]> git.ipfire.org Git - thirdparty/kernel/linux.git/commitdiff
drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()
authorLuca Coelho <luciano.coelho@intel.com>
Mon, 22 Jun 2026 14:03:58 +0000 (17:03 +0300)
committerMaarten Lankhorst <dev@lankhorst.se>
Wed, 1 Jul 2026 10:07:10 +0000 (12:07 +0200)
A hotplug or link-loss event can tear down the MST topology
(setting mgr->mst_state = false and mgr->mst_primary = NULL) concurrently
with a caller invoking drm_dp_mst_topology_queue_probe(). Since the check
is already performed under mgr->lock, the condition is not a programming
error but a valid race -- the topology was valid when the caller decided
to call this function, but was torn down before the lock was acquired.

Replace the drm_WARN_ON() with a graceful early return. This eliminates
spurious kernel warnings and the resulting compositor crashes observed
when connecting/disconnecting DP MST monitors, while keeping the correct
behavior of doing nothing when MST is not active. A drm_dbg_mst() trace
is added so the skipped probe remains observable under MST debug logging.

The existing WARN_ON(mgr->mst_primary) in drm_dp_mst_topology_mgr_set_mst()
already catches the case where the topology is initialized twice, so no
diagnostic coverage is lost.

Fixes: dbaeef363ea5 ("drm/dp_mst: Add a helper to queue a topology probe")
Cc: Imre Deak <imre.deak@intel.com>
Cc: Lyude Paul <lyude@redhat.com>
Cc: stable@vger.kernel.org
Cc: intel-gfx@lists.freedesktop.org
Cc: dri-devel@lists.freedesktop.org
Signed-off-by: Jonas Emilsson <jonas.emilsson@gmail.com>
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
Link: https://lore.kernel.org/all/20260503034533.1023686-1-jonas.emilsson@gmail.com
Acked-by: Imre Deak <imre.deak@intel.com>
Link: https://patch.msgid.link/20260622140532.526722-1-luciano.coelho@intel.com
Signed-off-by: Maarten Lankhorst <dev@lankhorst.se>
drivers/gpu/drm/display/drm_dp_mst_topology.c

index 4de36fda0544008a83a951410cae41b61e4c0ef0..7ce9e212770ad1fd14688e40a5fb8075f67629fb 100644 (file)
@@ -3740,8 +3740,10 @@ void drm_dp_mst_topology_queue_probe(struct drm_dp_mst_topology_mgr *mgr)
 {
        mutex_lock(&mgr->lock);
 
-       if (drm_WARN_ON(mgr->dev, !mgr->mst_state || !mgr->mst_primary))
+       if (!mgr->mst_state || !mgr->mst_primary) {
+               drm_dbg_kms(mgr->dev, "queue_probe skipped: topology torn down\n");
                goto out_unlock;
+       }
 
        drm_dp_mst_topology_mgr_invalidate_mstb(mgr->mst_primary);
        drm_dp_mst_queue_probe_work(mgr);