syzbot


memory leak in run_add_entry (2)

Status: fixed on 2026/05/21 07:50
Subsystems: ntfs3
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+7adcddaeeb860e5d3f2f@syzkaller.appspotmail.com
Fix commit: 87ac077d6ea8 ntfs3: fix memory leak in indx_create_allocate()
First crash: 67d, last: 52d
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
8b3daa14-d2f5-48ce-b102-82ebd6a64b97 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ✅ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ memory leak in run_add_entry (2) 2026/05/17 22:33 2026/05/17 22:33 2026/05/17 23:17 de5aae85e5f28e2fa1c7deefcc24fe286abe5140
Discussions (4)
Title Replies (including bot) Last reply
[PATCH AUTOSEL 7.0-5.15] ntfs3: fix memory leak in indx_create_allocate() 1 (1) 2026/04/28 10:41
[PATCH] ntfs3: fix memory leak in indx_create_allocate() 4 (4) 2026/04/02 18:25
[syzbot] [ntfs3?] memory leak in run_add_entry (2) 1 (5) 2026/03/21 06:02
[PATCH] ntfs3: fix memory leak in indx_create_allocate() 1 (1) 2026/03/21 05:01
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream memory leak in run_add_entry ntfs3 3 C 8 973d 987d 0/29 auto-obsoleted due to no activity on 2024/01/04 09:50
Last patch testing requests (4)
Created Duration User Patch Repo Result
2026/04/04 00:58 12m retest repro upstream report log
2026/03/21 04:52 52m eadavis@qq.com patch upstream OK log
2026/03/21 03:58 1h10m kartikey406@gmail.com patch upstream OK log
2026/03/21 02:09 56m kartikey406@gmail.com patch upstream report log

Sample crash report:
BUG: memory leak
unreferenced object 0xffff88811e304200 (size 64):
  comm "syz.0.17", pid 6098, jiffies 4294950427
  hex dump (first 32 bytes):
    00 00 00 00 01 00 00 00 1e 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace (crc 692543f4):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4543 [inline]
    slab_alloc_node mm/slub.c:4866 [inline]
    __do_kmalloc_node mm/slub.c:5259 [inline]
    __kvmalloc_node_noprof+0x53d/0x770 mm/slub.c:6752
    run_add_entry+0x108/0x730 fs/ntfs3/run.c:390
    attr_allocate_clusters+0x15a/0x450 fs/ntfs3/attrib.c:199
    indx_create_allocate fs/ntfs3/index.c:1449 [inline]
    indx_insert_into_root+0x575/0xb20 fs/ntfs3/index.c:1705
    indx_insert_entry+0x182/0x290 fs/ntfs3/index.c:1993
    ni_add_name+0x1ab/0x2e0 fs/ntfs3/frecord.c:2764
    ntfs_link_inode+0x95/0xc0 fs/ntfs3/inode.c:1794
    ntfs_link+0xb4/0x180 fs/ntfs3/namei.c:146
    vfs_link+0x270/0x5a0 fs/namei.c:5746
    filename_linkat+0x262/0x3c0 fs/namei.c:5814
    __do_sys_link fs/namei.c:5847 [inline]
    __se_sys_link fs/namei.c:5843 [inline]
    __x64_sys_link+0x4b/0x70 fs/namei.c:5843
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff888105b7a380 (size 64):
  comm "syz.0.18", pid 6114, jiffies 4294950436
  hex dump (first 32 bytes):
    00 00 00 00 01 00 00 00 1e 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace (crc 692543f4):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4543 [inline]
    slab_alloc_node mm/slub.c:4866 [inline]
    __do_kmalloc_node mm/slub.c:5259 [inline]
    __kvmalloc_node_noprof+0x53d/0x770 mm/slub.c:6752
    run_add_entry+0x108/0x730 fs/ntfs3/run.c:390
    attr_allocate_clusters+0x15a/0x450 fs/ntfs3/attrib.c:199
    indx_create_allocate fs/ntfs3/index.c:1449 [inline]
    indx_insert_into_root+0x575/0xb20 fs/ntfs3/index.c:1705
    indx_insert_entry+0x182/0x290 fs/ntfs3/index.c:1993
    ni_add_name+0x1ab/0x2e0 fs/ntfs3/frecord.c:2764
    ntfs_link_inode+0x95/0xc0 fs/ntfs3/inode.c:1794
    ntfs_link+0xb4/0x180 fs/ntfs3/namei.c:146
    vfs_link+0x270/0x5a0 fs/namei.c:5746
    filename_linkat+0x262/0x3c0 fs/namei.c:5814
    __do_sys_link fs/namei.c:5847 [inline]
    __se_sys_link fs/namei.c:5843 [inline]
    __x64_sys_link+0x4b/0x70 fs/namei.c:5843
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88810ea19a40 (size 64):
  comm "syz.0.19", pid 6125, jiffies 4294950445
  hex dump (first 32 bytes):
    00 00 00 00 01 00 00 00 1e 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace (crc 692543f4):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4543 [inline]
    slab_alloc_node mm/slub.c:4866 [inline]
    __do_kmalloc_node mm/slub.c:5259 [inline]
    __kvmalloc_node_noprof+0x53d/0x770 mm/slub.c:6752
    run_add_entry+0x108/0x730 fs/ntfs3/run.c:390
    attr_allocate_clusters+0x15a/0x450 fs/ntfs3/attrib.c:199
    indx_create_allocate fs/ntfs3/index.c:1449 [inline]
    indx_insert_into_root+0x575/0xb20 fs/ntfs3/index.c:1705
    indx_insert_entry+0x182/0x290 fs/ntfs3/index.c:1993
    ni_add_name+0x1ab/0x2e0 fs/ntfs3/frecord.c:2764
    ntfs_link_inode+0x95/0xc0 fs/ntfs3/inode.c:1794
    ntfs_link+0xb4/0x180 fs/ntfs3/namei.c:146
    vfs_link+0x270/0x5a0 fs/namei.c:5746
    filename_linkat+0x262/0x3c0 fs/namei.c:5814
    __do_sys_link fs/namei.c:5847 [inline]
    __se_sys_link fs/namei.c:5843 [inline]
    __x64_sys_link+0x4b/0x70 fs/namei.c:5843
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/20 17:25 upstream 0e4f8f1a3d08 2f245add .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-gce-leak memory leak in run_add_entry
* Struck through repros no longer work on HEAD.