If the hcall number specified is not one that has an in-kernel
 implementation, the KVM_ENABLE_CAP ioctl will fail with an EINVAL
 error.
+
+7.2 KVM_CAP_S390_USER_SIGP
+
+Architectures: s390
+Parameters: none
+
+This capability controls which SIGP orders will be handled completely in user
+space. With this capability enabled, all fast orders will be handled completely
+in the kernel:
+- SENSE
+- SENSE RUNNING
+- EXTERNAL CALL
+- EMERGENCY SIGNAL
+- CONDITIONAL EMERGENCY SIGNAL
+
+All other orders will be handled completely in user space.
+
+Only privileged operation exceptions will be checked for in the kernel (or even
+in the hardware prior to interception). If this capability is not enabled, the
+old way of handling SIGP orders is used (partially in kernel and user space).
 
        case KVM_CAP_S390_IRQCHIP:
        case KVM_CAP_VM_ATTRIBUTES:
        case KVM_CAP_MP_STATE:
+       case KVM_CAP_S390_USER_SIGP:
                r = 1;
                break;
        case KVM_CAP_NR_VCPUS:
                kvm->arch.use_irqchip = 1;
                r = 0;
                break;
+       case KVM_CAP_S390_USER_SIGP:
+               kvm->arch.user_sigp = 1;
+               r = 0;
+               break;
        default:
                r = -EINVAL;
                break;
 
        return rc;
 }
 
+static int handle_sigp_order_in_user_space(struct kvm_vcpu *vcpu, u8 order_code)
+{
+       if (!vcpu->kvm->arch.user_sigp)
+               return 0;
+
+       switch (order_code) {
+       case SIGP_SENSE:
+       case SIGP_EXTERNAL_CALL:
+       case SIGP_EMERGENCY_SIGNAL:
+       case SIGP_COND_EMERGENCY_SIGNAL:
+       case SIGP_SENSE_RUNNING:
+               return 0;
+       /* update counters as we're directly dropping to user space */
+       case SIGP_STOP:
+               vcpu->stat.instruction_sigp_stop++;
+               break;
+       case SIGP_STOP_AND_STORE_STATUS:
+               vcpu->stat.instruction_sigp_stop_store_status++;
+               break;
+       case SIGP_STORE_STATUS_AT_ADDRESS:
+               vcpu->stat.instruction_sigp_store_status++;
+               break;
+       case SIGP_SET_PREFIX:
+               vcpu->stat.instruction_sigp_prefix++;
+               break;
+       case SIGP_START:
+               vcpu->stat.instruction_sigp_start++;
+               break;
+       case SIGP_RESTART:
+               vcpu->stat.instruction_sigp_restart++;
+               break;
+       case SIGP_INITIAL_CPU_RESET:
+               vcpu->stat.instruction_sigp_init_cpu_reset++;
+               break;
+       case SIGP_CPU_RESET:
+               vcpu->stat.instruction_sigp_cpu_reset++;
+               break;
+       default:
+               vcpu->stat.instruction_sigp_unknown++;
+       }
+
+       VCPU_EVENT(vcpu, 4, "sigp order %u: completely handled in user space",
+                  order_code);
+
+       return 1;
+}
+
 int kvm_s390_handle_sigp(struct kvm_vcpu *vcpu)
 {
        int r1 = (vcpu->arch.sie_block->ipa & 0x00f0) >> 4;
                return kvm_s390_inject_program_int(vcpu, PGM_PRIVILEGED_OP);
 
        order_code = kvm_s390_get_base_disp_rs(vcpu);
+       if (handle_sigp_order_in_user_space(vcpu, order_code))
+               return -EOPNOTSUPP;
 
        if (r1 % 2)
                parameter = vcpu->run->s.regs.gprs[r1];