From: Nicolai Buchwitz <nb@tipi-net.de>
To: "Théo Lebrun" <theo.lebrun@bootlin.com>
Cc: Conor Dooley <conor.dooley@microchip.com>,
Andrew Lunn <andrew+netdev@lunn.ch>,
"David S. Miller" <davem@davemloft.net>,
Eric Dumazet <edumazet@google.com>,
Jakub Kicinski <kuba@kernel.org>, Paolo Abeni <pabeni@redhat.com>,
Simon Horman <horms@kernel.org>,
Nicolas Ferre <nicolas.ferre@microchip.com>,
Sean Anderson <sean.anderson@linux.dev>,
Antoine Tenart <atenart@kernel.org>,
Russell King <linux@armlinux.org.uk>,
netdev@vger.kernel.org, linux-kernel@vger.kernel.org,
Vladimir Kondratiev <vladimir.kondratiev@mobileye.com>,
Gregory CLEMENT <gregory.clement@bootlin.com>,
Tawfik Bayouk <tawfik.bayouk@mobileye.com>,
Thomas Petazzoni <thomas.petazzoni@bootlin.com>,
Maxime Chevallier <maxime.chevallier@bootlin.com>,
stable@vger.kernel.org
Subject: Re: [PATCH 2/3] net: macb: propagate RX ring refill errors
Date: Mon, 21 Sep 2026 09:05:39 +0200 [thread overview]
Message-ID: <0eeb123ad32558ac42762827eb509110@tipi-net.de> (raw)
In-Reply-To: <20260918-macb-close-v1-2-221d916b7961@bootlin.com>
Hi Théo
On 18.9.2026 22:32, Théo Lebrun wrote:
> gem_rx_refill() is responsible for Rx SKB allocation, including at
> open,
> but its prototype indicates a void return value.
>
> Therefore we change the code to propagate allocation and DMA mapping
> errors back up the stack, making sure the open fails if it occurs.
> Change all those to return errno-style ints:
> - gem_rx_refill()
> - its parent gem_init_rx_ring()
> - its grand-parent gem_init_rings()
> - the macbgem_ops.mog_init_rings function pointer
> - its grand-uncle macb_init_rings()
>
> Theoretical bugfix, never encountered in practice. To reproduce,
> introduce memory pressure (less than 512 SKBs of free memory) and open
> the interface. I expect the last queue to be unuseable because it has
> zero usable rx buffers. Nothing will ever trigger a refill on that
> queue which only happens once a frame has been received.
>
> Note that other callers of refill (resume, HRESP error task, NAPI)
> cannot do anything useful with that error and keep their best-effort
> refill, hoping it will improve.
>
> Fixes: 4df95131ea80 ("net/macb: change RX path for GEM")
> Cc: stable@vger.kernel.org
> Signed-off-by: Théo Lebrun <theo.lebrun@bootlin.com>
> ---
> [...]
> diff --git a/drivers/net/ethernet/cadence/macb_main.c
> b/drivers/net/ethernet/cadence/macb_main.c
> index 751fa9e68099..c418f859cc34 100644
> --- a/drivers/net/ethernet/cadence/macb_main.c
> +++ b/drivers/net/ethernet/cadence/macb_main.c
> [...]
> for (q = 0, queue = bp->queues; q < bp->num_queues; ++q, ++queue) {
> @@ -2813,11 +2820,15 @@ static void gem_init_rings(struct macb *bp)
> queue->tx_head = 0;
> queue->tx_tail = 0;
>
> - gem_init_rx_ring(queue);
> + err = gem_init_rx_ring(queue);
> + if (err)
> + last_err = err;
A partly filled queue refills itself on the next gem_rx(). AFAIU only a
queue with zero buffers can get stuck. Fail the open just for that case?
> [...]
> static void macb_reset_hw(struct macb *bp)
> @@ -3162,7 +3175,9 @@ static int macb_open(struct net_device *netdev)
> goto pm_exit;
> }
>
> - bp->macbgem_ops.mog_init_rings(bp);
> + err = bp->macbgem_ops.mog_init_rings(bp);
> + if (err)
> + goto free_rings;
macb_set_ringparam() ignores macb_open()'s error, so NAPI stays disabled
with netif_running() == true and the next close will hang in
napi_disable().
Should macb_set_ringparam() return the error?
> [...]
Thanks,
Nicolai
next prev parent reply other threads:[~2026-09-21 7:05 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-18 20:32 [PATCH 0/3] net: macb: fix close races (and RX refill error handling) Théo Lebrun
2026-09-18 20:32 ` [PATCH 1/3] net: macb: never give hardware a NULL RX buffer Théo Lebrun
2026-09-21 6:54 ` Nicolai Buchwitz
2026-09-18 20:32 ` [PATCH 2/3] net: macb: propagate RX ring refill errors Théo Lebrun
2026-09-21 7:05 ` Nicolai Buchwitz [this message]
2026-09-21 9:54 ` Théo Lebrun
2026-09-18 20:32 ` [PATCH 3/3] net: macb: quiesce IRQs and drain BH on interface close Théo Lebrun
2026-09-21 6:55 ` Nicolai Buchwitz
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=0eeb123ad32558ac42762827eb509110@tipi-net.de \
--to=nb@tipi-net.de \
--cc=andrew+netdev@lunn.ch \
--cc=atenart@kernel.org \
--cc=conor.dooley@microchip.com \
--cc=davem@davemloft.net \
--cc=edumazet@google.com \
--cc=gregory.clement@bootlin.com \
--cc=horms@kernel.org \
--cc=kuba@kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux@armlinux.org.uk \
--cc=maxime.chevallier@bootlin.com \
--cc=netdev@vger.kernel.org \
--cc=nicolas.ferre@microchip.com \
--cc=pabeni@redhat.com \
--cc=sean.anderson@linux.dev \
--cc=stable@vger.kernel.org \
--cc=tawfik.bayouk@mobileye.com \
--cc=theo.lebrun@bootlin.com \
--cc=thomas.petazzoni@bootlin.com \
--cc=vladimir.kondratiev@mobileye.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®