All of lore.kernel.org
 help / color / mirror / Atom feed
From: kernel test robot <oliver.sang@intel.com>
To: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
Cc: <oe-lkp@lists.linux.dev>, <lkp@intel.com>, <oliver.sang@intel.com>
Subject: [kas:compound_head] [mm]  5de5481103: WARNING:at_mm/slub.c:#free_large_kmalloc
Date: Wed, 10 Dec 2025 21:37:09 +0800	[thread overview]
Message-ID: <202512101653.99bc860b-lkp@intel.com> (raw)



Hello,

kernel test robot noticed "WARNING:at_mm/slub.c:#free_large_kmalloc" on:

commit: 5de54811034e58e3c5cef4823504dd93c78fa780 ("mm: Rework compound_head() for power-of-2 sizeof(struct page)")
https://git.kernel.org/cgit/linux/kernel/git/kas/linux.git compound_head

in testcase: boot

config: i386-randconfig-017-20251208
compiler: gcc-14
test machine: qemu-system-i386 -enable-kvm -cpu SandyBridge -smp 2 -m 4G

(please refer to attached dmesg/kmsg for entire log/backtrace)



If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@intel.com>
| Closes: https://lore.kernel.org/oe-lkp/202512101653.99bc860b-lkp@intel.com


[    0.300406][    T1] ------------[ cut here ]------------
[    0.300406][    T1] WARNING: CPU: 0 PID: 1 at mm/slub.c:6760 free_large_kmalloc (mm/slub.c:6760)
[    0.300406][    T1] Modules linked in:
[    0.300406][    T1] CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.18.0-00004-g5de54811034e #1 PREEMPTLAZY  6e1696c0df2045bcd138d035908771f8466c27fc
[    0.300414][    T1] EIP: free_large_kmalloc (mm/slub.c:6760)
[    0.300818][    T1] Code: 5b 5e 5f 5d c3 2e 8d b4 26 00 00 00 00 8d 76 00 3e 8d 74 26 00 55 89 e5 57 89 d7 56 53 89 c3 e8 9c e8 ff ff 80 7b 1b f8 74 13 <0f> 0b ba ed d8 af b1 89 d8 e8 68 7f fd ff e9 8a 00 00 00 89 c6 85
All code
========
   0:	5b                   	pop    %rbx
   1:	5e                   	pop    %rsi
   2:	5f                   	pop    %rdi
   3:	5d                   	pop    %rbp
   4:	c3                   	ret
   5:	2e 8d b4 26 00 00 00 	cs lea 0x0(%rsi,%riz,1),%esi
   c:	00 
   d:	8d 76 00             	lea    0x0(%rsi),%esi
  10:	3e 8d 74 26 00       	ds lea 0x0(%rsi,%riz,1),%esi
  15:	55                   	push   %rbp
  16:	89 e5                	mov    %esp,%ebp
  18:	57                   	push   %rdi
  19:	89 d7                	mov    %edx,%edi
  1b:	56                   	push   %rsi
  1c:	53                   	push   %rbx
  1d:	89 c3                	mov    %eax,%ebx
  1f:	e8 9c e8 ff ff       	call   0xffffffffffffe8c0
  24:	80 7b 1b f8          	cmpb   $0xf8,0x1b(%rbx)
  28:	74 13                	je     0x3d
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	ba ed d8 af b1       	mov    $0xb1afd8ed,%edx
  31:	89 d8                	mov    %ebx,%eax
  33:	e8 68 7f fd ff       	call   0xfffffffffffd7fa0
  38:	e9 8a 00 00 00       	jmp    0xc7
  3d:	89 c6                	mov    %eax,%esi
  3f:	85                   	.byte 0x85

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	ba ed d8 af b1       	mov    $0xb1afd8ed,%edx
   7:	89 d8                	mov    %ebx,%eax
   9:	e8 68 7f fd ff       	call   0xfffffffffffd7f76
   e:	e9 8a 00 00 00       	jmp    0x9d
  13:	89 c6                	mov    %eax,%esi
  15:	85                   	.byte 0x85
[    0.302169][    T1] EAX: 00000000 EBX: f1801e00 ECX: 00000007 EDX: 00000000
[    0.302648][    T1] ESI: b0309000 EDI: b0309000 EBP: b02a5ee0 ESP: b02a5ed4
[    0.303315][    T1] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068 EFLAGS: 00010202
[    0.303837][    T1] CR0: 80050033 CR2: ffd98000 CR3: 022a0000 CR4: 000406d0
[    0.304314][    T1] Call Trace:
[    0.304416][    T1]  ? kobject_uevent_env (lib/kobject_uevent.c:640)
[    0.304777][    T1]  kfree (mm/slub.c:6844)
[    0.305033][    T1]  ? kobject_uevent_env (lib/kobject_uevent.c:640)
[    0.305404][    T1]  kobject_uevent_env (lib/kobject_uevent.c:640)
[    0.305821][    T1]  kobject_uevent (lib/kobject_uevent.c:657)
[    0.306279][    T1]  kset_register (lib/kobject.c:879)
[    0.306787][    T1]  bus_register (drivers/base/bus.c:880)
[    0.307305][    T1]  faux_bus_init (drivers/base/faux.c:245)
[    0.307822][    T1]  driver_init (drivers/base/init.c:36)
[    0.308314][    T1]  kernel_init_freeable (init/main.c:1378 init/main.c:1593)
[    0.308433][    T1]  ? rest_init (init/main.c:1475)
[    0.312434][    T1]  kernel_init (init/main.c:1485)
[    0.312949][    T1]  ret_from_fork (arch/x86/kernel/process.c:164)
[    0.313466][    T1]  ? rest_init (init/main.c:1475)
[    0.313958][    T1]  ret_from_fork_asm (arch/x86/entry/entry_32.S:737)
[    0.314514][    T1]  entry_INT80_32 (arch/x86/entry/entry_32.S:945)
[    0.315071][    T1] irq event stamp: 677
[    0.315581][    T1] hardirqs last  enabled at (685): __up_console_sem (arch/x86/include/asm/irqflags.h:42 arch/x86/include/asm/irqflags.h:119 arch/x86/include/asm/irqflags.h:159 kernel/printk/printk.c:345)
[    0.316422][    T1] hardirqs last disabled at (694): __up_console_sem (kernel/printk/printk.c:343 (discriminator 3))
[    0.317385][    T1] softirqs last  enabled at (624): handle_softirqs (kernel/softirq.c:469 (discriminator 2) kernel/softirq.c:650 (discriminator 2))
[    0.318358][    T1] softirqs last disabled at (619): __do_softirq (kernel/softirq.c:657)
[    0.319360][    T1] ---[ end trace 0000000000000000 ]---
[    0.320014][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x302
[    0.320425][    T1] aops:0x0 ino:0
[    0.320842][    T1] flags: 0x0(zone=0)
[    0.321296][    T1] raw: 00000000 ffffff01 f1801e08 f1801e08 ffffffff 00000000 ffffffff 00000000
[    0.322308][    T1] page dumped because: Not a kmalloc allocation
[    0.323277][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x30a
[    0.324291][    T1] aops:0x0 ino:0
[    0.324424][    T1] flags: 0x0(zone=0)
[    0.324882][    T1] raw: 00000000 ffffff01 f1801f08 f1801f08 ffffffff 00000000 ffffffff 00000000
[    0.325821][    T1] page dumped because: Not a kmalloc allocation
[    0.326440][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x30a
[    0.327072][    T1] aops:0x0 ino:0
[    0.327315][    T1] flags: 0x0(zone=0)
[    0.327577][    T1] raw: 00000000 ffffff01 f1801f08 f1801f08 ffffffff 00000000 ffffffff 00000000
[    0.328168][    T1] page dumped because: Not a kmalloc allocation
[    0.328487][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x30a
[    0.329056][    T1] aops:0x0 ino:0
[    0.329297][    T1] flags: 0x0(zone=0)
[    0.329580][    T1] raw: 00000000 ffffff01 f1801f08 f1801f08 ffffffff 00000000 ffffffff 00000000
[    0.330174][    T1] page dumped because: Not a kmalloc allocation
[    0.330686][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x30a
[    0.331256][    T1] aops:0x0 ino:0
[    0.331496][    T1] flags: 0x0(zone=0)
[    0.331760][    T1] raw: 00000000 ffffff01 f1801f08 f1801f08 ffffffff 00000000 ffffffff 00000000
[    0.332355][    T1] page dumped because: Not a kmalloc allocation
[    0.332649][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x312
[    0.333243][    T1] aops:0x0 ino:0
[    0.333487][    T1] flags: 0x0(zone=0)
[    0.333749][    T1] raw: 00000000 ffffff01 f1802008 f1802008 ffffffff 00000000 ffffffff 00000000
[    0.334383][    T1] page dumped because: Not a kmalloc allocation
[    0.334807][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x30a
[    0.335372][    T1] aops:0x0 ino:0
[    0.335612][    T1] flags: 0x0(zone=0)
[    0.335876][    T1] raw: 00000000 ffffff01 f1801f08 f1801f08 ffffffff 00000000 ffffffff 00000000
[    0.336413][    T1] page dumped because: Not a kmalloc allocation
[    0.337047][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x30a
[    0.337621][    T1] aops:0x0 ino:0
[    0.337895][    T1] flags: 0x0(zone=0)
[    0.338156][    T1] raw: 00000000 ffffff01 f1801f08 f1801f08 ffffffff 00000000 ffffffff 00000000
[    0.338746][    T1] page dumped because: Not a kmalloc allocation
[    0.341224][    T1] Running RCU Tasks wait API self tests
[    0.444516][    T1] Running RCU Tasks Rude wait API self tests
[    0.445152][    T1] Running RCU Tasks Trace wait API self tests
[    0.445628][    T1] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[    0.446843][    T1] futex hash table entries: 256 (15360 bytes on 1 NUMA nodes, total 15 KiB, linear).
[    0.449135][    T1] pinctrl core: initialized pinctrl subsystem
[    0.449553][    T1] pinctrl core: failed to create debugfs directory
[    0.451376][    T1] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.454173][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x8da
[    0.454758][    T1] aops:0x0 ino:0
[    0.455001][    T1] flags: 0x0(zone=0)
[    0.455264][    T1] raw: 00000000 ffffff01 f180d908 f180d908 ffffffff 00000000 ffffffff 00000000
[    0.455856][    T1] page dumped because: Not a kmalloc allocation
[    0.456291][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x8da
[    0.456424][   T16] Callback from call_rcu_tasks_trace() invoked.
[    0.456897][    T1] aops:0x0 ino:0
[    0.457141][    T1] flags: 0x0(zone=0)
[    0.457402][    T1] raw: 00000000 ffffff01 f180d908 f180d908 ffffffff 00000000 ffffffff 00000000
[    0.458001][    T1] page dumped because: Not a kmalloc allocation
[    0.458427][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x8d2
[    0.458991][    T1] aops:0x0 ino:0
[    0.459229][    T1] flags: 0x0(zone=0)
[    0.459488][    T1] raw: 00000000 ffffff01 f180d808 f180d808 ffffffff 00000000 ffffffff 00000000
[    0.460109][    T1] page dumped because: Not a kmalloc allocation
[    0.460432][    T1] thermal_sys: Registered thermal governor 'fair_share'
[    0.460436][    T1] thermal_sys: Registered thermal governor 'bang_bang'
[    0.460899][    T1] thermal_sys: Registered thermal governor 'step_wise'
[    0.461353][    T1] thermal_sys: Registered thermal governor 'user_space'
[    0.461880][    T1] EISA bus registered
[    0.462613][    T1] cpuidle: using governor ladder
[    0.462954][    T1] cpuidle: using governor teo
[    0.464109][    T1] PCI: Using configuration type 1 for base access
[    0.465094][    T1] kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible.
[    0.465864][    T1] workqueue: round-robin CPU selection forced, expect performance impact
[    0.486995][    T1] ACPI: Added _OSI(Module Device)
[    0.487350][    T1] ACPI: Added _OSI(Processor Device)
[    0.487709][    T1] ACPI: Added _OSI(Processor Aggregator Device)
[    0.508673][    T1] ACPI: 1 ACPI AML tables successfully acquired and loaded
[    0.533188][    T1] ACPI: Interpreter enabled
[    0.533548][    T1] ACPI: PM: (supports S0 S5)
[    0.533858][    T1] ACPI: Using IOAPIC for interrupt routing
[    0.534322][    T1] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug


The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20251210/202512101653.99bc860b-lkp@intel.com



-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki


                 reply	other threads:[~2025-12-10 13:37 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=202512101653.99bc860b-lkp@intel.com \
    --to=oliver.sang@intel.com \
    --cc=kirill.shutemov@linux.intel.com \
    --cc=lkp@intel.com \
    --cc=oe-lkp@lists.linux.dev \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.