Peter Chen fd7c4bd582 usb: dwc3: core: fix kernel panic when do reboot ... commit 4bf584a03eec674975ee9fe36c8583d9d470dab1 upstream. When do system reboot, it calls dwc3_shutdown and the whole debugfs for dwc3 has removed first, when the gadget tries to do deinit, and remove debugfs for its endpoints, it meets NULL pointer dereference issue when call debugfs_lookup. Fix it by removing the whole dwc3 debugfs later than dwc3_drd_exit. [ 2924.958838] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000002 .... [ 2925.030994] pstate: 60000005 (nZCv daif -PAN -UAO -TCO BTYPE=--) [ 2925.037005] pc : inode_permission+0x2c/0x198 [ 2925.041281] lr : lookup_one_len_common+0xb0/0xf8 [ 2925.045903] sp : ffff80001276ba70 [ 2925.049218] x29: ffff80001276ba70 x28: ffff0000c01f0000 x27: 0000000000000000 [ 2925.056364] x26: ffff800011791e70 x25: 0000000000000008 x24: dead000000000100 [ 2925.063510] x23: dead000000000122 x22: 0000000000000000 x21: 0000000000000001 [ 2925.070652] x20: ffff8000122c6188 x19: 0000000000000000 x18: 0000000000000000 [ 2925.077797] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000004 [ 2925.084943] x14: ffffffffffffffff x13: 0000000000000000 x12: 0000000000000030 [ 2925.092087] x11: 0101010101010101 x10: 7f7f7f7f7f7f7f7f x9 : ffff8000102b2420 [ 2925.099232] x8 : 7f7f7f7f7f7f7f7f x7 : feff73746e2f6f64 x6 : 0000000000008080 [ 2925.106378] x5 : 61c8864680b583eb x4 : 209e6ec2d263dbb7 x3 : 000074756f307065 [ 2925.113523] x2 : 0000000000000001 x1 : 0000000000000000 x0 : ffff8000122c6188 [ 2925.120671] Call trace: [ 2925.123119] inode_permission+0x2c/0x198 [ 2925.127042] lookup_one_len_common+0xb0/0xf8 [ 2925.131315] lookup_one_len_unlocked+0x34/0xb0 [ 2925.135764] lookup_positive_unlocked+0x14/0x50 [ 2925.140296] debugfs_lookup+0x68/0xa0 [ 2925.143964] dwc3_gadget_free_endpoints+0x84/0xb0 [ 2925.148675] dwc3_gadget_exit+0x28/0x78 [ 2925.152518] dwc3_drd_exit+0x100/0x1f8 [ 2925.156267] dwc3_remove+0x11c/0x120 [ 2925.159851] dwc3_shutdown+0x14/0x20 [ 2925.163432] platform_shutdown+0x28/0x38 [ 2925.167360] device_shutdown+0x15c/0x378 [ 2925.171291] kernel_restart_prepare+0x3c/0x48 [ 2925.175650] kernel_restart+0x1c/0x68 [ 2925.179316] __do_sys_reboot+0x218/0x240 [ 2925.183247] __arm64_sys_reboot+0x28/0x30 [ 2925.187262] invoke_syscall+0x48/0x100 [ 2925.191017] el0_svc_common.constprop.0+0x48/0xc8 [ 2925.195726] do_el0_svc+0x28/0x88 [ 2925.199045] el0_svc+0x20/0x30 [ 2925.202104] el0_sync_handler+0xa8/0xb0 [ 2925.205942] el0_sync+0x148/0x180 [ 2925.209270] Code: a9025bf5 2a0203f5 121f0056 370802b5 (79400660) [ 2925.215372] ---[ end trace 124254d8e485a58b ]--- [ 2925.220012] Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b [ 2925.227676] Kernel Offset: disabled [ 2925.231164] CPU features: 0x00001001,20000846 [ 2925.235521] Memory Limit: none [ 2925.238580] ---[ end Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b ]--- Fixes: 8d396bb0a5b6 ("usb: dwc3: debugfs: Add and remove endpoint dirs dynamically") Cc: Jack Pham <jackp@codeaurora.org> Tested-by: Jack Pham <jackp@codeaurora.org> Signed-off-by: Peter Chen <peter.chen@kernel.org> Link: https://lore.kernel.org/r/20210608105656.10795-1-peter.chen@kernel.org (cherry picked from commit 2a042767814bd0edf2619f06fecd374e266ea068) Link: https://lore.kernel.org/r/20210615080847.GA10432@jackp-linux.qualcomm.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-06-23 14:41:31 +02:00
..
accessibility
acpi	ACPICA: Clean up context mutex during object deletion	2021-06-10 13:37:04 +02:00
amba	amba: Fix resource leak for drivers without .remove	2021-03-04 10:26:32 +01:00
android	binder: add flag to clear buffer on txn complete	2020-12-30 11:51:35 +01:00
ata	ata: libahci_platform: fix IRQ check	2021-05-14 09:44:24 +02:00
atm	atm: idt77252: fix null-ptr-dereference	2021-03-30 14:35:21 +02:00
auxdisplay	auxdisplay: ht16k33: Fix refresh rate handling	2021-03-04 10:26:30 +01:00
base	PM: runtime: Fix unpaired parent child_count for force_resume	2021-05-19 10:08:20 +02:00
bcma
block	nbd: Fix NULL pointer in flush_workqueue	2021-05-19 10:08:30 +02:00
bluetooth	Bluetooth: hci_h5: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for btrtl	2021-03-07 12:20:44 +01:00
bus	bus: ti-sysc: Fix flakey idling of uarts and stop using swsup_sidle_act	2021-06-10 13:37:08 +02:00
cdrom	cdrom: gdrom: initialize global variable at init time	2021-05-26 12:05:19 +02:00
char	char: hpet: add checks after calling ioremap	2021-06-03 08:59:09 +02:00
clk	clocksource/drivers/timer-ti-dm: Handle dra7 timer wrap errata i940	2021-06-23 14:41:31 +02:00
clocksource	clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined	2021-03-04 10:26:29 +01:00
connector
counter	counter: stm32-timer-cnt: fix ceiling miss-alignment with reload register	2021-04-14 08:24:09 +02:00
cpufreq	cpufreq: armada-37xx: Fix determining base CPU frequency	2021-05-14 09:44:21 +02:00
cpuidle	cpuidle: Fixup IRQ state	2020-09-09 19:12:21 +02:00
crypto	crypto: qat - Fix a double free in adf_create_ring	2021-05-14 09:44:20 +02:00
dax	device-dax/core: Fix memory leak when rmmod dax.ko	2020-12-30 11:51:46 +01:00
dca
devfreq	PM / devfreq: Use more accurate returned new_freq as resume_freq	2021-05-14 09:44:20 +02:00
dio
dma	dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc	2021-06-23 14:41:29 +02:00
dma-buf	dmabuf: fix use-after-free of dmabuf's file->f_inode	2021-01-12 20:16:23 +01:00
edac	EDAC/amd64: Fix PCI component registration	2020-12-30 11:51:36 +01:00
eisa
extcon	extcon: arizona: Fix various races on driver unbind	2021-05-11 14:04:09 +02:00
firewire	firewire: nosy: Fix a use-after-free bug in nosy_ioctl()	2021-04-07 14:47:43 +02:00
firmware	efi: cper: fix snprintf() use in cper_dimm_err_location()	2021-06-10 13:37:03 +02:00
fpga
fsi
gnss
gpio	gpio: cadence: Add missing MODULE_DEVICE_TABLE	2021-06-03 08:59:08 +02:00
gpu	drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue.	2021-06-23 14:41:30 +02:00
greybus
hid	HID: gt683r: add missing MODULE_DEVICE_TABLE	2021-06-18 09:58:58 +02:00
hsi	HSI: core: fix resource leaks in hsi_add_client_from_dt()	2021-05-14 09:44:25 +02:00
hv	Drivers: hv: vmbus: Increase wait time for VMbus unload	2021-05-14 09:44:22 +02:00
hwmon	hwmon: (scpi-hwmon) shows the negative temperature properly	2021-06-23 14:41:27 +02:00
hwspinlock
hwtracing	intel_th: pci: Add Alder Lake-M support	2021-05-11 14:04:15 +02:00
i2c	i2c: mpc: implement erratum A-004447 workaround	2021-06-16 11:59:38 +02:00
i3c	Revert "i3c master: fix missing destroy_workqueue() on error in i3c_master_register"	2021-05-14 09:44:15 +02:00
ide	scsi: ide: Do not set the RQF_PREEMPT flag for sense requests	2021-01-12 20:16:09 +01:00
idle
iio	iio: adc: ad7793: Add missing error code in ad7793_setup()	2021-06-03 08:59:04 +02:00
infiniband	IB/mlx5: Fix initializing CQ fragments buffer	2021-06-16 11:59:44 +02:00
input	Input: silead - add workaround for x86 BIOS-es which bring the chip up in a stuck state	2021-05-22 11:38:28 +02:00
interconnect	interconnect: core: fix error return code of icc_link_destroy()	2021-04-16 11:46:37 +02:00
iommu	iommu/vt-d: Fix sysfs leak in alloc_iommu()	2021-06-03 08:59:00 +02:00
ipack
irqchip	irqchip/gic-v3: Fix OF_BAD_ADDR error handling	2021-05-14 09:44:20 +02:00
isdn	isdn: mISDN: netjet: Fix crash in nj_probe:	2021-06-16 11:59:34 +02:00
leds	leds: lp5523: check return value of lp5xx_read and jump to cleanup code	2021-05-26 12:05:20 +02:00
lightnvm	lightnvm: fix memory leak when submit fails	2021-01-27 11:47:53 +01:00
macintosh
mailbox	mailbox: avoid timer start from callback	2020-10-29 09:57:53 +01:00
mcb
md	dm verity: fix require_signatures module_param permissions	2021-06-16 11:59:37 +02:00
media	media: gspca: properly check for errors in po1030_probe()	2021-06-03 08:59:11 +02:00
memory	memory: pl353: fix mask of ECC page_size config register	2021-05-14 09:44:19 +02:00
memstick	memstick: r592: Fix error return in r592_probe()	2020-12-30 11:51:18 +01:00
message	scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()	2020-11-05 11:43:25 +01:00
mfd	mfd: stm32-timers: Avoid clearing auto reload register	2021-05-14 09:44:25 +02:00
misc	platform/x86: hp_accel: Avoid invoking _INI to speed up resume	2021-06-03 08:59:08 +02:00
mmc	mmc: sdhci-pci-gli: increase 1.8V regulator wait	2021-05-26 12:05:18 +02:00
mtd	mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init	2021-05-14 09:44:20 +02:00
mux
net	net: fec_ptp: add clock rate zero check	2021-06-23 14:41:31 +02:00
nfc	nfc: pn533: prevent potential memory corruption	2021-05-14 09:44:27 +02:00
ntb	NTB: hw: amd: fix an issue about leak system resources	2020-10-29 09:58:00 +01:00
nubus
nvdimm	libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC	2021-04-21 12:56:16 +02:00
nvme	nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue()	2021-06-18 09:58:59 +02:00
nvmem	nvmem: core: skip child nodes not matching binding	2021-03-04 10:26:37 +01:00
of	Revert "fdt: Properly handle "no-map" field in the memory region"	2021-05-14 09:44:33 +02:00
opp	opp: Reduce the size of critical section in _opp_table_kref_release()	2020-11-18 19:20:21 +01:00
oprofile
parisc
parport
pci	PCI: Work around Huawei Intelligent NIC VF FLR erratum	2021-06-23 14:41:29 +02:00
pcmcia
perf	perf/arm_pmu_platform: Fix error handling	2021-05-11 14:04:06 +02:00
phy	phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y, unconditionally	2021-05-14 09:44:19 +02:00
pinctrl	pinctrl: ingenic: Improve unreachable code generation	2021-05-22 11:38:27 +02:00
platform	platform/x86: touchscreen_dmi: Add info for the Mediacom Winpad 7.0 W700 tablet	2021-06-03 08:59:12 +02:00
pnp
power	power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove()	2021-05-11 14:04:11 +02:00
powercap	powercap: restrict energy meter to root access	2020-11-10 21:13:20 +01:00
pps
ps3	powerpc/ps3: use dma_mapping_error()	2020-12-30 11:51:26 +01:00
ptp	ptp: improve max_adj check against unreasonable values	2021-06-23 14:41:26 +02:00
pwm	pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare()	2021-03-04 10:26:36 +01:00
rapidio	rapidio: handle create_workqueue() failure	2021-05-26 12:05:17 +02:00
ras	RAS/CEC: Correct ce_add_elem()'s returned values	2021-04-14 08:24:18 +02:00
regulator	regulator: max77620: Use device_set_of_node_from_dev()	2021-06-16 11:59:43 +02:00
remoteproc	remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio()	2020-12-30 11:51:24 +01:00
reset
rpmsg	rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data()	2021-05-19 10:08:25 +02:00
rtc	rtc: ds1307: Fix wday settings for rx8130	2021-05-19 10:08:26 +02:00
s390	vfio-ccw: Serialize FSM IDLE state with I/O completion	2021-06-16 11:59:33 +02:00
sbus
scsi	scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V	2021-06-18 09:58:59 +02:00
sfi
sh
siox
slimbus	slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI	2020-12-30 11:51:13 +01:00
soc	soc: aspeed: fix a ternary sign expansion bug	2021-05-14 09:44:23 +02:00
soundwire	soundwire: stream: fix memory leak in stream config error path	2021-05-14 09:44:19 +02:00
spi	spi: stm32-qspi: Always wait BUSY bit to be cleared in stm32_qspi_wait_cmd()	2021-06-23 14:41:27 +02:00
spmi	spmi: spmi-pmic-arb: Fix hw_irq overflow	2021-03-04 10:26:49 +01:00
ssb
staging	pinctrl: ralink: rt2880: avoid to error in calls is pin is already enabled	2021-06-23 14:41:27 +02:00
target	scsi: target: core: Fix warning on realtime kernels	2021-06-18 09:58:59 +02:00
tc
tee	tee: optee: do not check memref size on return from Secure World	2021-05-11 14:04:06 +02:00
thermal	thermal/drivers/intel: Initialize RW trip to THERMAL_TEMP_INVALID	2021-06-03 08:59:05 +02:00
thunderbolt	thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue	2021-06-03 08:59:03 +02:00
tty	serial: max310x: unregister uart driver in case of failure and abort	2021-06-03 08:59:08 +02:00
uio	uio_hv_generic: Fix a memory leak in error handling paths	2021-05-26 12:05:17 +02:00
usb	usb: dwc3: core: fix kernel panic when do reboot	2021-06-23 14:41:31 +02:00
vfio	vfio/platform: fix module_put call in error flow	2021-06-10 13:37:03 +02:00
vhost	vhost: Fix vhost_vq_reset()	2021-04-07 14:47:39 +02:00
video	video: hgafb: correctly handle card detect failure during probe	2021-05-26 12:05:21 +02:00
virt	virt: vbox: Do not use wait_event_interruptible when called from kernel context	2021-03-04 10:26:10 +01:00
virtio	virtio_ring: Fix two use after free bugs	2020-12-30 11:51:29 +01:00
visorbus
vlynq
vme
w1	w1: mxc_w1: Fix timeout resolution problem leading to bus error	2020-11-05 11:43:25 +01:00
watchdog	watchdog: mei_wdt: request stop on unregister	2021-03-04 10:26:47 +01:00
xen	xen-pciback: redo VF placement in the virtual topology	2021-06-10 13:37:16 +02:00
zorro
Kconfig
Makefile