linux-kernel - [linux-next]kernel BUG at mm/slub.c:546!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <24438fa1-da2c-47d4-b752-66e3ba247a82@linux.ibm.com>
Date: Fri, 13 Jun 2025 15:13:21 +0530
From: Venkat Rao Bagalkote <venkat88@...ux.ibm.com>
To: LKML <linux-kernel@...r.kernel.org>,
        linuxppc-dev <linuxppc-dev@...ts.ozlabs.org>,
        Linux Next Mailing List <linux-next@...r.kernel.org>,
        Stephen Rothwell <sfr@...b.auug.org.au>,
        Madhavan Srinivasan <maddy@...ux.ibm.com>, riteshh@...ux.ibm.com,
        linux-mm@...r.kernel.org, osalvador@...e.de,
        Kees Cook <kees@...nel.org>
Subject: [linux-next]kernel BUG at mm/slub.c:546!

Greetings!!!


IBM CI has reported kernel BUG at mm/slub.c:546!, while running fuzzer 
test, on linux-next-20250613 kernel on IBM Power Server.


Traces:


[ 4017.318542] ------------[ cut here ]------------
[ 4017.318577] kernel BUG at mm/slub.c:546!
[ 4017.318586] Oops: Exception in kernel mode, sig: 5 [#1]
[ 4017.318596] LE PAGE_SIZE=64K MMU=Radix  SMP NR_CPUS=8192 NUMA pSeries
[ 4017.318605] Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 
nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct 
nft_chain_nat nf_nat nf_conntrack bonding nf_defrag_ipv6 tls 
nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink kmem device_dax 
pseries_rng vmx_crypto dax_pmem fuse ext4 crc16 mbcache jbd2 sd_mod sg 
nd_pmem nd_btt papr_scm ibmvscsi scsi_transport_srp ibmveth libnvdimm
[ 4017.318678] CPU: 13 UID: 0 PID: 1673332 Comm: sigfuz Kdump: loaded 
Not tainted 6.16.0-rc1-next-20250613 #1 VOLUNTARY

[ 4017.318701] NIP:  c000000000585fd0 LR: c00000000058686c CTR: 
0000000000000000
[ 4017.318710] REGS: c0000003f038f680 TRAP: 0700   Not tainted 
(6.16.0-rc1-next-20250613)
[ 4017.318719] MSR:  800000000282b033 <SF,VEC,VSX,EE,FP,ME,IR,DR,RI,LE>  
CR: 24002838  XER: 20040001
[ 4017.318740] CFAR: c000000000586868 IRQMASK: 0
[ 4017.318740] GPR00: c00000000058686c c0000003f038f920 c000000001658100 
c000000004016200
[ 4017.318740] GPR04: c00c000000331200 c0000000cc4c8000 c0000000cc4c8000 
c0000000cc4ca000
[ 4017.318740] GPR08: 0000000000002000 0000000000000001 0000000000000000 
0000000000002000
[ 4017.318740] GPR12: 0000000000000001 c000000efffe6700 0000000000000000 
0000000000000000
[ 4017.318740] GPR16: 0000000000000000 0000000000000000 c000000004016200 
c0000003daecb860
[ 4017.318740] GPR20: c0000003daecab80 c0000000cc4c8000 0000000000000000 
0000000000000001
[ 4017.318740] GPR24: 0000000000000001 0000000000000001 c0000000cc4c8000 
c0000003f7b18700
[ 4017.318740] GPR28: c0000000002b1aa4 0000000080200013 c0000000cc4c8000 
c00c000000331200
[ 4017.318828] NIP [c000000000585fd0] __slab_free+0x94/0x444
[ 4017.318841] LR [c00000000058686c] kfree+0x19c/0x488
[ 4017.318850] Call Trace:
[ 4017.318854] [c0000003f038f920] [c0000000042b0ee8] 0xc0000000042b0ee8 
(unreliable)
[ 4017.318867] [c0000003f038f9f0] [c00000000058686c] kfree+0x19c/0x488
[ 4017.318877] [c0000003f038fa60] [c0000000002b1aa4] 
futex_hash_free+0x50/0x7c
[ 4017.318889] [c0000003f038fa90] [c000000000169f94] __mmput+0x13c/0x1b4
[ 4017.318900] [c0000003f038fac0] [c0000000001775c8] exit_mm+0xdc/0x16c
[ 4017.318911] [c0000003f038fb00] [c000000000177864] do_exit+0x20c/0x55c
[ 4017.318921] [c0000003f038fbb0] [c000000000177da0] do_group_exit+0x4c/0xbc
[ 4017.318931] [c0000003f038fbf0] [c00000000018f368] get_signal+0xb60/0xb64
[ 4017.318941] [c0000003f038fcf0] [c0000000000216ac] do_signal+0x7c/0x324
[ 4017.318953] [c0000003f038fd90] [c000000000022820] 
do_notify_resume+0xb0/0x13c
[ 4017.318963] [c0000003f038fdc0] [c000000000032358] 
interrupt_exit_user_prepare_main+0x1ac/0x264
[ 4017.318976] [c0000003f038fe20] [c000000000032560] 
syscall_exit_prepare+0x150/0x178
[ 4017.318986] [c0000003f038fe50] [c00000000000d068] 
system_call_vectored_common+0x168/0x2ec
[ 4017.318999] ---- interrupt: 3000 at 0x7fffb3d04764
[ 4017.319006] NIP:  00007fffb3d04764 LR: 00007fffb3d04764 CTR: 
0000000000000000
[ 4017.319014] REGS: c0000003f038fe80 TRAP: 3000   Not tainted 
(6.16.0-rc1-next-20250613)
[ 4017.319023] MSR:  800000000280f033 
<SF,VEC,VSX,EE,PR,FP,ME,IR,DR,RI,LE>  CR: 42004438  XER: 00000000
[ 4017.319044] IRQMASK: 0
[ 4017.319044] GPR00: 0000000000000072 00007fff7b7ee440 0000000010027f00 
fffffffffffffe00
[ 4017.319044] GPR04: 00007fff7b7ee5d0 0000000000000000 0000000000000000 
00007fff7b7f68e0
[ 4017.319044] GPR08: 00007fff7b7ef1a8 0000000000000000 0000000000000000 
0000000000000000
[ 4017.319044] GPR12: 0000000000000000 00007fff7b7f68e0 0000000000000000 
0000000000810000
[ 4017.319044] GPR16: 00007fff7b7ef160 0000000000000000 0000000000000000 
00007fffb3ff1040
[ 4017.319044] GPR20: 00007fff7b7ef8e0 00007fff7b7ef0a0 0000000000010000 
00007fff7afe0000
[ 4017.319044] GPR24: 0000000000000001 00007fffd28f0820 0000000010001e90 
00007fffd28f0697
[ 4017.319044] GPR28: 00007fff7b7ee5d0 000000000019bef5 0000000000000000 
0000000000000000
[ 4017.319129] NIP [00007fffb3d04764] 0x7fffb3d04764
[ 4017.319136] LR [00007fffb3d04764] 0x7fffb3d04764
[ 4017.319143] ---- interrupt: 3000
[ 4017.319149] Code: fba100b8 fbc100c0 f80100e0 60000000 ebdf0020 
81120028 39400000 39200001 ebbf0028 7c3af000 7cfa4214 7d29509e 
<0b090000> 78e50022 54e6c03e 7d57e850
[ 4017.319178] ---[ end trace 0000000000000000 ]---


If you happen to fix this, please add below tag.


Reported-by: Venkat Rao Bagalkote <venkat88@...ux.ibm.com>



Regards,

Venkat.