syzbot


linux-next boot error: WARNING in kmem_cache_free

Status: upstream: reported on 2020/06/22 05:37
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+95bccd805a4aa06a4b0d@syzkaller.appspotmail.com
Fix commit: mm, slab/slub: improve error reporting and overhead of cache_from_obj()-fix
Patched on: [ci-upstream-linux-next-kasan-gce-root], missing on: [ci-qemu-gce-upstream-auto ci-qemu-native-arm64-kvm ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci-upstream-rust-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 2187d, last: 2182d
✨ AI Jobs (4)
ID Workflow Result Correct Bug Created Started Finished Revision Error
3dce9663-3a2b-4b8d-aefe-6795d1b5c5cd assessment-security 💥 linux-next boot error: WARNING in kmem_cache_free 2026/06/10 04:49 2026/06/10 04:49 2026/06/10 04:51 c36c07f6c1f2230a36374cbd22235f635e8f9284
failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "32" "ARCH=x86_64" "CC=ccache clang" "LD=ld.lld" "O=/app/workdir/cache/build/b026b970a2c0eb721b...
truncated to first 200 bytes; open job for full error
7921e289-b37b-436e-9d98-2b280b36e28c assessment-security 💥 linux-next boot error: WARNING in kmem_cache_free 2026/06/04 08:18 2026/06/04 08:18 2026/06/04 08:18 62fe15281f5011cd203d8845b8767b10e7443aa5
failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "32" "ARCH=x86_64" "CC=ccache clang" "LD=ld.lld" "O=/app/workdir/cache/build/b026b970a2c0eb721b...
truncated to first 200 bytes; open job for full error
22537825-3016-44ab-9434-6c36b1c82606 assessment-security 💥 linux-next boot error: WARNING in kmem_cache_free 2026/06/02 06:24 2026/06/02 06:24 2026/06/02 06:25 1095583bae1d2729a3b4be301cb6ddc85ced9e38
failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "32" "ARCH=x86_64" "CC=ccache clang" "LD=ld.lld" "O=/app/workdir/cache/build/b026b970a2c0eb721b...
truncated to first 200 bytes; open job for full error
1d0bfd97-2390-401e-bc0f-9140d8088fe0 assessment-security 💥 linux-next boot error: WARNING in kmem_cache_free 2026/05/22 23:14 2026/05/22 23:14 2026/05/22 23:15 df8ac09c914d5408499c5695877a3e0e31969e6f
failed to run ["git" "-c" "core.hooksPath=/dev/null" "checkout" "3f9437c6234d95d96967f1b438a4fb71b6be254d"]: exit status 128
Previous HEAD position was fb893de323e2 Merge tag 'tag-chrome-platform-for-...
truncated to first 200 bytes; open job for full error
Discussions (1)
Title Replies (including bot) Last reply
linux-next boot error: WARNING in kmem_cache_free 5 (6) 2020/06/28 00:49

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 0 at mm/slab.h:232 kmem_cache_free+0x0/0x10 include/trace/events/kmem.h:145
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.8.0-rc2-next-20200625-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x18f/0x20d lib/dump_stack.c:118
 panic+0x2e3/0x75c kernel/panic.c:231
 __warn.cold+0x20/0x45 kernel/panic.c:600
 report_bug+0x1bd/0x210 lib/bug.c:198
 exc_invalid_op+0xb1/0x120 arch/x86/kernel/traps.c:235
 asm_exc_invalid_op+0x12/0x20 arch/x86/include/asm/idtentry.h:563
RIP: 0010:kmem_cache_debug_flags mm/slab.h:232 [inline]
RIP: 0010:cache_from_obj mm/slab.h:459 [inline]
RIP: 0010:kmem_cache_free+0x0/0x10 mm/slab.c:3678
Code: 75 ca 48 c7 c2 38 cf 65 89 be 91 00 00 00 48 c7 c7 b6 0d 69 89 c6 05 fb 87 f6 08 01 e8 be 66 a7 ff eb a9 0f 1f 80 00 00 00 00 <0f> 0b 48 85 ff 74 05 e9 04 fe ff ff c3 0f 1f 00 41 57 48 8d 46 60
RSP: 0000:ffffffff89a07b88 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff8880aa01f0e8 RCX: ffff8880aa01f490
RDX: ffffffff89a86580 RSI: ffff8880aa01f480 RDI: ffff8880aa00fe00
RBP: ffff8880aa01f4a8 R08: 0000000000000001 R09: 0000000000000003
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880aa01f4b0
R13: ffff8880aa01f688 R14: ffff8880aa01f480 R15: ffffc90000000000
 adjust_va_to_fit_type mm/vmalloc.c:980 [inline]
 __alloc_vmap_area mm/vmalloc.c:1096 [inline]
 alloc_vmap_area+0x142c/0x1de0 mm/vmalloc.c:1196
 __get_vm_area_node+0x17b/0x3b0 mm/vmalloc.c:2060
 __vmalloc_node_range mm/vmalloc.c:2484 [inline]
 __vmalloc_node+0xfe/0x1b0 mm/vmalloc.c:2532
 __vmalloc_area_node+0x141/0x7a0 mm/vmalloc.c:2404
 __vmalloc_node_range mm/vmalloc.c:2489 [inline]
 __vmalloc_node mm/vmalloc.c:2532 [inline]
 __vmalloc+0x114/0x1a0 mm/vmalloc.c:2546
 alloc_large_system_hash+0x1c9/0x2e2 mm/page_alloc.c:8181
 inode_init+0xab/0xbc fs/inode.c:2099
 vfs_caches_init+0x104/0x11e fs/dcache.c:3231
 start_kernel+0x985/0xa06 init/main.c:1025
 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:243

Crashes (45):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/26 01:37 linux-next 3f9437c6234d aea82c00 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/26 00:16 linux-next 3f9437c6234d aea82c00 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/26 00:16 linux-next 3f9437c6234d aea82c00 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/25 22:34 linux-next 3f9437c6234d f9147b08 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/25 22:34 linux-next 3f9437c6234d f9147b08 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/25 22:34 linux-next 3f9437c6234d f9147b08 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/25 20:03 linux-next 3f9437c6234d f9147b08 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/25 20:03 linux-next 3f9437c6234d f9147b08 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/25 20:03 linux-next 3f9437c6234d f9147b08 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/25 19:02 linux-next 3f9437c6234d adb7d9e6 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/25 19:02 linux-next 3f9437c6234d adb7d9e6 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/25 19:02 linux-next 3f9437c6234d adb7d9e6 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/25 16:52 linux-next 3f9437c6234d c7b4497a .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/25 16:52 linux-next 3f9437c6234d c7b4497a .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/25 16:52 linux-next 3f9437c6234d c7b4497a .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/25 15:33 linux-next cfafde3c949c 54566aff .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/25 15:33 linux-next cfafde3c949c 54566aff .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/25 15:33 linux-next cfafde3c949c 54566aff .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/23 11:03 linux-next 37e7f89b58c9 54566aff .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/23 11:03 linux-next 37e7f89b58c9 54566aff .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/23 11:03 linux-next 37e7f89b58c9 54566aff .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/23 08:28 linux-next 37e7f89b58c9 1afe1535 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/23 08:28 linux-next 37e7f89b58c9 1afe1535 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/23 08:28 linux-next 37e7f89b58c9 1afe1535 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/23 07:36 linux-next 27f11fea3360 1afe1535 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/23 07:36 linux-next 27f11fea3360 1afe1535 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/23 07:36 linux-next 27f11fea3360 1afe1535 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/22 22:54 linux-next 27f11fea3360 1afe1535 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/22 22:54 linux-next 27f11fea3360 1afe1535 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/22 22:54 linux-next 27f11fea3360 1afe1535 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/22 18:26 linux-next 27f11fea3360 1afe1535 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/22 18:26 linux-next 27f11fea3360 1afe1535 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/22 18:26 linux-next 27f11fea3360 1afe1535 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/22 13:13 linux-next 27f11fea3360 eabcced4 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/22 13:13 linux-next 27f11fea3360 eabcced4 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/22 13:13 linux-next 27f11fea3360 eabcced4 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/22 06:36 linux-next 5a94f5bc041e eabcced4 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/22 06:36 linux-next 5a94f5bc041e eabcced4 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/22 06:36 linux-next 5a94f5bc041e eabcced4 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/21 19:12 linux-next 5a94f5bc041e 4f2acff9 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/21 19:12 linux-next 5a94f5bc041e 4f2acff9 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/06/21 19:11 linux-next 5a94f5bc041e 4f2acff9 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.