Re: [syzbot] [usb?] KASAN: slab-use-after-free Read in stub_rx_loop

From: Edward Adam Davis

Date: Thu Aug 27 2026 - 03:05:42 EST


From: Edward Aadm Davis <eadavis@xxxxxxxx>

#syz test: upstream 502d45774af0

diff --git a/fs/ntfs3/fsntfs.c b/fs/ntfs3/fsntfs.c
index 97c04ab2763a..cea5d86a5591 100644
--- a/fs/ntfs3/fsntfs.c
+++ b/fs/ntfs3/fsntfs.c
@@ -1701,6 +1701,7 @@ struct ntfs_inode *ntfs_new_inode(struct ntfs_sb_info *sbi, CLST rno,

ni = ntfs_i(inode);

+ ni->base = ni;
err = mi_format_new(&ni->mi, sbi, rno, flag, false);
if (err)
goto out;
@@ -1711,8 +1712,6 @@ struct ntfs_inode *ntfs_new_inode(struct ntfs_sb_info *sbi, CLST rno,
goto out;
}

- ni->base = ni;
-
out:
if (err) {
make_bad_inode(inode);