Re: [syzbot] [input?] [usb?] KASAN: slab-use-after-free Read in steam_input_open

From: Edward Adam Davis
Date: Sun Feb 23 2025 - 04:28:17 EST


#syz test

diff --git a/drivers/input/input.c b/drivers/input/input.c
index c9e3ac64bcd0..75d273630ce4 100644
--- a/drivers/input/input.c
+++ b/drivers/input/input.c
@@ -579,7 +579,7 @@ int input_open_device(struct input_handle *handle)
struct input_dev *dev = handle->dev;
int error;

- scoped_cond_guard(mutex_intr, return -EINTR, &dev->mutex) {
+ scoped_cond_guard(mutex_intr, return -EINTR, &input_mutex) {
if (dev->going_away)
return -ENODEV;