hyp-main.c

  1// SPDX-License-Identifier: GPL-2.0-only
  2/*
  3 * Copyright (C) 2020 - Google Inc
  4 * Author: Andrew Scull <ascull@google.com>
  5 */
  6
  7#include <hyp/adjust_pc.h>
  8#include <hyp/switch.h>
  9
 10#include <asm/pgtable-types.h>
 11#include <asm/kvm_asm.h>
 12#include <asm/kvm_emulate.h>
 13#include <asm/kvm_host.h>
 14#include <asm/kvm_hyp.h>
 15#include <asm/kvm_mmu.h>
 16
 17#include <nvhe/ffa.h>
 18#include <nvhe/mem_protect.h>
 19#include <nvhe/mm.h>
 20#include <nvhe/pkvm.h>
 21#include <nvhe/trap_handler.h>
 22
 23DEFINE_PER_CPU(struct kvm_nvhe_init_params, kvm_init_params);
 24
 25void __kvm_hyp_host_forward_smc(struct kvm_cpu_context *host_ctxt);
 26
 27static void __hyp_sve_save_guest(struct kvm_vcpu *vcpu)
 28{
 29	__vcpu_assign_sys_reg(vcpu, ZCR_EL1, read_sysreg_el1(SYS_ZCR));
 30	/*
 31	 * On saving/restoring guest sve state, always use the maximum VL for
 32	 * the guest. The layout of the data when saving the sve state depends
 33	 * on the VL, so use a consistent (i.e., the maximum) guest VL.
 34	 */
 35	sve_cond_update_zcr_vq(vcpu_sve_max_vq(vcpu) - 1, SYS_ZCR_EL2);
 36	__sve_save_state(vcpu_sve_pffr(vcpu), &vcpu->arch.ctxt.fp_regs.fpsr, true);
 37	write_sysreg_s(sve_vq_from_vl(kvm_host_sve_max_vl) - 1, SYS_ZCR_EL2);
 38}
 39
 40static void __hyp_sve_restore_host(void)
 41{
 42	struct cpu_sve_state *sve_state = *host_data_ptr(sve_state);
 43
 44	/*
 45	 * On saving/restoring host sve state, always use the maximum VL for
 46	 * the host. The layout of the data when saving the sve state depends
 47	 * on the VL, so use a consistent (i.e., the maximum) host VL.
 48	 *
 49	 * Note that this constrains the PE to the maximum shared VL
 50	 * that was discovered, if we wish to use larger VLs this will
 51	 * need to be revisited.
 52	 */
 53	write_sysreg_s(sve_vq_from_vl(kvm_host_sve_max_vl) - 1, SYS_ZCR_EL2);
 54	__sve_restore_state(sve_state->sve_regs + sve_ffr_offset(kvm_host_sve_max_vl),
 55			    &sve_state->fpsr,
 56			    true);
 57	write_sysreg_el1(sve_state->zcr_el1, SYS_ZCR);
 58}
 59
 60static void fpsimd_sve_flush(void)
 61{
 62	*host_data_ptr(fp_owner) = FP_STATE_HOST_OWNED;
 63}
 64
 65static void fpsimd_sve_sync(struct kvm_vcpu *vcpu)
 66{
 67	bool has_fpmr;
 68
 69	if (!guest_owns_fp_regs())
 70		return;
 71
 72	/*
 73	 * Traps have been disabled by __deactivate_cptr_traps(), but there
 74	 * hasn't necessarily been a context synchronization event yet.
 75	 */
 76	isb();
 77
 78	if (vcpu_has_sve(vcpu))
 79		__hyp_sve_save_guest(vcpu);
 80	else
 81		__fpsimd_save_state(&vcpu->arch.ctxt.fp_regs);
 82
 83	has_fpmr = kvm_has_fpmr(kern_hyp_va(vcpu->kvm));
 84	if (has_fpmr)
 85		__vcpu_assign_sys_reg(vcpu, FPMR, read_sysreg_s(SYS_FPMR));
 86
 87	if (system_supports_sve())
 88		__hyp_sve_restore_host();
 89	else
 90		__fpsimd_restore_state(host_data_ptr(host_ctxt.fp_regs));
 91
 92	if (has_fpmr)
 93		write_sysreg_s(*host_data_ptr(fpmr), SYS_FPMR);
 94
 95	*host_data_ptr(fp_owner) = FP_STATE_HOST_OWNED;
 96}
 97
 98static void flush_debug_state(struct pkvm_hyp_vcpu *hyp_vcpu)
 99{
100	struct kvm_vcpu *host_vcpu = hyp_vcpu->host_vcpu;
101
102	hyp_vcpu->vcpu.arch.debug_owner = host_vcpu->arch.debug_owner;
103
104	if (kvm_guest_owns_debug_regs(&hyp_vcpu->vcpu))
105		hyp_vcpu->vcpu.arch.vcpu_debug_state = host_vcpu->arch.vcpu_debug_state;
106	else if (kvm_host_owns_debug_regs(&hyp_vcpu->vcpu))
107		hyp_vcpu->vcpu.arch.external_debug_state = host_vcpu->arch.external_debug_state;
108}
109
110static void sync_debug_state(struct pkvm_hyp_vcpu *hyp_vcpu)
111{
112	struct kvm_vcpu *host_vcpu = hyp_vcpu->host_vcpu;
113
114	if (kvm_guest_owns_debug_regs(&hyp_vcpu->vcpu))
115		host_vcpu->arch.vcpu_debug_state = hyp_vcpu->vcpu.arch.vcpu_debug_state;
116	else if (kvm_host_owns_debug_regs(&hyp_vcpu->vcpu))
117		host_vcpu->arch.external_debug_state = hyp_vcpu->vcpu.arch.external_debug_state;
118}
119
120static void flush_hyp_vcpu(struct pkvm_hyp_vcpu *hyp_vcpu)
121{
122	struct kvm_vcpu *host_vcpu = hyp_vcpu->host_vcpu;
123
124	fpsimd_sve_flush();
125	flush_debug_state(hyp_vcpu);
126
127	hyp_vcpu->vcpu.arch.ctxt	= host_vcpu->arch.ctxt;
128
129	hyp_vcpu->vcpu.arch.mdcr_el2	= host_vcpu->arch.mdcr_el2;
130	hyp_vcpu->vcpu.arch.hcr_el2 &= ~(HCR_TWI | HCR_TWE);
131	hyp_vcpu->vcpu.arch.hcr_el2 |= READ_ONCE(host_vcpu->arch.hcr_el2) &
132						 (HCR_TWI | HCR_TWE);
133
134	hyp_vcpu->vcpu.arch.iflags	= host_vcpu->arch.iflags;
135
136	hyp_vcpu->vcpu.arch.vsesr_el2	= host_vcpu->arch.vsesr_el2;
137
138	hyp_vcpu->vcpu.arch.vgic_cpu.vgic_v3 = host_vcpu->arch.vgic_cpu.vgic_v3;
139}
140
141static void sync_hyp_vcpu(struct pkvm_hyp_vcpu *hyp_vcpu)
142{
143	struct kvm_vcpu *host_vcpu = hyp_vcpu->host_vcpu;
144	struct vgic_v3_cpu_if *hyp_cpu_if = &hyp_vcpu->vcpu.arch.vgic_cpu.vgic_v3;
145	struct vgic_v3_cpu_if *host_cpu_if = &host_vcpu->arch.vgic_cpu.vgic_v3;
146	unsigned int i;
147
148	fpsimd_sve_sync(&hyp_vcpu->vcpu);
149	sync_debug_state(hyp_vcpu);
150
151	host_vcpu->arch.ctxt		= hyp_vcpu->vcpu.arch.ctxt;
152
153	host_vcpu->arch.hcr_el2		= hyp_vcpu->vcpu.arch.hcr_el2;
154
155	host_vcpu->arch.fault		= hyp_vcpu->vcpu.arch.fault;
156
157	host_vcpu->arch.iflags		= hyp_vcpu->vcpu.arch.iflags;
158
159	host_cpu_if->vgic_hcr		= hyp_cpu_if->vgic_hcr;
160	host_cpu_if->vgic_vmcr		= hyp_cpu_if->vgic_vmcr;
161	for (i = 0; i < hyp_cpu_if->used_lrs; ++i)
162		host_cpu_if->vgic_lr[i] = hyp_cpu_if->vgic_lr[i];
163}
164
165static void handle___pkvm_vcpu_load(struct kvm_cpu_context *host_ctxt)
166{
167	DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1);
168	DECLARE_REG(unsigned int, vcpu_idx, host_ctxt, 2);
169	DECLARE_REG(u64, hcr_el2, host_ctxt, 3);
170	struct pkvm_hyp_vcpu *hyp_vcpu;
171
172	if (!is_protected_kvm_enabled())
173		return;
174
175	hyp_vcpu = pkvm_load_hyp_vcpu(handle, vcpu_idx);
176	if (!hyp_vcpu)
177		return;
178
179	if (pkvm_hyp_vcpu_is_protected(hyp_vcpu)) {
180		/* Propagate WFx trapping flags */
181		hyp_vcpu->vcpu.arch.hcr_el2 &= ~(HCR_TWE | HCR_TWI);
182		hyp_vcpu->vcpu.arch.hcr_el2 |= hcr_el2 & (HCR_TWE | HCR_TWI);
183	} else {
184		memcpy(&hyp_vcpu->vcpu.arch.fgt, hyp_vcpu->host_vcpu->arch.fgt,
185		       sizeof(hyp_vcpu->vcpu.arch.fgt));
186	}
187}
188
189static void handle___pkvm_vcpu_put(struct kvm_cpu_context *host_ctxt)
190{
191	struct pkvm_hyp_vcpu *hyp_vcpu;
192
193	if (!is_protected_kvm_enabled())
194		return;
195
196	hyp_vcpu = pkvm_get_loaded_hyp_vcpu();
197	if (hyp_vcpu)
198		pkvm_put_hyp_vcpu(hyp_vcpu);
199}
200
201static void handle___kvm_vcpu_run(struct kvm_cpu_context *host_ctxt)
202{
203	DECLARE_REG(struct kvm_vcpu *, host_vcpu, host_ctxt, 1);
204	int ret;
205
206	if (unlikely(is_protected_kvm_enabled())) {
207		struct pkvm_hyp_vcpu *hyp_vcpu = pkvm_get_loaded_hyp_vcpu();
208
209		/*
210		 * KVM (and pKVM) doesn't support SME guests for now, and
211		 * ensures that SME features aren't enabled in pstate when
212		 * loading a vcpu. Therefore, if SME features enabled the host
213		 * is misbehaving.
214		 */
215		if (unlikely(system_supports_sme() && read_sysreg_s(SYS_SVCR))) {
216			ret = -EINVAL;
217			goto out;
218		}
219
220		if (!hyp_vcpu) {
221			ret = -EINVAL;
222			goto out;
223		}
224
225		flush_hyp_vcpu(hyp_vcpu);
226
227		ret = __kvm_vcpu_run(&hyp_vcpu->vcpu);
228
229		sync_hyp_vcpu(hyp_vcpu);
230	} else {
231		struct kvm_vcpu *vcpu = kern_hyp_va(host_vcpu);
232
233		/* The host is fully trusted, run its vCPU directly. */
234		fpsimd_lazy_switch_to_guest(vcpu);
235		ret = __kvm_vcpu_run(vcpu);
236		fpsimd_lazy_switch_to_host(vcpu);
237	}
238out:
239	cpu_reg(host_ctxt, 1) =  ret;
240}
241
242static int pkvm_refill_memcache(struct pkvm_hyp_vcpu *hyp_vcpu)
243{
244	struct kvm_vcpu *host_vcpu = hyp_vcpu->host_vcpu;
245
246	return refill_memcache(&hyp_vcpu->vcpu.arch.pkvm_memcache,
247			       host_vcpu->arch.pkvm_memcache.nr_pages,
248			       &host_vcpu->arch.pkvm_memcache);
249}
250
251static void handle___pkvm_host_share_guest(struct kvm_cpu_context *host_ctxt)
252{
253	DECLARE_REG(u64, pfn, host_ctxt, 1);
254	DECLARE_REG(u64, gfn, host_ctxt, 2);
255	DECLARE_REG(u64, nr_pages, host_ctxt, 3);
256	DECLARE_REG(enum kvm_pgtable_prot, prot, host_ctxt, 4);
257	struct pkvm_hyp_vcpu *hyp_vcpu;
258	int ret = -EINVAL;
259
260	if (!is_protected_kvm_enabled())
261		goto out;
262
263	hyp_vcpu = pkvm_get_loaded_hyp_vcpu();
264	if (!hyp_vcpu || pkvm_hyp_vcpu_is_protected(hyp_vcpu))
265		goto out;
266
267	ret = pkvm_refill_memcache(hyp_vcpu);
268	if (ret)
269		goto out;
270
271	ret = __pkvm_host_share_guest(pfn, gfn, nr_pages, hyp_vcpu, prot);
272out:
273	cpu_reg(host_ctxt, 1) =  ret;
274}
275
276static void handle___pkvm_host_unshare_guest(struct kvm_cpu_context *host_ctxt)
277{
278	DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1);
279	DECLARE_REG(u64, gfn, host_ctxt, 2);
280	DECLARE_REG(u64, nr_pages, host_ctxt, 3);
281	struct pkvm_hyp_vm *hyp_vm;
282	int ret = -EINVAL;
283
284	if (!is_protected_kvm_enabled())
285		goto out;
286
287	hyp_vm = get_np_pkvm_hyp_vm(handle);
288	if (!hyp_vm)
289		goto out;
290
291	ret = __pkvm_host_unshare_guest(gfn, nr_pages, hyp_vm);
292	put_pkvm_hyp_vm(hyp_vm);
293out:
294	cpu_reg(host_ctxt, 1) =  ret;
295}
296
297static void handle___pkvm_host_relax_perms_guest(struct kvm_cpu_context *host_ctxt)
298{
299	DECLARE_REG(u64, gfn, host_ctxt, 1);
300	DECLARE_REG(enum kvm_pgtable_prot, prot, host_ctxt, 2);
301	struct pkvm_hyp_vcpu *hyp_vcpu;
302	int ret = -EINVAL;
303
304	if (!is_protected_kvm_enabled())
305		goto out;
306
307	hyp_vcpu = pkvm_get_loaded_hyp_vcpu();
308	if (!hyp_vcpu || pkvm_hyp_vcpu_is_protected(hyp_vcpu))
309		goto out;
310
311	ret = __pkvm_host_relax_perms_guest(gfn, hyp_vcpu, prot);
312out:
313	cpu_reg(host_ctxt, 1) = ret;
314}
315
316static void handle___pkvm_host_wrprotect_guest(struct kvm_cpu_context *host_ctxt)
317{
318	DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1);
319	DECLARE_REG(u64, gfn, host_ctxt, 2);
320	DECLARE_REG(u64, nr_pages, host_ctxt, 3);
321	struct pkvm_hyp_vm *hyp_vm;
322	int ret = -EINVAL;
323
324	if (!is_protected_kvm_enabled())
325		goto out;
326
327	hyp_vm = get_np_pkvm_hyp_vm(handle);
328	if (!hyp_vm)
329		goto out;
330
331	ret = __pkvm_host_wrprotect_guest(gfn, nr_pages, hyp_vm);
332	put_pkvm_hyp_vm(hyp_vm);
333out:
334	cpu_reg(host_ctxt, 1) = ret;
335}
336
337static void handle___pkvm_host_test_clear_young_guest(struct kvm_cpu_context *host_ctxt)
338{
339	DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1);
340	DECLARE_REG(u64, gfn, host_ctxt, 2);
341	DECLARE_REG(u64, nr_pages, host_ctxt, 3);
342	DECLARE_REG(bool, mkold, host_ctxt, 4);
343	struct pkvm_hyp_vm *hyp_vm;
344	int ret = -EINVAL;
345
346	if (!is_protected_kvm_enabled())
347		goto out;
348
349	hyp_vm = get_np_pkvm_hyp_vm(handle);
350	if (!hyp_vm)
351		goto out;
352
353	ret = __pkvm_host_test_clear_young_guest(gfn, nr_pages, mkold, hyp_vm);
354	put_pkvm_hyp_vm(hyp_vm);
355out:
356	cpu_reg(host_ctxt, 1) = ret;
357}
358
359static void handle___pkvm_host_mkyoung_guest(struct kvm_cpu_context *host_ctxt)
360{
361	DECLARE_REG(u64, gfn, host_ctxt, 1);
362	struct pkvm_hyp_vcpu *hyp_vcpu;
363	int ret = -EINVAL;
364
365	if (!is_protected_kvm_enabled())
366		goto out;
367
368	hyp_vcpu = pkvm_get_loaded_hyp_vcpu();
369	if (!hyp_vcpu || pkvm_hyp_vcpu_is_protected(hyp_vcpu))
370		goto out;
371
372	ret = __pkvm_host_mkyoung_guest(gfn, hyp_vcpu);
373out:
374	cpu_reg(host_ctxt, 1) =  ret;
375}
376
377static void handle___kvm_adjust_pc(struct kvm_cpu_context *host_ctxt)
378{
379	DECLARE_REG(struct kvm_vcpu *, vcpu, host_ctxt, 1);
380
381	__kvm_adjust_pc(kern_hyp_va(vcpu));
382}
383
384static void handle___kvm_flush_vm_context(struct kvm_cpu_context *host_ctxt)
385{
386	__kvm_flush_vm_context();
387}
388
389static void handle___kvm_tlb_flush_vmid_ipa(struct kvm_cpu_context *host_ctxt)
390{
391	DECLARE_REG(struct kvm_s2_mmu *, mmu, host_ctxt, 1);
392	DECLARE_REG(phys_addr_t, ipa, host_ctxt, 2);
393	DECLARE_REG(int, level, host_ctxt, 3);
394
395	__kvm_tlb_flush_vmid_ipa(kern_hyp_va(mmu), ipa, level);
396}
397
398static void handle___kvm_tlb_flush_vmid_ipa_nsh(struct kvm_cpu_context *host_ctxt)
399{
400	DECLARE_REG(struct kvm_s2_mmu *, mmu, host_ctxt, 1);
401	DECLARE_REG(phys_addr_t, ipa, host_ctxt, 2);
402	DECLARE_REG(int, level, host_ctxt, 3);
403
404	__kvm_tlb_flush_vmid_ipa_nsh(kern_hyp_va(mmu), ipa, level);
405}
406
407static void
408handle___kvm_tlb_flush_vmid_range(struct kvm_cpu_context *host_ctxt)
409{
410	DECLARE_REG(struct kvm_s2_mmu *, mmu, host_ctxt, 1);
411	DECLARE_REG(phys_addr_t, start, host_ctxt, 2);
412	DECLARE_REG(unsigned long, pages, host_ctxt, 3);
413
414	__kvm_tlb_flush_vmid_range(kern_hyp_va(mmu), start, pages);
415}
416
417static void handle___kvm_tlb_flush_vmid(struct kvm_cpu_context *host_ctxt)
418{
419	DECLARE_REG(struct kvm_s2_mmu *, mmu, host_ctxt, 1);
420
421	__kvm_tlb_flush_vmid(kern_hyp_va(mmu));
422}
423
424static void handle___pkvm_tlb_flush_vmid(struct kvm_cpu_context *host_ctxt)
425{
426	DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1);
427	struct pkvm_hyp_vm *hyp_vm;
428
429	if (!is_protected_kvm_enabled())
430		return;
431
432	hyp_vm = get_np_pkvm_hyp_vm(handle);
433	if (!hyp_vm)
434		return;
435
436	__kvm_tlb_flush_vmid(&hyp_vm->kvm.arch.mmu);
437	put_pkvm_hyp_vm(hyp_vm);
438}
439
440static void handle___kvm_flush_cpu_context(struct kvm_cpu_context *host_ctxt)
441{
442	DECLARE_REG(struct kvm_s2_mmu *, mmu, host_ctxt, 1);
443
444	__kvm_flush_cpu_context(kern_hyp_va(mmu));
445}
446
447static void handle___kvm_timer_set_cntvoff(struct kvm_cpu_context *host_ctxt)
448{
449	__kvm_timer_set_cntvoff(cpu_reg(host_ctxt, 1));
450}
451
452static void handle___kvm_enable_ssbs(struct kvm_cpu_context *host_ctxt)
453{
454	u64 tmp;
455
456	tmp = read_sysreg_el2(SYS_SCTLR);
457	tmp |= SCTLR_ELx_DSSBS;
458	write_sysreg_el2(tmp, SYS_SCTLR);
459}
460
461static void handle___vgic_v3_get_gic_config(struct kvm_cpu_context *host_ctxt)
462{
463	cpu_reg(host_ctxt, 1) = __vgic_v3_get_gic_config();
464}
465
466static void handle___vgic_v3_init_lrs(struct kvm_cpu_context *host_ctxt)
467{
468	__vgic_v3_init_lrs();
469}
470
471static void handle___vgic_v3_save_aprs(struct kvm_cpu_context *host_ctxt)
472{
473	DECLARE_REG(struct vgic_v3_cpu_if *, cpu_if, host_ctxt, 1);
474
475	__vgic_v3_save_aprs(kern_hyp_va(cpu_if));
476}
477
478static void handle___vgic_v3_restore_vmcr_aprs(struct kvm_cpu_context *host_ctxt)
479{
480	DECLARE_REG(struct vgic_v3_cpu_if *, cpu_if, host_ctxt, 1);
481
482	__vgic_v3_restore_vmcr_aprs(kern_hyp_va(cpu_if));
483}
484
485static void handle___pkvm_init(struct kvm_cpu_context *host_ctxt)
486{
487	DECLARE_REG(phys_addr_t, phys, host_ctxt, 1);
488	DECLARE_REG(unsigned long, size, host_ctxt, 2);
489	DECLARE_REG(unsigned long, nr_cpus, host_ctxt, 3);
490	DECLARE_REG(unsigned long *, per_cpu_base, host_ctxt, 4);
491	DECLARE_REG(u32, hyp_va_bits, host_ctxt, 5);
492
493	/*
494	 * __pkvm_init() will return only if an error occurred, otherwise it
495	 * will tail-call in __pkvm_init_finalise() which will have to deal
496	 * with the host context directly.
497	 */
498	cpu_reg(host_ctxt, 1) = __pkvm_init(phys, size, nr_cpus, per_cpu_base,
499					    hyp_va_bits);
500}
501
502static void handle___pkvm_cpu_set_vector(struct kvm_cpu_context *host_ctxt)
503{
504	DECLARE_REG(enum arm64_hyp_spectre_vector, slot, host_ctxt, 1);
505
506	cpu_reg(host_ctxt, 1) = pkvm_cpu_set_vector(slot);
507}
508
509static void handle___pkvm_host_share_hyp(struct kvm_cpu_context *host_ctxt)
510{
511	DECLARE_REG(u64, pfn, host_ctxt, 1);
512
513	cpu_reg(host_ctxt, 1) = __pkvm_host_share_hyp(pfn);
514}
515
516static void handle___pkvm_host_unshare_hyp(struct kvm_cpu_context *host_ctxt)
517{
518	DECLARE_REG(u64, pfn, host_ctxt, 1);
519
520	cpu_reg(host_ctxt, 1) = __pkvm_host_unshare_hyp(pfn);
521}
522
523static void handle___pkvm_create_private_mapping(struct kvm_cpu_context *host_ctxt)
524{
525	DECLARE_REG(phys_addr_t, phys, host_ctxt, 1);
526	DECLARE_REG(size_t, size, host_ctxt, 2);
527	DECLARE_REG(enum kvm_pgtable_prot, prot, host_ctxt, 3);
528
529	/*
530	 * __pkvm_create_private_mapping() populates a pointer with the
531	 * hypervisor start address of the allocation.
532	 *
533	 * However, handle___pkvm_create_private_mapping() hypercall crosses the
534	 * EL1/EL2 boundary so the pointer would not be valid in this context.
535	 *
536	 * Instead pass the allocation address as the return value (or return
537	 * ERR_PTR() on failure).
538	 */
539	unsigned long haddr;
540	int err = __pkvm_create_private_mapping(phys, size, prot, &haddr);
541
542	if (err)
543		haddr = (unsigned long)ERR_PTR(err);
544
545	cpu_reg(host_ctxt, 1) = haddr;
546}
547
548static void handle___pkvm_prot_finalize(struct kvm_cpu_context *host_ctxt)
549{
550	cpu_reg(host_ctxt, 1) = __pkvm_prot_finalize();
551}
552
553static void handle___pkvm_reserve_vm(struct kvm_cpu_context *host_ctxt)
554{
555	cpu_reg(host_ctxt, 1) = __pkvm_reserve_vm();
556}
557
558static void handle___pkvm_unreserve_vm(struct kvm_cpu_context *host_ctxt)
559{
560	DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1);
561
562	__pkvm_unreserve_vm(handle);
563}
564
565static void handle___pkvm_init_vm(struct kvm_cpu_context *host_ctxt)
566{
567	DECLARE_REG(struct kvm *, host_kvm, host_ctxt, 1);
568	DECLARE_REG(unsigned long, vm_hva, host_ctxt, 2);
569	DECLARE_REG(unsigned long, pgd_hva, host_ctxt, 3);
570
571	host_kvm = kern_hyp_va(host_kvm);
572	cpu_reg(host_ctxt, 1) = __pkvm_init_vm(host_kvm, vm_hva, pgd_hva);
573}
574
575static void handle___pkvm_init_vcpu(struct kvm_cpu_context *host_ctxt)
576{
577	DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1);
578	DECLARE_REG(struct kvm_vcpu *, host_vcpu, host_ctxt, 2);
579	DECLARE_REG(unsigned long, vcpu_hva, host_ctxt, 3);
580
581	host_vcpu = kern_hyp_va(host_vcpu);
582	cpu_reg(host_ctxt, 1) = __pkvm_init_vcpu(handle, host_vcpu, vcpu_hva);
583}
584
585static void handle___pkvm_teardown_vm(struct kvm_cpu_context *host_ctxt)
586{
587	DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1);
588
589	cpu_reg(host_ctxt, 1) = __pkvm_teardown_vm(handle);
590}
591
592typedef void (*hcall_t)(struct kvm_cpu_context *);
593
594#define HANDLE_FUNC(x)	[__KVM_HOST_SMCCC_FUNC_##x] = (hcall_t)handle_##x
595
596static const hcall_t host_hcall[] = {
597	/* ___kvm_hyp_init */
598	HANDLE_FUNC(__pkvm_init),
599	HANDLE_FUNC(__pkvm_create_private_mapping),
600	HANDLE_FUNC(__pkvm_cpu_set_vector),
601	HANDLE_FUNC(__kvm_enable_ssbs),
602	HANDLE_FUNC(__vgic_v3_init_lrs),
603	HANDLE_FUNC(__vgic_v3_get_gic_config),
604	HANDLE_FUNC(__pkvm_prot_finalize),
605
606	HANDLE_FUNC(__pkvm_host_share_hyp),
607	HANDLE_FUNC(__pkvm_host_unshare_hyp),
608	HANDLE_FUNC(__pkvm_host_share_guest),
609	HANDLE_FUNC(__pkvm_host_unshare_guest),
610	HANDLE_FUNC(__pkvm_host_relax_perms_guest),
611	HANDLE_FUNC(__pkvm_host_wrprotect_guest),
612	HANDLE_FUNC(__pkvm_host_test_clear_young_guest),
613	HANDLE_FUNC(__pkvm_host_mkyoung_guest),
614	HANDLE_FUNC(__kvm_adjust_pc),
615	HANDLE_FUNC(__kvm_vcpu_run),
616	HANDLE_FUNC(__kvm_flush_vm_context),
617	HANDLE_FUNC(__kvm_tlb_flush_vmid_ipa),
618	HANDLE_FUNC(__kvm_tlb_flush_vmid_ipa_nsh),
619	HANDLE_FUNC(__kvm_tlb_flush_vmid),
620	HANDLE_FUNC(__kvm_tlb_flush_vmid_range),
621	HANDLE_FUNC(__kvm_flush_cpu_context),
622	HANDLE_FUNC(__kvm_timer_set_cntvoff),
623	HANDLE_FUNC(__vgic_v3_save_aprs),
624	HANDLE_FUNC(__vgic_v3_restore_vmcr_aprs),
625	HANDLE_FUNC(__pkvm_reserve_vm),
626	HANDLE_FUNC(__pkvm_unreserve_vm),
627	HANDLE_FUNC(__pkvm_init_vm),
628	HANDLE_FUNC(__pkvm_init_vcpu),
629	HANDLE_FUNC(__pkvm_teardown_vm),
630	HANDLE_FUNC(__pkvm_vcpu_load),
631	HANDLE_FUNC(__pkvm_vcpu_put),
632	HANDLE_FUNC(__pkvm_tlb_flush_vmid),
633};
634
635static void handle_host_hcall(struct kvm_cpu_context *host_ctxt)
636{
637	DECLARE_REG(unsigned long, id, host_ctxt, 0);
638	unsigned long hcall_min = 0;
639	hcall_t hfn;
640
641	/*
642	 * If pKVM has been initialised then reject any calls to the
643	 * early "privileged" hypercalls. Note that we cannot reject
644	 * calls to __pkvm_prot_finalize for two reasons: (1) The static
645	 * key used to determine initialisation must be toggled prior to
646	 * finalisation and (2) finalisation is performed on a per-CPU
647	 * basis. This is all fine, however, since __pkvm_prot_finalize
648	 * returns -EPERM after the first call for a given CPU.
649	 */
650	if (static_branch_unlikely(&kvm_protected_mode_initialized))
651		hcall_min = __KVM_HOST_SMCCC_FUNC___pkvm_prot_finalize;
652
653	id &= ~ARM_SMCCC_CALL_HINTS;
654	id -= KVM_HOST_SMCCC_ID(0);
655
656	if (unlikely(id < hcall_min || id >= ARRAY_SIZE(host_hcall)))
657		goto inval;
658
659	hfn = host_hcall[id];
660	if (unlikely(!hfn))
661		goto inval;
662
663	cpu_reg(host_ctxt, 0) = SMCCC_RET_SUCCESS;
664	hfn(host_ctxt);
665
666	return;
667inval:
668	cpu_reg(host_ctxt, 0) = SMCCC_RET_NOT_SUPPORTED;
669}
670
671static void default_host_smc_handler(struct kvm_cpu_context *host_ctxt)
672{
673	__kvm_hyp_host_forward_smc(host_ctxt);
674}
675
676static void handle_host_smc(struct kvm_cpu_context *host_ctxt)
677{
678	DECLARE_REG(u64, func_id, host_ctxt, 0);
679	bool handled;
680
681	func_id &= ~ARM_SMCCC_CALL_HINTS;
682
683	handled = kvm_host_psci_handler(host_ctxt, func_id);
684	if (!handled)
685		handled = kvm_host_ffa_handler(host_ctxt, func_id);
686	if (!handled)
687		default_host_smc_handler(host_ctxt);
688
689	/* SMC was trapped, move ELR past the current PC. */
690	kvm_skip_host_instr();
691}
692
693void handle_trap(struct kvm_cpu_context *host_ctxt)
694{
695	u64 esr = read_sysreg_el2(SYS_ESR);
696
697	switch (ESR_ELx_EC(esr)) {
698	case ESR_ELx_EC_HVC64:
699		handle_host_hcall(host_ctxt);
700		break;
701	case ESR_ELx_EC_SMC64:
702		handle_host_smc(host_ctxt);
703		break;
704	case ESR_ELx_EC_IABT_LOW:
705	case ESR_ELx_EC_DABT_LOW:
706		handle_host_mem_abort(host_ctxt);
707		break;
708	default:
709		BUG();
710	}
711}