memory leak in dvb_register_device

Status: upstream: reported C repro on 2026/02/15 20:54
Subsystems: media usb
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+d37184d9d8cc34602616@syzkaller.appspotmail.com
First crash: 183d, last: 28d
▶ ▼ ✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
d9761288 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ memory leak in dvb_register_device 2026/05/24 18:57 2026/05/24 18:57 2026/05/24 19:40 c69befb3
▶ ▼ Discussions (4)
Title Replies (including bot) Last reply
[PATCH RESEND] media: dvb-core: fix dvb device instance leak 1 (1) 2026/07/01 07:03
[PATCH] media: dvb-core: publish device minors after registration succeeds 1 (1) 2026/06/28 10:00
[PATCH] media: dvb-core: fix dvb device instance leak 1 (1) 2026/02/16 15:41
[syzbot] [media?] [usb?] memory leak in dvb_register_device 0 (2) 2026/02/16 13:39
▶ ▼ Last patch testing requests (6)
Created Duration User Patch Repo Result
2026/07/20 05:21 21m retest repro upstream report log
2026/07/04 15:32 32m retest repro upstream report log
2026/05/10 14:54 27m retest repro upstream report log
2026/05/10 14:48 24m retest repro upstream report log
2026/03/01 14:33 13m retest repro upstream report log
2026/02/16 13:39 1h27m dmantipov@yandex.ru patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 0f2acd3148e0ef42bdacbd477f90e8533f96b2ac OK log

Sample crash report:
BUG: memory leak
unreferenced object 0xffff88810fbdfcc0 (size 192):
  comm "kworker/1:2", pid 807, jiffies 4294944572
  hex dump (first 32 bytes):
    00 01 00 00 00 00 ad de 22 01 00 00 00 00 ad de  ........".......
    01 00 00 00 00 00 00 00 00 56 38 04 81 88 ff ff  .........V8.....
  backtrace (crc 8ae58604):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4615 [inline]
    slab_alloc_node mm/slub.c:4939 [inline]
    __kmalloc_cache_noprof+0x35b/0x470 mm/slub.c:5446
    _kmalloc_noprof include/linux/slab.h:969 [inline]
    _kzalloc_noprof include/linux/slab.h:1286 [inline]
    dvb_register_device+0x117/0xac0 drivers/media/dvb-core/dvbdev.c:472
    dvb_dmxdev_init+0x116/0x1d0 drivers/media/dvb-core/dmxdev.c:1427
    dvb_usb_adapter_dvb_init+0x25a/0x280 drivers/media/usb/dvb-usb/dvb-usb-dvb.c:192
    dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:86 [inline]
    dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:186 [inline]
    dvb_usb_device_init.cold+0x340/0x800 drivers/media/usb/dvb-usb/dvb-usb-init.c:310
    dtv5100_probe+0xcf/0xe0 drivers/media/usb/dvb-usb/dtv5100.c:162
    usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396
    call_driver_probe drivers/base/dd.c:628 [inline]
    really_probe+0x12f/0x3a0 drivers/base/dd.c:706
    __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868
    driver_probe_device+0x28/0xf0 drivers/base/dd.c:898
    __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026
    bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500
    __device_attach+0xf9/0x290 drivers/base/dd.c:1098
    device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153
    bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620
    device_add+0x99f/0xc80 drivers/base/core.c:3772

BUG: memory leak
unreferenced object 0xffff8881152860c0 (size 192):
  comm "kworker/1:0", pid 23, jiffies 4294944726
  hex dump (first 32 bytes):
    00 01 00 00 00 00 ad de 22 01 00 00 00 00 ad de  ........".......
    01 00 00 00 00 00 00 00 00 56 38 04 81 88 ff ff  .........V8.....
  backtrace (crc 55c94a48):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4615 [inline]
    slab_alloc_node mm/slub.c:4939 [inline]
    __kmalloc_cache_noprof+0x35b/0x470 mm/slub.c:5446
    _kmalloc_noprof include/linux/slab.h:969 [inline]
    _kzalloc_noprof include/linux/slab.h:1286 [inline]
    dvb_register_device+0x117/0xac0 drivers/media/dvb-core/dvbdev.c:472
    dvb_dmxdev_init+0x116/0x1d0 drivers/media/dvb-core/dmxdev.c:1427
    dvb_usb_adapter_dvb_init+0x25a/0x280 drivers/media/usb/dvb-usb/dvb-usb-dvb.c:192
    dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:86 [inline]
    dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:186 [inline]
    dvb_usb_device_init.cold+0x340/0x800 drivers/media/usb/dvb-usb/dvb-usb-init.c:310
    dtv5100_probe+0xcf/0xe0 drivers/media/usb/dvb-usb/dtv5100.c:162
    usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396
    call_driver_probe drivers/base/dd.c:628 [inline]
    really_probe+0x12f/0x3a0 drivers/base/dd.c:706
    __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868
    driver_probe_device+0x28/0xf0 drivers/base/dd.c:898
    __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026
    bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500
    __device_attach+0xf9/0x290 drivers/base/dd.c:1098
    device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153
    bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620
    device_add+0x99f/0xc80 drivers/base/core.c:3772

connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/20 08:31 upstream c98d767b3457 43bfcdb0 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in dvb_register_device
2026/02/15 14:12 upstream ca4ee40bf13d 1e62d198 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in dvb_register_device
* Struck through repros no longer work on HEAD.