xref: /linux/arch/s390/kvm/interrupt.c (revision 44f57d78)
1 // SPDX-License-Identifier: GPL-2.0
2 /*
3  * handling kvm guest interrupts
4  *
5  * Copyright IBM Corp. 2008, 2015
6  *
7  *    Author(s): Carsten Otte <cotte@de.ibm.com>
8  */
9 
10 #define KMSG_COMPONENT "kvm-s390"
11 #define pr_fmt(fmt) KMSG_COMPONENT ": " fmt
12 
13 #include <linux/interrupt.h>
14 #include <linux/kvm_host.h>
15 #include <linux/hrtimer.h>
16 #include <linux/mmu_context.h>
17 #include <linux/nospec.h>
18 #include <linux/signal.h>
19 #include <linux/slab.h>
20 #include <linux/bitmap.h>
21 #include <linux/vmalloc.h>
22 #include <asm/asm-offsets.h>
23 #include <asm/dis.h>
24 #include <linux/uaccess.h>
25 #include <asm/sclp.h>
26 #include <asm/isc.h>
27 #include <asm/gmap.h>
28 #include <asm/switch_to.h>
29 #include <asm/nmi.h>
30 #include <asm/airq.h>
31 #include "kvm-s390.h"
32 #include "gaccess.h"
33 #include "trace-s390.h"
34 
35 #define PFAULT_INIT 0x0600
36 #define PFAULT_DONE 0x0680
37 #define VIRTIO_PARAM 0x0d00
38 
39 static struct kvm_s390_gib *gib;
40 
41 /* handle external calls via sigp interpretation facility */
42 static int sca_ext_call_pending(struct kvm_vcpu *vcpu, int *src_id)
43 {
44 	int c, scn;
45 
46 	if (!kvm_s390_test_cpuflags(vcpu, CPUSTAT_ECALL_PEND))
47 		return 0;
48 
49 	BUG_ON(!kvm_s390_use_sca_entries());
50 	read_lock(&vcpu->kvm->arch.sca_lock);
51 	if (vcpu->kvm->arch.use_esca) {
52 		struct esca_block *sca = vcpu->kvm->arch.sca;
53 		union esca_sigp_ctrl sigp_ctrl =
54 			sca->cpu[vcpu->vcpu_id].sigp_ctrl;
55 
56 		c = sigp_ctrl.c;
57 		scn = sigp_ctrl.scn;
58 	} else {
59 		struct bsca_block *sca = vcpu->kvm->arch.sca;
60 		union bsca_sigp_ctrl sigp_ctrl =
61 			sca->cpu[vcpu->vcpu_id].sigp_ctrl;
62 
63 		c = sigp_ctrl.c;
64 		scn = sigp_ctrl.scn;
65 	}
66 	read_unlock(&vcpu->kvm->arch.sca_lock);
67 
68 	if (src_id)
69 		*src_id = scn;
70 
71 	return c;
72 }
73 
74 static int sca_inject_ext_call(struct kvm_vcpu *vcpu, int src_id)
75 {
76 	int expect, rc;
77 
78 	BUG_ON(!kvm_s390_use_sca_entries());
79 	read_lock(&vcpu->kvm->arch.sca_lock);
80 	if (vcpu->kvm->arch.use_esca) {
81 		struct esca_block *sca = vcpu->kvm->arch.sca;
82 		union esca_sigp_ctrl *sigp_ctrl =
83 			&(sca->cpu[vcpu->vcpu_id].sigp_ctrl);
84 		union esca_sigp_ctrl new_val = {0}, old_val = *sigp_ctrl;
85 
86 		new_val.scn = src_id;
87 		new_val.c = 1;
88 		old_val.c = 0;
89 
90 		expect = old_val.value;
91 		rc = cmpxchg(&sigp_ctrl->value, old_val.value, new_val.value);
92 	} else {
93 		struct bsca_block *sca = vcpu->kvm->arch.sca;
94 		union bsca_sigp_ctrl *sigp_ctrl =
95 			&(sca->cpu[vcpu->vcpu_id].sigp_ctrl);
96 		union bsca_sigp_ctrl new_val = {0}, old_val = *sigp_ctrl;
97 
98 		new_val.scn = src_id;
99 		new_val.c = 1;
100 		old_val.c = 0;
101 
102 		expect = old_val.value;
103 		rc = cmpxchg(&sigp_ctrl->value, old_val.value, new_val.value);
104 	}
105 	read_unlock(&vcpu->kvm->arch.sca_lock);
106 
107 	if (rc != expect) {
108 		/* another external call is pending */
109 		return -EBUSY;
110 	}
111 	kvm_s390_set_cpuflags(vcpu, CPUSTAT_ECALL_PEND);
112 	return 0;
113 }
114 
115 static void sca_clear_ext_call(struct kvm_vcpu *vcpu)
116 {
117 	int rc, expect;
118 
119 	if (!kvm_s390_use_sca_entries())
120 		return;
121 	kvm_s390_clear_cpuflags(vcpu, CPUSTAT_ECALL_PEND);
122 	read_lock(&vcpu->kvm->arch.sca_lock);
123 	if (vcpu->kvm->arch.use_esca) {
124 		struct esca_block *sca = vcpu->kvm->arch.sca;
125 		union esca_sigp_ctrl *sigp_ctrl =
126 			&(sca->cpu[vcpu->vcpu_id].sigp_ctrl);
127 		union esca_sigp_ctrl old = *sigp_ctrl;
128 
129 		expect = old.value;
130 		rc = cmpxchg(&sigp_ctrl->value, old.value, 0);
131 	} else {
132 		struct bsca_block *sca = vcpu->kvm->arch.sca;
133 		union bsca_sigp_ctrl *sigp_ctrl =
134 			&(sca->cpu[vcpu->vcpu_id].sigp_ctrl);
135 		union bsca_sigp_ctrl old = *sigp_ctrl;
136 
137 		expect = old.value;
138 		rc = cmpxchg(&sigp_ctrl->value, old.value, 0);
139 	}
140 	read_unlock(&vcpu->kvm->arch.sca_lock);
141 	WARN_ON(rc != expect); /* cannot clear? */
142 }
143 
144 int psw_extint_disabled(struct kvm_vcpu *vcpu)
145 {
146 	return !(vcpu->arch.sie_block->gpsw.mask & PSW_MASK_EXT);
147 }
148 
149 static int psw_ioint_disabled(struct kvm_vcpu *vcpu)
150 {
151 	return !(vcpu->arch.sie_block->gpsw.mask & PSW_MASK_IO);
152 }
153 
154 static int psw_mchk_disabled(struct kvm_vcpu *vcpu)
155 {
156 	return !(vcpu->arch.sie_block->gpsw.mask & PSW_MASK_MCHECK);
157 }
158 
159 static int psw_interrupts_disabled(struct kvm_vcpu *vcpu)
160 {
161 	return psw_extint_disabled(vcpu) &&
162 	       psw_ioint_disabled(vcpu) &&
163 	       psw_mchk_disabled(vcpu);
164 }
165 
166 static int ckc_interrupts_enabled(struct kvm_vcpu *vcpu)
167 {
168 	if (psw_extint_disabled(vcpu) ||
169 	    !(vcpu->arch.sie_block->gcr[0] & CR0_CLOCK_COMPARATOR_SUBMASK))
170 		return 0;
171 	if (guestdbg_enabled(vcpu) && guestdbg_sstep_enabled(vcpu))
172 		/* No timer interrupts when single stepping */
173 		return 0;
174 	return 1;
175 }
176 
177 static int ckc_irq_pending(struct kvm_vcpu *vcpu)
178 {
179 	const u64 now = kvm_s390_get_tod_clock_fast(vcpu->kvm);
180 	const u64 ckc = vcpu->arch.sie_block->ckc;
181 
182 	if (vcpu->arch.sie_block->gcr[0] & CR0_CLOCK_COMPARATOR_SIGN) {
183 		if ((s64)ckc >= (s64)now)
184 			return 0;
185 	} else if (ckc >= now) {
186 		return 0;
187 	}
188 	return ckc_interrupts_enabled(vcpu);
189 }
190 
191 static int cpu_timer_interrupts_enabled(struct kvm_vcpu *vcpu)
192 {
193 	return !psw_extint_disabled(vcpu) &&
194 	       (vcpu->arch.sie_block->gcr[0] & CR0_CPU_TIMER_SUBMASK);
195 }
196 
197 static int cpu_timer_irq_pending(struct kvm_vcpu *vcpu)
198 {
199 	if (!cpu_timer_interrupts_enabled(vcpu))
200 		return 0;
201 	return kvm_s390_get_cpu_timer(vcpu) >> 63;
202 }
203 
204 static uint64_t isc_to_isc_bits(int isc)
205 {
206 	return (0x80 >> isc) << 24;
207 }
208 
209 static inline u32 isc_to_int_word(u8 isc)
210 {
211 	return ((u32)isc << 27) | 0x80000000;
212 }
213 
214 static inline u8 int_word_to_isc(u32 int_word)
215 {
216 	return (int_word & 0x38000000) >> 27;
217 }
218 
219 /*
220  * To use atomic bitmap functions, we have to provide a bitmap address
221  * that is u64 aligned. However, the ipm might be u32 aligned.
222  * Therefore, we logically start the bitmap at the very beginning of the
223  * struct and fixup the bit number.
224  */
225 #define IPM_BIT_OFFSET (offsetof(struct kvm_s390_gisa, ipm) * BITS_PER_BYTE)
226 
227 /**
228  * gisa_set_iam - change the GISA interruption alert mask
229  *
230  * @gisa: gisa to operate on
231  * @iam: new IAM value to use
232  *
233  * Change the IAM atomically with the next alert address and the IPM
234  * of the GISA if the GISA is not part of the GIB alert list. All three
235  * fields are located in the first long word of the GISA.
236  *
237  * Returns: 0 on success
238  *          -EBUSY in case the gisa is part of the alert list
239  */
240 static inline int gisa_set_iam(struct kvm_s390_gisa *gisa, u8 iam)
241 {
242 	u64 word, _word;
243 
244 	do {
245 		word = READ_ONCE(gisa->u64.word[0]);
246 		if ((u64)gisa != word >> 32)
247 			return -EBUSY;
248 		_word = (word & ~0xffUL) | iam;
249 	} while (cmpxchg(&gisa->u64.word[0], word, _word) != word);
250 
251 	return 0;
252 }
253 
254 /**
255  * gisa_clear_ipm - clear the GISA interruption pending mask
256  *
257  * @gisa: gisa to operate on
258  *
259  * Clear the IPM atomically with the next alert address and the IAM
260  * of the GISA unconditionally. All three fields are located in the
261  * first long word of the GISA.
262  */
263 static inline void gisa_clear_ipm(struct kvm_s390_gisa *gisa)
264 {
265 	u64 word, _word;
266 
267 	do {
268 		word = READ_ONCE(gisa->u64.word[0]);
269 		_word = word & ~(0xffUL << 24);
270 	} while (cmpxchg(&gisa->u64.word[0], word, _word) != word);
271 }
272 
273 /**
274  * gisa_get_ipm_or_restore_iam - return IPM or restore GISA IAM
275  *
276  * @gi: gisa interrupt struct to work on
277  *
278  * Atomically restores the interruption alert mask if none of the
279  * relevant ISCs are pending and return the IPM.
280  *
281  * Returns: the relevant pending ISCs
282  */
283 static inline u8 gisa_get_ipm_or_restore_iam(struct kvm_s390_gisa_interrupt *gi)
284 {
285 	u8 pending_mask, alert_mask;
286 	u64 word, _word;
287 
288 	do {
289 		word = READ_ONCE(gi->origin->u64.word[0]);
290 		alert_mask = READ_ONCE(gi->alert.mask);
291 		pending_mask = (u8)(word >> 24) & alert_mask;
292 		if (pending_mask)
293 			return pending_mask;
294 		_word = (word & ~0xffUL) | alert_mask;
295 	} while (cmpxchg(&gi->origin->u64.word[0], word, _word) != word);
296 
297 	return 0;
298 }
299 
300 static inline int gisa_in_alert_list(struct kvm_s390_gisa *gisa)
301 {
302 	return READ_ONCE(gisa->next_alert) != (u32)(u64)gisa;
303 }
304 
305 static inline void gisa_set_ipm_gisc(struct kvm_s390_gisa *gisa, u32 gisc)
306 {
307 	set_bit_inv(IPM_BIT_OFFSET + gisc, (unsigned long *) gisa);
308 }
309 
310 static inline u8 gisa_get_ipm(struct kvm_s390_gisa *gisa)
311 {
312 	return READ_ONCE(gisa->ipm);
313 }
314 
315 static inline void gisa_clear_ipm_gisc(struct kvm_s390_gisa *gisa, u32 gisc)
316 {
317 	clear_bit_inv(IPM_BIT_OFFSET + gisc, (unsigned long *) gisa);
318 }
319 
320 static inline int gisa_tac_ipm_gisc(struct kvm_s390_gisa *gisa, u32 gisc)
321 {
322 	return test_and_clear_bit_inv(IPM_BIT_OFFSET + gisc, (unsigned long *) gisa);
323 }
324 
325 static inline unsigned long pending_irqs_no_gisa(struct kvm_vcpu *vcpu)
326 {
327 	return vcpu->kvm->arch.float_int.pending_irqs |
328 		vcpu->arch.local_int.pending_irqs;
329 }
330 
331 static inline unsigned long pending_irqs(struct kvm_vcpu *vcpu)
332 {
333 	struct kvm_s390_gisa_interrupt *gi = &vcpu->kvm->arch.gisa_int;
334 	unsigned long pending_mask;
335 
336 	pending_mask = pending_irqs_no_gisa(vcpu);
337 	if (gi->origin)
338 		pending_mask |= gisa_get_ipm(gi->origin) << IRQ_PEND_IO_ISC_7;
339 	return pending_mask;
340 }
341 
342 static inline int isc_to_irq_type(unsigned long isc)
343 {
344 	return IRQ_PEND_IO_ISC_0 - isc;
345 }
346 
347 static inline int irq_type_to_isc(unsigned long irq_type)
348 {
349 	return IRQ_PEND_IO_ISC_0 - irq_type;
350 }
351 
352 static unsigned long disable_iscs(struct kvm_vcpu *vcpu,
353 				   unsigned long active_mask)
354 {
355 	int i;
356 
357 	for (i = 0; i <= MAX_ISC; i++)
358 		if (!(vcpu->arch.sie_block->gcr[6] & isc_to_isc_bits(i)))
359 			active_mask &= ~(1UL << (isc_to_irq_type(i)));
360 
361 	return active_mask;
362 }
363 
364 static unsigned long deliverable_irqs(struct kvm_vcpu *vcpu)
365 {
366 	unsigned long active_mask;
367 
368 	active_mask = pending_irqs(vcpu);
369 	if (!active_mask)
370 		return 0;
371 
372 	if (psw_extint_disabled(vcpu))
373 		active_mask &= ~IRQ_PEND_EXT_MASK;
374 	if (psw_ioint_disabled(vcpu))
375 		active_mask &= ~IRQ_PEND_IO_MASK;
376 	else
377 		active_mask = disable_iscs(vcpu, active_mask);
378 	if (!(vcpu->arch.sie_block->gcr[0] & CR0_EXTERNAL_CALL_SUBMASK))
379 		__clear_bit(IRQ_PEND_EXT_EXTERNAL, &active_mask);
380 	if (!(vcpu->arch.sie_block->gcr[0] & CR0_EMERGENCY_SIGNAL_SUBMASK))
381 		__clear_bit(IRQ_PEND_EXT_EMERGENCY, &active_mask);
382 	if (!(vcpu->arch.sie_block->gcr[0] & CR0_CLOCK_COMPARATOR_SUBMASK))
383 		__clear_bit(IRQ_PEND_EXT_CLOCK_COMP, &active_mask);
384 	if (!(vcpu->arch.sie_block->gcr[0] & CR0_CPU_TIMER_SUBMASK))
385 		__clear_bit(IRQ_PEND_EXT_CPU_TIMER, &active_mask);
386 	if (!(vcpu->arch.sie_block->gcr[0] & CR0_SERVICE_SIGNAL_SUBMASK))
387 		__clear_bit(IRQ_PEND_EXT_SERVICE, &active_mask);
388 	if (psw_mchk_disabled(vcpu))
389 		active_mask &= ~IRQ_PEND_MCHK_MASK;
390 	/*
391 	 * Check both floating and local interrupt's cr14 because
392 	 * bit IRQ_PEND_MCHK_REP could be set in both cases.
393 	 */
394 	if (!(vcpu->arch.sie_block->gcr[14] &
395 	   (vcpu->kvm->arch.float_int.mchk.cr14 |
396 	   vcpu->arch.local_int.irq.mchk.cr14)))
397 		__clear_bit(IRQ_PEND_MCHK_REP, &active_mask);
398 
399 	/*
400 	 * STOP irqs will never be actively delivered. They are triggered via
401 	 * intercept requests and cleared when the stop intercept is performed.
402 	 */
403 	__clear_bit(IRQ_PEND_SIGP_STOP, &active_mask);
404 
405 	return active_mask;
406 }
407 
408 static void __set_cpu_idle(struct kvm_vcpu *vcpu)
409 {
410 	kvm_s390_set_cpuflags(vcpu, CPUSTAT_WAIT);
411 	set_bit(vcpu->vcpu_id, vcpu->kvm->arch.idle_mask);
412 }
413 
414 static void __unset_cpu_idle(struct kvm_vcpu *vcpu)
415 {
416 	kvm_s390_clear_cpuflags(vcpu, CPUSTAT_WAIT);
417 	clear_bit(vcpu->vcpu_id, vcpu->kvm->arch.idle_mask);
418 }
419 
420 static void __reset_intercept_indicators(struct kvm_vcpu *vcpu)
421 {
422 	kvm_s390_clear_cpuflags(vcpu, CPUSTAT_IO_INT | CPUSTAT_EXT_INT |
423 				      CPUSTAT_STOP_INT);
424 	vcpu->arch.sie_block->lctl = 0x0000;
425 	vcpu->arch.sie_block->ictl &= ~(ICTL_LPSW | ICTL_STCTL | ICTL_PINT);
426 
427 	if (guestdbg_enabled(vcpu)) {
428 		vcpu->arch.sie_block->lctl |= (LCTL_CR0 | LCTL_CR9 |
429 					       LCTL_CR10 | LCTL_CR11);
430 		vcpu->arch.sie_block->ictl |= (ICTL_STCTL | ICTL_PINT);
431 	}
432 }
433 
434 static void set_intercept_indicators_io(struct kvm_vcpu *vcpu)
435 {
436 	if (!(pending_irqs_no_gisa(vcpu) & IRQ_PEND_IO_MASK))
437 		return;
438 	if (psw_ioint_disabled(vcpu))
439 		kvm_s390_set_cpuflags(vcpu, CPUSTAT_IO_INT);
440 	else
441 		vcpu->arch.sie_block->lctl |= LCTL_CR6;
442 }
443 
444 static void set_intercept_indicators_ext(struct kvm_vcpu *vcpu)
445 {
446 	if (!(pending_irqs_no_gisa(vcpu) & IRQ_PEND_EXT_MASK))
447 		return;
448 	if (psw_extint_disabled(vcpu))
449 		kvm_s390_set_cpuflags(vcpu, CPUSTAT_EXT_INT);
450 	else
451 		vcpu->arch.sie_block->lctl |= LCTL_CR0;
452 }
453 
454 static void set_intercept_indicators_mchk(struct kvm_vcpu *vcpu)
455 {
456 	if (!(pending_irqs_no_gisa(vcpu) & IRQ_PEND_MCHK_MASK))
457 		return;
458 	if (psw_mchk_disabled(vcpu))
459 		vcpu->arch.sie_block->ictl |= ICTL_LPSW;
460 	else
461 		vcpu->arch.sie_block->lctl |= LCTL_CR14;
462 }
463 
464 static void set_intercept_indicators_stop(struct kvm_vcpu *vcpu)
465 {
466 	if (kvm_s390_is_stop_irq_pending(vcpu))
467 		kvm_s390_set_cpuflags(vcpu, CPUSTAT_STOP_INT);
468 }
469 
470 /* Set interception request for non-deliverable interrupts */
471 static void set_intercept_indicators(struct kvm_vcpu *vcpu)
472 {
473 	set_intercept_indicators_io(vcpu);
474 	set_intercept_indicators_ext(vcpu);
475 	set_intercept_indicators_mchk(vcpu);
476 	set_intercept_indicators_stop(vcpu);
477 }
478 
479 static int __must_check __deliver_cpu_timer(struct kvm_vcpu *vcpu)
480 {
481 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
482 	int rc;
483 
484 	vcpu->stat.deliver_cputm++;
485 	trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_CPU_TIMER,
486 					 0, 0);
487 
488 	rc  = put_guest_lc(vcpu, EXT_IRQ_CPU_TIMER,
489 			   (u16 *)__LC_EXT_INT_CODE);
490 	rc |= put_guest_lc(vcpu, 0, (u16 *)__LC_EXT_CPU_ADDR);
491 	rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
492 			     &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
493 	rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
494 			    &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
495 	clear_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
496 	return rc ? -EFAULT : 0;
497 }
498 
499 static int __must_check __deliver_ckc(struct kvm_vcpu *vcpu)
500 {
501 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
502 	int rc;
503 
504 	vcpu->stat.deliver_ckc++;
505 	trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_CLOCK_COMP,
506 					 0, 0);
507 
508 	rc  = put_guest_lc(vcpu, EXT_IRQ_CLK_COMP,
509 			   (u16 __user *)__LC_EXT_INT_CODE);
510 	rc |= put_guest_lc(vcpu, 0, (u16 *)__LC_EXT_CPU_ADDR);
511 	rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
512 			     &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
513 	rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
514 			    &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
515 	clear_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
516 	return rc ? -EFAULT : 0;
517 }
518 
519 static int __must_check __deliver_pfault_init(struct kvm_vcpu *vcpu)
520 {
521 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
522 	struct kvm_s390_ext_info ext;
523 	int rc;
524 
525 	spin_lock(&li->lock);
526 	ext = li->irq.ext;
527 	clear_bit(IRQ_PEND_PFAULT_INIT, &li->pending_irqs);
528 	li->irq.ext.ext_params2 = 0;
529 	spin_unlock(&li->lock);
530 
531 	VCPU_EVENT(vcpu, 4, "deliver: pfault init token 0x%llx",
532 		   ext.ext_params2);
533 	trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
534 					 KVM_S390_INT_PFAULT_INIT,
535 					 0, ext.ext_params2);
536 
537 	rc  = put_guest_lc(vcpu, EXT_IRQ_CP_SERVICE, (u16 *) __LC_EXT_INT_CODE);
538 	rc |= put_guest_lc(vcpu, PFAULT_INIT, (u16 *) __LC_EXT_CPU_ADDR);
539 	rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
540 			     &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
541 	rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
542 			    &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
543 	rc |= put_guest_lc(vcpu, ext.ext_params2, (u64 *) __LC_EXT_PARAMS2);
544 	return rc ? -EFAULT : 0;
545 }
546 
547 static int __write_machine_check(struct kvm_vcpu *vcpu,
548 				 struct kvm_s390_mchk_info *mchk)
549 {
550 	unsigned long ext_sa_addr;
551 	unsigned long lc;
552 	freg_t fprs[NUM_FPRS];
553 	union mci mci;
554 	int rc;
555 
556 	mci.val = mchk->mcic;
557 	/* take care of lazy register loading */
558 	save_fpu_regs();
559 	save_access_regs(vcpu->run->s.regs.acrs);
560 	if (MACHINE_HAS_GS && vcpu->arch.gs_enabled)
561 		save_gs_cb(current->thread.gs_cb);
562 
563 	/* Extended save area */
564 	rc = read_guest_lc(vcpu, __LC_MCESAD, &ext_sa_addr,
565 			   sizeof(unsigned long));
566 	/* Only bits 0 through 63-LC are used for address formation */
567 	lc = ext_sa_addr & MCESA_LC_MASK;
568 	if (test_kvm_facility(vcpu->kvm, 133)) {
569 		switch (lc) {
570 		case 0:
571 		case 10:
572 			ext_sa_addr &= ~0x3ffUL;
573 			break;
574 		case 11:
575 			ext_sa_addr &= ~0x7ffUL;
576 			break;
577 		case 12:
578 			ext_sa_addr &= ~0xfffUL;
579 			break;
580 		default:
581 			ext_sa_addr = 0;
582 			break;
583 		}
584 	} else {
585 		ext_sa_addr &= ~0x3ffUL;
586 	}
587 
588 	if (!rc && mci.vr && ext_sa_addr && test_kvm_facility(vcpu->kvm, 129)) {
589 		if (write_guest_abs(vcpu, ext_sa_addr, vcpu->run->s.regs.vrs,
590 				    512))
591 			mci.vr = 0;
592 	} else {
593 		mci.vr = 0;
594 	}
595 	if (!rc && mci.gs && ext_sa_addr && test_kvm_facility(vcpu->kvm, 133)
596 	    && (lc == 11 || lc == 12)) {
597 		if (write_guest_abs(vcpu, ext_sa_addr + 1024,
598 				    &vcpu->run->s.regs.gscb, 32))
599 			mci.gs = 0;
600 	} else {
601 		mci.gs = 0;
602 	}
603 
604 	/* General interruption information */
605 	rc |= put_guest_lc(vcpu, 1, (u8 __user *) __LC_AR_MODE_ID);
606 	rc |= write_guest_lc(vcpu, __LC_MCK_OLD_PSW,
607 			     &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
608 	rc |= read_guest_lc(vcpu, __LC_MCK_NEW_PSW,
609 			    &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
610 	rc |= put_guest_lc(vcpu, mci.val, (u64 __user *) __LC_MCCK_CODE);
611 
612 	/* Register-save areas */
613 	if (MACHINE_HAS_VX) {
614 		convert_vx_to_fp(fprs, (__vector128 *) vcpu->run->s.regs.vrs);
615 		rc |= write_guest_lc(vcpu, __LC_FPREGS_SAVE_AREA, fprs, 128);
616 	} else {
617 		rc |= write_guest_lc(vcpu, __LC_FPREGS_SAVE_AREA,
618 				     vcpu->run->s.regs.fprs, 128);
619 	}
620 	rc |= write_guest_lc(vcpu, __LC_GPREGS_SAVE_AREA,
621 			     vcpu->run->s.regs.gprs, 128);
622 	rc |= put_guest_lc(vcpu, current->thread.fpu.fpc,
623 			   (u32 __user *) __LC_FP_CREG_SAVE_AREA);
624 	rc |= put_guest_lc(vcpu, vcpu->arch.sie_block->todpr,
625 			   (u32 __user *) __LC_TOD_PROGREG_SAVE_AREA);
626 	rc |= put_guest_lc(vcpu, kvm_s390_get_cpu_timer(vcpu),
627 			   (u64 __user *) __LC_CPU_TIMER_SAVE_AREA);
628 	rc |= put_guest_lc(vcpu, vcpu->arch.sie_block->ckc >> 8,
629 			   (u64 __user *) __LC_CLOCK_COMP_SAVE_AREA);
630 	rc |= write_guest_lc(vcpu, __LC_AREGS_SAVE_AREA,
631 			     &vcpu->run->s.regs.acrs, 64);
632 	rc |= write_guest_lc(vcpu, __LC_CREGS_SAVE_AREA,
633 			     &vcpu->arch.sie_block->gcr, 128);
634 
635 	/* Extended interruption information */
636 	rc |= put_guest_lc(vcpu, mchk->ext_damage_code,
637 			   (u32 __user *) __LC_EXT_DAMAGE_CODE);
638 	rc |= put_guest_lc(vcpu, mchk->failing_storage_address,
639 			   (u64 __user *) __LC_MCCK_FAIL_STOR_ADDR);
640 	rc |= write_guest_lc(vcpu, __LC_PSW_SAVE_AREA, &mchk->fixed_logout,
641 			     sizeof(mchk->fixed_logout));
642 	return rc ? -EFAULT : 0;
643 }
644 
645 static int __must_check __deliver_machine_check(struct kvm_vcpu *vcpu)
646 {
647 	struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
648 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
649 	struct kvm_s390_mchk_info mchk = {};
650 	int deliver = 0;
651 	int rc = 0;
652 
653 	spin_lock(&fi->lock);
654 	spin_lock(&li->lock);
655 	if (test_bit(IRQ_PEND_MCHK_EX, &li->pending_irqs) ||
656 	    test_bit(IRQ_PEND_MCHK_REP, &li->pending_irqs)) {
657 		/*
658 		 * If there was an exigent machine check pending, then any
659 		 * repressible machine checks that might have been pending
660 		 * are indicated along with it, so always clear bits for
661 		 * repressible and exigent interrupts
662 		 */
663 		mchk = li->irq.mchk;
664 		clear_bit(IRQ_PEND_MCHK_EX, &li->pending_irqs);
665 		clear_bit(IRQ_PEND_MCHK_REP, &li->pending_irqs);
666 		memset(&li->irq.mchk, 0, sizeof(mchk));
667 		deliver = 1;
668 	}
669 	/*
670 	 * We indicate floating repressible conditions along with
671 	 * other pending conditions. Channel Report Pending and Channel
672 	 * Subsystem damage are the only two and and are indicated by
673 	 * bits in mcic and masked in cr14.
674 	 */
675 	if (test_and_clear_bit(IRQ_PEND_MCHK_REP, &fi->pending_irqs)) {
676 		mchk.mcic |= fi->mchk.mcic;
677 		mchk.cr14 |= fi->mchk.cr14;
678 		memset(&fi->mchk, 0, sizeof(mchk));
679 		deliver = 1;
680 	}
681 	spin_unlock(&li->lock);
682 	spin_unlock(&fi->lock);
683 
684 	if (deliver) {
685 		VCPU_EVENT(vcpu, 3, "deliver: machine check mcic 0x%llx",
686 			   mchk.mcic);
687 		trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
688 						 KVM_S390_MCHK,
689 						 mchk.cr14, mchk.mcic);
690 		vcpu->stat.deliver_machine_check++;
691 		rc = __write_machine_check(vcpu, &mchk);
692 	}
693 	return rc;
694 }
695 
696 static int __must_check __deliver_restart(struct kvm_vcpu *vcpu)
697 {
698 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
699 	int rc;
700 
701 	VCPU_EVENT(vcpu, 3, "%s", "deliver: cpu restart");
702 	vcpu->stat.deliver_restart_signal++;
703 	trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_RESTART, 0, 0);
704 
705 	rc  = write_guest_lc(vcpu,
706 			     offsetof(struct lowcore, restart_old_psw),
707 			     &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
708 	rc |= read_guest_lc(vcpu, offsetof(struct lowcore, restart_psw),
709 			    &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
710 	clear_bit(IRQ_PEND_RESTART, &li->pending_irqs);
711 	return rc ? -EFAULT : 0;
712 }
713 
714 static int __must_check __deliver_set_prefix(struct kvm_vcpu *vcpu)
715 {
716 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
717 	struct kvm_s390_prefix_info prefix;
718 
719 	spin_lock(&li->lock);
720 	prefix = li->irq.prefix;
721 	li->irq.prefix.address = 0;
722 	clear_bit(IRQ_PEND_SET_PREFIX, &li->pending_irqs);
723 	spin_unlock(&li->lock);
724 
725 	vcpu->stat.deliver_prefix_signal++;
726 	trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
727 					 KVM_S390_SIGP_SET_PREFIX,
728 					 prefix.address, 0);
729 
730 	kvm_s390_set_prefix(vcpu, prefix.address);
731 	return 0;
732 }
733 
734 static int __must_check __deliver_emergency_signal(struct kvm_vcpu *vcpu)
735 {
736 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
737 	int rc;
738 	int cpu_addr;
739 
740 	spin_lock(&li->lock);
741 	cpu_addr = find_first_bit(li->sigp_emerg_pending, KVM_MAX_VCPUS);
742 	clear_bit(cpu_addr, li->sigp_emerg_pending);
743 	if (bitmap_empty(li->sigp_emerg_pending, KVM_MAX_VCPUS))
744 		clear_bit(IRQ_PEND_EXT_EMERGENCY, &li->pending_irqs);
745 	spin_unlock(&li->lock);
746 
747 	VCPU_EVENT(vcpu, 4, "%s", "deliver: sigp emerg");
748 	vcpu->stat.deliver_emergency_signal++;
749 	trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_EMERGENCY,
750 					 cpu_addr, 0);
751 
752 	rc  = put_guest_lc(vcpu, EXT_IRQ_EMERGENCY_SIG,
753 			   (u16 *)__LC_EXT_INT_CODE);
754 	rc |= put_guest_lc(vcpu, cpu_addr, (u16 *)__LC_EXT_CPU_ADDR);
755 	rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
756 			     &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
757 	rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
758 			    &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
759 	return rc ? -EFAULT : 0;
760 }
761 
762 static int __must_check __deliver_external_call(struct kvm_vcpu *vcpu)
763 {
764 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
765 	struct kvm_s390_extcall_info extcall;
766 	int rc;
767 
768 	spin_lock(&li->lock);
769 	extcall = li->irq.extcall;
770 	li->irq.extcall.code = 0;
771 	clear_bit(IRQ_PEND_EXT_EXTERNAL, &li->pending_irqs);
772 	spin_unlock(&li->lock);
773 
774 	VCPU_EVENT(vcpu, 4, "%s", "deliver: sigp ext call");
775 	vcpu->stat.deliver_external_call++;
776 	trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
777 					 KVM_S390_INT_EXTERNAL_CALL,
778 					 extcall.code, 0);
779 
780 	rc  = put_guest_lc(vcpu, EXT_IRQ_EXTERNAL_CALL,
781 			   (u16 *)__LC_EXT_INT_CODE);
782 	rc |= put_guest_lc(vcpu, extcall.code, (u16 *)__LC_EXT_CPU_ADDR);
783 	rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
784 			     &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
785 	rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW, &vcpu->arch.sie_block->gpsw,
786 			    sizeof(psw_t));
787 	return rc ? -EFAULT : 0;
788 }
789 
790 static int __must_check __deliver_prog(struct kvm_vcpu *vcpu)
791 {
792 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
793 	struct kvm_s390_pgm_info pgm_info;
794 	int rc = 0, nullifying = false;
795 	u16 ilen;
796 
797 	spin_lock(&li->lock);
798 	pgm_info = li->irq.pgm;
799 	clear_bit(IRQ_PEND_PROG, &li->pending_irqs);
800 	memset(&li->irq.pgm, 0, sizeof(pgm_info));
801 	spin_unlock(&li->lock);
802 
803 	ilen = pgm_info.flags & KVM_S390_PGM_FLAGS_ILC_MASK;
804 	VCPU_EVENT(vcpu, 3, "deliver: program irq code 0x%x, ilen:%d",
805 		   pgm_info.code, ilen);
806 	vcpu->stat.deliver_program++;
807 	trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_PROGRAM_INT,
808 					 pgm_info.code, 0);
809 
810 	switch (pgm_info.code & ~PGM_PER) {
811 	case PGM_AFX_TRANSLATION:
812 	case PGM_ASX_TRANSLATION:
813 	case PGM_EX_TRANSLATION:
814 	case PGM_LFX_TRANSLATION:
815 	case PGM_LSTE_SEQUENCE:
816 	case PGM_LSX_TRANSLATION:
817 	case PGM_LX_TRANSLATION:
818 	case PGM_PRIMARY_AUTHORITY:
819 	case PGM_SECONDARY_AUTHORITY:
820 		nullifying = true;
821 		/* fall through */
822 	case PGM_SPACE_SWITCH:
823 		rc = put_guest_lc(vcpu, pgm_info.trans_exc_code,
824 				  (u64 *)__LC_TRANS_EXC_CODE);
825 		break;
826 	case PGM_ALEN_TRANSLATION:
827 	case PGM_ALE_SEQUENCE:
828 	case PGM_ASTE_INSTANCE:
829 	case PGM_ASTE_SEQUENCE:
830 	case PGM_ASTE_VALIDITY:
831 	case PGM_EXTENDED_AUTHORITY:
832 		rc = put_guest_lc(vcpu, pgm_info.exc_access_id,
833 				  (u8 *)__LC_EXC_ACCESS_ID);
834 		nullifying = true;
835 		break;
836 	case PGM_ASCE_TYPE:
837 	case PGM_PAGE_TRANSLATION:
838 	case PGM_REGION_FIRST_TRANS:
839 	case PGM_REGION_SECOND_TRANS:
840 	case PGM_REGION_THIRD_TRANS:
841 	case PGM_SEGMENT_TRANSLATION:
842 		rc = put_guest_lc(vcpu, pgm_info.trans_exc_code,
843 				  (u64 *)__LC_TRANS_EXC_CODE);
844 		rc |= put_guest_lc(vcpu, pgm_info.exc_access_id,
845 				   (u8 *)__LC_EXC_ACCESS_ID);
846 		rc |= put_guest_lc(vcpu, pgm_info.op_access_id,
847 				   (u8 *)__LC_OP_ACCESS_ID);
848 		nullifying = true;
849 		break;
850 	case PGM_MONITOR:
851 		rc = put_guest_lc(vcpu, pgm_info.mon_class_nr,
852 				  (u16 *)__LC_MON_CLASS_NR);
853 		rc |= put_guest_lc(vcpu, pgm_info.mon_code,
854 				   (u64 *)__LC_MON_CODE);
855 		break;
856 	case PGM_VECTOR_PROCESSING:
857 	case PGM_DATA:
858 		rc = put_guest_lc(vcpu, pgm_info.data_exc_code,
859 				  (u32 *)__LC_DATA_EXC_CODE);
860 		break;
861 	case PGM_PROTECTION:
862 		rc = put_guest_lc(vcpu, pgm_info.trans_exc_code,
863 				  (u64 *)__LC_TRANS_EXC_CODE);
864 		rc |= put_guest_lc(vcpu, pgm_info.exc_access_id,
865 				   (u8 *)__LC_EXC_ACCESS_ID);
866 		break;
867 	case PGM_STACK_FULL:
868 	case PGM_STACK_EMPTY:
869 	case PGM_STACK_SPECIFICATION:
870 	case PGM_STACK_TYPE:
871 	case PGM_STACK_OPERATION:
872 	case PGM_TRACE_TABEL:
873 	case PGM_CRYPTO_OPERATION:
874 		nullifying = true;
875 		break;
876 	}
877 
878 	if (pgm_info.code & PGM_PER) {
879 		rc |= put_guest_lc(vcpu, pgm_info.per_code,
880 				   (u8 *) __LC_PER_CODE);
881 		rc |= put_guest_lc(vcpu, pgm_info.per_atmid,
882 				   (u8 *)__LC_PER_ATMID);
883 		rc |= put_guest_lc(vcpu, pgm_info.per_address,
884 				   (u64 *) __LC_PER_ADDRESS);
885 		rc |= put_guest_lc(vcpu, pgm_info.per_access_id,
886 				   (u8 *) __LC_PER_ACCESS_ID);
887 	}
888 
889 	if (nullifying && !(pgm_info.flags & KVM_S390_PGM_FLAGS_NO_REWIND))
890 		kvm_s390_rewind_psw(vcpu, ilen);
891 
892 	/* bit 1+2 of the target are the ilc, so we can directly use ilen */
893 	rc |= put_guest_lc(vcpu, ilen, (u16 *) __LC_PGM_ILC);
894 	rc |= put_guest_lc(vcpu, vcpu->arch.sie_block->gbea,
895 				 (u64 *) __LC_LAST_BREAK);
896 	rc |= put_guest_lc(vcpu, pgm_info.code,
897 			   (u16 *)__LC_PGM_INT_CODE);
898 	rc |= write_guest_lc(vcpu, __LC_PGM_OLD_PSW,
899 			     &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
900 	rc |= read_guest_lc(vcpu, __LC_PGM_NEW_PSW,
901 			    &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
902 	return rc ? -EFAULT : 0;
903 }
904 
905 static int __must_check __deliver_service(struct kvm_vcpu *vcpu)
906 {
907 	struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
908 	struct kvm_s390_ext_info ext;
909 	int rc = 0;
910 
911 	spin_lock(&fi->lock);
912 	if (!(test_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs))) {
913 		spin_unlock(&fi->lock);
914 		return 0;
915 	}
916 	ext = fi->srv_signal;
917 	memset(&fi->srv_signal, 0, sizeof(ext));
918 	clear_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs);
919 	spin_unlock(&fi->lock);
920 
921 	VCPU_EVENT(vcpu, 4, "deliver: sclp parameter 0x%x",
922 		   ext.ext_params);
923 	vcpu->stat.deliver_service_signal++;
924 	trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_SERVICE,
925 					 ext.ext_params, 0);
926 
927 	rc  = put_guest_lc(vcpu, EXT_IRQ_SERVICE_SIG, (u16 *)__LC_EXT_INT_CODE);
928 	rc |= put_guest_lc(vcpu, 0, (u16 *)__LC_EXT_CPU_ADDR);
929 	rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
930 			     &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
931 	rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
932 			    &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
933 	rc |= put_guest_lc(vcpu, ext.ext_params,
934 			   (u32 *)__LC_EXT_PARAMS);
935 
936 	return rc ? -EFAULT : 0;
937 }
938 
939 static int __must_check __deliver_pfault_done(struct kvm_vcpu *vcpu)
940 {
941 	struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
942 	struct kvm_s390_interrupt_info *inti;
943 	int rc = 0;
944 
945 	spin_lock(&fi->lock);
946 	inti = list_first_entry_or_null(&fi->lists[FIRQ_LIST_PFAULT],
947 					struct kvm_s390_interrupt_info,
948 					list);
949 	if (inti) {
950 		list_del(&inti->list);
951 		fi->counters[FIRQ_CNTR_PFAULT] -= 1;
952 	}
953 	if (list_empty(&fi->lists[FIRQ_LIST_PFAULT]))
954 		clear_bit(IRQ_PEND_PFAULT_DONE, &fi->pending_irqs);
955 	spin_unlock(&fi->lock);
956 
957 	if (inti) {
958 		trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
959 						 KVM_S390_INT_PFAULT_DONE, 0,
960 						 inti->ext.ext_params2);
961 		VCPU_EVENT(vcpu, 4, "deliver: pfault done token 0x%llx",
962 			   inti->ext.ext_params2);
963 
964 		rc  = put_guest_lc(vcpu, EXT_IRQ_CP_SERVICE,
965 				(u16 *)__LC_EXT_INT_CODE);
966 		rc |= put_guest_lc(vcpu, PFAULT_DONE,
967 				(u16 *)__LC_EXT_CPU_ADDR);
968 		rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
969 				&vcpu->arch.sie_block->gpsw,
970 				sizeof(psw_t));
971 		rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
972 				&vcpu->arch.sie_block->gpsw,
973 				sizeof(psw_t));
974 		rc |= put_guest_lc(vcpu, inti->ext.ext_params2,
975 				(u64 *)__LC_EXT_PARAMS2);
976 		kfree(inti);
977 	}
978 	return rc ? -EFAULT : 0;
979 }
980 
981 static int __must_check __deliver_virtio(struct kvm_vcpu *vcpu)
982 {
983 	struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
984 	struct kvm_s390_interrupt_info *inti;
985 	int rc = 0;
986 
987 	spin_lock(&fi->lock);
988 	inti = list_first_entry_or_null(&fi->lists[FIRQ_LIST_VIRTIO],
989 					struct kvm_s390_interrupt_info,
990 					list);
991 	if (inti) {
992 		VCPU_EVENT(vcpu, 4,
993 			   "deliver: virtio parm: 0x%x,parm64: 0x%llx",
994 			   inti->ext.ext_params, inti->ext.ext_params2);
995 		vcpu->stat.deliver_virtio++;
996 		trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
997 				inti->type,
998 				inti->ext.ext_params,
999 				inti->ext.ext_params2);
1000 		list_del(&inti->list);
1001 		fi->counters[FIRQ_CNTR_VIRTIO] -= 1;
1002 	}
1003 	if (list_empty(&fi->lists[FIRQ_LIST_VIRTIO]))
1004 		clear_bit(IRQ_PEND_VIRTIO, &fi->pending_irqs);
1005 	spin_unlock(&fi->lock);
1006 
1007 	if (inti) {
1008 		rc  = put_guest_lc(vcpu, EXT_IRQ_CP_SERVICE,
1009 				(u16 *)__LC_EXT_INT_CODE);
1010 		rc |= put_guest_lc(vcpu, VIRTIO_PARAM,
1011 				(u16 *)__LC_EXT_CPU_ADDR);
1012 		rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
1013 				&vcpu->arch.sie_block->gpsw,
1014 				sizeof(psw_t));
1015 		rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
1016 				&vcpu->arch.sie_block->gpsw,
1017 				sizeof(psw_t));
1018 		rc |= put_guest_lc(vcpu, inti->ext.ext_params,
1019 				(u32 *)__LC_EXT_PARAMS);
1020 		rc |= put_guest_lc(vcpu, inti->ext.ext_params2,
1021 				(u64 *)__LC_EXT_PARAMS2);
1022 		kfree(inti);
1023 	}
1024 	return rc ? -EFAULT : 0;
1025 }
1026 
1027 static int __do_deliver_io(struct kvm_vcpu *vcpu, struct kvm_s390_io_info *io)
1028 {
1029 	int rc;
1030 
1031 	rc  = put_guest_lc(vcpu, io->subchannel_id, (u16 *)__LC_SUBCHANNEL_ID);
1032 	rc |= put_guest_lc(vcpu, io->subchannel_nr, (u16 *)__LC_SUBCHANNEL_NR);
1033 	rc |= put_guest_lc(vcpu, io->io_int_parm, (u32 *)__LC_IO_INT_PARM);
1034 	rc |= put_guest_lc(vcpu, io->io_int_word, (u32 *)__LC_IO_INT_WORD);
1035 	rc |= write_guest_lc(vcpu, __LC_IO_OLD_PSW,
1036 			     &vcpu->arch.sie_block->gpsw,
1037 			     sizeof(psw_t));
1038 	rc |= read_guest_lc(vcpu, __LC_IO_NEW_PSW,
1039 			    &vcpu->arch.sie_block->gpsw,
1040 			    sizeof(psw_t));
1041 	return rc ? -EFAULT : 0;
1042 }
1043 
1044 static int __must_check __deliver_io(struct kvm_vcpu *vcpu,
1045 				     unsigned long irq_type)
1046 {
1047 	struct list_head *isc_list;
1048 	struct kvm_s390_float_interrupt *fi;
1049 	struct kvm_s390_gisa_interrupt *gi = &vcpu->kvm->arch.gisa_int;
1050 	struct kvm_s390_interrupt_info *inti = NULL;
1051 	struct kvm_s390_io_info io;
1052 	u32 isc;
1053 	int rc = 0;
1054 
1055 	fi = &vcpu->kvm->arch.float_int;
1056 
1057 	spin_lock(&fi->lock);
1058 	isc = irq_type_to_isc(irq_type);
1059 	isc_list = &fi->lists[isc];
1060 	inti = list_first_entry_or_null(isc_list,
1061 					struct kvm_s390_interrupt_info,
1062 					list);
1063 	if (inti) {
1064 		if (inti->type & KVM_S390_INT_IO_AI_MASK)
1065 			VCPU_EVENT(vcpu, 4, "%s", "deliver: I/O (AI)");
1066 		else
1067 			VCPU_EVENT(vcpu, 4, "deliver: I/O %x ss %x schid %04x",
1068 			inti->io.subchannel_id >> 8,
1069 			inti->io.subchannel_id >> 1 & 0x3,
1070 			inti->io.subchannel_nr);
1071 
1072 		vcpu->stat.deliver_io++;
1073 		trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
1074 				inti->type,
1075 				((__u32)inti->io.subchannel_id << 16) |
1076 				inti->io.subchannel_nr,
1077 				((__u64)inti->io.io_int_parm << 32) |
1078 				inti->io.io_int_word);
1079 		list_del(&inti->list);
1080 		fi->counters[FIRQ_CNTR_IO] -= 1;
1081 	}
1082 	if (list_empty(isc_list))
1083 		clear_bit(irq_type, &fi->pending_irqs);
1084 	spin_unlock(&fi->lock);
1085 
1086 	if (inti) {
1087 		rc = __do_deliver_io(vcpu, &(inti->io));
1088 		kfree(inti);
1089 		goto out;
1090 	}
1091 
1092 	if (gi->origin && gisa_tac_ipm_gisc(gi->origin, isc)) {
1093 		/*
1094 		 * in case an adapter interrupt was not delivered
1095 		 * in SIE context KVM will handle the delivery
1096 		 */
1097 		VCPU_EVENT(vcpu, 4, "%s isc %u", "deliver: I/O (AI/gisa)", isc);
1098 		memset(&io, 0, sizeof(io));
1099 		io.io_int_word = isc_to_int_word(isc);
1100 		vcpu->stat.deliver_io++;
1101 		trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
1102 			KVM_S390_INT_IO(1, 0, 0, 0),
1103 			((__u32)io.subchannel_id << 16) |
1104 			io.subchannel_nr,
1105 			((__u64)io.io_int_parm << 32) |
1106 			io.io_int_word);
1107 		rc = __do_deliver_io(vcpu, &io);
1108 	}
1109 out:
1110 	return rc;
1111 }
1112 
1113 /* Check whether an external call is pending (deliverable or not) */
1114 int kvm_s390_ext_call_pending(struct kvm_vcpu *vcpu)
1115 {
1116 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1117 
1118 	if (!sclp.has_sigpif)
1119 		return test_bit(IRQ_PEND_EXT_EXTERNAL, &li->pending_irqs);
1120 
1121 	return sca_ext_call_pending(vcpu, NULL);
1122 }
1123 
1124 int kvm_s390_vcpu_has_irq(struct kvm_vcpu *vcpu, int exclude_stop)
1125 {
1126 	if (deliverable_irqs(vcpu))
1127 		return 1;
1128 
1129 	if (kvm_cpu_has_pending_timer(vcpu))
1130 		return 1;
1131 
1132 	/* external call pending and deliverable */
1133 	if (kvm_s390_ext_call_pending(vcpu) &&
1134 	    !psw_extint_disabled(vcpu) &&
1135 	    (vcpu->arch.sie_block->gcr[0] & CR0_EXTERNAL_CALL_SUBMASK))
1136 		return 1;
1137 
1138 	if (!exclude_stop && kvm_s390_is_stop_irq_pending(vcpu))
1139 		return 1;
1140 	return 0;
1141 }
1142 
1143 int kvm_cpu_has_pending_timer(struct kvm_vcpu *vcpu)
1144 {
1145 	return ckc_irq_pending(vcpu) || cpu_timer_irq_pending(vcpu);
1146 }
1147 
1148 static u64 __calculate_sltime(struct kvm_vcpu *vcpu)
1149 {
1150 	const u64 now = kvm_s390_get_tod_clock_fast(vcpu->kvm);
1151 	const u64 ckc = vcpu->arch.sie_block->ckc;
1152 	u64 cputm, sltime = 0;
1153 
1154 	if (ckc_interrupts_enabled(vcpu)) {
1155 		if (vcpu->arch.sie_block->gcr[0] & CR0_CLOCK_COMPARATOR_SIGN) {
1156 			if ((s64)now < (s64)ckc)
1157 				sltime = tod_to_ns((s64)ckc - (s64)now);
1158 		} else if (now < ckc) {
1159 			sltime = tod_to_ns(ckc - now);
1160 		}
1161 		/* already expired */
1162 		if (!sltime)
1163 			return 0;
1164 		if (cpu_timer_interrupts_enabled(vcpu)) {
1165 			cputm = kvm_s390_get_cpu_timer(vcpu);
1166 			/* already expired? */
1167 			if (cputm >> 63)
1168 				return 0;
1169 			return min(sltime, tod_to_ns(cputm));
1170 		}
1171 	} else if (cpu_timer_interrupts_enabled(vcpu)) {
1172 		sltime = kvm_s390_get_cpu_timer(vcpu);
1173 		/* already expired? */
1174 		if (sltime >> 63)
1175 			return 0;
1176 	}
1177 	return sltime;
1178 }
1179 
1180 int kvm_s390_handle_wait(struct kvm_vcpu *vcpu)
1181 {
1182 	struct kvm_s390_gisa_interrupt *gi = &vcpu->kvm->arch.gisa_int;
1183 	u64 sltime;
1184 
1185 	vcpu->stat.exit_wait_state++;
1186 
1187 	/* fast path */
1188 	if (kvm_arch_vcpu_runnable(vcpu))
1189 		return 0;
1190 
1191 	if (psw_interrupts_disabled(vcpu)) {
1192 		VCPU_EVENT(vcpu, 3, "%s", "disabled wait");
1193 		return -EOPNOTSUPP; /* disabled wait */
1194 	}
1195 
1196 	if (gi->origin &&
1197 	    (gisa_get_ipm_or_restore_iam(gi) &
1198 	     vcpu->arch.sie_block->gcr[6] >> 24))
1199 		return 0;
1200 
1201 	if (!ckc_interrupts_enabled(vcpu) &&
1202 	    !cpu_timer_interrupts_enabled(vcpu)) {
1203 		VCPU_EVENT(vcpu, 3, "%s", "enabled wait w/o timer");
1204 		__set_cpu_idle(vcpu);
1205 		goto no_timer;
1206 	}
1207 
1208 	sltime = __calculate_sltime(vcpu);
1209 	if (!sltime)
1210 		return 0;
1211 
1212 	__set_cpu_idle(vcpu);
1213 	hrtimer_start(&vcpu->arch.ckc_timer, sltime, HRTIMER_MODE_REL);
1214 	VCPU_EVENT(vcpu, 4, "enabled wait: %llu ns", sltime);
1215 no_timer:
1216 	srcu_read_unlock(&vcpu->kvm->srcu, vcpu->srcu_idx);
1217 	kvm_vcpu_block(vcpu);
1218 	__unset_cpu_idle(vcpu);
1219 	vcpu->srcu_idx = srcu_read_lock(&vcpu->kvm->srcu);
1220 
1221 	hrtimer_cancel(&vcpu->arch.ckc_timer);
1222 	return 0;
1223 }
1224 
1225 void kvm_s390_vcpu_wakeup(struct kvm_vcpu *vcpu)
1226 {
1227 	/*
1228 	 * We cannot move this into the if, as the CPU might be already
1229 	 * in kvm_vcpu_block without having the waitqueue set (polling)
1230 	 */
1231 	vcpu->valid_wakeup = true;
1232 	/*
1233 	 * This is mostly to document, that the read in swait_active could
1234 	 * be moved before other stores, leading to subtle races.
1235 	 * All current users do not store or use an atomic like update
1236 	 */
1237 	smp_mb__after_atomic();
1238 	if (swait_active(&vcpu->wq)) {
1239 		/*
1240 		 * The vcpu gave up the cpu voluntarily, mark it as a good
1241 		 * yield-candidate.
1242 		 */
1243 		vcpu->preempted = true;
1244 		swake_up_one(&vcpu->wq);
1245 		vcpu->stat.halt_wakeup++;
1246 	}
1247 	/*
1248 	 * The VCPU might not be sleeping but is executing the VSIE. Let's
1249 	 * kick it, so it leaves the SIE to process the request.
1250 	 */
1251 	kvm_s390_vsie_kick(vcpu);
1252 }
1253 
1254 enum hrtimer_restart kvm_s390_idle_wakeup(struct hrtimer *timer)
1255 {
1256 	struct kvm_vcpu *vcpu;
1257 	u64 sltime;
1258 
1259 	vcpu = container_of(timer, struct kvm_vcpu, arch.ckc_timer);
1260 	sltime = __calculate_sltime(vcpu);
1261 
1262 	/*
1263 	 * If the monotonic clock runs faster than the tod clock we might be
1264 	 * woken up too early and have to go back to sleep to avoid deadlocks.
1265 	 */
1266 	if (sltime && hrtimer_forward_now(timer, ns_to_ktime(sltime)))
1267 		return HRTIMER_RESTART;
1268 	kvm_s390_vcpu_wakeup(vcpu);
1269 	return HRTIMER_NORESTART;
1270 }
1271 
1272 void kvm_s390_clear_local_irqs(struct kvm_vcpu *vcpu)
1273 {
1274 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1275 
1276 	spin_lock(&li->lock);
1277 	li->pending_irqs = 0;
1278 	bitmap_zero(li->sigp_emerg_pending, KVM_MAX_VCPUS);
1279 	memset(&li->irq, 0, sizeof(li->irq));
1280 	spin_unlock(&li->lock);
1281 
1282 	sca_clear_ext_call(vcpu);
1283 }
1284 
1285 int __must_check kvm_s390_deliver_pending_interrupts(struct kvm_vcpu *vcpu)
1286 {
1287 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1288 	int rc = 0;
1289 	unsigned long irq_type;
1290 	unsigned long irqs;
1291 
1292 	__reset_intercept_indicators(vcpu);
1293 
1294 	/* pending ckc conditions might have been invalidated */
1295 	clear_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
1296 	if (ckc_irq_pending(vcpu))
1297 		set_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
1298 
1299 	/* pending cpu timer conditions might have been invalidated */
1300 	clear_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
1301 	if (cpu_timer_irq_pending(vcpu))
1302 		set_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
1303 
1304 	while ((irqs = deliverable_irqs(vcpu)) && !rc) {
1305 		/* bits are in the reverse order of interrupt priority */
1306 		irq_type = find_last_bit(&irqs, IRQ_PEND_COUNT);
1307 		switch (irq_type) {
1308 		case IRQ_PEND_IO_ISC_0:
1309 		case IRQ_PEND_IO_ISC_1:
1310 		case IRQ_PEND_IO_ISC_2:
1311 		case IRQ_PEND_IO_ISC_3:
1312 		case IRQ_PEND_IO_ISC_4:
1313 		case IRQ_PEND_IO_ISC_5:
1314 		case IRQ_PEND_IO_ISC_6:
1315 		case IRQ_PEND_IO_ISC_7:
1316 			rc = __deliver_io(vcpu, irq_type);
1317 			break;
1318 		case IRQ_PEND_MCHK_EX:
1319 		case IRQ_PEND_MCHK_REP:
1320 			rc = __deliver_machine_check(vcpu);
1321 			break;
1322 		case IRQ_PEND_PROG:
1323 			rc = __deliver_prog(vcpu);
1324 			break;
1325 		case IRQ_PEND_EXT_EMERGENCY:
1326 			rc = __deliver_emergency_signal(vcpu);
1327 			break;
1328 		case IRQ_PEND_EXT_EXTERNAL:
1329 			rc = __deliver_external_call(vcpu);
1330 			break;
1331 		case IRQ_PEND_EXT_CLOCK_COMP:
1332 			rc = __deliver_ckc(vcpu);
1333 			break;
1334 		case IRQ_PEND_EXT_CPU_TIMER:
1335 			rc = __deliver_cpu_timer(vcpu);
1336 			break;
1337 		case IRQ_PEND_RESTART:
1338 			rc = __deliver_restart(vcpu);
1339 			break;
1340 		case IRQ_PEND_SET_PREFIX:
1341 			rc = __deliver_set_prefix(vcpu);
1342 			break;
1343 		case IRQ_PEND_PFAULT_INIT:
1344 			rc = __deliver_pfault_init(vcpu);
1345 			break;
1346 		case IRQ_PEND_EXT_SERVICE:
1347 			rc = __deliver_service(vcpu);
1348 			break;
1349 		case IRQ_PEND_PFAULT_DONE:
1350 			rc = __deliver_pfault_done(vcpu);
1351 			break;
1352 		case IRQ_PEND_VIRTIO:
1353 			rc = __deliver_virtio(vcpu);
1354 			break;
1355 		default:
1356 			WARN_ONCE(1, "Unknown pending irq type %ld", irq_type);
1357 			clear_bit(irq_type, &li->pending_irqs);
1358 		}
1359 	}
1360 
1361 	set_intercept_indicators(vcpu);
1362 
1363 	return rc;
1364 }
1365 
1366 static int __inject_prog(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1367 {
1368 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1369 
1370 	vcpu->stat.inject_program++;
1371 	VCPU_EVENT(vcpu, 3, "inject: program irq code 0x%x", irq->u.pgm.code);
1372 	trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_PROGRAM_INT,
1373 				   irq->u.pgm.code, 0);
1374 
1375 	if (!(irq->u.pgm.flags & KVM_S390_PGM_FLAGS_ILC_VALID)) {
1376 		/* auto detection if no valid ILC was given */
1377 		irq->u.pgm.flags &= ~KVM_S390_PGM_FLAGS_ILC_MASK;
1378 		irq->u.pgm.flags |= kvm_s390_get_ilen(vcpu);
1379 		irq->u.pgm.flags |= KVM_S390_PGM_FLAGS_ILC_VALID;
1380 	}
1381 
1382 	if (irq->u.pgm.code == PGM_PER) {
1383 		li->irq.pgm.code |= PGM_PER;
1384 		li->irq.pgm.flags = irq->u.pgm.flags;
1385 		/* only modify PER related information */
1386 		li->irq.pgm.per_address = irq->u.pgm.per_address;
1387 		li->irq.pgm.per_code = irq->u.pgm.per_code;
1388 		li->irq.pgm.per_atmid = irq->u.pgm.per_atmid;
1389 		li->irq.pgm.per_access_id = irq->u.pgm.per_access_id;
1390 	} else if (!(irq->u.pgm.code & PGM_PER)) {
1391 		li->irq.pgm.code = (li->irq.pgm.code & PGM_PER) |
1392 				   irq->u.pgm.code;
1393 		li->irq.pgm.flags = irq->u.pgm.flags;
1394 		/* only modify non-PER information */
1395 		li->irq.pgm.trans_exc_code = irq->u.pgm.trans_exc_code;
1396 		li->irq.pgm.mon_code = irq->u.pgm.mon_code;
1397 		li->irq.pgm.data_exc_code = irq->u.pgm.data_exc_code;
1398 		li->irq.pgm.mon_class_nr = irq->u.pgm.mon_class_nr;
1399 		li->irq.pgm.exc_access_id = irq->u.pgm.exc_access_id;
1400 		li->irq.pgm.op_access_id = irq->u.pgm.op_access_id;
1401 	} else {
1402 		li->irq.pgm = irq->u.pgm;
1403 	}
1404 	set_bit(IRQ_PEND_PROG, &li->pending_irqs);
1405 	return 0;
1406 }
1407 
1408 static int __inject_pfault_init(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1409 {
1410 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1411 
1412 	vcpu->stat.inject_pfault_init++;
1413 	VCPU_EVENT(vcpu, 4, "inject: pfault init parameter block at 0x%llx",
1414 		   irq->u.ext.ext_params2);
1415 	trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_PFAULT_INIT,
1416 				   irq->u.ext.ext_params,
1417 				   irq->u.ext.ext_params2);
1418 
1419 	li->irq.ext = irq->u.ext;
1420 	set_bit(IRQ_PEND_PFAULT_INIT, &li->pending_irqs);
1421 	kvm_s390_set_cpuflags(vcpu, CPUSTAT_EXT_INT);
1422 	return 0;
1423 }
1424 
1425 static int __inject_extcall(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1426 {
1427 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1428 	struct kvm_s390_extcall_info *extcall = &li->irq.extcall;
1429 	uint16_t src_id = irq->u.extcall.code;
1430 
1431 	vcpu->stat.inject_external_call++;
1432 	VCPU_EVENT(vcpu, 4, "inject: external call source-cpu:%u",
1433 		   src_id);
1434 	trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_EXTERNAL_CALL,
1435 				   src_id, 0);
1436 
1437 	/* sending vcpu invalid */
1438 	if (kvm_get_vcpu_by_id(vcpu->kvm, src_id) == NULL)
1439 		return -EINVAL;
1440 
1441 	if (sclp.has_sigpif)
1442 		return sca_inject_ext_call(vcpu, src_id);
1443 
1444 	if (test_and_set_bit(IRQ_PEND_EXT_EXTERNAL, &li->pending_irqs))
1445 		return -EBUSY;
1446 	*extcall = irq->u.extcall;
1447 	kvm_s390_set_cpuflags(vcpu, CPUSTAT_EXT_INT);
1448 	return 0;
1449 }
1450 
1451 static int __inject_set_prefix(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1452 {
1453 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1454 	struct kvm_s390_prefix_info *prefix = &li->irq.prefix;
1455 
1456 	vcpu->stat.inject_set_prefix++;
1457 	VCPU_EVENT(vcpu, 3, "inject: set prefix to %x",
1458 		   irq->u.prefix.address);
1459 	trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_SIGP_SET_PREFIX,
1460 				   irq->u.prefix.address, 0);
1461 
1462 	if (!is_vcpu_stopped(vcpu))
1463 		return -EBUSY;
1464 
1465 	*prefix = irq->u.prefix;
1466 	set_bit(IRQ_PEND_SET_PREFIX, &li->pending_irqs);
1467 	return 0;
1468 }
1469 
1470 #define KVM_S390_STOP_SUPP_FLAGS (KVM_S390_STOP_FLAG_STORE_STATUS)
1471 static int __inject_sigp_stop(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1472 {
1473 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1474 	struct kvm_s390_stop_info *stop = &li->irq.stop;
1475 	int rc = 0;
1476 
1477 	vcpu->stat.inject_stop_signal++;
1478 	trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_SIGP_STOP, 0, 0);
1479 
1480 	if (irq->u.stop.flags & ~KVM_S390_STOP_SUPP_FLAGS)
1481 		return -EINVAL;
1482 
1483 	if (is_vcpu_stopped(vcpu)) {
1484 		if (irq->u.stop.flags & KVM_S390_STOP_FLAG_STORE_STATUS)
1485 			rc = kvm_s390_store_status_unloaded(vcpu,
1486 						KVM_S390_STORE_STATUS_NOADDR);
1487 		return rc;
1488 	}
1489 
1490 	if (test_and_set_bit(IRQ_PEND_SIGP_STOP, &li->pending_irqs))
1491 		return -EBUSY;
1492 	stop->flags = irq->u.stop.flags;
1493 	kvm_s390_set_cpuflags(vcpu, CPUSTAT_STOP_INT);
1494 	return 0;
1495 }
1496 
1497 static int __inject_sigp_restart(struct kvm_vcpu *vcpu,
1498 				 struct kvm_s390_irq *irq)
1499 {
1500 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1501 
1502 	vcpu->stat.inject_restart++;
1503 	VCPU_EVENT(vcpu, 3, "%s", "inject: restart int");
1504 	trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_RESTART, 0, 0);
1505 
1506 	set_bit(IRQ_PEND_RESTART, &li->pending_irqs);
1507 	return 0;
1508 }
1509 
1510 static int __inject_sigp_emergency(struct kvm_vcpu *vcpu,
1511 				   struct kvm_s390_irq *irq)
1512 {
1513 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1514 
1515 	vcpu->stat.inject_emergency_signal++;
1516 	VCPU_EVENT(vcpu, 4, "inject: emergency from cpu %u",
1517 		   irq->u.emerg.code);
1518 	trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_EMERGENCY,
1519 				   irq->u.emerg.code, 0);
1520 
1521 	/* sending vcpu invalid */
1522 	if (kvm_get_vcpu_by_id(vcpu->kvm, irq->u.emerg.code) == NULL)
1523 		return -EINVAL;
1524 
1525 	set_bit(irq->u.emerg.code, li->sigp_emerg_pending);
1526 	set_bit(IRQ_PEND_EXT_EMERGENCY, &li->pending_irqs);
1527 	kvm_s390_set_cpuflags(vcpu, CPUSTAT_EXT_INT);
1528 	return 0;
1529 }
1530 
1531 static int __inject_mchk(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1532 {
1533 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1534 	struct kvm_s390_mchk_info *mchk = &li->irq.mchk;
1535 
1536 	vcpu->stat.inject_mchk++;
1537 	VCPU_EVENT(vcpu, 3, "inject: machine check mcic 0x%llx",
1538 		   irq->u.mchk.mcic);
1539 	trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_MCHK, 0,
1540 				   irq->u.mchk.mcic);
1541 
1542 	/*
1543 	 * Because repressible machine checks can be indicated along with
1544 	 * exigent machine checks (PoP, Chapter 11, Interruption action)
1545 	 * we need to combine cr14, mcic and external damage code.
1546 	 * Failing storage address and the logout area should not be or'ed
1547 	 * together, we just indicate the last occurrence of the corresponding
1548 	 * machine check
1549 	 */
1550 	mchk->cr14 |= irq->u.mchk.cr14;
1551 	mchk->mcic |= irq->u.mchk.mcic;
1552 	mchk->ext_damage_code |= irq->u.mchk.ext_damage_code;
1553 	mchk->failing_storage_address = irq->u.mchk.failing_storage_address;
1554 	memcpy(&mchk->fixed_logout, &irq->u.mchk.fixed_logout,
1555 	       sizeof(mchk->fixed_logout));
1556 	if (mchk->mcic & MCHK_EX_MASK)
1557 		set_bit(IRQ_PEND_MCHK_EX, &li->pending_irqs);
1558 	else if (mchk->mcic & MCHK_REP_MASK)
1559 		set_bit(IRQ_PEND_MCHK_REP,  &li->pending_irqs);
1560 	return 0;
1561 }
1562 
1563 static int __inject_ckc(struct kvm_vcpu *vcpu)
1564 {
1565 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1566 
1567 	vcpu->stat.inject_ckc++;
1568 	VCPU_EVENT(vcpu, 3, "%s", "inject: clock comparator external");
1569 	trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_CLOCK_COMP,
1570 				   0, 0);
1571 
1572 	set_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
1573 	kvm_s390_set_cpuflags(vcpu, CPUSTAT_EXT_INT);
1574 	return 0;
1575 }
1576 
1577 static int __inject_cpu_timer(struct kvm_vcpu *vcpu)
1578 {
1579 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1580 
1581 	vcpu->stat.inject_cputm++;
1582 	VCPU_EVENT(vcpu, 3, "%s", "inject: cpu timer external");
1583 	trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_CPU_TIMER,
1584 				   0, 0);
1585 
1586 	set_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
1587 	kvm_s390_set_cpuflags(vcpu, CPUSTAT_EXT_INT);
1588 	return 0;
1589 }
1590 
1591 static struct kvm_s390_interrupt_info *get_io_int(struct kvm *kvm,
1592 						  int isc, u32 schid)
1593 {
1594 	struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1595 	struct list_head *isc_list = &fi->lists[FIRQ_LIST_IO_ISC_0 + isc];
1596 	struct kvm_s390_interrupt_info *iter;
1597 	u16 id = (schid & 0xffff0000U) >> 16;
1598 	u16 nr = schid & 0x0000ffffU;
1599 
1600 	spin_lock(&fi->lock);
1601 	list_for_each_entry(iter, isc_list, list) {
1602 		if (schid && (id != iter->io.subchannel_id ||
1603 			      nr != iter->io.subchannel_nr))
1604 			continue;
1605 		/* found an appropriate entry */
1606 		list_del_init(&iter->list);
1607 		fi->counters[FIRQ_CNTR_IO] -= 1;
1608 		if (list_empty(isc_list))
1609 			clear_bit(isc_to_irq_type(isc), &fi->pending_irqs);
1610 		spin_unlock(&fi->lock);
1611 		return iter;
1612 	}
1613 	spin_unlock(&fi->lock);
1614 	return NULL;
1615 }
1616 
1617 static struct kvm_s390_interrupt_info *get_top_io_int(struct kvm *kvm,
1618 						      u64 isc_mask, u32 schid)
1619 {
1620 	struct kvm_s390_interrupt_info *inti = NULL;
1621 	int isc;
1622 
1623 	for (isc = 0; isc <= MAX_ISC && !inti; isc++) {
1624 		if (isc_mask & isc_to_isc_bits(isc))
1625 			inti = get_io_int(kvm, isc, schid);
1626 	}
1627 	return inti;
1628 }
1629 
1630 static int get_top_gisa_isc(struct kvm *kvm, u64 isc_mask, u32 schid)
1631 {
1632 	struct kvm_s390_gisa_interrupt *gi = &kvm->arch.gisa_int;
1633 	unsigned long active_mask;
1634 	int isc;
1635 
1636 	if (schid)
1637 		goto out;
1638 	if (!gi->origin)
1639 		goto out;
1640 
1641 	active_mask = (isc_mask & gisa_get_ipm(gi->origin) << 24) << 32;
1642 	while (active_mask) {
1643 		isc = __fls(active_mask) ^ (BITS_PER_LONG - 1);
1644 		if (gisa_tac_ipm_gisc(gi->origin, isc))
1645 			return isc;
1646 		clear_bit_inv(isc, &active_mask);
1647 	}
1648 out:
1649 	return -EINVAL;
1650 }
1651 
1652 /*
1653  * Dequeue and return an I/O interrupt matching any of the interruption
1654  * subclasses as designated by the isc mask in cr6 and the schid (if != 0).
1655  * Take into account the interrupts pending in the interrupt list and in GISA.
1656  *
1657  * Note that for a guest that does not enable I/O interrupts
1658  * but relies on TPI, a flood of classic interrupts may starve
1659  * out adapter interrupts on the same isc. Linux does not do
1660  * that, and it is possible to work around the issue by configuring
1661  * different iscs for classic and adapter interrupts in the guest,
1662  * but we may want to revisit this in the future.
1663  */
1664 struct kvm_s390_interrupt_info *kvm_s390_get_io_int(struct kvm *kvm,
1665 						    u64 isc_mask, u32 schid)
1666 {
1667 	struct kvm_s390_gisa_interrupt *gi = &kvm->arch.gisa_int;
1668 	struct kvm_s390_interrupt_info *inti, *tmp_inti;
1669 	int isc;
1670 
1671 	inti = get_top_io_int(kvm, isc_mask, schid);
1672 
1673 	isc = get_top_gisa_isc(kvm, isc_mask, schid);
1674 	if (isc < 0)
1675 		/* no AI in GISA */
1676 		goto out;
1677 
1678 	if (!inti)
1679 		/* AI in GISA but no classical IO int */
1680 		goto gisa_out;
1681 
1682 	/* both types of interrupts present */
1683 	if (int_word_to_isc(inti->io.io_int_word) <= isc) {
1684 		/* classical IO int with higher priority */
1685 		gisa_set_ipm_gisc(gi->origin, isc);
1686 		goto out;
1687 	}
1688 gisa_out:
1689 	tmp_inti = kzalloc(sizeof(*inti), GFP_KERNEL);
1690 	if (tmp_inti) {
1691 		tmp_inti->type = KVM_S390_INT_IO(1, 0, 0, 0);
1692 		tmp_inti->io.io_int_word = isc_to_int_word(isc);
1693 		if (inti)
1694 			kvm_s390_reinject_io_int(kvm, inti);
1695 		inti = tmp_inti;
1696 	} else
1697 		gisa_set_ipm_gisc(gi->origin, isc);
1698 out:
1699 	return inti;
1700 }
1701 
1702 #define SCCB_MASK 0xFFFFFFF8
1703 #define SCCB_EVENT_PENDING 0x3
1704 
1705 static int __inject_service(struct kvm *kvm,
1706 			     struct kvm_s390_interrupt_info *inti)
1707 {
1708 	struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1709 
1710 	kvm->stat.inject_service_signal++;
1711 	spin_lock(&fi->lock);
1712 	fi->srv_signal.ext_params |= inti->ext.ext_params & SCCB_EVENT_PENDING;
1713 	/*
1714 	 * Early versions of the QEMU s390 bios will inject several
1715 	 * service interrupts after another without handling a
1716 	 * condition code indicating busy.
1717 	 * We will silently ignore those superfluous sccb values.
1718 	 * A future version of QEMU will take care of serialization
1719 	 * of servc requests
1720 	 */
1721 	if (fi->srv_signal.ext_params & SCCB_MASK)
1722 		goto out;
1723 	fi->srv_signal.ext_params |= inti->ext.ext_params & SCCB_MASK;
1724 	set_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs);
1725 out:
1726 	spin_unlock(&fi->lock);
1727 	kfree(inti);
1728 	return 0;
1729 }
1730 
1731 static int __inject_virtio(struct kvm *kvm,
1732 			    struct kvm_s390_interrupt_info *inti)
1733 {
1734 	struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1735 
1736 	kvm->stat.inject_virtio++;
1737 	spin_lock(&fi->lock);
1738 	if (fi->counters[FIRQ_CNTR_VIRTIO] >= KVM_S390_MAX_VIRTIO_IRQS) {
1739 		spin_unlock(&fi->lock);
1740 		return -EBUSY;
1741 	}
1742 	fi->counters[FIRQ_CNTR_VIRTIO] += 1;
1743 	list_add_tail(&inti->list, &fi->lists[FIRQ_LIST_VIRTIO]);
1744 	set_bit(IRQ_PEND_VIRTIO, &fi->pending_irqs);
1745 	spin_unlock(&fi->lock);
1746 	return 0;
1747 }
1748 
1749 static int __inject_pfault_done(struct kvm *kvm,
1750 				 struct kvm_s390_interrupt_info *inti)
1751 {
1752 	struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1753 
1754 	kvm->stat.inject_pfault_done++;
1755 	spin_lock(&fi->lock);
1756 	if (fi->counters[FIRQ_CNTR_PFAULT] >=
1757 		(ASYNC_PF_PER_VCPU * KVM_MAX_VCPUS)) {
1758 		spin_unlock(&fi->lock);
1759 		return -EBUSY;
1760 	}
1761 	fi->counters[FIRQ_CNTR_PFAULT] += 1;
1762 	list_add_tail(&inti->list, &fi->lists[FIRQ_LIST_PFAULT]);
1763 	set_bit(IRQ_PEND_PFAULT_DONE, &fi->pending_irqs);
1764 	spin_unlock(&fi->lock);
1765 	return 0;
1766 }
1767 
1768 #define CR_PENDING_SUBCLASS 28
1769 static int __inject_float_mchk(struct kvm *kvm,
1770 				struct kvm_s390_interrupt_info *inti)
1771 {
1772 	struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1773 
1774 	kvm->stat.inject_float_mchk++;
1775 	spin_lock(&fi->lock);
1776 	fi->mchk.cr14 |= inti->mchk.cr14 & (1UL << CR_PENDING_SUBCLASS);
1777 	fi->mchk.mcic |= inti->mchk.mcic;
1778 	set_bit(IRQ_PEND_MCHK_REP, &fi->pending_irqs);
1779 	spin_unlock(&fi->lock);
1780 	kfree(inti);
1781 	return 0;
1782 }
1783 
1784 static int __inject_io(struct kvm *kvm, struct kvm_s390_interrupt_info *inti)
1785 {
1786 	struct kvm_s390_gisa_interrupt *gi = &kvm->arch.gisa_int;
1787 	struct kvm_s390_float_interrupt *fi;
1788 	struct list_head *list;
1789 	int isc;
1790 
1791 	kvm->stat.inject_io++;
1792 	isc = int_word_to_isc(inti->io.io_int_word);
1793 
1794 	if (gi->origin && inti->type & KVM_S390_INT_IO_AI_MASK) {
1795 		VM_EVENT(kvm, 4, "%s isc %1u", "inject: I/O (AI/gisa)", isc);
1796 		gisa_set_ipm_gisc(gi->origin, isc);
1797 		kfree(inti);
1798 		return 0;
1799 	}
1800 
1801 	fi = &kvm->arch.float_int;
1802 	spin_lock(&fi->lock);
1803 	if (fi->counters[FIRQ_CNTR_IO] >= KVM_S390_MAX_FLOAT_IRQS) {
1804 		spin_unlock(&fi->lock);
1805 		return -EBUSY;
1806 	}
1807 	fi->counters[FIRQ_CNTR_IO] += 1;
1808 
1809 	if (inti->type & KVM_S390_INT_IO_AI_MASK)
1810 		VM_EVENT(kvm, 4, "%s", "inject: I/O (AI)");
1811 	else
1812 		VM_EVENT(kvm, 4, "inject: I/O %x ss %x schid %04x",
1813 			inti->io.subchannel_id >> 8,
1814 			inti->io.subchannel_id >> 1 & 0x3,
1815 			inti->io.subchannel_nr);
1816 	list = &fi->lists[FIRQ_LIST_IO_ISC_0 + isc];
1817 	list_add_tail(&inti->list, list);
1818 	set_bit(isc_to_irq_type(isc), &fi->pending_irqs);
1819 	spin_unlock(&fi->lock);
1820 	return 0;
1821 }
1822 
1823 /*
1824  * Find a destination VCPU for a floating irq and kick it.
1825  */
1826 static void __floating_irq_kick(struct kvm *kvm, u64 type)
1827 {
1828 	struct kvm_vcpu *dst_vcpu;
1829 	int sigcpu, online_vcpus, nr_tries = 0;
1830 
1831 	online_vcpus = atomic_read(&kvm->online_vcpus);
1832 	if (!online_vcpus)
1833 		return;
1834 
1835 	/* find idle VCPUs first, then round robin */
1836 	sigcpu = find_first_bit(kvm->arch.idle_mask, online_vcpus);
1837 	if (sigcpu == online_vcpus) {
1838 		do {
1839 			sigcpu = kvm->arch.float_int.next_rr_cpu++;
1840 			kvm->arch.float_int.next_rr_cpu %= online_vcpus;
1841 			/* avoid endless loops if all vcpus are stopped */
1842 			if (nr_tries++ >= online_vcpus)
1843 				return;
1844 		} while (is_vcpu_stopped(kvm_get_vcpu(kvm, sigcpu)));
1845 	}
1846 	dst_vcpu = kvm_get_vcpu(kvm, sigcpu);
1847 
1848 	/* make the VCPU drop out of the SIE, or wake it up if sleeping */
1849 	switch (type) {
1850 	case KVM_S390_MCHK:
1851 		kvm_s390_set_cpuflags(dst_vcpu, CPUSTAT_STOP_INT);
1852 		break;
1853 	case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1854 		if (!(type & KVM_S390_INT_IO_AI_MASK &&
1855 		      kvm->arch.gisa_int.origin))
1856 			kvm_s390_set_cpuflags(dst_vcpu, CPUSTAT_IO_INT);
1857 		break;
1858 	default:
1859 		kvm_s390_set_cpuflags(dst_vcpu, CPUSTAT_EXT_INT);
1860 		break;
1861 	}
1862 	kvm_s390_vcpu_wakeup(dst_vcpu);
1863 }
1864 
1865 static int __inject_vm(struct kvm *kvm, struct kvm_s390_interrupt_info *inti)
1866 {
1867 	u64 type = READ_ONCE(inti->type);
1868 	int rc;
1869 
1870 	switch (type) {
1871 	case KVM_S390_MCHK:
1872 		rc = __inject_float_mchk(kvm, inti);
1873 		break;
1874 	case KVM_S390_INT_VIRTIO:
1875 		rc = __inject_virtio(kvm, inti);
1876 		break;
1877 	case KVM_S390_INT_SERVICE:
1878 		rc = __inject_service(kvm, inti);
1879 		break;
1880 	case KVM_S390_INT_PFAULT_DONE:
1881 		rc = __inject_pfault_done(kvm, inti);
1882 		break;
1883 	case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1884 		rc = __inject_io(kvm, inti);
1885 		break;
1886 	default:
1887 		rc = -EINVAL;
1888 	}
1889 	if (rc)
1890 		return rc;
1891 
1892 	__floating_irq_kick(kvm, type);
1893 	return 0;
1894 }
1895 
1896 int kvm_s390_inject_vm(struct kvm *kvm,
1897 		       struct kvm_s390_interrupt *s390int)
1898 {
1899 	struct kvm_s390_interrupt_info *inti;
1900 	int rc;
1901 
1902 	inti = kzalloc(sizeof(*inti), GFP_KERNEL);
1903 	if (!inti)
1904 		return -ENOMEM;
1905 
1906 	inti->type = s390int->type;
1907 	switch (inti->type) {
1908 	case KVM_S390_INT_VIRTIO:
1909 		VM_EVENT(kvm, 5, "inject: virtio parm:%x,parm64:%llx",
1910 			 s390int->parm, s390int->parm64);
1911 		inti->ext.ext_params = s390int->parm;
1912 		inti->ext.ext_params2 = s390int->parm64;
1913 		break;
1914 	case KVM_S390_INT_SERVICE:
1915 		VM_EVENT(kvm, 4, "inject: sclp parm:%x", s390int->parm);
1916 		inti->ext.ext_params = s390int->parm;
1917 		break;
1918 	case KVM_S390_INT_PFAULT_DONE:
1919 		inti->ext.ext_params2 = s390int->parm64;
1920 		break;
1921 	case KVM_S390_MCHK:
1922 		VM_EVENT(kvm, 3, "inject: machine check mcic 0x%llx",
1923 			 s390int->parm64);
1924 		inti->mchk.cr14 = s390int->parm; /* upper bits are not used */
1925 		inti->mchk.mcic = s390int->parm64;
1926 		break;
1927 	case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1928 		inti->io.subchannel_id = s390int->parm >> 16;
1929 		inti->io.subchannel_nr = s390int->parm & 0x0000ffffu;
1930 		inti->io.io_int_parm = s390int->parm64 >> 32;
1931 		inti->io.io_int_word = s390int->parm64 & 0x00000000ffffffffull;
1932 		break;
1933 	default:
1934 		kfree(inti);
1935 		return -EINVAL;
1936 	}
1937 	trace_kvm_s390_inject_vm(s390int->type, s390int->parm, s390int->parm64,
1938 				 2);
1939 
1940 	rc = __inject_vm(kvm, inti);
1941 	if (rc)
1942 		kfree(inti);
1943 	return rc;
1944 }
1945 
1946 int kvm_s390_reinject_io_int(struct kvm *kvm,
1947 			      struct kvm_s390_interrupt_info *inti)
1948 {
1949 	return __inject_vm(kvm, inti);
1950 }
1951 
1952 int s390int_to_s390irq(struct kvm_s390_interrupt *s390int,
1953 		       struct kvm_s390_irq *irq)
1954 {
1955 	irq->type = s390int->type;
1956 	switch (irq->type) {
1957 	case KVM_S390_PROGRAM_INT:
1958 		if (s390int->parm & 0xffff0000)
1959 			return -EINVAL;
1960 		irq->u.pgm.code = s390int->parm;
1961 		break;
1962 	case KVM_S390_SIGP_SET_PREFIX:
1963 		irq->u.prefix.address = s390int->parm;
1964 		break;
1965 	case KVM_S390_SIGP_STOP:
1966 		irq->u.stop.flags = s390int->parm;
1967 		break;
1968 	case KVM_S390_INT_EXTERNAL_CALL:
1969 		if (s390int->parm & 0xffff0000)
1970 			return -EINVAL;
1971 		irq->u.extcall.code = s390int->parm;
1972 		break;
1973 	case KVM_S390_INT_EMERGENCY:
1974 		if (s390int->parm & 0xffff0000)
1975 			return -EINVAL;
1976 		irq->u.emerg.code = s390int->parm;
1977 		break;
1978 	case KVM_S390_MCHK:
1979 		irq->u.mchk.mcic = s390int->parm64;
1980 		break;
1981 	}
1982 	return 0;
1983 }
1984 
1985 int kvm_s390_is_stop_irq_pending(struct kvm_vcpu *vcpu)
1986 {
1987 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1988 
1989 	return test_bit(IRQ_PEND_SIGP_STOP, &li->pending_irqs);
1990 }
1991 
1992 void kvm_s390_clear_stop_irq(struct kvm_vcpu *vcpu)
1993 {
1994 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1995 
1996 	spin_lock(&li->lock);
1997 	li->irq.stop.flags = 0;
1998 	clear_bit(IRQ_PEND_SIGP_STOP, &li->pending_irqs);
1999 	spin_unlock(&li->lock);
2000 }
2001 
2002 static int do_inject_vcpu(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
2003 {
2004 	int rc;
2005 
2006 	switch (irq->type) {
2007 	case KVM_S390_PROGRAM_INT:
2008 		rc = __inject_prog(vcpu, irq);
2009 		break;
2010 	case KVM_S390_SIGP_SET_PREFIX:
2011 		rc = __inject_set_prefix(vcpu, irq);
2012 		break;
2013 	case KVM_S390_SIGP_STOP:
2014 		rc = __inject_sigp_stop(vcpu, irq);
2015 		break;
2016 	case KVM_S390_RESTART:
2017 		rc = __inject_sigp_restart(vcpu, irq);
2018 		break;
2019 	case KVM_S390_INT_CLOCK_COMP:
2020 		rc = __inject_ckc(vcpu);
2021 		break;
2022 	case KVM_S390_INT_CPU_TIMER:
2023 		rc = __inject_cpu_timer(vcpu);
2024 		break;
2025 	case KVM_S390_INT_EXTERNAL_CALL:
2026 		rc = __inject_extcall(vcpu, irq);
2027 		break;
2028 	case KVM_S390_INT_EMERGENCY:
2029 		rc = __inject_sigp_emergency(vcpu, irq);
2030 		break;
2031 	case KVM_S390_MCHK:
2032 		rc = __inject_mchk(vcpu, irq);
2033 		break;
2034 	case KVM_S390_INT_PFAULT_INIT:
2035 		rc = __inject_pfault_init(vcpu, irq);
2036 		break;
2037 	case KVM_S390_INT_VIRTIO:
2038 	case KVM_S390_INT_SERVICE:
2039 	case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
2040 	default:
2041 		rc = -EINVAL;
2042 	}
2043 
2044 	return rc;
2045 }
2046 
2047 int kvm_s390_inject_vcpu(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
2048 {
2049 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
2050 	int rc;
2051 
2052 	spin_lock(&li->lock);
2053 	rc = do_inject_vcpu(vcpu, irq);
2054 	spin_unlock(&li->lock);
2055 	if (!rc)
2056 		kvm_s390_vcpu_wakeup(vcpu);
2057 	return rc;
2058 }
2059 
2060 static inline void clear_irq_list(struct list_head *_list)
2061 {
2062 	struct kvm_s390_interrupt_info *inti, *n;
2063 
2064 	list_for_each_entry_safe(inti, n, _list, list) {
2065 		list_del(&inti->list);
2066 		kfree(inti);
2067 	}
2068 }
2069 
2070 static void inti_to_irq(struct kvm_s390_interrupt_info *inti,
2071 		       struct kvm_s390_irq *irq)
2072 {
2073 	irq->type = inti->type;
2074 	switch (inti->type) {
2075 	case KVM_S390_INT_PFAULT_INIT:
2076 	case KVM_S390_INT_PFAULT_DONE:
2077 	case KVM_S390_INT_VIRTIO:
2078 		irq->u.ext = inti->ext;
2079 		break;
2080 	case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
2081 		irq->u.io = inti->io;
2082 		break;
2083 	}
2084 }
2085 
2086 void kvm_s390_clear_float_irqs(struct kvm *kvm)
2087 {
2088 	struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
2089 	int i;
2090 
2091 	spin_lock(&fi->lock);
2092 	fi->pending_irqs = 0;
2093 	memset(&fi->srv_signal, 0, sizeof(fi->srv_signal));
2094 	memset(&fi->mchk, 0, sizeof(fi->mchk));
2095 	for (i = 0; i < FIRQ_LIST_COUNT; i++)
2096 		clear_irq_list(&fi->lists[i]);
2097 	for (i = 0; i < FIRQ_MAX_COUNT; i++)
2098 		fi->counters[i] = 0;
2099 	spin_unlock(&fi->lock);
2100 	kvm_s390_gisa_clear(kvm);
2101 };
2102 
2103 static int get_all_floating_irqs(struct kvm *kvm, u8 __user *usrbuf, u64 len)
2104 {
2105 	struct kvm_s390_gisa_interrupt *gi = &kvm->arch.gisa_int;
2106 	struct kvm_s390_interrupt_info *inti;
2107 	struct kvm_s390_float_interrupt *fi;
2108 	struct kvm_s390_irq *buf;
2109 	struct kvm_s390_irq *irq;
2110 	int max_irqs;
2111 	int ret = 0;
2112 	int n = 0;
2113 	int i;
2114 
2115 	if (len > KVM_S390_FLIC_MAX_BUFFER || len == 0)
2116 		return -EINVAL;
2117 
2118 	/*
2119 	 * We are already using -ENOMEM to signal
2120 	 * userspace it may retry with a bigger buffer,
2121 	 * so we need to use something else for this case
2122 	 */
2123 	buf = vzalloc(len);
2124 	if (!buf)
2125 		return -ENOBUFS;
2126 
2127 	max_irqs = len / sizeof(struct kvm_s390_irq);
2128 
2129 	if (gi->origin && gisa_get_ipm(gi->origin)) {
2130 		for (i = 0; i <= MAX_ISC; i++) {
2131 			if (n == max_irqs) {
2132 				/* signal userspace to try again */
2133 				ret = -ENOMEM;
2134 				goto out_nolock;
2135 			}
2136 			if (gisa_tac_ipm_gisc(gi->origin, i)) {
2137 				irq = (struct kvm_s390_irq *) &buf[n];
2138 				irq->type = KVM_S390_INT_IO(1, 0, 0, 0);
2139 				irq->u.io.io_int_word = isc_to_int_word(i);
2140 				n++;
2141 			}
2142 		}
2143 	}
2144 	fi = &kvm->arch.float_int;
2145 	spin_lock(&fi->lock);
2146 	for (i = 0; i < FIRQ_LIST_COUNT; i++) {
2147 		list_for_each_entry(inti, &fi->lists[i], list) {
2148 			if (n == max_irqs) {
2149 				/* signal userspace to try again */
2150 				ret = -ENOMEM;
2151 				goto out;
2152 			}
2153 			inti_to_irq(inti, &buf[n]);
2154 			n++;
2155 		}
2156 	}
2157 	if (test_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs)) {
2158 		if (n == max_irqs) {
2159 			/* signal userspace to try again */
2160 			ret = -ENOMEM;
2161 			goto out;
2162 		}
2163 		irq = (struct kvm_s390_irq *) &buf[n];
2164 		irq->type = KVM_S390_INT_SERVICE;
2165 		irq->u.ext = fi->srv_signal;
2166 		n++;
2167 	}
2168 	if (test_bit(IRQ_PEND_MCHK_REP, &fi->pending_irqs)) {
2169 		if (n == max_irqs) {
2170 				/* signal userspace to try again */
2171 				ret = -ENOMEM;
2172 				goto out;
2173 		}
2174 		irq = (struct kvm_s390_irq *) &buf[n];
2175 		irq->type = KVM_S390_MCHK;
2176 		irq->u.mchk = fi->mchk;
2177 		n++;
2178 }
2179 
2180 out:
2181 	spin_unlock(&fi->lock);
2182 out_nolock:
2183 	if (!ret && n > 0) {
2184 		if (copy_to_user(usrbuf, buf, sizeof(struct kvm_s390_irq) * n))
2185 			ret = -EFAULT;
2186 	}
2187 	vfree(buf);
2188 
2189 	return ret < 0 ? ret : n;
2190 }
2191 
2192 static int flic_ais_mode_get_all(struct kvm *kvm, struct kvm_device_attr *attr)
2193 {
2194 	struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
2195 	struct kvm_s390_ais_all ais;
2196 
2197 	if (attr->attr < sizeof(ais))
2198 		return -EINVAL;
2199 
2200 	if (!test_kvm_facility(kvm, 72))
2201 		return -ENOTSUPP;
2202 
2203 	mutex_lock(&fi->ais_lock);
2204 	ais.simm = fi->simm;
2205 	ais.nimm = fi->nimm;
2206 	mutex_unlock(&fi->ais_lock);
2207 
2208 	if (copy_to_user((void __user *)attr->addr, &ais, sizeof(ais)))
2209 		return -EFAULT;
2210 
2211 	return 0;
2212 }
2213 
2214 static int flic_get_attr(struct kvm_device *dev, struct kvm_device_attr *attr)
2215 {
2216 	int r;
2217 
2218 	switch (attr->group) {
2219 	case KVM_DEV_FLIC_GET_ALL_IRQS:
2220 		r = get_all_floating_irqs(dev->kvm, (u8 __user *) attr->addr,
2221 					  attr->attr);
2222 		break;
2223 	case KVM_DEV_FLIC_AISM_ALL:
2224 		r = flic_ais_mode_get_all(dev->kvm, attr);
2225 		break;
2226 	default:
2227 		r = -EINVAL;
2228 	}
2229 
2230 	return r;
2231 }
2232 
2233 static inline int copy_irq_from_user(struct kvm_s390_interrupt_info *inti,
2234 				     u64 addr)
2235 {
2236 	struct kvm_s390_irq __user *uptr = (struct kvm_s390_irq __user *) addr;
2237 	void *target = NULL;
2238 	void __user *source;
2239 	u64 size;
2240 
2241 	if (get_user(inti->type, (u64 __user *)addr))
2242 		return -EFAULT;
2243 
2244 	switch (inti->type) {
2245 	case KVM_S390_INT_PFAULT_INIT:
2246 	case KVM_S390_INT_PFAULT_DONE:
2247 	case KVM_S390_INT_VIRTIO:
2248 	case KVM_S390_INT_SERVICE:
2249 		target = (void *) &inti->ext;
2250 		source = &uptr->u.ext;
2251 		size = sizeof(inti->ext);
2252 		break;
2253 	case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
2254 		target = (void *) &inti->io;
2255 		source = &uptr->u.io;
2256 		size = sizeof(inti->io);
2257 		break;
2258 	case KVM_S390_MCHK:
2259 		target = (void *) &inti->mchk;
2260 		source = &uptr->u.mchk;
2261 		size = sizeof(inti->mchk);
2262 		break;
2263 	default:
2264 		return -EINVAL;
2265 	}
2266 
2267 	if (copy_from_user(target, source, size))
2268 		return -EFAULT;
2269 
2270 	return 0;
2271 }
2272 
2273 static int enqueue_floating_irq(struct kvm_device *dev,
2274 				struct kvm_device_attr *attr)
2275 {
2276 	struct kvm_s390_interrupt_info *inti = NULL;
2277 	int r = 0;
2278 	int len = attr->attr;
2279 
2280 	if (len % sizeof(struct kvm_s390_irq) != 0)
2281 		return -EINVAL;
2282 	else if (len > KVM_S390_FLIC_MAX_BUFFER)
2283 		return -EINVAL;
2284 
2285 	while (len >= sizeof(struct kvm_s390_irq)) {
2286 		inti = kzalloc(sizeof(*inti), GFP_KERNEL);
2287 		if (!inti)
2288 			return -ENOMEM;
2289 
2290 		r = copy_irq_from_user(inti, attr->addr);
2291 		if (r) {
2292 			kfree(inti);
2293 			return r;
2294 		}
2295 		r = __inject_vm(dev->kvm, inti);
2296 		if (r) {
2297 			kfree(inti);
2298 			return r;
2299 		}
2300 		len -= sizeof(struct kvm_s390_irq);
2301 		attr->addr += sizeof(struct kvm_s390_irq);
2302 	}
2303 
2304 	return r;
2305 }
2306 
2307 static struct s390_io_adapter *get_io_adapter(struct kvm *kvm, unsigned int id)
2308 {
2309 	if (id >= MAX_S390_IO_ADAPTERS)
2310 		return NULL;
2311 	id = array_index_nospec(id, MAX_S390_IO_ADAPTERS);
2312 	return kvm->arch.adapters[id];
2313 }
2314 
2315 static int register_io_adapter(struct kvm_device *dev,
2316 			       struct kvm_device_attr *attr)
2317 {
2318 	struct s390_io_adapter *adapter;
2319 	struct kvm_s390_io_adapter adapter_info;
2320 
2321 	if (copy_from_user(&adapter_info,
2322 			   (void __user *)attr->addr, sizeof(adapter_info)))
2323 		return -EFAULT;
2324 
2325 	if (adapter_info.id >= MAX_S390_IO_ADAPTERS)
2326 		return -EINVAL;
2327 
2328 	adapter_info.id = array_index_nospec(adapter_info.id,
2329 					     MAX_S390_IO_ADAPTERS);
2330 
2331 	if (dev->kvm->arch.adapters[adapter_info.id] != NULL)
2332 		return -EINVAL;
2333 
2334 	adapter = kzalloc(sizeof(*adapter), GFP_KERNEL);
2335 	if (!adapter)
2336 		return -ENOMEM;
2337 
2338 	INIT_LIST_HEAD(&adapter->maps);
2339 	init_rwsem(&adapter->maps_lock);
2340 	atomic_set(&adapter->nr_maps, 0);
2341 	adapter->id = adapter_info.id;
2342 	adapter->isc = adapter_info.isc;
2343 	adapter->maskable = adapter_info.maskable;
2344 	adapter->masked = false;
2345 	adapter->swap = adapter_info.swap;
2346 	adapter->suppressible = (adapter_info.flags) &
2347 				KVM_S390_ADAPTER_SUPPRESSIBLE;
2348 	dev->kvm->arch.adapters[adapter->id] = adapter;
2349 
2350 	return 0;
2351 }
2352 
2353 int kvm_s390_mask_adapter(struct kvm *kvm, unsigned int id, bool masked)
2354 {
2355 	int ret;
2356 	struct s390_io_adapter *adapter = get_io_adapter(kvm, id);
2357 
2358 	if (!adapter || !adapter->maskable)
2359 		return -EINVAL;
2360 	ret = adapter->masked;
2361 	adapter->masked = masked;
2362 	return ret;
2363 }
2364 
2365 static int kvm_s390_adapter_map(struct kvm *kvm, unsigned int id, __u64 addr)
2366 {
2367 	struct s390_io_adapter *adapter = get_io_adapter(kvm, id);
2368 	struct s390_map_info *map;
2369 	int ret;
2370 
2371 	if (!adapter || !addr)
2372 		return -EINVAL;
2373 
2374 	map = kzalloc(sizeof(*map), GFP_KERNEL);
2375 	if (!map) {
2376 		ret = -ENOMEM;
2377 		goto out;
2378 	}
2379 	INIT_LIST_HEAD(&map->list);
2380 	map->guest_addr = addr;
2381 	map->addr = gmap_translate(kvm->arch.gmap, addr);
2382 	if (map->addr == -EFAULT) {
2383 		ret = -EFAULT;
2384 		goto out;
2385 	}
2386 	ret = get_user_pages_fast(map->addr, 1, FOLL_WRITE, &map->page);
2387 	if (ret < 0)
2388 		goto out;
2389 	BUG_ON(ret != 1);
2390 	down_write(&adapter->maps_lock);
2391 	if (atomic_inc_return(&adapter->nr_maps) < MAX_S390_ADAPTER_MAPS) {
2392 		list_add_tail(&map->list, &adapter->maps);
2393 		ret = 0;
2394 	} else {
2395 		put_page(map->page);
2396 		ret = -EINVAL;
2397 	}
2398 	up_write(&adapter->maps_lock);
2399 out:
2400 	if (ret)
2401 		kfree(map);
2402 	return ret;
2403 }
2404 
2405 static int kvm_s390_adapter_unmap(struct kvm *kvm, unsigned int id, __u64 addr)
2406 {
2407 	struct s390_io_adapter *adapter = get_io_adapter(kvm, id);
2408 	struct s390_map_info *map, *tmp;
2409 	int found = 0;
2410 
2411 	if (!adapter || !addr)
2412 		return -EINVAL;
2413 
2414 	down_write(&adapter->maps_lock);
2415 	list_for_each_entry_safe(map, tmp, &adapter->maps, list) {
2416 		if (map->guest_addr == addr) {
2417 			found = 1;
2418 			atomic_dec(&adapter->nr_maps);
2419 			list_del(&map->list);
2420 			put_page(map->page);
2421 			kfree(map);
2422 			break;
2423 		}
2424 	}
2425 	up_write(&adapter->maps_lock);
2426 
2427 	return found ? 0 : -EINVAL;
2428 }
2429 
2430 void kvm_s390_destroy_adapters(struct kvm *kvm)
2431 {
2432 	int i;
2433 	struct s390_map_info *map, *tmp;
2434 
2435 	for (i = 0; i < MAX_S390_IO_ADAPTERS; i++) {
2436 		if (!kvm->arch.adapters[i])
2437 			continue;
2438 		list_for_each_entry_safe(map, tmp,
2439 					 &kvm->arch.adapters[i]->maps, list) {
2440 			list_del(&map->list);
2441 			put_page(map->page);
2442 			kfree(map);
2443 		}
2444 		kfree(kvm->arch.adapters[i]);
2445 	}
2446 }
2447 
2448 static int modify_io_adapter(struct kvm_device *dev,
2449 			     struct kvm_device_attr *attr)
2450 {
2451 	struct kvm_s390_io_adapter_req req;
2452 	struct s390_io_adapter *adapter;
2453 	int ret;
2454 
2455 	if (copy_from_user(&req, (void __user *)attr->addr, sizeof(req)))
2456 		return -EFAULT;
2457 
2458 	adapter = get_io_adapter(dev->kvm, req.id);
2459 	if (!adapter)
2460 		return -EINVAL;
2461 	switch (req.type) {
2462 	case KVM_S390_IO_ADAPTER_MASK:
2463 		ret = kvm_s390_mask_adapter(dev->kvm, req.id, req.mask);
2464 		if (ret > 0)
2465 			ret = 0;
2466 		break;
2467 	case KVM_S390_IO_ADAPTER_MAP:
2468 		ret = kvm_s390_adapter_map(dev->kvm, req.id, req.addr);
2469 		break;
2470 	case KVM_S390_IO_ADAPTER_UNMAP:
2471 		ret = kvm_s390_adapter_unmap(dev->kvm, req.id, req.addr);
2472 		break;
2473 	default:
2474 		ret = -EINVAL;
2475 	}
2476 
2477 	return ret;
2478 }
2479 
2480 static int clear_io_irq(struct kvm *kvm, struct kvm_device_attr *attr)
2481 
2482 {
2483 	const u64 isc_mask = 0xffUL << 24; /* all iscs set */
2484 	u32 schid;
2485 
2486 	if (attr->flags)
2487 		return -EINVAL;
2488 	if (attr->attr != sizeof(schid))
2489 		return -EINVAL;
2490 	if (copy_from_user(&schid, (void __user *) attr->addr, sizeof(schid)))
2491 		return -EFAULT;
2492 	if (!schid)
2493 		return -EINVAL;
2494 	kfree(kvm_s390_get_io_int(kvm, isc_mask, schid));
2495 	/*
2496 	 * If userspace is conforming to the architecture, we can have at most
2497 	 * one pending I/O interrupt per subchannel, so this is effectively a
2498 	 * clear all.
2499 	 */
2500 	return 0;
2501 }
2502 
2503 static int modify_ais_mode(struct kvm *kvm, struct kvm_device_attr *attr)
2504 {
2505 	struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
2506 	struct kvm_s390_ais_req req;
2507 	int ret = 0;
2508 
2509 	if (!test_kvm_facility(kvm, 72))
2510 		return -ENOTSUPP;
2511 
2512 	if (copy_from_user(&req, (void __user *)attr->addr, sizeof(req)))
2513 		return -EFAULT;
2514 
2515 	if (req.isc > MAX_ISC)
2516 		return -EINVAL;
2517 
2518 	trace_kvm_s390_modify_ais_mode(req.isc,
2519 				       (fi->simm & AIS_MODE_MASK(req.isc)) ?
2520 				       (fi->nimm & AIS_MODE_MASK(req.isc)) ?
2521 				       2 : KVM_S390_AIS_MODE_SINGLE :
2522 				       KVM_S390_AIS_MODE_ALL, req.mode);
2523 
2524 	mutex_lock(&fi->ais_lock);
2525 	switch (req.mode) {
2526 	case KVM_S390_AIS_MODE_ALL:
2527 		fi->simm &= ~AIS_MODE_MASK(req.isc);
2528 		fi->nimm &= ~AIS_MODE_MASK(req.isc);
2529 		break;
2530 	case KVM_S390_AIS_MODE_SINGLE:
2531 		fi->simm |= AIS_MODE_MASK(req.isc);
2532 		fi->nimm &= ~AIS_MODE_MASK(req.isc);
2533 		break;
2534 	default:
2535 		ret = -EINVAL;
2536 	}
2537 	mutex_unlock(&fi->ais_lock);
2538 
2539 	return ret;
2540 }
2541 
2542 static int kvm_s390_inject_airq(struct kvm *kvm,
2543 				struct s390_io_adapter *adapter)
2544 {
2545 	struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
2546 	struct kvm_s390_interrupt s390int = {
2547 		.type = KVM_S390_INT_IO(1, 0, 0, 0),
2548 		.parm = 0,
2549 		.parm64 = isc_to_int_word(adapter->isc),
2550 	};
2551 	int ret = 0;
2552 
2553 	if (!test_kvm_facility(kvm, 72) || !adapter->suppressible)
2554 		return kvm_s390_inject_vm(kvm, &s390int);
2555 
2556 	mutex_lock(&fi->ais_lock);
2557 	if (fi->nimm & AIS_MODE_MASK(adapter->isc)) {
2558 		trace_kvm_s390_airq_suppressed(adapter->id, adapter->isc);
2559 		goto out;
2560 	}
2561 
2562 	ret = kvm_s390_inject_vm(kvm, &s390int);
2563 	if (!ret && (fi->simm & AIS_MODE_MASK(adapter->isc))) {
2564 		fi->nimm |= AIS_MODE_MASK(adapter->isc);
2565 		trace_kvm_s390_modify_ais_mode(adapter->isc,
2566 					       KVM_S390_AIS_MODE_SINGLE, 2);
2567 	}
2568 out:
2569 	mutex_unlock(&fi->ais_lock);
2570 	return ret;
2571 }
2572 
2573 static int flic_inject_airq(struct kvm *kvm, struct kvm_device_attr *attr)
2574 {
2575 	unsigned int id = attr->attr;
2576 	struct s390_io_adapter *adapter = get_io_adapter(kvm, id);
2577 
2578 	if (!adapter)
2579 		return -EINVAL;
2580 
2581 	return kvm_s390_inject_airq(kvm, adapter);
2582 }
2583 
2584 static int flic_ais_mode_set_all(struct kvm *kvm, struct kvm_device_attr *attr)
2585 {
2586 	struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
2587 	struct kvm_s390_ais_all ais;
2588 
2589 	if (!test_kvm_facility(kvm, 72))
2590 		return -ENOTSUPP;
2591 
2592 	if (copy_from_user(&ais, (void __user *)attr->addr, sizeof(ais)))
2593 		return -EFAULT;
2594 
2595 	mutex_lock(&fi->ais_lock);
2596 	fi->simm = ais.simm;
2597 	fi->nimm = ais.nimm;
2598 	mutex_unlock(&fi->ais_lock);
2599 
2600 	return 0;
2601 }
2602 
2603 static int flic_set_attr(struct kvm_device *dev, struct kvm_device_attr *attr)
2604 {
2605 	int r = 0;
2606 	unsigned int i;
2607 	struct kvm_vcpu *vcpu;
2608 
2609 	switch (attr->group) {
2610 	case KVM_DEV_FLIC_ENQUEUE:
2611 		r = enqueue_floating_irq(dev, attr);
2612 		break;
2613 	case KVM_DEV_FLIC_CLEAR_IRQS:
2614 		kvm_s390_clear_float_irqs(dev->kvm);
2615 		break;
2616 	case KVM_DEV_FLIC_APF_ENABLE:
2617 		dev->kvm->arch.gmap->pfault_enabled = 1;
2618 		break;
2619 	case KVM_DEV_FLIC_APF_DISABLE_WAIT:
2620 		dev->kvm->arch.gmap->pfault_enabled = 0;
2621 		/*
2622 		 * Make sure no async faults are in transition when
2623 		 * clearing the queues. So we don't need to worry
2624 		 * about late coming workers.
2625 		 */
2626 		synchronize_srcu(&dev->kvm->srcu);
2627 		kvm_for_each_vcpu(i, vcpu, dev->kvm)
2628 			kvm_clear_async_pf_completion_queue(vcpu);
2629 		break;
2630 	case KVM_DEV_FLIC_ADAPTER_REGISTER:
2631 		r = register_io_adapter(dev, attr);
2632 		break;
2633 	case KVM_DEV_FLIC_ADAPTER_MODIFY:
2634 		r = modify_io_adapter(dev, attr);
2635 		break;
2636 	case KVM_DEV_FLIC_CLEAR_IO_IRQ:
2637 		r = clear_io_irq(dev->kvm, attr);
2638 		break;
2639 	case KVM_DEV_FLIC_AISM:
2640 		r = modify_ais_mode(dev->kvm, attr);
2641 		break;
2642 	case KVM_DEV_FLIC_AIRQ_INJECT:
2643 		r = flic_inject_airq(dev->kvm, attr);
2644 		break;
2645 	case KVM_DEV_FLIC_AISM_ALL:
2646 		r = flic_ais_mode_set_all(dev->kvm, attr);
2647 		break;
2648 	default:
2649 		r = -EINVAL;
2650 	}
2651 
2652 	return r;
2653 }
2654 
2655 static int flic_has_attr(struct kvm_device *dev,
2656 			     struct kvm_device_attr *attr)
2657 {
2658 	switch (attr->group) {
2659 	case KVM_DEV_FLIC_GET_ALL_IRQS:
2660 	case KVM_DEV_FLIC_ENQUEUE:
2661 	case KVM_DEV_FLIC_CLEAR_IRQS:
2662 	case KVM_DEV_FLIC_APF_ENABLE:
2663 	case KVM_DEV_FLIC_APF_DISABLE_WAIT:
2664 	case KVM_DEV_FLIC_ADAPTER_REGISTER:
2665 	case KVM_DEV_FLIC_ADAPTER_MODIFY:
2666 	case KVM_DEV_FLIC_CLEAR_IO_IRQ:
2667 	case KVM_DEV_FLIC_AISM:
2668 	case KVM_DEV_FLIC_AIRQ_INJECT:
2669 	case KVM_DEV_FLIC_AISM_ALL:
2670 		return 0;
2671 	}
2672 	return -ENXIO;
2673 }
2674 
2675 static int flic_create(struct kvm_device *dev, u32 type)
2676 {
2677 	if (!dev)
2678 		return -EINVAL;
2679 	if (dev->kvm->arch.flic)
2680 		return -EINVAL;
2681 	dev->kvm->arch.flic = dev;
2682 	return 0;
2683 }
2684 
2685 static void flic_destroy(struct kvm_device *dev)
2686 {
2687 	dev->kvm->arch.flic = NULL;
2688 	kfree(dev);
2689 }
2690 
2691 /* s390 floating irq controller (flic) */
2692 struct kvm_device_ops kvm_flic_ops = {
2693 	.name = "kvm-flic",
2694 	.get_attr = flic_get_attr,
2695 	.set_attr = flic_set_attr,
2696 	.has_attr = flic_has_attr,
2697 	.create = flic_create,
2698 	.destroy = flic_destroy,
2699 };
2700 
2701 static unsigned long get_ind_bit(__u64 addr, unsigned long bit_nr, bool swap)
2702 {
2703 	unsigned long bit;
2704 
2705 	bit = bit_nr + (addr % PAGE_SIZE) * 8;
2706 
2707 	return swap ? (bit ^ (BITS_PER_LONG - 1)) : bit;
2708 }
2709 
2710 static struct s390_map_info *get_map_info(struct s390_io_adapter *adapter,
2711 					  u64 addr)
2712 {
2713 	struct s390_map_info *map;
2714 
2715 	if (!adapter)
2716 		return NULL;
2717 
2718 	list_for_each_entry(map, &adapter->maps, list) {
2719 		if (map->guest_addr == addr)
2720 			return map;
2721 	}
2722 	return NULL;
2723 }
2724 
2725 static int adapter_indicators_set(struct kvm *kvm,
2726 				  struct s390_io_adapter *adapter,
2727 				  struct kvm_s390_adapter_int *adapter_int)
2728 {
2729 	unsigned long bit;
2730 	int summary_set, idx;
2731 	struct s390_map_info *info;
2732 	void *map;
2733 
2734 	info = get_map_info(adapter, adapter_int->ind_addr);
2735 	if (!info)
2736 		return -1;
2737 	map = page_address(info->page);
2738 	bit = get_ind_bit(info->addr, adapter_int->ind_offset, adapter->swap);
2739 	set_bit(bit, map);
2740 	idx = srcu_read_lock(&kvm->srcu);
2741 	mark_page_dirty(kvm, info->guest_addr >> PAGE_SHIFT);
2742 	set_page_dirty_lock(info->page);
2743 	info = get_map_info(adapter, adapter_int->summary_addr);
2744 	if (!info) {
2745 		srcu_read_unlock(&kvm->srcu, idx);
2746 		return -1;
2747 	}
2748 	map = page_address(info->page);
2749 	bit = get_ind_bit(info->addr, adapter_int->summary_offset,
2750 			  adapter->swap);
2751 	summary_set = test_and_set_bit(bit, map);
2752 	mark_page_dirty(kvm, info->guest_addr >> PAGE_SHIFT);
2753 	set_page_dirty_lock(info->page);
2754 	srcu_read_unlock(&kvm->srcu, idx);
2755 	return summary_set ? 0 : 1;
2756 }
2757 
2758 /*
2759  * < 0 - not injected due to error
2760  * = 0 - coalesced, summary indicator already active
2761  * > 0 - injected interrupt
2762  */
2763 static int set_adapter_int(struct kvm_kernel_irq_routing_entry *e,
2764 			   struct kvm *kvm, int irq_source_id, int level,
2765 			   bool line_status)
2766 {
2767 	int ret;
2768 	struct s390_io_adapter *adapter;
2769 
2770 	/* We're only interested in the 0->1 transition. */
2771 	if (!level)
2772 		return 0;
2773 	adapter = get_io_adapter(kvm, e->adapter.adapter_id);
2774 	if (!adapter)
2775 		return -1;
2776 	down_read(&adapter->maps_lock);
2777 	ret = adapter_indicators_set(kvm, adapter, &e->adapter);
2778 	up_read(&adapter->maps_lock);
2779 	if ((ret > 0) && !adapter->masked) {
2780 		ret = kvm_s390_inject_airq(kvm, adapter);
2781 		if (ret == 0)
2782 			ret = 1;
2783 	}
2784 	return ret;
2785 }
2786 
2787 /*
2788  * Inject the machine check to the guest.
2789  */
2790 void kvm_s390_reinject_machine_check(struct kvm_vcpu *vcpu,
2791 				     struct mcck_volatile_info *mcck_info)
2792 {
2793 	struct kvm_s390_interrupt_info inti;
2794 	struct kvm_s390_irq irq;
2795 	struct kvm_s390_mchk_info *mchk;
2796 	union mci mci;
2797 	__u64 cr14 = 0;         /* upper bits are not used */
2798 	int rc;
2799 
2800 	mci.val = mcck_info->mcic;
2801 	if (mci.sr)
2802 		cr14 |= CR14_RECOVERY_SUBMASK;
2803 	if (mci.dg)
2804 		cr14 |= CR14_DEGRADATION_SUBMASK;
2805 	if (mci.w)
2806 		cr14 |= CR14_WARNING_SUBMASK;
2807 
2808 	mchk = mci.ck ? &inti.mchk : &irq.u.mchk;
2809 	mchk->cr14 = cr14;
2810 	mchk->mcic = mcck_info->mcic;
2811 	mchk->ext_damage_code = mcck_info->ext_damage_code;
2812 	mchk->failing_storage_address = mcck_info->failing_storage_address;
2813 	if (mci.ck) {
2814 		/* Inject the floating machine check */
2815 		inti.type = KVM_S390_MCHK;
2816 		rc = __inject_vm(vcpu->kvm, &inti);
2817 	} else {
2818 		/* Inject the machine check to specified vcpu */
2819 		irq.type = KVM_S390_MCHK;
2820 		rc = kvm_s390_inject_vcpu(vcpu, &irq);
2821 	}
2822 	WARN_ON_ONCE(rc);
2823 }
2824 
2825 int kvm_set_routing_entry(struct kvm *kvm,
2826 			  struct kvm_kernel_irq_routing_entry *e,
2827 			  const struct kvm_irq_routing_entry *ue)
2828 {
2829 	int ret;
2830 
2831 	switch (ue->type) {
2832 	case KVM_IRQ_ROUTING_S390_ADAPTER:
2833 		e->set = set_adapter_int;
2834 		e->adapter.summary_addr = ue->u.adapter.summary_addr;
2835 		e->adapter.ind_addr = ue->u.adapter.ind_addr;
2836 		e->adapter.summary_offset = ue->u.adapter.summary_offset;
2837 		e->adapter.ind_offset = ue->u.adapter.ind_offset;
2838 		e->adapter.adapter_id = ue->u.adapter.adapter_id;
2839 		ret = 0;
2840 		break;
2841 	default:
2842 		ret = -EINVAL;
2843 	}
2844 
2845 	return ret;
2846 }
2847 
2848 int kvm_set_msi(struct kvm_kernel_irq_routing_entry *e, struct kvm *kvm,
2849 		int irq_source_id, int level, bool line_status)
2850 {
2851 	return -EINVAL;
2852 }
2853 
2854 int kvm_s390_set_irq_state(struct kvm_vcpu *vcpu, void __user *irqstate, int len)
2855 {
2856 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
2857 	struct kvm_s390_irq *buf;
2858 	int r = 0;
2859 	int n;
2860 
2861 	buf = vmalloc(len);
2862 	if (!buf)
2863 		return -ENOMEM;
2864 
2865 	if (copy_from_user((void *) buf, irqstate, len)) {
2866 		r = -EFAULT;
2867 		goto out_free;
2868 	}
2869 
2870 	/*
2871 	 * Don't allow setting the interrupt state
2872 	 * when there are already interrupts pending
2873 	 */
2874 	spin_lock(&li->lock);
2875 	if (li->pending_irqs) {
2876 		r = -EBUSY;
2877 		goto out_unlock;
2878 	}
2879 
2880 	for (n = 0; n < len / sizeof(*buf); n++) {
2881 		r = do_inject_vcpu(vcpu, &buf[n]);
2882 		if (r)
2883 			break;
2884 	}
2885 
2886 out_unlock:
2887 	spin_unlock(&li->lock);
2888 out_free:
2889 	vfree(buf);
2890 
2891 	return r;
2892 }
2893 
2894 static void store_local_irq(struct kvm_s390_local_interrupt *li,
2895 			    struct kvm_s390_irq *irq,
2896 			    unsigned long irq_type)
2897 {
2898 	switch (irq_type) {
2899 	case IRQ_PEND_MCHK_EX:
2900 	case IRQ_PEND_MCHK_REP:
2901 		irq->type = KVM_S390_MCHK;
2902 		irq->u.mchk = li->irq.mchk;
2903 		break;
2904 	case IRQ_PEND_PROG:
2905 		irq->type = KVM_S390_PROGRAM_INT;
2906 		irq->u.pgm = li->irq.pgm;
2907 		break;
2908 	case IRQ_PEND_PFAULT_INIT:
2909 		irq->type = KVM_S390_INT_PFAULT_INIT;
2910 		irq->u.ext = li->irq.ext;
2911 		break;
2912 	case IRQ_PEND_EXT_EXTERNAL:
2913 		irq->type = KVM_S390_INT_EXTERNAL_CALL;
2914 		irq->u.extcall = li->irq.extcall;
2915 		break;
2916 	case IRQ_PEND_EXT_CLOCK_COMP:
2917 		irq->type = KVM_S390_INT_CLOCK_COMP;
2918 		break;
2919 	case IRQ_PEND_EXT_CPU_TIMER:
2920 		irq->type = KVM_S390_INT_CPU_TIMER;
2921 		break;
2922 	case IRQ_PEND_SIGP_STOP:
2923 		irq->type = KVM_S390_SIGP_STOP;
2924 		irq->u.stop = li->irq.stop;
2925 		break;
2926 	case IRQ_PEND_RESTART:
2927 		irq->type = KVM_S390_RESTART;
2928 		break;
2929 	case IRQ_PEND_SET_PREFIX:
2930 		irq->type = KVM_S390_SIGP_SET_PREFIX;
2931 		irq->u.prefix = li->irq.prefix;
2932 		break;
2933 	}
2934 }
2935 
2936 int kvm_s390_get_irq_state(struct kvm_vcpu *vcpu, __u8 __user *buf, int len)
2937 {
2938 	int scn;
2939 	DECLARE_BITMAP(sigp_emerg_pending, KVM_MAX_VCPUS);
2940 	struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
2941 	unsigned long pending_irqs;
2942 	struct kvm_s390_irq irq;
2943 	unsigned long irq_type;
2944 	int cpuaddr;
2945 	int n = 0;
2946 
2947 	spin_lock(&li->lock);
2948 	pending_irqs = li->pending_irqs;
2949 	memcpy(&sigp_emerg_pending, &li->sigp_emerg_pending,
2950 	       sizeof(sigp_emerg_pending));
2951 	spin_unlock(&li->lock);
2952 
2953 	for_each_set_bit(irq_type, &pending_irqs, IRQ_PEND_COUNT) {
2954 		memset(&irq, 0, sizeof(irq));
2955 		if (irq_type == IRQ_PEND_EXT_EMERGENCY)
2956 			continue;
2957 		if (n + sizeof(irq) > len)
2958 			return -ENOBUFS;
2959 		store_local_irq(&vcpu->arch.local_int, &irq, irq_type);
2960 		if (copy_to_user(&buf[n], &irq, sizeof(irq)))
2961 			return -EFAULT;
2962 		n += sizeof(irq);
2963 	}
2964 
2965 	if (test_bit(IRQ_PEND_EXT_EMERGENCY, &pending_irqs)) {
2966 		for_each_set_bit(cpuaddr, sigp_emerg_pending, KVM_MAX_VCPUS) {
2967 			memset(&irq, 0, sizeof(irq));
2968 			if (n + sizeof(irq) > len)
2969 				return -ENOBUFS;
2970 			irq.type = KVM_S390_INT_EMERGENCY;
2971 			irq.u.emerg.code = cpuaddr;
2972 			if (copy_to_user(&buf[n], &irq, sizeof(irq)))
2973 				return -EFAULT;
2974 			n += sizeof(irq);
2975 		}
2976 	}
2977 
2978 	if (sca_ext_call_pending(vcpu, &scn)) {
2979 		if (n + sizeof(irq) > len)
2980 			return -ENOBUFS;
2981 		memset(&irq, 0, sizeof(irq));
2982 		irq.type = KVM_S390_INT_EXTERNAL_CALL;
2983 		irq.u.extcall.code = scn;
2984 		if (copy_to_user(&buf[n], &irq, sizeof(irq)))
2985 			return -EFAULT;
2986 		n += sizeof(irq);
2987 	}
2988 
2989 	return n;
2990 }
2991 
2992 static void __airqs_kick_single_vcpu(struct kvm *kvm, u8 deliverable_mask)
2993 {
2994 	int vcpu_id, online_vcpus = atomic_read(&kvm->online_vcpus);
2995 	struct kvm_s390_gisa_interrupt *gi = &kvm->arch.gisa_int;
2996 	struct kvm_vcpu *vcpu;
2997 
2998 	for_each_set_bit(vcpu_id, kvm->arch.idle_mask, online_vcpus) {
2999 		vcpu = kvm_get_vcpu(kvm, vcpu_id);
3000 		if (psw_ioint_disabled(vcpu))
3001 			continue;
3002 		deliverable_mask &= (u8)(vcpu->arch.sie_block->gcr[6] >> 24);
3003 		if (deliverable_mask) {
3004 			/* lately kicked but not yet running */
3005 			if (test_and_set_bit(vcpu_id, gi->kicked_mask))
3006 				return;
3007 			kvm_s390_vcpu_wakeup(vcpu);
3008 			return;
3009 		}
3010 	}
3011 }
3012 
3013 static enum hrtimer_restart gisa_vcpu_kicker(struct hrtimer *timer)
3014 {
3015 	struct kvm_s390_gisa_interrupt *gi =
3016 		container_of(timer, struct kvm_s390_gisa_interrupt, timer);
3017 	struct kvm *kvm =
3018 		container_of(gi->origin, struct sie_page2, gisa)->kvm;
3019 	u8 pending_mask;
3020 
3021 	pending_mask = gisa_get_ipm_or_restore_iam(gi);
3022 	if (pending_mask) {
3023 		__airqs_kick_single_vcpu(kvm, pending_mask);
3024 		hrtimer_forward_now(timer, ns_to_ktime(gi->expires));
3025 		return HRTIMER_RESTART;
3026 	};
3027 
3028 	return HRTIMER_NORESTART;
3029 }
3030 
3031 #define NULL_GISA_ADDR 0x00000000UL
3032 #define NONE_GISA_ADDR 0x00000001UL
3033 #define GISA_ADDR_MASK 0xfffff000UL
3034 
3035 static void process_gib_alert_list(void)
3036 {
3037 	struct kvm_s390_gisa_interrupt *gi;
3038 	struct kvm_s390_gisa *gisa;
3039 	struct kvm *kvm;
3040 	u32 final, origin = 0UL;
3041 
3042 	do {
3043 		/*
3044 		 * If the NONE_GISA_ADDR is still stored in the alert list
3045 		 * origin, we will leave the outer loop. No further GISA has
3046 		 * been added to the alert list by millicode while processing
3047 		 * the current alert list.
3048 		 */
3049 		final = (origin & NONE_GISA_ADDR);
3050 		/*
3051 		 * Cut off the alert list and store the NONE_GISA_ADDR in the
3052 		 * alert list origin to avoid further GAL interruptions.
3053 		 * A new alert list can be build up by millicode in parallel
3054 		 * for guests not in the yet cut-off alert list. When in the
3055 		 * final loop, store the NULL_GISA_ADDR instead. This will re-
3056 		 * enable GAL interruptions on the host again.
3057 		 */
3058 		origin = xchg(&gib->alert_list_origin,
3059 			      (!final) ? NONE_GISA_ADDR : NULL_GISA_ADDR);
3060 		/*
3061 		 * Loop through the just cut-off alert list and start the
3062 		 * gisa timers to kick idle vcpus to consume the pending
3063 		 * interruptions asap.
3064 		 */
3065 		while (origin & GISA_ADDR_MASK) {
3066 			gisa = (struct kvm_s390_gisa *)(u64)origin;
3067 			origin = gisa->next_alert;
3068 			gisa->next_alert = (u32)(u64)gisa;
3069 			kvm = container_of(gisa, struct sie_page2, gisa)->kvm;
3070 			gi = &kvm->arch.gisa_int;
3071 			if (hrtimer_active(&gi->timer))
3072 				hrtimer_cancel(&gi->timer);
3073 			hrtimer_start(&gi->timer, 0, HRTIMER_MODE_REL);
3074 		}
3075 	} while (!final);
3076 
3077 }
3078 
3079 void kvm_s390_gisa_clear(struct kvm *kvm)
3080 {
3081 	struct kvm_s390_gisa_interrupt *gi = &kvm->arch.gisa_int;
3082 
3083 	if (!gi->origin)
3084 		return;
3085 	gisa_clear_ipm(gi->origin);
3086 	VM_EVENT(kvm, 3, "gisa 0x%pK cleared", gi->origin);
3087 }
3088 
3089 void kvm_s390_gisa_init(struct kvm *kvm)
3090 {
3091 	struct kvm_s390_gisa_interrupt *gi = &kvm->arch.gisa_int;
3092 
3093 	if (!css_general_characteristics.aiv)
3094 		return;
3095 	gi->origin = &kvm->arch.sie_page2->gisa;
3096 	gi->alert.mask = 0;
3097 	spin_lock_init(&gi->alert.ref_lock);
3098 	gi->expires = 50 * 1000; /* 50 usec */
3099 	hrtimer_init(&gi->timer, CLOCK_MONOTONIC, HRTIMER_MODE_REL);
3100 	gi->timer.function = gisa_vcpu_kicker;
3101 	memset(gi->origin, 0, sizeof(struct kvm_s390_gisa));
3102 	gi->origin->next_alert = (u32)(u64)gi->origin;
3103 	VM_EVENT(kvm, 3, "gisa 0x%pK initialized", gi->origin);
3104 }
3105 
3106 void kvm_s390_gisa_destroy(struct kvm *kvm)
3107 {
3108 	struct kvm_s390_gisa_interrupt *gi = &kvm->arch.gisa_int;
3109 
3110 	if (!gi->origin)
3111 		return;
3112 	if (gi->alert.mask)
3113 		KVM_EVENT(3, "vm 0x%pK has unexpected iam 0x%02x",
3114 			  kvm, gi->alert.mask);
3115 	while (gisa_in_alert_list(gi->origin))
3116 		cpu_relax();
3117 	hrtimer_cancel(&gi->timer);
3118 	gi->origin = NULL;
3119 }
3120 
3121 /**
3122  * kvm_s390_gisc_register - register a guest ISC
3123  *
3124  * @kvm:  the kernel vm to work with
3125  * @gisc: the guest interruption sub class to register
3126  *
3127  * The function extends the vm specific alert mask to use.
3128  * The effective IAM mask in the GISA is updated as well
3129  * in case the GISA is not part of the GIB alert list.
3130  * It will be updated latest when the IAM gets restored
3131  * by gisa_get_ipm_or_restore_iam().
3132  *
3133  * Returns: the nonspecific ISC (NISC) the gib alert mechanism
3134  *          has registered with the channel subsystem.
3135  *          -ENODEV in case the vm uses no GISA
3136  *          -ERANGE in case the guest ISC is invalid
3137  */
3138 int kvm_s390_gisc_register(struct kvm *kvm, u32 gisc)
3139 {
3140 	struct kvm_s390_gisa_interrupt *gi = &kvm->arch.gisa_int;
3141 
3142 	if (!gi->origin)
3143 		return -ENODEV;
3144 	if (gisc > MAX_ISC)
3145 		return -ERANGE;
3146 
3147 	spin_lock(&gi->alert.ref_lock);
3148 	gi->alert.ref_count[gisc]++;
3149 	if (gi->alert.ref_count[gisc] == 1) {
3150 		gi->alert.mask |= 0x80 >> gisc;
3151 		gisa_set_iam(gi->origin, gi->alert.mask);
3152 	}
3153 	spin_unlock(&gi->alert.ref_lock);
3154 
3155 	return gib->nisc;
3156 }
3157 EXPORT_SYMBOL_GPL(kvm_s390_gisc_register);
3158 
3159 /**
3160  * kvm_s390_gisc_unregister - unregister a guest ISC
3161  *
3162  * @kvm:  the kernel vm to work with
3163  * @gisc: the guest interruption sub class to register
3164  *
3165  * The function reduces the vm specific alert mask to use.
3166  * The effective IAM mask in the GISA is updated as well
3167  * in case the GISA is not part of the GIB alert list.
3168  * It will be updated latest when the IAM gets restored
3169  * by gisa_get_ipm_or_restore_iam().
3170  *
3171  * Returns: the nonspecific ISC (NISC) the gib alert mechanism
3172  *          has registered with the channel subsystem.
3173  *          -ENODEV in case the vm uses no GISA
3174  *          -ERANGE in case the guest ISC is invalid
3175  *          -EINVAL in case the guest ISC is not registered
3176  */
3177 int kvm_s390_gisc_unregister(struct kvm *kvm, u32 gisc)
3178 {
3179 	struct kvm_s390_gisa_interrupt *gi = &kvm->arch.gisa_int;
3180 	int rc = 0;
3181 
3182 	if (!gi->origin)
3183 		return -ENODEV;
3184 	if (gisc > MAX_ISC)
3185 		return -ERANGE;
3186 
3187 	spin_lock(&gi->alert.ref_lock);
3188 	if (gi->alert.ref_count[gisc] == 0) {
3189 		rc = -EINVAL;
3190 		goto out;
3191 	}
3192 	gi->alert.ref_count[gisc]--;
3193 	if (gi->alert.ref_count[gisc] == 0) {
3194 		gi->alert.mask &= ~(0x80 >> gisc);
3195 		gisa_set_iam(gi->origin, gi->alert.mask);
3196 	}
3197 out:
3198 	spin_unlock(&gi->alert.ref_lock);
3199 
3200 	return rc;
3201 }
3202 EXPORT_SYMBOL_GPL(kvm_s390_gisc_unregister);
3203 
3204 static void gib_alert_irq_handler(struct airq_struct *airq, bool floating)
3205 {
3206 	inc_irq_stat(IRQIO_GAL);
3207 	process_gib_alert_list();
3208 }
3209 
3210 static struct airq_struct gib_alert_irq = {
3211 	.handler = gib_alert_irq_handler,
3212 	.lsi_ptr = &gib_alert_irq.lsi_mask,
3213 };
3214 
3215 void kvm_s390_gib_destroy(void)
3216 {
3217 	if (!gib)
3218 		return;
3219 	chsc_sgib(0);
3220 	unregister_adapter_interrupt(&gib_alert_irq);
3221 	free_page((unsigned long)gib);
3222 	gib = NULL;
3223 }
3224 
3225 int kvm_s390_gib_init(u8 nisc)
3226 {
3227 	int rc = 0;
3228 
3229 	if (!css_general_characteristics.aiv) {
3230 		KVM_EVENT(3, "%s", "gib not initialized, no AIV facility");
3231 		goto out;
3232 	}
3233 
3234 	gib = (struct kvm_s390_gib *)get_zeroed_page(GFP_KERNEL | GFP_DMA);
3235 	if (!gib) {
3236 		rc = -ENOMEM;
3237 		goto out;
3238 	}
3239 
3240 	gib_alert_irq.isc = nisc;
3241 	if (register_adapter_interrupt(&gib_alert_irq)) {
3242 		pr_err("Registering the GIB alert interruption handler failed\n");
3243 		rc = -EIO;
3244 		goto out_free_gib;
3245 	}
3246 
3247 	gib->nisc = nisc;
3248 	if (chsc_sgib((u32)(u64)gib)) {
3249 		pr_err("Associating the GIB with the AIV facility failed\n");
3250 		free_page((unsigned long)gib);
3251 		gib = NULL;
3252 		rc = -EIO;
3253 		goto out_unreg_gal;
3254 	}
3255 
3256 	KVM_EVENT(3, "gib 0x%pK (nisc=%d) initialized", gib, gib->nisc);
3257 	goto out;
3258 
3259 out_unreg_gal:
3260 	unregister_adapter_interrupt(&gib_alert_irq);
3261 out_free_gib:
3262 	free_page((unsigned long)gib);
3263 	gib = NULL;
3264 out:
3265 	return rc;
3266 }
3267