From: Mika Westerberg <mika.westerberg@linux.intel.com>
To: Sven Peter <sven@kernel.org>
Cc: Andreas Noever <andreas.noever@gmail.com>,
Mika Westerberg <westeri@kernel.org>,
Yehezkel Bernat <YehezkelShB@gmail.com>,
asahi@lists.linux.dev, linux-usb@vger.kernel.org,
linux-kernel@vger.kernel.org,
Konrad Dybcio <konradybcio@kernel.org>,
stable@vger.kernel.org
Subject: Re: [PATCH 5/5] thunderbolt: Cancel the DPRX read when the domain is stopped
Date: Mon, 24 Aug 2026 12:20:11 +0200 [thread overview]
Message-ID: <20260824102011.GD893316@black.igk.intel.com> (raw)
In-Reply-To: <d989dda7-951c-4e4a-b251-aa5e97a6ebd7@kernel.org>
Hi,
On Sun, Aug 23, 2026 at 01:34:17PM +0200, Sven Peter wrote:
> hi,
>
>
> On 8/21/26 19:58, Sven Peter wrote:
> > Hi,
> >
> > On 8/18/26 08:17, Mika Westerberg wrote:
> > > Hi,
> > >
> > > On Mon, Aug 17, 2026 at 09:54:02PM +0200, Sven Peter wrote:
> > > > tb_stop only tears down DMA tunnels so a DP tunnel that is still
> > > > waiting for dprx_work to complete keeps that work queued while the
> > > > routers are removed and the control channel is stopped. The work only
> > > > stops once the DPRX timeout has passed and because it requeues itself
> > > > until then the flush_workqueue in tb_domain_remove won't wait for its
> > > > final run. The callback then runs against a domain that is already torn
> > > > down. A reference to that domain is kept so the completion waiting for
> > > > that domain to disappear in unbind will block until the timeout is
> > > > eventually reached.
> > > >
> > > > Just cancel the work in tb_stop. This doesn't affect DP tunnels that are
> > > > already alive and keeps those displays working.
> > > >
> > > > Fixes: d6d458d42e1e ("thunderbolt: Handle DisplayPort tunnel
> > > > activation asynchronously")
> > > > Cc: stable@vger.kernel.org
> > > > Signed-off-by: Sven Peter <sven@kernel.org>
> > > > ---
> > > > I also didn't run into this but noticed it when fixing the hop
> > > > alloc thing
> > > > and think it makes sense to fix it anyway.
> > > > ---
> > > > drivers/thunderbolt/tb.c | 5 ++++-
> > > > drivers/thunderbolt/tunnel.c | 9 +++++++++
> > > > drivers/thunderbolt/tunnel.h | 1 +
> > > > 3 files changed, 14 insertions(+), 1 deletion(-)
> > > >
> > > > diff --git a/drivers/thunderbolt/tb.c b/drivers/thunderbolt/tb.c
> > > > index e368a6b53f64..f7e68372da09 100644
> > > > --- a/drivers/thunderbolt/tb.c
> > > > +++ b/drivers/thunderbolt/tb.c
> > > > @@ -2958,10 +2958,13 @@ static void tb_stop(struct tb *tb)
> > > > /*
> > > > * DMA tunnels require the driver to be functional so we
> > > > * tear them down. Other protocol tunnels can be left
> > > > - * intact.
> > > > + * intact but a DPRX capabilities read that is still in
> > > > + * flight has to be canceled before the routers go away.
> > > > */
> > > > if (tb_tunnel_is_dma(tunnel))
> > > > tb_tunnel_deactivate(tunnel);
> > > > + else if (tb_tunnel_is_dp(tunnel))
> > > > + tb_tunnel_cancel_dprx(tunnel);
> > > I prefer not to expose "non-generic" functions for the CM if possible. I
> > > wonder if this would work:
> > >
> > > else if (tb_tunnel_is_dp(tunnel) && !tb_tunnel_is_active(tunnel))
> > > tb_tunnel_deactivate(tunnel);
> >
> > I think this might also tear down discovered tunnels because they aren't
> > originally set to active in tb_tunnel_discover_dp().
>
> this is correct I think, but
>
> > Only on the resume path tb_tunnel_activate() is then called on
> > everything in tcm->tunnel_list which will, because they have no
> > callback, then reach tb_dp_dprx_start(), take the synchronous path and
> > then finally end up in tb_tunnel_activate().
>
> ^-- is only true for the hibernation path:
>
> nhi_freeze_noirq() -> tb_domain_freeze_noirq() -> tb_freeze_noirq() ->
> hotplug_active = false but nothing else, so tunnels stay in the list
Right we keep the tunnels up until the poweroff happens so that whatever
displays the user has stay enabled.
> and then on restore:
>
> nhi_resume_noirq() -> tb_domain_resume_noirq() -> tb_resume_noirq() ->
> tb_tunnel_activate() -> tb_dp_activate(true) -> tb_dp_dprx_start() which
> then has no callback and takes the sync path.
Indeed, I think this is a good reason to make the callback mandatory :)
> while the non-hibernation suspend path ends up in tb_tunnel_deactivate()
> which drops it from tunnel_list and the resume path is fine then I think.
Agree.
prev parent reply other threads:[~2026-08-24 10:20 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-08-17 19:53 [PATCH 0/5] thunderbolt: Fix DP tunnel teardown while an async DPRX read is running Sven Peter
2026-08-17 19:53 ` [PATCH 1/5] thunderbolt: Fix tunnel reference leak when the DPRX work is not started Sven Peter
2026-08-18 4:42 ` Mika Westerberg
2026-08-18 5:44 ` Sven Peter
2026-08-18 6:00 ` Mika Westerberg
2026-08-18 6:11 ` Sven Peter
2026-08-18 6:19 ` Mika Westerberg
2026-08-17 19:53 ` [PATCH 2/5] thunderbolt: Hold a switch reference for each path hop Sven Peter
2026-08-18 6:05 ` Mika Westerberg
2026-08-17 19:54 ` [PATCH 3/5] thunderbolt: Fix domain reference leak when DPRX read is canceled Sven Peter
2026-08-17 19:54 ` [PATCH 4/5] thunderbolt: Don't access a DP tunnel after its DPRX read was canceled Sven Peter
2026-08-18 6:09 ` Mika Westerberg
2026-08-17 19:54 ` [PATCH 5/5] thunderbolt: Cancel the DPRX read when the domain is stopped Sven Peter
2026-08-18 6:17 ` Mika Westerberg
2026-08-21 17:58 ` Sven Peter
2026-08-23 11:34 ` Sven Peter
2026-08-24 10:20 ` Mika Westerberg [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260824102011.GD893316@black.igk.intel.com \
--to=mika.westerberg@linux.intel.com \
--cc=YehezkelShB@gmail.com \
--cc=andreas.noever@gmail.com \
--cc=asahi@lists.linux.dev \
--cc=konradybcio@kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-usb@vger.kernel.org \
--cc=stable@vger.kernel.org \
--cc=sven@kernel.org \
--cc=westeri@kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox