)]}'
{
  "commit": "90599c372e13369d11f6c1a01ff0094b16f72cf8",
  "tree": "380511f7048c0590459c16dc21a3c64fafc341c2",
  "parents": [
    "6fa21c541c71f2749f497b77b8ba0576b59ddd4e"
  ],
  "author": {
    "name": "Vladimir Murzin",
    "email": "vladimir.murzin@arm.com",
    "time": "Tue Sep 22 11:37:56 2026 +0100"
  },
  "committer": {
    "name": "Paul E. McKenney",
    "email": "paulmck@kernel.org",
    "time": "Tue Sep 29 17:25:22 2026 -0700"
  },
  "message": "usb: mtu3: Fix double dereference in TP_printk\n\nPaul reported kernel splat:\n\n[    0.000000] TRACE EVENT ERROR: Event mtu3_gadget_ep_set_halt has double dereference in TP_printk: \u0026REC-\u003egpd_ring-\u003edma\n[    0.000000] ------------[ cut here ]------------\n[    0.000000] Event mtu3_gadget_ep_set_halt has double dereference in TP_printk: \u0026REC-\u003egpd_ring-\u003edma\n[    0.000000] WARNING: kernel/trace/trace_events.c:420 at test_double_dereference+0x144/0x14c, CPU#0: swapper/0/0\n[    0.000000] Modules linked in:\n[    0.000000] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 7.3.0-rc1 #15247 PREEMPT\n[    0.000000] Hardware name: linux,dummy-virt (DT)\n[    0.000000] pstate: 600000c5 (nZCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE\u003d--)\n[    0.000000] pc : test_double_dereference+0x144/0x14c\n[    0.000000] lr : test_double_dereference+0x144/0x14c\n[    0.000000] sp : ffffc80aa7633bf0\n[    0.000000] x29: ffffc80aa7633bf0 x28: ffffc80aa7c0f047 x27: 000508b58019388f\n[    0.000000] x26: 0000000000000003 x25: 0000000000000007 x24: ffffc80aa5fceff8\n[    0.000000] x23: ffffc80aa7c0f05a x22: ffffc80aa64edfe8 x21: ffffc80aa7c0fce8\n[    0.000000] x20: ffffc80aa7c0f047 x19: 0000000000000013 x18: 0000000000000001\n[    0.000000] x17: 6572656420656c62 x16: 756f642073616820 x15: 746c61685f746573\n[    0.000000] x14: 0000000000000000 x13: ffff000139d90000 x12: 0000000000000045\n[    0.000000] x11: 00000000000000cf x10: ffff00013f546428 x9 : ffff000139d90000\n[    0.000000] x8 : 3fffffffffffc000 x7 : 0000000000000001 x6 : 0000000000000001\n[    0.000000] x5 : ffff00013f4e6440 x4 : 0000000000000000 x3 : 0000000000000000\n[    0.000000] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffffc80aa764a700\n[    0.000000] Call trace:\n[    0.000000]  test_double_dereference+0x144/0x14c (P)\n[    0.000000]  trace_event_raw_init+0x37c/0x5d8\n[    0.000000]  event_init+0x34/0xc0\n[    0.000000]  trace_event_init+0xec/0x588\n[    0.000000]  trace_init+0x24/0x6e0\n[    0.000000]  start_kernel+0x4a0/0x8ec\n[    0.000000]  __primary_switched+0x88/0x90\n[    0.000000] irq event stamp: 0\n[    0.000000] hardirqs last  enabled at (0): [\u003c0000000000000000\u003e] 0x0\n[    0.000000] hardirqs last disabled at (0): [\u003c0000000000000000\u003e] 0x0\n[    0.000000] softirqs last  enabled at (0): [\u003c0000000000000000\u003e] 0x0\n[    0.000000] softirqs last disabled at (0): [\u003c0000000000000000\u003e] 0x0\n[    0.000000] ---[ end trace 0000000000000000 ]---\n[    0.000000] TRACE EVENT ERROR: Event mtu3_gadget_ep_disable has double dereference in TP_printk: \u0026REC-\u003egpd_ring-\u003edma\n[    0.000000] TRACE EVENT ERROR: Event mtu3_gadget_ep_enable has double dereference in TP_printk: \u0026REC-\u003egpd_ring-\u003edma\n\nWhich also observed by Mark and myself.\n\nThe splat it result of new check introduced by b5cc230af5e5 (\"tracing:\nWarn when an event dereferences a pointer in TP_printk()\") which\ncorrectly catches issue with %pad dereferencing the address saved in\nthe ring buffer. TP_fast_assign() logic gets executed when the\ntracepoint is triggered, however the TP_printk() is executed when the\nuser reads the trace buffer which could be seconds, minutes, hours,\ndays, even months later and nothing guarantee that __entry-\u003egpd_ring\npointer will still be pointing to what it was when it was recorded.\n\nFix the issue by capturing immediate value of gpd_ring.dma when trace\npoint is triggered.\n\nReported-by: Paul E. McKenney \u003cpaulmck@kernel.org\u003e\nTested-by: Mark Rutland \u003cmark.rutland@arm.com\u003e\nReviewed-by: Steven Rostedt \u003crostedt@goodmis.org\u003e\nSigned-off-by: Vladimir Murzin \u003cvladimir.murzin@arm.com\u003e\nSigned-off-by: Paul E. McKenney \u003cpaulmck@kernel.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "89870175d6356108e47435d964d6e10447f86ae5",
      "old_mode": 33188,
      "old_path": "drivers/usb/mtu3/mtu3_trace.h",
      "new_id": "9aaa167d69c130d27b702fb87bd198a9557bf13f",
      "new_mode": 33188,
      "new_path": "drivers/usb/mtu3/mtu3_trace.h"
    }
  ]
}