From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mgamail.intel.com (mgamail.intel.com [192.198.163.4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 7EFFA4E36F3 for ; Thu, 17 Sep 2026 19:14:22 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=192.198.163.4 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789672464; cv=none; b=Gxh5yZ0EHrVhLeqxEDtIkXgHbC3AFrt+9US6QGNULAoKMbbywcBEiPC36MX/xsRdzt21VL4tQq0b4A/TSGBxDcvWDaty1MExFMyVB3dN5kzzeWRFxZNEextlv4DjOjmpXDUhzSrZPrwbtvO8pTUMWPIXVr4R1FsJqZb2B9V2vjk= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789672464; c=relaxed/simple; bh=9OC4wHyes00kB1Ezel5PAxtxJjd1M4GJEQsek6FAH7Y=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=LbPKCSBhRwxijQCTxAEoZBDugOc7u/JOsD+lElchEbqqsQjthqg5iZbl1XAxi/iEKyTMKII1fkknD8Q2O8+96uCCfgbmWAAx+WOgMCadNpnzgllw9S3J69Fp2dcIgspc+S/bAfqYlFmwhhkdr0BJZ36iG8A5EPqDbZvZa+vBtVo= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com; spf=pass smtp.mailfrom=intel.com; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b=N7PbJ0Hi; arc=none smtp.client-ip=192.198.163.4 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=intel.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b="N7PbJ0Hi" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1789672462; x=1821208462; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=9OC4wHyes00kB1Ezel5PAxtxJjd1M4GJEQsek6FAH7Y=; b=N7PbJ0HiDu1wGzM8+ajnZ6tvEvcJ5zZoVtA4KESUC4cEJjmangt/PVio oNR8FO7FTvOd7NG+rL4g6lSHaxEiJhjIyDKm/qkRms6ZYdUo+LGU6iHOD gzh2IORnUPSQ4YSepDepC8wrlBPxedDG2N3KYimqKRjzbzmQ9ZcqOsbJo ikgfgHHHN3L4KuJXxbE9N+14Nm6eKsdQdmV2XjQp80MMtcxaoL+ij0GJ5 ZrcMEPUq24zSTU/EM9Zlst37goPJooA5ZIr5zd5jut+3lQqD2dUHoRJfJ BSCHYxuZ9XfoUk24moyPex2gYjhDLrfiO237Mgkq/wSToJyc3QRaFs/w2 g==; X-CSE-ConnectionGUID: k/wvKTiJTPK006ywg/5r2Q== X-CSE-MsgGUID: WvVewy7MTCipDt4h5yO1EQ== X-IronPort-AV: E=McAfee;i="6800,10657,11905"; a="639926" X-IronPort-AV: E=Sophos;i="6.27,103,1787036400"; d="scan'208";a="639926" Received: from fmviesa010.fm.intel.com ([10.60.135.150]) by fmvoesa114.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 17 Sep 2026 12:14:22 -0700 X-CSE-ConnectionGUID: JW4DR9DjSyirA07xeWJz+Q== X-CSE-MsgGUID: psCcIYUWTAKCIzzOOl7Glw== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.27,103,1787036400"; d="scan'208";a="270271981" Received: from fpallare-mobl4.ger.corp.intel.com (HELO ahunter6-desk) ([10.245.245.5]) by fmviesa010-auth.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 17 Sep 2026 12:14:20 -0700 From: Adrian Hunter To: alexandre.belloni@bootlin.com Cc: Frank.Li@nxp.com, billy_tsai@aspeedtech.com, linux-i3c@lists.infradead.org, linux-kernel@vger.kernel.org Subject: [PATCH V2 08/17] i3c: mipi-i3c-hci: Fix runtime PM violation in i3c_hci_free_ibi() Date: Thu, 17 Sep 2026 22:13:47 +0300 Message-ID: <20260917191356.133242-9-adrian.hunter@intel.com> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20260917191356.133242-1-adrian.hunter@intel.com> References: <20260917191356.133242-1-adrian.hunter@intel.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Organization: Intel Finland Oy, Registered Address: c/o Alberga Business Park, 6 krs, Bertel Jungin Aukio 5, 02600 Espoo, Business Identity Code: 0357606 - 4, Domiciled in Helsinki Content-Transfer-Encoding: 8bit i3c_hci_free_ibi() calls __i3c_hci_disable_ibi(), but the latter requires runtime PM to be resumed. The ->free_ibi() callback does not guarantee that condition. The cases where ->free_ibi() may be called without a preceding ->disable_ibi() do not require re-enabling runtime PM handling: - runtime resume failed in i3c_dev_free_ibi_locked(), so it skips the IBI disable but still proceeds to call ->free_ibi() - the device has been re-enumerated under a new dynamic address in __i3c_master_add_i3c_dev_locked(), which tears down the old device descriptor and deliberately clears olddev->ibi->enabled (to avoid sending a DISEC to the stale old address) before calling i3c_dev_free_ibi_locked(). As a result ->free_ibi() is reached with neither a hardware IBI disable nor runtime PM resumed. In both cases the important requirement is to prevent further IBI processing for the device. That can be done without accessing hardware by removing the device from the ibi_devs[] table. Replace the call to __i3c_hci_disable_ibi() with clearing the corresponding ibi_devs[] entry under the controller lock. Fixes: 650716f23eac4 ("i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev()") Signed-off-by: Adrian Hunter --- Changes in V2: None drivers/i3c/master/mipi-i3c-hci/core.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/drivers/i3c/master/mipi-i3c-hci/core.c b/drivers/i3c/master/mipi-i3c-hci/core.c index f6a34ce7a295..b9b20797d045 100644 --- a/drivers/i3c/master/mipi-i3c-hci/core.c +++ b/drivers/i3c/master/mipi-i3c-hci/core.c @@ -675,11 +675,13 @@ static void __i3c_hci_disable_ibi(struct i3c_hci *hci, struct i3c_dev_desc *dev) static void i3c_hci_free_ibi(struct i3c_dev_desc *dev) { + struct i3c_hci_dev_data *dev_data = i3c_dev_get_master_data(dev); struct i3c_master_controller *m = i3c_dev_get_master(dev); struct i3c_hci *hci = to_i3c_hci(m); - /* Must ensure the IBI has been disabled */ - __i3c_hci_disable_ibi(hci, dev); + /* Must ensure IBIs for this device will no longer be processed */ + scoped_guard(spinlock_irqsave, &hci->lock) + hci->ibi_devs[dev_data->dat_idx] = NULL; hci->io->free_ibi(hci, dev); } -- 2.53.0