Re: [syzbot] [usb?] KASAN: slab-use-after-free Read in stub_rx_loop
From: Edward Adam Davis
Date: Thu Aug 27 2026 - 03:05:42 EST
From: Edward Aadm Davis <eadavis@xxxxxxxx>
#syz test: upstream 502d45774af0
diff --git a/fs/ntfs3/fsntfs.c b/fs/ntfs3/fsntfs.c
index 97c04ab2763a..cea5d86a5591 100644
--- a/fs/ntfs3/fsntfs.c
+++ b/fs/ntfs3/fsntfs.c
@@ -1701,6 +1701,7 @@ struct ntfs_inode *ntfs_new_inode(struct ntfs_sb_info *sbi, CLST rno,
ni = ntfs_i(inode);
+ ni->base = ni;
err = mi_format_new(&ni->mi, sbi, rno, flag, false);
if (err)
goto out;
@@ -1711,8 +1712,6 @@ struct ntfs_inode *ntfs_new_inode(struct ntfs_sb_info *sbi, CLST rno,
goto out;
}
- ni->base = ni;
-
out:
if (err) {
make_bad_inode(inode);