memory leak in dvb_register_device

Status: upstream: reported C repro on 2026/02/15 20:54
Subsystems: media usb
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+d37184d9d8cc34602616@syzkaller.appspotmail.com
First crash: 228d, last: 3d12h
▶ ▼ ✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
d9761288 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ memory leak in dvb_register_device 2026/05/24 18:57 2026/05/24 18:57 2026/05/24 19:40 c69befb3
▶ ▼ Discussions (4)
Title Replies (including bot) Last reply
[PATCH RESEND] media: dvb-core: fix dvb device instance leak 1 (1) 2026/07/01 07:03
[PATCH] media: dvb-core: publish device minors after registration succeeds 1 (1) 2026/06/28 10:00
[PATCH] media: dvb-core: fix dvb device instance leak 1 (1) 2026/02/16 15:41
[syzbot] [media?] [usb?] memory leak in dvb_register_device 0 (2) 2026/02/16 13:39
▶ ▼ Last patch testing requests (8)
Created Duration User Patch Repo Result
2026/09/28 08:00 17m retest repro upstream report job log log
2026/09/20 15:37 0m retest repro upstream error job log
2026/07/20 05:21 21m retest repro upstream report log
2026/07/04 15:32 32m retest repro upstream report log
2026/05/10 14:54 27m retest repro upstream report log
2026/05/10 14:48 24m retest repro upstream report log
2026/03/01 14:33 13m retest repro upstream report log
2026/02/16 13:39 1h27m dmantipov@yandex.ru patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 0f2acd3148e0ef42bdacbd477f90e8533f96b2ac OK log

Sample crash report:
BUG: memory leak
unreferenced object 0xffff88810fa12840 (size 192):
  comm "kworker/0:4", pid 5873, jiffies 4294945928
  hex dump (first 32 bytes):
    00 01 00 00 00 00 ad de 22 01 00 00 00 00 ad de  ........".......
    01 00 00 00 00 00 00 00 00 60 82 05 81 88 ff ff  .........`......
  backtrace (crc f3d3f5d0):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4696 [inline]
    slab_alloc_node mm/slub.c:4996 [inline]
    __kmalloc_cache_noprof+0x38f/0x420 mm/slub.c:5559
    _kmalloc_noprof include/linux/slab.h:991 [inline]
    _kzalloc_noprof include/linux/slab.h:1312 [inline]
    dvb_register_device+0x117/0xac0 drivers/media/dvb-core/dvbdev.c:472
    dvb_dmxdev_init+0x116/0x1d0 drivers/media/dvb-core/dmxdev.c:1434
    ttusb_probe.cold+0x191/0xa14 drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c:1686
    usb_probe_interface+0x1a9/0x3e0 drivers/usb/core/driver.c:399
    call_driver_probe drivers/base/dd.c:628 [inline]
    really_probe+0x12f/0x3a0 drivers/base/dd.c:706
    __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868
    driver_probe_device+0x28/0xf0 drivers/base/dd.c:898
    __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026
    bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500
    __device_attach+0xf9/0x290 drivers/base/dd.c:1098
    device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153
    bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620
    device_add+0x99f/0xc80 drivers/base/core.c:3776
    usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268
    usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250

connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/28 18:11 upstream 72d3fcf802c4 a3c7249d .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in dvb_register_device
2026/06/20 08:31 upstream c98d767b3457 43bfcdb0 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in dvb_register_device
2026/02/15 14:12 upstream ca4ee40bf13d 1e62d198 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in dvb_register_device
* Struck through repros no longer work on HEAD.