENTIFY_DATA_SIZE] = {}; 468388eea45cSKlaus Jensen static const int data_len = sizeof(list); 468488eea45cSKlaus Jensen 468588eea45cSKlaus Jensen trace_pci_nvme_identify_cmd_set(); 468688eea45cSKlaus Jensen 468788eea45cSKlaus Jensen NVME_SET_CSI(*list, NVME_CSI_NVM); 468888eea45cSKlaus Jensen NVME_SET_CSI(*list, NVME_CSI_ZONED); 468988eea45cSKlaus Jensen 469088eea45cSKlaus Jensen return nvme_c2h(n, list, data_len, req); 469188eea45cSKlaus Jensen } 469288eea45cSKlaus Jensen 469388eea45cSKlaus Jensen static uint16_t nvme_identify(NvmeCtrl *n, NvmeRequest *req) 469488eea45cSKlaus Jensen { 469588eea45cSKlaus Jensen NvmeIdentify *c = (NvmeIdentify *)&req->cmd; 469688eea45cSKlaus Jensen 469788eea45cSKlaus Jensen trace_pci_nvme_identify(nvme_cid(req), c->cns, le16_to_cpu(c->ctrlid), 469888eea45cSKlaus Jensen c->csi); 469988eea45cSKlaus Jensen 470088eea45cSKlaus Jensen switch (c->cns) { 470188eea45cSKlaus Jensen case NVME_ID_CNS_NS: 470288eea45cSKlaus Jensen return nvme_identify_ns(n, req, true); 470388eea45cSKlaus Jensen case NVME_ID_CNS_NS_PRESENT: 470488eea45cSKlaus Jensen return nvme_identify_ns(n, req, false); 470588eea45cSKlaus Jensen case NVME_ID_CNS_NS_ATTACHED_CTRL_LIST: 470688eea45cSKlaus Jensen return nvme_identify_ns_attached_list(n, req); 470788eea45cSKlaus Jensen case NVME_ID_CNS_CS_NS: 470888eea45cSKlaus Jensen return nvme_identify_ns_csi(n, req, true); 470988eea45cSKlaus Jensen case NVME_ID_CNS_CS_NS_PRESENT: 471088eea45cSKlaus Jensen return nvme_identify_ns_csi(n, req, false); 471188eea45cSKlaus Jensen case NVME_ID_CNS_CTRL: 471288eea45cSKlaus Jensen return nvme_identify_ctrl(n, req); 471388eea45cSKlaus Jensen case NVME_ID_CNS_CS_CTRL: 471488eea45cSKlaus Jensen return nvme_identify_ctrl_csi(n, req); 471588eea45cSKlaus Jensen case NVME_ID_CNS_NS_ACTIVE_LIST: 471688eea45cSKlaus Jensen return nvme_identify_nslist(n, req, true); 471788eea45cSKlaus Jensen case NVME_ID_CNS_NS_PRESENT_LIST: 471888eea45cSKlaus Jensen return nvme_identify_nslist(n, req, false); 471988eea45cSKlaus Jensen case NVME_ID_CNS_CS_NS_ACTIVE_LIST: 472088eea45cSKlaus Jensen return nvme_identify_nslist_csi(n, req, true); 472188eea45cSKlaus Jensen case NVME_ID_CNS_CS_NS_PRESENT_LIST: 472288eea45cSKlaus Jensen return nvme_identify_nslist_csi(n, req, false); 472388eea45cSKlaus Jensen case NVME_ID_CNS_NS_DESCR_LIST: 472488eea45cSKlaus Jensen return nvme_identify_ns_descr_list(n, req); 472588eea45cSKlaus Jensen case NVME_ID_CNS_IO_COMMAND_SET: 472688eea45cSKlaus Jensen return nvme_identify_cmd_set(n, req); 472788eea45cSKlaus Jensen default: 472888eea45cSKlaus Jensen trace_pci_nvme_err_invalid_identify_cns(le32_to_cpu(c->cns)); 472988eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 473088eea45cSKlaus Jensen } 473188eea45cSKlaus Jensen } 473288eea45cSKlaus Jensen 473388eea45cSKlaus Jensen static uint16_t nvme_abort(NvmeCtrl *n, NvmeRequest *req) 473488eea45cSKlaus Jensen { 473588eea45cSKlaus Jensen uint16_t sqid = le32_to_cpu(req->cmd.cdw10) & 0xffff; 473688eea45cSKlaus Jensen 473788eea45cSKlaus Jensen req->cqe.result = 1; 473888eea45cSKlaus Jensen if (nvme_check_sqid(n, sqid)) { 473988eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 474088eea45cSKlaus Jensen } 474188eea45cSKlaus Jensen 474288eea45cSKlaus Jensen return NVME_SUCCESS; 474388eea45cSKlaus Jensen } 474488eea45cSKlaus Jensen 474588eea45cSKlaus Jensen static inline void nvme_set_timestamp(NvmeCtrl *n, uint64_t ts) 474688eea45cSKlaus Jensen { 474788eea45cSKlaus Jensen trace_pci_nvme_setfeat_timestamp(ts); 474888eea45cSKlaus Jensen 474988eea45cSKlaus Jensen n->host_timestamp = le64_to_cpu(ts); 475088eea45cSKlaus Jensen n->timestamp_set_qemu_clock_ms = qemu_clock_get_ms(QEMU_CLOCK_VIRTUAL); 475188eea45cSKlaus Jensen } 475288eea45cSKlaus Jensen 475388eea45cSKlaus Jensen static inline uint64_t nvme_get_timestamp(const NvmeCtrl *n) 475488eea45cSKlaus Jensen { 475588eea45cSKlaus Jensen uint64_t current_time = qemu_clock_get_ms(QEMU_CLOCK_VIRTUAL); 475688eea45cSKlaus Jensen uint64_t elapsed_time = current_time - n->timestamp_set_qemu_clock_ms; 475788eea45cSKlaus Jensen 475888eea45cSKlaus Jensen union nvme_timestamp { 475988eea45cSKlaus Jensen struct { 476088eea45cSKlaus Jensen uint64_t timestamp:48; 476188eea45cSKlaus Jensen uint64_t sync:1; 476288eea45cSKlaus Jensen uint64_t origin:3; 476388eea45cSKlaus Jensen uint64_t rsvd1:12; 476488eea45cSKlaus Jensen }; 476588eea45cSKlaus Jensen uint64_t all; 476688eea45cSKlaus Jensen }; 476788eea45cSKlaus Jensen 476888eea45cSKlaus Jensen union nvme_timestamp ts; 476988eea45cSKlaus Jensen ts.all = 0; 477088eea45cSKlaus Jensen ts.timestamp = n->host_timestamp + elapsed_time; 477188eea45cSKlaus Jensen 477288eea45cSKlaus Jensen /* If the host timestamp is non-zero, set the timestamp origin */ 477388eea45cSKlaus Jensen ts.origin = n->host_timestamp ? 0x01 : 0x00; 477488eea45cSKlaus Jensen 477588eea45cSKlaus Jensen trace_pci_nvme_getfeat_timestamp(ts.all); 477688eea45cSKlaus Jensen 477788eea45cSKlaus Jensen return cpu_to_le64(ts.all); 477888eea45cSKlaus Jensen } 477988eea45cSKlaus Jensen 478088eea45cSKlaus Jensen static uint16_t nvme_get_feature_timestamp(NvmeCtrl *n, NvmeRequest *req) 478188eea45cSKlaus Jensen { 478288eea45cSKlaus Jensen uint64_t timestamp = nvme_get_timestamp(n); 478388eea45cSKlaus Jensen 478488eea45cSKlaus Jensen return nvme_c2h(n, (uint8_t *)×tamp, sizeof(timestamp), req); 478588eea45cSKlaus Jensen } 478688eea45cSKlaus Jensen 478788eea45cSKlaus Jensen static uint16_t nvme_get_feature(NvmeCtrl *n, NvmeRequest *req) 478888eea45cSKlaus Jensen { 478988eea45cSKlaus Jensen NvmeCmd *cmd = &req->cmd; 479088eea45cSKlaus Jensen uint32_t dw10 = le32_to_cpu(cmd->cdw10); 479188eea45cSKlaus Jensen uint32_t dw11 = le32_to_cpu(cmd->cdw11); 479288eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(cmd->nsid); 479388eea45cSKlaus Jensen uint32_t result; 479488eea45cSKlaus Jensen uint8_t fid = NVME_GETSETFEAT_FID(dw10); 479588eea45cSKlaus Jensen NvmeGetFeatureSelect sel = NVME_GETFEAT_SELECT(dw10); 479688eea45cSKlaus Jensen uint16_t iv; 479788eea45cSKlaus Jensen NvmeNamespace *ns; 479888eea45cSKlaus Jensen int i; 479988eea45cSKlaus Jensen 480088eea45cSKlaus Jensen static const uint32_t nvme_feature_default[NVME_FID_MAX] = { 480188eea45cSKlaus Jensen [NVME_ARBITRATION] = NVME_ARB_AB_NOLIMIT, 480288eea45cSKlaus Jensen }; 480388eea45cSKlaus Jensen 480488eea45cSKlaus Jensen trace_pci_nvme_getfeat(nvme_cid(req), nsid, fid, sel, dw11); 480588eea45cSKlaus Jensen 480688eea45cSKlaus Jensen if (!nvme_feature_support[fid]) { 480788eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 480888eea45cSKlaus Jensen } 480988eea45cSKlaus Jensen 481088eea45cSKlaus Jensen if (nvme_feature_cap[fid] & NVME_FEAT_CAP_NS) { 481188eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid) || nsid == NVME_NSID_BROADCAST) { 481288eea45cSKlaus Jensen /* 481388eea45cSKlaus Jensen * The Reservation Notification Mask and Reservation Persistence 481488eea45cSKlaus Jensen * features require a status code of Invalid Field in Command when 481588eea45cSKlaus Jensen * NSID is FFFFFFFFh. Since the device does not support those 481688eea45cSKlaus Jensen * features we can always return Invalid Namespace or Format as we 481788eea45cSKlaus Jensen * should do for all other features. 481888eea45cSKlaus Jensen */ 481988eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 482088eea45cSKlaus Jensen } 482188eea45cSKlaus Jensen 482288eea45cSKlaus Jensen if (!nvme_ns(n, nsid)) { 482388eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 482488eea45cSKlaus Jensen } 482588eea45cSKlaus Jensen } 482688eea45cSKlaus Jensen 482788eea45cSKlaus Jensen switch (sel) { 482888eea45cSKlaus Jensen case NVME_GETFEAT_SELECT_CURRENT: 482988eea45cSKlaus Jensen break; 483088eea45cSKlaus Jensen case NVME_GETFEAT_SELECT_SAVED: 483188eea45cSKlaus Jensen /* no features are saveable by the controller; fallthrough */ 483288eea45cSKlaus Jensen case NVME_GETFEAT_SELECT_DEFAULT: 483388eea45cSKlaus Jensen goto defaults; 483488eea45cSKlaus Jensen case NVME_GETFEAT_SELECT_CAP: 483588eea45cSKlaus Jensen result = nvme_feature_cap[fid]; 483688eea45cSKlaus Jensen goto out; 483788eea45cSKlaus Jensen } 483888eea45cSKlaus Jensen 483988eea45cSKlaus Jensen switch (fid) { 484088eea45cSKlaus Jensen case NVME_TEMPERATURE_THRESHOLD: 484188eea45cSKlaus Jensen result = 0; 484288eea45cSKlaus Jensen 484388eea45cSKlaus Jensen /* 484488eea45cSKlaus Jensen * The controller only implements the Composite Temperature sensor, so 484588eea45cSKlaus Jensen * return 0 for all other sensors. 484688eea45cSKlaus Jensen */ 484788eea45cSKlaus Jensen if (NVME_TEMP_TMPSEL(dw11) != NVME_TEMP_TMPSEL_COMPOSITE) { 484888eea45cSKlaus Jensen goto out; 484988eea45cSKlaus Jensen } 485088eea45cSKlaus Jensen 485188eea45cSKlaus Jensen switch (NVME_TEMP_THSEL(dw11)) { 485288eea45cSKlaus Jensen case NVME_TEMP_THSEL_OVER: 485388eea45cSKlaus Jensen result = n->features.temp_thresh_hi; 485488eea45cSKlaus Jensen goto out; 485588eea45cSKlaus Jensen case NVME_TEMP_THSEL_UNDER: 485688eea45cSKlaus Jensen result = n->features.temp_thresh_low; 485788eea45cSKlaus Jensen goto out; 485888eea45cSKlaus Jensen } 485988eea45cSKlaus Jensen 486088eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 486188eea45cSKlaus Jensen case NVME_ERROR_RECOVERY: 486288eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid)) { 486388eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 486488eea45cSKlaus Jensen } 486588eea45cSKlaus Jensen 486688eea45cSKlaus Jensen ns = nvme_ns(n, nsid); 486788eea45cSKlaus Jensen if (unlikely(!ns)) { 486888eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 486988eea45cSKlaus Jensen } 487088eea45cSKlaus Jensen 487188eea45cSKlaus Jensen result = ns->features.err_rec; 487288eea45cSKlaus Jensen goto out; 487388eea45cSKlaus Jensen case NVME_VOLATILE_WRITE_CACHE: 487488eea45cSKlaus Jensen result = 0; 487588eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 487688eea45cSKlaus Jensen ns = nvme_ns(n, i); 487788eea45cSKlaus Jensen if (!ns) { 487888eea45cSKlaus Jensen continue; 487988eea45cSKlaus Jensen } 488088eea45cSKlaus Jensen 488188eea45cSKlaus Jensen result = blk_enable_write_cache(ns->blkconf.blk); 488288eea45cSKlaus Jensen if (result) { 488388eea45cSKlaus Jensen break; 488488eea45cSKlaus Jensen } 488588eea45cSKlaus Jensen } 488688eea45cSKlaus Jensen trace_pci_nvme_getfeat_vwcache(result ? "enabled" : "disabled"); 488788eea45cSKlaus Jensen goto out; 488888eea45cSKlaus Jensen case NVME_ASYNCHRONOUS_EVENT_CONF: 488988eea45cSKlaus Jensen result = n->features.async_config; 489088eea45cSKlaus Jensen goto out; 489188eea45cSKlaus Jensen case NVME_TIMESTAMP: 489288eea45cSKlaus Jensen return nvme_get_feature_timestamp(n, req); 489388eea45cSKlaus Jensen default: 489488eea45cSKlaus Jensen break; 489588eea45cSKlaus Jensen } 489688eea45cSKlaus Jensen 489788eea45cSKlaus Jensen defaults: 489888eea45cSKlaus Jensen switch (fid) { 489988eea45cSKlaus Jensen case NVME_TEMPERATURE_THRESHOLD: 490088eea45cSKlaus Jensen result = 0; 490188eea45cSKlaus Jensen 490288eea45cSKlaus Jensen if (NVME_TEMP_TMPSEL(dw11) != NVME_TEMP_TMPSEL_COMPOSITE) { 490388eea45cSKlaus Jensen break; 490488eea45cSKlaus Jensen } 490588eea45cSKlaus Jensen 490688eea45cSKlaus Jensen if (NVME_TEMP_THSEL(dw11) == NVME_TEMP_THSEL_OVER) { 490788eea45cSKlaus Jensen result = NVME_TEMPERATURE_WARNING; 490888eea45cSKlaus Jensen } 490988eea45cSKlaus Jensen 491088eea45cSKlaus Jensen break; 491188eea45cSKlaus Jensen case NVME_NUMBER_OF_QUEUES: 491288eea45cSKlaus Jensen result = (n->params.max_ioqpairs - 1) | 491388eea45cSKlaus Jensen ((n->params.max_ioqpairs - 1) << 16); 491488eea45cSKlaus Jensen trace_pci_nvme_getfeat_numq(result); 491588eea45cSKlaus Jensen break; 491688eea45cSKlaus Jensen case NVME_INTERRUPT_VECTOR_CONF: 491788eea45cSKlaus Jensen iv = dw11 & 0xffff; 491888eea45cSKlaus Jensen if (iv >= n->params.max_ioqpairs + 1) { 491988eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 492088eea45cSKlaus Jensen } 492188eea45cSKlaus Jensen 492288eea45cSKlaus Jensen result = iv; 492388eea45cSKlaus Jensen if (iv == n->admin_cq.vector) { 492488eea45cSKlaus Jensen result |= NVME_INTVC_NOCOALESCING; 492588eea45cSKlaus Jensen } 492688eea45cSKlaus Jensen break; 492788eea45cSKlaus Jensen default: 492888eea45cSKlaus Jensen result = nvme_feature_default[fid]; 492988eea45cSKlaus Jensen break; 493088eea45cSKlaus Jensen } 493188eea45cSKlaus Jensen 493288eea45cSKlaus Jensen out: 493388eea45cSKlaus Jensen req->cqe.result = cpu_to_le32(result); 493488eea45cSKlaus Jensen return NVME_SUCCESS; 493588eea45cSKlaus Jensen } 493688eea45cSKlaus Jensen 493788eea45cSKlaus Jensen static uint16_t nvme_set_feature_timestamp(NvmeCtrl *n, NvmeRequest *req) 493888eea45cSKlaus Jensen { 493988eea45cSKlaus Jensen uint16_t ret; 494088eea45cSKlaus Jensen uint64_t timestamp; 494188eea45cSKlaus Jensen 494288eea45cSKlaus Jensen ret = nvme_h2c(n, (uint8_t *)×tamp, sizeof(timestamp), req); 494388eea45cSKlaus Jensen if (ret) { 494488eea45cSKlaus Jensen return ret; 494588eea45cSKlaus Jensen } 494688eea45cSKlaus Jensen 494788eea45cSKlaus Jensen nvme_set_timestamp(n, timestamp); 494888eea45cSKlaus Jensen 494988eea45cSKlaus Jensen return NVME_SUCCESS; 495088eea45cSKlaus Jensen } 495188eea45cSKlaus Jensen 495288eea45cSKlaus Jensen static uint16_t nvme_set_feature(NvmeCtrl *n, NvmeRequest *req) 495388eea45cSKlaus Jensen { 495488eea45cSKlaus Jensen NvmeNamespace *ns = NULL; 495588eea45cSKlaus Jensen 495688eea45cSKlaus Jensen NvmeCmd *cmd = &req->cmd; 495788eea45cSKlaus Jensen uint32_t dw10 = le32_to_cpu(cmd->cdw10); 495888eea45cSKlaus Jensen uint32_t dw11 = le32_to_cpu(cmd->cdw11); 495988eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(cmd->nsid); 496088eea45cSKlaus Jensen uint8_t fid = NVME_GETSETFEAT_FID(dw10); 496188eea45cSKlaus Jensen uint8_t save = NVME_SETFEAT_SAVE(dw10); 496288eea45cSKlaus Jensen int i; 496388eea45cSKlaus Jensen 496488eea45cSKlaus Jensen trace_pci_nvme_setfeat(nvme_cid(req), nsid, fid, save, dw11); 496588eea45cSKlaus Jensen 496688eea45cSKlaus Jensen if (save && !(nvme_feature_cap[fid] & NVME_FEAT_CAP_SAVE)) { 496788eea45cSKlaus Jensen return NVME_FID_NOT_SAVEABLE | NVME_DNR; 496888eea45cSKlaus Jensen } 496988eea45cSKlaus Jensen 497088eea45cSKlaus Jensen if (!nvme_feature_support[fid]) { 497188eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 497288eea45cSKlaus Jensen } 497388eea45cSKlaus Jensen 497488eea45cSKlaus Jensen if (nvme_feature_cap[fid] & NVME_FEAT_CAP_NS) { 497588eea45cSKlaus Jensen if (nsid != NVME_NSID_BROADCAST) { 497688eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid)) { 497788eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 497888eea45cSKlaus Jensen } 497988eea45cSKlaus Jensen 498088eea45cSKlaus Jensen ns = nvme_ns(n, nsid); 498188eea45cSKlaus Jensen if (unlikely(!ns)) { 498288eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 498388eea45cSKlaus Jensen } 498488eea45cSKlaus Jensen } 498588eea45cSKlaus Jensen } else if (nsid && nsid != NVME_NSID_BROADCAST) { 498688eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid)) { 498788eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 498888eea45cSKlaus Jensen } 498988eea45cSKlaus Jensen 499088eea45cSKlaus Jensen return NVME_FEAT_NOT_NS_SPEC | NVME_DNR; 499188eea45cSKlaus Jensen } 499288eea45cSKlaus Jensen 499388eea45cSKlaus Jensen if (!(nvme_feature_cap[fid] & NVME_FEAT_CAP_CHANGE)) { 499488eea45cSKlaus Jensen return NVME_FEAT_NOT_CHANGEABLE | NVME_DNR; 499588eea45cSKlaus Jensen } 499688eea45cSKlaus Jensen 499788eea45cSKlaus Jensen switch (fid) { 499888eea45cSKlaus Jensen case NVME_TEMPERATURE_THRESHOLD: 499988eea45cSKlaus Jensen if (NVME_TEMP_TMPSEL(dw11) != NVME_TEMP_TMPSEL_COMPOSITE) { 500088eea45cSKlaus Jensen break; 500188eea45cSKlaus Jensen } 500288eea45cSKlaus Jensen 500388eea45cSKlaus Jensen switch (NVME_TEMP_THSEL(dw11)) { 500488eea45cSKlaus Jensen case NVME_TEMP_THSEL_OVER: 500588eea45cSKlaus Jensen n->features.temp_thresh_hi = NVME_TEMP_TMPTH(dw11); 500688eea45cSKlaus Jensen break; 500788eea45cSKlaus Jensen case NVME_TEMP_THSEL_UNDER: 500888eea45cSKlaus Jensen n->features.temp_thresh_low = NVME_TEMP_TMPTH(dw11); 500988eea45cSKlaus Jensen break; 501088eea45cSKlaus Jensen default: 501188eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 501288eea45cSKlaus Jensen } 501388eea45cSKlaus Jensen 501488eea45cSKlaus Jensen if ((n->temperature >= n->features.temp_thresh_hi) || 501588eea45cSKlaus Jensen (n->temperature <= n->features.temp_thresh_low)) { 501688eea45cSKlaus Jensen nvme_smart_event(n, NVME_AER_INFO_SMART_TEMP_THRESH); 501788eea45cSKlaus Jensen } 501888eea45cSKlaus Jensen 501988eea45cSKlaus Jensen break; 502088eea45cSKlaus Jensen case NVME_ERROR_RECOVERY: 502188eea45cSKlaus Jensen if (nsid == NVME_NSID_BROADCAST) { 502288eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 502388eea45cSKlaus Jensen ns = nvme_ns(n, i); 502488eea45cSKlaus Jensen 502588eea45cSKlaus Jensen if (!ns) { 502688eea45cSKlaus Jensen continue; 502788eea45cSKlaus Jensen } 502888eea45cSKlaus Jensen 502988eea45cSKlaus Jensen if (NVME_ID_NS_NSFEAT_DULBE(ns->id_ns.nsfeat)) { 503088eea45cSKlaus Jensen ns->features.err_rec = dw11; 503188eea45cSKlaus Jensen } 503288eea45cSKlaus Jensen } 503388eea45cSKlaus Jensen 503488eea45cSKlaus Jensen break; 503588eea45cSKlaus Jensen } 503688eea45cSKlaus Jensen 503788eea45cSKlaus Jensen assert(ns); 503888eea45cSKlaus Jensen if (NVME_ID_NS_NSFEAT_DULBE(ns->id_ns.nsfeat)) { 503988eea45cSKlaus Jensen ns->features.err_rec = dw11; 504088eea45cSKlaus Jensen } 504188eea45cSKlaus Jensen break; 504288eea45cSKlaus Jensen case NVME_VOLATILE_WRITE_CACHE: 504388eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 504488eea45cSKlaus Jensen ns = nvme_ns(n, i); 504588eea45cSKlaus Jensen if (!ns) { 504688eea45cSKlaus Jensen continue; 504788eea45cSKlaus Jensen } 504888eea45cSKlaus Jensen 504988eea45cSKlaus Jensen if (!(dw11 & 0x1) && blk_enable_write_cache(ns->blkconf.blk)) { 505088eea45cSKlaus Jensen blk_flush(ns->blkconf.blk); 505188eea45cSKlaus Jensen } 505288eea45cSKlaus Jensen 505388eea45cSKlaus Jensen blk_set_enable_write_cache(ns->blkconf.blk, dw11 & 1); 505488eea45cSKlaus Jensen } 505588eea45cSKlaus Jensen 505688eea45cSKlaus Jensen break; 505788eea45cSKlaus Jensen 505888eea45cSKlaus Jensen case NVME_NUMBER_OF_QUEUES: 505988eea45cSKlaus Jensen if (n->qs_created) { 506088eea45cSKlaus Jensen return NVME_CMD_SEQ_ERROR | NVME_DNR; 506188eea45cSKlaus Jensen } 506288eea45cSKlaus Jensen 506388eea45cSKlaus Jensen /* 506488eea45cSKlaus Jensen * NVMe v1.3, Section 5.21.1.7: FFFFh is not an allowed value for NCQR 506588eea45cSKlaus Jensen * and NSQR. 506688eea45cSKlaus Jensen */ 506788eea45cSKlaus Jensen if ((dw11 & 0xffff) == 0xffff || ((dw11 >> 16) & 0xffff) == 0xffff) { 506888eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 506988eea45cSKlaus Jensen } 507088eea45cSKlaus Jensen 507188eea45cSKlaus Jensen trace_pci_nvme_setfeat_numq((dw11 & 0xffff) + 1, 507288eea45cSKlaus Jensen ((dw11 >> 16) & 0xffff) + 1, 507388eea45cSKlaus Jensen n->params.max_ioqpairs, 507488eea45cSKlaus Jensen n->params.max_ioqpairs); 507588eea45cSKlaus Jensen req->cqe.result = cpu_to_le32((n->params.max_ioqpairs - 1) | 507688eea45cSKlaus Jensen ((n->params.max_ioqpairs - 1) << 16)); 507788eea45cSKlaus Jensen break; 507888eea45cSKlaus Jensen case NVME_ASYNCHRONOUS_EVENT_CONF: 507988eea45cSKlaus Jensen n->features.async_config = dw11; 508088eea45cSKlaus Jensen break; 508188eea45cSKlaus Jensen case NVME_TIMESTAMP: 508288eea45cSKlaus Jensen return nvme_set_feature_timestamp(n, req); 508388eea45cSKlaus Jensen case NVME_COMMAND_SET_PROFILE: 508488eea45cSKlaus Jensen if (dw11 & 0x1ff) { 508588eea45cSKlaus Jensen trace_pci_nvme_err_invalid_iocsci(dw11 & 0x1ff); 508688eea45cSKlaus Jensen return NVME_CMD_SET_CMB_REJECTED | NVME_DNR; 508788eea45cSKlaus Jensen } 508888eea45cSKlaus Jensen break; 508988eea45cSKlaus Jensen default: 509088eea45cSKlaus Jensen return NVME_FEAT_NOT_CHANGEABLE | NVME_DNR; 509188eea45cSKlaus Jensen } 509288eea45cSKlaus Jensen return NVME_SUCCESS; 509388eea45cSKlaus Jensen } 509488eea45cSKlaus Jensen 509588eea45cSKlaus Jensen static uint16_t nvme_aer(NvmeCtrl *n, NvmeRequest *req) 509688eea45cSKlaus Jensen { 509788eea45cSKlaus Jensen trace_pci_nvme_aer(nvme_cid(req)); 509888eea45cSKlaus Jensen 509988eea45cSKlaus Jensen if (n->outstanding_aers > n->params.aerl) { 510088eea45cSKlaus Jensen trace_pci_nvme_aer_aerl_exceeded(); 510188eea45cSKlaus Jensen return NVME_AER_LIMIT_EXCEEDED; 510288eea45cSKlaus Jensen } 510388eea45cSKlaus Jensen 510488eea45cSKlaus Jensen n->aer_reqs[n->outstanding_aers] = req; 510588eea45cSKlaus Jensen n->outstanding_aers++; 510688eea45cSKlaus Jensen 510788eea45cSKlaus Jensen if (!QTAILQ_EMPTY(&n->aer_queue)) { 510888eea45cSKlaus Jensen nvme_process_aers(n); 510988eea45cSKlaus Jensen } 511088eea45cSKlaus Jensen 511188eea45cSKlaus Jensen return NVME_NO_COMPLETE; 511288eea45cSKlaus Jensen } 511388eea45cSKlaus Jensen 511488eea45cSKlaus Jensen static void nvme_update_dmrsl(NvmeCtrl *n) 511588eea45cSKlaus Jensen { 511688eea45cSKlaus Jensen int nsid; 511788eea45cSKlaus Jensen 511888eea45cSKlaus Jensen for (nsid = 1; nsid <= NVME_MAX_NAMESPACES; nsid++) { 511988eea45cSKlaus Jensen NvmeNamespace *ns = nvme_ns(n, nsid); 512088eea45cSKlaus Jensen if (!ns) { 512188eea45cSKlaus Jensen continue; 512288eea45cSKlaus Jensen } 512388eea45cSKlaus Jensen 512488eea45cSKlaus Jensen n->dmrsl = MIN_NON_ZERO(n->dmrsl, 512588eea45cSKlaus Jensen BDRV_REQUEST_MAX_BYTES / nvme_l2b(ns, 1)); 512688eea45cSKlaus Jensen } 512788eea45cSKlaus Jensen } 512888eea45cSKlaus Jensen 512988eea45cSKlaus Jensen static void nvme_select_iocs_ns(NvmeCtrl *n, NvmeNamespace *ns) 513088eea45cSKlaus Jensen { 513188eea45cSKlaus Jensen ns->iocs = nvme_cse_iocs_none; 513288eea45cSKlaus Jensen switch (ns->csi) { 513388eea45cSKlaus Jensen case NVME_CSI_NVM: 513488eea45cSKlaus Jensen if (NVME_CC_CSS(n->bar.cc) != NVME_CC_CSS_ADMIN_ONLY) { 513588eea45cSKlaus Jensen ns->iocs = nvme_cse_iocs_nvm; 513688eea45cSKlaus Jensen } 513788eea45cSKlaus Jensen break; 513888eea45cSKlaus Jensen case NVME_CSI_ZONED: 513988eea45cSKlaus Jensen if (NVME_CC_CSS(n->bar.cc) == NVME_CC_CSS_CSI) { 514088eea45cSKlaus Jensen ns->iocs = nvme_cse_iocs_zoned; 514188eea45cSKlaus Jensen } else if (NVME_CC_CSS(n->bar.cc) == NVME_CC_CSS_NVM) { 514288eea45cSKlaus Jensen ns->iocs = nvme_cse_iocs_nvm; 514388eea45cSKlaus Jensen } 514488eea45cSKlaus Jensen break; 514588eea45cSKlaus Jensen } 514688eea45cSKlaus Jensen } 514788eea45cSKlaus Jensen 514888eea45cSKlaus Jensen static uint16_t nvme_ns_attachment(NvmeCtrl *n, NvmeRequest *req) 514988eea45cSKlaus Jensen { 515088eea45cSKlaus Jensen NvmeNamespace *ns; 515188eea45cSKlaus Jensen NvmeCtrl *ctrl; 515288eea45cSKlaus Jensen uint16_t list[NVME_CONTROLLER_LIST_SIZE] = {}; 515388eea45cSKlaus Jensen uint32_t nsid = le32_to_cpu(req->cmd.nsid); 515488eea45cSKlaus Jensen uint32_t dw10 = le32_to_cpu(req->cmd.cdw10); 515588eea45cSKlaus Jensen bool attach = !(dw10 & 0xf); 515688eea45cSKlaus Jensen uint16_t *nr_ids = &list[0]; 515788eea45cSKlaus Jensen uint16_t *ids = &list[1]; 515888eea45cSKlaus Jensen uint16_t ret; 515988eea45cSKlaus Jensen int i; 516088eea45cSKlaus Jensen 516188eea45cSKlaus Jensen trace_pci_nvme_ns_attachment(nvme_cid(req), dw10 & 0xf); 516288eea45cSKlaus Jensen 516388eea45cSKlaus Jensen if (!nvme_nsid_valid(n, nsid)) { 516488eea45cSKlaus Jensen return NVME_INVALID_NSID | NVME_DNR; 516588eea45cSKlaus Jensen } 516688eea45cSKlaus Jensen 516788eea45cSKlaus Jensen ns = nvme_subsys_ns(n->subsys, nsid); 516888eea45cSKlaus Jensen if (!ns) { 516988eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 517088eea45cSKlaus Jensen } 517188eea45cSKlaus Jensen 517288eea45cSKlaus Jensen ret = nvme_h2c(n, (uint8_t *)list, 4096, req); 517388eea45cSKlaus Jensen if (ret) { 517488eea45cSKlaus Jensen return ret; 517588eea45cSKlaus Jensen } 517688eea45cSKlaus Jensen 517788eea45cSKlaus Jensen if (!*nr_ids) { 517888eea45cSKlaus Jensen return NVME_NS_CTRL_LIST_INVALID | NVME_DNR; 517988eea45cSKlaus Jensen } 518088eea45cSKlaus Jensen 518188eea45cSKlaus Jensen *nr_ids = MIN(*nr_ids, NVME_CONTROLLER_LIST_SIZE - 1); 518288eea45cSKlaus Jensen for (i = 0; i < *nr_ids; i++) { 518388eea45cSKlaus Jensen ctrl = nvme_subsys_ctrl(n->subsys, ids[i]); 518488eea45cSKlaus Jensen if (!ctrl) { 518588eea45cSKlaus Jensen return NVME_NS_CTRL_LIST_INVALID | NVME_DNR; 518688eea45cSKlaus Jensen } 518788eea45cSKlaus Jensen 518888eea45cSKlaus Jensen if (attach) { 518988eea45cSKlaus Jensen if (nvme_ns(ctrl, nsid)) { 519088eea45cSKlaus Jensen return NVME_NS_ALREADY_ATTACHED | NVME_DNR; 519188eea45cSKlaus Jensen } 519288eea45cSKlaus Jensen 519388eea45cSKlaus Jensen if (ns->attached && !ns->params.shared) { 519488eea45cSKlaus Jensen return NVME_NS_PRIVATE | NVME_DNR; 519588eea45cSKlaus Jensen } 519688eea45cSKlaus Jensen 519788eea45cSKlaus Jensen nvme_attach_ns(ctrl, ns); 519888eea45cSKlaus Jensen nvme_select_iocs_ns(ctrl, ns); 519988eea45cSKlaus Jensen } else { 520088eea45cSKlaus Jensen if (!nvme_ns(ctrl, nsid)) { 520188eea45cSKlaus Jensen return NVME_NS_NOT_ATTACHED | NVME_DNR; 520288eea45cSKlaus Jensen } 520388eea45cSKlaus Jensen 520488eea45cSKlaus Jensen ctrl->namespaces[nsid] = NULL; 520588eea45cSKlaus Jensen ns->attached--; 520688eea45cSKlaus Jensen 520788eea45cSKlaus Jensen nvme_update_dmrsl(ctrl); 520888eea45cSKlaus Jensen } 520988eea45cSKlaus Jensen 521088eea45cSKlaus Jensen /* 521188eea45cSKlaus Jensen * Add namespace id to the changed namespace id list for event clearing 521288eea45cSKlaus Jensen * via Get Log Page command. 521388eea45cSKlaus Jensen */ 521488eea45cSKlaus Jensen if (!test_and_set_bit(nsid, ctrl->changed_nsids)) { 521588eea45cSKlaus Jensen nvme_enqueue_event(ctrl, NVME_AER_TYPE_NOTICE, 521688eea45cSKlaus Jensen NVME_AER_INFO_NOTICE_NS_ATTR_CHANGED, 521788eea45cSKlaus Jensen NVME_LOG_CHANGED_NSLIST); 521888eea45cSKlaus Jensen } 521988eea45cSKlaus Jensen } 522088eea45cSKlaus Jensen 522188eea45cSKlaus Jensen return NVME_SUCCESS; 522288eea45cSKlaus Jensen } 522388eea45cSKlaus Jensen 52243bcf26d3SKlaus Jensen typedef struct NvmeFormatAIOCB { 52253bcf26d3SKlaus Jensen BlockAIOCB common; 52263bcf26d3SKlaus Jensen BlockAIOCB *aiocb; 52273bcf26d3SKlaus Jensen QEMUBH *bh; 52283bcf26d3SKlaus Jensen NvmeRequest *req; 52293bcf26d3SKlaus Jensen int ret; 523088eea45cSKlaus Jensen 52313bcf26d3SKlaus Jensen NvmeNamespace *ns; 52323bcf26d3SKlaus Jensen uint32_t nsid; 52333bcf26d3SKlaus Jensen bool broadcast; 52343bcf26d3SKlaus Jensen int64_t offset; 52353bcf26d3SKlaus Jensen } NvmeFormatAIOCB; 52363bcf26d3SKlaus Jensen 52373bcf26d3SKlaus Jensen static void nvme_format_bh(void *opaque); 52383bcf26d3SKlaus Jensen 52393bcf26d3SKlaus Jensen static void nvme_format_cancel(BlockAIOCB *aiocb) 52403bcf26d3SKlaus Jensen { 52413bcf26d3SKlaus Jensen NvmeFormatAIOCB *iocb = container_of(aiocb, NvmeFormatAIOCB, common); 52423bcf26d3SKlaus Jensen 52433bcf26d3SKlaus Jensen if (iocb->aiocb) { 52443bcf26d3SKlaus Jensen blk_aio_cancel_async(iocb->aiocb); 52453bcf26d3SKlaus Jensen } 52463bcf26d3SKlaus Jensen } 52473bcf26d3SKlaus Jensen 52483bcf26d3SKlaus Jensen static const AIOCBInfo nvme_format_aiocb_info = { 52493bcf26d3SKlaus Jensen .aiocb_size = sizeof(NvmeFormatAIOCB), 52503bcf26d3SKlaus Jensen .cancel_async = nvme_format_cancel, 52513bcf26d3SKlaus Jensen .get_aio_context = nvme_get_aio_context, 52523bcf26d3SKlaus Jensen }; 52533bcf26d3SKlaus Jensen 52543bcf26d3SKlaus Jensen static void nvme_format_set(NvmeNamespace *ns, NvmeCmd *cmd) 52553bcf26d3SKlaus Jensen { 52563bcf26d3SKlaus Jensen uint32_t dw10 = le32_to_cpu(cmd->cdw10); 52573bcf26d3SKlaus Jensen uint8_t lbaf = dw10 & 0xf; 52583bcf26d3SKlaus Jensen uint8_t pi = (dw10 >> 5) & 0x7; 52593bcf26d3SKlaus Jensen uint8_t mset = (dw10 >> 4) & 0x1; 52603bcf26d3SKlaus Jensen uint8_t pil = (dw10 >> 8) & 0x1; 52613bcf26d3SKlaus Jensen 52623bcf26d3SKlaus Jensen trace_pci_nvme_format_set(ns->params.nsid, lbaf, mset, pi, pil); 52633bcf26d3SKlaus Jensen 52643bcf26d3SKlaus Jensen ns->id_ns.dps = (pil << 3) | pi; 52653bcf26d3SKlaus Jensen ns->id_ns.flbas = lbaf | (mset << 4); 52663bcf26d3SKlaus Jensen 52673bcf26d3SKlaus Jensen nvme_ns_init_format(ns); 52683bcf26d3SKlaus Jensen } 52693bcf26d3SKlaus Jensen 52703bcf26d3SKlaus Jensen static void nvme_format_ns_cb(void *opaque, int ret) 52713bcf26d3SKlaus Jensen { 52723bcf26d3SKlaus Jensen NvmeFormatAIOCB *iocb = opaque; 52733bcf26d3SKlaus Jensen NvmeRequest *req = iocb->req; 52743bcf26d3SKlaus Jensen NvmeNamespace *ns = iocb->ns; 52753bcf26d3SKlaus Jensen int bytes; 52763bcf26d3SKlaus Jensen 52773bcf26d3SKlaus Jensen if (ret < 0) { 52783bcf26d3SKlaus Jensen iocb->ret = ret; 52793bcf26d3SKlaus Jensen goto done; 52803bcf26d3SKlaus Jensen } 52813bcf26d3SKlaus Jensen 52823bcf26d3SKlaus Jensen assert(ns); 52833bcf26d3SKlaus Jensen 52843bcf26d3SKlaus Jensen if (iocb->offset < ns->size) { 52853bcf26d3SKlaus Jensen bytes = MIN(BDRV_REQUEST_MAX_BYTES, ns->size - iocb->offset); 52863bcf26d3SKlaus Jensen 52873bcf26d3SKlaus Jensen iocb->aiocb = blk_aio_pwrite_zeroes(ns->blkconf.blk, iocb->offset, 52883bcf26d3SKlaus Jensen bytes, BDRV_REQ_MAY_UNMAP, 52893bcf26d3SKlaus Jensen nvme_format_ns_cb, iocb); 52903bcf26d3SKlaus Jensen 52913bcf26d3SKlaus Jensen iocb->offset += bytes; 52923bcf26d3SKlaus Jensen return; 52933bcf26d3SKlaus Jensen } 52943bcf26d3SKlaus Jensen 52953bcf26d3SKlaus Jensen nvme_format_set(ns, &req->cmd); 52963bcf26d3SKlaus Jensen ns->status = 0x0; 52973bcf26d3SKlaus Jensen iocb->ns = NULL; 52983bcf26d3SKlaus Jensen iocb->offset = 0; 52993bcf26d3SKlaus Jensen 53003bcf26d3SKlaus Jensen done: 53013bcf26d3SKlaus Jensen iocb->aiocb = NULL; 53023bcf26d3SKlaus Jensen qemu_bh_schedule(iocb->bh); 53033bcf26d3SKlaus Jensen } 53043bcf26d3SKlaus Jensen 53053bcf26d3SKlaus Jensen static uint16_t nvme_format_check(NvmeNamespace *ns, uint8_t lbaf, uint8_t pi) 53063bcf26d3SKlaus Jensen { 530788eea45cSKlaus Jensen if (ns->params.zoned) { 530888eea45cSKlaus Jensen return NVME_INVALID_FORMAT | NVME_DNR; 530988eea45cSKlaus Jensen } 531088eea45cSKlaus Jensen 531188eea45cSKlaus Jensen if (lbaf > ns->id_ns.nlbaf) { 531288eea45cSKlaus Jensen return NVME_INVALID_FORMAT | NVME_DNR; 531388eea45cSKlaus Jensen } 531488eea45cSKlaus Jensen 53153bcf26d3SKlaus Jensen if (pi && (ns->id_ns.lbaf[lbaf].ms < sizeof(NvmeDifTuple))) { 531688eea45cSKlaus Jensen return NVME_INVALID_FORMAT | NVME_DNR; 531788eea45cSKlaus Jensen } 531888eea45cSKlaus Jensen 531988eea45cSKlaus Jensen if (pi && pi > NVME_ID_NS_DPS_TYPE_3) { 532088eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 532188eea45cSKlaus Jensen } 532288eea45cSKlaus Jensen 532388eea45cSKlaus Jensen return NVME_SUCCESS; 532488eea45cSKlaus Jensen } 532588eea45cSKlaus Jensen 53263bcf26d3SKlaus Jensen static void nvme_format_bh(void *opaque) 532788eea45cSKlaus Jensen { 53283bcf26d3SKlaus Jensen NvmeFormatAIOCB *iocb = opaque; 53293bcf26d3SKlaus Jensen NvmeRequest *req = iocb->req; 53303bcf26d3SKlaus Jensen NvmeCtrl *n = nvme_ctrl(req); 533188eea45cSKlaus Jensen uint32_t dw10 = le32_to_cpu(req->cmd.cdw10); 533288eea45cSKlaus Jensen uint8_t lbaf = dw10 & 0xf; 533388eea45cSKlaus Jensen uint8_t pi = (dw10 >> 5) & 0x7; 533488eea45cSKlaus Jensen uint16_t status; 533588eea45cSKlaus Jensen int i; 533688eea45cSKlaus Jensen 53373bcf26d3SKlaus Jensen if (iocb->ret < 0) { 53383bcf26d3SKlaus Jensen goto done; 533988eea45cSKlaus Jensen } 534088eea45cSKlaus Jensen 53413bcf26d3SKlaus Jensen if (iocb->broadcast) { 53423bcf26d3SKlaus Jensen for (i = iocb->nsid + 1; i <= NVME_MAX_NAMESPACES; i++) { 53433bcf26d3SKlaus Jensen iocb->ns = nvme_ns(n, i); 53443bcf26d3SKlaus Jensen if (iocb->ns) { 53453bcf26d3SKlaus Jensen iocb->nsid = i; 534688eea45cSKlaus Jensen break; 534788eea45cSKlaus Jensen } 534888eea45cSKlaus Jensen } 534988eea45cSKlaus Jensen } 535088eea45cSKlaus Jensen 53513bcf26d3SKlaus Jensen if (!iocb->ns) { 53523bcf26d3SKlaus Jensen goto done; 535388eea45cSKlaus Jensen } 535488eea45cSKlaus Jensen 53553bcf26d3SKlaus Jensen status = nvme_format_check(iocb->ns, lbaf, pi); 53563bcf26d3SKlaus Jensen if (status) { 53573bcf26d3SKlaus Jensen req->status = status; 53583bcf26d3SKlaus Jensen goto done; 53593bcf26d3SKlaus Jensen } 53603bcf26d3SKlaus Jensen 53613bcf26d3SKlaus Jensen iocb->ns->status = NVME_FORMAT_IN_PROGRESS; 53623bcf26d3SKlaus Jensen nvme_format_ns_cb(iocb, 0); 53633bcf26d3SKlaus Jensen return; 53643bcf26d3SKlaus Jensen 53653bcf26d3SKlaus Jensen done: 53663bcf26d3SKlaus Jensen qemu_bh_delete(iocb->bh); 53673bcf26d3SKlaus Jensen iocb->bh = NULL; 53683bcf26d3SKlaus Jensen 53693bcf26d3SKlaus Jensen iocb->common.cb(iocb->common.opaque, iocb->ret); 53703bcf26d3SKlaus Jensen 53713bcf26d3SKlaus Jensen qemu_aio_unref(iocb); 53723bcf26d3SKlaus Jensen } 53733bcf26d3SKlaus Jensen 53743bcf26d3SKlaus Jensen static uint16_t nvme_format(NvmeCtrl *n, NvmeRequest *req) 53753bcf26d3SKlaus Jensen { 53763bcf26d3SKlaus Jensen NvmeFormatAIOCB *iocb; 53773bcf26d3SKlaus Jensen uint32_t nsid = le32_to_cpu(req->cmd.nsid); 53783bcf26d3SKlaus Jensen uint16_t status; 53793bcf26d3SKlaus Jensen 53803bcf26d3SKlaus Jensen iocb = qemu_aio_get(&nvme_format_aiocb_info, NULL, nvme_misc_cb, req); 53813bcf26d3SKlaus Jensen 53823bcf26d3SKlaus Jensen iocb->req = req; 53833bcf26d3SKlaus Jensen iocb->bh = qemu_bh_new(nvme_format_bh, iocb); 53843bcf26d3SKlaus Jensen iocb->ret = 0; 53853bcf26d3SKlaus Jensen iocb->ns = NULL; 53863bcf26d3SKlaus Jensen iocb->nsid = 0; 53873bcf26d3SKlaus Jensen iocb->broadcast = (nsid == NVME_NSID_BROADCAST); 53883bcf26d3SKlaus Jensen iocb->offset = 0; 53893bcf26d3SKlaus Jensen 53903bcf26d3SKlaus Jensen if (!iocb->broadcast) { 53913bcf26d3SKlaus Jensen if (!nvme_nsid_valid(n, nsid)) { 53923bcf26d3SKlaus Jensen status = NVME_INVALID_NSID | NVME_DNR; 53933bcf26d3SKlaus Jensen goto out; 53943bcf26d3SKlaus Jensen } 53953bcf26d3SKlaus Jensen 53963bcf26d3SKlaus Jensen iocb->ns = nvme_ns(n, nsid); 53973bcf26d3SKlaus Jensen if (!iocb->ns) { 53983bcf26d3SKlaus Jensen status = NVME_INVALID_FIELD | NVME_DNR; 53993bcf26d3SKlaus Jensen goto out; 54003bcf26d3SKlaus Jensen } 54013bcf26d3SKlaus Jensen } 54023bcf26d3SKlaus Jensen 54033bcf26d3SKlaus Jensen req->aiocb = &iocb->common; 54043bcf26d3SKlaus Jensen qemu_bh_schedule(iocb->bh); 54053bcf26d3SKlaus Jensen 54063bcf26d3SKlaus Jensen return NVME_NO_COMPLETE; 54073bcf26d3SKlaus Jensen 54083bcf26d3SKlaus Jensen out: 54093bcf26d3SKlaus Jensen qemu_bh_delete(iocb->bh); 54103bcf26d3SKlaus Jensen iocb->bh = NULL; 54113bcf26d3SKlaus Jensen qemu_aio_unref(iocb); 54123bcf26d3SKlaus Jensen return status; 541388eea45cSKlaus Jensen } 541488eea45cSKlaus Jensen 541588eea45cSKlaus Jensen static uint16_t nvme_admin_cmd(NvmeCtrl *n, NvmeRequest *req) 541688eea45cSKlaus Jensen { 541788eea45cSKlaus Jensen trace_pci_nvme_admin_cmd(nvme_cid(req), nvme_sqid(req), req->cmd.opcode, 541888eea45cSKlaus Jensen nvme_adm_opc_str(req->cmd.opcode)); 541988eea45cSKlaus Jensen 542088eea45cSKlaus Jensen if (!(nvme_cse_acs[req->cmd.opcode] & NVME_CMD_EFF_CSUPP)) { 542188eea45cSKlaus Jensen trace_pci_nvme_err_invalid_admin_opc(req->cmd.opcode); 542288eea45cSKlaus Jensen return NVME_INVALID_OPCODE | NVME_DNR; 542388eea45cSKlaus Jensen } 542488eea45cSKlaus Jensen 542588eea45cSKlaus Jensen /* SGLs shall not be used for Admin commands in NVMe over PCIe */ 542688eea45cSKlaus Jensen if (NVME_CMD_FLAGS_PSDT(req->cmd.flags) != NVME_PSDT_PRP) { 542788eea45cSKlaus Jensen return NVME_INVALID_FIELD | NVME_DNR; 542888eea45cSKlaus Jensen } 542988eea45cSKlaus Jensen 543088eea45cSKlaus Jensen switch (req->cmd.opcode) { 543188eea45cSKlaus Jensen case NVME_ADM_CMD_DELETE_SQ: 543288eea45cSKlaus Jensen return nvme_del_sq(n, req); 543388eea45cSKlaus Jensen case NVME_ADM_CMD_CREATE_SQ: 543488eea45cSKlaus Jensen return nvme_create_sq(n, req); 543588eea45cSKlaus Jensen case NVME_ADM_CMD_GET_LOG_PAGE: 543688eea45cSKlaus Jensen return nvme_get_log(n, req); 543788eea45cSKlaus Jensen case NVME_ADM_CMD_DELETE_CQ: 543888eea45cSKlaus Jensen return nvme_del_cq(n, req); 543988eea45cSKlaus Jensen case NVME_ADM_CMD_CREATE_CQ: 544088eea45cSKlaus Jensen return nvme_create_cq(n, req); 544188eea45cSKlaus Jensen case NVME_ADM_CMD_IDENTIFY: 544288eea45cSKlaus Jensen return nvme_identify(n, req); 544388eea45cSKlaus Jensen case NVME_ADM_CMD_ABORT: 544488eea45cSKlaus Jensen return nvme_abort(n, req); 544588eea45cSKlaus Jensen case NVME_ADM_CMD_SET_FEATURES: 544688eea45cSKlaus Jensen return nvme_set_feature(n, req); 544788eea45cSKlaus Jensen case NVME_ADM_CMD_GET_FEATURES: 544888eea45cSKlaus Jensen return nvme_get_feature(n, req); 544988eea45cSKlaus Jensen case NVME_ADM_CMD_ASYNC_EV_REQ: 545088eea45cSKlaus Jensen return nvme_aer(n, req); 545188eea45cSKlaus Jensen case NVME_ADM_CMD_NS_ATTACHMENT: 545288eea45cSKlaus Jensen return nvme_ns_attachment(n, req); 545388eea45cSKlaus Jensen case NVME_ADM_CMD_FORMAT_NVM: 545488eea45cSKlaus Jensen return nvme_format(n, req); 545588eea45cSKlaus Jensen default: 545688eea45cSKlaus Jensen assert(false); 545788eea45cSKlaus Jensen } 545888eea45cSKlaus Jensen 545988eea45cSKlaus Jensen return NVME_INVALID_OPCODE | NVME_DNR; 546088eea45cSKlaus Jensen } 546188eea45cSKlaus Jensen 546288eea45cSKlaus Jensen static void nvme_process_sq(void *opaque) 546388eea45cSKlaus Jensen { 546488eea45cSKlaus Jensen NvmeSQueue *sq = opaque; 546588eea45cSKlaus Jensen NvmeCtrl *n = sq->ctrl; 546688eea45cSKlaus Jensen NvmeCQueue *cq = n->cq[sq->cqid]; 546788eea45cSKlaus Jensen 546888eea45cSKlaus Jensen uint16_t status; 546988eea45cSKlaus Jensen hwaddr addr; 547088eea45cSKlaus Jensen NvmeCmd cmd; 547188eea45cSKlaus Jensen NvmeRequest *req; 547288eea45cSKlaus Jensen 547388eea45cSKlaus Jensen while (!(nvme_sq_empty(sq) || QTAILQ_EMPTY(&sq->req_list))) { 547488eea45cSKlaus Jensen addr = sq->dma_addr + sq->head * n->sqe_size; 547588eea45cSKlaus Jensen if (nvme_addr_read(n, addr, (void *)&cmd, sizeof(cmd))) { 547688eea45cSKlaus Jensen trace_pci_nvme_err_addr_read(addr); 547788eea45cSKlaus Jensen trace_pci_nvme_err_cfs(); 547888eea45cSKlaus Jensen n->bar.csts = NVME_CSTS_FAILED; 547988eea45cSKlaus Jensen break; 548088eea45cSKlaus Jensen } 548188eea45cSKlaus Jensen nvme_inc_sq_head(sq); 548288eea45cSKlaus Jensen 548388eea45cSKlaus Jensen req = QTAILQ_FIRST(&sq->req_list); 548488eea45cSKlaus Jensen QTAILQ_REMOVE(&sq->req_list, req, entry); 548588eea45cSKlaus Jensen QTAILQ_INSERT_TAIL(&sq->out_req_list, req, entry); 548688eea45cSKlaus Jensen nvme_req_clear(req); 548788eea45cSKlaus Jensen req->cqe.cid = cmd.cid; 548888eea45cSKlaus Jensen memcpy(&req->cmd, &cmd, sizeof(NvmeCmd)); 548988eea45cSKlaus Jensen 549088eea45cSKlaus Jensen status = sq->sqid ? nvme_io_cmd(n, req) : 549188eea45cSKlaus Jensen nvme_admin_cmd(n, req); 549288eea45cSKlaus Jensen if (status != NVME_NO_COMPLETE) { 549388eea45cSKlaus Jensen req->status = status; 549488eea45cSKlaus Jensen nvme_enqueue_req_completion(cq, req); 549588eea45cSKlaus Jensen } 549688eea45cSKlaus Jensen } 549788eea45cSKlaus Jensen } 549888eea45cSKlaus Jensen 549988eea45cSKlaus Jensen static void nvme_ctrl_reset(NvmeCtrl *n) 550088eea45cSKlaus Jensen { 550188eea45cSKlaus Jensen NvmeNamespace *ns; 550288eea45cSKlaus Jensen int i; 550388eea45cSKlaus Jensen 550488eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 550588eea45cSKlaus Jensen ns = nvme_ns(n, i); 550688eea45cSKlaus Jensen if (!ns) { 550788eea45cSKlaus Jensen continue; 550888eea45cSKlaus Jensen } 550988eea45cSKlaus Jensen 551088eea45cSKlaus Jensen nvme_ns_drain(ns); 551188eea45cSKlaus Jensen } 551288eea45cSKlaus Jensen 551388eea45cSKlaus Jensen for (i = 0; i < n->params.max_ioqpairs + 1; i++) { 551488eea45cSKlaus Jensen if (n->sq[i] != NULL) { 551588eea45cSKlaus Jensen nvme_free_sq(n->sq[i], n); 551688eea45cSKlaus Jensen } 551788eea45cSKlaus Jensen } 551888eea45cSKlaus Jensen for (i = 0; i < n->params.max_ioqpairs + 1; i++) { 551988eea45cSKlaus Jensen if (n->cq[i] != NULL) { 552088eea45cSKlaus Jensen nvme_free_cq(n->cq[i], n); 552188eea45cSKlaus Jensen } 552288eea45cSKlaus Jensen } 552388eea45cSKlaus Jensen 552488eea45cSKlaus Jensen while (!QTAILQ_EMPTY(&n->aer_queue)) { 552588eea45cSKlaus Jensen NvmeAsyncEvent *event = QTAILQ_FIRST(&n->aer_queue); 552688eea45cSKlaus Jensen QTAILQ_REMOVE(&n->aer_queue, event, entry); 552788eea45cSKlaus Jensen g_free(event); 552888eea45cSKlaus Jensen } 552988eea45cSKlaus Jensen 553088eea45cSKlaus Jensen n->aer_queued = 0; 553188eea45cSKlaus Jensen n->outstanding_aers = 0; 553288eea45cSKlaus Jensen n->qs_created = false; 553388eea45cSKlaus Jensen 553488eea45cSKlaus Jensen n->bar.cc = 0; 553588eea45cSKlaus Jensen } 553688eea45cSKlaus Jensen 553788eea45cSKlaus Jensen static void nvme_ctrl_shutdown(NvmeCtrl *n) 553888eea45cSKlaus Jensen { 553988eea45cSKlaus Jensen NvmeNamespace *ns; 554088eea45cSKlaus Jensen int i; 554188eea45cSKlaus Jensen 554288eea45cSKlaus Jensen if (n->pmr.dev) { 554388eea45cSKlaus Jensen memory_region_msync(&n->pmr.dev->mr, 0, n->pmr.dev->size); 554488eea45cSKlaus Jensen } 554588eea45cSKlaus Jensen 554688eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 554788eea45cSKlaus Jensen ns = nvme_ns(n, i); 554888eea45cSKlaus Jensen if (!ns) { 554988eea45cSKlaus Jensen continue; 555088eea45cSKlaus Jensen } 555188eea45cSKlaus Jensen 555288eea45cSKlaus Jensen nvme_ns_shutdown(ns); 555388eea45cSKlaus Jensen } 555488eea45cSKlaus Jensen } 555588eea45cSKlaus Jensen 555688eea45cSKlaus Jensen static void nvme_select_iocs(NvmeCtrl *n) 555788eea45cSKlaus Jensen { 555888eea45cSKlaus Jensen NvmeNamespace *ns; 555988eea45cSKlaus Jensen int i; 556088eea45cSKlaus Jensen 556188eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 556288eea45cSKlaus Jensen ns = nvme_ns(n, i); 556388eea45cSKlaus Jensen if (!ns) { 556488eea45cSKlaus Jensen continue; 556588eea45cSKlaus Jensen } 556688eea45cSKlaus Jensen 556788eea45cSKlaus Jensen nvme_select_iocs_ns(n, ns); 556888eea45cSKlaus Jensen } 556988eea45cSKlaus Jensen } 557088eea45cSKlaus Jensen 557188eea45cSKlaus Jensen static int nvme_start_ctrl(NvmeCtrl *n) 557288eea45cSKlaus Jensen { 557388eea45cSKlaus Jensen uint32_t page_bits = NVME_CC_MPS(n->bar.cc) + 12; 557488eea45cSKlaus Jensen uint32_t page_size = 1 << page_bits; 557588eea45cSKlaus Jensen 557688eea45cSKlaus Jensen if (unlikely(n->cq[0])) { 557788eea45cSKlaus Jensen trace_pci_nvme_err_startfail_cq(); 557888eea45cSKlaus Jensen return -1; 557988eea45cSKlaus Jensen } 558088eea45cSKlaus Jensen if (unlikely(n->sq[0])) { 558188eea45cSKlaus Jensen trace_pci_nvme_err_startfail_sq(); 558288eea45cSKlaus Jensen return -1; 558388eea45cSKlaus Jensen } 558488eea45cSKlaus Jensen if (unlikely(!n->bar.asq)) { 558588eea45cSKlaus Jensen trace_pci_nvme_err_startfail_nbarasq(); 558688eea45cSKlaus Jensen return -1; 558788eea45cSKlaus Jensen } 558888eea45cSKlaus Jensen if (unlikely(!n->bar.acq)) { 558988eea45cSKlaus Jensen trace_pci_nvme_err_startfail_nbaracq(); 559088eea45cSKlaus Jensen return -1; 559188eea45cSKlaus Jensen } 559288eea45cSKlaus Jensen if (unlikely(n->bar.asq & (page_size - 1))) { 559388eea45cSKlaus Jensen trace_pci_nvme_err_startfail_asq_misaligned(n->bar.asq); 559488eea45cSKlaus Jensen return -1; 559588eea45cSKlaus Jensen } 559688eea45cSKlaus Jensen if (unlikely(n->bar.acq & (page_size - 1))) { 559788eea45cSKlaus Jensen trace_pci_nvme_err_startfail_acq_misaligned(n->bar.acq); 559888eea45cSKlaus Jensen return -1; 559988eea45cSKlaus Jensen } 560088eea45cSKlaus Jensen if (unlikely(!(NVME_CAP_CSS(n->bar.cap) & (1 << NVME_CC_CSS(n->bar.cc))))) { 560188eea45cSKlaus Jensen trace_pci_nvme_err_startfail_css(NVME_CC_CSS(n->bar.cc)); 560288eea45cSKlaus Jensen return -1; 560388eea45cSKlaus Jensen } 560488eea45cSKlaus Jensen if (unlikely(NVME_CC_MPS(n->bar.cc) < 560588eea45cSKlaus Jensen NVME_CAP_MPSMIN(n->bar.cap))) { 560688eea45cSKlaus Jensen trace_pci_nvme_err_startfail_page_too_small( 560788eea45cSKlaus Jensen NVME_CC_MPS(n->bar.cc), 560888eea45cSKlaus Jensen NVME_CAP_MPSMIN(n->bar.cap)); 560988eea45cSKlaus Jensen return -1; 561088eea45cSKlaus Jensen } 561188eea45cSKlaus Jensen if (unlikely(NVME_CC_MPS(n->bar.cc) > 561288eea45cSKlaus Jensen NVME_CAP_MPSMAX(n->bar.cap))) { 561388eea45cSKlaus Jensen trace_pci_nvme_err_startfail_page_too_large( 561488eea45cSKlaus Jensen NVME_CC_MPS(n->bar.cc), 561588eea45cSKlaus Jensen NVME_CAP_MPSMAX(n->bar.cap)); 561688eea45cSKlaus Jensen return -1; 561788eea45cSKlaus Jensen } 561888eea45cSKlaus Jensen if (unlikely(NVME_CC_IOCQES(n->bar.cc) < 561988eea45cSKlaus Jensen NVME_CTRL_CQES_MIN(n->id_ctrl.cqes))) { 562088eea45cSKlaus Jensen trace_pci_nvme_err_startfail_cqent_too_small( 562188eea45cSKlaus Jensen NVME_CC_IOCQES(n->bar.cc), 562288eea45cSKlaus Jensen NVME_CTRL_CQES_MIN(n->bar.cap)); 562388eea45cSKlaus Jensen return -1; 562488eea45cSKlaus Jensen } 562588eea45cSKlaus Jensen if (unlikely(NVME_CC_IOCQES(n->bar.cc) > 562688eea45cSKlaus Jensen NVME_CTRL_CQES_MAX(n->id_ctrl.cqes))) { 562788eea45cSKlaus Jensen trace_pci_nvme_err_startfail_cqent_too_large( 562888eea45cSKlaus Jensen NVME_CC_IOCQES(n->bar.cc), 562988eea45cSKlaus Jensen NVME_CTRL_CQES_MAX(n->bar.cap)); 563088eea45cSKlaus Jensen return -1; 563188eea45cSKlaus Jensen } 563288eea45cSKlaus Jensen if (unlikely(NVME_CC_IOSQES(n->bar.cc) < 563388eea45cSKlaus Jensen NVME_CTRL_SQES_MIN(n->id_ctrl.sqes))) { 563488eea45cSKlaus Jensen trace_pci_nvme_err_startfail_sqent_too_small( 563588eea45cSKlaus Jensen NVME_CC_IOSQES(n->bar.cc), 563688eea45cSKlaus Jensen NVME_CTRL_SQES_MIN(n->bar.cap)); 563788eea45cSKlaus Jensen return -1; 563888eea45cSKlaus Jensen } 563988eea45cSKlaus Jensen if (unlikely(NVME_CC_IOSQES(n->bar.cc) > 564088eea45cSKlaus Jensen NVME_CTRL_SQES_MAX(n->id_ctrl.sqes))) { 564188eea45cSKlaus Jensen trace_pci_nvme_err_startfail_sqent_too_large( 564288eea45cSKlaus Jensen NVME_CC_IOSQES(n->bar.cc), 564388eea45cSKlaus Jensen NVME_CTRL_SQES_MAX(n->bar.cap)); 564488eea45cSKlaus Jensen return -1; 564588eea45cSKlaus Jensen } 564688eea45cSKlaus Jensen if (unlikely(!NVME_AQA_ASQS(n->bar.aqa))) { 564788eea45cSKlaus Jensen trace_pci_nvme_err_startfail_asqent_sz_zero(); 564888eea45cSKlaus Jensen return -1; 564988eea45cSKlaus Jensen } 565088eea45cSKlaus Jensen if (unlikely(!NVME_AQA_ACQS(n->bar.aqa))) { 565188eea45cSKlaus Jensen trace_pci_nvme_err_startfail_acqent_sz_zero(); 565288eea45cSKlaus Jensen return -1; 565388eea45cSKlaus Jensen } 565488eea45cSKlaus Jensen 565588eea45cSKlaus Jensen n->page_bits = page_bits; 565688eea45cSKlaus Jensen n->page_size = page_size; 565788eea45cSKlaus Jensen n->max_prp_ents = n->page_size / sizeof(uint64_t); 565888eea45cSKlaus Jensen n->cqe_size = 1 << NVME_CC_IOCQES(n->bar.cc); 565988eea45cSKlaus Jensen n->sqe_size = 1 << NVME_CC_IOSQES(n->bar.cc); 566088eea45cSKlaus Jensen nvme_init_cq(&n->admin_cq, n, n->bar.acq, 0, 0, 566188eea45cSKlaus Jensen NVME_AQA_ACQS(n->bar.aqa) + 1, 1); 566288eea45cSKlaus Jensen nvme_init_sq(&n->admin_sq, n, n->bar.asq, 0, 0, 566388eea45cSKlaus Jensen NVME_AQA_ASQS(n->bar.aqa) + 1); 566488eea45cSKlaus Jensen 566588eea45cSKlaus Jensen nvme_set_timestamp(n, 0ULL); 566688eea45cSKlaus Jensen 566788eea45cSKlaus Jensen QTAILQ_INIT(&n->aer_queue); 566888eea45cSKlaus Jensen 566988eea45cSKlaus Jensen nvme_select_iocs(n); 567088eea45cSKlaus Jensen 567188eea45cSKlaus Jensen return 0; 567288eea45cSKlaus Jensen } 567388eea45cSKlaus Jensen 567488eea45cSKlaus Jensen static void nvme_cmb_enable_regs(NvmeCtrl *n) 567588eea45cSKlaus Jensen { 567688eea45cSKlaus Jensen NVME_CMBLOC_SET_CDPCILS(n->bar.cmbloc, 1); 567788eea45cSKlaus Jensen NVME_CMBLOC_SET_CDPMLS(n->bar.cmbloc, 1); 567888eea45cSKlaus Jensen NVME_CMBLOC_SET_BIR(n->bar.cmbloc, NVME_CMB_BIR); 567988eea45cSKlaus Jensen 568088eea45cSKlaus Jensen NVME_CMBSZ_SET_SQS(n->bar.cmbsz, 1); 568188eea45cSKlaus Jensen NVME_CMBSZ_SET_CQS(n->bar.cmbsz, 0); 568288eea45cSKlaus Jensen NVME_CMBSZ_SET_LISTS(n->bar.cmbsz, 1); 568388eea45cSKlaus Jensen NVME_CMBSZ_SET_RDS(n->bar.cmbsz, 1); 568488eea45cSKlaus Jensen NVME_CMBSZ_SET_WDS(n->bar.cmbsz, 1); 568588eea45cSKlaus Jensen NVME_CMBSZ_SET_SZU(n->bar.cmbsz, 2); /* MBs */ 568688eea45cSKlaus Jensen NVME_CMBSZ_SET_SZ(n->bar.cmbsz, n->params.cmb_size_mb); 568788eea45cSKlaus Jensen } 568888eea45cSKlaus Jensen 568988eea45cSKlaus Jensen static void nvme_write_bar(NvmeCtrl *n, hwaddr offset, uint64_t data, 569088eea45cSKlaus Jensen unsigned size) 569188eea45cSKlaus Jensen { 569288eea45cSKlaus Jensen if (unlikely(offset & (sizeof(uint32_t) - 1))) { 569388eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_misaligned32, 569488eea45cSKlaus Jensen "MMIO write not 32-bit aligned," 569588eea45cSKlaus Jensen " offset=0x%"PRIx64"", offset); 569688eea45cSKlaus Jensen /* should be ignored, fall through for now */ 569788eea45cSKlaus Jensen } 569888eea45cSKlaus Jensen 569988eea45cSKlaus Jensen if (unlikely(size < sizeof(uint32_t))) { 570088eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_toosmall, 570188eea45cSKlaus Jensen "MMIO write smaller than 32-bits," 570288eea45cSKlaus Jensen " offset=0x%"PRIx64", size=%u", 570388eea45cSKlaus Jensen offset, size); 570488eea45cSKlaus Jensen /* should be ignored, fall through for now */ 570588eea45cSKlaus Jensen } 570688eea45cSKlaus Jensen 570788eea45cSKlaus Jensen switch (offset) { 570888eea45cSKlaus Jensen case 0xc: /* INTMS */ 570988eea45cSKlaus Jensen if (unlikely(msix_enabled(&(n->parent_obj)))) { 571088eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_intmask_with_msix, 571188eea45cSKlaus Jensen "undefined access to interrupt mask set" 571288eea45cSKlaus Jensen " when MSI-X is enabled"); 571388eea45cSKlaus Jensen /* should be ignored, fall through for now */ 571488eea45cSKlaus Jensen } 571588eea45cSKlaus Jensen n->bar.intms |= data & 0xffffffff; 571688eea45cSKlaus Jensen n->bar.intmc = n->bar.intms; 571788eea45cSKlaus Jensen trace_pci_nvme_mmio_intm_set(data & 0xffffffff, n->bar.intmc); 571888eea45cSKlaus Jensen nvme_irq_check(n); 571988eea45cSKlaus Jensen break; 572088eea45cSKlaus Jensen case 0x10: /* INTMC */ 572188eea45cSKlaus Jensen if (unlikely(msix_enabled(&(n->parent_obj)))) { 572288eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_intmask_with_msix, 572388eea45cSKlaus Jensen "undefined access to interrupt mask clr" 572488eea45cSKlaus Jensen " when MSI-X is enabled"); 572588eea45cSKlaus Jensen /* should be ignored, fall through for now */ 572688eea45cSKlaus Jensen } 572788eea45cSKlaus Jensen n->bar.intms &= ~(data & 0xffffffff); 572888eea45cSKlaus Jensen n->bar.intmc = n->bar.intms; 572988eea45cSKlaus Jensen trace_pci_nvme_mmio_intm_clr(data & 0xffffffff, n->bar.intmc); 573088eea45cSKlaus Jensen nvme_irq_check(n); 573188eea45cSKlaus Jensen break; 573288eea45cSKlaus Jensen case 0x14: /* CC */ 573388eea45cSKlaus Jensen trace_pci_nvme_mmio_cfg(data & 0xffffffff); 573488eea45cSKlaus Jensen /* Windows first sends data, then sends enable bit */ 573588eea45cSKlaus Jensen if (!NVME_CC_EN(data) && !NVME_CC_EN(n->bar.cc) && 573688eea45cSKlaus Jensen !NVME_CC_SHN(data) && !NVME_CC_SHN(n->bar.cc)) 573788eea45cSKlaus Jensen { 573888eea45cSKlaus Jensen n->bar.cc = data; 573988eea45cSKlaus Jensen } 574088eea45cSKlaus Jensen 574188eea45cSKlaus Jensen if (NVME_CC_EN(data) && !NVME_CC_EN(n->bar.cc)) { 574288eea45cSKlaus Jensen n->bar.cc = data; 574388eea45cSKlaus Jensen if (unlikely(nvme_start_ctrl(n))) { 574488eea45cSKlaus Jensen trace_pci_nvme_err_startfail(); 574588eea45cSKlaus Jensen n->bar.csts = NVME_CSTS_FAILED; 574688eea45cSKlaus Jensen } else { 574788eea45cSKlaus Jensen trace_pci_nvme_mmio_start_success(); 574888eea45cSKlaus Jensen n->bar.csts = NVME_CSTS_READY; 574988eea45cSKlaus Jensen } 575088eea45cSKlaus Jensen } else if (!NVME_CC_EN(data) && NVME_CC_EN(n->bar.cc)) { 575188eea45cSKlaus Jensen trace_pci_nvme_mmio_stopped(); 575288eea45cSKlaus Jensen nvme_ctrl_reset(n); 575388eea45cSKlaus Jensen n->bar.csts &= ~NVME_CSTS_READY; 575488eea45cSKlaus Jensen } 575588eea45cSKlaus Jensen if (NVME_CC_SHN(data) && !(NVME_CC_SHN(n->bar.cc))) { 575688eea45cSKlaus Jensen trace_pci_nvme_mmio_shutdown_set(); 575788eea45cSKlaus Jensen nvme_ctrl_shutdown(n); 575888eea45cSKlaus Jensen n->bar.cc = data; 575988eea45cSKlaus Jensen n->bar.csts |= NVME_CSTS_SHST_COMPLETE; 576088eea45cSKlaus Jensen } else if (!NVME_CC_SHN(data) && NVME_CC_SHN(n->bar.cc)) { 576188eea45cSKlaus Jensen trace_pci_nvme_mmio_shutdown_cleared(); 576288eea45cSKlaus Jensen n->bar.csts &= ~NVME_CSTS_SHST_COMPLETE; 576388eea45cSKlaus Jensen n->bar.cc = data; 576488eea45cSKlaus Jensen } 576588eea45cSKlaus Jensen break; 576688eea45cSKlaus Jensen case 0x1c: /* CSTS */ 576788eea45cSKlaus Jensen if (data & (1 << 4)) { 576888eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_ssreset_w1c_unsupported, 576988eea45cSKlaus Jensen "attempted to W1C CSTS.NSSRO" 577088eea45cSKlaus Jensen " but CAP.NSSRS is zero (not supported)"); 577188eea45cSKlaus Jensen } else if (data != 0) { 577288eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_ro_csts, 577388eea45cSKlaus Jensen "attempted to set a read only bit" 577488eea45cSKlaus Jensen " of controller status"); 577588eea45cSKlaus Jensen } 577688eea45cSKlaus Jensen break; 577788eea45cSKlaus Jensen case 0x20: /* NSSR */ 577888eea45cSKlaus Jensen if (data == 0x4e564d65) { 577988eea45cSKlaus Jensen trace_pci_nvme_ub_mmiowr_ssreset_unsupported(); 578088eea45cSKlaus Jensen } else { 578188eea45cSKlaus Jensen /* The spec says that writes of other values have no effect */ 578288eea45cSKlaus Jensen return; 578388eea45cSKlaus Jensen } 578488eea45cSKlaus Jensen break; 578588eea45cSKlaus Jensen case 0x24: /* AQA */ 578688eea45cSKlaus Jensen n->bar.aqa = data & 0xffffffff; 578788eea45cSKlaus Jensen trace_pci_nvme_mmio_aqattr(data & 0xffffffff); 578888eea45cSKlaus Jensen break; 578988eea45cSKlaus Jensen case 0x28: /* ASQ */ 579088eea45cSKlaus Jensen n->bar.asq = size == 8 ? data : 579188eea45cSKlaus Jensen (n->bar.asq & ~0xffffffffULL) | (data & 0xffffffff); 579288eea45cSKlaus Jensen trace_pci_nvme_mmio_asqaddr(data); 579388eea45cSKlaus Jensen break; 579488eea45cSKlaus Jensen case 0x2c: /* ASQ hi */ 579588eea45cSKlaus Jensen n->bar.asq = (n->bar.asq & 0xffffffff) | (data << 32); 579688eea45cSKlaus Jensen trace_pci_nvme_mmio_asqaddr_hi(data, n->bar.asq); 579788eea45cSKlaus Jensen break; 579888eea45cSKlaus Jensen case 0x30: /* ACQ */ 579988eea45cSKlaus Jensen trace_pci_nvme_mmio_acqaddr(data); 580088eea45cSKlaus Jensen n->bar.acq = size == 8 ? data : 580188eea45cSKlaus Jensen (n->bar.acq & ~0xffffffffULL) | (data & 0xffffffff); 580288eea45cSKlaus Jensen break; 580388eea45cSKlaus Jensen case 0x34: /* ACQ hi */ 580488eea45cSKlaus Jensen n->bar.acq = (n->bar.acq & 0xffffffff) | (data << 32); 580588eea45cSKlaus Jensen trace_pci_nvme_mmio_acqaddr_hi(data, n->bar.acq); 580688eea45cSKlaus Jensen break; 580788eea45cSKlaus Jensen case 0x38: /* CMBLOC */ 580888eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_cmbloc_reserved, 580988eea45cSKlaus Jensen "invalid write to reserved CMBLOC" 581088eea45cSKlaus Jensen " when CMBSZ is zero, ignored"); 581188eea45cSKlaus Jensen return; 581288eea45cSKlaus Jensen case 0x3C: /* CMBSZ */ 581388eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_cmbsz_readonly, 581488eea45cSKlaus Jensen "invalid write to read only CMBSZ, ignored"); 581588eea45cSKlaus Jensen return; 581688eea45cSKlaus Jensen case 0x50: /* CMBMSC */ 581788eea45cSKlaus Jensen if (!NVME_CAP_CMBS(n->bar.cap)) { 581888eea45cSKlaus Jensen return; 581988eea45cSKlaus Jensen } 582088eea45cSKlaus Jensen 582188eea45cSKlaus Jensen n->bar.cmbmsc = size == 8 ? data : 582288eea45cSKlaus Jensen (n->bar.cmbmsc & ~0xffffffff) | (data & 0xffffffff); 582388eea45cSKlaus Jensen n->cmb.cmse = false; 582488eea45cSKlaus Jensen 582588eea45cSKlaus Jensen if (NVME_CMBMSC_CRE(data)) { 582688eea45cSKlaus Jensen nvme_cmb_enable_regs(n); 582788eea45cSKlaus Jensen 582888eea45cSKlaus Jensen if (NVME_CMBMSC_CMSE(data)) { 582988eea45cSKlaus Jensen hwaddr cba = NVME_CMBMSC_CBA(data) << CMBMSC_CBA_SHIFT; 583088eea45cSKlaus Jensen if (cba + int128_get64(n->cmb.mem.size) < cba) { 583188eea45cSKlaus Jensen NVME_CMBSTS_SET_CBAI(n->bar.cmbsts, 1); 583288eea45cSKlaus Jensen return; 583388eea45cSKlaus Jensen } 583488eea45cSKlaus Jensen 583588eea45cSKlaus Jensen n->cmb.cba = cba; 583688eea45cSKlaus Jensen n->cmb.cmse = true; 583788eea45cSKlaus Jensen } 583888eea45cSKlaus Jensen } else { 583988eea45cSKlaus Jensen n->bar.cmbsz = 0; 584088eea45cSKlaus Jensen n->bar.cmbloc = 0; 584188eea45cSKlaus Jensen } 584288eea45cSKlaus Jensen 584388eea45cSKlaus Jensen return; 584488eea45cSKlaus Jensen case 0x54: /* CMBMSC hi */ 584588eea45cSKlaus Jensen n->bar.cmbmsc = (n->bar.cmbmsc & 0xffffffff) | (data << 32); 584688eea45cSKlaus Jensen return; 584788eea45cSKlaus Jensen 584888eea45cSKlaus Jensen case 0xe00: /* PMRCAP */ 584988eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_pmrcap_readonly, 585088eea45cSKlaus Jensen "invalid write to PMRCAP register, ignored"); 585188eea45cSKlaus Jensen return; 585288eea45cSKlaus Jensen case 0xe04: /* PMRCTL */ 585388eea45cSKlaus Jensen n->bar.pmrctl = data; 585488eea45cSKlaus Jensen if (NVME_PMRCTL_EN(data)) { 585588eea45cSKlaus Jensen memory_region_set_enabled(&n->pmr.dev->mr, true); 585688eea45cSKlaus Jensen n->bar.pmrsts = 0; 585788eea45cSKlaus Jensen } else { 585888eea45cSKlaus Jensen memory_region_set_enabled(&n->pmr.dev->mr, false); 585988eea45cSKlaus Jensen NVME_PMRSTS_SET_NRDY(n->bar.pmrsts, 1); 586088eea45cSKlaus Jensen n->pmr.cmse = false; 586188eea45cSKlaus Jensen } 586288eea45cSKlaus Jensen return; 586388eea45cSKlaus Jensen case 0xe08: /* PMRSTS */ 586488eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_pmrsts_readonly, 586588eea45cSKlaus Jensen "invalid write to PMRSTS register, ignored"); 586688eea45cSKlaus Jensen return; 586788eea45cSKlaus Jensen case 0xe0C: /* PMREBS */ 586888eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_pmrebs_readonly, 586988eea45cSKlaus Jensen "invalid write to PMREBS register, ignored"); 587088eea45cSKlaus Jensen return; 587188eea45cSKlaus Jensen case 0xe10: /* PMRSWTP */ 587288eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_pmrswtp_readonly, 587388eea45cSKlaus Jensen "invalid write to PMRSWTP register, ignored"); 587488eea45cSKlaus Jensen return; 587588eea45cSKlaus Jensen case 0xe14: /* PMRMSCL */ 587688eea45cSKlaus Jensen if (!NVME_CAP_PMRS(n->bar.cap)) { 587788eea45cSKlaus Jensen return; 587888eea45cSKlaus Jensen } 587988eea45cSKlaus Jensen 588088eea45cSKlaus Jensen n->bar.pmrmsc = (n->bar.pmrmsc & ~0xffffffff) | (data & 0xffffffff); 588188eea45cSKlaus Jensen n->pmr.cmse = false; 588288eea45cSKlaus Jensen 588388eea45cSKlaus Jensen if (NVME_PMRMSC_CMSE(n->bar.pmrmsc)) { 588488eea45cSKlaus Jensen hwaddr cba = NVME_PMRMSC_CBA(n->bar.pmrmsc) << PMRMSC_CBA_SHIFT; 588588eea45cSKlaus Jensen if (cba + int128_get64(n->pmr.dev->mr.size) < cba) { 588688eea45cSKlaus Jensen NVME_PMRSTS_SET_CBAI(n->bar.pmrsts, 1); 588788eea45cSKlaus Jensen return; 588888eea45cSKlaus Jensen } 588988eea45cSKlaus Jensen 589088eea45cSKlaus Jensen n->pmr.cmse = true; 589188eea45cSKlaus Jensen n->pmr.cba = cba; 589288eea45cSKlaus Jensen } 589388eea45cSKlaus Jensen 589488eea45cSKlaus Jensen return; 589588eea45cSKlaus Jensen case 0xe18: /* PMRMSCU */ 589688eea45cSKlaus Jensen if (!NVME_CAP_PMRS(n->bar.cap)) { 589788eea45cSKlaus Jensen return; 589888eea45cSKlaus Jensen } 589988eea45cSKlaus Jensen 590088eea45cSKlaus Jensen n->bar.pmrmsc = (n->bar.pmrmsc & 0xffffffff) | (data << 32); 590188eea45cSKlaus Jensen return; 590288eea45cSKlaus Jensen default: 590388eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiowr_invalid, 590488eea45cSKlaus Jensen "invalid MMIO write," 590588eea45cSKlaus Jensen " offset=0x%"PRIx64", data=%"PRIx64"", 590688eea45cSKlaus Jensen offset, data); 590788eea45cSKlaus Jensen break; 590888eea45cSKlaus Jensen } 590988eea45cSKlaus Jensen } 591088eea45cSKlaus Jensen 591188eea45cSKlaus Jensen static uint64_t nvme_mmio_read(void *opaque, hwaddr addr, unsigned size) 591288eea45cSKlaus Jensen { 591388eea45cSKlaus Jensen NvmeCtrl *n = (NvmeCtrl *)opaque; 591488eea45cSKlaus Jensen uint8_t *ptr = (uint8_t *)&n->bar; 591588eea45cSKlaus Jensen uint64_t val = 0; 591688eea45cSKlaus Jensen 591788eea45cSKlaus Jensen trace_pci_nvme_mmio_read(addr, size); 591888eea45cSKlaus Jensen 591988eea45cSKlaus Jensen if (unlikely(addr & (sizeof(uint32_t) - 1))) { 592088eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiord_misaligned32, 592188eea45cSKlaus Jensen "MMIO read not 32-bit aligned," 592288eea45cSKlaus Jensen " offset=0x%"PRIx64"", addr); 592388eea45cSKlaus Jensen /* should RAZ, fall through for now */ 592488eea45cSKlaus Jensen } else if (unlikely(size < sizeof(uint32_t))) { 592588eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiord_toosmall, 592688eea45cSKlaus Jensen "MMIO read smaller than 32-bits," 592788eea45cSKlaus Jensen " offset=0x%"PRIx64"", addr); 592888eea45cSKlaus Jensen /* should RAZ, fall through for now */ 592988eea45cSKlaus Jensen } 593088eea45cSKlaus Jensen 593188eea45cSKlaus Jensen if (addr < sizeof(n->bar)) { 593288eea45cSKlaus Jensen /* 593388eea45cSKlaus Jensen * When PMRWBM bit 1 is set then read from 593488eea45cSKlaus Jensen * from PMRSTS should ensure prior writes 593588eea45cSKlaus Jensen * made it to persistent media 593688eea45cSKlaus Jensen */ 593788eea45cSKlaus Jensen if (addr == 0xe08 && 593888eea45cSKlaus Jensen (NVME_PMRCAP_PMRWBM(n->bar.pmrcap) & 0x02)) { 593988eea45cSKlaus Jensen memory_region_msync(&n->pmr.dev->mr, 0, n->pmr.dev->size); 594088eea45cSKlaus Jensen } 594188eea45cSKlaus Jensen memcpy(&val, ptr + addr, size); 594288eea45cSKlaus Jensen } else { 594388eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_mmiord_invalid_ofs, 594488eea45cSKlaus Jensen "MMIO read beyond last register," 594588eea45cSKlaus Jensen " offset=0x%"PRIx64", returning 0", addr); 594688eea45cSKlaus Jensen } 594788eea45cSKlaus Jensen 594888eea45cSKlaus Jensen return val; 594988eea45cSKlaus Jensen } 595088eea45cSKlaus Jensen 595188eea45cSKlaus Jensen static void nvme_process_db(NvmeCtrl *n, hwaddr addr, int val) 595288eea45cSKlaus Jensen { 595388eea45cSKlaus Jensen uint32_t qid; 595488eea45cSKlaus Jensen 595588eea45cSKlaus Jensen if (unlikely(addr & ((1 << 2) - 1))) { 595688eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_db_wr_misaligned, 595788eea45cSKlaus Jensen "doorbell write not 32-bit aligned," 595888eea45cSKlaus Jensen " offset=0x%"PRIx64", ignoring", addr); 595988eea45cSKlaus Jensen return; 596088eea45cSKlaus Jensen } 596188eea45cSKlaus Jensen 596288eea45cSKlaus Jensen if (((addr - 0x1000) >> 2) & 1) { 596388eea45cSKlaus Jensen /* Completion queue doorbell write */ 596488eea45cSKlaus Jensen 596588eea45cSKlaus Jensen uint16_t new_head = val & 0xffff; 596688eea45cSKlaus Jensen int start_sqs; 596788eea45cSKlaus Jensen NvmeCQueue *cq; 596888eea45cSKlaus Jensen 596988eea45cSKlaus Jensen qid = (addr - (0x1000 + (1 << 2))) >> 3; 597088eea45cSKlaus Jensen if (unlikely(nvme_check_cqid(n, qid))) { 597188eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_db_wr_invalid_cq, 597288eea45cSKlaus Jensen "completion queue doorbell write" 597388eea45cSKlaus Jensen " for nonexistent queue," 597488eea45cSKlaus Jensen " sqid=%"PRIu32", ignoring", qid); 597588eea45cSKlaus Jensen 597688eea45cSKlaus Jensen /* 597788eea45cSKlaus Jensen * NVM Express v1.3d, Section 4.1 state: "If host software writes 597888eea45cSKlaus Jensen * an invalid value to the Submission Queue Tail Doorbell or 597988eea45cSKlaus Jensen * Completion Queue Head Doorbell regiter and an Asynchronous Event 598088eea45cSKlaus Jensen * Request command is outstanding, then an asynchronous event is 598188eea45cSKlaus Jensen * posted to the Admin Completion Queue with a status code of 598288eea45cSKlaus Jensen * Invalid Doorbell Write Value." 598388eea45cSKlaus Jensen * 598488eea45cSKlaus Jensen * Also note that the spec includes the "Invalid Doorbell Register" 598588eea45cSKlaus Jensen * status code, but nowhere does it specify when to use it. 598688eea45cSKlaus Jensen * However, it seems reasonable to use it here in a similar 598788eea45cSKlaus Jensen * fashion. 598888eea45cSKlaus Jensen */ 598988eea45cSKlaus Jensen if (n->outstanding_aers) { 599088eea45cSKlaus Jensen nvme_enqueue_event(n, NVME_AER_TYPE_ERROR, 599188eea45cSKlaus Jensen NVME_AER_INFO_ERR_INVALID_DB_REGISTER, 599288eea45cSKlaus Jensen NVME_LOG_ERROR_INFO); 599388eea45cSKlaus Jensen } 599488eea45cSKlaus Jensen 599588eea45cSKlaus Jensen return; 599688eea45cSKlaus Jensen } 599788eea45cSKlaus Jensen 599888eea45cSKlaus Jensen cq = n->cq[qid]; 599988eea45cSKlaus Jensen if (unlikely(new_head >= cq->size)) { 600088eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_db_wr_invalid_cqhead, 600188eea45cSKlaus Jensen "completion queue doorbell write value" 600288eea45cSKlaus Jensen " beyond queue size, sqid=%"PRIu32"," 600388eea45cSKlaus Jensen " new_head=%"PRIu16", ignoring", 600488eea45cSKlaus Jensen qid, new_head); 600588eea45cSKlaus Jensen 600688eea45cSKlaus Jensen if (n->outstanding_aers) { 600788eea45cSKlaus Jensen nvme_enqueue_event(n, NVME_AER_TYPE_ERROR, 600888eea45cSKlaus Jensen NVME_AER_INFO_ERR_INVALID_DB_VALUE, 600988eea45cSKlaus Jensen NVME_LOG_ERROR_INFO); 601088eea45cSKlaus Jensen } 601188eea45cSKlaus Jensen 601288eea45cSKlaus Jensen return; 601388eea45cSKlaus Jensen } 601488eea45cSKlaus Jensen 601588eea45cSKlaus Jensen trace_pci_nvme_mmio_doorbell_cq(cq->cqid, new_head); 601688eea45cSKlaus Jensen 601788eea45cSKlaus Jensen start_sqs = nvme_cq_full(cq) ? 1 : 0; 601888eea45cSKlaus Jensen cq->head = new_head; 601988eea45cSKlaus Jensen if (start_sqs) { 602088eea45cSKlaus Jensen NvmeSQueue *sq; 602188eea45cSKlaus Jensen QTAILQ_FOREACH(sq, &cq->sq_list, entry) { 602288eea45cSKlaus Jensen timer_mod(sq->timer, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) + 500); 602388eea45cSKlaus Jensen } 602488eea45cSKlaus Jensen timer_mod(cq->timer, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) + 500); 602588eea45cSKlaus Jensen } 602688eea45cSKlaus Jensen 602788eea45cSKlaus Jensen if (cq->tail == cq->head) { 602888eea45cSKlaus Jensen nvme_irq_deassert(n, cq); 602988eea45cSKlaus Jensen } 603088eea45cSKlaus Jensen } else { 603188eea45cSKlaus Jensen /* Submission queue doorbell write */ 603288eea45cSKlaus Jensen 603388eea45cSKlaus Jensen uint16_t new_tail = val & 0xffff; 603488eea45cSKlaus Jensen NvmeSQueue *sq; 603588eea45cSKlaus Jensen 603688eea45cSKlaus Jensen qid = (addr - 0x1000) >> 3; 603788eea45cSKlaus Jensen if (unlikely(nvme_check_sqid(n, qid))) { 603888eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_db_wr_invalid_sq, 603988eea45cSKlaus Jensen "submission queue doorbell write" 604088eea45cSKlaus Jensen " for nonexistent queue," 604188eea45cSKlaus Jensen " sqid=%"PRIu32", ignoring", qid); 604288eea45cSKlaus Jensen 604388eea45cSKlaus Jensen if (n->outstanding_aers) { 604488eea45cSKlaus Jensen nvme_enqueue_event(n, NVME_AER_TYPE_ERROR, 604588eea45cSKlaus Jensen NVME_AER_INFO_ERR_INVALID_DB_REGISTER, 604688eea45cSKlaus Jensen NVME_LOG_ERROR_INFO); 604788eea45cSKlaus Jensen } 604888eea45cSKlaus Jensen 604988eea45cSKlaus Jensen return; 605088eea45cSKlaus Jensen } 605188eea45cSKlaus Jensen 605288eea45cSKlaus Jensen sq = n->sq[qid]; 605388eea45cSKlaus Jensen if (unlikely(new_tail >= sq->size)) { 605488eea45cSKlaus Jensen NVME_GUEST_ERR(pci_nvme_ub_db_wr_invalid_sqtail, 605588eea45cSKlaus Jensen "submission queue doorbell write value" 605688eea45cSKlaus Jensen " beyond queue size, sqid=%"PRIu32"," 605788eea45cSKlaus Jensen " new_tail=%"PRIu16", ignoring", 605888eea45cSKlaus Jensen qid, new_tail); 605988eea45cSKlaus Jensen 606088eea45cSKlaus Jensen if (n->outstanding_aers) { 606188eea45cSKlaus Jensen nvme_enqueue_event(n, NVME_AER_TYPE_ERROR, 606288eea45cSKlaus Jensen NVME_AER_INFO_ERR_INVALID_DB_VALUE, 606388eea45cSKlaus Jensen NVME_LOG_ERROR_INFO); 606488eea45cSKlaus Jensen } 606588eea45cSKlaus Jensen 606688eea45cSKlaus Jensen return; 606788eea45cSKlaus Jensen } 606888eea45cSKlaus Jensen 606988eea45cSKlaus Jensen trace_pci_nvme_mmio_doorbell_sq(sq->sqid, new_tail); 607088eea45cSKlaus Jensen 607188eea45cSKlaus Jensen sq->tail = new_tail; 607288eea45cSKlaus Jensen timer_mod(sq->timer, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) + 500); 607388eea45cSKlaus Jensen } 607488eea45cSKlaus Jensen } 607588eea45cSKlaus Jensen 607688eea45cSKlaus Jensen static void nvme_mmio_write(void *opaque, hwaddr addr, uint64_t data, 607788eea45cSKlaus Jensen unsigned size) 607888eea45cSKlaus Jensen { 607988eea45cSKlaus Jensen NvmeCtrl *n = (NvmeCtrl *)opaque; 608088eea45cSKlaus Jensen 608188eea45cSKlaus Jensen trace_pci_nvme_mmio_write(addr, data, size); 608288eea45cSKlaus Jensen 608388eea45cSKlaus Jensen if (addr < sizeof(n->bar)) { 608488eea45cSKlaus Jensen nvme_write_bar(n, addr, data, size); 608588eea45cSKlaus Jensen } else { 608688eea45cSKlaus Jensen nvme_process_db(n, addr, data); 608788eea45cSKlaus Jensen } 608888eea45cSKlaus Jensen } 608988eea45cSKlaus Jensen 609088eea45cSKlaus Jensen static const MemoryRegionOps nvme_mmio_ops = { 609188eea45cSKlaus Jensen .read = nvme_mmio_read, 609288eea45cSKlaus Jensen .write = nvme_mmio_write, 609388eea45cSKlaus Jensen .endianness = DEVICE_LITTLE_ENDIAN, 609488eea45cSKlaus Jensen .impl = { 609588eea45cSKlaus Jensen .min_access_size = 2, 609688eea45cSKlaus Jensen .max_access_size = 8, 609788eea45cSKlaus Jensen }, 609888eea45cSKlaus Jensen }; 609988eea45cSKlaus Jensen 610088eea45cSKlaus Jensen static void nvme_cmb_write(void *opaque, hwaddr addr, uint64_t data, 610188eea45cSKlaus Jensen unsigned size) 610288eea45cSKlaus Jensen { 610388eea45cSKlaus Jensen NvmeCtrl *n = (NvmeCtrl *)opaque; 610488eea45cSKlaus Jensen stn_le_p(&n->cmb.buf[addr], size, data); 610588eea45cSKlaus Jensen } 610688eea45cSKlaus Jensen 610788eea45cSKlaus Jensen static uint64_t nvme_cmb_read(void *opaque, hwaddr addr, unsigned size) 610888eea45cSKlaus Jensen { 610988eea45cSKlaus Jensen NvmeCtrl *n = (NvmeCtrl *)opaque; 611088eea45cSKlaus Jensen return ldn_le_p(&n->cmb.buf[addr], size); 611188eea45cSKlaus Jensen } 611288eea45cSKlaus Jensen 611388eea45cSKlaus Jensen static const MemoryRegionOps nvme_cmb_ops = { 611488eea45cSKlaus Jensen .read = nvme_cmb_read, 611588eea45cSKlaus Jensen .write = nvme_cmb_write, 611688eea45cSKlaus Jensen .endianness = DEVICE_LITTLE_ENDIAN, 611788eea45cSKlaus Jensen .impl = { 611888eea45cSKlaus Jensen .min_access_size = 1, 611988eea45cSKlaus Jensen .max_access_size = 8, 612088eea45cSKlaus Jensen }, 612188eea45cSKlaus Jensen }; 612288eea45cSKlaus Jensen 612388eea45cSKlaus Jensen static void nvme_check_constraints(NvmeCtrl *n, Error **errp) 612488eea45cSKlaus Jensen { 612588eea45cSKlaus Jensen NvmeParams *params = &n->params; 612688eea45cSKlaus Jensen 612788eea45cSKlaus Jensen if (params->num_queues) { 612888eea45cSKlaus Jensen warn_report("num_queues is deprecated; please use max_ioqpairs " 612988eea45cSKlaus Jensen "instead"); 613088eea45cSKlaus Jensen 613188eea45cSKlaus Jensen params->max_ioqpairs = params->num_queues - 1; 613288eea45cSKlaus Jensen } 613388eea45cSKlaus Jensen 613488eea45cSKlaus Jensen if (n->namespace.blkconf.blk && n->subsys) { 613588eea45cSKlaus Jensen error_setg(errp, "subsystem support is unavailable with legacy " 613688eea45cSKlaus Jensen "namespace ('drive' property)"); 613788eea45cSKlaus Jensen return; 613888eea45cSKlaus Jensen } 613988eea45cSKlaus Jensen 614088eea45cSKlaus Jensen if (params->max_ioqpairs < 1 || 614188eea45cSKlaus Jensen params->max_ioqpairs > NVME_MAX_IOQPAIRS) { 614288eea45cSKlaus Jensen error_setg(errp, "max_ioqpairs must be between 1 and %d", 614388eea45cSKlaus Jensen NVME_MAX_IOQPAIRS); 614488eea45cSKlaus Jensen return; 614588eea45cSKlaus Jensen } 614688eea45cSKlaus Jensen 614788eea45cSKlaus Jensen if (params->msix_qsize < 1 || 614888eea45cSKlaus Jensen params->msix_qsize > PCI_MSIX_FLAGS_QSIZE + 1) { 614988eea45cSKlaus Jensen error_setg(errp, "msix_qsize must be between 1 and %d", 615088eea45cSKlaus Jensen PCI_MSIX_FLAGS_QSIZE + 1); 615188eea45cSKlaus Jensen return; 615288eea45cSKlaus Jensen } 615388eea45cSKlaus Jensen 615488eea45cSKlaus Jensen if (!params->serial) { 615588eea45cSKlaus Jensen error_setg(errp, "serial property not set"); 615688eea45cSKlaus Jensen return; 615788eea45cSKlaus Jensen } 615888eea45cSKlaus Jensen 615988eea45cSKlaus Jensen if (n->pmr.dev) { 616088eea45cSKlaus Jensen if (host_memory_backend_is_mapped(n->pmr.dev)) { 616188eea45cSKlaus Jensen error_setg(errp, "can't use already busy memdev: %s", 616288eea45cSKlaus Jensen object_get_canonical_path_component(OBJECT(n->pmr.dev))); 616388eea45cSKlaus Jensen return; 616488eea45cSKlaus Jensen } 616588eea45cSKlaus Jensen 616688eea45cSKlaus Jensen if (!is_power_of_2(n->pmr.dev->size)) { 616788eea45cSKlaus Jensen error_setg(errp, "pmr backend size needs to be power of 2 in size"); 616888eea45cSKlaus Jensen return; 616988eea45cSKlaus Jensen } 617088eea45cSKlaus Jensen 617188eea45cSKlaus Jensen host_memory_backend_set_mapped(n->pmr.dev, true); 617288eea45cSKlaus Jensen } 617388eea45cSKlaus Jensen 617488eea45cSKlaus Jensen if (n->params.zasl > n->params.mdts) { 617588eea45cSKlaus Jensen error_setg(errp, "zoned.zasl (Zone Append Size Limit) must be less " 617688eea45cSKlaus Jensen "than or equal to mdts (Maximum Data Transfer Size)"); 617788eea45cSKlaus Jensen return; 617888eea45cSKlaus Jensen } 617988eea45cSKlaus Jensen 618088eea45cSKlaus Jensen if (!n->params.vsl) { 618188eea45cSKlaus Jensen error_setg(errp, "vsl must be non-zero"); 618288eea45cSKlaus Jensen return; 618388eea45cSKlaus Jensen } 618488eea45cSKlaus Jensen } 618588eea45cSKlaus Jensen 618688eea45cSKlaus Jensen static void nvme_init_state(NvmeCtrl *n) 618788eea45cSKlaus Jensen { 618888eea45cSKlaus Jensen /* add one to max_ioqpairs to account for the admin queue pair */ 618988eea45cSKlaus Jensen n->reg_size = pow2ceil(sizeof(NvmeBar) + 619088eea45cSKlaus Jensen 2 * (n->params.max_ioqpairs + 1) * NVME_DB_SIZE); 619188eea45cSKlaus Jensen n->sq = g_new0(NvmeSQueue *, n->params.max_ioqpairs + 1); 619288eea45cSKlaus Jensen n->cq = g_new0(NvmeCQueue *, n->params.max_ioqpairs + 1); 619388eea45cSKlaus Jensen n->temperature = NVME_TEMPERATURE; 619488eea45cSKlaus Jensen n->features.temp_thresh_hi = NVME_TEMPERATURE_WARNING; 619588eea45cSKlaus Jensen n->starttime_ms = qemu_clock_get_ms(QEMU_CLOCK_VIRTUAL); 619688eea45cSKlaus Jensen n->aer_reqs = g_new0(NvmeRequest *, n->params.aerl + 1); 619788eea45cSKlaus Jensen } 619888eea45cSKlaus Jensen 619988eea45cSKlaus Jensen static void nvme_init_cmb(NvmeCtrl *n, PCIDevice *pci_dev) 620088eea45cSKlaus Jensen { 620188eea45cSKlaus Jensen uint64_t cmb_size = n->params.cmb_size_mb * MiB; 620288eea45cSKlaus Jensen 620388eea45cSKlaus Jensen n->cmb.buf = g_malloc0(cmb_size); 620488eea45cSKlaus Jensen memory_region_init_io(&n->cmb.mem, OBJECT(n), &nvme_cmb_ops, n, 620588eea45cSKlaus Jensen "nvme-cmb", cmb_size); 620688eea45cSKlaus Jensen pci_register_bar(pci_dev, NVME_CMB_BIR, 620788eea45cSKlaus Jensen PCI_BASE_ADDRESS_SPACE_MEMORY | 620888eea45cSKlaus Jensen PCI_BASE_ADDRESS_MEM_TYPE_64 | 620988eea45cSKlaus Jensen PCI_BASE_ADDRESS_MEM_PREFETCH, &n->cmb.mem); 621088eea45cSKlaus Jensen 621188eea45cSKlaus Jensen NVME_CAP_SET_CMBS(n->bar.cap, 1); 621288eea45cSKlaus Jensen 621388eea45cSKlaus Jensen if (n->params.legacy_cmb) { 621488eea45cSKlaus Jensen nvme_cmb_enable_regs(n); 621588eea45cSKlaus Jensen n->cmb.cmse = true; 621688eea45cSKlaus Jensen } 621788eea45cSKlaus Jensen } 621888eea45cSKlaus Jensen 621988eea45cSKlaus Jensen static void nvme_init_pmr(NvmeCtrl *n, PCIDevice *pci_dev) 622088eea45cSKlaus Jensen { 622188eea45cSKlaus Jensen NVME_PMRCAP_SET_RDS(n->bar.pmrcap, 1); 622288eea45cSKlaus Jensen NVME_PMRCAP_SET_WDS(n->bar.pmrcap, 1); 622388eea45cSKlaus Jensen NVME_PMRCAP_SET_BIR(n->bar.pmrcap, NVME_PMR_BIR); 622488eea45cSKlaus Jensen /* Turn on bit 1 support */ 622588eea45cSKlaus Jensen NVME_PMRCAP_SET_PMRWBM(n->bar.pmrcap, 0x02); 622688eea45cSKlaus Jensen NVME_PMRCAP_SET_CMSS(n->bar.pmrcap, 1); 622788eea45cSKlaus Jensen 622888eea45cSKlaus Jensen pci_register_bar(pci_dev, NVME_PMRCAP_BIR(n->bar.pmrcap), 622988eea45cSKlaus Jensen PCI_BASE_ADDRESS_SPACE_MEMORY | 623088eea45cSKlaus Jensen PCI_BASE_ADDRESS_MEM_TYPE_64 | 623188eea45cSKlaus Jensen PCI_BASE_ADDRESS_MEM_PREFETCH, &n->pmr.dev->mr); 623288eea45cSKlaus Jensen 623388eea45cSKlaus Jensen memory_region_set_enabled(&n->pmr.dev->mr, false); 623488eea45cSKlaus Jensen } 623588eea45cSKlaus Jensen 623688eea45cSKlaus Jensen static int nvme_init_pci(NvmeCtrl *n, PCIDevice *pci_dev, Error **errp) 623788eea45cSKlaus Jensen { 623888eea45cSKlaus Jensen uint8_t *pci_conf = pci_dev->config; 623988eea45cSKlaus Jensen uint64_t bar_size, msix_table_size, msix_pba_size; 624088eea45cSKlaus Jensen unsigned msix_table_offset, msix_pba_offset; 624188eea45cSKlaus Jensen int ret; 624288eea45cSKlaus Jensen 624388eea45cSKlaus Jensen Error *err = NULL; 624488eea45cSKlaus Jensen 624588eea45cSKlaus Jensen pci_conf[PCI_INTERRUPT_PIN] = 1; 624688eea45cSKlaus Jensen pci_config_set_prog_interface(pci_conf, 0x2); 624788eea45cSKlaus Jensen 624888eea45cSKlaus Jensen if (n->params.use_intel_id) { 624988eea45cSKlaus Jensen pci_config_set_vendor_id(pci_conf, PCI_VENDOR_ID_INTEL); 625088eea45cSKlaus Jensen pci_config_set_device_id(pci_conf, 0x5845); 625188eea45cSKlaus Jensen } else { 625288eea45cSKlaus Jensen pci_config_set_vendor_id(pci_conf, PCI_VENDOR_ID_REDHAT); 625388eea45cSKlaus Jensen pci_config_set_device_id(pci_conf, PCI_DEVICE_ID_REDHAT_NVME); 625488eea45cSKlaus Jensen } 625588eea45cSKlaus Jensen 625688eea45cSKlaus Jensen pci_config_set_class(pci_conf, PCI_CLASS_STORAGE_EXPRESS); 625788eea45cSKlaus Jensen pcie_endpoint_cap_init(pci_dev, 0x80); 625888eea45cSKlaus Jensen 625988eea45cSKlaus Jensen bar_size = QEMU_ALIGN_UP(n->reg_size, 4 * KiB); 626088eea45cSKlaus Jensen msix_table_offset = bar_size; 626188eea45cSKlaus Jensen msix_table_size = PCI_MSIX_ENTRY_SIZE * n->params.msix_qsize; 626288eea45cSKlaus Jensen 626388eea45cSKlaus Jensen bar_size += msix_table_size; 626488eea45cSKlaus Jensen bar_size = QEMU_ALIGN_UP(bar_size, 4 * KiB); 626588eea45cSKlaus Jensen msix_pba_offset = bar_size; 626688eea45cSKlaus Jensen msix_pba_size = QEMU_ALIGN_UP(n->params.msix_qsize, 64) / 8; 626788eea45cSKlaus Jensen 626888eea45cSKlaus Jensen bar_size += msix_pba_size; 626988eea45cSKlaus Jensen bar_size = pow2ceil(bar_size); 627088eea45cSKlaus Jensen 627188eea45cSKlaus Jensen memory_region_init(&n->bar0, OBJECT(n), "nvme-bar0", bar_size); 627288eea45cSKlaus Jensen memory_region_init_io(&n->iomem, OBJECT(n), &nvme_mmio_ops, n, "nvme", 627388eea45cSKlaus Jensen n->reg_size); 627488eea45cSKlaus Jensen memory_region_add_subregion(&n->bar0, 0, &n->iomem); 627588eea45cSKlaus Jensen 627688eea45cSKlaus Jensen pci_register_bar(pci_dev, 0, PCI_BASE_ADDRESS_SPACE_MEMORY | 627788eea45cSKlaus Jensen PCI_BASE_ADDRESS_MEM_TYPE_64, &n->bar0); 627888eea45cSKlaus Jensen ret = msix_init(pci_dev, n->params.msix_qsize, 627988eea45cSKlaus Jensen &n->bar0, 0, msix_table_offset, 628088eea45cSKlaus Jensen &n->bar0, 0, msix_pba_offset, 0, &err); 628188eea45cSKlaus Jensen if (ret < 0) { 628288eea45cSKlaus Jensen if (ret == -ENOTSUP) { 628388eea45cSKlaus Jensen warn_report_err(err); 628488eea45cSKlaus Jensen } else { 628588eea45cSKlaus Jensen error_propagate(errp, err); 628688eea45cSKlaus Jensen return ret; 628788eea45cSKlaus Jensen } 628888eea45cSKlaus Jensen } 628988eea45cSKlaus Jensen 629088eea45cSKlaus Jensen if (n->params.cmb_size_mb) { 629188eea45cSKlaus Jensen nvme_init_cmb(n, pci_dev); 629288eea45cSKlaus Jensen } 629388eea45cSKlaus Jensen 629488eea45cSKlaus Jensen if (n->pmr.dev) { 629588eea45cSKlaus Jensen nvme_init_pmr(n, pci_dev); 629688eea45cSKlaus Jensen } 629788eea45cSKlaus Jensen 629888eea45cSKlaus Jensen return 0; 629988eea45cSKlaus Jensen } 630088eea45cSKlaus Jensen 630188eea45cSKlaus Jensen static void nvme_init_subnqn(NvmeCtrl *n) 630288eea45cSKlaus Jensen { 630388eea45cSKlaus Jensen NvmeSubsystem *subsys = n->subsys; 630488eea45cSKlaus Jensen NvmeIdCtrl *id = &n->id_ctrl; 630588eea45cSKlaus Jensen 630688eea45cSKlaus Jensen if (!subsys) { 630788eea45cSKlaus Jensen snprintf((char *)id->subnqn, sizeof(id->subnqn), 630888eea45cSKlaus Jensen "nqn.2019-08.org.qemu:%s", n->params.serial); 630988eea45cSKlaus Jensen } else { 631088eea45cSKlaus Jensen pstrcpy((char *)id->subnqn, sizeof(id->subnqn), (char*)subsys->subnqn); 631188eea45cSKlaus Jensen } 631288eea45cSKlaus Jensen } 631388eea45cSKlaus Jensen 631488eea45cSKlaus Jensen static void nvme_init_ctrl(NvmeCtrl *n, PCIDevice *pci_dev) 631588eea45cSKlaus Jensen { 631688eea45cSKlaus Jensen NvmeIdCtrl *id = &n->id_ctrl; 631788eea45cSKlaus Jensen uint8_t *pci_conf = pci_dev->config; 631888eea45cSKlaus Jensen 631988eea45cSKlaus Jensen id->vid = cpu_to_le16(pci_get_word(pci_conf + PCI_VENDOR_ID)); 632088eea45cSKlaus Jensen id->ssvid = cpu_to_le16(pci_get_word(pci_conf + PCI_SUBSYSTEM_VENDOR_ID)); 632188eea45cSKlaus Jensen strpadcpy((char *)id->mn, sizeof(id->mn), "QEMU NVMe Ctrl", ' '); 632288eea45cSKlaus Jensen strpadcpy((char *)id->fr, sizeof(id->fr), "1.0", ' '); 632388eea45cSKlaus Jensen strpadcpy((char *)id->sn, sizeof(id->sn), n->params.serial, ' '); 632488eea45cSKlaus Jensen 632588eea45cSKlaus Jensen id->cntlid = cpu_to_le16(n->cntlid); 632688eea45cSKlaus Jensen 632788eea45cSKlaus Jensen id->oaes = cpu_to_le32(NVME_OAES_NS_ATTR); 632888eea45cSKlaus Jensen 632988eea45cSKlaus Jensen id->rab = 6; 633088eea45cSKlaus Jensen 633188eea45cSKlaus Jensen if (n->params.use_intel_id) { 633288eea45cSKlaus Jensen id->ieee[0] = 0xb3; 633388eea45cSKlaus Jensen id->ieee[1] = 0x02; 633488eea45cSKlaus Jensen id->ieee[2] = 0x00; 633588eea45cSKlaus Jensen } else { 633688eea45cSKlaus Jensen id->ieee[0] = 0x00; 633788eea45cSKlaus Jensen id->ieee[1] = 0x54; 633888eea45cSKlaus Jensen id->ieee[2] = 0x52; 633988eea45cSKlaus Jensen } 634088eea45cSKlaus Jensen 634188eea45cSKlaus Jensen id->mdts = n->params.mdts; 634288eea45cSKlaus Jensen id->ver = cpu_to_le32(NVME_SPEC_VER); 634388eea45cSKlaus Jensen id->oacs = cpu_to_le16(NVME_OACS_NS_MGMT | NVME_OACS_FORMAT); 634488eea45cSKlaus Jensen id->cntrltype = 0x1; 634588eea45cSKlaus Jensen 634688eea45cSKlaus Jensen /* 634788eea45cSKlaus Jensen * Because the controller always completes the Abort command immediately, 634888eea45cSKlaus Jensen * there can never be more than one concurrently executing Abort command, 634988eea45cSKlaus Jensen * so this value is never used for anything. Note that there can easily be 635088eea45cSKlaus Jensen * many Abort commands in the queues, but they are not considered 635188eea45cSKlaus Jensen * "executing" until processed by nvme_abort. 635288eea45cSKlaus Jensen * 635388eea45cSKlaus Jensen * The specification recommends a value of 3 for Abort Command Limit (four 635488eea45cSKlaus Jensen * concurrently outstanding Abort commands), so lets use that though it is 635588eea45cSKlaus Jensen * inconsequential. 635688eea45cSKlaus Jensen */ 635788eea45cSKlaus Jensen id->acl = 3; 635888eea45cSKlaus Jensen id->aerl = n->params.aerl; 635988eea45cSKlaus Jensen id->frmw = (NVME_NUM_FW_SLOTS << 1) | NVME_FRMW_SLOT1_RO; 636088eea45cSKlaus Jensen id->lpa = NVME_LPA_NS_SMART | NVME_LPA_CSE | NVME_LPA_EXTENDED; 636188eea45cSKlaus Jensen 636288eea45cSKlaus Jensen /* recommended default value (~70 C) */ 636388eea45cSKlaus Jensen id->wctemp = cpu_to_le16(NVME_TEMPERATURE_WARNING); 636488eea45cSKlaus Jensen id->cctemp = cpu_to_le16(NVME_TEMPERATURE_CRITICAL); 636588eea45cSKlaus Jensen 636688eea45cSKlaus Jensen id->sqes = (0x6 << 4) | 0x6; 636788eea45cSKlaus Jensen id->cqes = (0x4 << 4) | 0x4; 636888eea45cSKlaus Jensen id->nn = cpu_to_le32(NVME_MAX_NAMESPACES); 636988eea45cSKlaus Jensen id->oncs = cpu_to_le16(NVME_ONCS_WRITE_ZEROES | NVME_ONCS_TIMESTAMP | 637088eea45cSKlaus Jensen NVME_ONCS_FEATURES | NVME_ONCS_DSM | 637188eea45cSKlaus Jensen NVME_ONCS_COMPARE | NVME_ONCS_COPY); 637288eea45cSKlaus Jensen 637388eea45cSKlaus Jensen /* 637488eea45cSKlaus Jensen * NOTE: If this device ever supports a command set that does NOT use 0x0 637588eea45cSKlaus Jensen * as a Flush-equivalent operation, support for the broadcast NSID in Flush 637688eea45cSKlaus Jensen * should probably be removed. 637788eea45cSKlaus Jensen * 637888eea45cSKlaus Jensen * See comment in nvme_io_cmd. 637988eea45cSKlaus Jensen */ 638088eea45cSKlaus Jensen id->vwc = NVME_VWC_NSID_BROADCAST_SUPPORT | NVME_VWC_PRESENT; 638188eea45cSKlaus Jensen 638288eea45cSKlaus Jensen id->ocfs = cpu_to_le16(NVME_OCFS_COPY_FORMAT_0); 638388eea45cSKlaus Jensen id->sgls = cpu_to_le32(NVME_CTRL_SGLS_SUPPORT_NO_ALIGN | 638488eea45cSKlaus Jensen NVME_CTRL_SGLS_BITBUCKET); 638588eea45cSKlaus Jensen 638688eea45cSKlaus Jensen nvme_init_subnqn(n); 638788eea45cSKlaus Jensen 638888eea45cSKlaus Jensen id->psd[0].mp = cpu_to_le16(0x9c4); 638988eea45cSKlaus Jensen id->psd[0].enlat = cpu_to_le32(0x10); 639088eea45cSKlaus Jensen id->psd[0].exlat = cpu_to_le32(0x4); 639188eea45cSKlaus Jensen 639288eea45cSKlaus Jensen if (n->subsys) { 639388eea45cSKlaus Jensen id->cmic |= NVME_CMIC_MULTI_CTRL; 639488eea45cSKlaus Jensen } 639588eea45cSKlaus Jensen 639688eea45cSKlaus Jensen NVME_CAP_SET_MQES(n->bar.cap, 0x7ff); 639788eea45cSKlaus Jensen NVME_CAP_SET_CQR(n->bar.cap, 1); 639888eea45cSKlaus Jensen NVME_CAP_SET_TO(n->bar.cap, 0xf); 639988eea45cSKlaus Jensen NVME_CAP_SET_CSS(n->bar.cap, NVME_CAP_CSS_NVM); 640088eea45cSKlaus Jensen NVME_CAP_SET_CSS(n->bar.cap, NVME_CAP_CSS_CSI_SUPP); 640188eea45cSKlaus Jensen NVME_CAP_SET_CSS(n->bar.cap, NVME_CAP_CSS_ADMIN_ONLY); 640288eea45cSKlaus Jensen NVME_CAP_SET_MPSMAX(n->bar.cap, 4); 640388eea45cSKlaus Jensen NVME_CAP_SET_CMBS(n->bar.cap, n->params.cmb_size_mb ? 1 : 0); 640488eea45cSKlaus Jensen NVME_CAP_SET_PMRS(n->bar.cap, n->pmr.dev ? 1 : 0); 640588eea45cSKlaus Jensen 640688eea45cSKlaus Jensen n->bar.vs = NVME_SPEC_VER; 640788eea45cSKlaus Jensen n->bar.intmc = n->bar.intms = 0; 640888eea45cSKlaus Jensen } 640988eea45cSKlaus Jensen 641088eea45cSKlaus Jensen static int nvme_init_subsys(NvmeCtrl *n, Error **errp) 641188eea45cSKlaus Jensen { 641288eea45cSKlaus Jensen int cntlid; 641388eea45cSKlaus Jensen 641488eea45cSKlaus Jensen if (!n->subsys) { 641588eea45cSKlaus Jensen return 0; 641688eea45cSKlaus Jensen } 641788eea45cSKlaus Jensen 641888eea45cSKlaus Jensen cntlid = nvme_subsys_register_ctrl(n, errp); 641988eea45cSKlaus Jensen if (cntlid < 0) { 642088eea45cSKlaus Jensen return -1; 642188eea45cSKlaus Jensen } 642288eea45cSKlaus Jensen 642388eea45cSKlaus Jensen n->cntlid = cntlid; 642488eea45cSKlaus Jensen 642588eea45cSKlaus Jensen return 0; 642688eea45cSKlaus Jensen } 642788eea45cSKlaus Jensen 642888eea45cSKlaus Jensen void nvme_attach_ns(NvmeCtrl *n, NvmeNamespace *ns) 642988eea45cSKlaus Jensen { 643088eea45cSKlaus Jensen uint32_t nsid = ns->params.nsid; 643188eea45cSKlaus Jensen assert(nsid && nsid <= NVME_MAX_NAMESPACES); 643288eea45cSKlaus Jensen 643388eea45cSKlaus Jensen n->namespaces[nsid] = ns; 643488eea45cSKlaus Jensen ns->attached++; 643588eea45cSKlaus Jensen 643688eea45cSKlaus Jensen n->dmrsl = MIN_NON_ZERO(n->dmrsl, 643788eea45cSKlaus Jensen BDRV_REQUEST_MAX_BYTES / nvme_l2b(ns, 1)); 643888eea45cSKlaus Jensen } 643988eea45cSKlaus Jensen 644088eea45cSKlaus Jensen static void nvme_realize(PCIDevice *pci_dev, Error **errp) 644188eea45cSKlaus Jensen { 644288eea45cSKlaus Jensen NvmeCtrl *n = NVME(pci_dev); 644388eea45cSKlaus Jensen NvmeNamespace *ns; 644488eea45cSKlaus Jensen Error *local_err = NULL; 644588eea45cSKlaus Jensen 644688eea45cSKlaus Jensen nvme_check_constraints(n, &local_err); 644788eea45cSKlaus Jensen if (local_err) { 644888eea45cSKlaus Jensen error_propagate(errp, local_err); 644988eea45cSKlaus Jensen return; 645088eea45cSKlaus Jensen } 645188eea45cSKlaus Jensen 645288eea45cSKlaus Jensen qbus_create_inplace(&n->bus, sizeof(NvmeBus), TYPE_NVME_BUS, 645388eea45cSKlaus Jensen &pci_dev->qdev, n->parent_obj.qdev.id); 645488eea45cSKlaus Jensen 645588eea45cSKlaus Jensen nvme_init_state(n); 645688eea45cSKlaus Jensen if (nvme_init_pci(n, pci_dev, errp)) { 645788eea45cSKlaus Jensen return; 645888eea45cSKlaus Jensen } 645988eea45cSKlaus Jensen 646088eea45cSKlaus Jensen if (nvme_init_subsys(n, errp)) { 646188eea45cSKlaus Jensen error_propagate(errp, local_err); 646288eea45cSKlaus Jensen return; 646388eea45cSKlaus Jensen } 646488eea45cSKlaus Jensen nvme_init_ctrl(n, pci_dev); 646588eea45cSKlaus Jensen 646688eea45cSKlaus Jensen /* setup a namespace if the controller drive property was given */ 646788eea45cSKlaus Jensen if (n->namespace.blkconf.blk) { 646888eea45cSKlaus Jensen ns = &n->namespace; 646988eea45cSKlaus Jensen ns->params.nsid = 1; 647088eea45cSKlaus Jensen 647188eea45cSKlaus Jensen if (nvme_ns_setup(n, ns, errp)) { 647288eea45cSKlaus Jensen return; 647388eea45cSKlaus Jensen } 647488eea45cSKlaus Jensen 647588eea45cSKlaus Jensen nvme_attach_ns(n, ns); 647688eea45cSKlaus Jensen } 647788eea45cSKlaus Jensen } 647888eea45cSKlaus Jensen 647988eea45cSKlaus Jensen static void nvme_exit(PCIDevice *pci_dev) 648088eea45cSKlaus Jensen { 648188eea45cSKlaus Jensen NvmeCtrl *n = NVME(pci_dev); 648288eea45cSKlaus Jensen NvmeNamespace *ns; 648388eea45cSKlaus Jensen int i; 648488eea45cSKlaus Jensen 648588eea45cSKlaus Jensen nvme_ctrl_reset(n); 648688eea45cSKlaus Jensen 648788eea45cSKlaus Jensen for (i = 1; i <= NVME_MAX_NAMESPACES; i++) { 648888eea45cSKlaus Jensen ns = nvme_ns(n, i); 648988eea45cSKlaus Jensen if (!ns) { 649088eea45cSKlaus Jensen continue; 649188eea45cSKlaus Jensen } 649288eea45cSKlaus Jensen 649388eea45cSKlaus Jensen nvme_ns_cleanup(ns); 649488eea45cSKlaus Jensen } 649588eea45cSKlaus Jensen 649688eea45cSKlaus Jensen g_free(n->cq); 649788eea45cSKlaus Jensen g_free(n->sq); 649888eea45cSKlaus Jensen g_free(n->aer_reqs); 649988eea45cSKlaus Jensen 650088eea45cSKlaus Jensen if (n->params.cmb_size_mb) { 650188eea45cSKlaus Jensen g_free(n->cmb.buf); 650288eea45cSKlaus Jensen } 650388eea45cSKlaus Jensen 650488eea45cSKlaus Jensen if (n->pmr.dev) { 650588eea45cSKlaus Jensen host_memory_backend_set_mapped(n->pmr.dev, false); 650688eea45cSKlaus Jensen } 650788eea45cSKlaus Jensen msix_uninit(pci_dev, &n->bar0, &n->bar0); 650888eea45cSKlaus Jensen memory_region_del_subregion(&n->bar0, &n->iomem); 650988eea45cSKlaus Jensen } 651088eea45cSKlaus Jensen 651188eea45cSKlaus Jensen static Property nvme_props[] = { 651288eea45cSKlaus Jensen DEFINE_BLOCK_PROPERTIES(NvmeCtrl, namespace.blkconf), 651388eea45cSKlaus Jensen DEFINE_PROP_LINK("pmrdev", NvmeCtrl, pmr.dev, TYPE_MEMORY_BACKEND, 651488eea45cSKlaus Jensen HostMemoryBackend *), 651588eea45cSKlaus Jensen DEFINE_PROP_LINK("subsys", NvmeCtrl, subsys, TYPE_NVME_SUBSYS, 651688eea45cSKlaus Jensen NvmeSubsystem *), 651788eea45cSKlaus Jensen DEFINE_PROP_STRING("serial", NvmeCtrl, params.serial), 651888eea45cSKlaus Jensen DEFINE_PROP_UINT32("cmb_size_mb", NvmeCtrl, params.cmb_size_mb, 0), 651988eea45cSKlaus Jensen DEFINE_PROP_UINT32("num_queues", NvmeCtrl, params.num_queues, 0), 652088eea45cSKlaus Jensen DEFINE_PROP_UINT32("max_ioqpairs", NvmeCtrl, params.max_ioqpairs, 64), 652188eea45cSKlaus Jensen DEFINE_PROP_UINT16("msix_qsize", NvmeCtrl, params.msix_qsize, 65), 652288eea45cSKlaus Jensen DEFINE_PROP_UINT8("aerl", NvmeCtrl, params.aerl, 3), 652388eea45cSKlaus Jensen DEFINE_PROP_UINT32("aer_max_queued", NvmeCtrl, params.aer_max_queued, 64), 652488eea45cSKlaus Jensen DEFINE_PROP_UINT8("mdts", NvmeCtrl, params.mdts, 7), 652588eea45cSKlaus Jensen DEFINE_PROP_UINT8("vsl", NvmeCtrl, params.vsl, 7), 652688eea45cSKlaus Jensen DEFINE_PROP_BOOL("use-intel-id", NvmeCtrl, params.use_intel_id, false), 652788eea45cSKlaus Jensen DEFINE_PROP_BOOL("legacy-cmb", NvmeCtrl, params.legacy_cmb, false), 652888eea45cSKlaus Jensen DEFINE_PROP_UINT8("zoned.zasl", NvmeCtrl, params.zasl, 0), 6529cccc2651SNiklas Cassel DEFINE_PROP_BOOL("zoned.auto_transition", NvmeCtrl, 6530cccc2651SNiklas Cassel params.auto_transition_zones, true), 653188eea45cSKlaus Jensen DEFINE_PROP_END_OF_LIST(), 653288eea45cSKlaus Jensen }; 653388eea45cSKlaus Jensen 653488eea45cSKlaus Jensen static void nvme_get_smart_warning(Object *obj, Visitor *v, const char *name, 653588eea45cSKlaus Jensen void *opaque, Error **errp) 653688eea45cSKlaus Jensen { 653788eea45cSKlaus Jensen NvmeCtrl *n = NVME(obj); 653888eea45cSKlaus Jensen uint8_t value = n->smart_critical_warning; 653988eea45cSKlaus Jensen 654088eea45cSKlaus Jensen visit_type_uint8(v, name, &value, errp); 654188eea45cSKlaus Jensen } 654288eea45cSKlaus Jensen 654388eea45cSKlaus Jensen static void nvme_set_smart_warning(Object *obj, Visitor *v, const char *name, 654488eea45cSKlaus Jensen void *opaque, Error **errp) 654588eea45cSKlaus Jensen { 654688eea45cSKlaus Jensen NvmeCtrl *n = NVME(obj); 654788eea45cSKlaus Jensen uint8_t value, old_value, cap = 0, index, event; 654888eea45cSKlaus Jensen 654988eea45cSKlaus Jensen if (!visit_type_uint8(v, name, &value, errp)) { 655088eea45cSKlaus Jensen return; 655188eea45cSKlaus Jensen } 655288eea45cSKlaus Jensen 655388eea45cSKlaus Jensen cap = NVME_SMART_SPARE | NVME_SMART_TEMPERATURE | NVME_SMART_RELIABILITY 655488eea45cSKlaus Jensen | NVME_SMART_MEDIA_READ_ONLY | NVME_SMART_FAILED_VOLATILE_MEDIA; 655588eea45cSKlaus Jensen if (NVME_CAP_PMRS(n->bar.cap)) { 655688eea45cSKlaus Jensen cap |= NVME_SMART_PMR_UNRELIABLE; 655788eea45cSKlaus Jensen } 655888eea45cSKlaus Jensen 655988eea45cSKlaus Jensen if ((value & cap) != value) { 656088eea45cSKlaus Jensen error_setg(errp, "unsupported smart critical warning bits: 0x%x", 656188eea45cSKlaus Jensen value & ~cap); 656288eea45cSKlaus Jensen return; 656388eea45cSKlaus Jensen } 656488eea45cSKlaus Jensen 656588eea45cSKlaus Jensen old_value = n->smart_critical_warning; 656688eea45cSKlaus Jensen n->smart_critical_warning = value; 656788eea45cSKlaus Jensen 656888eea45cSKlaus Jensen /* only inject new bits of smart critical warning */ 656988eea45cSKlaus Jensen for (index = 0; index < NVME_SMART_WARN_MAX; index++) { 657088eea45cSKlaus Jensen event = 1 << index; 657188eea45cSKlaus Jensen if (value & ~old_value & event) 657288eea45cSKlaus Jensen nvme_smart_event(n, event); 657388eea45cSKlaus Jensen } 657488eea45cSKlaus Jensen } 657588eea45cSKlaus Jensen 657688eea45cSKlaus Jensen static const VMStateDescription nvme_vmstate = { 657788eea45cSKlaus Jensen .name = "nvme", 657888eea45cSKlaus Jensen .unmigratable = 1, 657988eea45cSKlaus Jensen }; 658088eea45cSKlaus Jensen 658188eea45cSKlaus Jensen static void nvme_class_init(ObjectClass *oc, void *data) 658288eea45cSKlaus Jensen { 658388eea45cSKlaus Jensen DeviceClass *dc = DEVICE_CLASS(oc); 658488eea45cSKlaus Jensen PCIDeviceClass *pc = PCI_DEVICE_CLASS(oc); 658588eea45cSKlaus Jensen 658688eea45cSKlaus Jensen pc->realize = nvme_realize; 658788eea45cSKlaus Jensen pc->exit = nvme_exit; 658888eea45cSKlaus Jensen pc->class_id = PCI_CLASS_STORAGE_EXPRESS; 658988eea45cSKlaus Jensen pc->revision = 2; 659088eea45cSKlaus Jensen 659188eea45cSKlaus Jensen set_bit(DEVICE_CATEGORY_STORAGE, dc->categories); 659288eea45cSKlaus Jensen dc->desc = "Non-Volatile Memory Express"; 659388eea45cSKlaus Jensen device_class_set_props(dc, nvme_props); 659488eea45cSKlaus Jensen dc->vmsd = &nvme_vmstate; 659588eea45cSKlaus Jensen } 659688eea45cSKlaus Jensen 659788eea45cSKlaus Jensen static void nvme_instance_init(Object *obj) 659888eea45cSKlaus Jensen { 659988eea45cSKlaus Jensen NvmeCtrl *n = NVME(obj); 660088eea45cSKlaus Jensen 660188eea45cSKlaus Jensen device_add_bootindex_property(obj, &n->namespace.blkconf.bootindex, 660288eea45cSKlaus Jensen "bootindex", "/namespace@1,0", 660388eea45cSKlaus Jensen DEVICE(obj)); 660488eea45cSKlaus Jensen 660588eea45cSKlaus Jensen object_property_add(obj, "smart_critical_warning", "uint8", 660688eea45cSKlaus Jensen nvme_get_smart_warning, 660788eea45cSKlaus Jensen nvme_set_smart_warning, NULL, NULL); 660888eea45cSKlaus Jensen } 660988eea45cSKlaus Jensen 661088eea45cSKlaus Jensen static const TypeInfo nvme_info = { 661188eea45cSKlaus Jensen .name = TYPE_NVME, 661288eea45cSKlaus Jensen .parent = TYPE_PCI_DEVICE, 661388eea45cSKlaus Jensen .instance_size = sizeof(NvmeCtrl), 661488eea45cSKlaus Jensen .instance_init = nvme_instance_init, 661588eea45cSKlaus Jensen .class_init = nvme_class_init, 661688eea45cSKlaus Jensen .interfaces = (InterfaceInfo[]) { 661788eea45cSKlaus Jensen { INTERFACE_PCIE_DEVICE }, 661888eea45cSKlaus Jensen { } 661988eea45cSKlaus Jensen }, 662088eea45cSKlaus Jensen }; 662188eea45cSKlaus Jensen 662288eea45cSKlaus Jensen static const TypeInfo nvme_bus_info = { 662388eea45cSKlaus Jensen .name = TYPE_NVME_BUS, 662488eea45cSKlaus Jensen .parent = TYPE_BUS, 662588eea45cSKlaus Jensen .instance_size = sizeof(NvmeBus), 662688eea45cSKlaus Jensen }; 662788eea45cSKlaus Jensen 662888eea45cSKlaus Jensen static void nvme_register_types(void) 662988eea45cSKlaus Jensen { 663088eea45cSKlaus Jensen type_register_static(&nvme_info); 663188eea45cSKlaus Jensen type_register_static(&nvme_bus_info); 663288eea45cSKlaus Jensen } 663388eea45cSKlaus Jensen 663488eea45cSKlaus Jensen type_init(nvme_register_types) 6635