From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-qv1-f43.google.com (mail-qv1-f43.google.com [209.85.219.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 67C7D235BE2 for ; Fri, 1 May 2026 13:00:09 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.219.43 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1777640411; cv=none; b=mdGB/uT9vNbbBolgBWjQjKgVWh379vVxG4cIw9uK19XGfBtWdS50ksxIr7usBZNhcbAAdQZwvK7fzbwsBli1bnfISMrH2Cu0OR8FkLAYW9rjv/CYxsEbWysAFysm9md7KrU7jRrvbF/wud/WZlr/99yQjReome6EUeleMsFZqUQ= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1777640411; c=relaxed/simple; bh=sLCEaWfAO7nUm59+syKMMoJB8EG0FMX2rc04JgPJ2aM=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=ExcFBfZX8ObB4t8AjbYFqwo99L2u/Y9yC70epRZm0l7dSR50i7ReoU94H9z4GuVHl+PJpPlybKxXKdKCXWR+gl0KS5/wm9zKzSzDb+Qe8qRjVLDXOU7Vjq7XT12dLOoWocAS5KOF8oNGufHB4/dGQh5tMOiT0eHpioTZJ4aewnc= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=ziepe.ca; spf=pass smtp.mailfrom=ziepe.ca; dkim=pass (2048-bit key) header.d=ziepe.ca header.i=@ziepe.ca header.b=GEGd1/eB; arc=none smtp.client-ip=209.85.219.43 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=ziepe.ca Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=ziepe.ca Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=ziepe.ca header.i=@ziepe.ca header.b="GEGd1/eB" Received: by mail-qv1-f43.google.com with SMTP id 6a1803df08f44-8b4eb1fd5d0so11252586d6.0 for ; Fri, 01 May 2026 06:00:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ziepe.ca; s=google; t=1777640408; x=1778245208; darn=vger.kernel.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=sLCEaWfAO7nUm59+syKMMoJB8EG0FMX2rc04JgPJ2aM=; b=GEGd1/eBDQeEA64rEcv8wwNVKrFGcE6I9hRUWyT3e5bbnVUJMWa3xDIxL7KVPpwcMU JMZ0+jhhDIWc0EYc0SFos2aMVd6rZi3bx5JcPZVJ2A4fXFcCtoUFnZP1HFQHqJBO6DOQ qDsA2+Up0BAWOgAJutXDPnqfEmxF5bMwZUJ7C3Tn6F1alJXZ0P3Bscp/FbWtAvXT3iZJ 02uy3yloyzUdb0/F6TOFOuMqWmnRn4TZVYliCATUuRMMnGz+48SmodqRQr9ABvxTK/Ee RY2z3FikbPJFMheFz9yVq84xsY2QcoUSFyf8oNoXr/DflGM3KMyDHYPO6H22qUTS4zFx oAbw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1777640408; x=1778245208; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=sLCEaWfAO7nUm59+syKMMoJB8EG0FMX2rc04JgPJ2aM=; b=mDL1YEz0tOYT+lXv6zyHGGzgHifrLmVjQkGDBeawt7EOxwEY89ELsSH7g3n7Hy4j2R j6X7qvfK1iXJOClgBclvN/BN3o4+k99/jCGydfC+5WOCtAsaHgsTF0eGbVv00CD71+5A M9qz0MwNh3CPT3C3SMazuTK1YJN5bAjtwdNJ9TzyP+SJzrgKgQf65OLK3mXRsUabVhIT gqhZHh93fS3xLKJnMTPRBK5J0uoDfj6cXpebei/1FETDxL7olz7gpKK0e62vMEK+WHr7 v557XP+pR9vwMMeO8dMroMVDy2hwYqSzf64GUc/XrCVgVPdbyqmBIM1T9+kgQQaOZPui utTg== X-Forwarded-Encrypted: i=1; AFNElJ8nHJgowKRBkdL9z9CvhkkU7NAXU4VPNjJsoysRKhI75nDgpZXFu4nr9oPpJjqdBd23Lf/ii8jWyMdzdes=@vger.kernel.org X-Gm-Message-State: AOJu0YxiGVv0AYjTGHXmEXSxmILXIzopxCeb1uGYqJ7k5pJ7aC6iWcha 9HFbNDYR0u+g9OqF6zSDNLtMTglrmgie7Z5ZcZgITkN97CEcPJE6am6CrZDTcJ7JQbQ= X-Gm-Gg: AeBDiesQPPbnqlF+P79mSjI1/YXi8Qs45Z+MgbHlMFZG9pG4xwASNd4MYex0PJt0LtG LkT0dt8J6cQChLXbOV681dkytDSR0E8GNVM/WzFAvSkiugFRtJhZ9vONWgtrv8ebd7oQy1GaGck t3pyb6+kHcJKvYPez5SjaTrN5qaS/03H1YDIJChvXShB47IIu7cXstcJXNAu0NdhPEaVQExtqWH 83rktE8MnHFh9+eugThLBTqwoFVlG+hQM3DXXt/+p/J3iC8BZxnYbTp255FRA5PpkCkUGRoUryf o86Qc8ic8mRGLTSX7IkvBCoFqj/6a2urJDb06a0Byy8uEZVf4p0KyrnV8sDxZ8XVQjIpuno1zAg p5fzZmKfwLPRBqN0AHe4eKCAaDQiUpxbEXVSRprLL17JWIPkYTpzFW1Da/quxz+XNQ85YDz92F2 jdT2EVwBneLlIrlbVpfJa7oGWd4Ar9bsVOCenerMFL4JLBvWq1IBRBI323UfY88YaPeBdwuYnkD VoGvl9mYodpYnuASxcJSzYoDBw= X-Received: by 2002:a05:6214:3d85:b0:8b5:e126:e77d with SMTP id 6a1803df08f44-8b5e126e7b5mr18314046d6.8.1777640407970; Fri, 01 May 2026 06:00:07 -0700 (PDT) Received: from ziepe.ca (crbknf0213w-47-54-130-67.pppoe-dynamic.high-speed.nl.bellaliant.net. [47.54.130.67]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-8b53c7accddsm23110796d6.36.2026.05.01.06.00.07 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 01 May 2026 06:00:07 -0700 (PDT) Received: from jgg by wakko with local (Exim 4.97) (envelope-from ) id 1wInTS-00000005DWr-2vHb; Fri, 01 May 2026 10:00:06 -0300 Date: Fri, 1 May 2026 10:00:06 -0300 From: Jason Gunthorpe To: Mostafa Saleh Cc: linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org, kvmarm@lists.linux.dev, iommu@lists.linux.dev, catalin.marinas@arm.com, will@kernel.org, maz@kernel.org, oliver.upton@linux.dev, joey.gouly@arm.com, suzuki.poulose@arm.com, yuzenghui@huawei.com, joro@8bytes.org, jean-philippe@linaro.org, mark.rutland@arm.com, qperret@google.com, tabba@google.com, vdonnefort@google.com, sebastianene@google.com, keirf@google.com Subject: Re: [PATCH v6 08/25] KVM: arm64: iommu: Shadow host stage-2 page table Message-ID: <20260501130006.GF6912@ziepe.ca> References: <20260501111928.259252-1-smostafa@google.com> <20260501111928.259252-9-smostafa@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20260501111928.259252-9-smostafa@google.com> On Fri, May 01, 2026 at 11:19:10AM +0000, Mostafa Saleh wrote: > Create a page-table for the IOMMU that shadows the host CPU stage-2 > to establish DMA isolation. Is there a reason you can't just use the CPU S2 for the iommu? ie the CCA RMM is doing that, it is how ARM imagined this stuff would work. Once you start supporting DMA like this you have no choice but to keep a fully populated at all times S2 around, why not use that for the CPU too to avoid faults? I guess there is a reason, but maybe explain in the commit message? It sure would be simpler, you wouldn't have to mess with iopgtable at all... Jason