hw/s390x/virtio-ccw.c

   1 /*
   2  * virtio ccw target implementation
   3  *
   4  * Copyright 2012,2014 IBM Corp.
   5  * Author(s): Cornelia Huck <cornelia.huck@de.ibm.com>
   6  *
   7  * This work is licensed under the terms of the GNU GPL, version 2 or (at
   8  * your option) any later version. See the COPYING file in the top-level
   9  * directory.
  10  */
  11
  12 #include "hw/hw.h"
  13 #include "block/block.h"
  14 #include "sysemu/blockdev.h"
  15 #include "sysemu/sysemu.h"
  16 #include "net/net.h"
  17 #include "monitor/monitor.h"
  18 #include "hw/virtio/virtio.h"
  19 #include "hw/virtio/virtio-serial.h"
  20 #include "hw/virtio/virtio-net.h"
  21 #include "hw/sysbus.h"
  22 #include "qemu/bitops.h"
  23 #include "hw/virtio/virtio-bus.h"
  24 #include "hw/s390x/adapter.h"
  25 #include "hw/s390x/s390_flic.h"
  26
  27 #include "ioinst.h"
  28 #include "css.h"
  29 #include "virtio-ccw.h"
  30 #include "trace.h"
  31
  32 static QTAILQ_HEAD(, IndAddr) indicator_addresses =
  33     QTAILQ_HEAD_INITIALIZER(indicator_addresses);
  34
  35 static IndAddr *get_indicator(hwaddr ind_addr, int len)
  36 {
  37     IndAddr *indicator;
  38
  39     QTAILQ_FOREACH(indicator, &indicator_addresses, sibling) {
  40         if (indicator->addr == ind_addr) {
  41             indicator->refcnt++;
  42             return indicator;
  43         }
  44     }
  45     indicator = g_new0(IndAddr, 1);
  46     indicator->addr = ind_addr;
  47     indicator->len = len;
  48     indicator->refcnt = 1;
  49     QTAILQ_INSERT_TAIL(&indicator_addresses, indicator, sibling);
  50     return indicator;
  51 }
  52
  53 static int s390_io_adapter_map(AdapterInfo *adapter, uint64_t map_addr,
  54                                bool do_map)
  55 {
  56     S390FLICState *fs = s390_get_flic();
  57     S390FLICStateClass *fsc = S390_FLIC_COMMON_GET_CLASS(fs);
  58
  59     return fsc->io_adapter_map(fs, adapter->adapter_id, map_addr, do_map);
  60 }
  61
  62 static void release_indicator(AdapterInfo *adapter, IndAddr *indicator)
  63 {
  64     assert(indicator->refcnt > 0);
  65     indicator->refcnt--;
  66     if (indicator->refcnt > 0) {
  67         return;
  68     }
  69     QTAILQ_REMOVE(&indicator_addresses, indicator, sibling);
  70     if (indicator->map) {
  71         s390_io_adapter_map(adapter, indicator->map, false);
  72     }
  73     g_free(indicator);
  74 }
  75
  76 static int map_indicator(AdapterInfo *adapter, IndAddr *indicator)
  77 {
  78     int ret;
  79
  80     if (indicator->map) {
  81         return 0; /* already mapped is not an error */
  82     }
  83     indicator->map = indicator->addr;
  84     ret = s390_io_adapter_map(adapter, indicator->map, true);
  85     if ((ret != 0) && (ret != -ENOSYS)) {
  86         goto out_err;
  87     }
  88     return 0;
  89
  90 out_err:
  91     indicator->map = 0;
  92     return ret;
  93 }
  94
  95 static void virtio_ccw_bus_new(VirtioBusState *bus, size_t bus_size,
  96                                VirtioCcwDevice *dev);
  97
  98 static void virtual_css_bus_reset(BusState *qbus)
  99 {
 100     /* This should actually be modelled via the generic css */
 101     css_reset();
 102 }
 103
 104
 105 static void virtual_css_bus_class_init(ObjectClass *klass, void *data)
 106 {
 107     BusClass *k = BUS_CLASS(klass);
 108
 109     k->reset = virtual_css_bus_reset;
 110 }
 111
 112 static const TypeInfo virtual_css_bus_info = {
 113     .name = TYPE_VIRTUAL_CSS_BUS,
 114     .parent = TYPE_BUS,
 115     .instance_size = sizeof(VirtualCssBus),
 116     .class_init = virtual_css_bus_class_init,
 117 };
 118
 119 VirtIODevice *virtio_ccw_get_vdev(SubchDev *sch)
 120 {
 121     VirtIODevice *vdev = NULL;
 122     VirtioCcwDevice *dev = sch->driver_data;
 123
 124     if (dev) {
 125         vdev = virtio_bus_get_device(&dev->bus);
 126     }
 127     return vdev;
 128 }
 129
 130 static int virtio_ccw_set_guest2host_notifier(VirtioCcwDevice *dev, int n,
 131                                               bool assign, bool set_handler)
 132 {
 133     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
 134     VirtQueue *vq = virtio_get_queue(vdev, n);
 135     EventNotifier *notifier = virtio_queue_get_host_notifier(vq);
 136     int r = 0;
 137     SubchDev *sch = dev->sch;
 138     uint32_t sch_id = (css_build_subchannel_id(sch) << 16) | sch->schid;
 139
 140     if (assign) {
 141         r = event_notifier_init(notifier, 1);
 142         if (r < 0) {
 143             error_report("%s: unable to init event notifier: %d", __func__, r);
 144             return r;
 145         }
 146         virtio_queue_set_host_notifier_fd_handler(vq, true, set_handler);
 147         r = s390_assign_subch_ioeventfd(notifier, sch_id, n, assign);
 148         if (r < 0) {
 149             error_report("%s: unable to assign ioeventfd: %d", __func__, r);
 150             virtio_queue_set_host_notifier_fd_handler(vq, false, false);
 151             event_notifier_cleanup(notifier);
 152             return r;
 153         }
 154     } else {
 155         virtio_queue_set_host_notifier_fd_handler(vq, false, false);
 156         s390_assign_subch_ioeventfd(notifier, sch_id, n, assign);
 157         event_notifier_cleanup(notifier);
 158     }
 159     return r;
 160 }
 161
 162 static void virtio_ccw_start_ioeventfd(VirtioCcwDevice *dev)
 163 {
 164     VirtIODevice *vdev;
 165     int n, r;
 166
 167     if (!(dev->flags & VIRTIO_CCW_FLAG_USE_IOEVENTFD) ||
 168         dev->ioeventfd_disabled ||
 169         dev->ioeventfd_started) {
 170         return;
 171     }
 172     vdev = virtio_bus_get_device(&dev->bus);
 173     for (n = 0; n < VIRTIO_PCI_QUEUE_MAX; n++) {
 174         if (!virtio_queue_get_num(vdev, n)) {
 175             continue;
 176         }
 177         r = virtio_ccw_set_guest2host_notifier(dev, n, true, true);
 178         if (r < 0) {
 179             goto assign_error;
 180         }
 181     }
 182     dev->ioeventfd_started = true;
 183     return;
 184
 185   assign_error:
 186     while (--n >= 0) {
 187         if (!virtio_queue_get_num(vdev, n)) {
 188             continue;
 189         }
 190         r = virtio_ccw_set_guest2host_notifier(dev, n, false, false);
 191         assert(r >= 0);
 192     }
 193     dev->ioeventfd_started = false;
 194     /* Disable ioeventfd for this device. */
 195     dev->flags &= ~VIRTIO_CCW_FLAG_USE_IOEVENTFD;
 196     error_report("%s: failed. Fallback to userspace (slower).", __func__);
 197 }
 198
 199 static void virtio_ccw_stop_ioeventfd(VirtioCcwDevice *dev)
 200 {
 201     VirtIODevice *vdev;
 202     int n, r;
 203
 204     if (!dev->ioeventfd_started) {
 205         return;
 206     }
 207     vdev = virtio_bus_get_device(&dev->bus);
 208     for (n = 0; n < VIRTIO_PCI_QUEUE_MAX; n++) {
 209         if (!virtio_queue_get_num(vdev, n)) {
 210             continue;
 211         }
 212         r = virtio_ccw_set_guest2host_notifier(dev, n, false, false);
 213         assert(r >= 0);
 214     }
 215     dev->ioeventfd_started = false;
 216 }
 217
 218 VirtualCssBus *virtual_css_bus_init(void)
 219 {
 220     VirtualCssBus *cbus;
 221     BusState *bus;
 222     DeviceState *dev;
 223
 224     /* Create bridge device */
 225     dev = qdev_create(NULL, "virtual-css-bridge");
 226     qdev_init_nofail(dev);
 227
 228     /* Create bus on bridge device */
 229     bus = qbus_create(TYPE_VIRTUAL_CSS_BUS, dev, "virtual-css");
 230     cbus = VIRTUAL_CSS_BUS(bus);
 231
 232     /* Enable hotplugging */
 233     bus->allow_hotplug = 1;
 234
 235     return cbus;
 236 }
 237
 238 /* Communication blocks used by several channel commands. */
 239 typedef struct VqInfoBlock {
 240     uint64_t queue;
 241     uint32_t align;
 242     uint16_t index;
 243     uint16_t num;
 244 } QEMU_PACKED VqInfoBlock;
 245
 246 typedef struct VqConfigBlock {
 247     uint16_t index;
 248     uint16_t num_max;
 249 } QEMU_PACKED VqConfigBlock;
 250
 251 typedef struct VirtioFeatDesc {
 252     uint32_t features;
 253     uint8_t index;
 254 } QEMU_PACKED VirtioFeatDesc;
 255
 256 typedef struct VirtioThinintInfo {
 257     hwaddr summary_indicator;
 258     hwaddr device_indicator;
 259     uint64_t ind_bit;
 260     uint8_t isc;
 261 } QEMU_PACKED VirtioThinintInfo;
 262
 263 /* Specify where the virtqueues for the subchannel are in guest memory. */
 264 static int virtio_ccw_set_vqs(SubchDev *sch, uint64_t addr, uint32_t align,
 265                               uint16_t index, uint16_t num)
 266 {
 267     VirtIODevice *vdev = virtio_ccw_get_vdev(sch);
 268
 269     if (index > VIRTIO_PCI_QUEUE_MAX) {
 270         return -EINVAL;
 271     }
 272
 273     /* Current code in virtio.c relies on 4K alignment. */
 274     if (addr && (align != 4096)) {
 275         return -EINVAL;
 276     }
 277
 278     if (!vdev) {
 279         return -EINVAL;
 280     }
 281
 282     virtio_queue_set_addr(vdev, index, addr);
 283     if (!addr) {
 284         virtio_queue_set_vector(vdev, index, 0);
 285     } else {
 286         /* Fail if we don't have a big enough queue. */
 287         /* TODO: Add interface to handle vring.num changing */
 288         if (virtio_queue_get_num(vdev, index) > num) {
 289             return -EINVAL;
 290         }
 291         virtio_queue_set_vector(vdev, index, index);
 292     }
 293     /* tell notify handler in case of config change */
 294     vdev->config_vector = VIRTIO_PCI_QUEUE_MAX;
 295     return 0;
 296 }
 297
 298 static int virtio_ccw_cb(SubchDev *sch, CCW1 ccw)
 299 {
 300     int ret;
 301     VqInfoBlock info;
 302     uint8_t status;
 303     VirtioFeatDesc features;
 304     void *config;
 305     hwaddr indicators;
 306     VqConfigBlock vq_config;
 307     VirtioCcwDevice *dev = sch->driver_data;
 308     VirtIODevice *vdev = virtio_ccw_get_vdev(sch);
 309     bool check_len;
 310     int len;
 311     hwaddr hw_len;
 312     VirtioThinintInfo *thinint;
 313
 314     if (!dev) {
 315         return -EINVAL;
 316     }
 317
 318     trace_virtio_ccw_interpret_ccw(sch->cssid, sch->ssid, sch->schid,
 319                                    ccw.cmd_code);
 320     check_len = !((ccw.flags & CCW_FLAG_SLI) && !(ccw.flags & CCW_FLAG_DC));
 321
 322     /* Look at the command. */
 323     switch (ccw.cmd_code) {
 324     case CCW_CMD_SET_VQ:
 325         if (check_len) {
 326             if (ccw.count != sizeof(info)) {
 327                 ret = -EINVAL;
 328                 break;
 329             }
 330         } else if (ccw.count < sizeof(info)) {
 331             /* Can't execute command. */
 332             ret = -EINVAL;
 333             break;
 334         }
 335         if (!ccw.cda) {
 336             ret = -EFAULT;
 337         } else {
 338             info.queue = ldq_phys(&address_space_memory, ccw.cda);
 339             info.align = ldl_phys(&address_space_memory,
 340                                   ccw.cda + sizeof(info.queue));
 341             info.index = lduw_phys(&address_space_memory,
 342                                    ccw.cda + sizeof(info.queue)
 343                                    + sizeof(info.align));
 344             info.num = lduw_phys(&address_space_memory,
 345                                  ccw.cda + sizeof(info.queue)
 346                                  + sizeof(info.align)
 347                                  + sizeof(info.index));
 348             ret = virtio_ccw_set_vqs(sch, info.queue, info.align, info.index,
 349                                      info.num);
 350             sch->curr_status.scsw.count = 0;
 351         }
 352         break;
 353     case CCW_CMD_VDEV_RESET:
 354         virtio_ccw_stop_ioeventfd(dev);
 355         virtio_reset(vdev);
 356         ret = 0;
 357         break;
 358     case CCW_CMD_READ_FEAT:
 359         if (check_len) {
 360             if (ccw.count != sizeof(features)) {
 361                 ret = -EINVAL;
 362                 break;
 363             }
 364         } else if (ccw.count < sizeof(features)) {
 365             /* Can't execute command. */
 366             ret = -EINVAL;
 367             break;
 368         }
 369         if (!ccw.cda) {
 370             ret = -EFAULT;
 371         } else {
 372             features.index = ldub_phys(&address_space_memory,
 373                                        ccw.cda + sizeof(features.features));
 374             if (features.index < ARRAY_SIZE(dev->host_features)) {
 375                 features.features = dev->host_features[features.index];
 376             } else {
 377                 /* Return zeroes if the guest supports more feature bits. */
 378                 features.features = 0;
 379             }
 380             stl_le_phys(&address_space_memory, ccw.cda, features.features);
 381             sch->curr_status.scsw.count = ccw.count - sizeof(features);
 382             ret = 0;
 383         }
 384         break;
 385     case CCW_CMD_WRITE_FEAT:
 386         if (check_len) {
 387             if (ccw.count != sizeof(features)) {
 388                 ret = -EINVAL;
 389                 break;
 390             }
 391         } else if (ccw.count < sizeof(features)) {
 392             /* Can't execute command. */
 393             ret = -EINVAL;
 394             break;
 395         }
 396         if (!ccw.cda) {
 397             ret = -EFAULT;
 398         } else {
 399             features.index = ldub_phys(&address_space_memory,
 400                                        ccw.cda + sizeof(features.features));
 401             features.features = ldl_le_phys(&address_space_memory, ccw.cda);
 402             if (features.index < ARRAY_SIZE(dev->host_features)) {
 403                 virtio_bus_set_vdev_features(&dev->bus, features.features);
 404                 vdev->guest_features = features.features;
 405             } else {
 406                 /*
 407                  * If the guest supports more feature bits, assert that it
 408                  * passes us zeroes for those we don't support.
 409                  */
 410                 if (features.features) {
 411                     fprintf(stderr, "Guest bug: features[%i]=%x (expected 0)\n",
 412                             features.index, features.features);
 413                     /* XXX: do a unit check here? */
 414                 }
 415             }
 416             sch->curr_status.scsw.count = ccw.count - sizeof(features);
 417             ret = 0;
 418         }
 419         break;
 420     case CCW_CMD_READ_CONF:
 421         if (check_len) {
 422             if (ccw.count > vdev->config_len) {
 423                 ret = -EINVAL;
 424                 break;
 425             }
 426         }
 427         len = MIN(ccw.count, vdev->config_len);
 428         if (!ccw.cda) {
 429             ret = -EFAULT;
 430         } else {
 431             virtio_bus_get_vdev_config(&dev->bus, vdev->config);
 432             /* XXX config space endianness */
 433             cpu_physical_memory_write(ccw.cda, vdev->config, len);
 434             sch->curr_status.scsw.count = ccw.count - len;
 435             ret = 0;
 436         }
 437         break;
 438     case CCW_CMD_WRITE_CONF:
 439         if (check_len) {
 440             if (ccw.count > vdev->config_len) {
 441                 ret = -EINVAL;
 442                 break;
 443             }
 444         }
 445         len = MIN(ccw.count, vdev->config_len);
 446         hw_len = len;
 447         if (!ccw.cda) {
 448             ret = -EFAULT;
 449         } else {
 450             config = cpu_physical_memory_map(ccw.cda, &hw_len, 0);
 451             if (!config) {
 452                 ret = -EFAULT;
 453             } else {
 454                 len = hw_len;
 455                 /* XXX config space endianness */
 456                 memcpy(vdev->config, config, len);
 457                 cpu_physical_memory_unmap(config, hw_len, 0, hw_len);
 458                 virtio_bus_set_vdev_config(&dev->bus, vdev->config);
 459                 sch->curr_status.scsw.count = ccw.count - len;
 460                 ret = 0;
 461             }
 462         }
 463         break;
 464     case CCW_CMD_WRITE_STATUS:
 465         if (check_len) {
 466             if (ccw.count != sizeof(status)) {
 467                 ret = -EINVAL;
 468                 break;
 469             }
 470         } else if (ccw.count < sizeof(status)) {
 471             /* Can't execute command. */
 472             ret = -EINVAL;
 473             break;
 474         }
 475         if (!ccw.cda) {
 476             ret = -EFAULT;
 477         } else {
 478             status = ldub_phys(&address_space_memory, ccw.cda);
 479             if (!(status & VIRTIO_CONFIG_S_DRIVER_OK)) {
 480                 virtio_ccw_stop_ioeventfd(dev);
 481             }
 482             virtio_set_status(vdev, status);
 483             if (vdev->status == 0) {
 484                 virtio_reset(vdev);
 485             }
 486             if (status & VIRTIO_CONFIG_S_DRIVER_OK) {
 487                 virtio_ccw_start_ioeventfd(dev);
 488             }
 489             sch->curr_status.scsw.count = ccw.count - sizeof(status);
 490             ret = 0;
 491         }
 492         break;
 493     case CCW_CMD_SET_IND:
 494         if (check_len) {
 495             if (ccw.count != sizeof(indicators)) {
 496                 ret = -EINVAL;
 497                 break;
 498             }
 499         } else if (ccw.count < sizeof(indicators)) {
 500             /* Can't execute command. */
 501             ret = -EINVAL;
 502             break;
 503         }
 504         if (sch->thinint_active) {
 505             /* Trigger a command reject. */
 506             ret = -ENOSYS;
 507             break;
 508         }
 509         if (!ccw.cda) {
 510             ret = -EFAULT;
 511         } else {
 512             indicators = ldq_phys(&address_space_memory, ccw.cda);
 513             dev->indicators = get_indicator(indicators, sizeof(uint64_t));
 514             sch->curr_status.scsw.count = ccw.count - sizeof(indicators);
 515             ret = 0;
 516         }
 517         break;
 518     case CCW_CMD_SET_CONF_IND:
 519         if (check_len) {
 520             if (ccw.count != sizeof(indicators)) {
 521                 ret = -EINVAL;
 522                 break;
 523             }
 524         } else if (ccw.count < sizeof(indicators)) {
 525             /* Can't execute command. */
 526             ret = -EINVAL;
 527             break;
 528         }
 529         if (!ccw.cda) {
 530             ret = -EFAULT;
 531         } else {
 532             indicators = ldq_phys(&address_space_memory, ccw.cda);
 533             dev->indicators2 = get_indicator(indicators, sizeof(uint64_t));
 534             sch->curr_status.scsw.count = ccw.count - sizeof(indicators);
 535             ret = 0;
 536         }
 537         break;
 538     case CCW_CMD_READ_VQ_CONF:
 539         if (check_len) {
 540             if (ccw.count != sizeof(vq_config)) {
 541                 ret = -EINVAL;
 542                 break;
 543             }
 544         } else if (ccw.count < sizeof(vq_config)) {
 545             /* Can't execute command. */
 546             ret = -EINVAL;
 547             break;
 548         }
 549         if (!ccw.cda) {
 550             ret = -EFAULT;
 551         } else {
 552             vq_config.index = lduw_phys(&address_space_memory, ccw.cda);
 553             vq_config.num_max = virtio_queue_get_num(vdev,
 554                                                      vq_config.index);
 555             stw_phys(&address_space_memory,
 556                      ccw.cda + sizeof(vq_config.index), vq_config.num_max);
 557             sch->curr_status.scsw.count = ccw.count - sizeof(vq_config);
 558             ret = 0;
 559         }
 560         break;
 561     case CCW_CMD_SET_IND_ADAPTER:
 562         if (check_len) {
 563             if (ccw.count != sizeof(*thinint)) {
 564                 ret = -EINVAL;
 565                 break;
 566             }
 567         } else if (ccw.count < sizeof(*thinint)) {
 568             /* Can't execute command. */
 569             ret = -EINVAL;
 570             break;
 571         }
 572         len = sizeof(*thinint);
 573         hw_len = len;
 574         if (!ccw.cda) {
 575             ret = -EFAULT;
 576         } else if (dev->indicators && !sch->thinint_active) {
 577             /* Trigger a command reject. */
 578             ret = -ENOSYS;
 579         } else {
 580             thinint = cpu_physical_memory_map(ccw.cda, &hw_len, 0);
 581             if (!thinint) {
 582                 ret = -EFAULT;
 583             } else {
 584                 len = hw_len;
 585                 dev->summary_indicator =
 586                     get_indicator(thinint->summary_indicator, sizeof(uint8_t));
 587                 dev->indicators = get_indicator(thinint->device_indicator,
 588                                                 thinint->ind_bit / 8 + 1);
 589                 dev->thinint_isc = thinint->isc;
 590                 dev->routes.adapter.ind_offset = thinint->ind_bit;
 591                 dev->routes.adapter.summary_offset = 7;
 592                 cpu_physical_memory_unmap(thinint, hw_len, 0, hw_len);
 593                 ret = css_register_io_adapter(CSS_IO_ADAPTER_VIRTIO,
 594                                               dev->thinint_isc, true, false,
 595                                               &dev->routes.adapter.adapter_id);
 596                 assert(ret == 0);
 597                 sch->thinint_active = ((dev->indicators != NULL) &&
 598                                        (dev->summary_indicator != NULL));
 599                 sch->curr_status.scsw.count = ccw.count - len;
 600                 ret = 0;
 601             }
 602         }
 603         break;
 604     default:
 605         ret = -ENOSYS;
 606         break;
 607     }
 608     return ret;
 609 }
 610
 611 static int virtio_ccw_device_init(VirtioCcwDevice *dev, VirtIODevice *vdev)
 612 {
 613     unsigned int cssid = 0;
 614     unsigned int ssid = 0;
 615     unsigned int schid;
 616     unsigned int devno;
 617     bool have_devno = false;
 618     bool found = false;
 619     SubchDev *sch;
 620     int ret;
 621     int num;
 622     DeviceState *parent = DEVICE(dev);
 623
 624     sch = g_malloc0(sizeof(SubchDev));
 625
 626     sch->driver_data = dev;
 627     dev->sch = sch;
 628
 629     dev->indicators = NULL;
 630
 631     /* Initialize subchannel structure. */
 632     sch->channel_prog = 0x0;
 633     sch->last_cmd_valid = false;
 634     sch->thinint_active = false;
 635     /*
 636      * Use a device number if provided. Otherwise, fall back to subchannel
 637      * number.
 638      */
 639     if (dev->bus_id) {
 640         num = sscanf(dev->bus_id, "%x.%x.%04x", &cssid, &ssid, &devno);
 641         if (num == 3) {
 642             if ((cssid > MAX_CSSID) || (ssid > MAX_SSID)) {
 643                 ret = -EINVAL;
 644                 error_report("Invalid cssid or ssid: cssid %x, ssid %x",
 645                              cssid, ssid);
 646                 goto out_err;
 647             }
 648             /* Enforce use of virtual cssid. */
 649             if (cssid != VIRTUAL_CSSID) {
 650                 ret = -EINVAL;
 651                 error_report("cssid %x not valid for virtio devices", cssid);
 652                 goto out_err;
 653             }
 654             if (css_devno_used(cssid, ssid, devno)) {
 655                 ret = -EEXIST;
 656                 error_report("Device %x.%x.%04x already exists", cssid, ssid,
 657                              devno);
 658                 goto out_err;
 659             }
 660             sch->cssid = cssid;
 661             sch->ssid = ssid;
 662             sch->devno = devno;
 663             have_devno = true;
 664         } else {
 665             ret = -EINVAL;
 666             error_report("Malformed devno parameter '%s'", dev->bus_id);
 667             goto out_err;
 668         }
 669     }
 670
 671     /* Find the next free id. */
 672     if (have_devno) {
 673         for (schid = 0; schid <= MAX_SCHID; schid++) {
 674             if (!css_find_subch(1, cssid, ssid, schid)) {
 675                 sch->schid = schid;
 676                 css_subch_assign(cssid, ssid, schid, devno, sch);
 677                 found = true;
 678                 break;
 679             }
 680         }
 681         if (!found) {
 682             ret = -ENODEV;
 683             error_report("No free subchannel found for %x.%x.%04x", cssid, ssid,
 684                          devno);
 685             goto out_err;
 686         }
 687         trace_virtio_ccw_new_device(cssid, ssid, schid, devno,
 688                                     "user-configured");
 689     } else {
 690         cssid = VIRTUAL_CSSID;
 691         for (ssid = 0; ssid <= MAX_SSID; ssid++) {
 692             for (schid = 0; schid <= MAX_SCHID; schid++) {
 693                 if (!css_find_subch(1, cssid, ssid, schid)) {
 694                     sch->cssid = cssid;
 695                     sch->ssid = ssid;
 696                     sch->schid = schid;
 697                     devno = schid;
 698                     /*
 699                      * If the devno is already taken, look further in this
 700                      * subchannel set.
 701                      */
 702                     while (css_devno_used(cssid, ssid, devno)) {
 703                         if (devno == MAX_SCHID) {
 704                             devno = 0;
 705                         } else if (devno == schid - 1) {
 706                             ret = -ENODEV;
 707                             error_report("No free devno found");
 708                             goto out_err;
 709                         } else {
 710                             devno++;
 711                         }
 712                     }
 713                     sch->devno = devno;
 714                     css_subch_assign(cssid, ssid, schid, devno, sch);
 715                     found = true;
 716                     break;
 717                 }
 718             }
 719             if (found) {
 720                 break;
 721             }
 722         }
 723         if (!found) {
 724             ret = -ENODEV;
 725             error_report("Virtual channel subsystem is full!");
 726             goto out_err;
 727         }
 728         trace_virtio_ccw_new_device(cssid, ssid, schid, devno,
 729                                     "auto-configured");
 730     }
 731
 732     /* Build initial schib. */
 733     css_sch_build_virtual_schib(sch, 0, VIRTIO_CCW_CHPID_TYPE);
 734
 735     sch->ccw_cb = virtio_ccw_cb;
 736
 737     /* Build senseid data. */
 738     memset(&sch->id, 0, sizeof(SenseId));
 739     sch->id.reserved = 0xff;
 740     sch->id.cu_type = VIRTIO_CCW_CU_TYPE;
 741     sch->id.cu_model = vdev->device_id;
 742
 743     /* Only the first 32 feature bits are used. */
 744     dev->host_features[0] = virtio_bus_get_vdev_features(&dev->bus,
 745                                                          dev->host_features[0]);
 746
 747     dev->host_features[0] |= 0x1 << VIRTIO_F_NOTIFY_ON_EMPTY;
 748     dev->host_features[0] |= 0x1 << VIRTIO_F_BAD_FEATURE;
 749
 750     css_generate_sch_crws(sch->cssid, sch->ssid, sch->schid,
 751                           parent->hotplugged, 1);
 752     return 0;
 753
 754 out_err:
 755     dev->sch = NULL;
 756     g_free(sch);
 757     return ret;
 758 }
 759
 760 static int virtio_ccw_exit(VirtioCcwDevice *dev)
 761 {
 762     SubchDev *sch = dev->sch;
 763
 764     if (sch) {
 765         css_subch_assign(sch->cssid, sch->ssid, sch->schid, sch->devno, NULL);
 766         g_free(sch);
 767     }
 768     if (dev->indicators) {
 769         release_indicator(&dev->routes.adapter, dev->indicators);
 770         dev->indicators = NULL;
 771     }
 772     return 0;
 773 }
 774
 775 static int virtio_ccw_net_init(VirtioCcwDevice *ccw_dev)
 776 {
 777     DeviceState *qdev = DEVICE(ccw_dev);
 778     VirtIONetCcw *dev = VIRTIO_NET_CCW(ccw_dev);
 779     DeviceState *vdev = DEVICE(&dev->vdev);
 780
 781     virtio_net_set_config_size(&dev->vdev, ccw_dev->host_features[0]);
 782     virtio_net_set_netclient_name(&dev->vdev, qdev->id,
 783                                   object_get_typename(OBJECT(qdev)));
 784     qdev_set_parent_bus(vdev, BUS(&ccw_dev->bus));
 785     if (qdev_init(vdev) < 0) {
 786         return -1;
 787     }
 788
 789     return virtio_ccw_device_init(ccw_dev, VIRTIO_DEVICE(vdev));
 790 }
 791
 792 static void virtio_ccw_net_instance_init(Object *obj)
 793 {
 794     VirtIONetCcw *dev = VIRTIO_NET_CCW(obj);
 795     object_initialize(&dev->vdev, sizeof(dev->vdev), TYPE_VIRTIO_NET);
 796     object_property_add_child(obj, "virtio-backend", OBJECT(&dev->vdev), NULL);
 797     object_unref(OBJECT(&dev->vdev));
 798     qdev_alias_all_properties(DEVICE(&dev->vdev), obj);
 799 }
 800
 801 static int virtio_ccw_blk_init(VirtioCcwDevice *ccw_dev)
 802 {
 803     VirtIOBlkCcw *dev = VIRTIO_BLK_CCW(ccw_dev);
 804     DeviceState *vdev = DEVICE(&dev->vdev);
 805     qdev_set_parent_bus(vdev, BUS(&ccw_dev->bus));
 806     if (qdev_init(vdev) < 0) {
 807         return -1;
 808     }
 809
 810     return virtio_ccw_device_init(ccw_dev, VIRTIO_DEVICE(vdev));
 811 }
 812
 813 static void virtio_ccw_blk_instance_init(Object *obj)
 814 {
 815     VirtIOBlkCcw *dev = VIRTIO_BLK_CCW(obj);
 816     object_initialize(&dev->vdev, sizeof(dev->vdev), TYPE_VIRTIO_BLK);
 817     object_property_add_child(obj, "virtio-backend", OBJECT(&dev->vdev), NULL);
 818     object_unref(OBJECT(&dev->vdev));
 819     qdev_alias_all_properties(DEVICE(&dev->vdev), obj);
 820     object_property_add_alias(obj, "iothread", OBJECT(&dev->vdev),"iothread",
 821                               &error_abort);
 822 }
 823
 824 static int virtio_ccw_serial_init(VirtioCcwDevice *ccw_dev)
 825 {
 826     VirtioSerialCcw *dev = VIRTIO_SERIAL_CCW(ccw_dev);
 827     DeviceState *vdev = DEVICE(&dev->vdev);
 828     DeviceState *proxy = DEVICE(ccw_dev);
 829     char *bus_name;
 830
 831     /*
 832      * For command line compatibility, this sets the virtio-serial-device bus
 833      * name as before.
 834      */
 835     if (proxy->id) {
 836         bus_name = g_strdup_printf("%s.0", proxy->id);
 837         virtio_device_set_child_bus_name(VIRTIO_DEVICE(vdev), bus_name);
 838         g_free(bus_name);
 839     }
 840
 841     qdev_set_parent_bus(vdev, BUS(&ccw_dev->bus));
 842     if (qdev_init(vdev) < 0) {
 843         return -1;
 844     }
 845
 846     return virtio_ccw_device_init(ccw_dev, VIRTIO_DEVICE(vdev));
 847 }
 848
 849
 850 static void virtio_ccw_serial_instance_init(Object *obj)
 851 {
 852     VirtioSerialCcw *dev = VIRTIO_SERIAL_CCW(obj);
 853     object_initialize(&dev->vdev, sizeof(dev->vdev), TYPE_VIRTIO_SERIAL);
 854     object_property_add_child(obj, "virtio-backend", OBJECT(&dev->vdev), NULL);
 855     qdev_alias_all_properties(DEVICE(&dev->vdev), obj);
 856     object_unref(OBJECT(&dev->vdev));
 857 }
 858
 859 static int virtio_ccw_balloon_init(VirtioCcwDevice *ccw_dev)
 860 {
 861     VirtIOBalloonCcw *dev = VIRTIO_BALLOON_CCW(ccw_dev);
 862     DeviceState *vdev = DEVICE(&dev->vdev);
 863
 864     qdev_set_parent_bus(vdev, BUS(&ccw_dev->bus));
 865     if (qdev_init(vdev) < 0) {
 866         return -1;
 867     }
 868
 869     return virtio_ccw_device_init(ccw_dev, VIRTIO_DEVICE(vdev));
 870 }
 871
 872 static void balloon_ccw_stats_get_all(Object *obj, struct Visitor *v,
 873                                       void *opaque, const char *name,
 874                                       Error **errp)
 875 {
 876     VirtIOBalloonCcw *dev = opaque;
 877     object_property_get(OBJECT(&dev->vdev), v, "guest-stats", errp);
 878 }
 879
 880 static void balloon_ccw_stats_get_poll_interval(Object *obj, struct Visitor *v,
 881                                                 void *opaque, const char *name,
 882                                                 Error **errp)
 883 {
 884     VirtIOBalloonCcw *dev = opaque;
 885     object_property_get(OBJECT(&dev->vdev), v, "guest-stats-polling-interval",
 886                         errp);
 887 }
 888
 889 static void balloon_ccw_stats_set_poll_interval(Object *obj, struct Visitor *v,
 890                                                 void *opaque, const char *name,
 891                                                 Error **errp)
 892 {
 893     VirtIOBalloonCcw *dev = opaque;
 894     object_property_set(OBJECT(&dev->vdev), v, "guest-stats-polling-interval",
 895                         errp);
 896 }
 897
 898 static void virtio_ccw_balloon_instance_init(Object *obj)
 899 {
 900     VirtIOBalloonCcw *dev = VIRTIO_BALLOON_CCW(obj);
 901     object_initialize(&dev->vdev, sizeof(dev->vdev), TYPE_VIRTIO_BALLOON);
 902     object_property_add_child(obj, "virtio-backend", OBJECT(&dev->vdev), NULL);
 903     object_unref(OBJECT(&dev->vdev));
 904     object_property_add(obj, "guest-stats", "guest statistics",
 905                         balloon_ccw_stats_get_all, NULL, NULL, dev, NULL);
 906
 907     object_property_add(obj, "guest-stats-polling-interval", "int",
 908                         balloon_ccw_stats_get_poll_interval,
 909                         balloon_ccw_stats_set_poll_interval,
 910                         NULL, dev, NULL);
 911 }
 912
 913 static int virtio_ccw_scsi_init(VirtioCcwDevice *ccw_dev)
 914 {
 915     VirtIOSCSICcw *dev = VIRTIO_SCSI_CCW(ccw_dev);
 916     DeviceState *vdev = DEVICE(&dev->vdev);
 917     DeviceState *qdev = DEVICE(ccw_dev);
 918     char *bus_name;
 919
 920     /*
 921      * For command line compatibility, this sets the virtio-scsi-device bus
 922      * name as before.
 923      */
 924     if (qdev->id) {
 925         bus_name = g_strdup_printf("%s.0", qdev->id);
 926         virtio_device_set_child_bus_name(VIRTIO_DEVICE(vdev), bus_name);
 927         g_free(bus_name);
 928     }
 929
 930     qdev_set_parent_bus(vdev, BUS(&ccw_dev->bus));
 931     if (qdev_init(vdev) < 0) {
 932         return -1;
 933     }
 934
 935     return virtio_ccw_device_init(ccw_dev, VIRTIO_DEVICE(vdev));
 936 }
 937
 938 static void virtio_ccw_scsi_instance_init(Object *obj)
 939 {
 940     VirtIOSCSICcw *dev = VIRTIO_SCSI_CCW(obj);
 941     object_initialize(&dev->vdev, sizeof(dev->vdev), TYPE_VIRTIO_SCSI);
 942     object_property_add_child(obj, "virtio-backend", OBJECT(&dev->vdev), NULL);
 943     object_unref(OBJECT(&dev->vdev));
 944     qdev_alias_all_properties(DEVICE(&dev->vdev), obj);
 945 }
 946
 947 #ifdef CONFIG_VHOST_SCSI
 948 static int vhost_ccw_scsi_init(VirtioCcwDevice *ccw_dev)
 949 {
 950     VHostSCSICcw *dev = VHOST_SCSI_CCW(ccw_dev);
 951     DeviceState *vdev = DEVICE(&dev->vdev);
 952
 953     qdev_set_parent_bus(vdev, BUS(&ccw_dev->bus));
 954     if (qdev_init(vdev) < 0) {
 955         return -1;
 956     }
 957
 958     return virtio_ccw_device_init(ccw_dev, VIRTIO_DEVICE(vdev));
 959 }
 960
 961 static void vhost_ccw_scsi_instance_init(Object *obj)
 962 {
 963     VHostSCSICcw *dev = VHOST_SCSI_CCW(obj);
 964     object_initialize(&dev->vdev, sizeof(dev->vdev), TYPE_VHOST_SCSI);
 965     object_property_add_child(obj, "virtio-backend", OBJECT(&dev->vdev), NULL);
 966     object_unref(OBJECT(&dev->vdev));
 967     qdev_alias_all_properties(DEVICE(&dev->vdev), obj);
 968 }
 969 #endif
 970
 971 static int virtio_ccw_rng_init(VirtioCcwDevice *ccw_dev)
 972 {
 973     VirtIORNGCcw *dev = VIRTIO_RNG_CCW(ccw_dev);
 974     DeviceState *vdev = DEVICE(&dev->vdev);
 975
 976     qdev_set_parent_bus(vdev, BUS(&ccw_dev->bus));
 977     if (qdev_init(vdev) < 0) {
 978         return -1;
 979     }
 980
 981     object_property_set_link(OBJECT(dev),
 982                              OBJECT(dev->vdev.conf.rng), "rng",
 983                              NULL);
 984
 985     return virtio_ccw_device_init(ccw_dev, VIRTIO_DEVICE(vdev));
 986 }
 987
 988 /* DeviceState to VirtioCcwDevice. Note: used on datapath,
 989  * be careful and test performance if you change this.
 990  */
 991 static inline VirtioCcwDevice *to_virtio_ccw_dev_fast(DeviceState *d)
 992 {
 993     return container_of(d, VirtioCcwDevice, parent_obj);
 994 }
 995
 996 static uint8_t virtio_set_ind_atomic(SubchDev *sch, uint64_t ind_loc,
 997                                      uint8_t to_be_set)
 998 {
 999     uint8_t ind_old, ind_new;
1000     hwaddr len = 1;
1001     uint8_t *ind_addr;
1002
1003     ind_addr = cpu_physical_memory_map(ind_loc, &len, 1);
1004     if (!ind_addr) {
1005         error_report("%s(%x.%x.%04x): unable to access indicator",
1006                      __func__, sch->cssid, sch->ssid, sch->schid);
1007         return -1;
1008     }
1009     do {
1010         ind_old = *ind_addr;
1011         ind_new = ind_old | to_be_set;
1012     } while (atomic_cmpxchg(ind_addr, ind_old, ind_new) != ind_old);
1013     cpu_physical_memory_unmap(ind_addr, len, 1, len);
1014
1015     return ind_old;
1016 }
1017
1018 static void virtio_ccw_notify(DeviceState *d, uint16_t vector)
1019 {
1020     VirtioCcwDevice *dev = to_virtio_ccw_dev_fast(d);
1021     SubchDev *sch = dev->sch;
1022     uint64_t indicators;
1023
1024     if (vector >= 128) {
1025         return;
1026     }
1027
1028     if (vector < VIRTIO_PCI_QUEUE_MAX) {
1029         if (!dev->indicators) {
1030             return;
1031         }
1032         if (sch->thinint_active) {
1033             /*
1034              * In the adapter interrupt case, indicators points to a
1035              * memory area that may be (way) larger than 64 bit and
1036              * ind_bit indicates the start of the indicators in a big
1037              * endian notation.
1038              */
1039             uint64_t ind_bit = dev->routes.adapter.ind_offset;
1040
1041             virtio_set_ind_atomic(sch, dev->indicators->addr +
1042                                   (ind_bit + vector) / 8,
1043                                   0x80 >> ((ind_bit + vector) % 8));
1044             if (!virtio_set_ind_atomic(sch, dev->summary_indicator->addr,
1045                                        0x01)) {
1046                 css_adapter_interrupt(dev->thinint_isc);
1047             }
1048         } else {
1049             indicators = ldq_phys(&address_space_memory, dev->indicators->addr);
1050             indicators |= 1ULL << vector;
1051             stq_phys(&address_space_memory, dev->indicators->addr, indicators);
1052             css_conditional_io_interrupt(sch);
1053         }
1054     } else {
1055         if (!dev->indicators2) {
1056             return;
1057         }
1058         vector = 0;
1059         indicators = ldq_phys(&address_space_memory, dev->indicators2->addr);
1060         indicators |= 1ULL << vector;
1061         stq_phys(&address_space_memory, dev->indicators2->addr, indicators);
1062         css_conditional_io_interrupt(sch);
1063     }
1064 }
1065
1066 static unsigned virtio_ccw_get_features(DeviceState *d)
1067 {
1068     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1069
1070     /* Only the first 32 feature bits are used. */
1071     return dev->host_features[0];
1072 }
1073
1074 static void virtio_ccw_reset(DeviceState *d)
1075 {
1076     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1077     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1078
1079     virtio_ccw_stop_ioeventfd(dev);
1080     virtio_reset(vdev);
1081     css_reset_sch(dev->sch);
1082     if (dev->indicators) {
1083         release_indicator(&dev->routes.adapter, dev->indicators);
1084         dev->indicators = NULL;
1085     }
1086     if (dev->indicators2) {
1087         release_indicator(&dev->routes.adapter, dev->indicators2);
1088         dev->indicators2 = NULL;
1089     }
1090     if (dev->summary_indicator) {
1091         release_indicator(&dev->routes.adapter, dev->summary_indicator);
1092         dev->summary_indicator = NULL;
1093     }
1094 }
1095
1096 static void virtio_ccw_vmstate_change(DeviceState *d, bool running)
1097 {
1098     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1099
1100     if (running) {
1101         virtio_ccw_start_ioeventfd(dev);
1102     } else {
1103         virtio_ccw_stop_ioeventfd(dev);
1104     }
1105 }
1106
1107 static bool virtio_ccw_query_guest_notifiers(DeviceState *d)
1108 {
1109     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1110
1111     return !!(dev->sch->curr_status.pmcw.flags & PMCW_FLAGS_MASK_ENA);
1112 }
1113
1114 static int virtio_ccw_set_host_notifier(DeviceState *d, int n, bool assign)
1115 {
1116     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1117
1118     /* Stop using the generic ioeventfd, we are doing eventfd handling
1119      * ourselves below */
1120     dev->ioeventfd_disabled = assign;
1121     if (assign) {
1122         virtio_ccw_stop_ioeventfd(dev);
1123     }
1124     return virtio_ccw_set_guest2host_notifier(dev, n, assign, false);
1125 }
1126
1127 static int virtio_ccw_get_mappings(VirtioCcwDevice *dev)
1128 {
1129     int r;
1130
1131     if (!dev->sch->thinint_active) {
1132         return -EINVAL;
1133     }
1134
1135     r = map_indicator(&dev->routes.adapter, dev->summary_indicator);
1136     if (r) {
1137         return r;
1138     }
1139     r = map_indicator(&dev->routes.adapter, dev->indicators);
1140     if (r) {
1141         return r;
1142     }
1143     dev->routes.adapter.summary_addr = dev->summary_indicator->map;
1144     dev->routes.adapter.ind_addr = dev->indicators->map;
1145
1146     return 0;
1147 }
1148
1149 static int virtio_ccw_setup_irqroutes(VirtioCcwDevice *dev, int nvqs)
1150 {
1151     int i;
1152     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1153     int ret;
1154     S390FLICState *fs = s390_get_flic();
1155     S390FLICStateClass *fsc = S390_FLIC_COMMON_GET_CLASS(fs);
1156
1157     ret = virtio_ccw_get_mappings(dev);
1158     if (ret) {
1159         return ret;
1160     }
1161     for (i = 0; i < nvqs; i++) {
1162         if (!virtio_queue_get_num(vdev, i)) {
1163             break;
1164         }
1165     }
1166     dev->routes.num_routes = i;
1167     return fsc->add_adapter_routes(fs, &dev->routes);
1168 }
1169
1170 static void virtio_ccw_release_irqroutes(VirtioCcwDevice *dev, int nvqs)
1171 {
1172     S390FLICState *fs = s390_get_flic();
1173     S390FLICStateClass *fsc = S390_FLIC_COMMON_GET_CLASS(fs);
1174
1175     fsc->release_adapter_routes(fs, &dev->routes);
1176 }
1177
1178 static int virtio_ccw_add_irqfd(VirtioCcwDevice *dev, int n)
1179 {
1180     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1181     VirtQueue *vq = virtio_get_queue(vdev, n);
1182     EventNotifier *notifier = virtio_queue_get_guest_notifier(vq);
1183
1184     return kvm_irqchip_add_irqfd_notifier(kvm_state, notifier, NULL,
1185                                           dev->routes.gsi[n]);
1186 }
1187
1188 static void virtio_ccw_remove_irqfd(VirtioCcwDevice *dev, int n)
1189 {
1190     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1191     VirtQueue *vq = virtio_get_queue(vdev, n);
1192     EventNotifier *notifier = virtio_queue_get_guest_notifier(vq);
1193     int ret;
1194
1195     ret = kvm_irqchip_remove_irqfd_notifier(kvm_state, notifier,
1196                                             dev->routes.gsi[n]);
1197     assert(ret == 0);
1198 }
1199
1200 static int virtio_ccw_set_guest_notifier(VirtioCcwDevice *dev, int n,
1201                                          bool assign, bool with_irqfd)
1202 {
1203     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1204     VirtQueue *vq = virtio_get_queue(vdev, n);
1205     EventNotifier *notifier = virtio_queue_get_guest_notifier(vq);
1206     VirtioDeviceClass *k = VIRTIO_DEVICE_GET_CLASS(vdev);
1207
1208     if (assign) {
1209         int r = event_notifier_init(notifier, 0);
1210
1211         if (r < 0) {
1212             return r;
1213         }
1214         virtio_queue_set_guest_notifier_fd_handler(vq, true, with_irqfd);
1215         if (with_irqfd) {
1216             r = virtio_ccw_add_irqfd(dev, n);
1217             if (r) {
1218                 virtio_queue_set_guest_notifier_fd_handler(vq, false,
1219                                                            with_irqfd);
1220                 return r;
1221             }
1222         }
1223         /*
1224          * We do not support individual masking for channel devices, so we
1225          * need to manually trigger any guest masking callbacks here.
1226          */
1227         if (k->guest_notifier_mask) {
1228             k->guest_notifier_mask(vdev, n, false);
1229         }
1230         /* get lost events and re-inject */
1231         if (k->guest_notifier_pending &&
1232             k->guest_notifier_pending(vdev, n)) {
1233             event_notifier_set(notifier);
1234         }
1235     } else {
1236         if (k->guest_notifier_mask) {
1237             k->guest_notifier_mask(vdev, n, true);
1238         }
1239         if (with_irqfd) {
1240             virtio_ccw_remove_irqfd(dev, n);
1241         }
1242         virtio_queue_set_guest_notifier_fd_handler(vq, false, with_irqfd);
1243         event_notifier_cleanup(notifier);
1244     }
1245     return 0;
1246 }
1247
1248 static int virtio_ccw_set_guest_notifiers(DeviceState *d, int nvqs,
1249                                           bool assigned)
1250 {
1251     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1252     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1253     bool with_irqfd = dev->sch->thinint_active && kvm_irqfds_enabled();
1254     int r, n;
1255
1256     if (with_irqfd && assigned) {
1257         /* irq routes need to be set up before assigning irqfds */
1258         r = virtio_ccw_setup_irqroutes(dev, nvqs);
1259         if (r < 0) {
1260             goto irqroute_error;
1261         }
1262     }
1263     for (n = 0; n < nvqs; n++) {
1264         if (!virtio_queue_get_num(vdev, n)) {
1265             break;
1266         }
1267         r = virtio_ccw_set_guest_notifier(dev, n, assigned, with_irqfd);
1268         if (r < 0) {
1269             goto assign_error;
1270         }
1271     }
1272     if (with_irqfd && !assigned) {
1273         /* release irq routes after irqfds have been released */
1274         virtio_ccw_release_irqroutes(dev, nvqs);
1275     }
1276     return 0;
1277
1278 assign_error:
1279     while (--n >= 0) {
1280         virtio_ccw_set_guest_notifier(dev, n, !assigned, false);
1281     }
1282 irqroute_error:
1283     if (with_irqfd && assigned) {
1284         virtio_ccw_release_irqroutes(dev, nvqs);
1285     }
1286     return r;
1287 }
1288
1289 static void virtio_ccw_save_queue(DeviceState *d, int n, QEMUFile *f)
1290 {
1291     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1292     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1293
1294     qemu_put_be16(f, virtio_queue_vector(vdev, n));
1295 }
1296
1297 static int virtio_ccw_load_queue(DeviceState *d, int n, QEMUFile *f)
1298 {
1299     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1300     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1301     uint16_t vector;
1302
1303     qemu_get_be16s(f, &vector);
1304     virtio_queue_set_vector(vdev, n , vector);
1305
1306     return 0;
1307 }
1308
1309 static void virtio_ccw_save_config(DeviceState *d, QEMUFile *f)
1310 {
1311     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1312     SubchDev *s = dev->sch;
1313
1314     subch_device_save(s, f);
1315     if (dev->indicators != NULL) {
1316         qemu_put_be32(f, dev->indicators->len);
1317         qemu_put_be64(f, dev->indicators->addr);
1318     } else {
1319         qemu_put_be32(f, 0);
1320         qemu_put_be64(f, 0UL);
1321     }
1322     if (dev->indicators2 != NULL) {
1323         qemu_put_be32(f, dev->indicators2->len);
1324         qemu_put_be64(f, dev->indicators2->addr);
1325     } else {
1326         qemu_put_be32(f, 0);
1327         qemu_put_be64(f, 0UL);
1328     }
1329     if (dev->summary_indicator != NULL) {
1330         qemu_put_be32(f, dev->summary_indicator->len);
1331         qemu_put_be64(f, dev->summary_indicator->addr);
1332     } else {
1333         qemu_put_be32(f, 0);
1334         qemu_put_be64(f, 0UL);
1335     }
1336     qemu_put_be64(f, dev->routes.adapter.ind_offset);
1337     qemu_put_byte(f, dev->thinint_isc);
1338 }
1339
1340 static int virtio_ccw_load_config(DeviceState *d, QEMUFile *f)
1341 {
1342     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1343     SubchDev *s = dev->sch;
1344     int len;
1345
1346     s->driver_data = dev;
1347     subch_device_load(s, f);
1348     len = qemu_get_be32(f);
1349     if (len != 0) {
1350         dev->indicators = get_indicator(qemu_get_be64(f), len);
1351     } else {
1352         qemu_get_be64(f);
1353         dev->indicators = NULL;
1354     }
1355     len = qemu_get_be32(f);
1356     if (len != 0) {
1357         dev->indicators2 = get_indicator(qemu_get_be64(f), len);
1358     } else {
1359         qemu_get_be64(f);
1360         dev->indicators2 = NULL;
1361     }
1362     len = qemu_get_be32(f);
1363     if (len != 0) {
1364         dev->summary_indicator = get_indicator(qemu_get_be64(f), len);
1365     } else {
1366         qemu_get_be64(f);
1367         dev->summary_indicator = NULL;
1368     }
1369     dev->routes.adapter.ind_offset = qemu_get_be64(f);
1370     dev->thinint_isc = qemu_get_byte(f);
1371     if (s->thinint_active) {
1372         return css_register_io_adapter(CSS_IO_ADAPTER_VIRTIO,
1373                                        dev->thinint_isc, true, false,
1374                                        &dev->routes.adapter.adapter_id);
1375     }
1376
1377     return 0;
1378 }
1379
1380 /**************** Virtio-ccw Bus Device Descriptions *******************/
1381
1382 static Property virtio_ccw_net_properties[] = {
1383     DEFINE_PROP_STRING("devno", VirtioCcwDevice, bus_id),
1384     DEFINE_VIRTIO_NET_FEATURES(VirtioCcwDevice, host_features[0]),
1385     DEFINE_PROP_BIT("ioeventfd", VirtioCcwDevice, flags,
1386                     VIRTIO_CCW_FLAG_USE_IOEVENTFD_BIT, true),
1387     DEFINE_PROP_END_OF_LIST(),
1388 };
1389
1390 static void virtio_ccw_net_class_init(ObjectClass *klass, void *data)
1391 {
1392     DeviceClass *dc = DEVICE_CLASS(klass);
1393     VirtIOCCWDeviceClass *k = VIRTIO_CCW_DEVICE_CLASS(klass);
1394
1395     k->init = virtio_ccw_net_init;
1396     k->exit = virtio_ccw_exit;
1397     dc->reset = virtio_ccw_reset;
1398     dc->props = virtio_ccw_net_properties;
1399 }
1400
1401 static const TypeInfo virtio_ccw_net = {
1402     .name          = TYPE_VIRTIO_NET_CCW,
1403     .parent        = TYPE_VIRTIO_CCW_DEVICE,
1404     .instance_size = sizeof(VirtIONetCcw),
1405     .instance_init = virtio_ccw_net_instance_init,
1406     .class_init    = virtio_ccw_net_class_init,
1407 };
1408
1409 static Property virtio_ccw_blk_properties[] = {
1410     DEFINE_PROP_STRING("devno", VirtioCcwDevice, bus_id),
1411     DEFINE_PROP_BIT("ioeventfd", VirtioCcwDevice, flags,
1412                     VIRTIO_CCW_FLAG_USE_IOEVENTFD_BIT, true),
1413     DEFINE_PROP_END_OF_LIST(),
1414 };
1415
1416 static void virtio_ccw_blk_class_init(ObjectClass *klass, void *data)
1417 {
1418     DeviceClass *dc = DEVICE_CLASS(klass);
1419     VirtIOCCWDeviceClass *k = VIRTIO_CCW_DEVICE_CLASS(klass);
1420
1421     k->init = virtio_ccw_blk_init;
1422     k->exit = virtio_ccw_exit;
1423     dc->reset = virtio_ccw_reset;
1424     dc->props = virtio_ccw_blk_properties;
1425 }
1426
1427 static const TypeInfo virtio_ccw_blk = {
1428     .name          = TYPE_VIRTIO_BLK_CCW,
1429     .parent        = TYPE_VIRTIO_CCW_DEVICE,
1430     .instance_size = sizeof(VirtIOBlkCcw),
1431     .instance_init = virtio_ccw_blk_instance_init,
1432     .class_init    = virtio_ccw_blk_class_init,
1433 };
1434
1435 static Property virtio_ccw_serial_properties[] = {
1436     DEFINE_PROP_STRING("devno", VirtioCcwDevice, bus_id),
1437     DEFINE_PROP_BIT("ioeventfd", VirtioCcwDevice, flags,
1438                     VIRTIO_CCW_FLAG_USE_IOEVENTFD_BIT, true),
1439     DEFINE_PROP_END_OF_LIST(),
1440 };
1441
1442 static void virtio_ccw_serial_class_init(ObjectClass *klass, void *data)
1443 {
1444     DeviceClass *dc = DEVICE_CLASS(klass);
1445     VirtIOCCWDeviceClass *k = VIRTIO_CCW_DEVICE_CLASS(klass);
1446
1447     k->init = virtio_ccw_serial_init;
1448     k->exit = virtio_ccw_exit;
1449     dc->reset = virtio_ccw_reset;
1450     dc->props = virtio_ccw_serial_properties;
1451 }
1452
1453 static const TypeInfo virtio_ccw_serial = {
1454     .name          = TYPE_VIRTIO_SERIAL_CCW,
1455     .parent        = TYPE_VIRTIO_CCW_DEVICE,
1456     .instance_size = sizeof(VirtioSerialCcw),
1457     .instance_init = virtio_ccw_serial_instance_init,
1458     .class_init    = virtio_ccw_serial_class_init,
1459 };
1460
1461 static Property virtio_ccw_balloon_properties[] = {
1462     DEFINE_PROP_STRING("devno", VirtioCcwDevice, bus_id),
1463     DEFINE_PROP_BIT("ioeventfd", VirtioCcwDevice, flags,
1464                     VIRTIO_CCW_FLAG_USE_IOEVENTFD_BIT, true),
1465     DEFINE_PROP_END_OF_LIST(),
1466 };
1467
1468 static void virtio_ccw_balloon_class_init(ObjectClass *klass, void *data)
1469 {
1470     DeviceClass *dc = DEVICE_CLASS(klass);
1471     VirtIOCCWDeviceClass *k = VIRTIO_CCW_DEVICE_CLASS(klass);
1472
1473     k->init = virtio_ccw_balloon_init;
1474     k->exit = virtio_ccw_exit;
1475     dc->reset = virtio_ccw_reset;
1476     dc->props = virtio_ccw_balloon_properties;
1477 }
1478
1479 static const TypeInfo virtio_ccw_balloon = {
1480     .name          = TYPE_VIRTIO_BALLOON_CCW,
1481     .parent        = TYPE_VIRTIO_CCW_DEVICE,
1482     .instance_size = sizeof(VirtIOBalloonCcw),
1483     .instance_init = virtio_ccw_balloon_instance_init,
1484     .class_init    = virtio_ccw_balloon_class_init,
1485 };
1486
1487 static Property virtio_ccw_scsi_properties[] = {
1488     DEFINE_PROP_STRING("devno", VirtioCcwDevice, bus_id),
1489     DEFINE_VIRTIO_SCSI_FEATURES(VirtioCcwDevice, host_features[0]),
1490     DEFINE_PROP_BIT("ioeventfd", VirtioCcwDevice, flags,
1491                     VIRTIO_CCW_FLAG_USE_IOEVENTFD_BIT, true),
1492     DEFINE_PROP_END_OF_LIST(),
1493 };
1494
1495 static void virtio_ccw_scsi_class_init(ObjectClass *klass, void *data)
1496 {
1497     DeviceClass *dc = DEVICE_CLASS(klass);
1498     VirtIOCCWDeviceClass *k = VIRTIO_CCW_DEVICE_CLASS(klass);
1499
1500     k->init = virtio_ccw_scsi_init;
1501     k->exit = virtio_ccw_exit;
1502     dc->reset = virtio_ccw_reset;
1503     dc->props = virtio_ccw_scsi_properties;
1504 }
1505
1506 static const TypeInfo virtio_ccw_scsi = {
1507     .name          = TYPE_VIRTIO_SCSI_CCW,
1508     .parent        = TYPE_VIRTIO_CCW_DEVICE,
1509     .instance_size = sizeof(VirtIOSCSICcw),
1510     .instance_init = virtio_ccw_scsi_instance_init,
1511     .class_init    = virtio_ccw_scsi_class_init,
1512 };
1513
1514 #ifdef CONFIG_VHOST_SCSI
1515 static Property vhost_ccw_scsi_properties[] = {
1516     DEFINE_PROP_STRING("devno", VirtioCcwDevice, bus_id),
1517     DEFINE_PROP_END_OF_LIST(),
1518 };
1519
1520 static void vhost_ccw_scsi_class_init(ObjectClass *klass, void *data)
1521 {
1522     DeviceClass *dc = DEVICE_CLASS(klass);
1523     VirtIOCCWDeviceClass *k = VIRTIO_CCW_DEVICE_CLASS(klass);
1524
1525     k->init = vhost_ccw_scsi_init;
1526     k->exit = virtio_ccw_exit;
1527     dc->reset = virtio_ccw_reset;
1528     dc->props = vhost_ccw_scsi_properties;
1529 }
1530
1531 static const TypeInfo vhost_ccw_scsi = {
1532     .name          = TYPE_VHOST_SCSI_CCW,
1533     .parent        = TYPE_VIRTIO_CCW_DEVICE,
1534     .instance_size = sizeof(VirtIOSCSICcw),
1535     .instance_init = vhost_ccw_scsi_instance_init,
1536     .class_init    = vhost_ccw_scsi_class_init,
1537 };
1538 #endif
1539
1540 static void virtio_ccw_rng_instance_init(Object *obj)
1541 {
1542     VirtIORNGCcw *dev = VIRTIO_RNG_CCW(obj);
1543     object_initialize(&dev->vdev, sizeof(dev->vdev), TYPE_VIRTIO_RNG);
1544     object_property_add_child(obj, "virtio-backend", OBJECT(&dev->vdev), NULL);
1545     qdev_alias_all_properties(DEVICE(&dev->vdev), obj);
1546     object_unref(OBJECT(&dev->vdev));
1547     object_property_add_link(obj, "rng", TYPE_RNG_BACKEND,
1548                              (Object **)&dev->vdev.conf.rng,
1549                              qdev_prop_allow_set_link_before_realize,
1550                              OBJ_PROP_LINK_UNREF_ON_RELEASE, NULL);
1551 }
1552
1553 static Property virtio_ccw_rng_properties[] = {
1554     DEFINE_PROP_STRING("devno", VirtioCcwDevice, bus_id),
1555     DEFINE_PROP_BIT("ioeventfd", VirtioCcwDevice, flags,
1556                     VIRTIO_CCW_FLAG_USE_IOEVENTFD_BIT, true),
1557     DEFINE_PROP_END_OF_LIST(),
1558 };
1559
1560 static void virtio_ccw_rng_class_init(ObjectClass *klass, void *data)
1561 {
1562     DeviceClass *dc = DEVICE_CLASS(klass);
1563     VirtIOCCWDeviceClass *k = VIRTIO_CCW_DEVICE_CLASS(klass);
1564
1565     k->init = virtio_ccw_rng_init;
1566     k->exit = virtio_ccw_exit;
1567     dc->reset = virtio_ccw_reset;
1568     dc->props = virtio_ccw_rng_properties;
1569 }
1570
1571 static const TypeInfo virtio_ccw_rng = {
1572     .name          = TYPE_VIRTIO_RNG_CCW,
1573     .parent        = TYPE_VIRTIO_CCW_DEVICE,
1574     .instance_size = sizeof(VirtIORNGCcw),
1575     .instance_init = virtio_ccw_rng_instance_init,
1576     .class_init    = virtio_ccw_rng_class_init,
1577 };
1578
1579 static int virtio_ccw_busdev_init(DeviceState *dev)
1580 {
1581     VirtioCcwDevice *_dev = (VirtioCcwDevice *)dev;
1582     VirtIOCCWDeviceClass *_info = VIRTIO_CCW_DEVICE_GET_CLASS(dev);
1583
1584     virtio_ccw_bus_new(&_dev->bus, sizeof(_dev->bus), _dev);
1585
1586     return _info->init(_dev);
1587 }
1588
1589 static int virtio_ccw_busdev_exit(DeviceState *dev)
1590 {
1591     VirtioCcwDevice *_dev = (VirtioCcwDevice *)dev;
1592     VirtIOCCWDeviceClass *_info = VIRTIO_CCW_DEVICE_GET_CLASS(dev);
1593
1594     return _info->exit(_dev);
1595 }
1596
1597 static int virtio_ccw_busdev_unplug(DeviceState *dev)
1598 {
1599     VirtioCcwDevice *_dev = (VirtioCcwDevice *)dev;
1600     SubchDev *sch = _dev->sch;
1601
1602     virtio_ccw_stop_ioeventfd(_dev);
1603
1604     /*
1605      * We should arrive here only for device_del, since we don't support
1606      * direct hot(un)plug of channels, but only through virtio.
1607      */
1608     assert(sch != NULL);
1609     /* Subchannel is now disabled and no longer valid. */
1610     sch->curr_status.pmcw.flags &= ~(PMCW_FLAGS_MASK_ENA |
1611                                      PMCW_FLAGS_MASK_DNV);
1612
1613     css_generate_sch_crws(sch->cssid, sch->ssid, sch->schid, 1, 0);
1614
1615     object_unparent(OBJECT(dev));
1616     return 0;
1617 }
1618
1619 static Property virtio_ccw_properties[] = {
1620     DEFINE_VIRTIO_COMMON_FEATURES(VirtioCcwDevice, host_features[0]),
1621     DEFINE_PROP_END_OF_LIST(),
1622 };
1623
1624 static void virtio_ccw_device_class_init(ObjectClass *klass, void *data)
1625 {
1626     DeviceClass *dc = DEVICE_CLASS(klass);
1627
1628     dc->props = virtio_ccw_properties;
1629     dc->init = virtio_ccw_busdev_init;
1630     dc->exit = virtio_ccw_busdev_exit;
1631     dc->unplug = virtio_ccw_busdev_unplug;
1632     dc->bus_type = TYPE_VIRTUAL_CSS_BUS;
1633
1634 }
1635
1636 static const TypeInfo virtio_ccw_device_info = {
1637     .name = TYPE_VIRTIO_CCW_DEVICE,
1638     .parent = TYPE_DEVICE,
1639     .instance_size = sizeof(VirtioCcwDevice),
1640     .class_init = virtio_ccw_device_class_init,
1641     .class_size = sizeof(VirtIOCCWDeviceClass),
1642     .abstract = true,
1643 };
1644
1645 /***************** Virtual-css Bus Bridge Device ********************/
1646 /* Only required to have the virtio bus as child in the system bus */
1647
1648 static int virtual_css_bridge_init(SysBusDevice *dev)
1649 {
1650     /* nothing */
1651     return 0;
1652 }
1653
1654 static void virtual_css_bridge_class_init(ObjectClass *klass, void *data)
1655 {
1656     SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass);
1657
1658     k->init = virtual_css_bridge_init;
1659 }
1660
1661 static const TypeInfo virtual_css_bridge_info = {
1662     .name          = "virtual-css-bridge",
1663     .parent        = TYPE_SYS_BUS_DEVICE,
1664     .instance_size = sizeof(SysBusDevice),
1665     .class_init    = virtual_css_bridge_class_init,
1666 };
1667
1668 /* virtio-ccw-bus */
1669
1670 static void virtio_ccw_bus_new(VirtioBusState *bus, size_t bus_size,
1671                                VirtioCcwDevice *dev)
1672 {
1673     DeviceState *qdev = DEVICE(dev);
1674     BusState *qbus;
1675     char virtio_bus_name[] = "virtio-bus";
1676
1677     qbus_create_inplace(bus, bus_size, TYPE_VIRTIO_CCW_BUS,
1678                         qdev, virtio_bus_name);
1679     qbus = BUS(bus);
1680     qbus->allow_hotplug = 1;
1681 }
1682
1683 static void virtio_ccw_bus_class_init(ObjectClass *klass, void *data)
1684 {
1685     VirtioBusClass *k = VIRTIO_BUS_CLASS(klass);
1686     BusClass *bus_class = BUS_CLASS(klass);
1687
1688     bus_class->max_dev = 1;
1689     k->notify = virtio_ccw_notify;
1690     k->get_features = virtio_ccw_get_features;
1691     k->vmstate_change = virtio_ccw_vmstate_change;
1692     k->query_guest_notifiers = virtio_ccw_query_guest_notifiers;
1693     k->set_host_notifier = virtio_ccw_set_host_notifier;
1694     k->set_guest_notifiers = virtio_ccw_set_guest_notifiers;
1695     k->save_queue = virtio_ccw_save_queue;
1696     k->load_queue = virtio_ccw_load_queue;
1697     k->save_config = virtio_ccw_save_config;
1698     k->load_config = virtio_ccw_load_config;
1699 }
1700
1701 static const TypeInfo virtio_ccw_bus_info = {
1702     .name = TYPE_VIRTIO_CCW_BUS,
1703     .parent = TYPE_VIRTIO_BUS,
1704     .instance_size = sizeof(VirtioCcwBusState),
1705     .class_init = virtio_ccw_bus_class_init,
1706 };
1707
1708 static void virtio_ccw_register(void)
1709 {
1710     type_register_static(&virtio_ccw_bus_info);
1711     type_register_static(&virtual_css_bus_info);
1712     type_register_static(&virtio_ccw_device_info);
1713     type_register_static(&virtio_ccw_serial);
1714     type_register_static(&virtio_ccw_blk);
1715     type_register_static(&virtio_ccw_net);
1716     type_register_static(&virtio_ccw_balloon);
1717     type_register_static(&virtio_ccw_scsi);
1718 #ifdef CONFIG_VHOST_SCSI
1719     type_register_static(&vhost_ccw_scsi);
1720 #endif
1721     type_register_static(&virtio_ccw_rng);
1722     type_register_static(&virtual_css_bridge_info);
1723 }
1724
1725 type_init(virtio_ccw_register)