For archival purposes, forwarding an incoming command email to
linux-kernel@vger.kernel.org.

***

Subject: KASAN: slab-use-after-free Read in dvb_frontend_release (3)
Author: ttt978615@gmail.com

#syz test upstream c22e26bd0906e9c8325462993f01adb16b8ea2c0

--- a/drivers/media/dvb-core/dvb_frontend.c
+++ b/drivers/media/dvb-core/dvb_frontend.c
@@ -2911,6 +2911,7 @@ static int dvb_frontend_release(struct inode *inode,
struct file *file)
                mb();
        }

+       dvb_device_get(dvbdev);
        ret = dvb_generic_release(inode, file);

        if (dvbdev->users == -1) {
@@ -2931,6 +2932,7 @@ static int dvb_frontend_release(struct inode *inode,
struct file *file)
                        fe->ops.ts_bus_ctrl(fe, 0);
        }

+       dvb_device_put(dvbdev);
        dvb_frontend_put(fe);

        return ret;