Hello,

kernel test robot noticed "BUG_sdebug_queued_cmd(Not_tainted):Objects_remaining_in_sdebug_queued_cmd_on__kmem_cache_shutdown()" on:

commit: 1107c7b24ee3280abfc59f1b9186e285cabdd3ec ("scsi: scsi_debug: Dynamically allocate sdebug_queued_cmd")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master

[test failed on linux-next/master 009795d283d1f9f043e5a4ff97d4140cde17e2d3]

in testcase: blktests
version: blktests-x86_64-7c20474-1_20230411
with following parameters:

	disk: 1HDD
	test: scsi-group-00

compiler: gcc-11
test machine: 16 threads 1 sockets Intel(R) Xeon(R) CPU D-1541 @ 2.10GHz (Broadwell-DE) with 48G memory

(please refer to attached dmesg/kmsg for entire log/backtrace)


If you fix the issue, kindly add following tag
| Reported-by: kernel test robot <yujie.liu@intel.com>
| Link: https://lore.kernel.org/oe-lkp/202304121312.c9f28490-yujie.liu@intel.com


[   86.085321][  T257] I/O error, dev sdc, sector 16256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.093541][ T7883] I/O error, dev sdc, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[   86.102712][  T257] Buffer I/O error on dev sdc, logical block 2032, async page read
[   86.111673][ T7883] scsi host6: waking up host to restart
[   86.241388][ T7968] sd 6:0:0:0: [sdc] Synchronizing SCSI cache
[   86.412245][ T7968] =============================================================================
[   86.422232][ T7968] BUG sdebug_queued_cmd (Not tainted): Objects remaining in sdebug_queued_cmd on __kmem_cache_shutdown()
[   86.434318][ T7968] -----------------------------------------------------------------------------
[   86.434318][ T7968]
[   86.447428][ T7968] Slab 0x000000004a1f3e4c objects=32 used=1 fp=0x000000003beccc72 flags=0x17ffffc0010200(slab|head|node=0|zone=2|lastcpupid=0x1fffff)
[   86.463155][ T7968] CPU: 6 PID: 7968 Comm: modprobe Not tainted 6.3.0-rc1-00017-g1107c7b24ee3 #1
[   86.473090][ T7968] Hardware name: Supermicro SYS-5018D-FN4T/X10SDV-8C-TLN4F, BIOS 1.1 03/02/2016
[   86.483089][ T7968] Call Trace:
[   86.487368][ T7968]  <TASK>
[ 86.491304][ T7968] dump_stack_lvl (lib/dump_stack.c:107 (discriminator 1))
[ 86.496794][ T7968] slab_err (mm/slub.c:995)
[ 86.501736][ T7968] ? _raw_spin_lock_bh (kernel/locking/spinlock.c:169)
[ 86.507633][ T7968] ? start_poll_synchronize_srcu (kernel/rcu/srcutree.c:1306)
[ 86.514412][ T7968] __kmem_cache_shutdown (include/linux/spinlock.h:350 mm/slub.c:4555 mm/slub.c:458
6 mm/slub.c:4618)
[ 86.520679][ T7968] kmem_cache_destroy (mm/slab_common.c:457 mm/slab_common.c:497 mm/slab_common.c:480)
[ 86.526588][ T7968] scsi_debug_exit (drivers/scsi/scsi_debug.c:7807) scsi_debug
[ 86.533315][ T7968] __do_sys_delete_module+0x2ea/0x530
[ 86.540713][ T7968] ? module_flags (kernel/module/main.c:694)
[ 86.546362][ T7968] ? __fget_light (include/linux/atomic/atomic-arch-fallback.h:227 include/linux/atomic/atomic-instrumented.h:35 fs/file.c:1015)
[ 86.551914][ T7968] ? __blkcg_punt_bio_submit (block/blk-cgroup.c:1840)
[ 86.558535][ T7968] ? _raw_spin_lock (arch/x86/include/asm/atomic.h:202 include/linux/atomic/atomic-instrumented.h:543 include/asm-generic/qspinlock.h:111 include/linux/spinlock.h:186 include/linux/spinlock_api_smp.h:134 kernel/locking/spinlock.c:154)
[ 86.564216][ T7968] ? exit_to_user_mode_loop (include/linux/sched.h:2326 include/linux/resume_user_mode.h:61 kernel/entry/common.c:171)
[ 86.570645][ T7968] ? exit_to_user_mode_prepare (kernel/entry/common.c:203)
[ 86.577274][ T7968] do_syscall_64 (arch/x86/entry/common.c:50 arch/x86/entry/common.c:80)
[ 86.582653][ T7968] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:120)
[   86.589532][ T7968] RIP: 0033:0x7fc41abd3417
[ 86.594904][ T7968] Code: 73 01 c3 48 8b 0d 79 1a 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 49 1a 0d 00 f7 d8 64 89 01 48
All code
========
   0:   73 01                   jae    0x3
   2:   c3                      ret
   3:   48 8b 0d 79 1a 0d 00    mov    0xd1a79(%rip),%rcx        # 0xd1a83
   a:   f7 d8                   neg    %eax
   c:   64 89 01                mov    %eax,%fs:(%rcx)
   f:   48 83 c8 ff             or     $0xffffffffffffffff,%rax
  13:   c3                      ret
  14:   66 2e 0f 1f 84 00 00    cs nopw 0x0(%rax,%rax,1)
  1b:   00 00 00
  1e:   0f 1f 44 00 00          nopl   0x0(%rax,%rax,1)
  23:   b8 b0 00 00 00          mov    $0xb0,%eax
  28:   0f 05                   syscall
  2a:*  48 3d 01 f0 ff ff       cmp    $0xfffffffffffff001,%rax         <-- trapping instruction
  30:   73 01                   jae    0x33
  32:   c3                      ret
  33:   48 8b 0d 49 1a 0d 00    mov    0xd1a49(%rip),%rcx        # 0xd1a83
  3a:   f7 d8                   neg    %eax
  3c:   64 89 01                mov    %eax,%fs:(%rcx)
  3f:   48                      rex.W

Code starting with the faulting instruction
===========================================
   0:   48 3d 01 f0 ff ff       cmp    $0xfffffffffffff001,%rax
   6:   73 01                   jae    0x9
   8:   c3                      ret
   9:   48 8b 0d 49 1a 0d 00    mov    0xd1a49(%rip),%rcx        # 0xd1a59
  10:   f7 d8                   neg    %eax
  12:   64 89 01                mov    %eax,%fs:(%rcx)
  15:   48                      rex.W
[   86.616691][ T7968] RSP: 002b:00007ffee059e858 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
[   86.626136][ T7968] RAX: ffffffffffffffda RBX: 000055ccc40b6d60 RCX: 00007fc41abd3417
[   86.635153][ T7968] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 000055ccc40b6dc8
[   86.644183][ T7968] RBP: 000055ccc40b6d60 R08: 0000000000000000 R09: 0000000000000000
[   86.653221][ T7968] R10: 00007fc41ac53ac0 R11: 0000000000000206 R12: 000055ccc40b6dc8
[   86.662252][ T7968] R13: 0000000000000000 R14: 0000000000000000 R15: 000055ccc40b6ee0
[   86.671283][ T7968]  </TASK>


-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests