Re: [bug report] BUG zs_handle-zram0 (Tainted: G S ): Objects remaining on __kmem_cache

linux-mm.kvack.org archive mirror
 help / color / mirror / Atom feed

* Re: [bug report] BUG zs_handle-zram0 (Tainted: G S ): Objects remaining on __kmem_cache_shutdown()
       [not found] <CAGVVp+UtpGoW5WEdEU7uVTtsSCjPN=ksN6EcvyypAtFDOUf30A@mail.gmail.com>
@ 2025-08-19 14:29 ` Changhui Zhong
  2025-09-09  2:17   ` Changhui Zhong
  0 siblings, 1 reply; 3+ messages in thread
From: Changhui Zhong @ 2025-08-19 14:29 UTC (permalink / raw)
  To: Linux Block Devices; +Cc: linux-mm

[ 5066.279543] =============================================================================
[ 5066.288672] BUG zspage-zram0 (Tainted: G S  B   W    L     ):
Objects remaining on __kmem_cache_shutdown()
[ 5066.299449] -----------------------------------------------------------------------------
[ 5066.299449]
[ 5066.310226] Object 0x000000003141ad3c @offset=840
[ 5066.315476] Object 0x000000008aac8ad7 @offset=1848
[ 5066.320823] Slab 0x00000000cce340bd objects=73 used=2
fp=0x000000003f8c10b1
flags=0x17ffffc0000200(workingset|node=0|zone=2|lastcpupid=0x1fffff)
[ 5066.335286] ------------[ cut here ]------------
[ 5066.340439] WARNING: CPU: 5 PID: 2847 at mm/slub.c:1171
__slab_err.part.0+0x19/0x20
[ 5066.348985] Modules linked in: zram 842_decompress lz4hc_compress
842_compress lz4_compress zstd_compress tls rpcsec_gss_krb5
auth_rpcgss nfsv4 dns_resolver nfs lockd grace nfs_localio netfs
rfkill intel_rapl_msr intel_rapl_common intel_uncore_frequency
intel_uncore_frequency_common i10nm_edac skx_edac_common nfit
libnvdimm x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm
mgag200 dax_hmem irqbypass cxl_acpi rapl cxl_port iTCO_wdt ipmi_ssif
intel_cstate cdc_ether iTCO_vendor_support cxl_core usbnet mei_me mii
i2c_algo_bit isst_if_mbox_pci intel_uncore einj isst_if_mmio
intel_th_gth i2c_i801 ioatdma mei pcspkr intel_th_pci isst_if_common
i2c_smbus intel_vsec intel_th dca intel_pch_thermal ipmi_si
acpi_power_meter acpi_ipmi ipmi_devintf ipmi_msghandler acpi_pad sg
loop fuse xfs sd_mod ahci libahci tg3 libata ghash_clmulni_intel wmi
sunrpc dm_mirror dm_region_hash dm_log dm_multipath dm_mod nfnetlink
[last unloaded: brd]
[ 5066.440862] CPU: 5 UID: 0 PID: 2847 Comm: bash Tainted: G S  B   W
  L      6.17.0-rc2+ #1 PREEMPT(voluntary)
[ 5066.452123] Tainted: [S]=CPU_OUT_OF_SPEC, [B]=BAD_PAGE, [W]=WARN,
[L]=SOFTLOCKUP
[ 5066.460379] Hardware name: Lenovo ThinkSystem SR650 V2/7Z73CTO1WW,
BIOS AFE118M-1.32 06/29/2022
[ 5066.470089] RIP: 0010:__slab_err.part.0+0x19/0x20
[ 5066.475330] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
90 0f 1f 44 00 00 e8 66 fc ff ff be 01 00 00 00 bf 05 00 00 00 e8 f7
83 10 00 <0f> 0b e9 10 c2 e7 00 48 c7 c7 3c 20 2f aa c6 05 6d 80 f3 01
01 e8
[ 5066.496286] RSP: 0018:ff7690a584a23c70 EFLAGS: 00010046
[ 5066.502116] RAX: 0000000000000000 RBX: ff462f22566d3700 RCX: 0000000000000027
[ 5066.510081] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005
[ 5066.518046] RBP: ff462f22566d3700 R08: 0000000000000000 R09: ff7690a584a23af8
[ 5066.526009] R10: ffffffffaa922e28 R11: 0000000000000003 R12: ff7690a584a23c90
[ 5066.533975] R13: ff462f2260d55000 R14: ffdd3f4b84835540 R15: ff462f2256413900
[ 5066.541940] FS:  00007f9902945740(0000) GS:ff462f25c45fb000(0000)
knlGS:0000000000000000
[ 5066.550971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 5066.557383] CR2: 000055b941e4ad98 CR3: 0000000109ef6001 CR4: 0000000000773ef0
[ 5066.565346] PKRU: 55555554
[ 5066.568364] Call Trace:
[ 5066.571092]  <TASK>
[ 5066.573433]  __kmem_cache_shutdown.cold+0x1c/0x46
[ 5066.578686]  kmem_cache_destroy+0x3f/0x150
[ 5066.583257]  zs_destroy_pool+0xd0/0xf0
[ 5066.587443]  zram_reset_device+0xdb/0x1c0 [zram]
[ 5066.592597]  reset_store+0xa8/0x110 [zram]
[ 5066.597170]  kernfs_fop_write_iter+0x13b/0x1f0
[ 5066.602130]  vfs_write+0x25d/0x450
[ 5066.605926]  ksys_write+0x6b/0xe0
[ 5066.609625]  do_syscall_64+0x7f/0x980
[ 5066.613703]  ? do_syscall_64+0xb1/0x980
[ 5066.617985]  ? do_user_addr_fault+0x206/0x690
[ 5066.622847]  ? clear_bhb_loop+0x50/0xa0
[ 5066.627127]  ? clear_bhb_loop+0x50/0xa0
[ 5066.631408]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 5066.637047] RIP: 0033:0x7f9902a41894
[ 5066.641034] Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f
84 00 00 00 00 00 f3 0f 1e fa 80 3d 35 d8 0d 00 00 74 13 b8 01 00 00
00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 48 83 ec 28 48 89 54 24
18 48
[ 5066.661991] RSP: 002b:00007fff33d6ab28 EFLAGS: 00000202 ORIG_RAX:
0000000000000001
[ 5066.670438] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9902a41894
[ 5066.678403] RDX: 0000000000000002 RSI: 0000556ee81a7570 RDI: 0000000000000001
[ 5066.686368] RBP: 0000556ee81a7570 R08: 0000000000000073 R09: 00000000ffffffff
[ 5066.694333] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[ 5066.702296] R13: 00007f9902b185c0 R14: 0000000000000002 R15: 00007f9902b15f00
[ 5066.710260]  </TASK>
[ 5066.712698] ---[ end trace 0000000000000000 ]---
[ 5066.717866] ------------[ cut here ]------------
[ 5066.723022] kmem_cache_destroy zspage-zram0: Slab cache still has
objects when called from zs_destroy_pool+0xd0/0xf0
[ 5066.723027] WARNING: CPU: 5 PID: 2847 at mm/slab_common.c:525
kmem_cache_destroy+0x13d/0x150
[ 5066.744196] Modules linked in: zram 842_decompress lz4hc_compress
842_compress lz4_compress zstd_compress tls rpcsec_gss_krb5
auth_rpcgss nfsv4 dns_resolver nfs lockd grace nfs_localio netfs
rfkill intel_rapl_msr intel_rapl_common intel_uncore_frequency
intel_uncore_frequency_common i10nm_edac skx_edac_common nfit
libnvdimm x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm
mgag200 dax_hmem irqbypass cxl_acpi rapl cxl_port iTCO_wdt ipmi_ssif
intel_cstate cdc_ether iTCO_vendor_support cxl_core usbnet mei_me mii
i2c_algo_bit isst_if_mbox_pci intel_uncore einj isst_if_mmio
intel_th_gth i2c_i801 ioatdma mei pcspkr intel_th_pci isst_if_common
i2c_smbus intel_vsec intel_th dca intel_pch_thermal ipmi_si
acpi_power_meter acpi_ipmi ipmi_devintf ipmi_msghandler acpi_pad sg
loop fuse xfs sd_mod ahci libahci tg3 libata ghash_clmulni_intel wmi
sunrpc dm_mirror dm_region_hash dm_log dm_multipath dm_mod nfnetlink
[last unloaded: brd]
[ 5066.836081] CPU: 5 UID: 0 PID: 2847 Comm: bash Tainted: G S  B   W
  L      6.17.0-rc2+ #1 PREEMPT(voluntary)
[ 5066.847347] Tainted: [S]=CPU_OUT_OF_SPEC, [B]=BAD_PAGE, [W]=WARN,
[L]=SOFTLOCKUP
[ 5066.855606] Hardware name: Lenovo ThinkSystem SR650 V2/7Z73CTO1WW,
BIOS AFE118M-1.32 06/29/2022
[ 5066.865318] RIP: 0010:kmem_cache_destroy+0x13d/0x150
[ 5066.870862] Code: 00 85 ed 74 92 eb b1 e8 91 38 df ff eb 8f 48 8b
53 60 48 8b 4c 24 10 48 c7 c6 b0 03 c8 a9 48 c7 c7 60 35 25 aa e8 33
b6 d2 ff <0f> 0b e9 0e ff ff ff e9 47 f8 a9 00 0f 1f 80 00 00 00 00 90
90 90
[ 5066.891823] RSP: 0018:ff7690a584a23ce0 EFLAGS: 00010286
[ 5066.897659] RAX: 0000000000000000 RBX: ff462f2256413900 RCX: 0000000000000027
[ 5066.905629] RDX: ff462f256fb5c188 RSI: 0000000000000001 RDI: ff462f256fb5c180
[ 5066.913595] RBP: 0000000000000001 R08: 0000000000000000 R09: ff7690a584a23b58
[ 5066.921555] R10: ffffffffaa922e28 R11: 0000000000000003 R12: ff462f22a1e2c600
[ 5066.929522] R13: 00000000000000ff R14: ff462f23185d1000 R15: ff462f2255ed6320
[ 5066.937480] FS:  00007f9902945740(0000) GS:ff462f25c45fb000(0000)
knlGS:0000000000000000
[ 5066.946514] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 5066.952930] CR2: 000055b941e4ad98 CR3: 0000000109ef6001 CR4: 0000000000773ef0
[ 5066.960896] PKRU: 55555554
[ 5066.963918] Call Trace:
[ 5066.966649]  <TASK>
[ 5066.968994]  zs_destroy_pool+0xd0/0xf0
[ 5066.973183]  zram_reset_device+0xdb/0x1c0 [zram]
[ 5066.978341]  reset_store+0xa8/0x110 [zram]
[ 5066.982919]  kernfs_fop_write_iter+0x13b/0x1f0
[ 5066.987881]  vfs_write+0x25d/0x450
[ 5066.991682]  ksys_write+0x6b/0xe0
[ 5066.995384]  do_syscall_64+0x7f/0x980
[ 5066.999475]  ? do_syscall_64+0xb1/0x980
[ 5067.003758]  ? do_user_addr_fault+0x206/0x690
[ 5067.008613]  ? clear_bhb_loop+0x50/0xa0
[ 5067.012897]  ? clear_bhb_loop+0x50/0xa0
[ 5067.017181]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 5067.022823] RIP: 0033:0x7f9902a41894
[ 5067.026814] Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f
84 00 00 00 00 00 f3 0f 1e fa 80 3d 35 d8 0d 00 00 74 13 b8 01 00 00
00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 48 83 ec 28 48 89 54 24
18 48
[ 5067.047765] RSP: 002b:00007fff33d6ab28 EFLAGS: 00000202 ORIG_RAX:
0000000000000001
[ 5067.056219] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9902a41894
[ 5067.064187] RDX: 0000000000000002 RSI: 0000556ee81a7570 RDI: 0000000000000001
[ 5067.072155] RBP: 0000556ee81a7570 R08: 0000000000000073 R09: 00000000ffffffff
[ 5067.080124] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[ 5067.088093] R13: 00007f9902b185c0 R14: 0000000000000002 R15: 00007f9902b15f00
[ 5067.096060]  </TASK>
[ 5067.098500] ---[ end trace 0000000000000000 ]---



On Tue, Aug 19, 2025 at 10:20 PM Changhui Zhong <czhong@redhat.com> wrote:
>
> Hello,
>
> the following bug and warning was triggered,
> please help check and let me know if you need any info/test, thanks.
>
> repo：https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
> branch：master
> INFO: HEAD of cloned kernel：
> commit be48bcf004f9d0c9207ff21d0edb3b42f253829e
> Merge: 074e461d9ed5 74857fdc5dd2
> Author: Linus Torvalds <torvalds@linux-foundation.org>
> Date:   Mon Aug 18 09:17:42 2025 -0700
>
>     Merge tag 'for-6.17-rc2-tag' of
> git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux
>
> reproducer:
> # modprobe zram
> # zramctl --find --size 4G --algorithm zstd
> # fio --name=test \
>         --filename=/dev/zram0 \
>         --rw=randrw \
>         --bs=4k \
>         --ioengine=libaio \
>         --iodepth=16 \
>         --numjobs=4 \
>         --runtime=60 \
>         --time_based \
>         --group_reporting \
>         --direct=1
> # echo 1 > /sys/block/zram0/reset
>
> dmesg log:
> [ 4861.143371] zsmalloc: Class-80 fullness group 1 is not empty
> [ 4861.149696] zsmalloc: Class-112 fullness group 1 is not empty
> [ 4861.156121] zsmalloc: Class-144 fullness group 1 is not empty
> [ 4861.162541] zsmalloc: Class-160 fullness group 1 is not empty
> [ 4861.168963] zsmalloc: Class-176 fullness group 1 is not empty
> [ 4861.175379] zsmalloc: Class-192 fullness group 1 is not empty
> [ 4861.181797] zsmalloc: Class-224 fullness group 1 is not empty
> [ 4861.205986] =============================================================================
> [ 4861.215123] BUG zs_handle-zram0 (Tainted: G S                 ):
> Objects remaining on __kmem_cache_shutdown()
> [ 4861.226193] -----------------------------------------------------------------------------
> [ 4861.226193]
> [ 4861.236981] Object 0x00000000364c25c1 @offset=3336
> [ 4861.242331] Slab 0x0000000040c2ee59 objects=512 used=1
> fp=0x00000000ad7304d7
> flags=0x17ffffc0000200(workingset|node=0|zone=2|lastcpupid=0x1fffff)
> [ 4861.256893] Disabling lock debugging due to kernel taint
> [ 4861.262831] ------------[ cut here ]------------
> [ 4861.267982] WARNING: CPU: 23 PID: 2847 at mm/slub.c:1171
> __slab_err.part.0+0x19/0x20
> [ 4861.276635] Modules linked in: zram 842_decompress lz4hc_compress
> 842_compress lz4_compress zstd_compress tls rpcsec_gss_krb5
> auth_rpcgss nfsv4 dns_resolver nfs lockd grace nfs_localio netfs
> rfkill intel_rapl_msr intel_rapl_common intel_uncore_frequency
> intel_uncore_frequency_common i10nm_edac skx_edac_common nfit
> libnvdimm x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm
> mgag200 dax_hmem irqbypass cxl_acpi rapl cxl_port iTCO_wdt ipmi_ssif
> intel_cstate cdc_ether iTCO_vendor_support cxl_core usbnet mei_me mii
> i2c_algo_bit isst_if_mbox_pci intel_uncore einj isst_if_mmio
> intel_th_gth i2c_i801 ioatdma mei pcspkr intel_th_pci isst_if_common
> i2c_smbus intel_vsec intel_th dca intel_pch_thermal ipmi_si
> acpi_power_meter acpi_ipmi ipmi_devintf ipmi_msghandler acpi_pad sg
> loop fuse xfs sd_mod ahci libahci tg3 libata ghash_clmulni_intel wmi
> sunrpc dm_mirror dm_region_hash dm_log dm_multipath dm_mod nfnetlink
> [last unloaded: brd]
> [ 4861.368551] CPU: 23 UID: 0 PID: 2847 Comm: bash Tainted: G S  B
>           6.17.0-rc2+ #1 PREEMPT(voluntary)
> [ 4861.379913] Tainted: [S]=CPU_OUT_OF_SPEC, [B]=BAD_PAGE
> [ 4861.385639] Hardware name: Lenovo ThinkSystem SR650 V2/7Z73CTO1WW,
> BIOS AFE118M-1.32 06/29/2022
> [ 4861.395350] RIP: 0010:__slab_err.part.0+0x19/0x20
> [ 4861.400604] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
> 90 0f 1f 44 00 00 e8 66 fc ff ff be 01 00 00 00 bf 05 00 00 00 e8 f7
> 83 10 00 <0f> 0b e9 10 c2 e7 00 48 c7 c7 3c 20 2f aa c6 05 6d 80 f3 01
> 01 e8
> [ 4861.421562] RSP: 0018:ff7690a584a23c70 EFLAGS: 00010046
> [ 4861.427387] RAX: 0000000000000000 RBX: ffdd3f4b88085780 RCX: 0000000000000027
> [ 4861.435345] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ff462f256ffdc180
> [ 4861.443310] RBP: ff462f22566d3740 R08: 0000000000000000 R09: ff7690a584a23ae8
> [ 4861.451276] R10: ffffffffaa922e28 R11: 0000000000000003 R12: ff7690a584a23c90
> [ 4861.459242] R13: ff462f224a3f5000 R14: ffdd3f4b8428fd40 R15: ff462f2256412a00
> [ 4861.467207] FS:  00007f9902945740(0000) GS:ff462f25c4a7b000(0000)
> knlGS:0000000000000000
> [ 4861.476230] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [ 4861.482646] CR2: 0000556ee84d1f90 CR3: 0000000109ef6002 CR4: 0000000000773ef0
> [ 4861.490613] PKRU: 55555554
> [ 4861.493624] Call Trace:
> [ 4861.496354]  <TASK>
> [ 4861.498686]  __kmem_cache_shutdown.cold+0x1c/0x46
> [ 4861.503941]  kmem_cache_destroy+0x3f/0x150
> [ 4861.508517]  zs_destroy_pool+0xc4/0xf0
> [ 4861.512706]  zram_reset_device+0xdb/0x1c0 [zram]
> [ 4861.517866]  reset_store+0xa8/0x110 [zram]
> [ 4861.522443]  kernfs_fop_write_iter+0x13b/0x1f0
> [ 4861.527406]  vfs_write+0x25d/0x450
> [ 4861.531205]  ksys_write+0x6b/0xe0
> [ 4861.534907]  do_syscall_64+0x7f/0x980
> [ 4861.538996]  ? do_syscall_64+0xb1/0x980
> [ 4861.543279]  ? do_user_addr_fault+0x206/0x690
> [ 4861.548143]  ? clear_bhb_loop+0x50/0xa0
> [ 4861.552426]  ? clear_bhb_loop+0x50/0xa0
> [ 4861.556706]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> [ 4861.562345] RIP: 0033:0x7f9902a41894
> [ 4861.566328] Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f
> 84 00 00 00 00 00 f3 0f 1e fa 80 3d 35 d8 0d 00 00 74 13 b8 01 00 00
> 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 48 83 ec 28 48 89 54 24
> 18 48
> [ 4861.587279] RSP: 002b:00007fff33d6ab28 EFLAGS: 00000202 ORIG_RAX:
> 0000000000000001
> [ 4861.595729] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9902a41894
> [ 4861.603693] RDX: 0000000000000002 RSI: 0000556ee81a7570 RDI: 0000000000000001
> [ 4861.611659] RBP: 0000556ee81a7570 R08: 0000000000000073 R09: 00000000ffffffff
> [ 4861.619616] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
> [ 4861.627580] R13: 00007f9902b185c0 R14: 0000000000000002 R15: 00007f9902b15f00
> [ 4861.635548]  </TASK>
> [ 4861.637985] ---[ end trace 0000000000000000 ]---
>
> Best Regards,
> Changhui



^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: [bug report] BUG zs_handle-zram0 (Tainted: G S ): Objects remaining on __kmem_cache_shutdown()
  2025-08-19 14:29 ` [bug report] BUG zs_handle-zram0 (Tainted: G S ): Objects remaining on __kmem_cache_shutdown() Changhui Zhong
@ 2025-09-09  2:17   ` Changhui Zhong
  2025-09-09  2:30     ` Andrew Morton
  0 siblings, 1 reply; 3+ messages in thread
From: Changhui Zhong @ 2025-09-09  2:17 UTC (permalink / raw)
  To: Linux Block Devices, linux-mm; +Cc: akpm

I still see this issue on v6.17.0-rc5, please take a look if you have a chance

[ 6915.287305] BUG zs_handle-zram0 (Tainted: G S                 ):
Objects remaining on __kmem_cache_shutdown()
[ 6915.298379] -----------------------------------------------------------------------------
[ 6915.298379]
[ 6915.309166] Object 0x0000000023ce3ee6 @offset=960
[ 6915.314421] Slab 0x00000000913eaa62 objects=128 used=1
fp=0x0000000064bf6df4
flags=0x17ffffc0000200(workingset|node=0|zone=2|lastcpupid=0x1fffff)
[ 6915.329002] ------------[ cut here ]------------
[ 6915.334159] WARNING: CPU: 2 PID: 7198 at mm/slub.c:1176
__slab_err.part.0+0x19/0x20
[ 6915.342713] Modules linked in: zram 842_decompress lz4hc_compress
842_compress lz4_compress zstd_compress tls rpcsec_gss_krb5
auth_rpcgss nfsv4 dns_resolver nfs lockd grace nfs_localio netfs
intel_rapl_msr intel_rapl_common intel_uncore_frequency
intel_uncore_frequency_common i10nm_edac skx_edac_common nfit
libnvdimm x86_pkg_temp_thermal intel_powerclamp rfkill coretemp
kvm_intel kvm dax_hmem cxl_acpi cxl_port irqbypass cxl_core iTCO_wdt
cdc_ether rapl iTCO_vendor_support usbnet intel_cstate mii
intel_uncore mgag200 intel_th_gth isst_if_mbox_pci einj i2c_i801
i2c_algo_bit isst_if_mmio pcspkr mei_me isst_if_common intel_th_pci
ioatdma i2c_smbus mei intel_vsec acpi_power_meter ipmi_ssif
intel_pch_thermal intel_th dca ipmi_si acpi_ipmi ipmi_devintf
ipmi_msghandler acpi_pad sg fuse loop xfs sd_mod ghash_clmulni_intel
ahci libahci tg3 libata wmi sunrpc dm_mirror dm_region_hash dm_log
dm_multipath dm_mod nfnetlink [last unloaded: brd]
[ 6915.434755] CPU: 2 UID: 0 PID: 7198 Comm: bash Kdump: loaded
Tainted: G S  B               6.17.0-rc5 #1 PREEMPT(voluntary)
[ 6915.447281] Tainted: [S]=CPU_OUT_OF_SPEC, [B]=BAD_PAGE
[ 6915.453016] Hardware name: Lenovo ThinkSystem SR650 V2/7Z73CTO1WW,
BIOS AFE118M-1.32 06/29/2022
[ 6915.462728] RIP: 0010:__slab_err.part.0+0x19/0x20
[ 6915.467981] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
90 0f 1f 44 00 00 e8 f6 fc ff ff be 01 00 00 00 bf 05 00 00 00 e8 77
bf 29 00 <0f> 0b c3 cc cc cc cc 48 89 ee 48 c7 c7 eb a2 86 ab c6 05 10
13 c4
[ 6915.488939] RSP: 0018:ffa0000002fcf918 EFLAGS: 00010046
[ 6915.494773] RAX: 0000000000000000 RBX: ffd400000b6c3b80 RCX: ffffffffa80d3a9a
[ 6915.502740] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffadd3f180
[ 6915.510706] RBP: ff11000149c51140 R08: 0000000000000001 R09: fffffbfff5ba7e30
[ 6915.518672] R10: ffffffffadd3f187 R11: 0000000062616c53 R12: ff11000285ff0000
[ 6915.526640] R13: ff11000285ff1000 R14: ff11000149c4f040 R15: ffd400000a17fc00
[ 6915.534605] FS:  00007f9aa117a740(0000) GS:ff1100043db3d000(0000)
knlGS:0000000000000000
[ 6915.543637] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 6915.550051] CR2: 000056332051e698 CR3: 00000001485c1002 CR4: 0000000000773ef0
[ 6915.558017] PKRU: 55555554
[ 6915.561037] Call Trace:
[ 6915.563766]  <TASK>
[ 6915.566108]  __kmem_cache_shutdown.cold+0x1c/0x43
[ 6915.571364]  kmem_cache_destroy+0x68/0x170
[ 6915.575938]  zs_destroy_pool+0x18b/0x250
[ 6915.580319]  zram_reset_device+0x233/0x600 [zram]
[ 6915.585576]  reset_store+0x20b/0x300 [zram]
[ 6915.590252]  ? __pfx_reset_store+0x10/0x10 [zram]
[ 6915.595506]  ? sysfs_file_kobj+0xb3/0x1c0
[ 6915.599982]  ? sysfs_file_kobj+0xbd/0x1c0
[ 6915.604449]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 6915.609315]  kernfs_fop_write_iter+0x3a3/0x5a0
[ 6915.614278]  vfs_write+0x522/0xfd0
[ 6915.618078]  ? __pfx_vfs_write+0x10/0x10
[ 6915.622459]  ? local_clock_noinstr+0xd/0xe0
[ 6915.627130]  ? __lock_release.isra.0+0x1a4/0x2c0
[ 6915.632287]  ksys_write+0xf9/0x1d0
[ 6915.636086]  ? __pfx_ksys_write+0x10/0x10
[ 6915.640561]  ? lockdep_hardirqs_on+0x78/0x100
[ 6915.645426]  do_syscall_64+0x94/0x8d0
[ 6915.649515]  ? ktime_get_coarse_real_ts64+0x121/0x180
[ 6915.655155]  ? lockdep_hardirqs_on+0x78/0x100
[ 6915.660022]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 6915.665855]  ? lockdep_hardirqs_on+0x78/0x100
[ 6915.670719]  ? do_syscall_64+0x139/0x8d0
[ 6915.675089]  ? __x64_sys_openat+0x108/0x1d0
[ 6915.679762]  ? __pfx___x64_sys_openat+0x10/0x10
[ 6915.684819]  ? lockdep_hardirqs_on+0x78/0x100
[ 6915.689684]  ? syscall_trace_enter+0x13e/0x240
[ 6915.694648]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 6915.700481]  ? lockdep_hardirqs_on+0x78/0x100
[ 6915.705347]  ? do_syscall_64+0x139/0x8d0
[ 6915.709726]  ? rcu_is_watching+0x15/0xb0
[ 6915.714106]  ? clear_bhb_loop+0x50/0xa0
[ 6915.718390]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 6915.724031] RIP: 0033:0x7f9aa1276cd4
[ 6915.728023] Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f
84 00 00 00 00 00 f3 0f 1e fa 80 3d f5 d3 0d 00 00 74 13 b8 01 00 00
00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 48 83 ec 28 48 89 54 24
18 48
[ 6915.748982] RSP: 002b:00007fff12e38d88 EFLAGS: 00000202 ORIG_RAX:
0000000000000001
[ 6915.757433] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9aa1276cd4
[ 6915.765400] RDX: 0000000000000002 RSI: 000055cb65bac570 RDI: 0000000000000001
[ 6915.773356] RBP: 000055cb65bac570 R08: 0000000000000073 R09: 00000000ffffffff
[ 6915.781322] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[ 6915.789280] R13: 00007f9aa134d5c0 R14: 0000000000000002 R15: 00007f9aa134af00
[ 6915.797249]  </TASK>



On Tue, Aug 19, 2025 at 10:29 PM Changhui Zhong <czhong@redhat.com> wrote:
>
> [ 5066.279543] =============================================================================
> [ 5066.288672] BUG zspage-zram0 (Tainted: G S  B   W    L     ):
> Objects remaining on __kmem_cache_shutdown()
> [ 5066.299449] -----------------------------------------------------------------------------
> [ 5066.299449]
> [ 5066.310226] Object 0x000000003141ad3c @offset=840
> [ 5066.315476] Object 0x000000008aac8ad7 @offset=1848
> [ 5066.320823] Slab 0x00000000cce340bd objects=73 used=2
> fp=0x000000003f8c10b1
> flags=0x17ffffc0000200(workingset|node=0|zone=2|lastcpupid=0x1fffff)
> [ 5066.335286] ------------[ cut here ]------------
> [ 5066.340439] WARNING: CPU: 5 PID: 2847 at mm/slub.c:1171
> __slab_err.part.0+0x19/0x20
> [ 5066.348985] Modules linked in: zram 842_decompress lz4hc_compress
> 842_compress lz4_compress zstd_compress tls rpcsec_gss_krb5
> auth_rpcgss nfsv4 dns_resolver nfs lockd grace nfs_localio netfs
> rfkill intel_rapl_msr intel_rapl_common intel_uncore_frequency
> intel_uncore_frequency_common i10nm_edac skx_edac_common nfit
> libnvdimm x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm
> mgag200 dax_hmem irqbypass cxl_acpi rapl cxl_port iTCO_wdt ipmi_ssif
> intel_cstate cdc_ether iTCO_vendor_support cxl_core usbnet mei_me mii
> i2c_algo_bit isst_if_mbox_pci intel_uncore einj isst_if_mmio
> intel_th_gth i2c_i801 ioatdma mei pcspkr intel_th_pci isst_if_common
> i2c_smbus intel_vsec intel_th dca intel_pch_thermal ipmi_si
> acpi_power_meter acpi_ipmi ipmi_devintf ipmi_msghandler acpi_pad sg
> loop fuse xfs sd_mod ahci libahci tg3 libata ghash_clmulni_intel wmi
> sunrpc dm_mirror dm_region_hash dm_log dm_multipath dm_mod nfnetlink
> [last unloaded: brd]
> [ 5066.440862] CPU: 5 UID: 0 PID: 2847 Comm: bash Tainted: G S  B   W
>   L      6.17.0-rc2+ #1 PREEMPT(voluntary)
> [ 5066.452123] Tainted: [S]=CPU_OUT_OF_SPEC, [B]=BAD_PAGE, [W]=WARN,
> [L]=SOFTLOCKUP
> [ 5066.460379] Hardware name: Lenovo ThinkSystem SR650 V2/7Z73CTO1WW,
> BIOS AFE118M-1.32 06/29/2022
> [ 5066.470089] RIP: 0010:__slab_err.part.0+0x19/0x20
> [ 5066.475330] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
> 90 0f 1f 44 00 00 e8 66 fc ff ff be 01 00 00 00 bf 05 00 00 00 e8 f7
> 83 10 00 <0f> 0b e9 10 c2 e7 00 48 c7 c7 3c 20 2f aa c6 05 6d 80 f3 01
> 01 e8
> [ 5066.496286] RSP: 0018:ff7690a584a23c70 EFLAGS: 00010046
> [ 5066.502116] RAX: 0000000000000000 RBX: ff462f22566d3700 RCX: 0000000000000027
> [ 5066.510081] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005
> [ 5066.518046] RBP: ff462f22566d3700 R08: 0000000000000000 R09: ff7690a584a23af8
> [ 5066.526009] R10: ffffffffaa922e28 R11: 0000000000000003 R12: ff7690a584a23c90
> [ 5066.533975] R13: ff462f2260d55000 R14: ffdd3f4b84835540 R15: ff462f2256413900
> [ 5066.541940] FS:  00007f9902945740(0000) GS:ff462f25c45fb000(0000)
> knlGS:0000000000000000
> [ 5066.550971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [ 5066.557383] CR2: 000055b941e4ad98 CR3: 0000000109ef6001 CR4: 0000000000773ef0
> [ 5066.565346] PKRU: 55555554
> [ 5066.568364] Call Trace:
> [ 5066.571092]  <TASK>
> [ 5066.573433]  __kmem_cache_shutdown.cold+0x1c/0x46
> [ 5066.578686]  kmem_cache_destroy+0x3f/0x150
> [ 5066.583257]  zs_destroy_pool+0xd0/0xf0
> [ 5066.587443]  zram_reset_device+0xdb/0x1c0 [zram]
> [ 5066.592597]  reset_store+0xa8/0x110 [zram]
> [ 5066.597170]  kernfs_fop_write_iter+0x13b/0x1f0
> [ 5066.602130]  vfs_write+0x25d/0x450
> [ 5066.605926]  ksys_write+0x6b/0xe0
> [ 5066.609625]  do_syscall_64+0x7f/0x980
> [ 5066.613703]  ? do_syscall_64+0xb1/0x980
> [ 5066.617985]  ? do_user_addr_fault+0x206/0x690
> [ 5066.622847]  ? clear_bhb_loop+0x50/0xa0
> [ 5066.627127]  ? clear_bhb_loop+0x50/0xa0
> [ 5066.631408]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> [ 5066.637047] RIP: 0033:0x7f9902a41894
> [ 5066.641034] Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f
> 84 00 00 00 00 00 f3 0f 1e fa 80 3d 35 d8 0d 00 00 74 13 b8 01 00 00
> 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 48 83 ec 28 48 89 54 24
> 18 48
> [ 5066.661991] RSP: 002b:00007fff33d6ab28 EFLAGS: 00000202 ORIG_RAX:
> 0000000000000001
> [ 5066.670438] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9902a41894
> [ 5066.678403] RDX: 0000000000000002 RSI: 0000556ee81a7570 RDI: 0000000000000001
> [ 5066.686368] RBP: 0000556ee81a7570 R08: 0000000000000073 R09: 00000000ffffffff
> [ 5066.694333] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
> [ 5066.702296] R13: 00007f9902b185c0 R14: 0000000000000002 R15: 00007f9902b15f00
> [ 5066.710260]  </TASK>
> [ 5066.712698] ---[ end trace 0000000000000000 ]---
> [ 5066.717866] ------------[ cut here ]------------
> [ 5066.723022] kmem_cache_destroy zspage-zram0: Slab cache still has
> objects when called from zs_destroy_pool+0xd0/0xf0
> [ 5066.723027] WARNING: CPU: 5 PID: 2847 at mm/slab_common.c:525
> kmem_cache_destroy+0x13d/0x150
> [ 5066.744196] Modules linked in: zram 842_decompress lz4hc_compress
> 842_compress lz4_compress zstd_compress tls rpcsec_gss_krb5
> auth_rpcgss nfsv4 dns_resolver nfs lockd grace nfs_localio netfs
> rfkill intel_rapl_msr intel_rapl_common intel_uncore_frequency
> intel_uncore_frequency_common i10nm_edac skx_edac_common nfit
> libnvdimm x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm
> mgag200 dax_hmem irqbypass cxl_acpi rapl cxl_port iTCO_wdt ipmi_ssif
> intel_cstate cdc_ether iTCO_vendor_support cxl_core usbnet mei_me mii
> i2c_algo_bit isst_if_mbox_pci intel_uncore einj isst_if_mmio
> intel_th_gth i2c_i801 ioatdma mei pcspkr intel_th_pci isst_if_common
> i2c_smbus intel_vsec intel_th dca intel_pch_thermal ipmi_si
> acpi_power_meter acpi_ipmi ipmi_devintf ipmi_msghandler acpi_pad sg
> loop fuse xfs sd_mod ahci libahci tg3 libata ghash_clmulni_intel wmi
> sunrpc dm_mirror dm_region_hash dm_log dm_multipath dm_mod nfnetlink
> [last unloaded: brd]
> [ 5066.836081] CPU: 5 UID: 0 PID: 2847 Comm: bash Tainted: G S  B   W
>   L      6.17.0-rc2+ #1 PREEMPT(voluntary)
> [ 5066.847347] Tainted: [S]=CPU_OUT_OF_SPEC, [B]=BAD_PAGE, [W]=WARN,
> [L]=SOFTLOCKUP
> [ 5066.855606] Hardware name: Lenovo ThinkSystem SR650 V2/7Z73CTO1WW,
> BIOS AFE118M-1.32 06/29/2022
> [ 5066.865318] RIP: 0010:kmem_cache_destroy+0x13d/0x150
> [ 5066.870862] Code: 00 85 ed 74 92 eb b1 e8 91 38 df ff eb 8f 48 8b
> 53 60 48 8b 4c 24 10 48 c7 c6 b0 03 c8 a9 48 c7 c7 60 35 25 aa e8 33
> b6 d2 ff <0f> 0b e9 0e ff ff ff e9 47 f8 a9 00 0f 1f 80 00 00 00 00 90
> 90 90
> [ 5066.891823] RSP: 0018:ff7690a584a23ce0 EFLAGS: 00010286
> [ 5066.897659] RAX: 0000000000000000 RBX: ff462f2256413900 RCX: 0000000000000027
> [ 5066.905629] RDX: ff462f256fb5c188 RSI: 0000000000000001 RDI: ff462f256fb5c180
> [ 5066.913595] RBP: 0000000000000001 R08: 0000000000000000 R09: ff7690a584a23b58
> [ 5066.921555] R10: ffffffffaa922e28 R11: 0000000000000003 R12: ff462f22a1e2c600
> [ 5066.929522] R13: 00000000000000ff R14: ff462f23185d1000 R15: ff462f2255ed6320
> [ 5066.937480] FS:  00007f9902945740(0000) GS:ff462f25c45fb000(0000)
> knlGS:0000000000000000
> [ 5066.946514] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [ 5066.952930] CR2: 000055b941e4ad98 CR3: 0000000109ef6001 CR4: 0000000000773ef0
> [ 5066.960896] PKRU: 55555554
> [ 5066.963918] Call Trace:
> [ 5066.966649]  <TASK>
> [ 5066.968994]  zs_destroy_pool+0xd0/0xf0
> [ 5066.973183]  zram_reset_device+0xdb/0x1c0 [zram]
> [ 5066.978341]  reset_store+0xa8/0x110 [zram]
> [ 5066.982919]  kernfs_fop_write_iter+0x13b/0x1f0
> [ 5066.987881]  vfs_write+0x25d/0x450
> [ 5066.991682]  ksys_write+0x6b/0xe0
> [ 5066.995384]  do_syscall_64+0x7f/0x980
> [ 5066.999475]  ? do_syscall_64+0xb1/0x980
> [ 5067.003758]  ? do_user_addr_fault+0x206/0x690
> [ 5067.008613]  ? clear_bhb_loop+0x50/0xa0
> [ 5067.012897]  ? clear_bhb_loop+0x50/0xa0
> [ 5067.017181]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> [ 5067.022823] RIP: 0033:0x7f9902a41894
> [ 5067.026814] Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f
> 84 00 00 00 00 00 f3 0f 1e fa 80 3d 35 d8 0d 00 00 74 13 b8 01 00 00
> 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 48 83 ec 28 48 89 54 24
> 18 48
> [ 5067.047765] RSP: 002b:00007fff33d6ab28 EFLAGS: 00000202 ORIG_RAX:
> 0000000000000001
> [ 5067.056219] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9902a41894
> [ 5067.064187] RDX: 0000000000000002 RSI: 0000556ee81a7570 RDI: 0000000000000001
> [ 5067.072155] RBP: 0000556ee81a7570 R08: 0000000000000073 R09: 00000000ffffffff
> [ 5067.080124] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
> [ 5067.088093] R13: 00007f9902b185c0 R14: 0000000000000002 R15: 00007f9902b15f00
> [ 5067.096060]  </TASK>
> [ 5067.098500] ---[ end trace 0000000000000000 ]---
>
>
>
> On Tue, Aug 19, 2025 at 10:20 PM Changhui Zhong <czhong@redhat.com> wrote:
> >
> > Hello,
> >
> > the following bug and warning was triggered,
> > please help check and let me know if you need any info/test, thanks.
> >
> > repo：https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
> > branch：master
> > INFO: HEAD of cloned kernel：
> > commit be48bcf004f9d0c9207ff21d0edb3b42f253829e
> > Merge: 074e461d9ed5 74857fdc5dd2
> > Author: Linus Torvalds <torvalds@linux-foundation.org>
> > Date:   Mon Aug 18 09:17:42 2025 -0700
> >
> >     Merge tag 'for-6.17-rc2-tag' of
> > git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux
> >
> > reproducer:
> > # modprobe zram
> > # zramctl --find --size 4G --algorithm zstd
> > # fio --name=test \
> >         --filename=/dev/zram0 \
> >         --rw=randrw \
> >         --bs=4k \
> >         --ioengine=libaio \
> >         --iodepth=16 \
> >         --numjobs=4 \
> >         --runtime=60 \
> >         --time_based \
> >         --group_reporting \
> >         --direct=1
> > # echo 1 > /sys/block/zram0/reset
> >
> > dmesg log:
> > [ 4861.143371] zsmalloc: Class-80 fullness group 1 is not empty
> > [ 4861.149696] zsmalloc: Class-112 fullness group 1 is not empty
> > [ 4861.156121] zsmalloc: Class-144 fullness group 1 is not empty
> > [ 4861.162541] zsmalloc: Class-160 fullness group 1 is not empty
> > [ 4861.168963] zsmalloc: Class-176 fullness group 1 is not empty
> > [ 4861.175379] zsmalloc: Class-192 fullness group 1 is not empty
> > [ 4861.181797] zsmalloc: Class-224 fullness group 1 is not empty
> > [ 4861.205986] =============================================================================
> > [ 4861.215123] BUG zs_handle-zram0 (Tainted: G S                 ):
> > Objects remaining on __kmem_cache_shutdown()
> > [ 4861.226193] -----------------------------------------------------------------------------
> > [ 4861.226193]
> > [ 4861.236981] Object 0x00000000364c25c1 @offset=3336
> > [ 4861.242331] Slab 0x0000000040c2ee59 objects=512 used=1
> > fp=0x00000000ad7304d7
> > flags=0x17ffffc0000200(workingset|node=0|zone=2|lastcpupid=0x1fffff)
> > [ 4861.256893] Disabling lock debugging due to kernel taint
> > [ 4861.262831] ------------[ cut here ]------------
> > [ 4861.267982] WARNING: CPU: 23 PID: 2847 at mm/slub.c:1171
> > __slab_err.part.0+0x19/0x20
> > [ 4861.276635] Modules linked in: zram 842_decompress lz4hc_compress
> > 842_compress lz4_compress zstd_compress tls rpcsec_gss_krb5
> > auth_rpcgss nfsv4 dns_resolver nfs lockd grace nfs_localio netfs
> > rfkill intel_rapl_msr intel_rapl_common intel_uncore_frequency
> > intel_uncore_frequency_common i10nm_edac skx_edac_common nfit
> > libnvdimm x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm
> > mgag200 dax_hmem irqbypass cxl_acpi rapl cxl_port iTCO_wdt ipmi_ssif
> > intel_cstate cdc_ether iTCO_vendor_support cxl_core usbnet mei_me mii
> > i2c_algo_bit isst_if_mbox_pci intel_uncore einj isst_if_mmio
> > intel_th_gth i2c_i801 ioatdma mei pcspkr intel_th_pci isst_if_common
> > i2c_smbus intel_vsec intel_th dca intel_pch_thermal ipmi_si
> > acpi_power_meter acpi_ipmi ipmi_devintf ipmi_msghandler acpi_pad sg
> > loop fuse xfs sd_mod ahci libahci tg3 libata ghash_clmulni_intel wmi
> > sunrpc dm_mirror dm_region_hash dm_log dm_multipath dm_mod nfnetlink
> > [last unloaded: brd]
> > [ 4861.368551] CPU: 23 UID: 0 PID: 2847 Comm: bash Tainted: G S  B
> >           6.17.0-rc2+ #1 PREEMPT(voluntary)
> > [ 4861.379913] Tainted: [S]=CPU_OUT_OF_SPEC, [B]=BAD_PAGE
> > [ 4861.385639] Hardware name: Lenovo ThinkSystem SR650 V2/7Z73CTO1WW,
> > BIOS AFE118M-1.32 06/29/2022
> > [ 4861.395350] RIP: 0010:__slab_err.part.0+0x19/0x20
> > [ 4861.400604] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
> > 90 0f 1f 44 00 00 e8 66 fc ff ff be 01 00 00 00 bf 05 00 00 00 e8 f7
> > 83 10 00 <0f> 0b e9 10 c2 e7 00 48 c7 c7 3c 20 2f aa c6 05 6d 80 f3 01
> > 01 e8
> > [ 4861.421562] RSP: 0018:ff7690a584a23c70 EFLAGS: 00010046
> > [ 4861.427387] RAX: 0000000000000000 RBX: ffdd3f4b88085780 RCX: 0000000000000027
> > [ 4861.435345] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ff462f256ffdc180
> > [ 4861.443310] RBP: ff462f22566d3740 R08: 0000000000000000 R09: ff7690a584a23ae8
> > [ 4861.451276] R10: ffffffffaa922e28 R11: 0000000000000003 R12: ff7690a584a23c90
> > [ 4861.459242] R13: ff462f224a3f5000 R14: ffdd3f4b8428fd40 R15: ff462f2256412a00
> > [ 4861.467207] FS:  00007f9902945740(0000) GS:ff462f25c4a7b000(0000)
> > knlGS:0000000000000000
> > [ 4861.476230] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> > [ 4861.482646] CR2: 0000556ee84d1f90 CR3: 0000000109ef6002 CR4: 0000000000773ef0
> > [ 4861.490613] PKRU: 55555554
> > [ 4861.493624] Call Trace:
> > [ 4861.496354]  <TASK>
> > [ 4861.498686]  __kmem_cache_shutdown.cold+0x1c/0x46
> > [ 4861.503941]  kmem_cache_destroy+0x3f/0x150
> > [ 4861.508517]  zs_destroy_pool+0xc4/0xf0
> > [ 4861.512706]  zram_reset_device+0xdb/0x1c0 [zram]
> > [ 4861.517866]  reset_store+0xa8/0x110 [zram]
> > [ 4861.522443]  kernfs_fop_write_iter+0x13b/0x1f0
> > [ 4861.527406]  vfs_write+0x25d/0x450
> > [ 4861.531205]  ksys_write+0x6b/0xe0
> > [ 4861.534907]  do_syscall_64+0x7f/0x980
> > [ 4861.538996]  ? do_syscall_64+0xb1/0x980
> > [ 4861.543279]  ? do_user_addr_fault+0x206/0x690
> > [ 4861.548143]  ? clear_bhb_loop+0x50/0xa0
> > [ 4861.552426]  ? clear_bhb_loop+0x50/0xa0
> > [ 4861.556706]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> > [ 4861.562345] RIP: 0033:0x7f9902a41894
> > [ 4861.566328] Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f
> > 84 00 00 00 00 00 f3 0f 1e fa 80 3d 35 d8 0d 00 00 74 13 b8 01 00 00
> > 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 48 83 ec 28 48 89 54 24
> > 18 48
> > [ 4861.587279] RSP: 002b:00007fff33d6ab28 EFLAGS: 00000202 ORIG_RAX:
> > 0000000000000001
> > [ 4861.595729] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9902a41894
> > [ 4861.603693] RDX: 0000000000000002 RSI: 0000556ee81a7570 RDI: 0000000000000001
> > [ 4861.611659] RBP: 0000556ee81a7570 R08: 0000000000000073 R09: 00000000ffffffff
> > [ 4861.619616] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
> > [ 4861.627580] R13: 00007f9902b185c0 R14: 0000000000000002 R15: 00007f9902b15f00
> > [ 4861.635548]  </TASK>
> > [ 4861.637985] ---[ end trace 0000000000000000 ]---
> >
> > Best Regards,
> > Changhui



^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: [bug report] BUG zs_handle-zram0 (Tainted: G S ): Objects remaining on __kmem_cache_shutdown()
  2025-09-09  2:17   ` Changhui Zhong
@ 2025-09-09  2:30     ` Andrew Morton
  0 siblings, 0 replies; 3+ messages in thread
From: Andrew Morton @ 2025-09-09  2:30 UTC (permalink / raw)
  To: Changhui Zhong
  Cc: Linux Block Devices, linux-mm, Minchan Kim, Sergey Senozhatsky

On Tue, 9 Sep 2025 10:17:17 +0800 Changhui Zhong <czhong@redhat.com> wrote:

> I still see this issue on v6.17.0-rc5, please take a look if you have a chance

Well it might be related to zram, although we haven't done much at all
with zram or zsmalloc in this cycle.

> [ 6915.287305] BUG zs_handle-zram0 (Tainted: G S                 ):
> Objects remaining on __kmem_cache_shutdown()
> [ 6915.298379] -----------------------------------------------------------------------------
> [ 6915.298379]
> [ 6915.309166] Object 0x0000000023ce3ee6 @offset=960
> [ 6915.314421] Slab 0x00000000913eaa62 objects=128 used=1
> fp=0x0000000064bf6df4
> flags=0x17ffffc0000200(workingset|node=0|zone=2|lastcpupid=0x1fffff)
> [ 6915.329002] ------------[ cut here ]------------
> [ 6915.334159] WARNING: CPU: 2 PID: 7198 at mm/slub.c:1176
> __slab_err.part.0+0x19/0x20
> [ 6915.342713] Modules linked in: zram 842_decompress lz4hc_compress
> 842_compress lz4_compress zstd_compress tls rpcsec_gss_krb5
> auth_rpcgss nfsv4 dns_resolver nfs lockd grace nfs_localio netfs
> intel_rapl_msr intel_rapl_common intel_uncore_frequency
> intel_uncore_frequency_common i10nm_edac skx_edac_common nfit
> libnvdimm x86_pkg_temp_thermal intel_powerclamp rfkill coretemp
> kvm_intel kvm dax_hmem cxl_acpi cxl_port irqbypass cxl_core iTCO_wdt
> cdc_ether rapl iTCO_vendor_support usbnet intel_cstate mii
> intel_uncore mgag200 intel_th_gth isst_if_mbox_pci einj i2c_i801
> i2c_algo_bit isst_if_mmio pcspkr mei_me isst_if_common intel_th_pci
> ioatdma i2c_smbus mei intel_vsec acpi_power_meter ipmi_ssif
> intel_pch_thermal intel_th dca ipmi_si acpi_ipmi ipmi_devintf
> ipmi_msghandler acpi_pad sg fuse loop xfs sd_mod ghash_clmulni_intel
> ahci libahci tg3 libata wmi sunrpc dm_mirror dm_region_hash dm_log
> dm_multipath dm_mod nfnetlink [last unloaded: brd]
> [ 6915.434755] CPU: 2 UID: 0 PID: 7198 Comm: bash Kdump: loaded
> Tainted: G S  B               6.17.0-rc5 #1 PREEMPT(voluntary)
> [ 6915.447281] Tainted: [S]=CPU_OUT_OF_SPEC, [B]=BAD_PAGE
> [ 6915.453016] Hardware name: Lenovo ThinkSystem SR650 V2/7Z73CTO1WW,
> BIOS AFE118M-1.32 06/29/2022
> [ 6915.462728] RIP: 0010:__slab_err.part.0+0x19/0x20
> [ 6915.467981] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
> 90 0f 1f 44 00 00 e8 f6 fc ff ff be 01 00 00 00 bf 05 00 00 00 e8 77
> bf 29 00 <0f> 0b c3 cc cc cc cc 48 89 ee 48 c7 c7 eb a2 86 ab c6 05 10
> 13 c4
> [ 6915.488939] RSP: 0018:ffa0000002fcf918 EFLAGS: 00010046
> [ 6915.494773] RAX: 0000000000000000 RBX: ffd400000b6c3b80 RCX: ffffffffa80d3a9a
> [ 6915.502740] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffadd3f180
> [ 6915.510706] RBP: ff11000149c51140 R08: 0000000000000001 R09: fffffbfff5ba7e30
> [ 6915.518672] R10: ffffffffadd3f187 R11: 0000000062616c53 R12: ff11000285ff0000
> [ 6915.526640] R13: ff11000285ff1000 R14: ff11000149c4f040 R15: ffd400000a17fc00
> [ 6915.534605] FS:  00007f9aa117a740(0000) GS:ff1100043db3d000(0000)
> knlGS:0000000000000000
> [ 6915.543637] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [ 6915.550051] CR2: 000056332051e698 CR3: 00000001485c1002 CR4: 0000000000773ef0
> [ 6915.558017] PKRU: 55555554
> [ 6915.561037] Call Trace:
> [ 6915.563766]  <TASK>
> [ 6915.566108]  __kmem_cache_shutdown.cold+0x1c/0x43
> [ 6915.571364]  kmem_cache_destroy+0x68/0x170
> [ 6915.575938]  zs_destroy_pool+0x18b/0x250
> [ 6915.580319]  zram_reset_device+0x233/0x600 [zram]
> [ 6915.585576]  reset_store+0x20b/0x300 [zram]
> [ 6915.590252]  ? __pfx_reset_store+0x10/0x10 [zram]
> [ 6915.595506]  ? sysfs_file_kobj+0xb3/0x1c0
> [ 6915.599982]  ? sysfs_file_kobj+0xbd/0x1c0
> [ 6915.604449]  ? __pfx_sysfs_kf_write+0x10/0x10
> [ 6915.609315]  kernfs_fop_write_iter+0x3a3/0x5a0
> [ 6915.614278]  vfs_write+0x522/0xfd0
> [ 6915.618078]  ? __pfx_vfs_write+0x10/0x10
> [ 6915.622459]  ? local_clock_noinstr+0xd/0xe0
> [ 6915.627130]  ? __lock_release.isra.0+0x1a4/0x2c0
> [ 6915.632287]  ksys_write+0xf9/0x1d0
> [ 6915.636086]  ? __pfx_ksys_write+0x10/0x10
> [ 6915.640561]  ? lockdep_hardirqs_on+0x78/0x100
> [ 6915.645426]  do_syscall_64+0x94/0x8d0
> [ 6915.649515]  ? ktime_get_coarse_real_ts64+0x121/0x180
> [ 6915.655155]  ? lockdep_hardirqs_on+0x78/0x100
> [ 6915.660022]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
> [ 6915.665855]  ? lockdep_hardirqs_on+0x78/0x100
> [ 6915.670719]  ? do_syscall_64+0x139/0x8d0
> [ 6915.675089]  ? __x64_sys_openat+0x108/0x1d0
> [ 6915.679762]  ? __pfx___x64_sys_openat+0x10/0x10
> [ 6915.684819]  ? lockdep_hardirqs_on+0x78/0x100
> [ 6915.689684]  ? syscall_trace_enter+0x13e/0x240
> [ 6915.694648]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
> [ 6915.700481]  ? lockdep_hardirqs_on+0x78/0x100
> [ 6915.705347]  ? do_syscall_64+0x139/0x8d0
> [ 6915.709726]  ? rcu_is_watching+0x15/0xb0
> [ 6915.714106]  ? clear_bhb_loop+0x50/0xa0
>
> ...
>
> > > reproducer:
> > > # modprobe zram
> > > # zramctl --find --size 4G --algorithm zstd
> > > # fio --name=test \
> > >         --filename=/dev/zram0 \
> > >         --rw=randrw \
> > >         --bs=4k \
> > >         --ioengine=libaio \
> > >         --iodepth=16 \
> > >         --numjobs=4 \
> > >         --runtime=60 \
> > >         --time_based \
> > >         --group_reporting \
> > >         --direct=1
> > > # echo 1 > /sys/block/zram0/reset
> > >
> > > dmesg log:
> > > [ 4861.143371] zsmalloc: Class-80 fullness group 1 is not empty
> > > [ 4861.149696] zsmalloc: Class-112 fullness group 1 is not empty
> > > [ 4861.156121] zsmalloc: Class-144 fullness group 1 is not empty
> > > [ 4861.162541] zsmalloc: Class-160 fullness group 1 is not empty
> > > [ 4861.168963] zsmalloc: Class-176 fullness group 1 is not empty
> > > [ 4861.175379] zsmalloc: Class-192 fullness group 1 is not empty
> > > [ 4861.181797] zsmalloc: Class-224 fullness group 1 is not empty

Minchan & Sergey, could you please give this a try?


^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2025-09-09  2:30 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
     [not found] <CAGVVp+UtpGoW5WEdEU7uVTtsSCjPN=ksN6EcvyypAtFDOUf30A@mail.gmail.com>
2025-08-19 14:29 ` [bug report] BUG zs_handle-zram0 (Tainted: G S ): Objects remaining on __kmem_cache_shutdown() Changhui Zhong
2025-09-09  2:17   ` Changhui Zhong
2025-09-09  2:30     ` Andrew Morton

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox