From: sashiko-bot@kernel.org
To: Frank.Li@oss.nxp.com
Cc: Frank.Li@kernel.org, imx@lists.linux.dev
Subject: Re: [PATCH 1/1] pinctrl: pinctrl-generic-mux: use mux_state_try_select()
Date: Wed, 15 Jul 2026 19:51:43 +0000 [thread overview]
Message-ID: <20260715195143.DEFC81F000E9@smtp.kernel.org> (raw)
In-Reply-To: <20260715193546.2852108-1-Frank.Li@oss.nxp.com>
Thank you for your contribution! Sashiko AI review found 2 potential issue(s) to consider:
New issues:
- [High] Replacing `mux_state_select()` with `mux_state_try_select()` causes silent pin configuration failures during driver probe.
Pre-existing issues:
- [High] Concurrent radix tree insertions and data races due to missing lock in `mux_pinmux_dt_node_to_map`.
--
--- Patch [1]: [PATCH 1/1] pinctrl: pinctrl-generic-mux: use mux_state_try_select() ---
commit 8b69728953c0e1594fa409568136b389105c9d0b
Author: Frank Li <Frank.Li@nxp.com>
pinctrl: pinctrl-generic-mux: use mux_state_try_select()
This commit updates the generic mux driver to use mux_state_try_select()
instead of mux_state_select(). This prevents the consumer driver from
blocking during probe when the mux state is already selected.
> diff --git a/drivers/pinctrl/pinctrl-generic-mux.c b/drivers/pinctrl/pinctrl-generic-mux.c
> index da5a5ec015833..202b72351efb7 100644
> --- a/drivers/pinctrl/pinctrl-generic-mux.c
> +++ b/drivers/pinctrl/pinctrl-generic-mux.c
> @@ -93,7 +93,7 @@ static int mux_pinmux_set_mux(struct pinctrl_dev *pctldev,
> function = pinmux_generic_get_function(pctldev, func_selector);
> func = function->data;
>
> - ret = mux_state_select(func->mux_state);
> + ret = mux_state_try_select(func->mux_state);
[Severity: High]
Does returning -EBUSY here lead to silent pin configuration failures?
When mux_pinmux_set_mux() returns -EBUSY on contention during a consumer's
probe, the error propagates up to the pinctrl core in pinctrl_bind_pins().
Because the device core intentionally ignores most errors from
pinctrl_bind_pins() (only propagating -EPROBE_DEFER and -EINVAL), it
swallows the -EBUSY error. As a result, the probe silently succeeds while
the device's pins remain unconfigured.
> if (ret)
> return ret;
>
[Severity: High]
This is a pre-existing issue, but is it safe to add functions to the radix
tree without locking?
When multiple consumer devices probe concurrently, their execution paths
can run in parallel and invoke pinctrl_dt_to_map(), which calls
mux_pinmux_dt_node_to_map() on the shared generic mux:
drivers/pinctrl/pinctrl-generic-mux.c:mux_pinmux_dt_node_to_map() {
...
ret = pinmux_generic_add_function(pctldev, np_config->name, group_names,
1, function);
...
}
Because pinmux_generic_add_function() modifies pctldev->pin_function_tree
and increments pctldev->num_functions without protection, concurrent
insertions can structurally corrupt the radix tree.
--
Sashiko AI review · https://sashiko.dev/#/patchset/20260715193546.2852108-1-Frank.Li@oss.nxp.com?part=1
next prev parent reply other threads:[~2026-07-15 19:51 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-07-15 19:35 [PATCH 1/1] pinctrl: pinctrl-generic-mux: use mux_state_try_select() Frank.Li
2026-07-15 19:51 ` sashiko-bot [this message]
2026-07-15 20:12 ` Frank Li
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260715195143.DEFC81F000E9@smtp.kernel.org \
--to=sashiko-bot@kernel.org \
--cc=Frank.Li@kernel.org \
--cc=Frank.Li@oss.nxp.com \
--cc=imx@lists.linux.dev \
--cc=sashiko-reviews@lists.linux.dev \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox