On Tue, Apr 26, 2016 at 08:48:15AM -0600, Alex Williamson wrote: > I think that means that if we want to switch from a > simple halt-on-error to a mechanism for the guest to handle recovery, > we need to disable access to the device between being notified that the > error occurred and being notified to resume.
But this isn't what happens on bare metal. Errors are reported asynchronously and host might access the device meanwhile. These accesses might or might not trigger more errors, but fundamentally this should not matter too much as device is going to be reset. -- MST