From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 894A5CD98D6 for ; Fri, 12 Jun 2026 06:59:43 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender:List-Subscribe:List-Help :List-Post:List-Archive:List-Unsubscribe:List-Id:Content-Type:Cc:To:From: Subject:Message-ID:References:Mime-Version:In-Reply-To:Date:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=xaz60O81ceKnaW6fsPnXrD/MZKDxDO1Yi/KW97lEVIQ=; b=djnuGGZ5P3laLuUH8t/KnX9NjE /uQbsoMNzNPXDTH9HPVOeA+Pt5z6DLIpqyUcx0oks7YCc80OmavSrwUB59/Od+FD6w2cf69yA0ay+ UycHTtvu0bAztoPy30EVUgCggxm7JdzO1TzZ047hACT4vYJIR8UlS0yI+xBUwmpPKmwhTKZMPyOrw mDkFha5XTzW9l3gzFR1xRQei4cXZybPObcr3CilZkRzX69l3Cs8JhjUM58XTVtf2mONV4pbOE0Rnl 72ELx3e/WjEaaWpjQ8N9+AZiFYsPlFd5o+PUZVEYKtjwp36Z8Mg0exdTxkw6+stNJByxiMp/AJ/4v RJ5ba+FQ==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.99.1 #2 (Red Hat Linux)) id 1wXvrc-0000000AQyK-25aC; Fri, 12 Jun 2026 06:59:36 +0000 Received: from mail-wm1-x34a.google.com ([2a00:1450:4864:20::34a]) by bombadil.infradead.org with esmtps (Exim 4.99.1 #2 (Red Hat Linux)) id 1wXvrY-0000000AQv5-18BL for linux-arm-kernel@lists.infradead.org; Fri, 12 Jun 2026 06:59:33 +0000 Received: by mail-wm1-x34a.google.com with SMTP id 5b1f17b1804b1-490bae3a39bso5810055e9.1 for ; Thu, 11 Jun 2026 23:59:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20251104; t=1781247570; x=1781852370; darn=lists.infradead.org; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:from:to:cc:subject:date:message-id:reply-to; bh=xaz60O81ceKnaW6fsPnXrD/MZKDxDO1Yi/KW97lEVIQ=; b=ptiRvrHtf782b+VVAuUTRpRF0Txx9651VYY0OAetZ/eQVrn5cu9P30YR1zW3eJ/6Kb Nfko442CJpZ+CfieBg+BknVIMvu9fRROCTglEOTY3J5KwazY+o9ZRyKL4BlQLkIb2xqo qyh7RO84iCKT3pbZoBryxgbo7dbpUixpUjXyUyC4ocfpgSwVh/sj6Hu7bLA6gV9PImm4 u/AKRq1baF6jx5xxlyB9cfXDFvbAFTVwKcZ8mkQiDdz3mKM7ry7jTUoCOBhCMcU0y+Mk U4xeraFTjMqt7vTMXwtYsIRE/160cgYOR6UfS60joAy+d8eJp3n3bMK0orxbnKsGEzUD zMqw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781247570; x=1781852370; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=xaz60O81ceKnaW6fsPnXrD/MZKDxDO1Yi/KW97lEVIQ=; b=jwx7SO2IJZdsH964sIlDua4rxb+PYNMauqe8Q0kGXFG0dRLtil3eQ9XOGnKgU+h7Jw Ia3l8QgTsxnUrmDW0rlPmetFkN1zv/Pfd1UiT7RWdQsTEELIDSBQYEWN6+F9pL/YARly +u0BApZv5Gjz8SOKzHSsLCbpmPx9N3X6TNa7mVo1IZtjui/Tal5i+AlQxNL+WtMA1X93 DmyT5Xuxzx/TSuloLppKCRXymKgKVH9TgtD2F5qOVkLA+OTmnh1TNoW7zblCqb29owAN yj+OztjLzR9YAaz+uaslMHdyHtQN5D0PbuIBISVbtsu1kK8/G3M3iIllTgijJxHzeFW7 0gVQ== X-Forwarded-Encrypted: i=1; AFNElJ/XyLZTPco8cUSBsX3NBIXUxanzFwFuKjR0UqyviQlTyEA+woZtkyI/8mcMt+EtIJZvCbuR6KtAhi5ySh8/TCBn@lists.infradead.org X-Gm-Message-State: AOJu0YxLst8bXgU17EaaVF2sjjGOEx3TwY1e1FKYvENHOc03d+A3i8PZ OGjn33usEPQmU0NkmufhPB52PoyQpYmknBQsxuUiKUmsm+IgilNvyCFkFAo707g/+X8U3QMjq6/ OWg== X-Received: from wmxb3-n2.prod.google.com ([2002:a05:600d:8443:20b0:490:bfa7:ad27]) (user=tabba job=prod-delivery.src-stubby-dispatcher) by 2002:a05:600c:c3cd:20b0:490:d3ef:fa4a with SMTP id 5b1f17b1804b1-490ec4ea4f1mr10709515e9.14.1781247569549; Thu, 11 Jun 2026 23:59:29 -0700 (PDT) Date: Fri, 12 Jun 2026 07:59:17 +0100 In-Reply-To: <20260612065925.755562-1-tabba@google.com> Mime-Version: 1.0 References: <20260612065925.755562-1-tabba@google.com> X-Mailer: git-send-email 2.54.0.1136.gdb2ca164c4-goog Message-ID: <20260612065925.755562-4-tabba@google.com> Subject: [PATCH v1 03/11] KVM: arm64: Use guard()/scoped_guard() in arm64 KVM EL1 code From: tabba@google.com To: Marc Zyngier , Oliver Upton Cc: Fuad Tabba , Will Deacon , Catalin Marinas , Quentin Perret , Vincent Donnefort , Sebastian Ene , Per Larsen , Suzuki K Poulose , Zenghui Yu , Joey Gouly , Steffen Eiden , Mark Rutland , Jonathan Cameron , Hyunwoo Kim , linux-arm-kernel@lists.infradead.org, kvmarm@lists.linux.dev, linux-kernel@vger.kernel.org Content-Type: text/plain; charset="UTF-8" X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.9.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20260611_235932_367546_F417634A X-CRM114-Status: GOOD ( 21.22 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org Convert the manual mutex_lock()/spin_lock() pairs in arch/arm64/kvm/{pkvm,arm,mmu,reset,psci}.c to guard(mutex), guard(spinlock) and scoped_guard(), dropping unlock-only goto labels in favour of direct returns. Centralised cleanup gotos that still serve other resources are preserved. reset.c uses scoped_guard() rather than guard() so the lock covers only the small read/update window inside kvm_reset_vcpu(), leaving the rest of the function outside the critical section. Signed-off-by: Fuad Tabba --- arch/arm64/kvm/arm.c | 14 +++----- arch/arm64/kvm/mmu.c | 80 +++++++++++++++--------------------------- arch/arm64/kvm/pkvm.c | 26 ++++++-------- arch/arm64/kvm/psci.c | 17 ++++----- arch/arm64/kvm/reset.c | 8 ++--- 5 files changed, 53 insertions(+), 92 deletions(-) diff --git a/arch/arm64/kvm/arm.c b/arch/arm64/kvm/arm.c index 9453321ef8c6..c9f36932c980 100644 --- a/arch/arm64/kvm/arm.c +++ b/arch/arm64/kvm/arm.c @@ -793,9 +793,7 @@ int kvm_arch_vcpu_ioctl_get_mpstate(struct kvm_vcpu *vcpu, int kvm_arch_vcpu_ioctl_set_mpstate(struct kvm_vcpu *vcpu, struct kvm_mp_state *mp_state) { - int ret = 0; - - spin_lock(&vcpu->arch.mp_state_lock); + guard(spinlock)(&vcpu->arch.mp_state_lock); switch (mp_state->mp_state) { case KVM_MP_STATE_RUNNABLE: @@ -808,12 +806,10 @@ int kvm_arch_vcpu_ioctl_set_mpstate(struct kvm_vcpu *vcpu, kvm_arm_vcpu_suspend(vcpu); break; default: - ret = -EINVAL; + return -EINVAL; } - spin_unlock(&vcpu->arch.mp_state_lock); - - return ret; + return 0; } /** @@ -1726,15 +1722,13 @@ static int kvm_arch_vcpu_ioctl_vcpu_init(struct kvm_vcpu *vcpu, /* * Handle the "start in power-off" case. */ - spin_lock(&vcpu->arch.mp_state_lock); + guard(spinlock)(&vcpu->arch.mp_state_lock); if (power_off) __kvm_arm_vcpu_power_off(vcpu); else WRITE_ONCE(vcpu->arch.mp_state.mp_state, KVM_MP_STATE_RUNNABLE); - spin_unlock(&vcpu->arch.mp_state_lock); - return 0; } diff --git a/arch/arm64/kvm/mmu.c b/arch/arm64/kvm/mmu.c index 4da9281312eb..d18f4ce7ceae 100644 --- a/arch/arm64/kvm/mmu.c +++ b/arch/arm64/kvm/mmu.c @@ -391,13 +391,13 @@ static void stage2_flush_vm(struct kvm *kvm) */ void __init free_hyp_pgds(void) { - mutex_lock(&kvm_hyp_pgd_mutex); - if (hyp_pgtable) { - kvm_pgtable_hyp_destroy(hyp_pgtable); - kfree(hyp_pgtable); - hyp_pgtable = NULL; - } - mutex_unlock(&kvm_hyp_pgd_mutex); + guard(mutex)(&kvm_hyp_pgd_mutex); + if (!hyp_pgtable) + return; + + kvm_pgtable_hyp_destroy(hyp_pgtable); + kfree(hyp_pgtable); + hyp_pgtable = NULL; } static bool kvm_host_owns_hyp_mappings(void) @@ -424,16 +424,11 @@ static bool kvm_host_owns_hyp_mappings(void) int __create_hyp_mappings(unsigned long start, unsigned long size, unsigned long phys, enum kvm_pgtable_prot prot) { - int err; - if (WARN_ON(!kvm_host_owns_hyp_mappings())) return -EINVAL; - mutex_lock(&kvm_hyp_pgd_mutex); - err = kvm_pgtable_hyp_map(hyp_pgtable, start, size, phys, prot); - mutex_unlock(&kvm_hyp_pgd_mutex); - - return err; + guard(mutex)(&kvm_hyp_pgd_mutex); + return kvm_pgtable_hyp_map(hyp_pgtable, start, size, phys, prot); } static phys_addr_t kvm_kaddr_to_phys(void *kaddr) @@ -481,56 +476,42 @@ static int share_pfn_hyp(u64 pfn) { struct rb_node **node, *parent; struct hyp_shared_pfn *this; - int ret = 0; - mutex_lock(&hyp_shared_pfns_lock); + guard(mutex)(&hyp_shared_pfns_lock); this = find_shared_pfn(pfn, &node, &parent); if (this) { this->count++; - goto unlock; + return 0; } this = kzalloc_obj(*this); - if (!this) { - ret = -ENOMEM; - goto unlock; - } + if (!this) + return -ENOMEM; this->pfn = pfn; this->count = 1; rb_link_node(&this->node, parent, node); rb_insert_color(&this->node, &hyp_shared_pfns); - ret = kvm_call_hyp_nvhe(__pkvm_host_share_hyp, pfn); -unlock: - mutex_unlock(&hyp_shared_pfns_lock); - - return ret; + return kvm_call_hyp_nvhe(__pkvm_host_share_hyp, pfn); } static int unshare_pfn_hyp(u64 pfn) { struct rb_node **node, *parent; struct hyp_shared_pfn *this; - int ret = 0; - mutex_lock(&hyp_shared_pfns_lock); + guard(mutex)(&hyp_shared_pfns_lock); this = find_shared_pfn(pfn, &node, &parent); - if (WARN_ON(!this)) { - ret = -ENOENT; - goto unlock; - } + if (WARN_ON(!this)) + return -ENOENT; this->count--; if (this->count) - goto unlock; + return 0; rb_erase(&this->node, &hyp_shared_pfns); kfree(this); - ret = kvm_call_hyp_nvhe(__pkvm_host_unshare_hyp, pfn); -unlock: - mutex_unlock(&hyp_shared_pfns_lock); - - return ret; + return kvm_call_hyp_nvhe(__pkvm_host_unshare_hyp, pfn); } int kvm_share_hyp(void *from, void *to) @@ -655,7 +636,7 @@ int hyp_alloc_private_va_range(size_t size, unsigned long *haddr) unsigned long base; int ret = 0; - mutex_lock(&kvm_hyp_pgd_mutex); + guard(mutex)(&kvm_hyp_pgd_mutex); /* * This assumes that we have enough space below the idmap @@ -670,8 +651,6 @@ int hyp_alloc_private_va_range(size_t size, unsigned long *haddr) base = io_map_base - size; ret = __hyp_alloc_private_va_range(base); - mutex_unlock(&kvm_hyp_pgd_mutex); - if (!ret) *haddr = base; @@ -714,17 +693,16 @@ int create_hyp_stack(phys_addr_t phys_addr, unsigned long *haddr) size_t size; int ret; - mutex_lock(&kvm_hyp_pgd_mutex); - /* - * Efficient stack verification using the NVHE_STACK_SHIFT bit implies - * an alignment of our allocation on the order of the size. - */ - size = NVHE_STACK_SIZE * 2; - base = ALIGN_DOWN(io_map_base - size, size); + scoped_guard(mutex, &kvm_hyp_pgd_mutex) { + /* + * Efficient stack verification using the NVHE_STACK_SHIFT bit implies + * an alignment of our allocation on the order of the size. + */ + size = NVHE_STACK_SIZE * 2; + base = ALIGN_DOWN(io_map_base - size, size); - ret = __hyp_alloc_private_va_range(base); - - mutex_unlock(&kvm_hyp_pgd_mutex); + ret = __hyp_alloc_private_va_range(base); + } if (ret) { kvm_err("Cannot allocate hyp stack guard page\n"); diff --git a/arch/arm64/kvm/pkvm.c b/arch/arm64/kvm/pkvm.c index 053e4f733e4b..a39111b70f9f 100644 --- a/arch/arm64/kvm/pkvm.c +++ b/arch/arm64/kvm/pkvm.c @@ -190,39 +190,33 @@ bool pkvm_hyp_vm_is_created(struct kvm *kvm) int pkvm_create_hyp_vm(struct kvm *kvm) { - int ret = 0; - /* * Synchronise with kvm_arch_prepare_memory_region(), as we * prevent memslot modifications on a pVM that has been run. */ - mutex_lock(&kvm->slots_lock); - mutex_lock(&kvm->arch.config_lock); - if (!pkvm_hyp_vm_is_created(kvm)) - ret = __pkvm_create_hyp_vm(kvm); - mutex_unlock(&kvm->arch.config_lock); - mutex_unlock(&kvm->slots_lock); + guard(mutex)(&kvm->slots_lock); + guard(mutex)(&kvm->arch.config_lock); - return ret; + if (!pkvm_hyp_vm_is_created(kvm)) + return __pkvm_create_hyp_vm(kvm); + + return 0; } int pkvm_create_hyp_vcpu(struct kvm_vcpu *vcpu) { - int ret = 0; + guard(mutex)(&vcpu->kvm->arch.config_lock); - mutex_lock(&vcpu->kvm->arch.config_lock); if (!vcpu_get_flag(vcpu, VCPU_PKVM_FINALIZED)) - ret = __pkvm_create_hyp_vcpu(vcpu); - mutex_unlock(&vcpu->kvm->arch.config_lock); + return __pkvm_create_hyp_vcpu(vcpu); - return ret; + return 0; } void pkvm_destroy_hyp_vm(struct kvm *kvm) { - mutex_lock(&kvm->arch.config_lock); + guard(mutex)(&kvm->arch.config_lock); __pkvm_destroy_hyp_vm(kvm); - mutex_unlock(&kvm->arch.config_lock); } int pkvm_init_host_vm(struct kvm *kvm, unsigned long type) diff --git a/arch/arm64/kvm/psci.c b/arch/arm64/kvm/psci.c index 3b5dbe9a0a0e..e1389c525e9d 100644 --- a/arch/arm64/kvm/psci.c +++ b/arch/arm64/kvm/psci.c @@ -62,7 +62,6 @@ static unsigned long kvm_psci_vcpu_on(struct kvm_vcpu *source_vcpu) struct vcpu_reset_state *reset_state; struct kvm *kvm = source_vcpu->kvm; struct kvm_vcpu *vcpu = NULL; - int ret = PSCI_RET_SUCCESS; unsigned long cpu_id; cpu_id = smccc_get_arg1(source_vcpu); @@ -78,14 +77,13 @@ static unsigned long kvm_psci_vcpu_on(struct kvm_vcpu *source_vcpu) if (!vcpu) return PSCI_RET_INVALID_PARAMS; - spin_lock(&vcpu->arch.mp_state_lock); + guard(spinlock)(&vcpu->arch.mp_state_lock); + if (!kvm_arm_vcpu_stopped(vcpu)) { if (kvm_psci_version(source_vcpu) != KVM_ARM_PSCI_0_1) - ret = PSCI_RET_ALREADY_ON; + return PSCI_RET_ALREADY_ON; else - ret = PSCI_RET_INVALID_PARAMS; - - goto out_unlock; + return PSCI_RET_INVALID_PARAMS; } reset_state = &vcpu->arch.reset_state; @@ -113,9 +111,7 @@ static unsigned long kvm_psci_vcpu_on(struct kvm_vcpu *source_vcpu) WRITE_ONCE(vcpu->arch.mp_state.mp_state, KVM_MP_STATE_RUNNABLE); kvm_vcpu_wake_up(vcpu); -out_unlock: - spin_unlock(&vcpu->arch.mp_state_lock); - return ret; + return PSCI_RET_SUCCESS; } static unsigned long kvm_psci_vcpu_affinity_info(struct kvm_vcpu *vcpu) @@ -176,9 +172,8 @@ static void kvm_prepare_system_event(struct kvm_vcpu *vcpu, u32 type, u64 flags) * re-initialized. */ kvm_for_each_vcpu(i, tmp, vcpu->kvm) { - spin_lock(&tmp->arch.mp_state_lock); + guard(spinlock)(&tmp->arch.mp_state_lock); WRITE_ONCE(tmp->arch.mp_state.mp_state, KVM_MP_STATE_STOPPED); - spin_unlock(&tmp->arch.mp_state_lock); } kvm_make_all_cpus_request(vcpu->kvm, KVM_REQ_SLEEP); diff --git a/arch/arm64/kvm/reset.c b/arch/arm64/kvm/reset.c index b963fd975aac..60969d90bdd3 100644 --- a/arch/arm64/kvm/reset.c +++ b/arch/arm64/kvm/reset.c @@ -193,10 +193,10 @@ void kvm_reset_vcpu(struct kvm_vcpu *vcpu) bool loaded; u32 pstate; - spin_lock(&vcpu->arch.mp_state_lock); - reset_state = vcpu->arch.reset_state; - vcpu->arch.reset_state.reset = false; - spin_unlock(&vcpu->arch.mp_state_lock); + scoped_guard(spinlock, &vcpu->arch.mp_state_lock) { + reset_state = vcpu->arch.reset_state; + vcpu->arch.reset_state.reset = false; + } preempt_disable(); loaded = (vcpu->cpu != -1); -- 2.54.0.1136.gdb2ca164c4-goog