memory leak in phram_setup

Status: upstream: reported C repro on 2026/10/17 20:55
Subsystems: mtd
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+c9d8bc9f8ccc03799e1f@syzkaller.appspotmail.com
First crash: 4d02h, last: 4d02h
▶ ▼ ✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
890c4474 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ memory leak in phram_setup 2026/10/13 20:57 2026/10/13 20:57 2026/10/13 22:05 7321cd29
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [mtd?] memory leak in phram_setup 0 (1) 2026/10/17 20:55

Sample crash report:
BUG: memory leak
unreferenced object 0xffff88810afde7f8 (size 8):
  comm "syz.0.17", pid 5903, jiffies 4294943995
  hex dump (first 8 bytes):
    70 30 00 00 00 00 00 00                          p0......
  backtrace (crc 43334c2):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4696 [inline]
    slab_alloc_node mm/slub.c:4996 [inline]
    __do_kmalloc_node mm/slub.c:5413 [inline]
    __kmalloc_node_track_caller_noprof+0x40d/0x560 mm/slub.c:5545
    __kmemdup_nul mm/util.c:64 [inline]
    kstrdup+0x3c/0x80 mm/util.c:84
    parse_name drivers/mtd/devices/phram.c:224 [inline]
    phram_setup+0x1c2/0x360 drivers/mtd/devices/phram.c:286
    phram_param_call+0xe4/0x110 drivers/mtd/devices/phram.c:349
    param_attr_store+0x99/0x130 kernel/params.c:591
    module_attr_store+0x3d/0x60 kernel/params.c:906
    sysfs_kf_write+0x94/0xb0 fs/sysfs/file.c:145
    kernfs_fop_write_iter+0x1f1/0x2d0 fs/kernfs/file.c:345
    new_sync_write fs/read_write.c:595 [inline]
    vfs_write+0x3ae/0x720 fs/read_write.c:687
    ksys_write+0xa5/0x170 fs/read_write.c:739
    do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
    do_syscall_64+0xe9/0x530 arch/x86/entry/syscall_64.c:84
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88810afdebe8 (size 8):
  comm "syz.0.18", pid 5905, jiffies 4294943995
  hex dump (first 8 bytes):
    70 30 00 00 00 00 00 00                          p0......
  backtrace (crc 43334c2):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4696 [inline]
    slab_alloc_node mm/slub.c:4996 [inline]
    __do_kmalloc_node mm/slub.c:5413 [inline]
    __kmalloc_node_track_caller_noprof+0x40d/0x560 mm/slub.c:5545
    __kmemdup_nul mm/util.c:64 [inline]
    kstrdup+0x3c/0x80 mm/util.c:84
    parse_name drivers/mtd/devices/phram.c:224 [inline]
    phram_setup+0x1c2/0x360 drivers/mtd/devices/phram.c:286
    phram_param_call+0xe4/0x110 drivers/mtd/devices/phram.c:349
    param_attr_store+0x99/0x130 kernel/params.c:591
    module_attr_store+0x3d/0x60 kernel/params.c:906
    sysfs_kf_write+0x94/0xb0 fs/sysfs/file.c:145
    kernfs_fop_write_iter+0x1f1/0x2d0 fs/kernfs/file.c:345
    new_sync_write fs/read_write.c:595 [inline]
    vfs_write+0x3ae/0x720 fs/read_write.c:687
    ksys_write+0xa5/0x170 fs/read_write.c:739
    do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
    do_syscall_64+0xe9/0x530 arch/x86/entry/syscall_64.c:84
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88810afde5b8 (size 8):
  comm "syz.0.19", pid 5908, jiffies 4294943996
  hex dump (first 8 bytes):
    70 30 00 00 00 00 00 00                          p0......
  backtrace (crc 43334c2):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4696 [inline]
    slab_alloc_node mm/slub.c:4996 [inline]
    __do_kmalloc_node mm/slub.c:5413 [inline]
    __kmalloc_node_track_caller_noprof+0x40d/0x560 mm/slub.c:5545
    __kmemdup_nul mm/util.c:64 [inline]
    kstrdup+0x3c/0x80 mm/util.c:84
    parse_name drivers/mtd/devices/phram.c:224 [inline]
    phram_setup+0x1c2/0x360 drivers/mtd/devices/phram.c:286
    phram_param_call+0xe4/0x110 drivers/mtd/devices/phram.c:349
    param_attr_store+0x99/0x130 kernel/params.c:591
    module_attr_store+0x3d/0x60 kernel/params.c:906
    sysfs_kf_write+0x94/0xb0 fs/sysfs/file.c:145
    kernfs_fop_write_iter+0x1f1/0x2d0 fs/kernfs/file.c:345
    new_sync_write fs/read_write.c:595 [inline]
    vfs_write+0x3ae/0x720 fs/read_write.c:687
    ksys_write+0xa5/0x170 fs/read_write.c:739
    do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
    do_syscall_64+0xe9/0x530 arch/x86/entry/syscall_64.c:84
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/13 20:45 upstream 24a19b953e2a 7321cd29 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in phram_setup
* Struck through repros no longer work on HEAD.