2 * s390 PCI instructions
4 * Copyright 2014 IBM Corp.
5 * Author(s): Frank Blaschka <frank.blaschka@de.ibm.com>
6 * Hong Bo Li <lihbbj@cn.ibm.com>
7 * Yi Min Zhao <zyimin@cn.ibm.com>
9 * This work is licensed under the terms of the GNU GPL, version 2 or (at
10 * your option) any later version. See the COPYING file in the top-level
14 #include "qemu/osdep.h"
16 #include "exec/memop.h"
17 #include "exec/memory-internal.h"
18 #include "qemu/error-report.h"
19 #include "sysemu/hw_accel.h"
20 #include "hw/s390x/s390-pci-inst.h"
21 #include "hw/s390x/s390-pci-bus.h"
22 #include "hw/s390x/tod.h"
24 #ifndef DEBUG_S390PCI_INST
25 #define DEBUG_S390PCI_INST 0
28 #define DPRINTF(fmt, ...) \
30 if (DEBUG_S390PCI_INST) { \
31 fprintf(stderr, "s390pci-inst: " fmt, ## __VA_ARGS__); \
35 static inline void inc_dma_avail(S390PCIIOMMU
*iommu
)
37 if (iommu
->dma_limit
) {
38 iommu
->dma_limit
->avail
++;
42 static inline void dec_dma_avail(S390PCIIOMMU
*iommu
)
44 if (iommu
->dma_limit
) {
45 iommu
->dma_limit
->avail
--;
49 static void s390_set_status_code(CPUS390XState
*env
,
50 uint8_t r
, uint64_t status_code
)
52 env
->regs
[r
] &= ~0xff000000ULL
;
53 env
->regs
[r
] |= (status_code
& 0xff) << 24;
56 static int list_pci(ClpReqRspListPci
*rrb
, uint8_t *cc
)
58 S390PCIBusDevice
*pbdev
= NULL
;
59 S390pciState
*s
= s390_get_phb();
60 uint32_t res_code
, initial_l2
, g_l2
;
62 uint64_t resume_token
;
65 if (lduw_p(&rrb
->request
.hdr
.len
) != 32) {
66 res_code
= CLP_RC_LEN
;
71 if ((ldl_p(&rrb
->request
.fmt
) & CLP_MASK_FMT
) != 0) {
72 res_code
= CLP_RC_FMT
;
77 if ((ldl_p(&rrb
->request
.fmt
) & ~CLP_MASK_FMT
) != 0 ||
78 ldq_p(&rrb
->request
.reserved1
) != 0) {
79 res_code
= CLP_RC_RESNOT0
;
84 resume_token
= ldq_p(&rrb
->request
.resume_token
);
87 pbdev
= s390_pci_find_dev_by_idx(s
, resume_token
);
89 res_code
= CLP_RC_LISTPCI_BADRT
;
94 pbdev
= s390_pci_find_next_avail_dev(s
, NULL
);
97 if (lduw_p(&rrb
->response
.hdr
.len
) < 48) {
103 initial_l2
= lduw_p(&rrb
->response
.hdr
.len
);
104 if ((initial_l2
- LIST_PCI_HDR_LEN
) % sizeof(ClpFhListEntry
)
106 res_code
= CLP_RC_LEN
;
112 stl_p(&rrb
->response
.fmt
, 0);
113 stq_p(&rrb
->response
.reserved1
, 0);
114 stl_p(&rrb
->response
.mdd
, FH_MASK_SHM
);
115 stw_p(&rrb
->response
.max_fn
, PCI_MAX_FUNCTIONS
);
116 rrb
->response
.flags
= UID_CHECKING_ENABLED
;
117 rrb
->response
.entry_size
= sizeof(ClpFhListEntry
);
120 g_l2
= LIST_PCI_HDR_LEN
;
121 while (g_l2
< initial_l2
&& pbdev
) {
122 stw_p(&rrb
->response
.fh_list
[i
].device_id
,
123 pci_get_word(pbdev
->pdev
->config
+ PCI_DEVICE_ID
));
124 stw_p(&rrb
->response
.fh_list
[i
].vendor_id
,
125 pci_get_word(pbdev
->pdev
->config
+ PCI_VENDOR_ID
));
126 /* Ignore RESERVED devices. */
127 stl_p(&rrb
->response
.fh_list
[i
].config
,
128 pbdev
->state
== ZPCI_FS_STANDBY
? 0 : 1 << 31);
129 stl_p(&rrb
->response
.fh_list
[i
].fid
, pbdev
->fid
);
130 stl_p(&rrb
->response
.fh_list
[i
].fh
, pbdev
->fh
);
132 g_l2
+= sizeof(ClpFhListEntry
);
133 /* Add endian check for DPRINTF? */
134 DPRINTF("g_l2 %d vendor id 0x%x device id 0x%x fid 0x%x fh 0x%x\n",
136 lduw_p(&rrb
->response
.fh_list
[i
].vendor_id
),
137 lduw_p(&rrb
->response
.fh_list
[i
].device_id
),
138 ldl_p(&rrb
->response
.fh_list
[i
].fid
),
139 ldl_p(&rrb
->response
.fh_list
[i
].fh
));
140 pbdev
= s390_pci_find_next_avail_dev(s
, pbdev
);
147 resume_token
= pbdev
->fh
& FH_MASK_INDEX
;
149 stq_p(&rrb
->response
.resume_token
, resume_token
);
150 stw_p(&rrb
->response
.hdr
.len
, g_l2
);
151 stw_p(&rrb
->response
.hdr
.rsp
, CLP_RC_OK
);
154 DPRINTF("list pci failed rc 0x%x\n", rc
);
155 stw_p(&rrb
->response
.hdr
.rsp
, res_code
);
160 int clp_service_call(S390CPU
*cpu
, uint8_t r2
, uintptr_t ra
)
164 S390PCIBusDevice
*pbdev
;
167 uint8_t buffer
[4096 * 2];
169 CPUS390XState
*env
= &cpu
->env
;
170 S390pciState
*s
= s390_get_phb();
173 if (env
->psw
.mask
& PSW_MASK_PSTATE
) {
174 s390_program_interrupt(env
, PGM_PRIVILEGED
, ra
);
178 if (s390_cpu_virt_mem_read(cpu
, env
->regs
[r2
], r2
, buffer
, sizeof(*reqh
))) {
179 s390_cpu_virt_mem_handle_exc(cpu
, ra
);
182 reqh
= (ClpReqHdr
*)buffer
;
183 req_len
= lduw_p(&reqh
->len
);
184 if (req_len
< 16 || req_len
> 8184 || (req_len
% 8 != 0)) {
185 s390_program_interrupt(env
, PGM_OPERAND
, ra
);
189 if (s390_cpu_virt_mem_read(cpu
, env
->regs
[r2
], r2
, buffer
,
190 req_len
+ sizeof(*resh
))) {
191 s390_cpu_virt_mem_handle_exc(cpu
, ra
);
194 resh
= (ClpRspHdr
*)(buffer
+ req_len
);
195 res_len
= lduw_p(&resh
->len
);
196 if (res_len
< 8 || res_len
> 8176 || (res_len
% 8 != 0)) {
197 s390_program_interrupt(env
, PGM_OPERAND
, ra
);
200 if ((req_len
+ res_len
) > 8192) {
201 s390_program_interrupt(env
, PGM_OPERAND
, ra
);
205 if (s390_cpu_virt_mem_read(cpu
, env
->regs
[r2
], r2
, buffer
,
206 req_len
+ res_len
)) {
207 s390_cpu_virt_mem_handle_exc(cpu
, ra
);
212 stw_p(&resh
->rsp
, CLP_RC_LEN
);
216 switch (lduw_p(&reqh
->cmd
)) {
218 ClpReqRspListPci
*rrb
= (ClpReqRspListPci
*)buffer
;
222 case CLP_SET_PCI_FN
: {
223 ClpReqSetPci
*reqsetpci
= (ClpReqSetPci
*)reqh
;
224 ClpRspSetPci
*ressetpci
= (ClpRspSetPci
*)resh
;
226 pbdev
= s390_pci_find_dev_by_fh(s
, ldl_p(&reqsetpci
->fh
));
228 stw_p(&ressetpci
->hdr
.rsp
, CLP_RC_SETPCIFN_FH
);
232 switch (reqsetpci
->oc
) {
233 case CLP_SET_ENABLE_PCI_FN
:
234 switch (reqsetpci
->ndas
) {
236 stw_p(&ressetpci
->hdr
.rsp
, CLP_RC_SETPCIFN_DMAAS
);
241 stw_p(&ressetpci
->hdr
.rsp
, CLP_RC_SETPCIFN_RES
);
245 if (pbdev
->fh
& FH_MASK_ENABLE
) {
246 stw_p(&ressetpci
->hdr
.rsp
, CLP_RC_SETPCIFN_FHOP
);
250 pbdev
->fh
|= FH_MASK_ENABLE
;
251 pbdev
->state
= ZPCI_FS_ENABLED
;
252 stl_p(&ressetpci
->fh
, pbdev
->fh
);
253 stw_p(&ressetpci
->hdr
.rsp
, CLP_RC_OK
);
255 case CLP_SET_DISABLE_PCI_FN
:
256 if (!(pbdev
->fh
& FH_MASK_ENABLE
)) {
257 stw_p(&ressetpci
->hdr
.rsp
, CLP_RC_SETPCIFN_FHOP
);
260 device_legacy_reset(DEVICE(pbdev
));
261 pbdev
->fh
&= ~FH_MASK_ENABLE
;
262 pbdev
->state
= ZPCI_FS_DISABLED
;
263 stl_p(&ressetpci
->fh
, pbdev
->fh
);
264 stw_p(&ressetpci
->hdr
.rsp
, CLP_RC_OK
);
267 DPRINTF("unknown set pci command\n");
268 stw_p(&ressetpci
->hdr
.rsp
, CLP_RC_SETPCIFN_FHOP
);
273 case CLP_QUERY_PCI_FN
: {
274 ClpReqQueryPci
*reqquery
= (ClpReqQueryPci
*)reqh
;
275 ClpRspQueryPci
*resquery
= (ClpRspQueryPci
*)resh
;
277 pbdev
= s390_pci_find_dev_by_fh(s
, ldl_p(&reqquery
->fh
));
279 DPRINTF("query pci no pci dev\n");
280 stw_p(&resquery
->hdr
.rsp
, CLP_RC_SETPCIFN_FH
);
284 stq_p(&resquery
->sdma
, pbdev
->zpci_fn
.sdma
);
285 stq_p(&resquery
->edma
, pbdev
->zpci_fn
.edma
);
286 stw_p(&resquery
->pchid
, pbdev
->zpci_fn
.pchid
);
287 resquery
->flags
= pbdev
->zpci_fn
.flags
;
288 resquery
->pfgid
= pbdev
->zpci_fn
.pfgid
;
289 stl_p(&resquery
->fid
, pbdev
->zpci_fn
.fid
);
290 stl_p(&resquery
->uid
, pbdev
->zpci_fn
.uid
);
292 for (i
= 0; i
< PCI_BAR_COUNT
; i
++) {
293 uint32_t data
= pci_get_long(pbdev
->pdev
->config
+
294 PCI_BASE_ADDRESS_0
+ (i
* 4));
296 stl_p(&resquery
->bar
[i
], data
);
297 resquery
->bar_size
[i
] = pbdev
->pdev
->io_regions
[i
].size
?
298 ctz64(pbdev
->pdev
->io_regions
[i
].size
) : 0;
299 DPRINTF("bar %d addr 0x%x size 0x%" PRIx64
"barsize 0x%x\n", i
,
300 ldl_p(&resquery
->bar
[i
]),
301 pbdev
->pdev
->io_regions
[i
].size
,
302 resquery
->bar_size
[i
]);
305 stw_p(&resquery
->hdr
.rsp
, CLP_RC_OK
);
308 case CLP_QUERY_PCI_FNGRP
: {
309 ClpRspQueryPciGrp
*resgrp
= (ClpRspQueryPciGrp
*)resh
;
311 ClpReqQueryPciGrp
*reqgrp
= (ClpReqQueryPciGrp
*)reqh
;
314 group
= s390_group_find(reqgrp
->g
);
316 /* We do not allow access to unknown groups */
317 /* The group must have been obtained with a vfio device */
318 stw_p(&resgrp
->hdr
.rsp
, CLP_RC_QUERYPCIFG_PFGID
);
321 resgrp
->fr
= group
->zpci_group
.fr
;
322 stq_p(&resgrp
->dasm
, group
->zpci_group
.dasm
);
323 stq_p(&resgrp
->msia
, group
->zpci_group
.msia
);
324 stw_p(&resgrp
->mui
, group
->zpci_group
.mui
);
325 stw_p(&resgrp
->i
, group
->zpci_group
.i
);
326 stw_p(&resgrp
->maxstbl
, group
->zpci_group
.maxstbl
);
327 resgrp
->version
= group
->zpci_group
.version
;
328 stw_p(&resgrp
->hdr
.rsp
, CLP_RC_OK
);
332 DPRINTF("unknown clp command\n");
333 stw_p(&resh
->rsp
, CLP_RC_CMD
);
338 if (s390_cpu_virt_mem_write(cpu
, env
->regs
[r2
], r2
, buffer
,
339 req_len
+ res_len
)) {
340 s390_cpu_virt_mem_handle_exc(cpu
, ra
);
348 * Swap data contained in s390x big endian registers to little endian
351 * @ptr: a pointer to a uint64_t data field
352 * @len: the length of the valid data, must be 1,2,4 or 8
354 static int zpci_endian_swap(uint64_t *ptr
, uint8_t len
)
356 uint64_t data
= *ptr
;
362 data
= bswap16(data
);
365 data
= bswap32(data
);
368 data
= bswap64(data
);
377 static MemoryRegion
*s390_get_subregion(MemoryRegion
*mr
, uint64_t offset
,
380 MemoryRegion
*subregion
;
381 uint64_t subregion_size
;
383 QTAILQ_FOREACH(subregion
, &mr
->subregions
, subregions_link
) {
384 subregion_size
= int128_get64(subregion
->size
);
385 if ((offset
>= subregion
->addr
) &&
386 (offset
+ len
) <= (subregion
->addr
+ subregion_size
)) {
394 static MemTxResult
zpci_read_bar(S390PCIBusDevice
*pbdev
, uint8_t pcias
,
395 uint64_t offset
, uint64_t *data
, uint8_t len
)
399 mr
= pbdev
->pdev
->io_regions
[pcias
].memory
;
400 mr
= s390_get_subregion(mr
, offset
, len
);
402 return memory_region_dispatch_read(mr
, offset
, data
,
403 size_memop(len
) | MO_BE
,
404 MEMTXATTRS_UNSPECIFIED
);
407 int pcilg_service_call(S390CPU
*cpu
, uint8_t r1
, uint8_t r2
, uintptr_t ra
)
409 CPUS390XState
*env
= &cpu
->env
;
410 S390PCIBusDevice
*pbdev
;
418 if (env
->psw
.mask
& PSW_MASK_PSTATE
) {
419 s390_program_interrupt(env
, PGM_PRIVILEGED
, ra
);
424 s390_program_interrupt(env
, PGM_SPECIFICATION
, ra
);
428 fh
= env
->regs
[r2
] >> 32;
429 pcias
= (env
->regs
[r2
] >> 16) & 0xf;
430 len
= env
->regs
[r2
] & 0xf;
431 offset
= env
->regs
[r2
+ 1];
433 if (!(fh
& FH_MASK_ENABLE
)) {
434 setcc(cpu
, ZPCI_PCI_LS_INVAL_HANDLE
);
438 pbdev
= s390_pci_find_dev_by_fh(s390_get_phb(), fh
);
440 DPRINTF("pcilg no pci dev\n");
441 setcc(cpu
, ZPCI_PCI_LS_INVAL_HANDLE
);
445 switch (pbdev
->state
) {
446 case ZPCI_FS_PERMANENT_ERROR
:
448 setcc(cpu
, ZPCI_PCI_LS_ERR
);
449 s390_set_status_code(env
, r2
, ZPCI_PCI_ST_BLOCKED
);
456 case ZPCI_IO_BAR_MIN
...ZPCI_IO_BAR_MAX
:
457 if (!len
|| (len
> (8 - (offset
& 0x7)))) {
458 s390_program_interrupt(env
, PGM_OPERAND
, ra
);
461 result
= zpci_read_bar(pbdev
, pcias
, offset
, &data
, len
);
462 if (result
!= MEMTX_OK
) {
463 s390_program_interrupt(env
, PGM_OPERAND
, ra
);
467 case ZPCI_CONFIG_BAR
:
468 if (!len
|| (len
> (4 - (offset
& 0x3))) || len
== 3) {
469 s390_program_interrupt(env
, PGM_OPERAND
, ra
);
472 data
= pci_host_config_read_common(
473 pbdev
->pdev
, offset
, pci_config_size(pbdev
->pdev
), len
);
475 if (zpci_endian_swap(&data
, len
)) {
476 s390_program_interrupt(env
, PGM_OPERAND
, ra
);
481 DPRINTF("pcilg invalid space\n");
482 setcc(cpu
, ZPCI_PCI_LS_ERR
);
483 s390_set_status_code(env
, r2
, ZPCI_PCI_ST_INVAL_AS
);
487 pbdev
->fmb
.counter
[ZPCI_FMB_CNT_LD
]++;
489 env
->regs
[r1
] = data
;
490 setcc(cpu
, ZPCI_PCI_LS_OK
);
494 static MemTxResult
zpci_write_bar(S390PCIBusDevice
*pbdev
, uint8_t pcias
,
495 uint64_t offset
, uint64_t data
, uint8_t len
)
499 mr
= pbdev
->pdev
->io_regions
[pcias
].memory
;
500 mr
= s390_get_subregion(mr
, offset
, len
);
502 return memory_region_dispatch_write(mr
, offset
, data
,
503 size_memop(len
) | MO_BE
,
504 MEMTXATTRS_UNSPECIFIED
);
507 int pcistg_service_call(S390CPU
*cpu
, uint8_t r1
, uint8_t r2
, uintptr_t ra
)
509 CPUS390XState
*env
= &cpu
->env
;
510 uint64_t offset
, data
;
511 S390PCIBusDevice
*pbdev
;
517 if (env
->psw
.mask
& PSW_MASK_PSTATE
) {
518 s390_program_interrupt(env
, PGM_PRIVILEGED
, ra
);
523 s390_program_interrupt(env
, PGM_SPECIFICATION
, ra
);
527 fh
= env
->regs
[r2
] >> 32;
528 pcias
= (env
->regs
[r2
] >> 16) & 0xf;
529 len
= env
->regs
[r2
] & 0xf;
530 offset
= env
->regs
[r2
+ 1];
531 data
= env
->regs
[r1
];
533 if (!(fh
& FH_MASK_ENABLE
)) {
534 setcc(cpu
, ZPCI_PCI_LS_INVAL_HANDLE
);
538 pbdev
= s390_pci_find_dev_by_fh(s390_get_phb(), fh
);
540 DPRINTF("pcistg no pci dev\n");
541 setcc(cpu
, ZPCI_PCI_LS_INVAL_HANDLE
);
545 switch (pbdev
->state
) {
546 /* ZPCI_FS_RESERVED, ZPCI_FS_STANDBY and ZPCI_FS_DISABLED
547 * are already covered by the FH_MASK_ENABLE check above
549 case ZPCI_FS_PERMANENT_ERROR
:
551 setcc(cpu
, ZPCI_PCI_LS_ERR
);
552 s390_set_status_code(env
, r2
, ZPCI_PCI_ST_BLOCKED
);
559 /* A ZPCI PCI card may use any BAR from BAR 0 to BAR 5 */
560 case ZPCI_IO_BAR_MIN
...ZPCI_IO_BAR_MAX
:
562 * A length of 0 is invalid and length should not cross a double word
564 if (!len
|| (len
> (8 - (offset
& 0x7)))) {
565 s390_program_interrupt(env
, PGM_OPERAND
, ra
);
569 result
= zpci_write_bar(pbdev
, pcias
, offset
, data
, len
);
570 if (result
!= MEMTX_OK
) {
571 s390_program_interrupt(env
, PGM_OPERAND
, ra
);
575 case ZPCI_CONFIG_BAR
:
576 /* ZPCI uses the pseudo BAR number 15 as configuration space */
577 /* possible access lengths are 1,2,4 and must not cross a word */
578 if (!len
|| (len
> (4 - (offset
& 0x3))) || len
== 3) {
579 s390_program_interrupt(env
, PGM_OPERAND
, ra
);
582 /* len = 1,2,4 so we do not need to test */
583 zpci_endian_swap(&data
, len
);
584 pci_host_config_write_common(pbdev
->pdev
, offset
,
585 pci_config_size(pbdev
->pdev
),
589 DPRINTF("pcistg invalid space\n");
590 setcc(cpu
, ZPCI_PCI_LS_ERR
);
591 s390_set_status_code(env
, r2
, ZPCI_PCI_ST_INVAL_AS
);
595 pbdev
->fmb
.counter
[ZPCI_FMB_CNT_ST
]++;
597 setcc(cpu
, ZPCI_PCI_LS_OK
);
601 static uint32_t s390_pci_update_iotlb(S390PCIIOMMU
*iommu
,
602 S390IOTLBEntry
*entry
)
604 S390IOTLBEntry
*cache
= g_hash_table_lookup(iommu
->iotlb
, &entry
->iova
);
605 IOMMUTLBEvent event
= {
606 .type
= entry
->perm
? IOMMU_NOTIFIER_MAP
: IOMMU_NOTIFIER_UNMAP
,
608 .target_as
= &address_space_memory
,
610 .translated_addr
= entry
->translated_addr
,
612 .addr_mask
= ~PAGE_MASK
,
616 if (event
.type
== IOMMU_NOTIFIER_UNMAP
) {
620 g_hash_table_remove(iommu
->iotlb
, &entry
->iova
);
621 inc_dma_avail(iommu
);
624 if (cache
->perm
== entry
->perm
&&
625 cache
->translated_addr
== entry
->translated_addr
) {
629 event
.type
= IOMMU_NOTIFIER_UNMAP
;
630 event
.entry
.perm
= IOMMU_NONE
;
631 memory_region_notify_iommu(&iommu
->iommu_mr
, 0, event
);
632 event
.type
= IOMMU_NOTIFIER_MAP
;
633 event
.entry
.perm
= entry
->perm
;
636 cache
= g_new(S390IOTLBEntry
, 1);
637 cache
->iova
= entry
->iova
;
638 cache
->translated_addr
= entry
->translated_addr
;
639 cache
->len
= PAGE_SIZE
;
640 cache
->perm
= entry
->perm
;
641 g_hash_table_replace(iommu
->iotlb
, &cache
->iova
, cache
);
642 dec_dma_avail(iommu
);
645 memory_region_notify_iommu(&iommu
->iommu_mr
, 0, event
);
648 return iommu
->dma_limit
? iommu
->dma_limit
->avail
: 1;
651 int rpcit_service_call(S390CPU
*cpu
, uint8_t r1
, uint8_t r2
, uintptr_t ra
)
653 CPUS390XState
*env
= &cpu
->env
;
656 S390PCIBusDevice
*pbdev
;
658 S390IOTLBEntry entry
;
662 if (env
->psw
.mask
& PSW_MASK_PSTATE
) {
663 s390_program_interrupt(env
, PGM_PRIVILEGED
, ra
);
668 s390_program_interrupt(env
, PGM_SPECIFICATION
, ra
);
672 fh
= env
->regs
[r1
] >> 32;
673 start
= env
->regs
[r2
];
674 end
= start
+ env
->regs
[r2
+ 1];
676 pbdev
= s390_pci_find_dev_by_fh(s390_get_phb(), fh
);
678 DPRINTF("rpcit no pci dev\n");
679 setcc(cpu
, ZPCI_PCI_LS_INVAL_HANDLE
);
683 switch (pbdev
->state
) {
684 case ZPCI_FS_RESERVED
:
685 case ZPCI_FS_STANDBY
:
686 case ZPCI_FS_DISABLED
:
687 case ZPCI_FS_PERMANENT_ERROR
:
688 setcc(cpu
, ZPCI_PCI_LS_INVAL_HANDLE
);
691 setcc(cpu
, ZPCI_PCI_LS_ERR
);
692 s390_set_status_code(env
, r1
, ZPCI_MOD_ST_ERROR_RECOVER
);
698 iommu
= pbdev
->iommu
;
699 if (iommu
->dma_limit
) {
700 dma_avail
= iommu
->dma_limit
->avail
;
704 if (!iommu
->g_iota
) {
705 error
= ERR_EVENT_INVALAS
;
709 if (end
< iommu
->pba
|| start
> iommu
->pal
) {
710 error
= ERR_EVENT_OORANGE
;
714 while (start
< end
) {
715 error
= s390_guest_io_table_walk(iommu
->g_iota
, start
, &entry
);
721 while (entry
.iova
< start
&& entry
.iova
< end
&&
722 (dma_avail
> 0 || entry
.perm
== IOMMU_NONE
)) {
723 dma_avail
= s390_pci_update_iotlb(iommu
, &entry
);
724 entry
.iova
+= PAGE_SIZE
;
725 entry
.translated_addr
+= PAGE_SIZE
;
730 pbdev
->state
= ZPCI_FS_ERROR
;
731 setcc(cpu
, ZPCI_PCI_LS_ERR
);
732 s390_set_status_code(env
, r1
, ZPCI_PCI_ST_FUNC_IN_ERR
);
733 s390_pci_generate_error_event(error
, pbdev
->fh
, pbdev
->fid
, start
, 0);
735 pbdev
->fmb
.counter
[ZPCI_FMB_CNT_RPCIT
]++;
737 setcc(cpu
, ZPCI_PCI_LS_OK
);
739 /* vfio DMA mappings are exhausted, trigger a RPCIT */
740 setcc(cpu
, ZPCI_PCI_LS_ERR
);
741 s390_set_status_code(env
, r1
, ZPCI_RPCIT_ST_INSUFF_RES
);
747 int pcistb_service_call(S390CPU
*cpu
, uint8_t r1
, uint8_t r3
, uint64_t gaddr
,
748 uint8_t ar
, uintptr_t ra
)
750 CPUS390XState
*env
= &cpu
->env
;
751 S390PCIBusDevice
*pbdev
;
761 if (env
->psw
.mask
& PSW_MASK_PSTATE
) {
762 s390_program_interrupt(env
, PGM_PRIVILEGED
, ra
);
766 fh
= env
->regs
[r1
] >> 32;
767 pcias
= (env
->regs
[r1
] >> 16) & 0xf;
768 len
= env
->regs
[r1
] & 0x1fff;
769 offset
= env
->regs
[r3
];
771 if (!(fh
& FH_MASK_ENABLE
)) {
772 setcc(cpu
, ZPCI_PCI_LS_INVAL_HANDLE
);
776 pbdev
= s390_pci_find_dev_by_fh(s390_get_phb(), fh
);
778 DPRINTF("pcistb no pci dev fh 0x%x\n", fh
);
779 setcc(cpu
, ZPCI_PCI_LS_INVAL_HANDLE
);
783 switch (pbdev
->state
) {
784 case ZPCI_FS_PERMANENT_ERROR
:
786 setcc(cpu
, ZPCI_PCI_LS_ERR
);
787 s390_set_status_code(env
, r1
, ZPCI_PCI_ST_BLOCKED
);
793 if (pcias
> ZPCI_IO_BAR_MAX
) {
794 DPRINTF("pcistb invalid space\n");
795 setcc(cpu
, ZPCI_PCI_LS_ERR
);
796 s390_set_status_code(env
, r1
, ZPCI_PCI_ST_INVAL_AS
);
800 /* Verify the address, offset and length */
801 /* offset must be a multiple of 8 */
803 goto specification_error
;
805 /* Length must be greater than 8, a multiple of 8 */
806 /* and not greater than maxstbl */
807 if ((len
<= 8) || (len
% 8) ||
808 (len
> pbdev
->pci_group
->zpci_group
.maxstbl
)) {
809 goto specification_error
;
811 /* Do not cross a 4K-byte boundary */
812 if (((offset
& 0xfff) + len
) > 0x1000) {
813 goto specification_error
;
815 /* Guest address must be double word aligned */
816 if (gaddr
& 0x07UL
) {
817 goto specification_error
;
820 mr
= pbdev
->pdev
->io_regions
[pcias
].memory
;
821 mr
= s390_get_subregion(mr
, offset
, len
);
824 for (i
= 0; i
< len
; i
+= 8) {
825 if (!memory_region_access_valid(mr
, offset
+ i
, 8, true,
826 MEMTXATTRS_UNSPECIFIED
)) {
827 s390_program_interrupt(env
, PGM_OPERAND
, ra
);
832 if (s390_cpu_virt_mem_read(cpu
, gaddr
, ar
, buffer
, len
)) {
833 s390_cpu_virt_mem_handle_exc(cpu
, ra
);
837 for (i
= 0; i
< len
/ 8; i
++) {
838 result
= memory_region_dispatch_write(mr
, offset
+ i
* 8,
839 ldq_p(buffer
+ i
* 8),
840 MO_64
, MEMTXATTRS_UNSPECIFIED
);
841 if (result
!= MEMTX_OK
) {
842 s390_program_interrupt(env
, PGM_OPERAND
, ra
);
847 pbdev
->fmb
.counter
[ZPCI_FMB_CNT_STB
]++;
849 setcc(cpu
, ZPCI_PCI_LS_OK
);
853 s390_program_interrupt(env
, PGM_SPECIFICATION
, ra
);
857 static int reg_irqs(CPUS390XState
*env
, S390PCIBusDevice
*pbdev
, ZpciFib fib
)
860 uint8_t isc
= FIB_DATA_ISC(ldl_p(&fib
.data
));
862 pbdev
->routes
.adapter
.adapter_id
= css_get_adapter_id(
863 CSS_IO_ADAPTER_PCI
, isc
);
864 pbdev
->summary_ind
= get_indicator(ldq_p(&fib
.aisb
), sizeof(uint64_t));
865 len
= BITS_TO_LONGS(FIB_DATA_NOI(ldl_p(&fib
.data
))) * sizeof(unsigned long);
866 pbdev
->indicator
= get_indicator(ldq_p(&fib
.aibv
), len
);
868 ret
= map_indicator(&pbdev
->routes
.adapter
, pbdev
->summary_ind
);
873 ret
= map_indicator(&pbdev
->routes
.adapter
, pbdev
->indicator
);
878 pbdev
->routes
.adapter
.summary_addr
= ldq_p(&fib
.aisb
);
879 pbdev
->routes
.adapter
.summary_offset
= FIB_DATA_AISBO(ldl_p(&fib
.data
));
880 pbdev
->routes
.adapter
.ind_addr
= ldq_p(&fib
.aibv
);
881 pbdev
->routes
.adapter
.ind_offset
= FIB_DATA_AIBVO(ldl_p(&fib
.data
));
883 pbdev
->noi
= FIB_DATA_NOI(ldl_p(&fib
.data
));
884 pbdev
->sum
= FIB_DATA_SUM(ldl_p(&fib
.data
));
886 DPRINTF("reg_irqs adapter id %d\n", pbdev
->routes
.adapter
.adapter_id
);
889 release_indicator(&pbdev
->routes
.adapter
, pbdev
->summary_ind
);
890 release_indicator(&pbdev
->routes
.adapter
, pbdev
->indicator
);
891 pbdev
->summary_ind
= NULL
;
892 pbdev
->indicator
= NULL
;
896 int pci_dereg_irqs(S390PCIBusDevice
*pbdev
)
898 release_indicator(&pbdev
->routes
.adapter
, pbdev
->summary_ind
);
899 release_indicator(&pbdev
->routes
.adapter
, pbdev
->indicator
);
901 pbdev
->summary_ind
= NULL
;
902 pbdev
->indicator
= NULL
;
903 pbdev
->routes
.adapter
.summary_addr
= 0;
904 pbdev
->routes
.adapter
.summary_offset
= 0;
905 pbdev
->routes
.adapter
.ind_addr
= 0;
906 pbdev
->routes
.adapter
.ind_offset
= 0;
911 DPRINTF("dereg_irqs adapter id %d\n", pbdev
->routes
.adapter
.adapter_id
);
915 static int reg_ioat(CPUS390XState
*env
, S390PCIIOMMU
*iommu
, ZpciFib fib
,
918 uint64_t pba
= ldq_p(&fib
.pba
);
919 uint64_t pal
= ldq_p(&fib
.pal
);
920 uint64_t g_iota
= ldq_p(&fib
.iota
);
921 uint8_t dt
= (g_iota
>> 2) & 0x7;
922 uint8_t t
= (g_iota
>> 11) & 0x1;
926 if (pba
> pal
|| pba
< ZPCI_SDMA_ADDR
|| pal
> ZPCI_EDMA_ADDR
) {
927 s390_program_interrupt(env
, PGM_OPERAND
, ra
);
931 /* currently we only support designation type 1 with translation */
932 if (!(dt
== ZPCI_IOTA_RTTO
&& t
)) {
933 error_report("unsupported ioat dt %d t %d", dt
, t
);
934 s390_program_interrupt(env
, PGM_OPERAND
, ra
);
940 iommu
->g_iota
= g_iota
;
942 s390_pci_iommu_enable(iommu
);
947 void pci_dereg_ioat(S390PCIIOMMU
*iommu
)
949 s390_pci_iommu_disable(iommu
);
955 void fmb_timer_free(S390PCIBusDevice
*pbdev
)
957 if (pbdev
->fmb_timer
) {
958 timer_free(pbdev
->fmb_timer
);
959 pbdev
->fmb_timer
= NULL
;
962 memset(&pbdev
->fmb
, 0, sizeof(ZpciFmb
));
965 static int fmb_do_update(S390PCIBusDevice
*pbdev
, int offset
, uint64_t val
,
969 uint64_t dst
= pbdev
->fmb_addr
+ offset
;
973 address_space_stq_be(&address_space_memory
, dst
, val
,
974 MEMTXATTRS_UNSPECIFIED
,
978 address_space_stl_be(&address_space_memory
, dst
, val
,
979 MEMTXATTRS_UNSPECIFIED
,
983 address_space_stw_be(&address_space_memory
, dst
, val
,
984 MEMTXATTRS_UNSPECIFIED
,
988 address_space_stb(&address_space_memory
, dst
, val
,
989 MEMTXATTRS_UNSPECIFIED
,
996 if (ret
!= MEMTX_OK
) {
997 s390_pci_generate_error_event(ERR_EVENT_FMBA
, pbdev
->fh
, pbdev
->fid
,
999 fmb_timer_free(pbdev
);
1005 static void fmb_update(void *opaque
)
1007 S390PCIBusDevice
*pbdev
= opaque
;
1008 int64_t t
= qemu_clock_get_ms(QEMU_CLOCK_VIRTUAL
);
1012 pbdev
->fmb
.last_update
*= 2;
1013 pbdev
->fmb
.last_update
|= UPDATE_U_BIT
;
1014 if (fmb_do_update(pbdev
, offsetof(ZpciFmb
, last_update
),
1015 pbdev
->fmb
.last_update
,
1016 sizeof(pbdev
->fmb
.last_update
))) {
1020 /* Update FMB sample count */
1021 if (fmb_do_update(pbdev
, offsetof(ZpciFmb
, sample
),
1022 pbdev
->fmb
.sample
++,
1023 sizeof(pbdev
->fmb
.sample
))) {
1027 /* Update FMB counters */
1028 for (i
= 0; i
< ZPCI_FMB_CNT_MAX
; i
++) {
1029 if (fmb_do_update(pbdev
, offsetof(ZpciFmb
, counter
[i
]),
1030 pbdev
->fmb
.counter
[i
],
1031 sizeof(pbdev
->fmb
.counter
[0]))) {
1036 /* Clear U bit and update the time */
1037 pbdev
->fmb
.last_update
= time2tod(qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL
));
1038 pbdev
->fmb
.last_update
*= 2;
1039 if (fmb_do_update(pbdev
, offsetof(ZpciFmb
, last_update
),
1040 pbdev
->fmb
.last_update
,
1041 sizeof(pbdev
->fmb
.last_update
))) {
1044 timer_mod(pbdev
->fmb_timer
, t
+ DEFAULT_MUI
);
1047 int mpcifc_service_call(S390CPU
*cpu
, uint8_t r1
, uint64_t fiba
, uint8_t ar
,
1050 CPUS390XState
*env
= &cpu
->env
;
1054 S390PCIBusDevice
*pbdev
;
1055 uint64_t cc
= ZPCI_PCI_LS_OK
;
1057 if (env
->psw
.mask
& PSW_MASK_PSTATE
) {
1058 s390_program_interrupt(env
, PGM_PRIVILEGED
, ra
);
1062 oc
= env
->regs
[r1
] & 0xff;
1063 dmaas
= (env
->regs
[r1
] >> 16) & 0xff;
1064 fh
= env
->regs
[r1
] >> 32;
1067 s390_program_interrupt(env
, PGM_SPECIFICATION
, ra
);
1071 pbdev
= s390_pci_find_dev_by_fh(s390_get_phb(), fh
);
1073 DPRINTF("mpcifc no pci dev fh 0x%x\n", fh
);
1074 setcc(cpu
, ZPCI_PCI_LS_INVAL_HANDLE
);
1078 switch (pbdev
->state
) {
1079 case ZPCI_FS_RESERVED
:
1080 case ZPCI_FS_STANDBY
:
1081 case ZPCI_FS_DISABLED
:
1082 case ZPCI_FS_PERMANENT_ERROR
:
1083 setcc(cpu
, ZPCI_PCI_LS_INVAL_HANDLE
);
1089 if (s390_cpu_virt_mem_read(cpu
, fiba
, ar
, (uint8_t *)&fib
, sizeof(fib
))) {
1090 s390_cpu_virt_mem_handle_exc(cpu
, ra
);
1095 s390_program_interrupt(env
, PGM_OPERAND
, ra
);
1100 case ZPCI_MOD_FC_REG_INT
:
1101 if (pbdev
->summary_ind
) {
1102 cc
= ZPCI_PCI_LS_ERR
;
1103 s390_set_status_code(env
, r1
, ZPCI_MOD_ST_SEQUENCE
);
1104 } else if (reg_irqs(env
, pbdev
, fib
)) {
1105 cc
= ZPCI_PCI_LS_ERR
;
1106 s390_set_status_code(env
, r1
, ZPCI_MOD_ST_RES_NOT_AVAIL
);
1109 case ZPCI_MOD_FC_DEREG_INT
:
1110 if (!pbdev
->summary_ind
) {
1111 cc
= ZPCI_PCI_LS_ERR
;
1112 s390_set_status_code(env
, r1
, ZPCI_MOD_ST_SEQUENCE
);
1114 pci_dereg_irqs(pbdev
);
1117 case ZPCI_MOD_FC_REG_IOAT
:
1119 cc
= ZPCI_PCI_LS_ERR
;
1120 s390_set_status_code(env
, r1
, ZPCI_MOD_ST_DMAAS_INVAL
);
1121 } else if (pbdev
->iommu
->enabled
) {
1122 cc
= ZPCI_PCI_LS_ERR
;
1123 s390_set_status_code(env
, r1
, ZPCI_MOD_ST_SEQUENCE
);
1124 } else if (reg_ioat(env
, pbdev
->iommu
, fib
, ra
)) {
1125 cc
= ZPCI_PCI_LS_ERR
;
1126 s390_set_status_code(env
, r1
, ZPCI_MOD_ST_INSUF_RES
);
1129 case ZPCI_MOD_FC_DEREG_IOAT
:
1131 cc
= ZPCI_PCI_LS_ERR
;
1132 s390_set_status_code(env
, r1
, ZPCI_MOD_ST_DMAAS_INVAL
);
1133 } else if (!pbdev
->iommu
->enabled
) {
1134 cc
= ZPCI_PCI_LS_ERR
;
1135 s390_set_status_code(env
, r1
, ZPCI_MOD_ST_SEQUENCE
);
1137 pci_dereg_ioat(pbdev
->iommu
);
1140 case ZPCI_MOD_FC_REREG_IOAT
:
1142 cc
= ZPCI_PCI_LS_ERR
;
1143 s390_set_status_code(env
, r1
, ZPCI_MOD_ST_DMAAS_INVAL
);
1144 } else if (!pbdev
->iommu
->enabled
) {
1145 cc
= ZPCI_PCI_LS_ERR
;
1146 s390_set_status_code(env
, r1
, ZPCI_MOD_ST_SEQUENCE
);
1148 pci_dereg_ioat(pbdev
->iommu
);
1149 if (reg_ioat(env
, pbdev
->iommu
, fib
, ra
)) {
1150 cc
= ZPCI_PCI_LS_ERR
;
1151 s390_set_status_code(env
, r1
, ZPCI_MOD_ST_INSUF_RES
);
1155 case ZPCI_MOD_FC_RESET_ERROR
:
1156 switch (pbdev
->state
) {
1157 case ZPCI_FS_BLOCKED
:
1159 pbdev
->state
= ZPCI_FS_ENABLED
;
1162 cc
= ZPCI_PCI_LS_ERR
;
1163 s390_set_status_code(env
, r1
, ZPCI_MOD_ST_SEQUENCE
);
1166 case ZPCI_MOD_FC_RESET_BLOCK
:
1167 switch (pbdev
->state
) {
1169 pbdev
->state
= ZPCI_FS_BLOCKED
;
1172 cc
= ZPCI_PCI_LS_ERR
;
1173 s390_set_status_code(env
, r1
, ZPCI_MOD_ST_SEQUENCE
);
1176 case ZPCI_MOD_FC_SET_MEASURE
: {
1177 uint64_t fmb_addr
= ldq_p(&fib
.fmb_addr
);
1179 if (fmb_addr
& FMBK_MASK
) {
1180 cc
= ZPCI_PCI_LS_ERR
;
1181 s390_pci_generate_error_event(ERR_EVENT_FMBPRO
, pbdev
->fh
,
1182 pbdev
->fid
, fmb_addr
, 0);
1183 fmb_timer_free(pbdev
);
1188 /* Stop updating FMB. */
1189 fmb_timer_free(pbdev
);
1193 if (!pbdev
->fmb_timer
) {
1194 pbdev
->fmb_timer
= timer_new_ms(QEMU_CLOCK_VIRTUAL
,
1196 } else if (timer_pending(pbdev
->fmb_timer
)) {
1197 /* Remove pending timer to update FMB address. */
1198 timer_del(pbdev
->fmb_timer
);
1200 pbdev
->fmb_addr
= fmb_addr
;
1201 timer_mod(pbdev
->fmb_timer
,
1202 qemu_clock_get_ms(QEMU_CLOCK_VIRTUAL
) + DEFAULT_MUI
);
1206 s390_program_interrupt(&cpu
->env
, PGM_OPERAND
, ra
);
1207 cc
= ZPCI_PCI_LS_ERR
;
1214 int stpcifc_service_call(S390CPU
*cpu
, uint8_t r1
, uint64_t fiba
, uint8_t ar
,
1217 CPUS390XState
*env
= &cpu
->env
;
1221 S390PCIBusDevice
*pbdev
;
1223 uint64_t cc
= ZPCI_PCI_LS_OK
;
1225 if (env
->psw
.mask
& PSW_MASK_PSTATE
) {
1226 s390_program_interrupt(env
, PGM_PRIVILEGED
, ra
);
1230 fh
= env
->regs
[r1
] >> 32;
1231 dmaas
= (env
->regs
[r1
] >> 16) & 0xff;
1234 setcc(cpu
, ZPCI_PCI_LS_ERR
);
1235 s390_set_status_code(env
, r1
, ZPCI_STPCIFC_ST_INVAL_DMAAS
);
1240 s390_program_interrupt(env
, PGM_SPECIFICATION
, ra
);
1244 pbdev
= s390_pci_find_dev_by_idx(s390_get_phb(), fh
& FH_MASK_INDEX
);
1246 setcc(cpu
, ZPCI_PCI_LS_INVAL_HANDLE
);
1250 memset(&fib
, 0, sizeof(fib
));
1252 switch (pbdev
->state
) {
1253 case ZPCI_FS_RESERVED
:
1254 case ZPCI_FS_STANDBY
:
1255 setcc(cpu
, ZPCI_PCI_LS_INVAL_HANDLE
);
1257 case ZPCI_FS_DISABLED
:
1258 if (fh
& FH_MASK_ENABLE
) {
1259 setcc(cpu
, ZPCI_PCI_LS_INVAL_HANDLE
);
1263 /* BLOCKED bit is set to one coincident with the setting of ERROR bit.
1264 * FH Enabled bit is set to one in states of ENABLED, BLOCKED or ERROR. */
1268 case ZPCI_FS_BLOCKED
:
1271 case ZPCI_FS_ENABLED
:
1273 if (pbdev
->iommu
->enabled
) {
1276 if (!(fh
& FH_MASK_ENABLE
)) {
1277 env
->regs
[r1
] |= 1ULL << 63;
1280 case ZPCI_FS_PERMANENT_ERROR
:
1281 setcc(cpu
, ZPCI_PCI_LS_ERR
);
1282 s390_set_status_code(env
, r1
, ZPCI_STPCIFC_ST_PERM_ERROR
);
1286 stq_p(&fib
.pba
, pbdev
->iommu
->pba
);
1287 stq_p(&fib
.pal
, pbdev
->iommu
->pal
);
1288 stq_p(&fib
.iota
, pbdev
->iommu
->g_iota
);
1289 stq_p(&fib
.aibv
, pbdev
->routes
.adapter
.ind_addr
);
1290 stq_p(&fib
.aisb
, pbdev
->routes
.adapter
.summary_addr
);
1291 stq_p(&fib
.fmb_addr
, pbdev
->fmb_addr
);
1293 data
= ((uint32_t)pbdev
->isc
<< 28) | ((uint32_t)pbdev
->noi
<< 16) |
1294 ((uint32_t)pbdev
->routes
.adapter
.ind_offset
<< 8) |
1295 ((uint32_t)pbdev
->sum
<< 7) | pbdev
->routes
.adapter
.summary_offset
;
1296 stl_p(&fib
.data
, data
);
1299 if (s390_cpu_virt_mem_write(cpu
, fiba
, ar
, (uint8_t *)&fib
, sizeof(fib
))) {
1300 s390_cpu_virt_mem_handle_exc(cpu
, ra
);