memory leak in radix_tree

ID	Workflow	Result	Correct	Bug	Created	Started	Finished	Revision	Error
b69493a7-25c9-40d7-a63d-07bb8a4db337	assessment-security		💥	memory leak in radix_tree_insert (2)	2026/05/15 05:18	2026/05/15 05:18	2026/05/15 05:19	6ccb967e465e832a7bfd7a116ad00d52a0923a5d	failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "32" "ARCH=x86_64" "CC=ccache clang" "LD=ld.lld" "O=/app/workdir/cache/build/3636987094221941d7... truncated to first 200 bytes; open job for full error

assessment-security

💥

2026/05/15 05:18

2026/05/15 05:19

6ccb967e465e832a7bfd7a116ad00d52a0923a5d

failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "32" "ARCH=x86_64" "CC=ccache clang" "LD=ld.lld" "O=/app/workdir/cache/build/3636987094221941d7...

truncated to first 200 bytes; open job for full error

Title	Replies (including bot)	Last reply
[PATCH net v1] net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak	3 (3)	2026/03/27 03:40
[PATCH v1] radix-tree: fix memory leak of intermediate nodes on insert failure	2 (2)	2026/02/25 14:13
[syzbot] [io-uring?] WARNING in __io_uring_free	5 (6)	2024/12/29 19:42
[PATCH] radix-tree: fix memory leak in radix_tree_insert	3 (3)	2023/12/13 03:25
[syzbot] [arm-msm?] [net?] memory leak in radix_tree_insert (2)	0 (17)	2023/12/11 05:15

Title

Replies (including bot)

Last reply

[PATCH net v1] net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak

3 (3)

2026/03/27 03:40

[PATCH v1] radix-tree: fix memory leak of intermediate nodes on insert failure

2 (2)

2026/02/25 14:13

[syzbot] [io-uring?] WARNING in __io_uring_free

5 (6)

2024/12/29 19:42

[PATCH] radix-tree: fix memory leak in radix_tree_insert

3 (3)

2023/12/13 03:25

[syzbot] [arm-msm?] [net?] memory leak in radix_tree_insert (2)

0 (17)

2023/12/11 05:15

Kernel	Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	memory leak in radix_tree_insert arm-msm net	3	C			1	1913d	1913d	20/29	fixed on 2021/11/10 00:50

Rank 🛈

upstream

memory leak in radix_tree_insert arm-msm net

1913d

20/29

fixed on 2021/11/10 00:50


Created	Duration	User	Patch	Repo	Result
2026/01/27 06:47	40m	retest repro		upstream	report log
2025/11/18 05:03	53m	retest repro		upstream	report log
2025/09/09 04:41	20m	retest repro		upstream	report log
2025/07/01 00:47	3h35m	retest repro		upstream	report log
2025/04/22 00:06	29m	retest repro		upstream	report log
2025/02/10 21:40	2h13m	retest repro		upstream	report log
2024/12/02 19:29	21m	retest repro		upstream	report log
2024/09/23 04:12	19m	retest repro		upstream	report log
2024/07/15 03:30	19m	retest repro		upstream	report log
2024/05/06 02:05	16m	retest repro		upstream	report log
2023/12/11 05:15	18m	lizhi.xu@windriver.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	OK log
2023/12/11 04:24	16m	lizhi.xu@windriver.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	report log
2023/12/10 06:58	37m	eadavis@qq.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	report log
2023/12/10 06:06	22m	eadavis@qq.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	report log
2023/12/10 05:14	24m	eadavis@qq.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	OK log
2023/12/10 04:30	16m	eadavis@qq.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	report log
2023/12/10 03:52	15m	eadavis@qq.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	report log
2023/12/10 01:04	14m	eadavis@qq.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	report log
2023/12/09 06:53	5m	eadavis@qq.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	error
2023/12/09 06:52	5m	eadavis@qq.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	error
2023/12/09 04:40	35m	eadavis@qq.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	OK log
2023/12/08 09:45	50m	lizhi.xu@windriver.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	report log
2023/12/08 07:44	10m	lizhi.xu@windriver.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	error
2023/12/08 06:59	4m	lizhi.xu@windriver.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	error
2023/12/08 05:56	9m	lizhi.xu@windriver.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	error
2023/12/08 04:13	7m	lizhi.xu@windriver.com	patch	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 33cc938e65a9	error

write to /proc/sys/kernel/hung_task_check_interval_secs failed: No such file or directory write to /proc/sys/kernel/softlockup_all_cpu_backtrace failed: No such file or directory BUG: memory leak unreferenced object 0xffff88810bbf56d8 (size 576): comm "syz-executor250", pid 5051, jiffies 4294951219 (age 12.920s) hex dump (first 32 bytes): 3c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 <............... f0 a9 2d 0c 81 88 ff ff f0 56 bf 0b 81 88 ff ff ..-......V...... backtrace: [<ffffffff81631398>] kmemleak_alloc_recursive include/linux/kmemleak.h:42 [inline] [<ffffffff81631398>] slab_post_alloc_hook mm/slab.h:766 [inline] [<ffffffff81631398>] slab_alloc_node mm/slub.c:3478 [inline] [<ffffffff81631398>] slab_alloc mm/slub.c:3486 [inline] [<ffffffff81631398>] __kmem_cache_alloc_lru mm/slub.c:3493 [inline] [<ffffffff81631398>] kmem_cache_alloc+0x298/0x430 mm/slub.c:3502 [<ffffffff84b5094c>] radix_tree_node_alloc.constprop.0+0x7c/0x1a0 lib/radix-tree.c:276 [<ffffffff84b524cf>] __radix_tree_create lib/radix-tree.c:624 [inline] [<ffffffff84b524cf>] radix_tree_insert+0x14f/0x360 lib/radix-tree.c:712 [<ffffffff84ae105d>] qrtr_tx_wait net/qrtr/af_qrtr.c:277 [inline] [<ffffffff84ae105d>] qrtr_node_enqueue+0x57d/0x630 net/qrtr/af_qrtr.c:348 [<ffffffff84ae26f6>] qrtr_bcast_enqueue+0x66/0xd0 net/qrtr/af_qrtr.c:891 [<ffffffff84ae32d2>] qrtr_sendmsg+0x232/0x450 net/qrtr/af_qrtr.c:992 [<ffffffff83ec3c32>] sock_sendmsg_nosec net/socket.c:730 [inline] [<ffffffff83ec3c32>] __sock_sendmsg+0x52/0xa0 net/socket.c:745 [<ffffffff83ec3d7b>] sock_write_iter+0xfb/0x180 net/socket.c:1158 [<ffffffff816961a7>] call_write_iter include/linux/fs.h:2020 [inline] [<ffffffff816961a7>] new_sync_write fs/read_write.c:491 [inline] [<ffffffff816961a7>] vfs_write+0x327/0x590 fs/read_write.c:584 [<ffffffff816966fb>] ksys_write+0x13b/0x170 fs/read_write.c:637 [<ffffffff84b6ddcf>] do_syscall_x64 arch/x86/entry/common.c:51 [inline] [<ffffffff84b6ddcf>] do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:82 [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0x6b BUG: memory leak unreferenced object 0xffff88810bbf5920 (size 576): comm "syz-executor250", pid 5051, jiffies 4294951219 (age 12.920s) hex dump (first 32 bytes): 36 0f 01 00 00 00 00 00 d8 56 bf 0b 81 88 ff ff 6........V...... f0 a9 2d 0c 81 88 ff ff 38 59 bf 0b 81 88 ff ff ..-.....8Y...... backtrace: [<ffffffff81631398>] kmemleak_alloc_recursive include/linux/kmemleak.h:42 [inline] [<ffffffff81631398>] slab_post_alloc_hook mm/slab.h:766 [inline] [<ffffffff81631398>] slab_alloc_node mm/slub.c:3478 [inline] [<ffffffff81631398>] slab_alloc mm/slub.c:3486 [inline] [<ffffffff81631398>] __kmem_cache_alloc_lru mm/slub.c:3493 [inline] [<ffffffff81631398>] kmem_cache_alloc+0x298/0x430 mm/slub.c:3502 [<ffffffff84b5094c>] radix_tree_node_alloc.constprop.0+0x7c/0x1a0 lib/radix-tree.c:276 [<ffffffff84b524cf>] __radix_tree_create lib/radix-tree.c:624 [inline] [<ffffffff84b524cf>] radix_tree_insert+0x14f/0x360 lib/radix-tree.c:712 [<ffffffff84ae105d>] qrtr_tx_wait net/qrtr/af_qrtr.c:277 [inline] [<ffffffff84ae105d>] qrtr_node_enqueue+0x57d/0x630 net/qrtr/af_qrtr.c:348 [<ffffffff84ae26f6>] qrtr_bcast_enqueue+0x66/0xd0 net/qrtr/af_qrtr.c:891 [<ffffffff84ae32d2>] qrtr_sendmsg+0x232/0x450 net/qrtr/af_qrtr.c:992 [<ffffffff83ec3c32>] sock_sendmsg_nosec net/socket.c:730 [inline] [<ffffffff83ec3c32>] __sock_sendmsg+0x52/0xa0 net/socket.c:745 [<ffffffff83ec3d7b>] sock_write_iter+0xfb/0x180 net/socket.c:1158 [<ffffffff816961a7>] call_write_iter include/linux/fs.h:2020 [inline] [<ffffffff816961a7>] new_sync_write fs/read_write.c:491 [inline] [<ffffffff816961a7>] vfs_write+0x327/0x590 fs/read_write.c:584 [<ffffffff816966fb>] ksys_write+0x13b/0x170 fs/read_write.c:637 [<ffffffff84b6ddcf>] do_syscall_x64 arch/x86/entry/common.c:51 [inline] [<ffffffff84b6ddcf>] do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:82 [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0x6b BUG: memory leak unreferenced object 0xffff88810c832000 (size 576): comm "syz-executor250", pid 5051, jiffies 4294951219 (age 12.920s) hex dump (first 32 bytes): 30 3f 01 00 00 00 00 00 20 59 bf 0b 81 88 ff ff 0?...... Y...... f0 a9 2d 0c 81 88 ff ff 18 20 83 0c 81 88 ff ff ..-...... ...... backtrace: [<ffffffff81631398>] kmemleak_alloc_recursive include/linux/kmemleak.h:42 [inline] [<ffffffff81631398>] slab_post_alloc_hook mm/slab.h:766 [inline] [<ffffffff81631398>] slab_alloc_node mm/slub.c:3478 [inline] [<ffffffff81631398>] slab_alloc mm/slub.c:3486 [inline] [<ffffffff81631398>] __kmem_cache_alloc_lru mm/slub.c:3493 [inline] [<ffffffff81631398>] kmem_cache_alloc+0x298/0x430 mm/slub.c:3502 [<ffffffff84b5094c>] radix_tree_node_alloc.constprop.0+0x7c/0x1a0 lib/radix-tree.c:276 [<ffffffff84b524cf>] __radix_tree_create lib/radix-tree.c:624 [inline] [<ffffffff84b524cf>] radix_tree_insert+0x14f/0x360 lib/radix-tree.c:712 [<ffffffff84ae105d>] qrtr_tx_wait net/qrtr/af_qrtr.c:277 [inline] [<ffffffff84ae105d>] qrtr_node_enqueue+0x57d/0x630 net/qrtr/af_qrtr.c:348 [<ffffffff84ae26f6>] qrtr_bcast_enqueue+0x66/0xd0 net/qrtr/af_qrtr.c:891 [<ffffffff84ae32d2>] qrtr_sendmsg+0x232/0x450 net/qrtr/af_qrtr.c:992 [<ffffffff83ec3c32>] sock_sendmsg_nosec net/socket.c:730 [inline] [<ffffffff83ec3c32>] __sock_sendmsg+0x52/0xa0 net/socket.c:745 [<ffffffff83ec3d7b>] sock_write_iter+0xfb/0x180 net/socket.c:1158 [<ffffffff816961a7>] call_write_iter include/linux/fs.h:2020 [inline] [<ffffffff816961a7>] new_sync_write fs/read_write.c:491 [inline] [<ffffffff816961a7>] vfs_write+0x327/0x590 fs/read_write.c:584 [<ffffffff816966fb>] ksys_write+0x13b/0x170 fs/read_write.c:637 [<ffffffff84b6ddcf>] do_syscall_x64 arch/x86/entry/common.c:51 [inline] [<ffffffff84b6ddcf>] do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:82 [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0x6b BUG: memory leak unreferenced object 0xffff88810c832248 (size 576): comm "syz-executor250", pid 5051, jiffies 4294951219 (age 12.920s) hex dump (first 32 bytes): 2a 3f 00 00 00 00 00 00 00 20 83 0c 81 88 ff ff *?....... ...... f0 a9 2d 0c 81 88 ff ff 60 22 83 0c 81 88 ff ff ..-.....`"...... backtrace: [<ffffffff81631398>] kmemleak_alloc_recursive include/linux/kmemleak.h:42 [inline] [<ffffffff81631398>] slab_post_alloc_hook mm/slab.h:766 [inline] [<ffffffff81631398>] slab_alloc_node mm/slub.c:3478 [inline] [<ffffffff81631398>] slab_alloc mm/slub.c:3486 [inline] [<ffffffff81631398>] __kmem_cache_alloc_lru mm/slub.c:3493 [inline] [<ffffffff81631398>] kmem_cache_alloc+0x298/0x430 mm/slub.c:3502 [<ffffffff84b5094c>] radix_tree_node_alloc.constprop.0+0x7c/0x1a0 lib/radix-tree.c:276 [<ffffffff84b524cf>] __radix_tree_create lib/radix-tree.c:624 [inline] [<ffffffff84b524cf>] radix_tree_insert+0x14f/0x360 lib/radix-tree.c:712 [<ffffffff84ae105d>] qrtr_tx_wait net/qrtr/af_qrtr.c:277 [inline] [<ffffffff84ae105d>] qrtr_node_enqueue+0x57d/0x630 net/qrtr/af_qrtr.c:348 [<ffffffff84ae26f6>] qrtr_bcast_enqueue+0x66/0xd0 net/qrtr/af_qrtr.c:891 [<ffffffff84ae32d2>] qrtr_sendmsg+0x232/0x450 net/qrtr/af_qrtr.c:992 [<ffffffff83ec3c32>] sock_sendmsg_nosec net/socket.c:730 [inline] [<ffffffff83ec3c32>] __sock_sendmsg+0x52/0xa0 net/socket.c:745 [<ffffffff83ec3d7b>] sock_write_iter+0xfb/0x180 net/socket.c:1158 [<ffffffff816961a7>] call_write_iter include/linux/fs.h:2020 [inline] [<ffffffff816961a7>] new_sync_write fs/read_write.c:491 [inline] [<ffffffff816961a7>] vfs_write+0x327/0x590 fs/read_write.c:584 [<ffffffff816966fb>] ksys_write+0x13b/0x170 fs/read_write.c:637 [<ffffffff84b6ddcf>] do_syscall_x64 arch/x86/entry/common.c:51 [inline] [<ffffffff84b6ddcf>] do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:82 [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0x6b write to /proc/sys/kernel/hung_task_check_interval_secs failed: No such file or directory write to /proc/sys/kernel/softlockup_all_cpu_backtrace failed: No such file or directory

Crashes (1):
Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Assets (help?)	Manager	Title
2023/12/04 00:48	upstream	33cc938e65a9	f819d6f7	.config	console log	report	syz	C		[disk image] [vmlinux] [kernel image]	ci-upstream-gce-leak	memory leak in radix_tree_insert

Crashes (1):

Assets (help?)