From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 13A47C3DA5D for ; Thu, 25 Jul 2024 19:52:36 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 97A556B0083; Thu, 25 Jul 2024 15:52:35 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 92A356B0085; Thu, 25 Jul 2024 15:52:35 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 7C9CA6B0088; Thu, 25 Jul 2024 15:52:35 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0014.hostedemail.com [216.40.44.14]) by kanga.kvack.org (Postfix) with ESMTP id 59A8A6B0083 for ; Thu, 25 Jul 2024 15:52:35 -0400 (EDT) Received: from smtpin24.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay01.hostedemail.com (Postfix) with ESMTP id 032611C046C for ; Thu, 25 Jul 2024 19:52:34 +0000 (UTC) X-FDA: 82379322270.24.7FA3BCF Received: from mail-yb1-f177.google.com (mail-yb1-f177.google.com [209.85.219.177]) by imf03.hostedemail.com (Postfix) with ESMTP id 3C5FE2002B for ; Thu, 25 Jul 2024 19:52:33 +0000 (UTC) Authentication-Results: imf03.hostedemail.com; dkim=pass header.d=google.com header.s=20230601 header.b=xsdgE7p3; spf=pass (imf03.hostedemail.com: domain of sagis@google.com designates 209.85.219.177 as permitted sender) smtp.mailfrom=sagis@google.com; dmarc=pass (policy=reject) header.from=google.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1721937114; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=wmvF7JSitK/Lbt+S8Ef7rsUKiM+CmvTYnpcIXireHNk=; b=tz7gjSXbkNitDSLfY5fAMHcyncoDAnok7sJRCs/jN0rTh1CIgGmzdAyZdSeOXXRV7fjXBM YmsEaY6C8aWUWns0seGlQwkHaq/cDjzE2HxqG+4TITO+dxd/9OVE0zAiKp/g0TS89jwqCX L4ysize/ZoaeO+v9IzWwvdqO5hg4SB0= ARC-Authentication-Results: i=1; imf03.hostedemail.com; dkim=pass header.d=google.com header.s=20230601 header.b=xsdgE7p3; spf=pass (imf03.hostedemail.com: domain of sagis@google.com designates 209.85.219.177 as permitted sender) smtp.mailfrom=sagis@google.com; dmarc=pass (policy=reject) header.from=google.com ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1721937114; a=rsa-sha256; cv=none; b=6FeF+CSS3fCkfU9OAL1dY2poU2/CuDsxkT9O33UeDANCPrIwtR4nzXJ1DghaKF6yPYgvTj HdEkMXc1Gr7pXVQQ6y6VTcRLCFpHJxhsk7E9CCFfWnCAO5xXIZ8ksV3uqznngUVAfR2JJ6 lPq0PuQAL09jq3dXYZLVKsIbm2FDWd8= Received: by mail-yb1-f177.google.com with SMTP id 3f1490d57ef6-dfdb6122992so1228326276.3 for ; Thu, 25 Jul 2024 12:52:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1721937152; x=1722541952; darn=kvack.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=wmvF7JSitK/Lbt+S8Ef7rsUKiM+CmvTYnpcIXireHNk=; b=xsdgE7p35FUgIIF/D9VuByrTlrgF42nXFLEcpV8vSw72nXeBOsRJeurJl7ndtEgGF3 illTxoZ6gyqx/gu3TJGtBCUYRqncA/4Qj4fKVATFrWOumDlbqs9BqGzO+li0R5uOYIhw HB93E/+3mG2yTdSXRbfsC+l8wqvhU1Kl8JhbmNvnYX8ZZlED3gevO1uCWF7C3/BHgOM7 hgt+Tf04zRF1bJPIeKLF2nI49b/jap1HYY2Hnz7mB+4KVTV55YqHuVKAN2iu9K7kFbyG ucL8azrcBPzYY19EATqGuT33so+MMqMOnzfnBJC7M77MMSCIjlZoXKTkgpwT4FWR1kMq gjQA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1721937152; x=1722541952; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=wmvF7JSitK/Lbt+S8Ef7rsUKiM+CmvTYnpcIXireHNk=; b=nIivvjzt4LJLvLpi+lxOeaDt1vxr9+MtXlbX/hXqYwcUfV3WgGi0nBFfrZx03t5uFE wZTdxsbD7UigqTzZzHIWo1EpboTD9fbWk6Qd2c5rfInYGy5BeR2kjip1pUQfiI7VqJK0 uwjHUc/LdHZptjAmHaKU+xO3Ad4LsyXOXVKQ26UOAqF8niFTpa3GJ/K8olwaHcPfOMbo OFpEEn9dLysRW6U4dZ1tnQEsR+4FwjhrF+OgOH5tiVhfqR2SFzesrklZgCaJEQrOuAqd X/1HZDPwao5MLYmj1vdScOZSO3oM2/jwtc+qBlfaiA1uAbrn0K0iUC6U3uR+bp/iApJA YC/A== X-Forwarded-Encrypted: i=1; AJvYcCWWrPp587GaYSDS599Vf8YpXriwcqlgTLDRi1ksojJt1Ohy4eXC1uyh+i10Y8zIlVYL4PSObyIBGDprvBX4lb3iPLk= X-Gm-Message-State: AOJu0YyF5fzsBK1yXXdYGdIZFxyALq4IKDrXrfW8CtnN0wd87W2x5Jsb rcOJUEebJE4KqD3k0/fFpc5f3+RAATBz2YduVMMqV0j1KSHddop3HgLYWChJfHdYkcmghsjwQW0 cRGnSqfzbdy3O3hdsjochOD7EDGOWa5fql+18 X-Google-Smtp-Source: AGHT+IEj7ZX2Fld7qL9GrVfFbgPabN6TPthfiRSq2x6GsFMTL3WDmsNd2RUJFRa994qovk1XqN1M+p5ev9qqzjRDdFA= X-Received: by 2002:a05:6902:1401:b0:e03:645f:2099 with SMTP id 3f1490d57ef6-e0b22fae743mr4849923276.8.1721937151961; Thu, 25 Jul 2024 12:52:31 -0700 (PDT) MIME-Version: 1.0 References: <20231212204647.2170650-1-sagis@google.com> <20231212204647.2170650-9-sagis@google.com> <0b34990b-8a3f-487e-891e-64d3d4d68613@intel.com> In-Reply-To: <0b34990b-8a3f-487e-891e-64d3d4d68613@intel.com> From: Sagi Shahar Date: Thu, 25 Jul 2024 14:52:20 -0500 Message-ID: Subject: Re: [RFC PATCH v5 08/29] KVM: selftests: TDX: Add TDX lifecycle test To: "Chen, Zide" Cc: linux-kselftest@vger.kernel.org, Ackerley Tng , Ryan Afranji , Erdem Aktas , Isaku Yamahata , Sean Christopherson , Paolo Bonzini , Shuah Khan , Peter Gonda , Haibo Xu , Chao Peng , Vishal Annapurve , Roger Wang , Vipin Sharma , jmattson@google.com, dmatlack@google.com, linux-kernel@vger.kernel.org, kvm@vger.kernel.org, linux-mm@kvack.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Stat-Signature: m8takkn7shyzhtq7h4o8anbuhhyad538 X-Rspam-User: X-Rspamd-Queue-Id: 3C5FE2002B X-Rspamd-Server: rspam02 X-HE-Tag: 1721937153-224074 X-HE-Meta: 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 gulaCrG2 SvFgCJxry5Q7qFRETzRO+LVJGuB1JikUkljIUob0WHaFWtXLiIu4M/CQ9Cj6DWWrR5SDVBgTEILJE7itEqfn5gkHk8WtHNFR76FeRdNMcuHboZwMVB+j9MlVyD+as7VEuvQjf2TyjbsW5LrGJmEQjTis30fa+xAAdlksL1O7eT9r6wzJ/QlX75KYiVlceRVW5OyS5cMb6/xYird+rW9PbQWp73J/oHj+sDvdR6TrK60ozzOnfkRijZorCLm3zi7+C2EyeOrXFgVcUqLvY7wNtngFAPntPgD8tF8u69s8akvTVDZEFIUglK+BXeeaq+AD9XgVU22vgyCk+scggdXxig9upUCha7OxV9zw8KR3xitM95h4= X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: List-Subscribe: List-Unsubscribe: On Fri, Mar 22, 2024 at 4:33=E2=80=AFPM Chen, Zide wr= ote: > > > > On 12/12/2023 12:46 PM, Sagi Shahar wrote: > > From: Erdem Aktas > > > > Adding a test to verify TDX lifecycle by creating a TD and running a > > dummy TDG.VP.VMCALL inside it. > > > > Signed-off-by: Erdem Aktas > > Signed-off-by: Ryan Afranji > > Signed-off-by: Sagi Shahar > > Co-developed-by: Ackerley Tng > > Signed-off-by: Ackerley Tng > > --- > > tools/testing/selftests/kvm/Makefile | 4 + > > .../selftests/kvm/include/x86_64/tdx/tdcall.h | 35 ++++++++ > > .../selftests/kvm/include/x86_64/tdx/tdx.h | 12 +++ > > .../kvm/include/x86_64/tdx/test_util.h | 52 +++++++++++ > > .../selftests/kvm/lib/x86_64/tdx/tdcall.S | 90 +++++++++++++++++++ > > .../selftests/kvm/lib/x86_64/tdx/tdx.c | 27 ++++++ > > .../selftests/kvm/lib/x86_64/tdx/tdx_util.c | 1 + > > .../selftests/kvm/lib/x86_64/tdx/test_util.c | 34 +++++++ > > .../selftests/kvm/x86_64/tdx_vm_tests.c | 45 ++++++++++ > > 9 files changed, 300 insertions(+) > > create mode 100644 tools/testing/selftests/kvm/include/x86_64/tdx/tdca= ll.h > > create mode 100644 tools/testing/selftests/kvm/include/x86_64/tdx/tdx.= h > > create mode 100644 tools/testing/selftests/kvm/include/x86_64/tdx/test= _util.h > > create mode 100644 tools/testing/selftests/kvm/lib/x86_64/tdx/tdcall.S > > create mode 100644 tools/testing/selftests/kvm/lib/x86_64/tdx/tdx.c > > create mode 100644 tools/testing/selftests/kvm/lib/x86_64/tdx/test_uti= l.c > > create mode 100644 tools/testing/selftests/kvm/x86_64/tdx_vm_tests.c > > > > diff --git a/tools/testing/selftests/kvm/Makefile b/tools/testing/selft= ests/kvm/Makefile > > index a35150ab855f..80d4a50eeb9f 100644 > > --- a/tools/testing/selftests/kvm/Makefile > > +++ b/tools/testing/selftests/kvm/Makefile > > @@ -52,6 +52,9 @@ LIBKVM_x86_64 +=3D lib/x86_64/vmx.c > > LIBKVM_x86_64 +=3D lib/x86_64/sev.c > > LIBKVM_x86_64 +=3D lib/x86_64/tdx/tdx_util.c > > LIBKVM_x86_64 +=3D lib/x86_64/tdx/td_boot.S > > +LIBKVM_x86_64 +=3D lib/x86_64/tdx/tdcall.S > > +LIBKVM_x86_64 +=3D lib/x86_64/tdx/tdx.c > > +LIBKVM_x86_64 +=3D lib/x86_64/tdx/test_util.c > > > > LIBKVM_aarch64 +=3D lib/aarch64/gic.c > > LIBKVM_aarch64 +=3D lib/aarch64/gic_v3.c > > @@ -152,6 +155,7 @@ TEST_GEN_PROGS_x86_64 +=3D set_memory_region_test > > TEST_GEN_PROGS_x86_64 +=3D steal_time > > TEST_GEN_PROGS_x86_64 +=3D kvm_binary_stats_test > > TEST_GEN_PROGS_x86_64 +=3D system_counter_offset_test > > +TEST_GEN_PROGS_x86_64 +=3D x86_64/tdx_vm_tests > > > > # Compiled outputs used by test targets > > TEST_GEN_PROGS_EXTENDED_x86_64 +=3D x86_64/nx_huge_pages_test > > diff --git a/tools/testing/selftests/kvm/include/x86_64/tdx/tdcall.h b/= tools/testing/selftests/kvm/include/x86_64/tdx/tdcall.h > > new file mode 100644 > > index 000000000000..78001bfec9c8 > > --- /dev/null > > +++ b/tools/testing/selftests/kvm/include/x86_64/tdx/tdcall.h > > @@ -0,0 +1,35 @@ > > +/* SPDX-License-Identifier: GPL-2.0-only */ > > +/* Adapted from arch/x86/include/asm/shared/tdx.h */ > > + > > +#ifndef SELFTESTS_TDX_TDCALL_H > > +#define SELFTESTS_TDX_TDCALL_H > > + > > +#include > > +#include > > + > > +#define TDG_VP_VMCALL_INSTRUCTION_IO_READ 0 > > +#define TDG_VP_VMCALL_INSTRUCTION_IO_WRITE 1 > > + > > +#define TDX_HCALL_HAS_OUTPUT BIT(0) > > + > > +#define TDX_HYPERCALL_STANDARD 0 > > + > > +/* > > + * Used in __tdx_hypercall() to pass down and get back registers' valu= es of > > + * the TDCALL instruction when requesting services from the VMM. > > + * > > + * This is a software only structure and not part of the TDX module/VM= M ABI. > > + */ > > +struct tdx_hypercall_args { > > + u64 r10; > > + u64 r11; > > + u64 r12; > > + u64 r13; > > + u64 r14; > > + u64 r15; > > +}; > > + > > +/* Used to request services from the VMM */ > > +u64 __tdx_hypercall(struct tdx_hypercall_args *args, unsigned long fla= gs); > > + > > +#endif // SELFTESTS_TDX_TDCALL_H > > diff --git a/tools/testing/selftests/kvm/include/x86_64/tdx/tdx.h b/too= ls/testing/selftests/kvm/include/x86_64/tdx/tdx.h > > new file mode 100644 > > index 000000000000..a7161efe4ee2 > > --- /dev/null > > +++ b/tools/testing/selftests/kvm/include/x86_64/tdx/tdx.h > > @@ -0,0 +1,12 @@ > > +/* SPDX-License-Identifier: GPL-2.0-only */ > > +#ifndef SELFTEST_TDX_TDX_H > > +#define SELFTEST_TDX_TDX_H > > + > > +#include > > + > > +#define TDG_VP_VMCALL_INSTRUCTION_IO 30 > > + > > +uint64_t tdg_vp_vmcall_instruction_io(uint64_t port, uint64_t size, > > + uint64_t write, uint64_t *data); > > + > > +#endif // SELFTEST_TDX_TDX_H > > diff --git a/tools/testing/selftests/kvm/include/x86_64/tdx/test_util.h= b/tools/testing/selftests/kvm/include/x86_64/tdx/test_util.h > > new file mode 100644 > > index 000000000000..b570b6d978ff > > --- /dev/null > > +++ b/tools/testing/selftests/kvm/include/x86_64/tdx/test_util.h > > @@ -0,0 +1,52 @@ > > +/* SPDX-License-Identifier: GPL-2.0-only */ > > +#ifndef SELFTEST_TDX_TEST_UTIL_H > > +#define SELFTEST_TDX_TEST_UTIL_H > > + > > +#include > > + > > +#include "tdcall.h" > > + > > +#define TDX_TEST_SUCCESS_PORT 0x30 > > +#define TDX_TEST_SUCCESS_SIZE 4 > > + > > +/** > > + * Assert that tdx_test_success() was called in the guest. > > + */ > > +#define TDX_TEST_ASSERT_SUCCESS(VCPU) = \ > > + (TEST_ASSERT( \ > > + ((VCPU)->run->exit_reason =3D=3D KVM_EXIT_IO) && = \ > > + ((VCPU)->run->io.port =3D=3D TDX_TEST_SUCCESS_PORT) && = \ > > + ((VCPU)->run->io.size =3D=3D TDX_TEST_SUCCESS_SIZE) && = \ > > + ((VCPU)->run->io.direction =3D=3D = \ > > + TDG_VP_VMCALL_INSTRUCTION_IO_WRITE), \ > > + "Unexpected exit values while waiting for test completion= : %u (%s) %d %d %d\n", \ > > + (VCPU)->run->exit_reason, \ > > + exit_reason_str((VCPU)->run->exit_reason), \ > > + (VCPU)->run->io.port, (VCPU)->run->io.size, \ > > + (VCPU)->run->io.direction)) > > + > > +/** > > + * Run a test in a new process. > > + * > > + * There might be multiple tests we are running and if one test fails,= it will > > + * prevent the subsequent tests to run due to how tests are failing wi= th > > + * TEST_ASSERT function. The run_in_new_process function will run a te= st in a > > + * new process context and wait for it to finish or fail to prevent TE= ST_ASSERT > > + * to kill the main testing process. > > + */ > > +void run_in_new_process(void (*func)(void)); > > + > > +/** > > + * Verify that the TDX is supported by KVM. > > + */ > > +bool is_tdx_enabled(void); > > + > > +/** > > + * Report test success to userspace. > > + * > > + * Use TDX_TEST_ASSERT_SUCCESS() to assert that this function was call= ed in the > > + * guest. > > + */ > > +void tdx_test_success(void); > > + > > +#endif // SELFTEST_TDX_TEST_UTIL_H > > diff --git a/tools/testing/selftests/kvm/lib/x86_64/tdx/tdcall.S b/tool= s/testing/selftests/kvm/lib/x86_64/tdx/tdcall.S > > new file mode 100644 > > index 000000000000..df9c1ed4bb2d > > --- /dev/null > > +++ b/tools/testing/selftests/kvm/lib/x86_64/tdx/tdcall.S > > @@ -0,0 +1,90 @@ > > +/* SPDX-License-Identifier: GPL-2.0-only */ > > +/* Adapted from arch/x86/coco/tdx/tdcall.S */ > > + > > +#define TDX_HYPERCALL_r10 0 /* offsetof(struct tdx_hypercall_args, r10= ) */ > > +#define TDX_HYPERCALL_r11 8 /* offsetof(struct tdx_hypercall_args, r11= ) */ > > +#define TDX_HYPERCALL_r12 16 /* offsetof(struct tdx_hypercall_args, r1= 2) */ > > +#define TDX_HYPERCALL_r13 24 /* offsetof(struct tdx_hypercall_args, r1= 3) */ > > +#define TDX_HYPERCALL_r14 32 /* offsetof(struct tdx_hypercall_args, r1= 4) */ > > +#define TDX_HYPERCALL_r15 40 /* offsetof(struct tdx_hypercall_args, r1= 5) */ > > + > > +/* > > + * Bitmasks of exposed registers (with VMM). > > + */ > > +#define TDX_R10 0x400 > > +#define TDX_R11 0x800 > > +#define TDX_R12 0x1000 > > +#define TDX_R13 0x2000 > > +#define TDX_R14 0x4000 > > +#define TDX_R15 0x8000 > > + > > +#define TDX_HCALL_HAS_OUTPUT 0x1 > > + > > +/* > > + * These registers are clobbered to hold arguments for each > > + * TDVMCALL. They are safe to expose to the VMM. > > + * Each bit in this mask represents a register ID. Bit field > > + * details can be found in TDX GHCI specification, section > > + * titled "TDCALL [TDG.VP.VMCALL] leaf". > > + */ > > +#define TDVMCALL_EXPOSE_REGS_MASK ( TDX_R10 | TDX_R11 | \ > > + TDX_R12 | TDX_R13 | \ > > + TDX_R14 | TDX_R15 ) > > + > > +.code64 > > +.section .text > > + > > +.globl __tdx_hypercall > > +.type __tdx_hypercall, @function > > +__tdx_hypercall: > > + /* Set up stack frame */ > > + push %rbp > > + movq %rsp, %rbp > > + > > + /* Save callee-saved GPRs as mandated by the x86_64 ABI */ > > + push %r15 > > + push %r14 > > + push %r13 > > + push %r12 > > + > > + /* Mangle function call ABI into TDCALL ABI: */ > > + /* Set TDCALL leaf ID (TDVMCALL (0)) in RAX */ > > + xor %eax, %eax > > + > > + /* Copy hypercall registers from arg struct: */ > > + movq TDX_HYPERCALL_r10(%rdi), %r10 > > + movq TDX_HYPERCALL_r11(%rdi), %r11 > > + movq TDX_HYPERCALL_r12(%rdi), %r12 > > + movq TDX_HYPERCALL_r13(%rdi), %r13 > > + movq TDX_HYPERCALL_r14(%rdi), %r14 > > + movq TDX_HYPERCALL_r15(%rdi), %r15 > > + > > + movl $TDVMCALL_EXPOSE_REGS_MASK, %ecx > > + > > + tdcall > > + > > + /* TDVMCALL leaf return code is in R10 */ > > + movq %r10, %rax > > + > > + /* Copy hypercall result registers to arg struct if needed */ > > + testq $TDX_HCALL_HAS_OUTPUT, %rsi > > + jz .Lout > > + > > + movq %r10, TDX_HYPERCALL_r10(%rdi) > > + movq %r11, TDX_HYPERCALL_r11(%rdi) > > + movq %r12, TDX_HYPERCALL_r12(%rdi) > > + movq %r13, TDX_HYPERCALL_r13(%rdi) > > + movq %r14, TDX_HYPERCALL_r14(%rdi) > > + movq %r15, TDX_HYPERCALL_r15(%rdi) > > +.Lout: > > + /* Restore callee-saved GPRs as mandated by the x86_64 ABI */ > > + pop %r12 > > + pop %r13 > > + pop %r14 > > + pop %r15 > > + > > + pop %rbp > > + ret > > + > > +/* Disable executable stack */ > > +.section .note.GNU-stack,"",%progbits > > diff --git a/tools/testing/selftests/kvm/lib/x86_64/tdx/tdx.c b/tools/t= esting/selftests/kvm/lib/x86_64/tdx/tdx.c > > new file mode 100644 > > index 000000000000..c2414523487a > > --- /dev/null > > +++ b/tools/testing/selftests/kvm/lib/x86_64/tdx/tdx.c > > @@ -0,0 +1,27 @@ > > +// SPDX-License-Identifier: GPL-2.0-only > > + > > +#include "tdx/tdcall.h" > > +#include "tdx/tdx.h" > > + > > +uint64_t tdg_vp_vmcall_instruction_io(uint64_t port, uint64_t size, > > + uint64_t write, uint64_t *data) > > +{ > > + uint64_t ret; > > + struct tdx_hypercall_args args =3D { > > + .r10 =3D TDX_HYPERCALL_STANDARD, > > + .r11 =3D TDG_VP_VMCALL_INSTRUCTION_IO, > > + .r12 =3D size, > > + .r13 =3D write, > > + .r14 =3D port, > > + }; > > + > > + if (write) > > + args.r15 =3D *data; > > + > > + ret =3D __tdx_hypercall(&args, write ? 0 : TDX_HCALL_HAS_OUTPUT); > > + > > + if (!write) > > + *data =3D args.r11; > > + > > + return ret; > > +} > > diff --git a/tools/testing/selftests/kvm/lib/x86_64/tdx/tdx_util.c b/to= ols/testing/selftests/kvm/lib/x86_64/tdx/tdx_util.c > > index 063ff486fb86..b302060049d5 100644 > > --- a/tools/testing/selftests/kvm/lib/x86_64/tdx/tdx_util.c > > +++ b/tools/testing/selftests/kvm/lib/x86_64/tdx/tdx_util.c > > @@ -224,6 +224,7 @@ static void tdx_enable_capabilities(struct kvm_vm *= vm) > > KVM_X2APIC_API_USE_32BIT_IDS | > > KVM_X2APIC_API_DISABLE_BROADCAST_QUIRK); > > vm_enable_cap(vm, KVM_CAP_SPLIT_IRQCHIP, 24); > > + vm_enable_cap(vm, KVM_CAP_MAX_VCPUS, 512); > > Since TDX spec doesn't define max vCPUs, is it a good idea to fix it to > 512 in this common code? > > How about to move this line to the specific test case where you are > actually verifying this capability? > > For example, move it to PATCH v5 21/29] KVM: selftests: TDX: Add > TDG.VP.INFO test > > + vm_enable_cap(vm, KVM_CAP_MAX_VCPUS, 512); > ... > > TEST_ASSERT_EQ(ret_max_vcpus, 512); > See Yan Zhao's comment above. This was needed in the previous implementation of TDX and without it the tests would fail. With the new fix I'm going to remove this from the common code. > >