[PATCH] soc: fsl: qbman: order the probed flags with release/acquire

Christophe Leroy (CS GROUP) chleroy at kernel.org
Tue Sep 22 03:28:12 PDT 2026


Hi,

Le 22/09/2026 à 02:47, Jaidev Shastri via B4 Relay a écrit :
> [Vous ne recevez pas souvent de courriers de devnull+jaidevshastri.vt.edu at kernel.org. Découvrez pourquoi ceci est important à https://aka.ms/LearnAboutSenderIdentification ]
> 
> From: Jaidev Shastri <jaidevshastri at vt.edu>
> 
> dpaa_eth, caam and the portal drivers poll qman_is_probed(),
> bman_is_probed(), qman_portals_probed() and bman_portals_probed() before
> they touch the state the probe functions set up: qman_ip_rev, the CCSR
> and portal register maps, the FQD and PFDR bases, affine_portals and the
> pool allocators.
> 
> Each flag is set with a plain store at the end of its probe function and
> read with a plain load in the exported accessor. The stores that build
> the state are not ordered before the store to the flag, and the
> consumer's load of the flag is not ordered before its loads of the
> state. A consumer probing on another CPU can see the flag set and then
> read state that is still stale or zeroed, and program the hardware with
> it.
> 
> Set the flags with smp_store_release() and read them with
> smp_load_acquire(). The error paths storing -1 keep their plain stores:
> a consumer that sees -1 fails its own probe without touching the state.
> 
> Found with MBCheck, a static herd7-based memory consistency checker.

Sashiko made comments, can you have a look ?

https://sashiko.dev/#/patchset/20260921-mb-qbman-v1-1-35f3321aa330@vt.edu

Christophe

> 
> Signed-off-by: Jaidev Shastri <jaidevshastri at vt.edu>
> ---
>   drivers/soc/fsl/qbman/bman_ccsr.c   |  6 ++++--
>   drivers/soc/fsl/qbman/bman_portal.c |  6 ++++--
>   drivers/soc/fsl/qbman/qman_ccsr.c   | 11 +++++++++--
>   drivers/soc/fsl/qbman/qman_portal.c |  6 ++++--
>   4 files changed, 21 insertions(+), 8 deletions(-)
> 
> diff --git a/drivers/soc/fsl/qbman/bman_ccsr.c b/drivers/soc/fsl/qbman/bman_ccsr.c
> index b0f26f6f7..c5be35aba 100644
> --- a/drivers/soc/fsl/qbman/bman_ccsr.c
> +++ b/drivers/soc/fsl/qbman/bman_ccsr.c
> @@ -180,7 +180,8 @@ static irqreturn_t bman_isr(int irq, void *ptr)
> 
>   int bman_is_probed(void)
>   {
> -       return __bman_probed;
> +       /* Pairs with smp_store_release() in fsl_bman_probe(). */
> +       return smp_load_acquire(&__bman_probed);
>   }
>   EXPORT_SYMBOL_GPL(bman_is_probed);
> 
> @@ -279,7 +280,8 @@ static int fsl_bman_probe(struct platform_device *pdev)
>                  return ret;
>          }
> 
> -       __bman_probed = 1;
> +       /* Order bm_ccsr_start, bman_ip_rev and the pool allocator before the flag. */
> +       smp_store_release(&__bman_probed, 1);
> 
>          return 0;
>   };
> diff --git a/drivers/soc/fsl/qbman/bman_portal.c b/drivers/soc/fsl/qbman/bman_portal.c
> index 4d7b9caee..056fe3fbb 100644
> --- a/drivers/soc/fsl/qbman/bman_portal.c
> +++ b/drivers/soc/fsl/qbman/bman_portal.c
> @@ -90,7 +90,8 @@ static int bman_online_cpu(unsigned int cpu)
> 
>   int bman_portals_probed(void)
>   {
> -       return __bman_portals_probed;
> +       /* Pairs with smp_store_release() in bman_portal_probe(). */
> +       return smp_load_acquire(&__bman_portals_probed);
>   }
>   EXPORT_SYMBOL_GPL(bman_portals_probed);
> 
> @@ -157,7 +158,8 @@ static int bman_portal_probe(struct platform_device *pdev)
>          spin_lock(&bman_lock);
>          cpu = cpumask_first_zero(&portal_cpus);
>          if (cpu >= nr_cpu_ids) {
> -               __bman_portals_probed = 1;
> +               /* All CPU-bound portals are initialised and in affine_bportals. */
> +               smp_store_release(&__bman_portals_probed, 1);
>                  /* unassigned portal, skip init */
>                  spin_unlock(&bman_lock);
>                  goto check_cleanup;
> diff --git a/drivers/soc/fsl/qbman/qman_ccsr.c b/drivers/soc/fsl/qbman/qman_ccsr.c
> index aa5348f49..b46cfb964 100644
> --- a/drivers/soc/fsl/qbman/qman_ccsr.c
> +++ b/drivers/soc/fsl/qbman/qman_ccsr.c
> @@ -711,7 +711,8 @@ static int qman_resource_init(struct device *dev)
> 
>   int qman_is_probed(void)
>   {
> -       return __qman_probed;
> +       /* Pairs with smp_store_release() in fsl_qman_probe(). */
> +       return smp_load_acquire(&__qman_probed);
>   }
>   EXPORT_SYMBOL_GPL(qman_is_probed);
> 
> @@ -864,7 +865,13 @@ static int fsl_qman_probe(struct platform_device *pdev)
>          if (ret)
>                  return ret;
> 
> -       __qman_probed = 1;
> +       /*
> +        * Publish the flag only after every store made above (qman_ip_rev,
> +        * qm_ccsr_start, the FQD/PFDR bases, the work queue) is visible to
> +        * the consumers that poll qman_is_probed() and then call into
> +        * qman_set_sdest(), qman_liodn_fixup(), qman_alloc_*().
> +        */
> +       smp_store_release(&__qman_probed, 1);
> 
>          return 0;
>   }
> diff --git a/drivers/soc/fsl/qbman/qman_portal.c b/drivers/soc/fsl/qbman/qman_portal.c
> index 456ef5d5c..181c0f373 100644
> --- a/drivers/soc/fsl/qbman/qman_portal.c
> +++ b/drivers/soc/fsl/qbman/qman_portal.c
> @@ -175,7 +175,8 @@ static int qman_online_cpu(unsigned int cpu)
> 
>   int qman_portals_probed(void)
>   {
> -       return __qman_portals_probed;
> +       /* Pairs with smp_store_release() in qman_portal_probe(). */
> +       return smp_load_acquire(&__qman_portals_probed);
>   }
>   EXPORT_SYMBOL_GPL(qman_portals_probed);
> 
> @@ -251,7 +252,8 @@ static int qman_portal_probe(struct platform_device *pdev)
>          spin_lock(&qman_lock);
>          cpu = cpumask_first_zero(&portal_cpus);
>          if (cpu >= nr_cpu_ids) {
> -               __qman_portals_probed = 1;
> +               /* All CPU-bound portals are initialised and in affine_portals. */
> +               smp_store_release(&__qman_portals_probed, 1);
>                  /* unassigned portal, skip init */
>                  spin_unlock(&qman_lock);
>                  goto check_cleanup;
> 
> ---
> base-commit: 93f51579e7df248780214094418f205253383cc5
> change-id: 20260921-mb-qbman-84f56ef0f84c
> 
> Best regards,
> --
> Jaidev Shastri <jaidevshastri at vt.edu>
> 
> 




More information about the linux-arm-kernel mailing list