xref: /openbmc/qemu/hw/vfio/ccw.c (revision e9808d09697b5b0ac82ab9291f61571f65f4bff7)
11dcac3e1SXiao Feng Ren /*
21dcac3e1SXiao Feng Ren  * vfio based subchannel assignment support
31dcac3e1SXiao Feng Ren  *
41dcac3e1SXiao Feng Ren  * Copyright 2017 IBM Corp.
51dcac3e1SXiao Feng Ren  * Author(s): Dong Jia Shi <bjsdjshi@linux.vnet.ibm.com>
61dcac3e1SXiao Feng Ren  *            Xiao Feng Ren <renxiaof@linux.vnet.ibm.com>
71dcac3e1SXiao Feng Ren  *            Pierre Morel <pmorel@linux.vnet.ibm.com>
81dcac3e1SXiao Feng Ren  *
91dcac3e1SXiao Feng Ren  * This work is licensed under the terms of the GNU GPL, version 2 or(at
101dcac3e1SXiao Feng Ren  * your option) any version. See the COPYING file in the top-level
111dcac3e1SXiao Feng Ren  * directory.
121dcac3e1SXiao Feng Ren  */
131dcac3e1SXiao Feng Ren 
14*e9808d09SPhilippe Mathieu-Daudé #include "qemu/osdep.h"
151dcac3e1SXiao Feng Ren #include <linux/vfio.h>
16c14e706cSDong Jia Shi #include <linux/vfio_ccw.h>
171dcac3e1SXiao Feng Ren #include <sys/ioctl.h>
181dcac3e1SXiao Feng Ren 
191dcac3e1SXiao Feng Ren #include "qapi/error.h"
201dcac3e1SXiao Feng Ren #include "hw/sysbus.h"
211dcac3e1SXiao Feng Ren #include "hw/vfio/vfio.h"
221dcac3e1SXiao Feng Ren #include "hw/vfio/vfio-common.h"
231dcac3e1SXiao Feng Ren #include "hw/s390x/s390-ccw.h"
241dcac3e1SXiao Feng Ren #include "hw/s390x/ccw-device.h"
254886b3e9SDong Jia Shi #include "qemu/error-report.h"
261dcac3e1SXiao Feng Ren 
271dcac3e1SXiao Feng Ren #define TYPE_VFIO_CCW "vfio-ccw"
281dcac3e1SXiao Feng Ren typedef struct VFIOCCWDevice {
291dcac3e1SXiao Feng Ren     S390CCWDevice cdev;
301dcac3e1SXiao Feng Ren     VFIODevice vdev;
31c14e706cSDong Jia Shi     uint64_t io_region_size;
32c14e706cSDong Jia Shi     uint64_t io_region_offset;
33c14e706cSDong Jia Shi     struct ccw_io_region *io_region;
344886b3e9SDong Jia Shi     EventNotifier io_notifier;
351dcac3e1SXiao Feng Ren } VFIOCCWDevice;
361dcac3e1SXiao Feng Ren 
371dcac3e1SXiao Feng Ren static void vfio_ccw_compute_needs_reset(VFIODevice *vdev)
381dcac3e1SXiao Feng Ren {
391dcac3e1SXiao Feng Ren     vdev->needs_reset = false;
401dcac3e1SXiao Feng Ren }
411dcac3e1SXiao Feng Ren 
421dcac3e1SXiao Feng Ren /*
431dcac3e1SXiao Feng Ren  * We don't need vfio_hot_reset_multi and vfio_eoi operations for
441dcac3e1SXiao Feng Ren  * vfio_ccw device now.
451dcac3e1SXiao Feng Ren  */
461dcac3e1SXiao Feng Ren struct VFIODeviceOps vfio_ccw_ops = {
471dcac3e1SXiao Feng Ren     .vfio_compute_needs_reset = vfio_ccw_compute_needs_reset,
481dcac3e1SXiao Feng Ren };
491dcac3e1SXiao Feng Ren 
5066dc50f7SHalil Pasic static IOInstEnding vfio_ccw_handle_request(SubchDev *sch)
518ca2b376SXiao Feng Ren {
5266dc50f7SHalil Pasic     S390CCWDevice *cdev = sch->driver_data;
538ca2b376SXiao Feng Ren     VFIOCCWDevice *vcdev = DO_UPCAST(VFIOCCWDevice, cdev, cdev);
548ca2b376SXiao Feng Ren     struct ccw_io_region *region = vcdev->io_region;
558ca2b376SXiao Feng Ren     int ret;
568ca2b376SXiao Feng Ren 
578ca2b376SXiao Feng Ren     QEMU_BUILD_BUG_ON(sizeof(region->orb_area) != sizeof(ORB));
588ca2b376SXiao Feng Ren     QEMU_BUILD_BUG_ON(sizeof(region->scsw_area) != sizeof(SCSW));
598ca2b376SXiao Feng Ren     QEMU_BUILD_BUG_ON(sizeof(region->irb_area) != sizeof(IRB));
608ca2b376SXiao Feng Ren 
618ca2b376SXiao Feng Ren     memset(region, 0, sizeof(*region));
628ca2b376SXiao Feng Ren 
6366dc50f7SHalil Pasic     memcpy(region->orb_area, &sch->orb, sizeof(ORB));
6466dc50f7SHalil Pasic     memcpy(region->scsw_area, &sch->curr_status.scsw, sizeof(SCSW));
658ca2b376SXiao Feng Ren 
668ca2b376SXiao Feng Ren again:
678ca2b376SXiao Feng Ren     ret = pwrite(vcdev->vdev.fd, region,
688ca2b376SXiao Feng Ren                  vcdev->io_region_size, vcdev->io_region_offset);
698ca2b376SXiao Feng Ren     if (ret != vcdev->io_region_size) {
708ca2b376SXiao Feng Ren         if (errno == EAGAIN) {
718ca2b376SXiao Feng Ren             goto again;
728ca2b376SXiao Feng Ren         }
738ca2b376SXiao Feng Ren         error_report("vfio-ccw: wirte I/O region failed with errno=%d", errno);
7466dc50f7SHalil Pasic         ret = -errno;
7566dc50f7SHalil Pasic     } else {
7666dc50f7SHalil Pasic         ret = region->ret_code;
778ca2b376SXiao Feng Ren     }
7866dc50f7SHalil Pasic     switch (ret) {
7966dc50f7SHalil Pasic     case 0:
8066dc50f7SHalil Pasic         return IOINST_CC_EXPECTED;
8166dc50f7SHalil Pasic     case -EBUSY:
8266dc50f7SHalil Pasic         return IOINST_CC_BUSY;
8366dc50f7SHalil Pasic     case -ENODEV:
8466dc50f7SHalil Pasic     case -EACCES:
8566dc50f7SHalil Pasic         return IOINST_CC_NOT_OPERATIONAL;
8666dc50f7SHalil Pasic     case -EFAULT:
8766dc50f7SHalil Pasic     default:
8866dc50f7SHalil Pasic         sch_gen_unit_exception(sch);
8966dc50f7SHalil Pasic         css_inject_io_interrupt(sch);
9066dc50f7SHalil Pasic         return IOINST_CC_EXPECTED;
9166dc50f7SHalil Pasic     }
928ca2b376SXiao Feng Ren }
938ca2b376SXiao Feng Ren 
941dcac3e1SXiao Feng Ren static void vfio_ccw_reset(DeviceState *dev)
951dcac3e1SXiao Feng Ren {
961dcac3e1SXiao Feng Ren     CcwDevice *ccw_dev = DO_UPCAST(CcwDevice, parent_obj, dev);
971dcac3e1SXiao Feng Ren     S390CCWDevice *cdev = DO_UPCAST(S390CCWDevice, parent_obj, ccw_dev);
981dcac3e1SXiao Feng Ren     VFIOCCWDevice *vcdev = DO_UPCAST(VFIOCCWDevice, cdev, cdev);
991dcac3e1SXiao Feng Ren 
1001dcac3e1SXiao Feng Ren     ioctl(vcdev->vdev.fd, VFIO_DEVICE_RESET);
1011dcac3e1SXiao Feng Ren }
1021dcac3e1SXiao Feng Ren 
1034886b3e9SDong Jia Shi static void vfio_ccw_io_notifier_handler(void *opaque)
1044886b3e9SDong Jia Shi {
1054886b3e9SDong Jia Shi     VFIOCCWDevice *vcdev = opaque;
1068ca2b376SXiao Feng Ren     struct ccw_io_region *region = vcdev->io_region;
1078ca2b376SXiao Feng Ren     S390CCWDevice *cdev = S390_CCW_DEVICE(vcdev);
1088ca2b376SXiao Feng Ren     CcwDevice *ccw_dev = CCW_DEVICE(cdev);
1098ca2b376SXiao Feng Ren     SubchDev *sch = ccw_dev->sch;
1108ca2b376SXiao Feng Ren     SCSW *s = &sch->curr_status.scsw;
111334e7685SDong Jia Shi     PMCW *p = &sch->curr_status.pmcw;
1128ca2b376SXiao Feng Ren     IRB irb;
1138ca2b376SXiao Feng Ren     int size;
1144886b3e9SDong Jia Shi 
1154886b3e9SDong Jia Shi     if (!event_notifier_test_and_clear(&vcdev->io_notifier)) {
1164886b3e9SDong Jia Shi         return;
1174886b3e9SDong Jia Shi     }
1188ca2b376SXiao Feng Ren 
1198ca2b376SXiao Feng Ren     size = pread(vcdev->vdev.fd, region, vcdev->io_region_size,
1208ca2b376SXiao Feng Ren                  vcdev->io_region_offset);
1218ca2b376SXiao Feng Ren     if (size == -1) {
1228ca2b376SXiao Feng Ren         switch (errno) {
1238ca2b376SXiao Feng Ren         case ENODEV:
1248ca2b376SXiao Feng Ren             /* Generate a deferred cc 3 condition. */
1258ca2b376SXiao Feng Ren             s->flags |= SCSW_FLAGS_MASK_CC;
1268ca2b376SXiao Feng Ren             s->ctrl &= ~SCSW_CTRL_MASK_STCTL;
1278ca2b376SXiao Feng Ren             s->ctrl |= (SCSW_STCTL_ALERT | SCSW_STCTL_STATUS_PEND);
1288ca2b376SXiao Feng Ren             goto read_err;
1298ca2b376SXiao Feng Ren         case EFAULT:
1308ca2b376SXiao Feng Ren             /* Memory problem, generate channel data check. */
1318ca2b376SXiao Feng Ren             s->ctrl &= ~SCSW_ACTL_START_PEND;
1328ca2b376SXiao Feng Ren             s->cstat = SCSW_CSTAT_DATA_CHECK;
1338ca2b376SXiao Feng Ren             s->ctrl &= ~SCSW_CTRL_MASK_STCTL;
1348ca2b376SXiao Feng Ren             s->ctrl |= SCSW_STCTL_PRIMARY | SCSW_STCTL_SECONDARY |
1358ca2b376SXiao Feng Ren                        SCSW_STCTL_ALERT | SCSW_STCTL_STATUS_PEND;
1368ca2b376SXiao Feng Ren             goto read_err;
1378ca2b376SXiao Feng Ren         default:
1388ca2b376SXiao Feng Ren             /* Error, generate channel program check. */
1398ca2b376SXiao Feng Ren             s->ctrl &= ~SCSW_ACTL_START_PEND;
1408ca2b376SXiao Feng Ren             s->cstat = SCSW_CSTAT_PROG_CHECK;
1418ca2b376SXiao Feng Ren             s->ctrl &= ~SCSW_CTRL_MASK_STCTL;
1428ca2b376SXiao Feng Ren             s->ctrl |= SCSW_STCTL_PRIMARY | SCSW_STCTL_SECONDARY |
1438ca2b376SXiao Feng Ren                        SCSW_STCTL_ALERT | SCSW_STCTL_STATUS_PEND;
1448ca2b376SXiao Feng Ren             goto read_err;
1458ca2b376SXiao Feng Ren         }
1468ca2b376SXiao Feng Ren     } else if (size != vcdev->io_region_size) {
1478ca2b376SXiao Feng Ren         /* Information transfer error, generate channel-control check. */
1488ca2b376SXiao Feng Ren         s->ctrl &= ~SCSW_ACTL_START_PEND;
1498ca2b376SXiao Feng Ren         s->cstat = SCSW_CSTAT_CHN_CTRL_CHK;
1508ca2b376SXiao Feng Ren         s->ctrl &= ~SCSW_CTRL_MASK_STCTL;
1518ca2b376SXiao Feng Ren         s->ctrl |= SCSW_STCTL_PRIMARY | SCSW_STCTL_SECONDARY |
1528ca2b376SXiao Feng Ren                    SCSW_STCTL_ALERT | SCSW_STCTL_STATUS_PEND;
1538ca2b376SXiao Feng Ren         goto read_err;
1548ca2b376SXiao Feng Ren     }
1558ca2b376SXiao Feng Ren 
1568ca2b376SXiao Feng Ren     memcpy(&irb, region->irb_area, sizeof(IRB));
1578ca2b376SXiao Feng Ren 
1588ca2b376SXiao Feng Ren     /* Update control block via irb. */
1598ca2b376SXiao Feng Ren     copy_scsw_to_guest(s, &irb.scsw);
1608ca2b376SXiao Feng Ren 
161334e7685SDong Jia Shi     /* If a uint check is pending, copy sense data. */
162334e7685SDong Jia Shi     if ((s->dstat & SCSW_DSTAT_UNIT_CHECK) &&
163334e7685SDong Jia Shi         (p->chars & PMCW_CHARS_MASK_CSENSE)) {
164334e7685SDong Jia Shi         memcpy(sch->sense_data, irb.ecw, sizeof(irb.ecw));
165334e7685SDong Jia Shi     }
166334e7685SDong Jia Shi 
1678ca2b376SXiao Feng Ren read_err:
1688ca2b376SXiao Feng Ren     css_inject_io_interrupt(sch);
1694886b3e9SDong Jia Shi }
1704886b3e9SDong Jia Shi 
1714886b3e9SDong Jia Shi static void vfio_ccw_register_io_notifier(VFIOCCWDevice *vcdev, Error **errp)
1724886b3e9SDong Jia Shi {
1734886b3e9SDong Jia Shi     VFIODevice *vdev = &vcdev->vdev;
1744886b3e9SDong Jia Shi     struct vfio_irq_info *irq_info;
1754886b3e9SDong Jia Shi     struct vfio_irq_set *irq_set;
1764886b3e9SDong Jia Shi     size_t argsz;
1774886b3e9SDong Jia Shi     int32_t *pfd;
1784886b3e9SDong Jia Shi 
1794886b3e9SDong Jia Shi     if (vdev->num_irqs < VFIO_CCW_IO_IRQ_INDEX + 1) {
1804886b3e9SDong Jia Shi         error_setg(errp, "vfio: unexpected number of io irqs %u",
1814886b3e9SDong Jia Shi                    vdev->num_irqs);
1824886b3e9SDong Jia Shi         return;
1834886b3e9SDong Jia Shi     }
1844886b3e9SDong Jia Shi 
18528e22d4bSJing Zhang     argsz = sizeof(*irq_info);
1864886b3e9SDong Jia Shi     irq_info = g_malloc0(argsz);
1874886b3e9SDong Jia Shi     irq_info->index = VFIO_CCW_IO_IRQ_INDEX;
1884886b3e9SDong Jia Shi     irq_info->argsz = argsz;
1894886b3e9SDong Jia Shi     if (ioctl(vdev->fd, VFIO_DEVICE_GET_IRQ_INFO,
1904886b3e9SDong Jia Shi               irq_info) < 0 || irq_info->count < 1) {
1914886b3e9SDong Jia Shi         error_setg_errno(errp, errno, "vfio: Error getting irq info");
1924886b3e9SDong Jia Shi         goto out_free_info;
1934886b3e9SDong Jia Shi     }
1944886b3e9SDong Jia Shi 
1954886b3e9SDong Jia Shi     if (event_notifier_init(&vcdev->io_notifier, 0)) {
1964886b3e9SDong Jia Shi         error_setg_errno(errp, errno,
1974886b3e9SDong Jia Shi                          "vfio: Unable to init event notifier for IO");
1984886b3e9SDong Jia Shi         goto out_free_info;
1994886b3e9SDong Jia Shi     }
2004886b3e9SDong Jia Shi 
2014886b3e9SDong Jia Shi     argsz = sizeof(*irq_set) + sizeof(*pfd);
2024886b3e9SDong Jia Shi     irq_set = g_malloc0(argsz);
2034886b3e9SDong Jia Shi     irq_set->argsz = argsz;
2044886b3e9SDong Jia Shi     irq_set->flags = VFIO_IRQ_SET_DATA_EVENTFD |
2054886b3e9SDong Jia Shi                      VFIO_IRQ_SET_ACTION_TRIGGER;
2064886b3e9SDong Jia Shi     irq_set->index = VFIO_CCW_IO_IRQ_INDEX;
2074886b3e9SDong Jia Shi     irq_set->start = 0;
2084886b3e9SDong Jia Shi     irq_set->count = 1;
2094886b3e9SDong Jia Shi     pfd = (int32_t *) &irq_set->data;
2104886b3e9SDong Jia Shi 
2114886b3e9SDong Jia Shi     *pfd = event_notifier_get_fd(&vcdev->io_notifier);
2124886b3e9SDong Jia Shi     qemu_set_fd_handler(*pfd, vfio_ccw_io_notifier_handler, NULL, vcdev);
2134886b3e9SDong Jia Shi     if (ioctl(vdev->fd, VFIO_DEVICE_SET_IRQS, irq_set)) {
2144886b3e9SDong Jia Shi         error_setg(errp, "vfio: Failed to set up io notification");
2154886b3e9SDong Jia Shi         qemu_set_fd_handler(*pfd, NULL, NULL, vcdev);
2164886b3e9SDong Jia Shi         event_notifier_cleanup(&vcdev->io_notifier);
2174886b3e9SDong Jia Shi     }
2184886b3e9SDong Jia Shi 
2194886b3e9SDong Jia Shi     g_free(irq_set);
2204886b3e9SDong Jia Shi 
2214886b3e9SDong Jia Shi out_free_info:
2224886b3e9SDong Jia Shi     g_free(irq_info);
2234886b3e9SDong Jia Shi }
2244886b3e9SDong Jia Shi 
2254886b3e9SDong Jia Shi static void vfio_ccw_unregister_io_notifier(VFIOCCWDevice *vcdev)
2264886b3e9SDong Jia Shi {
2274886b3e9SDong Jia Shi     struct vfio_irq_set *irq_set;
2284886b3e9SDong Jia Shi     size_t argsz;
2294886b3e9SDong Jia Shi     int32_t *pfd;
2304886b3e9SDong Jia Shi 
2314886b3e9SDong Jia Shi     argsz = sizeof(*irq_set) + sizeof(*pfd);
2324886b3e9SDong Jia Shi     irq_set = g_malloc0(argsz);
2334886b3e9SDong Jia Shi     irq_set->argsz = argsz;
2344886b3e9SDong Jia Shi     irq_set->flags = VFIO_IRQ_SET_DATA_EVENTFD |
2354886b3e9SDong Jia Shi                      VFIO_IRQ_SET_ACTION_TRIGGER;
2364886b3e9SDong Jia Shi     irq_set->index = VFIO_CCW_IO_IRQ_INDEX;
2374886b3e9SDong Jia Shi     irq_set->start = 0;
2384886b3e9SDong Jia Shi     irq_set->count = 1;
2394886b3e9SDong Jia Shi     pfd = (int32_t *) &irq_set->data;
2404886b3e9SDong Jia Shi     *pfd = -1;
2414886b3e9SDong Jia Shi 
2424886b3e9SDong Jia Shi     if (ioctl(vcdev->vdev.fd, VFIO_DEVICE_SET_IRQS, irq_set)) {
2434886b3e9SDong Jia Shi         error_report("vfio: Failed to de-assign device io fd: %m");
2444886b3e9SDong Jia Shi     }
2454886b3e9SDong Jia Shi 
2464886b3e9SDong Jia Shi     qemu_set_fd_handler(event_notifier_get_fd(&vcdev->io_notifier),
2474886b3e9SDong Jia Shi                         NULL, NULL, vcdev);
2484886b3e9SDong Jia Shi     event_notifier_cleanup(&vcdev->io_notifier);
2494886b3e9SDong Jia Shi 
2504886b3e9SDong Jia Shi     g_free(irq_set);
2514886b3e9SDong Jia Shi }
2524886b3e9SDong Jia Shi 
253c14e706cSDong Jia Shi static void vfio_ccw_get_region(VFIOCCWDevice *vcdev, Error **errp)
254c14e706cSDong Jia Shi {
255c14e706cSDong Jia Shi     VFIODevice *vdev = &vcdev->vdev;
256c14e706cSDong Jia Shi     struct vfio_region_info *info;
257c14e706cSDong Jia Shi     int ret;
258c14e706cSDong Jia Shi 
259c14e706cSDong Jia Shi     /* Sanity check device */
260c14e706cSDong Jia Shi     if (!(vdev->flags & VFIO_DEVICE_FLAGS_CCW)) {
261c14e706cSDong Jia Shi         error_setg(errp, "vfio: Um, this isn't a vfio-ccw device");
262c14e706cSDong Jia Shi         return;
263c14e706cSDong Jia Shi     }
264c14e706cSDong Jia Shi 
265c14e706cSDong Jia Shi     if (vdev->num_regions < VFIO_CCW_CONFIG_REGION_INDEX + 1) {
266c14e706cSDong Jia Shi         error_setg(errp, "vfio: Unexpected number of the I/O region %u",
267c14e706cSDong Jia Shi                    vdev->num_regions);
268c14e706cSDong Jia Shi         return;
269c14e706cSDong Jia Shi     }
270c14e706cSDong Jia Shi 
271c14e706cSDong Jia Shi     ret = vfio_get_region_info(vdev, VFIO_CCW_CONFIG_REGION_INDEX, &info);
272c14e706cSDong Jia Shi     if (ret) {
273c14e706cSDong Jia Shi         error_setg_errno(errp, -ret, "vfio: Error getting config info");
274c14e706cSDong Jia Shi         return;
275c14e706cSDong Jia Shi     }
276c14e706cSDong Jia Shi 
277c14e706cSDong Jia Shi     vcdev->io_region_size = info->size;
278c14e706cSDong Jia Shi     if (sizeof(*vcdev->io_region) != vcdev->io_region_size) {
279c14e706cSDong Jia Shi         error_setg(errp, "vfio: Unexpected size of the I/O region");
280c14e706cSDong Jia Shi         g_free(info);
281c14e706cSDong Jia Shi         return;
282c14e706cSDong Jia Shi     }
283c14e706cSDong Jia Shi 
284c14e706cSDong Jia Shi     vcdev->io_region_offset = info->offset;
285c14e706cSDong Jia Shi     vcdev->io_region = g_malloc0(info->size);
286c14e706cSDong Jia Shi 
287c14e706cSDong Jia Shi     g_free(info);
288c14e706cSDong Jia Shi }
289c14e706cSDong Jia Shi 
290c14e706cSDong Jia Shi static void vfio_ccw_put_region(VFIOCCWDevice *vcdev)
291c14e706cSDong Jia Shi {
292c14e706cSDong Jia Shi     g_free(vcdev->io_region);
293c14e706cSDong Jia Shi }
294c14e706cSDong Jia Shi 
2951dcac3e1SXiao Feng Ren static void vfio_put_device(VFIOCCWDevice *vcdev)
2961dcac3e1SXiao Feng Ren {
2971dcac3e1SXiao Feng Ren     g_free(vcdev->vdev.name);
2981dcac3e1SXiao Feng Ren     vfio_put_base_device(&vcdev->vdev);
2991dcac3e1SXiao Feng Ren }
3001dcac3e1SXiao Feng Ren 
3011dcac3e1SXiao Feng Ren static VFIOGroup *vfio_ccw_get_group(S390CCWDevice *cdev, Error **errp)
3021dcac3e1SXiao Feng Ren {
3031dcac3e1SXiao Feng Ren     char *tmp, group_path[PATH_MAX];
3041dcac3e1SXiao Feng Ren     ssize_t len;
3051dcac3e1SXiao Feng Ren     int groupid;
3061dcac3e1SXiao Feng Ren 
3071dcac3e1SXiao Feng Ren     tmp = g_strdup_printf("/sys/bus/css/devices/%x.%x.%04x/%s/iommu_group",
3081dcac3e1SXiao Feng Ren                           cdev->hostid.cssid, cdev->hostid.ssid,
3091dcac3e1SXiao Feng Ren                           cdev->hostid.devid, cdev->mdevid);
3101dcac3e1SXiao Feng Ren     len = readlink(tmp, group_path, sizeof(group_path));
3111dcac3e1SXiao Feng Ren     g_free(tmp);
3121dcac3e1SXiao Feng Ren 
3131dcac3e1SXiao Feng Ren     if (len <= 0 || len >= sizeof(group_path)) {
3141dcac3e1SXiao Feng Ren         error_setg(errp, "vfio: no iommu_group found");
3151dcac3e1SXiao Feng Ren         return NULL;
3161dcac3e1SXiao Feng Ren     }
3171dcac3e1SXiao Feng Ren 
3181dcac3e1SXiao Feng Ren     group_path[len] = 0;
3191dcac3e1SXiao Feng Ren 
3201dcac3e1SXiao Feng Ren     if (sscanf(basename(group_path), "%d", &groupid) != 1) {
3211dcac3e1SXiao Feng Ren         error_setg(errp, "vfio: failed to read %s", group_path);
3221dcac3e1SXiao Feng Ren         return NULL;
3231dcac3e1SXiao Feng Ren     }
3241dcac3e1SXiao Feng Ren 
3251dcac3e1SXiao Feng Ren     return vfio_get_group(groupid, &address_space_memory, errp);
3261dcac3e1SXiao Feng Ren }
3271dcac3e1SXiao Feng Ren 
3281dcac3e1SXiao Feng Ren static void vfio_ccw_realize(DeviceState *dev, Error **errp)
3291dcac3e1SXiao Feng Ren {
3301dcac3e1SXiao Feng Ren     VFIODevice *vbasedev;
3311dcac3e1SXiao Feng Ren     VFIOGroup *group;
3321dcac3e1SXiao Feng Ren     CcwDevice *ccw_dev = DO_UPCAST(CcwDevice, parent_obj, dev);
3331dcac3e1SXiao Feng Ren     S390CCWDevice *cdev = DO_UPCAST(S390CCWDevice, parent_obj, ccw_dev);
3341dcac3e1SXiao Feng Ren     VFIOCCWDevice *vcdev = DO_UPCAST(VFIOCCWDevice, cdev, cdev);
3351dcac3e1SXiao Feng Ren     S390CCWDeviceClass *cdc = S390_CCW_DEVICE_GET_CLASS(cdev);
3361dcac3e1SXiao Feng Ren     Error *err = NULL;
3371dcac3e1SXiao Feng Ren 
3381dcac3e1SXiao Feng Ren     /* Call the class init function for subchannel. */
3391dcac3e1SXiao Feng Ren     if (cdc->realize) {
3401dcac3e1SXiao Feng Ren         cdc->realize(cdev, vcdev->vdev.sysfsdev, &err);
3411dcac3e1SXiao Feng Ren         if (err) {
3421dcac3e1SXiao Feng Ren             goto out_err_propagate;
3431dcac3e1SXiao Feng Ren         }
3441dcac3e1SXiao Feng Ren     }
3451dcac3e1SXiao Feng Ren 
3461dcac3e1SXiao Feng Ren     group = vfio_ccw_get_group(cdev, &err);
3471dcac3e1SXiao Feng Ren     if (!group) {
3481dcac3e1SXiao Feng Ren         goto out_group_err;
3491dcac3e1SXiao Feng Ren     }
3501dcac3e1SXiao Feng Ren 
3511dcac3e1SXiao Feng Ren     vcdev->vdev.ops = &vfio_ccw_ops;
3521dcac3e1SXiao Feng Ren     vcdev->vdev.type = VFIO_DEVICE_TYPE_CCW;
3531dcac3e1SXiao Feng Ren     vcdev->vdev.name = g_strdup_printf("%x.%x.%04x", cdev->hostid.cssid,
3541dcac3e1SXiao Feng Ren                                        cdev->hostid.ssid, cdev->hostid.devid);
3556a79dd46SDong Jia Shi     vcdev->vdev.dev = dev;
3561dcac3e1SXiao Feng Ren     QLIST_FOREACH(vbasedev, &group->device_list, next) {
3571dcac3e1SXiao Feng Ren         if (strcmp(vbasedev->name, vcdev->vdev.name) == 0) {
3581dcac3e1SXiao Feng Ren             error_setg(&err, "vfio: subchannel %s has already been attached",
3591dcac3e1SXiao Feng Ren                        vcdev->vdev.name);
3601dcac3e1SXiao Feng Ren             goto out_device_err;
3611dcac3e1SXiao Feng Ren         }
3621dcac3e1SXiao Feng Ren     }
3631dcac3e1SXiao Feng Ren 
3641dcac3e1SXiao Feng Ren     if (vfio_get_device(group, cdev->mdevid, &vcdev->vdev, &err)) {
3651dcac3e1SXiao Feng Ren         goto out_device_err;
3661dcac3e1SXiao Feng Ren     }
3671dcac3e1SXiao Feng Ren 
368c14e706cSDong Jia Shi     vfio_ccw_get_region(vcdev, &err);
369c14e706cSDong Jia Shi     if (err) {
370c14e706cSDong Jia Shi         goto out_region_err;
371c14e706cSDong Jia Shi     }
372c14e706cSDong Jia Shi 
3734886b3e9SDong Jia Shi     vfio_ccw_register_io_notifier(vcdev, &err);
3744886b3e9SDong Jia Shi     if (err) {
3754886b3e9SDong Jia Shi         goto out_notifier_err;
3764886b3e9SDong Jia Shi     }
3774886b3e9SDong Jia Shi 
3781dcac3e1SXiao Feng Ren     return;
3791dcac3e1SXiao Feng Ren 
3804886b3e9SDong Jia Shi out_notifier_err:
3814886b3e9SDong Jia Shi     vfio_ccw_put_region(vcdev);
382c14e706cSDong Jia Shi out_region_err:
383c14e706cSDong Jia Shi     vfio_put_device(vcdev);
3841dcac3e1SXiao Feng Ren out_device_err:
3851dcac3e1SXiao Feng Ren     vfio_put_group(group);
3861dcac3e1SXiao Feng Ren out_group_err:
3871dcac3e1SXiao Feng Ren     if (cdc->unrealize) {
3881dcac3e1SXiao Feng Ren         cdc->unrealize(cdev, NULL);
3891dcac3e1SXiao Feng Ren     }
3901dcac3e1SXiao Feng Ren out_err_propagate:
3911dcac3e1SXiao Feng Ren     error_propagate(errp, err);
3921dcac3e1SXiao Feng Ren }
3931dcac3e1SXiao Feng Ren 
3941dcac3e1SXiao Feng Ren static void vfio_ccw_unrealize(DeviceState *dev, Error **errp)
3951dcac3e1SXiao Feng Ren {
3961dcac3e1SXiao Feng Ren     CcwDevice *ccw_dev = DO_UPCAST(CcwDevice, parent_obj, dev);
3971dcac3e1SXiao Feng Ren     S390CCWDevice *cdev = DO_UPCAST(S390CCWDevice, parent_obj, ccw_dev);
3981dcac3e1SXiao Feng Ren     VFIOCCWDevice *vcdev = DO_UPCAST(VFIOCCWDevice, cdev, cdev);
3991dcac3e1SXiao Feng Ren     S390CCWDeviceClass *cdc = S390_CCW_DEVICE_GET_CLASS(cdev);
4001dcac3e1SXiao Feng Ren     VFIOGroup *group = vcdev->vdev.group;
4011dcac3e1SXiao Feng Ren 
4024886b3e9SDong Jia Shi     vfio_ccw_unregister_io_notifier(vcdev);
403c14e706cSDong Jia Shi     vfio_ccw_put_region(vcdev);
4041dcac3e1SXiao Feng Ren     vfio_put_device(vcdev);
4051dcac3e1SXiao Feng Ren     vfio_put_group(group);
4061dcac3e1SXiao Feng Ren 
4071dcac3e1SXiao Feng Ren     if (cdc->unrealize) {
4081dcac3e1SXiao Feng Ren         cdc->unrealize(cdev, errp);
4091dcac3e1SXiao Feng Ren     }
4101dcac3e1SXiao Feng Ren }
4111dcac3e1SXiao Feng Ren 
4121dcac3e1SXiao Feng Ren static Property vfio_ccw_properties[] = {
4131dcac3e1SXiao Feng Ren     DEFINE_PROP_STRING("sysfsdev", VFIOCCWDevice, vdev.sysfsdev),
4141dcac3e1SXiao Feng Ren     DEFINE_PROP_END_OF_LIST(),
4151dcac3e1SXiao Feng Ren };
4161dcac3e1SXiao Feng Ren 
4171dcac3e1SXiao Feng Ren static const VMStateDescription vfio_ccw_vmstate = {
4181dcac3e1SXiao Feng Ren     .name = TYPE_VFIO_CCW,
4191dcac3e1SXiao Feng Ren     .unmigratable = 1,
4201dcac3e1SXiao Feng Ren };
4211dcac3e1SXiao Feng Ren 
4221dcac3e1SXiao Feng Ren static void vfio_ccw_class_init(ObjectClass *klass, void *data)
4231dcac3e1SXiao Feng Ren {
4241dcac3e1SXiao Feng Ren     DeviceClass *dc = DEVICE_CLASS(klass);
4258ca2b376SXiao Feng Ren     S390CCWDeviceClass *cdc = S390_CCW_DEVICE_CLASS(klass);
4261dcac3e1SXiao Feng Ren 
4271dcac3e1SXiao Feng Ren     dc->props = vfio_ccw_properties;
4281dcac3e1SXiao Feng Ren     dc->vmsd = &vfio_ccw_vmstate;
4291dcac3e1SXiao Feng Ren     dc->desc = "VFIO-based subchannel assignment";
430bd2aef10SCornelia Huck     set_bit(DEVICE_CATEGORY_MISC, dc->categories);
4311dcac3e1SXiao Feng Ren     dc->realize = vfio_ccw_realize;
4321dcac3e1SXiao Feng Ren     dc->unrealize = vfio_ccw_unrealize;
4331dcac3e1SXiao Feng Ren     dc->reset = vfio_ccw_reset;
4348ca2b376SXiao Feng Ren 
4358ca2b376SXiao Feng Ren     cdc->handle_request = vfio_ccw_handle_request;
4361dcac3e1SXiao Feng Ren }
4371dcac3e1SXiao Feng Ren 
4381dcac3e1SXiao Feng Ren static const TypeInfo vfio_ccw_info = {
4391dcac3e1SXiao Feng Ren     .name = TYPE_VFIO_CCW,
4401dcac3e1SXiao Feng Ren     .parent = TYPE_S390_CCW,
4411dcac3e1SXiao Feng Ren     .instance_size = sizeof(VFIOCCWDevice),
4421dcac3e1SXiao Feng Ren     .class_init = vfio_ccw_class_init,
4431dcac3e1SXiao Feng Ren };
4441dcac3e1SXiao Feng Ren 
4451dcac3e1SXiao Feng Ren static void register_vfio_ccw_type(void)
4461dcac3e1SXiao Feng Ren {
4471dcac3e1SXiao Feng Ren     type_register_static(&vfio_ccw_info);
4481dcac3e1SXiao Feng Ren }
4491dcac3e1SXiao Feng Ren 
4501dcac3e1SXiao Feng Ren type_init(register_vfio_ccw_type)
451