From nobody Sat Feb 7 18:20:46 2026 Received: from mail-wm1-f54.google.com (mail-wm1-f54.google.com [209.85.128.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 0E1041BD9D0 for ; Fri, 30 Jan 2026 20:48:24 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.128.54 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1769806106; cv=none; b=nOZk9n+/HCv893DROiEveNNpqW6qUtoJkWhNirMuhXcNdADJym80aWjEbiGDoVt0IeLWiObIFFZ1AdNa5e4GtS0bca/yKkW3uxergjGdPm3yybYtmQ//gGyzK0ZnM3c+Fh65V5Ndx/dIFtdXawv8am1nsEKY8owyOud7ubl0mDw= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1769806106; c=relaxed/simple; bh=WcTJzlSzYQ3GdQ4ZKrgKXfine1j1UbideT72PsQJz7o=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=ubAbNIOVCiFIW81EFSB4urW+0np3OqTcxl1pH5Qs3V6wYrMSJxBqZyDcwHKaW2yr/7iplAi3Hkn37Eh4TPJp1N7uHtLnVdIWWfATdRA2kHucLk/Qcj2a377vHvElHUSpzypaEZY7Jbtny+6y5oc9aw6uuAIH0BTP3cm+jVIHl1I= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=JxKbmbFb; arc=none smtp.client-ip=209.85.128.54 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="JxKbmbFb" Received: by mail-wm1-f54.google.com with SMTP id 5b1f17b1804b1-4801d7c72a5so19839185e9.0 for ; Fri, 30 Jan 2026 12:48:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1769806103; x=1770410903; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=wyJyqKV6sfd+4rm1C0f1aBd4NEfWaqE99sc9YOO/X6o=; b=JxKbmbFbcnEPYltNFT+3kpskrhkR37I42Nem/xhMqrj9fcMPKmjAtUGewtlRd06Ov3 UFRxklA6iVhnHZ3bPmsHs4w+U8Ct1aOXLclZwe/xKk3w64JEcNxi7uHnGihQt802LJAQ 4AAswBSeXVjbQFGbp19pntzR+0oiJ48inkYfWb+qi2eY4G6Fly1mHVloMn5XIbYnbEo7 SEFFLj0b8jgp2tgcj98Gij7vHpQCUPyY4QOFyOkr97p7hFhppxdG4KvhPlcH7nBv4SBG MKqTQ6dDr6wc3AA+J+T6FxGrXzWf8+1+ss65e+9YDb6qAdypHGS4E0mYqKCeoBNwpCyE kVZQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1769806103; x=1770410903; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=wyJyqKV6sfd+4rm1C0f1aBd4NEfWaqE99sc9YOO/X6o=; b=SLpu1eboGZgpAzgwZJp58BaSeslY52OWuHjbWw4a5p6OyHVdcBBzBGLOr/TLzQkRrN Xx6lxemFVFTIyicd01nYJC1vQHlVcnMwa2bhmHztonlVpipljBC/NPFMw4cF6Rwts/Z2 +Byl0jVZint9XQwqUIDauVi0OYiDC7h5NfSL4FYKcMauUIY0Sn573KxXmFZf07J2E8BJ Fn+NDIPCo/NUpV5myHWZCcP+q1dpQR5jSVhX0GZKfZWfP3coT3BdzhbTCeoN14UhIYrn Pe8oVVeOLci2wv4l01V+Dw+d1iKbC07vnmRcx9pCa/PXbpPwBKtQBnRqvN6R5tWv65up fvRg== X-Forwarded-Encrypted: i=1; AJvYcCX+krvDJgIiQN7Ax94dOJ38XD9/TPyCcnBBjXeZPjbObPXtIE0tYp4TvNGLdRVIrpuv/RYAvtHkjLRMXrc=@vger.kernel.org X-Gm-Message-State: AOJu0YwtteIHFQGpv+Rc8RqUjE3NXmuGwBdwRJ1VM+OqE083dYEOmadH T8PBypTa95YOilqA+3lkYsnJNkS5yK7gNLmp7NVfGnoVKQywqPAI4UPx X-Gm-Gg: AZuq6aI4Ztm7Bl8WRaf9GczsDsZ6LkCu3KK2Y0wFy4T+/kAjAo7iXNSlvpoh2kx15Fx IQV2Vxl6g/Sf297wTxu1BZnVgJvH+oH1A6p0/ak81pw2zU5nK7quaP3e0/G67Ozi+CvJdnjkOJY K0FmGWaRFC7T+1N4Ye8JH2vRqpV8FelrvYciJyFwO61acVt9MQqfciyji5sGb59r214YON4Lm3p cI1hYnfgiqVsyd2aM3zPat0eHvH50jxIzVkUfLS+BBN617egx8pudTeoat1ljb2gmwRf3svq9qp xKKB13+CHOZCzyM9IskDf6RNaYH/5pFVLRhBxE2z9yZQNoIRZVyWhpgTOJ4fez2vthqwAS7O3/v W7Ev03lnndDtghyhsQMgpXM0ksaFBZQqssj74mbYVbLqU0/AKlERqsuCRMbt5X65me2I7gFvSYS NaTIT0RcWEAzLKDDcHuNXPFOQ3nSoAhNvQaZpm X-Received: by 2002:a05:600c:3ba0:b0:47e:e71a:e13a with SMTP id 5b1f17b1804b1-482db4ee2camr47791655e9.32.1769806103186; Fri, 30 Jan 2026 12:48:23 -0800 (PST) Received: from localhost.localdomain ([196.235.250.51]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-4806cd8fadfsm221557985e9.0.2026.01.30.12.48.20 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 30 Jan 2026 12:48:22 -0800 (PST) From: Salah Triki To: Vineeth Vijayan , Peter Oberparleiter , Heiko Carstens , Vasily Gorbik , Alexander Gordeev , Christian Borntraeger , Sven Schnelle Cc: linux-s390@vger.kernel.org, linux-kernel@vger.kernel.org, Salah Triki Subject: [PATCH] s390/cio: fix device lifecycle handling in css_alloc_subchannel() Date: Fri, 30 Jan 2026 21:47:59 +0100 Message-ID: <20260130204800.217395-1-salah.triki@gmail.com> X-Mailer: git-send-email 2.43.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" `css_alloc_subchannel()` calls `device_initialize()` before setting up the DMA masks. If `dma_set_coherent_mask()` or `dma_set_mask()` fails, the error path frees the subchannel structure directly, bypassing the device model reference counting. Once `device_initialize()` has been called, the embedded struct device must be released via `put_device()`, allowing the release callback to free the container structure. Fix the error path by dropping the initial device reference with `put_device()` instead of calling `kfree()` directly. This ensures correct device lifetime handling and avoids potential use-after-free or double-free issues. Fixes: e5dcf0025d7af ("s390/css: move subchannel lock allocation") Signed-off-by: Salah Triki Reviewed-by: Vineeth Vijayan --- drivers/s390/cio/css.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/s390/cio/css.c b/drivers/s390/cio/css.c index 4c85df7a548e..ac24e019020e 100644 --- a/drivers/s390/cio/css.c +++ b/drivers/s390/cio/css.c @@ -235,7 +235,7 @@ struct subchannel *css_alloc_subchannel(struct subchann= el_id schid, return sch; =20 err: - kfree(sch); + put_device(&sch->dev); return ERR_PTR(ret); } =20 --=20 2.43.0