From patchwork Tue Jan 12 03:28:21 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Zhang, Qiang" X-Patchwork-Id: 12012307 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-10.6 required=3.0 tests=BAYES_00, CHARSET_FARAWAY_HEADER,DKIM_SIGNED,DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS, INCLUDES_PATCH,MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING,SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 07844C433E0 for ; Tue, 12 Jan 2021 03:29:24 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id BCD3022D6E for ; Tue, 12 Jan 2021 03:29:23 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727036AbhALD3H (ORCPT ); Mon, 11 Jan 2021 22:29:07 -0500 Received: from mail-eopbgr690051.outbound.protection.outlook.com ([40.107.69.51]:13358 "EHLO NAM04-CO1-obe.outbound.protection.outlook.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1726843AbhALD3G (ORCPT ); Mon, 11 Jan 2021 22:29:06 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=E48Lj7uiRUp+PujFIym77EqKlbyoN9A3xw50AJQouxNll3Wg9ZE4/KaPQayTbe7WmC86aquXOQPbL6InutZnBsp6W83U1XgAWrOcw4otcW0lo8EzbLJmJodOJefC3TQYIHt3x+aeWAe9aM9pPu1mKdWTKR5+wVhhs66Q3zhBdfTeAn+hxzqkkAMB1Xl5wN9EW99chq1RJ+ZKv6CPV5RMkOPOmZtTi668YZHxxHD1fosgEPt+v6K8WcihXn9Z4YhHoCjWWuKt6s3PTB9p+7cAnz3+q7uPjUPwz8G5x/Etwjb2I+qYkkmSILq7YSrJak14u8byFrA3edAh9qXqLVXhrQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=RJVXtk8rPuLkZj0pguorZSYtXb7JVceIzYmZIhPiUho=; b=jK0Vrle+10ViPh5f4VQBr5eBDl6I6712mK7vNmCeYTlZpkzlBN2HBqO/nFuhnhfvVkiLZxKZMY+LUxpKefLmL2uNvp3qtuE3CozOoJowJia885ANH0M118dP10xEd73cyBBLWc1IILiSNjajUE43glDTdFiYTPAWxHv5zbkxoj51m8xbOJ2JSKTMaeonTeQIC01wfibphZgevKLYsVrgob90Puc7T7NQy7fjgaC9ABtMN/MFhYQhhpEI/sKj8ZK8Hrwc+mTzKzTHdZHtsxWMQjgdtehhOMphjxxiDPJ5vlyqTexd7BpsZm5K2jxwYBGuvnweKnO0Ht5RC1fRueTIIQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=windriver.com; dmarc=pass action=none header.from=windriver.com; dkim=pass header.d=windriver.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=windriversystems.onmicrosoft.com; s=selector2-windriversystems-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=RJVXtk8rPuLkZj0pguorZSYtXb7JVceIzYmZIhPiUho=; b=p/O93FW8vTIbbeWT86zhRxtaZ5mZmobJzSzX6tZDRNhH2yaClGK3p1ttXn41QCxKfDEPjsar+Wn4liOU+3K0O/HzhzmBotPiN5i4bMddEfF2+u2WcO+x10nzKg9Z8Q01N4EgyCKTs/PaSMitlPje0p2C1HA4TxaxTJJoqhBqTC4= Received: from BYAPR11MB2632.namprd11.prod.outlook.com (2603:10b6:a02:c4::17) by BYAPR11MB3767.namprd11.prod.outlook.com (2603:10b6:a03:fd::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3742.6; Tue, 12 Jan 2021 03:28:21 +0000 Received: from BYAPR11MB2632.namprd11.prod.outlook.com ([fe80::94a4:4e15:ab64:5006]) by BYAPR11MB2632.namprd11.prod.outlook.com ([fe80::94a4:4e15:ab64:5006%5]) with mapi id 15.20.3742.012; Tue, 12 Jan 2021 03:28:21 +0000 From: "Zhang, Qiang" To: syzbot , "a.darwish@linutronix.de" , "allen.lkml@gmail.com" , "andreyknvl@google.com" , "dvyukov@google.com" , "elver@google.com" , "gregkh@linuxfoundation.org" , "gustavoars@kernel.org" , "linux-kernel@vger.kernel.org" , "linux-usb@vger.kernel.org" , "syzkaller-bugs@googlegroups.com" , "tglx@linutronix.de" Subject: =?eucgb2312_cn?b?u9i4tDogS0FTQU46IHVzZS1hZnRlci1mcmVlIFJlYWQgaW4gdXNiX2Fu?= =?eucgb2312_cn?b?Y2hvcl9yZXN1bWVfd2FrZXVwcyAoMik=?= Thread-Topic: KASAN: use-after-free Read in usb_anchor_resume_wakeups (2) Thread-Index: AQHW6DTOANg5ojbivkuHK2yBWpzQ5qojUtdn Date: Tue, 12 Jan 2021 03:28:21 +0000 Message-ID: References: <00000000000078b53f05b8a2286b@google.com> In-Reply-To: <00000000000078b53f05b8a2286b@google.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: syzkaller.appspotmail.com; dkim=none (message not signed) header.d=none;syzkaller.appspotmail.com; dmarc=none action=none header.from=windriver.com; x-originating-ip: [60.247.85.82] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 522f4661-6294-4175-da77-08d8b6aa1c97 x-ms-traffictypediagnostic: BYAPR11MB3767: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BYAPR11MB2632.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(376002)(346002)(396003)(39850400004)(136003)(366004)(110136005)(86362001)(186003)(5660300002)(83380400001)(6506007)(71200400001)(224303003)(478600001)(316002)(966005)(76116006)(26005)(55016002)(7696005)(66946007)(2906002)(66556008)(91956017)(52536014)(66446008)(921005)(8936002)(30864003)(9686003)(64756008)(33656002)(7416002)(66476007)(99710200001);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?eucgb2312_cn?b?UGp5SUh4VTdlYlcrVlgxMDlvRDJW?= =?eucgb2312_cn?b?NXZKdjYydGdNY1Z6Yi8wSWtRZFBXbFh5cUJpZmt0VWZjQ2plZWVxNGVZNVJUR3lN?= =?eucgb2312_cn?b?RGtnWXVqSnJKNUVhMzRsZGhMK0xYUnpLUDJhNDdseVc5NmMyVVRwQk5pTjdlM1pm?= =?eucgb2312_cn?b?WGRFREpwTHBaVU9yQW84YzRHS2FzSzZqYXhMUFE3UzZCVktHT0twcFlGbGE1UzFS?= =?eucgb2312_cn?b?bkNUT1daQ1hyb2N6V05kWTNtRHNzYVZNekRjQ3ZtVnpKbFhrcEdic3hCUEFCdk5S?= =?eucgb2312_cn?b?c0x0ZVdtUWYzZHlOczFZU0YwN3hTV3JnTm8xYzlWeGJxR2pRWnJ3QnFHUlBhK2U5?= =?eucgb2312_cn?b?VHdvUlF6ejA4OHkzb1VPVFRXenpBUU5tUzl2eEFqQ1d1MGtpS09nR1NmdzVFVXVq?= =?eucgb2312_cn?b?QXJsd2J4b3lHbXdFQnRjUE0rOUZMTXRqWTIrRjU0TzlWaVFFNi8xSVZHVVE0UHRO?= =?eucgb2312_cn?b?N1l5MkYrMU1JV1dIbmVWYWdLa1RQUm54SnFTbG9lcVNNeWtVSFZHYkdyd0VRQUNu?= =?eucgb2312_cn?b?R2Vvall2UzdrZDZOblJqSDVhVE84VC9jSytDMHN3MHhnUmFJZzlrTndjejUxRUhk?= =?eucgb2312_cn?b?Qis0MHdxdzV3b09XZkNFbXdLaE4zNU1FNDVJVXlvRUxoN0dWTjJoV0MveCs0VGdG?= =?eucgb2312_cn?b?SnhKOWFIbFc5OEVEaEtqdU02Y3VMaENtU291eEZrSWlqTCtSeXdESE9TK1kvTjl0?= =?eucgb2312_cn?b?Y3ZqUUVUby9TU0pndTVxNmRTb2lTTldKWW5CS3dlVTNHTVppRXZZbTFRNHk5dzFz?= =?eucgb2312_cn?b?MFFKLzZUeTZ0SFBPN2VwbEhkeG1jc3hCUTFLQ2Uxbndvc0tyU2dzc1VWdXhwZE9O?= =?eucgb2312_cn?b?bW9kT2xOTmlRY3FHaDhjWU9OVHZjbHMxNWQ2clBQSlZyTUFnZFVSY2EzbjRJRFcx?= =?eucgb2312_cn?b?ZUd0VUc0Nld4UTRIanl0cHhLNGptWmJzUzRteFE5ZW8yMjlGZjg5MkVwNzZOaUpV?= =?eucgb2312_cn?b?cWxCRkZoN09WbjFWUm05dXBmcDdyamJBYWFPaDFzR0tuTDlrbTl3eWZEb0FuejVm?= =?eucgb2312_cn?b?ZHgxVGNKejhrdG5rdlpia24zSmgxelZidFNHaGdmM0ovM2I2elJTazBaclNTeFRJ?= =?eucgb2312_cn?b?dzRUY2VKMUp2VTcvelczaVVkZnBOOUZCallHNkFPa3NLdjhFM3ZTZ3A5RXVLVHFo?= =?eucgb2312_cn?b?Vjc3dTE0T09GNkpHWHA4S3VuZEN6WXVuOG44bk1NVUZyUjRua2tiT3lKRXBpV0s4?= =?eucgb2312_cn?b?MlVtUWlLeEQ5dXhEYUhwbnZxQ2YrQk1qbUtLVWtTakVZZUs2UHp6WGU1bHdrL0xW?= =?eucgb2312_cn?b?MDBDWEdTYXZ1MlUzdnpPdmJvZlNwTT0=?= x-ms-exchange-transport-forked: True MIME-Version: 1.0 X-OriginatorOrg: windriver.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BYAPR11MB2632.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 522f4661-6294-4175-da77-08d8b6aa1c97 X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Jan 2021 03:28:21.2355 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 8ddb2873-a1ad-4a18-ae4e-4644631433be X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: PU/IDdo3GdIezsKFZNOD6Z9kKj2xvSAGoJbh9CMaGHQP6uMLkzbUCqfxc3EBKww8YJFYaF8XoqClhC8pCUK5kURRIdJAKp6ruvMMU4kokSU= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR11MB3767 Precedence: bulk List-ID: X-Mailing-List: linux-usb@vger.kernel.org diff --git a/drivers/input/joystick/xpad.c b/drivers/input/joystick/xpad.c index 0687f0ed60b8..4233686d458d 100644 --- a/drivers/input/joystick/xpad.c +++ b/drivers/input/joystick/xpad.c @@ -1130,7 +1130,8 @@ static void xpad_stop_output(struct usb_xpad *xpad) dev_warn(&xpad->intf->dev, "timed out waiting for output URB to complete, killing\n"); usb_kill_anchored_urbs(&xpad->irq_out_anchor); - } + } else + usb_kill_urb(xpad->irq_out); } }