Received-SPF: pass (google.com: domain of linux-kernel+bounces-75834-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:45d1:ec00::1 as permitted sender) client-ip=2604:1380:45d1:ec00::1;
Precedence: bulk
MIME-Version: 1.0
References: <000000000000d305050611b50d09@google.com> <20240219022853-mutt-send-email-mst@kernel.org>
In-Reply-To: <20240219022853-mutt-send-email-mst@kernel.org>
From: Lei Yang <leiyang@redhat.com>
Date: Thu, 22 Feb 2024 11:06:55 +0800
Message-ID: <CAPpAL=y+-YrDUsKYVBig4dc-7+Cg1Lk_VWXPOKeL=s2Fitf3mA@mail.gmail.com>
Subject: Re: [syzbot] [virtualization?] linux-next boot error: WARNING:
 refcount bug in __free_pages_ok
To: "Michael S. Tsirkin" <mst@redhat.com>
Cc: syzbot <syzbot+6f3c38e8a6a0297caa5a@syzkaller.appspotmail.com>, 
	jasowang@redhat.com, linux-kernel@vger.kernel.org, linux-next@vger.kernel.org, 
	sfr@canb.auug.org.au, syzkaller-bugs@googlegroups.com, 
	virtualization@lists.linux.dev, xuanzhuo@linux.alibaba.com, 
	Andrew Morton <akpm@linux-foundation.org>, linux-mm@kvack.org
Content-Type: multipart/mixed; boundary="0000000000009694610611efbe5a"

--0000000000009694610611efbe5a
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi All

I hit a similar issue when doing a regression testing from my side.
For the error messages please help review the attachment.

The latest commit:
commit c02197fc9076e7d991c8f6adc11759c5ba52ddc6 (HEAD -> master,
origin/master, origin/HEAD)
Merge: f2667e0c3240 0846dd77c834
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sat Feb 17 16:59:31 2024 -0800

    Merge tag 'powerpc-6.8-3' of
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

    Pull powerpc fixes from Michael Ellerman:
     "This is a bit of a big batch for rc4, but just due to holiday hangove=
r
      and because I didn't send any fixes last week due to a late revert
      request. I think next week should be back to normal.

Regards
Lei

On Mon, Feb 19, 2024 at 3:35=E2=80=AFPM Michael S. Tsirkin <mst@redhat.com>=
 wrote:
>
> On Sun, Feb 18, 2024 at 09:06:18PM -0800, syzbot wrote:
> > Hello,
> >
> > syzbot found the following issue on:
> >
> > HEAD commit:    d37e1e4c52bc Add linux-next specific files for 20240216
> > git tree:       linux-next
> > console output: https://syzkaller.appspot.com/x/log.txt?x=3D171ca652180=
000
> > kernel config:  https://syzkaller.appspot.com/x/.config?x=3D4bc446d42a7=
d56c0
> > dashboard link: https://syzkaller.appspot.com/bug?extid=3D6f3c38e8a6a02=
97caa5a
> > compiler:       Debian clang version 15.0.6, GNU ld (GNU Binutils for D=
ebian) 2.40
> >
> > Downloadable assets:
> > disk image: https://storage.googleapis.com/syzbot-assets/14d0894504b9/d=
isk-d37e1e4c.raw.xz
> > vmlinux: https://storage.googleapis.com/syzbot-assets/6cda61e084ee/vmli=
nux-d37e1e4c.xz
> > kernel image: https://storage.googleapis.com/syzbot-assets/720c85283c05=
/bzImage-d37e1e4c.xz
> >
> > IMPORTANT: if you fix the issue, please add the following tag to the co=
mmit:
> > Reported-by: syzbot+6f3c38e8a6a0297caa5a@syzkaller.appspotmail.com
> >
> > Key type pkcs7_test registered
> > Block layer SCSI generic (bsg) driver version 0.4 loaded (major 239)
> > io scheduler mq-deadline registered
> > io scheduler kyber registered
> > io scheduler bfq registered
> > input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0
> > ACPI: button: Power Button [PWRF]
> > input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input1
> > ACPI: button: Sleep Button [SLPF]
> > ioatdma: Intel(R) QuickData Technology Driver 5.00
> > ACPI: \_SB_.LNKC: Enabled at IRQ 11
> > virtio-pci 0000:00:03.0: virtio_pci: leaving for legacy driver
> > ACPI: \_SB_.LNKD: Enabled at IRQ 10
> > virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver
> > ACPI: \_SB_.LNKB: Enabled at IRQ 10
> > virtio-pci 0000:00:06.0: virtio_pci: leaving for legacy driver
> > virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver
> > N_HDLC line discipline registered with maxframe=3D4096
> > Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled
> > 00:03: ttyS0 at I/O 0x3f8 (irq =3D 4, base_baud =3D 115200) is a 16550A
> > 00:04: ttyS1 at I/O 0x2f8 (irq =3D 3, base_baud =3D 115200) is a 16550A
> > 00:05: ttyS2 at I/O 0x3e8 (irq =3D 6, base_baud =3D 115200) is a 16550A
> > 00:06: ttyS3 at I/O 0x2e8 (irq =3D 7, base_baud =3D 115200) is a 16550A
> > Non-volatile memory driver v1.3
> > Linux agpgart interface v0.103
> > ACPI: bus type drm_connector registered
> > [drm] Initialized vgem 1.0.0 20120112 for vgem on minor 0
> > [drm] Initialized vkms 1.0.0 20180514 for vkms on minor 1
> > Console: switching to colour frame buffer device 128x48
> > platform vkms: [drm] fb0: vkmsdrmfb frame buffer device
> > usbcore: registered new interface driver udl
> > brd: module loaded
> > loop: module loaded
> > zram: Added device: zram0
> > null_blk: disk nullb0 created
> > null_blk: module loaded
> > Guest personality initialized and is inactive
> > VMCI host device registered (name=3Dvmci, major=3D10, minor=3D118)
> > Initialized host personality
> > usbcore: registered new interface driver rtsx_usb
> > usbcore: registered new interface driver viperboard
> > usbcore: registered new interface driver dln2
> > usbcore: registered new interface driver pn533_usb
> > nfcsim 0.2 initialized
> > usbcore: registered new interface driver port100
> > usbcore: registered new interface driver nfcmrvl
> > Loading iSCSI transport class v2.0-870.
> > virtio_scsi virtio0: 1/0/0 default/read/poll queues
> > ------------[ cut here ]------------
> > refcount_t: decrement hit 0; leaking memory.
> > WARNING: CPU: 0 PID: 1 at lib/refcount.c:31 refcount_warn_saturate+0xfa=
/0x1d0 lib/refcount.c:31
> > Modules linked in:
> > CPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.8.0-rc4-next-20240216-syzka=
ller #0
> > Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS=
 Google 01/25/2024
> > RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 lib/refcount.c:31
> > Code: b2 00 00 00 e8 b7 94 f0 fc 5b 5d c3 cc cc cc cc e8 ab 94 f0 fc c6=
 05 c6 16 ce 0a 01 90 48 c7 c7 a0 5a fe 8b e8 67 69 b4 fc 90 <0f> 0b 90 90 =
eb d9 e8 8b 94 f0 fc c6 05 a3 16 ce 0a 01 90 48 c7 c7
> > RSP: 0000:ffffc90000066e10 EFLAGS: 00010246
> > RAX: 15c2c224c9b50400 RBX: ffff888020827d2c RCX: ffff8880162d8000
> > RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
> > RBP: 0000000000000004 R08: ffffffff8157b942 R09: fffffbfff1bf95cc
> > R10: dffffc0000000000 R11: fffffbfff1bf95cc R12: ffffea000502fdc0
> > R13: ffffea000502fdc8 R14: 1ffffd4000a05fb9 R15: 0000000000000000
> > FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:00000000000=
00000
> > CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> > CR2: ffff88823ffff000 CR3: 000000000df32000 CR4: 00000000003506f0
> > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> > Call Trace:
> >  <TASK>
> >  reset_page_owner include/linux/page_owner.h:24 [inline]
> >  free_pages_prepare mm/page_alloc.c:1140 [inline]
> >  __free_pages_ok+0xc42/0xd70 mm/page_alloc.c:1269
> >  make_alloc_exact+0xc4/0x140 mm/page_alloc.c:4847
> >  vring_alloc_queue drivers/virtio/virtio_ring.c:319 [inline]
>
> Wow this seems to be breakage deep in mm/ - all virtio does is
> call alloc_pages_exact and that corrupts the refcounts?
>
>
> >  vring_alloc_queue_split+0x20a/0x600 drivers/virtio/virtio_ring.c:1108
> >  vring_create_virtqueue_split+0xc6/0x310 drivers/virtio/virtio_ring.c:1=
158
> >  vring_create_virtqueue+0xca/0x110 drivers/virtio/virtio_ring.c:2683
> >  setup_vq+0xe9/0x2d0 drivers/virtio/virtio_pci_legacy.c:131
> >  vp_setup_vq+0xbf/0x330 drivers/virtio/virtio_pci_common.c:189
> >  vp_find_vqs_msix+0x8b2/0xc80 drivers/virtio/virtio_pci_common.c:331
> >  vp_find_vqs+0x4c/0x4e0 drivers/virtio/virtio_pci_common.c:408
> >  virtio_find_vqs include/linux/virtio_config.h:233 [inline]
> >  virtscsi_init+0x8db/0xd00 drivers/scsi/virtio_scsi.c:887
> >  virtscsi_probe+0x3ea/0xf60 drivers/scsi/virtio_scsi.c:945
> >  virtio_dev_probe+0x991/0xaf0 drivers/virtio/virtio.c:311
> >  really_probe+0x29e/0xc50 drivers/base/dd.c:658
> >  __driver_probe_device+0x1a2/0x3e0 drivers/base/dd.c:800
> >  driver_probe_device+0x50/0x430 drivers/base/dd.c:830
> >  __driver_attach+0x45f/0x710 drivers/base/dd.c:1216
> >  bus_for_each_dev+0x239/0x2b0 drivers/base/bus.c:368
> >  bus_add_driver+0x347/0x620 drivers/base/bus.c:673
> >  driver_register+0x23a/0x320 drivers/base/driver.c:246
> >  virtio_scsi_init+0x65/0xe0 drivers/scsi/virtio_scsi.c:1083
> >  do_one_initcall+0x238/0x830 init/main.c:1233
> >  do_initcall_level+0x157/0x210 init/main.c:1295
> >  do_initcalls+0x3f/0x80 init/main.c:1311
> >  kernel_init_freeable+0x435/0x5d0 init/main.c:1543
> >  kernel_init+0x1d/0x2b0 init/main.c:1432
> >  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
> >  ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:242
> >  </TASK>
> >
> >
> > ---
> > This report is generated by a bot. It may contain errors.
> > See https://goo.gl/tpsmEJ for more information about syzbot.
> > syzbot engineers can be reached at syzkaller@googlegroups.com.
> >
> > syzbot will keep track of this issue. See:
> > https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
> >
> > If the report is already addressed, let syzbot know by replying with:
> > #syz fix: exact-commit-title
> >
> > If you want to overwrite report's subsystems, reply with:
> > #syz set subsystems: new-subsystem
> > (See the list of subsystem names on the web dashboard)
> >
> > If the report is a duplicate of another one, reply with:
> > #syz dup: exact-subject-of-another-report
> >
> > If you want to undo deduplication, reply with:
> > #syz undup
>
>

--0000000000009694610611efbe5a
Content-Type: application/octet-stream; name=log
Content-Disposition: attachment; filename=log
Content-Transfer-Encoding: base64
Content-ID: <f_lswn62pt0>
X-Attachment-Id: f_lswn62pt0
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--0000000000009694610611efbe5a--