[syzbot] Monthly media report (Sep 2025)

[syzbot] Monthly media report (Sep 2025)

[syzbot]

Hello media maintainers/developers,

This is a 31-day syzbot report for the media subsystem.
All related reports/information can be found at:
https://syzkaller.appspot.com/upstream/s/media

During the period, 1 new issues were detected and 0 were fixed.
In total, 22 issues are still open and 96 have already been fixed.

Some of the still happening issues:

Ref Crashes Repro Title
<1> 381     No    KASAN: slab-use-after-free Read in em28xx_release_resources
                  https://syzkaller.appspot.com/bug?extid=16062f26c6480975e5ed
<2> 349     Yes   KASAN: slab-use-after-free Read in dvb_device_open
                  https://syzkaller.appspot.com/bug?extid=1eb177ecc3943b883f0a
<3> 59      Yes   general protection fault in su3000_i2c_transfer
                  https://syzkaller.appspot.com/bug?extid=d99f3a288cc7d8ef60fb
<4> 48      No    KASAN: slab-use-after-free Write in as102_release (2)
                  https://syzkaller.appspot.com/bug?extid=47321e8fd5a4c84088db
<5> 34      No    KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (4)
                  https://syzkaller.appspot.com/bug?extid=dac8f5eaa46837e97b89
<6> 11      Yes   WARNING in media_create_pad_link (2)
                  https://syzkaller.appspot.com/bug?extid=701fc9cc0cb44e2b0fe9
<7> 9       Yes   KASAN: use-after-free Read in em28xx_close_extension (2)
                  https://syzkaller.appspot.com/bug?extid=a11c46f37ee083a73deb
<8> 5       No    WARNING in az6007_i2c_xfer
                  https://syzkaller.appspot.com/bug?extid=a43c95e5c2c9ed88e966
<9> 1       No    KASAN: slab-use-after-free Write in dvb_device_put
                  https://syzkaller.appspot.com/bug?extid=d445a71e1c011b592c16

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@googlegroups.com.

To disable reminders for individual bugs, reply with the following command:
#syz set <Ref> no-reminders

To change bug's subsystems, reply with:
#syz set <Ref> subsystems: new-subsystem

You may send multiple commands in a single email message.