From: Hangyu Hua <hbh25y@xxxxxxxxx> commit 89f3594d0de58e8a57d92d497dea9fee3d4b9cda upstream. dev->buf does not need to be released if it already exists before executing dev_config. Acked-by: Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> Signed-off-by: Hangyu Hua <hbh25y@xxxxxxxxx> Link: https://lore.kernel.org/r/20211231172138.7993-2-hbh25y@xxxxxxxxx Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- drivers/usb/gadget/legacy/inode.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) --- a/drivers/usb/gadget/legacy/inode.c +++ b/drivers/usb/gadget/legacy/inode.c @@ -1833,8 +1833,9 @@ dev_config (struct file *fd, const char spin_lock_irq (&dev->lock); value = -EINVAL; if (dev->buf) { + spin_unlock_irq(&dev->lock); kfree(kbuf); - goto fail; + return value; } dev->buf = kbuf; Patches currently in stable-queue which might be from hbh25y@xxxxxxxxx are queue-4.9/usb-gadget-clear-related-members-when-goto-fail.patch queue-4.9/usb-gadget-don-t-release-an-existing-dev-buf.patch