This patch drops the name parameter for the virtio_init function. The pair between the numeric device ID and the string device ID (name) of a virtio device already exists, but not in a way that lets us map between them. This patch lets us do this and removes the need for the name parameter in the virtio_init function. Signed-off-by: Jonah Palmer <jonah.palmer@oracle.com> Message-Id: <1648819405-25696-2-git-send-email-jonah.palmer@oracle.com> Reviewed-by: Michael S. Tsirkin <mst@redhat.com> Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
		
			
				
	
	
		
			1080 lines
		
	
	
		
			34 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			1080 lines
		
	
	
		
			34 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
/*
 | 
						|
 * Virtio Balloon Device
 | 
						|
 *
 | 
						|
 * Copyright IBM, Corp. 2008
 | 
						|
 * Copyright (C) 2011 Red Hat, Inc.
 | 
						|
 * Copyright (C) 2011 Amit Shah <amit.shah@redhat.com>
 | 
						|
 *
 | 
						|
 * Authors:
 | 
						|
 *  Anthony Liguori   <aliguori@us.ibm.com>
 | 
						|
 *
 | 
						|
 * This work is licensed under the terms of the GNU GPL, version 2.  See
 | 
						|
 * the COPYING file in the top-level directory.
 | 
						|
 *
 | 
						|
 */
 | 
						|
 | 
						|
#include "qemu/osdep.h"
 | 
						|
#include "qemu/iov.h"
 | 
						|
#include "qemu/module.h"
 | 
						|
#include "qemu/timer.h"
 | 
						|
#include "qemu/madvise.h"
 | 
						|
#include "hw/virtio/virtio.h"
 | 
						|
#include "hw/mem/pc-dimm.h"
 | 
						|
#include "hw/qdev-properties.h"
 | 
						|
#include "hw/boards.h"
 | 
						|
#include "sysemu/balloon.h"
 | 
						|
#include "hw/virtio/virtio-balloon.h"
 | 
						|
#include "exec/address-spaces.h"
 | 
						|
#include "qapi/error.h"
 | 
						|
#include "qapi/qapi-events-machine.h"
 | 
						|
#include "qapi/visitor.h"
 | 
						|
#include "trace.h"
 | 
						|
#include "qemu/error-report.h"
 | 
						|
#include "migration/misc.h"
 | 
						|
#include "migration/migration.h"
 | 
						|
 | 
						|
#include "hw/virtio/virtio-bus.h"
 | 
						|
#include "hw/virtio/virtio-access.h"
 | 
						|
 | 
						|
#define BALLOON_PAGE_SIZE  (1 << VIRTIO_BALLOON_PFN_SHIFT)
 | 
						|
 | 
						|
typedef struct PartiallyBalloonedPage {
 | 
						|
    ram_addr_t base_gpa;
 | 
						|
    unsigned long *bitmap;
 | 
						|
} PartiallyBalloonedPage;
 | 
						|
 | 
						|
static void virtio_balloon_pbp_free(PartiallyBalloonedPage *pbp)
 | 
						|
{
 | 
						|
    if (!pbp->bitmap) {
 | 
						|
        return;
 | 
						|
    }
 | 
						|
    g_free(pbp->bitmap);
 | 
						|
    pbp->bitmap = NULL;
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_pbp_alloc(PartiallyBalloonedPage *pbp,
 | 
						|
                                     ram_addr_t base_gpa,
 | 
						|
                                     long subpages)
 | 
						|
{
 | 
						|
    pbp->base_gpa = base_gpa;
 | 
						|
    pbp->bitmap = bitmap_new(subpages);
 | 
						|
}
 | 
						|
 | 
						|
static bool virtio_balloon_pbp_matches(PartiallyBalloonedPage *pbp,
 | 
						|
                                       ram_addr_t base_gpa)
 | 
						|
{
 | 
						|
    return pbp->base_gpa == base_gpa;
 | 
						|
}
 | 
						|
 | 
						|
static bool virtio_balloon_inhibited(void)
 | 
						|
{
 | 
						|
    /*
 | 
						|
     * Postcopy cannot deal with concurrent discards,
 | 
						|
     * so it's special, as well as background snapshots.
 | 
						|
     */
 | 
						|
    return ram_block_discard_is_disabled() || migration_in_incoming_postcopy() ||
 | 
						|
            migration_in_bg_snapshot();
 | 
						|
}
 | 
						|
 | 
						|
static void balloon_inflate_page(VirtIOBalloon *balloon,
 | 
						|
                                 MemoryRegion *mr, hwaddr mr_offset,
 | 
						|
                                 PartiallyBalloonedPage *pbp)
 | 
						|
{
 | 
						|
    void *addr = memory_region_get_ram_ptr(mr) + mr_offset;
 | 
						|
    ram_addr_t rb_offset, rb_aligned_offset, base_gpa;
 | 
						|
    RAMBlock *rb;
 | 
						|
    size_t rb_page_size;
 | 
						|
    int subpages;
 | 
						|
 | 
						|
    /* XXX is there a better way to get to the RAMBlock than via a
 | 
						|
     * host address? */
 | 
						|
    rb = qemu_ram_block_from_host(addr, false, &rb_offset);
 | 
						|
    rb_page_size = qemu_ram_pagesize(rb);
 | 
						|
 | 
						|
    if (rb_page_size == BALLOON_PAGE_SIZE) {
 | 
						|
        /* Easy case */
 | 
						|
 | 
						|
        ram_block_discard_range(rb, rb_offset, rb_page_size);
 | 
						|
        /* We ignore errors from ram_block_discard_range(), because it
 | 
						|
         * has already reported them, and failing to discard a balloon
 | 
						|
         * page is not fatal */
 | 
						|
        return;
 | 
						|
    }
 | 
						|
 | 
						|
    /* Hard case
 | 
						|
     *
 | 
						|
     * We've put a piece of a larger host page into the balloon - we
 | 
						|
     * need to keep track until we have a whole host page to
 | 
						|
     * discard
 | 
						|
     */
 | 
						|
    warn_report_once(
 | 
						|
"Balloon used with backing page size > 4kiB, this may not be reliable");
 | 
						|
 | 
						|
    rb_aligned_offset = QEMU_ALIGN_DOWN(rb_offset, rb_page_size);
 | 
						|
    subpages = rb_page_size / BALLOON_PAGE_SIZE;
 | 
						|
    base_gpa = memory_region_get_ram_addr(mr) + mr_offset -
 | 
						|
               (rb_offset - rb_aligned_offset);
 | 
						|
 | 
						|
    if (pbp->bitmap && !virtio_balloon_pbp_matches(pbp, base_gpa)) {
 | 
						|
        /* We've partially ballooned part of a host page, but now
 | 
						|
         * we're trying to balloon part of a different one.  Too hard,
 | 
						|
         * give up on the old partial page */
 | 
						|
        virtio_balloon_pbp_free(pbp);
 | 
						|
    }
 | 
						|
 | 
						|
    if (!pbp->bitmap) {
 | 
						|
        virtio_balloon_pbp_alloc(pbp, base_gpa, subpages);
 | 
						|
    }
 | 
						|
 | 
						|
    set_bit((rb_offset - rb_aligned_offset) / BALLOON_PAGE_SIZE,
 | 
						|
            pbp->bitmap);
 | 
						|
 | 
						|
    if (bitmap_full(pbp->bitmap, subpages)) {
 | 
						|
        /* We've accumulated a full host page, we can actually discard
 | 
						|
         * it now */
 | 
						|
 | 
						|
        ram_block_discard_range(rb, rb_aligned_offset, rb_page_size);
 | 
						|
        /* We ignore errors from ram_block_discard_range(), because it
 | 
						|
         * has already reported them, and failing to discard a balloon
 | 
						|
         * page is not fatal */
 | 
						|
        virtio_balloon_pbp_free(pbp);
 | 
						|
    }
 | 
						|
}
 | 
						|
 | 
						|
static void balloon_deflate_page(VirtIOBalloon *balloon,
 | 
						|
                                 MemoryRegion *mr, hwaddr mr_offset)
 | 
						|
{
 | 
						|
    void *addr = memory_region_get_ram_ptr(mr) + mr_offset;
 | 
						|
    ram_addr_t rb_offset;
 | 
						|
    RAMBlock *rb;
 | 
						|
    size_t rb_page_size;
 | 
						|
    void *host_addr;
 | 
						|
    int ret;
 | 
						|
 | 
						|
    /* XXX is there a better way to get to the RAMBlock than via a
 | 
						|
     * host address? */
 | 
						|
    rb = qemu_ram_block_from_host(addr, false, &rb_offset);
 | 
						|
    rb_page_size = qemu_ram_pagesize(rb);
 | 
						|
 | 
						|
    host_addr = (void *)((uintptr_t)addr & ~(rb_page_size - 1));
 | 
						|
 | 
						|
    /* When a page is deflated, we hint the whole host page it lives
 | 
						|
     * on, since we can't do anything smaller */
 | 
						|
    ret = qemu_madvise(host_addr, rb_page_size, QEMU_MADV_WILLNEED);
 | 
						|
    if (ret != 0) {
 | 
						|
        warn_report("Couldn't MADV_WILLNEED on balloon deflate: %s",
 | 
						|
                    strerror(errno));
 | 
						|
        /* Otherwise ignore, failing to page hint shouldn't be fatal */
 | 
						|
    }
 | 
						|
}
 | 
						|
 | 
						|
static const char *balloon_stat_names[] = {
 | 
						|
   [VIRTIO_BALLOON_S_SWAP_IN] = "stat-swap-in",
 | 
						|
   [VIRTIO_BALLOON_S_SWAP_OUT] = "stat-swap-out",
 | 
						|
   [VIRTIO_BALLOON_S_MAJFLT] = "stat-major-faults",
 | 
						|
   [VIRTIO_BALLOON_S_MINFLT] = "stat-minor-faults",
 | 
						|
   [VIRTIO_BALLOON_S_MEMFREE] = "stat-free-memory",
 | 
						|
   [VIRTIO_BALLOON_S_MEMTOT] = "stat-total-memory",
 | 
						|
   [VIRTIO_BALLOON_S_AVAIL] = "stat-available-memory",
 | 
						|
   [VIRTIO_BALLOON_S_CACHES] = "stat-disk-caches",
 | 
						|
   [VIRTIO_BALLOON_S_HTLB_PGALLOC] = "stat-htlb-pgalloc",
 | 
						|
   [VIRTIO_BALLOON_S_HTLB_PGFAIL] = "stat-htlb-pgfail",
 | 
						|
   [VIRTIO_BALLOON_S_NR] = NULL
 | 
						|
};
 | 
						|
 | 
						|
/*
 | 
						|
 * reset_stats - Mark all items in the stats array as unset
 | 
						|
 *
 | 
						|
 * This function needs to be called at device initialization and before
 | 
						|
 * updating to a set of newly-generated stats.  This will ensure that no
 | 
						|
 * stale values stick around in case the guest reports a subset of the supported
 | 
						|
 * statistics.
 | 
						|
 */
 | 
						|
static inline void reset_stats(VirtIOBalloon *dev)
 | 
						|
{
 | 
						|
    int i;
 | 
						|
    for (i = 0; i < VIRTIO_BALLOON_S_NR; dev->stats[i++] = -1);
 | 
						|
}
 | 
						|
 | 
						|
static bool balloon_stats_supported(const VirtIOBalloon *s)
 | 
						|
{
 | 
						|
    VirtIODevice *vdev = VIRTIO_DEVICE(s);
 | 
						|
    return virtio_vdev_has_feature(vdev, VIRTIO_BALLOON_F_STATS_VQ);
 | 
						|
}
 | 
						|
 | 
						|
static bool balloon_stats_enabled(const VirtIOBalloon *s)
 | 
						|
{
 | 
						|
    return s->stats_poll_interval > 0;
 | 
						|
}
 | 
						|
 | 
						|
static void balloon_stats_destroy_timer(VirtIOBalloon *s)
 | 
						|
{
 | 
						|
    if (balloon_stats_enabled(s)) {
 | 
						|
        timer_free(s->stats_timer);
 | 
						|
        s->stats_timer = NULL;
 | 
						|
        s->stats_poll_interval = 0;
 | 
						|
    }
 | 
						|
}
 | 
						|
 | 
						|
static void balloon_stats_change_timer(VirtIOBalloon *s, int64_t secs)
 | 
						|
{
 | 
						|
    timer_mod(s->stats_timer, qemu_clock_get_ms(QEMU_CLOCK_VIRTUAL) + secs * 1000);
 | 
						|
}
 | 
						|
 | 
						|
static void balloon_stats_poll_cb(void *opaque)
 | 
						|
{
 | 
						|
    VirtIOBalloon *s = opaque;
 | 
						|
    VirtIODevice *vdev = VIRTIO_DEVICE(s);
 | 
						|
 | 
						|
    if (s->stats_vq_elem == NULL || !balloon_stats_supported(s)) {
 | 
						|
        /* re-schedule */
 | 
						|
        balloon_stats_change_timer(s, s->stats_poll_interval);
 | 
						|
        return;
 | 
						|
    }
 | 
						|
 | 
						|
    virtqueue_push(s->svq, s->stats_vq_elem, 0);
 | 
						|
    virtio_notify(vdev, s->svq);
 | 
						|
    g_free(s->stats_vq_elem);
 | 
						|
    s->stats_vq_elem = NULL;
 | 
						|
}
 | 
						|
 | 
						|
static void balloon_stats_get_all(Object *obj, Visitor *v, const char *name,
 | 
						|
                                  void *opaque, Error **errp)
 | 
						|
{
 | 
						|
    Error *err = NULL;
 | 
						|
    VirtIOBalloon *s = VIRTIO_BALLOON(obj);
 | 
						|
    int i;
 | 
						|
 | 
						|
    if (!visit_start_struct(v, name, NULL, 0, &err)) {
 | 
						|
        goto out;
 | 
						|
    }
 | 
						|
    if (!visit_type_int(v, "last-update", &s->stats_last_update, &err)) {
 | 
						|
        goto out_end;
 | 
						|
    }
 | 
						|
 | 
						|
    if (!visit_start_struct(v, "stats", NULL, 0, &err)) {
 | 
						|
        goto out_end;
 | 
						|
    }
 | 
						|
    for (i = 0; i < VIRTIO_BALLOON_S_NR; i++) {
 | 
						|
        if (!visit_type_uint64(v, balloon_stat_names[i], &s->stats[i], &err)) {
 | 
						|
            goto out_nested;
 | 
						|
        }
 | 
						|
    }
 | 
						|
    visit_check_struct(v, &err);
 | 
						|
out_nested:
 | 
						|
    visit_end_struct(v, NULL);
 | 
						|
 | 
						|
    if (!err) {
 | 
						|
        visit_check_struct(v, &err);
 | 
						|
    }
 | 
						|
out_end:
 | 
						|
    visit_end_struct(v, NULL);
 | 
						|
out:
 | 
						|
    error_propagate(errp, err);
 | 
						|
}
 | 
						|
 | 
						|
static void balloon_stats_get_poll_interval(Object *obj, Visitor *v,
 | 
						|
                                            const char *name, void *opaque,
 | 
						|
                                            Error **errp)
 | 
						|
{
 | 
						|
    VirtIOBalloon *s = VIRTIO_BALLOON(obj);
 | 
						|
    visit_type_int(v, name, &s->stats_poll_interval, errp);
 | 
						|
}
 | 
						|
 | 
						|
static void balloon_stats_set_poll_interval(Object *obj, Visitor *v,
 | 
						|
                                            const char *name, void *opaque,
 | 
						|
                                            Error **errp)
 | 
						|
{
 | 
						|
    VirtIOBalloon *s = VIRTIO_BALLOON(obj);
 | 
						|
    int64_t value;
 | 
						|
 | 
						|
    if (!visit_type_int(v, name, &value, errp)) {
 | 
						|
        return;
 | 
						|
    }
 | 
						|
 | 
						|
    if (value < 0) {
 | 
						|
        error_setg(errp, "timer value must be greater than zero");
 | 
						|
        return;
 | 
						|
    }
 | 
						|
 | 
						|
    if (value > UINT32_MAX) {
 | 
						|
        error_setg(errp, "timer value is too big");
 | 
						|
        return;
 | 
						|
    }
 | 
						|
 | 
						|
    if (value == s->stats_poll_interval) {
 | 
						|
        return;
 | 
						|
    }
 | 
						|
 | 
						|
    if (value == 0) {
 | 
						|
        /* timer=0 disables the timer */
 | 
						|
        balloon_stats_destroy_timer(s);
 | 
						|
        return;
 | 
						|
    }
 | 
						|
 | 
						|
    if (balloon_stats_enabled(s)) {
 | 
						|
        /* timer interval change */
 | 
						|
        s->stats_poll_interval = value;
 | 
						|
        balloon_stats_change_timer(s, value);
 | 
						|
        return;
 | 
						|
    }
 | 
						|
 | 
						|
    /* create a new timer */
 | 
						|
    g_assert(s->stats_timer == NULL);
 | 
						|
    s->stats_timer = timer_new_ms(QEMU_CLOCK_VIRTUAL, balloon_stats_poll_cb, s);
 | 
						|
    s->stats_poll_interval = value;
 | 
						|
    balloon_stats_change_timer(s, 0);
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_handle_report(VirtIODevice *vdev, VirtQueue *vq)
 | 
						|
{
 | 
						|
    VirtIOBalloon *dev = VIRTIO_BALLOON(vdev);
 | 
						|
    VirtQueueElement *elem;
 | 
						|
 | 
						|
    while ((elem = virtqueue_pop(vq, sizeof(VirtQueueElement)))) {
 | 
						|
        unsigned int i;
 | 
						|
 | 
						|
        /*
 | 
						|
         * When we discard the page it has the effect of removing the page
 | 
						|
         * from the hypervisor itself and causing it to be zeroed when it
 | 
						|
         * is returned to us. So we must not discard the page if it is
 | 
						|
         * accessible by another device or process, or if the guest is
 | 
						|
         * expecting it to retain a non-zero value.
 | 
						|
         */
 | 
						|
        if (virtio_balloon_inhibited() || dev->poison_val) {
 | 
						|
            goto skip_element;
 | 
						|
        }
 | 
						|
 | 
						|
        for (i = 0; i < elem->in_num; i++) {
 | 
						|
            void *addr = elem->in_sg[i].iov_base;
 | 
						|
            size_t size = elem->in_sg[i].iov_len;
 | 
						|
            ram_addr_t ram_offset;
 | 
						|
            RAMBlock *rb;
 | 
						|
 | 
						|
            /*
 | 
						|
             * There is no need to check the memory section to see if
 | 
						|
             * it is ram/readonly/romd like there is for handle_output
 | 
						|
             * below. If the region is not meant to be written to then
 | 
						|
             * address_space_map will have allocated a bounce buffer
 | 
						|
             * and it will be freed in address_space_unmap and trigger
 | 
						|
             * and unassigned_mem_write before failing to copy over the
 | 
						|
             * buffer. If more than one bad descriptor is provided it
 | 
						|
             * will return NULL after the first bounce buffer and fail
 | 
						|
             * to map any resources.
 | 
						|
             */
 | 
						|
            rb = qemu_ram_block_from_host(addr, false, &ram_offset);
 | 
						|
            if (!rb) {
 | 
						|
                trace_virtio_balloon_bad_addr(elem->in_addr[i]);
 | 
						|
                continue;
 | 
						|
            }
 | 
						|
 | 
						|
            /*
 | 
						|
             * For now we will simply ignore unaligned memory regions, or
 | 
						|
             * regions that overrun the end of the RAMBlock.
 | 
						|
             */
 | 
						|
            if (!QEMU_IS_ALIGNED(ram_offset | size, qemu_ram_pagesize(rb)) ||
 | 
						|
                (ram_offset + size) > qemu_ram_get_used_length(rb)) {
 | 
						|
                continue;
 | 
						|
            }
 | 
						|
 | 
						|
            ram_block_discard_range(rb, ram_offset, size);
 | 
						|
        }
 | 
						|
 | 
						|
skip_element:
 | 
						|
        virtqueue_push(vq, elem, 0);
 | 
						|
        virtio_notify(vdev, vq);
 | 
						|
        g_free(elem);
 | 
						|
    }
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_handle_output(VirtIODevice *vdev, VirtQueue *vq)
 | 
						|
{
 | 
						|
    VirtIOBalloon *s = VIRTIO_BALLOON(vdev);
 | 
						|
    VirtQueueElement *elem;
 | 
						|
    MemoryRegionSection section;
 | 
						|
 | 
						|
    for (;;) {
 | 
						|
        PartiallyBalloonedPage pbp = {};
 | 
						|
        size_t offset = 0;
 | 
						|
        uint32_t pfn;
 | 
						|
 | 
						|
        elem = virtqueue_pop(vq, sizeof(VirtQueueElement));
 | 
						|
        if (!elem) {
 | 
						|
            break;
 | 
						|
        }
 | 
						|
 | 
						|
        while (iov_to_buf(elem->out_sg, elem->out_num, offset, &pfn, 4) == 4) {
 | 
						|
            unsigned int p = virtio_ldl_p(vdev, &pfn);
 | 
						|
            hwaddr pa;
 | 
						|
 | 
						|
            pa = (hwaddr) p << VIRTIO_BALLOON_PFN_SHIFT;
 | 
						|
            offset += 4;
 | 
						|
 | 
						|
            section = memory_region_find(get_system_memory(), pa,
 | 
						|
                                         BALLOON_PAGE_SIZE);
 | 
						|
            if (!section.mr) {
 | 
						|
                trace_virtio_balloon_bad_addr(pa);
 | 
						|
                continue;
 | 
						|
            }
 | 
						|
            if (!memory_region_is_ram(section.mr) ||
 | 
						|
                memory_region_is_rom(section.mr) ||
 | 
						|
                memory_region_is_romd(section.mr)) {
 | 
						|
                trace_virtio_balloon_bad_addr(pa);
 | 
						|
                memory_region_unref(section.mr);
 | 
						|
                continue;
 | 
						|
            }
 | 
						|
 | 
						|
            trace_virtio_balloon_handle_output(memory_region_name(section.mr),
 | 
						|
                                               pa);
 | 
						|
            if (!virtio_balloon_inhibited()) {
 | 
						|
                if (vq == s->ivq) {
 | 
						|
                    balloon_inflate_page(s, section.mr,
 | 
						|
                                         section.offset_within_region, &pbp);
 | 
						|
                } else if (vq == s->dvq) {
 | 
						|
                    balloon_deflate_page(s, section.mr, section.offset_within_region);
 | 
						|
                } else {
 | 
						|
                    g_assert_not_reached();
 | 
						|
                }
 | 
						|
            }
 | 
						|
            memory_region_unref(section.mr);
 | 
						|
        }
 | 
						|
 | 
						|
        virtqueue_push(vq, elem, 0);
 | 
						|
        virtio_notify(vdev, vq);
 | 
						|
        g_free(elem);
 | 
						|
        virtio_balloon_pbp_free(&pbp);
 | 
						|
    }
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_receive_stats(VirtIODevice *vdev, VirtQueue *vq)
 | 
						|
{
 | 
						|
    VirtIOBalloon *s = VIRTIO_BALLOON(vdev);
 | 
						|
    VirtQueueElement *elem;
 | 
						|
    VirtIOBalloonStat stat;
 | 
						|
    size_t offset = 0;
 | 
						|
 | 
						|
    elem = virtqueue_pop(vq, sizeof(VirtQueueElement));
 | 
						|
    if (!elem) {
 | 
						|
        goto out;
 | 
						|
    }
 | 
						|
 | 
						|
    if (s->stats_vq_elem != NULL) {
 | 
						|
        /* This should never happen if the driver follows the spec. */
 | 
						|
        virtqueue_push(vq, s->stats_vq_elem, 0);
 | 
						|
        virtio_notify(vdev, vq);
 | 
						|
        g_free(s->stats_vq_elem);
 | 
						|
    }
 | 
						|
 | 
						|
    s->stats_vq_elem = elem;
 | 
						|
 | 
						|
    /* Initialize the stats to get rid of any stale values.  This is only
 | 
						|
     * needed to handle the case where a guest supports fewer stats than it
 | 
						|
     * used to (ie. it has booted into an old kernel).
 | 
						|
     */
 | 
						|
    reset_stats(s);
 | 
						|
 | 
						|
    while (iov_to_buf(elem->out_sg, elem->out_num, offset, &stat, sizeof(stat))
 | 
						|
           == sizeof(stat)) {
 | 
						|
        uint16_t tag = virtio_tswap16(vdev, stat.tag);
 | 
						|
        uint64_t val = virtio_tswap64(vdev, stat.val);
 | 
						|
 | 
						|
        offset += sizeof(stat);
 | 
						|
        if (tag < VIRTIO_BALLOON_S_NR)
 | 
						|
            s->stats[tag] = val;
 | 
						|
    }
 | 
						|
    s->stats_vq_offset = offset;
 | 
						|
    s->stats_last_update = g_get_real_time() / G_USEC_PER_SEC;
 | 
						|
 | 
						|
out:
 | 
						|
    if (balloon_stats_enabled(s)) {
 | 
						|
        balloon_stats_change_timer(s, s->stats_poll_interval);
 | 
						|
    }
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_handle_free_page_vq(VirtIODevice *vdev,
 | 
						|
                                               VirtQueue *vq)
 | 
						|
{
 | 
						|
    VirtIOBalloon *s = VIRTIO_BALLOON(vdev);
 | 
						|
    qemu_bh_schedule(s->free_page_bh);
 | 
						|
}
 | 
						|
 | 
						|
static bool get_free_page_hints(VirtIOBalloon *dev)
 | 
						|
{
 | 
						|
    VirtQueueElement *elem;
 | 
						|
    VirtIODevice *vdev = VIRTIO_DEVICE(dev);
 | 
						|
    VirtQueue *vq = dev->free_page_vq;
 | 
						|
    bool ret = true;
 | 
						|
    int i;
 | 
						|
 | 
						|
    while (dev->block_iothread) {
 | 
						|
        qemu_cond_wait(&dev->free_page_cond, &dev->free_page_lock);
 | 
						|
    }
 | 
						|
 | 
						|
    elem = virtqueue_pop(vq, sizeof(VirtQueueElement));
 | 
						|
    if (!elem) {
 | 
						|
        return false;
 | 
						|
    }
 | 
						|
 | 
						|
    if (elem->out_num) {
 | 
						|
        uint32_t id;
 | 
						|
        size_t size = iov_to_buf(elem->out_sg, elem->out_num, 0,
 | 
						|
                                 &id, sizeof(id));
 | 
						|
 | 
						|
        virtio_tswap32s(vdev, &id);
 | 
						|
        if (unlikely(size != sizeof(id))) {
 | 
						|
            virtio_error(vdev, "received an incorrect cmd id");
 | 
						|
            ret = false;
 | 
						|
            goto out;
 | 
						|
        }
 | 
						|
        if (dev->free_page_hint_status == FREE_PAGE_HINT_S_REQUESTED &&
 | 
						|
            id == dev->free_page_hint_cmd_id) {
 | 
						|
            dev->free_page_hint_status = FREE_PAGE_HINT_S_START;
 | 
						|
        } else if (dev->free_page_hint_status == FREE_PAGE_HINT_S_START) {
 | 
						|
            /*
 | 
						|
             * Stop the optimization only when it has started. This
 | 
						|
             * avoids a stale stop sign for the previous command.
 | 
						|
             */
 | 
						|
            dev->free_page_hint_status = FREE_PAGE_HINT_S_STOP;
 | 
						|
        }
 | 
						|
    }
 | 
						|
 | 
						|
    if (elem->in_num && dev->free_page_hint_status == FREE_PAGE_HINT_S_START) {
 | 
						|
        for (i = 0; i < elem->in_num; i++) {
 | 
						|
            qemu_guest_free_page_hint(elem->in_sg[i].iov_base,
 | 
						|
                                      elem->in_sg[i].iov_len);
 | 
						|
        }
 | 
						|
    }
 | 
						|
 | 
						|
out:
 | 
						|
    virtqueue_push(vq, elem, 0);
 | 
						|
    g_free(elem);
 | 
						|
    return ret;
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_ballloon_get_free_page_hints(void *opaque)
 | 
						|
{
 | 
						|
    VirtIOBalloon *dev = opaque;
 | 
						|
    VirtIODevice *vdev = VIRTIO_DEVICE(dev);
 | 
						|
    VirtQueue *vq = dev->free_page_vq;
 | 
						|
    bool continue_to_get_hints;
 | 
						|
 | 
						|
    do {
 | 
						|
        qemu_mutex_lock(&dev->free_page_lock);
 | 
						|
        virtio_queue_set_notification(vq, 0);
 | 
						|
        continue_to_get_hints = get_free_page_hints(dev);
 | 
						|
        qemu_mutex_unlock(&dev->free_page_lock);
 | 
						|
        virtio_notify(vdev, vq);
 | 
						|
      /*
 | 
						|
       * Start to poll the vq once the hinting started. Otherwise, continue
 | 
						|
       * only when there are entries on the vq, which need to be given back.
 | 
						|
       */
 | 
						|
    } while (continue_to_get_hints ||
 | 
						|
             dev->free_page_hint_status == FREE_PAGE_HINT_S_START);
 | 
						|
    virtio_queue_set_notification(vq, 1);
 | 
						|
}
 | 
						|
 | 
						|
static bool virtio_balloon_free_page_support(void *opaque)
 | 
						|
{
 | 
						|
    VirtIOBalloon *s = opaque;
 | 
						|
    VirtIODevice *vdev = VIRTIO_DEVICE(s);
 | 
						|
 | 
						|
    return virtio_vdev_has_feature(vdev, VIRTIO_BALLOON_F_FREE_PAGE_HINT);
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_free_page_start(VirtIOBalloon *s)
 | 
						|
{
 | 
						|
    VirtIODevice *vdev = VIRTIO_DEVICE(s);
 | 
						|
 | 
						|
    qemu_mutex_lock(&s->free_page_lock);
 | 
						|
 | 
						|
    if (s->free_page_hint_cmd_id == UINT_MAX) {
 | 
						|
        s->free_page_hint_cmd_id = VIRTIO_BALLOON_FREE_PAGE_HINT_CMD_ID_MIN;
 | 
						|
    } else {
 | 
						|
        s->free_page_hint_cmd_id++;
 | 
						|
    }
 | 
						|
 | 
						|
    s->free_page_hint_status = FREE_PAGE_HINT_S_REQUESTED;
 | 
						|
    qemu_mutex_unlock(&s->free_page_lock);
 | 
						|
 | 
						|
    virtio_notify_config(vdev);
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_free_page_stop(VirtIOBalloon *s)
 | 
						|
{
 | 
						|
    VirtIODevice *vdev = VIRTIO_DEVICE(s);
 | 
						|
 | 
						|
    if (s->free_page_hint_status != FREE_PAGE_HINT_S_STOP) {
 | 
						|
        /*
 | 
						|
         * The lock also guarantees us that the
 | 
						|
         * virtio_ballloon_get_free_page_hints exits after the
 | 
						|
         * free_page_hint_status is set to S_STOP.
 | 
						|
         */
 | 
						|
        qemu_mutex_lock(&s->free_page_lock);
 | 
						|
        /*
 | 
						|
         * The guest isn't done hinting, so send a notification
 | 
						|
         * to the guest to actively stop the hinting.
 | 
						|
         */
 | 
						|
        s->free_page_hint_status = FREE_PAGE_HINT_S_STOP;
 | 
						|
        qemu_mutex_unlock(&s->free_page_lock);
 | 
						|
        virtio_notify_config(vdev);
 | 
						|
    }
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_free_page_done(VirtIOBalloon *s)
 | 
						|
{
 | 
						|
    VirtIODevice *vdev = VIRTIO_DEVICE(s);
 | 
						|
 | 
						|
    if (s->free_page_hint_status != FREE_PAGE_HINT_S_DONE) {
 | 
						|
        /* See virtio_balloon_free_page_stop() */
 | 
						|
        qemu_mutex_lock(&s->free_page_lock);
 | 
						|
        s->free_page_hint_status = FREE_PAGE_HINT_S_DONE;
 | 
						|
        qemu_mutex_unlock(&s->free_page_lock);
 | 
						|
        virtio_notify_config(vdev);
 | 
						|
    }
 | 
						|
}
 | 
						|
 | 
						|
static int
 | 
						|
virtio_balloon_free_page_hint_notify(NotifierWithReturn *n, void *data)
 | 
						|
{
 | 
						|
    VirtIOBalloon *dev = container_of(n, VirtIOBalloon, free_page_hint_notify);
 | 
						|
    VirtIODevice *vdev = VIRTIO_DEVICE(dev);
 | 
						|
    PrecopyNotifyData *pnd = data;
 | 
						|
 | 
						|
    if (!virtio_balloon_free_page_support(dev)) {
 | 
						|
        /*
 | 
						|
         * This is an optimization provided to migration, so just return 0 to
 | 
						|
         * have the normal migration process not affected when this feature is
 | 
						|
         * not supported.
 | 
						|
         */
 | 
						|
        return 0;
 | 
						|
    }
 | 
						|
 | 
						|
    /*
 | 
						|
     * Pages hinted via qemu_guest_free_page_hint() are cleared from the dirty
 | 
						|
     * bitmap and will not get migrated, especially also not when the postcopy
 | 
						|
     * destination starts using them and requests migration from the source; the
 | 
						|
     * faulting thread will stall until postcopy migration finishes and
 | 
						|
     * all threads are woken up. Let's not start free page hinting if postcopy
 | 
						|
     * is possible.
 | 
						|
     */
 | 
						|
    if (migrate_postcopy_ram()) {
 | 
						|
        return 0;
 | 
						|
    }
 | 
						|
 | 
						|
    switch (pnd->reason) {
 | 
						|
    case PRECOPY_NOTIFY_BEFORE_BITMAP_SYNC:
 | 
						|
        virtio_balloon_free_page_stop(dev);
 | 
						|
        break;
 | 
						|
    case PRECOPY_NOTIFY_AFTER_BITMAP_SYNC:
 | 
						|
        if (vdev->vm_running) {
 | 
						|
            virtio_balloon_free_page_start(dev);
 | 
						|
            break;
 | 
						|
        }
 | 
						|
        /*
 | 
						|
         * Set S_DONE before migrating the vmstate, so the guest will reuse
 | 
						|
         * all hinted pages once running on the destination. Fall through.
 | 
						|
         */
 | 
						|
    case PRECOPY_NOTIFY_CLEANUP:
 | 
						|
        /*
 | 
						|
         * Especially, if something goes wrong during precopy or if migration
 | 
						|
         * is canceled, we have to properly communicate S_DONE to the VM.
 | 
						|
         */
 | 
						|
        virtio_balloon_free_page_done(dev);
 | 
						|
        break;
 | 
						|
    case PRECOPY_NOTIFY_SETUP:
 | 
						|
    case PRECOPY_NOTIFY_COMPLETE:
 | 
						|
        break;
 | 
						|
    default:
 | 
						|
        virtio_error(vdev, "%s: %d reason unknown", __func__, pnd->reason);
 | 
						|
    }
 | 
						|
 | 
						|
    return 0;
 | 
						|
}
 | 
						|
 | 
						|
static size_t virtio_balloon_config_size(VirtIOBalloon *s)
 | 
						|
{
 | 
						|
    uint64_t features = s->host_features;
 | 
						|
 | 
						|
    if (s->qemu_4_0_config_size) {
 | 
						|
        return sizeof(struct virtio_balloon_config);
 | 
						|
    }
 | 
						|
    if (virtio_has_feature(features, VIRTIO_BALLOON_F_PAGE_POISON)) {
 | 
						|
        return sizeof(struct virtio_balloon_config);
 | 
						|
    }
 | 
						|
    if (virtio_has_feature(features, VIRTIO_BALLOON_F_FREE_PAGE_HINT)) {
 | 
						|
        return offsetof(struct virtio_balloon_config, poison_val);
 | 
						|
    }
 | 
						|
    return offsetof(struct virtio_balloon_config, free_page_hint_cmd_id);
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_get_config(VirtIODevice *vdev, uint8_t *config_data)
 | 
						|
{
 | 
						|
    VirtIOBalloon *dev = VIRTIO_BALLOON(vdev);
 | 
						|
    struct virtio_balloon_config config = {};
 | 
						|
 | 
						|
    config.num_pages = cpu_to_le32(dev->num_pages);
 | 
						|
    config.actual = cpu_to_le32(dev->actual);
 | 
						|
    config.poison_val = cpu_to_le32(dev->poison_val);
 | 
						|
 | 
						|
    if (dev->free_page_hint_status == FREE_PAGE_HINT_S_REQUESTED) {
 | 
						|
        config.free_page_hint_cmd_id =
 | 
						|
                       cpu_to_le32(dev->free_page_hint_cmd_id);
 | 
						|
    } else if (dev->free_page_hint_status == FREE_PAGE_HINT_S_STOP) {
 | 
						|
        config.free_page_hint_cmd_id =
 | 
						|
                       cpu_to_le32(VIRTIO_BALLOON_CMD_ID_STOP);
 | 
						|
    } else if (dev->free_page_hint_status == FREE_PAGE_HINT_S_DONE) {
 | 
						|
        config.free_page_hint_cmd_id =
 | 
						|
                       cpu_to_le32(VIRTIO_BALLOON_CMD_ID_DONE);
 | 
						|
    }
 | 
						|
 | 
						|
    trace_virtio_balloon_get_config(config.num_pages, config.actual);
 | 
						|
    memcpy(config_data, &config, virtio_balloon_config_size(dev));
 | 
						|
}
 | 
						|
 | 
						|
static int build_dimm_list(Object *obj, void *opaque)
 | 
						|
{
 | 
						|
    GSList **list = opaque;
 | 
						|
 | 
						|
    if (object_dynamic_cast(obj, TYPE_PC_DIMM)) {
 | 
						|
        DeviceState *dev = DEVICE(obj);
 | 
						|
        if (dev->realized) { /* only realized DIMMs matter */
 | 
						|
            *list = g_slist_prepend(*list, dev);
 | 
						|
        }
 | 
						|
    }
 | 
						|
 | 
						|
    object_child_foreach(obj, build_dimm_list, opaque);
 | 
						|
    return 0;
 | 
						|
}
 | 
						|
 | 
						|
static ram_addr_t get_current_ram_size(void)
 | 
						|
{
 | 
						|
    GSList *list = NULL, *item;
 | 
						|
    ram_addr_t size = current_machine->ram_size;
 | 
						|
 | 
						|
    build_dimm_list(qdev_get_machine(), &list);
 | 
						|
    for (item = list; item; item = g_slist_next(item)) {
 | 
						|
        Object *obj = OBJECT(item->data);
 | 
						|
        if (!strcmp(object_get_typename(obj), TYPE_PC_DIMM)) {
 | 
						|
            size += object_property_get_int(obj, PC_DIMM_SIZE_PROP,
 | 
						|
                                            &error_abort);
 | 
						|
        }
 | 
						|
    }
 | 
						|
    g_slist_free(list);
 | 
						|
 | 
						|
    return size;
 | 
						|
}
 | 
						|
 | 
						|
static bool virtio_balloon_page_poison_support(void *opaque)
 | 
						|
{
 | 
						|
    VirtIOBalloon *s = opaque;
 | 
						|
    VirtIODevice *vdev = VIRTIO_DEVICE(s);
 | 
						|
 | 
						|
    return virtio_vdev_has_feature(vdev, VIRTIO_BALLOON_F_PAGE_POISON);
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_set_config(VirtIODevice *vdev,
 | 
						|
                                      const uint8_t *config_data)
 | 
						|
{
 | 
						|
    VirtIOBalloon *dev = VIRTIO_BALLOON(vdev);
 | 
						|
    struct virtio_balloon_config config;
 | 
						|
    uint32_t oldactual = dev->actual;
 | 
						|
    ram_addr_t vm_ram_size = get_current_ram_size();
 | 
						|
 | 
						|
    memcpy(&config, config_data, virtio_balloon_config_size(dev));
 | 
						|
    dev->actual = le32_to_cpu(config.actual);
 | 
						|
    if (dev->actual != oldactual) {
 | 
						|
        qapi_event_send_balloon_change(vm_ram_size -
 | 
						|
                        ((ram_addr_t) dev->actual << VIRTIO_BALLOON_PFN_SHIFT));
 | 
						|
    }
 | 
						|
    dev->poison_val = 0;
 | 
						|
    if (virtio_balloon_page_poison_support(dev)) {
 | 
						|
        dev->poison_val = le32_to_cpu(config.poison_val);
 | 
						|
    }
 | 
						|
    trace_virtio_balloon_set_config(dev->actual, oldactual);
 | 
						|
}
 | 
						|
 | 
						|
static uint64_t virtio_balloon_get_features(VirtIODevice *vdev, uint64_t f,
 | 
						|
                                            Error **errp)
 | 
						|
{
 | 
						|
    VirtIOBalloon *dev = VIRTIO_BALLOON(vdev);
 | 
						|
    f |= dev->host_features;
 | 
						|
    virtio_add_feature(&f, VIRTIO_BALLOON_F_STATS_VQ);
 | 
						|
 | 
						|
    return f;
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_stat(void *opaque, BalloonInfo *info)
 | 
						|
{
 | 
						|
    VirtIOBalloon *dev = opaque;
 | 
						|
    info->actual = get_current_ram_size() - ((uint64_t) dev->actual <<
 | 
						|
                                             VIRTIO_BALLOON_PFN_SHIFT);
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_to_target(void *opaque, ram_addr_t target)
 | 
						|
{
 | 
						|
    VirtIOBalloon *dev = VIRTIO_BALLOON(opaque);
 | 
						|
    VirtIODevice *vdev = VIRTIO_DEVICE(dev);
 | 
						|
    ram_addr_t vm_ram_size = get_current_ram_size();
 | 
						|
 | 
						|
    if (target > vm_ram_size) {
 | 
						|
        target = vm_ram_size;
 | 
						|
    }
 | 
						|
    if (target) {
 | 
						|
        dev->num_pages = (vm_ram_size - target) >> VIRTIO_BALLOON_PFN_SHIFT;
 | 
						|
        virtio_notify_config(vdev);
 | 
						|
    }
 | 
						|
    trace_virtio_balloon_to_target(target, dev->num_pages);
 | 
						|
}
 | 
						|
 | 
						|
static int virtio_balloon_post_load_device(void *opaque, int version_id)
 | 
						|
{
 | 
						|
    VirtIOBalloon *s = VIRTIO_BALLOON(opaque);
 | 
						|
 | 
						|
    if (balloon_stats_enabled(s)) {
 | 
						|
        balloon_stats_change_timer(s, s->stats_poll_interval);
 | 
						|
    }
 | 
						|
    return 0;
 | 
						|
}
 | 
						|
 | 
						|
static const VMStateDescription vmstate_virtio_balloon_free_page_hint = {
 | 
						|
    .name = "virtio-balloon-device/free-page-report",
 | 
						|
    .version_id = 1,
 | 
						|
    .minimum_version_id = 1,
 | 
						|
    .needed = virtio_balloon_free_page_support,
 | 
						|
    .fields = (VMStateField[]) {
 | 
						|
        VMSTATE_UINT32(free_page_hint_cmd_id, VirtIOBalloon),
 | 
						|
        VMSTATE_UINT32(free_page_hint_status, VirtIOBalloon),
 | 
						|
        VMSTATE_END_OF_LIST()
 | 
						|
    }
 | 
						|
};
 | 
						|
 | 
						|
static const VMStateDescription vmstate_virtio_balloon_page_poison = {
 | 
						|
    .name = "virtio-balloon-device/page-poison",
 | 
						|
    .version_id = 1,
 | 
						|
    .minimum_version_id = 1,
 | 
						|
    .needed = virtio_balloon_page_poison_support,
 | 
						|
    .fields = (VMStateField[]) {
 | 
						|
        VMSTATE_UINT32(poison_val, VirtIOBalloon),
 | 
						|
        VMSTATE_END_OF_LIST()
 | 
						|
    }
 | 
						|
};
 | 
						|
 | 
						|
static const VMStateDescription vmstate_virtio_balloon_device = {
 | 
						|
    .name = "virtio-balloon-device",
 | 
						|
    .version_id = 1,
 | 
						|
    .minimum_version_id = 1,
 | 
						|
    .post_load = virtio_balloon_post_load_device,
 | 
						|
    .fields = (VMStateField[]) {
 | 
						|
        VMSTATE_UINT32(num_pages, VirtIOBalloon),
 | 
						|
        VMSTATE_UINT32(actual, VirtIOBalloon),
 | 
						|
        VMSTATE_END_OF_LIST()
 | 
						|
    },
 | 
						|
    .subsections = (const VMStateDescription * []) {
 | 
						|
        &vmstate_virtio_balloon_free_page_hint,
 | 
						|
        &vmstate_virtio_balloon_page_poison,
 | 
						|
        NULL
 | 
						|
    }
 | 
						|
};
 | 
						|
 | 
						|
static void virtio_balloon_device_realize(DeviceState *dev, Error **errp)
 | 
						|
{
 | 
						|
    VirtIODevice *vdev = VIRTIO_DEVICE(dev);
 | 
						|
    VirtIOBalloon *s = VIRTIO_BALLOON(dev);
 | 
						|
    int ret;
 | 
						|
 | 
						|
    virtio_init(vdev, VIRTIO_ID_BALLOON, virtio_balloon_config_size(s));
 | 
						|
 | 
						|
    ret = qemu_add_balloon_handler(virtio_balloon_to_target,
 | 
						|
                                   virtio_balloon_stat, s);
 | 
						|
 | 
						|
    if (ret < 0) {
 | 
						|
        error_setg(errp, "Only one balloon device is supported");
 | 
						|
        virtio_cleanup(vdev);
 | 
						|
        return;
 | 
						|
    }
 | 
						|
 | 
						|
    if (virtio_has_feature(s->host_features, VIRTIO_BALLOON_F_FREE_PAGE_HINT) &&
 | 
						|
        !s->iothread) {
 | 
						|
        error_setg(errp, "'free-page-hint' requires 'iothread' to be set");
 | 
						|
        virtio_cleanup(vdev);
 | 
						|
        return;
 | 
						|
    }
 | 
						|
 | 
						|
    s->ivq = virtio_add_queue(vdev, 128, virtio_balloon_handle_output);
 | 
						|
    s->dvq = virtio_add_queue(vdev, 128, virtio_balloon_handle_output);
 | 
						|
    s->svq = virtio_add_queue(vdev, 128, virtio_balloon_receive_stats);
 | 
						|
 | 
						|
    if (virtio_has_feature(s->host_features, VIRTIO_BALLOON_F_FREE_PAGE_HINT)) {
 | 
						|
        s->free_page_vq = virtio_add_queue(vdev, VIRTQUEUE_MAX_SIZE,
 | 
						|
                                           virtio_balloon_handle_free_page_vq);
 | 
						|
        precopy_add_notifier(&s->free_page_hint_notify);
 | 
						|
 | 
						|
        object_ref(OBJECT(s->iothread));
 | 
						|
        s->free_page_bh = aio_bh_new(iothread_get_aio_context(s->iothread),
 | 
						|
                                     virtio_ballloon_get_free_page_hints, s);
 | 
						|
    }
 | 
						|
 | 
						|
    if (virtio_has_feature(s->host_features, VIRTIO_BALLOON_F_REPORTING)) {
 | 
						|
        s->reporting_vq = virtio_add_queue(vdev, 32,
 | 
						|
                                           virtio_balloon_handle_report);
 | 
						|
    }
 | 
						|
 | 
						|
    reset_stats(s);
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_device_unrealize(DeviceState *dev)
 | 
						|
{
 | 
						|
    VirtIODevice *vdev = VIRTIO_DEVICE(dev);
 | 
						|
    VirtIOBalloon *s = VIRTIO_BALLOON(dev);
 | 
						|
 | 
						|
    if (s->free_page_bh) {
 | 
						|
        qemu_bh_delete(s->free_page_bh);
 | 
						|
        object_unref(OBJECT(s->iothread));
 | 
						|
        virtio_balloon_free_page_stop(s);
 | 
						|
        precopy_remove_notifier(&s->free_page_hint_notify);
 | 
						|
    }
 | 
						|
    balloon_stats_destroy_timer(s);
 | 
						|
    qemu_remove_balloon_handler(s);
 | 
						|
 | 
						|
    virtio_delete_queue(s->ivq);
 | 
						|
    virtio_delete_queue(s->dvq);
 | 
						|
    virtio_delete_queue(s->svq);
 | 
						|
    if (s->free_page_vq) {
 | 
						|
        virtio_delete_queue(s->free_page_vq);
 | 
						|
    }
 | 
						|
    if (s->reporting_vq) {
 | 
						|
        virtio_delete_queue(s->reporting_vq);
 | 
						|
    }
 | 
						|
    virtio_cleanup(vdev);
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_device_reset(VirtIODevice *vdev)
 | 
						|
{
 | 
						|
    VirtIOBalloon *s = VIRTIO_BALLOON(vdev);
 | 
						|
 | 
						|
    if (virtio_balloon_free_page_support(s)) {
 | 
						|
        virtio_balloon_free_page_stop(s);
 | 
						|
    }
 | 
						|
 | 
						|
    if (s->stats_vq_elem != NULL) {
 | 
						|
        virtqueue_unpop(s->svq, s->stats_vq_elem, 0);
 | 
						|
        g_free(s->stats_vq_elem);
 | 
						|
        s->stats_vq_elem = NULL;
 | 
						|
    }
 | 
						|
 | 
						|
    s->poison_val = 0;
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_set_status(VirtIODevice *vdev, uint8_t status)
 | 
						|
{
 | 
						|
    VirtIOBalloon *s = VIRTIO_BALLOON(vdev);
 | 
						|
 | 
						|
    if (!s->stats_vq_elem && vdev->vm_running &&
 | 
						|
        (status & VIRTIO_CONFIG_S_DRIVER_OK) && virtqueue_rewind(s->svq, 1)) {
 | 
						|
        /* poll stats queue for the element we have discarded when the VM
 | 
						|
         * was stopped */
 | 
						|
        virtio_balloon_receive_stats(vdev, s->svq);
 | 
						|
    }
 | 
						|
 | 
						|
    if (virtio_balloon_free_page_support(s)) {
 | 
						|
        /*
 | 
						|
         * The VM is woken up and the iothread was blocked, so signal it to
 | 
						|
         * continue.
 | 
						|
         */
 | 
						|
        if (vdev->vm_running && s->block_iothread) {
 | 
						|
            qemu_mutex_lock(&s->free_page_lock);
 | 
						|
            s->block_iothread = false;
 | 
						|
            qemu_cond_signal(&s->free_page_cond);
 | 
						|
            qemu_mutex_unlock(&s->free_page_lock);
 | 
						|
        }
 | 
						|
 | 
						|
        /* The VM is stopped, block the iothread. */
 | 
						|
        if (!vdev->vm_running) {
 | 
						|
            qemu_mutex_lock(&s->free_page_lock);
 | 
						|
            s->block_iothread = true;
 | 
						|
            qemu_mutex_unlock(&s->free_page_lock);
 | 
						|
        }
 | 
						|
    }
 | 
						|
}
 | 
						|
 | 
						|
static void virtio_balloon_instance_init(Object *obj)
 | 
						|
{
 | 
						|
    VirtIOBalloon *s = VIRTIO_BALLOON(obj);
 | 
						|
 | 
						|
    qemu_mutex_init(&s->free_page_lock);
 | 
						|
    qemu_cond_init(&s->free_page_cond);
 | 
						|
    s->free_page_hint_cmd_id = VIRTIO_BALLOON_FREE_PAGE_HINT_CMD_ID_MIN;
 | 
						|
    s->free_page_hint_notify.notify = virtio_balloon_free_page_hint_notify;
 | 
						|
 | 
						|
    object_property_add(obj, "guest-stats", "guest statistics",
 | 
						|
                        balloon_stats_get_all, NULL, NULL, NULL);
 | 
						|
 | 
						|
    object_property_add(obj, "guest-stats-polling-interval", "int",
 | 
						|
                        balloon_stats_get_poll_interval,
 | 
						|
                        balloon_stats_set_poll_interval,
 | 
						|
                        NULL, NULL);
 | 
						|
}
 | 
						|
 | 
						|
static const VMStateDescription vmstate_virtio_balloon = {
 | 
						|
    .name = "virtio-balloon",
 | 
						|
    .minimum_version_id = 1,
 | 
						|
    .version_id = 1,
 | 
						|
    .fields = (VMStateField[]) {
 | 
						|
        VMSTATE_VIRTIO_DEVICE,
 | 
						|
        VMSTATE_END_OF_LIST()
 | 
						|
    },
 | 
						|
};
 | 
						|
 | 
						|
static Property virtio_balloon_properties[] = {
 | 
						|
    DEFINE_PROP_BIT("deflate-on-oom", VirtIOBalloon, host_features,
 | 
						|
                    VIRTIO_BALLOON_F_DEFLATE_ON_OOM, false),
 | 
						|
    DEFINE_PROP_BIT("free-page-hint", VirtIOBalloon, host_features,
 | 
						|
                    VIRTIO_BALLOON_F_FREE_PAGE_HINT, false),
 | 
						|
    DEFINE_PROP_BIT("page-poison", VirtIOBalloon, host_features,
 | 
						|
                    VIRTIO_BALLOON_F_PAGE_POISON, true),
 | 
						|
    DEFINE_PROP_BIT("free-page-reporting", VirtIOBalloon, host_features,
 | 
						|
                    VIRTIO_BALLOON_F_REPORTING, false),
 | 
						|
    /* QEMU 4.0 accidentally changed the config size even when free-page-hint
 | 
						|
     * is disabled, resulting in QEMU 3.1 migration incompatibility.  This
 | 
						|
     * property retains this quirk for QEMU 4.1 machine types.
 | 
						|
     */
 | 
						|
    DEFINE_PROP_BOOL("qemu-4-0-config-size", VirtIOBalloon,
 | 
						|
                     qemu_4_0_config_size, false),
 | 
						|
    DEFINE_PROP_LINK("iothread", VirtIOBalloon, iothread, TYPE_IOTHREAD,
 | 
						|
                     IOThread *),
 | 
						|
    DEFINE_PROP_END_OF_LIST(),
 | 
						|
};
 | 
						|
 | 
						|
static void virtio_balloon_class_init(ObjectClass *klass, void *data)
 | 
						|
{
 | 
						|
    DeviceClass *dc = DEVICE_CLASS(klass);
 | 
						|
    VirtioDeviceClass *vdc = VIRTIO_DEVICE_CLASS(klass);
 | 
						|
 | 
						|
    device_class_set_props(dc, virtio_balloon_properties);
 | 
						|
    dc->vmsd = &vmstate_virtio_balloon;
 | 
						|
    set_bit(DEVICE_CATEGORY_MISC, dc->categories);
 | 
						|
    vdc->realize = virtio_balloon_device_realize;
 | 
						|
    vdc->unrealize = virtio_balloon_device_unrealize;
 | 
						|
    vdc->reset = virtio_balloon_device_reset;
 | 
						|
    vdc->get_config = virtio_balloon_get_config;
 | 
						|
    vdc->set_config = virtio_balloon_set_config;
 | 
						|
    vdc->get_features = virtio_balloon_get_features;
 | 
						|
    vdc->set_status = virtio_balloon_set_status;
 | 
						|
    vdc->vmsd = &vmstate_virtio_balloon_device;
 | 
						|
}
 | 
						|
 | 
						|
static const TypeInfo virtio_balloon_info = {
 | 
						|
    .name = TYPE_VIRTIO_BALLOON,
 | 
						|
    .parent = TYPE_VIRTIO_DEVICE,
 | 
						|
    .instance_size = sizeof(VirtIOBalloon),
 | 
						|
    .instance_init = virtio_balloon_instance_init,
 | 
						|
    .class_init = virtio_balloon_class_init,
 | 
						|
};
 | 
						|
 | 
						|
static void virtio_register_types(void)
 | 
						|
{
 | 
						|
    type_register_static(&virtio_balloon_info);
 | 
						|
}
 | 
						|
 | 
						|
type_init(virtio_register_types)
 |