BUG: memory leak
unreferenced object 0xffff88810c975918 (size 576):
  comm "syz-executor.0", pid 5510, jiffies 4294944768 (age 13.050s)
  hex dump (first 32 bytes):
    06 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    78 0b a4 0f 81 88 ff ff 30 59 97 0c 81 88 ff ff  x.......0Y......
  backtrace:
    [<ffffffff8163189e>] kmemleak_alloc_recursive include/linux/kmemleak.h:42 [inline]
    [<ffffffff8163189e>] slab_post_alloc_hook mm/slab.h:766 [inline]
    [<ffffffff8163189e>] slab_alloc_node mm/slub.c:3478 [inline]
    [<ffffffff8163189e>] slab_alloc mm/slub.c:3486 [inline]
    [<ffffffff8163189e>] __kmem_cache_alloc_lru mm/slub.c:3493 [inline]
    [<ffffffff8163189e>] kmem_cache_alloc_lru+0x2ee/0x520 mm/slub.c:3509
    [<ffffffff84b6181f>] xas_alloc+0xef/0x110 lib/xarray.c:375
    [<ffffffff84b63916>] xas_create+0x486/0x6f0 lib/xarray.c:677
    [<ffffffff84b63c3a>] xas_create_range+0xba/0x1b0 lib/xarray.c:717
    [<ffffffff81657cb4>] collapse_file+0x2d4/0x2550 mm/khugepaged.c:1822
    [<ffffffff8165a3a2>] hpage_collapse_scan_file+0x472/0x9b0 mm/khugepaged.c:2305
    [<ffffffff8165cb10>] madvise_collapse+0x1e0/0x5e0 mm/khugepaged.c:2747
    [<ffffffff815ed49e>] madvise_vma_behavior+0x15e/0xfb0 mm/madvise.c:1075
    [<ffffffff815ea55e>] madvise_walk_vmas+0x12e/0x1e0 mm/madvise.c:1249
    [<ffffffff815ee6bc>] do_madvise+0x27c/0x350 mm/madvise.c:1429
    [<ffffffff815eeb7d>] __do_sys_madvise mm/madvise.c:1442 [inline]
    [<ffffffff815eeb7d>] __se_sys_madvise mm/madvise.c:1440 [inline]
    [<ffffffff815eeb7d>] __x64_sys_madvise+0x2d/0x40 mm/madvise.c:1440
    [<ffffffff84b6bd8f>] do_syscall_x64 arch/x86/entry/common.c:51 [inline]
    [<ffffffff84b6bd8f>] do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:82
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0x6b

BUG: memory leak
unreferenced object 0xffff88810c975da8 (size 576):
  comm "syz-executor.0", pid 5510, jiffies 4294944768 (age 13.050s)
  hex dump (first 32 bytes):
    00 07 00 00 00 00 00 00 18 59 97 0c 81 88 ff ff  .........Y......
    78 0b a4 0f 81 88 ff ff c0 5d 97 0c 81 88 ff ff  x........]......
  backtrace:
    [<ffffffff8163189e>] kmemleak_alloc_recursive include/linux/kmemleak.h:42 [inline]
    [<ffffffff8163189e>] slab_post_alloc_hook mm/slab.h:766 [inline]
    [<ffffffff8163189e>] slab_alloc_node mm/slub.c:3478 [inline]
    [<ffffffff8163189e>] slab_alloc mm/slub.c:3486 [inline]
    [<ffffffff8163189e>] __kmem_cache_alloc_lru mm/slub.c:3493 [inline]
    [<ffffffff8163189e>] kmem_cache_alloc_lru+0x2ee/0x520 mm/slub.c:3509
    [<ffffffff84b6181f>] xas_alloc+0xef/0x110 lib/xarray.c:375
    [<ffffffff84b63916>] xas_create+0x486/0x6f0 lib/xarray.c:677
    [<ffffffff84b63c3a>] xas_create_range+0xba/0x1b0 lib/xarray.c:717
    [<ffffffff81657cb4>] collapse_file+0x2d4/0x2550 mm/khugepaged.c:1822
    [<ffffffff8165a3a2>] hpage_collapse_scan_file+0x472/0x9b0 mm/khugepaged.c:2305
    [<ffffffff8165cb10>] madvise_collapse+0x1e0/0x5e0 mm/khugepaged.c:2747
    [<ffffffff815ed49e>] madvise_vma_behavior+0x15e/0xfb0 mm/madvise.c:1075
    [<ffffffff815ea55e>] madvise_walk_vmas+0x12e/0x1e0 mm/madvise.c:1249
    [<ffffffff815ee6bc>] do_madvise+0x27c/0x350 mm/madvise.c:1429
    [<ffffffff815eeb7d>] __do_sys_madvise mm/madvise.c:1442 [inline]
    [<ffffffff815eeb7d>] __se_sys_madvise mm/madvise.c:1440 [inline]
    [<ffffffff815eeb7d>] __x64_sys_madvise+0x2d/0x40 mm/madvise.c:1440
    [<ffffffff84b6bd8f>] do_syscall_x64 arch/x86/entry/common.c:51 [inline]
    [<ffffffff84b6bd8f>] do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:82
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0x6b

BUG: memory leak
unreferenced object 0xffff88810c97a000 (size 576):
  comm "syz-executor.0", pid 5510, jiffies 4294944768 (age 13.050s)
  hex dump (first 32 bytes):
    00 06 00 00 00 00 00 00 18 59 97 0c 81 88 ff ff  .........Y......
    78 0b a4 0f 81 88 ff ff 18 a0 97 0c 81 88 ff ff  x...............
  backtrace:
    [<ffffffff8163189e>] kmemleak_alloc_recursive include/linux/kmemleak.h:42 [inline]
    [<ffffffff8163189e>] slab_post_alloc_hook mm/slab.h:766 [inline]
    [<ffffffff8163189e>] slab_alloc_node mm/slub.c:3478 [inline]
    [<ffffffff8163189e>] slab_alloc mm/slub.c:3486 [inline]
    [<ffffffff8163189e>] __kmem_cache_alloc_lru mm/slub.c:3493 [inline]
    [<ffffffff8163189e>] kmem_cache_alloc_lru+0x2ee/0x520 mm/slub.c:3509
    [<ffffffff84b6181f>] xas_alloc+0xef/0x110 lib/xarray.c:375
    [<ffffffff84b63916>] xas_create+0x486/0x6f0 lib/xarray.c:677
    [<ffffffff84b63c3a>] xas_create_range+0xba/0x1b0 lib/xarray.c:717
    [<ffffffff81657cb4>] collapse_file+0x2d4/0x2550 mm/khugepaged.c:1822
    [<ffffffff8165a3a2>] hpage_collapse_scan_file+0x472/0x9b0 mm/khugepaged.c:2305
    [<ffffffff8165cb10>] madvise_collapse+0x1e0/0x5e0 mm/khugepaged.c:2747
    [<ffffffff815ed49e>] madvise_vma_behavior+0x15e/0xfb0 mm/madvise.c:1075
    [<ffffffff815ea55e>] madvise_walk_vmas+0x12e/0x1e0 mm/madvise.c:1249
    [<ffffffff815ee6bc>] do_madvise+0x27c/0x350 mm/madvise.c:1429
    [<ffffffff815eeb7d>] __do_sys_madvise mm/madvise.c:1442 [inline]
    [<ffffffff815eeb7d>] __se_sys_madvise mm/madvise.c:1440 [inline]
    [<ffffffff815eeb7d>] __x64_sys_madvise+0x2d/0x40 mm/madvise.c:1440
    [<ffffffff84b6bd8f>] do_syscall_x64 arch/x86/entry/common.c:51 [inline]
    [<ffffffff84b6bd8f>] do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:82
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0x6b

BUG: memory leak
unreferenced object 0xffff88810c97a248 (size 576):
  comm "syz-executor.0", pid 5510, jiffies 4294944768 (age 13.050s)
  hex dump (first 32 bytes):
    00 05 00 00 00 00 00 00 18 59 97 0c 81 88 ff ff  .........Y......
    78 0b a4 0f 81 88 ff ff 60 a2 97 0c 81 88 ff ff  x.......`.......
  backtrace:
    [<ffffffff8163189e>] kmemleak_alloc_recursive include/linux/kmemleak.h:42 [inline]
    [<ffffffff8163189e>] slab_post_alloc_hook mm/slab.h:766 [inline]
    [<ffffffff8163189e>] slab_alloc_node mm/slub.c:3478 [inline]
    [<ffffffff8163189e>] slab_alloc mm/slub.c:3486 [inline]
    [<ffffffff8163189e>] __kmem_cache_alloc_lru mm/slub.c:3493 [inline]
    [<ffffffff8163189e>] kmem_cache_alloc_lru+0x2ee/0x520 mm/slub.c:3509
    [<ffffffff84b6181f>] xas_alloc+0xef/0x110 lib/xarray.c:375
    [<ffffffff84b63916>] xas_create+0x486/0x6f0 lib/xarray.c:677
    [<ffffffff84b63c3a>] xas_create_range+0xba/0x1b0 lib/xarray.c:717
    [<ffffffff81657cb4>] collapse_file+0x2d4/0x2550 mm/khugepaged.c:1822
    [<ffffffff8165a3a2>] hpage_collapse_scan_file+0x472/0x9b0 mm/khugepaged.c:2305
    [<ffffffff8165cb10>] madvise_collapse+0x1e0/0x5e0 mm/khugepaged.c:2747
    [<ffffffff815ed49e>] madvise_vma_behavior+0x15e/0xfb0 mm/madvise.c:1075
    [<ffffffff815ea55e>] madvise_walk_vmas+0x12e/0x1e0 mm/madvise.c:1249
    [<ffffffff815ee6bc>] do_madvise+0x27c/0x350 mm/madvise.c:1429
    [<ffffffff815eeb7d>] __do_sys_madvise mm/madvise.c:1442 [inline]
    [<ffffffff815eeb7d>] __se_sys_madvise mm/madvise.c:1440 [inline]
    [<ffffffff815eeb7d>] __x64_sys_madvise+0x2d/0x40 mm/madvise.c:1440
    [<ffffffff84b6bd8f>] do_syscall_x64 arch/x86/entry/common.c:51 [inline]
    [<ffffffff84b6bd8f>] do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:82
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0x6b