xref: /qemu/hw/i386/pc.c (revision c9ea365dce32bc114dacd7cfca7c478a82459b47)
1 /*
2  * QEMU PC System Emulator
3  *
4  * Copyright (c) 2003-2004 Fabrice Bellard
5  *
6  * Permission is hereby granted, free of charge, to any person obtaining a copy
7  * of this software and associated documentation files (the "Software"), to deal
8  * in the Software without restriction, including without limitation the rights
9  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10  * copies of the Software, and to permit persons to whom the Software is
11  * furnished to do so, subject to the following conditions:
12  *
13  * The above copyright notice and this permission notice shall be included in
14  * all copies or substantial portions of the Software.
15  *
16  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22  * THE SOFTWARE.
23  */
24 
25 #include "qemu/osdep.h"
26 #include "qemu/units.h"
27 #include "hw/i386/pc.h"
28 #include "hw/char/serial-isa.h"
29 #include "hw/char/parallel.h"
30 #include "hw/hyperv/hv-balloon.h"
31 #include "hw/i386/fw_cfg.h"
32 #include "hw/i386/vmport.h"
33 #include "sysemu/cpus.h"
34 #include "hw/ide/ide-bus.h"
35 #include "hw/timer/hpet.h"
36 #include "hw/loader.h"
37 #include "hw/rtc/mc146818rtc.h"
38 #include "hw/intc/i8259.h"
39 #include "hw/timer/i8254.h"
40 #include "hw/input/i8042.h"
41 #include "hw/audio/pcspk.h"
42 #include "sysemu/sysemu.h"
43 #include "sysemu/xen.h"
44 #include "sysemu/reset.h"
45 #include "kvm/kvm_i386.h"
46 #include "hw/xen/xen.h"
47 #include "qapi/qmp/qlist.h"
48 #include "qemu/error-report.h"
49 #include "hw/acpi/cpu_hotplug.h"
50 #include "acpi-build.h"
51 #include "hw/mem/nvdimm.h"
52 #include "hw/cxl/cxl_host.h"
53 #include "hw/usb.h"
54 #include "hw/i386/intel_iommu.h"
55 #include "hw/net/ne2000-isa.h"
56 #include "hw/virtio/virtio-iommu.h"
57 #include "hw/virtio/virtio-md-pci.h"
58 #include "hw/i386/kvm/xen_overlay.h"
59 #include "hw/i386/kvm/xen_evtchn.h"
60 #include "hw/i386/kvm/xen_gnttab.h"
61 #include "hw/i386/kvm/xen_xenstore.h"
62 #include "hw/mem/memory-device.h"
63 #include "e820_memory_layout.h"
64 #include "trace.h"
65 #include "sev.h"
66 #include CONFIG_DEVICES
67 
68 #ifdef CONFIG_XEN_EMU
69 #include "hw/xen/xen-legacy-backend.h"
70 #include "hw/xen/xen-bus.h"
71 #endif
72 
73 /*
74  * Helper for setting model-id for CPU models that changed model-id
75  * depending on QEMU versions up to QEMU 2.4.
76  */
77 #define PC_CPU_MODEL_IDS(v) \
78     { "qemu32-" TYPE_X86_CPU, "model-id", "QEMU Virtual CPU version " v, },\
79     { "qemu64-" TYPE_X86_CPU, "model-id", "QEMU Virtual CPU version " v, },\
80     { "athlon-" TYPE_X86_CPU, "model-id", "QEMU Virtual CPU version " v, },
81 
82 GlobalProperty pc_compat_9_2[] = {};
83 const size_t pc_compat_9_2_len = G_N_ELEMENTS(pc_compat_9_2);
84 
85 GlobalProperty pc_compat_9_1[] = {
86     { "ICH9-LPC", "x-smi-swsmi-timer", "off" },
87     { "ICH9-LPC", "x-smi-periodic-timer", "off" },
88     { TYPE_INTEL_IOMMU_DEVICE, "stale-tm", "on" },
89 };
90 const size_t pc_compat_9_1_len = G_N_ELEMENTS(pc_compat_9_1);
91 
92 GlobalProperty pc_compat_9_0[] = {
93     { TYPE_X86_CPU, "x-amd-topoext-features-only", "false" },
94     { TYPE_X86_CPU, "x-l1-cache-per-thread", "false" },
95     { TYPE_X86_CPU, "guest-phys-bits", "0" },
96     { "sev-guest", "legacy-vm-type", "on" },
97     { TYPE_X86_CPU, "legacy-multi-node", "on" },
98 };
99 const size_t pc_compat_9_0_len = G_N_ELEMENTS(pc_compat_9_0);
100 
101 GlobalProperty pc_compat_8_2[] = {};
102 const size_t pc_compat_8_2_len = G_N_ELEMENTS(pc_compat_8_2);
103 
104 GlobalProperty pc_compat_8_1[] = {};
105 const size_t pc_compat_8_1_len = G_N_ELEMENTS(pc_compat_8_1);
106 
107 GlobalProperty pc_compat_8_0[] = {
108     { "virtio-mem", "unplugged-inaccessible", "auto" },
109 };
110 const size_t pc_compat_8_0_len = G_N_ELEMENTS(pc_compat_8_0);
111 
112 GlobalProperty pc_compat_7_2[] = {
113     { "ICH9-LPC", "noreboot", "true" },
114 };
115 const size_t pc_compat_7_2_len = G_N_ELEMENTS(pc_compat_7_2);
116 
117 GlobalProperty pc_compat_7_1[] = {};
118 const size_t pc_compat_7_1_len = G_N_ELEMENTS(pc_compat_7_1);
119 
120 GlobalProperty pc_compat_7_0[] = {};
121 const size_t pc_compat_7_0_len = G_N_ELEMENTS(pc_compat_7_0);
122 
123 GlobalProperty pc_compat_6_2[] = {
124     { "virtio-mem", "unplugged-inaccessible", "off" },
125 };
126 const size_t pc_compat_6_2_len = G_N_ELEMENTS(pc_compat_6_2);
127 
128 GlobalProperty pc_compat_6_1[] = {
129     { TYPE_X86_CPU, "hv-version-id-build", "0x1bbc" },
130     { TYPE_X86_CPU, "hv-version-id-major", "0x0006" },
131     { TYPE_X86_CPU, "hv-version-id-minor", "0x0001" },
132     { "ICH9-LPC", "x-keep-pci-slot-hpc", "false" },
133 };
134 const size_t pc_compat_6_1_len = G_N_ELEMENTS(pc_compat_6_1);
135 
136 GlobalProperty pc_compat_6_0[] = {
137     { "qemu64" "-" TYPE_X86_CPU, "family", "6" },
138     { "qemu64" "-" TYPE_X86_CPU, "model", "6" },
139     { "qemu64" "-" TYPE_X86_CPU, "stepping", "3" },
140     { TYPE_X86_CPU, "x-vendor-cpuid-only", "off" },
141     { "ICH9-LPC", ACPI_PM_PROP_ACPI_PCIHP_BRIDGE, "off" },
142     { "ICH9-LPC", "x-keep-pci-slot-hpc", "true" },
143 };
144 const size_t pc_compat_6_0_len = G_N_ELEMENTS(pc_compat_6_0);
145 
146 GlobalProperty pc_compat_5_2[] = {
147     { "ICH9-LPC", "x-smi-cpu-hotunplug", "off" },
148 };
149 const size_t pc_compat_5_2_len = G_N_ELEMENTS(pc_compat_5_2);
150 
151 GlobalProperty pc_compat_5_1[] = {
152     { "ICH9-LPC", "x-smi-cpu-hotplug", "off" },
153     { TYPE_X86_CPU, "kvm-msi-ext-dest-id", "off" },
154 };
155 const size_t pc_compat_5_1_len = G_N_ELEMENTS(pc_compat_5_1);
156 
157 GlobalProperty pc_compat_5_0[] = {
158 };
159 const size_t pc_compat_5_0_len = G_N_ELEMENTS(pc_compat_5_0);
160 
161 GlobalProperty pc_compat_4_2[] = {
162     { "mch", "smbase-smram", "off" },
163 };
164 const size_t pc_compat_4_2_len = G_N_ELEMENTS(pc_compat_4_2);
165 
166 GlobalProperty pc_compat_4_1[] = {};
167 const size_t pc_compat_4_1_len = G_N_ELEMENTS(pc_compat_4_1);
168 
169 GlobalProperty pc_compat_4_0[] = {};
170 const size_t pc_compat_4_0_len = G_N_ELEMENTS(pc_compat_4_0);
171 
172 GlobalProperty pc_compat_3_1[] = {
173     { "intel-iommu", "dma-drain", "off" },
174     { "Opteron_G3" "-" TYPE_X86_CPU, "rdtscp", "off" },
175     { "Opteron_G4" "-" TYPE_X86_CPU, "rdtscp", "off" },
176     { "Opteron_G4" "-" TYPE_X86_CPU, "npt", "off" },
177     { "Opteron_G4" "-" TYPE_X86_CPU, "nrip-save", "off" },
178     { "Opteron_G5" "-" TYPE_X86_CPU, "rdtscp", "off" },
179     { "Opteron_G5" "-" TYPE_X86_CPU, "npt", "off" },
180     { "Opteron_G5" "-" TYPE_X86_CPU, "nrip-save", "off" },
181     { "EPYC" "-" TYPE_X86_CPU, "npt", "off" },
182     { "EPYC" "-" TYPE_X86_CPU, "nrip-save", "off" },
183     { "EPYC-IBPB" "-" TYPE_X86_CPU, "npt", "off" },
184     { "EPYC-IBPB" "-" TYPE_X86_CPU, "nrip-save", "off" },
185     { "Skylake-Client" "-" TYPE_X86_CPU,      "mpx", "on" },
186     { "Skylake-Client-IBRS" "-" TYPE_X86_CPU, "mpx", "on" },
187     { "Skylake-Server" "-" TYPE_X86_CPU,      "mpx", "on" },
188     { "Skylake-Server-IBRS" "-" TYPE_X86_CPU, "mpx", "on" },
189     { "Cascadelake-Server" "-" TYPE_X86_CPU,  "mpx", "on" },
190     { "Icelake-Client" "-" TYPE_X86_CPU,      "mpx", "on" },
191     { "Icelake-Server" "-" TYPE_X86_CPU,      "mpx", "on" },
192     { "Cascadelake-Server" "-" TYPE_X86_CPU, "stepping", "5" },
193     { TYPE_X86_CPU, "x-intel-pt-auto-level", "off" },
194 };
195 const size_t pc_compat_3_1_len = G_N_ELEMENTS(pc_compat_3_1);
196 
197 GlobalProperty pc_compat_3_0[] = {
198     { TYPE_X86_CPU, "x-hv-synic-kvm-only", "on" },
199     { "Skylake-Server" "-" TYPE_X86_CPU, "pku", "off" },
200     { "Skylake-Server-IBRS" "-" TYPE_X86_CPU, "pku", "off" },
201 };
202 const size_t pc_compat_3_0_len = G_N_ELEMENTS(pc_compat_3_0);
203 
204 GlobalProperty pc_compat_2_12[] = {
205     { TYPE_X86_CPU, "legacy-cache", "on" },
206     { TYPE_X86_CPU, "topoext", "off" },
207     { "EPYC-" TYPE_X86_CPU, "xlevel", "0x8000000a" },
208     { "EPYC-IBPB-" TYPE_X86_CPU, "xlevel", "0x8000000a" },
209 };
210 const size_t pc_compat_2_12_len = G_N_ELEMENTS(pc_compat_2_12);
211 
212 GlobalProperty pc_compat_2_11[] = {
213     { TYPE_X86_CPU, "x-migrate-smi-count", "off" },
214     { "Skylake-Server" "-" TYPE_X86_CPU, "clflushopt", "off" },
215 };
216 const size_t pc_compat_2_11_len = G_N_ELEMENTS(pc_compat_2_11);
217 
218 GlobalProperty pc_compat_2_10[] = {
219     { TYPE_X86_CPU, "x-hv-max-vps", "0x40" },
220     { "i440FX-pcihost", "x-pci-hole64-fix", "off" },
221     { "q35-pcihost", "x-pci-hole64-fix", "off" },
222 };
223 const size_t pc_compat_2_10_len = G_N_ELEMENTS(pc_compat_2_10);
224 
225 GlobalProperty pc_compat_2_9[] = {
226     { "mch", "extended-tseg-mbytes", "0" },
227 };
228 const size_t pc_compat_2_9_len = G_N_ELEMENTS(pc_compat_2_9);
229 
230 GlobalProperty pc_compat_2_8[] = {
231     { TYPE_X86_CPU, "tcg-cpuid", "off" },
232     { "kvmclock", "x-mach-use-reliable-get-clock", "off" },
233     { "ICH9-LPC", "x-smi-broadcast", "off" },
234     { TYPE_X86_CPU, "vmware-cpuid-freq", "off" },
235     { "Haswell-" TYPE_X86_CPU, "stepping", "1" },
236 };
237 const size_t pc_compat_2_8_len = G_N_ELEMENTS(pc_compat_2_8);
238 
239 GlobalProperty pc_compat_2_7[] = {
240     { TYPE_X86_CPU, "l3-cache", "off" },
241     { TYPE_X86_CPU, "full-cpuid-auto-level", "off" },
242     { "Opteron_G3" "-" TYPE_X86_CPU, "family", "15" },
243     { "Opteron_G3" "-" TYPE_X86_CPU, "model", "6" },
244     { "Opteron_G3" "-" TYPE_X86_CPU, "stepping", "1" },
245     { "isa-pcspk", "migrate", "off" },
246 };
247 const size_t pc_compat_2_7_len = G_N_ELEMENTS(pc_compat_2_7);
248 
249 GlobalProperty pc_compat_2_6[] = {
250     { TYPE_X86_CPU, "cpuid-0xb", "off" },
251     { "vmxnet3", "romfile", "" },
252     { TYPE_X86_CPU, "fill-mtrr-mask", "off" },
253     { "apic-common", "legacy-instance-id", "on", }
254 };
255 const size_t pc_compat_2_6_len = G_N_ELEMENTS(pc_compat_2_6);
256 
257 GlobalProperty pc_compat_2_5[] = {};
258 const size_t pc_compat_2_5_len = G_N_ELEMENTS(pc_compat_2_5);
259 
260 GlobalProperty pc_compat_2_4[] = {
261     PC_CPU_MODEL_IDS("2.4.0")
262     { "Haswell-" TYPE_X86_CPU, "abm", "off" },
263     { "Haswell-noTSX-" TYPE_X86_CPU, "abm", "off" },
264     { "Broadwell-" TYPE_X86_CPU, "abm", "off" },
265     { "Broadwell-noTSX-" TYPE_X86_CPU, "abm", "off" },
266     { "host" "-" TYPE_X86_CPU, "host-cache-info", "on" },
267     { TYPE_X86_CPU, "check", "off" },
268     { "qemu64" "-" TYPE_X86_CPU, "sse4a", "on" },
269     { "qemu64" "-" TYPE_X86_CPU, "abm", "on" },
270     { "qemu64" "-" TYPE_X86_CPU, "popcnt", "on" },
271     { "qemu32" "-" TYPE_X86_CPU, "popcnt", "on" },
272     { "Opteron_G2" "-" TYPE_X86_CPU, "rdtscp", "on" },
273     { "Opteron_G3" "-" TYPE_X86_CPU, "rdtscp", "on" },
274     { "Opteron_G4" "-" TYPE_X86_CPU, "rdtscp", "on" },
275     { "Opteron_G5" "-" TYPE_X86_CPU, "rdtscp", "on", }
276 };
277 const size_t pc_compat_2_4_len = G_N_ELEMENTS(pc_compat_2_4);
278 
279 /*
280  * @PC_FW_DATA:
281  * Size of the chunk of memory at the top of RAM for the BIOS ACPI tables
282  * and other BIOS datastructures.
283  *
284  * BIOS ACPI tables: 128K. Other BIOS datastructures: less than 4K
285  * reported to be used at the moment, 32K should be enough for a while.
286  */
287 #define PC_FW_DATA (0x20000 + 0x8000)
288 
289 GSIState *pc_gsi_create(qemu_irq **irqs, bool pci_enabled)
290 {
291     GSIState *s;
292 
293     s = g_new0(GSIState, 1);
294     if (kvm_ioapic_in_kernel()) {
295         kvm_pc_setup_irq_routing(pci_enabled);
296     }
297     *irqs = qemu_allocate_irqs(gsi_handler, s, IOAPIC_NUM_PINS);
298 
299     return s;
300 }
301 
302 static void ioport80_write(void *opaque, hwaddr addr, uint64_t data,
303                            unsigned size)
304 {
305 }
306 
307 static uint64_t ioport80_read(void *opaque, hwaddr addr, unsigned size)
308 {
309     return 0xffffffffffffffffULL;
310 }
311 
312 /* MS-DOS compatibility mode FPU exception support */
313 static void ioportF0_write(void *opaque, hwaddr addr, uint64_t data,
314                            unsigned size)
315 {
316     if (tcg_enabled()) {
317         cpu_set_ignne();
318     }
319 }
320 
321 static uint64_t ioportF0_read(void *opaque, hwaddr addr, unsigned size)
322 {
323     return 0xffffffffffffffffULL;
324 }
325 
326 /* PC cmos mappings */
327 
328 #define REG_EQUIPMENT_BYTE          0x14
329 
330 static void cmos_init_hd(MC146818RtcState *s, int type_ofs, int info_ofs,
331                          int16_t cylinders, int8_t heads, int8_t sectors)
332 {
333     mc146818rtc_set_cmos_data(s, type_ofs, 47);
334     mc146818rtc_set_cmos_data(s, info_ofs, cylinders);
335     mc146818rtc_set_cmos_data(s, info_ofs + 1, cylinders >> 8);
336     mc146818rtc_set_cmos_data(s, info_ofs + 2, heads);
337     mc146818rtc_set_cmos_data(s, info_ofs + 3, 0xff);
338     mc146818rtc_set_cmos_data(s, info_ofs + 4, 0xff);
339     mc146818rtc_set_cmos_data(s, info_ofs + 5, 0xc0 | ((heads > 8) << 3));
340     mc146818rtc_set_cmos_data(s, info_ofs + 6, cylinders);
341     mc146818rtc_set_cmos_data(s, info_ofs + 7, cylinders >> 8);
342     mc146818rtc_set_cmos_data(s, info_ofs + 8, sectors);
343 }
344 
345 /* convert boot_device letter to something recognizable by the bios */
346 static int boot_device2nibble(char boot_device)
347 {
348     switch(boot_device) {
349     case 'a':
350     case 'b':
351         return 0x01; /* floppy boot */
352     case 'c':
353         return 0x02; /* hard drive boot */
354     case 'd':
355         return 0x03; /* CD-ROM boot */
356     case 'n':
357         return 0x04; /* Network boot */
358     }
359     return 0;
360 }
361 
362 static void set_boot_dev(PCMachineState *pcms, MC146818RtcState *s,
363                          const char *boot_device, Error **errp)
364 {
365 #define PC_MAX_BOOT_DEVICES 3
366     int nbds, bds[3] = { 0, };
367     int i;
368 
369     nbds = strlen(boot_device);
370     if (nbds > PC_MAX_BOOT_DEVICES) {
371         error_setg(errp, "Too many boot devices for PC");
372         return;
373     }
374     for (i = 0; i < nbds; i++) {
375         bds[i] = boot_device2nibble(boot_device[i]);
376         if (bds[i] == 0) {
377             error_setg(errp, "Invalid boot device for PC: '%c'",
378                        boot_device[i]);
379             return;
380         }
381     }
382     mc146818rtc_set_cmos_data(s, 0x3d, (bds[1] << 4) | bds[0]);
383     mc146818rtc_set_cmos_data(s, 0x38, (bds[2] << 4) | !pcms->fd_bootchk);
384 }
385 
386 static void pc_boot_set(void *opaque, const char *boot_device, Error **errp)
387 {
388     PCMachineState *pcms = opaque;
389     X86MachineState *x86ms = X86_MACHINE(pcms);
390 
391     set_boot_dev(pcms, MC146818_RTC(x86ms->rtc), boot_device, errp);
392 }
393 
394 static void pc_cmos_init_floppy(MC146818RtcState *rtc_state, ISADevice *floppy)
395 {
396     int val, nb;
397     FloppyDriveType fd_type[2] = { FLOPPY_DRIVE_TYPE_NONE,
398                                    FLOPPY_DRIVE_TYPE_NONE };
399 
400 #ifdef CONFIG_FDC_ISA
401     /* floppy type */
402     if (floppy) {
403         for (int i = 0; i < 2; i++) {
404             fd_type[i] = isa_fdc_get_drive_type(floppy, i);
405         }
406     }
407 #endif
408 
409     val = (cmos_get_fd_drive_type(fd_type[0]) << 4) |
410         cmos_get_fd_drive_type(fd_type[1]);
411     mc146818rtc_set_cmos_data(rtc_state, 0x10, val);
412 
413     val = mc146818rtc_get_cmos_data(rtc_state, REG_EQUIPMENT_BYTE);
414     nb = 0;
415     if (fd_type[0] != FLOPPY_DRIVE_TYPE_NONE) {
416         nb++;
417     }
418     if (fd_type[1] != FLOPPY_DRIVE_TYPE_NONE) {
419         nb++;
420     }
421     switch (nb) {
422     case 0:
423         break;
424     case 1:
425         val |= 0x01; /* 1 drive, ready for boot */
426         break;
427     case 2:
428         val |= 0x41; /* 2 drives, ready for boot */
429         break;
430     }
431     mc146818rtc_set_cmos_data(rtc_state, REG_EQUIPMENT_BYTE, val);
432 }
433 
434 typedef struct check_fdc_state {
435     ISADevice *floppy;
436     bool multiple;
437 } CheckFdcState;
438 
439 static int check_fdc(Object *obj, void *opaque)
440 {
441     CheckFdcState *state = opaque;
442     Object *fdc;
443     uint32_t iobase;
444     Error *local_err = NULL;
445 
446     fdc = object_dynamic_cast(obj, TYPE_ISA_FDC);
447     if (!fdc) {
448         return 0;
449     }
450 
451     iobase = object_property_get_uint(obj, "iobase", &local_err);
452     if (local_err || iobase != 0x3f0) {
453         error_free(local_err);
454         return 0;
455     }
456 
457     if (state->floppy) {
458         state->multiple = true;
459     } else {
460         state->floppy = ISA_DEVICE(obj);
461     }
462     return 0;
463 }
464 
465 static const char * const fdc_container_path[] = {
466     "/unattached", "/peripheral", "/peripheral-anon"
467 };
468 
469 /*
470  * Locate the FDC at IO address 0x3f0, in order to configure the CMOS registers
471  * and ACPI objects.
472  */
473 static ISADevice *pc_find_fdc0(void)
474 {
475     int i;
476     Object *container;
477     CheckFdcState state = { 0 };
478 
479     for (i = 0; i < ARRAY_SIZE(fdc_container_path); i++) {
480         container = container_get(qdev_get_machine(), fdc_container_path[i]);
481         object_child_foreach(container, check_fdc, &state);
482     }
483 
484     if (state.multiple) {
485         warn_report("multiple floppy disk controllers with "
486                     "iobase=0x3f0 have been found");
487         error_printf("the one being picked for CMOS setup might not reflect "
488                      "your intent");
489     }
490 
491     return state.floppy;
492 }
493 
494 static void pc_cmos_init_late(PCMachineState *pcms)
495 {
496     X86MachineState *x86ms = X86_MACHINE(pcms);
497     MC146818RtcState *s = MC146818_RTC(x86ms->rtc);
498     int16_t cylinders;
499     int8_t heads, sectors;
500     int val;
501     int i, trans;
502 
503     val = 0;
504     if (pcms->idebus[0] &&
505         ide_get_geometry(pcms->idebus[0], 0,
506                          &cylinders, &heads, &sectors) >= 0) {
507         cmos_init_hd(s, 0x19, 0x1b, cylinders, heads, sectors);
508         val |= 0xf0;
509     }
510     if (pcms->idebus[0] &&
511         ide_get_geometry(pcms->idebus[0], 1,
512                          &cylinders, &heads, &sectors) >= 0) {
513         cmos_init_hd(s, 0x1a, 0x24, cylinders, heads, sectors);
514         val |= 0x0f;
515     }
516     mc146818rtc_set_cmos_data(s, 0x12, val);
517 
518     val = 0;
519     for (i = 0; i < 4; i++) {
520         /* NOTE: ide_get_geometry() returns the physical
521            geometry.  It is always such that: 1 <= sects <= 63, 1
522            <= heads <= 16, 1 <= cylinders <= 16383. The BIOS
523            geometry can be different if a translation is done. */
524         BusState *idebus = pcms->idebus[i / 2];
525         if (idebus &&
526             ide_get_geometry(idebus, i % 2,
527                              &cylinders, &heads, &sectors) >= 0) {
528             trans = ide_get_bios_chs_trans(idebus, i % 2) - 1;
529             assert((trans & ~3) == 0);
530             val |= trans << (i * 2);
531         }
532     }
533     mc146818rtc_set_cmos_data(s, 0x39, val);
534 
535     pc_cmos_init_floppy(s, pc_find_fdc0());
536 
537     /* various important CMOS locations needed by PC/Bochs bios */
538 
539     /* memory size */
540     /* base memory (first MiB) */
541     val = MIN(x86ms->below_4g_mem_size / KiB, 640);
542     mc146818rtc_set_cmos_data(s, 0x15, val);
543     mc146818rtc_set_cmos_data(s, 0x16, val >> 8);
544     /* extended memory (next 64MiB) */
545     if (x86ms->below_4g_mem_size > 1 * MiB) {
546         val = (x86ms->below_4g_mem_size - 1 * MiB) / KiB;
547     } else {
548         val = 0;
549     }
550     if (val > 65535)
551         val = 65535;
552     mc146818rtc_set_cmos_data(s, 0x17, val);
553     mc146818rtc_set_cmos_data(s, 0x18, val >> 8);
554     mc146818rtc_set_cmos_data(s, 0x30, val);
555     mc146818rtc_set_cmos_data(s, 0x31, val >> 8);
556     /* memory between 16MiB and 4GiB */
557     if (x86ms->below_4g_mem_size > 16 * MiB) {
558         val = (x86ms->below_4g_mem_size - 16 * MiB) / (64 * KiB);
559     } else {
560         val = 0;
561     }
562     if (val > 65535)
563         val = 65535;
564     mc146818rtc_set_cmos_data(s, 0x34, val);
565     mc146818rtc_set_cmos_data(s, 0x35, val >> 8);
566     /* memory above 4GiB */
567     val = x86ms->above_4g_mem_size / 65536;
568     mc146818rtc_set_cmos_data(s, 0x5b, val);
569     mc146818rtc_set_cmos_data(s, 0x5c, val >> 8);
570     mc146818rtc_set_cmos_data(s, 0x5d, val >> 16);
571 
572     val = 0;
573     val |= 0x02; /* FPU is there */
574     val |= 0x04; /* PS/2 mouse installed */
575     mc146818rtc_set_cmos_data(s, REG_EQUIPMENT_BYTE, val);
576 }
577 
578 static void handle_a20_line_change(void *opaque, int irq, int level)
579 {
580     X86CPU *cpu = opaque;
581 
582     /* XXX: send to all CPUs ? */
583     /* XXX: add logic to handle multiple A20 line sources */
584     x86_cpu_set_a20(cpu, level);
585 }
586 
587 #define NE2000_NB_MAX 6
588 
589 static const int ne2000_io[NE2000_NB_MAX] = { 0x300, 0x320, 0x340, 0x360,
590                                               0x280, 0x380 };
591 static const int ne2000_irq[NE2000_NB_MAX] = { 9, 10, 11, 3, 4, 5 };
592 
593 static gboolean pc_init_ne2k_isa(ISABus *bus, NICInfo *nd, Error **errp)
594 {
595     static int nb_ne2k = 0;
596 
597     if (nb_ne2k == NE2000_NB_MAX) {
598         error_setg(errp,
599                    "maximum number of ISA NE2000 devices exceeded");
600         return false;
601     }
602     isa_ne2000_init(bus, ne2000_io[nb_ne2k],
603                     ne2000_irq[nb_ne2k], nd);
604     nb_ne2k++;
605     return true;
606 }
607 
608 void pc_acpi_smi_interrupt(void *opaque, int irq, int level)
609 {
610     X86CPU *cpu = opaque;
611 
612     if (level) {
613         cpu_interrupt(CPU(cpu), CPU_INTERRUPT_SMI);
614     }
615 }
616 
617 static
618 void pc_machine_done(Notifier *notifier, void *data)
619 {
620     PCMachineState *pcms = container_of(notifier,
621                                         PCMachineState, machine_done);
622     X86MachineState *x86ms = X86_MACHINE(pcms);
623 
624     cxl_hook_up_pxb_registers(pcms->pcibus, &pcms->cxl_devices_state,
625                               &error_fatal);
626 
627     if (pcms->cxl_devices_state.is_enabled) {
628         cxl_fmws_link_targets(&pcms->cxl_devices_state, &error_fatal);
629     }
630 
631     /* set the number of CPUs */
632     x86_rtc_set_cpus_count(x86ms->rtc, x86ms->boot_cpus);
633 
634     fw_cfg_add_extra_pci_roots(pcms->pcibus, x86ms->fw_cfg);
635 
636     acpi_setup();
637     if (x86ms->fw_cfg) {
638         fw_cfg_build_smbios(pcms, x86ms->fw_cfg, pcms->smbios_entry_point_type);
639         fw_cfg_add_e820(x86ms->fw_cfg);
640         fw_cfg_build_feature_control(MACHINE(pcms), x86ms->fw_cfg);
641         /* update FW_CFG_NB_CPUS to account for -device added CPUs */
642         fw_cfg_modify_i16(x86ms->fw_cfg, FW_CFG_NB_CPUS, x86ms->boot_cpus);
643     }
644 
645     pc_cmos_init_late(pcms);
646 }
647 
648 /* setup pci memory address space mapping into system address space */
649 void pc_pci_as_mapping_init(MemoryRegion *system_memory,
650                             MemoryRegion *pci_address_space)
651 {
652     /* Set to lower priority than RAM */
653     memory_region_add_subregion_overlap(system_memory, 0x0,
654                                         pci_address_space, -1);
655 }
656 
657 void xen_load_linux(PCMachineState *pcms)
658 {
659     int i;
660     FWCfgState *fw_cfg;
661     PCMachineClass *pcmc = PC_MACHINE_GET_CLASS(pcms);
662     X86MachineState *x86ms = X86_MACHINE(pcms);
663 
664     assert(MACHINE(pcms)->kernel_filename != NULL);
665 
666     fw_cfg = fw_cfg_init_io_dma(FW_CFG_IO_BASE, FW_CFG_IO_BASE + 4,
667                                 &address_space_memory);
668     fw_cfg_add_i16(fw_cfg, FW_CFG_NB_CPUS, x86ms->boot_cpus);
669     rom_set_fw(fw_cfg);
670 
671     x86_load_linux(x86ms, fw_cfg, PC_FW_DATA, pcmc->pvh_enabled);
672     for (i = 0; i < nb_option_roms; i++) {
673         assert(!strcmp(option_rom[i].name, "linuxboot.bin") ||
674                !strcmp(option_rom[i].name, "linuxboot_dma.bin") ||
675                !strcmp(option_rom[i].name, "pvh.bin") ||
676                !strcmp(option_rom[i].name, "multiboot.bin") ||
677                !strcmp(option_rom[i].name, "multiboot_dma.bin"));
678         rom_add_option(option_rom[i].name, option_rom[i].bootindex);
679     }
680     x86ms->fw_cfg = fw_cfg;
681 }
682 
683 #define PC_ROM_MIN_VGA     0xc0000
684 #define PC_ROM_MIN_OPTION  0xc8000
685 #define PC_ROM_MAX         0xe0000
686 #define PC_ROM_ALIGN       0x800
687 #define PC_ROM_SIZE        (PC_ROM_MAX - PC_ROM_MIN_VGA)
688 
689 static hwaddr pc_above_4g_end(PCMachineState *pcms)
690 {
691     X86MachineState *x86ms = X86_MACHINE(pcms);
692 
693     if (pcms->sgx_epc.size != 0) {
694         return sgx_epc_above_4g_end(&pcms->sgx_epc);
695     }
696 
697     return x86ms->above_4g_mem_start + x86ms->above_4g_mem_size;
698 }
699 
700 static void pc_get_device_memory_range(PCMachineState *pcms,
701                                        hwaddr *base,
702                                        ram_addr_t *device_mem_size)
703 {
704     MachineState *machine = MACHINE(pcms);
705     ram_addr_t size;
706     hwaddr addr;
707 
708     size = machine->maxram_size - machine->ram_size;
709     addr = ROUND_UP(pc_above_4g_end(pcms), 1 * GiB);
710 
711     /* size device region assuming 1G page max alignment per slot */
712     size += (1 * GiB) * machine->ram_slots;
713 
714     *base = addr;
715     *device_mem_size = size;
716 }
717 
718 static uint64_t pc_get_cxl_range_start(PCMachineState *pcms)
719 {
720     PCMachineClass *pcmc = PC_MACHINE_GET_CLASS(pcms);
721     MachineState *ms = MACHINE(pcms);
722     hwaddr cxl_base;
723     ram_addr_t size;
724 
725     if (pcmc->has_reserved_memory &&
726         (ms->ram_size < ms->maxram_size)) {
727         pc_get_device_memory_range(pcms, &cxl_base, &size);
728         cxl_base += size;
729     } else {
730         cxl_base = pc_above_4g_end(pcms);
731     }
732 
733     return cxl_base;
734 }
735 
736 static uint64_t pc_get_cxl_range_end(PCMachineState *pcms)
737 {
738     uint64_t start = pc_get_cxl_range_start(pcms) + MiB;
739 
740     if (pcms->cxl_devices_state.fixed_windows) {
741         GList *it;
742 
743         start = ROUND_UP(start, 256 * MiB);
744         for (it = pcms->cxl_devices_state.fixed_windows; it; it = it->next) {
745             CXLFixedWindow *fw = it->data;
746             start += fw->size;
747         }
748     }
749 
750     return start;
751 }
752 
753 static hwaddr pc_max_used_gpa(PCMachineState *pcms, uint64_t pci_hole64_size)
754 {
755     X86CPU *cpu = X86_CPU(first_cpu);
756     PCMachineClass *pcmc = PC_MACHINE_GET_CLASS(pcms);
757     MachineState *ms = MACHINE(pcms);
758 
759     if (cpu->env.features[FEAT_8000_0001_EDX] & CPUID_EXT2_LM) {
760         /* 64-bit systems */
761         return pc_pci_hole64_start() + pci_hole64_size - 1;
762     }
763 
764     /* 32-bit systems */
765     if (pcmc->broken_32bit_mem_addr_check) {
766         /* old value for compatibility reasons */
767         return ((hwaddr)1 << cpu->phys_bits) - 1;
768     }
769 
770     /*
771      * 32-bit systems don't have hole64 but they might have a region for
772      * memory devices. Even if additional hotplugged memory devices might
773      * not be usable by most guest OSes, we need to still consider them for
774      * calculating the highest possible GPA so that we can properly report
775      * if someone configures them on a CPU that cannot possibly address them.
776      */
777     if (pcmc->has_reserved_memory &&
778         (ms->ram_size < ms->maxram_size)) {
779         hwaddr devmem_start;
780         ram_addr_t devmem_size;
781 
782         pc_get_device_memory_range(pcms, &devmem_start, &devmem_size);
783         devmem_start += devmem_size;
784         return devmem_start - 1;
785     }
786 
787     /* configuration without any memory hotplug */
788     return pc_above_4g_end(pcms) - 1;
789 }
790 
791 /*
792  * AMD systems with an IOMMU have an additional hole close to the
793  * 1Tb, which are special GPAs that cannot be DMA mapped. Depending
794  * on kernel version, VFIO may or may not let you DMA map those ranges.
795  * Starting Linux v5.4 we validate it, and can't create guests on AMD machines
796  * with certain memory sizes. It's also wrong to use those IOVA ranges
797  * in detriment of leading to IOMMU INVALID_DEVICE_REQUEST or worse.
798  * The ranges reserved for Hyper-Transport are:
799  *
800  * FD_0000_0000h - FF_FFFF_FFFFh
801  *
802  * The ranges represent the following:
803  *
804  * Base Address   Top Address  Use
805  *
806  * FD_0000_0000h FD_F7FF_FFFFh Reserved interrupt address space
807  * FD_F800_0000h FD_F8FF_FFFFh Interrupt/EOI IntCtl
808  * FD_F900_0000h FD_F90F_FFFFh Legacy PIC IACK
809  * FD_F910_0000h FD_F91F_FFFFh System Management
810  * FD_F920_0000h FD_FAFF_FFFFh Reserved Page Tables
811  * FD_FB00_0000h FD_FBFF_FFFFh Address Translation
812  * FD_FC00_0000h FD_FDFF_FFFFh I/O Space
813  * FD_FE00_0000h FD_FFFF_FFFFh Configuration
814  * FE_0000_0000h FE_1FFF_FFFFh Extended Configuration/Device Messages
815  * FE_2000_0000h FF_FFFF_FFFFh Reserved
816  *
817  * See AMD IOMMU spec, section 2.1.2 "IOMMU Logical Topology",
818  * Table 3: Special Address Controls (GPA) for more information.
819  */
820 #define AMD_HT_START         0xfd00000000UL
821 #define AMD_HT_END           0xffffffffffUL
822 #define AMD_ABOVE_1TB_START  (AMD_HT_END + 1)
823 #define AMD_HT_SIZE          (AMD_ABOVE_1TB_START - AMD_HT_START)
824 
825 void pc_memory_init(PCMachineState *pcms,
826                     MemoryRegion *system_memory,
827                     MemoryRegion *rom_memory,
828                     uint64_t pci_hole64_size)
829 {
830     int linux_boot, i;
831     MemoryRegion *option_rom_mr;
832     MemoryRegion *ram_below_4g, *ram_above_4g;
833     FWCfgState *fw_cfg;
834     MachineState *machine = MACHINE(pcms);
835     MachineClass *mc = MACHINE_GET_CLASS(machine);
836     PCMachineClass *pcmc = PC_MACHINE_GET_CLASS(pcms);
837     X86MachineState *x86ms = X86_MACHINE(pcms);
838     hwaddr maxphysaddr, maxusedaddr;
839     hwaddr cxl_base, cxl_resv_end = 0;
840     X86CPU *cpu = X86_CPU(first_cpu);
841 
842     assert(machine->ram_size == x86ms->below_4g_mem_size +
843                                 x86ms->above_4g_mem_size);
844 
845     linux_boot = (machine->kernel_filename != NULL);
846 
847     /*
848      * The HyperTransport range close to the 1T boundary is unique to AMD
849      * hosts with IOMMUs enabled. Restrict the ram-above-4g relocation
850      * to above 1T to AMD vCPUs only. @enforce_amd_1tb_hole is only false in
851      * older machine types (<= 7.0) for compatibility purposes.
852      */
853     if (IS_AMD_CPU(&cpu->env) && pcmc->enforce_amd_1tb_hole) {
854         /* Bail out if max possible address does not cross HT range */
855         if (pc_max_used_gpa(pcms, pci_hole64_size) >= AMD_HT_START) {
856             x86ms->above_4g_mem_start = AMD_ABOVE_1TB_START;
857         }
858 
859         /*
860          * Advertise the HT region if address space covers the reserved
861          * region or if we relocate.
862          */
863         if (cpu->phys_bits >= 40) {
864             e820_add_entry(AMD_HT_START, AMD_HT_SIZE, E820_RESERVED);
865         }
866     }
867 
868     /*
869      * phys-bits is required to be appropriately configured
870      * to make sure max used GPA is reachable.
871      */
872     maxusedaddr = pc_max_used_gpa(pcms, pci_hole64_size);
873     maxphysaddr = ((hwaddr)1 << cpu->phys_bits) - 1;
874     if (maxphysaddr < maxusedaddr) {
875         error_report("Address space limit 0x%"PRIx64" < 0x%"PRIx64
876                      " phys-bits too low (%u)",
877                      maxphysaddr, maxusedaddr, cpu->phys_bits);
878         exit(EXIT_FAILURE);
879     }
880 
881     /*
882      * Split single memory region and use aliases to address portions of it,
883      * done for backwards compatibility with older qemus.
884      */
885     ram_below_4g = g_malloc(sizeof(*ram_below_4g));
886     memory_region_init_alias(ram_below_4g, NULL, "ram-below-4g", machine->ram,
887                              0, x86ms->below_4g_mem_size);
888     memory_region_add_subregion(system_memory, 0, ram_below_4g);
889     e820_add_entry(0, x86ms->below_4g_mem_size, E820_RAM);
890     if (x86ms->above_4g_mem_size > 0) {
891         ram_above_4g = g_malloc(sizeof(*ram_above_4g));
892         memory_region_init_alias(ram_above_4g, NULL, "ram-above-4g",
893                                  machine->ram,
894                                  x86ms->below_4g_mem_size,
895                                  x86ms->above_4g_mem_size);
896         memory_region_add_subregion(system_memory, x86ms->above_4g_mem_start,
897                                     ram_above_4g);
898         e820_add_entry(x86ms->above_4g_mem_start, x86ms->above_4g_mem_size,
899                        E820_RAM);
900     }
901 
902     if (pcms->sgx_epc.size != 0) {
903         e820_add_entry(pcms->sgx_epc.base, pcms->sgx_epc.size, E820_RESERVED);
904     }
905 
906     if (!pcmc->has_reserved_memory &&
907         (machine->ram_slots ||
908          (machine->maxram_size > machine->ram_size))) {
909 
910         error_report("\"-memory 'slots|maxmem'\" is not supported by: %s",
911                      mc->name);
912         exit(EXIT_FAILURE);
913     }
914 
915     /* initialize device memory address space */
916     if (pcmc->has_reserved_memory &&
917         (machine->ram_size < machine->maxram_size)) {
918         ram_addr_t device_mem_size;
919         hwaddr device_mem_base;
920 
921         if (machine->ram_slots > ACPI_MAX_RAM_SLOTS) {
922             error_report("unsupported amount of memory slots: %"PRIu64,
923                          machine->ram_slots);
924             exit(EXIT_FAILURE);
925         }
926 
927         if (QEMU_ALIGN_UP(machine->maxram_size,
928                           TARGET_PAGE_SIZE) != machine->maxram_size) {
929             error_report("maximum memory size must by aligned to multiple of "
930                          "%d bytes", TARGET_PAGE_SIZE);
931             exit(EXIT_FAILURE);
932         }
933 
934         pc_get_device_memory_range(pcms, &device_mem_base, &device_mem_size);
935 
936         if (device_mem_base + device_mem_size < device_mem_size) {
937             error_report("unsupported amount of maximum memory: " RAM_ADDR_FMT,
938                          machine->maxram_size);
939             exit(EXIT_FAILURE);
940         }
941         machine_memory_devices_init(machine, device_mem_base, device_mem_size);
942     }
943 
944     if (pcms->cxl_devices_state.is_enabled) {
945         MemoryRegion *mr = &pcms->cxl_devices_state.host_mr;
946         hwaddr cxl_size = MiB;
947 
948         cxl_base = pc_get_cxl_range_start(pcms);
949         memory_region_init(mr, OBJECT(machine), "cxl_host_reg", cxl_size);
950         memory_region_add_subregion(system_memory, cxl_base, mr);
951         cxl_resv_end = cxl_base + cxl_size;
952         if (pcms->cxl_devices_state.fixed_windows) {
953             hwaddr cxl_fmw_base;
954             GList *it;
955 
956             cxl_fmw_base = ROUND_UP(cxl_base + cxl_size, 256 * MiB);
957             for (it = pcms->cxl_devices_state.fixed_windows; it; it = it->next) {
958                 CXLFixedWindow *fw = it->data;
959 
960                 fw->base = cxl_fmw_base;
961                 memory_region_init_io(&fw->mr, OBJECT(machine), &cfmws_ops, fw,
962                                       "cxl-fixed-memory-region", fw->size);
963                 memory_region_add_subregion(system_memory, fw->base, &fw->mr);
964                 cxl_fmw_base += fw->size;
965                 cxl_resv_end = cxl_fmw_base;
966             }
967         }
968     }
969 
970     /* Initialize PC system firmware */
971     pc_system_firmware_init(pcms, rom_memory);
972 
973     option_rom_mr = g_malloc(sizeof(*option_rom_mr));
974     if (machine_require_guest_memfd(machine)) {
975         memory_region_init_ram_guest_memfd(option_rom_mr, NULL, "pc.rom",
976                                            PC_ROM_SIZE, &error_fatal);
977     } else {
978         memory_region_init_ram(option_rom_mr, NULL, "pc.rom", PC_ROM_SIZE,
979                                &error_fatal);
980         if (pcmc->pci_enabled) {
981             memory_region_set_readonly(option_rom_mr, true);
982         }
983     }
984     memory_region_add_subregion_overlap(rom_memory,
985                                         PC_ROM_MIN_VGA,
986                                         option_rom_mr,
987                                         1);
988 
989     fw_cfg = fw_cfg_arch_create(machine,
990                                 x86ms->boot_cpus, x86ms->apic_id_limit);
991 
992     rom_set_fw(fw_cfg);
993 
994     if (machine->device_memory) {
995         uint64_t *val = g_malloc(sizeof(*val));
996         uint64_t res_mem_end = machine->device_memory->base;
997 
998         if (!pcmc->broken_reserved_end) {
999             res_mem_end += memory_region_size(&machine->device_memory->mr);
1000         }
1001 
1002         if (pcms->cxl_devices_state.is_enabled) {
1003             res_mem_end = cxl_resv_end;
1004         }
1005         *val = cpu_to_le64(ROUND_UP(res_mem_end, 1 * GiB));
1006         fw_cfg_add_file(fw_cfg, "etc/reserved-memory-end", val, sizeof(*val));
1007     }
1008 
1009     if (linux_boot) {
1010         x86_load_linux(x86ms, fw_cfg, PC_FW_DATA, pcmc->pvh_enabled);
1011     }
1012 
1013     for (i = 0; i < nb_option_roms; i++) {
1014         rom_add_option(option_rom[i].name, option_rom[i].bootindex);
1015     }
1016     x86ms->fw_cfg = fw_cfg;
1017 
1018     /* Init default IOAPIC address space */
1019     x86ms->ioapic_as = &address_space_memory;
1020 
1021     /* Init ACPI memory hotplug IO base address */
1022     pcms->memhp_io_base = ACPI_MEMORY_HOTPLUG_BASE;
1023 }
1024 
1025 /*
1026  * The 64bit pci hole starts after "above 4G RAM" and
1027  * potentially the space reserved for memory hotplug.
1028  */
1029 uint64_t pc_pci_hole64_start(void)
1030 {
1031     PCMachineState *pcms = PC_MACHINE(qdev_get_machine());
1032     PCMachineClass *pcmc = PC_MACHINE_GET_CLASS(pcms);
1033     MachineState *ms = MACHINE(pcms);
1034     uint64_t hole64_start = 0;
1035     ram_addr_t size = 0;
1036 
1037     if (pcms->cxl_devices_state.is_enabled) {
1038         hole64_start = pc_get_cxl_range_end(pcms);
1039     } else if (pcmc->has_reserved_memory && (ms->ram_size < ms->maxram_size)) {
1040         pc_get_device_memory_range(pcms, &hole64_start, &size);
1041         if (!pcmc->broken_reserved_end) {
1042             hole64_start += size;
1043         }
1044     } else {
1045         hole64_start = pc_above_4g_end(pcms);
1046     }
1047 
1048     return ROUND_UP(hole64_start, 1 * GiB);
1049 }
1050 
1051 DeviceState *pc_vga_init(ISABus *isa_bus, PCIBus *pci_bus)
1052 {
1053     DeviceState *dev = NULL;
1054 
1055     rom_set_order_override(FW_CFG_ORDER_OVERRIDE_VGA);
1056     if (pci_bus) {
1057         PCIDevice *pcidev = pci_vga_init(pci_bus);
1058         dev = pcidev ? &pcidev->qdev : NULL;
1059     } else if (isa_bus) {
1060         ISADevice *isadev = isa_vga_init(isa_bus);
1061         dev = isadev ? DEVICE(isadev) : NULL;
1062     }
1063     rom_reset_order_override();
1064     return dev;
1065 }
1066 
1067 static const MemoryRegionOps ioport80_io_ops = {
1068     .write = ioport80_write,
1069     .read = ioport80_read,
1070     .endianness = DEVICE_NATIVE_ENDIAN,
1071     .impl = {
1072         .min_access_size = 1,
1073         .max_access_size = 1,
1074     },
1075 };
1076 
1077 static const MemoryRegionOps ioportF0_io_ops = {
1078     .write = ioportF0_write,
1079     .read = ioportF0_read,
1080     .endianness = DEVICE_NATIVE_ENDIAN,
1081     .impl = {
1082         .min_access_size = 1,
1083         .max_access_size = 1,
1084     },
1085 };
1086 
1087 static void pc_superio_init(ISABus *isa_bus, bool create_fdctrl,
1088                             bool create_i8042, bool no_vmport, Error **errp)
1089 {
1090     int i;
1091     DriveInfo *fd[MAX_FD];
1092     qemu_irq *a20_line;
1093     ISADevice *i8042, *port92, *vmmouse;
1094 
1095     serial_hds_isa_init(isa_bus, 0, MAX_ISA_SERIAL_PORTS);
1096     parallel_hds_isa_init(isa_bus, MAX_PARALLEL_PORTS);
1097 
1098     for (i = 0; i < MAX_FD; i++) {
1099         fd[i] = drive_get(IF_FLOPPY, 0, i);
1100         create_fdctrl |= !!fd[i];
1101     }
1102     if (create_fdctrl) {
1103 #ifdef CONFIG_FDC_ISA
1104         ISADevice *fdc = isa_new(TYPE_ISA_FDC);
1105         if (fdc) {
1106             isa_realize_and_unref(fdc, isa_bus, &error_fatal);
1107             isa_fdc_init_drives(fdc, fd);
1108         }
1109 #endif
1110     }
1111 
1112     if (!create_i8042) {
1113         if (!no_vmport) {
1114             error_setg(errp,
1115                        "vmport requires the i8042 controller to be enabled");
1116         }
1117         return;
1118     }
1119 
1120     i8042 = isa_create_simple(isa_bus, TYPE_I8042);
1121     if (!no_vmport) {
1122         isa_create_simple(isa_bus, TYPE_VMPORT);
1123         vmmouse = isa_try_new("vmmouse");
1124     } else {
1125         vmmouse = NULL;
1126     }
1127     if (vmmouse) {
1128         object_property_set_link(OBJECT(vmmouse), TYPE_I8042, OBJECT(i8042),
1129                                  &error_abort);
1130         isa_realize_and_unref(vmmouse, isa_bus, &error_fatal);
1131     }
1132     port92 = isa_create_simple(isa_bus, TYPE_PORT92);
1133 
1134     a20_line = qemu_allocate_irqs(handle_a20_line_change, first_cpu, 2);
1135     qdev_connect_gpio_out_named(DEVICE(i8042),
1136                                 I8042_A20_LINE, 0, a20_line[0]);
1137     qdev_connect_gpio_out_named(DEVICE(port92),
1138                                 PORT92_A20_LINE, 0, a20_line[1]);
1139     g_free(a20_line);
1140 }
1141 
1142 void pc_basic_device_init(struct PCMachineState *pcms,
1143                           ISABus *isa_bus, qemu_irq *gsi,
1144                           ISADevice *rtc_state,
1145                           bool create_fdctrl,
1146                           uint32_t hpet_irqs)
1147 {
1148     int i;
1149     DeviceState *hpet = NULL;
1150     int pit_isa_irq = 0;
1151     qemu_irq pit_alt_irq = NULL;
1152     ISADevice *pit = NULL;
1153     MemoryRegion *ioport80_io = g_new(MemoryRegion, 1);
1154     MemoryRegion *ioportF0_io = g_new(MemoryRegion, 1);
1155     X86MachineState *x86ms = X86_MACHINE(pcms);
1156 
1157     memory_region_init_io(ioport80_io, NULL, &ioport80_io_ops, NULL, "ioport80", 1);
1158     memory_region_add_subregion(isa_bus->address_space_io, 0x80, ioport80_io);
1159 
1160     memory_region_init_io(ioportF0_io, NULL, &ioportF0_io_ops, NULL, "ioportF0", 1);
1161     memory_region_add_subregion(isa_bus->address_space_io, 0xf0, ioportF0_io);
1162 
1163     /*
1164      * Check if an HPET shall be created.
1165      */
1166     if (pcms->hpet_enabled) {
1167         qemu_irq rtc_irq;
1168 
1169         hpet = qdev_try_new(TYPE_HPET);
1170         if (!hpet) {
1171             error_report("couldn't create HPET device");
1172             exit(1);
1173         }
1174         /*
1175          * For pc-piix-*, hpet's intcap is always IRQ2. For pc-q35-*,
1176          * use IRQ16~23, IRQ8 and IRQ2.  If the user has already set
1177          * the property, use whatever mask they specified.
1178          */
1179         uint8_t compat = object_property_get_uint(OBJECT(hpet),
1180                 HPET_INTCAP, NULL);
1181         if (!compat) {
1182             qdev_prop_set_uint32(hpet, HPET_INTCAP, hpet_irqs);
1183         }
1184         sysbus_realize_and_unref(SYS_BUS_DEVICE(hpet), &error_fatal);
1185         sysbus_mmio_map(SYS_BUS_DEVICE(hpet), 0, HPET_BASE);
1186 
1187         for (i = 0; i < IOAPIC_NUM_PINS; i++) {
1188             sysbus_connect_irq(SYS_BUS_DEVICE(hpet), i, gsi[i]);
1189         }
1190         pit_isa_irq = -1;
1191         pit_alt_irq = qdev_get_gpio_in(hpet, HPET_LEGACY_PIT_INT);
1192         rtc_irq = qdev_get_gpio_in(hpet, HPET_LEGACY_RTC_INT);
1193 
1194         /* overwrite connection created by south bridge */
1195         qdev_connect_gpio_out(DEVICE(rtc_state), 0, rtc_irq);
1196     }
1197 
1198     object_property_add_alias(OBJECT(pcms), "rtc-time", OBJECT(rtc_state),
1199                               "date");
1200 
1201 #ifdef CONFIG_XEN_EMU
1202     if (xen_mode == XEN_EMULATE) {
1203         xen_overlay_create();
1204         xen_evtchn_create(IOAPIC_NUM_PINS, gsi);
1205         xen_gnttab_create();
1206         xen_xenstore_create();
1207         if (pcms->pcibus) {
1208             pci_create_simple(pcms->pcibus, -1, "xen-platform");
1209         }
1210         xen_bus_init();
1211     }
1212 #endif
1213 
1214     qemu_register_boot_set(pc_boot_set, pcms);
1215     set_boot_dev(pcms, MC146818_RTC(rtc_state),
1216                  MACHINE(pcms)->boot_config.order, &error_fatal);
1217 
1218     if (!xen_enabled() &&
1219         (x86ms->pit == ON_OFF_AUTO_AUTO || x86ms->pit == ON_OFF_AUTO_ON)) {
1220         if (kvm_pit_in_kernel()) {
1221             pit = kvm_pit_init(isa_bus, 0x40);
1222         } else {
1223             pit = i8254_pit_init(isa_bus, 0x40, pit_isa_irq, pit_alt_irq);
1224         }
1225         if (hpet) {
1226             /* connect PIT to output control line of the HPET */
1227             qdev_connect_gpio_out(hpet, 0, qdev_get_gpio_in(DEVICE(pit), 0));
1228         }
1229         object_property_set_link(OBJECT(pcms->pcspk), "pit",
1230                                  OBJECT(pit), &error_fatal);
1231         isa_realize_and_unref(pcms->pcspk, isa_bus, &error_fatal);
1232     }
1233 
1234     if (pcms->vmport == ON_OFF_AUTO_AUTO) {
1235         pcms->vmport = (xen_enabled() || !pcms->i8042_enabled)
1236             ? ON_OFF_AUTO_OFF : ON_OFF_AUTO_ON;
1237     }
1238 
1239     /* Super I/O */
1240     pc_superio_init(isa_bus, create_fdctrl, pcms->i8042_enabled,
1241                     pcms->vmport != ON_OFF_AUTO_ON, &error_fatal);
1242 }
1243 
1244 void pc_nic_init(PCMachineClass *pcmc, ISABus *isa_bus, PCIBus *pci_bus)
1245 {
1246     MachineClass *mc = MACHINE_CLASS(pcmc);
1247     bool default_is_ne2k = g_str_equal(mc->default_nic, TYPE_ISA_NE2000);
1248     NICInfo *nd;
1249 
1250     rom_set_order_override(FW_CFG_ORDER_OVERRIDE_NIC);
1251 
1252     while ((nd = qemu_find_nic_info(TYPE_ISA_NE2000, default_is_ne2k, NULL))) {
1253         pc_init_ne2k_isa(isa_bus, nd, &error_fatal);
1254     }
1255 
1256     /* Anything remaining should be a PCI NIC */
1257     if (pci_bus) {
1258         pci_init_nic_devices(pci_bus, mc->default_nic);
1259     }
1260 
1261     rom_reset_order_override();
1262 }
1263 
1264 void pc_i8259_create(ISABus *isa_bus, qemu_irq *i8259_irqs)
1265 {
1266     qemu_irq *i8259;
1267 
1268     if (kvm_pic_in_kernel()) {
1269         i8259 = kvm_i8259_init(isa_bus);
1270     } else if (xen_enabled()) {
1271         i8259 = xen_interrupt_controller_init();
1272     } else {
1273         i8259 = i8259_init(isa_bus, x86_allocate_cpu_irq());
1274     }
1275 
1276     for (size_t i = 0; i < ISA_NUM_IRQS; i++) {
1277         i8259_irqs[i] = i8259[i];
1278     }
1279 
1280     g_free(i8259);
1281 }
1282 
1283 static void pc_memory_pre_plug(HotplugHandler *hotplug_dev, DeviceState *dev,
1284                                Error **errp)
1285 {
1286     const X86MachineState *x86ms = X86_MACHINE(hotplug_dev);
1287     const MachineState *ms = MACHINE(hotplug_dev);
1288     const bool is_nvdimm = object_dynamic_cast(OBJECT(dev), TYPE_NVDIMM);
1289     Error *local_err = NULL;
1290 
1291     /*
1292      * When "acpi=off" is used with the Q35 machine type, no ACPI is built,
1293      * but pcms->acpi_dev is still created. Check !acpi_enabled in
1294      * addition to cover this case.
1295      */
1296     if (!x86ms->acpi_dev || !x86_machine_is_acpi_enabled(x86ms)) {
1297         error_setg(errp,
1298                    "memory hotplug is not enabled: missing acpi device or acpi disabled");
1299         return;
1300     }
1301 
1302     if (is_nvdimm && !ms->nvdimms_state->is_enabled) {
1303         error_setg(errp, "nvdimm is not enabled: missing 'nvdimm' in '-M'");
1304         return;
1305     }
1306 
1307     hotplug_handler_pre_plug(x86ms->acpi_dev, dev, &local_err);
1308     if (local_err) {
1309         error_propagate(errp, local_err);
1310         return;
1311     }
1312 
1313     pc_dimm_pre_plug(PC_DIMM(dev), MACHINE(hotplug_dev), errp);
1314 }
1315 
1316 static void pc_memory_plug(HotplugHandler *hotplug_dev,
1317                            DeviceState *dev, Error **errp)
1318 {
1319     PCMachineState *pcms = PC_MACHINE(hotplug_dev);
1320     X86MachineState *x86ms = X86_MACHINE(hotplug_dev);
1321     MachineState *ms = MACHINE(hotplug_dev);
1322     bool is_nvdimm = object_dynamic_cast(OBJECT(dev), TYPE_NVDIMM);
1323 
1324     pc_dimm_plug(PC_DIMM(dev), MACHINE(pcms));
1325 
1326     if (is_nvdimm) {
1327         nvdimm_plug(ms->nvdimms_state);
1328     }
1329 
1330     hotplug_handler_plug(x86ms->acpi_dev, dev, &error_abort);
1331 }
1332 
1333 static void pc_memory_unplug_request(HotplugHandler *hotplug_dev,
1334                                      DeviceState *dev, Error **errp)
1335 {
1336     X86MachineState *x86ms = X86_MACHINE(hotplug_dev);
1337 
1338     /*
1339      * When "acpi=off" is used with the Q35 machine type, no ACPI is built,
1340      * but pcms->acpi_dev is still created. Check !acpi_enabled in
1341      * addition to cover this case.
1342      */
1343     if (!x86ms->acpi_dev || !x86_machine_is_acpi_enabled(x86ms)) {
1344         error_setg(errp,
1345                    "memory hotplug is not enabled: missing acpi device or acpi disabled");
1346         return;
1347     }
1348 
1349     if (object_dynamic_cast(OBJECT(dev), TYPE_NVDIMM)) {
1350         error_setg(errp, "nvdimm device hot unplug is not supported yet.");
1351         return;
1352     }
1353 
1354     hotplug_handler_unplug_request(x86ms->acpi_dev, dev,
1355                                    errp);
1356 }
1357 
1358 static void pc_memory_unplug(HotplugHandler *hotplug_dev,
1359                              DeviceState *dev, Error **errp)
1360 {
1361     PCMachineState *pcms = PC_MACHINE(hotplug_dev);
1362     X86MachineState *x86ms = X86_MACHINE(hotplug_dev);
1363     Error *local_err = NULL;
1364 
1365     hotplug_handler_unplug(x86ms->acpi_dev, dev, &local_err);
1366     if (local_err) {
1367         goto out;
1368     }
1369 
1370     pc_dimm_unplug(PC_DIMM(dev), MACHINE(pcms));
1371     qdev_unrealize(dev);
1372  out:
1373     error_propagate(errp, local_err);
1374 }
1375 
1376 static void pc_hv_balloon_pre_plug(HotplugHandler *hotplug_dev,
1377                                    DeviceState *dev, Error **errp)
1378 {
1379     /* The vmbus handler has no hotplug handler; we should never end up here. */
1380     g_assert(!dev->hotplugged);
1381     memory_device_pre_plug(MEMORY_DEVICE(dev), MACHINE(hotplug_dev), errp);
1382 }
1383 
1384 static void pc_hv_balloon_plug(HotplugHandler *hotplug_dev,
1385                                DeviceState *dev, Error **errp)
1386 {
1387     memory_device_plug(MEMORY_DEVICE(dev), MACHINE(hotplug_dev));
1388 }
1389 
1390 static void pc_machine_device_pre_plug_cb(HotplugHandler *hotplug_dev,
1391                                           DeviceState *dev, Error **errp)
1392 {
1393     if (object_dynamic_cast(OBJECT(dev), TYPE_PC_DIMM)) {
1394         pc_memory_pre_plug(hotplug_dev, dev, errp);
1395     } else if (object_dynamic_cast(OBJECT(dev), TYPE_CPU)) {
1396         x86_cpu_pre_plug(hotplug_dev, dev, errp);
1397     } else if (object_dynamic_cast(OBJECT(dev), TYPE_VIRTIO_MD_PCI)) {
1398         virtio_md_pci_pre_plug(VIRTIO_MD_PCI(dev), MACHINE(hotplug_dev), errp);
1399     } else if (object_dynamic_cast(OBJECT(dev), TYPE_VIRTIO_IOMMU_PCI)) {
1400         /* Declare the APIC range as the reserved MSI region */
1401         char *resv_prop_str = g_strdup_printf("0xfee00000:0xfeefffff:%d",
1402                                               VIRTIO_IOMMU_RESV_MEM_T_MSI);
1403         QList *reserved_regions = qlist_new();
1404 
1405         qlist_append_str(reserved_regions, resv_prop_str);
1406         qdev_prop_set_array(dev, "reserved-regions", reserved_regions);
1407 
1408         g_free(resv_prop_str);
1409     }
1410 
1411     if (object_dynamic_cast(OBJECT(dev), TYPE_X86_IOMMU_DEVICE) ||
1412         object_dynamic_cast(OBJECT(dev), TYPE_VIRTIO_IOMMU_PCI)) {
1413         PCMachineState *pcms = PC_MACHINE(hotplug_dev);
1414 
1415         if (pcms->iommu) {
1416             error_setg(errp, "QEMU does not support multiple vIOMMUs "
1417                        "for x86 yet.");
1418             return;
1419         }
1420         pcms->iommu = dev;
1421     } else if (object_dynamic_cast(OBJECT(dev), TYPE_HV_BALLOON)) {
1422         pc_hv_balloon_pre_plug(hotplug_dev, dev, errp);
1423     }
1424 }
1425 
1426 static void pc_machine_device_plug_cb(HotplugHandler *hotplug_dev,
1427                                       DeviceState *dev, Error **errp)
1428 {
1429     if (object_dynamic_cast(OBJECT(dev), TYPE_PC_DIMM)) {
1430         pc_memory_plug(hotplug_dev, dev, errp);
1431     } else if (object_dynamic_cast(OBJECT(dev), TYPE_CPU)) {
1432         x86_cpu_plug(hotplug_dev, dev, errp);
1433     } else if (object_dynamic_cast(OBJECT(dev), TYPE_VIRTIO_MD_PCI)) {
1434         virtio_md_pci_plug(VIRTIO_MD_PCI(dev), MACHINE(hotplug_dev), errp);
1435     } else if (object_dynamic_cast(OBJECT(dev), TYPE_HV_BALLOON)) {
1436         pc_hv_balloon_plug(hotplug_dev, dev, errp);
1437     }
1438 }
1439 
1440 static void pc_machine_device_unplug_request_cb(HotplugHandler *hotplug_dev,
1441                                                 DeviceState *dev, Error **errp)
1442 {
1443     if (object_dynamic_cast(OBJECT(dev), TYPE_PC_DIMM)) {
1444         pc_memory_unplug_request(hotplug_dev, dev, errp);
1445     } else if (object_dynamic_cast(OBJECT(dev), TYPE_CPU)) {
1446         x86_cpu_unplug_request_cb(hotplug_dev, dev, errp);
1447     } else if (object_dynamic_cast(OBJECT(dev), TYPE_VIRTIO_MD_PCI)) {
1448         virtio_md_pci_unplug_request(VIRTIO_MD_PCI(dev), MACHINE(hotplug_dev),
1449                                      errp);
1450     } else {
1451         error_setg(errp, "acpi: device unplug request for not supported device"
1452                    " type: %s", object_get_typename(OBJECT(dev)));
1453     }
1454 }
1455 
1456 static void pc_machine_device_unplug_cb(HotplugHandler *hotplug_dev,
1457                                         DeviceState *dev, Error **errp)
1458 {
1459     if (object_dynamic_cast(OBJECT(dev), TYPE_PC_DIMM)) {
1460         pc_memory_unplug(hotplug_dev, dev, errp);
1461     } else if (object_dynamic_cast(OBJECT(dev), TYPE_CPU)) {
1462         x86_cpu_unplug_cb(hotplug_dev, dev, errp);
1463     } else if (object_dynamic_cast(OBJECT(dev), TYPE_VIRTIO_MD_PCI)) {
1464         virtio_md_pci_unplug(VIRTIO_MD_PCI(dev), MACHINE(hotplug_dev), errp);
1465     } else {
1466         error_setg(errp, "acpi: device unplug for not supported device"
1467                    " type: %s", object_get_typename(OBJECT(dev)));
1468     }
1469 }
1470 
1471 static HotplugHandler *pc_get_hotplug_handler(MachineState *machine,
1472                                              DeviceState *dev)
1473 {
1474     if (object_dynamic_cast(OBJECT(dev), TYPE_PC_DIMM) ||
1475         object_dynamic_cast(OBJECT(dev), TYPE_CPU) ||
1476         object_dynamic_cast(OBJECT(dev), TYPE_VIRTIO_MD_PCI) ||
1477         object_dynamic_cast(OBJECT(dev), TYPE_VIRTIO_IOMMU_PCI) ||
1478         object_dynamic_cast(OBJECT(dev), TYPE_HV_BALLOON) ||
1479         object_dynamic_cast(OBJECT(dev), TYPE_X86_IOMMU_DEVICE)) {
1480         return HOTPLUG_HANDLER(machine);
1481     }
1482 
1483     return NULL;
1484 }
1485 
1486 static void pc_machine_get_vmport(Object *obj, Visitor *v, const char *name,
1487                                   void *opaque, Error **errp)
1488 {
1489     PCMachineState *pcms = PC_MACHINE(obj);
1490     OnOffAuto vmport = pcms->vmport;
1491 
1492     visit_type_OnOffAuto(v, name, &vmport, errp);
1493 }
1494 
1495 static void pc_machine_set_vmport(Object *obj, Visitor *v, const char *name,
1496                                   void *opaque, Error **errp)
1497 {
1498     PCMachineState *pcms = PC_MACHINE(obj);
1499 
1500     visit_type_OnOffAuto(v, name, &pcms->vmport, errp);
1501 }
1502 
1503 static bool pc_machine_get_fd_bootchk(Object *obj, Error **errp)
1504 {
1505     PCMachineState *pcms = PC_MACHINE(obj);
1506 
1507     return pcms->fd_bootchk;
1508 }
1509 
1510 static void pc_machine_set_fd_bootchk(Object *obj, bool value, Error **errp)
1511 {
1512     PCMachineState *pcms = PC_MACHINE(obj);
1513 
1514     pcms->fd_bootchk = value;
1515 }
1516 
1517 static bool pc_machine_get_smbus(Object *obj, Error **errp)
1518 {
1519     PCMachineState *pcms = PC_MACHINE(obj);
1520 
1521     return pcms->smbus_enabled;
1522 }
1523 
1524 static void pc_machine_set_smbus(Object *obj, bool value, Error **errp)
1525 {
1526     PCMachineState *pcms = PC_MACHINE(obj);
1527 
1528     pcms->smbus_enabled = value;
1529 }
1530 
1531 static bool pc_machine_get_sata(Object *obj, Error **errp)
1532 {
1533     PCMachineState *pcms = PC_MACHINE(obj);
1534 
1535     return pcms->sata_enabled;
1536 }
1537 
1538 static void pc_machine_set_sata(Object *obj, bool value, Error **errp)
1539 {
1540     PCMachineState *pcms = PC_MACHINE(obj);
1541 
1542     pcms->sata_enabled = value;
1543 }
1544 
1545 static bool pc_machine_get_hpet(Object *obj, Error **errp)
1546 {
1547     PCMachineState *pcms = PC_MACHINE(obj);
1548 
1549     return pcms->hpet_enabled;
1550 }
1551 
1552 static void pc_machine_set_hpet(Object *obj, bool value, Error **errp)
1553 {
1554     PCMachineState *pcms = PC_MACHINE(obj);
1555 
1556     pcms->hpet_enabled = value;
1557 }
1558 
1559 static bool pc_machine_get_i8042(Object *obj, Error **errp)
1560 {
1561     PCMachineState *pcms = PC_MACHINE(obj);
1562 
1563     return pcms->i8042_enabled;
1564 }
1565 
1566 static void pc_machine_set_i8042(Object *obj, bool value, Error **errp)
1567 {
1568     PCMachineState *pcms = PC_MACHINE(obj);
1569 
1570     pcms->i8042_enabled = value;
1571 }
1572 
1573 static bool pc_machine_get_default_bus_bypass_iommu(Object *obj, Error **errp)
1574 {
1575     PCMachineState *pcms = PC_MACHINE(obj);
1576 
1577     return pcms->default_bus_bypass_iommu;
1578 }
1579 
1580 static void pc_machine_set_default_bus_bypass_iommu(Object *obj, bool value,
1581                                                     Error **errp)
1582 {
1583     PCMachineState *pcms = PC_MACHINE(obj);
1584 
1585     pcms->default_bus_bypass_iommu = value;
1586 }
1587 
1588 static void pc_machine_get_smbios_ep(Object *obj, Visitor *v, const char *name,
1589                                      void *opaque, Error **errp)
1590 {
1591     PCMachineState *pcms = PC_MACHINE(obj);
1592     SmbiosEntryPointType smbios_entry_point_type = pcms->smbios_entry_point_type;
1593 
1594     visit_type_SmbiosEntryPointType(v, name, &smbios_entry_point_type, errp);
1595 }
1596 
1597 static void pc_machine_set_smbios_ep(Object *obj, Visitor *v, const char *name,
1598                                      void *opaque, Error **errp)
1599 {
1600     PCMachineState *pcms = PC_MACHINE(obj);
1601 
1602     visit_type_SmbiosEntryPointType(v, name, &pcms->smbios_entry_point_type, errp);
1603 }
1604 
1605 static void pc_machine_get_max_ram_below_4g(Object *obj, Visitor *v,
1606                                             const char *name, void *opaque,
1607                                             Error **errp)
1608 {
1609     PCMachineState *pcms = PC_MACHINE(obj);
1610     uint64_t value = pcms->max_ram_below_4g;
1611 
1612     visit_type_size(v, name, &value, errp);
1613 }
1614 
1615 static void pc_machine_set_max_ram_below_4g(Object *obj, Visitor *v,
1616                                             const char *name, void *opaque,
1617                                             Error **errp)
1618 {
1619     PCMachineState *pcms = PC_MACHINE(obj);
1620     uint64_t value;
1621 
1622     if (!visit_type_size(v, name, &value, errp)) {
1623         return;
1624     }
1625     if (value > 4 * GiB) {
1626         error_setg(errp,
1627                    "Machine option 'max-ram-below-4g=%"PRIu64
1628                    "' expects size less than or equal to 4G", value);
1629         return;
1630     }
1631 
1632     if (value < 1 * MiB) {
1633         warn_report("Only %" PRIu64 " bytes of RAM below the 4GiB boundary,"
1634                     "BIOS may not work with less than 1MiB", value);
1635     }
1636 
1637     pcms->max_ram_below_4g = value;
1638 }
1639 
1640 static void pc_machine_get_max_fw_size(Object *obj, Visitor *v,
1641                                        const char *name, void *opaque,
1642                                        Error **errp)
1643 {
1644     PCMachineState *pcms = PC_MACHINE(obj);
1645     uint64_t value = pcms->max_fw_size;
1646 
1647     visit_type_size(v, name, &value, errp);
1648 }
1649 
1650 static void pc_machine_set_max_fw_size(Object *obj, Visitor *v,
1651                                        const char *name, void *opaque,
1652                                        Error **errp)
1653 {
1654     PCMachineState *pcms = PC_MACHINE(obj);
1655     uint64_t value;
1656 
1657     if (!visit_type_size(v, name, &value, errp)) {
1658         return;
1659     }
1660 
1661     /*
1662      * We don't have a theoretically justifiable exact lower bound on the base
1663      * address of any flash mapping. In practice, the IO-APIC MMIO range is
1664      * [0xFEE00000..0xFEE01000] -- see IO_APIC_DEFAULT_ADDRESS --, leaving free
1665      * only 18MiB-4KiB below 4GiB. For now, restrict the cumulative mapping to
1666      * 16MiB in size.
1667      */
1668     if (value > 16 * MiB) {
1669         error_setg(errp,
1670                    "User specified max allowed firmware size %" PRIu64 " is "
1671                    "greater than 16MiB. If combined firmware size exceeds "
1672                    "16MiB the system may not boot, or experience intermittent"
1673                    "stability issues.",
1674                    value);
1675         return;
1676     }
1677 
1678     pcms->max_fw_size = value;
1679 }
1680 
1681 
1682 static void pc_machine_initfn(Object *obj)
1683 {
1684     PCMachineState *pcms = PC_MACHINE(obj);
1685     PCMachineClass *pcmc = PC_MACHINE_GET_CLASS(pcms);
1686 
1687 #ifdef CONFIG_VMPORT
1688     pcms->vmport = ON_OFF_AUTO_AUTO;
1689 #else
1690     pcms->vmport = ON_OFF_AUTO_OFF;
1691 #endif /* CONFIG_VMPORT */
1692     pcms->max_ram_below_4g = 0; /* use default */
1693     pcms->smbios_entry_point_type = pcmc->default_smbios_ep_type;
1694     pcms->south_bridge = pcmc->default_south_bridge;
1695 
1696     /* acpi build is enabled by default if machine supports it */
1697     pcms->acpi_build_enabled = pcmc->has_acpi_build;
1698     pcms->smbus_enabled = true;
1699     pcms->sata_enabled = true;
1700     pcms->i8042_enabled = true;
1701     pcms->max_fw_size = 8 * MiB;
1702 #ifdef CONFIG_HPET
1703     pcms->hpet_enabled = true;
1704 #endif
1705     pcms->fd_bootchk = true;
1706     pcms->default_bus_bypass_iommu = false;
1707 
1708     pc_system_flash_create(pcms);
1709     pcms->pcspk = isa_new(TYPE_PC_SPEAKER);
1710     object_property_add_alias(OBJECT(pcms), "pcspk-audiodev",
1711                               OBJECT(pcms->pcspk), "audiodev");
1712     if (pcmc->pci_enabled) {
1713         cxl_machine_init(obj, &pcms->cxl_devices_state);
1714     }
1715 
1716     pcms->machine_done.notify = pc_machine_done;
1717     qemu_add_machine_init_done_notifier(&pcms->machine_done);
1718 }
1719 
1720 static void pc_machine_reset(MachineState *machine, ResetType type)
1721 {
1722     CPUState *cs;
1723     X86CPU *cpu;
1724 
1725     qemu_devices_reset(type);
1726 
1727     /* Reset APIC after devices have been reset to cancel
1728      * any changes that qemu_devices_reset() might have done.
1729      */
1730     CPU_FOREACH(cs) {
1731         cpu = X86_CPU(cs);
1732 
1733         x86_cpu_after_reset(cpu);
1734     }
1735 }
1736 
1737 static void pc_machine_wakeup(MachineState *machine)
1738 {
1739     cpu_synchronize_all_states();
1740     pc_machine_reset(machine, RESET_TYPE_WAKEUP);
1741     cpu_synchronize_all_post_reset();
1742 }
1743 
1744 static bool pc_hotplug_allowed(MachineState *ms, DeviceState *dev, Error **errp)
1745 {
1746     X86IOMMUState *iommu = x86_iommu_get_default();
1747     IntelIOMMUState *intel_iommu;
1748 
1749     if (iommu &&
1750         object_dynamic_cast((Object *)iommu, TYPE_INTEL_IOMMU_DEVICE) &&
1751         object_dynamic_cast((Object *)dev, "vfio-pci")) {
1752         intel_iommu = INTEL_IOMMU_DEVICE(iommu);
1753         if (!intel_iommu->caching_mode) {
1754             error_setg(errp, "Device assignment is not allowed without "
1755                        "enabling caching-mode=on for Intel IOMMU.");
1756             return false;
1757         }
1758     }
1759 
1760     return true;
1761 }
1762 
1763 static void pc_machine_class_init(ObjectClass *oc, void *data)
1764 {
1765     MachineClass *mc = MACHINE_CLASS(oc);
1766     X86MachineClass *x86mc = X86_MACHINE_CLASS(oc);
1767     PCMachineClass *pcmc = PC_MACHINE_CLASS(oc);
1768     HotplugHandlerClass *hc = HOTPLUG_HANDLER_CLASS(oc);
1769 
1770     pcmc->pci_enabled = true;
1771     pcmc->has_acpi_build = true;
1772     pcmc->smbios_defaults = true;
1773     pcmc->gigabyte_align = true;
1774     pcmc->has_reserved_memory = true;
1775     pcmc->enforce_amd_1tb_hole = true;
1776     pcmc->isa_bios_alias = true;
1777     pcmc->pvh_enabled = true;
1778     pcmc->kvmclock_create_always = true;
1779     x86mc->apic_xrupt_override = true;
1780     assert(!mc->get_hotplug_handler);
1781     mc->get_hotplug_handler = pc_get_hotplug_handler;
1782     mc->hotplug_allowed = pc_hotplug_allowed;
1783     mc->auto_enable_numa_with_memhp = true;
1784     mc->auto_enable_numa_with_memdev = true;
1785     mc->has_hotpluggable_cpus = true;
1786     mc->default_boot_order = "cad";
1787     mc->block_default_type = IF_IDE;
1788     mc->max_cpus = 255;
1789     mc->reset = pc_machine_reset;
1790     mc->wakeup = pc_machine_wakeup;
1791     hc->pre_plug = pc_machine_device_pre_plug_cb;
1792     hc->plug = pc_machine_device_plug_cb;
1793     hc->unplug_request = pc_machine_device_unplug_request_cb;
1794     hc->unplug = pc_machine_device_unplug_cb;
1795     mc->default_cpu_type = TARGET_DEFAULT_CPU_TYPE;
1796     mc->nvdimm_supported = true;
1797     mc->smp_props.dies_supported = true;
1798     mc->smp_props.modules_supported = true;
1799     mc->default_ram_id = "pc.ram";
1800     pcmc->default_smbios_ep_type = SMBIOS_ENTRY_POINT_TYPE_AUTO;
1801 
1802     object_class_property_add(oc, PC_MACHINE_MAX_RAM_BELOW_4G, "size",
1803         pc_machine_get_max_ram_below_4g, pc_machine_set_max_ram_below_4g,
1804         NULL, NULL);
1805     object_class_property_set_description(oc, PC_MACHINE_MAX_RAM_BELOW_4G,
1806         "Maximum ram below the 4G boundary (32bit boundary)");
1807 
1808     object_class_property_add(oc, PC_MACHINE_VMPORT, "OnOffAuto",
1809         pc_machine_get_vmport, pc_machine_set_vmport,
1810         NULL, NULL);
1811     object_class_property_set_description(oc, PC_MACHINE_VMPORT,
1812         "Enable vmport (pc & q35)");
1813 
1814     object_class_property_add_bool(oc, PC_MACHINE_SMBUS,
1815         pc_machine_get_smbus, pc_machine_set_smbus);
1816     object_class_property_set_description(oc, PC_MACHINE_SMBUS,
1817         "Enable/disable system management bus");
1818 
1819     object_class_property_add_bool(oc, PC_MACHINE_SATA,
1820         pc_machine_get_sata, pc_machine_set_sata);
1821     object_class_property_set_description(oc, PC_MACHINE_SATA,
1822         "Enable/disable Serial ATA bus");
1823 
1824     object_class_property_add_bool(oc, "hpet",
1825         pc_machine_get_hpet, pc_machine_set_hpet);
1826     object_class_property_set_description(oc, "hpet",
1827         "Enable/disable high precision event timer emulation");
1828 
1829     object_class_property_add_bool(oc, PC_MACHINE_I8042,
1830         pc_machine_get_i8042, pc_machine_set_i8042);
1831     object_class_property_set_description(oc, PC_MACHINE_I8042,
1832         "Enable/disable Intel 8042 PS/2 controller emulation");
1833 
1834     object_class_property_add_bool(oc, "default-bus-bypass-iommu",
1835         pc_machine_get_default_bus_bypass_iommu,
1836         pc_machine_set_default_bus_bypass_iommu);
1837 
1838     object_class_property_add(oc, PC_MACHINE_MAX_FW_SIZE, "size",
1839         pc_machine_get_max_fw_size, pc_machine_set_max_fw_size,
1840         NULL, NULL);
1841     object_class_property_set_description(oc, PC_MACHINE_MAX_FW_SIZE,
1842         "Maximum combined firmware size");
1843 
1844     object_class_property_add(oc, PC_MACHINE_SMBIOS_EP, "str",
1845         pc_machine_get_smbios_ep, pc_machine_set_smbios_ep,
1846         NULL, NULL);
1847     object_class_property_set_description(oc, PC_MACHINE_SMBIOS_EP,
1848         "SMBIOS Entry Point type [32, 64]");
1849 
1850     object_class_property_add_bool(oc, "fd-bootchk",
1851         pc_machine_get_fd_bootchk,
1852         pc_machine_set_fd_bootchk);
1853 }
1854 
1855 static const TypeInfo pc_machine_info = {
1856     .name = TYPE_PC_MACHINE,
1857     .parent = TYPE_X86_MACHINE,
1858     .abstract = true,
1859     .instance_size = sizeof(PCMachineState),
1860     .instance_init = pc_machine_initfn,
1861     .class_size = sizeof(PCMachineClass),
1862     .class_init = pc_machine_class_init,
1863     .interfaces = (InterfaceInfo[]) {
1864          { TYPE_HOTPLUG_HANDLER },
1865          { }
1866     },
1867 };
1868 
1869 static void pc_machine_register_types(void)
1870 {
1871     type_register_static(&pc_machine_info);
1872 }
1873 
1874 type_init(pc_machine_register_types)
1875