Re: [PATCH] usbip: fix use-after-free in event_handler()

Aleksandr Nogikh <[email protected]>
Newsgroups dev.linux.lists.syzbot,org.kernel.vger.linux-kernel,org.kernel.vger.linux-usb
Message-ID <CANp29Y4NLVebq6L7STgcFJYSJo81ZpO4hNvaJQT14OGDZqwzxQ@mail.gmail.com>
On Mon, Aug 10, 2026 at 9:33 PM Shuah Khan <[email protected]> wrote:
>
< ... >
> >
> > During unbinding, we must wait for the scheduled removal event to
> > finish before we can safely free the device structures. From what I
> > see in the code, once we have reached wait_event_interruptible(),
> > there's no way to abort the process or somehow gracefully handle the
> > error.
> >
>
> Yes I agree with you on rewinding being hard.
>
> Care to explain the scope of this assist?
>
> Assisted-by: Gemini:gemini-3.5-flash Gemini:gemini-3.1-pro-preview syzbot

It was generated by the syzbot's AI patch generation agent:
https://github.com/google/syzkaller/blob/master/docs/syzbot_ai_patches.md

We manually review the patches it suggests and upstream those we
believe are fully correct.

-- 
Aleksandr

>
> thanks,
> -- Shuah
>
>
>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.