From nobody Mon Feb 9 06:24:54 2026 Received: from mail-pl1-f201.google.com (mail-pl1-f201.google.com [209.85.214.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 41A5B44D682 for ; Wed, 21 Jan 2026 22:55:16 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.214.201 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1769036120; cv=none; b=Lj1/manTqgEVr2YWWyidxteeJ5VALAAvkK3nwqMgCX5ffaBu7B8WZ2il8Ib/7uqeO27GVUt+H/2YAn3yTyrkdr9WutLq1Fjg2w+YCyjyfIylKFhpxYV6zsEIyH1kN3hlrp0YbNfJWAxOkPkporMy9gEqyIXagfmhutksJg/sKXI= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1769036120; c=relaxed/simple; bh=rYmfFxJAIso34omZtNLieNENfALkCc2zmC93xUg6tbg=; h=Date:In-Reply-To:Mime-Version:References:Message-ID:Subject:From: To:Cc:Content-Type; b=Bw12oWg76I9URqgg6N/pjlnAxNpveUla4XUxloX3/1ZlD1Hvbi4tEDX+EeNCZKVsklnMuil9zZsIAs82NQZq79O+XFpehFbTYsW1hLXoQQm+cCfnGov/irsO9OniFcfZp8k5Iika3+nXlnMMJyDIyt47+yGFDQpo/ZPN/ZsIq3E= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com; spf=pass smtp.mailfrom=flex--jmattson.bounces.google.com; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b=YM4kIzrz; arc=none smtp.client-ip=209.85.214.201 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=flex--jmattson.bounces.google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="YM4kIzrz" Received: by mail-pl1-f201.google.com with SMTP id d9443c01a7336-2a0a4b748a0so6084495ad.1 for ; Wed, 21 Jan 2026 14:55:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1769036113; x=1769640913; darn=vger.kernel.org; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:from:to:cc:subject:date:message-id:reply-to; bh=JICyYLoyMG4i3hAuwsrXfwlezARecCmtVIZbGsycDJA=; b=YM4kIzrz/CQDC0z+5+Gsyce9xKPiCX6241qpVUMWk2dvwefYz9g3YfdqCNF6tGqwE4 vYVGE9GX5jAtBRz+Twp8ZNEi5q4Yfb5vzwbFAeNtQmJubIO59M224W2dGxmxBR5JWgeS /eKjOU9WOz/Fasb7b0iNl5h6nfIBoWDRkjXIaIlPi/KjiA7z17mUNeYmFuZf9fz5c8wK s+4kzokwk7k5kaQBIw4aGy8uWomdd0oy/9uwgweu3qtJKRkJ610uAbRz8E1aQFOnnedh +b4hs2VfKqlRhKpgF7HWybiXx00NGyB2an/AjoAg7ywRU5U/dU0iBuh5KNjozj7ghwIf 8deQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1769036113; x=1769640913; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=JICyYLoyMG4i3hAuwsrXfwlezARecCmtVIZbGsycDJA=; b=sKmdg9wpGrt66P3YVYv5hu4Xv0g+x6mws/RyHVkyGQwfppOEa+003OwjUBLbEhRjoQ OkiOmp+bKQgAzisVZ8cVNIxYKNTQo+IZjyIVH5OvyHjSkWexkDw7ZkeJdJwJC/srHIDC v3LbTmv3izRaRdu8FWgQnMZuSt/O5XxgveqT7kwoDUedkJFPtTkTCy5EdmyZoCw7DY7W QE1GJp/4zFA41ofDA00RWkw4E9IWRWw5GBHAUmIZb2QG8epEIrtR2K2PL0cf9Wzfd73T GdqcQCJULSwsQcN3CSBnREDNlaOTQQyuXBbDaHUX188HNGWz5+Lc62A4/5ofB0R/mtXW DRWw== X-Forwarded-Encrypted: i=1; AJvYcCXGIZwoUA5SMa+QsRe3PDNHVAm8PCeJvMCE6mk+TmX/kLyJRBcmj/xKsE7fm5yhRrPCSURDXO1J9ZD2Ewc=@vger.kernel.org X-Gm-Message-State: AOJu0YyBCnQJsh+M17v1vQLV39k4sLwC6jsh4WLoiaDi0NDdPLhJagr4 bFT6OuwMajH5zIGQS72JCCb/j+MagiovWVeTJcaJCYgNWLOnxrFqv/XhxqzzEjJESnXOtk+G7ZB S2k+Er7oLUz510A== X-Received: from plat13.prod.google.com ([2002:a17:902:e1cd:b0:29f:13b1:d028]) (user=jmattson job=prod-delivery.src-stubby-dispatcher) by 2002:a17:903:196d:b0:2a7:6cdc:7f14 with SMTP id d9443c01a7336-2a76cdc8521mr50987495ad.60.1769036112692; Wed, 21 Jan 2026 14:55:12 -0800 (PST) Date: Wed, 21 Jan 2026 14:54:04 -0800 In-Reply-To: <20260121225438.3908422-1-jmattson@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Mime-Version: 1.0 References: <20260121225438.3908422-1-jmattson@google.com> X-Mailer: git-send-email 2.52.0.457.g6b5491de43-goog Message-ID: <20260121225438.3908422-7-jmattson@google.com> Subject: [PATCH 6/6] KVM: selftests: x86: Add svm_pmu_hg_test for HG_ONLY bits From: Jim Mattson To: Sean Christopherson , Paolo Bonzini , Thomas Gleixner , Ingo Molnar , Borislav Petkov , Dave Hansen , x86@kernel.org, "H. Peter Anvin" , Peter Zijlstra , Arnaldo Carvalho de Melo , Namhyung Kim , Mark Rutland , Alexander Shishkin , Jiri Olsa , Ian Rogers , Adrian Hunter , James Clark , Shuah Khan , kvm@vger.kernel.org, linux-kernel@vger.kernel.org, linux-perf-users@vger.kernel.org, linux-kselftest@vger.kernel.org Cc: Jim Mattson Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Add a selftest to verify KVM correctly virtualizes the AMD PMU Host-Only (bit 41) and Guest-Only (bit 40) event selector bits across all relevant SVM state transitions. For both Guest-Only and Host-Only counters, verify that: 1. SVME=3D0: counter counts (HG_ONLY bits ignored) 2. Set SVME=3D1: counter behavior changes based on HG_ONLY bit 3. VMRUN to L2: counter behavior switches (guest vs host mode) 4. VMEXIT to L1: counter behavior switches back 5. Clear SVME=3D0: counter counts (HG_ONLY bits ignored again) Also confirm that setting both bits is the same as setting neither bit. Signed-off-by: Jim Mattson --- tools/testing/selftests/kvm/Makefile.kvm | 1 + .../selftests/kvm/x86/svm_pmu_hg_test.c | 297 ++++++++++++++++++ 2 files changed, 298 insertions(+) create mode 100644 tools/testing/selftests/kvm/x86/svm_pmu_hg_test.c diff --git a/tools/testing/selftests/kvm/Makefile.kvm b/tools/testing/selft= ests/kvm/Makefile.kvm index e88699e227dd..06ba85d97618 100644 --- a/tools/testing/selftests/kvm/Makefile.kvm +++ b/tools/testing/selftests/kvm/Makefile.kvm @@ -112,6 +112,7 @@ TEST_GEN_PROGS_x86 +=3D x86/svm_vmcall_test TEST_GEN_PROGS_x86 +=3D x86/svm_int_ctl_test TEST_GEN_PROGS_x86 +=3D x86/svm_nested_shutdown_test TEST_GEN_PROGS_x86 +=3D x86/svm_nested_soft_inject_test +TEST_GEN_PROGS_x86 +=3D x86/svm_pmu_hg_test TEST_GEN_PROGS_x86 +=3D x86/tsc_scaling_sync TEST_GEN_PROGS_x86 +=3D x86/sync_regs_test TEST_GEN_PROGS_x86 +=3D x86/ucna_injection_test diff --git a/tools/testing/selftests/kvm/x86/svm_pmu_hg_test.c b/tools/test= ing/selftests/kvm/x86/svm_pmu_hg_test.c new file mode 100644 index 000000000000..e811b4c1a818 --- /dev/null +++ b/tools/testing/selftests/kvm/x86/svm_pmu_hg_test.c @@ -0,0 +1,297 @@ +// SPDX-License-Identifier: GPL-2.0-only +/* + * KVM nested SVM PMU Host-Only/Guest-Only test + * + * Copyright (C) 2026, Google LLC. + * + * Test that KVM correctly virtualizes the AMD PMU Host-Only (bit 41) and + * Guest-Only (bit 40) event selector bits across all SVM state transition= s. + * + * For Guest-Only counters: + * 1. SVME=3D0: counter counts (HG_ONLY bits ignored) + * 2. Set SVME=3D1: counter stops (in host mode) + * 3. VMRUN to L2: counter counts (in guest mode) + * 4. VMEXIT to L1: counter stops (back to host mode) + * 5. Clear SVME=3D0: counter counts (HG_ONLY bits ignored) + * + * For Host-Only counters: + * 1. SVME=3D0: counter counts (HG_ONLY bits ignored) + * 2. Set SVME=3D1: counter counts (in host mode) + * 3. VMRUN to L2: counter stops (in guest mode) + * 4. VMEXIT to L1: counter counts (back to host mode) + * 5. Clear SVME=3D0: counter counts (HG_ONLY bits ignored) + */ +#include +#include +#include +#include + +#include "test_util.h" +#include "kvm_util.h" +#include "processor.h" +#include "svm_util.h" +#include "pmu.h" + +#define L2_GUEST_STACK_SIZE 256 + +#define MSR_F15H_PERF_CTL0 0xc0010200 +#define MSR_F15H_PERF_CTR0 0xc0010201 + +#define AMD64_EVENTSEL_GUESTONLY BIT_ULL(40) +#define AMD64_EVENTSEL_HOSTONLY BIT_ULL(41) + +#define EVENTSEL_RETIRED_INSNS (ARCH_PERFMON_EVENTSEL_OS | \ + ARCH_PERFMON_EVENTSEL_USR | \ + ARCH_PERFMON_EVENTSEL_ENABLE | \ + AMD_ZEN_INSTRUCTIONS_RETIRED) + +#define LOOP_INSNS 1000 + +static __always_inline void run_instruction_loop(void) +{ + unsigned int i; + + for (i =3D 0; i < LOOP_INSNS; i++) + __asm__ __volatile__("nop"); +} + +static __always_inline uint64_t run_and_measure(void) +{ + uint64_t count_before, count_after; + + count_before =3D rdmsr(MSR_F15H_PERF_CTR0); + run_instruction_loop(); + count_after =3D rdmsr(MSR_F15H_PERF_CTR0); + + return count_after - count_before; +} + +struct hg_test_data { + uint64_t l2_delta; + bool l2_done; +}; + +static struct hg_test_data *hg_data; + +static void l2_guest_code(void) +{ + hg_data->l2_delta =3D run_and_measure(); + hg_data->l2_done =3D true; + vmmcall(); +} + +/* + * Test Guest-Only counter across all relevant state transitions. + */ +static void l1_guest_code_guestonly(struct svm_test_data *svm, + struct hg_test_data *data) +{ + unsigned long l2_guest_stack[L2_GUEST_STACK_SIZE]; + struct vmcb *vmcb =3D svm->vmcb; + uint64_t eventsel, delta; + + hg_data =3D data; + + eventsel =3D EVENTSEL_RETIRED_INSNS | AMD64_EVENTSEL_GUESTONLY; + wrmsr(MSR_F15H_PERF_CTL0, eventsel); + wrmsr(MSR_F15H_PERF_CTR0, 0); + + /* Step 1: SVME=3D0; HG_ONLY ignored */ + wrmsr(MSR_EFER, rdmsr(MSR_EFER) & ~EFER_SVME); + delta =3D run_and_measure(); + GUEST_ASSERT_NE(delta, 0); + + /* Step 2: Set SVME=3D1; Guest-Only counter stops */ + wrmsr(MSR_EFER, rdmsr(MSR_EFER) | EFER_SVME); + delta =3D run_and_measure(); + GUEST_ASSERT_EQ(delta, 0); + + /* Step 3: VMRUN to L2; Guest-Only counter counts */ + generic_svm_setup(svm, l2_guest_code, + &l2_guest_stack[L2_GUEST_STACK_SIZE]); + vmcb->control.intercept &=3D ~(1ULL << INTERCEPT_MSR_PROT); + + run_guest(vmcb, svm->vmcb_gpa); + + GUEST_ASSERT_EQ(vmcb->control.exit_code, SVM_EXIT_VMMCALL); + GUEST_ASSERT(data->l2_done); + GUEST_ASSERT_NE(data->l2_delta, 0); + + /* Step 4: After VMEXIT to L1; Guest-Only counter stops */ + delta =3D run_and_measure(); + GUEST_ASSERT_EQ(delta, 0); + + /* Step 5: Clear SVME; HG_ONLY ignored */ + wrmsr(MSR_EFER, rdmsr(MSR_EFER) & ~EFER_SVME); + delta =3D run_and_measure(); + GUEST_ASSERT_NE(delta, 0); + + GUEST_DONE(); +} + +/* + * Test Host-Only counter across all relevant state transitions. + */ +static void l1_guest_code_hostonly(struct svm_test_data *svm, + struct hg_test_data *data) +{ + unsigned long l2_guest_stack[L2_GUEST_STACK_SIZE]; + struct vmcb *vmcb =3D svm->vmcb; + uint64_t eventsel, delta; + + hg_data =3D data; + + eventsel =3D EVENTSEL_RETIRED_INSNS | AMD64_EVENTSEL_HOSTONLY; + wrmsr(MSR_F15H_PERF_CTL0, eventsel); + wrmsr(MSR_F15H_PERF_CTR0, 0); + + + /* Step 1: SVME=3D0; HG_ONLY ignored */ + wrmsr(MSR_EFER, rdmsr(MSR_EFER) & ~EFER_SVME); + delta =3D run_and_measure(); + GUEST_ASSERT_NE(delta, 0); + + /* Step 2: Set SVME=3D1; Host-Only counter still counts */ + wrmsr(MSR_EFER, rdmsr(MSR_EFER) | EFER_SVME); + delta =3D run_and_measure(); + GUEST_ASSERT_NE(delta, 0); + + /* Step 3: VMRUN to L2; Host-Only counter stops */ + generic_svm_setup(svm, l2_guest_code, + &l2_guest_stack[L2_GUEST_STACK_SIZE]); + vmcb->control.intercept &=3D ~(1ULL << INTERCEPT_MSR_PROT); + + run_guest(vmcb, svm->vmcb_gpa); + + GUEST_ASSERT_EQ(vmcb->control.exit_code, SVM_EXIT_VMMCALL); + GUEST_ASSERT(data->l2_done); + GUEST_ASSERT_EQ(data->l2_delta, 0); + + /* Step 4: After VMEXIT to L1; Host-Only counter counts */ + delta =3D run_and_measure(); + GUEST_ASSERT_NE(delta, 0); + + /* Step 5: Clear SVME; HG_ONLY ignored */ + wrmsr(MSR_EFER, rdmsr(MSR_EFER) & ~EFER_SVME); + delta =3D run_and_measure(); + GUEST_ASSERT_NE(delta, 0); + + GUEST_DONE(); +} + +/* + * Test that both bits set is the same as neither bit set (always counts). + */ +static void l1_guest_code_both_bits(struct svm_test_data *svm, + struct hg_test_data *data) +{ + unsigned long l2_guest_stack[L2_GUEST_STACK_SIZE]; + struct vmcb *vmcb =3D svm->vmcb; + uint64_t eventsel, delta; + + hg_data =3D data; + + eventsel =3D EVENTSEL_RETIRED_INSNS | + AMD64_EVENTSEL_HOSTONLY | AMD64_EVENTSEL_GUESTONLY; + wrmsr(MSR_F15H_PERF_CTL0, eventsel); + wrmsr(MSR_F15H_PERF_CTR0, 0); + + /* Step 1: SVME=3D0 */ + wrmsr(MSR_EFER, rdmsr(MSR_EFER) & ~EFER_SVME); + delta =3D run_and_measure(); + GUEST_ASSERT_NE(delta, 0); + + /* Step 2: Set SVME=3D1 */ + wrmsr(MSR_EFER, rdmsr(MSR_EFER) | EFER_SVME); + delta =3D run_and_measure(); + GUEST_ASSERT_NE(delta, 0); + + /* Step 3: VMRUN to L2 */ + generic_svm_setup(svm, l2_guest_code, + &l2_guest_stack[L2_GUEST_STACK_SIZE]); + vmcb->control.intercept &=3D ~(1ULL << INTERCEPT_MSR_PROT); + + run_guest(vmcb, svm->vmcb_gpa); + + GUEST_ASSERT_EQ(vmcb->control.exit_code, SVM_EXIT_VMMCALL); + GUEST_ASSERT(data->l2_done); + GUEST_ASSERT_NE(data->l2_delta, 0); + + /* Step 4: After VMEXIT to L1 */ + delta =3D run_and_measure(); + GUEST_ASSERT_NE(delta, 0); + + /* Step 5: Clear SVME */ + wrmsr(MSR_EFER, rdmsr(MSR_EFER) & ~EFER_SVME); + delta =3D run_and_measure(); + GUEST_ASSERT_NE(delta, 0); + + GUEST_DONE(); +} + +static void l1_guest_code(struct svm_test_data *svm, struct hg_test_data *= data, + int test_num) +{ + switch (test_num) { + case 0: + l1_guest_code_guestonly(svm, data); + break; + case 1: + l1_guest_code_hostonly(svm, data); + break; + case 2: + l1_guest_code_both_bits(svm, data); + break; + } +} + +static void run_test(int test_number, const char *test_name) +{ + struct hg_test_data *data_hva; + vm_vaddr_t svm_gva, data_gva; + struct kvm_vcpu *vcpu; + struct kvm_vm *vm; + struct ucall uc; + + pr_info("Testing: %s\n", test_name); + + vm =3D vm_create_with_one_vcpu(&vcpu, l1_guest_code); + + vcpu_alloc_svm(vm, &svm_gva); + + data_gva =3D vm_vaddr_alloc_page(vm); + data_hva =3D addr_gva2hva(vm, data_gva); + memset(data_hva, 0, sizeof(*data_hva)); + + vcpu_args_set(vcpu, 3, svm_gva, data_gva, test_number); + + for (;;) { + vcpu_run(vcpu); + TEST_ASSERT_KVM_EXIT_REASON(vcpu, KVM_EXIT_IO); + + switch (get_ucall(vcpu, &uc)) { + case UCALL_ABORT: + REPORT_GUEST_ASSERT(uc); + /* NOT REACHED */ + case UCALL_DONE: + pr_info(" PASSED\n"); + kvm_vm_free(vm); + return; + default: + TEST_FAIL("Unknown ucall %lu", uc.cmd); + } + } +} + +int main(int argc, char *argv[]) +{ + TEST_REQUIRE(kvm_cpu_has(X86_FEATURE_SVM)); + TEST_REQUIRE(kvm_is_pmu_enabled()); + TEST_REQUIRE(get_kvm_amd_param_bool("enable_mediated_pmu")); + + run_test(0, "Guest-Only counter across all transitions"); + run_test(1, "Host-Only counter across all transitions"); + run_test(2, "Both HG_ONLY bits set (always count)"); + + return 0; +} --=20 2.52.0.457.g6b5491de43-goog