KASAN: use-after-free Write in betop

Created	Duration	User	Patch	Repo	Result
2023/04/17 09:40	13m	retest repro		android12-5.4	OK log
usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00
usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
usb 1-1: config 0 descriptor??
==================================================================
BUG: KASAN: use-after-free in set_bit include/asm-generic/bitops-instrumented.h:28 [inline]
BUG: KASAN: use-after-free in betopff_init drivers/hid/hid-betopff.c:99 [inline]
BUG: KASAN: use-after-free in betop_probe+0x3d4/0x5c0 drivers/hid/hid-betopff.c:134
Write of size 8 at addr ffff8881e9519440 by task kworker/1:1/67

CPU: 1 PID: 67 Comm: kworker/1:1 Not tainted 5.4.83-syzkaller-00109-g2149aa11b029 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1dd/0x24e lib/dump_stack.c:118
 print_address_description+0x96/0x640 mm/kasan/report.c:374
 __kasan_report+0x177/0x1f0 mm/kasan/report.c:506
 kasan_report+0x30/0x60 mm/kasan/common.c:634
 check_memory_region_inline mm/kasan/generic.c:181 [inline]
 check_memory_region+0x2b5/0x2f0 mm/kasan/generic.c:191
 set_bit include/asm-generic/bitops-instrumented.h:28 [inline]
 betopff_init drivers/hid/hid-betopff.c:99 [inline]
 betop_probe+0x3d4/0x5c0 drivers/hid/hid-betopff.c:134
 hid_device_probe+0x27a/0x420 drivers/hid/hid-core.c:2274
 really_probe+0x70f/0x1120 drivers/base/dd.c:564
 driver_probe_device+0xe6/0x230 drivers/base/dd.c:746
 bus_for_each_drv+0x17a/0x200 drivers/base/bus.c:430