1 // SPDX-License-Identifier: GPL-2.0-only 2 /* 3 * Copyright (C) 2020 - Google Inc 4 * Author: Andrew Scull <ascull@google.com> 5 */ 6 7 #include <hyp/adjust_pc.h> 8 9 #include <asm/pgtable-types.h> 10 #include <asm/kvm_asm.h> 11 #include <asm/kvm_emulate.h> 12 #include <asm/kvm_host.h> 13 #include <asm/kvm_hyp.h> 14 #include <asm/kvm_mmu.h> 15 16 #include <nvhe/ffa.h> 17 #include <nvhe/mem_protect.h> 18 #include <nvhe/mm.h> 19 #include <nvhe/pkvm.h> 20 #include <nvhe/trap_handler.h> 21 22 DEFINE_PER_CPU(struct kvm_nvhe_init_params, kvm_init_params); 23 24 void __kvm_hyp_host_forward_smc(struct kvm_cpu_context *host_ctxt); 25 26 static void __hyp_sve_save_guest(struct kvm_vcpu *vcpu) 27 { 28 __vcpu_sys_reg(vcpu, ZCR_EL1) = read_sysreg_el1(SYS_ZCR); 29 /* 30 * On saving/restoring guest sve state, always use the maximum VL for 31 * the guest. The layout of the data when saving the sve state depends 32 * on the VL, so use a consistent (i.e., the maximum) guest VL. 33 */ 34 sve_cond_update_zcr_vq(vcpu_sve_max_vq(vcpu) - 1, SYS_ZCR_EL2); 35 __sve_save_state(vcpu_sve_pffr(vcpu), &vcpu->arch.ctxt.fp_regs.fpsr, true); 36 write_sysreg_s(sve_vq_from_vl(kvm_host_sve_max_vl) - 1, SYS_ZCR_EL2); 37 } 38 39 static void __hyp_sve_restore_host(void) 40 { 41 struct cpu_sve_state *sve_state = *host_data_ptr(sve_state); 42 43 /* 44 * On saving/restoring host sve state, always use the maximum VL for 45 * the host. The layout of the data when saving the sve state depends 46 * on the VL, so use a consistent (i.e., the maximum) host VL. 47 * 48 * Note that this constrains the PE to the maximum shared VL 49 * that was discovered, if we wish to use larger VLs this will 50 * need to be revisited. 51 */ 52 write_sysreg_s(sve_vq_from_vl(kvm_host_sve_max_vl) - 1, SYS_ZCR_EL2); 53 __sve_restore_state(sve_state->sve_regs + sve_ffr_offset(kvm_host_sve_max_vl), 54 &sve_state->fpsr, 55 true); 56 write_sysreg_el1(sve_state->zcr_el1, SYS_ZCR); 57 } 58 59 static void fpsimd_sve_flush(void) 60 { 61 *host_data_ptr(fp_owner) = FP_STATE_HOST_OWNED; 62 } 63 64 static void fpsimd_sve_sync(struct kvm_vcpu *vcpu) 65 { 66 bool has_fpmr; 67 68 if (!guest_owns_fp_regs()) 69 return; 70 71 cpacr_clear_set(0, CPACR_EL1_FPEN | CPACR_EL1_ZEN); 72 isb(); 73 74 if (vcpu_has_sve(vcpu)) 75 __hyp_sve_save_guest(vcpu); 76 else 77 __fpsimd_save_state(&vcpu->arch.ctxt.fp_regs); 78 79 has_fpmr = kvm_has_fpmr(kern_hyp_va(vcpu->kvm)); 80 if (has_fpmr) 81 __vcpu_sys_reg(vcpu, FPMR) = read_sysreg_s(SYS_FPMR); 82 83 if (system_supports_sve()) 84 __hyp_sve_restore_host(); 85 else 86 __fpsimd_restore_state(*host_data_ptr(fpsimd_state)); 87 88 if (has_fpmr) 89 write_sysreg_s(*host_data_ptr(fpmr), SYS_FPMR); 90 91 *host_data_ptr(fp_owner) = FP_STATE_HOST_OWNED; 92 } 93 94 static void flush_hyp_vcpu(struct pkvm_hyp_vcpu *hyp_vcpu) 95 { 96 struct kvm_vcpu *host_vcpu = hyp_vcpu->host_vcpu; 97 98 fpsimd_sve_flush(); 99 100 hyp_vcpu->vcpu.arch.ctxt = host_vcpu->arch.ctxt; 101 102 hyp_vcpu->vcpu.arch.sve_state = kern_hyp_va(host_vcpu->arch.sve_state); 103 /* Limit guest vector length to the maximum supported by the host. */ 104 hyp_vcpu->vcpu.arch.sve_max_vl = min(host_vcpu->arch.sve_max_vl, kvm_host_sve_max_vl); 105 106 hyp_vcpu->vcpu.arch.mdcr_el2 = host_vcpu->arch.mdcr_el2; 107 hyp_vcpu->vcpu.arch.hcr_el2 &= ~(HCR_TWI | HCR_TWE); 108 hyp_vcpu->vcpu.arch.hcr_el2 |= READ_ONCE(host_vcpu->arch.hcr_el2) & 109 (HCR_TWI | HCR_TWE); 110 111 hyp_vcpu->vcpu.arch.iflags = host_vcpu->arch.iflags; 112 113 hyp_vcpu->vcpu.arch.vsesr_el2 = host_vcpu->arch.vsesr_el2; 114 115 hyp_vcpu->vcpu.arch.vgic_cpu.vgic_v3 = host_vcpu->arch.vgic_cpu.vgic_v3; 116 } 117 118 static void sync_hyp_vcpu(struct pkvm_hyp_vcpu *hyp_vcpu) 119 { 120 struct kvm_vcpu *host_vcpu = hyp_vcpu->host_vcpu; 121 struct vgic_v3_cpu_if *hyp_cpu_if = &hyp_vcpu->vcpu.arch.vgic_cpu.vgic_v3; 122 struct vgic_v3_cpu_if *host_cpu_if = &host_vcpu->arch.vgic_cpu.vgic_v3; 123 unsigned int i; 124 125 fpsimd_sve_sync(&hyp_vcpu->vcpu); 126 127 host_vcpu->arch.ctxt = hyp_vcpu->vcpu.arch.ctxt; 128 129 host_vcpu->arch.hcr_el2 = hyp_vcpu->vcpu.arch.hcr_el2; 130 131 host_vcpu->arch.fault = hyp_vcpu->vcpu.arch.fault; 132 133 host_vcpu->arch.iflags = hyp_vcpu->vcpu.arch.iflags; 134 135 host_cpu_if->vgic_hcr = hyp_cpu_if->vgic_hcr; 136 for (i = 0; i < hyp_cpu_if->used_lrs; ++i) 137 host_cpu_if->vgic_lr[i] = hyp_cpu_if->vgic_lr[i]; 138 } 139 140 static void handle___pkvm_vcpu_load(struct kvm_cpu_context *host_ctxt) 141 { 142 DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1); 143 DECLARE_REG(unsigned int, vcpu_idx, host_ctxt, 2); 144 DECLARE_REG(u64, hcr_el2, host_ctxt, 3); 145 struct pkvm_hyp_vcpu *hyp_vcpu; 146 147 if (!is_protected_kvm_enabled()) 148 return; 149 150 hyp_vcpu = pkvm_load_hyp_vcpu(handle, vcpu_idx); 151 if (!hyp_vcpu) 152 return; 153 154 if (pkvm_hyp_vcpu_is_protected(hyp_vcpu)) { 155 /* Propagate WFx trapping flags */ 156 hyp_vcpu->vcpu.arch.hcr_el2 &= ~(HCR_TWE | HCR_TWI); 157 hyp_vcpu->vcpu.arch.hcr_el2 |= hcr_el2 & (HCR_TWE | HCR_TWI); 158 } 159 } 160 161 static void handle___pkvm_vcpu_put(struct kvm_cpu_context *host_ctxt) 162 { 163 struct pkvm_hyp_vcpu *hyp_vcpu; 164 165 if (!is_protected_kvm_enabled()) 166 return; 167 168 hyp_vcpu = pkvm_get_loaded_hyp_vcpu(); 169 if (hyp_vcpu) 170 pkvm_put_hyp_vcpu(hyp_vcpu); 171 } 172 173 static void handle___kvm_vcpu_run(struct kvm_cpu_context *host_ctxt) 174 { 175 DECLARE_REG(struct kvm_vcpu *, host_vcpu, host_ctxt, 1); 176 int ret; 177 178 if (unlikely(is_protected_kvm_enabled())) { 179 struct pkvm_hyp_vcpu *hyp_vcpu = pkvm_get_loaded_hyp_vcpu(); 180 181 /* 182 * KVM (and pKVM) doesn't support SME guests for now, and 183 * ensures that SME features aren't enabled in pstate when 184 * loading a vcpu. Therefore, if SME features enabled the host 185 * is misbehaving. 186 */ 187 if (unlikely(system_supports_sme() && read_sysreg_s(SYS_SVCR))) { 188 ret = -EINVAL; 189 goto out; 190 } 191 192 if (!hyp_vcpu) { 193 ret = -EINVAL; 194 goto out; 195 } 196 197 flush_hyp_vcpu(hyp_vcpu); 198 199 ret = __kvm_vcpu_run(&hyp_vcpu->vcpu); 200 201 sync_hyp_vcpu(hyp_vcpu); 202 } else { 203 /* The host is fully trusted, run its vCPU directly. */ 204 ret = __kvm_vcpu_run(kern_hyp_va(host_vcpu)); 205 } 206 out: 207 cpu_reg(host_ctxt, 1) = ret; 208 } 209 210 static int pkvm_refill_memcache(struct pkvm_hyp_vcpu *hyp_vcpu) 211 { 212 struct kvm_vcpu *host_vcpu = hyp_vcpu->host_vcpu; 213 214 return refill_memcache(&hyp_vcpu->vcpu.arch.pkvm_memcache, 215 host_vcpu->arch.pkvm_memcache.nr_pages, 216 &host_vcpu->arch.pkvm_memcache); 217 } 218 219 static void handle___pkvm_host_share_guest(struct kvm_cpu_context *host_ctxt) 220 { 221 DECLARE_REG(u64, pfn, host_ctxt, 1); 222 DECLARE_REG(u64, gfn, host_ctxt, 2); 223 DECLARE_REG(enum kvm_pgtable_prot, prot, host_ctxt, 3); 224 struct pkvm_hyp_vcpu *hyp_vcpu; 225 int ret = -EINVAL; 226 227 if (!is_protected_kvm_enabled()) 228 goto out; 229 230 hyp_vcpu = pkvm_get_loaded_hyp_vcpu(); 231 if (!hyp_vcpu || pkvm_hyp_vcpu_is_protected(hyp_vcpu)) 232 goto out; 233 234 ret = pkvm_refill_memcache(hyp_vcpu); 235 if (ret) 236 goto out; 237 238 ret = __pkvm_host_share_guest(pfn, gfn, hyp_vcpu, prot); 239 out: 240 cpu_reg(host_ctxt, 1) = ret; 241 } 242 243 static void handle___pkvm_host_unshare_guest(struct kvm_cpu_context *host_ctxt) 244 { 245 DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1); 246 DECLARE_REG(u64, gfn, host_ctxt, 2); 247 struct pkvm_hyp_vm *hyp_vm; 248 int ret = -EINVAL; 249 250 if (!is_protected_kvm_enabled()) 251 goto out; 252 253 hyp_vm = get_np_pkvm_hyp_vm(handle); 254 if (!hyp_vm) 255 goto out; 256 257 ret = __pkvm_host_unshare_guest(gfn, hyp_vm); 258 put_pkvm_hyp_vm(hyp_vm); 259 out: 260 cpu_reg(host_ctxt, 1) = ret; 261 } 262 263 static void handle___pkvm_host_relax_perms_guest(struct kvm_cpu_context *host_ctxt) 264 { 265 DECLARE_REG(u64, gfn, host_ctxt, 1); 266 DECLARE_REG(enum kvm_pgtable_prot, prot, host_ctxt, 2); 267 struct pkvm_hyp_vcpu *hyp_vcpu; 268 int ret = -EINVAL; 269 270 if (!is_protected_kvm_enabled()) 271 goto out; 272 273 hyp_vcpu = pkvm_get_loaded_hyp_vcpu(); 274 if (!hyp_vcpu || pkvm_hyp_vcpu_is_protected(hyp_vcpu)) 275 goto out; 276 277 ret = __pkvm_host_relax_perms_guest(gfn, hyp_vcpu, prot); 278 out: 279 cpu_reg(host_ctxt, 1) = ret; 280 } 281 282 static void handle___pkvm_host_wrprotect_guest(struct kvm_cpu_context *host_ctxt) 283 { 284 DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1); 285 DECLARE_REG(u64, gfn, host_ctxt, 2); 286 struct pkvm_hyp_vm *hyp_vm; 287 int ret = -EINVAL; 288 289 if (!is_protected_kvm_enabled()) 290 goto out; 291 292 hyp_vm = get_np_pkvm_hyp_vm(handle); 293 if (!hyp_vm) 294 goto out; 295 296 ret = __pkvm_host_wrprotect_guest(gfn, hyp_vm); 297 put_pkvm_hyp_vm(hyp_vm); 298 out: 299 cpu_reg(host_ctxt, 1) = ret; 300 } 301 302 static void handle___pkvm_host_test_clear_young_guest(struct kvm_cpu_context *host_ctxt) 303 { 304 DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1); 305 DECLARE_REG(u64, gfn, host_ctxt, 2); 306 DECLARE_REG(bool, mkold, host_ctxt, 3); 307 struct pkvm_hyp_vm *hyp_vm; 308 int ret = -EINVAL; 309 310 if (!is_protected_kvm_enabled()) 311 goto out; 312 313 hyp_vm = get_np_pkvm_hyp_vm(handle); 314 if (!hyp_vm) 315 goto out; 316 317 ret = __pkvm_host_test_clear_young_guest(gfn, mkold, hyp_vm); 318 put_pkvm_hyp_vm(hyp_vm); 319 out: 320 cpu_reg(host_ctxt, 1) = ret; 321 } 322 323 static void handle___pkvm_host_mkyoung_guest(struct kvm_cpu_context *host_ctxt) 324 { 325 DECLARE_REG(u64, gfn, host_ctxt, 1); 326 struct pkvm_hyp_vcpu *hyp_vcpu; 327 int ret = -EINVAL; 328 329 if (!is_protected_kvm_enabled()) 330 goto out; 331 332 hyp_vcpu = pkvm_get_loaded_hyp_vcpu(); 333 if (!hyp_vcpu || pkvm_hyp_vcpu_is_protected(hyp_vcpu)) 334 goto out; 335 336 ret = __pkvm_host_mkyoung_guest(gfn, hyp_vcpu); 337 out: 338 cpu_reg(host_ctxt, 1) = ret; 339 } 340 341 static void handle___kvm_adjust_pc(struct kvm_cpu_context *host_ctxt) 342 { 343 DECLARE_REG(struct kvm_vcpu *, vcpu, host_ctxt, 1); 344 345 __kvm_adjust_pc(kern_hyp_va(vcpu)); 346 } 347 348 static void handle___kvm_flush_vm_context(struct kvm_cpu_context *host_ctxt) 349 { 350 __kvm_flush_vm_context(); 351 } 352 353 static void handle___kvm_tlb_flush_vmid_ipa(struct kvm_cpu_context *host_ctxt) 354 { 355 DECLARE_REG(struct kvm_s2_mmu *, mmu, host_ctxt, 1); 356 DECLARE_REG(phys_addr_t, ipa, host_ctxt, 2); 357 DECLARE_REG(int, level, host_ctxt, 3); 358 359 __kvm_tlb_flush_vmid_ipa(kern_hyp_va(mmu), ipa, level); 360 } 361 362 static void handle___kvm_tlb_flush_vmid_ipa_nsh(struct kvm_cpu_context *host_ctxt) 363 { 364 DECLARE_REG(struct kvm_s2_mmu *, mmu, host_ctxt, 1); 365 DECLARE_REG(phys_addr_t, ipa, host_ctxt, 2); 366 DECLARE_REG(int, level, host_ctxt, 3); 367 368 __kvm_tlb_flush_vmid_ipa_nsh(kern_hyp_va(mmu), ipa, level); 369 } 370 371 static void 372 handle___kvm_tlb_flush_vmid_range(struct kvm_cpu_context *host_ctxt) 373 { 374 DECLARE_REG(struct kvm_s2_mmu *, mmu, host_ctxt, 1); 375 DECLARE_REG(phys_addr_t, start, host_ctxt, 2); 376 DECLARE_REG(unsigned long, pages, host_ctxt, 3); 377 378 __kvm_tlb_flush_vmid_range(kern_hyp_va(mmu), start, pages); 379 } 380 381 static void handle___kvm_tlb_flush_vmid(struct kvm_cpu_context *host_ctxt) 382 { 383 DECLARE_REG(struct kvm_s2_mmu *, mmu, host_ctxt, 1); 384 385 __kvm_tlb_flush_vmid(kern_hyp_va(mmu)); 386 } 387 388 static void handle___pkvm_tlb_flush_vmid(struct kvm_cpu_context *host_ctxt) 389 { 390 DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1); 391 struct pkvm_hyp_vm *hyp_vm; 392 393 if (!is_protected_kvm_enabled()) 394 return; 395 396 hyp_vm = get_np_pkvm_hyp_vm(handle); 397 if (!hyp_vm) 398 return; 399 400 __kvm_tlb_flush_vmid(&hyp_vm->kvm.arch.mmu); 401 put_pkvm_hyp_vm(hyp_vm); 402 } 403 404 static void handle___kvm_flush_cpu_context(struct kvm_cpu_context *host_ctxt) 405 { 406 DECLARE_REG(struct kvm_s2_mmu *, mmu, host_ctxt, 1); 407 408 __kvm_flush_cpu_context(kern_hyp_va(mmu)); 409 } 410 411 static void handle___kvm_timer_set_cntvoff(struct kvm_cpu_context *host_ctxt) 412 { 413 __kvm_timer_set_cntvoff(cpu_reg(host_ctxt, 1)); 414 } 415 416 static void handle___kvm_enable_ssbs(struct kvm_cpu_context *host_ctxt) 417 { 418 u64 tmp; 419 420 tmp = read_sysreg_el2(SYS_SCTLR); 421 tmp |= SCTLR_ELx_DSSBS; 422 write_sysreg_el2(tmp, SYS_SCTLR); 423 } 424 425 static void handle___vgic_v3_get_gic_config(struct kvm_cpu_context *host_ctxt) 426 { 427 cpu_reg(host_ctxt, 1) = __vgic_v3_get_gic_config(); 428 } 429 430 static void handle___vgic_v3_init_lrs(struct kvm_cpu_context *host_ctxt) 431 { 432 __vgic_v3_init_lrs(); 433 } 434 435 static void handle___vgic_v3_save_vmcr_aprs(struct kvm_cpu_context *host_ctxt) 436 { 437 DECLARE_REG(struct vgic_v3_cpu_if *, cpu_if, host_ctxt, 1); 438 439 __vgic_v3_save_vmcr_aprs(kern_hyp_va(cpu_if)); 440 } 441 442 static void handle___vgic_v3_restore_vmcr_aprs(struct kvm_cpu_context *host_ctxt) 443 { 444 DECLARE_REG(struct vgic_v3_cpu_if *, cpu_if, host_ctxt, 1); 445 446 __vgic_v3_restore_vmcr_aprs(kern_hyp_va(cpu_if)); 447 } 448 449 static void handle___pkvm_init(struct kvm_cpu_context *host_ctxt) 450 { 451 DECLARE_REG(phys_addr_t, phys, host_ctxt, 1); 452 DECLARE_REG(unsigned long, size, host_ctxt, 2); 453 DECLARE_REG(unsigned long, nr_cpus, host_ctxt, 3); 454 DECLARE_REG(unsigned long *, per_cpu_base, host_ctxt, 4); 455 DECLARE_REG(u32, hyp_va_bits, host_ctxt, 5); 456 457 /* 458 * __pkvm_init() will return only if an error occurred, otherwise it 459 * will tail-call in __pkvm_init_finalise() which will have to deal 460 * with the host context directly. 461 */ 462 cpu_reg(host_ctxt, 1) = __pkvm_init(phys, size, nr_cpus, per_cpu_base, 463 hyp_va_bits); 464 } 465 466 static void handle___pkvm_cpu_set_vector(struct kvm_cpu_context *host_ctxt) 467 { 468 DECLARE_REG(enum arm64_hyp_spectre_vector, slot, host_ctxt, 1); 469 470 cpu_reg(host_ctxt, 1) = pkvm_cpu_set_vector(slot); 471 } 472 473 static void handle___pkvm_host_share_hyp(struct kvm_cpu_context *host_ctxt) 474 { 475 DECLARE_REG(u64, pfn, host_ctxt, 1); 476 477 cpu_reg(host_ctxt, 1) = __pkvm_host_share_hyp(pfn); 478 } 479 480 static void handle___pkvm_host_unshare_hyp(struct kvm_cpu_context *host_ctxt) 481 { 482 DECLARE_REG(u64, pfn, host_ctxt, 1); 483 484 cpu_reg(host_ctxt, 1) = __pkvm_host_unshare_hyp(pfn); 485 } 486 487 static void handle___pkvm_create_private_mapping(struct kvm_cpu_context *host_ctxt) 488 { 489 DECLARE_REG(phys_addr_t, phys, host_ctxt, 1); 490 DECLARE_REG(size_t, size, host_ctxt, 2); 491 DECLARE_REG(enum kvm_pgtable_prot, prot, host_ctxt, 3); 492 493 /* 494 * __pkvm_create_private_mapping() populates a pointer with the 495 * hypervisor start address of the allocation. 496 * 497 * However, handle___pkvm_create_private_mapping() hypercall crosses the 498 * EL1/EL2 boundary so the pointer would not be valid in this context. 499 * 500 * Instead pass the allocation address as the return value (or return 501 * ERR_PTR() on failure). 502 */ 503 unsigned long haddr; 504 int err = __pkvm_create_private_mapping(phys, size, prot, &haddr); 505 506 if (err) 507 haddr = (unsigned long)ERR_PTR(err); 508 509 cpu_reg(host_ctxt, 1) = haddr; 510 } 511 512 static void handle___pkvm_prot_finalize(struct kvm_cpu_context *host_ctxt) 513 { 514 cpu_reg(host_ctxt, 1) = __pkvm_prot_finalize(); 515 } 516 517 static void handle___pkvm_init_vm(struct kvm_cpu_context *host_ctxt) 518 { 519 DECLARE_REG(struct kvm *, host_kvm, host_ctxt, 1); 520 DECLARE_REG(unsigned long, vm_hva, host_ctxt, 2); 521 DECLARE_REG(unsigned long, pgd_hva, host_ctxt, 3); 522 523 host_kvm = kern_hyp_va(host_kvm); 524 cpu_reg(host_ctxt, 1) = __pkvm_init_vm(host_kvm, vm_hva, pgd_hva); 525 } 526 527 static void handle___pkvm_init_vcpu(struct kvm_cpu_context *host_ctxt) 528 { 529 DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1); 530 DECLARE_REG(struct kvm_vcpu *, host_vcpu, host_ctxt, 2); 531 DECLARE_REG(unsigned long, vcpu_hva, host_ctxt, 3); 532 533 host_vcpu = kern_hyp_va(host_vcpu); 534 cpu_reg(host_ctxt, 1) = __pkvm_init_vcpu(handle, host_vcpu, vcpu_hva); 535 } 536 537 static void handle___pkvm_teardown_vm(struct kvm_cpu_context *host_ctxt) 538 { 539 DECLARE_REG(pkvm_handle_t, handle, host_ctxt, 1); 540 541 cpu_reg(host_ctxt, 1) = __pkvm_teardown_vm(handle); 542 } 543 544 typedef void (*hcall_t)(struct kvm_cpu_context *); 545 546 #define HANDLE_FUNC(x) [__KVM_HOST_SMCCC_FUNC_##x] = (hcall_t)handle_##x 547 548 static const hcall_t host_hcall[] = { 549 /* ___kvm_hyp_init */ 550 HANDLE_FUNC(__pkvm_init), 551 HANDLE_FUNC(__pkvm_create_private_mapping), 552 HANDLE_FUNC(__pkvm_cpu_set_vector), 553 HANDLE_FUNC(__kvm_enable_ssbs), 554 HANDLE_FUNC(__vgic_v3_init_lrs), 555 HANDLE_FUNC(__vgic_v3_get_gic_config), 556 HANDLE_FUNC(__pkvm_prot_finalize), 557 558 HANDLE_FUNC(__pkvm_host_share_hyp), 559 HANDLE_FUNC(__pkvm_host_unshare_hyp), 560 HANDLE_FUNC(__pkvm_host_share_guest), 561 HANDLE_FUNC(__pkvm_host_unshare_guest), 562 HANDLE_FUNC(__pkvm_host_relax_perms_guest), 563 HANDLE_FUNC(__pkvm_host_wrprotect_guest), 564 HANDLE_FUNC(__pkvm_host_test_clear_young_guest), 565 HANDLE_FUNC(__pkvm_host_mkyoung_guest), 566 HANDLE_FUNC(__kvm_adjust_pc), 567 HANDLE_FUNC(__kvm_vcpu_run), 568 HANDLE_FUNC(__kvm_flush_vm_context), 569 HANDLE_FUNC(__kvm_tlb_flush_vmid_ipa), 570 HANDLE_FUNC(__kvm_tlb_flush_vmid_ipa_nsh), 571 HANDLE_FUNC(__kvm_tlb_flush_vmid), 572 HANDLE_FUNC(__kvm_tlb_flush_vmid_range), 573 HANDLE_FUNC(__kvm_flush_cpu_context), 574 HANDLE_FUNC(__kvm_timer_set_cntvoff), 575 HANDLE_FUNC(__vgic_v3_save_vmcr_aprs), 576 HANDLE_FUNC(__vgic_v3_restore_vmcr_aprs), 577 HANDLE_FUNC(__pkvm_init_vm), 578 HANDLE_FUNC(__pkvm_init_vcpu), 579 HANDLE_FUNC(__pkvm_teardown_vm), 580 HANDLE_FUNC(__pkvm_vcpu_load), 581 HANDLE_FUNC(__pkvm_vcpu_put), 582 HANDLE_FUNC(__pkvm_tlb_flush_vmid), 583 }; 584 585 static void handle_host_hcall(struct kvm_cpu_context *host_ctxt) 586 { 587 DECLARE_REG(unsigned long, id, host_ctxt, 0); 588 unsigned long hcall_min = 0; 589 hcall_t hfn; 590 591 /* 592 * If pKVM has been initialised then reject any calls to the 593 * early "privileged" hypercalls. Note that we cannot reject 594 * calls to __pkvm_prot_finalize for two reasons: (1) The static 595 * key used to determine initialisation must be toggled prior to 596 * finalisation and (2) finalisation is performed on a per-CPU 597 * basis. This is all fine, however, since __pkvm_prot_finalize 598 * returns -EPERM after the first call for a given CPU. 599 */ 600 if (static_branch_unlikely(&kvm_protected_mode_initialized)) 601 hcall_min = __KVM_HOST_SMCCC_FUNC___pkvm_prot_finalize; 602 603 id &= ~ARM_SMCCC_CALL_HINTS; 604 id -= KVM_HOST_SMCCC_ID(0); 605 606 if (unlikely(id < hcall_min || id >= ARRAY_SIZE(host_hcall))) 607 goto inval; 608 609 hfn = host_hcall[id]; 610 if (unlikely(!hfn)) 611 goto inval; 612 613 cpu_reg(host_ctxt, 0) = SMCCC_RET_SUCCESS; 614 hfn(host_ctxt); 615 616 return; 617 inval: 618 cpu_reg(host_ctxt, 0) = SMCCC_RET_NOT_SUPPORTED; 619 } 620 621 static void default_host_smc_handler(struct kvm_cpu_context *host_ctxt) 622 { 623 __kvm_hyp_host_forward_smc(host_ctxt); 624 } 625 626 static void handle_host_smc(struct kvm_cpu_context *host_ctxt) 627 { 628 DECLARE_REG(u64, func_id, host_ctxt, 0); 629 bool handled; 630 631 func_id &= ~ARM_SMCCC_CALL_HINTS; 632 633 handled = kvm_host_psci_handler(host_ctxt, func_id); 634 if (!handled) 635 handled = kvm_host_ffa_handler(host_ctxt, func_id); 636 if (!handled) 637 default_host_smc_handler(host_ctxt); 638 639 /* SMC was trapped, move ELR past the current PC. */ 640 kvm_skip_host_instr(); 641 } 642 643 void handle_trap(struct kvm_cpu_context *host_ctxt) 644 { 645 u64 esr = read_sysreg_el2(SYS_ESR); 646 647 switch (ESR_ELx_EC(esr)) { 648 case ESR_ELx_EC_HVC64: 649 handle_host_hcall(host_ctxt); 650 break; 651 case ESR_ELx_EC_SMC64: 652 handle_host_smc(host_ctxt); 653 break; 654 case ESR_ELx_EC_SVE: 655 cpacr_clear_set(0, CPACR_EL1_ZEN); 656 isb(); 657 sve_cond_update_zcr_vq(sve_vq_from_vl(kvm_host_sve_max_vl) - 1, 658 SYS_ZCR_EL2); 659 break; 660 case ESR_ELx_EC_IABT_LOW: 661 case ESR_ELx_EC_DABT_LOW: 662 handle_host_mem_abort(host_ctxt); 663 break; 664 default: 665 BUG(); 666 } 667 } 668