From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pg1-f201.google.com (mail-pg1-f201.google.com [209.85.215.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id AAC33EEB3 for ; Mon, 22 Jun 2026 23:24:19 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.215.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782170660; cv=none; b=B9EYU0RSlPs3rXIW/bkqJ0PUbLMz9LbhzpnqyG6d9ZPFEO4SIFfojhTldy3DZw1bxSTG+F+HG0rduFvkHzDgW5Cjo2yHHZH2r/8wT/cgzb1YHyaX6oZXC5BBsKcMJOBoUOE2IzIHog34Um2SZlMC763tlovhNIhhOfKbhADgAlM= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782170660; c=relaxed/simple; bh=0V5aFlTAP3HDjqJchWWwkrKYsK/J0SVPgaTqiNVCWCI=; h=Date:In-Reply-To:Mime-Version:References:Message-ID:Subject:From: To:Cc:Content-Type; b=ftxBQVhMQWlsdIZOcorJeIQ+HDPOgrlIJ59E1oVzOtN3H7pcoDLmRvkWapUXISgalQBYmUOQtSiMiyksODcnhklMZME/jBpA0EDrvmd35hn+SE+6VkbPy+pU/3rx4NC5wNJ6kPPuNTrv54+YiC4jD7N2amzGjQWEkOcN97yflqE= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com; spf=pass smtp.mailfrom=flex--seanjc.bounces.google.com; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b=nmgvvJbX; arc=none smtp.client-ip=209.85.215.201 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=flex--seanjc.bounces.google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="nmgvvJbX" Received: by mail-pg1-f201.google.com with SMTP id 41be03b00d2f7-c896349fe5cso6767669a12.3 for ; Mon, 22 Jun 2026 16:24:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20251104; t=1782170659; x=1782775459; darn=vger.kernel.org; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:from:to:cc:subject:date:message-id:reply-to; bh=D3f7XLGqPTxRTmDugimLMchWIMvzKC9ZhqGzcD0/AM8=; b=nmgvvJbXNoDB9Xahb5veX4XAT4NphFtJQLgUB4gLboXgDwNZ43Md3jEHJeZjkZJyUX QXETw60MIaZEQ0XA3bbYyKcMa8lYdVAP2z06aMj6t4JxaRcU5hlZ0jo+xGVsOqdm0sTk P9ye8POFytN8tlwwXIv+6hkNXA1EtmQG8uqSX7q1LcKJlq5vf5wk2AyIyBl8OZc2yB2D BaB6zvn6ybypfEbDp3a308QhxIdvj4+76Hm+AksZt759ZYfRZxTYFzax7FpzgBcLPPKu dsuixsSjEN2uxO/xSHZDVBMpRivaGGZeyu3N87ev0D+3dKQqxZp90Ezu0LA6Rg9GQ8cL b7gA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1782170659; x=1782775459; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=D3f7XLGqPTxRTmDugimLMchWIMvzKC9ZhqGzcD0/AM8=; b=BtW+s/6ubVGAn5sDhzMyvjUlr7VoaCCRhEfLHrNtO5bWn+MLRPlBiCyNmS/nHsvi2a lZ52qxrkvDyEZEeJaYGgDTNj87mpGO7XHo1U/+u5Y6fRBK/Wps1Oizouqm941OswRgxI e9d6J8Mw/fHZtjrz6XSyDsSgGJHs4w/rcnDuYod0JsV7dvMvAi6NEhhA2j7lXE1a5oGk h3RYIs4wB0gVnaEjVTDfnueUcu/1FvaTQ4xgaRG9uwdKlr2j1qbETzNWUXNTlfNG4w4P BH0L8B2sfiJwroQm0JuvQeIb5ip2pUx//6q+J2NxreJjvuK03L8hPLP0BIZ6jfvIZBRi ePnA== X-Forwarded-Encrypted: i=1; AFNElJ9nKkBUeq2PROLNXGyRRCtauBz0+HUAIzIdACtIly03Cbotyw/13U6y2MRMw548/BznWbzs5kS23U7Zwi0=@vger.kernel.org X-Gm-Message-State: AOJu0YwuYcrrJtjqSVs/4vEGuKh9yEGr1QfzH6GMM3RZMn46ZjpPyVcL PJ6yvIfvkpmQzYF5jeA6gzvPvWgzQjwWDNhib443n89csR722Q+heiYCKEzZgUboEVrJvL1YjY1 AcLg2cw== X-Received: from pglq30.prod.google.com ([2002:a63:505e:0:b0:c88:a076:b3]) (user=seanjc job=prod-delivery.src-stubby-dispatcher) by 2002:a05:6a20:ce47:b0:3b2:8675:4866 with SMTP id adf61e73a8af0-3bd151a56c4mr594172637.31.1782170658663; Mon, 22 Jun 2026 16:24:18 -0700 (PDT) Date: Mon, 22 Jun 2026 16:24:18 -0700 In-Reply-To: <20260619160645.57f4e325@pumpkin> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Mime-Version: 1.0 References: <20260618185746.2023283-1-seanjc@google.com> <20260619160645.57f4e325@pumpkin> Message-ID: Subject: Re: [PATCH] KVM: x86: Replace BUG_ON() with WARN_ON_ONCE() on "bad" nested GPA translation From: Sean Christopherson To: David Laight Cc: Paolo Bonzini , kvm@vger.kernel.org, linux-kernel@vger.kernel.org Content-Type: text/plain; charset="us-ascii" On Fri, Jun 19, 2026, David Laight wrote: > On Thu, 18 Jun 2026 11:57:45 -0700 > Sean Christopherson wrote: > > > If KVM attempts to translate what it thinks is an L2 GPA with a non-nested > > MMU, simply WARN and return the GPA, i.e. trust the MMU more than the > > caller, as there is zero reason to potentially panic the host kernel just > > because KVM misused an API. > > Except that PANIC_ON_WARN stands a reasonable chance of being set. Not in cloud environments, or in any environment where the guest workload is untrusted. > So it makes little difference. I disagree, vehemently. There's a massive difference between opting in to minimizing risk of data corruption at the cost of availability, and forcing all KVM users to sacrifice availability, especially for no tangible beneft. Paolo and I are fully aligned on this: https://lore.kernel.org/all/CABgObfZJV5hU_7WoPWLRH3-EvKts%2BUBZOwtCXmwVZYJP8dDo2A@mail.gmail.com