EPT_VIOLATION_PROT_READ
#define EPT_VIOLATION_PROT_MASK (EPT_VIOLATION_PROT_READ | \
(EPT_VIOLATION_PROT_READ | EPT_VIOLATION_PROT_WRITE | EPT_VIOLATION_PROT_EXEC));