syzbot

 sign-in | mailing list | source | docs | 🏰
🐞 Open [1279]
≡ Subsystems
🐞 Fixed [7230]
🐞 Invalid [19125]
⬇ Missing Backports [222]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
✨ AI
💬 Send us feedback

memory leak in uss720_probe

Status: upstream: reported C repro on 2026/07/16 07:50
Subsystems: usb
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+56962eb32ba0136cd330@syzkaller.appspotmail.com
Fix commit: USB: misc: uss720: Fix leak in get_1284_register
Patched on: [ci2-upstream-usb], missing on: [ci-qemu-gce-upstream-auto ci-qemu-native-arm64-kvm ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci-upstream-rust-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce]
First crash: 2d00h, last: 2d00h
▶ ▼ ✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
80e3c8fa-5a86-44cb-a795-c84069d00a6c assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ memory leak in uss720_probe 2026/07/15 21:15 2026/07/15 21:16 2026/07/15 21:40 10d97020b199b1f285ec4bc6c5f7092b5af41892 

			
				
	

	
	



			

		

	

	
	

		

			▶
			▼
			Discussions (2)
		

		

			
			
			



	
	

		Title
		Replies (including bot)
		Last reply
	

	
	
	
		

			[PATCH] USB: misc: uss720: Fix leak in get_1284_register
			1 (1)
			2026/07/16 22:24
		

	
		

			[syzbot] [usb?] memory leak in uss720_probe
			1 (4)
			2026/07/16 13:06
		

	
	




			
			
		

	

	
	

		

			▶
			▼
			Last patch testing requests (2)
		

		

			
			

	

		
		
		

			
			Created
			Duration
			User
			Patch
			Repo
			
			Result
		

		
		
		
			

				
				2026/07/16 12:09
				
					2h28m
				
				
					
						kartikey406@gmail.com
					
				
				patch
				upstream
				
				
					
						report
					
					
					
						log
					
					
					
				
			

		
			

				
				2026/07/16 11:38
				
					2h46m
				
				
					
						michail.tatas@gmail.com
					
				
				patch
				upstream
				
				
					
						OK
						
					
					
					
						log
					
					
					
				
			

		
		
	



			
			
			
		

	

	

	
	
Sample crash report:

	
BUG: memory leak
unreferenced object 0xffff88812c0e34c0 (size 64):
  comm "kworker/0:0", pid 9, jiffies 4294942439
  hex dump (first 32 bytes):
    00 b8 b6 05 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace (crc 7291ab94):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4625 [inline]
    slab_alloc_node mm/slub.c:4945 [inline]
    __kmalloc_cache_noprof+0x356/0x440 mm/slub.c:5511
    _kmalloc_noprof include/linux/slab.h:969 [inline]
    _kzalloc_noprof include/linux/slab.h:1290 [inline]
    uss720_probe+0xf6/0x330 drivers/usb/misc/uss720.c:702
    usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396
    call_driver_probe drivers/base/dd.c:628 [inline]
    really_probe+0x12f/0x3a0 drivers/base/dd.c:706
    __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868
    driver_probe_device+0x28/0xf0 drivers/base/dd.c:898
    __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026
    bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500
    __device_attach+0xf9/0x290 drivers/base/dd.c:1098
    device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153
    bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620
    device_add+0x99f/0xc80 drivers/base/core.c:3772
    usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268
    usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250
    usb_probe_device+0x78/0x1f0 drivers/usb/core/driver.c:291
    call_driver_probe drivers/base/dd.c:628 [inline]
    really_probe+0x12f/0x3a0 drivers/base/dd.c:706

BUG: memory leak
unreferenced object 0xffff88812d350b40 (size 96):
  comm "kworker/0:0", pid 9, jiffies 4294942439
  hex dump (first 32 bytes):
    c0 34 0e 2c 81 88 ff ff 01 00 00 00 00 00 00 00  .4.,............
    e0 34 0e 2c 81 88 ff ff e0 34 0e 2c 81 88 ff ff  .4.,.....4.,....
  backtrace (crc 519c4231):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4625 [inline]
    slab_alloc_node mm/slub.c:4945 [inline]
    __kmalloc_cache_noprof+0x356/0x440 mm/slub.c:5511
    _kmalloc_noprof include/linux/slab.h:969 [inline]
    _kzalloc_noprof include/linux/slab.h:1290 [inline]
    submit_async_request.constprop.0+0x6b/0x440 drivers/usb/misc/uss720.c:137
    get_1284_register+0x4a/0x1a0 drivers/usb/misc/uss720.c:205
    uss720_probe+0x205/0x330 drivers/usb/misc/uss720.c:733
    usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396
    call_driver_probe drivers/base/dd.c:628 [inline]
    really_probe+0x12f/0x3a0 drivers/base/dd.c:706
    __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868
    driver_probe_device+0x28/0xf0 drivers/base/dd.c:898
    __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026
    bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500
    __device_attach+0xf9/0x290 drivers/base/dd.c:1098
    device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153
    bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620
    device_add+0x99f/0xc80 drivers/base/core.c:3772
    usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268
    usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250

BUG: memory leak
unreferenced object 0xffff88812d277180 (size 192):
  comm "kworker/0:0", pid 9, jiffies 4294942439
  hex dump (first 32 bytes):
    01 00 00 00 98 ff ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 98 71 27 2d 81 88 ff ff  .........q'-....
  backtrace (crc 26b7be33):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4625 [inline]
    slab_alloc_node mm/slub.c:4945 [inline]
    __do_kmalloc_node mm/slub.c:5361 [inline]
    __kmalloc_noprof+0x3bf/0x550 mm/slub.c:5387
    _kmalloc_noprof include/linux/slab.h:973 [inline]
    usb_alloc_urb+0x66/0xa0 drivers/usb/core/urb.c:75
    submit_async_request.constprop.0+0x11c/0x440 drivers/usb/misc/uss720.c:145
    get_1284_register+0x4a/0x1a0 drivers/usb/misc/uss720.c:205
    uss720_probe+0x205/0x330 drivers/usb/misc/uss720.c:733
    usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396
    call_driver_probe drivers/base/dd.c:628 [inline]
    really_probe+0x12f/0x3a0 drivers/base/dd.c:706
    __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868
    driver_probe_device+0x28/0xf0 drivers/base/dd.c:898
    __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026
    bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500
    __device_attach+0xf9/0x290 drivers/base/dd.c:1098
    device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153
    bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620
    device_add+0x99f/0xc80 drivers/base/core.c:3772
    usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268

BUG: memory leak
unreferenced object 0xffff888111cfec80 (size 8):
  comm "kworker/0:0", pid 9, jiffies 4294942439
  hex dump (first 8 bytes):
    c0 03 00 00 00 00 07 00                          ........
  backtrace (crc 40fcb6d):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4625 [inline]
    slab_alloc_node mm/slub.c:4945 [inline]
    __kmalloc_cache_noprof+0x356/0x440 mm/slub.c:5511
    _kmalloc_noprof include/linux/slab.h:969 [inline]
    submit_async_request.constprop.0+0x143/0x440 drivers/usb/misc/uss720.c:150
    get_1284_register+0x4a/0x1a0 drivers/usb/misc/uss720.c:205
    uss720_probe+0x205/0x330 drivers/usb/misc/uss720.c:733
    usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396
    call_driver_probe drivers/base/dd.c:628 [inline]
    really_probe+0x12f/0x3a0 drivers/base/dd.c:706
    __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868
    driver_probe_device+0x28/0xf0 drivers/base/dd.c:898
    __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026
    bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500
    __device_attach+0xf9/0x290 drivers/base/dd.c:1098
    device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153
    bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620
    device_add+0x99f/0xc80 drivers/base/core.c:3772
    usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268
    usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250

connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF



	

	



	Crashes (1):
		
		

			Time
			Kernel
			Commit
			Syzkaller
			Config
			Log
			Report
			Syz repro
			C repro
			VM info
			Assets (help?)
			Manager
			Title
		

		
		
		
		

			2026/07/15 21:15
			upstream
			58717b2a1365
			209f0369
			.config
			console log
			report
			syz / log
			C
			
			
				[disk image]
			
				[vmlinux]
			
				[kernel image]
			
				[mounted in repro (corrupt fs)]
			
			ci-upstream-gce-leak
			memory leak in uss720_probe
		

		
		


* Struck through repros no longer work on HEAD.