syzbot


WARNING: refcount bug in __set_page_owner

Status: moderation: reported on 2024/04/07 04:47
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+aafdd7ba0170fc29cdf5@syzkaller.appspotmail.com
First crash: 27d, last: 20d

Sample crash report:
------------[ cut here ]------------
refcount_t: saturated; leaking memory.
WARNING: CPU: 0 PID: 5537 at lib/refcount.c:22 refcount_warn_saturate+0xd4/0x210 lib/refcount.c:22
Modules linked in:
CPU: 0 PID: 5537 Comm: syz-executor.1 Not tainted 6.9.0-rc3-syzkaller-00023-g2c71fdf02a95 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:refcount_warn_saturate+0xd4/0x210 lib/refcount.c:22
Code: b7 09 0b 31 ff 89 de e8 2a 09 11 fd 84 db 75 dc e8 a1 0e 11 fd c6 05 b0 b7 09 0b 01 90 48 c7 c7 e0 ae 6e 8b e8 dd e2 d3 fc 90 <0f> 0b 90 90 eb bc e8 81 0e 11 fd 0f b6 1d 91 b7 09 0b 31 ff 89 de
RSP: 0018:ffffc9000dcb73a8 EFLAGS: 00010282

RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90003389000
RDX: 0000000000040000 RSI: ffffffff81512bf6 RDI: 0000000000000001
RBP: ffff88806d16f3ac R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000002 R12: 00000000c0000000
R13: ffff88801d3d04c8 R14: ffff88801d3d04e0 R15: 0000000000000007
FS:  0000000000000000(0000) GS:ffff88802c200000(0063) knlGS:00000000f5e6ab40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000edc6e000 CR3: 0000000026f48000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __refcount_add include/linux/refcount.h:192 [inline]
 __refcount_inc include/linux/refcount.h:241 [inline]
 refcount_inc include/linux/refcount.h:258 [inline]
 inc_stack_record_count mm/page_owner.c:220 [inline]
 __set_page_owner+0x62e/0x7f0 mm/page_owner.c:308
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x2d4/0x350 mm/page_alloc.c:1534
 prep_new_page mm/page_alloc.c:1541 [inline]
 get_page_from_freelist+0xa28/0x3780 mm/page_alloc.c:3317
 __alloc_pages+0x22b/0x2460 mm/page_alloc.c:4575
 alloc_pages_mpol+0x275/0x610 mm/mempolicy.c:2264
 shmem_alloc_folio+0x114/0x150 mm/shmem.c:1634

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/10 14:06 upstream 2c71fdf02a95 bb5e6c0f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING: refcount bug in __set_page_owner
2024/04/03 04:36 upstream b1e6ec0a0fd0 7925100d .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING: refcount bug in __set_page_owner
* Struck through repros no longer work on HEAD.