From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=209.85.221.44 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1792776556; b=3HOE/S3OV2NT+F1fL4FtNuODxiHeGKiwH0QpQ87Q7IgPZJZFl/2ZVMAR4cl5O7mnGWti ZD0UtmC6xyM/SE/xsmh1A9/C81ysvN9aEWBJ0TGaWNp+Vymm618EloL1Y+Bk3GwSVYXH9 PQnUtEdUpvJ76jUykHsuK/VS9/J3CAC6EyZi5hSCPXck8xovjroTRNRAMWmIP/T8n9tnu yEb2NcjSKHL5swkPnsvhJm1texpg1ZkMlHkpoxRn0RKjVMptoT4uTBFdYJxcKnURDVeQM FUFkdFv/XnsZ3PyE6UJi38LnfqKqpM55sOIS5WGcaOqYuVQOl1MbtE+4XqYrQjRMo8w== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1792776556; h=DMARC-Filter:Received:DKIM-Signature:X-Google-DKIM-Signature: X-Forwarded-Encrypted:X-Gm-Message-State:X-Gm-Gg:X-Received:Received: From:To:Cc:Subject:Date:Message-ID:X-Mailer:In-Reply-To:References: MIME-Version:Content-Transfer-Encoding; bh=3Qj0y3/sB7EeSLYwSP8RPCK8AZrmLUoRtMMcxttoCbM=; b=4QCGSLduwip8Bl9WM8Kpfi9uR1IEcBj1yR6AZnlir19xx6PzD1hnXOzamncbKnD3eiLx Jo1Cu16596GneKA6rAoCWqftvwRtzJMygBjf/QBfbGShJEDSG9nPQ961Jc58WTFhC9zh0 utJj0kNj87PitqHB0CRlxNxp1eMZdQwyfMpdSoHPAIrxckeXtf6N3faFQElU4t7ZV1oyC dmMoWte7bpIw0knPu+JxVq3Y1cnRWNerxiP+Nk6bvkphwLWVhLuAmq3ORXL/3A2ScOtXY 6qUHCfYnY0AR/yLwnIe8EW4chzpLLjmJWc9Tt4W9a98HIZpTkF8R01ZoDZwvQ11gDtA== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20251104 header.b=FsXey+P0; arc=none smtp.remote-ip=209.85.221.44 Received: from mail-wr1-f44.google.com (mail-wr1-f44.google.com [209.85.221.44]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 2712D606A31B for ; Fri, 23 Oct 2026 17:29:16 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org 2712D606A31B Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key, unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20251104 header.b=FsXey+P0 Received: by mail-wr1-f44.google.com with SMTP id ffacd0b85a97d-48df4e9d2d4so698186f8f.3 for ; Fri, 23 Oct 2026 10:29:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792776554; x=1793381354; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=3Qj0y3/sB7EeSLYwSP8RPCK8AZrmLUoRtMMcxttoCbM=; b=FsXey+P0eeIEmJhBgBeUCGTebbSsxCz3o6QZLKul+LrAXxI5Iq6haR8I+mfQ26X3rv jdictCITfezDnQnCYZ7j4HTg/tTcyUC/Drgp3vmWKgBrr8QxD8Lc9OWWfgyy8NXh/aVp FU1i0kULfGHjxWSDkzzHhNYPQMA22NfAV96rytMgupGsdGonuZFqafUHqB4ni9qYpDM0 pMnX6nPNZmJtDzCa3r+7pjhGX+9lIH4WS1e9IAJRnvCXCHaSmtntU37q/aLnIzJzsrgt wez8tRl8q/zWBYrqF7uksh+EHPqd6RxIvPagUfBww3wDRIPgVXt5ZOLUSwxJKgSTrUuS E6Aw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792776554; x=1793381354; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=3Qj0y3/sB7EeSLYwSP8RPCK8AZrmLUoRtMMcxttoCbM=; b=VB9F7rT4svNaXPVkkJ6olLjxJIKwhDVonRf/LJ5JqgTkJ6U2OVv+ajqGlueVsQEtX2 vd9DVllVa8HFqL3YymlZWct09tZt8WFaKmcrmgNmuU8aTJkADQ/o0TjRrfe6aRopYU0F 1Vd4usE51n8pljwyJ8wviZW914EDp2iVGMcuZrUTpzZafMlLF8UD4xJOrP3903xf4tld /as77/NwnnEvWX7A9cNAa9FdD5X+R6MTDIXcEStKkcyWKyXdBrnBxw2UzZuDJ2fzJySX v2idpTtiLdExALyLE1OU4hDPF3TS2vlF6QxwuZTbfqgozXAxplMoLji1TE8zhsJrJctY JKvA== X-Forwarded-Encrypted: i=1; AKwUvByFvwgjew/GRW/8tH7i59prVc/ggSOfQUhgaNnA6w4Ot5S5PJMrjsqJdcowL/RHBuywRCOIiOtBNHY=@vger.kernel.org X-Gm-Message-State: AFq9FYKr+t/8/D4Cyfg78xJrAkodVK7k0kd9i5CElOm7YvAqeCu6lE67 RE+Q8YrGORbEjdAaJozul4l8O6lzNnNE+cYpJGktl5/UUIZ41Q42KT9s X-Gm-Gg: AYBFou3SXjla75ZFHJrLZ8u3BIoPlMGG9I5w4YC7KGRx+ykb2fjJVRg0E3waK28mMvr Y6MVtIvXAdtdX3pyfhXkiYzR6JUCy4Yd2hBqxeB8nV+QSOWDuuB7Lk1zIOp4uO3ciK9QUy+5tom W7U4gBBZt/1ZjYGIBisYhD4R4kSXpGxdvh1f9JOlNauO2SSQb+684HJqfaXtFUiHZIG+hCHXuIY mpavMGVq11stB26ylRWVyv2mzI13sjfZ8qxVY7jT6FjaUAsSf8LIIkHSd/fJ9WqNsGH7UsCxrpp Lhe3kyGZmeOvKYVdWifVyD1l6OqeAW93mS/cgPddFFx4i0gQ336oB0fsL9F3dIx3djUCovyg+Kn SE7So7liS14JT32C5Aauk9nFjmIBOasb7BI2xMWIcMA8dnN51ZWq8ncT32D3eVr4EwO/jqkUtf7 RrNt9cW/yNsgVa9Qe7W8hJgKtj0NSr9K3FNqXQ+2yI++cjz4MliHL4aq4bnqud5eKczbu/BAfEE CFXF+ZYDuyJ8dEnGKySUqqvKoni4yUQ6eFjG9NKgYD6ipnoIqMLHzPZL5zMVidOxPZf+drTZ0nj xcxhkiu8wXl74zROB1E3UCLBI7OQI1ivJWJeXmIOe1TVX0RmPo92iIiwNOdhb6un6S9jl8Twu6u PvK9o8v9UkYcMmQ/c X-Received: by 2002:a05:6000:2004:b0:486:f9ea:796f with SMTP id ffacd0b85a97d-48e387d65ddmr4932292f8f.41.1792776554351; Fri, 23 Oct 2026 10:29:14 -0700 (PDT) Received: from dev-dsk-fgriffo-1c-93421965.eu-west-1.amazon.com (54-240-197-234.amazon.com. [54.240.197.234]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-48e3d4144f8sm1120262f8f.41.2026.10.23.10.29.12 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 23 Oct 2026 10:29:13 -0700 (PDT) From: Fred Griffoul To: Ackerley Tng Cc: Alex Williamson , Alexander Graf , Alexander Viro , Alexey Kardashevskiy , Andrew Morton , "Aneesh Kumar K.V" , Ashish Kalra , Baolin Wang , Baolu Lu , Bill Wendling , Borislav Petkov , Catalin Marinas , Christian Brauner , =?utf-8?q?Christian_K=C3=B6nig?= , Connor Williamson , Dave Hansen , Dave Jiang , David Hildenbrand , David Rientjes , David Woodhouse , Erdem Aktas , Frank van der Linden , Gregory Price , "H. Peter Anvin" , Hugh Dickins , Ingo Molnar , Jacob Pan , James Houghton , Jan Kara , Jason Gunthorpe , Jianxiong Gao , Joerg Roedel , Joey Gouly , John Starks , Jonathan Corbet , Justin Stitt , Kevin Tian , Lorenzo Stoakes , Marc Zyngier , Michael Roth , Mike Rapoport , Nathan Chancellor , Nick Desaulniers , Nicolin Chen , Oliver Upton , Paolo Bonzini , Pratyush Yadav , Randy Dunlap , Robin Murphy , Samiullah Khawaja , Sean Christopherson , Shuah Khan , Steffen Eiden , Steven Price , Suzuki K Poulose , Tarun Sahu , Thomas Gleixner , Tom Lendacky , Tycho Andersen , Vishal Annapurve , Vlastimil Babka , Will Deacon , Xu Yilun , Yan Zhao , Zenghui Yu , x86@kernel.org, Shuah Khan , Fuad Tabba , kvm@vger.kernel.org, linux-doc@vger.kernel.org, linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org, linux-mm@kvack.org, llvm@lists.linux.dev Subject: Re: [PATCH RFC v2 34/50] KVM: guest_memfd: Skip checking outstanding references in PFN mode Date: Fri, 23 Oct 2026 17:29:11 +0000 Message-ID: <20261023172911.17557-1-griffoul@gmail.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20261022-gmem-alternative-providers-v2-34-5dd1dc6c660a@google.com> References: <20261022-gmem-alternative-providers-v2-0-5dd1dc6c660a@google.com> <20261022-gmem-alternative-providers-v2-34-5dd1dc6c660a@google.com> X-Mailing-List: linux-doc@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Transfer-Encoding: 8bit > + if (!kvm_gmem_is_pfn_mode(gi) && > + kvm_gmem_has_outstanding_references(inode, start, nr_pages, > err_index)) { In folio mode this check is also what guarantees that a private page belongs to the guest alone. In PFN mode there is nothing like it: if the provider also exposes the frame somewhere else, say a ring shared with a device, the VMM can still make it private. And it is not only this guest that suffers then. Whoever else uses the frame breaks: an RMP fault on SEV-SNP, a poisoned page or a machine check on TDX, a granule protection fault on CCA, or, with SW_PROTECTED, silent access to "private" memory. Only the provider knows about such frames. With an attributes output from get_pfn() (see my reply to 31/50), it could flag them as aliased, and guest_memfd would keep them shared: refuse the conversion, treat a private fault as a hole, and refuse populate. Fred