From: Kevin Mitchell <kevmitch@arista.com>
To: Vasant Hegde <vasant.hegde@amd.com>,
Jason Gunthorpe <jgg@ziepe.ca>,
Nicolin Chen <nicolinc@nvidia.com>
Cc: Kevin Mitchell <kevmitch@arista.com>,
stable@vger.kernel.org, "Joerg Roedel (AMD)" <joro@8bytes.org>,
Suravee Suthikulpanit <suravee.suthikulpanit@amd.com>,
Will Deacon <will@kernel.org>,
Robin Murphy <robin.murphy@arm.com>,
Joerg Roedel <joerg.roedel@amd.com>,
iommu@lists.linux.dev (open list:AMD IOMMU (AMD-VI)),
linux-kernel@vger.kernel.org (open list)
Subject: [PATCH] iommu/amd: allow identity domain during device release
Date: Thu, 8 Oct 2026 13:25:27 -0700 [thread overview]
Message-ID: <20261008202530.14501-2-kevmitch@arista.com> (raw)
A warning is triggered in amd_iommu_release_device() on removal of a
device with an IOMMU_RESV_DIRECT region. The warning is based on the
false assumption that correct attachment to the release_domain will
always result in a NULL dev_data->domain pointer. For devices with
IOMMU_RESV_DIRECT (and consequently dev->iommu->require_direct), the
release domain is the permanent identity_domain which sets
itself to dev_data->domain on attach.
This behaviour was added in commit e94160488e65 ("iommu: Generic support
for RMRs during device release"). Commit c21b34762e2f ("iommu/amd: Set
release_domain to blocked_domain") caused it to take effect for AMD
IOMMU.
Explicitly allow the identity domain pointer to be set. Keep the warning
for any other non-NULL domain.
The warning was observed for a device with direct mapped region:
/sys/bus/pci/devices/0000:04:00.0/iommu_group/reserved_regions:
0x00000000fee00000 0x00000000feefffff msi
0x000000fd00000000 0x000000ffffffffff reserved
0x0000fffd00000000 0x0000ffffffffffff direct
Upon hotunplug:
[ 28.715475] pcieport 0000:00:03.1: pciehp: Slot(0-3): Link Down
[ 28.715482] pcieport 0000:00:03.1: pciehp: Slot(0-3): Card not present
[ 28.715601] ------------[ cut here ]------------
[ 28.715603] WARNING: drivers/iommu/amd/iommu.c:2521 at amd_iommu_release_device+0x5d/0x70, CPU#4: irq/29-pciehp/99
[ 28.715657] RIP: 0010:amd_iommu_release_device+0x5d/0x70
[ 28.715687] Call Trace:
[ 28.715689] <TASK>
[ 28.715694] iommu_deinit_device+0x84/0x110
[ 28.715699] __iommu_group_remove_device+0xa8/0xd0
[ 28.715703] iommu_bus_notifier+0x48/0x70
[ 28.715707] notifier_call_chain+0x48/0xe0
[ 28.715712] blocking_notifier_call_chain+0x45/0x60
[ 28.715716] bus_notify+0x3b/0x60
[ 28.715720] device_del+0x259/0x3b0
[ 28.715730] pci_remove_bus_device+0x85/0x100
[ 28.715735] pciehp_unconfigure_device+0x9d/0x180
[ 28.715743] __pciehp_disable_slot+0x47/0xe0
[ 28.715747] pciehp_handle_presence_or_link_change+0x80/0x5e0
[ 28.715753] pciehp_ist+0x162/0x290
Fixes: c21b34762e2f ("iommu/amd: Set release_domain to blocked_domain")
Cc: stable@vger.kernel.org
Signed-off-by: Kevin Mitchell <kevmitch@arista.com>
---
drivers/iommu/amd/iommu.c | 10 +++++++---
1 file changed, 7 insertions(+), 3 deletions(-)
diff --git a/drivers/iommu/amd/iommu.c b/drivers/iommu/amd/iommu.c
index 56262f6b1f70..770717e36333 100644
--- a/drivers/iommu/amd/iommu.c
+++ b/drivers/iommu/amd/iommu.c
@@ -2548,11 +2548,17 @@ static struct iommu_device *amd_iommu_probe_device(struct device *dev)
return iommu_dev;
}
+static struct protection_domain identity_domain;
+
static void amd_iommu_release_device(struct device *dev)
{
struct iommu_dev_data *dev_data = dev_iommu_priv_get(dev);
- WARN_ON(dev_data->domain);
+ /*
+ * Devices with direct mapped regions are attached to the
+ * identity_domain as their release_domain.
+ */
+ WARN_ON(dev_data->domain && dev_data->domain != &identity_domain);
/*
* We keep dev_data around for unplugged devices and reuse it when the
@@ -2953,8 +2959,6 @@ static struct iommu_domain blocked_domain = {
}
};
-static struct protection_domain identity_domain;
-
static int amd_iommu_identity_attach(struct iommu_domain *dom, struct device *dev,
struct iommu_domain *old)
{
--
2.51.0
reply other threads:[~2026-10-08 20:29 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20261008202530.14501-2-kevmitch@arista.com \
--to=kevmitch@arista.com \
--cc=iommu@lists.linux.dev \
--cc=jgg@ziepe.ca \
--cc=joerg.roedel@amd.com \
--cc=joro@8bytes.org \
--cc=linux-kernel@vger.kernel.org \
--cc=nicolinc@nvidia.com \
--cc=robin.murphy@arm.com \
--cc=stable@vger.kernel.org \
--cc=suravee.suthikulpanit@amd.com \
--cc=vasant.hegde@amd.com \
--cc=will@kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®