From nobody Fri Apr 3 11:10:27 2026 Received: from mail-oi1-f200.google.com (mail-oi1-f200.google.com [209.85.167.200]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id AB62F2DEA89 for ; Thu, 19 Feb 2026 18:43:19 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.167.200 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1771526600; cv=none; b=jZ3TBe8DqiLgO14EnsG7pAxkgGOLQDK4sZWLUdF92xMhL3yPMs3BYs8h9o7lFvsXmuR/wIgOA0Uq1lICU4HIRKvhTFPI0uqr5FxLiXq5+6+ajPFuT0My6RejoAja/EGRHW1aUdcxQTHVG9Rws+LI4A/k1fVR4ErCbUecXi6uksM= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1771526600; c=relaxed/simple; bh=ufpLIf+7UMn3DBu172s+r/eIfKYNoZ4IvWSfcvKwg4w=; h=MIME-Version:Date:In-Reply-To:Message-ID:Subject:From:To: Content-Type; b=PGw1jNf4i6HNov8tNwl7cFpLErzJYvY6z8nlX7uR9Xq8R6erDcdRvuZJcSJk8CB1uodhU3sH8pKQCpe61R9icxMGY3OCHCc/oZk2yowjaHU2cCKx09U3dpbQ/pWVvDjUTmKlnK6LbzKqGokt8mJq/aU3glKCz3r81ZRgJhFm6kA= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.client-ip=209.85.167.200 Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com Received: by mail-oi1-f200.google.com with SMTP id 5614622812f47-45f07dad7a8so3959810b6e.0 for ; Thu, 19 Feb 2026 10:43:19 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771526598; x=1772131398; h=to:from:subject:message-id:in-reply-to:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=n4sr6YnPQFY+GBDmsKh204q7AgyfEbIA7Qj40QkROIA=; b=RiMbjWJAAmj07+hfhNKDS6uss79uCpxiZQZ5VKtultC189ixdI2UgO+IBqhjK7WCDT +6putTsbI/yyRkQCmYylcoIMpHSSae6LP5ZJjdVDxB9pJV9kmgVgWAILay/db/pqMesh Bw15UEOk/w7c93XTFOhUiAJsxxJCN1n48csKS+rOqw2/jSs1deuJVTfe2CIJNBrg9ln7 eePsijZV8WCPFn5Kl/VqkfpxFkCK+MPyX74eYQ1GNQVmzeCyFRwh+zZmukQtM5F61MqS p2uCdtlKJVXe9Wf/5Or12XVnMUfr1QBnawejBpXBonplwjCZ7ztxHnVXc0pKH9a/wYFK 4wug== X-Gm-Message-State: AOJu0YwVLpW+tZk5hhFKicob1QP8n8aX8PuN5lCGhiSsb34Yls2zEKt+ uGOOz+0YiktcDUapgoWMY7gNbXfWRno8TwEMhSuslW5j3YlU3GpP6wrExIK+9f4BU3XTklV0T8G d7v+IIbmedugUsutFnHcYq39tGpRNm4OWfBKlXkHte6kWq6RVIRnPDqLOoMc= Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Received: by 2002:a05:6808:2386:b0:45a:55e6:f5d6 with SMTP id 5614622812f47-463b3e67493mr10523877b6e.12.1771526598631; Thu, 19 Feb 2026 10:43:18 -0800 (PST) Date: Thu, 19 Feb 2026 10:43:18 -0800 In-Reply-To: <69906bdc.a70a0220.3c8f9c.0095.GAE@google.com> X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <699759c6.a70a0220.2c38d7.0135.GAE@google.com> Subject: Forwarded: KASAN: slab-use-after-free Read in dvb_frontend_release (3) From: syzbot To: linux-kernel@vger.kernel.org Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" For archival purposes, forwarding an incoming command email to linux-kernel@vger.kernel.org. *** Subject: KASAN: slab-use-after-free Read in dvb_frontend_release (3) Author: ttt978615@gmail.com #syz test upstream c22e26bd0906e9c8325462993f01adb16b8ea2c0 --- a/drivers/media/dvb-core/dvb_frontend.c +++ b/drivers/media/dvb-core/dvb_frontend.c @@ -2911,6 +2911,7 @@ static int dvb_frontend_release(struct inode *inode, struct file *file) mb(); } + dvb_device_get(dvbdev); ret =3D dvb_generic_release(inode, file); if (dvbdev->users =3D=3D -1) { @@ -2931,6 +2932,7 @@ static int dvb_frontend_release(struct inode *inode, struct file *file) fe->ops.ts_bus_ctrl(fe, 0); } + dvb_device_put(dvbdev); dvb_frontend_put(fe); return ret;