Netdev List
 help / color / mirror / Atom feed
From: netdev-bot+sashiko@kernel.org
To: anthony.l.nguyen@intel.com
Cc: davem@davemloft.net, kuba@kernel.org, pabeni@redhat.com,
	edumazet@kernel.org, andrew+netdev@lunn.ch,
	netdev@vger.kernel.org, david.butler@appgate.com,
	emil.s.tantilov@intel.com, luoxuanqiang@kylinos.cn,
	bryan.fraschetti@canonical.com, tristan@talencesecurity.com,
	tomasz.lichwala@linux.intel.com, horms@kernel.org,
	aleksander.lobakin@intel.com, stable@vger.kernel.org,
	jacob.e.keller@intel.com, aleksandr.loktionov@intel.com
Subject: Re: [PATCH net 5/6] iavf: fix VF stats not updating due to PTP command preemption
Date: Wed, 30 Sep 2026 00:58:35 +0000	[thread overview]
Message-ID: <179072991532.434549.7383166792791708818@kernel.org> (raw)
In-Reply-To: <20260928230429.495442-6-anthony.l.nguyen@intel.com>

Thank you for your contribution! Sashiko AI review found 1 potential
issue(s) to consider.

Critical: 0 · High: 0 · Medium: 1 · Low: 0

If you believe none of the issues are legitimate, please reply to each
issue of Medium severity or higher and explain why the AI is wrong.
If any of them are legitimate and you plan to respin, please let patchwork
know by including "pw-bot: cr" as a separate line at the end of your reply
(one such reply per series is enough).

- [Medium] iavf_watchdog_step()
  (drivers/net/ethernet/intel/iavf/iavf_main.c) now calls…

--

iavf: fix VF stats not updating due to PTP command preemption

With this commit, iavf_watchdog_step() requests VF stats on every pass
while the adapter is in __IAVF_RUNNING. Before, it only did so when
iavf_process_aq_command() found nothing to do. The periodic PHC caching
task keeps a PTP command pending, so the old stats fallback never ran.

> diff --git a/drivers/net/ethernet/intel/iavf/iavf_main.c b/drivers/net/ethernet/intel/iavf/iavf_main.c
> index 29b8403a066bc..c0686ad5c4116 100644
> --- a/drivers/net/ethernet/intel/iavf/iavf_main.c
> +++ b/drivers/net/ethernet/intel/iavf/iavf_main.c
> @@ -2932,18 +2932,12 @@ static int iavf_watchdog_step(struct iavf_adapter *adapter)
>  				iavf_send_api_ver(adapter);
>  			}
>  		} else {
> -			int ret = iavf_process_aq_command(adapter);
> -
> -			/* An error will be returned if no commands were
> -			 * processed; use this opportunity to update stats
> -			 * if the error isn't -ENOTSUPP
> -			 */
> -			if (ret && ret != -EOPNOTSUPP &&
> -			    adapter->state == __IAVF_RUNNING)
> -				iavf_request_stats(adapter);
> +			iavf_process_aq_command(adapter);
>  		}
> -		if (adapter->state == __IAVF_RUNNING)
> +		if (adapter->state == __IAVF_RUNNING) {
> +			iavf_request_stats(adapter);

[Severity: Medium]
Can this put two virtchnl messages in flight during one watchdog pass?

Suppose iavf_process_aq_command() has just taken the
IAVF_FLAG_AQ_SEND_PTP_CMD branch. In that case
iavf_virtchnl_send_ptp_cmd() has sent VIRTCHNL_OP_1588_PTP_GET_TIME
without setting adapter->current_op:

iavf_virtchnl.c:iavf_virtchnl_send_ptp_cmd() {
    ...
	err = iavf_send_pf_msg(adapter, cmd->v_opcode, cmd->msg, cmd->msglen);
	if (!err) {
		list_del(&cmd->list);
		kfree(cmd);
    ...
}

The only guard in iavf_request_stats() then still sees an idle channel,
so VIRTCHNL_OP_GET_STATS goes out right behind GET_TIME:

	if (adapter->current_op != VIRTCHNL_OP_UNKNOWN) {
		/* no error message, this isn't crucial */
		return;
	}
	...
	adapter->current_op = VIRTCHNL_OP_GET_STATS;

When the GET_TIME reply arrives, iavf_virtchnl_completion() breaks out
of the switch and reaches the unconditional reset at the end:

	} /* switch v_opcode */
	adapter->current_op = VIRTCHNL_OP_UNKNOWN;

That clears the GET_STATS tracking while the GET_STATS reply is still
outstanding.

iavf_adminq_task() may drop the netdev lock before the GET_STATS reply
arrives. A watchdog pass can then send another tracked command. The
watchdog can be kicked by iavf_schedule_aq_request(), by the 20ms re-arm
while aq_required is set, or by gettimex64() queuing another PTP read
with mod_delayed_work(..., 0). The late GET_STATS reply would then clear
that command's current_op as well.

Flow Director is one place where this could do real damage.
iavf_add_fdir_filter() relies on current_op to keep only one
ADD_PENDING filter in flight. If two adds overlap, the first successful
VIRTCHNL_OP_ADD_FDIR_FILTER reply does this for every pending filter:

			if (fdir->state == IAVF_FDIR_FLTR_ADD_PENDING) {
				if (add_fltr->status == VIRTCHNL_FDIR_SUCCESS) {
					...
					fdir->state = IAVF_FDIR_FLTR_ACTIVE;
					fdir->flow_id = add_fltr->flow_id;

Would the second filter then get the wrong PF flow_id? If so, a later
delete of that filter could remove the wrong PF rule and leak the real
one.

The missing current_op tracking in the PTP sender predates this patch.
Before this change, though, GET_STATS was only sent in a pass where
iavf_process_aq_command() returned an error, so it never followed a PTP
message back to back. Now every PTP send is followed by a GET_STATS in
the same pass. That covers the roughly once-per-second PHC cache update
and every gettimex64() read.

This also adds one GET_STATS mailbox message per PHC read, which the
commit message doesn't mention.

>  			iavf_detect_recover_hung(&adapter->vsi);
> +		}
>  		break;

[ ... ]

-- 
Sashiko AI review · https://netdev-ai.bots.linux.dev/sashiko/#/patchset/20260928230429.495442-1-anthony.l.nguyen%40intel.com

  reply	other threads:[~2026-09-30  0:58 UTC|newest]

Thread overview: 28+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-09-28 23:04 [PATCH net 0/6][pull request] Intel Wired LAN Driver Updates 2026-09-28 (idpf, ice, iavf) Tony Nguyen
2026-09-28 23:04 ` [PATCH net 1/6] idpf: fix possible race on remove during a reset Tony Nguyen
2026-09-30  0:58   ` netdev-bot+sashiko
2026-10-01 23:40     ` Tantilov, Emil S
2026-09-28 23:04 ` [PATCH net 2/6] ice: fix use-after-free in dynamic port cleanup Tony Nguyen
2026-09-28 23:04 ` [PATCH net 3/6] ice: Restore Ordered MMIO Writes for Tx Doorbells Tony Nguyen
2026-09-30  0:58   ` netdev-bot+sashiko
2026-10-01 16:35     ` Tony Nguyen
2026-09-28 23:04 ` [PATCH net 4/6] ice: fix metadata_dst refcount handling on representor teardown Tony Nguyen
2026-09-28 23:04 ` [PATCH net 5/6] iavf: fix VF stats not updating due to PTP command preemption Tony Nguyen
2026-09-30  0:58   ` netdev-bot+sashiko [this message]
2026-09-30 15:07     ` Tomasz Lichwala
2026-09-28 23:04 ` [PATCH net 6/6] iavf: cap advertised max_pkt_size at the single-buffer HW limit Tony Nguyen
2026-09-29 16:18   ` Alexander Lobakin
2026-09-29 20:32     ` Dave Butler
2026-09-30 11:32       ` Alexander Lobakin
2026-09-30  0:58   ` netdev-bot+sashiko
2026-09-30  6:02     ` Dave Butler
     [not found]       ` <IA3PR05MB22078430E404FAD12912A706298B892@IA3PR05MB220784.namprd05.prod.outlook.com>
     [not found]         ` <CANm61jc37jivo=XmRwN8ic8PNJFXZK+6Gsw5VRy=b-oZKpMsMA@mail.gmail.com>
2026-10-02 21:09           ` Fw: " David Butler
2026-09-28 23:10 ` [PATCH net 0/6][pull request] Intel Wired LAN Driver Updates 2026-09-28 (idpf, ice, iavf) netdev-bot+sinfo
2026-09-29  1:41   ` Dave Butler
     [not found]     ` <IA3PR05MB22078467309FA5DFF33EF712488B892@IA3PR05MB220784.namprd05.prod.outlook.com>
2026-10-02 21:21       ` Fw: " David Butler
2026-09-29 17:16   ` Tantilov, Emil S
2026-09-30 15:06   ` Tomasz Lichwala
2026-10-01 23:47 ` Tony Nguyen
2026-10-02 20:39   ` Jakub Kicinski
     [not found]     ` <IA3PR05MB220784D3846E12367B0CA1D3738B892@IA3PR05MB220784.namprd05.prod.outlook.com>
     [not found]       ` <CANm61jco98RoBmBAtbnjRZCPwqS0Vt6SqXjYAEUwSD4-bWLuZA@mail.gmail.com>
2026-10-02 21:06         ` Fw: " David Butler
2026-10-02 20:50 ` patchwork-bot+netdevbpf

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=179072991532.434549.7383166792791708818@kernel.org \
    --to=netdev-bot+sashiko@kernel.org \
    --cc=aleksander.lobakin@intel.com \
    --cc=aleksandr.loktionov@intel.com \
    --cc=andrew+netdev@lunn.ch \
    --cc=anthony.l.nguyen@intel.com \
    --cc=bryan.fraschetti@canonical.com \
    --cc=davem@davemloft.net \
    --cc=david.butler@appgate.com \
    --cc=edumazet@kernel.org \
    --cc=emil.s.tantilov@intel.com \
    --cc=horms@kernel.org \
    --cc=jacob.e.keller@intel.com \
    --cc=kuba@kernel.org \
    --cc=luoxuanqiang@kylinos.cn \
    --cc=netdev@vger.kernel.org \
    --cc=pabeni@redhat.com \
    --cc=stable@vger.kernel.org \
    --cc=tomasz.lichwala@linux.intel.com \
    --cc=tristan@talencesecurity.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox