Re: [PATCH 15/18] irqchip/apple-aic: Add support for the Apple Interrupt Controller

[Hector Martin 'marcan']

On 05/02/2021 06.37, Arnd Bergmann wrote:
> On Thu, Feb 4, 2021 at 9:39 PM Hector Martin <marcan@xxxxxxxxx> wrote:
> > + * - This driver creates one IRQ domain for HW IRQs and the timer FIQs
> > + * - FIQ hwirq numbers are assigned after true hwirqs, and are per-cpu
> > + * - DT bindings use 3-cell form (like GIC):
> > + *   - <0 nr flags> - hwirq #nr
> > + *   - <1 nr flags> - FIQ #nr
> > + *     - nr=0  physical timer
> > + *     - nr=1  virtual timer
> > + *   - <2 nr flags> - IPI #nr
> > + *     - nr=0  other IPI
> > + *     - nr=1  self IPI
>
> I think we should discuss the binding a bit here. My initial thinking was that
> it would be better to separate the AIC from the FIQ handling, as they don't
> seem to have any relation in hardware, and representing them as two
> separate nodes seems like a cleaner abstraction.

This was actually my original approach (I still have the FIQ irqchip 
patch lying around), but that idea somewhat broke when we decided to 
merge the vectors.

If we split it up again, one of the two still needs to be the root, 
decide whether what fired is an IRQ or FIQ, and dispatch accordingly. Or 
we could have three nodes and have one root handler dispatch to IRQ and 
FIQ nodes, but that sounds like overkill... (?)

Are you proposing just having different drivers/nodes in the same file, 
or implementing these as separate drivers in separate files?

> > +#define TIMER_FIRING(x)                                                        \
> > +       (((x) & (ARCH_TIMER_CTRL_ENABLE | ARCH_TIMER_CTRL_IT_MASK |            \
> > +                ARCH_TIMER_CTRL_IT_STAT)) ==                                  \
> > +        (ARCH_TIMER_CTRL_ENABLE | ARCH_TIMER_CTRL_IT_STAT))
> > +
> > +static void aic_handle_fiq(struct pt_regs *regs)
> > +{
> > +       /*
> > +        * It would be really nice to find a system register that lets us get the FIQ source
> > +        * state without having to peek down into clients...
> > +        */
> > +       if (TIMER_FIRING(read_sysreg(cntp_ctl_el0))) {
> > +               handle_domain_irq(aic_irqc->hw_domain,
> > +                                 aic_irqc->nr_hw + AIC_TMR_PHYS, regs);
> > +       }
> > +
> > +       if (TIMER_FIRING(read_sysreg(cntv_ctl_el0))) {
> > +               handle_domain_irq(aic_irqc->hw_domain,
> > +                                 aic_irqc->nr_hw + AIC_TMR_VIRT, regs);
> > +       }
> > +}
>
> This seems to be a minor layering violation to me.

Absolutely. Under the assumption that these IRQ lines are ORed together 
into FIQ with no top-level dispatch though, there isn't a great solution 
here...

I think there is a chance FIQ interrupt child bits exist *somewhere*, so 
I actually plan on brute-forcing the list of implemented/valid CPU 
registers and trying to see if I can find some bits that do what I want. 
If it turns out they exist, this could alleviate some of the ugliness of 
the current approach.

> One idea I had was to just keep all the fiq handling in the timer driver
> itself, jumping there directly from the top-level fiq entry whenever
> we are on an Apple platform. At least as long as nothing else ever
> uses fiq.

In principle, as long as the timer handler only ever uses one IRQ (which 
I think is the case here, it just picks one of the 4, usually the 
physical timer, and it should only enable that one) it would work. But 
we still need *some* IRQ chip driver to deliver that, unless we want to 
throw a bunch of special-case code into the timer driver to hook 
directly into FIQs without an interrupt parent which... seems like it 
could get quite messy.

> When we discussed the earlier submission for the aic, I understood
> that FIQ is used for both timer and IPI, but the IPI actually has another
> method based on normal AIC interrupts that can be used as an
> alternative.

Correct, there are two parallel IPI implementations. It is my 
understanding that the CPU register based one, which ties into FIQ, is 
faster / more featureful (it has deferred IPIs, not sure if the plain 
AIC does those), as it is built into the core complexes instead of being 
part of the external AIC block. I could try benchmarking it within m1n1 
and see if I can find out how much faster it is.

I think it's worth thinking about supporting that IPI mechanism, which 
would necessitate dispatching FIQs too, so hard-coding it to route 
straight to the timer doesn't sound like a very future-proof plan... 
consider that Apple might put out a SoC in the future that rips out the 
AIC IPIs and leaves only the FIQ ones too.

> > +static void __exception_irq_entry aic_handle_irq_or_fiq(struct pt_regs *regs)
> > +{
> > +       u64 isr = read_sysreg(isr_el1);
> > +
> > +       if (isr & PSR_F_BIT)
> > +               aic_handle_fiq(regs);
> > +
> > +       if (isr & PSR_I_BIT)
> > +               aic_handle_irq(regs);
> > +}
>
> Having the shared entry point here looks reasonable to me though, it
> does seem to make a few things easier.
>
> I wonder if there is a possible race here: if we are ever in a situation
> where one of the two -- fiq or irq -- is disabled while the other one
> is enabled, we could get into a state where a handler is run while
> it should be masked.

That's a good point. We could filter with the SPSR_ELx mask bits here.

Though the FIQ support patch tries pretty hard to keep the mask bits in 
sync after early boot, so this concern might be somewhat academic. I'm 
happy to implement it if you think it might help though.

--
Hector Martin "marcan" (marcan@xxxxxxxxx)
Public Key: https://mrcn.st/pub