> On Aug 29, 2019, at 4:17 PM, Jim Mattson <jmattson@xxxxxxxxxx> wrote: > > On Thu, Aug 29, 2019 at 2:30 PM Krish Sadhukhan > <krish.sadhukhan@xxxxxxxxxx> wrote: >> According to section "Checks on Guest Control Registers, Debug Registers, and >> and MSRs" in Intel SDM vol 3C, the following checks are performed on vmentry >> of nested guests: >> >> If the "load debug controls" VM-entry control is 1, >> >> - bits reserved in the IA32_DEBUGCTL MSR must be 0 in the field for >> that register. The first processors to support the virtual-machine >> extensions supported only the 1-setting of this control and thus >> performed this check unconditionally. >> >> - bits 63:32 in the DR7 field must be 0. >> >> Signed-off-by: Krish Sadhukhan <krish.sadhukhan@xxxxxxxxxx> >> Reviewed-by: Karl Heubaum <karl.heubaum@xxxxxxxxxx> >> --- >> ... >> +#define DEBUGCTL_RESERVED_BITS 0xFFFFFFFFFFFF203C > > For the virtual CPU implemented by kvm today, only bits 0 and 1 are allowed. Please build the tests so they would pass on bare-metal.