From patchwork Tue Jan 12 04:55:55 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Zhang, Qiang" X-Patchwork-Id: 12012425 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-10.6 required=3.0 tests=BAYES_00, CHARSET_FARAWAY_HEADER,DKIM_SIGNED,DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS, INCLUDES_PATCH,MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 03E4FC433DB for ; Tue, 12 Jan 2021 04:57:35 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id BFCC222D2B for ; Tue, 12 Jan 2021 04:57:34 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1731877AbhALE5N (ORCPT ); Mon, 11 Jan 2021 23:57:13 -0500 Received: from mail-dm6nam11on2042.outbound.protection.outlook.com ([40.107.223.42]:4001 "EHLO NAM11-DM6-obe.outbound.protection.outlook.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1728910AbhALE5M (ORCPT ); Mon, 11 Jan 2021 23:57:12 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=XVI6bc+8olBddzzpRYbc1GZPernzLr6r99DJAwemA/rDzvADAuioveOmZoRLCs7FvLsUQzQWBlZfe6Ivy6r3nuoRhtrupx4y2clx4UArJ7TFLMvQxJ/zki6oJkuPEe4csUeqowhbL+kft84S8fLn4ZEtttPtrt6D+nXTdXjDnll/KibSElSPXiL3xg+swNDxN02VfmJ6BWpbePhL/tVd8o6vIfYI5OBaR5ZygsLIeuc9gBfPljMDHACf/pu2NQ+Uy3c2PUhGKuxjZ25pcAOSsHjN5acCYOZS5Fo0b5wHpPKuiHUXbZiUQxo3rZ7oWTU6gqoK+wQFfsWSwjQVr03JYQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eZgnS66YdR1rkBzVw3yeIOYdtSnTVSqDJg4UmVqmaY4=; b=Avzq0mt8S/gN9QJFfx0UdCbcp+ZoabnDULDSz4fL5L1PTUFpWUakeqBcd1HLFb/gNmltiZUO8SuAA/oLG808MZs69edV0FjyqhuBPdhSKz6+/yeHJwcB3WZR6cwI8JF6F9mRPBmRiYLPUkiK4MSWLOR0sa5u9dVPVL3lVXs68pQ94INvr4InZ0R7bySAnsKQzDse3vjjsh07DFhwWpEu+QDeEm+a+gjnR8JF/zXyXYHde1xEBGRwmcCqAOtdjsXdv3A5eeByvOSq78kLxtzzVIfhopZX1XajK7j9v1H1dFgqjbQh0TF6FpnM0+UbJxJ+8KpTxnH5p6L0YipZrxc9HA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=windriver.com; dmarc=pass action=none header.from=windriver.com; dkim=pass header.d=windriver.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=windriversystems.onmicrosoft.com; s=selector2-windriversystems-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eZgnS66YdR1rkBzVw3yeIOYdtSnTVSqDJg4UmVqmaY4=; b=cz+9BF3rL/n1XalN8OG67ONH7eYnIvsivh68tvqeJNJT0EwNZtJGclS+a7m0gSCJV1Um8WNoMvrs/Tbppz+TTkj5G7lHUCtaPKWIssaQc/XVqHFbgVBa05MVBhhTjeLYPSFj3bjx4p1yxfaGlS+5EEMVAusaiB05geAyflMSrAY= Received: from BYAPR11MB2632.namprd11.prod.outlook.com (2603:10b6:a02:c4::17) by BY5PR11MB4242.namprd11.prod.outlook.com (2603:10b6:a03:1c1::28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3742.6; Tue, 12 Jan 2021 04:55:55 +0000 Received: from BYAPR11MB2632.namprd11.prod.outlook.com ([fe80::94a4:4e15:ab64:5006]) by BYAPR11MB2632.namprd11.prod.outlook.com ([fe80::94a4:4e15:ab64:5006%5]) with mapi id 15.20.3742.012; Tue, 12 Jan 2021 04:55:55 +0000 From: "Zhang, Qiang" To: syzbot , "a.darwish@linutronix.de" , "allen.lkml@gmail.com" , "andreyknvl@google.com" , "dvyukov@google.com" , "elver@google.com" , "gregkh@linuxfoundation.org" , "gustavoars@kernel.org" , "linux-kernel@vger.kernel.org" , "linux-usb@vger.kernel.org" , "syzkaller-bugs@googlegroups.com" , "tglx@linutronix.de" Subject: =?eucgb2312_cn?b?u9i4tDogS0FTQU46IHVzZS1hZnRlci1mcmVlIFJlYWQgaW4gdXNiX2Fu?= =?eucgb2312_cn?b?Y2hvcl9yZXN1bWVfd2FrZXVwcyAoMik=?= Thread-Topic: KASAN: use-after-free Read in usb_anchor_resume_wakeups (2) Thread-Index: AQHW6DTOANg5ojbivkuHK2yBWpzQ5qojUtdngAAYPrU= Date: Tue, 12 Jan 2021 04:55:55 +0000 Message-ID: References: <00000000000078b53f05b8a2286b@google.com>, In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: syzkaller.appspotmail.com; dkim=none (message not signed) header.d=none;syzkaller.appspotmail.com; dmarc=none action=none header.from=windriver.com; x-originating-ip: [60.247.85.82] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: d2e6000b-dbb2-4ccc-88a3-08d8b6b6587b x-ms-traffictypediagnostic: BY5PR11MB4242: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BYAPR11MB2632.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(366004)(376002)(136003)(346002)(396003)(39850400004)(33656002)(2940100002)(316002)(86362001)(6506007)(966005)(186003)(26005)(8936002)(30864003)(921005)(66446008)(66556008)(5660300002)(2906002)(478600001)(91956017)(83380400001)(64756008)(76116006)(71200400001)(110136005)(7416002)(55016002)(66476007)(66946007)(7696005)(52536014)(9686003)(224303003)(99710200001);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?eucgb2312_cn?b?Y2R3eXh1T3ZaZTBFd3dDYnBiQzV2?= =?eucgb2312_cn?b?bVY4N2dXeFdYd1kzQ29Ib3dLc2JBTXk4SHdPdlkxN2xTcmt3c0VndFNqZWFrOFFu?= =?eucgb2312_cn?b?U0QybkgyWjZYUnkrUHpQcnpIVHlOTnJ6SnEwdG5pbVUrSk5pcVZxZGtHN0kwZ3FW?= =?eucgb2312_cn?b?b2FwMFBCVll0cGtsdFh4SEhTb2FlTFkwMDZWQ1d0NG9NcUp0b2M0NS9KejRrNzlD?= =?eucgb2312_cn?b?cE9pZGVQS25OZzg1NFhJMms1cG1oLzhJNks2b2NUbFFqdEpoWWR4Z0d2ZWNSYWJy?= =?eucgb2312_cn?b?VURmL0F1WHRvcG5HMENrRnRsR3BJK2k0SHZRQXYvUDQwaVdGQjZOVGhkNVhqam5r?= =?eucgb2312_cn?b?cGc4c0lyeXJVMWErRTlKTnZ1dHlsVVNQRkc2dk1IQkREL0xkdHIveldCa01scEdy?= =?eucgb2312_cn?b?R2RDT1h1ZVBrQVprVGtVN0xtQ2trWW41U0JIaExrRlNWL2x0blI1YVF2SjNIQkhJ?= =?eucgb2312_cn?b?VWdzTXUxQ3duaW9DLy93UDg1b2ltVDhGSk15RU1pTWJzSTBZZjFXMHFFMWJRTE04?= =?eucgb2312_cn?b?YVp2dHArbmJaN2JKWUFWVXQ1VFlzcDZpeWdveGs4RGdveFdqU3RwNkxJSm56T1d2?= =?eucgb2312_cn?b?YlkzOUh1V0VYUnU0UFJPZWpnU28rc0l5eDBJNVpKRVA3SFIxTW11ZXFWZlhTUDVR?= =?eucgb2312_cn?b?ODVITEE5Qlk2djNJdlFvYzl4OWJtNWY0Zkd1NTBRZFQvbms3U0g4S240Tklwb3Jr?= =?eucgb2312_cn?b?eTd1N0psbzd4blp4Q3AxbkhMaWpQaVVTOHpxdmN6TnVXV2dDR1g0cU11cnMvRkxj?= =?eucgb2312_cn?b?c2YyVHkvUWZaRGxTTVR1SWFqcXF3SUR2TUlGeS81MzFuczN1MkxId1RRNFJuSHRJ?= =?eucgb2312_cn?b?aEI0bjI3cGJzY2VicjE1Q3lwRXRTS1h5cEg1dlZyNHNKUmY3R3BWamZSaEsxbG1I?= =?eucgb2312_cn?b?V1FFWXZYaTZNSjZqc3Z5NmdtUGhTNlBKaXZiZmJkYlV6ZEpUTGNncEVhSkxnREt1?= =?eucgb2312_cn?b?K0pSMGQ2UUlQMkZodUpGVExXdnEvbVkyd21rWDRXdUovRHUySzBEOG9iU1dSc0hS?= =?eucgb2312_cn?b?VFhSR0NpbVhMU0NPd1dDbUs0MWdsdGZyejdBZHpmSFJXQllkd1loQnZQZXdnNXU2?= =?eucgb2312_cn?b?UHZmVVd3RmNacytiTHMrZjE3S3N2aHdPQm9uUlBlbmpjZkNQWFRSUDNIeVltQmli?= =?eucgb2312_cn?b?Y0xna2ZDd0JqUnFobzBxRHpJMXh5QVlWMCtSV2FkTnpLNy9PNHF6VU9xVzlqRWY0?= =?eucgb2312_cn?b?R1dwa3JiaGpvN1MzVUhZZWF6aVNJWDN5dlJkNUxHWFR2ajY2QWZhYTFGd21nT2FR?= =?eucgb2312_cn?b?RUxtdVVHdHhVNU8wOXYzQnVDU2hCRT0=?= x-ms-exchange-transport-forked: True MIME-Version: 1.0 X-OriginatorOrg: windriver.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BYAPR11MB2632.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: d2e6000b-dbb2-4ccc-88a3-08d8b6b6587b X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Jan 2021 04:55:55.6439 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 8ddb2873-a1ad-4a18-ae4e-4644631433be X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: EKriY4hTrRxOZ9XPMRfm26xV02zGZoIRGt7Dc0QzxouIv7We4T3do+erJAseAo2PEdT23TwOuX7to5ccNe3xrOS01zfE5N0v0wQdEd5O6nw= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR11MB4242 Precedence: bulk List-ID: X-Mailing-List: linux-usb@vger.kernel.org diff --git a/drivers/input/joystick/xpad.c b/drivers/input/joystick/xpad.c index 0687f0ed60b8..c0d8d4b9138b 100644 --- a/drivers/input/joystick/xpad.c +++ b/drivers/input/joystick/xpad.c @@ -1131,6 +1131,7 @@ static void xpad_stop_output(struct usb_xpad *xpad) "timed out waiting for output URB to complete, killing\n"); usb_kill_anchored_urbs(&xpad->irq_out_anchor); } + usb_kill_urb(xpad->irq_out); } }