1 // SPDX-License-Identifier: GPL-2.0-only 2 /* 3 * Copyright (C) 2020 - Google Inc 4 * Author: Andrew Scull <ascull@google.com> 5 */ 6 7 #include <hyp/adjust_pc.h> 8 9 #include <asm/pgtable-types.h> 10 #include <asm/kvm_asm.h> 11 #include <asm/kvm_emulate.h> 12 #include <asm/kvm_host.h> 13 #include <asm/kvm_hyp.h> 14 #include <asm/kvm_mmu.h> 15 16 #include <nvhe/ffa.h> 17 #include <nvhe/mem_protect.h> 18 #include <nvhe/mm.h> 19 #include <nvhe/pkvm.h> 20 #include <nvhe/trap_handler.h> 21 22 DEFINE_PER_CPU(struct kvm_nvhe_init_params, kvm_init_params); 23 24 void __kvm_hyp_host_forward_smc(struct kvm_cpu_context *host_ctxt); 25 26 static void __hyp_sve_save_guest(struct kvm_vcpu *vcpu) 27 { 28 __vcpu_sys_reg(vcpu, ZCR_EL1) = read_sysreg_el1(SYS_ZCR); 29 /* 30 * On saving/restoring guest sve state, always use the maximum VL for 31 * the guest. The layout of the data when saving the sve state depends 32 * on the VL, so use a consistent (i.e., the maximum) guest VL. 33 */ 34 sve_cond_update_zcr_vq(vcpu_sve_max_vq(vcpu) - 1, SYS_ZCR_EL2); 35 __sve_save_state(vcpu_sve_pffr(vcpu), &vcpu->arch.ctxt.fp_regs.fpsr, true); 36 write_sysreg_s(sve_vq_from_vl(kvm_host_sve_max_vl) - 1, SYS_ZCR_EL2); 37 } 38 39 static void __hyp_sve_restore_host(void) 40 { 41 struct cpu_sve_state *sve_state = *host_data_ptr(sve_state); 42 43 /* 44 * On saving/restoring host sve state, always use the maximum VL for 45 * the host. The layout of the data when saving the sve state depends 46 * on the VL, so use a consistent (i.e., the maximum) host VL. 47 * 48 * Note that this constrains the PE to the maximum shared VL 49 * that was discovered, if we wish to use larger VLs this will 50 * need to be revisited. 51 */ 52 write_sysreg_s(sve_vq_from_vl(kvm_host_sve_max_vl) - 1, SYS_ZCR_EL2); 53 __sve_restore_state(sve_state->sve_regs + sve_ffr_offset(kvm_host_sve_max_vl), 54 &sve_state->fpsr, 55 true); 56 write_sysreg_el1(sve_state->zcr_el1, SYS_ZCR); 57 } 58 59 static void fpsimd_sve_flush(void) 60 { 61 *host_data_ptr(fp_owner) = FP_STATE_HOST_OWNED; 62 } 63 64 static void fpsimd_sve_sync(struct kvm_vcpu *vcpu) 65 { 66 bool has_fpmr; 67 68 if (!guest_owns_fp_regs()) 69 return; 70 71 cpacr_clear_set(0, CPACR_EL1_FPEN | CPACR_EL1_ZEN); 72 isb(); 73 74 if (vcpu_has_sve(vcpu)) 75 __hyp_sve_save_guest(vcpu); 76 else 77 __fpsimd_save_state(&vcpu->arch.ctxt.fp_regs); 78 79 has_fpmr = kvm_has_fpmr(kern_hyp_va(vcpu->kvm)); 80 if (has_fpmr) 81 __vcpu_sys_reg(vcpu, FPMR) = read_sysreg_s(SYS_FPMR); 82 83 if (system_supports_sve()) 84 __hyp_sve_restore_host(); 85 else 86 __fpsimd_restore_state(*host_data_ptr(fpsimd_state)); 87 88 if (has_fpmr) 89 write_sysreg_s(*host_data_ptr(fpmr), SYS_FPMR); 90 91 *host_data_ptr(fp_owner) = FP_STATE_HOST_OWNED; 92 } 93 94 static void flush_debug_state(struct pkvm_hyp_vcpu *hyp_vcpu) 95 { 96 struct kvm_vcpu *host_vcpu = hyp_vcpu->host_vcpu; 97 98 hyp_vcpu->vcpu.arch.debug_owner = host_vcpu->arch.debug_owner; 99 100 if (kvm_guest_owns_debug_regs(&hyp_vcpu->vcpu)) 101 hyp_vcpu->vcpu.arch.vcpu_debug_state = host_vcpu->arch.vcpu_debug_state; 102 else if (kvm_host_owns_debug_regs(&hyp_vcpu->vcpu)) 103 hyp_vcpu->vcpu.arch.external_debug_state = host_vcpu->arch.external_debug_state; 104 } 105 106 static void sync_debug_state(struct pkvm_hyp_vcpu *hyp_vcpu) 107 { 108 struct kvm_vcpu *host_vcpu = hyp_vcpu->host_vcpu; 109 110 if (kvm_guest_owns_debug_regs(&hyp_vcpu->vcpu)) 111 host_vcpu->arch.vcpu_debug_state = hyp_vcpu->vcpu.arch.vcpu_debug_state; 112 else if (kvm_host_owns_debug_regs(&hyp_vcpu->vcpu)) 113 host_vcpu->arch.external_debug_state = hyp_vcpu->vcpu.arch.external_debug_state; 114 } 115 116 static void flush_hyp_vcpu(struct pkvm_hyp_vcpu *hyp_vcpu) 117 { 118 struct kvm_vcpu *host_vcpu = hyp_vcpu->host_vcpu; 119 120 fpsimd_sve_flush(); 121 flush_debug_state(hyp_vcpu); 122 123 hyp_vcpu->vcpu.arch.ctxt = host_vcpu->arch.ctxt; 124 125 hyp_vcpu->vcpu.arch.sve_state = kern_hyp_va(host_vcpu->arch.sve_state); 126 /* Limit guest vector length to the maximum supported by the host. */ 127 hyp_vcpu->vcpu.arch.sve_max_vl = min(host_vcpu->arch.sve_max_vl, kvm_host_sve_max_vl); 128 129 hyp_vcpu->vcpu.arch.mdcr_el2 = host_vcpu->arch.mdcr_el2; 130 hyp_vcpu->vcpu.arch.hcr_el2 &= ~(HCR_TWI | HCR_TWE); 131 hyp_vcpu->vcpu.arch.hcr_el2 |= READ_ONCE(host_vcpu->arch.hcr_el2) & 132 (HCR_TWI | HCR_TWE); 133 134 hyp_vcpu->vcpu.arch.iflags = host_vcpu->arch.iflags; 135 136 hyp_vcpu->vcpu.arch.vsesr_el2 = host_vcpu->arch.vsesr_el2; 137 138 hyp_vcpu->vcpu.arch.vgic_cpu.vgic_v3 = host_vcpu->arch.vgic_cpu.vgic_v3; 139 } 140 141 static void sync_hyp_vcpu(struct pkvm_hyp_vcpu *hyp_vcpu) 142 { 143 struct kvm_vcpu *host_vcpu = hyp_vcpu->host_vcpu; 144 struct vgic_v3_cpu_if *hyp_cpu_if = &hyp_vcpu->vcpu.arch.vgic_cpu.vgic_v3; 145 struct vgic_v3_cpu_if *host_cpu_if = &host_vcpu->arch.vgic_cpu.vgic_v3; 146 unsigned int i; 147 148 fpsimd_sve_sync(&hyp_vcpu->vcpu); 149 sync_debug_state(hyp_vcpu); 150 151 host_vcpu->arch.ctxt = hyp_vcpu->vcpu.arch.ctxt; 152 153 host_vcpu->arch.hcr_el2 = hyp_vcpu->vcpu.arch.hcr_el2; 154 155 host_vcpu->arch.fault = hyp_vcpu->vcpu.arch.fault; 156 157 host_vcpu->arch.iflags = hyp_vcpu->vcpu.arch.iflags; 158 159 host_cpu_if->vgic_hcr = hyp_cpu_if->vgic_hcr; 160 for (i = 0; i < hyp_cpu_if->used_lrs; ++i) 161 host_cpu_if->vgic_lr[i] = hyp_cpu_if->vgic_lr[i]; 162 } 163 164 static void handle___pkvm_vcpu_load(struct kvm_cpu_context *host_ctxt) 165 { 166 DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1); 167 DECLARE_REG(unsigned int, vcpu_idx, host_ctxt, 2); 168 DECLARE_REG(u64, hcr_el2, host_ctxt, 3); 169 struct pkvm_hyp_vcpu *hyp_vcpu; 170 171 if (!is_protected_kvm_enabled()) 172 return; 173 174 hyp_vcpu = pkvm_load_hyp_vcpu(handle, vcpu_idx); 175 if (!hyp_vcpu) 176 return; 177 178 if (pkvm_hyp_vcpu_is_protected(hyp_vcpu)) { 179 /* Propagate WFx trapping flags */ 180 hyp_vcpu->vcpu.arch.hcr_el2 &= ~(HCR_TWE | HCR_TWI); 181 hyp_vcpu->vcpu.arch.hcr_el2 |= hcr_el2 & (HCR_TWE | HCR_TWI); 182 } 183 } 184 185 static void handle___pkvm_vcpu_put(struct kvm_cpu_context *host_ctxt) 186 { 187 struct pkvm_hyp_vcpu *hyp_vcpu; 188 189 if (!is_protected_kvm_enabled()) 190 return; 191 192 hyp_vcpu = pkvm_get_loaded_hyp_vcpu(); 193 if (hyp_vcpu) 194 pkvm_put_hyp_vcpu(hyp_vcpu); 195 } 196 197 static void handle___kvm_vcpu_run(struct kvm_cpu_context *host_ctxt) 198 { 199 DECLARE_REG(struct kvm_vcpu *, host_vcpu, host_ctxt, 1); 200 int ret; 201 202 if (unlikely(is_protected_kvm_enabled())) { 203 struct pkvm_hyp_vcpu *hyp_vcpu = pkvm_get_loaded_hyp_vcpu(); 204 205 /* 206 * KVM (and pKVM) doesn't support SME guests for now, and 207 * ensures that SME features aren't enabled in pstate when 208 * loading a vcpu. Therefore, if SME features enabled the host 209 * is misbehaving. 210 */ 211 if (unlikely(system_supports_sme() && read_sysreg_s(SYS_SVCR))) { 212 ret = -EINVAL; 213 goto out; 214 } 215 216 if (!hyp_vcpu) { 217 ret = -EINVAL; 218 goto out; 219 } 220 221 flush_hyp_vcpu(hyp_vcpu); 222 223 ret = __kvm_vcpu_run(&hyp_vcpu->vcpu); 224 225 sync_hyp_vcpu(hyp_vcpu); 226 } else { 227 /* The host is fully trusted, run its vCPU directly. */ 228 ret = __kvm_vcpu_run(kern_hyp_va(host_vcpu)); 229 } 230 out: 231 cpu_reg(host_ctxt, 1) = ret; 232 } 233 234 static int pkvm_refill_memcache(struct pkvm_hyp_vcpu *hyp_vcpu) 235 { 236 struct kvm_vcpu *host_vcpu = hyp_vcpu->host_vcpu; 237 238 return refill_memcache(&hyp_vcpu->vcpu.arch.pkvm_memcache, 239 host_vcpu->arch.pkvm_memcache.nr_pages, 240 &host_vcpu->arch.pkvm_memcache); 241 } 242 243 static void handle___pkvm_host_share_guest(struct kvm_cpu_context *host_ctxt) 244 { 245 DECLARE_REG(u64, pfn, host_ctxt, 1); 246 DECLARE_REG(u64, gfn, host_ctxt, 2); 247 DECLARE_REG(enum kvm_pgtable_prot, prot, host_ctxt, 3); 248 struct pkvm_hyp_vcpu *hyp_vcpu; 249 int ret = -EINVAL; 250 251 if (!is_protected_kvm_enabled()) 252 goto out; 253 254 hyp_vcpu = pkvm_get_loaded_hyp_vcpu(); 255 if (!hyp_vcpu || pkvm_hyp_vcpu_is_protected(hyp_vcpu)) 256 goto out; 257 258 ret = pkvm_refill_memcache(hyp_vcpu); 259 if (ret) 260 goto out; 261 262 ret = __pkvm_host_share_guest(pfn, gfn, hyp_vcpu, prot); 263 out: 264 cpu_reg(host_ctxt, 1) = ret; 265 } 266 267 static void handle___pkvm_host_unshare_guest(struct kvm_cpu_context *host_ctxt) 268 { 269 DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1); 270 DECLARE_REG(u64, gfn, host_ctxt, 2); 271 struct pkvm_hyp_vm *hyp_vm; 272 int ret = -EINVAL; 273 274 if (!is_protected_kvm_enabled()) 275 goto out; 276 277 hyp_vm = get_np_pkvm_hyp_vm(handle); 278 if (!hyp_vm) 279 goto out; 280 281 ret = __pkvm_host_unshare_guest(gfn, hyp_vm); 282 put_pkvm_hyp_vm(hyp_vm); 283 out: 284 cpu_reg(host_ctxt, 1) = ret; 285 } 286 287 static void handle___pkvm_host_relax_perms_guest(struct kvm_cpu_context *host_ctxt) 288 { 289 DECLARE_REG(u64, gfn, host_ctxt, 1); 290 DECLARE_REG(enum kvm_pgtable_prot, prot, host_ctxt, 2); 291 struct pkvm_hyp_vcpu *hyp_vcpu; 292 int ret = -EINVAL; 293 294 if (!is_protected_kvm_enabled()) 295 goto out; 296 297 hyp_vcpu = pkvm_get_loaded_hyp_vcpu(); 298 if (!hyp_vcpu || pkvm_hyp_vcpu_is_protected(hyp_vcpu)) 299 goto out; 300 301 ret = __pkvm_host_relax_perms_guest(gfn, hyp_vcpu, prot); 302 out: 303 cpu_reg(host_ctxt, 1) = ret; 304 } 305 306 static void handle___pkvm_host_wrprotect_guest(struct kvm_cpu_context *host_ctxt) 307 { 308 DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1); 309 DECLARE_REG(u64, gfn, host_ctxt, 2); 310 struct pkvm_hyp_vm *hyp_vm; 311 int ret = -EINVAL; 312 313 if (!is_protected_kvm_enabled()) 314 goto out; 315 316 hyp_vm = get_np_pkvm_hyp_vm(handle); 317 if (!hyp_vm) 318 goto out; 319 320 ret = __pkvm_host_wrprotect_guest(gfn, hyp_vm); 321 put_pkvm_hyp_vm(hyp_vm); 322 out: 323 cpu_reg(host_ctxt, 1) = ret; 324 } 325 326 static void handle___pkvm_host_test_clear_young_guest(struct kvm_cpu_context *host_ctxt) 327 { 328 DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1); 329 DECLARE_REG(u64, gfn, host_ctxt, 2); 330 DECLARE_REG(bool, mkold, host_ctxt, 3); 331 struct pkvm_hyp_vm *hyp_vm; 332 int ret = -EINVAL; 333 334 if (!is_protected_kvm_enabled()) 335 goto out; 336 337 hyp_vm = get_np_pkvm_hyp_vm(handle); 338 if (!hyp_vm) 339 goto out; 340 341 ret = __pkvm_host_test_clear_young_guest(gfn, mkold, hyp_vm); 342 put_pkvm_hyp_vm(hyp_vm); 343 out: 344 cpu_reg(host_ctxt, 1) = ret; 345 } 346 347 static void handle___pkvm_host_mkyoung_guest(struct kvm_cpu_context *host_ctxt) 348 { 349 DECLARE_REG(u64, gfn, host_ctxt, 1); 350 struct pkvm_hyp_vcpu *hyp_vcpu; 351 int ret = -EINVAL; 352 353 if (!is_protected_kvm_enabled()) 354 goto out; 355 356 hyp_vcpu = pkvm_get_loaded_hyp_vcpu(); 357 if (!hyp_vcpu || pkvm_hyp_vcpu_is_protected(hyp_vcpu)) 358 goto out; 359 360 ret = __pkvm_host_mkyoung_guest(gfn, hyp_vcpu); 361 out: 362 cpu_reg(host_ctxt, 1) = ret; 363 } 364 365 static void handle___kvm_adjust_pc(struct kvm_cpu_context *host_ctxt) 366 { 367 DECLARE_REG(struct kvm_vcpu *, vcpu, host_ctxt, 1); 368 369 __kvm_adjust_pc(kern_hyp_va(vcpu)); 370 } 371 372 static void handle___kvm_flush_vm_context(struct kvm_cpu_context *host_ctxt) 373 { 374 __kvm_flush_vm_context(); 375 } 376 377 static void handle___kvm_tlb_flush_vmid_ipa(struct kvm_cpu_context *host_ctxt) 378 { 379 DECLARE_REG(struct kvm_s2_mmu *, mmu, host_ctxt, 1); 380 DECLARE_REG(phys_addr_t, ipa, host_ctxt, 2); 381 DECLARE_REG(int, level, host_ctxt, 3); 382 383 __kvm_tlb_flush_vmid_ipa(kern_hyp_va(mmu), ipa, level); 384 } 385 386 static void handle___kvm_tlb_flush_vmid_ipa_nsh(struct kvm_cpu_context *host_ctxt) 387 { 388 DECLARE_REG(struct kvm_s2_mmu *, mmu, host_ctxt, 1); 389 DECLARE_REG(phys_addr_t, ipa, host_ctxt, 2); 390 DECLARE_REG(int, level, host_ctxt, 3); 391 392 __kvm_tlb_flush_vmid_ipa_nsh(kern_hyp_va(mmu), ipa, level); 393 } 394 395 static void 396 handle___kvm_tlb_flush_vmid_range(struct kvm_cpu_context *host_ctxt) 397 { 398 DECLARE_REG(struct kvm_s2_mmu *, mmu, host_ctxt, 1); 399 DECLARE_REG(phys_addr_t, start, host_ctxt, 2); 400 DECLARE_REG(unsigned long, pages, host_ctxt, 3); 401 402 __kvm_tlb_flush_vmid_range(kern_hyp_va(mmu), start, pages); 403 } 404 405 static void handle___kvm_tlb_flush_vmid(struct kvm_cpu_context *host_ctxt) 406 { 407 DECLARE_REG(struct kvm_s2_mmu *, mmu, host_ctxt, 1); 408 409 __kvm_tlb_flush_vmid(kern_hyp_va(mmu)); 410 } 411 412 static void handle___pkvm_tlb_flush_vmid(struct kvm_cpu_context *host_ctxt) 413 { 414 DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1); 415 struct pkvm_hyp_vm *hyp_vm; 416 417 if (!is_protected_kvm_enabled()) 418 return; 419 420 hyp_vm = get_np_pkvm_hyp_vm(handle); 421 if (!hyp_vm) 422 return; 423 424 __kvm_tlb_flush_vmid(&hyp_vm->kvm.arch.mmu); 425 put_pkvm_hyp_vm(hyp_vm); 426 } 427 428 static void handle___kvm_flush_cpu_context(struct kvm_cpu_context *host_ctxt) 429 { 430 DECLARE_REG(struct kvm_s2_mmu *, mmu, host_ctxt, 1); 431 432 __kvm_flush_cpu_context(kern_hyp_va(mmu)); 433 } 434 435 static void handle___kvm_timer_set_cntvoff(struct kvm_cpu_context *host_ctxt) 436 { 437 __kvm_timer_set_cntvoff(cpu_reg(host_ctxt, 1)); 438 } 439 440 static void handle___kvm_enable_ssbs(struct kvm_cpu_context *host_ctxt) 441 { 442 u64 tmp; 443 444 tmp = read_sysreg_el2(SYS_SCTLR); 445 tmp |= SCTLR_ELx_DSSBS; 446 write_sysreg_el2(tmp, SYS_SCTLR); 447 } 448 449 static void handle___vgic_v3_get_gic_config(struct kvm_cpu_context *host_ctxt) 450 { 451 cpu_reg(host_ctxt, 1) = __vgic_v3_get_gic_config(); 452 } 453 454 static void handle___vgic_v3_init_lrs(struct kvm_cpu_context *host_ctxt) 455 { 456 __vgic_v3_init_lrs(); 457 } 458 459 static void handle___vgic_v3_save_vmcr_aprs(struct kvm_cpu_context *host_ctxt) 460 { 461 DECLARE_REG(struct vgic_v3_cpu_if *, cpu_if, host_ctxt, 1); 462 463 __vgic_v3_save_vmcr_aprs(kern_hyp_va(cpu_if)); 464 } 465 466 static void handle___vgic_v3_restore_vmcr_aprs(struct kvm_cpu_context *host_ctxt) 467 { 468 DECLARE_REG(struct vgic_v3_cpu_if *, cpu_if, host_ctxt, 1); 469 470 __vgic_v3_restore_vmcr_aprs(kern_hyp_va(cpu_if)); 471 } 472 473 static void handle___pkvm_init(struct kvm_cpu_context *host_ctxt) 474 { 475 DECLARE_REG(phys_addr_t, phys, host_ctxt, 1); 476 DECLARE_REG(unsigned long, size, host_ctxt, 2); 477 DECLARE_REG(unsigned long, nr_cpus, host_ctxt, 3); 478 DECLARE_REG(unsigned long *, per_cpu_base, host_ctxt, 4); 479 DECLARE_REG(u32, hyp_va_bits, host_ctxt, 5); 480 481 /* 482 * __pkvm_init() will return only if an error occurred, otherwise it 483 * will tail-call in __pkvm_init_finalise() which will have to deal 484 * with the host context directly. 485 */ 486 cpu_reg(host_ctxt, 1) = __pkvm_init(phys, size, nr_cpus, per_cpu_base, 487 hyp_va_bits); 488 } 489 490 static void handle___pkvm_cpu_set_vector(struct kvm_cpu_context *host_ctxt) 491 { 492 DECLARE_REG(enum arm64_hyp_spectre_vector, slot, host_ctxt, 1); 493 494 cpu_reg(host_ctxt, 1) = pkvm_cpu_set_vector(slot); 495 } 496 497 static void handle___pkvm_host_share_hyp(struct kvm_cpu_context *host_ctxt) 498 { 499 DECLARE_REG(u64, pfn, host_ctxt, 1); 500 501 cpu_reg(host_ctxt, 1) = __pkvm_host_share_hyp(pfn); 502 } 503 504 static void handle___pkvm_host_unshare_hyp(struct kvm_cpu_context *host_ctxt) 505 { 506 DECLARE_REG(u64, pfn, host_ctxt, 1); 507 508 cpu_reg(host_ctxt, 1) = __pkvm_host_unshare_hyp(pfn); 509 } 510 511 static void handle___pkvm_create_private_mapping(struct kvm_cpu_context *host_ctxt) 512 { 513 DECLARE_REG(phys_addr_t, phys, host_ctxt, 1); 514 DECLARE_REG(size_t, size, host_ctxt, 2); 515 DECLARE_REG(enum kvm_pgtable_prot, prot, host_ctxt, 3); 516 517 /* 518 * __pkvm_create_private_mapping() populates a pointer with the 519 * hypervisor start address of the allocation. 520 * 521 * However, handle___pkvm_create_private_mapping() hypercall crosses the 522 * EL1/EL2 boundary so the pointer would not be valid in this context. 523 * 524 * Instead pass the allocation address as the return value (or return 525 * ERR_PTR() on failure). 526 */ 527 unsigned long haddr; 528 int err = __pkvm_create_private_mapping(phys, size, prot, &haddr); 529 530 if (err) 531 haddr = (unsigned long)ERR_PTR(err); 532 533 cpu_reg(host_ctxt, 1) = haddr; 534 } 535 536 static void handle___pkvm_prot_finalize(struct kvm_cpu_context *host_ctxt) 537 { 538 cpu_reg(host_ctxt, 1) = __pkvm_prot_finalize(); 539 } 540 541 static void handle___pkvm_init_vm(struct kvm_cpu_context *host_ctxt) 542 { 543 DECLARE_REG(struct kvm *, host_kvm, host_ctxt, 1); 544 DECLARE_REG(unsigned long, vm_hva, host_ctxt, 2); 545 DECLARE_REG(unsigned long, pgd_hva, host_ctxt, 3); 546 547 host_kvm = kern_hyp_va(host_kvm); 548 cpu_reg(host_ctxt, 1) = __pkvm_init_vm(host_kvm, vm_hva, pgd_hva); 549 } 550 551 static void handle___pkvm_init_vcpu(struct kvm_cpu_context *host_ctxt) 552 { 553 DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1); 554 DECLARE_REG(struct kvm_vcpu *, host_vcpu, host_ctxt, 2); 555 DECLARE_REG(unsigned long, vcpu_hva, host_ctxt, 3); 556 557 host_vcpu = kern_hyp_va(host_vcpu); 558 cpu_reg(host_ctxt, 1) = __pkvm_init_vcpu(handle, host_vcpu, vcpu_hva); 559 } 560 561 static void handle___pkvm_teardown_vm(struct kvm_cpu_context *host_ctxt) 562 { 563 DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1); 564 565 cpu_reg(host_ctxt, 1) = __pkvm_teardown_vm(handle); 566 } 567 568 typedef void (*hcall_t)(struct kvm_cpu_context *); 569 570 #define HANDLE_FUNC(x) [__KVM_HOST_SMCCC_FUNC_##x] = (hcall_t)handle_##x 571 572 static const hcall_t host_hcall[] = { 573 /* ___kvm_hyp_init */ 574 HANDLE_FUNC(__pkvm_init), 575 HANDLE_FUNC(__pkvm_create_private_mapping), 576 HANDLE_FUNC(__pkvm_cpu_set_vector), 577 HANDLE_FUNC(__kvm_enable_ssbs), 578 HANDLE_FUNC(__vgic_v3_init_lrs), 579 HANDLE_FUNC(__vgic_v3_get_gic_config), 580 HANDLE_FUNC(__pkvm_prot_finalize), 581 582 HANDLE_FUNC(__pkvm_host_share_hyp), 583 HANDLE_FUNC(__pkvm_host_unshare_hyp), 584 HANDLE_FUNC(__pkvm_host_share_guest), 585 HANDLE_FUNC(__pkvm_host_unshare_guest), 586 HANDLE_FUNC(__pkvm_host_relax_perms_guest), 587 HANDLE_FUNC(__pkvm_host_wrprotect_guest), 588 HANDLE_FUNC(__pkvm_host_test_clear_young_guest), 589 HANDLE_FUNC(__pkvm_host_mkyoung_guest), 590 HANDLE_FUNC(__kvm_adjust_pc), 591 HANDLE_FUNC(__kvm_vcpu_run), 592 HANDLE_FUNC(__kvm_flush_vm_context), 593 HANDLE_FUNC(__kvm_tlb_flush_vmid_ipa), 594 HANDLE_FUNC(__kvm_tlb_flush_vmid_ipa_nsh), 595 HANDLE_FUNC(__kvm_tlb_flush_vmid), 596 HANDLE_FUNC(__kvm_tlb_flush_vmid_range), 597 HANDLE_FUNC(__kvm_flush_cpu_context), 598 HANDLE_FUNC(__kvm_timer_set_cntvoff), 599 HANDLE_FUNC(__vgic_v3_save_vmcr_aprs), 600 HANDLE_FUNC(__vgic_v3_restore_vmcr_aprs), 601 HANDLE_FUNC(__pkvm_init_vm), 602 HANDLE_FUNC(__pkvm_init_vcpu), 603 HANDLE_FUNC(__pkvm_teardown_vm), 604 HANDLE_FUNC(__pkvm_vcpu_load), 605 HANDLE_FUNC(__pkvm_vcpu_put), 606 HANDLE_FUNC(__pkvm_tlb_flush_vmid), 607 }; 608 609 static void handle_host_hcall(struct kvm_cpu_context *host_ctxt) 610 { 611 DECLARE_REG(unsigned long, id, host_ctxt, 0); 612 unsigned long hcall_min = 0; 613 hcall_t hfn; 614 615 /* 616 * If pKVM has been initialised then reject any calls to the 617 * early "privileged" hypercalls. Note that we cannot reject 618 * calls to __pkvm_prot_finalize for two reasons: (1) The static 619 * key used to determine initialisation must be toggled prior to 620 * finalisation and (2) finalisation is performed on a per-CPU 621 * basis. This is all fine, however, since __pkvm_prot_finalize 622 * returns -EPERM after the first call for a given CPU. 623 */ 624 if (static_branch_unlikely(&kvm_protected_mode_initialized)) 625 hcall_min = __KVM_HOST_SMCCC_FUNC___pkvm_prot_finalize; 626 627 id &= ~ARM_SMCCC_CALL_HINTS; 628 id -= KVM_HOST_SMCCC_ID(0); 629 630 if (unlikely(id < hcall_min || id >= ARRAY_SIZE(host_hcall))) 631 goto inval; 632 633 hfn = host_hcall[id]; 634 if (unlikely(!hfn)) 635 goto inval; 636 637 cpu_reg(host_ctxt, 0) = SMCCC_RET_SUCCESS; 638 hfn(host_ctxt); 639 640 return; 641 inval: 642 cpu_reg(host_ctxt, 0) = SMCCC_RET_NOT_SUPPORTED; 643 } 644 645 static void default_host_smc_handler(struct kvm_cpu_context *host_ctxt) 646 { 647 __kvm_hyp_host_forward_smc(host_ctxt); 648 } 649 650 static void handle_host_smc(struct kvm_cpu_context *host_ctxt) 651 { 652 DECLARE_REG(u64, func_id, host_ctxt, 0); 653 bool handled; 654 655 func_id &= ~ARM_SMCCC_CALL_HINTS; 656 657 handled = kvm_host_psci_handler(host_ctxt, func_id); 658 if (!handled) 659 handled = kvm_host_ffa_handler(host_ctxt, func_id); 660 if (!handled) 661 default_host_smc_handler(host_ctxt); 662 663 /* SMC was trapped, move ELR past the current PC. */ 664 kvm_skip_host_instr(); 665 } 666 667 void handle_trap(struct kvm_cpu_context *host_ctxt) 668 { 669 u64 esr = read_sysreg_el2(SYS_ESR); 670 671 switch (ESR_ELx_EC(esr)) { 672 case ESR_ELx_EC_HVC64: 673 handle_host_hcall(host_ctxt); 674 break; 675 case ESR_ELx_EC_SMC64: 676 handle_host_smc(host_ctxt); 677 break; 678 case ESR_ELx_EC_SVE: 679 cpacr_clear_set(0, CPACR_EL1_ZEN); 680 isb(); 681 sve_cond_update_zcr_vq(sve_vq_from_vl(kvm_host_sve_max_vl) - 1, 682 SYS_ZCR_EL2); 683 break; 684 case ESR_ELx_EC_IABT_LOW: 685 case ESR_ELx_EC_DABT_LOW: 686 handle_host_mem_abort(host_ctxt); 687 break; 688 default: 689 BUG(); 690 } 691 } 692