KVM: arm64: Contextualise the handling of PMCR_EL0.P writes
authorMarc Zyngier <maz@kernel.org>
Mon, 17 Feb 2025 10:24:43 +0000 (10:24 +0000)
committerMarc Zyngier <maz@kernel.org>
Fri, 11 Apr 2025 11:59:10 +0000 (12:59 +0100)
Contrary to what the comment says in kvm_pmu_handle_pmcr(),
writing PMCR_EL0.P==1 has the following effects:

<quote>
The event counters affected by this field are:
  * All event counters in the first range.
  * If any of the following are true, all event counters in the second
    range:
    - EL2 is disabled or not implemented in the current Security state.
    - The PE is executing at EL2 or EL3.
</quote>

where the "first range" represent the counters in the [0..HPMN-1]
range, and the "second range" the counters in the [HPMN..MAX] range.

It so appears that writing P from EL2 should nuke all counters,
and not just the "guest" view. Just do that, and nuke the misleading
comment.

Reported-by: Joey Gouly <joey.gouly@arm.com>
Reviewed-by: Oliver Upton <oliver.upton@linux.dev>
Signed-off-by: Marc Zyngier <maz@kernel.org>
arch/arm64/kvm/pmu-emul.c

index 2df54508f5aee751affd7df9f88491bcaf0f9b6e..2336d9c8bd5e7d1c240fb962154ed39d6005f446 100644 (file)
@@ -608,14 +608,12 @@ void kvm_pmu_handle_pmcr(struct kvm_vcpu *vcpu, u64 val)
                kvm_pmu_set_counter_value(vcpu, ARMV8_PMU_CYCLE_IDX, 0);
 
        if (val & ARMV8_PMU_PMCR_P) {
-               /*
-                * Unlike other PMU sysregs, the controls in PMCR_EL0 always apply
-                * to the 'guest' range of counters and never the 'hyp' range.
-                */
                unsigned long mask = kvm_pmu_implemented_counter_mask(vcpu) &
-                                    ~kvm_pmu_hyp_counter_mask(vcpu) &
                                     ~BIT(ARMV8_PMU_CYCLE_IDX);
 
+               if (!vcpu_is_el2(vcpu))
+                       mask &= ~kvm_pmu_hyp_counter_mask(vcpu);
+
                for_each_set_bit(i, &mask, 32)
                        kvm_pmu_set_pmc_value(kvm_vcpu_idx_to_pmc(vcpu, i), 0, true);
        }