From: Stefan Wahren wahrenst@gmx.net
[ Upstream commit 4ecf56f4b66011b583644bf9a62188d05dfcd78c ]
The MSE102x doesn't provide any interrupt register, so the only way to handle the level interrupt is to fetch the whole packet from the MSE102x internal buffer via SPI. So in cases the interrupt handler fails to do this, it should return IRQ_NONE. This allows the core to disable the interrupt in case the issue persists and prevent an interrupt storm.
Signed-off-by: Stefan Wahren wahrenst@gmx.net Link: https://patch.msgid.link/20250509120435.43646-6-wahrenst@gmx.net Signed-off-by: Jakub Kicinski kuba@kernel.org Signed-off-by: Sasha Levin sashal@kernel.org ---
**YES** This commit should be backported to stable kernel trees. Here's my extensive analysis: ## Primary Analysis **This is a critical interrupt handling bug fix that prevents system stability issues.** The commit changes the return value behavior of the MSE102x network driver's interrupt handler to prevent interrupt storms, which is a serious system stability concern. ## Code Changes Analysis The key changes show a systematic conversion from `void` return to `irqreturn_t` return values: 1. **Function signature change**: `mse102x_rx_pkt_spi()` changes from `void` to `irqreturn_t` 2. **Critical early return paths**: The function now returns `IRQ_NONE` when SPI commands fail: ```c if (ret) - return; + return IRQ_NONE; ``` 3. **Memory allocation failures**: Returns `IRQ_NONE` when `netdev_alloc_skb_ip_align()` fails: ```c if (!skb) - return; + return IRQ_NONE; ``` 4. **Successful packet processing**: Returns `IRQ_HANDLED` when packets are processed (even with errors): ```c if (mse102x_rx_frame_spi(mse, rxpkt, rxlen, drop)) { mse->ndev->stats.rx_errors++; dev_kfree_skb(skb); - return; + return IRQ_HANDLED; } ``` ## Why This Meets Stable Backport Criteria **1. Critical System Stability Issue** The commit message explicitly states this prevents "interrupt storms" - a condition where the system can become unresponsive due to continuous interrupt processing. This is a serious reliability concern that affects system operation. **2. Hardware-Specific Reliability Problem** The MSE102x hardware uses level- triggered interrupts and has no interrupt acknowledge mechanism. When the driver returns `IRQ_NONE` while the interrupt line is still asserted, the kernel's interrupt subsystem can disable the interrupt or continuously retrigger it, leading to system instability. **3. Small, Contained Fix** The changes are minimal and surgical - only affecting return values in the interrupt handler path. There are no algorithmic changes or new features introduced. **4. Pattern Matches Previous Stable Backports** Comparing to the reference commits: - Similar Commits #1-3 were all marked "Backport Status: YES" and dealt with MSE102x reliability fixes - This follows the same pattern: small, targeted fixes for hardware-specific reliability issues - Like commit #1 (interrupt handling fix), this addresses interrupt-related system stability **5. Critical Subsystem (Interrupt Handling)** Interrupt handling is a core kernel subsystem where bugs can cause system-wide instability. The commit message specifically mentions preventing interrupt storms, which can freeze systems. **6. No Risk of Regression** The changes only affect error handling paths and make the interrupt handler more conservative by properly signaling when interrupts are handled vs. not handled. This cannot introduce new bugs - it only prevents the kernel from making incorrect assumptions about interrupt handling. **7. Infrastructure/Driver Reliability** Network drivers with interrupt handling bugs can cause network connectivity loss and system instability, particularly in embedded systems where this hardware is likely deployed. This commit fixes a fundamental interrupt handling bug that can cause system stability issues, uses minimal and safe code changes, and follows the pattern of previously accepted stable backports for the same hardware. It should definitely be backported to stable kernel trees.
drivers/net/ethernet/vertexcom/mse102x.c | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-)
diff --git a/drivers/net/ethernet/vertexcom/mse102x.c b/drivers/net/ethernet/vertexcom/mse102x.c index 060a566bc6aae..c902f8761d5d4 100644 --- a/drivers/net/ethernet/vertexcom/mse102x.c +++ b/drivers/net/ethernet/vertexcom/mse102x.c @@ -306,7 +306,7 @@ static void mse102x_dump_packet(const char *msg, int len, const char *data) data, len, true); }
-static void mse102x_rx_pkt_spi(struct mse102x_net *mse) +static irqreturn_t mse102x_rx_pkt_spi(struct mse102x_net *mse) { struct sk_buff *skb; unsigned int rxalign; @@ -327,7 +327,7 @@ static void mse102x_rx_pkt_spi(struct mse102x_net *mse) mse102x_tx_cmd_spi(mse, CMD_CTR); ret = mse102x_rx_cmd_spi(mse, (u8 *)&rx); if (ret) - return; + return IRQ_NONE;
cmd_resp = be16_to_cpu(rx); if ((cmd_resp & CMD_MASK) != CMD_RTS) { @@ -360,7 +360,7 @@ static void mse102x_rx_pkt_spi(struct mse102x_net *mse) rxalign = ALIGN(rxlen + DET_SOF_LEN + DET_DFT_LEN, 4); skb = netdev_alloc_skb_ip_align(mse->ndev, rxalign); if (!skb) - return; + return IRQ_NONE;
/* 2 bytes Start of frame (before ethernet header) * 2 bytes Data frame tail (after ethernet frame) @@ -370,7 +370,7 @@ static void mse102x_rx_pkt_spi(struct mse102x_net *mse) if (mse102x_rx_frame_spi(mse, rxpkt, rxlen, drop)) { mse->ndev->stats.rx_errors++; dev_kfree_skb(skb); - return; + return IRQ_HANDLED; }
if (netif_msg_pktdata(mse)) @@ -381,6 +381,8 @@ static void mse102x_rx_pkt_spi(struct mse102x_net *mse)
mse->ndev->stats.rx_packets++; mse->ndev->stats.rx_bytes += rxlen; + + return IRQ_HANDLED; }
static int mse102x_tx_pkt_spi(struct mse102x_net *mse, struct sk_buff *txb, @@ -512,12 +514,13 @@ static irqreturn_t mse102x_irq(int irq, void *_mse) { struct mse102x_net *mse = _mse; struct mse102x_net_spi *mses = to_mse102x_spi(mse); + irqreturn_t ret;
mutex_lock(&mses->lock); - mse102x_rx_pkt_spi(mse); + ret = mse102x_rx_pkt_spi(mse); mutex_unlock(&mses->lock);
- return IRQ_HANDLED; + return ret; }
static int mse102x_net_open(struct net_device *ndev)