From: Tony Nguyen <anthony.l.nguyen@intel.com>
To: Paolo Abeni <pabeni@redhat.com>
Cc: <andriy.shevchenko@intel.com>, <pmenzel@molgen.mpg.de>,
<aleksandr.loktionov@intel.com>,
<mika.westerberg@linux.intel.com>, <mbloch@nvidia.com>,
<saeedm@nvidia.com>, <piotr.kwapulinski@intel.com>,
<sx.rinitha@intel.com>, <kuba@kernel.org>,
<grzegorz.nitka@intel.com>, <netdev@vger.kernel.org>,
<przemyslaw.kitszel@intel.com>, <arkadiusz.kubalewski@intel.com>,
<tariqt@nvidia.com>, <davem@davemloft.net>,
<dima.ruinskiy@intel.com>, <bhelgaas@google.com>,
<andrew+netdev@lunn.ch>, <lukas@wunner.de>,
<jacob.e.keller@intel.com>, <richardcochran@gmail.com>,
<takkozu@amazon.com>, <enjuk@amazon.com>,
<maximilianpezzullo@gmail.com>, <joe@dama.to>,
<przemyslaw.korba@intel.com>, <leon@kernel.org>,
<vgrinber@redhat.com>, <linux-pci@vger.kernel.org>,
<sunithax.d.mekala@intel.com>, <corbet@lwn.net>,
<vinicius.gomes@intel.com>, <ilpo.jarvinen@linux.intel.com>,
<edumazet@google.com>, <linux-doc@vger.kernel.org>,
<kohei.enju@gmail.com>, <kohei@enjuk.jp>, <horms@kernel.org>,
<avigailx.dahan@intel.com>
Subject: Re: [net-next,13/15] ice: add support for unmanaged DPLL on E830 NIC
Date: Fri, 3 Apr 2026 08:44:12 -0700 [thread overview]
Message-ID: <d1227b6a-be90-4172-9f48-088037b262e6@intel.com> (raw)
In-Reply-To: <20260402102616.177883-1-pabeni@redhat.com>
On 4/2/2026 3:26 AM, Paolo Abeni wrote:
> This is an AI-generated review of your patch. The human sending this
> email has considered the AI review valid, or at least plausible.
>
> For local reproduction steps see https://netdev-ai.bots.linux.dev/ai-local.html
> ---
> ice: add support for unmanaged DPLL on E830 NIC
>
> Hardware variants of E830 may support an unmanaged DPLL where the
> configuration is hardcoded within the hardware and firmware, meaning
> users cannot modify settings. However, users are able to check the DPLL
> lock status and obtain configuration information through the Linux DPLL
> and devlink health subsystem.
>
>> diff --git a/drivers/net/ethernet/intel/ice/ice_dpll.c b/drivers/net/ethernet/intel/ice/ice_dpll.c
>> index 62f75701d652..2a9eb233dbf4 100644
>> --- a/drivers/net/ethernet/intel/ice/ice_dpll.c
>> +++ b/drivers/net/ethernet/intel/ice/ice_dpll.c
>
> [ ... ]
>
>> @@ -3148,12 +3176,15 @@ ice_dpll_init_direct_pins(struct ice_pf *pf, bool cgu,
>> int ret;
>>
>> ret = ice_dpll_get_pins(pf, pins, start_idx, count, pf->dplls.clock_id);
>> - if (ret)
>> + if (!cgu || ret)
>> return ret;
>> - if (cgu) {
>> +
>> + if (first) {
>> ret = ice_dpll_register_pins(first, pins, ops, count);
>> if (ret)
>> goto release_pins;
>> + }
>> + if (second) {
>> ret = ice_dpll_register_pins(second, pins, ops, count);
>> if (ret)
>> goto unregister_first;
>> @@ -3162,7 +3193,8 @@ ice_dpll_init_direct_pins(struct ice_pf *pf, bool cgu,
>> return 0;
>>
>> unregister_first:
>> - ice_dpll_unregister_pins(first, pins, ops, count);
>> + if (first)
>> + ice_dpll_unregister_pins(first, pins, ops, count);
>> release_pins:
>> ice_dpll_release_pins(pins, count);
>> return ret;
>
> NULL checks were added to ice_dpll_init_direct_pins for handling unmanaged
> DPLL initialization where only one DPLL device is active. However, is the
> corresponding cleanup function ice_dpll_deinit_direct_pins missing the same
> NULL checks?
>
> In unmanaged mode, only pf->dplls.pps.dpll is initialized while
> pf->dplls.eec.dpll remains NULL. When ice_dpll_init_pins calls
> ice_dpll_init_direct_pins(pf, true, outputs, count, num_outputs,
> output_ops, eec.dpll, pps.dpll), if this second call (for output pins)
> fails, the error path calls ice_dpll_deinit_direct_pins(pf, true, ...,
> pps.dpll, eec.dpll).
>
> Looking at ice_dpll_deinit_direct_pins:
>
> static void ice_dpll_deinit_direct_pins(struct ice_pf *pf, bool cgu,
> struct ice_dpll_pin *pins, int count,
> const struct dpll_pin_ops *ops,
> struct dpll_device *first,
> struct dpll_device *second)
> {
> if (cgu) {
> ice_dpll_unregister_pins(first, pins, ops, count);
> ice_dpll_unregister_pins(second, pins, ops, count);
> }
> ice_dpll_release_pins(pins, count);
> }
>
> When cgu=true and second=NULL, ice_dpll_unregister_pins is called with
> dpll=NULL. Then dpll_pin_unregister(dpll, pin) dereferences dpll with
> xa_empty(&dpll->pin_refs), causing a NULL pointer dereference.
>
> Shouldn't ice_dpll_deinit_direct_pins add NULL checks for first and second,
> matching the guards you added in ice_dpll_init_direct_pins?
>
>> diff --git a/drivers/net/ethernet/intel/ice/ice_dpll.h b/drivers/net/ethernet/intel/ice/ice_dpll.h
>> index ae42cdea0ee1..2c98b6c6deb0 100644
>> --- a/drivers/net/ethernet/intel/ice/ice_dpll.h
>> +++ b/drivers/net/ethernet/intel/ice/ice_dpll.h
>
> [ ... ]
>
>> @@ -173,3 +181,5 @@ static inline void ice_dpll_deinit(struct ice_pf *pf) { }
>> #define ICE_CGU_R11_SYNCE_S_BYP_CLK GENMASK(6, 1)
>>
>> #define ICE_CGU_BYPASS_MUX_OFFSET_E825C 3
>> +#define ICE_DPLL_UNMANAGED_PIN_NUM 4
>> +#define ICE_DPLL_IN_ESYNC_ENABLED ICE_AQC_GET_CGU_IN_CFG_FLG2_ESYNC_EN
>
> This isn't a bug, but ICE_DPLL_UNMANAGED_PIN_NUM is defined but never
> used. Looking at the unmanaged pin descriptors, ice_e830_unmanaged_inputs
> has 1 entry and ice_e830_unmanaged_outputs has 2 entries (totaling 3 pins,
> not 4).
Hi Paolo,
We're working on changes to resolve these issues.
Thanks,
Tony
next prev parent reply other threads:[~2026-04-03 15:44 UTC|newest]
Thread overview: 22+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-03-30 23:02 [PATCH net-next 00/15][pull request] Intel Wired LAN Driver Updates 2026-03-30 (igc, igb, ice) Tony Nguyen
2026-03-30 23:02 ` [PATCH net-next 01/15] igc: Call netif_queue_set_napi() with rtnl locked Tony Nguyen
2026-03-31 17:37 ` Bjorn Helgaas
2026-04-02 10:29 ` Paolo Abeni
2026-04-07 6:53 ` Mika Westerberg
2026-03-30 23:02 ` [PATCH net-next 02/15] igc: Let the PCI core deal with the PM resume flow Tony Nguyen
2026-03-31 17:34 ` Bjorn Helgaas
2026-03-30 23:02 ` [PATCH net-next 03/15] igc: Don't reset the hardware on suspend path Tony Nguyen
2026-03-30 23:02 ` [PATCH net-next 04/15] igc: prepare for RSS key get/set support Tony Nguyen
2026-03-30 23:02 ` [PATCH net-next 05/15] igc: expose RSS key via ethtool get_rxfh Tony Nguyen
2026-03-30 23:02 ` [PATCH net-next 06/15] igc: allow configuring RSS key via ethtool set_rxfh Tony Nguyen
2026-03-30 23:02 ` [PATCH net-next 07/15] igb: prepare for RSS key get/set support Tony Nguyen
2026-03-30 23:02 ` [PATCH net-next 08/15] igb: expose RSS key via ethtool get_rxfh Tony Nguyen
2026-03-30 23:02 ` [PATCH net-next 09/15] igb: allow configuring RSS key via ethtool set_rxfh Tony Nguyen
2026-03-30 23:02 ` [PATCH net-next 10/15] igb: set skb hash type from RSS_TYPE Tony Nguyen
2026-03-30 23:02 ` [PATCH net-next 11/15] igb: fix typos in comments Tony Nguyen
2026-03-30 23:02 ` [PATCH net-next 12/15] igc: " Tony Nguyen
2026-03-30 23:02 ` [PATCH net-next 13/15] ice: add support for unmanaged DPLL on E830 NIC Tony Nguyen
2026-04-02 10:26 ` [net-next,13/15] " Paolo Abeni
2026-04-03 15:44 ` Tony Nguyen [this message]
2026-03-30 23:02 ` [PATCH net-next 14/15] ice: mention fw_activate action along with devlink reload Tony Nguyen
2026-03-30 23:02 ` [PATCH net-next 15/15] ice: dpll: Fix compilation warning Tony Nguyen
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=d1227b6a-be90-4172-9f48-088037b262e6@intel.com \
--to=anthony.l.nguyen@intel.com \
--cc=aleksandr.loktionov@intel.com \
--cc=andrew+netdev@lunn.ch \
--cc=andriy.shevchenko@intel.com \
--cc=arkadiusz.kubalewski@intel.com \
--cc=avigailx.dahan@intel.com \
--cc=bhelgaas@google.com \
--cc=corbet@lwn.net \
--cc=davem@davemloft.net \
--cc=dima.ruinskiy@intel.com \
--cc=edumazet@google.com \
--cc=enjuk@amazon.com \
--cc=grzegorz.nitka@intel.com \
--cc=horms@kernel.org \
--cc=ilpo.jarvinen@linux.intel.com \
--cc=jacob.e.keller@intel.com \
--cc=joe@dama.to \
--cc=kohei.enju@gmail.com \
--cc=kohei@enjuk.jp \
--cc=kuba@kernel.org \
--cc=leon@kernel.org \
--cc=linux-doc@vger.kernel.org \
--cc=linux-pci@vger.kernel.org \
--cc=lukas@wunner.de \
--cc=maximilianpezzullo@gmail.com \
--cc=mbloch@nvidia.com \
--cc=mika.westerberg@linux.intel.com \
--cc=netdev@vger.kernel.org \
--cc=pabeni@redhat.com \
--cc=piotr.kwapulinski@intel.com \
--cc=pmenzel@molgen.mpg.de \
--cc=przemyslaw.kitszel@intel.com \
--cc=przemyslaw.korba@intel.com \
--cc=richardcochran@gmail.com \
--cc=saeedm@nvidia.com \
--cc=sunithax.d.mekala@intel.com \
--cc=sx.rinitha@intel.com \
--cc=takkozu@amazon.com \
--cc=tariqt@nvidia.com \
--cc=vgrinber@redhat.com \
--cc=vinicius.gomes@intel.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox