[linux-next:master] [mm/hugetlb] 0e1ad0324a: WARNING:at_mm/mmu_gather.c:#tlb_finish_mmu

Hello,

kernel test robot noticed "WARNING:at_mm/mmu_gather.c:#tlb_finish_mmu" on:

commit: 0e1ad0324aabb5aef3ef409de9a395cda7ee6098 ("mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master

in testcase: boot

config: x86_64-randconfig-004-20251209
compiler: gcc-14
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 32G

(please refer to attached dmesg/kmsg for entire log/backtrace)


+--------------------------------------------+------------+------------+
|                                            | ef8ae3fc3a | 0e1ad0324a |
+--------------------------------------------+------------+------------+
| WARNING:at_mm/mmu_gather.c:#tlb_finish_mmu | 0          | 12         |
| RIP:tlb_finish_mmu                         | 0          | 12         |
+--------------------------------------------+------------+------------+


If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <[email protected]>
| Closes: https://lore.kernel.org/oe-lkp/[email protected]


[    5.210750][   T44] ------------[ cut here ]------------
[    5.211469][   T44] WARNING: CPU: 0 PID: 44 at mm/mmu_gather.c:475 tlb_finish_mmu (mm/mmu_gather.c:475)
[    5.212311][   T44] Modules linked in:
[    5.212737][   T44] CPU: 0 UID: 0 PID: 44 Comm: modprobe Tainted: G                T   6.18.0-rc5-00395-g0e1ad0324aab #1 PREEMPT
[    5.214003][   T44] Tainted: [T]=RANDSTRUCT
[    5.214515][   T44] RIP: 0010:tlb_finish_mmu (mm/mmu_gather.c:475)
[    5.215083][   T44] Code: 66 89 47 20 e8 90 fb ff ff ff 86 dc 00 00 00 5d c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 54 53 48 89 fb f6 47 21 10 74 04 90 <0f> 0b 90 48 8b 03 8b 80 dc 00 00 00 ff c8 7e 10 80 4b 20 01 48 89
All code
========
   0:	66 89 47 20          	mov    %ax,0x20(%rdi)
   4:	e8 90 fb ff ff       	call   0xfffffffffffffb99
   9:	ff 86 dc 00 00 00    	incl   0xdc(%rsi)
   f:	5d                   	pop    %rbp
  10:	c3                   	ret
  11:	0f 1f 84 00 00 00 00 	nopl   0x0(%rax,%rax,1)
  18:	00 
  19:	55                   	push   %rbp
  1a:	48 89 e5             	mov    %rsp,%rbp
  1d:	41 54                	push   %r12
  1f:	53                   	push   %rbx
  20:	48 89 fb             	mov    %rdi,%rbx
  23:	f6 47 21 10          	testb  $0x10,0x21(%rdi)
  27:	74 04                	je     0x2d
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	48 8b 03             	mov    (%rbx),%rax
  30:	8b 80 dc 00 00 00    	mov    0xdc(%rax),%eax
  36:	ff c8                	dec    %eax
  38:	7e 10                	jle    0x4a
  3a:	80 4b 20 01          	orb    $0x1,0x20(%rbx)
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	48 8b 03             	mov    (%rbx),%rax
   6:	8b 80 dc 00 00 00    	mov    0xdc(%rax),%eax
   c:	ff c8                	dec    %eax
   e:	7e 10                	jle    0x20
  10:	80 4b 20 01          	orb    $0x1,0x20(%rbx)
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[    5.217110][   T44] RSP: 0000:ffff888103fc7c28 EFLAGS: 00010202
[    5.217747][   T44] RAX: 0000000000000000 RBX: ffff888103fc7cc8 RCX: ffff888103fc7c68
[    5.218585][   T44] RDX: ffff888102b85000 RSI: ffff888103fc7cc8 RDI: ffff888103fc7cc8
[    5.219466][   T44] RBP: ffff888103fc7c38 R08: 00007fffffffe000 R09: 00007ffffffff000
[    5.220295][   T44] R10: 0000000094692512 R11: ffff888101b54948 R12: 00007ffeaa1ad000
[    5.221108][   T44] R13: 0000000000000000 R14: ffff888103f70a00 R15: ffff888102b85000
[    5.221923][   T44] FS:  0000000000000000(0000) GS:0000000000000000(0000) knlGS:0000000000000000
[    5.222854][   T44] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    5.223545][   T44] CR2: ffff88883ffff000 CR3: 000000010172b000 CR4: 00000000000406b0
[    5.224429][   T44] Call Trace:
[    5.224782][   T44]  <TASK>
[    5.225096][   T44]  setup_arg_pages (fs/exec.c:674)
[    5.225621][   T44]  load_elf_binary (fs/binfmt_elf.c:1028 (discriminator 1))
[    5.226127][   T44]  ? exec_binprm (fs/exec.c:1670 fs/exec.c:1702)
[    5.226612][   T44]  ? __lock_release+0x4e/0x120
[    5.227188][   T44]  ? exec_binprm (fs/exec.c:1670 fs/exec.c:1702)
[    5.227678][   T44]  ? __this_cpu_preempt_check (lib/smp_processor_id.c:65)
[    5.228270][   T44]  exec_binprm (fs/exec.c:1672 fs/exec.c:1702)
[    5.228746][   T44]  bprm_execve (fs/exec.c:1754)
[    5.229212][   T44]  kernel_execve (fs/exec.c:1922)
[    5.229754][   T44]  call_usermodehelper_exec_async (kernel/umh.c:109)
[    5.230368][   T44]  ? umh_complete (kernel/umh.c:64)
[    5.230867][   T44]  ret_from_fork (arch/x86/kernel/process.c:164)
[    5.231341][   T44]  ? umh_complete (kernel/umh.c:64)
[    5.231813][   T44]  ret_from_fork_asm (arch/x86/entry/entry_64.S:258)
[    5.232321][   T44]  </TASK>
[    5.232643][   T44] irq event stamp: 469
[    5.233065][   T44] hardirqs last  enabled at (477): __up_console_sem (arch/x86/include/asm/irqflags.h:26 arch/x86/include/asm/irqflags.h:109 arch/x86/include/asm/irqflags.h:151 kernel/printk/printk.c:345)
[    5.234028][   T44] hardirqs last disabled at (484): __up_console_sem (kernel/printk/printk.c:343 (discriminator 3))
[    5.235062][   T44] softirqs last  enabled at (504): handle_softirqs (kernel/softirq.c:469 (discriminator 2) kernel/softirq.c:650 (discriminator 2))
[    5.236041][   T44] softirqs last disabled at (493): __do_softirq (kernel/softirq.c:657)
[    5.236959][   T44] ---[ end trace 0000000000000000 ]---


The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20251210/[email protected]



-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki