* [PATCH v2 1/2] HID: intel-thc-hid: quickspi: quiesce IRQs during teardown
2026-11-10 4:47 [PATCH v2 0/2] HID: intel-thc-hid: quiesce IRQs during teardown Myeonghun Pak
@ 2026-11-10 4:47 ` Myeonghun Pak
2026-11-10 4:47 ` [PATCH v2 2/2] HID: intel-thc-hid: quicki2c: " Myeonghun Pak
1 sibling, 0 replies; 3+ messages in thread
From: Myeonghun Pak @ 2026-11-10 4:47 UTC (permalink / raw)
To: Even Xu, Xinpeng Sun, Jiri Kosina, Benjamin Tissoires
Cc: Myeonghun Pak, Srinivas Pandruvada, Mark Pearson, linux-input,
linux-kernel, Ijae Kim
The managed IRQ can access HID/DMA buffers or queue recovery work while
remove or probe unwind tears down those resources.
Disable and synchronize the IRQ, drain recovery work, then mask THC
interrupts before freeing the IRQ and releasing HID/DMA resources.
Track IRQ/DMA initialization for conditional probe cleanup.
Disable the IRQ before shutdown deinit as well. Keep IRQ disabling and
release outside the shared hibernation helper.
This issue was found by our static analysis tool under development.
Fixes: 4138f21115ae ("HID: intel-thc-hid: intel-quickspi: Complete THC QuickSPI driver")
Co-developed-by: Ijae Kim <ae878000@gmail.com>
Signed-off-by: Ijae Kim <ae878000@gmail.com>
Signed-off-by: Myeonghun Pak <mhun512@gmail.com>
---
No hardware testing.
Changes in v2:
- Rebase on mainline b3dfbde62cf1. No source changes from v1.
.../intel-thc-hid/intel-quickspi/pci-quickspi.c | 28 +++++++++++++++++-----
1 file changed, 22 insertions(+), 6 deletions(-)
diff --git a/drivers/hid/intel-thc-hid/intel-quickspi/pci-quickspi.c b/drivers/hid/intel-thc-hid/intel-quickspi/pci-quickspi.c
index bf49d8ce5f07bed092339e46c444538d78cffe26..acb4d2716ea7450d2852a900c3f0acc1d7570421 100644
--- a/drivers/hid/intel-thc-hid/intel-quickspi/pci-quickspi.c
+++ b/drivers/hid/intel-thc-hid/intel-quickspi/pci-quickspi.c
@@ -600,6 +600,8 @@ static int quickspi_probe(struct pci_dev *pdev,
const struct pci_device_id *id)
{
struct quickspi_device *qsdev;
+ bool dma_initialized = false;
+ bool irq_requested = false;
void __iomem *mem_addr;
int ret;
@@ -652,6 +654,7 @@ static int quickspi_probe(struct pci_dev *pdev,
qsdev);
if (ret)
goto dev_deinit;
+ irq_requested = true;
ret = reset_tic(qsdev);
if (ret) {
@@ -670,17 +673,18 @@ static int quickspi_probe(struct pci_dev *pdev,
dev_err(&pdev->dev, "Setup THC DMA failed, ret= %d\n", ret);
goto dev_deinit;
}
+ dma_initialized = true;
ret = quickspi_get_report_descriptor(qsdev);
if (ret) {
dev_err(&pdev->dev, "Get report descriptor failed, ret = %d\n", ret);
- goto dma_deinit;
+ goto dev_deinit;
}
ret = quickspi_hid_probe(qsdev);
if (ret) {
dev_err(&pdev->dev, "Failed to register HID device, ret = %d\n", ret);
- goto dma_deinit;
+ goto dev_deinit;
}
qsdev->state = QUICKSPI_ENABLED;
@@ -695,10 +699,16 @@ static int quickspi_probe(struct pci_dev *pdev,
return 0;
-dma_deinit:
- quickspi_dma_deinit(qsdev);
dev_deinit:
+ if (irq_requested) {
+ WRITE_ONCE(qsdev->recovery_disabled, true);
+ disable_irq(pdev->irq);
+ }
quickspi_dev_deinit(qsdev);
+ if (irq_requested)
+ devm_free_irq(&pdev->dev, pdev->irq, qsdev);
+ if (dma_initialized)
+ quickspi_dma_deinit(qsdev);
disable_pci_device:
pci_clear_master(pdev);
@@ -721,9 +731,12 @@ static void quickspi_remove(struct pci_dev *pdev)
if (!qsdev)
return;
- quickspi_hid_remove(qsdev);
-
+ WRITE_ONCE(qsdev->recovery_disabled, true);
+ disable_irq(pdev->irq);
quickspi_dev_deinit(qsdev);
+ devm_free_irq(&pdev->dev, pdev->irq, qsdev);
+
+ quickspi_hid_remove(qsdev);
quickspi_dma_deinit(qsdev);
@@ -750,6 +763,9 @@ static void quickspi_shutdown(struct pci_dev *pdev)
if (!qsdev)
return;
+ WRITE_ONCE(qsdev->recovery_disabled, true);
+ disable_irq(pdev->irq);
+
quickspi_dev_deinit(qsdev);
/* Must stop DMA before reboot to avoid DMA entering into unknown state */
base-commit: b3dfbde62cf1981c4638939c159dfd087b7a72e9
--
2.53.0
^ permalink raw reply [flat|nested] 3+ messages in thread* [PATCH v2 2/2] HID: intel-thc-hid: quicki2c: quiesce IRQs during teardown
2026-11-10 4:47 [PATCH v2 0/2] HID: intel-thc-hid: quiesce IRQs during teardown Myeonghun Pak
2026-11-10 4:47 ` [PATCH v2 1/2] HID: intel-thc-hid: quickspi: " Myeonghun Pak
@ 2026-11-10 4:47 ` Myeonghun Pak
1 sibling, 0 replies; 3+ messages in thread
From: Myeonghun Pak @ 2026-11-10 4:47 UTC (permalink / raw)
To: Even Xu, Xinpeng Sun, Jiri Kosina, Benjamin Tissoires
Cc: Myeonghun Pak, Srinivas Pandruvada, Mark Pearson, linux-input,
linux-kernel, Ijae Kim
The managed IRQ can access HID/DMA buffers or queue recovery work while
remove or probe unwind tears down those resources.
Disable and synchronize the IRQ, drain recovery work, then mask THC
interrupts before freeing the IRQ and releasing HID/DMA resources.
Track IRQ/DMA initialization for conditional probe cleanup.
Disable the IRQ before shutdown deinit as well. Keep IRQ disabling and
release outside the shared hibernation helper.
This issue was found by our static analysis tool under development.
Fixes: 66b59bfce6d9 ("HID: intel-thc-hid: intel-quicki2c: Complete THC QuickI2C driver")
Co-developed-by: Ijae Kim <ae878000@gmail.com>
Signed-off-by: Ijae Kim <ae878000@gmail.com>
Signed-off-by: Myeonghun Pak <mhun512@gmail.com>
---
No hardware testing.
Changes in v2:
- Rebase on mainline b3dfbde62cf1. No source changes from v1.
.../intel-thc-hid/intel-quicki2c/pci-quicki2c.c | 28 +++++++++++++++++-----
1 file changed, 22 insertions(+), 6 deletions(-)
diff --git a/drivers/hid/intel-thc-hid/intel-quicki2c/pci-quicki2c.c b/drivers/hid/intel-thc-hid/intel-quicki2c/pci-quicki2c.c
index 29319b6227f3f6b14f3206d15b544b050b9bad1c..a3e98e0faff83ba90efcbfd244ed641688718342 100644
--- a/drivers/hid/intel-thc-hid/intel-quicki2c/pci-quicki2c.c
+++ b/drivers/hid/intel-thc-hid/intel-quicki2c/pci-quicki2c.c
@@ -652,6 +652,8 @@ static int quicki2c_probe(struct pci_dev *pdev, const struct pci_device_id *id)
{
const struct quicki2c_ddata *ddata = (const struct quicki2c_ddata *)id->driver_data;
struct quicki2c_device *qcdev;
+ bool dma_initialized = false;
+ bool irq_requested = false;
void __iomem *mem_addr;
int ret;
@@ -704,6 +706,7 @@ static int quicki2c_probe(struct pci_dev *pdev, const struct pci_device_id *id)
qcdev);
if (ret)
goto dev_deinit;
+ irq_requested = true;
ret = quicki2c_get_device_descriptor(qcdev);
if (ret) {
@@ -722,6 +725,7 @@ static int quicki2c_probe(struct pci_dev *pdev, const struct pci_device_id *id)
dev_err(&pdev->dev, "Setup THC DMA failed, ret= %d\n", ret);
goto dev_deinit;
}
+ dma_initialized = true;
ret = thc_interrupt_quiesce(qcdev->thc_hw, false);
if (ret)
@@ -742,13 +746,13 @@ static int quicki2c_probe(struct pci_dev *pdev, const struct pci_device_id *id)
ret = quicki2c_get_report_descriptor(qcdev);
if (ret) {
dev_err(&pdev->dev, "Get report descriptor failed, ret = %d\n", ret);
- goto dma_deinit;
+ goto dev_deinit;
}
ret = quicki2c_hid_probe(qcdev);
if (ret) {
dev_err(&pdev->dev, "Failed to register HID device, ret = %d\n", ret);
- goto dma_deinit;
+ goto dev_deinit;
}
qcdev->state = QUICKI2C_ENABLED;
@@ -763,10 +767,16 @@ static int quicki2c_probe(struct pci_dev *pdev, const struct pci_device_id *id)
return 0;
-dma_deinit:
- quicki2c_dma_deinit(qcdev);
dev_deinit:
+ if (irq_requested) {
+ WRITE_ONCE(qcdev->recovery_disabled, true);
+ disable_irq(pdev->irq);
+ }
quicki2c_dev_deinit(qcdev);
+ if (irq_requested)
+ devm_free_irq(&pdev->dev, pdev->irq, qcdev);
+ if (dma_initialized)
+ quicki2c_dma_deinit(qcdev);
disable_pci_device:
pci_clear_master(pdev);
@@ -788,9 +798,12 @@ static void quicki2c_remove(struct pci_dev *pdev)
if (!qcdev)
return;
- quicki2c_hid_remove(qcdev);
-
+ WRITE_ONCE(qcdev->recovery_disabled, true);
+ disable_irq(pdev->irq);
quicki2c_dev_deinit(qcdev);
+ devm_free_irq(&pdev->dev, pdev->irq, qcdev);
+
+ quicki2c_hid_remove(qcdev);
quicki2c_dma_deinit(qcdev);
@@ -815,6 +828,9 @@ static void quicki2c_shutdown(struct pci_dev *pdev)
if (!qcdev)
return;
+ WRITE_ONCE(qcdev->recovery_disabled, true);
+ disable_irq(pdev->irq);
+
quicki2c_dev_deinit(qcdev);
/* Must stop DMA before reboot to avoid DMA entering into unknown state */
base-commit: b3dfbde62cf1981c4638939c159dfd087b7a72e9
--
2.53.0
^ permalink raw reply [flat|nested] 3+ messages in thread