syzbot


memory leak in xas_create

Status: upstream: reported C repro on 2022/07/09 07:13
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+a785d07959bc94837d51@syzkaller.appspotmail.com
First crash: 1247d, last: 2d02h
Discussions (4)
Title Replies (including bot) Last reply
[PATCH] mm: khugepaged: fix memory leak in collapse_file rollback path 8 (8) 2025/11/24 17:37
[syzbot] Monthly mm report (Nov 2023) 0 (1) 2023/11/15 03:00
[syzbot] Monthly mm report (Sep 2023) 0 (1) 2023/09/11 10:07
[syzbot] memory leak in xas_create 9 (11) 2022/11/06 23:26
Last patch testing requests (11)
Created Duration User Patch Repo Result
2025/11/04 03:58 11m retest repro upstream report log
2025/11/03 12:13 13m retest repro upstream report log
2025/11/02 17:12 12m retest repro upstream report log
2025/11/02 16:01 12m retest repro upstream report log
2025/09/12 20:28 23m retest repro upstream report log
2025/09/12 20:28 12m retest repro upstream report log
2025/09/12 19:53 13m retest repro upstream report log
2025/09/12 19:53 12m retest repro upstream report log
2025/09/12 19:31 15m retest repro upstream report log
2025/09/03 18:16 17m retest repro upstream report log
2022/07/10 16:42 5m code@siddh.me https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master error

Sample crash report:
2025/12/01 16:25:42 executed programs: 5
BUG: memory leak
unreferenced object 0xffff88811a89c000 (size 576):
  comm "syz.0.17", pid 6103, jiffies 4294942787
  hex dump (first 32 bytes):
    06 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    70 66 d2 29 81 88 ff ff 18 c0 89 1a 81 88 ff ff  pf.)............
  backtrace (crc 42c6476e):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4983 [inline]
    slab_alloc_node mm/slub.c:5288 [inline]
    kmem_cache_alloc_lru_noprof+0x3a4/0x5d0 mm/slub.c:5307
    xas_alloc+0xf6/0x120 lib/xarray.c:378
    xas_expand lib/xarray.c:590 [inline]
    xas_create+0x103/0x820 lib/xarray.c:661
    xas_store+0x7b/0xad0 lib/xarray.c:795
    shmem_add_to_page_cache+0x374/0x460 mm/shmem.c:904
    shmem_alloc_and_add_folio+0x28f/0x6e0 mm/shmem.c:1938
    shmem_get_folio_gfp+0x371/0x9f0 mm/shmem.c:2535
    shmem_fault+0x93/0x4c0 mm/shmem.c:2736
    __do_fault+0x51/0x1a0 mm/memory.c:5281
    do_read_fault mm/memory.c:5716 [inline]
    do_fault mm/memory.c:5850 [inline]
    do_pte_missing mm/memory.c:4362 [inline]
    handle_pte_fault mm/memory.c:6195 [inline]
    __handle_mm_fault+0x1ee0/0x3890 mm/memory.c:6336
    handle_mm_fault+0x31c/0x630 mm/memory.c:6505
    faultin_page mm/gup.c:1126 [inline]
    __get_user_pages+0x330/0x1f40 mm/gup.c:1428
    populate_vma_page_range+0xfa/0x160 mm/gup.c:1860
    __mm_populate+0x122/0x270 mm/gup.c:1963
    mm_populate include/linux/mm.h:3478 [inline]
    vm_mmap_pgoff+0x226/0x2d0 mm/util.c:586
    ksys_mmap_pgoff+0x7d/0x2d0 mm/mmap.c:604

BUG: memory leak
unreferenced object 0xffff888100719b60 (size 576):
  comm "syz.0.18", pid 6111, jiffies 4294942792
  hex dump (first 32 bytes):
    06 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    a0 78 d2 29 81 88 ff ff 78 9b 71 00 81 88 ff ff  .x.)....x.q.....
  backtrace (crc 7abaf67f):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4983 [inline]
    slab_alloc_node mm/slub.c:5288 [inline]
    kmem_cache_alloc_lru_noprof+0x3a4/0x5d0 mm/slub.c:5307
    xas_alloc+0xf6/0x120 lib/xarray.c:378
    xas_expand lib/xarray.c:590 [inline]
    xas_create+0x103/0x820 lib/xarray.c:661
    xas_store+0x7b/0xad0 lib/xarray.c:795
    shmem_add_to_page_cache+0x374/0x460 mm/shmem.c:904
    shmem_alloc_and_add_folio+0x28f/0x6e0 mm/shmem.c:1938
    shmem_get_folio_gfp+0x371/0x9f0 mm/shmem.c:2535
    shmem_fault+0x93/0x4c0 mm/shmem.c:2736
    __do_fault+0x51/0x1a0 mm/memory.c:5281
    do_read_fault mm/memory.c:5716 [inline]
    do_fault mm/memory.c:5850 [inline]
    do_pte_missing mm/memory.c:4362 [inline]
    handle_pte_fault mm/memory.c:6195 [inline]
    __handle_mm_fault+0x1ee0/0x3890 mm/memory.c:6336
    handle_mm_fault+0x31c/0x630 mm/memory.c:6505
    faultin_page mm/gup.c:1126 [inline]
    __get_user_pages+0x330/0x1f40 mm/gup.c:1428
    populate_vma_page_range+0xfa/0x160 mm/gup.c:1860
    __mm_populate+0x122/0x270 mm/gup.c:1963
    mm_populate include/linux/mm.h:3478 [inline]
    vm_mmap_pgoff+0x226/0x2d0 mm/util.c:586
    ksys_mmap_pgoff+0x7d/0x2d0 mm/mmap.c:604

BUG: memory leak
unreferenced object 0xffff888100713240 (size 576):
  comm "syz.0.19", pid 6121, jiffies 4294942802
  hex dump (first 32 bytes):
    00 07 00 00 00 00 00 00 00 c0 89 1a 81 88 ff ff  ................
    70 66 d2 29 81 88 ff ff 58 32 71 00 81 88 ff ff  pf.)....X2q.....
  backtrace (crc d904a8a0):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4983 [inline]
    slab_alloc_node mm/slub.c:5288 [inline]
    kmem_cache_alloc_lru_noprof+0x3a4/0x5d0 mm/slub.c:5307
    xas_alloc+0xf6/0x120 lib/xarray.c:378
    xas_create+0x48a/0x820 lib/xarray.c:685
    xas_create_range+0xb6/0x1b0 lib/xarray.c:725
    collapse_file+0x1e0/0x1ae0 mm/khugepaged.c:1874
    hpage_collapse_scan_file+0x617/0xb00 mm/khugepaged.c:2370
    madvise_collapse+0x2a7/0x690 mm/khugepaged.c:2795
    madvise_vma_behavior+0x886/0x1470 mm/madvise.c:1358
    madvise_walk_vmas+0x152/0x4d0 mm/madvise.c:1669
    madvise_do_behavior+0xc4/0x2e0 mm/madvise.c:1885
    do_madvise+0x118/0x1c0 mm/madvise.c:1978
    __do_sys_madvise mm/madvise.c:1987 [inline]
    __se_sys_madvise mm/madvise.c:1985 [inline]
    __x64_sys_madvise+0x2c/0x40 mm/madvise.c:1985
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff888100713488 (size 576):
  comm "syz.0.19", pid 6121, jiffies 4294942802
  hex dump (first 32 bytes):
    00 06 00 00 00 00 00 00 00 c0 89 1a 81 88 ff ff  ................
    70 66 d2 29 81 88 ff ff a0 34 71 00 81 88 ff ff  pf.).....4q.....
  backtrace (crc 84ee10d3):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4983 [inline]
    slab_alloc_node mm/slub.c:5288 [inline]
    kmem_cache_alloc_lru_noprof+0x3a4/0x5d0 mm/slub.c:5307
    xas_alloc+0xf6/0x120 lib/xarray.c:378
    xas_create+0x48a/0x820 lib/xarray.c:685
    xas_create_range+0xb6/0x1b0 lib/xarray.c:725
    collapse_file+0x1e0/0x1ae0 mm/khugepaged.c:1874
    hpage_collapse_scan_file+0x617/0xb00 mm/khugepaged.c:2370
    madvise_collapse+0x2a7/0x690 mm/khugepaged.c:2795
    madvise_vma_behavior+0x886/0x1470 mm/madvise.c:1358
    madvise_walk_vmas+0x152/0x4d0 mm/madvise.c:1669
    madvise_do_behavior+0xc4/0x2e0 mm/madvise.c:1885
    do_madvise+0x118/0x1c0 mm/madvise.c:1978
    __do_sys_madvise mm/madvise.c:1987 [inline]
    __se_sys_madvise mm/madvise.c:1985 [inline]
    __x64_sys_madvise+0x2c/0x40 mm/madvise.c:1985
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff8881007136d0 (size 576):
  comm "syz.0.19", pid 6121, jiffies 4294942802
  hex dump (first 32 bytes):
    00 05 00 00 00 00 00 00 00 c0 89 1a 81 88 ff ff  ................
    70 66 d2 29 81 88 ff ff e8 36 71 00 81 88 ff ff  pf.).....6q.....
  backtrace (crc 8c283509):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4983 [inline]
    slab_alloc_node mm/slub.c:5288 [inline]
    kmem_cache_alloc_lru_noprof+0x3a4/0x5d0 mm/slub.c:5307
    xas_alloc+0xf6/0x120 lib/xarray.c:378
    xas_create+0x48a/0x820 lib/xarray.c:685
    xas_create_range+0xb6/0x1b0 lib/xarray.c:725
    collapse_file+0x1e0/0x1ae0 mm/khugepaged.c:1874
    hpage_collapse_scan_file+0x617/0xb00 mm/khugepaged.c:2370
    madvise_collapse+0x2a7/0x690 mm/khugepaged.c:2795
    madvise_vma_behavior+0x886/0x1470 mm/madvise.c:1358
    madvise_walk_vmas+0x152/0x4d0 mm/madvise.c:1669
    madvise_do_behavior+0xc4/0x2e0 mm/madvise.c:1885
    do_madvise+0x118/0x1c0 mm/madvise.c:1978
    __do_sys_madvise mm/madvise.c:1987 [inline]
    __se_sys_madvise mm/madvise.c:1985 [inline]
    __x64_sys_madvise+0x2c/0x40 mm/madvise.c:1985
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF

Crashes (20):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/12/01 16:26 upstream 7d0a66e4bb90 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2025/11/22 08:35 upstream 2eba5e05d9bc c31c1b0b .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2025/11/21 01:38 upstream 23cb64fb7625 280ea308 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2025/11/08 23:02 upstream e811c33b1f13 4e1406b4 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2025/11/04 06:16 upstream 8bb886cb8f3a 686bf657 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/11/06 23:26 upstream 2f5065a0bc9d 6d752409 .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/07/27 00:33 upstream 5f0bc0b042fc 41fe1bae .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/07/26 09:30 upstream 18b44bc5a672 6756545c .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/05/05 12:04 upstream 3c4aa4434377 518a39a6 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/03/01 23:32 upstream c0927a7a5391 f8902b57 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/02/25 02:42 upstream d2980d8d8265 ee50e71c .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/11/13 13:55 upstream fef7fd48922d 3ead01ad .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/11/05 14:22 upstream 64c3dd0b98f5 6d752409 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/11/01 15:16 upstream 5aaef24b5c6d a1d8560a .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/10/28 20:15 upstream 23758867219c ea12ae9b .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/10/22 00:36 upstream e35184f32151 4bfd3c27 .config console log report syz [disk image] [vmlinux] ci-upstream-gce-leak memory leak in xas_create
2023/11/08 06:03 upstream 13d88ac54ddd 83211397 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/08/28 12:43 upstream 10d4879f9ef0 07177916 .config console log report syz ci-upstream-gce-leak memory leak in xas_create
2022/07/05 07:03 upstream c1084b6c5620 bff65f44 .config console log report syz ci-upstream-gce-leak memory leak in xas_create
2023/10/19 09:53 upstream dd72f9c7e512 342b9c55 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
* Struck through repros no longer work on HEAD.