AI Trajectory


Trajectory: (Expand/Collapse All)
Seq Timestamp Type Name Duration
0/0 2026/08/01 19:39 flow patch-triage
1m Args:
null

Results:
{
  "EnableConfigs": null,
  "FocusSymbols": [
    "kvm_arch_vcpu_ioctl_run",
    "kvm_arch_vcpu_ioctl",
    "kvm_arch_vm_ioctl",
    "kvm_arch_init_vm",
    "kvm_arch_vcpu_create",
    "handle_exit",
    "kvm_handle_guest_abort",
    "kvm_arm_get_reg",
    "kvm_arm_set_reg"
  ],
  "Reasoning": "The patch introduces a major new feature: support for running ARM64 virtual machines on S390 hosts using KVM. This includes a new KVM architecture backend with its own vCPU run loop, exit handling, MMU fault handling, and register access. This is highly functional core kernel logic that should be heavily fuzzed.",
  "WorthFuzzing": true
}

1/1 2026/08/01 19:39 action read-patch-diff
0m Args:
null

Results:
{
  "PatchDiff": "commit 45ec622a9865345bc93f5695e0740ed1b3500911\nAuthor: syz-cluster \u003ctriage@syzkaller.com\u003e\nDate:   Sat Aug 1 19:39:44 2026 +0000\n\n    syz-cluster: applied patch under review\n\ndiff --git a/MAINTAINERS b/MAINTAINERS\nindex 0d7987278c07e..c7ef6c0163a98 100644\n--- a/MAINTAINERS\n+++ b/MAINTAINERS\n@@ -23918,7 +23918,7 @@ R:\tEric Farman \u003cfarman@linux.ibm.com\u003e\n L:\tlinux-s390@vger.kernel.org\n L:\tkvm@vger.kernel.org\n S:\tSupported\n-F:\tarch/s390/kvm/pci*\n+F:\tarch/s390/kvm/s390/pci*\n F:\tdrivers/vfio/pci/vfio_pci_zdev.c\n F:\tinclude/uapi/linux/vfio_zdev.h\n \ndiff --git a/arch/arm64/Makefile b/arch/arm64/Makefile\nindex 6b005c8fef706..1cd7cd94a8554 100644\n--- a/arch/arm64/Makefile\n+++ b/arch/arm64/Makefile\n@@ -43,7 +43,9 @@ CC_FLAGS_NO_FPU\t:= -mgeneral-regs-only\n KBUILD_CFLAGS\t+= $(CC_FLAGS_NO_FPU) \\\n \t\t   $(compat_vdso) $(cc_has_k_constraint)\n KBUILD_CFLAGS\t+= $(call cc-disable-warning, psabi)\n+KBUILD_CFLAGS\t+= -DARM64_S390_COMMON\n KBUILD_AFLAGS\t+= $(compat_vdso)\n+KBUILD_AFLAGS\t+= -DARM64_S390_COMMON\n \n ifeq ($(call rustc-min-version, 108500),y)\n KBUILD_RUSTFLAGS += --target=aarch64-unknown-none-softfloat\ndiff --git a/arch/arm64/include/asm/brk-imm.h b/arch/arm64/include/asm/brk-imm.h\nindex beb42c62b6acc..dd2d153dc0d81 100644\n--- a/arch/arm64/include/asm/brk-imm.h\n+++ b/arch/arm64/include/asm/brk-imm.h\n@@ -2,6 +2,7 @@\n /*\n  * Copyright (C) 2012 ARM Ltd.\n  */\n+/* Whole file is shared with s390 */\n \n #ifndef __ASM_BRK_IMM_H\n #define __ASM_BRK_IMM_H\ndiff --git a/arch/arm64/include/asm/esr.h b/arch/arm64/include/asm/esr.h\nindex f816f5d77f1a5..2cb73bde73469 100644\n--- a/arch/arm64/include/asm/esr.h\n+++ b/arch/arm64/include/asm/esr.h\n@@ -3,11 +3,12 @@\n  * Copyright (C) 2013 - ARM Ltd\n  * Author: Marc Zyngier \u003cmarc.zyngier@arm.com\u003e\n  */\n+/* Whole file is shared with s390 */\n \n #ifndef __ASM_ESR_H\n #define __ASM_ESR_H\n \n-#include \u003casm/memory.h\u003e\n+#include \u003casm/brk-imm.h\u003e\n #include \u003casm/sysreg.h\u003e\n \n #define ESR_ELx_EC_UNKNOWN\tUL(0x00)\n@@ -435,7 +436,7 @@\n #define ESR_ELx_IT_GCSPOPX\t\t7\n \n #ifndef __ASSEMBLER__\n-#include \u003casm/types.h\u003e\n+#include \u003clinux/types.h\u003e\n \n static inline unsigned long esr_brk_comment(unsigned long esr)\n {\ndiff --git a/arch/arm64/include/asm/kvm_arm.h b/arch/arm64/include/asm/kvm_arm.h\nindex 3f9233b5a1308..cc4175176f947 100644\n--- a/arch/arm64/include/asm/kvm_arm.h\n+++ b/arch/arm64/include/asm/kvm_arm.h\n@@ -3,14 +3,16 @@\n  * Copyright (C) 2012,2013 - ARM Ltd\n  * Author: Marc Zyngier \u003cmarc.zyngier@arm.com\u003e\n  */\n+/* Whole file is shared with s390 */\n \n #ifndef __ARM64_KVM_ARM_H__\n #define __ARM64_KVM_ARM_H__\n \n+#include \u003clinux/const.h\u003e\n+#include \u003clinux/bits.h\u003e\n+#include \u003clinux/types.h\u003e\n #include \u003casm/esr.h\u003e\n-#include \u003casm/memory.h\u003e\n #include \u003casm/sysreg.h\u003e\n-#include \u003casm/types.h\u003e\n \n /*\n  * Because I'm terribly lazy and that repainting the whole of the KVM\ndiff --git a/arch/arm64/include/asm/kvm_emulate.h b/arch/arm64/include/asm/kvm_emulate.h\nindex 5bf3d7e1d92c7..2dac665ccfd12 100644\n--- a/arch/arm64/include/asm/kvm_emulate.h\n+++ b/arch/arm64/include/asm/kvm_emulate.h\n@@ -44,11 +44,13 @@ enum exception_type {\n bool kvm_condition_valid32(const struct kvm_vcpu *vcpu);\n void kvm_skip_instr32(struct kvm_vcpu *vcpu);\n \n+int kvm_inject_dabt_excl_atomic(struct kvm_vcpu *vcpu, u64 addr);\n+int kvm_inject_serror_esr(struct kvm_vcpu *vcpu, u64 esr);\n+\n+#ifdef ARM64_S390_COMMON\n void kvm_inject_undefined(struct kvm_vcpu *vcpu);\n void kvm_inject_sync(struct kvm_vcpu *vcpu, u64 esr);\n-int kvm_inject_serror_esr(struct kvm_vcpu *vcpu, u64 esr);\n int kvm_inject_sea(struct kvm_vcpu *vcpu, bool iabt, u64 addr);\n-int kvm_inject_dabt_excl_atomic(struct kvm_vcpu *vcpu, u64 addr);\n void kvm_inject_size_fault(struct kvm_vcpu *vcpu);\n \n static inline int kvm_inject_sea_dabt(struct kvm_vcpu *vcpu, u64 addr)\n@@ -61,6 +63,8 @@ static inline int kvm_inject_sea_iabt(struct kvm_vcpu *vcpu, u64 addr)\n \treturn kvm_inject_sea(vcpu, true, addr);\n }\n \n+#endif /* ARM64_S390_COMMON */\n+\n static inline int kvm_inject_serror(struct kvm_vcpu *vcpu)\n {\n \t/*\n@@ -133,12 +137,17 @@ static inline void vcpu_set_vsesr(struct kvm_vcpu *vcpu, u64 vsesr)\n \n static __always_inline unsigned long *vcpu_pc(const struct kvm_vcpu *vcpu)\n {\n-\treturn (unsigned long *)\u0026vcpu_gp_regs(vcpu)-\u003epc;\n+\treturn (unsigned long *)\u0026vcpu-\u003earch.ctxt.regs.pc;\n }\n \n static __always_inline unsigned long *vcpu_cpsr(const struct kvm_vcpu *vcpu)\n {\n-\treturn (unsigned long *)\u0026vcpu_gp_regs(vcpu)-\u003epstate;\n+\treturn (unsigned long *)\u0026vcpu-\u003earch.ctxt.regs.pstate;\n+}\n+\n+static __always_inline unsigned long *vcpu_sp_el0(const struct kvm_vcpu *vcpu)\n+{\n+\treturn (unsigned long *)\u0026vcpu-\u003earch.ctxt.regs.sp;\n }\n \n static __always_inline bool vcpu_mode_is_32bit(const struct kvm_vcpu *vcpu)\n@@ -159,6 +168,7 @@ static inline void vcpu_set_thumb(struct kvm_vcpu *vcpu)\n \t*vcpu_cpsr(vcpu) |= PSR_AA32_T_BIT;\n }\n \n+#ifdef ARM64_S390_COMMON\n /*\n  * vcpu_get_reg and vcpu_set_reg should always be passed a register number\n  * coming from a read of ESR_EL2. Otherwise, it may give the wrong result on\n@@ -167,16 +177,18 @@ static inline void vcpu_set_thumb(struct kvm_vcpu *vcpu)\n static __always_inline unsigned long vcpu_get_reg(const struct kvm_vcpu *vcpu,\n \t\t\t\t\t u8 reg_num)\n {\n-\treturn (reg_num == 31) ? 0 : vcpu_gp_regs(vcpu)-\u003eregs[reg_num];\n+\treturn (reg_num == 31) ? 0 : vcpu_gp_regs(vcpu)[reg_num];\n }\n \n static __always_inline void vcpu_set_reg(struct kvm_vcpu *vcpu, u8 reg_num,\n \t\t\t\tunsigned long val)\n {\n \tif (reg_num != 31)\n-\t\tvcpu_gp_regs(vcpu)-\u003eregs[reg_num] = val;\n+\t\tvcpu_gp_regs(vcpu)[reg_num] = val;\n }\n \n+#endif /* ARM64_S390_COMMON */\n+\n static inline bool vcpu_is_el2_ctxt(const struct kvm_cpu_context *ctxt)\n {\n \tswitch (ctxt-\u003eregs.pstate \u0026 (PSR_MODE32_BIT | PSR_MODE_MASK)) {\n@@ -360,6 +372,7 @@ static inline u64 kvm_vcpu_get_disr(const struct kvm_vcpu *vcpu)\n \treturn vcpu-\u003earch.fault.disr_el1;\n }\n \n+#ifdef ARM64_S390_COMMON\n static inline u32 kvm_vcpu_hvc_get_imm(const struct kvm_vcpu *vcpu)\n {\n \treturn kvm_vcpu_get_esr(vcpu) \u0026 ESR_ELx_xVC_IMM_MASK;\n@@ -437,6 +450,8 @@ static __always_inline u8 kvm_vcpu_trap_get_fault(const struct kvm_vcpu *vcpu)\n \treturn kvm_vcpu_get_esr(vcpu) \u0026 ESR_ELx_FSC;\n }\n \n+#endif /* ARM64_S390_COMMON */\n+\n static inline\n bool kvm_vcpu_trap_is_permission_fault(const struct kvm_vcpu *vcpu)\n {\n@@ -477,6 +492,7 @@ static __always_inline int kvm_vcpu_sys_get_rt(struct kvm_vcpu *vcpu)\n \treturn ESR_ELx_SYS64_ISS_RT(esr);\n }\n \n+#ifdef ARM64_S390_COMMON\n static inline bool kvm_is_write_fault(struct kvm_vcpu *vcpu)\n {\n \tif (kvm_vcpu_abt_iss1tw(vcpu)) {\n@@ -501,6 +517,8 @@ static inline bool kvm_is_write_fault(struct kvm_vcpu *vcpu)\n \treturn kvm_vcpu_dabt_iswrite(vcpu);\n }\n \n+#endif /* ARM64_S390_COMMON */\n+\n static inline unsigned long kvm_vcpu_get_mpidr_aff(struct kvm_vcpu *vcpu)\n {\n \treturn __vcpu_sys_reg(vcpu, MPIDR_EL1) \u0026 MPIDR_HWID_BITMASK;\n@@ -536,6 +554,7 @@ static inline bool kvm_vcpu_is_be(struct kvm_vcpu *vcpu)\n \treturn vcpu_read_sys_reg(vcpu, r) \u0026 bit;\n }\n \n+#ifdef ARM64_S390_COMMON\n static inline unsigned long vcpu_data_guest_to_host(struct kvm_vcpu *vcpu,\n \t\t\t\t\t\t    unsigned long data,\n \t\t\t\t\t\t    unsigned int len)\n@@ -611,6 +630,8 @@ static __always_inline void kvm_incr_pc(struct kvm_vcpu *vcpu)\n \t\tvcpu_set_flag((v), e);\t\t\t\t\t\\\n \t} while (0)\n \n+#endif /* ARM64_S390_COMMON */\n+\n /*\n  * Returns a 'sanitised' view of CPTR_EL2, translating from nVHE to the VHE\n  * format if E2H isn't set.\ndiff --git a/arch/arm64/include/asm/kvm_host.h b/arch/arm64/include/asm/kvm_host.h\nindex bae2c4f92ef5c..83fefceed952b 100644\n--- a/arch/arm64/include/asm/kvm_host.h\n+++ b/arch/arm64/include/asm/kvm_host.h\n@@ -39,6 +39,7 @@\n \n #define KVM_MAX_VCPUS VGIC_V3_MAX_CPUS\n \n+#ifdef ARM64_S390_COMMON\n #define KVM_VCPU_MAX_FEATURES 9\n #define KVM_VCPU_VALID_FEATURES\t(BIT(KVM_VCPU_MAX_FEATURES) - 1)\n \n@@ -56,6 +57,38 @@\n #define KVM_REQ_MAP_L1_VNCR_EL2\t\tKVM_ARCH_REQ(10)\n #define KVM_REQ_VGIC_PROCESS_UPDATE\tKVM_ARCH_REQ(11)\n \n+/*\n+ * If we encounter a data abort without valid instruction syndrome\n+ * information, report this to user space.  User space can (and\n+ * should) opt in to this feature if KVM_CAP_ARM_NISV_TO_USER is\n+ * supported.\n+ */\n+#define KVM_ARCH_FLAG_RETURN_NISV_IO_ABORT_TO_USER\t0\n+/* Memory Tagging Extension enabled for the guest */\n+#define KVM_ARCH_FLAG_MTE_ENABLED\t\t\t1\n+/* At least one vCPU has ran in the VM */\n+#define KVM_ARCH_FLAG_HAS_RAN_ONCE\t\t\t2\n+/* The vCPU feature set for the VM is configured */\n+#define KVM_ARCH_FLAG_VCPU_FEATURES_CONFIGURED\t\t3\n+/* PSCI SYSTEM_SUSPEND enabled for the guest */\n+#define KVM_ARCH_FLAG_SYSTEM_SUSPEND_ENABLED\t\t4\n+/* VM counter offset */\n+#define KVM_ARCH_FLAG_VM_COUNTER_OFFSET\t\t\t5\n+/* Timer PPIs made immutable */\n+#define KVM_ARCH_FLAG_TIMER_PPIS_IMMUTABLE\t\t6\n+/* Initial ID reg values loaded */\n+#define KVM_ARCH_FLAG_ID_REGS_INITIALIZED\t\t7\n+/* Fine-Grained UNDEF initialised */\n+#define KVM_ARCH_FLAG_FGU_INITIALIZED\t\t\t8\n+/* SVE exposed to guest */\n+#define KVM_ARCH_FLAG_GUEST_HAS_SVE\t\t\t9\n+/* MIDR_EL1, REVIDR_EL1, and AIDR_EL1 are writable from userspace */\n+#define KVM_ARCH_FLAG_WRITABLE_IMP_ID_REGS\t\t10\n+/* Unhandled SEAs are taken to userspace */\n+#define KVM_ARCH_FLAG_EXIT_SEA\t\t\t\t11\n+\n+#endif /* ARM64_S390_COMMON */\n+\n #define KVM_DIRTY_LOG_MANUAL_CAPS   (KVM_DIRTY_LOG_MANUAL_PROTECT_ENABLE | \\\n \t\t\t\t     KVM_DIRTY_LOG_INITIALLY_SET)\n \n@@ -338,35 +371,6 @@ struct kvm_arch {\n \t/* Protects VM-scoped configuration data */\n \tstruct mutex config_lock;\n \n-\t/*\n-\t * If we encounter a data abort without valid instruction syndrome\n-\t * information, report this to user space.  User space can (and\n-\t * should) opt in to this feature if KVM_CAP_ARM_NISV_TO_USER is\n-\t * supported.\n-\t */\n-#define KVM_ARCH_FLAG_RETURN_NISV_IO_ABORT_TO_USER\t0\n-\t/* Memory Tagging Extension enabled for the guest */\n-#define KVM_ARCH_FLAG_MTE_ENABLED\t\t\t1\n-\t/* At least one vCPU has ran in the VM */\n-#define KVM_ARCH_FLAG_HAS_RAN_ONCE\t\t\t2\n-\t/* The vCPU feature set for the VM is configured */\n-#define KVM_ARCH_FLAG_VCPU_FEATURES_CONFIGURED\t\t3\n-\t/* PSCI SYSTEM_SUSPEND enabled for the guest */\n-#define KVM_ARCH_FLAG_SYSTEM_SUSPEND_ENABLED\t\t4\n-\t/* VM counter offset */\n-#define KVM_ARCH_FLAG_VM_COUNTER_OFFSET\t\t\t5\n-\t/* Timer PPIs made immutable */\n-#define KVM_ARCH_FLAG_TIMER_PPIS_IMMUTABLE\t\t6\n-\t/* Initial ID reg values loaded */\n-#define KVM_ARCH_FLAG_ID_REGS_INITIALIZED\t\t7\n-\t/* Fine-Grained UNDEF initialised */\n-#define KVM_ARCH_FLAG_FGU_INITIALIZED\t\t\t8\n-\t/* SVE exposed to guest */\n-#define KVM_ARCH_FLAG_GUEST_HAS_SVE\t\t\t9\n-\t/* MIDR_EL1, REVIDR_EL1, and AIDR_EL1 are writable from userspace */\n-#define KVM_ARCH_FLAG_WRITABLE_IMP_ID_REGS\t\t10\n-\t/* Unhandled SEAs are taken to userspace */\n-#define KVM_ARCH_FLAG_EXIT_SEA\t\t\t\t11\n \tunsigned long flags;\n \n \t/* VM-wide vCPU feature set */\n@@ -831,6 +835,8 @@ extern s64 kvm_nvhe_sym(hyp_physvirt_offset);\n extern u64 kvm_nvhe_sym(hyp_cpu_logical_map)[NR_CPUS];\n #define hyp_cpu_logical_map CHOOSE_NVHE_SYM(hyp_cpu_logical_map)\n \n+#ifdef ARM64_S390_COMMON\n+\n struct vcpu_reset_state {\n \tunsigned long\tpc;\n \tunsigned long\tr0;\n@@ -838,6 +844,8 @@ struct vcpu_reset_state {\n \tbool\t\treset;\n };\n \n+#endif /* ARM64_S390_COMMON */\n+\n struct vncr_tlb;\n \n struct kvm_vcpu_arch {\n@@ -947,6 +955,7 @@ struct kvm_vcpu_arch {\n \tpid_t pid;\n };\n \n+#ifdef ARM64_S390_COMMON\n /*\n  * Each 'flag' is composed of a comma-separated triplet:\n  *\n@@ -1098,6 +1107,8 @@ struct kvm_vcpu_arch {\n /* KVM is currently emulating an L2 to L1 exception */\n #define IN_NESTED_EXCEPTION\t__vcpu_single_flag(sflags, BIT(9))\n \n+#endif /* ARM64_S390_COMMON */\n+\n #define vcpu_sve_max_vq(vcpu)\tsve_vq_from_vl((vcpu)-\u003earch.sve_max_vl)\n \n #define vcpu_sve_zcr_elx(vcpu)\t\t\t\t\t\t\\\n@@ -1152,7 +1163,7 @@ struct kvm_vcpu_arch {\n #define vcpu_clear_on_unsupported_cpu(vcpu)\t\t\t\t\\\n \tvcpu_clear_flag(vcpu, ON_UNSUPPORTED_CPU)\n \n-#define vcpu_gp_regs(v)\t\t(\u0026(v)-\u003earch.ctxt.regs)\n+#define vcpu_gp_regs(v)\t\t((v)-\u003earch.ctxt.regs.regs)\n \n /*\n  * Only use __vcpu_sys_reg/ctxt_sys_reg if you know you want the\n@@ -1183,6 +1194,12 @@ static inline u64 *___ctxt_sys_reg(const struct kvm_cpu_context *ctxt, int r)\n \n #define ctxt_sys_reg(c,r)\t(*__ctxt_sys_reg(c,r))\n \n+#define kvm_vcpu_get_sp_el1(__vcpu) (__ctxt_sys_reg(\u0026(__vcpu)-\u003earch.ctxt, SP_EL1))\n+#define kvm_vcpu_get_vreg(__vcpu, _n) (\u0026(__vcpu)-\u003earch.ctxt.fp_regs.vregs[_n])\n+#define kvm_vcpu_get_vregs(__vcpu) (\u0026(__vcpu)-\u003earch.ctxt.fp_regs.vregs)\n+#define kvm_vcpu_get_fpsr(__vcpu) (\u0026(__vcpu)-\u003earch.ctxt.fp_regs.fpsr)\n+#define kvm_vcpu_get_fpcr(__vcpu) (\u0026(__vcpu)-\u003earch.ctxt.fp_regs.fpcr)\n+\n u64 kvm_vcpu_apply_reg_masks(const struct kvm_vcpu *, enum vcpu_sysreg, u64);\n \n #define __vcpu_assign_sys_reg(v, r, val)\t\t\t\t\\\n@@ -1233,6 +1250,7 @@ struct kvm_vcpu_stat {\n \tu64 exits;\n };\n \n+#ifdef ARM64_S390_COMMON\n unsigned long kvm_arm_num_regs(struct kvm_vcpu *vcpu);\n int kvm_arm_copy_reg_indices(struct kvm_vcpu *vcpu, u64 __user *indices);\n int kvm_arm_get_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg);\n@@ -1241,6 +1259,8 @@ int kvm_arm_set_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg);\n unsigned long kvm_arm_num_sys_reg_descs(struct kvm_vcpu *vcpu);\n int kvm_arm_copy_sys_reg_indices(struct kvm_vcpu *vcpu, u64 __user *uindices);\n \n+#endif /* ARM64_S390_COMMON */\n+\n int __kvm_arm_vcpu_get_events(struct kvm_vcpu *vcpu,\n \t\t\t      struct kvm_vcpu_events *events);\n \n@@ -1319,6 +1339,7 @@ int __init populate_nv_trap_config(void);\n \n void kvm_calculate_traps(struct kvm_vcpu *vcpu);\n \n+#ifdef ARM64_S390_COMMON\n /* MMIO helpers */\n void kvm_mmio_write_buf(void *buf, unsigned int len, unsigned long data);\n unsigned long kvm_mmio_read_buf(const void *buf, unsigned int len);\n@@ -1326,6 +1347,8 @@ unsigned long kvm_mmio_read_buf(const void *buf, unsigned int len);\n int kvm_handle_mmio_return(struct kvm_vcpu *vcpu);\n int io_mem_abort(struct kvm_vcpu *vcpu, phys_addr_t fault_ipa);\n \n+#endif /* ARM64_S390_COMMON */\n+\n /*\n  * Returns true if a Performance Monitoring Interrupt (PMI), a.k.a. perf event,\n  * arrived in guest context.  For arm64, any event that arrives while a vCPU is\n@@ -1523,11 +1546,15 @@ static inline bool __vcpu_has_feature(const struct kvm_arch *ka, int feature)\n \treturn test_bit(feature, ka-\u003evcpu_features);\n }\n \n+#ifdef ARM64_S390_COMMON\n+\n #define kvm_vcpu_has_feature(k, f)\t__vcpu_has_feature(\u0026(k)-\u003earch, (f))\n #define vcpu_has_feature(v, f)\t__vcpu_has_feature(\u0026(v)-\u003ekvm-\u003earch, (f))\n \n #define kvm_vcpu_initialized(v) vcpu_get_flag(v, VCPU_INITIALIZED)\n \n+#endif /* ARM64_S390_COMMON */\n+\n int kvm_trng_call(struct kvm_vcpu *vcpu);\n #ifdef CONFIG_KVM\n extern phys_addr_t hyp_mem_base;\ndiff --git a/arch/arm64/include/asm/ptrace.h b/arch/arm64/include/asm/ptrace.h\nindex 39582511ad72f..bb16a9894a5ad 100644\n--- a/arch/arm64/include/asm/ptrace.h\n+++ b/arch/arm64/include/asm/ptrace.h\n@@ -28,6 +28,8 @@\n \n #define GIC_PRIO_PSR_I_SET\tGICV3_PRIO_PSR_I_SET\n \n+#ifdef ARM64_S390_COMMON\n+\n /* Additional SPSR bits not exposed in the UABI */\n #define PSR_MODE_THREAD_BIT\t(1 \u003c\u003c 0)\n #define PSR_IL_BIT\t\t(1 \u003c\u003c 20)\n@@ -68,6 +70,8 @@\n #define PSR_AA32_IT_MASK\t0x0600fc00\t/* If-Then execution state mask */\n #define PSR_AA32_GE_MASK\t0x000f0000\n \n+#endif /* ARM64_S390_COMMON */\n+\n #ifdef CONFIG_CPU_BIG_ENDIAN\n #define PSR_AA32_ENDSTATE\tPSR_AA32_E_BIT\n #else\n@@ -104,26 +108,48 @@\n #define COMPAT_USER_SZ\t296\n \n /* Architecturally defined mapping between AArch32 and AArch64 registers */\n+enum {\n+\t__compat_fp\t= 11,\n+\t__compat_sp\t= 13,\n+\t__compat_lr\t= 14,\n+\t__compat_sp_hyp\t= 15,\n+\t__compat_lr_irq\t= 16,\n+\t__compat_sp_irq\t= 17,\n+\t__compat_lr_svc\t= 18,\n+\t__compat_sp_svc\t= 19,\n+\t__compat_lr_abt\t= 20,\n+\t__compat_sp_abt\t= 21,\n+\t__compat_lr_und\t= 22,\n+\t__compat_sp_und\t= 23,\n+\t__compat_r8_fiq\t= 24,\n+\t__compat_r9_fiq\t= 25,\n+\t__compat_r10_fi\t= 26,\n+\t__compat_r11_fi\t= 27,\n+\t__compat_r12_fi\t= 28,\n+\t__compat_sp_fiq\t= 29,\n+\t__compat_lr_fiq\t= 30,\n+};\n+\n #define compat_usr(x)\tregs[(x)]\n-#define compat_fp\tregs[11]\n-#define compat_sp\tregs[13]\n-#define compat_lr\tregs[14]\n-#define compat_sp_hyp\tregs[15]\n-#define compat_lr_irq\tregs[16]\n-#define compat_sp_irq\tregs[17]\n-#define compat_lr_svc\tregs[18]\n-#define compat_sp_svc\tregs[19]\n-#define compat_lr_abt\tregs[20]\n-#define compat_sp_abt\tregs[21]\n-#define compat_lr_und\tregs[22]\n-#define compat_sp_und\tregs[23]\n-#define compat_r8_fiq\tregs[24]\n-#define compat_r9_fiq\tregs[25]\n-#define compat_r10_fiq\tregs[26]\n-#define compat_r11_fiq\tregs[27]\n-#define compat_r12_fiq\tregs[28]\n-#define compat_sp_fiq\tregs[29]\n-#define compat_lr_fiq\tregs[30]\n+#define compat_fp\tregs[__compat_fp]\n+#define compat_sp\tregs[__compat_sp]\n+#define compat_lr\tregs[__compat_lr]\n+#define compat_sp_hyp\tregs[__compat_sp_hyp]\n+#define compat_lr_irq\tregs[__compat_lr_irq]\n+#define compat_sp_irq\tregs[__compat_sp_irq]\n+#define compat_lr_svc\tregs[__compat_lr_svc]\n+#define compat_sp_svc\tregs[__compat_sp_svc]\n+#define compat_lr_abt\tregs[__compat_lr_ab]\n+#define compat_sp_abt\tregs[__compat_sp_abt]\n+#define compat_lr_und\tregs[__compat_lr_und]\n+#define compat_sp_und\tregs[__compat_sp_und]\n+#define compat_r8_fiq\tregs[__compat_r8_fiq]\n+#define compat_r9_fiq\tregs[__compat_r9_fiq]\n+#define compat_r10_fiq\tregs[__compat_r10_fi]\n+#define compat_r11_fiq\tregs[__compat_r11_fi]\n+#define compat_r12_fiq\tregs[__compat_r12_fi]\n+#define compat_sp_fiq\tregs[__compat_sp_fiq]\n+#define compat_lr_fiq\tregs[__compat_lr_fiq]\n \n static inline unsigned long compat_psr_to_pstate(const unsigned long psr)\n {\ndiff --git a/arch/arm64/include/asm/sysreg.h b/arch/arm64/include/asm/sysreg.h\nindex 7aa08d59d4944..1c5c4df260bea 100644\n--- a/arch/arm64/include/asm/sysreg.h\n+++ b/arch/arm64/include/asm/sysreg.h\n@@ -16,6 +16,8 @@\n \n #include \u003casm/gpr-num.h\u003e\n \n+#ifdef ARM64_S390_COMMON\n+\n /*\n  * ARMv8 ARM reserves the following encoding for system registers:\n  * (Ref: ARMv8 ARM, Section: \"System instruction class encoding overview\",\n@@ -50,6 +52,8 @@\n #define sys_reg_CRm(id)\t(((id) \u003e\u003e CRm_shift) \u0026 CRm_mask)\n #define sys_reg_Op2(id)\t(((id) \u003e\u003e Op2_shift) \u0026 Op2_mask)\n \n+#endif /* ARM64_S390_COMMON */\n+\n #ifndef CONFIG_BROKEN_GAS_INST\n \n #ifdef __ASSEMBLER__\n@@ -123,6 +127,8 @@\n #define GSB_SYS_BARRIER_INSN\t\t__SYS_BARRIER_INSN(1, 0, 12, 0, 0, 31)\n #define GSB_ACK_BARRIER_INSN\t\t__SYS_BARRIER_INSN(1, 0, 12, 0, 1, 31)\n \n+#ifdef ARM64_S390_COMMON\n+\n /* Data cache zero operations */\n #define SYS_DC_ISW\t\t\tsys_insn(1, 0, 7, 6, 2)\n #define SYS_DC_IGSW\t\t\tsys_insn(1, 0, 7, 6, 4)\n@@ -173,7 +179,7 @@\n  * come from here. The header relies on the definition of sys_reg()\n  * earlier in this file.\n  */\n-#include \"asm/sysreg-defs.h\"\n+#include \u003casm/sysreg-defs.h\u003e\n \n /*\n  * System registers, organised loosely by encoding but grouped together\n@@ -295,7 +301,6 @@\n #define SYS_APGAKEYLO_EL1\t\tsys_reg(3, 0, 2, 3, 0)\n #define SYS_APGAKEYHI_EL1\t\tsys_reg(3, 0, 2, 3, 1)\n \n-#define SYS_SPSR_EL1\t\t\tsys_reg(3, 0, 4, 0, 0)\n #define SYS_ELR_EL1\t\t\tsys_reg(3, 0, 4, 0, 1)\n \n #define SYS_ICC_PMR_EL1\t\t\tsys_reg(3, 0, 4, 6, 0)\n@@ -518,7 +523,6 @@\n #define SYS_VTTBR_EL2\t\t\tsys_reg(3, 4, 2, 1, 0)\n \n #define SYS_HAFGRTR_EL2\t\t\tsys_reg(3, 4, 3, 1, 6)\n-#define SYS_SPSR_EL2\t\t\tsys_reg(3, 4, 4, 0, 0)\n #define SYS_ELR_EL2\t\t\tsys_reg(3, 4, 4, 0, 1)\n #define SYS_SP_EL1\t\t\tsys_reg(3, 4, 4, 1, 0)\n #define SYS_SPSR_irq\t\t\tsys_reg(3, 4, 4, 3, 0)\n@@ -604,7 +608,6 @@\n #define SYS_BRBCR_EL12\t\t\tsys_reg(2, 5, 9, 0, 0)\n #define SYS_TTBR0_EL12\t\t\tsys_reg(3, 5, 2, 0, 0)\n #define SYS_TTBR1_EL12\t\t\tsys_reg(3, 5, 2, 0, 1)\n-#define SYS_SPSR_EL12\t\t\tsys_reg(3, 5, 4, 0, 0)\n #define SYS_ELR_EL12\t\t\tsys_reg(3, 5, 4, 0, 1)\n #define SYS_AFSR0_EL12\t\t\tsys_reg(3, 5, 5, 1, 0)\n #define SYS_AFSR1_EL12\t\t\tsys_reg(3, 5, 5, 1, 1)\n@@ -835,6 +838,8 @@\n #define SCTLR_ELx_A\t (BIT(1))\n #define SCTLR_ELx_M\t (BIT(0))\n \n+#endif /* ARM64_S390_COMMON */\n+\n #ifdef CONFIG_CPU_BIG_ENDIAN\n #define ENDIAN_SET_EL2\t\tSCTLR_ELx_EE\n #else\n@@ -869,6 +874,7 @@\n \t SCTLR_EL1_LSMAOE | SCTLR_EL1_nTLSMD | SCTLR_EL1_EIS   | \\\n \t SCTLR_EL1_TSCXT  | SCTLR_EL1_EOS)\n \n+#ifdef ARM64_S390_COMMON\n /* MAIR_ELx memory attributes (used by Linux) */\n #define MAIR_ATTR_DEVICE_nGnRnE\t\tUL(0x00)\n #define MAIR_ATTR_DEVICE_nGnRE\t\tUL(0x04)\n@@ -1105,6 +1111,8 @@\n #define GICV5_GICR_CDNMIA_TYPE_MASK\tGENMASK_ULL(31, 29)\n #define GICV5_GICR_CDNMIA_ID_MASK\tGENMASK_ULL(23, 0)\n \n+#endif /* ARM64_S390_COMMON */\n+\n #define gicr_insn(insn)\t\t\tread_sysreg_s(GICV5_OP_GICR_##insn)\n #define gic_insn(v, insn)\t\twrite_sysreg_s(v, GICV5_OP_GIC_##insn)\n \n@@ -1254,6 +1262,8 @@\n \tpar;\t\t\t\t\t\t\t\t\\\n })\n \n+#ifdef ARM64_S390_COMMON\n+\n #define SYS_FIELD_VALUE(reg, field, val)\treg##_##field##_##val\n \n #define SYS_FIELD_GET(reg, field, val)\t\t\\\n@@ -1266,6 +1276,8 @@\n \t\t FIELD_PREP(reg##_##field##_MASK,\t\\\n \t\t\t    SYS_FIELD_VALUE(reg, field, val))\n \n-#endif\n+#endif /* ARM64_S390_COMMON */\n+\n+#endif /* __ASSEMBLER__ */\n \n #endif\t/* __ASM_SYSREG_H */\ndiff --git a/arch/arm64/kvm/arm.c b/arch/arm64/kvm/arm.c\nindex 9a6c72a186727..2d2e7498be884 100644\n--- a/arch/arm64/kvm/arm.c\n+++ b/arch/arm64/kvm/arm.c\n@@ -1593,6 +1593,7 @@ static unsigned long system_supported_vcpu_features(void)\n \treturn features;\n }\n \n+#ifdef ARM64_S390_COMMON\n static int kvm_vcpu_init_check_features(struct kvm_vcpu *vcpu,\n \t\t\t\t\tconst struct kvm_vcpu_init *init)\n {\n@@ -1641,6 +1642,8 @@ static bool kvm_vcpu_init_changed(struct kvm_vcpu *vcpu,\n \t\t\t     KVM_VCPU_MAX_FEATURES);\n }\n \n+#endif /* ARM64_S390_COMMON */\n+\n static int kvm_setup_vcpu(struct kvm_vcpu *vcpu)\n {\n \tstruct kvm *kvm = vcpu-\u003ekvm;\ndiff --git a/arch/arm64/kvm/guest.c b/arch/arm64/kvm/guest.c\nindex b01d6622b8720..df1f78ff10445 100644\n--- a/arch/arm64/kvm/guest.c\n+++ b/arch/arm64/kvm/guest.c\n@@ -62,6 +62,7 @@ const struct kvm_stats_header kvm_vcpu_stats_header = {\n \t\t       sizeof(kvm_vcpu_stats_desc),\n };\n \n+#ifdef ARM64_S390_COMMON\n static bool core_reg_offset_is_vreg(u64 off)\n {\n \treturn off \u003e= KVM_REG_ARM_CORE_REG(fp_regs.vregs) \u0026\u0026\n@@ -134,19 +135,19 @@ static void *core_reg_addr(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg)\n \t     KVM_REG_ARM_CORE_REG(regs.regs[30]):\n \t\toff -= KVM_REG_ARM_CORE_REG(regs.regs[0]);\n \t\toff /= 2;\n-\t\treturn \u0026vcpu-\u003earch.ctxt.regs.regs[off];\n+\t\treturn \u0026vcpu_gp_regs(vcpu)[off];\n \n \tcase KVM_REG_ARM_CORE_REG(regs.sp):\n-\t\treturn \u0026vcpu-\u003earch.ctxt.regs.sp;\n+\t\treturn vcpu_sp_el0(vcpu);\n \n \tcase KVM_REG_ARM_CORE_REG(regs.pc):\n-\t\treturn \u0026vcpu-\u003earch.ctxt.regs.pc;\n+\t\treturn vcpu_pc(vcpu);\n \n \tcase KVM_REG_ARM_CORE_REG(regs.pstate):\n-\t\treturn \u0026vcpu-\u003earch.ctxt.regs.pstate;\n+\t\treturn vcpu_cpsr(vcpu);\n \n \tcase KVM_REG_ARM_CORE_REG(sp_el1):\n-\t\treturn __ctxt_sys_reg(\u0026vcpu-\u003earch.ctxt, SP_EL1);\n+\t\treturn kvm_vcpu_get_sp_el1(vcpu);\n \n \tcase KVM_REG_ARM_CORE_REG(elr_el1):\n \t\treturn __ctxt_sys_reg(\u0026vcpu-\u003earch.ctxt, ELR_EL1);\n@@ -170,13 +171,13 @@ static void *core_reg_addr(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg)\n \t     KVM_REG_ARM_CORE_REG(fp_regs.vregs[31]):\n \t\toff -= KVM_REG_ARM_CORE_REG(fp_regs.vregs[0]);\n \t\toff /= 4;\n-\t\treturn \u0026vcpu-\u003earch.ctxt.fp_regs.vregs[off];\n+\t\treturn kvm_vcpu_get_vreg(vcpu, off);\n \n \tcase KVM_REG_ARM_CORE_REG(fp_regs.fpsr):\n-\t\treturn \u0026vcpu-\u003earch.ctxt.fp_regs.fpsr;\n+\t\treturn kvm_vcpu_get_fpsr(vcpu);\n \n \tcase KVM_REG_ARM_CORE_REG(fp_regs.fpcr):\n-\t\treturn \u0026vcpu-\u003earch.ctxt.fp_regs.fpcr;\n+\t\treturn kvm_vcpu_get_fpcr(vcpu);\n \n \tdefault:\n \t\treturn NULL;\n@@ -306,6 +307,8 @@ static int set_core_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg)\n \treturn err;\n }\n \n+#endif /* ARM64_S390_COMMON */\n+\n #define vq_word(vq) (((vq) - SVE_VQ_MIN) / 64)\n #define vq_mask(vq) ((u64)1 \u003c\u003c ((vq) - SVE_VQ_MIN) % 64)\n #define vq_present(vqs, vq) (!!((vqs)[vq_word(vq)] \u0026 vq_mask(vq)))\n@@ -543,6 +546,7 @@ int kvm_arch_vcpu_ioctl_set_regs(struct kvm_vcpu *vcpu, struct kvm_regs *regs)\n \treturn -EINVAL;\n }\n \n+#ifdef ARM64_S390_COMMON\n static int copy_core_reg_indices(const struct kvm_vcpu *vcpu,\n \t\t\t\t u64 __user *uindices)\n {\n@@ -591,6 +595,8 @@ static unsigned long num_core_regs(const struct kvm_vcpu *vcpu)\n \treturn copy_core_reg_indices(vcpu, NULL);\n }\n \n+#endif /* ARM64_S390_COMMON */\n+\n static unsigned long num_sve_regs(const struct kvm_vcpu *vcpu)\n {\n \tconst unsigned int slices = vcpu_sve_slices(vcpu);\ndiff --git a/arch/arm64/kvm/handle_exit.c b/arch/arm64/kvm/handle_exit.c\nindex 54aedf93c78b6..d511af145ee6a 100644\n--- a/arch/arm64/kvm/handle_exit.c\n+++ b/arch/arm64/kvm/handle_exit.c\n@@ -213,6 +213,7 @@ static int kvm_handle_guest_debug(struct kvm_vcpu *vcpu)\n \treturn 0;\n }\n \n+#ifdef ARM64_S390_COMMON\n static int kvm_handle_unknown_ec(struct kvm_vcpu *vcpu)\n {\n \tu64 esr = kvm_vcpu_get_esr(vcpu);\n@@ -224,6 +225,8 @@ static int kvm_handle_unknown_ec(struct kvm_vcpu *vcpu)\n \treturn 1;\n }\n \n+#endif /* ARM64_S390_COMMON */\n+\n /*\n  * Guest access to SVE registers should be routed to this handler only\n  * when the system doesn't support SVE.\n@@ -404,6 +407,7 @@ static exit_handle_fn arm_exit_handlers[] = {\n \t[ESR_ELx_EC_GCS]\t= kvm_handle_gcs,\n };\n \n+#ifdef ARM64_S390_COMMON\n static exit_handle_fn kvm_get_exit_handler(struct kvm_vcpu *vcpu)\n {\n \tu64 esr = kvm_vcpu_get_esr(vcpu);\n@@ -439,6 +443,8 @@ static int handle_trap_exceptions(struct kvm_vcpu *vcpu)\n \treturn handled;\n }\n \n+#endif /* ARM64_S390_COMMON */\n+\n /*\n  * Return \u003e 0 to return to guest, \u003c 0 on error, 0 (and set exit_reason) on\n  * proper exit to userspace.\ndiff --git a/arch/arm64/kvm/hyp/exception.c b/arch/arm64/kvm/hyp/exception.c\nindex bef40ddb16dbc..9e63c4aebb296 100644\n--- a/arch/arm64/kvm/hyp/exception.c\n+++ b/arch/arm64/kvm/hyp/exception.c\n@@ -292,12 +292,12 @@ static void enter_exception32(struct kvm_vcpu *vcpu, u32 mode, u32 vect_offset)\n \tswitch(mode) {\n \tcase PSR_AA32_MODE_ABT:\n \t\t__vcpu_write_spsr_abt(vcpu, host_spsr_to_spsr32(spsr));\n-\t\tvcpu_gp_regs(vcpu)-\u003ecompat_lr_abt = return_address;\n+\t\tvcpu_gp_regs(vcpu)[__compat_lr_abt] = return_address;\n \t\tbreak;\n \n \tcase PSR_AA32_MODE_UND:\n \t\t__vcpu_write_spsr_und(vcpu, host_spsr_to_spsr32(spsr));\n-\t\tvcpu_gp_regs(vcpu)-\u003ecompat_lr_und = return_address;\n+\t\tvcpu_gp_regs(vcpu)[__compat_lr_und] = return_address;\n \t\tbreak;\n \t}\n \ndiff --git a/arch/arm64/kvm/hyp/include/hyp/adjust_pc.h b/arch/arm64/kvm/hyp/include/hyp/adjust_pc.h\nindex 4fdfeabefeb43..a049983bd5c3a 100644\n--- a/arch/arm64/kvm/hyp/include/hyp/adjust_pc.h\n+++ b/arch/arm64/kvm/hyp/include/hyp/adjust_pc.h\n@@ -33,11 +33,11 @@ static inline void kvm_skip_instr(struct kvm_vcpu *vcpu)\n static inline void __kvm_skip_instr(struct kvm_vcpu *vcpu)\n {\n \t*vcpu_pc(vcpu) = read_sysreg_el2(SYS_ELR);\n-\tvcpu_gp_regs(vcpu)-\u003epstate = read_sysreg_el2(SYS_SPSR);\n+\t*vcpu_cpsr(vcpu) = read_sysreg_el2(SYS_SPSR);\n \n \tkvm_skip_instr(vcpu);\n \n-\twrite_sysreg_el2(vcpu_gp_regs(vcpu)-\u003epstate, SYS_SPSR);\n+\twrite_sysreg_el2(*vcpu_cpsr(vcpu), SYS_SPSR);\n \twrite_sysreg_el2(*vcpu_pc(vcpu), SYS_ELR);\n }\n \ndiff --git a/arch/arm64/kvm/hyp/include/hyp/switch.h b/arch/arm64/kvm/hyp/include/hyp/switch.h\nindex 4bf624a49591d..fc1fdc99d82cf 100644\n--- a/arch/arm64/kvm/hyp/include/hyp/switch.h\n+++ b/arch/arm64/kvm/hyp/include/hyp/switch.h\n@@ -451,7 +451,7 @@ static inline bool kvm_hyp_handle_mops(struct kvm_vcpu *vcpu, u64 *exit_code)\n \tu64 spsr;\n \n \t*vcpu_pc(vcpu) = read_sysreg_el2(SYS_ELR);\n-\tarm64_mops_reset_regs(vcpu_gp_regs(vcpu), vcpu-\u003earch.fault.esr_el2);\n+\tarm64_mops_reset_regs(\u0026vcpu-\u003earch.ctxt.regs, vcpu-\u003earch.fault.esr_el2);\n \twrite_sysreg_el2(*vcpu_pc(vcpu), SYS_ELR);\n \n \t/*\n@@ -896,7 +896,7 @@ static inline void synchronize_vcpu_pstate(struct kvm_vcpu *vcpu)\n \t/*\n \t * Check for the conditions of Cortex-A510's #2077057. When these occur\n \t * SPSR_EL2 can't be trusted, but isn't needed either as it is\n-\t * unchanged from the value in vcpu_gp_regs(vcpu)-\u003epstate.\n+\t * unchanged from the value in vcpu_cpsr(vcpu).\n \t * Are we single-stepping the guest, and took a PAC exception from the\n \t * active-not-pending state?\n \t */\ndiff --git a/arch/arm64/kvm/mmio.c b/arch/arm64/kvm/mmio.c\nindex d1c3a352d5a22..5161102da5077 100644\n--- a/arch/arm64/kvm/mmio.c\n+++ b/arch/arm64/kvm/mmio.c\n@@ -10,6 +10,7 @@\n \n #include \"trace.h\"\n \n+#ifdef ARM64_S390_COMMON\n void kvm_mmio_write_buf(void *buf, unsigned int len, unsigned long data)\n {\n \tvoid *datap = NULL;\n@@ -258,3 +259,4 @@ int io_mem_abort(struct kvm_vcpu *vcpu, phys_addr_t fault_ipa)\n \trun-\u003eexit_reason\t= KVM_EXIT_MMIO;\n \treturn 0;\n }\n+#endif /* ARM64_S390_COMMON */\ndiff --git a/arch/arm64/kvm/reset.c b/arch/arm64/kvm/reset.c\nindex b963fd975aaca..81d9f0faede2e 100644\n--- a/arch/arm64/kvm/reset.c\n+++ b/arch/arm64/kvm/reset.c\n@@ -34,6 +34,7 @@\n static u32 __ro_after_init kvm_ipa_limit;\n unsigned int __ro_after_init kvm_host_sve_max_vl;\n \n+#ifdef ARM64_S390_COMMON\n /*\n  * ARMv8 Reset Values\n  */\n@@ -46,6 +47,8 @@ unsigned int __ro_after_init kvm_host_sve_max_vl;\n #define VCPU_RESET_PSTATE_SVC\t(PSR_AA32_MODE_SVC | PSR_AA32_A_BIT | \\\n \t\t\t\t PSR_AA32_I_BIT | PSR_AA32_F_BIT)\n \n+#endif /* ARM64_S390_COMMON */\n+\n unsigned int __ro_after_init kvm_sve_max_vl;\n \n int __init kvm_arm_init_sve(void)\n@@ -169,6 +172,33 @@ static void kvm_vcpu_reset_sve(struct kvm_vcpu *vcpu)\n \t\tmemset(vcpu-\u003earch.sve_state, 0, vcpu_sve_state_size(vcpu));\n }\n \n+#ifdef ARM64_S390_COMMON\n+static void kvm_reset_vcpu_core_regs(struct kvm_vcpu *vcpu)\n+{\n+\tu32 pstate;\n+\n+\tif (vcpu_el1_is_32bit(vcpu))\n+\t\tpstate = VCPU_RESET_PSTATE_SVC;\n+\telse if (vcpu_has_nv(vcpu))\n+\t\tpstate = VCPU_RESET_PSTATE_EL2;\n+\telse\n+\t\tpstate = VCPU_RESET_PSTATE_EL1;\n+\n+\tmemset(vcpu_gp_regs(vcpu), 0, sizeof(vcpu_gp_regs(vcpu)));\n+\t*vcpu_pc(vcpu) = 0;\n+\t*vcpu_sp_el0(vcpu) = 0;\n+\tmemset(kvm_vcpu_get_vregs(vcpu), 0, sizeof(*kvm_vcpu_get_vregs(vcpu)));\n+\tmemset(kvm_vcpu_get_fpsr(vcpu), 0, sizeof(*kvm_vcpu_get_fpsr(vcpu)));\n+\tmemset(kvm_vcpu_get_fpcr(vcpu), 0, sizeof(*kvm_vcpu_get_fpcr(vcpu)));\n+\tvcpu-\u003earch.ctxt.spsr_abt = 0;\n+\tvcpu-\u003earch.ctxt.spsr_und = 0;\n+\tvcpu-\u003earch.ctxt.spsr_irq = 0;\n+\tvcpu-\u003earch.ctxt.spsr_fiq = 0;\n+\t*vcpu_cpsr(vcpu) = pstate;\n+}\n+\n+#endif /* ARM64_S390_COMMON */\n+\n /**\n  * kvm_reset_vcpu - sets core registers and sys_regs to reset value\n  * @vcpu: The VCPU pointer\n@@ -191,7 +221,6 @@ void kvm_reset_vcpu(struct kvm_vcpu *vcpu)\n {\n \tstruct vcpu_reset_state reset_state;\n \tbool loaded;\n-\tu32 pstate;\n \n \tspin_lock(\u0026vcpu-\u003earch.mp_state_lock);\n \treset_state = vcpu-\u003earch.reset_state;\n@@ -210,21 +239,8 @@ void kvm_reset_vcpu(struct kvm_vcpu *vcpu)\n \t\tkvm_vcpu_reset_sve(vcpu);\n \t}\n \n-\tif (vcpu_el1_is_32bit(vcpu))\n-\t\tpstate = VCPU_RESET_PSTATE_SVC;\n-\telse if (vcpu_has_nv(vcpu))\n-\t\tpstate = VCPU_RESET_PSTATE_EL2;\n-\telse\n-\t\tpstate = VCPU_RESET_PSTATE_EL1;\n-\n \t/* Reset core registers */\n-\tmemset(vcpu_gp_regs(vcpu), 0, sizeof(*vcpu_gp_regs(vcpu)));\n-\tmemset(\u0026vcpu-\u003earch.ctxt.fp_regs, 0, sizeof(vcpu-\u003earch.ctxt.fp_regs));\n-\tvcpu-\u003earch.ctxt.spsr_abt = 0;\n-\tvcpu-\u003earch.ctxt.spsr_und = 0;\n-\tvcpu-\u003earch.ctxt.spsr_irq = 0;\n-\tvcpu-\u003earch.ctxt.spsr_fiq = 0;\n-\tvcpu_gp_regs(vcpu)-\u003epstate = pstate;\n+\tkvm_reset_vcpu_core_regs(vcpu);\n \n \t/* Reset system registers */\n \tkvm_reset_sys_regs(vcpu);\ndiff --git a/arch/arm64/tools/sysreg b/arch/arm64/tools/sysreg\nindex 7cb61aca3797f..2a4b94e8c62fd 100644\n--- a/arch/arm64/tools/sysreg\n+++ b/arch/arm64/tools/sysreg\n@@ -401,6 +401,78 @@ Res0\t3:1\n Field\t0\tSO\n EndSysreg\n \n+Sysreg\tSPSR_EL1\t3\t0\t4\t0\t0\n+Res0\t63:37\n+Field\t36\tUNIJ\n+Res0\t35:34\n+Field\t33\tPPEND\n+Res0\t32\n+Field\t31\tN\n+Field\t30\tZ\n+Field\t29\tC\n+Field\t28\tV\n+Field\t27\tQ\n+Field\t26:25\tIT01\n+Field\t24\tDIT\n+Field\t23\tSSBS\n+Field\t22\tPAN\n+Field\t21\tSS\n+Field\t20\tIL\n+Field\t19:16\tGE\n+Field\t15:10\tIT27\n+Field\t9\tE\n+Field\t8\tA\n+Field\t7\tI\n+Field\t6\tF\n+Field\t5\tT\n+Field\t4\tM4\n+Enum\t3:0\tM\n+\t0b0000\tEL0\n+\t0b0100\tEL1t\n+\t0b0101\tEL1h\n+\t0b1000\tEL1tnv\n+\t0b1001\tEL1hnv\n+EndEnum\n+EndSysreg\n+\n+Sysreg\tSPSR_EL2\t3\t4\t4\t0\t0\n+Res0\t63:37\n+Field\t36\tUNIJ\n+Res0\t35:34\n+Field\t33\tPPEND\n+Res0\t32\n+Field\t31\tN\n+Field\t30\tZ\n+Field\t29\tC\n+Field\t28\tV\n+Field\t27\tQ\n+Field\t26:25\tIT01\n+Field\t24\tDIT\n+Field\t23\tSSBS\n+Field\t22\tPAN\n+Field\t21\tSS\n+Field\t20\tIL\n+Field\t19:16\tGE\n+Field\t15:10\tIT27\n+Field\t9\tE\n+Field\t8\tA\n+Field\t7\tI\n+Field\t6\tF\n+Field\t5\tT\n+Field\t4\tM4\n+Enum\t3:0\tM\n+\t0b0000\tEL0\n+\t0b0100\tEL1t\n+\t0b0101\tEL1h\n+\t0b1000\tEL2t\n+\t0b1001\tEL3h\n+EndEnum\n+EndSysreg\n+\n+Sysreg\tSPSR_EL12\t3\t5\t4\t0\t0\n+Mapping\tSPSR_EL1\n+EndSysreg\n+\n Sysreg ID_PFR0_EL1\t3\t0\t0\t1\t0\n Res0\t63:32\n UnsignedEnum\t31:28\tRAS\ndiff --git a/arch/s390/Kconfig b/arch/s390/Kconfig\nindex 84404e6778d50..b2eaa2000b101 100644\n--- a/arch/s390/Kconfig\n+++ b/arch/s390/Kconfig\n@@ -834,7 +834,7 @@ config VFIO_CCW\n config VFIO_AP\n \tdef_tristate n\n \tprompt \"VFIO support for AP devices\"\n-\tdepends on KVM\n+\tdepends on KVM_S390\n \tdepends on VFIO\n \tdepends on AP\n \tselect VFIO_MDEV\ndiff --git a/arch/s390/boot/ipl_parm.c b/arch/s390/boot/ipl_parm.c\nindex 6bc950b92be76..b8906ba7e5e8a 100644\n--- a/arch/s390/boot/ipl_parm.c\n+++ b/arch/s390/boot/ipl_parm.c\n@@ -300,7 +300,7 @@ void parse_boot_command_line(void)\n \t\t\tstack_protector_debug = 1;\n #endif\n \n-#if IS_ENABLED(CONFIG_KVM)\n+#if IS_ENABLED(CONFIG_KVM_S390)\n \t\tif (!strcmp(param, \"prot_virt\")) {\n \t\t\trc = kstrtobool(val, \u0026enabled);\n \t\t\tif (!rc \u0026\u0026 enabled)\ndiff --git a/arch/s390/boot/uv.c b/arch/s390/boot/uv.c\nindex 4568e8f81dac1..f7b68bdcedc13 100644\n--- a/arch/s390/boot/uv.c\n+++ b/arch/s390/boot/uv.c\n@@ -26,7 +26,7 @@ void uv_query_info(void)\n \tif (uv_call(0, (uint64_t)\u0026uvcb) \u0026\u0026 uvcb.header.rc != UVC_RC_MORE_DATA)\n \t\treturn;\n \n-\tif (IS_ENABLED(CONFIG_KVM)) {\n+\tif (IS_ENABLED(CONFIG_KVM_S390)) {\n \t\tmemcpy(uv_info.inst_calls_list, uvcb.inst_calls_list, sizeof(uv_info.inst_calls_list));\n \t\tuv_info.uv_base_stor_len = uvcb.uv_base_stor_len;\n \t\tuv_info.guest_base_stor_len = uvcb.conf_base_phys_stor_len;\ndiff --git a/arch/s390/configs/debug_defconfig b/arch/s390/configs/debug_defconfig\nindex 54637be87fb73..e9ad718a94085 100644\n--- a/arch/s390/configs/debug_defconfig\n+++ b/arch/s390/configs/debug_defconfig\n@@ -63,7 +63,7 @@ CONFIG_IOMMUFD=y\n CONFIG_CMM=m\n CONFIG_APPLDATA_BASE=y\n CONFIG_S390_HYPFS_FS=y\n-CONFIG_KVM=m\n+CONFIG_KVM_S390=m\n CONFIG_KVM_S390_UCONTROL=y\n CONFIG_S390_UNWIND_SELFTEST=m\n CONFIG_S390_KPROBES_SANITY_TEST=m\ndiff --git a/arch/s390/configs/defconfig b/arch/s390/configs/defconfig\nindex 5f5114a253cf7..20de85c96e9eb 100644\n--- a/arch/s390/configs/defconfig\n+++ b/arch/s390/configs/defconfig\n@@ -61,7 +61,8 @@ CONFIG_IOMMUFD=y\n CONFIG_CMM=m\n CONFIG_APPLDATA_BASE=y\n CONFIG_S390_HYPFS_FS=y\n-CONFIG_KVM=m\n+CONFIG_KVM_S390=m\n+CONFIG_KVM_ARM64=m\n CONFIG_S390_UNWIND_SELFTEST=m\n CONFIG_S390_KPROBES_SANITY_TEST=m\n CONFIG_S390_MODULES_SANITY_TEST=m\ndiff --git a/arch/s390/include/arm64/kvm_emulate.h b/arch/s390/include/arm64/kvm_emulate.h\nnew file mode 100644\nindex 0000000000000..c02a6fdeb9ab0\n--- /dev/null\n+++ b/arch/s390/include/arm64/kvm_emulate.h\n@@ -0,0 +1,102 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+\n+#ifndef __S390_ARM64_KVM_EMULATE_H__\n+#define __S390_ARM64_KVM_EMULATE_H__\n+\n+#include \u003casm/fault.h\u003e\n+#include \u003casm/ptrace.h\u003e\n+#include \u003clinux/kvm_host.h\u003e\n+\n+#include \u003carm64/kvm_arm.h\u003e\n+#include \u003carm64/sysreg.h\u003e\n+\n+static __always_inline unsigned long *vcpu_pc(const struct kvm_vcpu *vcpu)\n+{\n+\treturn (unsigned long *)\u0026vcpu-\u003earch.sae_block.pc;\n+}\n+\n+static __always_inline unsigned long *vcpu_cpsr(const struct kvm_vcpu *vcpu)\n+{\n+\treturn (unsigned long *)\u0026vcpu-\u003earch.sae_block.pstate;\n+}\n+\n+static __always_inline unsigned long *vcpu_sp_el0(const struct kvm_vcpu *vcpu)\n+{\n+\treturn (unsigned long *)\u0026vcpu-\u003earch.sae_block.sp_el0;\n+}\n+\n+static __always_inline bool vcpu_mode_is_32bit(const struct kvm_vcpu *vcpu)\n+{\n+\treturn false;\n+}\n+\n+static __always_inline u64 kvm_vcpu_get_esr(const struct kvm_vcpu *vcpu)\n+{\n+\treturn vcpu-\u003earch.sae_block.hai.esr_elz;\n+}\n+\n+static inline unsigned long *vcpu_hcr(struct kvm_vcpu *vcpu)\n+{\n+\treturn (unsigned long *)\u0026vcpu-\u003earch.hcr_elz;\n+}\n+\n+static __always_inline unsigned long kvm_vcpu_get_hfar(const struct kvm_vcpu *vcpu)\n+{\n+\treturn vcpu-\u003earch.sae_block.hai.far_elz;\n+}\n+\n+static __always_inline phys_addr_t kvm_vcpu_get_fault_ipa(const struct kvm_vcpu *vcpu)\n+{\n+\treturn vcpu-\u003earch.sae_block.hai.teid.addr * PAGE_SIZE;\n+}\n+\n+static inline u16 kvm_vcpu_fault_pic(const struct kvm_vcpu *vcpu)\n+{\n+\treturn vcpu-\u003earch.sae_block.hai.pic \u0026 PGM_INT_CODE_MASK;\n+}\n+\n+static __always_inline\n+bool kvm_vcpu_trap_is_permission_fault(const struct kvm_vcpu *vcpu)\n+{\n+\treturn kvm_vcpu_fault_pic(vcpu) == PGM_PROTECTION;\n+}\n+\n+static __always_inline bool kvm_condition_valid(const struct kvm_vcpu *vcpu)\n+{\n+\treturn true;\n+}\n+\n+static __always_inline bool vcpu_el1_is_32bit(struct kvm_vcpu *vcpu)\n+{\n+\treturn false;\n+}\n+\n+static inline bool kvm_vcpu_is_be(struct kvm_vcpu *vcpu)\n+{\n+\treturn false;\n+}\n+\n+static inline int kvm_vcpu_abt_gltl(struct kvm_vcpu *vcpu)\n+{\n+\treturn vcpu-\u003earch.sae_block.hai.gltl;\n+}\n+\n+static inline bool vcpu_mode_priv(const struct kvm_vcpu *vcpu)\n+{\n+\tu32 mode = *vcpu_cpsr(vcpu) \u0026 PSR_MODE_MASK;\n+\n+\treturn mode != PSR_MODE_EL0t;\n+}\n+\n+static inline void kvm_skip_instr(struct kvm_vcpu *vcpu)\n+{\n+\t*vcpu_pc(vcpu) += 4;\n+\t*vcpu_cpsr(vcpu) \u0026= ~PSR_BTYPE_MASK;\n+\n+\t/* advance the singlestep state machine */\n+\t*vcpu_cpsr(vcpu) \u0026= ~SPSR_EL1_SS;\n+}\n+\n+#include \u003carm64/kvm_emulate-gen.h\u003e\n+\n+#endif /* __S390_ARM64_KVM_EMULATE_H__ */\ndiff --git a/arch/s390/include/arm64/kvm_nested.h b/arch/s390/include/arm64/kvm_nested.h\nnew file mode 100644\nindex 0000000000000..e950b1a10c417\n--- /dev/null\n+++ b/arch/s390/include/arm64/kvm_nested.h\n@@ -0,0 +1,11 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+\n+#ifndef ASM_KVM_NESTED_H\n+#define ASM_KVM_NESTED_H\n+\n+static inline bool vcpu_has_nv(const struct kvm_vcpu *vcpu)\n+{\n+\treturn false;\n+}\n+\n+#endif /* ASM_KVM_NESTED_H */\ndiff --git a/arch/s390/include/arm64/ptrace.h b/arch/s390/include/arm64/ptrace.h\nnew file mode 100644\nindex 0000000000000..449b85582c977\n--- /dev/null\n+++ b/arch/s390/include/arm64/ptrace.h\n@@ -0,0 +1,11 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+\n+#ifndef __S390_ARM64_PTRACE_H__\n+#define __S390_ARM64_PTRACE_H__\n+\n+#include \u003carm64/sysreg.h\u003e\n+#include \u003cuapi/arm64/ptrace.h\u003e\n+\n+#include \u003carm64/ptrace-gen.h\u003e\n+\n+#endif /* __S390_ARM64_PTRACE_H__ */\ndiff --git a/arch/s390/include/arm64/sysreg.h b/arch/s390/include/arm64/sysreg.h\nnew file mode 100644\nindex 0000000000000..ac6b638fef563\n--- /dev/null\n+++ b/arch/s390/include/arm64/sysreg.h\n@@ -0,0 +1,13 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+\n+#ifndef __S390_ARM64_SYSREG_H__\n+#define __S390_ARM64_SYSREG_H__\n+\n+#include \u003clinux/bits.h\u003e\n+#include \u003clinux/stringify.h\u003e\n+#include \u003clinux/kasan-tags.h\u003e\n+#include \u003clinux/kconfig.h\u003e\n+\n+#include \u003carm64/sysreg-gen.h\u003e\n+\n+#endif /* __S390_ARM64_SYSREG_H__ */\ndiff --git a/arch/s390/include/asm/Kbuild b/arch/s390/include/asm/Kbuild\nindex 0c1fc47c3ba0a..f6fd67d1c6513 100644\n--- a/arch/s390/include/asm/Kbuild\n+++ b/arch/s390/include/asm/Kbuild\n@@ -8,3 +8,6 @@ generic-y += asm-offsets.h\n generic-y += mcs_spinlock.h\n generic-y += mmzone.h\n generic-y += ring_buffer.h\n+\n+generated-y += sysreg-gen-defs.h\n+generated-y += kvm_arm64_modname.h\ndiff --git a/arch/s390/include/asm/asm-prototypes.h b/arch/s390/include/asm/asm-prototypes.h\nindex d4da4436d02be..faa2afb259a1a 100644\n--- a/arch/s390/include/asm/asm-prototypes.h\n+++ b/arch/s390/include/asm/asm-prototypes.h\n@@ -6,6 +6,7 @@\n #include \u003casm/bug.h\u003e\n #include \u003casm/fpu.h\u003e\n #include \u003casm/nospec-branch.h\u003e\n+#include \u003casm/sae.h\u003e\n #include \u003casm-generic/asm-prototypes.h\u003e\n \n #endif /* _ASM_S390_PROTOTYPES_H */\ndiff --git a/arch/s390/include/asm/elf.h b/arch/s390/include/asm/elf.h\nindex bb63fa4d20bb8..ad3108ecfb07b 100644\n--- a/arch/s390/include/asm/elf.h\n+++ b/arch/s390/include/asm/elf.h\n@@ -123,6 +123,7 @@ enum {\n \tHWCAP_NR_NNPA\t\t= 20,\n \tHWCAP_NR_PCI_MIO\t= 21,\n \tHWCAP_NR_SIE\t\t= 22,\n+\tHWCAP_NR_SAE\t\t= 23,\n \tHWCAP_NR_MAX\n };\n \n@@ -150,6 +151,7 @@ enum {\n #define HWCAP_NNPA\t\tBIT(HWCAP_NR_NNPA)\n #define HWCAP_PCI_MIO\t\tBIT(HWCAP_NR_PCI_MIO)\n #define HWCAP_SIE\t\tBIT(HWCAP_NR_SIE)\n+#define HWCAP_SAE\t\tBIT(HWCAP_NR_SAE)\n \n /*\n  * These are used to set parameters in the core dumps.\ndiff --git a/arch/s390/include/asm/kvm.h b/arch/s390/include/asm/kvm.h\nnew file mode 100644\nindex 0000000000000..aeb11dc631d5e\n--- /dev/null\n+++ b/arch/s390/include/asm/kvm.h\n@@ -0,0 +1,6 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+#ifdef KVM_S390_ARM64\n+#include \u003cuapi/arm64/kvm.h\u003e\n+#else\n+#include \u003cuapi/asm/kvm.h\u003e\n+#endif\ndiff --git a/arch/s390/include/asm/kvm_host.h b/arch/s390/include/asm/kvm_host.h\nindex c172f9b212d18..cd6d572883abc 100644\n--- a/arch/s390/include/asm/kvm_host.h\n+++ b/arch/s390/include/asm/kvm_host.h\n@@ -1,154 +1,18 @@\n /* SPDX-License-Identifier: GPL-2.0 */\n-/*\n- * definition for kernel virtual machines on s390\n- *\n- * Copyright IBM Corp. 2008, 2018\n- *\n- *    Author(s): Carsten Otte \u003ccotte@de.ibm.com\u003e\n- */\n-\n \n #ifndef ASM_KVM_HOST_H\n #define ASM_KVM_HOST_H\n \n-#include \u003clinux/types.h\u003e\n-#include \u003clinux/hrtimer.h\u003e\n-#include \u003clinux/interrupt.h\u003e\n-#include \u003clinux/kvm_types.h\u003e\n-#include \u003clinux/kvm.h\u003e\n-#include \u003clinux/seqlock.h\u003e\n-#include \u003clinux/module.h\u003e\n-#include \u003clinux/pci.h\u003e\n-#include \u003clinux/mmu_notifier.h\u003e\n-#include \u003casm/kvm_host_types.h\u003e\n-#include \u003casm/debug.h\u003e\n-#include \u003casm/cpu.h\u003e\n-#include \u003casm/fpu.h\u003e\n-#include \u003casm/isc.h\u003e\n-#include \u003casm/guarded_storage.h\u003e\n-\n-#define KVM_HAVE_MMU_RWLOCK\n-#define KVM_MAX_VCPUS 255\n-\n-#define KVM_INTERNAL_MEM_SLOTS 1\n-\n-/*\n- * These seem to be used for allocating -\u003echip in the routing table, which we\n- * don't use. 1 is as small as we can get to reduce the needed memory. If we\n- * need to look at -\u003echip later on, we'll need to revisit this.\n- */\n-#define KVM_NR_IRQCHIPS 1\n-#define KVM_IRQCHIP_NUM_PINS 1\n-#define KVM_HALT_POLL_NS_DEFAULT 50000\n-\n-/* s390-specific vcpu-\u003erequests bit members */\n-#define KVM_REQ_ENABLE_IBS\tKVM_ARCH_REQ(0)\n-#define KVM_REQ_DISABLE_IBS\tKVM_ARCH_REQ(1)\n-#define KVM_REQ_ICPT_OPEREXC\tKVM_ARCH_REQ(2)\n-#define KVM_REQ_START_MIGRATION KVM_ARCH_REQ(3)\n-#define KVM_REQ_STOP_MIGRATION  KVM_ARCH_REQ(4)\n-#define KVM_REQ_VSIE_RESTART\tKVM_ARCH_REQ(5)\n-#define KVM_REQ_REFRESH_GUEST_PREFIX\t\\\n-\tKVM_ARCH_REQ_FLAGS(6, KVM_REQUEST_WAIT | KVM_REQUEST_NO_WAKEUP)\n+#ifdef KVM_S390_ARM64\n+#include \u003casm/kvm_host_arm64.h\u003e\n+#else\n+#include \u003casm/kvm_host_s390.h\u003e\n+#endif\n \n-struct kvm_vcpu_stat {\n-\tstruct kvm_vcpu_stat_generic generic;\n-\tu64 exit_userspace;\n-\tu64 exit_null;\n-\tu64 exit_external_request;\n-\tu64 exit_io_request;\n-\tu64 exit_external_interrupt;\n-\tu64 exit_stop_request;\n-\tu64 exit_validity;\n-\tu64 exit_instruction;\n-\tu64 exit_pei;\n-\tu64 halt_no_poll_steal;\n-\tu64 instruction_lctl;\n-\tu64 instruction_lctlg;\n-\tu64 instruction_stctl;\n-\tu64 instruction_stctg;\n-\tu64 exit_program_interruption;\n-\tu64 exit_instr_and_program;\n-\tu64 exit_operation_exception;\n-\tu64 deliver_ckc;\n-\tu64 deliver_cputm;\n-\tu64 deliver_external_call;\n-\tu64 deliver_emergency_signal;\n-\tu64 deliver_service_signal;\n-\tu64 deliver_virtio;\n-\tu64 deliver_stop_signal;\n-\tu64 deliver_prefix_signal;\n-\tu64 deliver_restart_signal;\n-\tu64 deliver_program;\n-\tu64 deliver_io;\n-\tu64 deliver_machine_check;\n-\tu64 exit_wait_state;\n-\tu64 inject_ckc;\n-\tu64 inject_cputm;\n-\tu64 inject_external_call;\n-\tu64 inject_emergency_signal;\n-\tu64 inject_mchk;\n-\tu64 inject_pfault_init;\n-\tu64 inject_program;\n-\tu64 inject_restart;\n-\tu64 inject_set_prefix;\n-\tu64 inject_stop_signal;\n-\tu64 instruction_epsw;\n-\tu64 instruction_gs;\n-\tu64 instruction_io_other;\n-\tu64 instruction_lpsw;\n-\tu64 instruction_lpswe;\n-\tu64 instruction_lpswey;\n-\tu64 instruction_pfmf;\n-\tu64 instruction_ptff;\n-\tu64 instruction_sck;\n-\tu64 instruction_sckpf;\n-\tu64 instruction_stidp;\n-\tu64 instruction_spx;\n-\tu64 instruction_stpx;\n-\tu64 instruction_stap;\n-\tu64 instruction_iske;\n-\tu64 instruction_ri;\n-\tu64 instruction_rrbe;\n-\tu64 instruction_sske;\n-\tu64 instruction_ipte_interlock;\n-\tu64 instruction_stsi;\n-\tu64 instruction_stfl;\n-\tu64 instruction_tb;\n-\tu64 instruction_tpi;\n-\tu64 instruction_tprot;\n-\tu64 instruction_tsch;\n-\tu64 instruction_sie;\n-\tu64 instruction_essa;\n-\tu64 instruction_sthyi;\n-\tu64 instruction_sigp_sense;\n-\tu64 instruction_sigp_sense_running;\n-\tu64 instruction_sigp_external_call;\n-\tu64 instruction_sigp_emergency;\n-\tu64 instruction_sigp_cond_emergency;\n-\tu64 instruction_sigp_start;\n-\tu64 instruction_sigp_stop;\n-\tu64 instruction_sigp_stop_store_status;\n-\tu64 instruction_sigp_store_status;\n-\tu64 instruction_sigp_store_adtl_status;\n-\tu64 instruction_sigp_arch;\n-\tu64 instruction_sigp_prefix;\n-\tu64 instruction_sigp_restart;\n-\tu64 instruction_sigp_init_cpu_reset;\n-\tu64 instruction_sigp_cpu_reset;\n-\tu64 instruction_sigp_unknown;\n-\tu64 instruction_diagnose_10;\n-\tu64 instruction_diagnose_44;\n-\tu64 instruction_diagnose_9c;\n-\tu64 diag_9c_ignored;\n-\tu64 diag_9c_forward;\n-\tu64 instruction_diagnose_258;\n-\tu64 instruction_diagnose_308;\n-\tu64 instruction_diagnose_500;\n-\tu64 instruction_diagnose_other;\n-\tu64 pfault_sync;\n-\tu64 signal_exits;\n-};\n+static inline  bool kvm_arch_pmi_in_guest(struct kvm_vcpu *vcpu)\n+{\n+\treturn false;\n+}\n \n #define PGM_OPERATION\t\t\t0x01\n #define PGM_PRIVILEGED_OP\t\t0x02\n@@ -207,577 +71,4 @@ struct kvm_vcpu_stat {\n #define PGM_PER\t\t\t\t0x80\n #define PGM_CRYPTO_OPERATION\t\t0x119\n \n-/* irq types in ascend order of priorities */\n-enum irq_types {\n-\tIRQ_PEND_SET_PREFIX = 0,\n-\tIRQ_PEND_RESTART,\n-\tIRQ_PEND_SIGP_STOP,\n-\tIRQ_PEND_IO_ISC_7,\n-\tIRQ_PEND_IO_ISC_6,\n-\tIRQ_PEND_IO_ISC_5,\n-\tIRQ_PEND_IO_ISC_4,\n-\tIRQ_PEND_IO_ISC_3,\n-\tIRQ_PEND_IO_ISC_2,\n-\tIRQ_PEND_IO_ISC_1,\n-\tIRQ_PEND_IO_ISC_0,\n-\tIRQ_PEND_VIRTIO,\n-\tIRQ_PEND_PFAULT_DONE,\n-\tIRQ_PEND_PFAULT_INIT,\n-\tIRQ_PEND_EXT_HOST,\n-\tIRQ_PEND_EXT_SERVICE,\n-\tIRQ_PEND_EXT_SERVICE_EV,\n-\tIRQ_PEND_EXT_TIMING,\n-\tIRQ_PEND_EXT_CPU_TIMER,\n-\tIRQ_PEND_EXT_CLOCK_COMP,\n-\tIRQ_PEND_EXT_EXTERNAL,\n-\tIRQ_PEND_EXT_EMERGENCY,\n-\tIRQ_PEND_EXT_MALFUNC,\n-\tIRQ_PEND_EXT_IRQ_KEY,\n-\tIRQ_PEND_MCHK_REP,\n-\tIRQ_PEND_PROG,\n-\tIRQ_PEND_SVC,\n-\tIRQ_PEND_MCHK_EX,\n-\tIRQ_PEND_COUNT\n-};\n-\n-/* We have 2M for virtio device descriptor pages. Smallest amount of\n- * memory per page is 24 bytes (1 queue), so (2048*1024) / 24 = 87381\n- */\n-#define KVM_S390_MAX_VIRTIO_IRQS 87381\n-\n-/*\n- * Repressible (non-floating) machine check interrupts\n- * subclass bits in MCIC\n- */\n-#define MCHK_EXTD_BIT 58\n-#define MCHK_DEGR_BIT 56\n-#define MCHK_WARN_BIT 55\n-#define MCHK_REP_MASK ((1UL \u003c\u003c MCHK_DEGR_BIT) | \\\n-\t\t       (1UL \u003c\u003c MCHK_EXTD_BIT) | \\\n-\t\t       (1UL \u003c\u003c MCHK_WARN_BIT))\n-\n-/* Exigent machine check interrupts subclass bits in MCIC */\n-#define MCHK_SD_BIT 63\n-#define MCHK_PD_BIT 62\n-#define MCHK_EX_MASK ((1UL \u003c\u003c MCHK_SD_BIT) | (1UL \u003c\u003c MCHK_PD_BIT))\n-\n-#define IRQ_PEND_EXT_MASK ((1UL \u003c\u003c IRQ_PEND_EXT_IRQ_KEY)    | \\\n-\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_CLOCK_COMP) | \\\n-\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_CPU_TIMER)  | \\\n-\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_MALFUNC)    | \\\n-\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_EMERGENCY)  | \\\n-\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_EXTERNAL)   | \\\n-\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_TIMING)     | \\\n-\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_HOST)       | \\\n-\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_SERVICE)    | \\\n-\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_SERVICE_EV) | \\\n-\t\t\t   (1UL \u003c\u003c IRQ_PEND_VIRTIO)         | \\\n-\t\t\t   (1UL \u003c\u003c IRQ_PEND_PFAULT_INIT)    | \\\n-\t\t\t   (1UL \u003c\u003c IRQ_PEND_PFAULT_DONE))\n-\n-#define IRQ_PEND_IO_MASK ((1UL \u003c\u003c IRQ_PEND_IO_ISC_0) | \\\n-\t\t\t  (1UL \u003c\u003c IRQ_PEND_IO_ISC_1) | \\\n-\t\t\t  (1UL \u003c\u003c IRQ_PEND_IO_ISC_2) | \\\n-\t\t\t  (1UL \u003c\u003c IRQ_PEND_IO_ISC_3) | \\\n-\t\t\t  (1UL \u003c\u003c IRQ_PEND_IO_ISC_4) | \\\n-\t\t\t  (1UL \u003c\u003c IRQ_PEND_IO_ISC_5) | \\\n-\t\t\t  (1UL \u003c\u003c IRQ_PEND_IO_ISC_6) | \\\n-\t\t\t  (1UL \u003c\u003c IRQ_PEND_IO_ISC_7))\n-\n-#define IRQ_PEND_MCHK_MASK ((1UL \u003c\u003c IRQ_PEND_MCHK_REP) | \\\n-\t\t\t    (1UL \u003c\u003c IRQ_PEND_MCHK_EX))\n-\n-#define IRQ_PEND_EXT_II_MASK ((1UL \u003c\u003c IRQ_PEND_EXT_CPU_TIMER)  | \\\n-\t\t\t      (1UL \u003c\u003c IRQ_PEND_EXT_CLOCK_COMP) | \\\n-\t\t\t      (1UL \u003c\u003c IRQ_PEND_EXT_EMERGENCY)  | \\\n-\t\t\t      (1UL \u003c\u003c IRQ_PEND_EXT_EXTERNAL)   | \\\n-\t\t\t      (1UL \u003c\u003c IRQ_PEND_EXT_SERVICE)    | \\\n-\t\t\t      (1UL \u003c\u003c IRQ_PEND_EXT_SERVICE_EV))\n-\n-struct kvm_s390_interrupt_info {\n-\tstruct list_head list;\n-\tu64\ttype;\n-\tunion {\n-\t\tstruct kvm_s390_io_info io;\n-\t\tstruct kvm_s390_ext_info ext;\n-\t\tstruct kvm_s390_pgm_info pgm;\n-\t\tstruct kvm_s390_emerg_info emerg;\n-\t\tstruct kvm_s390_extcall_info extcall;\n-\t\tstruct kvm_s390_prefix_info prefix;\n-\t\tstruct kvm_s390_stop_info stop;\n-\t\tstruct kvm_s390_mchk_info mchk;\n-\t};\n-};\n-\n-struct kvm_s390_irq_payload {\n-\tstruct kvm_s390_io_info io;\n-\tstruct kvm_s390_ext_info ext;\n-\tstruct kvm_s390_pgm_info pgm;\n-\tstruct kvm_s390_emerg_info emerg;\n-\tstruct kvm_s390_extcall_info extcall;\n-\tstruct kvm_s390_prefix_info prefix;\n-\tstruct kvm_s390_stop_info stop;\n-\tstruct kvm_s390_mchk_info mchk;\n-};\n-\n-struct kvm_s390_local_interrupt {\n-\tspinlock_t lock;\n-\tDECLARE_BITMAP(sigp_emerg_pending, KVM_MAX_VCPUS);\n-\tstruct kvm_s390_irq_payload irq;\n-\tunsigned long pending_irqs;\n-};\n-\n-#define FIRQ_LIST_IO_ISC_0 0\n-#define FIRQ_LIST_IO_ISC_1 1\n-#define FIRQ_LIST_IO_ISC_2 2\n-#define FIRQ_LIST_IO_ISC_3 3\n-#define FIRQ_LIST_IO_ISC_4 4\n-#define FIRQ_LIST_IO_ISC_5 5\n-#define FIRQ_LIST_IO_ISC_6 6\n-#define FIRQ_LIST_IO_ISC_7 7\n-#define FIRQ_LIST_PFAULT   8\n-#define FIRQ_LIST_VIRTIO   9\n-#define FIRQ_LIST_COUNT   10\n-#define FIRQ_CNTR_IO       0\n-#define FIRQ_CNTR_SERVICE  1\n-#define FIRQ_CNTR_VIRTIO   2\n-#define FIRQ_CNTR_PFAULT   3\n-#define FIRQ_MAX_COUNT     4\n-\n-/* mask the AIS mode for a given ISC */\n-#define AIS_MODE_MASK(isc) (0x80 \u003e\u003e isc)\n-\n-#define KVM_S390_AIS_MODE_ALL    0\n-#define KVM_S390_AIS_MODE_SINGLE 1\n-\n-struct kvm_s390_float_interrupt {\n-\tunsigned long pending_irqs;\n-\tunsigned long masked_irqs;\n-\tspinlock_t lock;\n-\tstruct list_head lists[FIRQ_LIST_COUNT];\n-\tint counters[FIRQ_MAX_COUNT];\n-\tstruct kvm_s390_mchk_info mchk;\n-\tstruct kvm_s390_ext_info srv_signal;\n-\tint last_sleep_cpu;\n-\tspinlock_t ais_lock;\n-\tu8 simm;\n-\tu8 nimm;\n-};\n-\n-struct kvm_hw_wp_info_arch {\n-\tunsigned long addr;\n-\tunsigned long phys_addr;\n-\tint len;\n-\tchar *old_data;\n-};\n-\n-struct kvm_hw_bp_info_arch {\n-\tunsigned long addr;\n-\tint len;\n-};\n-\n-/*\n- * Only the upper 16 bits of kvm_guest_debug-\u003econtrol are arch specific.\n- * Further KVM_GUESTDBG flags which an be used from userspace can be found in\n- * arch/s390/include/uapi/asm/kvm.h\n- */\n-#define KVM_GUESTDBG_EXIT_PENDING 0x10000000\n-\n-#define guestdbg_enabled(vcpu) \\\n-\t\t(vcpu-\u003eguest_debug \u0026 KVM_GUESTDBG_ENABLE)\n-#define guestdbg_sstep_enabled(vcpu) \\\n-\t\t(vcpu-\u003eguest_debug \u0026 KVM_GUESTDBG_SINGLESTEP)\n-#define guestdbg_hw_bp_enabled(vcpu) \\\n-\t\t(vcpu-\u003eguest_debug \u0026 KVM_GUESTDBG_USE_HW_BP)\n-#define guestdbg_exit_pending(vcpu) (guestdbg_enabled(vcpu) \u0026\u0026 \\\n-\t\t(vcpu-\u003eguest_debug \u0026 KVM_GUESTDBG_EXIT_PENDING))\n-\n-#define KVM_GUESTDBG_VALID_MASK \\\n-\t\t(KVM_GUESTDBG_ENABLE | KVM_GUESTDBG_SINGLESTEP |\\\n-\t\tKVM_GUESTDBG_USE_HW_BP | KVM_GUESTDBG_EXIT_PENDING)\n-\n-struct kvm_guestdbg_info_arch {\n-\tunsigned long cr0;\n-\tunsigned long cr9;\n-\tunsigned long cr10;\n-\tunsigned long cr11;\n-\tstruct kvm_hw_bp_info_arch *hw_bp_info;\n-\tstruct kvm_hw_wp_info_arch *hw_wp_info;\n-\tint nr_hw_bp;\n-\tint nr_hw_wp;\n-\tunsigned long last_bp;\n-};\n-\n-struct kvm_s390_pv_vcpu {\n-\tu64 handle;\n-\tunsigned long stor_base;\n-};\n-\n-struct kvm_vcpu_arch {\n-\tstruct kvm_s390_sie_block *sie_block;\n-\t/* if vsie is active, currently executed shadow sie control block */\n-\tstruct kvm_s390_sie_block *vsie_block;\n-\tunsigned int      host_acrs[NUM_ACRS];\n-\tstruct gs_cb      *host_gscb;\n-\tstruct kvm_s390_local_interrupt local_int;\n-\tstruct hrtimer    ckc_timer;\n-\tstruct kvm_s390_pgm_info pgm;\n-\tstruct gmap *gmap;\n-\tstruct kvm_guestdbg_info_arch guestdbg;\n-\tunsigned long pfault_token;\n-\tunsigned long pfault_select;\n-\tunsigned long pfault_compare;\n-\tbool cputm_enabled;\n-\t/*\n-\t * The seqcount protects updates to cputm_start and sie_block.cputm,\n-\t * this way we can have non-blocking reads with consistent values.\n-\t * Only the owning VCPU thread (vcpu-\u003ecpu) is allowed to change these\n-\t * values and to start/stop/enable/disable cpu timer accounting.\n-\t */\n-\tseqcount_t cputm_seqcount;\n-\t__u64 cputm_start;\n-\tbool gs_enabled;\n-\tbool skey_enabled;\n-\t/* Indicator if the access registers have been loaded from guest */\n-\tbool acrs_loaded;\n-\tstruct kvm_s390_pv_vcpu pv;\n-\tunion diag318_info diag318_info;\n-\tstruct kvm_s390_mmu_cache *mc;\n-};\n-\n-struct kvm_vm_stat {\n-\tstruct kvm_vm_stat_generic generic;\n-\tu64 inject_io;\n-\tu64 io_390_adapter_map;\n-\tu64 io_390_adapter_unmap;\n-\tu64 io_390_inatomic;\n-\tu64 io_flic_inject_airq;\n-\tu64 io_set_adapter_int;\n-\tu64 io_390_inatomic_no_inject;\n-\tu64 inject_float_mchk;\n-\tu64 inject_pfault_done;\n-\tu64 inject_service_signal;\n-\tu64 inject_virtio;\n-\tu64 aen_forward;\n-\tu64 gmap_shadow_create;\n-\tu64 gmap_shadow_reuse;\n-\tu64 gmap_shadow_r1_entry;\n-\tu64 gmap_shadow_r2_entry;\n-\tu64 gmap_shadow_r3_entry;\n-\tu64 gmap_shadow_sg_entry;\n-\tu64 gmap_shadow_pg_entry;\n-};\n-\n-struct kvm_arch_memory_slot {\n-};\n-\n-struct s390_map_info {\n-\tstruct list_head list;\n-\t__u64 guest_addr;\n-\t__u64 addr;\n-\tstruct page *page;\n-\t/*\n-\t * True if the page is long-term pinned. False if long-term pinning\n-\t * failed and this entry exists only to preserve MAP/UNMAP symmetry.\n-\t */\n-\tbool pinned;\n-};\n-\n-struct s390_io_adapter {\n-\tunsigned int id;\n-\tint isc;\n-\tbool maskable;\n-\tbool masked;\n-\tbool swap;\n-\tbool suppressible;\n-\tspinlock_t maps_lock;\n-\tstruct list_head maps;\n-\tunsigned int nr_maps;\n-};\n-\n-#define MAX_S390_IO_ADAPTERS ((MAX_ISC + 1) * 8)\n-#define MAX_S390_ADAPTER_MAPS 256\n-\n-/* maximum size of facilities and facility mask is 2k bytes */\n-#define S390_ARCH_FAC_LIST_SIZE_BYTE (1\u003c\u003c11)\n-#define S390_ARCH_FAC_LIST_SIZE_U64 \\\n-\t(S390_ARCH_FAC_LIST_SIZE_BYTE / sizeof(u64))\n-#define S390_ARCH_FAC_MASK_SIZE_BYTE S390_ARCH_FAC_LIST_SIZE_BYTE\n-#define S390_ARCH_FAC_MASK_SIZE_U64 \\\n-\t(S390_ARCH_FAC_MASK_SIZE_BYTE / sizeof(u64))\n-\n-struct kvm_s390_cpu_model {\n-\t/* facility mask supported by kvm \u0026 hosting machine */\n-\t__u64 fac_mask[S390_ARCH_FAC_MASK_SIZE_U64];\n-\tstruct kvm_s390_vm_cpu_subfunc subfuncs;\n-\t/* facility list requested by guest (in dma page) */\n-\t__u64 *fac_list;\n-\tu64 cpuid;\n-\tunsigned short ibc;\n-\t/* subset of available UV-features for pv-guests enabled by user space */\n-\tstruct kvm_s390_vm_cpu_uv_feat uv_feat_guest;\n-};\n-\n-#define S390_ARCH_FAC_FORMAT_2 2\n-struct kvm_s390_flcb2 {\n-\tunion {\n-\t\tstruct {\n-\t\t\tu8 reserved0[7];\n-\t\t\tu8 length;\n-\t\t};\n-\t\tu64 header_val;\n-\t};\n-\tu64 facilities[S390_ARCH_FAC_LIST_SIZE_U64];\n-};\n-\n-typedef int (*crypto_hook)(struct kvm_vcpu *vcpu);\n-\n-struct kvm_s390_crypto {\n-\tstruct kvm_s390_crypto_cb *crycb;\n-\tstruct rw_semaphore pqap_hook_rwsem;\n-\tcrypto_hook *pqap_hook;\n-\t__u32 crycbd;\n-\t__u8 aes_kw;\n-\t__u8 dea_kw;\n-\t__u8 apie;\n-};\n-\n-#define APCB0_MASK_SIZE 1\n-struct kvm_s390_apcb0 {\n-\t__u64 apm[APCB0_MASK_SIZE];\t\t/* 0x0000 */\n-\t__u64 aqm[APCB0_MASK_SIZE];\t\t/* 0x0008 */\n-\t__u64 adm[APCB0_MASK_SIZE];\t\t/* 0x0010 */\n-\t__u64 reserved18;\t\t\t/* 0x0018 */\n-};\n-\n-#define APCB1_MASK_SIZE 4\n-struct kvm_s390_apcb1 {\n-\t__u64 apm[APCB1_MASK_SIZE];\t\t/* 0x0000 */\n-\t__u64 aqm[APCB1_MASK_SIZE];\t\t/* 0x0020 */\n-\t__u64 adm[APCB1_MASK_SIZE];\t\t/* 0x0040 */\n-\t__u64 reserved60[4];\t\t\t/* 0x0060 */\n-};\n-\n-struct kvm_s390_crypto_cb {\n-\tstruct kvm_s390_apcb0 apcb0;\t\t/* 0x0000 */\n-\t__u8   reserved20[0x0048 - 0x0020];\t/* 0x0020 */\n-\t__u8   dea_wrapping_key_mask[24];\t/* 0x0048 */\n-\t__u8   aes_wrapping_key_mask[32];\t/* 0x0060 */\n-\tstruct kvm_s390_apcb1 apcb1;\t\t/* 0x0080 */\n-};\n-\n-struct kvm_s390_gisa {\n-\tunion {\n-\t\tstruct { /* common to all formats */\n-\t\t\tu32 next_alert;\n-\t\t\tu8  ipm;\n-\t\t\tu8  reserved01[2];\n-\t\t\tu8  iam;\n-\t\t};\n-\t\tstruct { /* format 0 */\n-\t\t\tu32 next_alert;\n-\t\t\tu8  ipm;\n-\t\t\tu8  reserved01;\n-\t\t\tu8  : 6;\n-\t\t\tu8  g : 1;\n-\t\t\tu8  c : 1;\n-\t\t\tu8  iam;\n-\t\t\tu8  reserved02[4];\n-\t\t\tu32 airq_count;\n-\t\t} g0;\n-\t\tstruct { /* format 1 */\n-\t\t\tu32 next_alert;\n-\t\t\tu8  ipm;\n-\t\t\tu8  simm;\n-\t\t\tu8  nimm;\n-\t\t\tu8  iam;\n-\t\t\tu8  aism[8];\n-\t\t\tu8  : 6;\n-\t\t\tu8  g : 1;\n-\t\t\tu8  c : 1;\n-\t\t\tu8  reserved03[11];\n-\t\t\tu32 airq_count;\n-\t\t} g1;\n-\t\tstruct {\n-\t\t\tu64 word[4];\n-\t\t} u64;\n-\t};\n-};\n-\n-struct kvm_s390_gib {\n-\tu32 alert_list_origin;\n-\tu32 reserved01;\n-\tu8:5;\n-\tu8  nisc:3;\n-\tu8  reserved03[3];\n-\tu32 reserved04[5];\n-};\n-\n-/*\n- * sie_page2 has to be allocated as DMA because fac_list, crycb and\n- * gisa need 31bit addresses in the sie control block.\n- */\n-struct sie_page2 {\n-\t__u64 fac_list[S390_ARCH_FAC_LIST_SIZE_U64];\t/* 0x0000 */\n-\tstruct kvm_s390_crypto_cb crycb;\t\t/* 0x0800 */\n-\tstruct kvm_s390_gisa gisa;\t\t\t/* 0x0900 */\n-\tstruct kvm *kvm;\t\t\t\t/* 0x0920 */\n-\tu8 reserved928[0x1000 - 0x928];\t\t\t/* 0x0928 */\n-};\n-\n-struct vsie_page;\n-\n-struct kvm_s390_vsie {\n-\tstruct mutex mutex;\n-\tstruct radix_tree_root addr_to_page;\n-\tint page_count;\n-\tint next;\n-\tstruct vsie_page *pages[KVM_MAX_VCPUS];\n-};\n-\n-struct kvm_s390_gisa_iam {\n-\tu8 mask;\n-\tspinlock_t ref_lock;\n-\tu32 ref_count[MAX_ISC + 1];\n-};\n-\n-struct kvm_s390_gisa_interrupt {\n-\tstruct kvm_s390_gisa *origin;\n-\tstruct kvm_s390_gisa_iam alert;\n-\tstruct hrtimer timer;\n-\tu64 expires;\n-\tDECLARE_BITMAP(kicked_mask, KVM_MAX_VCPUS);\n-};\n-\n-struct kvm_s390_pv {\n-\tu64 handle;\n-\tu64 guest_len;\n-\tunsigned long stor_base;\n-\tvoid *stor_var;\n-\tbool dumping;\n-\tvoid *set_aside;\n-\tstruct list_head need_cleanup;\n-\tstruct mmu_notifier mmu_notifier;\n-\t/* Protects against concurrent import-like operations */\n-\tstruct mutex import_lock;\n-};\n-\n-struct kvm_s390_mmu_cache;\n-\n-struct kvm_arch {\n-\tstruct esca_block *sca;\n-\tdebug_info_t *dbf;\n-\tstruct kvm_s390_float_interrupt float_int;\n-\tstruct kvm_device *flic;\n-\tstruct gmap *gmap;\n-\tunsigned long mem_limit;\n-\tint css_support;\n-\tint use_irqchip;\n-\tint use_cmma;\n-\tint use_pfmfi;\n-\tint use_skf;\n-\tint use_zpci_interp;\n-\tint user_cpu_state_ctrl;\n-\tint user_sigp;\n-\tint user_stsi;\n-\tint user_instr0;\n-\tint user_operexec;\n-\tint allow_vsie_esamode;\n-\tstruct s390_io_adapter *adapters[MAX_S390_IO_ADAPTERS];\n-\twait_queue_head_t ipte_wq;\n-\tint ipte_lock_count;\n-\tstruct mutex ipte_mutex;\n-\tspinlock_t start_stop_lock;\n-\tstruct sie_page2 *sie_page2;\n-\tstruct kvm_s390_cpu_model model;\n-\tstruct kvm_s390_crypto crypto;\n-\tstruct kvm_s390_vsie vsie;\n-\tu8 epdx;\n-\tu64 epoch;\n-\tint migration_mode;\n-\tatomic64_t cmma_dirty_pages;\n-\t/* subset of available cpu features enabled by user space */\n-\tDECLARE_BITMAP(cpu_feat, KVM_S390_VM_CPU_FEAT_NR_BITS);\n-\t/* indexed by vcpu_idx */\n-\tDECLARE_BITMAP(idle_mask, KVM_MAX_VCPUS);\n-\tstruct kvm_s390_gisa_interrupt gisa_int;\n-\tstruct kvm_s390_pv pv;\n-\tstruct list_head kzdev_list;\n-\tspinlock_t kzdev_list_lock;\n-\tstruct kvm_s390_mmu_cache *mc;\n-};\n-\n-#define KVM_HVA_ERR_BAD\t\t(-1UL)\n-#define KVM_HVA_ERR_RO_BAD\t(-2UL)\n-\n-static inline bool kvm_is_error_hva(unsigned long addr)\n-{\n-\treturn IS_ERR_VALUE(addr);\n-}\n-\n-#define ASYNC_PF_PER_VCPU\t64\n-struct kvm_arch_async_pf {\n-\tunsigned long pfault_token;\n-};\n-\n-bool kvm_arch_can_dequeue_async_page_present(struct kvm_vcpu *vcpu);\n-\n-void kvm_arch_async_page_ready(struct kvm_vcpu *vcpu,\n-\t\t\t       struct kvm_async_pf *work);\n-\n-bool kvm_arch_async_page_not_present(struct kvm_vcpu *vcpu,\n-\t\t\t\t     struct kvm_async_pf *work);\n-\n-void kvm_arch_async_page_present(struct kvm_vcpu *vcpu,\n-\t\t\t\t struct kvm_async_pf *work);\n-\n-static inline void kvm_arch_async_page_present_queued(struct kvm_vcpu *vcpu) {}\n-\n-void kvm_arch_crypto_clear_masks(struct kvm *kvm);\n-void kvm_arch_crypto_set_masks(struct kvm *kvm, unsigned long *apm,\n-\t\t\t       unsigned long *aqm, unsigned long *adm);\n-\n-#define SIE64_RETURN_NORMAL\t0\n-#define SIE64_RETURN_MCCK\t1\n-\n-int __sie64a(phys_addr_t sie_block_phys, struct kvm_s390_sie_block *sie_block, u64 *rsa,\n-\t     unsigned long gasce);\n-\n-static inline int sie64a(struct kvm_s390_sie_block *sie_block, u64 *rsa, unsigned long gasce)\n-{\n-\treturn __sie64a(virt_to_phys(sie_block), sie_block, rsa, gasce);\n-}\n-\n-extern char sie_exit;\n-\n-bool kvm_s390_pv_is_protected(struct kvm *kvm);\n-bool kvm_s390_pv_cpu_is_protected(struct kvm_vcpu *vcpu);\n-\n-extern int kvm_s390_enter_exit_sie(struct kvm_s390_sie_block *scb,\n-\t\t\t\t   u64 *gprs, unsigned long gasce);\n-\n-extern int kvm_s390_gisc_register(struct kvm *kvm, u32 gisc);\n-extern int kvm_s390_gisc_unregister(struct kvm *kvm, u32 gisc);\n-\n-bool kvm_s390_is_gpa_in_memslot(struct kvm *kvm, gpa_t gpa);\n-\n-static inline void kvm_arch_free_memslot(struct kvm *kvm,\n-\t\t\t\t\t struct kvm_memory_slot *slot) {}\n-static inline void kvm_arch_memslots_updated(struct kvm *kvm, u64 gen) {}\n-static inline void kvm_arch_flush_shadow_all(struct kvm *kvm) {}\n-static inline void kvm_arch_flush_shadow_memslot(struct kvm *kvm,\n-\t\tstruct kvm_memory_slot *slot) {}\n-static inline void kvm_arch_vcpu_blocking(struct kvm_vcpu *vcpu) {}\n-static inline void kvm_arch_vcpu_unblocking(struct kvm_vcpu *vcpu) {}\n-\n-#define __KVM_HAVE_ARCH_VM_FREE\n-void kvm_arch_free_vm(struct kvm *kvm);\n-\n-struct zpci_kvm_hook {\n-\tint (*kvm_register)(void *opaque, struct kvm *kvm);\n-\tvoid (*kvm_unregister)(void *opaque);\n-};\n-\n-extern struct zpci_kvm_hook zpci_kvm_hook;\n-\n-#endif\n+#endif /* ASM_KVM_HOST_H */\ndiff --git a/arch/s390/include/asm/kvm_host_arm64.h b/arch/s390/include/asm/kvm_host_arm64.h\nnew file mode 100644\nindex 0000000000000..956ae6636597f\n--- /dev/null\n+++ b/arch/s390/include/asm/kvm_host_arm64.h\n@@ -0,0 +1,224 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+#ifndef ASM_KVM_HOST_ARM64_H\n+#define ASM_KVM_HOST_ARM64_H\n+\n+#include \u003clinux/bug.h\u003e\n+\n+#include \u003casm/kvm_host_types.h\u003e\n+#include \u003casm/debug.h\u003e\n+\n+#define vcpu_gp_regs(v)\t\t((v)-\u003earch.sae_block.gpr)\n+\n+#include \u003carm64/kvm_host.h\u003e\n+#include \u003carm64/ptrace.h\u003e\n+\n+#include \u003casm/sae.h\u003e\n+\n+#define KVM_HAVE_MMU_RWLOCK\n+#define KVM_MAX_VCPUS 1\n+#define KVM_S390_ARM64_IMPL_FEATURES \\\n+\t(BIT(KVM_ARM_VCPU_PTRAUTH_ADDRESS) | BIT(KVM_ARM_VCPU_PTRAUTH_GENERIC))\n+\n+#define KVM_HALT_POLL_NS_DEFAULT 50000\n+\n+/* Minimal (=no) vgic definitions */\n+#define KVM_IRQCHIP_NUM_PINS 1\n+#define irqchip_in_kernel(_k) false\n+\n+#define __ctxt_sys_reg(ctx, reg) NULL\n+struct kvm_cpu_context {\n+\t/*\n+\t * These are just for 32 bit, which we don't have, making them RES0.\n+\t * They are exposed to user space.\n+\t */\n+\tu64\tspsr_abt;\n+\tu64\tspsr_und;\n+\tu64\tspsr_irq;\n+\tu64\tspsr_fiq;\n+\n+\t__vector128 __aligned(16) vregs[32];\n+};\n+\n+struct kvm_vcpu_arch {\n+\tstruct kvm_sae_block sae_block;\n+\tstruct kvm_sae_save_area save_area;\n+\tstruct kvm_cpu_context ctxt;\n+\n+\tu32 host_acrs[NUM_ACRS];\n+\n+\t/* Hypervisor Configuration Register */\n+\tu64 hcr_elz;\n+\n+\t/* Configuration flags, set once and for all before the vcpu can run */\n+\tu8 cflags;\n+\n+\t/* Input flags to the hypervisor code, potentially cleared after use */\n+\tu8 iflags;\n+\n+\t/* State flags for kernel bookkeeping, unused by the hypervisor code */\n+\tu8 sflags;\n+\n+\t/*\n+\t * Don't run the guest (internal implementation need).\n+\t *\n+\t * Contrary to the flags above, this is set/cleared outside of\n+\t * a vcpu context, and thus cannot be mixed with the flags\n+\t * themselves (or the flag accesses need to be made atomic).\n+\t */\n+\tbool pause;\n+\n+\t/* vcpu power state */\n+\tstruct kvm_mp_state mp_state;\n+\t/* lock for mp_state \u0026 reset_state.reset */\n+\tspinlock_t mp_state_lock;\n+\n+\t/* vcpu reset state */\n+\tstruct vcpu_reset_state reset_state;\n+\n+\t/* GMAP */\n+\tstruct gmap *gmap;\n+\tstruct kvm_s390_mmu_cache *mc;\n+\n+\tvoid *debugfs_state_data;\n+};\n+\n+struct kvm_vcpu_stat {\n+\tstruct kvm_vcpu_stat_generic generic;\n+\t/* ARM64 stats */\n+\tu64 hvc_exit_stat;\n+\tu64 wfe_exit_stat;\n+\tu64 wfi_exit_stat;\n+\tu64 mmio_exit_user;\n+\tu64 mmio_exit_kernel;\n+\tu64 signal_exits;\n+\tu64 exits;\n+\t/* GMAP stats */\n+\tu64 pfault_sync;\n+};\n+\n+#define kvm_vcpu_get_sp_el1(__vcpu) (\u0026((__vcpu)-\u003earch.sae_block.sp_el1))\n+#define kvm_vcpu_get_vreg(__vcpu, _off) (\u0026(__vcpu)-\u003earch.ctxt.vregs[_off])\n+#define kvm_vcpu_get_vregs(__vcpu) (\u0026(__vcpu)-\u003earch.ctxt.vregs)\n+#define kvm_vcpu_get_fpsr(__vcpu) (\u0026(__vcpu)-\u003earch.sae_block.fpsr)\n+#define kvm_vcpu_get_fpcr(__vcpu) (\u0026(__vcpu)-\u003earch.sae_block.fpcr)\n+\n+#define _vcpu_get_flag(v, flagset, ...)\t\\\n+\t__vcpu_get_flag(\u0026(v)-\u003earch.flagset, __VA_ARGS__)\n+#define _vcpu_set_flag(v, flagset, ...)\t\\\n+\t__vcpu_set_flag(\u0026(v)-\u003earch.flagset, __VA_ARGS__)\n+#define _vcpu_clear_flag(v, flagset, ...)\t\\\n+\t__vcpu_clear_flag(\u0026(v)-\u003earch.flagset, __VA_ARGS__)\n+#define _vcpu_test_and_clear_flag(v, flagset, ...)\t\\\n+\t__vcpu_test_and_clear_flag(\u0026(v)-\u003earch.flagset, __VA_ARGS__)\n+\n+#define kvm_has_mte(_kvm) false\n+#define vcpu_has_sve(_vcpu) false\n+#define vcpu_has_ptrauth(_vcpu) false\n+\n+struct kvm_arch_memory_slot {\n+};\n+\n+struct kvm_arch {\n+\tstruct gmap *gmap;\n+\tu64 guest_phys_size;\n+\n+\t/* VM-wide vCPU feature set */\n+\tunsigned long flags;\n+\n+\t/* Protects VM-scoped configuration data */\n+\tstruct mutex config_lock;\n+\n+\tdebug_info_t *dbf;\n+\n+\tDECLARE_BITMAP(vcpu_features, KVM_VCPU_MAX_FEATURES);\n+\n+\tunsigned long mem_limit;\n+};\n+\n+static inline bool __vcpu_has_feature(const struct kvm_arch *ka, int feature)\n+{\n+\treturn test_bit(feature, ka-\u003evcpu_features);\n+}\n+\n+struct kvm_vm_stat {\n+\tstruct kvm_vm_stat_generic generic;\n+};\n+\n+static inline bool system_has_full_ptr_auth(void)\n+{\n+\treturn true;\n+}\n+\n+#define kvm_vm_is_protected(_kvm) false\n+#define vcpu_is_protected(_vcpu) false\n+\n+#define vcpu_is_loaded(_vcpu) ((_vcpu)-\u003ecpu != -1)\n+\n+#define KVM_HVA_ERR_BAD\t\t-1UL\n+#define KVM_HVA_ERR_RO_BAD\t-2UL\n+\n+#define kvm_phys_size(__kvm) ((__kvm)-\u003earch.guest_phys_size)\n+static inline bool kvm_is_error_hva(unsigned long addr)\n+{\n+\treturn IS_ERR_VALUE(addr);\n+}\n+\n+u32 get_kvm_ipa_limit(void);\n+\n+/* unused, but required functions */\n+static inline void kvm_arch_free_memslot(struct kvm *kvm, struct kvm_memory_slot *slot) {}\n+static inline void kvm_arch_memslots_updated(struct kvm *kvm, u64 gen) {}\n+static inline void kvm_arch_flush_shadow_all(struct kvm *kvm) {}\n+static inline void kvm_arch_flush_shadow_memslot(struct kvm *kvm, struct kvm_memory_slot *slot) {}\n+static inline void kvm_arch_vcpu_blocking(struct kvm_vcpu *vcpu) {}\n+static inline void kvm_arch_vcpu_unblocking(struct kvm_vcpu *vcpu) {}\n+static inline void kvm_arch_sync_events(struct kvm *kvm) {}\n+static inline void kvm_arch_sched_in(struct kvm_vcpu *vcpu, int cpu) {}\n+static inline void kvm_arch_mmu_enable_log_dirty_pt_masked(struct kvm *kvm,\n+\t\t\t\t\t\t\t   struct kvm_memory_slot *slot,\n+\t\t\t\t\t\t\t   gfn_t gfn_offset,\n+\t\t\t\t\t\t\t   unsigned long mask) {}\n+\n+int kvm_handle_guest_abort(struct kvm_vcpu *vcpu);\n+\n+/* arm64 guests do not use async-pf. Defined because Kbuild requires it as s390 kvm turns it on. */\n+#define ASYNC_PF_PER_VCPU 0\n+struct kvm_arch_async_pf {\n+\tunsigned long pfault_token;\n+};\n+\n+#define __unsupp_async_call(fn) WARN_ONCE(true, \"async not supported on kvm-arm64 %s\", fn)\n+\n+static inline bool kvm_arch_can_dequeue_async_page_present(struct kvm_vcpu *vcpu)\n+{\n+\t__unsupp_async_call(__func__);\n+\treturn false;\n+};\n+\n+static inline void kvm_arch_async_page_ready(struct kvm_vcpu *vcpu,\n+\t\t\t\t\t     struct kvm_async_pf *work)\n+{\n+\t__unsupp_async_call(__func__);\n+};\n+\n+static inline bool kvm_arch_async_page_not_present(struct kvm_vcpu *vcpu,\n+\t\t\t\t\t\t   struct kvm_async_pf *work)\n+{\n+\t__unsupp_async_call(__func__);\n+\treturn false;\n+};\n+\n+static inline void kvm_arch_async_page_present(struct kvm_vcpu *vcpu,\n+\t\t\t\t\t       struct kvm_async_pf *work)\n+{\n+\t__unsupp_async_call(__func__);\n+};\n+\n+static inline void kvm_arch_async_page_present_queued(struct kvm_vcpu *vcpu)\n+{\n+\t__unsupp_async_call(__func__);\n+};\n+\n+#define kvm_supports_32bit_el0() false\n+\n+#endif /* ASM_KVM_HOST_ARM64_H */\ndiff --git a/arch/s390/include/asm/kvm_host_arm64_types.h b/arch/s390/include/asm/kvm_host_arm64_types.h\nnew file mode 100644\nindex 0000000000000..d112ca8c6bc1c\n--- /dev/null\n+++ b/arch/s390/include/asm/kvm_host_arm64_types.h\n@@ -0,0 +1,118 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+#ifndef ASM_KVM_HOST_ARM64_TYPES_H\n+#define ASM_KVM_HOST_ARM64_TYPES_H\n+\n+#include \u003clinux/types.h\u003e\n+#include \u003clinux/kvm_types.h\u003e\n+#include \u003clinux/compiler_attributes.h\u003e\n+#include \u003casm/page.h\u003e\n+#include \u003casm/fault.h\u003e\n+\n+struct kvm_sae_block {\n+\tu64\t_0000[16];\t\t/* 0x0000 */\n+#define SAE_ICPTR_SPURIOUS\t\t\t0x00\n+#define SAE_ICPTR_VALIDITY\t\t\t0x01\n+#define SAE_ICPTR_HOST_ACCESS_EXCEPTION\t\t0x02\n+#define SAE_ICPTR_SYNCHRONOUS_EXCEPTION\t\t0x03\n+#define SAE_ICPTR_TIMER\t\t\t\t0x04\n+#define SAE_ICPTR_PE_INTERCOMM\t\t\t0x05\n+#define SAE_ICPTR_GUEST_ADDRESS_SIZE\t\t0x06\n+#define SAE_ICPTR_STOP\t\t\t\t0x07\n+#define SAE_ICPTR_SYSTEM_REGISTER\t\t0x08\n+#define SAE_ICPTR_PMU\t\t\t\t0x09\n+#define SAE_ICPTR_MAINTENANCE\t\t\t0x0a\n+\tu8\ticptr;\t\t\t/* 0x0080 */\n+\tu8\t_0081[7];\t\t/* 0x0081 */\n+\tu64\tscad;\t\t\t/* 0x0088 */\n+\tu64\t_0090[16];\t\t/* 0x00b0 */\n+\tu32\tcntp_ctl;\t\t/* 0x0110 */\n+\tu32\tcntv_ctl;\t\t/* 0x0114 */\n+\tu8\tirq_ctl;\t\t/* 0x0118 */\n+\tu8\t_0119[7];\t\t/* 0x0119 */\n+\tstruct {\n+\t\tu64\tich_hcr_el2;\t/* 0x0120 */\n+\t\tu64\tich_vmcr_el2;\t/* 0x0128 */\n+\t\tu64\tich_ap0r0_el2;\t/* 0x0130 */\n+\t\tu64\tich_ap1r0_el2;\t/* 0x0138 */\n+\t\tu64\t_0140[2];\t/* 0x0140 */\n+\t\tu64\tich_lrn_el2[4];\t/* 0x0150 */\n+\t\tu64\t_0170[4];\t/* 0x0170 */\n+\t} ic_regs;\n+\tu64\t_0190[12];\t\t/* 0x0190 */\n+\tu64\tcontextidr_el1;\t\t/* 0x01f0 */\n+\tu32\twip;\t\t\t/* 0x01f8 */\n+\tu32\t_01fc;\t\t\t/* 0x01fc */\n+#define SAE_SD_FORMAT_0                 0x00\n+\tu8\tsdf;\t\t\t/* 0x0200  */\n+\tu8\t_0201[7];\t\t/* 0x0201  */\n+\tu64\tmso;\t\t\t/* 0x0208  */\n+\tu64\tmsl;\t\t\t/* 0x0210  */\n+\tu64\thbasce;\t\t\t/* 0x0218  */\n+\tu64\t_0220;\t\t\t/* 0x0220  */\n+\tu64\tgpto;\t\t\t/* 0x0228  */\n+\tu64\tic;\t\t\t/* 0x0230  */\n+\tu64\tec;\t\t\t/* 0x0238  */\n+\tu64\tsave_area;\t\t/* 0x0240  */\n+\tu64\t_0248[7];\t\t/* 0x0248  */\n+\tu8\t_0280[6];\t\t/* 0x0280  */\n+\tu16\tlrcpua;\t\t\t/* 0x0286  */\n+\tu64\tpstate;\t\t\t/* 0x0288  */\n+\tu64\tpc;\t\t\t/* 0x0290  */\n+\tu64\tsp_el0;\t\t\t/* 0x0298  */\n+\tu64\tsp_el1;\t\t\t/* 0x02a0  */\n+\tu64\t_02a8;\t\t\t/* 0x02a8  */\n+\tu64\tfpcr;\t\t\t/* 0x02b0  */\n+\tu64\tfpsr;\t\t\t/* 0x02b8  */\n+\tu16\tsve_pregs[16];\t\t/* 0x02c0  */\n+\tu16\tsve_ffr;\t\t/* 0x02e0  */\n+\tu8\t_02e2[6];\t\t/* 0x02e2  */\n+\tu64\t_02e8[3];\t\t/* 0x02e8  */\n+\n+\tu64\tgpr[31];\t\t/* 0x0300  */\n+\tu64\t_03f8;\t\t\t/* 0x03f8  */\n+\n+\tunion {\n+\t\tu64\ticptd[8];\t\t/* 0x0400 */\n+\t\t/* validity-interception reason; icptr 0x01 */\n+\t\tu16 vir;\t\t\t/* 0x0400 */\n+\t\t/* host access interception details; icptr 0x02 */\n+\t\tstruct {\n+\t\t\tu64\t\tesr_elz;\t/* 0x0400 */\n+\t\t\tu8\t\t_0408[6];\t/* 0x0408 */\n+\t\t\tu16\t\tpic;\t\t/* 0x040e */\n+\t\t\tunion teid\tteid;\t\t/* 0x0410 */\n+\t\t\tgva_t\t\tfar_elz;\t/* 0x0418 */\n+\t\t\tgva_t\t\tvaddr;\t\t/* 0x0420 */\n+\t\t\tu64\t\tsuppl;\t\t/* 0x0428 */\n+\t\t\tu8\t\tgltl;\t\t/* 0x0430 */\n+\t\t\tu8\t\t_0431[7];\t/* 0x0431 */\n+\t\t\tu64\t\t_0438;\t\t/* 0x0438 */\n+\t\t} hai;\n+\t\t/* exception-interception details; icptr 0x03 */\n+\t\tstruct {\n+\t\t\tu64\tesr_elz;\t\t/* 0x0400 */\n+\t\t\tu64\t_0408[2];\t\t/* 0x0408 */\n+\t\t\tgva_t\tfar_elz;\t\t/* 0x0418 */\n+\t\t} trap;\n+\t\t/* timer-interception reason; icptr 0x04 */\n+#define SAE_IR_TIMER_ID_VIRT\t\tBIT(6)\n+#define SAE_IR_TIMER_ID_PHYS\t\tBIT(7)\n+\t\tu8\ttir;\t\t\t/* 0x0400 */\n+\t};\n+\tu64\t_0440[376];\t\t\t/* 0x0440 */\n+} __packed __aligned(PAGE_SIZE);\n+static_assert(sizeof(struct kvm_sae_block) == PAGE_SIZE);\n+\n+struct kvm_sae_save_area {\n+#define SAE_SAVE_AREA_FORMAT_0\t0x00\n+\tu8\tsaf;\t\t/* 0x0000 */\n+\tu8\t_0001[5];\t/* 0x0001 */\n+#define SAE_SAS_VALID\t\tBIT(0)\n+\tu16\tsas;\t\t/* 0x0006 */\n+\tu64\tsdo;\t\t/* 0x0008 */\n+\tu64\t_0010[2];\t/* 0x0010 */\n+\tu64\tregs[508];\t/* 0x0020 */\n+} __packed __aligned(PAGE_SIZE);\n+static_assert(sizeof(struct kvm_sae_save_area) == PAGE_SIZE);\n+\n+#endif /* ASM_KVM_HOST_ARM64_TYPES_H */\ndiff --git a/arch/s390/include/asm/kvm_host_s390.h b/arch/s390/include/asm/kvm_host_s390.h\nnew file mode 100644\nindex 0000000000000..c753dc816b021\n--- /dev/null\n+++ b/arch/s390/include/asm/kvm_host_s390.h\n@@ -0,0 +1,729 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+/*\n+ * definition for kernel virtual machines on s390\n+ *\n+ * Copyright IBM Corp. 2008, 2018\n+ *\n+ *    Author(s): Carsten Otte \u003ccotte@de.ibm.com\u003e\n+ */\n+\n+\n+#ifndef ASM_KVM_HOST_S390_H\n+#define ASM_KVM_HOST_S390_H\n+\n+#include \u003clinux/types.h\u003e\n+#include \u003clinux/hrtimer.h\u003e\n+#include \u003clinux/interrupt.h\u003e\n+#include \u003clinux/kvm_types.h\u003e\n+#include \u003clinux/kvm.h\u003e\n+#include \u003clinux/seqlock.h\u003e\n+#include \u003clinux/module.h\u003e\n+#include \u003clinux/pci.h\u003e\n+#include \u003clinux/mmu_notifier.h\u003e\n+#include \u003casm/kvm_host_types.h\u003e\n+#include \u003casm/debug.h\u003e\n+#include \u003casm/cpu.h\u003e\n+#include \u003casm/fpu.h\u003e\n+#include \u003casm/isc.h\u003e\n+#include \u003casm/guarded_storage.h\u003e\n+\n+#define KVM_HAVE_MMU_RWLOCK\n+#define KVM_MAX_VCPUS 255\n+#define KVM_NO_MMIO\n+\n+#define KVM_INTERNAL_MEM_SLOTS 1\n+\n+#define KVM_S390_GUEST_HAS_PREFIX\n+\n+/*\n+ * These seem to be used for allocating -\u003echip in the routing table, which we\n+ * don't use. 1 is as small as we can get to reduce the needed memory. If we\n+ * need to look at -\u003echip later on, we'll need to revisit this.\n+ */\n+#define KVM_NR_IRQCHIPS 1\n+#define KVM_IRQCHIP_NUM_PINS 1\n+#define KVM_HALT_POLL_NS_DEFAULT 50000\n+\n+/* s390-specific vcpu-\u003erequests bit members */\n+#define KVM_REQ_ENABLE_IBS\tKVM_ARCH_REQ(0)\n+#define KVM_REQ_DISABLE_IBS\tKVM_ARCH_REQ(1)\n+#define KVM_REQ_ICPT_OPEREXC\tKVM_ARCH_REQ(2)\n+#define KVM_REQ_START_MIGRATION KVM_ARCH_REQ(3)\n+#define KVM_REQ_STOP_MIGRATION  KVM_ARCH_REQ(4)\n+#define KVM_REQ_VSIE_RESTART\tKVM_ARCH_REQ(5)\n+#define KVM_REQ_REFRESH_GUEST_PREFIX\t\\\n+\tKVM_ARCH_REQ_FLAGS(6, KVM_REQUEST_WAIT | KVM_REQUEST_NO_WAKEUP)\n+\n+struct kvm_vcpu_stat {\n+\tstruct kvm_vcpu_stat_generic generic;\n+\tu64 exit_userspace;\n+\tu64 exit_null;\n+\tu64 exit_external_request;\n+\tu64 exit_io_request;\n+\tu64 exit_external_interrupt;\n+\tu64 exit_stop_request;\n+\tu64 exit_validity;\n+\tu64 exit_instruction;\n+\tu64 exit_pei;\n+\tu64 halt_no_poll_steal;\n+\tu64 instruction_lctl;\n+\tu64 instruction_lctlg;\n+\tu64 instruction_stctl;\n+\tu64 instruction_stctg;\n+\tu64 exit_program_interruption;\n+\tu64 exit_instr_and_program;\n+\tu64 exit_operation_exception;\n+\tu64 deliver_ckc;\n+\tu64 deliver_cputm;\n+\tu64 deliver_external_call;\n+\tu64 deliver_emergency_signal;\n+\tu64 deliver_service_signal;\n+\tu64 deliver_virtio;\n+\tu64 deliver_stop_signal;\n+\tu64 deliver_prefix_signal;\n+\tu64 deliver_restart_signal;\n+\tu64 deliver_program;\n+\tu64 deliver_io;\n+\tu64 deliver_machine_check;\n+\tu64 exit_wait_state;\n+\tu64 inject_ckc;\n+\tu64 inject_cputm;\n+\tu64 inject_external_call;\n+\tu64 inject_emergency_signal;\n+\tu64 inject_mchk;\n+\tu64 inject_pfault_init;\n+\tu64 inject_program;\n+\tu64 inject_restart;\n+\tu64 inject_set_prefix;\n+\tu64 inject_stop_signal;\n+\tu64 instruction_epsw;\n+\tu64 instruction_gs;\n+\tu64 instruction_io_other;\n+\tu64 instruction_lpsw;\n+\tu64 instruction_lpswe;\n+\tu64 instruction_lpswey;\n+\tu64 instruction_pfmf;\n+\tu64 instruction_ptff;\n+\tu64 instruction_sck;\n+\tu64 instruction_sckpf;\n+\tu64 instruction_stidp;\n+\tu64 instruction_spx;\n+\tu64 instruction_stpx;\n+\tu64 instruction_stap;\n+\tu64 instruction_iske;\n+\tu64 instruction_ri;\n+\tu64 instruction_rrbe;\n+\tu64 instruction_sske;\n+\tu64 instruction_ipte_interlock;\n+\tu64 instruction_stsi;\n+\tu64 instruction_stfl;\n+\tu64 instruction_tb;\n+\tu64 instruction_tpi;\n+\tu64 instruction_tprot;\n+\tu64 instruction_tsch;\n+\tu64 instruction_sie;\n+\tu64 instruction_essa;\n+\tu64 instruction_sthyi;\n+\tu64 instruction_sigp_sense;\n+\tu64 instruction_sigp_sense_running;\n+\tu64 instruction_sigp_external_call;\n+\tu64 instruction_sigp_emergency;\n+\tu64 instruction_sigp_cond_emergency;\n+\tu64 instruction_sigp_start;\n+\tu64 instruction_sigp_stop;\n+\tu64 instruction_sigp_stop_store_status;\n+\tu64 instruction_sigp_store_status;\n+\tu64 instruction_sigp_store_adtl_status;\n+\tu64 instruction_sigp_arch;\n+\tu64 instruction_sigp_prefix;\n+\tu64 instruction_sigp_restart;\n+\tu64 instruction_sigp_init_cpu_reset;\n+\tu64 instruction_sigp_cpu_reset;\n+\tu64 instruction_sigp_unknown;\n+\tu64 instruction_diagnose_10;\n+\tu64 instruction_diagnose_44;\n+\tu64 instruction_diagnose_9c;\n+\tu64 diag_9c_ignored;\n+\tu64 diag_9c_forward;\n+\tu64 instruction_diagnose_258;\n+\tu64 instruction_diagnose_308;\n+\tu64 instruction_diagnose_500;\n+\tu64 instruction_diagnose_other;\n+\tu64 pfault_sync;\n+\tu64 signal_exits;\n+};\n+\n+/* irq types in ascend order of priorities */\n+enum irq_types {\n+\tIRQ_PEND_SET_PREFIX = 0,\n+\tIRQ_PEND_RESTART,\n+\tIRQ_PEND_SIGP_STOP,\n+\tIRQ_PEND_IO_ISC_7,\n+\tIRQ_PEND_IO_ISC_6,\n+\tIRQ_PEND_IO_ISC_5,\n+\tIRQ_PEND_IO_ISC_4,\n+\tIRQ_PEND_IO_ISC_3,\n+\tIRQ_PEND_IO_ISC_2,\n+\tIRQ_PEND_IO_ISC_1,\n+\tIRQ_PEND_IO_ISC_0,\n+\tIRQ_PEND_VIRTIO,\n+\tIRQ_PEND_PFAULT_DONE,\n+\tIRQ_PEND_PFAULT_INIT,\n+\tIRQ_PEND_EXT_HOST,\n+\tIRQ_PEND_EXT_SERVICE,\n+\tIRQ_PEND_EXT_SERVICE_EV,\n+\tIRQ_PEND_EXT_TIMING,\n+\tIRQ_PEND_EXT_CPU_TIMER,\n+\tIRQ_PEND_EXT_CLOCK_COMP,\n+\tIRQ_PEND_EXT_EXTERNAL,\n+\tIRQ_PEND_EXT_EMERGENCY,\n+\tIRQ_PEND_EXT_MALFUNC,\n+\tIRQ_PEND_EXT_IRQ_KEY,\n+\tIRQ_PEND_MCHK_REP,\n+\tIRQ_PEND_PROG,\n+\tIRQ_PEND_SVC,\n+\tIRQ_PEND_MCHK_EX,\n+\tIRQ_PEND_COUNT\n+};\n+\n+/* We have 2M for virtio device descriptor pages. Smallest amount of\n+ * memory per page is 24 bytes (1 queue), so (2048*1024) / 24 = 87381\n+ */\n+#define KVM_S390_MAX_VIRTIO_IRQS 87381\n+\n+/*\n+ * Repressible (non-floating) machine check interrupts\n+ * subclass bits in MCIC\n+ */\n+#define MCHK_EXTD_BIT 58\n+#define MCHK_DEGR_BIT 56\n+#define MCHK_WARN_BIT 55\n+#define MCHK_REP_MASK ((1UL \u003c\u003c MCHK_DEGR_BIT) | \\\n+\t\t       (1UL \u003c\u003c MCHK_EXTD_BIT) | \\\n+\t\t       (1UL \u003c\u003c MCHK_WARN_BIT))\n+\n+/* Exigent machine check interrupts subclass bits in MCIC */\n+#define MCHK_SD_BIT 63\n+#define MCHK_PD_BIT 62\n+#define MCHK_EX_MASK ((1UL \u003c\u003c MCHK_SD_BIT) | (1UL \u003c\u003c MCHK_PD_BIT))\n+\n+#define IRQ_PEND_EXT_MASK ((1UL \u003c\u003c IRQ_PEND_EXT_IRQ_KEY)    | \\\n+\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_CLOCK_COMP) | \\\n+\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_CPU_TIMER)  | \\\n+\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_MALFUNC)    | \\\n+\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_EMERGENCY)  | \\\n+\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_EXTERNAL)   | \\\n+\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_TIMING)     | \\\n+\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_HOST)       | \\\n+\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_SERVICE)    | \\\n+\t\t\t   (1UL \u003c\u003c IRQ_PEND_EXT_SERVICE_EV) | \\\n+\t\t\t   (1UL \u003c\u003c IRQ_PEND_VIRTIO)         | \\\n+\t\t\t   (1UL \u003c\u003c IRQ_PEND_PFAULT_INIT)    | \\\n+\t\t\t   (1UL \u003c\u003c IRQ_PEND_PFAULT_DONE))\n+\n+#define IRQ_PEND_IO_MASK ((1UL \u003c\u003c IRQ_PEND_IO_ISC_0) | \\\n+\t\t\t  (1UL \u003c\u003c IRQ_PEND_IO_ISC_1) | \\\n+\t\t\t  (1UL \u003c\u003c IRQ_PEND_IO_ISC_2) | \\\n+\t\t\t  (1UL \u003c\u003c IRQ_PEND_IO_ISC_3) | \\\n+\t\t\t  (1UL \u003c\u003c IRQ_PEND_IO_ISC_4) | \\\n+\t\t\t  (1UL \u003c\u003c IRQ_PEND_IO_ISC_5) | \\\n+\t\t\t  (1UL \u003c\u003c IRQ_PEND_IO_ISC_6) | \\\n+\t\t\t  (1UL \u003c\u003c IRQ_PEND_IO_ISC_7))\n+\n+#define IRQ_PEND_MCHK_MASK ((1UL \u003c\u003c IRQ_PEND_MCHK_REP) | \\\n+\t\t\t    (1UL \u003c\u003c IRQ_PEND_MCHK_EX))\n+\n+#define IRQ_PEND_EXT_II_MASK ((1UL \u003c\u003c IRQ_PEND_EXT_CPU_TIMER)  | \\\n+\t\t\t      (1UL \u003c\u003c IRQ_PEND_EXT_CLOCK_COMP) | \\\n+\t\t\t      (1UL \u003c\u003c IRQ_PEND_EXT_EMERGENCY)  | \\\n+\t\t\t      (1UL \u003c\u003c IRQ_PEND_EXT_EXTERNAL)   | \\\n+\t\t\t      (1UL \u003c\u003c IRQ_PEND_EXT_SERVICE)    | \\\n+\t\t\t      (1UL \u003c\u003c IRQ_PEND_EXT_SERVICE_EV))\n+\n+struct kvm_s390_interrupt_info {\n+\tstruct list_head list;\n+\tu64\ttype;\n+\tunion {\n+\t\tstruct kvm_s390_io_info io;\n+\t\tstruct kvm_s390_ext_info ext;\n+\t\tstruct kvm_s390_pgm_info pgm;\n+\t\tstruct kvm_s390_emerg_info emerg;\n+\t\tstruct kvm_s390_extcall_info extcall;\n+\t\tstruct kvm_s390_prefix_info prefix;\n+\t\tstruct kvm_s390_stop_info stop;\n+\t\tstruct kvm_s390_mchk_info mchk;\n+\t};\n+};\n+\n+struct kvm_s390_irq_payload {\n+\tstruct kvm_s390_io_info io;\n+\tstruct kvm_s390_ext_info ext;\n+\tstruct kvm_s390_pgm_info pgm;\n+\tstruct kvm_s390_emerg_info emerg;\n+\tstruct kvm_s390_extcall_info extcall;\n+\tstruct kvm_s390_prefix_info prefix;\n+\tstruct kvm_s390_stop_info stop;\n+\tstruct kvm_s390_mchk_info mchk;\n+};\n+\n+struct kvm_s390_local_interrupt {\n+\tspinlock_t lock;\n+\tDECLARE_BITMAP(sigp_emerg_pending, KVM_MAX_VCPUS);\n+\tstruct kvm_s390_irq_payload irq;\n+\tunsigned long pending_irqs;\n+};\n+\n+#define FIRQ_LIST_IO_ISC_0 0\n+#define FIRQ_LIST_IO_ISC_1 1\n+#define FIRQ_LIST_IO_ISC_2 2\n+#define FIRQ_LIST_IO_ISC_3 3\n+#define FIRQ_LIST_IO_ISC_4 4\n+#define FIRQ_LIST_IO_ISC_5 5\n+#define FIRQ_LIST_IO_ISC_6 6\n+#define FIRQ_LIST_IO_ISC_7 7\n+#define FIRQ_LIST_PFAULT   8\n+#define FIRQ_LIST_VIRTIO   9\n+#define FIRQ_LIST_COUNT   10\n+#define FIRQ_CNTR_IO       0\n+#define FIRQ_CNTR_SERVICE  1\n+#define FIRQ_CNTR_VIRTIO   2\n+#define FIRQ_CNTR_PFAULT   3\n+#define FIRQ_MAX_COUNT     4\n+\n+/* mask the AIS mode for a given ISC */\n+#define AIS_MODE_MASK(isc) (0x80 \u003e\u003e isc)\n+\n+#define KVM_S390_AIS_MODE_ALL    0\n+#define KVM_S390_AIS_MODE_SINGLE 1\n+\n+struct kvm_s390_float_interrupt {\n+\tunsigned long pending_irqs;\n+\tunsigned long masked_irqs;\n+\tspinlock_t lock;\n+\tstruct list_head lists[FIRQ_LIST_COUNT];\n+\tint counters[FIRQ_MAX_COUNT];\n+\tstruct kvm_s390_mchk_info mchk;\n+\tstruct kvm_s390_ext_info srv_signal;\n+\tint last_sleep_cpu;\n+\tspinlock_t ais_lock;\n+\tu8 simm;\n+\tu8 nimm;\n+};\n+\n+struct kvm_hw_wp_info_arch {\n+\tunsigned long addr;\n+\tunsigned long phys_addr;\n+\tint len;\n+\tchar *old_data;\n+};\n+\n+struct kvm_hw_bp_info_arch {\n+\tunsigned long addr;\n+\tint len;\n+};\n+\n+/*\n+ * Only the upper 16 bits of kvm_guest_debug-\u003econtrol are arch specific.\n+ * Further KVM_GUESTDBG flags which an be used from userspace can be found in\n+ * arch/s390/include/uapi/asm/kvm.h\n+ */\n+#define KVM_GUESTDBG_EXIT_PENDING 0x10000000\n+\n+#define guestdbg_enabled(vcpu) \\\n+\t\t(vcpu-\u003eguest_debug \u0026 KVM_GUESTDBG_ENABLE)\n+#define guestdbg_sstep_enabled(vcpu) \\\n+\t\t(vcpu-\u003eguest_debug \u0026 KVM_GUESTDBG_SINGLESTEP)\n+#define guestdbg_hw_bp_enabled(vcpu) \\\n+\t\t(vcpu-\u003eguest_debug \u0026 KVM_GUESTDBG_USE_HW_BP)\n+#define guestdbg_exit_pending(vcpu) (guestdbg_enabled(vcpu) \u0026\u0026 \\\n+\t\t(vcpu-\u003eguest_debug \u0026 KVM_GUESTDBG_EXIT_PENDING))\n+\n+#define KVM_GUESTDBG_VALID_MASK \\\n+\t\t(KVM_GUESTDBG_ENABLE | KVM_GUESTDBG_SINGLESTEP |\\\n+\t\tKVM_GUESTDBG_USE_HW_BP | KVM_GUESTDBG_EXIT_PENDING)\n+\n+struct kvm_guestdbg_info_arch {\n+\tunsigned long cr0;\n+\tunsigned long cr9;\n+\tunsigned long cr10;\n+\tunsigned long cr11;\n+\tstruct kvm_hw_bp_info_arch *hw_bp_info;\n+\tstruct kvm_hw_wp_info_arch *hw_wp_info;\n+\tint nr_hw_bp;\n+\tint nr_hw_wp;\n+\tunsigned long last_bp;\n+};\n+\n+struct kvm_s390_pv_vcpu {\n+\tu64 handle;\n+\tunsigned long stor_base;\n+};\n+\n+struct kvm_vcpu_arch {\n+\tstruct kvm_s390_sie_block *sie_block;\n+\t/* if vsie is active, currently executed shadow sie control block */\n+\tstruct kvm_s390_sie_block *vsie_block;\n+\tunsigned int      host_acrs[NUM_ACRS];\n+\tstruct gs_cb      *host_gscb;\n+\tstruct kvm_s390_local_interrupt local_int;\n+\tstruct hrtimer    ckc_timer;\n+\tstruct kvm_s390_pgm_info pgm;\n+\tstruct gmap *gmap;\n+\tstruct kvm_guestdbg_info_arch guestdbg;\n+\tunsigned long pfault_token;\n+\tunsigned long pfault_select;\n+\tunsigned long pfault_compare;\n+\tbool cputm_enabled;\n+\t/*\n+\t * The seqcount protects updates to cputm_start and sie_block.cputm,\n+\t * this way we can have non-blocking reads with consistent values.\n+\t * Only the owning VCPU thread (vcpu-\u003ecpu) is allowed to change these\n+\t * values and to start/stop/enable/disable cpu timer accounting.\n+\t */\n+\tseqcount_t cputm_seqcount;\n+\t__u64 cputm_start;\n+\tbool gs_enabled;\n+\tbool skey_enabled;\n+\t/* Indicator if the access registers have been loaded from guest */\n+\tbool acrs_loaded;\n+\tstruct kvm_s390_pv_vcpu pv;\n+\tunion diag318_info diag318_info;\n+\tstruct kvm_s390_mmu_cache *mc;\n+};\n+\n+struct kvm_vm_stat {\n+\tstruct kvm_vm_stat_generic generic;\n+\tu64 inject_io;\n+\tu64 io_390_adapter_map;\n+\tu64 io_390_adapter_unmap;\n+\tu64 io_390_inatomic;\n+\tu64 io_flic_inject_airq;\n+\tu64 io_set_adapter_int;\n+\tu64 io_390_inatomic_no_inject;\n+\tu64 inject_float_mchk;\n+\tu64 inject_pfault_done;\n+\tu64 inject_service_signal;\n+\tu64 inject_virtio;\n+\tu64 aen_forward;\n+\tu64 gmap_shadow_create;\n+\tu64 gmap_shadow_reuse;\n+\tu64 gmap_shadow_r1_entry;\n+\tu64 gmap_shadow_r2_entry;\n+\tu64 gmap_shadow_r3_entry;\n+\tu64 gmap_shadow_sg_entry;\n+\tu64 gmap_shadow_pg_entry;\n+};\n+\n+struct kvm_arch_memory_slot {\n+};\n+\n+struct s390_map_info {\n+\tstruct list_head list;\n+\t__u64 guest_addr;\n+\t__u64 addr;\n+\tstruct page *page;\n+\t/*\n+\t * True if the page is long-term pinned. False if long-term pinning\n+\t * failed and this entry exists only to preserve MAP/UNMAP symmetry.\n+\t */\n+\tbool pinned;\n+};\n+\n+struct s390_io_adapter {\n+\tunsigned int id;\n+\tint isc;\n+\tbool maskable;\n+\tbool masked;\n+\tbool swap;\n+\tbool suppressible;\n+\tspinlock_t maps_lock;\n+\tstruct list_head maps;\n+\tunsigned int nr_maps;\n+};\n+\n+#define MAX_S390_IO_ADAPTERS ((MAX_ISC + 1) * 8)\n+#define MAX_S390_ADAPTER_MAPS 256\n+\n+/* maximum size of facilities and facility mask is 2k bytes */\n+#define S390_ARCH_FAC_LIST_SIZE_BYTE (1\u003c\u003c11)\n+#define S390_ARCH_FAC_LIST_SIZE_U64 \\\n+\t(S390_ARCH_FAC_LIST_SIZE_BYTE / sizeof(u64))\n+#define S390_ARCH_FAC_MASK_SIZE_BYTE S390_ARCH_FAC_LIST_SIZE_BYTE\n+#define S390_ARCH_FAC_MASK_SIZE_U64 \\\n+\t(S390_ARCH_FAC_MASK_SIZE_BYTE / sizeof(u64))\n+\n+struct kvm_s390_cpu_model {\n+\t/* facility mask supported by kvm \u0026 hosting machine */\n+\t__u64 fac_mask[S390_ARCH_FAC_MASK_SIZE_U64];\n+\tstruct kvm_s390_vm_cpu_subfunc subfuncs;\n+\t/* facility list requested by guest (in dma page) */\n+\t__u64 *fac_list;\n+\tu64 cpuid;\n+\tunsigned short ibc;\n+\t/* subset of available UV-features for pv-guests enabled by user space */\n+\tstruct kvm_s390_vm_cpu_uv_feat uv_feat_guest;\n+};\n+\n+#define S390_ARCH_FAC_FORMAT_2 2\n+struct kvm_s390_flcb2 {\n+\tunion {\n+\t\tstruct {\n+\t\t\tu8 reserved0[7];\n+\t\t\tu8 length;\n+\t\t};\n+\t\tu64 header_val;\n+\t};\n+\tu64 facilities[S390_ARCH_FAC_LIST_SIZE_U64];\n+};\n+\n+typedef int (*crypto_hook)(struct kvm_vcpu *vcpu);\n+\n+struct kvm_s390_crypto {\n+\tstruct kvm_s390_crypto_cb *crycb;\n+\tstruct rw_semaphore pqap_hook_rwsem;\n+\tcrypto_hook *pqap_hook;\n+\t__u32 crycbd;\n+\t__u8 aes_kw;\n+\t__u8 dea_kw;\n+\t__u8 apie;\n+};\n+\n+#define APCB0_MASK_SIZE 1\n+struct kvm_s390_apcb0 {\n+\t__u64 apm[APCB0_MASK_SIZE];\t\t/* 0x0000 */\n+\t__u64 aqm[APCB0_MASK_SIZE];\t\t/* 0x0008 */\n+\t__u64 adm[APCB0_MASK_SIZE];\t\t/* 0x0010 */\n+\t__u64 reserved18;\t\t\t/* 0x0018 */\n+};\n+\n+#define APCB1_MASK_SIZE 4\n+struct kvm_s390_apcb1 {\n+\t__u64 apm[APCB1_MASK_SIZE];\t\t/* 0x0000 */\n+\t__u64 aqm[APCB1_MASK_SIZE];\t\t/* 0x0020 */\n+\t__u64 adm[APCB1_MASK_SIZE];\t\t/* 0x0040 */\n+\t__u64 reserved60[4];\t\t\t/* 0x0060 */\n+};\n+\n+struct kvm_s390_crypto_cb {\n+\tstruct kvm_s390_apcb0 apcb0;\t\t/* 0x0000 */\n+\t__u8   reserved20[0x0048 - 0x0020];\t/* 0x0020 */\n+\t__u8   dea_wrapping_key_mask[24];\t/* 0x0048 */\n+\t__u8   aes_wrapping_key_mask[32];\t/* 0x0060 */\n+\tstruct kvm_s390_apcb1 apcb1;\t\t/* 0x0080 */\n+};\n+\n+struct kvm_s390_gisa {\n+\tunion {\n+\t\tstruct { /* common to all formats */\n+\t\t\tu32 next_alert;\n+\t\t\tu8  ipm;\n+\t\t\tu8  reserved01[2];\n+\t\t\tu8  iam;\n+\t\t};\n+\t\tstruct { /* format 0 */\n+\t\t\tu32 next_alert;\n+\t\t\tu8  ipm;\n+\t\t\tu8  reserved01;\n+\t\t\tu8  : 6;\n+\t\t\tu8  g : 1;\n+\t\t\tu8  c : 1;\n+\t\t\tu8  iam;\n+\t\t\tu8  reserved02[4];\n+\t\t\tu32 airq_count;\n+\t\t} g0;\n+\t\tstruct { /* format 1 */\n+\t\t\tu32 next_alert;\n+\t\t\tu8  ipm;\n+\t\t\tu8  simm;\n+\t\t\tu8  nimm;\n+\t\t\tu8  iam;\n+\t\t\tu8  aism[8];\n+\t\t\tu8  : 6;\n+\t\t\tu8  g : 1;\n+\t\t\tu8  c : 1;\n+\t\t\tu8  reserved03[11];\n+\t\t\tu32 airq_count;\n+\t\t} g1;\n+\t\tstruct {\n+\t\t\tu64 word[4];\n+\t\t} u64;\n+\t};\n+};\n+\n+struct kvm_s390_gib {\n+\tu32 alert_list_origin;\n+\tu32 reserved01;\n+\tu8:5;\n+\tu8  nisc:3;\n+\tu8  reserved03[3];\n+\tu32 reserved04[5];\n+};\n+\n+/*\n+ * sie_page2 has to be allocated as DMA because fac_list, crycb and\n+ * gisa need 31bit addresses in the sie control block.\n+ */\n+struct sie_page2 {\n+\t__u64 fac_list[S390_ARCH_FAC_LIST_SIZE_U64];\t/* 0x0000 */\n+\tstruct kvm_s390_crypto_cb crycb;\t\t/* 0x0800 */\n+\tstruct kvm_s390_gisa gisa;\t\t\t/* 0x0900 */\n+\tstruct kvm *kvm;\t\t\t\t/* 0x0920 */\n+\tu8 reserved928[0x1000 - 0x928];\t\t\t/* 0x0928 */\n+};\n+\n+struct vsie_page;\n+\n+struct kvm_s390_vsie {\n+\tstruct mutex mutex;\n+\tstruct radix_tree_root addr_to_page;\n+\tint page_count;\n+\tint next;\n+\tstruct vsie_page *pages[KVM_MAX_VCPUS];\n+};\n+\n+struct kvm_s390_gisa_iam {\n+\tu8 mask;\n+\tspinlock_t ref_lock;\n+\tu32 ref_count[MAX_ISC + 1];\n+};\n+\n+struct kvm_s390_gisa_interrupt {\n+\tstruct kvm_s390_gisa *origin;\n+\tstruct kvm_s390_gisa_iam alert;\n+\tstruct hrtimer timer;\n+\tu64 expires;\n+\tDECLARE_BITMAP(kicked_mask, KVM_MAX_VCPUS);\n+};\n+\n+struct kvm_s390_pv {\n+\tu64 handle;\n+\tu64 guest_len;\n+\tunsigned long stor_base;\n+\tvoid *stor_var;\n+\tbool dumping;\n+\tvoid *set_aside;\n+\tstruct list_head need_cleanup;\n+\tstruct mmu_notifier mmu_notifier;\n+\t/* Protects against concurrent import-like operations */\n+\tstruct mutex import_lock;\n+};\n+\n+struct kvm_s390_mmu_cache;\n+\n+struct kvm_arch {\n+\tstruct esca_block *sca;\n+\tdebug_info_t *dbf;\n+\tstruct kvm_s390_float_interrupt float_int;\n+\tstruct kvm_device *flic;\n+\tstruct gmap *gmap;\n+\tunsigned long mem_limit;\n+\tint css_support;\n+\tint use_irqchip;\n+\tint use_cmma;\n+\tint use_pfmfi;\n+\tint use_skf;\n+\tint use_zpci_interp;\n+\tint user_cpu_state_ctrl;\n+\tint user_sigp;\n+\tint user_stsi;\n+\tint user_instr0;\n+\tint user_operexec;\n+\tint allow_vsie_esamode;\n+\tstruct s390_io_adapter *adapters[MAX_S390_IO_ADAPTERS];\n+\twait_queue_head_t ipte_wq;\n+\tint ipte_lock_count;\n+\tstruct mutex ipte_mutex;\n+\tspinlock_t start_stop_lock;\n+\tstruct sie_page2 *sie_page2;\n+\tstruct kvm_s390_cpu_model model;\n+\tstruct kvm_s390_crypto crypto;\n+\tstruct kvm_s390_vsie vsie;\n+\tu8 epdx;\n+\tu64 epoch;\n+\tint migration_mode;\n+\tatomic64_t cmma_dirty_pages;\n+\t/* subset of available cpu features enabled by user space */\n+\tDECLARE_BITMAP(cpu_feat, KVM_S390_VM_CPU_FEAT_NR_BITS);\n+\t/* indexed by vcpu_idx */\n+\tDECLARE_BITMAP(idle_mask, KVM_MAX_VCPUS);\n+\tstruct kvm_s390_gisa_interrupt gisa_int;\n+\tstruct kvm_s390_pv pv;\n+\tstruct list_head kzdev_list;\n+\tspinlock_t kzdev_list_lock;\n+\tstruct kvm_s390_mmu_cache *mc;\n+};\n+\n+#define KVM_HVA_ERR_BAD\t\t(-1UL)\n+#define KVM_HVA_ERR_RO_BAD\t(-2UL)\n+\n+static inline bool kvm_is_error_hva(unsigned long addr)\n+{\n+\treturn IS_ERR_VALUE(addr);\n+}\n+\n+#define ASYNC_PF_PER_VCPU\t64\n+struct kvm_arch_async_pf {\n+\tunsigned long pfault_token;\n+};\n+\n+bool kvm_arch_can_dequeue_async_page_present(struct kvm_vcpu *vcpu);\n+\n+void kvm_arch_async_page_ready(struct kvm_vcpu *vcpu,\n+\t\t\t       struct kvm_async_pf *work);\n+\n+bool kvm_arch_async_page_not_present(struct kvm_vcpu *vcpu,\n+\t\t\t\t     struct kvm_async_pf *work);\n+\n+void kvm_arch_async_page_present(struct kvm_vcpu *vcpu,\n+\t\t\t\t struct kvm_async_pf *work);\n+\n+static inline void kvm_arch_async_page_present_queued(struct kvm_vcpu *vcpu) {}\n+\n+void kvm_arch_crypto_clear_masks(struct kvm *kvm);\n+void kvm_arch_crypto_set_masks(struct kvm *kvm, unsigned long *apm,\n+\t\t\t       unsigned long *aqm, unsigned long *adm);\n+\n+#define SIE64_RETURN_NORMAL\t0\n+#define SIE64_RETURN_MCCK\t1\n+\n+int __sie64a(phys_addr_t sie_block_phys, struct kvm_s390_sie_block *sie_block, u64 *rsa,\n+\t     unsigned long gasce);\n+\n+static inline int sie64a(struct kvm_s390_sie_block *sie_block, u64 *rsa, unsigned long gasce)\n+{\n+\treturn __sie64a(virt_to_phys(sie_block), sie_block, rsa, gasce);\n+}\n+\n+extern char sie_exit;\n+\n+bool kvm_s390_pv_is_protected(struct kvm *kvm);\n+bool kvm_s390_pv_cpu_is_protected(struct kvm_vcpu *vcpu);\n+\n+extern int kvm_s390_enter_exit_sie(struct kvm_s390_sie_block *scb,\n+\t\t\t\t   u64 *gprs, unsigned long gasce);\n+\n+extern int kvm_s390_gisc_register(struct kvm *kvm, u32 gisc);\n+extern int kvm_s390_gisc_unregister(struct kvm *kvm, u32 gisc);\n+\n+bool kvm_s390_is_gpa_in_memslot(struct kvm *kvm, gpa_t gpa);\n+\n+static inline void kvm_arch_free_memslot(struct kvm *kvm,\n+\t\t\t\t\t struct kvm_memory_slot *slot) {}\n+static inline void kvm_arch_memslots_updated(struct kvm *kvm, u64 gen) {}\n+static inline void kvm_arch_flush_shadow_all(struct kvm *kvm) {}\n+static inline void kvm_arch_flush_shadow_memslot(struct kvm *kvm,\n+\t\tstruct kvm_memory_slot *slot) {}\n+static inline void kvm_arch_vcpu_blocking(struct kvm_vcpu *vcpu) {}\n+static inline void kvm_arch_vcpu_unblocking(struct kvm_vcpu *vcpu) {}\n+\n+#define __KVM_HAVE_ARCH_VM_FREE\n+void kvm_arch_free_vm(struct kvm *kvm);\n+\n+struct zpci_kvm_hook {\n+\tint (*kvm_register)(void *opaque, struct kvm *kvm);\n+\tvoid (*kvm_unregister)(void *opaque);\n+};\n+\n+extern struct zpci_kvm_hook zpci_kvm_hook;\n+\n+#endif /* ASM_KVM_HOST_S390_H */\ndiff --git a/arch/s390/include/asm/kvm_host_s390_types.h b/arch/s390/include/asm/kvm_host_s390_types.h\nnew file mode 100644\nindex 0000000000000..5cf746095bfd1\n--- /dev/null\n+++ b/arch/s390/include/asm/kvm_host_s390_types.h\n@@ -0,0 +1,347 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+\n+#ifndef _ASM_KVM_HOST_S390_TYPES_H\n+#define _ASM_KVM_HOST_S390_TYPES_H\n+\n+#include \u003clinux/atomic.h\u003e\n+#include \u003clinux/types.h\u003e\n+\n+#define KVM_S390_BSCA_CPU_SLOTS 64\n+#define KVM_S390_ESCA_CPU_SLOTS 248\n+\n+#define SIGP_CTRL_C\t\t0x80\n+#define SIGP_CTRL_SCN_MASK\t0x3f\n+\n+union bsca_sigp_ctrl {\n+\t__u8 value;\n+\tstruct {\n+\t\t__u8 c : 1;\n+\t\t__u8 r : 1;\n+\t\t__u8 scn : 6;\n+\t};\n+};\n+\n+union esca_sigp_ctrl {\n+\t__u16 value;\n+\tstruct {\n+\t\t__u8 c : 1;\n+\t\t__u8 reserved: 7;\n+\t\t__u8 scn;\n+\t};\n+};\n+\n+struct esca_entry {\n+\tunion esca_sigp_ctrl sigp_ctrl;\n+\t__u16\treserved1[3];\n+\t__u64\tsda;\n+\t__u64\treserved2[6];\n+};\n+\n+struct bsca_entry {\n+\t__u8\treserved0;\n+\tunion bsca_sigp_ctrl\tsigp_ctrl;\n+\t__u16\treserved[3];\n+\t__u64\tsda;\n+\t__u64\treserved2[2];\n+};\n+\n+union ipte_control {\n+\tunsigned long val;\n+\tstruct {\n+\t\tunsigned long k  : 1;\n+\t\tunsigned long kh : 31;\n+\t\tunsigned long kg : 32;\n+\t};\n+};\n+\n+/*\n+ * Utility is defined as two bytes but having it four bytes wide\n+ * generates more efficient code. Since the following bytes are\n+ * reserved this makes no functional difference.\n+ */\n+union sca_utility {\n+\t__u32 val;\n+\tstruct {\n+\t\t__u32 mtcr : 1;\n+\t\t__u32\t   : 31;\n+\t};\n+};\n+\n+struct bsca_block {\n+\tunion ipte_control ipte_control;\n+\t__u64\treserved[5];\n+\t__u64\tmcn;\n+\tunion sca_utility utility;\n+\t__u8\treserved2[4];\n+\tstruct bsca_entry cpu[KVM_S390_BSCA_CPU_SLOTS];\n+};\n+\n+struct esca_block {\n+\tunion ipte_control ipte_control;\n+\t__u64\treserved1[6];\n+\tunion sca_utility utility;\n+\t__u8\treserved2[4];\n+\t__u64\tmcn[4];\n+\t__u64\treserved3[20];\n+\tstruct esca_entry cpu[KVM_S390_ESCA_CPU_SLOTS];\n+};\n+\n+/*\n+ * This struct is used to store some machine check info from lowcore\n+ * for machine checks that happen while the guest is running.\n+ * This info in host's lowcore might be overwritten by a second machine\n+ * check from host when host is in the machine check's high-level handling.\n+ * The size is 24 bytes.\n+ */\n+struct mcck_volatile_info {\n+\t__u64 mcic;\n+\t__u64 failing_storage_address;\n+\t__u32 ext_damage_code;\n+\t__u32 reserved;\n+};\n+\n+#define CR0_INITIAL_MASK (CR0_UNUSED_56 | CR0_INTERRUPT_KEY_SUBMASK | \\\n+\t\t\t  CR0_MEASUREMENT_ALERT_SUBMASK)\n+#define CR14_INITIAL_MASK (CR14_UNUSED_32 | CR14_UNUSED_33 | \\\n+\t\t\t   CR14_EXTERNAL_DAMAGE_SUBMASK)\n+\n+#define SIDAD_SIZE_MASK\t\t0xff\n+#define sida_addr(sie_block) phys_to_virt((sie_block)-\u003esidad \u0026 PAGE_MASK)\n+#define sida_size(sie_block) \\\n+\t((((sie_block)-\u003esidad \u0026 SIDAD_SIZE_MASK) + 1) * PAGE_SIZE)\n+\n+#define CPUSTAT_STOPPED    0x80000000\n+#define CPUSTAT_WAIT\t   0x10000000\n+#define CPUSTAT_ECALL_PEND 0x08000000\n+#define CPUSTAT_STOP_INT   0x04000000\n+#define CPUSTAT_IO_INT\t   0x02000000\n+#define CPUSTAT_EXT_INT    0x01000000\n+#define CPUSTAT_RUNNING    0x00800000\n+#define CPUSTAT_RETAINED   0x00400000\n+#define CPUSTAT_TIMING_SUB 0x00020000\n+#define CPUSTAT_SIE_SUB    0x00010000\n+#define CPUSTAT_RRF\t   0x00008000\n+#define CPUSTAT_SLSV\t   0x00004000\n+#define CPUSTAT_SLSR\t   0x00002000\n+#define CPUSTAT_ZARCH\t   0x00000800\n+#define CPUSTAT_MCDS\t   0x00000100\n+#define CPUSTAT_KSS\t   0x00000200\n+#define CPUSTAT_SM\t   0x00000080\n+#define CPUSTAT_IBS\t   0x00000040\n+#define CPUSTAT_GED2\t   0x00000010\n+#define CPUSTAT_G\t   0x00000008\n+#define CPUSTAT_GED\t   0x00000004\n+#define CPUSTAT_J\t   0x00000002\n+#define CPUSTAT_P\t   0x00000001\n+\n+struct kvm_s390_sie_block {\n+\tatomic_t cpuflags;\t\t/* 0x0000 */\n+\t__u32 : 1;\t\t\t/* 0x0004 */\n+\t__u32 prefix : 19;\n+\t__u32 ibc : 12;\n+\t__u8\treserved08[4];\t\t/* 0x0008 */\n+#define PROG_IN_SIE (1\u003c\u003c0)\n+\t__u32\tprog0c;\t\t\t/* 0x000c */\n+\tunion {\n+\t\t__u8\treserved10[16];\t\t/* 0x0010 */\n+\t\tstruct {\n+\t\t\t__u64\tpv_handle_cpu;\n+\t\t\t__u64\tpv_handle_config;\n+\t\t};\n+\t};\n+#define PROG_BLOCK_SIE\t(1\u003c\u003c0)\n+#define PROG_REQUEST\t(1\u003c\u003c1)\n+\tatomic_t prog20;\t\t/* 0x0020 */\n+\t__u8\treserved24[4];\t\t/* 0x0024 */\n+\t__u64\tcputm;\t\t\t/* 0x0028 */\n+\t__u64\tckc;\t\t\t/* 0x0030 */\n+\t__u64\tepoch;\t\t\t/* 0x0038 */\n+\t__u32\tsvcc;\t\t\t/* 0x0040 */\n+#define LCTL_CR0\t0x8000\n+#define LCTL_CR6\t0x0200\n+#define LCTL_CR9\t0x0040\n+#define LCTL_CR10\t0x0020\n+#define LCTL_CR11\t0x0010\n+#define LCTL_CR14\t0x0002\n+\t__u16\tlctl;\t\t\t/* 0x0044 */\n+\t__s16\ticpua;\t\t\t/* 0x0046 */\n+#define ICTL_OPEREXC\t0x80000000\n+#define ICTL_PINT\t0x20000000\n+#define ICTL_LPSW\t0x00400000\n+#define ICTL_STCTL\t0x00040000\n+#define ICTL_ISKE\t0x00004000\n+#define ICTL_SSKE\t0x00002000\n+#define ICTL_RRBE\t0x00001000\n+#define ICTL_TPROT\t0x00000200\n+\t__u32\tictl;\t\t\t/* 0x0048 */\n+#define ECA_CEI\t\t0x80000000\n+#define ECA_IB\t\t0x40000000\n+#define ECA_SIGPI\t0x10000000\n+#define ECA_MVPGI\t0x01000000\n+#define ECA_AIV\t\t0x00200000\n+#define ECA_VX\t\t0x00020000\n+#define ECA_PROTEXCI\t0x00002000\n+#define ECA_APIE\t0x00000008\n+#define ECA_SII\t\t0x00000001\n+\t__u32\teca;\t\t\t/* 0x004c */\n+#define ICPT_INST\t0x04\n+#define ICPT_PROGI\t0x08\n+#define ICPT_INSTPROGI\t0x0C\n+#define ICPT_EXTREQ\t0x10\n+#define ICPT_EXTINT\t0x14\n+#define ICPT_IOREQ\t0x18\n+#define ICPT_WAIT\t0x1c\n+#define ICPT_VALIDITY\t0x20\n+#define ICPT_STOP\t0x28\n+#define ICPT_OPEREXC\t0x2C\n+#define ICPT_PARTEXEC\t0x38\n+#define ICPT_IOINST\t0x40\n+#define ICPT_KSS\t0x5c\n+#define ICPT_MCHKREQ\t0x60\n+#define ICPT_INT_ENABLE\t0x64\n+#define ICPT_PV_INSTR\t0x68\n+#define ICPT_PV_NOTIFY\t0x6c\n+#define ICPT_PV_PREF\t0x70\n+\t__u8\ticptcode;\t\t/* 0x0050 */\n+\t__u8\ticptstatus;\t\t/* 0x0051 */\n+\t__u16\tihcpu;\t\t\t/* 0x0052 */\n+\t__u8\treserved54;\t\t/* 0x0054 */\n+#define IICTL_CODE_NONE\t\t 0x00\n+#define IICTL_CODE_MCHK\t\t 0x01\n+#define IICTL_CODE_EXT\t\t 0x02\n+#define IICTL_CODE_IO\t\t 0x03\n+#define IICTL_CODE_RESTART\t 0x04\n+#define IICTL_CODE_SPECIFICATION 0x10\n+#define IICTL_CODE_OPERAND\t 0x11\n+\t__u8\tiictl;\t\t\t/* 0x0055 */\n+\t__u16\tipa;\t\t\t/* 0x0056 */\n+\t__u32\tipb;\t\t\t/* 0x0058 */\n+\t__u32\tscaoh;\t\t\t/* 0x005c */\n+#define FPF_BPBC\t0x20\n+\t__u8\tfpf;\t\t\t/* 0x0060 */\n+#define ECB_GS\t\t0x40\n+#define ECB_TE\t\t0x10\n+#define ECB_SPECI\t0x08\n+#define ECB_SRSI\t0x04\n+#define ECB_HOSTPROTINT\t0x02\n+#define ECB_PTF\t\t0x01\n+\t__u8\tecb;\t\t\t/* 0x0061 */\n+#define ECB2_CMMA\t0x80\n+#define ECB2_IEP\t0x20\n+#define ECB2_PFMFI\t0x08\n+#define ECB2_ESCA\t0x04\n+#define ECB2_ZPCI_LSI\t0x02\n+\t__u8\tecb2;\t\t\t/* 0x0062 */\n+#define ECB3_AISI\t0x20\n+#define ECB3_AISII\t0x10\n+#define ECB3_DEA 0x08\n+#define ECB3_AES 0x04\n+#define ECB3_RI  0x01\n+\t__u8\tecb3;\t\t\t/* 0x0063 */\n+#define ESCA_SCAOL_MASK ~0x3fU\n+\t__u32\tscaol;\t\t\t/* 0x0064 */\n+\t__u8\tsdf;\t\t\t/* 0x0068 */\n+\t__u8\tepdx;\t\t\t/* 0x0069 */\n+\t__u8\tcpnc;\t\t\t/* 0x006a */\n+\t__u8\treserved6b;\t\t/* 0x006b */\n+\t__u32\ttodpr;\t\t\t/* 0x006c */\n+#define GISA_FORMAT1 0x00000001\n+\t__u32\tgd;\t\t\t/* 0x0070 */\n+\t__u8\treserved74[12];\t\t/* 0x0074 */\n+\t__u64\tmso;\t\t\t/* 0x0080 */\n+\t__u64\tmsl;\t\t\t/* 0x0088 */\n+\tpsw_t\tgpsw;\t\t\t/* 0x0090 */\n+\t__u64\tgg14;\t\t\t/* 0x00a0 */\n+\t__u64\tgg15;\t\t\t/* 0x00a8 */\n+\t__u8\treservedb0[8];\t\t/* 0x00b0 */\n+#define HPID_KVM\t0x4\n+#define HPID_VSIE\t0x5\n+\t__u8\thpid;\t\t\t/* 0x00b8 */\n+\t__u8\treservedb9[7];\t\t/* 0x00b9 */\n+\tunion {\n+\t\tstruct {\n+\t\t\t__u32\teiparams;\t/* 0x00c0 */\n+\t\t\t__u16\textcpuaddr;\t/* 0x00c4 */\n+\t\t\t__u16\teic;\t\t/* 0x00c6 */\n+\t\t};\n+\t\t__u64\tmcic;\t\t\t/* 0x00c0 */\n+\t} __packed;\n+\t__u32\treservedc8;\t\t/* 0x00c8 */\n+\tunion {\n+\t\tstruct {\n+\t\t\t__u16\tpgmilc;\t\t/* 0x00cc */\n+\t\t\t__u16\tiprcc;\t\t/* 0x00ce */\n+\t\t};\n+\t\t__u32\tedc;\t\t\t/* 0x00cc */\n+\t} __packed;\n+\tunion {\n+\t\tstruct {\n+\t\t\t__u32\tdxc;\t\t/* 0x00d0 */\n+\t\t\t__u16\tmcn;\t\t/* 0x00d4 */\n+\t\t\t__u8\tperc;\t\t/* 0x00d6 */\n+\t\t\t__u8\tperatmid;\t/* 0x00d7 */\n+\t\t};\n+\t\t__u64\tfaddr;\t\t\t/* 0x00d0 */\n+\t} __packed;\n+\t__u64\tperaddr;\t\t/* 0x00d8 */\n+\t__u8\teai;\t\t\t/* 0x00e0 */\n+\t__u8\tperaid;\t\t\t/* 0x00e1 */\n+\t__u8\toai;\t\t\t/* 0x00e2 */\n+\t__u8\tarmid;\t\t\t/* 0x00e3 */\n+\t__u8\treservede4[4];\t\t/* 0x00e4 */\n+\tunion {\n+\t\t__u64\ttecmc;\t\t/* 0x00e8 */\n+\t\tstruct {\n+\t\t\t__u16\tsubchannel_id;\t/* 0x00e8 */\n+\t\t\t__u16\tsubchannel_nr;\t/* 0x00ea */\n+\t\t\t__u32\tio_int_parm;\t/* 0x00ec */\n+\t\t\t__u32\tio_int_word;\t/* 0x00f0 */\n+\t\t};\n+\t} __packed;\n+\t__u8\treservedf4[8];\t\t/* 0x00f4 */\n+#define CRYCB_FORMAT_MASK 0x00000003\n+#define CRYCB_FORMAT0 0x00000000\n+#define CRYCB_FORMAT1 0x00000001\n+#define CRYCB_FORMAT2 0x00000003\n+\t__u32\tcrycbd;\t\t\t/* 0x00fc */\n+\t__u64\tgcr[16];\t\t/* 0x0100 */\n+\tunion {\n+\t\t__u64\tgbea;\t\t/* 0x0180 */\n+\t\t__u64\tsidad;\n+\t};\n+\t__u8\treserved188[8];\t\t/* 0x0188 */\n+\t__u64\tsdnxo;\t\t\t/* 0x0190 */\n+\t__u8\treserved198[8];\t\t/* 0x0198 */\n+\t__u32\tfac;\t\t\t/* 0x01a0 */\n+\t__u8\treserved1a4[20];\t/* 0x01a4 */\n+\t__u64\tcbrlo;\t\t\t/* 0x01b8 */\n+\t__u8\treserved1c0[8];\t\t/* 0x01c0 */\n+#define ECD_HOSTREGMGMT\t0x20000000\n+#define ECD_MEF\t\t0x08000000\n+#define ECD_ETOKENF\t0x02000000\n+#define ECD_ECC\t\t0x00200000\n+#define ECD_HMAC\t0x00004000\n+\t__u32\tecd;\t\t\t/* 0x01c8 */\n+\t__u8\treserved1cc[18];\t/* 0x01cc */\n+\t__u64\tpp;\t\t\t/* 0x01de */\n+\t__u8\treserved1e6[2];\t\t/* 0x01e6 */\n+\t__u64\titdba;\t\t\t/* 0x01e8 */\n+\t__u64\triccbd;\t\t\t/* 0x01f0 */\n+\t__u64\tgvrd;\t\t\t/* 0x01f8 */\n+} __packed __aligned(512);\n+\n+struct kvm_s390_itdb {\n+\t__u8\tdata[256];\n+};\n+\n+struct sie_page {\n+\tstruct kvm_s390_sie_block sie_block;\n+\tstruct mcck_volatile_info mcck_info;\t/* 0x0200 */\n+\t__u8 reserved218[360];\t\t/* 0x0218 */\n+\t__u64 pv_grregs[16];\t\t/* 0x0380 */\n+\t__u8 reserved400[512];\t\t/* 0x0400 */\n+\tstruct kvm_s390_itdb itdb;\t/* 0x0600 */\n+\t__u8 reserved700[2304];\t\t/* 0x0700 */\n+};\n+\n+#endif /* _ASM_KVM_HOST_S390_TYPES_H */\ndiff --git a/arch/s390/include/asm/kvm_host_types.h b/arch/s390/include/asm/kvm_host_types.h\nindex 3f50942bdfe6c..d308739ebcf57 100644\n--- a/arch/s390/include/asm/kvm_host_types.h\n+++ b/arch/s390/include/asm/kvm_host_types.h\n@@ -1,347 +1,12 @@\n /* SPDX-License-Identifier: GPL-2.0 */\n \n-#ifndef _ASM_KVM_HOST_TYPES_H\n-#define _ASM_KVM_HOST_TYPES_H\n+#ifndef ASM_KVM_HOST_TYPES_H\n+#define ASM_KVM_HOST_TYPES_H\n \n-#include \u003clinux/atomic.h\u003e\n-#include \u003clinux/types.h\u003e\n+#ifdef KVM_S390_ARM64\n+#include \u003casm/kvm_host_arm64_types.h\u003e\n+#else\n+#include \u003casm/kvm_host_s390_types.h\u003e\n+#endif /* KVM_S390_ARM64 */\n \n-#define KVM_S390_BSCA_CPU_SLOTS 64\n-#define KVM_S390_ESCA_CPU_SLOTS 248\n-\n-#define SIGP_CTRL_C\t\t0x80\n-#define SIGP_CTRL_SCN_MASK\t0x3f\n-\n-union bsca_sigp_ctrl {\n-\t__u8 value;\n-\tstruct {\n-\t\t__u8 c : 1;\n-\t\t__u8 r : 1;\n-\t\t__u8 scn : 6;\n-\t};\n-};\n-\n-union esca_sigp_ctrl {\n-\t__u16 value;\n-\tstruct {\n-\t\t__u8 c : 1;\n-\t\t__u8 reserved: 7;\n-\t\t__u8 scn;\n-\t};\n-};\n-\n-struct esca_entry {\n-\tunion esca_sigp_ctrl sigp_ctrl;\n-\t__u16\treserved1[3];\n-\t__u64\tsda;\n-\t__u64\treserved2[6];\n-};\n-\n-struct bsca_entry {\n-\t__u8\treserved0;\n-\tunion bsca_sigp_ctrl\tsigp_ctrl;\n-\t__u16\treserved[3];\n-\t__u64\tsda;\n-\t__u64\treserved2[2];\n-};\n-\n-union ipte_control {\n-\tunsigned long val;\n-\tstruct {\n-\t\tunsigned long k  : 1;\n-\t\tunsigned long kh : 31;\n-\t\tunsigned long kg : 32;\n-\t};\n-};\n-\n-/*\n- * Utility is defined as two bytes but having it four bytes wide\n- * generates more efficient code. Since the following bytes are\n- * reserved this makes no functional difference.\n- */\n-union sca_utility {\n-\t__u32 val;\n-\tstruct {\n-\t\t__u32 mtcr : 1;\n-\t\t__u32\t   : 31;\n-\t};\n-};\n-\n-struct bsca_block {\n-\tunion ipte_control ipte_control;\n-\t__u64\treserved[5];\n-\t__u64\tmcn;\n-\tunion sca_utility utility;\n-\t__u8\treserved2[4];\n-\tstruct bsca_entry cpu[KVM_S390_BSCA_CPU_SLOTS];\n-};\n-\n-struct esca_block {\n-\tunion ipte_control ipte_control;\n-\t__u64\treserved1[6];\n-\tunion sca_utility utility;\n-\t__u8\treserved2[4];\n-\t__u64\tmcn[4];\n-\t__u64\treserved3[20];\n-\tstruct esca_entry cpu[KVM_S390_ESCA_CPU_SLOTS];\n-};\n-\n-/*\n- * This struct is used to store some machine check info from lowcore\n- * for machine checks that happen while the guest is running.\n- * This info in host's lowcore might be overwritten by a second machine\n- * check from host when host is in the machine check's high-level handling.\n- * The size is 24 bytes.\n- */\n-struct mcck_volatile_info {\n-\t__u64 mcic;\n-\t__u64 failing_storage_address;\n-\t__u32 ext_damage_code;\n-\t__u32 reserved;\n-};\n-\n-#define CR0_INITIAL_MASK (CR0_UNUSED_56 | CR0_INTERRUPT_KEY_SUBMASK | \\\n-\t\t\t  CR0_MEASUREMENT_ALERT_SUBMASK)\n-#define CR14_INITIAL_MASK (CR14_UNUSED_32 | CR14_UNUSED_33 | \\\n-\t\t\t   CR14_EXTERNAL_DAMAGE_SUBMASK)\n-\n-#define SIDAD_SIZE_MASK\t\t0xff\n-#define sida_addr(sie_block) phys_to_virt((sie_block)-\u003esidad \u0026 PAGE_MASK)\n-#define sida_size(sie_block) \\\n-\t((((sie_block)-\u003esidad \u0026 SIDAD_SIZE_MASK) + 1) * PAGE_SIZE)\n-\n-#define CPUSTAT_STOPPED    0x80000000\n-#define CPUSTAT_WAIT\t   0x10000000\n-#define CPUSTAT_ECALL_PEND 0x08000000\n-#define CPUSTAT_STOP_INT   0x04000000\n-#define CPUSTAT_IO_INT\t   0x02000000\n-#define CPUSTAT_EXT_INT    0x01000000\n-#define CPUSTAT_RUNNING    0x00800000\n-#define CPUSTAT_RETAINED   0x00400000\n-#define CPUSTAT_TIMING_SUB 0x00020000\n-#define CPUSTAT_SIE_SUB    0x00010000\n-#define CPUSTAT_RRF\t   0x00008000\n-#define CPUSTAT_SLSV\t   0x00004000\n-#define CPUSTAT_SLSR\t   0x00002000\n-#define CPUSTAT_ZARCH\t   0x00000800\n-#define CPUSTAT_MCDS\t   0x00000100\n-#define CPUSTAT_KSS\t   0x00000200\n-#define CPUSTAT_SM\t   0x00000080\n-#define CPUSTAT_IBS\t   0x00000040\n-#define CPUSTAT_GED2\t   0x00000010\n-#define CPUSTAT_G\t   0x00000008\n-#define CPUSTAT_GED\t   0x00000004\n-#define CPUSTAT_J\t   0x00000002\n-#define CPUSTAT_P\t   0x00000001\n-\n-struct kvm_s390_sie_block {\n-\tatomic_t cpuflags;\t\t/* 0x0000 */\n-\t__u32 : 1;\t\t\t/* 0x0004 */\n-\t__u32 prefix : 19;\n-\t__u32 ibc : 12;\n-\t__u8\treserved08[4];\t\t/* 0x0008 */\n-#define PROG_IN_SIE (1\u003c\u003c0)\n-\t__u32\tprog0c;\t\t\t/* 0x000c */\n-\tunion {\n-\t\t__u8\treserved10[16];\t\t/* 0x0010 */\n-\t\tstruct {\n-\t\t\t__u64\tpv_handle_cpu;\n-\t\t\t__u64\tpv_handle_config;\n-\t\t};\n-\t};\n-#define PROG_BLOCK_SIE\t(1\u003c\u003c0)\n-#define PROG_REQUEST\t(1\u003c\u003c1)\n-\tatomic_t prog20;\t\t/* 0x0020 */\n-\t__u8\treserved24[4];\t\t/* 0x0024 */\n-\t__u64\tcputm;\t\t\t/* 0x0028 */\n-\t__u64\tckc;\t\t\t/* 0x0030 */\n-\t__u64\tepoch;\t\t\t/* 0x0038 */\n-\t__u32\tsvcc;\t\t\t/* 0x0040 */\n-#define LCTL_CR0\t0x8000\n-#define LCTL_CR6\t0x0200\n-#define LCTL_CR9\t0x0040\n-#define LCTL_CR10\t0x0020\n-#define LCTL_CR11\t0x0010\n-#define LCTL_CR14\t0x0002\n-\t__u16\tlctl;\t\t\t/* 0x0044 */\n-\t__s16\ticpua;\t\t\t/* 0x0046 */\n-#define ICTL_OPEREXC\t0x80000000\n-#define ICTL_PINT\t0x20000000\n-#define ICTL_LPSW\t0x00400000\n-#define ICTL_STCTL\t0x00040000\n-#define ICTL_ISKE\t0x00004000\n-#define ICTL_SSKE\t0x00002000\n-#define ICTL_RRBE\t0x00001000\n-#define ICTL_TPROT\t0x00000200\n-\t__u32\tictl;\t\t\t/* 0x0048 */\n-#define ECA_CEI\t\t0x80000000\n-#define ECA_IB\t\t0x40000000\n-#define ECA_SIGPI\t0x10000000\n-#define ECA_MVPGI\t0x01000000\n-#define ECA_AIV\t\t0x00200000\n-#define ECA_VX\t\t0x00020000\n-#define ECA_PROTEXCI\t0x00002000\n-#define ECA_APIE\t0x00000008\n-#define ECA_SII\t\t0x00000001\n-\t__u32\teca;\t\t\t/* 0x004c */\n-#define ICPT_INST\t0x04\n-#define ICPT_PROGI\t0x08\n-#define ICPT_INSTPROGI\t0x0C\n-#define ICPT_EXTREQ\t0x10\n-#define ICPT_EXTINT\t0x14\n-#define ICPT_IOREQ\t0x18\n-#define ICPT_WAIT\t0x1c\n-#define ICPT_VALIDITY\t0x20\n-#define ICPT_STOP\t0x28\n-#define ICPT_OPEREXC\t0x2C\n-#define ICPT_PARTEXEC\t0x38\n-#define ICPT_IOINST\t0x40\n-#define ICPT_KSS\t0x5c\n-#define ICPT_MCHKREQ\t0x60\n-#define ICPT_INT_ENABLE\t0x64\n-#define ICPT_PV_INSTR\t0x68\n-#define ICPT_PV_NOTIFY\t0x6c\n-#define ICPT_PV_PREF\t0x70\n-\t__u8\ticptcode;\t\t/* 0x0050 */\n-\t__u8\ticptstatus;\t\t/* 0x0051 */\n-\t__u16\tihcpu;\t\t\t/* 0x0052 */\n-\t__u8\treserved54;\t\t/* 0x0054 */\n-#define IICTL_CODE_NONE\t\t 0x00\n-#define IICTL_CODE_MCHK\t\t 0x01\n-#define IICTL_CODE_EXT\t\t 0x02\n-#define IICTL_CODE_IO\t\t 0x03\n-#define IICTL_CODE_RESTART\t 0x04\n-#define IICTL_CODE_SPECIFICATION 0x10\n-#define IICTL_CODE_OPERAND\t 0x11\n-\t__u8\tiictl;\t\t\t/* 0x0055 */\n-\t__u16\tipa;\t\t\t/* 0x0056 */\n-\t__u32\tipb;\t\t\t/* 0x0058 */\n-\t__u32\tscaoh;\t\t\t/* 0x005c */\n-#define FPF_BPBC\t0x20\n-\t__u8\tfpf;\t\t\t/* 0x0060 */\n-#define ECB_GS\t\t0x40\n-#define ECB_TE\t\t0x10\n-#define ECB_SPECI\t0x08\n-#define ECB_SRSI\t0x04\n-#define ECB_HOSTPROTINT\t0x02\n-#define ECB_PTF\t\t0x01\n-\t__u8\tecb;\t\t\t/* 0x0061 */\n-#define ECB2_CMMA\t0x80\n-#define ECB2_IEP\t0x20\n-#define ECB2_PFMFI\t0x08\n-#define ECB2_ESCA\t0x04\n-#define ECB2_ZPCI_LSI\t0x02\n-\t__u8\tecb2;\t\t\t/* 0x0062 */\n-#define ECB3_AISI\t0x20\n-#define ECB3_AISII\t0x10\n-#define ECB3_DEA 0x08\n-#define ECB3_AES 0x04\n-#define ECB3_RI  0x01\n-\t__u8\tecb3;\t\t\t/* 0x0063 */\n-#define ESCA_SCAOL_MASK ~0x3fU\n-\t__u32\tscaol;\t\t\t/* 0x0064 */\n-\t__u8\tsdf;\t\t\t/* 0x0068 */\n-\t__u8\tepdx;\t\t\t/* 0x0069 */\n-\t__u8\tcpnc;\t\t\t/* 0x006a */\n-\t__u8\treserved6b;\t\t/* 0x006b */\n-\t__u32\ttodpr;\t\t\t/* 0x006c */\n-#define GISA_FORMAT1 0x00000001\n-\t__u32\tgd;\t\t\t/* 0x0070 */\n-\t__u8\treserved74[12];\t\t/* 0x0074 */\n-\t__u64\tmso;\t\t\t/* 0x0080 */\n-\t__u64\tmsl;\t\t\t/* 0x0088 */\n-\tpsw_t\tgpsw;\t\t\t/* 0x0090 */\n-\t__u64\tgg14;\t\t\t/* 0x00a0 */\n-\t__u64\tgg15;\t\t\t/* 0x00a8 */\n-\t__u8\treservedb0[8];\t\t/* 0x00b0 */\n-#define HPID_KVM\t0x4\n-#define HPID_VSIE\t0x5\n-\t__u8\thpid;\t\t\t/* 0x00b8 */\n-\t__u8\treservedb9[7];\t\t/* 0x00b9 */\n-\tunion {\n-\t\tstruct {\n-\t\t\t__u32\teiparams;\t/* 0x00c0 */\n-\t\t\t__u16\textcpuaddr;\t/* 0x00c4 */\n-\t\t\t__u16\teic;\t\t/* 0x00c6 */\n-\t\t};\n-\t\t__u64\tmcic;\t\t\t/* 0x00c0 */\n-\t} __packed;\n-\t__u32\treservedc8;\t\t/* 0x00c8 */\n-\tunion {\n-\t\tstruct {\n-\t\t\t__u16\tpgmilc;\t\t/* 0x00cc */\n-\t\t\t__u16\tiprcc;\t\t/* 0x00ce */\n-\t\t};\n-\t\t__u32\tedc;\t\t\t/* 0x00cc */\n-\t} __packed;\n-\tunion {\n-\t\tstruct {\n-\t\t\t__u32\tdxc;\t\t/* 0x00d0 */\n-\t\t\t__u16\tmcn;\t\t/* 0x00d4 */\n-\t\t\t__u8\tperc;\t\t/* 0x00d6 */\n-\t\t\t__u8\tperatmid;\t/* 0x00d7 */\n-\t\t};\n-\t\t__u64\tfaddr;\t\t\t/* 0x00d0 */\n-\t} __packed;\n-\t__u64\tperaddr;\t\t/* 0x00d8 */\n-\t__u8\teai;\t\t\t/* 0x00e0 */\n-\t__u8\tperaid;\t\t\t/* 0x00e1 */\n-\t__u8\toai;\t\t\t/* 0x00e2 */\n-\t__u8\tarmid;\t\t\t/* 0x00e3 */\n-\t__u8\treservede4[4];\t\t/* 0x00e4 */\n-\tunion {\n-\t\t__u64\ttecmc;\t\t/* 0x00e8 */\n-\t\tstruct {\n-\t\t\t__u16\tsubchannel_id;\t/* 0x00e8 */\n-\t\t\t__u16\tsubchannel_nr;\t/* 0x00ea */\n-\t\t\t__u32\tio_int_parm;\t/* 0x00ec */\n-\t\t\t__u32\tio_int_word;\t/* 0x00f0 */\n-\t\t};\n-\t} __packed;\n-\t__u8\treservedf4[8];\t\t/* 0x00f4 */\n-#define CRYCB_FORMAT_MASK 0x00000003\n-#define CRYCB_FORMAT0 0x00000000\n-#define CRYCB_FORMAT1 0x00000001\n-#define CRYCB_FORMAT2 0x00000003\n-\t__u32\tcrycbd;\t\t\t/* 0x00fc */\n-\t__u64\tgcr[16];\t\t/* 0x0100 */\n-\tunion {\n-\t\t__u64\tgbea;\t\t/* 0x0180 */\n-\t\t__u64\tsidad;\n-\t};\n-\t__u8\treserved188[8];\t\t/* 0x0188 */\n-\t__u64\tsdnxo;\t\t\t/* 0x0190 */\n-\t__u8\treserved198[8];\t\t/* 0x0198 */\n-\t__u32\tfac;\t\t\t/* 0x01a0 */\n-\t__u8\treserved1a4[20];\t/* 0x01a4 */\n-\t__u64\tcbrlo;\t\t\t/* 0x01b8 */\n-\t__u8\treserved1c0[8];\t\t/* 0x01c0 */\n-#define ECD_HOSTREGMGMT\t0x20000000\n-#define ECD_MEF\t\t0x08000000\n-#define ECD_ETOKENF\t0x02000000\n-#define ECD_ECC\t\t0x00200000\n-#define ECD_HMAC\t0x00004000\n-\t__u32\tecd;\t\t\t/* 0x01c8 */\n-\t__u8\treserved1cc[18];\t/* 0x01cc */\n-\t__u64\tpp;\t\t\t/* 0x01de */\n-\t__u8\treserved1e6[2];\t\t/* 0x01e6 */\n-\t__u64\titdba;\t\t\t/* 0x01e8 */\n-\t__u64\triccbd;\t\t\t/* 0x01f0 */\n-\t__u64\tgvrd;\t\t\t/* 0x01f8 */\n-} __packed __aligned(512);\n-\n-struct kvm_s390_itdb {\n-\t__u8\tdata[256];\n-};\n-\n-struct sie_page {\n-\tstruct kvm_s390_sie_block sie_block;\n-\tstruct mcck_volatile_info mcck_info;\t/* 0x0200 */\n-\t__u8 reserved218[360];\t\t/* 0x0218 */\n-\t__u64 pv_grregs[16];\t\t/* 0x0380 */\n-\t__u8 reserved400[512];\t\t/* 0x0400 */\n-\tstruct kvm_s390_itdb itdb;\t/* 0x0600 */\n-\t__u8 reserved700[2304];\t\t/* 0x0700 */\n-};\n-\n-#endif /* _ASM_KVM_HOST_TYPES_H */\n+#endif /* ASM_KVM_HOST_TYPES_H */\ndiff --git a/arch/s390/include/asm/sae.h b/arch/s390/include/asm/sae.h\nnew file mode 100644\nindex 0000000000000..fe010a1a77297\n--- /dev/null\n+++ b/arch/s390/include/asm/sae.h\n@@ -0,0 +1,56 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+#ifndef __ASM_S390_SAE_H\n+#define __ASM_S390_SAE_H\n+\n+#include \"linux/linkage.h\"\n+#include \u003clinux/types.h\u003e\n+\n+/* defined in arch/s390/kernel/entry.S */\n+asmlinkage int __sae64a(phys_addr_t sae_block_phys);\n+\n+#ifndef __ASSEMBLER__\n+#include \u003clinux/io.h\u003e\n+#include \u003casm/kvm_host_arm64_types.h\u003e\n+\n+/**\n+ * __sae64a() - Start Arm Execution\n+ */\n+static inline void sae64a(struct kvm_sae_block *sae_block)\n+{\n+\t__sae64a(virt_to_phys(sae_block));\n+}\n+\n+/**\n+ * stiasrm() - STore and Invalidate Arm System Register Multiple\n+ * @save_area: Pointer to SAE save area\n+ *\n+ * Store the guest system register to the save area.\n+ * The values in the guest are not valid anymore..\n+ */\n+static __always_inline void stiasrm(struct kvm_sae_save_area *save_area)\n+{\n+\tasm volatile(\n+\t\t\"\t.insn\trre,0xb9a70000,%[r1],0\\n\"\n+\t\t: \"+m\"(*save_area)\n+\t\t: [r1] \"a\"(save_area)\n+\t);\n+}\n+\n+/**\n+ * lasrm() - Load Arm System Register Multiple\n+ *\n+ * @save_area: Pointer to SAE save area\n+ *\n+ * Load the system registers from save_area into the guest.\n+ */\n+static __always_inline void lasrm(struct kvm_sae_save_area *save_area)\n+{\n+\tasm volatile(\n+\t\t\"\t.insn\trre,0xb9a60000,%[r1],0\\n\"\n+\t\t:\n+\t\t: \"m\"(*save_area), [r1] \"a\"(save_area)\n+\t);\n+}\n+\n+#endif /* !__ASSEMBLER__ */\n+#endif /* __ASM_S390_SAE_H */\ndiff --git a/arch/s390/include/asm/sclp.h b/arch/s390/include/asm/sclp.h\nindex f2d4905580543..f669569cf78df 100644\n--- a/arch/s390/include/asm/sclp.h\n+++ b/arch/s390/include/asm/sclp.h\n@@ -53,7 +53,9 @@ struct sclp_core_entry {\n \tu8 siif : 1;\n \tu8 sigpif : 1;\n \tu8 : 3;\n-\tu8 reserved2[3];\n+\tu8 aef: 1;\n+\tu8 : 7;\n+\tu8 reserved2[2];\n \tu8 : 2;\n \tu8 ib : 1;\n \tu8 cei : 1;\n@@ -106,6 +108,7 @@ struct sclp_info {\n \tunsigned char has_aeni : 1;\n \tunsigned char has_aisi : 1;\n \tunsigned char has_astfleie2 : 1;\n+\tunsigned char has_aef : 1;\n \tunsigned int ibc;\n \tunsigned int mtid;\n \tunsigned int mtid_cp;\ndiff --git a/arch/s390/include/asm/stacktrace.h b/arch/s390/include/asm/stacktrace.h\nindex ac3606c3babe4..2d332d7c81459 100644\n--- a/arch/s390/include/asm/stacktrace.h\n+++ b/arch/s390/include/asm/stacktrace.h\n@@ -59,6 +59,7 @@ static inline bool on_stack(struct stack_info *info,\n struct stack_frame {\n \tunion {\n \t\tunsigned long empty[9];\n+\t\t/* SIE stack frame */\n \t\tstruct {\n \t\t\tunsigned long sie_control_block;\n \t\t\tunsigned long sie_savearea;\n@@ -68,6 +69,10 @@ struct stack_frame {\n \t\t\tunsigned long sie_guest_asce;\n \t\t\tunsigned long sie_irq;\n \t\t};\n+\t\t/* SAE stack frame */\n+\t\tstruct {\n+\t\t\tunsigned long sae_bear;\n+\t\t};\n \t};\n \tunsigned long gprs[10];\n \tunsigned long back_chain;\ndiff --git a/arch/s390/kernel/asm-offsets.c b/arch/s390/kernel/asm-offsets.c\nindex f6dd2b67dcee7..f9f9c2246074f 100644\n--- a/arch/s390/kernel/asm-offsets.c\n+++ b/arch/s390/kernel/asm-offsets.c\n@@ -70,6 +70,7 @@ int main(void)\n \tOFFSET(__SF_SIE_CONTROL_PHYS, stack_frame, sie_control_block_phys);\n \tOFFSET(__SF_SIE_GUEST_ASCE, stack_frame, sie_guest_asce);\n \tOFFSET(__SF_SIE_IRQ, stack_frame, sie_irq);\n+\tOFFSET(__SF_SAE_BEAR, stack_frame, sae_bear);\n \tDEFINE(STACK_FRAME_OVERHEAD, sizeof(struct stack_frame));\n \tBLANK();\n \tOFFSET(__SFUSER_BACKCHAIN, stack_frame_user, back_chain);\ndiff --git a/arch/s390/kernel/early.c b/arch/s390/kernel/early.c\nindex b27239c03d799..464f8918d447f 100644\n--- a/arch/s390/kernel/early.c\n+++ b/arch/s390/kernel/early.c\n@@ -57,7 +57,7 @@ decompressor_handled_param(cmma);\n decompressor_handled_param(relocate_lowcore);\n decompressor_handled_param(bootdebug);\n __decompressor_handled_param(debug_alternative, debug-alternative);\n-#if IS_ENABLED(CONFIG_KVM)\n+#if IS_ENABLED(CONFIG_KVM_S390)\n decompressor_handled_param(prot_virt);\n #endif\n \ndiff --git a/arch/s390/kernel/entry.S b/arch/s390/kernel/entry.S\nindex 79a45efae23d0..4e5b499b3540f 100644\n--- a/arch/s390/kernel/entry.S\n+++ b/arch/s390/kernel/entry.S\n@@ -113,7 +113,7 @@ _LPP_OFFSET\t= __LC_LPP\n \t\t    \"jnz .+8; .insn rrf,0xb2e80000,0,0,13,0\", ALT_SPEC(82)\n \t.endm\n \n-#if IS_ENABLED(CONFIG_KVM)\n+#if IS_ENABLED(CONFIG_KVM_S390)\n \t.macro SIEEXIT sie_control,lowcore\n \tlg\t%r9,\\sie_control\t\t\t# get control block pointer\n \tni\t__SIE_PROG0C+3(%r9),0xfe\t\t# no longer in SIE\n@@ -184,7 +184,7 @@ EXPORT_SYMBOL(__WARN_trap)\n \n #endif /* CONFIG_BUG \u0026\u0026 CONFIG_CC_HAS_ASM_IMMEDIATE_STRINGS */\n \n-#if IS_ENABLED(CONFIG_KVM)\n+#if IS_ENABLED(CONFIG_KVM_S390)\n /*\n  * __sie64a calling convention:\n  * %r2 pointer to sie control block phys\n@@ -244,6 +244,28 @@ EXPORT_SYMBOL(__sie64a)\n EXPORT_SYMBOL(sie_exit)\n #endif\n \n+#if IS_ENABLED(CONFIG_KVM_ARM64)\n+/*\n+ * __sae64a calling convention:\n+ * %r2 pointer to sae control block physical address\n+ */\n+SYM_FUNC_START(__sae64a)\n+\tstmg\t%r6,%r14,__SF_GPRS(%r15)\t# store kernel registers\n+\tSTBEAR\t__SF_SAE_BEAR(%r15)\t\t# save breaking event address register\n+\t.insn\trre,0xb9a50000,%r2,0\t\t# Start Arm Execution\n+\tLBEAR\t__SF_SAE_BEAR(%r15)\t\t# restore breaking event address register\n+\tlmg\t%r6,%r14,__SF_GPRS(%r15)\t# restore kernel registers\n+\txgr\t%r0,%r0\t\t\t\t# clear guest registers to\n+\txgr\t%r1,%r1\t\t\t\t# prevent speculative use\n+\txgr\t%r3,%r3\n+\txgr\t%r2,%r2\n+\txgr\t%r4,%r4\n+\txgr\t%r5,%r5\n+\tBR_EX\t%r14\n+SYM_FUNC_END(__sae64a)\n+EXPORT_SYMBOL(__sae64a)\n+#endif\n+\n /*\n  * SVC interrupt handler routine. System calls are synchronous events and\n  * are entered with interrupts disabled.\n@@ -315,7 +337,7 @@ SYM_CODE_START(pgm_check_handler)\n \txgr\t%r10,%r10\n \ttmhh\t%r8,0x0001\t\t# coming from user space?\n \tjo\t3f\t\t\t# -\u003e fault in user space\n-#if IS_ENABLED(CONFIG_KVM)\n+#if IS_ENABLED(CONFIG_KVM_S390)\n \tlg\t%r11,__LC_CURRENT(%r13)\n \ttm\t__TI_sie(%r11),0xff\n \tjz\t1f\n@@ -397,7 +419,7 @@ SYM_CODE_START(\\name)\n \tlmg\t%r8,%r9,\\lc_old_psw(%r13)\n \ttmhh\t%r8,0x0001\t\t\t# interrupting from user ?\n \tjnz\t1f\n-#if IS_ENABLED(CONFIG_KVM)\n+#if IS_ENABLED(CONFIG_KVM_S390)\n \tlg\t%r10,__LC_CURRENT(%r13)\n \ttm\t__TI_sie(%r10),0xff\n \tjz\t0f\n@@ -475,7 +497,7 @@ SYM_CODE_START(mcck_int_handler)\n \tjnz\t.Lmcck_user\n \tTSTMSK\t__LC_MCCK_CODE(%r13),MCCK_CODE_PSW_IA_VALID\n \tjno\t.Lmcck_panic\n-#if IS_ENABLED(CONFIG_KVM)\n+#if IS_ENABLED(CONFIG_KVM_S390)\n \tlg\t%r10,__LC_CURRENT(%r13)\n \ttm\t__TI_sie(%r10),0xff\n \tjz\t.Lmcck_user\ndiff --git a/arch/s390/kernel/perf_event.c b/arch/s390/kernel/perf_event.c\nindex 606750bae508d..6441746b8e720 100644\n--- a/arch/s390/kernel/perf_event.c\n+++ b/arch/s390/kernel/perf_event.c\n@@ -37,7 +37,7 @@ static bool is_in_guest(struct pt_regs *regs)\n {\n \tif (user_mode(regs))\n \t\treturn false;\n-#if IS_ENABLED(CONFIG_KVM)\n+#if IS_ENABLED(CONFIG_KVM_S390)\n \treturn instruction_pointer(regs) == (unsigned long) \u0026sie_exit;\n #else\n \treturn false;\ndiff --git a/arch/s390/kernel/processor.c b/arch/s390/kernel/processor.c\nindex e33a3eccda568..6da55a158027e 100644\n--- a/arch/s390/kernel/processor.c\n+++ b/arch/s390/kernel/processor.c\n@@ -150,6 +150,7 @@ static void show_cpu_summary(struct seq_file *m, void *v)\n \t\t[HWCAP_NR_NNPA]\t\t= \"nnpa\",\n \t\t[HWCAP_NR_PCI_MIO]\t= \"pcimio\",\n \t\t[HWCAP_NR_SIE]\t\t= \"sie\",\n+\t\t[HWCAP_NR_SAE]\t\t= \"sae\",\n \t};\n \tint i, cpu;\n \n@@ -254,6 +255,8 @@ static int __init setup_hwcaps(void)\n \t/* virtualization support */\n \tif (sclp.has_sief2)\n \t\telf_hwcap |= HWCAP_SIE;\n+\tif (sclp.has_aef)\n+\t\telf_hwcap |= HWCAP_SAE;\n \n \treturn 0;\n }\ndiff --git a/arch/s390/kvm/Kconfig b/arch/s390/kvm/Kconfig\nindex 8d3ee17a1bcbc..bbae58aa8bc46 100644\n--- a/arch/s390/kvm/Kconfig\n+++ b/arch/s390/kvm/Kconfig\n@@ -17,40 +17,9 @@ menuconfig VIRTUALIZATION\n if VIRTUALIZATION\n \n config KVM\n-\tdef_tristate y\n-\tprompt \"Kernel-based Virtual Machine (KVM) support\"\n-\tselect HAVE_KVM_CPU_RELAX_INTERCEPT\n-\tselect KVM_ASYNC_PF\n-\tselect KVM_ASYNC_PF_SYNC\n-\tselect KVM_COMMON\n-\tselect HAVE_KVM_IRQCHIP\n-\tselect HAVE_KVM_IRQ_ROUTING\n-\tselect HAVE_KVM_INVALID_WAKEUPS\n-\tselect HAVE_KVM_NO_POLL\n-\tselect KVM_VFIO\n-\tselect VIRT_XFER_TO_GUEST_WORK\n-\tselect KVM_MMU_LOCKLESS_AGING\n-\tselect KVM_GENERIC_PRE_FAULT_MEMORY\n-\thelp\n-\t  Support hosting paravirtualized guest machines using the SIE\n-\t  virtualization capability on the mainframe. This should work\n-\t  on any 64bit machine.\n-\n-\t  This module provides access to the hardware capabilities through\n-\t  a character device node named /dev/kvm.\n-\n-\t  To compile this as a module, choose M here: the module\n-\t  will be called kvm.\n-\n-\t  If unsure, say N.\n-\n-config KVM_S390_UCONTROL\n-\tbool \"Userspace controlled virtual machines\"\n-\tdepends on KVM\n-\thelp\n-\t  Allow CAP_SYS_ADMIN users to create KVM virtual machines that are\n-\t  controlled by userspace.\n+\ttristate\n \n-\t  If unsure, say N.\n+source \"arch/s390/kvm/s390/Kconfig\"\n+source \"arch/s390/kvm/arm64/Kconfig\"\n \n endif # VIRTUALIZATION\ndiff --git a/arch/s390/kvm/Makefile b/arch/s390/kvm/Makefile\nindex dac9d53b23d8b..38bdd7c9b42d2 100644\n--- a/arch/s390/kvm/Makefile\n+++ b/arch/s390/kvm/Makefile\n@@ -3,13 +3,5 @@\n #\n # Copyright IBM Corp. 2008\n \n-include $(srctree)/virt/kvm/Makefile.kvm\n-\n-ccflags-y := -Ivirt/kvm -Iarch/s390/kvm\n-\n-kvm-y += kvm-s390.o intercept.o interrupt.o priv.o sigp.o\n-kvm-y += diag.o gaccess.o guestdbg.o vsie.o pv.o\n-kvm-y += dat.o gmap.o faultin.o\n-\n-kvm-$(CONFIG_VFIO_PCI_ZDEV_KVM) += pci.o\n-obj-$(CONFIG_KVM) += kvm.o\n+obj-$(CONFIG_KVM_S390) += s390/\n+obj-$(CONFIG_KVM_ARM64) += arm64/\ndiff --git a/arch/s390/kvm/arm64/.gitignore b/arch/s390/kvm/arm64/.gitignore\nnew file mode 100644\nindex 0000000000000..bd9d90694676d\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/.gitignore\n@@ -0,0 +1,2 @@\n+# SPDX-License-Identifier: GPL-2.0-only\n+generated/*\ndiff --git a/arch/s390/kvm/arm64/Kconfig b/arch/s390/kvm/arm64/Kconfig\nnew file mode 100644\nindex 0000000000000..15de7c52c8618\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/Kconfig\n@@ -0,0 +1,22 @@\n+# SPDX-License-Identifier: GPL-2.0\n+\n+config KVM_ARM64\n+\tdef_tristate y\n+\tprompt \"Kernel-based Virtual Machine (KVM) support for arm64 guests\"\n+\tdepends on HAS_IOMEM\n+\tselect KVM\n+\tselect GUEST_PERF_EVENTS if PERF_EVENTS\n+\tselect HAVE_KVM_CPU_RELAX_INTERCEPT\n+\tselect HAVE_KVM_IRQCHIP\n+\tselect HAVE_KVM_MSI\n+\tselect HAVE_KVM_VCPU_RUN_PID_CHANGE\n+\tselect IRQ_BYPASS_MANAGER\n+\tselect KVM_COMMON\n+\tselect KVM_MMIO\n+\tselect KVM_VFIO\n+\tselect SCHED_INFO\n+\tselect XARRAY_MULTI\n+\thelp\n+\t  Support hosting virtualized arm64 guest machines on s390 host machines.\n+\n+\t  If unsure, say N.\ndiff --git a/arch/s390/kvm/arm64/Makefile b/arch/s390/kvm/arm64/Makefile\nnew file mode 100644\nindex 0000000000000..a102c35664cae\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/Makefile\n@@ -0,0 +1,91 @@\n+# SPDX-License-Identifier: GPL-2.0\n+\n+KVM := ../../../../virt/kvm\n+include $(srctree)/virt/kvm/Makefile.kvm\n+KVM_MANAGES_S390_GUEST = n\n+include $(srctree)/arch/s390/kvm/gmap/Makefile\n+include $(src)/Makefile.gen\n+\n+ccflags-y += -I $(src) -I $(objtree)/$(obj) -I$(srctree)/arch/s390/kvm/gmap -DKVM_S390_ARM64\n+\n+kvm-arm64-obj := \\\n+\tarm.o \\\n+\tguest.o \\\n+\thandle_exit.o \\\n+\tinject_fault.o \\\n+\tmmu.o \\\n+\tmmio.o \\\n+\treset.o \\\n+\n+kvm-arm64-obj += $(patsubst %.o,%-arm64.o,$(kvm-y))\n+\n+targets += $(kvm-arm64-obj)\n+\n+$(obj)/%-arm64.o: $(src)/%.c FORCE\n+\t@mkdir -p $(dir $@)\n+\t$(call if_changed_rule,cc_o_c)\n+\n+ifeq ($(CONFIG_KVM_ARM64),m)\n+\n+kvm-arm64-y = $(kvm-arm64-obj)\n+\n+else ifeq ($(CONFIG_KVM_ARM64),y)\n+\n+KVM_ARM64_GEN_DIR := $(objtree)/arch/${SRCARCH}/include/generated/asm\n+KVM_ARM64_MODNAME_H := $(KVM_ARM64_GEN_DIR)/kvm_arm64_modname.h\n+ccflags-y += -include $(KVM_ARM64_MODNAME_H)\n+\n+targets += $(KVM_ARM64_MODNAME_H)\n+\n+quiet_cmd_kvm_arm64_modname_h = GEN     $@\n+      cmd_kvm_arm64_modname_h = { \\\n+\techo '/* Automatically generated; do not edit. */'; \\\n+\techo '\\#ifndef _KVM_ARM64_MODNAME_H'; \\\n+\techo '\\#define _KVM_ARM64_MODNAME_H'; \\\n+\techo '\\#undef KBUILD_MODNAME'; \\\n+\techo '\\#define KBUILD_MODNAME \"kvm_arm64\"'; \\\n+\techo '\\#endif /* _KVM_ARM64_MODNAME_H */'; \\\n+\t} \u003e $@\n+\n+$(addprefix $(obj)/,$(kvm-arm64-obj)): $(KVM_ARM64_MODNAME_H)\n+\n+$(KVM_ARM64_MODNAME_H):\n+\t@mkdir -p $(KVM_ARM64_GEN_DIR)\n+\t$(call cmd,kvm_arm64_modname_h)\n+\n+prereq-o-cmd = $(foreach o, $(filter %.o, $^), $(dir $(o)).$(notdir $(o)).cmd)\n+cmd_gen_symversions_o = \\\n+\tgrep --no-filename \"^\\#SYMVER\" $(prereq-o-cmd) \u003e\u003e $(dot-target).cmd || true\n+\n+define rule_ld_o_o\n+\t$(call cmd_and_savecmd,ld)\n+\t$(call cmd,gen_symversions_o)\n+endef\n+\n+LDFLAGS_kvm-unnamespaced.o := -r --whole-archive\n+$(obj)/kvm-unnamespaced.o: $(addprefix $(obj)/,$(kvm-arm64-obj)) FORCE\n+\t$(call if_changed_rule,ld_o_o)\n+\n+quiet_cmd_nm_filter = NMFLTR  $@\n+\tcmd_nm_filter = $(NM) -jU $\u003c | sort -u \u003e $@\n+\n+$(obj)/kvm_symbol_list: $(obj)/kvm-unnamespaced.o FORCE\n+\t$(call if_changed,nm_filter)\n+\n+define rule_oc_o_o\n+\t$(call cmd_and_savecmd,objcopy)\n+\t$(call cmd,gen_objtooldep)\n+\t$(call cmd,gen_symversions_o)\n+endef\n+\n+OBJCOPYFLAGS_kvm-namespaced.o := -O default --localize-symbols=$(obj)/kvm_symbol_list\n+$(obj)/kvm-namespaced.o: $(obj)/kvm-unnamespaced.o $(obj)/kvm_symbol_list FORCE\n+\t$(call if_changed_rule,oc_o_o)\n+\n+kvm-arm64-y = kvm-namespaced.o\n+\n+targets += kvm-unnamespaced.o kvm_symbol_list kvm-namespaced.o\n+\n+endif\n+\n+obj-$(CONFIG_KVM_ARM64) += kvm-arm64.o\ndiff --git a/arch/s390/kvm/arm64/Makefile.gen b/arch/s390/kvm/arm64/Makefile.gen\nnew file mode 100644\nindex 0000000000000..13a6ba44dce8c\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/Makefile.gen\n@@ -0,0 +1,30 @@\n+# SPDX-License-Identifier: GPL-2.0\n+#\n+# Extracts ARM64 marked sections to .inc files that are included by main source\n+# files\n+\n+# List of ARM64 C files to extract\n+ARM64_CFILES := \\\n+\tarm.c \\\n+\tguest.c \\\n+\treset.c \\\n+\thandle_exit.c \\\n+\tmmio.c \\\n+\n+quiet_cmd_extract_inc = GEN     $@\n+      cmd_extract_inc = mkdir -p $(dir $@); \\\n+                        $(AWK) -f $(src)/copy-arm64c.awk $\u003c \u003e $@ || \\\n+                        { echo \"Error: No or unbalanced ARM64_S390_COMMON markers in $\u003c\" \u003e\u00262; rm -f $@; exit 1; }\n+\n+$(obj)/generated/%.inc: $(srctree)/arch/arm64/kvm/%.c $(src)/copy-arm64c.awk FORCE\n+\t$(call if_changed,extract_inc)\n+\n+ARM64_INC_FILES := $(foreach cfile,$(ARM64_CFILES),generated/$(basename $(cfile)).inc)\n+\n+targets += $(ARM64_INC_FILES)\n+clean-files += generated/*.inc\n+\n+$(addprefix $(obj)/,$(kvm-arm64-obj)): $(addprefix $(obj)/,$(ARM64_INC_FILES))\n+\n+$(foreach cfile,$(basename $(ARM64_CFILES)),\\\n+\t$(eval $(obj)/$(cfile).o: $(obj)/generated/$(cfile).inc))\ndiff --git a/arch/s390/kvm/arm64/arm.c b/arch/s390/kvm/arm64/arm.c\nnew file mode 100644\nindex 0000000000000..7b65e2f4ab3ed\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/arm.c\n@@ -0,0 +1,744 @@\n+// SPDX-License-Identifier: GPL-2.0\n+\n+#define KMSG_COMPONENT \"kvm-s390-arm64\"\n+#define pr_fmt(fmt) KMSG_COMPONENT \": \" fmt\n+\n+#include \u003clinux/miscdevice.h\u003e\n+#include \u003clinux/kvm.h\u003e\n+#include \u003clinux/kvm_types.h\u003e\n+#include \u003clinux/kvm_host.h\u003e\n+#include \"linux/cleanup.h\"\n+#include \u003clinux/fpu.h\u003e\n+\n+#include \u003casm/access-regs.h\u003e\n+\n+#include \u003carm64/kvm_emulate.h\u003e\n+#include \u003carm64/sysreg.h\u003e\n+\n+#include \u003cgmap.h\u003e\n+#include \u003ckvm_mmu.h\u003e\n+\n+#include \"arm.h\"\n+#include \"handle_exit.h\"\n+#include \"reset.h\"\n+\n+#define CREATE_TRACE_POINTS\n+#include \"trace.h\"\n+\n+static unsigned long system_supported_vcpu_features(void);\n+\n+#define __INCL_GEN_ARM_FILE\n+#include \"generated/arm.inc\"\n+#undef __INCL_GEN_ARM_FILE\n+\n+#define KVM_PHYS_SHIFT (40)\n+\n+int kvm_vm_ioctl_check_extension(struct kvm *kvm, long ext)\n+{\n+\tint ret;\n+\n+\tswitch (ext) {\n+\tcase KVM_CAP_NR_VCPUS:\n+\tcase KVM_CAP_MAX_VCPUS:\n+\tcase KVM_CAP_MAX_VCPU_ID:\n+\t\tret = KVM_MAX_VCPUS;\n+\t\tbreak;\n+\tcase KVM_CAP_ARM_VM_IPA_SIZE:\n+\t\tret = get_kvm_ipa_limit();\n+\t\tbreak;\n+\tcase KVM_CAP_IOEVENTFD:\n+\t\tret = 1;\n+\t\tbreak;\n+\tdefault:\n+\t\tret = 0;\n+\t}\n+\n+\treturn ret;\n+}\n+\n+static u64 kvm_max_guest_address(void)\n+{\n+\tu64 max_addr;\n+\n+\tif (sclp.hamax == U64_MAX)\n+\t\tmax_addr = TASK_SIZE_MAX;\n+\telse\n+\t\tmax_addr = min_t(u64, TASK_SIZE_MAX, sclp.hamax);\n+\treturn ALIGN_DOWN(max_addr + 1, 1 \u003c\u003c 30) - 1;\n+}\n+\n+static int kvm_gmap_init(struct kvm *kvm)\n+{\n+\tstruct crst_table *table;\n+\n+\tkvm-\u003earch.gmap = gmap_new(kvm, gpa_to_gfn(kvm-\u003earch.guest_phys_size));\n+\n+\tif (!kvm-\u003earch.gmap)\n+\t\treturn -ENOMEM;\n+\n+\t/* arm64 (on s390) do not have pfault */\n+\tclear_bit(GMAP_FLAG_PFAULT_ENABLED, \u0026kvm-\u003earch.gmap-\u003eflags);\n+\tset_bit(GMAP_FLAG_ALLOW_HPAGE_1M, \u0026kvm-\u003earch.gmap-\u003eflags);\n+\n+\ttable = dereference_asce(kvm-\u003earch.gmap-\u003easce);\n+\tcrst_table_init((void *)table, _CRSTE_HOLE(table-\u003ecrstes[0].h.tt).val);\n+\n+\treturn 0;\n+}\n+\n+static int kvm_vm_type_ipa_size_shift(unsigned long type)\n+{\n+\tint phys_shift;\n+\n+\tphys_shift = KVM_VM_TYPE_ARM_IPA_SIZE(type);\n+\tif (phys_shift) {\n+\t\tif (phys_shift \u003e get_kvm_ipa_limit() ||\n+\t\t    phys_shift \u003c ARM64_MIN_PARANGE_BITS)\n+\t\t\treturn -EINVAL;\n+\t} else {\n+\t\tphys_shift = KVM_PHYS_SHIFT;\n+\t\tif (phys_shift \u003e get_kvm_ipa_limit()) {\n+\t\t\tpr_warn_once(\"%s using unsupported default IPA limit\\n\",\n+\t\t\t\t     current-\u003ecomm);\n+\t\t\treturn -EINVAL;\n+\t\t}\n+\t}\n+\n+\treturn phys_shift;\n+}\n+\n+int kvm_arch_init_vm(struct kvm *kvm, unsigned long type)\n+{\n+\tchar debug_name[32];\n+\tint ret;\n+\n+\tif (type \u0026 ~KVM_VM_TYPE_ARM_IPA_SIZE_MASK)\n+\t\treturn -EINVAL;\n+\n+\tret = kvm_vm_type_ipa_size_shift(type);\n+\tif (ret \u003c 0)\n+\t\treturn ret;\n+\tkvm-\u003earch.guest_phys_size = 1UL \u003c\u003c ret;\n+\n+\tmutex_init(\u0026kvm-\u003earch.config_lock);\n+\tbitmap_zero(kvm-\u003earch.vcpu_features, KVM_VCPU_MAX_FEATURES);\n+\n+\tsnprintf(debug_name, sizeof(debug_name), \"kvm-arm64-%u-%u\",\n+\t\t current-\u003epid, get_random_u32());\n+\tkvm-\u003earch.dbf = debug_register(debug_name, 32, 1, 7 * sizeof(long));\n+\tif (!kvm-\u003earch.dbf)\n+\t\treturn -ENOMEM;\n+\tdebug_register_view(kvm-\u003earch.dbf, \u0026debug_sprintf_view);\n+\n+\tret = kvm_gmap_init(kvm);\n+\tif (ret)\n+\t\tgoto out_err;\n+\tkvm-\u003earch.mem_limit = kvm_max_guest_address();\n+\n+\tVM_EVENT(kvm, 3, \"vm created with type %lu\", type);\n+\treturn 0;\n+\n+out_err:\n+\tdebug_unregister(kvm-\u003earch.dbf);\n+\n+\treturn ret;\n+}\n+\n+vm_fault_t kvm_arch_vcpu_fault(struct kvm_vcpu *vcpu, struct vm_fault *vmf)\n+{\n+\treturn VM_FAULT_SIGBUS;\n+}\n+\n+long kvm_arch_dev_ioctl(struct file *filp,\n+\t\t\tunsigned int ioctl, unsigned long arg)\n+{\n+\treturn -EINVAL;\n+}\n+\n+void kvm_arch_destroy_vm(struct kvm *kvm)\n+{\n+\tkvm_destroy_vcpus(kvm);\n+\tdebug_unregister(kvm-\u003earch.dbf);\n+\tkvm-\u003earch.gmap = gmap_put(kvm-\u003earch.gmap);\n+}\n+\n+u32 get_kvm_ipa_limit(void)\n+{\n+\treturn fls64(kvm_max_guest_address() + 1) - 1;\n+}\n+\n+int kvm_arch_vcpu_precreate(struct kvm *kvm, unsigned int id)\n+{\n+\treturn 0;\n+}\n+\n+int kvm_arch_vcpu_create(struct kvm_vcpu *vcpu)\n+{\n+\tstruct kvm_sae_block *sae_block = \u0026vcpu-\u003earch.sae_block;\n+\n+\tspin_lock_init(\u0026vcpu-\u003earch.mp_state_lock);\n+\n+\t/* Force users to call KVM_ARM_VCPU_INIT */\n+\tvcpu_clear_flag(vcpu, VCPU_INITIALIZED);\n+\n+\tvcpu-\u003earch.mc = kvm_s390_new_mmu_cache();\n+\tif (!vcpu-\u003earch.mc)\n+\t\treturn -ENOMEM;\n+\n+\tsae_block-\u003ehbasce = vcpu-\u003ekvm-\u003earch.gmap-\u003easce.val;\n+\tsae_block-\u003emso = 0L;\n+\tsae_block-\u003emsl = kvm_max_guest_address();\n+\n+\tVM_EVENT(vcpu-\u003ekvm, 3,\n+\t\t \"create cpu %d at 0x%p, sae block at 0x%p, satellite at 0x%p\",\n+\t\t vcpu-\u003evcpu_id, vcpu, \u0026vcpu-\u003earch.sae_block,\n+\t\t \u0026vcpu-\u003earch.save_area);\n+\treturn 0;\n+}\n+\n+void kvm_arch_vcpu_postcreate(struct kvm_vcpu *vcpu)\n+{\n+}\n+\n+void kvm_arch_vcpu_destroy(struct kvm_vcpu *vcpu)\n+{\n+\tkvm_s390_free_mmu_cache(vcpu-\u003earch.mc);\n+\n+\tVCPU_EVENT(vcpu, 3, \"%s\", \"free cpu\");\n+}\n+\n+void kvm_arch_vcpu_load(struct kvm_vcpu *vcpu, int cpu)\n+{\n+\tsave_access_regs(\u0026vcpu-\u003earch.host_acrs[0]);\n+\tvcpu-\u003ecpu = cpu;\n+\n+\tlasrm(\u0026vcpu-\u003earch.save_area);\n+}\n+\n+void kvm_arch_vcpu_put(struct kvm_vcpu *vcpu)\n+{\n+\tstiasrm(\u0026vcpu-\u003earch.save_area);\n+\n+\tvcpu-\u003ecpu = -1;\n+\trestore_access_regs(\u0026vcpu-\u003earch.host_acrs[0]);\n+}\n+\n+int kvm_arch_vcpu_ioctl_get_mpstate(struct kvm_vcpu *vcpu,\n+\t\t\t\t    struct kvm_mp_state *mp_state)\n+{\n+\t*mp_state = READ_ONCE(vcpu-\u003earch.mp_state);\n+\treturn 0;\n+}\n+\n+int kvm_arch_vcpu_ioctl_set_mpstate(struct kvm_vcpu *vcpu,\n+\t\t\t\t    struct kvm_mp_state *mp_state)\n+{\n+\treturn -EINVAL;\n+}\n+\n+int kvm_arch_vcpu_runnable(struct kvm_vcpu *vcpu)\n+{\n+\treturn 0;\n+}\n+\n+static unsigned long system_supported_vcpu_features(void)\n+{\n+\tunsigned long features = KVM_S390_ARM64_IMPL_FEATURES;\n+\n+\treturn features;\n+}\n+\n+bool kvm_arch_vcpu_in_kernel(struct kvm_vcpu *vcpu)\n+{\n+\treturn vcpu_mode_priv(vcpu);\n+}\n+\n+int kvm_arch_vcpu_run_pid_change(struct kvm_vcpu *vcpu)\n+{\n+\tstruct kvm *kvm = vcpu-\u003ekvm;\n+\n+\tif (!kvm_vcpu_initialized(vcpu))\n+\t\treturn -ENOEXEC;\n+\n+\tif (!kvm_arm_vcpu_is_finalized(vcpu))\n+\t\treturn -EPERM;\n+\n+\tif (likely(READ_ONCE(vcpu-\u003epid)))\n+\t\treturn 0;\n+\n+\tscoped_guard(mutex, \u0026kvm-\u003earch.config_lock)\n+\t\tset_bit(KVM_ARCH_FLAG_HAS_RAN_ONCE, \u0026kvm-\u003earch.flags);\n+\n+\treturn 0;\n+}\n+\n+/**\n+ * check_vcpu_requests - check and handle pending vCPU requests\n+ * @vcpu:\tthe VCPU pointer\n+ *\n+ * Return: 1 if we should enter the guest\n+ *\t   0 if we should exit to userspace\n+ *\t   \u003c 0 if we should exit to userspace, where the return value indicates\n+ *\t   an error\n+ */\n+static int check_vcpu_requests(struct kvm_vcpu *vcpu)\n+{\n+\tif (kvm_request_pending(vcpu)) {\n+\t\tif (kvm_check_request(KVM_REQ_VCPU_RESET, vcpu))\n+\t\t\tkvm_reset_vcpu(vcpu);\n+\t\t/*\n+\t\t * Clear IRQ_PENDING requests that were made to guarantee\n+\t\t * that a VCPU sees new virtual interrupts.\n+\t\t */\n+\t\tkvm_check_request(KVM_REQ_IRQ_PENDING, vcpu);\n+\t}\n+\n+\treturn 1;\n+}\n+\n+static int kvm_vcpu_initialize(struct kvm_vcpu *vcpu,\n+\t\t\t       const struct kvm_vcpu_init *init)\n+{\n+\tunsigned long features = init-\u003efeatures[0];\n+\tstruct kvm *kvm = vcpu-\u003ekvm;\n+\n+\tscoped_guard(mutex, \u0026kvm-\u003earch.config_lock) {\n+\t\tif (test_bit(KVM_ARCH_FLAG_VCPU_FEATURES_CONFIGURED,\n+\t\t\t     \u0026kvm-\u003earch.flags) \u0026\u0026\n+\t\t    kvm_vcpu_init_changed(vcpu, init))\n+\t\t\treturn -EINVAL;\n+\n+\t\tbitmap_copy(kvm-\u003earch.vcpu_features, \u0026features,\n+\t\t\t    KVM_VCPU_MAX_FEATURES);\n+\n+\t\tkvm_reset_vcpu(vcpu);\n+\n+\t\tset_bit(KVM_ARCH_FLAG_VCPU_FEATURES_CONFIGURED,\n+\t\t\t\u0026kvm-\u003earch.flags);\n+\t\tvcpu_set_flag(vcpu, VCPU_INITIALIZED);\n+\t}\n+\n+\treturn 0;\n+}\n+\n+static int kvm_vcpu_set_target(struct kvm_vcpu *vcpu,\n+\t\t\t       const struct kvm_vcpu_init *init)\n+{\n+\tint ret;\n+\n+\tif (init-\u003etarget != KVM_ARM_TARGET_GENERIC_V8)\n+\t\treturn -EINVAL;\n+\n+\tret = kvm_vcpu_init_check_features(vcpu, init);\n+\tif (ret)\n+\t\treturn ret;\n+\n+\tif (!kvm_vcpu_initialized(vcpu))\n+\t\treturn kvm_vcpu_initialize(vcpu, init);\n+\n+\tif (kvm_vcpu_init_changed(vcpu, init))\n+\t\treturn -EINVAL;\n+\n+\tkvm_reset_vcpu(vcpu);\n+\n+\treturn 0;\n+}\n+\n+static int kvm_arch_vcpu_ioctl_vcpu_init(struct kvm_vcpu *vcpu,\n+\t\t\t\t\t struct kvm_vcpu_init *init)\n+{\n+\tstruct kvm_sae_save_area *save_area = \u0026vcpu-\u003earch.save_area;\n+\tstruct kvm_sae_block *sae_block = \u0026vcpu-\u003earch.sae_block;\n+\tint ret;\n+\n+\tsae_block-\u003esave_area = virt_to_phys(save_area);\n+\tsave_area-\u003esdo = virt_to_phys(sae_block);\n+\n+\tret = kvm_vcpu_set_target(vcpu, init);\n+\tif (ret)\n+\t\treturn ret;\n+\n+\tscoped_guard(spinlock, \u0026vcpu-\u003earch.mp_state_lock) {\n+\t\tWRITE_ONCE(vcpu-\u003earch.mp_state.mp_state, KVM_MP_STATE_RUNNABLE);\n+\t}\n+\n+\treturn 0;\n+}\n+\n+int kvm_vm_ioctl_irq_line(struct kvm *kvm, struct kvm_irq_level *irq_level,\n+\t\t\t  bool line_status)\n+{\n+\t/* stub for now*/\n+\treturn -EINVAL;\n+}\n+\n+static void adjust_pc(struct kvm_vcpu *vcpu)\n+{\n+\tif (vcpu_get_flag(vcpu, INCREMENT_PC)) {\n+\t\tkvm_skip_instr(vcpu);\n+\t\tvcpu_clear_flag(vcpu, INCREMENT_PC);\n+\t}\n+}\n+\n+static void arm_vcpu_run(struct kvm_vcpu *vcpu)\n+{\n+\tstruct kvm_sae_block *sae_block = \u0026vcpu-\u003earch.sae_block;\n+\n+\tadjust_pc(vcpu);\n+\n+\tlocal_irq_disable();\n+\tguest_enter_irqoff();\n+\tlocal_irq_enable();\n+\n+\tsae_block-\u003eicptr = 0;\n+\n+\tsae64a(sae_block);\n+\n+\tlocal_irq_disable();\n+\tguest_exit_irqoff();\n+\tlocal_irq_enable();\n+}\n+\n+/** kvm_arch_vcpu_ioctl_run() - run arm64 vCPU\n+ *\n+ * Execute arm64 guest instructions using SAE.\n+ *\n+ * Returns:\n+ * 1 enter the guest (should not be observed by userspace)\n+ * 0 exit to userspace\n+ * \u003c 0 exit to userspace, where the return value indicates n error\n+ *\n+ *\n+ */\n+int kvm_arch_vcpu_ioctl_run(struct kvm_vcpu *vcpu)\n+{\n+\tDECLARE_KERNEL_FPU_ONSTACK32(fpu_save);\n+\tstruct kvm_run *kvm_run = vcpu-\u003erun;\n+\tint ret;\n+\n+\tif (kvm_run-\u003eexit_reason == KVM_EXIT_MMIO) {\n+\t\tret = kvm_handle_mmio_return(vcpu);\n+\t\tif (ret \u003c= 0)\n+\t\t\treturn ret;\n+\t}\n+\n+\tvcpu_load(vcpu);\n+\n+\tkernel_fpu_begin(\u0026fpu_save, KERNEL_FPC | KERNEL_VXR);\n+\tload_vx_regs((vcpu-\u003earch.ctxt.vregs));\n+\n+\tif (!vcpu-\u003ewants_to_run) {\n+\t\tret = -EINTR;\n+\t\tgoto out;\n+\t}\n+\n+\tkvm_sigset_activate(vcpu);\n+\n+\tmight_fault();\n+\n+\tret = 1;\n+\tdo {\n+\t\tif (signal_pending(current)) {\n+\t\t\tkvm_run-\u003eexit_reason = KVM_EXIT_INTR;\n+\t\t\tret = -EINTR;\n+\t\t\tcontinue;\n+\t\t}\n+\n+\t\tif (need_resched())\n+\t\t\tschedule();\n+\n+\t\tif (ret \u003e 0)\n+\t\t\tret = check_vcpu_requests(vcpu);\n+\n+\t\tvcpu-\u003earch.sae_block.icptr = 0;\n+\n+\t\tarm_vcpu_run(vcpu);\n+\n+\t\tret = handle_exit(vcpu);\n+\n+\t} while (ret \u003e 0);\n+\n+\tkvm_sigset_deactivate(vcpu);\n+out:\n+\tif (unlikely(vcpu_get_flag(vcpu, INCREMENT_PC)))\n+\t\tadjust_pc(vcpu);\n+\n+\tsave_vx_regs(vcpu-\u003earch.ctxt.vregs);\n+\tkernel_fpu_end(\u0026fpu_save, KERNEL_FPC | KERNEL_VXR);\n+\tvcpu_put(vcpu);\n+\n+\treturn ret;\n+}\n+\n+static int kvm_arm_vcpu_set_attr(struct kvm_vcpu *vcpu,\n+\t\t\t\t struct kvm_device_attr *attr)\n+{\n+\tint ret;\n+\n+\tswitch (attr-\u003egroup) {\n+\tdefault:\n+\t\tret = -ENXIO;\n+\t\tbreak;\n+\t}\n+\n+\treturn ret;\n+}\n+\n+static int kvm_arm_vcpu_get_attr(struct kvm_vcpu *vcpu,\n+\t\t\t\t struct kvm_device_attr *attr)\n+{\n+\tint ret;\n+\n+\tswitch (attr-\u003egroup) {\n+\tdefault:\n+\t\tret = -ENXIO;\n+\t\tbreak;\n+\t}\n+\n+\treturn ret;\n+}\n+\n+static int kvm_arm_vcpu_has_attr(struct kvm_vcpu *vcpu,\n+\t\t\t\t struct kvm_device_attr *attr)\n+{\n+\tint ret;\n+\n+\tswitch (attr-\u003egroup) {\n+\tdefault:\n+\t\tret = -ENXIO;\n+\t\tbreak;\n+\t}\n+\n+\treturn ret;\n+}\n+\n+long kvm_arch_vcpu_ioctl(struct file *filp, unsigned int ioctl, unsigned long arg)\n+{\n+\tstruct kvm_vcpu *vcpu = filp-\u003eprivate_data;\n+\tvoid __user *argp = (void __user *)arg;\n+\tstruct kvm_device_attr attr;\n+\tint ret;\n+\n+\tswitch (ioctl) {\n+\tcase KVM_ARM_VCPU_INIT: {\n+\t\tstruct kvm_vcpu_init init;\n+\n+\t\tret = -EFAULT;\n+\t\tif (copy_from_user(\u0026init, argp, sizeof(init)))\n+\t\t\tbreak;\n+\n+\t\tret = kvm_arch_vcpu_ioctl_vcpu_init(vcpu, \u0026init);\n+\t\tbreak;\n+\t}\n+\tcase KVM_SET_ONE_REG:\n+\tcase KVM_GET_ONE_REG: {\n+\t\tstruct kvm_one_reg reg;\n+\n+\t\tret = -ENOEXEC;\n+\t\tif (unlikely(!kvm_vcpu_initialized(vcpu)))\n+\t\t\tbreak;\n+\n+\t\tret = -EFAULT;\n+\t\tif (copy_from_user(\u0026reg, argp, sizeof(reg)))\n+\t\t\tbreak;\n+\n+\t\tif (kvm_check_request(KVM_REQ_VCPU_RESET, vcpu))\n+\t\t\tkvm_reset_vcpu(vcpu);\n+\n+\t\tif (ioctl == KVM_SET_ONE_REG)\n+\t\t\tret = kvm_arm_set_reg(vcpu, \u0026reg);\n+\t\telse\n+\t\t\tret = kvm_arm_get_reg(vcpu, \u0026reg);\n+\t\tbreak;\n+\t}\n+\tcase KVM_GET_REG_LIST: {\n+\t\tstruct kvm_reg_list __user *user_list = argp;\n+\t\tstruct kvm_reg_list reg_list;\n+\t\tunsigned int n;\n+\n+\t\tret = -ENOEXEC;\n+\t\tif (unlikely(!kvm_vcpu_initialized(vcpu)))\n+\t\t\tbreak;\n+\t\tret = -EPERM;\n+\t\tif (!kvm_arm_vcpu_is_finalized(vcpu))\n+\t\t\tbreak;\n+\t\tret = -EFAULT;\n+\t\tif (copy_from_user(\u0026reg_list, user_list, sizeof(reg_list)))\n+\t\t\tbreak;\n+\t\tn = reg_list.n;\n+\t\treg_list.n = kvm_arm_num_regs(vcpu);\n+\t\tif (copy_to_user(user_list, \u0026reg_list, sizeof(reg_list)))\n+\t\t\tbreak;\n+\t\tret = -E2BIG;\n+\t\tif (n \u003c reg_list.n)\n+\t\t\tbreak;\n+\t\tret = kvm_arm_copy_reg_indices(vcpu, user_list-\u003ereg);\n+\t\tbreak;\n+\t}\n+\tcase KVM_ARM_VCPU_FINALIZE: {\n+\t\tint what;\n+\n+\t\tif (!kvm_vcpu_initialized(vcpu))\n+\t\t\treturn -ENOEXEC;\n+\n+\t\tif (get_user(what, (const int __user *)argp))\n+\t\t\treturn -EFAULT;\n+\n+\t\tret = kvm_arm_vcpu_finalize(vcpu, what);\n+\t\tbreak;\n+\t}\n+\tcase KVM_SET_DEVICE_ATTR: {\n+\t\tret = -EFAULT;\n+\t\tif (copy_from_user(\u0026attr, argp, sizeof(attr)))\n+\t\t\tbreak;\n+\t\tret = kvm_arm_vcpu_set_attr(vcpu, \u0026attr);\n+\t\tbreak;\n+\t}\n+\tcase KVM_GET_DEVICE_ATTR: {\n+\t\tret = -EFAULT;\n+\t\tif (copy_from_user(\u0026attr, argp, sizeof(attr)))\n+\t\t\tbreak;\n+\t\tret = kvm_arm_vcpu_get_attr(vcpu, \u0026attr);\n+\t\tbreak;\n+\t}\n+\tcase KVM_HAS_DEVICE_ATTR: {\n+\t\tret = -EFAULT;\n+\t\tif (copy_from_user(\u0026attr, argp, sizeof(attr)))\n+\t\t\tbreak;\n+\t\tret = kvm_arm_vcpu_has_attr(vcpu, \u0026attr);\n+\t\tbreak;\n+\t}\n+\tdefault:\n+\t\tret = -EINVAL;\n+\t}\n+\n+\treturn ret;\n+}\n+\n+int kvm_vm_ioctl_get_dirty_log(struct kvm *kvm,\n+\t\t\t       struct kvm_dirty_log *log)\n+{\n+\treturn s390_kvm_mmu_get_dirty_log(kvm, log);\n+}\n+\n+bool kvm_age_gfn(struct kvm *kvm, struct kvm_gfn_range *range)\n+{\n+\tscoped_guard(read_lock, \u0026kvm-\u003emmu_lock)\n+\t\treturn gmap_age_gfn(kvm-\u003earch.gmap, range-\u003estart, range-\u003eend);\n+}\n+\n+void kvm_arch_sync_dirty_log(struct kvm *kvm, struct kvm_memory_slot *memslot)\n+{\n+\tgfn_t last_gfn = memslot-\u003ebase_gfn + memslot-\u003enpages;\n+\n+\tscoped_guard(read_lock, \u0026kvm-\u003emmu_lock)\n+\t\tgmap_sync_dirty_log(kvm-\u003earch.gmap, memslot-\u003ebase_gfn, last_gfn);\n+}\n+\n+int kvm_arch_prepare_memory_region(struct kvm *kvm,\n+\t\t\t\t   const struct kvm_memory_slot *old,\n+\t\t\t\t   struct kvm_memory_slot *new,\n+\t\t\t\t   enum kvm_mr_change change)\n+{\n+\treturn s390_kvm_mmu_prepare_memory_region(kvm, old, new, change);\n+}\n+\n+void kvm_arch_commit_memory_region(struct kvm *kvm, struct kvm_memory_slot *old,\n+\t\t\t\t   const struct kvm_memory_slot *new,\n+\t\t\t\t   enum kvm_mr_change change)\n+{\n+\ts390_kvm_mmu_commit_memory_region(kvm, old, new, change);\n+}\n+\n+bool kvm_unmap_gfn_range(struct kvm *kvm, struct kvm_gfn_range *range)\n+{\n+\treturn gmap_unmap_gfn_range(kvm-\u003earch.gmap, range-\u003eslot, range-\u003estart, range-\u003eend);\n+}\n+\n+bool kvm_test_age_gfn(struct kvm *kvm, struct kvm_gfn_range *range)\n+{\n+\tscoped_guard(read_lock, \u0026kvm-\u003emmu_lock)\n+\t\treturn dat_test_age_gfn(kvm-\u003earch.gmap-\u003easce, range-\u003estart, range-\u003eend);\n+}\n+\n+#ifdef CONFIG_KVM_GENERIC_PRE_FAULT_MEMORY\n+long kvm_arch_vcpu_pre_fault_memory(struct kvm_vcpu *vcpu,\n+\t\t\t\t    struct kvm_pre_fault_memory *range)\n+{\n+\treturn -EOPNOTSUPP;\n+}\n+#endif /* ifdef CONFIG_ */\n+\n+int kvm_arch_vm_ioctl(struct file *filp, unsigned int ioctl, unsigned long arg)\n+{\n+\tvoid __user *argp = (void __user *)arg;\n+\n+\tswitch (ioctl) {\n+\tcase KVM_ARM_PREFERRED_TARGET: {\n+\t\tstruct kvm_vcpu_init init = {\n+\t\t\t.target = KVM_ARM_TARGET_GENERIC_V8,\n+\t\t};\n+\n+\t\tif (copy_to_user(argp, \u0026init, sizeof(init)))\n+\t\t\treturn -EFAULT;\n+\n+\t\treturn 0;\n+\t}\n+\n+\tdefault:\n+\t\treturn -EINVAL;\n+\t}\n+}\n+\n+bool kvm_arch_irqchip_in_kernel(struct kvm *kvm)\n+{\n+\treturn false;\n+}\n+\n+int kvm_set_msi(struct kvm_kernel_irq_routing_entry *e, struct kvm *kvm,\n+\t\tint irq_source_id, int level, bool line_status)\n+{\n+\treturn -EINVAL;\n+}\n+\n+int kvm_set_routing_entry(struct kvm *kvm,\n+\t\t\t  struct kvm_kernel_irq_routing_entry *e,\n+\t\t\t  const struct kvm_irq_routing_entry *ue)\n+{\n+\treturn -EINVAL;\n+}\n+\n+int kvm_cpu_has_pending_timer(struct kvm_vcpu *vcpu)\n+{\n+\treturn 0;\n+}\n+\n+#ifdef CONFIG_HAVE_KVM_NO_POLL\n+__weak bool kvm_arch_no_poll(struct kvm_vcpu *vcpu)\n+{\n+\treturn false;\n+}\n+#endif\n+\n+long kvm_arch_vcpu_unlocked_ioctl(struct file *filp, unsigned int ioctl,\n+\t\t\t\t  unsigned long arg)\n+{\n+\treturn -ENOIOCTLCMD;\n+}\n+\n+static int __init kvm_s390_arm64_init(void)\n+{\n+\tif (!sclp.has_aef)\n+\t\treturn -ENXIO;\n+\n+\treturn kvm_init_with_dev(sizeof(struct kvm_vcpu), 0, THIS_MODULE,\n+\t\t\t\t KVM_DEV_NAME, MISC_DYNAMIC_MINOR);\n+}\n+\n+static __exit void kvm_s390_arm64_exit(void)\n+{\n+\tkvm_exit();\n+}\n+\n+module_init(kvm_s390_arm64_init);\n+module_exit(kvm_s390_arm64_exit);\ndiff --git a/arch/s390/kvm/arm64/arm.h b/arch/s390/kvm/arm64/arm.h\nnew file mode 100644\nindex 0000000000000..2e33800525e93\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/arm.h\n@@ -0,0 +1,58 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+#ifndef ARCH_S390_KVM_ARM64_H\n+#define ARCH_S390_KVM_ARM64_H\n+\n+#include \u003clinux/kvm_host.h\u003e\n+\n+#define KVM_DEV_NAME \"kvm-arm64\"\n+\n+#define VM_EVENT(d_kvm, d_loglevel, d_string, d_args...)\\\n+do { \\\n+\tdebug_sprintf_event((d_kvm)-\u003earch.dbf, d_loglevel, KVM_DEV_NAME \": \" d_string \"\\n\", d_args); \\\n+} while (0)\n+\n+#define VCPU_EVENT(d_vcpu, d_loglevel, d_string, d_args...)\t\t\t\\\n+\tdo {\t\t\t\t\t\t\t\t\t\\\n+\t\tdebug_sprintf_event(\t\t\t\t\t\t\\\n+\t\t\t(d_vcpu)-\u003ekvm-\u003earch.dbf, d_loglevel,\t\t\t\\\n+\t\t\tKVM_DEV_NAME \" %02d[%016llx-%016llx]: \" d_string \"\\n\",\t\\\n+\t\t\t(d_vcpu)-\u003evcpu_id, (d_vcpu)-\u003earch.sae_block.pstate,\t\\\n+\t\t\t(d_vcpu)-\u003earch.sae_block.pc, d_args);\t\t\t\\\n+\t} while (0)\n+\n+static __always_inline int kvm_is_ucontrol(struct kvm *kvm)\n+{\n+\treturn 0;\n+}\n+\n+static __always_inline int __kvm_s390_pv_destroy_page(struct page *page)\n+{\n+\treturn 0;\n+}\n+\n+static __always_inline void kvm_s390_vsie_gmap_notifier(struct gmap *gmap, gpa_t start, gpa_t end)\n+{\n+}\n+\n+static __always_inline int kvm_s390_pv_get_handle(struct kvm *kvm)\n+{\n+\treturn 0;\n+}\n+\n+static __always_inline int kvm_s390_is_migration_mode(struct kvm *kvm)\n+{\n+\treturn false;\n+}\n+\n+static __always_inline bool kvm_arch_setup_async_pf(struct kvm_vcpu *vcpu)\n+{\n+\treturn false;\n+}\n+\n+/* should never be called */\n+static __always_inline int kvm_s390_vm_stop_migration(struct kvm *kvm)\n+{\n+\treturn -EINVAL;\n+}\n+\n+#endif /* ARCH_S390_KVM_ARM64_H */\ndiff --git a/arch/s390/kvm/arm64/copy-arm64c.awk b/arch/s390/kvm/arm64/copy-arm64c.awk\nnew file mode 100644\nindex 0000000000000..6c4fd1f080982\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/copy-arm64c.awk\n@@ -0,0 +1,70 @@\n+#!/usr/bin/awk -f\n+# SPDX-License-Identifier: GPL-2.0\n+#\n+# Extract marked sections from ARM64 C files for sharing with s390 KVM\n+#\n+# Usage: share-arm64-cfile.awk \u003cinput_file\u003e\n+#\n+# Extracts all sections between start/end markers. If no markers found, signals failure.\n+\n+BEGIN {\n+\t# Constants\n+\tstart_pattern = \"^#ifdef ARM64_S390_COMMON$\"\n+\tend_pattern = \"^#endif /\\\\* ARM64_S390_COMMON \\\\*/$\"\n+\n+\t# State variables\n+\tcopying = found_marker = 0\n+\tfile_header_done = 0\n+}\n+\n+!file_header_done {\n+\tif (/^\\/\\*/ || /^\\/\\/ SPDX-License-Identifier:/) {\n+\t\tprint\n+\t\tnext\n+\t}\n+\tif (/[[:space:]]\\*([[:space:]]|$)/) {\n+\t\tprint\n+\t\tnext\n+\t}\n+\tif (/\\*\\//) {\n+\t\tprint \" *\"\n+\t} else {\n+\t\tprint \"/*\"\n+\t}\n+\n+\tfilename = FILENAME\n+\tsub(/^.*arch\\/arm64\\//, \"arch/arm64/\", filename)\n+\tprint \" * This file was automatically generated from \" filename\n+\tprint \" * Do not modify this file directly.\"\n+\tprint \" */\"\n+\tprint \"\"\n+\tprint \"#ifndef __INCL_GEN_ARM_FILE\"\n+\tprint \"#error included .inc file w/o proper guard definition\"\n+\tprint \"#undef __INCL_GEN_ARM_FILE\"\n+\tprint \"#endif /* __INCL_GEN_ARM_FILE */\"\n+\tprint \"\"\n+\n+\tfile_header_done = 1\n+}\n+\n+$0 ~ start_pattern {\n+\tif (copying) { exit 1 }\n+\tcopying = found_marker = 1\n+\tnext\n+}\n+\n+$0 ~ end_pattern {\n+\tcopying = 0\n+\tnext\n+}\n+\n+copying {\n+\tgsub(/#include \u003casm\\//, \"#include \u003carm64/\")\n+\tgsub(/#include \u003cuapi\\/asm\\//, \"#include \u003cuapi/arm64/\")\n+\tprint\n+\tnext\n+}\n+\n+END {\n+\texit !found_marker || copying\n+}\ndiff --git a/arch/s390/kvm/arm64/guest.c b/arch/s390/kvm/arm64/guest.c\nnew file mode 100644\nindex 0000000000000..4ea6fe2c270d1\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/guest.c\n@@ -0,0 +1,135 @@\n+// SPDX-License-Identifier: GPL-2.0\n+#include \u003clinux/kvm_host.h\u003e\n+#include \u003clinux/kvm.h\u003e\n+\n+#include \u003carm64/kvm_emulate.h\u003e\n+#include \u003carm64/kvm_nested.h\u003e\n+\n+#define __INCL_GEN_ARM_FILE\n+#include \"generated/guest.inc\"\n+#undef __INCL_GEN_ARM_FILE\n+\n+const struct kvm_stats_desc kvm_vm_stats_desc[] = {\n+\tKVM_GENERIC_VM_STATS()\n+};\n+\n+const struct kvm_stats_header kvm_vm_stats_header = {\n+\t.name_size = KVM_STATS_NAME_SIZE,\n+\t.num_desc = ARRAY_SIZE(kvm_vm_stats_desc),\n+\t.id_offset =  sizeof(struct kvm_stats_header),\n+\t.desc_offset = sizeof(struct kvm_stats_header) + KVM_STATS_NAME_SIZE,\n+\t.data_offset = sizeof(struct kvm_stats_header) + KVM_STATS_NAME_SIZE +\n+\t\t       sizeof(kvm_vm_stats_desc),\n+};\n+\n+const struct kvm_stats_desc kvm_vcpu_stats_desc[] = {\n+\tKVM_GENERIC_VCPU_STATS(),\n+\t/* ARM64 stats */\n+\tSTATS_DESC_COUNTER(VCPU, hvc_exit_stat),\n+\tSTATS_DESC_COUNTER(VCPU, wfe_exit_stat),\n+\tSTATS_DESC_COUNTER(VCPU, wfi_exit_stat),\n+\tSTATS_DESC_COUNTER(VCPU, mmio_exit_user),\n+\tSTATS_DESC_COUNTER(VCPU, mmio_exit_kernel),\n+\tSTATS_DESC_COUNTER(VCPU, signal_exits),\n+\tSTATS_DESC_COUNTER(VCPU, exits),\n+\t/* GMAP stats */\n+\tSTATS_DESC_COUNTER(VCPU, pfault_sync),\n+};\n+\n+const struct kvm_stats_header kvm_vcpu_stats_header = {\n+\t.name_size = KVM_STATS_NAME_SIZE,\n+\t.num_desc = ARRAY_SIZE(kvm_vcpu_stats_desc),\n+\t.id_offset = sizeof(struct kvm_stats_header),\n+\t.desc_offset = sizeof(struct kvm_stats_header) + KVM_STATS_NAME_SIZE,\n+\t.data_offset = sizeof(struct kvm_stats_header) + KVM_STATS_NAME_SIZE +\n+\t\t       sizeof(kvm_vcpu_stats_desc),\n+};\n+\n+int kvm_arm_copy_reg_indices(struct kvm_vcpu *vcpu, u64 __user *uindices)\n+{\n+\tint ret;\n+\n+\tret = copy_core_reg_indices(vcpu, uindices);\n+\tif (ret \u003c 0)\n+\t\treturn ret;\n+\tuindices += ret;\n+\n+\treturn 0;\n+}\n+\n+unsigned long kvm_arm_num_regs(struct kvm_vcpu *vcpu)\n+{\n+\treturn num_core_regs(vcpu);\n+}\n+\n+int kvm_arm_get_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg)\n+{\n+\t/* We currently use nothing arch-specific in upper 32 bits */\n+\tif ((reg-\u003eid \u0026 ~KVM_REG_SIZE_MASK) \u003e\u003e 32 != KVM_REG_ARM64 \u003e\u003e 32)\n+\t\treturn -EINVAL;\n+\n+\tswitch (reg-\u003eid \u0026 KVM_REG_ARM_COPROC_MASK) {\n+\tcase KVM_REG_ARM_CORE:\n+\t\treturn get_core_reg(vcpu, reg);\n+\tdefault:\n+\t\treturn -EINVAL;\n+\t}\n+}\n+\n+int kvm_arm_set_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg)\n+{\n+\t/* We currently use nothing arch-specific in upper 32 bits */\n+\tif ((reg-\u003eid \u0026 ~KVM_REG_SIZE_MASK) \u003e\u003e 32 != KVM_REG_ARM64 \u003e\u003e 32)\n+\t\treturn -EINVAL;\n+\n+\tswitch (reg-\u003eid \u0026 KVM_REG_ARM_COPROC_MASK) {\n+\tcase KVM_REG_ARM_CORE:\n+\t\treturn set_core_reg(vcpu, reg);\n+\tdefault:\n+\t\treturn -EINVAL;\n+\t}\n+}\n+\n+int kvm_arch_vcpu_ioctl_get_regs(struct kvm_vcpu *vcpu, struct kvm_regs *regs)\n+{\n+\treturn -EINVAL;\n+}\n+\n+int kvm_arch_vcpu_ioctl_set_regs(struct kvm_vcpu *vcpu, struct kvm_regs *regs)\n+{\n+\treturn -EINVAL;\n+}\n+\n+int kvm_arch_vcpu_ioctl_get_sregs(struct kvm_vcpu *vcpu,\n+\t\t\t\t  struct kvm_sregs *sregs)\n+{\n+\treturn -EINVAL;\n+}\n+\n+int kvm_arch_vcpu_ioctl_set_sregs(struct kvm_vcpu *vcpu,\n+\t\t\t\t  struct kvm_sregs *sregs)\n+{\n+\treturn -EINVAL;\n+}\n+\n+int kvm_arch_vcpu_ioctl_get_fpu(struct kvm_vcpu *vcpu, struct kvm_fpu *fpu)\n+{\n+\treturn -EINVAL;\n+}\n+\n+int kvm_arch_vcpu_ioctl_set_fpu(struct kvm_vcpu *vcpu, struct kvm_fpu *fpu)\n+{\n+\treturn -EINVAL;\n+}\n+\n+int kvm_arch_vcpu_ioctl_translate(struct kvm_vcpu *vcpu,\n+\t\t\t\t  struct kvm_translation *tr)\n+{\n+\treturn -EINVAL;\n+}\n+\n+int kvm_arch_vcpu_ioctl_set_guest_debug(struct kvm_vcpu *vcpu,\n+\t\t\t\t\tstruct kvm_guest_debug *dbg)\n+{\n+\treturn -EINVAL;\n+}\ndiff --git a/arch/s390/kvm/arm64/handle_exit.c b/arch/s390/kvm/arm64/handle_exit.c\nnew file mode 100644\nindex 0000000000000..9ba01ec66e347\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/handle_exit.c\n@@ -0,0 +1,131 @@\n+// SPDX-License-Identifier: GPL-2.0\n+\n+#include \u003clinux/kvm_host.h\u003e\n+\n+#include \u003carm64/esr.h\u003e\n+#include \u003carm64/kvm_emulate.h\u003e\n+\n+#include \"handle_exit.h\"\n+\n+typedef int (*exit_handle_fn)(struct kvm_vcpu *);\n+exit_handle_fn arm_exit_handlers[ESR_ELx_EC_MAX + 1];\n+\n+#define __INCL_GEN_ARM_FILE\n+#include \"generated/handle_exit.inc\"\n+#undef __INCL_GEN_ARM_FILE\n+\n+#define PSCI_0_2_FN_SYSTEM_OFF\t\t0x84000008\n+#define PSCI_RET_NOT_SUPPORTED\t\t-1\n+#define PSCI_RET_INTERNAL_FAILURE\t-6\n+/*\n+ * Temporary smc/hvc handler. Non-compliant implementation (features missing).\n+ * Implements only system off so that test programs are able to end their execution\n+ */\n+static int kvm_smccc_call_handler(struct kvm_vcpu *vcpu)\n+{\n+\tu32 func_id = vcpu_get_reg(vcpu, 0);\n+\tu64 val = PSCI_RET_NOT_SUPPORTED;\n+\tint ret = 1;\n+\n+\tif (func_id == PSCI_0_2_FN_SYSTEM_OFF) {\n+\t\tscoped_guard(spinlock, \u0026vcpu-\u003earch.mp_state_lock) {\n+\t\t\tWRITE_ONCE(vcpu-\u003earch.mp_state.mp_state, KVM_MP_STATE_STOPPED);\n+\t\t}\n+\t\tkvm_make_all_cpus_request(vcpu-\u003ekvm, KVM_REQ_SLEEP);\n+\t\tmemset(\u0026vcpu-\u003erun-\u003esystem_event, 0,\n+\t\t       sizeof(vcpu-\u003erun-\u003esystem_event));\n+\t\tvcpu-\u003erun-\u003esystem_event.type = KVM_SYSTEM_EVENT_SHUTDOWN;\n+\t\tvcpu-\u003erun-\u003esystem_event.ndata = 1;\n+\t\tvcpu-\u003erun-\u003esystem_event.data[0] = 0;\n+\t\tvcpu-\u003erun-\u003eexit_reason = KVM_EXIT_SYSTEM_EVENT;\n+\t\tval = PSCI_RET_INTERNAL_FAILURE;\n+\t\tret = 0;\n+\t}\n+\tvcpu_set_reg(vcpu, 0, val);\n+\n+\treturn ret;\n+}\n+\n+static int handle_hvc(struct kvm_vcpu *vcpu)\n+{\n+\tvcpu-\u003estat.hvc_exit_stat++;\n+\treturn kvm_smccc_call_handler(vcpu);\n+}\n+\n+exit_handle_fn arm_exit_handlers[] = {\n+\t[0 ... ESR_ELx_EC_MAX]\t= kvm_handle_unknown_ec,\n+\t[ESR_ELx_EC_HVC64]\t= handle_hvc,\n+\t[ESR_ELx_EC_IABT_LOW]\t= kvm_handle_guest_abort,\n+\t[ESR_ELx_EC_DABT_LOW]\t= kvm_handle_guest_abort,\n+};\n+\n+/*\n+ * Return \u003e 0 to return to guest, \u003c 0 on error, 0 (and set exit_reason) on\n+ * proper exit to userspace.\n+ */\n+int handle_exit(struct kvm_vcpu *vcpu)\n+{\n+\tu8 icptr = vcpu-\u003earch.sae_block.icptr;\n+\tint ret = 1;\n+\n+\tswitch (icptr) {\n+\tcase SAE_ICPTR_SPURIOUS:\n+\t\tbreak;\n+\tcase SAE_ICPTR_VALIDITY:\n+\t\tWARN_ONCE(true, \"SAE: validity intercept. vir: 0x%04x\",\n+\t\t\t  vcpu-\u003earch.sae_block.vir);\n+\t\tret = -EINVAL;\n+\t\tbreak;\n+\tcase SAE_ICPTR_HOST_ACCESS_EXCEPTION:\n+\tcase SAE_ICPTR_SYNCHRONOUS_EXCEPTION:\n+\t\tret = handle_trap_exceptions(vcpu);\n+\t\tbreak;\n+\tdefault:\n+\t\tWARN_ONCE(true, \"SAE: unknown interception reason 0x%02x\",\n+\t\t\t  icptr);\n+\t\tret = -EINVAL;\n+\t}\n+\treturn ret;\n+}\n+\n+/* manually copied from arch/arm64/kernel/traps.c */\n+static const char * const esr_class_str[] = {\n+\t[0 ... ESR_ELx_EC_MAX]\t\t= \"UNRECOGNIZED EC\",\n+\t[ESR_ELx_EC_UNKNOWN]\t\t= \"Unknown/Uncategorized\",\n+\t[ESR_ELx_EC_WFx]\t\t= \"WFI/WFE\",\n+\t[ESR_ELx_EC_FP_ASIMD]\t\t= \"ASIMD\",\n+\t[ESR_ELx_EC_PAC]\t\t= \"PAC\",\n+\t[ESR_ELx_EC_BTI]\t\t= \"BTI\",\n+\t[ESR_ELx_EC_ILL]\t\t= \"PSTATE.IL\",\n+\t[ESR_ELx_EC_SVC64]\t\t= \"SVC (AArch64)\",\n+\t[ESR_ELx_EC_HVC64]\t\t= \"HVC (AArch64)\",\n+\t[ESR_ELx_EC_SMC64]\t\t= \"SMC (AArch64)\",\n+\t[ESR_ELx_EC_SYS64]\t\t= \"MSR/MRS (AArch64)\",\n+\t[ESR_ELx_EC_SVE]\t\t= \"SVE\",\n+\t[ESR_ELx_EC_ERET]\t\t= \"ERET/ERETAA/ERETAB\",\n+\t[ESR_ELx_EC_FPAC]\t\t= \"FPAC\",\n+\t[ESR_ELx_EC_SME]\t\t= \"SME\",\n+\t[ESR_ELx_EC_IMP_DEF]\t\t= \"EL3 IMP DEF\",\n+\t[ESR_ELx_EC_IABT_LOW]\t\t= \"IABT (lower EL)\",\n+\t[ESR_ELx_EC_IABT_CUR]\t\t= \"IABT (current EL)\",\n+\t[ESR_ELx_EC_PC_ALIGN]\t\t= \"PC Alignment\",\n+\t[ESR_ELx_EC_DABT_LOW]\t\t= \"DABT (lower EL)\",\n+\t[ESR_ELx_EC_DABT_CUR]\t\t= \"DABT (current EL)\",\n+\t[ESR_ELx_EC_SP_ALIGN]\t\t= \"SP Alignment\",\n+\t[ESR_ELx_EC_MOPS]\t\t= \"MOPS\",\n+\t[ESR_ELx_EC_FP_EXC64]\t\t= \"FP (AArch64)\",\n+\t[ESR_ELx_EC_GCS]\t\t= \"Guarded Control Stack\",\n+\t[ESR_ELx_EC_SERROR]\t\t= \"SError\",\n+\t[ESR_ELx_EC_BREAKPT_LOW]\t= \"Breakpoint (lower EL)\",\n+\t[ESR_ELx_EC_BREAKPT_CUR]\t= \"Breakpoint (current EL)\",\n+\t[ESR_ELx_EC_SOFTSTP_LOW]\t= \"Software Step (lower EL)\",\n+\t[ESR_ELx_EC_SOFTSTP_CUR]\t= \"Software Step (current EL)\",\n+\t[ESR_ELx_EC_WATCHPT_LOW]\t= \"Watchpoint (lower EL)\",\n+\t[ESR_ELx_EC_WATCHPT_CUR]\t= \"Watchpoint (current EL)\",\n+\t[ESR_ELx_EC_BRK64]\t\t= \"BRK (AArch64)\",\n+};\n+\n+const char *esr_get_class_string(unsigned long esr)\n+{\n+\treturn esr_class_str[ESR_ELx_EC(esr)];\n+}\ndiff --git a/arch/s390/kvm/arm64/handle_exit.h b/arch/s390/kvm/arm64/handle_exit.h\nnew file mode 100644\nindex 0000000000000..65ae587215375\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/handle_exit.h\n@@ -0,0 +1,9 @@\n+/* SPDX-License-Identifier: GPL-2.0-only */\n+#ifndef KVM_ARM64_HANDLE_EXIT_H\n+#define KVM_ARM64_HANDLE_EXIT_H\n+\n+#include \u003clinux/kvm_host.h\u003e\n+\n+int handle_exit(struct kvm_vcpu *vcpu);\n+\n+#endif /* KVM_ARM64_HANDLE_EXIT_H */\ndiff --git a/arch/s390/kvm/arm64/inject_fault.c b/arch/s390/kvm/arm64/inject_fault.c\nnew file mode 100644\nindex 0000000000000..425dbeaa421c6\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/inject_fault.c\n@@ -0,0 +1,21 @@\n+// SPDX-License-Identifier: GPL-2.0\n+\n+#include \u003carm64/kvm_emulate.h\u003e\n+\n+/**\n+ * kvm_inject_undefined - inject an undefined instruction into the guest\n+ * @vcpu: The vCPU in which to inject the exception\n+ *\n+ * It is assumed that this code is called from the VCPU thread and that the\n+ * VCPU therefore is not currently executing guest code.\n+ */\n+void kvm_inject_undefined(struct kvm_vcpu *vcpu)\n+{\n+\t/* Stub until s390 supports arm64 sysregs TODO sysregs*/\n+}\n+\n+int kvm_inject_sea(struct kvm_vcpu *vcpu, bool iabt, u64 addr)\n+{\n+\t/* Stub until s390 supports arm64 sysregs TODO sysregs*/\n+\treturn 1;\n+}\ndiff --git a/arch/s390/kvm/arm64/mmio.c b/arch/s390/kvm/arm64/mmio.c\nnew file mode 100644\nindex 0000000000000..908a6b43ddf77\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/mmio.c\n@@ -0,0 +1,15 @@\n+// SPDX-License-Identifier: GPL-2.0\n+\n+#include \u003clinux/kvm_host.h\u003e\n+#include \u003clinux/bitfield.h\u003e\n+\n+#include \u003ctrace/events/kvm.h\u003e\n+\n+#include \u003carm64/kvm_emulate.h\u003e\n+#include \u003carm64/sysreg.h\u003e\n+\n+#include \"trace.h\"\n+\n+#define __INCL_GEN_ARM_FILE\n+#include \"generated/mmio.inc\"\n+#undef __INCL_GEN_ARM_FILE\ndiff --git a/arch/s390/kvm/arm64/mmu.c b/arch/s390/kvm/arm64/mmu.c\nnew file mode 100644\nindex 0000000000000..71cd582f24ff8\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/mmu.c\n@@ -0,0 +1,177 @@\n+// SPDX-License-Identifier: GPL-2.0\n+#include \u003clinux/kvm_host.h\u003e\n+\n+#include \u003carm64/kvm_emulate.h\u003e\n+\n+#include \u003cfaultin.h\u003e\n+\n+static inline bool kvm_s390_cur_gmap_fault_is_write(struct kvm_vcpu *vcpu)\n+{\n+\treturn vcpu-\u003earch.sae_block.hai.pic == PGM_PROTECTION ||\n+\t       vcpu-\u003earch.sae_block.hai.teid.fsi == TEID_FSI_STORE;\n+}\n+\n+/*\n+ * user_mem_abort() - handle a dat fault for the gmap of a vcpu\n+ *\n+ * Return: 0 on success, \u003c 0 in case of error.\n+ * Context: The mm lock must not be held before calling. May sleep.\n+ */\n+static int user_mem_abort(struct kvm_vcpu *vcpu, gpa_t fault_ipa,\n+\t\t\t  struct kvm_memory_slot *slot, hva_t hva)\n+{\n+\tstruct guest_fault f = { };\n+\tint ret;\n+\n+\tif (kvm_s390_cur_gmap_fault_is_write(vcpu))\n+\t\tf.write_attempt = FOLL_WRITE;\n+\tf.gfn = gpa_to_gfn(fault_ipa);\n+\n+\tret = kvm_s390_faultin_gfn(vcpu, NULL, \u0026f);\n+\tif (ret \u003c= 0)\n+\t\treturn ret;\n+\tif (ret == PGM_ADDRESSING)\n+\t\t/*\n+\t\t * Without the relevant sysregs we cannot do anything for now.\n+\t\t * Go back to userspace with an error. TODO sysreg handling\n+\t\t */\n+\t\treturn -ENOEXEC;\n+\tKVM_BUG_ON(ret, vcpu-\u003ekvm);\n+\treturn -EINVAL;\n+}\n+\n+static int kvm_handle_pic(struct kvm_vcpu *vcpu, bool *translation)\n+{\n+\tswitch (kvm_vcpu_fault_pic(vcpu)) {\n+\t/* expected cases: */\n+\tcase PGM_ASCE_TYPE:\n+\tcase PGM_REGION_FIRST_TRANS:\n+\tcase PGM_REGION_SECOND_TRANS:\n+\tcase PGM_REGION_THIRD_TRANS:\n+\tcase PGM_SEGMENT_TRANSLATION:\n+\tcase PGM_PAGE_TRANSLATION:\n+\t\t*translation = true;\n+\t\tbreak;\n+\tcase PGM_PROTECTION:\n+\t\tbreak;\n+\t/* unexpected cases: */\n+\tcase 0:\n+\t\tKVM_BUG(1, vcpu-\u003ekvm, \"On MMU fault path but no fault occurred\");\n+\t\treturn -EFAULT;\n+\tdefault:\n+\t\tKVM_BUG(1, vcpu-\u003ekvm, \"Unexpected program interrupt 0x%x, TEID 0x%016lx\",\n+\t\t\tvcpu-\u003earch.sae_block.hai.pic, vcpu-\u003earch.sae_block.hai.teid.val);\n+\t\tsend_sig(SIGSEGV, current, 0);\n+\t\treturn -EFAULT;\n+\t}\n+\n+\treturn 0;\n+}\n+\n+int kvm_handle_guest_abort(struct kvm_vcpu *vcpu)\n+{\n+\tstruct kvm_memory_slot *memslot;\n+\tbool translation = false;\n+\tphys_addr_t fault_ipa;\n+\tunsigned long esr;\n+\tunsigned long hva;\n+\tbool write_fault;\n+\tbool guest_size_err;\n+\tbool writable;\n+\tbool is_iabt;\n+\tint ret;\n+\tgfn_t gfn;\n+\tint idx;\n+\n+\tesr = kvm_vcpu_get_esr(vcpu);\n+\tfault_ipa = kvm_vcpu_get_fault_ipa(vcpu);\n+\tis_iabt = kvm_vcpu_trap_is_iabt(vcpu);\n+\tguest_size_err = vcpu-\u003earch.sae_block.icptr == SAE_ICPTR_GUEST_ADDRESS_SIZE;\n+\n+\tif (guest_size_err) {\n+\t\ttranslation = true;\n+\t} else {\n+\t\tret = kvm_handle_pic(vcpu, \u0026translation);\n+\t\tif (ret)\n+\t\t\treturn ret;\n+\t}\n+\n+\tif (translation) {\n+\t\t/*\n+\t\t * For both cases:\n+\t\t * Without the relevant sysregs we cannot do anything for now.\n+\t\t * Go back to userspace with an error. TODO sysreg handling\n+\t\t */\n+\t\tif (fault_ipa \u003e= BIT_ULL(get_kvm_ipa_limit()))\n+\t\t\treturn -ENOEXEC;\n+\n+\t\tif (fault_ipa \u003e= kvm_phys_size(vcpu-\u003ekvm))\n+\t\t\treturn -ENOEXEC;\n+\t}\n+\n+\tidx = srcu_read_lock(\u0026vcpu-\u003ekvm-\u003esrcu);\n+\n+\tgfn = fault_ipa \u003e\u003e PAGE_SHIFT;\n+\n+\tmemslot = gfn_to_memslot(vcpu-\u003ekvm, gfn);\n+\thva = gfn_to_hva_memslot_prot(memslot, gfn, \u0026writable);\n+\twrite_fault = kvm_is_write_fault(vcpu);\n+\tif (kvm_is_error_hva(hva) || (write_fault \u0026\u0026 !writable)) {\n+\t\tret = -ENOEXEC;\n+\t\t/*\n+\t\t * The guest has put either its instructions or its page-tables\n+\t\t * somewhere it shouldn't have. Userspace won't be able to do\n+\t\t * anything about this (there's no syndrome for a start).\n+\t\t *\n+\t\t * Without the relevant sysregs we cannot do anything for now.\n+\t\t * Go back to userspace with an error. TODO sysreg handling\n+\t\t */\n+\t\tif (is_iabt)\n+\t\t\tgoto out_unlock;\n+\n+\t\tif (kvm_vcpu_abt_iss1tw(vcpu)) {\n+\t\t\t/*\n+\t\t\t * Without the relevant sysregs we cannot do anything for now.\n+\t\t\t * Go back to userspace with an error. TODO sysreg handling\n+\t\t\t */\n+\t\t\tgoto out_unlock;\n+\t\t}\n+\n+\t\t/*\n+\t\t * Check for a cache maintenance operation. Assume the guest is\n+\t\t * cautious and skip instruction\n+\t\t */\n+\t\tif (kvm_is_error_hva(hva) \u0026\u0026 kvm_vcpu_dabt_is_cm(vcpu)) {\n+\t\t\tkvm_incr_pc(vcpu);\n+\t\t\tret = 1;\n+\t\t\tgoto out_unlock;\n+\t\t}\n+\n+\t\t/*\n+\t\t * The IPA is reported as [MAX:12], so we need to\n+\t\t * complement it with the bottom 12 bits from the\n+\t\t * faulting VA. This is always 12 bits, irrespective\n+\t\t * of the page size.\n+\t\t */\n+\t\tfault_ipa |= kvm_vcpu_get_hfar(vcpu) \u0026 ((1 \u003c\u003c 12) - 1);\n+\t\tret = io_mem_abort(vcpu, fault_ipa);\n+\t\tgoto out_unlock;\n+\t}\n+\n+\t/* Userspace should not be able to register out-of-bounds IPAs */\n+\tVM_BUG_ON(fault_ipa \u003e= kvm_phys_size(vcpu-\u003ekvm));\n+\t/*\n+\t * Proper guest size faults have been injected.\n+\t * In theory it's fine to have device memory higher than MSL,\n+\t * even if not currently possible, but that would have been handled above.\n+\t * So if we get here with a guest size intercept, we have a bug somewhere.\n+\t */\n+\tVM_BUG_ON(guest_size_err);\n+\n+\tret = user_mem_abort(vcpu, fault_ipa, memslot, hva);\n+\tif (!ret)\n+\t\tret = 1;\n+out_unlock:\n+\tsrcu_read_unlock(\u0026vcpu-\u003ekvm-\u003esrcu, idx);\n+\treturn ret;\n+}\ndiff --git a/arch/s390/kvm/arm64/reset.c b/arch/s390/kvm/arm64/reset.c\nnew file mode 100644\nindex 0000000000000..adf237254212a\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/reset.c\n@@ -0,0 +1,77 @@\n+// SPDX-License-Identifier: GPL-2.0\n+\n+#include \u003clinux/kvm_host.h\u003e\n+#include \u003clinux/fpu.h\u003e\n+\n+#include \u003carm64/kvm_emulate.h\u003e\n+#include \u003carm64/kvm_nested.h\u003e\n+\n+#include \"reset.h\"\n+\n+#define __INCL_GEN_ARM_FILE\n+#include \"generated/reset.inc\"\n+#undef __INCL_GEN_ARM_FILE\n+\n+bool kvm_arm_vcpu_is_finalized(struct kvm_vcpu *vcpu)\n+{\n+\treturn true;\n+}\n+\n+static inline void vcpu_reset_hcr(struct kvm_vcpu *vcpu)\n+{\n+\tvcpu-\u003earch.hcr_elz = HCR_EL2_E2H | HCR_EL2_RW | HCR_EL2_AMO |\n+\t\t\t     HCR_EL2_IMO | HCR_EL2_FMO | HCR_EL2_PTW;\n+\t/* traps */\n+\tvcpu-\u003earch.hcr_elz |= HCR_EL2_TSC | HCR_EL2_TID1 | HCR_EL2_TID2 |\n+\t\t\t      HCR_EL2_TID3 | HCR_EL2_TID4 | HCR_EL2_TID5 |\n+\t\t\t      HCR_EL2_TIDCP;\n+}\n+\n+void kvm_reset_vcpu(struct kvm_vcpu *vcpu)\n+{\n+\tstruct vcpu_reset_state reset_state;\n+\tbool loaded;\n+\n+\tscoped_guard(spinlock, \u0026vcpu-\u003earch.mp_state_lock) {\n+\t\treset_state = vcpu-\u003earch.reset_state;\n+\t\tvcpu-\u003earch.reset_state.reset = false;\n+\t}\n+\n+\t/*\n+\t * Disable preemption around the vcpu reset as we might otherwise race with\n+\t * preempt notifiers which call stiasrm/lasrm from put/load\n+\t */\n+\tpreempt_disable();\n+\n+\t/* The reset must run with an unloaded save area */\n+\tloaded = vcpu_is_loaded(vcpu);\n+\tif (loaded)\n+\t\tvcpu_put(vcpu);\n+\n+\tkvm_reset_vcpu_core_regs(vcpu);\n+\n+\t/* Reset special registers */\n+\tvcpu_reset_hcr(vcpu);\n+\n+\tif (reset_state.reset) {\n+\t\t*vcpu_pc(vcpu) = reset_state.pc;\n+\t\tvcpu_clear_flag(vcpu, PENDING_EXCEPTION);\n+\t\tvcpu_clear_flag(vcpu, EXCEPT_MASK);\n+\t\tvcpu_clear_flag(vcpu, INCREMENT_PC);\n+\t\tvcpu_set_reg(vcpu, 0, reset_state.r0);\n+\t}\n+\n+\t/* Load new vx-regs into HW if they are currently loaded */\n+\tif (current-\u003ethread.kfpu_flags)\n+\t\tload_vx_regs(vcpu-\u003earch.ctxt.vregs);\n+\n+\tif (loaded)\n+\t\tvcpu_load(vcpu);\n+\n+\tpreempt_enable();\n+}\n+\n+int kvm_arm_vcpu_finalize(struct kvm_vcpu *vcpu, int feature)\n+{\n+\treturn 0;\n+}\ndiff --git a/arch/s390/kvm/arm64/reset.h b/arch/s390/kvm/arm64/reset.h\nnew file mode 100644\nindex 0000000000000..a5c5304e47bcf\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/reset.h\n@@ -0,0 +1,11 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+#ifndef KVM_ARM_RESET_H\n+#define KVM_ARM_RESET_H\n+\n+#include \u003clinux/kvm_host.h\u003e\n+\n+bool kvm_arm_vcpu_is_finalized(struct kvm_vcpu *vcpu);\n+void kvm_reset_vcpu(struct kvm_vcpu *vcpu);\n+int kvm_arm_vcpu_finalize(struct kvm_vcpu *vcpu, int feature);\n+\n+#endif /* KVM_ARM_RESET_H */\ndiff --git a/arch/s390/kvm/arm64/trace.h b/arch/s390/kvm/arm64/trace.h\nnew file mode 100644\nindex 0000000000000..973054c5d11ee\n--- /dev/null\n+++ b/arch/s390/kvm/arm64/trace.h\n@@ -0,0 +1,67 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+#if !defined(KVM_ARM64_TRACE_KVM_H) || defined(TRACE_HEADER_MULTI_READ)\n+#define KVM_ARM64_TRACE_KVM_H\n+\n+#include \u003clinux/tracepoint.h\u003e\n+\n+#undef TRACE_SYSTEM\n+#define TRACE_SYSTEM kvm\n+\n+TRACE_EVENT(kvm_irq_line,\n+\tTP_PROTO(unsigned int type, int vcpu_idx, int irq_num, int level),\n+\tTP_ARGS(type, vcpu_idx, irq_num, level),\n+\n+\tTP_STRUCT__entry(\n+\t\t__field(\tunsigned int,\ttype\t\t)\n+\t\t__field(\tint,\t\tvcpu_idx\t)\n+\t\t__field(\tint,\t\tirq_num\t\t)\n+\t\t__field(\tint,\t\tlevel\t\t)\n+\t),\n+\n+\tTP_fast_assign(\n+\t\t__entry-\u003etype\t\t= type;\n+\t\t__entry-\u003evcpu_idx\t= vcpu_idx;\n+\t\t__entry-\u003eirq_num\t= irq_num;\n+\t\t__entry-\u003elevel\t\t= level;\n+\t),\n+\n+\tTP_printk(\"Inject %s interrupt (%d), vcpu-\u003eidx: %d, num: %d, level: %d\",\n+\t\t  (__entry-\u003etype == KVM_ARM_IRQ_TYPE_CPU) ? \"CPU\" :\n+\t\t  (__entry-\u003etype == KVM_ARM_IRQ_TYPE_PPI) ? \"VGIC PPI\" :\n+\t\t  (__entry-\u003etype == KVM_ARM_IRQ_TYPE_SPI) ? \"VGIC SPI\" : \"UNKNOWN\",\n+\t\t  __entry-\u003etype, __entry-\u003evcpu_idx, __entry-\u003eirq_num, __entry-\u003elevel)\n+);\n+\n+TRACE_EVENT(kvm_mmio_nisv,\n+\tTP_PROTO(unsigned long vcpu_pc, unsigned long esr,\n+\t\t unsigned long far, unsigned long ipa),\n+\tTP_ARGS(vcpu_pc, esr, far, ipa),\n+\n+\tTP_STRUCT__entry(\n+\t\t__field(\tunsigned long,\tvcpu_pc\t\t)\n+\t\t__field(\tunsigned long,\tesr\t\t)\n+\t\t__field(\tunsigned long,\tfar\t\t)\n+\t\t__field(\tunsigned long,\tipa\t\t)\n+\t),\n+\n+\tTP_fast_assign(\n+\t\t__entry-\u003evcpu_pc\t\t= vcpu_pc;\n+\t\t__entry-\u003eesr\t\t\t= esr;\n+\t\t__entry-\u003efar\t\t\t= far;\n+\t\t__entry-\u003eipa\t\t\t= ipa;\n+\t),\n+\n+\tTP_printk(\"ipa %#016lx, esr %#016lx, far %#016lx, pc %#016lx\",\n+\t\t  __entry-\u003eipa, __entry-\u003eesr,\n+\t\t  __entry-\u003efar, __entry-\u003evcpu_pc)\n+);\n+\n+#endif /* KVM_ARM64_TRACE_KVM_H */\n+\n+#undef TRACE_INCLUDE_PATH\n+#define TRACE_INCLUDE_PATH .\n+#undef TRACE_INCLUDE_FILE\n+#define TRACE_INCLUDE_FILE trace\n+\n+/* This part must be outside protection */\n+#include \u003ctrace/define_trace.h\u003e\ndiff --git a/arch/s390/kvm/gmap/Makefile b/arch/s390/kvm/gmap/Makefile\nnew file mode 100644\nindex 0000000000000..02b797f63ffbb\n--- /dev/null\n+++ b/arch/s390/kvm/gmap/Makefile\n@@ -0,0 +1,5 @@\n+# SPDX-License-Identifier: GPL-2.0\n+\n+GMAP ?= ../gmap\n+\n+kvm-y += $(GMAP)/dat.o $(GMAP)/gmap.o $(GMAP)/faultin.o $(GMAP)/kvm_mmu.o\ndiff --git a/arch/s390/kvm/dat.c b/arch/s390/kvm/gmap/dat.c\nsimilarity index 61%\nrename from arch/s390/kvm/dat.c\nrename to arch/s390/kvm/gmap/dat.c\nindex ed4259d176295..6252a7cd81a8a 100644\n--- a/arch/s390/kvm/dat.c\n+++ b/arch/s390/kvm/gmap/dat.c\n@@ -613,229 +613,6 @@ long _dat_walk_gfn_range(gfn_t start, gfn_t end, union asce asce,\n \treturn dat_crste_walk_range(start, min(end, asce_end(asce)), table, \u0026walk);\n }\n \n-int dat_get_storage_key(union asce asce, gfn_t gfn, union skey *skey)\n-{\n-\tunion crste *crstep;\n-\tunion pgste pgste;\n-\tunion pte *ptep;\n-\tint rc;\n-\n-\tskey-\u003eskey = 0;\n-\trc = dat_entry_walk(NULL, gfn, asce, DAT_WALK_ANY, TABLE_TYPE_PAGE_TABLE, \u0026crstep, \u0026ptep);\n-\tif (rc)\n-\t\treturn rc;\n-\n-\tif (!ptep) {\n-\t\tunion crste crste;\n-\n-\t\tcrste = READ_ONCE(*crstep);\n-\t\tif (!crste.h.fc || !crste.s.fc1.pr)\n-\t\t\treturn 0;\n-\t\tskey-\u003eskey = page_get_storage_key(large_crste_to_phys(crste, gfn));\n-\t\treturn 0;\n-\t}\n-\tpgste = pgste_get_lock(ptep);\n-\tif (ptep-\u003eh.i) {\n-\t\tskey-\u003eacc = pgste.acc;\n-\t\tskey-\u003efp = pgste.fp;\n-\t} else {\n-\t\tskey-\u003eskey = page_get_storage_key(pte_origin(*ptep));\n-\t}\n-\tskey-\u003er |= pgste.gr;\n-\tskey-\u003ec |= pgste.gc;\n-\tpgste_set_unlock(ptep, pgste);\n-\treturn 0;\n-}\n-\n-static void dat_update_ptep_sd(union pgste old, union pgste pgste, union pte *ptep)\n-{\n-\tif (pgste.acc != old.acc || pgste.fp != old.fp || pgste.gr != old.gr || pgste.gc != old.gc)\n-\t\t__atomic64_or(_PAGE_SD, \u0026ptep-\u003eval);\n-}\n-\n-int dat_set_storage_key(struct kvm_s390_mmu_cache *mc, union asce asce, gfn_t gfn,\n-\t\t\tunion skey skey, bool nq)\n-{\n-\tunion pgste pgste, old;\n-\tunion crste *crstep;\n-\tunion pte *ptep;\n-\tint rc;\n-\n-\trc = dat_entry_walk(mc, gfn, asce, DAT_WALK_LEAF_ALLOC, TABLE_TYPE_PAGE_TABLE,\n-\t\t\t    \u0026crstep, \u0026ptep);\n-\tif (rc)\n-\t\treturn rc;\n-\n-\tif (!ptep) {\n-\t\tpage_set_storage_key(large_crste_to_phys(*crstep, gfn), skey.skey, !nq);\n-\t\treturn 0;\n-\t}\n-\n-\told = pgste_get_lock(ptep);\n-\tpgste = old;\n-\n-\tpgste.acc = skey.acc;\n-\tpgste.fp = skey.fp;\n-\tpgste.gc = skey.c;\n-\tpgste.gr = skey.r;\n-\n-\tif (!ptep-\u003eh.i) {\n-\t\tunion skey old_skey;\n-\n-\t\told_skey.skey = page_get_storage_key(pte_origin(*ptep));\n-\t\tpgste.hc |= old_skey.c;\n-\t\tpgste.hr |= old_skey.r;\n-\t\told_skey.c = old.gc;\n-\t\told_skey.r = old.gr;\n-\t\tskey.r = 0;\n-\t\tskey.c = 0;\n-\t\tpage_set_storage_key(pte_origin(*ptep), skey.skey, !nq);\n-\t}\n-\n-\tdat_update_ptep_sd(old, pgste, ptep);\n-\tpgste_set_unlock(ptep, pgste);\n-\treturn 0;\n-}\n-\n-static bool page_cond_set_storage_key(phys_addr_t paddr, union skey skey, union skey *oldkey,\n-\t\t\t\t      bool nq, bool mr, bool mc)\n-{\n-\toldkey-\u003eskey = page_get_storage_key(paddr);\n-\tif (oldkey-\u003eacc == skey.acc \u0026\u0026 oldkey-\u003efp == skey.fp \u0026\u0026\n-\t    (oldkey-\u003er == skey.r || mr) \u0026\u0026 (oldkey-\u003ec == skey.c || mc))\n-\t\treturn false;\n-\tpage_set_storage_key(paddr, skey.skey, !nq);\n-\treturn true;\n-}\n-\n-int dat_cond_set_storage_key(struct kvm_s390_mmu_cache *mmc, union asce asce, gfn_t gfn,\n-\t\t\t     union skey skey, union skey *oldkey, bool nq, bool mr, bool mc)\n-{\n-\tunion pgste pgste, old;\n-\tunion crste *crstep;\n-\tunion skey prev;\n-\tunion pte *ptep;\n-\tint rc;\n-\n-\trc = dat_entry_walk(mmc, gfn, asce, DAT_WALK_LEAF_ALLOC, TABLE_TYPE_PAGE_TABLE,\n-\t\t\t    \u0026crstep, \u0026ptep);\n-\tif (rc)\n-\t\treturn rc;\n-\n-\tif (!ptep)\n-\t\treturn page_cond_set_storage_key(large_crste_to_phys(*crstep, gfn), skey, oldkey,\n-\t\t\t\t\t\t nq, mr, mc);\n-\n-\told = pgste_get_lock(ptep);\n-\tpgste = old;\n-\n-\trc = 1;\n-\tpgste.acc = skey.acc;\n-\tpgste.fp = skey.fp;\n-\tpgste.gc = skey.c;\n-\tpgste.gr = skey.r;\n-\n-\tif (!ptep-\u003eh.i) {\n-\t\trc = page_cond_set_storage_key(pte_origin(*ptep), skey, \u0026prev, nq, mr, mc);\n-\t\tpgste.hc |= prev.c;\n-\t\tpgste.hr |= prev.r;\n-\t\tprev.c |= old.gc;\n-\t\tprev.r |= old.gr;\n-\t} else {\n-\t\tprev.acc = old.acc;\n-\t\tprev.fp = old.fp;\n-\t\tprev.c = old.gc;\n-\t\tprev.r = old.gr;\n-\t}\n-\tif (oldkey)\n-\t\t*oldkey = prev;\n-\n-\tdat_update_ptep_sd(old, pgste, ptep);\n-\tpgste_set_unlock(ptep, pgste);\n-\treturn rc;\n-}\n-\n-int dat_reset_reference_bit(union asce asce, gfn_t gfn)\n-{\n-\tunion pgste pgste, old;\n-\tunion crste *crstep;\n-\tunion pte *ptep;\n-\tint rc;\n-\n-\trc = dat_entry_walk(NULL, gfn, asce, DAT_WALK_ANY, TABLE_TYPE_PAGE_TABLE, \u0026crstep, \u0026ptep);\n-\tif (rc)\n-\t\treturn rc;\n-\n-\tif (!ptep) {\n-\t\tunion crste crste = READ_ONCE(*crstep);\n-\n-\t\tif (!crste.h.fc || !crste.s.fc1.pr)\n-\t\t\treturn 0;\n-\t\treturn page_reset_referenced(large_crste_to_phys(*crstep, gfn));\n-\t}\n-\told = pgste_get_lock(ptep);\n-\tpgste = old;\n-\n-\tif (!ptep-\u003eh.i) {\n-\t\trc = page_reset_referenced(pte_origin(*ptep));\n-\t\tpgste.hr = rc \u003e\u003e 1;\n-\t}\n-\trc |= (pgste.gr \u003c\u003c 1) | pgste.gc;\n-\tpgste.gr = 0;\n-\n-\tdat_update_ptep_sd(old, pgste, ptep);\n-\tpgste_set_unlock(ptep, pgste);\n-\treturn rc;\n-}\n-\n-static long dat_reset_skeys_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n-{\n-\tunion pgste pgste;\n-\n-\tpgste = pgste_get_lock(ptep);\n-\tpgste.acc = 0;\n-\tpgste.fp = 0;\n-\tpgste.gr = 0;\n-\tpgste.gc = 0;\n-\tif (ptep-\u003es.pr)\n-\t\tpage_set_storage_key(pte_origin(*ptep), PAGE_DEFAULT_KEY, 1);\n-\tpgste_set_unlock(ptep, pgste);\n-\n-\tif (need_resched())\n-\t\treturn next;\n-\treturn 0;\n-}\n-\n-static long dat_reset_skeys_crste(union crste *crstep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n-{\n-\tphys_addr_t addr, end, origin = crste_origin_large(*crstep);\n-\n-\tif (!crstep-\u003eh.fc || !crstep-\u003es.fc1.pr)\n-\t\treturn 0;\n-\n-\taddr = ((max(gfn, walk-\u003estart) - gfn) \u003c\u003c PAGE_SHIFT) + origin;\n-\tend = ((min(next, walk-\u003eend) - gfn) \u003c\u003c PAGE_SHIFT) + origin;\n-\twhile (ALIGN(addr + 1, _SEGMENT_SIZE) \u003c= end)\n-\t\taddr = sske_frame(addr, PAGE_DEFAULT_KEY);\n-\tfor ( ; addr \u003c end; addr += PAGE_SIZE)\n-\t\tpage_set_storage_key(addr, PAGE_DEFAULT_KEY, 1);\n-\n-\tif (need_resched())\n-\t\treturn next;\n-\treturn 0;\n-}\n-\n-long dat_reset_skeys(union asce asce, gfn_t start)\n-{\n-\tconst struct dat_walk_ops ops = {\n-\t\t.pte_entry = dat_reset_skeys_pte,\n-\t\t.pmd_entry = dat_reset_skeys_crste,\n-\t\t.pud_entry = dat_reset_skeys_crste,\n-\t};\n-\n-\treturn _dat_walk_gfn_range(start, asce_end(asce), asce, \u0026ops, DAT_WALK_IGN_HOLES, NULL);\n-}\n-\n struct slot_priv {\n \tunsigned long token;\n \tstruct kvm_s390_mmu_cache *mc;\n@@ -1000,328 +777,3 @@ bool dat_test_age_gfn(union asce asce, gfn_t start, gfn_t end)\n \treturn _dat_walk_gfn_range(start, end, asce, \u0026test_age_ops, 0, NULL) \u003e 0;\n }\n \n-static long dat_set_pn_crste(union crste *crstep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n-{\n-\tunion crste newcrste, oldcrste;\n-\tint *n = walk-\u003epriv;\n-\n-\tdo {\n-\t\toldcrste = READ_ONCE(*crstep);\n-\t\tif (!oldcrste.h.fc || oldcrste.h.i || oldcrste.h.p)\n-\t\t\treturn 0;\n-\t\tif (oldcrste.s.fc1.prefix_notif)\n-\t\t\tbreak;\n-\t\tnewcrste = oldcrste;\n-\t\tnewcrste.s.fc1.prefix_notif = 1;\n-\t} while (!dat_crstep_xchg_atomic(crstep, oldcrste, newcrste, gfn, walk-\u003easce));\n-\t*n = 2;\n-\treturn 0;\n-}\n-\n-static long dat_set_pn_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n-{\n-\tint *n = walk-\u003epriv;\n-\tunion pgste pgste;\n-\n-\tpgste = pgste_get_lock(ptep);\n-\tif (!ptep-\u003eh.i \u0026\u0026 !ptep-\u003eh.p) {\n-\t\tpgste.prefix_notif = 1;\n-\t\t*n += 1;\n-\t}\n-\tpgste_set_unlock(ptep, pgste);\n-\treturn 0;\n-}\n-\n-int dat_set_prefix_notif_bit(union asce asce, gfn_t gfn)\n-{\n-\tstatic const struct dat_walk_ops ops = {\n-\t\t.pte_entry = dat_set_pn_pte,\n-\t\t.pmd_entry = dat_set_pn_crste,\n-\t\t.pud_entry = dat_set_pn_crste,\n-\t};\n-\n-\tint n = 0;\n-\n-\t_dat_walk_gfn_range(gfn, gfn + 2, asce, \u0026ops, DAT_WALK_IGN_HOLES, \u0026n);\n-\tif (n != 2)\n-\t\treturn -EAGAIN;\n-\treturn 0;\n-}\n-\n-/**\n- * dat_perform_essa() - Perform ESSA actions on the PGSTE.\n- * @asce: The asce to operate on.\n- * @gfn: The guest page frame to operate on.\n- * @orc: The specific action to perform, see the ESSA_SET_* macros.\n- * @state: The storage attributes to be returned to the guest.\n- * @dirty: Returns whether the function dirtied a previously clean entry.\n- *\n- * Context: Called with kvm-\u003emmu_lock held.\n- *\n- * Return:\n- * * %1 if the page state has been altered and the page is to be added to the CBRL\n- * * %0 if the page state has been altered, but the page is not to be added to the CBRL\n- * * %-1 if the page state has not been altered and the page is not to be added to the CBRL\n- */\n-int dat_perform_essa(union asce asce, gfn_t gfn, int orc, union essa_state *state, bool *dirty)\n-{\n-\tunion crste *crstep;\n-\tunion pgste pgste;\n-\tunion pte *ptep;\n-\tint res = 0;\n-\n-\tif (dat_entry_walk(NULL, gfn, asce, 0, TABLE_TYPE_PAGE_TABLE, \u0026crstep, \u0026ptep)) {\n-\t\t*state = (union essa_state) { .exception = 1 };\n-\t\treturn -1;\n-\t}\n-\n-\tpgste = pgste_get_lock(ptep);\n-\n-\t*state = (union essa_state) {\n-\t\t.content = (ptep-\u003eh.i \u003c\u003c 1) + (ptep-\u003eh.i \u0026\u0026 pgste.zero),\n-\t\t.nodat = pgste.nodat,\n-\t\t.usage = pgste.usage,\n-\t\t};\n-\n-\tswitch (orc) {\n-\tcase ESSA_GET_STATE:\n-\t\tres = -1;\n-\t\tbreak;\n-\tcase ESSA_SET_STABLE:\n-\t\tpgste.usage = PGSTE_GPS_USAGE_STABLE;\n-\t\tpgste.nodat = 0;\n-\t\tbreak;\n-\tcase ESSA_SET_UNUSED:\n-\t\tpgste.usage = PGSTE_GPS_USAGE_UNUSED;\n-\t\tif (ptep-\u003eh.i)\n-\t\t\tres = 1;\n-\t\tbreak;\n-\tcase ESSA_SET_VOLATILE:\n-\t\tpgste.usage = PGSTE_GPS_USAGE_VOLATILE;\n-\t\tif (ptep-\u003eh.i)\n-\t\t\tres = 1;\n-\t\tbreak;\n-\tcase ESSA_SET_POT_VOLATILE:\n-\t\tif (!ptep-\u003eh.i) {\n-\t\t\tpgste.usage = PGSTE_GPS_USAGE_POT_VOLATILE;\n-\t\t} else if (pgste.zero) {\n-\t\t\tpgste.usage = PGSTE_GPS_USAGE_VOLATILE;\n-\t\t} else if (!pgste.gc) {\n-\t\t\tpgste.usage = PGSTE_GPS_USAGE_VOLATILE;\n-\t\t\tres = 1;\n-\t\t}\n-\t\tbreak;\n-\tcase ESSA_SET_STABLE_RESIDENT:\n-\t\tpgste.usage = PGSTE_GPS_USAGE_STABLE;\n-\t\t/*\n-\t\t * Since the resident state can go away any time after this\n-\t\t * call, we will not make this page resident. We can revisit\n-\t\t * this decision if a guest will ever start using this.\n-\t\t */\n-\t\tbreak;\n-\tcase ESSA_SET_STABLE_IF_RESIDENT:\n-\t\tif (!ptep-\u003eh.i)\n-\t\t\tpgste.usage = PGSTE_GPS_USAGE_STABLE;\n-\t\tbreak;\n-\tcase ESSA_SET_STABLE_NODAT:\n-\t\tpgste.usage = PGSTE_GPS_USAGE_STABLE;\n-\t\tpgste.nodat = 1;\n-\t\tbreak;\n-\tdefault:\n-\t\tWARN_ONCE(1, \"Invalid ORC!\");\n-\t\tres = -1;\n-\t\tbreak;\n-\t}\n-\t/* If we are discarding a page, set it to logical zero. */\n-\tpgste.zero = res == 1;\n-\tif (orc \u003e 0) {\n-\t\t*dirty = !pgste.cmma_d;\n-\t\tpgste.cmma_d = 1;\n-\t}\n-\n-\tpgste_set_unlock(ptep, pgste);\n-\n-\treturn res;\n-}\n-\n-static long dat_reset_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n-{\n-\tunion pgste pgste;\n-\n-\tpgste = pgste_get_lock(ptep);\n-\tpgste.usage = 0;\n-\tpgste.nodat = 0;\n-\tpgste.cmma_d = 0;\n-\tpgste_set_unlock(ptep, pgste);\n-\tif (need_resched())\n-\t\treturn next;\n-\treturn 0;\n-}\n-\n-long dat_reset_cmma(union asce asce, gfn_t start)\n-{\n-\tconst struct dat_walk_ops dat_reset_cmma_ops = {\n-\t\t.pte_entry = dat_reset_cmma_pte,\n-\t};\n-\n-\treturn _dat_walk_gfn_range(start, asce_end(asce), asce, \u0026dat_reset_cmma_ops,\n-\t\t\t\t   DAT_WALK_IGN_HOLES, NULL);\n-}\n-\n-struct dat_get_cmma_state {\n-\tgfn_t start;\n-\tgfn_t end;\n-\tunsigned int count;\n-\tu8 *values;\n-\tatomic64_t *remaining;\n-};\n-\n-static long __dat_peek_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n-{\n-\tstruct dat_get_cmma_state *state = walk-\u003epriv;\n-\tunion pgste pgste;\n-\n-\tpgste = pgste_get_lock(ptep);\n-\tstate-\u003evalues[gfn - walk-\u003estart] = pgste.usage | (pgste.nodat \u003c\u003c 6);\n-\tpgste_set_unlock(ptep, pgste);\n-\tstate-\u003eend = next;\n-\n-\treturn 0;\n-}\n-\n-static long __dat_peek_cmma_crste(union crste *crstep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n-{\n-\tstruct dat_get_cmma_state *state = walk-\u003epriv;\n-\n-\tif (crstep-\u003eh.i)\n-\t\tstate-\u003eend = min(walk-\u003eend, next);\n-\treturn 0;\n-}\n-\n-int dat_peek_cmma(gfn_t start, union asce asce, unsigned int *count, u8 *values)\n-{\n-\tconst struct dat_walk_ops ops = {\n-\t\t.pte_entry = __dat_peek_cmma_pte,\n-\t\t.pmd_entry = __dat_peek_cmma_crste,\n-\t\t.pud_entry = __dat_peek_cmma_crste,\n-\t\t.p4d_entry = __dat_peek_cmma_crste,\n-\t\t.pgd_entry = __dat_peek_cmma_crste,\n-\t};\n-\tstruct dat_get_cmma_state state = { .values = values, };\n-\tint rc;\n-\n-\trc = _dat_walk_gfn_range(start, start + *count, asce, \u0026ops, DAT_WALK_DEFAULT, \u0026state);\n-\t*count = state.end \u003e= start ? state.end - start : 0;\n-\t/* Return success if at least one value was saved, otherwise an error. */\n-\treturn (rc == -EFAULT \u0026\u0026 *count \u003e 0) ? 0 : rc;\n-}\n-\n-static long __dat_get_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n-{\n-\tstruct dat_get_cmma_state *state = walk-\u003epriv;\n-\tunion pgste pgste;\n-\n-\tif (state-\u003estart != -1) {\n-\t\tif ((gfn - state-\u003eend) \u003e KVM_S390_MAX_BIT_DISTANCE)\n-\t\t\treturn 1;\n-\t\tif (gfn - state-\u003estart \u003e= state-\u003ecount)\n-\t\t\treturn 1;\n-\t}\n-\n-\tif (!READ_ONCE(*pgste_of(ptep)).cmma_d)\n-\t\treturn 0;\n-\n-\tpgste = pgste_get_lock(ptep);\n-\tif (pgste.cmma_d) {\n-\t\tif (state-\u003estart == -1)\n-\t\t\tstate-\u003estart = gfn;\n-\t\tpgste.cmma_d = 0;\n-\t\tatomic64_dec(state-\u003eremaining);\n-\t\tstate-\u003evalues[gfn - state-\u003estart] = pgste.usage | pgste.nodat \u003c\u003c 6;\n-\t\tstate-\u003eend = next;\n-\t}\n-\tpgste_set_unlock(ptep, pgste);\n-\treturn 0;\n-}\n-\n-int dat_get_cmma(union asce asce, gfn_t *start, unsigned int *count, u8 *values, atomic64_t *rem)\n-{\n-\tconst struct dat_walk_ops ops = { .pte_entry = __dat_get_cmma_pte, };\n-\tstruct dat_get_cmma_state state = {\n-\t\t.remaining = rem,\n-\t\t.values = values,\n-\t\t.count = *count,\n-\t\t.start = -1,\n-\t};\n-\n-\t_dat_walk_gfn_range(*start, asce_end(asce), asce, \u0026ops, DAT_WALK_IGN_HOLES, \u0026state);\n-\t/* If no dirty pages were found, wrap around and continue searching */\n-\tif (*start \u0026\u0026 state.start == -1)\n-\t\t_dat_walk_gfn_range(0, *start, asce, \u0026ops, DAT_WALK_IGN_HOLES, \u0026state);\n-\n-\tif (state.start == -1) {\n-\t\t*count = 0;\n-\t} else {\n-\t\t*count = state.end - state.start;\n-\t\t*start = state.start;\n-\t}\n-\n-\treturn 0;\n-}\n-\n-struct dat_set_cmma_state {\n-\tunsigned long mask;\n-\tconst u8 *bits;\n-};\n-\n-static long __dat_set_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n-{\n-\tstruct dat_set_cmma_state *state = walk-\u003epriv;\n-\tunion pgste pgste, tmp;\n-\n-\ttmp.val = (state-\u003ebits[gfn - walk-\u003estart] \u003c\u003c 24) \u0026 state-\u003emask;\n-\n-\tpgste = pgste_get_lock(ptep);\n-\tpgste.usage = tmp.usage;\n-\tpgste.nodat = tmp.nodat;\n-\tpgste_set_unlock(ptep, pgste);\n-\n-\treturn 0;\n-}\n-\n-/**\n- * dat_set_cmma_bits() - Set CMMA bits for a range of guest pages.\n- * @mc: Cache used for allocations.\n- * @asce: The ASCE of the guest.\n- * @gfn: The guest frame of the fist page whose CMMA bits are to set.\n- * @count: How many pages need to be processed.\n- * @mask: Which PGSTE bits should be set.\n- * @bits: Points to an array with the CMMA attributes.\n- *\n- * This function sets the CMMA attributes for the given pages. If the input\n- * buffer has zero length, no action is taken, otherwise the attributes are\n- * set and the mm-\u003econtext.uses_cmm flag is set.\n- *\n- * Each byte in @bits contains new values for bits 32-39 of the PGSTE.\n- * Currently, only the fields NT and US are applied.\n- *\n- * Return: %0 in case of success, a negative error value otherwise.\n- */\n-int dat_set_cmma_bits(struct kvm_s390_mmu_cache *mc, union asce asce, gfn_t gfn,\n-\t\t      unsigned long count, unsigned long mask, const uint8_t *bits)\n-{\n-\tconst struct dat_walk_ops ops = { .pte_entry = __dat_set_cmma_pte, };\n-\tstruct dat_set_cmma_state state = { .mask = mask, .bits = bits, };\n-\tunion crste *crstep;\n-\tunion pte *ptep;\n-\tgfn_t cur;\n-\tint rc;\n-\n-\tfor (cur = ALIGN_DOWN(gfn, _PAGE_ENTRIES); cur \u003c gfn + count; cur += _PAGE_ENTRIES) {\n-\t\trc = dat_entry_walk(mc, cur, asce, DAT_WALK_ALLOC, TABLE_TYPE_PAGE_TABLE,\n-\t\t\t\t    \u0026crstep, \u0026ptep);\n-\t\tif (rc)\n-\t\t\treturn rc;\n-\t}\n-\treturn _dat_walk_gfn_range(gfn, gfn + count, asce, \u0026ops, DAT_WALK_IGN_HOLES, \u0026state);\n-}\ndiff --git a/arch/s390/kvm/dat.h b/arch/s390/kvm/gmap/dat.h\nsimilarity index 97%\nrename from arch/s390/kvm/dat.h\nrename to arch/s390/kvm/gmap/dat.h\nindex fad605305e05c..fb412bd07685d 100644\n--- a/arch/s390/kvm/dat.h\n+++ b/arch/s390/kvm/gmap/dat.h\n@@ -6,8 +6,8 @@\n  *    Author(s): Claudio Imbrenda \u003cimbrenda@linux.ibm.com\u003e\n  */\n \n-#ifndef __KVM_S390_DAT_H\n-#define __KVM_S390_DAT_H\n+#ifndef ARCH_KVM_GMAP_DAT_H\n+#define ARCH_KVM_GMAP_DAT_H\n \n #include \u003clinux/radix-tree.h\u003e\n #include \u003clinux/refcount.h\u003e\n@@ -532,20 +532,12 @@ int dat_entry_walk(struct kvm_s390_mmu_cache *mc, gfn_t gfn, union asce asce, in\n void dat_free_level(struct crst_table *table, bool owns_ptes);\n struct crst_table *dat_alloc_crst_sleepable(unsigned long init);\n int dat_set_asce_limit(struct kvm_s390_mmu_cache *mc, union asce *asce, int newtype);\n-int dat_get_storage_key(union asce asce, gfn_t gfn, union skey *skey);\n-int dat_set_storage_key(struct kvm_s390_mmu_cache *mc, union asce asce, gfn_t gfn,\n-\t\t\tunion skey skey, bool nq);\n-int dat_cond_set_storage_key(struct kvm_s390_mmu_cache *mmc, union asce asce, gfn_t gfn,\n-\t\t\t     union skey skey, union skey *oldkey, bool nq, bool mr, bool mc);\n-int dat_reset_reference_bit(union asce asce, gfn_t gfn);\n-long dat_reset_skeys(union asce asce, gfn_t start);\n \n unsigned long dat_get_ptval(struct page_table *table, struct ptval_param param);\n void dat_set_ptval(struct page_table *table, struct ptval_param param, unsigned long val);\n \n int dat_set_slot(struct kvm_s390_mmu_cache *mc, union asce asce, gfn_t start, gfn_t end,\n \t\t u16 type, u16 param);\n-int dat_set_prefix_notif_bit(union asce asce, gfn_t gfn);\n bool dat_test_age_gfn(union asce asce, gfn_t start, gfn_t end);\n \n int dat_perform_essa(union asce asce, gfn_t gfn, int orc, union essa_state *state, bool *dirty);\n@@ -975,4 +967,4 @@ static inline bool crste_is_ucas(union crste crste)\n \treturn is_pmd(crste) \u0026\u0026 crste.h.i \u0026\u0026 crste.h.fc0.tl == 1 \u0026\u0026 crste.h.fc == 0;\n }\n \n-#endif /* __KVM_S390_DAT_H */\n+#endif /* ARCH_KVM_GMAP_DAT_H */\ndiff --git a/arch/s390/kvm/faultin.c b/arch/s390/kvm/gmap/faultin.c\nsimilarity index 96%\nrename from arch/s390/kvm/faultin.c\nrename to arch/s390/kvm/gmap/faultin.c\nindex fee80047bd94f..800e129ca40c9 100644\n--- a/arch/s390/kvm/faultin.c\n+++ b/arch/s390/kvm/gmap/faultin.c\n@@ -9,10 +9,16 @@\n #include \u003clinux/kvm_host.h\u003e\n \n #include \"gmap.h\"\n-#include \"trace.h\"\n #include \"faultin.h\"\n+#ifdef KVM_S390_ARM64\n+#include \"arm.h\"\n+#else\n+#include \"s390.h\"\n+#endif\n \n bool kvm_arch_setup_async_pf(struct kvm_vcpu *vcpu);\n+#define CREATE_TRACE_POINTS\n+#include \"trace-gmap.h\"\n \n /*\n  * kvm_s390_faultin_gfn() - handle a dat fault.\ndiff --git a/arch/s390/kvm/faultin.h b/arch/s390/kvm/gmap/faultin.h\nsimilarity index 96%\nrename from arch/s390/kvm/faultin.h\nrename to arch/s390/kvm/gmap/faultin.h\nindex f86176d2769c5..f343b6fb6f16a 100644\n--- a/arch/s390/kvm/faultin.h\n+++ b/arch/s390/kvm/gmap/faultin.h\n@@ -6,8 +6,8 @@\n  *    Author(s): Claudio Imbrenda \u003cimbrenda@linux.ibm.com\u003e\n  */\n \n-#ifndef __KVM_S390_FAULTIN_H\n-#define __KVM_S390_FAULTIN_H\n+#ifndef ARCH_KVM_GMAP_FAULTIN_H\n+#define ARCH_KVM_GMAP_FAULTIN_H\n \n #include \u003clinux/kvm_host.h\u003e\n \n@@ -89,4 +89,4 @@ static inline int kvm_s390_get_guest_pages(struct kvm *kvm, struct guest_fault *\n #define kvm_s390_array_needs_retry_safe(kvm, seq, array) \\\n \tkvm_s390_multiple_faults_need_retry(kvm, seq, array, ARRAY_SIZE(array), false)\n \n-#endif /* __KVM_S390_FAULTIN_H */\n+#endif /* ARCH_KVM_GMAP_FAULTIN_H */\ndiff --git a/arch/s390/kvm/gmap.c b/arch/s390/kvm/gmap/gmap.c\nsimilarity index 93%\nrename from arch/s390/kvm/gmap.c\nrename to arch/s390/kvm/gmap/gmap.c\nindex 8abb4f55b306b..492a12a3a4499 100644\n--- a/arch/s390/kvm/gmap.c\n+++ b/arch/s390/kvm/gmap/gmap.c\n@@ -21,14 +21,13 @@\n \n #include \"dat.h\"\n #include \"gmap.h\"\n-#include \"kvm-s390.h\"\n+#ifdef KVM_S390_ARM64\n+#include \"arm.h\"\n+#else\n+#include \"s390.h\"\n+#endif\n #include \"faultin.h\"\n \n-static inline bool kvm_s390_is_in_sie(struct kvm_vcpu *vcpu)\n-{\n-\treturn vcpu-\u003earch.sie_block-\u003eprog0c \u0026 PROG_IN_SIE;\n-}\n-\n static int gmap_limit_to_type(gfn_t limit)\n {\n \tif (!limit)\n@@ -256,29 +255,6 @@ int s390_replace_asce(struct gmap *gmap)\n \treturn 0;\n }\n \n-bool _gmap_unmap_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end, bool hint)\n-{\n-\tstruct kvm *kvm = gmap-\u003ekvm;\n-\tstruct kvm_vcpu *vcpu;\n-\tgfn_t prefix_gfn;\n-\tunsigned long i;\n-\n-\tif (is_shadow(gmap))\n-\t\treturn false;\n-\tkvm_for_each_vcpu(i, vcpu, kvm) {\n-\t\t/* Match against both prefix pages */\n-\t\tprefix_gfn = gpa_to_gfn(kvm_s390_get_prefix(vcpu));\n-\t\tif (prefix_gfn \u003c end \u0026\u0026 gfn \u003c= prefix_gfn + 1) {\n-\t\t\tif (hint \u0026\u0026 kvm_s390_is_in_sie(vcpu))\n-\t\t\t\treturn false;\n-\t\t\tVCPU_EVENT(vcpu, 2, \"gmap notifier for %llx-%llx\",\n-\t\t\t\t   gfn_to_gpa(gfn), gfn_to_gpa(end));\n-\t\t\tkvm_s390_sync_request(KVM_REQ_REFRESH_GUEST_PREFIX, vcpu);\n-\t\t}\n-\t}\n-\treturn true;\n-}\n-\n struct clear_young_pte_priv {\n \tstruct gmap *gmap;\n \tbool young;\n@@ -945,39 +921,6 @@ void gmap_split_huge_pages(struct gmap *gmap)\n \t} while (start);\n }\n \n-static int _gmap_enable_skeys(struct gmap *gmap)\n-{\n-\tgfn_t start = 0;\n-\tint rc;\n-\n-\tif (uses_skeys(gmap))\n-\t\treturn 0;\n-\n-\tset_bit(GMAP_FLAG_USES_SKEYS, \u0026gmap-\u003eflags);\n-\trc = gmap_helper_disable_cow_sharing();\n-\tif (rc) {\n-\t\tclear_bit(GMAP_FLAG_USES_SKEYS, \u0026gmap-\u003eflags);\n-\t\treturn rc;\n-\t}\n-\n-\tdo {\n-\t\tscoped_guard(write_lock, \u0026gmap-\u003ekvm-\u003emmu_lock)\n-\t\t\tstart = dat_reset_skeys(gmap-\u003easce, start);\n-\t\tcond_resched();\n-\t} while (start);\n-\treturn 0;\n-}\n-\n-int gmap_enable_skeys(struct gmap *gmap)\n-{\n-\tint rc;\n-\n-\tmmap_write_lock(gmap-\u003ekvm-\u003emm);\n-\trc = _gmap_enable_skeys(gmap);\n-\tmmap_write_unlock(gmap-\u003ekvm-\u003emm);\n-\treturn rc;\n-}\n-\n static long _destroy_pages_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n {\n \tif (!ptep-\u003es.pr)\n@@ -1098,50 +1041,6 @@ int gmap_protect_rmap(struct kvm_s390_mmu_cache *mc, struct gmap *sg, gfn_t p_gf\n \treturn 0;\n }\n \n-static long __set_cmma_clean_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n-{\n-\tunion pgste pgste;\n-\n-\tpgste = pgste_get_lock(ptep);\n-\tpgste.cmma_d = 0;\n-\tpgste_set_unlock(ptep, pgste);\n-\n-\tif (need_resched())\n-\t\treturn next;\n-\treturn 0;\n-}\n-\n-static long __set_cmma_dirty_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n-{\n-\tunion pgste pgste;\n-\n-\tpgste = pgste_get_lock(ptep);\n-\tif (!pgste.cmma_d)\n-\t\tatomic64_inc(walk-\u003epriv);\n-\tpgste.cmma_d = 1;\n-\tpgste_set_unlock(ptep, pgste);\n-\n-\tif (need_resched())\n-\t\treturn next;\n-\treturn 0;\n-}\n-\n-void _gmap_set_cmma_all(struct gmap *gmap, bool dirty)\n-{\n-\tconst struct dat_walk_ops ops = {\n-\t\t.pte_entry = dirty ? __set_cmma_dirty_pte : __set_cmma_clean_pte,\n-\t};\n-\tgfn_t gfn = 0;\n-\n-\tdo {\n-\t\tscoped_guard(read_lock, \u0026gmap-\u003ekvm-\u003emmu_lock)\n-\t\t\tgfn = _dat_walk_gfn_range(gfn, asce_end(gmap-\u003easce), gmap-\u003easce, \u0026ops,\n-\t\t\t\t\t\t  DAT_WALK_IGN_HOLES,\n-\t\t\t\t\t\t  \u0026gmap-\u003ekvm-\u003earch.cmma_dirty_pages);\n-\t\tcond_resched();\n-\t} while (gfn);\n-}\n-\n static void gmap_unshadow_level(struct gmap *sg, gfn_t r_gfn, int level)\n {\n \tunsigned long align = PAGE_SIZE;\ndiff --git a/arch/s390/kvm/gmap.h b/arch/s390/kvm/gmap/gmap.h\nsimilarity index 94%\nrename from arch/s390/kvm/gmap.h\nrename to arch/s390/kvm/gmap/gmap.h\nindex 39938d363ec9b..28ab585db7e12 100644\n--- a/arch/s390/kvm/gmap.h\n+++ b/arch/s390/kvm/gmap/gmap.h\n@@ -7,10 +7,11 @@\n  *               Claudio Imbrenda \u003cimbrenda@linux.ibm.com\u003e\n  */\n \n-#ifndef ARCH_KVM_S390_GMAP_H\n-#define ARCH_KVM_S390_GMAP_H\n+#ifndef ARCH_KVM_GMAP_GMAP_H\n+#define ARCH_KVM_GMAP_GMAP_H\n \n #include \"dat.h\"\n+#include \"prefix.h\"\n \n /**\n  * enum gmap_flags - Flags of a gmap.\n@@ -83,7 +84,6 @@ struct gmap_cache {\n \tfor (pos = (head); n = pos ? pos-\u003enext : NULL, pos; pos = n)\n \n int s390_replace_asce(struct gmap *gmap);\n-bool _gmap_unmap_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end, bool hint);\n bool gmap_age_gfn(struct gmap *gmap, gfn_t start, gfn_t end);\n bool gmap_unmap_gfn_range(struct gmap *gmap, struct kvm_memory_slot *slot, gfn_t start, gfn_t end);\n int gmap_try_fixup_minor(struct gmap *gmap, struct guest_fault *fault);\n@@ -104,7 +104,6 @@ int gmap_insert_rmap(struct kvm_s390_mmu_cache *mc, struct gmap *sg, gfn_t p_gfn\n \t\t     gfn_t r_gfn, int level);\n int gmap_protect_rmap(struct kvm_s390_mmu_cache *mc, struct gmap *sg, gfn_t p_gfn, gfn_t r_gfn,\n \t\t      kvm_pfn_t pfn, int level, bool wr);\n-void _gmap_set_cmma_all(struct gmap *gmap, bool dirty);\n void _gmap_handle_vsie_unshadow_event(struct gmap *parent, gfn_t gfn);\n struct gmap *gmap_create_shadow(struct kvm_s390_mmu_cache *mc, struct gmap *gmap,\n \t\t\t\tunion asce asce, int edat_level);\n@@ -158,16 +157,6 @@ static inline void gmap_handle_vsie_unshadow_event(struct gmap *parent, gfn_t gf\n \t\t_gmap_handle_vsie_unshadow_event(parent, gfn);\n }\n \n-static inline bool gmap_mkold_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end)\n-{\n-\treturn _gmap_unmap_prefix(gmap, gfn, end, true);\n-}\n-\n-static inline bool gmap_unmap_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end)\n-{\n-\treturn _gmap_unmap_prefix(gmap, gfn, end, false);\n-}\n-\n /**\n  * pte_needs_unshadow() -- Check if the pte operations triggers unshadowing.\n  * @oldpte: the previous value for the guest pte.\n@@ -198,16 +187,6 @@ static inline bool pte_needs_unshadow(union pte oldpte, union pte newpte, union\n \treturn !newpte.h.p || !newpte.s.pr;\n }\n \n-static inline void gmap_set_cmma_all_dirty(struct gmap *gmap)\n-{\n-\t_gmap_set_cmma_all(gmap, true);\n-}\n-\n-static inline void gmap_set_cmma_all_clean(struct gmap *gmap)\n-{\n-\t_gmap_set_cmma_all(gmap, false);\n-}\n-\n static inline union pgste _gmap_ptep_xchg(struct gmap *gmap, union pte *ptep, union pte newpte,\n \t\t\t\t\t  union pgste pgste, gfn_t gfn, bool needs_lock)\n {\n@@ -330,4 +309,4 @@ static inline bool gmap_is_shadow_valid(struct gmap *sg, union asce asce, int ed\n \treturn sg-\u003eguest_asce.val == asce.val \u0026\u0026 sg-\u003eedat_level == edat_level;\n }\n \n-#endif /* ARCH_KVM_S390_GMAP_H */\n+#endif /* ARCH_KVM_GMAP_GMAP_H */\ndiff --git a/arch/s390/kvm/gmap/kvm_mmu.c b/arch/s390/kvm/gmap/kvm_mmu.c\nnew file mode 100644\nindex 0000000000000..88d2187375da8\n--- /dev/null\n+++ b/arch/s390/kvm/gmap/kvm_mmu.c\n@@ -0,0 +1,135 @@\n+// SPDX-License-Identifier: GPL-2.0\n+\n+#include \u003clinux/kvm_types.h\u003e\n+#include \u003clinux/kvm_host.h\u003e\n+\n+#ifdef KVM_S390_ARM64\n+#include \"arm.h\"\n+#else\n+#include \"s390.h\"\n+#endif\n+#include \"gmap.h\"\n+#include \"dat.h\"\n+#include \"kvm_mmu.h\"\n+\n+/*\n+ * Get (and clear) the dirty memory log for a memory slot.\n+ */\n+int s390_kvm_mmu_get_dirty_log(struct kvm *kvm, struct kvm_dirty_log *log)\n+{\n+\tint r;\n+\tunsigned long n;\n+\tstruct kvm_memory_slot *memslot;\n+\tint is_dirty;\n+\n+\tif (kvm_is_ucontrol(kvm))\n+\t\treturn -EINVAL;\n+\n+\tmutex_lock(\u0026kvm-\u003eslots_lock);\n+\n+\tr = -EINVAL;\n+\tif (log-\u003eslot \u003e= KVM_USER_MEM_SLOTS)\n+\t\tgoto out;\n+\n+\tr = kvm_get_dirty_log(kvm, log, \u0026is_dirty, \u0026memslot);\n+\tif (r)\n+\t\tgoto out;\n+\n+\t/* Clear the dirty log */\n+\tif (is_dirty) {\n+\t\tn = kvm_dirty_bitmap_bytes(memslot);\n+\t\tmemset(memslot-\u003edirty_bitmap, 0, n);\n+\t}\n+\tr = 0;\n+out:\n+\tmutex_unlock(\u0026kvm-\u003eslots_lock);\n+\treturn r;\n+}\n+\n+int s390_kvm_mmu_prepare_memory_region(struct kvm *kvm,\n+\t\t\t       const struct kvm_memory_slot *old,\n+\t\t\t       struct kvm_memory_slot *new,\n+\t\t\t       enum kvm_mr_change change)\n+{\n+\tif (kvm_is_ucontrol(kvm) \u0026\u0026 new \u0026\u0026 new-\u003eid \u003c KVM_USER_MEM_SLOTS)\n+\t\treturn -EINVAL;\n+\n+\t/* When we are protected, we should not change the memory slots */\n+\tif (kvm_s390_pv_get_handle(kvm))\n+\t\treturn -EINVAL;\n+\n+\tif (change != KVM_MR_DELETE \u0026\u0026 change != KVM_MR_FLAGS_ONLY) {\n+\t\t/*\n+\t\t * A few sanity checks. The memory in userland is ok to be\n+\t\t * fragmented into various different vmas. It is okay to mmap()\n+\t\t * and munmap() stuff in this slot after doing this call at any\n+\t\t * time.\n+\t\t */\n+\t\tif (new-\u003euserspace_addr \u0026 ~PAGE_MASK)\n+\t\t\treturn -EINVAL;\n+\t\tif ((new-\u003ebase_gfn + new-\u003enpages) * PAGE_SIZE \u003e kvm-\u003earch.mem_limit)\n+\t\t\treturn -EINVAL;\n+\t\tif (!asce_contains_gfn(kvm-\u003earch.gmap-\u003easce, new-\u003ebase_gfn + new-\u003enpages - 1))\n+\t\t\treturn -EINVAL;\n+\t}\n+\n+\tif (!kvm_s390_is_migration_mode(kvm))\n+\t\treturn 0;\n+\n+\t/*\n+\t * Turn off migration mode when:\n+\t * - userspace creates a new memslot with dirty logging off,\n+\t * - userspace modifies an existing memslot (MOVE or FLAGS_ONLY) and\n+\t *   dirty logging is turned off.\n+\t * Migration mode expects dirty page logging being enabled to store\n+\t * its dirty bitmap.\n+\t */\n+\tif (change != KVM_MR_DELETE \u0026\u0026\n+\t    !(new-\u003eflags \u0026 KVM_MEM_LOG_DIRTY_PAGES))\n+\t\tWARN(kvm_s390_vm_stop_migration(kvm),\n+\t\t     \"Failed to stop migration mode\");\n+\n+\treturn 0;\n+}\n+\n+void s390_kvm_mmu_commit_memory_region(struct kvm *kvm,\n+\t\t\t       struct kvm_memory_slot *old,\n+\t\t\t       const struct kvm_memory_slot *new,\n+\t\t\t       enum kvm_mr_change change)\n+{\n+\tstruct kvm_s390_mmu_cache *mc = NULL;\n+\tint rc = 0;\n+\n+\tif (change == KVM_MR_FLAGS_ONLY)\n+\t\treturn;\n+\n+\tmc = kvm_s390_new_mmu_cache();\n+\tif (!mc) {\n+\t\trc = -ENOMEM;\n+\t\tgoto out;\n+\t}\n+\n+\tscoped_guard(write_lock, \u0026kvm-\u003emmu_lock) {\n+\t\tswitch (change) {\n+\t\tcase KVM_MR_DELETE:\n+\t\t\trc = dat_delete_slot(mc, kvm-\u003earch.gmap-\u003easce, old-\u003ebase_gfn, old-\u003enpages);\n+\t\t\tbreak;\n+\t\tcase KVM_MR_MOVE:\n+\t\t\trc = dat_delete_slot(mc, kvm-\u003earch.gmap-\u003easce, old-\u003ebase_gfn, old-\u003enpages);\n+\t\t\tif (rc)\n+\t\t\t\tbreak;\n+\t\t\tfallthrough;\n+\t\tcase KVM_MR_CREATE:\n+\t\t\trc = dat_create_slot(mc, kvm-\u003earch.gmap-\u003easce, new-\u003ebase_gfn, new-\u003enpages);\n+\t\t\tbreak;\n+\t\tcase KVM_MR_FLAGS_ONLY:\n+\t\t\tbreak;\n+\t\tdefault:\n+\t\t\tWARN(1, \"Unknown KVM MR CHANGE: %d\\n\", change);\n+\t\t}\n+\t}\n+out:\n+\tif (rc)\n+\t\tpr_warn(\"failed to commit memory region\\n\");\n+\tkvm_s390_free_mmu_cache(mc);\n+}\ndiff --git a/arch/s390/kvm/gmap/kvm_mmu.h b/arch/s390/kvm/gmap/kvm_mmu.h\nnew file mode 100644\nindex 0000000000000..4167eaec8f6fd\n--- /dev/null\n+++ b/arch/s390/kvm/gmap/kvm_mmu.h\n@@ -0,0 +1,18 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+\n+#ifndef ARCH_KVM_GMAP_MMU_H\n+#define ARCH_KVM_GMAP_MMU_H\n+\n+#include \u003clinux/kvm_host.h\u003e\n+\n+int s390_kvm_mmu_get_dirty_log(struct kvm *kvm, struct kvm_dirty_log *log);\n+int s390_kvm_mmu_prepare_memory_region(struct kvm *kvm,\n+\t\t\t\t       const struct kvm_memory_slot *old,\n+\t\t\t\t       struct kvm_memory_slot *new,\n+\t\t\t\t       enum kvm_mr_change change);\n+void s390_kvm_mmu_commit_memory_region(struct kvm *kvm,\n+\t\t\t\t       struct kvm_memory_slot *old,\n+\t\t\t\t       const struct kvm_memory_slot *new,\n+\t\t\t\t       enum kvm_mr_change change);\n+\n+#endif /* ARCH_KVM_GMAP_MMU_H */\ndiff --git a/arch/s390/kvm/gmap/prefix.h b/arch/s390/kvm/gmap/prefix.h\nnew file mode 100644\nindex 0000000000000..f83b6c2c4afa3\n--- /dev/null\n+++ b/arch/s390/kvm/gmap/prefix.h\n@@ -0,0 +1,39 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+\n+#ifndef ARCH_KVM_GMAP_PREFIX_H\n+#define ARCH_KVM_GMAP_PREFIX_H\n+\n+#include \"asm/dat-bits.h\"\n+#include \u003clinux/types.h\u003e\n+#include \u003clinux/kvm_types.h\u003e\n+#include \u003clinux/kvm_host.h\u003e\n+\n+struct gmap;\n+union asce;\n+\n+#ifdef KVM_S390_GUEST_HAS_PREFIX\n+bool _gmap_unmap_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end, bool hint);\n+int dat_set_prefix_notif_bit(union asce asce, gfn_t gfn);\n+#else\n+static inline bool _gmap_unmap_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end, bool hint)\n+{\n+\treturn true;\n+}\n+\n+static inline int dat_set_prefix_notif_bit(union asce asce, gfn_t gfn)\n+{\n+\treturn 0;\n+}\n+#endif /* KVM_S390_GUEST_HAS_PREFIX */\n+\n+static inline bool gmap_mkold_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end)\n+{\n+\treturn _gmap_unmap_prefix(gmap, gfn, end, true);\n+}\n+\n+static inline bool gmap_unmap_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end)\n+{\n+\treturn _gmap_unmap_prefix(gmap, gfn, end, false);\n+}\n+\n+#endif /* ARCH_KVM_GMAP_PREFIX_H */\ndiff --git a/arch/s390/kvm/gmap/trace-gmap.h b/arch/s390/kvm/gmap/trace-gmap.h\nnew file mode 100644\nindex 0000000000000..25f8a527fddea\n--- /dev/null\n+++ b/arch/s390/kvm/gmap/trace-gmap.h\n@@ -0,0 +1,59 @@\n+/* SPDX-License-Identifier: GPL-2.0 */\n+#if !defined(GMAP_TRACE_KVM_H) || defined(TRACE_HEADER_MULTI_READ)\n+#define GMAP_TRACE_KVM_H\n+\n+#include \u003clinux/tracepoint.h\u003e\n+\n+#undef TRACE_SYSTEM\n+#define TRACE_SYSTEM kvm\n+#define TRACE_INCLUDE_PATH ../gmap\n+#undef TRACE_INCLUDE_FILE\n+#define TRACE_INCLUDE_FILE trace-gmap\n+\n+#ifdef KVM_S390_ARM64\n+#define __KVM_FIELDS \\\n+\t__field(unsigned long, pstate) \\\n+\t__field(unsigned long, pc)\n+#define __KVM_ASSIGN ({\\\n+\t__entry-\u003epstate = vcpu-\u003earch.sae_block.pstate; \\\n+\t__entry-\u003epc = vcpu-\u003earch.sae_block.pc; \\\n+\t})\n+#define __KVM_PRINT \\\n+\t__entry-\u003epstate, \\\n+\t__entry-\u003epc\n+#else\n+#define __KVM_FIELDS \\\n+\t__field(unsigned long, pswmask) \\\n+\t__field(unsigned long, pswaddr)\n+#define __KVM_ASSIGN ({\\\n+\t__entry-\u003epswmask = vcpu-\u003earch.sie_block-\u003egpsw.mask; \\\n+\t__entry-\u003epswaddr = vcpu-\u003earch.sie_block-\u003egpsw.addr; \\\n+\t})\n+#define __KVM_PRINT \\\n+\t__entry-\u003epswmask,\\\n+\t__entry-\u003epswaddr\n+#endif\n+\n+TRACE_EVENT(kvm_s390_major_guest_pfault,\n+\t    TP_PROTO(struct kvm_vcpu *vcpu),\n+\t    TP_ARGS(vcpu),\n+\n+\t    TP_STRUCT__entry(\n+\t\t__field(int, id)\n+\t\t__KVM_FIELDS\n+\t\t),\n+\n+\t    TP_fast_assign(\n+\t\t__entry-\u003eid = vcpu-\u003evcpu_id;\n+\t\t__KVM_ASSIGN\n+\t\t),\n+\t    TP_printk(\"%02d[%016lx-%016lx]: major fault, maybe applicable for pfault\",\n+\t\t__entry-\u003eid,\n+\t\t__KVM_PRINT\n+\t\t)\n+\t    );\n+\n+#endif /* GMAP_TRACE_KVM_H */\n+\n+/* This part must be outside protection */\n+#include \u003ctrace/define_trace.h\u003e\ndiff --git a/arch/s390/kvm/s390/Kconfig b/arch/s390/kvm/s390/Kconfig\nnew file mode 100644\nindex 0000000000000..bacfa1a48446b\n--- /dev/null\n+++ b/arch/s390/kvm/s390/Kconfig\n@@ -0,0 +1,39 @@\n+# SPDX-License-Identifier: GPL-2.0\n+\n+config KVM_S390\n+\tdef_tristate y\n+\tprompt \"Kernel-based Virtual Machine (KVM) support (s390)\"\n+\tselect HAVE_KVM_CPU_RELAX_INTERCEPT\n+\tselect KVM_ASYNC_PF\n+\tselect KVM_ASYNC_PF_SYNC\n+\tselect KVM_COMMON\n+\tselect KVM\n+\tselect HAVE_KVM_IRQCHIP\n+\tselect HAVE_KVM_IRQ_ROUTING\n+\tselect HAVE_KVM_INVALID_WAKEUPS\n+\tselect HAVE_KVM_NO_POLL\n+\tselect KVM_VFIO\n+\tselect VIRT_XFER_TO_GUEST_WORK\n+\tselect KVM_MMU_LOCKLESS_AGING\n+\tselect KVM_GENERIC_PRE_FAULT_MEMORY\n+\thelp\n+\t  Support hosting paravirtualized s390 guest machines using the SIE\n+\t  virtualization capability on the mainframe. This should work\n+\t  on any 64bit machine.\n+\n+\t  This module provides access to the hardware capabilities through\n+\t  a character device node named /dev/kvm.\n+\n+\t  To compile this as a module, choose M here: the module\n+\t  will be called kvm.\n+\n+\t  If unsure, say N.\n+\n+config KVM_S390_UCONTROL\n+\tbool \"Userspace controlled virtual machines\"\n+\tdepends on KVM_S390\n+\thelp\n+\t  Allow CAP_SYS_ADMIN users to create KVM virtual machines that are\n+\t  controlled by userspace.\n+\n+\t  If unsure, say N.\ndiff --git a/arch/s390/kvm/s390/Makefile b/arch/s390/kvm/s390/Makefile\nnew file mode 100644\nindex 0000000000000..1a1e8ce804005\n--- /dev/null\n+++ b/arch/s390/kvm/s390/Makefile\n@@ -0,0 +1,15 @@\n+# SPDX-License-Identifier: GPL-2.0\n+\n+KVM := ../../../../virt/kvm\n+include $(srctree)/virt/kvm/Makefile.kvm\n+include $(srctree)/arch/s390/kvm/gmap/Makefile\n+\n+ccflags-y := -I$(src) -I$(srctree)/arch/s390/kvm/gmap\n+\n+kvm-y += s390.o intercept.o interrupt.o priv.o sigp.o\n+kvm-y += diag.o gaccess.o guestdbg.o vsie.o pv.o\n+kvm-y += dat.o gmap.o\n+\n+kvm-$(CONFIG_VFIO_PCI_ZDEV_KVM) += pci.o\n+\n+obj-$(CONFIG_KVM_S390) += kvm.o\ndiff --git a/arch/s390/kvm/s390/dat.c b/arch/s390/kvm/s390/dat.c\nnew file mode 100644\nindex 0000000000000..a56b1523e6e4b\n--- /dev/null\n+++ b/arch/s390/kvm/s390/dat.c\n@@ -0,0 +1,554 @@\n+// SPDX-License-Identifier: GPL-2.0\n+\n+#include \u003casm/page-states.h\u003e\n+\n+#include \"s390.h\"\n+\n+int dat_get_storage_key(union asce asce, gfn_t gfn, union skey *skey)\n+{\n+\tunion crste *crstep;\n+\tunion pgste pgste;\n+\tunion pte *ptep;\n+\tint rc;\n+\n+\tskey-\u003eskey = 0;\n+\trc = dat_entry_walk(NULL, gfn, asce, DAT_WALK_ANY, TABLE_TYPE_PAGE_TABLE, \u0026crstep, \u0026ptep);\n+\tif (rc)\n+\t\treturn rc;\n+\n+\tif (!ptep) {\n+\t\tunion crste crste;\n+\n+\t\tcrste = READ_ONCE(*crstep);\n+\t\tif (!crste.h.fc || !crste.s.fc1.pr)\n+\t\t\treturn 0;\n+\t\tskey-\u003eskey = page_get_storage_key(large_crste_to_phys(crste, gfn));\n+\t\treturn 0;\n+\t}\n+\tpgste = pgste_get_lock(ptep);\n+\tif (ptep-\u003eh.i) {\n+\t\tskey-\u003eacc = pgste.acc;\n+\t\tskey-\u003efp = pgste.fp;\n+\t} else {\n+\t\tskey-\u003eskey = page_get_storage_key(pte_origin(*ptep));\n+\t}\n+\tskey-\u003er |= pgste.gr;\n+\tskey-\u003ec |= pgste.gc;\n+\tpgste_set_unlock(ptep, pgste);\n+\treturn 0;\n+}\n+\n+static void dat_update_ptep_sd(union pgste old, union pgste pgste, union pte *ptep)\n+{\n+\tif (pgste.acc != old.acc || pgste.fp != old.fp || pgste.gr != old.gr || pgste.gc != old.gc)\n+\t\t__atomic64_or(_PAGE_SD, \u0026ptep-\u003eval);\n+}\n+\n+int dat_set_storage_key(struct kvm_s390_mmu_cache *mc, union asce asce, gfn_t gfn,\n+\t\t\tunion skey skey, bool nq)\n+{\n+\tunion pgste pgste, old;\n+\tunion crste *crstep;\n+\tunion pte *ptep;\n+\tint rc;\n+\n+\trc = dat_entry_walk(mc, gfn, asce, DAT_WALK_LEAF_ALLOC, TABLE_TYPE_PAGE_TABLE,\n+\t\t\t    \u0026crstep, \u0026ptep);\n+\tif (rc)\n+\t\treturn rc;\n+\n+\tif (!ptep) {\n+\t\tpage_set_storage_key(large_crste_to_phys(*crstep, gfn), skey.skey, !nq);\n+\t\treturn 0;\n+\t}\n+\n+\told = pgste_get_lock(ptep);\n+\tpgste = old;\n+\n+\tpgste.acc = skey.acc;\n+\tpgste.fp = skey.fp;\n+\tpgste.gc = skey.c;\n+\tpgste.gr = skey.r;\n+\n+\tif (!ptep-\u003eh.i) {\n+\t\tunion skey old_skey;\n+\n+\t\told_skey.skey = page_get_storage_key(pte_origin(*ptep));\n+\t\tpgste.hc |= old_skey.c;\n+\t\tpgste.hr |= old_skey.r;\n+\t\told_skey.c = old.gc;\n+\t\told_skey.r = old.gr;\n+\t\tskey.r = 0;\n+\t\tskey.c = 0;\n+\t\tpage_set_storage_key(pte_origin(*ptep), skey.skey, !nq);\n+\t}\n+\n+\tdat_update_ptep_sd(old, pgste, ptep);\n+\tpgste_set_unlock(ptep, pgste);\n+\treturn 0;\n+}\n+\n+static bool page_cond_set_storage_key(phys_addr_t paddr, union skey skey, union skey *oldkey,\n+\t\t\t\t      bool nq, bool mr, bool mc)\n+{\n+\toldkey-\u003eskey = page_get_storage_key(paddr);\n+\tif (oldkey-\u003eacc == skey.acc \u0026\u0026 oldkey-\u003efp == skey.fp \u0026\u0026\n+\t    (oldkey-\u003er == skey.r || mr) \u0026\u0026 (oldkey-\u003ec == skey.c || mc))\n+\t\treturn false;\n+\tpage_set_storage_key(paddr, skey.skey, !nq);\n+\treturn true;\n+}\n+\n+int dat_cond_set_storage_key(struct kvm_s390_mmu_cache *mmc, union asce asce, gfn_t gfn,\n+\t\t\t     union skey skey, union skey *oldkey, bool nq, bool mr, bool mc)\n+{\n+\tunion pgste pgste, old;\n+\tunion crste *crstep;\n+\tunion skey prev;\n+\tunion pte *ptep;\n+\tint rc;\n+\n+\trc = dat_entry_walk(mmc, gfn, asce, DAT_WALK_LEAF_ALLOC, TABLE_TYPE_PAGE_TABLE,\n+\t\t\t    \u0026crstep, \u0026ptep);\n+\tif (rc)\n+\t\treturn rc;\n+\n+\tif (!ptep)\n+\t\treturn page_cond_set_storage_key(large_crste_to_phys(*crstep, gfn), skey, oldkey,\n+\t\t\t\t\t\t nq, mr, mc);\n+\n+\told = pgste_get_lock(ptep);\n+\tpgste = old;\n+\n+\trc = 1;\n+\tpgste.acc = skey.acc;\n+\tpgste.fp = skey.fp;\n+\tpgste.gc = skey.c;\n+\tpgste.gr = skey.r;\n+\n+\tif (!ptep-\u003eh.i) {\n+\t\trc = page_cond_set_storage_key(pte_origin(*ptep), skey, \u0026prev, nq, mr, mc);\n+\t\tpgste.hc |= prev.c;\n+\t\tpgste.hr |= prev.r;\n+\t\tprev.c |= old.gc;\n+\t\tprev.r |= old.gr;\n+\t} else {\n+\t\tprev.acc = old.acc;\n+\t\tprev.fp = old.fp;\n+\t\tprev.c = old.gc;\n+\t\tprev.r = old.gr;\n+\t}\n+\tif (oldkey)\n+\t\t*oldkey = prev;\n+\n+\tdat_update_ptep_sd(old, pgste, ptep);\n+\tpgste_set_unlock(ptep, pgste);\n+\treturn rc;\n+}\n+\n+int dat_reset_reference_bit(union asce asce, gfn_t gfn)\n+{\n+\tunion pgste pgste, old;\n+\tunion crste *crstep;\n+\tunion pte *ptep;\n+\tint rc;\n+\n+\trc = dat_entry_walk(NULL, gfn, asce, DAT_WALK_ANY, TABLE_TYPE_PAGE_TABLE, \u0026crstep, \u0026ptep);\n+\tif (rc)\n+\t\treturn rc;\n+\n+\tif (!ptep) {\n+\t\tunion crste crste = READ_ONCE(*crstep);\n+\n+\t\tif (!crste.h.fc || !crste.s.fc1.pr)\n+\t\t\treturn 0;\n+\t\treturn page_reset_referenced(large_crste_to_phys(*crstep, gfn));\n+\t}\n+\told = pgste_get_lock(ptep);\n+\tpgste = old;\n+\n+\tif (!ptep-\u003eh.i) {\n+\t\trc = page_reset_referenced(pte_origin(*ptep));\n+\t\tpgste.hr = rc \u003e\u003e 1;\n+\t}\n+\trc |= (pgste.gr \u003c\u003c 1) | pgste.gc;\n+\tpgste.gr = 0;\n+\n+\tdat_update_ptep_sd(old, pgste, ptep);\n+\tpgste_set_unlock(ptep, pgste);\n+\treturn rc;\n+}\n+\n+static long dat_reset_skeys_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n+{\n+\tunion pgste pgste;\n+\n+\tpgste = pgste_get_lock(ptep);\n+\tpgste.acc = 0;\n+\tpgste.fp = 0;\n+\tpgste.gr = 0;\n+\tpgste.gc = 0;\n+\tif (ptep-\u003es.pr)\n+\t\tpage_set_storage_key(pte_origin(*ptep), PAGE_DEFAULT_KEY, 1);\n+\tpgste_set_unlock(ptep, pgste);\n+\n+\tif (need_resched())\n+\t\treturn next;\n+\treturn 0;\n+}\n+\n+static long dat_reset_skeys_crste(union crste *crstep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n+{\n+\tphys_addr_t addr, end, origin = crste_origin_large(*crstep);\n+\n+\tif (!crstep-\u003eh.fc || !crstep-\u003es.fc1.pr)\n+\t\treturn 0;\n+\n+\taddr = ((max(gfn, walk-\u003estart) - gfn) \u003c\u003c PAGE_SHIFT) + origin;\n+\tend = ((min(next, walk-\u003eend) - gfn) \u003c\u003c PAGE_SHIFT) + origin;\n+\twhile (ALIGN(addr + 1, _SEGMENT_SIZE) \u003c= end)\n+\t\taddr = sske_frame(addr, PAGE_DEFAULT_KEY);\n+\tfor ( ; addr \u003c end; addr += PAGE_SIZE)\n+\t\tpage_set_storage_key(addr, PAGE_DEFAULT_KEY, 1);\n+\n+\tif (need_resched())\n+\t\treturn next;\n+\treturn 0;\n+}\n+\n+long dat_reset_skeys(union asce asce, gfn_t start)\n+{\n+\tconst struct dat_walk_ops ops = {\n+\t\t.pte_entry = dat_reset_skeys_pte,\n+\t\t.pmd_entry = dat_reset_skeys_crste,\n+\t\t.pud_entry = dat_reset_skeys_crste,\n+\t};\n+\n+\treturn _dat_walk_gfn_range(start, asce_end(asce), asce, \u0026ops, DAT_WALK_IGN_HOLES, NULL);\n+}\n+\n+/**\n+ * dat_perform_essa() - Perform ESSA actions on the PGSTE.\n+ * @asce: The asce to operate on.\n+ * @gfn: The guest page frame to operate on.\n+ * @orc: The specific action to perform, see the ESSA_SET_* macros.\n+ * @state: The storage attributes to be returned to the guest.\n+ * @dirty: Returns whether the function dirtied a previously clean entry.\n+ *\n+ * Context: Called with kvm-\u003emmu_lock held.\n+ *\n+ * Return:\n+ * * %1 if the page state has been altered and the page is to be added to the CBRL\n+ * * %0 if the page state has been altered, but the page is not to be added to the CBRL\n+ * * %-1 if the page state has not been altered and the page is not to be added to the CBRL\n+ */\n+int dat_perform_essa(union asce asce, gfn_t gfn, int orc, union essa_state *state, bool *dirty)\n+{\n+\tunion crste *crstep;\n+\tunion pgste pgste;\n+\tunion pte *ptep;\n+\tint res = 0;\n+\n+\tif (dat_entry_walk(NULL, gfn, asce, 0, TABLE_TYPE_PAGE_TABLE, \u0026crstep, \u0026ptep)) {\n+\t\t*state = (union essa_state) { .exception = 1 };\n+\t\treturn -1;\n+\t}\n+\n+\tpgste = pgste_get_lock(ptep);\n+\n+\t*state = (union essa_state) {\n+\t\t.content = (ptep-\u003eh.i \u003c\u003c 1) + (ptep-\u003eh.i \u0026\u0026 pgste.zero),\n+\t\t.nodat = pgste.nodat,\n+\t\t.usage = pgste.usage,\n+\t\t};\n+\n+\tswitch (orc) {\n+\tcase ESSA_GET_STATE:\n+\t\tres = -1;\n+\t\tbreak;\n+\tcase ESSA_SET_STABLE:\n+\t\tpgste.usage = PGSTE_GPS_USAGE_STABLE;\n+\t\tpgste.nodat = 0;\n+\t\tbreak;\n+\tcase ESSA_SET_UNUSED:\n+\t\tpgste.usage = PGSTE_GPS_USAGE_UNUSED;\n+\t\tif (ptep-\u003eh.i)\n+\t\t\tres = 1;\n+\t\tbreak;\n+\tcase ESSA_SET_VOLATILE:\n+\t\tpgste.usage = PGSTE_GPS_USAGE_VOLATILE;\n+\t\tif (ptep-\u003eh.i)\n+\t\t\tres = 1;\n+\t\tbreak;\n+\tcase ESSA_SET_POT_VOLATILE:\n+\t\tif (!ptep-\u003eh.i) {\n+\t\t\tpgste.usage = PGSTE_GPS_USAGE_POT_VOLATILE;\n+\t\t} else if (pgste.zero) {\n+\t\t\tpgste.usage = PGSTE_GPS_USAGE_VOLATILE;\n+\t\t} else if (!pgste.gc) {\n+\t\t\tpgste.usage = PGSTE_GPS_USAGE_VOLATILE;\n+\t\t\tres = 1;\n+\t\t}\n+\t\tbreak;\n+\tcase ESSA_SET_STABLE_RESIDENT:\n+\t\tpgste.usage = PGSTE_GPS_USAGE_STABLE;\n+\t\t/*\n+\t\t * Since the resident state can go away any time after this\n+\t\t * call, we will not make this page resident. We can revisit\n+\t\t * this decision if a guest will ever start using this.\n+\t\t */\n+\t\tbreak;\n+\tcase ESSA_SET_STABLE_IF_RESIDENT:\n+\t\tif (!ptep-\u003eh.i)\n+\t\t\tpgste.usage = PGSTE_GPS_USAGE_STABLE;\n+\t\tbreak;\n+\tcase ESSA_SET_STABLE_NODAT:\n+\t\tpgste.usage = PGSTE_GPS_USAGE_STABLE;\n+\t\tpgste.nodat = 1;\n+\t\tbreak;\n+\tdefault:\n+\t\tWARN_ONCE(1, \"Invalid ORC!\");\n+\t\tres = -1;\n+\t\tbreak;\n+\t}\n+\t/* If we are discarding a page, set it to logical zero. */\n+\tpgste.zero = res == 1;\n+\tif (orc \u003e 0) {\n+\t\t*dirty = !pgste.cmma_d;\n+\t\tpgste.cmma_d = 1;\n+\t}\n+\n+\tpgste_set_unlock(ptep, pgste);\n+\n+\treturn res;\n+}\n+\n+static long dat_reset_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n+{\n+\tunion pgste pgste;\n+\n+\tpgste = pgste_get_lock(ptep);\n+\tpgste.usage = 0;\n+\tpgste.nodat = 0;\n+\tpgste.cmma_d = 0;\n+\tpgste_set_unlock(ptep, pgste);\n+\tif (need_resched())\n+\t\treturn next;\n+\treturn 0;\n+}\n+\n+long dat_reset_cmma(union asce asce, gfn_t start)\n+{\n+\tconst struct dat_walk_ops dat_reset_cmma_ops = {\n+\t\t.pte_entry = dat_reset_cmma_pte,\n+\t};\n+\n+\treturn _dat_walk_gfn_range(start, asce_end(asce), asce, \u0026dat_reset_cmma_ops,\n+\t\t\t\t   DAT_WALK_IGN_HOLES, NULL);\n+}\n+\n+struct dat_get_cmma_state {\n+\tgfn_t start;\n+\tgfn_t end;\n+\tunsigned int count;\n+\tu8 *values;\n+\tatomic64_t *remaining;\n+};\n+\n+static long __dat_peek_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n+{\n+\tstruct dat_get_cmma_state *state = walk-\u003epriv;\n+\tunion pgste pgste;\n+\n+\tpgste = pgste_get_lock(ptep);\n+\tstate-\u003evalues[gfn - walk-\u003estart] = pgste.usage | (pgste.nodat \u003c\u003c 6);\n+\tpgste_set_unlock(ptep, pgste);\n+\tstate-\u003eend = next;\n+\n+\treturn 0;\n+}\n+\n+static long __dat_peek_cmma_crste(union crste *crstep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n+{\n+\tstruct dat_get_cmma_state *state = walk-\u003epriv;\n+\n+\tif (crstep-\u003eh.i)\n+\t\tstate-\u003eend = min(walk-\u003eend, next);\n+\treturn 0;\n+}\n+\n+int dat_peek_cmma(gfn_t start, union asce asce, unsigned int *count, u8 *values)\n+{\n+\tconst struct dat_walk_ops ops = {\n+\t\t.pte_entry = __dat_peek_cmma_pte,\n+\t\t.pmd_entry = __dat_peek_cmma_crste,\n+\t\t.pud_entry = __dat_peek_cmma_crste,\n+\t\t.p4d_entry = __dat_peek_cmma_crste,\n+\t\t.pgd_entry = __dat_peek_cmma_crste,\n+\t};\n+\tstruct dat_get_cmma_state state = { .values = values, };\n+\tint rc;\n+\n+\trc = _dat_walk_gfn_range(start, start + *count, asce, \u0026ops, DAT_WALK_DEFAULT, \u0026state);\n+\t*count = state.end \u003e= start ? state.end - start : 0;\n+\t/* Return success if at least one value was saved, otherwise an error. */\n+\treturn (rc == -EFAULT \u0026\u0026 *count \u003e 0) ? 0 : rc;\n+}\n+\n+static long __dat_get_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n+{\n+\tstruct dat_get_cmma_state *state = walk-\u003epriv;\n+\tunion pgste pgste;\n+\n+\tif (state-\u003estart != -1) {\n+\t\tif ((gfn - state-\u003eend) \u003e KVM_S390_MAX_BIT_DISTANCE)\n+\t\t\treturn 1;\n+\t\tif (gfn - state-\u003estart \u003e= state-\u003ecount)\n+\t\t\treturn 1;\n+\t}\n+\n+\tif (!READ_ONCE(*pgste_of(ptep)).cmma_d)\n+\t\treturn 0;\n+\n+\tpgste = pgste_get_lock(ptep);\n+\tif (pgste.cmma_d) {\n+\t\tif (state-\u003estart == -1)\n+\t\t\tstate-\u003estart = gfn;\n+\t\tpgste.cmma_d = 0;\n+\t\tatomic64_dec(state-\u003eremaining);\n+\t\tstate-\u003evalues[gfn - state-\u003estart] = pgste.usage | pgste.nodat \u003c\u003c 6;\n+\t\tstate-\u003eend = next;\n+\t}\n+\tpgste_set_unlock(ptep, pgste);\n+\treturn 0;\n+}\n+\n+int dat_get_cmma(union asce asce, gfn_t *start, unsigned int *count, u8 *values, atomic64_t *rem)\n+{\n+\tconst struct dat_walk_ops ops = { .pte_entry = __dat_get_cmma_pte, };\n+\tstruct dat_get_cmma_state state = {\n+\t\t.remaining = rem,\n+\t\t.values = values,\n+\t\t.count = *count,\n+\t\t.start = -1,\n+\t};\n+\n+\t_dat_walk_gfn_range(*start, asce_end(asce), asce, \u0026ops, DAT_WALK_IGN_HOLES, \u0026state);\n+\t/* If no dirty pages were found, wrap around and continue searching */\n+\tif (*start \u0026\u0026 state.start == -1)\n+\t\t_dat_walk_gfn_range(0, *start, asce, \u0026ops, DAT_WALK_IGN_HOLES, \u0026state);\n+\n+\tif (state.start == -1) {\n+\t\t*count = 0;\n+\t} else {\n+\t\t*count = state.end - state.start;\n+\t\t*start = state.start;\n+\t}\n+\n+\treturn 0;\n+}\n+\n+struct dat_set_cmma_state {\n+\tunsigned long mask;\n+\tconst u8 *bits;\n+};\n+\n+static long __dat_set_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n+{\n+\tstruct dat_set_cmma_state *state = walk-\u003epriv;\n+\tunion pgste pgste, tmp;\n+\n+\ttmp.val = (state-\u003ebits[gfn - walk-\u003estart] \u003c\u003c 24) \u0026 state-\u003emask;\n+\n+\tpgste = pgste_get_lock(ptep);\n+\tpgste.usage = tmp.usage;\n+\tpgste.nodat = tmp.nodat;\n+\tpgste_set_unlock(ptep, pgste);\n+\n+\treturn 0;\n+}\n+\n+/**\n+ * dat_set_cmma_bits() - Set CMMA bits for a range of guest pages.\n+ * @mc: Cache used for allocations.\n+ * @asce: The ASCE of the guest.\n+ * @gfn: The guest frame of the fist page whose CMMA bits are to set.\n+ * @count: How many pages need to be processed.\n+ * @mask: Which PGSTE bits should be set.\n+ * @bits: Points to an array with the CMMA attributes.\n+ *\n+ * This function sets the CMMA attributes for the given pages. If the input\n+ * buffer has zero length, no action is taken, otherwise the attributes are\n+ * set and the mm-\u003econtext.uses_cmm flag is set.\n+ *\n+ * Each byte in @bits contains new values for bits 32-39 of the PGSTE.\n+ * Currently, only the fields NT and US are applied.\n+ *\n+ * Return: %0 in case of success, a negative error value otherwise.\n+ */\n+int dat_set_cmma_bits(struct kvm_s390_mmu_cache *mc, union asce asce, gfn_t gfn,\n+\t\t      unsigned long count, unsigned long mask, const uint8_t *bits)\n+{\n+\tconst struct dat_walk_ops ops = { .pte_entry = __dat_set_cmma_pte, };\n+\tstruct dat_set_cmma_state state = { .mask = mask, .bits = bits, };\n+\tunion crste *crstep;\n+\tunion pte *ptep;\n+\tgfn_t cur;\n+\tint rc;\n+\n+\tfor (cur = ALIGN_DOWN(gfn, _PAGE_ENTRIES); cur \u003c gfn + count; cur += _PAGE_ENTRIES) {\n+\t\trc = dat_entry_walk(mc, cur, asce, DAT_WALK_ALLOC, TABLE_TYPE_PAGE_TABLE,\n+\t\t\t\t    \u0026crstep, \u0026ptep);\n+\t\tif (rc)\n+\t\t\treturn rc;\n+\t}\n+\treturn _dat_walk_gfn_range(gfn, gfn + count, asce, \u0026ops, DAT_WALK_IGN_HOLES, \u0026state);\n+}\n+\n+static long dat_set_pn_crste(union crste *crstep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n+{\n+\tunion crste newcrste, oldcrste;\n+\tint *n = walk-\u003epriv;\n+\n+\tdo {\n+\t\toldcrste = READ_ONCE(*crstep);\n+\t\tif (!oldcrste.h.fc || oldcrste.h.i || oldcrste.h.p)\n+\t\t\treturn 0;\n+\t\tif (oldcrste.s.fc1.prefix_notif)\n+\t\t\tbreak;\n+\t\tnewcrste = oldcrste;\n+\t\tnewcrste.s.fc1.prefix_notif = 1;\n+\t} while (!dat_crstep_xchg_atomic(crstep, oldcrste, newcrste, gfn, walk-\u003easce));\n+\t*n = 2;\n+\treturn 0;\n+}\n+\n+static long dat_set_pn_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n+{\n+\tint *n = walk-\u003epriv;\n+\tunion pgste pgste;\n+\n+\tpgste = pgste_get_lock(ptep);\n+\tif (!ptep-\u003eh.i \u0026\u0026 !ptep-\u003eh.p) {\n+\t\tpgste.prefix_notif = 1;\n+\t\t*n += 1;\n+\t}\n+\tpgste_set_unlock(ptep, pgste);\n+\treturn 0;\n+}\n+\n+int dat_set_prefix_notif_bit(union asce asce, gfn_t gfn)\n+{\n+\tstatic const struct dat_walk_ops ops = {\n+\t\t.pte_entry = dat_set_pn_pte,\n+\t\t.pmd_entry = dat_set_pn_crste,\n+\t\t.pud_entry = dat_set_pn_crste,\n+\t};\n+\n+\tint n = 0;\n+\n+\t_dat_walk_gfn_range(gfn, gfn + 2, asce, \u0026ops, DAT_WALK_IGN_HOLES, \u0026n);\n+\tif (n != 2)\n+\t\treturn -EAGAIN;\n+\treturn 0;\n+}\ndiff --git a/arch/s390/kvm/diag.c b/arch/s390/kvm/s390/diag.c\nsimilarity index 99%\nrename from arch/s390/kvm/diag.c\nrename to arch/s390/kvm/s390/diag.c\nindex d89d1c381522a..700d9b7b68bc4 100644\n--- a/arch/s390/kvm/diag.c\n+++ b/arch/s390/kvm/s390/diag.c\n@@ -12,7 +12,7 @@\n #include \u003clinux/kvm_host.h\u003e\n #include \u003casm/gmap_helpers.h\u003e\n #include \u003casm/virtio-ccw.h\u003e\n-#include \"kvm-s390.h\"\n+#include \"s390.h\"\n #include \"trace.h\"\n #include \"trace-s390.h\"\n #include \"gaccess.h\"\ndiff --git a/arch/s390/kvm/gaccess.c b/arch/s390/kvm/s390/gaccess.c\nsimilarity index 99%\nrename from arch/s390/kvm/gaccess.c\nrename to arch/s390/kvm/s390/gaccess.c\nindex 36102b2727fbf..2a4b2525329a8 100644\n--- a/arch/s390/kvm/gaccess.c\n+++ b/arch/s390/kvm/s390/gaccess.c\n@@ -17,7 +17,7 @@\n #include \u003casm/access-regs.h\u003e\n #include \u003casm/fault.h\u003e\n #include \u003casm/dat-bits.h\u003e\n-#include \"kvm-s390.h\"\n+#include \"s390.h\"\n #include \"dat.h\"\n #include \"gmap.h\"\n #include \"gaccess.h\"\ndiff --git a/arch/s390/kvm/gaccess.h b/arch/s390/kvm/s390/gaccess.h\nsimilarity index 99%\nrename from arch/s390/kvm/gaccess.h\nrename to arch/s390/kvm/s390/gaccess.h\nindex b5385cec60f45..ef922b3b49903 100644\n--- a/arch/s390/kvm/gaccess.h\n+++ b/arch/s390/kvm/s390/gaccess.h\n@@ -14,7 +14,7 @@\n #include \u003clinux/kvm_host.h\u003e\n #include \u003clinux/uaccess.h\u003e\n #include \u003clinux/ptrace.h\u003e\n-#include \"kvm-s390.h\"\n+#include \"s390.h\"\n \n /**\n  * kvm_s390_real_to_abs - convert guest real address to guest absolute address\ndiff --git a/arch/s390/kvm/s390/gmap.c b/arch/s390/kvm/s390/gmap.c\nnew file mode 100644\nindex 0000000000000..b744992f0af15\n--- /dev/null\n+++ b/arch/s390/kvm/s390/gmap.c\n@@ -0,0 +1,113 @@\n+// SPDX-License-Identifier: GPL-2.0\n+\n+#include \u003clinux/kvm_host.h\u003e\n+#include \u003casm/gmap_helpers.h\u003e\n+#include \u003cgmap.h\u003e\n+#include \u003cprefix.h\u003e\n+#include \"s390.h\"\n+\n+static int _gmap_enable_skeys(struct gmap *gmap)\n+{\n+\tgfn_t start = 0;\n+\tint rc;\n+\n+\tif (uses_skeys(gmap))\n+\t\treturn 0;\n+\n+\tset_bit(GMAP_FLAG_USES_SKEYS, \u0026gmap-\u003eflags);\n+\trc = gmap_helper_disable_cow_sharing();\n+\tif (rc) {\n+\t\tclear_bit(GMAP_FLAG_USES_SKEYS, \u0026gmap-\u003eflags);\n+\t\treturn rc;\n+\t}\n+\n+\tdo {\n+\t\tscoped_guard(write_lock, \u0026gmap-\u003ekvm-\u003emmu_lock)\n+\t\t\tstart = dat_reset_skeys(gmap-\u003easce, start);\n+\t\tcond_resched();\n+\t} while (start);\n+\treturn 0;\n+}\n+\n+int gmap_enable_skeys(struct gmap *gmap)\n+{\n+\tint rc;\n+\n+\tmmap_write_lock(gmap-\u003ekvm-\u003emm);\n+\trc = _gmap_enable_skeys(gmap);\n+\tmmap_write_unlock(gmap-\u003ekvm-\u003emm);\n+\treturn rc;\n+}\n+\n+static long __set_cmma_clean_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n+{\n+\tunion pgste pgste;\n+\n+\tpgste = pgste_get_lock(ptep);\n+\tpgste.cmma_d = 0;\n+\tpgste_set_unlock(ptep, pgste);\n+\n+\tif (need_resched())\n+\t\treturn next;\n+\treturn 0;\n+}\n+\n+static long __set_cmma_dirty_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)\n+{\n+\tunion pgste pgste;\n+\n+\tpgste = pgste_get_lock(ptep);\n+\tif (!pgste.cmma_d)\n+\t\tatomic64_inc(walk-\u003epriv);\n+\tpgste.cmma_d = 1;\n+\tpgste_set_unlock(ptep, pgste);\n+\n+\tif (need_resched())\n+\t\treturn next;\n+\treturn 0;\n+}\n+\n+void _gmap_set_cmma_all(struct gmap *gmap, bool dirty)\n+{\n+\tconst struct dat_walk_ops ops = {\n+\t\t.pte_entry = dirty ? __set_cmma_dirty_pte : __set_cmma_clean_pte,\n+\t};\n+\tgfn_t gfn = 0;\n+\n+\tdo {\n+\t\tscoped_guard(read_lock, \u0026gmap-\u003ekvm-\u003emmu_lock)\n+\t\t\tgfn = _dat_walk_gfn_range(gfn, asce_end(gmap-\u003easce), gmap-\u003easce, \u0026ops,\n+\t\t\t\t\t\t  DAT_WALK_IGN_HOLES,\n+\t\t\t\t\t\t  \u0026gmap-\u003ekvm-\u003earch.cmma_dirty_pages);\n+\t\tcond_resched();\n+\t} while (gfn);\n+}\n+\n+static inline bool kvm_s390_is_in_sie(struct kvm_vcpu *vcpu)\n+{\n+\treturn vcpu-\u003earch.sie_block-\u003eprog0c \u0026 PROG_IN_SIE;\n+}\n+\n+bool _gmap_unmap_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end, bool hint)\n+{\n+\tstruct kvm *kvm = gmap-\u003ekvm;\n+\tstruct kvm_vcpu *vcpu;\n+\tgfn_t prefix_gfn;\n+\tunsigned long i;\n+\n+\tif (is_shadow(gmap))\n+\t\treturn false;\n+\tkvm_for_each_vcpu(i, vcpu, kvm) {\n+\t\t/* Match against both prefix pages */\n+\t\tprefix_gfn = gpa_to_gfn(kvm_s390_get_prefix(vcpu));\n+\t\tif (prefix_gfn \u003c end \u0026\u0026 gfn \u003c= prefix_gfn + 1) {\n+\t\t\tif (hint \u0026\u0026 kvm_s390_is_in_sie(vcpu))\n+\t\t\t\treturn false;\n+\t\t\tVCPU_EVENT(vcpu, 2, \"gmap notifier for %llx-%llx\",\n+\t\t\t\t   gfn_to_gpa(gfn), gfn_to_gpa(end));\n+\t\t\tkvm_s390_sync_request(KVM_REQ_REFRESH_GUEST_PREFIX, vcpu);\n+\t\t}\n+\t}\n+\treturn true;\n+}\n+\ndiff --git a/arch/s390/kvm/guestdbg.c b/arch/s390/kvm/s390/guestdbg.c\nsimilarity index 99%\nrename from arch/s390/kvm/guestdbg.c\nrename to arch/s390/kvm/s390/guestdbg.c\nindex 69835e1d4f207..c880ebbdef2ff 100644\n--- a/arch/s390/kvm/guestdbg.c\n+++ b/arch/s390/kvm/s390/guestdbg.c\n@@ -8,7 +8,7 @@\n  */\n #include \u003clinux/kvm_host.h\u003e\n #include \u003clinux/errno.h\u003e\n-#include \"kvm-s390.h\"\n+#include \"s390.h\"\n #include \"gaccess.h\"\n \n /*\ndiff --git a/arch/s390/kvm/intercept.c b/arch/s390/kvm/s390/intercept.c\nsimilarity index 99%\nrename from arch/s390/kvm/intercept.c\nrename to arch/s390/kvm/s390/intercept.c\nindex 1980df61ef304..ca1205dfac8b0 100644\n--- a/arch/s390/kvm/intercept.c\n+++ b/arch/s390/kvm/s390/intercept.c\n@@ -17,7 +17,7 @@\n #include \u003casm/sysinfo.h\u003e\n #include \u003casm/uv.h\u003e\n \n-#include \"kvm-s390.h\"\n+#include \"s390.h\"\n #include \"gaccess.h\"\n #include \"trace.h\"\n #include \"trace-s390.h\"\ndiff --git a/arch/s390/kvm/interrupt.c b/arch/s390/kvm/s390/interrupt.c\nsimilarity index 99%\nrename from arch/s390/kvm/interrupt.c\nrename to arch/s390/kvm/s390/interrupt.c\nindex 7514d9e2403c1..cdbbfca211b1a 100644\n--- a/arch/s390/kvm/interrupt.c\n+++ b/arch/s390/kvm/s390/interrupt.c\n@@ -29,7 +29,7 @@\n #include \u003casm/nmi.h\u003e\n #include \u003casm/airq.h\u003e\n #include \u003casm/tpi.h\u003e\n-#include \"kvm-s390.h\"\n+#include \"s390.h\"\n #include \"gaccess.h\"\n #include \"trace-s390.h\"\n #include \"pci.h\"\ndiff --git a/arch/s390/kvm/pci.c b/arch/s390/kvm/s390/pci.c\nsimilarity index 99%\nrename from arch/s390/kvm/pci.c\nrename to arch/s390/kvm/s390/pci.c\nindex 50f5ec79600e0..82892e1e03d94 100644\n--- a/arch/s390/kvm/pci.c\n+++ b/arch/s390/kvm/s390/pci.c\n@@ -14,7 +14,7 @@\n #include \u003casm/pci_io.h\u003e\n #include \u003casm/sclp.h\u003e\n #include \"pci.h\"\n-#include \"kvm-s390.h\"\n+#include \"s390.h\"\n \n struct zpci_aift *aift;\n \ndiff --git a/arch/s390/kvm/pci.h b/arch/s390/kvm/s390/pci.h\nsimilarity index 100%\nrename from arch/s390/kvm/pci.h\nrename to arch/s390/kvm/s390/pci.h\ndiff --git a/arch/s390/kvm/priv.c b/arch/s390/kvm/s390/priv.c\nsimilarity index 99%\nrename from arch/s390/kvm/priv.c\nrename to arch/s390/kvm/s390/priv.c\nindex ad0ddc433a73c..21479f0a5e5a4 100644\n--- a/arch/s390/kvm/priv.c\n+++ b/arch/s390/kvm/s390/priv.c\n@@ -26,7 +26,7 @@\n #include \u003casm/ap.h\u003e\n #include \u003casm/gmap_helpers.h\u003e\n #include \"gaccess.h\"\n-#include \"kvm-s390.h\"\n+#include \"s390.h\"\n #include \"trace.h\"\n #include \"gmap.h\"\n \ndiff --git a/arch/s390/kvm/pv.c b/arch/s390/kvm/s390/pv.c\nsimilarity index 99%\nrename from arch/s390/kvm/pv.c\nrename to arch/s390/kvm/s390/pv.c\nindex 1beacc841ca85..f6e03e9d371ad 100644\n--- a/arch/s390/kvm/pv.c\n+++ b/arch/s390/kvm/s390/pv.c\n@@ -18,7 +18,7 @@\n #include \u003clinux/sched/mm.h\u003e\n #include \u003clinux/mmu_notifier.h\u003e\n #include \u003casm/gmap_helpers.h\u003e\n-#include \"kvm-s390.h\"\n+#include \"s390.h\"\n #include \"dat.h\"\n #include \"gaccess.h\"\n #include \"gmap.h\"\ndiff --git a/arch/s390/kvm/kvm-s390.c b/arch/s390/kvm/s390/s390.c\nsimilarity index 98%\nrename from arch/s390/kvm/kvm-s390.c\nrename to arch/s390/kvm/s390/s390.c\nindex 150b5dd2170e2..0e43754d9cf53 100644\n--- a/arch/s390/kvm/kvm-s390.c\n+++ b/arch/s390/kvm/s390/s390.c\n@@ -50,11 +50,12 @@\n #include \u003casm/fpu.h\u003e\n #include \u003casm/ap.h\u003e\n #include \u003casm/uv.h\u003e\n-#include \"kvm-s390.h\"\n+#include \"s390.h\"\n #include \"gaccess.h\"\n #include \"gmap.h\"\n #include \"faultin.h\"\n #include \"pci.h\"\n+#include \"kvm_mmu.h\"\n \n #define CREATE_TRACE_POINTS\n #include \"trace.h\"\n@@ -746,33 +747,7 @@ static void sca_del_vcpu(struct kvm_vcpu *vcpu);\n int kvm_vm_ioctl_get_dirty_log(struct kvm *kvm,\n \t\t\t       struct kvm_dirty_log *log)\n {\n-\tint r;\n-\tunsigned long n;\n-\tstruct kvm_memory_slot *memslot;\n-\tint is_dirty;\n-\n-\tif (kvm_is_ucontrol(kvm))\n-\t\treturn -EINVAL;\n-\n-\tmutex_lock(\u0026kvm-\u003eslots_lock);\n-\n-\tr = -EINVAL;\n-\tif (log-\u003eslot \u003e= KVM_USER_MEM_SLOTS)\n-\t\tgoto out;\n-\n-\tr = kvm_get_dirty_log(kvm, log, \u0026is_dirty, \u0026memslot);\n-\tif (r)\n-\t\tgoto out;\n-\n-\t/* Clear the dirty log */\n-\tif (is_dirty) {\n-\t\tn = kvm_dirty_bitmap_bytes(memslot);\n-\t\tmemset(memslot-\u003edirty_bitmap, 0, n);\n-\t}\n-\tr = 0;\n-out:\n-\tmutex_unlock(\u0026kvm-\u003eslots_lock);\n-\treturn r;\n+\treturn s390_kvm_mmu_get_dirty_log(kvm, log);\n }\n \n static void icpt_operexc_on_all_vcpus(struct kvm *kvm)\n@@ -1268,7 +1243,7 @@ static int kvm_s390_vm_start_migration(struct kvm *kvm)\n  * Must be called with kvm-\u003eslots_lock to avoid races with ourselves,\n  * kvm_s390_vm_start_migration() and kvm_s390_get_cmma_bits().\n  */\n-static int kvm_s390_vm_stop_migration(struct kvm *kvm)\n+int kvm_s390_vm_stop_migration(struct kvm *kvm)\n {\n \t/* migration mode already disabled */\n \tif (!kvm-\u003earch.migration_mode)\n@@ -5753,45 +5728,7 @@ int kvm_arch_prepare_memory_region(struct kvm *kvm,\n \t\t\t\t   struct kvm_memory_slot *new,\n \t\t\t\t   enum kvm_mr_change change)\n {\n-\tif (kvm_is_ucontrol(kvm) \u0026\u0026 new \u0026\u0026 new-\u003eid \u003c KVM_USER_MEM_SLOTS)\n-\t\treturn -EINVAL;\n-\n-\t/* When we are protected, we should not change the memory slots */\n-\tif (kvm_s390_pv_get_handle(kvm))\n-\t\treturn -EINVAL;\n-\n-\tif (change != KVM_MR_DELETE \u0026\u0026 change != KVM_MR_FLAGS_ONLY) {\n-\t\t/*\n-\t\t * A few sanity checks. The memory in userland is ok to be\n-\t\t * fragmented into various different vmas. It is okay to mmap()\n-\t\t * and munmap() stuff in this slot after doing this call at any\n-\t\t * time.\n-\t\t */\n-\t\tif (new-\u003euserspace_addr \u0026 ~PAGE_MASK)\n-\t\t\treturn -EINVAL;\n-\t\tif ((new-\u003ebase_gfn + new-\u003enpages) * PAGE_SIZE \u003e kvm-\u003earch.mem_limit)\n-\t\t\treturn -EINVAL;\n-\t\tif (!asce_contains_gfn(kvm-\u003earch.gmap-\u003easce, new-\u003ebase_gfn + new-\u003enpages - 1))\n-\t\t\treturn -EINVAL;\n-\t}\n-\n-\tif (!kvm-\u003earch.migration_mode)\n-\t\treturn 0;\n-\n-\t/*\n-\t * Turn off migration mode when:\n-\t * - userspace creates a new memslot with dirty logging off,\n-\t * - userspace modifies an existing memslot (MOVE or FLAGS_ONLY) and\n-\t *   dirty logging is turned off.\n-\t * Migration mode expects dirty page logging being enabled to store\n-\t * its dirty bitmap.\n-\t */\n-\tif (change != KVM_MR_DELETE \u0026\u0026\n-\t    !(new-\u003eflags \u0026 KVM_MEM_LOG_DIRTY_PAGES))\n-\t\tWARN(kvm_s390_vm_stop_migration(kvm),\n-\t\t     \"Failed to stop migration mode\");\n-\n-\treturn 0;\n+\treturn s390_kvm_mmu_prepare_memory_region(kvm, old, new, change);\n }\n \n void kvm_arch_commit_memory_region(struct kvm *kvm,\n@@ -5799,42 +5736,7 @@ void kvm_arch_commit_memory_region(struct kvm *kvm,\n \t\t\t\tconst struct kvm_memory_slot *new,\n \t\t\t\tenum kvm_mr_change change)\n {\n-\tstruct kvm_s390_mmu_cache *mc = NULL;\n-\tint rc = 0;\n-\n-\tif (change == KVM_MR_FLAGS_ONLY)\n-\t\treturn;\n-\n-\tmc = kvm_s390_new_mmu_cache();\n-\tif (!mc) {\n-\t\trc = -ENOMEM;\n-\t\tgoto out;\n-\t}\n-\n-\tscoped_guard(write_lock, \u0026kvm-\u003emmu_lock) {\n-\t\tswitch (change) {\n-\t\tcase KVM_MR_DELETE:\n-\t\t\trc = dat_delete_slot(mc, kvm-\u003earch.gmap-\u003easce, old-\u003ebase_gfn, old-\u003enpages);\n-\t\t\tbreak;\n-\t\tcase KVM_MR_MOVE:\n-\t\t\trc = dat_delete_slot(mc, kvm-\u003earch.gmap-\u003easce, old-\u003ebase_gfn, old-\u003enpages);\n-\t\t\tif (rc)\n-\t\t\t\tbreak;\n-\t\t\tfallthrough;\n-\t\tcase KVM_MR_CREATE:\n-\t\t\trc = dat_create_slot(mc, kvm-\u003earch.gmap-\u003easce, new-\u003ebase_gfn, new-\u003enpages);\n-\t\t\tbreak;\n-\t\tcase KVM_MR_FLAGS_ONLY:\n-\t\t\tbreak;\n-\t\tdefault:\n-\t\t\tWARN(1, \"Unknown KVM MR CHANGE: %d\\n\", change);\n-\t\t}\n-\t}\n-out:\n-\tif (rc)\n-\t\tpr_warn(\"failed to commit memory region\\n\");\n-\tkvm_s390_free_mmu_cache(mc);\n-\treturn;\n+\ts390_kvm_mmu_commit_memory_region(kvm, old, new, change);\n }\n \n /**\n@@ -5857,7 +5759,8 @@ void kvm_arch_commit_memory_region(struct kvm *kvm,\n  * * other error codes \u003c 0 in case of other errors.\n  * * otherwise a number \u003e 0 of bytes that have been faulted in successfully.\n  */\n-long kvm_arch_vcpu_pre_fault_memory(struct kvm_vcpu *vcpu, struct kvm_pre_fault_memory *range)\n+long kvm_arch_vcpu_pre_fault_memory(struct kvm_vcpu *vcpu,\n+\t\t\t\t    struct kvm_pre_fault_memory *range)\n {\n \tstruct guest_fault f = { .gfn = gpa_to_gfn(range-\u003egpa), };\n \tgpa_t end;\n@@ -5926,6 +5829,14 @@ bool kvm_unmap_gfn_range(struct kvm *kvm, struct kvm_gfn_range *range)\n \treturn gmap_unmap_gfn_range(kvm-\u003earch.gmap, range-\u003eslot, range-\u003estart, range-\u003eend);\n }\n \n+#ifdef CONFIG_HAVE_KVM_VCPU_RUN_PID_CHANGE\n+/* Make s390 compile if arm64-on-s390 is selected */\n+int kvm_arch_vcpu_run_pid_change(struct kvm_vcpu *vcpu)\n+{\n+\treturn 0;\n+}\n+#endif /* CONFIG_HAVE_KVM_VCPU_RUN_PID_CHANGE */\n+\n static inline unsigned long nonhyp_mask(int i)\n {\n \tunsigned int nonhyp_fai = (sclp.hmfai \u003c\u003c i * 2) \u003e\u003e 30;\ndiff --git a/arch/s390/kvm/kvm-s390.h b/arch/s390/kvm/s390/s390.h\nsimilarity index 94%\nrename from arch/s390/kvm/kvm-s390.h\nrename to arch/s390/kvm/s390/s390.h\nindex 6d2842fb71a33..c846b7c6be93e 100644\n--- a/arch/s390/kvm/kvm-s390.h\n+++ b/arch/s390/kvm/s390/s390.h\n@@ -452,7 +452,7 @@ void kvm_s390_vsie_destroy(struct kvm *kvm);\n int kvm_s390_handle_sigp(struct kvm_vcpu *vcpu);\n int kvm_s390_handle_sigp_pei(struct kvm_vcpu *vcpu);\n \n-/* implemented in kvm-s390.c */\n+/* implemented in s390.c */\n int kvm_s390_try_set_tod_clock(struct kvm *kvm, const struct kvm_s390_vm_tod_clock *gtod);\n int kvm_s390_store_status_unloaded(struct kvm_vcpu *vcpu, unsigned long addr);\n int kvm_s390_vcpu_store_status(struct kvm_vcpu *vcpu, unsigned long addr);\n@@ -594,6 +594,11 @@ static inline bool kvm_s390_cur_gmap_fault_is_write(void)\n \treturn test_facility(75) \u0026\u0026 (current-\u003ethread.gmap_teid.fsi == TEID_FSI_STORE);\n }\n \n+static __always_inline int kvm_s390_is_migration_mode(struct kvm *kvm)\n+{\n+\treturn kvm-\u003earch.migration_mode;\n+}\n+\n /**\n  * kvm_s390_vcpu_crypto_reset_all\n  *\n@@ -624,4 +629,33 @@ void kvm_s390_vcpu_pci_enable_interp(struct kvm *kvm);\n  */\n extern unsigned int diag9c_forwarding_hz;\n \n+/*\n+ * Must be called with kvm-\u003eslots_lock to avoid races with ourselves and\n+ * kvm_s390_vm_start_migration.\n+ */\n+int kvm_s390_vm_stop_migration(struct kvm *kvm);\n+\n+/* implemented in dat.c */\n+int dat_get_storage_key(union asce asce, gfn_t gfn, union skey *skey);\n+int dat_set_storage_key(struct kvm_s390_mmu_cache *mc, union asce asce, gfn_t gfn,\n+\t\t\tunion skey skey, bool nq);\n+int dat_cond_set_storage_key(struct kvm_s390_mmu_cache *mmc, union asce asce, gfn_t gfn,\n+\t\t\t     union skey skey, union skey *oldkey, bool nq, bool mr, bool mc);\n+int dat_reset_reference_bit(union asce asce, gfn_t gfn);\n+long dat_reset_skeys(union asce asce, gfn_t start);\n+\n+/* implemented in gmap.c */\n+int gmap_enable_skeys(struct gmap *gmap);\n+void _gmap_set_cmma_all(struct gmap *gmap, bool dirty);\n+\n+static inline void gmap_set_cmma_all_dirty(struct gmap *gmap)\n+{\n+\t_gmap_set_cmma_all(gmap, true);\n+}\n+\n+static inline void gmap_set_cmma_all_clean(struct gmap *gmap)\n+{\n+\t_gmap_set_cmma_all(gmap, false);\n+}\n+\n #endif\ndiff --git a/arch/s390/kvm/sigp.c b/arch/s390/kvm/s390/sigp.c\nsimilarity index 99%\nrename from arch/s390/kvm/sigp.c\nrename to arch/s390/kvm/s390/sigp.c\nindex 55c34cb354281..131b3371ef4f8 100644\n--- a/arch/s390/kvm/sigp.c\n+++ b/arch/s390/kvm/s390/sigp.c\n@@ -14,7 +14,7 @@\n #include \u003clinux/slab.h\u003e\n #include \u003casm/sigp.h\u003e\n #include \"gaccess.h\"\n-#include \"kvm-s390.h\"\n+#include \"s390.h\"\n #include \"trace.h\"\n \n static int __sigp_sense(struct kvm_vcpu *vcpu, struct kvm_vcpu *dst_vcpu,\ndiff --git a/arch/s390/kvm/trace-s390.h b/arch/s390/kvm/s390/trace-s390.h\nsimilarity index 100%\nrename from arch/s390/kvm/trace-s390.h\nrename to arch/s390/kvm/s390/trace-s390.h\ndiff --git a/arch/s390/kvm/trace.h b/arch/s390/kvm/s390/trace.h\nsimilarity index 97%\nrename from arch/s390/kvm/trace.h\nrename to arch/s390/kvm/s390/trace.h\nindex aa419eb6a0c80..97774fe09a85c 100644\n--- a/arch/s390/kvm/trace.h\n+++ b/arch/s390/kvm/s390/trace.h\n@@ -45,20 +45,6 @@ TRACE_EVENT(kvm_s390_skey_related_inst,\n \t    VCPU_TP_PRINTK(\"%s\", \"storage key related instruction\")\n \t);\n \n-TRACE_EVENT(kvm_s390_major_guest_pfault,\n-\t    TP_PROTO(VCPU_PROTO_COMMON),\n-\t    TP_ARGS(VCPU_ARGS_COMMON),\n-\n-\t    TP_STRUCT__entry(\n-\t\t    VCPU_FIELD_COMMON\n-\t\t    ),\n-\n-\t    TP_fast_assign(\n-\t\t    VCPU_ASSIGN_COMMON\n-\t\t    ),\n-\t    VCPU_TP_PRINTK(\"%s\", \"major fault, maybe applicable for pfault\")\n-\t);\n-\n TRACE_EVENT(kvm_s390_pfault_init,\n \t    TP_PROTO(VCPU_PROTO_COMMON, long pfault_token),\n \t    TP_ARGS(VCPU_ARGS_COMMON, pfault_token),\ndiff --git a/arch/s390/kvm/vsie.c b/arch/s390/kvm/s390/vsie.c\nsimilarity index 99%\nrename from arch/s390/kvm/vsie.c\nrename to arch/s390/kvm/s390/vsie.c\nindex eea24562e7db2..c4a03b310fea4 100644\n--- a/arch/s390/kvm/vsie.c\n+++ b/arch/s390/kvm/s390/vsie.c\n@@ -23,7 +23,7 @@\n #include \u003casm/nmi.h\u003e\n #include \u003casm/dis.h\u003e\n #include \u003casm/facility.h\u003e\n-#include \"kvm-s390.h\"\n+#include \"s390.h\"\n #include \"gaccess.h\"\n #include \"gmap.h\"\n \ndiff --git a/arch/s390/tools/Makefile b/arch/s390/tools/Makefile\nindex f2862364fb422..3e0f21b552daf 100644\n--- a/arch/s390/tools/Makefile\n+++ b/arch/s390/tools/Makefile\n@@ -3,12 +3,20 @@\n # Makefile for s390 specific build tools\n #\n \n+include $(srctree)/arch/s390/tools/Makefile.arm64h\n+\n kapi := arch/$(ARCH)/include/generated/asm\n kapi-hdrs-y := $(kapi)/facility-defs.h $(kapi)/dis-defs.h\n \n+targets += $(addprefix ../../../,$(kapi-hdrs-y))\n+# Convert ARM64 absolute paths to relative before Kbuild adds $(obj)/ prefix\n+targets += $(patsubst $(objtree)/%,../../../%,$(ARM64_TARGETS))\n+\n+kapi-hdrs-$(CONFIG_KVM_ARM64) += $(ARM64_TARGETS)\n+\n PHONY += kapi\n \n-kapi:\t$(kapi-hdrs-y)\n+kapi:\t$(kapi-hdrs-y) $(ARM64_TARGETS)\n \n hostprogs\t\t    += gen_facilities\n hostprogs\t\t    += gen_opcode_table\ndiff --git a/arch/s390/tools/Makefile.arm64h b/arch/s390/tools/Makefile.arm64h\nnew file mode 100644\nindex 0000000000000..8fbd9cb486952\n--- /dev/null\n+++ b/arch/s390/tools/Makefile.arm64h\n@@ -0,0 +1,57 @@\n+# SPDX-License-Identifier: GPL-2.0\n+#\n+# Share ARM64 headers with s390 KVM\n+#\n+\n+arm64api := $(objtree)/arch/$(ARCH)/include/generated/arm64\n+arm64uapi := $(objtree)/arch/$(ARCH)/include/generated/uapi/arm64\n+\n+# List of ARM64 headers to share with s390 KVM\n+# Format: [uapi:]header.h or header-gen.h\n+#\n+# * header.h - from arch/arm64/include/asm/ to arm64/\n+# * uapi:header.h - from arch/arm64/include/uapi/asm/ to uapi/arm64/\n+# * header-gen.h - generated as header-gen.h from ARM64 header header.h\n+# If a header contains partial markers (#ifdef ARM64_S390_COMMON) only this part will be copied.\n+# If the file does not contain any markers the whole file will be copied.\n+ARM64_SHARED_HEADERS := \\\n+\tbrk-imm.h \\\n+\tesr.h \\\n+\tkvm_arm.h \\\n+\tkvm_emulate-gen.h \\\n+\tkvm_host.h \\\n+\tptrace-gen.h \\\n+\tsysreg-gen.h \\\n+\tuapi:hwcap.h \\\n+\tuapi:kvm.h \\\n+\tuapi:ptrace.h \\\n+\tuapi:sve_context.h \\\n+\n+quiet_cmd_gen_arm_hdr = GEN     $@\n+      cmd_gen_arm_hdr = mkdir -p $(dir $@); \\\n+                      $(AWK) -f $(src)/copy-arm64h.awk $\u003c \u003e $@ || \\\n+                      $(AWK) -f $(src)/copy-arm64h-full.awk -v srcfile=\"$(subst $(srctree)/,,$(subst $(srctree)/../,,$\u003c))\" $\u003c \u003e $@ || \\\n+\t\t      { echo \"Error: Unbalanced ARM64_S390_COMMON markers in $\u003c\" \u003e\u00262; rm -f $@; exit 1; }\n+\n+arm64-type = $(firstword $(subst :, ,$(1)))\n+arm64-base = $(or $(word 2,$(subst :, ,$(1))),$(1))\n+arm64-src-base = $(patsubst %-gen.h,%.h,$(call arm64-base,$(1)))\n+\n+arm64-src = $(srctree)/arch/arm64/include/$(if $(filter uapi,$(call arm64-type,$(1))),uapi/)asm/$(call arm64-src-base,$(1))\n+arm64-dst = $(objtree)/$(if $(filter uapi,$(call arm64-type,$(1))),$(arm64uapi),$(arm64api))/$(call arm64-base,$(1))\n+\n+$(foreach hdr,$(ARM64_SHARED_HEADERS),\\\n+\t$(eval $(call arm64-dst,$(hdr)): $(call arm64-src,$(hdr)) $(src)/copy-arm64h.awk $(src)/copy-arm64h-full.awk))\n+\n+ARM64_TARGETS := $(sort $(foreach hdr,$(ARM64_SHARED_HEADERS),$(call arm64-dst,$(hdr))))\n+\n+$(ARM64_TARGETS):\n+\t$(call cmd,gen_arm_hdr)\n+\n+quiet_cmd_gen_sysreg_arm64 = GEN     $@\n+      cmd_gen_sysreg_arm64 = mkdir -p $(dir $@); $(AWK) -f $(srctree)/arch/arm64/tools/gen-sysreg.awk $(srctree)/arch/arm64/tools/sysreg \u003e $@\n+\n+$(arm64api)/sysreg-defs.h: $(srctree)/arch/arm64/tools/gen-sysreg.awk $(srctree)/arch/arm64/tools/sysreg FORCE\n+\t$(call if_changed,gen_sysreg_arm64)\n+\n+ARM64_TARGETS += $(arm64api)/sysreg-defs.h\ndiff --git a/arch/s390/tools/copy-arm64h-full.awk b/arch/s390/tools/copy-arm64h-full.awk\nnew file mode 100644\nindex 0000000000000..a6aaf9cc33326\n--- /dev/null\n+++ b/arch/s390/tools/copy-arm64h-full.awk\n@@ -0,0 +1,47 @@\n+#!/usr/bin/awk -f\n+# SPDX-License-Identifier: GPL-2.0\n+#\n+# Process entire ARM64 headers for sharing with s390 KVM\n+#\n+# Usage: copy-arm64h-full.awk -v srcfile=\u003csource_path\u003e \u003cinput_file\u003e\n+#\n+# This processes the entire file (unlike copy-arm64h.awk which only extracts marked sections)\n+\n+BEGIN {\n+\tmax_guard_line = 25\n+\tguard_found = 0\n+\theader_added = 0\n+}\n+\n+# Find and process the include guard in the first few lines\n+NR \u003c= max_guard_line \u0026\u0026 !guard_found \u0026\u0026 /^#ifndef [A-Z_0-9]+$/ {\n+\tguard_name = $2\n+\tguard_found = 1\n+\tprint \"/* This header was copied from \" srcfile \" */\"\n+\tprint \"\"\n+\tprint\n+\theader_added = 1\n+\tnext\n+}\n+\n+# Transform include directives\n+/^#include \u003cuapi\\/asm\\// {\n+\tsub(/\u003cuapi\\/asm\\//, \"\u003cuapi/arm64/\")\n+\tprint\n+\tnext\n+}\n+\n+/^#include \u003casm\\// {\n+\tsub(/\u003casm\\//, \"\u003carm64/\")\n+\tprint\n+\tnext\n+}\n+\n+/ARM64_S390_COMMON/ {\n+\texit 1\n+}\n+\n+# Pass through all other lines\n+{\n+\tprint\n+}\ndiff --git a/arch/s390/tools/copy-arm64h.awk b/arch/s390/tools/copy-arm64h.awk\nnew file mode 100644\nindex 0000000000000..d74df368c1b57\n--- /dev/null\n+++ b/arch/s390/tools/copy-arm64h.awk\n@@ -0,0 +1,72 @@\n+#!/usr/bin/awk -f\n+# SPDX-License-Identifier: GPL-2.0\n+#\n+# Extract marked sections from ARM64 headers for sharing with s390 KVM\n+#\n+# Usage: share-arm64-header.awk \u003cinput_file\u003e\n+#\n+# Extracts all sections between start/end markers. If no markers found, signals for fallback.\n+#TODO verification script or c file for arm to verify the ifdef things keep working\n+BEGIN {\n+\t# Constants\n+\tstart_pattern = \"^#ifdef ARM64_S390_COMMON$\"\n+\tend_pattern = \"^#endif \\\\/\\\\* ARM64_S390_COMMON \\\\*\\\\/$\"\n+\tmax_guard_line = 25\n+\n+\t# State variables\n+\tcopying = found_marker = 0\n+\tguard_name = \"\"\n+\tfile_header_done = 0\n+}\n+\n+NR \u003c= max_guard_line \u0026\u0026 !guard_name \u0026\u0026 /^#ifndef [A-Za-z0-9_]+$/ {\n+\tguard_name = $2\n+\tfilename = FILENAME\n+\tsub(/^.*arch\\/arm64\\//, \"arch/arm64/\", filename)\n+\tprint \"/*\"\n+\tprint \" * This header was automatically generated from \" filename\n+\tprint \" * Do not modify this file directly.\"\n+\tprint \" */\"\n+\tprint \"#ifndef \" guard_name\n+\tprint \"#define \" guard_name\n+\tprint \"\"\n+\tnext\n+}\n+\n+NR \u003e max_guard_line \u0026\u0026 !guard_name \u0026\u0026 !file_header_done {\n+\tprint \"error: no include guard found in first \" max_guard_line \" lines\" \u003e \"/dev/stderr\"\n+\tfile_header_done = 1\n+\texit 1\n+}\n+\n+!guard_name {\n+\tprint\n+\tnext\n+}\n+\n+$0 ~ start_pattern {\n+\tif (copying) { exit 1 }\n+\tcopying = found_marker = 1\n+\tnext\n+}\n+\n+guard_name \u0026\u0026 !found_marker {\n+\tnext\n+}\n+\n+$0 ~ end_pattern { copying = 0; next }\n+\n+copying {\n+\tgsub(/#include \u003casm\\//, \"#include \u003carm64/\")\n+\tgsub(/#include \u003cuapi\\/asm\\//, \"#include \u003cuapi/arm64/\")\n+\tprint\n+\tnext\n+}\n+\n+END {\n+\tif (found_marker) {\n+\t\tprint \"\"\n+\t\tprint \"#endif /* \" guard_name \" */\"\n+\t}\n+\texit !found_marker || copying\n+}\ndiff --git a/arch/s390/tools/opcodes.txt b/arch/s390/tools/opcodes.txt\nindex def2659f6602d..0e4773c94af0d 100644\n--- a/arch/s390/tools/opcodes.txt\n+++ b/arch/s390/tools/opcodes.txt\n@@ -594,6 +594,9 @@ b9a0\tclp\tRRF_U0RR\n b9a1\ttpei\tRRE_RR\n b9a2\tptf\tRRE_R0\n b9a4\tuvc\tRRF_URR\n+b9a5\tsae\tRRE_R0\n+b9a6\tlasrm\tRRE_R0\n+b9a7\tstiasrm\tRRE_R0\n b9aa\tlptea\tRRF_RURR2\n b9ab\tessa\tRRF_U0RR\n b9ac\tirbm\tRRE_RR\ndiff --git a/arch/x86/include/asm/kvm_page_track.h b/arch/x86/include/asm/kvm_page_track.h\nindex 3d040741044b4..046a25c8fe4f8 100644\n--- a/arch/x86/include/asm/kvm_page_track.h\n+++ b/arch/x86/include/asm/kvm_page_track.h\n@@ -44,13 +44,13 @@ struct kvm_page_track_notifier_node {\n \t\t\t\t    struct kvm_page_track_notifier_node *node);\n };\n \n-int kvm_page_track_register_notifier(struct kvm *kvm,\n+int kvm_page_track_register_notifier(struct file *file,\n \t\t\t\t     struct kvm_page_track_notifier_node *n);\n-void kvm_page_track_unregister_notifier(struct kvm *kvm,\n+void kvm_page_track_unregister_notifier(struct file *file,\n \t\t\t\t\tstruct kvm_page_track_notifier_node *n);\n \n-int kvm_write_track_add_gfn(struct kvm *kvm, gfn_t gfn);\n-int kvm_write_track_remove_gfn(struct kvm *kvm, gfn_t gfn);\n+int kvm_write_track_add_gfn(struct file *file, gfn_t gfn);\n+int kvm_write_track_remove_gfn(struct file *file, gfn_t gfn);\n #else\n /*\n  * Allow defining a node in a structure even if page tracking is disabled, e.g.\ndiff --git a/arch/x86/kvm/Makefile b/arch/x86/kvm/Makefile\nindex 77337c37324b1..713fb6e76730e 100644\n--- a/arch/x86/kvm/Makefile\n+++ b/arch/x86/kvm/Makefile\n@@ -61,9 +61,6 @@ exports_grep_trailer := --include='*.[ch]' -nrw $(srctree)/virt/kvm $(srctree)/a\n \t\t\t\t-e kvm_page_track_unregister_notifier \\\n \t\t\t\t-e kvm_write_track_add_gfn \\\n \t\t\t\t-e kvm_write_track_remove_gfn \\\n-\t\t\t\t-e kvm_get_kvm \\\n-\t\t\t\t-e kvm_get_kvm_safe \\\n-\t\t\t\t-e kvm_put_kvm\n \n # Force grep to emit a goofy group separator that can in turn be replaced with\n # the above newline macro (newlines in Make are a nightmare).  Note, grep only\ndiff --git a/arch/x86/kvm/mmu/page_track.c b/arch/x86/kvm/mmu/page_track.c\nindex 7e8195a311bb0..860049ed24eab 100644\n--- a/arch/x86/kvm/mmu/page_track.c\n+++ b/arch/x86/kvm/mmu/page_track.c\n@@ -237,10 +237,11 @@ static int kvm_enable_external_write_tracking(struct kvm *kvm)\n  * register the notifier so that event interception for the tracked guest\n  * pages can be received.\n  */\n-int kvm_page_track_register_notifier(struct kvm *kvm,\n+int kvm_page_track_register_notifier(struct file *file,\n \t\t\t\t     struct kvm_page_track_notifier_node *n)\n {\n \tstruct kvm_page_track_notifier_head *head;\n+\tstruct kvm *kvm = file_to_kvm(file);\n \tint r;\n \n \tif (!kvm || kvm-\u003emm != current-\u003emm)\n@@ -252,7 +253,7 @@ int kvm_page_track_register_notifier(struct kvm *kvm,\n \t\t\treturn r;\n \t}\n \n-\tkvm_get_kvm(kvm);\n+\tget_file(file);\n \n \thead = \u0026kvm-\u003earch.track_notifier_head;\n \n@@ -267,10 +268,11 @@ EXPORT_SYMBOL_GPL(kvm_page_track_register_notifier);\n  * stop receiving the event interception. It is the opposed operation of\n  * kvm_page_track_register_notifier().\n  */\n-void kvm_page_track_unregister_notifier(struct kvm *kvm,\n+void kvm_page_track_unregister_notifier(struct file *file,\n \t\t\t\t\tstruct kvm_page_track_notifier_node *n)\n {\n \tstruct kvm_page_track_notifier_head *head;\n+\tstruct kvm *kvm = file_to_kvm(file);\n \n \thead = \u0026kvm-\u003earch.track_notifier_head;\n \n@@ -279,7 +281,7 @@ void kvm_page_track_unregister_notifier(struct kvm *kvm,\n \twrite_unlock(\u0026kvm-\u003emmu_lock);\n \tsynchronize_srcu(\u0026head-\u003etrack_srcu);\n \n-\tkvm_put_kvm(kvm);\n+\tfput(file);\n }\n EXPORT_SYMBOL_GPL(kvm_page_track_unregister_notifier);\n \n@@ -339,8 +341,9 @@ void kvm_page_track_delete_slot(struct kvm *kvm, struct kvm_memory_slot *slot)\n  * @kvm: the guest instance we are interested in.\n  * @gfn: the guest page.\n  */\n-int kvm_write_track_add_gfn(struct kvm *kvm, gfn_t gfn)\n+int kvm_write_track_add_gfn(struct file *file, gfn_t gfn)\n {\n+\tstruct kvm *kvm = file_to_kvm(file);\n \tstruct kvm_memory_slot *slot;\n \tint idx;\n \n@@ -369,8 +372,9 @@ EXPORT_SYMBOL_GPL(kvm_write_track_add_gfn);\n  * @kvm: the guest instance we are interested in.\n  * @gfn: the guest page.\n  */\n-int kvm_write_track_remove_gfn(struct kvm *kvm, gfn_t gfn)\n+int kvm_write_track_remove_gfn(struct file *file, gfn_t gfn)\n {\n+\tstruct kvm *kvm = file_to_kvm(file);\n \tstruct kvm_memory_slot *slot;\n \tint idx;\n \ndiff --git a/drivers/s390/char/sclp_early.c b/drivers/s390/char/sclp_early.c\nindex 22dd797e62291..e58d24b95bd1e 100644\n--- a/drivers/s390/char/sclp_early.c\n+++ b/drivers/s390/char/sclp_early.c\n@@ -96,6 +96,7 @@ static void __init sclp_early_facilities_detect(void)\n \t\tsclp.has_ib = cpue-\u003eib;\n \t\tsclp.has_cei = cpue-\u003ecei;\n \t\tsclp.has_skey = cpue-\u003eskey;\n+\t\tsclp.has_aef = cpue-\u003eaef;\n \t\tbreak;\n \t}\n \ndiff --git a/drivers/s390/crypto/vfio_ap_ops.c b/drivers/s390/crypto/vfio_ap_ops.c\nindex 44b3a1dcc1b36..bf6a5b959fcd8 100644\n--- a/drivers/s390/crypto/vfio_ap_ops.c\n+++ b/drivers/s390/crypto/vfio_ap_ops.c\n@@ -8,6 +8,7 @@\n  *\t      Halil Pasic \u003cpasic@linux.ibm.com\u003e\n  *\t      Pierre Morel \u003cpmorel@linux.ibm.com\u003e\n  */\n+#include \"linux/cleanup.h\"\n #include \u003clinux/string.h\u003e\n #include \u003clinux/vfio.h\u003e\n #include \u003clinux/device.h\u003e\n@@ -1815,13 +1816,26 @@ static const struct attribute_group *vfio_ap_mdev_attr_groups[] = {\n  * @matrix_mdev: a mediated matrix device\n  * @kvm: reference to KVM instance\n  *\n- * Return: 0 if no other mediated matrix device has a reference to @kvm;\n- * otherwise, returns an -EPERM.\n+ * Returns: 0 if the reference to kvm is successfully retrieved from @kvm_file\n+ * and set into @matrix_mdev; otherwise, returns:\n+ *\t-ENOENT if a reference to kvm could not be retrieved from @kvm_file\n+ *\t-EPERM if another mediated matrix device already has a reference to the same kvm instance\n+ * \n  */\n static int vfio_ap_mdev_set_kvm(struct ap_matrix_mdev *matrix_mdev,\n-\t\t\t\tstruct kvm *kvm)\n+\t\t\t\tstruct file *kvm_file)\n {\n+\tstruct file *kvm_file_ref __free(fput) = NULL;\n \tstruct ap_matrix_mdev *m;\n+\tstruct kvm *kvm;\n+\n+\tkvm_file_ref = get_file_active(\u0026kvm_file);\n+\tif (!kvm_file_ref)\n+\t\treturn -ENOENT;\n+\n+\tkvm = kvm_file-\u003eprivate_data;\n+\tif (!kvm)\n+\t\treturn -ENOENT;\n \n \tif (kvm-\u003earch.crypto.crycbd) {\n \t\tdown_write(\u0026kvm-\u003earch.crypto.pqap_hook_rwsem);\n@@ -1837,13 +1851,13 @@ static int vfio_ap_mdev_set_kvm(struct ap_matrix_mdev *matrix_mdev,\n \t\t\t}\n \t\t}\n \n-\t\tkvm_get_kvm(kvm);\n \t\tmatrix_mdev-\u003ekvm = kvm;\n \t\tvfio_ap_mdev_update_guest_apcb(matrix_mdev);\n \n \t\trelease_update_locks_for_kvm(kvm);\n \t}\n \n+\tno_free_ptr(kvm_file_ref);\n \treturn 0;\n }\n \n@@ -1891,7 +1905,7 @@ static void vfio_ap_mdev_unset_kvm(struct ap_matrix_mdev *matrix_mdev)\n \n \t\tkvm_arch_crypto_clear_masks(kvm);\n \t\tvfio_ap_mdev_reset_queues(matrix_mdev);\n-\t\tkvm_put_kvm(kvm);\n+\t\tfput(kvm-\u003efile);\n \t\tmatrix_mdev-\u003ekvm = NULL;\n \n \t\trelease_update_locks_for_kvm(kvm);\ndiff --git a/drivers/vfio/group.c b/drivers/vfio/group.c\nindex b2299e5bc6df3..807378cb48de0 100644\n--- a/drivers/vfio/group.c\n+++ b/drivers/vfio/group.c\n@@ -860,7 +860,7 @@ bool vfio_group_enforced_coherent(struct vfio_group *group)\n \treturn ret;\n }\n \n-void vfio_group_set_kvm(struct vfio_group *group, struct kvm *kvm)\n+void vfio_group_set_kvm(struct vfio_group *group, struct file *kvm)\n {\n \tspin_lock(\u0026group-\u003ekvm_ref_lock);\n \tgroup-\u003ekvm = kvm;\ndiff --git a/drivers/vfio/pci/vfio_pci_zdev.c b/drivers/vfio/pci/vfio_pci_zdev.c\nindex 0990fdb146b78..d3a1101013531 100644\n--- a/drivers/vfio/pci/vfio_pci_zdev.c\n+++ b/drivers/vfio/pci/vfio_pci_zdev.c\n@@ -144,6 +144,7 @@ int vfio_pci_info_zdev_add_caps(struct vfio_pci_core_device *vdev,\n int vfio_pci_zdev_open_device(struct vfio_pci_core_device *vdev)\n {\n \tstruct zpci_dev *zdev = to_zpci(vdev-\u003epdev);\n+\tstruct kvm *kvm;\n \n \tif (!zdev)\n \t\treturn -ENODEV;\n@@ -151,8 +152,12 @@ int vfio_pci_zdev_open_device(struct vfio_pci_core_device *vdev)\n \tif (!vdev-\u003evdev.kvm)\n \t\treturn 0;\n \n+\tkvm = vdev-\u003evdev.kvm-\u003eprivate_data;\n+\tif (!kvm)\n+\t\treturn -ENOENT;\n+\n \tif (zpci_kvm_hook.kvm_register)\n-\t\treturn zpci_kvm_hook.kvm_register(zdev, vdev-\u003evdev.kvm);\n+\t\treturn zpci_kvm_hook.kvm_register(zdev, kvm);\n \n \treturn -ENOENT;\n }\ndiff --git a/drivers/vfio/vfio.h b/drivers/vfio/vfio.h\nindex e4b72e79b7e3e..ede8a8001b032 100644\n--- a/drivers/vfio/vfio.h\n+++ b/drivers/vfio/vfio.h\n@@ -23,7 +23,7 @@ struct vfio_device_file {\n \tu8 access_granted;\n \tu32 devid; /* only valid when iommufd is valid */\n \tspinlock_t kvm_ref_lock; /* protect kvm field */\n-\tstruct kvm *kvm;\n+\tstruct file *kvm;\n \tstruct iommufd_ctx *iommufd; /* protected by struct vfio_device_set::lock */\n };\n \n@@ -88,7 +88,7 @@ struct vfio_group {\n #endif\n \tenum vfio_group_type\t\ttype;\n \tstruct mutex\t\t\tgroup_lock;\n-\tstruct kvm\t\t\t*kvm;\n+\tstruct file\t\t\t*kvm;\n \tstruct file\t\t\t*opened_file;\n \tstruct iommufd_ctx\t\t*iommufd;\n \tspinlock_t\t\t\tkvm_ref_lock;\n@@ -107,7 +107,7 @@ void vfio_device_group_unuse_iommu(struct vfio_device *device);\n void vfio_df_group_close(struct vfio_device_file *df);\n struct vfio_group *vfio_group_from_file(struct file *file);\n bool vfio_group_enforced_coherent(struct vfio_group *group);\n-void vfio_group_set_kvm(struct vfio_group *group, struct kvm *kvm);\n+void vfio_group_set_kvm(struct vfio_group *group, struct file *kvm);\n bool vfio_device_has_container(struct vfio_device *device);\n int __init vfio_group_init(void);\n void vfio_group_cleanup(void);\n@@ -434,11 +434,11 @@ static inline void vfio_virqfd_exit(void)\n #endif\n \n #if IS_ENABLED(CONFIG_KVM)\n-void vfio_device_get_kvm_safe(struct vfio_device *device, struct kvm *kvm);\n+void vfio_device_get_kvm_safe(struct vfio_device *device, struct file *kvm);\n void vfio_device_put_kvm(struct vfio_device *device);\n #else\n static inline void vfio_device_get_kvm_safe(struct vfio_device *device,\n-\t\t\t\t\t    struct kvm *kvm)\n+\t\t\t\t\t    struct file *kvm)\n {\n }\n \ndiff --git a/drivers/vfio/vfio_main.c b/drivers/vfio/vfio_main.c\nindex ed538aebb0b8e..8fad1ca1189f8 100644\n--- a/drivers/vfio/vfio_main.c\n+++ b/drivers/vfio/vfio_main.c\n@@ -448,35 +448,13 @@ void vfio_unregister_group_dev(struct vfio_device *device)\n EXPORT_SYMBOL_GPL(vfio_unregister_group_dev);\n \n #if IS_ENABLED(CONFIG_KVM)\n-void vfio_device_get_kvm_safe(struct vfio_device *device, struct kvm *kvm)\n+void vfio_device_get_kvm_safe(struct vfio_device *device, struct file *kvm)\n {\n-\tvoid (*pfn)(struct kvm *kvm);\n-\tbool (*fn)(struct kvm *kvm);\n-\tbool ret;\n-\n \tlockdep_assert_held(\u0026device-\u003edev_set-\u003elock);\n \n-\tif (!kvm)\n-\t\treturn;\n-\n-\tpfn = symbol_get(kvm_put_kvm);\n-\tif (WARN_ON(!pfn))\n+\tif (!get_file_active(\u0026kvm))\n \t\treturn;\n \n-\tfn = symbol_get(kvm_get_kvm_safe);\n-\tif (WARN_ON(!fn)) {\n-\t\tsymbol_put(kvm_put_kvm);\n-\t\treturn;\n-\t}\n-\n-\tret = fn(kvm);\n-\tsymbol_put(kvm_get_kvm_safe);\n-\tif (!ret) {\n-\t\tsymbol_put(kvm_put_kvm);\n-\t\treturn;\n-\t}\n-\n-\tdevice-\u003eput_kvm = pfn;\n \tdevice-\u003ekvm = kvm;\n }\n \n@@ -487,14 +465,7 @@ void vfio_device_put_kvm(struct vfio_device *device)\n \tif (!device-\u003ekvm)\n \t\treturn;\n \n-\tif (WARN_ON(!device-\u003eput_kvm))\n-\t\tgoto clear;\n-\n-\tdevice-\u003eput_kvm(device-\u003ekvm);\n-\tdevice-\u003eput_kvm = NULL;\n-\tsymbol_put(kvm_put_kvm);\n-\n-clear:\n+\tfput(device-\u003ekvm);\n \tdevice-\u003ekvm = NULL;\n }\n #endif\n@@ -1520,7 +1491,7 @@ bool vfio_file_enforced_coherent(struct file *file)\n }\n EXPORT_SYMBOL_GPL(vfio_file_enforced_coherent);\n \n-static void vfio_device_file_set_kvm(struct file *file, struct kvm *kvm)\n+static void vfio_device_file_set_kvm(struct file *file, struct file *kvm)\n {\n \tstruct vfio_device_file *df = file-\u003eprivate_data;\n \n@@ -1536,22 +1507,22 @@ static void vfio_device_file_set_kvm(struct file *file, struct kvm *kvm)\n \n /**\n  * vfio_file_set_kvm - Link a kvm with VFIO drivers\n- * @file: VFIO group file or VFIO device file\n- * @kvm: KVM to link\n+ * @vfio_file: VFIO group file or VFIO device file\n+ * @kvm: KVM file to link\n  *\n  * When a VFIO device is first opened the KVM will be available in\n  * device-\u003ekvm if one was associated with the file.\n  */\n-void vfio_file_set_kvm(struct file *file, struct kvm *kvm)\n+void vfio_file_set_kvm(struct file *vfio_file, struct file *kvm)\n {\n \tstruct vfio_group *group;\n \n-\tgroup = vfio_group_from_file(file);\n+\tgroup = vfio_group_from_file(vfio_file);\n \tif (group)\n \t\tvfio_group_set_kvm(group, kvm);\n \n-\tif (vfio_device_from_file(file))\n-\t\tvfio_device_file_set_kvm(file, kvm);\n+\tif (vfio_device_from_file(vfio_file))\n+\t\tvfio_device_file_set_kvm(vfio_file, kvm);\n }\n EXPORT_SYMBOL_GPL(vfio_file_set_kvm);\n \ndiff --git a/include/linux/kvm_host.h b/include/linux/kvm_host.h\nindex ab8cfaec82d31..050aca8a8ff48 100644\n--- a/include/linux/kvm_host.h\n+++ b/include/linux/kvm_host.h\n@@ -784,6 +784,7 @@ struct kvm {\n \t * kvm_swap_active_memslots().\n \t */\n \tstruct mutex slots_arch_lock;\n+\tstruct file *file;  /* Back-reference to VM file descriptor */\n \tstruct mm_struct *mm; /* userspace tied to this vm */\n \tunsigned long nr_memslot_pages;\n \t/* The two memslot sets - active and inactive (per address space) */\n@@ -1067,13 +1068,16 @@ static inline void kvm_irqfd_exit(void)\n {\n }\n #endif\n-int kvm_init(unsigned vcpu_size, unsigned vcpu_align, struct module *module);\n+int kvm_init(unsigned int vcpu_size, unsigned int vcpu_align, struct module *module);\n+int kvm_init_with_dev(unsigned int vcpu_size, unsigned int vcpu_align,\n+\t\t      struct module *module, const char *dev_name, int minor);\n void kvm_exit(void);\n \n void kvm_get_kvm(struct kvm *kvm);\n bool kvm_get_kvm_safe(struct kvm *kvm);\n void kvm_put_kvm(struct kvm *kvm);\n bool file_is_kvm(struct file *file);\n+struct kvm *file_to_kvm(struct file *file);\n void kvm_put_kvm_no_destroy(struct kvm *kvm);\n \n static inline struct kvm_memslots *__kvm_memslots(struct kvm *kvm, int as_id)\n@@ -1537,7 +1541,7 @@ void kvm_arch_vcpu_blocking(struct kvm_vcpu *vcpu);\n void kvm_arch_vcpu_unblocking(struct kvm_vcpu *vcpu);\n bool kvm_vcpu_wake_up(struct kvm_vcpu *vcpu);\n \n-#ifndef CONFIG_S390\n+#ifndef CONFIG_KVM_S390\n void __kvm_vcpu_kick(struct kvm_vcpu *vcpu, bool wait);\n \n static inline void kvm_vcpu_kick(struct kvm_vcpu *vcpu)\ndiff --git a/include/linux/vfio.h b/include/linux/vfio.h\nindex 31b826efba000..b279bdb6f813b 100644\n--- a/include/linux/vfio.h\n+++ b/include/linux/vfio.h\n@@ -54,7 +54,7 @@ struct vfio_device {\n \tstruct list_head dev_set_list;\n \tunsigned int migration_flags;\n \tu8 precopy_info_v2;\n-\tstruct kvm *kvm;\n+\tstruct file *kvm;  /* Holds reference to KVM file */\n \n \t/* Members below here are private, not for driver use */\n \tunsigned int index;\n@@ -377,7 +377,7 @@ static inline bool vfio_file_has_dev(struct file *file, struct vfio_device *devi\n #endif\n bool vfio_file_is_valid(struct file *file);\n bool vfio_file_enforced_coherent(struct file *file);\n-void vfio_file_set_kvm(struct file *file, struct kvm *kvm);\n+void vfio_file_set_kvm(struct file *vfio_file, struct file *kvm);\n \n #define VFIO_PIN_PAGES_MAX_ENTRIES\t(PAGE_SIZE/sizeof(unsigned long))\n \ndiff --git a/virt/kvm/coalesced_mmio.c b/virt/kvm/coalesced_mmio.c\nindex 6b1d901610998..8ff9d9a6f47a7 100644\n--- a/virt/kvm/coalesced_mmio.c\n+++ b/virt/kvm/coalesced_mmio.c\n@@ -15,6 +15,8 @@\n #include \u003clinux/slab.h\u003e\n #include \u003clinux/kvm.h\u003e\n \n+#ifndef KVM_NO_MMIO\n+\n #include \"coalesced_mmio.h\"\n \n static inline struct kvm_coalesced_mmio_dev *to_mmio(struct kvm_io_device *dev)\n@@ -188,3 +190,5 @@ int kvm_vm_ioctl_unregister_coalesced_mmio(struct kvm *kvm,\n \t */\n \treturn 0;\n }\n+\n+#endif /* ifndef KVM_NO_MMIO */\ndiff --git a/virt/kvm/coalesced_mmio.h b/virt/kvm/coalesced_mmio.h\nindex 36f84264ed257..826af421a5be7 100644\n--- a/virt/kvm/coalesced_mmio.h\n+++ b/virt/kvm/coalesced_mmio.h\n@@ -11,7 +11,7 @@\n  *\n  */\n \n-#ifdef CONFIG_KVM_MMIO\n+#if defined(CONFIG_KVM_MMIO) \u0026\u0026 !defined(KVM_NO_MMIO)\n \n #include \u003clinux/list.h\u003e\n \ndiff --git a/virt/kvm/kvm_main.c b/virt/kvm/kvm_main.c\nindex 45e784462ec6e..bb3682d8e1f75 100644\n--- a/virt/kvm/kvm_main.c\n+++ b/virt/kvm/kvm_main.c\n@@ -10,6 +10,7 @@\n  *   Yaniv Kamay  \u003cyaniv@qumranet.com\u003e\n  */\n \n+#include \"linux/sprintf.h\"\n #include \u003ckvm/iodev.h\u003e\n \n #include \u003clinux/kvm_host.h\u003e\n@@ -1313,7 +1314,7 @@ void kvm_get_kvm(struct kvm *kvm)\n {\n \trefcount_inc(\u0026kvm-\u003eusers_count);\n }\n-EXPORT_SYMBOL_GPL(kvm_get_kvm);\n+EXPORT_SYMBOL_FOR_KVM_INTERNAL(kvm_get_kvm);\n \n /*\n  * Make sure the vm is not during destruction, which is a safe version of\n@@ -1323,14 +1324,14 @@ bool kvm_get_kvm_safe(struct kvm *kvm)\n {\n \treturn refcount_inc_not_zero(\u0026kvm-\u003eusers_count);\n }\n-EXPORT_SYMBOL_GPL(kvm_get_kvm_safe);\n+EXPORT_SYMBOL_FOR_KVM_INTERNAL(kvm_get_kvm_safe);\n \n void kvm_put_kvm(struct kvm *kvm)\n {\n \tif (refcount_dec_and_test(\u0026kvm-\u003eusers_count))\n \t\tkvm_destroy_vm(kvm);\n }\n-EXPORT_SYMBOL_GPL(kvm_put_kvm);\n+EXPORT_SYMBOL_FOR_KVM_INTERNAL(kvm_put_kvm);\n \n /*\n  * Used to put a reference that was taken on behalf of an object associated\n@@ -4055,7 +4056,7 @@ static vm_fault_t kvm_vcpu_fault(struct vm_fault *vmf)\n \telse if (vmf-\u003epgoff == KVM_PIO_PAGE_OFFSET)\n \t\tpage = virt_to_page(vcpu-\u003earch.pio_data);\n #endif\n-#ifdef CONFIG_KVM_MMIO\n+#if defined(CONFIG_KVM_MMIO) \u0026\u0026 !defined(KVM_NO_MMIO)\n \telse if (vmf-\u003epgoff == KVM_COALESCED_MMIO_PAGE_OFFSET)\n \t\tpage = virt_to_page(vcpu-\u003ekvm-\u003ecoalesced_mmio_ring);\n #endif\n@@ -4802,7 +4803,7 @@ void kvm_unregister_device_ops(u32 type)\n \t\tkvm_device_ops_table[type] = NULL;\n }\n \n-static int kvm_ioctl_create_device(struct kvm *kvm,\n+static int kvm_ioctl_create_device(struct file *file, struct kvm *kvm,\n \t\t\t\t   struct kvm_create_device *cd)\n {\n \tconst struct kvm_device_ops *ops;\n@@ -4881,7 +4882,7 @@ static int kvm_vm_ioctl_check_extension_generic(struct kvm *kvm, long arg)\n \tcase KVM_CAP_ENABLE_CAP_VM:\n \tcase KVM_CAP_HALT_POLL:\n \t\treturn 1;\n-#ifdef CONFIG_KVM_MMIO\n+#if defined(CONFIG_KVM_MMIO) \u0026\u0026 !defined(KVM_NO_MMIO)\n \tcase KVM_CAP_COALESCED_MMIO:\n \t\treturn KVM_COALESCED_MMIO_PAGE_OFFSET;\n \tcase KVM_CAP_COALESCED_PIO:\n@@ -5222,7 +5223,7 @@ static long kvm_vm_ioctl(struct file *filp,\n \t\tbreak;\n \t}\n #endif\n-#ifdef CONFIG_KVM_MMIO\n+#if defined(CONFIG_KVM_MMIO) \u0026\u0026 !defined(KVM_NO_MMIO)\n \tcase KVM_REGISTER_COALESCED_MMIO: {\n \t\tstruct kvm_coalesced_mmio_zone zone;\n \n@@ -5345,7 +5346,7 @@ static long kvm_vm_ioctl(struct file *filp,\n \t\tif (copy_from_user(\u0026cd, argp, sizeof(cd)))\n \t\t\tgoto out;\n \n-\t\tr = kvm_ioctl_create_device(kvm, \u0026cd);\n+\t\tr = kvm_ioctl_create_device(filp, kvm, \u0026cd);\n \t\tif (r)\n \t\t\tgoto out;\n \n@@ -5477,6 +5478,15 @@ bool file_is_kvm(struct file *file)\n }\n EXPORT_SYMBOL_FOR_KVM_INTERNAL(file_is_kvm);\n \n+struct kvm *file_to_kvm(struct file *file)\n+{\n+\tif (!file_is_kvm(file))\n+\t\treturn NULL;\n+\n+\treturn file-\u003eprivate_data;\n+}\n+EXPORT_SYMBOL_FOR_KVM_INTERNAL(file_to_kvm);\n+\n static int kvm_dev_ioctl_create_vm(unsigned long type)\n {\n \tchar fdname[ITOA_MAX_LEN + 1];\n@@ -5508,6 +5518,10 @@ static int kvm_dev_ioctl_create_vm(unsigned long type)\n \t * cases it will be called by the final fput(file) and will take\n \t * care of doing kvm_put_kvm(kvm).\n \t */\n+\n+\t/* Store back-reference for VFIO and other subsystems */\n+\tkvm-\u003efile = file;\n+\n \tkvm_uevent_notify_change(KVM_EVENT_CREATE_VM, kvm);\n \n \tfd_install(fd, file);\n@@ -5544,7 +5558,7 @@ static long kvm_dev_ioctl(struct file *filp,\n #ifdef CONFIG_X86\n \t\tr += PAGE_SIZE;    /* pio data page */\n #endif\n-#ifdef CONFIG_KVM_MMIO\n+#if defined(CONFIG_KVM_MMIO) \u0026\u0026 !defined(KVM_NO_MMIO)\n \t\tr += PAGE_SIZE;    /* coalesced mmio ring page */\n #endif\n \t\tbreak;\n@@ -5562,9 +5576,7 @@ static struct file_operations kvm_chardev_ops = {\n };\n \n static struct miscdevice kvm_dev = {\n-\tKVM_MINOR,\n-\t\"kvm\",\n-\t\u0026kvm_chardev_ops,\n+\t.fops = \u0026kvm_chardev_ops,\n };\n \n #ifdef CONFIG_KVM_GENERIC_HARDWARE_ENABLING\n@@ -6336,13 +6348,13 @@ static void kvm_uevent_notify_change(unsigned int type, struct kvm *kvm)\n \tkfree(env);\n }\n \n-static void kvm_init_debug(void)\n+static void kvm_init_debug(const char *dev_name)\n {\n \tconst struct file_operations *fops;\n \tconst struct kvm_stats_desc *pdesc;\n \tint i;\n \n-\tkvm_debugfs_dir = debugfs_create_dir(\"kvm\", NULL);\n+\tkvm_debugfs_dir = debugfs_create_dir(dev_name, NULL);\n \n \tfor (i = 0; i \u003c kvm_vm_stats_header.num_desc; ++i) {\n \t\tpdesc = \u0026kvm_vm_stats_desc[i];\n@@ -6478,23 +6490,39 @@ void kvm_unregister_perf_callbacks(void)\n }\n #endif\n \n-int kvm_init(unsigned vcpu_size, unsigned vcpu_align, struct module *module)\n+int kvm_init(unsigned int vcpu_size, unsigned int vcpu_align, struct module *module)\n+{\n+\treturn kvm_init_with_dev(vcpu_size, vcpu_align, module, \"kvm\", KVM_MINOR);\n+}\n+\n+int kvm_init_with_dev(unsigned int vcpu_size, unsigned int vcpu_align,\n+\t\t      struct module *module, const char *dev_name, int minor)\n {\n+\tchar *cache_name __free(kfree) = NULL;\n \tint r;\n \tint cpu;\n \n+\tkvm_dev.minor = minor;\n+\tkvm_dev.name = kstrdup_const(dev_name, GFP_KERNEL);\n+\tif (!kvm_dev.name)\n+\t\treturn -ENOMEM;\n+\n \t/* A kmem cache lets us meet the alignment requirements of fx_save. */\n \tif (!vcpu_align)\n \t\tvcpu_align = __alignof__(struct kvm_vcpu);\n+\tcache_name = kasprintf(GFP_KERNEL, \"%s_vcpu\", dev_name);\n+\tif (!cache_name)\n+\t\treturn -ENOMEM;\n \tkvm_vcpu_cache =\n-\t\tkmem_cache_create_usercopy(\"kvm_vcpu\", vcpu_size, vcpu_align,\n+\t\tkmem_cache_create_usercopy(cache_name, vcpu_size, vcpu_align,\n \t\t\t\t\t   SLAB_ACCOUNT,\n \t\t\t\t\t   offsetof(struct kvm_vcpu, arch),\n \t\t\t\t\t   offsetofend(struct kvm_vcpu, stats_id)\n \t\t\t\t\t   - offsetof(struct kvm_vcpu, arch),\n \t\t\t\t\t   NULL);\n+\tr = -ENOMEM;\n \tif (!kvm_vcpu_cache)\n-\t\treturn -ENOMEM;\n+\t\tgoto err_dev_name;\n \n \tfor_each_possible_cpu(cpu) {\n \t\tif (!alloc_cpumask_var_node(\u0026per_cpu(cpu_kick_mask, cpu),\n@@ -6520,7 +6548,7 @@ int kvm_init(unsigned vcpu_size, unsigned vcpu_align, struct module *module)\n \tkvm_preempt_ops.sched_in = kvm_sched_in;\n \tkvm_preempt_ops.sched_out = kvm_sched_out;\n \n-\tkvm_init_debug();\n+\tkvm_init_debug(kvm_dev.name);\n \n \tr = kvm_vfio_ops_init();\n \tif (WARN_ON_ONCE(r))\n@@ -6561,6 +6589,8 @@ int kvm_init(unsigned vcpu_size, unsigned vcpu_align, struct module *module)\n \tfor_each_possible_cpu(cpu)\n \t\tfree_cpumask_var(per_cpu(cpu_kick_mask, cpu));\n \tkmem_cache_destroy(kvm_vcpu_cache);\n+err_dev_name:\n+\tkfree_const(kvm_dev.name);\n \treturn r;\n }\n EXPORT_SYMBOL_FOR_KVM_INTERNAL(kvm_init);\n@@ -6586,5 +6616,8 @@ void kvm_exit(void)\n \tkvm_vfio_ops_exit();\n \tkvm_async_pf_deinit();\n \tkvm_irqfd_exit();\n+\n+\tkfree_const(kvm_dev.name);\n+\tkvm_dev.name = NULL;\n }\n EXPORT_SYMBOL_FOR_KVM_INTERNAL(kvm_exit);\ndiff --git a/virt/kvm/vfio.c b/virt/kvm/vfio.c\nindex 6cdc4e9a333a3..0166cc4d39b31 100644\n--- a/virt/kvm/vfio.c\n+++ b/virt/kvm/vfio.c\n@@ -35,15 +35,15 @@ struct kvm_vfio {\n \tbool noncoherent;\n };\n \n-static void kvm_vfio_file_set_kvm(struct file *file, struct kvm *kvm)\n+static void kvm_vfio_file_set_kvm(struct file *vfio_file, struct file *kvm)\n {\n-\tvoid (*fn)(struct file *file, struct kvm *kvm);\n+\tvoid (*fn)(struct file *vfio_file, struct file *kvm);\n \n \tfn = symbol_get(vfio_file_set_kvm);\n \tif (!fn)\n \t\treturn;\n \n-\tfn(file, kvm);\n+\tfn(vfio_file, kvm);\n \n \tsymbol_put(vfio_file_set_kvm);\n }\n@@ -168,7 +168,7 @@ static int kvm_vfio_file_add(struct kvm_device *dev, unsigned int fd)\n \tkvf-\u003efile = get_file(filp);\n \tlist_add_tail(\u0026kvf-\u003enode, \u0026kv-\u003efile_list);\n \n-\tkvm_vfio_file_set_kvm(kvf-\u003efile, dev-\u003ekvm);\n+\tkvm_vfio_file_set_kvm(kvf-\u003efile, dev-\u003ekvm-\u003efile);\n \tkvm_vfio_update_coherency(dev);\n \n \treturn 0;\n"
}

2/1 2026/08/01 19:39 agent patch-evaluator
1m Model:
best-expensive

Args:
null

Results:
{
  "EnableConfigs": null,
  "FocusSymbols": [
    "kvm_arch_vcpu_ioctl_run",
    "kvm_arch_vcpu_ioctl",
    "kvm_arch_vm_ioctl",
    "kvm_arch_init_vm",
    "kvm_arch_vcpu_create",
    "handle_exit",
    "kvm_handle_guest_abort",
    "kvm_arm_get_reg",
    "kvm_arm_set_reg"
  ],
  "Reasoning": "The patch introduces a major new feature: support for running ARM64 virtual machines on S390 hosts using KVM. This includes a new KVM architecture backend with its own vCPU run loop, exit handling, MMU fault handling, and register access. This is highly functional core kernel logic that should be heavily fuzzed.",
  "WorthFuzzing": true
}

Instruction:
You are an expert Linux kernel maintainer.
Your job is to review a provided patch series and determine
if it makes functional changes to the kernel that should be fuzzed.

IMPORTANT: The changes have ALREADY been applied and committed as the HEAD commit in
your workspace. Do NOT rely on your internal knowledge of the kernel. You must actively
use your code access tools to examine the actual source code and confirm any assumptions.

Return WorthFuzzing=false if the patch only contains:
- Modifications to Documentation/, Kconfig files, or code comments.
- Purely decorative changes, such as logging (e.g., pr_err, printk) or tracepoints.
- Changes to numeric constants or macros that do not functionally alter execution flow.
- Code paths that are impossible to reach in virtualized environments like GCE or QEMU,
  even when utilizing software-emulated hardware (e.g., usb gadget, mac80211_hwsim).
- Code in vendor-specific PCIe switch, SmartNIC, or GPU drivers (e.g., mlxsw, pds_core, qed,
  ionic, amdgpu) that require physical PCIe hardware cards not emulated in standard QEMU.
- Driver .remove, .shutdown, or pci_unregister_driver teardown callbacks (e.g., igb_remove)
  that are executed only during PCI hot-unplug or sysfs driver unbind operations.

If it modifies reachable core kernel logic, drivers, or architectures, use your code search
tools to verify the code can be executed, then return WorthFuzzing=true.

When returning WorthFuzzing=true, you MUST ALSO:
1. Extract any specific kernel functions that should be heavily fuzzed into FocusSymbols.
   Avoid listing generic hot-path functions to prevent skewed test distributions.
   Prefer non-static, non-inlined API entrypoint functions over internal static helper functions
   (which are inlined by the compiler and do not have distinct symbol addresses).
2. Identify any specific CONFIG_ options required to properly test this new/modified feature.
   Go and look into the Kconfig files and check for ifdefs around the code, do not make assumptions.
   Also check "depends on" lines in Kconfig to include any non-standard parent subsystem configs
   needed for Kbuild to compile the code statically into vmlinux. List them in the EnableConfigs
   output array, and DO NOT add a 'CONFIG_' prefix (e.g., return "NET_IPV4" instead of "CONFIG_NET_IPV4").
Prefer calling several tools at the same time to save round-trips.


Use set-results tool to provide results of the analysis.
It must be called exactly once before the final reply.
Ignore results of this tool.

Prompt:
For your convenience, here is the diff of the changes:
commit 45ec622a9865345bc93f5695e0740ed1b3500911
Author: syz-cluster <triage@syzkaller.com>
Date:   Sat Aug 1 19:39:44 2026 +0000

    syz-cluster: applied patch under review

diff --git a/MAINTAINERS b/MAINTAINERS
index 0d7987278c07e..c7ef6c0163a98 100644
--- a/MAINTAINERS
+++ b/MAINTAINERS
@@ -23918,7 +23918,7 @@ R:	Eric Farman <farman@linux.ibm.com>
 L:	linux-s390@vger.kernel.org
 L:	kvm@vger.kernel.org
 S:	Supported
-F:	arch/s390/kvm/pci*
+F:	arch/s390/kvm/s390/pci*
 F:	drivers/vfio/pci/vfio_pci_zdev.c
 F:	include/uapi/linux/vfio_zdev.h
 
diff --git a/arch/arm64/Makefile b/arch/arm64/Makefile
index 6b005c8fef706..1cd7cd94a8554 100644
--- a/arch/arm64/Makefile
+++ b/arch/arm64/Makefile
@@ -43,7 +43,9 @@ CC_FLAGS_NO_FPU	:= -mgeneral-regs-only
 KBUILD_CFLAGS	+= $(CC_FLAGS_NO_FPU) \
 		   $(compat_vdso) $(cc_has_k_constraint)
 KBUILD_CFLAGS	+= $(call cc-disable-warning, psabi)
+KBUILD_CFLAGS	+= -DARM64_S390_COMMON
 KBUILD_AFLAGS	+= $(compat_vdso)
+KBUILD_AFLAGS	+= -DARM64_S390_COMMON
 
 ifeq ($(call rustc-min-version, 108500),y)
 KBUILD_RUSTFLAGS += --target=aarch64-unknown-none-softfloat
diff --git a/arch/arm64/include/asm/brk-imm.h b/arch/arm64/include/asm/brk-imm.h
index beb42c62b6acc..dd2d153dc0d81 100644
--- a/arch/arm64/include/asm/brk-imm.h
+++ b/arch/arm64/include/asm/brk-imm.h
@@ -2,6 +2,7 @@
 /*
  * Copyright (C) 2012 ARM Ltd.
  */
+/* Whole file is shared with s390 */
 
 #ifndef __ASM_BRK_IMM_H
 #define __ASM_BRK_IMM_H
diff --git a/arch/arm64/include/asm/esr.h b/arch/arm64/include/asm/esr.h
index f816f5d77f1a5..2cb73bde73469 100644
--- a/arch/arm64/include/asm/esr.h
+++ b/arch/arm64/include/asm/esr.h
@@ -3,11 +3,12 @@
  * Copyright (C) 2013 - ARM Ltd
  * Author: Marc Zyngier <marc.zyngier@arm.com>
  */
+/* Whole file is shared with s390 */
 
 #ifndef __ASM_ESR_H
 #define __ASM_ESR_H
 
-#include <asm/memory.h>
+#include <asm/brk-imm.h>
 #include <asm/sysreg.h>
 
 #define ESR_ELx_EC_UNKNOWN	UL(0x00)
@@ -435,7 +436,7 @@
 #define ESR_ELx_IT_GCSPOPX		7
 
 #ifndef __ASSEMBLER__
-#include <asm/types.h>
+#include <linux/types.h>
 
 static inline unsigned long esr_brk_comment(unsigned long esr)
 {
diff --git a/arch/arm64/include/asm/kvm_arm.h b/arch/arm64/include/asm/kvm_arm.h
index 3f9233b5a1308..cc4175176f947 100644
--- a/arch/arm64/include/asm/kvm_arm.h
+++ b/arch/arm64/include/asm/kvm_arm.h
@@ -3,14 +3,16 @@
  * Copyright (C) 2012,2013 - ARM Ltd
  * Author: Marc Zyngier <marc.zyngier@arm.com>
  */
+/* Whole file is shared with s390 */
 
 #ifndef __ARM64_KVM_ARM_H__
 #define __ARM64_KVM_ARM_H__
 
+#include <linux/const.h>
+#include <linux/bits.h>
+#include <linux/types.h>
 #include <asm/esr.h>
-#include <asm/memory.h>
 #include <asm/sysreg.h>
-#include <asm/types.h>
 
 /*
  * Because I'm terribly lazy and that repainting the whole of the KVM
diff --git a/arch/arm64/include/asm/kvm_emulate.h b/arch/arm64/include/asm/kvm_emulate.h
index 5bf3d7e1d92c7..2dac665ccfd12 100644
--- a/arch/arm64/include/asm/kvm_emulate.h
+++ b/arch/arm64/include/asm/kvm_emulate.h
@@ -44,11 +44,13 @@ enum exception_type {
 bool kvm_condition_valid32(const struct kvm_vcpu *vcpu);
 void kvm_skip_instr32(struct kvm_vcpu *vcpu);
 
+int kvm_inject_dabt_excl_atomic(struct kvm_vcpu *vcpu, u64 addr);
+int kvm_inject_serror_esr(struct kvm_vcpu *vcpu, u64 esr);
+
+#ifdef ARM64_S390_COMMON
 void kvm_inject_undefined(struct kvm_vcpu *vcpu);
 void kvm_inject_sync(struct kvm_vcpu *vcpu, u64 esr);
-int kvm_inject_serror_esr(struct kvm_vcpu *vcpu, u64 esr);
 int kvm_inject_sea(struct kvm_vcpu *vcpu, bool iabt, u64 addr);
-int kvm_inject_dabt_excl_atomic(struct kvm_vcpu *vcpu, u64 addr);
 void kvm_inject_size_fault(struct kvm_vcpu *vcpu);
 
 static inline int kvm_inject_sea_dabt(struct kvm_vcpu *vcpu, u64 addr)
@@ -61,6 +63,8 @@ static inline int kvm_inject_sea_iabt(struct kvm_vcpu *vcpu, u64 addr)
 	return kvm_inject_sea(vcpu, true, addr);
 }
 
+#endif /* ARM64_S390_COMMON */
+
 static inline int kvm_inject_serror(struct kvm_vcpu *vcpu)
 {
 	/*
@@ -133,12 +137,17 @@ static inline void vcpu_set_vsesr(struct kvm_vcpu *vcpu, u64 vsesr)
 
 static __always_inline unsigned long *vcpu_pc(const struct kvm_vcpu *vcpu)
 {
-	return (unsigned long *)&vcpu_gp_regs(vcpu)->pc;
+	return (unsigned long *)&vcpu->arch.ctxt.regs.pc;
 }
 
 static __always_inline unsigned long *vcpu_cpsr(const struct kvm_vcpu *vcpu)
 {
-	return (unsigned long *)&vcpu_gp_regs(vcpu)->pstate;
+	return (unsigned long *)&vcpu->arch.ctxt.regs.pstate;
+}
+
+static __always_inline unsigned long *vcpu_sp_el0(const struct kvm_vcpu *vcpu)
+{
+	return (unsigned long *)&vcpu->arch.ctxt.regs.sp;
 }
 
 static __always_inline bool vcpu_mode_is_32bit(const struct kvm_vcpu *vcpu)
@@ -159,6 +168,7 @@ static inline void vcpu_set_thumb(struct kvm_vcpu *vcpu)
 	*vcpu_cpsr(vcpu) |= PSR_AA32_T_BIT;
 }
 
+#ifdef ARM64_S390_COMMON
 /*
  * vcpu_get_reg and vcpu_set_reg should always be passed a register number
  * coming from a read of ESR_EL2. Otherwise, it may give the wrong result on
@@ -167,16 +177,18 @@ static inline void vcpu_set_thumb(struct kvm_vcpu *vcpu)
 static __always_inline unsigned long vcpu_get_reg(const struct kvm_vcpu *vcpu,
 					 u8 reg_num)
 {
-	return (reg_num == 31) ? 0 : vcpu_gp_regs(vcpu)->regs[reg_num];
+	return (reg_num == 31) ? 0 : vcpu_gp_regs(vcpu)[reg_num];
 }
 
 static __always_inline void vcpu_set_reg(struct kvm_vcpu *vcpu, u8 reg_num,
 				unsigned long val)
 {
 	if (reg_num != 31)
-		vcpu_gp_regs(vcpu)->regs[reg_num] = val;
+		vcpu_gp_regs(vcpu)[reg_num] = val;
 }
 
+#endif /* ARM64_S390_COMMON */
+
 static inline bool vcpu_is_el2_ctxt(const struct kvm_cpu_context *ctxt)
 {
 	switch (ctxt->regs.pstate & (PSR_MODE32_BIT | PSR_MODE_MASK)) {
@@ -360,6 +372,7 @@ static inline u64 kvm_vcpu_get_disr(const struct kvm_vcpu *vcpu)
 	return vcpu->arch.fault.disr_el1;
 }
 
+#ifdef ARM64_S390_COMMON
 static inline u32 kvm_vcpu_hvc_get_imm(const struct kvm_vcpu *vcpu)
 {
 	return kvm_vcpu_get_esr(vcpu) & ESR_ELx_xVC_IMM_MASK;
@@ -437,6 +450,8 @@ static __always_inline u8 kvm_vcpu_trap_get_fault(const struct kvm_vcpu *vcpu)
 	return kvm_vcpu_get_esr(vcpu) & ESR_ELx_FSC;
 }
 
+#endif /* ARM64_S390_COMMON */
+
 static inline
 bool kvm_vcpu_trap_is_permission_fault(const struct kvm_vcpu *vcpu)
 {
@@ -477,6 +492,7 @@ static __always_inline int kvm_vcpu_sys_get_rt(struct kvm_vcpu *vcpu)
 	return ESR_ELx_SYS64_ISS_RT(esr);
 }
 
+#ifdef ARM64_S390_COMMON
 static inline bool kvm_is_write_fault(struct kvm_vcpu *vcpu)
 {
 	if (kvm_vcpu_abt_iss1tw(vcpu)) {
@@ -501,6 +517,8 @@ static inline bool kvm_is_write_fault(struct kvm_vcpu *vcpu)
 	return kvm_vcpu_dabt_iswrite(vcpu);
 }
 
+#endif /* ARM64_S390_COMMON */
+
 static inline unsigned long kvm_vcpu_get_mpidr_aff(struct kvm_vcpu *vcpu)
 {
 	return __vcpu_sys_reg(vcpu, MPIDR_EL1) & MPIDR_HWID_BITMASK;
@@ -536,6 +554,7 @@ static inline bool kvm_vcpu_is_be(struct kvm_vcpu *vcpu)
 	return vcpu_read_sys_reg(vcpu, r) & bit;
 }
 
+#ifdef ARM64_S390_COMMON
 static inline unsigned long vcpu_data_guest_to_host(struct kvm_vcpu *vcpu,
 						    unsigned long data,
 						    unsigned int len)
@@ -611,6 +630,8 @@ static __always_inline void kvm_incr_pc(struct kvm_vcpu *vcpu)
 		vcpu_set_flag((v), e);					\
 	} while (0)
 
+#endif /* ARM64_S390_COMMON */
+
 /*
  * Returns a 'sanitised' view of CPTR_EL2, translating from nVHE to the VHE
  * format if E2H isn't set.
diff --git a/arch/arm64/include/asm/kvm_host.h b/arch/arm64/include/asm/kvm_host.h
index bae2c4f92ef5c..83fefceed952b 100644
--- a/arch/arm64/include/asm/kvm_host.h
+++ b/arch/arm64/include/asm/kvm_host.h
@@ -39,6 +39,7 @@
 
 #define KVM_MAX_VCPUS VGIC_V3_MAX_CPUS
 
+#ifdef ARM64_S390_COMMON
 #define KVM_VCPU_MAX_FEATURES 9
 #define KVM_VCPU_VALID_FEATURES	(BIT(KVM_VCPU_MAX_FEATURES) - 1)
 
@@ -56,6 +57,38 @@
 #define KVM_REQ_MAP_L1_VNCR_EL2		KVM_ARCH_REQ(10)
 #define KVM_REQ_VGIC_PROCESS_UPDATE	KVM_ARCH_REQ(11)
 
+/*
+ * If we encounter a data abort without valid instruction syndrome
+ * information, report this to user space.  User space can (and
+ * should) opt in to this feature if KVM_CAP_ARM_NISV_TO_USER is
+ * supported.
+ */
+#define KVM_ARCH_FLAG_RETURN_NISV_IO_ABORT_TO_USER	0
+/* Memory Tagging Extension enabled for the guest */
+#define KVM_ARCH_FLAG_MTE_ENABLED			1
+/* At least one vCPU has ran in the VM */
+#define KVM_ARCH_FLAG_HAS_RAN_ONCE			2
+/* The vCPU feature set for the VM is configured */
+#define KVM_ARCH_FLAG_VCPU_FEATURES_CONFIGURED		3
+/* PSCI SYSTEM_SUSPEND enabled for the guest */
+#define KVM_ARCH_FLAG_SYSTEM_SUSPEND_ENABLED		4
+/* VM counter offset */
+#define KVM_ARCH_FLAG_VM_COUNTER_OFFSET			5
+/* Timer PPIs made immutable */
+#define KVM_ARCH_FLAG_TIMER_PPIS_IMMUTABLE		6
+/* Initial ID reg values loaded */
+#define KVM_ARCH_FLAG_ID_REGS_INITIALIZED		7
+/* Fine-Grained UNDEF initialised */
+#define KVM_ARCH_FLAG_FGU_INITIALIZED			8
+/* SVE exposed to guest */
+#define KVM_ARCH_FLAG_GUEST_HAS_SVE			9
+/* MIDR_EL1, REVIDR_EL1, and AIDR_EL1 are writable from userspace */
+#define KVM_ARCH_FLAG_WRITABLE_IMP_ID_REGS		10
+/* Unhandled SEAs are taken to userspace */
+#define KVM_ARCH_FLAG_EXIT_SEA				11
+
+#endif /* ARM64_S390_COMMON */
+
 #define KVM_DIRTY_LOG_MANUAL_CAPS   (KVM_DIRTY_LOG_MANUAL_PROTECT_ENABLE | \
 				     KVM_DIRTY_LOG_INITIALLY_SET)
 
@@ -338,35 +371,6 @@ struct kvm_arch {
 	/* Protects VM-scoped configuration data */
 	struct mutex config_lock;
 
-	/*
-	 * If we encounter a data abort without valid instruction syndrome
-	 * information, report this to user space.  User space can (and
-	 * should) opt in to this feature if KVM_CAP_ARM_NISV_TO_USER is
-	 * supported.
-	 */
-#define KVM_ARCH_FLAG_RETURN_NISV_IO_ABORT_TO_USER	0
-	/* Memory Tagging Extension enabled for the guest */
-#define KVM_ARCH_FLAG_MTE_ENABLED			1
-	/* At least one vCPU has ran in the VM */
-#define KVM_ARCH_FLAG_HAS_RAN_ONCE			2
-	/* The vCPU feature set for the VM is configured */
-#define KVM_ARCH_FLAG_VCPU_FEATURES_CONFIGURED		3
-	/* PSCI SYSTEM_SUSPEND enabled for the guest */
-#define KVM_ARCH_FLAG_SYSTEM_SUSPEND_ENABLED		4
-	/* VM counter offset */
-#define KVM_ARCH_FLAG_VM_COUNTER_OFFSET			5
-	/* Timer PPIs made immutable */
-#define KVM_ARCH_FLAG_TIMER_PPIS_IMMUTABLE		6
-	/* Initial ID reg values loaded */
-#define KVM_ARCH_FLAG_ID_REGS_INITIALIZED		7
-	/* Fine-Grained UNDEF initialised */
-#define KVM_ARCH_FLAG_FGU_INITIALIZED			8
-	/* SVE exposed to guest */
-#define KVM_ARCH_FLAG_GUEST_HAS_SVE			9
-	/* MIDR_EL1, REVIDR_EL1, and AIDR_EL1 are writable from userspace */
-#define KVM_ARCH_FLAG_WRITABLE_IMP_ID_REGS		10
-	/* Unhandled SEAs are taken to userspace */
-#define KVM_ARCH_FLAG_EXIT_SEA				11
 	unsigned long flags;
 
 	/* VM-wide vCPU feature set */
@@ -831,6 +835,8 @@ extern s64 kvm_nvhe_sym(hyp_physvirt_offset);
 extern u64 kvm_nvhe_sym(hyp_cpu_logical_map)[NR_CPUS];
 #define hyp_cpu_logical_map CHOOSE_NVHE_SYM(hyp_cpu_logical_map)
 
+#ifdef ARM64_S390_COMMON
+
 struct vcpu_reset_state {
 	unsigned long	pc;
 	unsigned long	r0;
@@ -838,6 +844,8 @@ struct vcpu_reset_state {
 	bool		reset;
 };
 
+#endif /* ARM64_S390_COMMON */
+
 struct vncr_tlb;
 
 struct kvm_vcpu_arch {
@@ -947,6 +955,7 @@ struct kvm_vcpu_arch {
 	pid_t pid;
 };
 
+#ifdef ARM64_S390_COMMON
 /*
  * Each 'flag' is composed of a comma-separated triplet:
  *
@@ -1098,6 +1107,8 @@ struct kvm_vcpu_arch {
 /* KVM is currently emulating an L2 to L1 exception */
 #define IN_NESTED_EXCEPTION	__vcpu_single_flag(sflags, BIT(9))
 
+#endif /* ARM64_S390_COMMON */
+
 #define vcpu_sve_max_vq(vcpu)	sve_vq_from_vl((vcpu)->arch.sve_max_vl)
 
 #define vcpu_sve_zcr_elx(vcpu)						\
@@ -1152,7 +1163,7 @@ struct kvm_vcpu_arch {
 #define vcpu_clear_on_unsupported_cpu(vcpu)				\
 	vcpu_clear_flag(vcpu, ON_UNSUPPORTED_CPU)
 
-#define vcpu_gp_regs(v)		(&(v)->arch.ctxt.regs)
+#define vcpu_gp_regs(v)		((v)->arch.ctxt.regs.regs)
 
 /*
  * Only use __vcpu_sys_reg/ctxt_sys_reg if you know you want the
@@ -1183,6 +1194,12 @@ static inline u64 *___ctxt_sys_reg(const struct kvm_cpu_context *ctxt, int r)
 
 #define ctxt_sys_reg(c,r)	(*__ctxt_sys_reg(c,r))
 
+#define kvm_vcpu_get_sp_el1(__vcpu) (__ctxt_sys_reg(&(__vcpu)->arch.ctxt, SP_EL1))
+#define kvm_vcpu_get_vreg(__vcpu, _n) (&(__vcpu)->arch.ctxt.fp_regs.vregs[_n])
+#define kvm_vcpu_get_vregs(__vcpu) (&(__vcpu)->arch.ctxt.fp_regs.vregs)
+#define kvm_vcpu_get_fpsr(__vcpu) (&(__vcpu)->arch.ctxt.fp_regs.fpsr)
+#define kvm_vcpu_get_fpcr(__vcpu) (&(__vcpu)->arch.ctxt.fp_regs.fpcr)
+
 u64 kvm_vcpu_apply_reg_masks(const struct kvm_vcpu *, enum vcpu_sysreg, u64);
 
 #define __vcpu_assign_sys_reg(v, r, val)				\
@@ -1233,6 +1250,7 @@ struct kvm_vcpu_stat {
 	u64 exits;
 };
 
+#ifdef ARM64_S390_COMMON
 unsigned long kvm_arm_num_regs(struct kvm_vcpu *vcpu);
 int kvm_arm_copy_reg_indices(struct kvm_vcpu *vcpu, u64 __user *indices);
 int kvm_arm_get_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg);
@@ -1241,6 +1259,8 @@ int kvm_arm_set_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg);
 unsigned long kvm_arm_num_sys_reg_descs(struct kvm_vcpu *vcpu);
 int kvm_arm_copy_sys_reg_indices(struct kvm_vcpu *vcpu, u64 __user *uindices);
 
+#endif /* ARM64_S390_COMMON */
+
 int __kvm_arm_vcpu_get_events(struct kvm_vcpu *vcpu,
 			      struct kvm_vcpu_events *events);
 
@@ -1319,6 +1339,7 @@ int __init populate_nv_trap_config(void);
 
 void kvm_calculate_traps(struct kvm_vcpu *vcpu);
 
+#ifdef ARM64_S390_COMMON
 /* MMIO helpers */
 void kvm_mmio_write_buf(void *buf, unsigned int len, unsigned long data);
 unsigned long kvm_mmio_read_buf(const void *buf, unsigned int len);
@@ -1326,6 +1347,8 @@ unsigned long kvm_mmio_read_buf(const void *buf, unsigned int len);
 int kvm_handle_mmio_return(struct kvm_vcpu *vcpu);
 int io_mem_abort(struct kvm_vcpu *vcpu, phys_addr_t fault_ipa);
 
+#endif /* ARM64_S390_COMMON */
+
 /*
  * Returns true if a Performance Monitoring Interrupt (PMI), a.k.a. perf event,
  * arrived in guest context.  For arm64, any event that arrives while a vCPU is
@@ -1523,11 +1546,15 @@ static inline bool __vcpu_has_feature(const struct kvm_arch *ka, int feature)
 	return test_bit(feature, ka->vcpu_features);
 }
 
+#ifdef ARM64_S390_COMMON
+
 #define kvm_vcpu_has_feature(k, f)	__vcpu_has_feature(&(k)->arch, (f))
 #define vcpu_has_feature(v, f)	__vcpu_has_feature(&(v)->kvm->arch, (f))
 
 #define kvm_vcpu_initialized(v) vcpu_get_flag(v, VCPU_INITIALIZED)
 
+#endif /* ARM64_S390_COMMON */
+
 int kvm_trng_call(struct kvm_vcpu *vcpu);
 #ifdef CONFIG_KVM
 extern phys_addr_t hyp_mem_base;
diff --git a/arch/arm64/include/asm/ptrace.h b/arch/arm64/include/asm/ptrace.h
index 39582511ad72f..bb16a9894a5ad 100644
--- a/arch/arm64/include/asm/ptrace.h
+++ b/arch/arm64/include/asm/ptrace.h
@@ -28,6 +28,8 @@
 
 #define GIC_PRIO_PSR_I_SET	GICV3_PRIO_PSR_I_SET
 
+#ifdef ARM64_S390_COMMON
+
 /* Additional SPSR bits not exposed in the UABI */
 #define PSR_MODE_THREAD_BIT	(1 << 0)
 #define PSR_IL_BIT		(1 << 20)
@@ -68,6 +70,8 @@
 #define PSR_AA32_IT_MASK	0x0600fc00	/* If-Then execution state mask */
 #define PSR_AA32_GE_MASK	0x000f0000
 
+#endif /* ARM64_S390_COMMON */
+
 #ifdef CONFIG_CPU_BIG_ENDIAN
 #define PSR_AA32_ENDSTATE	PSR_AA32_E_BIT
 #else
@@ -104,26 +108,48 @@
 #define COMPAT_USER_SZ	296
 
 /* Architecturally defined mapping between AArch32 and AArch64 registers */
+enum {
+	__compat_fp	= 11,
+	__compat_sp	= 13,
+	__compat_lr	= 14,
+	__compat_sp_hyp	= 15,
+	__compat_lr_irq	= 16,
+	__compat_sp_irq	= 17,
+	__compat_lr_svc	= 18,
+	__compat_sp_svc	= 19,
+	__compat_lr_abt	= 20,
+	__compat_sp_abt	= 21,
+	__compat_lr_und	= 22,
+	__compat_sp_und	= 23,
+	__compat_r8_fiq	= 24,
+	__compat_r9_fiq	= 25,
+	__compat_r10_fi	= 26,
+	__compat_r11_fi	= 27,
+	__compat_r12_fi	= 28,
+	__compat_sp_fiq	= 29,
+	__compat_lr_fiq	= 30,
+};
+
 #define compat_usr(x)	regs[(x)]
-#define compat_fp	regs[11]
-#define compat_sp	regs[13]
-#define compat_lr	regs[14]
-#define compat_sp_hyp	regs[15]
-#define compat_lr_irq	regs[16]
-#define compat_sp_irq	regs[17]
-#define compat_lr_svc	regs[18]
-#define compat_sp_svc	regs[19]
-#define compat_lr_abt	regs[20]
-#define compat_sp_abt	regs[21]
-#define compat_lr_und	regs[22]
-#define compat_sp_und	regs[23]
-#define compat_r8_fiq	regs[24]
-#define compat_r9_fiq	regs[25]
-#define compat_r10_fiq	regs[26]
-#define compat_r11_fiq	regs[27]
-#define compat_r12_fiq	regs[28]
-#define compat_sp_fiq	regs[29]
-#define compat_lr_fiq	regs[30]
+#define compat_fp	regs[__compat_fp]
+#define compat_sp	regs[__compat_sp]
+#define compat_lr	regs[__compat_lr]
+#define compat_sp_hyp	regs[__compat_sp_hyp]
+#define compat_lr_irq	regs[__compat_lr_irq]
+#define compat_sp_irq	regs[__compat_sp_irq]
+#define compat_lr_svc	regs[__compat_lr_svc]
+#define compat_sp_svc	regs[__compat_sp_svc]
+#define compat_lr_abt	regs[__compat_lr_ab]
+#define compat_sp_abt	regs[__compat_sp_abt]
+#define compat_lr_und	regs[__compat_lr_und]
+#define compat_sp_und	regs[__compat_sp_und]
+#define compat_r8_fiq	regs[__compat_r8_fiq]
+#define compat_r9_fiq	regs[__compat_r9_fiq]
+#define compat_r10_fiq	regs[__compat_r10_fi]
+#define compat_r11_fiq	regs[__compat_r11_fi]
+#define compat_r12_fiq	regs[__compat_r12_fi]
+#define compat_sp_fiq	regs[__compat_sp_fiq]
+#define compat_lr_fiq	regs[__compat_lr_fiq]
 
 static inline unsigned long compat_psr_to_pstate(const unsigned long psr)
 {
diff --git a/arch/arm64/include/asm/sysreg.h b/arch/arm64/include/asm/sysreg.h
index 7aa08d59d4944..1c5c4df260bea 100644
--- a/arch/arm64/include/asm/sysreg.h
+++ b/arch/arm64/include/asm/sysreg.h
@@ -16,6 +16,8 @@
 
 #include <asm/gpr-num.h>
 
+#ifdef ARM64_S390_COMMON
+
 /*
  * ARMv8 ARM reserves the following encoding for system registers:
  * (Ref: ARMv8 ARM, Section: "System instruction class encoding overview",
@@ -50,6 +52,8 @@
 #define sys_reg_CRm(id)	(((id) >> CRm_shift) & CRm_mask)
 #define sys_reg_Op2(id)	(((id) >> Op2_shift) & Op2_mask)
 
+#endif /* ARM64_S390_COMMON */
+
 #ifndef CONFIG_BROKEN_GAS_INST
 
 #ifdef __ASSEMBLER__
@@ -123,6 +127,8 @@
 #define GSB_SYS_BARRIER_INSN		__SYS_BARRIER_INSN(1, 0, 12, 0, 0, 31)
 #define GSB_ACK_BARRIER_INSN		__SYS_BARRIER_INSN(1, 0, 12, 0, 1, 31)
 
+#ifdef ARM64_S390_COMMON
+
 /* Data cache zero operations */
 #define SYS_DC_ISW			sys_insn(1, 0, 7, 6, 2)
 #define SYS_DC_IGSW			sys_insn(1, 0, 7, 6, 4)
@@ -173,7 +179,7 @@
  * come from here. The header relies on the definition of sys_reg()
  * earlier in this file.
  */
-#include "asm/sysreg-defs.h"
+#include <asm/sysreg-defs.h>
 
 /*
  * System registers, organised loosely by encoding but grouped together
@@ -295,7 +301,6 @@
 #define SYS_APGAKEYLO_EL1		sys_reg(3, 0, 2, 3, 0)
 #define SYS_APGAKEYHI_EL1		sys_reg(3, 0, 2, 3, 1)
 
-#define SYS_SPSR_EL1			sys_reg(3, 0, 4, 0, 0)
 #define SYS_ELR_EL1			sys_reg(3, 0, 4, 0, 1)
 
 #define SYS_ICC_PMR_EL1			sys_reg(3, 0, 4, 6, 0)
@@ -518,7 +523,6 @@
 #define SYS_VTTBR_EL2			sys_reg(3, 4, 2, 1, 0)
 
 #define SYS_HAFGRTR_EL2			sys_reg(3, 4, 3, 1, 6)
-#define SYS_SPSR_EL2			sys_reg(3, 4, 4, 0, 0)
 #define SYS_ELR_EL2			sys_reg(3, 4, 4, 0, 1)
 #define SYS_SP_EL1			sys_reg(3, 4, 4, 1, 0)
 #define SYS_SPSR_irq			sys_reg(3, 4, 4, 3, 0)
@@ -604,7 +608,6 @@
 #define SYS_BRBCR_EL12			sys_reg(2, 5, 9, 0, 0)
 #define SYS_TTBR0_EL12			sys_reg(3, 5, 2, 0, 0)
 #define SYS_TTBR1_EL12			sys_reg(3, 5, 2, 0, 1)
-#define SYS_SPSR_EL12			sys_reg(3, 5, 4, 0, 0)
 #define SYS_ELR_EL12			sys_reg(3, 5, 4, 0, 1)
 #define SYS_AFSR0_EL12			sys_reg(3, 5, 5, 1, 0)
 #define SYS_AFSR1_EL12			sys_reg(3, 5, 5, 1, 1)
@@ -835,6 +838,8 @@
 #define SCTLR_ELx_A	 (BIT(1))
 #define SCTLR_ELx_M	 (BIT(0))
 
+#endif /* ARM64_S390_COMMON */
+
 #ifdef CONFIG_CPU_BIG_ENDIAN
 #define ENDIAN_SET_EL2		SCTLR_ELx_EE
 #else
@@ -869,6 +874,7 @@
 	 SCTLR_EL1_LSMAOE | SCTLR_EL1_nTLSMD | SCTLR_EL1_EIS   | \
 	 SCTLR_EL1_TSCXT  | SCTLR_EL1_EOS)
 
+#ifdef ARM64_S390_COMMON
 /* MAIR_ELx memory attributes (used by Linux) */
 #define MAIR_ATTR_DEVICE_nGnRnE		UL(0x00)
 #define MAIR_ATTR_DEVICE_nGnRE		UL(0x04)
@@ -1105,6 +1111,8 @@
 #define GICV5_GICR_CDNMIA_TYPE_MASK	GENMASK_ULL(31, 29)
 #define GICV5_GICR_CDNMIA_ID_MASK	GENMASK_ULL(23, 0)
 
+#endif /* ARM64_S390_COMMON */
+
 #define gicr_insn(insn)			read_sysreg_s(GICV5_OP_GICR_##insn)
 #define gic_insn(v, insn)		write_sysreg_s(v, GICV5_OP_GIC_##insn)
 
@@ -1254,6 +1262,8 @@
 	par;								\
 })
 
+#ifdef ARM64_S390_COMMON
+
 #define SYS_FIELD_VALUE(reg, field, val)	reg##_##field##_##val
 
 #define SYS_FIELD_GET(reg, field, val)		\
@@ -1266,6 +1276,8 @@
 		 FIELD_PREP(reg##_##field##_MASK,	\
 			    SYS_FIELD_VALUE(reg, field, val))
 
-#endif
+#endif /* ARM64_S390_COMMON */
+
+#endif /* __ASSEMBLER__ */
 
 #endif	/* __ASM_SYSREG_H */
diff --git a/arch/arm64/kvm/arm.c b/arch/arm64/kvm/arm.c
index 9a6c72a186727..2d2e7498be884 100644
--- a/arch/arm64/kvm/arm.c
+++ b/arch/arm64/kvm/arm.c
@@ -1593,6 +1593,7 @@ static unsigned long system_supported_vcpu_features(void)
 	return features;
 }
 
+#ifdef ARM64_S390_COMMON
 static int kvm_vcpu_init_check_features(struct kvm_vcpu *vcpu,
 					const struct kvm_vcpu_init *init)
 {
@@ -1641,6 +1642,8 @@ static bool kvm_vcpu_init_changed(struct kvm_vcpu *vcpu,
 			     KVM_VCPU_MAX_FEATURES);
 }
 
+#endif /* ARM64_S390_COMMON */
+
 static int kvm_setup_vcpu(struct kvm_vcpu *vcpu)
 {
 	struct kvm *kvm = vcpu->kvm;
diff --git a/arch/arm64/kvm/guest.c b/arch/arm64/kvm/guest.c
index b01d6622b8720..df1f78ff10445 100644
--- a/arch/arm64/kvm/guest.c
+++ b/arch/arm64/kvm/guest.c
@@ -62,6 +62,7 @@ const struct kvm_stats_header kvm_vcpu_stats_header = {
 		       sizeof(kvm_vcpu_stats_desc),
 };
 
+#ifdef ARM64_S390_COMMON
 static bool core_reg_offset_is_vreg(u64 off)
 {
 	return off >= KVM_REG_ARM_CORE_REG(fp_regs.vregs) &&
@@ -134,19 +135,19 @@ static void *core_reg_addr(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg)
 	     KVM_REG_ARM_CORE_REG(regs.regs[30]):
 		off -= KVM_REG_ARM_CORE_REG(regs.regs[0]);
 		off /= 2;
-		return &vcpu->arch.ctxt.regs.regs[off];
+		return &vcpu_gp_regs(vcpu)[off];
 
 	case KVM_REG_ARM_CORE_REG(regs.sp):
-		return &vcpu->arch.ctxt.regs.sp;
+		return vcpu_sp_el0(vcpu);
 
 	case KVM_REG_ARM_CORE_REG(regs.pc):
-		return &vcpu->arch.ctxt.regs.pc;
+		return vcpu_pc(vcpu);
 
 	case KVM_REG_ARM_CORE_REG(regs.pstate):
-		return &vcpu->arch.ctxt.regs.pstate;
+		return vcpu_cpsr(vcpu);
 
 	case KVM_REG_ARM_CORE_REG(sp_el1):
-		return __ctxt_sys_reg(&vcpu->arch.ctxt, SP_EL1);
+		return kvm_vcpu_get_sp_el1(vcpu);
 
 	case KVM_REG_ARM_CORE_REG(elr_el1):
 		return __ctxt_sys_reg(&vcpu->arch.ctxt, ELR_EL1);
@@ -170,13 +171,13 @@ static void *core_reg_addr(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg)
 	     KVM_REG_ARM_CORE_REG(fp_regs.vregs[31]):
 		off -= KVM_REG_ARM_CORE_REG(fp_regs.vregs[0]);
 		off /= 4;
-		return &vcpu->arch.ctxt.fp_regs.vregs[off];
+		return kvm_vcpu_get_vreg(vcpu, off);
 
 	case KVM_REG_ARM_CORE_REG(fp_regs.fpsr):
-		return &vcpu->arch.ctxt.fp_regs.fpsr;
+		return kvm_vcpu_get_fpsr(vcpu);
 
 	case KVM_REG_ARM_CORE_REG(fp_regs.fpcr):
-		return &vcpu->arch.ctxt.fp_regs.fpcr;
+		return kvm_vcpu_get_fpcr(vcpu);
 
 	default:
 		return NULL;
@@ -306,6 +307,8 @@ static int set_core_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg)
 	return err;
 }
 
+#endif /* ARM64_S390_COMMON */
+
 #define vq_word(vq) (((vq) - SVE_VQ_MIN) / 64)
 #define vq_mask(vq) ((u64)1 << ((vq) - SVE_VQ_MIN) % 64)
 #define vq_present(vqs, vq) (!!((vqs)[vq_word(vq)] & vq_mask(vq)))
@@ -543,6 +546,7 @@ int kvm_arch_vcpu_ioctl_set_regs(struct kvm_vcpu *vcpu, struct kvm_regs *regs)
 	return -EINVAL;
 }
 
+#ifdef ARM64_S390_COMMON
 static int copy_core_reg_indices(const struct kvm_vcpu *vcpu,
 				 u64 __user *uindices)
 {
@@ -591,6 +595,8 @@ static unsigned long num_core_regs(const struct kvm_vcpu *vcpu)
 	return copy_core_reg_indices(vcpu, NULL);
 }
 
+#endif /* ARM64_S390_COMMON */
+
 static unsigned long num_sve_regs(const struct kvm_vcpu *vcpu)
 {
 	const unsigned int slices = vcpu_sve_slices(vcpu);
diff --git a/arch/arm64/kvm/handle_exit.c b/arch/arm64/kvm/handle_exit.c
index 54aedf93c78b6..d511af145ee6a 100644
--- a/arch/arm64/kvm/handle_exit.c
+++ b/arch/arm64/kvm/handle_exit.c
@@ -213,6 +213,7 @@ static int kvm_handle_guest_debug(struct kvm_vcpu *vcpu)
 	return 0;
 }
 
+#ifdef ARM64_S390_COMMON
 static int kvm_handle_unknown_ec(struct kvm_vcpu *vcpu)
 {
 	u64 esr = kvm_vcpu_get_esr(vcpu);
@@ -224,6 +225,8 @@ static int kvm_handle_unknown_ec(struct kvm_vcpu *vcpu)
 	return 1;
 }
 
+#endif /* ARM64_S390_COMMON */
+
 /*
  * Guest access to SVE registers should be routed to this handler only
  * when the system doesn't support SVE.
@@ -404,6 +407,7 @@ static exit_handle_fn arm_exit_handlers[] = {
 	[ESR_ELx_EC_GCS]	= kvm_handle_gcs,
 };
 
+#ifdef ARM64_S390_COMMON
 static exit_handle_fn kvm_get_exit_handler(struct kvm_vcpu *vcpu)
 {
 	u64 esr = kvm_vcpu_get_esr(vcpu);
@@ -439,6 +443,8 @@ static int handle_trap_exceptions(struct kvm_vcpu *vcpu)
 	return handled;
 }
 
+#endif /* ARM64_S390_COMMON */
+
 /*
  * Return > 0 to return to guest, < 0 on error, 0 (and set exit_reason) on
  * proper exit to userspace.
diff --git a/arch/arm64/kvm/hyp/exception.c b/arch/arm64/kvm/hyp/exception.c
index bef40ddb16dbc..9e63c4aebb296 100644
--- a/arch/arm64/kvm/hyp/exception.c
+++ b/arch/arm64/kvm/hyp/exception.c
@@ -292,12 +292,12 @@ static void enter_exception32(struct kvm_vcpu *vcpu, u32 mode, u32 vect_offset)
 	switch(mode) {
 	case PSR_AA32_MODE_ABT:
 		__vcpu_write_spsr_abt(vcpu, host_spsr_to_spsr32(spsr));
-		vcpu_gp_regs(vcpu)->compat_lr_abt = return_address;
+		vcpu_gp_regs(vcpu)[__compat_lr_abt] = return_address;
 		break;
 
 	case PSR_AA32_MODE_UND:
 		__vcpu_write_spsr_und(vcpu, host_spsr_to_spsr32(spsr));
-		vcpu_gp_regs(vcpu)->compat_lr_und = return_address;
+		vcpu_gp_regs(vcpu)[__compat_lr_und] = return_address;
 		break;
 	}
 
diff --git a/arch/arm64/kvm/hyp/include/hyp/adjust_pc.h b/arch/arm64/kvm/hyp/include/hyp/adjust_pc.h
index 4fdfeabefeb43..a049983bd5c3a 100644
--- a/arch/arm64/kvm/hyp/include/hyp/adjust_pc.h
+++ b/arch/arm64/kvm/hyp/include/hyp/adjust_pc.h
@@ -33,11 +33,11 @@ static inline void kvm_skip_instr(struct kvm_vcpu *vcpu)
 static inline void __kvm_skip_instr(struct kvm_vcpu *vcpu)
 {
 	*vcpu_pc(vcpu) = read_sysreg_el2(SYS_ELR);
-	vcpu_gp_regs(vcpu)->pstate = read_sysreg_el2(SYS_SPSR);
+	*vcpu_cpsr(vcpu) = read_sysreg_el2(SYS_SPSR);
 
 	kvm_skip_instr(vcpu);
 
-	write_sysreg_el2(vcpu_gp_regs(vcpu)->pstate, SYS_SPSR);
+	write_sysreg_el2(*vcpu_cpsr(vcpu), SYS_SPSR);
 	write_sysreg_el2(*vcpu_pc(vcpu), SYS_ELR);
 }
 
diff --git a/arch/arm64/kvm/hyp/include/hyp/switch.h b/arch/arm64/kvm/hyp/include/hyp/switch.h
index 4bf624a49591d..fc1fdc99d82cf 100644
--- a/arch/arm64/kvm/hyp/include/hyp/switch.h
+++ b/arch/arm64/kvm/hyp/include/hyp/switch.h
@@ -451,7 +451,7 @@ static inline bool kvm_hyp_handle_mops(struct kvm_vcpu *vcpu, u64 *exit_code)
 	u64 spsr;
 
 	*vcpu_pc(vcpu) = read_sysreg_el2(SYS_ELR);
-	arm64_mops_reset_regs(vcpu_gp_regs(vcpu), vcpu->arch.fault.esr_el2);
+	arm64_mops_reset_regs(&vcpu->arch.ctxt.regs, vcpu->arch.fault.esr_el2);
 	write_sysreg_el2(*vcpu_pc(vcpu), SYS_ELR);
 
 	/*
@@ -896,7 +896,7 @@ static inline void synchronize_vcpu_pstate(struct kvm_vcpu *vcpu)
 	/*
 	 * Check for the conditions of Cortex-A510's #2077057. When these occur
 	 * SPSR_EL2 can't be trusted, but isn't needed either as it is
-	 * unchanged from the value in vcpu_gp_regs(vcpu)->pstate.
+	 * unchanged from the value in vcpu_cpsr(vcpu).
 	 * Are we single-stepping the guest, and took a PAC exception from the
 	 * active-not-pending state?
 	 */
diff --git a/arch/arm64/kvm/mmio.c b/arch/arm64/kvm/mmio.c
index d1c3a352d5a22..5161102da5077 100644
--- a/arch/arm64/kvm/mmio.c
+++ b/arch/arm64/kvm/mmio.c
@@ -10,6 +10,7 @@
 
 #include "trace.h"
 
+#ifdef ARM64_S390_COMMON
 void kvm_mmio_write_buf(void *buf, unsigned int len, unsigned long data)
 {
 	void *datap = NULL;
@@ -258,3 +259,4 @@ int io_mem_abort(struct kvm_vcpu *vcpu, phys_addr_t fault_ipa)
 	run->exit_reason	= KVM_EXIT_MMIO;
 	return 0;
 }
+#endif /* ARM64_S390_COMMON */
diff --git a/arch/arm64/kvm/reset.c b/arch/arm64/kvm/reset.c
index b963fd975aaca..81d9f0faede2e 100644
--- a/arch/arm64/kvm/reset.c
+++ b/arch/arm64/kvm/reset.c
@@ -34,6 +34,7 @@
 static u32 __ro_after_init kvm_ipa_limit;
 unsigned int __ro_after_init kvm_host_sve_max_vl;
 
+#ifdef ARM64_S390_COMMON
 /*
  * ARMv8 Reset Values
  */
@@ -46,6 +47,8 @@ unsigned int __ro_after_init kvm_host_sve_max_vl;
 #define VCPU_RESET_PSTATE_SVC	(PSR_AA32_MODE_SVC | PSR_AA32_A_BIT | \
 				 PSR_AA32_I_BIT | PSR_AA32_F_BIT)
 
+#endif /* ARM64_S390_COMMON */
+
 unsigned int __ro_after_init kvm_sve_max_vl;
 
 int __init kvm_arm_init_sve(void)
@@ -169,6 +172,33 @@ static void kvm_vcpu_reset_sve(struct kvm_vcpu *vcpu)
 		memset(vcpu->arch.sve_state, 0, vcpu_sve_state_size(vcpu));
 }
 
+#ifdef ARM64_S390_COMMON
+static void kvm_reset_vcpu_core_regs(struct kvm_vcpu *vcpu)
+{
+	u32 pstate;
+
+	if (vcpu_el1_is_32bit(vcpu))
+		pstate = VCPU_RESET_PSTATE_SVC;
+	else if (vcpu_has_nv(vcpu))
+		pstate = VCPU_RESET_PSTATE_EL2;
+	else
+		pstate = VCPU_RESET_PSTATE_EL1;
+
+	memset(vcpu_gp_regs(vcpu), 0, sizeof(vcpu_gp_regs(vcpu)));
+	*vcpu_pc(vcpu) = 0;
+	*vcpu_sp_el0(vcpu) = 0;
+	memset(kvm_vcpu_get_vregs(vcpu), 0, sizeof(*kvm_vcpu_get_vregs(vcpu)));
+	memset(kvm_vcpu_get_fpsr(vcpu), 0, sizeof(*kvm_vcpu_get_fpsr(vcpu)));
+	memset(kvm_vcpu_get_fpcr(vcpu), 0, sizeof(*kvm_vcpu_get_fpcr(vcpu)));
+	vcpu->arch.ctxt.spsr_abt = 0;
+	vcpu->arch.ctxt.spsr_und = 0;
+	vcpu->arch.ctxt.spsr_irq = 0;
+	vcpu->arch.ctxt.spsr_fiq = 0;
+	*vcpu_cpsr(vcpu) = pstate;
+}
+
+#endif /* ARM64_S390_COMMON */
+
 /**
  * kvm_reset_vcpu - sets core registers and sys_regs to reset value
  * @vcpu: The VCPU pointer
@@ -191,7 +221,6 @@ void kvm_reset_vcpu(struct kvm_vcpu *vcpu)
 {
 	struct vcpu_reset_state reset_state;
 	bool loaded;
-	u32 pstate;
 
 	spin_lock(&vcpu->arch.mp_state_lock);
 	reset_state = vcpu->arch.reset_state;
@@ -210,21 +239,8 @@ void kvm_reset_vcpu(struct kvm_vcpu *vcpu)
 		kvm_vcpu_reset_sve(vcpu);
 	}
 
-	if (vcpu_el1_is_32bit(vcpu))
-		pstate = VCPU_RESET_PSTATE_SVC;
-	else if (vcpu_has_nv(vcpu))
-		pstate = VCPU_RESET_PSTATE_EL2;
-	else
-		pstate = VCPU_RESET_PSTATE_EL1;
-
 	/* Reset core registers */
-	memset(vcpu_gp_regs(vcpu), 0, sizeof(*vcpu_gp_regs(vcpu)));
-	memset(&vcpu->arch.ctxt.fp_regs, 0, sizeof(vcpu->arch.ctxt.fp_regs));
-	vcpu->arch.ctxt.spsr_abt = 0;
-	vcpu->arch.ctxt.spsr_und = 0;
-	vcpu->arch.ctxt.spsr_irq = 0;
-	vcpu->arch.ctxt.spsr_fiq = 0;
-	vcpu_gp_regs(vcpu)->pstate = pstate;
+	kvm_reset_vcpu_core_regs(vcpu);
 
 	/* Reset system registers */
 	kvm_reset_sys_regs(vcpu);
diff --git a/arch/arm64/tools/sysreg b/arch/arm64/tools/sysreg
index 7cb61aca3797f..2a4b94e8c62fd 100644
--- a/arch/arm64/tools/sysreg
+++ b/arch/arm64/tools/sysreg
@@ -401,6 +401,78 @@ Res0	3:1
 Field	0	SO
 EndSysreg
 
+Sysreg	SPSR_EL1	3	0	4	0	0
+Res0	63:37
+Field	36	UNIJ
+Res0	35:34
+Field	33	PPEND
+Res0	32
+Field	31	N
+Field	30	Z
+Field	29	C
+Field	28	V
+Field	27	Q
+Field	26:25	IT01
+Field	24	DIT
+Field	23	SSBS
+Field	22	PAN
+Field	21	SS
+Field	20	IL
+Field	19:16	GE
+Field	15:10	IT27
+Field	9	E
+Field	8	A
+Field	7	I
+Field	6	F
+Field	5	T
+Field	4	M4
+Enum	3:0	M
+	0b0000	EL0
+	0b0100	EL1t
+	0b0101	EL1h
+	0b1000	EL1tnv
+	0b1001	EL1hnv
+EndEnum
+EndSysreg
+
+Sysreg	SPSR_EL2	3	4	4	0	0
+Res0	63:37
+Field	36	UNIJ
+Res0	35:34
+Field	33	PPEND
+Res0	32
+Field	31	N
+Field	30	Z
+Field	29	C
+Field	28	V
+Field	27	Q
+Field	26:25	IT01
+Field	24	DIT
+Field	23	SSBS
+Field	22	PAN
+Field	21	SS
+Field	20	IL
+Field	19:16	GE
+Field	15:10	IT27
+Field	9	E
+Field	8	A
+Field	7	I
+Field	6	F
+Field	5	T
+Field	4	M4
+Enum	3:0	M
+	0b0000	EL0
+	0b0100	EL1t
+	0b0101	EL1h
+	0b1000	EL2t
+	0b1001	EL3h
+EndEnum
+EndSysreg
+
+Sysreg	SPSR_EL12	3	5	4	0	0
+Mapping	SPSR_EL1
+EndSysreg
+
 Sysreg ID_PFR0_EL1	3	0	0	1	0
 Res0	63:32
 UnsignedEnum	31:28	RAS
diff --git a/arch/s390/Kconfig b/arch/s390/Kconfig
index 84404e6778d50..b2eaa2000b101 100644
--- a/arch/s390/Kconfig
+++ b/arch/s390/Kconfig
@@ -834,7 +834,7 @@ config VFIO_CCW
 config VFIO_AP
 	def_tristate n
 	prompt "VFIO support for AP devices"
-	depends on KVM
+	depends on KVM_S390
 	depends on VFIO
 	depends on AP
 	select VFIO_MDEV
diff --git a/arch/s390/boot/ipl_parm.c b/arch/s390/boot/ipl_parm.c
index 6bc950b92be76..b8906ba7e5e8a 100644
--- a/arch/s390/boot/ipl_parm.c
+++ b/arch/s390/boot/ipl_parm.c
@@ -300,7 +300,7 @@ void parse_boot_command_line(void)
 			stack_protector_debug = 1;
 #endif
 
-#if IS_ENABLED(CONFIG_KVM)
+#if IS_ENABLED(CONFIG_KVM_S390)
 		if (!strcmp(param, "prot_virt")) {
 			rc = kstrtobool(val, &enabled);
 			if (!rc && enabled)
diff --git a/arch/s390/boot/uv.c b/arch/s390/boot/uv.c
index 4568e8f81dac1..f7b68bdcedc13 100644
--- a/arch/s390/boot/uv.c
+++ b/arch/s390/boot/uv.c
@@ -26,7 +26,7 @@ void uv_query_info(void)
 	if (uv_call(0, (uint64_t)&uvcb) && uvcb.header.rc != UVC_RC_MORE_DATA)
 		return;
 
-	if (IS_ENABLED(CONFIG_KVM)) {
+	if (IS_ENABLED(CONFIG_KVM_S390)) {
 		memcpy(uv_info.inst_calls_list, uvcb.inst_calls_list, sizeof(uv_info.inst_calls_list));
 		uv_info.uv_base_stor_len = uvcb.uv_base_stor_len;
 		uv_info.guest_base_stor_len = uvcb.conf_base_phys_stor_len;
diff --git a/arch/s390/configs/debug_defconfig b/arch/s390/configs/debug_defconfig
index 54637be87fb73..e9ad718a94085 100644
--- a/arch/s390/configs/debug_defconfig
+++ b/arch/s390/configs/debug_defconfig
@@ -63,7 +63,7 @@ CONFIG_IOMMUFD=y
 CONFIG_CMM=m
 CONFIG_APPLDATA_BASE=y
 CONFIG_S390_HYPFS_FS=y
-CONFIG_KVM=m
+CONFIG_KVM_S390=m
 CONFIG_KVM_S390_UCONTROL=y
 CONFIG_S390_UNWIND_SELFTEST=m
 CONFIG_S390_KPROBES_SANITY_TEST=m
diff --git a/arch/s390/configs/defconfig b/arch/s390/configs/defconfig
index 5f5114a253cf7..20de85c96e9eb 100644
--- a/arch/s390/configs/defconfig
+++ b/arch/s390/configs/defconfig
@@ -61,7 +61,8 @@ CONFIG_IOMMUFD=y
 CONFIG_CMM=m
 CONFIG_APPLDATA_BASE=y
 CONFIG_S390_HYPFS_FS=y
-CONFIG_KVM=m
+CONFIG_KVM_S390=m
+CONFIG_KVM_ARM64=m
 CONFIG_S390_UNWIND_SELFTEST=m
 CONFIG_S390_KPROBES_SANITY_TEST=m
 CONFIG_S390_MODULES_SANITY_TEST=m
diff --git a/arch/s390/include/arm64/kvm_emulate.h b/arch/s390/include/arm64/kvm_emulate.h
new file mode 100644
index 0000000000000..c02a6fdeb9ab0
--- /dev/null
+++ b/arch/s390/include/arm64/kvm_emulate.h
@@ -0,0 +1,102 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+
+#ifndef __S390_ARM64_KVM_EMULATE_H__
+#define __S390_ARM64_KVM_EMULATE_H__
+
+#include <asm/fault.h>
+#include <asm/ptrace.h>
+#include <linux/kvm_host.h>
+
+#include <arm64/kvm_arm.h>
+#include <arm64/sysreg.h>
+
+static __always_inline unsigned long *vcpu_pc(const struct kvm_vcpu *vcpu)
+{
+	return (unsigned long *)&vcpu->arch.sae_block.pc;
+}
+
+static __always_inline unsigned long *vcpu_cpsr(const struct kvm_vcpu *vcpu)
+{
+	return (unsigned long *)&vcpu->arch.sae_block.pstate;
+}
+
+static __always_inline unsigned long *vcpu_sp_el0(const struct kvm_vcpu *vcpu)
+{
+	return (unsigned long *)&vcpu->arch.sae_block.sp_el0;
+}
+
+static __always_inline bool vcpu_mode_is_32bit(const struct kvm_vcpu *vcpu)
+{
+	return false;
+}
+
+static __always_inline u64 kvm_vcpu_get_esr(const struct kvm_vcpu *vcpu)
+{
+	return vcpu->arch.sae_block.hai.esr_elz;
+}
+
+static inline unsigned long *vcpu_hcr(struct kvm_vcpu *vcpu)
+{
+	return (unsigned long *)&vcpu->arch.hcr_elz;
+}
+
+static __always_inline unsigned long kvm_vcpu_get_hfar(const struct kvm_vcpu *vcpu)
+{
+	return vcpu->arch.sae_block.hai.far_elz;
+}
+
+static __always_inline phys_addr_t kvm_vcpu_get_fault_ipa(const struct kvm_vcpu *vcpu)
+{
+	return vcpu->arch.sae_block.hai.teid.addr * PAGE_SIZE;
+}
+
+static inline u16 kvm_vcpu_fault_pic(const struct kvm_vcpu *vcpu)
+{
+	return vcpu->arch.sae_block.hai.pic & PGM_INT_CODE_MASK;
+}
+
+static __always_inline
+bool kvm_vcpu_trap_is_permission_fault(const struct kvm_vcpu *vcpu)
+{
+	return kvm_vcpu_fault_pic(vcpu) == PGM_PROTECTION;
+}
+
+static __always_inline bool kvm_condition_valid(const struct kvm_vcpu *vcpu)
+{
+	return true;
+}
+
+static __always_inline bool vcpu_el1_is_32bit(struct kvm_vcpu *vcpu)
+{
+	return false;
+}
+
+static inline bool kvm_vcpu_is_be(struct kvm_vcpu *vcpu)
+{
+	return false;
+}
+
+static inline int kvm_vcpu_abt_gltl(struct kvm_vcpu *vcpu)
+{
+	return vcpu->arch.sae_block.hai.gltl;
+}
+
+static inline bool vcpu_mode_priv(const struct kvm_vcpu *vcpu)
+{
+	u32 mode = *vcpu_cpsr(vcpu) & PSR_MODE_MASK;
+
+	return mode != PSR_MODE_EL0t;
+}
+
+static inline void kvm_skip_instr(struct kvm_vcpu *vcpu)
+{
+	*vcpu_pc(vcpu) += 4;
+	*vcpu_cpsr(vcpu) &= ~PSR_BTYPE_MASK;
+
+	/* advance the singlestep state machine */
+	*vcpu_cpsr(vcpu) &= ~SPSR_EL1_SS;
+}
+
+#include <arm64/kvm_emulate-gen.h>
+
+#endif /* __S390_ARM64_KVM_EMULATE_H__ */
diff --git a/arch/s390/include/arm64/kvm_nested.h b/arch/s390/include/arm64/kvm_nested.h
new file mode 100644
index 0000000000000..e950b1a10c417
--- /dev/null
+++ b/arch/s390/include/arm64/kvm_nested.h
@@ -0,0 +1,11 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+
+#ifndef ASM_KVM_NESTED_H
+#define ASM_KVM_NESTED_H
+
+static inline bool vcpu_has_nv(const struct kvm_vcpu *vcpu)
+{
+	return false;
+}
+
+#endif /* ASM_KVM_NESTED_H */
diff --git a/arch/s390/include/arm64/ptrace.h b/arch/s390/include/arm64/ptrace.h
new file mode 100644
index 0000000000000..449b85582c977
--- /dev/null
+++ b/arch/s390/include/arm64/ptrace.h
@@ -0,0 +1,11 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+
+#ifndef __S390_ARM64_PTRACE_H__
+#define __S390_ARM64_PTRACE_H__
+
+#include <arm64/sysreg.h>
+#include <uapi/arm64/ptrace.h>
+
+#include <arm64/ptrace-gen.h>
+
+#endif /* __S390_ARM64_PTRACE_H__ */
diff --git a/arch/s390/include/arm64/sysreg.h b/arch/s390/include/arm64/sysreg.h
new file mode 100644
index 0000000000000..ac6b638fef563
--- /dev/null
+++ b/arch/s390/include/arm64/sysreg.h
@@ -0,0 +1,13 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+
+#ifndef __S390_ARM64_SYSREG_H__
+#define __S390_ARM64_SYSREG_H__
+
+#include <linux/bits.h>
+#include <linux/stringify.h>
+#include <linux/kasan-tags.h>
+#include <linux/kconfig.h>
+
+#include <arm64/sysreg-gen.h>
+
+#endif /* __S390_ARM64_SYSREG_H__ */
diff --git a/arch/s390/include/asm/Kbuild b/arch/s390/include/asm/Kbuild
index 0c1fc47c3ba0a..f6fd67d1c6513 100644
--- a/arch/s390/include/asm/Kbuild
+++ b/arch/s390/include/asm/Kbuild
@@ -8,3 +8,6 @@ generic-y += asm-offsets.h
 generic-y += mcs_spinlock.h
 generic-y += mmzone.h
 generic-y += ring_buffer.h
+
+generated-y += sysreg-gen-defs.h
+generated-y += kvm_arm64_modname.h
diff --git a/arch/s390/include/asm/asm-prototypes.h b/arch/s390/include/asm/asm-prototypes.h
index d4da4436d02be..faa2afb259a1a 100644
--- a/arch/s390/include/asm/asm-prototypes.h
+++ b/arch/s390/include/asm/asm-prototypes.h
@@ -6,6 +6,7 @@
 #include <asm/bug.h>
 #include <asm/fpu.h>
 #include <asm/nospec-branch.h>
+#include <asm/sae.h>
 #include <asm-generic/asm-prototypes.h>
 
 #endif /* _ASM_S390_PROTOTYPES_H */
diff --git a/arch/s390/include/asm/elf.h b/arch/s390/include/asm/elf.h
index bb63fa4d20bb8..ad3108ecfb07b 100644
--- a/arch/s390/include/asm/elf.h
+++ b/arch/s390/include/asm/elf.h
@@ -123,6 +123,7 @@ enum {
 	HWCAP_NR_NNPA		= 20,
 	HWCAP_NR_PCI_MIO	= 21,
 	HWCAP_NR_SIE		= 22,
+	HWCAP_NR_SAE		= 23,
 	HWCAP_NR_MAX
 };
 
@@ -150,6 +151,7 @@ enum {
 #define HWCAP_NNPA		BIT(HWCAP_NR_NNPA)
 #define HWCAP_PCI_MIO		BIT(HWCAP_NR_PCI_MIO)
 #define HWCAP_SIE		BIT(HWCAP_NR_SIE)
+#define HWCAP_SAE		BIT(HWCAP_NR_SAE)
 
 /*
  * These are used to set parameters in the core dumps.
diff --git a/arch/s390/include/asm/kvm.h b/arch/s390/include/asm/kvm.h
new file mode 100644
index 0000000000000..aeb11dc631d5e
--- /dev/null
+++ b/arch/s390/include/asm/kvm.h
@@ -0,0 +1,6 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+#ifdef KVM_S390_ARM64
+#include <uapi/arm64/kvm.h>
+#else
+#include <uapi/asm/kvm.h>
+#endif
diff --git a/arch/s390/include/asm/kvm_host.h b/arch/s390/include/asm/kvm_host.h
index c172f9b212d18..cd6d572883abc 100644
--- a/arch/s390/include/asm/kvm_host.h
+++ b/arch/s390/include/asm/kvm_host.h
@@ -1,154 +1,18 @@
 /* SPDX-License-Identifier: GPL-2.0 */
-/*
- * definition for kernel virtual machines on s390
- *
- * Copyright IBM Corp. 2008, 2018
- *
- *    Author(s): Carsten Otte <cotte@de.ibm.com>
- */
-
 
 #ifndef ASM_KVM_HOST_H
 #define ASM_KVM_HOST_H
 
-#include <linux/types.h>
-#include <linux/hrtimer.h>
-#include <linux/interrupt.h>
-#include <linux/kvm_types.h>
-#include <linux/kvm.h>
-#include <linux/seqlock.h>
-#include <linux/module.h>
-#include <linux/pci.h>
-#include <linux/mmu_notifier.h>
-#include <asm/kvm_host_types.h>
-#include <asm/debug.h>
-#include <asm/cpu.h>
-#include <asm/fpu.h>
-#include <asm/isc.h>
-#include <asm/guarded_storage.h>
-
-#define KVM_HAVE_MMU_RWLOCK
-#define KVM_MAX_VCPUS 255
-
-#define KVM_INTERNAL_MEM_SLOTS 1
-
-/*
- * These seem to be used for allocating ->chip in the routing table, which we
- * don't use. 1 is as small as we can get to reduce the needed memory. If we
- * need to look at ->chip later on, we'll need to revisit this.
- */
-#define KVM_NR_IRQCHIPS 1
-#define KVM_IRQCHIP_NUM_PINS 1
-#define KVM_HALT_POLL_NS_DEFAULT 50000
-
-/* s390-specific vcpu->requests bit members */
-#define KVM_REQ_ENABLE_IBS	KVM_ARCH_REQ(0)
-#define KVM_REQ_DISABLE_IBS	KVM_ARCH_REQ(1)
-#define KVM_REQ_ICPT_OPEREXC	KVM_ARCH_REQ(2)
-#define KVM_REQ_START_MIGRATION KVM_ARCH_REQ(3)
-#define KVM_REQ_STOP_MIGRATION  KVM_ARCH_REQ(4)
-#define KVM_REQ_VSIE_RESTART	KVM_ARCH_REQ(5)
-#define KVM_REQ_REFRESH_GUEST_PREFIX	\
-	KVM_ARCH_REQ_FLAGS(6, KVM_REQUEST_WAIT | KVM_REQUEST_NO_WAKEUP)
+#ifdef KVM_S390_ARM64
+#include <asm/kvm_host_arm64.h>
+#else
+#include <asm/kvm_host_s390.h>
+#endif
 
-struct kvm_vcpu_stat {
-	struct kvm_vcpu_stat_generic generic;
-	u64 exit_userspace;
-	u64 exit_null;
-	u64 exit_external_request;
-	u64 exit_io_request;
-	u64 exit_external_interrupt;
-	u64 exit_stop_request;
-	u64 exit_validity;
-	u64 exit_instruction;
-	u64 exit_pei;
-	u64 halt_no_poll_steal;
-	u64 instruction_lctl;
-	u64 instruction_lctlg;
-	u64 instruction_stctl;
-	u64 instruction_stctg;
-	u64 exit_program_interruption;
-	u64 exit_instr_and_program;
-	u64 exit_operation_exception;
-	u64 deliver_ckc;
-	u64 deliver_cputm;
-	u64 deliver_external_call;
-	u64 deliver_emergency_signal;
-	u64 deliver_service_signal;
-	u64 deliver_virtio;
-	u64 deliver_stop_signal;
-	u64 deliver_prefix_signal;
-	u64 deliver_restart_signal;
-	u64 deliver_program;
-	u64 deliver_io;
-	u64 deliver_machine_check;
-	u64 exit_wait_state;
-	u64 inject_ckc;
-	u64 inject_cputm;
-	u64 inject_external_call;
-	u64 inject_emergency_signal;
-	u64 inject_mchk;
-	u64 inject_pfault_init;
-	u64 inject_program;
-	u64 inject_restart;
-	u64 inject_set_prefix;
-	u64 inject_stop_signal;
-	u64 instruction_epsw;
-	u64 instruction_gs;
-	u64 instruction_io_other;
-	u64 instruction_lpsw;
-	u64 instruction_lpswe;
-	u64 instruction_lpswey;
-	u64 instruction_pfmf;
-	u64 instruction_ptff;
-	u64 instruction_sck;
-	u64 instruction_sckpf;
-	u64 instruction_stidp;
-	u64 instruction_spx;
-	u64 instruction_stpx;
-	u64 instruction_stap;
-	u64 instruction_iske;
-	u64 instruction_ri;
-	u64 instruction_rrbe;
-	u64 instruction_sske;
-	u64 instruction_ipte_interlock;
-	u64 instruction_stsi;
-	u64 instruction_stfl;
-	u64 instruction_tb;
-	u64 instruction_tpi;
-	u64 instruction_tprot;
-	u64 instruction_tsch;
-	u64 instruction_sie;
-	u64 instruction_essa;
-	u64 instruction_sthyi;
-	u64 instruction_sigp_sense;
-	u64 instruction_sigp_sense_running;
-	u64 instruction_sigp_external_call;
-	u64 instruction_sigp_emergency;
-	u64 instruction_sigp_cond_emergency;
-	u64 instruction_sigp_start;
-	u64 instruction_sigp_stop;
-	u64 instruction_sigp_stop_store_status;
-	u64 instruction_sigp_store_status;
-	u64 instruction_sigp_store_adtl_status;
-	u64 instruction_sigp_arch;
-	u64 instruction_sigp_prefix;
-	u64 instruction_sigp_restart;
-	u64 instruction_sigp_init_cpu_reset;
-	u64 instruction_sigp_cpu_reset;
-	u64 instruction_sigp_unknown;
-	u64 instruction_diagnose_10;
-	u64 instruction_diagnose_44;
-	u64 instruction_diagnose_9c;
-	u64 diag_9c_ignored;
-	u64 diag_9c_forward;
-	u64 instruction_diagnose_258;
-	u64 instruction_diagnose_308;
-	u64 instruction_diagnose_500;
-	u64 instruction_diagnose_other;
-	u64 pfault_sync;
-	u64 signal_exits;
-};
+static inline  bool kvm_arch_pmi_in_guest(struct kvm_vcpu *vcpu)
+{
+	return false;
+}
 
 #define PGM_OPERATION			0x01
 #define PGM_PRIVILEGED_OP		0x02
@@ -207,577 +71,4 @@ struct kvm_vcpu_stat {
 #define PGM_PER				0x80
 #define PGM_CRYPTO_OPERATION		0x119
 
-/* irq types in ascend order of priorities */
-enum irq_types {
-	IRQ_PEND_SET_PREFIX = 0,
-	IRQ_PEND_RESTART,
-	IRQ_PEND_SIGP_STOP,
-	IRQ_PEND_IO_ISC_7,
-	IRQ_PEND_IO_ISC_6,
-	IRQ_PEND_IO_ISC_5,
-	IRQ_PEND_IO_ISC_4,
-	IRQ_PEND_IO_ISC_3,
-	IRQ_PEND_IO_ISC_2,
-	IRQ_PEND_IO_ISC_1,
-	IRQ_PEND_IO_ISC_0,
-	IRQ_PEND_VIRTIO,
-	IRQ_PEND_PFAULT_DONE,
-	IRQ_PEND_PFAULT_INIT,
-	IRQ_PEND_EXT_HOST,
-	IRQ_PEND_EXT_SERVICE,
-	IRQ_PEND_EXT_SERVICE_EV,
-	IRQ_PEND_EXT_TIMING,
-	IRQ_PEND_EXT_CPU_TIMER,
-	IRQ_PEND_EXT_CLOCK_COMP,
-	IRQ_PEND_EXT_EXTERNAL,
-	IRQ_PEND_EXT_EMERGENCY,
-	IRQ_PEND_EXT_MALFUNC,
-	IRQ_PEND_EXT_IRQ_KEY,
-	IRQ_PEND_MCHK_REP,
-	IRQ_PEND_PROG,
-	IRQ_PEND_SVC,
-	IRQ_PEND_MCHK_EX,
-	IRQ_PEND_COUNT
-};
-
-/* We have 2M for virtio device descriptor pages. Smallest amount of
- * memory per page is 24 bytes (1 queue), so (2048*1024) / 24 = 87381
- */
-#define KVM_S390_MAX_VIRTIO_IRQS 87381
-
-/*
- * Repressible (non-floating) machine check interrupts
- * subclass bits in MCIC
- */
-#define MCHK_EXTD_BIT 58
-#define MCHK_DEGR_BIT 56
-#define MCHK_WARN_BIT 55
-#define MCHK_REP_MASK ((1UL << MCHK_DEGR_BIT) | \
-		       (1UL << MCHK_EXTD_BIT) | \
-		       (1UL << MCHK_WARN_BIT))
-
-/* Exigent machine check interrupts subclass bits in MCIC */
-#define MCHK_SD_BIT 63
-#define MCHK_PD_BIT 62
-#define MCHK_EX_MASK ((1UL << MCHK_SD_BIT) | (1UL << MCHK_PD_BIT))
-
-#define IRQ_PEND_EXT_MASK ((1UL << IRQ_PEND_EXT_IRQ_KEY)    | \
-			   (1UL << IRQ_PEND_EXT_CLOCK_COMP) | \
-			   (1UL << IRQ_PEND_EXT_CPU_TIMER)  | \
-			   (1UL << IRQ_PEND_EXT_MALFUNC)    | \
-			   (1UL << IRQ_PEND_EXT_EMERGENCY)  | \
-			   (1UL << IRQ_PEND_EXT_EXTERNAL)   | \
-			   (1UL << IRQ_PEND_EXT_TIMING)     | \
-			   (1UL << IRQ_PEND_EXT_HOST)       | \
-			   (1UL << IRQ_PEND_EXT_SERVICE)    | \
-			   (1UL << IRQ_PEND_EXT_SERVICE_EV) | \
-			   (1UL << IRQ_PEND_VIRTIO)         | \
-			   (1UL << IRQ_PEND_PFAULT_INIT)    | \
-			   (1UL << IRQ_PEND_PFAULT_DONE))
-
-#define IRQ_PEND_IO_MASK ((1UL << IRQ_PEND_IO_ISC_0) | \
-			  (1UL << IRQ_PEND_IO_ISC_1) | \
-			  (1UL << IRQ_PEND_IO_ISC_2) | \
-			  (1UL << IRQ_PEND_IO_ISC_3) | \
-			  (1UL << IRQ_PEND_IO_ISC_4) | \
-			  (1UL << IRQ_PEND_IO_ISC_5) | \
-			  (1UL << IRQ_PEND_IO_ISC_6) | \
-			  (1UL << IRQ_PEND_IO_ISC_7))
-
-#define IRQ_PEND_MCHK_MASK ((1UL << IRQ_PEND_MCHK_REP) | \
-			    (1UL << IRQ_PEND_MCHK_EX))
-
-#define IRQ_PEND_EXT_II_MASK ((1UL << IRQ_PEND_EXT_CPU_TIMER)  | \
-			      (1UL << IRQ_PEND_EXT_CLOCK_COMP) | \
-			      (1UL << IRQ_PEND_EXT_EMERGENCY)  | \
-			      (1UL << IRQ_PEND_EXT_EXTERNAL)   | \
-			      (1UL << IRQ_PEND_EXT_SERVICE)    | \
-			      (1UL << IRQ_PEND_EXT_SERVICE_EV))
-
-struct kvm_s390_interrupt_info {
-	struct list_head list;
-	u64	type;
-	union {
-		struct kvm_s390_io_info io;
-		struct kvm_s390_ext_info ext;
-		struct kvm_s390_pgm_info pgm;
-		struct kvm_s390_emerg_info emerg;
-		struct kvm_s390_extcall_info extcall;
-		struct kvm_s390_prefix_info prefix;
-		struct kvm_s390_stop_info stop;
-		struct kvm_s390_mchk_info mchk;
-	};
-};
-
-struct kvm_s390_irq_payload {
-	struct kvm_s390_io_info io;
-	struct kvm_s390_ext_info ext;
-	struct kvm_s390_pgm_info pgm;
-	struct kvm_s390_emerg_info emerg;
-	struct kvm_s390_extcall_info extcall;
-	struct kvm_s390_prefix_info prefix;
-	struct kvm_s390_stop_info stop;
-	struct kvm_s390_mchk_info mchk;
-};
-
-struct kvm_s390_local_interrupt {
-	spinlock_t lock;
-	DECLARE_BITMAP(sigp_emerg_pending, KVM_MAX_VCPUS);
-	struct kvm_s390_irq_payload irq;
-	unsigned long pending_irqs;
-};
-
-#define FIRQ_LIST_IO_ISC_0 0
-#define FIRQ_LIST_IO_ISC_1 1
-#define FIRQ_LIST_IO_ISC_2 2
-#define FIRQ_LIST_IO_ISC_3 3
-#define FIRQ_LIST_IO_ISC_4 4
-#define FIRQ_LIST_IO_ISC_5 5
-#define FIRQ_LIST_IO_ISC_6 6
-#define FIRQ_LIST_IO_ISC_7 7
-#define FIRQ_LIST_PFAULT   8
-#define FIRQ_LIST_VIRTIO   9
-#define FIRQ_LIST_COUNT   10
-#define FIRQ_CNTR_IO       0
-#define FIRQ_CNTR_SERVICE  1
-#define FIRQ_CNTR_VIRTIO   2
-#define FIRQ_CNTR_PFAULT   3
-#define FIRQ_MAX_COUNT     4
-
-/* mask the AIS mode for a given ISC */
-#define AIS_MODE_MASK(isc) (0x80 >> isc)
-
-#define KVM_S390_AIS_MODE_ALL    0
-#define KVM_S390_AIS_MODE_SINGLE 1
-
-struct kvm_s390_float_interrupt {
-	unsigned long pending_irqs;
-	unsigned long masked_irqs;
-	spinlock_t lock;
-	struct list_head lists[FIRQ_LIST_COUNT];
-	int counters[FIRQ_MAX_COUNT];
-	struct kvm_s390_mchk_info mchk;
-	struct kvm_s390_ext_info srv_signal;
-	int last_sleep_cpu;
-	spinlock_t ais_lock;
-	u8 simm;
-	u8 nimm;
-};
-
-struct kvm_hw_wp_info_arch {
-	unsigned long addr;
-	unsigned long phys_addr;
-	int len;
-	char *old_data;
-};
-
-struct kvm_hw_bp_info_arch {
-	unsigned long addr;
-	int len;
-};
-
-/*
- * Only the upper 16 bits of kvm_guest_debug->control are arch specific.
- * Further KVM_GUESTDBG flags which an be used from userspace can be found in
- * arch/s390/include/uapi/asm/kvm.h
- */
-#define KVM_GUESTDBG_EXIT_PENDING 0x10000000
-
-#define guestdbg_enabled(vcpu) \
-		(vcpu->guest_debug & KVM_GUESTDBG_ENABLE)
-#define guestdbg_sstep_enabled(vcpu) \
-		(vcpu->guest_debug & KVM_GUESTDBG_SINGLESTEP)
-#define guestdbg_hw_bp_enabled(vcpu) \
-		(vcpu->guest_debug & KVM_GUESTDBG_USE_HW_BP)
-#define guestdbg_exit_pending(vcpu) (guestdbg_enabled(vcpu) && \
-		(vcpu->guest_debug & KVM_GUESTDBG_EXIT_PENDING))
-
-#define KVM_GUESTDBG_VALID_MASK \
-		(KVM_GUESTDBG_ENABLE | KVM_GUESTDBG_SINGLESTEP |\
-		KVM_GUESTDBG_USE_HW_BP | KVM_GUESTDBG_EXIT_PENDING)
-
-struct kvm_guestdbg_info_arch {
-	unsigned long cr0;
-	unsigned long cr9;
-	unsigned long cr10;
-	unsigned long cr11;
-	struct kvm_hw_bp_info_arch *hw_bp_info;
-	struct kvm_hw_wp_info_arch *hw_wp_info;
-	int nr_hw_bp;
-	int nr_hw_wp;
-	unsigned long last_bp;
-};
-
-struct kvm_s390_pv_vcpu {
-	u64 handle;
-	unsigned long stor_base;
-};
-
-struct kvm_vcpu_arch {
-	struct kvm_s390_sie_block *sie_block;
-	/* if vsie is active, currently executed shadow sie control block */
-	struct kvm_s390_sie_block *vsie_block;
-	unsigned int      host_acrs[NUM_ACRS];
-	struct gs_cb      *host_gscb;
-	struct kvm_s390_local_interrupt local_int;
-	struct hrtimer    ckc_timer;
-	struct kvm_s390_pgm_info pgm;
-	struct gmap *gmap;
-	struct kvm_guestdbg_info_arch guestdbg;
-	unsigned long pfault_token;
-	unsigned long pfault_select;
-	unsigned long pfault_compare;
-	bool cputm_enabled;
-	/*
-	 * The seqcount protects updates to cputm_start and sie_block.cputm,
-	 * this way we can have non-blocking reads with consistent values.
-	 * Only the owning VCPU thread (vcpu->cpu) is allowed to change these
-	 * values and to start/stop/enable/disable cpu timer accounting.
-	 */
-	seqcount_t cputm_seqcount;
-	__u64 cputm_start;
-	bool gs_enabled;
-	bool skey_enabled;
-	/* Indicator if the access registers have been loaded from guest */
-	bool acrs_loaded;
-	struct kvm_s390_pv_vcpu pv;
-	union diag318_info diag318_info;
-	struct kvm_s390_mmu_cache *mc;
-};
-
-struct kvm_vm_stat {
-	struct kvm_vm_stat_generic generic;
-	u64 inject_io;
-	u64 io_390_adapter_map;
-	u64 io_390_adapter_unmap;
-	u64 io_390_inatomic;
-	u64 io_flic_inject_airq;
-	u64 io_set_adapter_int;
-	u64 io_390_inatomic_no_inject;
-	u64 inject_float_mchk;
-	u64 inject_pfault_done;
-	u64 inject_service_signal;
-	u64 inject_virtio;
-	u64 aen_forward;
-	u64 gmap_shadow_create;
-	u64 gmap_shadow_reuse;
-	u64 gmap_shadow_r1_entry;
-	u64 gmap_shadow_r2_entry;
-	u64 gmap_shadow_r3_entry;
-	u64 gmap_shadow_sg_entry;
-	u64 gmap_shadow_pg_entry;
-};
-
-struct kvm_arch_memory_slot {
-};
-
-struct s390_map_info {
-	struct list_head list;
-	__u64 guest_addr;
-	__u64 addr;
-	struct page *page;
-	/*
-	 * True if the page is long-term pinned. False if long-term pinning
-	 * failed and this entry exists only to preserve MAP/UNMAP symmetry.
-	 */
-	bool pinned;
-};
-
-struct s390_io_adapter {
-	unsigned int id;
-	int isc;
-	bool maskable;
-	bool masked;
-	bool swap;
-	bool suppressible;
-	spinlock_t maps_lock;
-	struct list_head maps;
-	unsigned int nr_maps;
-};
-
-#define MAX_S390_IO_ADAPTERS ((MAX_ISC + 1) * 8)
-#define MAX_S390_ADAPTER_MAPS 256
-
-/* maximum size of facilities and facility mask is 2k bytes */
-#define S390_ARCH_FAC_LIST_SIZE_BYTE (1<<11)
-#define S390_ARCH_FAC_LIST_SIZE_U64 \
-	(S390_ARCH_FAC_LIST_SIZE_BYTE / sizeof(u64))
-#define S390_ARCH_FAC_MASK_SIZE_BYTE S390_ARCH_FAC_LIST_SIZE_BYTE
-#define S390_ARCH_FAC_MASK_SIZE_U64 \
-	(S390_ARCH_FAC_MASK_SIZE_BYTE / sizeof(u64))
-
-struct kvm_s390_cpu_model {
-	/* facility mask supported by kvm & hosting machine */
-	__u64 fac_mask[S390_ARCH_FAC_MASK_SIZE_U64];
-	struct kvm_s390_vm_cpu_subfunc subfuncs;
-	/* facility list requested by guest (in dma page) */
-	__u64 *fac_list;
-	u64 cpuid;
-	unsigned short ibc;
-	/* subset of available UV-features for pv-guests enabled by user space */
-	struct kvm_s390_vm_cpu_uv_feat uv_feat_guest;
-};
-
-#define S390_ARCH_FAC_FORMAT_2 2
-struct kvm_s390_flcb2 {
-	union {
-		struct {
-			u8 reserved0[7];
-			u8 length;
-		};
-		u64 header_val;
-	};
-	u64 facilities[S390_ARCH_FAC_LIST_SIZE_U64];
-};
-
-typedef int (*crypto_hook)(struct kvm_vcpu *vcpu);
-
-struct kvm_s390_crypto {
-	struct kvm_s390_crypto_cb *crycb;
-	struct rw_semaphore pqap_hook_rwsem;
-	crypto_hook *pqap_hook;
-	__u32 crycbd;
-	__u8 aes_kw;
-	__u8 dea_kw;
-	__u8 apie;
-};
-
-#define APCB0_MASK_SIZE 1
-struct kvm_s390_apcb0 {
-	__u64 apm[APCB0_MASK_SIZE];		/* 0x0000 */
-	__u64 aqm[APCB0_MASK_SIZE];		/* 0x0008 */
-	__u64 adm[APCB0_MASK_SIZE];		/* 0x0010 */
-	__u64 reserved18;			/* 0x0018 */
-};
-
-#define APCB1_MASK_SIZE 4
-struct kvm_s390_apcb1 {
-	__u64 apm[APCB1_MASK_SIZE];		/* 0x0000 */
-	__u64 aqm[APCB1_MASK_SIZE];		/* 0x0020 */
-	__u64 adm[APCB1_MASK_SIZE];		/* 0x0040 */
-	__u64 reserved60[4];			/* 0x0060 */
-};
-
-struct kvm_s390_crypto_cb {
-	struct kvm_s390_apcb0 apcb0;		/* 0x0000 */
-	__u8   reserved20[0x0048 - 0x0020];	/* 0x0020 */
-	__u8   dea_wrapping_key_mask[24];	/* 0x0048 */
-	__u8   aes_wrapping_key_mask[32];	/* 0x0060 */
-	struct kvm_s390_apcb1 apcb1;		/* 0x0080 */
-};
-
-struct kvm_s390_gisa {
-	union {
-		struct { /* common to all formats */
-			u32 next_alert;
-			u8  ipm;
-			u8  reserved01[2];
-			u8  iam;
-		};
-		struct { /* format 0 */
-			u32 next_alert;
-			u8  ipm;
-			u8  reserved01;
-			u8  : 6;
-			u8  g : 1;
-			u8  c : 1;
-			u8  iam;
-			u8  reserved02[4];
-			u32 airq_count;
-		} g0;
-		struct { /* format 1 */
-			u32 next_alert;
-			u8  ipm;
-			u8  simm;
-			u8  nimm;
-			u8  iam;
-			u8  aism[8];
-			u8  : 6;
-			u8  g : 1;
-			u8  c : 1;
-			u8  reserved03[11];
-			u32 airq_count;
-		} g1;
-		struct {
-			u64 word[4];
-		} u64;
-	};
-};
-
-struct kvm_s390_gib {
-	u32 alert_list_origin;
-	u32 reserved01;
-	u8:5;
-	u8  nisc:3;
-	u8  reserved03[3];
-	u32 reserved04[5];
-};
-
-/*
- * sie_page2 has to be allocated as DMA because fac_list, crycb and
- * gisa need 31bit addresses in the sie control block.
- */
-struct sie_page2 {
-	__u64 fac_list[S390_ARCH_FAC_LIST_SIZE_U64];	/* 0x0000 */
-	struct kvm_s390_crypto_cb crycb;		/* 0x0800 */
-	struct kvm_s390_gisa gisa;			/* 0x0900 */
-	struct kvm *kvm;				/* 0x0920 */
-	u8 reserved928[0x1000 - 0x928];			/* 0x0928 */
-};
-
-struct vsie_page;
-
-struct kvm_s390_vsie {
-	struct mutex mutex;
-	struct radix_tree_root addr_to_page;
-	int page_count;
-	int next;
-	struct vsie_page *pages[KVM_MAX_VCPUS];
-};
-
-struct kvm_s390_gisa_iam {
-	u8 mask;
-	spinlock_t ref_lock;
-	u32 ref_count[MAX_ISC + 1];
-};
-
-struct kvm_s390_gisa_interrupt {
-	struct kvm_s390_gisa *origin;
-	struct kvm_s390_gisa_iam alert;
-	struct hrtimer timer;
-	u64 expires;
-	DECLARE_BITMAP(kicked_mask, KVM_MAX_VCPUS);
-};
-
-struct kvm_s390_pv {
-	u64 handle;
-	u64 guest_len;
-	unsigned long stor_base;
-	void *stor_var;
-	bool dumping;
-	void *set_aside;
-	struct list_head need_cleanup;
-	struct mmu_notifier mmu_notifier;
-	/* Protects against concurrent import-like operations */
-	struct mutex import_lock;
-};
-
-struct kvm_s390_mmu_cache;
-
-struct kvm_arch {
-	struct esca_block *sca;
-	debug_info_t *dbf;
-	struct kvm_s390_float_interrupt float_int;
-	struct kvm_device *flic;
-	struct gmap *gmap;
-	unsigned long mem_limit;
-	int css_support;
-	int use_irqchip;
-	int use_cmma;
-	int use_pfmfi;
-	int use_skf;
-	int use_zpci_interp;
-	int user_cpu_state_ctrl;
-	int user_sigp;
-	int user_stsi;
-	int user_instr0;
-	int user_operexec;
-	int allow_vsie_esamode;
-	struct s390_io_adapter *adapters[MAX_S390_IO_ADAPTERS];
-	wait_queue_head_t ipte_wq;
-	int ipte_lock_count;
-	struct mutex ipte_mutex;
-	spinlock_t start_stop_lock;
-	struct sie_page2 *sie_page2;
-	struct kvm_s390_cpu_model model;
-	struct kvm_s390_crypto crypto;
-	struct kvm_s390_vsie vsie;
-	u8 epdx;
-	u64 epoch;
-	int migration_mode;
-	atomic64_t cmma_dirty_pages;
-	/* subset of available cpu features enabled by user space */
-	DECLARE_BITMAP(cpu_feat, KVM_S390_VM_CPU_FEAT_NR_BITS);
-	/* indexed by vcpu_idx */
-	DECLARE_BITMAP(idle_mask, KVM_MAX_VCPUS);
-	struct kvm_s390_gisa_interrupt gisa_int;
-	struct kvm_s390_pv pv;
-	struct list_head kzdev_list;
-	spinlock_t kzdev_list_lock;
-	struct kvm_s390_mmu_cache *mc;
-};
-
-#define KVM_HVA_ERR_BAD		(-1UL)
-#define KVM_HVA_ERR_RO_BAD	(-2UL)
-
-static inline bool kvm_is_error_hva(unsigned long addr)
-{
-	return IS_ERR_VALUE(addr);
-}
-
-#define ASYNC_PF_PER_VCPU	64
-struct kvm_arch_async_pf {
-	unsigned long pfault_token;
-};
-
-bool kvm_arch_can_dequeue_async_page_present(struct kvm_vcpu *vcpu);
-
-void kvm_arch_async_page_ready(struct kvm_vcpu *vcpu,
-			       struct kvm_async_pf *work);
-
-bool kvm_arch_async_page_not_present(struct kvm_vcpu *vcpu,
-				     struct kvm_async_pf *work);
-
-void kvm_arch_async_page_present(struct kvm_vcpu *vcpu,
-				 struct kvm_async_pf *work);
-
-static inline void kvm_arch_async_page_present_queued(struct kvm_vcpu *vcpu) {}
-
-void kvm_arch_crypto_clear_masks(struct kvm *kvm);
-void kvm_arch_crypto_set_masks(struct kvm *kvm, unsigned long *apm,
-			       unsigned long *aqm, unsigned long *adm);
-
-#define SIE64_RETURN_NORMAL	0
-#define SIE64_RETURN_MCCK	1
-
-int __sie64a(phys_addr_t sie_block_phys, struct kvm_s390_sie_block *sie_block, u64 *rsa,
-	     unsigned long gasce);
-
-static inline int sie64a(struct kvm_s390_sie_block *sie_block, u64 *rsa, unsigned long gasce)
-{
-	return __sie64a(virt_to_phys(sie_block), sie_block, rsa, gasce);
-}
-
-extern char sie_exit;
-
-bool kvm_s390_pv_is_protected(struct kvm *kvm);
-bool kvm_s390_pv_cpu_is_protected(struct kvm_vcpu *vcpu);
-
-extern int kvm_s390_enter_exit_sie(struct kvm_s390_sie_block *scb,
-				   u64 *gprs, unsigned long gasce);
-
-extern int kvm_s390_gisc_register(struct kvm *kvm, u32 gisc);
-extern int kvm_s390_gisc_unregister(struct kvm *kvm, u32 gisc);
-
-bool kvm_s390_is_gpa_in_memslot(struct kvm *kvm, gpa_t gpa);
-
-static inline void kvm_arch_free_memslot(struct kvm *kvm,
-					 struct kvm_memory_slot *slot) {}
-static inline void kvm_arch_memslots_updated(struct kvm *kvm, u64 gen) {}
-static inline void kvm_arch_flush_shadow_all(struct kvm *kvm) {}
-static inline void kvm_arch_flush_shadow_memslot(struct kvm *kvm,
-		struct kvm_memory_slot *slot) {}
-static inline void kvm_arch_vcpu_blocking(struct kvm_vcpu *vcpu) {}
-static inline void kvm_arch_vcpu_unblocking(struct kvm_vcpu *vcpu) {}
-
-#define __KVM_HAVE_ARCH_VM_FREE
-void kvm_arch_free_vm(struct kvm *kvm);
-
-struct zpci_kvm_hook {
-	int (*kvm_register)(void *opaque, struct kvm *kvm);
-	void (*kvm_unregister)(void *opaque);
-};
-
-extern struct zpci_kvm_hook zpci_kvm_hook;
-
-#endif
+#endif /* ASM_KVM_HOST_H */
diff --git a/arch/s390/include/asm/kvm_host_arm64.h b/arch/s390/include/asm/kvm_host_arm64.h
new file mode 100644
index 0000000000000..956ae6636597f
--- /dev/null
+++ b/arch/s390/include/asm/kvm_host_arm64.h
@@ -0,0 +1,224 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+#ifndef ASM_KVM_HOST_ARM64_H
+#define ASM_KVM_HOST_ARM64_H
+
+#include <linux/bug.h>
+
+#include <asm/kvm_host_types.h>
+#include <asm/debug.h>
+
+#define vcpu_gp_regs(v)		((v)->arch.sae_block.gpr)
+
+#include <arm64/kvm_host.h>
+#include <arm64/ptrace.h>
+
+#include <asm/sae.h>
+
+#define KVM_HAVE_MMU_RWLOCK
+#define KVM_MAX_VCPUS 1
+#define KVM_S390_ARM64_IMPL_FEATURES \
+	(BIT(KVM_ARM_VCPU_PTRAUTH_ADDRESS) | BIT(KVM_ARM_VCPU_PTRAUTH_GENERIC))
+
+#define KVM_HALT_POLL_NS_DEFAULT 50000
+
+/* Minimal (=no) vgic definitions */
+#define KVM_IRQCHIP_NUM_PINS 1
+#define irqchip_in_kernel(_k) false
+
+#define __ctxt_sys_reg(ctx, reg) NULL
+struct kvm_cpu_context {
+	/*
+	 * These are just for 32 bit, which we don't have, making them RES0.
+	 * They are exposed to user space.
+	 */
+	u64	spsr_abt;
+	u64	spsr_und;
+	u64	spsr_irq;
+	u64	spsr_fiq;
+
+	__vector128 __aligned(16) vregs[32];
+};
+
+struct kvm_vcpu_arch {
+	struct kvm_sae_block sae_block;
+	struct kvm_sae_save_area save_area;
+	struct kvm_cpu_context ctxt;
+
+	u32 host_acrs[NUM_ACRS];
+
+	/* Hypervisor Configuration Register */
+	u64 hcr_elz;
+
+	/* Configuration flags, set once and for all before the vcpu can run */
+	u8 cflags;
+
+	/* Input flags to the hypervisor code, potentially cleared after use */
+	u8 iflags;
+
+	/* State flags for kernel bookkeeping, unused by the hypervisor code */
+	u8 sflags;
+
+	/*
+	 * Don't run the guest (internal implementation need).
+	 *
+	 * Contrary to the flags above, this is set/cleared outside of
+	 * a vcpu context, and thus cannot be mixed with the flags
+	 * themselves (or the flag accesses need to be made atomic).
+	 */
+	bool pause;
+
+	/* vcpu power state */
+	struct kvm_mp_state mp_state;
+	/* lock for mp_state & reset_state.reset */
+	spinlock_t mp_state_lock;
+
+	/* vcpu reset state */
+	struct vcpu_reset_state reset_state;
+
+	/* GMAP */
+	struct gmap *gmap;
+	struct kvm_s390_mmu_cache *mc;
+
+	void *debugfs_state_data;
+};
+
+struct kvm_vcpu_stat {
+	struct kvm_vcpu_stat_generic generic;
+	/* ARM64 stats */
+	u64 hvc_exit_stat;
+	u64 wfe_exit_stat;
+	u64 wfi_exit_stat;
+	u64 mmio_exit_user;
+	u64 mmio_exit_kernel;
+	u64 signal_exits;
+	u64 exits;
+	/* GMAP stats */
+	u64 pfault_sync;
+};
+
+#define kvm_vcpu_get_sp_el1(__vcpu) (&((__vcpu)->arch.sae_block.sp_el1))
+#define kvm_vcpu_get_vreg(__vcpu, _off) (&(__vcpu)->arch.ctxt.vregs[_off])
+#define kvm_vcpu_get_vregs(__vcpu) (&(__vcpu)->arch.ctxt.vregs)
+#define kvm_vcpu_get_fpsr(__vcpu) (&(__vcpu)->arch.sae_block.fpsr)
+#define kvm_vcpu_get_fpcr(__vcpu) (&(__vcpu)->arch.sae_block.fpcr)
+
+#define _vcpu_get_flag(v, flagset, ...)	\
+	__vcpu_get_flag(&(v)->arch.flagset, __VA_ARGS__)
+#define _vcpu_set_flag(v, flagset, ...)	\
+	__vcpu_set_flag(&(v)->arch.flagset, __VA_ARGS__)
+#define _vcpu_clear_flag(v, flagset, ...)	\
+	__vcpu_clear_flag(&(v)->arch.flagset, __VA_ARGS__)
+#define _vcpu_test_and_clear_flag(v, flagset, ...)	\
+	__vcpu_test_and_clear_flag(&(v)->arch.flagset, __VA_ARGS__)
+
+#define kvm_has_mte(_kvm) false
+#define vcpu_has_sve(_vcpu) false
+#define vcpu_has_ptrauth(_vcpu) false
+
+struct kvm_arch_memory_slot {
+};
+
+struct kvm_arch {
+	struct gmap *gmap;
+	u64 guest_phys_size;
+
+	/* VM-wide vCPU feature set */
+	unsigned long flags;
+
+	/* Protects VM-scoped configuration data */
+	struct mutex config_lock;
+
+	debug_info_t *dbf;
+
+	DECLARE_BITMAP(vcpu_features, KVM_VCPU_MAX_FEATURES);
+
+	unsigned long mem_limit;
+};
+
+static inline bool __vcpu_has_feature(const struct kvm_arch *ka, int feature)
+{
+	return test_bit(feature, ka->vcpu_features);
+}
+
+struct kvm_vm_stat {
+	struct kvm_vm_stat_generic generic;
+};
+
+static inline bool system_has_full_ptr_auth(void)
+{
+	return true;
+}
+
+#define kvm_vm_is_protected(_kvm) false
+#define vcpu_is_protected(_vcpu) false
+
+#define vcpu_is_loaded(_vcpu) ((_vcpu)->cpu != -1)
+
+#define KVM_HVA_ERR_BAD		-1UL
+#define KVM_HVA_ERR_RO_BAD	-2UL
+
+#define kvm_phys_size(__kvm) ((__kvm)->arch.guest_phys_size)
+static inline bool kvm_is_error_hva(unsigned long addr)
+{
+	return IS_ERR_VALUE(addr);
+}
+
+u32 get_kvm_ipa_limit(void);
+
+/* unused, but required functions */
+static inline void kvm_arch_free_memslot(struct kvm *kvm, struct kvm_memory_slot *slot) {}
+static inline void kvm_arch_memslots_updated(struct kvm *kvm, u64 gen) {}
+static inline void kvm_arch_flush_shadow_all(struct kvm *kvm) {}
+static inline void kvm_arch_flush_shadow_memslot(struct kvm *kvm, struct kvm_memory_slot *slot) {}
+static inline void kvm_arch_vcpu_blocking(struct kvm_vcpu *vcpu) {}
+static inline void kvm_arch_vcpu_unblocking(struct kvm_vcpu *vcpu) {}
+static inline void kvm_arch_sync_events(struct kvm *kvm) {}
+static inline void kvm_arch_sched_in(struct kvm_vcpu *vcpu, int cpu) {}
+static inline void kvm_arch_mmu_enable_log_dirty_pt_masked(struct kvm *kvm,
+							   struct kvm_memory_slot *slot,
+							   gfn_t gfn_offset,
+							   unsigned long mask) {}
+
+int kvm_handle_guest_abort(struct kvm_vcpu *vcpu);
+
+/* arm64 guests do not use async-pf. Defined because Kbuild requires it as s390 kvm turns it on. */
+#define ASYNC_PF_PER_VCPU 0
+struct kvm_arch_async_pf {
+	unsigned long pfault_token;
+};
+
+#define __unsupp_async_call(fn) WARN_ONCE(true, "async not supported on kvm-arm64 %s", fn)
+
+static inline bool kvm_arch_can_dequeue_async_page_present(struct kvm_vcpu *vcpu)
+{
+	__unsupp_async_call(__func__);
+	return false;
+};
+
+static inline void kvm_arch_async_page_ready(struct kvm_vcpu *vcpu,
+					     struct kvm_async_pf *work)
+{
+	__unsupp_async_call(__func__);
+};
+
+static inline bool kvm_arch_async_page_not_present(struct kvm_vcpu *vcpu,
+						   struct kvm_async_pf *work)
+{
+	__unsupp_async_call(__func__);
+	return false;
+};
+
+static inline void kvm_arch_async_page_present(struct kvm_vcpu *vcpu,
+					       struct kvm_async_pf *work)
+{
+	__unsupp_async_call(__func__);
+};
+
+static inline void kvm_arch_async_page_present_queued(struct kvm_vcpu *vcpu)
+{
+	__unsupp_async_call(__func__);
+};
+
+#define kvm_supports_32bit_el0() false
+
+#endif /* ASM_KVM_HOST_ARM64_H */
diff --git a/arch/s390/include/asm/kvm_host_arm64_types.h b/arch/s390/include/asm/kvm_host_arm64_types.h
new file mode 100644
index 0000000000000..d112ca8c6bc1c
--- /dev/null
+++ b/arch/s390/include/asm/kvm_host_arm64_types.h
@@ -0,0 +1,118 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+#ifndef ASM_KVM_HOST_ARM64_TYPES_H
+#define ASM_KVM_HOST_ARM64_TYPES_H
+
+#include <linux/types.h>
+#include <linux/kvm_types.h>
+#include <linux/compiler_attributes.h>
+#include <asm/page.h>
+#include <asm/fault.h>
+
+struct kvm_sae_block {
+	u64	_0000[16];		/* 0x0000 */
+#define SAE_ICPTR_SPURIOUS			0x00
+#define SAE_ICPTR_VALIDITY			0x01
+#define SAE_ICPTR_HOST_ACCESS_EXCEPTION		0x02
+#define SAE_ICPTR_SYNCHRONOUS_EXCEPTION		0x03
+#define SAE_ICPTR_TIMER				0x04
+#define SAE_ICPTR_PE_INTERCOMM			0x05
+#define SAE_ICPTR_GUEST_ADDRESS_SIZE		0x06
+#define SAE_ICPTR_STOP				0x07
+#define SAE_ICPTR_SYSTEM_REGISTER		0x08
+#define SAE_ICPTR_PMU				0x09
+#define SAE_ICPTR_MAINTENANCE			0x0a
+	u8	icptr;			/* 0x0080 */
+	u8	_0081[7];		/* 0x0081 */
+	u64	scad;			/* 0x0088 */
+	u64	_0090[16];		/* 0x00b0 */
+	u32	cntp_ctl;		/* 0x0110 */
+	u32	cntv_ctl;		/* 0x0114 */
+	u8	irq_ctl;		/* 0x0118 */
+	u8	_0119[7];		/* 0x0119 */
+	struct {
+		u64	ich_hcr_el2;	/* 0x0120 */
+		u64	ich_vmcr_el2;	/* 0x0128 */
+		u64	ich_ap0r0_el2;	/* 0x0130 */
+		u64	ich_ap1r0_el2;	/* 0x0138 */
+		u64	_0140[2];	/* 0x0140 */
+		u64	ich_lrn_el2[4];	/* 0x0150 */
+		u64	_0170[4];	/* 0x0170 */
+	} ic_regs;
+	u64	_0190[12];		/* 0x0190 */
+	u64	contextidr_el1;		/* 0x01f0 */
+	u32	wip;			/* 0x01f8 */
+	u32	_01fc;			/* 0x01fc */
+#define SAE_SD_FORMAT_0                 0x00
+	u8	sdf;			/* 0x0200  */
+	u8	_0201[7];		/* 0x0201  */
+	u64	mso;			/* 0x0208  */
+	u64	msl;			/* 0x0210  */
+	u64	hbasce;			/* 0x0218  */
+	u64	_0220;			/* 0x0220  */
+	u64	gpto;			/* 0x0228  */
+	u64	ic;			/* 0x0230  */
+	u64	ec;			/* 0x0238  */
+	u64	save_area;		/* 0x0240  */
+	u64	_0248[7];		/* 0x0248  */
+	u8	_0280[6];		/* 0x0280  */
+	u16	lrcpua;			/* 0x0286  */
+	u64	pstate;			/* 0x0288  */
+	u64	pc;			/* 0x0290  */
+	u64	sp_el0;			/* 0x0298  */
+	u64	sp_el1;			/* 0x02a0  */
+	u64	_02a8;			/* 0x02a8  */
+	u64	fpcr;			/* 0x02b0  */
+	u64	fpsr;			/* 0x02b8  */
+	u16	sve_pregs[16];		/* 0x02c0  */
+	u16	sve_ffr;		/* 0x02e0  */
+	u8	_02e2[6];		/* 0x02e2  */
+	u64	_02e8[3];		/* 0x02e8  */
+
+	u64	gpr[31];		/* 0x0300  */
+	u64	_03f8;			/* 0x03f8  */
+
+	union {
+		u64	icptd[8];		/* 0x0400 */
+		/* validity-interception reason; icptr 0x01 */
+		u16 vir;			/* 0x0400 */
+		/* host access interception details; icptr 0x02 */
+		struct {
+			u64		esr_elz;	/* 0x0400 */
+			u8		_0408[6];	/* 0x0408 */
+			u16		pic;		/* 0x040e */
+			union teid	teid;		/* 0x0410 */
+			gva_t		far_elz;	/* 0x0418 */
+			gva_t		vaddr;		/* 0x0420 */
+			u64		suppl;		/* 0x0428 */
+			u8		gltl;		/* 0x0430 */
+			u8		_0431[7];	/* 0x0431 */
+			u64		_0438;		/* 0x0438 */
+		} hai;
+		/* exception-interception details; icptr 0x03 */
+		struct {
+			u64	esr_elz;		/* 0x0400 */
+			u64	_0408[2];		/* 0x0408 */
+			gva_t	far_elz;		/* 0x0418 */
+		} trap;
+		/* timer-interception reason; icptr 0x04 */
+#define SAE_IR_TIMER_ID_VIRT		BIT(6)
+#define SAE_IR_TIMER_ID_PHYS		BIT(7)
+		u8	tir;			/* 0x0400 */
+	};
+	u64	_0440[376];			/* 0x0440 */
+} __packed __aligned(PAGE_SIZE);
+static_assert(sizeof(struct kvm_sae_block) == PAGE_SIZE);
+
+struct kvm_sae_save_area {
+#define SAE_SAVE_AREA_FORMAT_0	0x00
+	u8	saf;		/* 0x0000 */
+	u8	_0001[5];	/* 0x0001 */
+#define SAE_SAS_VALID		BIT(0)
+	u16	sas;		/* 0x0006 */
+	u64	sdo;		/* 0x0008 */
+	u64	_0010[2];	/* 0x0010 */
+	u64	regs[508];	/* 0x0020 */
+} __packed __aligned(PAGE_SIZE);
+static_assert(sizeof(struct kvm_sae_save_area) == PAGE_SIZE);
+
+#endif /* ASM_KVM_HOST_ARM64_TYPES_H */
diff --git a/arch/s390/include/asm/kvm_host_s390.h b/arch/s390/include/asm/kvm_host_s390.h
new file mode 100644
index 0000000000000..c753dc816b021
--- /dev/null
+++ b/arch/s390/include/asm/kvm_host_s390.h
@@ -0,0 +1,729 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+/*
+ * definition for kernel virtual machines on s390
+ *
+ * Copyright IBM Corp. 2008, 2018
+ *
+ *    Author(s): Carsten Otte <cotte@de.ibm.com>
+ */
+
+
+#ifndef ASM_KVM_HOST_S390_H
+#define ASM_KVM_HOST_S390_H
+
+#include <linux/types.h>
+#include <linux/hrtimer.h>
+#include <linux/interrupt.h>
+#include <linux/kvm_types.h>
+#include <linux/kvm.h>
+#include <linux/seqlock.h>
+#include <linux/module.h>
+#include <linux/pci.h>
+#include <linux/mmu_notifier.h>
+#include <asm/kvm_host_types.h>
+#include <asm/debug.h>
+#include <asm/cpu.h>
+#include <asm/fpu.h>
+#include <asm/isc.h>
+#include <asm/guarded_storage.h>
+
+#define KVM_HAVE_MMU_RWLOCK
+#define KVM_MAX_VCPUS 255
+#define KVM_NO_MMIO
+
+#define KVM_INTERNAL_MEM_SLOTS 1
+
+#define KVM_S390_GUEST_HAS_PREFIX
+
+/*
+ * These seem to be used for allocating ->chip in the routing table, which we
+ * don't use. 1 is as small as we can get to reduce the needed memory. If we
+ * need to look at ->chip later on, we'll need to revisit this.
+ */
+#define KVM_NR_IRQCHIPS 1
+#define KVM_IRQCHIP_NUM_PINS 1
+#define KVM_HALT_POLL_NS_DEFAULT 50000
+
+/* s390-specific vcpu->requests bit members */
+#define KVM_REQ_ENABLE_IBS	KVM_ARCH_REQ(0)
+#define KVM_REQ_DISABLE_IBS	KVM_ARCH_REQ(1)
+#define KVM_REQ_ICPT_OPEREXC	KVM_ARCH_REQ(2)
+#define KVM_REQ_START_MIGRATION KVM_ARCH_REQ(3)
+#define KVM_REQ_STOP_MIGRATION  KVM_ARCH_REQ(4)
+#define KVM_REQ_VSIE_RESTART	KVM_ARCH_REQ(5)
+#define KVM_REQ_REFRESH_GUEST_PREFIX	\
+	KVM_ARCH_REQ_FLAGS(6, KVM_REQUEST_WAIT | KVM_REQUEST_NO_WAKEUP)
+
+struct kvm_vcpu_stat {
+	struct kvm_vcpu_stat_generic generic;
+	u64 exit_userspace;
+	u64 exit_null;
+	u64 exit_external_request;
+	u64 exit_io_request;
+	u64 exit_external_interrupt;
+	u64 exit_stop_request;
+	u64 exit_validity;
+	u64 exit_instruction;
+	u64 exit_pei;
+	u64 halt_no_poll_steal;
+	u64 instruction_lctl;
+	u64 instruction_lctlg;
+	u64 instruction_stctl;
+	u64 instruction_stctg;
+	u64 exit_program_interruption;
+	u64 exit_instr_and_program;
+	u64 exit_operation_exception;
+	u64 deliver_ckc;
+	u64 deliver_cputm;
+	u64 deliver_external_call;
+	u64 deliver_emergency_signal;
+	u64 deliver_service_signal;
+	u64 deliver_virtio;
+	u64 deliver_stop_signal;
+	u64 deliver_prefix_signal;
+	u64 deliver_restart_signal;
+	u64 deliver_program;
+	u64 deliver_io;
+	u64 deliver_machine_check;
+	u64 exit_wait_state;
+	u64 inject_ckc;
+	u64 inject_cputm;
+	u64 inject_external_call;
+	u64 inject_emergency_signal;
+	u64 inject_mchk;
+	u64 inject_pfault_init;
+	u64 inject_program;
+	u64 inject_restart;
+	u64 inject_set_prefix;
+	u64 inject_stop_signal;
+	u64 instruction_epsw;
+	u64 instruction_gs;
+	u64 instruction_io_other;
+	u64 instruction_lpsw;
+	u64 instruction_lpswe;
+	u64 instruction_lpswey;
+	u64 instruction_pfmf;
+	u64 instruction_ptff;
+	u64 instruction_sck;
+	u64 instruction_sckpf;
+	u64 instruction_stidp;
+	u64 instruction_spx;
+	u64 instruction_stpx;
+	u64 instruction_stap;
+	u64 instruction_iske;
+	u64 instruction_ri;
+	u64 instruction_rrbe;
+	u64 instruction_sske;
+	u64 instruction_ipte_interlock;
+	u64 instruction_stsi;
+	u64 instruction_stfl;
+	u64 instruction_tb;
+	u64 instruction_tpi;
+	u64 instruction_tprot;
+	u64 instruction_tsch;
+	u64 instruction_sie;
+	u64 instruction_essa;
+	u64 instruction_sthyi;
+	u64 instruction_sigp_sense;
+	u64 instruction_sigp_sense_running;
+	u64 instruction_sigp_external_call;
+	u64 instruction_sigp_emergency;
+	u64 instruction_sigp_cond_emergency;
+	u64 instruction_sigp_start;
+	u64 instruction_sigp_stop;
+	u64 instruction_sigp_stop_store_status;
+	u64 instruction_sigp_store_status;
+	u64 instruction_sigp_store_adtl_status;
+	u64 instruction_sigp_arch;
+	u64 instruction_sigp_prefix;
+	u64 instruction_sigp_restart;
+	u64 instruction_sigp_init_cpu_reset;
+	u64 instruction_sigp_cpu_reset;
+	u64 instruction_sigp_unknown;
+	u64 instruction_diagnose_10;
+	u64 instruction_diagnose_44;
+	u64 instruction_diagnose_9c;
+	u64 diag_9c_ignored;
+	u64 diag_9c_forward;
+	u64 instruction_diagnose_258;
+	u64 instruction_diagnose_308;
+	u64 instruction_diagnose_500;
+	u64 instruction_diagnose_other;
+	u64 pfault_sync;
+	u64 signal_exits;
+};
+
+/* irq types in ascend order of priorities */
+enum irq_types {
+	IRQ_PEND_SET_PREFIX = 0,
+	IRQ_PEND_RESTART,
+	IRQ_PEND_SIGP_STOP,
+	IRQ_PEND_IO_ISC_7,
+	IRQ_PEND_IO_ISC_6,
+	IRQ_PEND_IO_ISC_5,
+	IRQ_PEND_IO_ISC_4,
+	IRQ_PEND_IO_ISC_3,
+	IRQ_PEND_IO_ISC_2,
+	IRQ_PEND_IO_ISC_1,
+	IRQ_PEND_IO_ISC_0,
+	IRQ_PEND_VIRTIO,
+	IRQ_PEND_PFAULT_DONE,
+	IRQ_PEND_PFAULT_INIT,
+	IRQ_PEND_EXT_HOST,
+	IRQ_PEND_EXT_SERVICE,
+	IRQ_PEND_EXT_SERVICE_EV,
+	IRQ_PEND_EXT_TIMING,
+	IRQ_PEND_EXT_CPU_TIMER,
+	IRQ_PEND_EXT_CLOCK_COMP,
+	IRQ_PEND_EXT_EXTERNAL,
+	IRQ_PEND_EXT_EMERGENCY,
+	IRQ_PEND_EXT_MALFUNC,
+	IRQ_PEND_EXT_IRQ_KEY,
+	IRQ_PEND_MCHK_REP,
+	IRQ_PEND_PROG,
+	IRQ_PEND_SVC,
+	IRQ_PEND_MCHK_EX,
+	IRQ_PEND_COUNT
+};
+
+/* We have 2M for virtio device descriptor pages. Smallest amount of
+ * memory per page is 24 bytes (1 queue), so (2048*1024) / 24 = 87381
+ */
+#define KVM_S390_MAX_VIRTIO_IRQS 87381
+
+/*
+ * Repressible (non-floating) machine check interrupts
+ * subclass bits in MCIC
+ */
+#define MCHK_EXTD_BIT 58
+#define MCHK_DEGR_BIT 56
+#define MCHK_WARN_BIT 55
+#define MCHK_REP_MASK ((1UL << MCHK_DEGR_BIT) | \
+		       (1UL << MCHK_EXTD_BIT) | \
+		       (1UL << MCHK_WARN_BIT))
+
+/* Exigent machine check interrupts subclass bits in MCIC */
+#define MCHK_SD_BIT 63
+#define MCHK_PD_BIT 62
+#define MCHK_EX_MASK ((1UL << MCHK_SD_BIT) | (1UL << MCHK_PD_BIT))
+
+#define IRQ_PEND_EXT_MASK ((1UL << IRQ_PEND_EXT_IRQ_KEY)    | \
+			   (1UL << IRQ_PEND_EXT_CLOCK_COMP) | \
+			   (1UL << IRQ_PEND_EXT_CPU_TIMER)  | \
+			   (1UL << IRQ_PEND_EXT_MALFUNC)    | \
+			   (1UL << IRQ_PEND_EXT_EMERGENCY)  | \
+			   (1UL << IRQ_PEND_EXT_EXTERNAL)   | \
+			   (1UL << IRQ_PEND_EXT_TIMING)     | \
+			   (1UL << IRQ_PEND_EXT_HOST)       | \
+			   (1UL << IRQ_PEND_EXT_SERVICE)    | \
+			   (1UL << IRQ_PEND_EXT_SERVICE_EV) | \
+			   (1UL << IRQ_PEND_VIRTIO)         | \
+			   (1UL << IRQ_PEND_PFAULT_INIT)    | \
+			   (1UL << IRQ_PEND_PFAULT_DONE))
+
+#define IRQ_PEND_IO_MASK ((1UL << IRQ_PEND_IO_ISC_0) | \
+			  (1UL << IRQ_PEND_IO_ISC_1) | \
+			  (1UL << IRQ_PEND_IO_ISC_2) | \
+			  (1UL << IRQ_PEND_IO_ISC_3) | \
+			  (1UL << IRQ_PEND_IO_ISC_4) | \
+			  (1UL << IRQ_PEND_IO_ISC_5) | \
+			  (1UL << IRQ_PEND_IO_ISC_6) | \
+			  (1UL << IRQ_PEND_IO_ISC_7))
+
+#define IRQ_PEND_MCHK_MASK ((1UL << IRQ_PEND_MCHK_REP) | \
+			    (1UL << IRQ_PEND_MCHK_EX))
+
+#define IRQ_PEND_EXT_II_MASK ((1UL << IRQ_PEND_EXT_CPU_TIMER)  | \
+			      (1UL << IRQ_PEND_EXT_CLOCK_COMP) | \
+			      (1UL << IRQ_PEND_EXT_EMERGENCY)  | \
+			      (1UL << IRQ_PEND_EXT_EXTERNAL)   | \
+			      (1UL << IRQ_PEND_EXT_SERVICE)    | \
+			      (1UL << IRQ_PEND_EXT_SERVICE_EV))
+
+struct kvm_s390_interrupt_info {
+	struct list_head list;
+	u64	type;
+	union {
+		struct kvm_s390_io_info io;
+		struct kvm_s390_ext_info ext;
+		struct kvm_s390_pgm_info pgm;
+		struct kvm_s390_emerg_info emerg;
+		struct kvm_s390_extcall_info extcall;
+		struct kvm_s390_prefix_info prefix;
+		struct kvm_s390_stop_info stop;
+		struct kvm_s390_mchk_info mchk;
+	};
+};
+
+struct kvm_s390_irq_payload {
+	struct kvm_s390_io_info io;
+	struct kvm_s390_ext_info ext;
+	struct kvm_s390_pgm_info pgm;
+	struct kvm_s390_emerg_info emerg;
+	struct kvm_s390_extcall_info extcall;
+	struct kvm_s390_prefix_info prefix;
+	struct kvm_s390_stop_info stop;
+	struct kvm_s390_mchk_info mchk;
+};
+
+struct kvm_s390_local_interrupt {
+	spinlock_t lock;
+	DECLARE_BITMAP(sigp_emerg_pending, KVM_MAX_VCPUS);
+	struct kvm_s390_irq_payload irq;
+	unsigned long pending_irqs;
+};
+
+#define FIRQ_LIST_IO_ISC_0 0
+#define FIRQ_LIST_IO_ISC_1 1
+#define FIRQ_LIST_IO_ISC_2 2
+#define FIRQ_LIST_IO_ISC_3 3
+#define FIRQ_LIST_IO_ISC_4 4
+#define FIRQ_LIST_IO_ISC_5 5
+#define FIRQ_LIST_IO_ISC_6 6
+#define FIRQ_LIST_IO_ISC_7 7
+#define FIRQ_LIST_PFAULT   8
+#define FIRQ_LIST_VIRTIO   9
+#define FIRQ_LIST_COUNT   10
+#define FIRQ_CNTR_IO       0
+#define FIRQ_CNTR_SERVICE  1
+#define FIRQ_CNTR_VIRTIO   2
+#define FIRQ_CNTR_PFAULT   3
+#define FIRQ_MAX_COUNT     4
+
+/* mask the AIS mode for a given ISC */
+#define AIS_MODE_MASK(isc) (0x80 >> isc)
+
+#define KVM_S390_AIS_MODE_ALL    0
+#define KVM_S390_AIS_MODE_SINGLE 1
+
+struct kvm_s390_float_interrupt {
+	unsigned long pending_irqs;
+	unsigned long masked_irqs;
+	spinlock_t lock;
+	struct list_head lists[FIRQ_LIST_COUNT];
+	int counters[FIRQ_MAX_COUNT];
+	struct kvm_s390_mchk_info mchk;
+	struct kvm_s390_ext_info srv_signal;
+	int last_sleep_cpu;
+	spinlock_t ais_lock;
+	u8 simm;
+	u8 nimm;
+};
+
+struct kvm_hw_wp_info_arch {
+	unsigned long addr;
+	unsigned long phys_addr;
+	int len;
+	char *old_data;
+};
+
+struct kvm_hw_bp_info_arch {
+	unsigned long addr;
+	int len;
+};
+
+/*
+ * Only the upper 16 bits of kvm_guest_debug->control are arch specific.
+ * Further KVM_GUESTDBG flags which an be used from userspace can be found in
+ * arch/s390/include/uapi/asm/kvm.h
+ */
+#define KVM_GUESTDBG_EXIT_PENDING 0x10000000
+
+#define guestdbg_enabled(vcpu) \
+		(vcpu->guest_debug & KVM_GUESTDBG_ENABLE)
+#define guestdbg_sstep_enabled(vcpu) \
+		(vcpu->guest_debug & KVM_GUESTDBG_SINGLESTEP)
+#define guestdbg_hw_bp_enabled(vcpu) \
+		(vcpu->guest_debug & KVM_GUESTDBG_USE_HW_BP)
+#define guestdbg_exit_pending(vcpu) (guestdbg_enabled(vcpu) && \
+		(vcpu->guest_debug & KVM_GUESTDBG_EXIT_PENDING))
+
+#define KVM_GUESTDBG_VALID_MASK \
+		(KVM_GUESTDBG_ENABLE | KVM_GUESTDBG_SINGLESTEP |\
+		KVM_GUESTDBG_USE_HW_BP | KVM_GUESTDBG_EXIT_PENDING)
+
+struct kvm_guestdbg_info_arch {
+	unsigned long cr0;
+	unsigned long cr9;
+	unsigned long cr10;
+	unsigned long cr11;
+	struct kvm_hw_bp_info_arch *hw_bp_info;
+	struct kvm_hw_wp_info_arch *hw_wp_info;
+	int nr_hw_bp;
+	int nr_hw_wp;
+	unsigned long last_bp;
+};
+
+struct kvm_s390_pv_vcpu {
+	u64 handle;
+	unsigned long stor_base;
+};
+
+struct kvm_vcpu_arch {
+	struct kvm_s390_sie_block *sie_block;
+	/* if vsie is active, currently executed shadow sie control block */
+	struct kvm_s390_sie_block *vsie_block;
+	unsigned int      host_acrs[NUM_ACRS];
+	struct gs_cb      *host_gscb;
+	struct kvm_s390_local_interrupt local_int;
+	struct hrtimer    ckc_timer;
+	struct kvm_s390_pgm_info pgm;
+	struct gmap *gmap;
+	struct kvm_guestdbg_info_arch guestdbg;
+	unsigned long pfault_token;
+	unsigned long pfault_select;
+	unsigned long pfault_compare;
+	bool cputm_enabled;
+	/*
+	 * The seqcount protects updates to cputm_start and sie_block.cputm,
+	 * this way we can have non-blocking reads with consistent values.
+	 * Only the owning VCPU thread (vcpu->cpu) is allowed to change these
+	 * values and to start/stop/enable/disable cpu timer accounting.
+	 */
+	seqcount_t cputm_seqcount;
+	__u64 cputm_start;
+	bool gs_enabled;
+	bool skey_enabled;
+	/* Indicator if the access registers have been loaded from guest */
+	bool acrs_loaded;
+	struct kvm_s390_pv_vcpu pv;
+	union diag318_info diag318_info;
+	struct kvm_s390_mmu_cache *mc;
+};
+
+struct kvm_vm_stat {
+	struct kvm_vm_stat_generic generic;
+	u64 inject_io;
+	u64 io_390_adapter_map;
+	u64 io_390_adapter_unmap;
+	u64 io_390_inatomic;
+	u64 io_flic_inject_airq;
+	u64 io_set_adapter_int;
+	u64 io_390_inatomic_no_inject;
+	u64 inject_float_mchk;
+	u64 inject_pfault_done;
+	u64 inject_service_signal;
+	u64 inject_virtio;
+	u64 aen_forward;
+	u64 gmap_shadow_create;
+	u64 gmap_shadow_reuse;
+	u64 gmap_shadow_r1_entry;
+	u64 gmap_shadow_r2_entry;
+	u64 gmap_shadow_r3_entry;
+	u64 gmap_shadow_sg_entry;
+	u64 gmap_shadow_pg_entry;
+};
+
+struct kvm_arch_memory_slot {
+};
+
+struct s390_map_info {
+	struct list_head list;
+	__u64 guest_addr;
+	__u64 addr;
+	struct page *page;
+	/*
+	 * True if the page is long-term pinned. False if long-term pinning
+	 * failed and this entry exists only to preserve MAP/UNMAP symmetry.
+	 */
+	bool pinned;
+};
+
+struct s390_io_adapter {
+	unsigned int id;
+	int isc;
+	bool maskable;
+	bool masked;
+	bool swap;
+	bool suppressible;
+	spinlock_t maps_lock;
+	struct list_head maps;
+	unsigned int nr_maps;
+};
+
+#define MAX_S390_IO_ADAPTERS ((MAX_ISC + 1) * 8)
+#define MAX_S390_ADAPTER_MAPS 256
+
+/* maximum size of facilities and facility mask is 2k bytes */
+#define S390_ARCH_FAC_LIST_SIZE_BYTE (1<<11)
+#define S390_ARCH_FAC_LIST_SIZE_U64 \
+	(S390_ARCH_FAC_LIST_SIZE_BYTE / sizeof(u64))
+#define S390_ARCH_FAC_MASK_SIZE_BYTE S390_ARCH_FAC_LIST_SIZE_BYTE
+#define S390_ARCH_FAC_MASK_SIZE_U64 \
+	(S390_ARCH_FAC_MASK_SIZE_BYTE / sizeof(u64))
+
+struct kvm_s390_cpu_model {
+	/* facility mask supported by kvm & hosting machine */
+	__u64 fac_mask[S390_ARCH_FAC_MASK_SIZE_U64];
+	struct kvm_s390_vm_cpu_subfunc subfuncs;
+	/* facility list requested by guest (in dma page) */
+	__u64 *fac_list;
+	u64 cpuid;
+	unsigned short ibc;
+	/* subset of available UV-features for pv-guests enabled by user space */
+	struct kvm_s390_vm_cpu_uv_feat uv_feat_guest;
+};
+
+#define S390_ARCH_FAC_FORMAT_2 2
+struct kvm_s390_flcb2 {
+	union {
+		struct {
+			u8 reserved0[7];
+			u8 length;
+		};
+		u64 header_val;
+	};
+	u64 facilities[S390_ARCH_FAC_LIST_SIZE_U64];
+};
+
+typedef int (*crypto_hook)(struct kvm_vcpu *vcpu);
+
+struct kvm_s390_crypto {
+	struct kvm_s390_crypto_cb *crycb;
+	struct rw_semaphore pqap_hook_rwsem;
+	crypto_hook *pqap_hook;
+	__u32 crycbd;
+	__u8 aes_kw;
+	__u8 dea_kw;
+	__u8 apie;
+};
+
+#define APCB0_MASK_SIZE 1
+struct kvm_s390_apcb0 {
+	__u64 apm[APCB0_MASK_SIZE];		/* 0x0000 */
+	__u64 aqm[APCB0_MASK_SIZE];		/* 0x0008 */
+	__u64 adm[APCB0_MASK_SIZE];		/* 0x0010 */
+	__u64 reserved18;			/* 0x0018 */
+};
+
+#define APCB1_MASK_SIZE 4
+struct kvm_s390_apcb1 {
+	__u64 apm[APCB1_MASK_SIZE];		/* 0x0000 */
+	__u64 aqm[APCB1_MASK_SIZE];		/* 0x0020 */
+	__u64 adm[APCB1_MASK_SIZE];		/* 0x0040 */
+	__u64 reserved60[4];			/* 0x0060 */
+};
+
+struct kvm_s390_crypto_cb {
+	struct kvm_s390_apcb0 apcb0;		/* 0x0000 */
+	__u8   reserved20[0x0048 - 0x0020];	/* 0x0020 */
+	__u8   dea_wrapping_key_mask[24];	/* 0x0048 */
+	__u8   aes_wrapping_key_mask[32];	/* 0x0060 */
+	struct kvm_s390_apcb1 apcb1;		/* 0x0080 */
+};
+
+struct kvm_s390_gisa {
+	union {
+		struct { /* common to all formats */
+			u32 next_alert;
+			u8  ipm;
+			u8  reserved01[2];
+			u8  iam;
+		};
+		struct { /* format 0 */
+			u32 next_alert;
+			u8  ipm;
+			u8  reserved01;
+			u8  : 6;
+			u8  g : 1;
+			u8  c : 1;
+			u8  iam;
+			u8  reserved02[4];
+			u32 airq_count;
+		} g0;
+		struct { /* format 1 */
+			u32 next_alert;
+			u8  ipm;
+			u8  simm;
+			u8  nimm;
+			u8  iam;
+			u8  aism[8];
+			u8  : 6;
+			u8  g : 1;
+			u8  c : 1;
+			u8  reserved03[11];
+			u32 airq_count;
+		} g1;
+		struct {
+			u64 word[4];
+		} u64;
+	};
+};
+
+struct kvm_s390_gib {
+	u32 alert_list_origin;
+	u32 reserved01;
+	u8:5;
+	u8  nisc:3;
+	u8  reserved03[3];
+	u32 reserved04[5];
+};
+
+/*
+ * sie_page2 has to be allocated as DMA because fac_list, crycb and
+ * gisa need 31bit addresses in the sie control block.
+ */
+struct sie_page2 {
+	__u64 fac_list[S390_ARCH_FAC_LIST_SIZE_U64];	/* 0x0000 */
+	struct kvm_s390_crypto_cb crycb;		/* 0x0800 */
+	struct kvm_s390_gisa gisa;			/* 0x0900 */
+	struct kvm *kvm;				/* 0x0920 */
+	u8 reserved928[0x1000 - 0x928];			/* 0x0928 */
+};
+
+struct vsie_page;
+
+struct kvm_s390_vsie {
+	struct mutex mutex;
+	struct radix_tree_root addr_to_page;
+	int page_count;
+	int next;
+	struct vsie_page *pages[KVM_MAX_VCPUS];
+};
+
+struct kvm_s390_gisa_iam {
+	u8 mask;
+	spinlock_t ref_lock;
+	u32 ref_count[MAX_ISC + 1];
+};
+
+struct kvm_s390_gisa_interrupt {
+	struct kvm_s390_gisa *origin;
+	struct kvm_s390_gisa_iam alert;
+	struct hrtimer timer;
+	u64 expires;
+	DECLARE_BITMAP(kicked_mask, KVM_MAX_VCPUS);
+};
+
+struct kvm_s390_pv {
+	u64 handle;
+	u64 guest_len;
+	unsigned long stor_base;
+	void *stor_var;
+	bool dumping;
+	void *set_aside;
+	struct list_head need_cleanup;
+	struct mmu_notifier mmu_notifier;
+	/* Protects against concurrent import-like operations */
+	struct mutex import_lock;
+};
+
+struct kvm_s390_mmu_cache;
+
+struct kvm_arch {
+	struct esca_block *sca;
+	debug_info_t *dbf;
+	struct kvm_s390_float_interrupt float_int;
+	struct kvm_device *flic;
+	struct gmap *gmap;
+	unsigned long mem_limit;
+	int css_support;
+	int use_irqchip;
+	int use_cmma;
+	int use_pfmfi;
+	int use_skf;
+	int use_zpci_interp;
+	int user_cpu_state_ctrl;
+	int user_sigp;
+	int user_stsi;
+	int user_instr0;
+	int user_operexec;
+	int allow_vsie_esamode;
+	struct s390_io_adapter *adapters[MAX_S390_IO_ADAPTERS];
+	wait_queue_head_t ipte_wq;
+	int ipte_lock_count;
+	struct mutex ipte_mutex;
+	spinlock_t start_stop_lock;
+	struct sie_page2 *sie_page2;
+	struct kvm_s390_cpu_model model;
+	struct kvm_s390_crypto crypto;
+	struct kvm_s390_vsie vsie;
+	u8 epdx;
+	u64 epoch;
+	int migration_mode;
+	atomic64_t cmma_dirty_pages;
+	/* subset of available cpu features enabled by user space */
+	DECLARE_BITMAP(cpu_feat, KVM_S390_VM_CPU_FEAT_NR_BITS);
+	/* indexed by vcpu_idx */
+	DECLARE_BITMAP(idle_mask, KVM_MAX_VCPUS);
+	struct kvm_s390_gisa_interrupt gisa_int;
+	struct kvm_s390_pv pv;
+	struct list_head kzdev_list;
+	spinlock_t kzdev_list_lock;
+	struct kvm_s390_mmu_cache *mc;
+};
+
+#define KVM_HVA_ERR_BAD		(-1UL)
+#define KVM_HVA_ERR_RO_BAD	(-2UL)
+
+static inline bool kvm_is_error_hva(unsigned long addr)
+{
+	return IS_ERR_VALUE(addr);
+}
+
+#define ASYNC_PF_PER_VCPU	64
+struct kvm_arch_async_pf {
+	unsigned long pfault_token;
+};
+
+bool kvm_arch_can_dequeue_async_page_present(struct kvm_vcpu *vcpu);
+
+void kvm_arch_async_page_ready(struct kvm_vcpu *vcpu,
+			       struct kvm_async_pf *work);
+
+bool kvm_arch_async_page_not_present(struct kvm_vcpu *vcpu,
+				     struct kvm_async_pf *work);
+
+void kvm_arch_async_page_present(struct kvm_vcpu *vcpu,
+				 struct kvm_async_pf *work);
+
+static inline void kvm_arch_async_page_present_queued(struct kvm_vcpu *vcpu) {}
+
+void kvm_arch_crypto_clear_masks(struct kvm *kvm);
+void kvm_arch_crypto_set_masks(struct kvm *kvm, unsigned long *apm,
+			       unsigned long *aqm, unsigned long *adm);
+
+#define SIE64_RETURN_NORMAL	0
+#define SIE64_RETURN_MCCK	1
+
+int __sie64a(phys_addr_t sie_block_phys, struct kvm_s390_sie_block *sie_block, u64 *rsa,
+	     unsigned long gasce);
+
+static inline int sie64a(struct kvm_s390_sie_block *sie_block, u64 *rsa, unsigned long gasce)
+{
+	return __sie64a(virt_to_phys(sie_block), sie_block, rsa, gasce);
+}
+
+extern char sie_exit;
+
+bool kvm_s390_pv_is_protected(struct kvm *kvm);
+bool kvm_s390_pv_cpu_is_protected(struct kvm_vcpu *vcpu);
+
+extern int kvm_s390_enter_exit_sie(struct kvm_s390_sie_block *scb,
+				   u64 *gprs, unsigned long gasce);
+
+extern int kvm_s390_gisc_register(struct kvm *kvm, u32 gisc);
+extern int kvm_s390_gisc_unregister(struct kvm *kvm, u32 gisc);
+
+bool kvm_s390_is_gpa_in_memslot(struct kvm *kvm, gpa_t gpa);
+
+static inline void kvm_arch_free_memslot(struct kvm *kvm,
+					 struct kvm_memory_slot *slot) {}
+static inline void kvm_arch_memslots_updated(struct kvm *kvm, u64 gen) {}
+static inline void kvm_arch_flush_shadow_all(struct kvm *kvm) {}
+static inline void kvm_arch_flush_shadow_memslot(struct kvm *kvm,
+		struct kvm_memory_slot *slot) {}
+static inline void kvm_arch_vcpu_blocking(struct kvm_vcpu *vcpu) {}
+static inline void kvm_arch_vcpu_unblocking(struct kvm_vcpu *vcpu) {}
+
+#define __KVM_HAVE_ARCH_VM_FREE
+void kvm_arch_free_vm(struct kvm *kvm);
+
+struct zpci_kvm_hook {
+	int (*kvm_register)(void *opaque, struct kvm *kvm);
+	void (*kvm_unregister)(void *opaque);
+};
+
+extern struct zpci_kvm_hook zpci_kvm_hook;
+
+#endif /* ASM_KVM_HOST_S390_H */
diff --git a/arch/s390/include/asm/kvm_host_s390_types.h b/arch/s390/include/asm/kvm_host_s390_types.h
new file mode 100644
index 0000000000000..5cf746095bfd1
--- /dev/null
+++ b/arch/s390/include/asm/kvm_host_s390_types.h
@@ -0,0 +1,347 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+
+#ifndef _ASM_KVM_HOST_S390_TYPES_H
+#define _ASM_KVM_HOST_S390_TYPES_H
+
+#include <linux/atomic.h>
+#include <linux/types.h>
+
+#define KVM_S390_BSCA_CPU_SLOTS 64
+#define KVM_S390_ESCA_CPU_SLOTS 248
+
+#define SIGP_CTRL_C		0x80
+#define SIGP_CTRL_SCN_MASK	0x3f
+
+union bsca_sigp_ctrl {
+	__u8 value;
+	struct {
+		__u8 c : 1;
+		__u8 r : 1;
+		__u8 scn : 6;
+	};
+};
+
+union esca_sigp_ctrl {
+	__u16 value;
+	struct {
+		__u8 c : 1;
+		__u8 reserved: 7;
+		__u8 scn;
+	};
+};
+
+struct esca_entry {
+	union esca_sigp_ctrl sigp_ctrl;
+	__u16	reserved1[3];
+	__u64	sda;
+	__u64	reserved2[6];
+};
+
+struct bsca_entry {
+	__u8	reserved0;
+	union bsca_sigp_ctrl	sigp_ctrl;
+	__u16	reserved[3];
+	__u64	sda;
+	__u64	reserved2[2];
+};
+
+union ipte_control {
+	unsigned long val;
+	struct {
+		unsigned long k  : 1;
+		unsigned long kh : 31;
+		unsigned long kg : 32;
+	};
+};
+
+/*
+ * Utility is defined as two bytes but having it four bytes wide
+ * generates more efficient code. Since the following bytes are
+ * reserved this makes no functional difference.
+ */
+union sca_utility {
+	__u32 val;
+	struct {
+		__u32 mtcr : 1;
+		__u32	   : 31;
+	};
+};
+
+struct bsca_block {
+	union ipte_control ipte_control;
+	__u64	reserved[5];
+	__u64	mcn;
+	union sca_utility utility;
+	__u8	reserved2[4];
+	struct bsca_entry cpu[KVM_S390_BSCA_CPU_SLOTS];
+};
+
+struct esca_block {
+	union ipte_control ipte_control;
+	__u64	reserved1[6];
+	union sca_utility utility;
+	__u8	reserved2[4];
+	__u64	mcn[4];
+	__u64	reserved3[20];
+	struct esca_entry cpu[KVM_S390_ESCA_CPU_SLOTS];
+};
+
+/*
+ * This struct is used to store some machine check info from lowcore
+ * for machine checks that happen while the guest is running.
+ * This info in host's lowcore might be overwritten by a second machine
+ * check from host when host is in the machine check's high-level handling.
+ * The size is 24 bytes.
+ */
+struct mcck_volatile_info {
+	__u64 mcic;
+	__u64 failing_storage_address;
+	__u32 ext_damage_code;
+	__u32 reserved;
+};
+
+#define CR0_INITIAL_MASK (CR0_UNUSED_56 | CR0_INTERRUPT_KEY_SUBMASK | \
+			  CR0_MEASUREMENT_ALERT_SUBMASK)
+#define CR14_INITIAL_MASK (CR14_UNUSED_32 | CR14_UNUSED_33 | \
+			   CR14_EXTERNAL_DAMAGE_SUBMASK)
+
+#define SIDAD_SIZE_MASK		0xff
+#define sida_addr(sie_block) phys_to_virt((sie_block)->sidad & PAGE_MASK)
+#define sida_size(sie_block) \
+	((((sie_block)->sidad & SIDAD_SIZE_MASK) + 1) * PAGE_SIZE)
+
+#define CPUSTAT_STOPPED    0x80000000
+#define CPUSTAT_WAIT	   0x10000000
+#define CPUSTAT_ECALL_PEND 0x08000000
+#define CPUSTAT_STOP_INT   0x04000000
+#define CPUSTAT_IO_INT	   0x02000000
+#define CPUSTAT_EXT_INT    0x01000000
+#define CPUSTAT_RUNNING    0x00800000
+#define CPUSTAT_RETAINED   0x00400000
+#define CPUSTAT_TIMING_SUB 0x00020000
+#define CPUSTAT_SIE_SUB    0x00010000
+#define CPUSTAT_RRF	   0x00008000
+#define CPUSTAT_SLSV	   0x00004000
+#define CPUSTAT_SLSR	   0x00002000
+#define CPUSTAT_ZARCH	   0x00000800
+#define CPUSTAT_MCDS	   0x00000100
+#define CPUSTAT_KSS	   0x00000200
+#define CPUSTAT_SM	   0x00000080
+#define CPUSTAT_IBS	   0x00000040
+#define CPUSTAT_GED2	   0x00000010
+#define CPUSTAT_G	   0x00000008
+#define CPUSTAT_GED	   0x00000004
+#define CPUSTAT_J	   0x00000002
+#define CPUSTAT_P	   0x00000001
+
+struct kvm_s390_sie_block {
+	atomic_t cpuflags;		/* 0x0000 */
+	__u32 : 1;			/* 0x0004 */
+	__u32 prefix : 19;
+	__u32 ibc : 12;
+	__u8	reserved08[4];		/* 0x0008 */
+#define PROG_IN_SIE (1<<0)
+	__u32	prog0c;			/* 0x000c */
+	union {
+		__u8	reserved10[16];		/* 0x0010 */
+		struct {
+			__u64	pv_handle_cpu;
+			__u64	pv_handle_config;
+		};
+	};
+#define PROG_BLOCK_SIE	(1<<0)
+#define PROG_REQUEST	(1<<1)
+	atomic_t prog20;		/* 0x0020 */
+	__u8	reserved24[4];		/* 0x0024 */
+	__u64	cputm;			/* 0x0028 */
+	__u64	ckc;			/* 0x0030 */
+	__u64	epoch;			/* 0x0038 */
+	__u32	svcc;			/* 0x0040 */
+#define LCTL_CR0	0x8000
+#define LCTL_CR6	0x0200
+#define LCTL_CR9	0x0040
+#define LCTL_CR10	0x0020
+#define LCTL_CR11	0x0010
+#define LCTL_CR14	0x0002
+	__u16	lctl;			/* 0x0044 */
+	__s16	icpua;			/* 0x0046 */
+#define ICTL_OPEREXC	0x80000000
+#define ICTL_PINT	0x20000000
+#define ICTL_LPSW	0x00400000
+#define ICTL_STCTL	0x00040000
+#define ICTL_ISKE	0x00004000
+#define ICTL_SSKE	0x00002000
+#define ICTL_RRBE	0x00001000
+#define ICTL_TPROT	0x00000200
+	__u32	ictl;			/* 0x0048 */
+#define ECA_CEI		0x80000000
+#define ECA_IB		0x40000000
+#define ECA_SIGPI	0x10000000
+#define ECA_MVPGI	0x01000000
+#define ECA_AIV		0x00200000
+#define ECA_VX		0x00020000
+#define ECA_PROTEXCI	0x00002000
+#define ECA_APIE	0x00000008
+#define ECA_SII		0x00000001
+	__u32	eca;			/* 0x004c */
+#define ICPT_INST	0x04
+#define ICPT_PROGI	0x08
+#define ICPT_INSTPROGI	0x0C
+#define ICPT_EXTREQ	0x10
+#define ICPT_EXTINT	0x14
+#define ICPT_IOREQ	0x18
+#define ICPT_WAIT	0x1c
+#define ICPT_VALIDITY	0x20
+#define ICPT_STOP	0x28
+#define ICPT_OPEREXC	0x2C
+#define ICPT_PARTEXEC	0x38
+#define ICPT_IOINST	0x40
+#define ICPT_KSS	0x5c
+#define ICPT_MCHKREQ	0x60
+#define ICPT_INT_ENABLE	0x64
+#define ICPT_PV_INSTR	0x68
+#define ICPT_PV_NOTIFY	0x6c
+#define ICPT_PV_PREF	0x70
+	__u8	icptcode;		/* 0x0050 */
+	__u8	icptstatus;		/* 0x0051 */
+	__u16	ihcpu;			/* 0x0052 */
+	__u8	reserved54;		/* 0x0054 */
+#define IICTL_CODE_NONE		 0x00
+#define IICTL_CODE_MCHK		 0x01
+#define IICTL_CODE_EXT		 0x02
+#define IICTL_CODE_IO		 0x03
+#define IICTL_CODE_RESTART	 0x04
+#define IICTL_CODE_SPECIFICATION 0x10
+#define IICTL_CODE_OPERAND	 0x11
+	__u8	iictl;			/* 0x0055 */
+	__u16	ipa;			/* 0x0056 */
+	__u32	ipb;			/* 0x0058 */
+	__u32	scaoh;			/* 0x005c */
+#define FPF_BPBC	0x20
+	__u8	fpf;			/* 0x0060 */
+#define ECB_GS		0x40
+#define ECB_TE		0x10
+#define ECB_SPECI	0x08
+#define ECB_SRSI	0x04
+#define ECB_HOSTPROTINT	0x02
+#define ECB_PTF		0x01
+	__u8	ecb;			/* 0x0061 */
+#define ECB2_CMMA	0x80
+#define ECB2_IEP	0x20
+#define ECB2_PFMFI	0x08
+#define ECB2_ESCA	0x04
+#define ECB2_ZPCI_LSI	0x02
+	__u8	ecb2;			/* 0x0062 */
+#define ECB3_AISI	0x20
+#define ECB3_AISII	0x10
+#define ECB3_DEA 0x08
+#define ECB3_AES 0x04
+#define ECB3_RI  0x01
+	__u8	ecb3;			/* 0x0063 */
+#define ESCA_SCAOL_MASK ~0x3fU
+	__u32	scaol;			/* 0x0064 */
+	__u8	sdf;			/* 0x0068 */
+	__u8	epdx;			/* 0x0069 */
+	__u8	cpnc;			/* 0x006a */
+	__u8	reserved6b;		/* 0x006b */
+	__u32	todpr;			/* 0x006c */
+#define GISA_FORMAT1 0x00000001
+	__u32	gd;			/* 0x0070 */
+	__u8	reserved74[12];		/* 0x0074 */
+	__u64	mso;			/* 0x0080 */
+	__u64	msl;			/* 0x0088 */
+	psw_t	gpsw;			/* 0x0090 */
+	__u64	gg14;			/* 0x00a0 */
+	__u64	gg15;			/* 0x00a8 */
+	__u8	reservedb0[8];		/* 0x00b0 */
+#define HPID_KVM	0x4
+#define HPID_VSIE	0x5
+	__u8	hpid;			/* 0x00b8 */
+	__u8	reservedb9[7];		/* 0x00b9 */
+	union {
+		struct {
+			__u32	eiparams;	/* 0x00c0 */
+			__u16	extcpuaddr;	/* 0x00c4 */
+			__u16	eic;		/* 0x00c6 */
+		};
+		__u64	mcic;			/* 0x00c0 */
+	} __packed;
+	__u32	reservedc8;		/* 0x00c8 */
+	union {
+		struct {
+			__u16	pgmilc;		/* 0x00cc */
+			__u16	iprcc;		/* 0x00ce */
+		};
+		__u32	edc;			/* 0x00cc */
+	} __packed;
+	union {
+		struct {
+			__u32	dxc;		/* 0x00d0 */
+			__u16	mcn;		/* 0x00d4 */
+			__u8	perc;		/* 0x00d6 */
+			__u8	peratmid;	/* 0x00d7 */
+		};
+		__u64	faddr;			/* 0x00d0 */
+	} __packed;
+	__u64	peraddr;		/* 0x00d8 */
+	__u8	eai;			/* 0x00e0 */
+	__u8	peraid;			/* 0x00e1 */
+	__u8	oai;			/* 0x00e2 */
+	__u8	armid;			/* 0x00e3 */
+	__u8	reservede4[4];		/* 0x00e4 */
+	union {
+		__u64	tecmc;		/* 0x00e8 */
+		struct {
+			__u16	subchannel_id;	/* 0x00e8 */
+			__u16	subchannel_nr;	/* 0x00ea */
+			__u32	io_int_parm;	/* 0x00ec */
+			__u32	io_int_word;	/* 0x00f0 */
+		};
+	} __packed;
+	__u8	reservedf4[8];		/* 0x00f4 */
+#define CRYCB_FORMAT_MASK 0x00000003
+#define CRYCB_FORMAT0 0x00000000
+#define CRYCB_FORMAT1 0x00000001
+#define CRYCB_FORMAT2 0x00000003
+	__u32	crycbd;			/* 0x00fc */
+	__u64	gcr[16];		/* 0x0100 */
+	union {
+		__u64	gbea;		/* 0x0180 */
+		__u64	sidad;
+	};
+	__u8	reserved188[8];		/* 0x0188 */
+	__u64	sdnxo;			/* 0x0190 */
+	__u8	reserved198[8];		/* 0x0198 */
+	__u32	fac;			/* 0x01a0 */
+	__u8	reserved1a4[20];	/* 0x01a4 */
+	__u64	cbrlo;			/* 0x01b8 */
+	__u8	reserved1c0[8];		/* 0x01c0 */
+#define ECD_HOSTREGMGMT	0x20000000
+#define ECD_MEF		0x08000000
+#define ECD_ETOKENF	0x02000000
+#define ECD_ECC		0x00200000
+#define ECD_HMAC	0x00004000
+	__u32	ecd;			/* 0x01c8 */
+	__u8	reserved1cc[18];	/* 0x01cc */
+	__u64	pp;			/* 0x01de */
+	__u8	reserved1e6[2];		/* 0x01e6 */
+	__u64	itdba;			/* 0x01e8 */
+	__u64	riccbd;			/* 0x01f0 */
+	__u64	gvrd;			/* 0x01f8 */
+} __packed __aligned(512);
+
+struct kvm_s390_itdb {
+	__u8	data[256];
+};
+
+struct sie_page {
+	struct kvm_s390_sie_block sie_block;
+	struct mcck_volatile_info mcck_info;	/* 0x0200 */
+	__u8 reserved218[360];		/* 0x0218 */
+	__u64 pv_grregs[16];		/* 0x0380 */
+	__u8 reserved400[512];		/* 0x0400 */
+	struct kvm_s390_itdb itdb;	/* 0x0600 */
+	__u8 reserved700[2304];		/* 0x0700 */
+};
+
+#endif /* _ASM_KVM_HOST_S390_TYPES_H */
diff --git a/arch/s390/include/asm/kvm_host_types.h b/arch/s390/include/asm/kvm_host_types.h
index 3f50942bdfe6c..d308739ebcf57 100644
--- a/arch/s390/include/asm/kvm_host_types.h
+++ b/arch/s390/include/asm/kvm_host_types.h
@@ -1,347 +1,12 @@
 /* SPDX-License-Identifier: GPL-2.0 */
 
-#ifndef _ASM_KVM_HOST_TYPES_H
-#define _ASM_KVM_HOST_TYPES_H
+#ifndef ASM_KVM_HOST_TYPES_H
+#define ASM_KVM_HOST_TYPES_H
 
-#include <linux/atomic.h>
-#include <linux/types.h>
+#ifdef KVM_S390_ARM64
+#include <asm/kvm_host_arm64_types.h>
+#else
+#include <asm/kvm_host_s390_types.h>
+#endif /* KVM_S390_ARM64 */
 
-#define KVM_S390_BSCA_CPU_SLOTS 64
-#define KVM_S390_ESCA_CPU_SLOTS 248
-
-#define SIGP_CTRL_C		0x80
-#define SIGP_CTRL_SCN_MASK	0x3f
-
-union bsca_sigp_ctrl {
-	__u8 value;
-	struct {
-		__u8 c : 1;
-		__u8 r : 1;
-		__u8 scn : 6;
-	};
-};
-
-union esca_sigp_ctrl {
-	__u16 value;
-	struct {
-		__u8 c : 1;
-		__u8 reserved: 7;
-		__u8 scn;
-	};
-};
-
-struct esca_entry {
-	union esca_sigp_ctrl sigp_ctrl;
-	__u16	reserved1[3];
-	__u64	sda;
-	__u64	reserved2[6];
-};
-
-struct bsca_entry {
-	__u8	reserved0;
-	union bsca_sigp_ctrl	sigp_ctrl;
-	__u16	reserved[3];
-	__u64	sda;
-	__u64	reserved2[2];
-};
-
-union ipte_control {
-	unsigned long val;
-	struct {
-		unsigned long k  : 1;
-		unsigned long kh : 31;
-		unsigned long kg : 32;
-	};
-};
-
-/*
- * Utility is defined as two bytes but having it four bytes wide
- * generates more efficient code. Since the following bytes are
- * reserved this makes no functional difference.
- */
-union sca_utility {
-	__u32 val;
-	struct {
-		__u32 mtcr : 1;
-		__u32	   : 31;
-	};
-};
-
-struct bsca_block {
-	union ipte_control ipte_control;
-	__u64	reserved[5];
-	__u64	mcn;
-	union sca_utility utility;
-	__u8	reserved2[4];
-	struct bsca_entry cpu[KVM_S390_BSCA_CPU_SLOTS];
-};
-
-struct esca_block {
-	union ipte_control ipte_control;
-	__u64	reserved1[6];
-	union sca_utility utility;
-	__u8	reserved2[4];
-	__u64	mcn[4];
-	__u64	reserved3[20];
-	struct esca_entry cpu[KVM_S390_ESCA_CPU_SLOTS];
-};
-
-/*
- * This struct is used to store some machine check info from lowcore
- * for machine checks that happen while the guest is running.
- * This info in host's lowcore might be overwritten by a second machine
- * check from host when host is in the machine check's high-level handling.
- * The size is 24 bytes.
- */
-struct mcck_volatile_info {
-	__u64 mcic;
-	__u64 failing_storage_address;
-	__u32 ext_damage_code;
-	__u32 reserved;
-};
-
-#define CR0_INITIAL_MASK (CR0_UNUSED_56 | CR0_INTERRUPT_KEY_SUBMASK | \
-			  CR0_MEASUREMENT_ALERT_SUBMASK)
-#define CR14_INITIAL_MASK (CR14_UNUSED_32 | CR14_UNUSED_33 | \
-			   CR14_EXTERNAL_DAMAGE_SUBMASK)
-
-#define SIDAD_SIZE_MASK		0xff
-#define sida_addr(sie_block) phys_to_virt((sie_block)->sidad & PAGE_MASK)
-#define sida_size(sie_block) \
-	((((sie_block)->sidad & SIDAD_SIZE_MASK) + 1) * PAGE_SIZE)
-
-#define CPUSTAT_STOPPED    0x80000000
-#define CPUSTAT_WAIT	   0x10000000
-#define CPUSTAT_ECALL_PEND 0x08000000
-#define CPUSTAT_STOP_INT   0x04000000
-#define CPUSTAT_IO_INT	   0x02000000
-#define CPUSTAT_EXT_INT    0x01000000
-#define CPUSTAT_RUNNING    0x00800000
-#define CPUSTAT_RETAINED   0x00400000
-#define CPUSTAT_TIMING_SUB 0x00020000
-#define CPUSTAT_SIE_SUB    0x00010000
-#define CPUSTAT_RRF	   0x00008000
-#define CPUSTAT_SLSV	   0x00004000
-#define CPUSTAT_SLSR	   0x00002000
-#define CPUSTAT_ZARCH	   0x00000800
-#define CPUSTAT_MCDS	   0x00000100
-#define CPUSTAT_KSS	   0x00000200
-#define CPUSTAT_SM	   0x00000080
-#define CPUSTAT_IBS	   0x00000040
-#define CPUSTAT_GED2	   0x00000010
-#define CPUSTAT_G	   0x00000008
-#define CPUSTAT_GED	   0x00000004
-#define CPUSTAT_J	   0x00000002
-#define CPUSTAT_P	   0x00000001
-
-struct kvm_s390_sie_block {
-	atomic_t cpuflags;		/* 0x0000 */
-	__u32 : 1;			/* 0x0004 */
-	__u32 prefix : 19;
-	__u32 ibc : 12;
-	__u8	reserved08[4];		/* 0x0008 */
-#define PROG_IN_SIE (1<<0)
-	__u32	prog0c;			/* 0x000c */
-	union {
-		__u8	reserved10[16];		/* 0x0010 */
-		struct {
-			__u64	pv_handle_cpu;
-			__u64	pv_handle_config;
-		};
-	};
-#define PROG_BLOCK_SIE	(1<<0)
-#define PROG_REQUEST	(1<<1)
-	atomic_t prog20;		/* 0x0020 */
-	__u8	reserved24[4];		/* 0x0024 */
-	__u64	cputm;			/* 0x0028 */
-	__u64	ckc;			/* 0x0030 */
-	__u64	epoch;			/* 0x0038 */
-	__u32	svcc;			/* 0x0040 */
-#define LCTL_CR0	0x8000
-#define LCTL_CR6	0x0200
-#define LCTL_CR9	0x0040
-#define LCTL_CR10	0x0020
-#define LCTL_CR11	0x0010
-#define LCTL_CR14	0x0002
-	__u16	lctl;			/* 0x0044 */
-	__s16	icpua;			/* 0x0046 */
-#define ICTL_OPEREXC	0x80000000
-#define ICTL_PINT	0x20000000
-#define ICTL_LPSW	0x00400000
-#define ICTL_STCTL	0x00040000
-#define ICTL_ISKE	0x00004000
-#define ICTL_SSKE	0x00002000
-#define ICTL_RRBE	0x00001000
-#define ICTL_TPROT	0x00000200
-	__u32	ictl;			/* 0x0048 */
-#define ECA_CEI		0x80000000
-#define ECA_IB		0x40000000
-#define ECA_SIGPI	0x10000000
-#define ECA_MVPGI	0x01000000
-#define ECA_AIV		0x00200000
-#define ECA_VX		0x00020000
-#define ECA_PROTEXCI	0x00002000
-#define ECA_APIE	0x00000008
-#define ECA_SII		0x00000001
-	__u32	eca;			/* 0x004c */
-#define ICPT_INST	0x04
-#define ICPT_PROGI	0x08
-#define ICPT_INSTPROGI	0x0C
-#define ICPT_EXTREQ	0x10
-#define ICPT_EXTINT	0x14
-#define ICPT_IOREQ	0x18
-#define ICPT_WAIT	0x1c
-#define ICPT_VALIDITY	0x20
-#define ICPT_STOP	0x28
-#define ICPT_OPEREXC	0x2C
-#define ICPT_PARTEXEC	0x38
-#define ICPT_IOINST	0x40
-#define ICPT_KSS	0x5c
-#define ICPT_MCHKREQ	0x60
-#define ICPT_INT_ENABLE	0x64
-#define ICPT_PV_INSTR	0x68
-#define ICPT_PV_NOTIFY	0x6c
-#define ICPT_PV_PREF	0x70
-	__u8	icptcode;		/* 0x0050 */
-	__u8	icptstatus;		/* 0x0051 */
-	__u16	ihcpu;			/* 0x0052 */
-	__u8	reserved54;		/* 0x0054 */
-#define IICTL_CODE_NONE		 0x00
-#define IICTL_CODE_MCHK		 0x01
-#define IICTL_CODE_EXT		 0x02
-#define IICTL_CODE_IO		 0x03
-#define IICTL_CODE_RESTART	 0x04
-#define IICTL_CODE_SPECIFICATION 0x10
-#define IICTL_CODE_OPERAND	 0x11
-	__u8	iictl;			/* 0x0055 */
-	__u16	ipa;			/* 0x0056 */
-	__u32	ipb;			/* 0x0058 */
-	__u32	scaoh;			/* 0x005c */
-#define FPF_BPBC	0x20
-	__u8	fpf;			/* 0x0060 */
-#define ECB_GS		0x40
-#define ECB_TE		0x10
-#define ECB_SPECI	0x08
-#define ECB_SRSI	0x04
-#define ECB_HOSTPROTINT	0x02
-#define ECB_PTF		0x01
-	__u8	ecb;			/* 0x0061 */
-#define ECB2_CMMA	0x80
-#define ECB2_IEP	0x20
-#define ECB2_PFMFI	0x08
-#define ECB2_ESCA	0x04
-#define ECB2_ZPCI_LSI	0x02
-	__u8	ecb2;			/* 0x0062 */
-#define ECB3_AISI	0x20
-#define ECB3_AISII	0x10
-#define ECB3_DEA 0x08
-#define ECB3_AES 0x04
-#define ECB3_RI  0x01
-	__u8	ecb3;			/* 0x0063 */
-#define ESCA_SCAOL_MASK ~0x3fU
-	__u32	scaol;			/* 0x0064 */
-	__u8	sdf;			/* 0x0068 */
-	__u8	epdx;			/* 0x0069 */
-	__u8	cpnc;			/* 0x006a */
-	__u8	reserved6b;		/* 0x006b */
-	__u32	todpr;			/* 0x006c */
-#define GISA_FORMAT1 0x00000001
-	__u32	gd;			/* 0x0070 */
-	__u8	reserved74[12];		/* 0x0074 */
-	__u64	mso;			/* 0x0080 */
-	__u64	msl;			/* 0x0088 */
-	psw_t	gpsw;			/* 0x0090 */
-	__u64	gg14;			/* 0x00a0 */
-	__u64	gg15;			/* 0x00a8 */
-	__u8	reservedb0[8];		/* 0x00b0 */
-#define HPID_KVM	0x4
-#define HPID_VSIE	0x5
-	__u8	hpid;			/* 0x00b8 */
-	__u8	reservedb9[7];		/* 0x00b9 */
-	union {
-		struct {
-			__u32	eiparams;	/* 0x00c0 */
-			__u16	extcpuaddr;	/* 0x00c4 */
-			__u16	eic;		/* 0x00c6 */
-		};
-		__u64	mcic;			/* 0x00c0 */
-	} __packed;
-	__u32	reservedc8;		/* 0x00c8 */
-	union {
-		struct {
-			__u16	pgmilc;		/* 0x00cc */
-			__u16	iprcc;		/* 0x00ce */
-		};
-		__u32	edc;			/* 0x00cc */
-	} __packed;
-	union {
-		struct {
-			__u32	dxc;		/* 0x00d0 */
-			__u16	mcn;		/* 0x00d4 */
-			__u8	perc;		/* 0x00d6 */
-			__u8	peratmid;	/* 0x00d7 */
-		};
-		__u64	faddr;			/* 0x00d0 */
-	} __packed;
-	__u64	peraddr;		/* 0x00d8 */
-	__u8	eai;			/* 0x00e0 */
-	__u8	peraid;			/* 0x00e1 */
-	__u8	oai;			/* 0x00e2 */
-	__u8	armid;			/* 0x00e3 */
-	__u8	reservede4[4];		/* 0x00e4 */
-	union {
-		__u64	tecmc;		/* 0x00e8 */
-		struct {
-			__u16	subchannel_id;	/* 0x00e8 */
-			__u16	subchannel_nr;	/* 0x00ea */
-			__u32	io_int_parm;	/* 0x00ec */
-			__u32	io_int_word;	/* 0x00f0 */
-		};
-	} __packed;
-	__u8	reservedf4[8];		/* 0x00f4 */
-#define CRYCB_FORMAT_MASK 0x00000003
-#define CRYCB_FORMAT0 0x00000000
-#define CRYCB_FORMAT1 0x00000001
-#define CRYCB_FORMAT2 0x00000003
-	__u32	crycbd;			/* 0x00fc */
-	__u64	gcr[16];		/* 0x0100 */
-	union {
-		__u64	gbea;		/* 0x0180 */
-		__u64	sidad;
-	};
-	__u8	reserved188[8];		/* 0x0188 */
-	__u64	sdnxo;			/* 0x0190 */
-	__u8	reserved198[8];		/* 0x0198 */
-	__u32	fac;			/* 0x01a0 */
-	__u8	reserved1a4[20];	/* 0x01a4 */
-	__u64	cbrlo;			/* 0x01b8 */
-	__u8	reserved1c0[8];		/* 0x01c0 */
-#define ECD_HOSTREGMGMT	0x20000000
-#define ECD_MEF		0x08000000
-#define ECD_ETOKENF	0x02000000
-#define ECD_ECC		0x00200000
-#define ECD_HMAC	0x00004000
-	__u32	ecd;			/* 0x01c8 */
-	__u8	reserved1cc[18];	/* 0x01cc */
-	__u64	pp;			/* 0x01de */
-	__u8	reserved1e6[2];		/* 0x01e6 */
-	__u64	itdba;			/* 0x01e8 */
-	__u64	riccbd;			/* 0x01f0 */
-	__u64	gvrd;			/* 0x01f8 */
-} __packed __aligned(512);
-
-struct kvm_s390_itdb {
-	__u8	data[256];
-};
-
-struct sie_page {
-	struct kvm_s390_sie_block sie_block;
-	struct mcck_volatile_info mcck_info;	/* 0x0200 */
-	__u8 reserved218[360];		/* 0x0218 */
-	__u64 pv_grregs[16];		/* 0x0380 */
-	__u8 reserved400[512];		/* 0x0400 */
-	struct kvm_s390_itdb itdb;	/* 0x0600 */
-	__u8 reserved700[2304];		/* 0x0700 */
-};
-
-#endif /* _ASM_KVM_HOST_TYPES_H */
+#endif /* ASM_KVM_HOST_TYPES_H */
diff --git a/arch/s390/include/asm/sae.h b/arch/s390/include/asm/sae.h
new file mode 100644
index 0000000000000..fe010a1a77297
--- /dev/null
+++ b/arch/s390/include/asm/sae.h
@@ -0,0 +1,56 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+#ifndef __ASM_S390_SAE_H
+#define __ASM_S390_SAE_H
+
+#include "linux/linkage.h"
+#include <linux/types.h>
+
+/* defined in arch/s390/kernel/entry.S */
+asmlinkage int __sae64a(phys_addr_t sae_block_phys);
+
+#ifndef __ASSEMBLER__
+#include <linux/io.h>
+#include <asm/kvm_host_arm64_types.h>
+
+/**
+ * __sae64a() - Start Arm Execution
+ */
+static inline void sae64a(struct kvm_sae_block *sae_block)
+{
+	__sae64a(virt_to_phys(sae_block));
+}
+
+/**
+ * stiasrm() - STore and Invalidate Arm System Register Multiple
+ * @save_area: Pointer to SAE save area
+ *
+ * Store the guest system register to the save area.
+ * The values in the guest are not valid anymore..
+ */
+static __always_inline void stiasrm(struct kvm_sae_save_area *save_area)
+{
+	asm volatile(
+		"	.insn	rre,0xb9a70000,%[r1],0\n"
+		: "+m"(*save_area)
+		: [r1] "a"(save_area)
+	);
+}
+
+/**
+ * lasrm() - Load Arm System Register Multiple
+ *
+ * @save_area: Pointer to SAE save area
+ *
+ * Load the system registers from save_area into the guest.
+ */
+static __always_inline void lasrm(struct kvm_sae_save_area *save_area)
+{
+	asm volatile(
+		"	.insn	rre,0xb9a60000,%[r1],0\n"
+		:
+		: "m"(*save_area), [r1] "a"(save_area)
+	);
+}
+
+#endif /* !__ASSEMBLER__ */
+#endif /* __ASM_S390_SAE_H */
diff --git a/arch/s390/include/asm/sclp.h b/arch/s390/include/asm/sclp.h
index f2d4905580543..f669569cf78df 100644
--- a/arch/s390/include/asm/sclp.h
+++ b/arch/s390/include/asm/sclp.h
@@ -53,7 +53,9 @@ struct sclp_core_entry {
 	u8 siif : 1;
 	u8 sigpif : 1;
 	u8 : 3;
-	u8 reserved2[3];
+	u8 aef: 1;
+	u8 : 7;
+	u8 reserved2[2];
 	u8 : 2;
 	u8 ib : 1;
 	u8 cei : 1;
@@ -106,6 +108,7 @@ struct sclp_info {
 	unsigned char has_aeni : 1;
 	unsigned char has_aisi : 1;
 	unsigned char has_astfleie2 : 1;
+	unsigned char has_aef : 1;
 	unsigned int ibc;
 	unsigned int mtid;
 	unsigned int mtid_cp;
diff --git a/arch/s390/include/asm/stacktrace.h b/arch/s390/include/asm/stacktrace.h
index ac3606c3babe4..2d332d7c81459 100644
--- a/arch/s390/include/asm/stacktrace.h
+++ b/arch/s390/include/asm/stacktrace.h
@@ -59,6 +59,7 @@ static inline bool on_stack(struct stack_info *info,
 struct stack_frame {
 	union {
 		unsigned long empty[9];
+		/* SIE stack frame */
 		struct {
 			unsigned long sie_control_block;
 			unsigned long sie_savearea;
@@ -68,6 +69,10 @@ struct stack_frame {
 			unsigned long sie_guest_asce;
 			unsigned long sie_irq;
 		};
+		/* SAE stack frame */
+		struct {
+			unsigned long sae_bear;
+		};
 	};
 	unsigned long gprs[10];
 	unsigned long back_chain;
diff --git a/arch/s390/kernel/asm-offsets.c b/arch/s390/kernel/asm-offsets.c
index f6dd2b67dcee7..f9f9c2246074f 100644
--- a/arch/s390/kernel/asm-offsets.c
+++ b/arch/s390/kernel/asm-offsets.c
@@ -70,6 +70,7 @@ int main(void)
 	OFFSET(__SF_SIE_CONTROL_PHYS, stack_frame, sie_control_block_phys);
 	OFFSET(__SF_SIE_GUEST_ASCE, stack_frame, sie_guest_asce);
 	OFFSET(__SF_SIE_IRQ, stack_frame, sie_irq);
+	OFFSET(__SF_SAE_BEAR, stack_frame, sae_bear);
 	DEFINE(STACK_FRAME_OVERHEAD, sizeof(struct stack_frame));
 	BLANK();
 	OFFSET(__SFUSER_BACKCHAIN, stack_frame_user, back_chain);
diff --git a/arch/s390/kernel/early.c b/arch/s390/kernel/early.c
index b27239c03d799..464f8918d447f 100644
--- a/arch/s390/kernel/early.c
+++ b/arch/s390/kernel/early.c
@@ -57,7 +57,7 @@ decompressor_handled_param(cmma);
 decompressor_handled_param(relocate_lowcore);
 decompressor_handled_param(bootdebug);
 __decompressor_handled_param(debug_alternative, debug-alternative);
-#if IS_ENABLED(CONFIG_KVM)
+#if IS_ENABLED(CONFIG_KVM_S390)
 decompressor_handled_param(prot_virt);
 #endif
 
diff --git a/arch/s390/kernel/entry.S b/arch/s390/kernel/entry.S
index 79a45efae23d0..4e5b499b3540f 100644
--- a/arch/s390/kernel/entry.S
+++ b/arch/s390/kernel/entry.S
@@ -113,7 +113,7 @@ _LPP_OFFSET	= __LC_LPP
 		    "jnz .+8; .insn rrf,0xb2e80000,0,0,13,0", ALT_SPEC(82)
 	.endm
 
-#if IS_ENABLED(CONFIG_KVM)
+#if IS_ENABLED(CONFIG_KVM_S390)
 	.macro SIEEXIT sie_control,lowcore
 	lg	%r9,\sie_control			# get control block pointer
 	ni	__SIE_PROG0C+3(%r9),0xfe		# no longer in SIE
@@ -184,7 +184,7 @@ EXPORT_SYMBOL(__WARN_trap)
 
 #endif /* CONFIG_BUG && CONFIG_CC_HAS_ASM_IMMEDIATE_STRINGS */
 
-#if IS_ENABLED(CONFIG_KVM)
+#if IS_ENABLED(CONFIG_KVM_S390)
 /*
  * __sie64a calling convention:
  * %r2 pointer to sie control block phys
@@ -244,6 +244,28 @@ EXPORT_SYMBOL(__sie64a)
 EXPORT_SYMBOL(sie_exit)
 #endif
 
+#if IS_ENABLED(CONFIG_KVM_ARM64)
+/*
+ * __sae64a calling convention:
+ * %r2 pointer to sae control block physical address
+ */
+SYM_FUNC_START(__sae64a)
+	stmg	%r6,%r14,__SF_GPRS(%r15)	# store kernel registers
+	STBEAR	__SF_SAE_BEAR(%r15)		# save breaking event address register
+	.insn	rre,0xb9a50000,%r2,0		# Start Arm Execution
+	LBEAR	__SF_SAE_BEAR(%r15)		# restore breaking event address register
+	lmg	%r6,%r14,__SF_GPRS(%r15)	# restore kernel registers
+	xgr	%r0,%r0				# clear guest registers to
+	xgr	%r1,%r1				# prevent speculative use
+	xgr	%r3,%r3
+	xgr	%r2,%r2
+	xgr	%r4,%r4
+	xgr	%r5,%r5
+	BR_EX	%r14
+SYM_FUNC_END(__sae64a)
+EXPORT_SYMBOL(__sae64a)
+#endif
+
 /*
  * SVC interrupt handler routine. System calls are synchronous events and
  * are entered with interrupts disabled.
@@ -315,7 +337,7 @@ SYM_CODE_START(pgm_check_handler)
 	xgr	%r10,%r10
 	tmhh	%r8,0x0001		# coming from user space?
 	jo	3f			# -> fault in user space
-#if IS_ENABLED(CONFIG_KVM)
+#if IS_ENABLED(CONFIG_KVM_S390)
 	lg	%r11,__LC_CURRENT(%r13)
 	tm	__TI_sie(%r11),0xff
 	jz	1f
@@ -397,7 +419,7 @@ SYM_CODE_START(\name)
 	lmg	%r8,%r9,\lc_old_psw(%r13)
 	tmhh	%r8,0x0001			# interrupting from user ?
 	jnz	1f
-#if IS_ENABLED(CONFIG_KVM)
+#if IS_ENABLED(CONFIG_KVM_S390)
 	lg	%r10,__LC_CURRENT(%r13)
 	tm	__TI_sie(%r10),0xff
 	jz	0f
@@ -475,7 +497,7 @@ SYM_CODE_START(mcck_int_handler)
 	jnz	.Lmcck_user
 	TSTMSK	__LC_MCCK_CODE(%r13),MCCK_CODE_PSW_IA_VALID
 	jno	.Lmcck_panic
-#if IS_ENABLED(CONFIG_KVM)
+#if IS_ENABLED(CONFIG_KVM_S390)
 	lg	%r10,__LC_CURRENT(%r13)
 	tm	__TI_sie(%r10),0xff
 	jz	.Lmcck_user
diff --git a/arch/s390/kernel/perf_event.c b/arch/s390/kernel/perf_event.c
index 606750bae508d..6441746b8e720 100644
--- a/arch/s390/kernel/perf_event.c
+++ b/arch/s390/kernel/perf_event.c
@@ -37,7 +37,7 @@ static bool is_in_guest(struct pt_regs *regs)
 {
 	if (user_mode(regs))
 		return false;
-#if IS_ENABLED(CONFIG_KVM)
+#if IS_ENABLED(CONFIG_KVM_S390)
 	return instruction_pointer(regs) == (unsigned long) &sie_exit;
 #else
 	return false;
diff --git a/arch/s390/kernel/processor.c b/arch/s390/kernel/processor.c
index e33a3eccda568..6da55a158027e 100644
--- a/arch/s390/kernel/processor.c
+++ b/arch/s390/kernel/processor.c
@@ -150,6 +150,7 @@ static void show_cpu_summary(struct seq_file *m, void *v)
 		[HWCAP_NR_NNPA]		= "nnpa",
 		[HWCAP_NR_PCI_MIO]	= "pcimio",
 		[HWCAP_NR_SIE]		= "sie",
+		[HWCAP_NR_SAE]		= "sae",
 	};
 	int i, cpu;
 
@@ -254,6 +255,8 @@ static int __init setup_hwcaps(void)
 	/* virtualization support */
 	if (sclp.has_sief2)
 		elf_hwcap |= HWCAP_SIE;
+	if (sclp.has_aef)
+		elf_hwcap |= HWCAP_SAE;
 
 	return 0;
 }
diff --git a/arch/s390/kvm/Kconfig b/arch/s390/kvm/Kconfig
index 8d3ee17a1bcbc..bbae58aa8bc46 100644
--- a/arch/s390/kvm/Kconfig
+++ b/arch/s390/kvm/Kconfig
@@ -17,40 +17,9 @@ menuconfig VIRTUALIZATION
 if VIRTUALIZATION
 
 config KVM
-	def_tristate y
-	prompt "Kernel-based Virtual Machine (KVM) support"
-	select HAVE_KVM_CPU_RELAX_INTERCEPT
-	select KVM_ASYNC_PF
-	select KVM_ASYNC_PF_SYNC
-	select KVM_COMMON
-	select HAVE_KVM_IRQCHIP
-	select HAVE_KVM_IRQ_ROUTING
-	select HAVE_KVM_INVALID_WAKEUPS
-	select HAVE_KVM_NO_POLL
-	select KVM_VFIO
-	select VIRT_XFER_TO_GUEST_WORK
-	select KVM_MMU_LOCKLESS_AGING
-	select KVM_GENERIC_PRE_FAULT_MEMORY
-	help
-	  Support hosting paravirtualized guest machines using the SIE
-	  virtualization capability on the mainframe. This should work
-	  on any 64bit machine.
-
-	  This module provides access to the hardware capabilities through
-	  a character device node named /dev/kvm.
-
-	  To compile this as a module, choose M here: the module
-	  will be called kvm.
-
-	  If unsure, say N.
-
-config KVM_S390_UCONTROL
-	bool "Userspace controlled virtual machines"
-	depends on KVM
-	help
-	  Allow CAP_SYS_ADMIN users to create KVM virtual machines that are
-	  controlled by userspace.
+	tristate
 
-	  If unsure, say N.
+source "arch/s390/kvm/s390/Kconfig"
+source "arch/s390/kvm/arm64/Kconfig"
 
 endif # VIRTUALIZATION
diff --git a/arch/s390/kvm/Makefile b/arch/s390/kvm/Makefile
index dac9d53b23d8b..38bdd7c9b42d2 100644
--- a/arch/s390/kvm/Makefile
+++ b/arch/s390/kvm/Makefile
@@ -3,13 +3,5 @@
 #
 # Copyright IBM Corp. 2008
 
-include $(srctree)/virt/kvm/Makefile.kvm
-
-ccflags-y := -Ivirt/kvm -Iarch/s390/kvm
-
-kvm-y += kvm-s390.o intercept.o interrupt.o priv.o sigp.o
-kvm-y += diag.o gaccess.o guestdbg.o vsie.o pv.o
-kvm-y += dat.o gmap.o faultin.o
-
-kvm-$(CONFIG_VFIO_PCI_ZDEV_KVM) += pci.o
-obj-$(CONFIG_KVM) += kvm.o
+obj-$(CONFIG_KVM_S390) += s390/
+obj-$(CONFIG_KVM_ARM64) += arm64/
diff --git a/arch/s390/kvm/arm64/.gitignore b/arch/s390/kvm/arm64/.gitignore
new file mode 100644
index 0000000000000..bd9d90694676d
--- /dev/null
+++ b/arch/s390/kvm/arm64/.gitignore
@@ -0,0 +1,2 @@
+# SPDX-License-Identifier: GPL-2.0-only
+generated/*
diff --git a/arch/s390/kvm/arm64/Kconfig b/arch/s390/kvm/arm64/Kconfig
new file mode 100644
index 0000000000000..15de7c52c8618
--- /dev/null
+++ b/arch/s390/kvm/arm64/Kconfig
@@ -0,0 +1,22 @@
+# SPDX-License-Identifier: GPL-2.0
+
+config KVM_ARM64
+	def_tristate y
+	prompt "Kernel-based Virtual Machine (KVM) support for arm64 guests"
+	depends on HAS_IOMEM
+	select KVM
+	select GUEST_PERF_EVENTS if PERF_EVENTS
+	select HAVE_KVM_CPU_RELAX_INTERCEPT
+	select HAVE_KVM_IRQCHIP
+	select HAVE_KVM_MSI
+	select HAVE_KVM_VCPU_RUN_PID_CHANGE
+	select IRQ_BYPASS_MANAGER
+	select KVM_COMMON
+	select KVM_MMIO
+	select KVM_VFIO
+	select SCHED_INFO
+	select XARRAY_MULTI
+	help
+	  Support hosting virtualized arm64 guest machines on s390 host machines.
+
+	  If unsure, say N.
diff --git a/arch/s390/kvm/arm64/Makefile b/arch/s390/kvm/arm64/Makefile
new file mode 100644
index 0000000000000..a102c35664cae
--- /dev/null
+++ b/arch/s390/kvm/arm64/Makefile
@@ -0,0 +1,91 @@
+# SPDX-License-Identifier: GPL-2.0
+
+KVM := ../../../../virt/kvm
+include $(srctree)/virt/kvm/Makefile.kvm
+KVM_MANAGES_S390_GUEST = n
+include $(srctree)/arch/s390/kvm/gmap/Makefile
+include $(src)/Makefile.gen
+
+ccflags-y += -I $(src) -I $(objtree)/$(obj) -I$(srctree)/arch/s390/kvm/gmap -DKVM_S390_ARM64
+
+kvm-arm64-obj := \
+	arm.o \
+	guest.o \
+	handle_exit.o \
+	inject_fault.o \
+	mmu.o \
+	mmio.o \
+	reset.o \
+
+kvm-arm64-obj += $(patsubst %.o,%-arm64.o,$(kvm-y))
+
+targets += $(kvm-arm64-obj)
+
+$(obj)/%-arm64.o: $(src)/%.c FORCE
+	@mkdir -p $(dir $@)
+	$(call if_changed_rule,cc_o_c)
+
+ifeq ($(CONFIG_KVM_ARM64),m)
+
+kvm-arm64-y = $(kvm-arm64-obj)
+
+else ifeq ($(CONFIG_KVM_ARM64),y)
+
+KVM_ARM64_GEN_DIR := $(objtree)/arch/${SRCARCH}/include/generated/asm
+KVM_ARM64_MODNAME_H := $(KVM_ARM64_GEN_DIR)/kvm_arm64_modname.h
+ccflags-y += -include $(KVM_ARM64_MODNAME_H)
+
+targets += $(KVM_ARM64_MODNAME_H)
+
+quiet_cmd_kvm_arm64_modname_h = GEN     $@
+      cmd_kvm_arm64_modname_h = { \
+	echo '/* Automatically generated; do not edit. */'; \
+	echo '\#ifndef _KVM_ARM64_MODNAME_H'; \
+	echo '\#define _KVM_ARM64_MODNAME_H'; \
+	echo '\#undef KBUILD_MODNAME'; \
+	echo '\#define KBUILD_MODNAME "kvm_arm64"'; \
+	echo '\#endif /* _KVM_ARM64_MODNAME_H */'; \
+	} > $@
+
+$(addprefix $(obj)/,$(kvm-arm64-obj)): $(KVM_ARM64_MODNAME_H)
+
+$(KVM_ARM64_MODNAME_H):
+	@mkdir -p $(KVM_ARM64_GEN_DIR)
+	$(call cmd,kvm_arm64_modname_h)
+
+prereq-o-cmd = $(foreach o, $(filter %.o, $^), $(dir $(o)).$(notdir $(o)).cmd)
+cmd_gen_symversions_o = \
+	grep --no-filename "^\#SYMVER" $(prereq-o-cmd) >> $(dot-target).cmd || true
+
+define rule_ld_o_o
+	$(call cmd_and_savecmd,ld)
+	$(call cmd,gen_symversions_o)
+endef
+
+LDFLAGS_kvm-unnamespaced.o := -r --whole-archive
+$(obj)/kvm-unnamespaced.o: $(addprefix $(obj)/,$(kvm-arm64-obj)) FORCE
+	$(call if_changed_rule,ld_o_o)
+
+quiet_cmd_nm_filter = NMFLTR  $@
+	cmd_nm_filter = $(NM) -jU $< | sort -u > $@
+
+$(obj)/kvm_symbol_list: $(obj)/kvm-unnamespaced.o FORCE
+	$(call if_changed,nm_filter)
+
+define rule_oc_o_o
+	$(call cmd_and_savecmd,objcopy)
+	$(call cmd,gen_objtooldep)
+	$(call cmd,gen_symversions_o)
+endef
+
+OBJCOPYFLAGS_kvm-namespaced.o := -O default --localize-symbols=$(obj)/kvm_symbol_list
+$(obj)/kvm-namespaced.o: $(obj)/kvm-unnamespaced.o $(obj)/kvm_symbol_list FORCE
+	$(call if_changed_rule,oc_o_o)
+
+kvm-arm64-y = kvm-namespaced.o
+
+targets += kvm-unnamespaced.o kvm_symbol_list kvm-namespaced.o
+
+endif
+
+obj-$(CONFIG_KVM_ARM64) += kvm-arm64.o
diff --git a/arch/s390/kvm/arm64/Makefile.gen b/arch/s390/kvm/arm64/Makefile.gen
new file mode 100644
index 0000000000000..13a6ba44dce8c
--- /dev/null
+++ b/arch/s390/kvm/arm64/Makefile.gen
@@ -0,0 +1,30 @@
+# SPDX-License-Identifier: GPL-2.0
+#
+# Extracts ARM64 marked sections to .inc files that are included by main source
+# files
+
+# List of ARM64 C files to extract
+ARM64_CFILES := \
+	arm.c \
+	guest.c \
+	reset.c \
+	handle_exit.c \
+	mmio.c \
+
+quiet_cmd_extract_inc = GEN     $@
+      cmd_extract_inc = mkdir -p $(dir $@); \
+                        $(AWK) -f $(src)/copy-arm64c.awk $< > $@ || \
+                        { echo "Error: No or unbalanced ARM64_S390_COMMON markers in $<" >&2; rm -f $@; exit 1; }
+
+$(obj)/generated/%.inc: $(srctree)/arch/arm64/kvm/%.c $(src)/copy-arm64c.awk FORCE
+	$(call if_changed,extract_inc)
+
+ARM64_INC_FILES := $(foreach cfile,$(ARM64_CFILES),generated/$(basename $(cfile)).inc)
+
+targets += $(ARM64_INC_FILES)
+clean-files += generated/*.inc
+
+$(addprefix $(obj)/,$(kvm-arm64-obj)): $(addprefix $(obj)/,$(ARM64_INC_FILES))
+
+$(foreach cfile,$(basename $(ARM64_CFILES)),\
+	$(eval $(obj)/$(cfile).o: $(obj)/generated/$(cfile).inc))
diff --git a/arch/s390/kvm/arm64/arm.c b/arch/s390/kvm/arm64/arm.c
new file mode 100644
index 0000000000000..7b65e2f4ab3ed
--- /dev/null
+++ b/arch/s390/kvm/arm64/arm.c
@@ -0,0 +1,744 @@
+// SPDX-License-Identifier: GPL-2.0
+
+#define KMSG_COMPONENT "kvm-s390-arm64"
+#define pr_fmt(fmt) KMSG_COMPONENT ": " fmt
+
+#include <linux/miscdevice.h>
+#include <linux/kvm.h>
+#include <linux/kvm_types.h>
+#include <linux/kvm_host.h>
+#include "linux/cleanup.h"
+#include <linux/fpu.h>
+
+#include <asm/access-regs.h>
+
+#include <arm64/kvm_emulate.h>
+#include <arm64/sysreg.h>
+
+#include <gmap.h>
+#include <kvm_mmu.h>
+
+#include "arm.h"
+#include "handle_exit.h"
+#include "reset.h"
+
+#define CREATE_TRACE_POINTS
+#include "trace.h"
+
+static unsigned long system_supported_vcpu_features(void);
+
+#define __INCL_GEN_ARM_FILE
+#include "generated/arm.inc"
+#undef __INCL_GEN_ARM_FILE
+
+#define KVM_PHYS_SHIFT (40)
+
+int kvm_vm_ioctl_check_extension(struct kvm *kvm, long ext)
+{
+	int ret;
+
+	switch (ext) {
+	case KVM_CAP_NR_VCPUS:
+	case KVM_CAP_MAX_VCPUS:
+	case KVM_CAP_MAX_VCPU_ID:
+		ret = KVM_MAX_VCPUS;
+		break;
+	case KVM_CAP_ARM_VM_IPA_SIZE:
+		ret = get_kvm_ipa_limit();
+		break;
+	case KVM_CAP_IOEVENTFD:
+		ret = 1;
+		break;
+	default:
+		ret = 0;
+	}
+
+	return ret;
+}
+
+static u64 kvm_max_guest_address(void)
+{
+	u64 max_addr;
+
+	if (sclp.hamax == U64_MAX)
+		max_addr = TASK_SIZE_MAX;
+	else
+		max_addr = min_t(u64, TASK_SIZE_MAX, sclp.hamax);
+	return ALIGN_DOWN(max_addr + 1, 1 << 30) - 1;
+}
+
+static int kvm_gmap_init(struct kvm *kvm)
+{
+	struct crst_table *table;
+
+	kvm->arch.gmap = gmap_new(kvm, gpa_to_gfn(kvm->arch.guest_phys_size));
+
+	if (!kvm->arch.gmap)
+		return -ENOMEM;
+
+	/* arm64 (on s390) do not have pfault */
+	clear_bit(GMAP_FLAG_PFAULT_ENABLED, &kvm->arch.gmap->flags);
+	set_bit(GMAP_FLAG_ALLOW_HPAGE_1M, &kvm->arch.gmap->flags);
+
+	table = dereference_asce(kvm->arch.gmap->asce);
+	crst_table_init((void *)table, _CRSTE_HOLE(table->crstes[0].h.tt).val);
+
+	return 0;
+}
+
+static int kvm_vm_type_ipa_size_shift(unsigned long type)
+{
+	int phys_shift;
+
+	phys_shift = KVM_VM_TYPE_ARM_IPA_SIZE(type);
+	if (phys_shift) {
+		if (phys_shift > get_kvm_ipa_limit() ||
+		    phys_shift < ARM64_MIN_PARANGE_BITS)
+			return -EINVAL;
+	} else {
+		phys_shift = KVM_PHYS_SHIFT;
+		if (phys_shift > get_kvm_ipa_limit()) {
+			pr_warn_once("%s using unsupported default IPA limit\n",
+				     current->comm);
+			return -EINVAL;
+		}
+	}
+
+	return phys_shift;
+}
+
+int kvm_arch_init_vm(struct kvm *kvm, unsigned long type)
+{
+	char debug_name[32];
+	int ret;
+
+	if (type & ~KVM_VM_TYPE_ARM_IPA_SIZE_MASK)
+		return -EINVAL;
+
+	ret = kvm_vm_type_ipa_size_shift(type);
+	if (ret < 0)
+		return ret;
+	kvm->arch.guest_phys_size = 1UL << ret;
+
+	mutex_init(&kvm->arch.config_lock);
+	bitmap_zero(kvm->arch.vcpu_features, KVM_VCPU_MAX_FEATURES);
+
+	snprintf(debug_name, sizeof(debug_name), "kvm-arm64-%u-%u",
+		 current->pid, get_random_u32());
+	kvm->arch.dbf = debug_register(debug_name, 32, 1, 7 * sizeof(long));
+	if (!kvm->arch.dbf)
+		return -ENOMEM;
+	debug_register_view(kvm->arch.dbf, &debug_sprintf_view);
+
+	ret = kvm_gmap_init(kvm);
+	if (ret)
+		goto out_err;
+	kvm->arch.mem_limit = kvm_max_guest_address();
+
+	VM_EVENT(kvm, 3, "vm created with type %lu", type);
+	return 0;
+
+out_err:
+	debug_unregister(kvm->arch.dbf);
+
+	return ret;
+}
+
+vm_fault_t kvm_arch_vcpu_fault(struct kvm_vcpu *vcpu, struct vm_fault *vmf)
+{
+	return VM_FAULT_SIGBUS;
+}
+
+long kvm_arch_dev_ioctl(struct file *filp,
+			unsigned int ioctl, unsigned long arg)
+{
+	return -EINVAL;
+}
+
+void kvm_arch_destroy_vm(struct kvm *kvm)
+{
+	kvm_destroy_vcpus(kvm);
+	debug_unregister(kvm->arch.dbf);
+	kvm->arch.gmap = gmap_put(kvm->arch.gmap);
+}
+
+u32 get_kvm_ipa_limit(void)
+{
+	return fls64(kvm_max_guest_address() + 1) - 1;
+}
+
+int kvm_arch_vcpu_precreate(struct kvm *kvm, unsigned int id)
+{
+	return 0;
+}
+
+int kvm_arch_vcpu_create(struct kvm_vcpu *vcpu)
+{
+	struct kvm_sae_block *sae_block = &vcpu->arch.sae_block;
+
+	spin_lock_init(&vcpu->arch.mp_state_lock);
+
+	/* Force users to call KVM_ARM_VCPU_INIT */
+	vcpu_clear_flag(vcpu, VCPU_INITIALIZED);
+
+	vcpu->arch.mc = kvm_s390_new_mmu_cache();
+	if (!vcpu->arch.mc)
+		return -ENOMEM;
+
+	sae_block->hbasce = vcpu->kvm->arch.gmap->asce.val;
+	sae_block->mso = 0L;
+	sae_block->msl = kvm_max_guest_address();
+
+	VM_EVENT(vcpu->kvm, 3,
+		 "create cpu %d at 0x%p, sae block at 0x%p, satellite at 0x%p",
+		 vcpu->vcpu_id, vcpu, &vcpu->arch.sae_block,
+		 &vcpu->arch.save_area);
+	return 0;
+}
+
+void kvm_arch_vcpu_postcreate(struct kvm_vcpu *vcpu)
+{
+}
+
+void kvm_arch_vcpu_destroy(struct kvm_vcpu *vcpu)
+{
+	kvm_s390_free_mmu_cache(vcpu->arch.mc);
+
+	VCPU_EVENT(vcpu, 3, "%s", "free cpu");
+}
+
+void kvm_arch_vcpu_load(struct kvm_vcpu *vcpu, int cpu)
+{
+	save_access_regs(&vcpu->arch.host_acrs[0]);
+	vcpu->cpu = cpu;
+
+	lasrm(&vcpu->arch.save_area);
+}
+
+void kvm_arch_vcpu_put(struct kvm_vcpu *vcpu)
+{
+	stiasrm(&vcpu->arch.save_area);
+
+	vcpu->cpu = -1;
+	restore_access_regs(&vcpu->arch.host_acrs[0]);
+}
+
+int kvm_arch_vcpu_ioctl_get_mpstate(struct kvm_vcpu *vcpu,
+				    struct kvm_mp_state *mp_state)
+{
+	*mp_state = READ_ONCE(vcpu->arch.mp_state);
+	return 0;
+}
+
+int kvm_arch_vcpu_ioctl_set_mpstate(struct kvm_vcpu *vcpu,
+				    struct kvm_mp_state *mp_state)
+{
+	return -EINVAL;
+}
+
+int kvm_arch_vcpu_runnable(struct kvm_vcpu *vcpu)
+{
+	return 0;
+}
+
+static unsigned long system_supported_vcpu_features(void)
+{
+	unsigned long features = KVM_S390_ARM64_IMPL_FEATURES;
+
+	return features;
+}
+
+bool kvm_arch_vcpu_in_kernel(struct kvm_vcpu *vcpu)
+{
+	return vcpu_mode_priv(vcpu);
+}
+
+int kvm_arch_vcpu_run_pid_change(struct kvm_vcpu *vcpu)
+{
+	struct kvm *kvm = vcpu->kvm;
+
+	if (!kvm_vcpu_initialized(vcpu))
+		return -ENOEXEC;
+
+	if (!kvm_arm_vcpu_is_finalized(vcpu))
+		return -EPERM;
+
+	if (likely(READ_ONCE(vcpu->pid)))
+		return 0;
+
+	scoped_guard(mutex, &kvm->arch.config_lock)
+		set_bit(KVM_ARCH_FLAG_HAS_RAN_ONCE, &kvm->arch.flags);
+
+	return 0;
+}
+
+/**
+ * check_vcpu_requests - check and handle pending vCPU requests
+ * @vcpu:	the VCPU pointer
+ *
+ * Return: 1 if we should enter the guest
+ *	   0 if we should exit to userspace
+ *	   < 0 if we should exit to userspace, where the return value indicates
+ *	   an error
+ */
+static int check_vcpu_requests(struct kvm_vcpu *vcpu)
+{
+	if (kvm_request_pending(vcpu)) {
+		if (kvm_check_request(KVM_REQ_VCPU_RESET, vcpu))
+			kvm_reset_vcpu(vcpu);
+		/*
+		 * Clear IRQ_PENDING requests that were made to guarantee
+		 * that a VCPU sees new virtual interrupts.
+		 */
+		kvm_check_request(KVM_REQ_IRQ_PENDING, vcpu);
+	}
+
+	return 1;
+}
+
+static int kvm_vcpu_initialize(struct kvm_vcpu *vcpu,
+			       const struct kvm_vcpu_init *init)
+{
+	unsigned long features = init->features[0];
+	struct kvm *kvm = vcpu->kvm;
+
+	scoped_guard(mutex, &kvm->arch.config_lock) {
+		if (test_bit(KVM_ARCH_FLAG_VCPU_FEATURES_CONFIGURED,
+			     &kvm->arch.flags) &&
+		    kvm_vcpu_init_changed(vcpu, init))
+			return -EINVAL;
+
+		bitmap_copy(kvm->arch.vcpu_features, &features,
+			    KVM_VCPU_MAX_FEATURES);
+
+		kvm_reset_vcpu(vcpu);
+
+		set_bit(KVM_ARCH_FLAG_VCPU_FEATURES_CONFIGURED,
+			&kvm->arch.flags);
+		vcpu_set_flag(vcpu, VCPU_INITIALIZED);
+	}
+
+	return 0;
+}
+
+static int kvm_vcpu_set_target(struct kvm_vcpu *vcpu,
+			       const struct kvm_vcpu_init *init)
+{
+	int ret;
+
+	if (init->target != KVM_ARM_TARGET_GENERIC_V8)
+		return -EINVAL;
+
+	ret = kvm_vcpu_init_check_features(vcpu, init);
+	if (ret)
+		return ret;
+
+	if (!kvm_vcpu_initialized(vcpu))
+		return kvm_vcpu_initialize(vcpu, init);
+
+	if (kvm_vcpu_init_changed(vcpu, init))
+		return -EINVAL;
+
+	kvm_reset_vcpu(vcpu);
+
+	return 0;
+}
+
+static int kvm_arch_vcpu_ioctl_vcpu_init(struct kvm_vcpu *vcpu,
+					 struct kvm_vcpu_init *init)
+{
+	struct kvm_sae_save_area *save_area = &vcpu->arch.save_area;
+	struct kvm_sae_block *sae_block = &vcpu->arch.sae_block;
+	int ret;
+
+	sae_block->save_area = virt_to_phys(save_area);
+	save_area->sdo = virt_to_phys(sae_block);
+
+	ret = kvm_vcpu_set_target(vcpu, init);
+	if (ret)
+		return ret;
+
+	scoped_guard(spinlock, &vcpu->arch.mp_state_lock) {
+		WRITE_ONCE(vcpu->arch.mp_state.mp_state, KVM_MP_STATE_RUNNABLE);
+	}
+
+	return 0;
+}
+
+int kvm_vm_ioctl_irq_line(struct kvm *kvm, struct kvm_irq_level *irq_level,
+			  bool line_status)
+{
+	/* stub for now*/
+	return -EINVAL;
+}
+
+static void adjust_pc(struct kvm_vcpu *vcpu)
+{
+	if (vcpu_get_flag(vcpu, INCREMENT_PC)) {
+		kvm_skip_instr(vcpu);
+		vcpu_clear_flag(vcpu, INCREMENT_PC);
+	}
+}
+
+static void arm_vcpu_run(struct kvm_vcpu *vcpu)
+{
+	struct kvm_sae_block *sae_block = &vcpu->arch.sae_block;
+
+	adjust_pc(vcpu);
+
+	local_irq_disable();
+	guest_enter_irqoff();
+	local_irq_enable();
+
+	sae_block->icptr = 0;
+
+	sae64a(sae_block);
+
+	local_irq_disable();
+	guest_exit_irqoff();
+	local_irq_enable();
+}
+
+/** kvm_arch_vcpu_ioctl_run() - run arm64 vCPU
+ *
+ * Execute arm64 guest instructions using SAE.
+ *
+ * Returns:
+ * 1 enter the guest (should not be observed by userspace)
+ * 0 exit to userspace
+ * < 0 exit to userspace, where the return value indicates n error
+ *
+ *
+ */
+int kvm_arch_vcpu_ioctl_run(struct kvm_vcpu *vcpu)
+{
+	DECLARE_KERNEL_FPU_ONSTACK32(fpu_save);
+	struct kvm_run *kvm_run = vcpu->run;
+	int ret;
+
+	if (kvm_run->exit_reason == KVM_EXIT_MMIO) {
+		ret = kvm_handle_mmio_return(vcpu);
+		if (ret <= 0)
+			return ret;
+	}
+
+	vcpu_load(vcpu);
+
+	kernel_fpu_begin(&fpu_save, KERNEL_FPC | KERNEL_VXR);
+	load_vx_regs((vcpu->arch.ctxt.vregs));
+
+	if (!vcpu->wants_to_run) {
+		ret = -EINTR;
+		goto out;
+	}
+
+	kvm_sigset_activate(vcpu);
+
+	might_fault();
+
+	ret = 1;
+	do {
+		if (signal_pending(current)) {
+			kvm_run->exit_reason = KVM_EXIT_INTR;
+			ret = -EINTR;
+			continue;
+		}
+
+		if (need_resched())
+			schedule();
+
+		if (ret > 0)
+			ret = check_vcpu_requests(vcpu);
+
+		vcpu->arch.sae_block.icptr = 0;
+
+		arm_vcpu_run(vcpu);
+
+		ret = handle_exit(vcpu);
+
+	} while (ret > 0);
+
+	kvm_sigset_deactivate(vcpu);
+out:
+	if (unlikely(vcpu_get_flag(vcpu, INCREMENT_PC)))
+		adjust_pc(vcpu);
+
+	save_vx_regs(vcpu->arch.ctxt.vregs);
+	kernel_fpu_end(&fpu_save, KERNEL_FPC | KERNEL_VXR);
+	vcpu_put(vcpu);
+
+	return ret;
+}
+
+static int kvm_arm_vcpu_set_attr(struct kvm_vcpu *vcpu,
+				 struct kvm_device_attr *attr)
+{
+	int ret;
+
+	switch (attr->group) {
+	default:
+		ret = -ENXIO;
+		break;
+	}
+
+	return ret;
+}
+
+static int kvm_arm_vcpu_get_attr(struct kvm_vcpu *vcpu,
+				 struct kvm_device_attr *attr)
+{
+	int ret;
+
+	switch (attr->group) {
+	default:
+		ret = -ENXIO;
+		break;
+	}
+
+	return ret;
+}
+
+static int kvm_arm_vcpu_has_attr(struct kvm_vcpu *vcpu,
+				 struct kvm_device_attr *attr)
+{
+	int ret;
+
+	switch (attr->group) {
+	default:
+		ret = -ENXIO;
+		break;
+	}
+
+	return ret;
+}
+
+long kvm_arch_vcpu_ioctl(struct file *filp, unsigned int ioctl, unsigned long arg)
+{
+	struct kvm_vcpu *vcpu = filp->private_data;
+	void __user *argp = (void __user *)arg;
+	struct kvm_device_attr attr;
+	int ret;
+
+	switch (ioctl) {
+	case KVM_ARM_VCPU_INIT: {
+		struct kvm_vcpu_init init;
+
+		ret = -EFAULT;
+		if (copy_from_user(&init, argp, sizeof(init)))
+			break;
+
+		ret = kvm_arch_vcpu_ioctl_vcpu_init(vcpu, &init);
+		break;
+	}
+	case KVM_SET_ONE_REG:
+	case KVM_GET_ONE_REG: {
+		struct kvm_one_reg reg;
+
+		ret = -ENOEXEC;
+		if (unlikely(!kvm_vcpu_initialized(vcpu)))
+			break;
+
+		ret = -EFAULT;
+		if (copy_from_user(&reg, argp, sizeof(reg)))
+			break;
+
+		if (kvm_check_request(KVM_REQ_VCPU_RESET, vcpu))
+			kvm_reset_vcpu(vcpu);
+
+		if (ioctl == KVM_SET_ONE_REG)
+			ret = kvm_arm_set_reg(vcpu, &reg);
+		else
+			ret = kvm_arm_get_reg(vcpu, &reg);
+		break;
+	}
+	case KVM_GET_REG_LIST: {
+		struct kvm_reg_list __user *user_list = argp;
+		struct kvm_reg_list reg_list;
+		unsigned int n;
+
+		ret = -ENOEXEC;
+		if (unlikely(!kvm_vcpu_initialized(vcpu)))
+			break;
+		ret = -EPERM;
+		if (!kvm_arm_vcpu_is_finalized(vcpu))
+			break;
+		ret = -EFAULT;
+		if (copy_from_user(&reg_list, user_list, sizeof(reg_list)))
+			break;
+		n = reg_list.n;
+		reg_list.n = kvm_arm_num_regs(vcpu);
+		if (copy_to_user(user_list, &reg_list, sizeof(reg_list)))
+			break;
+		ret = -E2BIG;
+		if (n < reg_list.n)
+			break;
+		ret = kvm_arm_copy_reg_indices(vcpu, user_list->reg);
+		break;
+	}
+	case KVM_ARM_VCPU_FINALIZE: {
+		int what;
+
+		if (!kvm_vcpu_initialized(vcpu))
+			return -ENOEXEC;
+
+		if (get_user(what, (const int __user *)argp))
+			return -EFAULT;
+
+		ret = kvm_arm_vcpu_finalize(vcpu, what);
+		break;
+	}
+	case KVM_SET_DEVICE_ATTR: {
+		ret = -EFAULT;
+		if (copy_from_user(&attr, argp, sizeof(attr)))
+			break;
+		ret = kvm_arm_vcpu_set_attr(vcpu, &attr);
+		break;
+	}
+	case KVM_GET_DEVICE_ATTR: {
+		ret = -EFAULT;
+		if (copy_from_user(&attr, argp, sizeof(attr)))
+			break;
+		ret = kvm_arm_vcpu_get_attr(vcpu, &attr);
+		break;
+	}
+	case KVM_HAS_DEVICE_ATTR: {
+		ret = -EFAULT;
+		if (copy_from_user(&attr, argp, sizeof(attr)))
+			break;
+		ret = kvm_arm_vcpu_has_attr(vcpu, &attr);
+		break;
+	}
+	default:
+		ret = -EINVAL;
+	}
+
+	return ret;
+}
+
+int kvm_vm_ioctl_get_dirty_log(struct kvm *kvm,
+			       struct kvm_dirty_log *log)
+{
+	return s390_kvm_mmu_get_dirty_log(kvm, log);
+}
+
+bool kvm_age_gfn(struct kvm *kvm, struct kvm_gfn_range *range)
+{
+	scoped_guard(read_lock, &kvm->mmu_lock)
+		return gmap_age_gfn(kvm->arch.gmap, range->start, range->end);
+}
+
+void kvm_arch_sync_dirty_log(struct kvm *kvm, struct kvm_memory_slot *memslot)
+{
+	gfn_t last_gfn = memslot->base_gfn + memslot->npages;
+
+	scoped_guard(read_lock, &kvm->mmu_lock)
+		gmap_sync_dirty_log(kvm->arch.gmap, memslot->base_gfn, last_gfn);
+}
+
+int kvm_arch_prepare_memory_region(struct kvm *kvm,
+				   const struct kvm_memory_slot *old,
+				   struct kvm_memory_slot *new,
+				   enum kvm_mr_change change)
+{
+	return s390_kvm_mmu_prepare_memory_region(kvm, old, new, change);
+}
+
+void kvm_arch_commit_memory_region(struct kvm *kvm, struct kvm_memory_slot *old,
+				   const struct kvm_memory_slot *new,
+				   enum kvm_mr_change change)
+{
+	s390_kvm_mmu_commit_memory_region(kvm, old, new, change);
+}
+
+bool kvm_unmap_gfn_range(struct kvm *kvm, struct kvm_gfn_range *range)
+{
+	return gmap_unmap_gfn_range(kvm->arch.gmap, range->slot, range->start, range->end);
+}
+
+bool kvm_test_age_gfn(struct kvm *kvm, struct kvm_gfn_range *range)
+{
+	scoped_guard(read_lock, &kvm->mmu_lock)
+		return dat_test_age_gfn(kvm->arch.gmap->asce, range->start, range->end);
+}
+
+#ifdef CONFIG_KVM_GENERIC_PRE_FAULT_MEMORY
+long kvm_arch_vcpu_pre_fault_memory(struct kvm_vcpu *vcpu,
+				    struct kvm_pre_fault_memory *range)
+{
+	return -EOPNOTSUPP;
+}
+#endif /* ifdef CONFIG_ */
+
+int kvm_arch_vm_ioctl(struct file *filp, unsigned int ioctl, unsigned long arg)
+{
+	void __user *argp = (void __user *)arg;
+
+	switch (ioctl) {
+	case KVM_ARM_PREFERRED_TARGET: {
+		struct kvm_vcpu_init init = {
+			.target = KVM_ARM_TARGET_GENERIC_V8,
+		};
+
+		if (copy_to_user(argp, &init, sizeof(init)))
+			return -EFAULT;
+
+		return 0;
+	}
+
+	default:
+		return -EINVAL;
+	}
+}
+
+bool kvm_arch_irqchip_in_kernel(struct kvm *kvm)
+{
+	return false;
+}
+
+int kvm_set_msi(struct kvm_kernel_irq_routing_entry *e, struct kvm *kvm,
+		int irq_source_id, int level, bool line_status)
+{
+	return -EINVAL;
+}
+
+int kvm_set_routing_entry(struct kvm *kvm,
+			  struct kvm_kernel_irq_routing_entry *e,
+			  const struct kvm_irq_routing_entry *ue)
+{
+	return -EINVAL;
+}
+
+int kvm_cpu_has_pending_timer(struct kvm_vcpu *vcpu)
+{
+	return 0;
+}
+
+#ifdef CONFIG_HAVE_KVM_NO_POLL
+__weak bool kvm_arch_no_poll(struct kvm_vcpu *vcpu)
+{
+	return false;
+}
+#endif
+
+long kvm_arch_vcpu_unlocked_ioctl(struct file *filp, unsigned int ioctl,
+				  unsigned long arg)
+{
+	return -ENOIOCTLCMD;
+}
+
+static int __init kvm_s390_arm64_init(void)
+{
+	if (!sclp.has_aef)
+		return -ENXIO;
+
+	return kvm_init_with_dev(sizeof(struct kvm_vcpu), 0, THIS_MODULE,
+				 KVM_DEV_NAME, MISC_DYNAMIC_MINOR);
+}
+
+static __exit void kvm_s390_arm64_exit(void)
+{
+	kvm_exit();
+}
+
+module_init(kvm_s390_arm64_init);
+module_exit(kvm_s390_arm64_exit);
diff --git a/arch/s390/kvm/arm64/arm.h b/arch/s390/kvm/arm64/arm.h
new file mode 100644
index 0000000000000..2e33800525e93
--- /dev/null
+++ b/arch/s390/kvm/arm64/arm.h
@@ -0,0 +1,58 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+#ifndef ARCH_S390_KVM_ARM64_H
+#define ARCH_S390_KVM_ARM64_H
+
+#include <linux/kvm_host.h>
+
+#define KVM_DEV_NAME "kvm-arm64"
+
+#define VM_EVENT(d_kvm, d_loglevel, d_string, d_args...)\
+do { \
+	debug_sprintf_event((d_kvm)->arch.dbf, d_loglevel, KVM_DEV_NAME ": " d_string "\n", d_args); \
+} while (0)
+
+#define VCPU_EVENT(d_vcpu, d_loglevel, d_string, d_args...)			\
+	do {									\
+		debug_sprintf_event(						\
+			(d_vcpu)->kvm->arch.dbf, d_loglevel,			\
+			KVM_DEV_NAME " %02d[%016llx-%016llx]: " d_string "\n",	\
+			(d_vcpu)->vcpu_id, (d_vcpu)->arch.sae_block.pstate,	\
+			(d_vcpu)->arch.sae_block.pc, d_args);			\
+	} while (0)
+
+static __always_inline int kvm_is_ucontrol(struct kvm *kvm)
+{
+	return 0;
+}
+
+static __always_inline int __kvm_s390_pv_destroy_page(struct page *page)
+{
+	return 0;
+}
+
+static __always_inline void kvm_s390_vsie_gmap_notifier(struct gmap *gmap, gpa_t start, gpa_t end)
+{
+}
+
+static __always_inline int kvm_s390_pv_get_handle(struct kvm *kvm)
+{
+	return 0;
+}
+
+static __always_inline int kvm_s390_is_migration_mode(struct kvm *kvm)
+{
+	return false;
+}
+
+static __always_inline bool kvm_arch_setup_async_pf(struct kvm_vcpu *vcpu)
+{
+	return false;
+}
+
+/* should never be called */
+static __always_inline int kvm_s390_vm_stop_migration(struct kvm *kvm)
+{
+	return -EINVAL;
+}
+
+#endif /* ARCH_S390_KVM_ARM64_H */
diff --git a/arch/s390/kvm/arm64/copy-arm64c.awk b/arch/s390/kvm/arm64/copy-arm64c.awk
new file mode 100644
index 0000000000000..6c4fd1f080982
--- /dev/null
+++ b/arch/s390/kvm/arm64/copy-arm64c.awk
@@ -0,0 +1,70 @@
+#!/usr/bin/awk -f
+# SPDX-License-Identifier: GPL-2.0
+#
+# Extract marked sections from ARM64 C files for sharing with s390 KVM
+#
+# Usage: share-arm64-cfile.awk <input_file>
+#
+# Extracts all sections between start/end markers. If no markers found, signals failure.
+
+BEGIN {
+	# Constants
+	start_pattern = "^#ifdef ARM64_S390_COMMON$"
+	end_pattern = "^#endif /\\* ARM64_S390_COMMON \\*/$"
+
+	# State variables
+	copying = found_marker = 0
+	file_header_done = 0
+}
+
+!file_header_done {
+	if (/^\/\*/ || /^\/\/ SPDX-License-Identifier:/) {
+		print
+		next
+	}
+	if (/[[:space:]]\*([[:space:]]|$)/) {
+		print
+		next
+	}
+	if (/\*\//) {
+		print " *"
+	} else {
+		print "/*"
+	}
+
+	filename = FILENAME
+	sub(/^.*arch\/arm64\//, "arch/arm64/", filename)
+	print " * This file was automatically generated from " filename
+	print " * Do not modify this file directly."
+	print " */"
+	print ""
+	print "#ifndef __INCL_GEN_ARM_FILE"
+	print "#error included .inc file w/o proper guard definition"
+	print "#undef __INCL_GEN_ARM_FILE"
+	print "#endif /* __INCL_GEN_ARM_FILE */"
+	print ""
+
+	file_header_done = 1
+}
+
+$0 ~ start_pattern {
+	if (copying) { exit 1 }
+	copying = found_marker = 1
+	next
+}
+
+$0 ~ end_pattern {
+	copying = 0
+	next
+}
+
+copying {
+	gsub(/#include <asm\//, "#include <arm64/")
+	gsub(/#include <uapi\/asm\//, "#include <uapi/arm64/")
+	print
+	next
+}
+
+END {
+	exit !found_marker || copying
+}
diff --git a/arch/s390/kvm/arm64/guest.c b/arch/s390/kvm/arm64/guest.c
new file mode 100644
index 0000000000000..4ea6fe2c270d1
--- /dev/null
+++ b/arch/s390/kvm/arm64/guest.c
@@ -0,0 +1,135 @@
+// SPDX-License-Identifier: GPL-2.0
+#include <linux/kvm_host.h>
+#include <linux/kvm.h>
+
+#include <arm64/kvm_emulate.h>
+#include <arm64/kvm_nested.h>
+
+#define __INCL_GEN_ARM_FILE
+#include "generated/guest.inc"
+#undef __INCL_GEN_ARM_FILE
+
+const struct kvm_stats_desc kvm_vm_stats_desc[] = {
+	KVM_GENERIC_VM_STATS()
+};
+
+const struct kvm_stats_header kvm_vm_stats_header = {
+	.name_size = KVM_STATS_NAME_SIZE,
+	.num_desc = ARRAY_SIZE(kvm_vm_stats_desc),
+	.id_offset =  sizeof(struct kvm_stats_header),
+	.desc_offset = sizeof(struct kvm_stats_header) + KVM_STATS_NAME_SIZE,
+	.data_offset = sizeof(struct kvm_stats_header) + KVM_STATS_NAME_SIZE +
+		       sizeof(kvm_vm_stats_desc),
+};
+
+const struct kvm_stats_desc kvm_vcpu_stats_desc[] = {
+	KVM_GENERIC_VCPU_STATS(),
+	/* ARM64 stats */
+	STATS_DESC_COUNTER(VCPU, hvc_exit_stat),
+	STATS_DESC_COUNTER(VCPU, wfe_exit_stat),
+	STATS_DESC_COUNTER(VCPU, wfi_exit_stat),
+	STATS_DESC_COUNTER(VCPU, mmio_exit_user),
+	STATS_DESC_COUNTER(VCPU, mmio_exit_kernel),
+	STATS_DESC_COUNTER(VCPU, signal_exits),
+	STATS_DESC_COUNTER(VCPU, exits),
+	/* GMAP stats */
+	STATS_DESC_COUNTER(VCPU, pfault_sync),
+};
+
+const struct kvm_stats_header kvm_vcpu_stats_header = {
+	.name_size = KVM_STATS_NAME_SIZE,
+	.num_desc = ARRAY_SIZE(kvm_vcpu_stats_desc),
+	.id_offset = sizeof(struct kvm_stats_header),
+	.desc_offset = sizeof(struct kvm_stats_header) + KVM_STATS_NAME_SIZE,
+	.data_offset = sizeof(struct kvm_stats_header) + KVM_STATS_NAME_SIZE +
+		       sizeof(kvm_vcpu_stats_desc),
+};
+
+int kvm_arm_copy_reg_indices(struct kvm_vcpu *vcpu, u64 __user *uindices)
+{
+	int ret;
+
+	ret = copy_core_reg_indices(vcpu, uindices);
+	if (ret < 0)
+		return ret;
+	uindices += ret;
+
+	return 0;
+}
+
+unsigned long kvm_arm_num_regs(struct kvm_vcpu *vcpu)
+{
+	return num_core_regs(vcpu);
+}
+
+int kvm_arm_get_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg)
+{
+	/* We currently use nothing arch-specific in upper 32 bits */
+	if ((reg->id & ~KVM_REG_SIZE_MASK) >> 32 != KVM_REG_ARM64 >> 32)
+		return -EINVAL;
+
+	switch (reg->id & KVM_REG_ARM_COPROC_MASK) {
+	case KVM_REG_ARM_CORE:
+		return get_core_reg(vcpu, reg);
+	default:
+		return -EINVAL;
+	}
+}
+
+int kvm_arm_set_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg)
+{
+	/* We currently use nothing arch-specific in upper 32 bits */
+	if ((reg->id & ~KVM_REG_SIZE_MASK) >> 32 != KVM_REG_ARM64 >> 32)
+		return -EINVAL;
+
+	switch (reg->id & KVM_REG_ARM_COPROC_MASK) {
+	case KVM_REG_ARM_CORE:
+		return set_core_reg(vcpu, reg);
+	default:
+		return -EINVAL;
+	}
+}
+
+int kvm_arch_vcpu_ioctl_get_regs(struct kvm_vcpu *vcpu, struct kvm_regs *regs)
+{
+	return -EINVAL;
+}
+
+int kvm_arch_vcpu_ioctl_set_regs(struct kvm_vcpu *vcpu, struct kvm_regs *regs)
+{
+	return -EINVAL;
+}
+
+int kvm_arch_vcpu_ioctl_get_sregs(struct kvm_vcpu *vcpu,
+				  struct kvm_sregs *sregs)
+{
+	return -EINVAL;
+}
+
+int kvm_arch_vcpu_ioctl_set_sregs(struct kvm_vcpu *vcpu,
+				  struct kvm_sregs *sregs)
+{
+	return -EINVAL;
+}
+
+int kvm_arch_vcpu_ioctl_get_fpu(struct kvm_vcpu *vcpu, struct kvm_fpu *fpu)
+{
+	return -EINVAL;
+}
+
+int kvm_arch_vcpu_ioctl_set_fpu(struct kvm_vcpu *vcpu, struct kvm_fpu *fpu)
+{
+	return -EINVAL;
+}
+
+int kvm_arch_vcpu_ioctl_translate(struct kvm_vcpu *vcpu,
+				  struct kvm_translation *tr)
+{
+	return -EINVAL;
+}
+
+int kvm_arch_vcpu_ioctl_set_guest_debug(struct kvm_vcpu *vcpu,
+					struct kvm_guest_debug *dbg)
+{
+	return -EINVAL;
+}
diff --git a/arch/s390/kvm/arm64/handle_exit.c b/arch/s390/kvm/arm64/handle_exit.c
new file mode 100644
index 0000000000000..9ba01ec66e347
--- /dev/null
+++ b/arch/s390/kvm/arm64/handle_exit.c
@@ -0,0 +1,131 @@
+// SPDX-License-Identifier: GPL-2.0
+
+#include <linux/kvm_host.h>
+
+#include <arm64/esr.h>
+#include <arm64/kvm_emulate.h>
+
+#include "handle_exit.h"
+
+typedef int (*exit_handle_fn)(struct kvm_vcpu *);
+exit_handle_fn arm_exit_handlers[ESR_ELx_EC_MAX + 1];
+
+#define __INCL_GEN_ARM_FILE
+#include "generated/handle_exit.inc"
+#undef __INCL_GEN_ARM_FILE
+
+#define PSCI_0_2_FN_SYSTEM_OFF		0x84000008
+#define PSCI_RET_NOT_SUPPORTED		-1
+#define PSCI_RET_INTERNAL_FAILURE	-6
+/*
+ * Temporary smc/hvc handler. Non-compliant implementation (features missing).
+ * Implements only system off so that test programs are able to end their execution
+ */
+static int kvm_smccc_call_handler(struct kvm_vcpu *vcpu)
+{
+	u32 func_id = vcpu_get_reg(vcpu, 0);
+	u64 val = PSCI_RET_NOT_SUPPORTED;
+	int ret = 1;
+
+	if (func_id == PSCI_0_2_FN_SYSTEM_OFF) {
+		scoped_guard(spinlock, &vcpu->arch.mp_state_lock) {
+			WRITE_ONCE(vcpu->arch.mp_state.mp_state, KVM_MP_STATE_STOPPED);
+		}
+		kvm_make_all_cpus_request(vcpu->kvm, KVM_REQ_SLEEP);
+		memset(&vcpu->run->system_event, 0,
+		       sizeof(vcpu->run->system_event));
+		vcpu->run->system_event.type = KVM_SYSTEM_EVENT_SHUTDOWN;
+		vcpu->run->system_event.ndata = 1;
+		vcpu->run->system_event.data[0] = 0;
+		vcpu->run->exit_reason = KVM_EXIT_SYSTEM_EVENT;
+		val = PSCI_RET_INTERNAL_FAILURE;
+		ret = 0;
+	}
+	vcpu_set_reg(vcpu, 0, val);
+
+	return ret;
+}
+
+static int handle_hvc(struct kvm_vcpu *vcpu)
+{
+	vcpu->stat.hvc_exit_stat++;
+	return kvm_smccc_call_handler(vcpu);
+}
+
+exit_handle_fn arm_exit_handlers[] = {
+	[0 ... ESR_ELx_EC_MAX]	= kvm_handle_unknown_ec,
+	[ESR_ELx_EC_HVC64]	= handle_hvc,
+	[ESR_ELx_EC_IABT_LOW]	= kvm_handle_guest_abort,
+	[ESR_ELx_EC_DABT_LOW]	= kvm_handle_guest_abort,
+};
+
+/*
+ * Return > 0 to return to guest, < 0 on error, 0 (and set exit_reason) on
+ * proper exit to userspace.
+ */
+int handle_exit(struct kvm_vcpu *vcpu)
+{
+	u8 icptr = vcpu->arch.sae_block.icptr;
+	int ret = 1;
+
+	switch (icptr) {
+	case SAE_ICPTR_SPURIOUS:
+		break;
+	case SAE_ICPTR_VALIDITY:
+		WARN_ONCE(true, "SAE: validity intercept. vir: 0x%04x",
+			  vcpu->arch.sae_block.vir);
+		ret = -EINVAL;
+		break;
+	case SAE_ICPTR_HOST_ACCESS_EXCEPTION:
+	case SAE_ICPTR_SYNCHRONOUS_EXCEPTION:
+		ret = handle_trap_exceptions(vcpu);
+		break;
+	default:
+		WARN_ONCE(true, "SAE: unknown interception reason 0x%02x",
+			  icptr);
+		ret = -EINVAL;
+	}
+	return ret;
+}
+
+/* manually copied from arch/arm64/kernel/traps.c */
+static const char * const esr_class_str[] = {
+	[0 ... ESR_ELx_EC_MAX]		= "UNRECOGNIZED EC",
+	[ESR_ELx_EC_UNKNOWN]		= "Unknown/Uncategorized",
+	[ESR_ELx_EC_WFx]		= "WFI/WFE",
+	[ESR_ELx_EC_FP_ASIMD]		= "ASIMD",
+	[ESR_ELx_EC_PAC]		= "PAC",
+	[ESR_ELx_EC_BTI]		= "BTI",
+	[ESR_ELx_EC_ILL]		= "PSTATE.IL",
+	[ESR_ELx_EC_SVC64]		= "SVC (AArch64)",
+	[ESR_ELx_EC_HVC64]		= "HVC (AArch64)",
+	[ESR_ELx_EC_SMC64]		= "SMC (AArch64)",
+	[ESR_ELx_EC_SYS64]		= "MSR/MRS (AArch64)",
+	[ESR_ELx_EC_SVE]		= "SVE",
+	[ESR_ELx_EC_ERET]		= "ERET/ERETAA/ERETAB",
+	[ESR_ELx_EC_FPAC]		= "FPAC",
+	[ESR_ELx_EC_SME]		= "SME",
+	[ESR_ELx_EC_IMP_DEF]		= "EL3 IMP DEF",
+	[ESR_ELx_EC_IABT_LOW]		= "IABT (lower EL)",
+	[ESR_ELx_EC_IABT_CUR]		= "IABT (current EL)",
+	[ESR_ELx_EC_PC_ALIGN]		= "PC Alignment",
+	[ESR_ELx_EC_DABT_LOW]		= "DABT (lower EL)",
+	[ESR_ELx_EC_DABT_CUR]		= "DABT (current EL)",
+	[ESR_ELx_EC_SP_ALIGN]		= "SP Alignment",
+	[ESR_ELx_EC_MOPS]		= "MOPS",
+	[ESR_ELx_EC_FP_EXC64]		= "FP (AArch64)",
+	[ESR_ELx_EC_GCS]		= "Guarded Control Stack",
+	[ESR_ELx_EC_SERROR]		= "SError",
+	[ESR_ELx_EC_BREAKPT_LOW]	= "Breakpoint (lower EL)",
+	[ESR_ELx_EC_BREAKPT_CUR]	= "Breakpoint (current EL)",
+	[ESR_ELx_EC_SOFTSTP_LOW]	= "Software Step (lower EL)",
+	[ESR_ELx_EC_SOFTSTP_CUR]	= "Software Step (current EL)",
+	[ESR_ELx_EC_WATCHPT_LOW]	= "Watchpoint (lower EL)",
+	[ESR_ELx_EC_WATCHPT_CUR]	= "Watchpoint (current EL)",
+	[ESR_ELx_EC_BRK64]		= "BRK (AArch64)",
+};
+
+const char *esr_get_class_string(unsigned long esr)
+{
+	return esr_class_str[ESR_ELx_EC(esr)];
+}
diff --git a/arch/s390/kvm/arm64/handle_exit.h b/arch/s390/kvm/arm64/handle_exit.h
new file mode 100644
index 0000000000000..65ae587215375
--- /dev/null
+++ b/arch/s390/kvm/arm64/handle_exit.h
@@ -0,0 +1,9 @@
+/* SPDX-License-Identifier: GPL-2.0-only */
+#ifndef KVM_ARM64_HANDLE_EXIT_H
+#define KVM_ARM64_HANDLE_EXIT_H
+
+#include <linux/kvm_host.h>
+
+int handle_exit(struct kvm_vcpu *vcpu);
+
+#endif /* KVM_ARM64_HANDLE_EXIT_H */
diff --git a/arch/s390/kvm/arm64/inject_fault.c b/arch/s390/kvm/arm64/inject_fault.c
new file mode 100644
index 0000000000000..425dbeaa421c6
--- /dev/null
+++ b/arch/s390/kvm/arm64/inject_fault.c
@@ -0,0 +1,21 @@
+// SPDX-License-Identifier: GPL-2.0
+
+#include <arm64/kvm_emulate.h>
+
+/**
+ * kvm_inject_undefined - inject an undefined instruction into the guest
+ * @vcpu: The vCPU in which to inject the exception
+ *
+ * It is assumed that this code is called from the VCPU thread and that the
+ * VCPU therefore is not currently executing guest code.
+ */
+void kvm_inject_undefined(struct kvm_vcpu *vcpu)
+{
+	/* Stub until s390 supports arm64 sysregs TODO sysregs*/
+}
+
+int kvm_inject_sea(struct kvm_vcpu *vcpu, bool iabt, u64 addr)
+{
+	/* Stub until s390 supports arm64 sysregs TODO sysregs*/
+	return 1;
+}
diff --git a/arch/s390/kvm/arm64/mmio.c b/arch/s390/kvm/arm64/mmio.c
new file mode 100644
index 0000000000000..908a6b43ddf77
--- /dev/null
+++ b/arch/s390/kvm/arm64/mmio.c
@@ -0,0 +1,15 @@
+// SPDX-License-Identifier: GPL-2.0
+
+#include <linux/kvm_host.h>
+#include <linux/bitfield.h>
+
+#include <trace/events/kvm.h>
+
+#include <arm64/kvm_emulate.h>
+#include <arm64/sysreg.h>
+
+#include "trace.h"
+
+#define __INCL_GEN_ARM_FILE
+#include "generated/mmio.inc"
+#undef __INCL_GEN_ARM_FILE
diff --git a/arch/s390/kvm/arm64/mmu.c b/arch/s390/kvm/arm64/mmu.c
new file mode 100644
index 0000000000000..71cd582f24ff8
--- /dev/null
+++ b/arch/s390/kvm/arm64/mmu.c
@@ -0,0 +1,177 @@
+// SPDX-License-Identifier: GPL-2.0
+#include <linux/kvm_host.h>
+
+#include <arm64/kvm_emulate.h>
+
+#include <faultin.h>
+
+static inline bool kvm_s390_cur_gmap_fault_is_write(struct kvm_vcpu *vcpu)
+{
+	return vcpu->arch.sae_block.hai.pic == PGM_PROTECTION ||
+	       vcpu->arch.sae_block.hai.teid.fsi == TEID_FSI_STORE;
+}
+
+/*
+ * user_mem_abort() - handle a dat fault for the gmap of a vcpu
+ *
+ * Return: 0 on success, < 0 in case of error.
+ * Context: The mm lock must not be held before calling. May sleep.
+ */
+static int user_mem_abort(struct kvm_vcpu *vcpu, gpa_t fault_ipa,
+			  struct kvm_memory_slot *slot, hva_t hva)
+{
+	struct guest_fault f = { };
+	int ret;
+
+	if (kvm_s390_cur_gmap_fault_is_write(vcpu))
+		f.write_attempt = FOLL_WRITE;
+	f.gfn = gpa_to_gfn(fault_ipa);
+
+	ret = kvm_s390_faultin_gfn(vcpu, NULL, &f);
+	if (ret <= 0)
+		return ret;
+	if (ret == PGM_ADDRESSING)
+		/*
+		 * Without the relevant sysregs we cannot do anything for now.
+		 * Go back to userspace with an error. TODO sysreg handling
+		 */
+		return -ENOEXEC;
+	KVM_BUG_ON(ret, vcpu->kvm);
+	return -EINVAL;
+}
+
+static int kvm_handle_pic(struct kvm_vcpu *vcpu, bool *translation)
+{
+	switch (kvm_vcpu_fault_pic(vcpu)) {
+	/* expected cases: */
+	case PGM_ASCE_TYPE:
+	case PGM_REGION_FIRST_TRANS:
+	case PGM_REGION_SECOND_TRANS:
+	case PGM_REGION_THIRD_TRANS:
+	case PGM_SEGMENT_TRANSLATION:
+	case PGM_PAGE_TRANSLATION:
+		*translation = true;
+		break;
+	case PGM_PROTECTION:
+		break;
+	/* unexpected cases: */
+	case 0:
+		KVM_BUG(1, vcpu->kvm, "On MMU fault path but no fault occurred");
+		return -EFAULT;
+	default:
+		KVM_BUG(1, vcpu->kvm, "Unexpected program interrupt 0x%x, TEID 0x%016lx",
+			vcpu->arch.sae_block.hai.pic, vcpu->arch.sae_block.hai.teid.val);
+		send_sig(SIGSEGV, current, 0);
+		return -EFAULT;
+	}
+
+	return 0;
+}
+
+int kvm_handle_guest_abort(struct kvm_vcpu *vcpu)
+{
+	struct kvm_memory_slot *memslot;
+	bool translation = false;
+	phys_addr_t fault_ipa;
+	unsigned long esr;
+	unsigned long hva;
+	bool write_fault;
+	bool guest_size_err;
+	bool writable;
+	bool is_iabt;
+	int ret;
+	gfn_t gfn;
+	int idx;
+
+	esr = kvm_vcpu_get_esr(vcpu);
+	fault_ipa = kvm_vcpu_get_fault_ipa(vcpu);
+	is_iabt = kvm_vcpu_trap_is_iabt(vcpu);
+	guest_size_err = vcpu->arch.sae_block.icptr == SAE_ICPTR_GUEST_ADDRESS_SIZE;
+
+	if (guest_size_err) {
+		translation = true;
+	} else {
+		ret = kvm_handle_pic(vcpu, &translation);
+		if (ret)
+			return ret;
+	}
+
+	if (translation) {
+		/*
+		 * For both cases:
+		 * Without the relevant sysregs we cannot do anything for now.
+		 * Go back to userspace with an error. TODO sysreg handling
+		 */
+		if (fault_ipa >= BIT_ULL(get_kvm_ipa_limit()))
+			return -ENOEXEC;
+
+		if (fault_ipa >= kvm_phys_size(vcpu->kvm))
+			return -ENOEXEC;
+	}
+
+	idx = srcu_read_lock(&vcpu->kvm->srcu);
+
+	gfn = fault_ipa >> PAGE_SHIFT;
+
+	memslot = gfn_to_memslot(vcpu->kvm, gfn);
+	hva = gfn_to_hva_memslot_prot(memslot, gfn, &writable);
+	write_fault = kvm_is_write_fault(vcpu);
+	if (kvm_is_error_hva(hva) || (write_fault && !writable)) {
+		ret = -ENOEXEC;
+		/*
+		 * The guest has put either its instructions or its page-tables
+		 * somewhere it shouldn't have. Userspace won't be able to do
+		 * anything about this (there's no syndrome for a start).
+		 *
+		 * Without the relevant sysregs we cannot do anything for now.
+		 * Go back to userspace with an error. TODO sysreg handling
+		 */
+		if (is_iabt)
+			goto out_unlock;
+
+		if (kvm_vcpu_abt_iss1tw(vcpu)) {
+			/*
+			 * Without the relevant sysregs we cannot do anything for now.
+			 * Go back to userspace with an error. TODO sysreg handling
+			 */
+			goto out_unlock;
+		}
+
+		/*
+		 * Check for a cache maintenance operation. Assume the guest is
+		 * cautious and skip instruction
+		 */
+		if (kvm_is_error_hva(hva) && kvm_vcpu_dabt_is_cm(vcpu)) {
+			kvm_incr_pc(vcpu);
+			ret = 1;
+			goto out_unlock;
+		}
+
+		/*
+		 * The IPA is reported as [MAX:12], so we need to
+		 * complement it with the bottom 12 bits from the
+		 * faulting VA. This is always 12 bits, irrespective
+		 * of the page size.
+		 */
+		fault_ipa |= kvm_vcpu_get_hfar(vcpu) & ((1 << 12) - 1);
+		ret = io_mem_abort(vcpu, fault_ipa);
+		goto out_unlock;
+	}
+
+	/* Userspace should not be able to register out-of-bounds IPAs */
+	VM_BUG_ON(fault_ipa >= kvm_phys_size(vcpu->kvm));
+	/*
+	 * Proper guest size faults have been injected.
+	 * In theory it's fine to have device memory higher than MSL,
+	 * even if not currently possible, but that would have been handled above.
+	 * So if we get here with a guest size intercept, we have a bug somewhere.
+	 */
+	VM_BUG_ON(guest_size_err);
+
+	ret = user_mem_abort(vcpu, fault_ipa, memslot, hva);
+	if (!ret)
+		ret = 1;
+out_unlock:
+	srcu_read_unlock(&vcpu->kvm->srcu, idx);
+	return ret;
+}
diff --git a/arch/s390/kvm/arm64/reset.c b/arch/s390/kvm/arm64/reset.c
new file mode 100644
index 0000000000000..adf237254212a
--- /dev/null
+++ b/arch/s390/kvm/arm64/reset.c
@@ -0,0 +1,77 @@
+// SPDX-License-Identifier: GPL-2.0
+
+#include <linux/kvm_host.h>
+#include <linux/fpu.h>
+
+#include <arm64/kvm_emulate.h>
+#include <arm64/kvm_nested.h>
+
+#include "reset.h"
+
+#define __INCL_GEN_ARM_FILE
+#include "generated/reset.inc"
+#undef __INCL_GEN_ARM_FILE
+
+bool kvm_arm_vcpu_is_finalized(struct kvm_vcpu *vcpu)
+{
+	return true;
+}
+
+static inline void vcpu_reset_hcr(struct kvm_vcpu *vcpu)
+{
+	vcpu->arch.hcr_elz = HCR_EL2_E2H | HCR_EL2_RW | HCR_EL2_AMO |
+			     HCR_EL2_IMO | HCR_EL2_FMO | HCR_EL2_PTW;
+	/* traps */
+	vcpu->arch.hcr_elz |= HCR_EL2_TSC | HCR_EL2_TID1 | HCR_EL2_TID2 |
+			      HCR_EL2_TID3 | HCR_EL2_TID4 | HCR_EL2_TID5 |
+			      HCR_EL2_TIDCP;
+}
+
+void kvm_reset_vcpu(struct kvm_vcpu *vcpu)
+{
+	struct vcpu_reset_state reset_state;
+	bool loaded;
+
+	scoped_guard(spinlock, &vcpu->arch.mp_state_lock) {
+		reset_state = vcpu->arch.reset_state;
+		vcpu->arch.reset_state.reset = false;
+	}
+
+	/*
+	 * Disable preemption around the vcpu reset as we might otherwise race with
+	 * preempt notifiers which call stiasrm/lasrm from put/load
+	 */
+	preempt_disable();
+
+	/* The reset must run with an unloaded save area */
+	loaded = vcpu_is_loaded(vcpu);
+	if (loaded)
+		vcpu_put(vcpu);
+
+	kvm_reset_vcpu_core_regs(vcpu);
+
+	/* Reset special registers */
+	vcpu_reset_hcr(vcpu);
+
+	if (reset_state.reset) {
+		*vcpu_pc(vcpu) = reset_state.pc;
+		vcpu_clear_flag(vcpu, PENDING_EXCEPTION);
+		vcpu_clear_flag(vcpu, EXCEPT_MASK);
+		vcpu_clear_flag(vcpu, INCREMENT_PC);
+		vcpu_set_reg(vcpu, 0, reset_state.r0);
+	}
+
+	/* Load new vx-regs into HW if they are currently loaded */
+	if (current->thread.kfpu_flags)
+		load_vx_regs(vcpu->arch.ctxt.vregs);
+
+	if (loaded)
+		vcpu_load(vcpu);
+
+	preempt_enable();
+}
+
+int kvm_arm_vcpu_finalize(struct kvm_vcpu *vcpu, int feature)
+{
+	return 0;
+}
diff --git a/arch/s390/kvm/arm64/reset.h b/arch/s390/kvm/arm64/reset.h
new file mode 100644
index 0000000000000..a5c5304e47bcf
--- /dev/null
+++ b/arch/s390/kvm/arm64/reset.h
@@ -0,0 +1,11 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+#ifndef KVM_ARM_RESET_H
+#define KVM_ARM_RESET_H
+
+#include <linux/kvm_host.h>
+
+bool kvm_arm_vcpu_is_finalized(struct kvm_vcpu *vcpu);
+void kvm_reset_vcpu(struct kvm_vcpu *vcpu);
+int kvm_arm_vcpu_finalize(struct kvm_vcpu *vcpu, int feature);
+
+#endif /* KVM_ARM_RESET_H */
diff --git a/arch/s390/kvm/arm64/trace.h b/arch/s390/kvm/arm64/trace.h
new file mode 100644
index 0000000000000..973054c5d11ee
--- /dev/null
+++ b/arch/s390/kvm/arm64/trace.h
@@ -0,0 +1,67 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+#if !defined(KVM_ARM64_TRACE_KVM_H) || defined(TRACE_HEADER_MULTI_READ)
+#define KVM_ARM64_TRACE_KVM_H
+
+#include <linux/tracepoint.h>
+
+#undef TRACE_SYSTEM
+#define TRACE_SYSTEM kvm
+
+TRACE_EVENT(kvm_irq_line,
+	TP_PROTO(unsigned int type, int vcpu_idx, int irq_num, int level),
+	TP_ARGS(type, vcpu_idx, irq_num, level),
+
+	TP_STRUCT__entry(
+		__field(	unsigned int,	type		)
+		__field(	int,		vcpu_idx	)
+		__field(	int,		irq_num		)
+		__field(	int,		level		)
+	),
+
+	TP_fast_assign(
+		__entry->type		= type;
+		__entry->vcpu_idx	= vcpu_idx;
+		__entry->irq_num	= irq_num;
+		__entry->level		= level;
+	),
+
+	TP_printk("Inject %s interrupt (%d), vcpu->idx: %d, num: %d, level: %d",
+		  (__entry->type == KVM_ARM_IRQ_TYPE_CPU) ? "CPU" :
+		  (__entry->type == KVM_ARM_IRQ_TYPE_PPI) ? "VGIC PPI" :
+		  (__entry->type == KVM_ARM_IRQ_TYPE_SPI) ? "VGIC SPI" : "UNKNOWN",
+		  __entry->type, __entry->vcpu_idx, __entry->irq_num, __entry->level)
+);
+
+TRACE_EVENT(kvm_mmio_nisv,
+	TP_PROTO(unsigned long vcpu_pc, unsigned long esr,
+		 unsigned long far, unsigned long ipa),
+	TP_ARGS(vcpu_pc, esr, far, ipa),
+
+	TP_STRUCT__entry(
+		__field(	unsigned long,	vcpu_pc		)
+		__field(	unsigned long,	esr		)
+		__field(	unsigned long,	far		)
+		__field(	unsigned long,	ipa		)
+	),
+
+	TP_fast_assign(
+		__entry->vcpu_pc		= vcpu_pc;
+		__entry->esr			= esr;
+		__entry->far			= far;
+		__entry->ipa			= ipa;
+	),
+
+	TP_printk("ipa %#016lx, esr %#016lx, far %#016lx, pc %#016lx",
+		  __entry->ipa, __entry->esr,
+		  __entry->far, __entry->vcpu_pc)
+);
+
+#endif /* KVM_ARM64_TRACE_KVM_H */
+
+#undef TRACE_INCLUDE_PATH
+#define TRACE_INCLUDE_PATH .
+#undef TRACE_INCLUDE_FILE
+#define TRACE_INCLUDE_FILE trace
+
+/* This part must be outside protection */
+#include <trace/define_trace.h>
diff --git a/arch/s390/kvm/gmap/Makefile b/arch/s390/kvm/gmap/Makefile
new file mode 100644
index 0000000000000..02b797f63ffbb
--- /dev/null
+++ b/arch/s390/kvm/gmap/Makefile
@@ -0,0 +1,5 @@
+# SPDX-License-Identifier: GPL-2.0
+
+GMAP ?= ../gmap
+
+kvm-y += $(GMAP)/dat.o $(GMAP)/gmap.o $(GMAP)/faultin.o $(GMAP)/kvm_mmu.o
diff --git a/arch/s390/kvm/dat.c b/arch/s390/kvm/gmap/dat.c
similarity index 61%
rename from arch/s390/kvm/dat.c
rename to arch/s390/kvm/gmap/dat.c
index ed4259d176295..6252a7cd81a8a 100644
--- a/arch/s390/kvm/dat.c
+++ b/arch/s390/kvm/gmap/dat.c
@@ -613,229 +613,6 @@ long _dat_walk_gfn_range(gfn_t start, gfn_t end, union asce asce,
 	return dat_crste_walk_range(start, min(end, asce_end(asce)), table, &walk);
 }
 
-int dat_get_storage_key(union asce asce, gfn_t gfn, union skey *skey)
-{
-	union crste *crstep;
-	union pgste pgste;
-	union pte *ptep;
-	int rc;
-
-	skey->skey = 0;
-	rc = dat_entry_walk(NULL, gfn, asce, DAT_WALK_ANY, TABLE_TYPE_PAGE_TABLE, &crstep, &ptep);
-	if (rc)
-		return rc;
-
-	if (!ptep) {
-		union crste crste;
-
-		crste = READ_ONCE(*crstep);
-		if (!crste.h.fc || !crste.s.fc1.pr)
-			return 0;
-		skey->skey = page_get_storage_key(large_crste_to_phys(crste, gfn));
-		return 0;
-	}
-	pgste = pgste_get_lock(ptep);
-	if (ptep->h.i) {
-		skey->acc = pgste.acc;
-		skey->fp = pgste.fp;
-	} else {
-		skey->skey = page_get_storage_key(pte_origin(*ptep));
-	}
-	skey->r |= pgste.gr;
-	skey->c |= pgste.gc;
-	pgste_set_unlock(ptep, pgste);
-	return 0;
-}
-
-static void dat_update_ptep_sd(union pgste old, union pgste pgste, union pte *ptep)
-{
-	if (pgste.acc != old.acc || pgste.fp != old.fp || pgste.gr != old.gr || pgste.gc != old.gc)
-		__atomic64_or(_PAGE_SD, &ptep->val);
-}
-
-int dat_set_storage_key(struct kvm_s390_mmu_cache *mc, union asce asce, gfn_t gfn,
-			union skey skey, bool nq)
-{
-	union pgste pgste, old;
-	union crste *crstep;
-	union pte *ptep;
-	int rc;
-
-	rc = dat_entry_walk(mc, gfn, asce, DAT_WALK_LEAF_ALLOC, TABLE_TYPE_PAGE_TABLE,
-			    &crstep, &ptep);
-	if (rc)
-		return rc;
-
-	if (!ptep) {
-		page_set_storage_key(large_crste_to_phys(*crstep, gfn), skey.skey, !nq);
-		return 0;
-	}
-
-	old = pgste_get_lock(ptep);
-	pgste = old;
-
-	pgste.acc = skey.acc;
-	pgste.fp = skey.fp;
-	pgste.gc = skey.c;
-	pgste.gr = skey.r;
-
-	if (!ptep->h.i) {
-		union skey old_skey;
-
-		old_skey.skey = page_get_storage_key(pte_origin(*ptep));
-		pgste.hc |= old_skey.c;
-		pgste.hr |= old_skey.r;
-		old_skey.c = old.gc;
-		old_skey.r = old.gr;
-		skey.r = 0;
-		skey.c = 0;
-		page_set_storage_key(pte_origin(*ptep), skey.skey, !nq);
-	}
-
-	dat_update_ptep_sd(old, pgste, ptep);
-	pgste_set_unlock(ptep, pgste);
-	return 0;
-}
-
-static bool page_cond_set_storage_key(phys_addr_t paddr, union skey skey, union skey *oldkey,
-				      bool nq, bool mr, bool mc)
-{
-	oldkey->skey = page_get_storage_key(paddr);
-	if (oldkey->acc == skey.acc && oldkey->fp == skey.fp &&
-	    (oldkey->r == skey.r || mr) && (oldkey->c == skey.c || mc))
-		return false;
-	page_set_storage_key(paddr, skey.skey, !nq);
-	return true;
-}
-
-int dat_cond_set_storage_key(struct kvm_s390_mmu_cache *mmc, union asce asce, gfn_t gfn,
-			     union skey skey, union skey *oldkey, bool nq, bool mr, bool mc)
-{
-	union pgste pgste, old;
-	union crste *crstep;
-	union skey prev;
-	union pte *ptep;
-	int rc;
-
-	rc = dat_entry_walk(mmc, gfn, asce, DAT_WALK_LEAF_ALLOC, TABLE_TYPE_PAGE_TABLE,
-			    &crstep, &ptep);
-	if (rc)
-		return rc;
-
-	if (!ptep)
-		return page_cond_set_storage_key(large_crste_to_phys(*crstep, gfn), skey, oldkey,
-						 nq, mr, mc);
-
-	old = pgste_get_lock(ptep);
-	pgste = old;
-
-	rc = 1;
-	pgste.acc = skey.acc;
-	pgste.fp = skey.fp;
-	pgste.gc = skey.c;
-	pgste.gr = skey.r;
-
-	if (!ptep->h.i) {
-		rc = page_cond_set_storage_key(pte_origin(*ptep), skey, &prev, nq, mr, mc);
-		pgste.hc |= prev.c;
-		pgste.hr |= prev.r;
-		prev.c |= old.gc;
-		prev.r |= old.gr;
-	} else {
-		prev.acc = old.acc;
-		prev.fp = old.fp;
-		prev.c = old.gc;
-		prev.r = old.gr;
-	}
-	if (oldkey)
-		*oldkey = prev;
-
-	dat_update_ptep_sd(old, pgste, ptep);
-	pgste_set_unlock(ptep, pgste);
-	return rc;
-}
-
-int dat_reset_reference_bit(union asce asce, gfn_t gfn)
-{
-	union pgste pgste, old;
-	union crste *crstep;
-	union pte *ptep;
-	int rc;
-
-	rc = dat_entry_walk(NULL, gfn, asce, DAT_WALK_ANY, TABLE_TYPE_PAGE_TABLE, &crstep, &ptep);
-	if (rc)
-		return rc;
-
-	if (!ptep) {
-		union crste crste = READ_ONCE(*crstep);
-
-		if (!crste.h.fc || !crste.s.fc1.pr)
-			return 0;
-		return page_reset_referenced(large_crste_to_phys(*crstep, gfn));
-	}
-	old = pgste_get_lock(ptep);
-	pgste = old;
-
-	if (!ptep->h.i) {
-		rc = page_reset_referenced(pte_origin(*ptep));
-		pgste.hr = rc >> 1;
-	}
-	rc |= (pgste.gr << 1) | pgste.gc;
-	pgste.gr = 0;
-
-	dat_update_ptep_sd(old, pgste, ptep);
-	pgste_set_unlock(ptep, pgste);
-	return rc;
-}
-
-static long dat_reset_skeys_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
-{
-	union pgste pgste;
-
-	pgste = pgste_get_lock(ptep);
-	pgste.acc = 0;
-	pgste.fp = 0;
-	pgste.gr = 0;
-	pgste.gc = 0;
-	if (ptep->s.pr)
-		page_set_storage_key(pte_origin(*ptep), PAGE_DEFAULT_KEY, 1);
-	pgste_set_unlock(ptep, pgste);
-
-	if (need_resched())
-		return next;
-	return 0;
-}
-
-static long dat_reset_skeys_crste(union crste *crstep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
-{
-	phys_addr_t addr, end, origin = crste_origin_large(*crstep);
-
-	if (!crstep->h.fc || !crstep->s.fc1.pr)
-		return 0;
-
-	addr = ((max(gfn, walk->start) - gfn) << PAGE_SHIFT) + origin;
-	end = ((min(next, walk->end) - gfn) << PAGE_SHIFT) + origin;
-	while (ALIGN(addr + 1, _SEGMENT_SIZE) <= end)
-		addr = sske_frame(addr, PAGE_DEFAULT_KEY);
-	for ( ; addr < end; addr += PAGE_SIZE)
-		page_set_storage_key(addr, PAGE_DEFAULT_KEY, 1);
-
-	if (need_resched())
-		return next;
-	return 0;
-}
-
-long dat_reset_skeys(union asce asce, gfn_t start)
-{
-	const struct dat_walk_ops ops = {
-		.pte_entry = dat_reset_skeys_pte,
-		.pmd_entry = dat_reset_skeys_crste,
-		.pud_entry = dat_reset_skeys_crste,
-	};
-
-	return _dat_walk_gfn_range(start, asce_end(asce), asce, &ops, DAT_WALK_IGN_HOLES, NULL);
-}
-
 struct slot_priv {
 	unsigned long token;
 	struct kvm_s390_mmu_cache *mc;
@@ -1000,328 +777,3 @@ bool dat_test_age_gfn(union asce asce, gfn_t start, gfn_t end)
 	return _dat_walk_gfn_range(start, end, asce, &test_age_ops, 0, NULL) > 0;
 }
 
-static long dat_set_pn_crste(union crste *crstep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
-{
-	union crste newcrste, oldcrste;
-	int *n = walk->priv;
-
-	do {
-		oldcrste = READ_ONCE(*crstep);
-		if (!oldcrste.h.fc || oldcrste.h.i || oldcrste.h.p)
-			return 0;
-		if (oldcrste.s.fc1.prefix_notif)
-			break;
-		newcrste = oldcrste;
-		newcrste.s.fc1.prefix_notif = 1;
-	} while (!dat_crstep_xchg_atomic(crstep, oldcrste, newcrste, gfn, walk->asce));
-	*n = 2;
-	return 0;
-}
-
-static long dat_set_pn_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
-{
-	int *n = walk->priv;
-	union pgste pgste;
-
-	pgste = pgste_get_lock(ptep);
-	if (!ptep->h.i && !ptep->h.p) {
-		pgste.prefix_notif = 1;
-		*n += 1;
-	}
-	pgste_set_unlock(ptep, pgste);
-	return 0;
-}
-
-int dat_set_prefix_notif_bit(union asce asce, gfn_t gfn)
-{
-	static const struct dat_walk_ops ops = {
-		.pte_entry = dat_set_pn_pte,
-		.pmd_entry = dat_set_pn_crste,
-		.pud_entry = dat_set_pn_crste,
-	};
-
-	int n = 0;
-
-	_dat_walk_gfn_range(gfn, gfn + 2, asce, &ops, DAT_WALK_IGN_HOLES, &n);
-	if (n != 2)
-		return -EAGAIN;
-	return 0;
-}
-
-/**
- * dat_perform_essa() - Perform ESSA actions on the PGSTE.
- * @asce: The asce to operate on.
- * @gfn: The guest page frame to operate on.
- * @orc: The specific action to perform, see the ESSA_SET_* macros.
- * @state: The storage attributes to be returned to the guest.
- * @dirty: Returns whether the function dirtied a previously clean entry.
- *
- * Context: Called with kvm->mmu_lock held.
- *
- * Return:
- * * %1 if the page state has been altered and the page is to be added to the CBRL
- * * %0 if the page state has been altered, but the page is not to be added to the CBRL
- * * %-1 if the page state has not been altered and the page is not to be added to the CBRL
- */
-int dat_perform_essa(union asce asce, gfn_t gfn, int orc, union essa_state *state, bool *dirty)
-{
-	union crste *crstep;
-	union pgste pgste;
-	union pte *ptep;
-	int res = 0;
-
-	if (dat_entry_walk(NULL, gfn, asce, 0, TABLE_TYPE_PAGE_TABLE, &crstep, &ptep)) {
-		*state = (union essa_state) { .exception = 1 };
-		return -1;
-	}
-
-	pgste = pgste_get_lock(ptep);
-
-	*state = (union essa_state) {
-		.content = (ptep->h.i << 1) + (ptep->h.i && pgste.zero),
-		.nodat = pgste.nodat,
-		.usage = pgste.usage,
-		};
-
-	switch (orc) {
-	case ESSA_GET_STATE:
-		res = -1;
-		break;
-	case ESSA_SET_STABLE:
-		pgste.usage = PGSTE_GPS_USAGE_STABLE;
-		pgste.nodat = 0;
-		break;
-	case ESSA_SET_UNUSED:
-		pgste.usage = PGSTE_GPS_USAGE_UNUSED;
-		if (ptep->h.i)
-			res = 1;
-		break;
-	case ESSA_SET_VOLATILE:
-		pgste.usage = PGSTE_GPS_USAGE_VOLATILE;
-		if (ptep->h.i)
-			res = 1;
-		break;
-	case ESSA_SET_POT_VOLATILE:
-		if (!ptep->h.i) {
-			pgste.usage = PGSTE_GPS_USAGE_POT_VOLATILE;
-		} else if (pgste.zero) {
-			pgste.usage = PGSTE_GPS_USAGE_VOLATILE;
-		} else if (!pgste.gc) {
-			pgste.usage = PGSTE_GPS_USAGE_VOLATILE;
-			res = 1;
-		}
-		break;
-	case ESSA_SET_STABLE_RESIDENT:
-		pgste.usage = PGSTE_GPS_USAGE_STABLE;
-		/*
-		 * Since the resident state can go away any time after this
-		 * call, we will not make this page resident. We can revisit
-		 * this decision if a guest will ever start using this.
-		 */
-		break;
-	case ESSA_SET_STABLE_IF_RESIDENT:
-		if (!ptep->h.i)
-			pgste.usage = PGSTE_GPS_USAGE_STABLE;
-		break;
-	case ESSA_SET_STABLE_NODAT:
-		pgste.usage = PGSTE_GPS_USAGE_STABLE;
-		pgste.nodat = 1;
-		break;
-	default:
-		WARN_ONCE(1, "Invalid ORC!");
-		res = -1;
-		break;
-	}
-	/* If we are discarding a page, set it to logical zero. */
-	pgste.zero = res == 1;
-	if (orc > 0) {
-		*dirty = !pgste.cmma_d;
-		pgste.cmma_d = 1;
-	}
-
-	pgste_set_unlock(ptep, pgste);
-
-	return res;
-}
-
-static long dat_reset_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
-{
-	union pgste pgste;
-
-	pgste = pgste_get_lock(ptep);
-	pgste.usage = 0;
-	pgste.nodat = 0;
-	pgste.cmma_d = 0;
-	pgste_set_unlock(ptep, pgste);
-	if (need_resched())
-		return next;
-	return 0;
-}
-
-long dat_reset_cmma(union asce asce, gfn_t start)
-{
-	const struct dat_walk_ops dat_reset_cmma_ops = {
-		.pte_entry = dat_reset_cmma_pte,
-	};
-
-	return _dat_walk_gfn_range(start, asce_end(asce), asce, &dat_reset_cmma_ops,
-				   DAT_WALK_IGN_HOLES, NULL);
-}
-
-struct dat_get_cmma_state {
-	gfn_t start;
-	gfn_t end;
-	unsigned int count;
-	u8 *values;
-	atomic64_t *remaining;
-};
-
-static long __dat_peek_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
-{
-	struct dat_get_cmma_state *state = walk->priv;
-	union pgste pgste;
-
-	pgste = pgste_get_lock(ptep);
-	state->values[gfn - walk->start] = pgste.usage | (pgste.nodat << 6);
-	pgste_set_unlock(ptep, pgste);
-	state->end = next;
-
-	return 0;
-}
-
-static long __dat_peek_cmma_crste(union crste *crstep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
-{
-	struct dat_get_cmma_state *state = walk->priv;
-
-	if (crstep->h.i)
-		state->end = min(walk->end, next);
-	return 0;
-}
-
-int dat_peek_cmma(gfn_t start, union asce asce, unsigned int *count, u8 *values)
-{
-	const struct dat_walk_ops ops = {
-		.pte_entry = __dat_peek_cmma_pte,
-		.pmd_entry = __dat_peek_cmma_crste,
-		.pud_entry = __dat_peek_cmma_crste,
-		.p4d_entry = __dat_peek_cmma_crste,
-		.pgd_entry = __dat_peek_cmma_crste,
-	};
-	struct dat_get_cmma_state state = { .values = values, };
-	int rc;
-
-	rc = _dat_walk_gfn_range(start, start + *count, asce, &ops, DAT_WALK_DEFAULT, &state);
-	*count = state.end >= start ? state.end - start : 0;
-	/* Return success if at least one value was saved, otherwise an error. */
-	return (rc == -EFAULT && *count > 0) ? 0 : rc;
-}
-
-static long __dat_get_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
-{
-	struct dat_get_cmma_state *state = walk->priv;
-	union pgste pgste;
-
-	if (state->start != -1) {
-		if ((gfn - state->end) > KVM_S390_MAX_BIT_DISTANCE)
-			return 1;
-		if (gfn - state->start >= state->count)
-			return 1;
-	}
-
-	if (!READ_ONCE(*pgste_of(ptep)).cmma_d)
-		return 0;
-
-	pgste = pgste_get_lock(ptep);
-	if (pgste.cmma_d) {
-		if (state->start == -1)
-			state->start = gfn;
-		pgste.cmma_d = 0;
-		atomic64_dec(state->remaining);
-		state->values[gfn - state->start] = pgste.usage | pgste.nodat << 6;
-		state->end = next;
-	}
-	pgste_set_unlock(ptep, pgste);
-	return 0;
-}
-
-int dat_get_cmma(union asce asce, gfn_t *start, unsigned int *count, u8 *values, atomic64_t *rem)
-{
-	const struct dat_walk_ops ops = { .pte_entry = __dat_get_cmma_pte, };
-	struct dat_get_cmma_state state = {
-		.remaining = rem,
-		.values = values,
-		.count = *count,
-		.start = -1,
-	};
-
-	_dat_walk_gfn_range(*start, asce_end(asce), asce, &ops, DAT_WALK_IGN_HOLES, &state);
-	/* If no dirty pages were found, wrap around and continue searching */
-	if (*start && state.start == -1)
-		_dat_walk_gfn_range(0, *start, asce, &ops, DAT_WALK_IGN_HOLES, &state);
-
-	if (state.start == -1) {
-		*count = 0;
-	} else {
-		*count = state.end - state.start;
-		*start = state.start;
-	}
-
-	return 0;
-}
-
-struct dat_set_cmma_state {
-	unsigned long mask;
-	const u8 *bits;
-};
-
-static long __dat_set_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
-{
-	struct dat_set_cmma_state *state = walk->priv;
-	union pgste pgste, tmp;
-
-	tmp.val = (state->bits[gfn - walk->start] << 24) & state->mask;
-
-	pgste = pgste_get_lock(ptep);
-	pgste.usage = tmp.usage;
-	pgste.nodat = tmp.nodat;
-	pgste_set_unlock(ptep, pgste);
-
-	return 0;
-}
-
-/**
- * dat_set_cmma_bits() - Set CMMA bits for a range of guest pages.
- * @mc: Cache used for allocations.
- * @asce: The ASCE of the guest.
- * @gfn: The guest frame of the fist page whose CMMA bits are to set.
- * @count: How many pages need to be processed.
- * @mask: Which PGSTE bits should be set.
- * @bits: Points to an array with the CMMA attributes.
- *
- * This function sets the CMMA attributes for the given pages. If the input
- * buffer has zero length, no action is taken, otherwise the attributes are
- * set and the mm->context.uses_cmm flag is set.
- *
- * Each byte in @bits contains new values for bits 32-39 of the PGSTE.
- * Currently, only the fields NT and US are applied.
- *
- * Return: %0 in case of success, a negative error value otherwise.
- */
-int dat_set_cmma_bits(struct kvm_s390_mmu_cache *mc, union asce asce, gfn_t gfn,
-		      unsigned long count, unsigned long mask, const uint8_t *bits)
-{
-	const struct dat_walk_ops ops = { .pte_entry = __dat_set_cmma_pte, };
-	struct dat_set_cmma_state state = { .mask = mask, .bits = bits, };
-	union crste *crstep;
-	union pte *ptep;
-	gfn_t cur;
-	int rc;
-
-	for (cur = ALIGN_DOWN(gfn, _PAGE_ENTRIES); cur < gfn + count; cur += _PAGE_ENTRIES) {
-		rc = dat_entry_walk(mc, cur, asce, DAT_WALK_ALLOC, TABLE_TYPE_PAGE_TABLE,
-				    &crstep, &ptep);
-		if (rc)
-			return rc;
-	}
-	return _dat_walk_gfn_range(gfn, gfn + count, asce, &ops, DAT_WALK_IGN_HOLES, &state);
-}
diff --git a/arch/s390/kvm/dat.h b/arch/s390/kvm/gmap/dat.h
similarity index 97%
rename from arch/s390/kvm/dat.h
rename to arch/s390/kvm/gmap/dat.h
index fad605305e05c..fb412bd07685d 100644
--- a/arch/s390/kvm/dat.h
+++ b/arch/s390/kvm/gmap/dat.h
@@ -6,8 +6,8 @@
  *    Author(s): Claudio Imbrenda <imbrenda@linux.ibm.com>
  */
 
-#ifndef __KVM_S390_DAT_H
-#define __KVM_S390_DAT_H
+#ifndef ARCH_KVM_GMAP_DAT_H
+#define ARCH_KVM_GMAP_DAT_H
 
 #include <linux/radix-tree.h>
 #include <linux/refcount.h>
@@ -532,20 +532,12 @@ int dat_entry_walk(struct kvm_s390_mmu_cache *mc, gfn_t gfn, union asce asce, in
 void dat_free_level(struct crst_table *table, bool owns_ptes);
 struct crst_table *dat_alloc_crst_sleepable(unsigned long init);
 int dat_set_asce_limit(struct kvm_s390_mmu_cache *mc, union asce *asce, int newtype);
-int dat_get_storage_key(union asce asce, gfn_t gfn, union skey *skey);
-int dat_set_storage_key(struct kvm_s390_mmu_cache *mc, union asce asce, gfn_t gfn,
-			union skey skey, bool nq);
-int dat_cond_set_storage_key(struct kvm_s390_mmu_cache *mmc, union asce asce, gfn_t gfn,
-			     union skey skey, union skey *oldkey, bool nq, bool mr, bool mc);
-int dat_reset_reference_bit(union asce asce, gfn_t gfn);
-long dat_reset_skeys(union asce asce, gfn_t start);
 
 unsigned long dat_get_ptval(struct page_table *table, struct ptval_param param);
 void dat_set_ptval(struct page_table *table, struct ptval_param param, unsigned long val);
 
 int dat_set_slot(struct kvm_s390_mmu_cache *mc, union asce asce, gfn_t start, gfn_t end,
 		 u16 type, u16 param);
-int dat_set_prefix_notif_bit(union asce asce, gfn_t gfn);
 bool dat_test_age_gfn(union asce asce, gfn_t start, gfn_t end);
 
 int dat_perform_essa(union asce asce, gfn_t gfn, int orc, union essa_state *state, bool *dirty);
@@ -975,4 +967,4 @@ static inline bool crste_is_ucas(union crste crste)
 	return is_pmd(crste) && crste.h.i && crste.h.fc0.tl == 1 && crste.h.fc == 0;
 }
 
-#endif /* __KVM_S390_DAT_H */
+#endif /* ARCH_KVM_GMAP_DAT_H */
diff --git a/arch/s390/kvm/faultin.c b/arch/s390/kvm/gmap/faultin.c
similarity index 96%
rename from arch/s390/kvm/faultin.c
rename to arch/s390/kvm/gmap/faultin.c
index fee80047bd94f..800e129ca40c9 100644
--- a/arch/s390/kvm/faultin.c
+++ b/arch/s390/kvm/gmap/faultin.c
@@ -9,10 +9,16 @@
 #include <linux/kvm_host.h>
 
 #include "gmap.h"
-#include "trace.h"
 #include "faultin.h"
+#ifdef KVM_S390_ARM64
+#include "arm.h"
+#else
+#include "s390.h"
+#endif
 
 bool kvm_arch_setup_async_pf(struct kvm_vcpu *vcpu);
+#define CREATE_TRACE_POINTS
+#include "trace-gmap.h"
 
 /*
  * kvm_s390_faultin_gfn() - handle a dat fault.
diff --git a/arch/s390/kvm/faultin.h b/arch/s390/kvm/gmap/faultin.h
similarity index 96%
rename from arch/s390/kvm/faultin.h
rename to arch/s390/kvm/gmap/faultin.h
index f86176d2769c5..f343b6fb6f16a 100644
--- a/arch/s390/kvm/faultin.h
+++ b/arch/s390/kvm/gmap/faultin.h
@@ -6,8 +6,8 @@
  *    Author(s): Claudio Imbrenda <imbrenda@linux.ibm.com>
  */
 
-#ifndef __KVM_S390_FAULTIN_H
-#define __KVM_S390_FAULTIN_H
+#ifndef ARCH_KVM_GMAP_FAULTIN_H
+#define ARCH_KVM_GMAP_FAULTIN_H
 
 #include <linux/kvm_host.h>
 
@@ -89,4 +89,4 @@ static inline int kvm_s390_get_guest_pages(struct kvm *kvm, struct guest_fault *
 #define kvm_s390_array_needs_retry_safe(kvm, seq, array) \
 	kvm_s390_multiple_faults_need_retry(kvm, seq, array, ARRAY_SIZE(array), false)
 
-#endif /* __KVM_S390_FAULTIN_H */
+#endif /* ARCH_KVM_GMAP_FAULTIN_H */
diff --git a/arch/s390/kvm/gmap.c b/arch/s390/kvm/gmap/gmap.c
similarity index 93%
rename from arch/s390/kvm/gmap.c
rename to arch/s390/kvm/gmap/gmap.c
index 8abb4f55b306b..492a12a3a4499 100644
--- a/arch/s390/kvm/gmap.c
+++ b/arch/s390/kvm/gmap/gmap.c
@@ -21,14 +21,13 @@
 
 #include "dat.h"
 #include "gmap.h"
-#include "kvm-s390.h"
+#ifdef KVM_S390_ARM64
+#include "arm.h"
+#else
+#include "s390.h"
+#endif
 #include "faultin.h"
 
-static inline bool kvm_s390_is_in_sie(struct kvm_vcpu *vcpu)
-{
-	return vcpu->arch.sie_block->prog0c & PROG_IN_SIE;
-}
-
 static int gmap_limit_to_type(gfn_t limit)
 {
 	if (!limit)
@@ -256,29 +255,6 @@ int s390_replace_asce(struct gmap *gmap)
 	return 0;
 }
 
-bool _gmap_unmap_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end, bool hint)
-{
-	struct kvm *kvm = gmap->kvm;
-	struct kvm_vcpu *vcpu;
-	gfn_t prefix_gfn;
-	unsigned long i;
-
-	if (is_shadow(gmap))
-		return false;
-	kvm_for_each_vcpu(i, vcpu, kvm) {
-		/* Match against both prefix pages */
-		prefix_gfn = gpa_to_gfn(kvm_s390_get_prefix(vcpu));
-		if (prefix_gfn < end && gfn <= prefix_gfn + 1) {
-			if (hint && kvm_s390_is_in_sie(vcpu))
-				return false;
-			VCPU_EVENT(vcpu, 2, "gmap notifier for %llx-%llx",
-				   gfn_to_gpa(gfn), gfn_to_gpa(end));
-			kvm_s390_sync_request(KVM_REQ_REFRESH_GUEST_PREFIX, vcpu);
-		}
-	}
-	return true;
-}
-
 struct clear_young_pte_priv {
 	struct gmap *gmap;
 	bool young;
@@ -945,39 +921,6 @@ void gmap_split_huge_pages(struct gmap *gmap)
 	} while (start);
 }
 
-static int _gmap_enable_skeys(struct gmap *gmap)
-{
-	gfn_t start = 0;
-	int rc;
-
-	if (uses_skeys(gmap))
-		return 0;
-
-	set_bit(GMAP_FLAG_USES_SKEYS, &gmap->flags);
-	rc = gmap_helper_disable_cow_sharing();
-	if (rc) {
-		clear_bit(GMAP_FLAG_USES_SKEYS, &gmap->flags);
-		return rc;
-	}
-
-	do {
-		scoped_guard(write_lock, &gmap->kvm->mmu_lock)
-			start = dat_reset_skeys(gmap->asce, start);
-		cond_resched();
-	} while (start);
-	return 0;
-}
-
-int gmap_enable_skeys(struct gmap *gmap)
-{
-	int rc;
-
-	mmap_write_lock(gmap->kvm->mm);
-	rc = _gmap_enable_skeys(gmap);
-	mmap_write_unlock(gmap->kvm->mm);
-	return rc;
-}
-
 static long _destroy_pages_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
 {
 	if (!ptep->s.pr)
@@ -1098,50 +1041,6 @@ int gmap_protect_rmap(struct kvm_s390_mmu_cache *mc, struct gmap *sg, gfn_t p_gf
 	return 0;
 }
 
-static long __set_cmma_clean_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
-{
-	union pgste pgste;
-
-	pgste = pgste_get_lock(ptep);
-	pgste.cmma_d = 0;
-	pgste_set_unlock(ptep, pgste);
-
-	if (need_resched())
-		return next;
-	return 0;
-}
-
-static long __set_cmma_dirty_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
-{
-	union pgste pgste;
-
-	pgste = pgste_get_lock(ptep);
-	if (!pgste.cmma_d)
-		atomic64_inc(walk->priv);
-	pgste.cmma_d = 1;
-	pgste_set_unlock(ptep, pgste);
-
-	if (need_resched())
-		return next;
-	return 0;
-}
-
-void _gmap_set_cmma_all(struct gmap *gmap, bool dirty)
-{
-	const struct dat_walk_ops ops = {
-		.pte_entry = dirty ? __set_cmma_dirty_pte : __set_cmma_clean_pte,
-	};
-	gfn_t gfn = 0;
-
-	do {
-		scoped_guard(read_lock, &gmap->kvm->mmu_lock)
-			gfn = _dat_walk_gfn_range(gfn, asce_end(gmap->asce), gmap->asce, &ops,
-						  DAT_WALK_IGN_HOLES,
-						  &gmap->kvm->arch.cmma_dirty_pages);
-		cond_resched();
-	} while (gfn);
-}
-
 static void gmap_unshadow_level(struct gmap *sg, gfn_t r_gfn, int level)
 {
 	unsigned long align = PAGE_SIZE;
diff --git a/arch/s390/kvm/gmap.h b/arch/s390/kvm/gmap/gmap.h
similarity index 94%
rename from arch/s390/kvm/gmap.h
rename to arch/s390/kvm/gmap/gmap.h
index 39938d363ec9b..28ab585db7e12 100644
--- a/arch/s390/kvm/gmap.h
+++ b/arch/s390/kvm/gmap/gmap.h
@@ -7,10 +7,11 @@
  *               Claudio Imbrenda <imbrenda@linux.ibm.com>
  */
 
-#ifndef ARCH_KVM_S390_GMAP_H
-#define ARCH_KVM_S390_GMAP_H
+#ifndef ARCH_KVM_GMAP_GMAP_H
+#define ARCH_KVM_GMAP_GMAP_H
 
 #include "dat.h"
+#include "prefix.h"
 
 /**
  * enum gmap_flags - Flags of a gmap.
@@ -83,7 +84,6 @@ struct gmap_cache {
 	for (pos = (head); n = pos ? pos->next : NULL, pos; pos = n)
 
 int s390_replace_asce(struct gmap *gmap);
-bool _gmap_unmap_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end, bool hint);
 bool gmap_age_gfn(struct gmap *gmap, gfn_t start, gfn_t end);
 bool gmap_unmap_gfn_range(struct gmap *gmap, struct kvm_memory_slot *slot, gfn_t start, gfn_t end);
 int gmap_try_fixup_minor(struct gmap *gmap, struct guest_fault *fault);
@@ -104,7 +104,6 @@ int gmap_insert_rmap(struct kvm_s390_mmu_cache *mc, struct gmap *sg, gfn_t p_gfn
 		     gfn_t r_gfn, int level);
 int gmap_protect_rmap(struct kvm_s390_mmu_cache *mc, struct gmap *sg, gfn_t p_gfn, gfn_t r_gfn,
 		      kvm_pfn_t pfn, int level, bool wr);
-void _gmap_set_cmma_all(struct gmap *gmap, bool dirty);
 void _gmap_handle_vsie_unshadow_event(struct gmap *parent, gfn_t gfn);
 struct gmap *gmap_create_shadow(struct kvm_s390_mmu_cache *mc, struct gmap *gmap,
 				union asce asce, int edat_level);
@@ -158,16 +157,6 @@ static inline void gmap_handle_vsie_unshadow_event(struct gmap *parent, gfn_t gf
 		_gmap_handle_vsie_unshadow_event(parent, gfn);
 }
 
-static inline bool gmap_mkold_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end)
-{
-	return _gmap_unmap_prefix(gmap, gfn, end, true);
-}
-
-static inline bool gmap_unmap_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end)
-{
-	return _gmap_unmap_prefix(gmap, gfn, end, false);
-}
-
 /**
  * pte_needs_unshadow() -- Check if the pte operations triggers unshadowing.
  * @oldpte: the previous value for the guest pte.
@@ -198,16 +187,6 @@ static inline bool pte_needs_unshadow(union pte oldpte, union pte newpte, union
 	return !newpte.h.p || !newpte.s.pr;
 }
 
-static inline void gmap_set_cmma_all_dirty(struct gmap *gmap)
-{
-	_gmap_set_cmma_all(gmap, true);
-}
-
-static inline void gmap_set_cmma_all_clean(struct gmap *gmap)
-{
-	_gmap_set_cmma_all(gmap, false);
-}
-
 static inline union pgste _gmap_ptep_xchg(struct gmap *gmap, union pte *ptep, union pte newpte,
 					  union pgste pgste, gfn_t gfn, bool needs_lock)
 {
@@ -330,4 +309,4 @@ static inline bool gmap_is_shadow_valid(struct gmap *sg, union asce asce, int ed
 	return sg->guest_asce.val == asce.val && sg->edat_level == edat_level;
 }
 
-#endif /* ARCH_KVM_S390_GMAP_H */
+#endif /* ARCH_KVM_GMAP_GMAP_H */
diff --git a/arch/s390/kvm/gmap/kvm_mmu.c b/arch/s390/kvm/gmap/kvm_mmu.c
new file mode 100644
index 0000000000000..88d2187375da8
--- /dev/null
+++ b/arch/s390/kvm/gmap/kvm_mmu.c
@@ -0,0 +1,135 @@
+// SPDX-License-Identifier: GPL-2.0
+
+#include <linux/kvm_types.h>
+#include <linux/kvm_host.h>
+
+#ifdef KVM_S390_ARM64
+#include "arm.h"
+#else
+#include "s390.h"
+#endif
+#include "gmap.h"
+#include "dat.h"
+#include "kvm_mmu.h"
+
+/*
+ * Get (and clear) the dirty memory log for a memory slot.
+ */
+int s390_kvm_mmu_get_dirty_log(struct kvm *kvm, struct kvm_dirty_log *log)
+{
+	int r;
+	unsigned long n;
+	struct kvm_memory_slot *memslot;
+	int is_dirty;
+
+	if (kvm_is_ucontrol(kvm))
+		return -EINVAL;
+
+	mutex_lock(&kvm->slots_lock);
+
+	r = -EINVAL;
+	if (log->slot >= KVM_USER_MEM_SLOTS)
+		goto out;
+
+	r = kvm_get_dirty_log(kvm, log, &is_dirty, &memslot);
+	if (r)
+		goto out;
+
+	/* Clear the dirty log */
+	if (is_dirty) {
+		n = kvm_dirty_bitmap_bytes(memslot);
+		memset(memslot->dirty_bitmap, 0, n);
+	}
+	r = 0;
+out:
+	mutex_unlock(&kvm->slots_lock);
+	return r;
+}
+
+int s390_kvm_mmu_prepare_memory_region(struct kvm *kvm,
+			       const struct kvm_memory_slot *old,
+			       struct kvm_memory_slot *new,
+			       enum kvm_mr_change change)
+{
+	if (kvm_is_ucontrol(kvm) && new && new->id < KVM_USER_MEM_SLOTS)
+		return -EINVAL;
+
+	/* When we are protected, we should not change the memory slots */
+	if (kvm_s390_pv_get_handle(kvm))
+		return -EINVAL;
+
+	if (change != KVM_MR_DELETE && change != KVM_MR_FLAGS_ONLY) {
+		/*
+		 * A few sanity checks. The memory in userland is ok to be
+		 * fragmented into various different vmas. It is okay to mmap()
+		 * and munmap() stuff in this slot after doing this call at any
+		 * time.
+		 */
+		if (new->userspace_addr & ~PAGE_MASK)
+			return -EINVAL;
+		if ((new->base_gfn + new->npages) * PAGE_SIZE > kvm->arch.mem_limit)
+			return -EINVAL;
+		if (!asce_contains_gfn(kvm->arch.gmap->asce, new->base_gfn + new->npages - 1))
+			return -EINVAL;
+	}
+
+	if (!kvm_s390_is_migration_mode(kvm))
+		return 0;
+
+	/*
+	 * Turn off migration mode when:
+	 * - userspace creates a new memslot with dirty logging off,
+	 * - userspace modifies an existing memslot (MOVE or FLAGS_ONLY) and
+	 *   dirty logging is turned off.
+	 * Migration mode expects dirty page logging being enabled to store
+	 * its dirty bitmap.
+	 */
+	if (change != KVM_MR_DELETE &&
+	    !(new->flags & KVM_MEM_LOG_DIRTY_PAGES))
+		WARN(kvm_s390_vm_stop_migration(kvm),
+		     "Failed to stop migration mode");
+
+	return 0;
+}
+
+void s390_kvm_mmu_commit_memory_region(struct kvm *kvm,
+			       struct kvm_memory_slot *old,
+			       const struct kvm_memory_slot *new,
+			       enum kvm_mr_change change)
+{
+	struct kvm_s390_mmu_cache *mc = NULL;
+	int rc = 0;
+
+	if (change == KVM_MR_FLAGS_ONLY)
+		return;
+
+	mc = kvm_s390_new_mmu_cache();
+	if (!mc) {
+		rc = -ENOMEM;
+		goto out;
+	}
+
+	scoped_guard(write_lock, &kvm->mmu_lock) {
+		switch (change) {
+		case KVM_MR_DELETE:
+			rc = dat_delete_slot(mc, kvm->arch.gmap->asce, old->base_gfn, old->npages);
+			break;
+		case KVM_MR_MOVE:
+			rc = dat_delete_slot(mc, kvm->arch.gmap->asce, old->base_gfn, old->npages);
+			if (rc)
+				break;
+			fallthrough;
+		case KVM_MR_CREATE:
+			rc = dat_create_slot(mc, kvm->arch.gmap->asce, new->base_gfn, new->npages);
+			break;
+		case KVM_MR_FLAGS_ONLY:
+			break;
+		default:
+			WARN(1, "Unknown KVM MR CHANGE: %d\n", change);
+		}
+	}
+out:
+	if (rc)
+		pr_warn("failed to commit memory region\n");
+	kvm_s390_free_mmu_cache(mc);
+}
diff --git a/arch/s390/kvm/gmap/kvm_mmu.h b/arch/s390/kvm/gmap/kvm_mmu.h
new file mode 100644
index 0000000000000..4167eaec8f6fd
--- /dev/null
+++ b/arch/s390/kvm/gmap/kvm_mmu.h
@@ -0,0 +1,18 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+
+#ifndef ARCH_KVM_GMAP_MMU_H
+#define ARCH_KVM_GMAP_MMU_H
+
+#include <linux/kvm_host.h>
+
+int s390_kvm_mmu_get_dirty_log(struct kvm *kvm, struct kvm_dirty_log *log);
+int s390_kvm_mmu_prepare_memory_region(struct kvm *kvm,
+				       const struct kvm_memory_slot *old,
+				       struct kvm_memory_slot *new,
+				       enum kvm_mr_change change);
+void s390_kvm_mmu_commit_memory_region(struct kvm *kvm,
+				       struct kvm_memory_slot *old,
+				       const struct kvm_memory_slot *new,
+				       enum kvm_mr_change change);
+
+#endif /* ARCH_KVM_GMAP_MMU_H */
diff --git a/arch/s390/kvm/gmap/prefix.h b/arch/s390/kvm/gmap/prefix.h
new file mode 100644
index 0000000000000..f83b6c2c4afa3
--- /dev/null
+++ b/arch/s390/kvm/gmap/prefix.h
@@ -0,0 +1,39 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+
+#ifndef ARCH_KVM_GMAP_PREFIX_H
+#define ARCH_KVM_GMAP_PREFIX_H
+
+#include "asm/dat-bits.h"
+#include <linux/types.h>
+#include <linux/kvm_types.h>
+#include <linux/kvm_host.h>
+
+struct gmap;
+union asce;
+
+#ifdef KVM_S390_GUEST_HAS_PREFIX
+bool _gmap_unmap_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end, bool hint);
+int dat_set_prefix_notif_bit(union asce asce, gfn_t gfn);
+#else
+static inline bool _gmap_unmap_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end, bool hint)
+{
+	return true;
+}
+
+static inline int dat_set_prefix_notif_bit(union asce asce, gfn_t gfn)
+{
+	return 0;
+}
+#endif /* KVM_S390_GUEST_HAS_PREFIX */
+
+static inline bool gmap_mkold_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end)
+{
+	return _gmap_unmap_prefix(gmap, gfn, end, true);
+}
+
+static inline bool gmap_unmap_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end)
+{
+	return _gmap_unmap_prefix(gmap, gfn, end, false);
+}
+
+#endif /* ARCH_KVM_GMAP_PREFIX_H */
diff --git a/arch/s390/kvm/gmap/trace-gmap.h b/arch/s390/kvm/gmap/trace-gmap.h
new file mode 100644
index 0000000000000..25f8a527fddea
--- /dev/null
+++ b/arch/s390/kvm/gmap/trace-gmap.h
@@ -0,0 +1,59 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+#if !defined(GMAP_TRACE_KVM_H) || defined(TRACE_HEADER_MULTI_READ)
+#define GMAP_TRACE_KVM_H
+
+#include <linux/tracepoint.h>
+
+#undef TRACE_SYSTEM
+#define TRACE_SYSTEM kvm
+#define TRACE_INCLUDE_PATH ../gmap
+#undef TRACE_INCLUDE_FILE
+#define TRACE_INCLUDE_FILE trace-gmap
+
+#ifdef KVM_S390_ARM64
+#define __KVM_FIELDS \
+	__field(unsigned long, pstate) \
+	__field(unsigned long, pc)
+#define __KVM_ASSIGN ({\
+	__entry->pstate = vcpu->arch.sae_block.pstate; \
+	__entry->pc = vcpu->arch.sae_block.pc; \
+	})
+#define __KVM_PRINT \
+	__entry->pstate, \
+	__entry->pc
+#else
+#define __KVM_FIELDS \
+	__field(unsigned long, pswmask) \
+	__field(unsigned long, pswaddr)
+#define __KVM_ASSIGN ({\
+	__entry->pswmask = vcpu->arch.sie_block->gpsw.mask; \
+	__entry->pswaddr = vcpu->arch.sie_block->gpsw.addr; \
+	})
+#define __KVM_PRINT \
+	__entry->pswmask,\
+	__entry->pswaddr
+#endif
+
+TRACE_EVENT(kvm_s390_major_guest_pfault,
+	    TP_PROTO(struct kvm_vcpu *vcpu),
+	    TP_ARGS(vcpu),
+
+	    TP_STRUCT__entry(
+		__field(int, id)
+		__KVM_FIELDS
+		),
+
+	    TP_fast_assign(
+		__entry->id = vcpu->vcpu_id;
+		__KVM_ASSIGN
+		),
+	    TP_printk("%02d[%016lx-%016lx]: major fault, maybe applicable for pfault",
+		__entry->id,
+		__KVM_PRINT
+		)
+	    );
+
+#endif /* GMAP_TRACE_KVM_H */
+
+/* This part must be outside protection */
+#include <trace/define_trace.h>
diff --git a/arch/s390/kvm/s390/Kconfig b/arch/s390/kvm/s390/Kconfig
new file mode 100644
index 0000000000000..bacfa1a48446b
--- /dev/null
+++ b/arch/s390/kvm/s390/Kconfig
@@ -0,0 +1,39 @@
+# SPDX-License-Identifier: GPL-2.0
+
+config KVM_S390
+	def_tristate y
+	prompt "Kernel-based Virtual Machine (KVM) support (s390)"
+	select HAVE_KVM_CPU_RELAX_INTERCEPT
+	select KVM_ASYNC_PF
+	select KVM_ASYNC_PF_SYNC
+	select KVM_COMMON
+	select KVM
+	select HAVE_KVM_IRQCHIP
+	select HAVE_KVM_IRQ_ROUTING
+	select HAVE_KVM_INVALID_WAKEUPS
+	select HAVE_KVM_NO_POLL
+	select KVM_VFIO
+	select VIRT_XFER_TO_GUEST_WORK
+	select KVM_MMU_LOCKLESS_AGING
+	select KVM_GENERIC_PRE_FAULT_MEMORY
+	help
+	  Support hosting paravirtualized s390 guest machines using the SIE
+	  virtualization capability on the mainframe. This should work
+	  on any 64bit machine.
+
+	  This module provides access to the hardware capabilities through
+	  a character device node named /dev/kvm.
+
+	  To compile this as a module, choose M here: the module
+	  will be called kvm.
+
+	  If unsure, say N.
+
+config KVM_S390_UCONTROL
+	bool "Userspace controlled virtual machines"
+	depends on KVM_S390
+	help
+	  Allow CAP_SYS_ADMIN users to create KVM virtual machines that are
+	  controlled by userspace.
+
+	  If unsure, say N.
diff --git a/arch/s390/kvm/s390/Makefile b/arch/s390/kvm/s390/Makefile
new file mode 100644
index 0000000000000..1a1e8ce804005
--- /dev/null
+++ b/arch/s390/kvm/s390/Makefile
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: GPL-2.0
+
+KVM := ../../../../virt/kvm
+include $(srctree)/virt/kvm/Makefile.kvm
+include $(srctree)/arch/s390/kvm/gmap/Makefile
+
+ccflags-y := -I$(src) -I$(srctree)/arch/s390/kvm/gmap
+
+kvm-y += s390.o intercept.o interrupt.o priv.o sigp.o
+kvm-y += diag.o gaccess.o guestdbg.o vsie.o pv.o
+kvm-y += dat.o gmap.o
+
+kvm-$(CONFIG_VFIO_PCI_ZDEV_KVM) += pci.o
+
+obj-$(CONFIG_KVM_S390) += kvm.o
diff --git a/arch/s390/kvm/s390/dat.c b/arch/s390/kvm/s390/dat.c
new file mode 100644
index 0000000000000..a56b1523e6e4b
--- /dev/null
+++ b/arch/s390/kvm/s390/dat.c
@@ -0,0 +1,554 @@
+// SPDX-License-Identifier: GPL-2.0
+
+#include <asm/page-states.h>
+
+#include "s390.h"
+
+int dat_get_storage_key(union asce asce, gfn_t gfn, union skey *skey)
+{
+	union crste *crstep;
+	union pgste pgste;
+	union pte *ptep;
+	int rc;
+
+	skey->skey = 0;
+	rc = dat_entry_walk(NULL, gfn, asce, DAT_WALK_ANY, TABLE_TYPE_PAGE_TABLE, &crstep, &ptep);
+	if (rc)
+		return rc;
+
+	if (!ptep) {
+		union crste crste;
+
+		crste = READ_ONCE(*crstep);
+		if (!crste.h.fc || !crste.s.fc1.pr)
+			return 0;
+		skey->skey = page_get_storage_key(large_crste_to_phys(crste, gfn));
+		return 0;
+	}
+	pgste = pgste_get_lock(ptep);
+	if (ptep->h.i) {
+		skey->acc = pgste.acc;
+		skey->fp = pgste.fp;
+	} else {
+		skey->skey = page_get_storage_key(pte_origin(*ptep));
+	}
+	skey->r |= pgste.gr;
+	skey->c |= pgste.gc;
+	pgste_set_unlock(ptep, pgste);
+	return 0;
+}
+
+static void dat_update_ptep_sd(union pgste old, union pgste pgste, union pte *ptep)
+{
+	if (pgste.acc != old.acc || pgste.fp != old.fp || pgste.gr != old.gr || pgste.gc != old.gc)
+		__atomic64_or(_PAGE_SD, &ptep->val);
+}
+
+int dat_set_storage_key(struct kvm_s390_mmu_cache *mc, union asce asce, gfn_t gfn,
+			union skey skey, bool nq)
+{
+	union pgste pgste, old;
+	union crste *crstep;
+	union pte *ptep;
+	int rc;
+
+	rc = dat_entry_walk(mc, gfn, asce, DAT_WALK_LEAF_ALLOC, TABLE_TYPE_PAGE_TABLE,
+			    &crstep, &ptep);
+	if (rc)
+		return rc;
+
+	if (!ptep) {
+		page_set_storage_key(large_crste_to_phys(*crstep, gfn), skey.skey, !nq);
+		return 0;
+	}
+
+	old = pgste_get_lock(ptep);
+	pgste = old;
+
+	pgste.acc = skey.acc;
+	pgste.fp = skey.fp;
+	pgste.gc = skey.c;
+	pgste.gr = skey.r;
+
+	if (!ptep->h.i) {
+		union skey old_skey;
+
+		old_skey.skey = page_get_storage_key(pte_origin(*ptep));
+		pgste.hc |= old_skey.c;
+		pgste.hr |= old_skey.r;
+		old_skey.c = old.gc;
+		old_skey.r = old.gr;
+		skey.r = 0;
+		skey.c = 0;
+		page_set_storage_key(pte_origin(*ptep), skey.skey, !nq);
+	}
+
+	dat_update_ptep_sd(old, pgste, ptep);
+	pgste_set_unlock(ptep, pgste);
+	return 0;
+}
+
+static bool page_cond_set_storage_key(phys_addr_t paddr, union skey skey, union skey *oldkey,
+				      bool nq, bool mr, bool mc)
+{
+	oldkey->skey = page_get_storage_key(paddr);
+	if (oldkey->acc == skey.acc && oldkey->fp == skey.fp &&
+	    (oldkey->r == skey.r || mr) && (oldkey->c == skey.c || mc))
+		return false;
+	page_set_storage_key(paddr, skey.skey, !nq);
+	return true;
+}
+
+int dat_cond_set_storage_key(struct kvm_s390_mmu_cache *mmc, union asce asce, gfn_t gfn,
+			     union skey skey, union skey *oldkey, bool nq, bool mr, bool mc)
+{
+	union pgste pgste, old;
+	union crste *crstep;
+	union skey prev;
+	union pte *ptep;
+	int rc;
+
+	rc = dat_entry_walk(mmc, gfn, asce, DAT_WALK_LEAF_ALLOC, TABLE_TYPE_PAGE_TABLE,
+			    &crstep, &ptep);
+	if (rc)
+		return rc;
+
+	if (!ptep)
+		return page_cond_set_storage_key(large_crste_to_phys(*crstep, gfn), skey, oldkey,
+						 nq, mr, mc);
+
+	old = pgste_get_lock(ptep);
+	pgste = old;
+
+	rc = 1;
+	pgste.acc = skey.acc;
+	pgste.fp = skey.fp;
+	pgste.gc = skey.c;
+	pgste.gr = skey.r;
+
+	if (!ptep->h.i) {
+		rc = page_cond_set_storage_key(pte_origin(*ptep), skey, &prev, nq, mr, mc);
+		pgste.hc |= prev.c;
+		pgste.hr |= prev.r;
+		prev.c |= old.gc;
+		prev.r |= old.gr;
+	} else {
+		prev.acc = old.acc;
+		prev.fp = old.fp;
+		prev.c = old.gc;
+		prev.r = old.gr;
+	}
+	if (oldkey)
+		*oldkey = prev;
+
+	dat_update_ptep_sd(old, pgste, ptep);
+	pgste_set_unlock(ptep, pgste);
+	return rc;
+}
+
+int dat_reset_reference_bit(union asce asce, gfn_t gfn)
+{
+	union pgste pgste, old;
+	union crste *crstep;
+	union pte *ptep;
+	int rc;
+
+	rc = dat_entry_walk(NULL, gfn, asce, DAT_WALK_ANY, TABLE_TYPE_PAGE_TABLE, &crstep, &ptep);
+	if (rc)
+		return rc;
+
+	if (!ptep) {
+		union crste crste = READ_ONCE(*crstep);
+
+		if (!crste.h.fc || !crste.s.fc1.pr)
+			return 0;
+		return page_reset_referenced(large_crste_to_phys(*crstep, gfn));
+	}
+	old = pgste_get_lock(ptep);
+	pgste = old;
+
+	if (!ptep->h.i) {
+		rc = page_reset_referenced(pte_origin(*ptep));
+		pgste.hr = rc >> 1;
+	}
+	rc |= (pgste.gr << 1) | pgste.gc;
+	pgste.gr = 0;
+
+	dat_update_ptep_sd(old, pgste, ptep);
+	pgste_set_unlock(ptep, pgste);
+	return rc;
+}
+
+static long dat_reset_skeys_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
+{
+	union pgste pgste;
+
+	pgste = pgste_get_lock(ptep);
+	pgste.acc = 0;
+	pgste.fp = 0;
+	pgste.gr = 0;
+	pgste.gc = 0;
+	if (ptep->s.pr)
+		page_set_storage_key(pte_origin(*ptep), PAGE_DEFAULT_KEY, 1);
+	pgste_set_unlock(ptep, pgste);
+
+	if (need_resched())
+		return next;
+	return 0;
+}
+
+static long dat_reset_skeys_crste(union crste *crstep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
+{
+	phys_addr_t addr, end, origin = crste_origin_large(*crstep);
+
+	if (!crstep->h.fc || !crstep->s.fc1.pr)
+		return 0;
+
+	addr = ((max(gfn, walk->start) - gfn) << PAGE_SHIFT) + origin;
+	end = ((min(next, walk->end) - gfn) << PAGE_SHIFT) + origin;
+	while (ALIGN(addr + 1, _SEGMENT_SIZE) <= end)
+		addr = sske_frame(addr, PAGE_DEFAULT_KEY);
+	for ( ; addr < end; addr += PAGE_SIZE)
+		page_set_storage_key(addr, PAGE_DEFAULT_KEY, 1);
+
+	if (need_resched())
+		return next;
+	return 0;
+}
+
+long dat_reset_skeys(union asce asce, gfn_t start)
+{
+	const struct dat_walk_ops ops = {
+		.pte_entry = dat_reset_skeys_pte,
+		.pmd_entry = dat_reset_skeys_crste,
+		.pud_entry = dat_reset_skeys_crste,
+	};
+
+	return _dat_walk_gfn_range(start, asce_end(asce), asce, &ops, DAT_WALK_IGN_HOLES, NULL);
+}
+
+/**
+ * dat_perform_essa() - Perform ESSA actions on the PGSTE.
+ * @asce: The asce to operate on.
+ * @gfn: The guest page frame to operate on.
+ * @orc: The specific action to perform, see the ESSA_SET_* macros.
+ * @state: The storage attributes to be returned to the guest.
+ * @dirty: Returns whether the function dirtied a previously clean entry.
+ *
+ * Context: Called with kvm->mmu_lock held.
+ *
+ * Return:
+ * * %1 if the page state has been altered and the page is to be added to the CBRL
+ * * %0 if the page state has been altered, but the page is not to be added to the CBRL
+ * * %-1 if the page state has not been altered and the page is not to be added to the CBRL
+ */
+int dat_perform_essa(union asce asce, gfn_t gfn, int orc, union essa_state *state, bool *dirty)
+{
+	union crste *crstep;
+	union pgste pgste;
+	union pte *ptep;
+	int res = 0;
+
+	if (dat_entry_walk(NULL, gfn, asce, 0, TABLE_TYPE_PAGE_TABLE, &crstep, &ptep)) {
+		*state = (union essa_state) { .exception = 1 };
+		return -1;
+	}
+
+	pgste = pgste_get_lock(ptep);
+
+	*state = (union essa_state) {
+		.content = (ptep->h.i << 1) + (ptep->h.i && pgste.zero),
+		.nodat = pgste.nodat,
+		.usage = pgste.usage,
+		};
+
+	switch (orc) {
+	case ESSA_GET_STATE:
+		res = -1;
+		break;
+	case ESSA_SET_STABLE:
+		pgste.usage = PGSTE_GPS_USAGE_STABLE;
+		pgste.nodat = 0;
+		break;
+	case ESSA_SET_UNUSED:
+		pgste.usage = PGSTE_GPS_USAGE_UNUSED;
+		if (ptep->h.i)
+			res = 1;
+		break;
+	case ESSA_SET_VOLATILE:
+		pgste.usage = PGSTE_GPS_USAGE_VOLATILE;
+		if (ptep->h.i)
+			res = 1;
+		break;
+	case ESSA_SET_POT_VOLATILE:
+		if (!ptep->h.i) {
+			pgste.usage = PGSTE_GPS_USAGE_POT_VOLATILE;
+		} else if (pgste.zero) {
+			pgste.usage = PGSTE_GPS_USAGE_VOLATILE;
+		} else if (!pgste.gc) {
+			pgste.usage = PGSTE_GPS_USAGE_VOLATILE;
+			res = 1;
+		}
+		break;
+	case ESSA_SET_STABLE_RESIDENT:
+		pgste.usage = PGSTE_GPS_USAGE_STABLE;
+		/*
+		 * Since the resident state can go away any time after this
+		 * call, we will not make this page resident. We can revisit
+		 * this decision if a guest will ever start using this.
+		 */
+		break;
+	case ESSA_SET_STABLE_IF_RESIDENT:
+		if (!ptep->h.i)
+			pgste.usage = PGSTE_GPS_USAGE_STABLE;
+		break;
+	case ESSA_SET_STABLE_NODAT:
+		pgste.usage = PGSTE_GPS_USAGE_STABLE;
+		pgste.nodat = 1;
+		break;
+	default:
+		WARN_ONCE(1, "Invalid ORC!");
+		res = -1;
+		break;
+	}
+	/* If we are discarding a page, set it to logical zero. */
+	pgste.zero = res == 1;
+	if (orc > 0) {
+		*dirty = !pgste.cmma_d;
+		pgste.cmma_d = 1;
+	}
+
+	pgste_set_unlock(ptep, pgste);
+
+	return res;
+}
+
+static long dat_reset_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
+{
+	union pgste pgste;
+
+	pgste = pgste_get_lock(ptep);
+	pgste.usage = 0;
+	pgste.nodat = 0;
+	pgste.cmma_d = 0;
+	pgste_set_unlock(ptep, pgste);
+	if (need_resched())
+		return next;
+	return 0;
+}
+
+long dat_reset_cmma(union asce asce, gfn_t start)
+{
+	const struct dat_walk_ops dat_reset_cmma_ops = {
+		.pte_entry = dat_reset_cmma_pte,
+	};
+
+	return _dat_walk_gfn_range(start, asce_end(asce), asce, &dat_reset_cmma_ops,
+				   DAT_WALK_IGN_HOLES, NULL);
+}
+
+struct dat_get_cmma_state {
+	gfn_t start;
+	gfn_t end;
+	unsigned int count;
+	u8 *values;
+	atomic64_t *remaining;
+};
+
+static long __dat_peek_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
+{
+	struct dat_get_cmma_state *state = walk->priv;
+	union pgste pgste;
+
+	pgste = pgste_get_lock(ptep);
+	state->values[gfn - walk->start] = pgste.usage | (pgste.nodat << 6);
+	pgste_set_unlock(ptep, pgste);
+	state->end = next;
+
+	return 0;
+}
+
+static long __dat_peek_cmma_crste(union crste *crstep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
+{
+	struct dat_get_cmma_state *state = walk->priv;
+
+	if (crstep->h.i)
+		state->end = min(walk->end, next);
+	return 0;
+}
+
+int dat_peek_cmma(gfn_t start, union asce asce, unsigned int *count, u8 *values)
+{
+	const struct dat_walk_ops ops = {
+		.pte_entry = __dat_peek_cmma_pte,
+		.pmd_entry = __dat_peek_cmma_crste,
+		.pud_entry = __dat_peek_cmma_crste,
+		.p4d_entry = __dat_peek_cmma_crste,
+		.pgd_entry = __dat_peek_cmma_crste,
+	};
+	struct dat_get_cmma_state state = { .values = values, };
+	int rc;
+
+	rc = _dat_walk_gfn_range(start, start + *count, asce, &ops, DAT_WALK_DEFAULT, &state);
+	*count = state.end >= start ? state.end - start : 0;
+	/* Return success if at least one value was saved, otherwise an error. */
+	return (rc == -EFAULT && *count > 0) ? 0 : rc;
+}
+
+static long __dat_get_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
+{
+	struct dat_get_cmma_state *state = walk->priv;
+	union pgste pgste;
+
+	if (state->start != -1) {
+		if ((gfn - state->end) > KVM_S390_MAX_BIT_DISTANCE)
+			return 1;
+		if (gfn - state->start >= state->count)
+			return 1;
+	}
+
+	if (!READ_ONCE(*pgste_of(ptep)).cmma_d)
+		return 0;
+
+	pgste = pgste_get_lock(ptep);
+	if (pgste.cmma_d) {
+		if (state->start == -1)
+			state->start = gfn;
+		pgste.cmma_d = 0;
+		atomic64_dec(state->remaining);
+		state->values[gfn - state->start] = pgste.usage | pgste.nodat << 6;
+		state->end = next;
+	}
+	pgste_set_unlock(ptep, pgste);
+	return 0;
+}
+
+int dat_get_cmma(union asce asce, gfn_t *start, unsigned int *count, u8 *values, atomic64_t *rem)
+{
+	const struct dat_walk_ops ops = { .pte_entry = __dat_get_cmma_pte, };
+	struct dat_get_cmma_state state = {
+		.remaining = rem,
+		.values = values,
+		.count = *count,
+		.start = -1,
+	};
+
+	_dat_walk_gfn_range(*start, asce_end(asce), asce, &ops, DAT_WALK_IGN_HOLES, &state);
+	/* If no dirty pages were found, wrap around and continue searching */
+	if (*start && state.start == -1)
+		_dat_walk_gfn_range(0, *start, asce, &ops, DAT_WALK_IGN_HOLES, &state);
+
+	if (state.start == -1) {
+		*count = 0;
+	} else {
+		*count = state.end - state.start;
+		*start = state.start;
+	}
+
+	return 0;
+}
+
+struct dat_set_cmma_state {
+	unsigned long mask;
+	const u8 *bits;
+};
+
+static long __dat_set_cmma_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
+{
+	struct dat_set_cmma_state *state = walk->priv;
+	union pgste pgste, tmp;
+
+	tmp.val = (state->bits[gfn - walk->start] << 24) & state->mask;
+
+	pgste = pgste_get_lock(ptep);
+	pgste.usage = tmp.usage;
+	pgste.nodat = tmp.nodat;
+	pgste_set_unlock(ptep, pgste);
+
+	return 0;
+}
+
+/**
+ * dat_set_cmma_bits() - Set CMMA bits for a range of guest pages.
+ * @mc: Cache used for allocations.
+ * @asce: The ASCE of the guest.
+ * @gfn: The guest frame of the fist page whose CMMA bits are to set.
+ * @count: How many pages need to be processed.
+ * @mask: Which PGSTE bits should be set.
+ * @bits: Points to an array with the CMMA attributes.
+ *
+ * This function sets the CMMA attributes for the given pages. If the input
+ * buffer has zero length, no action is taken, otherwise the attributes are
+ * set and the mm->context.uses_cmm flag is set.
+ *
+ * Each byte in @bits contains new values for bits 32-39 of the PGSTE.
+ * Currently, only the fields NT and US are applied.
+ *
+ * Return: %0 in case of success, a negative error value otherwise.
+ */
+int dat_set_cmma_bits(struct kvm_s390_mmu_cache *mc, union asce asce, gfn_t gfn,
+		      unsigned long count, unsigned long mask, const uint8_t *bits)
+{
+	const struct dat_walk_ops ops = { .pte_entry = __dat_set_cmma_pte, };
+	struct dat_set_cmma_state state = { .mask = mask, .bits = bits, };
+	union crste *crstep;
+	union pte *ptep;
+	gfn_t cur;
+	int rc;
+
+	for (cur = ALIGN_DOWN(gfn, _PAGE_ENTRIES); cur < gfn + count; cur += _PAGE_ENTRIES) {
+		rc = dat_entry_walk(mc, cur, asce, DAT_WALK_ALLOC, TABLE_TYPE_PAGE_TABLE,
+				    &crstep, &ptep);
+		if (rc)
+			return rc;
+	}
+	return _dat_walk_gfn_range(gfn, gfn + count, asce, &ops, DAT_WALK_IGN_HOLES, &state);
+}
+
+static long dat_set_pn_crste(union crste *crstep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
+{
+	union crste newcrste, oldcrste;
+	int *n = walk->priv;
+
+	do {
+		oldcrste = READ_ONCE(*crstep);
+		if (!oldcrste.h.fc || oldcrste.h.i || oldcrste.h.p)
+			return 0;
+		if (oldcrste.s.fc1.prefix_notif)
+			break;
+		newcrste = oldcrste;
+		newcrste.s.fc1.prefix_notif = 1;
+	} while (!dat_crstep_xchg_atomic(crstep, oldcrste, newcrste, gfn, walk->asce));
+	*n = 2;
+	return 0;
+}
+
+static long dat_set_pn_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
+{
+	int *n = walk->priv;
+	union pgste pgste;
+
+	pgste = pgste_get_lock(ptep);
+	if (!ptep->h.i && !ptep->h.p) {
+		pgste.prefix_notif = 1;
+		*n += 1;
+	}
+	pgste_set_unlock(ptep, pgste);
+	return 0;
+}
+
+int dat_set_prefix_notif_bit(union asce asce, gfn_t gfn)
+{
+	static const struct dat_walk_ops ops = {
+		.pte_entry = dat_set_pn_pte,
+		.pmd_entry = dat_set_pn_crste,
+		.pud_entry = dat_set_pn_crste,
+	};
+
+	int n = 0;
+
+	_dat_walk_gfn_range(gfn, gfn + 2, asce, &ops, DAT_WALK_IGN_HOLES, &n);
+	if (n != 2)
+		return -EAGAIN;
+	return 0;
+}
diff --git a/arch/s390/kvm/diag.c b/arch/s390/kvm/s390/diag.c
similarity index 99%
rename from arch/s390/kvm/diag.c
rename to arch/s390/kvm/s390/diag.c
index d89d1c381522a..700d9b7b68bc4 100644
--- a/arch/s390/kvm/diag.c
+++ b/arch/s390/kvm/s390/diag.c
@@ -12,7 +12,7 @@
 #include <linux/kvm_host.h>
 #include <asm/gmap_helpers.h>
 #include <asm/virtio-ccw.h>
-#include "kvm-s390.h"
+#include "s390.h"
 #include "trace.h"
 #include "trace-s390.h"
 #include "gaccess.h"
diff --git a/arch/s390/kvm/gaccess.c b/arch/s390/kvm/s390/gaccess.c
similarity index 99%
rename from arch/s390/kvm/gaccess.c
rename to arch/s390/kvm/s390/gaccess.c
index 36102b2727fbf..2a4b2525329a8 100644
--- a/arch/s390/kvm/gaccess.c
+++ b/arch/s390/kvm/s390/gaccess.c
@@ -17,7 +17,7 @@
 #include <asm/access-regs.h>
 #include <asm/fault.h>
 #include <asm/dat-bits.h>
-#include "kvm-s390.h"
+#include "s390.h"
 #include "dat.h"
 #include "gmap.h"
 #include "gaccess.h"
diff --git a/arch/s390/kvm/gaccess.h b/arch/s390/kvm/s390/gaccess.h
similarity index 99%
rename from arch/s390/kvm/gaccess.h
rename to arch/s390/kvm/s390/gaccess.h
index b5385cec60f45..ef922b3b49903 100644
--- a/arch/s390/kvm/gaccess.h
+++ b/arch/s390/kvm/s390/gaccess.h
@@ -14,7 +14,7 @@
 #include <linux/kvm_host.h>
 #include <linux/uaccess.h>
 #include <linux/ptrace.h>
-#include "kvm-s390.h"
+#include "s390.h"
 
 /**
  * kvm_s390_real_to_abs - convert guest real address to guest absolute address
diff --git a/arch/s390/kvm/s390/gmap.c b/arch/s390/kvm/s390/gmap.c
new file mode 100644
index 0000000000000..b744992f0af15
--- /dev/null
+++ b/arch/s390/kvm/s390/gmap.c
@@ -0,0 +1,113 @@
+// SPDX-License-Identifier: GPL-2.0
+
+#include <linux/kvm_host.h>
+#include <asm/gmap_helpers.h>
+#include <gmap.h>
+#include <prefix.h>
+#include "s390.h"
+
+static int _gmap_enable_skeys(struct gmap *gmap)
+{
+	gfn_t start = 0;
+	int rc;
+
+	if (uses_skeys(gmap))
+		return 0;
+
+	set_bit(GMAP_FLAG_USES_SKEYS, &gmap->flags);
+	rc = gmap_helper_disable_cow_sharing();
+	if (rc) {
+		clear_bit(GMAP_FLAG_USES_SKEYS, &gmap->flags);
+		return rc;
+	}
+
+	do {
+		scoped_guard(write_lock, &gmap->kvm->mmu_lock)
+			start = dat_reset_skeys(gmap->asce, start);
+		cond_resched();
+	} while (start);
+	return 0;
+}
+
+int gmap_enable_skeys(struct gmap *gmap)
+{
+	int rc;
+
+	mmap_write_lock(gmap->kvm->mm);
+	rc = _gmap_enable_skeys(gmap);
+	mmap_write_unlock(gmap->kvm->mm);
+	return rc;
+}
+
+static long __set_cmma_clean_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
+{
+	union pgste pgste;
+
+	pgste = pgste_get_lock(ptep);
+	pgste.cmma_d = 0;
+	pgste_set_unlock(ptep, pgste);
+
+	if (need_resched())
+		return next;
+	return 0;
+}
+
+static long __set_cmma_dirty_pte(union pte *ptep, gfn_t gfn, gfn_t next, struct dat_walk *walk)
+{
+	union pgste pgste;
+
+	pgste = pgste_get_lock(ptep);
+	if (!pgste.cmma_d)
+		atomic64_inc(walk->priv);
+	pgste.cmma_d = 1;
+	pgste_set_unlock(ptep, pgste);
+
+	if (need_resched())
+		return next;
+	return 0;
+}
+
+void _gmap_set_cmma_all(struct gmap *gmap, bool dirty)
+{
+	const struct dat_walk_ops ops = {
+		.pte_entry = dirty ? __set_cmma_dirty_pte : __set_cmma_clean_pte,
+	};
+	gfn_t gfn = 0;
+
+	do {
+		scoped_guard(read_lock, &gmap->kvm->mmu_lock)
+			gfn = _dat_walk_gfn_range(gfn, asce_end(gmap->asce), gmap->asce, &ops,
+						  DAT_WALK_IGN_HOLES,
+						  &gmap->kvm->arch.cmma_dirty_pages);
+		cond_resched();
+	} while (gfn);
+}
+
+static inline bool kvm_s390_is_in_sie(struct kvm_vcpu *vcpu)
+{
+	return vcpu->arch.sie_block->prog0c & PROG_IN_SIE;
+}
+
+bool _gmap_unmap_prefix(struct gmap *gmap, gfn_t gfn, gfn_t end, bool hint)
+{
+	struct kvm *kvm = gmap->kvm;
+	struct kvm_vcpu *vcpu;
+	gfn_t prefix_gfn;
+	unsigned long i;
+
+	if (is_shadow(gmap))
+		return false;
+	kvm_for_each_vcpu(i, vcpu, kvm) {
+		/* Match against both prefix pages */
+		prefix_gfn = gpa_to_gfn(kvm_s390_get_prefix(vcpu));
+		if (prefix_gfn < end && gfn <= prefix_gfn + 1) {
+			if (hint && kvm_s390_is_in_sie(vcpu))
+				return false;
+			VCPU_EVENT(vcpu, 2, "gmap notifier for %llx-%llx",
+				   gfn_to_gpa(gfn), gfn_to_gpa(end));
+			kvm_s390_sync_request(KVM_REQ_REFRESH_GUEST_PREFIX, vcpu);
+		}
+	}
+	return true;
+}
+
diff --git a/arch/s390/kvm/guestdbg.c b/arch/s390/kvm/s390/guestdbg.c
similarity index 99%
rename from arch/s390/kvm/guestdbg.c
rename to arch/s390/kvm/s390/guestdbg.c
index 69835e1d4f207..c880ebbdef2ff 100644
--- a/arch/s390/kvm/guestdbg.c
+++ b/arch/s390/kvm/s390/guestdbg.c
@@ -8,7 +8,7 @@
  */
 #include <linux/kvm_host.h>
 #include <linux/errno.h>
-#include "kvm-s390.h"
+#include "s390.h"
 #include "gaccess.h"
 
 /*
diff --git a/arch/s390/kvm/intercept.c b/arch/s390/kvm/s390/intercept.c
similarity index 99%
rename from arch/s390/kvm/intercept.c
rename to arch/s390/kvm/s390/intercept.c
index 1980df61ef304..ca1205dfac8b0 100644
--- a/arch/s390/kvm/intercept.c
+++ b/arch/s390/kvm/s390/intercept.c
@@ -17,7 +17,7 @@
 #include <asm/sysinfo.h>
 #include <asm/uv.h>
 
-#include "kvm-s390.h"
+#include "s390.h"
 #include "gaccess.h"
 #include "trace.h"
 #include "trace-s390.h"
diff --git a/arch/s390/kvm/interrupt.c b/arch/s390/kvm/s390/interrupt.c
similarity index 99%
rename from arch/s390/kvm/interrupt.c
rename to arch/s390/kvm/s390/interrupt.c
index 7514d9e2403c1..cdbbfca211b1a 100644
--- a/arch/s390/kvm/interrupt.c
+++ b/arch/s390/kvm/s390/interrupt.c
@@ -29,7 +29,7 @@
 #include <asm/nmi.h>
 #include <asm/airq.h>
 #include <asm/tpi.h>
-#include "kvm-s390.h"
+#include "s390.h"
 #include "gaccess.h"
 #include "trace-s390.h"
 #include "pci.h"
diff --git a/arch/s390/kvm/pci.c b/arch/s390/kvm/s390/pci.c
similarity index 99%
rename from arch/s390/kvm/pci.c
rename to arch/s390/kvm/s390/pci.c
index 50f5ec79600e0..82892e1e03d94 100644
--- a/arch/s390/kvm/pci.c
+++ b/arch/s390/kvm/s390/pci.c
@@ -14,7 +14,7 @@
 #include <asm/pci_io.h>
 #include <asm/sclp.h>
 #include "pci.h"
-#include "kvm-s390.h"
+#include "s390.h"
 
 struct zpci_aift *aift;
 
diff --git a/arch/s390/kvm/pci.h b/arch/s390/kvm/s390/pci.h
similarity index 100%
rename from arch/s390/kvm/pci.h
rename to arch/s390/kvm/s390/pci.h
diff --git a/arch/s390/kvm/priv.c b/arch/s390/kvm/s390/priv.c
similarity index 99%
rename from arch/s390/kvm/priv.c
rename to arch/s390/kvm/s390/priv.c
index ad0ddc433a73c..21479f0a5e5a4 100644
--- a/arch/s390/kvm/priv.c
+++ b/arch/s390/kvm/s390/priv.c
@@ -26,7 +26,7 @@
 #include <asm/ap.h>
 #include <asm/gmap_helpers.h>
 #include "gaccess.h"
-#include "kvm-s390.h"
+#include "s390.h"
 #include "trace.h"
 #include "gmap.h"
 
diff --git a/arch/s390/kvm/pv.c b/arch/s390/kvm/s390/pv.c
similarity index 99%
rename from arch/s390/kvm/pv.c
rename to arch/s390/kvm/s390/pv.c
index 1beacc841ca85..f6e03e9d371ad 100644
--- a/arch/s390/kvm/pv.c
+++ b/arch/s390/kvm/s390/pv.c
@@ -18,7 +18,7 @@
 #include <linux/sched/mm.h>
 #include <linux/mmu_notifier.h>
 #include <asm/gmap_helpers.h>
-#include "kvm-s390.h"
+#include "s390.h"
 #include "dat.h"
 #include "gaccess.h"
 #include "gmap.h"
diff --git a/arch/s390/kvm/kvm-s390.c b/arch/s390/kvm/s390/s390.c
similarity index 98%
rename from arch/s390/kvm/kvm-s390.c
rename to arch/s390/kvm/s390/s390.c
index 150b5dd2170e2..0e43754d9cf53 100644
--- a/arch/s390/kvm/kvm-s390.c
+++ b/arch/s390/kvm/s390/s390.c
@@ -50,11 +50,12 @@
 #include <asm/fpu.h>
 #include <asm/ap.h>
 #include <asm/uv.h>
-#include "kvm-s390.h"
+#include "s390.h"
 #include "gaccess.h"
 #include "gmap.h"
 #include "faultin.h"
 #include "pci.h"
+#include "kvm_mmu.h"
 
 #define CREATE_TRACE_POINTS
 #include "trace.h"
@@ -746,33 +747,7 @@ static void sca_del_vcpu(struct kvm_vcpu *vcpu);
 int kvm_vm_ioctl_get_dirty_log(struct kvm *kvm,
 			       struct kvm_dirty_log *log)
 {
-	int r;
-	unsigned long n;
-	struct kvm_memory_slot *memslot;
-	int is_dirty;
-
-	if (kvm_is_ucontrol(kvm))
-		return -EINVAL;
-
-	mutex_lock(&kvm->slots_lock);
-
-	r = -EINVAL;
-	if (log->slot >= KVM_USER_MEM_SLOTS)
-		goto out;
-
-	r = kvm_get_dirty_log(kvm, log, &is_dirty, &memslot);
-	if (r)
-		goto out;
-
-	/* Clear the dirty log */
-	if (is_dirty) {
-		n = kvm_dirty_bitmap_bytes(memslot);
-		memset(memslot->dirty_bitmap, 0, n);
-	}
-	r = 0;
-out:
-	mutex_unlock(&kvm->slots_lock);
-	return r;
+	return s390_kvm_mmu_get_dirty_log(kvm, log);
 }
 
 static void icpt_operexc_on_all_vcpus(struct kvm *kvm)
@@ -1268,7 +1243,7 @@ static int kvm_s390_vm_start_migration(struct kvm *kvm)
  * Must be called with kvm->slots_lock to avoid races with ourselves,
  * kvm_s390_vm_start_migration() and kvm_s390_get_cmma_bits().
  */
-static int kvm_s390_vm_stop_migration(struct kvm *kvm)
+int kvm_s390_vm_stop_migration(struct kvm *kvm)
 {
 	/* migration mode already disabled */
 	if (!kvm->arch.migration_mode)
@@ -5753,45 +5728,7 @@ int kvm_arch_prepare_memory_region(struct kvm *kvm,
 				   struct kvm_memory_slot *new,
 				   enum kvm_mr_change change)
 {
-	if (kvm_is_ucontrol(kvm) && new && new->id < KVM_USER_MEM_SLOTS)
-		return -EINVAL;
-
-	/* When we are protected, we should not change the memory slots */
-	if (kvm_s390_pv_get_handle(kvm))
-		return -EINVAL;
-
-	if (change != KVM_MR_DELETE && change != KVM_MR_FLAGS_ONLY) {
-		/*
-		 * A few sanity checks. The memory in userland is ok to be
-		 * fragmented into various different vmas. It is okay to mmap()
-		 * and munmap() stuff in this slot after doing this call at any
-		 * time.
-		 */
-		if (new->userspace_addr & ~PAGE_MASK)
-			return -EINVAL;
-		if ((new->base_gfn + new->npages) * PAGE_SIZE > kvm->arch.mem_limit)
-			return -EINVAL;
-		if (!asce_contains_gfn(kvm->arch.gmap->asce, new->base_gfn + new->npages - 1))
-			return -EINVAL;
-	}
-
-	if (!kvm->arch.migration_mode)
-		return 0;
-
-	/*
-	 * Turn off migration mode when:
-	 * - userspace creates a new memslot with dirty logging off,
-	 * - userspace modifies an existing memslot (MOVE or FLAGS_ONLY) and
-	 *   dirty logging is turned off.
-	 * Migration mode expects dirty page logging being enabled to store
-	 * its dirty bitmap.
-	 */
-	if (change != KVM_MR_DELETE &&
-	    !(new->flags & KVM_MEM_LOG_DIRTY_PAGES))
-		WARN(kvm_s390_vm_stop_migration(kvm),
-		     "Failed to stop migration mode");
-
-	return 0;
+	return s390_kvm_mmu_prepare_memory_region(kvm, old, new, change);
 }
 
 void kvm_arch_commit_memory_region(struct kvm *kvm,
@@ -5799,42 +5736,7 @@ void kvm_arch_commit_memory_region(struct kvm *kvm,
 				const struct kvm_memory_slot *new,
 				enum kvm_mr_change change)
 {
-	struct kvm_s390_mmu_cache *mc = NULL;
-	int rc = 0;
-
-	if (change == KVM_MR_FLAGS_ONLY)
-		return;
-
-	mc = kvm_s390_new_mmu_cache();
-	if (!mc) {
-		rc = -ENOMEM;
-		goto out;
-	}
-
-	scoped_guard(write_lock, &kvm->mmu_lock) {
-		switch (change) {
-		case KVM_MR_DELETE:
-			rc = dat_delete_slot(mc, kvm->arch.gmap->asce, old->base_gfn, old->npages);
-			break;
-		case KVM_MR_MOVE:
-			rc = dat_delete_slot(mc, kvm->arch.gmap->asce, old->base_gfn, old->npages);
-			if (rc)
-				break;
-			fallthrough;
-		case KVM_MR_CREATE:
-			rc = dat_create_slot(mc, kvm->arch.gmap->asce, new->base_gfn, new->npages);
-			break;
-		case KVM_MR_FLAGS_ONLY:
-			break;
-		default:
-			WARN(1, "Unknown KVM MR CHANGE: %d\n", change);
-		}
-	}
-out:
-	if (rc)
-		pr_warn("failed to commit memory region\n");
-	kvm_s390_free_mmu_cache(mc);
-	return;
+	s390_kvm_mmu_commit_memory_region(kvm, old, new, change);
 }
 
 /**
@@ -5857,7 +5759,8 @@ void kvm_arch_commit_memory_region(struct kvm *kvm,
  * * other error codes < 0 in case of other errors.
  * * otherwise a number > 0 of bytes that have been faulted in successfully.
  */
-long kvm_arch_vcpu_pre_fault_memory(struct kvm_vcpu *vcpu, struct kvm_pre_fault_memory *range)
+long kvm_arch_vcpu_pre_fault_memory(struct kvm_vcpu *vcpu,
+				    struct kvm_pre_fault_memory *range)
 {
 	struct guest_fault f = { .gfn = gpa_to_gfn(range->gpa), };
 	gpa_t end;
@@ -5926,6 +5829,14 @@ bool kvm_unmap_gfn_range(struct kvm *kvm, struct kvm_gfn_range *range)
 	return gmap_unmap_gfn_range(kvm->arch.gmap, range->slot, range->start, range->end);
 }
 
+#ifdef CONFIG_HAVE_KVM_VCPU_RUN_PID_CHANGE
+/* Make s390 compile if arm64-on-s390 is selected */
+int kvm_arch_vcpu_run_pid_change(struct kvm_vcpu *vcpu)
+{
+	return 0;
+}
+#endif /* CONFIG_HAVE_KVM_VCPU_RUN_PID_CHANGE */
+
 static inline unsigned long nonhyp_mask(int i)
 {
 	unsigned int nonhyp_fai = (sclp.hmfai << i * 2) >> 30;
diff --git a/arch/s390/kvm/kvm-s390.h b/arch/s390/kvm/s390/s390.h
similarity index 94%
rename from arch/s390/kvm/kvm-s390.h
rename to arch/s390/kvm/s390/s390.h
index 6d2842fb71a33..c846b7c6be93e 100644
--- a/arch/s390/kvm/kvm-s390.h
+++ b/arch/s390/kvm/s390/s390.h
@@ -452,7 +452,7 @@ void kvm_s390_vsie_destroy(struct kvm *kvm);
 int kvm_s390_handle_sigp(struct kvm_vcpu *vcpu);
 int kvm_s390_handle_sigp_pei(struct kvm_vcpu *vcpu);
 
-/* implemented in kvm-s390.c */
+/* implemented in s390.c */
 int kvm_s390_try_set_tod_clock(struct kvm *kvm, const struct kvm_s390_vm_tod_clock *gtod);
 int kvm_s390_store_status_unloaded(struct kvm_vcpu *vcpu, unsigned long addr);
 int kvm_s390_vcpu_store_status(struct kvm_vcpu *vcpu, unsigned long addr);
@@ -594,6 +594,11 @@ static inline bool kvm_s390_cur_gmap_fault_is_write(void)
 	return test_facility(75) && (current->thread.gmap_teid.fsi == TEID_FSI_STORE);
 }
 
+static __always_inline int kvm_s390_is_migration_mode(struct kvm *kvm)
+{
+	return kvm->arch.migration_mode;
+}
+
 /**
  * kvm_s390_vcpu_crypto_reset_all
  *
@@ -624,4 +629,33 @@ void kvm_s390_vcpu_pci_enable_interp(struct kvm *kvm);
  */
 extern unsigned int diag9c_forwarding_hz;
 
+/*
+ * Must be called with kvm->slots_lock to avoid races with ourselves and
+ * kvm_s390_vm_start_migration.
+ */
+int kvm_s390_vm_stop_migration(struct kvm *kvm);
+
+/* implemented in dat.c */
+int dat_get_storage_key(union asce asce, gfn_t gfn, union skey *skey);
+int dat_set_storage_key(struct kvm_s390_mmu_cache *mc, union asce asce, gfn_t gfn,
+			union skey skey, bool nq);
+int dat_cond_set_storage_key(struct kvm_s390_mmu_cache *mmc, union asce asce, gfn_t gfn,
+			     union skey skey, union skey *oldkey, bool nq, bool mr, bool mc);
+int dat_reset_reference_bit(union asce asce, gfn_t gfn);
+long dat_reset_skeys(union asce asce, gfn_t start);
+
+/* implemented in gmap.c */
+int gmap_enable_skeys(struct gmap *gmap);
+void _gmap_set_cmma_all(struct gmap *gmap, bool dirty);
+
+static inline void gmap_set_cmma_all_dirty(struct gmap *gmap)
+{
+	_gmap_set_cmma_all(gmap, true);
+}
+
+static inline void gmap_set_cmma_all_clean(struct gmap *gmap)
+{
+	_gmap_set_cmma_all(gmap, false);
+}
+
 #endif
diff --git a/arch/s390/kvm/sigp.c b/arch/s390/kvm/s390/sigp.c
similarity index 99%
rename from arch/s390/kvm/sigp.c
rename to arch/s390/kvm/s390/sigp.c
index 55c34cb354281..131b3371ef4f8 100644
--- a/arch/s390/kvm/sigp.c
+++ b/arch/s390/kvm/s390/sigp.c
@@ -14,7 +14,7 @@
 #include <linux/slab.h>
 #include <asm/sigp.h>
 #include "gaccess.h"
-#include "kvm-s390.h"
+#include "s390.h"
 #include "trace.h"
 
 static int __sigp_sense(struct kvm_vcpu *vcpu, struct kvm_vcpu *dst_vcpu,
diff --git a/arch/s390/kvm/trace-s390.h b/arch/s390/kvm/s390/trace-s390.h
similarity index 100%
rename from arch/s390/kvm/trace-s390.h
rename to arch/s390/kvm/s390/trace-s390.h
diff --git a/arch/s390/kvm/trace.h b/arch/s390/kvm/s390/trace.h
similarity index 97%
rename from arch/s390/kvm/trace.h
rename to arch/s390/kvm/s390/trace.h
index aa419eb6a0c80..97774fe09a85c 100644
--- a/arch/s390/kvm/trace.h
+++ b/arch/s390/kvm/s390/trace.h
@@ -45,20 +45,6 @@ TRACE_EVENT(kvm_s390_skey_related_inst,
 	    VCPU_TP_PRINTK("%s", "storage key related instruction")
 	);
 
-TRACE_EVENT(kvm_s390_major_guest_pfault,
-	    TP_PROTO(VCPU_PROTO_COMMON),
-	    TP_ARGS(VCPU_ARGS_COMMON),
-
-	    TP_STRUCT__entry(
-		    VCPU_FIELD_COMMON
-		    ),
-
-	    TP_fast_assign(
-		    VCPU_ASSIGN_COMMON
-		    ),
-	    VCPU_TP_PRINTK("%s", "major fault, maybe applicable for pfault")
-	);
-
 TRACE_EVENT(kvm_s390_pfault_init,
 	    TP_PROTO(VCPU_PROTO_COMMON, long pfault_token),
 	    TP_ARGS(VCPU_ARGS_COMMON, pfault_token),
diff --git a/arch/s390/kvm/vsie.c b/arch/s390/kvm/s390/vsie.c
similarity index 99%
rename from arch/s390/kvm/vsie.c
rename to arch/s390/kvm/s390/vsie.c
index eea24562e7db2..c4a03b310fea4 100644
--- a/arch/s390/kvm/vsie.c
+++ b/arch/s390/kvm/s390/vsie.c
@@ -23,7 +23,7 @@
 #include <asm/nmi.h>
 #include <asm/dis.h>
 #include <asm/facility.h>
-#include "kvm-s390.h"
+#include "s390.h"
 #include "gaccess.h"
 #include "gmap.h"
 
diff --git a/arch/s390/tools/Makefile b/arch/s390/tools/Makefile
index f2862364fb422..3e0f21b552daf 100644
--- a/arch/s390/tools/Makefile
+++ b/arch/s390/tools/Makefile
@@ -3,12 +3,20 @@
 # Makefile for s390 specific build tools
 #
 
+include $(srctree)/arch/s390/tools/Makefile.arm64h
+
 kapi := arch/$(ARCH)/include/generated/asm
 kapi-hdrs-y := $(kapi)/facility-defs.h $(kapi)/dis-defs.h
 
+targets += $(addprefix ../../../,$(kapi-hdrs-y))
+# Convert ARM64 absolute paths to relative before Kbuild adds $(obj)/ prefix
+targets += $(patsubst $(objtree)/%,../../../%,$(ARM64_TARGETS))
+
+kapi-hdrs-$(CONFIG_KVM_ARM64) += $(ARM64_TARGETS)
+
 PHONY += kapi
 
-kapi:	$(kapi-hdrs-y)
+kapi:	$(kapi-hdrs-y) $(ARM64_TARGETS)
 
 hostprogs		    += gen_facilities
 hostprogs		    += gen_opcode_table
diff --git a/arch/s390/tools/Makefile.arm64h b/arch/s390/tools/Makefile.arm64h
new file mode 100644
index 0000000000000..8fbd9cb486952
--- /dev/null
+++ b/arch/s390/tools/Makefile.arm64h
@@ -0,0 +1,57 @@
+# SPDX-License-Identifier: GPL-2.0
+#
+# Share ARM64 headers with s390 KVM
+#
+
+arm64api := $(objtree)/arch/$(ARCH)/include/generated/arm64
+arm64uapi := $(objtree)/arch/$(ARCH)/include/generated/uapi/arm64
+
+# List of ARM64 headers to share with s390 KVM
+# Format: [uapi:]header.h or header-gen.h
+#
+# * header.h - from arch/arm64/include/asm/ to arm64/
+# * uapi:header.h - from arch/arm64/include/uapi/asm/ to uapi/arm64/
+# * header-gen.h - generated as header-gen.h from ARM64 header header.h
+# If a header contains partial markers (#ifdef ARM64_S390_COMMON) only this part will be copied.
+# If the file does not contain any markers the whole file will be copied.
+ARM64_SHARED_HEADERS := \
+	brk-imm.h \
+	esr.h \
+	kvm_arm.h \
+	kvm_emulate-gen.h \
+	kvm_host.h \
+	ptrace-gen.h \
+	sysreg-gen.h \
+	uapi:hwcap.h \
+	uapi:kvm.h \
+	uapi:ptrace.h \
+	uapi:sve_context.h \
+
+quiet_cmd_gen_arm_hdr = GEN     $@
+      cmd_gen_arm_hdr = mkdir -p $(dir $@); \
+                      $(AWK) -f $(src)/copy-arm64h.awk $< > $@ || \
+                      $(AWK) -f $(src)/copy-arm64h-full.awk -v srcfile="$(subst $(srctree)/,,$(subst $(srctree)/../,,$<))" $< > $@ || \
+		      { echo "Error: Unbalanced ARM64_S390_COMMON markers in $<" >&2; rm -f $@; exit 1; }
+
+arm64-type = $(firstword $(subst :, ,$(1)))
+arm64-base = $(or $(word 2,$(subst :, ,$(1))),$(1))
+arm64-src-base = $(patsubst %-gen.h,%.h,$(call arm64-base,$(1)))
+
+arm64-src = $(srctree)/arch/arm64/include/$(if $(filter uapi,$(call arm64-type,$(1))),uapi/)asm/$(call arm64-src-base,$(1))
+arm64-dst = $(objtree)/$(if $(filter uapi,$(call arm64-type,$(1))),$(arm64uapi),$(arm64api))/$(call arm64-base,$(1))
+
+$(foreach hdr,$(ARM64_SHARED_HEADERS),\
+	$(eval $(call arm64-dst,$(hdr)): $(call arm64-src,$(hdr)) $(src)/copy-arm64h.awk $(src)/copy-arm64h-full.awk))
+
+ARM64_TARGETS := $(sort $(foreach hdr,$(ARM64_SHARED_HEADERS),$(call arm64-dst,$(hdr))))
+
+$(ARM64_TARGETS):
+	$(call cmd,gen_arm_hdr)
+
+quiet_cmd_gen_sysreg_arm64 = GEN     $@
+      cmd_gen_sysreg_arm64 = mkdir -p $(dir $@); $(AWK) -f $(srctree)/arch/arm64/tools/gen-sysreg.awk $(srctree)/arch/arm64/tools/sysreg > $@
+
+$(arm64api)/sysreg-defs.h: $(srctree)/arch/arm64/tools/gen-sysreg.awk $(srctree)/arch/arm64/tools/sysreg FORCE
+	$(call if_changed,gen_sysreg_arm64)
+
+ARM64_TARGETS += $(arm64api)/sysreg-defs.h
diff --git a/arch/s390/tools/copy-arm64h-full.awk b/arch/s390/tools/copy-arm64h-full.awk
new file mode 100644
index 0000000000000..a6aaf9cc33326
--- /dev/null
+++ b/arch/s390/tools/copy-arm64h-full.awk
@@ -0,0 +1,47 @@
+#!/usr/bin/awk -f
+# SPDX-License-Identifier: GPL-2.0
+#
+# Process entire ARM64 headers for sharing with s390 KVM
+#
+# Usage: copy-arm64h-full.awk -v srcfile=<source_path> <input_file>
+#
+# This processes the entire file (unlike copy-arm64h.awk which only extracts marked sections)
+
+BEGIN {
+	max_guard_line = 25
+	guard_found = 0
+	header_added = 0
+}
+
+# Find and process the include guard in the first few lines
+NR <= max_guard_line && !guard_found && /^#ifndef [A-Z_0-9]+$/ {
+	guard_name = $2
+	guard_found = 1
+	print "/* This header was copied from " srcfile " */"
+	print ""
+	print
+	header_added = 1
+	next
+}
+
+# Transform include directives
+/^#include <uapi\/asm\// {
+	sub(/<uapi\/asm\//, "<uapi/arm64/")
+	print
+	next
+}
+
+/^#include <asm\// {
+	sub(/<asm\//, "<arm64/")
+	print
+	next
+}
+
+/ARM64_S390_COMMON/ {
+	exit 1
+}
+
+# Pass through all other lines
+{
+	print
+}
diff --git a/arch/s390/tools/copy-arm64h.awk b/arch/s390/tools/copy-arm64h.awk
new file mode 100644
index 0000000000000..d74df368c1b57
--- /dev/null
+++ b/arch/s390/tools/copy-arm64h.awk
@@ -0,0 +1,72 @@
+#!/usr/bin/awk -f
+# SPDX-License-Identifier: GPL-2.0
+#
+# Extract marked sections from ARM64 headers for sharing with s390 KVM
+#
+# Usage: share-arm64-header.awk <input_file>
+#
+# Extracts all sections between start/end markers. If no markers found, signals for fallback.
+#TODO verification script or c file for arm to verify the ifdef things keep working
+BEGIN {
+	# Constants
+	start_pattern = "^#ifdef ARM64_S390_COMMON$"
+	end_pattern = "^#endif \\/\\* ARM64_S390_COMMON \\*\\/$"
+	max_guard_line = 25
+
+	# State variables
+	copying = found_marker = 0
+	guard_name = ""
+	file_header_done = 0
+}
+
+NR <= max_guard_line && !guard_name && /^#ifndef [A-Za-z0-9_]+$/ {
+	guard_name = $2
+	filename = FILENAME
+	sub(/^.*arch\/arm64\//, "arch/arm64/", filename)
+	print "/*"
+	print " * This header was automatically generated from " filename
+	print " * Do not modify this file directly."
+	print " */"
+	print "#ifndef " guard_name
+	print "#define " guard_name
+	print ""
+	next
+}
+
+NR > max_guard_line && !guard_name && !file_header_done {
+	print "error: no include guard found in first " max_guard_line " lines" > "/dev/stderr"
+	file_header_done = 1
+	exit 1
+}
+
+!guard_name {
+	print
+	next
+}
+
+$0 ~ start_pattern {
+	if (copying) { exit 1 }
+	copying = found_marker = 1
+	next
+}
+
+guard_name && !found_marker {
+	next
+}
+
+$0 ~ end_pattern { copying = 0; next }
+
+copying {
+	gsub(/#include <asm\//, "#include <arm64/")
+	gsub(/#include <uapi\/asm\//, "#include <uapi/arm64/")
+	print
+	next
+}
+
+END {
+	if (found_marker) {
+		print ""
+		print "#endif /* " guard_name " */"
+	}
+	exit !found_marker || copying
+}
diff --git a/arch/s390/tools/opcodes.txt b/arch/s390/tools/opcodes.txt
index def2659f6602d..0e4773c94af0d 100644
--- a/arch/s390/tools/opcodes.txt
+++ b/arch/s390/tools/opcodes.txt
@@ -594,6 +594,9 @@ b9a0	clp	RRF_U0RR
 b9a1	tpei	RRE_RR
 b9a2	ptf	RRE_R0
 b9a4	uvc	RRF_URR
+b9a5	sae	RRE_R0
+b9a6	lasrm	RRE_R0
+b9a7	stiasrm	RRE_R0
 b9aa	lptea	RRF_RURR2
 b9ab	essa	RRF_U0RR
 b9ac	irbm	RRE_RR
diff --git a/arch/x86/include/asm/kvm_page_track.h b/arch/x86/include/asm/kvm_page_track.h
index 3d040741044b4..046a25c8fe4f8 100644
--- a/arch/x86/include/asm/kvm_page_track.h
+++ b/arch/x86/include/asm/kvm_page_track.h
@@ -44,13 +44,13 @@ struct kvm_page_track_notifier_node {
 				    struct kvm_page_track_notifier_node *node);
 };
 
-int kvm_page_track_register_notifier(struct kvm *kvm,
+int kvm_page_track_register_notifier(struct file *file,
 				     struct kvm_page_track_notifier_node *n);
-void kvm_page_track_unregister_notifier(struct kvm *kvm,
+void kvm_page_track_unregister_notifier(struct file *file,
 					struct kvm_page_track_notifier_node *n);
 
-int kvm_write_track_add_gfn(struct kvm *kvm, gfn_t gfn);
-int kvm_write_track_remove_gfn(struct kvm *kvm, gfn_t gfn);
+int kvm_write_track_add_gfn(struct file *file, gfn_t gfn);
+int kvm_write_track_remove_gfn(struct file *file, gfn_t gfn);
 #else
 /*
  * Allow defining a node in a structure even if page tracking is disabled, e.g.
diff --git a/arch/x86/kvm/Makefile b/arch/x86/kvm/Makefile
index 77337c37324b1..713fb6e76730e 100644
--- a/arch/x86/kvm/Makefile
+++ b/arch/x86/kvm/Makefile
@@ -61,9 +61,6 @@ exports_grep_trailer := --include='*.[ch]' -nrw $(srctree)/virt/kvm $(srctree)/a
 				-e kvm_page_track_unregister_notifier \
 				-e kvm_write_track_add_gfn \
 				-e kvm_write_track_remove_gfn \
-				-e kvm_get_kvm \
-				-e kvm_get_kvm_safe \
-				-e kvm_put_kvm
 
 # Force grep to emit a goofy group separator that can in turn be replaced with
 # the above newline macro (newlines in Make are a nightmare).  Note, grep only
diff --git a/arch/x86/kvm/mmu/page_track.c b/arch/x86/kvm/mmu/page_track.c
index 7e8195a311bb0..860049ed24eab 100644
--- a/arch/x86/kvm/mmu/page_track.c
+++ b/arch/x86/kvm/mmu/page_track.c
@@ -237,10 +237,11 @@ static int kvm_enable_external_write_tracking(struct kvm *kvm)
  * register the notifier so that event interception for the tracked guest
  * pages can be received.
  */
-int kvm_page_track_register_notifier(struct kvm *kvm,
+int kvm_page_track_register_notifier(struct file *file,
 				     struct kvm_page_track_notifier_node *n)
 {
 	struct kvm_page_track_notifier_head *head;
+	struct kvm *kvm = file_to_kvm(file);
 	int r;
 
 	if (!kvm || kvm->mm != current->mm)
@@ -252,7 +253,7 @@ int kvm_page_track_register_notifier(struct kvm *kvm,
 			return r;
 	}
 
-	kvm_get_kvm(kvm);
+	get_file(file);
 
 	head = &kvm->arch.track_notifier_head;
 
@@ -267,10 +268,11 @@ EXPORT_SYMBOL_GPL(kvm_page_track_register_notifier);
  * stop receiving the event interception. It is the opposed operation of
  * kvm_page_track_register_notifier().
  */
-void kvm_page_track_unregister_notifier(struct kvm *kvm,
+void kvm_page_track_unregister_notifier(struct file *file,
 					struct kvm_page_track_notifier_node *n)
 {
 	struct kvm_page_track_notifier_head *head;
+	struct kvm *kvm = file_to_kvm(file);
 
 	head = &kvm->arch.track_notifier_head;
 
@@ -279,7 +281,7 @@ void kvm_page_track_unregister_notifier(struct kvm *kvm,
 	write_unlock(&kvm->mmu_lock);
 	synchronize_srcu(&head->track_srcu);
 
-	kvm_put_kvm(kvm);
+	fput(file);
 }
 EXPORT_SYMBOL_GPL(kvm_page_track_unregister_notifier);
 
@@ -339,8 +341,9 @@ void kvm_page_track_delete_slot(struct kvm *kvm, struct kvm_memory_slot *slot)
  * @kvm: the guest instance we are interested in.
  * @gfn: the guest page.
  */
-int kvm_write_track_add_gfn(struct kvm *kvm, gfn_t gfn)
+int kvm_write_track_add_gfn(struct file *file, gfn_t gfn)
 {
+	struct kvm *kvm = file_to_kvm(file);
 	struct kvm_memory_slot *slot;
 	int idx;
 
@@ -369,8 +372,9 @@ EXPORT_SYMBOL_GPL(kvm_write_track_add_gfn);
  * @kvm: the guest instance we are interested in.
  * @gfn: the guest page.
  */
-int kvm_write_track_remove_gfn(struct kvm *kvm, gfn_t gfn)
+int kvm_write_track_remove_gfn(struct file *file, gfn_t gfn)
 {
+	struct kvm *kvm = file_to_kvm(file);
 	struct kvm_memory_slot *slot;
 	int idx;
 
diff --git a/drivers/s390/char/sclp_early.c b/drivers/s390/char/sclp_early.c
index 22dd797e62291..e58d24b95bd1e 100644
--- a/drivers/s390/char/sclp_early.c
+++ b/drivers/s390/char/sclp_early.c
@@ -96,6 +96,7 @@ static void __init sclp_early_facilities_detect(void)
 		sclp.has_ib = cpue->ib;
 		sclp.has_cei = cpue->cei;
 		sclp.has_skey = cpue->skey;
+		sclp.has_aef = cpue->aef;
 		break;
 	}
 
diff --git a/drivers/s390/crypto/vfio_ap_ops.c b/drivers/s390/crypto/vfio_ap_ops.c
index 44b3a1dcc1b36..bf6a5b959fcd8 100644
--- a/drivers/s390/crypto/vfio_ap_ops.c
+++ b/drivers/s390/crypto/vfio_ap_ops.c
@@ -8,6 +8,7 @@
  *	      Halil Pasic <pasic@linux.ibm.com>
  *	      Pierre Morel <pmorel@linux.ibm.com>
  */
+#include "linux/cleanup.h"
 #include <linux/string.h>
 #include <linux/vfio.h>
 #include <linux/device.h>
@@ -1815,13 +1816,26 @@ static const struct attribute_group *vfio_ap_mdev_attr_groups[] = {
  * @matrix_mdev: a mediated matrix device
  * @kvm: reference to KVM instance
  *
- * Return: 0 if no other mediated matrix device has a reference to @kvm;
- * otherwise, returns an -EPERM.
+ * Returns: 0 if the reference to kvm is successfully retrieved from @kvm_file
+ * and set into @matrix_mdev; otherwise, returns:
+ *	-ENOENT if a reference to kvm could not be retrieved from @kvm_file
+ *	-EPERM if another mediated matrix device already has a reference to the same kvm instance
+ * 
  */
 static int vfio_ap_mdev_set_kvm(struct ap_matrix_mdev *matrix_mdev,
-				struct kvm *kvm)
+				struct file *kvm_file)
 {
+	struct file *kvm_file_ref __free(fput) = NULL;
 	struct ap_matrix_mdev *m;
+	struct kvm *kvm;
+
+	kvm_file_ref = get_file_active(&kvm_file);
+	if (!kvm_file_ref)
+		return -ENOENT;
+
+	kvm = kvm_file->private_data;
+	if (!kvm)
+		return -ENOENT;
 
 	if (kvm->arch.crypto.crycbd) {
 		down_write(&kvm->arch.crypto.pqap_hook_rwsem);
@@ -1837,13 +1851,13 @@ static int vfio_ap_mdev_set_kvm(struct ap_matrix_mdev *matrix_mdev,
 			}
 		}
 
-		kvm_get_kvm(kvm);
 		matrix_mdev->kvm = kvm;
 		vfio_ap_mdev_update_guest_apcb(matrix_mdev);
 
 		release_update_locks_for_kvm(kvm);
 	}
 
+	no_free_ptr(kvm_file_ref);
 	return 0;
 }
 
@@ -1891,7 +1905,7 @@ static void vfio_ap_mdev_unset_kvm(struct ap_matrix_mdev *matrix_mdev)
 
 		kvm_arch_crypto_clear_masks(kvm);
 		vfio_ap_mdev_reset_queues(matrix_mdev);
-		kvm_put_kvm(kvm);
+		fput(kvm->file);
 		matrix_mdev->kvm = NULL;
 
 		release_update_locks_for_kvm(kvm);
diff --git a/drivers/vfio/group.c b/drivers/vfio/group.c
index b2299e5bc6df3..807378cb48de0 100644
--- a/drivers/vfio/group.c
+++ b/drivers/vfio/group.c
@@ -860,7 +860,7 @@ bool vfio_group_enforced_coherent(struct vfio_group *group)
 	return ret;
 }
 
-void vfio_group_set_kvm(struct vfio_group *group, struct kvm *kvm)
+void vfio_group_set_kvm(struct vfio_group *group, struct file *kvm)
 {
 	spin_lock(&group->kvm_ref_lock);
 	group->kvm = kvm;
diff --git a/drivers/vfio/pci/vfio_pci_zdev.c b/drivers/vfio/pci/vfio_pci_zdev.c
index 0990fdb146b78..d3a1101013531 100644
--- a/drivers/vfio/pci/vfio_pci_zdev.c
+++ b/drivers/vfio/pci/vfio_pci_zdev.c
@@ -144,6 +144,7 @@ int vfio_pci_info_zdev_add_caps(struct vfio_pci_core_device *vdev,
 int vfio_pci_zdev_open_device(struct vfio_pci_core_device *vdev)
 {
 	struct zpci_dev *zdev = to_zpci(vdev->pdev);
+	struct kvm *kvm;
 
 	if (!zdev)
 		return -ENODEV;
@@ -151,8 +152,12 @@ int vfio_pci_zdev_open_device(struct vfio_pci_core_device *vdev)
 	if (!vdev->vdev.kvm)
 		return 0;
 
+	kvm = vdev->vdev.kvm->private_data;
+	if (!kvm)
+		return -ENOENT;
+
 	if (zpci_kvm_hook.kvm_register)
-		return zpci_kvm_hook.kvm_register(zdev, vdev->vdev.kvm);
+		return zpci_kvm_hook.kvm_register(zdev, kvm);
 
 	return -ENOENT;
 }
diff --git a/drivers/vfio/vfio.h b/drivers/vfio/vfio.h
index e4b72e79b7e3e..ede8a8001b032 100644
--- a/drivers/vfio/vfio.h
+++ b/drivers/vfio/vfio.h
@@ -23,7 +23,7 @@ struct vfio_device_file {
 	u8 access_granted;
 	u32 devid; /* only valid when iommufd is valid */
 	spinlock_t kvm_ref_lock; /* protect kvm field */
-	struct kvm *kvm;
+	struct file *kvm;
 	struct iommufd_ctx *iommufd; /* protected by struct vfio_device_set::lock */
 };
 
@@ -88,7 +88,7 @@ struct vfio_group {
 #endif
 	enum vfio_group_type		type;
 	struct mutex			group_lock;
-	struct kvm			*kvm;
+	struct file			*kvm;
 	struct file			*opened_file;
 	struct iommufd_ctx		*iommufd;
 	spinlock_t			kvm_ref_lock;
@@ -107,7 +107,7 @@ void vfio_device_group_unuse_iommu(struct vfio_device *device);
 void vfio_df_group_close(struct vfio_device_file *df);
 struct vfio_group *vfio_group_from_file(struct file *file);
 bool vfio_group_enforced_coherent(struct vfio_group *group);
-void vfio_group_set_kvm(struct vfio_group *group, struct kvm *kvm);
+void vfio_group_set_kvm(struct vfio_group *group, struct file *kvm);
 bool vfio_device_has_container(struct vfio_device *device);
 int __init vfio_group_init(void);
 void vfio_group_cleanup(void);
@@ -434,11 +434,11 @@ static inline void vfio_virqfd_exit(void)
 #endif
 
 #if IS_ENABLED(CONFIG_KVM)
-void vfio_device_get_kvm_safe(struct vfio_device *device, struct kvm *kvm);
+void vfio_device_get_kvm_safe(struct vfio_device *device, struct file *kvm);
 void vfio_device_put_kvm(struct vfio_device *device);
 #else
 static inline void vfio_device_get_kvm_safe(struct vfio_device *device,
-					    struct kvm *kvm)
+					    struct file *kvm)
 {
 }
 
diff --git a/drivers/vfio/vfio_main.c b/drivers/vfio/vfio_main.c
index ed538aebb0b8e..8fad1ca1189f8 100644
--- a/drivers/vfio/vfio_main.c
+++ b/drivers/vfio/vfio_main.c
@@ -448,35 +448,13 @@ void vfio_unregister_group_dev(struct vfio_device *device)
 EXPORT_SYMBOL_GPL(vfio_unregister_group_dev);
 
 #if IS_ENABLED(CONFIG_KVM)
-void vfio_device_get_kvm_safe(struct vfio_device *device, struct kvm *kvm)
+void vfio_device_get_kvm_safe(struct vfio_device *device, struct file *kvm)
 {
-	void (*pfn)(struct kvm *kvm);
-	bool (*fn)(struct kvm *kvm);
-	bool ret;
-
 	lockdep_assert_held(&device->dev_set->lock);
 
-	if (!kvm)
-		return;
-
-	pfn = symbol_get(kvm_put_kvm);
-	if (WARN_ON(!pfn))
+	if (!get_file_active(&kvm))
 		return;
 
-	fn = symbol_get(kvm_get_kvm_safe);
-	if (WARN_ON(!fn)) {
-		symbol_put(kvm_put_kvm);
-		return;
-	}
-
-	ret = fn(kvm);
-	symbol_put(kvm_get_kvm_safe);
-	if (!ret) {
-		symbol_put(kvm_put_kvm);
-		return;
-	}
-
-	device->put_kvm = pfn;
 	device->kvm = kvm;
 }
 
@@ -487,14 +465,7 @@ void vfio_device_put_kvm(struct vfio_device *device)
 	if (!device->kvm)
 		return;
 
-	if (WARN_ON(!device->put_kvm))
-		goto clear;
-
-	device->put_kvm(device->kvm);
-	device->put_kvm = NULL;
-	symbol_put(kvm_put_kvm);
-
-clear:
+	fput(device->kvm);
 	device->kvm = NULL;
 }
 #endif
@@ -1520,7 +1491,7 @@ bool vfio_file_enforced_coherent(struct file *file)
 }
 EXPORT_SYMBOL_GPL(vfio_file_enforced_coherent);
 
-static void vfio_device_file_set_kvm(struct file *file, struct kvm *kvm)
+static void vfio_device_file_set_kvm(struct file *file, struct file *kvm)
 {
 	struct vfio_device_file *df = file->private_data;
 
@@ -1536,22 +1507,22 @@ static void vfio_device_file_set_kvm(struct file *file, struct kvm *kvm)
 
 /**
  * vfio_file_set_kvm - Link a kvm with VFIO drivers
- * @file: VFIO group file or VFIO device file
- * @kvm: KVM to link
+ * @vfio_file: VFIO group file or VFIO device file
+ * @kvm: KVM file to link
  *
  * When a VFIO device is first opened the KVM will be available in
  * device->kvm if one was associated with the file.
  */
-void vfio_file_set_kvm(struct file *file, struct kvm *kvm)
+void vfio_file_set_kvm(struct file *vfio_file, struct file *kvm)
 {
 	struct vfio_group *group;
 
-	group = vfio_group_from_file(file);
+	group = vfio_group_from_file(vfio_file);
 	if (group)
 		vfio_group_set_kvm(group, kvm);
 
-	if (vfio_device_from_file(file))
-		vfio_device_file_set_kvm(file, kvm);
+	if (vfio_device_from_file(vfio_file))
+		vfio_device_file_set_kvm(vfio_file, kvm);
 }
 EXPORT_SYMBOL_GPL(vfio_file_set_kvm);
 
diff --git a/include/linux/kvm_host.h b/include/linux/kvm_host.h
index ab8cfaec82d31..050aca8a8ff48 100644
--- a/include/linux/kvm_host.h
+++ b/include/linux/kvm_host.h
@@ -784,6 +784,7 @@ struct kvm {
 	 * kvm_swap_active_memslots().
 	 */
 	struct mutex slots_arch_lock;
+	struct file *file;  /* Back-reference to VM file descriptor */
 	struct mm_struct *mm; /* userspace tied to this vm */
 	unsigned long nr_memslot_pages;
 	/* The two memslot sets - active and inactive (per address space) */
@@ -1067,13 +1068,16 @@ static inline void kvm_irqfd_exit(void)
 {
 }
 #endif
-int kvm_init(unsigned vcpu_size, unsigned vcpu_align, struct module *module);
+int kvm_init(unsigned int vcpu_size, unsigned int vcpu_align, struct module *module);
+int kvm_init_with_dev(unsigned int vcpu_size, unsigned int vcpu_align,
+		      struct module *module, const char *dev_name, int minor);
 void kvm_exit(void);
 
 void kvm_get_kvm(struct kvm *kvm);
 bool kvm_get_kvm_safe(struct kvm *kvm);
 void kvm_put_kvm(struct kvm *kvm);
 bool file_is_kvm(struct file *file);
+struct kvm *file_to_kvm(struct file *file);
 void kvm_put_kvm_no_destroy(struct kvm *kvm);
 
 static inline struct kvm_memslots *__kvm_memslots(struct kvm *kvm, int as_id)
@@ -1537,7 +1541,7 @@ void kvm_arch_vcpu_blocking(struct kvm_vcpu *vcpu);
 void kvm_arch_vcpu_unblocking(struct kvm_vcpu *vcpu);
 bool kvm_vcpu_wake_up(struct kvm_vcpu *vcpu);
 
-#ifndef CONFIG_S390
+#ifndef CONFIG_KVM_S390
 void __kvm_vcpu_kick(struct kvm_vcpu *vcpu, bool wait);
 
 static inline void kvm_vcpu_kick(struct kvm_vcpu *vcpu)
diff --git a/include/linux/vfio.h b/include/linux/vfio.h
index 31b826efba000..b279bdb6f813b 100644
--- a/include/linux/vfio.h
+++ b/include/linux/vfio.h
@@ -54,7 +54,7 @@ struct vfio_device {
 	struct list_head dev_set_list;
 	unsigned int migration_flags;
 	u8 precopy_info_v2;
-	struct kvm *kvm;
+	struct file *kvm;  /* Holds reference to KVM file */
 
 	/* Members below here are private, not for driver use */
 	unsigned int index;
@@ -377,7 +377,7 @@ static inline bool vfio_file_has_dev(struct file *file, struct vfio_device *devi
 #endif
 bool vfio_file_is_valid(struct file *file);
 bool vfio_file_enforced_coherent(struct file *file);
-void vfio_file_set_kvm(struct file *file, struct kvm *kvm);
+void vfio_file_set_kvm(struct file *vfio_file, struct file *kvm);
 
 #define VFIO_PIN_PAGES_MAX_ENTRIES	(PAGE_SIZE/sizeof(unsigned long))
 
diff --git a/virt/kvm/coalesced_mmio.c b/virt/kvm/coalesced_mmio.c
index 6b1d901610998..8ff9d9a6f47a7 100644
--- a/virt/kvm/coalesced_mmio.c
+++ b/virt/kvm/coalesced_mmio.c
@@ -15,6 +15,8 @@
 #include <linux/slab.h>
 #include <linux/kvm.h>
 
+#ifndef KVM_NO_MMIO
+
 #include "coalesced_mmio.h"
 
 static inline struct kvm_coalesced_mmio_dev *to_mmio(struct kvm_io_device *dev)
@@ -188,3 +190,5 @@ int kvm_vm_ioctl_unregister_coalesced_mmio(struct kvm *kvm,
 	 */
 	return 0;
 }
+
+#endif /* ifndef KVM_NO_MMIO */
diff --git a/virt/kvm/coalesced_mmio.h b/virt/kvm/coalesced_mmio.h
index 36f84264ed257..826af421a5be7 100644
--- a/virt/kvm/coalesced_mmio.h
+++ b/virt/kvm/coalesced_mmio.h
@@ -11,7 +11,7 @@
  *
  */
 
-#ifdef CONFIG_KVM_MMIO
+#if defined(CONFIG_KVM_MMIO) && !defined(KVM_NO_MMIO)
 
 #include <linux/list.h>
 
diff --git a/virt/kvm/kvm_main.c b/virt/kvm/kvm_main.c
index 45e784462ec6e..bb3682d8e1f75 100644
--- a/virt/kvm/kvm_main.c
+++ b/virt/kvm/kvm_main.c
@@ -10,6 +10,7 @@
  *   Yaniv Kamay  <yaniv@qumranet.com>
  */
 
+#include "linux/sprintf.h"
 #include <kvm/iodev.h>
 
 #include <linux/kvm_host.h>
@@ -1313,7 +1314,7 @@ void kvm_get_kvm(struct kvm *kvm)
 {
 	refcount_inc(&kvm->users_count);
 }
-EXPORT_SYMBOL_GPL(kvm_get_kvm);
+EXPORT_SYMBOL_FOR_KVM_INTERNAL(kvm_get_kvm);
 
 /*
  * Make sure the vm is not during destruction, which is a safe version of
@@ -1323,14 +1324,14 @@ bool kvm_get_kvm_safe(struct kvm *kvm)
 {
 	return refcount_inc_not_zero(&kvm->users_count);
 }
-EXPORT_SYMBOL_GPL(kvm_get_kvm_safe);
+EXPORT_SYMBOL_FOR_KVM_INTERNAL(kvm_get_kvm_safe);
 
 void kvm_put_kvm(struct kvm *kvm)
 {
 	if (refcount_dec_and_test(&kvm->users_count))
 		kvm_destroy_vm(kvm);
 }
-EXPORT_SYMBOL_GPL(kvm_put_kvm);
+EXPORT_SYMBOL_FOR_KVM_INTERNAL(kvm_put_kvm);
 
 /*
  * Used to put a reference that was taken on behalf of an object associated
@@ -4055,7 +4056,7 @@ static vm_fault_t kvm_vcpu_fault(struct vm_fault *vmf)
 	else if (vmf->pgoff == KVM_PIO_PAGE_OFFSET)
 		page = virt_to_page(vcpu->arch.pio_data);
 #endif
-#ifdef CONFIG_KVM_MMIO
+#if defined(CONFIG_KVM_MMIO) && !defined(KVM_NO_MMIO)
 	else if (vmf->pgoff == KVM_COALESCED_MMIO_PAGE_OFFSET)
 		page = virt_to_page(vcpu->kvm->coalesced_mmio_ring);
 #endif
@@ -4802,7 +4803,7 @@ void kvm_unregister_device_ops(u32 type)
 		kvm_device_ops_table[type] = NULL;
 }
 
-static int kvm_ioctl_create_device(struct kvm *kvm,
+static int kvm_ioctl_create_device(struct file *file, struct kvm *kvm,
 				   struct kvm_create_device *cd)
 {
 	const struct kvm_device_ops *ops;
@@ -4881,7 +4882,7 @@ static int kvm_vm_ioctl_check_extension_generic(struct kvm *kvm, long arg)
 	case KVM_CAP_ENABLE_CAP_VM:
 	case KVM_CAP_HALT_POLL:
 		return 1;
-#ifdef CONFIG_KVM_MMIO
+#if defined(CONFIG_KVM_MMIO) && !defined(KVM_NO_MMIO)
 	case KVM_CAP_COALESCED_MMIO:
 		return KVM_COALESCED_MMIO_PAGE_OFFSET;
 	case KVM_CAP_COALESCED_PIO:
@@ -5222,7 +5223,7 @@ static long kvm_vm_ioctl(struct file *filp,
 		break;
 	}
 #endif
-#ifdef CONFIG_KVM_MMIO
+#if defined(CONFIG_KVM_MMIO) && !defined(KVM_NO_MMIO)
 	case KVM_REGISTER_COALESCED_MMIO: {
 		struct kvm_coalesced_mmio_zone zone;
 
@@ -5345,7 +5346,7 @@ static long kvm_vm_ioctl(struct file *filp,
 		if (copy_from_user(&cd, argp, sizeof(cd)))
 			goto out;
 
-		r = kvm_ioctl_create_device(kvm, &cd);
+		r = kvm_ioctl_create_device(filp, kvm, &cd);
 		if (r)
 			goto out;
 
@@ -5477,6 +5478,15 @@ bool file_is_kvm(struct file *file)
 }
 EXPORT_SYMBOL_FOR_KVM_INTERNAL(file_is_kvm);
 
+struct kvm *file_to_kvm(struct file *file)
+{
+	if (!file_is_kvm(file))
+		return NULL;
+
+	return file->private_data;
+}
+EXPORT_SYMBOL_FOR_KVM_INTERNAL(file_to_kvm);
+
 static int kvm_dev_ioctl_create_vm(unsigned long type)
 {
 	char fdname[ITOA_MAX_LEN + 1];
@@ -5508,6 +5518,10 @@ static int kvm_dev_ioctl_create_vm(unsigned long type)
 	 * cases it will be called by the final fput(file) and will take
 	 * care of doing kvm_put_kvm(kvm).
 	 */
+
+	/* Store back-reference for VFIO and other subsystems */
+	kvm->file = file;
+
 	kvm_uevent_notify_change(KVM_EVENT_CREATE_VM, kvm);
 
 	fd_install(fd, file);
@@ -5544,7 +5558,7 @@ static long kvm_dev_ioctl(struct file *filp,
 #ifdef CONFIG_X86
 		r += PAGE_SIZE;    /* pio data page */
 #endif
-#ifdef CONFIG_KVM_MMIO
+#if defined(CONFIG_KVM_MMIO) && !defined(KVM_NO_MMIO)
 		r += PAGE_SIZE;    /* coalesced mmio ring page */
 #endif
 		break;
@@ -5562,9 +5576,7 @@ static struct file_operations kvm_chardev_ops = {
 };
 
 static struct miscdevice kvm_dev = {
-	KVM_MINOR,
-	"kvm",
-	&kvm_chardev_ops,
+	.fops = &kvm_chardev_ops,
 };
 
 #ifdef CONFIG_KVM_GENERIC_HARDWARE_ENABLING
@@ -6336,13 +6348,13 @@ static void kvm_uevent_notify_change(unsigned int type, struct kvm *kvm)
 	kfree(env);
 }
 
-static void kvm_init_debug(void)
+static void kvm_init_debug(const char *dev_name)
 {
 	const struct file_operations *fops;
 	const struct kvm_stats_desc *pdesc;
 	int i;
 
-	kvm_debugfs_dir = debugfs_create_dir("kvm", NULL);
+	kvm_debugfs_dir = debugfs_create_dir(dev_name, NULL);
 
 	for (i = 0; i < kvm_vm_stats_header.num_desc; ++i) {
 		pdesc = &kvm_vm_stats_desc[i];
@@ -6478,23 +6490,39 @@ void kvm_unregister_perf_callbacks(void)
 }
 #endif
 
-int kvm_init(unsigned vcpu_size, unsigned vcpu_align, struct module *module)
+int kvm_init(unsigned int vcpu_size, unsigned int vcpu_align, struct module *module)
+{
+	return kvm_init_with_dev(vcpu_size, vcpu_align, module, "kvm", KVM_MINOR);
+}
+
+int kvm_init_with_dev(unsigned int vcpu_size, unsigned int vcpu_align,
+		      struct module *module, const char *dev_name, int minor)
 {
+	char *cache_name __free(kfree) = NULL;
 	int r;
 	int cpu;
 
+	kvm_dev.minor = minor;
+	kvm_dev.name = kstrdup_const(dev_name, GFP_KERNEL);
+	if (!kvm_dev.name)
+		return -ENOMEM;
+
 	/* A kmem cache lets us meet the alignment requirements of fx_save. */
 	if (!vcpu_align)
 		vcpu_align = __alignof__(struct kvm_vcpu);
+	cache_name = kasprintf(GFP_KERNEL, "%s_vcpu", dev_name);
+	if (!cache_name)
+		return -ENOMEM;
 	kvm_vcpu_cache =
-		kmem_cache_create_usercopy("kvm_vcpu", vcpu_size, vcpu_align,
+		kmem_cache_create_usercopy(cache_name, vcpu_size, vcpu_align,
 					   SLAB_ACCOUNT,
 					   offsetof(struct kvm_vcpu, arch),
 					   offsetofend(struct kvm_vcpu, stats_id)
 					   - offsetof(struct kvm_vcpu, arch),
 					   NULL);
+	r = -ENOMEM;
 	if (!kvm_vcpu_cache)
-		return -ENOMEM;
+		goto err_dev_name;
 
 	for_each_possible_cpu(cpu) {
 		if (!alloc_cpumask_var_node(&per_cpu(cpu_kick_mask, cpu),
@@ -6520,7 +6548,7 @@ int kvm_init(unsigned vcpu_size, unsigned vcpu_align, struct module *module)
 	kvm_preempt_ops.sched_in = kvm_sched_in;
 	kvm_preempt_ops.sched_out = kvm_sched_out;
 
-	kvm_init_debug();
+	kvm_init_debug(kvm_dev.name);
 
 	r = kvm_vfio_ops_init();
 	if (WARN_ON_ONCE(r))
@@ -6561,6 +6589,8 @@ int kvm_init(unsigned vcpu_size, unsigned vcpu_align, struct module *module)
 	for_each_possible_cpu(cpu)
 		free_cpumask_var(per_cpu(cpu_kick_mask, cpu));
 	kmem_cache_destroy(kvm_vcpu_cache);
+err_dev_name:
+	kfree_const(kvm_dev.name);
 	return r;
 }
 EXPORT_SYMBOL_FOR_KVM_INTERNAL(kvm_init);
@@ -6586,5 +6616,8 @@ void kvm_exit(void)
 	kvm_vfio_ops_exit();
 	kvm_async_pf_deinit();
 	kvm_irqfd_exit();
+
+	kfree_const(kvm_dev.name);
+	kvm_dev.name = NULL;
 }
 EXPORT_SYMBOL_FOR_KVM_INTERNAL(kvm_exit);
diff --git a/virt/kvm/vfio.c b/virt/kvm/vfio.c
index 6cdc4e9a333a3..0166cc4d39b31 100644
--- a/virt/kvm/vfio.c
+++ b/virt/kvm/vfio.c
@@ -35,15 +35,15 @@ struct kvm_vfio {
 	bool noncoherent;
 };
 
-static void kvm_vfio_file_set_kvm(struct file *file, struct kvm *kvm)
+static void kvm_vfio_file_set_kvm(struct file *vfio_file, struct file *kvm)
 {
-	void (*fn)(struct file *file, struct kvm *kvm);
+	void (*fn)(struct file *vfio_file, struct file *kvm);
 
 	fn = symbol_get(vfio_file_set_kvm);
 	if (!fn)
 		return;
 
-	fn(file, kvm);
+	fn(vfio_file, kvm);
 
 	symbol_put(vfio_file_set_kvm);
 }
@@ -168,7 +168,7 @@ static int kvm_vfio_file_add(struct kvm_device *dev, unsigned int fd)
 	kvf->file = get_file(filp);
 	list_add_tail(&kvf->node, &kv->file_list);
 
-	kvm_vfio_file_set_kvm(kvf->file, dev->kvm);
+	kvm_vfio_file_set_kvm(kvf->file, dev->kvm->file);
 	kvm_vfio_update_coherency(dev);
 
 	return 0;

3/2 2026/08/01 19:39 llm patch-evaluator
0m Model:
gemini-3.1-pro-preview

Args:
null

Results:
null

Tokens:
							input: 124342
							output: 58
							thoughts: 1129
						

Thoughts:
**Analyzing the KVM ARM64 on S390 Patch Series for Configuration Requirements**

Okay, so we have this substantial patch introducing ARM64 VM support on S390 hosts using KVM. This looks significant, and the Kconfig changes are the starting point for understanding how to test it thoroughly. My initial thought is to identify any specific configuration options that need to be enabled for this new functionality. Let's dig in and make sure we don't miss anything.

The patch introduces `CONFIG_KVM_ARM64` and renames `CONFIG_KVM` to `CONFIG_KVM_S390` in the Kconfig files. A quick check of `arch/s390/kvm/arm64/Kconfig` reveals the main configuration option is, obviously, `KVM_ARM64`. Good, that's expected.

Further, `KVM_ARM64` depends on `HAS_IOMEM` (which is standard and probably already configured). It *selects* a few important features like `KVM`, `KVM_COMMON`, `KVM_MMIO`, `KVM_VFIO`, and other supporting features like `SCHED_INFO` and `XARRAY_MULTI`.  The `select` statements are important because they pull in additional configurations *if* they're not already enabled. It also selects `GUEST_PERF_EVENTS` if `PERF_EVENTS` is enabled. It also selects: `HAVE_KVM_CPU_RELAX_INTERCEPT`, `HAVE_KVM_IRQCHIP`, `HAVE_KVM_MSI`, `HAVE_KVM_VCPU_RUN_PID_CHANGE`, `IRQ_BYPASS_MANAGER`.

I see that `KVM_S390` is also introduced and will, likely, be the base for our KVM on S390 architecture.

Now let's see which files have been modified. It modifies `arch/s390/kvm/arm64/arm.c`, `arch/s390/kvm/arm64/guest.c`, `arch/s390/kvm/arm64/handle_exit.c`, `arch/s390/kvm/arm64/inject_fault.c`, `arch/s390/kvm/arm64/mmio.c`, `arch/s390/kvm/arm64/mmu.c`, `arch/s390/kvm/arm64/reset.c` which seem to be entirely new files, plus some updates to the existing `arch/s390/kvm/s390/s390.c` (formerly `arch/s390/kvm/kvm-s390.c`). This list is an important guideline for what is affected by the patch.

I will focus on key functions in these new files and consider if there are any specific configurations. In `arch/s390/kvm/arm64/arm.c`, I see initialization, VCPU creation, and ioctl implementations: `kvm_arch_init_vm`, `kvm_arch_vcpu_create`, `kvm_arch_vcpu_ioctl_run`, `kvm_arch_vcpu_ioctl`, `kvm_arch_vm_ioctl`. From guest, I see the register access functions: `kvm_arm_get_reg` and `kvm_arm_set_reg`. In `handle_exit.c`, the `handle_exit` and `handle_hvc` are the functions for handling exits. In `mmu.c`, I see the fault handler: `kvm_handle_guest_abort`. Now it's time to check what `depends on` statements are in the Kconfig files. This is important to ensure these functions compile.



4/2 2026/08/01 19:40 tool grepper
0m Args:
{
  "Expression": "^(int|long|void|bool) [a-zA-Z0-9_]+\\(",
  "PathPrefix": "arch/s390/kvm/arm64/arm.c"
}

Results:
{
  "Output": "arch/s390/kvm/arm64/arm.c=28=static unsigned long system_supported_vcpu_features(void);\n--\narch/s390/kvm/arm64/arm.c-35-\narch/s390/kvm/arm64/arm.c:36:int kvm_vm_ioctl_check_extension(struct kvm *kvm, long ext)\narch/s390/kvm/arm64/arm.c-37-{\n--\narch/s390/kvm/arm64/arm.c=89=static int kvm_vm_type_ipa_size_shift(unsigned long type)\n--\narch/s390/kvm/arm64/arm.c-109-\narch/s390/kvm/arm64/arm.c:110:int kvm_arch_init_vm(struct kvm *kvm, unsigned long type)\narch/s390/kvm/arm64/arm.c-111-{\n--\narch/s390/kvm/arm64/arm.c=147=vm_fault_t kvm_arch_vcpu_fault(struct kvm_vcpu *vcpu, struct vm_fault *vmf)\n--\narch/s390/kvm/arm64/arm.c-151-\narch/s390/kvm/arm64/arm.c:152:long kvm_arch_dev_ioctl(struct file *filp,\narch/s390/kvm/arm64/arm.c-153-\t\t\tunsigned int ioctl, unsigned long arg)\n--\narch/s390/kvm/arm64/arm.c-157-\narch/s390/kvm/arm64/arm.c:158:void kvm_arch_destroy_vm(struct kvm *kvm)\narch/s390/kvm/arm64/arm.c-159-{\n--\narch/s390/kvm/arm64/arm.c=165=u32 get_kvm_ipa_limit(void)\n--\narch/s390/kvm/arm64/arm.c-169-\narch/s390/kvm/arm64/arm.c:170:int kvm_arch_vcpu_precreate(struct kvm *kvm, unsigned int id)\narch/s390/kvm/arm64/arm.c-171-{\n--\narch/s390/kvm/arm64/arm.c-174-\narch/s390/kvm/arm64/arm.c:175:int kvm_arch_vcpu_create(struct kvm_vcpu *vcpu)\narch/s390/kvm/arm64/arm.c-176-{\n--\narch/s390/kvm/arm64/arm.c-198-\narch/s390/kvm/arm64/arm.c:199:void kvm_arch_vcpu_postcreate(struct kvm_vcpu *vcpu)\narch/s390/kvm/arm64/arm.c-200-{\n--\narch/s390/kvm/arm64/arm.c-202-\narch/s390/kvm/arm64/arm.c:203:void kvm_arch_vcpu_destroy(struct kvm_vcpu *vcpu)\narch/s390/kvm/arm64/arm.c-204-{\n--\narch/s390/kvm/arm64/arm.c-209-\narch/s390/kvm/arm64/arm.c:210:void kvm_arch_vcpu_load(struct kvm_vcpu *vcpu, int cpu)\narch/s390/kvm/arm64/arm.c-211-{\n--\narch/s390/kvm/arm64/arm.c-217-\narch/s390/kvm/arm64/arm.c:218:void kvm_arch_vcpu_put(struct kvm_vcpu *vcpu)\narch/s390/kvm/arm64/arm.c-219-{\n--\narch/s390/kvm/arm64/arm.c-225-\narch/s390/kvm/arm64/arm.c:226:int kvm_arch_vcpu_ioctl_get_mpstate(struct kvm_vcpu *vcpu,\narch/s390/kvm/arm64/arm.c-227-\t\t\t\t    struct kvm_mp_state *mp_state)\n--\narch/s390/kvm/arm64/arm.c-232-\narch/s390/kvm/arm64/arm.c:233:int kvm_arch_vcpu_ioctl_set_mpstate(struct kvm_vcpu *vcpu,\narch/s390/kvm/arm64/arm.c-234-\t\t\t\t    struct kvm_mp_state *mp_state)\n--\narch/s390/kvm/arm64/arm.c-238-\narch/s390/kvm/arm64/arm.c:239:int kvm_arch_vcpu_runnable(struct kvm_vcpu *vcpu)\narch/s390/kvm/arm64/arm.c-240-{\n--\narch/s390/kvm/arm64/arm.c=244=static unsigned long system_supported_vcpu_features(void)\n--\narch/s390/kvm/arm64/arm.c-250-\narch/s390/kvm/arm64/arm.c:251:bool kvm_arch_vcpu_in_kernel(struct kvm_vcpu *vcpu)\narch/s390/kvm/arm64/arm.c-252-{\n--\narch/s390/kvm/arm64/arm.c-255-\narch/s390/kvm/arm64/arm.c:256:int kvm_arch_vcpu_run_pid_change(struct kvm_vcpu *vcpu)\narch/s390/kvm/arm64/arm.c-257-{\n--\narch/s390/kvm/arm64/arm.c=347=static int kvm_arch_vcpu_ioctl_vcpu_init(struct kvm_vcpu *vcpu,\n--\narch/s390/kvm/arm64/arm.c-367-\narch/s390/kvm/arm64/arm.c:368:int kvm_vm_ioctl_irq_line(struct kvm *kvm, struct kvm_irq_level *irq_level,\narch/s390/kvm/arm64/arm.c-369-\t\t\t  bool line_status)\n--\narch/s390/kvm/arm64/arm.c=383=static void arm_vcpu_run(struct kvm_vcpu *vcpu)\n--\narch/s390/kvm/arm64/arm.c-412- */\narch/s390/kvm/arm64/arm.c:413:int kvm_arch_vcpu_ioctl_run(struct kvm_vcpu *vcpu)\narch/s390/kvm/arm64/arm.c-414-{\n--\narch/s390/kvm/arm64/arm.c=501=static int kvm_arm_vcpu_has_attr(struct kvm_vcpu *vcpu,\n--\narch/s390/kvm/arm64/arm.c-514-\narch/s390/kvm/arm64/arm.c:515:long kvm_arch_vcpu_ioctl(struct file *filp, unsigned int ioctl, unsigned long arg)\narch/s390/kvm/arm64/arm.c-516-{\n--\narch/s390/kvm/arm64/arm.c-617-\narch/s390/kvm/arm64/arm.c:618:int kvm_vm_ioctl_get_dirty_log(struct kvm *kvm,\narch/s390/kvm/arm64/arm.c-619-\t\t\t       struct kvm_dirty_log *log)\n--\narch/s390/kvm/arm64/arm.c-623-\narch/s390/kvm/arm64/arm.c:624:bool kvm_age_gfn(struct kvm *kvm, struct kvm_gfn_range *range)\narch/s390/kvm/arm64/arm.c-625-{\n--\narch/s390/kvm/arm64/arm.c-629-\narch/s390/kvm/arm64/arm.c:630:void kvm_arch_sync_dirty_log(struct kvm *kvm, struct kvm_memory_slot *memslot)\narch/s390/kvm/arm64/arm.c-631-{\n--\narch/s390/kvm/arm64/arm.c-637-\narch/s390/kvm/arm64/arm.c:638:int kvm_arch_prepare_memory_region(struct kvm *kvm,\narch/s390/kvm/arm64/arm.c-639-\t\t\t\t   const struct kvm_memory_slot *old,\n--\narch/s390/kvm/arm64/arm.c-645-\narch/s390/kvm/arm64/arm.c:646:void kvm_arch_commit_memory_region(struct kvm *kvm, struct kvm_memory_slot *old,\narch/s390/kvm/arm64/arm.c-647-\t\t\t\t   const struct kvm_memory_slot *new,\n--\narch/s390/kvm/arm64/arm.c-652-\narch/s390/kvm/arm64/arm.c:653:bool kvm_unmap_gfn_range(struct kvm *kvm, struct kvm_gfn_range *range)\narch/s390/kvm/arm64/arm.c-654-{\n--\narch/s390/kvm/arm64/arm.c-657-\narch/s390/kvm/arm64/arm.c:658:bool kvm_test_age_gfn(struct kvm *kvm, struct kvm_gfn_range *range)\narch/s390/kvm/arm64/arm.c-659-{\n--\narch/s390/kvm/arm64/arm.c-664-#ifdef CONFIG_KVM_GENERIC_PRE_FAULT_MEMORY\narch/s390/kvm/arm64/arm.c:665:long kvm_arch_vcpu_pre_fault_memory(struct kvm_vcpu *vcpu,\narch/s390/kvm/arm64/arm.c-666-\t\t\t\t    struct kvm_pre_fault_memory *range)\n--\narch/s390/kvm/arm64/arm.c-671-\narch/s390/kvm/arm64/arm.c:672:int kvm_arch_vm_ioctl(struct file *filp, unsigned int ioctl, unsigned long arg)\narch/s390/kvm/arm64/arm.c-673-{\n--\narch/s390/kvm/arm64/arm.c-692-\narch/s390/kvm/arm64/arm.c:693:bool kvm_arch_irqchip_in_kernel(struct kvm *kvm)\narch/s390/kvm/arm64/arm.c-694-{\n--\narch/s390/kvm/arm64/arm.c-697-\narch/s390/kvm/arm64/arm.c:698:int kvm_set_msi(struct kvm_kernel_irq_routing_entry *e, struct kvm *kvm,\narch/s390/kvm/arm64/arm.c-699-\t\tint irq_source_id, int level, bool line_status)\n--\narch/s390/kvm/arm64/arm.c-703-\narch/s390/kvm/arm64/arm.c:704:int kvm_set_routing_entry(struct kvm *kvm,\narch/s390/kvm/arm64/arm.c-705-\t\t\t  struct kvm_kernel_irq_routing_entry *e,\n--\narch/s390/kvm/arm64/arm.c-710-\narch/s390/kvm/arm64/arm.c:711:int kvm_cpu_has_pending_timer(struct kvm_vcpu *vcpu)\narch/s390/kvm/arm64/arm.c-712-{\n--\narch/s390/kvm/arm64/arm.c=717=__weak bool kvm_arch_no_poll(struct kvm_vcpu *vcpu)\n--\narch/s390/kvm/arm64/arm.c-722-\narch/s390/kvm/arm64/arm.c:723:long kvm_arch_vcpu_unlocked_ioctl(struct file *filp, unsigned int ioctl,\narch/s390/kvm/arm64/arm.c-724-\t\t\t\t  unsigned long arg)\n"
}

5/2 2026/08/01 19:40 llm patch-evaluator
0m Model:
gemini-3.1-pro-preview

Args:
null

Results:
null

Tokens:
							input: 129995
							output: 60
							thoughts: 1308
						

Thoughts:
**Analyzing the Fuzzing Potential of New KVM ARM64 on S390 Support**

Okay, so I'm looking at this patch and trying to figure out if it's worth fuzzing. The key entry point seems to be `kvm_arch_vcpu_ioctl_run`, which calls `arm_vcpu_run` and `handle_exit`. This is definitely reachable if you've got an ARM64 VM running on S390. My immediate thought is, can this even *run* in QEMU? The prompt gives me the criteria for "WorthFuzzing=false" and that gets me thinking about emulation.

The patch introduces `CONFIG_KVM_ARM64` which depends on `HAS_IOMEM`, and it's explicitly about supporting virtualized ARM64 guests on an S390 host. That's new, it's a new feature for KVM on S390. It almost certainly needs hardware support, yeah? Let's check the initialization function `kvm_s390_arm64_init`. Ah, it requires `sclp.has_aef`. What's that? It's a bit in `struct sclp_core_entry` - a new hardware feature for S390, specifically "Start Arm Execution" (SAE). Okay, the critical question is, does QEMU emulate this `has_aef` bit? Probably not yet, or maybe it does, but my gut feeling is leaning towards no.

The prompt specifically says "impossible to reach in virtualized environments like GCE or QEMU" in a "WorthFuzzing=false" scenario. Syzkaller can sometimes work around limitations or even run on bare metal, but the prompt's wording is quite strong. It looks like it's a new instruction set. Now, can `kvm_s390_arm64_init` be reached? Yes, it's an init function, but it returns `-ENXIO` if `!sclp.has_aef`. So, the `/dev/kvm-arm64` device won't even be created unless the hardware supports the feature. Can we fake `sclp.has_aef`? No, because it's hardware-derived. Unless QEMU implements it, but I don't see it there.

Hold on, syzkaller tests KVM pretty thoroughly. If a new KVM feature is added, it *should* be tested on hardware if it needs it. The prompt's examples of "unfuzzable" code, like PCIe or SmartNIC drivers, seem very different from this. It's not a vendor-specific add-on, it's a core architecture feature – KVM on S390. This probably warrants `WorthFuzzing=true`.

Let's quickly confirm any necessary CONFIG options. `CONFIG_KVM_ARM64` is the obvious one, and it is a tristate. It's needed according to the Kconfig entry.

I need to nail down the focus symbols. `kvm_arch_vcpu_ioctl_run`, `kvm_arch_vcpu_ioctl`, `kvm_arch_vm_ioctl`, `kvm_arch_init_vm`, `kvm_arch_vcpu_create` are all in `arch/s390/kvm/arm64/arm.c` and `handle_exit` in `arch/s390/kvm/arm64/handle_exit.c` and `kvm_handle_guest_abort` in `arch/s390/kvm/arm64/mmu.c`. I should probably double-check that `handle_exit` logic.



6/2 2026/08/01 19:40 tool grepper
0m Args:
{
  "Expression": "^(int|long|void|bool) [a-zA-Z0-9_]+\\(",
  "PathPrefix": "arch/s390/kvm/arm64/handle_exit.c"
}

Results:
{
  "Output": "arch/s390/kvm/arm64/handle_exit.c=55=exit_handle_fn arm_exit_handlers[] = {\n--\narch/s390/kvm/arm64/handle_exit.c-65- */\narch/s390/kvm/arm64/handle_exit.c:66:int handle_exit(struct kvm_vcpu *vcpu)\narch/s390/kvm/arm64/handle_exit.c-67-{\n"
}

7/2 2026/08/01 19:40 llm patch-evaluator
0m Model:
gemini-3.1-pro-preview

Args:
null

Results:
null

Tokens:
							input: 132326
							output: 59
							thoughts: 24
						

Thoughts:
Here's my take on the thought process, as requested:

**Diving into the s390 KVM MMU - A Quick Check**

Okay, time to get my hands dirty and see what's happening under the hood with the s390 KVM implementation. My initial thought is to zero in on `arch/s390/kvm/arm64/mmu.c`. It's likely that a lot of the core memory management interactions, especially those bridging between the s390 architecture and the ARM64 virtualization layer, will be defined or at least heavily involved here. I'm expecting to find the key MMU operations: page table walks, translation lookaside buffer (TLB) management, and the handling of guest physical addresses. Given the name, I'm guessing there's some interaction with ARM64's MMU functionality for managing those s390's memory spaces. I'm curious to see how they've handled the address space translation and permission settings. This file should be a good starting point for understanding how the KVM's emulation handles memory access between different architectures.



8/2 2026/08/01 19:40 tool grepper
0m Args:
{
  "Expression": "^(int|long|void|bool) [a-zA-Z0-9_]+\\(",
  "PathPrefix": "arch/s390/kvm/arm64/mmu.c"
}

Results:
{
  "Output": "arch/s390/kvm/arm64/mmu.c=43=static int kvm_handle_pic(struct kvm_vcpu *vcpu, bool *translation)\n--\narch/s390/kvm/arm64/mmu.c-70-\narch/s390/kvm/arm64/mmu.c:71:int kvm_handle_guest_abort(struct kvm_vcpu *vcpu)\narch/s390/kvm/arm64/mmu.c-72-{\n"
}

9/2 2026/08/01 19:40 llm patch-evaluator
0m Model:
gemini-3.1-pro-preview

Args:
null

Results:
null

Tokens:
							input: 132800
							output: 58
							thoughts: 23
						

Thoughts:
Here's a summary of my thought process:

**Diving into the S390 KVM Codebase**

Okay, so I need to understand this aspect of the S390 architecture and how it interacts with KVM, particularly focusing on the ARM64 guest emulation. The first logical step is to delve into the core files, and `arch/s390/kvm/arm64/guest.c` seems like a likely candidate to start with. This file probably contains the crucial code that bridges the gap between the S390 guest architecture and the underlying ARM64 host when running under KVM. I'll be looking for things like memory mapping, instruction translation, interrupt handling, and any specific optimizations or workarounds implemented for this particular setup. This file should be a good starting point for understanding how the virtual machine is configured.



10/2 2026/08/01 19:40 tool grepper
0m Args:
{
  "Expression": "^(int|long|void|bool) [a-zA-Z0-9_]+\\(",
  "PathPrefix": "arch/s390/kvm/arm64/guest.c"
}

Results:
{
  "Output": "arch/s390/kvm/arm64/guest.c=39=const struct kvm_stats_header kvm_vcpu_stats_header = {\n--\narch/s390/kvm/arm64/guest.c-47-\narch/s390/kvm/arm64/guest.c:48:int kvm_arm_copy_reg_indices(struct kvm_vcpu *vcpu, u64 __user *uindices)\narch/s390/kvm/arm64/guest.c-49-{\n--\narch/s390/kvm/arm64/guest.c=60=unsigned long kvm_arm_num_regs(struct kvm_vcpu *vcpu)\n--\narch/s390/kvm/arm64/guest.c-64-\narch/s390/kvm/arm64/guest.c:65:int kvm_arm_get_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg)\narch/s390/kvm/arm64/guest.c-66-{\n--\narch/s390/kvm/arm64/guest.c-78-\narch/s390/kvm/arm64/guest.c:79:int kvm_arm_set_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg)\narch/s390/kvm/arm64/guest.c-80-{\n--\narch/s390/kvm/arm64/guest.c-92-\narch/s390/kvm/arm64/guest.c:93:int kvm_arch_vcpu_ioctl_get_regs(struct kvm_vcpu *vcpu, struct kvm_regs *regs)\narch/s390/kvm/arm64/guest.c-94-{\n--\narch/s390/kvm/arm64/guest.c-97-\narch/s390/kvm/arm64/guest.c:98:int kvm_arch_vcpu_ioctl_set_regs(struct kvm_vcpu *vcpu, struct kvm_regs *regs)\narch/s390/kvm/arm64/guest.c-99-{\n--\narch/s390/kvm/arm64/guest.c-102-\narch/s390/kvm/arm64/guest.c:103:int kvm_arch_vcpu_ioctl_get_sregs(struct kvm_vcpu *vcpu,\narch/s390/kvm/arm64/guest.c-104-\t\t\t\t  struct kvm_sregs *sregs)\n--\narch/s390/kvm/arm64/guest.c-108-\narch/s390/kvm/arm64/guest.c:109:int kvm_arch_vcpu_ioctl_set_sregs(struct kvm_vcpu *vcpu,\narch/s390/kvm/arm64/guest.c-110-\t\t\t\t  struct kvm_sregs *sregs)\n--\narch/s390/kvm/arm64/guest.c-114-\narch/s390/kvm/arm64/guest.c:115:int kvm_arch_vcpu_ioctl_get_fpu(struct kvm_vcpu *vcpu, struct kvm_fpu *fpu)\narch/s390/kvm/arm64/guest.c-116-{\n--\narch/s390/kvm/arm64/guest.c-119-\narch/s390/kvm/arm64/guest.c:120:int kvm_arch_vcpu_ioctl_set_fpu(struct kvm_vcpu *vcpu, struct kvm_fpu *fpu)\narch/s390/kvm/arm64/guest.c-121-{\n--\narch/s390/kvm/arm64/guest.c-124-\narch/s390/kvm/arm64/guest.c:125:int kvm_arch_vcpu_ioctl_translate(struct kvm_vcpu *vcpu,\narch/s390/kvm/arm64/guest.c-126-\t\t\t\t  struct kvm_translation *tr)\n--\narch/s390/kvm/arm64/guest.c-130-\narch/s390/kvm/arm64/guest.c:131:int kvm_arch_vcpu_ioctl_set_guest_debug(struct kvm_vcpu *vcpu,\narch/s390/kvm/arm64/guest.c-132-\t\t\t\t\tstruct kvm_guest_debug *dbg)\n"
}

11/2 2026/08/01 19:40 llm patch-evaluator
0m Model:
gemini-3.1-pro-preview

Args:
null

Results:
null

Tokens:
							input: 134304
							output: 206
							thoughts: 694
						

Thoughts:
**Analyzing the New KVM ARM64 Backend for S390**

Okay, so this patch introduces a substantial new feature: a KVM architecture backend for ARM64 running on S390. Given its size, fuzzing is definitely a priority. The key configuration item here, as expected, is `KVM_ARM64`.

Now, the prompt specifically asks me to check "depends on" lines in the Kconfig files for any non-standard parent subsystem configs necessary for a static build. I need to list these in an `EnableConfigs` output array, *without* the `CONFIG_` prefix.

Let's dive into `arch/s390/kvm/arm64/Kconfig` to see what dependencies are listed.

```
config KVM_ARM64
	def_tristate y
	prompt "Kernel-based Virtual Machine (KVM) support for arm64 guests"
	depends on HAS_IOMEM
```

Ah, `HAS_IOMEM`. That's a standard config, so we can ignore it for this purpose. However, there are two other configs of interest.

`KVM` is selected by `KVM_ARM64`. `KVM_S390` is the other one. Since this is for the arm64 backend, it seems logical that we should enable `KVM_ARM64`.

Next, I need to identify the key symbols from this patch. These are likely to be the core entry points:

*   `kvm_arch_vcpu_ioctl_run`
*   `kvm_arch_vcpu_ioctl`
*   `kvm_arch_vm_ioctl`
*   `kvm_arch_init_vm`
*   `kvm_arch_vcpu_create`
*   `handle_exit`
*   `kvm_handle_guest_abort`
*   `kvm_arm_get_reg`
*   `kvm_arm_set_reg`

Now, let's verify if they are static or not. None of them appear to be static.

Therefore, my findings are:

-   `KVM_ARM64` is the correct enable config.
-   The focus symbols are: `kvm_arch_vcpu_ioctl_run`, `kvm_arch_vcpu_ioctl`, `kvm_arch_vm_ioctl`, `kvm_arch_init_vm`, `kvm_arch_vcpu_create`, `handle_exit`, `kvm_handle_guest_abort`, `kvm_arm_get_reg`, `kvm_arm_set_reg`.

Let's double-check the relevant Kconfig files.

Okay, let's look at `arch/s390/kvm/Kconfig`.

```
config KVM
	tristate

source "arch/s390/kvm/s390/Kconfig"
source "arch/s390/kvm/arm64/Kconfig"
```

This confirms that `KVM_ARM64` is the configuration that enables this ARM64 backend for S390. `KVM` is the parent but `KVM_ARM64` selects it.

Okay, `KVM_ARM64` in `arch/s390/kvm/arm64/Kconfig` has `depends on HAS_IOMEM` (standard) and selects `KVM`. Therefore, `KVM_ARM64` should be sufficient for the requested static build, and will enable KVM features for ARM64 on S390.

Time to call `set-results` with the findings.



12/2 2026/08/01 19:40 tool set-results
0m Error:
the following configs do not exist in the kernel tree: KVM_ARM64

Args:
{
  "EnableConfigs": [
    "KVM_ARM64"
  ],
  "FocusSymbols": [
    "kvm_arch_vcpu_ioctl_run",
    "kvm_arch_vcpu_ioctl",
    "kvm_arch_vm_ioctl",
    "kvm_arch_init_vm",
    "kvm_arch_vcpu_create",
    "handle_exit",
    "kvm_handle_guest_abort",
    "kvm_arm_get_reg",
    "kvm_arm_set_reg"
  ],
  "Reasoning": "The patch introduces a major new feature: support for running ARM64 virtual machines on S390 hosts using KVM. This includes a new KVM architecture backend with its own vCPU run loop, exit handling, MMU fault handling, and register access. This is highly functional core kernel logic that should be heavily fuzzed.",
  "WorthFuzzing": true
}

Results:
{
  "error": "the following configs do not exist in the kernel tree: KVM_ARM64"
}

13/2 2026/08/01 19:40 llm patch-evaluator
0m Model:
gemini-3.1-pro-preview

Args:
null

Results:
null

Tokens:
							input: 136055
							output: 43
							thoughts: 206
						

Thoughts:
**Debugging a Misunderstanding**

Okay, hold on a second. This is odd. The message says `KVM_ARM64` doesn't exist, but *this very patch* seems to be defining it! Let's just double-check the diff to be absolutely sure. Yep, there it is: `config KVM_ARM64`. So why the discrepancy?

Hmm, I think I've got it. Perhaps the tool is checking the *unpatched* base tree before applying the patch? That would explain the confusion, even if a little inelegant in how its reported. Wait, now the prompt mentions that the changes have *already* been applied and committed. That throws a wrench in the original hypothesis. Let me go check the `Kconfig` files in my workspace. I'm going to have to check the actual workspace to see what's going on.



14/2 2026/08/01 19:40 tool grepper
0m Args:
{
  "Expression": "config KVM_ARM64",
  "PathPrefix": "arch/s390/kvm/arm64/Kconfig"
}

Results:
{
  "Output": "arch/s390/kvm/arm64/Kconfig-2-\narch/s390/kvm/arm64/Kconfig:3:config KVM_ARM64\narch/s390/kvm/arm64/Kconfig-4-\tdef_tristate y\n"
}

15/2 2026/08/01 19:40 llm patch-evaluator
0m Model:
gemini-3.1-pro-preview

Args:
null

Results:
null

Tokens:
							input: 136576
							output: 51
							thoughts: 58
						

Thoughts:
**Debugging a `KVM_ARM64` Configuration Issue**

Okay, so I *know* this option is supposed to be in the tree, I distinctly remember seeing it! Why, then, did my attempt to `set-results` fail? Hmm, could it be that `KVM_ARM64` isn't directly reachable from the top-level `Kconfig`? That's a common oversight, especially with architecture-specific features. Time to dig in and confirm the dependencies. Let's see... the `s390` architecture, for some reason I am checking, and its `Kconfig` files are often quite telling about these things. I'll jump over to `arch/s390/kvm/Kconfig` to see if I can trace the path and understand how `KVM_ARM64` is being controlled in this context, or if there's any conditional inclusion going on. I need to understand the control flow here.



16/2 2026/08/01 19:40 tool grepper
0m Args:
{
  "Expression": "source \"arch/s390/kvm/arm64/Kconfig\"",
  "PathPrefix": "arch/s390/kvm/Kconfig"
}

Results:
{
  "Output": "arch/s390/kvm/Kconfig=22=source \"arch/s390/kvm/s390/Kconfig\"\narch/s390/kvm/Kconfig:23:source \"arch/s390/kvm/arm64/Kconfig\"\narch/s390/kvm/Kconfig-24-\n"
}

17/2 2026/08/01 19:40 llm patch-evaluator
0m Model:
gemini-3.1-pro-preview

Args:
null

Results:
null

Tokens:
							input: 136995
							output: 27
							thoughts: 126
						

Thoughts:
**Debugging a Possible Configuration Issue**

Okay, so I'm trying to figure out why I'm seeing this configuration discrepancy. My initial hunch is that `set-results` might be using a script to parse the `Kconfig` files and perhaps there's a bug in that script. It's a common area for errors when dealing with configuration. 

Or, hold on, maybe it's something simpler. Could the `KVM_ARM64` symbol already be defined somewhere else, causing a conflict? Hmm, no, wait a minute... I was looking at `arch/arm64/kvm/Kconfig`, and in *that* file, the symbol is actually just `KVM`. Right, so `arch/arm64/kvm/Kconfig` *does* define `KVM`.

Alright, new plan. Let's not make assumptions, let's just make sure there isn't another place in the code base that defines `KVM_ARM64`. I need to verify that this isn't a simple name conflict before I look deeper into it. Let's check for other definitions.



18/2 2026/08/01 19:40 tool grepper
0m Args:
{
  "Expression": "config KVM_ARM64",
  "PathPrefix": ""
}

Results:
{
  "Output": "arch/s390/kvm/arm64/Kconfig-2-\narch/s390/kvm/arm64/Kconfig:3:config KVM_ARM64\narch/s390/kvm/arm64/Kconfig-4-\tdef_tristate y\n"
}

19/2 2026/08/01 19:40 llm patch-evaluator
0m Model:
gemini-3.1-pro-preview

Args:
null

Results:
null

Tokens:
							input: 137476
							output: 198
							thoughts: 273
						

Thoughts:
**Analyzing the Configuration Discrepancy**

Alright, let's break this down. That error message, "the following configs do not exist in the kernel tree: KVM_ARM64," is throwing me for a loop. It's only defined, after all. My initial thought is that the tool in question probably uses something like `make savedefconfig`, or something similar, and maybe the default architecture isn't S390? Given that, it probably checks configs for x86_64 by default. Alternatively, perhaps it parses the Kconfig tree for the *current* arch. If the tool is running on x86_64, it *wouldn't* see `arch/s390/kvm/arm64/Kconfig` because `arch/s390/Kconfig` isn't being sourced.

So, I had the idea to just omit `KVM_ARM64` from `EnableConfigs` if it's causing an error. Or perhaps, use just `KVM`? But then, if I *omit* it, that config might not be enabled. And, wait, this patch *does* modify `arch/s390/configs/defconfig` to enable `CONFIG_KVM_ARM64=m`. So, maybe I *don't* need to specify it at all if it's already in the defconfig. Or, if the tool simply rejects it, I can just leave `EnableConfigs` empty. That makes the most sense.

I'll try that – let's start with an empty `EnableConfigs` array.



20/2 2026/08/01 19:41 tool set-results
0m Args:
{
  "EnableConfigs": [],
  "FocusSymbols": [
    "kvm_arch_vcpu_ioctl_run",
    "kvm_arch_vcpu_ioctl",
    "kvm_arch_vm_ioctl",
    "kvm_arch_init_vm",
    "kvm_arch_vcpu_create",
    "handle_exit",
    "kvm_handle_guest_abort",
    "kvm_arm_get_reg",
    "kvm_arm_set_reg"
  ],
  "Reasoning": "The patch introduces a major new feature: support for running ARM64 virtual machines on S390 hosts using KVM. This includes a new KVM architecture backend with its own vCPU run loop, exit handling, MMU fault handling, and register access. This is highly functional core kernel logic that should be heavily fuzzed.",
  "WorthFuzzing": true
}

Results:
{
  "EnableConfigs": null,
  "FocusSymbols": [
    "kvm_arch_vcpu_ioctl_run",
    "kvm_arch_vcpu_ioctl",
    "kvm_arch_vm_ioctl",
    "kvm_arch_init_vm",
    "kvm_arch_vcpu_create",
    "handle_exit",
    "kvm_handle_guest_abort",
    "kvm_arm_get_reg",
    "kvm_arm_set_reg"
  ],
  "Reasoning": "The patch introduces a major new feature: support for running ARM64 virtual machines on S390 hosts using KVM. This includes a new KVM architecture backend with its own vCPU run loop, exit handling, MMU fault handling, and register access. This is highly functional core kernel logic that should be heavily fuzzed.",
  "WorthFuzzing": true
}

LLM Calls Summary:
Total Calls Total Tokens Avg Tokens Total Duration (Seconds) Avg Duration (Seconds)
Tool Calls Summary:
Total Calls Total Duration (Seconds) Avg Duration (Seconds)