syzbot


WARNING in depot_fetch_stack

Status: upstream: reported on 2025/03/05 05:33
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+20024c0fe2bf6dbc8c1e@syzkaller.appspotmail.com
First crash: 105d, last: 7d11h
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [mm?] WARNING in depot_fetch_stack 0 (1) 2025/03/05 05:33

Sample crash report:
ref_tracker: reference already released.
ref_tracker: freed in:
------------[ cut here ]------------
pool index 40991 out of bounds (1409) for stack id 44b6a020
WARNING: CPU: 1 PID: 16186 at lib/stackdepot.c:451 depot_fetch_stack+0x95/0xc0 lib/stackdepot.c:451
Modules linked in:
CPU: 1 UID: 0 PID: 16186 Comm: syz-executor Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:depot_fetch_stack+0x95/0xc0 lib/stackdepot.c:451
Code: c7 d8 a7 1b 8f e8 eb 99 71 06 83 f8 01 75 b9 90 0f 0b 90 eb b3 90 48 c7 c7 28 43 d2 8d 89 e9 44 89 ea 89 de e8 2c db 6f fc 90 <0f> 0b 90 90 31 c0 eb bc 90 0f 0b 90 31 c0 eb b4 90 0f 0b 90 31 c0
RSP: 0018:ffffc9000417f118 EFLAGS: 00010082
RAX: 0000000000000000 RBX: 000000000000a01f RCX: ffffffff817ae368
RDX: ffff88802aff1e00 RSI: ffffffff817ae375 RDI: 0000000000000001
RBP: 0000000044b6a020 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 00000000000025b0
R13: 0000000000000581 R14: 0000000044b6a020 R15: ffff8880292e6818
FS:  0000555565e70500(0000) GS:ffff88812485e000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f40720e5000 CR3: 00000000614b7000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 stack_depot_fetch+0x28/0x60 lib/stackdepot.c:718
 stack_depot_print+0x1f/0x60 lib/stackdepot.c:756
 ref_tracker_free+0x6e8/0x830 lib/ref_tracker.c:252
 netdev_tracker_free include/linux/netdevice.h:4361 [inline]
 netdev_put include/linux/netdevice.h:4378 [inline]
 netdev_put include/linux/netdevice.h:4374 [inline]
 in_dev_finish_destroy+0xae/0x1d0 net/ipv4/devinet.c:258
 in_dev_put include/linux/inetdevice.h:290 [inline]
 inetdev_destroy net/ipv4/devinet.c:338 [inline]
 inetdev_event+0xf8b/0x18a0 net/ipv4/devinet.c:1656
 notifier_call_chain+0xbc/0x410 kernel/notifier.c:85
 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2230
 call_netdevice_notifiers_extack net/core/dev.c:2268 [inline]
 call_netdevice_notifiers net/core/dev.c:2282 [inline]
 unregister_netdevice_many_notify+0xf9d/0x2700 net/core/dev.c:12077
 unregister_netdevice_many net/core/dev.c:12140 [inline]
 unregister_netdevice_queue+0x305/0x3f0 net/core/dev.c:11984
 bpq_device_event+0x550/0x840 drivers/net/hamradio/bpqether.c:533
 notifier_call_chain+0xbc/0x410 kernel/notifier.c:85
 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2230
 call_netdevice_notifiers_extack net/core/dev.c:2268 [inline]
 call_netdevice_notifiers net/core/dev.c:2282 [inline]
 unregister_netdevice_many_notify+0xf9d/0x2700 net/core/dev.c:12077
 unregister_netdevice_many net/core/dev.c:12140 [inline]
 unregister_netdevice_queue+0x305/0x3f0 net/core/dev.c:11984
 unregister_netdevice include/linux/netdevice.h:3379 [inline]
 nsim_destroy+0x197/0x5d0 drivers/net/netdevsim/netdev.c:1068
 __nsim_dev_port_del+0x189/0x240 drivers/net/netdevsim/dev.c:1428
 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1440 [inline]
 nsim_dev_reload_destroy+0x10a/0x4d0 drivers/net/netdevsim/dev.c:1661
 nsim_drv_remove+0x52/0x1d0 drivers/net/netdevsim/dev.c:1676
 device_remove+0xcb/0x170 drivers/base/dd.c:567
 __device_release_driver drivers/base/dd.c:1272 [inline]
 device_release_driver_internal+0x44b/0x620 drivers/base/dd.c:1295
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3881
 device_unregister+0x1d/0xc0 drivers/base/core.c:3922
 nsim_bus_dev_del drivers/net/netdevsim/bus.c:462 [inline]
 del_device_store+0x355/0x4a0 drivers/net/netdevsim/bus.c:226
 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172
 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:145
 kernfs_fop_write_iter+0x354/0x510 fs/kernfs/file.c:334
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x6c7/0x1150 fs/read_write.c:686
 ksys_write+0x12a/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f749e78d3df
Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
RSP: 002b:00007ffc44fab0f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f749e78d3df
RDX: 0000000000000001 RSI: 00007ffc44fab140 RDI: 0000000000000005
RBP: 00007f749e811d8d R08: 0000000000000000 R09: 00007ffc44faaf47
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
R13: 00007ffc44fab140 R14: 00007f749f4e4620 R15: 0000000000000003
 </TASK>

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/06 23:58 upstream e271ed52b344 f61267d4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in depot_fetch_stack
2025/05/28 12:17 upstream 015a99fa7665 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in depot_fetch_stack
2025/05/24 02:37 upstream eccf6f2f6ab9 f8cc0c83 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in depot_fetch_stack
2025/05/16 10:27 upstream fee3e843b309 cfde8269 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in depot_fetch_stack
2025/05/04 06:39 upstream 2a239ffbebb5 b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in depot_fetch_stack
2025/05/03 06:19 upstream 2bfcee565c3a b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in depot_fetch_stack
2025/03/13 11:57 upstream b7f94fcf5546 44be8b44 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in depot_fetch_stack
2025/03/01 10:49 upstream 276f98efb64a 67cf5345 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in depot_fetch_stack
2025/03/01 06:30 upstream 276f98efb64a 67cf5345 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in depot_fetch_stack
2025/03/01 05:21 upstream 276f98efb64a 67cf5345 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in depot_fetch_stack
* Struck through repros no longer work on HEAD.