Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave()
authorYang Yingliang <yangyingliang@huawei.com>
Tue, 6 Dec 2022 12:59:10 +0000 (20:59 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 31 Dec 2022 12:14:20 +0000 (13:14 +0100)
[ Upstream commit b15a6bd3c80c77faec8317319b97f976b1a08332 ]

It is not allowed to call kfree_skb() from hardware interrupt
context or with interrupts being disabled. So replace kfree_skb()
with dev_kfree_skb_irq() under spin_lock_irqsave().

Fixes: 803b58367ffb ("Bluetooth: btusb: Implement driver internal packet reassembly")
Signed-off-by: Yang Yingliang <yangyingliang@huawei.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/bluetooth/btusb.c

index 69380cb..9c32263 100644 (file)
@@ -735,13 +735,13 @@ static inline void btusb_free_frags(struct btusb_data *data)
 
        spin_lock_irqsave(&data->rxlock, flags);
 
-       kfree_skb(data->evt_skb);
+       dev_kfree_skb_irq(data->evt_skb);
        data->evt_skb = NULL;
 
-       kfree_skb(data->acl_skb);
+       dev_kfree_skb_irq(data->acl_skb);
        data->acl_skb = NULL;
 
-       kfree_skb(data->sco_skb);
+       dev_kfree_skb_irq(data->sco_skb);
        data->sco_skb = NULL;
 
        spin_unlock_irqrestore(&data->rxlock, flags);