KVM: s390: correctly handle injection of pgm irqs and per events
[firefly-linux-kernel-4.4.55.git] / arch / s390 / kvm / interrupt.c
1 /*
2  * handling kvm guest interrupts
3  *
4  * Copyright IBM Corp. 2008, 2015
5  *
6  * This program is free software; you can redistribute it and/or modify
7  * it under the terms of the GNU General Public License (version 2 only)
8  * as published by the Free Software Foundation.
9  *
10  *    Author(s): Carsten Otte <cotte@de.ibm.com>
11  */
12
13 #include <linux/interrupt.h>
14 #include <linux/kvm_host.h>
15 #include <linux/hrtimer.h>
16 #include <linux/mmu_context.h>
17 #include <linux/signal.h>
18 #include <linux/slab.h>
19 #include <linux/bitmap.h>
20 #include <linux/vmalloc.h>
21 #include <asm/asm-offsets.h>
22 #include <asm/dis.h>
23 #include <asm/uaccess.h>
24 #include <asm/sclp.h>
25 #include <asm/isc.h>
26 #include "kvm-s390.h"
27 #include "gaccess.h"
28 #include "trace-s390.h"
29
30 #define IOINT_SCHID_MASK 0x0000ffff
31 #define IOINT_SSID_MASK 0x00030000
32 #define IOINT_CSSID_MASK 0x03fc0000
33 #define PFAULT_INIT 0x0600
34 #define PFAULT_DONE 0x0680
35 #define VIRTIO_PARAM 0x0d00
36
37 int psw_extint_disabled(struct kvm_vcpu *vcpu)
38 {
39         return !(vcpu->arch.sie_block->gpsw.mask & PSW_MASK_EXT);
40 }
41
42 static int psw_ioint_disabled(struct kvm_vcpu *vcpu)
43 {
44         return !(vcpu->arch.sie_block->gpsw.mask & PSW_MASK_IO);
45 }
46
47 static int psw_mchk_disabled(struct kvm_vcpu *vcpu)
48 {
49         return !(vcpu->arch.sie_block->gpsw.mask & PSW_MASK_MCHECK);
50 }
51
52 static int psw_interrupts_disabled(struct kvm_vcpu *vcpu)
53 {
54         return psw_extint_disabled(vcpu) &&
55                psw_ioint_disabled(vcpu) &&
56                psw_mchk_disabled(vcpu);
57 }
58
59 static int ckc_interrupts_enabled(struct kvm_vcpu *vcpu)
60 {
61         if (psw_extint_disabled(vcpu) ||
62             !(vcpu->arch.sie_block->gcr[0] & 0x800ul))
63                 return 0;
64         if (guestdbg_enabled(vcpu) && guestdbg_sstep_enabled(vcpu))
65                 /* No timer interrupts when single stepping */
66                 return 0;
67         return 1;
68 }
69
70 static int ckc_irq_pending(struct kvm_vcpu *vcpu)
71 {
72         preempt_disable();
73         if (!(vcpu->arch.sie_block->ckc <
74               get_tod_clock_fast() + vcpu->arch.sie_block->epoch)) {
75                 preempt_enable();
76                 return 0;
77         }
78         preempt_enable();
79         return ckc_interrupts_enabled(vcpu);
80 }
81
82 static int cpu_timer_interrupts_enabled(struct kvm_vcpu *vcpu)
83 {
84         return !psw_extint_disabled(vcpu) &&
85                (vcpu->arch.sie_block->gcr[0] & 0x400ul);
86 }
87
88 static int cpu_timer_irq_pending(struct kvm_vcpu *vcpu)
89 {
90         return (vcpu->arch.sie_block->cputm >> 63) &&
91                cpu_timer_interrupts_enabled(vcpu);
92 }
93
94 static inline int is_ioirq(unsigned long irq_type)
95 {
96         return ((irq_type >= IRQ_PEND_IO_ISC_0) &&
97                 (irq_type <= IRQ_PEND_IO_ISC_7));
98 }
99
100 static uint64_t isc_to_isc_bits(int isc)
101 {
102         return (0x80 >> isc) << 24;
103 }
104
105 static inline u8 int_word_to_isc(u32 int_word)
106 {
107         return (int_word & 0x38000000) >> 27;
108 }
109
110 static inline unsigned long pending_irqs(struct kvm_vcpu *vcpu)
111 {
112         return vcpu->kvm->arch.float_int.pending_irqs |
113                vcpu->arch.local_int.pending_irqs;
114 }
115
116 static unsigned long disable_iscs(struct kvm_vcpu *vcpu,
117                                    unsigned long active_mask)
118 {
119         int i;
120
121         for (i = 0; i <= MAX_ISC; i++)
122                 if (!(vcpu->arch.sie_block->gcr[6] & isc_to_isc_bits(i)))
123                         active_mask &= ~(1UL << (IRQ_PEND_IO_ISC_0 + i));
124
125         return active_mask;
126 }
127
128 static unsigned long deliverable_irqs(struct kvm_vcpu *vcpu)
129 {
130         unsigned long active_mask;
131
132         active_mask = pending_irqs(vcpu);
133         if (!active_mask)
134                 return 0;
135
136         if (psw_extint_disabled(vcpu))
137                 active_mask &= ~IRQ_PEND_EXT_MASK;
138         if (psw_ioint_disabled(vcpu))
139                 active_mask &= ~IRQ_PEND_IO_MASK;
140         else
141                 active_mask = disable_iscs(vcpu, active_mask);
142         if (!(vcpu->arch.sie_block->gcr[0] & 0x2000ul))
143                 __clear_bit(IRQ_PEND_EXT_EXTERNAL, &active_mask);
144         if (!(vcpu->arch.sie_block->gcr[0] & 0x4000ul))
145                 __clear_bit(IRQ_PEND_EXT_EMERGENCY, &active_mask);
146         if (!(vcpu->arch.sie_block->gcr[0] & 0x800ul))
147                 __clear_bit(IRQ_PEND_EXT_CLOCK_COMP, &active_mask);
148         if (!(vcpu->arch.sie_block->gcr[0] & 0x400ul))
149                 __clear_bit(IRQ_PEND_EXT_CPU_TIMER, &active_mask);
150         if (!(vcpu->arch.sie_block->gcr[0] & 0x200ul))
151                 __clear_bit(IRQ_PEND_EXT_SERVICE, &active_mask);
152         if (psw_mchk_disabled(vcpu))
153                 active_mask &= ~IRQ_PEND_MCHK_MASK;
154         if (!(vcpu->arch.sie_block->gcr[14] &
155               vcpu->kvm->arch.float_int.mchk.cr14))
156                 __clear_bit(IRQ_PEND_MCHK_REP, &active_mask);
157
158         /*
159          * STOP irqs will never be actively delivered. They are triggered via
160          * intercept requests and cleared when the stop intercept is performed.
161          */
162         __clear_bit(IRQ_PEND_SIGP_STOP, &active_mask);
163
164         return active_mask;
165 }
166
167 static void __set_cpu_idle(struct kvm_vcpu *vcpu)
168 {
169         atomic_or(CPUSTAT_WAIT, &vcpu->arch.sie_block->cpuflags);
170         set_bit(vcpu->vcpu_id, vcpu->arch.local_int.float_int->idle_mask);
171 }
172
173 static void __unset_cpu_idle(struct kvm_vcpu *vcpu)
174 {
175         atomic_andnot(CPUSTAT_WAIT, &vcpu->arch.sie_block->cpuflags);
176         clear_bit(vcpu->vcpu_id, vcpu->arch.local_int.float_int->idle_mask);
177 }
178
179 static void __reset_intercept_indicators(struct kvm_vcpu *vcpu)
180 {
181         atomic_andnot(CPUSTAT_IO_INT | CPUSTAT_EXT_INT | CPUSTAT_STOP_INT,
182                     &vcpu->arch.sie_block->cpuflags);
183         vcpu->arch.sie_block->lctl = 0x0000;
184         vcpu->arch.sie_block->ictl &= ~(ICTL_LPSW | ICTL_STCTL | ICTL_PINT);
185
186         if (guestdbg_enabled(vcpu)) {
187                 vcpu->arch.sie_block->lctl |= (LCTL_CR0 | LCTL_CR9 |
188                                                LCTL_CR10 | LCTL_CR11);
189                 vcpu->arch.sie_block->ictl |= (ICTL_STCTL | ICTL_PINT);
190         }
191 }
192
193 static void __set_cpuflag(struct kvm_vcpu *vcpu, u32 flag)
194 {
195         atomic_or(flag, &vcpu->arch.sie_block->cpuflags);
196 }
197
198 static void set_intercept_indicators_io(struct kvm_vcpu *vcpu)
199 {
200         if (!(pending_irqs(vcpu) & IRQ_PEND_IO_MASK))
201                 return;
202         else if (psw_ioint_disabled(vcpu))
203                 __set_cpuflag(vcpu, CPUSTAT_IO_INT);
204         else
205                 vcpu->arch.sie_block->lctl |= LCTL_CR6;
206 }
207
208 static void set_intercept_indicators_ext(struct kvm_vcpu *vcpu)
209 {
210         if (!(pending_irqs(vcpu) & IRQ_PEND_EXT_MASK))
211                 return;
212         if (psw_extint_disabled(vcpu))
213                 __set_cpuflag(vcpu, CPUSTAT_EXT_INT);
214         else
215                 vcpu->arch.sie_block->lctl |= LCTL_CR0;
216 }
217
218 static void set_intercept_indicators_mchk(struct kvm_vcpu *vcpu)
219 {
220         if (!(pending_irqs(vcpu) & IRQ_PEND_MCHK_MASK))
221                 return;
222         if (psw_mchk_disabled(vcpu))
223                 vcpu->arch.sie_block->ictl |= ICTL_LPSW;
224         else
225                 vcpu->arch.sie_block->lctl |= LCTL_CR14;
226 }
227
228 static void set_intercept_indicators_stop(struct kvm_vcpu *vcpu)
229 {
230         if (kvm_s390_is_stop_irq_pending(vcpu))
231                 __set_cpuflag(vcpu, CPUSTAT_STOP_INT);
232 }
233
234 /* Set interception request for non-deliverable interrupts */
235 static void set_intercept_indicators(struct kvm_vcpu *vcpu)
236 {
237         set_intercept_indicators_io(vcpu);
238         set_intercept_indicators_ext(vcpu);
239         set_intercept_indicators_mchk(vcpu);
240         set_intercept_indicators_stop(vcpu);
241 }
242
243 static u16 get_ilc(struct kvm_vcpu *vcpu)
244 {
245         switch (vcpu->arch.sie_block->icptcode) {
246         case ICPT_INST:
247         case ICPT_INSTPROGI:
248         case ICPT_OPEREXC:
249         case ICPT_PARTEXEC:
250         case ICPT_IOINST:
251                 /* last instruction only stored for these icptcodes */
252                 return insn_length(vcpu->arch.sie_block->ipa >> 8);
253         case ICPT_PROGI:
254                 return vcpu->arch.sie_block->pgmilc;
255         default:
256                 return 0;
257         }
258 }
259
260 static int __must_check __deliver_cpu_timer(struct kvm_vcpu *vcpu)
261 {
262         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
263         int rc;
264
265         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_CPU_TIMER,
266                                          0, 0);
267
268         rc  = put_guest_lc(vcpu, EXT_IRQ_CPU_TIMER,
269                            (u16 *)__LC_EXT_INT_CODE);
270         rc |= put_guest_lc(vcpu, 0, (u16 *)__LC_EXT_CPU_ADDR);
271         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
272                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
273         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
274                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
275         clear_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
276         return rc ? -EFAULT : 0;
277 }
278
279 static int __must_check __deliver_ckc(struct kvm_vcpu *vcpu)
280 {
281         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
282         int rc;
283
284         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_CLOCK_COMP,
285                                          0, 0);
286
287         rc  = put_guest_lc(vcpu, EXT_IRQ_CLK_COMP,
288                            (u16 __user *)__LC_EXT_INT_CODE);
289         rc |= put_guest_lc(vcpu, 0, (u16 *)__LC_EXT_CPU_ADDR);
290         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
291                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
292         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
293                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
294         clear_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
295         return rc ? -EFAULT : 0;
296 }
297
298 static int __must_check __deliver_pfault_init(struct kvm_vcpu *vcpu)
299 {
300         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
301         struct kvm_s390_ext_info ext;
302         int rc;
303
304         spin_lock(&li->lock);
305         ext = li->irq.ext;
306         clear_bit(IRQ_PEND_PFAULT_INIT, &li->pending_irqs);
307         li->irq.ext.ext_params2 = 0;
308         spin_unlock(&li->lock);
309
310         VCPU_EVENT(vcpu, 4, "deliver: pfault init token 0x%llx",
311                    ext.ext_params2);
312         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
313                                          KVM_S390_INT_PFAULT_INIT,
314                                          0, ext.ext_params2);
315
316         rc  = put_guest_lc(vcpu, EXT_IRQ_CP_SERVICE, (u16 *) __LC_EXT_INT_CODE);
317         rc |= put_guest_lc(vcpu, PFAULT_INIT, (u16 *) __LC_EXT_CPU_ADDR);
318         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
319                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
320         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
321                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
322         rc |= put_guest_lc(vcpu, ext.ext_params2, (u64 *) __LC_EXT_PARAMS2);
323         return rc ? -EFAULT : 0;
324 }
325
326 static int __must_check __deliver_machine_check(struct kvm_vcpu *vcpu)
327 {
328         struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
329         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
330         struct kvm_s390_mchk_info mchk = {};
331         unsigned long adtl_status_addr;
332         int deliver = 0;
333         int rc = 0;
334
335         spin_lock(&fi->lock);
336         spin_lock(&li->lock);
337         if (test_bit(IRQ_PEND_MCHK_EX, &li->pending_irqs) ||
338             test_bit(IRQ_PEND_MCHK_REP, &li->pending_irqs)) {
339                 /*
340                  * If there was an exigent machine check pending, then any
341                  * repressible machine checks that might have been pending
342                  * are indicated along with it, so always clear bits for
343                  * repressible and exigent interrupts
344                  */
345                 mchk = li->irq.mchk;
346                 clear_bit(IRQ_PEND_MCHK_EX, &li->pending_irqs);
347                 clear_bit(IRQ_PEND_MCHK_REP, &li->pending_irqs);
348                 memset(&li->irq.mchk, 0, sizeof(mchk));
349                 deliver = 1;
350         }
351         /*
352          * We indicate floating repressible conditions along with
353          * other pending conditions. Channel Report Pending and Channel
354          * Subsystem damage are the only two and and are indicated by
355          * bits in mcic and masked in cr14.
356          */
357         if (test_and_clear_bit(IRQ_PEND_MCHK_REP, &fi->pending_irqs)) {
358                 mchk.mcic |= fi->mchk.mcic;
359                 mchk.cr14 |= fi->mchk.cr14;
360                 memset(&fi->mchk, 0, sizeof(mchk));
361                 deliver = 1;
362         }
363         spin_unlock(&li->lock);
364         spin_unlock(&fi->lock);
365
366         if (deliver) {
367                 VCPU_EVENT(vcpu, 3, "deliver: machine check mcic 0x%llx",
368                            mchk.mcic);
369                 trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
370                                                  KVM_S390_MCHK,
371                                                  mchk.cr14, mchk.mcic);
372
373                 rc  = kvm_s390_vcpu_store_status(vcpu,
374                                                  KVM_S390_STORE_STATUS_PREFIXED);
375                 rc |= read_guest_lc(vcpu, __LC_VX_SAVE_AREA_ADDR,
376                                     &adtl_status_addr,
377                                     sizeof(unsigned long));
378                 rc |= kvm_s390_vcpu_store_adtl_status(vcpu,
379                                                       adtl_status_addr);
380                 rc |= put_guest_lc(vcpu, mchk.mcic,
381                                    (u64 __user *) __LC_MCCK_CODE);
382                 rc |= put_guest_lc(vcpu, mchk.failing_storage_address,
383                                    (u64 __user *) __LC_MCCK_FAIL_STOR_ADDR);
384                 rc |= write_guest_lc(vcpu, __LC_PSW_SAVE_AREA,
385                                      &mchk.fixed_logout,
386                                      sizeof(mchk.fixed_logout));
387                 rc |= write_guest_lc(vcpu, __LC_MCK_OLD_PSW,
388                                      &vcpu->arch.sie_block->gpsw,
389                                      sizeof(psw_t));
390                 rc |= read_guest_lc(vcpu, __LC_MCK_NEW_PSW,
391                                     &vcpu->arch.sie_block->gpsw,
392                                     sizeof(psw_t));
393         }
394         return rc ? -EFAULT : 0;
395 }
396
397 static int __must_check __deliver_restart(struct kvm_vcpu *vcpu)
398 {
399         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
400         int rc;
401
402         VCPU_EVENT(vcpu, 3, "%s", "deliver: cpu restart");
403         vcpu->stat.deliver_restart_signal++;
404         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_RESTART, 0, 0);
405
406         rc  = write_guest_lc(vcpu,
407                              offsetof(struct _lowcore, restart_old_psw),
408                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
409         rc |= read_guest_lc(vcpu, offsetof(struct _lowcore, restart_psw),
410                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
411         clear_bit(IRQ_PEND_RESTART, &li->pending_irqs);
412         return rc ? -EFAULT : 0;
413 }
414
415 static int __must_check __deliver_set_prefix(struct kvm_vcpu *vcpu)
416 {
417         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
418         struct kvm_s390_prefix_info prefix;
419
420         spin_lock(&li->lock);
421         prefix = li->irq.prefix;
422         li->irq.prefix.address = 0;
423         clear_bit(IRQ_PEND_SET_PREFIX, &li->pending_irqs);
424         spin_unlock(&li->lock);
425
426         vcpu->stat.deliver_prefix_signal++;
427         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
428                                          KVM_S390_SIGP_SET_PREFIX,
429                                          prefix.address, 0);
430
431         kvm_s390_set_prefix(vcpu, prefix.address);
432         return 0;
433 }
434
435 static int __must_check __deliver_emergency_signal(struct kvm_vcpu *vcpu)
436 {
437         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
438         int rc;
439         int cpu_addr;
440
441         spin_lock(&li->lock);
442         cpu_addr = find_first_bit(li->sigp_emerg_pending, KVM_MAX_VCPUS);
443         clear_bit(cpu_addr, li->sigp_emerg_pending);
444         if (bitmap_empty(li->sigp_emerg_pending, KVM_MAX_VCPUS))
445                 clear_bit(IRQ_PEND_EXT_EMERGENCY, &li->pending_irqs);
446         spin_unlock(&li->lock);
447
448         VCPU_EVENT(vcpu, 4, "%s", "deliver: sigp emerg");
449         vcpu->stat.deliver_emergency_signal++;
450         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_EMERGENCY,
451                                          cpu_addr, 0);
452
453         rc  = put_guest_lc(vcpu, EXT_IRQ_EMERGENCY_SIG,
454                            (u16 *)__LC_EXT_INT_CODE);
455         rc |= put_guest_lc(vcpu, cpu_addr, (u16 *)__LC_EXT_CPU_ADDR);
456         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
457                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
458         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
459                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
460         return rc ? -EFAULT : 0;
461 }
462
463 static int __must_check __deliver_external_call(struct kvm_vcpu *vcpu)
464 {
465         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
466         struct kvm_s390_extcall_info extcall;
467         int rc;
468
469         spin_lock(&li->lock);
470         extcall = li->irq.extcall;
471         li->irq.extcall.code = 0;
472         clear_bit(IRQ_PEND_EXT_EXTERNAL, &li->pending_irqs);
473         spin_unlock(&li->lock);
474
475         VCPU_EVENT(vcpu, 4, "%s", "deliver: sigp ext call");
476         vcpu->stat.deliver_external_call++;
477         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
478                                          KVM_S390_INT_EXTERNAL_CALL,
479                                          extcall.code, 0);
480
481         rc  = put_guest_lc(vcpu, EXT_IRQ_EXTERNAL_CALL,
482                            (u16 *)__LC_EXT_INT_CODE);
483         rc |= put_guest_lc(vcpu, extcall.code, (u16 *)__LC_EXT_CPU_ADDR);
484         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
485                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
486         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW, &vcpu->arch.sie_block->gpsw,
487                             sizeof(psw_t));
488         return rc ? -EFAULT : 0;
489 }
490
491 static int __must_check __deliver_prog(struct kvm_vcpu *vcpu)
492 {
493         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
494         struct kvm_s390_pgm_info pgm_info;
495         int rc = 0, nullifying = false;
496         u16 ilc = get_ilc(vcpu);
497
498         spin_lock(&li->lock);
499         pgm_info = li->irq.pgm;
500         clear_bit(IRQ_PEND_PROG, &li->pending_irqs);
501         memset(&li->irq.pgm, 0, sizeof(pgm_info));
502         spin_unlock(&li->lock);
503
504         VCPU_EVENT(vcpu, 3, "deliver: program irq code 0x%x, ilc:%d",
505                    pgm_info.code, ilc);
506         vcpu->stat.deliver_program_int++;
507         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_PROGRAM_INT,
508                                          pgm_info.code, 0);
509
510         switch (pgm_info.code & ~PGM_PER) {
511         case PGM_AFX_TRANSLATION:
512         case PGM_ASX_TRANSLATION:
513         case PGM_EX_TRANSLATION:
514         case PGM_LFX_TRANSLATION:
515         case PGM_LSTE_SEQUENCE:
516         case PGM_LSX_TRANSLATION:
517         case PGM_LX_TRANSLATION:
518         case PGM_PRIMARY_AUTHORITY:
519         case PGM_SECONDARY_AUTHORITY:
520                 nullifying = true;
521                 /* fall through */
522         case PGM_SPACE_SWITCH:
523                 rc = put_guest_lc(vcpu, pgm_info.trans_exc_code,
524                                   (u64 *)__LC_TRANS_EXC_CODE);
525                 break;
526         case PGM_ALEN_TRANSLATION:
527         case PGM_ALE_SEQUENCE:
528         case PGM_ASTE_INSTANCE:
529         case PGM_ASTE_SEQUENCE:
530         case PGM_ASTE_VALIDITY:
531         case PGM_EXTENDED_AUTHORITY:
532                 rc = put_guest_lc(vcpu, pgm_info.exc_access_id,
533                                   (u8 *)__LC_EXC_ACCESS_ID);
534                 nullifying = true;
535                 break;
536         case PGM_ASCE_TYPE:
537         case PGM_PAGE_TRANSLATION:
538         case PGM_REGION_FIRST_TRANS:
539         case PGM_REGION_SECOND_TRANS:
540         case PGM_REGION_THIRD_TRANS:
541         case PGM_SEGMENT_TRANSLATION:
542                 rc = put_guest_lc(vcpu, pgm_info.trans_exc_code,
543                                   (u64 *)__LC_TRANS_EXC_CODE);
544                 rc |= put_guest_lc(vcpu, pgm_info.exc_access_id,
545                                    (u8 *)__LC_EXC_ACCESS_ID);
546                 rc |= put_guest_lc(vcpu, pgm_info.op_access_id,
547                                    (u8 *)__LC_OP_ACCESS_ID);
548                 nullifying = true;
549                 break;
550         case PGM_MONITOR:
551                 rc = put_guest_lc(vcpu, pgm_info.mon_class_nr,
552                                   (u16 *)__LC_MON_CLASS_NR);
553                 rc |= put_guest_lc(vcpu, pgm_info.mon_code,
554                                    (u64 *)__LC_MON_CODE);
555                 break;
556         case PGM_VECTOR_PROCESSING:
557         case PGM_DATA:
558                 rc = put_guest_lc(vcpu, pgm_info.data_exc_code,
559                                   (u32 *)__LC_DATA_EXC_CODE);
560                 break;
561         case PGM_PROTECTION:
562                 rc = put_guest_lc(vcpu, pgm_info.trans_exc_code,
563                                   (u64 *)__LC_TRANS_EXC_CODE);
564                 rc |= put_guest_lc(vcpu, pgm_info.exc_access_id,
565                                    (u8 *)__LC_EXC_ACCESS_ID);
566                 break;
567         case PGM_STACK_FULL:
568         case PGM_STACK_EMPTY:
569         case PGM_STACK_SPECIFICATION:
570         case PGM_STACK_TYPE:
571         case PGM_STACK_OPERATION:
572         case PGM_TRACE_TABEL:
573         case PGM_CRYPTO_OPERATION:
574                 nullifying = true;
575                 break;
576         }
577
578         if (pgm_info.code & PGM_PER) {
579                 rc |= put_guest_lc(vcpu, pgm_info.per_code,
580                                    (u8 *) __LC_PER_CODE);
581                 rc |= put_guest_lc(vcpu, pgm_info.per_atmid,
582                                    (u8 *)__LC_PER_ATMID);
583                 rc |= put_guest_lc(vcpu, pgm_info.per_address,
584                                    (u64 *) __LC_PER_ADDRESS);
585                 rc |= put_guest_lc(vcpu, pgm_info.per_access_id,
586                                    (u8 *) __LC_PER_ACCESS_ID);
587         }
588
589         if (nullifying && vcpu->arch.sie_block->icptcode == ICPT_INST)
590                 kvm_s390_rewind_psw(vcpu, ilc);
591
592         rc |= put_guest_lc(vcpu, ilc, (u16 *) __LC_PGM_ILC);
593         rc |= put_guest_lc(vcpu, vcpu->arch.sie_block->gbea,
594                                  (u64 *) __LC_LAST_BREAK);
595         rc |= put_guest_lc(vcpu, pgm_info.code,
596                            (u16 *)__LC_PGM_INT_CODE);
597         rc |= write_guest_lc(vcpu, __LC_PGM_OLD_PSW,
598                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
599         rc |= read_guest_lc(vcpu, __LC_PGM_NEW_PSW,
600                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
601         return rc ? -EFAULT : 0;
602 }
603
604 static int __must_check __deliver_service(struct kvm_vcpu *vcpu)
605 {
606         struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
607         struct kvm_s390_ext_info ext;
608         int rc = 0;
609
610         spin_lock(&fi->lock);
611         if (!(test_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs))) {
612                 spin_unlock(&fi->lock);
613                 return 0;
614         }
615         ext = fi->srv_signal;
616         memset(&fi->srv_signal, 0, sizeof(ext));
617         clear_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs);
618         spin_unlock(&fi->lock);
619
620         VCPU_EVENT(vcpu, 4, "deliver: sclp parameter 0x%x",
621                    ext.ext_params);
622         vcpu->stat.deliver_service_signal++;
623         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_SERVICE,
624                                          ext.ext_params, 0);
625
626         rc  = put_guest_lc(vcpu, EXT_IRQ_SERVICE_SIG, (u16 *)__LC_EXT_INT_CODE);
627         rc |= put_guest_lc(vcpu, 0, (u16 *)__LC_EXT_CPU_ADDR);
628         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
629                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
630         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
631                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
632         rc |= put_guest_lc(vcpu, ext.ext_params,
633                            (u32 *)__LC_EXT_PARAMS);
634
635         return rc ? -EFAULT : 0;
636 }
637
638 static int __must_check __deliver_pfault_done(struct kvm_vcpu *vcpu)
639 {
640         struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
641         struct kvm_s390_interrupt_info *inti;
642         int rc = 0;
643
644         spin_lock(&fi->lock);
645         inti = list_first_entry_or_null(&fi->lists[FIRQ_LIST_PFAULT],
646                                         struct kvm_s390_interrupt_info,
647                                         list);
648         if (inti) {
649                 list_del(&inti->list);
650                 fi->counters[FIRQ_CNTR_PFAULT] -= 1;
651         }
652         if (list_empty(&fi->lists[FIRQ_LIST_PFAULT]))
653                 clear_bit(IRQ_PEND_PFAULT_DONE, &fi->pending_irqs);
654         spin_unlock(&fi->lock);
655
656         if (inti) {
657                 trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
658                                                  KVM_S390_INT_PFAULT_DONE, 0,
659                                                  inti->ext.ext_params2);
660                 VCPU_EVENT(vcpu, 4, "deliver: pfault done token 0x%llx",
661                            inti->ext.ext_params2);
662
663                 rc  = put_guest_lc(vcpu, EXT_IRQ_CP_SERVICE,
664                                 (u16 *)__LC_EXT_INT_CODE);
665                 rc |= put_guest_lc(vcpu, PFAULT_DONE,
666                                 (u16 *)__LC_EXT_CPU_ADDR);
667                 rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
668                                 &vcpu->arch.sie_block->gpsw,
669                                 sizeof(psw_t));
670                 rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
671                                 &vcpu->arch.sie_block->gpsw,
672                                 sizeof(psw_t));
673                 rc |= put_guest_lc(vcpu, inti->ext.ext_params2,
674                                 (u64 *)__LC_EXT_PARAMS2);
675                 kfree(inti);
676         }
677         return rc ? -EFAULT : 0;
678 }
679
680 static int __must_check __deliver_virtio(struct kvm_vcpu *vcpu)
681 {
682         struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
683         struct kvm_s390_interrupt_info *inti;
684         int rc = 0;
685
686         spin_lock(&fi->lock);
687         inti = list_first_entry_or_null(&fi->lists[FIRQ_LIST_VIRTIO],
688                                         struct kvm_s390_interrupt_info,
689                                         list);
690         if (inti) {
691                 VCPU_EVENT(vcpu, 4,
692                            "deliver: virtio parm: 0x%x,parm64: 0x%llx",
693                            inti->ext.ext_params, inti->ext.ext_params2);
694                 vcpu->stat.deliver_virtio_interrupt++;
695                 trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
696                                 inti->type,
697                                 inti->ext.ext_params,
698                                 inti->ext.ext_params2);
699                 list_del(&inti->list);
700                 fi->counters[FIRQ_CNTR_VIRTIO] -= 1;
701         }
702         if (list_empty(&fi->lists[FIRQ_LIST_VIRTIO]))
703                 clear_bit(IRQ_PEND_VIRTIO, &fi->pending_irqs);
704         spin_unlock(&fi->lock);
705
706         if (inti) {
707                 rc  = put_guest_lc(vcpu, EXT_IRQ_CP_SERVICE,
708                                 (u16 *)__LC_EXT_INT_CODE);
709                 rc |= put_guest_lc(vcpu, VIRTIO_PARAM,
710                                 (u16 *)__LC_EXT_CPU_ADDR);
711                 rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
712                                 &vcpu->arch.sie_block->gpsw,
713                                 sizeof(psw_t));
714                 rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
715                                 &vcpu->arch.sie_block->gpsw,
716                                 sizeof(psw_t));
717                 rc |= put_guest_lc(vcpu, inti->ext.ext_params,
718                                 (u32 *)__LC_EXT_PARAMS);
719                 rc |= put_guest_lc(vcpu, inti->ext.ext_params2,
720                                 (u64 *)__LC_EXT_PARAMS2);
721                 kfree(inti);
722         }
723         return rc ? -EFAULT : 0;
724 }
725
726 static int __must_check __deliver_io(struct kvm_vcpu *vcpu,
727                                      unsigned long irq_type)
728 {
729         struct list_head *isc_list;
730         struct kvm_s390_float_interrupt *fi;
731         struct kvm_s390_interrupt_info *inti = NULL;
732         int rc = 0;
733
734         fi = &vcpu->kvm->arch.float_int;
735
736         spin_lock(&fi->lock);
737         isc_list = &fi->lists[irq_type - IRQ_PEND_IO_ISC_0];
738         inti = list_first_entry_or_null(isc_list,
739                                         struct kvm_s390_interrupt_info,
740                                         list);
741         if (inti) {
742                 VCPU_EVENT(vcpu, 4, "deliver: I/O 0x%llx", inti->type);
743                 vcpu->stat.deliver_io_int++;
744                 trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
745                                 inti->type,
746                                 ((__u32)inti->io.subchannel_id << 16) |
747                                 inti->io.subchannel_nr,
748                                 ((__u64)inti->io.io_int_parm << 32) |
749                                 inti->io.io_int_word);
750                 list_del(&inti->list);
751                 fi->counters[FIRQ_CNTR_IO] -= 1;
752         }
753         if (list_empty(isc_list))
754                 clear_bit(irq_type, &fi->pending_irqs);
755         spin_unlock(&fi->lock);
756
757         if (inti) {
758                 rc  = put_guest_lc(vcpu, inti->io.subchannel_id,
759                                 (u16 *)__LC_SUBCHANNEL_ID);
760                 rc |= put_guest_lc(vcpu, inti->io.subchannel_nr,
761                                 (u16 *)__LC_SUBCHANNEL_NR);
762                 rc |= put_guest_lc(vcpu, inti->io.io_int_parm,
763                                 (u32 *)__LC_IO_INT_PARM);
764                 rc |= put_guest_lc(vcpu, inti->io.io_int_word,
765                                 (u32 *)__LC_IO_INT_WORD);
766                 rc |= write_guest_lc(vcpu, __LC_IO_OLD_PSW,
767                                 &vcpu->arch.sie_block->gpsw,
768                                 sizeof(psw_t));
769                 rc |= read_guest_lc(vcpu, __LC_IO_NEW_PSW,
770                                 &vcpu->arch.sie_block->gpsw,
771                                 sizeof(psw_t));
772                 kfree(inti);
773         }
774
775         return rc ? -EFAULT : 0;
776 }
777
778 typedef int (*deliver_irq_t)(struct kvm_vcpu *vcpu);
779
780 static const deliver_irq_t deliver_irq_funcs[] = {
781         [IRQ_PEND_MCHK_EX]        = __deliver_machine_check,
782         [IRQ_PEND_MCHK_REP]       = __deliver_machine_check,
783         [IRQ_PEND_PROG]           = __deliver_prog,
784         [IRQ_PEND_EXT_EMERGENCY]  = __deliver_emergency_signal,
785         [IRQ_PEND_EXT_EXTERNAL]   = __deliver_external_call,
786         [IRQ_PEND_EXT_CLOCK_COMP] = __deliver_ckc,
787         [IRQ_PEND_EXT_CPU_TIMER]  = __deliver_cpu_timer,
788         [IRQ_PEND_RESTART]        = __deliver_restart,
789         [IRQ_PEND_SET_PREFIX]     = __deliver_set_prefix,
790         [IRQ_PEND_PFAULT_INIT]    = __deliver_pfault_init,
791         [IRQ_PEND_EXT_SERVICE]    = __deliver_service,
792         [IRQ_PEND_PFAULT_DONE]    = __deliver_pfault_done,
793         [IRQ_PEND_VIRTIO]         = __deliver_virtio,
794 };
795
796 /* Check whether an external call is pending (deliverable or not) */
797 int kvm_s390_ext_call_pending(struct kvm_vcpu *vcpu)
798 {
799         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
800         uint8_t sigp_ctrl = vcpu->kvm->arch.sca->cpu[vcpu->vcpu_id].sigp_ctrl;
801
802         if (!sclp.has_sigpif)
803                 return test_bit(IRQ_PEND_EXT_EXTERNAL, &li->pending_irqs);
804
805         return (sigp_ctrl & SIGP_CTRL_C) &&
806                (atomic_read(&vcpu->arch.sie_block->cpuflags) & CPUSTAT_ECALL_PEND);
807 }
808
809 int kvm_s390_vcpu_has_irq(struct kvm_vcpu *vcpu, int exclude_stop)
810 {
811         if (deliverable_irqs(vcpu))
812                 return 1;
813
814         if (kvm_cpu_has_pending_timer(vcpu))
815                 return 1;
816
817         /* external call pending and deliverable */
818         if (kvm_s390_ext_call_pending(vcpu) &&
819             !psw_extint_disabled(vcpu) &&
820             (vcpu->arch.sie_block->gcr[0] & 0x2000ul))
821                 return 1;
822
823         if (!exclude_stop && kvm_s390_is_stop_irq_pending(vcpu))
824                 return 1;
825         return 0;
826 }
827
828 int kvm_cpu_has_pending_timer(struct kvm_vcpu *vcpu)
829 {
830         return ckc_irq_pending(vcpu) || cpu_timer_irq_pending(vcpu);
831 }
832
833 int kvm_s390_handle_wait(struct kvm_vcpu *vcpu)
834 {
835         u64 now, sltime;
836
837         vcpu->stat.exit_wait_state++;
838
839         /* fast path */
840         if (kvm_arch_vcpu_runnable(vcpu))
841                 return 0;
842
843         if (psw_interrupts_disabled(vcpu)) {
844                 VCPU_EVENT(vcpu, 3, "%s", "disabled wait");
845                 return -EOPNOTSUPP; /* disabled wait */
846         }
847
848         if (!ckc_interrupts_enabled(vcpu)) {
849                 VCPU_EVENT(vcpu, 3, "%s", "enabled wait w/o timer");
850                 __set_cpu_idle(vcpu);
851                 goto no_timer;
852         }
853
854         preempt_disable();
855         now = get_tod_clock_fast() + vcpu->arch.sie_block->epoch;
856         preempt_enable();
857         sltime = tod_to_ns(vcpu->arch.sie_block->ckc - now);
858
859         /* underflow */
860         if (vcpu->arch.sie_block->ckc < now)
861                 return 0;
862
863         __set_cpu_idle(vcpu);
864         hrtimer_start(&vcpu->arch.ckc_timer, ktime_set (0, sltime) , HRTIMER_MODE_REL);
865         VCPU_EVENT(vcpu, 4, "enabled wait via clock comparator: %llu ns", sltime);
866 no_timer:
867         srcu_read_unlock(&vcpu->kvm->srcu, vcpu->srcu_idx);
868         kvm_vcpu_block(vcpu);
869         __unset_cpu_idle(vcpu);
870         vcpu->srcu_idx = srcu_read_lock(&vcpu->kvm->srcu);
871
872         hrtimer_cancel(&vcpu->arch.ckc_timer);
873         return 0;
874 }
875
876 void kvm_s390_vcpu_wakeup(struct kvm_vcpu *vcpu)
877 {
878         if (waitqueue_active(&vcpu->wq)) {
879                 /*
880                  * The vcpu gave up the cpu voluntarily, mark it as a good
881                  * yield-candidate.
882                  */
883                 vcpu->preempted = true;
884                 wake_up_interruptible(&vcpu->wq);
885                 vcpu->stat.halt_wakeup++;
886         }
887 }
888
889 enum hrtimer_restart kvm_s390_idle_wakeup(struct hrtimer *timer)
890 {
891         struct kvm_vcpu *vcpu;
892         u64 now, sltime;
893
894         vcpu = container_of(timer, struct kvm_vcpu, arch.ckc_timer);
895         preempt_disable();
896         now = get_tod_clock_fast() + vcpu->arch.sie_block->epoch;
897         preempt_enable();
898         sltime = tod_to_ns(vcpu->arch.sie_block->ckc - now);
899
900         /*
901          * If the monotonic clock runs faster than the tod clock we might be
902          * woken up too early and have to go back to sleep to avoid deadlocks.
903          */
904         if (vcpu->arch.sie_block->ckc > now &&
905             hrtimer_forward_now(timer, ns_to_ktime(sltime)))
906                 return HRTIMER_RESTART;
907         kvm_s390_vcpu_wakeup(vcpu);
908         return HRTIMER_NORESTART;
909 }
910
911 void kvm_s390_clear_local_irqs(struct kvm_vcpu *vcpu)
912 {
913         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
914
915         spin_lock(&li->lock);
916         li->pending_irqs = 0;
917         bitmap_zero(li->sigp_emerg_pending, KVM_MAX_VCPUS);
918         memset(&li->irq, 0, sizeof(li->irq));
919         spin_unlock(&li->lock);
920
921         /* clear pending external calls set by sigp interpretation facility */
922         atomic_andnot(CPUSTAT_ECALL_PEND, li->cpuflags);
923         vcpu->kvm->arch.sca->cpu[vcpu->vcpu_id].sigp_ctrl = 0;
924 }
925
926 int __must_check kvm_s390_deliver_pending_interrupts(struct kvm_vcpu *vcpu)
927 {
928         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
929         deliver_irq_t func;
930         int rc = 0;
931         unsigned long irq_type;
932         unsigned long irqs;
933
934         __reset_intercept_indicators(vcpu);
935
936         /* pending ckc conditions might have been invalidated */
937         clear_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
938         if (ckc_irq_pending(vcpu))
939                 set_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
940
941         /* pending cpu timer conditions might have been invalidated */
942         clear_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
943         if (cpu_timer_irq_pending(vcpu))
944                 set_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
945
946         while ((irqs = deliverable_irqs(vcpu)) && !rc) {
947                 /* bits are in the order of interrupt priority */
948                 irq_type = find_first_bit(&irqs, IRQ_PEND_COUNT);
949                 if (is_ioirq(irq_type)) {
950                         rc = __deliver_io(vcpu, irq_type);
951                 } else {
952                         func = deliver_irq_funcs[irq_type];
953                         if (!func) {
954                                 WARN_ON_ONCE(func == NULL);
955                                 clear_bit(irq_type, &li->pending_irqs);
956                                 continue;
957                         }
958                         rc = func(vcpu);
959                 }
960         }
961
962         set_intercept_indicators(vcpu);
963
964         return rc;
965 }
966
967 static int __inject_prog(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
968 {
969         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
970
971         VCPU_EVENT(vcpu, 3, "inject: program irq code 0x%x", irq->u.pgm.code);
972         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_PROGRAM_INT,
973                                    irq->u.pgm.code, 0);
974
975         if (irq->u.pgm.code == PGM_PER) {
976                 li->irq.pgm.code |= PGM_PER;
977                 /* only modify PER related information */
978                 li->irq.pgm.per_address = irq->u.pgm.per_address;
979                 li->irq.pgm.per_code = irq->u.pgm.per_code;
980                 li->irq.pgm.per_atmid = irq->u.pgm.per_atmid;
981                 li->irq.pgm.per_access_id = irq->u.pgm.per_access_id;
982         } else if (!(irq->u.pgm.code & PGM_PER)) {
983                 li->irq.pgm.code = (li->irq.pgm.code & PGM_PER) |
984                                    irq->u.pgm.code;
985                 /* only modify non-PER information */
986                 li->irq.pgm.trans_exc_code = irq->u.pgm.trans_exc_code;
987                 li->irq.pgm.mon_code = irq->u.pgm.mon_code;
988                 li->irq.pgm.data_exc_code = irq->u.pgm.data_exc_code;
989                 li->irq.pgm.mon_class_nr = irq->u.pgm.mon_class_nr;
990                 li->irq.pgm.exc_access_id = irq->u.pgm.exc_access_id;
991                 li->irq.pgm.op_access_id = irq->u.pgm.op_access_id;
992         } else {
993                 li->irq.pgm = irq->u.pgm;
994         }
995         set_bit(IRQ_PEND_PROG, &li->pending_irqs);
996         return 0;
997 }
998
999 static int __inject_pfault_init(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1000 {
1001         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1002
1003         VCPU_EVENT(vcpu, 4, "inject: pfault init parameter block at 0x%llx",
1004                    irq->u.ext.ext_params2);
1005         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_PFAULT_INIT,
1006                                    irq->u.ext.ext_params,
1007                                    irq->u.ext.ext_params2);
1008
1009         li->irq.ext = irq->u.ext;
1010         set_bit(IRQ_PEND_PFAULT_INIT, &li->pending_irqs);
1011         atomic_or(CPUSTAT_EXT_INT, li->cpuflags);
1012         return 0;
1013 }
1014
1015 static int __inject_extcall_sigpif(struct kvm_vcpu *vcpu, uint16_t src_id)
1016 {
1017         unsigned char new_val, old_val;
1018         uint8_t *sigp_ctrl = &vcpu->kvm->arch.sca->cpu[vcpu->vcpu_id].sigp_ctrl;
1019
1020         new_val = SIGP_CTRL_C | (src_id & SIGP_CTRL_SCN_MASK);
1021         old_val = *sigp_ctrl & ~SIGP_CTRL_C;
1022         if (cmpxchg(sigp_ctrl, old_val, new_val) != old_val) {
1023                 /* another external call is pending */
1024                 return -EBUSY;
1025         }
1026         atomic_or(CPUSTAT_ECALL_PEND, &vcpu->arch.sie_block->cpuflags);
1027         return 0;
1028 }
1029
1030 static int __inject_extcall(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1031 {
1032         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1033         struct kvm_s390_extcall_info *extcall = &li->irq.extcall;
1034         uint16_t src_id = irq->u.extcall.code;
1035
1036         VCPU_EVENT(vcpu, 4, "inject: external call source-cpu:%u",
1037                    src_id);
1038         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_EXTERNAL_CALL,
1039                                    src_id, 0);
1040
1041         /* sending vcpu invalid */
1042         if (src_id >= KVM_MAX_VCPUS ||
1043             kvm_get_vcpu(vcpu->kvm, src_id) == NULL)
1044                 return -EINVAL;
1045
1046         if (sclp.has_sigpif)
1047                 return __inject_extcall_sigpif(vcpu, src_id);
1048
1049         if (test_and_set_bit(IRQ_PEND_EXT_EXTERNAL, &li->pending_irqs))
1050                 return -EBUSY;
1051         *extcall = irq->u.extcall;
1052         atomic_or(CPUSTAT_EXT_INT, li->cpuflags);
1053         return 0;
1054 }
1055
1056 static int __inject_set_prefix(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1057 {
1058         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1059         struct kvm_s390_prefix_info *prefix = &li->irq.prefix;
1060
1061         VCPU_EVENT(vcpu, 3, "inject: set prefix to %x",
1062                    irq->u.prefix.address);
1063         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_SIGP_SET_PREFIX,
1064                                    irq->u.prefix.address, 0);
1065
1066         if (!is_vcpu_stopped(vcpu))
1067                 return -EBUSY;
1068
1069         *prefix = irq->u.prefix;
1070         set_bit(IRQ_PEND_SET_PREFIX, &li->pending_irqs);
1071         return 0;
1072 }
1073
1074 #define KVM_S390_STOP_SUPP_FLAGS (KVM_S390_STOP_FLAG_STORE_STATUS)
1075 static int __inject_sigp_stop(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1076 {
1077         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1078         struct kvm_s390_stop_info *stop = &li->irq.stop;
1079         int rc = 0;
1080
1081         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_SIGP_STOP, 0, 0);
1082
1083         if (irq->u.stop.flags & ~KVM_S390_STOP_SUPP_FLAGS)
1084                 return -EINVAL;
1085
1086         if (is_vcpu_stopped(vcpu)) {
1087                 if (irq->u.stop.flags & KVM_S390_STOP_FLAG_STORE_STATUS)
1088                         rc = kvm_s390_store_status_unloaded(vcpu,
1089                                                 KVM_S390_STORE_STATUS_NOADDR);
1090                 return rc;
1091         }
1092
1093         if (test_and_set_bit(IRQ_PEND_SIGP_STOP, &li->pending_irqs))
1094                 return -EBUSY;
1095         stop->flags = irq->u.stop.flags;
1096         __set_cpuflag(vcpu, CPUSTAT_STOP_INT);
1097         return 0;
1098 }
1099
1100 static int __inject_sigp_restart(struct kvm_vcpu *vcpu,
1101                                  struct kvm_s390_irq *irq)
1102 {
1103         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1104
1105         VCPU_EVENT(vcpu, 3, "%s", "inject: restart int");
1106         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_RESTART, 0, 0);
1107
1108         set_bit(IRQ_PEND_RESTART, &li->pending_irqs);
1109         return 0;
1110 }
1111
1112 static int __inject_sigp_emergency(struct kvm_vcpu *vcpu,
1113                                    struct kvm_s390_irq *irq)
1114 {
1115         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1116
1117         VCPU_EVENT(vcpu, 4, "inject: emergency from cpu %u",
1118                    irq->u.emerg.code);
1119         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_EMERGENCY,
1120                                    irq->u.emerg.code, 0);
1121
1122         set_bit(irq->u.emerg.code, li->sigp_emerg_pending);
1123         set_bit(IRQ_PEND_EXT_EMERGENCY, &li->pending_irqs);
1124         atomic_or(CPUSTAT_EXT_INT, li->cpuflags);
1125         return 0;
1126 }
1127
1128 static int __inject_mchk(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1129 {
1130         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1131         struct kvm_s390_mchk_info *mchk = &li->irq.mchk;
1132
1133         VCPU_EVENT(vcpu, 3, "inject: machine check mcic 0x%llx",
1134                    irq->u.mchk.mcic);
1135         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_MCHK, 0,
1136                                    irq->u.mchk.mcic);
1137
1138         /*
1139          * Because repressible machine checks can be indicated along with
1140          * exigent machine checks (PoP, Chapter 11, Interruption action)
1141          * we need to combine cr14, mcic and external damage code.
1142          * Failing storage address and the logout area should not be or'ed
1143          * together, we just indicate the last occurrence of the corresponding
1144          * machine check
1145          */
1146         mchk->cr14 |= irq->u.mchk.cr14;
1147         mchk->mcic |= irq->u.mchk.mcic;
1148         mchk->ext_damage_code |= irq->u.mchk.ext_damage_code;
1149         mchk->failing_storage_address = irq->u.mchk.failing_storage_address;
1150         memcpy(&mchk->fixed_logout, &irq->u.mchk.fixed_logout,
1151                sizeof(mchk->fixed_logout));
1152         if (mchk->mcic & MCHK_EX_MASK)
1153                 set_bit(IRQ_PEND_MCHK_EX, &li->pending_irqs);
1154         else if (mchk->mcic & MCHK_REP_MASK)
1155                 set_bit(IRQ_PEND_MCHK_REP,  &li->pending_irqs);
1156         return 0;
1157 }
1158
1159 static int __inject_ckc(struct kvm_vcpu *vcpu)
1160 {
1161         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1162
1163         VCPU_EVENT(vcpu, 3, "%s", "inject: clock comparator external");
1164         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_CLOCK_COMP,
1165                                    0, 0);
1166
1167         set_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
1168         atomic_or(CPUSTAT_EXT_INT, li->cpuflags);
1169         return 0;
1170 }
1171
1172 static int __inject_cpu_timer(struct kvm_vcpu *vcpu)
1173 {
1174         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1175
1176         VCPU_EVENT(vcpu, 3, "%s", "inject: cpu timer external");
1177         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_CPU_TIMER,
1178                                    0, 0);
1179
1180         set_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
1181         atomic_or(CPUSTAT_EXT_INT, li->cpuflags);
1182         return 0;
1183 }
1184
1185 static struct kvm_s390_interrupt_info *get_io_int(struct kvm *kvm,
1186                                                   int isc, u32 schid)
1187 {
1188         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1189         struct list_head *isc_list = &fi->lists[FIRQ_LIST_IO_ISC_0 + isc];
1190         struct kvm_s390_interrupt_info *iter;
1191         u16 id = (schid & 0xffff0000U) >> 16;
1192         u16 nr = schid & 0x0000ffffU;
1193
1194         spin_lock(&fi->lock);
1195         list_for_each_entry(iter, isc_list, list) {
1196                 if (schid && (id != iter->io.subchannel_id ||
1197                               nr != iter->io.subchannel_nr))
1198                         continue;
1199                 /* found an appropriate entry */
1200                 list_del_init(&iter->list);
1201                 fi->counters[FIRQ_CNTR_IO] -= 1;
1202                 if (list_empty(isc_list))
1203                         clear_bit(IRQ_PEND_IO_ISC_0 + isc, &fi->pending_irqs);
1204                 spin_unlock(&fi->lock);
1205                 return iter;
1206         }
1207         spin_unlock(&fi->lock);
1208         return NULL;
1209 }
1210
1211 /*
1212  * Dequeue and return an I/O interrupt matching any of the interruption
1213  * subclasses as designated by the isc mask in cr6 and the schid (if != 0).
1214  */
1215 struct kvm_s390_interrupt_info *kvm_s390_get_io_int(struct kvm *kvm,
1216                                                     u64 isc_mask, u32 schid)
1217 {
1218         struct kvm_s390_interrupt_info *inti = NULL;
1219         int isc;
1220
1221         for (isc = 0; isc <= MAX_ISC && !inti; isc++) {
1222                 if (isc_mask & isc_to_isc_bits(isc))
1223                         inti = get_io_int(kvm, isc, schid);
1224         }
1225         return inti;
1226 }
1227
1228 #define SCCB_MASK 0xFFFFFFF8
1229 #define SCCB_EVENT_PENDING 0x3
1230
1231 static int __inject_service(struct kvm *kvm,
1232                              struct kvm_s390_interrupt_info *inti)
1233 {
1234         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1235
1236         spin_lock(&fi->lock);
1237         fi->srv_signal.ext_params |= inti->ext.ext_params & SCCB_EVENT_PENDING;
1238         /*
1239          * Early versions of the QEMU s390 bios will inject several
1240          * service interrupts after another without handling a
1241          * condition code indicating busy.
1242          * We will silently ignore those superfluous sccb values.
1243          * A future version of QEMU will take care of serialization
1244          * of servc requests
1245          */
1246         if (fi->srv_signal.ext_params & SCCB_MASK)
1247                 goto out;
1248         fi->srv_signal.ext_params |= inti->ext.ext_params & SCCB_MASK;
1249         set_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs);
1250 out:
1251         spin_unlock(&fi->lock);
1252         kfree(inti);
1253         return 0;
1254 }
1255
1256 static int __inject_virtio(struct kvm *kvm,
1257                             struct kvm_s390_interrupt_info *inti)
1258 {
1259         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1260
1261         spin_lock(&fi->lock);
1262         if (fi->counters[FIRQ_CNTR_VIRTIO] >= KVM_S390_MAX_VIRTIO_IRQS) {
1263                 spin_unlock(&fi->lock);
1264                 return -EBUSY;
1265         }
1266         fi->counters[FIRQ_CNTR_VIRTIO] += 1;
1267         list_add_tail(&inti->list, &fi->lists[FIRQ_LIST_VIRTIO]);
1268         set_bit(IRQ_PEND_VIRTIO, &fi->pending_irqs);
1269         spin_unlock(&fi->lock);
1270         return 0;
1271 }
1272
1273 static int __inject_pfault_done(struct kvm *kvm,
1274                                  struct kvm_s390_interrupt_info *inti)
1275 {
1276         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1277
1278         spin_lock(&fi->lock);
1279         if (fi->counters[FIRQ_CNTR_PFAULT] >=
1280                 (ASYNC_PF_PER_VCPU * KVM_MAX_VCPUS)) {
1281                 spin_unlock(&fi->lock);
1282                 return -EBUSY;
1283         }
1284         fi->counters[FIRQ_CNTR_PFAULT] += 1;
1285         list_add_tail(&inti->list, &fi->lists[FIRQ_LIST_PFAULT]);
1286         set_bit(IRQ_PEND_PFAULT_DONE, &fi->pending_irqs);
1287         spin_unlock(&fi->lock);
1288         return 0;
1289 }
1290
1291 #define CR_PENDING_SUBCLASS 28
1292 static int __inject_float_mchk(struct kvm *kvm,
1293                                 struct kvm_s390_interrupt_info *inti)
1294 {
1295         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1296
1297         spin_lock(&fi->lock);
1298         fi->mchk.cr14 |= inti->mchk.cr14 & (1UL << CR_PENDING_SUBCLASS);
1299         fi->mchk.mcic |= inti->mchk.mcic;
1300         set_bit(IRQ_PEND_MCHK_REP, &fi->pending_irqs);
1301         spin_unlock(&fi->lock);
1302         kfree(inti);
1303         return 0;
1304 }
1305
1306 static int __inject_io(struct kvm *kvm, struct kvm_s390_interrupt_info *inti)
1307 {
1308         struct kvm_s390_float_interrupt *fi;
1309         struct list_head *list;
1310         int isc;
1311
1312         fi = &kvm->arch.float_int;
1313         spin_lock(&fi->lock);
1314         if (fi->counters[FIRQ_CNTR_IO] >= KVM_S390_MAX_FLOAT_IRQS) {
1315                 spin_unlock(&fi->lock);
1316                 return -EBUSY;
1317         }
1318         fi->counters[FIRQ_CNTR_IO] += 1;
1319
1320         isc = int_word_to_isc(inti->io.io_int_word);
1321         list = &fi->lists[FIRQ_LIST_IO_ISC_0 + isc];
1322         list_add_tail(&inti->list, list);
1323         set_bit(IRQ_PEND_IO_ISC_0 + isc, &fi->pending_irqs);
1324         spin_unlock(&fi->lock);
1325         return 0;
1326 }
1327
1328 /*
1329  * Find a destination VCPU for a floating irq and kick it.
1330  */
1331 static void __floating_irq_kick(struct kvm *kvm, u64 type)
1332 {
1333         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1334         struct kvm_s390_local_interrupt *li;
1335         struct kvm_vcpu *dst_vcpu;
1336         int sigcpu, online_vcpus, nr_tries = 0;
1337
1338         online_vcpus = atomic_read(&kvm->online_vcpus);
1339         if (!online_vcpus)
1340                 return;
1341
1342         /* find idle VCPUs first, then round robin */
1343         sigcpu = find_first_bit(fi->idle_mask, online_vcpus);
1344         if (sigcpu == online_vcpus) {
1345                 do {
1346                         sigcpu = fi->next_rr_cpu;
1347                         fi->next_rr_cpu = (fi->next_rr_cpu + 1) % online_vcpus;
1348                         /* avoid endless loops if all vcpus are stopped */
1349                         if (nr_tries++ >= online_vcpus)
1350                                 return;
1351                 } while (is_vcpu_stopped(kvm_get_vcpu(kvm, sigcpu)));
1352         }
1353         dst_vcpu = kvm_get_vcpu(kvm, sigcpu);
1354
1355         /* make the VCPU drop out of the SIE, or wake it up if sleeping */
1356         li = &dst_vcpu->arch.local_int;
1357         spin_lock(&li->lock);
1358         switch (type) {
1359         case KVM_S390_MCHK:
1360                 atomic_or(CPUSTAT_STOP_INT, li->cpuflags);
1361                 break;
1362         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1363                 atomic_or(CPUSTAT_IO_INT, li->cpuflags);
1364                 break;
1365         default:
1366                 atomic_or(CPUSTAT_EXT_INT, li->cpuflags);
1367                 break;
1368         }
1369         spin_unlock(&li->lock);
1370         kvm_s390_vcpu_wakeup(dst_vcpu);
1371 }
1372
1373 static int __inject_vm(struct kvm *kvm, struct kvm_s390_interrupt_info *inti)
1374 {
1375         u64 type = READ_ONCE(inti->type);
1376         int rc;
1377
1378         switch (type) {
1379         case KVM_S390_MCHK:
1380                 rc = __inject_float_mchk(kvm, inti);
1381                 break;
1382         case KVM_S390_INT_VIRTIO:
1383                 rc = __inject_virtio(kvm, inti);
1384                 break;
1385         case KVM_S390_INT_SERVICE:
1386                 rc = __inject_service(kvm, inti);
1387                 break;
1388         case KVM_S390_INT_PFAULT_DONE:
1389                 rc = __inject_pfault_done(kvm, inti);
1390                 break;
1391         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1392                 rc = __inject_io(kvm, inti);
1393                 break;
1394         default:
1395                 rc = -EINVAL;
1396         }
1397         if (rc)
1398                 return rc;
1399
1400         __floating_irq_kick(kvm, type);
1401         return 0;
1402 }
1403
1404 int kvm_s390_inject_vm(struct kvm *kvm,
1405                        struct kvm_s390_interrupt *s390int)
1406 {
1407         struct kvm_s390_interrupt_info *inti;
1408         int rc;
1409
1410         inti = kzalloc(sizeof(*inti), GFP_KERNEL);
1411         if (!inti)
1412                 return -ENOMEM;
1413
1414         inti->type = s390int->type;
1415         switch (inti->type) {
1416         case KVM_S390_INT_VIRTIO:
1417                 VM_EVENT(kvm, 5, "inject: virtio parm:%x,parm64:%llx",
1418                          s390int->parm, s390int->parm64);
1419                 inti->ext.ext_params = s390int->parm;
1420                 inti->ext.ext_params2 = s390int->parm64;
1421                 break;
1422         case KVM_S390_INT_SERVICE:
1423                 VM_EVENT(kvm, 4, "inject: sclp parm:%x", s390int->parm);
1424                 inti->ext.ext_params = s390int->parm;
1425                 break;
1426         case KVM_S390_INT_PFAULT_DONE:
1427                 inti->ext.ext_params2 = s390int->parm64;
1428                 break;
1429         case KVM_S390_MCHK:
1430                 VM_EVENT(kvm, 3, "inject: machine check mcic 0x%llx",
1431                          s390int->parm64);
1432                 inti->mchk.cr14 = s390int->parm; /* upper bits are not used */
1433                 inti->mchk.mcic = s390int->parm64;
1434                 break;
1435         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1436                 if (inti->type & KVM_S390_INT_IO_AI_MASK)
1437                         VM_EVENT(kvm, 5, "%s", "inject: I/O (AI)");
1438                 else
1439                         VM_EVENT(kvm, 5, "inject: I/O css %x ss %x schid %04x",
1440                                  s390int->type & IOINT_CSSID_MASK,
1441                                  s390int->type & IOINT_SSID_MASK,
1442                                  s390int->type & IOINT_SCHID_MASK);
1443                 inti->io.subchannel_id = s390int->parm >> 16;
1444                 inti->io.subchannel_nr = s390int->parm & 0x0000ffffu;
1445                 inti->io.io_int_parm = s390int->parm64 >> 32;
1446                 inti->io.io_int_word = s390int->parm64 & 0x00000000ffffffffull;
1447                 break;
1448         default:
1449                 kfree(inti);
1450                 return -EINVAL;
1451         }
1452         trace_kvm_s390_inject_vm(s390int->type, s390int->parm, s390int->parm64,
1453                                  2);
1454
1455         rc = __inject_vm(kvm, inti);
1456         if (rc)
1457                 kfree(inti);
1458         return rc;
1459 }
1460
1461 int kvm_s390_reinject_io_int(struct kvm *kvm,
1462                               struct kvm_s390_interrupt_info *inti)
1463 {
1464         return __inject_vm(kvm, inti);
1465 }
1466
1467 int s390int_to_s390irq(struct kvm_s390_interrupt *s390int,
1468                        struct kvm_s390_irq *irq)
1469 {
1470         irq->type = s390int->type;
1471         switch (irq->type) {
1472         case KVM_S390_PROGRAM_INT:
1473                 if (s390int->parm & 0xffff0000)
1474                         return -EINVAL;
1475                 irq->u.pgm.code = s390int->parm;
1476                 break;
1477         case KVM_S390_SIGP_SET_PREFIX:
1478                 irq->u.prefix.address = s390int->parm;
1479                 break;
1480         case KVM_S390_SIGP_STOP:
1481                 irq->u.stop.flags = s390int->parm;
1482                 break;
1483         case KVM_S390_INT_EXTERNAL_CALL:
1484                 if (s390int->parm & 0xffff0000)
1485                         return -EINVAL;
1486                 irq->u.extcall.code = s390int->parm;
1487                 break;
1488         case KVM_S390_INT_EMERGENCY:
1489                 if (s390int->parm & 0xffff0000)
1490                         return -EINVAL;
1491                 irq->u.emerg.code = s390int->parm;
1492                 break;
1493         case KVM_S390_MCHK:
1494                 irq->u.mchk.mcic = s390int->parm64;
1495                 break;
1496         }
1497         return 0;
1498 }
1499
1500 int kvm_s390_is_stop_irq_pending(struct kvm_vcpu *vcpu)
1501 {
1502         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1503
1504         return test_bit(IRQ_PEND_SIGP_STOP, &li->pending_irqs);
1505 }
1506
1507 void kvm_s390_clear_stop_irq(struct kvm_vcpu *vcpu)
1508 {
1509         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1510
1511         spin_lock(&li->lock);
1512         li->irq.stop.flags = 0;
1513         clear_bit(IRQ_PEND_SIGP_STOP, &li->pending_irqs);
1514         spin_unlock(&li->lock);
1515 }
1516
1517 static int do_inject_vcpu(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1518 {
1519         int rc;
1520
1521         switch (irq->type) {
1522         case KVM_S390_PROGRAM_INT:
1523                 rc = __inject_prog(vcpu, irq);
1524                 break;
1525         case KVM_S390_SIGP_SET_PREFIX:
1526                 rc = __inject_set_prefix(vcpu, irq);
1527                 break;
1528         case KVM_S390_SIGP_STOP:
1529                 rc = __inject_sigp_stop(vcpu, irq);
1530                 break;
1531         case KVM_S390_RESTART:
1532                 rc = __inject_sigp_restart(vcpu, irq);
1533                 break;
1534         case KVM_S390_INT_CLOCK_COMP:
1535                 rc = __inject_ckc(vcpu);
1536                 break;
1537         case KVM_S390_INT_CPU_TIMER:
1538                 rc = __inject_cpu_timer(vcpu);
1539                 break;
1540         case KVM_S390_INT_EXTERNAL_CALL:
1541                 rc = __inject_extcall(vcpu, irq);
1542                 break;
1543         case KVM_S390_INT_EMERGENCY:
1544                 rc = __inject_sigp_emergency(vcpu, irq);
1545                 break;
1546         case KVM_S390_MCHK:
1547                 rc = __inject_mchk(vcpu, irq);
1548                 break;
1549         case KVM_S390_INT_PFAULT_INIT:
1550                 rc = __inject_pfault_init(vcpu, irq);
1551                 break;
1552         case KVM_S390_INT_VIRTIO:
1553         case KVM_S390_INT_SERVICE:
1554         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1555         default:
1556                 rc = -EINVAL;
1557         }
1558
1559         return rc;
1560 }
1561
1562 int kvm_s390_inject_vcpu(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1563 {
1564         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1565         int rc;
1566
1567         spin_lock(&li->lock);
1568         rc = do_inject_vcpu(vcpu, irq);
1569         spin_unlock(&li->lock);
1570         if (!rc)
1571                 kvm_s390_vcpu_wakeup(vcpu);
1572         return rc;
1573 }
1574
1575 static inline void clear_irq_list(struct list_head *_list)
1576 {
1577         struct kvm_s390_interrupt_info *inti, *n;
1578
1579         list_for_each_entry_safe(inti, n, _list, list) {
1580                 list_del(&inti->list);
1581                 kfree(inti);
1582         }
1583 }
1584
1585 static void inti_to_irq(struct kvm_s390_interrupt_info *inti,
1586                        struct kvm_s390_irq *irq)
1587 {
1588         irq->type = inti->type;
1589         switch (inti->type) {
1590         case KVM_S390_INT_PFAULT_INIT:
1591         case KVM_S390_INT_PFAULT_DONE:
1592         case KVM_S390_INT_VIRTIO:
1593                 irq->u.ext = inti->ext;
1594                 break;
1595         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1596                 irq->u.io = inti->io;
1597                 break;
1598         }
1599 }
1600
1601 void kvm_s390_clear_float_irqs(struct kvm *kvm)
1602 {
1603         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1604         int i;
1605
1606         spin_lock(&fi->lock);
1607         fi->pending_irqs = 0;
1608         memset(&fi->srv_signal, 0, sizeof(fi->srv_signal));
1609         memset(&fi->mchk, 0, sizeof(fi->mchk));
1610         for (i = 0; i < FIRQ_LIST_COUNT; i++)
1611                 clear_irq_list(&fi->lists[i]);
1612         for (i = 0; i < FIRQ_MAX_COUNT; i++)
1613                 fi->counters[i] = 0;
1614         spin_unlock(&fi->lock);
1615 };
1616
1617 static int get_all_floating_irqs(struct kvm *kvm, u8 __user *usrbuf, u64 len)
1618 {
1619         struct kvm_s390_interrupt_info *inti;
1620         struct kvm_s390_float_interrupt *fi;
1621         struct kvm_s390_irq *buf;
1622         struct kvm_s390_irq *irq;
1623         int max_irqs;
1624         int ret = 0;
1625         int n = 0;
1626         int i;
1627
1628         if (len > KVM_S390_FLIC_MAX_BUFFER || len == 0)
1629                 return -EINVAL;
1630
1631         /*
1632          * We are already using -ENOMEM to signal
1633          * userspace it may retry with a bigger buffer,
1634          * so we need to use something else for this case
1635          */
1636         buf = vzalloc(len);
1637         if (!buf)
1638                 return -ENOBUFS;
1639
1640         max_irqs = len / sizeof(struct kvm_s390_irq);
1641
1642         fi = &kvm->arch.float_int;
1643         spin_lock(&fi->lock);
1644         for (i = 0; i < FIRQ_LIST_COUNT; i++) {
1645                 list_for_each_entry(inti, &fi->lists[i], list) {
1646                         if (n == max_irqs) {
1647                                 /* signal userspace to try again */
1648                                 ret = -ENOMEM;
1649                                 goto out;
1650                         }
1651                         inti_to_irq(inti, &buf[n]);
1652                         n++;
1653                 }
1654         }
1655         if (test_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs)) {
1656                 if (n == max_irqs) {
1657                         /* signal userspace to try again */
1658                         ret = -ENOMEM;
1659                         goto out;
1660                 }
1661                 irq = (struct kvm_s390_irq *) &buf[n];
1662                 irq->type = KVM_S390_INT_SERVICE;
1663                 irq->u.ext = fi->srv_signal;
1664                 n++;
1665         }
1666         if (test_bit(IRQ_PEND_MCHK_REP, &fi->pending_irqs)) {
1667                 if (n == max_irqs) {
1668                                 /* signal userspace to try again */
1669                                 ret = -ENOMEM;
1670                                 goto out;
1671                 }
1672                 irq = (struct kvm_s390_irq *) &buf[n];
1673                 irq->type = KVM_S390_MCHK;
1674                 irq->u.mchk = fi->mchk;
1675                 n++;
1676 }
1677
1678 out:
1679         spin_unlock(&fi->lock);
1680         if (!ret && n > 0) {
1681                 if (copy_to_user(usrbuf, buf, sizeof(struct kvm_s390_irq) * n))
1682                         ret = -EFAULT;
1683         }
1684         vfree(buf);
1685
1686         return ret < 0 ? ret : n;
1687 }
1688
1689 static int flic_get_attr(struct kvm_device *dev, struct kvm_device_attr *attr)
1690 {
1691         int r;
1692
1693         switch (attr->group) {
1694         case KVM_DEV_FLIC_GET_ALL_IRQS:
1695                 r = get_all_floating_irqs(dev->kvm, (u8 __user *) attr->addr,
1696                                           attr->attr);
1697                 break;
1698         default:
1699                 r = -EINVAL;
1700         }
1701
1702         return r;
1703 }
1704
1705 static inline int copy_irq_from_user(struct kvm_s390_interrupt_info *inti,
1706                                      u64 addr)
1707 {
1708         struct kvm_s390_irq __user *uptr = (struct kvm_s390_irq __user *) addr;
1709         void *target = NULL;
1710         void __user *source;
1711         u64 size;
1712
1713         if (get_user(inti->type, (u64 __user *)addr))
1714                 return -EFAULT;
1715
1716         switch (inti->type) {
1717         case KVM_S390_INT_PFAULT_INIT:
1718         case KVM_S390_INT_PFAULT_DONE:
1719         case KVM_S390_INT_VIRTIO:
1720         case KVM_S390_INT_SERVICE:
1721                 target = (void *) &inti->ext;
1722                 source = &uptr->u.ext;
1723                 size = sizeof(inti->ext);
1724                 break;
1725         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1726                 target = (void *) &inti->io;
1727                 source = &uptr->u.io;
1728                 size = sizeof(inti->io);
1729                 break;
1730         case KVM_S390_MCHK:
1731                 target = (void *) &inti->mchk;
1732                 source = &uptr->u.mchk;
1733                 size = sizeof(inti->mchk);
1734                 break;
1735         default:
1736                 return -EINVAL;
1737         }
1738
1739         if (copy_from_user(target, source, size))
1740                 return -EFAULT;
1741
1742         return 0;
1743 }
1744
1745 static int enqueue_floating_irq(struct kvm_device *dev,
1746                                 struct kvm_device_attr *attr)
1747 {
1748         struct kvm_s390_interrupt_info *inti = NULL;
1749         int r = 0;
1750         int len = attr->attr;
1751
1752         if (len % sizeof(struct kvm_s390_irq) != 0)
1753                 return -EINVAL;
1754         else if (len > KVM_S390_FLIC_MAX_BUFFER)
1755                 return -EINVAL;
1756
1757         while (len >= sizeof(struct kvm_s390_irq)) {
1758                 inti = kzalloc(sizeof(*inti), GFP_KERNEL);
1759                 if (!inti)
1760                         return -ENOMEM;
1761
1762                 r = copy_irq_from_user(inti, attr->addr);
1763                 if (r) {
1764                         kfree(inti);
1765                         return r;
1766                 }
1767                 r = __inject_vm(dev->kvm, inti);
1768                 if (r) {
1769                         kfree(inti);
1770                         return r;
1771                 }
1772                 len -= sizeof(struct kvm_s390_irq);
1773                 attr->addr += sizeof(struct kvm_s390_irq);
1774         }
1775
1776         return r;
1777 }
1778
1779 static struct s390_io_adapter *get_io_adapter(struct kvm *kvm, unsigned int id)
1780 {
1781         if (id >= MAX_S390_IO_ADAPTERS)
1782                 return NULL;
1783         return kvm->arch.adapters[id];
1784 }
1785
1786 static int register_io_adapter(struct kvm_device *dev,
1787                                struct kvm_device_attr *attr)
1788 {
1789         struct s390_io_adapter *adapter;
1790         struct kvm_s390_io_adapter adapter_info;
1791
1792         if (copy_from_user(&adapter_info,
1793                            (void __user *)attr->addr, sizeof(adapter_info)))
1794                 return -EFAULT;
1795
1796         if ((adapter_info.id >= MAX_S390_IO_ADAPTERS) ||
1797             (dev->kvm->arch.adapters[adapter_info.id] != NULL))
1798                 return -EINVAL;
1799
1800         adapter = kzalloc(sizeof(*adapter), GFP_KERNEL);
1801         if (!adapter)
1802                 return -ENOMEM;
1803
1804         INIT_LIST_HEAD(&adapter->maps);
1805         init_rwsem(&adapter->maps_lock);
1806         atomic_set(&adapter->nr_maps, 0);
1807         adapter->id = adapter_info.id;
1808         adapter->isc = adapter_info.isc;
1809         adapter->maskable = adapter_info.maskable;
1810         adapter->masked = false;
1811         adapter->swap = adapter_info.swap;
1812         dev->kvm->arch.adapters[adapter->id] = adapter;
1813
1814         return 0;
1815 }
1816
1817 int kvm_s390_mask_adapter(struct kvm *kvm, unsigned int id, bool masked)
1818 {
1819         int ret;
1820         struct s390_io_adapter *adapter = get_io_adapter(kvm, id);
1821
1822         if (!adapter || !adapter->maskable)
1823                 return -EINVAL;
1824         ret = adapter->masked;
1825         adapter->masked = masked;
1826         return ret;
1827 }
1828
1829 static int kvm_s390_adapter_map(struct kvm *kvm, unsigned int id, __u64 addr)
1830 {
1831         struct s390_io_adapter *adapter = get_io_adapter(kvm, id);
1832         struct s390_map_info *map;
1833         int ret;
1834
1835         if (!adapter || !addr)
1836                 return -EINVAL;
1837
1838         map = kzalloc(sizeof(*map), GFP_KERNEL);
1839         if (!map) {
1840                 ret = -ENOMEM;
1841                 goto out;
1842         }
1843         INIT_LIST_HEAD(&map->list);
1844         map->guest_addr = addr;
1845         map->addr = gmap_translate(kvm->arch.gmap, addr);
1846         if (map->addr == -EFAULT) {
1847                 ret = -EFAULT;
1848                 goto out;
1849         }
1850         ret = get_user_pages_fast(map->addr, 1, 1, &map->page);
1851         if (ret < 0)
1852                 goto out;
1853         BUG_ON(ret != 1);
1854         down_write(&adapter->maps_lock);
1855         if (atomic_inc_return(&adapter->nr_maps) < MAX_S390_ADAPTER_MAPS) {
1856                 list_add_tail(&map->list, &adapter->maps);
1857                 ret = 0;
1858         } else {
1859                 put_page(map->page);
1860                 ret = -EINVAL;
1861         }
1862         up_write(&adapter->maps_lock);
1863 out:
1864         if (ret)
1865                 kfree(map);
1866         return ret;
1867 }
1868
1869 static int kvm_s390_adapter_unmap(struct kvm *kvm, unsigned int id, __u64 addr)
1870 {
1871         struct s390_io_adapter *adapter = get_io_adapter(kvm, id);
1872         struct s390_map_info *map, *tmp;
1873         int found = 0;
1874
1875         if (!adapter || !addr)
1876                 return -EINVAL;
1877
1878         down_write(&adapter->maps_lock);
1879         list_for_each_entry_safe(map, tmp, &adapter->maps, list) {
1880                 if (map->guest_addr == addr) {
1881                         found = 1;
1882                         atomic_dec(&adapter->nr_maps);
1883                         list_del(&map->list);
1884                         put_page(map->page);
1885                         kfree(map);
1886                         break;
1887                 }
1888         }
1889         up_write(&adapter->maps_lock);
1890
1891         return found ? 0 : -EINVAL;
1892 }
1893
1894 void kvm_s390_destroy_adapters(struct kvm *kvm)
1895 {
1896         int i;
1897         struct s390_map_info *map, *tmp;
1898
1899         for (i = 0; i < MAX_S390_IO_ADAPTERS; i++) {
1900                 if (!kvm->arch.adapters[i])
1901                         continue;
1902                 list_for_each_entry_safe(map, tmp,
1903                                          &kvm->arch.adapters[i]->maps, list) {
1904                         list_del(&map->list);
1905                         put_page(map->page);
1906                         kfree(map);
1907                 }
1908                 kfree(kvm->arch.adapters[i]);
1909         }
1910 }
1911
1912 static int modify_io_adapter(struct kvm_device *dev,
1913                              struct kvm_device_attr *attr)
1914 {
1915         struct kvm_s390_io_adapter_req req;
1916         struct s390_io_adapter *adapter;
1917         int ret;
1918
1919         if (copy_from_user(&req, (void __user *)attr->addr, sizeof(req)))
1920                 return -EFAULT;
1921
1922         adapter = get_io_adapter(dev->kvm, req.id);
1923         if (!adapter)
1924                 return -EINVAL;
1925         switch (req.type) {
1926         case KVM_S390_IO_ADAPTER_MASK:
1927                 ret = kvm_s390_mask_adapter(dev->kvm, req.id, req.mask);
1928                 if (ret > 0)
1929                         ret = 0;
1930                 break;
1931         case KVM_S390_IO_ADAPTER_MAP:
1932                 ret = kvm_s390_adapter_map(dev->kvm, req.id, req.addr);
1933                 break;
1934         case KVM_S390_IO_ADAPTER_UNMAP:
1935                 ret = kvm_s390_adapter_unmap(dev->kvm, req.id, req.addr);
1936                 break;
1937         default:
1938                 ret = -EINVAL;
1939         }
1940
1941         return ret;
1942 }
1943
1944 static int flic_set_attr(struct kvm_device *dev, struct kvm_device_attr *attr)
1945 {
1946         int r = 0;
1947         unsigned int i;
1948         struct kvm_vcpu *vcpu;
1949
1950         switch (attr->group) {
1951         case KVM_DEV_FLIC_ENQUEUE:
1952                 r = enqueue_floating_irq(dev, attr);
1953                 break;
1954         case KVM_DEV_FLIC_CLEAR_IRQS:
1955                 kvm_s390_clear_float_irqs(dev->kvm);
1956                 break;
1957         case KVM_DEV_FLIC_APF_ENABLE:
1958                 dev->kvm->arch.gmap->pfault_enabled = 1;
1959                 break;
1960         case KVM_DEV_FLIC_APF_DISABLE_WAIT:
1961                 dev->kvm->arch.gmap->pfault_enabled = 0;
1962                 /*
1963                  * Make sure no async faults are in transition when
1964                  * clearing the queues. So we don't need to worry
1965                  * about late coming workers.
1966                  */
1967                 synchronize_srcu(&dev->kvm->srcu);
1968                 kvm_for_each_vcpu(i, vcpu, dev->kvm)
1969                         kvm_clear_async_pf_completion_queue(vcpu);
1970                 break;
1971         case KVM_DEV_FLIC_ADAPTER_REGISTER:
1972                 r = register_io_adapter(dev, attr);
1973                 break;
1974         case KVM_DEV_FLIC_ADAPTER_MODIFY:
1975                 r = modify_io_adapter(dev, attr);
1976                 break;
1977         default:
1978                 r = -EINVAL;
1979         }
1980
1981         return r;
1982 }
1983
1984 static int flic_create(struct kvm_device *dev, u32 type)
1985 {
1986         if (!dev)
1987                 return -EINVAL;
1988         if (dev->kvm->arch.flic)
1989                 return -EINVAL;
1990         dev->kvm->arch.flic = dev;
1991         return 0;
1992 }
1993
1994 static void flic_destroy(struct kvm_device *dev)
1995 {
1996         dev->kvm->arch.flic = NULL;
1997         kfree(dev);
1998 }
1999
2000 /* s390 floating irq controller (flic) */
2001 struct kvm_device_ops kvm_flic_ops = {
2002         .name = "kvm-flic",
2003         .get_attr = flic_get_attr,
2004         .set_attr = flic_set_attr,
2005         .create = flic_create,
2006         .destroy = flic_destroy,
2007 };
2008
2009 static unsigned long get_ind_bit(__u64 addr, unsigned long bit_nr, bool swap)
2010 {
2011         unsigned long bit;
2012
2013         bit = bit_nr + (addr % PAGE_SIZE) * 8;
2014
2015         return swap ? (bit ^ (BITS_PER_LONG - 1)) : bit;
2016 }
2017
2018 static struct s390_map_info *get_map_info(struct s390_io_adapter *adapter,
2019                                           u64 addr)
2020 {
2021         struct s390_map_info *map;
2022
2023         if (!adapter)
2024                 return NULL;
2025
2026         list_for_each_entry(map, &adapter->maps, list) {
2027                 if (map->guest_addr == addr)
2028                         return map;
2029         }
2030         return NULL;
2031 }
2032
2033 static int adapter_indicators_set(struct kvm *kvm,
2034                                   struct s390_io_adapter *adapter,
2035                                   struct kvm_s390_adapter_int *adapter_int)
2036 {
2037         unsigned long bit;
2038         int summary_set, idx;
2039         struct s390_map_info *info;
2040         void *map;
2041
2042         info = get_map_info(adapter, adapter_int->ind_addr);
2043         if (!info)
2044                 return -1;
2045         map = page_address(info->page);
2046         bit = get_ind_bit(info->addr, adapter_int->ind_offset, adapter->swap);
2047         set_bit(bit, map);
2048         idx = srcu_read_lock(&kvm->srcu);
2049         mark_page_dirty(kvm, info->guest_addr >> PAGE_SHIFT);
2050         set_page_dirty_lock(info->page);
2051         info = get_map_info(adapter, adapter_int->summary_addr);
2052         if (!info) {
2053                 srcu_read_unlock(&kvm->srcu, idx);
2054                 return -1;
2055         }
2056         map = page_address(info->page);
2057         bit = get_ind_bit(info->addr, adapter_int->summary_offset,
2058                           adapter->swap);
2059         summary_set = test_and_set_bit(bit, map);
2060         mark_page_dirty(kvm, info->guest_addr >> PAGE_SHIFT);
2061         set_page_dirty_lock(info->page);
2062         srcu_read_unlock(&kvm->srcu, idx);
2063         return summary_set ? 0 : 1;
2064 }
2065
2066 /*
2067  * < 0 - not injected due to error
2068  * = 0 - coalesced, summary indicator already active
2069  * > 0 - injected interrupt
2070  */
2071 static int set_adapter_int(struct kvm_kernel_irq_routing_entry *e,
2072                            struct kvm *kvm, int irq_source_id, int level,
2073                            bool line_status)
2074 {
2075         int ret;
2076         struct s390_io_adapter *adapter;
2077
2078         /* We're only interested in the 0->1 transition. */
2079         if (!level)
2080                 return 0;
2081         adapter = get_io_adapter(kvm, e->adapter.adapter_id);
2082         if (!adapter)
2083                 return -1;
2084         down_read(&adapter->maps_lock);
2085         ret = adapter_indicators_set(kvm, adapter, &e->adapter);
2086         up_read(&adapter->maps_lock);
2087         if ((ret > 0) && !adapter->masked) {
2088                 struct kvm_s390_interrupt s390int = {
2089                         .type = KVM_S390_INT_IO(1, 0, 0, 0),
2090                         .parm = 0,
2091                         .parm64 = (adapter->isc << 27) | 0x80000000,
2092                 };
2093                 ret = kvm_s390_inject_vm(kvm, &s390int);
2094                 if (ret == 0)
2095                         ret = 1;
2096         }
2097         return ret;
2098 }
2099
2100 int kvm_set_routing_entry(struct kvm_kernel_irq_routing_entry *e,
2101                           const struct kvm_irq_routing_entry *ue)
2102 {
2103         int ret;
2104
2105         switch (ue->type) {
2106         case KVM_IRQ_ROUTING_S390_ADAPTER:
2107                 e->set = set_adapter_int;
2108                 e->adapter.summary_addr = ue->u.adapter.summary_addr;
2109                 e->adapter.ind_addr = ue->u.adapter.ind_addr;
2110                 e->adapter.summary_offset = ue->u.adapter.summary_offset;
2111                 e->adapter.ind_offset = ue->u.adapter.ind_offset;
2112                 e->adapter.adapter_id = ue->u.adapter.adapter_id;
2113                 ret = 0;
2114                 break;
2115         default:
2116                 ret = -EINVAL;
2117         }
2118
2119         return ret;
2120 }
2121
2122 int kvm_set_msi(struct kvm_kernel_irq_routing_entry *e, struct kvm *kvm,
2123                 int irq_source_id, int level, bool line_status)
2124 {
2125         return -EINVAL;
2126 }
2127
2128 int kvm_s390_set_irq_state(struct kvm_vcpu *vcpu, void __user *irqstate, int len)
2129 {
2130         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
2131         struct kvm_s390_irq *buf;
2132         int r = 0;
2133         int n;
2134
2135         buf = vmalloc(len);
2136         if (!buf)
2137                 return -ENOMEM;
2138
2139         if (copy_from_user((void *) buf, irqstate, len)) {
2140                 r = -EFAULT;
2141                 goto out_free;
2142         }
2143
2144         /*
2145          * Don't allow setting the interrupt state
2146          * when there are already interrupts pending
2147          */
2148         spin_lock(&li->lock);
2149         if (li->pending_irqs) {
2150                 r = -EBUSY;
2151                 goto out_unlock;
2152         }
2153
2154         for (n = 0; n < len / sizeof(*buf); n++) {
2155                 r = do_inject_vcpu(vcpu, &buf[n]);
2156                 if (r)
2157                         break;
2158         }
2159
2160 out_unlock:
2161         spin_unlock(&li->lock);
2162 out_free:
2163         vfree(buf);
2164
2165         return r;
2166 }
2167
2168 static void store_local_irq(struct kvm_s390_local_interrupt *li,
2169                             struct kvm_s390_irq *irq,
2170                             unsigned long irq_type)
2171 {
2172         switch (irq_type) {
2173         case IRQ_PEND_MCHK_EX:
2174         case IRQ_PEND_MCHK_REP:
2175                 irq->type = KVM_S390_MCHK;
2176                 irq->u.mchk = li->irq.mchk;
2177                 break;
2178         case IRQ_PEND_PROG:
2179                 irq->type = KVM_S390_PROGRAM_INT;
2180                 irq->u.pgm = li->irq.pgm;
2181                 break;
2182         case IRQ_PEND_PFAULT_INIT:
2183                 irq->type = KVM_S390_INT_PFAULT_INIT;
2184                 irq->u.ext = li->irq.ext;
2185                 break;
2186         case IRQ_PEND_EXT_EXTERNAL:
2187                 irq->type = KVM_S390_INT_EXTERNAL_CALL;
2188                 irq->u.extcall = li->irq.extcall;
2189                 break;
2190         case IRQ_PEND_EXT_CLOCK_COMP:
2191                 irq->type = KVM_S390_INT_CLOCK_COMP;
2192                 break;
2193         case IRQ_PEND_EXT_CPU_TIMER:
2194                 irq->type = KVM_S390_INT_CPU_TIMER;
2195                 break;
2196         case IRQ_PEND_SIGP_STOP:
2197                 irq->type = KVM_S390_SIGP_STOP;
2198                 irq->u.stop = li->irq.stop;
2199                 break;
2200         case IRQ_PEND_RESTART:
2201                 irq->type = KVM_S390_RESTART;
2202                 break;
2203         case IRQ_PEND_SET_PREFIX:
2204                 irq->type = KVM_S390_SIGP_SET_PREFIX;
2205                 irq->u.prefix = li->irq.prefix;
2206                 break;
2207         }
2208 }
2209
2210 int kvm_s390_get_irq_state(struct kvm_vcpu *vcpu, __u8 __user *buf, int len)
2211 {
2212         uint8_t sigp_ctrl = vcpu->kvm->arch.sca->cpu[vcpu->vcpu_id].sigp_ctrl;
2213         unsigned long sigp_emerg_pending[BITS_TO_LONGS(KVM_MAX_VCPUS)];
2214         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
2215         unsigned long pending_irqs;
2216         struct kvm_s390_irq irq;
2217         unsigned long irq_type;
2218         int cpuaddr;
2219         int n = 0;
2220
2221         spin_lock(&li->lock);
2222         pending_irqs = li->pending_irqs;
2223         memcpy(&sigp_emerg_pending, &li->sigp_emerg_pending,
2224                sizeof(sigp_emerg_pending));
2225         spin_unlock(&li->lock);
2226
2227         for_each_set_bit(irq_type, &pending_irqs, IRQ_PEND_COUNT) {
2228                 memset(&irq, 0, sizeof(irq));
2229                 if (irq_type == IRQ_PEND_EXT_EMERGENCY)
2230                         continue;
2231                 if (n + sizeof(irq) > len)
2232                         return -ENOBUFS;
2233                 store_local_irq(&vcpu->arch.local_int, &irq, irq_type);
2234                 if (copy_to_user(&buf[n], &irq, sizeof(irq)))
2235                         return -EFAULT;
2236                 n += sizeof(irq);
2237         }
2238
2239         if (test_bit(IRQ_PEND_EXT_EMERGENCY, &pending_irqs)) {
2240                 for_each_set_bit(cpuaddr, sigp_emerg_pending, KVM_MAX_VCPUS) {
2241                         memset(&irq, 0, sizeof(irq));
2242                         if (n + sizeof(irq) > len)
2243                                 return -ENOBUFS;
2244                         irq.type = KVM_S390_INT_EMERGENCY;
2245                         irq.u.emerg.code = cpuaddr;
2246                         if (copy_to_user(&buf[n], &irq, sizeof(irq)))
2247                                 return -EFAULT;
2248                         n += sizeof(irq);
2249                 }
2250         }
2251
2252         if ((sigp_ctrl & SIGP_CTRL_C) &&
2253             (atomic_read(&vcpu->arch.sie_block->cpuflags) &
2254              CPUSTAT_ECALL_PEND)) {
2255                 if (n + sizeof(irq) > len)
2256                         return -ENOBUFS;
2257                 memset(&irq, 0, sizeof(irq));
2258                 irq.type = KVM_S390_INT_EXTERNAL_CALL;
2259                 irq.u.extcall.code = sigp_ctrl & SIGP_CTRL_SCN_MASK;
2260                 if (copy_to_user(&buf[n], &irq, sizeof(irq)))
2261                         return -EFAULT;
2262                 n += sizeof(irq);
2263         }
2264
2265         return n;
2266 }