target-s390x/kvm.c

   1 /*
   2  * QEMU S390x KVM implementation
   3  *
   4  * Copyright (c) 2009 Alexander Graf <agraf@suse.de>
   5  * Copyright IBM Corp. 2012
   6  *
   7  * This library is free software; you can redistribute it and/or
   8  * modify it under the terms of the GNU Lesser General Public
   9  * License as published by the Free Software Foundation; either
  10  * version 2 of the License, or (at your option) any later version.
  11  *
  12  * This library is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  15  * Lesser General Public License for more details.
  16  *
  17  * Contributions after 2012-10-29 are licensed under the terms of the
  18  * GNU GPL, version 2 or (at your option) any later version.
  19  *
  20  * You should have received a copy of the GNU (Lesser) General Public
  21  * License along with this library; if not, see <http://www.gnu.org/licenses/>.
  22  */
  23
  24 #include <sys/types.h>
  25 #include <sys/ioctl.h>
  26 #include <sys/mman.h>
  27
  28 #include <linux/kvm.h>
  29 #include <asm/ptrace.h>
  30
  31 #include "qemu-common.h"
  32 #include "qemu/timer.h"
  33 #include "sysemu/sysemu.h"
  34 #include "sysemu/kvm.h"
  35 #include "cpu.h"
  36 #include "sysemu/device_tree.h"
  37
  38 /* #define DEBUG_KVM */
  39
  40 #ifdef DEBUG_KVM
  41 #define dprintf(fmt, ...) \
  42     do { fprintf(stderr, fmt, ## __VA_ARGS__); } while (0)
  43 #else
  44 #define dprintf(fmt, ...) \
  45     do { } while (0)
  46 #endif
  47
  48 #define IPA0_DIAG                       0x8300
  49 #define IPA0_SIGP                       0xae00
  50 #define IPA0_B2                         0xb200
  51 #define IPA0_B9                         0xb900
  52 #define IPA0_EB                         0xeb00
  53
  54 #define PRIV_SCLP_CALL                  0x20
  55 #define PRIV_CSCH                       0x30
  56 #define PRIV_HSCH                       0x31
  57 #define PRIV_MSCH                       0x32
  58 #define PRIV_SSCH                       0x33
  59 #define PRIV_STSCH                      0x34
  60 #define PRIV_TSCH                       0x35
  61 #define PRIV_TPI                        0x36
  62 #define PRIV_SAL                        0x37
  63 #define PRIV_RSCH                       0x38
  64 #define PRIV_STCRW                      0x39
  65 #define PRIV_STCPS                      0x3a
  66 #define PRIV_RCHP                       0x3b
  67 #define PRIV_SCHM                       0x3c
  68 #define PRIV_CHSC                       0x5f
  69 #define PRIV_SIGA                       0x74
  70 #define PRIV_XSCH                       0x76
  71 #define PRIV_SQBS                       0x8a
  72 #define PRIV_EQBS                       0x9c
  73 #define DIAG_KVM_HYPERCALL              0x500
  74 #define DIAG_KVM_BREAKPOINT             0x501
  75
  76 #define ICPT_INSTRUCTION                0x04
  77 #define ICPT_WAITPSW                    0x1c
  78 #define ICPT_SOFT_INTERCEPT             0x24
  79 #define ICPT_CPU_STOP                   0x28
  80 #define ICPT_IO                         0x40
  81
  82 #define SIGP_RESTART                    0x06
  83 #define SIGP_INITIAL_CPU_RESET          0x0b
  84 #define SIGP_STORE_STATUS_ADDR          0x0e
  85 #define SIGP_SET_ARCH                   0x12
  86
  87 const KVMCapabilityInfo kvm_arch_required_capabilities[] = {
  88     KVM_CAP_LAST_INFO
  89 };
  90
  91 static int cap_sync_regs;
  92
  93 int kvm_arch_init(KVMState *s)
  94 {
  95     cap_sync_regs = kvm_check_extension(s, KVM_CAP_SYNC_REGS);
  96     return 0;
  97 }
  98
  99 unsigned long kvm_arch_vcpu_id(CPUState *cpu)
 100 {
 101     return cpu->cpu_index;
 102 }
 103
 104 int kvm_arch_init_vcpu(CPUState *cpu)
 105 {
 106     /* nothing todo yet */
 107     return 0;
 108 }
 109
 110 void kvm_arch_reset_vcpu(CPUState *cpu)
 111 {
 112     /* The initial reset call is needed here to reset in-kernel
 113      * vcpu data that we can't access directly from QEMU
 114      * (i.e. with older kernels which don't support sync_regs/ONE_REG).
 115      * Before this ioctl cpu_synchronize_state() is called in common kvm
 116      * code (kvm-all) */
 117     if (kvm_vcpu_ioctl(cpu, KVM_S390_INITIAL_RESET, NULL)) {
 118         perror("Can't reset vcpu\n");
 119     }
 120 }
 121
 122 int kvm_arch_put_registers(CPUState *cs, int level)
 123 {
 124     S390CPU *cpu = S390_CPU(cs);
 125     CPUS390XState *env = &cpu->env;
 126     struct kvm_sregs sregs;
 127     struct kvm_regs regs;
 128     int ret;
 129     int i;
 130
 131     /* always save the PSW  and the GPRS*/
 132     cs->kvm_run->psw_addr = env->psw.addr;
 133     cs->kvm_run->psw_mask = env->psw.mask;
 134
 135     if (cap_sync_regs && cs->kvm_run->kvm_valid_regs & KVM_SYNC_GPRS) {
 136         for (i = 0; i < 16; i++) {
 137             cs->kvm_run->s.regs.gprs[i] = env->regs[i];
 138             cs->kvm_run->kvm_dirty_regs |= KVM_SYNC_GPRS;
 139         }
 140     } else {
 141         for (i = 0; i < 16; i++) {
 142             regs.gprs[i] = env->regs[i];
 143         }
 144         ret = kvm_vcpu_ioctl(cs, KVM_SET_REGS, &regs);
 145         if (ret < 0) {
 146             return ret;
 147         }
 148     }
 149
 150     /* Do we need to save more than that? */
 151     if (level == KVM_PUT_RUNTIME_STATE) {
 152         return 0;
 153     }
 154
 155     if (cap_sync_regs &&
 156         cs->kvm_run->kvm_valid_regs & KVM_SYNC_ACRS &&
 157         cs->kvm_run->kvm_valid_regs & KVM_SYNC_CRS) {
 158         for (i = 0; i < 16; i++) {
 159             cs->kvm_run->s.regs.acrs[i] = env->aregs[i];
 160             cs->kvm_run->s.regs.crs[i] = env->cregs[i];
 161         }
 162         cs->kvm_run->kvm_dirty_regs |= KVM_SYNC_ACRS;
 163         cs->kvm_run->kvm_dirty_regs |= KVM_SYNC_CRS;
 164     } else {
 165         for (i = 0; i < 16; i++) {
 166             sregs.acrs[i] = env->aregs[i];
 167             sregs.crs[i] = env->cregs[i];
 168         }
 169         ret = kvm_vcpu_ioctl(cs, KVM_SET_SREGS, &sregs);
 170         if (ret < 0) {
 171             return ret;
 172         }
 173     }
 174
 175     /* Finally the prefix */
 176     if (cap_sync_regs && cs->kvm_run->kvm_valid_regs & KVM_SYNC_PREFIX) {
 177         cs->kvm_run->s.regs.prefix = env->psa;
 178         cs->kvm_run->kvm_dirty_regs |= KVM_SYNC_PREFIX;
 179     } else {
 180         /* prefix is only supported via sync regs */
 181     }
 182     return 0;
 183 }
 184
 185 int kvm_arch_get_registers(CPUState *cs)
 186 {
 187     S390CPU *cpu = S390_CPU(cs);
 188     CPUS390XState *env = &cpu->env;
 189     struct kvm_sregs sregs;
 190     struct kvm_regs regs;
 191     int ret;
 192     int i;
 193
 194     /* get the PSW */
 195     env->psw.addr = cs->kvm_run->psw_addr;
 196     env->psw.mask = cs->kvm_run->psw_mask;
 197
 198     /* the GPRS */
 199     if (cap_sync_regs && cs->kvm_run->kvm_valid_regs & KVM_SYNC_GPRS) {
 200         for (i = 0; i < 16; i++) {
 201             env->regs[i] = cs->kvm_run->s.regs.gprs[i];
 202         }
 203     } else {
 204         ret = kvm_vcpu_ioctl(cs, KVM_GET_REGS, &regs);
 205         if (ret < 0) {
 206             return ret;
 207         }
 208          for (i = 0; i < 16; i++) {
 209             env->regs[i] = regs.gprs[i];
 210         }
 211     }
 212
 213     /* The ACRS and CRS */
 214     if (cap_sync_regs &&
 215         cs->kvm_run->kvm_valid_regs & KVM_SYNC_ACRS &&
 216         cs->kvm_run->kvm_valid_regs & KVM_SYNC_CRS) {
 217         for (i = 0; i < 16; i++) {
 218             env->aregs[i] = cs->kvm_run->s.regs.acrs[i];
 219             env->cregs[i] = cs->kvm_run->s.regs.crs[i];
 220         }
 221     } else {
 222         ret = kvm_vcpu_ioctl(cs, KVM_GET_SREGS, &sregs);
 223         if (ret < 0) {
 224             return ret;
 225         }
 226          for (i = 0; i < 16; i++) {
 227             env->aregs[i] = sregs.acrs[i];
 228             env->cregs[i] = sregs.crs[i];
 229         }
 230     }
 231
 232     /* Finally the prefix */
 233     if (cap_sync_regs && cs->kvm_run->kvm_valid_regs & KVM_SYNC_PREFIX) {
 234         env->psa = cs->kvm_run->s.regs.prefix;
 235     } else {
 236         /* no prefix without sync regs */
 237     }
 238
 239     return 0;
 240 }
 241
 242 /*
 243  * Legacy layout for s390:
 244  * Older S390 KVM requires the topmost vma of the RAM to be
 245  * smaller than an system defined value, which is at least 256GB.
 246  * Larger systems have larger values. We put the guest between
 247  * the end of data segment (system break) and this value. We
 248  * use 32GB as a base to have enough room for the system break
 249  * to grow. We also have to use MAP parameters that avoid
 250  * read-only mapping of guest pages.
 251  */
 252 static void *legacy_s390_alloc(ram_addr_t size)
 253 {
 254     void *mem;
 255
 256     mem = mmap((void *) 0x800000000ULL, size,
 257                PROT_EXEC|PROT_READ|PROT_WRITE,
 258                MAP_SHARED | MAP_ANONYMOUS | MAP_FIXED, -1, 0);
 259     if (mem == MAP_FAILED) {
 260         fprintf(stderr, "Allocating RAM failed\n");
 261         abort();
 262     }
 263     return mem;
 264 }
 265
 266 void *kvm_arch_vmalloc(ram_addr_t size)
 267 {
 268     /* Can we use the standard allocation ? */
 269     if (kvm_check_extension(kvm_state, KVM_CAP_S390_GMAP) &&
 270         kvm_check_extension(kvm_state, KVM_CAP_S390_COW)) {
 271         return NULL;
 272     } else {
 273         return legacy_s390_alloc(size);
 274     }
 275 }
 276
 277 int kvm_arch_insert_sw_breakpoint(CPUState *cs, struct kvm_sw_breakpoint *bp)
 278 {
 279     S390CPU *cpu = S390_CPU(cs);
 280     CPUS390XState *env = &cpu->env;
 281     static const uint8_t diag_501[] = {0x83, 0x24, 0x05, 0x01};
 282
 283     if (cpu_memory_rw_debug(env, bp->pc, (uint8_t *)&bp->saved_insn, 4, 0) ||
 284         cpu_memory_rw_debug(env, bp->pc, (uint8_t *)diag_501, 4, 1)) {
 285         return -EINVAL;
 286     }
 287     return 0;
 288 }
 289
 290 int kvm_arch_remove_sw_breakpoint(CPUState *cs, struct kvm_sw_breakpoint *bp)
 291 {
 292     S390CPU *cpu = S390_CPU(cs);
 293     CPUS390XState *env = &cpu->env;
 294     uint8_t t[4];
 295     static const uint8_t diag_501[] = {0x83, 0x24, 0x05, 0x01};
 296
 297     if (cpu_memory_rw_debug(env, bp->pc, t, 4, 0)) {
 298         return -EINVAL;
 299     } else if (memcmp(t, diag_501, 4)) {
 300         return -EINVAL;
 301     } else if (cpu_memory_rw_debug(env, bp->pc, (uint8_t *)&bp->saved_insn, 1, 1)) {
 302         return -EINVAL;
 303     }
 304
 305     return 0;
 306 }
 307
 308 void kvm_arch_pre_run(CPUState *cpu, struct kvm_run *run)
 309 {
 310 }
 311
 312 void kvm_arch_post_run(CPUState *cpu, struct kvm_run *run)
 313 {
 314 }
 315
 316 int kvm_arch_process_async_events(CPUState *cs)
 317 {
 318     return cs->halted;
 319 }
 320
 321 void kvm_s390_interrupt_internal(S390CPU *cpu, int type, uint32_t parm,
 322                                  uint64_t parm64, int vm)
 323 {
 324     CPUState *cs = CPU(cpu);
 325     struct kvm_s390_interrupt kvmint;
 326     int r;
 327
 328     if (!cs->kvm_state) {
 329         return;
 330     }
 331
 332     kvmint.type = type;
 333     kvmint.parm = parm;
 334     kvmint.parm64 = parm64;
 335
 336     if (vm) {
 337         r = kvm_vm_ioctl(cs->kvm_state, KVM_S390_INTERRUPT, &kvmint);
 338     } else {
 339         r = kvm_vcpu_ioctl(cs, KVM_S390_INTERRUPT, &kvmint);
 340     }
 341
 342     if (r < 0) {
 343         fprintf(stderr, "KVM failed to inject interrupt\n");
 344         exit(1);
 345     }
 346 }
 347
 348 void kvm_s390_virtio_irq(S390CPU *cpu, int config_change, uint64_t token)
 349 {
 350     kvm_s390_interrupt_internal(cpu, KVM_S390_INT_VIRTIO, config_change,
 351                                 token, 1);
 352 }
 353
 354 void kvm_s390_interrupt(S390CPU *cpu, int type, uint32_t code)
 355 {
 356     kvm_s390_interrupt_internal(cpu, type, code, 0, 0);
 357 }
 358
 359 static void enter_pgmcheck(S390CPU *cpu, uint16_t code)
 360 {
 361     kvm_s390_interrupt(cpu, KVM_S390_PROGRAM_INT, code);
 362 }
 363
 364 static inline void setcc(S390CPU *cpu, uint64_t cc)
 365 {
 366     CPUS390XState *env = &cpu->env;
 367     CPUState *cs = CPU(cpu);
 368
 369     cs->kvm_run->psw_mask &= ~(3ull << 44);
 370     cs->kvm_run->psw_mask |= (cc & 3) << 44;
 371
 372     env->psw.mask &= ~(3ul << 44);
 373     env->psw.mask |= (cc & 3) << 44;
 374 }
 375
 376 static int kvm_sclp_service_call(S390CPU *cpu, struct kvm_run *run,
 377                                  uint16_t ipbh0)
 378 {
 379     CPUS390XState *env = &cpu->env;
 380     uint32_t sccb;
 381     uint64_t code;
 382     int r = 0;
 383
 384     cpu_synchronize_state(env);
 385     sccb = env->regs[ipbh0 & 0xf];
 386     code = env->regs[(ipbh0 & 0xf0) >> 4];
 387
 388     r = sclp_service_call(sccb, code);
 389     if (r < 0) {
 390         enter_pgmcheck(cpu, -r);
 391     }
 392     setcc(cpu, r);
 393
 394     return 0;
 395 }
 396
 397 static int kvm_handle_css_inst(S390CPU *cpu, struct kvm_run *run,
 398                                uint8_t ipa0, uint8_t ipa1, uint8_t ipb)
 399 {
 400     int r = 0;
 401     int no_cc = 0;
 402     CPUS390XState *env = &cpu->env;
 403
 404     if (ipa0 != 0xb2) {
 405         /* Not handled for now. */
 406         return -1;
 407     }
 408     cpu_synchronize_state(env);
 409     switch (ipa1) {
 410     case PRIV_XSCH:
 411         r = ioinst_handle_xsch(env, env->regs[1]);
 412         break;
 413     case PRIV_CSCH:
 414         r = ioinst_handle_csch(env, env->regs[1]);
 415         break;
 416     case PRIV_HSCH:
 417         r = ioinst_handle_hsch(env, env->regs[1]);
 418         break;
 419     case PRIV_MSCH:
 420         r = ioinst_handle_msch(env, env->regs[1], run->s390_sieic.ipb);
 421         break;
 422     case PRIV_SSCH:
 423         r = ioinst_handle_ssch(env, env->regs[1], run->s390_sieic.ipb);
 424         break;
 425     case PRIV_STCRW:
 426         r = ioinst_handle_stcrw(env, run->s390_sieic.ipb);
 427         break;
 428     case PRIV_STSCH:
 429         r = ioinst_handle_stsch(env, env->regs[1], run->s390_sieic.ipb);
 430         break;
 431     case PRIV_TSCH:
 432         /* We should only get tsch via KVM_EXIT_S390_TSCH. */
 433         fprintf(stderr, "Spurious tsch intercept\n");
 434         break;
 435     case PRIV_CHSC:
 436         r = ioinst_handle_chsc(env, run->s390_sieic.ipb);
 437         break;
 438     case PRIV_TPI:
 439         /* This should have been handled by kvm already. */
 440         fprintf(stderr, "Spurious tpi intercept\n");
 441         break;
 442     case PRIV_SCHM:
 443         no_cc = 1;
 444         r = ioinst_handle_schm(env, env->regs[1], env->regs[2],
 445                                run->s390_sieic.ipb);
 446         break;
 447     case PRIV_RSCH:
 448         r = ioinst_handle_rsch(env, env->regs[1]);
 449         break;
 450     case PRIV_RCHP:
 451         r = ioinst_handle_rchp(env, env->regs[1]);
 452         break;
 453     case PRIV_STCPS:
 454         /* We do not provide this instruction, it is suppressed. */
 455         no_cc = 1;
 456         r = 0;
 457         break;
 458     case PRIV_SAL:
 459         no_cc = 1;
 460         r = ioinst_handle_sal(env, env->regs[1]);
 461         break;
 462     default:
 463         r = -1;
 464         break;
 465     }
 466
 467     if (r >= 0) {
 468         if (!no_cc) {
 469             setcc(cpu, r);
 470         }
 471         r = 0;
 472     } else if (r < -1) {
 473         r = 0;
 474     }
 475     return r;
 476 }
 477
 478 static int is_ioinst(uint8_t ipa0, uint8_t ipa1, uint8_t ipb)
 479 {
 480     int ret = 0;
 481     uint16_t ipa = (ipa0 << 8) | ipa1;
 482
 483     switch (ipa) {
 484     case IPA0_B2 | PRIV_CSCH:
 485     case IPA0_B2 | PRIV_HSCH:
 486     case IPA0_B2 | PRIV_MSCH:
 487     case IPA0_B2 | PRIV_SSCH:
 488     case IPA0_B2 | PRIV_STSCH:
 489     case IPA0_B2 | PRIV_TPI:
 490     case IPA0_B2 | PRIV_SAL:
 491     case IPA0_B2 | PRIV_RSCH:
 492     case IPA0_B2 | PRIV_STCRW:
 493     case IPA0_B2 | PRIV_STCPS:
 494     case IPA0_B2 | PRIV_RCHP:
 495     case IPA0_B2 | PRIV_SCHM:
 496     case IPA0_B2 | PRIV_CHSC:
 497     case IPA0_B2 | PRIV_SIGA:
 498     case IPA0_B2 | PRIV_XSCH:
 499     case IPA0_B9 | PRIV_EQBS:
 500     case IPA0_EB | PRIV_SQBS:
 501         ret = 1;
 502         break;
 503     }
 504
 505     return ret;
 506 }
 507
 508 static int handle_priv(S390CPU *cpu, struct kvm_run *run,
 509                        uint8_t ipa0, uint8_t ipa1)
 510 {
 511     int r = 0;
 512     uint16_t ipbh0 = (run->s390_sieic.ipb & 0xffff0000) >> 16;
 513     uint8_t ipb = run->s390_sieic.ipb & 0xff;
 514
 515     dprintf("KVM: PRIV: %d\n", ipa1);
 516     switch (ipa1) {
 517         case PRIV_SCLP_CALL:
 518             r = kvm_sclp_service_call(cpu, run, ipbh0);
 519             break;
 520         default:
 521             if (is_ioinst(ipa0, ipa1, ipb)) {
 522                 r = kvm_handle_css_inst(cpu, run, ipa0, ipa1, ipb);
 523                 if (r == -1) {
 524                     setcc(cpu, 3);
 525                     r = 0;
 526                 }
 527             } else {
 528                 dprintf("KVM: unknown PRIV: 0x%x\n", ipa1);
 529                 r = -1;
 530             }
 531             break;
 532     }
 533
 534     return r;
 535 }
 536
 537 static int handle_hypercall(CPUS390XState *env, struct kvm_run *run)
 538 {
 539     cpu_synchronize_state(env);
 540     env->regs[2] = s390_virtio_hypercall(env);
 541
 542     return 0;
 543 }
 544
 545 static int handle_diag(CPUS390XState *env, struct kvm_run *run, int ipb_code)
 546 {
 547     int r = 0;
 548
 549     switch (ipb_code) {
 550         case DIAG_KVM_HYPERCALL:
 551             r = handle_hypercall(env, run);
 552             break;
 553         case DIAG_KVM_BREAKPOINT:
 554             sleep(10);
 555             break;
 556         default:
 557             dprintf("KVM: unknown DIAG: 0x%x\n", ipb_code);
 558             r = -1;
 559             break;
 560     }
 561
 562     return r;
 563 }
 564
 565 static int s390_cpu_restart(S390CPU *cpu)
 566 {
 567     kvm_s390_interrupt(cpu, KVM_S390_RESTART, 0);
 568     s390_add_running_cpu(cpu);
 569     qemu_cpu_kick(CPU(cpu));
 570     dprintf("DONE: SIGP cpu restart: %p\n", &cpu->env);
 571     return 0;
 572 }
 573
 574 static int s390_store_status(CPUS390XState *env, uint32_t parameter)
 575 {
 576     /* XXX */
 577     fprintf(stderr, "XXX SIGP store status\n");
 578     return -1;
 579 }
 580
 581 static int s390_cpu_initial_reset(S390CPU *cpu)
 582 {
 583     CPUS390XState *env = &cpu->env;
 584     int i;
 585
 586     s390_del_running_cpu(cpu);
 587     if (kvm_vcpu_ioctl(CPU(cpu), KVM_S390_INITIAL_RESET, NULL) < 0) {
 588         perror("cannot init reset vcpu");
 589     }
 590
 591     /* Manually zero out all registers */
 592     cpu_synchronize_state(env);
 593     for (i = 0; i < 16; i++) {
 594         env->regs[i] = 0;
 595     }
 596
 597     dprintf("DONE: SIGP initial reset: %p\n", env);
 598     return 0;
 599 }
 600
 601 static int handle_sigp(S390CPU *cpu, struct kvm_run *run, uint8_t ipa1)
 602 {
 603     CPUS390XState *env = &cpu->env;
 604     uint8_t order_code;
 605     uint32_t parameter;
 606     uint16_t cpu_addr;
 607     uint8_t t;
 608     int r = -1;
 609     S390CPU *target_cpu;
 610     CPUS390XState *target_env;
 611
 612     cpu_synchronize_state(env);
 613
 614     /* get order code */
 615     order_code = run->s390_sieic.ipb >> 28;
 616     if (order_code > 0) {
 617         order_code = env->regs[order_code];
 618     }
 619     order_code += (run->s390_sieic.ipb & 0x0fff0000) >> 16;
 620
 621     /* get parameters */
 622     t = (ipa1 & 0xf0) >> 4;
 623     if (!(t % 2)) {
 624         t++;
 625     }
 626
 627     parameter = env->regs[t] & 0x7ffffe00;
 628     cpu_addr = env->regs[ipa1 & 0x0f];
 629
 630     target_cpu = s390_cpu_addr2state(cpu_addr);
 631     if (target_cpu == NULL) {
 632         goto out;
 633     }
 634     target_env = &target_cpu->env;
 635
 636     switch (order_code) {
 637         case SIGP_RESTART:
 638             r = s390_cpu_restart(target_cpu);
 639             break;
 640         case SIGP_STORE_STATUS_ADDR:
 641             r = s390_store_status(target_env, parameter);
 642             break;
 643         case SIGP_SET_ARCH:
 644             /* make the caller panic */
 645             return -1;
 646         case SIGP_INITIAL_CPU_RESET:
 647             r = s390_cpu_initial_reset(target_cpu);
 648             break;
 649         default:
 650             fprintf(stderr, "KVM: unknown SIGP: 0x%x\n", order_code);
 651             break;
 652     }
 653
 654 out:
 655     setcc(cpu, r ? 3 : 0);
 656     return 0;
 657 }
 658
 659 static int handle_instruction(S390CPU *cpu, struct kvm_run *run)
 660 {
 661     CPUS390XState *env = &cpu->env;
 662     unsigned int ipa0 = (run->s390_sieic.ipa & 0xff00);
 663     uint8_t ipa1 = run->s390_sieic.ipa & 0x00ff;
 664     int ipb_code = (run->s390_sieic.ipb & 0x0fff0000) >> 16;
 665     int r = -1;
 666
 667     dprintf("handle_instruction 0x%x 0x%x\n", run->s390_sieic.ipa, run->s390_sieic.ipb);
 668     switch (ipa0) {
 669     case IPA0_B2:
 670     case IPA0_B9:
 671     case IPA0_EB:
 672         r = handle_priv(cpu, run, ipa0 >> 8, ipa1);
 673         break;
 674     case IPA0_DIAG:
 675         r = handle_diag(env, run, ipb_code);
 676         break;
 677     case IPA0_SIGP:
 678         r = handle_sigp(cpu, run, ipa1);
 679         break;
 680     }
 681
 682     if (r < 0) {
 683         enter_pgmcheck(cpu, 0x0001);
 684     }
 685     return 0;
 686 }
 687
 688 static bool is_special_wait_psw(CPUState *cs)
 689 {
 690     /* signal quiesce */
 691     return cs->kvm_run->psw_addr == 0xfffUL;
 692 }
 693
 694 static int handle_intercept(S390CPU *cpu)
 695 {
 696     CPUState *cs = CPU(cpu);
 697     struct kvm_run *run = cs->kvm_run;
 698     int icpt_code = run->s390_sieic.icptcode;
 699     int r = 0;
 700
 701     dprintf("intercept: 0x%x (at 0x%lx)\n", icpt_code,
 702             (long)cs->kvm_run->psw_addr);
 703     switch (icpt_code) {
 704         case ICPT_INSTRUCTION:
 705             r = handle_instruction(cpu, run);
 706             break;
 707         case ICPT_WAITPSW:
 708             if (s390_del_running_cpu(cpu) == 0 &&
 709                 is_special_wait_psw(cs)) {
 710                 qemu_system_shutdown_request();
 711             }
 712             r = EXCP_HALTED;
 713             break;
 714         case ICPT_CPU_STOP:
 715             if (s390_del_running_cpu(cpu) == 0) {
 716                 qemu_system_shutdown_request();
 717             }
 718             r = EXCP_HALTED;
 719             break;
 720         case ICPT_SOFT_INTERCEPT:
 721             fprintf(stderr, "KVM unimplemented icpt SOFT\n");
 722             exit(1);
 723             break;
 724         case ICPT_IO:
 725             fprintf(stderr, "KVM unimplemented icpt IO\n");
 726             exit(1);
 727             break;
 728         default:
 729             fprintf(stderr, "Unknown intercept code: %d\n", icpt_code);
 730             exit(1);
 731             break;
 732     }
 733
 734     return r;
 735 }
 736
 737 static int handle_tsch(S390CPU *cpu)
 738 {
 739     CPUS390XState *env = &cpu->env;
 740     CPUState *cs = CPU(cpu);
 741     struct kvm_run *run = cs->kvm_run;
 742     int ret;
 743
 744     cpu_synchronize_state(env);
 745     ret = ioinst_handle_tsch(env, env->regs[1], run->s390_tsch.ipb);
 746     if (ret >= 0) {
 747         /* Success; set condition code. */
 748         setcc(cpu, ret);
 749         ret = 0;
 750     } else if (ret < -1) {
 751         /*
 752          * Failure.
 753          * If an I/O interrupt had been dequeued, we have to reinject it.
 754          */
 755         if (run->s390_tsch.dequeued) {
 756             uint16_t subchannel_id = run->s390_tsch.subchannel_id;
 757             uint16_t subchannel_nr = run->s390_tsch.subchannel_nr;
 758             uint32_t io_int_parm = run->s390_tsch.io_int_parm;
 759             uint32_t io_int_word = run->s390_tsch.io_int_word;
 760             uint32_t type = ((subchannel_id & 0xff00) << 24) |
 761                 ((subchannel_id & 0x00060) << 22) | (subchannel_nr << 16);
 762
 763             kvm_s390_interrupt_internal(cpu, type,
 764                                         ((uint32_t)subchannel_id << 16)
 765                                         | subchannel_nr,
 766                                         ((uint64_t)io_int_parm << 32)
 767                                         | io_int_word, 1);
 768         }
 769         ret = 0;
 770     }
 771     return ret;
 772 }
 773
 774 int kvm_arch_handle_exit(CPUState *cs, struct kvm_run *run)
 775 {
 776     S390CPU *cpu = S390_CPU(cs);
 777     int ret = 0;
 778
 779     switch (run->exit_reason) {
 780         case KVM_EXIT_S390_SIEIC:
 781             ret = handle_intercept(cpu);
 782             break;
 783         case KVM_EXIT_S390_RESET:
 784             qemu_system_reset_request();
 785             break;
 786         case KVM_EXIT_S390_TSCH:
 787             ret = handle_tsch(cpu);
 788             break;
 789         default:
 790             fprintf(stderr, "Unknown KVM exit: %d\n", run->exit_reason);
 791             break;
 792     }
 793
 794     if (ret == 0) {
 795         ret = EXCP_INTERRUPT;
 796     }
 797     return ret;
 798 }
 799
 800 bool kvm_arch_stop_on_emulation_error(CPUState *cpu)
 801 {
 802     return true;
 803 }
 804
 805 int kvm_arch_on_sigbus_vcpu(CPUState *cpu, int code, void *addr)
 806 {
 807     return 1;
 808 }
 809
 810 int kvm_arch_on_sigbus(int code, void *addr)
 811 {
 812     return 1;
 813 }
 814
 815 void kvm_s390_io_interrupt(S390CPU *cpu, uint16_t subchannel_id,
 816                            uint16_t subchannel_nr, uint32_t io_int_parm,
 817                            uint32_t io_int_word)
 818 {
 819     uint32_t type;
 820
 821     type = ((subchannel_id & 0xff00) << 24) |
 822         ((subchannel_id & 0x00060) << 22) | (subchannel_nr << 16);
 823     kvm_s390_interrupt_internal(cpu, type,
 824                                 ((uint32_t)subchannel_id << 16) | subchannel_nr,
 825                                 ((uint64_t)io_int_parm << 32) | io_int_word, 1);
 826 }
 827
 828 void kvm_s390_crw_mchk(S390CPU *cpu)
 829 {
 830     kvm_s390_interrupt_internal(cpu, KVM_S390_MCHK, 1 << 28,
 831                                 0x00400f1d40330000, 1);
 832 }
 833
 834 void kvm_s390_enable_css_support(S390CPU *cpu)
 835 {
 836     struct kvm_enable_cap cap = {};
 837     int r;
 838
 839     /* Activate host kernel channel subsystem support. */
 840     cap.cap = KVM_CAP_S390_CSS_SUPPORT;
 841     r = kvm_vcpu_ioctl(CPU(cpu), KVM_ENABLE_CAP, &cap);
 842     assert(r == 0);
 843 }