5 * vmx.h: VMX Architecture related definitions
6 * Copyright (c) 2004, Intel Corporation.
8 * This program is free software; you can redistribute it and/or modify it
9 * under the terms and conditions of the GNU General Public License,
10 * version 2, as published by the Free Software Foundation.
12 * This program is distributed in the hope it will be useful, but WITHOUT
13 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
14 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
17 * You should have received a copy of the GNU General Public License along with
18 * this program; if not, write to the Free Software Foundation, Inc., 59 Temple
19 * Place - Suite 330, Boston, MA 02111-1307 USA.
21 * A few random additions are:
22 * Copyright (C) 2006 Qumranet
23 * Avi Kivity <avi@qumranet.com>
24 * Yaniv Kamay <yaniv@qumranet.com>
29 * Definitions of Primary Processor-Based VM-Execution Controls.
31 #define CPU_BASED_VIRTUAL_INTR_PENDING 0x00000004
32 #define CPU_BASED_USE_TSC_OFFSETING 0x00000008
33 #define CPU_BASED_HLT_EXITING 0x00000080
34 #define CPU_BASED_INVLPG_EXITING 0x00000200
35 #define CPU_BASED_MWAIT_EXITING 0x00000400
36 #define CPU_BASED_RDPMC_EXITING 0x00000800
37 #define CPU_BASED_RDTSC_EXITING 0x00001000
38 #define CPU_BASED_CR3_LOAD_EXITING 0x00008000
39 #define CPU_BASED_CR3_STORE_EXITING 0x00010000
40 #define CPU_BASED_CR8_LOAD_EXITING 0x00080000
41 #define CPU_BASED_CR8_STORE_EXITING 0x00100000
42 #define CPU_BASED_TPR_SHADOW 0x00200000
43 #define CPU_BASED_VIRTUAL_NMI_PENDING 0x00400000
44 #define CPU_BASED_MOV_DR_EXITING 0x00800000
45 #define CPU_BASED_UNCOND_IO_EXITING 0x01000000
46 #define CPU_BASED_USE_IO_BITMAPS 0x02000000
47 #define CPU_BASED_USE_MSR_BITMAPS 0x10000000
48 #define CPU_BASED_MONITOR_EXITING 0x20000000
49 #define CPU_BASED_PAUSE_EXITING 0x40000000
50 #define CPU_BASED_ACTIVATE_SECONDARY_CONTROLS 0x80000000
52 * Definitions of Secondary Processor-Based VM-Execution Controls.
54 #define SECONDARY_EXEC_VIRTUALIZE_APIC_ACCESSES 0x00000001
55 #define SECONDARY_EXEC_ENABLE_EPT 0x00000002
56 #define SECONDARY_EXEC_RDTSCP 0x00000008
57 #define SECONDARY_EXEC_ENABLE_VPID 0x00000020
58 #define SECONDARY_EXEC_WBINVD_EXITING 0x00000040
59 #define SECONDARY_EXEC_UNRESTRICTED_GUEST 0x00000080
60 #define SECONDARY_EXEC_PAUSE_LOOP_EXITING 0x00000400
63 #define PIN_BASED_EXT_INTR_MASK 0x00000001
64 #define PIN_BASED_NMI_EXITING 0x00000008
65 #define PIN_BASED_VIRTUAL_NMIS 0x00000020
67 #define VM_EXIT_HOST_ADDR_SPACE_SIZE 0x00000200
68 #define VM_EXIT_ACK_INTR_ON_EXIT 0x00008000
69 #define VM_EXIT_SAVE_IA32_PAT 0x00040000
70 #define VM_EXIT_LOAD_IA32_PAT 0x00080000
72 #define VM_ENTRY_IA32E_MODE 0x00000200
73 #define VM_ENTRY_SMM 0x00000400
74 #define VM_ENTRY_DEACT_DUAL_MONITOR 0x00000800
75 #define VM_ENTRY_LOAD_IA32_PAT 0x00004000
79 VIRTUAL_PROCESSOR_ID = 0x00000000,
80 GUEST_ES_SELECTOR = 0x00000800,
81 GUEST_CS_SELECTOR = 0x00000802,
82 GUEST_SS_SELECTOR = 0x00000804,
83 GUEST_DS_SELECTOR = 0x00000806,
84 GUEST_FS_SELECTOR = 0x00000808,
85 GUEST_GS_SELECTOR = 0x0000080a,
86 GUEST_LDTR_SELECTOR = 0x0000080c,
87 GUEST_TR_SELECTOR = 0x0000080e,
88 HOST_ES_SELECTOR = 0x00000c00,
89 HOST_CS_SELECTOR = 0x00000c02,
90 HOST_SS_SELECTOR = 0x00000c04,
91 HOST_DS_SELECTOR = 0x00000c06,
92 HOST_FS_SELECTOR = 0x00000c08,
93 HOST_GS_SELECTOR = 0x00000c0a,
94 HOST_TR_SELECTOR = 0x00000c0c,
95 IO_BITMAP_A = 0x00002000,
96 IO_BITMAP_A_HIGH = 0x00002001,
97 IO_BITMAP_B = 0x00002002,
98 IO_BITMAP_B_HIGH = 0x00002003,
99 MSR_BITMAP = 0x00002004,
100 MSR_BITMAP_HIGH = 0x00002005,
101 VM_EXIT_MSR_STORE_ADDR = 0x00002006,
102 VM_EXIT_MSR_STORE_ADDR_HIGH = 0x00002007,
103 VM_EXIT_MSR_LOAD_ADDR = 0x00002008,
104 VM_EXIT_MSR_LOAD_ADDR_HIGH = 0x00002009,
105 VM_ENTRY_MSR_LOAD_ADDR = 0x0000200a,
106 VM_ENTRY_MSR_LOAD_ADDR_HIGH = 0x0000200b,
107 TSC_OFFSET = 0x00002010,
108 TSC_OFFSET_HIGH = 0x00002011,
109 VIRTUAL_APIC_PAGE_ADDR = 0x00002012,
110 VIRTUAL_APIC_PAGE_ADDR_HIGH = 0x00002013,
111 APIC_ACCESS_ADDR = 0x00002014,
112 APIC_ACCESS_ADDR_HIGH = 0x00002015,
113 EPT_POINTER = 0x0000201a,
114 EPT_POINTER_HIGH = 0x0000201b,
115 GUEST_PHYSICAL_ADDRESS = 0x00002400,
116 GUEST_PHYSICAL_ADDRESS_HIGH = 0x00002401,
117 VMCS_LINK_POINTER = 0x00002800,
118 VMCS_LINK_POINTER_HIGH = 0x00002801,
119 GUEST_IA32_DEBUGCTL = 0x00002802,
120 GUEST_IA32_DEBUGCTL_HIGH = 0x00002803,
121 GUEST_IA32_PAT = 0x00002804,
122 GUEST_IA32_PAT_HIGH = 0x00002805,
123 GUEST_PDPTR0 = 0x0000280a,
124 GUEST_PDPTR0_HIGH = 0x0000280b,
125 GUEST_PDPTR1 = 0x0000280c,
126 GUEST_PDPTR1_HIGH = 0x0000280d,
127 GUEST_PDPTR2 = 0x0000280e,
128 GUEST_PDPTR2_HIGH = 0x0000280f,
129 GUEST_PDPTR3 = 0x00002810,
130 GUEST_PDPTR3_HIGH = 0x00002811,
131 HOST_IA32_PAT = 0x00002c00,
132 HOST_IA32_PAT_HIGH = 0x00002c01,
133 PIN_BASED_VM_EXEC_CONTROL = 0x00004000,
134 CPU_BASED_VM_EXEC_CONTROL = 0x00004002,
135 EXCEPTION_BITMAP = 0x00004004,
136 PAGE_FAULT_ERROR_CODE_MASK = 0x00004006,
137 PAGE_FAULT_ERROR_CODE_MATCH = 0x00004008,
138 CR3_TARGET_COUNT = 0x0000400a,
139 VM_EXIT_CONTROLS = 0x0000400c,
140 VM_EXIT_MSR_STORE_COUNT = 0x0000400e,
141 VM_EXIT_MSR_LOAD_COUNT = 0x00004010,
142 VM_ENTRY_CONTROLS = 0x00004012,
143 VM_ENTRY_MSR_LOAD_COUNT = 0x00004014,
144 VM_ENTRY_INTR_INFO_FIELD = 0x00004016,
145 VM_ENTRY_EXCEPTION_ERROR_CODE = 0x00004018,
146 VM_ENTRY_INSTRUCTION_LEN = 0x0000401a,
147 TPR_THRESHOLD = 0x0000401c,
148 SECONDARY_VM_EXEC_CONTROL = 0x0000401e,
149 PLE_GAP = 0x00004020,
150 PLE_WINDOW = 0x00004022,
151 VM_INSTRUCTION_ERROR = 0x00004400,
152 VM_EXIT_REASON = 0x00004402,
153 VM_EXIT_INTR_INFO = 0x00004404,
154 VM_EXIT_INTR_ERROR_CODE = 0x00004406,
155 IDT_VECTORING_INFO_FIELD = 0x00004408,
156 IDT_VECTORING_ERROR_CODE = 0x0000440a,
157 VM_EXIT_INSTRUCTION_LEN = 0x0000440c,
158 VMX_INSTRUCTION_INFO = 0x0000440e,
159 GUEST_ES_LIMIT = 0x00004800,
160 GUEST_CS_LIMIT = 0x00004802,
161 GUEST_SS_LIMIT = 0x00004804,
162 GUEST_DS_LIMIT = 0x00004806,
163 GUEST_FS_LIMIT = 0x00004808,
164 GUEST_GS_LIMIT = 0x0000480a,
165 GUEST_LDTR_LIMIT = 0x0000480c,
166 GUEST_TR_LIMIT = 0x0000480e,
167 GUEST_GDTR_LIMIT = 0x00004810,
168 GUEST_IDTR_LIMIT = 0x00004812,
169 GUEST_ES_AR_BYTES = 0x00004814,
170 GUEST_CS_AR_BYTES = 0x00004816,
171 GUEST_SS_AR_BYTES = 0x00004818,
172 GUEST_DS_AR_BYTES = 0x0000481a,
173 GUEST_FS_AR_BYTES = 0x0000481c,
174 GUEST_GS_AR_BYTES = 0x0000481e,
175 GUEST_LDTR_AR_BYTES = 0x00004820,
176 GUEST_TR_AR_BYTES = 0x00004822,
177 GUEST_INTERRUPTIBILITY_INFO = 0x00004824,
178 GUEST_ACTIVITY_STATE = 0X00004826,
179 GUEST_SYSENTER_CS = 0x0000482A,
180 HOST_IA32_SYSENTER_CS = 0x00004c00,
181 CR0_GUEST_HOST_MASK = 0x00006000,
182 CR4_GUEST_HOST_MASK = 0x00006002,
183 CR0_READ_SHADOW = 0x00006004,
184 CR4_READ_SHADOW = 0x00006006,
185 CR3_TARGET_VALUE0 = 0x00006008,
186 CR3_TARGET_VALUE1 = 0x0000600a,
187 CR3_TARGET_VALUE2 = 0x0000600c,
188 CR3_TARGET_VALUE3 = 0x0000600e,
189 EXIT_QUALIFICATION = 0x00006400,
190 GUEST_LINEAR_ADDRESS = 0x0000640a,
191 GUEST_CR0 = 0x00006800,
192 GUEST_CR3 = 0x00006802,
193 GUEST_CR4 = 0x00006804,
194 GUEST_ES_BASE = 0x00006806,
195 GUEST_CS_BASE = 0x00006808,
196 GUEST_SS_BASE = 0x0000680a,
197 GUEST_DS_BASE = 0x0000680c,
198 GUEST_FS_BASE = 0x0000680e,
199 GUEST_GS_BASE = 0x00006810,
200 GUEST_LDTR_BASE = 0x00006812,
201 GUEST_TR_BASE = 0x00006814,
202 GUEST_GDTR_BASE = 0x00006816,
203 GUEST_IDTR_BASE = 0x00006818,
204 GUEST_DR7 = 0x0000681a,
205 GUEST_RSP = 0x0000681c,
206 GUEST_RIP = 0x0000681e,
207 GUEST_RFLAGS = 0x00006820,
208 GUEST_PENDING_DBG_EXCEPTIONS = 0x00006822,
209 GUEST_SYSENTER_ESP = 0x00006824,
210 GUEST_SYSENTER_EIP = 0x00006826,
211 HOST_CR0 = 0x00006c00,
212 HOST_CR3 = 0x00006c02,
213 HOST_CR4 = 0x00006c04,
214 HOST_FS_BASE = 0x00006c06,
215 HOST_GS_BASE = 0x00006c08,
216 HOST_TR_BASE = 0x00006c0a,
217 HOST_GDTR_BASE = 0x00006c0c,
218 HOST_IDTR_BASE = 0x00006c0e,
219 HOST_IA32_SYSENTER_ESP = 0x00006c10,
220 HOST_IA32_SYSENTER_EIP = 0x00006c12,
221 HOST_RSP = 0x00006c14,
222 HOST_RIP = 0x00006c16,
225 #define VMX_EXIT_REASONS_FAILED_VMENTRY 0x80000000
227 #define EXIT_REASON_EXCEPTION_NMI 0
228 #define EXIT_REASON_EXTERNAL_INTERRUPT 1
229 #define EXIT_REASON_TRIPLE_FAULT 2
231 #define EXIT_REASON_PENDING_INTERRUPT 7
232 #define EXIT_REASON_NMI_WINDOW 8
233 #define EXIT_REASON_TASK_SWITCH 9
234 #define EXIT_REASON_CPUID 10
235 #define EXIT_REASON_HLT 12
236 #define EXIT_REASON_INVLPG 14
237 #define EXIT_REASON_RDPMC 15
238 #define EXIT_REASON_RDTSC 16
239 #define EXIT_REASON_VMCALL 18
240 #define EXIT_REASON_VMCLEAR 19
241 #define EXIT_REASON_VMLAUNCH 20
242 #define EXIT_REASON_VMPTRLD 21
243 #define EXIT_REASON_VMPTRST 22
244 #define EXIT_REASON_VMREAD 23
245 #define EXIT_REASON_VMRESUME 24
246 #define EXIT_REASON_VMWRITE 25
247 #define EXIT_REASON_VMOFF 26
248 #define EXIT_REASON_VMON 27
249 #define EXIT_REASON_CR_ACCESS 28
250 #define EXIT_REASON_DR_ACCESS 29
251 #define EXIT_REASON_IO_INSTRUCTION 30
252 #define EXIT_REASON_MSR_READ 31
253 #define EXIT_REASON_MSR_WRITE 32
254 #define EXIT_REASON_MWAIT_INSTRUCTION 36
255 #define EXIT_REASON_MONITOR_INSTRUCTION 39
256 #define EXIT_REASON_PAUSE_INSTRUCTION 40
257 #define EXIT_REASON_MCE_DURING_VMENTRY 41
258 #define EXIT_REASON_TPR_BELOW_THRESHOLD 43
259 #define EXIT_REASON_APIC_ACCESS 44
260 #define EXIT_REASON_EPT_VIOLATION 48
261 #define EXIT_REASON_EPT_MISCONFIG 49
262 #define EXIT_REASON_WBINVD 54
265 * Interruption-information format
267 #define INTR_INFO_VECTOR_MASK 0xff /* 7:0 */
268 #define INTR_INFO_INTR_TYPE_MASK 0x700 /* 10:8 */
269 #define INTR_INFO_DELIVER_CODE_MASK 0x800 /* 11 */
270 #define INTR_INFO_UNBLOCK_NMI 0x1000 /* 12 */
271 #define INTR_INFO_VALID_MASK 0x80000000 /* 31 */
272 #define INTR_INFO_RESVD_BITS_MASK 0x7ffff000
274 #define VECTORING_INFO_VECTOR_MASK INTR_INFO_VECTOR_MASK
275 #define VECTORING_INFO_TYPE_MASK INTR_INFO_INTR_TYPE_MASK
276 #define VECTORING_INFO_DELIVER_CODE_MASK INTR_INFO_DELIVER_CODE_MASK
277 #define VECTORING_INFO_VALID_MASK INTR_INFO_VALID_MASK
279 #define INTR_TYPE_EXT_INTR (0 << 8) /* external interrupt */
280 #define INTR_TYPE_NMI_INTR (2 << 8) /* NMI */
281 #define INTR_TYPE_HARD_EXCEPTION (3 << 8) /* processor exception */
282 #define INTR_TYPE_SOFT_INTR (4 << 8) /* software interrupt */
283 #define INTR_TYPE_SOFT_EXCEPTION (6 << 8) /* software exception */
285 /* GUEST_INTERRUPTIBILITY_INFO flags. */
286 #define GUEST_INTR_STATE_STI 0x00000001
287 #define GUEST_INTR_STATE_MOV_SS 0x00000002
288 #define GUEST_INTR_STATE_SMI 0x00000004
289 #define GUEST_INTR_STATE_NMI 0x00000008
292 * Exit Qualifications for MOV for Control Register Access
294 #define CONTROL_REG_ACCESS_NUM 0x7 /* 2:0, number of control reg.*/
295 #define CONTROL_REG_ACCESS_TYPE 0x30 /* 5:4, access type */
296 #define CONTROL_REG_ACCESS_REG 0xf00 /* 10:8, general purpose reg. */
297 #define LMSW_SOURCE_DATA_SHIFT 16
298 #define LMSW_SOURCE_DATA (0xFFFF << LMSW_SOURCE_DATA_SHIFT) /* 16:31 lmsw source */
299 #define REG_EAX (0 << 8)
300 #define REG_ECX (1 << 8)
301 #define REG_EDX (2 << 8)
302 #define REG_EBX (3 << 8)
303 #define REG_ESP (4 << 8)
304 #define REG_EBP (5 << 8)
305 #define REG_ESI (6 << 8)
306 #define REG_EDI (7 << 8)
307 #define REG_R8 (8 << 8)
308 #define REG_R9 (9 << 8)
309 #define REG_R10 (10 << 8)
310 #define REG_R11 (11 << 8)
311 #define REG_R12 (12 << 8)
312 #define REG_R13 (13 << 8)
313 #define REG_R14 (14 << 8)
314 #define REG_R15 (15 << 8)
317 * Exit Qualifications for MOV for Debug Register Access
319 #define DEBUG_REG_ACCESS_NUM 0x7 /* 2:0, number of debug reg. */
320 #define DEBUG_REG_ACCESS_TYPE 0x10 /* 4, direction of access */
321 #define TYPE_MOV_TO_DR (0 << 4)
322 #define TYPE_MOV_FROM_DR (1 << 4)
323 #define DEBUG_REG_ACCESS_REG(eq) (((eq) >> 8) & 0xf) /* 11:8, general purpose reg. */
327 #define SEGMENT_AR_L_MASK (1 << 13)
329 #define AR_TYPE_ACCESSES_MASK 1
330 #define AR_TYPE_READABLE_MASK (1 << 1)
331 #define AR_TYPE_WRITEABLE_MASK (1 << 2)
332 #define AR_TYPE_CODE_MASK (1 << 3)
333 #define AR_TYPE_MASK 0x0f
334 #define AR_TYPE_BUSY_64_TSS 11
335 #define AR_TYPE_BUSY_32_TSS 11
336 #define AR_TYPE_BUSY_16_TSS 3
337 #define AR_TYPE_LDT 2
339 #define AR_UNUSABLE_MASK (1 << 16)
340 #define AR_S_MASK (1 << 4)
341 #define AR_P_MASK (1 << 7)
342 #define AR_L_MASK (1 << 13)
343 #define AR_DB_MASK (1 << 14)
344 #define AR_G_MASK (1 << 15)
345 #define AR_DPL_SHIFT 5
346 #define AR_DPL(ar) (((ar) >> AR_DPL_SHIFT) & 3)
348 #define AR_RESERVD_MASK 0xfffe0f00
350 #define TSS_PRIVATE_MEMSLOT (KVM_MEMORY_SLOTS + 0)
351 #define APIC_ACCESS_PAGE_PRIVATE_MEMSLOT (KVM_MEMORY_SLOTS + 1)
352 #define IDENTITY_PAGETABLE_PRIVATE_MEMSLOT (KVM_MEMORY_SLOTS + 2)
354 #define VMX_NR_VPIDS (1 << 16)
355 #define VMX_VPID_EXTENT_SINGLE_CONTEXT 1
356 #define VMX_VPID_EXTENT_ALL_CONTEXT 2
358 #define VMX_EPT_EXTENT_INDIVIDUAL_ADDR 0
359 #define VMX_EPT_EXTENT_CONTEXT 1
360 #define VMX_EPT_EXTENT_GLOBAL 2
362 #define VMX_EPT_EXECUTE_ONLY_BIT (1ull)
363 #define VMX_EPT_PAGE_WALK_4_BIT (1ull << 6)
364 #define VMX_EPTP_UC_BIT (1ull << 8)
365 #define VMX_EPTP_WB_BIT (1ull << 14)
366 #define VMX_EPT_2MB_PAGE_BIT (1ull << 16)
367 #define VMX_EPT_1GB_PAGE_BIT (1ull << 17)
368 #define VMX_EPT_EXTENT_INDIVIDUAL_BIT (1ull << 24)
369 #define VMX_EPT_EXTENT_CONTEXT_BIT (1ull << 25)
370 #define VMX_EPT_EXTENT_GLOBAL_BIT (1ull << 26)
372 #define VMX_EPT_DEFAULT_GAW 3
373 #define VMX_EPT_MAX_GAW 0x4
374 #define VMX_EPT_MT_EPTE_SHIFT 3
375 #define VMX_EPT_GAW_EPTP_SHIFT 3
376 #define VMX_EPT_DEFAULT_MT 0x6ull
377 #define VMX_EPT_READABLE_MASK 0x1ull
378 #define VMX_EPT_WRITABLE_MASK 0x2ull
379 #define VMX_EPT_EXECUTABLE_MASK 0x4ull
380 #define VMX_EPT_IPAT_BIT (1ull << 6)
382 #define VMX_EPT_IDENTITY_PAGETABLE_ADDR 0xfffbc000ul
385 #define ASM_VMX_VMCLEAR_RAX ".byte 0x66, 0x0f, 0xc7, 0x30"
386 #define ASM_VMX_VMLAUNCH ".byte 0x0f, 0x01, 0xc2"
387 #define ASM_VMX_VMRESUME ".byte 0x0f, 0x01, 0xc3"
388 #define ASM_VMX_VMPTRLD_RAX ".byte 0x0f, 0xc7, 0x30"
389 #define ASM_VMX_VMREAD_RDX_RAX ".byte 0x0f, 0x78, 0xd0"
390 #define ASM_VMX_VMWRITE_RAX_RDX ".byte 0x0f, 0x79, 0xd0"
391 #define ASM_VMX_VMWRITE_RSP_RDX ".byte 0x0f, 0x79, 0xd4"
392 #define ASM_VMX_VMXOFF ".byte 0x0f, 0x01, 0xc4"
393 #define ASM_VMX_VMXON_RAX ".byte 0xf3, 0x0f, 0xc7, 0x30"
394 #define ASM_VMX_INVEPT ".byte 0x66, 0x0f, 0x38, 0x80, 0x08"
395 #define ASM_VMX_INVVPID ".byte 0x66, 0x0f, 0x38, 0x81, 0x08"