From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-13.7 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_CR_TRAILER,INCLUDES_PATCH, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id E760FC48BE5 for ; Tue, 22 Jun 2021 14:10:50 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id D0F2A60238 for ; Tue, 22 Jun 2021 14:10:50 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231617AbhFVONF (ORCPT ); Tue, 22 Jun 2021 10:13:05 -0400 Received: from mga03.intel.com ([134.134.136.65]:51989 "EHLO mga03.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231417AbhFVONE (ORCPT ); Tue, 22 Jun 2021 10:13:04 -0400 IronPort-SDR: 3q/6M4fNKHHgqNl1IfPUGh5dWbUjsPRa7d8Eu8uJzeWOytHuAkgK15ttFcG4z9qIKN61RVTZLX PMg88P67Xxlw== X-IronPort-AV: E=McAfee;i="6200,9189,10022"; a="207101845" X-IronPort-AV: E=Sophos;i="5.83,291,1616482800"; d="scan'208,223";a="207101845" Received: from fmsmga001.fm.intel.com ([10.253.24.23]) by orsmga103.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 22 Jun 2021 07:10:47 -0700 IronPort-SDR: XwMrvo22xFp8Tq/kpWM74fIWz1w5k/BkLWfidv+tyiAQyf0J0vaim1urcIr/1BdOEsxB5s2u2M 6Et0IGdTQVlw== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.83,291,1616482800"; d="scan'208,223";a="556628734" Received: from kuha.fi.intel.com ([10.237.72.162]) by fmsmga001.fm.intel.com with SMTP; 22 Jun 2021 07:10:45 -0700 Received: by kuha.fi.intel.com (sSMTP sendmail emulation); Tue, 22 Jun 2021 17:10:44 +0300 Date: Tue, 22 Jun 2021 17:10:44 +0300 From: Heikki Krogerus To: Dominik Brodowski Cc: Andy Shevchenko , Lee Jones , Linux Kernel Mailing List Subject: Re: v5.13-rcX regression - NULL pointer dereference - MFD and software node API Message-ID: References: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="3SPjdNkkrV0/DJ7d" Content-Disposition: inline In-Reply-To: Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org --3SPjdNkkrV0/DJ7d Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Tue, Jun 22, 2021 at 11:09:58AM +0300, Heikki Krogerus wrote: > On Mon, Jun 21, 2021 at 05:31:50PM +0200, Dominik Brodowski wrote: > > Am Mon, Jun 21, 2021 at 01:37:59PM +0300 schrieb Heikki Krogerus: > > > On Mon, Jun 21, 2021 at 01:00:06PM +0300, Andy Shevchenko wrote: > > > > Can you, please, attach this to the bug report? > > > > > > > > Long story here is that the device creation fails but we already have added > > > > swnode to it. Meanwhile, device itself is not completely instantiated (yet) > > > > and dev_name(dev) is NULL. The software_node_notify() is called with such > > > > device and Oopses in the following line > > > > > > > > sysfs_remove_link(&swnode->kobj, dev_name(dev)); > > > > > > > > My patch fixes another issue that might happen before this and in the code > > > > that retrieves swnode itself in the device_remove_software_node(). > > > > > > > > Of course my patch won't fix this issue. > > > > > > > > I have heard that Heikki is looking how to fix the issue in your case and > > > > potentially in any other cases where device_add_software_node() is called > > > > against not formed object instance. > > > > > > Dominik, can you test the attached patch to confirm if this really is > > > the case. > > > > With this patch applied, the panic disappears. > > Thanks Dominik. I'll clean it and send it out today. Before I send the patch to Rafael and Greg, can you confirm that the appropriate API (device_is_registered()) also works? I'm attaching patch that should be the final version (if it works). I'm sorry to bother you with this. thanks, -- heikki --3SPjdNkkrV0/DJ7d Content-Type: text/plain; charset=us-ascii Content-Disposition: attachment; filename="0001-software-node-Handle-software-node-injection-to-an-e.patch" >From 9dcfc8e6bae658288fa6f112efc18246285f0f27 Mon Sep 17 00:00:00 2001 From: Heikki Krogerus Date: Mon, 21 Jun 2021 13:31:51 +0300 Subject: [PATCH] software node: Handle software node injection to an existing device properly The function software_node_notify(), which creates and removes the symlinks between the software node and the device, must be called conditionally. In normal case software_node_notify() is called automatically when the device that the software node is assigned to is registered, and only in the special cases where the software node has to be added to an already existing device it needs to be called separately. This fixes NULL pointer dereference that happenes if device_remove_software_node() is called with device that was never registered. Fixes: b622b24519f5 ("software node: Allow node addition to already existing device") Reported-by: Dominik Brodowski Cc: Andy Shevchenko Signed-off-by: Heikki Krogerus --- drivers/base/swnode.c | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/drivers/base/swnode.c b/drivers/base/swnode.c index 3cc11b813f28c..042eef31b182a 100644 --- a/drivers/base/swnode.c +++ b/drivers/base/swnode.c @@ -1045,7 +1045,16 @@ int device_add_software_node(struct device *dev, const struct software_node *nod } set_secondary_fwnode(dev, &swnode->fwnode); - software_node_notify(dev, KOBJ_ADD); + + /* + * Software nodes are also allowed to be added to already existing + * devices. If the device has been fully registered by the time this + * function is called, software_node_notify() must be called separately + * so that the symlinks get created and the reference count of the node + * is kept in balance. + */ + if (device_is_registered(dev)) + software_node_notify(dev, KOBJ_ADD); return 0; } @@ -1065,7 +1074,8 @@ void device_remove_software_node(struct device *dev) if (!swnode) return; - software_node_notify(dev, KOBJ_REMOVE); + if (device_is_registered(dev)) + software_node_notify(dev, KOBJ_REMOVE); set_secondary_fwnode(dev, NULL); kobject_put(&swnode->kobj); } -- 2.30.2 --3SPjdNkkrV0/DJ7d--