From 2afe7575fb24b9d0476ae4a3a9862f7997216aa4 Mon Sep 17 00:00:00 2001 From: David Carlier Date: Mon, 14 Sep 2026 14:35:04 +0100 Subject: [PATCH] tracing: Take trace_types_lock when dropping the buffer_meta reference tracing_buffer_meta_open() drops the trace_array reference with __trace_array_put() when ring_buffer_meta_seq_init() fails, without holding trace_types_lock. Use trace_array_put() like every other open error path. Cc: stable@vger.kernel.org Link: https://patch.msgid.link/20260914133506.4865-2-devnexen@gmail.com Fixes: 950032ffcee7 ("ring-buffer: Add output of ring buffer meta page") Signed-off-by: David Carlier Signed-off-by: Steven Rostedt --- kernel/trace/trace.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel/trace/trace.c b/kernel/trace/trace.c index e4a490d3d08c..8645298579c3 100644 --- a/kernel/trace/trace.c +++ b/kernel/trace/trace.c @@ -5881,7 +5881,7 @@ static int tracing_buffer_meta_open(struct inode *inode, struct file *filp) ret = ring_buffer_meta_seq_init(filp, tr->array_buffer.buffer, cpu); if (ret < 0) - __trace_array_put(tr); + trace_array_put(tr); return ret; }