Re: [PATCH] usbip: fix use-after-free in event_handler()
Aleksandr Nogikh <[email protected]>
| Newsgroups | dev.linux.lists.syzbot,org.kernel.vger.linux-kernel,org.kernel.vger.linux-usb |
|---|---|
| Message-ID | <CANp29Y4NLVebq6L7STgcFJYSJo81ZpO4hNvaJQT14OGDZqwzxQ@mail.gmail.com> |
On Mon, Aug 10, 2026 at 9:33 PM Shuah Khan <[email protected]> wrote: > < ... > > > > > During unbinding, we must wait for the scheduled removal event to > > finish before we can safely free the device structures. From what I > > see in the code, once we have reached wait_event_interruptible(), > > there's no way to abort the process or somehow gracefully handle the > > error. > > > > Yes I agree with you on rewinding being hard. > > Care to explain the scope of this assist? > > Assisted-by: Gemini:gemini-3.5-flash Gemini:gemini-3.1-pro-preview syzbot It was generated by the syzbot's AI patch generation agent: https://github.com/google/syzkaller/blob/master/docs/syzbot_ai_patches.md We manually review the patches it suggests and upstream those we believe are fully correct. -- Aleksandr > > thanks, > -- Shuah > > >