From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1756606AbdDRJKI (ORCPT ); Tue, 18 Apr 2017 05:10:08 -0400 Received: from foss.arm.com ([217.140.101.70]:54208 "EHLO foss.arm.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1756002AbdDRJKF (ORCPT ); Tue, 18 Apr 2017 05:10:05 -0400 Subject: Re: sun50i-a64-pinctrl WARN_ON drivers/base/dd.c:349 To: Tejun Heo References: <20170315161406.smd4na25two55jjh@angband.pl> <197431489595078@web8g.yandex.ru> <20170316010615.GA23552@kroah.com> <20170317140812.GB5078@htj.duckdns.org> <785901489760914@web50g.yandex.ru> <20170317144422.GD5078@htj.duckdns.org> <3cf02066-ca0e-05f4-6a3d-ebc6d5373caf@arm.com> <20170418072505.GE3899@wtj.duckdns.org> Cc: Icenowy Zheng , Greg Kroah-Hartman , Adam Borowski , "linux-kernel@vger.kernel.org" From: Andre Przywara Message-ID: <3fda46eb-7fcc-4c27-98b6-7d822cce1405@arm.com> Date: Tue, 18 Apr 2017 10:12:16 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: <20170418072505.GE3899@wtj.duckdns.org> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi, On 18/04/17 08:25, Tejun Heo wrote: > Hello, > > On Mon, Apr 03, 2017 at 12:48:16AM +0100, André Przywara wrote: >> So I see this problem easily now - on every boot - with an unpatched >> 4.11-rc3 kernel and the (arm64) defconfig on a Pine64 or BananaPi M64. >> I enabled devres.log and see that pinctrl probes early, but apparently >> gets deferred, pretty late actually (after 43 ADDs). >> >> Now what sticks out from the sequence (see the attached log) is that >> there are two un-matches ADDs with a devm_kmalloc of size 0: >> sun50i-a64-pinctrl 1c20800.pinctrl: DEVRES ADD ffff80007bd84200 >> devm_kzalloc_release (0 bytes) >> sun50i-a64-pinctrl 1c20800.pinctrl: DEVRES ADD ffff80007bd84100 >> devm_kzalloc_release (0 bytes) >> >> While all the other ADDs have a matching REL, those two have not. I >> guess it's due to the size being 0. Does that ring a bell? > > AFAICS, 0 size allocs should be fine. > >> Or is due to the fact that these two ADDs are after the RELs have >> already started, so at a point where the driver is already cleaned up? > > But this sounds problematic to me. So, these zero length allocations > are happening after release of the device is initiated? Where are > they coming from? Yeah, so I stack-dumped on the zero allocations and indeed they are called from cleanup functions: drivers/pinctrl/pinmux.c:pinmux_generic_free_functions(): devm_kzalloc(sizeof(*indices) * pctldev->num_functions, ...) (and another one I don't know from the top of the my head, logs at home) So my hunch was that once EPROBE_DEFER triggers the devres cleanup, it uses some reverse list traversal to release all allocated resources (backwards!), so missing those which get (appended) during the process. But I don't think that would not work with the locking. So I have to dig deeper tonight in my logs. Just curious why this does (or did) not happen for other users, because the affected code paths seem rather generic to me. Is that due to probing order being unfortunate in our case and the pinctrl driver is never released due to DEFER anywhere else? Cheers, Andre.