From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pg1-f202.google.com (mail-pg1-f202.google.com [209.85.215.202]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 1FBBC2F5491 for ; Mon, 6 Jul 2026 18:09:18 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.215.202 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783361360; cv=none; b=pub9FQTejjF5iX6tX3vJ88vKPnRhc/SiEiVzCoBQU/pjH7I0RX7820yDrYu7E8SN5aq6EhvXw68Kh4UcIDFJJ+7+AKNaUPkCWbrhZQZQ0OXc40BMkrzZCx1jfNKnPWhnAmKRtl7BAcDguHqAtvEVcB+T8AIvehnPQJX+nm+RfD4= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783361360; c=relaxed/simple; bh=6dW+JAuxB4Bg0lJ9WN8fFkd4N5NZoe/+1w+Q139I7zY=; h=Date:In-Reply-To:Mime-Version:References:Message-ID:Subject:From: To:Cc:Content-Type; b=qsu52xV+sFE+qQsxij5tkwsZ92tYIcAZmoqlBMJN6cLSkgnw80eHt/KAy3lm+anmppQlmQcEk5QPiG4VqElIU0e77Xfkw0Hy0b8P2tKT0rQEX8ZgAU2HMIxNr0oOuEtqXUfM7yAEJIxy6eCpj49ilw9iGpnIQgN2C+Y+cZfEHQg= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com; spf=pass smtp.mailfrom=flex--seanjc.bounces.google.com; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b=jEns6GX7; arc=none smtp.client-ip=209.85.215.202 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=flex--seanjc.bounces.google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="jEns6GX7" Received: by mail-pg1-f202.google.com with SMTP id 41be03b00d2f7-c889d1eedcdso5286941a12.1 for ; Mon, 06 Jul 2026 11:09:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20251104; t=1783361357; x=1783966157; darn=vger.kernel.org; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:from:to:cc:subject:date:message-id:reply-to; bh=24Bm1f0CNkzkBDhc/3jVoVdYR2LedLwQS2n18W/er8A=; b=jEns6GX7g5F6PXLGe5c+ktjH/iti5wwIu1NoFWOP3ywdcq7aOs1Zt78m1bqikzft/A FQJjrmvTIWb04jAjouA/s6++yUXnTDXFhjOHFhKB47FOFbEvRuHRBCbVZ4TWCAiTJwUh yX1c9s2/f0cEPs85jDjImHrh0iirG/FbbJZEzmbRaW6KVdKCeYnULKelOc4c7v+h1Z+b +2KXYYlML/63cKEv/eHNrvuvDhAgea2Tt6zg1gYUQ2+B8/ja7pk8L85X3oqfZ1IFAHqa 0XB2llfleArthD8wRLR8+LHJnLP7ZOhBT2hUX3gt0BUFn6X10+KKmqa/CEbBNaaAZ/YC EhPQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783361357; x=1783966157; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=24Bm1f0CNkzkBDhc/3jVoVdYR2LedLwQS2n18W/er8A=; b=UShg5B2Gbb3sxhZlevsgHp1ARX6o2JgBYK3dXFjjmkCJMEdpBSC1vavLyau2SyM7MX hLeKt9vg77zXSDOhIYLtPW75LX6slMy4LlKuLXmFbYfc5uRp65Xmdn47S56nQoiDRD5N OZ/SFsVlRM61XqYssa1RcZrcLXjZO9uVYCU42THlyE+VoyTq4B4baS7pS6JoZErTwWgY vz9xjfdnAoopkQEAKjvHoyyBVZm0z5voV4hVEdYbWlupvV/OHE7w9BKuvwZq5LX0nbvd 3JKnnwOF0cOkTosQwD0BuKstxI2jDIcthkf+o7ubOx06eNSncthGpeEW3SSaELquedzE 4DyQ== X-Forwarded-Encrypted: i=1; AHgh+RqzHNLrNVBmiGdMOEKE/St9cnx2E/FZmRbclNUFRNM/FfAC6gpDH8ur3ZZLI8i5xSYQCwNpDe6aypBWITo=@vger.kernel.org X-Gm-Message-State: AOJu0YyV25er8VC1jAwrDQitSm6SJHjpBD/tXZbgHWXJY7yfNwO3MyEs dmAWMOS1Ycbohv6r2kyKdUHTUGit4a0gdmHA1Fui+egg/TubPNufKLTMmq7tnQu2Ygjnlwj9yL0 hA4Igbg== X-Received: from pgbz68.prod.google.com ([2002:a63:6547:0:b0:c96:8ff3:53b0]) (user=seanjc job=prod-delivery.src-stubby-dispatcher) by 2002:a05:6a21:e8b:b0:3bf:6c05:ab with SMTP id adf61e73a8af0-3c08efea06dmr2045616637.58.1783361357431; Mon, 06 Jul 2026 11:09:17 -0700 (PDT) Date: Mon, 6 Jul 2026 11:09:16 -0700 In-Reply-To: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Mime-Version: 1.0 References: <20260602-sev_snp_fixes-v3-0-24bfd3ae047c@meta.com> <20260602-sev_snp_fixes-v3-3-24bfd3ae047c@meta.com> Message-ID: Subject: Re: [PATCH v3 3/4] crypto: ccp: Fix possible deadlock in SEV init failure path From: Sean Christopherson To: Herbert Xu Cc: Atish Patra , Paolo Bonzini , Borislav Petkov , Dave Hansen , x86@kernel.org, "H. Peter Anvin" , Tom Lendacky , Peter Gonda , Brijesh Singh , Youngjae Lee , Ashish Kalra , Michael Roth , John Allen , clm@meta.com, kvm@vger.kernel.org, linux-kernel@vger.kernel.org, linux-crypto@vger.kernel.org, stable@vger.kernel.org, Atish Patra Content-Type: text/plain; charset="us-ascii" On Fri, Jul 03, 2026, Herbert Xu wrote: > On Tue, Jun 02, 2026 at 03:36:34PM -0700, Atish Patra wrote: > > From: Atish Patra > > > > __sev_platform_init_handle_init_ex_path() calls > > rmp_mark_pages_firmware() with locked=false while the parent > > function of init_ex_path already acquired the sev_cmd_mutex. > > In the case of an RMPUPDATE failure for any page after the first, the cleanup > > path would invoke reclaim pages which would result in a deadlock in > > sev_do_cmd. > > > > Pass locked=true to honor the lock status of the parent function. > > > > Fixes: 7364a6fbca45 ("crypto: ccp: Handle non-volatile INIT_EX data when SNP is enabled") > > > > Reported-by: Chris Mason > > Assisted-by: Claude:claude-opus-4-6 > > Fixes: 7364a6fbca45 ("crypto: ccp: Handle non-volatile INIT_EX data when SNP is enabled") > > Reviewed-by: Tom Lendacky > > Signed-off-by: Atish Patra > > --- > > drivers/crypto/ccp/sev-dev.c | 2 +- > > 1 file changed, 1 insertion(+), 1 deletion(-) > > Acked-by: Herbert Xu Want to take patches 3 and 4 through your tree? I'll grab 1 and 2; there's no dependency between the KVM changes and the crypto changes.