syzbot


BUG: unable to handle kernel paging request in ethnl_update_bitset32
Status: fixed on 2020/04/15 17:19
Reported-by: syzbot+7fd4ed5b4234ab1fdccd@syzkaller.appspotmail.com
Fix commit: e34f1753eebc ethtool: limit bitset size
First crash: 818d, last: 805d

Sample crash report:
BUG: unable to handle page fault for address: ffffed1018515d87
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 21ffef067 P4D 21ffef067 PUD 12fff6067 PMD 0 
Oops: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 10745 Comm: syz-executor428 Not tainted 5.6.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:ethnl_bitmap32_not_zero net/ethtool/bitset.c:112 [inline]
RIP: 0010:ethnl_compact_sanity_checks net/ethtool/bitset.c:529 [inline]
RIP: 0010:ethnl_update_bitset32.part.0+0x8be/0x1820 net/ethtool/bitset.c:572
Code: 45 85 e4 0f 84 aa 03 00 00 e8 6e 31 05 fb 48 8b 85 c8 fe ff ff 4e 8d 2c a8 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 14 02 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 0c 84 d2 74 08 4c
RSP: 0018:ffffc9000624f248 EFLAGS: 00010a06
RAX: dffffc0000000000 RBX: ffff8880a28aec38 RCX: ffffffff867065d4
RDX: 1ffff11018515d87 RSI: ffffffff867065e2 RDI: 0000000000000005
RBP: ffffc9000624f3b0 R08: ffff888095116400 R09: ffffc9000624f318
R10: fffff52000c49e68 R11: ffffc9000624f347 R12: 0000000000000010
R13: ffff8880c28aec38 R14: ffff8880a28aec48 R15: ffffc9000624f388
FS:  0000000002218880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffed1018515d87 CR3: 0000000095e7e000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ethnl_update_bitset32 net/ethtool/bitset.c:562 [inline]
 ethnl_update_bitset+0x4d/0x67 net/ethtool/bitset.c:734
 ethnl_update_linkmodes net/ethtool/linkmodes.c:303 [inline]
 ethnl_set_linkmodes+0x461/0xc30 net/ethtool/linkmodes.c:357
 genl_family_rcv_msg_doit net/netlink/genetlink.c:672 [inline]
 genl_family_rcv_msg net/netlink/genetlink.c:717 [inline]
 genl_rcv_msg+0x67d/0xea0 net/netlink/genetlink.c:734
 netlink_rcv_skb+0x177/0x450 net/netlink/af_netlink.c:2478
 genl_rcv+0x29/0x40 net/netlink/genetlink.c:745
 netlink_unicast_kernel net/netlink/af_netlink.c:1303 [inline]
 netlink_unicast+0x59e/0x7e0 net/netlink/af_netlink.c:1329
 netlink_sendmsg+0x91c/0xea0 net/netlink/af_netlink.c:1918
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg+0xd7/0x130 net/socket.c:672
 ____sys_sendmsg+0x753/0x880 net/socket.c:2343
 ___sys_sendmsg+0x100/0x170 net/socket.c:2397
 __sys_sendmsg+0x105/0x1d0 net/socket.c:2430
 __do_sys_sendmsg net/socket.c:2439 [inline]
 __se_sys_sendmsg net/socket.c:2437 [inline]
 __x64_sys_sendmsg+0x78/0xb0 net/socket.c:2437
 do_syscall_64+0xfa/0x790 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x445b39
Code: e8 ac cb 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 ab cc fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffc5c441f88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000445b39
RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000bb1414ac
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000019474
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Modules linked in:
CR2: ffffed1018515d87
---[ end trace f8b2b97844867624 ]---
RIP: 0010:ethnl_bitmap32_not_zero net/ethtool/bitset.c:112 [inline]
RIP: 0010:ethnl_compact_sanity_checks net/ethtool/bitset.c:529 [inline]
RIP: 0010:ethnl_update_bitset32.part.0+0x8be/0x1820 net/ethtool/bitset.c:572
Code: 45 85 e4 0f 84 aa 03 00 00 e8 6e 31 05 fb 48 8b 85 c8 fe ff ff 4e 8d 2c a8 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 14 02 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 0c 84 d2 74 08 4c
RSP: 0018:ffffc9000624f248 EFLAGS: 00010a06
RAX: dffffc0000000000 RBX: ffff8880a28aec38 RCX: ffffffff867065d4
RDX: 1ffff11018515d87 RSI: ffffffff867065e2 RDI: 0000000000000005
RBP: ffffc9000624f3b0 R08: ffff888095116400 R09: ffffc9000624f318
R10: fffff52000c49e68 R11: ffffc9000624f347 R12: 0000000000000010
R13: ffff8880c28aec38 R14: ffff8880a28aec48 R15: ffffc9000624f388
FS:  0000000002218880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffed1018515d87 CR3: 0000000095e7e000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (168):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2020/03/06 19:34 upstream 63623fd44972 c88c7b75 .config log report syz C
ci-upstream-kasan-gce-root 2020/03/05 18:00 upstream 63623fd44972 c88c7b75 .config log report syz C
ci-upstream-kasan-gce-root 2020/03/05 13:37 upstream 63623fd44972 c88c7b75 .config log report syz C
ci-upstream-kasan-gce-root 2020/03/05 03:29 upstream 63623fd44972 c88c7b75 .config log report syz C
ci-upstream-kasan-gce-root 2020/03/05 02:39 upstream 63623fd44972 c88c7b75 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/03/03 14:48 upstream 63623fd44972 c88c7b75 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/03/03 10:33 upstream 63623fd44972 c88c7b75 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/03/02 22:38 upstream 63623fd44972 c88c7b75 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/03/02 20:28 upstream 63623fd44972 c88c7b75 .config log report syz C
ci-upstream-kasan-gce 2020/03/02 12:22 upstream 63623fd44972 c88c7b75 .config log report syz C
ci-upstream-kasan-gce 2020/03/01 23:23 upstream 63623fd44972 c88c7b75 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2020/02/29 20:44 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2020/02/28 08:55 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2020/02/28 08:01 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2020/02/28 05:00 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2020/02/28 04:00 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2020/02/28 03:28 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2020/02/28 02:57 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2020/02/28 02:30 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2020/02/28 01:59 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-root 2020/02/27 09:48 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-root 2020/02/27 07:00 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-root 2020/02/27 06:26 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-root 2020/02/27 05:57 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-root 2020/02/27 05:24 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-root 2020/02/27 04:53 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-root 2020/02/27 04:24 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-root 2020/02/27 04:00 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/02/25 06:26 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/02/25 05:46 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/02/25 03:06 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/02/25 02:39 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/02/25 01:50 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/02/25 01:18 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-kasan-gce 2020/02/24 08:09 upstream d2eee25858f2 d801cb02 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/02/22 17:41 upstream 54dedb5b571d 2c36e7a7 .config log report syz C
ci-upstream-kasan-gce-386 2020/03/01 17:20 upstream 63623fd44972 c88c7b75 .config log report syz C
ci-upstream-kasan-gce-386 2020/02/29 22:56 upstream f8788d86ab28 59b57593 .config log report syz C
ci-upstream-net-this-kasan-gce 2020/03/01 13:57 net 3614d05b5e6b c88c7b75 .config log report syz C
ci-upstream-net-this-kasan-gce 2020/03/01 12:10 net 3614d05b5e6b c88c7b75 .config log report syz C
ci-upstream-net-this-kasan-gce 2020/02/29 21:12 net 6132c1d9033d 59b57593 .config log report syz C
ci-upstream-net-this-kasan-gce 2020/02/29 20:44 net 6132c1d9033d 59b57593 .config log report syz C
ci-upstream-net-kasan-gce 2020/03/01 14:51 net-next 3b3e808cd883 c88c7b75 .config log report syz C
ci-upstream-net-kasan-gce 2020/03/01 09:08 net-next 3b3e808cd883 c88c7b75 .config log report syz C
ci-upstream-net-kasan-gce 2020/02/29 21:21 net-next c3e042f54107 59b57593 .config log report syz C
ci-upstream-net-kasan-gce 2020/02/29 20:53 net-next c3e042f54107 59b57593 .config log report syz C
ci-upstream-linux-next-kasan-gce-root 2020/02/22 17:55 linux-next bee46b309a13 2c36e7a7 .config log report syz C
ci-upstream-kasan-gce 2020/03/01 14:12 upstream 63623fd44972 c88c7b75 .config log report syz
ci-upstream-kasan-gce 2020/03/01 13:06 upstream 63623fd44972 c88c7b75 .config log report syz
ci-upstream-kasan-gce-386 2020/03/01 12:24 upstream 63623fd44972 c88c7b75 .config log report syz
ci-upstream-kasan-gce-386 2020/02/29 21:38 upstream f8788d86ab28 59b57593 .config log report syz
ci-upstream-kasan-gce-smack-root 2020/03/06 03:35 upstream 63623fd44972 c88c7b75 .config log report
ci-upstream-kasan-gce-root 2020/03/03 22:16 upstream 63623fd44972 c88c7b75 .config log report
ci-upstream-kasan-gce-smack-root 2020/03/03 09:30 upstream 63623fd44972 c88c7b75 .config log report
ci-upstream-kasan-gce-smack-root 2020/03/03 08:18 upstream 63623fd44972 c88c7b75 .config log report
ci-upstream-kasan-gce-root 2020/03/02 12:03 upstream 63623fd44972 c88c7b75 .config log report
ci-upstream-kasan-gce-root 2020/03/02 02:27 upstream 63623fd44972 c88c7b75 .config log report
ci-upstream-kasan-gce-root 2020/03/01 20:41 upstream 63623fd44972 c88c7b75 .config log report
ci-upstream-kasan-gce-smack-root 2020/03/01 08:39 upstream 63623fd44972 c88c7b75 .config log report
ci-upstream-kasan-gce 2020/03/01 04:16 upstream 63623fd44972 c88c7b75 .config log report
ci-upstream-kasan-gce-smack-root 2020/03/01 02:30 upstream 63623fd44972 59b57593 .config log report
ci-upstream-kasan-gce-selinux-root 2020/02/29 20:17 upstream f8788d86ab28 59b57593 .config log report
ci-upstream-kasan-gce-root 2020/02/22 17:33 upstream 54dedb5b571d 2c36e7a7 .config log report
ci-upstream-kasan-gce-selinux-root 2020/02/22 17:28 upstream 54dedb5b571d 2c36e7a7 .config log report
ci-upstream-kasan-gce-smack-root 2020/02/22 17:24 upstream 54dedb5b571d 2c36e7a7 .config log report
ci-upstream-kasan-gce 2020/02/22 17:21 upstream 54dedb5b571d 2c36e7a7 .config log report
ci-upstream-kasan-gce-smack-root 2020/02/22 17:20 upstream 54dedb5b571d 2c36e7a7 .config log report
ci-upstream-kasan-gce 2020/02/22 17:15 upstream 54dedb5b571d 2c36e7a7 .config log report
ci-upstream-kasan-gce-386 2020/02/22 17:30 upstream 54dedb5b571d 2c36e7a7 .config log report
ci-upstream-net-this-kasan-gce 2020/03/05 20:16 net 3614d05b5e6b c88c7b75 .config log report
ci-upstream-net-this-kasan-gce 2020/03/05 16:17 net 3614d05b5e6b c88c7b75 .config log report
ci-upstream-net-this-kasan-gce 2020/03/05 06:06 net 3614d05b5e6b c88c7b75 .config log report
ci-upstream-net-this-kasan-gce 2020/03/04 22:52 net 3614d05b5e6b c88c7b75 .config log report
ci-upstream-net-this-kasan-gce 2020/03/04 09:43 net 3614d05b5e6b c88c7b75 .config log report
ci-upstream-net-this-kasan-gce 2020/03/02 20:18 net 3614d05b5e6b c88c7b75 .config log report
ci-upstream-net-this-kasan-gce 2020/03/02 16:22 net 3614d05b5e6b c88c7b75 .config log report
ci-upstream-net-this-kasan-gce 2020/03/02 09:08 net 3614d05b5e6b c88c7b75 .config log report
ci-upstream-net-this-kasan-gce 2020/03/02 06:39 net 3614d05b5e6b c88c7b75 .config log report
ci-upstream-net-this-kasan-gce 2020/03/01 23:34 net 3614d05b5e6b c88c7b75 .config log report
ci-upstream-net-this-kasan-gce 2020/03/01 19:00 net 3614d05b5e6b c88c7b75 .config log report
ci-upstream-net-this-kasan-gce 2020/03/01 08:28 net 3614d05b5e6b c88c7b75 .config log report
ci-upstream-net-this-kasan-gce 2020/02/24 00:58 net 39f3b41aa7ca d801cb02 .config log report
ci-upstream-net-this-kasan-gce 2020/02/23 18:24 net 3e72dfdf8227 2c36e7a7 .config log report
ci-upstream-net-this-kasan-gce 2020/02/23 16:14 net 3e72dfdf8227 2c36e7a7 .config log report
ci-upstream-net-this-kasan-gce 2020/02/23 07:07 net 0c0ddd6ae47c 2c36e7a7 .config log report
ci-upstream-net-this-kasan-gce 2020/02/23 06:48 net 0c0ddd6ae47c 2c36e7a7 .config log report
ci-upstream-net-this-kasan-gce 2020/02/23 05:07 net 0c0ddd6ae47c 2c36e7a7 .config log report
ci-upstream-net-this-kasan-gce 2020/02/23 03:39 net 0c0ddd6ae47c 2c36e7a7 .config log report
ci-upstream-net-kasan-gce 2020/03/01 21:45 net-next 3b3e808cd883 c88c7b75 .config log report
ci-upstream-net-kasan-gce 2020/03/01 16:12 net-next 3b3e808cd883 c88c7b75 .config log report
ci-upstream-net-kasan-gce 2020/02/23 16:09 net-next 68e2617acfed 2c36e7a7 .config log report
ci-upstream-net-kasan-gce 2020/02/23 15:53 net-next 68e2617acfed 2c36e7a7 .config log report
ci-upstream-net-kasan-gce 2020/02/23 12:56 net-next 732a0dee501f 2c36e7a7 .config log report
ci-upstream-net-kasan-gce 2020/02/22 17:15 net-next 732a0dee501f 2c36e7a7 .config log report
ci-upstream-linux-next-kasan-gce-root 2020/02/22 17:28 linux-next bee46b309a13 2c36e7a7 .config log report