Alexander Usyskin 1ebc180d2b mei: fix error flow in probe ... Dismantle class device last in probe error flow to avoid accessing freed memory like: [ 87.926774] WARNING: CPU: 9 PID: 518 at kernel/workqueue.c:4234 __flush_work+0x340/0x390 ... [ 87.926912] Workqueue: async async_run_entry_fn [ 87.926918] RIP: e030:__flush_work+0x340/0x390 [ 87.926923] Code: 26 9d 05 00 65 48 8b 15 26 3c ca 02 48 85 db 48 8b 04 24 48 89 54 24 58 0f 85 de fe ff ff e9 f6 fd ff ff 0f 0b e9 77 ff ff ff <0f> 0b e9 70 ff ff ff 0f 0b e9 19 ff ff ff e8 7d 8b 0e 01 48 89 de [ 87.926931] RSP: e02b:ffffc900412ebc00 EFLAGS: 00010246 [ 87.926936] RAX: 0000000000000000 RBX: ffff888103e55090 RCX: 0000000000000000 [ 87.926941] RDX: 000fffffffe00000 RSI: 0000000000000001 RDI: ffffc900412ebc60 [ 87.926945] RBP: ffff888103e55090 R08: ffffffffc1266ec8 R09: ffff8881109076e8 [ 87.926949] R10: 0000000080040003 R11: 0000000000000000 R12: ffff888103e54000 [ 87.926953] R13: ffffc900412ebc18 R14: 0000000000000001 R15: 0000000000000000 [ 87.926962] FS: 0000000000000000(0000) GS:ffff888233238000(0000) knlGS:0000000000000000 [ 87.926967] CS: e030 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.926971] CR2: 00007e7923b32708 CR3: 00000001088df000 CR4: 0000000000050660 [ 87.926977] Call Trace: [ 87.926981] <TASK> [ 87.926987] ? __call_rcu_common.constprop.0+0x11e/0x310 [ 87.926993] cancel_work_sync+0x5e/0x80 [ 87.926999] mei_cancel_work+0x19/0x40 [mei] [ 87.927051] mei_me_probe+0x273/0x2b0 [mei_me] [ 87.927060] local_pci_probe+0x45/0x90 [ 87.927066] pci_call_probe+0x5b/0x180 [ 87.927070] pci_device_probe+0x95/0x140 [ 87.927074] ? driver_sysfs_add+0x57/0xc0 [ 87.927079] really_probe+0xde/0x340 [ 87.927083] ? pm_runtime_barrier+0x54/0x90 [ 87.927087] __driver_probe_device+0x78/0x110 [ 87.927092] driver_probe_device+0x1f/0xa0 [ 87.927095] __driver_attach_async_helper+0x5e/0xe0 [ 87.927100] async_run_entry_fn+0x34/0x130 [ 87.927104] process_one_work+0x18d/0x340 [ 87.927108] worker_thread+0x256/0x3a0 [ 87.927111] ? __pfx_worker_thread+0x10/0x10 [ 87.927115] kthread+0xfc/0x240 [ 87.927120] ? __pfx_kthread+0x10/0x10 [ 87.927124] ? __pfx_kthread+0x10/0x10 [ 87.927127] ret_from_fork+0xf5/0x110 [ 87.927132] ? __pfx_kthread+0x10/0x10 [ 87.927136] ret_from_fork_asm+0x1a/0x30 [ 87.927141] </TASK> Tested-by: Guenter Roeck <groeck@google.com> Reported-by: Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Closes: https://lore.kernel.org/lkml/aQbYAXPADqfiXUYO@mail-itl/ Reported-by: Guenter Roeck <linux@roeck-us.net> Closes: https://lore.kernel.org/lkml/8deef7c4-ac75-4db8-91b7-02cf0e39e371@roeck-us.net/ Fixes: 7704e6be4e ("mei: hook mei_device on class device") Signed-off-by: Alexander Usyskin <alexander.usyskin@intel.com> Tested-by: Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Link: https://patch.msgid.link/20251102180836.1203314-1-alexander.usyskin@intel.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2025-11-03 10:02:04 +09:00
..
altera-stapl
amd-sbi	misc: amd-sbi: Clarify that this is a BMC driver	2025-10-22 08:02:57 +02:00
bcm-vk	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
c2port	sysfs: treewide: switch back to attribute_group::bin_attrs	2025-06-17 10:44:15 +02:00
cardreader	Char/Misc/IIO/Binder changes for 6.18-rc1	2025-10-04 16:26:32 -07:00
cb710
eeprom	eeprom: at25: make FRAM device ID error message more precise	2025-09-06 15:58:23 +02:00
genwqe	misc: genwqe: Fix incorrect cmd field being reported in error	2025-09-06 16:00:32 +02:00
ibmasm	Char/Misc/IIO/Binder changes for 6.18-rc1	2025-10-04 16:26:32 -07:00
keba
lis3lv02d	misc: Fix spelling mistake "STMicroeletronics" -> "STMicroelectronics"	2025-08-19 12:37:04 +02:00
lkdtm	- Remove a bunch of asm implementing condition flags testing in KVM's	2025-10-11 11:19:16 -07:00
mchp_pci1xxxx	treewide: rename GPIO set callbacks back to their original names	2025-08-07 10:07:06 +02:00
mei	mei: fix error flow in probe	2025-11-03 10:02:04 +09:00
ocxl	powerpc, ocxl: Fix extraction of struct xive_irq_data	2025-10-13 09:40:55 +05:30
pvpanic
rp1	misc: rp1: RaspberryPi RP1 misc driver	2025-06-16 11:50:34 -07:00
sgi-gru
sgi-xp	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
uacce
vmw_vmci	vmci: Prevent the dispatching of uninitialized payloads	2025-07-16 14:23:57 +02:00
ad525x_dpot-i2c.c
ad525x_dpot-spi.c
ad525x_dpot.c	misc: ad525x_dpot: Use str_enabled_disabled() in sysfs_show_reg()	2025-09-06 15:59:46 +02:00
ad525x_dpot.h
apds990x.c	misc: apds990x: Drop superfluous return statement	2025-08-19 12:37:13 +02:00
apds9802als.c
atmel-ssc.c
bh1770glc.c
cs5535-mfgpt.c
ds1682.c	sysfs: treewide: switch back to bin_attribute::read()/write()	2025-06-17 10:44:13 +02:00
dummy-irq.c
dw-xdata-pcie.c	dw-xdata: Use str_write_read() in dw_xdata_start() and dw_xdata_perf()	2025-09-06 15:59:39 +02:00
enclosure.c	misc: enclosure: Use str_on_off() helper	2025-06-24 16:46:04 +01:00
fastrpc.c	misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup	2025-10-22 08:03:24 +02:00
gehc-achc.c
hi6421v600-irq.c	misc: Use dev_fwnode()	2025-06-24 16:45:08 +01:00
hisi_hikey_usb.c	misc: hisi_hikey_usb: Use str_enabled_disabled() in hub_power_ctrl()	2025-08-19 12:37:15 +02:00
hmc6352.c
hpilo.c
hpilo.h
ibmvmc.c
ibmvmc.h
ics932s401.c
isl29003.c
isl29020.c
Kconfig	misc: rp1: RaspberryPi RP1 misc driver	2025-06-16 11:50:34 -07:00
kgdbts.c
lan966x_pci.c
lan966x_pci.dtso
lattice-ecp3-config.c
Makefile	char: misc: Move drivers/misc/misc_minor_kunit.c to drivers/char/	2025-08-19 12:41:17 +02:00
mrvl_cn10k_dpi.c
nsm.c
ntsync.c
open-dice.c
pch_phub.c	sysfs: treewide: switch back to bin_attribute::read()/write()	2025-06-17 10:44:13 +02:00
pci_endpoint_test.c	misc: pci_endpoint_test: Cleanup extra 0 initialization	2025-08-27 18:39:32 +05:30
phantom.c
qcom-coincell.c
rpmb-core.c
smpro-errmon.c
smpro-misc.c
sram-exec.c
sram.c	Driver core changes for 6.17-rc1	2025-07-29 12:15:39 -07:00
sram.h
ti_fpc202.c	treewide: rename GPIO set callbacks back to their original names	2025-08-07 10:07:06 +02:00
tifm_7xx1.c
tifm_core.c
tps6594-esm.c
tps6594-pfsm.c	misc: tps6594-pfsm: Add TI TPS652G1 PMIC PFSM	2025-07-10 09:58:06 +01:00
tsl2550.c
vcpu_stall_detector.c
vmw_balloon.c	vmw_balloon: indicate success when effectively deflating during migration	2025-10-21 15:46:17 -07:00
xilinx_sdfec.c
xilinx_tmr_inject.c
xilinx_tmr_manager.c