From: "Ilpo Järvinen" <ilpo.jarvinen@linux.intel.com>
To: Jinhui Guo <guojinhui.liam@bytedance.com>
Cc: bhelgaas@google.com, kbusch@kernel.org, dave.jiang@intel.com,
dan.j.williams@intel.com, linux-pci@vger.kernel.org,
LKML <linux-kernel@vger.kernel.org>,
stable@vger.kernel.org
Subject: Re: [PATCH v2] PCI: Fix incorrect unlocking in pci_slot_trylock()
Date: Fri, 12 Dec 2025 16:31:45 +0200 (EET) [thread overview]
Message-ID: <7bb24dc0-8aac-dc32-8cad-d885282c34ec@linux.intel.com> (raw)
In-Reply-To: <20251212133737.2367-1-guojinhui.liam@bytedance.com>
[-- Attachment #1: Type: text/plain, Size: 2411 bytes --]
On Fri, 12 Dec 2025, Jinhui Guo wrote:
> Commit a4e772898f8b ("PCI: Add missing bridge lock to pci_bus_lock()")
> delegates the bridge device's pci_dev_trylock() to pci_bus_trylock() in
> pci_slot_trylock(), but it forgets to remove the corresponding
> pci_dev_unlock() when pci_bus_trylock() fails.
>
> Before the commit, the code did:
>
> if (!pci_dev_trylock(dev)) /* <- lock bridge device */
> goto unlock;
> if (dev->subordinate) {
> if (!pci_bus_trylock(dev->subordinate)) {
> pci_dev_unlock(dev); /* <- unlock bridge device */
> goto unlock;
> }
> }
>
> After the commit the bridge-device lock is no longer taken, but the
> pci_dev_unlock(dev) on the failure path was left in place, leading to
> the bug.
>
> This yields one of two errors:
> 1. A warning that the lock is being unlocked when no one holds it.
> 2. An incorrect unlock of a lock that belongs to another thread.
>
> Fix it by removing the now-redundant pci_dev_unlock(dev) on the failure
> path.
>
> Fixes: a4e772898f8b ("PCI: Add missing bridge lock to pci_bus_lock()")
> Cc: stable@vger.kernel.org
> Signed-off-by: Jinhui Guo <guojinhui.liam@bytedance.com>
> Acked-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
Please don't make tags like this unless the other people explicitly give
them to the patch.
Other than that, this looks okay to me.
--
i.
> ---
>
> Hi, all
>
> v1: https://lore.kernel.org/all/20251211123635.2215-1-guojinhui.liam@bytedance.com/
>
> Changelog in v1 -> v2
> - The v1 commit message was too brief, so I’ve sent v2 with more detail.
> - Remove the braces from the if (!pci_bus_trylock(dev->subordinate)) statement.
>
> Sorry for the noise.
>
> Best Regards,
> Jinhui
>
> drivers/pci/pci.c | 4 +---
> 1 file changed, 1 insertion(+), 3 deletions(-)
>
> diff --git a/drivers/pci/pci.c b/drivers/pci/pci.c
> index 13dbb405dc31..59319e08fca6 100644
> --- a/drivers/pci/pci.c
> +++ b/drivers/pci/pci.c
> @@ -5346,10 +5346,8 @@ static int pci_slot_trylock(struct pci_slot *slot)
> if (!dev->slot || dev->slot != slot)
> continue;
> if (dev->subordinate) {
> - if (!pci_bus_trylock(dev->subordinate)) {
> - pci_dev_unlock(dev);
> + if (!pci_bus_trylock(dev->subordinate))
> goto unlock;
> - }
> } else if (!pci_dev_trylock(dev))
> goto unlock;
> }
>
next prev parent reply other threads:[~2025-12-12 14:31 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-12-12 13:37 [PATCH v2] PCI: Fix incorrect unlocking in pci_slot_trylock() Jinhui Guo
2025-12-12 14:31 ` Ilpo Järvinen [this message]
2025-12-12 14:55 ` [RESEND PATCH " Jinhui Guo
2026-01-28 21:03 ` dan.j.williams
2026-01-28 22:53 ` Bjorn Helgaas
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=7bb24dc0-8aac-dc32-8cad-d885282c34ec@linux.intel.com \
--to=ilpo.jarvinen@linux.intel.com \
--cc=bhelgaas@google.com \
--cc=dan.j.williams@intel.com \
--cc=dave.jiang@intel.com \
--cc=guojinhui.liam@bytedance.com \
--cc=kbusch@kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-pci@vger.kernel.org \
--cc=stable@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox