syzbot


memory leak in xas_create

Status: upstream: reported C repro on 2022/07/09 07:13
Subsystems: mm
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+a785d07959bc94837d51@syzkaller.appspotmail.com
First crash: 1475d, last: 1d23h
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
21ab779b-9c1d-48bc-8a68-aaceaddcc1fc assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ memory leak in xas_create 2026/05/23 01:18 2026/05/23 01:18 2026/05/23 02:10 df8ac09c914d5408499c5695877a3e0e31969e6f

			
		
Discussions (6)
Title Replies (including bot) Last reply
[syzbot] Monthly mm report (Jun 2026) 0 (1) 2026/06/23 20:32
[syzbot] Monthly mm report (May 2026) 0 (1) 2026/05/23 12:32
[PATCH] mm: khugepaged: fix memory leak in collapse_file rollback path 8 (8) 2025/11/24 17:37
[syzbot] Monthly mm report (Nov 2023) 0 (1) 2023/11/15 03:00
[syzbot] Monthly mm report (Sep 2023) 0 (1) 2023/09/11 10:07
[syzbot] memory leak in xas_create 9 (11) 2022/11/06 23:26
Last patch testing requests (11)
Created Duration User Patch Repo Result
2026/04/09 12:49 21m retest repro upstream report log
2026/04/09 12:49 19m retest repro upstream OK log
2026/04/09 12:49 17m retest repro upstream report log
2026/04/09 12:49 21m retest repro upstream report log
2026/04/09 12:49 12m retest repro upstream report log
2026/03/23 22:20 19m retest repro upstream report log
2026/03/23 22:20 12m retest repro upstream report log
2026/03/23 22:20 12m retest repro upstream report log
2026/03/23 22:20 24m retest repro upstream report log
2026/03/23 22:20 20m retest repro upstream OK log
2022/07/10 16:42 5m code@siddh.me https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master error

Sample crash report:
2026/07/09 10:10:14 executed programs: 17
2026/07/09 10:10:20 executed programs: 19
2026/07/09 10:10:25 executed programs: 21
2026/07/09 10:10:31 executed programs: 23
BUG: memory leak
unreferenced object 0xffff8881121f6db0 (size 576):
  comm "syz.0.21", pid 5967, jiffies 4294946735
  hex dump (first 32 bytes):
    06 17 07 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    a8 07 6d 0a 81 88 ff ff c8 6d 1f 12 81 88 ff ff  ..m......m......
  backtrace (crc af12f832):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4625 [inline]
    slab_alloc_node mm/slub.c:4945 [inline]
    kmem_cache_alloc_lru_noprof+0x34d/0x430 mm/slub.c:4978
    xas_alloc+0xf1/0x110 lib/xarray.c:378
    xas_create+0x40d/0x8a0 lib/xarray.c:685
    xas_create_range+0xb5/0x1b0 lib/xarray.c:725
    collapse_file+0x20e/0x19d0 mm/khugepaged.c:2282
    collapse_scan_file mm/khugepaged.c:2773 [inline]
    collapse_single_pmd+0xc5b/0x1f60 mm/khugepaged.c:2808
    madvise_collapse+0x1a9/0x440 mm/khugepaged.c:3234
    madvise_vma_behavior+0x9b0/0xf80 mm/madvise.c:1363
    madvise_walk_vmas+0x14f/0x510 mm/madvise.c:1712
    madvise_do_behavior+0xc6/0x2c0 mm/madvise.c:1907
    do_madvise+0x1bc/0x220 mm/madvise.c:2005
    __do_sys_madvise mm/madvise.c:2014 [inline]
    __se_sys_madvise mm/madvise.c:2012 [inline]
    __x64_sys_madvise+0x2c/0x40 mm/madvise.c:2012
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xf8/0x610 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff8881121f6b68 (size 576):
  comm "syz.0.21", pid 5967, jiffies 4294946735
  hex dump (first 32 bytes):
    00 07 00 00 00 00 00 00 b0 6d 1f 12 81 88 ff ff  .........m......
    a8 07 6d 0a 81 88 ff ff 80 6b 1f 12 81 88 ff ff  ..m......k......
  backtrace (crc 3354be93):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4625 [inline]
    slab_alloc_node mm/slub.c:4945 [inline]
    kmem_cache_alloc_lru_noprof+0x34d/0x430 mm/slub.c:4978
    xas_alloc+0xf1/0x110 lib/xarray.c:378
    xas_create+0x40d/0x8a0 lib/xarray.c:685
    xas_create_range+0xb5/0x1b0 lib/xarray.c:725
    collapse_file+0x20e/0x19d0 mm/khugepaged.c:2282
    collapse_scan_file mm/khugepaged.c:2773 [inline]
    collapse_single_pmd+0xc5b/0x1f60 mm/khugepaged.c:2808
    madvise_collapse+0x1a9/0x440 mm/khugepaged.c:3234
    madvise_vma_behavior+0x9b0/0xf80 mm/madvise.c:1363
    madvise_walk_vmas+0x14f/0x510 mm/madvise.c:1712
    madvise_do_behavior+0xc6/0x2c0 mm/madvise.c:1907
    do_madvise+0x1bc/0x220 mm/madvise.c:2005
    __do_sys_madvise mm/madvise.c:2014 [inline]
    __se_sys_madvise mm/madvise.c:2012 [inline]
    __x64_sys_madvise+0x2c/0x40 mm/madvise.c:2012
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xf8/0x610 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff8881121f8248 (size 576):
  comm "syz.0.21", pid 5967, jiffies 4294946735
  hex dump (first 32 bytes):
    00 06 00 00 00 00 00 00 b0 6d 1f 12 81 88 ff ff  .........m......
    a8 07 6d 0a 81 88 ff ff 60 82 1f 12 81 88 ff ff  ..m.....`.......
  backtrace (crc 7795feec):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4625 [inline]
    slab_alloc_node mm/slub.c:4945 [inline]
    kmem_cache_alloc_lru_noprof+0x34d/0x430 mm/slub.c:4978
    xas_alloc+0xf1/0x110 lib/xarray.c:378
    xas_create+0x40d/0x8a0 lib/xarray.c:685
    xas_create_range+0xb5/0x1b0 lib/xarray.c:725
    collapse_file+0x20e/0x19d0 mm/khugepaged.c:2282
    collapse_scan_file mm/khugepaged.c:2773 [inline]
    collapse_single_pmd+0xc5b/0x1f60 mm/khugepaged.c:2808
    madvise_collapse+0x1a9/0x440 mm/khugepaged.c:3234
    madvise_vma_behavior+0x9b0/0xf80 mm/madvise.c:1363
    madvise_walk_vmas+0x14f/0x510 mm/madvise.c:1712
    madvise_do_behavior+0xc6/0x2c0 mm/madvise.c:1907
    do_madvise+0x1bc/0x220 mm/madvise.c:2005
    __do_sys_madvise mm/madvise.c:2014 [inline]
    __se_sys_madvise mm/madvise.c:2012 [inline]
    __x64_sys_madvise+0x2c/0x40 mm/madvise.c:2012
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xf8/0x610 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff8881121f8000 (size 576):
  comm "syz.0.21", pid 5967, jiffies 4294946735
  hex dump (first 32 bytes):
    00 05 00 00 00 00 00 00 b0 6d 1f 12 81 88 ff ff  .........m......
    a8 07 6d 0a 81 88 ff ff 18 80 1f 12 81 88 ff ff  ..m.............
  backtrace (crc d3c95b44):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4625 [inline]
    slab_alloc_node mm/slub.c:4945 [inline]
    kmem_cache_alloc_lru_noprof+0x34d/0x430 mm/slub.c:4978
    xas_alloc+0xf1/0x110 lib/xarray.c:378
    xas_create+0x40d/0x8a0 lib/xarray.c:685
    xas_create_range+0xb5/0x1b0 lib/xarray.c:725
    collapse_file+0x20e/0x19d0 mm/khugepaged.c:2282
    collapse_scan_file mm/khugepaged.c:2773 [inline]
    collapse_single_pmd+0xc5b/0x1f60 mm/khugepaged.c:2808
    madvise_collapse+0x1a9/0x440 mm/khugepaged.c:3234
    madvise_vma_behavior+0x9b0/0xf80 mm/madvise.c:1363
    madvise_walk_vmas+0x14f/0x510 mm/madvise.c:1712
    madvise_do_behavior+0xc6/0x2c0 mm/madvise.c:1907
    do_madvise+0x1bc/0x220 mm/madvise.c:2005
    __do_sys_madvise mm/madvise.c:2014 [inline]
    __se_sys_madvise mm/madvise.c:2012 [inline]
    __x64_sys_madvise+0x2c/0x40 mm/madvise.c:2012
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xf8/0x610 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88810e37e490 (size 576):
  comm "syz.0.21", pid 5967, jiffies 4294946735
  hex dump (first 32 bytes):
    00 04 00 00 00 00 00 00 b0 6d 1f 12 81 88 ff ff  .........m......
    a8 07 6d 0a 81 88 ff ff a8 e4 37 0e 81 88 ff ff  ..m.......7.....
  backtrace (crc c1802f8b):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4625 [inline]
    slab_alloc_node mm/slub.c:4945 [inline]
    kmem_cache_alloc_lru_noprof+0x34d/0x430 mm/slub.c:4978
    xas_alloc+0xf1/0x110 lib/xarray.c:378
    xas_create+0x40d/0x8a0 lib/xarray.c:685
    xas_create_range+0xb5/0x1b0 lib/xarray.c:725
    collapse_file+0x20e/0x19d0 mm/khugepaged.c:2282
    collapse_scan_file mm/khugepaged.c:2773 [inline]
    collapse_single_pmd+0xc5b/0x1f60 mm/khugepaged.c:2808
    madvise_collapse+0x1a9/0x440 mm/khugepaged.c:3234
    madvise_vma_behavior+0x9b0/0xf80 mm/madvise.c:1363
    madvise_walk_vmas+0x14f/0x510 mm/madvise.c:1712
    madvise_do_behavior+0xc6/0x2c0 mm/madvise.c:1907
    do_madvise+0x1bc/0x220 mm/madvise.c:2005
    __do_sys_madvise mm/madvise.c:2014 [inline]
    __se_sys_madvise mm/madvise.c:2012 [inline]
    __x64_sys_madvise+0x2c/0x40 mm/madvise.c:2012
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xf8/0x610 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF

Crashes (56):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/09 10:10 upstream 0e35b9b6ec0f b9f1ceaa .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/06/27 10:19 upstream 51cb1aa1250c fb92f11c .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/06/21 16:05 upstream 390d73adf896 43bfcdb0 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/06/12 11:26 upstream 2b414a95b8f7 e93da63e .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/06/08 07:40 upstream c68691dc1dca cc095639 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/05/30 17:26 upstream f5e5d3509bff 6b4a8443 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/05/23 08:18 upstream 45255ea1ca09 c69befb3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/05/23 08:06 upstream 45255ea1ca09 c69befb3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/05/23 07:15 upstream 45255ea1ca09 c69befb3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/05/02 21:30 upstream f1a5e78a55eb a0d91488 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/04/22 05:18 upstream 4ee64205ffaa 0b6ab7ec .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/04/11 17:00 upstream e774d5f1bc27 38c8e246 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/04/11 16:45 upstream e774d5f1bc27 38c8e246 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/03/26 11:08 upstream d2a43e7f89da c6143aac .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/03/09 21:38 upstream 1f318b96cc84 176bead5 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/03/03 23:03 upstream af4e9ef3d784 4180d919 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/02/21 15:30 upstream a95f71ad3e2e 6e7b5511 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-upstream-gce-leak memory leak in xas_create
2026/02/04 11:24 upstream de0674d9bc69 42b01fab .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/01/16 20:50 upstream 983d014aafb1 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/01/16 18:45 upstream 983d014aafb1 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/01/12 13:03 upstream 7143203341dc d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/01/10 03:50 upstream 372800cb95a3 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/01/05 14:30 upstream 3609fa95fb0f d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2025/12/26 07:17 upstream ccd1cdca5cd4 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2025/12/23 12:50 upstream b927546677c8 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2025/12/23 12:30 upstream b927546677c8 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2025/12/13 18:15 upstream 9551a26f17d9 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2025/12/01 16:26 upstream 7d0a66e4bb90 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2025/11/22 08:35 upstream 2eba5e05d9bc c31c1b0b .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2025/11/21 01:38 upstream 23cb64fb7625 280ea308 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2025/11/08 23:02 upstream e811c33b1f13 4e1406b4 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2025/11/04 06:16 upstream 8bb886cb8f3a 686bf657 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/11/06 23:26 upstream 2f5065a0bc9d 6d752409 .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/07/17 19:37 upstream fce2dfa773ce 7f27c57a .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/07/13 05:14 upstream f4fb100039e9 d78ea535 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/07/12 15:29 upstream 44696aa3a489 d78ea535 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-upstream-gce-leak memory leak in xas_create
2026/07/05 12:39 upstream 7404ce516372 fcece630 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/05/27 02:47 upstream d60ec36cab33 2b01f00e .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/05/11 19:29 upstream 5d6919055dec e6eb7c0b .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2026/01/28 19:34 upstream 1f97d9dcf536 004c195c .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/07/27 00:33 upstream 5f0bc0b042fc 41fe1bae .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/07/26 09:30 upstream 18b44bc5a672 6756545c .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/05/05 12:04 upstream 3c4aa4434377 518a39a6 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/03/01 23:32 upstream c0927a7a5391 f8902b57 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/02/25 02:42 upstream d2980d8d8265 ee50e71c .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/11/13 13:55 upstream fef7fd48922d 3ead01ad .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/11/05 14:22 upstream 64c3dd0b98f5 6d752409 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/11/01 15:16 upstream 5aaef24b5c6d a1d8560a .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/10/28 20:15 upstream 23758867219c ea12ae9b .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/10/22 00:36 upstream e35184f32151 4bfd3c27 .config console log report syz [disk image] [vmlinux] ci-upstream-gce-leak memory leak in xas_create
2023/11/08 06:03 upstream 13d88ac54ddd 83211397 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/08/28 12:43 upstream 10d4879f9ef0 07177916 .config console log report syz ci-upstream-gce-leak memory leak in xas_create
2022/07/05 07:03 upstream c1084b6c5620 bff65f44 .config console log report syz ci-upstream-gce-leak memory leak in xas_create
2025/12/27 21:22 upstream c53f467229a7 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2025/12/23 22:50 upstream b927546677c8 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-gce-leak memory leak in xas_create
2023/10/19 09:53 upstream dd72f9c7e512 342b9c55 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
* Struck through repros no longer work on HEAD.