Merge branch 'vmwgfx-fixes-5.3' of git://people.freedesktop.org/~thomash/linux into...
[linux-2.6-block.git] / arch / powerpc / kvm / book3s_emulate.c
CommitLineData
d94d71cb 1// SPDX-License-Identifier: GPL-2.0-only
c215c6e4 2/*
c215c6e4
AG
3 *
4 * Copyright SUSE Linux Products GmbH 2009
5 *
6 * Authors: Alexander Graf <agraf@suse.de>
7 */
8
9#include <asm/kvm_ppc.h>
10#include <asm/disassemble.h>
11#include <asm/kvm_book3s.h>
12#include <asm/reg.h>
95327d08 13#include <asm/switch_to.h>
b0a94d4e 14#include <asm/time.h>
5706340a 15#include <asm/tm.h>
5358a963 16#include "book3s.h"
533082ae 17#include <asm/asm-prototypes.h>
c215c6e4
AG
18
19#define OP_19_XOP_RFID 18
20#define OP_19_XOP_RFI 50
21
22#define OP_31_XOP_MFMSR 83
23#define OP_31_XOP_MTMSR 146
24#define OP_31_XOP_MTMSRD 178
71db4089 25#define OP_31_XOP_MTSR 210
c215c6e4
AG
26#define OP_31_XOP_MTSRIN 242
27#define OP_31_XOP_TLBIEL 274
50c7bb80
AG
28/* Opcode is officially reserved, reuse it as sc 1 when sc 1 doesn't trap */
29#define OP_31_XOP_FAKE_SC1 308
c215c6e4
AG
30#define OP_31_XOP_SLBMTE 402
31#define OP_31_XOP_SLBIE 434
32#define OP_31_XOP_SLBIA 498
c664876c 33#define OP_31_XOP_MFSR 595
c215c6e4 34#define OP_31_XOP_MFSRIN 659
bd7cdbb7 35#define OP_31_XOP_DCBA 758
c215c6e4
AG
36#define OP_31_XOP_SLBMFEV 851
37#define OP_31_XOP_EIOIO 854
38#define OP_31_XOP_SLBMFEE 915
41a8645a 39#define OP_31_XOP_SLBFEE 979
c215c6e4 40
5706340a 41#define OP_31_XOP_TBEGIN 654
26798f88 42#define OP_31_XOP_TABORT 910
5706340a 43
03c81682 44#define OP_31_XOP_TRECLAIM 942
e32c53d1 45#define OP_31_XOP_TRCHKPT 1006
03c81682 46
c215c6e4
AG
47/* DCBZ is actually 1014, but we patch it to 1010 so we get a trap */
48#define OP_31_XOP_DCBZ 1010
49
ca7f4203
AG
50#define OP_LFS 48
51#define OP_LFD 50
52#define OP_STFS 52
53#define OP_STFD 54
54
d6d549b2
AG
55#define SPRN_GQR0 912
56#define SPRN_GQR1 913
57#define SPRN_GQR2 914
58#define SPRN_GQR3 915
59#define SPRN_GQR4 916
60#define SPRN_GQR5 917
61#define SPRN_GQR6 918
62#define SPRN_GQR7 919
63
07b0907d
AG
64/* Book3S_32 defines mfsrin(v) - but that messes up our abstract
65 * function pointers, so let's just disable the define. */
66#undef mfsrin
67
317a8fa3
AG
68enum priv_level {
69 PRIV_PROBLEM = 0,
70 PRIV_SUPER = 1,
71 PRIV_HYPER = 2,
72};
73
74static bool spr_allowed(struct kvm_vcpu *vcpu, enum priv_level level)
75{
76 /* PAPR VMs only access supervisor SPRs */
77 if (vcpu->arch.papr_enabled && (level > PRIV_SUPER))
78 return false;
79
80 /* Limit user space to its own small SPR set */
5deb8e7a 81 if ((kvmppc_get_msr(vcpu) & MSR_PR) && level > PRIV_PROBLEM)
317a8fa3
AG
82 return false;
83
84 return true;
85}
86
de7ad932
SG
87#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
88static inline void kvmppc_copyto_vcpu_tm(struct kvm_vcpu *vcpu)
89{
90 memcpy(&vcpu->arch.gpr_tm[0], &vcpu->arch.regs.gpr[0],
91 sizeof(vcpu->arch.gpr_tm));
92 memcpy(&vcpu->arch.fp_tm, &vcpu->arch.fp,
93 sizeof(struct thread_fp_state));
94 memcpy(&vcpu->arch.vr_tm, &vcpu->arch.vr,
95 sizeof(struct thread_vr_state));
96 vcpu->arch.ppr_tm = vcpu->arch.ppr;
97 vcpu->arch.dscr_tm = vcpu->arch.dscr;
98 vcpu->arch.amr_tm = vcpu->arch.amr;
99 vcpu->arch.ctr_tm = vcpu->arch.regs.ctr;
100 vcpu->arch.tar_tm = vcpu->arch.tar;
101 vcpu->arch.lr_tm = vcpu->arch.regs.link;
fd0944ba 102 vcpu->arch.cr_tm = vcpu->arch.regs.ccr;
de7ad932
SG
103 vcpu->arch.xer_tm = vcpu->arch.regs.xer;
104 vcpu->arch.vrsave_tm = vcpu->arch.vrsave;
105}
106
107static inline void kvmppc_copyfrom_vcpu_tm(struct kvm_vcpu *vcpu)
108{
109 memcpy(&vcpu->arch.regs.gpr[0], &vcpu->arch.gpr_tm[0],
110 sizeof(vcpu->arch.regs.gpr));
111 memcpy(&vcpu->arch.fp, &vcpu->arch.fp_tm,
112 sizeof(struct thread_fp_state));
113 memcpy(&vcpu->arch.vr, &vcpu->arch.vr_tm,
114 sizeof(struct thread_vr_state));
115 vcpu->arch.ppr = vcpu->arch.ppr_tm;
116 vcpu->arch.dscr = vcpu->arch.dscr_tm;
117 vcpu->arch.amr = vcpu->arch.amr_tm;
118 vcpu->arch.regs.ctr = vcpu->arch.ctr_tm;
119 vcpu->arch.tar = vcpu->arch.tar_tm;
120 vcpu->arch.regs.link = vcpu->arch.lr_tm;
fd0944ba 121 vcpu->arch.regs.ccr = vcpu->arch.cr_tm;
de7ad932
SG
122 vcpu->arch.regs.xer = vcpu->arch.xer_tm;
123 vcpu->arch.vrsave = vcpu->arch.vrsave_tm;
124}
125
03c81682
SG
126static void kvmppc_emulate_treclaim(struct kvm_vcpu *vcpu, int ra_val)
127{
128 unsigned long guest_msr = kvmppc_get_msr(vcpu);
129 int fc_val = ra_val ? ra_val : 1;
a50623fb 130 uint64_t texasr;
03c81682
SG
131
132 /* CR0 = 0 | MSR[TS] | 0 */
fd0944ba 133 vcpu->arch.regs.ccr = (vcpu->arch.regs.ccr & ~(CR0_MASK << CR0_SHIFT)) |
03c81682
SG
134 (((guest_msr & MSR_TS_MASK) >> (MSR_TS_S_LG - 1))
135 << CR0_SHIFT);
136
137 preempt_disable();
a50623fb
PM
138 tm_enable();
139 texasr = mfspr(SPRN_TEXASR);
03c81682
SG
140 kvmppc_save_tm_pr(vcpu);
141 kvmppc_copyfrom_vcpu_tm(vcpu);
142
03c81682 143 /* failure recording depends on Failure Summary bit */
a50623fb
PM
144 if (!(texasr & TEXASR_FS)) {
145 texasr &= ~TEXASR_FC;
146 texasr |= ((u64)fc_val << TEXASR_FC_LG) | TEXASR_FS;
03c81682 147
a50623fb 148 texasr &= ~(TEXASR_PR | TEXASR_HV);
03c81682 149 if (kvmppc_get_msr(vcpu) & MSR_PR)
a50623fb 150 texasr |= TEXASR_PR;
03c81682
SG
151
152 if (kvmppc_get_msr(vcpu) & MSR_HV)
a50623fb 153 texasr |= TEXASR_HV;
03c81682 154
a50623fb 155 vcpu->arch.texasr = texasr;
03c81682 156 vcpu->arch.tfiar = kvmppc_get_pc(vcpu);
a50623fb 157 mtspr(SPRN_TEXASR, texasr);
03c81682
SG
158 mtspr(SPRN_TFIAR, vcpu->arch.tfiar);
159 }
160 tm_disable();
161 /*
162 * treclaim need quit to non-transactional state.
163 */
164 guest_msr &= ~(MSR_TS_MASK);
165 kvmppc_set_msr(vcpu, guest_msr);
166 preempt_enable();
7284ca8a
SG
167
168 if (vcpu->arch.shadow_fscr & FSCR_TAR)
169 mtspr(SPRN_TAR, vcpu->arch.tar);
03c81682 170}
e32c53d1
SG
171
172static void kvmppc_emulate_trchkpt(struct kvm_vcpu *vcpu)
173{
174 unsigned long guest_msr = kvmppc_get_msr(vcpu);
175
176 preempt_disable();
177 /*
178 * need flush FP/VEC/VSX to vcpu save area before
179 * copy.
180 */
181 kvmppc_giveup_ext(vcpu, MSR_VSX);
7284ca8a 182 kvmppc_giveup_fac(vcpu, FSCR_TAR_LG);
e32c53d1
SG
183 kvmppc_copyto_vcpu_tm(vcpu);
184 kvmppc_save_tm_sprs(vcpu);
185
186 /*
187 * as a result of trecheckpoint. set TS to suspended.
188 */
189 guest_msr &= ~(MSR_TS_MASK);
190 guest_msr |= MSR_TS_S;
191 kvmppc_set_msr(vcpu, guest_msr);
192 kvmppc_restore_tm_pr(vcpu);
193 preempt_enable();
194}
26798f88
SG
195
196/* emulate tabort. at guest privilege state */
68ab07b9 197void kvmppc_emulate_tabort(struct kvm_vcpu *vcpu, int ra_val)
26798f88
SG
198{
199 /* currently we only emulate tabort. but no emulation of other
200 * tabort variants since there is no kernel usage of them at
201 * present.
202 */
203 unsigned long guest_msr = kvmppc_get_msr(vcpu);
f61e0d3c 204 uint64_t org_texasr;
26798f88
SG
205
206 preempt_disable();
207 tm_enable();
f61e0d3c 208 org_texasr = mfspr(SPRN_TEXASR);
26798f88
SG
209 tm_abort(ra_val);
210
211 /* CR0 = 0 | MSR[TS] | 0 */
fd0944ba 212 vcpu->arch.regs.ccr = (vcpu->arch.regs.ccr & ~(CR0_MASK << CR0_SHIFT)) |
26798f88
SG
213 (((guest_msr & MSR_TS_MASK) >> (MSR_TS_S_LG - 1))
214 << CR0_SHIFT);
215
216 vcpu->arch.texasr = mfspr(SPRN_TEXASR);
217 /* failure recording depends on Failure Summary bit,
218 * and tabort will be treated as nops in non-transactional
219 * state.
220 */
f61e0d3c 221 if (!(org_texasr & TEXASR_FS) &&
26798f88
SG
222 MSR_TM_ACTIVE(guest_msr)) {
223 vcpu->arch.texasr &= ~(TEXASR_PR | TEXASR_HV);
224 if (guest_msr & MSR_PR)
225 vcpu->arch.texasr |= TEXASR_PR;
226
227 if (guest_msr & MSR_HV)
228 vcpu->arch.texasr |= TEXASR_HV;
229
230 vcpu->arch.tfiar = kvmppc_get_pc(vcpu);
26798f88
SG
231 }
232 tm_disable();
233 preempt_enable();
234}
235
de7ad932
SG
236#endif
237
3a167bea
AK
238int kvmppc_core_emulate_op_pr(struct kvm_run *run, struct kvm_vcpu *vcpu,
239 unsigned int inst, int *advance)
c215c6e4
AG
240{
241 int emulated = EMULATE_DONE;
c46dc9a8
AG
242 int rt = get_rt(inst);
243 int rs = get_rs(inst);
244 int ra = get_ra(inst);
245 int rb = get_rb(inst);
42188365 246 u32 inst_sc = 0x44000002;
c215c6e4
AG
247
248 switch (get_op(inst)) {
42188365
AG
249 case 0:
250 emulated = EMULATE_FAIL;
251 if ((kvmppc_get_msr(vcpu) & MSR_LE) &&
252 (inst == swab32(inst_sc))) {
253 /*
254 * This is the byte reversed syscall instruction of our
255 * hypercall handler. Early versions of LE Linux didn't
256 * swap the instructions correctly and ended up in
257 * illegal instructions.
258 * Just always fail hypercalls on these broken systems.
259 */
260 kvmppc_set_gpr(vcpu, 3, EV_UNIMPLEMENTED);
261 kvmppc_set_pc(vcpu, kvmppc_get_pc(vcpu) + 4);
262 emulated = EMULATE_DONE;
263 }
264 break;
c215c6e4
AG
265 case 19:
266 switch (get_xop(inst)) {
267 case OP_19_XOP_RFID:
401a89e9
SG
268 case OP_19_XOP_RFI: {
269 unsigned long srr1 = kvmppc_get_srr1(vcpu);
270#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
271 unsigned long cur_msr = kvmppc_get_msr(vcpu);
272
273 /*
274 * add rules to fit in ISA specification regarding TM
275 * state transistion in TM disable/Suspended state,
276 * and target TM state is TM inactive(00) state. (the
277 * change should be suppressed).
278 */
279 if (((cur_msr & MSR_TM) == 0) &&
280 ((srr1 & MSR_TM) == 0) &&
281 MSR_TM_SUSPENDED(cur_msr) &&
282 !MSR_TM_ACTIVE(srr1))
283 srr1 |= MSR_TS_S;
284#endif
5deb8e7a 285 kvmppc_set_pc(vcpu, kvmppc_get_srr0(vcpu));
401a89e9 286 kvmppc_set_msr(vcpu, srr1);
c215c6e4
AG
287 *advance = 0;
288 break;
401a89e9 289 }
c215c6e4
AG
290
291 default:
292 emulated = EMULATE_FAIL;
293 break;
294 }
295 break;
296 case 31:
297 switch (get_xop(inst)) {
298 case OP_31_XOP_MFMSR:
5deb8e7a 299 kvmppc_set_gpr(vcpu, rt, kvmppc_get_msr(vcpu));
c215c6e4
AG
300 break;
301 case OP_31_XOP_MTMSRD:
302 {
c46dc9a8 303 ulong rs_val = kvmppc_get_gpr(vcpu, rs);
c215c6e4 304 if (inst & 0x10000) {
5deb8e7a 305 ulong new_msr = kvmppc_get_msr(vcpu);
c46dc9a8
AG
306 new_msr &= ~(MSR_RI | MSR_EE);
307 new_msr |= rs_val & (MSR_RI | MSR_EE);
5deb8e7a 308 kvmppc_set_msr_fast(vcpu, new_msr);
c215c6e4 309 } else
c46dc9a8 310 kvmppc_set_msr(vcpu, rs_val);
c215c6e4
AG
311 break;
312 }
313 case OP_31_XOP_MTMSR:
c46dc9a8 314 kvmppc_set_msr(vcpu, kvmppc_get_gpr(vcpu, rs));
c215c6e4 315 break;
c664876c
AG
316 case OP_31_XOP_MFSR:
317 {
318 int srnum;
319
320 srnum = kvmppc_get_field(inst, 12 + 32, 15 + 32);
321 if (vcpu->arch.mmu.mfsrin) {
322 u32 sr;
323 sr = vcpu->arch.mmu.mfsrin(vcpu, srnum);
c46dc9a8 324 kvmppc_set_gpr(vcpu, rt, sr);
c664876c
AG
325 }
326 break;
327 }
c215c6e4
AG
328 case OP_31_XOP_MFSRIN:
329 {
330 int srnum;
331
c46dc9a8 332 srnum = (kvmppc_get_gpr(vcpu, rb) >> 28) & 0xf;
c215c6e4
AG
333 if (vcpu->arch.mmu.mfsrin) {
334 u32 sr;
335 sr = vcpu->arch.mmu.mfsrin(vcpu, srnum);
c46dc9a8 336 kvmppc_set_gpr(vcpu, rt, sr);
c215c6e4
AG
337 }
338 break;
339 }
71db4089
AG
340 case OP_31_XOP_MTSR:
341 vcpu->arch.mmu.mtsrin(vcpu,
342 (inst >> 16) & 0xf,
c46dc9a8 343 kvmppc_get_gpr(vcpu, rs));
71db4089 344 break;
c215c6e4
AG
345 case OP_31_XOP_MTSRIN:
346 vcpu->arch.mmu.mtsrin(vcpu,
c46dc9a8
AG
347 (kvmppc_get_gpr(vcpu, rb) >> 28) & 0xf,
348 kvmppc_get_gpr(vcpu, rs));
c215c6e4
AG
349 break;
350 case OP_31_XOP_TLBIE:
351 case OP_31_XOP_TLBIEL:
352 {
353 bool large = (inst & 0x00200000) ? true : false;
c46dc9a8 354 ulong addr = kvmppc_get_gpr(vcpu, rb);
c215c6e4
AG
355 vcpu->arch.mmu.tlbie(vcpu, addr, large);
356 break;
357 }
2ba9f0d8 358#ifdef CONFIG_PPC_BOOK3S_64
50c7bb80
AG
359 case OP_31_XOP_FAKE_SC1:
360 {
361 /* SC 1 papr hypercalls */
362 ulong cmd = kvmppc_get_gpr(vcpu, 3);
363 int i;
364
5deb8e7a 365 if ((kvmppc_get_msr(vcpu) & MSR_PR) ||
50c7bb80
AG
366 !vcpu->arch.papr_enabled) {
367 emulated = EMULATE_FAIL;
368 break;
369 }
370
371 if (kvmppc_h_pr(vcpu, cmd) == EMULATE_DONE)
372 break;
373
374 run->papr_hcall.nr = cmd;
375 for (i = 0; i < 9; ++i) {
376 ulong gpr = kvmppc_get_gpr(vcpu, 4 + i);
377 run->papr_hcall.args[i] = gpr;
378 }
379
0f47f9b5
BB
380 run->exit_reason = KVM_EXIT_PAPR_HCALL;
381 vcpu->arch.hcall_needed = 1;
c402a3f4 382 emulated = EMULATE_EXIT_USER;
50c7bb80
AG
383 break;
384 }
385#endif
c215c6e4
AG
386 case OP_31_XOP_EIOIO:
387 break;
388 case OP_31_XOP_SLBMTE:
389 if (!vcpu->arch.mmu.slbmte)
390 return EMULATE_FAIL;
391
8e5b26b5 392 vcpu->arch.mmu.slbmte(vcpu,
c46dc9a8
AG
393 kvmppc_get_gpr(vcpu, rs),
394 kvmppc_get_gpr(vcpu, rb));
c215c6e4
AG
395 break;
396 case OP_31_XOP_SLBIE:
397 if (!vcpu->arch.mmu.slbie)
398 return EMULATE_FAIL;
399
8e5b26b5 400 vcpu->arch.mmu.slbie(vcpu,
c46dc9a8 401 kvmppc_get_gpr(vcpu, rb));
c215c6e4
AG
402 break;
403 case OP_31_XOP_SLBIA:
404 if (!vcpu->arch.mmu.slbia)
405 return EMULATE_FAIL;
406
407 vcpu->arch.mmu.slbia(vcpu);
408 break;
41a8645a
PM
409 case OP_31_XOP_SLBFEE:
410 if (!(inst & 1) || !vcpu->arch.mmu.slbfee) {
411 return EMULATE_FAIL;
412 } else {
413 ulong b, t;
414 ulong cr = kvmppc_get_cr(vcpu) & ~CR0_MASK;
415
416 b = kvmppc_get_gpr(vcpu, rb);
417 if (!vcpu->arch.mmu.slbfee(vcpu, b, &t))
418 cr |= 2 << CR0_SHIFT;
419 kvmppc_set_gpr(vcpu, rt, t);
420 /* copy XER[SO] bit to CR0[SO] */
421 cr |= (vcpu->arch.regs.xer & 0x80000000) >>
422 (31 - CR0_SHIFT);
423 kvmppc_set_cr(vcpu, cr);
424 }
425 break;
c215c6e4
AG
426 case OP_31_XOP_SLBMFEE:
427 if (!vcpu->arch.mmu.slbmfee) {
428 emulated = EMULATE_FAIL;
429 } else {
c46dc9a8 430 ulong t, rb_val;
c215c6e4 431
c46dc9a8
AG
432 rb_val = kvmppc_get_gpr(vcpu, rb);
433 t = vcpu->arch.mmu.slbmfee(vcpu, rb_val);
434 kvmppc_set_gpr(vcpu, rt, t);
c215c6e4
AG
435 }
436 break;
437 case OP_31_XOP_SLBMFEV:
438 if (!vcpu->arch.mmu.slbmfev) {
439 emulated = EMULATE_FAIL;
440 } else {
c46dc9a8 441 ulong t, rb_val;
c215c6e4 442
c46dc9a8
AG
443 rb_val = kvmppc_get_gpr(vcpu, rb);
444 t = vcpu->arch.mmu.slbmfev(vcpu, rb_val);
445 kvmppc_set_gpr(vcpu, rt, t);
c215c6e4
AG
446 }
447 break;
bd7cdbb7
AG
448 case OP_31_XOP_DCBA:
449 /* Gets treated as NOP */
450 break;
c215c6e4
AG
451 case OP_31_XOP_DCBZ:
452 {
c46dc9a8
AG
453 ulong rb_val = kvmppc_get_gpr(vcpu, rb);
454 ulong ra_val = 0;
5467a97d 455 ulong addr, vaddr;
c215c6e4 456 u32 zeros[8] = { 0, 0, 0, 0, 0, 0, 0, 0 };
9fb244a2
AG
457 u32 dsisr;
458 int r;
c215c6e4 459
c46dc9a8
AG
460 if (ra)
461 ra_val = kvmppc_get_gpr(vcpu, ra);
c215c6e4 462
c46dc9a8 463 addr = (ra_val + rb_val) & ~31ULL;
5deb8e7a 464 if (!(kvmppc_get_msr(vcpu) & MSR_SF))
c215c6e4 465 addr &= 0xffffffff;
5467a97d 466 vaddr = addr;
c215c6e4 467
9fb244a2
AG
468 r = kvmppc_st(vcpu, &addr, 32, zeros, true);
469 if ((r == -ENOENT) || (r == -EPERM)) {
470 *advance = 0;
5deb8e7a 471 kvmppc_set_dar(vcpu, vaddr);
a2d56020 472 vcpu->arch.fault_dar = vaddr;
9fb244a2
AG
473
474 dsisr = DSISR_ISSTORE;
475 if (r == -ENOENT)
476 dsisr |= DSISR_NOHPTE;
477 else if (r == -EPERM)
478 dsisr |= DSISR_PROTFAULT;
479
5deb8e7a 480 kvmppc_set_dsisr(vcpu, dsisr);
a2d56020 481 vcpu->arch.fault_dsisr = dsisr;
9fb244a2 482
c215c6e4
AG
483 kvmppc_book3s_queue_irqprio(vcpu,
484 BOOK3S_INTERRUPT_DATA_STORAGE);
c215c6e4
AG
485 }
486
487 break;
488 }
5706340a
SG
489#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
490 case OP_31_XOP_TBEGIN:
491 {
492 if (!cpu_has_feature(CPU_FTR_TM))
493 break;
494
495 if (!(kvmppc_get_msr(vcpu) & MSR_TM)) {
496 kvmppc_trigger_fac_interrupt(vcpu, FSCR_TM_LG);
497 emulated = EMULATE_AGAIN;
498 break;
499 }
500
501 if (!(kvmppc_get_msr(vcpu) & MSR_PR)) {
502 preempt_disable();
fd0944ba
PM
503 vcpu->arch.regs.ccr = (CR0_TBEGIN_FAILURE |
504 (vcpu->arch.regs.ccr & ~(CR0_MASK << CR0_SHIFT)));
5706340a
SG
505
506 vcpu->arch.texasr = (TEXASR_FS | TEXASR_EXACT |
507 (((u64)(TM_CAUSE_EMULATE | TM_CAUSE_PERSISTENT))
508 << TEXASR_FC_LG));
509
510 if ((inst >> 21) & 0x1)
511 vcpu->arch.texasr |= TEXASR_ROT;
512
513 if (kvmppc_get_msr(vcpu) & MSR_HV)
514 vcpu->arch.texasr |= TEXASR_HV;
515
516 vcpu->arch.tfhar = kvmppc_get_pc(vcpu) + 4;
517 vcpu->arch.tfiar = kvmppc_get_pc(vcpu);
518
519 kvmppc_restore_tm_sprs(vcpu);
520 preempt_enable();
521 } else
522 emulated = EMULATE_FAIL;
523 break;
524 }
26798f88
SG
525 case OP_31_XOP_TABORT:
526 {
527 ulong guest_msr = kvmppc_get_msr(vcpu);
528 unsigned long ra_val = 0;
529
530 if (!cpu_has_feature(CPU_FTR_TM))
531 break;
532
533 if (!(kvmppc_get_msr(vcpu) & MSR_TM)) {
534 kvmppc_trigger_fac_interrupt(vcpu, FSCR_TM_LG);
535 emulated = EMULATE_AGAIN;
536 break;
537 }
538
539 /* only emulate for privilege guest, since problem state
540 * guest can run with TM enabled and we don't expect to
541 * trap at here for that case.
542 */
543 WARN_ON(guest_msr & MSR_PR);
544
545 if (ra)
546 ra_val = kvmppc_get_gpr(vcpu, ra);
547
548 kvmppc_emulate_tabort(vcpu, ra_val);
549 break;
550 }
03c81682
SG
551 case OP_31_XOP_TRECLAIM:
552 {
553 ulong guest_msr = kvmppc_get_msr(vcpu);
554 unsigned long ra_val = 0;
555
556 if (!cpu_has_feature(CPU_FTR_TM))
557 break;
558
559 if (!(kvmppc_get_msr(vcpu) & MSR_TM)) {
560 kvmppc_trigger_fac_interrupt(vcpu, FSCR_TM_LG);
561 emulated = EMULATE_AGAIN;
562 break;
563 }
564
565 /* generate interrupts based on priorities */
566 if (guest_msr & MSR_PR) {
567 /* Privileged Instruction type Program Interrupt */
568 kvmppc_core_queue_program(vcpu, SRR1_PROGPRIV);
569 emulated = EMULATE_AGAIN;
570 break;
571 }
572
573 if (!MSR_TM_ACTIVE(guest_msr)) {
574 /* TM bad thing interrupt */
575 kvmppc_core_queue_program(vcpu, SRR1_PROGTM);
576 emulated = EMULATE_AGAIN;
577 break;
578 }
579
580 if (ra)
581 ra_val = kvmppc_get_gpr(vcpu, ra);
582 kvmppc_emulate_treclaim(vcpu, ra_val);
583 break;
584 }
e32c53d1
SG
585 case OP_31_XOP_TRCHKPT:
586 {
587 ulong guest_msr = kvmppc_get_msr(vcpu);
588 unsigned long texasr;
589
590 if (!cpu_has_feature(CPU_FTR_TM))
591 break;
592
593 if (!(kvmppc_get_msr(vcpu) & MSR_TM)) {
594 kvmppc_trigger_fac_interrupt(vcpu, FSCR_TM_LG);
595 emulated = EMULATE_AGAIN;
596 break;
597 }
598
599 /* generate interrupt based on priorities */
600 if (guest_msr & MSR_PR) {
601 /* Privileged Instruction type Program Intr */
602 kvmppc_core_queue_program(vcpu, SRR1_PROGPRIV);
603 emulated = EMULATE_AGAIN;
604 break;
605 }
606
607 tm_enable();
608 texasr = mfspr(SPRN_TEXASR);
609 tm_disable();
610
611 if (MSR_TM_ACTIVE(guest_msr) ||
612 !(texasr & (TEXASR_FS))) {
613 /* TM bad thing interrupt */
614 kvmppc_core_queue_program(vcpu, SRR1_PROGTM);
615 emulated = EMULATE_AGAIN;
616 break;
617 }
618
619 kvmppc_emulate_trchkpt(vcpu);
620 break;
621 }
5706340a 622#endif
c215c6e4
AG
623 default:
624 emulated = EMULATE_FAIL;
625 }
626 break;
627 default:
628 emulated = EMULATE_FAIL;
629 }
630
831317b6
AG
631 if (emulated == EMULATE_FAIL)
632 emulated = kvmppc_emulate_paired_single(run, vcpu);
633
c215c6e4
AG
634 return emulated;
635}
636
e15a1137
AG
637void kvmppc_set_bat(struct kvm_vcpu *vcpu, struct kvmppc_bat *bat, bool upper,
638 u32 val)
639{
640 if (upper) {
641 /* Upper BAT */
642 u32 bl = (val >> 2) & 0x7ff;
643 bat->bepi_mask = (~bl << 17);
644 bat->bepi = val & 0xfffe0000;
645 bat->vs = (val & 2) ? 1 : 0;
646 bat->vp = (val & 1) ? 1 : 0;
647 bat->raw = (bat->raw & 0xffffffff00000000ULL) | val;
648 } else {
649 /* Lower BAT */
650 bat->brpn = val & 0xfffe0000;
651 bat->wimg = (val >> 3) & 0xf;
652 bat->pp = val & 3;
653 bat->raw = (bat->raw & 0x00000000ffffffffULL) | ((u64)val << 32);
654 }
655}
656
c1c88e2f 657static struct kvmppc_bat *kvmppc_find_bat(struct kvm_vcpu *vcpu, int sprn)
c04a695a
AG
658{
659 struct kvmppc_vcpu_book3s *vcpu_book3s = to_book3s(vcpu);
660 struct kvmppc_bat *bat;
661
662 switch (sprn) {
663 case SPRN_IBAT0U ... SPRN_IBAT3L:
664 bat = &vcpu_book3s->ibat[(sprn - SPRN_IBAT0U) / 2];
665 break;
666 case SPRN_IBAT4U ... SPRN_IBAT7L:
667 bat = &vcpu_book3s->ibat[4 + ((sprn - SPRN_IBAT4U) / 2)];
668 break;
669 case SPRN_DBAT0U ... SPRN_DBAT3L:
670 bat = &vcpu_book3s->dbat[(sprn - SPRN_DBAT0U) / 2];
671 break;
672 case SPRN_DBAT4U ... SPRN_DBAT7L:
673 bat = &vcpu_book3s->dbat[4 + ((sprn - SPRN_DBAT4U) / 2)];
674 break;
675 default:
676 BUG();
677 }
678
c1c88e2f 679 return bat;
c215c6e4
AG
680}
681
3a167bea 682int kvmppc_core_emulate_mtspr_pr(struct kvm_vcpu *vcpu, int sprn, ulong spr_val)
c215c6e4
AG
683{
684 int emulated = EMULATE_DONE;
685
686 switch (sprn) {
687 case SPRN_SDR1:
317a8fa3
AG
688 if (!spr_allowed(vcpu, PRIV_HYPER))
689 goto unprivileged;
8e5b26b5 690 to_book3s(vcpu)->sdr1 = spr_val;
c215c6e4
AG
691 break;
692 case SPRN_DSISR:
5deb8e7a 693 kvmppc_set_dsisr(vcpu, spr_val);
c215c6e4
AG
694 break;
695 case SPRN_DAR:
5deb8e7a 696 kvmppc_set_dar(vcpu, spr_val);
c215c6e4
AG
697 break;
698 case SPRN_HIOR:
8e5b26b5 699 to_book3s(vcpu)->hior = spr_val;
c215c6e4
AG
700 break;
701 case SPRN_IBAT0U ... SPRN_IBAT3L:
702 case SPRN_IBAT4U ... SPRN_IBAT7L:
703 case SPRN_DBAT0U ... SPRN_DBAT3L:
704 case SPRN_DBAT4U ... SPRN_DBAT7L:
c1c88e2f
AG
705 {
706 struct kvmppc_bat *bat = kvmppc_find_bat(vcpu, sprn);
707
708 kvmppc_set_bat(vcpu, bat, !(sprn % 2), (u32)spr_val);
c215c6e4
AG
709 /* BAT writes happen so rarely that we're ok to flush
710 * everything here */
711 kvmppc_mmu_pte_flush(vcpu, 0, 0);
c04a695a 712 kvmppc_mmu_flush_segments(vcpu);
c215c6e4 713 break;
c1c88e2f 714 }
c215c6e4 715 case SPRN_HID0:
8e5b26b5 716 to_book3s(vcpu)->hid[0] = spr_val;
c215c6e4
AG
717 break;
718 case SPRN_HID1:
8e5b26b5 719 to_book3s(vcpu)->hid[1] = spr_val;
c215c6e4
AG
720 break;
721 case SPRN_HID2:
8e5b26b5 722 to_book3s(vcpu)->hid[2] = spr_val;
c215c6e4 723 break;
d6d549b2
AG
724 case SPRN_HID2_GEKKO:
725 to_book3s(vcpu)->hid[2] = spr_val;
726 /* HID2.PSE controls paired single on gekko */
727 switch (vcpu->arch.pvr) {
728 case 0x00080200: /* lonestar 2.0 */
729 case 0x00088202: /* lonestar 2.2 */
730 case 0x70000100: /* gekko 1.0 */
731 case 0x00080100: /* gekko 2.0 */
732 case 0x00083203: /* gekko 2.3a */
733 case 0x00083213: /* gekko 2.3b */
734 case 0x00083204: /* gekko 2.4 */
735 case 0x00083214: /* gekko 2.4e (8SE) - retail HW2 */
b83d4a9c
AG
736 case 0x00087200: /* broadway */
737 if (vcpu->arch.hflags & BOOK3S_HFLAG_NATIVE_PS) {
738 /* Native paired singles */
739 } else if (spr_val & (1 << 29)) { /* HID2.PSE */
d6d549b2
AG
740 vcpu->arch.hflags |= BOOK3S_HFLAG_PAIRED_SINGLE;
741 kvmppc_giveup_ext(vcpu, MSR_FP);
742 } else {
743 vcpu->arch.hflags &= ~BOOK3S_HFLAG_PAIRED_SINGLE;
744 }
745 break;
746 }
747 break;
c215c6e4 748 case SPRN_HID4:
d6d549b2 749 case SPRN_HID4_GEKKO:
8e5b26b5 750 to_book3s(vcpu)->hid[4] = spr_val;
c215c6e4
AG
751 break;
752 case SPRN_HID5:
8e5b26b5 753 to_book3s(vcpu)->hid[5] = spr_val;
c215c6e4
AG
754 /* guest HID5 set can change is_dcbz32 */
755 if (vcpu->arch.mmu.is_dcbz32(vcpu) &&
756 (mfmsr() & MSR_HV))
757 vcpu->arch.hflags |= BOOK3S_HFLAG_DCBZ32;
758 break;
d6d549b2
AG
759 case SPRN_GQR0:
760 case SPRN_GQR1:
761 case SPRN_GQR2:
762 case SPRN_GQR3:
763 case SPRN_GQR4:
764 case SPRN_GQR5:
765 case SPRN_GQR6:
766 case SPRN_GQR7:
767 to_book3s(vcpu)->gqr[sprn - SPRN_GQR0] = spr_val;
768 break;
8e6afa36 769#ifdef CONFIG_PPC_BOOK3S_64
616dff86 770 case SPRN_FSCR:
8e6afa36 771 kvmppc_set_fscr(vcpu, spr_val);
616dff86 772 break;
2e23f544
AG
773 case SPRN_BESCR:
774 vcpu->arch.bescr = spr_val;
775 break;
776 case SPRN_EBBHR:
777 vcpu->arch.ebbhr = spr_val;
778 break;
779 case SPRN_EBBRR:
780 vcpu->arch.ebbrr = spr_val;
781 break;
9916d57e
AG
782#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
783 case SPRN_TFHAR:
9916d57e 784 case SPRN_TEXASR:
9916d57e 785 case SPRN_TFIAR:
533082ae
SG
786 if (!cpu_has_feature(CPU_FTR_TM))
787 break;
788
789 if (!(kvmppc_get_msr(vcpu) & MSR_TM)) {
790 kvmppc_trigger_fac_interrupt(vcpu, FSCR_TM_LG);
791 emulated = EMULATE_AGAIN;
792 break;
793 }
794
795 if (MSR_TM_ACTIVE(kvmppc_get_msr(vcpu)) &&
796 !((MSR_TM_SUSPENDED(kvmppc_get_msr(vcpu))) &&
797 (sprn == SPRN_TFHAR))) {
798 /* it is illegal to mtspr() TM regs in
799 * other than non-transactional state, with
800 * the exception of TFHAR in suspend state.
801 */
802 kvmppc_core_queue_program(vcpu, SRR1_PROGTM);
803 emulated = EMULATE_AGAIN;
804 break;
805 }
806
807 tm_enable();
808 if (sprn == SPRN_TFHAR)
809 mtspr(SPRN_TFHAR, spr_val);
810 else if (sprn == SPRN_TEXASR)
811 mtspr(SPRN_TEXASR, spr_val);
812 else
813 mtspr(SPRN_TFIAR, spr_val);
814 tm_disable();
815
9916d57e
AG
816 break;
817#endif
2e23f544 818#endif
c215c6e4
AG
819 case SPRN_ICTC:
820 case SPRN_THRM1:
821 case SPRN_THRM2:
822 case SPRN_THRM3:
823 case SPRN_CTRLF:
824 case SPRN_CTRLT:
d6d549b2 825 case SPRN_L2CR:
b0a94d4e 826 case SPRN_DSCR:
d6d549b2
AG
827 case SPRN_MMCR0_GEKKO:
828 case SPRN_MMCR1_GEKKO:
829 case SPRN_PMC1_GEKKO:
830 case SPRN_PMC2_GEKKO:
831 case SPRN_PMC3_GEKKO:
832 case SPRN_PMC4_GEKKO:
833 case SPRN_WPAR_GEKKO:
f2be6550 834 case SPRN_MSSSR0:
f3532028 835 case SPRN_DABR:
f8f6eb0d
AG
836#ifdef CONFIG_PPC_BOOK3S_64
837 case SPRN_MMCRS:
838 case SPRN_MMCRA:
839 case SPRN_MMCR0:
840 case SPRN_MMCR1:
841 case SPRN_MMCR2:
fa73c3b2 842 case SPRN_UMMCR2:
f8f6eb0d 843#endif
c215c6e4 844 break;
317a8fa3 845unprivileged:
c215c6e4 846 default:
feafd13c
TH
847 pr_info_ratelimited("KVM: invalid SPR write: %d\n", sprn);
848 if (sprn & 0x10) {
849 if (kvmppc_get_msr(vcpu) & MSR_PR) {
850 kvmppc_core_queue_program(vcpu, SRR1_PROGPRIV);
851 emulated = EMULATE_AGAIN;
852 }
853 } else {
854 if ((kvmppc_get_msr(vcpu) & MSR_PR) || sprn == 0) {
855 kvmppc_core_queue_program(vcpu, SRR1_PROGILL);
856 emulated = EMULATE_AGAIN;
857 }
858 }
c215c6e4
AG
859 break;
860 }
861
862 return emulated;
863}
864
3a167bea 865int kvmppc_core_emulate_mfspr_pr(struct kvm_vcpu *vcpu, int sprn, ulong *spr_val)
c215c6e4
AG
866{
867 int emulated = EMULATE_DONE;
868
869 switch (sprn) {
c04a695a
AG
870 case SPRN_IBAT0U ... SPRN_IBAT3L:
871 case SPRN_IBAT4U ... SPRN_IBAT7L:
872 case SPRN_DBAT0U ... SPRN_DBAT3L:
873 case SPRN_DBAT4U ... SPRN_DBAT7L:
c1c88e2f
AG
874 {
875 struct kvmppc_bat *bat = kvmppc_find_bat(vcpu, sprn);
876
877 if (sprn % 2)
54771e62 878 *spr_val = bat->raw >> 32;
c1c88e2f 879 else
54771e62 880 *spr_val = bat->raw;
c1c88e2f 881
c04a695a 882 break;
c1c88e2f 883 }
c215c6e4 884 case SPRN_SDR1:
317a8fa3
AG
885 if (!spr_allowed(vcpu, PRIV_HYPER))
886 goto unprivileged;
54771e62 887 *spr_val = to_book3s(vcpu)->sdr1;
c215c6e4
AG
888 break;
889 case SPRN_DSISR:
5deb8e7a 890 *spr_val = kvmppc_get_dsisr(vcpu);
c215c6e4
AG
891 break;
892 case SPRN_DAR:
5deb8e7a 893 *spr_val = kvmppc_get_dar(vcpu);
c215c6e4
AG
894 break;
895 case SPRN_HIOR:
54771e62 896 *spr_val = to_book3s(vcpu)->hior;
c215c6e4
AG
897 break;
898 case SPRN_HID0:
54771e62 899 *spr_val = to_book3s(vcpu)->hid[0];
c215c6e4
AG
900 break;
901 case SPRN_HID1:
54771e62 902 *spr_val = to_book3s(vcpu)->hid[1];
c215c6e4
AG
903 break;
904 case SPRN_HID2:
d6d549b2 905 case SPRN_HID2_GEKKO:
54771e62 906 *spr_val = to_book3s(vcpu)->hid[2];
c215c6e4
AG
907 break;
908 case SPRN_HID4:
d6d549b2 909 case SPRN_HID4_GEKKO:
54771e62 910 *spr_val = to_book3s(vcpu)->hid[4];
c215c6e4
AG
911 break;
912 case SPRN_HID5:
54771e62 913 *spr_val = to_book3s(vcpu)->hid[5];
c215c6e4 914 break;
aacf9aa3 915 case SPRN_CFAR:
b0a94d4e 916 case SPRN_DSCR:
54771e62 917 *spr_val = 0;
aacf9aa3 918 break;
b0a94d4e 919 case SPRN_PURR:
3cd60e31
AK
920 /*
921 * On exit we would have updated purr
922 */
923 *spr_val = vcpu->arch.purr;
b0a94d4e
PM
924 break;
925 case SPRN_SPURR:
3cd60e31
AK
926 /*
927 * On exit we would have updated spurr
928 */
929 *spr_val = vcpu->arch.spurr;
b0a94d4e 930 break;
8f42ab27 931 case SPRN_VTB:
88b02cf9 932 *spr_val = to_book3s(vcpu)->vtb;
8f42ab27 933 break;
06da28e7
AK
934 case SPRN_IC:
935 *spr_val = vcpu->arch.ic;
936 break;
d6d549b2
AG
937 case SPRN_GQR0:
938 case SPRN_GQR1:
939 case SPRN_GQR2:
940 case SPRN_GQR3:
941 case SPRN_GQR4:
942 case SPRN_GQR5:
943 case SPRN_GQR6:
944 case SPRN_GQR7:
54771e62 945 *spr_val = to_book3s(vcpu)->gqr[sprn - SPRN_GQR0];
d6d549b2 946 break;
8e6afa36 947#ifdef CONFIG_PPC_BOOK3S_64
616dff86
AG
948 case SPRN_FSCR:
949 *spr_val = vcpu->arch.fscr;
950 break;
2e23f544
AG
951 case SPRN_BESCR:
952 *spr_val = vcpu->arch.bescr;
953 break;
954 case SPRN_EBBHR:
955 *spr_val = vcpu->arch.ebbhr;
956 break;
957 case SPRN_EBBRR:
958 *spr_val = vcpu->arch.ebbrr;
959 break;
9916d57e
AG
960#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
961 case SPRN_TFHAR:
9916d57e 962 case SPRN_TEXASR:
9916d57e 963 case SPRN_TFIAR:
533082ae
SG
964 if (!cpu_has_feature(CPU_FTR_TM))
965 break;
966
967 if (!(kvmppc_get_msr(vcpu) & MSR_TM)) {
968 kvmppc_trigger_fac_interrupt(vcpu, FSCR_TM_LG);
969 emulated = EMULATE_AGAIN;
970 break;
971 }
972
973 tm_enable();
974 if (sprn == SPRN_TFHAR)
975 *spr_val = mfspr(SPRN_TFHAR);
976 else if (sprn == SPRN_TEXASR)
977 *spr_val = mfspr(SPRN_TEXASR);
978 else if (sprn == SPRN_TFIAR)
979 *spr_val = mfspr(SPRN_TFIAR);
980 tm_disable();
9916d57e
AG
981 break;
982#endif
2e23f544 983#endif
c215c6e4
AG
984 case SPRN_THRM1:
985 case SPRN_THRM2:
986 case SPRN_THRM3:
987 case SPRN_CTRLF:
988 case SPRN_CTRLT:
d6d549b2
AG
989 case SPRN_L2CR:
990 case SPRN_MMCR0_GEKKO:
991 case SPRN_MMCR1_GEKKO:
992 case SPRN_PMC1_GEKKO:
993 case SPRN_PMC2_GEKKO:
994 case SPRN_PMC3_GEKKO:
995 case SPRN_PMC4_GEKKO:
996 case SPRN_WPAR_GEKKO:
f2be6550 997 case SPRN_MSSSR0:
f3532028 998 case SPRN_DABR:
f8f6eb0d
AG
999#ifdef CONFIG_PPC_BOOK3S_64
1000 case SPRN_MMCRS:
1001 case SPRN_MMCRA:
1002 case SPRN_MMCR0:
1003 case SPRN_MMCR1:
1004 case SPRN_MMCR2:
fa73c3b2 1005 case SPRN_UMMCR2:
a5948fa0 1006 case SPRN_TIR:
f8f6eb0d 1007#endif
54771e62 1008 *spr_val = 0;
c215c6e4
AG
1009 break;
1010 default:
317a8fa3 1011unprivileged:
feafd13c
TH
1012 pr_info_ratelimited("KVM: invalid SPR read: %d\n", sprn);
1013 if (sprn & 0x10) {
1014 if (kvmppc_get_msr(vcpu) & MSR_PR) {
1015 kvmppc_core_queue_program(vcpu, SRR1_PROGPRIV);
1016 emulated = EMULATE_AGAIN;
1017 }
1018 } else {
1019 if ((kvmppc_get_msr(vcpu) & MSR_PR) || sprn == 0 ||
1020 sprn == 4 || sprn == 5 || sprn == 6) {
1021 kvmppc_core_queue_program(vcpu, SRR1_PROGILL);
1022 emulated = EMULATE_AGAIN;
1023 }
1024 }
1025
c215c6e4
AG
1026 break;
1027 }
1028
1029 return emulated;
1030}
1031
ca7f4203
AG
1032u32 kvmppc_alignment_dsisr(struct kvm_vcpu *vcpu, unsigned int inst)
1033{
ddca156a 1034 return make_dsisr(inst);
ca7f4203
AG
1035}
1036
1037ulong kvmppc_alignment_dar(struct kvm_vcpu *vcpu, unsigned int inst)
1038{
7310f3a5
AK
1039#ifdef CONFIG_PPC_BOOK3S_64
1040 /*
1041 * Linux's fix_alignment() assumes that DAR is valid, so can we
1042 */
1043 return vcpu->arch.fault_dar;
1044#else
ca7f4203 1045 ulong dar = 0;
c46dc9a8
AG
1046 ulong ra = get_ra(inst);
1047 ulong rb = get_rb(inst);
ca7f4203
AG
1048
1049 switch (get_op(inst)) {
1050 case OP_LFS:
1051 case OP_LFD:
1052 case OP_STFD:
1053 case OP_STFS:
ca7f4203
AG
1054 if (ra)
1055 dar = kvmppc_get_gpr(vcpu, ra);
1056 dar += (s32)((s16)inst);
1057 break;
1058 case 31:
ca7f4203
AG
1059 if (ra)
1060 dar = kvmppc_get_gpr(vcpu, ra);
c46dc9a8 1061 dar += kvmppc_get_gpr(vcpu, rb);
ca7f4203
AG
1062 break;
1063 default:
1064 printk(KERN_INFO "KVM: Unaligned instruction 0x%x\n", inst);
1065 break;
1066 }
1067
1068 return dar;
7310f3a5 1069#endif
ca7f4203 1070}