| Message ID | d04deaf49d634a2edf42bf3c06ed81b4ca54d17b.1744298239.git.lukas@wunner.de (mailing list archive) |
|---|---|
| State | New |
| Headers | show |
| Series | Ignore spurious PCIe hotplug events | expand |
On 4/10/25 8:27 AM, Lukas Wunner wrote: > When a Secondary Bus Reset is issued at a hotplug port, it causes a Data > Link Layer State Changed event as a side effect. On hotplug ports using > in-band presence detect, it additionally causes a Presence Detect Changed > event. > > These spurious events should not result in teardown and re-enumeration of > the device in the slot. Hence commit 2e35afaefe64 ("PCI: pciehp: Add > reset_slot() method") masked the Presence Detect Changed Enable bit in the > Slot Control register during a Secondary Bus Reset. Commit 06a8d89af551 > ("PCI: pciehp: Disable link notification across slot reset") additionally > masked the Data Link Layer State Changed Enable bit. > > However masking those bits only disables interrupt generation (PCIe r6.2 > sec 6.7.3.1). The events are still visible in the Slot Status register > and picked up by the IRQ handler if it runs during a Secondary Bus Reset. > This can happen if the interrupt is shared or if an unmasked hotplug event > occurs, e.g. Attention Button Pressed or Power Fault Detected. > > The likelihood of this happening used to be small, so it wasn't much of a > problem in practice. That has changed with the recent introduction of > bandwidth control in v6.13-rc1 with commit 665745f27487 ("PCI/bwctrl: > Re-add BW notification portdrv as PCIe BW controller"): > > Bandwidth control shares the interrupt with PCIe hotplug. A Secondary Bus > Reset causes a Link Bandwidth Notification, so the hotplug IRQ handler > runs, picks up the masked events and tears down the device in the slot. > > As a result, Joel reports VFIO passthrough failure of a GPU, which Ilpo > root-caused to the incorrect handling of masked hotplug events. > > Clearly, a more reliable way is needed to ignore spurious hotplug events. > > For Downstream Port Containment, a new ignore mechanism was introduced by > commit a97396c6eb13 ("PCI: pciehp: Ignore Link Down/Up caused by DPC"). > It has been working reliably for the past four years. > > Adapt it for Secondary Bus Resets. > > Introduce two helpers to annotate code sections which cause spurious link > changes: pci_hp_ignore_link_change() and pci_hp_unignore_link_change() > Use those helpers in lieu of masking interrupts in the Slot Control > register. > > Introduce a helper to check whether such a code section is executing > concurrently and if so, await it: pci_hp_spurious_link_change() > Invoke the helper in the hotplug IRQ thread pciehp_ist(). Re-use the > IRQ thread's existing code which ignores DPC-induced link changes unless > the link is unexpectedly down after reset recovery or the device was > replaced during the bus reset. > > That code block in pciehp_ist() was previously only executed if a Data > Link Layer State Changed event has occurred. Additionally execute it for > Presence Detect Changed events. That's necessary for compatibility with > PCIe r1.0 hotplug ports because Data Link Layer State Changed didn't exist > before PCIe r1.1. DPC was added with PCIe r3.1 and thus DPC-capable > hotplug ports always support Data Link Layer State Changed events. > But the same cannot be assumed for Secondary Bus Reset, which already > existed in PCIe r1.0. > > Secondary Bus Reset is only one of many causes of spurious link changes. > Others include runtime suspend to D3cold, firmware updates or FPGA > reconfiguration. The new pci_hp_{,un}ignore_link_change() helpers may be > used by all kinds of drivers to annotate such code sections, hence their > declarations are publicly visible in <linux/pci.h>. A case in point is > the Mellanox Ethernet driver which disables a firmware reset feature if > the Ethernet card is attached to a hotplug port, see commit 3d7a3f2612d7 > ("net/mlx5: Nack sync reset request when HotPlug is enabled"). Going > forward, PCIe hotplug will be able to cope gracefully with all such use > cases once the code sections are properly annotated. > > The new helpers internally use two bits in struct pci_dev's priv_flags as > well as a wait_queue. This mirrors what was done for DPC by commit > a97396c6eb13 ("PCI: pciehp: Ignore Link Down/Up caused by DPC"). That may > be insufficient if spurious link changes are caused by multiple sources > simultaneously. An example might be a Secondary Bus Reset issued by AER > during FPGA reconfiguration. If this turns out to happen in real life, > support for it can easily be added by replacing the PCI_LINK_CHANGING flag > with an atomic_t counter incremented by pci_hp_ignore_link_change() and > decremented by pci_hp_unignore_link_change(). Instead of awaiting a zero > PCI_LINK_CHANGING flag, the pci_hp_spurious_link_change() helper would > then simply await a zero counter. > > Fixes: 665745f27487 ("PCI/bwctrl: Re-add BW notification portdrv as PCIe BW controller") > Reported-by: Joel Mathew Thomas <proxy0@tutamail.com> > Closes: https://bugzilla.kernel.org/show_bug.cgi?id=219765 > Tested-by: Joel Mathew Thomas <proxy0@tutamail.com> > Signed-off-by: Lukas Wunner <lukas@wunner.de> > Cc: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com> > --- > drivers/pci/hotplug/pci_hotplug_core.c | 69 ++++++++++++++++++++++++++++++++++ > drivers/pci/hotplug/pciehp_hpc.c | 35 ++++++----------- > drivers/pci/pci.h | 3 ++ > include/linux/pci.h | 8 ++++ > 4 files changed, 92 insertions(+), 23 deletions(-) > > diff --git a/drivers/pci/hotplug/pci_hotplug_core.c b/drivers/pci/hotplug/pci_hotplug_core.c > index d30f131..d8c5856 100644 > --- a/drivers/pci/hotplug/pci_hotplug_core.c > +++ b/drivers/pci/hotplug/pci_hotplug_core.c > @@ -492,6 +492,75 @@ void pci_hp_destroy(struct hotplug_slot *slot) > } > EXPORT_SYMBOL_GPL(pci_hp_destroy); > > +static DECLARE_WAIT_QUEUE_HEAD(pci_hp_link_change_wq); > + > +/** > + * pci_hp_ignore_link_change - begin code section causing spurious link changes > + * @pdev: PCI hotplug bridge > + * > + * Mark the beginning of a code section causing spurious link changes on the > + * Secondary Bus of @pdev, e.g. as a side effect of a Secondary Bus Reset, > + * D3cold transition, firmware update or FPGA reconfiguration. > + * > + * Hotplug drivers can thus check whether such a code section is executing > + * concurrently, await it with pci_hp_spurious_link_change() and ignore the > + * resulting link change events. > + * > + * Must be paired with pci_hp_unignore_link_change(). May be called both > + * from the PCI core and from Endpoint drivers. May be called for bridges > + * which are not hotplug-capable, in which case it has no effect because > + * no hotplug driver is bound to the bridge. > + */ > +void pci_hp_ignore_link_change(struct pci_dev *pdev) > +{ > + set_bit(PCI_LINK_CHANGING, &pdev->priv_flags); > + smp_mb__after_atomic(); /* pairs with implied barrier of wait_event() */ > +} > + > +/** > + * pci_hp_unignore_link_change - end code section causing spurious link changes > + * @pdev: PCI hotplug bridge > + * > + * Mark the end of a code section causing spurious link changes on the > + * Secondary Bus of @pdev. Must be paired with pci_hp_ignore_link_change(). > + */ > +void pci_hp_unignore_link_change(struct pci_dev *pdev) > +{ > + set_bit(PCI_LINK_CHANGED, &pdev->priv_flags); > + mb(); /* ensure pci_hp_spurious_link_change() sees either bit set */ > + clear_bit(PCI_LINK_CHANGING, &pdev->priv_flags); > + wake_up_all(&pci_hp_link_change_wq); > +} > + > +/** > + * pci_hp_spurious_link_change - check for spurious link changes > + * @pdev: PCI hotplug bridge > + * > + * Check whether a code section is executing concurrently which is causing > + * spurious link changes on the Secondary Bus of @pdev. Await the end of the > + * code section if so. > + * > + * Return %true if such a code section has been executing concurrently, > + * otherwise %false. Also return %true if such a code section has not been > + * executing concurrently, but at least once since the last invocation of this > + * function. > + * > + * May be called by hotplug drivers to check whether a link change is spurious > + * and can be ignored. > + * > + * Because a genuine link change may have occurred in-between a spurious link > + * change and the invocation of this function, hotplug drivers should perform > + * sanity checks such as retrieving the current link state and bringing down > + * the slot if the link is down. > + */ > +bool pci_hp_spurious_link_change(struct pci_dev *pdev) > +{ > + wait_event(pci_hp_link_change_wq, > + !test_bit(PCI_LINK_CHANGING, &pdev->priv_flags)); > + > + return test_and_clear_bit(PCI_LINK_CHANGED, &pdev->priv_flags); > +} > + > static int __init pci_hotplug_init(void) > { > int result; > diff --git a/drivers/pci/hotplug/pciehp_hpc.c b/drivers/pci/hotplug/pciehp_hpc.c > index 388fbed..c98d310 100644 > --- a/drivers/pci/hotplug/pciehp_hpc.c > +++ b/drivers/pci/hotplug/pciehp_hpc.c > @@ -592,21 +592,21 @@ bool pciehp_device_replaced(struct controller *ctrl) > return false; > } > > -static void pciehp_ignore_dpc_link_change(struct controller *ctrl, > - struct pci_dev *pdev, int irq, > - u16 ignored_events) > +static void pciehp_ignore_link_change(struct controller *ctrl, > + struct pci_dev *pdev, int irq, > + u16 ignored_events) > { > /* > * Ignore link changes which occurred while waiting for DPC recovery. > * Could be several if DPC triggered multiple times consecutively. > + * Also ignore link changes caused by Secondary Bus Reset etc. > */ > synchronize_hardirq(irq); > atomic_and(~ignored_events, &ctrl->pending_events); > if (pciehp_poll_mode) > pcie_capability_write_word(pdev, PCI_EXP_SLTSTA, > ignored_events); > - ctrl_info(ctrl, "Slot(%s): Link Down/Up ignored (recovered by DPC)\n", > - slot_name(ctrl)); > + ctrl_info(ctrl, "Slot(%s): Link Down/Up ignored\n", slot_name(ctrl)); > > /* > * If the link is unexpectedly down after successful recovery, > @@ -762,9 +762,11 @@ static irqreturn_t pciehp_ist(int irq, void *dev_id) > > /* > * Ignore Link Down/Up events caused by Downstream Port Containment > - * if recovery from the error succeeded. > + * if recovery succeeded, or caused by Secondary Bus Reset, > + * suspend to D3cold, firmware update, FPGA reconfiguration, etc. > */ > - if ((events & PCI_EXP_SLTSTA_DLLSC) && pci_dpc_recovered(pdev) && > + if ((events & (PCI_EXP_SLTSTA_PDC | PCI_EXP_SLTSTA_DLLSC)) && > + (pci_dpc_recovered(pdev) || pci_hp_spurious_link_change(pdev)) && > ctrl->state == ON_STATE) { > u16 ignored_events = PCI_EXP_SLTSTA_DLLSC; > > @@ -772,7 +774,7 @@ static irqreturn_t pciehp_ist(int irq, void *dev_id) > ignored_events |= events & PCI_EXP_SLTSTA_PDC; > > events &= ~ignored_events; > - pciehp_ignore_dpc_link_change(ctrl, pdev, irq, ignored_events); > + pciehp_ignore_link_change(ctrl, pdev, irq, ignored_events); > } > > /* > @@ -937,7 +939,6 @@ int pciehp_reset_slot(struct hotplug_slot *hotplug_slot, bool probe) > { > struct controller *ctrl = to_ctrl(hotplug_slot); > struct pci_dev *pdev = ctrl_dev(ctrl); > - u16 stat_mask = 0, ctrl_mask = 0; > int rc; > > if (probe) > @@ -945,23 +946,11 @@ int pciehp_reset_slot(struct hotplug_slot *hotplug_slot, bool probe) > > down_write_nested(&ctrl->reset_lock, ctrl->depth); > > - if (!ATTN_BUTTN(ctrl)) { > - ctrl_mask |= PCI_EXP_SLTCTL_PDCE; > - stat_mask |= PCI_EXP_SLTSTA_PDC; > - } > - ctrl_mask |= PCI_EXP_SLTCTL_DLLSCE; > - stat_mask |= PCI_EXP_SLTSTA_DLLSC; > - > - pcie_write_cmd(ctrl, 0, ctrl_mask); > - ctrl_dbg(ctrl, "%s: SLOTCTRL %x write cmd %x\n", __func__, > - pci_pcie_cap(ctrl->pcie->port) + PCI_EXP_SLTCTL, 0); > + pci_hp_ignore_link_change(pdev); > > rc = pci_bridge_secondary_bus_reset(ctrl->pcie->port); > > - pcie_capability_write_word(pdev, PCI_EXP_SLTSTA, stat_mask); > - pcie_write_cmd_nowait(ctrl, ctrl_mask, ctrl_mask); > - ctrl_dbg(ctrl, "%s: SLOTCTRL %x write cmd %x\n", __func__, > - pci_pcie_cap(ctrl->pcie->port) + PCI_EXP_SLTCTL, ctrl_mask); > + pci_hp_unignore_link_change(pdev); > Since most of the changes in this patch is related to adding framework to ignore spurious hotplug event, why not split it in to a separate patch? Is this fix tested in any platform? > up_write(&ctrl->reset_lock); > return rc; > diff --git a/drivers/pci/pci.h b/drivers/pci/pci.h > index b81e99c..7db798b 100644 > --- a/drivers/pci/pci.h > +++ b/drivers/pci/pci.h > @@ -227,6 +227,7 @@ static inline bool pcie_downstream_port(const struct pci_dev *dev) > > /* Functions for PCI Hotplug drivers to use */ > int pci_hp_add_bridge(struct pci_dev *dev); > +bool pci_hp_spurious_link_change(struct pci_dev *pdev); Do you expect this function used outside hotplug code? If not why not leave the declaration in pciehp.h? > > #if defined(CONFIG_SYSFS) && defined(HAVE_PCI_LEGACY) > void pci_create_legacy_files(struct pci_bus *bus); > @@ -557,6 +558,8 @@ static inline int pci_dev_set_disconnected(struct pci_dev *dev, void *unused) > #define PCI_DPC_RECOVERED 1 > #define PCI_DPC_RECOVERING 2 > #define PCI_DEV_REMOVED 3 > +#define PCI_LINK_CHANGED 4 > +#define PCI_LINK_CHANGING 5 > > static inline void pci_dev_assign_added(struct pci_dev *dev) > { > diff --git a/include/linux/pci.h b/include/linux/pci.h > index 0e8e3fd..833b54f 100644 > --- a/include/linux/pci.h > +++ b/include/linux/pci.h > @@ -1848,6 +1848,14 @@ static inline void pcie_no_aspm(void) { } > static inline bool pcie_aspm_enabled(struct pci_dev *pdev) { return false; } > #endif > > +#ifdef CONFIG_HOTPLUG_PCI > +void pci_hp_ignore_link_change(struct pci_dev *pdev); > +void pci_hp_unignore_link_change(struct pci_dev *pdev); > +#else > +static inline void pci_hp_ignore_link_change(struct pci_dev *pdev) { } > +static inline void pci_hp_unignore_link_change(struct pci_dev *pdev) { } > +#endif > + Generally we expose APIs when we really need it. Since you have already identified some use cases where you will use it in other drivers, why not include one such change as an example? > #ifdef CONFIG_PCIEAER > bool pci_aer_available(void); > #else
On Fri, Apr 11, 2025 at 03:28:15PM -0700, Sathyanarayanan Kuppuswamy wrote: > On 4/10/25 8:27 AM, Lukas Wunner wrote: > > Introduce two helpers to annotate code sections which cause spurious link > > changes: pci_hp_ignore_link_change() and pci_hp_unignore_link_change() > > Use those helpers in lieu of masking interrupts in the Slot Control > > register. > > > > Introduce a helper to check whether such a code section is executing > > concurrently and if so, await it: pci_hp_spurious_link_change() > > Invoke the helper in the hotplug IRQ thread pciehp_ist(). Re-use the > > IRQ thread's existing code which ignores DPC-induced link changes unless > > the link is unexpectedly down after reset recovery or the device was > > replaced during the bus reset. > > Since most of the changes in this patch is related to adding framework to > ignore spurious hotplug event, why not split it in to a separate patch? The idea is to ease backporting. The issue fixes VFIO passthrough on v6.13-rc1 and newer, so the patch will have to be backported at least to v6.13, v6.14, v6.15. > Is this fix tested in any platform? Yes, Joel Mathew Thomas successfully tested it: https://bugzilla.kernel.org/show_bug.cgi?id=219765 That's an Asus TUF FA507NU dual-GPU laptop (AMD CPU + Nvidia discrete GPU). The Nvidia GPU is passed through to a VM. > > --- a/drivers/pci/pci.h > > +++ b/drivers/pci/pci.h > > @@ -227,6 +227,7 @@ static inline bool pcie_downstream_port(const struct pci_dev *dev) > > /* Functions for PCI Hotplug drivers to use */ > > int pci_hp_add_bridge(struct pci_dev *dev); > > +bool pci_hp_spurious_link_change(struct pci_dev *pdev); > > Do you expect this function used outside hotplug code? If not why not leave > the declaration in pciehp.h? Any hotplug driver may call this. In particular, there are two other drivers implementing the ->reset_slot() callback: pnv_php.c and s390_pci_hpc.c pnv_php.c does a similar dance as pciehp_hpc.c (before this patch): It disables the interrupt, performs a Secondary Bus Reset, clears spurious events and re-enables the interrupt. I think it can be converted to use the newly introduced API. That should make it more robust against removal or replacement of the device during the Secondary Bus Reset. Also, to cope with runtime suspend to D3cold, there's an ignore_hotplug bit in struct pci_dev. The bit is set by drivers for discrete GPUs and is honored by acpiphp and pciehp. I'd like to remove the bit in favor of the new mechanism introduced here and that means acpiphp will have to be converted to call pci_hp_spurious_link_change(). One thing that's problematic about the current behavior is that hotplug events are ignored wholesale for GPUs which runtime suspend to D3cold. That works for discrete GPUs in laptops which are soldered down on the mainboard, but doesn't work for GPUs which are plugged into an actual hotplug port, e.g. data center GPUs. The new API will allow detecting and ignoring spurious events in a more surgical manner. I envision that __pci_set_power_state() will call pci_hp_ignore_link_change() if the target power state is D3cold. Also vga_switcheroo.c will have to call that. But none of the GPU drivers will have to call pci_ignore_hotplug() anymore. To summarize, there are at least two other hotplug drivers besides pciehp which I expect will call pci_hp_spurious_link_change() in the foreseeable future, acpiphp and pnv_php, hence the declaration is not in pciehp.h but in drivers/pci/pci.h. > > --- a/include/linux/pci.h > > +++ b/include/linux/pci.h > > @@ -1848,6 +1848,14 @@ static inline void pcie_no_aspm(void) { } > > static inline bool pcie_aspm_enabled(struct pci_dev *pdev) { return false; } > > #endif > > +#ifdef CONFIG_HOTPLUG_PCI > > +void pci_hp_ignore_link_change(struct pci_dev *pdev); > > +void pci_hp_unignore_link_change(struct pci_dev *pdev); > > +#else > > +static inline void pci_hp_ignore_link_change(struct pci_dev *pdev) { } > > +static inline void pci_hp_unignore_link_change(struct pci_dev *pdev) { } > > +#endif > > + > > Generally we expose APIs when we really need it. Since you have already > identified some use cases where you will use it in other drivers, why not > include one such change as an example? Mostly because I wanted to get this fix out the door quickly before more people come across the regression it addresses. Converting the Mellanox Ethernet driver to use the API would require an ack from its maintainers. Since it's not urgent, I was planning to do that in a subsequent cycle. Same for the conversion of D3cold handling. Thanks, Lukas
On 4/11/25 8:36 PM, Lukas Wunner wrote: > On Fri, Apr 11, 2025 at 03:28:15PM -0700, Sathyanarayanan Kuppuswamy wrote: >> On 4/10/25 8:27 AM, Lukas Wunner wrote: >>> Introduce two helpers to annotate code sections which cause spurious link >>> changes: pci_hp_ignore_link_change() and pci_hp_unignore_link_change() >>> Use those helpers in lieu of masking interrupts in the Slot Control >>> register. >>> >>> Introduce a helper to check whether such a code section is executing >>> concurrently and if so, await it: pci_hp_spurious_link_change() >>> Invoke the helper in the hotplug IRQ thread pciehp_ist(). Re-use the >>> IRQ thread's existing code which ignores DPC-induced link changes unless >>> the link is unexpectedly down after reset recovery or the device was >>> replaced during the bus reset. >> Since most of the changes in this patch is related to adding framework to >> ignore spurious hotplug event, why not split it in to a separate patch? > The idea is to ease backporting. The issue fixes VFIO passthrough on > v6.13-rc1 and newer, so the patch will have to be backported at least > to v6.13, v6.14, v6.15. Makes sense. > >> Is this fix tested in any platform? > Yes, Joel Mathew Thomas successfully tested it: > > https://bugzilla.kernel.org/show_bug.cgi?id=219765 > > That's an Asus TUF FA507NU dual-GPU laptop (AMD CPU + Nvidia discrete GPU). > The Nvidia GPU is passed through to a VM. > > >>> --- a/drivers/pci/pci.h >>> +++ b/drivers/pci/pci.h >>> @@ -227,6 +227,7 @@ static inline bool pcie_downstream_port(const struct pci_dev *dev) >>> /* Functions for PCI Hotplug drivers to use */ >>> int pci_hp_add_bridge(struct pci_dev *dev); >>> +bool pci_hp_spurious_link_change(struct pci_dev *pdev); >> Do you expect this function used outside hotplug code? If not why not leave >> the declaration in pciehp.h? > Any hotplug driver may call this. In particular, there are two other drivers > implementing the ->reset_slot() callback: pnv_php.c and s390_pci_hpc.c > > pnv_php.c does a similar dance as pciehp_hpc.c (before this patch): > It disables the interrupt, performs a Secondary Bus Reset, clears spurious > events and re-enables the interrupt. I think it can be converted to use > the newly introduced API. That should make it more robust against removal > or replacement of the device during the Secondary Bus Reset. > > Also, to cope with runtime suspend to D3cold, there's an ignore_hotplug > bit in struct pci_dev. The bit is set by drivers for discrete GPUs and > is honored by acpiphp and pciehp. I'd like to remove the bit in favor > of the new mechanism introduced here and that means acpiphp will have to > be converted to call pci_hp_spurious_link_change(). > > One thing that's problematic about the current behavior is that hotplug > events are ignored wholesale for GPUs which runtime suspend to D3cold. > That works for discrete GPUs in laptops which are soldered down on the > mainboard, but doesn't work for GPUs which are plugged into an actual > hotplug port, e.g. data center GPUs. The new API will allow detecting > and ignoring spurious events in a more surgical manner. I envision > that __pci_set_power_state() will call pci_hp_ignore_link_change() > if the target power state is D3cold. Also vga_switcheroo.c will have > to call that. But none of the GPU drivers will have to call > pci_ignore_hotplug() anymore. > > To summarize, there are at least two other hotplug drivers besides pciehp > which I expect will call pci_hp_spurious_link_change() in the foreseeable > future, acpiphp and pnv_php, hence the declaration is not in pciehp.h > but in drivers/pci/pci.h. Thanks for sharing the details. > >>> --- a/include/linux/pci.h >>> +++ b/include/linux/pci.h >>> @@ -1848,6 +1848,14 @@ static inline void pcie_no_aspm(void) { } >>> static inline bool pcie_aspm_enabled(struct pci_dev *pdev) { return false; } >>> #endif >>> +#ifdef CONFIG_HOTPLUG_PCI >>> +void pci_hp_ignore_link_change(struct pci_dev *pdev); >>> +void pci_hp_unignore_link_change(struct pci_dev *pdev); >>> +#else >>> +static inline void pci_hp_ignore_link_change(struct pci_dev *pdev) { } >>> +static inline void pci_hp_unignore_link_change(struct pci_dev *pdev) { } >>> +#endif >>> + >> Generally we expose APIs when we really need it. Since you have already >> identified some use cases where you will use it in other drivers, why not >> include one such change as an example? > Mostly because I wanted to get this fix out the door quickly before more > people come across the regression it addresses. > > Converting the Mellanox Ethernet driver to use the API would require an ack > from its maintainers. Since it's not urgent, I was planning to do that in > a subsequent cycle. Same for the conversion of D3cold handling. Got it. > > Thanks, > > Lukas >
On 4/10/25 8:27 AM, Lukas Wunner wrote: > When a Secondary Bus Reset is issued at a hotplug port, it causes a Data > Link Layer State Changed event as a side effect. On hotplug ports using > in-band presence detect, it additionally causes a Presence Detect Changed > event. > > These spurious events should not result in teardown and re-enumeration of > the device in the slot. Hence commit 2e35afaefe64 ("PCI: pciehp: Add > reset_slot() method") masked the Presence Detect Changed Enable bit in the > Slot Control register during a Secondary Bus Reset. Commit 06a8d89af551 > ("PCI: pciehp: Disable link notification across slot reset") additionally > masked the Data Link Layer State Changed Enable bit. > > However masking those bits only disables interrupt generation (PCIe r6.2 > sec 6.7.3.1). The events are still visible in the Slot Status register > and picked up by the IRQ handler if it runs during a Secondary Bus Reset. > This can happen if the interrupt is shared or if an unmasked hotplug event > occurs, e.g. Attention Button Pressed or Power Fault Detected. > > The likelihood of this happening used to be small, so it wasn't much of a > problem in practice. That has changed with the recent introduction of > bandwidth control in v6.13-rc1 with commit 665745f27487 ("PCI/bwctrl: > Re-add BW notification portdrv as PCIe BW controller"): > > Bandwidth control shares the interrupt with PCIe hotplug. A Secondary Bus > Reset causes a Link Bandwidth Notification, so the hotplug IRQ handler > runs, picks up the masked events and tears down the device in the slot. > > As a result, Joel reports VFIO passthrough failure of a GPU, which Ilpo > root-caused to the incorrect handling of masked hotplug events. > > Clearly, a more reliable way is needed to ignore spurious hotplug events. > > For Downstream Port Containment, a new ignore mechanism was introduced by > commit a97396c6eb13 ("PCI: pciehp: Ignore Link Down/Up caused by DPC"). > It has been working reliably for the past four years. > > Adapt it for Secondary Bus Resets. > > Introduce two helpers to annotate code sections which cause spurious link > changes: pci_hp_ignore_link_change() and pci_hp_unignore_link_change() > Use those helpers in lieu of masking interrupts in the Slot Control > register. > > Introduce a helper to check whether such a code section is executing > concurrently and if so, await it: pci_hp_spurious_link_change() > Invoke the helper in the hotplug IRQ thread pciehp_ist(). Re-use the > IRQ thread's existing code which ignores DPC-induced link changes unless > the link is unexpectedly down after reset recovery or the device was > replaced during the bus reset. > > That code block in pciehp_ist() was previously only executed if a Data > Link Layer State Changed event has occurred. Additionally execute it for > Presence Detect Changed events. That's necessary for compatibility with > PCIe r1.0 hotplug ports because Data Link Layer State Changed didn't exist > before PCIe r1.1. DPC was added with PCIe r3.1 and thus DPC-capable > hotplug ports always support Data Link Layer State Changed events. > But the same cannot be assumed for Secondary Bus Reset, which already > existed in PCIe r1.0. > > Secondary Bus Reset is only one of many causes of spurious link changes. > Others include runtime suspend to D3cold, firmware updates or FPGA > reconfiguration. The new pci_hp_{,un}ignore_link_change() helpers may be > used by all kinds of drivers to annotate such code sections, hence their > declarations are publicly visible in <linux/pci.h>. A case in point is > the Mellanox Ethernet driver which disables a firmware reset feature if > the Ethernet card is attached to a hotplug port, see commit 3d7a3f2612d7 > ("net/mlx5: Nack sync reset request when HotPlug is enabled"). Going > forward, PCIe hotplug will be able to cope gracefully with all such use > cases once the code sections are properly annotated. > > The new helpers internally use two bits in struct pci_dev's priv_flags as > well as a wait_queue. This mirrors what was done for DPC by commit > a97396c6eb13 ("PCI: pciehp: Ignore Link Down/Up caused by DPC"). That may > be insufficient if spurious link changes are caused by multiple sources > simultaneously. An example might be a Secondary Bus Reset issued by AER > during FPGA reconfiguration. If this turns out to happen in real life, > support for it can easily be added by replacing the PCI_LINK_CHANGING flag > with an atomic_t counter incremented by pci_hp_ignore_link_change() and > decremented by pci_hp_unignore_link_change(). Instead of awaiting a zero > PCI_LINK_CHANGING flag, the pci_hp_spurious_link_change() helper would > then simply await a zero counter. > > Fixes: 665745f27487 ("PCI/bwctrl: Re-add BW notification portdrv as PCIe BW controller") > Reported-by: Joel Mathew Thomas <proxy0@tutamail.com> > Closes: https://bugzilla.kernel.org/show_bug.cgi?id=219765 > Tested-by: Joel Mathew Thomas <proxy0@tutamail.com> > Signed-off-by: Lukas Wunner <lukas@wunner.de> > Cc: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com> Looks good to me Reviewed-by: Kuppuswamy Sathyanarayanan <sathyanarayanan.kuppuswamy@linux.intel.com> > --- > drivers/pci/hotplug/pci_hotplug_core.c | 69 ++++++++++++++++++++++++++++++++++ > drivers/pci/hotplug/pciehp_hpc.c | 35 ++++++----------- > drivers/pci/pci.h | 3 ++ > include/linux/pci.h | 8 ++++ > 4 files changed, 92 insertions(+), 23 deletions(-) > > diff --git a/drivers/pci/hotplug/pci_hotplug_core.c b/drivers/pci/hotplug/pci_hotplug_core.c > index d30f131..d8c5856 100644 > --- a/drivers/pci/hotplug/pci_hotplug_core.c > +++ b/drivers/pci/hotplug/pci_hotplug_core.c > @@ -492,6 +492,75 @@ void pci_hp_destroy(struct hotplug_slot *slot) > } > EXPORT_SYMBOL_GPL(pci_hp_destroy); > > +static DECLARE_WAIT_QUEUE_HEAD(pci_hp_link_change_wq); > + > +/** > + * pci_hp_ignore_link_change - begin code section causing spurious link changes > + * @pdev: PCI hotplug bridge > + * > + * Mark the beginning of a code section causing spurious link changes on the > + * Secondary Bus of @pdev, e.g. as a side effect of a Secondary Bus Reset, > + * D3cold transition, firmware update or FPGA reconfiguration. > + * > + * Hotplug drivers can thus check whether such a code section is executing > + * concurrently, await it with pci_hp_spurious_link_change() and ignore the > + * resulting link change events. > + * > + * Must be paired with pci_hp_unignore_link_change(). May be called both > + * from the PCI core and from Endpoint drivers. May be called for bridges > + * which are not hotplug-capable, in which case it has no effect because > + * no hotplug driver is bound to the bridge. > + */ > +void pci_hp_ignore_link_change(struct pci_dev *pdev) > +{ > + set_bit(PCI_LINK_CHANGING, &pdev->priv_flags); > + smp_mb__after_atomic(); /* pairs with implied barrier of wait_event() */ > +} > + > +/** > + * pci_hp_unignore_link_change - end code section causing spurious link changes > + * @pdev: PCI hotplug bridge > + * > + * Mark the end of a code section causing spurious link changes on the > + * Secondary Bus of @pdev. Must be paired with pci_hp_ignore_link_change(). > + */ > +void pci_hp_unignore_link_change(struct pci_dev *pdev) > +{ > + set_bit(PCI_LINK_CHANGED, &pdev->priv_flags); > + mb(); /* ensure pci_hp_spurious_link_change() sees either bit set */ > + clear_bit(PCI_LINK_CHANGING, &pdev->priv_flags); > + wake_up_all(&pci_hp_link_change_wq); > +} > + > +/** > + * pci_hp_spurious_link_change - check for spurious link changes > + * @pdev: PCI hotplug bridge > + * > + * Check whether a code section is executing concurrently which is causing > + * spurious link changes on the Secondary Bus of @pdev. Await the end of the > + * code section if so. > + * > + * Return %true if such a code section has been executing concurrently, > + * otherwise %false. Also return %true if such a code section has not been > + * executing concurrently, but at least once since the last invocation of this > + * function. > + * > + * May be called by hotplug drivers to check whether a link change is spurious > + * and can be ignored. > + * > + * Because a genuine link change may have occurred in-between a spurious link > + * change and the invocation of this function, hotplug drivers should perform > + * sanity checks such as retrieving the current link state and bringing down > + * the slot if the link is down. > + */ > +bool pci_hp_spurious_link_change(struct pci_dev *pdev) > +{ > + wait_event(pci_hp_link_change_wq, > + !test_bit(PCI_LINK_CHANGING, &pdev->priv_flags)); > + > + return test_and_clear_bit(PCI_LINK_CHANGED, &pdev->priv_flags); > +} > + > static int __init pci_hotplug_init(void) > { > int result; > diff --git a/drivers/pci/hotplug/pciehp_hpc.c b/drivers/pci/hotplug/pciehp_hpc.c > index 388fbed..c98d310 100644 > --- a/drivers/pci/hotplug/pciehp_hpc.c > +++ b/drivers/pci/hotplug/pciehp_hpc.c > @@ -592,21 +592,21 @@ bool pciehp_device_replaced(struct controller *ctrl) > return false; > } > > -static void pciehp_ignore_dpc_link_change(struct controller *ctrl, > - struct pci_dev *pdev, int irq, > - u16 ignored_events) > +static void pciehp_ignore_link_change(struct controller *ctrl, > + struct pci_dev *pdev, int irq, > + u16 ignored_events) > { > /* > * Ignore link changes which occurred while waiting for DPC recovery. > * Could be several if DPC triggered multiple times consecutively. > + * Also ignore link changes caused by Secondary Bus Reset etc. > */ > synchronize_hardirq(irq); > atomic_and(~ignored_events, &ctrl->pending_events); > if (pciehp_poll_mode) > pcie_capability_write_word(pdev, PCI_EXP_SLTSTA, > ignored_events); > - ctrl_info(ctrl, "Slot(%s): Link Down/Up ignored (recovered by DPC)\n", > - slot_name(ctrl)); > + ctrl_info(ctrl, "Slot(%s): Link Down/Up ignored\n", slot_name(ctrl)); > > /* > * If the link is unexpectedly down after successful recovery, > @@ -762,9 +762,11 @@ static irqreturn_t pciehp_ist(int irq, void *dev_id) > > /* > * Ignore Link Down/Up events caused by Downstream Port Containment > - * if recovery from the error succeeded. > + * if recovery succeeded, or caused by Secondary Bus Reset, > + * suspend to D3cold, firmware update, FPGA reconfiguration, etc. > */ > - if ((events & PCI_EXP_SLTSTA_DLLSC) && pci_dpc_recovered(pdev) && > + if ((events & (PCI_EXP_SLTSTA_PDC | PCI_EXP_SLTSTA_DLLSC)) && > + (pci_dpc_recovered(pdev) || pci_hp_spurious_link_change(pdev)) && > ctrl->state == ON_STATE) { > u16 ignored_events = PCI_EXP_SLTSTA_DLLSC; > > @@ -772,7 +774,7 @@ static irqreturn_t pciehp_ist(int irq, void *dev_id) > ignored_events |= events & PCI_EXP_SLTSTA_PDC; > > events &= ~ignored_events; > - pciehp_ignore_dpc_link_change(ctrl, pdev, irq, ignored_events); > + pciehp_ignore_link_change(ctrl, pdev, irq, ignored_events); > } > > /* > @@ -937,7 +939,6 @@ int pciehp_reset_slot(struct hotplug_slot *hotplug_slot, bool probe) > { > struct controller *ctrl = to_ctrl(hotplug_slot); > struct pci_dev *pdev = ctrl_dev(ctrl); > - u16 stat_mask = 0, ctrl_mask = 0; > int rc; > > if (probe) > @@ -945,23 +946,11 @@ int pciehp_reset_slot(struct hotplug_slot *hotplug_slot, bool probe) > > down_write_nested(&ctrl->reset_lock, ctrl->depth); > > - if (!ATTN_BUTTN(ctrl)) { > - ctrl_mask |= PCI_EXP_SLTCTL_PDCE; > - stat_mask |= PCI_EXP_SLTSTA_PDC; > - } > - ctrl_mask |= PCI_EXP_SLTCTL_DLLSCE; > - stat_mask |= PCI_EXP_SLTSTA_DLLSC; > - > - pcie_write_cmd(ctrl, 0, ctrl_mask); > - ctrl_dbg(ctrl, "%s: SLOTCTRL %x write cmd %x\n", __func__, > - pci_pcie_cap(ctrl->pcie->port) + PCI_EXP_SLTCTL, 0); > + pci_hp_ignore_link_change(pdev); > > rc = pci_bridge_secondary_bus_reset(ctrl->pcie->port); > > - pcie_capability_write_word(pdev, PCI_EXP_SLTSTA, stat_mask); > - pcie_write_cmd_nowait(ctrl, ctrl_mask, ctrl_mask); > - ctrl_dbg(ctrl, "%s: SLOTCTRL %x write cmd %x\n", __func__, > - pci_pcie_cap(ctrl->pcie->port) + PCI_EXP_SLTCTL, ctrl_mask); > + pci_hp_unignore_link_change(pdev); > > up_write(&ctrl->reset_lock); > return rc; > diff --git a/drivers/pci/pci.h b/drivers/pci/pci.h > index b81e99c..7db798b 100644 > --- a/drivers/pci/pci.h > +++ b/drivers/pci/pci.h > @@ -227,6 +227,7 @@ static inline bool pcie_downstream_port(const struct pci_dev *dev) > > /* Functions for PCI Hotplug drivers to use */ > int pci_hp_add_bridge(struct pci_dev *dev); > +bool pci_hp_spurious_link_change(struct pci_dev *pdev); > > #if defined(CONFIG_SYSFS) && defined(HAVE_PCI_LEGACY) > void pci_create_legacy_files(struct pci_bus *bus); > @@ -557,6 +558,8 @@ static inline int pci_dev_set_disconnected(struct pci_dev *dev, void *unused) > #define PCI_DPC_RECOVERED 1 > #define PCI_DPC_RECOVERING 2 > #define PCI_DEV_REMOVED 3 > +#define PCI_LINK_CHANGED 4 > +#define PCI_LINK_CHANGING 5 > > static inline void pci_dev_assign_added(struct pci_dev *dev) > { > diff --git a/include/linux/pci.h b/include/linux/pci.h > index 0e8e3fd..833b54f 100644 > --- a/include/linux/pci.h > +++ b/include/linux/pci.h > @@ -1848,6 +1848,14 @@ static inline void pcie_no_aspm(void) { } > static inline bool pcie_aspm_enabled(struct pci_dev *pdev) { return false; } > #endif > > +#ifdef CONFIG_HOTPLUG_PCI > +void pci_hp_ignore_link_change(struct pci_dev *pdev); > +void pci_hp_unignore_link_change(struct pci_dev *pdev); > +#else > +static inline void pci_hp_ignore_link_change(struct pci_dev *pdev) { } > +static inline void pci_hp_unignore_link_change(struct pci_dev *pdev) { } > +#endif > + > #ifdef CONFIG_PCIEAER > bool pci_aer_available(void); > #else
On Thu, 10 Apr 2025, Lukas Wunner wrote: > When a Secondary Bus Reset is issued at a hotplug port, it causes a Data > Link Layer State Changed event as a side effect. On hotplug ports using > in-band presence detect, it additionally causes a Presence Detect Changed > event. > > These spurious events should not result in teardown and re-enumeration of > the device in the slot. Hence commit 2e35afaefe64 ("PCI: pciehp: Add > reset_slot() method") masked the Presence Detect Changed Enable bit in the > Slot Control register during a Secondary Bus Reset. Commit 06a8d89af551 > ("PCI: pciehp: Disable link notification across slot reset") additionally > masked the Data Link Layer State Changed Enable bit. > > However masking those bits only disables interrupt generation (PCIe r6.2 > sec 6.7.3.1). The events are still visible in the Slot Status register > and picked up by the IRQ handler if it runs during a Secondary Bus Reset. > This can happen if the interrupt is shared or if an unmasked hotplug event > occurs, e.g. Attention Button Pressed or Power Fault Detected. > > The likelihood of this happening used to be small, so it wasn't much of a > problem in practice. That has changed with the recent introduction of > bandwidth control in v6.13-rc1 with commit 665745f27487 ("PCI/bwctrl: > Re-add BW notification portdrv as PCIe BW controller"): > > Bandwidth control shares the interrupt with PCIe hotplug. A Secondary Bus > Reset causes a Link Bandwidth Notification, so the hotplug IRQ handler > runs, picks up the masked events and tears down the device in the slot. > > As a result, Joel reports VFIO passthrough failure of a GPU, which Ilpo > root-caused to the incorrect handling of masked hotplug events. > > Clearly, a more reliable way is needed to ignore spurious hotplug events. > > For Downstream Port Containment, a new ignore mechanism was introduced by > commit a97396c6eb13 ("PCI: pciehp: Ignore Link Down/Up caused by DPC"). > It has been working reliably for the past four years. > > Adapt it for Secondary Bus Resets. > > Introduce two helpers to annotate code sections which cause spurious link > changes: pci_hp_ignore_link_change() and pci_hp_unignore_link_change() > Use those helpers in lieu of masking interrupts in the Slot Control > register. > > Introduce a helper to check whether such a code section is executing > concurrently and if so, await it: pci_hp_spurious_link_change() > Invoke the helper in the hotplug IRQ thread pciehp_ist(). Re-use the > IRQ thread's existing code which ignores DPC-induced link changes unless > the link is unexpectedly down after reset recovery or the device was > replaced during the bus reset. > > That code block in pciehp_ist() was previously only executed if a Data > Link Layer State Changed event has occurred. Additionally execute it for > Presence Detect Changed events. That's necessary for compatibility with > PCIe r1.0 hotplug ports because Data Link Layer State Changed didn't exist > before PCIe r1.1. DPC was added with PCIe r3.1 and thus DPC-capable > hotplug ports always support Data Link Layer State Changed events. > But the same cannot be assumed for Secondary Bus Reset, which already > existed in PCIe r1.0. > > Secondary Bus Reset is only one of many causes of spurious link changes. > Others include runtime suspend to D3cold, firmware updates or FPGA > reconfiguration. The new pci_hp_{,un}ignore_link_change() helpers may be > used by all kinds of drivers to annotate such code sections, hence their > declarations are publicly visible in <linux/pci.h>. A case in point is > the Mellanox Ethernet driver which disables a firmware reset feature if > the Ethernet card is attached to a hotplug port, see commit 3d7a3f2612d7 > ("net/mlx5: Nack sync reset request when HotPlug is enabled"). Going > forward, PCIe hotplug will be able to cope gracefully with all such use > cases once the code sections are properly annotated. > > The new helpers internally use two bits in struct pci_dev's priv_flags as > well as a wait_queue. This mirrors what was done for DPC by commit > a97396c6eb13 ("PCI: pciehp: Ignore Link Down/Up caused by DPC"). That may > be insufficient if spurious link changes are caused by multiple sources > simultaneously. An example might be a Secondary Bus Reset issued by AER > during FPGA reconfiguration. If this turns out to happen in real life, > support for it can easily be added by replacing the PCI_LINK_CHANGING flag > with an atomic_t counter incremented by pci_hp_ignore_link_change() and > decremented by pci_hp_unignore_link_change(). Instead of awaiting a zero > PCI_LINK_CHANGING flag, the pci_hp_spurious_link_change() helper would > then simply await a zero counter. > > Fixes: 665745f27487 ("PCI/bwctrl: Re-add BW notification portdrv as PCIe BW controller") > Reported-by: Joel Mathew Thomas <proxy0@tutamail.com> > Closes: https://bugzilla.kernel.org/show_bug.cgi?id=219765 > Tested-by: Joel Mathew Thomas <proxy0@tutamail.com> > Signed-off-by: Lukas Wunner <lukas@wunner.de> > Cc: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com> > --- > drivers/pci/hotplug/pci_hotplug_core.c | 69 ++++++++++++++++++++++++++++++++++ > drivers/pci/hotplug/pciehp_hpc.c | 35 ++++++----------- > drivers/pci/pci.h | 3 ++ > include/linux/pci.h | 8 ++++ > 4 files changed, 92 insertions(+), 23 deletions(-) > > diff --git a/drivers/pci/hotplug/pci_hotplug_core.c b/drivers/pci/hotplug/pci_hotplug_core.c > index d30f131..d8c5856 100644 > --- a/drivers/pci/hotplug/pci_hotplug_core.c > +++ b/drivers/pci/hotplug/pci_hotplug_core.c > @@ -492,6 +492,75 @@ void pci_hp_destroy(struct hotplug_slot *slot) > } > EXPORT_SYMBOL_GPL(pci_hp_destroy); > > +static DECLARE_WAIT_QUEUE_HEAD(pci_hp_link_change_wq); > + > +/** > + * pci_hp_ignore_link_change - begin code section causing spurious link changes > + * @pdev: PCI hotplug bridge > + * > + * Mark the beginning of a code section causing spurious link changes on the > + * Secondary Bus of @pdev, e.g. as a side effect of a Secondary Bus Reset, > + * D3cold transition, firmware update or FPGA reconfiguration. > + * > + * Hotplug drivers can thus check whether such a code section is executing > + * concurrently, await it with pci_hp_spurious_link_change() and ignore the > + * resulting link change events. > + * > + * Must be paired with pci_hp_unignore_link_change(). May be called both > + * from the PCI core and from Endpoint drivers. May be called for bridges > + * which are not hotplug-capable, in which case it has no effect because > + * no hotplug driver is bound to the bridge. > + */ > +void pci_hp_ignore_link_change(struct pci_dev *pdev) > +{ > + set_bit(PCI_LINK_CHANGING, &pdev->priv_flags); > + smp_mb__after_atomic(); /* pairs with implied barrier of wait_event() */ > +} > + > +/** > + * pci_hp_unignore_link_change - end code section causing spurious link changes > + * @pdev: PCI hotplug bridge > + * > + * Mark the end of a code section causing spurious link changes on the > + * Secondary Bus of @pdev. Must be paired with pci_hp_ignore_link_change(). > + */ > +void pci_hp_unignore_link_change(struct pci_dev *pdev) > +{ > + set_bit(PCI_LINK_CHANGED, &pdev->priv_flags); > + mb(); /* ensure pci_hp_spurious_link_change() sees either bit set */ > + clear_bit(PCI_LINK_CHANGING, &pdev->priv_flags); > + wake_up_all(&pci_hp_link_change_wq); > +} > + > +/** > + * pci_hp_spurious_link_change - check for spurious link changes > + * @pdev: PCI hotplug bridge > + * > + * Check whether a code section is executing concurrently which is causing > + * spurious link changes on the Secondary Bus of @pdev. Await the end of the > + * code section if so. > + * > + * Return %true if such a code section has been executing concurrently, Return: And I think it's assumed to be the last, not in the middle of the function's description. > + * otherwise %false. Also return %true if such a code section has not been > + * executing concurrently, but at least once since the last invocation of this > + * function. > + * > + * May be called by hotplug drivers to check whether a link change is spurious > + * and can be ignored. > + * > + * Because a genuine link change may have occurred in-between a spurious link > + * change and the invocation of this function, hotplug drivers should perform > + * sanity checks such as retrieving the current link state and bringing down > + * the slot if the link is down. > + */ > +bool pci_hp_spurious_link_change(struct pci_dev *pdev) > +{ > + wait_event(pci_hp_link_change_wq, > + !test_bit(PCI_LINK_CHANGING, &pdev->priv_flags)); > + > + return test_and_clear_bit(PCI_LINK_CHANGED, &pdev->priv_flags); > +} > + > static int __init pci_hotplug_init(void) > { > int result; > diff --git a/drivers/pci/hotplug/pciehp_hpc.c b/drivers/pci/hotplug/pciehp_hpc.c > index 388fbed..c98d310 100644 > --- a/drivers/pci/hotplug/pciehp_hpc.c > +++ b/drivers/pci/hotplug/pciehp_hpc.c > @@ -592,21 +592,21 @@ bool pciehp_device_replaced(struct controller *ctrl) > return false; > } > > -static void pciehp_ignore_dpc_link_change(struct controller *ctrl, > - struct pci_dev *pdev, int irq, > - u16 ignored_events) > +static void pciehp_ignore_link_change(struct controller *ctrl, > + struct pci_dev *pdev, int irq, > + u16 ignored_events) > { > /* > * Ignore link changes which occurred while waiting for DPC recovery. > * Could be several if DPC triggered multiple times consecutively. > + * Also ignore link changes caused by Secondary Bus Reset etc. Comma before etc. > */ > synchronize_hardirq(irq); > atomic_and(~ignored_events, &ctrl->pending_events); > if (pciehp_poll_mode) > pcie_capability_write_word(pdev, PCI_EXP_SLTSTA, > ignored_events); > - ctrl_info(ctrl, "Slot(%s): Link Down/Up ignored (recovered by DPC)\n", > - slot_name(ctrl)); > + ctrl_info(ctrl, "Slot(%s): Link Down/Up ignored\n", slot_name(ctrl)); > > /* > * If the link is unexpectedly down after successful recovery, > @@ -762,9 +762,11 @@ static irqreturn_t pciehp_ist(int irq, void *dev_id) > > /* > * Ignore Link Down/Up events caused by Downstream Port Containment > - * if recovery from the error succeeded. > + * if recovery succeeded, or caused by Secondary Bus Reset, > + * suspend to D3cold, firmware update, FPGA reconfiguration, etc. > */ > - if ((events & PCI_EXP_SLTSTA_DLLSC) && pci_dpc_recovered(pdev) && > + if ((events & (PCI_EXP_SLTSTA_PDC | PCI_EXP_SLTSTA_DLLSC)) && > + (pci_dpc_recovered(pdev) || pci_hp_spurious_link_change(pdev)) && > ctrl->state == ON_STATE) { > u16 ignored_events = PCI_EXP_SLTSTA_DLLSC; > > @@ -772,7 +774,7 @@ static irqreturn_t pciehp_ist(int irq, void *dev_id) > ignored_events |= events & PCI_EXP_SLTSTA_PDC; > > events &= ~ignored_events; > - pciehp_ignore_dpc_link_change(ctrl, pdev, irq, ignored_events); > + pciehp_ignore_link_change(ctrl, pdev, irq, ignored_events); > } > > /* > @@ -937,7 +939,6 @@ int pciehp_reset_slot(struct hotplug_slot *hotplug_slot, bool probe) > { > struct controller *ctrl = to_ctrl(hotplug_slot); > struct pci_dev *pdev = ctrl_dev(ctrl); > - u16 stat_mask = 0, ctrl_mask = 0; > int rc; > > if (probe) > @@ -945,23 +946,11 @@ int pciehp_reset_slot(struct hotplug_slot *hotplug_slot, bool probe) > > down_write_nested(&ctrl->reset_lock, ctrl->depth); > > - if (!ATTN_BUTTN(ctrl)) { > - ctrl_mask |= PCI_EXP_SLTCTL_PDCE; > - stat_mask |= PCI_EXP_SLTSTA_PDC; > - } > - ctrl_mask |= PCI_EXP_SLTCTL_DLLSCE; > - stat_mask |= PCI_EXP_SLTSTA_DLLSC; > - > - pcie_write_cmd(ctrl, 0, ctrl_mask); > - ctrl_dbg(ctrl, "%s: SLOTCTRL %x write cmd %x\n", __func__, > - pci_pcie_cap(ctrl->pcie->port) + PCI_EXP_SLTCTL, 0); > + pci_hp_ignore_link_change(pdev); > > rc = pci_bridge_secondary_bus_reset(ctrl->pcie->port); > > - pcie_capability_write_word(pdev, PCI_EXP_SLTSTA, stat_mask); > - pcie_write_cmd_nowait(ctrl, ctrl_mask, ctrl_mask); > - ctrl_dbg(ctrl, "%s: SLOTCTRL %x write cmd %x\n", __func__, > - pci_pcie_cap(ctrl->pcie->port) + PCI_EXP_SLTCTL, ctrl_mask); > + pci_hp_unignore_link_change(pdev); > > up_write(&ctrl->reset_lock); > return rc; > diff --git a/drivers/pci/pci.h b/drivers/pci/pci.h > index b81e99c..7db798b 100644 > --- a/drivers/pci/pci.h > +++ b/drivers/pci/pci.h > @@ -227,6 +227,7 @@ static inline bool pcie_downstream_port(const struct pci_dev *dev) > > /* Functions for PCI Hotplug drivers to use */ > int pci_hp_add_bridge(struct pci_dev *dev); > +bool pci_hp_spurious_link_change(struct pci_dev *pdev); > > #if defined(CONFIG_SYSFS) && defined(HAVE_PCI_LEGACY) > void pci_create_legacy_files(struct pci_bus *bus); > @@ -557,6 +558,8 @@ static inline int pci_dev_set_disconnected(struct pci_dev *dev, void *unused) > #define PCI_DPC_RECOVERED 1 > #define PCI_DPC_RECOVERING 2 > #define PCI_DEV_REMOVED 3 > +#define PCI_LINK_CHANGED 4 > +#define PCI_LINK_CHANGING 5 > > static inline void pci_dev_assign_added(struct pci_dev *dev) > { > diff --git a/include/linux/pci.h b/include/linux/pci.h > index 0e8e3fd..833b54f 100644 > --- a/include/linux/pci.h > +++ b/include/linux/pci.h > @@ -1848,6 +1848,14 @@ static inline void pcie_no_aspm(void) { } > static inline bool pcie_aspm_enabled(struct pci_dev *pdev) { return false; } > #endif > > +#ifdef CONFIG_HOTPLUG_PCI > +void pci_hp_ignore_link_change(struct pci_dev *pdev); > +void pci_hp_unignore_link_change(struct pci_dev *pdev); > +#else > +static inline void pci_hp_ignore_link_change(struct pci_dev *pdev) { } > +static inline void pci_hp_unignore_link_change(struct pci_dev *pdev) { } > +#endif > + > #ifdef CONFIG_PCIEAER > bool pci_aer_available(void); > #else > Just nits above. Reviewed-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
diff --git a/drivers/pci/hotplug/pci_hotplug_core.c b/drivers/pci/hotplug/pci_hotplug_core.c index d30f131..d8c5856 100644 --- a/drivers/pci/hotplug/pci_hotplug_core.c +++ b/drivers/pci/hotplug/pci_hotplug_core.c @@ -492,6 +492,75 @@ void pci_hp_destroy(struct hotplug_slot *slot) } EXPORT_SYMBOL_GPL(pci_hp_destroy); +static DECLARE_WAIT_QUEUE_HEAD(pci_hp_link_change_wq); + +/** + * pci_hp_ignore_link_change - begin code section causing spurious link changes + * @pdev: PCI hotplug bridge + * + * Mark the beginning of a code section causing spurious link changes on the + * Secondary Bus of @pdev, e.g. as a side effect of a Secondary Bus Reset, + * D3cold transition, firmware update or FPGA reconfiguration. + * + * Hotplug drivers can thus check whether such a code section is executing + * concurrently, await it with pci_hp_spurious_link_change() and ignore the + * resulting link change events. + * + * Must be paired with pci_hp_unignore_link_change(). May be called both + * from the PCI core and from Endpoint drivers. May be called for bridges + * which are not hotplug-capable, in which case it has no effect because + * no hotplug driver is bound to the bridge. + */ +void pci_hp_ignore_link_change(struct pci_dev *pdev) +{ + set_bit(PCI_LINK_CHANGING, &pdev->priv_flags); + smp_mb__after_atomic(); /* pairs with implied barrier of wait_event() */ +} + +/** + * pci_hp_unignore_link_change - end code section causing spurious link changes + * @pdev: PCI hotplug bridge + * + * Mark the end of a code section causing spurious link changes on the + * Secondary Bus of @pdev. Must be paired with pci_hp_ignore_link_change(). + */ +void pci_hp_unignore_link_change(struct pci_dev *pdev) +{ + set_bit(PCI_LINK_CHANGED, &pdev->priv_flags); + mb(); /* ensure pci_hp_spurious_link_change() sees either bit set */ + clear_bit(PCI_LINK_CHANGING, &pdev->priv_flags); + wake_up_all(&pci_hp_link_change_wq); +} + +/** + * pci_hp_spurious_link_change - check for spurious link changes + * @pdev: PCI hotplug bridge + * + * Check whether a code section is executing concurrently which is causing + * spurious link changes on the Secondary Bus of @pdev. Await the end of the + * code section if so. + * + * Return %true if such a code section has been executing concurrently, + * otherwise %false. Also return %true if such a code section has not been + * executing concurrently, but at least once since the last invocation of this + * function. + * + * May be called by hotplug drivers to check whether a link change is spurious + * and can be ignored. + * + * Because a genuine link change may have occurred in-between a spurious link + * change and the invocation of this function, hotplug drivers should perform + * sanity checks such as retrieving the current link state and bringing down + * the slot if the link is down. + */ +bool pci_hp_spurious_link_change(struct pci_dev *pdev) +{ + wait_event(pci_hp_link_change_wq, + !test_bit(PCI_LINK_CHANGING, &pdev->priv_flags)); + + return test_and_clear_bit(PCI_LINK_CHANGED, &pdev->priv_flags); +} + static int __init pci_hotplug_init(void) { int result; diff --git a/drivers/pci/hotplug/pciehp_hpc.c b/drivers/pci/hotplug/pciehp_hpc.c index 388fbed..c98d310 100644 --- a/drivers/pci/hotplug/pciehp_hpc.c +++ b/drivers/pci/hotplug/pciehp_hpc.c @@ -592,21 +592,21 @@ bool pciehp_device_replaced(struct controller *ctrl) return false; } -static void pciehp_ignore_dpc_link_change(struct controller *ctrl, - struct pci_dev *pdev, int irq, - u16 ignored_events) +static void pciehp_ignore_link_change(struct controller *ctrl, + struct pci_dev *pdev, int irq, + u16 ignored_events) { /* * Ignore link changes which occurred while waiting for DPC recovery. * Could be several if DPC triggered multiple times consecutively. + * Also ignore link changes caused by Secondary Bus Reset etc. */ synchronize_hardirq(irq); atomic_and(~ignored_events, &ctrl->pending_events); if (pciehp_poll_mode) pcie_capability_write_word(pdev, PCI_EXP_SLTSTA, ignored_events); - ctrl_info(ctrl, "Slot(%s): Link Down/Up ignored (recovered by DPC)\n", - slot_name(ctrl)); + ctrl_info(ctrl, "Slot(%s): Link Down/Up ignored\n", slot_name(ctrl)); /* * If the link is unexpectedly down after successful recovery, @@ -762,9 +762,11 @@ static irqreturn_t pciehp_ist(int irq, void *dev_id) /* * Ignore Link Down/Up events caused by Downstream Port Containment - * if recovery from the error succeeded. + * if recovery succeeded, or caused by Secondary Bus Reset, + * suspend to D3cold, firmware update, FPGA reconfiguration, etc. */ - if ((events & PCI_EXP_SLTSTA_DLLSC) && pci_dpc_recovered(pdev) && + if ((events & (PCI_EXP_SLTSTA_PDC | PCI_EXP_SLTSTA_DLLSC)) && + (pci_dpc_recovered(pdev) || pci_hp_spurious_link_change(pdev)) && ctrl->state == ON_STATE) { u16 ignored_events = PCI_EXP_SLTSTA_DLLSC; @@ -772,7 +774,7 @@ static irqreturn_t pciehp_ist(int irq, void *dev_id) ignored_events |= events & PCI_EXP_SLTSTA_PDC; events &= ~ignored_events; - pciehp_ignore_dpc_link_change(ctrl, pdev, irq, ignored_events); + pciehp_ignore_link_change(ctrl, pdev, irq, ignored_events); } /* @@ -937,7 +939,6 @@ int pciehp_reset_slot(struct hotplug_slot *hotplug_slot, bool probe) { struct controller *ctrl = to_ctrl(hotplug_slot); struct pci_dev *pdev = ctrl_dev(ctrl); - u16 stat_mask = 0, ctrl_mask = 0; int rc; if (probe) @@ -945,23 +946,11 @@ int pciehp_reset_slot(struct hotplug_slot *hotplug_slot, bool probe) down_write_nested(&ctrl->reset_lock, ctrl->depth); - if (!ATTN_BUTTN(ctrl)) { - ctrl_mask |= PCI_EXP_SLTCTL_PDCE; - stat_mask |= PCI_EXP_SLTSTA_PDC; - } - ctrl_mask |= PCI_EXP_SLTCTL_DLLSCE; - stat_mask |= PCI_EXP_SLTSTA_DLLSC; - - pcie_write_cmd(ctrl, 0, ctrl_mask); - ctrl_dbg(ctrl, "%s: SLOTCTRL %x write cmd %x\n", __func__, - pci_pcie_cap(ctrl->pcie->port) + PCI_EXP_SLTCTL, 0); + pci_hp_ignore_link_change(pdev); rc = pci_bridge_secondary_bus_reset(ctrl->pcie->port); - pcie_capability_write_word(pdev, PCI_EXP_SLTSTA, stat_mask); - pcie_write_cmd_nowait(ctrl, ctrl_mask, ctrl_mask); - ctrl_dbg(ctrl, "%s: SLOTCTRL %x write cmd %x\n", __func__, - pci_pcie_cap(ctrl->pcie->port) + PCI_EXP_SLTCTL, ctrl_mask); + pci_hp_unignore_link_change(pdev); up_write(&ctrl->reset_lock); return rc; diff --git a/drivers/pci/pci.h b/drivers/pci/pci.h index b81e99c..7db798b 100644 --- a/drivers/pci/pci.h +++ b/drivers/pci/pci.h @@ -227,6 +227,7 @@ static inline bool pcie_downstream_port(const struct pci_dev *dev) /* Functions for PCI Hotplug drivers to use */ int pci_hp_add_bridge(struct pci_dev *dev); +bool pci_hp_spurious_link_change(struct pci_dev *pdev); #if defined(CONFIG_SYSFS) && defined(HAVE_PCI_LEGACY) void pci_create_legacy_files(struct pci_bus *bus); @@ -557,6 +558,8 @@ static inline int pci_dev_set_disconnected(struct pci_dev *dev, void *unused) #define PCI_DPC_RECOVERED 1 #define PCI_DPC_RECOVERING 2 #define PCI_DEV_REMOVED 3 +#define PCI_LINK_CHANGED 4 +#define PCI_LINK_CHANGING 5 static inline void pci_dev_assign_added(struct pci_dev *dev) { diff --git a/include/linux/pci.h b/include/linux/pci.h index 0e8e3fd..833b54f 100644 --- a/include/linux/pci.h +++ b/include/linux/pci.h @@ -1848,6 +1848,14 @@ static inline void pcie_no_aspm(void) { } static inline bool pcie_aspm_enabled(struct pci_dev *pdev) { return false; } #endif +#ifdef CONFIG_HOTPLUG_PCI +void pci_hp_ignore_link_change(struct pci_dev *pdev); +void pci_hp_unignore_link_change(struct pci_dev *pdev); +#else +static inline void pci_hp_ignore_link_change(struct pci_dev *pdev) { } +static inline void pci_hp_unignore_link_change(struct pci_dev *pdev) { } +#endif + #ifdef CONFIG_PCIEAER bool pci_aer_available(void); #else
When a Secondary Bus Reset is issued at a hotplug port, it causes a Data Link Layer State Changed event as a side effect. On hotplug ports using in-band presence detect, it additionally causes a Presence Detect Changed event. These spurious events should not result in teardown and re-enumeration of the device in the slot. Hence commit 2e35afaefe64 ("PCI: pciehp: Add reset_slot() method") masked the Presence Detect Changed Enable bit in the Slot Control register during a Secondary Bus Reset. Commit 06a8d89af551 ("PCI: pciehp: Disable link notification across slot reset") additionally masked the Data Link Layer State Changed Enable bit. However masking those bits only disables interrupt generation (PCIe r6.2 sec 6.7.3.1). The events are still visible in the Slot Status register and picked up by the IRQ handler if it runs during a Secondary Bus Reset. This can happen if the interrupt is shared or if an unmasked hotplug event occurs, e.g. Attention Button Pressed or Power Fault Detected. The likelihood of this happening used to be small, so it wasn't much of a problem in practice. That has changed with the recent introduction of bandwidth control in v6.13-rc1 with commit 665745f27487 ("PCI/bwctrl: Re-add BW notification portdrv as PCIe BW controller"): Bandwidth control shares the interrupt with PCIe hotplug. A Secondary Bus Reset causes a Link Bandwidth Notification, so the hotplug IRQ handler runs, picks up the masked events and tears down the device in the slot. As a result, Joel reports VFIO passthrough failure of a GPU, which Ilpo root-caused to the incorrect handling of masked hotplug events. Clearly, a more reliable way is needed to ignore spurious hotplug events. For Downstream Port Containment, a new ignore mechanism was introduced by commit a97396c6eb13 ("PCI: pciehp: Ignore Link Down/Up caused by DPC"). It has been working reliably for the past four years. Adapt it for Secondary Bus Resets. Introduce two helpers to annotate code sections which cause spurious link changes: pci_hp_ignore_link_change() and pci_hp_unignore_link_change() Use those helpers in lieu of masking interrupts in the Slot Control register. Introduce a helper to check whether such a code section is executing concurrently and if so, await it: pci_hp_spurious_link_change() Invoke the helper in the hotplug IRQ thread pciehp_ist(). Re-use the IRQ thread's existing code which ignores DPC-induced link changes unless the link is unexpectedly down after reset recovery or the device was replaced during the bus reset. That code block in pciehp_ist() was previously only executed if a Data Link Layer State Changed event has occurred. Additionally execute it for Presence Detect Changed events. That's necessary for compatibility with PCIe r1.0 hotplug ports because Data Link Layer State Changed didn't exist before PCIe r1.1. DPC was added with PCIe r3.1 and thus DPC-capable hotplug ports always support Data Link Layer State Changed events. But the same cannot be assumed for Secondary Bus Reset, which already existed in PCIe r1.0. Secondary Bus Reset is only one of many causes of spurious link changes. Others include runtime suspend to D3cold, firmware updates or FPGA reconfiguration. The new pci_hp_{,un}ignore_link_change() helpers may be used by all kinds of drivers to annotate such code sections, hence their declarations are publicly visible in <linux/pci.h>. A case in point is the Mellanox Ethernet driver which disables a firmware reset feature if the Ethernet card is attached to a hotplug port, see commit 3d7a3f2612d7 ("net/mlx5: Nack sync reset request when HotPlug is enabled"). Going forward, PCIe hotplug will be able to cope gracefully with all such use cases once the code sections are properly annotated. The new helpers internally use two bits in struct pci_dev's priv_flags as well as a wait_queue. This mirrors what was done for DPC by commit a97396c6eb13 ("PCI: pciehp: Ignore Link Down/Up caused by DPC"). That may be insufficient if spurious link changes are caused by multiple sources simultaneously. An example might be a Secondary Bus Reset issued by AER during FPGA reconfiguration. If this turns out to happen in real life, support for it can easily be added by replacing the PCI_LINK_CHANGING flag with an atomic_t counter incremented by pci_hp_ignore_link_change() and decremented by pci_hp_unignore_link_change(). Instead of awaiting a zero PCI_LINK_CHANGING flag, the pci_hp_spurious_link_change() helper would then simply await a zero counter. Fixes: 665745f27487 ("PCI/bwctrl: Re-add BW notification portdrv as PCIe BW controller") Reported-by: Joel Mathew Thomas <proxy0@tutamail.com> Closes: https://bugzilla.kernel.org/show_bug.cgi?id=219765 Tested-by: Joel Mathew Thomas <proxy0@tutamail.com> Signed-off-by: Lukas Wunner <lukas@wunner.de> Cc: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com> --- drivers/pci/hotplug/pci_hotplug_core.c | 69 ++++++++++++++++++++++++++++++++++ drivers/pci/hotplug/pciehp_hpc.c | 35 ++++++----------- drivers/pci/pci.h | 3 ++ include/linux/pci.h | 8 ++++ 4 files changed, 92 insertions(+), 23 deletions(-)