Loading...
1// SPDX-License-Identifier: GPL-2.0
2/*
3 * in-kernel handling for sie intercepts
4 *
5 * Copyright IBM Corp. 2008, 2020
6 *
7 * Author(s): Carsten Otte <cotte@de.ibm.com>
8 * Christian Borntraeger <borntraeger@de.ibm.com>
9 */
10
11#include <linux/kvm_host.h>
12#include <linux/errno.h>
13#include <linux/pagemap.h>
14
15#include <asm/asm-offsets.h>
16#include <asm/irq.h>
17#include <asm/sysinfo.h>
18#include <asm/uv.h>
19
20#include "kvm-s390.h"
21#include "gaccess.h"
22#include "trace.h"
23#include "trace-s390.h"
24
25u8 kvm_s390_get_ilen(struct kvm_vcpu *vcpu)
26{
27 struct kvm_s390_sie_block *sie_block = vcpu->arch.sie_block;
28 u8 ilen = 0;
29
30 switch (vcpu->arch.sie_block->icptcode) {
31 case ICPT_INST:
32 case ICPT_INSTPROGI:
33 case ICPT_OPEREXC:
34 case ICPT_PARTEXEC:
35 case ICPT_IOINST:
36 /* instruction only stored for these icptcodes */
37 ilen = insn_length(vcpu->arch.sie_block->ipa >> 8);
38 /* Use the length of the EXECUTE instruction if necessary */
39 if (sie_block->icptstatus & 1) {
40 ilen = (sie_block->icptstatus >> 4) & 0x6;
41 if (!ilen)
42 ilen = 4;
43 }
44 break;
45 case ICPT_PROGI:
46 /* bit 1+2 of pgmilc are the ilc, so we directly get ilen */
47 ilen = vcpu->arch.sie_block->pgmilc & 0x6;
48 break;
49 }
50 return ilen;
51}
52
53static int handle_stop(struct kvm_vcpu *vcpu)
54{
55 struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
56 int rc = 0;
57 uint8_t flags, stop_pending;
58
59 vcpu->stat.exit_stop_request++;
60
61 /* delay the stop if any non-stop irq is pending */
62 if (kvm_s390_vcpu_has_irq(vcpu, 1))
63 return 0;
64
65 /* avoid races with the injection/SIGP STOP code */
66 spin_lock(&li->lock);
67 flags = li->irq.stop.flags;
68 stop_pending = kvm_s390_is_stop_irq_pending(vcpu);
69 spin_unlock(&li->lock);
70
71 trace_kvm_s390_stop_request(stop_pending, flags);
72 if (!stop_pending)
73 return 0;
74
75 if (flags & KVM_S390_STOP_FLAG_STORE_STATUS) {
76 rc = kvm_s390_vcpu_store_status(vcpu,
77 KVM_S390_STORE_STATUS_NOADDR);
78 if (rc)
79 return rc;
80 }
81
82 /*
83 * no need to check the return value of vcpu_stop as it can only have
84 * an error for protvirt, but protvirt means user cpu state
85 */
86 if (!kvm_s390_user_cpu_state_ctrl(vcpu->kvm))
87 kvm_s390_vcpu_stop(vcpu);
88 return -EOPNOTSUPP;
89}
90
91static int handle_validity(struct kvm_vcpu *vcpu)
92{
93 int viwhy = vcpu->arch.sie_block->ipb >> 16;
94
95 vcpu->stat.exit_validity++;
96 trace_kvm_s390_intercept_validity(vcpu, viwhy);
97 KVM_EVENT(3, "validity intercept 0x%x for pid %u (kvm 0x%pK)", viwhy,
98 current->pid, vcpu->kvm);
99
100 /* do not warn on invalid runtime instrumentation mode */
101 WARN_ONCE(viwhy != 0x44, "kvm: unhandled validity intercept 0x%x\n",
102 viwhy);
103 return -EINVAL;
104}
105
106static int handle_instruction(struct kvm_vcpu *vcpu)
107{
108 vcpu->stat.exit_instruction++;
109 trace_kvm_s390_intercept_instruction(vcpu,
110 vcpu->arch.sie_block->ipa,
111 vcpu->arch.sie_block->ipb);
112
113 switch (vcpu->arch.sie_block->ipa >> 8) {
114 case 0x01:
115 return kvm_s390_handle_01(vcpu);
116 case 0x82:
117 return kvm_s390_handle_lpsw(vcpu);
118 case 0x83:
119 return kvm_s390_handle_diag(vcpu);
120 case 0xaa:
121 return kvm_s390_handle_aa(vcpu);
122 case 0xae:
123 return kvm_s390_handle_sigp(vcpu);
124 case 0xb2:
125 return kvm_s390_handle_b2(vcpu);
126 case 0xb6:
127 return kvm_s390_handle_stctl(vcpu);
128 case 0xb7:
129 return kvm_s390_handle_lctl(vcpu);
130 case 0xb9:
131 return kvm_s390_handle_b9(vcpu);
132 case 0xe3:
133 return kvm_s390_handle_e3(vcpu);
134 case 0xe5:
135 return kvm_s390_handle_e5(vcpu);
136 case 0xeb:
137 return kvm_s390_handle_eb(vcpu);
138 default:
139 return -EOPNOTSUPP;
140 }
141}
142
143static int inject_prog_on_prog_intercept(struct kvm_vcpu *vcpu)
144{
145 struct kvm_s390_pgm_info pgm_info = {
146 .code = vcpu->arch.sie_block->iprcc,
147 /* the PSW has already been rewound */
148 .flags = KVM_S390_PGM_FLAGS_NO_REWIND,
149 };
150
151 switch (vcpu->arch.sie_block->iprcc & ~PGM_PER) {
152 case PGM_AFX_TRANSLATION:
153 case PGM_ASX_TRANSLATION:
154 case PGM_EX_TRANSLATION:
155 case PGM_LFX_TRANSLATION:
156 case PGM_LSTE_SEQUENCE:
157 case PGM_LSX_TRANSLATION:
158 case PGM_LX_TRANSLATION:
159 case PGM_PRIMARY_AUTHORITY:
160 case PGM_SECONDARY_AUTHORITY:
161 case PGM_SPACE_SWITCH:
162 pgm_info.trans_exc_code = vcpu->arch.sie_block->tecmc;
163 break;
164 case PGM_ALEN_TRANSLATION:
165 case PGM_ALE_SEQUENCE:
166 case PGM_ASTE_INSTANCE:
167 case PGM_ASTE_SEQUENCE:
168 case PGM_ASTE_VALIDITY:
169 case PGM_EXTENDED_AUTHORITY:
170 pgm_info.exc_access_id = vcpu->arch.sie_block->eai;
171 break;
172 case PGM_ASCE_TYPE:
173 case PGM_PAGE_TRANSLATION:
174 case PGM_REGION_FIRST_TRANS:
175 case PGM_REGION_SECOND_TRANS:
176 case PGM_REGION_THIRD_TRANS:
177 case PGM_SEGMENT_TRANSLATION:
178 pgm_info.trans_exc_code = vcpu->arch.sie_block->tecmc;
179 pgm_info.exc_access_id = vcpu->arch.sie_block->eai;
180 pgm_info.op_access_id = vcpu->arch.sie_block->oai;
181 break;
182 case PGM_MONITOR:
183 pgm_info.mon_class_nr = vcpu->arch.sie_block->mcn;
184 pgm_info.mon_code = vcpu->arch.sie_block->tecmc;
185 break;
186 case PGM_VECTOR_PROCESSING:
187 case PGM_DATA:
188 pgm_info.data_exc_code = vcpu->arch.sie_block->dxc;
189 break;
190 case PGM_PROTECTION:
191 pgm_info.trans_exc_code = vcpu->arch.sie_block->tecmc;
192 pgm_info.exc_access_id = vcpu->arch.sie_block->eai;
193 break;
194 default:
195 break;
196 }
197
198 if (vcpu->arch.sie_block->iprcc & PGM_PER) {
199 pgm_info.per_code = vcpu->arch.sie_block->perc;
200 pgm_info.per_atmid = vcpu->arch.sie_block->peratmid;
201 pgm_info.per_address = vcpu->arch.sie_block->peraddr;
202 pgm_info.per_access_id = vcpu->arch.sie_block->peraid;
203 }
204 return kvm_s390_inject_prog_irq(vcpu, &pgm_info);
205}
206
207/*
208 * restore ITDB to program-interruption TDB in guest lowcore
209 * and set TX abort indication if required
210*/
211static int handle_itdb(struct kvm_vcpu *vcpu)
212{
213 struct kvm_s390_itdb *itdb;
214 int rc;
215
216 if (!IS_TE_ENABLED(vcpu) || !IS_ITDB_VALID(vcpu))
217 return 0;
218 if (current->thread.per_flags & PER_FLAG_NO_TE)
219 return 0;
220 itdb = phys_to_virt(vcpu->arch.sie_block->itdba);
221 rc = write_guest_lc(vcpu, __LC_PGM_TDB, itdb, sizeof(*itdb));
222 if (rc)
223 return rc;
224 memset(itdb, 0, sizeof(*itdb));
225
226 return 0;
227}
228
229#define per_event(vcpu) (vcpu->arch.sie_block->iprcc & PGM_PER)
230
231static bool should_handle_per_event(const struct kvm_vcpu *vcpu)
232{
233 if (!guestdbg_enabled(vcpu) || !per_event(vcpu))
234 return false;
235 if (guestdbg_sstep_enabled(vcpu) &&
236 vcpu->arch.sie_block->iprcc != PGM_PER) {
237 /*
238 * __vcpu_run() will exit after delivering the concurrently
239 * indicated condition.
240 */
241 return false;
242 }
243 return true;
244}
245
246static int handle_prog(struct kvm_vcpu *vcpu)
247{
248 psw_t psw;
249 int rc;
250
251 vcpu->stat.exit_program_interruption++;
252
253 /*
254 * Intercept 8 indicates a loop of specification exceptions
255 * for protected guests.
256 */
257 if (kvm_s390_pv_cpu_is_protected(vcpu))
258 return -EOPNOTSUPP;
259
260 if (should_handle_per_event(vcpu)) {
261 rc = kvm_s390_handle_per_event(vcpu);
262 if (rc)
263 return rc;
264 /* the interrupt might have been filtered out completely */
265 if (vcpu->arch.sie_block->iprcc == 0)
266 return 0;
267 }
268
269 trace_kvm_s390_intercept_prog(vcpu, vcpu->arch.sie_block->iprcc);
270 if (vcpu->arch.sie_block->iprcc == PGM_SPECIFICATION) {
271 rc = read_guest_lc(vcpu, __LC_PGM_NEW_PSW, &psw, sizeof(psw_t));
272 if (rc)
273 return rc;
274 /* Avoid endless loops of specification exceptions */
275 if (!is_valid_psw(&psw))
276 return -EOPNOTSUPP;
277 }
278 rc = handle_itdb(vcpu);
279 if (rc)
280 return rc;
281
282 return inject_prog_on_prog_intercept(vcpu);
283}
284
285/**
286 * handle_external_interrupt - used for external interruption interceptions
287 * @vcpu: virtual cpu
288 *
289 * This interception occurs if:
290 * - the CPUSTAT_EXT_INT bit was already set when the external interrupt
291 * occurred. In this case, the interrupt needs to be injected manually to
292 * preserve interrupt priority.
293 * - the external new PSW has external interrupts enabled, which will cause an
294 * interruption loop. We drop to userspace in this case.
295 *
296 * The latter case can be detected by inspecting the external mask bit in the
297 * external new psw.
298 *
299 * Under PV, only the latter case can occur, since interrupt priorities are
300 * handled in the ultravisor.
301 */
302static int handle_external_interrupt(struct kvm_vcpu *vcpu)
303{
304 u16 eic = vcpu->arch.sie_block->eic;
305 struct kvm_s390_irq irq;
306 psw_t newpsw;
307 int rc;
308
309 vcpu->stat.exit_external_interrupt++;
310
311 if (kvm_s390_pv_cpu_is_protected(vcpu)) {
312 newpsw = vcpu->arch.sie_block->gpsw;
313 } else {
314 rc = read_guest_lc(vcpu, __LC_EXT_NEW_PSW, &newpsw, sizeof(psw_t));
315 if (rc)
316 return rc;
317 }
318
319 /*
320 * Clock comparator or timer interrupt with external interrupt enabled
321 * will cause interrupt loop. Drop to userspace.
322 */
323 if ((eic == EXT_IRQ_CLK_COMP || eic == EXT_IRQ_CPU_TIMER) &&
324 (newpsw.mask & PSW_MASK_EXT))
325 return -EOPNOTSUPP;
326
327 switch (eic) {
328 case EXT_IRQ_CLK_COMP:
329 irq.type = KVM_S390_INT_CLOCK_COMP;
330 break;
331 case EXT_IRQ_CPU_TIMER:
332 irq.type = KVM_S390_INT_CPU_TIMER;
333 break;
334 case EXT_IRQ_EXTERNAL_CALL:
335 irq.type = KVM_S390_INT_EXTERNAL_CALL;
336 irq.u.extcall.code = vcpu->arch.sie_block->extcpuaddr;
337 rc = kvm_s390_inject_vcpu(vcpu, &irq);
338 /* ignore if another external call is already pending */
339 if (rc == -EBUSY)
340 return 0;
341 return rc;
342 default:
343 return -EOPNOTSUPP;
344 }
345
346 return kvm_s390_inject_vcpu(vcpu, &irq);
347}
348
349/**
350 * handle_mvpg_pei - Handle MOVE PAGE partial execution interception.
351 * @vcpu: virtual cpu
352 *
353 * This interception can only happen for guests with DAT disabled and
354 * addresses that are currently not mapped in the host. Thus we try to
355 * set up the mappings for the corresponding user pages here (or throw
356 * addressing exceptions in case of illegal guest addresses).
357 */
358static int handle_mvpg_pei(struct kvm_vcpu *vcpu)
359{
360 unsigned long srcaddr, dstaddr;
361 int reg1, reg2, rc;
362
363 kvm_s390_get_regs_rre(vcpu, ®1, ®2);
364
365 /* Ensure that the source is paged-in, no actual access -> no key checking */
366 rc = guest_translate_address_with_key(vcpu, vcpu->run->s.regs.gprs[reg2],
367 reg2, &srcaddr, GACC_FETCH, 0);
368 if (rc)
369 return kvm_s390_inject_prog_cond(vcpu, rc);
370 rc = gmap_fault(vcpu->arch.gmap, srcaddr, 0);
371 if (rc != 0)
372 return rc;
373
374 /* Ensure that the source is paged-in, no actual access -> no key checking */
375 rc = guest_translate_address_with_key(vcpu, vcpu->run->s.regs.gprs[reg1],
376 reg1, &dstaddr, GACC_STORE, 0);
377 if (rc)
378 return kvm_s390_inject_prog_cond(vcpu, rc);
379 rc = gmap_fault(vcpu->arch.gmap, dstaddr, FAULT_FLAG_WRITE);
380 if (rc != 0)
381 return rc;
382
383 kvm_s390_retry_instr(vcpu);
384
385 return 0;
386}
387
388static int handle_partial_execution(struct kvm_vcpu *vcpu)
389{
390 vcpu->stat.exit_pei++;
391
392 if (vcpu->arch.sie_block->ipa == 0xb254) /* MVPG */
393 return handle_mvpg_pei(vcpu);
394 if (vcpu->arch.sie_block->ipa >> 8 == 0xae) /* SIGP */
395 return kvm_s390_handle_sigp_pei(vcpu);
396
397 return -EOPNOTSUPP;
398}
399
400/*
401 * Handle the sthyi instruction that provides the guest with system
402 * information, like current CPU resources available at each level of
403 * the machine.
404 */
405int handle_sthyi(struct kvm_vcpu *vcpu)
406{
407 int reg1, reg2, cc = 0, r = 0;
408 u64 code, addr, rc = 0;
409 struct sthyi_sctns *sctns = NULL;
410
411 if (!test_kvm_facility(vcpu->kvm, 74))
412 return kvm_s390_inject_program_int(vcpu, PGM_OPERATION);
413
414 kvm_s390_get_regs_rre(vcpu, ®1, ®2);
415 code = vcpu->run->s.regs.gprs[reg1];
416 addr = vcpu->run->s.regs.gprs[reg2];
417
418 vcpu->stat.instruction_sthyi++;
419 VCPU_EVENT(vcpu, 3, "STHYI: fc: %llu addr: 0x%016llx", code, addr);
420 trace_kvm_s390_handle_sthyi(vcpu, code, addr);
421
422 if (reg1 == reg2 || reg1 & 1 || reg2 & 1)
423 return kvm_s390_inject_program_int(vcpu, PGM_SPECIFICATION);
424
425 if (code & 0xffff) {
426 cc = 3;
427 rc = 4;
428 goto out;
429 }
430
431 if (!kvm_s390_pv_cpu_is_protected(vcpu) && (addr & ~PAGE_MASK))
432 return kvm_s390_inject_program_int(vcpu, PGM_SPECIFICATION);
433
434 sctns = (void *)get_zeroed_page(GFP_KERNEL_ACCOUNT);
435 if (!sctns)
436 return -ENOMEM;
437
438 cc = sthyi_fill(sctns, &rc);
439 if (cc < 0) {
440 free_page((unsigned long)sctns);
441 return cc;
442 }
443out:
444 if (!cc) {
445 if (kvm_s390_pv_cpu_is_protected(vcpu)) {
446 memcpy(sida_addr(vcpu->arch.sie_block), sctns, PAGE_SIZE);
447 } else {
448 r = write_guest(vcpu, addr, reg2, sctns, PAGE_SIZE);
449 if (r) {
450 free_page((unsigned long)sctns);
451 return kvm_s390_inject_prog_cond(vcpu, r);
452 }
453 }
454 }
455
456 free_page((unsigned long)sctns);
457 vcpu->run->s.regs.gprs[reg2 + 1] = rc;
458 kvm_s390_set_psw_cc(vcpu, cc);
459 return r;
460}
461
462static int handle_operexc(struct kvm_vcpu *vcpu)
463{
464 psw_t oldpsw, newpsw;
465 int rc;
466
467 vcpu->stat.exit_operation_exception++;
468 trace_kvm_s390_handle_operexc(vcpu, vcpu->arch.sie_block->ipa,
469 vcpu->arch.sie_block->ipb);
470
471 if (vcpu->arch.sie_block->ipa == 0xb256)
472 return handle_sthyi(vcpu);
473
474 if (vcpu->arch.sie_block->ipa == 0 && vcpu->kvm->arch.user_instr0)
475 return -EOPNOTSUPP;
476 rc = read_guest_lc(vcpu, __LC_PGM_NEW_PSW, &newpsw, sizeof(psw_t));
477 if (rc)
478 return rc;
479 /*
480 * Avoid endless loops of operation exceptions, if the pgm new
481 * PSW will cause a new operation exception.
482 * The heuristic checks if the pgm new psw is within 6 bytes before
483 * the faulting psw address (with same DAT, AS settings) and the
484 * new psw is not a wait psw and the fault was not triggered by
485 * problem state.
486 */
487 oldpsw = vcpu->arch.sie_block->gpsw;
488 if (oldpsw.addr - newpsw.addr <= 6 &&
489 !(newpsw.mask & PSW_MASK_WAIT) &&
490 !(oldpsw.mask & PSW_MASK_PSTATE) &&
491 (newpsw.mask & PSW_MASK_ASC) == (oldpsw.mask & PSW_MASK_ASC) &&
492 (newpsw.mask & PSW_MASK_DAT) == (oldpsw.mask & PSW_MASK_DAT))
493 return -EOPNOTSUPP;
494
495 return kvm_s390_inject_program_int(vcpu, PGM_OPERATION);
496}
497
498static int handle_pv_spx(struct kvm_vcpu *vcpu)
499{
500 u32 pref = *(u32 *)sida_addr(vcpu->arch.sie_block);
501
502 kvm_s390_set_prefix(vcpu, pref);
503 trace_kvm_s390_handle_prefix(vcpu, 1, pref);
504 return 0;
505}
506
507static int handle_pv_sclp(struct kvm_vcpu *vcpu)
508{
509 struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
510
511 spin_lock(&fi->lock);
512 /*
513 * 2 cases:
514 * a: an sccb answering interrupt was already pending or in flight.
515 * As the sccb value is not known we can simply set some value to
516 * trigger delivery of a saved SCCB. UV will then use its saved
517 * copy of the SCCB value.
518 * b: an error SCCB interrupt needs to be injected so we also inject
519 * a fake SCCB address. Firmware will use the proper one.
520 * This makes sure, that both errors and real sccb returns will only
521 * be delivered after a notification intercept (instruction has
522 * finished) but not after others.
523 */
524 fi->srv_signal.ext_params |= 0x43000;
525 set_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs);
526 clear_bit(IRQ_PEND_EXT_SERVICE, &fi->masked_irqs);
527 spin_unlock(&fi->lock);
528 return 0;
529}
530
531static int handle_pv_uvc(struct kvm_vcpu *vcpu)
532{
533 struct uv_cb_share *guest_uvcb = sida_addr(vcpu->arch.sie_block);
534 struct uv_cb_cts uvcb = {
535 .header.cmd = UVC_CMD_UNPIN_PAGE_SHARED,
536 .header.len = sizeof(uvcb),
537 .guest_handle = kvm_s390_pv_get_handle(vcpu->kvm),
538 .gaddr = guest_uvcb->paddr,
539 };
540 int rc;
541
542 if (guest_uvcb->header.cmd != UVC_CMD_REMOVE_SHARED_ACCESS) {
543 WARN_ONCE(1, "Unexpected notification intercept for UVC 0x%x\n",
544 guest_uvcb->header.cmd);
545 return 0;
546 }
547 rc = gmap_make_secure(vcpu->arch.gmap, uvcb.gaddr, &uvcb);
548 /*
549 * If the unpin did not succeed, the guest will exit again for the UVC
550 * and we will retry the unpin.
551 */
552 if (rc == -EINVAL)
553 return 0;
554 /*
555 * If we got -EAGAIN here, we simply return it. It will eventually
556 * get propagated all the way to userspace, which should then try
557 * again.
558 */
559 return rc;
560}
561
562static int handle_pv_notification(struct kvm_vcpu *vcpu)
563{
564 int ret;
565
566 if (vcpu->arch.sie_block->ipa == 0xb210)
567 return handle_pv_spx(vcpu);
568 if (vcpu->arch.sie_block->ipa == 0xb220)
569 return handle_pv_sclp(vcpu);
570 if (vcpu->arch.sie_block->ipa == 0xb9a4)
571 return handle_pv_uvc(vcpu);
572 if (vcpu->arch.sie_block->ipa >> 8 == 0xae) {
573 /*
574 * Besides external call, other SIGP orders also cause a
575 * 108 (pv notify) intercept. In contrast to external call,
576 * these orders need to be emulated and hence the appropriate
577 * place to handle them is in handle_instruction().
578 * So first try kvm_s390_handle_sigp_pei() and if that isn't
579 * successful, go on with handle_instruction().
580 */
581 ret = kvm_s390_handle_sigp_pei(vcpu);
582 if (!ret)
583 return ret;
584 }
585
586 return handle_instruction(vcpu);
587}
588
589static bool should_handle_per_ifetch(const struct kvm_vcpu *vcpu, int rc)
590{
591 /* Process PER, also if the instruction is processed in user space. */
592 if (!(vcpu->arch.sie_block->icptstatus & 0x02))
593 return false;
594 if (rc != 0 && rc != -EOPNOTSUPP)
595 return false;
596 if (guestdbg_sstep_enabled(vcpu) && vcpu->arch.local_int.pending_irqs)
597 /* __vcpu_run() will exit after delivering the interrupt. */
598 return false;
599 return true;
600}
601
602int kvm_handle_sie_intercept(struct kvm_vcpu *vcpu)
603{
604 int rc, per_rc = 0;
605
606 if (kvm_is_ucontrol(vcpu->kvm))
607 return -EOPNOTSUPP;
608
609 switch (vcpu->arch.sie_block->icptcode) {
610 case ICPT_EXTREQ:
611 vcpu->stat.exit_external_request++;
612 return 0;
613 case ICPT_IOREQ:
614 vcpu->stat.exit_io_request++;
615 return 0;
616 case ICPT_INST:
617 rc = handle_instruction(vcpu);
618 break;
619 case ICPT_PROGI:
620 return handle_prog(vcpu);
621 case ICPT_EXTINT:
622 return handle_external_interrupt(vcpu);
623 case ICPT_WAIT:
624 return kvm_s390_handle_wait(vcpu);
625 case ICPT_VALIDITY:
626 return handle_validity(vcpu);
627 case ICPT_STOP:
628 return handle_stop(vcpu);
629 case ICPT_OPEREXC:
630 rc = handle_operexc(vcpu);
631 break;
632 case ICPT_PARTEXEC:
633 rc = handle_partial_execution(vcpu);
634 break;
635 case ICPT_KSS:
636 /* Instruction will be redriven, skip the PER check. */
637 return kvm_s390_skey_check_enable(vcpu);
638 case ICPT_MCHKREQ:
639 case ICPT_INT_ENABLE:
640 /*
641 * PSW bit 13 or a CR (0, 6, 14) changed and we might
642 * now be able to deliver interrupts. The pre-run code
643 * will take care of this.
644 */
645 rc = 0;
646 break;
647 case ICPT_PV_INSTR:
648 rc = handle_instruction(vcpu);
649 break;
650 case ICPT_PV_NOTIFY:
651 rc = handle_pv_notification(vcpu);
652 break;
653 case ICPT_PV_PREF:
654 rc = 0;
655 gmap_convert_to_secure(vcpu->arch.gmap,
656 kvm_s390_get_prefix(vcpu));
657 gmap_convert_to_secure(vcpu->arch.gmap,
658 kvm_s390_get_prefix(vcpu) + PAGE_SIZE);
659 break;
660 default:
661 return -EOPNOTSUPP;
662 }
663
664 if (should_handle_per_ifetch(vcpu, rc))
665 per_rc = kvm_s390_handle_per_ifetch_icpt(vcpu);
666 return per_rc ? per_rc : rc;
667}
1/*
2 * in-kernel handling for sie intercepts
3 *
4 * Copyright IBM Corp. 2008, 2014
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License (version 2 only)
8 * as published by the Free Software Foundation.
9 *
10 * Author(s): Carsten Otte <cotte@de.ibm.com>
11 * Christian Borntraeger <borntraeger@de.ibm.com>
12 */
13
14#include <linux/kvm_host.h>
15#include <linux/errno.h>
16#include <linux/pagemap.h>
17
18#include <asm/kvm_host.h>
19#include <asm/asm-offsets.h>
20#include <asm/irq.h>
21
22#include "kvm-s390.h"
23#include "gaccess.h"
24#include "trace.h"
25#include "trace-s390.h"
26
27
28static const intercept_handler_t instruction_handlers[256] = {
29 [0x01] = kvm_s390_handle_01,
30 [0x82] = kvm_s390_handle_lpsw,
31 [0x83] = kvm_s390_handle_diag,
32 [0xae] = kvm_s390_handle_sigp,
33 [0xb2] = kvm_s390_handle_b2,
34 [0xb6] = kvm_s390_handle_stctl,
35 [0xb7] = kvm_s390_handle_lctl,
36 [0xb9] = kvm_s390_handle_b9,
37 [0xe5] = kvm_s390_handle_e5,
38 [0xeb] = kvm_s390_handle_eb,
39};
40
41u8 kvm_s390_get_ilen(struct kvm_vcpu *vcpu)
42{
43 struct kvm_s390_sie_block *sie_block = vcpu->arch.sie_block;
44 u8 ilen = 0;
45
46 switch (vcpu->arch.sie_block->icptcode) {
47 case ICPT_INST:
48 case ICPT_INSTPROGI:
49 case ICPT_OPEREXC:
50 case ICPT_PARTEXEC:
51 case ICPT_IOINST:
52 /* instruction only stored for these icptcodes */
53 ilen = insn_length(vcpu->arch.sie_block->ipa >> 8);
54 /* Use the length of the EXECUTE instruction if necessary */
55 if (sie_block->icptstatus & 1) {
56 ilen = (sie_block->icptstatus >> 4) & 0x6;
57 if (!ilen)
58 ilen = 4;
59 }
60 break;
61 case ICPT_PROGI:
62 /* bit 1+2 of pgmilc are the ilc, so we directly get ilen */
63 ilen = vcpu->arch.sie_block->pgmilc & 0x6;
64 break;
65 }
66 return ilen;
67}
68
69static int handle_noop(struct kvm_vcpu *vcpu)
70{
71 switch (vcpu->arch.sie_block->icptcode) {
72 case 0x10:
73 vcpu->stat.exit_external_request++;
74 break;
75 default:
76 break; /* nothing */
77 }
78 return 0;
79}
80
81static int handle_stop(struct kvm_vcpu *vcpu)
82{
83 struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
84 int rc = 0;
85 uint8_t flags, stop_pending;
86
87 vcpu->stat.exit_stop_request++;
88
89 /* delay the stop if any non-stop irq is pending */
90 if (kvm_s390_vcpu_has_irq(vcpu, 1))
91 return 0;
92
93 /* avoid races with the injection/SIGP STOP code */
94 spin_lock(&li->lock);
95 flags = li->irq.stop.flags;
96 stop_pending = kvm_s390_is_stop_irq_pending(vcpu);
97 spin_unlock(&li->lock);
98
99 trace_kvm_s390_stop_request(stop_pending, flags);
100 if (!stop_pending)
101 return 0;
102
103 if (flags & KVM_S390_STOP_FLAG_STORE_STATUS) {
104 rc = kvm_s390_vcpu_store_status(vcpu,
105 KVM_S390_STORE_STATUS_NOADDR);
106 if (rc)
107 return rc;
108 }
109
110 if (!kvm_s390_user_cpu_state_ctrl(vcpu->kvm))
111 kvm_s390_vcpu_stop(vcpu);
112 return -EOPNOTSUPP;
113}
114
115static int handle_validity(struct kvm_vcpu *vcpu)
116{
117 int viwhy = vcpu->arch.sie_block->ipb >> 16;
118
119 vcpu->stat.exit_validity++;
120 trace_kvm_s390_intercept_validity(vcpu, viwhy);
121 WARN_ONCE(true, "kvm: unhandled validity intercept 0x%x\n", viwhy);
122 return -EOPNOTSUPP;
123}
124
125static int handle_instruction(struct kvm_vcpu *vcpu)
126{
127 intercept_handler_t handler;
128
129 vcpu->stat.exit_instruction++;
130 trace_kvm_s390_intercept_instruction(vcpu,
131 vcpu->arch.sie_block->ipa,
132 vcpu->arch.sie_block->ipb);
133 handler = instruction_handlers[vcpu->arch.sie_block->ipa >> 8];
134 if (handler)
135 return handler(vcpu);
136 return -EOPNOTSUPP;
137}
138
139static int inject_prog_on_prog_intercept(struct kvm_vcpu *vcpu)
140{
141 struct kvm_s390_pgm_info pgm_info = {
142 .code = vcpu->arch.sie_block->iprcc,
143 /* the PSW has already been rewound */
144 .flags = KVM_S390_PGM_FLAGS_NO_REWIND,
145 };
146
147 switch (vcpu->arch.sie_block->iprcc & ~PGM_PER) {
148 case PGM_AFX_TRANSLATION:
149 case PGM_ASX_TRANSLATION:
150 case PGM_EX_TRANSLATION:
151 case PGM_LFX_TRANSLATION:
152 case PGM_LSTE_SEQUENCE:
153 case PGM_LSX_TRANSLATION:
154 case PGM_LX_TRANSLATION:
155 case PGM_PRIMARY_AUTHORITY:
156 case PGM_SECONDARY_AUTHORITY:
157 case PGM_SPACE_SWITCH:
158 pgm_info.trans_exc_code = vcpu->arch.sie_block->tecmc;
159 break;
160 case PGM_ALEN_TRANSLATION:
161 case PGM_ALE_SEQUENCE:
162 case PGM_ASTE_INSTANCE:
163 case PGM_ASTE_SEQUENCE:
164 case PGM_ASTE_VALIDITY:
165 case PGM_EXTENDED_AUTHORITY:
166 pgm_info.exc_access_id = vcpu->arch.sie_block->eai;
167 break;
168 case PGM_ASCE_TYPE:
169 case PGM_PAGE_TRANSLATION:
170 case PGM_REGION_FIRST_TRANS:
171 case PGM_REGION_SECOND_TRANS:
172 case PGM_REGION_THIRD_TRANS:
173 case PGM_SEGMENT_TRANSLATION:
174 pgm_info.trans_exc_code = vcpu->arch.sie_block->tecmc;
175 pgm_info.exc_access_id = vcpu->arch.sie_block->eai;
176 pgm_info.op_access_id = vcpu->arch.sie_block->oai;
177 break;
178 case PGM_MONITOR:
179 pgm_info.mon_class_nr = vcpu->arch.sie_block->mcn;
180 pgm_info.mon_code = vcpu->arch.sie_block->tecmc;
181 break;
182 case PGM_VECTOR_PROCESSING:
183 case PGM_DATA:
184 pgm_info.data_exc_code = vcpu->arch.sie_block->dxc;
185 break;
186 case PGM_PROTECTION:
187 pgm_info.trans_exc_code = vcpu->arch.sie_block->tecmc;
188 pgm_info.exc_access_id = vcpu->arch.sie_block->eai;
189 break;
190 default:
191 break;
192 }
193
194 if (vcpu->arch.sie_block->iprcc & PGM_PER) {
195 pgm_info.per_code = vcpu->arch.sie_block->perc;
196 pgm_info.per_atmid = vcpu->arch.sie_block->peratmid;
197 pgm_info.per_address = vcpu->arch.sie_block->peraddr;
198 pgm_info.per_access_id = vcpu->arch.sie_block->peraid;
199 }
200 return kvm_s390_inject_prog_irq(vcpu, &pgm_info);
201}
202
203/*
204 * restore ITDB to program-interruption TDB in guest lowcore
205 * and set TX abort indication if required
206*/
207static int handle_itdb(struct kvm_vcpu *vcpu)
208{
209 struct kvm_s390_itdb *itdb;
210 int rc;
211
212 if (!IS_TE_ENABLED(vcpu) || !IS_ITDB_VALID(vcpu))
213 return 0;
214 if (current->thread.per_flags & PER_FLAG_NO_TE)
215 return 0;
216 itdb = (struct kvm_s390_itdb *)vcpu->arch.sie_block->itdba;
217 rc = write_guest_lc(vcpu, __LC_PGM_TDB, itdb, sizeof(*itdb));
218 if (rc)
219 return rc;
220 memset(itdb, 0, sizeof(*itdb));
221
222 return 0;
223}
224
225#define per_event(vcpu) (vcpu->arch.sie_block->iprcc & PGM_PER)
226
227static int handle_prog(struct kvm_vcpu *vcpu)
228{
229 psw_t psw;
230 int rc;
231
232 vcpu->stat.exit_program_interruption++;
233
234 if (guestdbg_enabled(vcpu) && per_event(vcpu)) {
235 kvm_s390_handle_per_event(vcpu);
236 /* the interrupt might have been filtered out completely */
237 if (vcpu->arch.sie_block->iprcc == 0)
238 return 0;
239 }
240
241 trace_kvm_s390_intercept_prog(vcpu, vcpu->arch.sie_block->iprcc);
242 if (vcpu->arch.sie_block->iprcc == PGM_SPECIFICATION) {
243 rc = read_guest_lc(vcpu, __LC_PGM_NEW_PSW, &psw, sizeof(psw_t));
244 if (rc)
245 return rc;
246 /* Avoid endless loops of specification exceptions */
247 if (!is_valid_psw(&psw))
248 return -EOPNOTSUPP;
249 }
250 rc = handle_itdb(vcpu);
251 if (rc)
252 return rc;
253
254 return inject_prog_on_prog_intercept(vcpu);
255}
256
257/**
258 * handle_external_interrupt - used for external interruption interceptions
259 *
260 * This interception only occurs if the CPUSTAT_EXT_INT bit was set, or if
261 * the new PSW does not have external interrupts disabled. In the first case,
262 * we've got to deliver the interrupt manually, and in the second case, we
263 * drop to userspace to handle the situation there.
264 */
265static int handle_external_interrupt(struct kvm_vcpu *vcpu)
266{
267 u16 eic = vcpu->arch.sie_block->eic;
268 struct kvm_s390_irq irq;
269 psw_t newpsw;
270 int rc;
271
272 vcpu->stat.exit_external_interrupt++;
273
274 rc = read_guest_lc(vcpu, __LC_EXT_NEW_PSW, &newpsw, sizeof(psw_t));
275 if (rc)
276 return rc;
277 /* We can not handle clock comparator or timer interrupt with bad PSW */
278 if ((eic == EXT_IRQ_CLK_COMP || eic == EXT_IRQ_CPU_TIMER) &&
279 (newpsw.mask & PSW_MASK_EXT))
280 return -EOPNOTSUPP;
281
282 switch (eic) {
283 case EXT_IRQ_CLK_COMP:
284 irq.type = KVM_S390_INT_CLOCK_COMP;
285 break;
286 case EXT_IRQ_CPU_TIMER:
287 irq.type = KVM_S390_INT_CPU_TIMER;
288 break;
289 case EXT_IRQ_EXTERNAL_CALL:
290 irq.type = KVM_S390_INT_EXTERNAL_CALL;
291 irq.u.extcall.code = vcpu->arch.sie_block->extcpuaddr;
292 rc = kvm_s390_inject_vcpu(vcpu, &irq);
293 /* ignore if another external call is already pending */
294 if (rc == -EBUSY)
295 return 0;
296 return rc;
297 default:
298 return -EOPNOTSUPP;
299 }
300
301 return kvm_s390_inject_vcpu(vcpu, &irq);
302}
303
304/**
305 * Handle MOVE PAGE partial execution interception.
306 *
307 * This interception can only happen for guests with DAT disabled and
308 * addresses that are currently not mapped in the host. Thus we try to
309 * set up the mappings for the corresponding user pages here (or throw
310 * addressing exceptions in case of illegal guest addresses).
311 */
312static int handle_mvpg_pei(struct kvm_vcpu *vcpu)
313{
314 unsigned long srcaddr, dstaddr;
315 int reg1, reg2, rc;
316
317 kvm_s390_get_regs_rre(vcpu, ®1, ®2);
318
319 /* Make sure that the source is paged-in */
320 rc = guest_translate_address(vcpu, vcpu->run->s.regs.gprs[reg2],
321 reg2, &srcaddr, GACC_FETCH);
322 if (rc)
323 return kvm_s390_inject_prog_cond(vcpu, rc);
324 rc = kvm_arch_fault_in_page(vcpu, srcaddr, 0);
325 if (rc != 0)
326 return rc;
327
328 /* Make sure that the destination is paged-in */
329 rc = guest_translate_address(vcpu, vcpu->run->s.regs.gprs[reg1],
330 reg1, &dstaddr, GACC_STORE);
331 if (rc)
332 return kvm_s390_inject_prog_cond(vcpu, rc);
333 rc = kvm_arch_fault_in_page(vcpu, dstaddr, 1);
334 if (rc != 0)
335 return rc;
336
337 kvm_s390_retry_instr(vcpu);
338
339 return 0;
340}
341
342static int handle_partial_execution(struct kvm_vcpu *vcpu)
343{
344 if (vcpu->arch.sie_block->ipa == 0xb254) /* MVPG */
345 return handle_mvpg_pei(vcpu);
346 if (vcpu->arch.sie_block->ipa >> 8 == 0xae) /* SIGP */
347 return kvm_s390_handle_sigp_pei(vcpu);
348
349 return -EOPNOTSUPP;
350}
351
352int kvm_handle_sie_intercept(struct kvm_vcpu *vcpu)
353{
354 if (kvm_is_ucontrol(vcpu->kvm))
355 return -EOPNOTSUPP;
356
357 switch (vcpu->arch.sie_block->icptcode) {
358 case 0x10:
359 case 0x18:
360 return handle_noop(vcpu);
361 case 0x04:
362 return handle_instruction(vcpu);
363 case 0x08:
364 return handle_prog(vcpu);
365 case 0x14:
366 return handle_external_interrupt(vcpu);
367 case 0x1c:
368 return kvm_s390_handle_wait(vcpu);
369 case 0x20:
370 return handle_validity(vcpu);
371 case 0x28:
372 return handle_stop(vcpu);
373 case 0x38:
374 return handle_partial_execution(vcpu);
375 default:
376 return -EOPNOTSUPP;
377 }
378}