Merge branch 'for-linus' of git://git390.osdl.marist.edu/pub/scm/linux-2.6

* 'for-linus' of git://git390.osdl.marist.edu/pub/scm/linux-2.6:
  [S390] vmlogrdr function annotation.
  [S390] s390: rename CPU_IDLE to S390_CPU_IDLE
  [S390] cio: Remove prototype for non-existing function cmf_reset().
  [S390] zcrypt: fix request timeout handling
  [S390] system call optimization.
  [S390] dasd: Avoid compile warnings on !CONFIG_DASD_PROFILE
  [S390] Remove volatile from atomic_t
  [S390] Program check in diag 210 under 31 bit
  [S390] Bogomips calculation for 64 bit.
  [S390] smp: Merge smp_count_cpus() and smp_get_save_areas().
  [S390] zcore: Fix __user annotation.
  [S390] fixed cdl-format detection.
  [S390] sclp: Test facility list before executing a service call.
  [S390] sclp: introduce some new interfaces.
  [S390] Fixed comment typo.
  [S390] vmcp cleanup

14 files changed, 264 insertions, 144 deletions

diff --git a/drivers/s390/block/dasd_proc.c b/drivers/s390/block/dasd_proc.c
index 8b3b0f4a157c..ac7e8ef504cb 100644
--- a/drivers/s390/block/dasd_proc.c
+++ b/drivers/s390/block/dasd_proc.c
@@ -28,6 +28,7 @@ static struct proc_dir_entry *dasd_proc_root_entry = NULL;
 static struct proc_dir_entry *dasd_devices_entry = NULL;
 static struct proc_dir_entry *dasd_statistics_entry = NULL;
 
+#ifdef CONFIG_DASD_PROFILE
 static char *
 dasd_get_user_string(const char __user *user_buf, size_t user_len)
 {
@@ -47,6 +48,7 @@ dasd_get_user_string(const char __user *user_buf, size_t user_len)
                 buffer[user_len] = 0;
         return buffer;
 }
+#endif /* CONFIG_DASD_PROFILE */
 
 static int
 dasd_devices_show(struct seq_file *m, void *v)
@@ -167,6 +169,7 @@ dasd_calc_metrics(char *page, char **start, off_t off,
         return len;
 }
 
+#ifdef CONFIG_DASD_PROFILE
 static char *
 dasd_statistics_array(char *str, unsigned int *array, int shift)
 {
@@ -180,6 +183,7 @@ dasd_statistics_array(char *str, unsigned int *array, int shift)
         str += sprintf(str,"\n");
         return str;
 }
+#endif /* CONFIG_DASD_PROFILE */
 
 static int
 dasd_statistics_read(char *page, char **start, off_t off,
diff --git a/drivers/s390/char/sclp.h b/drivers/s390/char/sclp.h
index dbb99d1b6f57..c7318a125852 100644
--- a/drivers/s390/char/sclp.h
+++ b/drivers/s390/char/sclp.h
@@ -72,6 +72,18 @@ typedef unsigned int sclp_cmdw_t;
 
 typedef u32 sccb_mask_t;        /* ATTENTION: assumes 32bit mask !!! */
 
+struct sccb_header {
+        u16     length;
+        u8      function_code;
+        u8      control_mask[3];
+        u16     response_code;
+} __attribute__((packed));
+
+extern u64 sclp_facilities;
+
+#define SCLP_HAS_CHP_INFO       (sclp_facilities & 0x8000000000000000ULL)
+#define SCLP_HAS_CHP_RECONFIG   (sclp_facilities & 0x2000000000000000ULL)
+
 struct gds_subvector {
         u8      length;
         u8      key;
diff --git a/drivers/s390/char/sclp_chp.c b/drivers/s390/char/sclp_chp.c
index a66b914519b5..c68f5e7e63a0 100644
--- a/drivers/s390/char/sclp_chp.c
+++ b/drivers/s390/char/sclp_chp.c
@@ -55,6 +55,8 @@ static int do_configure(sclp_cmdw_t cmd)
         struct chp_cfg_data *data;
         int rc;
 
+        if (!SCLP_HAS_CHP_RECONFIG)
+                return -EOPNOTSUPP;
         /* Prepare sccb. */
         data = (struct chp_cfg_data *) get_zeroed_page(GFP_KERNEL | GFP_DMA);
         if (!data)
@@ -152,6 +154,8 @@ int sclp_chp_read_info(struct sclp_chp_info *info)
         struct chp_info_data *data;
         int rc;
 
+        if (!SCLP_HAS_CHP_INFO)
+                return -EOPNOTSUPP;
         /* Prepare sccb. */
         data = (struct chp_info_data *) get_zeroed_page(GFP_KERNEL | GFP_DMA);
         if (!data)
diff --git a/drivers/s390/char/sclp_info.c b/drivers/s390/char/sclp_info.c
index 7bcbe643b087..a1136e052750 100644
--- a/drivers/s390/char/sclp_info.c
+++ b/drivers/s390/char/sclp_info.c
@@ -11,47 +11,106 @@
 #include <asm/sclp.h>
 #include "sclp.h"
 
-struct sclp_readinfo_sccb s390_readinfo_sccb;
+struct sclp_readinfo_sccb {
+        struct  sccb_header header;     /* 0-7 */
+        u16     rnmax;                  /* 8-9 */
+        u8      rnsize;                 /* 10 */
+        u8      _reserved0[24 - 11];    /* 11-23 */
+        u8      loadparm[8];            /* 24-31 */
+        u8      _reserved1[48 - 32];    /* 32-47 */
+        u64     facilities;             /* 48-55 */
+        u8      _reserved2[91 - 56];    /* 56-90 */
+        u8      flags;                  /* 91 */
+        u8      _reserved3[100 - 92];   /* 92-99 */
+        u32     rnsize2;                /* 100-103 */
+        u64     rnmax2;                 /* 104-111 */
+        u8      _reserved4[4096 - 112]; /* 112-4095 */
+} __attribute__((packed, aligned(4096)));
+
+static struct sclp_readinfo_sccb __initdata early_readinfo_sccb;
+static int __initdata early_readinfo_sccb_valid;
+
+u64 sclp_facilities;
 
 void __init sclp_readinfo_early(void)
 {
-        sclp_cmdw_t command;
-        struct sccb_header *sccb;
         int ret;
+        int i;
+        struct sclp_readinfo_sccb *sccb;
+        sclp_cmdw_t commands[] = {SCLP_CMDW_READ_SCP_INFO_FORCED,
+                                  SCLP_CMDW_READ_SCP_INFO};
 
-        __ctl_set_bit(0, 9); /* enable service signal subclass mask */
-
-        sccb = &s390_readinfo_sccb.header;
-        command = SCLP_CMDW_READ_SCP_INFO_FORCED;
-        while (1) {
-                u16 response;
-
-                memset(&s390_readinfo_sccb, 0, sizeof(s390_readinfo_sccb));
-                sccb->length = sizeof(s390_readinfo_sccb);
-                sccb->control_mask[2] = 0x80;
-
-                ret = sclp_service_call(command, &s390_readinfo_sccb);
-
-                if (ret == -EIO)
-                        goto out;
-                if (ret == -EBUSY)
-                        continue;
+        /* Enable service signal subclass mask. */
+        __ctl_set_bit(0, 9);
+        sccb = &early_readinfo_sccb;
+        for (i = 0; i < ARRAY_SIZE(commands); i++) {
+                do {
+                        memset(sccb, 0, sizeof(*sccb));
+                        sccb->header.length = sizeof(*sccb);
+                        sccb->header.control_mask[2] = 0x80;
+                        ret = sclp_service_call(commands[i], sccb);
+                } while (ret == -EBUSY);
 
+                if (ret)
+                        break;
                 __load_psw_mask(PSW_BASE_BITS | PSW_MASK_EXT |
                                 PSW_MASK_WAIT | PSW_DEFAULT_KEY);
                 local_irq_disable();
+                /*
+                 * Contents of the sccb might have changed
+                 * therefore a barrier is needed.
+                 */
                 barrier();
+                if (sccb->header.response_code == 0x10) {
+                        early_readinfo_sccb_valid = 1;
+                        break;
+                }
+                if (sccb->header.response_code != 0x1f0)
+                        break;
+        }
+        /* Disable service signal subclass mask again. */
+        __ctl_clear_bit(0, 9);
+}
 
-                response = sccb->response_code;
+void __init sclp_facilities_detect(void)
+{
+        if (!early_readinfo_sccb_valid)
+                return;
+        sclp_facilities = early_readinfo_sccb.facilities;
+}
 
-                if (response == 0x10)
-                        break;
+unsigned long long __init sclp_memory_detect(void)
+{
+        unsigned long long memsize;
+        struct sclp_readinfo_sccb *sccb;
 
-                if (response != 0x1f0 || command == SCLP_CMDW_READ_SCP_INFO)
-                        break;
+        if (!early_readinfo_sccb_valid)
+                return 0;
+        sccb = &early_readinfo_sccb;
+        if (sccb->rnsize)
+                memsize = sccb->rnsize << 20;
+        else
+                memsize = sccb->rnsize2 << 20;
+        if (sccb->rnmax)
+                memsize *= sccb->rnmax;
+        else
+                memsize *= sccb->rnmax2;
+        return memsize;
+}
 
-                command = SCLP_CMDW_READ_SCP_INFO;
-        }
-out:
-        __ctl_clear_bit(0, 9); /* disable service signal subclass mask */
+/*
+ * This function will be called after sclp_memory_detect(), which gets called
+ * early from early.c code. Therefore the sccb should have valid contents.
+ */
+void __init sclp_get_ipl_info(struct sclp_ipl_info *info)
+{
+        struct sclp_readinfo_sccb *sccb;
+
+        if (!early_readinfo_sccb_valid)
+                return;
+        sccb = &early_readinfo_sccb;
+        info->is_valid = 1;
+        if (sccb->flags & 0x2)
+                info->has_dump = 1;
+        memcpy(&info->loadparm, &sccb->loadparm, LOADPARM_LEN);
 }
diff --git a/drivers/s390/char/vmcp.c b/drivers/s390/char/vmcp.c
index fce3dac5cb3e..82e6a6b253eb 100644
--- a/drivers/s390/char/vmcp.c
+++ b/drivers/s390/char/vmcp.c
@@ -175,13 +175,12 @@ static long vmcp_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
 
 static const struct file_operations vmcp_fops = {
         .owner          = THIS_MODULE,
-        .open           = &vmcp_open,
-        .release        = &vmcp_release,
-        .read           = &vmcp_read,
-        .llseek         = &no_llseek,
-        .write          = &vmcp_write,
-        .unlocked_ioctl = &vmcp_ioctl,
-        .compat_ioctl   = &vmcp_ioctl
+        .open           = vmcp_open,
+        .release        = vmcp_release,
+        .read           = vmcp_read,
+        .write          = vmcp_write,
+        .unlocked_ioctl = vmcp_ioctl,
+        .compat_ioctl   = vmcp_ioctl
 };
 
 static struct miscdevice vmcp_dev = {
diff --git a/drivers/s390/char/vmlogrdr.c b/drivers/s390/char/vmlogrdr.c
index a5a00e9ae4d0..12f7a4ce82c1 100644
--- a/drivers/s390/char/vmlogrdr.c
+++ b/drivers/s390/char/vmlogrdr.c
@@ -835,7 +835,7 @@ static void vmlogrdr_cleanup(void)
 }
 
 
-static int vmlogrdr_init(void)
+static int __init vmlogrdr_init(void)
 {
         int rc;
         int i;
@@ -885,7 +885,7 @@ cleanup:
 }
 
 
-static void vmlogrdr_exit(void)
+static void __exit vmlogrdr_exit(void)
 {
         vmlogrdr_cleanup();
         printk (KERN_INFO "vmlogrdr: driver unloaded\n");
diff --git a/drivers/s390/char/zcore.c b/drivers/s390/char/zcore.c
index 4e711a985d59..3712ede16723 100644
--- a/drivers/s390/char/zcore.c
+++ b/drivers/s390/char/zcore.c
@@ -156,7 +156,7 @@ static int memcpy_real(void *dest, unsigned long src, size_t count)
         return rc;
 }
 
-static int memcpy_real_user(__user void *dest, unsigned long src, size_t count)
+static int memcpy_real_user(void __user *dest, unsigned long src, size_t count)
 {
         static char buf[4096];
         int offs = 0, size;
diff --git a/drivers/s390/cio/device_id.c b/drivers/s390/cio/device_id.c
index 997f46874537..60b9347f7c92 100644
--- a/drivers/s390/cio/device_id.c
+++ b/drivers/s390/cio/device_id.c
@@ -27,7 +27,6 @@
 /*
  * diag210 is used under VM to get information about a virtual device
  */
-#ifdef CONFIG_64BIT
 int
 diag210(struct diag210 * addr)
 {
@@ -43,6 +42,7 @@ diag210(struct diag210 * addr)
         spin_lock_irqsave(&diag210_lock, flags);
         diag210_tmp = *addr;
 
+#ifdef CONFIG_64BIT
         asm volatile(
                 "       lhi     %0,-1\n"
                 "       sam31\n"
@@ -51,19 +51,8 @@ diag210(struct diag210 * addr)
                 "       srl     %0,28\n"
                 "1:     sam64\n"
                 EX_TABLE(0b,1b)
-                : "=&d" (ccode) : "a" (__pa(&diag210_tmp)) : "cc", "memory");
-
-        *addr = diag210_tmp;
-        spin_unlock_irqrestore(&diag210_lock, flags);
-
-        return ccode;
-}
+                : "=&d" (ccode) : "a" (&diag210_tmp) : "cc", "memory");
 #else
-int
-diag210(struct diag210 * addr)
-{
-        int ccode;
-
         asm volatile(
                 "       lhi     %0,-1\n"
                 "       diag    %1,0,0x210\n"
@@ -71,11 +60,14 @@ diag210(struct diag210 * addr)
                 "       srl     %0,28\n"
                 "1:\n"
                 EX_TABLE(0b,1b)
-                : "=&d" (ccode) : "a" (__pa(addr)) : "cc", "memory");
+                : "=&d" (ccode) : "a" (&diag210_tmp) : "cc", "memory");
+#endif
+
+        *addr = diag210_tmp;
+        spin_unlock_irqrestore(&diag210_lock, flags);
 
         return ccode;
 }
-#endif
 
 /*
  * Input :
diff --git a/drivers/s390/crypto/ap_bus.c b/drivers/s390/crypto/ap_bus.c
index 5aac0ec36368..90bd22014513 100644
--- a/drivers/s390/crypto/ap_bus.c
+++ b/drivers/s390/crypto/ap_bus.c
@@ -43,6 +43,7 @@ static void ap_poll_all(unsigned long);
 static void ap_poll_timeout(unsigned long);
 static int ap_poll_thread_start(void);
 static void ap_poll_thread_stop(void);
+static void ap_request_timeout(unsigned long);
 
 /**
  * Module description.
@@ -189,6 +190,7 @@ int ap_send(ap_qid_t qid, unsigned long long psmid, void *msg, size_t length)
         case AP_RESPONSE_NORMAL:
                 return 0;
         case AP_RESPONSE_Q_FULL:
+        case AP_RESPONSE_RESET_IN_PROGRESS:
                 return -EBUSY;
         default:        /* Device is gone. */
                 return -ENODEV;
@@ -252,6 +254,8 @@ int ap_recv(ap_qid_t qid, unsigned long long *psmid, void *msg, size_t length)
                 if (status.queue_empty)
                         return -ENOENT;
                 return -EBUSY;
+        case AP_RESPONSE_RESET_IN_PROGRESS:
+                return -EBUSY;
         default:
                 return -ENODEV;
         }
@@ -326,11 +330,12 @@ static int ap_init_queue(ap_qid_t qid)
                         i = AP_MAX_RESET;       /* return with -ENODEV */
                         break;
                 case AP_RESPONSE_RESET_IN_PROGRESS:
+                        rc = -EBUSY;
                 case AP_RESPONSE_BUSY:
                 default:
                         break;
                 }
-                if (rc != -ENODEV)
+                if (rc != -ENODEV && rc != -EBUSY)
                         break;
                 if (i < AP_MAX_RESET - 1) {
                         udelay(5);
@@ -341,6 +346,40 @@ static int ap_init_queue(ap_qid_t qid)
 }
 
 /**
+ * Arm request timeout if a AP device was idle and a new request is submitted.
+ */
+static void ap_increase_queue_count(struct ap_device *ap_dev)
+{
+        int timeout = ap_dev->drv->request_timeout;
+
+        ap_dev->queue_count++;
+        if (ap_dev->queue_count == 1) {
+                mod_timer(&ap_dev->timeout, jiffies + timeout);
+                ap_dev->reset = AP_RESET_ARMED;
+        }
+}
+
+/**
+ * AP device is still alive, re-schedule request timeout if there are still
+ * pending requests.
+ */
+static void ap_decrease_queue_count(struct ap_device *ap_dev)
+{
+        int timeout = ap_dev->drv->request_timeout;
+
+        ap_dev->queue_count--;
+        if (ap_dev->queue_count > 0)
+                mod_timer(&ap_dev->timeout, jiffies + timeout);
+        else
+                /**
+                 * The timeout timer should to be disabled now - since
+                 * del_timer_sync() is very expensive, we just tell via the
+                 * reset flag to ignore the pending timeout timer.
+                 */
+                ap_dev->reset = AP_RESET_IGNORE;
+}
+
+/**
  * AP device related attributes.
  */
 static ssize_t ap_hwtype_show(struct device *dev,
@@ -498,6 +537,7 @@ static int ap_device_remove(struct device *dev)
         struct ap_driver *ap_drv = ap_dev->drv;
 
         ap_flush_queue(ap_dev);
+        del_timer_sync(&ap_dev->timeout);
         if (ap_drv->remove)
                 ap_drv->remove(ap_dev);
         spin_lock_bh(&ap_device_lock);
@@ -759,17 +799,21 @@ static void ap_scan_bus(struct work_struct *unused)
                                       __ap_scan_bus);
                 rc = ap_query_queue(qid, &queue_depth, &device_type);
                 if (dev) {
+                        if (rc == -EBUSY) {
+                                set_current_state(TASK_UNINTERRUPTIBLE);
+                                schedule_timeout(AP_RESET_TIMEOUT);
+                                rc = ap_query_queue(qid, &queue_depth,
+                                                    &device_type);
+                        }
                         ap_dev = to_ap_dev(dev);
                         spin_lock_bh(&ap_dev->lock);
                         if (rc || ap_dev->unregistered) {
                                 spin_unlock_bh(&ap_dev->lock);
-                                put_device(dev);
                                 device_unregister(dev);
+                                put_device(dev);
                                 continue;
-                        } else
-                                spin_unlock_bh(&ap_dev->lock);
-                }
-                if (dev) {
+                        }
+                        spin_unlock_bh(&ap_dev->lock);
                         put_device(dev);
                         continue;
                 }
@@ -788,6 +832,8 @@ static void ap_scan_bus(struct work_struct *unused)
                 INIT_LIST_HEAD(&ap_dev->pendingq);
                 INIT_LIST_HEAD(&ap_dev->requestq);
                 INIT_LIST_HEAD(&ap_dev->list);
+                setup_timer(&ap_dev->timeout, ap_request_timeout,
+                            (unsigned long) ap_dev);
                 if (device_type == 0)
                         ap_probe_device_type(ap_dev);
                 else
@@ -853,7 +899,7 @@ static int ap_poll_read(struct ap_device *ap_dev, unsigned long *flags)
         switch (status.response_code) {
         case AP_RESPONSE_NORMAL:
                 atomic_dec(&ap_poll_requests);
-                ap_dev->queue_count--;
+                ap_decrease_queue_count(ap_dev);
                 list_for_each_entry(ap_msg, &ap_dev->pendingq, list) {
                         if (ap_msg->psmid != ap_dev->reply->psmid)
                                 continue;
@@ -904,7 +950,7 @@ static int ap_poll_write(struct ap_device *ap_dev, unsigned long *flags)
         switch (status.response_code) {
         case AP_RESPONSE_NORMAL:
                 atomic_inc(&ap_poll_requests);
-                ap_dev->queue_count++;
+                ap_increase_queue_count(ap_dev);
                 list_move_tail(&ap_msg->list, &ap_dev->pendingq);
                 ap_dev->requestq_count--;
                 ap_dev->pendingq_count++;
@@ -914,6 +960,7 @@ static int ap_poll_write(struct ap_device *ap_dev, unsigned long *flags)
                 *flags |= 2;
                 break;
         case AP_RESPONSE_Q_FULL:
+        case AP_RESPONSE_RESET_IN_PROGRESS:
                 *flags |= 2;
                 break;
         case AP_RESPONSE_MESSAGE_TOO_BIG:
@@ -960,10 +1007,11 @@ static int __ap_queue_message(struct ap_device *ap_dev, struct ap_message *ap_ms
                         list_add_tail(&ap_msg->list, &ap_dev->pendingq);
                         atomic_inc(&ap_poll_requests);
                         ap_dev->pendingq_count++;
-                        ap_dev->queue_count++;
+                        ap_increase_queue_count(ap_dev);
                         ap_dev->total_request_count++;
                         break;
                 case AP_RESPONSE_Q_FULL:
+                case AP_RESPONSE_RESET_IN_PROGRESS:
                         list_add_tail(&ap_msg->list, &ap_dev->requestq);
                         ap_dev->requestq_count++;
                         ap_dev->total_request_count++;
@@ -1046,6 +1094,25 @@ static void ap_poll_timeout(unsigned long unused)
 }
 
 /**
+ * Reset a not responding AP device and move all requests from the
+ * pending queue to the request queue.
+ */
+static void ap_reset(struct ap_device *ap_dev)
+{
+        int rc;
+
+        ap_dev->reset = AP_RESET_IGNORE;
+        atomic_sub(ap_dev->queue_count, &ap_poll_requests);
+        ap_dev->queue_count = 0;
+        list_splice_init(&ap_dev->pendingq, &ap_dev->requestq);
+        ap_dev->requestq_count += ap_dev->pendingq_count;
+        ap_dev->pendingq_count = 0;
+        rc = ap_init_queue(ap_dev->qid);
+        if (rc == -ENODEV)
+                ap_dev->unregistered = 1;
+}
+
+/**
  * Poll all AP devices on the bus in a round robin fashion. Continue
  * polling until bit 2^0 of the control flags is not set. If bit 2^1
  * of the control flags has been set arm the poll timer.
@@ -1056,6 +1123,8 @@ static int __ap_poll_all(struct ap_device *ap_dev, unsigned long *flags)
         if (!ap_dev->unregistered) {
                 if (ap_poll_queue(ap_dev, flags))
                         ap_dev->unregistered = 1;
+                if (ap_dev->reset == AP_RESET_DO)
+                        ap_reset(ap_dev);
         }
         spin_unlock(&ap_dev->lock);
         return 0;
@@ -1147,6 +1216,17 @@ static void ap_poll_thread_stop(void)
         mutex_unlock(&ap_poll_thread_mutex);
 }
 
+/**
+ * Handling of request timeouts
+ */
+static void ap_request_timeout(unsigned long data)
+{
+        struct ap_device *ap_dev = (struct ap_device *) data;
+
+        if (ap_dev->reset == AP_RESET_ARMED)
+                ap_dev->reset = AP_RESET_DO;
+}
+
 static void ap_reset_domain(void)
 {
         int i;
diff --git a/drivers/s390/crypto/ap_bus.h b/drivers/s390/crypto/ap_bus.h
index 008559ea742b..87c2d6442875 100644
--- a/drivers/s390/crypto/ap_bus.h
+++ b/drivers/s390/crypto/ap_bus.h
@@ -33,6 +33,7 @@
 #define AP_DEVICES 64           /* Number of AP devices. */
 #define AP_DOMAINS 16           /* Number of AP domains. */
 #define AP_MAX_RESET 90         /* Maximum number of resets. */
+#define AP_RESET_TIMEOUT (HZ/2) /* Time in ticks for reset timeouts. */
 #define AP_CONFIG_TIME 30       /* Time in seconds between AP bus rescans. */
 #define AP_POLL_TIME 1          /* Time in ticks between receive polls. */
 
@@ -83,6 +84,13 @@ struct ap_queue_status {
 #define AP_DEVICE_TYPE_CEX2A    6
 #define AP_DEVICE_TYPE_CEX2C    7
 
+/**
+ * AP reset flag states
+ */
+#define AP_RESET_IGNORE 0       /* request timeout will be ignored */
+#define AP_RESET_ARMED  1       /* request timeout timer is active */
+#define AP_RESET_DO     2       /* AP reset required */
+
 struct ap_device;
 struct ap_message;
 
@@ -95,6 +103,7 @@ struct ap_driver {
         /* receive is called from tasklet context */
         void (*receive)(struct ap_device *, struct ap_message *,
                         struct ap_message *);
+        int request_timeout;            /* request timeout in jiffies */
 };
 
 #define to_ap_drv(x) container_of((x), struct ap_driver, driver)
@@ -112,6 +121,8 @@ struct ap_device {
         int queue_depth;                /* AP queue depth.*/
         int device_type;                /* AP device type. */
         int unregistered;               /* marks AP device as unregistered */
+        struct timer_list timeout;      /* Timer for request timeouts. */
+        int reset;                      /* Reset required after req. timeout. */
 
         int queue_count;                /* # messages currently on AP queue. */
 
diff --git a/drivers/s390/crypto/zcrypt_cex2a.c b/drivers/s390/crypto/zcrypt_cex2a.c
index 5bb13a9d0898..08657f604b8c 100644
--- a/drivers/s390/crypto/zcrypt_cex2a.c
+++ b/drivers/s390/crypto/zcrypt_cex2a.c
@@ -70,6 +70,7 @@ static struct ap_driver zcrypt_cex2a_driver = {
         .remove = zcrypt_cex2a_remove,
         .receive = zcrypt_cex2a_receive,
         .ids = zcrypt_cex2a_ids,
+        .request_timeout = CEX2A_CLEANUP_TIME,
 };
 
 /**
@@ -306,18 +307,13 @@ static long zcrypt_cex2a_modexpo(struct zcrypt_device *zdev,
                 goto out_free;
         init_completion(&work);
         ap_queue_message(zdev->ap_dev, &ap_msg);
-        rc = wait_for_completion_interruptible_timeout(
-                                &work, CEX2A_CLEANUP_TIME);
-        if (rc > 0)
+        rc = wait_for_completion_interruptible(&work);
+        if (rc == 0)
                 rc = convert_response(zdev, &ap_msg, mex->outputdata,
                                       mex->outputdatalength);
-        else {
-                /* Signal pending or message timed out. */
+        else
+                /* Signal pending. */
                 ap_cancel_message(zdev->ap_dev, &ap_msg);
-                if (rc == 0)
-                        /* Message timed out. */
-                        rc = -ETIME;
-        }
 out_free:
         kfree(ap_msg.message);
         return rc;
@@ -348,18 +344,13 @@ static long zcrypt_cex2a_modexpo_crt(struct zcrypt_device *zdev,
                 goto out_free;
         init_completion(&work);
         ap_queue_message(zdev->ap_dev, &ap_msg);
-        rc = wait_for_completion_interruptible_timeout(
-                                &work, CEX2A_CLEANUP_TIME);
-        if (rc > 0)
+        rc = wait_for_completion_interruptible(&work);
+        if (rc == 0)
                 rc = convert_response(zdev, &ap_msg, crt->outputdata,
                                       crt->outputdatalength);
-        else {
-                /* Signal pending or message timed out. */
+        else
+                /* Signal pending. */
                 ap_cancel_message(zdev->ap_dev, &ap_msg);
-                if (rc == 0)
-                        /* Message timed out. */
-                        rc = -ETIME;
-        }
 out_free:
         kfree(ap_msg.message);
         return rc;
diff --git a/drivers/s390/crypto/zcrypt_pcica.c b/drivers/s390/crypto/zcrypt_pcica.c
index 818ffe05ac00..6e93b4751782 100644
--- a/drivers/s390/crypto/zcrypt_pcica.c
+++ b/drivers/s390/crypto/zcrypt_pcica.c
@@ -70,6 +70,7 @@ static struct ap_driver zcrypt_pcica_driver = {
         .remove = zcrypt_pcica_remove,
         .receive = zcrypt_pcica_receive,
         .ids = zcrypt_pcica_ids,
+        .request_timeout = PCICA_CLEANUP_TIME,
 };
 
 /**
@@ -290,18 +291,13 @@ static long zcrypt_pcica_modexpo(struct zcrypt_device *zdev,
                 goto out_free;
         init_completion(&work);
         ap_queue_message(zdev->ap_dev, &ap_msg);
-        rc = wait_for_completion_interruptible_timeout(
-                                &work, PCICA_CLEANUP_TIME);
-        if (rc > 0)
+        rc = wait_for_completion_interruptible(&work);
+        if (rc == 0)
                 rc = convert_response(zdev, &ap_msg, mex->outputdata,
                                       mex->outputdatalength);
-        else {
-                /* Signal pending or message timed out. */
+        else
+                /* Signal pending. */
                 ap_cancel_message(zdev->ap_dev, &ap_msg);
-                if (rc == 0)
-                        /* Message timed out. */
-                        rc = -ETIME;
-        }
 out_free:
         kfree(ap_msg.message);
         return rc;
@@ -332,18 +328,13 @@ static long zcrypt_pcica_modexpo_crt(struct zcrypt_device *zdev,
                 goto out_free;
         init_completion(&work);
         ap_queue_message(zdev->ap_dev, &ap_msg);
-        rc = wait_for_completion_interruptible_timeout(
-                                &work, PCICA_CLEANUP_TIME);
-        if (rc > 0)
+        rc = wait_for_completion_interruptible(&work);
+        if (rc == 0)
                 rc = convert_response(zdev, &ap_msg, crt->outputdata,
                                       crt->outputdatalength);
-        else {
-                /* Signal pending or message timed out. */
+        else
+                /* Signal pending. */
                 ap_cancel_message(zdev->ap_dev, &ap_msg);
-                if (rc == 0)
-                        /* Message timed out. */
-                        rc = -ETIME;
-        }
 out_free:
         kfree(ap_msg.message);
         return rc;
diff --git a/drivers/s390/crypto/zcrypt_pcicc.c b/drivers/s390/crypto/zcrypt_pcicc.c
index f295a403b29a..d6d59bf9ac38 100644
--- a/drivers/s390/crypto/zcrypt_pcicc.c
+++ b/drivers/s390/crypto/zcrypt_pcicc.c
@@ -82,6 +82,7 @@ static struct ap_driver zcrypt_pcicc_driver = {
         .remove = zcrypt_pcicc_remove,
         .receive = zcrypt_pcicc_receive,
         .ids = zcrypt_pcicc_ids,
+        .request_timeout = PCICC_CLEANUP_TIME,
 };
 
 /**
@@ -501,18 +502,13 @@ static long zcrypt_pcicc_modexpo(struct zcrypt_device *zdev,
                 goto out_free;
         init_completion(&work);
         ap_queue_message(zdev->ap_dev, &ap_msg);
-        rc = wait_for_completion_interruptible_timeout(
-                                &work, PCICC_CLEANUP_TIME);
-        if (rc > 0)
+        rc = wait_for_completion_interruptible(&work);
+        if (rc == 0)
                 rc = convert_response(zdev, &ap_msg, mex->outputdata,
                                       mex->outputdatalength);
-        else {
-                /* Signal pending or message timed out. */
+        else
+                /* Signal pending. */
                 ap_cancel_message(zdev->ap_dev, &ap_msg);
-                if (rc == 0)
-                        /* Message timed out. */
-                        rc = -ETIME;
-        }
 out_free:
         free_page((unsigned long) ap_msg.message);
         return rc;
@@ -544,18 +540,13 @@ static long zcrypt_pcicc_modexpo_crt(struct zcrypt_device *zdev,
                 goto out_free;
         init_completion(&work);
         ap_queue_message(zdev->ap_dev, &ap_msg);
-        rc = wait_for_completion_interruptible_timeout(
-                                &work, PCICC_CLEANUP_TIME);
-        if (rc > 0)
+        rc = wait_for_completion_interruptible(&work);
+        if (rc == 0)
                 rc = convert_response(zdev, &ap_msg, crt->outputdata,
                                       crt->outputdatalength);
-        else {
-                /* Signal pending or message timed out. */
+        else
+                /* Signal pending. */
                 ap_cancel_message(zdev->ap_dev, &ap_msg);
-                if (rc == 0)
-                        /* Message timed out. */
-                        rc = -ETIME;
-        }
 out_free:
         free_page((unsigned long) ap_msg.message);
         return rc;
diff --git a/drivers/s390/crypto/zcrypt_pcixcc.c b/drivers/s390/crypto/zcrypt_pcixcc.c
index 252443b6bd1b..64948788d301 100644
--- a/drivers/s390/crypto/zcrypt_pcixcc.c
+++ b/drivers/s390/crypto/zcrypt_pcixcc.c
@@ -93,6 +93,7 @@ static struct ap_driver zcrypt_pcixcc_driver = {
         .remove = zcrypt_pcixcc_remove,
         .receive = zcrypt_pcixcc_receive,
         .ids = zcrypt_pcixcc_ids,
+        .request_timeout = PCIXCC_CLEANUP_TIME,
 };
 
 /**
@@ -641,18 +642,13 @@ static long zcrypt_pcixcc_modexpo(struct zcrypt_device *zdev,
                 goto out_free;
         init_completion(&resp_type.work);
         ap_queue_message(zdev->ap_dev, &ap_msg);
-        rc = wait_for_completion_interruptible_timeout(
-                                &resp_type.work, PCIXCC_CLEANUP_TIME);
-        if (rc > 0)
+        rc = wait_for_completion_interruptible(&resp_type.work);
+        if (rc == 0)
                 rc = convert_response_ica(zdev, &ap_msg, mex->outputdata,
                                           mex->outputdatalength);
-        else {
-                /* Signal pending or message timed out. */
+        else
+                /* Signal pending. */
                 ap_cancel_message(zdev->ap_dev, &ap_msg);
-                if (rc == 0)
-                        /* Message timed out. */
-                        rc = -ETIME;
-        }
 out_free:
         free_page((unsigned long) ap_msg.message);
         return rc;
@@ -685,18 +681,13 @@ static long zcrypt_pcixcc_modexpo_crt(struct zcrypt_device *zdev,
                 goto out_free;
         init_completion(&resp_type.work);
         ap_queue_message(zdev->ap_dev, &ap_msg);
-        rc = wait_for_completion_interruptible_timeout(
-                                &resp_type.work, PCIXCC_CLEANUP_TIME);
-        if (rc > 0)
+        rc = wait_for_completion_interruptible(&resp_type.work);
+        if (rc == 0)
                 rc = convert_response_ica(zdev, &ap_msg, crt->outputdata,
                                           crt->outputdatalength);
-        else {
-                /* Signal pending or message timed out. */
+        else
+                /* Signal pending. */
                 ap_cancel_message(zdev->ap_dev, &ap_msg);
-                if (rc == 0)
-                        /* Message timed out. */
-                        rc = -ETIME;
-        }
 out_free:
         free_page((unsigned long) ap_msg.message);
         return rc;
@@ -729,17 +720,12 @@ static long zcrypt_pcixcc_send_cprb(struct zcrypt_device *zdev,
                 goto out_free;
         init_completion(&resp_type.work);
         ap_queue_message(zdev->ap_dev, &ap_msg);
-        rc = wait_for_completion_interruptible_timeout(
-                                &resp_type.work, PCIXCC_CLEANUP_TIME);
-        if (rc > 0)
+        rc = wait_for_completion_interruptible(&resp_type.work);
+        if (rc == 0)
                 rc = convert_response_xcrb(zdev, &ap_msg, xcRB);
-        else {
-                /* Signal pending or message timed out. */
+        else
+                /* Signal pending. */
                 ap_cancel_message(zdev->ap_dev, &ap_msg);
-                if (rc == 0)
-                        /* Message timed out. */
-                        rc = -ETIME;
-        }
 out_free:
         memset(ap_msg.message, 0x0, ap_msg.length);
         kfree(ap_msg.message);