arch/s390/kvm/interrupt.c

   1 /*
   2  * handling kvm guest interrupts
   3  *
   4  * Copyright IBM Corp. 2008, 2015
   5  *
   6  * This program is free software; you can redistribute it and/or modify
   7  * it under the terms of the GNU General Public License (version 2 only)
   8  * as published by the Free Software Foundation.
   9  *
  10  *    Author(s): Carsten Otte <cotte@de.ibm.com>
  11  */
  12
  13 #include <linux/interrupt.h>
  14 #include <linux/kvm_host.h>
  15 #include <linux/hrtimer.h>
  16 #include <linux/mmu_context.h>
  17 #include <linux/signal.h>
  18 #include <linux/slab.h>
  19 #include <linux/bitmap.h>
  20 #include <linux/vmalloc.h>
  21 #include <asm/asm-offsets.h>
  22 #include <asm/dis.h>
  23 #include <asm/uaccess.h>
  24 #include <asm/sclp.h>
  25 #include <asm/isc.h>
  26 #include "kvm-s390.h"
  27 #include "gaccess.h"
  28 #include "trace-s390.h"
  29
  30 #define IOINT_SCHID_MASK 0x0000ffff
  31 #define IOINT_SSID_MASK 0x00030000
  32 #define IOINT_CSSID_MASK 0x03fc0000
  33 #define PFAULT_INIT 0x0600
  34 #define PFAULT_DONE 0x0680
  35 #define VIRTIO_PARAM 0x0d00
  36
  37 int psw_extint_disabled(struct kvm_vcpu *vcpu)
  38 {
  39         return !(vcpu->arch.sie_block->gpsw.mask & PSW_MASK_EXT);
  40 }
  41
  42 static int psw_ioint_disabled(struct kvm_vcpu *vcpu)
  43 {
  44         return !(vcpu->arch.sie_block->gpsw.mask & PSW_MASK_IO);
  45 }
  46
  47 static int psw_mchk_disabled(struct kvm_vcpu *vcpu)
  48 {
  49         return !(vcpu->arch.sie_block->gpsw.mask & PSW_MASK_MCHECK);
  50 }
  51
  52 static int psw_interrupts_disabled(struct kvm_vcpu *vcpu)
  53 {
  54         return psw_extint_disabled(vcpu) &&
  55                psw_ioint_disabled(vcpu) &&
  56                psw_mchk_disabled(vcpu);
  57 }
  58
  59 static int ckc_interrupts_enabled(struct kvm_vcpu *vcpu)
  60 {
  61         if (psw_extint_disabled(vcpu) ||
  62             !(vcpu->arch.sie_block->gcr[0] & 0x800ul))
  63                 return 0;
  64         if (guestdbg_enabled(vcpu) && guestdbg_sstep_enabled(vcpu))
  65                 /* No timer interrupts when single stepping */
  66                 return 0;
  67         return 1;
  68 }
  69
  70 static int ckc_irq_pending(struct kvm_vcpu *vcpu)
  71 {
  72         preempt_disable();
  73         if (!(vcpu->arch.sie_block->ckc <
  74               get_tod_clock_fast() + vcpu->arch.sie_block->epoch)) {
  75                 preempt_enable();
  76                 return 0;
  77         }
  78         preempt_enable();
  79         return ckc_interrupts_enabled(vcpu);
  80 }
  81
  82 static int cpu_timer_interrupts_enabled(struct kvm_vcpu *vcpu)
  83 {
  84         return !psw_extint_disabled(vcpu) &&
  85                (vcpu->arch.sie_block->gcr[0] & 0x400ul);
  86 }
  87
  88 static int cpu_timer_irq_pending(struct kvm_vcpu *vcpu)
  89 {
  90         return (vcpu->arch.sie_block->cputm >> 63) &&
  91                cpu_timer_interrupts_enabled(vcpu);
  92 }
  93
  94 static inline int is_ioirq(unsigned long irq_type)
  95 {
  96         return ((irq_type >= IRQ_PEND_IO_ISC_0) &&
  97                 (irq_type <= IRQ_PEND_IO_ISC_7));
  98 }
  99
 100 static uint64_t isc_to_isc_bits(int isc)
 101 {
 102         return (0x80 >> isc) << 24;
 103 }
 104
 105 static inline u8 int_word_to_isc(u32 int_word)
 106 {
 107         return (int_word & 0x38000000) >> 27;
 108 }
 109
 110 static inline unsigned long pending_irqs(struct kvm_vcpu *vcpu)
 111 {
 112         return vcpu->kvm->arch.float_int.pending_irqs |
 113                vcpu->arch.local_int.pending_irqs;
 114 }
 115
 116 static unsigned long disable_iscs(struct kvm_vcpu *vcpu,
 117                                    unsigned long active_mask)
 118 {
 119         int i;
 120
 121         for (i = 0; i <= MAX_ISC; i++)
 122                 if (!(vcpu->arch.sie_block->gcr[6] & isc_to_isc_bits(i)))
 123                         active_mask &= ~(1UL << (IRQ_PEND_IO_ISC_0 + i));
 124
 125         return active_mask;
 126 }
 127
 128 static unsigned long deliverable_irqs(struct kvm_vcpu *vcpu)
 129 {
 130         unsigned long active_mask;
 131
 132         active_mask = pending_irqs(vcpu);
 133         if (!active_mask)
 134                 return 0;
 135
 136         if (psw_extint_disabled(vcpu))
 137                 active_mask &= ~IRQ_PEND_EXT_MASK;
 138         if (psw_ioint_disabled(vcpu))
 139                 active_mask &= ~IRQ_PEND_IO_MASK;
 140         else
 141                 active_mask = disable_iscs(vcpu, active_mask);
 142         if (!(vcpu->arch.sie_block->gcr[0] & 0x2000ul))
 143                 __clear_bit(IRQ_PEND_EXT_EXTERNAL, &active_mask);
 144         if (!(vcpu->arch.sie_block->gcr[0] & 0x4000ul))
 145                 __clear_bit(IRQ_PEND_EXT_EMERGENCY, &active_mask);
 146         if (!(vcpu->arch.sie_block->gcr[0] & 0x800ul))
 147                 __clear_bit(IRQ_PEND_EXT_CLOCK_COMP, &active_mask);
 148         if (!(vcpu->arch.sie_block->gcr[0] & 0x400ul))
 149                 __clear_bit(IRQ_PEND_EXT_CPU_TIMER, &active_mask);
 150         if (!(vcpu->arch.sie_block->gcr[0] & 0x200ul))
 151                 __clear_bit(IRQ_PEND_EXT_SERVICE, &active_mask);
 152         if (psw_mchk_disabled(vcpu))
 153                 active_mask &= ~IRQ_PEND_MCHK_MASK;
 154         if (!(vcpu->arch.sie_block->gcr[14] &
 155               vcpu->kvm->arch.float_int.mchk.cr14))
 156                 __clear_bit(IRQ_PEND_MCHK_REP, &active_mask);
 157
 158         /*
 159          * STOP irqs will never be actively delivered. They are triggered via
 160          * intercept requests and cleared when the stop intercept is performed.
 161          */
 162         __clear_bit(IRQ_PEND_SIGP_STOP, &active_mask);
 163
 164         return active_mask;
 165 }
 166
 167 static void __set_cpu_idle(struct kvm_vcpu *vcpu)
 168 {
 169         atomic_or(CPUSTAT_WAIT, &vcpu->arch.sie_block->cpuflags);
 170         set_bit(vcpu->vcpu_id, vcpu->arch.local_int.float_int->idle_mask);
 171 }
 172
 173 static void __unset_cpu_idle(struct kvm_vcpu *vcpu)
 174 {
 175         atomic_andnot(CPUSTAT_WAIT, &vcpu->arch.sie_block->cpuflags);
 176         clear_bit(vcpu->vcpu_id, vcpu->arch.local_int.float_int->idle_mask);
 177 }
 178
 179 static void __reset_intercept_indicators(struct kvm_vcpu *vcpu)
 180 {
 181         atomic_andnot(CPUSTAT_IO_INT | CPUSTAT_EXT_INT | CPUSTAT_STOP_INT,
 182                     &vcpu->arch.sie_block->cpuflags);
 183         vcpu->arch.sie_block->lctl = 0x0000;
 184         vcpu->arch.sie_block->ictl &= ~(ICTL_LPSW | ICTL_STCTL | ICTL_PINT);
 185
 186         if (guestdbg_enabled(vcpu)) {
 187                 vcpu->arch.sie_block->lctl |= (LCTL_CR0 | LCTL_CR9 |
 188                                                LCTL_CR10 | LCTL_CR11);
 189                 vcpu->arch.sie_block->ictl |= (ICTL_STCTL | ICTL_PINT);
 190         }
 191 }
 192
 193 static void __set_cpuflag(struct kvm_vcpu *vcpu, u32 flag)
 194 {
 195         atomic_or(flag, &vcpu->arch.sie_block->cpuflags);
 196 }
 197
 198 static void set_intercept_indicators_io(struct kvm_vcpu *vcpu)
 199 {
 200         if (!(pending_irqs(vcpu) & IRQ_PEND_IO_MASK))
 201                 return;
 202         else if (psw_ioint_disabled(vcpu))
 203                 __set_cpuflag(vcpu, CPUSTAT_IO_INT);
 204         else
 205                 vcpu->arch.sie_block->lctl |= LCTL_CR6;
 206 }
 207
 208 static void set_intercept_indicators_ext(struct kvm_vcpu *vcpu)
 209 {
 210         if (!(pending_irqs(vcpu) & IRQ_PEND_EXT_MASK))
 211                 return;
 212         if (psw_extint_disabled(vcpu))
 213                 __set_cpuflag(vcpu, CPUSTAT_EXT_INT);
 214         else
 215                 vcpu->arch.sie_block->lctl |= LCTL_CR0;
 216 }
 217
 218 static void set_intercept_indicators_mchk(struct kvm_vcpu *vcpu)
 219 {
 220         if (!(pending_irqs(vcpu) & IRQ_PEND_MCHK_MASK))
 221                 return;
 222         if (psw_mchk_disabled(vcpu))
 223                 vcpu->arch.sie_block->ictl |= ICTL_LPSW;
 224         else
 225                 vcpu->arch.sie_block->lctl |= LCTL_CR14;
 226 }
 227
 228 static void set_intercept_indicators_stop(struct kvm_vcpu *vcpu)
 229 {
 230         if (kvm_s390_is_stop_irq_pending(vcpu))
 231                 __set_cpuflag(vcpu, CPUSTAT_STOP_INT);
 232 }
 233
 234 /* Set interception request for non-deliverable interrupts */
 235 static void set_intercept_indicators(struct kvm_vcpu *vcpu)
 236 {
 237         set_intercept_indicators_io(vcpu);
 238         set_intercept_indicators_ext(vcpu);
 239         set_intercept_indicators_mchk(vcpu);
 240         set_intercept_indicators_stop(vcpu);
 241 }
 242
 243 static u16 get_ilc(struct kvm_vcpu *vcpu)
 244 {
 245         switch (vcpu->arch.sie_block->icptcode) {
 246         case ICPT_INST:
 247         case ICPT_INSTPROGI:
 248         case ICPT_OPEREXC:
 249         case ICPT_PARTEXEC:
 250         case ICPT_IOINST:
 251                 /* last instruction only stored for these icptcodes */
 252                 return insn_length(vcpu->arch.sie_block->ipa >> 8);
 253         case ICPT_PROGI:
 254                 return vcpu->arch.sie_block->pgmilc;
 255         default:
 256                 return 0;
 257         }
 258 }
 259
 260 static int __must_check __deliver_cpu_timer(struct kvm_vcpu *vcpu)
 261 {
 262         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 263         int rc;
 264
 265         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_CPU_TIMER,
 266                                          0, 0);
 267
 268         rc  = put_guest_lc(vcpu, EXT_IRQ_CPU_TIMER,
 269                            (u16 *)__LC_EXT_INT_CODE);
 270         rc |= put_guest_lc(vcpu, 0, (u16 *)__LC_EXT_CPU_ADDR);
 271         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 272                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 273         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
 274                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 275         clear_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
 276         return rc ? -EFAULT : 0;
 277 }
 278
 279 static int __must_check __deliver_ckc(struct kvm_vcpu *vcpu)
 280 {
 281         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 282         int rc;
 283
 284         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_CLOCK_COMP,
 285                                          0, 0);
 286
 287         rc  = put_guest_lc(vcpu, EXT_IRQ_CLK_COMP,
 288                            (u16 __user *)__LC_EXT_INT_CODE);
 289         rc |= put_guest_lc(vcpu, 0, (u16 *)__LC_EXT_CPU_ADDR);
 290         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 291                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 292         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
 293                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 294         clear_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
 295         return rc ? -EFAULT : 0;
 296 }
 297
 298 static int __must_check __deliver_pfault_init(struct kvm_vcpu *vcpu)
 299 {
 300         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 301         struct kvm_s390_ext_info ext;
 302         int rc;
 303
 304         spin_lock(&li->lock);
 305         ext = li->irq.ext;
 306         clear_bit(IRQ_PEND_PFAULT_INIT, &li->pending_irqs);
 307         li->irq.ext.ext_params2 = 0;
 308         spin_unlock(&li->lock);
 309
 310         VCPU_EVENT(vcpu, 4, "deliver: pfault init token 0x%llx",
 311                    ext.ext_params2);
 312         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
 313                                          KVM_S390_INT_PFAULT_INIT,
 314                                          0, ext.ext_params2);
 315
 316         rc  = put_guest_lc(vcpu, EXT_IRQ_CP_SERVICE, (u16 *) __LC_EXT_INT_CODE);
 317         rc |= put_guest_lc(vcpu, PFAULT_INIT, (u16 *) __LC_EXT_CPU_ADDR);
 318         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 319                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 320         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
 321                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 322         rc |= put_guest_lc(vcpu, ext.ext_params2, (u64 *) __LC_EXT_PARAMS2);
 323         return rc ? -EFAULT : 0;
 324 }
 325
 326 static int __must_check __deliver_machine_check(struct kvm_vcpu *vcpu)
 327 {
 328         struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
 329         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 330         struct kvm_s390_mchk_info mchk = {};
 331         unsigned long adtl_status_addr;
 332         int deliver = 0;
 333         int rc = 0;
 334
 335         spin_lock(&fi->lock);
 336         spin_lock(&li->lock);
 337         if (test_bit(IRQ_PEND_MCHK_EX, &li->pending_irqs) ||
 338             test_bit(IRQ_PEND_MCHK_REP, &li->pending_irqs)) {
 339                 /*
 340                  * If there was an exigent machine check pending, then any
 341                  * repressible machine checks that might have been pending
 342                  * are indicated along with it, so always clear bits for
 343                  * repressible and exigent interrupts
 344                  */
 345                 mchk = li->irq.mchk;
 346                 clear_bit(IRQ_PEND_MCHK_EX, &li->pending_irqs);
 347                 clear_bit(IRQ_PEND_MCHK_REP, &li->pending_irqs);
 348                 memset(&li->irq.mchk, 0, sizeof(mchk));
 349                 deliver = 1;
 350         }
 351         /*
 352          * We indicate floating repressible conditions along with
 353          * other pending conditions. Channel Report Pending and Channel
 354          * Subsystem damage are the only two and and are indicated by
 355          * bits in mcic and masked in cr14.
 356          */
 357         if (test_and_clear_bit(IRQ_PEND_MCHK_REP, &fi->pending_irqs)) {
 358                 mchk.mcic |= fi->mchk.mcic;
 359                 mchk.cr14 |= fi->mchk.cr14;
 360                 memset(&fi->mchk, 0, sizeof(mchk));
 361                 deliver = 1;
 362         }
 363         spin_unlock(&li->lock);
 364         spin_unlock(&fi->lock);
 365
 366         if (deliver) {
 367                 VCPU_EVENT(vcpu, 3, "deliver: machine check mcic 0x%llx",
 368                            mchk.mcic);
 369                 trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
 370                                                  KVM_S390_MCHK,
 371                                                  mchk.cr14, mchk.mcic);
 372
 373                 rc  = kvm_s390_vcpu_store_status(vcpu,
 374                                                  KVM_S390_STORE_STATUS_PREFIXED);
 375                 rc |= read_guest_lc(vcpu, __LC_VX_SAVE_AREA_ADDR,
 376                                     &adtl_status_addr,
 377                                     sizeof(unsigned long));
 378                 rc |= kvm_s390_vcpu_store_adtl_status(vcpu,
 379                                                       adtl_status_addr);
 380                 rc |= put_guest_lc(vcpu, mchk.mcic,
 381                                    (u64 __user *) __LC_MCCK_CODE);
 382                 rc |= put_guest_lc(vcpu, mchk.failing_storage_address,
 383                                    (u64 __user *) __LC_MCCK_FAIL_STOR_ADDR);
 384                 rc |= write_guest_lc(vcpu, __LC_PSW_SAVE_AREA,
 385                                      &mchk.fixed_logout,
 386                                      sizeof(mchk.fixed_logout));
 387                 rc |= write_guest_lc(vcpu, __LC_MCK_OLD_PSW,
 388                                      &vcpu->arch.sie_block->gpsw,
 389                                      sizeof(psw_t));
 390                 rc |= read_guest_lc(vcpu, __LC_MCK_NEW_PSW,
 391                                     &vcpu->arch.sie_block->gpsw,
 392                                     sizeof(psw_t));
 393         }
 394         return rc ? -EFAULT : 0;
 395 }
 396
 397 static int __must_check __deliver_restart(struct kvm_vcpu *vcpu)
 398 {
 399         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 400         int rc;
 401
 402         VCPU_EVENT(vcpu, 3, "%s", "deliver: cpu restart");
 403         vcpu->stat.deliver_restart_signal++;
 404         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_RESTART, 0, 0);
 405
 406         rc  = write_guest_lc(vcpu,
 407                              offsetof(struct _lowcore, restart_old_psw),
 408                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 409         rc |= read_guest_lc(vcpu, offsetof(struct _lowcore, restart_psw),
 410                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 411         clear_bit(IRQ_PEND_RESTART, &li->pending_irqs);
 412         return rc ? -EFAULT : 0;
 413 }
 414
 415 static int __must_check __deliver_set_prefix(struct kvm_vcpu *vcpu)
 416 {
 417         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 418         struct kvm_s390_prefix_info prefix;
 419
 420         spin_lock(&li->lock);
 421         prefix = li->irq.prefix;
 422         li->irq.prefix.address = 0;
 423         clear_bit(IRQ_PEND_SET_PREFIX, &li->pending_irqs);
 424         spin_unlock(&li->lock);
 425
 426         vcpu->stat.deliver_prefix_signal++;
 427         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
 428                                          KVM_S390_SIGP_SET_PREFIX,
 429                                          prefix.address, 0);
 430
 431         kvm_s390_set_prefix(vcpu, prefix.address);
 432         return 0;
 433 }
 434
 435 static int __must_check __deliver_emergency_signal(struct kvm_vcpu *vcpu)
 436 {
 437         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 438         int rc;
 439         int cpu_addr;
 440
 441         spin_lock(&li->lock);
 442         cpu_addr = find_first_bit(li->sigp_emerg_pending, KVM_MAX_VCPUS);
 443         clear_bit(cpu_addr, li->sigp_emerg_pending);
 444         if (bitmap_empty(li->sigp_emerg_pending, KVM_MAX_VCPUS))
 445                 clear_bit(IRQ_PEND_EXT_EMERGENCY, &li->pending_irqs);
 446         spin_unlock(&li->lock);
 447
 448         VCPU_EVENT(vcpu, 4, "%s", "deliver: sigp emerg");
 449         vcpu->stat.deliver_emergency_signal++;
 450         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_EMERGENCY,
 451                                          cpu_addr, 0);
 452
 453         rc  = put_guest_lc(vcpu, EXT_IRQ_EMERGENCY_SIG,
 454                            (u16 *)__LC_EXT_INT_CODE);
 455         rc |= put_guest_lc(vcpu, cpu_addr, (u16 *)__LC_EXT_CPU_ADDR);
 456         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 457                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 458         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
 459                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 460         return rc ? -EFAULT : 0;
 461 }
 462
 463 static int __must_check __deliver_external_call(struct kvm_vcpu *vcpu)
 464 {
 465         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 466         struct kvm_s390_extcall_info extcall;
 467         int rc;
 468
 469         spin_lock(&li->lock);
 470         extcall = li->irq.extcall;
 471         li->irq.extcall.code = 0;
 472         clear_bit(IRQ_PEND_EXT_EXTERNAL, &li->pending_irqs);
 473         spin_unlock(&li->lock);
 474
 475         VCPU_EVENT(vcpu, 4, "%s", "deliver: sigp ext call");
 476         vcpu->stat.deliver_external_call++;
 477         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
 478                                          KVM_S390_INT_EXTERNAL_CALL,
 479                                          extcall.code, 0);
 480
 481         rc  = put_guest_lc(vcpu, EXT_IRQ_EXTERNAL_CALL,
 482                            (u16 *)__LC_EXT_INT_CODE);
 483         rc |= put_guest_lc(vcpu, extcall.code, (u16 *)__LC_EXT_CPU_ADDR);
 484         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 485                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 486         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW, &vcpu->arch.sie_block->gpsw,
 487                             sizeof(psw_t));
 488         return rc ? -EFAULT : 0;
 489 }
 490
 491 static int __must_check __deliver_prog(struct kvm_vcpu *vcpu)
 492 {
 493         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 494         struct kvm_s390_pgm_info pgm_info;
 495         int rc = 0, nullifying = false;
 496         u16 ilc = get_ilc(vcpu);
 497
 498         spin_lock(&li->lock);
 499         pgm_info = li->irq.pgm;
 500         clear_bit(IRQ_PEND_PROG, &li->pending_irqs);
 501         memset(&li->irq.pgm, 0, sizeof(pgm_info));
 502         spin_unlock(&li->lock);
 503
 504         VCPU_EVENT(vcpu, 3, "deliver: program irq code 0x%x, ilc:%d",
 505                    pgm_info.code, ilc);
 506         vcpu->stat.deliver_program_int++;
 507         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_PROGRAM_INT,
 508                                          pgm_info.code, 0);
 509
 510         switch (pgm_info.code & ~PGM_PER) {
 511         case PGM_AFX_TRANSLATION:
 512         case PGM_ASX_TRANSLATION:
 513         case PGM_EX_TRANSLATION:
 514         case PGM_LFX_TRANSLATION:
 515         case PGM_LSTE_SEQUENCE:
 516         case PGM_LSX_TRANSLATION:
 517         case PGM_LX_TRANSLATION:
 518         case PGM_PRIMARY_AUTHORITY:
 519         case PGM_SECONDARY_AUTHORITY:
 520                 nullifying = true;
 521                 /* fall through */
 522         case PGM_SPACE_SWITCH:
 523                 rc = put_guest_lc(vcpu, pgm_info.trans_exc_code,
 524                                   (u64 *)__LC_TRANS_EXC_CODE);
 525                 break;
 526         case PGM_ALEN_TRANSLATION:
 527         case PGM_ALE_SEQUENCE:
 528         case PGM_ASTE_INSTANCE:
 529         case PGM_ASTE_SEQUENCE:
 530         case PGM_ASTE_VALIDITY:
 531         case PGM_EXTENDED_AUTHORITY:
 532                 rc = put_guest_lc(vcpu, pgm_info.exc_access_id,
 533                                   (u8 *)__LC_EXC_ACCESS_ID);
 534                 nullifying = true;
 535                 break;
 536         case PGM_ASCE_TYPE:
 537         case PGM_PAGE_TRANSLATION:
 538         case PGM_REGION_FIRST_TRANS:
 539         case PGM_REGION_SECOND_TRANS:
 540         case PGM_REGION_THIRD_TRANS:
 541         case PGM_SEGMENT_TRANSLATION:
 542                 rc = put_guest_lc(vcpu, pgm_info.trans_exc_code,
 543                                   (u64 *)__LC_TRANS_EXC_CODE);
 544                 rc |= put_guest_lc(vcpu, pgm_info.exc_access_id,
 545                                    (u8 *)__LC_EXC_ACCESS_ID);
 546                 rc |= put_guest_lc(vcpu, pgm_info.op_access_id,
 547                                    (u8 *)__LC_OP_ACCESS_ID);
 548                 nullifying = true;
 549                 break;
 550         case PGM_MONITOR:
 551                 rc = put_guest_lc(vcpu, pgm_info.mon_class_nr,
 552                                   (u16 *)__LC_MON_CLASS_NR);
 553                 rc |= put_guest_lc(vcpu, pgm_info.mon_code,
 554                                    (u64 *)__LC_MON_CODE);
 555                 break;
 556         case PGM_VECTOR_PROCESSING:
 557         case PGM_DATA:
 558                 rc = put_guest_lc(vcpu, pgm_info.data_exc_code,
 559                                   (u32 *)__LC_DATA_EXC_CODE);
 560                 break;
 561         case PGM_PROTECTION:
 562                 rc = put_guest_lc(vcpu, pgm_info.trans_exc_code,
 563                                   (u64 *)__LC_TRANS_EXC_CODE);
 564                 rc |= put_guest_lc(vcpu, pgm_info.exc_access_id,
 565                                    (u8 *)__LC_EXC_ACCESS_ID);
 566                 break;
 567         case PGM_STACK_FULL:
 568         case PGM_STACK_EMPTY:
 569         case PGM_STACK_SPECIFICATION:
 570         case PGM_STACK_TYPE:
 571         case PGM_STACK_OPERATION:
 572         case PGM_TRACE_TABEL:
 573         case PGM_CRYPTO_OPERATION:
 574                 nullifying = true;
 575                 break;
 576         }
 577
 578         if (pgm_info.code & PGM_PER) {
 579                 rc |= put_guest_lc(vcpu, pgm_info.per_code,
 580                                    (u8 *) __LC_PER_CODE);
 581                 rc |= put_guest_lc(vcpu, pgm_info.per_atmid,
 582                                    (u8 *)__LC_PER_ATMID);
 583                 rc |= put_guest_lc(vcpu, pgm_info.per_address,
 584                                    (u64 *) __LC_PER_ADDRESS);
 585                 rc |= put_guest_lc(vcpu, pgm_info.per_access_id,
 586                                    (u8 *) __LC_PER_ACCESS_ID);
 587         }
 588
 589         if (nullifying && vcpu->arch.sie_block->icptcode == ICPT_INST)
 590                 kvm_s390_rewind_psw(vcpu, ilc);
 591
 592         rc |= put_guest_lc(vcpu, ilc, (u16 *) __LC_PGM_ILC);
 593         rc |= put_guest_lc(vcpu, vcpu->arch.sie_block->gbea,
 594                                  (u64 *) __LC_LAST_BREAK);
 595         rc |= put_guest_lc(vcpu, pgm_info.code,
 596                            (u16 *)__LC_PGM_INT_CODE);
 597         rc |= write_guest_lc(vcpu, __LC_PGM_OLD_PSW,
 598                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 599         rc |= read_guest_lc(vcpu, __LC_PGM_NEW_PSW,
 600                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 601         return rc ? -EFAULT : 0;
 602 }
 603
 604 static int __must_check __deliver_service(struct kvm_vcpu *vcpu)
 605 {
 606         struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
 607         struct kvm_s390_ext_info ext;
 608         int rc = 0;
 609
 610         spin_lock(&fi->lock);
 611         if (!(test_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs))) {
 612                 spin_unlock(&fi->lock);
 613                 return 0;
 614         }
 615         ext = fi->srv_signal;
 616         memset(&fi->srv_signal, 0, sizeof(ext));
 617         clear_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs);
 618         spin_unlock(&fi->lock);
 619
 620         VCPU_EVENT(vcpu, 4, "deliver: sclp parameter 0x%x",
 621                    ext.ext_params);
 622         vcpu->stat.deliver_service_signal++;
 623         trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id, KVM_S390_INT_SERVICE,
 624                                          ext.ext_params, 0);
 625
 626         rc  = put_guest_lc(vcpu, EXT_IRQ_SERVICE_SIG, (u16 *)__LC_EXT_INT_CODE);
 627         rc |= put_guest_lc(vcpu, 0, (u16 *)__LC_EXT_CPU_ADDR);
 628         rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 629                              &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 630         rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
 631                             &vcpu->arch.sie_block->gpsw, sizeof(psw_t));
 632         rc |= put_guest_lc(vcpu, ext.ext_params,
 633                            (u32 *)__LC_EXT_PARAMS);
 634
 635         return rc ? -EFAULT : 0;
 636 }
 637
 638 static int __must_check __deliver_pfault_done(struct kvm_vcpu *vcpu)
 639 {
 640         struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
 641         struct kvm_s390_interrupt_info *inti;
 642         int rc = 0;
 643
 644         spin_lock(&fi->lock);
 645         inti = list_first_entry_or_null(&fi->lists[FIRQ_LIST_PFAULT],
 646                                         struct kvm_s390_interrupt_info,
 647                                         list);
 648         if (inti) {
 649                 list_del(&inti->list);
 650                 fi->counters[FIRQ_CNTR_PFAULT] -= 1;
 651         }
 652         if (list_empty(&fi->lists[FIRQ_LIST_PFAULT]))
 653                 clear_bit(IRQ_PEND_PFAULT_DONE, &fi->pending_irqs);
 654         spin_unlock(&fi->lock);
 655
 656         if (inti) {
 657                 trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
 658                                                  KVM_S390_INT_PFAULT_DONE, 0,
 659                                                  inti->ext.ext_params2);
 660                 VCPU_EVENT(vcpu, 4, "deliver: pfault done token 0x%llx",
 661                            inti->ext.ext_params2);
 662
 663                 rc  = put_guest_lc(vcpu, EXT_IRQ_CP_SERVICE,
 664                                 (u16 *)__LC_EXT_INT_CODE);
 665                 rc |= put_guest_lc(vcpu, PFAULT_DONE,
 666                                 (u16 *)__LC_EXT_CPU_ADDR);
 667                 rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 668                                 &vcpu->arch.sie_block->gpsw,
 669                                 sizeof(psw_t));
 670                 rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
 671                                 &vcpu->arch.sie_block->gpsw,
 672                                 sizeof(psw_t));
 673                 rc |= put_guest_lc(vcpu, inti->ext.ext_params2,
 674                                 (u64 *)__LC_EXT_PARAMS2);
 675                 kfree(inti);
 676         }
 677         return rc ? -EFAULT : 0;
 678 }
 679
 680 static int __must_check __deliver_virtio(struct kvm_vcpu *vcpu)
 681 {
 682         struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
 683         struct kvm_s390_interrupt_info *inti;
 684         int rc = 0;
 685
 686         spin_lock(&fi->lock);
 687         inti = list_first_entry_or_null(&fi->lists[FIRQ_LIST_VIRTIO],
 688                                         struct kvm_s390_interrupt_info,
 689                                         list);
 690         if (inti) {
 691                 VCPU_EVENT(vcpu, 4,
 692                            "deliver: virtio parm: 0x%x,parm64: 0x%llx",
 693                            inti->ext.ext_params, inti->ext.ext_params2);
 694                 vcpu->stat.deliver_virtio_interrupt++;
 695                 trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
 696                                 inti->type,
 697                                 inti->ext.ext_params,
 698                                 inti->ext.ext_params2);
 699                 list_del(&inti->list);
 700                 fi->counters[FIRQ_CNTR_VIRTIO] -= 1;
 701         }
 702         if (list_empty(&fi->lists[FIRQ_LIST_VIRTIO]))
 703                 clear_bit(IRQ_PEND_VIRTIO, &fi->pending_irqs);
 704         spin_unlock(&fi->lock);
 705
 706         if (inti) {
 707                 rc  = put_guest_lc(vcpu, EXT_IRQ_CP_SERVICE,
 708                                 (u16 *)__LC_EXT_INT_CODE);
 709                 rc |= put_guest_lc(vcpu, VIRTIO_PARAM,
 710                                 (u16 *)__LC_EXT_CPU_ADDR);
 711                 rc |= write_guest_lc(vcpu, __LC_EXT_OLD_PSW,
 712                                 &vcpu->arch.sie_block->gpsw,
 713                                 sizeof(psw_t));
 714                 rc |= read_guest_lc(vcpu, __LC_EXT_NEW_PSW,
 715                                 &vcpu->arch.sie_block->gpsw,
 716                                 sizeof(psw_t));
 717                 rc |= put_guest_lc(vcpu, inti->ext.ext_params,
 718                                 (u32 *)__LC_EXT_PARAMS);
 719                 rc |= put_guest_lc(vcpu, inti->ext.ext_params2,
 720                                 (u64 *)__LC_EXT_PARAMS2);
 721                 kfree(inti);
 722         }
 723         return rc ? -EFAULT : 0;
 724 }
 725
 726 static int __must_check __deliver_io(struct kvm_vcpu *vcpu,
 727                                      unsigned long irq_type)
 728 {
 729         struct list_head *isc_list;
 730         struct kvm_s390_float_interrupt *fi;
 731         struct kvm_s390_interrupt_info *inti = NULL;
 732         int rc = 0;
 733
 734         fi = &vcpu->kvm->arch.float_int;
 735
 736         spin_lock(&fi->lock);
 737         isc_list = &fi->lists[irq_type - IRQ_PEND_IO_ISC_0];
 738         inti = list_first_entry_or_null(isc_list,
 739                                         struct kvm_s390_interrupt_info,
 740                                         list);
 741         if (inti) {
 742                 VCPU_EVENT(vcpu, 4, "deliver: I/O 0x%llx", inti->type);
 743                 vcpu->stat.deliver_io_int++;
 744                 trace_kvm_s390_deliver_interrupt(vcpu->vcpu_id,
 745                                 inti->type,
 746                                 ((__u32)inti->io.subchannel_id << 16) |
 747                                 inti->io.subchannel_nr,
 748                                 ((__u64)inti->io.io_int_parm << 32) |
 749                                 inti->io.io_int_word);
 750                 list_del(&inti->list);
 751                 fi->counters[FIRQ_CNTR_IO] -= 1;
 752         }
 753         if (list_empty(isc_list))
 754                 clear_bit(irq_type, &fi->pending_irqs);
 755         spin_unlock(&fi->lock);
 756
 757         if (inti) {
 758                 rc  = put_guest_lc(vcpu, inti->io.subchannel_id,
 759                                 (u16 *)__LC_SUBCHANNEL_ID);
 760                 rc |= put_guest_lc(vcpu, inti->io.subchannel_nr,
 761                                 (u16 *)__LC_SUBCHANNEL_NR);
 762                 rc |= put_guest_lc(vcpu, inti->io.io_int_parm,
 763                                 (u32 *)__LC_IO_INT_PARM);
 764                 rc |= put_guest_lc(vcpu, inti->io.io_int_word,
 765                                 (u32 *)__LC_IO_INT_WORD);
 766                 rc |= write_guest_lc(vcpu, __LC_IO_OLD_PSW,
 767                                 &vcpu->arch.sie_block->gpsw,
 768                                 sizeof(psw_t));
 769                 rc |= read_guest_lc(vcpu, __LC_IO_NEW_PSW,
 770                                 &vcpu->arch.sie_block->gpsw,
 771                                 sizeof(psw_t));
 772                 kfree(inti);
 773         }
 774
 775         return rc ? -EFAULT : 0;
 776 }
 777
 778 typedef int (*deliver_irq_t)(struct kvm_vcpu *vcpu);
 779
 780 static const deliver_irq_t deliver_irq_funcs[] = {
 781         [IRQ_PEND_MCHK_EX]        = __deliver_machine_check,
 782         [IRQ_PEND_MCHK_REP]       = __deliver_machine_check,
 783         [IRQ_PEND_PROG]           = __deliver_prog,
 784         [IRQ_PEND_EXT_EMERGENCY]  = __deliver_emergency_signal,
 785         [IRQ_PEND_EXT_EXTERNAL]   = __deliver_external_call,
 786         [IRQ_PEND_EXT_CLOCK_COMP] = __deliver_ckc,
 787         [IRQ_PEND_EXT_CPU_TIMER]  = __deliver_cpu_timer,
 788         [IRQ_PEND_RESTART]        = __deliver_restart,
 789         [IRQ_PEND_SET_PREFIX]     = __deliver_set_prefix,
 790         [IRQ_PEND_PFAULT_INIT]    = __deliver_pfault_init,
 791         [IRQ_PEND_EXT_SERVICE]    = __deliver_service,
 792         [IRQ_PEND_PFAULT_DONE]    = __deliver_pfault_done,
 793         [IRQ_PEND_VIRTIO]         = __deliver_virtio,
 794 };
 795
 796 /* Check whether an external call is pending (deliverable or not) */
 797 int kvm_s390_ext_call_pending(struct kvm_vcpu *vcpu)
 798 {
 799         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 800         uint8_t sigp_ctrl = vcpu->kvm->arch.sca->cpu[vcpu->vcpu_id].sigp_ctrl;
 801
 802         if (!sclp.has_sigpif)
 803                 return test_bit(IRQ_PEND_EXT_EXTERNAL, &li->pending_irqs);
 804
 805         return (sigp_ctrl & SIGP_CTRL_C) &&
 806                (atomic_read(&vcpu->arch.sie_block->cpuflags) & CPUSTAT_ECALL_PEND);
 807 }
 808
 809 int kvm_s390_vcpu_has_irq(struct kvm_vcpu *vcpu, int exclude_stop)
 810 {
 811         if (deliverable_irqs(vcpu))
 812                 return 1;
 813
 814         if (kvm_cpu_has_pending_timer(vcpu))
 815                 return 1;
 816
 817         /* external call pending and deliverable */
 818         if (kvm_s390_ext_call_pending(vcpu) &&
 819             !psw_extint_disabled(vcpu) &&
 820             (vcpu->arch.sie_block->gcr[0] & 0x2000ul))
 821                 return 1;
 822
 823         if (!exclude_stop && kvm_s390_is_stop_irq_pending(vcpu))
 824                 return 1;
 825         return 0;
 826 }
 827
 828 int kvm_cpu_has_pending_timer(struct kvm_vcpu *vcpu)
 829 {
 830         return ckc_irq_pending(vcpu) || cpu_timer_irq_pending(vcpu);
 831 }
 832
 833 int kvm_s390_handle_wait(struct kvm_vcpu *vcpu)
 834 {
 835         u64 now, sltime;
 836
 837         vcpu->stat.exit_wait_state++;
 838
 839         /* fast path */
 840         if (kvm_arch_vcpu_runnable(vcpu))
 841                 return 0;
 842
 843         if (psw_interrupts_disabled(vcpu)) {
 844                 VCPU_EVENT(vcpu, 3, "%s", "disabled wait");
 845                 return -EOPNOTSUPP; /* disabled wait */
 846         }
 847
 848         if (!ckc_interrupts_enabled(vcpu)) {
 849                 VCPU_EVENT(vcpu, 3, "%s", "enabled wait w/o timer");
 850                 __set_cpu_idle(vcpu);
 851                 goto no_timer;
 852         }
 853
 854         preempt_disable();
 855         now = get_tod_clock_fast() + vcpu->arch.sie_block->epoch;
 856         preempt_enable();
 857         sltime = tod_to_ns(vcpu->arch.sie_block->ckc - now);
 858
 859         /* underflow */
 860         if (vcpu->arch.sie_block->ckc < now)
 861                 return 0;
 862
 863         __set_cpu_idle(vcpu);
 864         hrtimer_start(&vcpu->arch.ckc_timer, ktime_set (0, sltime) , HRTIMER_MODE_REL);
 865         VCPU_EVENT(vcpu, 4, "enabled wait via clock comparator: %llu ns", sltime);
 866 no_timer:
 867         srcu_read_unlock(&vcpu->kvm->srcu, vcpu->srcu_idx);
 868         kvm_vcpu_block(vcpu);
 869         __unset_cpu_idle(vcpu);
 870         vcpu->srcu_idx = srcu_read_lock(&vcpu->kvm->srcu);
 871
 872         hrtimer_cancel(&vcpu->arch.ckc_timer);
 873         return 0;
 874 }
 875
 876 void kvm_s390_vcpu_wakeup(struct kvm_vcpu *vcpu)
 877 {
 878         if (waitqueue_active(&vcpu->wq)) {
 879                 /*
 880                  * The vcpu gave up the cpu voluntarily, mark it as a good
 881                  * yield-candidate.
 882                  */
 883                 vcpu->preempted = true;
 884                 wake_up_interruptible(&vcpu->wq);
 885                 vcpu->stat.halt_wakeup++;
 886         }
 887 }
 888
 889 enum hrtimer_restart kvm_s390_idle_wakeup(struct hrtimer *timer)
 890 {
 891         struct kvm_vcpu *vcpu;
 892         u64 now, sltime;
 893
 894         vcpu = container_of(timer, struct kvm_vcpu, arch.ckc_timer);
 895         preempt_disable();
 896         now = get_tod_clock_fast() + vcpu->arch.sie_block->epoch;
 897         preempt_enable();
 898         sltime = tod_to_ns(vcpu->arch.sie_block->ckc - now);
 899
 900         /*
 901          * If the monotonic clock runs faster than the tod clock we might be
 902          * woken up too early and have to go back to sleep to avoid deadlocks.
 903          */
 904         if (vcpu->arch.sie_block->ckc > now &&
 905             hrtimer_forward_now(timer, ns_to_ktime(sltime)))
 906                 return HRTIMER_RESTART;
 907         kvm_s390_vcpu_wakeup(vcpu);
 908         return HRTIMER_NORESTART;
 909 }
 910
 911 void kvm_s390_clear_local_irqs(struct kvm_vcpu *vcpu)
 912 {
 913         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 914
 915         spin_lock(&li->lock);
 916         li->pending_irqs = 0;
 917         bitmap_zero(li->sigp_emerg_pending, KVM_MAX_VCPUS);
 918         memset(&li->irq, 0, sizeof(li->irq));
 919         spin_unlock(&li->lock);
 920
 921         /* clear pending external calls set by sigp interpretation facility */
 922         atomic_andnot(CPUSTAT_ECALL_PEND, li->cpuflags);
 923         vcpu->kvm->arch.sca->cpu[vcpu->vcpu_id].sigp_ctrl = 0;
 924 }
 925
 926 int __must_check kvm_s390_deliver_pending_interrupts(struct kvm_vcpu *vcpu)
 927 {
 928         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 929         deliver_irq_t func;
 930         int rc = 0;
 931         unsigned long irq_type;
 932         unsigned long irqs;
 933
 934         __reset_intercept_indicators(vcpu);
 935
 936         /* pending ckc conditions might have been invalidated */
 937         clear_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
 938         if (ckc_irq_pending(vcpu))
 939                 set_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
 940
 941         /* pending cpu timer conditions might have been invalidated */
 942         clear_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
 943         if (cpu_timer_irq_pending(vcpu))
 944                 set_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
 945
 946         while ((irqs = deliverable_irqs(vcpu)) && !rc) {
 947                 /* bits are in the order of interrupt priority */
 948                 irq_type = find_first_bit(&irqs, IRQ_PEND_COUNT);
 949                 if (is_ioirq(irq_type)) {
 950                         rc = __deliver_io(vcpu, irq_type);
 951                 } else {
 952                         func = deliver_irq_funcs[irq_type];
 953                         if (!func) {
 954                                 WARN_ON_ONCE(func == NULL);
 955                                 clear_bit(irq_type, &li->pending_irqs);
 956                                 continue;
 957                         }
 958                         rc = func(vcpu);
 959                 }
 960         }
 961
 962         set_intercept_indicators(vcpu);
 963
 964         return rc;
 965 }
 966
 967 static int __inject_prog(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
 968 {
 969         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 970
 971         VCPU_EVENT(vcpu, 3, "inject: program irq code 0x%x", irq->u.pgm.code);
 972         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_PROGRAM_INT,
 973                                    irq->u.pgm.code, 0);
 974
 975         li->irq.pgm = irq->u.pgm;
 976         set_bit(IRQ_PEND_PROG, &li->pending_irqs);
 977         return 0;
 978 }
 979
 980 static int __inject_pfault_init(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
 981 {
 982         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
 983
 984         VCPU_EVENT(vcpu, 4, "inject: pfault init parameter block at 0x%llx",
 985                    irq->u.ext.ext_params2);
 986         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_PFAULT_INIT,
 987                                    irq->u.ext.ext_params,
 988                                    irq->u.ext.ext_params2);
 989
 990         li->irq.ext = irq->u.ext;
 991         set_bit(IRQ_PEND_PFAULT_INIT, &li->pending_irqs);
 992         atomic_or(CPUSTAT_EXT_INT, li->cpuflags);
 993         return 0;
 994 }
 995
 996 static int __inject_extcall_sigpif(struct kvm_vcpu *vcpu, uint16_t src_id)
 997 {
 998         unsigned char new_val, old_val;
 999         uint8_t *sigp_ctrl = &vcpu->kvm->arch.sca->cpu[vcpu->vcpu_id].sigp_ctrl;
1000
1001         new_val = SIGP_CTRL_C | (src_id & SIGP_CTRL_SCN_MASK);
1002         old_val = *sigp_ctrl & ~SIGP_CTRL_C;
1003         if (cmpxchg(sigp_ctrl, old_val, new_val) != old_val) {
1004                 /* another external call is pending */
1005                 return -EBUSY;
1006         }
1007         atomic_or(CPUSTAT_ECALL_PEND, &vcpu->arch.sie_block->cpuflags);
1008         return 0;
1009 }
1010
1011 static int __inject_extcall(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1012 {
1013         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1014         struct kvm_s390_extcall_info *extcall = &li->irq.extcall;
1015         uint16_t src_id = irq->u.extcall.code;
1016
1017         VCPU_EVENT(vcpu, 4, "inject: external call source-cpu:%u",
1018                    src_id);
1019         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_EXTERNAL_CALL,
1020                                    src_id, 0);
1021
1022         /* sending vcpu invalid */
1023         if (src_id >= KVM_MAX_VCPUS ||
1024             kvm_get_vcpu(vcpu->kvm, src_id) == NULL)
1025                 return -EINVAL;
1026
1027         if (sclp.has_sigpif)
1028                 return __inject_extcall_sigpif(vcpu, src_id);
1029
1030         if (test_and_set_bit(IRQ_PEND_EXT_EXTERNAL, &li->pending_irqs))
1031                 return -EBUSY;
1032         *extcall = irq->u.extcall;
1033         atomic_or(CPUSTAT_EXT_INT, li->cpuflags);
1034         return 0;
1035 }
1036
1037 static int __inject_set_prefix(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1038 {
1039         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1040         struct kvm_s390_prefix_info *prefix = &li->irq.prefix;
1041
1042         VCPU_EVENT(vcpu, 3, "inject: set prefix to %x",
1043                    irq->u.prefix.address);
1044         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_SIGP_SET_PREFIX,
1045                                    irq->u.prefix.address, 0);
1046
1047         if (!is_vcpu_stopped(vcpu))
1048                 return -EBUSY;
1049
1050         *prefix = irq->u.prefix;
1051         set_bit(IRQ_PEND_SET_PREFIX, &li->pending_irqs);
1052         return 0;
1053 }
1054
1055 #define KVM_S390_STOP_SUPP_FLAGS (KVM_S390_STOP_FLAG_STORE_STATUS)
1056 static int __inject_sigp_stop(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1057 {
1058         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1059         struct kvm_s390_stop_info *stop = &li->irq.stop;
1060         int rc = 0;
1061
1062         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_SIGP_STOP, 0, 0);
1063
1064         if (irq->u.stop.flags & ~KVM_S390_STOP_SUPP_FLAGS)
1065                 return -EINVAL;
1066
1067         if (is_vcpu_stopped(vcpu)) {
1068                 if (irq->u.stop.flags & KVM_S390_STOP_FLAG_STORE_STATUS)
1069                         rc = kvm_s390_store_status_unloaded(vcpu,
1070                                                 KVM_S390_STORE_STATUS_NOADDR);
1071                 return rc;
1072         }
1073
1074         if (test_and_set_bit(IRQ_PEND_SIGP_STOP, &li->pending_irqs))
1075                 return -EBUSY;
1076         stop->flags = irq->u.stop.flags;
1077         __set_cpuflag(vcpu, CPUSTAT_STOP_INT);
1078         return 0;
1079 }
1080
1081 static int __inject_sigp_restart(struct kvm_vcpu *vcpu,
1082                                  struct kvm_s390_irq *irq)
1083 {
1084         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1085
1086         VCPU_EVENT(vcpu, 3, "%s", "inject: restart int");
1087         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_RESTART, 0, 0);
1088
1089         set_bit(IRQ_PEND_RESTART, &li->pending_irqs);
1090         return 0;
1091 }
1092
1093 static int __inject_sigp_emergency(struct kvm_vcpu *vcpu,
1094                                    struct kvm_s390_irq *irq)
1095 {
1096         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1097
1098         VCPU_EVENT(vcpu, 4, "inject: emergency from cpu %u",
1099                    irq->u.emerg.code);
1100         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_EMERGENCY,
1101                                    irq->u.emerg.code, 0);
1102
1103         set_bit(irq->u.emerg.code, li->sigp_emerg_pending);
1104         set_bit(IRQ_PEND_EXT_EMERGENCY, &li->pending_irqs);
1105         atomic_or(CPUSTAT_EXT_INT, li->cpuflags);
1106         return 0;
1107 }
1108
1109 static int __inject_mchk(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1110 {
1111         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1112         struct kvm_s390_mchk_info *mchk = &li->irq.mchk;
1113
1114         VCPU_EVENT(vcpu, 3, "inject: machine check mcic 0x%llx",
1115                    irq->u.mchk.mcic);
1116         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_MCHK, 0,
1117                                    irq->u.mchk.mcic);
1118
1119         /*
1120          * Because repressible machine checks can be indicated along with
1121          * exigent machine checks (PoP, Chapter 11, Interruption action)
1122          * we need to combine cr14, mcic and external damage code.
1123          * Failing storage address and the logout area should not be or'ed
1124          * together, we just indicate the last occurrence of the corresponding
1125          * machine check
1126          */
1127         mchk->cr14 |= irq->u.mchk.cr14;
1128         mchk->mcic |= irq->u.mchk.mcic;
1129         mchk->ext_damage_code |= irq->u.mchk.ext_damage_code;
1130         mchk->failing_storage_address = irq->u.mchk.failing_storage_address;
1131         memcpy(&mchk->fixed_logout, &irq->u.mchk.fixed_logout,
1132                sizeof(mchk->fixed_logout));
1133         if (mchk->mcic & MCHK_EX_MASK)
1134                 set_bit(IRQ_PEND_MCHK_EX, &li->pending_irqs);
1135         else if (mchk->mcic & MCHK_REP_MASK)
1136                 set_bit(IRQ_PEND_MCHK_REP,  &li->pending_irqs);
1137         return 0;
1138 }
1139
1140 static int __inject_ckc(struct kvm_vcpu *vcpu)
1141 {
1142         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1143
1144         VCPU_EVENT(vcpu, 3, "%s", "inject: clock comparator external");
1145         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_CLOCK_COMP,
1146                                    0, 0);
1147
1148         set_bit(IRQ_PEND_EXT_CLOCK_COMP, &li->pending_irqs);
1149         atomic_or(CPUSTAT_EXT_INT, li->cpuflags);
1150         return 0;
1151 }
1152
1153 static int __inject_cpu_timer(struct kvm_vcpu *vcpu)
1154 {
1155         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1156
1157         VCPU_EVENT(vcpu, 3, "%s", "inject: cpu timer external");
1158         trace_kvm_s390_inject_vcpu(vcpu->vcpu_id, KVM_S390_INT_CPU_TIMER,
1159                                    0, 0);
1160
1161         set_bit(IRQ_PEND_EXT_CPU_TIMER, &li->pending_irqs);
1162         atomic_or(CPUSTAT_EXT_INT, li->cpuflags);
1163         return 0;
1164 }
1165
1166 static struct kvm_s390_interrupt_info *get_io_int(struct kvm *kvm,
1167                                                   int isc, u32 schid)
1168 {
1169         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1170         struct list_head *isc_list = &fi->lists[FIRQ_LIST_IO_ISC_0 + isc];
1171         struct kvm_s390_interrupt_info *iter;
1172         u16 id = (schid & 0xffff0000U) >> 16;
1173         u16 nr = schid & 0x0000ffffU;
1174
1175         spin_lock(&fi->lock);
1176         list_for_each_entry(iter, isc_list, list) {
1177                 if (schid && (id != iter->io.subchannel_id ||
1178                               nr != iter->io.subchannel_nr))
1179                         continue;
1180                 /* found an appropriate entry */
1181                 list_del_init(&iter->list);
1182                 fi->counters[FIRQ_CNTR_IO] -= 1;
1183                 if (list_empty(isc_list))
1184                         clear_bit(IRQ_PEND_IO_ISC_0 + isc, &fi->pending_irqs);
1185                 spin_unlock(&fi->lock);
1186                 return iter;
1187         }
1188         spin_unlock(&fi->lock);
1189         return NULL;
1190 }
1191
1192 /*
1193  * Dequeue and return an I/O interrupt matching any of the interruption
1194  * subclasses as designated by the isc mask in cr6 and the schid (if != 0).
1195  */
1196 struct kvm_s390_interrupt_info *kvm_s390_get_io_int(struct kvm *kvm,
1197                                                     u64 isc_mask, u32 schid)
1198 {
1199         struct kvm_s390_interrupt_info *inti = NULL;
1200         int isc;
1201
1202         for (isc = 0; isc <= MAX_ISC && !inti; isc++) {
1203                 if (isc_mask & isc_to_isc_bits(isc))
1204                         inti = get_io_int(kvm, isc, schid);
1205         }
1206         return inti;
1207 }
1208
1209 #define SCCB_MASK 0xFFFFFFF8
1210 #define SCCB_EVENT_PENDING 0x3
1211
1212 static int __inject_service(struct kvm *kvm,
1213                              struct kvm_s390_interrupt_info *inti)
1214 {
1215         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1216
1217         spin_lock(&fi->lock);
1218         fi->srv_signal.ext_params |= inti->ext.ext_params & SCCB_EVENT_PENDING;
1219         /*
1220          * Early versions of the QEMU s390 bios will inject several
1221          * service interrupts after another without handling a
1222          * condition code indicating busy.
1223          * We will silently ignore those superfluous sccb values.
1224          * A future version of QEMU will take care of serialization
1225          * of servc requests
1226          */
1227         if (fi->srv_signal.ext_params & SCCB_MASK)
1228                 goto out;
1229         fi->srv_signal.ext_params |= inti->ext.ext_params & SCCB_MASK;
1230         set_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs);
1231 out:
1232         spin_unlock(&fi->lock);
1233         kfree(inti);
1234         return 0;
1235 }
1236
1237 static int __inject_virtio(struct kvm *kvm,
1238                             struct kvm_s390_interrupt_info *inti)
1239 {
1240         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1241
1242         spin_lock(&fi->lock);
1243         if (fi->counters[FIRQ_CNTR_VIRTIO] >= KVM_S390_MAX_VIRTIO_IRQS) {
1244                 spin_unlock(&fi->lock);
1245                 return -EBUSY;
1246         }
1247         fi->counters[FIRQ_CNTR_VIRTIO] += 1;
1248         list_add_tail(&inti->list, &fi->lists[FIRQ_LIST_VIRTIO]);
1249         set_bit(IRQ_PEND_VIRTIO, &fi->pending_irqs);
1250         spin_unlock(&fi->lock);
1251         return 0;
1252 }
1253
1254 static int __inject_pfault_done(struct kvm *kvm,
1255                                  struct kvm_s390_interrupt_info *inti)
1256 {
1257         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1258
1259         spin_lock(&fi->lock);
1260         if (fi->counters[FIRQ_CNTR_PFAULT] >=
1261                 (ASYNC_PF_PER_VCPU * KVM_MAX_VCPUS)) {
1262                 spin_unlock(&fi->lock);
1263                 return -EBUSY;
1264         }
1265         fi->counters[FIRQ_CNTR_PFAULT] += 1;
1266         list_add_tail(&inti->list, &fi->lists[FIRQ_LIST_PFAULT]);
1267         set_bit(IRQ_PEND_PFAULT_DONE, &fi->pending_irqs);
1268         spin_unlock(&fi->lock);
1269         return 0;
1270 }
1271
1272 #define CR_PENDING_SUBCLASS 28
1273 static int __inject_float_mchk(struct kvm *kvm,
1274                                 struct kvm_s390_interrupt_info *inti)
1275 {
1276         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1277
1278         spin_lock(&fi->lock);
1279         fi->mchk.cr14 |= inti->mchk.cr14 & (1UL << CR_PENDING_SUBCLASS);
1280         fi->mchk.mcic |= inti->mchk.mcic;
1281         set_bit(IRQ_PEND_MCHK_REP, &fi->pending_irqs);
1282         spin_unlock(&fi->lock);
1283         kfree(inti);
1284         return 0;
1285 }
1286
1287 static int __inject_io(struct kvm *kvm, struct kvm_s390_interrupt_info *inti)
1288 {
1289         struct kvm_s390_float_interrupt *fi;
1290         struct list_head *list;
1291         int isc;
1292
1293         fi = &kvm->arch.float_int;
1294         spin_lock(&fi->lock);
1295         if (fi->counters[FIRQ_CNTR_IO] >= KVM_S390_MAX_FLOAT_IRQS) {
1296                 spin_unlock(&fi->lock);
1297                 return -EBUSY;
1298         }
1299         fi->counters[FIRQ_CNTR_IO] += 1;
1300
1301         isc = int_word_to_isc(inti->io.io_int_word);
1302         list = &fi->lists[FIRQ_LIST_IO_ISC_0 + isc];
1303         list_add_tail(&inti->list, list);
1304         set_bit(IRQ_PEND_IO_ISC_0 + isc, &fi->pending_irqs);
1305         spin_unlock(&fi->lock);
1306         return 0;
1307 }
1308
1309 /*
1310  * Find a destination VCPU for a floating irq and kick it.
1311  */
1312 static void __floating_irq_kick(struct kvm *kvm, u64 type)
1313 {
1314         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1315         struct kvm_s390_local_interrupt *li;
1316         struct kvm_vcpu *dst_vcpu;
1317         int sigcpu, online_vcpus, nr_tries = 0;
1318
1319         online_vcpus = atomic_read(&kvm->online_vcpus);
1320         if (!online_vcpus)
1321                 return;
1322
1323         /* find idle VCPUs first, then round robin */
1324         sigcpu = find_first_bit(fi->idle_mask, online_vcpus);
1325         if (sigcpu == online_vcpus) {
1326                 do {
1327                         sigcpu = fi->next_rr_cpu;
1328                         fi->next_rr_cpu = (fi->next_rr_cpu + 1) % online_vcpus;
1329                         /* avoid endless loops if all vcpus are stopped */
1330                         if (nr_tries++ >= online_vcpus)
1331                                 return;
1332                 } while (is_vcpu_stopped(kvm_get_vcpu(kvm, sigcpu)));
1333         }
1334         dst_vcpu = kvm_get_vcpu(kvm, sigcpu);
1335
1336         /* make the VCPU drop out of the SIE, or wake it up if sleeping */
1337         li = &dst_vcpu->arch.local_int;
1338         spin_lock(&li->lock);
1339         switch (type) {
1340         case KVM_S390_MCHK:
1341                 atomic_or(CPUSTAT_STOP_INT, li->cpuflags);
1342                 break;
1343         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1344                 atomic_or(CPUSTAT_IO_INT, li->cpuflags);
1345                 break;
1346         default:
1347                 atomic_or(CPUSTAT_EXT_INT, li->cpuflags);
1348                 break;
1349         }
1350         spin_unlock(&li->lock);
1351         kvm_s390_vcpu_wakeup(dst_vcpu);
1352 }
1353
1354 static int __inject_vm(struct kvm *kvm, struct kvm_s390_interrupt_info *inti)
1355 {
1356         u64 type = READ_ONCE(inti->type);
1357         int rc;
1358
1359         switch (type) {
1360         case KVM_S390_MCHK:
1361                 rc = __inject_float_mchk(kvm, inti);
1362                 break;
1363         case KVM_S390_INT_VIRTIO:
1364                 rc = __inject_virtio(kvm, inti);
1365                 break;
1366         case KVM_S390_INT_SERVICE:
1367                 rc = __inject_service(kvm, inti);
1368                 break;
1369         case KVM_S390_INT_PFAULT_DONE:
1370                 rc = __inject_pfault_done(kvm, inti);
1371                 break;
1372         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1373                 rc = __inject_io(kvm, inti);
1374                 break;
1375         default:
1376                 rc = -EINVAL;
1377         }
1378         if (rc)
1379                 return rc;
1380
1381         __floating_irq_kick(kvm, type);
1382         return 0;
1383 }
1384
1385 int kvm_s390_inject_vm(struct kvm *kvm,
1386                        struct kvm_s390_interrupt *s390int)
1387 {
1388         struct kvm_s390_interrupt_info *inti;
1389         int rc;
1390
1391         inti = kzalloc(sizeof(*inti), GFP_KERNEL);
1392         if (!inti)
1393                 return -ENOMEM;
1394
1395         inti->type = s390int->type;
1396         switch (inti->type) {
1397         case KVM_S390_INT_VIRTIO:
1398                 VM_EVENT(kvm, 5, "inject: virtio parm:%x,parm64:%llx",
1399                          s390int->parm, s390int->parm64);
1400                 inti->ext.ext_params = s390int->parm;
1401                 inti->ext.ext_params2 = s390int->parm64;
1402                 break;
1403         case KVM_S390_INT_SERVICE:
1404                 VM_EVENT(kvm, 4, "inject: sclp parm:%x", s390int->parm);
1405                 inti->ext.ext_params = s390int->parm;
1406                 break;
1407         case KVM_S390_INT_PFAULT_DONE:
1408                 inti->ext.ext_params2 = s390int->parm64;
1409                 break;
1410         case KVM_S390_MCHK:
1411                 VM_EVENT(kvm, 3, "inject: machine check mcic 0x%llx",
1412                          s390int->parm64);
1413                 inti->mchk.cr14 = s390int->parm; /* upper bits are not used */
1414                 inti->mchk.mcic = s390int->parm64;
1415                 break;
1416         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1417                 if (inti->type & KVM_S390_INT_IO_AI_MASK)
1418                         VM_EVENT(kvm, 5, "%s", "inject: I/O (AI)");
1419                 else
1420                         VM_EVENT(kvm, 5, "inject: I/O css %x ss %x schid %04x",
1421                                  s390int->type & IOINT_CSSID_MASK,
1422                                  s390int->type & IOINT_SSID_MASK,
1423                                  s390int->type & IOINT_SCHID_MASK);
1424                 inti->io.subchannel_id = s390int->parm >> 16;
1425                 inti->io.subchannel_nr = s390int->parm & 0x0000ffffu;
1426                 inti->io.io_int_parm = s390int->parm64 >> 32;
1427                 inti->io.io_int_word = s390int->parm64 & 0x00000000ffffffffull;
1428                 break;
1429         default:
1430                 kfree(inti);
1431                 return -EINVAL;
1432         }
1433         trace_kvm_s390_inject_vm(s390int->type, s390int->parm, s390int->parm64,
1434                                  2);
1435
1436         rc = __inject_vm(kvm, inti);
1437         if (rc)
1438                 kfree(inti);
1439         return rc;
1440 }
1441
1442 int kvm_s390_reinject_io_int(struct kvm *kvm,
1443                               struct kvm_s390_interrupt_info *inti)
1444 {
1445         return __inject_vm(kvm, inti);
1446 }
1447
1448 int s390int_to_s390irq(struct kvm_s390_interrupt *s390int,
1449                        struct kvm_s390_irq *irq)
1450 {
1451         irq->type = s390int->type;
1452         switch (irq->type) {
1453         case KVM_S390_PROGRAM_INT:
1454                 if (s390int->parm & 0xffff0000)
1455                         return -EINVAL;
1456                 irq->u.pgm.code = s390int->parm;
1457                 break;
1458         case KVM_S390_SIGP_SET_PREFIX:
1459                 irq->u.prefix.address = s390int->parm;
1460                 break;
1461         case KVM_S390_SIGP_STOP:
1462                 irq->u.stop.flags = s390int->parm;
1463                 break;
1464         case KVM_S390_INT_EXTERNAL_CALL:
1465                 if (s390int->parm & 0xffff0000)
1466                         return -EINVAL;
1467                 irq->u.extcall.code = s390int->parm;
1468                 break;
1469         case KVM_S390_INT_EMERGENCY:
1470                 if (s390int->parm & 0xffff0000)
1471                         return -EINVAL;
1472                 irq->u.emerg.code = s390int->parm;
1473                 break;
1474         case KVM_S390_MCHK:
1475                 irq->u.mchk.mcic = s390int->parm64;
1476                 break;
1477         }
1478         return 0;
1479 }
1480
1481 int kvm_s390_is_stop_irq_pending(struct kvm_vcpu *vcpu)
1482 {
1483         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1484
1485         return test_bit(IRQ_PEND_SIGP_STOP, &li->pending_irqs);
1486 }
1487
1488 void kvm_s390_clear_stop_irq(struct kvm_vcpu *vcpu)
1489 {
1490         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1491
1492         spin_lock(&li->lock);
1493         li->irq.stop.flags = 0;
1494         clear_bit(IRQ_PEND_SIGP_STOP, &li->pending_irqs);
1495         spin_unlock(&li->lock);
1496 }
1497
1498 static int do_inject_vcpu(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1499 {
1500         int rc;
1501
1502         switch (irq->type) {
1503         case KVM_S390_PROGRAM_INT:
1504                 rc = __inject_prog(vcpu, irq);
1505                 break;
1506         case KVM_S390_SIGP_SET_PREFIX:
1507                 rc = __inject_set_prefix(vcpu, irq);
1508                 break;
1509         case KVM_S390_SIGP_STOP:
1510                 rc = __inject_sigp_stop(vcpu, irq);
1511                 break;
1512         case KVM_S390_RESTART:
1513                 rc = __inject_sigp_restart(vcpu, irq);
1514                 break;
1515         case KVM_S390_INT_CLOCK_COMP:
1516                 rc = __inject_ckc(vcpu);
1517                 break;
1518         case KVM_S390_INT_CPU_TIMER:
1519                 rc = __inject_cpu_timer(vcpu);
1520                 break;
1521         case KVM_S390_INT_EXTERNAL_CALL:
1522                 rc = __inject_extcall(vcpu, irq);
1523                 break;
1524         case KVM_S390_INT_EMERGENCY:
1525                 rc = __inject_sigp_emergency(vcpu, irq);
1526                 break;
1527         case KVM_S390_MCHK:
1528                 rc = __inject_mchk(vcpu, irq);
1529                 break;
1530         case KVM_S390_INT_PFAULT_INIT:
1531                 rc = __inject_pfault_init(vcpu, irq);
1532                 break;
1533         case KVM_S390_INT_VIRTIO:
1534         case KVM_S390_INT_SERVICE:
1535         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1536         default:
1537                 rc = -EINVAL;
1538         }
1539
1540         return rc;
1541 }
1542
1543 int kvm_s390_inject_vcpu(struct kvm_vcpu *vcpu, struct kvm_s390_irq *irq)
1544 {
1545         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
1546         int rc;
1547
1548         spin_lock(&li->lock);
1549         rc = do_inject_vcpu(vcpu, irq);
1550         spin_unlock(&li->lock);
1551         if (!rc)
1552                 kvm_s390_vcpu_wakeup(vcpu);
1553         return rc;
1554 }
1555
1556 static inline void clear_irq_list(struct list_head *_list)
1557 {
1558         struct kvm_s390_interrupt_info *inti, *n;
1559
1560         list_for_each_entry_safe(inti, n, _list, list) {
1561                 list_del(&inti->list);
1562                 kfree(inti);
1563         }
1564 }
1565
1566 static void inti_to_irq(struct kvm_s390_interrupt_info *inti,
1567                        struct kvm_s390_irq *irq)
1568 {
1569         irq->type = inti->type;
1570         switch (inti->type) {
1571         case KVM_S390_INT_PFAULT_INIT:
1572         case KVM_S390_INT_PFAULT_DONE:
1573         case KVM_S390_INT_VIRTIO:
1574                 irq->u.ext = inti->ext;
1575                 break;
1576         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1577                 irq->u.io = inti->io;
1578                 break;
1579         }
1580 }
1581
1582 void kvm_s390_clear_float_irqs(struct kvm *kvm)
1583 {
1584         struct kvm_s390_float_interrupt *fi = &kvm->arch.float_int;
1585         int i;
1586
1587         spin_lock(&fi->lock);
1588         fi->pending_irqs = 0;
1589         memset(&fi->srv_signal, 0, sizeof(fi->srv_signal));
1590         memset(&fi->mchk, 0, sizeof(fi->mchk));
1591         for (i = 0; i < FIRQ_LIST_COUNT; i++)
1592                 clear_irq_list(&fi->lists[i]);
1593         for (i = 0; i < FIRQ_MAX_COUNT; i++)
1594                 fi->counters[i] = 0;
1595         spin_unlock(&fi->lock);
1596 };
1597
1598 static int get_all_floating_irqs(struct kvm *kvm, u8 __user *usrbuf, u64 len)
1599 {
1600         struct kvm_s390_interrupt_info *inti;
1601         struct kvm_s390_float_interrupt *fi;
1602         struct kvm_s390_irq *buf;
1603         struct kvm_s390_irq *irq;
1604         int max_irqs;
1605         int ret = 0;
1606         int n = 0;
1607         int i;
1608
1609         if (len > KVM_S390_FLIC_MAX_BUFFER || len == 0)
1610                 return -EINVAL;
1611
1612         /*
1613          * We are already using -ENOMEM to signal
1614          * userspace it may retry with a bigger buffer,
1615          * so we need to use something else for this case
1616          */
1617         buf = vzalloc(len);
1618         if (!buf)
1619                 return -ENOBUFS;
1620
1621         max_irqs = len / sizeof(struct kvm_s390_irq);
1622
1623         fi = &kvm->arch.float_int;
1624         spin_lock(&fi->lock);
1625         for (i = 0; i < FIRQ_LIST_COUNT; i++) {
1626                 list_for_each_entry(inti, &fi->lists[i], list) {
1627                         if (n == max_irqs) {
1628                                 /* signal userspace to try again */
1629                                 ret = -ENOMEM;
1630                                 goto out;
1631                         }
1632                         inti_to_irq(inti, &buf[n]);
1633                         n++;
1634                 }
1635         }
1636         if (test_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs)) {
1637                 if (n == max_irqs) {
1638                         /* signal userspace to try again */
1639                         ret = -ENOMEM;
1640                         goto out;
1641                 }
1642                 irq = (struct kvm_s390_irq *) &buf[n];
1643                 irq->type = KVM_S390_INT_SERVICE;
1644                 irq->u.ext = fi->srv_signal;
1645                 n++;
1646         }
1647         if (test_bit(IRQ_PEND_MCHK_REP, &fi->pending_irqs)) {
1648                 if (n == max_irqs) {
1649                                 /* signal userspace to try again */
1650                                 ret = -ENOMEM;
1651                                 goto out;
1652                 }
1653                 irq = (struct kvm_s390_irq *) &buf[n];
1654                 irq->type = KVM_S390_MCHK;
1655                 irq->u.mchk = fi->mchk;
1656                 n++;
1657 }
1658
1659 out:
1660         spin_unlock(&fi->lock);
1661         if (!ret && n > 0) {
1662                 if (copy_to_user(usrbuf, buf, sizeof(struct kvm_s390_irq) * n))
1663                         ret = -EFAULT;
1664         }
1665         vfree(buf);
1666
1667         return ret < 0 ? ret : n;
1668 }
1669
1670 static int flic_get_attr(struct kvm_device *dev, struct kvm_device_attr *attr)
1671 {
1672         int r;
1673
1674         switch (attr->group) {
1675         case KVM_DEV_FLIC_GET_ALL_IRQS:
1676                 r = get_all_floating_irqs(dev->kvm, (u8 __user *) attr->addr,
1677                                           attr->attr);
1678                 break;
1679         default:
1680                 r = -EINVAL;
1681         }
1682
1683         return r;
1684 }
1685
1686 static inline int copy_irq_from_user(struct kvm_s390_interrupt_info *inti,
1687                                      u64 addr)
1688 {
1689         struct kvm_s390_irq __user *uptr = (struct kvm_s390_irq __user *) addr;
1690         void *target = NULL;
1691         void __user *source;
1692         u64 size;
1693
1694         if (get_user(inti->type, (u64 __user *)addr))
1695                 return -EFAULT;
1696
1697         switch (inti->type) {
1698         case KVM_S390_INT_PFAULT_INIT:
1699         case KVM_S390_INT_PFAULT_DONE:
1700         case KVM_S390_INT_VIRTIO:
1701         case KVM_S390_INT_SERVICE:
1702                 target = (void *) &inti->ext;
1703                 source = &uptr->u.ext;
1704                 size = sizeof(inti->ext);
1705                 break;
1706         case KVM_S390_INT_IO_MIN...KVM_S390_INT_IO_MAX:
1707                 target = (void *) &inti->io;
1708                 source = &uptr->u.io;
1709                 size = sizeof(inti->io);
1710                 break;
1711         case KVM_S390_MCHK:
1712                 target = (void *) &inti->mchk;
1713                 source = &uptr->u.mchk;
1714                 size = sizeof(inti->mchk);
1715                 break;
1716         default:
1717                 return -EINVAL;
1718         }
1719
1720         if (copy_from_user(target, source, size))
1721                 return -EFAULT;
1722
1723         return 0;
1724 }
1725
1726 static int enqueue_floating_irq(struct kvm_device *dev,
1727                                 struct kvm_device_attr *attr)
1728 {
1729         struct kvm_s390_interrupt_info *inti = NULL;
1730         int r = 0;
1731         int len = attr->attr;
1732
1733         if (len % sizeof(struct kvm_s390_irq) != 0)
1734                 return -EINVAL;
1735         else if (len > KVM_S390_FLIC_MAX_BUFFER)
1736                 return -EINVAL;
1737
1738         while (len >= sizeof(struct kvm_s390_irq)) {
1739                 inti = kzalloc(sizeof(*inti), GFP_KERNEL);
1740                 if (!inti)
1741                         return -ENOMEM;
1742
1743                 r = copy_irq_from_user(inti, attr->addr);
1744                 if (r) {
1745                         kfree(inti);
1746                         return r;
1747                 }
1748                 r = __inject_vm(dev->kvm, inti);
1749                 if (r) {
1750                         kfree(inti);
1751                         return r;
1752                 }
1753                 len -= sizeof(struct kvm_s390_irq);
1754                 attr->addr += sizeof(struct kvm_s390_irq);
1755         }
1756
1757         return r;
1758 }
1759
1760 static struct s390_io_adapter *get_io_adapter(struct kvm *kvm, unsigned int id)
1761 {
1762         if (id >= MAX_S390_IO_ADAPTERS)
1763                 return NULL;
1764         return kvm->arch.adapters[id];
1765 }
1766
1767 static int register_io_adapter(struct kvm_device *dev,
1768                                struct kvm_device_attr *attr)
1769 {
1770         struct s390_io_adapter *adapter;
1771         struct kvm_s390_io_adapter adapter_info;
1772
1773         if (copy_from_user(&adapter_info,
1774                            (void __user *)attr->addr, sizeof(adapter_info)))
1775                 return -EFAULT;
1776
1777         if ((adapter_info.id >= MAX_S390_IO_ADAPTERS) ||
1778             (dev->kvm->arch.adapters[adapter_info.id] != NULL))
1779                 return -EINVAL;
1780
1781         adapter = kzalloc(sizeof(*adapter), GFP_KERNEL);
1782         if (!adapter)
1783                 return -ENOMEM;
1784
1785         INIT_LIST_HEAD(&adapter->maps);
1786         init_rwsem(&adapter->maps_lock);
1787         atomic_set(&adapter->nr_maps, 0);
1788         adapter->id = adapter_info.id;
1789         adapter->isc = adapter_info.isc;
1790         adapter->maskable = adapter_info.maskable;
1791         adapter->masked = false;
1792         adapter->swap = adapter_info.swap;
1793         dev->kvm->arch.adapters[adapter->id] = adapter;
1794
1795         return 0;
1796 }
1797
1798 int kvm_s390_mask_adapter(struct kvm *kvm, unsigned int id, bool masked)
1799 {
1800         int ret;
1801         struct s390_io_adapter *adapter = get_io_adapter(kvm, id);
1802
1803         if (!adapter || !adapter->maskable)
1804                 return -EINVAL;
1805         ret = adapter->masked;
1806         adapter->masked = masked;
1807         return ret;
1808 }
1809
1810 static int kvm_s390_adapter_map(struct kvm *kvm, unsigned int id, __u64 addr)
1811 {
1812         struct s390_io_adapter *adapter = get_io_adapter(kvm, id);
1813         struct s390_map_info *map;
1814         int ret;
1815
1816         if (!adapter || !addr)
1817                 return -EINVAL;
1818
1819         map = kzalloc(sizeof(*map), GFP_KERNEL);
1820         if (!map) {
1821                 ret = -ENOMEM;
1822                 goto out;
1823         }
1824         INIT_LIST_HEAD(&map->list);
1825         map->guest_addr = addr;
1826         map->addr = gmap_translate(kvm->arch.gmap, addr);
1827         if (map->addr == -EFAULT) {
1828                 ret = -EFAULT;
1829                 goto out;
1830         }
1831         ret = get_user_pages_fast(map->addr, 1, 1, &map->page);
1832         if (ret < 0)
1833                 goto out;
1834         BUG_ON(ret != 1);
1835         down_write(&adapter->maps_lock);
1836         if (atomic_inc_return(&adapter->nr_maps) < MAX_S390_ADAPTER_MAPS) {
1837                 list_add_tail(&map->list, &adapter->maps);
1838                 ret = 0;
1839         } else {
1840                 put_page(map->page);
1841                 ret = -EINVAL;
1842         }
1843         up_write(&adapter->maps_lock);
1844 out:
1845         if (ret)
1846                 kfree(map);
1847         return ret;
1848 }
1849
1850 static int kvm_s390_adapter_unmap(struct kvm *kvm, unsigned int id, __u64 addr)
1851 {
1852         struct s390_io_adapter *adapter = get_io_adapter(kvm, id);
1853         struct s390_map_info *map, *tmp;
1854         int found = 0;
1855
1856         if (!adapter || !addr)
1857                 return -EINVAL;
1858
1859         down_write(&adapter->maps_lock);
1860         list_for_each_entry_safe(map, tmp, &adapter->maps, list) {
1861                 if (map->guest_addr == addr) {
1862                         found = 1;
1863                         atomic_dec(&adapter->nr_maps);
1864                         list_del(&map->list);
1865                         put_page(map->page);
1866                         kfree(map);
1867                         break;
1868                 }
1869         }
1870         up_write(&adapter->maps_lock);
1871
1872         return found ? 0 : -EINVAL;
1873 }
1874
1875 void kvm_s390_destroy_adapters(struct kvm *kvm)
1876 {
1877         int i;
1878         struct s390_map_info *map, *tmp;
1879
1880         for (i = 0; i < MAX_S390_IO_ADAPTERS; i++) {
1881                 if (!kvm->arch.adapters[i])
1882                         continue;
1883                 list_for_each_entry_safe(map, tmp,
1884                                          &kvm->arch.adapters[i]->maps, list) {
1885                         list_del(&map->list);
1886                         put_page(map->page);
1887                         kfree(map);
1888                 }
1889                 kfree(kvm->arch.adapters[i]);
1890         }
1891 }
1892
1893 static int modify_io_adapter(struct kvm_device *dev,
1894                              struct kvm_device_attr *attr)
1895 {
1896         struct kvm_s390_io_adapter_req req;
1897         struct s390_io_adapter *adapter;
1898         int ret;
1899
1900         if (copy_from_user(&req, (void __user *)attr->addr, sizeof(req)))
1901                 return -EFAULT;
1902
1903         adapter = get_io_adapter(dev->kvm, req.id);
1904         if (!adapter)
1905                 return -EINVAL;
1906         switch (req.type) {
1907         case KVM_S390_IO_ADAPTER_MASK:
1908                 ret = kvm_s390_mask_adapter(dev->kvm, req.id, req.mask);
1909                 if (ret > 0)
1910                         ret = 0;
1911                 break;
1912         case KVM_S390_IO_ADAPTER_MAP:
1913                 ret = kvm_s390_adapter_map(dev->kvm, req.id, req.addr);
1914                 break;
1915         case KVM_S390_IO_ADAPTER_UNMAP:
1916                 ret = kvm_s390_adapter_unmap(dev->kvm, req.id, req.addr);
1917                 break;
1918         default:
1919                 ret = -EINVAL;
1920         }
1921
1922         return ret;
1923 }
1924
1925 static int flic_set_attr(struct kvm_device *dev, struct kvm_device_attr *attr)
1926 {
1927         int r = 0;
1928         unsigned int i;
1929         struct kvm_vcpu *vcpu;
1930
1931         switch (attr->group) {
1932         case KVM_DEV_FLIC_ENQUEUE:
1933                 r = enqueue_floating_irq(dev, attr);
1934                 break;
1935         case KVM_DEV_FLIC_CLEAR_IRQS:
1936                 kvm_s390_clear_float_irqs(dev->kvm);
1937                 break;
1938         case KVM_DEV_FLIC_APF_ENABLE:
1939                 dev->kvm->arch.gmap->pfault_enabled = 1;
1940                 break;
1941         case KVM_DEV_FLIC_APF_DISABLE_WAIT:
1942                 dev->kvm->arch.gmap->pfault_enabled = 0;
1943                 /*
1944                  * Make sure no async faults are in transition when
1945                  * clearing the queues. So we don't need to worry
1946                  * about late coming workers.
1947                  */
1948                 synchronize_srcu(&dev->kvm->srcu);
1949                 kvm_for_each_vcpu(i, vcpu, dev->kvm)
1950                         kvm_clear_async_pf_completion_queue(vcpu);
1951                 break;
1952         case KVM_DEV_FLIC_ADAPTER_REGISTER:
1953                 r = register_io_adapter(dev, attr);
1954                 break;
1955         case KVM_DEV_FLIC_ADAPTER_MODIFY:
1956                 r = modify_io_adapter(dev, attr);
1957                 break;
1958         default:
1959                 r = -EINVAL;
1960         }
1961
1962         return r;
1963 }
1964
1965 static int flic_create(struct kvm_device *dev, u32 type)
1966 {
1967         if (!dev)
1968                 return -EINVAL;
1969         if (dev->kvm->arch.flic)
1970                 return -EINVAL;
1971         dev->kvm->arch.flic = dev;
1972         return 0;
1973 }
1974
1975 static void flic_destroy(struct kvm_device *dev)
1976 {
1977         dev->kvm->arch.flic = NULL;
1978         kfree(dev);
1979 }
1980
1981 /* s390 floating irq controller (flic) */
1982 struct kvm_device_ops kvm_flic_ops = {
1983         .name = "kvm-flic",
1984         .get_attr = flic_get_attr,
1985         .set_attr = flic_set_attr,
1986         .create = flic_create,
1987         .destroy = flic_destroy,
1988 };
1989
1990 static unsigned long get_ind_bit(__u64 addr, unsigned long bit_nr, bool swap)
1991 {
1992         unsigned long bit;
1993
1994         bit = bit_nr + (addr % PAGE_SIZE) * 8;
1995
1996         return swap ? (bit ^ (BITS_PER_LONG - 1)) : bit;
1997 }
1998
1999 static struct s390_map_info *get_map_info(struct s390_io_adapter *adapter,
2000                                           u64 addr)
2001 {
2002         struct s390_map_info *map;
2003
2004         if (!adapter)
2005                 return NULL;
2006
2007         list_for_each_entry(map, &adapter->maps, list) {
2008                 if (map->guest_addr == addr)
2009                         return map;
2010         }
2011         return NULL;
2012 }
2013
2014 static int adapter_indicators_set(struct kvm *kvm,
2015                                   struct s390_io_adapter *adapter,
2016                                   struct kvm_s390_adapter_int *adapter_int)
2017 {
2018         unsigned long bit;
2019         int summary_set, idx;
2020         struct s390_map_info *info;
2021         void *map;
2022
2023         info = get_map_info(adapter, adapter_int->ind_addr);
2024         if (!info)
2025                 return -1;
2026         map = page_address(info->page);
2027         bit = get_ind_bit(info->addr, adapter_int->ind_offset, adapter->swap);
2028         set_bit(bit, map);
2029         idx = srcu_read_lock(&kvm->srcu);
2030         mark_page_dirty(kvm, info->guest_addr >> PAGE_SHIFT);
2031         set_page_dirty_lock(info->page);
2032         info = get_map_info(adapter, adapter_int->summary_addr);
2033         if (!info) {
2034                 srcu_read_unlock(&kvm->srcu, idx);
2035                 return -1;
2036         }
2037         map = page_address(info->page);
2038         bit = get_ind_bit(info->addr, adapter_int->summary_offset,
2039                           adapter->swap);
2040         summary_set = test_and_set_bit(bit, map);
2041         mark_page_dirty(kvm, info->guest_addr >> PAGE_SHIFT);
2042         set_page_dirty_lock(info->page);
2043         srcu_read_unlock(&kvm->srcu, idx);
2044         return summary_set ? 0 : 1;
2045 }
2046
2047 /*
2048  * < 0 - not injected due to error
2049  * = 0 - coalesced, summary indicator already active
2050  * > 0 - injected interrupt
2051  */
2052 static int set_adapter_int(struct kvm_kernel_irq_routing_entry *e,
2053                            struct kvm *kvm, int irq_source_id, int level,
2054                            bool line_status)
2055 {
2056         int ret;
2057         struct s390_io_adapter *adapter;
2058
2059         /* We're only interested in the 0->1 transition. */
2060         if (!level)
2061                 return 0;
2062         adapter = get_io_adapter(kvm, e->adapter.adapter_id);
2063         if (!adapter)
2064                 return -1;
2065         down_read(&adapter->maps_lock);
2066         ret = adapter_indicators_set(kvm, adapter, &e->adapter);
2067         up_read(&adapter->maps_lock);
2068         if ((ret > 0) && !adapter->masked) {
2069                 struct kvm_s390_interrupt s390int = {
2070                         .type = KVM_S390_INT_IO(1, 0, 0, 0),
2071                         .parm = 0,
2072                         .parm64 = (adapter->isc << 27) | 0x80000000,
2073                 };
2074                 ret = kvm_s390_inject_vm(kvm, &s390int);
2075                 if (ret == 0)
2076                         ret = 1;
2077         }
2078         return ret;
2079 }
2080
2081 int kvm_set_routing_entry(struct kvm_kernel_irq_routing_entry *e,
2082                           const struct kvm_irq_routing_entry *ue)
2083 {
2084         int ret;
2085
2086         switch (ue->type) {
2087         case KVM_IRQ_ROUTING_S390_ADAPTER:
2088                 e->set = set_adapter_int;
2089                 e->adapter.summary_addr = ue->u.adapter.summary_addr;
2090                 e->adapter.ind_addr = ue->u.adapter.ind_addr;
2091                 e->adapter.summary_offset = ue->u.adapter.summary_offset;
2092                 e->adapter.ind_offset = ue->u.adapter.ind_offset;
2093                 e->adapter.adapter_id = ue->u.adapter.adapter_id;
2094                 ret = 0;
2095                 break;
2096         default:
2097                 ret = -EINVAL;
2098         }
2099
2100         return ret;
2101 }
2102
2103 int kvm_set_msi(struct kvm_kernel_irq_routing_entry *e, struct kvm *kvm,
2104                 int irq_source_id, int level, bool line_status)
2105 {
2106         return -EINVAL;
2107 }
2108
2109 int kvm_s390_set_irq_state(struct kvm_vcpu *vcpu, void __user *irqstate, int len)
2110 {
2111         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
2112         struct kvm_s390_irq *buf;
2113         int r = 0;
2114         int n;
2115
2116         buf = vmalloc(len);
2117         if (!buf)
2118                 return -ENOMEM;
2119
2120         if (copy_from_user((void *) buf, irqstate, len)) {
2121                 r = -EFAULT;
2122                 goto out_free;
2123         }
2124
2125         /*
2126          * Don't allow setting the interrupt state
2127          * when there are already interrupts pending
2128          */
2129         spin_lock(&li->lock);
2130         if (li->pending_irqs) {
2131                 r = -EBUSY;
2132                 goto out_unlock;
2133         }
2134
2135         for (n = 0; n < len / sizeof(*buf); n++) {
2136                 r = do_inject_vcpu(vcpu, &buf[n]);
2137                 if (r)
2138                         break;
2139         }
2140
2141 out_unlock:
2142         spin_unlock(&li->lock);
2143 out_free:
2144         vfree(buf);
2145
2146         return r;
2147 }
2148
2149 static void store_local_irq(struct kvm_s390_local_interrupt *li,
2150                             struct kvm_s390_irq *irq,
2151                             unsigned long irq_type)
2152 {
2153         switch (irq_type) {
2154         case IRQ_PEND_MCHK_EX:
2155         case IRQ_PEND_MCHK_REP:
2156                 irq->type = KVM_S390_MCHK;
2157                 irq->u.mchk = li->irq.mchk;
2158                 break;
2159         case IRQ_PEND_PROG:
2160                 irq->type = KVM_S390_PROGRAM_INT;
2161                 irq->u.pgm = li->irq.pgm;
2162                 break;
2163         case IRQ_PEND_PFAULT_INIT:
2164                 irq->type = KVM_S390_INT_PFAULT_INIT;
2165                 irq->u.ext = li->irq.ext;
2166                 break;
2167         case IRQ_PEND_EXT_EXTERNAL:
2168                 irq->type = KVM_S390_INT_EXTERNAL_CALL;
2169                 irq->u.extcall = li->irq.extcall;
2170                 break;
2171         case IRQ_PEND_EXT_CLOCK_COMP:
2172                 irq->type = KVM_S390_INT_CLOCK_COMP;
2173                 break;
2174         case IRQ_PEND_EXT_CPU_TIMER:
2175                 irq->type = KVM_S390_INT_CPU_TIMER;
2176                 break;
2177         case IRQ_PEND_SIGP_STOP:
2178                 irq->type = KVM_S390_SIGP_STOP;
2179                 irq->u.stop = li->irq.stop;
2180                 break;
2181         case IRQ_PEND_RESTART:
2182                 irq->type = KVM_S390_RESTART;
2183                 break;
2184         case IRQ_PEND_SET_PREFIX:
2185                 irq->type = KVM_S390_SIGP_SET_PREFIX;
2186                 irq->u.prefix = li->irq.prefix;
2187                 break;
2188         }
2189 }
2190
2191 int kvm_s390_get_irq_state(struct kvm_vcpu *vcpu, __u8 __user *buf, int len)
2192 {
2193         uint8_t sigp_ctrl = vcpu->kvm->arch.sca->cpu[vcpu->vcpu_id].sigp_ctrl;
2194         unsigned long sigp_emerg_pending[BITS_TO_LONGS(KVM_MAX_VCPUS)];
2195         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
2196         unsigned long pending_irqs;
2197         struct kvm_s390_irq irq;
2198         unsigned long irq_type;
2199         int cpuaddr;
2200         int n = 0;
2201
2202         spin_lock(&li->lock);
2203         pending_irqs = li->pending_irqs;
2204         memcpy(&sigp_emerg_pending, &li->sigp_emerg_pending,
2205                sizeof(sigp_emerg_pending));
2206         spin_unlock(&li->lock);
2207
2208         for_each_set_bit(irq_type, &pending_irqs, IRQ_PEND_COUNT) {
2209                 memset(&irq, 0, sizeof(irq));
2210                 if (irq_type == IRQ_PEND_EXT_EMERGENCY)
2211                         continue;
2212                 if (n + sizeof(irq) > len)
2213                         return -ENOBUFS;
2214                 store_local_irq(&vcpu->arch.local_int, &irq, irq_type);
2215                 if (copy_to_user(&buf[n], &irq, sizeof(irq)))
2216                         return -EFAULT;
2217                 n += sizeof(irq);
2218         }
2219
2220         if (test_bit(IRQ_PEND_EXT_EMERGENCY, &pending_irqs)) {
2221                 for_each_set_bit(cpuaddr, sigp_emerg_pending, KVM_MAX_VCPUS) {
2222                         memset(&irq, 0, sizeof(irq));
2223                         if (n + sizeof(irq) > len)
2224                                 return -ENOBUFS;
2225                         irq.type = KVM_S390_INT_EMERGENCY;
2226                         irq.u.emerg.code = cpuaddr;
2227                         if (copy_to_user(&buf[n], &irq, sizeof(irq)))
2228                                 return -EFAULT;
2229                         n += sizeof(irq);
2230                 }
2231         }
2232
2233         if ((sigp_ctrl & SIGP_CTRL_C) &&
2234             (atomic_read(&vcpu->arch.sie_block->cpuflags) &
2235              CPUSTAT_ECALL_PEND)) {
2236                 if (n + sizeof(irq) > len)
2237                         return -ENOBUFS;
2238                 memset(&irq, 0, sizeof(irq));
2239                 irq.type = KVM_S390_INT_EXTERNAL_CALL;
2240                 irq.u.extcall.code = sigp_ctrl & SIGP_CTRL_SCN_MASK;
2241                 if (copy_to_user(&buf[n], &irq, sizeof(irq)))
2242                         return -EFAULT;
2243                 n += sizeof(irq);
2244         }
2245
2246         return n;
2247 }