Recovery, Retrain, and Hot Reset Flows: Debug Playbook

Debug playbook

Debug Playbook for Recovery, Retrain, and Hot Reset Flows focuses on Recovery entry count, retrain success rate, and service disruption duration. The purpose is to turn memory observations into mechanism-backed actions with explicit owners and release-safe validation.

PCIe/CXL debug should narrow from broad symptom to one dominant mechanism. Avoid mixed-knob sweeps that produce accidental wins without causal confidence.

1. Freeze workload seed, firmware image, timing profile, and thermal setup.

2. Find first failing transition in command timeline.

3. Classify mechanism: locality loss, legality pressure, queue policy, margin drift, or RAS behavior.

4. Build focused reproducer for top hypothesis.

5. Apply minimal reversible fix and define rollback gate.

6. Re-run full performance + reliability matrix.

Debug decision tree

ROOT CAUSE TREE - Recovery, Retrain, and Hot Reset Flows

symptom: Recovery entry count, retrain success rate, and service disruption duration
  |-- LTSSM / PHY margin
  |-- credit / ordering stall
  |-- coherency / HDM config
  |-- RAS / poison handling
  |-- enumeration / resource conflict

Review memo template

PCIe/CXL REVIEW MEMO - Link Training and LTSSM / Recovery, Retrain, and Hot Reset Flows

1. Symptom
   - Watched metric: Recovery entry count, retrain success rate, and service disruption duration
   - Failing traffic slice: <workload/phase/class>
   - First failing transition: <LTSSM/credit/ordering/coherency/RAS>
   - Revision tags: <firmware/controller/timing/board/package>

2. Mechanism hypothesis
   - Primary mechanism: Bit errors, speed changes, and power events trigger Recovery where the link re-synchronizes without full re-enumeration. Poor recovery handling drops packets, stalls DMA, and can cascade into surprise-down if timeouts are misconfigured.
   - Competing hypotheses: <mapping, scheduling, PHY margin, SI/PI, reliability policy>
   - Missing evidence: <command trace, queue snapshot, lane margins, CE/UE logs>

3. Proposed action
   - Smallest reversible change: <policy/register/firmware/flow>
   - Expected movement: <p99 latency, effective bandwidth, stability>
   - Regression risk: fairness, thermal drift, training robustness, field reliability

4. Signoff
   - Re-run artifact: Recovery trigger log, DL replay correlation, and service impact timeline
   - Required owners: PHY owner, firmware owner, driver owner, validation owner
   - Final decision: ship, bounded rollout, rollback, or escalate

PCIe/CXL deep dive

LTSSM and equalization determine whether high-speed links are stable under corner traffic and retimer paths.

Concept diagram

LTSSM + EQ

Detect -> Polling -> Config -> L0 <-> Recovery

Metric graph

LINK INSTABILITY SOURCES

EQ margin           ██████
retimer FW          ████
SI/cable plant      ███

Reports and artifacts

• LTSSM state log

• EQ coefficient dump

• negotiated speed/width snapshot

• recovery trigger timeline

Mini case study

Gen5 passed cold boot EQ but entered Recovery loops under DMA heat after retimer firmware update.

Debug branches

• Capture ordered sets at failure boundary

• Compare EQ presets across temperature corners

• Bypass retimer to isolate segment faults

Senior review question

Ask: which latency, bandwidth, and reliability evidence proves this PCIe/CXL topic is closed under real traffic?

Key takeaways

• Always tie controller and PHY counter shifts to application latency and throughput outcomes.

• Lock firmware timing profile, thermal condition, and DIMM state before comparing PCIe/CXL captures.

Common pitfalls

• Chasing peak bandwidth while ignoring p99 latency and fairness tails.

• Changing timing guardbands without separating SI noise from scheduling issues.

• Declaring closure without reliability gates, fault injection, and regression replay.

Principal PCIe/CXL review addendum

Recovery, Retrain, and Hot Reset Flows should be read as an end-to-end memory behavior, not as a single block definition. A production PCIe/CXL subsystem reflects interactions between array physics, command legality, scheduler policy, PHY margin, and reliability controls before software experiences final latency or bandwidth.

Bit errors, speed changes, and power events trigger Recovery where the link re-synchronizes without full re-enumeration. Poor recovery handling drops packets, stalls DMA, and can cascade into surprise-down if timeouts are misconfigured. PCIe/CXL inefficiency is multiplicative: one extra ACTIVATE, one unnecessary turnaround, one weak lane margin, or one refresh collision repeated across billions of accesses can dominate product tail latency and power.

Use Recovery entry count, retrain success rate, and service disruption duration as the opening signal, not the conclusion. A metric move only becomes actionable when paired with workload context, command traces, training telemetry, and evidence artifacts such as Recovery trigger log, DL replay correlation, and service impact timeline.

Link training is a margin and state-machine problem spanning PHY, retimers, cables, and platform power sequencing. Senior review quality comes from proving a complete chain: request pattern -> memory-state transition -> bottleneck mechanism -> smallest owner fix -> regression-safe validation.

Review discipline should enforce a single causal chain: traffic pattern -> command-level behavior -> array/PHY effect -> measured product impact. That chain prevents tuning folklore from replacing evidence.