Re: [BUG] usb: dummy_hcd: general protection fault in set_link_state on unbind

From: Alan Stern

Date: Thu Sep 17 2026 - 11:19:44 EST


On Thu, Sep 17, 2026 at 04:00:00PM +0800, CJ wrote:
>
> Hi,
>
>
> I am reporting a general protection fault in the dummy_hcd link-state handling,
> triggered by a syzkaller USB reproducer. The issue is reproducible with HEAD
> commit cee9395acd8043be0644b25c34bfa86623f2b935 (v7.3-rc1, Linux 7.3.0-rc1).
>
>
> The reproducer connects a synthetic HID USB device through dummy_hcd and then
> unbinds the dummy_hcd.0 platform device by writing its name to the driver's
> unbind attribute. The failure happens during the teardown that follows.

This patch:

https://lore.kernel.org/linux-usb/18ec3122-7566-49e5-9964-1028857405b1@xxxxxxxxxxxxxxx/

was submitted at the end of July but it hasn't been merged yet. Does it
fix the problem?

Alan Stern