Calling irq_domain_set_info() before irq_domain_alloc_irqs_parent() can cause a null pointer dereference as the parent domain isn't ready yet. Move irq_domain_set_info() to after irq_domain_alloc_irqs_parent(). A side effect of this is that irq_domain_set_info() will now overwrite the flow handler from the parent domain. So if there is a parent domain do not set the flow handler anymore. This allows gpio-msc313.c to level it's irq domain on top of the new irq controller in later SigmaStar SoCs without crashing. Link: https://lore.kernel.org/linux-arm-kernel/20210914100415.1549208-1-daniel@xxxxxxxx/ Signed-off-by: Daniel Palmer <daniel@xxxxxxxx> Suggested-by: Marc Zyngier <maz@xxxxxxxxxx> --- drivers/gpio/gpiolib.c | 34 +++++++++++++++++++++------------- 1 file changed, 21 insertions(+), 13 deletions(-) diff --git a/drivers/gpio/gpiolib.c b/drivers/gpio/gpiolib.c index d1b9b721218f..993eeced6b4f 100644 --- a/drivers/gpio/gpiolib.c +++ b/drivers/gpio/gpiolib.c @@ -1103,19 +1103,6 @@ static int gpiochip_hierarchy_irq_domain_alloc(struct irq_domain *d, } chip_dbg(gc, "found parent hwirq %u\n", parent_hwirq); - /* - * We set handle_bad_irq because the .set_type() should - * always be invoked and set the right type of handler. - */ - irq_domain_set_info(d, - irq, - hwirq, - gc->irq.chip, - gc, - girq->handler, - NULL, NULL); - irq_set_probe(irq); - /* This parent only handles asserted level IRQs */ parent_arg = girq->populate_parent_alloc_arg(gc, parent_hwirq, parent_type); if (!parent_arg) @@ -1137,6 +1124,27 @@ static int gpiochip_hierarchy_irq_domain_alloc(struct irq_domain *d, parent_hwirq, hwirq); kfree(parent_arg); + + if (!ret) { + /* If there is a parent domain leave the flow handler alone */ + if (d->parent) + irq_domain_set_hwirq_and_chip(d, + irq, + hwirq, + gc->irq.chip, + gc); + /* Otherwise set the flow handler supplied by the gpio driver */ + else + irq_domain_set_info(d, + irq, + hwirq, + gc->irq.chip, + gc, + girq->handler, + NULL, NULL); + irq_set_probe(irq); + } + return ret; } -- 2.33.0