lapic.c 70.5 KB
Newer Older
1
// SPDX-License-Identifier: GPL-2.0-only
E
Eddie Dong 已提交
2 3 4 5 6 7 8

/*
 * Local APIC virtualization
 *
 * Copyright (C) 2006 Qumranet, Inc.
 * Copyright (C) 2007 Novell
 * Copyright (C) 2007 Intel
N
Nicolas Kaiser 已提交
9
 * Copyright 2009 Red Hat, Inc. and/or its affiliates.
E
Eddie Dong 已提交
10 11 12 13 14 15 16 17 18
 *
 * Authors:
 *   Dor Laor <dor.laor@qumranet.com>
 *   Gregory Haskins <ghaskins@novell.com>
 *   Yaozu (Eddie) Dong <eddie.dong@intel.com>
 *
 * Based on Xen 3.1 code, Copyright (c) 2004, Intel Corporation.
 */

19
#include <linux/kvm_host.h>
E
Eddie Dong 已提交
20 21 22 23 24 25
#include <linux/kvm.h>
#include <linux/mm.h>
#include <linux/highmem.h>
#include <linux/smp.h>
#include <linux/hrtimer.h>
#include <linux/io.h>
26
#include <linux/export.h>
R
Roman Zippel 已提交
27
#include <linux/math64.h>
28
#include <linux/slab.h>
E
Eddie Dong 已提交
29 30 31 32 33
#include <asm/processor.h>
#include <asm/msr.h>
#include <asm/page.h>
#include <asm/current.h>
#include <asm/apicdef.h>
34
#include <asm/delay.h>
A
Arun Sharma 已提交
35
#include <linux/atomic.h>
36
#include <linux/jump_label.h>
37
#include "kvm_cache_regs.h"
E
Eddie Dong 已提交
38
#include "irq.h"
39
#include "trace.h"
40
#include "x86.h"
A
Avi Kivity 已提交
41
#include "cpuid.h"
42
#include "hyperv.h"
E
Eddie Dong 已提交
43

44 45 46 47 48 49
#ifndef CONFIG_X86_64
#define mod_64(x, y) ((x) - (y) * div64_u64(x, y))
#else
#define mod_64(x, y) ((x) % (y))
#endif

E
Eddie Dong 已提交
50 51 52 53 54 55
#define PRId64 "d"
#define PRIx64 "llx"
#define PRIu64 "u"
#define PRIo64 "o"

/* 14 is the version for Xeon and Pentium 8.4.8*/
56
#define APIC_VERSION			(0x14UL | ((KVM_APIC_LVT_NUM - 1) << 16))
E
Eddie Dong 已提交
57 58 59
#define LAPIC_MMIO_LENGTH		(1 << 12)
/* followed define is not in apicdef.h */
#define MAX_APIC_VECTOR			256
60
#define APIC_VECTORS_PER_REG		32
E
Eddie Dong 已提交
61

62 63 64
#define APIC_BROADCAST			0xFF
#define X2APIC_BROADCAST		0xFFFFFFFFul

65
static bool lapic_timer_advance_dynamic __read_mostly;
66 67 68 69
#define LAPIC_TIMER_ADVANCE_ADJUST_MIN	100	/* clock cycles */
#define LAPIC_TIMER_ADVANCE_ADJUST_MAX	10000	/* clock cycles */
#define LAPIC_TIMER_ADVANCE_NS_INIT	1000
#define LAPIC_TIMER_ADVANCE_NS_MAX     5000
70 71 72
/* step-by-step approximation to mitigate fluctuation */
#define LAPIC_TIMER_ADVANCE_ADJUST_STEP 8

M
Michael S. Tsirkin 已提交
73 74 75 76 77
static inline int apic_test_vector(int vec, void *bitmap)
{
	return test_bit(VEC_POS(vec), (bitmap) + REG_POS(vec));
}

78 79 80 81 82 83 84 85
bool kvm_apic_pending_eoi(struct kvm_vcpu *vcpu, int vector)
{
	struct kvm_lapic *apic = vcpu->arch.apic;

	return apic_test_vector(vector, apic->regs + APIC_ISR) ||
		apic_test_vector(vector, apic->regs + APIC_IRR);
}

M
Michael S. Tsirkin 已提交
86 87 88 89 90 91 92 93 94 95
static inline int __apic_test_and_set_vector(int vec, void *bitmap)
{
	return __test_and_set_bit(VEC_POS(vec), (bitmap) + REG_POS(vec));
}

static inline int __apic_test_and_clear_vector(int vec, void *bitmap)
{
	return __test_and_clear_bit(VEC_POS(vec), (bitmap) + REG_POS(vec));
}

96
struct static_key_deferred apic_hw_disabled __read_mostly;
97 98
struct static_key_deferred apic_sw_disabled __read_mostly;

E
Eddie Dong 已提交
99 100
static inline int apic_enabled(struct kvm_lapic *apic)
{
101
	return kvm_apic_sw_enabled(apic) &&	kvm_apic_hw_enabled(apic);
102 103
}

E
Eddie Dong 已提交
104 105 106 107 108 109 110
#define LVT_MASK	\
	(APIC_LVT_MASKED | APIC_SEND_PENDING | APIC_VECTOR_MASK)

#define LINT_MASK	\
	(LVT_MASK | APIC_MODE_MASK | APIC_INPUT_POLARITY | \
	 APIC_LVT_REMOTE_IRR | APIC_LVT_LEVEL_TRIGGER)

111 112 113 114 115
static inline u32 kvm_x2apic_id(struct kvm_lapic *apic)
{
	return apic->vcpu->vcpu_id;
}

116 117 118 119 120 121 122 123 124 125 126
bool kvm_can_post_timer_interrupt(struct kvm_vcpu *vcpu)
{
	return pi_inject_timer && kvm_vcpu_apicv_active(vcpu);
}
EXPORT_SYMBOL_GPL(kvm_can_post_timer_interrupt);

static bool kvm_use_posted_timer_interrupt(struct kvm_vcpu *vcpu)
{
	return kvm_can_post_timer_interrupt(vcpu) && vcpu->mode == IN_GUEST_MODE;
}

127 128 129 130 131
static inline bool kvm_apic_map_get_logical_dest(struct kvm_apic_map *map,
		u32 dest_id, struct kvm_lapic ***cluster, u16 *mask) {
	switch (map->mode) {
	case KVM_APIC_MODE_X2APIC: {
		u32 offset = (dest_id >> 16) * 16;
R
Radim Krčmář 已提交
132
		u32 max_apic_id = map->max_apic_id;
133 134 135 136

		if (offset <= max_apic_id) {
			u8 cluster_size = min(max_apic_id - offset + 1, 16U);

P
Paolo Bonzini 已提交
137
			offset = array_index_nospec(offset, map->max_apic_id + 1);
138 139 140 141 142
			*cluster = &map->phys_map[offset];
			*mask = dest_id & (0xffff >> (16 - cluster_size));
		} else {
			*mask = 0;
		}
143

144 145 146 147 148 149 150
		return true;
		}
	case KVM_APIC_MODE_XAPIC_FLAT:
		*cluster = map->xapic_flat_map;
		*mask = dest_id & 0xff;
		return true;
	case KVM_APIC_MODE_XAPIC_CLUSTER:
151
		*cluster = map->xapic_cluster_map[(dest_id >> 4) & 0xf];
152 153 154 155 156 157
		*mask = dest_id & 0xf;
		return true;
	default:
		/* Not optimized. */
		return false;
	}
158 159
}

160
static void kvm_apic_map_free(struct rcu_head *rcu)
161
{
162
	struct kvm_apic_map *map = container_of(rcu, struct kvm_apic_map, rcu);
163

164
	kvfree(map);
165 166
}

167
void kvm_recalculate_apic_map(struct kvm *kvm)
168 169 170 171
{
	struct kvm_apic_map *new, *old = NULL;
	struct kvm_vcpu *vcpu;
	int i;
172
	u32 max_id = 255; /* enough space for any xAPIC ID */
173

174 175 176 177 178 179 180 181 182
	if (!kvm->arch.apic_map_dirty) {
		/*
		 * Read kvm->arch.apic_map_dirty before
		 * kvm->arch.apic_map
		 */
		smp_rmb();
		return;
	}

183
	mutex_lock(&kvm->arch.apic_map_lock);
184 185 186 187 188
	if (!kvm->arch.apic_map_dirty) {
		/* Someone else has updated the map. */
		mutex_unlock(&kvm->arch.apic_map_lock);
		return;
	}
189

R
Radim Krčmář 已提交
190 191
	kvm_for_each_vcpu(i, vcpu, kvm)
		if (kvm_apic_present(vcpu))
192
			max_id = max(max_id, kvm_x2apic_id(vcpu->arch.apic));
R
Radim Krčmář 已提交
193

M
Michal Hocko 已提交
194
	new = kvzalloc(sizeof(struct kvm_apic_map) +
195 196
	                   sizeof(struct kvm_lapic *) * ((u64)max_id + 1),
			   GFP_KERNEL_ACCOUNT);
R
Radim Krčmář 已提交
197

198 199 200
	if (!new)
		goto out;

R
Radim Krčmář 已提交
201 202
	new->max_apic_id = max_id;

203 204
	kvm_for_each_vcpu(i, vcpu, kvm) {
		struct kvm_lapic *apic = vcpu->arch.apic;
205 206
		struct kvm_lapic **cluster;
		u16 mask;
207 208 209
		u32 ldr;
		u8 xapic_id;
		u32 x2apic_id;
210

211 212 213
		if (!kvm_apic_present(vcpu))
			continue;

214 215 216 217 218 219 220 221 222 223 224 225 226
		xapic_id = kvm_xapic_id(apic);
		x2apic_id = kvm_x2apic_id(apic);

		/* Hotplug hack: see kvm_apic_match_physical_addr(), ... */
		if ((apic_x2apic_mode(apic) || x2apic_id > 0xff) &&
				x2apic_id <= new->max_apic_id)
			new->phys_map[x2apic_id] = apic;
		/*
		 * ... xAPIC ID of VCPUs with APIC ID > 0xff will wrap-around,
		 * prevent them from masking VCPUs with APIC ID <= 0xff.
		 */
		if (!apic_x2apic_mode(apic) && !new->phys_map[xapic_id])
			new->phys_map[xapic_id] = apic;
227

228 229 230
		if (!kvm_apic_sw_enabled(apic))
			continue;

231 232
		ldr = kvm_lapic_get_reg(apic, APIC_LDR);

233 234 235 236
		if (apic_x2apic_mode(apic)) {
			new->mode |= KVM_APIC_MODE_X2APIC;
		} else if (ldr) {
			ldr = GET_APIC_LOGICAL_ID(ldr);
237
			if (kvm_lapic_get_reg(apic, APIC_DFR) == APIC_DFR_FLAT)
238 239 240 241 242
				new->mode |= KVM_APIC_MODE_XAPIC_FLAT;
			else
				new->mode |= KVM_APIC_MODE_XAPIC_CLUSTER;
		}

243
		if (!kvm_apic_map_get_logical_dest(new, ldr, &cluster, &mask))
244 245
			continue;

246 247
		if (mask)
			cluster[ffs(mask) - 1] = apic;
248 249 250 251 252
	}
out:
	old = rcu_dereference_protected(kvm->arch.apic_map,
			lockdep_is_held(&kvm->arch.apic_map_lock));
	rcu_assign_pointer(kvm->arch.apic_map, new);
253 254 255 256 257 258
	/*
	 * Write kvm->arch.apic_map before
	 * clearing apic->apic_map_dirty
	 */
	smp_wmb();
	kvm->arch.apic_map_dirty = false;
259 260 261
	mutex_unlock(&kvm->arch.apic_map_lock);

	if (old)
262
		call_rcu(&old->rcu, kvm_apic_map_free);
263

264
	kvm_make_scan_ioapic_request(kvm);
265 266
}

267 268
static inline void apic_set_spiv(struct kvm_lapic *apic, u32 val)
{
269
	bool enabled = val & APIC_SPIV_APIC_ENABLED;
270

271
	kvm_lapic_set_reg(apic, APIC_SPIV, val);
272 273 274

	if (enabled != apic->sw_enabled) {
		apic->sw_enabled = enabled;
275
		if (enabled)
276
			static_key_slow_dec_deferred(&apic_sw_disabled);
277
		else
278
			static_key_slow_inc(&apic_sw_disabled.key);
279

280
		apic->vcpu->kvm->arch.apic_map_dirty = true;
281 282 283
	}
}

284
static inline void kvm_apic_set_xapic_id(struct kvm_lapic *apic, u8 id)
285
{
286
	kvm_lapic_set_reg(apic, APIC_ID, id << 24);
287
	apic->vcpu->kvm->arch.apic_map_dirty = true;
288 289 290 291
}

static inline void kvm_apic_set_ldr(struct kvm_lapic *apic, u32 id)
{
292
	kvm_lapic_set_reg(apic, APIC_LDR, id);
293
	apic->vcpu->kvm->arch.apic_map_dirty = true;
294 295
}

296 297 298 299 300
static inline u32 kvm_apic_calc_x2apic_ldr(u32 id)
{
	return ((id >> 4) << 16) | (1 << (id & 0xf));
}

301
static inline void kvm_apic_set_x2apic_id(struct kvm_lapic *apic, u32 id)
302
{
303
	u32 ldr = kvm_apic_calc_x2apic_ldr(id);
304

305 306
	WARN_ON_ONCE(id != apic->vcpu->vcpu_id);

307
	kvm_lapic_set_reg(apic, APIC_ID, id);
308
	kvm_lapic_set_reg(apic, APIC_LDR, ldr);
309
	apic->vcpu->kvm->arch.apic_map_dirty = true;
310 311
}

E
Eddie Dong 已提交
312 313
static inline int apic_lvt_enabled(struct kvm_lapic *apic, int lvt_type)
{
314
	return !(kvm_lapic_get_reg(apic, lvt_type) & APIC_LVT_MASKED);
E
Eddie Dong 已提交
315 316
}

317 318
static inline int apic_lvtt_oneshot(struct kvm_lapic *apic)
{
319
	return apic->lapic_timer.timer_mode == APIC_LVT_TIMER_ONESHOT;
320 321
}

E
Eddie Dong 已提交
322 323
static inline int apic_lvtt_period(struct kvm_lapic *apic)
{
324
	return apic->lapic_timer.timer_mode == APIC_LVT_TIMER_PERIODIC;
325 326 327 328
}

static inline int apic_lvtt_tscdeadline(struct kvm_lapic *apic)
{
329
	return apic->lapic_timer.timer_mode == APIC_LVT_TIMER_TSCDEADLINE;
E
Eddie Dong 已提交
330 331
}

332 333 334 335 336
static inline int apic_lvt_nmi_mode(u32 lvt_val)
{
	return (lvt_val & (APIC_MODE_MASK | APIC_LVT_MASKED)) == APIC_DM_NMI;
}

337 338 339 340 341 342
void kvm_apic_set_version(struct kvm_vcpu *vcpu)
{
	struct kvm_lapic *apic = vcpu->arch.apic;
	struct kvm_cpuid_entry2 *feat;
	u32 v = APIC_VERSION;

343
	if (!lapic_in_kernel(vcpu))
344 345
		return;

346 347 348 349 350 351 352
	/*
	 * KVM emulates 82093AA datasheet (with in-kernel IOAPIC implementation)
	 * which doesn't have EOI register; Some buggy OSes (e.g. Windows with
	 * Hyper-V role) disable EOI broadcast in lapic not checking for IOAPIC
	 * version first and level-triggered interrupts never get EOIed in
	 * IOAPIC.
	 */
353
	feat = kvm_find_cpuid_entry(apic->vcpu, 0x1, 0);
354 355
	if (feat && (feat->ecx & (1 << (X86_FEATURE_X2APIC & 31))) &&
	    !ioapic_in_kernel(vcpu->kvm))
356
		v |= APIC_LVR_DIRECTED_EOI;
357
	kvm_lapic_set_reg(apic, APIC_LVR, v);
358 359
}

360
static const unsigned int apic_lvt_mask[KVM_APIC_LVT_NUM] = {
361
	LVT_MASK ,      /* part LVTT mask, timer mode mask added at runtime */
E
Eddie Dong 已提交
362 363 364 365 366 367 368 369
	LVT_MASK | APIC_MODE_MASK,	/* LVTTHMR */
	LVT_MASK | APIC_MODE_MASK,	/* LVTPC */
	LINT_MASK, LINT_MASK,	/* LVT0-1 */
	LVT_MASK		/* LVTERR */
};

static int find_highest_vector(void *bitmap)
{
370 371
	int vec;
	u32 *reg;
E
Eddie Dong 已提交
372

373 374 375 376
	for (vec = MAX_APIC_VECTOR - APIC_VECTORS_PER_REG;
	     vec >= 0; vec -= APIC_VECTORS_PER_REG) {
		reg = bitmap + REG_POS(vec);
		if (*reg)
377
			return __fls(*reg) + vec;
378
	}
E
Eddie Dong 已提交
379

380
	return -1;
E
Eddie Dong 已提交
381 382
}

M
Michael S. Tsirkin 已提交
383 384
static u8 count_vectors(void *bitmap)
{
385 386
	int vec;
	u32 *reg;
M
Michael S. Tsirkin 已提交
387
	u8 count = 0;
388 389 390 391 392 393

	for (vec = 0; vec < MAX_APIC_VECTOR; vec += APIC_VECTORS_PER_REG) {
		reg = bitmap + REG_POS(vec);
		count += hweight32(*reg);
	}

M
Michael S. Tsirkin 已提交
394 395 396
	return count;
}

397
bool __kvm_apic_update_irr(u32 *pir, void *regs, int *max_irr)
398
{
399
	u32 i, vec;
400 401 402 403 404
	u32 pir_val, irr_val, prev_irr_val;
	int max_updated_irr;

	max_updated_irr = -1;
	*max_irr = -1;
405

406
	for (i = vec = 0; i <= 7; i++, vec += 32) {
407
		pir_val = READ_ONCE(pir[i]);
408
		irr_val = *((u32 *)(regs + APIC_IRR + i * 0x10));
409
		if (pir_val) {
410
			prev_irr_val = irr_val;
411 412
			irr_val |= xchg(&pir[i], 0);
			*((u32 *)(regs + APIC_IRR + i * 0x10)) = irr_val;
413 414 415 416
			if (prev_irr_val != irr_val) {
				max_updated_irr =
					__fls(irr_val ^ prev_irr_val) + vec;
			}
417
		}
418
		if (irr_val)
419
			*max_irr = __fls(irr_val) + vec;
420
	}
421

422 423
	return ((max_updated_irr != -1) &&
		(max_updated_irr == *max_irr));
424
}
425 426
EXPORT_SYMBOL_GPL(__kvm_apic_update_irr);

427
bool kvm_apic_update_irr(struct kvm_vcpu *vcpu, u32 *pir, int *max_irr)
428 429 430
{
	struct kvm_lapic *apic = vcpu->arch.apic;

431
	return __kvm_apic_update_irr(pir, apic->regs, max_irr);
432
}
433 434
EXPORT_SYMBOL_GPL(kvm_apic_update_irr);

435
static inline int apic_search_irr(struct kvm_lapic *apic)
E
Eddie Dong 已提交
436
{
437
	return find_highest_vector(apic->regs + APIC_IRR);
E
Eddie Dong 已提交
438 439 440 441 442 443
}

static inline int apic_find_highest_irr(struct kvm_lapic *apic)
{
	int result;

444 445 446 447
	/*
	 * Note that irr_pending is just a hint. It will be always
	 * true with virtual interrupt delivery enabled.
	 */
448 449 450 451
	if (!apic->irr_pending)
		return -1;

	result = apic_search_irr(apic);
E
Eddie Dong 已提交
452 453 454 455 456
	ASSERT(result == -1 || result >= 16);

	return result;
}

457 458
static inline void apic_clear_irr(int vec, struct kvm_lapic *apic)
{
459 460 461 462
	struct kvm_vcpu *vcpu;

	vcpu = apic->vcpu;

463
	if (unlikely(vcpu->arch.apicv_active)) {
464
		/* need to update RVI */
465
		kvm_lapic_clear_vector(vec, apic->regs + APIC_IRR);
466 467
		kvm_x86_ops->hwapic_irr_update(vcpu,
				apic_find_highest_irr(apic));
468 469
	} else {
		apic->irr_pending = false;
470
		kvm_lapic_clear_vector(vec, apic->regs + APIC_IRR);
471 472
		if (apic_search_irr(apic) != -1)
			apic->irr_pending = true;
473
	}
474 475
}

M
Michael S. Tsirkin 已提交
476 477
static inline void apic_set_isr(int vec, struct kvm_lapic *apic)
{
478 479 480 481 482 483
	struct kvm_vcpu *vcpu;

	if (__apic_test_and_set_vector(vec, apic->regs + APIC_ISR))
		return;

	vcpu = apic->vcpu;
484

M
Michael S. Tsirkin 已提交
485
	/*
486 487 488
	 * With APIC virtualization enabled, all caching is disabled
	 * because the processor can modify ISR under the hood.  Instead
	 * just set SVI.
M
Michael S. Tsirkin 已提交
489
	 */
490
	if (unlikely(vcpu->arch.apicv_active))
491
		kvm_x86_ops->hwapic_isr_update(vcpu, vec);
492 493 494 495 496 497 498 499 500 501
	else {
		++apic->isr_count;
		BUG_ON(apic->isr_count > MAX_APIC_VECTOR);
		/*
		 * ISR (in service register) bit is set when injecting an interrupt.
		 * The highest vector is injected. Thus the latest bit set matches
		 * the highest bit in ISR.
		 */
		apic->highest_isr_cache = vec;
	}
M
Michael S. Tsirkin 已提交
502 503
}

504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522
static inline int apic_find_highest_isr(struct kvm_lapic *apic)
{
	int result;

	/*
	 * Note that isr_count is always 1, and highest_isr_cache
	 * is always -1, with APIC virtualization enabled.
	 */
	if (!apic->isr_count)
		return -1;
	if (likely(apic->highest_isr_cache != -1))
		return apic->highest_isr_cache;

	result = find_highest_vector(apic->regs + APIC_ISR);
	ASSERT(result == -1 || result >= 16);

	return result;
}

M
Michael S. Tsirkin 已提交
523 524
static inline void apic_clear_isr(int vec, struct kvm_lapic *apic)
{
525 526 527 528 529 530 531 532 533 534 535 536 537
	struct kvm_vcpu *vcpu;
	if (!__apic_test_and_clear_vector(vec, apic->regs + APIC_ISR))
		return;

	vcpu = apic->vcpu;

	/*
	 * We do get here for APIC virtualization enabled if the guest
	 * uses the Hyper-V APIC enlightenment.  In this case we may need
	 * to trigger a new interrupt delivery by writing the SVI field;
	 * on the other hand isr_count and highest_isr_cache are unused
	 * and must be left alone.
	 */
538
	if (unlikely(vcpu->arch.apicv_active))
539
		kvm_x86_ops->hwapic_isr_update(vcpu,
540 541
					       apic_find_highest_isr(apic));
	else {
M
Michael S. Tsirkin 已提交
542
		--apic->isr_count;
543 544 545
		BUG_ON(apic->isr_count < 0);
		apic->highest_isr_cache = -1;
	}
M
Michael S. Tsirkin 已提交
546 547
}

548 549
int kvm_lapic_find_highest_irr(struct kvm_vcpu *vcpu)
{
550 551 552 553 554
	/* This may race with setting of irr in __apic_accept_irq() and
	 * value returned may be wrong, but kvm_vcpu_kick() in __apic_accept_irq
	 * will cause vmexit immediately and the value will be recalculated
	 * on the next vmentry.
	 */
555
	return apic_find_highest_irr(vcpu->arch.apic);
556
}
557
EXPORT_SYMBOL_GPL(kvm_lapic_find_highest_irr);
558

559
static int __apic_accept_irq(struct kvm_lapic *apic, int delivery_mode,
560
			     int vector, int level, int trig_mode,
561
			     struct dest_map *dest_map);
562

563
int kvm_apic_set_irq(struct kvm_vcpu *vcpu, struct kvm_lapic_irq *irq,
564
		     struct dest_map *dest_map)
E
Eddie Dong 已提交
565
{
566
	struct kvm_lapic *apic = vcpu->arch.apic;
567

568
	return __apic_accept_irq(apic, irq->delivery_mode, irq->vector,
569
			irq->level, irq->trig_mode, dest_map);
E
Eddie Dong 已提交
570 571
}

572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591
static int __pv_send_ipi(unsigned long *ipi_bitmap, struct kvm_apic_map *map,
			 struct kvm_lapic_irq *irq, u32 min)
{
	int i, count = 0;
	struct kvm_vcpu *vcpu;

	if (min > map->max_apic_id)
		return 0;

	for_each_set_bit(i, ipi_bitmap,
		min((u32)BITS_PER_LONG, (map->max_apic_id - min + 1))) {
		if (map->phys_map[min + i]) {
			vcpu = map->phys_map[min + i]->vcpu;
			count += kvm_apic_set_irq(vcpu, irq, NULL);
		}
	}

	return count;
}

592
int kvm_pv_send_ipi(struct kvm *kvm, unsigned long ipi_bitmap_low,
593
		    unsigned long ipi_bitmap_high, u32 min,
594 595 596 597 598
		    unsigned long icr, int op_64_bit)
{
	struct kvm_apic_map *map;
	struct kvm_lapic_irq irq = {0};
	int cluster_size = op_64_bit ? 64 : 32;
599 600 601 602
	int count;

	if (icr & (APIC_DEST_MASK | APIC_SHORT_MASK))
		return -KVM_EINVAL;
603 604 605 606 607 608 609 610 611

	irq.vector = icr & APIC_VECTOR_MASK;
	irq.delivery_mode = icr & APIC_MODE_MASK;
	irq.level = (icr & APIC_INT_ASSERT) != 0;
	irq.trig_mode = icr & APIC_INT_LEVELTRIG;

	rcu_read_lock();
	map = rcu_dereference(kvm->arch.apic_map);

612 613 614 615 616
	count = -EOPNOTSUPP;
	if (likely(map)) {
		count = __pv_send_ipi(&ipi_bitmap_low, map, &irq, min);
		min += cluster_size;
		count += __pv_send_ipi(&ipi_bitmap_high, map, &irq, min);
617 618 619 620 621 622
	}

	rcu_read_unlock();
	return count;
}

623 624
static int pv_eoi_put_user(struct kvm_vcpu *vcpu, u8 val)
{
625 626 627

	return kvm_write_guest_cached(vcpu->kvm, &vcpu->arch.pv_eoi.data, &val,
				      sizeof(val));
628 629 630 631
}

static int pv_eoi_get_user(struct kvm_vcpu *vcpu, u8 *val)
{
632 633 634

	return kvm_read_guest_cached(vcpu->kvm, &vcpu->arch.pv_eoi.data, val,
				      sizeof(*val));
635 636 637 638 639 640 641 642 643 644
}

static inline bool pv_eoi_enabled(struct kvm_vcpu *vcpu)
{
	return vcpu->arch.pv_eoi.msr_val & KVM_MSR_ENABLED;
}

static bool pv_eoi_get_pending(struct kvm_vcpu *vcpu)
{
	u8 val;
645
	if (pv_eoi_get_user(vcpu, &val) < 0) {
646
		printk(KERN_WARNING "Can't read EOI MSR value: 0x%llx\n",
647
			   (unsigned long long)vcpu->arch.pv_eoi.msr_val);
648 649
		return false;
	}
650 651 652 653 654 655
	return val & 0x1;
}

static void pv_eoi_set_pending(struct kvm_vcpu *vcpu)
{
	if (pv_eoi_put_user(vcpu, KVM_PV_EOI_ENABLED) < 0) {
656
		printk(KERN_WARNING "Can't set EOI MSR value: 0x%llx\n",
657
			   (unsigned long long)vcpu->arch.pv_eoi.msr_val);
658 659 660 661 662 663 664 665
		return;
	}
	__set_bit(KVM_APIC_PV_EOI_PENDING, &vcpu->arch.apic_attention);
}

static void pv_eoi_clr_pending(struct kvm_vcpu *vcpu)
{
	if (pv_eoi_put_user(vcpu, KVM_PV_EOI_DISABLED) < 0) {
666
		printk(KERN_WARNING "Can't clear EOI MSR value: 0x%llx\n",
667
			   (unsigned long long)vcpu->arch.pv_eoi.msr_val);
668 669 670 671 672
		return;
	}
	__clear_bit(KVM_APIC_PV_EOI_PENDING, &vcpu->arch.apic_attention);
}

673 674
static int apic_has_interrupt_for_ppr(struct kvm_lapic *apic, u32 ppr)
{
675
	int highest_irr;
676
	if (apic->vcpu->arch.apicv_active)
677 678 679
		highest_irr = kvm_x86_ops->sync_pir_to_irr(apic->vcpu);
	else
		highest_irr = apic_find_highest_irr(apic);
680 681 682 683 684 685
	if (highest_irr == -1 || (highest_irr & 0xF0) <= ppr)
		return -1;
	return highest_irr;
}

static bool __apic_update_ppr(struct kvm_lapic *apic, u32 *new_ppr)
E
Eddie Dong 已提交
686
{
687
	u32 tpr, isrv, ppr, old_ppr;
E
Eddie Dong 已提交
688 689
	int isr;

690 691
	old_ppr = kvm_lapic_get_reg(apic, APIC_PROCPRI);
	tpr = kvm_lapic_get_reg(apic, APIC_TASKPRI);
E
Eddie Dong 已提交
692 693 694 695 696 697 698 699
	isr = apic_find_highest_isr(apic);
	isrv = (isr != -1) ? isr : 0;

	if ((tpr & 0xf0) >= (isrv & 0xf0))
		ppr = tpr & 0xff;
	else
		ppr = isrv & 0xf0;

700 701
	*new_ppr = ppr;
	if (old_ppr != ppr)
702
		kvm_lapic_set_reg(apic, APIC_PROCPRI, ppr);
703 704 705 706 707 708 709 710

	return ppr < old_ppr;
}

static void apic_update_ppr(struct kvm_lapic *apic)
{
	u32 ppr;

711 712
	if (__apic_update_ppr(apic, &ppr) &&
	    apic_has_interrupt_for_ppr(apic, ppr) != -1)
713
		kvm_make_request(KVM_REQ_EVENT, apic->vcpu);
E
Eddie Dong 已提交
714 715
}

716 717 718 719 720 721
void kvm_apic_update_ppr(struct kvm_vcpu *vcpu)
{
	apic_update_ppr(vcpu->arch.apic);
}
EXPORT_SYMBOL_GPL(kvm_apic_update_ppr);

E
Eddie Dong 已提交
722 723
static void apic_set_tpr(struct kvm_lapic *apic, u32 tpr)
{
724
	kvm_lapic_set_reg(apic, APIC_TASKPRI, tpr);
E
Eddie Dong 已提交
725 726 727
	apic_update_ppr(apic);
}

728
static bool kvm_apic_broadcast(struct kvm_lapic *apic, u32 mda)
729
{
730 731
	return mda == (apic_x2apic_mode(apic) ?
			X2APIC_BROADCAST : APIC_BROADCAST);
732 733
}

734
static bool kvm_apic_match_physical_addr(struct kvm_lapic *apic, u32 mda)
E
Eddie Dong 已提交
735
{
736 737 738 739
	if (kvm_apic_broadcast(apic, mda))
		return true;

	if (apic_x2apic_mode(apic))
740
		return mda == kvm_x2apic_id(apic);
741

742 743 744 745 746 747 748 749 750
	/*
	 * Hotplug hack: Make LAPIC in xAPIC mode also accept interrupts as if
	 * it were in x2APIC mode.  Hotplugged VCPUs start in xAPIC mode and
	 * this allows unique addressing of VCPUs with APIC ID over 0xff.
	 * The 0xff condition is needed because writeable xAPIC ID.
	 */
	if (kvm_x2apic_id(apic) > 0xff && mda == kvm_x2apic_id(apic))
		return true;

751
	return mda == kvm_xapic_id(apic);
E
Eddie Dong 已提交
752 753
}

754
static bool kvm_apic_match_logical_addr(struct kvm_lapic *apic, u32 mda)
E
Eddie Dong 已提交
755
{
G
Gleb Natapov 已提交
756 757
	u32 logical_id;

758
	if (kvm_apic_broadcast(apic, mda))
759
		return true;
760

761
	logical_id = kvm_lapic_get_reg(apic, APIC_LDR);
E
Eddie Dong 已提交
762

763
	if (apic_x2apic_mode(apic))
764 765
		return ((logical_id >> 16) == (mda >> 16))
		       && (logical_id & mda & 0xffff) != 0;
E
Eddie Dong 已提交
766

767
	logical_id = GET_APIC_LOGICAL_ID(logical_id);
E
Eddie Dong 已提交
768

769
	switch (kvm_lapic_get_reg(apic, APIC_DFR)) {
E
Eddie Dong 已提交
770
	case APIC_DFR_FLAT:
771
		return (logical_id & mda) != 0;
E
Eddie Dong 已提交
772
	case APIC_DFR_CLUSTER:
773 774
		return ((logical_id >> 4) == (mda >> 4))
		       && (logical_id & mda & 0xf) != 0;
E
Eddie Dong 已提交
775
	default:
776
		return false;
E
Eddie Dong 已提交
777 778 779
	}
}

780 781
/* The KVM local APIC implementation has two quirks:
 *
782 783 784
 *  - Real hardware delivers interrupts destined to x2APIC ID > 0xff to LAPICs
 *    in xAPIC mode if the "destination & 0xff" matches its xAPIC ID.
 *    KVM doesn't do that aliasing.
785 786 787 788 789 790 791 792 793 794
 *
 *  - in-kernel IOAPIC messages have to be delivered directly to
 *    x2APIC, because the kernel does not support interrupt remapping.
 *    In order to support broadcast without interrupt remapping, x2APIC
 *    rewrites the destination of non-IPI messages from APIC_BROADCAST
 *    to X2APIC_BROADCAST.
 *
 * The broadcast quirk can be disabled with KVM_CAP_X2APIC_API.  This is
 * important when userspace wants to use x2APIC-format MSIs, because
 * APIC_BROADCAST (0xff) is a legal route for "cluster 0, CPUs 0-7".
795
 */
796 797
static u32 kvm_apic_mda(struct kvm_vcpu *vcpu, unsigned int dest_id,
		struct kvm_lapic *source, struct kvm_lapic *target)
798 799 800
{
	bool ipi = source != NULL;

801
	if (!vcpu->kvm->arch.x2apic_broadcast_quirk_disabled &&
802
	    !ipi && dest_id == APIC_BROADCAST && apic_x2apic_mode(target))
803 804
		return X2APIC_BROADCAST;

805
	return dest_id;
806 807
}

808
bool kvm_apic_match_dest(struct kvm_vcpu *vcpu, struct kvm_lapic *source,
809
			   int shorthand, unsigned int dest, int dest_mode)
E
Eddie Dong 已提交
810
{
811
	struct kvm_lapic *target = vcpu->arch.apic;
812
	u32 mda = kvm_apic_mda(vcpu, dest, source, target);
E
Eddie Dong 已提交
813

Z
Zachary Amsden 已提交
814
	ASSERT(target);
815
	switch (shorthand) {
E
Eddie Dong 已提交
816
	case APIC_DEST_NOSHORT:
817
		if (dest_mode == APIC_DEST_PHYSICAL)
818
			return kvm_apic_match_physical_addr(target, mda);
819
		else
820
			return kvm_apic_match_logical_addr(target, mda);
E
Eddie Dong 已提交
821
	case APIC_DEST_SELF:
822
		return target == source;
E
Eddie Dong 已提交
823
	case APIC_DEST_ALLINC:
824
		return true;
E
Eddie Dong 已提交
825
	case APIC_DEST_ALLBUT:
826
		return target != source;
E
Eddie Dong 已提交
827
	default:
828
		return false;
E
Eddie Dong 已提交
829 830
	}
}
831
EXPORT_SYMBOL_GPL(kvm_apic_match_dest);
E
Eddie Dong 已提交
832

833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848
int kvm_vector_to_index(u32 vector, u32 dest_vcpus,
		       const unsigned long *bitmap, u32 bitmap_size)
{
	u32 mod;
	int i, idx = -1;

	mod = vector % dest_vcpus;

	for (i = 0; i <= mod; i++) {
		idx = find_next_bit(bitmap, bitmap_size, idx + 1);
		BUG_ON(idx == bitmap_size);
	}

	return idx;
}

849 850 851 852 853 854 855 856 857
static void kvm_apic_disabled_lapic_found(struct kvm *kvm)
{
	if (!kvm->arch.disabled_lapic_found) {
		kvm->arch.disabled_lapic_found = true;
		printk(KERN_INFO
		       "Disabled LAPIC found during irq injection\n");
	}
}

858 859
static bool kvm_apic_is_broadcast_dest(struct kvm *kvm, struct kvm_lapic **src,
		struct kvm_lapic_irq *irq, struct kvm_apic_map *map)
860
{
861 862 863 864 865 866 867 868 869 870 871 872
	if (kvm->arch.x2apic_broadcast_quirk_disabled) {
		if ((irq->dest_id == APIC_BROADCAST &&
				map->mode != KVM_APIC_MODE_X2APIC))
			return true;
		if (irq->dest_id == X2APIC_BROADCAST)
			return true;
	} else {
		bool x2apic_ipi = src && *src && apic_x2apic_mode(*src);
		if (irq->dest_id == (x2apic_ipi ?
		                     X2APIC_BROADCAST : APIC_BROADCAST))
			return true;
	}
873

874 875
	return false;
}
876

877 878 879 880 881 882 883 884 885 886 887 888 889
/* Return true if the interrupt can be handled by using *bitmap as index mask
 * for valid destinations in *dst array.
 * Return false if kvm_apic_map_get_dest_lapic did nothing useful.
 * Note: we may have zero kvm_lapic destinations when we return true, which
 * means that the interrupt should be dropped.  In this case, *bitmap would be
 * zero and *dst undefined.
 */
static inline bool kvm_apic_map_get_dest_lapic(struct kvm *kvm,
		struct kvm_lapic **src, struct kvm_lapic_irq *irq,
		struct kvm_apic_map *map, struct kvm_lapic ***dst,
		unsigned long *bitmap)
{
	int i, lowest;
890

891 892 893 894 895
	if (irq->shorthand == APIC_DEST_SELF && src) {
		*dst = src;
		*bitmap = 1;
		return true;
	} else if (irq->shorthand)
896 897
		return false;

898
	if (!map || kvm_apic_is_broadcast_dest(kvm, src, irq, map))
899 900
		return false;

901
	if (irq->dest_mode == APIC_DEST_PHYSICAL) {
R
Radim Krčmář 已提交
902
		if (irq->dest_id > map->max_apic_id) {
903 904
			*bitmap = 0;
		} else {
P
Paolo Bonzini 已提交
905 906
			u32 dest_id = array_index_nospec(irq->dest_id, map->max_apic_id + 1);
			*dst = &map->phys_map[dest_id];
907 908
			*bitmap = 1;
		}
909
		return true;
910
	}
911

912 913 914
	*bitmap = 0;
	if (!kvm_apic_map_get_logical_dest(map, irq->dest_id, dst,
				(u16 *)bitmap))
915
		return false;
916

917 918
	if (!kvm_lowest_prio_delivery(irq))
		return true;
919

920 921 922 923 924 925 926 927 928 929
	if (!kvm_vector_hashing_enabled()) {
		lowest = -1;
		for_each_set_bit(i, bitmap, 16) {
			if (!(*dst)[i])
				continue;
			if (lowest < 0)
				lowest = i;
			else if (kvm_apic_compare_prio((*dst)[i]->vcpu,
						(*dst)[lowest]->vcpu) < 0)
				lowest = i;
930
		}
931 932 933
	} else {
		if (!*bitmap)
			return true;
934

935 936
		lowest = kvm_vector_to_index(irq->vector, hweight16(*bitmap),
				bitmap, 16);
937

938 939 940 941 942 943
		if (!(*dst)[lowest]) {
			kvm_apic_disabled_lapic_found(kvm);
			*bitmap = 0;
			return true;
		}
	}
944

945
	*bitmap = (lowest >= 0) ? 1 << lowest : 0;
946

947 948
	return true;
}
949

950 951 952 953 954 955 956 957
bool kvm_irq_delivery_to_apic_fast(struct kvm *kvm, struct kvm_lapic *src,
		struct kvm_lapic_irq *irq, int *r, struct dest_map *dest_map)
{
	struct kvm_apic_map *map;
	unsigned long bitmap;
	struct kvm_lapic **dst = NULL;
	int i;
	bool ret;
958

959
	*r = -1;
960

961 962 963 964
	if (irq->shorthand == APIC_DEST_SELF) {
		*r = kvm_apic_set_irq(src->vcpu, irq, dest_map);
		return true;
	}
965

966 967
	rcu_read_lock();
	map = rcu_dereference(kvm->arch.apic_map);
968

969
	ret = kvm_apic_map_get_dest_lapic(kvm, &src, irq, map, &dst, &bitmap);
970 971
	if (ret) {
		*r = 0;
972 973 974 975
		for_each_set_bit(i, &bitmap, 16) {
			if (!dst[i])
				continue;
			*r += kvm_apic_set_irq(dst[i]->vcpu, irq, dest_map);
976
		}
977
	}
978 979 980 981 982

	rcu_read_unlock();
	return ret;
}

983
/*
M
Miaohe Lin 已提交
984
 * This routine tries to handle interrupts in posted mode, here is how
985 986 987 988
 * it deals with different cases:
 * - For single-destination interrupts, handle it in posted mode
 * - Else if vector hashing is enabled and it is a lowest-priority
 *   interrupt, handle it in posted mode and use the following mechanism
989
 *   to find the destination vCPU.
990 991 992 993 994 995 996
 *	1. For lowest-priority interrupts, store all the possible
 *	   destination vCPUs in an array.
 *	2. Use "guest vector % max number of destination vCPUs" to find
 *	   the right destination vCPU in the array for the lowest-priority
 *	   interrupt.
 * - Otherwise, use remapped mode to inject the interrupt.
 */
997 998 999 1000
bool kvm_intr_is_single_vcpu_fast(struct kvm *kvm, struct kvm_lapic_irq *irq,
			struct kvm_vcpu **dest_vcpu)
{
	struct kvm_apic_map *map;
1001 1002
	unsigned long bitmap;
	struct kvm_lapic **dst = NULL;
1003 1004 1005 1006 1007 1008 1009 1010
	bool ret = false;

	if (irq->shorthand)
		return false;

	rcu_read_lock();
	map = rcu_dereference(kvm->arch.apic_map);

1011 1012 1013
	if (kvm_apic_map_get_dest_lapic(kvm, NULL, irq, map, &dst, &bitmap) &&
			hweight16(bitmap) == 1) {
		unsigned long i = find_first_bit(&bitmap, 16);
1014

1015 1016 1017
		if (dst[i]) {
			*dest_vcpu = dst[i]->vcpu;
			ret = true;
1018
		}
1019 1020 1021 1022 1023 1024
	}

	rcu_read_unlock();
	return ret;
}

E
Eddie Dong 已提交
1025 1026 1027 1028 1029
/*
 * Add a pending IRQ into lapic.
 * Return 1 if successfully added and 0 if discarded.
 */
static int __apic_accept_irq(struct kvm_lapic *apic, int delivery_mode,
1030
			     int vector, int level, int trig_mode,
1031
			     struct dest_map *dest_map)
E
Eddie Dong 已提交
1032
{
1033
	int result = 0;
1034
	struct kvm_vcpu *vcpu = apic->vcpu;
E
Eddie Dong 已提交
1035

1036 1037
	trace_kvm_apic_accept_irq(vcpu->vcpu_id, delivery_mode,
				  trig_mode, vector);
E
Eddie Dong 已提交
1038 1039
	switch (delivery_mode) {
	case APIC_DM_LOWEST:
1040
		vcpu->arch.apic_arb_prio++;
1041
		/* fall through */
1042
	case APIC_DM_FIXED:
1043 1044 1045
		if (unlikely(trig_mode && !level))
			break;

E
Eddie Dong 已提交
1046 1047 1048 1049
		/* FIXME add logic for vcpu on reset */
		if (unlikely(!apic_enabled(apic)))
			break;

1050 1051
		result = 1;

1052
		if (dest_map) {
1053
			__set_bit(vcpu->vcpu_id, dest_map->map);
1054 1055
			dest_map->vectors[vcpu->vcpu_id] = vector;
		}
1056

1057 1058
		if (apic_test_vector(vector, apic->regs + APIC_TMR) != !!trig_mode) {
			if (trig_mode)
1059 1060
				kvm_lapic_set_vector(vector,
						     apic->regs + APIC_TMR);
1061
			else
1062 1063
				kvm_lapic_clear_vector(vector,
						       apic->regs + APIC_TMR);
1064 1065
		}

1066
		if (kvm_x86_ops->deliver_posted_interrupt(vcpu, vector)) {
1067
			kvm_lapic_set_irr(vector, apic);
1068 1069 1070
			kvm_make_request(KVM_REQ_EVENT, vcpu);
			kvm_vcpu_kick(vcpu);
		}
E
Eddie Dong 已提交
1071 1072 1073
		break;

	case APIC_DM_REMRD:
1074 1075 1076 1077
		result = 1;
		vcpu->arch.pv.pv_unhalted = 1;
		kvm_make_request(KVM_REQ_EVENT, vcpu);
		kvm_vcpu_kick(vcpu);
E
Eddie Dong 已提交
1078 1079 1080
		break;

	case APIC_DM_SMI:
P
Paolo Bonzini 已提交
1081 1082 1083
		result = 1;
		kvm_make_request(KVM_REQ_SMI, vcpu);
		kvm_vcpu_kick(vcpu);
E
Eddie Dong 已提交
1084
		break;
1085

E
Eddie Dong 已提交
1086
	case APIC_DM_NMI:
1087
		result = 1;
1088
		kvm_inject_nmi(vcpu);
J
Jan Kiszka 已提交
1089
		kvm_vcpu_kick(vcpu);
E
Eddie Dong 已提交
1090 1091 1092
		break;

	case APIC_DM_INIT:
1093
		if (!trig_mode || level) {
1094
			result = 1;
1095 1096
			/* assumes that there are only KVM_APIC_INIT/SIPI */
			apic->pending_events = (1UL << KVM_APIC_INIT);
1097
			kvm_make_request(KVM_REQ_EVENT, vcpu);
1098 1099
			kvm_vcpu_kick(vcpu);
		}
E
Eddie Dong 已提交
1100 1101 1102
		break;

	case APIC_DM_STARTUP:
1103 1104 1105 1106 1107 1108 1109
		result = 1;
		apic->sipi_vector = vector;
		/* make sure sipi_vector is visible for the receiver */
		smp_wmb();
		set_bit(KVM_APIC_SIPI, &apic->pending_events);
		kvm_make_request(KVM_REQ_EVENT, vcpu);
		kvm_vcpu_kick(vcpu);
E
Eddie Dong 已提交
1110 1111
		break;

1112 1113 1114 1115 1116 1117 1118 1119
	case APIC_DM_EXTINT:
		/*
		 * Should only be called by kvm_apic_local_deliver() with LVT0,
		 * before NMI watchdog was enabled. Already handled by
		 * kvm_apic_accept_pic_intr().
		 */
		break;

E
Eddie Dong 已提交
1120 1121 1122 1123 1124 1125 1126 1127
	default:
		printk(KERN_ERR "TODO: unsupported delivery mode %x\n",
		       delivery_mode);
		break;
	}
	return result;
}

1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161
/*
 * This routine identifies the destination vcpus mask meant to receive the
 * IOAPIC interrupts. It either uses kvm_apic_map_get_dest_lapic() to find
 * out the destination vcpus array and set the bitmap or it traverses to
 * each available vcpu to identify the same.
 */
void kvm_bitmap_or_dest_vcpus(struct kvm *kvm, struct kvm_lapic_irq *irq,
			      unsigned long *vcpu_bitmap)
{
	struct kvm_lapic **dest_vcpu = NULL;
	struct kvm_lapic *src = NULL;
	struct kvm_apic_map *map;
	struct kvm_vcpu *vcpu;
	unsigned long bitmap;
	int i, vcpu_idx;
	bool ret;

	rcu_read_lock();
	map = rcu_dereference(kvm->arch.apic_map);

	ret = kvm_apic_map_get_dest_lapic(kvm, &src, irq, map, &dest_vcpu,
					  &bitmap);
	if (ret) {
		for_each_set_bit(i, &bitmap, 16) {
			if (!dest_vcpu[i])
				continue;
			vcpu_idx = dest_vcpu[i]->vcpu->vcpu_idx;
			__set_bit(vcpu_idx, vcpu_bitmap);
		}
	} else {
		kvm_for_each_vcpu(i, vcpu, kvm) {
			if (!kvm_apic_present(vcpu))
				continue;
			if (!kvm_apic_match_dest(vcpu, NULL,
1162
						 irq->shorthand,
1163 1164 1165 1166 1167 1168 1169 1170 1171
						 irq->dest_id,
						 irq->dest_mode))
				continue;
			__set_bit(i, vcpu_bitmap);
		}
	}
	rcu_read_unlock();
}

1172
int kvm_apic_compare_prio(struct kvm_vcpu *vcpu1, struct kvm_vcpu *vcpu2)
1173
{
1174
	return vcpu1->arch.apic_arb_prio - vcpu2->arch.apic_arb_prio;
1175 1176
}

1177 1178
static bool kvm_ioapic_handles_vector(struct kvm_lapic *apic, int vector)
{
1179
	return test_bit(vector, apic->vcpu->arch.ioapic_handled_vectors);
1180 1181
}

1182 1183
static void kvm_ioapic_send_eoi(struct kvm_lapic *apic, int vector)
{
1184 1185 1186 1187 1188
	int trigger_mode;

	/* Eoi the ioapic only if the ioapic doesn't own the vector. */
	if (!kvm_ioapic_handles_vector(apic, vector))
		return;
1189

1190 1191 1192 1193 1194
	/* Request a KVM exit to inform the userspace IOAPIC. */
	if (irqchip_split(apic->vcpu->kvm)) {
		apic->vcpu->arch.pending_ioapic_eoi = vector;
		kvm_make_request(KVM_REQ_IOAPIC_EOI_EXIT, apic->vcpu);
		return;
1195
	}
1196 1197 1198 1199 1200 1201 1202

	if (apic_test_vector(vector, apic->regs + APIC_TMR))
		trigger_mode = IOAPIC_LEVEL_TRIG;
	else
		trigger_mode = IOAPIC_EDGE_TRIG;

	kvm_ioapic_update_eoi(apic->vcpu, vector, trigger_mode);
1203 1204
}

1205
static int apic_set_eoi(struct kvm_lapic *apic)
E
Eddie Dong 已提交
1206 1207
{
	int vector = apic_find_highest_isr(apic);
1208 1209 1210

	trace_kvm_eoi(apic, vector);

E
Eddie Dong 已提交
1211 1212 1213 1214 1215
	/*
	 * Not every write EOI will has corresponding ISR,
	 * one example is when Kernel check timer on setup_IO_APIC
	 */
	if (vector == -1)
1216
		return vector;
E
Eddie Dong 已提交
1217

M
Michael S. Tsirkin 已提交
1218
	apic_clear_isr(vector, apic);
E
Eddie Dong 已提交
1219 1220
	apic_update_ppr(apic);

1221 1222 1223
	if (test_bit(vector, vcpu_to_synic(apic->vcpu)->vec_bitmap))
		kvm_hv_synic_send_eoi(apic->vcpu, vector);

1224
	kvm_ioapic_send_eoi(apic, vector);
1225
	kvm_make_request(KVM_REQ_EVENT, apic->vcpu);
1226
	return vector;
E
Eddie Dong 已提交
1227 1228
}

1229 1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243
/*
 * this interface assumes a trap-like exit, which has already finished
 * desired side effect including vISR and vPPR update.
 */
void kvm_apic_set_eoi_accelerated(struct kvm_vcpu *vcpu, int vector)
{
	struct kvm_lapic *apic = vcpu->arch.apic;

	trace_kvm_eoi(apic, vector);

	kvm_ioapic_send_eoi(apic, vector);
	kvm_make_request(KVM_REQ_EVENT, apic->vcpu);
}
EXPORT_SYMBOL_GPL(kvm_apic_set_eoi_accelerated);

1244
void kvm_apic_send_ipi(struct kvm_lapic *apic, u32 icr_low, u32 icr_high)
E
Eddie Dong 已提交
1245
{
1246
	struct kvm_lapic_irq irq;
E
Eddie Dong 已提交
1247

1248 1249 1250
	irq.vector = icr_low & APIC_VECTOR_MASK;
	irq.delivery_mode = icr_low & APIC_MODE_MASK;
	irq.dest_mode = icr_low & APIC_DEST_MASK;
1251
	irq.level = (icr_low & APIC_INT_ASSERT) != 0;
1252 1253
	irq.trig_mode = icr_low & APIC_INT_LEVELTRIG;
	irq.shorthand = icr_low & APIC_SHORT_MASK;
1254
	irq.msi_redir_hint = false;
G
Gleb Natapov 已提交
1255 1256 1257 1258
	if (apic_x2apic_mode(apic))
		irq.dest_id = icr_high;
	else
		irq.dest_id = GET_APIC_DEST_FIELD(icr_high);
E
Eddie Dong 已提交
1259

1260 1261
	trace_kvm_apic_ipi(icr_low, irq.dest_id);

1262
	kvm_irq_delivery_to_apic(apic->vcpu->kvm, apic, &irq, NULL);
E
Eddie Dong 已提交
1263 1264 1265 1266
}

static u32 apic_get_tmcct(struct kvm_lapic *apic)
{
1267
	ktime_t remaining, now;
1268
	s64 ns;
1269
	u32 tmcct;
E
Eddie Dong 已提交
1270 1271 1272

	ASSERT(apic != NULL);

1273
	/* if initial count is 0, current count should also be 0 */
1274
	if (kvm_lapic_get_reg(apic, APIC_TMICT) == 0 ||
1275
		apic->lapic_timer.period == 0)
1276 1277
		return 0;

1278
	now = ktime_get();
1279
	remaining = ktime_sub(apic->lapic_timer.target_expiration, now);
1280
	if (ktime_to_ns(remaining) < 0)
T
Thomas Gleixner 已提交
1281
		remaining = 0;
1282

1283 1284 1285
	ns = mod_64(ktime_to_ns(remaining), apic->lapic_timer.period);
	tmcct = div64_u64(ns,
			 (APIC_BUS_CYCLE_NS * apic->divide_count));
E
Eddie Dong 已提交
1286 1287 1288 1289

	return tmcct;
}

1290 1291 1292 1293 1294
static void __report_tpr_access(struct kvm_lapic *apic, bool write)
{
	struct kvm_vcpu *vcpu = apic->vcpu;
	struct kvm_run *run = vcpu->run;

1295
	kvm_make_request(KVM_REQ_REPORT_TPR_ACCESS, vcpu);
1296
	run->tpr_access.rip = kvm_rip_read(vcpu);
1297 1298 1299 1300 1301 1302 1303 1304 1305
	run->tpr_access.is_write = write;
}

static inline void report_tpr_access(struct kvm_lapic *apic, bool write)
{
	if (apic->vcpu->arch.tpr_access_reporting)
		__report_tpr_access(apic, write);
}

E
Eddie Dong 已提交
1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317
static u32 __apic_read(struct kvm_lapic *apic, unsigned int offset)
{
	u32 val = 0;

	if (offset >= LAPIC_MMIO_LENGTH)
		return 0;

	switch (offset) {
	case APIC_ARBPRI:
		break;

	case APIC_TMCCT:	/* Timer CCR */
1318 1319 1320
		if (apic_lvtt_tscdeadline(apic))
			return 0;

E
Eddie Dong 已提交
1321 1322
		val = apic_get_tmcct(apic);
		break;
1323 1324
	case APIC_PROCPRI:
		apic_update_ppr(apic);
1325
		val = kvm_lapic_get_reg(apic, offset);
1326
		break;
1327 1328 1329
	case APIC_TASKPRI:
		report_tpr_access(apic, false);
		/* fall thru */
E
Eddie Dong 已提交
1330
	default:
1331
		val = kvm_lapic_get_reg(apic, offset);
E
Eddie Dong 已提交
1332 1333 1334 1335 1336 1337
		break;
	}

	return val;
}

G
Gregory Haskins 已提交
1338 1339 1340 1341 1342
static inline struct kvm_lapic *to_lapic(struct kvm_io_device *dev)
{
	return container_of(dev, struct kvm_lapic, dev);
}

1343 1344 1345 1346
#define APIC_REG_MASK(reg)	(1ull << ((reg) >> 4))
#define APIC_REGS_MASK(first, count) \
	(APIC_REG_MASK(first) * ((1ull << (count)) - 1))

1347
int kvm_lapic_reg_read(struct kvm_lapic *apic, u32 offset, int len,
G
Gleb Natapov 已提交
1348
		void *data)
E
Eddie Dong 已提交
1349 1350 1351
{
	unsigned char alignment = offset & 0xf;
	u32 result;
G
Guo Chao 已提交
1352
	/* this bitmask has a bit cleared for each reserved register */
1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379
	u64 valid_reg_mask =
		APIC_REG_MASK(APIC_ID) |
		APIC_REG_MASK(APIC_LVR) |
		APIC_REG_MASK(APIC_TASKPRI) |
		APIC_REG_MASK(APIC_PROCPRI) |
		APIC_REG_MASK(APIC_LDR) |
		APIC_REG_MASK(APIC_DFR) |
		APIC_REG_MASK(APIC_SPIV) |
		APIC_REGS_MASK(APIC_ISR, APIC_ISR_NR) |
		APIC_REGS_MASK(APIC_TMR, APIC_ISR_NR) |
		APIC_REGS_MASK(APIC_IRR, APIC_ISR_NR) |
		APIC_REG_MASK(APIC_ESR) |
		APIC_REG_MASK(APIC_ICR) |
		APIC_REG_MASK(APIC_ICR2) |
		APIC_REG_MASK(APIC_LVTT) |
		APIC_REG_MASK(APIC_LVTTHMR) |
		APIC_REG_MASK(APIC_LVTPC) |
		APIC_REG_MASK(APIC_LVT0) |
		APIC_REG_MASK(APIC_LVT1) |
		APIC_REG_MASK(APIC_LVTERR) |
		APIC_REG_MASK(APIC_TMICT) |
		APIC_REG_MASK(APIC_TMCCT) |
		APIC_REG_MASK(APIC_TDCR);

	/* ARBPRI is not valid on x2APIC */
	if (!apic_x2apic_mode(apic))
		valid_reg_mask |= APIC_REG_MASK(APIC_ARBPRI);
G
Gleb Natapov 已提交
1380

1381
	if (offset > 0x3f0 || !(valid_reg_mask & APIC_REG_MASK(offset)))
G
Gleb Natapov 已提交
1382 1383
		return 1;

E
Eddie Dong 已提交
1384 1385
	result = __apic_read(apic, offset & ~0xf);

1386 1387
	trace_kvm_apic_read(offset, result);

E
Eddie Dong 已提交
1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398
	switch (len) {
	case 1:
	case 2:
	case 4:
		memcpy(data, (char *)&result + alignment, len);
		break;
	default:
		printk(KERN_ERR "Local APIC read with len = %x, "
		       "should be 1,2, or 4 instead\n", len);
		break;
	}
1399
	return 0;
E
Eddie Dong 已提交
1400
}
1401
EXPORT_SYMBOL_GPL(kvm_lapic_reg_read);
E
Eddie Dong 已提交
1402

G
Gleb Natapov 已提交
1403 1404
static int apic_mmio_in_range(struct kvm_lapic *apic, gpa_t addr)
{
1405 1406
	return addr >= apic->base_address &&
		addr < apic->base_address + LAPIC_MMIO_LENGTH;
G
Gleb Natapov 已提交
1407 1408
}

1409
static int apic_mmio_read(struct kvm_vcpu *vcpu, struct kvm_io_device *this,
G
Gleb Natapov 已提交
1410 1411 1412 1413 1414 1415 1416 1417
			   gpa_t address, int len, void *data)
{
	struct kvm_lapic *apic = to_lapic(this);
	u32 offset = address - apic->base_address;

	if (!apic_mmio_in_range(apic, address))
		return -EOPNOTSUPP;

1418 1419 1420 1421 1422 1423 1424 1425 1426
	if (!kvm_apic_hw_enabled(apic) || apic_x2apic_mode(apic)) {
		if (!kvm_check_has_quirk(vcpu->kvm,
					 KVM_X86_QUIRK_LAPIC_MMIO_HOLE))
			return -EOPNOTSUPP;

		memset(data, 0xff, len);
		return 0;
	}

1427
	kvm_lapic_reg_read(apic, offset, len, data);
G
Gleb Natapov 已提交
1428 1429 1430 1431

	return 0;
}

E
Eddie Dong 已提交
1432 1433 1434 1435
static void update_divide_count(struct kvm_lapic *apic)
{
	u32 tmp1, tmp2, tdcr;

1436
	tdcr = kvm_lapic_get_reg(apic, APIC_TDCR);
E
Eddie Dong 已提交
1437 1438
	tmp1 = tdcr & 0xf;
	tmp2 = ((tmp1 & 0x3) | ((tmp1 & 0x8) >> 1)) + 1;
1439
	apic->divide_count = 0x1 << (tmp2 & 0x7);
E
Eddie Dong 已提交
1440 1441
}

1442 1443 1444 1445 1446 1447 1448
static void limit_periodic_timer_frequency(struct kvm_lapic *apic)
{
	/*
	 * Do not allow the guest to program periodic timers with small
	 * interval, since the hrtimers are not throttled by the host
	 * scheduler.
	 */
1449
	if (apic_lvtt_period(apic) && apic->lapic_timer.period) {
1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462
		s64 min_period = min_timer_period_us * 1000LL;

		if (apic->lapic_timer.period < min_period) {
			pr_info_ratelimited(
			    "kvm: vcpu %i: requested %lld ns "
			    "lapic timer period limited to %lld ns\n",
			    apic->vcpu->vcpu_id,
			    apic->lapic_timer.period, min_period);
			apic->lapic_timer.period = min_period;
		}
	}
}

1463 1464
static void apic_update_lvtt(struct kvm_lapic *apic)
{
1465
	u32 timer_mode = kvm_lapic_get_reg(apic, APIC_LVTT) &
1466 1467 1468
			apic->lapic_timer.timer_mode_mask;

	if (apic->lapic_timer.timer_mode != timer_mode) {
1469
		if (apic_lvtt_tscdeadline(apic) != (timer_mode ==
1470 1471
				APIC_LVT_TIMER_TSCDEADLINE)) {
			hrtimer_cancel(&apic->lapic_timer.timer);
1472 1473 1474
			kvm_lapic_set_reg(apic, APIC_TMICT, 0);
			apic->lapic_timer.period = 0;
			apic->lapic_timer.tscdeadline = 0;
1475
		}
1476
		apic->lapic_timer.timer_mode = timer_mode;
1477
		limit_periodic_timer_frequency(apic);
1478 1479 1480
	}
}

1481 1482 1483 1484 1485 1486 1487 1488
/*
 * On APICv, this test will cause a busy wait
 * during a higher-priority task.
 */

static bool lapic_timer_int_injected(struct kvm_vcpu *vcpu)
{
	struct kvm_lapic *apic = vcpu->arch.apic;
1489
	u32 reg = kvm_lapic_get_reg(apic, APIC_LVTT);
1490 1491 1492

	if (kvm_apic_hw_enabled(apic)) {
		int vec = reg & APIC_VECTOR_MASK;
1493
		void *bitmap = apic->regs + APIC_ISR;
1494

1495
		if (vcpu->arch.apicv_active)
1496 1497 1498 1499
			bitmap = apic->regs + APIC_IRR;

		if (apic_test_vector(vec, bitmap))
			return true;
1500 1501 1502 1503
	}
	return false;
}

1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523
static inline void __wait_lapic_expire(struct kvm_vcpu *vcpu, u64 guest_cycles)
{
	u64 timer_advance_ns = vcpu->arch.apic->lapic_timer.timer_advance_ns;

	/*
	 * If the guest TSC is running at a different ratio than the host, then
	 * convert the delay to nanoseconds to achieve an accurate delay.  Note
	 * that __delay() uses delay_tsc whenever the hardware has TSC, thus
	 * always for VMX enabled hardware.
	 */
	if (vcpu->arch.tsc_scaling_ratio == kvm_default_tsc_scaling_ratio) {
		__delay(min(guest_cycles,
			nsec_to_cycles(vcpu, timer_advance_ns)));
	} else {
		u64 delay_ns = guest_cycles * 1000000ULL;
		do_div(delay_ns, vcpu->arch.virtual_tsc_khz);
		ndelay(min_t(u32, delay_ns, timer_advance_ns));
	}
}

1524
static inline void adjust_lapic_timer_advance(struct kvm_vcpu *vcpu,
1525
					      s64 advance_expire_delta)
1526 1527
{
	struct kvm_lapic *apic = vcpu->arch.apic;
1528
	u32 timer_advance_ns = apic->lapic_timer.timer_advance_ns;
1529 1530
	u64 ns;

1531 1532 1533 1534 1535
	/* Do not adjust for tiny fluctuations or large random spikes. */
	if (abs(advance_expire_delta) > LAPIC_TIMER_ADVANCE_ADJUST_MAX ||
	    abs(advance_expire_delta) < LAPIC_TIMER_ADVANCE_ADJUST_MIN)
		return;

1536
	/* too early */
1537 1538
	if (advance_expire_delta < 0) {
		ns = -advance_expire_delta * 1000000ULL;
1539
		do_div(ns, vcpu->arch.virtual_tsc_khz);
1540
		timer_advance_ns -= ns/LAPIC_TIMER_ADVANCE_ADJUST_STEP;
1541 1542
	} else {
	/* too late */
1543
		ns = advance_expire_delta * 1000000ULL;
1544
		do_div(ns, vcpu->arch.virtual_tsc_khz);
1545
		timer_advance_ns += ns/LAPIC_TIMER_ADVANCE_ADJUST_STEP;
1546 1547
	}

1548 1549
	if (unlikely(timer_advance_ns > LAPIC_TIMER_ADVANCE_NS_MAX))
		timer_advance_ns = LAPIC_TIMER_ADVANCE_NS_INIT;
1550 1551 1552
	apic->lapic_timer.timer_advance_ns = timer_advance_ns;
}

1553
static void __kvm_wait_lapic_expire(struct kvm_vcpu *vcpu)
1554 1555 1556
{
	struct kvm_lapic *apic = vcpu->arch.apic;
	u64 guest_tsc, tsc_deadline;
1557 1558 1559 1560 1561 1562

	if (apic->lapic_timer.expired_tscdeadline == 0)
		return;

	tsc_deadline = apic->lapic_timer.expired_tscdeadline;
	apic->lapic_timer.expired_tscdeadline = 0;
1563
	guest_tsc = kvm_read_l1_tsc(vcpu, rdtsc());
1564
	apic->lapic_timer.advance_expire_delta = guest_tsc - tsc_deadline;
1565 1566

	if (guest_tsc < tsc_deadline)
1567
		__wait_lapic_expire(vcpu, tsc_deadline - guest_tsc);
1568

1569
	if (lapic_timer_advance_dynamic)
1570
		adjust_lapic_timer_advance(vcpu, apic->lapic_timer.advance_expire_delta);
1571
}
1572 1573 1574 1575 1576 1577

void kvm_wait_lapic_expire(struct kvm_vcpu *vcpu)
{
	if (lapic_timer_int_injected(vcpu))
		__kvm_wait_lapic_expire(vcpu);
}
1578
EXPORT_SYMBOL_GPL(kvm_wait_lapic_expire);
1579

1580 1581 1582 1583 1584
static void kvm_apic_inject_pending_timer_irqs(struct kvm_lapic *apic)
{
	struct kvm_timer *ktimer = &apic->lapic_timer;

	kvm_apic_local_deliver(apic, APIC_LVTT);
H
Haiwei Li 已提交
1585
	if (apic_lvtt_tscdeadline(apic)) {
1586
		ktimer->tscdeadline = 0;
H
Haiwei Li 已提交
1587
	} else if (apic_lvtt_oneshot(apic)) {
1588 1589 1590 1591 1592 1593 1594 1595 1596 1597 1598 1599 1600 1601 1602 1603 1604 1605 1606 1607 1608 1609 1610 1611 1612 1613 1614
		ktimer->tscdeadline = 0;
		ktimer->target_expiration = 0;
	}
}

static void apic_timer_expired(struct kvm_lapic *apic)
{
	struct kvm_vcpu *vcpu = apic->vcpu;
	struct kvm_timer *ktimer = &apic->lapic_timer;

	if (atomic_read(&apic->lapic_timer.pending))
		return;

	if (apic_lvtt_tscdeadline(apic) || ktimer->hv_timer_in_use)
		ktimer->expired_tscdeadline = ktimer->tscdeadline;

	if (kvm_use_posted_timer_interrupt(apic->vcpu)) {
		if (apic->lapic_timer.timer_advance_ns)
			__kvm_wait_lapic_expire(vcpu);
		kvm_apic_inject_pending_timer_irqs(apic);
		return;
	}

	atomic_inc(&apic->lapic_timer.pending);
	kvm_set_pending_timer(vcpu);
}

1615 1616
static void start_sw_tscdeadline(struct kvm_lapic *apic)
{
1617 1618
	struct kvm_timer *ktimer = &apic->lapic_timer;
	u64 guest_tsc, tscdeadline = ktimer->tscdeadline;
1619 1620 1621 1622 1623 1624 1625 1626 1627 1628 1629 1630
	u64 ns = 0;
	ktime_t expire;
	struct kvm_vcpu *vcpu = apic->vcpu;
	unsigned long this_tsc_khz = vcpu->arch.virtual_tsc_khz;
	unsigned long flags;
	ktime_t now;

	if (unlikely(!tscdeadline || !this_tsc_khz))
		return;

	local_irq_save(flags);

1631
	now = ktime_get();
1632
	guest_tsc = kvm_read_l1_tsc(vcpu, rdtsc());
1633 1634 1635 1636 1637

	ns = (tscdeadline - guest_tsc) * 1000000ULL;
	do_div(ns, this_tsc_khz);

	if (likely(tscdeadline > guest_tsc) &&
1638
	    likely(ns > apic->lapic_timer.timer_advance_ns)) {
1639
		expire = ktime_add_ns(now, ns);
1640
		expire = ktime_sub_ns(expire, ktimer->timer_advance_ns);
1641
		hrtimer_start(&ktimer->timer, expire, HRTIMER_MODE_ABS_HARD);
1642 1643 1644 1645 1646 1647
	} else
		apic_timer_expired(apic);

	local_irq_restore(flags);
}

1648 1649 1650 1651 1652 1653 1654 1655 1656 1657 1658 1659 1660 1661 1662 1663 1664 1665 1666 1667 1668 1669 1670 1671
static void update_target_expiration(struct kvm_lapic *apic, uint32_t old_divisor)
{
	ktime_t now, remaining;
	u64 ns_remaining_old, ns_remaining_new;

	apic->lapic_timer.period = (u64)kvm_lapic_get_reg(apic, APIC_TMICT)
		* APIC_BUS_CYCLE_NS * apic->divide_count;
	limit_periodic_timer_frequency(apic);

	now = ktime_get();
	remaining = ktime_sub(apic->lapic_timer.target_expiration, now);
	if (ktime_to_ns(remaining) < 0)
		remaining = 0;

	ns_remaining_old = ktime_to_ns(remaining);
	ns_remaining_new = mul_u64_u32_div(ns_remaining_old,
	                                   apic->divide_count, old_divisor);

	apic->lapic_timer.tscdeadline +=
		nsec_to_cycles(apic->vcpu, ns_remaining_new) -
		nsec_to_cycles(apic->vcpu, ns_remaining_old);
	apic->lapic_timer.target_expiration = ktime_add_ns(now, ns_remaining_new);
}

1672
static bool set_target_expiration(struct kvm_lapic *apic)
1673 1674
{
	ktime_t now;
1675
	u64 tscl = rdtsc();
1676

1677
	now = ktime_get();
1678
	apic->lapic_timer.period = (u64)kvm_lapic_get_reg(apic, APIC_TMICT)
1679
		* APIC_BUS_CYCLE_NS * apic->divide_count;
1680

1681 1682
	if (!apic->lapic_timer.period) {
		apic->lapic_timer.tscdeadline = 0;
1683
		return false;
1684 1685
	}

1686
	limit_periodic_timer_frequency(apic);
1687

1688 1689 1690 1691 1692 1693 1694 1695 1696
	apic->lapic_timer.tscdeadline = kvm_read_l1_tsc(apic->vcpu, tscl) +
		nsec_to_cycles(apic->vcpu, apic->lapic_timer.period);
	apic->lapic_timer.target_expiration = ktime_add_ns(now, apic->lapic_timer.period);

	return true;
}

static void advance_periodic_target_expiration(struct kvm_lapic *apic)
{
1697 1698 1699 1700 1701 1702 1703 1704 1705 1706 1707
	ktime_t now = ktime_get();
	u64 tscl = rdtsc();
	ktime_t delta;

	/*
	 * Synchronize both deadlines to the same time source or
	 * differences in the periods (caused by differences in the
	 * underlying clocks or numerical approximation errors) will
	 * cause the two to drift apart over time as the errors
	 * accumulate.
	 */
1708 1709 1710
	apic->lapic_timer.target_expiration =
		ktime_add_ns(apic->lapic_timer.target_expiration,
				apic->lapic_timer.period);
1711 1712 1713
	delta = ktime_sub(apic->lapic_timer.target_expiration, now);
	apic->lapic_timer.tscdeadline = kvm_read_l1_tsc(apic->vcpu, tscl) +
		nsec_to_cycles(apic->vcpu, delta);
1714 1715
}

1716 1717 1718 1719 1720 1721 1722 1723 1724 1725 1726 1727 1728 1729 1730 1731 1732
static void start_sw_period(struct kvm_lapic *apic)
{
	if (!apic->lapic_timer.period)
		return;

	if (ktime_after(ktime_get(),
			apic->lapic_timer.target_expiration)) {
		apic_timer_expired(apic);

		if (apic_lvtt_oneshot(apic))
			return;

		advance_periodic_target_expiration(apic);
	}

	hrtimer_start(&apic->lapic_timer.timer,
		apic->lapic_timer.target_expiration,
1733
		HRTIMER_MODE_ABS);
1734 1735
}

1736 1737
bool kvm_lapic_hv_timer_in_use(struct kvm_vcpu *vcpu)
{
1738 1739 1740
	if (!lapic_in_kernel(vcpu))
		return false;

1741 1742 1743 1744
	return vcpu->arch.apic->lapic_timer.hv_timer_in_use;
}
EXPORT_SYMBOL_GPL(kvm_lapic_hv_timer_in_use);

1745
static void cancel_hv_timer(struct kvm_lapic *apic)
1746
{
1747
	WARN_ON(preemptible());
1748
	WARN_ON(!apic->lapic_timer.hv_timer_in_use);
1749 1750 1751 1752
	kvm_x86_ops->cancel_hv_timer(apic->vcpu);
	apic->lapic_timer.hv_timer_in_use = false;
}

1753
static bool start_hv_timer(struct kvm_lapic *apic)
1754
{
1755
	struct kvm_timer *ktimer = &apic->lapic_timer;
1756 1757
	struct kvm_vcpu *vcpu = apic->vcpu;
	bool expired;
1758

1759
	WARN_ON(preemptible());
1760 1761 1762
	if (!kvm_x86_ops->set_hv_timer)
		return false;

1763 1764 1765
	if (!ktimer->tscdeadline)
		return false;

1766
	if (kvm_x86_ops->set_hv_timer(vcpu, ktimer->tscdeadline, &expired))
1767 1768 1769 1770
		return false;

	ktimer->hv_timer_in_use = true;
	hrtimer_cancel(&ktimer->timer);
1771

1772
	/*
1773 1774 1775
	 * To simplify handling the periodic timer, leave the hv timer running
	 * even if the deadline timer has expired, i.e. rely on the resulting
	 * VM-Exit to recompute the periodic timer's target expiration.
1776
	 */
1777 1778 1779 1780 1781 1782 1783
	if (!apic_lvtt_period(apic)) {
		/*
		 * Cancel the hv timer if the sw timer fired while the hv timer
		 * was being programmed, or if the hv timer itself expired.
		 */
		if (atomic_read(&ktimer->pending)) {
			cancel_hv_timer(apic);
1784
		} else if (expired) {
1785
			apic_timer_expired(apic);
1786 1787
			cancel_hv_timer(apic);
		}
1788
	}
1789

1790
	trace_kvm_hv_timer_state(vcpu->vcpu_id, ktimer->hv_timer_in_use);
1791

1792 1793 1794
	return true;
}

1795
static void start_sw_timer(struct kvm_lapic *apic)
1796
{
1797
	struct kvm_timer *ktimer = &apic->lapic_timer;
1798 1799

	WARN_ON(preemptible());
1800 1801 1802 1803 1804 1805 1806 1807 1808 1809 1810
	if (apic->lapic_timer.hv_timer_in_use)
		cancel_hv_timer(apic);
	if (!apic_lvtt_period(apic) && atomic_read(&ktimer->pending))
		return;

	if (apic_lvtt_period(apic) || apic_lvtt_oneshot(apic))
		start_sw_period(apic);
	else if (apic_lvtt_tscdeadline(apic))
		start_sw_tscdeadline(apic);
	trace_kvm_hv_timer_state(apic->vcpu->vcpu_id, false);
}
1811

1812 1813
static void restart_apic_timer(struct kvm_lapic *apic)
{
1814
	preempt_disable();
1815 1816 1817 1818

	if (!apic_lvtt_period(apic) && atomic_read(&apic->lapic_timer.pending))
		goto out;

1819 1820
	if (!start_hv_timer(apic))
		start_sw_timer(apic);
1821
out:
1822
	preempt_enable();
1823 1824
}

1825 1826 1827 1828
void kvm_lapic_expired_hv_timer(struct kvm_vcpu *vcpu)
{
	struct kvm_lapic *apic = vcpu->arch.apic;

1829 1830 1831 1832
	preempt_disable();
	/* If the preempt notifier has already run, it also called apic_timer_expired */
	if (!apic->lapic_timer.hv_timer_in_use)
		goto out;
1833 1834 1835 1836 1837 1838
	WARN_ON(swait_active(&vcpu->wq));
	cancel_hv_timer(apic);
	apic_timer_expired(apic);

	if (apic_lvtt_period(apic) && apic->lapic_timer.period) {
		advance_periodic_target_expiration(apic);
1839
		restart_apic_timer(apic);
1840
	}
1841 1842
out:
	preempt_enable();
1843 1844 1845
}
EXPORT_SYMBOL_GPL(kvm_lapic_expired_hv_timer);

1846 1847
void kvm_lapic_switch_to_hv_timer(struct kvm_vcpu *vcpu)
{
1848
	restart_apic_timer(vcpu->arch.apic);
1849 1850 1851 1852 1853 1854 1855
}
EXPORT_SYMBOL_GPL(kvm_lapic_switch_to_hv_timer);

void kvm_lapic_switch_to_sw_timer(struct kvm_vcpu *vcpu)
{
	struct kvm_lapic *apic = vcpu->arch.apic;

1856
	preempt_disable();
1857
	/* Possibly the TSC deadline timer is not enabled yet */
1858 1859
	if (apic->lapic_timer.hv_timer_in_use)
		start_sw_timer(apic);
1860
	preempt_enable();
1861 1862
}
EXPORT_SYMBOL_GPL(kvm_lapic_switch_to_sw_timer);
1863

1864 1865 1866
void kvm_lapic_restart_hv_timer(struct kvm_vcpu *vcpu)
{
	struct kvm_lapic *apic = vcpu->arch.apic;
1867

1868 1869
	WARN_ON(!apic->lapic_timer.hv_timer_in_use);
	restart_apic_timer(apic);
1870 1871
}

E
Eddie Dong 已提交
1872 1873
static void start_apic_timer(struct kvm_lapic *apic)
{
1874
	atomic_set(&apic->lapic_timer.pending, 0);
1875

1876 1877 1878 1879 1880
	if ((apic_lvtt_period(apic) || apic_lvtt_oneshot(apic))
	    && !set_target_expiration(apic))
		return;

	restart_apic_timer(apic);
E
Eddie Dong 已提交
1881 1882
}

1883 1884
static void apic_manage_nmi_watchdog(struct kvm_lapic *apic, u32 lvt0_val)
{
1885
	bool lvt0_in_nmi_mode = apic_lvt_nmi_mode(lvt0_val);
1886

1887 1888 1889
	if (apic->lvt0_in_nmi_mode != lvt0_in_nmi_mode) {
		apic->lvt0_in_nmi_mode = lvt0_in_nmi_mode;
		if (lvt0_in_nmi_mode) {
1890
			atomic_inc(&apic->vcpu->kvm->arch.vapics_in_nmi_mode);
1891 1892 1893
		} else
			atomic_dec(&apic->vcpu->kvm->arch.vapics_in_nmi_mode);
	}
1894 1895
}

1896
int kvm_lapic_reg_write(struct kvm_lapic *apic, u32 reg, u32 val)
E
Eddie Dong 已提交
1897
{
G
Gleb Natapov 已提交
1898
	int ret = 0;
E
Eddie Dong 已提交
1899

G
Gleb Natapov 已提交
1900
	trace_kvm_apic_write(reg, val);
E
Eddie Dong 已提交
1901

G
Gleb Natapov 已提交
1902
	switch (reg) {
E
Eddie Dong 已提交
1903
	case APIC_ID:		/* Local APIC ID */
G
Gleb Natapov 已提交
1904
		if (!apic_x2apic_mode(apic))
1905
			kvm_apic_set_xapic_id(apic, val >> 24);
G
Gleb Natapov 已提交
1906 1907
		else
			ret = 1;
E
Eddie Dong 已提交
1908 1909 1910
		break;

	case APIC_TASKPRI:
1911
		report_tpr_access(apic, true);
E
Eddie Dong 已提交
1912 1913 1914 1915 1916 1917 1918 1919
		apic_set_tpr(apic, val & 0xff);
		break;

	case APIC_EOI:
		apic_set_eoi(apic);
		break;

	case APIC_LDR:
G
Gleb Natapov 已提交
1920
		if (!apic_x2apic_mode(apic))
1921
			kvm_apic_set_ldr(apic, val & APIC_LDR_MASK);
G
Gleb Natapov 已提交
1922 1923
		else
			ret = 1;
E
Eddie Dong 已提交
1924 1925 1926
		break;

	case APIC_DFR:
1927
		if (!apic_x2apic_mode(apic)) {
1928
			kvm_lapic_set_reg(apic, APIC_DFR, val | 0x0FFFFFFF);
1929
			apic->vcpu->kvm->arch.apic_map_dirty = true;
1930
		} else
G
Gleb Natapov 已提交
1931
			ret = 1;
E
Eddie Dong 已提交
1932 1933
		break;

1934 1935
	case APIC_SPIV: {
		u32 mask = 0x3ff;
1936
		if (kvm_lapic_get_reg(apic, APIC_LVR) & APIC_LVR_DIRECTED_EOI)
1937
			mask |= APIC_SPIV_DIRECTED_EOI;
1938
		apic_set_spiv(apic, val & mask);
E
Eddie Dong 已提交
1939 1940 1941 1942
		if (!(val & APIC_SPIV_APIC_ENABLED)) {
			int i;
			u32 lvt_val;

1943
			for (i = 0; i < KVM_APIC_LVT_NUM; i++) {
1944
				lvt_val = kvm_lapic_get_reg(apic,
E
Eddie Dong 已提交
1945
						       APIC_LVTT + 0x10 * i);
1946
				kvm_lapic_set_reg(apic, APIC_LVTT + 0x10 * i,
E
Eddie Dong 已提交
1947 1948
					     lvt_val | APIC_LVT_MASKED);
			}
1949
			apic_update_lvtt(apic);
1950
			atomic_set(&apic->lapic_timer.pending, 0);
E
Eddie Dong 已提交
1951 1952 1953

		}
		break;
1954
	}
E
Eddie Dong 已提交
1955 1956
	case APIC_ICR:
		/* No delay here, so we always clear the pending bit */
1957
		val &= ~(1 << 12);
1958
		kvm_apic_send_ipi(apic, val, kvm_lapic_get_reg(apic, APIC_ICR2));
1959
		kvm_lapic_set_reg(apic, APIC_ICR, val);
E
Eddie Dong 已提交
1960 1961 1962
		break;

	case APIC_ICR2:
G
Gleb Natapov 已提交
1963 1964
		if (!apic_x2apic_mode(apic))
			val &= 0xff000000;
1965
		kvm_lapic_set_reg(apic, APIC_ICR2, val);
E
Eddie Dong 已提交
1966 1967
		break;

1968
	case APIC_LVT0:
1969
		apic_manage_nmi_watchdog(apic, val);
1970
		/* fall through */
E
Eddie Dong 已提交
1971 1972 1973
	case APIC_LVTTHMR:
	case APIC_LVTPC:
	case APIC_LVT1:
1974
	case APIC_LVTERR: {
E
Eddie Dong 已提交
1975
		/* TODO: Check vector */
1976 1977 1978
		size_t size;
		u32 index;

1979
		if (!kvm_apic_sw_enabled(apic))
E
Eddie Dong 已提交
1980
			val |= APIC_LVT_MASKED;
1981 1982 1983 1984
		size = ARRAY_SIZE(apic_lvt_mask);
		index = array_index_nospec(
				(reg - APIC_LVTT) >> 4, size);
		val &= apic_lvt_mask[index];
1985
		kvm_lapic_set_reg(apic, reg, val);
E
Eddie Dong 已提交
1986
		break;
1987
	}
E
Eddie Dong 已提交
1988

1989
	case APIC_LVTT:
1990
		if (!kvm_apic_sw_enabled(apic))
1991 1992
			val |= APIC_LVT_MASKED;
		val &= (apic_lvt_mask[0] | apic->lapic_timer.timer_mode_mask);
1993
		kvm_lapic_set_reg(apic, APIC_LVTT, val);
1994
		apic_update_lvtt(apic);
1995 1996
		break;

E
Eddie Dong 已提交
1997
	case APIC_TMICT:
1998 1999 2000
		if (apic_lvtt_tscdeadline(apic))
			break;

2001
		hrtimer_cancel(&apic->lapic_timer.timer);
2002
		kvm_lapic_set_reg(apic, APIC_TMICT, val);
E
Eddie Dong 已提交
2003
		start_apic_timer(apic);
G
Gleb Natapov 已提交
2004
		break;
E
Eddie Dong 已提交
2005

2006 2007 2008
	case APIC_TDCR: {
		uint32_t old_divisor = apic->divide_count;

2009
		kvm_lapic_set_reg(apic, APIC_TDCR, val);
E
Eddie Dong 已提交
2010
		update_divide_count(apic);
2011 2012 2013 2014 2015 2016
		if (apic->divide_count != old_divisor &&
				apic->lapic_timer.period) {
			hrtimer_cancel(&apic->lapic_timer.timer);
			update_target_expiration(apic, old_divisor);
			restart_apic_timer(apic);
		}
E
Eddie Dong 已提交
2017
		break;
2018
	}
G
Gleb Natapov 已提交
2019
	case APIC_ESR:
2020
		if (apic_x2apic_mode(apic) && val != 0)
G
Gleb Natapov 已提交
2021 2022 2023 2024 2025
			ret = 1;
		break;

	case APIC_SELF_IPI:
		if (apic_x2apic_mode(apic)) {
2026
			kvm_lapic_reg_write(apic, APIC_ICR, 0x40000 | (val & 0xff));
G
Gleb Natapov 已提交
2027 2028 2029
		} else
			ret = 1;
		break;
E
Eddie Dong 已提交
2030
	default:
G
Gleb Natapov 已提交
2031
		ret = 1;
E
Eddie Dong 已提交
2032 2033
		break;
	}
2034

2035 2036
	kvm_recalculate_apic_map(apic->vcpu->kvm);

G
Gleb Natapov 已提交
2037 2038
	return ret;
}
2039
EXPORT_SYMBOL_GPL(kvm_lapic_reg_write);
G
Gleb Natapov 已提交
2040

2041
static int apic_mmio_write(struct kvm_vcpu *vcpu, struct kvm_io_device *this,
G
Gleb Natapov 已提交
2042 2043 2044 2045 2046 2047 2048 2049 2050
			    gpa_t address, int len, const void *data)
{
	struct kvm_lapic *apic = to_lapic(this);
	unsigned int offset = address - apic->base_address;
	u32 val;

	if (!apic_mmio_in_range(apic, address))
		return -EOPNOTSUPP;

2051 2052 2053 2054 2055 2056 2057 2058
	if (!kvm_apic_hw_enabled(apic) || apic_x2apic_mode(apic)) {
		if (!kvm_check_has_quirk(vcpu->kvm,
					 KVM_X86_QUIRK_LAPIC_MMIO_HOLE))
			return -EOPNOTSUPP;

		return 0;
	}

G
Gleb Natapov 已提交
2059 2060 2061 2062 2063
	/*
	 * APIC register must be aligned on 128-bits boundary.
	 * 32/64/128 bits registers must be accessed thru 32 bits.
	 * Refer SDM 8.4.1
	 */
2064
	if (len != 4 || (offset & 0xf))
2065
		return 0;
G
Gleb Natapov 已提交
2066 2067 2068

	val = *(u32*)data;

2069
	kvm_lapic_reg_write(apic, offset & 0xff0, val);
G
Gleb Natapov 已提交
2070

2071
	return 0;
E
Eddie Dong 已提交
2072 2073
}

2074 2075
void kvm_lapic_set_eoi(struct kvm_vcpu *vcpu)
{
2076
	kvm_lapic_reg_write(vcpu->arch.apic, APIC_EOI, 0);
2077 2078 2079
}
EXPORT_SYMBOL_GPL(kvm_lapic_set_eoi);

2080 2081 2082 2083 2084 2085 2086 2087
/* emulate APIC access in a trap manner */
void kvm_apic_write_nodecode(struct kvm_vcpu *vcpu, u32 offset)
{
	u32 val = 0;

	/* hw has done the conditional check and inst decode */
	offset &= 0xff0;

2088
	kvm_lapic_reg_read(vcpu->arch.apic, offset, 4, &val);
2089 2090

	/* TODO: optimize to just emulate side effect w/o one more write */
2091
	kvm_lapic_reg_write(vcpu->arch.apic, offset, val);
2092 2093 2094
}
EXPORT_SYMBOL_GPL(kvm_apic_write_nodecode);

2095
void kvm_free_lapic(struct kvm_vcpu *vcpu)
E
Eddie Dong 已提交
2096
{
2097 2098
	struct kvm_lapic *apic = vcpu->arch.apic;

2099
	if (!vcpu->arch.apic)
E
Eddie Dong 已提交
2100 2101
		return;

2102
	hrtimer_cancel(&apic->lapic_timer.timer);
E
Eddie Dong 已提交
2103

2104 2105 2106
	if (!(vcpu->arch.apic_base & MSR_IA32_APICBASE_ENABLE))
		static_key_slow_dec_deferred(&apic_hw_disabled);

2107
	if (!apic->sw_enabled)
2108
		static_key_slow_dec_deferred(&apic_sw_disabled);
E
Eddie Dong 已提交
2109

2110 2111 2112 2113
	if (apic->regs)
		free_page((unsigned long)apic->regs);

	kfree(apic);
E
Eddie Dong 已提交
2114 2115 2116 2117 2118 2119 2120
}

/*
 *----------------------------------------------------------------------
 * LAPIC interface
 *----------------------------------------------------------------------
 */
2121 2122 2123 2124
u64 kvm_get_lapic_tscdeadline_msr(struct kvm_vcpu *vcpu)
{
	struct kvm_lapic *apic = vcpu->arch.apic;

2125 2126
	if (!lapic_in_kernel(vcpu) ||
		!apic_lvtt_tscdeadline(apic))
2127 2128 2129 2130 2131 2132 2133 2134 2135
		return 0;

	return apic->lapic_timer.tscdeadline;
}

void kvm_set_lapic_tscdeadline_msr(struct kvm_vcpu *vcpu, u64 data)
{
	struct kvm_lapic *apic = vcpu->arch.apic;

2136
	if (!lapic_in_kernel(vcpu) || apic_lvtt_oneshot(apic) ||
2137
			apic_lvtt_period(apic))
2138 2139 2140 2141 2142 2143 2144
		return;

	hrtimer_cancel(&apic->lapic_timer.timer);
	apic->lapic_timer.tscdeadline = data;
	start_apic_timer(apic);
}

E
Eddie Dong 已提交
2145 2146
void kvm_lapic_set_tpr(struct kvm_vcpu *vcpu, unsigned long cr8)
{
2147
	struct kvm_lapic *apic = vcpu->arch.apic;
E
Eddie Dong 已提交
2148

A
Avi Kivity 已提交
2149
	apic_set_tpr(apic, ((cr8 & 0x0f) << 4)
2150
		     | (kvm_lapic_get_reg(apic, APIC_TASKPRI) & 4));
E
Eddie Dong 已提交
2151 2152 2153 2154 2155 2156
}

u64 kvm_lapic_get_cr8(struct kvm_vcpu *vcpu)
{
	u64 tpr;

2157
	tpr = (u64) kvm_lapic_get_reg(vcpu->arch.apic, APIC_TASKPRI);
E
Eddie Dong 已提交
2158 2159 2160 2161 2162 2163

	return (tpr & 0xf0) >> 4;
}

void kvm_lapic_set_base(struct kvm_vcpu *vcpu, u64 value)
{
2164
	u64 old_value = vcpu->arch.apic_base;
2165
	struct kvm_lapic *apic = vcpu->arch.apic;
E
Eddie Dong 已提交
2166

2167
	if (!apic)
E
Eddie Dong 已提交
2168
		value |= MSR_IA32_APICBASE_BSP;
2169

2170 2171
	vcpu->arch.apic_base = value;

2172 2173 2174 2175 2176 2177
	if ((old_value ^ value) & MSR_IA32_APICBASE_ENABLE)
		kvm_update_cpuid(vcpu);

	if (!apic)
		return;

2178
	/* update jump label if enable bit changes */
2179
	if ((old_value ^ value) & MSR_IA32_APICBASE_ENABLE) {
2180 2181
		if (value & MSR_IA32_APICBASE_ENABLE) {
			kvm_apic_set_xapic_id(apic, vcpu->vcpu_id);
2182
			static_key_slow_dec_deferred(&apic_hw_disabled);
2183
		} else {
2184
			static_key_slow_inc(&apic_hw_disabled.key);
2185
			vcpu->kvm->arch.apic_map_dirty = true;
2186
		}
2187 2188
	}

2189 2190 2191 2192 2193
	if (((old_value ^ value) & X2APIC_ENABLE) && (value & X2APIC_ENABLE))
		kvm_apic_set_x2apic_id(apic, vcpu->vcpu_id);

	if ((old_value ^ value) & (MSR_IA32_APICBASE_ENABLE | X2APIC_ENABLE))
		kvm_x86_ops->set_virtual_apic_mode(vcpu);
2194

2195
	apic->base_address = apic->vcpu->arch.apic_base &
E
Eddie Dong 已提交
2196 2197
			     MSR_IA32_APICBASE_BASE;

2198 2199 2200
	if ((value & MSR_IA32_APICBASE_ENABLE) &&
	     apic->base_address != APIC_DEFAULT_PHYS_BASE)
		pr_warn_once("APIC base relocation is unsupported by KVM");
E
Eddie Dong 已提交
2201 2202
}

2203 2204 2205 2206 2207 2208 2209 2210 2211 2212 2213 2214 2215 2216 2217
void kvm_apic_update_apicv(struct kvm_vcpu *vcpu)
{
	struct kvm_lapic *apic = vcpu->arch.apic;

	if (vcpu->arch.apicv_active) {
		/* irr_pending is always true when apicv is activated. */
		apic->irr_pending = true;
		apic->isr_count = 1;
	} else {
		apic->irr_pending = (apic_search_irr(apic) != -1);
		apic->isr_count = count_vectors(apic->regs + APIC_ISR);
	}
}
EXPORT_SYMBOL_GPL(kvm_apic_update_apicv);

2218
void kvm_lapic_reset(struct kvm_vcpu *vcpu, bool init_event)
E
Eddie Dong 已提交
2219
{
2220
	struct kvm_lapic *apic = vcpu->arch.apic;
E
Eddie Dong 已提交
2221 2222
	int i;

2223 2224
	if (!apic)
		return;
E
Eddie Dong 已提交
2225

2226
	vcpu->kvm->arch.apic_map_dirty = false;
E
Eddie Dong 已提交
2227
	/* Stop the timer in case it's a reset to an active apic */
2228
	hrtimer_cancel(&apic->lapic_timer.timer);
E
Eddie Dong 已提交
2229

2230 2231 2232
	if (!init_event) {
		kvm_lapic_set_base(vcpu, APIC_DEFAULT_PHYS_BASE |
		                         MSR_IA32_APICBASE_ENABLE);
2233
		kvm_apic_set_xapic_id(apic, vcpu->vcpu_id);
2234
	}
2235
	kvm_apic_set_version(apic->vcpu);
E
Eddie Dong 已提交
2236

2237 2238
	for (i = 0; i < KVM_APIC_LVT_NUM; i++)
		kvm_lapic_set_reg(apic, APIC_LVTT + 0x10 * i, APIC_LVT_MASKED);
2239
	apic_update_lvtt(apic);
2240 2241
	if (kvm_vcpu_is_reset_bsp(vcpu) &&
	    kvm_check_has_quirk(vcpu->kvm, KVM_X86_QUIRK_LINT0_REENABLED))
2242
		kvm_lapic_set_reg(apic, APIC_LVT0,
2243
			     SET_APIC_DELIVERY_MODE(0, APIC_MODE_EXTINT));
2244
	apic_manage_nmi_watchdog(apic, kvm_lapic_get_reg(apic, APIC_LVT0));
E
Eddie Dong 已提交
2245

2246
	kvm_lapic_set_reg(apic, APIC_DFR, 0xffffffffU);
2247
	apic_set_spiv(apic, 0xff);
2248
	kvm_lapic_set_reg(apic, APIC_TASKPRI, 0);
2249 2250
	if (!apic_x2apic_mode(apic))
		kvm_apic_set_ldr(apic, 0);
2251 2252 2253 2254 2255
	kvm_lapic_set_reg(apic, APIC_ESR, 0);
	kvm_lapic_set_reg(apic, APIC_ICR, 0);
	kvm_lapic_set_reg(apic, APIC_ICR2, 0);
	kvm_lapic_set_reg(apic, APIC_TDCR, 0);
	kvm_lapic_set_reg(apic, APIC_TMICT, 0);
E
Eddie Dong 已提交
2256
	for (i = 0; i < 8; i++) {
2257 2258 2259
		kvm_lapic_set_reg(apic, APIC_IRR + 0x10 * i, 0);
		kvm_lapic_set_reg(apic, APIC_ISR + 0x10 * i, 0);
		kvm_lapic_set_reg(apic, APIC_TMR + 0x10 * i, 0);
E
Eddie Dong 已提交
2260
	}
2261
	kvm_apic_update_apicv(vcpu);
M
Michael S. Tsirkin 已提交
2262
	apic->highest_isr_cache = -1;
2263
	update_divide_count(apic);
2264
	atomic_set(&apic->lapic_timer.pending, 0);
2265
	if (kvm_vcpu_is_bsp(vcpu))
2266 2267
		kvm_lapic_set_base(vcpu,
				vcpu->arch.apic_base | MSR_IA32_APICBASE_BSP);
2268
	vcpu->arch.pv_eoi.msr_val = 0;
E
Eddie Dong 已提交
2269
	apic_update_ppr(apic);
2270 2271 2272 2273 2274
	if (vcpu->arch.apicv_active) {
		kvm_x86_ops->apicv_post_state_restore(vcpu);
		kvm_x86_ops->hwapic_irr_update(vcpu, -1);
		kvm_x86_ops->hwapic_isr_update(vcpu, -1);
	}
E
Eddie Dong 已提交
2275

2276
	vcpu->arch.apic_arb_prio = 0;
2277
	vcpu->arch.apic_attention = 0;
2278 2279

	kvm_recalculate_apic_map(vcpu->kvm);
E
Eddie Dong 已提交
2280 2281 2282 2283 2284 2285 2286
}

/*
 *----------------------------------------------------------------------
 * timer interface
 *----------------------------------------------------------------------
 */
2287

A
Avi Kivity 已提交
2288
static bool lapic_is_periodic(struct kvm_lapic *apic)
E
Eddie Dong 已提交
2289
{
2290
	return apic_lvtt_period(apic);
E
Eddie Dong 已提交
2291 2292
}

2293 2294
int apic_has_pending_timer(struct kvm_vcpu *vcpu)
{
2295
	struct kvm_lapic *apic = vcpu->arch.apic;
2296

2297
	if (apic_enabled(apic) && apic_lvt_enabled(apic, APIC_LVTT))
2298
		return atomic_read(&apic->lapic_timer.pending);
2299 2300 2301 2302

	return 0;
}

A
Avi Kivity 已提交
2303
int kvm_apic_local_deliver(struct kvm_lapic *apic, int lvt_type)
2304
{
2305
	u32 reg = kvm_lapic_get_reg(apic, lvt_type);
2306 2307
	int vector, mode, trig_mode;

2308
	if (kvm_apic_hw_enabled(apic) && !(reg & APIC_LVT_MASKED)) {
2309 2310 2311
		vector = reg & APIC_VECTOR_MASK;
		mode = reg & APIC_MODE_MASK;
		trig_mode = reg & APIC_LVT_LEVEL_TRIGGER;
2312 2313
		return __apic_accept_irq(apic, mode, vector, 1, trig_mode,
					NULL);
2314 2315 2316
	}
	return 0;
}
2317

2318
void kvm_apic_nmi_wd_deliver(struct kvm_vcpu *vcpu)
2319
{
2320 2321 2322 2323
	struct kvm_lapic *apic = vcpu->arch.apic;

	if (apic)
		kvm_apic_local_deliver(apic, APIC_LVT0);
2324 2325
}

G
Gregory Haskins 已提交
2326 2327 2328 2329 2330
static const struct kvm_io_device_ops apic_mmio_ops = {
	.read     = apic_mmio_read,
	.write    = apic_mmio_write,
};

2331 2332 2333
static enum hrtimer_restart apic_timer_fn(struct hrtimer *data)
{
	struct kvm_timer *ktimer = container_of(data, struct kvm_timer, timer);
A
Avi Kivity 已提交
2334
	struct kvm_lapic *apic = container_of(ktimer, struct kvm_lapic, lapic_timer);
2335

2336
	apic_timer_expired(apic);
2337

A
Avi Kivity 已提交
2338
	if (lapic_is_periodic(apic)) {
2339
		advance_periodic_target_expiration(apic);
2340 2341 2342 2343 2344 2345
		hrtimer_add_expires_ns(&ktimer->timer, ktimer->period);
		return HRTIMER_RESTART;
	} else
		return HRTIMER_NORESTART;
}

2346
int kvm_create_lapic(struct kvm_vcpu *vcpu, int timer_advance_ns)
E
Eddie Dong 已提交
2347 2348 2349 2350 2351
{
	struct kvm_lapic *apic;

	ASSERT(vcpu != NULL);

2352
	apic = kzalloc(sizeof(*apic), GFP_KERNEL_ACCOUNT);
E
Eddie Dong 已提交
2353 2354 2355
	if (!apic)
		goto nomem;

2356
	vcpu->arch.apic = apic;
E
Eddie Dong 已提交
2357

2358
	apic->regs = (void *)get_zeroed_page(GFP_KERNEL_ACCOUNT);
2359
	if (!apic->regs) {
E
Eddie Dong 已提交
2360 2361
		printk(KERN_ERR "malloc apic regs error for vcpu %x\n",
		       vcpu->vcpu_id);
2362
		goto nomem_free_apic;
E
Eddie Dong 已提交
2363 2364 2365
	}
	apic->vcpu = vcpu;

2366
	hrtimer_init(&apic->lapic_timer.timer, CLOCK_MONOTONIC,
2367
		     HRTIMER_MODE_ABS_HARD);
2368
	apic->lapic_timer.timer.function = apic_timer_fn;
2369
	if (timer_advance_ns == -1) {
2370
		apic->lapic_timer.timer_advance_ns = LAPIC_TIMER_ADVANCE_NS_INIT;
2371
		lapic_timer_advance_dynamic = true;
2372 2373
	} else {
		apic->lapic_timer.timer_advance_ns = timer_advance_ns;
2374
		lapic_timer_advance_dynamic = false;
2375 2376
	}

2377 2378
	/*
	 * APIC is created enabled. This will prevent kvm_lapic_set_base from
2379
	 * thinking that APIC state has changed.
2380 2381
	 */
	vcpu->arch.apic_base = MSR_IA32_APICBASE_ENABLE;
2382
	static_key_slow_inc(&apic_sw_disabled.key); /* sw disabled at reset */
G
Gregory Haskins 已提交
2383
	kvm_iodevice_init(&apic->dev, &apic_mmio_ops);
E
Eddie Dong 已提交
2384 2385

	return 0;
2386 2387
nomem_free_apic:
	kfree(apic);
2388
	vcpu->arch.apic = NULL;
E
Eddie Dong 已提交
2389 2390 2391 2392 2393 2394
nomem:
	return -ENOMEM;
}

int kvm_apic_has_interrupt(struct kvm_vcpu *vcpu)
{
2395
	struct kvm_lapic *apic = vcpu->arch.apic;
2396
	u32 ppr;
E
Eddie Dong 已提交
2397

2398
	if (!kvm_apic_hw_enabled(apic))
E
Eddie Dong 已提交
2399 2400
		return -1;

2401 2402
	__apic_update_ppr(apic, &ppr);
	return apic_has_interrupt_for_ppr(apic, ppr);
E
Eddie Dong 已提交
2403 2404
}

Q
Qing He 已提交
2405 2406
int kvm_apic_accept_pic_intr(struct kvm_vcpu *vcpu)
{
2407
	u32 lvt0 = kvm_lapic_get_reg(vcpu->arch.apic, APIC_LVT0);
Q
Qing He 已提交
2408

2409
	if (!kvm_apic_hw_enabled(vcpu->arch.apic))
2410
		return 1;
2411 2412
	if ((lvt0 & APIC_LVT_MASKED) == 0 &&
	    GET_APIC_DELIVERY_MODE(lvt0) == APIC_MODE_EXTINT)
2413 2414
		return 1;
	return 0;
Q
Qing He 已提交
2415 2416
}

2417 2418
void kvm_inject_apic_timer_irqs(struct kvm_vcpu *vcpu)
{
2419
	struct kvm_lapic *apic = vcpu->arch.apic;
2420

2421
	if (atomic_read(&apic->lapic_timer.pending) > 0) {
2422
		kvm_apic_inject_pending_timer_irqs(apic);
2423
		atomic_set(&apic->lapic_timer.pending, 0);
2424 2425 2426
	}
}

E
Eddie Dong 已提交
2427 2428 2429
int kvm_get_apic_interrupt(struct kvm_vcpu *vcpu)
{
	int vector = kvm_apic_has_interrupt(vcpu);
2430
	struct kvm_lapic *apic = vcpu->arch.apic;
2431
	u32 ppr;
E
Eddie Dong 已提交
2432 2433 2434 2435

	if (vector == -1)
		return -1;

2436 2437 2438 2439 2440 2441 2442
	/*
	 * We get here even with APIC virtualization enabled, if doing
	 * nested virtualization and L1 runs with the "acknowledge interrupt
	 * on exit" mode.  Then we cannot inject the interrupt via RVI,
	 * because the process would deliver it through the IDT.
	 */

E
Eddie Dong 已提交
2443
	apic_clear_irr(vector, apic);
2444
	if (test_bit(vector, vcpu_to_synic(vcpu)->auto_eoi_bitmap)) {
2445 2446 2447 2448 2449
		/*
		 * For auto-EOI interrupts, there might be another pending
		 * interrupt above PPR, so check whether to raise another
		 * KVM_REQ_EVENT.
		 */
2450
		apic_update_ppr(apic);
2451 2452 2453 2454 2455 2456 2457 2458 2459
	} else {
		/*
		 * For normal interrupts, PPR has been raised and there cannot
		 * be a higher-priority pending interrupt---except if there was
		 * a concurrent interrupt injection, but that would have
		 * triggered KVM_REQ_EVENT already.
		 */
		apic_set_isr(vector, apic);
		__apic_update_ppr(apic, &ppr);
2460 2461
	}

E
Eddie Dong 已提交
2462 2463
	return vector;
}
2464

2465 2466 2467 2468 2469
static int kvm_apic_state_fixup(struct kvm_vcpu *vcpu,
		struct kvm_lapic_state *s, bool set)
{
	if (apic_x2apic_mode(vcpu->arch.apic)) {
		u32 *id = (u32 *)(s->regs + APIC_ID);
2470
		u32 *ldr = (u32 *)(s->regs + APIC_LDR);
2471

2472 2473 2474 2475 2476 2477 2478 2479 2480
		if (vcpu->kvm->arch.x2apic_format) {
			if (*id != vcpu->vcpu_id)
				return -EINVAL;
		} else {
			if (set)
				*id >>= 24;
			else
				*id <<= 24;
		}
2481 2482 2483 2484

		/* In x2APIC mode, the LDR is fixed and based on the id */
		if (set)
			*ldr = kvm_apic_calc_x2apic_ldr(*id);
2485 2486 2487 2488 2489 2490 2491 2492 2493 2494 2495 2496
	}

	return 0;
}

int kvm_apic_get_state(struct kvm_vcpu *vcpu, struct kvm_lapic_state *s)
{
	memcpy(s->regs, vcpu->arch.apic->regs, sizeof(*s));
	return kvm_apic_state_fixup(vcpu, s, false);
}

int kvm_apic_set_state(struct kvm_vcpu *vcpu, struct kvm_lapic_state *s)
2497
{
2498
	struct kvm_lapic *apic = vcpu->arch.apic;
2499 2500
	int r;

2501
	kvm_lapic_set_base(vcpu, vcpu->arch.apic_base);
2502 2503
	/* set SPIV separately to get count of SW disabled APICs right */
	apic_set_spiv(apic, *((u32 *)(s->regs + APIC_SPIV)));
2504 2505

	r = kvm_apic_state_fixup(vcpu, s, true);
2506 2507
	if (r) {
		kvm_recalculate_apic_map(vcpu->kvm);
2508
		return r;
2509
	}
2510
	memcpy(vcpu->arch.apic->regs, s->regs, sizeof(*s));
2511

2512
	kvm_recalculate_apic_map(vcpu->kvm);
2513 2514
	kvm_apic_set_version(vcpu);

2515
	apic_update_ppr(apic);
2516
	hrtimer_cancel(&apic->lapic_timer.timer);
2517
	apic_update_lvtt(apic);
2518
	apic_manage_nmi_watchdog(apic, kvm_lapic_get_reg(apic, APIC_LVT0));
2519 2520
	update_divide_count(apic);
	start_apic_timer(apic);
2521
	kvm_apic_update_apicv(vcpu);
M
Michael S. Tsirkin 已提交
2522
	apic->highest_isr_cache = -1;
2523
	if (vcpu->arch.apicv_active) {
2524
		kvm_x86_ops->apicv_post_state_restore(vcpu);
W
Wei Wang 已提交
2525 2526
		kvm_x86_ops->hwapic_irr_update(vcpu,
				apic_find_highest_irr(apic));
2527
		kvm_x86_ops->hwapic_isr_update(vcpu,
2528
				apic_find_highest_isr(apic));
2529
	}
2530
	kvm_make_request(KVM_REQ_EVENT, vcpu);
2531 2532
	if (ioapic_in_kernel(vcpu->kvm))
		kvm_rtc_eoi_tracking_restore_one(vcpu);
2533 2534

	vcpu->arch.apic_arb_prio = 0;
2535 2536

	return 0;
2537
}
2538

2539
void __kvm_migrate_apic_timer(struct kvm_vcpu *vcpu)
2540 2541 2542
{
	struct hrtimer *timer;

2543 2544
	if (!lapic_in_kernel(vcpu) ||
		kvm_can_post_timer_interrupt(vcpu))
2545 2546
		return;

2547
	timer = &vcpu->arch.apic->lapic_timer.timer;
2548
	if (hrtimer_cancel(timer))
2549
		hrtimer_start_expires(timer, HRTIMER_MODE_ABS_HARD);
2550
}
A
Avi Kivity 已提交
2551

2552 2553 2554 2555 2556 2557 2558 2559 2560 2561 2562 2563 2564 2565 2566 2567 2568 2569 2570 2571 2572 2573 2574 2575 2576 2577 2578 2579 2580 2581 2582 2583 2584 2585 2586 2587 2588
/*
 * apic_sync_pv_eoi_from_guest - called on vmexit or cancel interrupt
 *
 * Detect whether guest triggered PV EOI since the
 * last entry. If yes, set EOI on guests's behalf.
 * Clear PV EOI in guest memory in any case.
 */
static void apic_sync_pv_eoi_from_guest(struct kvm_vcpu *vcpu,
					struct kvm_lapic *apic)
{
	bool pending;
	int vector;
	/*
	 * PV EOI state is derived from KVM_APIC_PV_EOI_PENDING in host
	 * and KVM_PV_EOI_ENABLED in guest memory as follows:
	 *
	 * KVM_APIC_PV_EOI_PENDING is unset:
	 * 	-> host disabled PV EOI.
	 * KVM_APIC_PV_EOI_PENDING is set, KVM_PV_EOI_ENABLED is set:
	 * 	-> host enabled PV EOI, guest did not execute EOI yet.
	 * KVM_APIC_PV_EOI_PENDING is set, KVM_PV_EOI_ENABLED is unset:
	 * 	-> host enabled PV EOI, guest executed EOI.
	 */
	BUG_ON(!pv_eoi_enabled(vcpu));
	pending = pv_eoi_get_pending(vcpu);
	/*
	 * Clear pending bit in any case: it will be set again on vmentry.
	 * While this might not be ideal from performance point of view,
	 * this makes sure pv eoi is only enabled when we know it's safe.
	 */
	pv_eoi_clr_pending(vcpu);
	if (pending)
		return;
	vector = apic_set_eoi(apic);
	trace_kvm_pv_eoi(apic, vector);
}

A
Avi Kivity 已提交
2589 2590 2591 2592
void kvm_lapic_sync_from_vapic(struct kvm_vcpu *vcpu)
{
	u32 data;

2593 2594 2595
	if (test_bit(KVM_APIC_PV_EOI_PENDING, &vcpu->arch.apic_attention))
		apic_sync_pv_eoi_from_guest(vcpu, vcpu->arch.apic);

2596
	if (!test_bit(KVM_APIC_CHECK_VAPIC, &vcpu->arch.apic_attention))
A
Avi Kivity 已提交
2597 2598
		return;

2599 2600
	if (kvm_read_guest_cached(vcpu->kvm, &vcpu->arch.apic->vapic_cache, &data,
				  sizeof(u32)))
2601
		return;
A
Avi Kivity 已提交
2602 2603 2604 2605

	apic_set_tpr(vcpu->arch.apic, data & 0xff);
}

2606 2607 2608 2609 2610 2611 2612 2613 2614 2615 2616 2617 2618 2619 2620
/*
 * apic_sync_pv_eoi_to_guest - called before vmentry
 *
 * Detect whether it's safe to enable PV EOI and
 * if yes do so.
 */
static void apic_sync_pv_eoi_to_guest(struct kvm_vcpu *vcpu,
					struct kvm_lapic *apic)
{
	if (!pv_eoi_enabled(vcpu) ||
	    /* IRR set or many bits in ISR: could be nested. */
	    apic->irr_pending ||
	    /* Cache not set: could be safe but we don't bother. */
	    apic->highest_isr_cache == -1 ||
	    /* Need EOI to update ioapic. */
2621
	    kvm_ioapic_handles_vector(apic, apic->highest_isr_cache)) {
2622 2623 2624 2625 2626 2627 2628 2629 2630 2631
		/*
		 * PV EOI was disabled by apic_sync_pv_eoi_from_guest
		 * so we need not do anything here.
		 */
		return;
	}

	pv_eoi_set_pending(apic->vcpu);
}

A
Avi Kivity 已提交
2632 2633 2634 2635
void kvm_lapic_sync_to_vapic(struct kvm_vcpu *vcpu)
{
	u32 data, tpr;
	int max_irr, max_isr;
2636
	struct kvm_lapic *apic = vcpu->arch.apic;
A
Avi Kivity 已提交
2637

2638 2639
	apic_sync_pv_eoi_to_guest(vcpu, apic);

2640
	if (!test_bit(KVM_APIC_CHECK_VAPIC, &vcpu->arch.apic_attention))
A
Avi Kivity 已提交
2641 2642
		return;

2643
	tpr = kvm_lapic_get_reg(apic, APIC_TASKPRI) & 0xff;
A
Avi Kivity 已提交
2644 2645 2646 2647 2648 2649 2650 2651
	max_irr = apic_find_highest_irr(apic);
	if (max_irr < 0)
		max_irr = 0;
	max_isr = apic_find_highest_isr(apic);
	if (max_isr < 0)
		max_isr = 0;
	data = (tpr & 0xff) | ((max_isr & 0xf0) << 8) | (max_irr << 24);

2652 2653
	kvm_write_guest_cached(vcpu->kvm, &vcpu->arch.apic->vapic_cache, &data,
				sizeof(u32));
A
Avi Kivity 已提交
2654 2655
}

2656
int kvm_lapic_set_vapic_addr(struct kvm_vcpu *vcpu, gpa_t vapic_addr)
A
Avi Kivity 已提交
2657
{
2658
	if (vapic_addr) {
2659
		if (kvm_gfn_to_hva_cache_init(vcpu->kvm,
2660 2661 2662
					&vcpu->arch.apic->vapic_cache,
					vapic_addr, sizeof(u32)))
			return -EINVAL;
2663
		__set_bit(KVM_APIC_CHECK_VAPIC, &vcpu->arch.apic_attention);
2664
	} else {
2665
		__clear_bit(KVM_APIC_CHECK_VAPIC, &vcpu->arch.apic_attention);
2666 2667 2668 2669
	}

	vcpu->arch.apic->vapic_addr = vapic_addr;
	return 0;
A
Avi Kivity 已提交
2670
}
G
Gleb Natapov 已提交
2671 2672 2673 2674 2675 2676

int kvm_x2apic_msr_write(struct kvm_vcpu *vcpu, u32 msr, u64 data)
{
	struct kvm_lapic *apic = vcpu->arch.apic;
	u32 reg = (msr - APIC_BASE_MSR) << 4;

2677
	if (!lapic_in_kernel(vcpu) || !apic_x2apic_mode(apic))
G
Gleb Natapov 已提交
2678 2679
		return 1;

2680 2681 2682
	if (reg == APIC_ICR2)
		return 1;

G
Gleb Natapov 已提交
2683
	/* if this is ICR write vector before command */
2684
	if (reg == APIC_ICR)
2685 2686
		kvm_lapic_reg_write(apic, APIC_ICR2, (u32)(data >> 32));
	return kvm_lapic_reg_write(apic, reg, (u32)data);
G
Gleb Natapov 已提交
2687 2688 2689 2690 2691 2692 2693
}

int kvm_x2apic_msr_read(struct kvm_vcpu *vcpu, u32 msr, u64 *data)
{
	struct kvm_lapic *apic = vcpu->arch.apic;
	u32 reg = (msr - APIC_BASE_MSR) << 4, low, high = 0;

2694
	if (!lapic_in_kernel(vcpu) || !apic_x2apic_mode(apic))
G
Gleb Natapov 已提交
2695 2696
		return 1;

2697
	if (reg == APIC_DFR || reg == APIC_ICR2)
2698 2699
		return 1;

2700
	if (kvm_lapic_reg_read(apic, reg, 4, &low))
G
Gleb Natapov 已提交
2701
		return 1;
2702
	if (reg == APIC_ICR)
2703
		kvm_lapic_reg_read(apic, APIC_ICR2, 4, &high);
G
Gleb Natapov 已提交
2704 2705 2706 2707 2708

	*data = (((u64)high) << 32) | low;

	return 0;
}
G
Gleb Natapov 已提交
2709 2710 2711 2712 2713

int kvm_hv_vapic_msr_write(struct kvm_vcpu *vcpu, u32 reg, u64 data)
{
	struct kvm_lapic *apic = vcpu->arch.apic;

2714
	if (!lapic_in_kernel(vcpu))
G
Gleb Natapov 已提交
2715 2716 2717 2718
		return 1;

	/* if this is ICR write vector before command */
	if (reg == APIC_ICR)
2719 2720
		kvm_lapic_reg_write(apic, APIC_ICR2, (u32)(data >> 32));
	return kvm_lapic_reg_write(apic, reg, (u32)data);
G
Gleb Natapov 已提交
2721 2722 2723 2724 2725 2726 2727
}

int kvm_hv_vapic_msr_read(struct kvm_vcpu *vcpu, u32 reg, u64 *data)
{
	struct kvm_lapic *apic = vcpu->arch.apic;
	u32 low, high = 0;

2728
	if (!lapic_in_kernel(vcpu))
G
Gleb Natapov 已提交
2729 2730
		return 1;

2731
	if (kvm_lapic_reg_read(apic, reg, 4, &low))
G
Gleb Natapov 已提交
2732 2733
		return 1;
	if (reg == APIC_ICR)
2734
		kvm_lapic_reg_read(apic, APIC_ICR2, 4, &high);
G
Gleb Natapov 已提交
2735 2736 2737 2738 2739

	*data = (((u64)high) << 32) | low;

	return 0;
}
2740

2741
int kvm_lapic_enable_pv_eoi(struct kvm_vcpu *vcpu, u64 data, unsigned long len)
2742 2743
{
	u64 addr = data & ~KVM_MSR_ENABLED;
2744 2745 2746
	struct gfn_to_hva_cache *ghc = &vcpu->arch.pv_eoi.data;
	unsigned long new_len;

2747 2748 2749 2750 2751 2752
	if (!IS_ALIGNED(addr, 4))
		return 1;

	vcpu->arch.pv_eoi.msr_val = data;
	if (!pv_eoi_enabled(vcpu))
		return 0;
2753 2754 2755 2756 2757 2758 2759

	if (addr == ghc->gpa && len <= ghc->len)
		new_len = ghc->len;
	else
		new_len = len;

	return kvm_gfn_to_hva_cache_init(vcpu->kvm, ghc, addr, new_len);
2760
}
2761

2762 2763 2764
void kvm_apic_accept_events(struct kvm_vcpu *vcpu)
{
	struct kvm_lapic *apic = vcpu->arch.apic;
2765
	u8 sipi_vector;
2766
	unsigned long pe;
2767

2768
	if (!lapic_in_kernel(vcpu) || !apic->pending_events)
2769 2770
		return;

2771
	/*
2772 2773 2774 2775 2776 2777
	 * INITs are latched while CPU is in specific states
	 * (SMM, VMX non-root mode, SVM with GIF=0).
	 * Because a CPU cannot be in these states immediately
	 * after it has processed an INIT signal (and thus in
	 * KVM_MP_STATE_INIT_RECEIVED state), just eat SIPIs
	 * and leave the INIT pending.
2778
	 */
2779
	if (kvm_vcpu_latch_init(vcpu)) {
2780 2781 2782 2783 2784
		WARN_ON_ONCE(vcpu->arch.mp_state == KVM_MP_STATE_INIT_RECEIVED);
		if (test_bit(KVM_APIC_SIPI, &apic->pending_events))
			clear_bit(KVM_APIC_SIPI, &apic->pending_events);
		return;
	}
2785

2786
	pe = xchg(&apic->pending_events, 0);
2787
	if (test_bit(KVM_APIC_INIT, &pe)) {
2788
		kvm_vcpu_reset(vcpu, true);
2789 2790 2791 2792 2793
		if (kvm_vcpu_is_bsp(apic->vcpu))
			vcpu->arch.mp_state = KVM_MP_STATE_RUNNABLE;
		else
			vcpu->arch.mp_state = KVM_MP_STATE_INIT_RECEIVED;
	}
2794
	if (test_bit(KVM_APIC_SIPI, &pe) &&
2795 2796 2797 2798 2799 2800 2801 2802 2803
	    vcpu->arch.mp_state == KVM_MP_STATE_INIT_RECEIVED) {
		/* evaluate pending_events before reading the vector */
		smp_rmb();
		sipi_vector = apic->sipi_vector;
		kvm_vcpu_deliver_sipi_vector(vcpu, sipi_vector);
		vcpu->arch.mp_state = KVM_MP_STATE_RUNNABLE;
	}
}

2804 2805 2806 2807
void kvm_lapic_init(void)
{
	/* do not patch jump label more than once per second */
	jump_label_rate_limit(&apic_hw_disabled, HZ);
2808
	jump_label_rate_limit(&apic_sw_disabled, HZ);
2809
}
2810 2811 2812 2813 2814 2815

void kvm_lapic_exit(void)
{
	static_key_deferred_flush(&apic_hw_disabled);
	static_key_deferred_flush(&apic_sw_disabled);
}