[syzbot] [input?] KASAN: slab-use-after-free Read in atkbd_set_repeat_rate

From: Jeffin Philip

Date: Fri Aug 28 2026 - 10:04:17 EST


#syz test: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 818bebeb63dd

diff --git a/drivers/input/keyboard/atkbd.c b/drivers/input/keyboard/atkbd.c
index 5736f4bc5a50..bfad2e2ac937 100644
--- a/drivers/input/keyboard/atkbd.c
+++ b/drivers/input/keyboard/atkbd.c
@@ -961,7 +961,9 @@ static void atkbd_disconnect(struct serio *serio)
{
struct atkbd *atkbd = atkbd_from_serio(serio);

+ scoped_guard(mutex_intr, &atkbd->mutex) {
atkbd_disable(atkbd);
+ }

input_unregister_device(atkbd->dev);