!1261 usb: gadget: udc: renesas_usb3: Fix use after free bug in...

!1261  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition

Merge Pull Request from: @ci-robot 
 
PR sync from: Jialin Zhang <zhangjialin11@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/7KTWBBNYFJCK5RNBNMDHJRJHHWNO7JEZ/ 
 
 
Link:https://gitee.com/openeuler/kernel/pulls/1261 

Reviewed-by: Wei Li <liwei391@huawei.com> 
Signed-off-by: Zheng Zengkai <zhengzengkai@huawei.com> 

drivers/usb/gadget/udc/renesas_usb3.c

@@ -2568,6 +2568,7 @@ static int renesas_usb3_remove(struct platform_device *pdev)
 	debugfs_remove_recursive(usb3->dentry);
 	device_remove_file(&pdev->dev, &dev_attr_role);
 
+	cancel_work_sync(&usb3->role_work);
 	usb_role_switch_unregister(usb3->role_sw);
 
 	usb_del_gadget_udc(&usb3->gadget);