From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from out-188.mta0.migadu.com (out-188.mta0.migadu.com [91.218.175.188]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 172E3126BF1 for ; Sat, 28 Mar 2026 03:48:21 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=91.218.175.188 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1774669703; cv=none; b=GQAOON6xjy2capK9AcR3DJCrtKHeogkNONCGDJEXdaJn5PuXWF0P84KxilY+hsdZ4VH0LLZXOlLguBEQHjb/D65hrJs5r4zRrxF5b0Ip5Q+QVKCa08J02YmGM/loDV0uvA7VmeoBKgcwBsCd1daXQrax+RhVf2pBEnYwEcDOLhY= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1774669703; c=relaxed/simple; bh=1e6hkHHN0BjGrjahtOEsV2MFO3UaUsGoFL9zfTn53ok=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=G6HUELkLxCAjlLyRgb1DlfvCfjBu+T5F/O0OITC11E60XFD5AKNE3HzEehVriIwBrrUPPqb6PC3pG08KgaNGlMThW02UhGUjgTuNUCasAnfHciWDtxl3ACDgnt4B6xb8vY42Ca471VWJ5Di6P4ZpbcgPZypwC3//u4XNAz16pqA= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=linux.dev; spf=pass smtp.mailfrom=linux.dev; dkim=pass (1024-bit key) header.d=linux.dev header.i=@linux.dev header.b=BNNaJrMC; arc=none smtp.client-ip=91.218.175.188 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=linux.dev Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=linux.dev Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linux.dev header.i=@linux.dev header.b="BNNaJrMC" Message-ID: <235a2392-612e-47e1-8107-49d475ab4e92@linux.dev> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linux.dev; s=key1; t=1774669700; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=vrJhHhFJ5FK3ig2aVneYq1I5tqitnpCUDimyFvpsvV4=; b=BNNaJrMCBJNcKgIXlhtHew1y5+Q9YMCbDUgxyk1z53FPAqpeC54lMEKy5AD3bAQAKhVUQT 0Bkn+DFQdmNficsuxQQml5w13KuvouH8O2XY1PNMyvgs1cZx5VZsp2P+MOQz36Mf3t7eMg OddMsJMkbkwkDl2TSSGG4+2vykDybjA= Date: Fri, 27 Mar 2026 20:48:15 -0700 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Subject: Re: [PATCH] RISC-V: restore U-mode counter access (scounteren) To: Manfred Schlaegl , Andrew Jones Cc: Paul Walmsley , Palmer Dabbelt , Albert Ou , Alexandre Ghiti , Atish Patra , Andrew Jones , Anup Patel , linux-riscv@lists.infradead.org, linux-kernel@vger.kernel.org References: <20260326111713.2282289-1-manfred.schlaegl@gmx.at> <502b6589-6430-458d-af58-6404b06816a9@gmx.at> Content-Language: en-US X-Report-Abuse: Please report any abuse attempt to abuse@migadu.com and include these headers. From: Atish Patra In-Reply-To: <502b6589-6430-458d-af58-6404b06816a9@gmx.at> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Migadu-Flow: FLOW_OUT On 3/27/26 7:21 AM, Manfred Schlaegl wrote: > > > On 3/26/26 23:27, Andrew Jones wrote: >> On Thu, Mar 26, 2026 at 12:17:13PM +0100, Manfred SCHLAEGL wrote: >>> In commit 5bc409786752 ("RISC-V: KVM: Remove scounteren initialization") >>> the initialization of scounteren was moved from the hypervisor (KVM) to >>> the supervisor -- a well-argued change. However, the same change also >>> restricted access to performance counters without comment: previously, >>> scounteren was set to 0x7 (0b111), allowing U-mode (userspace) access >>> to instret (IR), cycle (CY), and time (TM). After the change, >>> scounteren is set to 0x2 (0b010), which allows access only to time (TM) >>> and prohibits access to instret (IR) and cycle (CY). This breaks user- >>> space programs that directly use these performance counters. >>> >>> This change restores the prior behavior: scounteren is set to 0x7, >>> which re-enables U-mode (userspace) access to instret (IR), cycle (CY), >>> and time (TM). >>> This is not an accepted behavior from the user space due to security concerns and misleading data. This has been discussed many times in the past and agreed upon behavior. Other architecture also doesn't allow direct access to CY or IR directly. RISC-V is no different. TLDR; If you need it for debugging purpose, you should opt in for legacy usage sysctl parameter. If your user space library is affected, it should be fixed. here are some references: Here was the previous discussion around this[1]. Most of the legacy user applications using rdcycle should use rdtime instead as they just want to record the time elapsed. Allowing rdcycle/rdinstret to be read from user space can lead to very deterministic attacks[2]. Any user application that really requires to read rdcycle directly can use this new perf interface to do that without any latency. [1] https://groups.google.com/a/groups.riscv.org/g/sw-dev/c/REWcwYnzsKE?pli=1 [2] https://www.youtube.com/watch?v=3-c4C_L2PRQ&ab_channel=IEEESymposiumonSecurityandPrivacy [3] https://lore.kernel.org/lkml/Y7wLa7I2hlz3rKw%2F@hirez.programming.kicks-ass.net/T/ [4] https://lore.kernel.org/linux-riscv/20260131112440.2915-1-cp0613@linux.alibaba.com/ >>> Fixes: 5bc409786752 ("RISC-V: KVM: Remove scounteren initialization") >>> Signed-off-by: Manfred SCHLAEGL >>> --- >>> arch/riscv/kernel/head.S | 8 ++++---- >>> 1 file changed, 4 insertions(+), 4 deletions(-) >>> >>> diff --git a/arch/riscv/kernel/head.S b/arch/riscv/kernel/head.S >>> index 9c99c5ad6fe8..5ad5e12a8299 100644 >>> --- a/arch/riscv/kernel/head.S >>> +++ b/arch/riscv/kernel/head.S >>> @@ -133,8 +133,8 @@ secondary_start_sbi: >>> csrw CSR_IP, zero >>> >>> #ifndef CONFIG_RISCV_M_MODE >>> - /* Enable time CSR */ >>> - li t0, 0x2 >>> + /* Enable CY, TM, and IR counters in U mode */ >>> + li t0, 0x7 >>> csrw CSR_SCOUNTEREN, t0 >>> #endif >>> >>> @@ -247,8 +247,8 @@ SYM_CODE_START(_start_kernel) >>> */ >>> csrr a0, CSR_MHARTID >>> #else >>> - /* Enable time CSR */ >>> - li t0, 0x2 >>> + /* Enable CY, TM, and IR counters in U mode */ >>> + li t0, 0x7 >>> csrw CSR_SCOUNTEREN, t0 >>> #endif /* CONFIG_RISCV_M_MODE */ >>> >>> -- >>> 2.47.3 >>> >> >> 5bc409786752 should have explained that change by referencing the >> same links as commit cc4c07c89aad ("drivers: perf: Implement perf >> event mmap support in the SBI backend") does. > > Ahhh, I see :-) > Thanks for the clarification! > >> >> Thanks, >> drew > > Best regards, > Manfred > > > _______________________________________________ > linux-riscv mailing list > linux-riscv@lists.infradead.org > http://lists.infradead.org/mailman/listinfo/linux-riscv