[syzbot] [input?] KASAN: slab-use-after-free Read in atkbd_set_repeat_rate
From: Jeffin Philip
Date: Fri Aug 28 2026 - 10:04:17 EST
#syz test: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 818bebeb63dd
diff --git a/drivers/input/keyboard/atkbd.c b/drivers/input/keyboard/atkbd.c
index 5736f4bc5a50..bfad2e2ac937 100644
--- a/drivers/input/keyboard/atkbd.c
+++ b/drivers/input/keyboard/atkbd.c
@@ -961,7 +961,9 @@ static void atkbd_disconnect(struct serio *serio)
{
struct atkbd *atkbd = atkbd_from_serio(serio);
+ scoped_guard(mutex_intr, &atkbd->mutex) {
atkbd_disable(atkbd);
+ }
input_unregister_device(atkbd->dev);