From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-wr1-f47.google.com (mail-wr1-f47.google.com [209.85.221.47]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 44B67402BBA for ; Thu, 9 Jul 2026 09:55:44 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.221.47 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783590949; cv=none; b=d0P6D1KIicJAjQbuHgtV0TDKkYtZu+PZRM+wuwBJi+kfnj+vohVRmPE/+j4LQ87IeRwCYIBWaOpUot+QODiA+v5NzhNCLQpRy2q2GGwgaW/wd5ojEWTJxpXJW86eW9nkfs4UjGnfmz/idOB/ISW1Cz8H8Opks5UBKXZBAgRxiMU= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783590949; c=relaxed/simple; bh=6UDoNf30ivPVwjp0u1PGY2LvQDt84+EYUGg+xVi35E4=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=NtkjF4Vqay98/+36/cBMLfVzg2gbCWUq9lW4Xz9bGoPEF7GfTs9WDLQXWX6w7F3WMqYx/w0ZP0JViwvL6YRN0DmT3gMqifYff5rE0x9Ye21FKSTWQaM3nkHnXpsSKLn7R/K4Z+AxRDUyfL1Gk99SOIurqiz9IIlycCA1su4+99w= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=resnulli.us; spf=none smtp.mailfrom=resnulli.us; dkim=pass (2048-bit key) header.d=resnulli-us.20251104.gappssmtp.com header.i=@resnulli-us.20251104.gappssmtp.com header.b=wommJE/9; arc=none smtp.client-ip=209.85.221.47 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=resnulli.us Authentication-Results: smtp.subspace.kernel.org; spf=none smtp.mailfrom=resnulli.us Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=resnulli-us.20251104.gappssmtp.com header.i=@resnulli-us.20251104.gappssmtp.com header.b="wommJE/9" Received: by mail-wr1-f47.google.com with SMTP id ffacd0b85a97d-47db714766aso382684f8f.0 for ; Thu, 09 Jul 2026 02:55:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=resnulli-us.20251104.gappssmtp.com; s=20251104; t=1783590942; x=1784195742; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=QwcmY/pDkmpKC91eDSrYfQSFLQBSA53bn2owxtB0gXE=; b=wommJE/99uEIJY6qMxNHEh8mN8dW8fisktRD8szftZ8H1ARDfcAkU/qmYfkC9jpGmb vlpw+a5Kuf5pQfQsqu0GrppJOeFc1vZoIbwvsaBJn17GjyhsViZNpGVK3US8yVaGYVoT YNooyPbnwlSDTg6QfpAX7ICQQ3k+PT1MwitkDE0Omf3FC9gTRtk8CFEyF3quz4YiTmuw UzZABUe5z30UUvnNt7OuRpNUpH1wfH3L54ikP9re+StTH+M1H1TCaAjNHNJtqaERwdhg Txidb0n2EjqRhlwe1O5sXy8qCY+5hJkY4sqsE96Qj/6Xp1FyKdtGmtVOZdprBn7WTXa/ AR4g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783590942; x=1784195742; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=QwcmY/pDkmpKC91eDSrYfQSFLQBSA53bn2owxtB0gXE=; b=CNhtdcW/cUlzKyeF3FHOHlcT7Kj8/jlz74g/GLKs4tRdQ7K+pIObU5BvzBBuFH+ZGm CLzQfwmoqeJO9JuMzJ4YJP3MXpYDGTbdgHJD/Ytr2rdRqz5TP8W8R7/Y0PZrC4OdUBLH 1l+Z0QbNbdstoMBeIFCoygM1YODDRPhk0sNudlIjOwzyDTgOWNTmHrGwscG6C7Knz4y3 /QWI2BDCmhvxQgRiGpGNaQdxKlRYsg4GwxFe/8T28TUEY8NltAUuUGB/mqMA3GImJDRy U586G07lveN9IdSTRSUMhlR03B7LbVWlYVOnRbN+DEoTvRyjh4TMfeBjaNpo6VYCaF+3 BPdw== X-Forwarded-Encrypted: i=1; AHgh+RoQ9MyaTRwQ++xa56KAtyAEsWtH6i27rVUCeHBeTvw3X89TUPaPqlhv0AgpKmasFnwpqgPP/DgAKklp@vger.kernel.org X-Gm-Message-State: AOJu0YxEkKSY32EkbV2OJTmcvHeyUh81LxCvBX1lsmsznO5amxQJwGah Aa+p6F3EozKSvl+X+WL/mO6nLquo3wotE30s62/XL7wUNwtKrMzw2JEsLcnhm45cVYI= X-Gm-Gg: AfdE7ck2fUUvqiqX0mPjz+mTxT/bZGlS4f8i2zG+29yx146G6xmE60/BM0pwkY+ICBR luo8tjWYVDVesnOnQCFCatoEDwgbyMDbqesX9tMRMsufIPkj5Au3dnrFm63XafUN70KOmBi4rIM TH7BsGDWxF3HNdiuo1lTsWVMZO0lCfvobmkQtR6aMOcXXQ+GbR/sArT7jfxVlUTQoTaU6DJ9IED lAw+/b7KE4WHuxP14GKqTRz7mnDxAT9SHpjZPluPpTpLUlLMR5JPtN/jU6u1zxfuiOUNspGg8eH 735vK5AObPr7e05znT1ADeItSbRgznxAwSmeHRT2UEXaNg75V1JmxDHGEfFrfq4qsNvq7vKumej W23zqs1pwxdVsWbQ8/+bn5j21GCDaIcHZ99489ixgYAwKBOR4ShRwaNMPoLEgiExPWGY3jmyClx QXszCobzXBxrIIvmLeiUO2Wg== X-Received: by 2002:a05:6000:420f:b0:475:f0c2:75b3 with SMTP id ffacd0b85a97d-47df75656eemr1945365f8f.30.1783590942567; Thu, 09 Jul 2026 02:55:42 -0700 (PDT) Received: from localhost ([140.209.217.211]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-47aa039af67sm56791163f8f.17.2026.07.09.02.55.41 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 09 Jul 2026 02:55:42 -0700 (PDT) From: Jiri Pirko To: linux-rdma@vger.kernel.org Cc: cgroups@vger.kernel.org, netdev@vger.kernel.org, linux-s390@vger.kernel.org, linux-kselftest@vger.kernel.org, jgg@ziepe.ca, leon@kernel.org, parav@nvidia.com, mbloch@nvidia.com, cmeiohas@nvidia.com, roman.gushchin@linux.dev, bvanassche@acm.org, zyjzyj2000@gmail.com, shuah@kernel.org, tj@kernel.org, mkoutny@suse.com, hannes@cmpxchg.org, alibuda@linux.alibaba.com, dust.li@linux.alibaba.com, sidraya@linux.ibm.com, wenjia@linux.ibm.com Subject: [PATCH rdma-next 02/13] RDMA/core: Handle device name conflicts when changing net namespace Date: Thu, 9 Jul 2026 11:55:21 +0200 Message-ID: <20260709095532.855647-3-jiri@resnulli.us> X-Mailer: git-send-email 2.54.0 In-Reply-To: <20260709095532.855647-1-jiri@resnulli.us> References: <20260709095532.855647-1-jiri@resnulli.us> Precedence: bulk X-Mailing-List: linux-s390@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit From: Jiri Pirko Prepare namespace moves for per-netns names. Check user-initiated moves for destination-name conflicts before disabling the device, keep same-netns moves as no-ops, and make teardown moves detach from the exiting namespace even if fallback naming fails. Signed-off-by: Jiri Pirko --- drivers/infiniband/core/device.c | 155 ++++++++++++++++++++++++++----- drivers/infiniband/core/nldev.c | 3 + 2 files changed, 137 insertions(+), 21 deletions(-) diff --git a/drivers/infiniband/core/device.c b/drivers/infiniband/core/device.c index de610f52c9b2..8d169658e312 100644 --- a/drivers/infiniband/core/device.c +++ b/drivers/infiniband/core/device.c @@ -268,7 +268,7 @@ static struct notifier_block ibdev_lsm_nb = { }; static int rdma_dev_change_netns(struct ib_device *device, struct net *cur_net, - struct net *net); + struct net *net, const char *fallback_pattern); /* Pointer to the RCU head at the start of the ib_port_data array */ struct ib_port_data_rcu { @@ -437,7 +437,8 @@ int ib_device_set_dim(struct ib_device *ibdev, u8 use_dim) } /* Pick a free index for the '%d' style @name pattern. */ -static int alloc_name_id(struct net *net, const char *name) +static int __alloc_name_id(struct net *net, const char *name, + const struct ib_device *skip) { struct ib_device *device; unsigned long index; @@ -450,6 +451,8 @@ static int alloc_name_id(struct net *net, const char *name) xa_for_each (&devices, index, device) { char buf[IB_DEVICE_NAME_MAX]; + if (device == skip) + continue; if (sscanf(dev_name(&device->dev), name, &i) != 1) continue; if (i < 0 || i >= INT_MAX) @@ -469,6 +472,11 @@ static int alloc_name_id(struct net *net, const char *name) return rc; } +static int alloc_name_id(struct net *net, const char *name) +{ + return __alloc_name_id(net, name, NULL); +} + static int alloc_name(struct ib_device *ibdev, const char *name) { int id; @@ -1160,8 +1168,17 @@ static void rdma_dev_exit_net(struct net *net) /* * If the real device is in the NS then move it back to init. + * Provide a fallback pattern so a name conflict in init_net + * cannot make the teardown move fail. */ - rdma_dev_change_netns(dev, net, &init_net); + if (net_eq(net, read_pnet(&dev->coredev.rdma_net))) { + ret = rdma_dev_change_netns(dev, net, &init_net, + "ibdev%d"); + if (ret) + WARN(1, + "Failed to move RDMA device %s to init_net on netns exit: %d\n", + dev_name(&dev->dev), ret); + } put_device(&dev->dev); down_read(&devices_rwsem); @@ -1680,14 +1697,71 @@ void ib_unregister_device_queued(struct ib_device *ib_dev) } EXPORT_SYMBOL(ib_unregister_device_queued); +static bool rdma_dev_name_in_netns(struct ib_device *skip, struct net *net, + const char *name) +{ + struct ib_device *device; + unsigned long index; + + lockdep_assert_held_write(&devices_rwsem); + + xa_for_each(&devices, index, device) + if (device != skip && + !strcmp(name, dev_name(&device->dev))) + return true; + + return false; +} + +/* + * Choose the name @device should use in net namespace @net: keep the current + * name when it is free, otherwise use a trusted '%d' @fallback_pattern + * (namespace teardown) to pick a free index. The caller must hold the write + * side of devices_rwsem. + */ +static int rdma_dev_pick_netns_name(struct ib_device *device, struct net *net, + const char *fallback_pattern, + char *buf, size_t buf_len, + const char **new_name) +{ + int id; + + lockdep_assert_held_write(&devices_rwsem); + + if (!rdma_dev_name_in_netns(device, net, dev_name(&device->dev))) { + *new_name = dev_name(&device->dev); + return 0; + } + + if (!fallback_pattern) + return -EEXIST; + + snprintf(buf, buf_len, "ibdev%u", device->index); + if (!rdma_dev_name_in_netns(device, net, buf)) { + *new_name = buf; + return 0; + } + + id = __alloc_name_id(net, fallback_pattern, device); + if (id < 0) + return id; + snprintf(buf, buf_len, fallback_pattern, id); + *new_name = buf; + return 0; +} + /* * The caller must pass in a device that has the kref held and the refcount * released. If the device is in cur_net and still registered then it is moved * into net. + * + * Naming rules are handled by rdma_dev_pick_netns_name(). */ static int rdma_dev_change_netns(struct ib_device *device, struct net *cur_net, - struct net *net) + struct net *net, const char *fallback_pattern) { + char buf[IB_DEVICE_NAME_MAX]; + const char *new_name; int ret2 = -EINVAL; int ret; @@ -1704,30 +1778,63 @@ static int rdma_dev_change_netns(struct ib_device *device, struct net *cur_net, goto out; } + if (!fallback_pattern) { + /* + * Reject a predictable name conflict before tearing anything + * down, so a doomed user move does not disable a live device. + */ + down_write(&devices_rwsem); + ret = rdma_dev_pick_netns_name(device, net, fallback_pattern, + buf, sizeof(buf), &new_name); + up_write(&devices_rwsem); + if (ret) + goto out; + } + kobject_uevent(&device->dev.kobj, KOBJ_REMOVE); disable_device(device); /* - * At this point no one can be using the device, so it is safe to - * change the namespace. + * Recompute the destination name under the write side of devices_rwsem + * now that the device is disabled, closing races with a concurrent + * registration or rename, then publish the new namespace at the sysfs + * level. */ - write_pnet(&device->coredev.rdma_net, net); + down_write(&devices_rwsem); + ret = rdma_dev_pick_netns_name(device, net, fallback_pattern, buf, + sizeof(buf), &new_name); + if (ret) { + if (fallback_pattern) { + WARN(1, + "%s: failed to pick device name during namespace teardown: %d\n", + __func__, ret); + write_pnet(&device->coredev.rdma_net, net); + ret = 0; + } + goto rename_done; + } - down_read(&devices_rwsem); - /* - * Currently rdma devices are system wide unique. So the device name - * is guaranteed free in the new namespace. Publish the new namespace - * at the sysfs level. - */ - ret = device_rename(&device->dev, dev_name(&device->dev)); - up_read(&devices_rwsem); + write_pnet(&device->coredev.rdma_net, net); + ret = device_rename(&device->dev, new_name); if (ret) { - dev_warn(&device->dev, - "%s: Couldn't rename device after namespace change\n", - __func__); - /* Try and put things back and re-enable the device */ - write_pnet(&device->coredev.rdma_net, cur_net); + if (fallback_pattern) { + WARN(1, + "%s: failed to rename device during namespace teardown: %d\n", + __func__, ret); + ret = 0; + } else { + dev_warn(&device->dev, + "%s: Couldn't rename device after namespace change\n", + __func__); + /* Try and put things back and re-enable the device */ + write_pnet(&device->coredev.rdma_net, cur_net); + } + } else { + strscpy(device->name, dev_name(&device->dev), + IB_DEVICE_NAME_MAX); } +rename_done: + up_write(&devices_rwsem); ret2 = enable_device_and_get(device); if (ret2) { @@ -1766,6 +1873,12 @@ int ib_device_set_netns_put(struct sk_buff *skb, goto ns_err; } + /* Moving a device to the namespace it already lives in is a no-op. */ + if (net_eq(net, read_pnet(&dev->coredev.rdma_net))) { + ret = 0; + goto ns_err; + } + /* * All the ib_clients, including uverbs, are reset when the namespace is * changed and this cannot be blocked waiting for userspace to do @@ -1778,7 +1891,7 @@ int ib_device_set_netns_put(struct sk_buff *skb, get_device(&dev->dev); ib_device_put(dev); - ret = rdma_dev_change_netns(dev, current->nsproxy->net_ns, net); + ret = rdma_dev_change_netns(dev, current->nsproxy->net_ns, net, NULL); put_device(&dev->dev); put_net(net); diff --git a/drivers/infiniband/core/nldev.c b/drivers/infiniband/core/nldev.c index f599c24b34e8..3a9ec43a16f1 100644 --- a/drivers/infiniband/core/nldev.c +++ b/drivers/infiniband/core/nldev.c @@ -1195,6 +1195,9 @@ static int nldev_set_doit(struct sk_buff *skb, struct nlmsghdr *nlh, ns_fd = nla_get_u32(tb[RDMA_NLDEV_NET_NS_FD]); err = ib_device_set_netns_put(skb, device, ns_fd); + if (err == -EEXIST) + NL_SET_ERR_MSG(extack, + "Device name already exists in the target net namespace"); goto put_done; } -- 2.54.0