1 /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
2 #ifndef _ASM_X86_KVM_H
3 #define _ASM_X86_KVM_H
4
5 /*
6 * KVM x86 specific structures and definitions
7 *
8 */
9
10 #include <linux/const.h>
11 #include <linux/bits.h>
12 #include <linux/types.h>
13 #include <linux/ioctl.h>
14 #include <linux/stddef.h>
15
16 #define KVM_PIO_PAGE_OFFSET 1
17 #define KVM_COALESCED_MMIO_PAGE_OFFSET 2
18 #define KVM_DIRTY_LOG_PAGE_OFFSET 64
19
20 #define DE_VECTOR 0
21 #define DB_VECTOR 1
22 #define BP_VECTOR 3
23 #define OF_VECTOR 4
24 #define BR_VECTOR 5
25 #define UD_VECTOR 6
26 #define NM_VECTOR 7
27 #define DF_VECTOR 8
28 #define TS_VECTOR 10
29 #define NP_VECTOR 11
30 #define SS_VECTOR 12
31 #define GP_VECTOR 13
32 #define PF_VECTOR 14
33 #define MF_VECTOR 16
34 #define AC_VECTOR 17
35 #define MC_VECTOR 18
36 #define XM_VECTOR 19
37 #define VE_VECTOR 20
38
39 /* Select x86 specific features in <linux/kvm.h> */
40 #define __KVM_HAVE_PIT
41 #define __KVM_HAVE_IOAPIC
42 #define __KVM_HAVE_IRQ_LINE
43 #define __KVM_HAVE_MSI
44 #define __KVM_HAVE_USER_NMI
45 #define __KVM_HAVE_MSIX
46 #define __KVM_HAVE_MCE
47 #define __KVM_HAVE_PIT_STATE2
48 #define __KVM_HAVE_XEN_HVM
49 #define __KVM_HAVE_VCPU_EVENTS
50 #define __KVM_HAVE_DEBUGREGS
51 #define __KVM_HAVE_XSAVE
52 #define __KVM_HAVE_XCRS
53
54 /* Architectural interrupt line count. */
55 #define KVM_NR_INTERRUPTS 256
56
57 /* for KVM_GET_IRQCHIP and KVM_SET_IRQCHIP */
58 struct kvm_pic_state {
59 __u8 last_irr; /* edge detection */
60 __u8 irr; /* interrupt request register */
61 __u8 imr; /* interrupt mask register */
62 __u8 isr; /* interrupt service register */
63 __u8 priority_add; /* highest irq priority */
64 __u8 irq_base;
65 __u8 read_reg_select;
66 __u8 poll;
67 __u8 special_mask;
68 __u8 init_state;
69 __u8 auto_eoi;
70 __u8 rotate_on_auto_eoi;
71 __u8 special_fully_nested_mode;
72 __u8 init4; /* true if 4 byte init */
73 __u8 elcr; /* PIIX edge/trigger selection */
74 __u8 elcr_mask;
75 };
76
77 #define KVM_IOAPIC_NUM_PINS 24
78 struct kvm_ioapic_state {
79 __u64 base_address;
80 __u32 ioregsel;
81 __u32 id;
82 __u32 irr;
83 __u32 pad;
84 union {
85 __u64 bits;
86 struct {
87 __u8 vector;
88 __u8 delivery_mode:3;
89 __u8 dest_mode:1;
90 __u8 delivery_status:1;
91 __u8 polarity:1;
92 __u8 remote_irr:1;
93 __u8 trig_mode:1;
94 __u8 mask:1;
95 __u8 reserve:7;
96 __u8 reserved[4];
97 __u8 dest_id;
98 } fields;
99 } redirtbl[KVM_IOAPIC_NUM_PINS];
100 };
101
102 #define KVM_IRQCHIP_PIC_MASTER 0
103 #define KVM_IRQCHIP_PIC_SLAVE 1
104 #define KVM_IRQCHIP_IOAPIC 2
105 #define KVM_NR_IRQCHIPS 3
106
107 #define KVM_RUN_X86_SMM (1 << 0)
108 #define KVM_RUN_X86_BUS_LOCK (1 << 1)
109 #define KVM_RUN_X86_GUEST_MODE (1 << 2)
110
111 /* for KVM_GET_REGS and KVM_SET_REGS */
112 struct kvm_regs {
113 /* out (KVM_GET_REGS) / in (KVM_SET_REGS) */
114 __u64 rax, rbx, rcx, rdx;
115 __u64 rsi, rdi, rsp, rbp;
116 __u64 r8, r9, r10, r11;
117 __u64 r12, r13, r14, r15;
118 __u64 rip, rflags;
119 };
120
121 /* for KVM_GET_LAPIC and KVM_SET_LAPIC */
122 #define KVM_APIC_REG_SIZE 0x400
123 struct kvm_lapic_state {
124 char regs[KVM_APIC_REG_SIZE];
125 };
126
127 struct kvm_segment {
128 __u64 base;
129 __u32 limit;
130 __u16 selector;
131 __u8 type;
132 __u8 present, dpl, db, s, l, g, avl;
133 __u8 unusable;
134 __u8 padding;
135 };
136
137 struct kvm_dtable {
138 __u64 base;
139 __u16 limit;
140 __u16 padding[3];
141 };
142
143
144 /* for KVM_GET_SREGS and KVM_SET_SREGS */
145 struct kvm_sregs {
146 /* out (KVM_GET_SREGS) / in (KVM_SET_SREGS) */
147 struct kvm_segment cs, ds, es, fs, gs, ss;
148 struct kvm_segment tr, ldt;
149 struct kvm_dtable gdt, idt;
150 __u64 cr0, cr2, cr3, cr4, cr8;
151 __u64 efer;
152 __u64 apic_base;
153 __u64 interrupt_bitmap[(KVM_NR_INTERRUPTS + 63) / 64];
154 };
155
156 struct kvm_sregs2 {
157 /* out (KVM_GET_SREGS2) / in (KVM_SET_SREGS2) */
158 struct kvm_segment cs, ds, es, fs, gs, ss;
159 struct kvm_segment tr, ldt;
160 struct kvm_dtable gdt, idt;
161 __u64 cr0, cr2, cr3, cr4, cr8;
162 __u64 efer;
163 __u64 apic_base;
164 __u64 flags;
165 __u64 pdptrs[4];
166 };
167 #define KVM_SREGS2_FLAGS_PDPTRS_VALID 1
168
169 /* for KVM_GET_FPU and KVM_SET_FPU */
170 struct kvm_fpu {
171 __u8 fpr[8][16];
172 __u16 fcw;
173 __u16 fsw;
174 __u8 ftwx; /* in fxsave format */
175 __u8 pad1;
176 __u16 last_opcode;
177 __u64 last_ip;
178 __u64 last_dp;
179 __u8 xmm[16][16];
180 __u32 mxcsr;
181 __u32 pad2;
182 };
183
184 struct kvm_msr_entry {
185 __u32 index;
186 __u32 reserved;
187 __u64 data;
188 };
189
190 /* for KVM_GET_MSRS and KVM_SET_MSRS */
191 struct kvm_msrs {
192 __u32 nmsrs; /* number of msrs in entries */
193 __u32 pad;
194
195 struct kvm_msr_entry entries[];
196 };
197
198 /* for KVM_GET_MSR_INDEX_LIST */
199 struct kvm_msr_list {
200 __u32 nmsrs; /* number of msrs in entries */
201 __u32 indices[];
202 };
203
204 /* Maximum size of any access bitmap in bytes */
205 #define KVM_MSR_FILTER_MAX_BITMAP_SIZE 0x600
206
207 /* for KVM_X86_SET_MSR_FILTER */
208 struct kvm_msr_filter_range {
209 #define KVM_MSR_FILTER_READ (1 << 0)
210 #define KVM_MSR_FILTER_WRITE (1 << 1)
211 #define KVM_MSR_FILTER_RANGE_VALID_MASK (KVM_MSR_FILTER_READ | \
212 KVM_MSR_FILTER_WRITE)
213 __u32 flags;
214 __u32 nmsrs; /* number of msrs in bitmap */
215 __u32 base; /* MSR index the bitmap starts at */
216 __u8 *bitmap; /* a 1 bit allows the operations in flags, 0 denies */
217 };
218
219 #define KVM_MSR_FILTER_MAX_RANGES 16
220 struct kvm_msr_filter {
221 #ifndef __KERNEL__
222 #define KVM_MSR_FILTER_DEFAULT_ALLOW (0 << 0)
223 #endif
224 #define KVM_MSR_FILTER_DEFAULT_DENY (1 << 0)
225 #define KVM_MSR_FILTER_VALID_MASK (KVM_MSR_FILTER_DEFAULT_DENY)
226 __u32 flags;
227 struct kvm_msr_filter_range ranges[KVM_MSR_FILTER_MAX_RANGES];
228 };
229
230 struct kvm_cpuid_entry {
231 __u32 function;
232 __u32 eax;
233 __u32 ebx;
234 __u32 ecx;
235 __u32 edx;
236 __u32 padding;
237 };
238
239 /* for KVM_SET_CPUID */
240 struct kvm_cpuid {
241 __u32 nent;
242 __u32 padding;
243 struct kvm_cpuid_entry entries[];
244 };
245
246 struct kvm_cpuid_entry2 {
247 __u32 function;
248 __u32 index;
249 __u32 flags;
250 __u32 eax;
251 __u32 ebx;
252 __u32 ecx;
253 __u32 edx;
254 __u32 padding[3];
255 };
256
257 #define KVM_CPUID_FLAG_SIGNIFCANT_INDEX (1 << 0)
258 #define KVM_CPUID_FLAG_STATEFUL_FUNC (1 << 1)
259 #define KVM_CPUID_FLAG_STATE_READ_NEXT (1 << 2)
260
261 /* for KVM_SET_CPUID2 */
262 struct kvm_cpuid2 {
263 __u32 nent;
264 __u32 padding;
265 struct kvm_cpuid_entry2 entries[];
266 };
267
268 /* for KVM_GET_PIT and KVM_SET_PIT */
269 struct kvm_pit_channel_state {
270 __u32 count; /* can be 65536 */
271 __u16 latched_count;
272 __u8 count_latched;
273 __u8 status_latched;
274 __u8 status;
275 __u8 read_state;
276 __u8 write_state;
277 __u8 write_latch;
278 __u8 rw_mode;
279 __u8 mode;
280 __u8 bcd;
281 __u8 gate;
282 __s64 count_load_time;
283 };
284
285 struct kvm_debug_exit_arch {
286 __u32 exception;
287 __u32 pad;
288 __u64 pc;
289 __u64 dr6;
290 __u64 dr7;
291 };
292
293 #define KVM_GUESTDBG_USE_SW_BP 0x00010000
294 #define KVM_GUESTDBG_USE_HW_BP 0x00020000
295 #define KVM_GUESTDBG_INJECT_DB 0x00040000
296 #define KVM_GUESTDBG_INJECT_BP 0x00080000
297 #define KVM_GUESTDBG_BLOCKIRQ 0x00100000
298
299 /* for KVM_SET_GUEST_DEBUG */
300 struct kvm_guest_debug_arch {
301 __u64 debugreg[8];
302 };
303
304 struct kvm_pit_state {
305 struct kvm_pit_channel_state channels[3];
306 };
307
308 #define KVM_PIT_FLAGS_HPET_LEGACY 0x00000001
309 #define KVM_PIT_FLAGS_SPEAKER_DATA_ON 0x00000002
310
311 struct kvm_pit_state2 {
312 struct kvm_pit_channel_state channels[3];
313 __u32 flags;
314 __u32 reserved[9];
315 };
316
317 struct kvm_reinject_control {
318 __u8 pit_reinject;
319 __u8 reserved[31];
320 };
321
322 /* When set in flags, include corresponding fields on KVM_SET_VCPU_EVENTS */
323 #define KVM_VCPUEVENT_VALID_NMI_PENDING 0x00000001
324 #define KVM_VCPUEVENT_VALID_SIPI_VECTOR 0x00000002
325 #define KVM_VCPUEVENT_VALID_SHADOW 0x00000004
326 #define KVM_VCPUEVENT_VALID_SMM 0x00000008
327 #define KVM_VCPUEVENT_VALID_PAYLOAD 0x00000010
328 #define KVM_VCPUEVENT_VALID_TRIPLE_FAULT 0x00000020
329
330 /* Interrupt shadow states */
331 #define KVM_X86_SHADOW_INT_MOV_SS 0x01
332 #define KVM_X86_SHADOW_INT_STI 0x02
333
334 /* for KVM_GET/SET_VCPU_EVENTS */
335 struct kvm_vcpu_events {
336 struct {
337 __u8 injected;
338 __u8 nr;
339 __u8 has_error_code;
340 __u8 pending;
341 __u32 error_code;
342 } exception;
343 struct {
344 __u8 injected;
345 __u8 nr;
346 __u8 soft;
347 __u8 shadow;
348 } interrupt;
349 struct {
350 __u8 injected;
351 __u8 pending;
352 __u8 masked;
353 __u8 pad;
354 } nmi;
355 __u32 sipi_vector;
356 __u32 flags;
357 struct {
358 __u8 smm;
359 __u8 pending;
360 __u8 smm_inside_nmi;
361 __u8 latched_init;
362 } smi;
363 struct {
364 __u8 pending;
365 } triple_fault;
366 __u8 reserved[26];
367 __u8 exception_has_payload;
368 __u64 exception_payload;
369 };
370
371 /* for KVM_GET/SET_DEBUGREGS */
372 struct kvm_debugregs {
373 __u64 db[4];
374 __u64 dr6;
375 __u64 dr7;
376 __u64 flags;
377 __u64 reserved[9];
378 };
379
380 /* for KVM_CAP_XSAVE and KVM_CAP_XSAVE2 */
381 struct kvm_xsave {
382 /*
383 * KVM_GET_XSAVE2 and KVM_SET_XSAVE write and read as many bytes
384 * as are returned by KVM_CHECK_EXTENSION(KVM_CAP_XSAVE2)
385 * respectively, when invoked on the vm file descriptor.
386 *
387 * The size value returned by KVM_CHECK_EXTENSION(KVM_CAP_XSAVE2)
388 * will always be at least 4096. Currently, it is only greater
389 * than 4096 if a dynamic feature has been enabled with
390 * ``arch_prctl()``, but this may change in the future.
391 *
392 * The offsets of the state save areas in struct kvm_xsave follow
393 * the contents of CPUID leaf 0xD on the host.
394 */
395 __u32 region[1024];
396 __u32 extra[];
397 };
398
399 #define KVM_MAX_XCRS 16
400
401 struct kvm_xcr {
402 __u32 xcr;
403 __u32 reserved;
404 __u64 value;
405 };
406
407 struct kvm_xcrs {
408 __u32 nr_xcrs;
409 __u32 flags;
410 struct kvm_xcr xcrs[KVM_MAX_XCRS];
411 __u64 padding[16];
412 };
413
414 #define KVM_SYNC_X86_REGS (1UL << 0)
415 #define KVM_SYNC_X86_SREGS (1UL << 1)
416 #define KVM_SYNC_X86_EVENTS (1UL << 2)
417
418 #define KVM_SYNC_X86_VALID_FIELDS \
419 (KVM_SYNC_X86_REGS| \
420 KVM_SYNC_X86_SREGS| \
421 KVM_SYNC_X86_EVENTS)
422
423 /* kvm_sync_regs struct included by kvm_run struct */
424 struct kvm_sync_regs {
425 /* Members of this structure are potentially malicious.
426 * Care must be taken by code reading, esp. interpreting,
427 * data fields from them inside KVM to prevent TOCTOU and
428 * double-fetch types of vulnerabilities.
429 */
430 struct kvm_regs regs;
431 struct kvm_sregs sregs;
432 struct kvm_vcpu_events events;
433 };
434
435 #define KVM_X86_QUIRK_LINT0_REENABLED (1 << 0)
436 #define KVM_X86_QUIRK_CD_NW_CLEARED (1 << 1)
437 #define KVM_X86_QUIRK_LAPIC_MMIO_HOLE (1 << 2)
438 #define KVM_X86_QUIRK_OUT_7E_INC_RIP (1 << 3)
439 #define KVM_X86_QUIRK_MISC_ENABLE_NO_MWAIT (1 << 4)
440 #define KVM_X86_QUIRK_FIX_HYPERCALL_INSN (1 << 5)
441 #define KVM_X86_QUIRK_MWAIT_NEVER_UD_FAULTS (1 << 6)
442
443 #define KVM_STATE_NESTED_FORMAT_VMX 0
444 #define KVM_STATE_NESTED_FORMAT_SVM 1
445
446 #define KVM_STATE_NESTED_GUEST_MODE 0x00000001
447 #define KVM_STATE_NESTED_RUN_PENDING 0x00000002
448 #define KVM_STATE_NESTED_EVMCS 0x00000004
449 #define KVM_STATE_NESTED_MTF_PENDING 0x00000008
450 #define KVM_STATE_NESTED_GIF_SET 0x00000100
451
452 #define KVM_STATE_NESTED_SMM_GUEST_MODE 0x00000001
453 #define KVM_STATE_NESTED_SMM_VMXON 0x00000002
454
455 #define KVM_STATE_NESTED_VMX_VMCS_SIZE 0x1000
456
457 #define KVM_STATE_NESTED_SVM_VMCB_SIZE 0x1000
458
459 #define KVM_STATE_VMX_PREEMPTION_TIMER_DEADLINE 0x00000001
460
461 /* vendor-independent attributes for system fd (group 0) */
462 #define KVM_X86_GRP_SYSTEM 0
463 # define KVM_X86_XCOMP_GUEST_SUPP 0
464
465 /* vendor-specific groups and attributes for system fd */
466 #define KVM_X86_GRP_SEV 1
467 # define KVM_X86_SEV_VMSA_FEATURES 0
468
469 struct kvm_vmx_nested_state_data {
470 __u8 vmcs12[KVM_STATE_NESTED_VMX_VMCS_SIZE];
471 __u8 shadow_vmcs12[KVM_STATE_NESTED_VMX_VMCS_SIZE];
472 };
473
474 struct kvm_vmx_nested_state_hdr {
475 __u64 vmxon_pa;
476 __u64 vmcs12_pa;
477
478 struct {
479 __u16 flags;
480 } smm;
481
482 __u16 pad;
483
484 __u32 flags;
485 __u64 preemption_timer_deadline;
486 };
487
488 struct kvm_svm_nested_state_data {
489 /* Save area only used if KVM_STATE_NESTED_RUN_PENDING. */
490 __u8 vmcb12[KVM_STATE_NESTED_SVM_VMCB_SIZE];
491 };
492
493 struct kvm_svm_nested_state_hdr {
494 __u64 vmcb_pa;
495 };
496
497 /* for KVM_CAP_NESTED_STATE */
498 struct kvm_nested_state {
499 __u16 flags;
500 __u16 format;
501 __u32 size;
502
503 union {
504 struct kvm_vmx_nested_state_hdr vmx;
505 struct kvm_svm_nested_state_hdr svm;
506
507 /* Pad the header to 128 bytes. */
508 __u8 pad[120];
509 } hdr;
510
511 /*
512 * Define data region as 0 bytes to preserve backwards-compatability
513 * to old definition of kvm_nested_state in order to avoid changing
514 * KVM_{GET,PUT}_NESTED_STATE ioctl values.
515 */
516 union {
517 __DECLARE_FLEX_ARRAY(struct kvm_vmx_nested_state_data, vmx);
518 __DECLARE_FLEX_ARRAY(struct kvm_svm_nested_state_data, svm);
519 } data;
520 };
521
522 /* for KVM_CAP_PMU_EVENT_FILTER */
523 struct kvm_pmu_event_filter {
524 __u32 action;
525 __u32 nevents;
526 __u32 fixed_counter_bitmap;
527 __u32 flags;
528 __u32 pad[4];
529 __u64 events[];
530 };
531
532 #define KVM_PMU_EVENT_ALLOW 0
533 #define KVM_PMU_EVENT_DENY 1
534
535 #define KVM_PMU_EVENT_FLAG_MASKED_EVENTS _BITUL(0)
536 #define KVM_PMU_EVENT_FLAGS_VALID_MASK (KVM_PMU_EVENT_FLAG_MASKED_EVENTS)
537
538 /* for KVM_CAP_MCE */
539 struct kvm_x86_mce {
540 __u64 status;
541 __u64 addr;
542 __u64 misc;
543 __u64 mcg_status;
544 __u8 bank;
545 __u8 pad1[7];
546 __u64 pad2[3];
547 };
548
549 /* for KVM_CAP_XEN_HVM */
550 #define KVM_XEN_HVM_CONFIG_HYPERCALL_MSR (1 << 0)
551 #define KVM_XEN_HVM_CONFIG_INTERCEPT_HCALL (1 << 1)
552 #define KVM_XEN_HVM_CONFIG_SHARED_INFO (1 << 2)
553 #define KVM_XEN_HVM_CONFIG_RUNSTATE (1 << 3)
554 #define KVM_XEN_HVM_CONFIG_EVTCHN_2LEVEL (1 << 4)
555 #define KVM_XEN_HVM_CONFIG_EVTCHN_SEND (1 << 5)
556 #define KVM_XEN_HVM_CONFIG_RUNSTATE_UPDATE_FLAG (1 << 6)
557 #define KVM_XEN_HVM_CONFIG_PVCLOCK_TSC_UNSTABLE (1 << 7)
558 #define KVM_XEN_HVM_CONFIG_SHARED_INFO_HVA (1 << 8)
559
560 struct kvm_xen_hvm_config {
561 __u32 flags;
562 __u32 msr;
563 __u64 blob_addr_32;
564 __u64 blob_addr_64;
565 __u8 blob_size_32;
566 __u8 blob_size_64;
567 __u8 pad2[30];
568 };
569
570 struct kvm_xen_hvm_attr {
571 __u16 type;
572 __u16 pad[3];
573 union {
574 __u8 long_mode;
575 __u8 vector;
576 __u8 runstate_update_flag;
577 union {
578 __u64 gfn;
579 #define KVM_XEN_INVALID_GFN ((__u64)-1)
580 __u64 hva;
581 } shared_info;
582 struct {
583 __u32 send_port;
584 __u32 type; /* EVTCHNSTAT_ipi / EVTCHNSTAT_interdomain */
585 __u32 flags;
586 #define KVM_XEN_EVTCHN_DEASSIGN (1 << 0)
587 #define KVM_XEN_EVTCHN_UPDATE (1 << 1)
588 #define KVM_XEN_EVTCHN_RESET (1 << 2)
589 /*
590 * Events sent by the guest are either looped back to
591 * the guest itself (potentially on a different port#)
592 * or signalled via an eventfd.
593 */
594 union {
595 struct {
596 __u32 port;
597 __u32 vcpu;
598 __u32 priority;
599 } port;
600 struct {
601 __u32 port; /* Zero for eventfd */
602 __s32 fd;
603 } eventfd;
604 __u32 padding[4];
605 } deliver;
606 } evtchn;
607 __u32 xen_version;
608 __u64 pad[8];
609 } u;
610 };
611
612
613 /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_SHARED_INFO */
614 #define KVM_XEN_ATTR_TYPE_LONG_MODE 0x0
615 #define KVM_XEN_ATTR_TYPE_SHARED_INFO 0x1
616 #define KVM_XEN_ATTR_TYPE_UPCALL_VECTOR 0x2
617 /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_EVTCHN_SEND */
618 #define KVM_XEN_ATTR_TYPE_EVTCHN 0x3
619 #define KVM_XEN_ATTR_TYPE_XEN_VERSION 0x4
620 /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_RUNSTATE_UPDATE_FLAG */
621 #define KVM_XEN_ATTR_TYPE_RUNSTATE_UPDATE_FLAG 0x5
622 /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_SHARED_INFO_HVA */
623 #define KVM_XEN_ATTR_TYPE_SHARED_INFO_HVA 0x6
624
625 struct kvm_xen_vcpu_attr {
626 __u16 type;
627 __u16 pad[3];
628 union {
629 __u64 gpa;
630 #define KVM_XEN_INVALID_GPA ((__u64)-1)
631 __u64 hva;
632 __u64 pad[8];
633 struct {
634 __u64 state;
635 __u64 state_entry_time;
636 __u64 time_running;
637 __u64 time_runnable;
638 __u64 time_blocked;
639 __u64 time_offline;
640 } runstate;
641 __u32 vcpu_id;
642 struct {
643 __u32 port;
644 __u32 priority;
645 __u64 expires_ns;
646 } timer;
647 __u8 vector;
648 } u;
649 };
650
651 /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_SHARED_INFO */
652 #define KVM_XEN_VCPU_ATTR_TYPE_VCPU_INFO 0x0
653 #define KVM_XEN_VCPU_ATTR_TYPE_VCPU_TIME_INFO 0x1
654 #define KVM_XEN_VCPU_ATTR_TYPE_RUNSTATE_ADDR 0x2
655 #define KVM_XEN_VCPU_ATTR_TYPE_RUNSTATE_CURRENT 0x3
656 #define KVM_XEN_VCPU_ATTR_TYPE_RUNSTATE_DATA 0x4
657 #define KVM_XEN_VCPU_ATTR_TYPE_RUNSTATE_ADJUST 0x5
658 /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_EVTCHN_SEND */
659 #define KVM_XEN_VCPU_ATTR_TYPE_VCPU_ID 0x6
660 #define KVM_XEN_VCPU_ATTR_TYPE_TIMER 0x7
661 #define KVM_XEN_VCPU_ATTR_TYPE_UPCALL_VECTOR 0x8
662 /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_SHARED_INFO_HVA */
663 #define KVM_XEN_VCPU_ATTR_TYPE_VCPU_INFO_HVA 0x9
664
665 /* Secure Encrypted Virtualization command */
666 enum sev_cmd_id {
667 /* Guest initialization commands */
668 KVM_SEV_INIT = 0,
669 KVM_SEV_ES_INIT,
670 /* Guest launch commands */
671 KVM_SEV_LAUNCH_START,
672 KVM_SEV_LAUNCH_UPDATE_DATA,
673 KVM_SEV_LAUNCH_UPDATE_VMSA,
674 KVM_SEV_LAUNCH_SECRET,
675 KVM_SEV_LAUNCH_MEASURE,
676 KVM_SEV_LAUNCH_FINISH,
677 /* Guest migration commands (outgoing) */
678 KVM_SEV_SEND_START,
679 KVM_SEV_SEND_UPDATE_DATA,
680 KVM_SEV_SEND_UPDATE_VMSA,
681 KVM_SEV_SEND_FINISH,
682 /* Guest migration commands (incoming) */
683 KVM_SEV_RECEIVE_START,
684 KVM_SEV_RECEIVE_UPDATE_DATA,
685 KVM_SEV_RECEIVE_UPDATE_VMSA,
686 KVM_SEV_RECEIVE_FINISH,
687 /* Guest status and debug commands */
688 KVM_SEV_GUEST_STATUS,
689 KVM_SEV_DBG_DECRYPT,
690 KVM_SEV_DBG_ENCRYPT,
691 /* Guest certificates commands */
692 KVM_SEV_CERT_EXPORT,
693 /* Attestation report */
694 KVM_SEV_GET_ATTESTATION_REPORT,
695 /* Guest Migration Extension */
696 KVM_SEV_SEND_CANCEL,
697
698 /* Second time is the charm; improved versions of the above ioctls. */
699 KVM_SEV_INIT2,
700
701 /* SNP-specific commands */
702 KVM_SEV_SNP_LAUNCH_START = 100,
703 KVM_SEV_SNP_LAUNCH_UPDATE,
704 KVM_SEV_SNP_LAUNCH_FINISH,
705
706 KVM_SEV_NR_MAX,
707 };
708
709 struct kvm_sev_cmd {
710 __u32 id;
711 __u32 pad0;
712 __u64 data;
713 __u32 error;
714 __u32 sev_fd;
715 };
716
717 struct kvm_sev_init {
718 __u64 vmsa_features;
719 __u32 flags;
720 __u16 ghcb_version;
721 __u16 pad1;
722 __u32 pad2[8];
723 };
724
725 struct kvm_sev_launch_start {
726 __u32 handle;
727 __u32 policy;
728 __u64 dh_uaddr;
729 __u32 dh_len;
730 __u32 pad0;
731 __u64 session_uaddr;
732 __u32 session_len;
733 __u32 pad1;
734 };
735
736 struct kvm_sev_launch_update_data {
737 __u64 uaddr;
738 __u32 len;
739 __u32 pad0;
740 };
741
742
743 struct kvm_sev_launch_secret {
744 __u64 hdr_uaddr;
745 __u32 hdr_len;
746 __u32 pad0;
747 __u64 guest_uaddr;
748 __u32 guest_len;
749 __u32 pad1;
750 __u64 trans_uaddr;
751 __u32 trans_len;
752 __u32 pad2;
753 };
754
755 struct kvm_sev_launch_measure {
756 __u64 uaddr;
757 __u32 len;
758 __u32 pad0;
759 };
760
761 struct kvm_sev_guest_status {
762 __u32 handle;
763 __u32 policy;
764 __u32 state;
765 };
766
767 struct kvm_sev_dbg {
768 __u64 src_uaddr;
769 __u64 dst_uaddr;
770 __u32 len;
771 __u32 pad0;
772 };
773
774 struct kvm_sev_attestation_report {
775 __u8 mnonce[16];
776 __u64 uaddr;
777 __u32 len;
778 __u32 pad0;
779 };
780
781 struct kvm_sev_send_start {
782 __u32 policy;
783 __u32 pad0;
784 __u64 pdh_cert_uaddr;
785 __u32 pdh_cert_len;
786 __u32 pad1;
787 __u64 plat_certs_uaddr;
788 __u32 plat_certs_len;
789 __u32 pad2;
790 __u64 amd_certs_uaddr;
791 __u32 amd_certs_len;
792 __u32 pad3;
793 __u64 session_uaddr;
794 __u32 session_len;
795 __u32 pad4;
796 };
797
798 struct kvm_sev_send_update_data {
799 __u64 hdr_uaddr;
800 __u32 hdr_len;
801 __u32 pad0;
802 __u64 guest_uaddr;
803 __u32 guest_len;
804 __u32 pad1;
805 __u64 trans_uaddr;
806 __u32 trans_len;
807 __u32 pad2;
808 };
809
810 struct kvm_sev_receive_start {
811 __u32 handle;
812 __u32 policy;
813 __u64 pdh_uaddr;
814 __u32 pdh_len;
815 __u32 pad0;
816 __u64 session_uaddr;
817 __u32 session_len;
818 __u32 pad1;
819 };
820
821 struct kvm_sev_receive_update_data {
822 __u64 hdr_uaddr;
823 __u32 hdr_len;
824 __u32 pad0;
825 __u64 guest_uaddr;
826 __u32 guest_len;
827 __u32 pad1;
828 __u64 trans_uaddr;
829 __u32 trans_len;
830 __u32 pad2;
831 };
832
833 struct kvm_sev_snp_launch_start {
834 __u64 policy;
835 __u8 gosvw[16];
836 __u16 flags;
837 __u8 pad0[6];
838 __u64 pad1[4];
839 };
840
841 /* Kept in sync with firmware values for simplicity. */
842 #define KVM_SEV_SNP_PAGE_TYPE_NORMAL 0x1
843 #define KVM_SEV_SNP_PAGE_TYPE_ZERO 0x3
844 #define KVM_SEV_SNP_PAGE_TYPE_UNMEASURED 0x4
845 #define KVM_SEV_SNP_PAGE_TYPE_SECRETS 0x5
846 #define KVM_SEV_SNP_PAGE_TYPE_CPUID 0x6
847
848 struct kvm_sev_snp_launch_update {
849 __u64 gfn_start;
850 __u64 uaddr;
851 __u64 len;
852 __u8 type;
853 __u8 pad0;
854 __u16 flags;
855 __u32 pad1;
856 __u64 pad2[4];
857 };
858
859 #define KVM_SEV_SNP_ID_BLOCK_SIZE 96
860 #define KVM_SEV_SNP_ID_AUTH_SIZE 4096
861 #define KVM_SEV_SNP_FINISH_DATA_SIZE 32
862
863 struct kvm_sev_snp_launch_finish {
864 __u64 id_block_uaddr;
865 __u64 id_auth_uaddr;
866 __u8 id_block_en;
867 __u8 auth_key_en;
868 __u8 vcek_disabled;
869 __u8 host_data[KVM_SEV_SNP_FINISH_DATA_SIZE];
870 __u8 pad0[3];
871 __u16 flags;
872 __u64 pad1[4];
873 };
874
875 #define KVM_X2APIC_API_USE_32BIT_IDS (1ULL << 0)
876 #define KVM_X2APIC_API_DISABLE_BROADCAST_QUIRK (1ULL << 1)
877
878 struct kvm_hyperv_eventfd {
879 __u32 conn_id;
880 __s32 fd;
881 __u32 flags;
882 __u32 padding[3];
883 };
884
885 #define KVM_HYPERV_CONN_ID_MASK 0x00ffffff
886 #define KVM_HYPERV_EVENTFD_DEASSIGN (1 << 0)
887
888 /*
889 * Masked event layout.
890 * Bits Description
891 * ---- -----------
892 * 7:0 event select (low bits)
893 * 15:8 umask match
894 * 31:16 unused
895 * 35:32 event select (high bits)
896 * 36:54 unused
897 * 55 exclude bit
898 * 63:56 umask mask
899 */
900
901 #define KVM_PMU_ENCODE_MASKED_ENTRY(event_select, mask, match, exclude) \
902 (((event_select) & 0xFFULL) | (((event_select) & 0XF00ULL) << 24) | \
903 (((mask) & 0xFFULL) << 56) | \
904 (((match) & 0xFFULL) << 8) | \
905 ((__u64)(!!(exclude)) << 55))
906
907 #define KVM_PMU_MASKED_ENTRY_EVENT_SELECT \
908 (__GENMASK_ULL(7, 0) | __GENMASK_ULL(35, 32))
909 #define KVM_PMU_MASKED_ENTRY_UMASK_MASK (__GENMASK_ULL(63, 56))
910 #define KVM_PMU_MASKED_ENTRY_UMASK_MATCH (__GENMASK_ULL(15, 8))
911 #define KVM_PMU_MASKED_ENTRY_EXCLUDE (_BITULL(55))
912 #define KVM_PMU_MASKED_ENTRY_UMASK_MASK_SHIFT (56)
913
914 /* for KVM_{GET,SET,HAS}_DEVICE_ATTR */
915 #define KVM_VCPU_TSC_CTRL 0 /* control group for the timestamp counter (TSC) */
916 #define KVM_VCPU_TSC_OFFSET 0 /* attribute for the TSC offset */
917
918 /* x86-specific KVM_EXIT_HYPERCALL flags. */
919 #define KVM_EXIT_HYPERCALL_LONG_MODE _BITULL(0)
920
921 #define KVM_X86_DEFAULT_VM 0
922 #define KVM_X86_SW_PROTECTED_VM 1
923 #define KVM_X86_SEV_VM 2
924 #define KVM_X86_SEV_ES_VM 3
925 #define KVM_X86_SNP_VM 4
926
927 #endif /* _ASM_X86_KVM_H */
928
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.