Technical

VFIO: Firmware has requested this device have a 1:1 IOMMU mapping on Proxmox

VFIO: Firmware has requested this device have a 1:1 IOMMU mapping on Proxmox

VFIO: Firmware has requested this device have a 1:1 IOMMU mapping — that dmesg line scares people, but most of the time it’s just the firmware being lazy. The real question is whether the device sits alone in its IOMMU group.

Close-up of a vintage computer expansion card featuring electronic components and a ribbon cable.

What the warning actually means

The firmware told the kernel it wants the device mapped 1:1 in the IOMMU, which is normal for devices that don’t support ACS or have quirky RMRR regions. It doesn’t automatically break passthrough. What breaks passthrough is when the device shares a group with something else you’re not passing through.

Check your IOMMU groups

Run this on the Proxmox host:

for d in /sys/kernel/iommu_groups/*/devices/*; do
  group=$(basename $(dirname $(dirname $d)))
  echo "IOMMU group $group: $(basename $d)"
done | sort -V

Find your device. If it’s alone in its group, the 1:1 mapping warning is noise. Ignore it and pass the device through. If it’s sharing a group with a USB controller or something else, that’s your actual problem — the warning was just a distraction.

Detailed close-up view of electronic circuit board, showcasing modern technology.

When it does matter

Some devices genuinely need the 1:1 mapping because the firmware hardcodes memory regions. Passing those through can fail with DMA errors even if the group is clean. In that case you’re stuck unless the vendor releases a firmware fix. But that’s rare on server hardware.

My take

Don’t chase this warning. Chasing it wastes an evening. Check the group, and if the device is isolated, move on. If it’s not isolated, fix that first — ACS override or a different slot. The 1:1 message will still be there, and it’ll still be harmless.

Related: Detected Hardware Unit Hang: fix the NIC firmware and ASPM on Proxmox

Leave a comment

Comments are reviewed before they appear. Your email is never published.