diff mbox series

power: supply: bq27xxx-i2c: Do not free non existing IRQ

Message ID 20240215155133.70537-1-hdegoede@redhat.com (mailing list archive)
State Handled Elsewhere, archived
Headers show
Series power: supply: bq27xxx-i2c: Do not free non existing IRQ | expand

Commit Message

Hans de Goede Feb. 15, 2024, 3:51 p.m. UTC
The bq27xxx i2c-client may not have an IRQ, in which case
client->irq will be 0. bq27xxx_battery_i2c_probe() already has
an if (client->irq) check wrapping the request_threaded_irq().

But bq27xxx_battery_i2c_remove() unconditionally calls
free_irq(client->irq) leading to:

[  190.310742] ------------[ cut here ]------------
[  190.310843] Trying to free already-free IRQ 0
[  190.310861] WARNING: CPU: 2 PID: 1304 at kernel/irq/manage.c:1893 free_irq+0x1b8/0x310

Followed by a backtrace when unbinding the driver. Add
an if (client->irq) to bq27xxx_battery_i2c_remove() mirroring
probe() to fix this.

Fixes: 444ff00734f3 ("power: supply: bq27xxx: Fix I2C IRQ race on remove")
Signed-off-by: Hans de Goede <hdegoede@redhat.com>
---
 drivers/power/supply/bq27xxx_battery_i2c.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

Comments

Sebastian Reichel Feb. 16, 2024, 11:08 p.m. UTC | #1
On Thu, 15 Feb 2024 16:51:33 +0100, Hans de Goede wrote:
> The bq27xxx i2c-client may not have an IRQ, in which case
> client->irq will be 0. bq27xxx_battery_i2c_probe() already has
> an if (client->irq) check wrapping the request_threaded_irq().
> 
> But bq27xxx_battery_i2c_remove() unconditionally calls
> free_irq(client->irq) leading to:
> 
> [...]

Applied, thanks!

[1/1] power: supply: bq27xxx-i2c: Do not free non existing IRQ
      commit: 2df70149e73e79783bcbc7db4fa51ecef0e2022c

Best regards,
diff mbox series

Patch

diff --git a/drivers/power/supply/bq27xxx_battery_i2c.c b/drivers/power/supply/bq27xxx_battery_i2c.c
index 3a1798b0c1a7..9910c600743e 100644
--- a/drivers/power/supply/bq27xxx_battery_i2c.c
+++ b/drivers/power/supply/bq27xxx_battery_i2c.c
@@ -209,7 +209,9 @@  static void bq27xxx_battery_i2c_remove(struct i2c_client *client)
 {
 	struct bq27xxx_device_info *di = i2c_get_clientdata(client);
 
-	free_irq(client->irq, di);
+	if (client->irq)
+		free_irq(client->irq, di);
+
 	bq27xxx_battery_teardown(di);
 
 	mutex_lock(&battery_mutex);