All of lore.kernel.org
 help / color / mirror / Atom feed
From: Nicolin Chen <nicolinc@nvidia.com>
To: Baolu Lu <baolu.lu@linux.intel.com>
Cc: <joro@8bytes.org>, <kevin.tian@intel.com>, <jgg@nvidia.com>,
	<will@kernel.org>, <robin.murphy@arm.com>,
	<iommu@lists.linux.dev>, <linux-kernel@vger.kernel.org>,
	<xueshuai@linux.alibaba.com>
Subject: Re: [PATCH rc v7 5/6] iommu: Fix ATS invalidation timeouts during __iommu_remove_group_pasid()
Date: Fri, 24 Apr 2026 12:39:41 -0700	[thread overview]
Message-ID: <aevG/Q5dGY8GUgqp@Asurada-Nvidia> (raw)
In-Reply-To: <5170df16-94f0-4d12-803a-a43bc44aed83@linux.intel.com>

On Fri, Apr 24, 2026 at 02:23:17PM +0800, Baolu Lu wrote:
> On 4/19/26 07:41, Nicolin Chen wrote:
> > @@ -3554,7 +3554,8 @@ static void __iommu_remove_group_pasid(struct iommu_group *group,
> >   	struct group_device *device;
> >   	for_each_group_device(group, device) {
> > -		if (device->dev->iommu->max_pasids > 0)
> > +		/* Device might be already detached for a device recovery */
> > +		if (!device->blocked && device->dev->iommu->max_pasids > 0)
> >   			iommu_remove_dev_pasid(device->dev, pasid, domain);
> >   	}
> >   }
> 
> If that is the case, why not add the same logic to the set_group_pasid
> path? For example:
> 
> diff --git a/drivers/iommu/iommu.c b/drivers/iommu/iommu.c
> index 61c12ba78206..42a979ee0ced 100644
> --- a/drivers/iommu/iommu.c
> +++ b/drivers/iommu/iommu.c
> @@ -3532,7 +3532,7 @@ static int __iommu_set_group_pasid(struct iommu_domain
> *domain,
>         int ret;
> 
>         for_each_group_device(group, device) {
> -               if (device->dev->iommu->max_pasids > 0) {
> +               if (!device->blocked && device->dev->iommu->max_pasids > 0)
> {
>                         ret = domain->ops->set_dev_pasid(domain,
> device->dev,
>                                                          pasid, old);

Because the policy is to reject concurrent RID/PASID attachments
on the group if any of its gdevs is resetting.

So callers of __iommu_set_group_pasid() check group->recovery_cnt
and reject with -EBUSY.

__iommu_remove_group_pasid() is exempted, because detach() cannot
fail. And it's okay to bypass a resetting gdev since it's already
detached.

Nicolin

  reply	other threads:[~2026-04-24 19:40 UTC|newest]

Thread overview: 21+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-04-18 23:41 [PATCH rc v7 0/6] iommu: Fix pci_dev_reset_iommu_prepare/done() Nicolin Chen
2026-04-18 23:41 ` [PATCH rc v7 1/6] iommu: Fix kdocs of pci_dev_reset_iommu_done() Nicolin Chen
2026-04-24  5:09   ` Baolu Lu
2026-04-18 23:41 ` [PATCH rc v7 2/6] iommu: Replace per-group resetting_domain with per-gdev blocked flag Nicolin Chen
2026-04-24  5:27   ` Baolu Lu
2026-04-18 23:41 ` [PATCH rc v7 3/6] iommu: Fix pasid attach in pci_dev_reset_iommu_prepare/done() Nicolin Chen
2026-04-24  5:49   ` Baolu Lu
2026-04-24 19:28     ` Nicolin Chen
2026-04-18 23:41 ` [PATCH rc v7 4/6] iommu: Fix nested pci_dev_reset_iommu_prepare/done() Nicolin Chen
2026-04-24  6:12   ` Baolu Lu
2026-04-18 23:41 ` [PATCH rc v7 5/6] iommu: Fix ATS invalidation timeouts during __iommu_remove_group_pasid() Nicolin Chen
2026-04-21  7:15   ` Tian, Kevin
2026-04-21 17:57     ` Nicolin Chen
2026-04-22  2:03       ` Tian, Kevin
2026-04-24  6:23   ` Baolu Lu
2026-04-24 19:39     ` Nicolin Chen [this message]
2026-04-18 23:41 ` [PATCH rc v7 6/6] iommu: Fix UAF in pci_dev_reset_iommu_done() due to concurrent detach Nicolin Chen
2026-04-21  7:41   ` Tian, Kevin
2026-04-21 18:10     ` Nicolin Chen
2026-04-22  1:56       ` Tian, Kevin
2026-04-24  6:44   ` Baolu Lu

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=aevG/Q5dGY8GUgqp@Asurada-Nvidia \
    --to=nicolinc@nvidia.com \
    --cc=baolu.lu@linux.intel.com \
    --cc=iommu@lists.linux.dev \
    --cc=jgg@nvidia.com \
    --cc=joro@8bytes.org \
    --cc=kevin.tian@intel.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=robin.murphy@arm.com \
    --cc=will@kernel.org \
    --cc=xueshuai@linux.alibaba.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.