Re: [syzbot] [btrfs?] [ext4?] [ntfs3?] memory leak in __pcs_replace_full_main

From: syzbot

Date: Thu Nov 05 2026 - 11:29:43 EST


Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:
memory leak in __netlink_create

BUG: memory leak
unreferenced object 0xffff8881126c5800 (size 2048):
comm "udevd", pid 4994, jiffies 4294948333
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
10 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00 ...@............
backtrace (crc a071d5b):
kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
slab_post_alloc_hook mm/slub.c:4735 [inline]
slab_alloc_node mm/slub.c:5035 [inline]
__do_kmalloc_node mm/slub.c:5532 [inline]
__kmalloc_noprof+0x3ce/0x510 mm/slub.c:5558
_kmalloc_noprof include/linux/slab.h:995 [inline]
sk_prot_alloc+0xf9/0x1b0 net/core/sock.c:2281
sk_alloc+0x36/0x3e0 net/core/sock.c:2337
__netlink_create+0x3b/0xb0 net/netlink/af_netlink.c:624
netlink_create+0x1c5/0x2f0 net/netlink/af_netlink.c:682
__sock_create+0x1a9/0x2d0 net/socket.c:1679
sock_create net/socket.c:1737 [inline]
__sys_socket_create net/socket.c:1774 [inline]
__sys_socket+0xb7/0x1a0 net/socket.c:1821
__do_sys_socket net/socket.c:1835 [inline]
__se_sys_socket net/socket.c:1833 [inline]
__x64_sys_socket+0x1b/0x30 net/socket.c:1833
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0xe9/0x530 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff888126e74380 (size 32):
comm "udevd", pid 4994, jiffies 4294948333
hex dump (first 32 bytes):
f8 ae 0a 00 81 88 ff ff 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace (crc f6dd81f5):
kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
slab_post_alloc_hook mm/slub.c:4735 [inline]
slab_alloc_node mm/slub.c:5035 [inline]
__do_kmalloc_node mm/slub.c:5532 [inline]
__kmalloc_noprof+0x3ce/0x510 mm/slub.c:5558
_kmalloc_noprof include/linux/slab.h:995 [inline]
_kzalloc_noprof include/linux/slab.h:1312 [inline]
lsm_blob_alloc+0x4d/0x80 security/security.c:219
lsm_sock_alloc security/security.c:4556 [inline]
security_sk_alloc+0x2d/0x290 security/security.c:4572
sk_prot_alloc+0x114/0x1b0 net/core/sock.c:2284
sk_alloc+0x36/0x3e0 net/core/sock.c:2337
__netlink_create+0x3b/0xb0 net/netlink/af_netlink.c:624
netlink_create+0x1c5/0x2f0 net/netlink/af_netlink.c:682
__sock_create+0x1a9/0x2d0 net/socket.c:1679
sock_create net/socket.c:1737 [inline]
__sys_socket_create net/socket.c:1774 [inline]
__sys_socket+0xb7/0x1a0 net/socket.c:1821
__do_sys_socket net/socket.c:1835 [inline]
__se_sys_socket net/socket.c:1833 [inline]
__x64_sys_socket+0x1b/0x30 net/socket.c:1833
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0xe9/0x530 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff888127f13800 (size 2048):
comm "udevd", pid 4994, jiffies 4294948336
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
10 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00 ...@............
backtrace (crc b5cbc83d):
kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
slab_post_alloc_hook mm/slub.c:4735 [inline]
slab_alloc_node mm/slub.c:5035 [inline]
__do_kmalloc_node mm/slub.c:5532 [inline]
__kmalloc_noprof+0x3ce/0x510 mm/slub.c:5558
_kmalloc_noprof include/linux/slab.h:995 [inline]
sk_prot_alloc+0xf9/0x1b0 net/core/sock.c:2281
sk_alloc+0x36/0x3e0 net/core/sock.c:2337
__netlink_create+0x3b/0xb0 net/netlink/af_netlink.c:624
netlink_create+0x1c5/0x2f0 net/netlink/af_netlink.c:682
__sock_create+0x1a9/0x2d0 net/socket.c:1679
sock_create net/socket.c:1737 [inline]
__sys_socket_create net/socket.c:1774 [inline]
__sys_socket+0xb7/0x1a0 net/socket.c:1821
__do_sys_socket net/socket.c:1835 [inline]
__se_sys_socket net/socket.c:1833 [inline]
__x64_sys_socket+0x1b/0x30 net/socket.c:1833
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0xe9/0x530 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff888126fbf9e0 (size 32):
comm "udevd", pid 4994, jiffies 4294948336
hex dump (first 32 bytes):
f8 ae 0a 00 81 88 ff ff 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace (crc f6dd81f5):
kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
slab_post_alloc_hook mm/slub.c:4735 [inline]
slab_alloc_node mm/slub.c:5035 [inline]
__do_kmalloc_node mm/slub.c:5532 [inline]
__kmalloc_noprof+0x3ce/0x510 mm/slub.c:5558
_kmalloc_noprof include/linux/slab.h:995 [inline]
_kzalloc_noprof include/linux/slab.h:1312 [inline]
lsm_blob_alloc+0x4d/0x80 security/security.c:219
lsm_sock_alloc security/security.c:4556 [inline]
security_sk_alloc+0x2d/0x290 security/security.c:4572
sk_prot_alloc+0x114/0x1b0 net/core/sock.c:2284
sk_alloc+0x36/0x3e0 net/core/sock.c:2337
__netlink_create+0x3b/0xb0 net/netlink/af_netlink.c:624
netlink_create+0x1c5/0x2f0 net/netlink/af_netlink.c:682
__sock_create+0x1a9/0x2d0 net/socket.c:1679
sock_create net/socket.c:1737 [inline]
__sys_socket_create net/socket.c:1774 [inline]
__sys_socket+0xb7/0x1a0 net/socket.c:1821
__do_sys_socket net/socket.c:1835 [inline]
__se_sys_socket net/socket.c:1833 [inline]
__x64_sys_socket+0x1b/0x30 net/socket.c:1833
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0xe9/0x530 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff888126d86000 (size 2048):
comm "udevd", pid 4994, jiffies 4294948337
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
10 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00 ...@............
backtrace (crc 2985600b):
kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
slab_post_alloc_hook mm/slub.c:4735 [inline]
slab_alloc_node mm/slub.c:5035 [inline]
__do_kmalloc_node mm/slub.c:5532 [inline]
__kmalloc_noprof+0x3ce/0x510 mm/slub.c:5558
_kmalloc_noprof include/linux/slab.h:995 [inline]
sk_prot_alloc+0xf9/0x1b0 net/core/sock.c:2281
sk_alloc+0x36/0x3e0 net/core/sock.c:2337
__netlink_create+0x3b/0xb0 net/netlink/af_netlink.c:624
netlink_create+0x1c5/0x2f0 net/netlink/af_netlink.c:682
__sock_create+0x1a9/0x2d0 net/socket.c:1679
sock_create net/socket.c:1737 [inline]
__sys_socket_create net/socket.c:1774 [inline]
__sys_socket+0xb7/0x1a0 net/socket.c:1821
__do_sys_socket net/socket.c:1835 [inline]
__se_sys_socket net/socket.c:1833 [inline]
__x64_sys_socket+0x1b/0x30 net/socket.c:1833
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0xe9/0x530 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff888129029720 (size 32):
comm "udevd", pid 4994, jiffies 4294948337
hex dump (first 32 bytes):
f8 ae 0a 00 81 88 ff ff 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace (crc f6dd81f5):
kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
slab_post_alloc_hook mm/slub.c:4735 [inline]
slab_alloc_node mm/slub.c:5035 [inline]
__do_kmalloc_node mm/slub.c:5532 [inline]
__kmalloc_noprof+0x3ce/0x510 mm/slub.c:5558
_kmalloc_noprof include/linux/slab.h:995 [inline]
_kzalloc_noprof include/linux/slab.h:1312 [inline]
lsm_blob_alloc+0x4d/0x80 security/security.c:219
lsm_sock_alloc security/security.c:4556 [inline]
security_sk_alloc+0x2d/0x290 security/security.c:4572
sk_prot_alloc+0x114/0x1b0 net/core/sock.c:2284
sk_alloc+0x36/0x3e0 net/core/sock.c:2337
__netlink_create+0x3b/0xb0 net/netlink/af_netlink.c:624
netlink_create+0x1c5/0x2f0 net/netlink/af_netlink.c:682
__sock_create+0x1a9/0x2d0 net/socket.c:1679
sock_create net/socket.c:1737 [inline]
__sys_socket_create net/socket.c:1774 [inline]
__sys_socket+0xb7/0x1a0 net/socket.c:1821
__do_sys_socket net/socket.c:1835 [inline]
__se_sys_socket net/socket.c:1833 [inline]
__x64_sys_socket+0x1b/0x30 net/socket.c:1833
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0xe9/0x530 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f

connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF


Tested on:

commit: 05441d69 Merge tag 'cocci-7.4-rc1' of git://git.kernel..
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=12dde455580000
kernel config: https://syzkaller.appspot.com/x/.config?x=4361b1bb937ae1c4
dashboard link: https://syzkaller.appspot.com/bug?extid=4d078516add5f4f12cea
compiler: gcc (Debian 14.2.0-19) 14.2.0, GNU ld (GNU Binutils for Debian) 2.44
patch: https://syzkaller.appspot.com/x/patch.diff?x=13bf59dd580000