LKML Archive mirror
 help / color / mirror / Atom feed
From: Andi Shyti <andi.shyti@kernel.org>
To: Robert Hancock <robert.hancock@calian.com>
Cc: "michal.simek@amd.com" <michal.simek@amd.com>,
	"shubhraj@xilinx.com" <shubhraj@xilinx.com>,
	"marex@denx.de" <marex@denx.de>,
	"linux-arm-kernel@lists.infradead.org" 
	<linux-arm-kernel@lists.infradead.org>,
	"linux-i2c@vger.kernel.org" <linux-i2c@vger.kernel.org>,
	"linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
	"wsa@kernel.org" <wsa@kernel.org>
Subject: Re: [PATCH] i2c: xiic: Don't try to handle more interrupt events after error
Date: Tue, 6 Jun 2023 23:20:53 +0200	[thread overview]
Message-ID: <20230606212053.bwpoxyost4fkpati@intel.intel> (raw)
In-Reply-To: <c763371c710c9952154496026610e2ff583c173a.camel@calian.com>

Hi Robert,

On Tue, Jun 06, 2023 at 07:40:15PM +0000, Robert Hancock wrote:
> On Tue, 2023-06-06 at 21:24 +0200, Andi Shyti wrote:
> > Hi Robert,
> > 
> > On Tue, Jun 06, 2023 at 12:25:58PM -0600, Robert Hancock wrote:
> > > In xiic_process, it is possible that error events such as
> > > arbitration
> > > lost or TX error can be raised in conjunction with other interrupt
> > > flags
> > > such as TX FIFO empty or bus not busy. Error events result in the
> > > controller being reset and the error returned to the calling
> > > request,
> > > but the function could potentially try to keep handling the other
> > > events, such as by writing more messages into the TX FIFO. Since
> > > the
> > > transaction has already failed, this is not helpful and will just
> > > cause
> > > issues.
> > 
> > what kind of issues?
> > 
> 
> The one I ran into is what I alluded to further down, where that
> WARN_ON was triggering repeatedly, which ended up flooding the kernel
> log and causing the device's watchdog timer to timeout. I'm not sure
> what other forms of havoc might ensue, other than "nothing good"..
> 
> > > This problem has been present ever since:
> > > 
> > > commit 7f9906bd7f72 ("i2c: xiic: Service all interrupts in isr")
> > > 
> > > which allowed non-error events to be handled after errors, but
> > > became
> > > more obvious after:
> > > 
> > > commit 743e227a8959 ("i2c: xiic: Defer xiic_wakeup() and
> > > __xiic_start_xfer() in xiic_process()")
> > > 
> > > which reworked the code to add a WARN_ON which triggers if both the
> > > xfer_more and wakeup_req flags were set, since this combination is
> > > not supposed to happen, but was occurring in this scenario.
> > > 
> > > Skip further interrupt handling after error flags are detected to
> > > avoid
> > > this problem.
> > > 
> > > Fixes: 7f9906bd7f72 ("i2c: xiic: Service all interrupts in isr")
> > > Signed-off-by: Robert Hancock <robert.hancock@calian.com>
> > 
> > please add:
> > 
> > Cc: <stable@vger.kernel.org> # v4.3+
> > 
> 
> Can add for a v2 - although with the Fixes tag it would most likely be
> picked up for stable anyway..

It's just a courtesy to stable maintainers :)

> > > ---
> > >  drivers/i2c/busses/i2c-xiic.c | 2 ++
> > >  1 file changed, 2 insertions(+)
> > > 
> > > diff --git a/drivers/i2c/busses/i2c-xiic.c
> > > b/drivers/i2c/busses/i2c-xiic.c
> > > index 8a3d9817cb41..ee6edc963dea 100644
> > > --- a/drivers/i2c/busses/i2c-xiic.c
> > > +++ b/drivers/i2c/busses/i2c-xiic.c
> > > @@ -721,6 +721,8 @@ static irqreturn_t xiic_process(int irq, void
> > > *dev_id)
> > >                       wakeup_req = 1;
> > >                       wakeup_code = STATE_ERROR;
> > >               }
> > > +             /* don't try to handle other events */
> > > +             goto out;
> > 
> > why don't we have goto's after every irq evaluation but only
> > here? Do the issues you mentioned happen olny in this particular
> > error case?
> > 
> 
> As far as I can tell, yes. For example you could legitimately have
> XIIC_INTR_TX_EMPTY_MASK and XIIC_INTR_BNB_MASK both being handled. The
> error case is special as we end up resetting the controller, so it
> doesn't make sense to try to continue with the rest of the transaction
> while also completing it with an error.

I think the patch is correct and I will ack it:

Acked-by: Andi Shyti <andi.shyti@kernel.org> 

I think, though, that this needs a proper fix and testing, in
order to cover all the possible combinations. The scenario you
highlighted is indeed one, but not only, potential situation that
could arise.

Can I just ask you to write a bit more in the comment to 
highlight the possible failure?

Thanks a lot,
Andi

> > Thanks,
> > Andi
> > 
> > >       }
> > >       if (pend & XIIC_INTR_RX_FULL_MASK) {
> > >               /* Receive register/FIFO is full */
> > > --
> > > 2.40.1
> > > 
> 
> -- 
> Robert Hancock <robert.hancock@calian.com>

  reply	other threads:[~2023-06-06 21:21 UTC|newest]

Thread overview: 9+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2023-06-06 18:25 [PATCH] i2c: xiic: Don't try to handle more interrupt events after error Robert Hancock
2023-06-06 19:24 ` Andi Shyti
2023-06-06 19:40   ` Robert Hancock
2023-06-06 21:20     ` Andi Shyti [this message]
2023-06-09 15:32       ` wsa
2023-06-09 21:25         ` Andi Shyti
2023-06-27 16:13           ` Robert Hancock
2023-06-27 21:25             ` wsa
2023-07-06 19:33 ` Wolfram Sang

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20230606212053.bwpoxyost4fkpati@intel.intel \
    --to=andi.shyti@kernel.org \
    --cc=linux-arm-kernel@lists.infradead.org \
    --cc=linux-i2c@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=marex@denx.de \
    --cc=michal.simek@amd.com \
    --cc=robert.hancock@calian.com \
    --cc=shubhraj@xilinx.com \
    --cc=wsa@kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).