arch/s390/kvm/interrupt.c

   1 // SPDX-License-Identifier: GPL-2.0
   2 /*
   3  * handling kvm guest interrupts
   4  *
   5  * Copyright IBM Corp. 2008, 2015
   6  *
   7  *    Author(s): Carsten Otte <cotte@de.ibm.com>
   8  */
   9
  10 #include <linux/interrupt.h>
  11 #include <linux/kvm_host.h>
  12 #include <linux/hrtimer.h>
  13 #include <linux/mmu_context.h>
  14 #include <linux/signal.h>
  15 #include <linux/slab.h>
  16 #include <linux/bitmap.h>
  17 #include <linux/vmalloc.h>
  18 #include <asm/asm-offsets.h>
  19 #include <asm/dis.h>
  20 #include <linux/uaccess.h>
  21 #include <asm/sclp.h>
  22 #include <asm/isc.h>
  23 #include <asm/gmap.h>
  24 #include <asm/switch_to.h>
  25 #include <asm/nmi.h>
  26 #include "kvm-s390.h"
  27 #include "gaccess.h"
  28 #include "trace-s390.h"
  29
  30 #define PFAULT_INIT 0x0600
  31 #define PFAULT_DONE 0x0680
  32 #define VIRTIO_PARAM 0x0d00
  33
  34 /* handle external calls via sigp interpretation facility */
  35 static int sca_ext_call_pending(struct kvm_vcpu *vcpu, int *src_id)
  36 {
  37         int c, scn;
  38
  39         if (!kvm_s390_test_cpuflags(vcpu, CPUSTAT_ECALL_PEND))
  40                 return 0;
  41
  42         BUG_ON(!kvm_s390_use_sca_entries());
  43         read_lock(&vcpu->kvm->arch.sca_lock);
  44         if (vcpu->kvm->arch.use_esca) {
  45                 struct esca_block *sca = vcpu->kvm->arch.sca;
  46                 union esca_sigp_ctrl sigp_ctrl =
  47                         sca->cpu[vcpu->vcpu_id].sigp_ctrl;
  48
  49                 c = sigp_ctrl.c;
  50                 scn = sigp_ctrl.scn;
  51         } else {
  52                 struct bsca_block *sca = vcpu->kvm->arch.sca;
  53                 union bsca_sigp_ctrl sigp_ctrl =
  54                         sca->cpu[vcpu->vcpu_id].sigp_ctrl;
  55
  56                 c = sigp_ctrl.c;
  57                 scn = sigp_ctrl.scn;
  58         }
  59         read_unlock(&vcpu->kvm->arch.sca_lock);
  60
  61         if (src_id)
  62                 *src_id = scn;
  63
  64         return c;
  65 }
  66
  67 static int sca_inject_ext_call(struct kvm_vcpu *vcpu, int src_id)
  68 {
  69         int expect, rc;
  70
  71         BUG_ON(!kvm_s390_use_sca_entries());
  72         read_lock(&vcpu->kvm->arch.sca_lock);
  73         if (vcpu->kvm->arch.use_esca) {
  74                 struct esca_block *sca = vcpu->kvm->arch.sca;
  75                 union esca_sigp_ctrl *sigp_ctrl =
  76                         &(sca->cpu[vcpu->vcpu_id].sigp_ctrl);
  77                 union esca_sigp_ctrl new_val = {0}, old_val = *sigp_ctrl;
  78
  79                 new_val.scn = src_id;
  80                 new_val.c = 1;
  81                 old_val.c = 0;
  82
  83                 expect = old_val.value;
  84                 rc = cmpxchg(&sigp_ctrl->value, old_val.value, new_val.value);
  85         } else {
  86                 struct bsca_block *sca = vcpu->kvm->arch.sca;
  87                 union bsca_sigp_ctrl *sigp_ctrl =
  88                         &(sca->cpu[vcpu->vcpu_id].sigp_ctrl);
  89                 union bsca_sigp_ctrl new_val = {0}, old_val = *sigp_ctrl;
  90
  91                 new_val.scn = src_id;
  92                 new_val.c = 1;
  93                 old_val.c = 0;
  94
  95                 expect = old_val.value;
  96                 rc = cmpxchg(&sigp_ctrl->value, old_val.value, new_val.value);
  97         }
  98         read_unlock(&vcpu->kvm->arch.sca_lock);
  99
 100         if (rc != expect) {
 101                 /* another external call is pending */
 102                 return -EBUSY;
 103         }
 104         kvm_s390_set_cpuflags(vcpu, CPUSTAT_ECALL_PEND);
 105         return 0;
 106 }
 107
 108 static void sca_clear_ext_call(struct kvm_vcpu *vcpu)
 109 {
 110         int rc, expect;
 111
 112         if (!kvm_s390_use_sca_entries())
 113                 return;
 114         kvm_s390_clear_cpuflags(vcpu, CPUSTAT_ECALL_PEND);
 115         read_lock(&vcpu->kvm->arch.sca_lock);
 116         if (vcpu->kvm->arch.use_esca) {
 117                 struct esca_block *sca = vcpu->kvm->arch.sca;
 118                 union esca_sigp_ctrl *sigp_ctrl =
 119                         &(sca->cpu[vcpu->vcpu_id].sigp_ctrl);
 120                 union esca_sigp_ctrl old = *sigp_ctrl;
 121
 122                 expect = old.value;
 123                 rc = cmpxchg(&sigp_ctrl->value, old.value, 0);
 124         } else {
 125                 struct bsca_block *sca = vcpu->kvm->arch.sca;
 126                 union bsca_sigp_ctrl *sigp_ctrl =
 127                         &(sca->cpu[vcpu->vcpu_id].sigp_ctrl);
 128                 union bsca_sigp_ctrl old = *sigp_ctrl;
 129
 130                 expect = old.value;
 131                 rc = cmpxchg(&sigp_ctrl->value, old.value, 0);
 132         }
 133         read_unlock(&vcpu->kvm->arch.sca_lock);
 134         WARN_ON(rc != expect); /* cannot clear? */
 135 }
 136
 137 int psw_extint_disabled(struct kvm_vcpu *vcpu)
 138 {
 139         return !(vcpu->arch.sie_block->gpsw.mask & PSW_MASK_EXT);
 140 }
 141
 142 static int psw_ioint_disabled(struct kvm_vcpu *vcpu)
 143 {
 144         return !(vcpu->arch.sie_block->gpsw.mask & PSW_MASK_IO);
 145 }
 146
 147 static int psw_mchk_disabled(struct kvm_vcpu *vcpu)
 148 {
 149         return !(vcpu->arch.sie_block->gpsw.mask & PSW_MASK_MCHECK);
 150 }
 151
 152 static int psw_interrupts_disabled(struct kvm_vcpu *vcpu)
 153 {
 154         return psw_extint_disabled(vcpu) &&
 155                psw_ioint_disabled(vcpu) &&
 156                psw_mchk_disabled(vcpu);
 157 }
 158
 159 static int ckc_interrupts_enabled(struct kvm_vcpu *vcpu)
 160 {
 161         if (psw_extint_disabled(vcpu) ||
 162             !(vcpu->arch.sie_block->gcr[0] & 0x800ul))
 163                 return 0;
 164         if (guestdbg_enabled(vcpu) && guestdbg_sstep_enabled(vcpu))
 165                 /* No timer interrupts when single stepping */
 166                 return 0;
 167         return 1;
 168 }
 169
 170 static int ckc_irq_pending(struct kvm_vcpu *vcpu)
 171 {
 172         if (vcpu->arch.sie_block->ckc >= kvm_s390_get_tod_clock_fast(vcpu->kvm))
 173                 return 0;
 174         return ckc_interrupts_enabled(vcpu);
 175 }
 176
 177 static int cpu_timer_interrupts_enabled(struct kvm_vcpu *vcpu)
 178 {
 179         return !psw_extint_disabled(vcpu) &&
 180                (vcpu->arch.sie_block->gcr[0] & 0x400ul);
 181 }
 182
 183 static int cpu_timer_irq_pending(struct kvm_vcpu *vcpu)
 184 {
 185         if (!cpu_timer_interrupts_enabled(vcpu))
 186                 return 0;
 187         return kvm_s390_get_cpu_timer(vcpu) >> 63;
 188 }
 189
 190 static uint64_t isc_to_isc_bits(int isc)
 191 {
 192         return (0x80 >> isc) << 24;
 193 }
 194
 195 static inline u32 isc_to_int_word(u8 isc)
 196 {
 197         return ((u32)isc << 27) | 0x80000000;
 198 }
 199
 200 static inline u8 int_word_to_isc(u32 int_word)
 201 {
 202         return (int_word & 0x38000000) >> 27;
 203 }
 204
 205 /*
 206  * To use atomic bitmap functions, we have to provide a bitmap address
 207  * that is u64 aligned. However, the ipm might be u32 aligned.
 208  * Therefore, we logically start the bitmap at the very beginning of the
 209  * struct and fixup the bit number.
 210  */
 211 #define IPM_BIT_OFFSET (offsetof(struct kvm_s390_gisa, ipm) * BITS_PER_BYTE)
 212
 213 static inline void kvm_s390_gisa_set_ipm_gisc(struct kvm_s390_gisa *gisa, u32 gisc)
 214 {
 215         set_bit_inv(IPM_BIT_OFFSET + gisc, (unsigned long *) gisa);
 216 }
 217
 218 static inline u8 kvm_s390_gisa_get_ipm(struct kvm_s390_gisa *gisa)
 219 {
 220         return READ_ONCE(gisa->ipm);
 221 }
 222
 223 static inline void kvm_s390_gisa_clear_ipm_gisc(struct kvm_s390_gisa *gisa, u32 gisc)
 224 {
 225         clear_bit_inv(IPM_BIT_OFFSET + gisc, (unsigned long *) gisa);
 226 }
 227
 228 static inline int kvm_s390_gisa_tac_ipm_gisc(struct kvm_s390_gisa *gisa, u32 gisc)
 229 {
 230         return test_and_clear_bit_inv(IPM_BIT_OFFSET + gisc, (unsigned long *) gisa);
 231 }
 232
 233 static inline unsigned long pending_irqs_no_gisa(struct kvm_vcpu *vcpu)
 234 {
 235         return vcpu->kvm->arch.float_int.pending_irqs |
 236                 vcpu->arch.local_int.pending_irqs;
 237 }
 238
 239 static inline unsigned long pending_irqs(struct kvm_vcpu *vcpu)
 240 {
 241         return pending_irqs_no_gisa(vcpu) |
 242                 kvm_s390_gisa_get_ipm(vcpu->kvm->arch.gisa) << IRQ_PEND_IO_ISC_7;
 243 }
 244
 245 static inline int isc_to_irq_type(unsigned long isc)
 246 {
 247         return IRQ_PEND_IO_ISC_0 - isc;
 248 }
 249
 250 static inline int irq_type_to_isc(unsigned long irq_type)
 251 {
 252         return IRQ_PEND_IO_ISC_0 - irq_type;
 253 }
 254
 255 static unsigned long disable_iscs(struct kvm_vcpu *vcpu,
 256                                    unsigned long active_mask)
 257 {
 258         int i;
 259
 260         for (i = 0; i <= MAX_ISC; i++)
 261                 if (!(vcpu->arch.sie_block->gcr[6] & isc_to_isc_bits(i)))
 262                         active_mask &= ~(1UL << (isc_to_irq_type(i)));
 263
 264         return active_mask;
 265 }
 266
 267 static unsigned long deliverable_irqs(struct kvm_vcpu *vcpu)
 268 {
 269         unsigned long active_mask;
 270
 271         active_mask = pending_irqs(vcpu);
 272         if (!active_mask)
 273                 return 0;
 274
 275         if (psw_extint_disabled(vcpu))
 276                 active_mask &= ~IRQ_PEND_EXT_MASK;
 277         if (psw_ioint_disabled(vcpu))
 278                 active_mask &= ~IRQ_PEND_IO_MASK;
 279         else
 280                 active_mask = disable_iscs(vcpu, active_mask);
 281         if (!(vcpu->arch.sie_block->gcr[0] & 0x2000ul))
 282                 __clear_bit(IRQ_PEND_EXT_EXTERNAL, &active_mask);
 283         if (!(vcpu->arch.sie_block->gcr[0] & 0x4000ul))
 284                 __clear_bit(IRQ_PEND_EXT_EMERGENCY, &active_mask);
 285         if (!(vcpu->arch.sie_block->gcr[0] & 0x800ul))
 286                 __clear_bit(IRQ_PEND_EXT_CLOCK_COMP, &active_mask);
 287         if (!(vcpu->arch.sie_block->gcr[0] & 0x400ul))
 288                 __clear_bit(IRQ_PEND_EXT_CPU_TIMER, &active_mask);
 289         if (!(vcpu->arch.sie_block->gcr[0] & 0x200ul))
 290                 __clear_bit(IRQ_PEND_EXT_SERVICE, &active_mask);
 291         if (psw_mchk_disabled(vcpu))
 292                 active_mask &= ~IRQ_PEND_MCHK_MASK;
 293         /*
 294          * Check both floating and local interrupt's cr14 because
 295          * bit IRQ_PEND_MCHK_REP could be set in both cases.
 296          */
 297         if (!(vcpu->arch.sie_block->gcr[14] &
 298            (vcpu->kvm->arch.float_int.mchk.cr14 |
 299            vcpu->arch.local_int.irq.mchk.cr14)))
 300                 __clear_bit(IRQ_PEND_MCHK_REP, &active_mask);
 301
 302         /*
 303          * STOP irqs will never be actively delivered. They are triggered via
 304          * intercept requests and cleared when the stop intercept is performed.
 305          */
 306         __clear_bit(IRQ_PEND_SIGP_STOP, &active_mask);
 307
 308         return active_mask;
 309 }
 310
 311 static void __set_cpu_idle(struct kvm_vcpu *vcpu)
 312 {
 313         kvm_s390_set_cpuflags(vcpu, CPUSTAT_WAIT);
 314         set_bit(vcpu->vcpu_id, vcpu->kvm->arch.float_int.idle_mask);
 315 }
 316
 317 static void __unset_cpu_idle(struct kvm_vcpu *vcpu)
 318 {
 319         kvm_s390_clear_cpuflags(vcpu, CPUSTAT_WAIT);
 320         clear_bit(vcpu->vcpu_id, vcpu->kvm->arch.float_int.idle_mask);
 321 }
 322
 323 static void __reset_intercept_indicators(struct kvm_vcpu *vcpu)
 324 {
 325         kvm_s390_clear_cpuflags(vcpu, CPUSTAT_IO_INT | CPUSTAT_EXT_INT |
 326                                       CPUSTAT_STOP_INT);
 327         vcpu->arch.sie_block->lctl = 0x0000;
 328         vcpu->arch.sie_block->ictl &= ~(ICTL_LPSW | ICTL_STCTL | ICTL_PINT);
 329
 330         if (guestdbg_enabled(vcpu)) {
 331                 vcpu->arch.sie_block->lctl |= (LCTL_CR0 | LCTL_CR9 |
 332                                                LCTL_CR10 | LCTL_CR11);
 333                 vcpu->arch.sie_block->ictl |= (ICTL_STCTL | ICTL_PINT);
 334         }
 335 }
 336
 337 static void set_intercept_indicators_io(struct kvm_vcpu *vcpu)
 338 {
 339         if (!(pending_irqs_no_gisa(vcpu) & IRQ_PEND_IO_MASK))
 340                 return;
 341         else if (psw_ioint_disabled(vcpu))
 342                 kvm_s390_set_cpuflags(vcpu, CPUSTAT_IO_INT);
 343         else
 344                 vcpu->arch.sie_block->lctl |= LCTL_CR6;
 345 }
 346
 347 static void set_intercept_indicators_ext(struct kvm_vcpu *vcpu)
 348 {
 349         if (!(pending_irqs(vcpu) & IRQ_PEND_EXT_MASK))
 350                 return;
 351         if (psw_extint_disabled(vcpu))
 352                 kvm_s390_set_cpuflags(vcpu, CPUSTAT_EXT_INT);
 353         else
 354                 vcpu->arch.sie_block->lctl |= LCTL_CR0;
 355 }
 356
 357 static void set_intercept_indicators_mchk(struct kvm_vcpu *vcpu)
 358 {
 359         if (!(pending_irqs(vcpu) & IRQ_PEND_MCHK_MASK))
 360                 return;
 361         if (psw_mchk_disabled(vcpu))
 362                 vcpu->arch.sie_block->ictl |= ICTL_LPSW;
 363         else
 364                 vcpu->arch.sie_block->lctl |= LCTL_CR14;
 365 }
 366
 367 static void set_intercept_indicators_stop(struct kvm_vcpu *vcpu)
 368 {
 369         if (kvm_s390_is_stop_irq_pending(vcpu))
 370                 kvm_s390_set_cpuflags(vcpu, CPUSTAT_STOP_INT);
 371 }
 372
 373 /* Set interception request for non-deliverable interrupts */
 374 static void set_intercept_indicators(struct kvm_vcpu *vcpu)
 375 {
 376         set_intercept_indicators_io(vcpu);
 377         set_intercept_indicators_ext(vcpu);
 378         set_intercept_indicators_mchk(vcpu);
 379         set_intercept_indicators_stop(vcpu);
 380 }
 381
 382 static int __must_check __deliver_cpu_timer(struct kvm_vcpu *vcpu)
 383 {
 384         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 385         int rc;
 386
 387         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_CPU_TIMER,
 388                                          0, 0);
 389
 390         rc  = put_guest_lc(vcpu, EXT_IRQ_CPU_TIMER,
 391                            (u16 *)__LC_EXT_INT_CODE);
 392         rc |= put_guest_lc(vcpu, 0, (u16 *)__LC_EXT_CPU_ADDR);
 393         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 394                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 395         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
 396                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 397         clear_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
 398         return rc ? -EFAULT : 0;
 399 }
 400
 401 static int __must_check __deliver_ckc(struct kvm_vcpu *vcpu)
 402 {
 403         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 404         int rc;
 405
 406         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_CLOCK_COMP,
 407                                          0, 0);
 408
 409         rc  = put_guest_lc(vcpu, EXT_IRQ_CLK_COMP,
 410                            (u16 __user *)__LC_EXT_INT_CODE);
 411         rc |= put_guest_lc(vcpu, 0, (u16 *)__LC_EXT_CPU_ADDR);
 412         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 413                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 414         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
 415                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 416         clear_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
 417         return rc ? -EFAULT : 0;
 418 }
 419
 420 static int __must_check __deliver_pfault_init(struct kvm_vcpu *vcpu)
 421 {
 422         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 423         struct kvm_s390_ext_info ext;
 424         int rc;
 425
 426         spin_lock(&li->lock);
 427         ext = li->irq.ext;
 428         clear_bit(IRQ_PEND_PFAULT_INIT, &li->pending_irqs);
 429         li->irq.ext.ext_params2 = 0;
 430         spin_unlock(&li->lock);
 431
 432         VCPU_EVENT(vcpu, 4, "deliver: pfault init token 0x%llx",
 433                    ext.ext_params2);
 434         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
 435                                          KVM_S390_INT_PFAULT_INIT,
 436                                          0, ext.ext_params2);
 437
 438         rc  = put_guest_lc(vcpu, EXT_IRQ_CP_SERVICE, (u16 *) __LC_EXT_INT_CODE);
 439         rc |= put_guest_lc(vcpu, PFAULT_INIT, (u16 *) __LC_EXT_CPU_ADDR);
 440         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 441                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 442         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
 443                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 444         rc |= put_guest_lc(vcpu, ext.ext_params2, (u64 *) __LC_EXT_PARAMS2);
 445         return rc ? -EFAULT : 0;
 446 }
 447
 448 static int __write_machine_check(struct kvm_vcpu *vcpu,
 449                                  struct kvm_s390_mchk_info *mchk)
 450 {
 451         unsigned long ext_sa_addr;
 452         unsigned long lc;
 453         freg_t fprs[NUM_FPRS];
 454         union mci mci;
 455         int rc;
 456
 457         mci.val = mchk->mcic;
 458         /* take care of lazy register loading */
 459         save_fpu_regs();
 460         save_access_regs(vcpu->run->s.regs.acrs);
 461         if (MACHINE_HAS_GS && vcpu->arch.gs_enabled)
 462                 save_gs_cb(current->thread.gs_cb);
 463
 464         /* Extended save area */
 465         rc = read_guest_lc(vcpu, __LC_MCESAD, &ext_sa_addr,
 466                            sizeof(unsigned long));
 467         /* Only bits 0 through 63-LC are used for address formation */
 468         lc = ext_sa_addr & MCESA_LC_MASK;
 469         if (test_kvm_facility(vcpu->kvm, 133)) {
 470                 switch (lc) {
 471                 case 0:
 472                 case 10:
 473                         ext_sa_addr &= ~0x3ffUL;
 474                         break;
 475                 case 11:
 476                         ext_sa_addr &= ~0x7ffUL;
 477                         break;
 478                 case 12:
 479                         ext_sa_addr &= ~0xfffUL;
 480                         break;
 481                 default:
 482                         ext_sa_addr = 0;
 483                         break;
 484                 }
 485         } else {
 486                 ext_sa_addr &= ~0x3ffUL;
 487         }
 488
 489         if (!rc && mci.vr && ext_sa_addr && test_kvm_facility(vcpu->kvm, 129)) {
 490                 if (write_guest_abs(vcpu, ext_sa_addr, vcpu->run->s.regs.vrs,
 491                                     512))
 492                         mci.vr = 0;
 493         } else {
 494                 mci.vr = 0;
 495         }
 496         if (!rc && mci.gs && ext_sa_addr && test_kvm_facility(vcpu->kvm, 133)
 497             && (lc == 11 || lc == 12)) {
 498                 if (write_guest_abs(vcpu, ext_sa_addr + 1024,
 499                                     &vcpu->run->s.regs.gscb, 32))
 500                         mci.gs = 0;
 501         } else {
 502                 mci.gs = 0;
 503         }
 504
 505         /* General interruption information */
 506         rc |= put_guest_lc(vcpu, 1, (u8 __user *) __LC_AR_MODE_ID);
 507         rc |= write_guest_lc(vcpu, __LC_MCK_OLD_PSW,
 508                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 509         rc |= read_guest_lc(vcpu, __LC_MCK_NEW_PSW,
 510                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 511         rc |= put_guest_lc(vcpu, mci.val, (u64 __user *) __LC_MCCK_CODE);
 512
 513         /* Register-save areas */
 514         if (MACHINE_HAS_VX) {
 515                 convert_vx_to_fp(fprs, (__vector128 *) vcpu->run->s.regs.vrs);
 516                 rc |= write_guest_lc(vcpu, __LC_FPREGS_SAVE_AREA, fprs, 128);
 517         } else {
 518                 rc |= write_guest_lc(vcpu, __LC_FPREGS_SAVE_AREA,
 519                                      vcpu->run->s.regs.fprs, 128);
 520         }
 521         rc |= write_guest_lc(vcpu, __LC_GPREGS_SAVE_AREA,
 522                              vcpu->run->s.regs.gprs, 128);
 523         rc |= put_guest_lc(vcpu, current->thread.fpu.fpc,
 524                            (u32 __user *) __LC_FP_CREG_SAVE_AREA);
 525         rc |= put_guest_lc(vcpu, vcpu->arch.sie_block->todpr,
 526                            (u32 __user *) __LC_TOD_PROGREG_SAVE_AREA);
 527         rc |= put_guest_lc(vcpu, kvm_s390_get_cpu_timer(vcpu),
 528                            (u64 __user *) __LC_CPU_TIMER_SAVE_AREA);
 529         rc |= put_guest_lc(vcpu, vcpu->arch.sie_block->ckc >> 8,
 530                            (u64 __user *) __LC_CLOCK_COMP_SAVE_AREA);
 531         rc |= write_guest_lc(vcpu, __LC_AREGS_SAVE_AREA,
 532                              &vcpu->run->s.regs.acrs, 64);
 533         rc |= write_guest_lc(vcpu, __LC_CREGS_SAVE_AREA,
 534                              &vcpu->arch.sie_block->gcr, 128);
 535
 536         /* Extended interruption information */
 537         rc |= put_guest_lc(vcpu, mchk->ext_damage_code,
 538                            (u32 __user *) __LC_EXT_DAMAGE_CODE);
 539         rc |= put_guest_lc(vcpu, mchk->failing_storage_address,
 540                            (u64 __user *) __LC_MCCK_FAIL_STOR_ADDR);
 541         rc |= write_guest_lc(vcpu, __LC_PSW_SAVE_AREA, &mchk->fixed_logout,
 542                              sizeof(mchk->fixed_logout));
 543         return rc ? -EFAULT : 0;
 544 }
 545
 546 static int __must_check __deliver_machine_check(struct kvm_vcpu *vcpu)
 547 {
 548         struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
 549         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 550         struct kvm_s390_mchk_info mchk = {};
 551         int deliver = 0;
 552         int rc = 0;
 553
 554         spin_lock(&fi->lock);
 555         spin_lock(&li->lock);
 556         if (test_bit(IRQ_PEND_MCHK_EX, &li->pending_irqs) ||
 557             test_bit(IRQ_PEND_MCHK_REP, &li->pending_irqs)) {
 558                 /*
 559                  * If there was an exigent machine check pending, then any
 560                  * repressible machine checks that might have been pending
 561                  * are indicated along with it, so always clear bits for
 562                  * repressible and exigent interrupts
 563                  */
 564                 mchk = li->irq.mchk;
 565                 clear_bit(IRQ_PEND_MCHK_EX, &li->pending_irqs);
 566                 clear_bit(IRQ_PEND_MCHK_REP, &li->pending_irqs);
 567                 memset(&li->irq.mchk, 0, sizeof(mchk));
 568                 deliver = 1;
 569         }
 570         /*
 571          * We indicate floating repressible conditions along with
 572          * other pending conditions. Channel Report Pending and Channel
 573          * Subsystem damage are the only two and and are indicated by
 574          * bits in mcic and masked in cr14.
 575          */
 576         if (test_and_clear_bit(IRQ_PEND_MCHK_REP, &fi->pending_irqs)) {
 577                 mchk.mcic |= fi->mchk.mcic;
 578                 mchk.cr14 |= fi->mchk.cr14;
 579                 memset(&fi->mchk, 0, sizeof(mchk));
 580                 deliver = 1;
 581         }
 582         spin_unlock(&li->lock);
 583         spin_unlock(&fi->lock);
 584
 585         if (deliver) {
 586                 VCPU_EVENT(vcpu, 3, "deliver: machine check mcic 0x%llx",
 587                            mchk.mcic);
 588                 trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
 589                                                  KVM_S390_MCHK,
 590                                                  mchk.cr14, mchk.mcic);
 591                 rc = __write_machine_check(vcpu, &mchk);
 592         }
 593         return rc;
 594 }
 595
 596 static int __must_check __deliver_restart(struct kvm_vcpu *vcpu)
 597 {
 598         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 599         int rc;
 600
 601         VCPU_EVENT(vcpu, 3, "%s", "deliver: cpu restart");
 602         vcpu->stat.deliver_restart_signal++;
 603         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_RESTART, 0, 0);
 604
 605         rc  = write_guest_lc(vcpu,
 606                              offsetof(struct lowcore, restart_old_psw),
 607                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 608         rc |= read_guest_lc(vcpu, offsetof(struct lowcore, restart_psw),
 609                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 610         clear_bit(IRQ_PEND_RESTART, &li->pending_irqs);
 611         return rc ? -EFAULT : 0;
 612 }
 613
 614 static int __must_check __deliver_set_prefix(struct kvm_vcpu *vcpu)
 615 {
 616         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 617         struct kvm_s390_prefix_info prefix;
 618
 619         spin_lock(&li->lock);
 620         prefix = li->irq.prefix;
 621         li->irq.prefix.address = 0;
 622         clear_bit(IRQ_PEND_SET_PREFIX, &li->pending_irqs);
 623         spin_unlock(&li->lock);
 624
 625         vcpu->stat.deliver_prefix_signal++;
 626         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
 627                                          KVM_S390_SIGP_SET_PREFIX,
 628                                          prefix.address, 0);
 629
 630         kvm_s390_set_prefix(vcpu, prefix.address);
 631         return 0;
 632 }
 633
 634 static int __must_check __deliver_emergency_signal(struct kvm_vcpu *vcpu)
 635 {
 636         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 637         int rc;
 638         int cpu_addr;
 639
 640         spin_lock(&li->lock);
 641         cpu_addr = find_first_bit(li->sigp_emerg_pending, KVM_MAX_VCPUS);
 642         clear_bit(cpu_addr, li->sigp_emerg_pending);
 643         if (bitmap_empty(li->sigp_emerg_pending, KVM_MAX_VCPUS))
 644                 clear_bit(IRQ_PEND_EXT_EMERGENCY, &li->pending_irqs);
 645         spin_unlock(&li->lock);
 646
 647         VCPU_EVENT(vcpu, 4, "%s", "deliver: sigp emerg");
 648         vcpu->stat.deliver_emergency_signal++;
 649         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_EMERGENCY,
 650                                          cpu_addr, 0);
 651
 652         rc  = put_guest_lc(vcpu, EXT_IRQ_EMERGENCY_SIG,
 653                            (u16 *)__LC_EXT_INT_CODE);
 654         rc |= put_guest_lc(vcpu, cpu_addr, (u16 *)__LC_EXT_CPU_ADDR);
 655         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 656                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 657         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
 658                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 659         return rc ? -EFAULT : 0;
 660 }
 661
 662 static int __must_check __deliver_external_call(struct kvm_vcpu *vcpu)
 663 {
 664         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 665         struct kvm_s390_extcall_info extcall;
 666         int rc;
 667
 668         spin_lock(&li->lock);
 669         extcall = li->irq.extcall;
 670         li->irq.extcall.code = 0;
 671         clear_bit(IRQ_PEND_EXT_EXTERNAL, &li->pending_irqs);
 672         spin_unlock(&li->lock);
 673
 674         VCPU_EVENT(vcpu, 4, "%s", "deliver: sigp ext call");
 675         vcpu->stat.deliver_external_call++;
 676         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
 677                                          KVM_S390_INT_EXTERNAL_CALL,
 678                                          extcall.code, 0);
 679
 680         rc  = put_guest_lc(vcpu, EXT_IRQ_EXTERNAL_CALL,
 681                            (u16 *)__LC_EXT_INT_CODE);
 682         rc |= put_guest_lc(vcpu, extcall.code, (u16 *)__LC_EXT_CPU_ADDR);
 683         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 684                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 685         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW, &vcpu->arch.sie_block->gpsw,
 686                             sizeof(psw_t));
 687         return rc ? -EFAULT : 0;
 688 }
 689
 690 static int __must_check __deliver_prog(struct kvm_vcpu *vcpu)
 691 {
 692         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 693         struct kvm_s390_pgm_info pgm_info;
 694         int rc = 0, nullifying = false;
 695         u16 ilen;
 696
 697         spin_lock(&li->lock);
 698         pgm_info = li->irq.pgm;
 699         clear_bit(IRQ_PEND_PROG, &li->pending_irqs);
 700         memset(&li->irq.pgm, 0, sizeof(pgm_info));
 701         spin_unlock(&li->lock);
 702
 703         ilen = pgm_info.flags & KVM_S390_PGM_FLAGS_ILC_MASK;
 704         VCPU_EVENT(vcpu, 3, "deliver: program irq code 0x%x, ilen:%d",
 705                    pgm_info.code, ilen);
 706         vcpu->stat.deliver_program_int++;
 707         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_PROGRAM_INT,
 708                                          pgm_info.code, 0);
 709
 710         switch (pgm_info.code & ~PGM_PER) {
 711         case PGM_AFX_TRANSLATION:
 712         case PGM_ASX_TRANSLATION:
 713         case PGM_EX_TRANSLATION:
 714         case PGM_LFX_TRANSLATION:
 715         case PGM_LSTE_SEQUENCE:
 716         case PGM_LSX_TRANSLATION:
 717         case PGM_LX_TRANSLATION:
 718         case PGM_PRIMARY_AUTHORITY:
 719         case PGM_SECONDARY_AUTHORITY:
 720                 nullifying = true;
 721                 /* fall through */
 722         case PGM_SPACE_SWITCH:
 723                 rc = put_guest_lc(vcpu, pgm_info.trans_exc_code,
 724                                   (u64 *)__LC_TRANS_EXC_CODE);
 725                 break;
 726         case PGM_ALEN_TRANSLATION:
 727         case PGM_ALE_SEQUENCE:
 728         case PGM_ASTE_INSTANCE:
 729         case PGM_ASTE_SEQUENCE:
 730         case PGM_ASTE_VALIDITY:
 731         case PGM_EXTENDED_AUTHORITY:
 732                 rc = put_guest_lc(vcpu, pgm_info.exc_access_id,
 733                                   (u8 *)__LC_EXC_ACCESS_ID);
 734                 nullifying = true;
 735                 break;
 736         case PGM_ASCE_TYPE:
 737         case PGM_PAGE_TRANSLATION:
 738         case PGM_REGION_FIRST_TRANS:
 739         case PGM_REGION_SECOND_TRANS:
 740         case PGM_REGION_THIRD_TRANS:
 741         case PGM_SEGMENT_TRANSLATION:
 742                 rc = put_guest_lc(vcpu, pgm_info.trans_exc_code,
 743                                   (u64 *)__LC_TRANS_EXC_CODE);
 744                 rc |= put_guest_lc(vcpu, pgm_info.exc_access_id,
 745                                    (u8 *)__LC_EXC_ACCESS_ID);
 746                 rc |= put_guest_lc(vcpu, pgm_info.op_access_id,
 747                                    (u8 *)__LC_OP_ACCESS_ID);
 748                 nullifying = true;
 749                 break;
 750         case PGM_MONITOR:
 751                 rc = put_guest_lc(vcpu, pgm_info.mon_class_nr,
 752                                   (u16 *)__LC_MON_CLASS_NR);
 753                 rc |= put_guest_lc(vcpu, pgm_info.mon_code,
 754                                    (u64 *)__LC_MON_CODE);
 755                 break;
 756         case PGM_VECTOR_PROCESSING:
 757         case PGM_DATA:
 758                 rc = put_guest_lc(vcpu, pgm_info.data_exc_code,
 759                                   (u32 *)__LC_DATA_EXC_CODE);
 760                 break;
 761         case PGM_PROTECTION:
 762                 rc = put_guest_lc(vcpu, pgm_info.trans_exc_code,
 763                                   (u64 *)__LC_TRANS_EXC_CODE);
 764                 rc |= put_guest_lc(vcpu, pgm_info.exc_access_id,
 765                                    (u8 *)__LC_EXC_ACCESS_ID);
 766                 break;
 767         case PGM_STACK_FULL:
 768         case PGM_STACK_EMPTY:
 769         case PGM_STACK_SPECIFICATION:
 770         case PGM_STACK_TYPE:
 771         case PGM_STACK_OPERATION:
 772         case PGM_TRACE_TABEL:
 773         case PGM_CRYPTO_OPERATION:
 774                 nullifying = true;
 775                 break;
 776         }
 777
 778         if (pgm_info.code & PGM_PER) {
 779                 rc |= put_guest_lc(vcpu, pgm_info.per_code,
 780                                    (u8 *) __LC_PER_CODE);
 781                 rc |= put_guest_lc(vcpu, pgm_info.per_atmid,
 782                                    (u8 *)__LC_PER_ATMID);
 783                 rc |= put_guest_lc(vcpu, pgm_info.per_address,
 784                                    (u64 *) __LC_PER_ADDRESS);
 785                 rc |= put_guest_lc(vcpu, pgm_info.per_access_id,
 786                                    (u8 *) __LC_PER_ACCESS_ID);
 787         }
 788
 789         if (nullifying && !(pgm_info.flags & KVM_S390_PGM_FLAGS_NO_REWIND))
 790                 kvm_s390_rewind_psw(vcpu, ilen);
 791
 792         /* bit 1+2 of the target are the ilc, so we can directly use ilen */
 793         rc |= put_guest_lc(vcpu, ilen, (u16 *) __LC_PGM_ILC);
 794         rc |= put_guest_lc(vcpu, vcpu->arch.sie_block->gbea,
 795                                  (u64 *) __LC_LAST_BREAK);
 796         rc |= put_guest_lc(vcpu, pgm_info.code,
 797                            (u16 *)__LC_PGM_INT_CODE);
 798         rc |= write_guest_lc(vcpu, __LC_PGM_OLD_PSW,
 799                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 800         rc |= read_guest_lc(vcpu, __LC_PGM_NEW_PSW,
 801                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 802         return rc ? -EFAULT : 0;
 803 }
 804
 805 static int __must_check __deliver_service(struct kvm_vcpu *vcpu)
 806 {
 807         struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
 808         struct kvm_s390_ext_info ext;
 809         int rc = 0;
 810
 811         spin_lock(&fi->lock);
 812         if (!(test_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs))) {
 813                 spin_unlock(&fi->lock);
 814                 return 0;
 815         }
 816         ext = fi->srv_signal;
 817         memset(&fi->srv_signal, 0, sizeof(ext));
 818         clear_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs);
 819         spin_unlock(&fi->lock);
 820
 821         VCPU_EVENT(vcpu, 4, "deliver: sclp parameter 0x%x",
 822                    ext.ext_params);
 823         vcpu->stat.deliver_service_signal++;
 824         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_SERVICE,
 825                                          ext.ext_params, 0);
 826
 827         rc  = put_guest_lc(vcpu, EXT_IRQ_SERVICE_SIG, (u16 *)__LC_EXT_INT_CODE);
 828         rc |= put_guest_lc(vcpu, 0, (u16 *)__LC_EXT_CPU_ADDR);
 829         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 830                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 831         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
 832                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 833         rc |= put_guest_lc(vcpu, ext.ext_params,
 834                            (u32 *)__LC_EXT_PARAMS);
 835
 836         return rc ? -EFAULT : 0;
 837 }
 838
 839 static int __must_check __deliver_pfault_done(struct kvm_vcpu *vcpu)
 840 {
 841         struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
 842         struct kvm_s390_interrupt_info *inti;
 843         int rc = 0;
 844
 845         spin_lock(&fi->lock);
 846         inti = list_first_entry_or_null(&fi->lists[FIRQ_LIST_PFAULT],
 847                                         struct kvm_s390_interrupt_info,
 848                                         list);
 849         if (inti) {
 850                 list_del(&inti->list);
 851                 fi->counters[FIRQ_CNTR_PFAULT] -= 1;
 852         }
 853         if (list_empty(&fi->lists[FIRQ_LIST_PFAULT]))
 854                 clear_bit(IRQ_PEND_PFAULT_DONE, &fi->pending_irqs);
 855         spin_unlock(&fi->lock);
 856
 857         if (inti) {
 858                 trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
 859                                                  KVM_S390_INT_PFAULT_DONE, 0,
 860                                                  inti->ext.ext_params2);
 861                 VCPU_EVENT(vcpu, 4, "deliver: pfault done token 0x%llx",
 862                            inti->ext.ext_params2);
 863
 864                 rc  = put_guest_lc(vcpu, EXT_IRQ_CP_SERVICE,
 865                                 (u16 *)__LC_EXT_INT_CODE);
 866                 rc |= put_guest_lc(vcpu, PFAULT_DONE,
 867                                 (u16 *)__LC_EXT_CPU_ADDR);
 868                 rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 869                                 &vcpu->arch.sie_block->gpsw,
 870                                 sizeof(psw_t));
 871                 rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
 872                                 &vcpu->arch.sie_block->gpsw,
 873                                 sizeof(psw_t));
 874                 rc |= put_guest_lc(vcpu, inti->ext.ext_params2,
 875                                 (u64 *)__LC_EXT_PARAMS2);
 876                 kfree(inti);
 877         }
 878         return rc ? -EFAULT : 0;
 879 }
 880
 881 static int __must_check __deliver_virtio(struct kvm_vcpu *vcpu)
 882 {
 883         struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
 884         struct kvm_s390_interrupt_info *inti;
 885         int rc = 0;
 886
 887         spin_lock(&fi->lock);
 888         inti = list_first_entry_or_null(&fi->lists[FIRQ_LIST_VIRTIO],
 889                                         struct kvm_s390_interrupt_info,
 890                                         list);
 891         if (inti) {
 892                 VCPU_EVENT(vcpu, 4,
 893                            "deliver: virtio parm: 0x%x,parm64: 0x%llx",
 894                            inti->ext.ext_params, inti->ext.ext_params2);
 895                 vcpu->stat.deliver_virtio_interrupt++;
 896                 trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
 897                                 inti->type,
 898                                 inti->ext.ext_params,
 899                                 inti->ext.ext_params2);
 900                 list_del(&inti->list);
 901                 fi->counters[FIRQ_CNTR_VIRTIO] -= 1;
 902         }
 903         if (list_empty(&fi->lists[FIRQ_LIST_VIRTIO]))
 904                 clear_bit(IRQ_PEND_VIRTIO, &fi->pending_irqs);
 905         spin_unlock(&fi->lock);
 906
 907         if (inti) {
 908                 rc  = put_guest_lc(vcpu, EXT_IRQ_CP_SERVICE,
 909                                 (u16 *)__LC_EXT_INT_CODE);
 910                 rc |= put_guest_lc(vcpu, VIRTIO_PARAM,
 911                                 (u16 *)__LC_EXT_CPU_ADDR);
 912                 rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 913                                 &vcpu->arch.sie_block->gpsw,
 914                                 sizeof(psw_t));
 915                 rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
 916                                 &vcpu->arch.sie_block->gpsw,
 917                                 sizeof(psw_t));
 918                 rc |= put_guest_lc(vcpu, inti->ext.ext_params,
 919                                 (u32 *)__LC_EXT_PARAMS);
 920                 rc |= put_guest_lc(vcpu, inti->ext.ext_params2,
 921                                 (u64 *)__LC_EXT_PARAMS2);
 922                 kfree(inti);
 923         }
 924         return rc ? -EFAULT : 0;
 925 }
 926
 927 static int __do_deliver_io(struct kvm_vcpu *vcpu, struct kvm_s390_io_info *io)
 928 {
 929         int rc;
 930
 931         rc  = put_guest_lc(vcpu, io->subchannel_id, (u16 *)__LC_SUBCHANNEL_ID);
 932         rc |= put_guest_lc(vcpu, io->subchannel_nr, (u16 *)__LC_SUBCHANNEL_NR);
 933         rc |= put_guest_lc(vcpu, io->io_int_parm, (u32 *)__LC_IO_INT_PARM);
 934         rc |= put_guest_lc(vcpu, io->io_int_word, (u32 *)__LC_IO_INT_WORD);
 935         rc |= write_guest_lc(vcpu, __LC_IO_OLD_PSW,
 936                              &vcpu->arch.sie_block->gpsw,
 937                              sizeof(psw_t));
 938         rc |= read_guest_lc(vcpu, __LC_IO_NEW_PSW,
 939                             &vcpu->arch.sie_block->gpsw,
 940                             sizeof(psw_t));
 941         return rc ? -EFAULT : 0;
 942 }
 943
 944 static int __must_check __deliver_io(struct kvm_vcpu *vcpu,
 945                                      unsigned long irq_type)
 946 {
 947         struct list_head *isc_list;
 948         struct kvm_s390_float_interrupt *fi;
 949         struct kvm_s390_interrupt_info *inti = NULL;
 950         struct kvm_s390_io_info io;
 951         u32 isc;
 952         int rc = 0;
 953
 954         fi = &vcpu->kvm->arch.float_int;
 955
 956         spin_lock(&fi->lock);
 957         isc = irq_type_to_isc(irq_type);
 958         isc_list = &fi->lists[isc];
 959         inti = list_first_entry_or_null(isc_list,
 960                                         struct kvm_s390_interrupt_info,
 961                                         list);
 962         if (inti) {
 963                 if (inti->type & KVM_S390_INT_IO_AI_MASK)
 964                         VCPU_EVENT(vcpu, 4, "%s", "deliver: I/O (AI)");
 965                 else
 966                         VCPU_EVENT(vcpu, 4, "deliver: I/O %x ss %x schid %04x",
 967                         inti->io.subchannel_id >> 8,
 968                         inti->io.subchannel_id >> 1 & 0x3,
 969                         inti->io.subchannel_nr);
 970
 971                 vcpu->stat.deliver_io_int++;
 972                 trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
 973                                 inti->type,
 974                                 ((__u32)inti->io.subchannel_id << 16) |
 975                                 inti->io.subchannel_nr,
 976                                 ((__u64)inti->io.io_int_parm << 32) |
 977                                 inti->io.io_int_word);
 978                 list_del(&inti->list);
 979                 fi->counters[FIRQ_CNTR_IO] -= 1;
 980         }
 981         if (list_empty(isc_list))
 982                 clear_bit(irq_type, &fi->pending_irqs);
 983         spin_unlock(&fi->lock);
 984
 985         if (inti) {
 986                 rc = __do_deliver_io(vcpu, &(inti->io));
 987                 kfree(inti);
 988                 goto out;
 989         }
 990
 991         if (vcpu->kvm->arch.gisa &&
 992             kvm_s390_gisa_tac_ipm_gisc(vcpu->kvm->arch.gisa, isc)) {
 993                 /*
 994                  * in case an adapter interrupt was not delivered
 995                  * in SIE context KVM will handle the delivery
 996                  */
 997                 VCPU_EVENT(vcpu, 4, "%s isc %u", "deliver: I/O (AI/gisa)", isc);
 998                 memset(&io, 0, sizeof(io));
 999                 io.io_int_word = isc_to_int_word(isc);
1000                 vcpu->stat.deliver_io_int++;
1001                 trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
1002                         KVM_S390_INT_IO(1, 0, 0, 0),
1003                         ((__u32)io.subchannel_id << 16) |
1004                         io.subchannel_nr,
1005                         ((__u64)io.io_int_parm << 32) |
1006                         io.io_int_word);
1007                 rc = __do_deliver_io(vcpu, &io);
1008         }
1009 out:
1010         return rc;
1011 }
1012
1013 /* Check whether an external call is pending (deliverable or not) */
1014 int kvm_s390_ext_call_pending(struct kvm_vcpu *vcpu)
1015 {
1016         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1017
1018         if (!sclp.has_sigpif)
1019                 return test_bit(IRQ_PEND_EXT_EXTERNAL, &li->pending_irqs);
1020
1021         return sca_ext_call_pending(vcpu, NULL);
1022 }
1023
1024 int kvm_s390_vcpu_has_irq(struct kvm_vcpu *vcpu, int exclude_stop)
1025 {
1026         if (deliverable_irqs(vcpu))
1027                 return 1;
1028
1029         if (kvm_cpu_has_pending_timer(vcpu))
1030                 return 1;
1031
1032         /* external call pending and deliverable */
1033         if (kvm_s390_ext_call_pending(vcpu) &&
1034             !psw_extint_disabled(vcpu) &&
1035             (vcpu->arch.sie_block->gcr[0] & 0x2000ul))
1036                 return 1;
1037
1038         if (!exclude_stop && kvm_s390_is_stop_irq_pending(vcpu))
1039                 return 1;
1040         return 0;
1041 }
1042
1043 int kvm_cpu_has_pending_timer(struct kvm_vcpu *vcpu)
1044 {
1045         return ckc_irq_pending(vcpu) || cpu_timer_irq_pending(vcpu);
1046 }
1047
1048 static u64 __calculate_sltime(struct kvm_vcpu *vcpu)
1049 {
1050         u64 now, cputm, sltime = 0;
1051
1052         if (ckc_interrupts_enabled(vcpu)) {
1053                 now = kvm_s390_get_tod_clock_fast(vcpu->kvm);
1054                 sltime = tod_to_ns(vcpu->arch.sie_block->ckc - now);
1055                 /* already expired or overflow? */
1056                 if (!sltime || vcpu->arch.sie_block->ckc <= now)
1057                         return 0;
1058                 if (cpu_timer_interrupts_enabled(vcpu)) {
1059                         cputm = kvm_s390_get_cpu_timer(vcpu);
1060                         /* already expired? */
1061                         if (cputm >> 63)
1062                                 return 0;
1063                         return min(sltime, tod_to_ns(cputm));
1064                 }
1065         } else if (cpu_timer_interrupts_enabled(vcpu)) {
1066                 sltime = kvm_s390_get_cpu_timer(vcpu);
1067                 /* already expired? */
1068                 if (sltime >> 63)
1069                         return 0;
1070         }
1071         return sltime;
1072 }
1073
1074 int kvm_s390_handle_wait(struct kvm_vcpu *vcpu)
1075 {
1076         u64 sltime;
1077
1078         vcpu->stat.exit_wait_state++;
1079
1080         /* fast path */
1081         if (kvm_arch_vcpu_runnable(vcpu))
1082                 return 0;
1083
1084         if (psw_interrupts_disabled(vcpu)) {
1085                 VCPU_EVENT(vcpu, 3, "%s", "disabled wait");
1086                 return -EOPNOTSUPP; /* disabled wait */
1087         }
1088
1089         if (!ckc_interrupts_enabled(vcpu) &&
1090             !cpu_timer_interrupts_enabled(vcpu)) {
1091                 VCPU_EVENT(vcpu, 3, "%s", "enabled wait w/o timer");
1092                 __set_cpu_idle(vcpu);
1093                 goto no_timer;
1094         }
1095
1096         sltime = __calculate_sltime(vcpu);
1097         if (!sltime)
1098                 return 0;
1099
1100         __set_cpu_idle(vcpu);
1101         hrtimer_start(&vcpu->arch.ckc_timer, sltime, HRTIMER_MODE_REL);
1102         VCPU_EVENT(vcpu, 4, "enabled wait: %llu ns", sltime);
1103 no_timer:
1104         srcu_read_unlock(&vcpu->kvm->srcu, vcpu->srcu_idx);
1105         kvm_vcpu_block(vcpu);
1106         __unset_cpu_idle(vcpu);
1107         vcpu->srcu_idx = srcu_read_lock(&vcpu->kvm->srcu);
1108
1109         hrtimer_cancel(&vcpu->arch.ckc_timer);
1110         return 0;
1111 }
1112
1113 void kvm_s390_vcpu_wakeup(struct kvm_vcpu *vcpu)
1114 {
1115         /*
1116          * We cannot move this into the if, as the CPU might be already
1117          * in kvm_vcpu_block without having the waitqueue set (polling)
1118          */
1119         vcpu->valid_wakeup = true;
1120         /*
1121          * This is mostly to document, that the read in swait_active could
1122          * be moved before other stores, leading to subtle races.
1123          * All current users do not store or use an atomic like update
1124          */
1125         smp_mb__after_atomic();
1126         if (swait_active(&vcpu->wq)) {
1127                 /*
1128                  * The vcpu gave up the cpu voluntarily, mark it as a good
1129                  * yield-candidate.
1130                  */
1131                 vcpu->preempted = true;
1132                 swake_up(&vcpu->wq);
1133                 vcpu->stat.halt_wakeup++;
1134         }
1135         /*
1136          * The VCPU might not be sleeping but is executing the VSIE. Let's
1137          * kick it, so it leaves the SIE to process the request.
1138          */
1139         kvm_s390_vsie_kick(vcpu);
1140 }
1141
1142 enum hrtimer_restart kvm_s390_idle_wakeup(struct hrtimer *timer)
1143 {
1144         struct kvm_vcpu *vcpu;
1145         u64 sltime;
1146
1147         vcpu = container_of(timer, struct kvm_vcpu, arch.ckc_timer);
1148         sltime = __calculate_sltime(vcpu);
1149
1150         /*
1151          * If the monotonic clock runs faster than the tod clock we might be
1152          * woken up too early and have to go back to sleep to avoid deadlocks.
1153          */
1154         if (sltime && hrtimer_forward_now(timer, ns_to_ktime(sltime)))
1155                 return HRTIMER_RESTART;
1156         kvm_s390_vcpu_wakeup(vcpu);
1157         return HRTIMER_NORESTART;
1158 }
1159
1160 void kvm_s390_clear_local_irqs(struct kvm_vcpu *vcpu)
1161 {
1162         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1163
1164         spin_lock(&li->lock);
1165         li->pending_irqs = 0;
1166         bitmap_zero(li->sigp_emerg_pending, KVM_MAX_VCPUS);
1167         memset(&li->irq, 0, sizeof(li->irq));
1168         spin_unlock(&li->lock);
1169
1170         sca_clear_ext_call(vcpu);
1171 }
1172
1173 int __must_check kvm_s390_deliver_pending_interrupts(struct kvm_vcpu *vcpu)
1174 {
1175         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1176         int rc = 0;
1177         unsigned long irq_type;
1178         unsigned long irqs;
1179
1180         __reset_intercept_indicators(vcpu);
1181
1182         /* pending ckc conditions might have been invalidated */
1183         clear_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
1184         if (ckc_irq_pending(vcpu))
1185                 set_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
1186
1187         /* pending cpu timer conditions might have been invalidated */
1188         clear_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
1189         if (cpu_timer_irq_pending(vcpu))
1190                 set_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
1191
1192         while ((irqs = deliverable_irqs(vcpu)) && !rc) {
1193                 /* bits are in the reverse order of interrupt priority */
1194                 irq_type = find_last_bit(&irqs, IRQ_PEND_COUNT);
1195                 switch (irq_type) {
1196                 case IRQ_PEND_IO_ISC_0:
1197                 case IRQ_PEND_IO_ISC_1:
1198                 case IRQ_PEND_IO_ISC_2:
1199                 case IRQ_PEND_IO_ISC_3:
1200                 case IRQ_PEND_IO_ISC_4:
1201                 case IRQ_PEND_IO_ISC_5:
1202                 case IRQ_PEND_IO_ISC_6:
1203                 case IRQ_PEND_IO_ISC_7:
1204                         rc = __deliver_io(vcpu, irq_type);
1205                         break;
1206                 case IRQ_PEND_MCHK_EX:
1207                 case IRQ_PEND_MCHK_REP:
1208                         rc = __deliver_machine_check(vcpu);
1209                         break;
1210                 case IRQ_PEND_PROG:
1211                         rc = __deliver_prog(vcpu);
1212                         break;
1213                 case IRQ_PEND_EXT_EMERGENCY:
1214                         rc = __deliver_emergency_signal(vcpu);
1215                         break;
1216                 case IRQ_PEND_EXT_EXTERNAL:
1217                         rc = __deliver_external_call(vcpu);
1218                         break;
1219                 case IRQ_PEND_EXT_CLOCK_COMP:
1220                         rc = __deliver_ckc(vcpu);
1221                         break;
1222                 case IRQ_PEND_EXT_CPU_TIMER:
1223                         rc = __deliver_cpu_timer(vcpu);
1224                         break;
1225                 case IRQ_PEND_RESTART:
1226                         rc = __deliver_restart(vcpu);
1227                         break;
1228                 case IRQ_PEND_SET_PREFIX:
1229                         rc = __deliver_set_prefix(vcpu);
1230                         break;
1231                 case IRQ_PEND_PFAULT_INIT:
1232                         rc = __deliver_pfault_init(vcpu);
1233                         break;
1234                 case IRQ_PEND_EXT_SERVICE:
1235                         rc = __deliver_service(vcpu);
1236                         break;
1237                 case IRQ_PEND_PFAULT_DONE:
1238                         rc = __deliver_pfault_done(vcpu);
1239                         break;
1240                 case IRQ_PEND_VIRTIO:
1241                         rc = __deliver_virtio(vcpu);
1242                         break;
1243                 default:
1244                         WARN_ONCE(1, "Unknown pending irq type %ld", irq_type);
1245                         clear_bit(irq_type, &li->pending_irqs);
1246                 }
1247         }
1248
1249         set_intercept_indicators(vcpu);
1250
1251         return rc;
1252 }
1253
1254 static int __inject_prog(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1255 {
1256         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1257
1258         VCPU_EVENT(vcpu, 3, "inject: program irq code 0x%x", irq->u.pgm.code);
1259         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_PROGRAM_INT,
1260                                    irq->u.pgm.code, 0);
1261
1262         if (!(irq->u.pgm.flags & KVM_S390_PGM_FLAGS_ILC_VALID)) {
1263                 /* auto detection if no valid ILC was given */
1264                 irq->u.pgm.flags &= ~KVM_S390_PGM_FLAGS_ILC_MASK;
1265                 irq->u.pgm.flags |= kvm_s390_get_ilen(vcpu);
1266                 irq->u.pgm.flags |= KVM_S390_PGM_FLAGS_ILC_VALID;
1267         }
1268
1269         if (irq->u.pgm.code == PGM_PER) {
1270                 li->irq.pgm.code |= PGM_PER;
1271                 li->irq.pgm.flags = irq->u.pgm.flags;
1272                 /* only modify PER related information */
1273                 li->irq.pgm.per_address = irq->u.pgm.per_address;
1274                 li->irq.pgm.per_code = irq->u.pgm.per_code;
1275                 li->irq.pgm.per_atmid = irq->u.pgm.per_atmid;
1276                 li->irq.pgm.per_access_id = irq->u.pgm.per_access_id;
1277         } else if (!(irq->u.pgm.code & PGM_PER)) {
1278                 li->irq.pgm.code = (li->irq.pgm.code & PGM_PER) |
1279                                    irq->u.pgm.code;
1280                 li->irq.pgm.flags = irq->u.pgm.flags;
1281                 /* only modify non-PER information */
1282                 li->irq.pgm.trans_exc_code = irq->u.pgm.trans_exc_code;
1283                 li->irq.pgm.mon_code = irq->u.pgm.mon_code;
1284                 li->irq.pgm.data_exc_code = irq->u.pgm.data_exc_code;
1285                 li->irq.pgm.mon_class_nr = irq->u.pgm.mon_class_nr;
1286                 li->irq.pgm.exc_access_id = irq->u.pgm.exc_access_id;
1287                 li->irq.pgm.op_access_id = irq->u.pgm.op_access_id;
1288         } else {
1289                 li->irq.pgm = irq->u.pgm;
1290         }
1291         set_bit(IRQ_PEND_PROG, &li->pending_irqs);
1292         return 0;
1293 }
1294
1295 static int __inject_pfault_init(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1296 {
1297         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1298
1299         VCPU_EVENT(vcpu, 4, "inject: pfault init parameter block at 0x%llx",
1300                    irq->u.ext.ext_params2);
1301         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_PFAULT_INIT,
1302                                    irq->u.ext.ext_params,
1303                                    irq->u.ext.ext_params2);
1304
1305         li->irq.ext = irq->u.ext;
1306         set_bit(IRQ_PEND_PFAULT_INIT, &li->pending_irqs);
1307         kvm_s390_set_cpuflags(vcpu, CPUSTAT_EXT_INT);
1308         return 0;
1309 }
1310
1311 static int __inject_extcall(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1312 {
1313         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1314         struct kvm_s390_extcall_info *extcall = &li->irq.extcall;
1315         uint16_t src_id = irq->u.extcall.code;
1316
1317         VCPU_EVENT(vcpu, 4, "inject: external call source-cpu:%u",
1318                    src_id);
1319         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_EXTERNAL_CALL,
1320                                    src_id, 0);
1321
1322         /* sending vcpu invalid */
1323         if (kvm_get_vcpu_by_id(vcpu->kvm, src_id) == NULL)
1324                 return -EINVAL;
1325
1326         if (sclp.has_sigpif)
1327                 return sca_inject_ext_call(vcpu, src_id);
1328
1329         if (test_and_set_bit(IRQ_PEND_EXT_EXTERNAL, &li->pending_irqs))
1330                 return -EBUSY;
1331         *extcall = irq->u.extcall;
1332         kvm_s390_set_cpuflags(vcpu, CPUSTAT_EXT_INT);
1333         return 0;
1334 }
1335
1336 static int __inject_set_prefix(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1337 {
1338         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1339         struct kvm_s390_prefix_info *prefix = &li->irq.prefix;
1340
1341         VCPU_EVENT(vcpu, 3, "inject: set prefix to %x",
1342                    irq->u.prefix.address);
1343         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_SIGP_SET_PREFIX,
1344                                    irq->u.prefix.address, 0);
1345
1346         if (!is_vcpu_stopped(vcpu))
1347                 return -EBUSY;
1348
1349         *prefix = irq->u.prefix;
1350         set_bit(IRQ_PEND_SET_PREFIX, &li->pending_irqs);
1351         return 0;
1352 }
1353
1354 #define KVM_S390_STOP_SUPP_FLAGS (KVM_S390_STOP_FLAG_STORE_STATUS)
1355 static int __inject_sigp_stop(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1356 {
1357         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1358         struct kvm_s390_stop_info *stop = &li->irq.stop;
1359         int rc = 0;
1360
1361         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_SIGP_STOP, 0, 0);
1362
1363         if (irq->u.stop.flags & ~KVM_S390_STOP_SUPP_FLAGS)
1364                 return -EINVAL;
1365
1366         if (is_vcpu_stopped(vcpu)) {
1367                 if (irq->u.stop.flags & KVM_S390_STOP_FLAG_STORE_STATUS)
1368                         rc = kvm_s390_store_status_unloaded(vcpu,
1369                                                 KVM_S390_STORE_STATUS_NOADDR);
1370                 return rc;
1371         }
1372
1373         if (test_and_set_bit(IRQ_PEND_SIGP_STOP, &li->pending_irqs))
1374                 return -EBUSY;
1375         stop->flags = irq->u.stop.flags;
1376         kvm_s390_set_cpuflags(vcpu, CPUSTAT_STOP_INT);
1377         return 0;
1378 }
1379
1380 static int __inject_sigp_restart(struct kvm_vcpu *vcpu,
1381                                  struct kvm_s390_irq *irq)
1382 {
1383         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1384
1385         VCPU_EVENT(vcpu, 3, "%s", "inject: restart int");
1386         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_RESTART, 0, 0);
1387
1388         set_bit(IRQ_PEND_RESTART, &li->pending_irqs);
1389         return 0;
1390 }
1391
1392 static int __inject_sigp_emergency(struct kvm_vcpu *vcpu,
1393                                    struct kvm_s390_irq *irq)
1394 {
1395         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1396
1397         VCPU_EVENT(vcpu, 4, "inject: emergency from cpu %u",
1398                    irq->u.emerg.code);
1399         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_EMERGENCY,
1400                                    irq->u.emerg.code, 0);
1401
1402         /* sending vcpu invalid */
1403         if (kvm_get_vcpu_by_id(vcpu->kvm, irq->u.emerg.code) == NULL)
1404                 return -EINVAL;
1405
1406         set_bit(irq->u.emerg.code, li->sigp_emerg_pending);
1407         set_bit(IRQ_PEND_EXT_EMERGENCY, &li->pending_irqs);
1408         kvm_s390_set_cpuflags(vcpu, CPUSTAT_EXT_INT);
1409         return 0;
1410 }
1411
1412 static int __inject_mchk(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1413 {
1414         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1415         struct kvm_s390_mchk_info *mchk = &li->irq.mchk;
1416
1417         VCPU_EVENT(vcpu, 3, "inject: machine check mcic 0x%llx",
1418                    irq->u.mchk.mcic);
1419         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_MCHK, 0,
1420                                    irq->u.mchk.mcic);
1421
1422         /*
1423          * Because repressible machine checks can be indicated along with
1424          * exigent machine checks (PoP, Chapter 11, Interruption action)
1425          * we need to combine cr14, mcic and external damage code.
1426          * Failing storage address and the logout area should not be or'ed
1427          * together, we just indicate the last occurrence of the corresponding
1428          * machine check
1429          */
1430         mchk->cr14 |= irq->u.mchk.cr14;
1431         mchk->mcic |= irq->u.mchk.mcic;
1432         mchk->ext_damage_code |= irq->u.mchk.ext_damage_code;
1433         mchk->failing_storage_address = irq->u.mchk.failing_storage_address;
1434         memcpy(&mchk->fixed_logout, &irq->u.mchk.fixed_logout,
1435                sizeof(mchk->fixed_logout));
1436         if (mchk->mcic & MCHK_EX_MASK)
1437                 set_bit(IRQ_PEND_MCHK_EX, &li->pending_irqs);
1438         else if (mchk->mcic & MCHK_REP_MASK)
1439                 set_bit(IRQ_PEND_MCHK_REP,  &li->pending_irqs);
1440         return 0;
1441 }
1442
1443 static int __inject_ckc(struct kvm_vcpu *vcpu)
1444 {
1445         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1446
1447         VCPU_EVENT(vcpu, 3, "%s", "inject: clock comparator external");
1448         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_CLOCK_COMP,
1449                                    0, 0);
1450
1451         set_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
1452         kvm_s390_set_cpuflags(vcpu, CPUSTAT_EXT_INT);
1453         return 0;
1454 }
1455
1456 static int __inject_cpu_timer(struct kvm_vcpu *vcpu)
1457 {
1458         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1459
1460         VCPU_EVENT(vcpu, 3, "%s", "inject: cpu timer external");
1461         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_CPU_TIMER,
1462                                    0, 0);
1463
1464         set_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
1465         kvm_s390_set_cpuflags(vcpu, CPUSTAT_EXT_INT);
1466         return 0;
1467 }
1468
1469 static struct kvm_s390_interrupt_info *get_io_int(struct kvm *kvm,
1470                                                   int isc, u32 schid)
1471 {
1472         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1473         struct list_head *isc_list = &fi->lists[FIRQ_LIST_IO_ISC_0 + isc];
1474         struct kvm_s390_interrupt_info *iter;
1475         u16 id = (schid & 0xffff0000U) >> 16;
1476         u16 nr = schid & 0x0000ffffU;
1477
1478         spin_lock(&fi->lock);
1479         list_for_each_entry(iter, isc_list, list) {
1480                 if (schid && (id != iter->io.subchannel_id ||
1481                               nr != iter->io.subchannel_nr))
1482                         continue;
1483                 /* found an appropriate entry */
1484                 list_del_init(&iter->list);
1485                 fi->counters[FIRQ_CNTR_IO] -= 1;
1486                 if (list_empty(isc_list))
1487                         clear_bit(isc_to_irq_type(isc), &fi->pending_irqs);
1488                 spin_unlock(&fi->lock);
1489                 return iter;
1490         }
1491         spin_unlock(&fi->lock);
1492         return NULL;
1493 }
1494
1495 static struct kvm_s390_interrupt_info *get_top_io_int(struct kvm *kvm,
1496                                                       u64 isc_mask, u32 schid)
1497 {
1498         struct kvm_s390_interrupt_info *inti = NULL;
1499         int isc;
1500
1501         for (isc = 0; isc <= MAX_ISC && !inti; isc++) {
1502                 if (isc_mask & isc_to_isc_bits(isc))
1503                         inti = get_io_int(kvm, isc, schid);
1504         }
1505         return inti;
1506 }
1507
1508 static int get_top_gisa_isc(struct kvm *kvm, u64 isc_mask, u32 schid)
1509 {
1510         unsigned long active_mask;
1511         int isc;
1512
1513         if (schid)
1514                 goto out;
1515         if (!kvm->arch.gisa)
1516                 goto out;
1517
1518         active_mask = (isc_mask & kvm_s390_gisa_get_ipm(kvm->arch.gisa) << 24) << 32;
1519         while (active_mask) {
1520                 isc = __fls(active_mask) ^ (BITS_PER_LONG - 1);
1521                 if (kvm_s390_gisa_tac_ipm_gisc(kvm->arch.gisa, isc))
1522                         return isc;
1523                 clear_bit_inv(isc, &active_mask);
1524         }
1525 out:
1526         return -EINVAL;
1527 }
1528
1529 /*
1530  * Dequeue and return an I/O interrupt matching any of the interruption
1531  * subclasses as designated by the isc mask in cr6 and the schid (if != 0).
1532  * Take into account the interrupts pending in the interrupt list and in GISA.
1533  *
1534  * Note that for a guest that does not enable I/O interrupts
1535  * but relies on TPI, a flood of classic interrupts may starve
1536  * out adapter interrupts on the same isc. Linux does not do
1537  * that, and it is possible to work around the issue by configuring
1538  * different iscs for classic and adapter interrupts in the guest,
1539  * but we may want to revisit this in the future.
1540  */
1541 struct kvm_s390_interrupt_info *kvm_s390_get_io_int(struct kvm *kvm,
1542                                                     u64 isc_mask, u32 schid)
1543 {
1544         struct kvm_s390_interrupt_info *inti, *tmp_inti;
1545         int isc;
1546
1547         inti = get_top_io_int(kvm, isc_mask, schid);
1548
1549         isc = get_top_gisa_isc(kvm, isc_mask, schid);
1550         if (isc < 0)
1551                 /* no AI in GISA */
1552                 goto out;
1553
1554         if (!inti)
1555                 /* AI in GISA but no classical IO int */
1556                 goto gisa_out;
1557
1558         /* both types of interrupts present */
1559         if (int_word_to_isc(inti->io.io_int_word) <= isc) {
1560                 /* classical IO int with higher priority */
1561                 kvm_s390_gisa_set_ipm_gisc(kvm->arch.gisa, isc);
1562                 goto out;
1563         }
1564 gisa_out:
1565         tmp_inti = kzalloc(sizeof(*inti), GFP_KERNEL);
1566         if (tmp_inti) {
1567                 tmp_inti->type = KVM_S390_INT_IO(1, 0, 0, 0);
1568                 tmp_inti->io.io_int_word = isc_to_int_word(isc);
1569                 if (inti)
1570                         kvm_s390_reinject_io_int(kvm, inti);
1571                 inti = tmp_inti;
1572         } else
1573                 kvm_s390_gisa_set_ipm_gisc(kvm->arch.gisa, isc);
1574 out:
1575         return inti;
1576 }
1577
1578 #define SCCB_MASK 0xFFFFFFF8
1579 #define SCCB_EVENT_PENDING 0x3
1580
1581 static int __inject_service(struct kvm *kvm,
1582                              struct kvm_s390_interrupt_info *inti)
1583 {
1584         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1585
1586         spin_lock(&fi->lock);
1587         fi->srv_signal.ext_params |= inti->ext.ext_params & SCCB_EVENT_PENDING;
1588         /*
1589          * Early versions of the QEMU s390 bios will inject several
1590          * service interrupts after another without handling a
1591          * condition code indicating busy.
1592          * We will silently ignore those superfluous sccb values.
1593          * A future version of QEMU will take care of serialization
1594          * of servc requests
1595          */
1596         if (fi->srv_signal.ext_params & SCCB_MASK)
1597                 goto out;
1598         fi->srv_signal.ext_params |= inti->ext.ext_params & SCCB_MASK;
1599         set_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs);
1600 out:
1601         spin_unlock(&fi->lock);
1602         kfree(inti);
1603         return 0;
1604 }
1605
1606 static int __inject_virtio(struct kvm *kvm,
1607                             struct kvm_s390_interrupt_info *inti)
1608 {
1609         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1610
1611         spin_lock(&fi->lock);
1612         if (fi->counters[FIRQ_CNTR_VIRTIO] >= KVM_S390_MAX_VIRTIO_IRQS) {
1613                 spin_unlock(&fi->lock);
1614                 return -EBUSY;
1615         }
1616         fi->counters[FIRQ_CNTR_VIRTIO] += 1;
1617         list_add_tail(&inti->list, &fi->lists[FIRQ_LIST_VIRTIO]);
1618         set_bit(IRQ_PEND_VIRTIO, &fi->pending_irqs);
1619         spin_unlock(&fi->lock);
1620         return 0;
1621 }
1622
1623 static int __inject_pfault_done(struct kvm *kvm,
1624                                  struct kvm_s390_interrupt_info *inti)
1625 {
1626         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1627
1628         spin_lock(&fi->lock);
1629         if (fi->counters[FIRQ_CNTR_PFAULT] >=
1630                 (ASYNC_PF_PER_VCPU * KVM_MAX_VCPUS)) {
1631                 spin_unlock(&fi->lock);
1632                 return -EBUSY;
1633         }
1634         fi->counters[FIRQ_CNTR_PFAULT] += 1;
1635         list_add_tail(&inti->list, &fi->lists[FIRQ_LIST_PFAULT]);
1636         set_bit(IRQ_PEND_PFAULT_DONE, &fi->pending_irqs);
1637         spin_unlock(&fi->lock);
1638         return 0;
1639 }
1640
1641 #define CR_PENDING_SUBCLASS 28
1642 static int __inject_float_mchk(struct kvm *kvm,
1643                                 struct kvm_s390_interrupt_info *inti)
1644 {
1645         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1646
1647         spin_lock(&fi->lock);
1648         fi->mchk.cr14 |= inti->mchk.cr14 & (1UL << CR_PENDING_SUBCLASS);
1649         fi->mchk.mcic |= inti->mchk.mcic;
1650         set_bit(IRQ_PEND_MCHK_REP, &fi->pending_irqs);
1651         spin_unlock(&fi->lock);
1652         kfree(inti);
1653         return 0;
1654 }
1655
1656 static int __inject_io(struct kvm *kvm, struct kvm_s390_interrupt_info *inti)
1657 {
1658         struct kvm_s390_float_interrupt *fi;
1659         struct list_head *list;
1660         int isc;
1661
1662         isc = int_word_to_isc(inti->io.io_int_word);
1663
1664         if (kvm->arch.gisa && inti->type & KVM_S390_INT_IO_AI_MASK) {
1665                 VM_EVENT(kvm, 4, "%s isc %1u", "inject: I/O (AI/gisa)", isc);
1666                 kvm_s390_gisa_set_ipm_gisc(kvm->arch.gisa, isc);
1667                 kfree(inti);
1668                 return 0;
1669         }
1670
1671         fi = &kvm->arch.float_int;
1672         spin_lock(&fi->lock);
1673         if (fi->counters[FIRQ_CNTR_IO] >= KVM_S390_MAX_FLOAT_IRQS) {
1674                 spin_unlock(&fi->lock);
1675                 return -EBUSY;
1676         }
1677         fi->counters[FIRQ_CNTR_IO] += 1;
1678
1679         if (inti->type & KVM_S390_INT_IO_AI_MASK)
1680                 VM_EVENT(kvm, 4, "%s", "inject: I/O (AI)");
1681         else
1682                 VM_EVENT(kvm, 4, "inject: I/O %x ss %x schid %04x",
1683                         inti->io.subchannel_id >> 8,
1684                         inti->io.subchannel_id >> 1 & 0x3,
1685                         inti->io.subchannel_nr);
1686         list = &fi->lists[FIRQ_LIST_IO_ISC_0 + isc];
1687         list_add_tail(&inti->list, list);
1688         set_bit(isc_to_irq_type(isc), &fi->pending_irqs);
1689         spin_unlock(&fi->lock);
1690         return 0;
1691 }
1692
1693 /*
1694  * Find a destination VCPU for a floating irq and kick it.
1695  */
1696 static void __floating_irq_kick(struct kvm *kvm, u64 type)
1697 {
1698         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1699         struct kvm_vcpu *dst_vcpu;
1700         int sigcpu, online_vcpus, nr_tries = 0;
1701
1702         online_vcpus = atomic_read(&kvm->online_vcpus);
1703         if (!online_vcpus)
1704                 return;
1705
1706         /* find idle VCPUs first, then round robin */
1707         sigcpu = find_first_bit(fi->idle_mask, online_vcpus);
1708         if (sigcpu == online_vcpus) {
1709                 do {
1710                         sigcpu = fi->next_rr_cpu;
1711                         fi->next_rr_cpu = (fi->next_rr_cpu + 1) % online_vcpus;
1712                         /* avoid endless loops if all vcpus are stopped */
1713                         if (nr_tries++ >= online_vcpus)
1714                                 return;
1715                 } while (is_vcpu_stopped(kvm_get_vcpu(kvm, sigcpu)));
1716         }
1717         dst_vcpu = kvm_get_vcpu(kvm, sigcpu);
1718
1719         /* make the VCPU drop out of the SIE, or wake it up if sleeping */
1720         switch (type) {
1721         case KVM_S390_MCHK:
1722                 kvm_s390_set_cpuflags(dst_vcpu, CPUSTAT_STOP_INT);
1723                 break;
1724         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1725                 if (!(type & KVM_S390_INT_IO_AI_MASK && kvm->arch.gisa))
1726                         kvm_s390_set_cpuflags(dst_vcpu, CPUSTAT_IO_INT);
1727                 break;
1728         default:
1729                 kvm_s390_set_cpuflags(dst_vcpu, CPUSTAT_EXT_INT);
1730                 break;
1731         }
1732         kvm_s390_vcpu_wakeup(dst_vcpu);
1733 }
1734
1735 static int __inject_vm(struct kvm *kvm, struct kvm_s390_interrupt_info *inti)
1736 {
1737         u64 type = READ_ONCE(inti->type);
1738         int rc;
1739
1740         switch (type) {
1741         case KVM_S390_MCHK:
1742                 rc = __inject_float_mchk(kvm, inti);
1743                 break;
1744         case KVM_S390_INT_VIRTIO:
1745                 rc = __inject_virtio(kvm, inti);
1746                 break;
1747         case KVM_S390_INT_SERVICE:
1748                 rc = __inject_service(kvm, inti);
1749                 break;
1750         case KVM_S390_INT_PFAULT_DONE:
1751                 rc = __inject_pfault_done(kvm, inti);
1752                 break;
1753         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1754                 rc = __inject_io(kvm, inti);
1755                 break;
1756         default:
1757                 rc = -EINVAL;
1758         }
1759         if (rc)
1760                 return rc;
1761
1762         __floating_irq_kick(kvm, type);
1763         return 0;
1764 }
1765
1766 int kvm_s390_inject_vm(struct kvm *kvm,
1767                        struct kvm_s390_interrupt *s390int)
1768 {
1769         struct kvm_s390_interrupt_info *inti;
1770         int rc;
1771
1772         inti = kzalloc(sizeof(*inti), GFP_KERNEL);
1773         if (!inti)
1774                 return -ENOMEM;
1775
1776         inti->type = s390int->type;
1777         switch (inti->type) {
1778         case KVM_S390_INT_VIRTIO:
1779                 VM_EVENT(kvm, 5, "inject: virtio parm:%x,parm64:%llx",
1780                          s390int->parm, s390int->parm64);
1781                 inti->ext.ext_params = s390int->parm;
1782                 inti->ext.ext_params2 = s390int->parm64;
1783                 break;
1784         case KVM_S390_INT_SERVICE:
1785                 VM_EVENT(kvm, 4, "inject: sclp parm:%x", s390int->parm);
1786                 inti->ext.ext_params = s390int->parm;
1787                 break;
1788         case KVM_S390_INT_PFAULT_DONE:
1789                 inti->ext.ext_params2 = s390int->parm64;
1790                 break;
1791         case KVM_S390_MCHK:
1792                 VM_EVENT(kvm, 3, "inject: machine check mcic 0x%llx",
1793                          s390int->parm64);
1794                 inti->mchk.cr14 = s390int->parm; /* upper bits are not used */
1795                 inti->mchk.mcic = s390int->parm64;
1796                 break;
1797         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1798                 inti->io.subchannel_id = s390int->parm >> 16;
1799                 inti->io.subchannel_nr = s390int->parm & 0x0000ffffu;
1800                 inti->io.io_int_parm = s390int->parm64 >> 32;
1801                 inti->io.io_int_word = s390int->parm64 & 0x00000000ffffffffull;
1802                 break;
1803         default:
1804                 kfree(inti);
1805                 return -EINVAL;
1806         }
1807         trace_kvm_s390_inject_vm(s390int->type, s390int->parm, s390int->parm64,
1808                                  2);
1809
1810         rc = __inject_vm(kvm, inti);
1811         if (rc)
1812                 kfree(inti);
1813         return rc;
1814 }
1815
1816 int kvm_s390_reinject_io_int(struct kvm *kvm,
1817                               struct kvm_s390_interrupt_info *inti)
1818 {
1819         return __inject_vm(kvm, inti);
1820 }
1821
1822 int s390int_to_s390irq(struct kvm_s390_interrupt *s390int,
1823                        struct kvm_s390_irq *irq)
1824 {
1825         irq->type = s390int->type;
1826         switch (irq->type) {
1827         case KVM_S390_PROGRAM_INT:
1828                 if (s390int->parm & 0xffff0000)
1829                         return -EINVAL;
1830                 irq->u.pgm.code = s390int->parm;
1831                 break;
1832         case KVM_S390_SIGP_SET_PREFIX:
1833                 irq->u.prefix.address = s390int->parm;
1834                 break;
1835         case KVM_S390_SIGP_STOP:
1836                 irq->u.stop.flags = s390int->parm;
1837                 break;
1838         case KVM_S390_INT_EXTERNAL_CALL:
1839                 if (s390int->parm & 0xffff0000)
1840                         return -EINVAL;
1841                 irq->u.extcall.code = s390int->parm;
1842                 break;
1843         case KVM_S390_INT_EMERGENCY:
1844                 if (s390int->parm & 0xffff0000)
1845                         return -EINVAL;
1846                 irq->u.emerg.code = s390int->parm;
1847                 break;
1848         case KVM_S390_MCHK:
1849                 irq->u.mchk.mcic = s390int->parm64;
1850                 break;
1851         }
1852         return 0;
1853 }
1854
1855 int kvm_s390_is_stop_irq_pending(struct kvm_vcpu *vcpu)
1856 {
1857         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1858
1859         return test_bit(IRQ_PEND_SIGP_STOP, &li->pending_irqs);
1860 }
1861
1862 void kvm_s390_clear_stop_irq(struct kvm_vcpu *vcpu)
1863 {
1864         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1865
1866         spin_lock(&li->lock);
1867         li->irq.stop.flags = 0;
1868         clear_bit(IRQ_PEND_SIGP_STOP, &li->pending_irqs);
1869         spin_unlock(&li->lock);
1870 }
1871
1872 static int do_inject_vcpu(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1873 {
1874         int rc;
1875
1876         switch (irq->type) {
1877         case KVM_S390_PROGRAM_INT:
1878                 rc = __inject_prog(vcpu, irq);
1879                 break;
1880         case KVM_S390_SIGP_SET_PREFIX:
1881                 rc = __inject_set_prefix(vcpu, irq);
1882                 break;
1883         case KVM_S390_SIGP_STOP:
1884                 rc = __inject_sigp_stop(vcpu, irq);
1885                 break;
1886         case KVM_S390_RESTART:
1887                 rc = __inject_sigp_restart(vcpu, irq);
1888                 break;
1889         case KVM_S390_INT_CLOCK_COMP:
1890                 rc = __inject_ckc(vcpu);
1891                 break;
1892         case KVM_S390_INT_CPU_TIMER:
1893                 rc = __inject_cpu_timer(vcpu);
1894                 break;
1895         case KVM_S390_INT_EXTERNAL_CALL:
1896                 rc = __inject_extcall(vcpu, irq);
1897                 break;
1898         case KVM_S390_INT_EMERGENCY:
1899                 rc = __inject_sigp_emergency(vcpu, irq);
1900                 break;
1901         case KVM_S390_MCHK:
1902                 rc = __inject_mchk(vcpu, irq);
1903                 break;
1904         case KVM_S390_INT_PFAULT_INIT:
1905                 rc = __inject_pfault_init(vcpu, irq);
1906                 break;
1907         case KVM_S390_INT_VIRTIO:
1908         case KVM_S390_INT_SERVICE:
1909         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1910         default:
1911                 rc = -EINVAL;
1912         }
1913
1914         return rc;
1915 }
1916
1917 int kvm_s390_inject_vcpu(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1918 {
1919         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1920         int rc;
1921
1922         spin_lock(&li->lock);
1923         rc = do_inject_vcpu(vcpu, irq);
1924         spin_unlock(&li->lock);
1925         if (!rc)
1926                 kvm_s390_vcpu_wakeup(vcpu);
1927         return rc;
1928 }
1929
1930 static inline void clear_irq_list(struct list_head *_list)
1931 {
1932         struct kvm_s390_interrupt_info *inti, *n;
1933
1934         list_for_each_entry_safe(inti, n, _list, list) {
1935                 list_del(&inti->list);
1936                 kfree(inti);
1937         }
1938 }
1939
1940 static void inti_to_irq(struct kvm_s390_interrupt_info *inti,
1941                        struct kvm_s390_irq *irq)
1942 {
1943         irq->type = inti->type;
1944         switch (inti->type) {
1945         case KVM_S390_INT_PFAULT_INIT:
1946         case KVM_S390_INT_PFAULT_DONE:
1947         case KVM_S390_INT_VIRTIO:
1948                 irq->u.ext = inti->ext;
1949                 break;
1950         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1951                 irq->u.io = inti->io;
1952                 break;
1953         }
1954 }
1955
1956 void kvm_s390_clear_float_irqs(struct kvm *kvm)
1957 {
1958         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1959         int i;
1960
1961         spin_lock(&fi->lock);
1962         fi->pending_irqs = 0;
1963         memset(&fi->srv_signal, 0, sizeof(fi->srv_signal));
1964         memset(&fi->mchk, 0, sizeof(fi->mchk));
1965         for (i = 0; i < FIRQ_LIST_COUNT; i++)
1966                 clear_irq_list(&fi->lists[i]);
1967         for (i = 0; i < FIRQ_MAX_COUNT; i++)
1968                 fi->counters[i] = 0;
1969         spin_unlock(&fi->lock);
1970         kvm_s390_gisa_clear(kvm);
1971 };
1972
1973 static int get_all_floating_irqs(struct kvm *kvm, u8 __user *usrbuf, u64 len)
1974 {
1975         struct kvm_s390_interrupt_info *inti;
1976         struct kvm_s390_float_interrupt *fi;
1977         struct kvm_s390_irq *buf;
1978         struct kvm_s390_irq *irq;
1979         int max_irqs;
1980         int ret = 0;
1981         int n = 0;
1982         int i;
1983
1984         if (len > KVM_S390_FLIC_MAX_BUFFER || len == 0)
1985                 return -EINVAL;
1986
1987         /*
1988          * We are already using -ENOMEM to signal
1989          * userspace it may retry with a bigger buffer,
1990          * so we need to use something else for this case
1991          */
1992         buf = vzalloc(len);
1993         if (!buf)
1994                 return -ENOBUFS;
1995
1996         max_irqs = len / sizeof(struct kvm_s390_irq);
1997
1998         if (kvm->arch.gisa &&
1999             kvm_s390_gisa_get_ipm(kvm->arch.gisa)) {
2000                 for (i = 0; i <= MAX_ISC; i++) {
2001                         if (n == max_irqs) {
2002                                 /* signal userspace to try again */
2003                                 ret = -ENOMEM;
2004                                 goto out_nolock;
2005                         }
2006                         if (kvm_s390_gisa_tac_ipm_gisc(kvm->arch.gisa, i)) {
2007                                 irq = (struct kvm_s390_irq *) &buf[n];
2008                                 irq->type = KVM_S390_INT_IO(1, 0, 0, 0);
2009                                 irq->u.io.io_int_word = isc_to_int_word(i);
2010                                 n++;
2011                         }
2012                 }
2013         }
2014         fi = &kvm->arch.float_int;
2015         spin_lock(&fi->lock);
2016         for (i = 0; i < FIRQ_LIST_COUNT; i++) {
2017                 list_for_each_entry(inti, &fi->lists[i], list) {
2018                         if (n == max_irqs) {
2019                                 /* signal userspace to try again */
2020                                 ret = -ENOMEM;
2021                                 goto out;
2022                         }
2023                         inti_to_irq(inti, &buf[n]);
2024                         n++;
2025                 }
2026         }
2027         if (test_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs)) {
2028                 if (n == max_irqs) {
2029                         /* signal userspace to try again */
2030                         ret = -ENOMEM;
2031                         goto out;
2032                 }
2033                 irq = (struct kvm_s390_irq *) &buf[n];
2034                 irq->type = KVM_S390_INT_SERVICE;
2035                 irq->u.ext = fi->srv_signal;
2036                 n++;
2037         }
2038         if (test_bit(IRQ_PEND_MCHK_REP, &fi->pending_irqs)) {
2039                 if (n == max_irqs) {
2040                                 /* signal userspace to try again */
2041                                 ret = -ENOMEM;
2042                                 goto out;
2043                 }
2044                 irq = (struct kvm_s390_irq *) &buf[n];
2045                 irq->type = KVM_S390_MCHK;
2046                 irq->u.mchk = fi->mchk;
2047                 n++;
2048 }
2049
2050 out:
2051         spin_unlock(&fi->lock);
2052 out_nolock:
2053         if (!ret && n > 0) {
2054                 if (copy_to_user(usrbuf, buf, sizeof(struct kvm_s390_irq) * n))
2055                         ret = -EFAULT;
2056         }
2057         vfree(buf);
2058
2059         return ret < 0 ? ret : n;
2060 }
2061
2062 static int flic_ais_mode_get_all(struct kvm *kvm, struct kvm_device_attr *attr)
2063 {
2064         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
2065         struct kvm_s390_ais_all ais;
2066
2067         if (attr->attr < sizeof(ais))
2068                 return -EINVAL;
2069
2070         if (!test_kvm_facility(kvm, 72))
2071                 return -ENOTSUPP;
2072
2073         mutex_lock(&fi->ais_lock);
2074         ais.simm = fi->simm;
2075         ais.nimm = fi->nimm;
2076         mutex_unlock(&fi->ais_lock);
2077
2078         if (copy_to_user((void __user *)attr->addr, &ais, sizeof(ais)))
2079                 return -EFAULT;
2080
2081         return 0;
2082 }
2083
2084 static int flic_get_attr(struct kvm_device *dev, struct kvm_device_attr *attr)
2085 {
2086         int r;
2087
2088         switch (attr->group) {
2089         case KVM_DEV_FLIC_GET_ALL_IRQS:
2090                 r = get_all_floating_irqs(dev->kvm, (u8 __user *) attr->addr,
2091                                           attr->attr);
2092                 break;
2093         case KVM_DEV_FLIC_AISM_ALL:
2094                 r = flic_ais_mode_get_all(dev->kvm, attr);
2095                 break;
2096         default:
2097                 r = -EINVAL;
2098         }
2099
2100         return r;
2101 }
2102
2103 static inline int copy_irq_from_user(struct kvm_s390_interrupt_info *inti,
2104                                      u64 addr)
2105 {
2106         struct kvm_s390_irq __user *uptr = (struct kvm_s390_irq __user *) addr;
2107         void *target = NULL;
2108         void __user *source;
2109         u64 size;
2110
2111         if (get_user(inti->type, (u64 __user *)addr))
2112                 return -EFAULT;
2113
2114         switch (inti->type) {
2115         case KVM_S390_INT_PFAULT_INIT:
2116         case KVM_S390_INT_PFAULT_DONE:
2117         case KVM_S390_INT_VIRTIO:
2118         case KVM_S390_INT_SERVICE:
2119                 target = (void *) &inti->ext;
2120                 source = &uptr->u.ext;
2121                 size = sizeof(inti->ext);
2122                 break;
2123         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
2124                 target = (void *) &inti->io;
2125                 source = &uptr->u.io;
2126                 size = sizeof(inti->io);
2127                 break;
2128         case KVM_S390_MCHK:
2129                 target = (void *) &inti->mchk;
2130                 source = &uptr->u.mchk;
2131                 size = sizeof(inti->mchk);
2132                 break;
2133         default:
2134                 return -EINVAL;
2135         }
2136
2137         if (copy_from_user(target, source, size))
2138                 return -EFAULT;
2139
2140         return 0;
2141 }
2142
2143 static int enqueue_floating_irq(struct kvm_device *dev,
2144                                 struct kvm_device_attr *attr)
2145 {
2146         struct kvm_s390_interrupt_info *inti = NULL;
2147         int r = 0;
2148         int len = attr->attr;
2149
2150         if (len % sizeof(struct kvm_s390_irq) != 0)
2151                 return -EINVAL;
2152         else if (len > KVM_S390_FLIC_MAX_BUFFER)
2153                 return -EINVAL;
2154
2155         while (len >= sizeof(struct kvm_s390_irq)) {
2156                 inti = kzalloc(sizeof(*inti), GFP_KERNEL);
2157                 if (!inti)
2158                         return -ENOMEM;
2159
2160                 r = copy_irq_from_user(inti, attr->addr);
2161                 if (r) {
2162                         kfree(inti);
2163                         return r;
2164                 }
2165                 r = __inject_vm(dev->kvm, inti);
2166                 if (r) {
2167                         kfree(inti);
2168                         return r;
2169                 }
2170                 len -= sizeof(struct kvm_s390_irq);
2171                 attr->addr += sizeof(struct kvm_s390_irq);
2172         }
2173
2174         return r;
2175 }
2176
2177 static struct s390_io_adapter *get_io_adapter(struct kvm *kvm, unsigned int id)
2178 {
2179         if (id >= MAX_S390_IO_ADAPTERS)
2180                 return NULL;
2181         return kvm->arch.adapters[id];
2182 }
2183
2184 static int register_io_adapter(struct kvm_device *dev,
2185                                struct kvm_device_attr *attr)
2186 {
2187         struct s390_io_adapter *adapter;
2188         struct kvm_s390_io_adapter adapter_info;
2189
2190         if (copy_from_user(&adapter_info,
2191                            (void __user *)attr->addr, sizeof(adapter_info)))
2192                 return -EFAULT;
2193
2194         if ((adapter_info.id >= MAX_S390_IO_ADAPTERS) ||
2195             (dev->kvm->arch.adapters[adapter_info.id] != NULL))
2196                 return -EINVAL;
2197
2198         adapter = kzalloc(sizeof(*adapter), GFP_KERNEL);
2199         if (!adapter)
2200                 return -ENOMEM;
2201
2202         INIT_LIST_HEAD(&adapter->maps);
2203         init_rwsem(&adapter->maps_lock);
2204         atomic_set(&adapter->nr_maps, 0);
2205         adapter->id = adapter_info.id;
2206         adapter->isc = adapter_info.isc;
2207         adapter->maskable = adapter_info.maskable;
2208         adapter->masked = false;
2209         adapter->swap = adapter_info.swap;
2210         adapter->suppressible = (adapter_info.flags) &
2211                                 KVM_S390_ADAPTER_SUPPRESSIBLE;
2212         dev->kvm->arch.adapters[adapter->id] = adapter;
2213
2214         return 0;
2215 }
2216
2217 int kvm_s390_mask_adapter(struct kvm *kvm, unsigned int id, bool masked)
2218 {
2219         int ret;
2220         struct s390_io_adapter *adapter = get_io_adapter(kvm, id);
2221
2222         if (!adapter || !adapter->maskable)
2223                 return -EINVAL;
2224         ret = adapter->masked;
2225         adapter->masked = masked;
2226         return ret;
2227 }
2228
2229 static int kvm_s390_adapter_map(struct kvm *kvm, unsigned int id, __u64 addr)
2230 {
2231         struct s390_io_adapter *adapter = get_io_adapter(kvm, id);
2232         struct s390_map_info *map;
2233         int ret;
2234
2235         if (!adapter || !addr)
2236                 return -EINVAL;
2237
2238         map = kzalloc(sizeof(*map), GFP_KERNEL);
2239         if (!map) {
2240                 ret = -ENOMEM;
2241                 goto out;
2242         }
2243         INIT_LIST_HEAD(&map->list);
2244         map->guest_addr = addr;
2245         map->addr = gmap_translate(kvm->arch.gmap, addr);
2246         if (map->addr == -EFAULT) {
2247                 ret = -EFAULT;
2248                 goto out;
2249         }
2250         ret = get_user_pages_fast(map->addr, 1, 1, &map->page);
2251         if (ret < 0)
2252                 goto out;
2253         BUG_ON(ret != 1);
2254         down_write(&adapter->maps_lock);
2255         if (atomic_inc_return(&adapter->nr_maps) < MAX_S390_ADAPTER_MAPS) {
2256                 list_add_tail(&map->list, &adapter->maps);
2257                 ret = 0;
2258         } else {
2259                 put_page(map->page);
2260                 ret = -EINVAL;
2261         }
2262         up_write(&adapter->maps_lock);
2263 out:
2264         if (ret)
2265                 kfree(map);
2266         return ret;
2267 }
2268
2269 static int kvm_s390_adapter_unmap(struct kvm *kvm, unsigned int id, __u64 addr)
2270 {
2271         struct s390_io_adapter *adapter = get_io_adapter(kvm, id);
2272         struct s390_map_info *map, *tmp;
2273         int found = 0;
2274
2275         if (!adapter || !addr)
2276                 return -EINVAL;
2277
2278         down_write(&adapter->maps_lock);
2279         list_for_each_entry_safe(map, tmp, &adapter->maps, list) {
2280                 if (map->guest_addr == addr) {
2281                         found = 1;
2282                         atomic_dec(&adapter->nr_maps);
2283                         list_del(&map->list);
2284                         put_page(map->page);
2285                         kfree(map);
2286                         break;
2287                 }
2288         }
2289         up_write(&adapter->maps_lock);
2290
2291         return found ? 0 : -EINVAL;
2292 }
2293
2294 void kvm_s390_destroy_adapters(struct kvm *kvm)
2295 {
2296         int i;
2297         struct s390_map_info *map, *tmp;
2298
2299         for (i = 0; i < MAX_S390_IO_ADAPTERS; i++) {
2300                 if (!kvm->arch.adapters[i])
2301                         continue;
2302                 list_for_each_entry_safe(map, tmp,
2303                                          &kvm->arch.adapters[i]->maps, list) {
2304                         list_del(&map->list);
2305                         put_page(map->page);
2306                         kfree(map);
2307                 }
2308                 kfree(kvm->arch.adapters[i]);
2309         }
2310 }
2311
2312 static int modify_io_adapter(struct kvm_device *dev,
2313                              struct kvm_device_attr *attr)
2314 {
2315         struct kvm_s390_io_adapter_req req;
2316         struct s390_io_adapter *adapter;
2317         int ret;
2318
2319         if (copy_from_user(&req, (void __user *)attr->addr, sizeof(req)))
2320                 return -EFAULT;
2321
2322         adapter = get_io_adapter(dev->kvm, req.id);
2323         if (!adapter)
2324                 return -EINVAL;
2325         switch (req.type) {
2326         case KVM_S390_IO_ADAPTER_MASK:
2327                 ret = kvm_s390_mask_adapter(dev->kvm, req.id, req.mask);
2328                 if (ret > 0)
2329                         ret = 0;
2330                 break;
2331         case KVM_S390_IO_ADAPTER_MAP:
2332                 ret = kvm_s390_adapter_map(dev->kvm, req.id, req.addr);
2333                 break;
2334         case KVM_S390_IO_ADAPTER_UNMAP:
2335                 ret = kvm_s390_adapter_unmap(dev->kvm, req.id, req.addr);
2336                 break;
2337         default:
2338                 ret = -EINVAL;
2339         }
2340
2341         return ret;
2342 }
2343
2344 static int clear_io_irq(struct kvm *kvm, struct kvm_device_attr *attr)
2345
2346 {
2347         const u64 isc_mask = 0xffUL << 24; /* all iscs set */
2348         u32 schid;
2349
2350         if (attr->flags)
2351                 return -EINVAL;
2352         if (attr->attr != sizeof(schid))
2353                 return -EINVAL;
2354         if (copy_from_user(&schid, (void __user *) attr->addr, sizeof(schid)))
2355                 return -EFAULT;
2356         if (!schid)
2357                 return -EINVAL;
2358         kfree(kvm_s390_get_io_int(kvm, isc_mask, schid));
2359         /*
2360          * If userspace is conforming to the architecture, we can have at most
2361          * one pending I/O interrupt per subchannel, so this is effectively a
2362          * clear all.
2363          */
2364         return 0;
2365 }
2366
2367 static int modify_ais_mode(struct kvm *kvm, struct kvm_device_attr *attr)
2368 {
2369         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
2370         struct kvm_s390_ais_req req;
2371         int ret = 0;
2372
2373         if (!test_kvm_facility(kvm, 72))
2374                 return -ENOTSUPP;
2375
2376         if (copy_from_user(&req, (void __user *)attr->addr, sizeof(req)))
2377                 return -EFAULT;
2378
2379         if (req.isc > MAX_ISC)
2380                 return -EINVAL;
2381
2382         trace_kvm_s390_modify_ais_mode(req.isc,
2383                                        (fi->simm & AIS_MODE_MASK(req.isc)) ?
2384                                        (fi->nimm & AIS_MODE_MASK(req.isc)) ?
2385                                        2 : KVM_S390_AIS_MODE_SINGLE :
2386                                        KVM_S390_AIS_MODE_ALL, req.mode);
2387
2388         mutex_lock(&fi->ais_lock);
2389         switch (req.mode) {
2390         case KVM_S390_AIS_MODE_ALL:
2391                 fi->simm &= ~AIS_MODE_MASK(req.isc);
2392                 fi->nimm &= ~AIS_MODE_MASK(req.isc);
2393                 break;
2394         case KVM_S390_AIS_MODE_SINGLE:
2395                 fi->simm |= AIS_MODE_MASK(req.isc);
2396                 fi->nimm &= ~AIS_MODE_MASK(req.isc);
2397                 break;
2398         default:
2399                 ret = -EINVAL;
2400         }
2401         mutex_unlock(&fi->ais_lock);
2402
2403         return ret;
2404 }
2405
2406 static int kvm_s390_inject_airq(struct kvm *kvm,
2407                                 struct s390_io_adapter *adapter)
2408 {
2409         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
2410         struct kvm_s390_interrupt s390int = {
2411                 .type = KVM_S390_INT_IO(1, 0, 0, 0),
2412                 .parm = 0,
2413                 .parm64 = isc_to_int_word(adapter->isc),
2414         };
2415         int ret = 0;
2416
2417         if (!test_kvm_facility(kvm, 72) || !adapter->suppressible)
2418                 return kvm_s390_inject_vm(kvm, &s390int);
2419
2420         mutex_lock(&fi->ais_lock);
2421         if (fi->nimm & AIS_MODE_MASK(adapter->isc)) {
2422                 trace_kvm_s390_airq_suppressed(adapter->id, adapter->isc);
2423                 goto out;
2424         }
2425
2426         ret = kvm_s390_inject_vm(kvm, &s390int);
2427         if (!ret && (fi->simm & AIS_MODE_MASK(adapter->isc))) {
2428                 fi->nimm |= AIS_MODE_MASK(adapter->isc);
2429                 trace_kvm_s390_modify_ais_mode(adapter->isc,
2430                                                KVM_S390_AIS_MODE_SINGLE, 2);
2431         }
2432 out:
2433         mutex_unlock(&fi->ais_lock);
2434         return ret;
2435 }
2436
2437 static int flic_inject_airq(struct kvm *kvm, struct kvm_device_attr *attr)
2438 {
2439         unsigned int id = attr->attr;
2440         struct s390_io_adapter *adapter = get_io_adapter(kvm, id);
2441
2442         if (!adapter)
2443                 return -EINVAL;
2444
2445         return kvm_s390_inject_airq(kvm, adapter);
2446 }
2447
2448 static int flic_ais_mode_set_all(struct kvm *kvm, struct kvm_device_attr *attr)
2449 {
2450         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
2451         struct kvm_s390_ais_all ais;
2452
2453         if (!test_kvm_facility(kvm, 72))
2454                 return -ENOTSUPP;
2455
2456         if (copy_from_user(&ais, (void __user *)attr->addr, sizeof(ais)))
2457                 return -EFAULT;
2458
2459         mutex_lock(&fi->ais_lock);
2460         fi->simm = ais.simm;
2461         fi->nimm = ais.nimm;
2462         mutex_unlock(&fi->ais_lock);
2463
2464         return 0;
2465 }
2466
2467 static int flic_set_attr(struct kvm_device *dev, struct kvm_device_attr *attr)
2468 {
2469         int r = 0;
2470         unsigned int i;
2471         struct kvm_vcpu *vcpu;
2472
2473         switch (attr->group) {
2474         case KVM_DEV_FLIC_ENQUEUE:
2475                 r = enqueue_floating_irq(dev, attr);
2476                 break;
2477         case KVM_DEV_FLIC_CLEAR_IRQS:
2478                 kvm_s390_clear_float_irqs(dev->kvm);
2479                 break;
2480         case KVM_DEV_FLIC_APF_ENABLE:
2481                 dev->kvm->arch.gmap->pfault_enabled = 1;
2482                 break;
2483         case KVM_DEV_FLIC_APF_DISABLE_WAIT:
2484                 dev->kvm->arch.gmap->pfault_enabled = 0;
2485                 /*
2486                  * Make sure no async faults are in transition when
2487                  * clearing the queues. So we don't need to worry
2488                  * about late coming workers.
2489                  */
2490                 synchronize_srcu(&dev->kvm->srcu);
2491                 kvm_for_each_vcpu(i, vcpu, dev->kvm)
2492                         kvm_clear_async_pf_completion_queue(vcpu);
2493                 break;
2494         case KVM_DEV_FLIC_ADAPTER_REGISTER:
2495                 r = register_io_adapter(dev, attr);
2496                 break;
2497         case KVM_DEV_FLIC_ADAPTER_MODIFY:
2498                 r = modify_io_adapter(dev, attr);
2499                 break;
2500         case KVM_DEV_FLIC_CLEAR_IO_IRQ:
2501                 r = clear_io_irq(dev->kvm, attr);
2502                 break;
2503         case KVM_DEV_FLIC_AISM:
2504                 r = modify_ais_mode(dev->kvm, attr);
2505                 break;
2506         case KVM_DEV_FLIC_AIRQ_INJECT:
2507                 r = flic_inject_airq(dev->kvm, attr);
2508                 break;
2509         case KVM_DEV_FLIC_AISM_ALL:
2510                 r = flic_ais_mode_set_all(dev->kvm, attr);
2511                 break;
2512         default:
2513                 r = -EINVAL;
2514         }
2515
2516         return r;
2517 }
2518
2519 static int flic_has_attr(struct kvm_device *dev,
2520                              struct kvm_device_attr *attr)
2521 {
2522         switch (attr->group) {
2523         case KVM_DEV_FLIC_GET_ALL_IRQS:
2524         case KVM_DEV_FLIC_ENQUEUE:
2525         case KVM_DEV_FLIC_CLEAR_IRQS:
2526         case KVM_DEV_FLIC_APF_ENABLE:
2527         case KVM_DEV_FLIC_APF_DISABLE_WAIT:
2528         case KVM_DEV_FLIC_ADAPTER_REGISTER:
2529         case KVM_DEV_FLIC_ADAPTER_MODIFY:
2530         case KVM_DEV_FLIC_CLEAR_IO_IRQ:
2531         case KVM_DEV_FLIC_AISM:
2532         case KVM_DEV_FLIC_AIRQ_INJECT:
2533         case KVM_DEV_FLIC_AISM_ALL:
2534                 return 0;
2535         }
2536         return -ENXIO;
2537 }
2538
2539 static int flic_create(struct kvm_device *dev, u32 type)
2540 {
2541         if (!dev)
2542                 return -EINVAL;
2543         if (dev->kvm->arch.flic)
2544                 return -EINVAL;
2545         dev->kvm->arch.flic = dev;
2546         return 0;
2547 }
2548
2549 static void flic_destroy(struct kvm_device *dev)
2550 {
2551         dev->kvm->arch.flic = NULL;
2552         kfree(dev);
2553 }
2554
2555 /* s390 floating irq controller (flic) */
2556 struct kvm_device_ops kvm_flic_ops = {
2557         .name = "kvm-flic",
2558         .get_attr = flic_get_attr,
2559         .set_attr = flic_set_attr,
2560         .has_attr = flic_has_attr,
2561         .create = flic_create,
2562         .destroy = flic_destroy,
2563 };
2564
2565 static unsigned long get_ind_bit(__u64 addr, unsigned long bit_nr, bool swap)
2566 {
2567         unsigned long bit;
2568
2569         bit = bit_nr + (addr % PAGE_SIZE) * 8;
2570
2571         return swap ? (bit ^ (BITS_PER_LONG - 1)) : bit;
2572 }
2573
2574 static struct s390_map_info *get_map_info(struct s390_io_adapter *adapter,
2575                                           u64 addr)
2576 {
2577         struct s390_map_info *map;
2578
2579         if (!adapter)
2580                 return NULL;
2581
2582         list_for_each_entry(map, &adapter->maps, list) {
2583                 if (map->guest_addr == addr)
2584                         return map;
2585         }
2586         return NULL;
2587 }
2588
2589 static int adapter_indicators_set(struct kvm *kvm,
2590                                   struct s390_io_adapter *adapter,
2591                                   struct kvm_s390_adapter_int *adapter_int)
2592 {
2593         unsigned long bit;
2594         int summary_set, idx;
2595         struct s390_map_info *info;
2596         void *map;
2597
2598         info = get_map_info(adapter, adapter_int->ind_addr);
2599         if (!info)
2600                 return -1;
2601         map = page_address(info->page);
2602         bit = get_ind_bit(info->addr, adapter_int->ind_offset, adapter->swap);
2603         set_bit(bit, map);
2604         idx = srcu_read_lock(&kvm->srcu);
2605         mark_page_dirty(kvm, info->guest_addr >> PAGE_SHIFT);
2606         set_page_dirty_lock(info->page);
2607         info = get_map_info(adapter, adapter_int->summary_addr);
2608         if (!info) {
2609                 srcu_read_unlock(&kvm->srcu, idx);
2610                 return -1;
2611         }
2612         map = page_address(info->page);
2613         bit = get_ind_bit(info->addr, adapter_int->summary_offset,
2614                           adapter->swap);
2615         summary_set = test_and_set_bit(bit, map);
2616         mark_page_dirty(kvm, info->guest_addr >> PAGE_SHIFT);
2617         set_page_dirty_lock(info->page);
2618         srcu_read_unlock(&kvm->srcu, idx);
2619         return summary_set ? 0 : 1;
2620 }
2621
2622 /*
2623  * < 0 - not injected due to error
2624  * = 0 - coalesced, summary indicator already active
2625  * > 0 - injected interrupt
2626  */
2627 static int set_adapter_int(struct kvm_kernel_irq_routing_entry *e,
2628                            struct kvm *kvm, int irq_source_id, int level,
2629                            bool line_status)
2630 {
2631         int ret;
2632         struct s390_io_adapter *adapter;
2633
2634         /* We're only interested in the 0->1 transition. */
2635         if (!level)
2636                 return 0;
2637         adapter = get_io_adapter(kvm, e->adapter.adapter_id);
2638         if (!adapter)
2639                 return -1;
2640         down_read(&adapter->maps_lock);
2641         ret = adapter_indicators_set(kvm, adapter, &e->adapter);
2642         up_read(&adapter->maps_lock);
2643         if ((ret > 0) && !adapter->masked) {
2644                 ret = kvm_s390_inject_airq(kvm, adapter);
2645                 if (ret == 0)
2646                         ret = 1;
2647         }
2648         return ret;
2649 }
2650
2651 /*
2652  * Inject the machine check to the guest.
2653  */
2654 void kvm_s390_reinject_machine_check(struct kvm_vcpu *vcpu,
2655                                      struct mcck_volatile_info *mcck_info)
2656 {
2657         struct kvm_s390_interrupt_info inti;
2658         struct kvm_s390_irq irq;
2659         struct kvm_s390_mchk_info *mchk;
2660         union mci mci;
2661         __u64 cr14 = 0;         /* upper bits are not used */
2662         int rc;
2663
2664         mci.val = mcck_info->mcic;
2665         if (mci.sr)
2666                 cr14 |= CR14_RECOVERY_SUBMASK;
2667         if (mci.dg)
2668                 cr14 |= CR14_DEGRADATION_SUBMASK;
2669         if (mci.w)
2670                 cr14 |= CR14_WARNING_SUBMASK;
2671
2672         mchk = mci.ck ? &inti.mchk : &irq.u.mchk;
2673         mchk->cr14 = cr14;
2674         mchk->mcic = mcck_info->mcic;
2675         mchk->ext_damage_code = mcck_info->ext_damage_code;
2676         mchk->failing_storage_address = mcck_info->failing_storage_address;
2677         if (mci.ck) {
2678                 /* Inject the floating machine check */
2679                 inti.type = KVM_S390_MCHK;
2680                 rc = __inject_vm(vcpu->kvm, &inti);
2681         } else {
2682                 /* Inject the machine check to specified vcpu */
2683                 irq.type = KVM_S390_MCHK;
2684                 rc = kvm_s390_inject_vcpu(vcpu, &irq);
2685         }
2686         WARN_ON_ONCE(rc);
2687 }
2688
2689 int kvm_set_routing_entry(struct kvm *kvm,
2690                           struct kvm_kernel_irq_routing_entry *e,
2691                           const struct kvm_irq_routing_entry *ue)
2692 {
2693         int ret;
2694
2695         switch (ue->type) {
2696         case KVM_IRQ_ROUTING_S390_ADAPTER:
2697                 e->set = set_adapter_int;
2698                 e->adapter.summary_addr = ue->u.adapter.summary_addr;
2699                 e->adapter.ind_addr = ue->u.adapter.ind_addr;
2700                 e->adapter.summary_offset = ue->u.adapter.summary_offset;
2701                 e->adapter.ind_offset = ue->u.adapter.ind_offset;
2702                 e->adapter.adapter_id = ue->u.adapter.adapter_id;
2703                 ret = 0;
2704                 break;
2705         default:
2706                 ret = -EINVAL;
2707         }
2708
2709         return ret;
2710 }
2711
2712 int kvm_set_msi(struct kvm_kernel_irq_routing_entry *e, struct kvm *kvm,
2713                 int irq_source_id, int level, bool line_status)
2714 {
2715         return -EINVAL;
2716 }
2717
2718 int kvm_s390_set_irq_state(struct kvm_vcpu *vcpu, void __user *irqstate, int len)
2719 {
2720         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
2721         struct kvm_s390_irq *buf;
2722         int r = 0;
2723         int n;
2724
2725         buf = vmalloc(len);
2726         if (!buf)
2727                 return -ENOMEM;
2728
2729         if (copy_from_user((void *) buf, irqstate, len)) {
2730                 r = -EFAULT;
2731                 goto out_free;
2732         }
2733
2734         /*
2735          * Don't allow setting the interrupt state
2736          * when there are already interrupts pending
2737          */
2738         spin_lock(&li->lock);
2739         if (li->pending_irqs) {
2740                 r = -EBUSY;
2741                 goto out_unlock;
2742         }
2743
2744         for (n = 0; n < len / sizeof(*buf); n++) {
2745                 r = do_inject_vcpu(vcpu, &buf[n]);
2746                 if (r)
2747                         break;
2748         }
2749
2750 out_unlock:
2751         spin_unlock(&li->lock);
2752 out_free:
2753         vfree(buf);
2754
2755         return r;
2756 }
2757
2758 static void store_local_irq(struct kvm_s390_local_interrupt *li,
2759                             struct kvm_s390_irq *irq,
2760                             unsigned long irq_type)
2761 {
2762         switch (irq_type) {
2763         case IRQ_PEND_MCHK_EX:
2764         case IRQ_PEND_MCHK_REP:
2765                 irq->type = KVM_S390_MCHK;
2766                 irq->u.mchk = li->irq.mchk;
2767                 break;
2768         case IRQ_PEND_PROG:
2769                 irq->type = KVM_S390_PROGRAM_INT;
2770                 irq->u.pgm = li->irq.pgm;
2771                 break;
2772         case IRQ_PEND_PFAULT_INIT:
2773                 irq->type = KVM_S390_INT_PFAULT_INIT;
2774                 irq->u.ext = li->irq.ext;
2775                 break;
2776         case IRQ_PEND_EXT_EXTERNAL:
2777                 irq->type = KVM_S390_INT_EXTERNAL_CALL;
2778                 irq->u.extcall = li->irq.extcall;
2779                 break;
2780         case IRQ_PEND_EXT_CLOCK_COMP:
2781                 irq->type = KVM_S390_INT_CLOCK_COMP;
2782                 break;
2783         case IRQ_PEND_EXT_CPU_TIMER:
2784                 irq->type = KVM_S390_INT_CPU_TIMER;
2785                 break;
2786         case IRQ_PEND_SIGP_STOP:
2787                 irq->type = KVM_S390_SIGP_STOP;
2788                 irq->u.stop = li->irq.stop;
2789                 break;
2790         case IRQ_PEND_RESTART:
2791                 irq->type = KVM_S390_RESTART;
2792                 break;
2793         case IRQ_PEND_SET_PREFIX:
2794                 irq->type = KVM_S390_SIGP_SET_PREFIX;
2795                 irq->u.prefix = li->irq.prefix;
2796                 break;
2797         }
2798 }
2799
2800 int kvm_s390_get_irq_state(struct kvm_vcpu *vcpu, __u8 __user *buf, int len)
2801 {
2802         int scn;
2803         unsigned long sigp_emerg_pending[BITS_TO_LONGS(KVM_MAX_VCPUS)];
2804         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
2805         unsigned long pending_irqs;
2806         struct kvm_s390_irq irq;
2807         unsigned long irq_type;
2808         int cpuaddr;
2809         int n = 0;
2810
2811         spin_lock(&li->lock);
2812         pending_irqs = li->pending_irqs;
2813         memcpy(&sigp_emerg_pending, &li->sigp_emerg_pending,
2814                sizeof(sigp_emerg_pending));
2815         spin_unlock(&li->lock);
2816
2817         for_each_set_bit(irq_type, &pending_irqs, IRQ_PEND_COUNT) {
2818                 memset(&irq, 0, sizeof(irq));
2819                 if (irq_type == IRQ_PEND_EXT_EMERGENCY)
2820                         continue;
2821                 if (n + sizeof(irq) > len)
2822                         return -ENOBUFS;
2823                 store_local_irq(&vcpu->arch.local_int, &irq, irq_type);
2824                 if (copy_to_user(&buf[n], &irq, sizeof(irq)))
2825                         return -EFAULT;
2826                 n += sizeof(irq);
2827         }
2828
2829         if (test_bit(IRQ_PEND_EXT_EMERGENCY, &pending_irqs)) {
2830                 for_each_set_bit(cpuaddr, sigp_emerg_pending, KVM_MAX_VCPUS) {
2831                         memset(&irq, 0, sizeof(irq));
2832                         if (n + sizeof(irq) > len)
2833                                 return -ENOBUFS;
2834                         irq.type = KVM_S390_INT_EMERGENCY;
2835                         irq.u.emerg.code = cpuaddr;
2836                         if (copy_to_user(&buf[n], &irq, sizeof(irq)))
2837                                 return -EFAULT;
2838                         n += sizeof(irq);
2839                 }
2840         }
2841
2842         if (sca_ext_call_pending(vcpu, &scn)) {
2843                 if (n + sizeof(irq) > len)
2844                         return -ENOBUFS;
2845                 memset(&irq, 0, sizeof(irq));
2846                 irq.type = KVM_S390_INT_EXTERNAL_CALL;
2847                 irq.u.extcall.code = scn;
2848                 if (copy_to_user(&buf[n], &irq, sizeof(irq)))
2849                         return -EFAULT;
2850                 n += sizeof(irq);
2851         }
2852
2853         return n;
2854 }
2855
2856 void kvm_s390_gisa_clear(struct kvm *kvm)
2857 {
2858         if (kvm->arch.gisa) {
2859                 memset(kvm->arch.gisa, 0, sizeof(struct kvm_s390_gisa));
2860                 kvm->arch.gisa->next_alert = (u32)(u64)kvm->arch.gisa;
2861                 VM_EVENT(kvm, 3, "gisa 0x%pK cleared", kvm->arch.gisa);
2862         }
2863 }
2864
2865 void kvm_s390_gisa_init(struct kvm *kvm)
2866 {
2867         if (css_general_characteristics.aiv) {
2868                 kvm->arch.gisa = &kvm->arch.sie_page2->gisa;
2869                 VM_EVENT(kvm, 3, "gisa 0x%pK initialized", kvm->arch.gisa);
2870                 kvm_s390_gisa_clear(kvm);
2871         }
2872 }
2873
2874 void kvm_s390_gisa_destroy(struct kvm *kvm)
2875 {
2876         if (!kvm->arch.gisa)
2877                 return;
2878         kvm->arch.gisa = NULL;
2879 }