Defined in 1 files as a function:
Referenced in 2 files:
Smatch caller information:
arch/x86/kvm/mmu/mmu.c direct_map() -> link_shadow_page()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->run->hypercall.ret | 0-s32max,1844674407370955159,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_pte_list_desc_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_pte_list_desc_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_advance_ns | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode_mask | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.n_max_mmu_pages | 1-u64max |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.owner_cpu | 0 |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 0 | vcpu->kvm->stat.max_mmu_page_hash_collisions | 1-s32max |
| PARAM_VALUE | 0 | vcpu->last_used_slot->as_id | 0-1 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->base_gfn | 0-18446744073709551614 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->id | 0-32766 |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,1844674407370955159,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->run->hyperv.type | 0-3 |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 0 | vcpu->run->mmio.is_write | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->mmio.len | 0-8 |
| PARAM_VALUE | 0 | vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 1 | sptep | 4096-ptr_max |
| PARAM_VALUE | 2 | sp | 4096-ptr_max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 2 | sp | (-1),1-s32max |
| BUF_SIZE | 2 | sp | (-1),1-s32max |
| CAPPED_DATA | 0 | vcpu->arch.mmu | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->arch.n_max_mmu_pages | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| DATA_SOURCE | 2 | sp | r kvm_mmu_get_child_sp |
| NOSPEC | 0 | vcpu->arch.mmio_gfn | |
| NOSPEC | 0 | vcpu->arch.xen.runstate_cache.uhva | |
| NOSPEC | 2 | sp->gfn | |
| PREEMPT_ADD | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | vcpu->arch.host_debugctl | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14 |
| USER_DATA | 0 | vcpu->arch.mmio_gfn | 0-4503599627370495[c] |
| USER_DATA | 0 | vcpu->arch.mmu->root.pgd | 0-u64max |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_DATA | 2 | sp->gfn | 0-4503599627370495[c] |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.size | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| LOCK2 | 0 | &vcpu->kvm->mmu_lock | |
| HALF_LOCKED2 | 0 | &vcpu->kvm->srcu | |
| HALF_LOCKED2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm)->mmu_lock |
arch/x86/kvm/mmu/mmu.c ept_fetch() -> link_shadow_page()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu->root.hpa | 0-18446744073709551614 |
| PARAM_VALUE | 0 | vcpu->arch.mmu->w | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_pte_list_desc_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_pte_list_desc_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_advance_ns | 0-5000 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode_mask | 131072,393216 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.n_max_mmu_pages | 1-u64max |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->kvm->stat.max_mmu_page_hash_collisions | 1-s32max |
| PARAM_VALUE | 0 | vcpu->last_used_slot | 0,4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->last_used_slot->as_id | 0-1 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->base_gfn | 0-18446744073709551614 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->id | 0-32766 |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->run->hyperv.type | 0-3 |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 0 | vcpu->run->mmio.is_write | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->mmio.len | 0-8 |
| PARAM_VALUE | 0 | vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 1 | sptep | 4096-ptr_max |
| PARAM_VALUE | 2 | sp | 4096-ptr_max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 2 | sp | (-1),1-s32max |
| BUF_SIZE | 2 | sp | (-1),1-s32max |
| CAPPED_DATA | 0 | vcpu->arch.mmu | 1 |
| CAPPED_DATA | 0 | vcpu->arch.mmu->w | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->arch.n_max_mmu_pages | 1 |
| CAPPED_DATA | 1 | sptep | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| DATA_SOURCE | 2 | sp | r kvm_mmu_get_child_sp |
| NOSPEC | 0 | vcpu->arch.xen.runstate2_cache.pfn | |
| NOSPEC | 0 | vcpu->arch.xen.runstate_cache.pfn | |
| NOSPEC | 0 | vcpu->arch.xen.runstate_cache.uhva | |
| NOCHECK_CALL | |||
| HOST_DATA | 0 | vcpu->arch.host_debugctl | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14[c] |
| USER_DATA | 0 | vcpu->arch.exception.payload | 0-u64max |
| USER_DATA | 0 | vcpu->arch.mmu->root.pgd | 0 |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_DATA | 2 | sp->gfn | 0-4503599627370495[c] |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.size | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| LOCK2 | 0 | &vcpu->kvm->mmu_lock | |
| HALF_LOCKED2 | 0 | &vcpu->kvm->srcu | |
| HALF_LOCKED2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm)->mmu_lock |
arch/x86/kvm/mmu/mmu.c ept_fetch() -> link_shadow_page()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu->root.hpa | 0-18446744073709551614 |
| PARAM_VALUE | 0 | vcpu->arch.mmu->w | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_pte_list_desc_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_pte_list_desc_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_advance_ns | 0-5000 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode_mask | 131072,393216 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.n_max_mmu_pages | 1-u64max |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->kvm->stat.max_mmu_page_hash_collisions | 1-s32max |
| PARAM_VALUE | 0 | vcpu->last_used_slot->as_id | 0-1 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->base_gfn | 0-18446744073709551614 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->id | 0-32766 |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->run->hyperv.type | 0-3 |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 0 | vcpu->run->mmio.is_write | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->mmio.len | 0-8 |
| PARAM_VALUE | 0 | vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 1 | sptep | 4096-ptr_max |
| PARAM_VALUE | 2 | sp | 4096-ptr_max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 2 | sp | (-1),1-s32max |
| BUF_SIZE | 2 | sp | (-1),1-s32max |
| CAPPED_DATA | 0 | vcpu->arch.mmu | 1 |
| CAPPED_DATA | 0 | vcpu->arch.mmu->w | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->arch.n_max_mmu_pages | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| DATA_SOURCE | 2 | sp | r kvm_mmu_get_child_sp |
| NOSPEC | 0 | vcpu->arch.xen.runstate2_cache.pfn | |
| NOSPEC | 0 | vcpu->arch.xen.runstate_cache.pfn | |
| NOSPEC | 0 | vcpu->arch.xen.runstate_cache.uhva | |
| NOSPEC | 2 | sp->gfn | |
| NOCHECK_CALL | |||
| HOST_DATA | 0 | vcpu->arch.host_debugctl | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14[c] |
| USER_DATA | 0 | vcpu->arch.exception.payload | 0-u64max |
| USER_DATA | 0 | vcpu->arch.mmu->root.pgd | 0 |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_DATA | 2 | sp->gfn | 0-4503599627370495[c] |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.size | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| LOCK2 | 0 | &vcpu->kvm->mmu_lock | |
| HALF_LOCKED2 | 0 | &vcpu->kvm->srcu | |
| HALF_LOCKED2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm)->mmu_lock |
arch/x86/kvm/mmu/mmu.c paging32_fetch() -> link_shadow_page()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu->root.hpa | 0-18446744073709551614 |
| PARAM_VALUE | 0 | vcpu->arch.mmu->w | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_pte_list_desc_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_pte_list_desc_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_advance_ns | 0-5000 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode_mask | 131072,393216 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.n_max_mmu_pages | 1-u64max |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->kvm->stat.max_mmu_page_hash_collisions | 1-s32max |
| PARAM_VALUE | 0 | vcpu->last_used_slot | 0,4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->last_used_slot->as_id | 0-1 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->base_gfn | 0-18446744073709551614 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->id | 0-32766 |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->run->hyperv.type | 0-3 |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 0 | vcpu->run->mmio.is_write | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->mmio.len | 0-8 |
| PARAM_VALUE | 0 | vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 1 | sptep | 4096-ptr_max |
| PARAM_VALUE | 2 | sp | 4096-ptr_max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 2 | sp | (-1),1-s32max |
| BUF_SIZE | 2 | sp | (-1),1-s32max |
| CAPPED_DATA | 0 | vcpu->arch.mmu | 1 |
| CAPPED_DATA | 0 | vcpu->arch.mmu->w | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->arch.n_max_mmu_pages | 1 |
| CAPPED_DATA | 1 | sptep | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| DATA_SOURCE | 2 | sp | r kvm_mmu_get_child_sp |
| NOSPEC | 0 | vcpu->arch.xen.runstate2_cache.pfn | |
| NOSPEC | 0 | vcpu->arch.xen.runstate_cache.pfn | |
| NOSPEC | 0 | vcpu->arch.xen.runstate_cache.uhva | |
| NOCHECK_CALL | |||
| HOST_DATA | 0 | vcpu->arch.host_debugctl | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14[c] |
| USER_DATA | 0 | vcpu->arch.exception.payload | 0-u64max |
| USER_DATA | 0 | vcpu->arch.mmu->root.pgd | 0 |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_DATA | 2 | sp->gfn | 0-4503599627370495[c] |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.size | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| LOCK2 | 0 | &vcpu->kvm->mmu_lock | |
| HALF_LOCKED2 | 0 | &vcpu->kvm->srcu | |
| HALF_LOCKED2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm)->mmu_lock |
arch/x86/kvm/mmu/mmu.c paging32_fetch() -> link_shadow_page()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu->root.hpa | 0-18446744073709551614 |
| PARAM_VALUE | 0 | vcpu->arch.mmu->w | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_pte_list_desc_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_pte_list_desc_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_advance_ns | 0-5000 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode_mask | 131072,393216 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.n_max_mmu_pages | 1-u64max |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->kvm->stat.max_mmu_page_hash_collisions | 1-s32max |
| PARAM_VALUE | 0 | vcpu->last_used_slot->as_id | 0-1 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->base_gfn | 0-18446744073709551614 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->id | 0-32766 |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->run->hyperv.type | 0-3 |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 0 | vcpu->run->mmio.is_write | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->mmio.len | 0-8 |
| PARAM_VALUE | 0 | vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 1 | sptep | 4096-ptr_max |
| PARAM_VALUE | 2 | sp | 4096-ptr_max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 2 | sp | (-1),1-s32max |
| BUF_SIZE | 2 | sp | (-1),1-s32max |
| CAPPED_DATA | 0 | vcpu->arch.mmu | 1 |
| CAPPED_DATA | 0 | vcpu->arch.mmu->w | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->arch.n_max_mmu_pages | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| DATA_SOURCE | 2 | sp | r kvm_mmu_get_child_sp |
| NOSPEC | 0 | vcpu->arch.xen.runstate2_cache.pfn | |
| NOSPEC | 0 | vcpu->arch.xen.runstate_cache.pfn | |
| NOSPEC | 0 | vcpu->arch.xen.runstate_cache.uhva | |
| NOSPEC | 2 | sp->gfn | |
| NOCHECK_CALL | |||
| HOST_DATA | 0 | vcpu->arch.host_debugctl | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14[c] |
| USER_DATA | 0 | vcpu->arch.exception.payload | 0-u64max |
| USER_DATA | 0 | vcpu->arch.mmu->root.pgd | 0 |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_DATA | 2 | sp->gfn | 0-4503599627370495[c] |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.size | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| LOCK2 | 0 | &vcpu->kvm->mmu_lock | |
| HALF_LOCKED2 | 0 | &vcpu->kvm->srcu | |
| HALF_LOCKED2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm)->mmu_lock |
arch/x86/kvm/mmu/mmu.c paging64_fetch() -> link_shadow_page()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu->root.hpa | 0-18446744073709551614 |
| PARAM_VALUE | 0 | vcpu->arch.mmu->w | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_pte_list_desc_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_pte_list_desc_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_advance_ns | 0-5000 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode_mask | 131072,393216 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.n_max_mmu_pages | 1-u64max |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->kvm->stat.max_mmu_page_hash_collisions | 1-s32max |
| PARAM_VALUE | 0 | vcpu->last_used_slot | 0,4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->last_used_slot->as_id | 0-1 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->base_gfn | 0-18446744073709551614 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->id | 0-32766 |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->run->hyperv.type | 0-3 |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 0 | vcpu->run->mmio.is_write | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->mmio.len | 0-8 |
| PARAM_VALUE | 0 | vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 1 | sptep | 4096-ptr_max |
| PARAM_VALUE | 2 | sp | 4096-ptr_max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 2 | sp | (-1),1-s32max |
| BUF_SIZE | 2 | sp | (-1),1-s32max |
| CAPPED_DATA | 0 | vcpu->arch.mmu | 1 |
| CAPPED_DATA | 0 | vcpu->arch.mmu->w | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->arch.n_max_mmu_pages | 1 |
| CAPPED_DATA | 1 | sptep | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| DATA_SOURCE | 2 | sp | r kvm_mmu_get_child_sp |
| NOSPEC | 0 | vcpu->arch.xen.runstate2_cache.pfn | |
| NOSPEC | 0 | vcpu->arch.xen.runstate_cache.pfn | |
| NOSPEC | 0 | vcpu->arch.xen.runstate_cache.uhva | |
| NOCHECK_CALL | |||
| HOST_DATA | 0 | vcpu->arch.host_debugctl | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14[c] |
| USER_DATA | 0 | vcpu->arch.exception.payload | 0-u64max |
| USER_DATA | 0 | vcpu->arch.mmu->root.pgd | 0 |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_DATA | 2 | sp->gfn | 0-4503599627370495[c] |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.size | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| LOCK2 | 0 | &vcpu->kvm->mmu_lock | |
| HALF_LOCKED2 | 0 | &vcpu->kvm->srcu | |
| HALF_LOCKED2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm)->mmu_lock |
arch/x86/kvm/mmu/mmu.c paging64_fetch() -> link_shadow_page()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu->root.hpa | 0-18446744073709551614 |
| PARAM_VALUE | 0 | vcpu->arch.mmu->w | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_external_spt_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_page_header_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_pte_list_desc_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_pte_list_desc_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadow_page_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.capacity | 40,553 |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.nobjs | 1-s32max |
| PARAM_VALUE | 0 | vcpu->arch.mmu_shadowed_info_cache.objects | 1-u64max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.active_mmu_pages.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_advance_ns | 0-5000 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode_mask | 131072,393216 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.n_max_mmu_pages | 1-u64max |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->kvm->stat.max_mmu_page_hash_collisions | 1-s32max |
| PARAM_VALUE | 0 | vcpu->last_used_slot->as_id | 0-1 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->base_gfn | 0-18446744073709551614 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->id | 0-32766 |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->run->hyperv.type | 0-3 |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 0 | vcpu->run->mmio.is_write | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->mmio.len | 0-8 |
| PARAM_VALUE | 0 | vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 1 | sptep | 4096-ptr_max |
| PARAM_VALUE | 2 | sp | 4096-ptr_max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 2 | sp | (-1),1-s32max |
| BUF_SIZE | 2 | sp | (-1),1-s32max |
| CAPPED_DATA | 0 | vcpu->arch.mmu | 1 |
| CAPPED_DATA | 0 | vcpu->arch.mmu->w | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->arch.n_max_mmu_pages | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| DATA_SOURCE | 2 | sp | r kvm_mmu_get_child_sp |
| NOSPEC | 0 | vcpu->arch.xen.runstate2_cache.pfn | |
| NOSPEC | 0 | vcpu->arch.xen.runstate_cache.pfn | |
| NOSPEC | 0 | vcpu->arch.xen.runstate_cache.uhva | |
| NOSPEC | 2 | sp->gfn | |
| NOCHECK_CALL | |||
| HOST_DATA | 0 | vcpu->arch.host_debugctl | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14[c] |
| USER_DATA | 0 | vcpu->arch.exception.payload | 0-u64max |
| USER_DATA | 0 | vcpu->arch.mmu->root.pgd | 0 |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_DATA | 2 | sp->gfn | 0-4503599627370495[c] |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.size | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| LOCK2 | 0 | &vcpu->kvm->mmu_lock | |
| HALF_LOCKED2 | 0 | &vcpu->kvm->srcu | |
| HALF_LOCKED2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm)->mmu_lock |