From: sashiko-bot@kernel.org
To: "Tariq Toukan" <tariqt@nvidia.com>
Cc: linux-rdma@vger.kernel.org
Subject: Re: [PATCH net-next] net/mlx5: Add reset_prepare and reset_done callbacks
Date: Mon, 12 Oct 2026 09:50:55 +0000 [thread overview]
Message-ID: <sashiko-outbox-167908@kernel.org> (raw)
In-Reply-To: <20261011094809.790798-1-tariqt@nvidia.com>
Thank you for your contribution! Sashiko AI review found 1 potential issue(s) to consider:
- [High] net/mlx5: concurrent external PCI reset skips driver teardown
--
commit c754f5586b2dc54ce6e7b9bf66e23475b9b184d4
Author: Akiva Goldberger <agoldberger@nvidia.com>
net/mlx5: Add reset_prepare and reset_done callbacks
This commit adds reset_prepare and reset_done callbacks for the mlx5 driver
to quiesce and restore resources around a PCI reset. It also adds a flag to
serialize PCI resets with other flows like FW reset.
> diff --git a/drivers/net/ethernet/mellanox/mlx5/core/main.c b/drivers/net/ethernet/mellanox/mlx5/core/main.c
> index 1a45474ce03db..fe7c0331b183b 100644
> --- a/drivers/net/ethernet/mellanox/mlx5/core/main.c
> +++ b/drivers/net/ethernet/mellanox/mlx5/core/main.c
> @@ -2138,10 +2138,97 @@ static void mlx5_pci_resume(struct pci_dev *pdev)
[ ... ]
> +static void mlx5_pci_reset_prepare(struct pci_dev *pdev)
> +{
> + struct mlx5_core_dev *dev = pci_get_drvdata(pdev);
> + struct devlink *devlink;
> + bool fw_reset_in_prog;
> +
> + if (!dev)
> + return;
> +
> + devlink = priv_to_devlink(dev);
> +
> + devl_lock(devlink);
> + fw_reset_in_prog = mlx5_fw_reset_in_progress(dev);
> + if (!fw_reset_in_prog)
> + dev->pci_reset_in_progress = true;
> + devl_unlock(devlink);
> +
> + if (fw_reset_in_prog) {
> + mlx5_core_info(dev,
> + "%s: fw reset in progress, leaving drain to fw_reset flow\n",
> + __func__);
> + return;
> + }
[Severity: High]
Does this early return assume the caller is the FW reset flow?
If mlx5_sync_reset_request_event() sets MLX5_FW_RESET_FLAGS_RESET_IN_PROGRESS
while waiting for the FW to send a tear-down event, and a concurrent external
PCI reset (e.g., via sysfs) invokes pci_reset_function() during this window,
it will call mlx5_pci_reset_prepare().
Since fw_reset_in_prog would be true, it returns immediately, skipping
mlx5_unload_one().
Can this cause the PCI core to perform a physical reset on the device
while the driver is fully active, allowing active DMA queues to access wiped
hardware and potentially leading to crashes or hardware errors?
> +
> + mlx5_core_info(dev, "%s: resetting, device state = %d, pci_status = %d, intf_state = 0x%lx\n",
> + __func__, dev->state, dev->pci_status, dev->intf_state);
> +
> + mlx5_enter_error_state(dev, true);
> + mlx5_drain_health_wq(dev);
> + mlx5_unload_one(dev, false);
> + mlx5_pci_disable_device(dev);
> +}
> +
> +static void mlx5_pci_reset_done(struct pci_dev *pdev)
> +{
> + struct mlx5_core_dev *dev = pci_get_drvdata(pdev);
> + struct devlink *devlink;
> + int err;
> +
> + if (!dev)
> + return;
> +
> + devlink = priv_to_devlink(dev);
> +
> + if (!dev->pci_reset_in_progress) {
> + mlx5_core_info(dev,
> + "%s: reset owned by fw_reset flow, leaving reload to it\n",
> + __func__);
> + return;
> + }
[Severity: High]
Will this early return prevent the driver from reloading after the external
sysfs reset mentioned above?
It seems this could leave the software state permanently out-of-sync with the
reset hardware.
> +
> + err = mlx5_pci_enable_device(dev);
--
Sashiko AI review · https://sashiko.dev/#/patchset/20261011094809.790798-1-tariqt@nvidia.com?part=1
next prev parent reply other threads:[~2026-10-12 9:50 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-10-11 9:48 [PATCH net-next] net/mlx5: Add reset_prepare and reset_done callbacks Tariq Toukan
2026-10-12 9:50 ` sashiko-bot [this message]
2026-10-12 10:46 ` netdev-bot+sashiko
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=sashiko-outbox-167908@kernel.org \
--to=sashiko-bot@kernel.org \
--cc=linux-rdma@vger.kernel.org \
--cc=sashiko-reviews@lists.linux.dev \
--cc=tariqt@nvidia.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox