hw/s390x/virtio-ccw.c

   1 /*
   2  * virtio ccw target implementation
   3  *
   4  * Copyright 2012,2014 IBM Corp.
   5  * Author(s): Cornelia Huck <cornelia.huck@de.ibm.com>
   6  *
   7  * This work is licensed under the terms of the GNU GPL, version 2 or (at
   8  * your option) any later version. See the COPYING file in the top-level
   9  * directory.
  10  */
  11
  12 #include "hw/hw.h"
  13 #include "sysemu/block-backend.h"
  14 #include "sysemu/blockdev.h"
  15 #include "sysemu/sysemu.h"
  16 #include "net/net.h"
  17 #include "monitor/monitor.h"
  18 #include "hw/virtio/virtio.h"
  19 #include "hw/virtio/virtio-serial.h"
  20 #include "hw/virtio/virtio-net.h"
  21 #include "hw/sysbus.h"
  22 #include "qemu/bitops.h"
  23 #include "hw/virtio/virtio-bus.h"
  24 #include "hw/s390x/adapter.h"
  25 #include "hw/s390x/s390_flic.h"
  26
  27 #include "ioinst.h"
  28 #include "css.h"
  29 #include "virtio-ccw.h"
  30 #include "trace.h"
  31
  32 static QTAILQ_HEAD(, IndAddr) indicator_addresses =
  33     QTAILQ_HEAD_INITIALIZER(indicator_addresses);
  34
  35 static IndAddr *get_indicator(hwaddr ind_addr, int len)
  36 {
  37     IndAddr *indicator;
  38
  39     QTAILQ_FOREACH(indicator, &indicator_addresses, sibling) {
  40         if (indicator->addr == ind_addr) {
  41             indicator->refcnt++;
  42             return indicator;
  43         }
  44     }
  45     indicator = g_new0(IndAddr, 1);
  46     indicator->addr = ind_addr;
  47     indicator->len = len;
  48     indicator->refcnt = 1;
  49     QTAILQ_INSERT_TAIL(&indicator_addresses, indicator, sibling);
  50     return indicator;
  51 }
  52
  53 static int s390_io_adapter_map(AdapterInfo *adapter, uint64_t map_addr,
  54                                bool do_map)
  55 {
  56     S390FLICState *fs = s390_get_flic();
  57     S390FLICStateClass *fsc = S390_FLIC_COMMON_GET_CLASS(fs);
  58
  59     return fsc->io_adapter_map(fs, adapter->adapter_id, map_addr, do_map);
  60 }
  61
  62 static void release_indicator(AdapterInfo *adapter, IndAddr *indicator)
  63 {
  64     assert(indicator->refcnt > 0);
  65     indicator->refcnt--;
  66     if (indicator->refcnt > 0) {
  67         return;
  68     }
  69     QTAILQ_REMOVE(&indicator_addresses, indicator, sibling);
  70     if (indicator->map) {
  71         s390_io_adapter_map(adapter, indicator->map, false);
  72     }
  73     g_free(indicator);
  74 }
  75
  76 static int map_indicator(AdapterInfo *adapter, IndAddr *indicator)
  77 {
  78     int ret;
  79
  80     if (indicator->map) {
  81         return 0; /* already mapped is not an error */
  82     }
  83     indicator->map = indicator->addr;
  84     ret = s390_io_adapter_map(adapter, indicator->map, true);
  85     if ((ret != 0) && (ret != -ENOSYS)) {
  86         goto out_err;
  87     }
  88     return 0;
  89
  90 out_err:
  91     indicator->map = 0;
  92     return ret;
  93 }
  94
  95 static void virtio_ccw_bus_new(VirtioBusState *bus, size_t bus_size,
  96                                VirtioCcwDevice *dev);
  97
  98 static void virtual_css_bus_reset(BusState *qbus)
  99 {
 100     /* This should actually be modelled via the generic css */
 101     css_reset();
 102 }
 103
 104
 105 static void virtual_css_bus_class_init(ObjectClass *klass, void *data)
 106 {
 107     BusClass *k = BUS_CLASS(klass);
 108
 109     k->reset = virtual_css_bus_reset;
 110 }
 111
 112 static const TypeInfo virtual_css_bus_info = {
 113     .name = TYPE_VIRTUAL_CSS_BUS,
 114     .parent = TYPE_BUS,
 115     .instance_size = sizeof(VirtualCssBus),
 116     .class_init = virtual_css_bus_class_init,
 117 };
 118
 119 VirtIODevice *virtio_ccw_get_vdev(SubchDev *sch)
 120 {
 121     VirtIODevice *vdev = NULL;
 122     VirtioCcwDevice *dev = sch->driver_data;
 123
 124     if (dev) {
 125         vdev = virtio_bus_get_device(&dev->bus);
 126     }
 127     return vdev;
 128 }
 129
 130 static int virtio_ccw_set_guest2host_notifier(VirtioCcwDevice *dev, int n,
 131                                               bool assign, bool set_handler)
 132 {
 133     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
 134     VirtQueue *vq = virtio_get_queue(vdev, n);
 135     EventNotifier *notifier = virtio_queue_get_host_notifier(vq);
 136     int r = 0;
 137     SubchDev *sch = dev->sch;
 138     uint32_t sch_id = (css_build_subchannel_id(sch) << 16) | sch->schid;
 139
 140     if (assign) {
 141         r = event_notifier_init(notifier, 1);
 142         if (r < 0) {
 143             error_report("%s: unable to init event notifier: %d", __func__, r);
 144             return r;
 145         }
 146         virtio_queue_set_host_notifier_fd_handler(vq, true, set_handler);
 147         r = s390_assign_subch_ioeventfd(notifier, sch_id, n, assign);
 148         if (r < 0) {
 149             error_report("%s: unable to assign ioeventfd: %d", __func__, r);
 150             virtio_queue_set_host_notifier_fd_handler(vq, false, false);
 151             event_notifier_cleanup(notifier);
 152             return r;
 153         }
 154     } else {
 155         virtio_queue_set_host_notifier_fd_handler(vq, false, false);
 156         s390_assign_subch_ioeventfd(notifier, sch_id, n, assign);
 157         event_notifier_cleanup(notifier);
 158     }
 159     return r;
 160 }
 161
 162 static void virtio_ccw_start_ioeventfd(VirtioCcwDevice *dev)
 163 {
 164     VirtIODevice *vdev;
 165     int n, r;
 166
 167     if (!(dev->flags & VIRTIO_CCW_FLAG_USE_IOEVENTFD) ||
 168         dev->ioeventfd_disabled ||
 169         dev->ioeventfd_started) {
 170         return;
 171     }
 172     vdev = virtio_bus_get_device(&dev->bus);
 173     for (n = 0; n < VIRTIO_PCI_QUEUE_MAX; n++) {
 174         if (!virtio_queue_get_num(vdev, n)) {
 175             continue;
 176         }
 177         r = virtio_ccw_set_guest2host_notifier(dev, n, true, true);
 178         if (r < 0) {
 179             goto assign_error;
 180         }
 181     }
 182     dev->ioeventfd_started = true;
 183     return;
 184
 185   assign_error:
 186     while (--n >= 0) {
 187         if (!virtio_queue_get_num(vdev, n)) {
 188             continue;
 189         }
 190         r = virtio_ccw_set_guest2host_notifier(dev, n, false, false);
 191         assert(r >= 0);
 192     }
 193     dev->ioeventfd_started = false;
 194     /* Disable ioeventfd for this device. */
 195     dev->flags &= ~VIRTIO_CCW_FLAG_USE_IOEVENTFD;
 196     error_report("%s: failed. Fallback to userspace (slower).", __func__);
 197 }
 198
 199 static void virtio_ccw_stop_ioeventfd(VirtioCcwDevice *dev)
 200 {
 201     VirtIODevice *vdev;
 202     int n, r;
 203
 204     if (!dev->ioeventfd_started) {
 205         return;
 206     }
 207     vdev = virtio_bus_get_device(&dev->bus);
 208     for (n = 0; n < VIRTIO_PCI_QUEUE_MAX; n++) {
 209         if (!virtio_queue_get_num(vdev, n)) {
 210             continue;
 211         }
 212         r = virtio_ccw_set_guest2host_notifier(dev, n, false, false);
 213         assert(r >= 0);
 214     }
 215     dev->ioeventfd_started = false;
 216 }
 217
 218 VirtualCssBus *virtual_css_bus_init(void)
 219 {
 220     VirtualCssBus *cbus;
 221     BusState *bus;
 222     DeviceState *dev;
 223
 224     /* Create bridge device */
 225     dev = qdev_create(NULL, "virtual-css-bridge");
 226     qdev_init_nofail(dev);
 227
 228     /* Create bus on bridge device */
 229     bus = qbus_create(TYPE_VIRTUAL_CSS_BUS, dev, "virtual-css");
 230     cbus = VIRTUAL_CSS_BUS(bus);
 231
 232     /* Enable hotplugging */
 233     qbus_set_hotplug_handler(bus, dev, &error_abort);
 234
 235     return cbus;
 236 }
 237
 238 /* Communication blocks used by several channel commands. */
 239 typedef struct VqInfoBlock {
 240     uint64_t queue;
 241     uint32_t align;
 242     uint16_t index;
 243     uint16_t num;
 244 } QEMU_PACKED VqInfoBlock;
 245
 246 typedef struct VqConfigBlock {
 247     uint16_t index;
 248     uint16_t num_max;
 249 } QEMU_PACKED VqConfigBlock;
 250
 251 typedef struct VirtioFeatDesc {
 252     uint32_t features;
 253     uint8_t index;
 254 } QEMU_PACKED VirtioFeatDesc;
 255
 256 typedef struct VirtioThinintInfo {
 257     hwaddr summary_indicator;
 258     hwaddr device_indicator;
 259     uint64_t ind_bit;
 260     uint8_t isc;
 261 } QEMU_PACKED VirtioThinintInfo;
 262
 263 /* Specify where the virtqueues for the subchannel are in guest memory. */
 264 static int virtio_ccw_set_vqs(SubchDev *sch, uint64_t addr, uint32_t align,
 265                               uint16_t index, uint16_t num)
 266 {
 267     VirtIODevice *vdev = virtio_ccw_get_vdev(sch);
 268
 269     if (index >= VIRTIO_PCI_QUEUE_MAX) {
 270         return -EINVAL;
 271     }
 272
 273     /* Current code in virtio.c relies on 4K alignment. */
 274     if (addr && (align != 4096)) {
 275         return -EINVAL;
 276     }
 277
 278     if (!vdev) {
 279         return -EINVAL;
 280     }
 281
 282     virtio_queue_set_addr(vdev, index, addr);
 283     if (!addr) {
 284         virtio_queue_set_vector(vdev, index, 0);
 285     } else {
 286         /* Fail if we don't have a big enough queue. */
 287         /* TODO: Add interface to handle vring.num changing */
 288         if (virtio_queue_get_num(vdev, index) > num) {
 289             return -EINVAL;
 290         }
 291         virtio_queue_set_vector(vdev, index, index);
 292     }
 293     /* tell notify handler in case of config change */
 294     vdev->config_vector = VIRTIO_PCI_QUEUE_MAX;
 295     return 0;
 296 }
 297
 298 static int virtio_ccw_cb(SubchDev *sch, CCW1 ccw)
 299 {
 300     int ret;
 301     VqInfoBlock info;
 302     uint8_t status;
 303     VirtioFeatDesc features;
 304     void *config;
 305     hwaddr indicators;
 306     VqConfigBlock vq_config;
 307     VirtioCcwDevice *dev = sch->driver_data;
 308     VirtIODevice *vdev = virtio_ccw_get_vdev(sch);
 309     bool check_len;
 310     int len;
 311     hwaddr hw_len;
 312     VirtioThinintInfo *thinint;
 313
 314     if (!dev) {
 315         return -EINVAL;
 316     }
 317
 318     trace_virtio_ccw_interpret_ccw(sch->cssid, sch->ssid, sch->schid,
 319                                    ccw.cmd_code);
 320     check_len = !((ccw.flags & CCW_FLAG_SLI) && !(ccw.flags & CCW_FLAG_DC));
 321
 322     /* Look at the command. */
 323     switch (ccw.cmd_code) {
 324     case CCW_CMD_SET_VQ:
 325         if (check_len) {
 326             if (ccw.count != sizeof(info)) {
 327                 ret = -EINVAL;
 328                 break;
 329             }
 330         } else if (ccw.count < sizeof(info)) {
 331             /* Can't execute command. */
 332             ret = -EINVAL;
 333             break;
 334         }
 335         if (!ccw.cda) {
 336             ret = -EFAULT;
 337         } else {
 338             info.queue = address_space_ldq(&address_space_memory, ccw.cda,
 339                                            MEMTXATTRS_UNSPECIFIED, NULL);
 340             info.align = address_space_ldl(&address_space_memory,
 341                                            ccw.cda + sizeof(info.queue),
 342                                            MEMTXATTRS_UNSPECIFIED,
 343                                            NULL);
 344             info.index = address_space_lduw(&address_space_memory,
 345                                             ccw.cda + sizeof(info.queue)
 346                                             + sizeof(info.align),
 347                                             MEMTXATTRS_UNSPECIFIED,
 348                                             NULL);
 349             info.num = address_space_lduw(&address_space_memory,
 350                                           ccw.cda + sizeof(info.queue)
 351                                           + sizeof(info.align)
 352                                           + sizeof(info.index),
 353                                           MEMTXATTRS_UNSPECIFIED,
 354                                           NULL);
 355             ret = virtio_ccw_set_vqs(sch, info.queue, info.align, info.index,
 356                                      info.num);
 357             sch->curr_status.scsw.count = 0;
 358         }
 359         break;
 360     case CCW_CMD_VDEV_RESET:
 361         virtio_ccw_stop_ioeventfd(dev);
 362         virtio_reset(vdev);
 363         ret = 0;
 364         break;
 365     case CCW_CMD_READ_FEAT:
 366         if (check_len) {
 367             if (ccw.count != sizeof(features)) {
 368                 ret = -EINVAL;
 369                 break;
 370             }
 371         } else if (ccw.count < sizeof(features)) {
 372             /* Can't execute command. */
 373             ret = -EINVAL;
 374             break;
 375         }
 376         if (!ccw.cda) {
 377             ret = -EFAULT;
 378         } else {
 379             features.index = address_space_ldub(&address_space_memory,
 380                                                 ccw.cda
 381                                                 + sizeof(features.features),
 382                                                 MEMTXATTRS_UNSPECIFIED,
 383                                                 NULL);
 384             if (features.index < ARRAY_SIZE(dev->host_features)) {
 385                 features.features = dev->host_features[features.index];
 386             } else {
 387                 /* Return zeroes if the guest supports more feature bits. */
 388                 features.features = 0;
 389             }
 390             address_space_stl_le(&address_space_memory, ccw.cda,
 391                                  features.features, MEMTXATTRS_UNSPECIFIED,
 392                                  NULL);
 393             sch->curr_status.scsw.count = ccw.count - sizeof(features);
 394             ret = 0;
 395         }
 396         break;
 397     case CCW_CMD_WRITE_FEAT:
 398         if (check_len) {
 399             if (ccw.count != sizeof(features)) {
 400                 ret = -EINVAL;
 401                 break;
 402             }
 403         } else if (ccw.count < sizeof(features)) {
 404             /* Can't execute command. */
 405             ret = -EINVAL;
 406             break;
 407         }
 408         if (!ccw.cda) {
 409             ret = -EFAULT;
 410         } else {
 411             features.index = address_space_ldub(&address_space_memory,
 412                                                 ccw.cda
 413                                                 + sizeof(features.features),
 414                                                 MEMTXATTRS_UNSPECIFIED,
 415                                                 NULL);
 416             features.features = address_space_ldl_le(&address_space_memory,
 417                                                      ccw.cda,
 418                                                      MEMTXATTRS_UNSPECIFIED,
 419                                                      NULL);
 420             if (features.index < ARRAY_SIZE(dev->host_features)) {
 421                 virtio_set_features(vdev, features.features);
 422             } else {
 423                 /*
 424                  * If the guest supports more feature bits, assert that it
 425                  * passes us zeroes for those we don't support.
 426                  */
 427                 if (features.features) {
 428                     fprintf(stderr, "Guest bug: features[%i]=%x (expected 0)\n",
 429                             features.index, features.features);
 430                     /* XXX: do a unit check here? */
 431                 }
 432             }
 433             sch->curr_status.scsw.count = ccw.count - sizeof(features);
 434             ret = 0;
 435         }
 436         break;
 437     case CCW_CMD_READ_CONF:
 438         if (check_len) {
 439             if (ccw.count > vdev->config_len) {
 440                 ret = -EINVAL;
 441                 break;
 442             }
 443         }
 444         len = MIN(ccw.count, vdev->config_len);
 445         if (!ccw.cda) {
 446             ret = -EFAULT;
 447         } else {
 448             virtio_bus_get_vdev_config(&dev->bus, vdev->config);
 449             /* XXX config space endianness */
 450             cpu_physical_memory_write(ccw.cda, vdev->config, len);
 451             sch->curr_status.scsw.count = ccw.count - len;
 452             ret = 0;
 453         }
 454         break;
 455     case CCW_CMD_WRITE_CONF:
 456         if (check_len) {
 457             if (ccw.count > vdev->config_len) {
 458                 ret = -EINVAL;
 459                 break;
 460             }
 461         }
 462         len = MIN(ccw.count, vdev->config_len);
 463         hw_len = len;
 464         if (!ccw.cda) {
 465             ret = -EFAULT;
 466         } else {
 467             config = cpu_physical_memory_map(ccw.cda, &hw_len, 0);
 468             if (!config) {
 469                 ret = -EFAULT;
 470             } else {
 471                 len = hw_len;
 472                 /* XXX config space endianness */
 473                 memcpy(vdev->config, config, len);
 474                 cpu_physical_memory_unmap(config, hw_len, 0, hw_len);
 475                 virtio_bus_set_vdev_config(&dev->bus, vdev->config);
 476                 sch->curr_status.scsw.count = ccw.count - len;
 477                 ret = 0;
 478             }
 479         }
 480         break;
 481     case CCW_CMD_WRITE_STATUS:
 482         if (check_len) {
 483             if (ccw.count != sizeof(status)) {
 484                 ret = -EINVAL;
 485                 break;
 486             }
 487         } else if (ccw.count < sizeof(status)) {
 488             /* Can't execute command. */
 489             ret = -EINVAL;
 490             break;
 491         }
 492         if (!ccw.cda) {
 493             ret = -EFAULT;
 494         } else {
 495             status = address_space_ldub(&address_space_memory, ccw.cda,
 496                                         MEMTXATTRS_UNSPECIFIED, NULL);
 497             if (!(status & VIRTIO_CONFIG_S_DRIVER_OK)) {
 498                 virtio_ccw_stop_ioeventfd(dev);
 499             }
 500             virtio_set_status(vdev, status);
 501             if (vdev->status == 0) {
 502                 virtio_reset(vdev);
 503             }
 504             if (status & VIRTIO_CONFIG_S_DRIVER_OK) {
 505                 virtio_ccw_start_ioeventfd(dev);
 506             }
 507             sch->curr_status.scsw.count = ccw.count - sizeof(status);
 508             ret = 0;
 509         }
 510         break;
 511     case CCW_CMD_SET_IND:
 512         if (check_len) {
 513             if (ccw.count != sizeof(indicators)) {
 514                 ret = -EINVAL;
 515                 break;
 516             }
 517         } else if (ccw.count < sizeof(indicators)) {
 518             /* Can't execute command. */
 519             ret = -EINVAL;
 520             break;
 521         }
 522         if (sch->thinint_active) {
 523             /* Trigger a command reject. */
 524             ret = -ENOSYS;
 525             break;
 526         }
 527         if (!ccw.cda) {
 528             ret = -EFAULT;
 529         } else {
 530             indicators = address_space_ldq_be(&address_space_memory, ccw.cda,
 531                                               MEMTXATTRS_UNSPECIFIED, NULL);
 532             dev->indicators = get_indicator(indicators, sizeof(uint64_t));
 533             sch->curr_status.scsw.count = ccw.count - sizeof(indicators);
 534             ret = 0;
 535         }
 536         break;
 537     case CCW_CMD_SET_CONF_IND:
 538         if (check_len) {
 539             if (ccw.count != sizeof(indicators)) {
 540                 ret = -EINVAL;
 541                 break;
 542             }
 543         } else if (ccw.count < sizeof(indicators)) {
 544             /* Can't execute command. */
 545             ret = -EINVAL;
 546             break;
 547         }
 548         if (!ccw.cda) {
 549             ret = -EFAULT;
 550         } else {
 551             indicators = address_space_ldq_be(&address_space_memory, ccw.cda,
 552                                               MEMTXATTRS_UNSPECIFIED, NULL);
 553             dev->indicators2 = get_indicator(indicators, sizeof(uint64_t));
 554             sch->curr_status.scsw.count = ccw.count - sizeof(indicators);
 555             ret = 0;
 556         }
 557         break;
 558     case CCW_CMD_READ_VQ_CONF:
 559         if (check_len) {
 560             if (ccw.count != sizeof(vq_config)) {
 561                 ret = -EINVAL;
 562                 break;
 563             }
 564         } else if (ccw.count < sizeof(vq_config)) {
 565             /* Can't execute command. */
 566             ret = -EINVAL;
 567             break;
 568         }
 569         if (!ccw.cda) {
 570             ret = -EFAULT;
 571         } else {
 572             vq_config.index = address_space_lduw_be(&address_space_memory,
 573                                                     ccw.cda,
 574                                                     MEMTXATTRS_UNSPECIFIED,
 575                                                     NULL);
 576             if (vq_config.index >= VIRTIO_PCI_QUEUE_MAX) {
 577                 ret = -EINVAL;
 578                 break;
 579             }
 580             vq_config.num_max = virtio_queue_get_num(vdev,
 581                                                      vq_config.index);
 582             address_space_stw_be(&address_space_memory,
 583                                  ccw.cda + sizeof(vq_config.index),
 584                                  vq_config.num_max,
 585                                  MEMTXATTRS_UNSPECIFIED,
 586                                  NULL);
 587             sch->curr_status.scsw.count = ccw.count - sizeof(vq_config);
 588             ret = 0;
 589         }
 590         break;
 591     case CCW_CMD_SET_IND_ADAPTER:
 592         if (check_len) {
 593             if (ccw.count != sizeof(*thinint)) {
 594                 ret = -EINVAL;
 595                 break;
 596             }
 597         } else if (ccw.count < sizeof(*thinint)) {
 598             /* Can't execute command. */
 599             ret = -EINVAL;
 600             break;
 601         }
 602         len = sizeof(*thinint);
 603         hw_len = len;
 604         if (!ccw.cda) {
 605             ret = -EFAULT;
 606         } else if (dev->indicators && !sch->thinint_active) {
 607             /* Trigger a command reject. */
 608             ret = -ENOSYS;
 609         } else {
 610             thinint = cpu_physical_memory_map(ccw.cda, &hw_len, 0);
 611             if (!thinint) {
 612                 ret = -EFAULT;
 613             } else {
 614                 uint64_t ind_bit = ldq_be_p(&thinint->ind_bit);
 615
 616                 len = hw_len;
 617                 dev->summary_indicator =
 618                     get_indicator(ldq_be_p(&thinint->summary_indicator),
 619                                   sizeof(uint8_t));
 620                 dev->indicators =
 621                     get_indicator(ldq_be_p(&thinint->device_indicator),
 622                                   ind_bit / 8 + 1);
 623                 dev->thinint_isc = thinint->isc;
 624                 dev->routes.adapter.ind_offset = ind_bit;
 625                 dev->routes.adapter.summary_offset = 7;
 626                 cpu_physical_memory_unmap(thinint, hw_len, 0, hw_len);
 627                 ret = css_register_io_adapter(CSS_IO_ADAPTER_VIRTIO,
 628                                               dev->thinint_isc, true, false,
 629                                               &dev->routes.adapter.adapter_id);
 630                 assert(ret == 0);
 631                 sch->thinint_active = ((dev->indicators != NULL) &&
 632                                        (dev->summary_indicator != NULL));
 633                 sch->curr_status.scsw.count = ccw.count - len;
 634                 ret = 0;
 635             }
 636         }
 637         break;
 638     default:
 639         ret = -ENOSYS;
 640         break;
 641     }
 642     return ret;
 643 }
 644
 645 static void virtio_ccw_device_realize(VirtioCcwDevice *dev, Error **errp)
 646 {
 647     unsigned int cssid = 0;
 648     unsigned int ssid = 0;
 649     unsigned int schid;
 650     unsigned int devno;
 651     bool have_devno = false;
 652     bool found = false;
 653     SubchDev *sch;
 654     int num;
 655     DeviceState *parent = DEVICE(dev);
 656     Error *err = NULL;
 657     VirtIOCCWDeviceClass *k = VIRTIO_CCW_DEVICE_GET_CLASS(dev);
 658     VirtIODevice *vdev;
 659
 660     sch = g_malloc0(sizeof(SubchDev));
 661
 662     sch->driver_data = dev;
 663     dev->sch = sch;
 664
 665     dev->indicators = NULL;
 666
 667     /* Initialize subchannel structure. */
 668     sch->channel_prog = 0x0;
 669     sch->last_cmd_valid = false;
 670     sch->thinint_active = false;
 671     /*
 672      * Use a device number if provided. Otherwise, fall back to subchannel
 673      * number.
 674      */
 675     if (dev->bus_id) {
 676         num = sscanf(dev->bus_id, "%x.%x.%04x", &cssid, &ssid, &devno);
 677         if (num == 3) {
 678             if ((cssid > MAX_CSSID) || (ssid > MAX_SSID)) {
 679                 error_setg(errp, "Invalid cssid or ssid: cssid %x, ssid %x",
 680                            cssid, ssid);
 681                 goto out_err;
 682             }
 683             /* Enforce use of virtual cssid. */
 684             if (cssid != VIRTUAL_CSSID) {
 685                 error_setg(errp, "cssid %x not valid for virtio devices",
 686                            cssid);
 687                 goto out_err;
 688             }
 689             if (css_devno_used(cssid, ssid, devno)) {
 690                 error_setg(errp, "Device %x.%x.%04x already exists",
 691                            cssid, ssid, devno);
 692                 goto out_err;
 693             }
 694             sch->cssid = cssid;
 695             sch->ssid = ssid;
 696             sch->devno = devno;
 697             have_devno = true;
 698         } else {
 699             error_setg(errp, "Malformed devno parameter '%s'", dev->bus_id);
 700             goto out_err;
 701         }
 702     }
 703
 704     /* Find the next free id. */
 705     if (have_devno) {
 706         for (schid = 0; schid <= MAX_SCHID; schid++) {
 707             if (!css_find_subch(1, cssid, ssid, schid)) {
 708                 sch->schid = schid;
 709                 css_subch_assign(cssid, ssid, schid, devno, sch);
 710                 found = true;
 711                 break;
 712             }
 713         }
 714         if (!found) {
 715             error_setg(errp, "No free subchannel found for %x.%x.%04x",
 716                        cssid, ssid, devno);
 717             goto out_err;
 718         }
 719         trace_virtio_ccw_new_device(cssid, ssid, schid, devno,
 720                                     "user-configured");
 721     } else {
 722         cssid = VIRTUAL_CSSID;
 723         for (ssid = 0; ssid <= MAX_SSID; ssid++) {
 724             for (schid = 0; schid <= MAX_SCHID; schid++) {
 725                 if (!css_find_subch(1, cssid, ssid, schid)) {
 726                     sch->cssid = cssid;
 727                     sch->ssid = ssid;
 728                     sch->schid = schid;
 729                     devno = schid;
 730                     /*
 731                      * If the devno is already taken, look further in this
 732                      * subchannel set.
 733                      */
 734                     while (css_devno_used(cssid, ssid, devno)) {
 735                         if (devno == MAX_SCHID) {
 736                             devno = 0;
 737                         } else if (devno == schid - 1) {
 738                             error_setg(errp, "No free devno found");
 739                             goto out_err;
 740                         } else {
 741                             devno++;
 742                         }
 743                     }
 744                     sch->devno = devno;
 745                     css_subch_assign(cssid, ssid, schid, devno, sch);
 746                     found = true;
 747                     break;
 748                 }
 749             }
 750             if (found) {
 751                 break;
 752             }
 753         }
 754         if (!found) {
 755             error_setg(errp, "Virtual channel subsystem is full!");
 756             goto out_err;
 757         }
 758         trace_virtio_ccw_new_device(cssid, ssid, schid, devno,
 759                                     "auto-configured");
 760     }
 761
 762     /* Build initial schib. */
 763     css_sch_build_virtual_schib(sch, 0, VIRTIO_CCW_CHPID_TYPE);
 764
 765     sch->ccw_cb = virtio_ccw_cb;
 766
 767     /* Build senseid data. */
 768     memset(&sch->id, 0, sizeof(SenseId));
 769     sch->id.reserved = 0xff;
 770     sch->id.cu_type = VIRTIO_CCW_CU_TYPE;
 771
 772     if (k->realize) {
 773         k->realize(dev, &err);
 774     }
 775     if (err) {
 776         error_propagate(errp, err);
 777         css_subch_assign(cssid, ssid, schid, devno, NULL);
 778         goto out_err;
 779     }
 780
 781     /* device_id is only set after vdev has been realized */
 782     vdev = virtio_ccw_get_vdev(sch);
 783     sch->id.cu_model = vdev->device_id;
 784
 785     /* Only the first 32 feature bits are used. */
 786     dev->host_features[0] = virtio_bus_get_vdev_features(&dev->bus,
 787                                                          dev->host_features[0]);
 788
 789     virtio_add_feature(&dev->host_features[0], VIRTIO_F_NOTIFY_ON_EMPTY);
 790     virtio_add_feature(&dev->host_features[0], VIRTIO_F_BAD_FEATURE);
 791
 792     css_generate_sch_crws(sch->cssid, sch->ssid, sch->schid,
 793                           parent->hotplugged, 1);
 794     return;
 795
 796 out_err:
 797     dev->sch = NULL;
 798     g_free(sch);
 799 }
 800
 801 static int virtio_ccw_exit(VirtioCcwDevice *dev)
 802 {
 803     SubchDev *sch = dev->sch;
 804
 805     if (sch) {
 806         css_subch_assign(sch->cssid, sch->ssid, sch->schid, sch->devno, NULL);
 807         g_free(sch);
 808     }
 809     if (dev->indicators) {
 810         release_indicator(&dev->routes.adapter, dev->indicators);
 811         dev->indicators = NULL;
 812     }
 813     return 0;
 814 }
 815
 816 static void virtio_ccw_net_realize(VirtioCcwDevice *ccw_dev, Error **errp)
 817 {
 818     DeviceState *qdev = DEVICE(ccw_dev);
 819     VirtIONetCcw *dev = VIRTIO_NET_CCW(ccw_dev);
 820     DeviceState *vdev = DEVICE(&dev->vdev);
 821     Error *err = NULL;
 822
 823     virtio_net_set_config_size(&dev->vdev, ccw_dev->host_features[0]);
 824     virtio_net_set_netclient_name(&dev->vdev, qdev->id,
 825                                   object_get_typename(OBJECT(qdev)));
 826     qdev_set_parent_bus(vdev, BUS(&ccw_dev->bus));
 827     object_property_set_bool(OBJECT(vdev), true, "realized", &err);
 828     if (err) {
 829         error_propagate(errp, err);
 830     }
 831 }
 832
 833 static void virtio_ccw_net_instance_init(Object *obj)
 834 {
 835     VirtIONetCcw *dev = VIRTIO_NET_CCW(obj);
 836
 837     virtio_instance_init_common(obj, &dev->vdev, sizeof(dev->vdev),
 838                                 TYPE_VIRTIO_NET);
 839     object_property_add_alias(obj, "bootindex", OBJECT(&dev->vdev),
 840                               "bootindex", &error_abort);
 841 }
 842
 843 static void virtio_ccw_blk_realize(VirtioCcwDevice *ccw_dev, Error **errp)
 844 {
 845     VirtIOBlkCcw *dev = VIRTIO_BLK_CCW(ccw_dev);
 846     DeviceState *vdev = DEVICE(&dev->vdev);
 847     Error *err = NULL;
 848
 849     qdev_set_parent_bus(vdev, BUS(&ccw_dev->bus));
 850     object_property_set_bool(OBJECT(vdev), true, "realized", &err);
 851     if (err) {
 852         error_propagate(errp, err);
 853     }
 854 }
 855
 856 static void virtio_ccw_blk_instance_init(Object *obj)
 857 {
 858     VirtIOBlkCcw *dev = VIRTIO_BLK_CCW(obj);
 859
 860     virtio_instance_init_common(obj, &dev->vdev, sizeof(dev->vdev),
 861                                 TYPE_VIRTIO_BLK);
 862     object_property_add_alias(obj, "iothread", OBJECT(&dev->vdev),"iothread",
 863                               &error_abort);
 864     object_property_add_alias(obj, "bootindex", OBJECT(&dev->vdev),
 865                               "bootindex", &error_abort);
 866 }
 867
 868 static void virtio_ccw_serial_realize(VirtioCcwDevice *ccw_dev, Error **errp)
 869 {
 870     VirtioSerialCcw *dev = VIRTIO_SERIAL_CCW(ccw_dev);
 871     DeviceState *vdev = DEVICE(&dev->vdev);
 872     DeviceState *proxy = DEVICE(ccw_dev);
 873     Error *err = NULL;
 874     char *bus_name;
 875
 876     /*
 877      * For command line compatibility, this sets the virtio-serial-device bus
 878      * name as before.
 879      */
 880     if (proxy->id) {
 881         bus_name = g_strdup_printf("%s.0", proxy->id);
 882         virtio_device_set_child_bus_name(VIRTIO_DEVICE(vdev), bus_name);
 883         g_free(bus_name);
 884     }
 885
 886     qdev_set_parent_bus(vdev, BUS(&ccw_dev->bus));
 887     object_property_set_bool(OBJECT(vdev), true, "realized", &err);
 888     if (err) {
 889         error_propagate(errp, err);
 890     }
 891 }
 892
 893
 894 static void virtio_ccw_serial_instance_init(Object *obj)
 895 {
 896     VirtioSerialCcw *dev = VIRTIO_SERIAL_CCW(obj);
 897
 898     virtio_instance_init_common(obj, &dev->vdev, sizeof(dev->vdev),
 899                                 TYPE_VIRTIO_SERIAL);
 900 }
 901
 902 static void virtio_ccw_balloon_realize(VirtioCcwDevice *ccw_dev, Error **errp)
 903 {
 904     VirtIOBalloonCcw *dev = VIRTIO_BALLOON_CCW(ccw_dev);
 905     DeviceState *vdev = DEVICE(&dev->vdev);
 906     Error *err = NULL;
 907
 908     qdev_set_parent_bus(vdev, BUS(&ccw_dev->bus));
 909     object_property_set_bool(OBJECT(vdev), true, "realized", &err);
 910     if (err) {
 911         error_propagate(errp, err);
 912     }
 913 }
 914
 915 static void balloon_ccw_stats_get_all(Object *obj, struct Visitor *v,
 916                                       void *opaque, const char *name,
 917                                       Error **errp)
 918 {
 919     VirtIOBalloonCcw *dev = opaque;
 920     object_property_get(OBJECT(&dev->vdev), v, "guest-stats", errp);
 921 }
 922
 923 static void balloon_ccw_stats_get_poll_interval(Object *obj, struct Visitor *v,
 924                                                 void *opaque, const char *name,
 925                                                 Error **errp)
 926 {
 927     VirtIOBalloonCcw *dev = opaque;
 928     object_property_get(OBJECT(&dev->vdev), v, "guest-stats-polling-interval",
 929                         errp);
 930 }
 931
 932 static void balloon_ccw_stats_set_poll_interval(Object *obj, struct Visitor *v,
 933                                                 void *opaque, const char *name,
 934                                                 Error **errp)
 935 {
 936     VirtIOBalloonCcw *dev = opaque;
 937     object_property_set(OBJECT(&dev->vdev), v, "guest-stats-polling-interval",
 938                         errp);
 939 }
 940
 941 static void virtio_ccw_balloon_instance_init(Object *obj)
 942 {
 943     VirtIOBalloonCcw *dev = VIRTIO_BALLOON_CCW(obj);
 944     virtio_instance_init_common(obj, &dev->vdev, sizeof(dev->vdev),
 945                                 TYPE_VIRTIO_BALLOON);
 946     object_property_add(obj, "guest-stats", "guest statistics",
 947                         balloon_ccw_stats_get_all, NULL, NULL, dev, NULL);
 948
 949     object_property_add(obj, "guest-stats-polling-interval", "int",
 950                         balloon_ccw_stats_get_poll_interval,
 951                         balloon_ccw_stats_set_poll_interval,
 952                         NULL, dev, NULL);
 953 }
 954
 955 static void virtio_ccw_scsi_realize(VirtioCcwDevice *ccw_dev, Error **errp)
 956 {
 957     VirtIOSCSICcw *dev = VIRTIO_SCSI_CCW(ccw_dev);
 958     DeviceState *vdev = DEVICE(&dev->vdev);
 959     DeviceState *qdev = DEVICE(ccw_dev);
 960     Error *err = NULL;
 961     char *bus_name;
 962
 963     /*
 964      * For command line compatibility, this sets the virtio-scsi-device bus
 965      * name as before.
 966      */
 967     if (qdev->id) {
 968         bus_name = g_strdup_printf("%s.0", qdev->id);
 969         virtio_device_set_child_bus_name(VIRTIO_DEVICE(vdev), bus_name);
 970         g_free(bus_name);
 971     }
 972
 973     qdev_set_parent_bus(vdev, BUS(&ccw_dev->bus));
 974     object_property_set_bool(OBJECT(vdev), true, "realized", &err);
 975     if (err) {
 976         error_propagate(errp, err);
 977     }
 978 }
 979
 980 static void virtio_ccw_scsi_instance_init(Object *obj)
 981 {
 982     VirtIOSCSICcw *dev = VIRTIO_SCSI_CCW(obj);
 983
 984     virtio_instance_init_common(obj, &dev->vdev, sizeof(dev->vdev),
 985                                 TYPE_VIRTIO_SCSI);
 986     object_property_add_alias(obj, "iothread", OBJECT(&dev->vdev), "iothread",
 987                               &error_abort);
 988 }
 989
 990 #ifdef CONFIG_VHOST_SCSI
 991 static void vhost_ccw_scsi_realize(VirtioCcwDevice *ccw_dev, Error **errp)
 992 {
 993     VHostSCSICcw *dev = VHOST_SCSI_CCW(ccw_dev);
 994     DeviceState *vdev = DEVICE(&dev->vdev);
 995     Error *err = NULL;
 996
 997     qdev_set_parent_bus(vdev, BUS(&ccw_dev->bus));
 998     object_property_set_bool(OBJECT(vdev), true, "realized", &err);
 999     if (err) {
1000         error_propagate(errp, err);
1001     }
1002 }
1003
1004 static void vhost_ccw_scsi_instance_init(Object *obj)
1005 {
1006     VHostSCSICcw *dev = VHOST_SCSI_CCW(obj);
1007
1008     virtio_instance_init_common(obj, &dev->vdev, sizeof(dev->vdev),
1009                                 TYPE_VHOST_SCSI);
1010 }
1011 #endif
1012
1013 static void virtio_ccw_rng_realize(VirtioCcwDevice *ccw_dev, Error **errp)
1014 {
1015     VirtIORNGCcw *dev = VIRTIO_RNG_CCW(ccw_dev);
1016     DeviceState *vdev = DEVICE(&dev->vdev);
1017     Error *err = NULL;
1018
1019     qdev_set_parent_bus(vdev, BUS(&ccw_dev->bus));
1020     object_property_set_bool(OBJECT(vdev), true, "realized", &err);
1021     if (err) {
1022         error_propagate(errp, err);
1023         return;
1024     }
1025
1026     object_property_set_link(OBJECT(dev),
1027                              OBJECT(dev->vdev.conf.rng), "rng",
1028                              NULL);
1029 }
1030
1031 /* DeviceState to VirtioCcwDevice. Note: used on datapath,
1032  * be careful and test performance if you change this.
1033  */
1034 static inline VirtioCcwDevice *to_virtio_ccw_dev_fast(DeviceState *d)
1035 {
1036     return container_of(d, VirtioCcwDevice, parent_obj);
1037 }
1038
1039 static uint8_t virtio_set_ind_atomic(SubchDev *sch, uint64_t ind_loc,
1040                                      uint8_t to_be_set)
1041 {
1042     uint8_t ind_old, ind_new;
1043     hwaddr len = 1;
1044     uint8_t *ind_addr;
1045
1046     ind_addr = cpu_physical_memory_map(ind_loc, &len, 1);
1047     if (!ind_addr) {
1048         error_report("%s(%x.%x.%04x): unable to access indicator",
1049                      __func__, sch->cssid, sch->ssid, sch->schid);
1050         return -1;
1051     }
1052     do {
1053         ind_old = *ind_addr;
1054         ind_new = ind_old | to_be_set;
1055     } while (atomic_cmpxchg(ind_addr, ind_old, ind_new) != ind_old);
1056     cpu_physical_memory_unmap(ind_addr, len, 1, len);
1057
1058     return ind_old;
1059 }
1060
1061 static void virtio_ccw_notify(DeviceState *d, uint16_t vector)
1062 {
1063     VirtioCcwDevice *dev = to_virtio_ccw_dev_fast(d);
1064     SubchDev *sch = dev->sch;
1065     uint64_t indicators;
1066
1067     if (vector >= 128) {
1068         return;
1069     }
1070
1071     if (vector < VIRTIO_PCI_QUEUE_MAX) {
1072         if (!dev->indicators) {
1073             return;
1074         }
1075         if (sch->thinint_active) {
1076             /*
1077              * In the adapter interrupt case, indicators points to a
1078              * memory area that may be (way) larger than 64 bit and
1079              * ind_bit indicates the start of the indicators in a big
1080              * endian notation.
1081              */
1082             uint64_t ind_bit = dev->routes.adapter.ind_offset;
1083
1084             virtio_set_ind_atomic(sch, dev->indicators->addr +
1085                                   (ind_bit + vector) / 8,
1086                                   0x80 >> ((ind_bit + vector) % 8));
1087             if (!virtio_set_ind_atomic(sch, dev->summary_indicator->addr,
1088                                        0x01)) {
1089                 css_adapter_interrupt(dev->thinint_isc);
1090             }
1091         } else {
1092             indicators = address_space_ldq(&address_space_memory,
1093                                            dev->indicators->addr,
1094                                            MEMTXATTRS_UNSPECIFIED,
1095                                            NULL);
1096             indicators |= 1ULL << vector;
1097             address_space_stq(&address_space_memory, dev->indicators->addr,
1098                               indicators, MEMTXATTRS_UNSPECIFIED, NULL);
1099             css_conditional_io_interrupt(sch);
1100         }
1101     } else {
1102         if (!dev->indicators2) {
1103             return;
1104         }
1105         vector = 0;
1106         indicators = address_space_ldq(&address_space_memory,
1107                                        dev->indicators2->addr,
1108                                        MEMTXATTRS_UNSPECIFIED,
1109                                        NULL);
1110         indicators |= 1ULL << vector;
1111         address_space_stq(&address_space_memory, dev->indicators2->addr,
1112                           indicators, MEMTXATTRS_UNSPECIFIED, NULL);
1113         css_conditional_io_interrupt(sch);
1114     }
1115 }
1116
1117 static unsigned virtio_ccw_get_features(DeviceState *d)
1118 {
1119     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1120
1121     /* Only the first 32 feature bits are used. */
1122     return dev->host_features[0];
1123 }
1124
1125 static void virtio_ccw_reset(DeviceState *d)
1126 {
1127     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1128     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1129
1130     virtio_ccw_stop_ioeventfd(dev);
1131     virtio_reset(vdev);
1132     css_reset_sch(dev->sch);
1133     if (dev->indicators) {
1134         release_indicator(&dev->routes.adapter, dev->indicators);
1135         dev->indicators = NULL;
1136     }
1137     if (dev->indicators2) {
1138         release_indicator(&dev->routes.adapter, dev->indicators2);
1139         dev->indicators2 = NULL;
1140     }
1141     if (dev->summary_indicator) {
1142         release_indicator(&dev->routes.adapter, dev->summary_indicator);
1143         dev->summary_indicator = NULL;
1144     }
1145 }
1146
1147 static void virtio_ccw_vmstate_change(DeviceState *d, bool running)
1148 {
1149     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1150
1151     if (running) {
1152         virtio_ccw_start_ioeventfd(dev);
1153     } else {
1154         virtio_ccw_stop_ioeventfd(dev);
1155     }
1156 }
1157
1158 static bool virtio_ccw_query_guest_notifiers(DeviceState *d)
1159 {
1160     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1161
1162     return !!(dev->sch->curr_status.pmcw.flags & PMCW_FLAGS_MASK_ENA);
1163 }
1164
1165 static int virtio_ccw_set_host_notifier(DeviceState *d, int n, bool assign)
1166 {
1167     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1168
1169     /* Stop using the generic ioeventfd, we are doing eventfd handling
1170      * ourselves below */
1171     dev->ioeventfd_disabled = assign;
1172     if (assign) {
1173         virtio_ccw_stop_ioeventfd(dev);
1174     }
1175     return virtio_ccw_set_guest2host_notifier(dev, n, assign, false);
1176 }
1177
1178 static int virtio_ccw_get_mappings(VirtioCcwDevice *dev)
1179 {
1180     int r;
1181
1182     if (!dev->sch->thinint_active) {
1183         return -EINVAL;
1184     }
1185
1186     r = map_indicator(&dev->routes.adapter, dev->summary_indicator);
1187     if (r) {
1188         return r;
1189     }
1190     r = map_indicator(&dev->routes.adapter, dev->indicators);
1191     if (r) {
1192         return r;
1193     }
1194     dev->routes.adapter.summary_addr = dev->summary_indicator->map;
1195     dev->routes.adapter.ind_addr = dev->indicators->map;
1196
1197     return 0;
1198 }
1199
1200 static int virtio_ccw_setup_irqroutes(VirtioCcwDevice *dev, int nvqs)
1201 {
1202     int i;
1203     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1204     int ret;
1205     S390FLICState *fs = s390_get_flic();
1206     S390FLICStateClass *fsc = S390_FLIC_COMMON_GET_CLASS(fs);
1207
1208     ret = virtio_ccw_get_mappings(dev);
1209     if (ret) {
1210         return ret;
1211     }
1212     for (i = 0; i < nvqs; i++) {
1213         if (!virtio_queue_get_num(vdev, i)) {
1214             break;
1215         }
1216     }
1217     dev->routes.num_routes = i;
1218     return fsc->add_adapter_routes(fs, &dev->routes);
1219 }
1220
1221 static void virtio_ccw_release_irqroutes(VirtioCcwDevice *dev, int nvqs)
1222 {
1223     S390FLICState *fs = s390_get_flic();
1224     S390FLICStateClass *fsc = S390_FLIC_COMMON_GET_CLASS(fs);
1225
1226     fsc->release_adapter_routes(fs, &dev->routes);
1227 }
1228
1229 static int virtio_ccw_add_irqfd(VirtioCcwDevice *dev, int n)
1230 {
1231     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1232     VirtQueue *vq = virtio_get_queue(vdev, n);
1233     EventNotifier *notifier = virtio_queue_get_guest_notifier(vq);
1234
1235     return kvm_irqchip_add_irqfd_notifier(kvm_state, notifier, NULL,
1236                                           dev->routes.gsi[n]);
1237 }
1238
1239 static void virtio_ccw_remove_irqfd(VirtioCcwDevice *dev, int n)
1240 {
1241     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1242     VirtQueue *vq = virtio_get_queue(vdev, n);
1243     EventNotifier *notifier = virtio_queue_get_guest_notifier(vq);
1244     int ret;
1245
1246     ret = kvm_irqchip_remove_irqfd_notifier(kvm_state, notifier,
1247                                             dev->routes.gsi[n]);
1248     assert(ret == 0);
1249 }
1250
1251 static int virtio_ccw_set_guest_notifier(VirtioCcwDevice *dev, int n,
1252                                          bool assign, bool with_irqfd)
1253 {
1254     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1255     VirtQueue *vq = virtio_get_queue(vdev, n);
1256     EventNotifier *notifier = virtio_queue_get_guest_notifier(vq);
1257     VirtioDeviceClass *k = VIRTIO_DEVICE_GET_CLASS(vdev);
1258
1259     if (assign) {
1260         int r = event_notifier_init(notifier, 0);
1261
1262         if (r < 0) {
1263             return r;
1264         }
1265         virtio_queue_set_guest_notifier_fd_handler(vq, true, with_irqfd);
1266         if (with_irqfd) {
1267             r = virtio_ccw_add_irqfd(dev, n);
1268             if (r) {
1269                 virtio_queue_set_guest_notifier_fd_handler(vq, false,
1270                                                            with_irqfd);
1271                 return r;
1272             }
1273         }
1274         /*
1275          * We do not support individual masking for channel devices, so we
1276          * need to manually trigger any guest masking callbacks here.
1277          */
1278         if (k->guest_notifier_mask) {
1279             k->guest_notifier_mask(vdev, n, false);
1280         }
1281         /* get lost events and re-inject */
1282         if (k->guest_notifier_pending &&
1283             k->guest_notifier_pending(vdev, n)) {
1284             event_notifier_set(notifier);
1285         }
1286     } else {
1287         if (k->guest_notifier_mask) {
1288             k->guest_notifier_mask(vdev, n, true);
1289         }
1290         if (with_irqfd) {
1291             virtio_ccw_remove_irqfd(dev, n);
1292         }
1293         virtio_queue_set_guest_notifier_fd_handler(vq, false, with_irqfd);
1294         event_notifier_cleanup(notifier);
1295     }
1296     return 0;
1297 }
1298
1299 static int virtio_ccw_set_guest_notifiers(DeviceState *d, int nvqs,
1300                                           bool assigned)
1301 {
1302     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1303     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1304     bool with_irqfd = dev->sch->thinint_active && kvm_irqfds_enabled();
1305     int r, n;
1306
1307     if (with_irqfd && assigned) {
1308         /* irq routes need to be set up before assigning irqfds */
1309         r = virtio_ccw_setup_irqroutes(dev, nvqs);
1310         if (r < 0) {
1311             goto irqroute_error;
1312         }
1313     }
1314     for (n = 0; n < nvqs; n++) {
1315         if (!virtio_queue_get_num(vdev, n)) {
1316             break;
1317         }
1318         r = virtio_ccw_set_guest_notifier(dev, n, assigned, with_irqfd);
1319         if (r < 0) {
1320             goto assign_error;
1321         }
1322     }
1323     if (with_irqfd && !assigned) {
1324         /* release irq routes after irqfds have been released */
1325         virtio_ccw_release_irqroutes(dev, nvqs);
1326     }
1327     return 0;
1328
1329 assign_error:
1330     while (--n >= 0) {
1331         virtio_ccw_set_guest_notifier(dev, n, !assigned, false);
1332     }
1333 irqroute_error:
1334     if (with_irqfd && assigned) {
1335         virtio_ccw_release_irqroutes(dev, nvqs);
1336     }
1337     return r;
1338 }
1339
1340 static void virtio_ccw_save_queue(DeviceState *d, int n, QEMUFile *f)
1341 {
1342     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1343     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1344
1345     qemu_put_be16(f, virtio_queue_vector(vdev, n));
1346 }
1347
1348 static int virtio_ccw_load_queue(DeviceState *d, int n, QEMUFile *f)
1349 {
1350     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1351     VirtIODevice *vdev = virtio_bus_get_device(&dev->bus);
1352     uint16_t vector;
1353
1354     qemu_get_be16s(f, &vector);
1355     virtio_queue_set_vector(vdev, n , vector);
1356
1357     return 0;
1358 }
1359
1360 static void virtio_ccw_save_config(DeviceState *d, QEMUFile *f)
1361 {
1362     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1363     SubchDev *s = dev->sch;
1364
1365     subch_device_save(s, f);
1366     if (dev->indicators != NULL) {
1367         qemu_put_be32(f, dev->indicators->len);
1368         qemu_put_be64(f, dev->indicators->addr);
1369     } else {
1370         qemu_put_be32(f, 0);
1371         qemu_put_be64(f, 0UL);
1372     }
1373     if (dev->indicators2 != NULL) {
1374         qemu_put_be32(f, dev->indicators2->len);
1375         qemu_put_be64(f, dev->indicators2->addr);
1376     } else {
1377         qemu_put_be32(f, 0);
1378         qemu_put_be64(f, 0UL);
1379     }
1380     if (dev->summary_indicator != NULL) {
1381         qemu_put_be32(f, dev->summary_indicator->len);
1382         qemu_put_be64(f, dev->summary_indicator->addr);
1383     } else {
1384         qemu_put_be32(f, 0);
1385         qemu_put_be64(f, 0UL);
1386     }
1387     qemu_put_be64(f, dev->routes.adapter.ind_offset);
1388     qemu_put_byte(f, dev->thinint_isc);
1389 }
1390
1391 static int virtio_ccw_load_config(DeviceState *d, QEMUFile *f)
1392 {
1393     VirtioCcwDevice *dev = VIRTIO_CCW_DEVICE(d);
1394     SubchDev *s = dev->sch;
1395     int len;
1396
1397     s->driver_data = dev;
1398     subch_device_load(s, f);
1399     len = qemu_get_be32(f);
1400     if (len != 0) {
1401         dev->indicators = get_indicator(qemu_get_be64(f), len);
1402     } else {
1403         qemu_get_be64(f);
1404         dev->indicators = NULL;
1405     }
1406     len = qemu_get_be32(f);
1407     if (len != 0) {
1408         dev->indicators2 = get_indicator(qemu_get_be64(f), len);
1409     } else {
1410         qemu_get_be64(f);
1411         dev->indicators2 = NULL;
1412     }
1413     len = qemu_get_be32(f);
1414     if (len != 0) {
1415         dev->summary_indicator = get_indicator(qemu_get_be64(f), len);
1416     } else {
1417         qemu_get_be64(f);
1418         dev->summary_indicator = NULL;
1419     }
1420     dev->routes.adapter.ind_offset = qemu_get_be64(f);
1421     dev->thinint_isc = qemu_get_byte(f);
1422     if (s->thinint_active) {
1423         return css_register_io_adapter(CSS_IO_ADAPTER_VIRTIO,
1424                                        dev->thinint_isc, true, false,
1425                                        &dev->routes.adapter.adapter_id);
1426     }
1427
1428     return 0;
1429 }
1430
1431 /**************** Virtio-ccw Bus Device Descriptions *******************/
1432
1433 static Property virtio_ccw_net_properties[] = {
1434     DEFINE_PROP_STRING("devno", VirtioCcwDevice, bus_id),
1435     DEFINE_VIRTIO_NET_FEATURES(VirtioCcwDevice, host_features[0]),
1436     DEFINE_PROP_BIT("ioeventfd", VirtioCcwDevice, flags,
1437                     VIRTIO_CCW_FLAG_USE_IOEVENTFD_BIT, true),
1438     DEFINE_PROP_END_OF_LIST(),
1439 };
1440
1441 static void virtio_ccw_net_class_init(ObjectClass *klass, void *data)
1442 {
1443     DeviceClass *dc = DEVICE_CLASS(klass);
1444     VirtIOCCWDeviceClass *k = VIRTIO_CCW_DEVICE_CLASS(klass);
1445
1446     k->realize = virtio_ccw_net_realize;
1447     k->exit = virtio_ccw_exit;
1448     dc->reset = virtio_ccw_reset;
1449     dc->props = virtio_ccw_net_properties;
1450     set_bit(DEVICE_CATEGORY_NETWORK, dc->categories);
1451 }
1452
1453 static const TypeInfo virtio_ccw_net = {
1454     .name          = TYPE_VIRTIO_NET_CCW,
1455     .parent        = TYPE_VIRTIO_CCW_DEVICE,
1456     .instance_size = sizeof(VirtIONetCcw),
1457     .instance_init = virtio_ccw_net_instance_init,
1458     .class_init    = virtio_ccw_net_class_init,
1459 };
1460
1461 static Property virtio_ccw_blk_properties[] = {
1462     DEFINE_PROP_STRING("devno", VirtioCcwDevice, bus_id),
1463     DEFINE_PROP_BIT("ioeventfd", VirtioCcwDevice, flags,
1464                     VIRTIO_CCW_FLAG_USE_IOEVENTFD_BIT, true),
1465     DEFINE_PROP_END_OF_LIST(),
1466 };
1467
1468 static void virtio_ccw_blk_class_init(ObjectClass *klass, void *data)
1469 {
1470     DeviceClass *dc = DEVICE_CLASS(klass);
1471     VirtIOCCWDeviceClass *k = VIRTIO_CCW_DEVICE_CLASS(klass);
1472
1473     k->realize = virtio_ccw_blk_realize;
1474     k->exit = virtio_ccw_exit;
1475     dc->reset = virtio_ccw_reset;
1476     dc->props = virtio_ccw_blk_properties;
1477     set_bit(DEVICE_CATEGORY_STORAGE, dc->categories);
1478 }
1479
1480 static const TypeInfo virtio_ccw_blk = {
1481     .name          = TYPE_VIRTIO_BLK_CCW,
1482     .parent        = TYPE_VIRTIO_CCW_DEVICE,
1483     .instance_size = sizeof(VirtIOBlkCcw),
1484     .instance_init = virtio_ccw_blk_instance_init,
1485     .class_init    = virtio_ccw_blk_class_init,
1486 };
1487
1488 static Property virtio_ccw_serial_properties[] = {
1489     DEFINE_PROP_STRING("devno", VirtioCcwDevice, bus_id),
1490     DEFINE_PROP_BIT("ioeventfd", VirtioCcwDevice, flags,
1491                     VIRTIO_CCW_FLAG_USE_IOEVENTFD_BIT, true),
1492     DEFINE_PROP_END_OF_LIST(),
1493 };
1494
1495 static void virtio_ccw_serial_class_init(ObjectClass *klass, void *data)
1496 {
1497     DeviceClass *dc = DEVICE_CLASS(klass);
1498     VirtIOCCWDeviceClass *k = VIRTIO_CCW_DEVICE_CLASS(klass);
1499
1500     k->realize = virtio_ccw_serial_realize;
1501     k->exit = virtio_ccw_exit;
1502     dc->reset = virtio_ccw_reset;
1503     dc->props = virtio_ccw_serial_properties;
1504     set_bit(DEVICE_CATEGORY_INPUT, dc->categories);
1505 }
1506
1507 static const TypeInfo virtio_ccw_serial = {
1508     .name          = TYPE_VIRTIO_SERIAL_CCW,
1509     .parent        = TYPE_VIRTIO_CCW_DEVICE,
1510     .instance_size = sizeof(VirtioSerialCcw),
1511     .instance_init = virtio_ccw_serial_instance_init,
1512     .class_init    = virtio_ccw_serial_class_init,
1513 };
1514
1515 static Property virtio_ccw_balloon_properties[] = {
1516     DEFINE_PROP_STRING("devno", VirtioCcwDevice, bus_id),
1517     DEFINE_PROP_BIT("ioeventfd", VirtioCcwDevice, flags,
1518                     VIRTIO_CCW_FLAG_USE_IOEVENTFD_BIT, true),
1519     DEFINE_PROP_END_OF_LIST(),
1520 };
1521
1522 static void virtio_ccw_balloon_class_init(ObjectClass *klass, void *data)
1523 {
1524     DeviceClass *dc = DEVICE_CLASS(klass);
1525     VirtIOCCWDeviceClass *k = VIRTIO_CCW_DEVICE_CLASS(klass);
1526
1527     k->realize = virtio_ccw_balloon_realize;
1528     k->exit = virtio_ccw_exit;
1529     dc->reset = virtio_ccw_reset;
1530     dc->props = virtio_ccw_balloon_properties;
1531     set_bit(DEVICE_CATEGORY_MISC, dc->categories);
1532 }
1533
1534 static const TypeInfo virtio_ccw_balloon = {
1535     .name          = TYPE_VIRTIO_BALLOON_CCW,
1536     .parent        = TYPE_VIRTIO_CCW_DEVICE,
1537     .instance_size = sizeof(VirtIOBalloonCcw),
1538     .instance_init = virtio_ccw_balloon_instance_init,
1539     .class_init    = virtio_ccw_balloon_class_init,
1540 };
1541
1542 static Property virtio_ccw_scsi_properties[] = {
1543     DEFINE_PROP_STRING("devno", VirtioCcwDevice, bus_id),
1544     DEFINE_VIRTIO_SCSI_FEATURES(VirtioCcwDevice, host_features[0]),
1545     DEFINE_PROP_BIT("ioeventfd", VirtioCcwDevice, flags,
1546                     VIRTIO_CCW_FLAG_USE_IOEVENTFD_BIT, true),
1547     DEFINE_PROP_END_OF_LIST(),
1548 };
1549
1550 static void virtio_ccw_scsi_class_init(ObjectClass *klass, void *data)
1551 {
1552     DeviceClass *dc = DEVICE_CLASS(klass);
1553     VirtIOCCWDeviceClass *k = VIRTIO_CCW_DEVICE_CLASS(klass);
1554
1555     k->realize = virtio_ccw_scsi_realize;
1556     k->exit = virtio_ccw_exit;
1557     dc->reset = virtio_ccw_reset;
1558     dc->props = virtio_ccw_scsi_properties;
1559     set_bit(DEVICE_CATEGORY_STORAGE, dc->categories);
1560 }
1561
1562 static const TypeInfo virtio_ccw_scsi = {
1563     .name          = TYPE_VIRTIO_SCSI_CCW,
1564     .parent        = TYPE_VIRTIO_CCW_DEVICE,
1565     .instance_size = sizeof(VirtIOSCSICcw),
1566     .instance_init = virtio_ccw_scsi_instance_init,
1567     .class_init    = virtio_ccw_scsi_class_init,
1568 };
1569
1570 #ifdef CONFIG_VHOST_SCSI
1571 static Property vhost_ccw_scsi_properties[] = {
1572     DEFINE_PROP_STRING("devno", VirtioCcwDevice, bus_id),
1573     DEFINE_PROP_END_OF_LIST(),
1574 };
1575
1576 static void vhost_ccw_scsi_class_init(ObjectClass *klass, void *data)
1577 {
1578     DeviceClass *dc = DEVICE_CLASS(klass);
1579     VirtIOCCWDeviceClass *k = VIRTIO_CCW_DEVICE_CLASS(klass);
1580
1581     k->realize = vhost_ccw_scsi_realize;
1582     k->exit = virtio_ccw_exit;
1583     dc->reset = virtio_ccw_reset;
1584     dc->props = vhost_ccw_scsi_properties;
1585     set_bit(DEVICE_CATEGORY_STORAGE, dc->categories);
1586 }
1587
1588 static const TypeInfo vhost_ccw_scsi = {
1589     .name          = TYPE_VHOST_SCSI_CCW,
1590     .parent        = TYPE_VIRTIO_CCW_DEVICE,
1591     .instance_size = sizeof(VHostSCSICcw),
1592     .instance_init = vhost_ccw_scsi_instance_init,
1593     .class_init    = vhost_ccw_scsi_class_init,
1594 };
1595 #endif
1596
1597 static void virtio_ccw_rng_instance_init(Object *obj)
1598 {
1599     VirtIORNGCcw *dev = VIRTIO_RNG_CCW(obj);
1600
1601     virtio_instance_init_common(obj, &dev->vdev, sizeof(dev->vdev),
1602                                 TYPE_VIRTIO_RNG);
1603     object_property_add_alias(obj, "rng", OBJECT(&dev->vdev),
1604                               "rng", &error_abort);
1605 }
1606
1607 static Property virtio_ccw_rng_properties[] = {
1608     DEFINE_PROP_STRING("devno", VirtioCcwDevice, bus_id),
1609     DEFINE_PROP_BIT("ioeventfd", VirtioCcwDevice, flags,
1610                     VIRTIO_CCW_FLAG_USE_IOEVENTFD_BIT, true),
1611     DEFINE_PROP_END_OF_LIST(),
1612 };
1613
1614 static void virtio_ccw_rng_class_init(ObjectClass *klass, void *data)
1615 {
1616     DeviceClass *dc = DEVICE_CLASS(klass);
1617     VirtIOCCWDeviceClass *k = VIRTIO_CCW_DEVICE_CLASS(klass);
1618
1619     k->realize = virtio_ccw_rng_realize;
1620     k->exit = virtio_ccw_exit;
1621     dc->reset = virtio_ccw_reset;
1622     dc->props = virtio_ccw_rng_properties;
1623     set_bit(DEVICE_CATEGORY_MISC, dc->categories);
1624 }
1625
1626 static const TypeInfo virtio_ccw_rng = {
1627     .name          = TYPE_VIRTIO_RNG_CCW,
1628     .parent        = TYPE_VIRTIO_CCW_DEVICE,
1629     .instance_size = sizeof(VirtIORNGCcw),
1630     .instance_init = virtio_ccw_rng_instance_init,
1631     .class_init    = virtio_ccw_rng_class_init,
1632 };
1633
1634 static void virtio_ccw_busdev_realize(DeviceState *dev, Error **errp)
1635 {
1636     VirtioCcwDevice *_dev = (VirtioCcwDevice *)dev;
1637
1638     virtio_ccw_bus_new(&_dev->bus, sizeof(_dev->bus), _dev);
1639     virtio_ccw_device_realize(_dev, errp);
1640 }
1641
1642 static int virtio_ccw_busdev_exit(DeviceState *dev)
1643 {
1644     VirtioCcwDevice *_dev = (VirtioCcwDevice *)dev;
1645     VirtIOCCWDeviceClass *_info = VIRTIO_CCW_DEVICE_GET_CLASS(dev);
1646
1647     return _info->exit(_dev);
1648 }
1649
1650 static void virtio_ccw_busdev_unplug(HotplugHandler *hotplug_dev,
1651                                      DeviceState *dev, Error **errp)
1652 {
1653     VirtioCcwDevice *_dev = (VirtioCcwDevice *)dev;
1654     SubchDev *sch = _dev->sch;
1655
1656     virtio_ccw_stop_ioeventfd(_dev);
1657
1658     /*
1659      * We should arrive here only for device_del, since we don't support
1660      * direct hot(un)plug of channels, but only through virtio.
1661      */
1662     assert(sch != NULL);
1663     /* Subchannel is now disabled and no longer valid. */
1664     sch->curr_status.pmcw.flags &= ~(PMCW_FLAGS_MASK_ENA |
1665                                      PMCW_FLAGS_MASK_DNV);
1666
1667     css_generate_sch_crws(sch->cssid, sch->ssid, sch->schid, 1, 0);
1668
1669     object_unparent(OBJECT(dev));
1670 }
1671
1672 static Property virtio_ccw_properties[] = {
1673     DEFINE_VIRTIO_COMMON_FEATURES(VirtioCcwDevice, host_features[0]),
1674     DEFINE_PROP_END_OF_LIST(),
1675 };
1676
1677 static void virtio_ccw_device_class_init(ObjectClass *klass, void *data)
1678 {
1679     DeviceClass *dc = DEVICE_CLASS(klass);
1680
1681     dc->props = virtio_ccw_properties;
1682     dc->realize = virtio_ccw_busdev_realize;
1683     dc->exit = virtio_ccw_busdev_exit;
1684     dc->bus_type = TYPE_VIRTUAL_CSS_BUS;
1685 }
1686
1687 static const TypeInfo virtio_ccw_device_info = {
1688     .name = TYPE_VIRTIO_CCW_DEVICE,
1689     .parent = TYPE_DEVICE,
1690     .instance_size = sizeof(VirtioCcwDevice),
1691     .class_init = virtio_ccw_device_class_init,
1692     .class_size = sizeof(VirtIOCCWDeviceClass),
1693     .abstract = true,
1694 };
1695
1696 /***************** Virtual-css Bus Bridge Device ********************/
1697 /* Only required to have the virtio bus as child in the system bus */
1698
1699 static int virtual_css_bridge_init(SysBusDevice *dev)
1700 {
1701     /* nothing */
1702     return 0;
1703 }
1704
1705 static void virtual_css_bridge_class_init(ObjectClass *klass, void *data)
1706 {
1707     SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass);
1708     HotplugHandlerClass *hc = HOTPLUG_HANDLER_CLASS(klass);
1709     DeviceClass *dc = DEVICE_CLASS(klass);
1710
1711     k->init = virtual_css_bridge_init;
1712     hc->unplug = virtio_ccw_busdev_unplug;
1713     set_bit(DEVICE_CATEGORY_BRIDGE, dc->categories);
1714 }
1715
1716 static const TypeInfo virtual_css_bridge_info = {
1717     .name          = "virtual-css-bridge",
1718     .parent        = TYPE_SYS_BUS_DEVICE,
1719     .instance_size = sizeof(SysBusDevice),
1720     .class_init    = virtual_css_bridge_class_init,
1721     .interfaces = (InterfaceInfo[]) {
1722         { TYPE_HOTPLUG_HANDLER },
1723         { }
1724     }
1725 };
1726
1727 /* virtio-ccw-bus */
1728
1729 static void virtio_ccw_bus_new(VirtioBusState *bus, size_t bus_size,
1730                                VirtioCcwDevice *dev)
1731 {
1732     DeviceState *qdev = DEVICE(dev);
1733     char virtio_bus_name[] = "virtio-bus";
1734
1735     qbus_create_inplace(bus, bus_size, TYPE_VIRTIO_CCW_BUS,
1736                         qdev, virtio_bus_name);
1737 }
1738
1739 static void virtio_ccw_bus_class_init(ObjectClass *klass, void *data)
1740 {
1741     VirtioBusClass *k = VIRTIO_BUS_CLASS(klass);
1742     BusClass *bus_class = BUS_CLASS(klass);
1743
1744     bus_class->max_dev = 1;
1745     k->notify = virtio_ccw_notify;
1746     k->get_features = virtio_ccw_get_features;
1747     k->vmstate_change = virtio_ccw_vmstate_change;
1748     k->query_guest_notifiers = virtio_ccw_query_guest_notifiers;
1749     k->set_host_notifier = virtio_ccw_set_host_notifier;
1750     k->set_guest_notifiers = virtio_ccw_set_guest_notifiers;
1751     k->save_queue = virtio_ccw_save_queue;
1752     k->load_queue = virtio_ccw_load_queue;
1753     k->save_config = virtio_ccw_save_config;
1754     k->load_config = virtio_ccw_load_config;
1755 }
1756
1757 static const TypeInfo virtio_ccw_bus_info = {
1758     .name = TYPE_VIRTIO_CCW_BUS,
1759     .parent = TYPE_VIRTIO_BUS,
1760     .instance_size = sizeof(VirtioCcwBusState),
1761     .class_init = virtio_ccw_bus_class_init,
1762 };
1763
1764 static void virtio_ccw_register(void)
1765 {
1766     type_register_static(&virtio_ccw_bus_info);
1767     type_register_static(&virtual_css_bus_info);
1768     type_register_static(&virtio_ccw_device_info);
1769     type_register_static(&virtio_ccw_serial);
1770     type_register_static(&virtio_ccw_blk);
1771     type_register_static(&virtio_ccw_net);
1772     type_register_static(&virtio_ccw_balloon);
1773     type_register_static(&virtio_ccw_scsi);
1774 #ifdef CONFIG_VHOST_SCSI
1775     type_register_static(&vhost_ccw_scsi);
1776 #endif
1777     type_register_static(&virtio_ccw_rng);
1778     type_register_static(&virtual_css_bridge_info);
1779 }
1780
1781 type_init(virtio_ccw_register)