From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-9.1 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, MENTIONS_GIT_HOSTING,SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 15D90C433DF for ; Wed, 12 Aug 2020 13:22:08 +0000 (UTC) Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by mail.kernel.org (Postfix) with ESMTP id C92BF207DA for ; Wed, 12 Aug 2020 13:22:07 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=linaro.org header.i=@linaro.org header.b="K8oKxBl+" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org C92BF207DA Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=linaro.org Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=owner-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix) id 578D08D0017; Wed, 12 Aug 2020 09:22:07 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 5291C8D0001; Wed, 12 Aug 2020 09:22:07 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 466DE8D0017; Wed, 12 Aug 2020 09:22:07 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from forelay.hostedemail.com (smtprelay0181.hostedemail.com [216.40.44.181]) by kanga.kvack.org (Postfix) with ESMTP id 31D388D0001 for ; Wed, 12 Aug 2020 09:22:07 -0400 (EDT) Received: from smtpin08.hostedemail.com (10.5.19.251.rfc1918.com [10.5.19.251]) by forelay03.hostedemail.com (Postfix) with ESMTP id A60E58248047 for ; Wed, 12 Aug 2020 13:22:06 +0000 (UTC) X-FDA: 77141979852.08.spot71_540171f26feb Received: from filter.hostedemail.com (10.5.16.251.rfc1918.com [10.5.16.251]) by smtpin08.hostedemail.com (Postfix) with ESMTP id 6DEB21819E76F for ; Wed, 12 Aug 2020 13:22:06 +0000 (UTC) X-HE-Tag: spot71_540171f26feb X-Filterd-Recvd-Size: 6351 Received: from mail-io1-f65.google.com (mail-io1-f65.google.com [209.85.166.65]) by imf12.hostedemail.com (Postfix) with ESMTP for ; Wed, 12 Aug 2020 13:22:05 +0000 (UTC) Received: by mail-io1-f65.google.com with SMTP id s189so2523394iod.2 for ; Wed, 12 Aug 2020 06:22:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=mime-version:from:date:message-id:subject:to:cc; bh=LqyDHTGklklfaDmwpguz/tusuYDRoAks+1hcszFn1HY=; b=K8oKxBl+BWXQaDynneB6u8gUp94iZ62ttkbLOTUSEQ3fVIrUDUpqml1C71vir15wv6 d1tSUUou4apOwCAtU/WyzRIR5mEFUDSJb5K4qoU37r9pSbU4ToLI4a+ZqJ518A864Et1 LpHTZNczIbXES1HPwPv2LPnshBGgIAr1/Ee+Q7jzGKvx9yHBWaKMc6UJ7ofvGXMIkHuv v+8IHU4dHdNNU5l/pVe42DdmgQ9RqrX3wPeVcxq0ULVDfxXTXgfmalZ3aBC30Tg6qQe8 FForRPaXQgU9OXDZclXVYu1cY3CO2yiSh4bieeW/8oY5xBenI/espD9KnTXQk9pHiPnv bXyw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=LqyDHTGklklfaDmwpguz/tusuYDRoAks+1hcszFn1HY=; b=uCpizWeC4MYS2llagsgDeVeV0Ft8f5U+kgrnOULw5UWcbt7phL/0Xe0v+pICpxWfAr 1Lyw06I2nlxd68B107p0mzM6LIRrPp6GsGPtBOHFZVkCMkbYouQ9D4RvK2LlogZ7h+RU A/zeQe+GKbh+dVmG0ogxR643p5hwcl1RLpInlzS3BpX3GybHUqYEGtedw+0wQ05yB+ji jXtRJM5JJlAOOF6YyiMTMYQWj8vXbZuQQ+Iosk9hSzZ0LM8y0+o8YExA6bEsgJI3QwHm ZGiQx96NOSiayMBHMlcMA0rfvtIsqC1ZDt7f9x9BhjvUeZkImYZrBGuJu1dTt/X+nfp6 GZIw== X-Gm-Message-State: AOAM530a+v3ejxJoHiJzaZc9RO1BlaVII32EzkDgKr9InVuM8eLyIsyi +agNWQjKz12rdyMZ+PBjFjlPr2GA35feggJgTPEi6Q== X-Google-Smtp-Source: ABdhPJxMI8PBL/gzOuJ3w4Fk/3jDcdg99s5Cj/ZlFKIwt7gwA3a6WpJGb3wD4Se/P66zWaPqiUEYX3hEzdsvoyG3SwE= X-Received: by 2002:a05:6602:2c08:: with SMTP id w8mr28417120iov.129.1597238525008; Wed, 12 Aug 2020 06:22:05 -0700 (PDT) MIME-Version: 1.0 From: Naresh Kamboju Date: Wed, 12 Aug 2020 18:51:53 +0530 Message-ID: Subject: BUG: unable to handle page fault for address: fe80c000 - EIP: memcpy+0xf/0x20 To: Linux-Next Mailing List , open list , linux-mm , X86 ML Cc: lkft-triage@lists.linaro.org, Andrew Morton , ardb@kernel.org, Herbert Xu , Brian Gerst , Andy Lutomirski , Michel Lespinasse , Peter Zijlstra , daniel.m.jordan@oracle.com, Borislav Petkov , Ingo Molnar , Thomas Gleixner Content-Type: text/plain; charset="UTF-8" X-Rspamd-Queue-Id: 6DEB21819E76F X-Spamd-Result: default: False [0.00 / 100.00] X-Rspamd-Server: rspam02 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: While testng LTP CVE cve-2017-17053 test case the kernel BUG triggered on qemu_i386. Not easily reproducible BUG. metadata: git branch: master git repo: https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git git commit: 4c9b89d8981be3b9032f94d0c4dc7eb9c7967a32 git describe: next-20200811 make_kernelversion: 5.8.0 kernel-config: https://builds.tuxbuild.com/Y9BHRF7J_qXysFPxUoVmBA/kernel.config [ 1083.853006] BUG: unable to handle page fault for address: fe80c000 [ 1083.853850] #PF: supervisor write access in kernel mode [ 1083.854577] #PF: error_code(0x0002) - not-present page [ 1083.855074] *pde = 33183067 *pte = a8648163 [ 1083.855074] Oops: 0002 [#1] SMP [ 1083.855951] CPU: 1 PID: 13514 Comm: cve-2017-17053 Tainted: G W 5.8.0-next-20200811 #1 [ 1083.857088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1083.857771] EIP: memcpy+0xf/0x20 [ 1083.857771] Code: 68 d0 7d ee d6 e8 11 1c c7 ff 0f 31 31 c3 59 58 eb 80 cc cc cc cc cc cc cc cc cc 55 89 e5 57 89 c7 56 89 d6 53 89 cb c1 e9 02 a5 89 d9 83 e1 03 74 02 f3 a4 5b 5e 5f 5d c3 90 55 89 e5 57 89 [ 1083.860096] EAX: fe80c000 EBX: 00010000 ECX: 00004000 EDX: fbfbd000 [ 1083.860096] ESI: fbfbd000 EDI: fe80c000 EBP: f11f1e2c ESP: f11f1e20 [ 1083.860096] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068 EFLAGS: 00010216 [ 1083.860096] CR0: 80050033 CR2: fe80c000 CR3: 314c0000 CR4: 003506d0 [ 1083.860096] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000 [ 1083.860096] DR6: ffff4ff0 DR7: 00000400 [ 1083.860096] Call Trace: [ 1083.860096] ldt_dup_context+0x66/0x80 [ 1083.860096] dup_mm+0x2b3/0x480 [ 1083.866900] copy_process+0x133b/0x15c0 [ 1083.866900] _do_fork+0x94/0x3e0 [ 1083.866900] __ia32_sys_clone+0x67/0x80 [ 1083.866900] __do_fast_syscall_32+0x3f/0x70 [ 1083.866900] do_fast_syscall_32+0x29/0x60 [ 1083.866900] do_SYSENTER_32+0x15/0x20 [ 1083.866900] entry_SYSENTER_32+0x9f/0xf2 [ 1083.866900] EIP: 0xb7eef549 [ 1083.866900] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d 76 00 58 b8 77 00 00 00 cd 80 90 8d 76 [ 1083.866900] EAX: ffffffda EBX: 01200011 ECX: 00000000 EDX: 00000000 [ 1083.866900] ESI: 00000000 EDI: b7cf1ba8 EBP: b7cf1348 ESP: b7cf12f0 [ 1083.866900] DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b EFLAGS: 00000246 [ 1083.866900] Modules linked in: algif_hash [ 1083.866900] CR2: 00000000fe80c000 [ 1083.866900] ---[ end trace b07b25e6d94bccb1 ]--- [ 1083.866900] EIP: memcpy+0xf/0x20 [ 1083.866900] Code: 68 d0 7d ee d6 e8 11 1c c7 ff 0f 31 31 c3 59 58 eb 80 cc cc cc cc cc cc cc cc cc 55 89 e5 57 89 c7 56 89 d6 53 89 cb c1 e9 02 a5 89 d9 83 e1 03 74 02 f3 a4 5b 5e 5f 5d c3 90 55 89 e5 57 89 [ 1083.866900] EAX: fe80c000 EBX: 00010000 ECX: 00004000 EDX: fbfbd000 [ 1083.866900] ESI: fbfbd000 EDI: fe80c000 EBP: f11f1e2c ESP: f11f1e20 [ 1083.866900] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068 EFLAGS: 00010216 [ 1083.866900] CR0: 80050033 CR2: fe80c000 CR3: 314c0000 CR4: 003506d0 [ 1083.866900] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000 [ 1083.866900] DR6: ffff4ff0 DR7: 00000400 Full test log link, https://qa-reports.linaro.org/lkft/linux-next-oe/build/next-20200811/testrun/3052660/suite/linux-log-parser/test/check-kernel-bug-1659337/log -- Linaro LKFT https://lkft.linaro.org