From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=100.103.45.18 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1794282789; b=cO7tCUBSg2mz4sspTtoZQ+5XZTspZyAgMUc8fH1WkKcp7hCpjKOWjAMNovFN/7T74Ie5 qpLdoCp+xfZR1udzOikwv/B0gTsaG2AWFVUz97bkW2ThujPirHUPGp4z3Txv59TJO8m4o CNvjQH084+O+I67G/GmxzjLf5p/UC+9BHUWPqupXHkjab3FHk2yAsNHQG3EtQrqN/r0gC FnsVaKtDeKYHXaVfSiwOv3MzNL7vrUxlGytcVtVzIb52wdlH+3zoA/1x4Np8vsD7u5UcN v34XuV18jVQI/rS4S54EuRSeBfDuXtf0gBA37n78ok28/PjDpA1VKjD4R+sjKw86d0g== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1794282789; h=Received:DKIM-Signature:From:To:Cc:Subject:Date:Message-ID:X-Mailer: In-Reply-To:References:MIME-Version:Content-Transfer-Encoding; bh=1jNS1y3YdKyGEwUpHBD99UbEoI6wwaHTtlywJhldP0g=; b=FOrY1b1VP0M2xJ7SEKZyh9E5qKJC5FSrV6VouEzhTbf6XcWd40COP8tP1gQKWiOspkrS 7UhjhlGL7L3L+46umcKl0zLQS1nbr7q1afNlaTN2tEXXacLwN8f3O5eCsY9KIR4xfeOjR zvde7bJf0CPwaYIBuobJVND30Lek4uhHosAvycnwl11TbaiYoPdt+o99Jo9/ahAq/epdW 1kZ7OtY+ezaN2UFOM/vp34RSfBlW+8K8BfDr+5KVaTK/lLudDCuw1DHakpwNY3uiaZOOM Y2sQXwGhPLlNRnsEhUXuqLn4dnY6WwD0gN9ipDU6kqYi+atQpTfdbcmNqcC/d/Z8whQ== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dkim=pass header.d=kernel.org header.i=@kernel.org header.a=rsa-sha256 header.s=k20260515 header.b=bbl3DYuF; arc=none smtp.remote-ip=100.103.45.18 Received: from smtp.kernel.org (quasi.space.kernel.org [100.103.45.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (prime256v1)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 82E1F606A330 for ; Tue, 10 Nov 2026 03:53:09 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.a=rsa-sha256 header.s=k20260515 header.b=bbl3DYuF Received: by smtp.kernel.org (Postfix) with ESMTPSA id 3E79E1F0089F; Tue, 10 Nov 2026 03:53:08 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1794282789; bh=1jNS1y3YdKyGEwUpHBD99UbEoI6wwaHTtlywJhldP0g=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=bbl3DYuF//Ludg2KJuXZRvNY7if/LWXvOdiOFBfVXyW4U/2q1kfDPCFqimzj/34uV /AdC5fE8iQEwvG8YIyyG7VxiOz9AUDDGvFvgCJgcyrSyED0hLBlCwG2V9KjkBSPJ21 7j7SLBb/9WBGbNmjHuEW4BFsSM3Mv/zjApqlk5wXiDIhTsKyQThZrOWVEBs+pFy0q9 V7WKIyNqAhRJ8E/fnGJAj3w2nM6CLUQT19Xernlwvc31CQUk0NeuEqXfAslQbLKoYG /HZIZrVAlaoefeJnmEFCJtcuCGpjCkRKcE5OOe4+DUvd6U6zlYixeSz+vf13yQ03l+ QdqyC0giBfpKA== From: Sasha Levin To: stable@vger.kernel.org Cc: Abel Vesa , Johan Hovold , Caleb Connolly , Bjorn Andersson , Abel Vesa , Sasha Levin Subject: [PATCH 6.6.y] soc: qcom: pmic_glink: Fix device access from worker during suspend Date: Mon, 9 Nov 2026 22:53:07 -0500 Message-ID: <20261110035248.280109-1-sashal@kernel.org> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20261107052830-failed-6.6-7d0767c5cd87@kernel.org> References: <20261107052830-failed-6.6-7d0767c5cd87@kernel.org> X-Mailing-List: stable@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Transfer-Encoding: 8bit From: Abel Vesa [ Upstream commit 7d0767c5cd878707fd6711023731549c83563840 ] For historical reasons, the GLINK smem interrupt is registered with IRRQF_NO_SUSPEND flag set, which is the underlying problem here, since the incoming messages can be delivered during late suspend and early resume. In this specific case, the pmic_glink_altmode_worker() currently gets scheduled on the system_wq which can be scheduled to run while devices are still suspended. This proves to be a problem when a Type-C retimer, switch or mux that is controlled over a bus like I2C, because the I2C controller is suspended. This has been proven to be the case on the X Elite boards where such retimers (ParadeTech PS8830) are used in order to handle Type-C orientation and altmode configuration. The following warning is thrown: [ 35.134876] i2c i2c-4: Transfer while suspended [ 35.143865] WARNING: CPU: 0 PID: 99 at drivers/i2c/i2c-core.h:56 __i2c_transfer+0xb4/0x57c [i2c_core] [ 35.352879] Workqueue: events pmic_glink_altmode_worker [pmic_glink_altmode] [ 35.360179] pstate: 61400005 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 35.455242] Call trace: [ 35.457826] __i2c_transfer+0xb4/0x57c [i2c_core] (P) [ 35.463086] i2c_transfer+0x98/0xf0 [i2c_core] [ 35.467713] i2c_transfer_buffer_flags+0x54/0x88 [i2c_core] [ 35.473502] regmap_i2c_write+0x20/0x48 [regmap_i2c] [ 35.478659] _regmap_raw_write_impl+0x780/0x944 [ 35.483401] _regmap_bus_raw_write+0x60/0x7c [ 35.487848] _regmap_write+0x134/0x184 [ 35.491773] regmap_write+0x54/0x78 [ 35.495418] ps883x_set+0x58/0xec [ps883x] [ 35.499688] ps883x_sw_set+0x60/0x84 [ps883x] [ 35.504223] typec_switch_set+0x48/0x74 [typec] [ 35.508952] pmic_glink_altmode_worker+0x44/0x1fc [pmic_glink_altmode] [ 35.515712] process_scheduled_works+0x1a0/0x2d0 [ 35.520525] worker_thread+0x2a8/0x3c8 [ 35.524449] kthread+0xfc/0x184 [ 35.527749] ret_from_fork+0x10/0x20 The proper solution here should be to not deliver these kind of messages during system suspend at all, or at least make it configurable per glink client. But simply dropping the IRQF_NO_SUSPEND flag entirely will break other clients. The final shape of the rework of the pmic glink driver in order to fulfill both the filtering of the messages that need to be able to wake-up the system and the queueing of these messages until the system has properly resumed is still being discussed and it is planned as a future effort. Meanwhile, the stop-gap fix here is to schedule the pmic glink altmode worker on the system_freezable_wq instead of the system_wq. This will result in the altmode worker not being scheduled to run until the devices are resumed first, which will give the controllers like I2C a chance to resume before the transfer is requested. Reported-by: Johan Hovold Closes: https://lore.kernel.org/lkml/Z1CCVjEZMQ6hJ-wK@hovoldconsulting.com/ Fixes: 080b4e24852b ("soc: qcom: pmic_glink: Introduce altmode support") Cc: stable@vger.kernel.org # 6.3 Reviewed-by: Caleb Connolly Reviewed-by: Bjorn Andersson Signed-off-by: Abel Vesa Signed-off-by: Abel Vesa Link: https://lore.kernel.org/r/20260819-b4-soc-qcom-pmic-glink-fix-device-access-on-worker-while-suspended-v3-1-169b00e0d9d4@oss.qualcomm.com Signed-off-by: Bjorn Andersson [ sashal: adjusted context to match mode and HPD assignments before the work queue call ] Signed-off-by: Sasha Levin --- drivers/soc/qcom/pmic_glink_altmode.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/soc/qcom/pmic_glink_altmode.c b/drivers/soc/qcom/pmic_glink_altmode.c index 60b0d79efb0f1..7bc350bcb003d 100644 --- a/drivers/soc/qcom/pmic_glink_altmode.c +++ b/drivers/soc/qcom/pmic_glink_altmode.c @@ -296,7 +296,7 @@ static void pmic_glink_altmode_sc8180xp_notify(struct pmic_glink_altmode *altmod alt_port->mode = mode; alt_port->hpd_state = hpd_state; alt_port->hpd_irq = hpd_irq; - schedule_work(&alt_port->work); + queue_work(system_freezable_wq, &alt_port->work); } #define SC8280XP_DPAM_MASK 0x3f @@ -339,7 +339,7 @@ static void pmic_glink_altmode_sc8280xp_notify(struct pmic_glink_altmode *altmod alt_port->mode = mode; alt_port->hpd_state = hpd_state; alt_port->hpd_irq = hpd_irq; - schedule_work(&alt_port->work); + queue_work(system_freezable_wq, &alt_port->work); } static void pmic_glink_altmode_callback(const void *data, size_t len, void *priv) -- 2.53.0