arch/s390/kvm/intercept.c

   1 // SPDX-License-Identifier: GPL-2.0
   2 /*
   3  * in-kernel handling for sie intercepts
   4  *
   5  * Copyright IBM Corp. 2008, 2020
   6  *
   7  *    Author(s): Carsten Otte <cotte@de.ibm.com>
   8  *               Christian Borntraeger <borntraeger@de.ibm.com>
   9  */
  10
  11 #include <linux/kvm_host.h>
  12 #include <linux/errno.h>
  13 #include <linux/pagemap.h>
  14
  15 #include <asm/asm-offsets.h>
  16 #include <asm/irq.h>
  17 #include <asm/sysinfo.h>
  18 #include <asm/uv.h>
  19
  20 #include "kvm-s390.h"
  21 #include "gaccess.h"
  22 #include "trace.h"
  23 #include "trace-s390.h"
  24
  25 u8 kvm_s390_get_ilen(struct kvm_vcpu *vcpu)
  26 {
  27         struct kvm_s390_sie_block *sie_block = vcpu->arch.sie_block;
  28         u8 ilen = 0;
  29
  30         switch (vcpu->arch.sie_block->icptcode) {
  31         case ICPT_INST:
  32         case ICPT_INSTPROGI:
  33         case ICPT_OPEREXC:
  34         case ICPT_PARTEXEC:
  35         case ICPT_IOINST:
  36                 /* instruction only stored for these icptcodes */
  37                 ilen = insn_length(vcpu->arch.sie_block->ipa >> 8);
  38                 /* Use the length of the EXECUTE instruction if necessary */
  39                 if (sie_block->icptstatus & 1) {
  40                         ilen = (sie_block->icptstatus >> 4) & 0x6;
  41                         if (!ilen)
  42                                 ilen = 4;
  43                 }
  44                 break;
  45         case ICPT_PROGI:
  46                 /* bit 1+2 of pgmilc are the ilc, so we directly get ilen */
  47                 ilen = vcpu->arch.sie_block->pgmilc & 0x6;
  48                 break;
  49         }
  50         return ilen;
  51 }
  52
  53 static int handle_stop(struct kvm_vcpu *vcpu)
  54 {
  55         struct kvm_s390_local_interrupt *li = &vcpu->arch.local_int;
  56         int rc = 0;
  57         uint8_t flags, stop_pending;
  58
  59         vcpu->stat.exit_stop_request++;
  60
  61         /* delay the stop if any non-stop irq is pending */
  62         if (kvm_s390_vcpu_has_irq(vcpu, 1))
  63                 return 0;
  64
  65         /* avoid races with the injection/SIGP STOP code */
  66         spin_lock(&li->lock);
  67         flags = li->irq.stop.flags;
  68         stop_pending = kvm_s390_is_stop_irq_pending(vcpu);
  69         spin_unlock(&li->lock);
  70
  71         trace_kvm_s390_stop_request(stop_pending, flags);
  72         if (!stop_pending)
  73                 return 0;
  74
  75         if (flags & KVM_S390_STOP_FLAG_STORE_STATUS) {
  76                 rc = kvm_s390_vcpu_store_status(vcpu,
  77                                                 KVM_S390_STORE_STATUS_NOADDR);
  78                 if (rc)
  79                         return rc;
  80         }
  81
  82         /*
  83          * no need to check the return value of vcpu_stop as it can only have
  84          * an error for protvirt, but protvirt means user cpu state
  85          */
  86         if (!kvm_s390_user_cpu_state_ctrl(vcpu->kvm))
  87                 kvm_s390_vcpu_stop(vcpu);
  88         return -EOPNOTSUPP;
  89 }
  90
  91 static int handle_validity(struct kvm_vcpu *vcpu)
  92 {
  93         int viwhy = vcpu->arch.sie_block->ipb >> 16;
  94
  95         vcpu->stat.exit_validity++;
  96         trace_kvm_s390_intercept_validity(vcpu, viwhy);
  97         KVM_EVENT(3, "validity intercept 0x%x for pid %u (kvm 0x%pK)", viwhy,
  98                   current->pid, vcpu->kvm);
  99
 100         /* do not warn on invalid runtime instrumentation mode */
 101         WARN_ONCE(viwhy != 0x44, "kvm: unhandled validity intercept 0x%x\n",
 102                   viwhy);
 103         return -EINVAL;
 104 }
 105
 106 static int handle_instruction(struct kvm_vcpu *vcpu)
 107 {
 108         vcpu->stat.exit_instruction++;
 109         trace_kvm_s390_intercept_instruction(vcpu,
 110                                              vcpu->arch.sie_block->ipa,
 111                                              vcpu->arch.sie_block->ipb);
 112
 113         switch (vcpu->arch.sie_block->ipa >> 8) {
 114         case 0x01:
 115                 return kvm_s390_handle_01(vcpu);
 116         case 0x82:
 117                 return kvm_s390_handle_lpsw(vcpu);
 118         case 0x83:
 119                 return kvm_s390_handle_diag(vcpu);
 120         case 0xaa:
 121                 return kvm_s390_handle_aa(vcpu);
 122         case 0xae:
 123                 return kvm_s390_handle_sigp(vcpu);
 124         case 0xb2:
 125                 return kvm_s390_handle_b2(vcpu);
 126         case 0xb6:
 127                 return kvm_s390_handle_stctl(vcpu);
 128         case 0xb7:
 129                 return kvm_s390_handle_lctl(vcpu);
 130         case 0xb9:
 131                 return kvm_s390_handle_b9(vcpu);
 132         case 0xe3:
 133                 return kvm_s390_handle_e3(vcpu);
 134         case 0xe5:
 135                 return kvm_s390_handle_e5(vcpu);
 136         case 0xeb:
 137                 return kvm_s390_handle_eb(vcpu);
 138         default:
 139                 return -EOPNOTSUPP;
 140         }
 141 }
 142
 143 static int inject_prog_on_prog_intercept(struct kvm_vcpu *vcpu)
 144 {
 145         struct kvm_s390_pgm_info pgm_info = {
 146                 .code = vcpu->arch.sie_block->iprcc,
 147                 /* the PSW has already been rewound */
 148                 .flags = KVM_S390_PGM_FLAGS_NO_REWIND,
 149         };
 150
 151         switch (vcpu->arch.sie_block->iprcc & ~PGM_PER) {
 152         case PGM_AFX_TRANSLATION:
 153         case PGM_ASX_TRANSLATION:
 154         case PGM_EX_TRANSLATION:
 155         case PGM_LFX_TRANSLATION:
 156         case PGM_LSTE_SEQUENCE:
 157         case PGM_LSX_TRANSLATION:
 158         case PGM_LX_TRANSLATION:
 159         case PGM_PRIMARY_AUTHORITY:
 160         case PGM_SECONDARY_AUTHORITY:
 161         case PGM_SPACE_SWITCH:
 162                 pgm_info.trans_exc_code = vcpu->arch.sie_block->tecmc;
 163                 break;
 164         case PGM_ALEN_TRANSLATION:
 165         case PGM_ALE_SEQUENCE:
 166         case PGM_ASTE_INSTANCE:
 167         case PGM_ASTE_SEQUENCE:
 168         case PGM_ASTE_VALIDITY:
 169         case PGM_EXTENDED_AUTHORITY:
 170                 pgm_info.exc_access_id = vcpu->arch.sie_block->eai;
 171                 break;
 172         case PGM_ASCE_TYPE:
 173         case PGM_PAGE_TRANSLATION:
 174         case PGM_REGION_FIRST_TRANS:
 175         case PGM_REGION_SECOND_TRANS:
 176         case PGM_REGION_THIRD_TRANS:
 177         case PGM_SEGMENT_TRANSLATION:
 178                 pgm_info.trans_exc_code = vcpu->arch.sie_block->tecmc;
 179                 pgm_info.exc_access_id  = vcpu->arch.sie_block->eai;
 180                 pgm_info.op_access_id  = vcpu->arch.sie_block->oai;
 181                 break;
 182         case PGM_MONITOR:
 183                 pgm_info.mon_class_nr = vcpu->arch.sie_block->mcn;
 184                 pgm_info.mon_code = vcpu->arch.sie_block->tecmc;
 185                 break;
 186         case PGM_VECTOR_PROCESSING:
 187         case PGM_DATA:
 188                 pgm_info.data_exc_code = vcpu->arch.sie_block->dxc;
 189                 break;
 190         case PGM_PROTECTION:
 191                 pgm_info.trans_exc_code = vcpu->arch.sie_block->tecmc;
 192                 pgm_info.exc_access_id  = vcpu->arch.sie_block->eai;
 193                 break;
 194         default:
 195                 break;
 196         }
 197
 198         if (vcpu->arch.sie_block->iprcc & PGM_PER) {
 199                 pgm_info.per_code = vcpu->arch.sie_block->perc;
 200                 pgm_info.per_atmid = vcpu->arch.sie_block->peratmid;
 201                 pgm_info.per_address = vcpu->arch.sie_block->peraddr;
 202                 pgm_info.per_access_id = vcpu->arch.sie_block->peraid;
 203         }
 204         return kvm_s390_inject_prog_irq(vcpu, &pgm_info);
 205 }
 206
 207 /*
 208  * restore ITDB to program-interruption TDB in guest lowcore
 209  * and set TX abort indication if required
 210 */
 211 static int handle_itdb(struct kvm_vcpu *vcpu)
 212 {
 213         struct kvm_s390_itdb *itdb;
 214         int rc;
 215
 216         if (!IS_TE_ENABLED(vcpu) || !IS_ITDB_VALID(vcpu))
 217                 return 0;
 218         if (current->thread.per_flags & PER_FLAG_NO_TE)
 219                 return 0;
 220         itdb = (struct kvm_s390_itdb *)vcpu->arch.sie_block->itdba;
 221         rc = write_guest_lc(vcpu, __LC_PGM_TDB, itdb, sizeof(*itdb));
 222         if (rc)
 223                 return rc;
 224         memset(itdb, 0, sizeof(*itdb));
 225
 226         return 0;
 227 }
 228
 229 #define per_event(vcpu) (vcpu->arch.sie_block->iprcc & PGM_PER)
 230
 231 static int handle_prog(struct kvm_vcpu *vcpu)
 232 {
 233         psw_t psw;
 234         int rc;
 235
 236         vcpu->stat.exit_program_interruption++;
 237
 238         /*
 239          * Intercept 8 indicates a loop of specification exceptions
 240          * for protected guests.
 241          */
 242         if (kvm_s390_pv_cpu_is_protected(vcpu))
 243                 return -EOPNOTSUPP;
 244
 245         if (guestdbg_enabled(vcpu) && per_event(vcpu)) {
 246                 rc = kvm_s390_handle_per_event(vcpu);
 247                 if (rc)
 248                         return rc;
 249                 /* the interrupt might have been filtered out completely */
 250                 if (vcpu->arch.sie_block->iprcc == 0)
 251                         return 0;
 252         }
 253
 254         trace_kvm_s390_intercept_prog(vcpu, vcpu->arch.sie_block->iprcc);
 255         if (vcpu->arch.sie_block->iprcc == PGM_SPECIFICATION) {
 256                 rc = read_guest_lc(vcpu, __LC_PGM_NEW_PSW, &psw, sizeof(psw_t));
 257                 if (rc)
 258                         return rc;
 259                 /* Avoid endless loops of specification exceptions */
 260                 if (!is_valid_psw(&psw))
 261                         return -EOPNOTSUPP;
 262         }
 263         rc = handle_itdb(vcpu);
 264         if (rc)
 265                 return rc;
 266
 267         return inject_prog_on_prog_intercept(vcpu);
 268 }
 269
 270 /**
 271  * handle_external_interrupt - used for external interruption interceptions
 272  *
 273  * This interception occurs if:
 274  * - the CPUSTAT_EXT_INT bit was already set when the external interrupt
 275  *   occurred. In this case, the interrupt needs to be injected manually to
 276  *   preserve interrupt priority.
 277  * - the external new PSW has external interrupts enabled, which will cause an
 278  *   interruption loop. We drop to userspace in this case.
 279  *
 280  * The latter case can be detected by inspecting the external mask bit in the
 281  * external new psw.
 282  *
 283  * Under PV, only the latter case can occur, since interrupt priorities are
 284  * handled in the ultravisor.
 285  */
 286 static int handle_external_interrupt(struct kvm_vcpu *vcpu)
 287 {
 288         u16 eic = vcpu->arch.sie_block->eic;
 289         struct kvm_s390_irq irq;
 290         psw_t newpsw;
 291         int rc;
 292
 293         vcpu->stat.exit_external_interrupt++;
 294
 295         if (kvm_s390_pv_cpu_is_protected(vcpu)) {
 296                 newpsw = vcpu->arch.sie_block->gpsw;
 297         } else {
 298                 rc = read_guest_lc(vcpu, __LC_EXT_NEW_PSW, &newpsw, sizeof(psw_t));
 299                 if (rc)
 300                         return rc;
 301         }
 302
 303         /*
 304          * Clock comparator or timer interrupt with external interrupt enabled
 305          * will cause interrupt loop. Drop to userspace.
 306          */
 307         if ((eic == EXT_IRQ_CLK_COMP || eic == EXT_IRQ_CPU_TIMER) &&
 308             (newpsw.mask & PSW_MASK_EXT))
 309                 return -EOPNOTSUPP;
 310
 311         switch (eic) {
 312         case EXT_IRQ_CLK_COMP:
 313                 irq.type = KVM_S390_INT_CLOCK_COMP;
 314                 break;
 315         case EXT_IRQ_CPU_TIMER:
 316                 irq.type = KVM_S390_INT_CPU_TIMER;
 317                 break;
 318         case EXT_IRQ_EXTERNAL_CALL:
 319                 irq.type = KVM_S390_INT_EXTERNAL_CALL;
 320                 irq.u.extcall.code = vcpu->arch.sie_block->extcpuaddr;
 321                 rc = kvm_s390_inject_vcpu(vcpu, &irq);
 322                 /* ignore if another external call is already pending */
 323                 if (rc == -EBUSY)
 324                         return 0;
 325                 return rc;
 326         default:
 327                 return -EOPNOTSUPP;
 328         }
 329
 330         return kvm_s390_inject_vcpu(vcpu, &irq);
 331 }
 332
 333 /**
 334  * Handle MOVE PAGE partial execution interception.
 335  *
 336  * This interception can only happen for guests with DAT disabled and
 337  * addresses that are currently not mapped in the host. Thus we try to
 338  * set up the mappings for the corresponding user pages here (or throw
 339  * addressing exceptions in case of illegal guest addresses).
 340  */
 341 static int handle_mvpg_pei(struct kvm_vcpu *vcpu)
 342 {
 343         unsigned long srcaddr, dstaddr;
 344         int reg1, reg2, rc;
 345
 346         kvm_s390_get_regs_rre(vcpu, &reg1, &reg2);
 347
 348         /* Make sure that the source is paged-in */
 349         rc = guest_translate_address(vcpu, vcpu->run->s.regs.gprs[reg2],
 350                                      reg2, &srcaddr, GACC_FETCH);
 351         if (rc)
 352                 return kvm_s390_inject_prog_cond(vcpu, rc);
 353         rc = kvm_arch_fault_in_page(vcpu, srcaddr, 0);
 354         if (rc != 0)
 355                 return rc;
 356
 357         /* Make sure that the destination is paged-in */
 358         rc = guest_translate_address(vcpu, vcpu->run->s.regs.gprs[reg1],
 359                                      reg1, &dstaddr, GACC_STORE);
 360         if (rc)
 361                 return kvm_s390_inject_prog_cond(vcpu, rc);
 362         rc = kvm_arch_fault_in_page(vcpu, dstaddr, 1);
 363         if (rc != 0)
 364                 return rc;
 365
 366         kvm_s390_retry_instr(vcpu);
 367
 368         return 0;
 369 }
 370
 371 static int handle_partial_execution(struct kvm_vcpu *vcpu)
 372 {
 373         vcpu->stat.exit_pei++;
 374
 375         if (vcpu->arch.sie_block->ipa == 0xb254)        /* MVPG */
 376                 return handle_mvpg_pei(vcpu);
 377         if (vcpu->arch.sie_block->ipa >> 8 == 0xae)     /* SIGP */
 378                 return kvm_s390_handle_sigp_pei(vcpu);
 379
 380         return -EOPNOTSUPP;
 381 }
 382
 383 /*
 384  * Handle the sthyi instruction that provides the guest with system
 385  * information, like current CPU resources available at each level of
 386  * the machine.
 387  */
 388 int handle_sthyi(struct kvm_vcpu *vcpu)
 389 {
 390         int reg1, reg2, cc = 0, r = 0;
 391         u64 code, addr, rc = 0;
 392         struct sthyi_sctns *sctns = NULL;
 393
 394         if (!test_kvm_facility(vcpu->kvm, 74))
 395                 return kvm_s390_inject_program_int(vcpu, PGM_OPERATION);
 396
 397         kvm_s390_get_regs_rre(vcpu, &reg1, &reg2);
 398         code = vcpu->run->s.regs.gprs[reg1];
 399         addr = vcpu->run->s.regs.gprs[reg2];
 400
 401         vcpu->stat.instruction_sthyi++;
 402         VCPU_EVENT(vcpu, 3, "STHYI: fc: %llu addr: 0x%016llx", code, addr);
 403         trace_kvm_s390_handle_sthyi(vcpu, code, addr);
 404
 405         if (reg1 == reg2 || reg1 & 1 || reg2 & 1)
 406                 return kvm_s390_inject_program_int(vcpu, PGM_SPECIFICATION);
 407
 408         if (code & 0xffff) {
 409                 cc = 3;
 410                 rc = 4;
 411                 goto out;
 412         }
 413
 414         if (!kvm_s390_pv_cpu_is_protected(vcpu) && (addr & ~PAGE_MASK))
 415                 return kvm_s390_inject_program_int(vcpu, PGM_SPECIFICATION);
 416
 417         sctns = (void *)get_zeroed_page(GFP_KERNEL);
 418         if (!sctns)
 419                 return -ENOMEM;
 420
 421         cc = sthyi_fill(sctns, &rc);
 422         if (cc < 0) {
 423                 free_page((unsigned long)sctns);
 424                 return cc;
 425         }
 426 out:
 427         if (!cc) {
 428                 if (kvm_s390_pv_cpu_is_protected(vcpu)) {
 429                         memcpy((void *)(sida_origin(vcpu->arch.sie_block)),
 430                                sctns, PAGE_SIZE);
 431                 } else {
 432                         r = write_guest(vcpu, addr, reg2, sctns, PAGE_SIZE);
 433                         if (r) {
 434                                 free_page((unsigned long)sctns);
 435                                 return kvm_s390_inject_prog_cond(vcpu, r);
 436                         }
 437                 }
 438         }
 439
 440         free_page((unsigned long)sctns);
 441         vcpu->run->s.regs.gprs[reg2 + 1] = rc;
 442         kvm_s390_set_psw_cc(vcpu, cc);
 443         return r;
 444 }
 445
 446 static int handle_operexc(struct kvm_vcpu *vcpu)
 447 {
 448         psw_t oldpsw, newpsw;
 449         int rc;
 450
 451         vcpu->stat.exit_operation_exception++;
 452         trace_kvm_s390_handle_operexc(vcpu, vcpu->arch.sie_block->ipa,
 453                                       vcpu->arch.sie_block->ipb);
 454
 455         if (vcpu->arch.sie_block->ipa == 0xb256)
 456                 return handle_sthyi(vcpu);
 457
 458         if (vcpu->arch.sie_block->ipa == 0 && vcpu->kvm->arch.user_instr0)
 459                 return -EOPNOTSUPP;
 460         rc = read_guest_lc(vcpu, __LC_PGM_NEW_PSW, &newpsw, sizeof(psw_t));
 461         if (rc)
 462                 return rc;
 463         /*
 464          * Avoid endless loops of operation exceptions, if the pgm new
 465          * PSW will cause a new operation exception.
 466          * The heuristic checks if the pgm new psw is within 6 bytes before
 467          * the faulting psw address (with same DAT, AS settings) and the
 468          * new psw is not a wait psw and the fault was not triggered by
 469          * problem state.
 470          */
 471         oldpsw = vcpu->arch.sie_block->gpsw;
 472         if (oldpsw.addr - newpsw.addr <= 6 &&
 473             !(newpsw.mask & PSW_MASK_WAIT) &&
 474             !(oldpsw.mask & PSW_MASK_PSTATE) &&
 475             (newpsw.mask & PSW_MASK_ASC) == (oldpsw.mask & PSW_MASK_ASC) &&
 476             (newpsw.mask & PSW_MASK_DAT) == (oldpsw.mask & PSW_MASK_DAT))
 477                 return -EOPNOTSUPP;
 478
 479         return kvm_s390_inject_program_int(vcpu, PGM_OPERATION);
 480 }
 481
 482 static int handle_pv_spx(struct kvm_vcpu *vcpu)
 483 {
 484         u32 pref = *(u32 *)vcpu->arch.sie_block->sidad;
 485
 486         kvm_s390_set_prefix(vcpu, pref);
 487         trace_kvm_s390_handle_prefix(vcpu, 1, pref);
 488         return 0;
 489 }
 490
 491 static int handle_pv_sclp(struct kvm_vcpu *vcpu)
 492 {
 493         struct kvm_s390_float_interrupt *fi = &vcpu->kvm->arch.float_int;
 494
 495         spin_lock(&fi->lock);
 496         /*
 497          * 2 cases:
 498          * a: an sccb answering interrupt was already pending or in flight.
 499          *    As the sccb value is not known we can simply set some value to
 500          *    trigger delivery of a saved SCCB. UV will then use its saved
 501          *    copy of the SCCB value.
 502          * b: an error SCCB interrupt needs to be injected so we also inject
 503          *    a fake SCCB address. Firmware will use the proper one.
 504          * This makes sure, that both errors and real sccb returns will only
 505          * be delivered after a notification intercept (instruction has
 506          * finished) but not after others.
 507          */
 508         fi->srv_signal.ext_params |= 0x43000;
 509         set_bit(IRQ_PEND_EXT_SERVICE, &fi->pending_irqs);
 510         clear_bit(IRQ_PEND_EXT_SERVICE, &fi->masked_irqs);
 511         spin_unlock(&fi->lock);
 512         return 0;
 513 }
 514
 515 static int handle_pv_uvc(struct kvm_vcpu *vcpu)
 516 {
 517         struct uv_cb_share *guest_uvcb = (void *)vcpu->arch.sie_block->sidad;
 518         struct uv_cb_cts uvcb = {
 519                 .header.cmd     = UVC_CMD_UNPIN_PAGE_SHARED,
 520                 .header.len     = sizeof(uvcb),
 521                 .guest_handle   = kvm_s390_pv_get_handle(vcpu->kvm),
 522                 .gaddr          = guest_uvcb->paddr,
 523         };
 524         int rc;
 525
 526         if (guest_uvcb->header.cmd != UVC_CMD_REMOVE_SHARED_ACCESS) {
 527                 WARN_ONCE(1, "Unexpected notification intercept for UVC 0x%x\n",
 528                           guest_uvcb->header.cmd);
 529                 return 0;
 530         }
 531         rc = gmap_make_secure(vcpu->arch.gmap, uvcb.gaddr, &uvcb);
 532         /*
 533          * If the unpin did not succeed, the guest will exit again for the UVC
 534          * and we will retry the unpin.
 535          */
 536         if (rc == -EINVAL)
 537                 return 0;
 538         return rc;
 539 }
 540
 541 static int handle_pv_notification(struct kvm_vcpu *vcpu)
 542 {
 543         int ret;
 544
 545         if (vcpu->arch.sie_block->ipa == 0xb210)
 546                 return handle_pv_spx(vcpu);
 547         if (vcpu->arch.sie_block->ipa == 0xb220)
 548                 return handle_pv_sclp(vcpu);
 549         if (vcpu->arch.sie_block->ipa == 0xb9a4)
 550                 return handle_pv_uvc(vcpu);
 551         if (vcpu->arch.sie_block->ipa >> 8 == 0xae) {
 552                 /*
 553                  * Besides external call, other SIGP orders also cause a
 554                  * 108 (pv notify) intercept. In contrast to external call,
 555                  * these orders need to be emulated and hence the appropriate
 556                  * place to handle them is in handle_instruction().
 557                  * So first try kvm_s390_handle_sigp_pei() and if that isn't
 558                  * successful, go on with handle_instruction().
 559                  */
 560                 ret = kvm_s390_handle_sigp_pei(vcpu);
 561                 if (!ret)
 562                         return ret;
 563         }
 564
 565         return handle_instruction(vcpu);
 566 }
 567
 568 int kvm_handle_sie_intercept(struct kvm_vcpu *vcpu)
 569 {
 570         int rc, per_rc = 0;
 571
 572         if (kvm_is_ucontrol(vcpu->kvm))
 573                 return -EOPNOTSUPP;
 574
 575         switch (vcpu->arch.sie_block->icptcode) {
 576         case ICPT_EXTREQ:
 577                 vcpu->stat.exit_external_request++;
 578                 return 0;
 579         case ICPT_IOREQ:
 580                 vcpu->stat.exit_io_request++;
 581                 return 0;
 582         case ICPT_INST:
 583                 rc = handle_instruction(vcpu);
 584                 break;
 585         case ICPT_PROGI:
 586                 return handle_prog(vcpu);
 587         case ICPT_EXTINT:
 588                 return handle_external_interrupt(vcpu);
 589         case ICPT_WAIT:
 590                 return kvm_s390_handle_wait(vcpu);
 591         case ICPT_VALIDITY:
 592                 return handle_validity(vcpu);
 593         case ICPT_STOP:
 594                 return handle_stop(vcpu);
 595         case ICPT_OPEREXC:
 596                 rc = handle_operexc(vcpu);
 597                 break;
 598         case ICPT_PARTEXEC:
 599                 rc = handle_partial_execution(vcpu);
 600                 break;
 601         case ICPT_KSS:
 602                 rc = kvm_s390_skey_check_enable(vcpu);
 603                 break;
 604         case ICPT_MCHKREQ:
 605         case ICPT_INT_ENABLE:
 606                 /*
 607                  * PSW bit 13 or a CR (0, 6, 14) changed and we might
 608                  * now be able to deliver interrupts. The pre-run code
 609                  * will take care of this.
 610                  */
 611                 rc = 0;
 612                 break;
 613         case ICPT_PV_INSTR:
 614                 rc = handle_instruction(vcpu);
 615                 break;
 616         case ICPT_PV_NOTIFY:
 617                 rc = handle_pv_notification(vcpu);
 618                 break;
 619         case ICPT_PV_PREF:
 620                 rc = 0;
 621                 gmap_convert_to_secure(vcpu->arch.gmap,
 622                                        kvm_s390_get_prefix(vcpu));
 623                 gmap_convert_to_secure(vcpu->arch.gmap,
 624                                        kvm_s390_get_prefix(vcpu) + PAGE_SIZE);
 625                 break;
 626         default:
 627                 return -EOPNOTSUPP;
 628         }
 629
 630         /* process PER, also if the instrution is processed in user space */
 631         if (vcpu->arch.sie_block->icptstatus & 0x02 &&
 632             (!rc || rc == -EOPNOTSUPP))
 633                 per_rc = kvm_s390_handle_per_ifetch_icpt(vcpu);
 634         return per_rc ? per_rc : rc;
 635 }