xref: /freebsd/sys/amd64/vmm/io/vlapic.c (revision a9e8641da961bcf3d24afc85fd657f2083a872a2)
1 /*-
2  * Copyright (c) 2011 NetApp, Inc.
3  * All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  *
14  * THIS SOFTWARE IS PROVIDED BY NETAPP, INC ``AS IS'' AND
15  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17  * ARE DISCLAIMED.  IN NO EVENT SHALL NETAPP, INC OR CONTRIBUTORS BE LIABLE
18  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
24  * SUCH DAMAGE.
25  *
26  * $FreeBSD$
27  */
28 
29 #include <sys/cdefs.h>
30 __FBSDID("$FreeBSD$");
31 
32 #include <sys/param.h>
33 #include <sys/lock.h>
34 #include <sys/kernel.h>
35 #include <sys/malloc.h>
36 #include <sys/mutex.h>
37 #include <sys/systm.h>
38 #include <sys/smp.h>
39 
40 #include <x86/specialreg.h>
41 #include <x86/apicreg.h>
42 
43 #include <machine/clock.h>
44 #include <machine/smp.h>
45 
46 #include <machine/vmm.h>
47 
48 #include "vmm_ipi.h"
49 #include "vmm_lapic.h"
50 #include "vmm_ktr.h"
51 #include "vmm_stat.h"
52 
53 #include "vlapic.h"
54 #include "vlapic_priv.h"
55 #include "vioapic.h"
56 
57 #define	PRIO(x)			((x) >> 4)
58 
59 #define VLAPIC_VERSION		(16)
60 
61 #define	x2apic(vlapic)	(((vlapic)->msr_apicbase & APICBASE_X2APIC) ? 1 : 0)
62 
63 /*
64  * The 'vlapic->timer_mtx' is used to provide mutual exclusion between the
65  * vlapic_callout_handler() and vcpu accesses to:
66  * - timer_freq_bt, timer_period_bt, timer_fire_bt
67  * - timer LVT register
68  */
69 #define	VLAPIC_TIMER_LOCK(vlapic)	mtx_lock_spin(&((vlapic)->timer_mtx))
70 #define	VLAPIC_TIMER_UNLOCK(vlapic)	mtx_unlock_spin(&((vlapic)->timer_mtx))
71 #define	VLAPIC_TIMER_LOCKED(vlapic)	mtx_owned(&((vlapic)->timer_mtx))
72 
73 #define VLAPIC_BUS_FREQ	tsc_freq
74 
75 static __inline uint32_t
76 vlapic_get_id(struct vlapic *vlapic)
77 {
78 
79 	if (x2apic(vlapic))
80 		return (vlapic->vcpuid);
81 	else
82 		return (vlapic->vcpuid << 24);
83 }
84 
85 static uint32_t
86 x2apic_ldr(struct vlapic *vlapic)
87 {
88 	int apicid;
89 	uint32_t ldr;
90 
91 	apicid = vlapic_get_id(vlapic);
92 	ldr = 1 << (apicid & 0xf);
93 	ldr |= (apicid & 0xffff0) << 12;
94 	return (ldr);
95 }
96 
97 void
98 vlapic_dfr_write_handler(struct vlapic *vlapic)
99 {
100 	struct LAPIC *lapic;
101 
102 	lapic = vlapic->apic_page;
103 	if (x2apic(vlapic)) {
104 		VM_CTR1(vlapic->vm, "ignoring write to DFR in x2apic mode: %#x",
105 		    lapic->dfr);
106 		lapic->dfr = 0;
107 		return;
108 	}
109 
110 	lapic->dfr &= APIC_DFR_MODEL_MASK;
111 	lapic->dfr |= APIC_DFR_RESERVED;
112 
113 	if ((lapic->dfr & APIC_DFR_MODEL_MASK) == APIC_DFR_MODEL_FLAT)
114 		VLAPIC_CTR0(vlapic, "vlapic DFR in Flat Model");
115 	else if ((lapic->dfr & APIC_DFR_MODEL_MASK) == APIC_DFR_MODEL_CLUSTER)
116 		VLAPIC_CTR0(vlapic, "vlapic DFR in Cluster Model");
117 	else
118 		VLAPIC_CTR1(vlapic, "DFR in Unknown Model %#x", lapic->dfr);
119 }
120 
121 void
122 vlapic_ldr_write_handler(struct vlapic *vlapic)
123 {
124 	struct LAPIC *lapic;
125 
126 	lapic = vlapic->apic_page;
127 
128 	/* LDR is read-only in x2apic mode */
129 	if (x2apic(vlapic)) {
130 		VLAPIC_CTR1(vlapic, "ignoring write to LDR in x2apic mode: %#x",
131 		    lapic->ldr);
132 		lapic->ldr = x2apic_ldr(vlapic);
133 	} else {
134 		lapic->ldr &= ~APIC_LDR_RESERVED;
135 		VLAPIC_CTR1(vlapic, "vlapic LDR set to %#x", lapic->ldr);
136 	}
137 }
138 
139 void
140 vlapic_id_write_handler(struct vlapic *vlapic)
141 {
142 	struct LAPIC *lapic;
143 
144 	/*
145 	 * We don't allow the ID register to be modified so reset it back to
146 	 * its default value.
147 	 */
148 	lapic = vlapic->apic_page;
149 	lapic->id = vlapic_get_id(vlapic);
150 }
151 
152 static int
153 vlapic_timer_divisor(uint32_t dcr)
154 {
155 	switch (dcr & 0xB) {
156 	case APIC_TDCR_1:
157 		return (1);
158 	case APIC_TDCR_2:
159 		return (2);
160 	case APIC_TDCR_4:
161 		return (4);
162 	case APIC_TDCR_8:
163 		return (8);
164 	case APIC_TDCR_16:
165 		return (16);
166 	case APIC_TDCR_32:
167 		return (32);
168 	case APIC_TDCR_64:
169 		return (64);
170 	case APIC_TDCR_128:
171 		return (128);
172 	default:
173 		panic("vlapic_timer_divisor: invalid dcr 0x%08x", dcr);
174 	}
175 }
176 
177 #if 0
178 static inline void
179 vlapic_dump_lvt(uint32_t offset, uint32_t *lvt)
180 {
181 	printf("Offset %x: lvt %08x (V:%02x DS:%x M:%x)\n", offset,
182 	    *lvt, *lvt & APIC_LVTT_VECTOR, *lvt & APIC_LVTT_DS,
183 	    *lvt & APIC_LVTT_M);
184 }
185 #endif
186 
187 static uint32_t
188 vlapic_get_ccr(struct vlapic *vlapic)
189 {
190 	struct bintime bt_now, bt_rem;
191 	struct LAPIC *lapic;
192 	uint32_t ccr;
193 
194 	ccr = 0;
195 	lapic = vlapic->apic_page;
196 
197 	VLAPIC_TIMER_LOCK(vlapic);
198 	if (callout_active(&vlapic->callout)) {
199 		/*
200 		 * If the timer is scheduled to expire in the future then
201 		 * compute the value of 'ccr' based on the remaining time.
202 		 */
203 		binuptime(&bt_now);
204 		if (bintime_cmp(&vlapic->timer_fire_bt, &bt_now, >)) {
205 			bt_rem = vlapic->timer_fire_bt;
206 			bintime_sub(&bt_rem, &bt_now);
207 			ccr += bt_rem.sec * BT2FREQ(&vlapic->timer_freq_bt);
208 			ccr += bt_rem.frac / vlapic->timer_freq_bt.frac;
209 		}
210 	}
211 	KASSERT(ccr <= lapic->icr_timer, ("vlapic_get_ccr: invalid ccr %#x, "
212 	    "icr_timer is %#x", ccr, lapic->icr_timer));
213 	VLAPIC_CTR2(vlapic, "vlapic ccr_timer = %#x, icr_timer = %#x",
214 	    ccr, lapic->icr_timer);
215 	VLAPIC_TIMER_UNLOCK(vlapic);
216 	return (ccr);
217 }
218 
219 void
220 vlapic_dcr_write_handler(struct vlapic *vlapic)
221 {
222 	struct LAPIC *lapic;
223 	int divisor;
224 
225 	lapic = vlapic->apic_page;
226 	VLAPIC_TIMER_LOCK(vlapic);
227 
228 	divisor = vlapic_timer_divisor(lapic->dcr_timer);
229 	VLAPIC_CTR2(vlapic, "vlapic dcr_timer=%#x, divisor=%d",
230 	    lapic->dcr_timer, divisor);
231 
232 	/*
233 	 * Update the timer frequency and the timer period.
234 	 *
235 	 * XXX changes to the frequency divider will not take effect until
236 	 * the timer is reloaded.
237 	 */
238 	FREQ2BT(VLAPIC_BUS_FREQ / divisor, &vlapic->timer_freq_bt);
239 	vlapic->timer_period_bt = vlapic->timer_freq_bt;
240 	bintime_mul(&vlapic->timer_period_bt, lapic->icr_timer);
241 
242 	VLAPIC_TIMER_UNLOCK(vlapic);
243 }
244 
245 void
246 vlapic_esr_write_handler(struct vlapic *vlapic)
247 {
248 	struct LAPIC *lapic;
249 
250 	lapic = vlapic->apic_page;
251 	lapic->esr = vlapic->esr_pending;
252 	vlapic->esr_pending = 0;
253 }
254 
255 int
256 vlapic_set_intr_ready(struct vlapic *vlapic, int vector, bool level)
257 {
258 	struct LAPIC *lapic;
259 	uint32_t *irrptr, *tmrptr, mask;
260 	int idx;
261 
262 	KASSERT(vector >= 0 && vector < 256, ("invalid vector %d", vector));
263 
264 	lapic = vlapic->apic_page;
265 	if (!(lapic->svr & APIC_SVR_ENABLE)) {
266 		VLAPIC_CTR1(vlapic, "vlapic is software disabled, ignoring "
267 		    "interrupt %d", vector);
268 		return (0);
269 	}
270 
271 	if (vector < 16) {
272 		vlapic_set_error(vlapic, APIC_ESR_RECEIVE_ILLEGAL_VECTOR);
273 		VLAPIC_CTR1(vlapic, "vlapic ignoring interrupt to vector %d",
274 		    vector);
275 		return (1);
276 	}
277 
278 	if (vlapic->ops.set_intr_ready)
279 		return ((*vlapic->ops.set_intr_ready)(vlapic, vector, level));
280 
281 	idx = (vector / 32) * 4;
282 	mask = 1 << (vector % 32);
283 
284 	irrptr = &lapic->irr0;
285 	atomic_set_int(&irrptr[idx], mask);
286 
287 	/*
288 	 * Verify that the trigger-mode of the interrupt matches with
289 	 * the vlapic TMR registers.
290 	 */
291 	tmrptr = &lapic->tmr0;
292 	if ((tmrptr[idx] & mask) != (level ? mask : 0)) {
293 		VLAPIC_CTR3(vlapic, "vlapic TMR[%d] is 0x%08x but "
294 		    "interrupt is %s-triggered", idx / 4, tmrptr[idx],
295 		    level ? "level" : "edge");
296 	}
297 
298 	VLAPIC_CTR_IRR(vlapic, "vlapic_set_intr_ready");
299 	return (1);
300 }
301 
302 static __inline uint32_t *
303 vlapic_get_lvtptr(struct vlapic *vlapic, uint32_t offset)
304 {
305 	struct LAPIC	*lapic = vlapic->apic_page;
306 	int 		 i;
307 
308 	switch (offset) {
309 	case APIC_OFFSET_CMCI_LVT:
310 		return (&lapic->lvt_cmci);
311 	case APIC_OFFSET_TIMER_LVT ... APIC_OFFSET_ERROR_LVT:
312 		i = (offset - APIC_OFFSET_TIMER_LVT) >> 2;
313 		return ((&lapic->lvt_timer) + i);;
314 	default:
315 		panic("vlapic_get_lvt: invalid LVT\n");
316 	}
317 }
318 
319 static __inline int
320 lvt_off_to_idx(uint32_t offset)
321 {
322 	int index;
323 
324 	switch (offset) {
325 	case APIC_OFFSET_CMCI_LVT:
326 		index = APIC_LVT_CMCI;
327 		break;
328 	case APIC_OFFSET_TIMER_LVT:
329 		index = APIC_LVT_TIMER;
330 		break;
331 	case APIC_OFFSET_THERM_LVT:
332 		index = APIC_LVT_THERMAL;
333 		break;
334 	case APIC_OFFSET_PERF_LVT:
335 		index = APIC_LVT_PMC;
336 		break;
337 	case APIC_OFFSET_LINT0_LVT:
338 		index = APIC_LVT_LINT0;
339 		break;
340 	case APIC_OFFSET_LINT1_LVT:
341 		index = APIC_LVT_LINT1;
342 		break;
343 	case APIC_OFFSET_ERROR_LVT:
344 		index = APIC_LVT_ERROR;
345 		break;
346 	default:
347 		index = -1;
348 		break;
349 	}
350 	KASSERT(index >= 0 && index <= VLAPIC_MAXLVT_INDEX, ("lvt_off_to_idx: "
351 	    "invalid lvt index %d for offset %#x", index, offset));
352 
353 	return (index);
354 }
355 
356 static __inline uint32_t
357 vlapic_get_lvt(struct vlapic *vlapic, uint32_t offset)
358 {
359 	int idx;
360 	uint32_t val;
361 
362 	idx = lvt_off_to_idx(offset);
363 	val = atomic_load_acq_32(&vlapic->lvt_last[idx]);
364 	return (val);
365 }
366 
367 void
368 vlapic_lvt_write_handler(struct vlapic *vlapic, uint32_t offset)
369 {
370 	uint32_t *lvtptr, mask, val;
371 	struct LAPIC *lapic;
372 	int idx;
373 
374 	lapic = vlapic->apic_page;
375 	lvtptr = vlapic_get_lvtptr(vlapic, offset);
376 	val = *lvtptr;
377 	idx = lvt_off_to_idx(offset);
378 
379 	if (!(lapic->svr & APIC_SVR_ENABLE))
380 		val |= APIC_LVT_M;
381 	mask = APIC_LVT_M | APIC_LVT_DS | APIC_LVT_VECTOR;
382 	switch (offset) {
383 	case APIC_OFFSET_TIMER_LVT:
384 		mask |= APIC_LVTT_TM;
385 		break;
386 	case APIC_OFFSET_ERROR_LVT:
387 		break;
388 	case APIC_OFFSET_LINT0_LVT:
389 	case APIC_OFFSET_LINT1_LVT:
390 		mask |= APIC_LVT_TM | APIC_LVT_RIRR | APIC_LVT_IIPP;
391 		/* FALLTHROUGH */
392 	default:
393 		mask |= APIC_LVT_DM;
394 		break;
395 	}
396 	val &= mask;
397 	*lvtptr = val;
398 	atomic_store_rel_32(&vlapic->lvt_last[idx], val);
399 }
400 
401 static void
402 vlapic_mask_lvts(struct vlapic *vlapic)
403 {
404 	struct LAPIC *lapic = vlapic->apic_page;
405 
406 	lapic->lvt_cmci |= APIC_LVT_M;
407 	vlapic_lvt_write_handler(vlapic, APIC_OFFSET_CMCI_LVT);
408 
409 	lapic->lvt_timer |= APIC_LVT_M;
410 	vlapic_lvt_write_handler(vlapic, APIC_OFFSET_TIMER_LVT);
411 
412 	lapic->lvt_thermal |= APIC_LVT_M;
413 	vlapic_lvt_write_handler(vlapic, APIC_OFFSET_THERM_LVT);
414 
415 	lapic->lvt_pcint |= APIC_LVT_M;
416 	vlapic_lvt_write_handler(vlapic, APIC_OFFSET_PERF_LVT);
417 
418 	lapic->lvt_lint0 |= APIC_LVT_M;
419 	vlapic_lvt_write_handler(vlapic, APIC_OFFSET_LINT0_LVT);
420 
421 	lapic->lvt_lint1 |= APIC_LVT_M;
422 	vlapic_lvt_write_handler(vlapic, APIC_OFFSET_LINT1_LVT);
423 
424 	lapic->lvt_error |= APIC_LVT_M;
425 	vlapic_lvt_write_handler(vlapic, APIC_OFFSET_ERROR_LVT);
426 }
427 
428 static int
429 vlapic_fire_lvt(struct vlapic *vlapic, uint32_t lvt)
430 {
431 	uint32_t vec, mode;
432 
433 	if (lvt & APIC_LVT_M)
434 		return (0);
435 
436 	vec = lvt & APIC_LVT_VECTOR;
437 	mode = lvt & APIC_LVT_DM;
438 
439 	switch (mode) {
440 	case APIC_LVT_DM_FIXED:
441 		if (vec < 16) {
442 			vlapic_set_error(vlapic, APIC_ESR_SEND_ILLEGAL_VECTOR);
443 			return (0);
444 		}
445 		if (vlapic_set_intr_ready(vlapic, vec, false))
446 			vcpu_notify_event(vlapic->vm, vlapic->vcpuid, true);
447 		break;
448 	case APIC_LVT_DM_NMI:
449 		vm_inject_nmi(vlapic->vm, vlapic->vcpuid);
450 		break;
451 	default:
452 		// Other modes ignored
453 		return (0);
454 	}
455 	return (1);
456 }
457 
458 #if 1
459 static void
460 dump_isrvec_stk(struct vlapic *vlapic)
461 {
462 	int i;
463 	uint32_t *isrptr;
464 
465 	isrptr = &vlapic->apic_page->isr0;
466 	for (i = 0; i < 8; i++)
467 		printf("ISR%d 0x%08x\n", i, isrptr[i * 4]);
468 
469 	for (i = 0; i <= vlapic->isrvec_stk_top; i++)
470 		printf("isrvec_stk[%d] = %d\n", i, vlapic->isrvec_stk[i]);
471 }
472 #endif
473 
474 /*
475  * Algorithm adopted from section "Interrupt, Task and Processor Priority"
476  * in Intel Architecture Manual Vol 3a.
477  */
478 static void
479 vlapic_update_ppr(struct vlapic *vlapic)
480 {
481 	int isrvec, tpr, ppr;
482 
483 	/*
484 	 * Note that the value on the stack at index 0 is always 0.
485 	 *
486 	 * This is a placeholder for the value of ISRV when none of the
487 	 * bits is set in the ISRx registers.
488 	 */
489 	isrvec = vlapic->isrvec_stk[vlapic->isrvec_stk_top];
490 	tpr = vlapic->apic_page->tpr;
491 
492 #if 1
493 	{
494 		int i, lastprio, curprio, vector, idx;
495 		uint32_t *isrptr;
496 
497 		if (vlapic->isrvec_stk_top == 0 && isrvec != 0)
498 			panic("isrvec_stk is corrupted: %d", isrvec);
499 
500 		/*
501 		 * Make sure that the priority of the nested interrupts is
502 		 * always increasing.
503 		 */
504 		lastprio = -1;
505 		for (i = 1; i <= vlapic->isrvec_stk_top; i++) {
506 			curprio = PRIO(vlapic->isrvec_stk[i]);
507 			if (curprio <= lastprio) {
508 				dump_isrvec_stk(vlapic);
509 				panic("isrvec_stk does not satisfy invariant");
510 			}
511 			lastprio = curprio;
512 		}
513 
514 		/*
515 		 * Make sure that each bit set in the ISRx registers has a
516 		 * corresponding entry on the isrvec stack.
517 		 */
518 		i = 1;
519 		isrptr = &vlapic->apic_page->isr0;
520 		for (vector = 0; vector < 256; vector++) {
521 			idx = (vector / 32) * 4;
522 			if (isrptr[idx] & (1 << (vector % 32))) {
523 				if (i > vlapic->isrvec_stk_top ||
524 				    vlapic->isrvec_stk[i] != vector) {
525 					dump_isrvec_stk(vlapic);
526 					panic("ISR and isrvec_stk out of sync");
527 				}
528 				i++;
529 			}
530 		}
531 	}
532 #endif
533 
534 	if (PRIO(tpr) >= PRIO(isrvec))
535 		ppr = tpr;
536 	else
537 		ppr = isrvec & 0xf0;
538 
539 	vlapic->apic_page->ppr = ppr;
540 	VLAPIC_CTR1(vlapic, "vlapic_update_ppr 0x%02x", ppr);
541 }
542 
543 static void
544 vlapic_process_eoi(struct vlapic *vlapic)
545 {
546 	struct LAPIC	*lapic = vlapic->apic_page;
547 	uint32_t	*isrptr, *tmrptr;
548 	int		i, idx, bitpos, vector;
549 
550 	isrptr = &lapic->isr0;
551 	tmrptr = &lapic->tmr0;
552 
553 	/*
554 	 * The x86 architecture reserves the the first 32 vectors for use
555 	 * by the processor.
556 	 */
557 	for (i = 7; i > 0; i--) {
558 		idx = i * 4;
559 		bitpos = fls(isrptr[idx]);
560 		if (bitpos-- != 0) {
561 			if (vlapic->isrvec_stk_top <= 0) {
562 				panic("invalid vlapic isrvec_stk_top %d",
563 				      vlapic->isrvec_stk_top);
564 			}
565 			isrptr[idx] &= ~(1 << bitpos);
566 			VLAPIC_CTR_ISR(vlapic, "vlapic_process_eoi");
567 			vlapic->isrvec_stk_top--;
568 			vlapic_update_ppr(vlapic);
569 			if ((tmrptr[idx] & (1 << bitpos)) != 0) {
570 				vector = i * 32 + bitpos;
571 				vioapic_process_eoi(vlapic->vm, vlapic->vcpuid,
572 				    vector);
573 			}
574 			return;
575 		}
576 	}
577 }
578 
579 static __inline int
580 vlapic_get_lvt_field(uint32_t lvt, uint32_t mask)
581 {
582 
583 	return (lvt & mask);
584 }
585 
586 static __inline int
587 vlapic_periodic_timer(struct vlapic *vlapic)
588 {
589 	uint32_t lvt;
590 
591 	lvt = vlapic_get_lvt(vlapic, APIC_OFFSET_TIMER_LVT);
592 
593 	return (vlapic_get_lvt_field(lvt, APIC_LVTT_TM_PERIODIC));
594 }
595 
596 static VMM_STAT(VLAPIC_INTR_ERROR, "error interrupts generated by vlapic");
597 
598 void
599 vlapic_set_error(struct vlapic *vlapic, uint32_t mask)
600 {
601 	uint32_t lvt;
602 
603 	vlapic->esr_pending |= mask;
604 	if (vlapic->esr_firing)
605 		return;
606 	vlapic->esr_firing = 1;
607 
608 	// The error LVT always uses the fixed delivery mode.
609 	lvt = vlapic_get_lvt(vlapic, APIC_OFFSET_ERROR_LVT);
610 	if (vlapic_fire_lvt(vlapic, lvt | APIC_LVT_DM_FIXED)) {
611 		vmm_stat_incr(vlapic->vm, vlapic->vcpuid, VLAPIC_INTR_ERROR, 1);
612 	}
613 	vlapic->esr_firing = 0;
614 }
615 
616 static VMM_STAT(VLAPIC_INTR_TIMER, "timer interrupts generated by vlapic");
617 
618 static void
619 vlapic_fire_timer(struct vlapic *vlapic)
620 {
621 	uint32_t lvt;
622 
623 	KASSERT(VLAPIC_TIMER_LOCKED(vlapic), ("vlapic_fire_timer not locked"));
624 
625 	// The timer LVT always uses the fixed delivery mode.
626 	lvt = vlapic_get_lvt(vlapic, APIC_OFFSET_TIMER_LVT);
627 	if (vlapic_fire_lvt(vlapic, lvt | APIC_LVT_DM_FIXED)) {
628 		vmm_stat_incr(vlapic->vm, vlapic->vcpuid, VLAPIC_INTR_TIMER, 1);
629 	}
630 }
631 
632 static VMM_STAT(VLAPIC_INTR_CMC,
633     "corrected machine check interrupts generated by vlapic");
634 
635 void
636 vlapic_fire_cmci(struct vlapic *vlapic)
637 {
638 	uint32_t lvt;
639 
640 	lvt = vlapic_get_lvt(vlapic, APIC_OFFSET_CMCI_LVT);
641 	if (vlapic_fire_lvt(vlapic, lvt)) {
642 		vmm_stat_incr(vlapic->vm, vlapic->vcpuid, VLAPIC_INTR_CMC, 1);
643 	}
644 }
645 
646 static VMM_STAT_ARRAY(LVTS_TRIGGERRED, VLAPIC_MAXLVT_INDEX + 1,
647     "lvts triggered");
648 
649 int
650 vlapic_trigger_lvt(struct vlapic *vlapic, int vector)
651 {
652 	uint32_t lvt;
653 
654 	switch (vector) {
655 	case APIC_LVT_LINT0:
656 		lvt = vlapic_get_lvt(vlapic, APIC_OFFSET_LINT0_LVT);
657 		break;
658 	case APIC_LVT_LINT1:
659 		lvt = vlapic_get_lvt(vlapic, APIC_OFFSET_LINT1_LVT);
660 		break;
661 	case APIC_LVT_TIMER:
662 		lvt = vlapic_get_lvt(vlapic, APIC_OFFSET_TIMER_LVT);
663 		lvt |= APIC_LVT_DM_FIXED;
664 		break;
665 	case APIC_LVT_ERROR:
666 		lvt = vlapic_get_lvt(vlapic, APIC_OFFSET_ERROR_LVT);
667 		lvt |= APIC_LVT_DM_FIXED;
668 		break;
669 	case APIC_LVT_PMC:
670 		lvt = vlapic_get_lvt(vlapic, APIC_OFFSET_PERF_LVT);
671 		break;
672 	case APIC_LVT_THERMAL:
673 		lvt = vlapic_get_lvt(vlapic, APIC_OFFSET_THERM_LVT);
674 		break;
675 	case APIC_LVT_CMCI:
676 		lvt = vlapic_get_lvt(vlapic, APIC_OFFSET_CMCI_LVT);
677 		break;
678 	default:
679 		return (EINVAL);
680 	}
681 	if (vlapic_fire_lvt(vlapic, lvt)) {
682 		vmm_stat_array_incr(vlapic->vm, vlapic->vcpuid,
683 		    LVTS_TRIGGERRED, vector, 1);
684 	}
685 	return (0);
686 }
687 
688 static void
689 vlapic_callout_handler(void *arg)
690 {
691 	struct vlapic *vlapic;
692 	struct bintime bt, btnow;
693 	sbintime_t rem_sbt;
694 
695 	vlapic = arg;
696 
697 	VLAPIC_TIMER_LOCK(vlapic);
698 	if (callout_pending(&vlapic->callout))	/* callout was reset */
699 		goto done;
700 
701 	if (!callout_active(&vlapic->callout))	/* callout was stopped */
702 		goto done;
703 
704 	callout_deactivate(&vlapic->callout);
705 
706 	vlapic_fire_timer(vlapic);
707 
708 	if (vlapic_periodic_timer(vlapic)) {
709 		binuptime(&btnow);
710 		KASSERT(bintime_cmp(&btnow, &vlapic->timer_fire_bt, >=),
711 		    ("vlapic callout at %#lx.%#lx, expected at %#lx.#%lx",
712 		    btnow.sec, btnow.frac, vlapic->timer_fire_bt.sec,
713 		    vlapic->timer_fire_bt.frac));
714 
715 		/*
716 		 * Compute the delta between when the timer was supposed to
717 		 * fire and the present time.
718 		 */
719 		bt = btnow;
720 		bintime_sub(&bt, &vlapic->timer_fire_bt);
721 
722 		rem_sbt = bttosbt(vlapic->timer_period_bt);
723 		if (bintime_cmp(&bt, &vlapic->timer_period_bt, <)) {
724 			/*
725 			 * Adjust the time until the next countdown downward
726 			 * to account for the lost time.
727 			 */
728 			rem_sbt -= bttosbt(bt);
729 		} else {
730 			/*
731 			 * If the delta is greater than the timer period then
732 			 * just reset our time base instead of trying to catch
733 			 * up.
734 			 */
735 			vlapic->timer_fire_bt = btnow;
736 			VLAPIC_CTR2(vlapic, "vlapic timer lagging by %lu "
737 			    "usecs, period is %lu usecs - resetting time base",
738 			    bttosbt(bt) / SBT_1US,
739 			    bttosbt(vlapic->timer_period_bt) / SBT_1US);
740 		}
741 
742 		bintime_add(&vlapic->timer_fire_bt, &vlapic->timer_period_bt);
743 		callout_reset_sbt(&vlapic->callout, rem_sbt, 0,
744 		    vlapic_callout_handler, vlapic, 0);
745 	}
746 done:
747 	VLAPIC_TIMER_UNLOCK(vlapic);
748 }
749 
750 void
751 vlapic_icrtmr_write_handler(struct vlapic *vlapic)
752 {
753 	struct LAPIC *lapic;
754 	sbintime_t sbt;
755 	uint32_t icr_timer;
756 
757 	VLAPIC_TIMER_LOCK(vlapic);
758 
759 	lapic = vlapic->apic_page;
760 	icr_timer = lapic->icr_timer;
761 
762 	vlapic->timer_period_bt = vlapic->timer_freq_bt;
763 	bintime_mul(&vlapic->timer_period_bt, icr_timer);
764 
765 	if (icr_timer != 0) {
766 		binuptime(&vlapic->timer_fire_bt);
767 		bintime_add(&vlapic->timer_fire_bt, &vlapic->timer_period_bt);
768 
769 		sbt = bttosbt(vlapic->timer_period_bt);
770 		callout_reset_sbt(&vlapic->callout, sbt, 0,
771 		    vlapic_callout_handler, vlapic, 0);
772 	} else
773 		callout_stop(&vlapic->callout);
774 
775 	VLAPIC_TIMER_UNLOCK(vlapic);
776 }
777 
778 /*
779  * This function populates 'dmask' with the set of vcpus that match the
780  * addressing specified by the (dest, phys, lowprio) tuple.
781  *
782  * 'x2apic_dest' specifies whether 'dest' is interpreted as x2APIC (32-bit)
783  * or xAPIC (8-bit) destination field.
784  */
785 static void
786 vlapic_calcdest(struct vm *vm, cpuset_t *dmask, uint32_t dest, bool phys,
787     bool lowprio, bool x2apic_dest)
788 {
789 	struct vlapic *vlapic;
790 	uint32_t dfr, ldr, ldest, cluster;
791 	uint32_t mda_flat_ldest, mda_cluster_ldest, mda_ldest, mda_cluster_id;
792 	cpuset_t amask;
793 	int vcpuid;
794 
795 	if ((x2apic_dest && dest == 0xffffffff) ||
796 	    (!x2apic_dest && dest == 0xff)) {
797 		/*
798 		 * Broadcast in both logical and physical modes.
799 		 */
800 		*dmask = vm_active_cpus(vm);
801 		return;
802 	}
803 
804 	if (phys) {
805 		/*
806 		 * Physical mode: destination is APIC ID.
807 		 */
808 		CPU_ZERO(dmask);
809 		vcpuid = vm_apicid2vcpuid(vm, dest);
810 		if (vcpuid < VM_MAXCPU)
811 			CPU_SET(vcpuid, dmask);
812 	} else {
813 		/*
814 		 * In the "Flat Model" the MDA is interpreted as an 8-bit wide
815 		 * bitmask. This model is only avilable in the xAPIC mode.
816 		 */
817 		mda_flat_ldest = dest & 0xff;
818 
819 		/*
820 		 * In the "Cluster Model" the MDA is used to identify a
821 		 * specific cluster and a set of APICs in that cluster.
822 		 */
823 		if (x2apic_dest) {
824 			mda_cluster_id = dest >> 16;
825 			mda_cluster_ldest = dest & 0xffff;
826 		} else {
827 			mda_cluster_id = (dest >> 4) & 0xf;
828 			mda_cluster_ldest = dest & 0xf;
829 		}
830 
831 		/*
832 		 * Logical mode: match each APIC that has a bit set
833 		 * in it's LDR that matches a bit in the ldest.
834 		 */
835 		CPU_ZERO(dmask);
836 		amask = vm_active_cpus(vm);
837 		while ((vcpuid = CPU_FFS(&amask)) != 0) {
838 			vcpuid--;
839 			CPU_CLR(vcpuid, &amask);
840 
841 			vlapic = vm_lapic(vm, vcpuid);
842 			dfr = vlapic->apic_page->dfr;
843 			ldr = vlapic->apic_page->ldr;
844 
845 			if ((dfr & APIC_DFR_MODEL_MASK) ==
846 			    APIC_DFR_MODEL_FLAT) {
847 				ldest = ldr >> 24;
848 				mda_ldest = mda_flat_ldest;
849 			} else if ((dfr & APIC_DFR_MODEL_MASK) ==
850 			    APIC_DFR_MODEL_CLUSTER) {
851 				if (x2apic(vlapic)) {
852 					cluster = ldr >> 16;
853 					ldest = ldr & 0xffff;
854 				} else {
855 					cluster = ldr >> 28;
856 					ldest = (ldr >> 24) & 0xf;
857 				}
858 				if (cluster != mda_cluster_id)
859 					continue;
860 				mda_ldest = mda_cluster_ldest;
861 			} else {
862 				/*
863 				 * Guest has configured a bad logical
864 				 * model for this vcpu - skip it.
865 				 */
866 				VLAPIC_CTR1(vlapic, "vlapic has bad logical "
867 				    "model %x - cannot deliver interrupt", dfr);
868 				continue;
869 			}
870 
871 			if ((mda_ldest & ldest) != 0) {
872 				CPU_SET(vcpuid, dmask);
873 				if (lowprio)
874 					break;
875 			}
876 		}
877 	}
878 }
879 
880 static VMM_STAT_ARRAY(IPIS_SENT, VM_MAXCPU, "ipis sent to vcpu");
881 
882 int
883 vlapic_icrlo_write_handler(struct vlapic *vlapic, bool *retu)
884 {
885 	int i;
886 	bool phys;
887 	cpuset_t dmask;
888 	uint64_t icrval;
889 	uint32_t dest, vec, mode;
890 	struct vlapic *vlapic2;
891 	struct vm_exit *vmexit;
892 	struct LAPIC *lapic;
893 
894 	lapic = vlapic->apic_page;
895 	lapic->icr_lo &= ~APIC_DELSTAT_PEND;
896 	icrval = ((uint64_t)lapic->icr_hi << 32) | lapic->icr_lo;
897 
898 	if (x2apic(vlapic))
899 		dest = icrval >> 32;
900 	else
901 		dest = icrval >> (32 + 24);
902 	vec = icrval & APIC_VECTOR_MASK;
903 	mode = icrval & APIC_DELMODE_MASK;
904 
905 	if (mode == APIC_DELMODE_FIXED && vec < 16) {
906 		vlapic_set_error(vlapic, APIC_ESR_SEND_ILLEGAL_VECTOR);
907 		VLAPIC_CTR1(vlapic, "Ignoring invalid IPI %d", vec);
908 		return (0);
909 	}
910 
911 	VLAPIC_CTR2(vlapic, "icrlo 0x%016lx triggered ipi %d", icrval, vec);
912 
913 	if (mode == APIC_DELMODE_FIXED || mode == APIC_DELMODE_NMI) {
914 		switch (icrval & APIC_DEST_MASK) {
915 		case APIC_DEST_DESTFLD:
916 			phys = ((icrval & APIC_DESTMODE_LOG) == 0);
917 			vlapic_calcdest(vlapic->vm, &dmask, dest, phys, false,
918 			    x2apic(vlapic));
919 			break;
920 		case APIC_DEST_SELF:
921 			CPU_SETOF(vlapic->vcpuid, &dmask);
922 			break;
923 		case APIC_DEST_ALLISELF:
924 			dmask = vm_active_cpus(vlapic->vm);
925 			break;
926 		case APIC_DEST_ALLESELF:
927 			dmask = vm_active_cpus(vlapic->vm);
928 			CPU_CLR(vlapic->vcpuid, &dmask);
929 			break;
930 		default:
931 			CPU_ZERO(&dmask);	/* satisfy gcc */
932 			break;
933 		}
934 
935 		while ((i = CPU_FFS(&dmask)) != 0) {
936 			i--;
937 			CPU_CLR(i, &dmask);
938 			if (mode == APIC_DELMODE_FIXED) {
939 				lapic_intr_edge(vlapic->vm, i, vec);
940 				vmm_stat_array_incr(vlapic->vm, vlapic->vcpuid,
941 						    IPIS_SENT, i, 1);
942 				VLAPIC_CTR2(vlapic, "vlapic sending ipi %d "
943 				    "to vcpuid %d", vec, i);
944 			} else {
945 				vm_inject_nmi(vlapic->vm, i);
946 				VLAPIC_CTR1(vlapic, "vlapic sending ipi nmi "
947 				    "to vcpuid %d", i);
948 			}
949 		}
950 
951 		return (0);	/* handled completely in the kernel */
952 	}
953 
954 	if (mode == APIC_DELMODE_INIT) {
955 		if ((icrval & APIC_LEVEL_MASK) == APIC_LEVEL_DEASSERT)
956 			return (0);
957 
958 		if (vlapic->vcpuid == 0 && dest != 0 && dest < VM_MAXCPU) {
959 			vlapic2 = vm_lapic(vlapic->vm, dest);
960 
961 			/* move from INIT to waiting-for-SIPI state */
962 			if (vlapic2->boot_state == BS_INIT) {
963 				vlapic2->boot_state = BS_SIPI;
964 			}
965 
966 			return (0);
967 		}
968 	}
969 
970 	if (mode == APIC_DELMODE_STARTUP) {
971 		if (vlapic->vcpuid == 0 && dest != 0 && dest < VM_MAXCPU) {
972 			vlapic2 = vm_lapic(vlapic->vm, dest);
973 
974 			/*
975 			 * Ignore SIPIs in any state other than wait-for-SIPI
976 			 */
977 			if (vlapic2->boot_state != BS_SIPI)
978 				return (0);
979 
980 			/*
981 			 * XXX this assumes that the startup IPI always succeeds
982 			 */
983 			vlapic2->boot_state = BS_RUNNING;
984 			vm_activate_cpu(vlapic2->vm, dest);
985 
986 			*retu = true;
987 			vmexit = vm_exitinfo(vlapic->vm, vlapic->vcpuid);
988 			vmexit->exitcode = VM_EXITCODE_SPINUP_AP;
989 			vmexit->u.spinup_ap.vcpu = dest;
990 			vmexit->u.spinup_ap.rip = vec << PAGE_SHIFT;
991 
992 			return (0);
993 		}
994 	}
995 
996 	/*
997 	 * This will cause a return to userland.
998 	 */
999 	return (1);
1000 }
1001 
1002 void
1003 vlapic_self_ipi_handler(struct vlapic *vlapic, uint64_t val)
1004 {
1005 	int vec;
1006 
1007 	KASSERT(x2apic(vlapic), ("SELF_IPI does not exist in xAPIC mode"));
1008 
1009 	vec = val & 0xff;
1010 	lapic_intr_edge(vlapic->vm, vlapic->vcpuid, vec);
1011 	vmm_stat_array_incr(vlapic->vm, vlapic->vcpuid, IPIS_SENT,
1012 	    vlapic->vcpuid, 1);
1013 	VLAPIC_CTR1(vlapic, "vlapic self-ipi %d", vec);
1014 }
1015 
1016 int
1017 vlapic_pending_intr(struct vlapic *vlapic, int *vecptr)
1018 {
1019 	struct LAPIC	*lapic = vlapic->apic_page;
1020 	int	  	 idx, i, bitpos, vector;
1021 	uint32_t	*irrptr, val;
1022 
1023 	if (vlapic->ops.pending_intr)
1024 		return ((*vlapic->ops.pending_intr)(vlapic, vecptr));
1025 
1026 	irrptr = &lapic->irr0;
1027 
1028 	/*
1029 	 * The x86 architecture reserves the the first 32 vectors for use
1030 	 * by the processor.
1031 	 */
1032 	for (i = 7; i > 0; i--) {
1033 		idx = i * 4;
1034 		val = atomic_load_acq_int(&irrptr[idx]);
1035 		bitpos = fls(val);
1036 		if (bitpos != 0) {
1037 			vector = i * 32 + (bitpos - 1);
1038 			if (PRIO(vector) > PRIO(lapic->ppr)) {
1039 				VLAPIC_CTR1(vlapic, "pending intr %d", vector);
1040 				if (vecptr != NULL)
1041 					*vecptr = vector;
1042 				return (1);
1043 			} else
1044 				break;
1045 		}
1046 	}
1047 	return (0);
1048 }
1049 
1050 void
1051 vlapic_intr_accepted(struct vlapic *vlapic, int vector)
1052 {
1053 	struct LAPIC	*lapic = vlapic->apic_page;
1054 	uint32_t	*irrptr, *isrptr;
1055 	int		idx, stk_top;
1056 
1057 	if (vlapic->ops.intr_accepted)
1058 		return ((*vlapic->ops.intr_accepted)(vlapic, vector));
1059 
1060 	/*
1061 	 * clear the ready bit for vector being accepted in irr
1062 	 * and set the vector as in service in isr.
1063 	 */
1064 	idx = (vector / 32) * 4;
1065 
1066 	irrptr = &lapic->irr0;
1067 	atomic_clear_int(&irrptr[idx], 1 << (vector % 32));
1068 	VLAPIC_CTR_IRR(vlapic, "vlapic_intr_accepted");
1069 
1070 	isrptr = &lapic->isr0;
1071 	isrptr[idx] |= 1 << (vector % 32);
1072 	VLAPIC_CTR_ISR(vlapic, "vlapic_intr_accepted");
1073 
1074 	/*
1075 	 * Update the PPR
1076 	 */
1077 	vlapic->isrvec_stk_top++;
1078 
1079 	stk_top = vlapic->isrvec_stk_top;
1080 	if (stk_top >= ISRVEC_STK_SIZE)
1081 		panic("isrvec_stk_top overflow %d", stk_top);
1082 
1083 	vlapic->isrvec_stk[stk_top] = vector;
1084 	vlapic_update_ppr(vlapic);
1085 }
1086 
1087 void
1088 vlapic_svr_write_handler(struct vlapic *vlapic)
1089 {
1090 	struct LAPIC *lapic;
1091 	uint32_t old, new, changed;
1092 
1093 	lapic = vlapic->apic_page;
1094 
1095 	new = lapic->svr;
1096 	old = vlapic->svr_last;
1097 	vlapic->svr_last = new;
1098 
1099 	changed = old ^ new;
1100 	if ((changed & APIC_SVR_ENABLE) != 0) {
1101 		if ((new & APIC_SVR_ENABLE) == 0) {
1102 			/*
1103 			 * The apic is now disabled so stop the apic timer
1104 			 * and mask all the LVT entries.
1105 			 */
1106 			VLAPIC_CTR0(vlapic, "vlapic is software-disabled");
1107 			VLAPIC_TIMER_LOCK(vlapic);
1108 			callout_stop(&vlapic->callout);
1109 			VLAPIC_TIMER_UNLOCK(vlapic);
1110 			vlapic_mask_lvts(vlapic);
1111 		} else {
1112 			/*
1113 			 * The apic is now enabled so restart the apic timer
1114 			 * if it is configured in periodic mode.
1115 			 */
1116 			VLAPIC_CTR0(vlapic, "vlapic is software-enabled");
1117 			if (vlapic_periodic_timer(vlapic))
1118 				vlapic_icrtmr_write_handler(vlapic);
1119 		}
1120 	}
1121 }
1122 
1123 int
1124 vlapic_read(struct vlapic *vlapic, int mmio_access, uint64_t offset,
1125     uint64_t *data, bool *retu)
1126 {
1127 	struct LAPIC	*lapic = vlapic->apic_page;
1128 	uint32_t	*reg;
1129 	int		 i;
1130 
1131 	/* Ignore MMIO accesses in x2APIC mode */
1132 	if (x2apic(vlapic) && mmio_access) {
1133 		VLAPIC_CTR1(vlapic, "MMIO read from offset %#lx in x2APIC mode",
1134 		    offset);
1135 		*data = 0;
1136 		goto done;
1137 	}
1138 
1139 	if (!x2apic(vlapic) && !mmio_access) {
1140 		/*
1141 		 * XXX Generate GP fault for MSR accesses in xAPIC mode
1142 		 */
1143 		VLAPIC_CTR1(vlapic, "x2APIC MSR read from offset %#lx in "
1144 		    "xAPIC mode", offset);
1145 		*data = 0;
1146 		goto done;
1147 	}
1148 
1149 	if (offset > sizeof(*lapic)) {
1150 		*data = 0;
1151 		goto done;
1152 	}
1153 
1154 	offset &= ~3;
1155 	switch(offset)
1156 	{
1157 		case APIC_OFFSET_ID:
1158 			*data = lapic->id;
1159 			break;
1160 		case APIC_OFFSET_VER:
1161 			*data = lapic->version;
1162 			break;
1163 		case APIC_OFFSET_TPR:
1164 			*data = lapic->tpr;
1165 			break;
1166 		case APIC_OFFSET_APR:
1167 			*data = lapic->apr;
1168 			break;
1169 		case APIC_OFFSET_PPR:
1170 			*data = lapic->ppr;
1171 			break;
1172 		case APIC_OFFSET_EOI:
1173 			*data = lapic->eoi;
1174 			break;
1175 		case APIC_OFFSET_LDR:
1176 			*data = lapic->ldr;
1177 			break;
1178 		case APIC_OFFSET_DFR:
1179 			*data = lapic->dfr;
1180 			break;
1181 		case APIC_OFFSET_SVR:
1182 			*data = lapic->svr;
1183 			break;
1184 		case APIC_OFFSET_ISR0 ... APIC_OFFSET_ISR7:
1185 			i = (offset - APIC_OFFSET_ISR0) >> 2;
1186 			reg = &lapic->isr0;
1187 			*data = *(reg + i);
1188 			break;
1189 		case APIC_OFFSET_TMR0 ... APIC_OFFSET_TMR7:
1190 			i = (offset - APIC_OFFSET_TMR0) >> 2;
1191 			reg = &lapic->tmr0;
1192 			*data = *(reg + i);
1193 			break;
1194 		case APIC_OFFSET_IRR0 ... APIC_OFFSET_IRR7:
1195 			i = (offset - APIC_OFFSET_IRR0) >> 2;
1196 			reg = &lapic->irr0;
1197 			*data = atomic_load_acq_int(reg + i);
1198 			break;
1199 		case APIC_OFFSET_ESR:
1200 			*data = lapic->esr;
1201 			break;
1202 		case APIC_OFFSET_ICR_LOW:
1203 			*data = lapic->icr_lo;
1204 			if (x2apic(vlapic))
1205 				*data |= (uint64_t)lapic->icr_hi << 32;
1206 			break;
1207 		case APIC_OFFSET_ICR_HI:
1208 			*data = lapic->icr_hi;
1209 			break;
1210 		case APIC_OFFSET_CMCI_LVT:
1211 		case APIC_OFFSET_TIMER_LVT ... APIC_OFFSET_ERROR_LVT:
1212 			*data = vlapic_get_lvt(vlapic, offset);
1213 #ifdef INVARIANTS
1214 			reg = vlapic_get_lvtptr(vlapic, offset);
1215 			KASSERT(*data == *reg, ("inconsistent lvt value at "
1216 			    "offset %#lx: %#lx/%#x", offset, *data, *reg));
1217 #endif
1218 			break;
1219 		case APIC_OFFSET_TIMER_ICR:
1220 			*data = lapic->icr_timer;
1221 			break;
1222 		case APIC_OFFSET_TIMER_CCR:
1223 			*data = vlapic_get_ccr(vlapic);
1224 			break;
1225 		case APIC_OFFSET_TIMER_DCR:
1226 			*data = lapic->dcr_timer;
1227 			break;
1228 		case APIC_OFFSET_SELF_IPI:
1229 			/*
1230 			 * XXX generate a GP fault if vlapic is in x2apic mode
1231 			 */
1232 			*data = 0;
1233 			break;
1234 		case APIC_OFFSET_RRR:
1235 		default:
1236 			*data = 0;
1237 			break;
1238 	}
1239 done:
1240 	VLAPIC_CTR2(vlapic, "vlapic read offset %#x, data %#lx", offset, *data);
1241 	return 0;
1242 }
1243 
1244 int
1245 vlapic_write(struct vlapic *vlapic, int mmio_access, uint64_t offset,
1246     uint64_t data, bool *retu)
1247 {
1248 	struct LAPIC	*lapic = vlapic->apic_page;
1249 	uint32_t	*regptr;
1250 	int		retval;
1251 
1252 	KASSERT((offset & 0xf) == 0 && offset < PAGE_SIZE,
1253 	    ("vlapic_write: invalid offset %#lx", offset));
1254 
1255 	VLAPIC_CTR2(vlapic, "vlapic write offset %#lx, data %#lx",
1256 	    offset, data);
1257 
1258 	if (offset > sizeof(*lapic))
1259 		return (0);
1260 
1261 	/* Ignore MMIO accesses in x2APIC mode */
1262 	if (x2apic(vlapic) && mmio_access) {
1263 		VLAPIC_CTR2(vlapic, "MMIO write of %#lx to offset %#lx "
1264 		    "in x2APIC mode", data, offset);
1265 		return (0);
1266 	}
1267 
1268 	/*
1269 	 * XXX Generate GP fault for MSR accesses in xAPIC mode
1270 	 */
1271 	if (!x2apic(vlapic) && !mmio_access) {
1272 		VLAPIC_CTR2(vlapic, "x2APIC MSR write of %#lx to offset %#lx "
1273 		    "in xAPIC mode", data, offset);
1274 		return (0);
1275 	}
1276 
1277 	retval = 0;
1278 	switch(offset)
1279 	{
1280 		case APIC_OFFSET_ID:
1281 			lapic->id = data;
1282 			vlapic_id_write_handler(vlapic);
1283 			break;
1284 		case APIC_OFFSET_TPR:
1285 			lapic->tpr = data & 0xff;
1286 			vlapic_update_ppr(vlapic);
1287 			break;
1288 		case APIC_OFFSET_EOI:
1289 			vlapic_process_eoi(vlapic);
1290 			break;
1291 		case APIC_OFFSET_LDR:
1292 			lapic->ldr = data;
1293 			vlapic_ldr_write_handler(vlapic);
1294 			break;
1295 		case APIC_OFFSET_DFR:
1296 			lapic->dfr = data;
1297 			vlapic_dfr_write_handler(vlapic);
1298 			break;
1299 		case APIC_OFFSET_SVR:
1300 			lapic->svr = data;
1301 			vlapic_svr_write_handler(vlapic);
1302 			break;
1303 		case APIC_OFFSET_ICR_LOW:
1304 			lapic->icr_lo = data;
1305 			if (x2apic(vlapic))
1306 				lapic->icr_hi = data >> 32;
1307 			retval = vlapic_icrlo_write_handler(vlapic, retu);
1308 			break;
1309 		case APIC_OFFSET_ICR_HI:
1310 			lapic->icr_hi = data;
1311 			break;
1312 		case APIC_OFFSET_CMCI_LVT:
1313 		case APIC_OFFSET_TIMER_LVT ... APIC_OFFSET_ERROR_LVT:
1314 			regptr = vlapic_get_lvtptr(vlapic, offset);
1315 			*regptr = data;
1316 			vlapic_lvt_write_handler(vlapic, offset);
1317 			break;
1318 		case APIC_OFFSET_TIMER_ICR:
1319 			lapic->icr_timer = data;
1320 			vlapic_icrtmr_write_handler(vlapic);
1321 			break;
1322 
1323 		case APIC_OFFSET_TIMER_DCR:
1324 			lapic->dcr_timer = data;
1325 			vlapic_dcr_write_handler(vlapic);
1326 			break;
1327 
1328 		case APIC_OFFSET_ESR:
1329 			vlapic_esr_write_handler(vlapic);
1330 			break;
1331 
1332 		case APIC_OFFSET_SELF_IPI:
1333 			if (x2apic(vlapic))
1334 				vlapic_self_ipi_handler(vlapic, data);
1335 			break;
1336 
1337 		case APIC_OFFSET_VER:
1338 		case APIC_OFFSET_APR:
1339 		case APIC_OFFSET_PPR:
1340 		case APIC_OFFSET_RRR:
1341 		case APIC_OFFSET_ISR0 ... APIC_OFFSET_ISR7:
1342 		case APIC_OFFSET_TMR0 ... APIC_OFFSET_TMR7:
1343 		case APIC_OFFSET_IRR0 ... APIC_OFFSET_IRR7:
1344 		case APIC_OFFSET_TIMER_CCR:
1345 		default:
1346 			// Read only.
1347 			break;
1348 	}
1349 
1350 	return (retval);
1351 }
1352 
1353 static void
1354 vlapic_reset(struct vlapic *vlapic)
1355 {
1356 	struct LAPIC *lapic;
1357 
1358 	lapic = vlapic->apic_page;
1359 	bzero(lapic, sizeof(struct LAPIC));
1360 
1361 	lapic->id = vlapic_get_id(vlapic);
1362 	lapic->version = VLAPIC_VERSION;
1363 	lapic->version |= (VLAPIC_MAXLVT_INDEX << MAXLVTSHIFT);
1364 	lapic->dfr = 0xffffffff;
1365 	lapic->svr = APIC_SVR_VECTOR;
1366 	vlapic_mask_lvts(vlapic);
1367 	vlapic_reset_tmr(vlapic);
1368 
1369 	lapic->dcr_timer = 0;
1370 	vlapic_dcr_write_handler(vlapic);
1371 
1372 	if (vlapic->vcpuid == 0)
1373 		vlapic->boot_state = BS_RUNNING;	/* BSP */
1374 	else
1375 		vlapic->boot_state = BS_INIT;		/* AP */
1376 
1377 	vlapic->svr_last = lapic->svr;
1378 }
1379 
1380 void
1381 vlapic_init(struct vlapic *vlapic)
1382 {
1383 	KASSERT(vlapic->vm != NULL, ("vlapic_init: vm is not initialized"));
1384 	KASSERT(vlapic->vcpuid >= 0 && vlapic->vcpuid < VM_MAXCPU,
1385 	    ("vlapic_init: vcpuid is not initialized"));
1386 	KASSERT(vlapic->apic_page != NULL, ("vlapic_init: apic_page is not "
1387 	    "initialized"));
1388 
1389 	/*
1390 	 * If the vlapic is configured in x2apic mode then it will be
1391 	 * accessed in the critical section via the MSR emulation code.
1392 	 *
1393 	 * Therefore the timer mutex must be a spinlock because blockable
1394 	 * mutexes cannot be acquired in a critical section.
1395 	 */
1396 	mtx_init(&vlapic->timer_mtx, "vlapic timer mtx", NULL, MTX_SPIN);
1397 	callout_init(&vlapic->callout, 1);
1398 
1399 	vlapic->msr_apicbase = DEFAULT_APIC_BASE | APICBASE_ENABLED;
1400 
1401 	if (vlapic->vcpuid == 0)
1402 		vlapic->msr_apicbase |= APICBASE_BSP;
1403 
1404 	vlapic_reset(vlapic);
1405 }
1406 
1407 void
1408 vlapic_cleanup(struct vlapic *vlapic)
1409 {
1410 
1411 	callout_drain(&vlapic->callout);
1412 }
1413 
1414 uint64_t
1415 vlapic_get_apicbase(struct vlapic *vlapic)
1416 {
1417 
1418 	return (vlapic->msr_apicbase);
1419 }
1420 
1421 int
1422 vlapic_set_apicbase(struct vlapic *vlapic, uint64_t new)
1423 {
1424 
1425 	if (vlapic->msr_apicbase != new) {
1426 		VLAPIC_CTR2(vlapic, "Changing APIC_BASE MSR from %#lx to %#lx "
1427 		    "not supported", vlapic->msr_apicbase, new);
1428 		return (-1);
1429 	}
1430 
1431 	return (0);
1432 }
1433 
1434 void
1435 vlapic_set_x2apic_state(struct vm *vm, int vcpuid, enum x2apic_state state)
1436 {
1437 	struct vlapic *vlapic;
1438 	struct LAPIC *lapic;
1439 
1440 	vlapic = vm_lapic(vm, vcpuid);
1441 
1442 	if (state == X2APIC_DISABLED)
1443 		vlapic->msr_apicbase &= ~APICBASE_X2APIC;
1444 	else
1445 		vlapic->msr_apicbase |= APICBASE_X2APIC;
1446 
1447 	/*
1448 	 * Reset the local APIC registers whose values are mode-dependent.
1449 	 *
1450 	 * XXX this works because the APIC mode can be changed only at vcpu
1451 	 * initialization time.
1452 	 */
1453 	lapic = vlapic->apic_page;
1454 	lapic->id = vlapic_get_id(vlapic);
1455 	if (x2apic(vlapic)) {
1456 		lapic->ldr = x2apic_ldr(vlapic);
1457 		lapic->dfr = 0;
1458 	} else {
1459 		lapic->ldr = 0;
1460 		lapic->dfr = 0xffffffff;
1461 	}
1462 
1463 	if (state == X2APIC_ENABLED) {
1464 		if (vlapic->ops.enable_x2apic_mode)
1465 			(*vlapic->ops.enable_x2apic_mode)(vlapic);
1466 	}
1467 }
1468 
1469 void
1470 vlapic_deliver_intr(struct vm *vm, bool level, uint32_t dest, bool phys,
1471     int delmode, int vec)
1472 {
1473 	bool lowprio;
1474 	int vcpuid;
1475 	cpuset_t dmask;
1476 
1477 	if (delmode != APIC_DELMODE_FIXED && delmode != APIC_DELMODE_LOWPRIO) {
1478 		VM_CTR1(vm, "vlapic intr invalid delmode %#x", delmode);
1479 		return;
1480 	}
1481 	lowprio = (delmode == APIC_DELMODE_LOWPRIO);
1482 
1483 	/*
1484 	 * We don't provide any virtual interrupt redirection hardware so
1485 	 * all interrupts originating from the ioapic or MSI specify the
1486 	 * 'dest' in the legacy xAPIC format.
1487 	 */
1488 	vlapic_calcdest(vm, &dmask, dest, phys, lowprio, false);
1489 
1490 	while ((vcpuid = CPU_FFS(&dmask)) != 0) {
1491 		vcpuid--;
1492 		CPU_CLR(vcpuid, &dmask);
1493 		lapic_set_intr(vm, vcpuid, vec, level);
1494 	}
1495 }
1496 
1497 void
1498 vlapic_post_intr(struct vlapic *vlapic, int hostcpu, int ipinum)
1499 {
1500 	/*
1501 	 * Post an interrupt to the vcpu currently running on 'hostcpu'.
1502 	 *
1503 	 * This is done by leveraging features like Posted Interrupts (Intel)
1504 	 * Doorbell MSR (AMD AVIC) that avoid a VM exit.
1505 	 *
1506 	 * If neither of these features are available then fallback to
1507 	 * sending an IPI to 'hostcpu'.
1508 	 */
1509 	if (vlapic->ops.post_intr)
1510 		(*vlapic->ops.post_intr)(vlapic, hostcpu);
1511 	else
1512 		ipi_cpu(hostcpu, ipinum);
1513 }
1514 
1515 bool
1516 vlapic_enabled(struct vlapic *vlapic)
1517 {
1518 	struct LAPIC *lapic = vlapic->apic_page;
1519 
1520 	if ((vlapic->msr_apicbase & APICBASE_ENABLED) != 0 &&
1521 	    (lapic->svr & APIC_SVR_ENABLE) != 0)
1522 		return (true);
1523 	else
1524 		return (false);
1525 }
1526 
1527 static void
1528 vlapic_set_tmr(struct vlapic *vlapic, int vector, bool level)
1529 {
1530 	struct LAPIC *lapic;
1531 	uint32_t *tmrptr, mask;
1532 	int idx;
1533 
1534 	lapic = vlapic->apic_page;
1535 	tmrptr = &lapic->tmr0;
1536 	idx = (vector / 32) * 4;
1537 	mask = 1 << (vector % 32);
1538 	if (level)
1539 		tmrptr[idx] |= mask;
1540 	else
1541 		tmrptr[idx] &= ~mask;
1542 
1543 	if (vlapic->ops.set_tmr != NULL)
1544 		(*vlapic->ops.set_tmr)(vlapic, vector, level);
1545 }
1546 
1547 void
1548 vlapic_reset_tmr(struct vlapic *vlapic)
1549 {
1550 	int vector;
1551 
1552 	VLAPIC_CTR0(vlapic, "vlapic resetting all vectors to edge-triggered");
1553 
1554 	for (vector = 0; vector <= 255; vector++)
1555 		vlapic_set_tmr(vlapic, vector, false);
1556 }
1557 
1558 void
1559 vlapic_set_tmr_level(struct vlapic *vlapic, uint32_t dest, bool phys,
1560     int delmode, int vector)
1561 {
1562 	cpuset_t dmask;
1563 	bool lowprio;
1564 
1565 	KASSERT(vector >= 0 && vector <= 255, ("invalid vector %d", vector));
1566 
1567 	/*
1568 	 * A level trigger is valid only for fixed and lowprio delivery modes.
1569 	 */
1570 	if (delmode != APIC_DELMODE_FIXED && delmode != APIC_DELMODE_LOWPRIO) {
1571 		VLAPIC_CTR1(vlapic, "Ignoring level trigger-mode for "
1572 		    "delivery-mode %d", delmode);
1573 		return;
1574 	}
1575 
1576 	lowprio = (delmode == APIC_DELMODE_LOWPRIO);
1577 	vlapic_calcdest(vlapic->vm, &dmask, dest, phys, lowprio, false);
1578 
1579 	if (!CPU_ISSET(vlapic->vcpuid, &dmask))
1580 		return;
1581 
1582 	VLAPIC_CTR1(vlapic, "vector %d set to level-triggered", vector);
1583 	vlapic_set_tmr(vlapic, vector, true);
1584 }
1585