linux-aio: avoid deadlock in nested aio_poll() calls
[qemu/ar7.git] / block / linux-aio.c
blob9aca758b10f54f187b1147febd09fdfa1a5da656
1 /*
2 * Linux native AIO support.
4 * Copyright (C) 2009 IBM, Corp.
5 * Copyright (C) 2009 Red Hat, Inc.
7 * This work is licensed under the terms of the GNU GPL, version 2 or later.
8 * See the COPYING file in the top-level directory.
9 */
10 #include "qemu-common.h"
11 #include "block/aio.h"
12 #include "qemu/queue.h"
13 #include "block/raw-aio.h"
14 #include "qemu/event_notifier.h"
16 #include <libaio.h>
19 * Queue size (per-device).
21 * XXX: eventually we need to communicate this to the guest and/or make it
22 * tunable by the guest. If we get more outstanding requests at a time
23 * than this we will get EAGAIN from io_submit which is communicated to
24 * the guest as an I/O error.
26 #define MAX_EVENTS 128
28 #define MAX_QUEUED_IO 128
30 struct qemu_laiocb {
31 BlockDriverAIOCB common;
32 struct qemu_laio_state *ctx;
33 struct iocb iocb;
34 ssize_t ret;
35 size_t nbytes;
36 QEMUIOVector *qiov;
37 bool is_read;
38 QLIST_ENTRY(qemu_laiocb) node;
41 typedef struct {
42 struct iocb *iocbs[MAX_QUEUED_IO];
43 int plugged;
44 unsigned int size;
45 unsigned int idx;
46 } LaioQueue;
48 struct qemu_laio_state {
49 io_context_t ctx;
50 EventNotifier e;
52 /* io queue for submit at batch */
53 LaioQueue io_q;
55 /* I/O completion processing */
56 QEMUBH *completion_bh;
57 struct io_event events[MAX_EVENTS];
58 int event_idx;
59 int event_max;
62 static inline ssize_t io_event_ret(struct io_event *ev)
64 return (ssize_t)(((uint64_t)ev->res2 << 32) | ev->res);
68 * Completes an AIO request (calls the callback and frees the ACB).
70 static void qemu_laio_process_completion(struct qemu_laio_state *s,
71 struct qemu_laiocb *laiocb)
73 int ret;
75 ret = laiocb->ret;
76 if (ret != -ECANCELED) {
77 if (ret == laiocb->nbytes) {
78 ret = 0;
79 } else if (ret >= 0) {
80 /* Short reads mean EOF, pad with zeros. */
81 if (laiocb->is_read) {
82 qemu_iovec_memset(laiocb->qiov, ret, 0,
83 laiocb->qiov->size - ret);
84 } else {
85 ret = -EINVAL;
89 laiocb->common.cb(laiocb->common.opaque, ret);
92 qemu_aio_release(laiocb);
95 /* The completion BH fetches completed I/O requests and invokes their
96 * callbacks.
98 * The function is somewhat tricky because it supports nested event loops, for
99 * example when a request callback invokes aio_poll(). In order to do this,
100 * the completion events array and index are kept in qemu_laio_state. The BH
101 * reschedules itself as long as there are completions pending so it will
102 * either be called again in a nested event loop or will be called after all
103 * events have been completed. When there are no events left to complete, the
104 * BH returns without rescheduling.
106 static void qemu_laio_completion_bh(void *opaque)
108 struct qemu_laio_state *s = opaque;
110 /* Fetch more completion events when empty */
111 if (s->event_idx == s->event_max) {
112 do {
113 struct timespec ts = { 0 };
114 s->event_max = io_getevents(s->ctx, MAX_EVENTS, MAX_EVENTS,
115 s->events, &ts);
116 } while (s->event_max == -EINTR);
118 s->event_idx = 0;
119 if (s->event_max <= 0) {
120 s->event_max = 0;
121 return; /* no more events */
125 /* Reschedule so nested event loops see currently pending completions */
126 qemu_bh_schedule(s->completion_bh);
128 /* Process completion events */
129 while (s->event_idx < s->event_max) {
130 struct iocb *iocb = s->events[s->event_idx].obj;
131 struct qemu_laiocb *laiocb =
132 container_of(iocb, struct qemu_laiocb, iocb);
134 laiocb->ret = io_event_ret(&s->events[s->event_idx]);
135 s->event_idx++;
137 qemu_laio_process_completion(s, laiocb);
141 static void qemu_laio_completion_cb(EventNotifier *e)
143 struct qemu_laio_state *s = container_of(e, struct qemu_laio_state, e);
145 if (event_notifier_test_and_clear(&s->e)) {
146 qemu_bh_schedule(s->completion_bh);
150 static void laio_cancel(BlockDriverAIOCB *blockacb)
152 struct qemu_laiocb *laiocb = (struct qemu_laiocb *)blockacb;
153 struct io_event event;
154 int ret;
156 if (laiocb->ret != -EINPROGRESS)
157 return;
160 * Note that as of Linux 2.6.31 neither the block device code nor any
161 * filesystem implements cancellation of AIO request.
162 * Thus the polling loop below is the normal code path.
164 ret = io_cancel(laiocb->ctx->ctx, &laiocb->iocb, &event);
165 if (ret == 0) {
166 laiocb->ret = -ECANCELED;
167 return;
171 * We have to wait for the iocb to finish.
173 * The only way to get the iocb status update is by polling the io context.
174 * We might be able to do this slightly more optimal by removing the
175 * O_NONBLOCK flag.
177 while (laiocb->ret == -EINPROGRESS) {
178 qemu_laio_completion_cb(&laiocb->ctx->e);
182 static const AIOCBInfo laio_aiocb_info = {
183 .aiocb_size = sizeof(struct qemu_laiocb),
184 .cancel = laio_cancel,
187 static void ioq_init(LaioQueue *io_q)
189 io_q->size = MAX_QUEUED_IO;
190 io_q->idx = 0;
191 io_q->plugged = 0;
194 static int ioq_submit(struct qemu_laio_state *s)
196 int ret, i = 0;
197 int len = s->io_q.idx;
199 do {
200 ret = io_submit(s->ctx, len, s->io_q.iocbs);
201 } while (i++ < 3 && ret == -EAGAIN);
203 /* empty io queue */
204 s->io_q.idx = 0;
206 if (ret < 0) {
207 i = 0;
208 } else {
209 i = ret;
212 for (; i < len; i++) {
213 struct qemu_laiocb *laiocb =
214 container_of(s->io_q.iocbs[i], struct qemu_laiocb, iocb);
216 laiocb->ret = (ret < 0) ? ret : -EIO;
217 qemu_laio_process_completion(s, laiocb);
219 return ret;
222 static void ioq_enqueue(struct qemu_laio_state *s, struct iocb *iocb)
224 unsigned int idx = s->io_q.idx;
226 s->io_q.iocbs[idx++] = iocb;
227 s->io_q.idx = idx;
229 /* submit immediately if queue is full */
230 if (idx == s->io_q.size) {
231 ioq_submit(s);
235 void laio_io_plug(BlockDriverState *bs, void *aio_ctx)
237 struct qemu_laio_state *s = aio_ctx;
239 s->io_q.plugged++;
242 int laio_io_unplug(BlockDriverState *bs, void *aio_ctx, bool unplug)
244 struct qemu_laio_state *s = aio_ctx;
245 int ret = 0;
247 assert(s->io_q.plugged > 0 || !unplug);
249 if (unplug && --s->io_q.plugged > 0) {
250 return 0;
253 if (s->io_q.idx > 0) {
254 ret = ioq_submit(s);
257 return ret;
260 BlockDriverAIOCB *laio_submit(BlockDriverState *bs, void *aio_ctx, int fd,
261 int64_t sector_num, QEMUIOVector *qiov, int nb_sectors,
262 BlockDriverCompletionFunc *cb, void *opaque, int type)
264 struct qemu_laio_state *s = aio_ctx;
265 struct qemu_laiocb *laiocb;
266 struct iocb *iocbs;
267 off_t offset = sector_num * 512;
269 laiocb = qemu_aio_get(&laio_aiocb_info, bs, cb, opaque);
270 laiocb->nbytes = nb_sectors * 512;
271 laiocb->ctx = s;
272 laiocb->ret = -EINPROGRESS;
273 laiocb->is_read = (type == QEMU_AIO_READ);
274 laiocb->qiov = qiov;
276 iocbs = &laiocb->iocb;
278 switch (type) {
279 case QEMU_AIO_WRITE:
280 io_prep_pwritev(iocbs, fd, qiov->iov, qiov->niov, offset);
281 break;
282 case QEMU_AIO_READ:
283 io_prep_preadv(iocbs, fd, qiov->iov, qiov->niov, offset);
284 break;
285 /* Currently Linux kernel does not support other operations */
286 default:
287 fprintf(stderr, "%s: invalid AIO request type 0x%x.\n",
288 __func__, type);
289 goto out_free_aiocb;
291 io_set_eventfd(&laiocb->iocb, event_notifier_get_fd(&s->e));
293 if (!s->io_q.plugged) {
294 if (io_submit(s->ctx, 1, &iocbs) < 0) {
295 goto out_free_aiocb;
297 } else {
298 ioq_enqueue(s, iocbs);
300 return &laiocb->common;
302 out_free_aiocb:
303 qemu_aio_release(laiocb);
304 return NULL;
307 void laio_detach_aio_context(void *s_, AioContext *old_context)
309 struct qemu_laio_state *s = s_;
311 aio_set_event_notifier(old_context, &s->e, NULL);
312 qemu_bh_delete(s->completion_bh);
315 void laio_attach_aio_context(void *s_, AioContext *new_context)
317 struct qemu_laio_state *s = s_;
319 s->completion_bh = aio_bh_new(new_context, qemu_laio_completion_bh, s);
320 aio_set_event_notifier(new_context, &s->e, qemu_laio_completion_cb);
323 void *laio_init(void)
325 struct qemu_laio_state *s;
327 s = g_malloc0(sizeof(*s));
328 if (event_notifier_init(&s->e, false) < 0) {
329 goto out_free_state;
332 if (io_setup(MAX_EVENTS, &s->ctx) != 0) {
333 goto out_close_efd;
336 ioq_init(&s->io_q);
338 return s;
340 out_close_efd:
341 event_notifier_cleanup(&s->e);
342 out_free_state:
343 g_free(s);
344 return NULL;
347 void laio_cleanup(void *s_)
349 struct qemu_laio_state *s = s_;
351 event_notifier_cleanup(&s->e);
353 if (io_destroy(s->ctx) != 0) {
354 fprintf(stderr, "%s: destroy AIO context %p failed\n",
355 __func__, &s->ctx);
357 g_free(s);