target-s390x/kvm.c

   1 /*
   2  * QEMU S390x KVM implementation
   3  *
   4  * Copyright (c) 2009 Alexander Graf <agraf@suse.de>
   5  * Copyright IBM Corp. 2012
   6  *
   7  * This library is free software; you can redistribute it and/or
   8  * modify it under the terms of the GNU Lesser General Public
   9  * License as published by the Free Software Foundation; either
  10  * version 2 of the License, or (at your option) any later version.
  11  *
  12  * This library is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  15  * Lesser General Public License for more details.
  16  *
  17  * Contributions after 2012-10-29 are licensed under the terms of the
  18  * GNU GPL, version 2 or (at your option) any later version.
  19  *
  20  * You should have received a copy of the GNU (Lesser) General Public
  21  * License along with this library; if not, see <http://www.gnu.org/licenses/>.
  22  */
  23
  24 #include <sys/types.h>
  25 #include <sys/ioctl.h>
  26 #include <sys/mman.h>
  27
  28 #include <linux/kvm.h>
  29 #include <asm/ptrace.h>
  30
  31 #include "qemu-common.h"
  32 #include "qemu/timer.h"
  33 #include "sysemu/sysemu.h"
  34 #include "sysemu/kvm.h"
  35 #include "cpu.h"
  36 #include "sysemu/device_tree.h"
  37 #include "qapi/qmp/qjson.h"
  38 #include "monitor/monitor.h"
  39
  40 /* #define DEBUG_KVM */
  41
  42 #ifdef DEBUG_KVM
  43 #define DPRINTF(fmt, ...) \
  44     do { fprintf(stderr, fmt, ## __VA_ARGS__); } while (0)
  45 #else
  46 #define DPRINTF(fmt, ...) \
  47     do { } while (0)
  48 #endif
  49
  50 #define IPA0_DIAG                       0x8300
  51 #define IPA0_SIGP                       0xae00
  52 #define IPA0_B2                         0xb200
  53 #define IPA0_B9                         0xb900
  54 #define IPA0_EB                         0xeb00
  55
  56 #define PRIV_SCLP_CALL                  0x20
  57 #define PRIV_CSCH                       0x30
  58 #define PRIV_HSCH                       0x31
  59 #define PRIV_MSCH                       0x32
  60 #define PRIV_SSCH                       0x33
  61 #define PRIV_STSCH                      0x34
  62 #define PRIV_TSCH                       0x35
  63 #define PRIV_TPI                        0x36
  64 #define PRIV_SAL                        0x37
  65 #define PRIV_RSCH                       0x38
  66 #define PRIV_STCRW                      0x39
  67 #define PRIV_STCPS                      0x3a
  68 #define PRIV_RCHP                       0x3b
  69 #define PRIV_SCHM                       0x3c
  70 #define PRIV_CHSC                       0x5f
  71 #define PRIV_SIGA                       0x74
  72 #define PRIV_XSCH                       0x76
  73 #define PRIV_SQBS                       0x8a
  74 #define PRIV_EQBS                       0x9c
  75 #define DIAG_IPL                        0x308
  76 #define DIAG_KVM_HYPERCALL              0x500
  77 #define DIAG_KVM_BREAKPOINT             0x501
  78
  79 #define ICPT_INSTRUCTION                0x04
  80 #define ICPT_WAITPSW                    0x1c
  81 #define ICPT_SOFT_INTERCEPT             0x24
  82 #define ICPT_CPU_STOP                   0x28
  83 #define ICPT_IO                         0x40
  84
  85 const KVMCapabilityInfo kvm_arch_required_capabilities[] = {
  86     KVM_CAP_LAST_INFO
  87 };
  88
  89 static int cap_sync_regs;
  90
  91 static void *legacy_s390_alloc(size_t size);
  92
  93 int kvm_arch_init(KVMState *s)
  94 {
  95     cap_sync_regs = kvm_check_extension(s, KVM_CAP_SYNC_REGS);
  96     if (!kvm_check_extension(s, KVM_CAP_S390_GMAP)
  97         || !kvm_check_extension(s, KVM_CAP_S390_COW)) {
  98         phys_mem_set_alloc(legacy_s390_alloc);
  99     }
 100     return 0;
 101 }
 102
 103 unsigned long kvm_arch_vcpu_id(CPUState *cpu)
 104 {
 105     return cpu->cpu_index;
 106 }
 107
 108 int kvm_arch_init_vcpu(CPUState *cpu)
 109 {
 110     /* nothing todo yet */
 111     return 0;
 112 }
 113
 114 void kvm_arch_reset_vcpu(CPUState *cpu)
 115 {
 116     /* The initial reset call is needed here to reset in-kernel
 117      * vcpu data that we can't access directly from QEMU
 118      * (i.e. with older kernels which don't support sync_regs/ONE_REG).
 119      * Before this ioctl cpu_synchronize_state() is called in common kvm
 120      * code (kvm-all) */
 121     if (kvm_vcpu_ioctl(cpu, KVM_S390_INITIAL_RESET, NULL)) {
 122         perror("Can't reset vcpu\n");
 123     }
 124 }
 125
 126 int kvm_arch_put_registers(CPUState *cs, int level)
 127 {
 128     S390CPU *cpu = S390_CPU(cs);
 129     CPUS390XState *env = &cpu->env;
 130     struct kvm_one_reg reg;
 131     struct kvm_sregs sregs;
 132     struct kvm_regs regs;
 133     int ret;
 134     int i;
 135
 136     /* always save the PSW  and the GPRS*/
 137     cs->kvm_run->psw_addr = env->psw.addr;
 138     cs->kvm_run->psw_mask = env->psw.mask;
 139
 140     if (cap_sync_regs && cs->kvm_run->kvm_valid_regs & KVM_SYNC_GPRS) {
 141         for (i = 0; i < 16; i++) {
 142             cs->kvm_run->s.regs.gprs[i] = env->regs[i];
 143             cs->kvm_run->kvm_dirty_regs |= KVM_SYNC_GPRS;
 144         }
 145     } else {
 146         for (i = 0; i < 16; i++) {
 147             regs.gprs[i] = env->regs[i];
 148         }
 149         ret = kvm_vcpu_ioctl(cs, KVM_SET_REGS, &regs);
 150         if (ret < 0) {
 151             return ret;
 152         }
 153     }
 154
 155     /* Do we need to save more than that? */
 156     if (level == KVM_PUT_RUNTIME_STATE) {
 157         return 0;
 158     }
 159
 160     reg.id = KVM_REG_S390_CPU_TIMER;
 161     reg.addr = (__u64)&(env->cputm);
 162     ret = kvm_vcpu_ioctl(cs, KVM_SET_ONE_REG, &reg);
 163     if (ret < 0) {
 164         return ret;
 165     }
 166
 167     reg.id = KVM_REG_S390_CLOCK_COMP;
 168     reg.addr = (__u64)&(env->ckc);
 169     ret = kvm_vcpu_ioctl(cs, KVM_SET_ONE_REG, &reg);
 170     if (ret < 0) {
 171         return ret;
 172     }
 173
 174     reg.id = KVM_REG_S390_TODPR;
 175     reg.addr = (__u64)&(env->todpr);
 176     ret = kvm_vcpu_ioctl(cs, KVM_SET_ONE_REG, &reg);
 177     if (ret < 0) {
 178         return ret;
 179     }
 180
 181     if (cap_sync_regs &&
 182         cs->kvm_run->kvm_valid_regs & KVM_SYNC_ACRS &&
 183         cs->kvm_run->kvm_valid_regs & KVM_SYNC_CRS) {
 184         for (i = 0; i < 16; i++) {
 185             cs->kvm_run->s.regs.acrs[i] = env->aregs[i];
 186             cs->kvm_run->s.regs.crs[i] = env->cregs[i];
 187         }
 188         cs->kvm_run->kvm_dirty_regs |= KVM_SYNC_ACRS;
 189         cs->kvm_run->kvm_dirty_regs |= KVM_SYNC_CRS;
 190     } else {
 191         for (i = 0; i < 16; i++) {
 192             sregs.acrs[i] = env->aregs[i];
 193             sregs.crs[i] = env->cregs[i];
 194         }
 195         ret = kvm_vcpu_ioctl(cs, KVM_SET_SREGS, &sregs);
 196         if (ret < 0) {
 197             return ret;
 198         }
 199     }
 200
 201     /* Finally the prefix */
 202     if (cap_sync_regs && cs->kvm_run->kvm_valid_regs & KVM_SYNC_PREFIX) {
 203         cs->kvm_run->s.regs.prefix = env->psa;
 204         cs->kvm_run->kvm_dirty_regs |= KVM_SYNC_PREFIX;
 205     } else {
 206         /* prefix is only supported via sync regs */
 207     }
 208     return 0;
 209 }
 210
 211 int kvm_arch_get_registers(CPUState *cs)
 212 {
 213     S390CPU *cpu = S390_CPU(cs);
 214     CPUS390XState *env = &cpu->env;
 215     struct kvm_one_reg reg;
 216     struct kvm_sregs sregs;
 217     struct kvm_regs regs;
 218     int i, r;
 219
 220     /* get the PSW */
 221     env->psw.addr = cs->kvm_run->psw_addr;
 222     env->psw.mask = cs->kvm_run->psw_mask;
 223
 224     /* the GPRS */
 225     if (cap_sync_regs && cs->kvm_run->kvm_valid_regs & KVM_SYNC_GPRS) {
 226         for (i = 0; i < 16; i++) {
 227             env->regs[i] = cs->kvm_run->s.regs.gprs[i];
 228         }
 229     } else {
 230         r = kvm_vcpu_ioctl(cs, KVM_GET_REGS, &regs);
 231         if (r < 0) {
 232             return r;
 233         }
 234          for (i = 0; i < 16; i++) {
 235             env->regs[i] = regs.gprs[i];
 236         }
 237     }
 238
 239     /* The ACRS and CRS */
 240     if (cap_sync_regs &&
 241         cs->kvm_run->kvm_valid_regs & KVM_SYNC_ACRS &&
 242         cs->kvm_run->kvm_valid_regs & KVM_SYNC_CRS) {
 243         for (i = 0; i < 16; i++) {
 244             env->aregs[i] = cs->kvm_run->s.regs.acrs[i];
 245             env->cregs[i] = cs->kvm_run->s.regs.crs[i];
 246         }
 247     } else {
 248         r = kvm_vcpu_ioctl(cs, KVM_GET_SREGS, &sregs);
 249         if (r < 0) {
 250             return r;
 251         }
 252          for (i = 0; i < 16; i++) {
 253             env->aregs[i] = sregs.acrs[i];
 254             env->cregs[i] = sregs.crs[i];
 255         }
 256     }
 257
 258     /* The prefix */
 259     if (cap_sync_regs && cs->kvm_run->kvm_valid_regs & KVM_SYNC_PREFIX) {
 260         env->psa = cs->kvm_run->s.regs.prefix;
 261     }
 262
 263     /* One Regs */
 264     reg.id = KVM_REG_S390_CPU_TIMER;
 265     reg.addr = (__u64)&(env->cputm);
 266     r = kvm_vcpu_ioctl(cs, KVM_GET_ONE_REG, &reg);
 267     if (r < 0) {
 268         return r;
 269     }
 270
 271     reg.id = KVM_REG_S390_CLOCK_COMP;
 272     reg.addr = (__u64)&(env->ckc);
 273     r = kvm_vcpu_ioctl(cs, KVM_GET_ONE_REG, &reg);
 274     if (r < 0) {
 275         return r;
 276     }
 277
 278     reg.id = KVM_REG_S390_TODPR;
 279     reg.addr = (__u64)&(env->todpr);
 280     r = kvm_vcpu_ioctl(cs, KVM_GET_ONE_REG, &reg);
 281     if (r < 0) {
 282         return r;
 283     }
 284
 285     return 0;
 286 }
 287
 288 /*
 289  * Legacy layout for s390:
 290  * Older S390 KVM requires the topmost vma of the RAM to be
 291  * smaller than an system defined value, which is at least 256GB.
 292  * Larger systems have larger values. We put the guest between
 293  * the end of data segment (system break) and this value. We
 294  * use 32GB as a base to have enough room for the system break
 295  * to grow. We also have to use MAP parameters that avoid
 296  * read-only mapping of guest pages.
 297  */
 298 static void *legacy_s390_alloc(size_t size)
 299 {
 300     void *mem;
 301
 302     mem = mmap((void *) 0x800000000ULL, size,
 303                PROT_EXEC|PROT_READ|PROT_WRITE,
 304                MAP_SHARED | MAP_ANONYMOUS | MAP_FIXED, -1, 0);
 305     return mem == MAP_FAILED ? NULL : mem;
 306 }
 307
 308 int kvm_arch_insert_sw_breakpoint(CPUState *cs, struct kvm_sw_breakpoint *bp)
 309 {
 310     static const uint8_t diag_501[] = {0x83, 0x24, 0x05, 0x01};
 311
 312     if (cpu_memory_rw_debug(cs, bp->pc, (uint8_t *)&bp->saved_insn, 4, 0) ||
 313         cpu_memory_rw_debug(cs, bp->pc, (uint8_t *)diag_501, 4, 1)) {
 314         return -EINVAL;
 315     }
 316     return 0;
 317 }
 318
 319 int kvm_arch_remove_sw_breakpoint(CPUState *cs, struct kvm_sw_breakpoint *bp)
 320 {
 321     uint8_t t[4];
 322     static const uint8_t diag_501[] = {0x83, 0x24, 0x05, 0x01};
 323
 324     if (cpu_memory_rw_debug(cs, bp->pc, t, 4, 0)) {
 325         return -EINVAL;
 326     } else if (memcmp(t, diag_501, 4)) {
 327         return -EINVAL;
 328     } else if (cpu_memory_rw_debug(cs, bp->pc, (uint8_t *)&bp->saved_insn, 1, 1)) {
 329         return -EINVAL;
 330     }
 331
 332     return 0;
 333 }
 334
 335 void kvm_arch_pre_run(CPUState *cpu, struct kvm_run *run)
 336 {
 337 }
 338
 339 void kvm_arch_post_run(CPUState *cpu, struct kvm_run *run)
 340 {
 341 }
 342
 343 int kvm_arch_process_async_events(CPUState *cs)
 344 {
 345     return cs->halted;
 346 }
 347
 348 void kvm_s390_interrupt_internal(S390CPU *cpu, int type, uint32_t parm,
 349                                  uint64_t parm64, int vm)
 350 {
 351     CPUState *cs = CPU(cpu);
 352     struct kvm_s390_interrupt kvmint;
 353     int r;
 354
 355     if (!cs->kvm_state) {
 356         return;
 357     }
 358
 359     kvmint.type = type;
 360     kvmint.parm = parm;
 361     kvmint.parm64 = parm64;
 362
 363     if (vm) {
 364         r = kvm_vm_ioctl(cs->kvm_state, KVM_S390_INTERRUPT, &kvmint);
 365     } else {
 366         r = kvm_vcpu_ioctl(cs, KVM_S390_INTERRUPT, &kvmint);
 367     }
 368
 369     if (r < 0) {
 370         fprintf(stderr, "KVM failed to inject interrupt\n");
 371         exit(1);
 372     }
 373 }
 374
 375 void kvm_s390_virtio_irq(S390CPU *cpu, int config_change, uint64_t token)
 376 {
 377     kvm_s390_interrupt_internal(cpu, KVM_S390_INT_VIRTIO, config_change,
 378                                 token, 1);
 379 }
 380
 381 void kvm_s390_interrupt(S390CPU *cpu, int type, uint32_t code)
 382 {
 383     kvm_s390_interrupt_internal(cpu, type, code, 0, 0);
 384 }
 385
 386 static void enter_pgmcheck(S390CPU *cpu, uint16_t code)
 387 {
 388     kvm_s390_interrupt(cpu, KVM_S390_PROGRAM_INT, code);
 389 }
 390
 391 static int kvm_sclp_service_call(S390CPU *cpu, struct kvm_run *run,
 392                                  uint16_t ipbh0)
 393 {
 394     CPUS390XState *env = &cpu->env;
 395     uint32_t sccb;
 396     uint64_t code;
 397     int r = 0;
 398
 399     cpu_synchronize_state(CPU(cpu));
 400     if (env->psw.mask & PSW_MASK_PSTATE) {
 401         enter_pgmcheck(cpu, PGM_PRIVILEGED);
 402         return 0;
 403     }
 404     sccb = env->regs[ipbh0 & 0xf];
 405     code = env->regs[(ipbh0 & 0xf0) >> 4];
 406
 407     r = sclp_service_call(sccb, code);
 408     if (r < 0) {
 409         enter_pgmcheck(cpu, -r);
 410     }
 411     setcc(cpu, r);
 412
 413     return 0;
 414 }
 415
 416 static int kvm_handle_css_inst(S390CPU *cpu, struct kvm_run *run,
 417                                uint8_t ipa0, uint8_t ipa1, uint8_t ipb)
 418 {
 419     CPUS390XState *env = &cpu->env;
 420
 421     if (ipa0 != 0xb2) {
 422         /* Not handled for now. */
 423         return -1;
 424     }
 425
 426     cpu_synchronize_state(CPU(cpu));
 427
 428     switch (ipa1) {
 429     case PRIV_XSCH:
 430         ioinst_handle_xsch(cpu, env->regs[1]);
 431         break;
 432     case PRIV_CSCH:
 433         ioinst_handle_csch(cpu, env->regs[1]);
 434         break;
 435     case PRIV_HSCH:
 436         ioinst_handle_hsch(cpu, env->regs[1]);
 437         break;
 438     case PRIV_MSCH:
 439         ioinst_handle_msch(cpu, env->regs[1], run->s390_sieic.ipb);
 440         break;
 441     case PRIV_SSCH:
 442         ioinst_handle_ssch(cpu, env->regs[1], run->s390_sieic.ipb);
 443         break;
 444     case PRIV_STCRW:
 445         ioinst_handle_stcrw(cpu, run->s390_sieic.ipb);
 446         break;
 447     case PRIV_STSCH:
 448         ioinst_handle_stsch(cpu, env->regs[1], run->s390_sieic.ipb);
 449         break;
 450     case PRIV_TSCH:
 451         /* We should only get tsch via KVM_EXIT_S390_TSCH. */
 452         fprintf(stderr, "Spurious tsch intercept\n");
 453         break;
 454     case PRIV_CHSC:
 455         ioinst_handle_chsc(cpu, run->s390_sieic.ipb);
 456         break;
 457     case PRIV_TPI:
 458         /* This should have been handled by kvm already. */
 459         fprintf(stderr, "Spurious tpi intercept\n");
 460         break;
 461     case PRIV_SCHM:
 462         ioinst_handle_schm(cpu, env->regs[1], env->regs[2],
 463                            run->s390_sieic.ipb);
 464         break;
 465     case PRIV_RSCH:
 466         ioinst_handle_rsch(cpu, env->regs[1]);
 467         break;
 468     case PRIV_RCHP:
 469         ioinst_handle_rchp(cpu, env->regs[1]);
 470         break;
 471     case PRIV_STCPS:
 472         /* We do not provide this instruction, it is suppressed. */
 473         break;
 474     case PRIV_SAL:
 475         ioinst_handle_sal(cpu, env->regs[1]);
 476         break;
 477     case PRIV_SIGA:
 478         /* Not provided, set CC = 3 for subchannel not operational */
 479         setcc(cpu, 3);
 480         break;
 481     default:
 482         return -1;
 483     }
 484
 485     return 0;
 486 }
 487
 488 static int handle_priv(S390CPU *cpu, struct kvm_run *run,
 489                        uint8_t ipa0, uint8_t ipa1)
 490 {
 491     int r = 0;
 492     uint16_t ipbh0 = (run->s390_sieic.ipb & 0xffff0000) >> 16;
 493     uint8_t ipb = run->s390_sieic.ipb & 0xff;
 494
 495     DPRINTF("KVM: PRIV: %d\n", ipa1);
 496     switch (ipa1) {
 497         case PRIV_SCLP_CALL:
 498             r = kvm_sclp_service_call(cpu, run, ipbh0);
 499             break;
 500         default:
 501             r = kvm_handle_css_inst(cpu, run, ipa0, ipa1, ipb);
 502             if (r == -1) {
 503                 DPRINTF("KVM: unhandled PRIV: 0x%x\n", ipa1);
 504             }
 505             break;
 506     }
 507
 508     return r;
 509 }
 510
 511 static int handle_hypercall(S390CPU *cpu, struct kvm_run *run)
 512 {
 513     CPUS390XState *env = &cpu->env;
 514
 515     cpu_synchronize_state(CPU(cpu));
 516     env->regs[2] = s390_virtio_hypercall(env);
 517
 518     return 0;
 519 }
 520
 521 static void kvm_handle_diag_308(S390CPU *cpu, struct kvm_run *run)
 522 {
 523     uint64_t r1, r3;
 524
 525     cpu_synchronize_state(CPU(cpu));
 526     r1 = (run->s390_sieic.ipa & 0x00f0) >> 8;
 527     r3 = run->s390_sieic.ipa & 0x000f;
 528     handle_diag_308(&cpu->env, r1, r3);
 529 }
 530
 531 #define DIAG_KVM_CODE_MASK 0x000000000000ffff
 532
 533 static int handle_diag(S390CPU *cpu, struct kvm_run *run, uint32_t ipb)
 534 {
 535     int r = 0;
 536     uint16_t func_code;
 537
 538     /*
 539      * For any diagnose call we support, bits 48-63 of the resulting
 540      * address specify the function code; the remainder is ignored.
 541      */
 542     func_code = decode_basedisp_rs(&cpu->env, ipb) & DIAG_KVM_CODE_MASK;
 543     switch (func_code) {
 544     case DIAG_IPL:
 545         kvm_handle_diag_308(cpu, run);
 546         break;
 547     case DIAG_KVM_HYPERCALL:
 548         r = handle_hypercall(cpu, run);
 549         break;
 550     case DIAG_KVM_BREAKPOINT:
 551         sleep(10);
 552         break;
 553     default:
 554         DPRINTF("KVM: unknown DIAG: 0x%x\n", func_code);
 555         r = -1;
 556         break;
 557     }
 558
 559     return r;
 560 }
 561
 562 static int kvm_s390_cpu_start(S390CPU *cpu)
 563 {
 564     s390_add_running_cpu(cpu);
 565     qemu_cpu_kick(CPU(cpu));
 566     DPRINTF("DONE: KVM cpu start: %p\n", &cpu->env);
 567     return 0;
 568 }
 569
 570 int kvm_s390_cpu_restart(S390CPU *cpu)
 571 {
 572     kvm_s390_interrupt(cpu, KVM_S390_RESTART, 0);
 573     s390_add_running_cpu(cpu);
 574     qemu_cpu_kick(CPU(cpu));
 575     DPRINTF("DONE: KVM cpu restart: %p\n", &cpu->env);
 576     return 0;
 577 }
 578
 579 static int s390_cpu_initial_reset(S390CPU *cpu)
 580 {
 581     CPUState *cs = CPU(cpu);
 582     CPUS390XState *env = &cpu->env;
 583     int i;
 584
 585     s390_del_running_cpu(cpu);
 586     if (kvm_vcpu_ioctl(cs, KVM_S390_INITIAL_RESET, NULL) < 0) {
 587         perror("cannot init reset vcpu");
 588     }
 589
 590     /* Manually zero out all registers */
 591     cpu_synchronize_state(cs);
 592     for (i = 0; i < 16; i++) {
 593         env->regs[i] = 0;
 594     }
 595
 596     DPRINTF("DONE: SIGP initial reset: %p\n", env);
 597     return 0;
 598 }
 599
 600 #define SIGP_ORDER_MASK 0x000000ff
 601
 602 static int handle_sigp(S390CPU *cpu, struct kvm_run *run, uint8_t ipa1)
 603 {
 604     CPUS390XState *env = &cpu->env;
 605     uint8_t order_code;
 606     uint16_t cpu_addr;
 607     S390CPU *target_cpu;
 608     uint64_t *statusreg = &env->regs[ipa1 >> 4];
 609     int cc;
 610
 611     cpu_synchronize_state(CPU(cpu));
 612
 613     /* get order code */
 614     order_code = decode_basedisp_rs(env, run->s390_sieic.ipb) & SIGP_ORDER_MASK;
 615
 616     cpu_addr = env->regs[ipa1 & 0x0f];
 617     target_cpu = s390_cpu_addr2state(cpu_addr);
 618     if (target_cpu == NULL) {
 619         cc = 3;    /* not operational */
 620         goto out;
 621     }
 622
 623     switch (order_code) {
 624     case SIGP_START:
 625         cc = kvm_s390_cpu_start(target_cpu);
 626         break;
 627     case SIGP_RESTART:
 628         cc = kvm_s390_cpu_restart(target_cpu);
 629         break;
 630     case SIGP_SET_ARCH:
 631         /* make the caller panic */
 632         return -1;
 633     case SIGP_INITIAL_CPU_RESET:
 634         cc = s390_cpu_initial_reset(target_cpu);
 635         break;
 636     default:
 637         DPRINTF("KVM: unknown SIGP: 0x%x\n", order_code);
 638         *statusreg &= 0xffffffff00000000UL;
 639         *statusreg |= SIGP_STAT_INVALID_ORDER;
 640         cc = 1;   /* status stored */
 641         break;
 642     }
 643
 644 out:
 645     setcc(cpu, cc);
 646     return 0;
 647 }
 648
 649 static void handle_instruction(S390CPU *cpu, struct kvm_run *run)
 650 {
 651     unsigned int ipa0 = (run->s390_sieic.ipa & 0xff00);
 652     uint8_t ipa1 = run->s390_sieic.ipa & 0x00ff;
 653     int r = -1;
 654
 655     DPRINTF("handle_instruction 0x%x 0x%x\n",
 656             run->s390_sieic.ipa, run->s390_sieic.ipb);
 657     switch (ipa0) {
 658     case IPA0_B2:
 659     case IPA0_B9:
 660     case IPA0_EB:
 661         r = handle_priv(cpu, run, ipa0 >> 8, ipa1);
 662         break;
 663     case IPA0_DIAG:
 664         r = handle_diag(cpu, run, run->s390_sieic.ipb);
 665         break;
 666     case IPA0_SIGP:
 667         r = handle_sigp(cpu, run, ipa1);
 668         break;
 669     }
 670
 671     if (r < 0) {
 672         enter_pgmcheck(cpu, 0x0001);
 673     }
 674 }
 675
 676 static bool is_special_wait_psw(CPUState *cs)
 677 {
 678     /* signal quiesce */
 679     return cs->kvm_run->psw_addr == 0xfffUL;
 680 }
 681
 682 static int handle_intercept(S390CPU *cpu)
 683 {
 684     CPUState *cs = CPU(cpu);
 685     struct kvm_run *run = cs->kvm_run;
 686     int icpt_code = run->s390_sieic.icptcode;
 687     int r = 0;
 688
 689     DPRINTF("intercept: 0x%x (at 0x%lx)\n", icpt_code,
 690             (long)cs->kvm_run->psw_addr);
 691     switch (icpt_code) {
 692         case ICPT_INSTRUCTION:
 693             handle_instruction(cpu, run);
 694             break;
 695         case ICPT_WAITPSW:
 696             /* disabled wait, since enabled wait is handled in kernel */
 697             if (s390_del_running_cpu(cpu) == 0) {
 698                 if (is_special_wait_psw(cs)) {
 699                     qemu_system_shutdown_request();
 700                 } else {
 701                     QObject *data;
 702
 703                     data = qobject_from_jsonf("{ 'action': %s }", "pause");
 704                     monitor_protocol_event(QEVENT_GUEST_PANICKED, data);
 705                     qobject_decref(data);
 706                     vm_stop(RUN_STATE_GUEST_PANICKED);
 707                 }
 708             }
 709             r = EXCP_HALTED;
 710             break;
 711         case ICPT_CPU_STOP:
 712             if (s390_del_running_cpu(cpu) == 0) {
 713                 qemu_system_shutdown_request();
 714             }
 715             r = EXCP_HALTED;
 716             break;
 717         case ICPT_SOFT_INTERCEPT:
 718             fprintf(stderr, "KVM unimplemented icpt SOFT\n");
 719             exit(1);
 720             break;
 721         case ICPT_IO:
 722             fprintf(stderr, "KVM unimplemented icpt IO\n");
 723             exit(1);
 724             break;
 725         default:
 726             fprintf(stderr, "Unknown intercept code: %d\n", icpt_code);
 727             exit(1);
 728             break;
 729     }
 730
 731     return r;
 732 }
 733
 734 static int handle_tsch(S390CPU *cpu)
 735 {
 736     CPUS390XState *env = &cpu->env;
 737     CPUState *cs = CPU(cpu);
 738     struct kvm_run *run = cs->kvm_run;
 739     int ret;
 740
 741     cpu_synchronize_state(cs);
 742
 743     ret = ioinst_handle_tsch(env, env->regs[1], run->s390_tsch.ipb);
 744     if (ret >= 0) {
 745         /* Success; set condition code. */
 746         setcc(cpu, ret);
 747         ret = 0;
 748     } else if (ret < -1) {
 749         /*
 750          * Failure.
 751          * If an I/O interrupt had been dequeued, we have to reinject it.
 752          */
 753         if (run->s390_tsch.dequeued) {
 754             uint16_t subchannel_id = run->s390_tsch.subchannel_id;
 755             uint16_t subchannel_nr = run->s390_tsch.subchannel_nr;
 756             uint32_t io_int_parm = run->s390_tsch.io_int_parm;
 757             uint32_t io_int_word = run->s390_tsch.io_int_word;
 758             uint32_t type = ((subchannel_id & 0xff00) << 24) |
 759                 ((subchannel_id & 0x00060) << 22) | (subchannel_nr << 16);
 760
 761             kvm_s390_interrupt_internal(cpu, type,
 762                                         ((uint32_t)subchannel_id << 16)
 763                                         | subchannel_nr,
 764                                         ((uint64_t)io_int_parm << 32)
 765                                         | io_int_word, 1);
 766         }
 767         ret = 0;
 768     }
 769     return ret;
 770 }
 771
 772 int kvm_arch_handle_exit(CPUState *cs, struct kvm_run *run)
 773 {
 774     S390CPU *cpu = S390_CPU(cs);
 775     int ret = 0;
 776
 777     switch (run->exit_reason) {
 778         case KVM_EXIT_S390_SIEIC:
 779             ret = handle_intercept(cpu);
 780             break;
 781         case KVM_EXIT_S390_RESET:
 782             qemu_system_reset_request();
 783             break;
 784         case KVM_EXIT_S390_TSCH:
 785             ret = handle_tsch(cpu);
 786             break;
 787         default:
 788             fprintf(stderr, "Unknown KVM exit: %d\n", run->exit_reason);
 789             break;
 790     }
 791
 792     if (ret == 0) {
 793         ret = EXCP_INTERRUPT;
 794     }
 795     return ret;
 796 }
 797
 798 bool kvm_arch_stop_on_emulation_error(CPUState *cpu)
 799 {
 800     return true;
 801 }
 802
 803 int kvm_arch_on_sigbus_vcpu(CPUState *cpu, int code, void *addr)
 804 {
 805     return 1;
 806 }
 807
 808 int kvm_arch_on_sigbus(int code, void *addr)
 809 {
 810     return 1;
 811 }
 812
 813 void kvm_s390_io_interrupt(S390CPU *cpu, uint16_t subchannel_id,
 814                            uint16_t subchannel_nr, uint32_t io_int_parm,
 815                            uint32_t io_int_word)
 816 {
 817     uint32_t type;
 818
 819     type = ((subchannel_id & 0xff00) << 24) |
 820         ((subchannel_id & 0x00060) << 22) | (subchannel_nr << 16);
 821     kvm_s390_interrupt_internal(cpu, type,
 822                                 ((uint32_t)subchannel_id << 16) | subchannel_nr,
 823                                 ((uint64_t)io_int_parm << 32) | io_int_word, 1);
 824 }
 825
 826 void kvm_s390_crw_mchk(S390CPU *cpu)
 827 {
 828     kvm_s390_interrupt_internal(cpu, KVM_S390_MCHK, 1 << 28,
 829                                 0x00400f1d40330000, 1);
 830 }
 831
 832 void kvm_s390_enable_css_support(S390CPU *cpu)
 833 {
 834     struct kvm_enable_cap cap = {};
 835     int r;
 836
 837     /* Activate host kernel channel subsystem support. */
 838     cap.cap = KVM_CAP_S390_CSS_SUPPORT;
 839     r = kvm_vcpu_ioctl(CPU(cpu), KVM_ENABLE_CAP, &cap);
 840     assert(r == 0);
 841 }
 842
 843 void kvm_arch_init_irq_routing(KVMState *s)
 844 {
 845 }
 846
 847 int kvm_s390_assign_subch_ioeventfd(EventNotifier *notifier, uint32_t sch,
 848                                     int vq, bool assign)
 849 {
 850     struct kvm_ioeventfd kick = {
 851         .flags = KVM_IOEVENTFD_FLAG_VIRTIO_CCW_NOTIFY |
 852         KVM_IOEVENTFD_FLAG_DATAMATCH,
 853         .fd = event_notifier_get_fd(notifier),
 854         .datamatch = vq,
 855         .addr = sch,
 856         .len = 8,
 857     };
 858     if (!kvm_check_extension(kvm_state, KVM_CAP_IOEVENTFD)) {
 859         return -ENOSYS;
 860     }
 861     if (!assign) {
 862         kick.flags |= KVM_IOEVENTFD_FLAG_DEASSIGN;
 863     }
 864     return kvm_vm_ioctl(kvm_state, KVM_IOEVENTFD, &kick);
 865 }