public inbox for oe-lkp@lists.linux.dev
 help / color / mirror / Atom feed
From: kernel test robot <oliver.sang@intel.com>
To: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
Cc: <oe-lkp@lists.linux.dev>, <lkp@intel.com>, <oliver.sang@intel.com>
Subject: [kas:compound_head] [mm]  5de5481103: WARNING:at_mm/slub.c:#free_large_kmalloc
Date: Wed, 10 Dec 2025 21:37:09 +0800	[thread overview]
Message-ID: <202512101653.99bc860b-lkp@intel.com> (raw)



Hello,

kernel test robot noticed "WARNING:at_mm/slub.c:#free_large_kmalloc" on:

commit: 5de54811034e58e3c5cef4823504dd93c78fa780 ("mm: Rework compound_head() for power-of-2 sizeof(struct page)")
https://git.kernel.org/cgit/linux/kernel/git/kas/linux.git compound_head

in testcase: boot

config: i386-randconfig-017-20251208
compiler: gcc-14
test machine: qemu-system-i386 -enable-kvm -cpu SandyBridge -smp 2 -m 4G

(please refer to attached dmesg/kmsg for entire log/backtrace)



If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@intel.com>
| Closes: https://lore.kernel.org/oe-lkp/202512101653.99bc860b-lkp@intel.com


[    0.300406][    T1] ------------[ cut here ]------------
[    0.300406][    T1] WARNING: CPU: 0 PID: 1 at mm/slub.c:6760 free_large_kmalloc (mm/slub.c:6760)
[    0.300406][    T1] Modules linked in:
[    0.300406][    T1] CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.18.0-00004-g5de54811034e #1 PREEMPTLAZY  6e1696c0df2045bcd138d035908771f8466c27fc
[    0.300414][    T1] EIP: free_large_kmalloc (mm/slub.c:6760)
[    0.300818][    T1] Code: 5b 5e 5f 5d c3 2e 8d b4 26 00 00 00 00 8d 76 00 3e 8d 74 26 00 55 89 e5 57 89 d7 56 53 89 c3 e8 9c e8 ff ff 80 7b 1b f8 74 13 <0f> 0b ba ed d8 af b1 89 d8 e8 68 7f fd ff e9 8a 00 00 00 89 c6 85
All code
========
   0:	5b                   	pop    %rbx
   1:	5e                   	pop    %rsi
   2:	5f                   	pop    %rdi
   3:	5d                   	pop    %rbp
   4:	c3                   	ret
   5:	2e 8d b4 26 00 00 00 	cs lea 0x0(%rsi,%riz,1),%esi
   c:	00 
   d:	8d 76 00             	lea    0x0(%rsi),%esi
  10:	3e 8d 74 26 00       	ds lea 0x0(%rsi,%riz,1),%esi
  15:	55                   	push   %rbp
  16:	89 e5                	mov    %esp,%ebp
  18:	57                   	push   %rdi
  19:	89 d7                	mov    %edx,%edi
  1b:	56                   	push   %rsi
  1c:	53                   	push   %rbx
  1d:	89 c3                	mov    %eax,%ebx
  1f:	e8 9c e8 ff ff       	call   0xffffffffffffe8c0
  24:	80 7b 1b f8          	cmpb   $0xf8,0x1b(%rbx)
  28:	74 13                	je     0x3d
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	ba ed d8 af b1       	mov    $0xb1afd8ed,%edx
  31:	89 d8                	mov    %ebx,%eax
  33:	e8 68 7f fd ff       	call   0xfffffffffffd7fa0
  38:	e9 8a 00 00 00       	jmp    0xc7
  3d:	89 c6                	mov    %eax,%esi
  3f:	85                   	.byte 0x85

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	ba ed d8 af b1       	mov    $0xb1afd8ed,%edx
   7:	89 d8                	mov    %ebx,%eax
   9:	e8 68 7f fd ff       	call   0xfffffffffffd7f76
   e:	e9 8a 00 00 00       	jmp    0x9d
  13:	89 c6                	mov    %eax,%esi
  15:	85                   	.byte 0x85
[    0.302169][    T1] EAX: 00000000 EBX: f1801e00 ECX: 00000007 EDX: 00000000
[    0.302648][    T1] ESI: b0309000 EDI: b0309000 EBP: b02a5ee0 ESP: b02a5ed4
[    0.303315][    T1] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068 EFLAGS: 00010202
[    0.303837][    T1] CR0: 80050033 CR2: ffd98000 CR3: 022a0000 CR4: 000406d0
[    0.304314][    T1] Call Trace:
[    0.304416][    T1]  ? kobject_uevent_env (lib/kobject_uevent.c:640)
[    0.304777][    T1]  kfree (mm/slub.c:6844)
[    0.305033][    T1]  ? kobject_uevent_env (lib/kobject_uevent.c:640)
[    0.305404][    T1]  kobject_uevent_env (lib/kobject_uevent.c:640)
[    0.305821][    T1]  kobject_uevent (lib/kobject_uevent.c:657)
[    0.306279][    T1]  kset_register (lib/kobject.c:879)
[    0.306787][    T1]  bus_register (drivers/base/bus.c:880)
[    0.307305][    T1]  faux_bus_init (drivers/base/faux.c:245)
[    0.307822][    T1]  driver_init (drivers/base/init.c:36)
[    0.308314][    T1]  kernel_init_freeable (init/main.c:1378 init/main.c:1593)
[    0.308433][    T1]  ? rest_init (init/main.c:1475)
[    0.312434][    T1]  kernel_init (init/main.c:1485)
[    0.312949][    T1]  ret_from_fork (arch/x86/kernel/process.c:164)
[    0.313466][    T1]  ? rest_init (init/main.c:1475)
[    0.313958][    T1]  ret_from_fork_asm (arch/x86/entry/entry_32.S:737)
[    0.314514][    T1]  entry_INT80_32 (arch/x86/entry/entry_32.S:945)
[    0.315071][    T1] irq event stamp: 677
[    0.315581][    T1] hardirqs last  enabled at (685): __up_console_sem (arch/x86/include/asm/irqflags.h:42 arch/x86/include/asm/irqflags.h:119 arch/x86/include/asm/irqflags.h:159 kernel/printk/printk.c:345)
[    0.316422][    T1] hardirqs last disabled at (694): __up_console_sem (kernel/printk/printk.c:343 (discriminator 3))
[    0.317385][    T1] softirqs last  enabled at (624): handle_softirqs (kernel/softirq.c:469 (discriminator 2) kernel/softirq.c:650 (discriminator 2))
[    0.318358][    T1] softirqs last disabled at (619): __do_softirq (kernel/softirq.c:657)
[    0.319360][    T1] ---[ end trace 0000000000000000 ]---
[    0.320014][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x302
[    0.320425][    T1] aops:0x0 ino:0
[    0.320842][    T1] flags: 0x0(zone=0)
[    0.321296][    T1] raw: 00000000 ffffff01 f1801e08 f1801e08 ffffffff 00000000 ffffffff 00000000
[    0.322308][    T1] page dumped because: Not a kmalloc allocation
[    0.323277][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x30a
[    0.324291][    T1] aops:0x0 ino:0
[    0.324424][    T1] flags: 0x0(zone=0)
[    0.324882][    T1] raw: 00000000 ffffff01 f1801f08 f1801f08 ffffffff 00000000 ffffffff 00000000
[    0.325821][    T1] page dumped because: Not a kmalloc allocation
[    0.326440][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x30a
[    0.327072][    T1] aops:0x0 ino:0
[    0.327315][    T1] flags: 0x0(zone=0)
[    0.327577][    T1] raw: 00000000 ffffff01 f1801f08 f1801f08 ffffffff 00000000 ffffffff 00000000
[    0.328168][    T1] page dumped because: Not a kmalloc allocation
[    0.328487][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x30a
[    0.329056][    T1] aops:0x0 ino:0
[    0.329297][    T1] flags: 0x0(zone=0)
[    0.329580][    T1] raw: 00000000 ffffff01 f1801f08 f1801f08 ffffffff 00000000 ffffffff 00000000
[    0.330174][    T1] page dumped because: Not a kmalloc allocation
[    0.330686][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x30a
[    0.331256][    T1] aops:0x0 ino:0
[    0.331496][    T1] flags: 0x0(zone=0)
[    0.331760][    T1] raw: 00000000 ffffff01 f1801f08 f1801f08 ffffffff 00000000 ffffffff 00000000
[    0.332355][    T1] page dumped because: Not a kmalloc allocation
[    0.332649][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x312
[    0.333243][    T1] aops:0x0 ino:0
[    0.333487][    T1] flags: 0x0(zone=0)
[    0.333749][    T1] raw: 00000000 ffffff01 f1802008 f1802008 ffffffff 00000000 ffffffff 00000000
[    0.334383][    T1] page dumped because: Not a kmalloc allocation
[    0.334807][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x30a
[    0.335372][    T1] aops:0x0 ino:0
[    0.335612][    T1] flags: 0x0(zone=0)
[    0.335876][    T1] raw: 00000000 ffffff01 f1801f08 f1801f08 ffffffff 00000000 ffffffff 00000000
[    0.336413][    T1] page dumped because: Not a kmalloc allocation
[    0.337047][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x30a
[    0.337621][    T1] aops:0x0 ino:0
[    0.337895][    T1] flags: 0x0(zone=0)
[    0.338156][    T1] raw: 00000000 ffffff01 f1801f08 f1801f08 ffffffff 00000000 ffffffff 00000000
[    0.338746][    T1] page dumped because: Not a kmalloc allocation
[    0.341224][    T1] Running RCU Tasks wait API self tests
[    0.444516][    T1] Running RCU Tasks Rude wait API self tests
[    0.445152][    T1] Running RCU Tasks Trace wait API self tests
[    0.445628][    T1] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[    0.446843][    T1] futex hash table entries: 256 (15360 bytes on 1 NUMA nodes, total 15 KiB, linear).
[    0.449135][    T1] pinctrl core: initialized pinctrl subsystem
[    0.449553][    T1] pinctrl core: failed to create debugfs directory
[    0.451376][    T1] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.454173][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x8da
[    0.454758][    T1] aops:0x0 ino:0
[    0.455001][    T1] flags: 0x0(zone=0)
[    0.455264][    T1] raw: 00000000 ffffff01 f180d908 f180d908 ffffffff 00000000 ffffffff 00000000
[    0.455856][    T1] page dumped because: Not a kmalloc allocation
[    0.456291][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x8da
[    0.456424][   T16] Callback from call_rcu_tasks_trace() invoked.
[    0.456897][    T1] aops:0x0 ino:0
[    0.457141][    T1] flags: 0x0(zone=0)
[    0.457402][    T1] raw: 00000000 ffffff01 f180d908 f180d908 ffffffff 00000000 ffffffff 00000000
[    0.458001][    T1] page dumped because: Not a kmalloc allocation
[    0.458427][    T1] page: refcount:0 mapcount:0 mapping:(ptrval) index:0xffffffff pfn:0x8d2
[    0.458991][    T1] aops:0x0 ino:0
[    0.459229][    T1] flags: 0x0(zone=0)
[    0.459488][    T1] raw: 00000000 ffffff01 f180d808 f180d808 ffffffff 00000000 ffffffff 00000000
[    0.460109][    T1] page dumped because: Not a kmalloc allocation
[    0.460432][    T1] thermal_sys: Registered thermal governor 'fair_share'
[    0.460436][    T1] thermal_sys: Registered thermal governor 'bang_bang'
[    0.460899][    T1] thermal_sys: Registered thermal governor 'step_wise'
[    0.461353][    T1] thermal_sys: Registered thermal governor 'user_space'
[    0.461880][    T1] EISA bus registered
[    0.462613][    T1] cpuidle: using governor ladder
[    0.462954][    T1] cpuidle: using governor teo
[    0.464109][    T1] PCI: Using configuration type 1 for base access
[    0.465094][    T1] kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible.
[    0.465864][    T1] workqueue: round-robin CPU selection forced, expect performance impact
[    0.486995][    T1] ACPI: Added _OSI(Module Device)
[    0.487350][    T1] ACPI: Added _OSI(Processor Device)
[    0.487709][    T1] ACPI: Added _OSI(Processor Aggregator Device)
[    0.508673][    T1] ACPI: 1 ACPI AML tables successfully acquired and loaded
[    0.533188][    T1] ACPI: Interpreter enabled
[    0.533548][    T1] ACPI: PM: (supports S0 S5)
[    0.533858][    T1] ACPI: Using IOAPIC for interrupt routing
[    0.534322][    T1] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug


The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20251210/202512101653.99bc860b-lkp@intel.com



-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki


                 reply	other threads:[~2025-12-10 13:37 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=202512101653.99bc860b-lkp@intel.com \
    --to=oliver.sang@intel.com \
    --cc=kirill.shutemov@linux.intel.com \
    --cc=lkp@intel.com \
    --cc=oe-lkp@lists.linux.dev \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox