From 263f7d61a4201cde16849b2d016251806e7418be Mon Sep 17 00:00:00 2001
From: Fan Wu <fanwu01@zju.edu.cn>
Date: Thu, 20 Aug 2026 13:53:06 +0000
Subject: usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop

cc_debounce_dwork is queued from the set_cc() and start_toggling()
callbacks, which run from TCPM's kthread worker.  port_stop() returns
before tcpm_unregister_port() destroys that worker.  Flushing the worker
during unregister may therefore run a callback which queues the delayed
work after port_stop() has returned.

The delayed work can then run after devres has freed pmic_typec_port.

Use disable_delayed_work_sync() in port_stop() to cancel a pending
instance and prevent the TCPM callbacks from queueing another one.

This issue was found by an in-house static analysis tool.

Fixes: a4422ff22142 ("usb: typec: qcom: Add Qualcomm PMIC Type-C driver")
Cc: stable <stable@kernel.org>  # v6.10+
Assisted-by: Codex:gpt-5.6
Signed-off-by: Fan Wu <fanwu01@zju.edu.cn>
Acked-by: Heikki Krogerus <heikki.krogerus@linux.intel.com>
Link: https://patch.msgid.link/20260820135307.153773-2-fanwu01@zju.edu.cn
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
 lib/compat_audit.c | 56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 56 insertions(+)
 create mode 100644 lib/compat_audit.c

(limited to 'lib/compat_audit.c')

diff --git a/lib/compat_audit.c b/lib/compat_audit.c
new file mode 100644
index 000000000..fee1dfccd
--- /dev/null
+++ b/lib/compat_audit.c
@@ -0,0 +1,56 @@
+// SPDX-License-Identifier: GPL-2.0
+#include <linux/init.h>
+#include <linux/types.h>
+#include <linux/audit_arch.h>
+#include <asm/unistd32.h>
+
+unsigned int compat_dir_class[] = {
+#include <asm-generic/audit_dir_write.h>
+~0U
+};
+
+unsigned int compat_read_class[] = {
+#include <asm-generic/audit_read.h>
+~0U
+};
+
+unsigned int compat_write_class[] = {
+#include <asm-generic/audit_write.h>
+~0U
+};
+
+unsigned int compat_chattr_class[] = {
+#include <asm-generic/audit_change_attr.h>
+~0U
+};
+
+unsigned int compat_signal_class[] = {
+#include <asm-generic/audit_signal.h>
+~0U
+};
+
+int audit_classify_compat_syscall(int abi, unsigned int syscall)
+{
+	switch (syscall) {
+#ifdef __NR_open
+	case __NR_open:
+		return AUDITSC_OPEN;
+#endif
+#ifdef __NR_openat
+	case __NR_openat:
+		return AUDITSC_OPENAT;
+#endif
+#ifdef __NR_socketcall
+	case __NR_socketcall:
+		return AUDITSC_SOCKETCALL;
+#endif
+	case __NR_execve:
+		return AUDITSC_EXECVE;
+#ifdef __NR_openat2
+	case __NR_openat2:
+		return AUDITSC_OPENAT2;
+#endif
+	default:
+		return AUDITSC_COMPAT;
+	}
+}
-- 
cgit v1.3.1