mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-08-05 16:54:27 +00:00
095b71a03f
Introduce the wiring for handling TDX VM exits by implementing the callbacks .get_exit_info(), .get_entry_info(), and .handle_exit(). Additionally, add error handling during the TDX VM exit flow, and add a place holder to handle various exit reasons. Store VMX exit reason and exit qualification in struct vcpu_vt for TDX, so that TDX/VMX can use the same helpers to get exit reason and exit qualification. Store extended exit qualification and exit GPA info in struct vcpu_tdx because they are used by TDX code only. Contention Handling: The TDH.VP.ENTER operation may contend with TDH.MEM.* operations due to secure EPT or TD EPOCH. If the contention occurs, the return value will have TDX_OPERAND_BUSY set, prompting the vCPU to attempt re-entry into the guest with EXIT_FASTPATH_EXIT_HANDLED, not EXIT_FASTPATH_REENTER_GUEST, so that the interrupts pending during IN_GUEST_MODE can be delivered for sure. Otherwise, the requester of KVM_REQ_OUTSIDE_GUEST_MODE may be blocked endlessly. Error Handling: - TDX_SW_ERROR: This includes #UD caused by SEAMCALL instruction if the CPU isn't in VMX operation, #GP caused by SEAMCALL instruction when TDX isn't enabled by the BIOS, and TDX_SEAMCALL_VMFAILINVALID when SEAM firmware is not loaded or disabled. - TDX_ERROR: This indicates some check failed in the TDX module, preventing the vCPU from running. - Failed VM Entry: Exit to userspace with KVM_EXIT_FAIL_ENTRY. Handle it separately before handling TDX_NON_RECOVERABLE because when off-TD debug is not enabled, TDX_NON_RECOVERABLE is set. - TDX_NON_RECOVERABLE: Set by the TDX module when the error is non-recoverable, indicating that the TDX guest is dead or the vCPU is disabled. A special case is triple fault, which also sets TDX_NON_RECOVERABLE but exits to userspace with KVM_EXIT_SHUTDOWN, aligning with the VMX case. - Any unhandled VM exit reason will also return to userspace with KVM_EXIT_INTERNAL_ERROR. Suggested-by: Sean Christopherson <seanjc@google.com> Signed-off-by: Isaku Yamahata <isaku.yamahata@intel.com> Co-developed-by: Binbin Wu <binbin.wu@linux.intel.com> Signed-off-by: Binbin Wu <binbin.wu@linux.intel.com> Reviewed-by: Chao Gao <chao.gao@intel.com> Message-ID: <20250222014225.897298-4-binbin.wu@linux.intel.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
40 lines
1.5 KiB
C
40 lines
1.5 KiB
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
/* architectural status code for SEAMCALL */
|
|
|
|
#ifndef __KVM_X86_TDX_ERRNO_H
|
|
#define __KVM_X86_TDX_ERRNO_H
|
|
|
|
#define TDX_SEAMCALL_STATUS_MASK 0xFFFFFFFF00000000ULL
|
|
|
|
/*
|
|
* TDX SEAMCALL Status Codes (returned in RAX)
|
|
*/
|
|
#define TDX_NON_RECOVERABLE_VCPU 0x4000000100000000ULL
|
|
#define TDX_NON_RECOVERABLE_TD 0x4000000200000000ULL
|
|
#define TDX_NON_RECOVERABLE_TD_NON_ACCESSIBLE 0x6000000500000000ULL
|
|
#define TDX_NON_RECOVERABLE_TD_WRONG_APIC_MODE 0x6000000700000000ULL
|
|
#define TDX_INTERRUPTED_RESUMABLE 0x8000000300000000ULL
|
|
#define TDX_OPERAND_INVALID 0xC000010000000000ULL
|
|
#define TDX_OPERAND_BUSY 0x8000020000000000ULL
|
|
#define TDX_PREVIOUS_TLB_EPOCH_BUSY 0x8000020100000000ULL
|
|
#define TDX_PAGE_METADATA_INCORRECT 0xC000030000000000ULL
|
|
#define TDX_VCPU_NOT_ASSOCIATED 0x8000070200000000ULL
|
|
#define TDX_KEY_GENERATION_FAILED 0x8000080000000000ULL
|
|
#define TDX_KEY_STATE_INCORRECT 0xC000081100000000ULL
|
|
#define TDX_KEY_CONFIGURED 0x0000081500000000ULL
|
|
#define TDX_NO_HKID_READY_TO_WBCACHE 0x0000082100000000ULL
|
|
#define TDX_FLUSHVP_NOT_DONE 0x8000082400000000ULL
|
|
#define TDX_EPT_WALK_FAILED 0xC0000B0000000000ULL
|
|
#define TDX_EPT_ENTRY_STATE_INCORRECT 0xC0000B0D00000000ULL
|
|
#define TDX_METADATA_FIELD_NOT_READABLE 0xC0000C0200000000ULL
|
|
|
|
/*
|
|
* TDX module operand ID, appears in 31:0 part of error code as
|
|
* detail information
|
|
*/
|
|
#define TDX_OPERAND_ID_RCX 0x01
|
|
#define TDX_OPERAND_ID_TDR 0x80
|
|
#define TDX_OPERAND_ID_SEPT 0x92
|
|
#define TDX_OPERAND_ID_TD_EPOCH 0xa9
|
|
|
|
#endif /* __KVM_X86_TDX_ERRNO_H */
|