From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: Michael Zimmermann <sigmaepsilon92@gmail.com>
Cc: linux-usb@vger.kernel.org
Subject: Re: Oops when rebinding f_hid while /dev/hidg* is still opened
Date: Mon, 23 Mar 2026 12:00:46 +0100 [thread overview]
Message-ID: <2026032337-resend-recolor-efc5@gregkh> (raw)
In-Reply-To: <CAN9vWD+13DHCyjq+7hYgTSDx87TLtKXV9-8GMnZPuZnYvjyANA@mail.gmail.com>
On Sun, Mar 22, 2026 at 03:01:19PM +0100, Michael Zimmermann wrote:
> The steps are as follows:
> - setup an hid gadget via configfs
> - bind it via the UDC file
> - open /dev/hidg0
> - unbind it via the UDC file
> - bind it via the UDC file
> - close /dev/hidg0
>
> This results in an oops (on a Raspberry Pi 4 running Fedora 43 with
> kernel 6.17.1-300.fc43.aarch64):
> + echo fe980000.usb
> [ 273.407057] dwc2 fe980000.usb: bound driver configfs-gadget.g1
> + sleep 3
> [ 273.624208] dwc2 fe980000.usb: new device is high-speed
> [ 273.748314] dwc2 fe980000.usb: new device is high-speed
> [ 273.811272] dwc2 fe980000.usb: new address 30
This bug has happened a lot on many gadget drivers, I think we fixed a
bunch of them already, can you verify this is still an issue on the
latest 7.0-rc4 or 6.19.y kernel release (6.17 is very old and obsolete
and insecure, don't run that thing...)
thanks,
greg k-h
next prev parent reply other threads:[~2026-03-23 11:01 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-03-22 14:01 Oops when rebinding f_hid while /dev/hidg* is still opened Michael Zimmermann
2026-03-23 11:00 ` Greg Kroah-Hartman [this message]
2026-03-23 17:11 ` Michael Zimmermann
2026-03-24 15:28 ` Greg Kroah-Hartman
2026-03-24 19:56 ` Michael Zimmermann
2026-03-27 18:46 ` Michael Zimmermann
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=2026032337-resend-recolor-efc5@gregkh \
--to=gregkh@linuxfoundation.org \
--cc=linux-usb@vger.kernel.org \
--cc=sigmaepsilon92@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox