[Kernel-packages] [Bug 1866772] Re: Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
** Changed in: stress-ng
Status: New => Invalid
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1866772
Title:
Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Status in Stress-ng:
Invalid
Status in ubuntu-kernel-tests:
Fix Released
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Bionic:
Fix Released
Status in linux source package in Eoan:
Fix Released
Status in linux source package in Focal:
Fix Released
Bug description:
== SRU Request [ BIONIC, DISCO, EOAN, FOCAL ] ==
Reading /sys/firmware/acpi/tables/data/BERT as root at at odd byte
offset will cause an oops. This is because the source address is I/O
mapped and this needs to be read with an I/O memcpy rather than an
memcpy.
== Fix ==
The fix is upstream (linux-next) commit that will land in 5.7, the
backport to bionic, eoan and focal is just a minor context wiggle.
commit 08c07cefb3042a55bc9f8243814b504d5eff93f3
Author: Colin Ian King
Date: Thu Mar 12 11:13:45 2020 +
ACPI: sysfs: copy ACPI data using io memory copying
== Test ==
Running on hotdog with the reproducer below (run as root):
#include
#include
#include
#include
#include
#include
#include
int main(void)
{
int fd;
char buffer[3];
ssize_t n;
fd = open("/sys/firmware/acpi/tables/data/BERT", O_RDONLY);
if (fd < 0) {
fprintf(stderr, "open failed: %d (%s)\n", errno,
strerror(errno));
return -1;
}
do {
n = read(fd, buffer, sizeof(buffer));
} while (n > 0);
return 0;
}
Without the fix it will oops. With the fix it works OK.
== Regession Potential ==
This only affects the reading of the ACPI BERT table from /sys as root
so it is limited in scope to just a very narrow use case. Normally the
BERT table is just handled by the kernel, so access to this table is
just for debugging purposes.
---
Issue found on new ARM64 node "hotdog" 4.15.0-91.92~16.04.1
Failed 2 of 2 attempts.
Test suite HEAD SHA1: 3f43e81
sysfs STARTING
sysfs RETURNED 0
sysfs FAILED (kernel oopsed)
[ 1075.760640] Unable to handle kernel paging request at virtual address
4a70072a
[ 1075.763319] Unable to handle kernel paging request at virtual address
4a70e4ba
[ 1075.768563] Mem abort info:
[ 1075.768566] ESR = 0x9621
[ 1075.768568] Exception class = DABT (current EL), IL = 32 bits
[ 1075.768569] SET = 0, FnV = 0
[ 1075.768570] EA = 0, S1PTW = 0
[ 1075.768571] Data abort info:
[ 1075.768577] ISV = 0, ISS = 0x0021
[ 1075.776489] Mem abort info:
[ 1075.776491] ESR = 0x9621
[ 1075.776493] Exception class = DABT (current EL), IL = 32 bits
[ 1075.776494] SET = 0, FnV = 0
[ 1075.776495] EA = 0, S1PTW = 0
[ 1075.776496] Data abort info:
[ 1075.776500] ISV = 0, ISS = 0x0021
[ 1075.779284] CM = 0, WnR = 0
[ 1075.779288] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.779290] [4a70072a] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=006880280703
[ 1075.782342] CM = 0, WnR = 0
[ 1075.782346] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.782352] [4a70e4ba] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=00688028e703
[ 1075.788262] Internal error: Oops: 9621 [#2] SMP
[ 1075.788269] Modules linked in: unix_diag binfmt_misc snd_seq
snd_seq_device snd_timer snd soundcore userio vfio_iommu_type1 vfio hci_vhci
bluetooth ecdh_generic uhid cuse vhost_vsock vmw_vsock_virtio_transport_common
vhost_net vhost vsock tap dccp_ipv4 dccp ipx p8023 atm psnap p8022 llc
algif_rng algif_aead anubis fcrypt khazad seed tea md4 michael_mic
poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic tgr192
wp512 algif_hash chacha20_neon chacha20_generic blowfish_generic
blowfish_common cast5_generic des_generic salsa20_generic camellia_generic
cast6_generic cast_common serpent_generic twofish_generic twofish_common
algif_skcipher af_alg nls_iso8859_1 ipmi_ssif ipmi_devintf joydev input_leds
ipmi_msghandler shpchp i2c_xlp9xx(+) thunderx2_pmu ib_iser rdma_cm iw_cm ib_cm
ib_core
[ 1075.942470] iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi autofs4
btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq
async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear
hid_generic usbhid hid uas usb_storage aes_ce_blk aes_ce_cipher crc32_ce qede
ast i2c_algo_bit crct10dif_ce ptp ghash_ce ttm drm_kms_helper sha2_ce pps_core
syscopyarea sysfillrect sysimgblt fb_sys_fops sha256_arm64 sha1_ce mpt3sas qed
drm
[Kernel-packages] [Bug 1866772] Re: Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
** Changed in: ubuntu-kernel-tests
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1866772
Title:
Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Status in Stress-ng:
New
Status in ubuntu-kernel-tests:
Fix Released
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Bionic:
Fix Released
Status in linux source package in Eoan:
Fix Released
Status in linux source package in Focal:
Fix Released
Bug description:
== SRU Request [ BIONIC, DISCO, EOAN, FOCAL ] ==
Reading /sys/firmware/acpi/tables/data/BERT as root at at odd byte
offset will cause an oops. This is because the source address is I/O
mapped and this needs to be read with an I/O memcpy rather than an
memcpy.
== Fix ==
The fix is upstream (linux-next) commit that will land in 5.7, the
backport to bionic, eoan and focal is just a minor context wiggle.
commit 08c07cefb3042a55bc9f8243814b504d5eff93f3
Author: Colin Ian King
Date: Thu Mar 12 11:13:45 2020 +
ACPI: sysfs: copy ACPI data using io memory copying
== Test ==
Running on hotdog with the reproducer below (run as root):
#include
#include
#include
#include
#include
#include
#include
int main(void)
{
int fd;
char buffer[3];
ssize_t n;
fd = open("/sys/firmware/acpi/tables/data/BERT", O_RDONLY);
if (fd < 0) {
fprintf(stderr, "open failed: %d (%s)\n", errno,
strerror(errno));
return -1;
}
do {
n = read(fd, buffer, sizeof(buffer));
} while (n > 0);
return 0;
}
Without the fix it will oops. With the fix it works OK.
== Regession Potential ==
This only affects the reading of the ACPI BERT table from /sys as root
so it is limited in scope to just a very narrow use case. Normally the
BERT table is just handled by the kernel, so access to this table is
just for debugging purposes.
---
Issue found on new ARM64 node "hotdog" 4.15.0-91.92~16.04.1
Failed 2 of 2 attempts.
Test suite HEAD SHA1: 3f43e81
sysfs STARTING
sysfs RETURNED 0
sysfs FAILED (kernel oopsed)
[ 1075.760640] Unable to handle kernel paging request at virtual address
4a70072a
[ 1075.763319] Unable to handle kernel paging request at virtual address
4a70e4ba
[ 1075.768563] Mem abort info:
[ 1075.768566] ESR = 0x9621
[ 1075.768568] Exception class = DABT (current EL), IL = 32 bits
[ 1075.768569] SET = 0, FnV = 0
[ 1075.768570] EA = 0, S1PTW = 0
[ 1075.768571] Data abort info:
[ 1075.768577] ISV = 0, ISS = 0x0021
[ 1075.776489] Mem abort info:
[ 1075.776491] ESR = 0x9621
[ 1075.776493] Exception class = DABT (current EL), IL = 32 bits
[ 1075.776494] SET = 0, FnV = 0
[ 1075.776495] EA = 0, S1PTW = 0
[ 1075.776496] Data abort info:
[ 1075.776500] ISV = 0, ISS = 0x0021
[ 1075.779284] CM = 0, WnR = 0
[ 1075.779288] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.779290] [4a70072a] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=006880280703
[ 1075.782342] CM = 0, WnR = 0
[ 1075.782346] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.782352] [4a70e4ba] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=00688028e703
[ 1075.788262] Internal error: Oops: 9621 [#2] SMP
[ 1075.788269] Modules linked in: unix_diag binfmt_misc snd_seq
snd_seq_device snd_timer snd soundcore userio vfio_iommu_type1 vfio hci_vhci
bluetooth ecdh_generic uhid cuse vhost_vsock vmw_vsock_virtio_transport_common
vhost_net vhost vsock tap dccp_ipv4 dccp ipx p8023 atm psnap p8022 llc
algif_rng algif_aead anubis fcrypt khazad seed tea md4 michael_mic
poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic tgr192
wp512 algif_hash chacha20_neon chacha20_generic blowfish_generic
blowfish_common cast5_generic des_generic salsa20_generic camellia_generic
cast6_generic cast_common serpent_generic twofish_generic twofish_common
algif_skcipher af_alg nls_iso8859_1 ipmi_ssif ipmi_devintf joydev input_leds
ipmi_msghandler shpchp i2c_xlp9xx(+) thunderx2_pmu ib_iser rdma_cm iw_cm ib_cm
ib_core
[ 1075.942470] iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi autofs4
btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq
async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear
hid_generic usbhid hid uas usb_storage aes_ce_blk aes_ce_cipher crc32_ce qede
ast i2c_algo_bit crct10dif_ce ptp ghash_ce ttm drm_kms_helper sha2_ce pps_core
syscopyarea sysfillrect sysimgblt fb_sys_fops sha256_arm64 sha1_ce
[Kernel-packages] [Bug 1866772] Re: Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
This bug was fixed in the package linux - 5.3.0-51.44
---
linux (5.3.0-51.44) eoan; urgency=medium
* CVE-2020-11884
- SAUCE: s390/mm: fix page table upgrade vs 2ndary address mode accesses
-- Thadeu Lima de Souza Cascardo Wed, 22 Apr
2020 17:35:41 -0300
** Changed in: linux (Ubuntu Eoan)
Status: Fix Committed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-11884
** Changed in: linux (Ubuntu Bionic)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1866772
Title:
Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Status in Stress-ng:
New
Status in ubuntu-kernel-tests:
In Progress
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Bionic:
Fix Released
Status in linux source package in Eoan:
Fix Released
Status in linux source package in Focal:
Fix Released
Bug description:
== SRU Request [ BIONIC, DISCO, EOAN, FOCAL ] ==
Reading /sys/firmware/acpi/tables/data/BERT as root at at odd byte
offset will cause an oops. This is because the source address is I/O
mapped and this needs to be read with an I/O memcpy rather than an
memcpy.
== Fix ==
The fix is upstream (linux-next) commit that will land in 5.7, the
backport to bionic, eoan and focal is just a minor context wiggle.
commit 08c07cefb3042a55bc9f8243814b504d5eff93f3
Author: Colin Ian King
Date: Thu Mar 12 11:13:45 2020 +
ACPI: sysfs: copy ACPI data using io memory copying
== Test ==
Running on hotdog with the reproducer below (run as root):
#include
#include
#include
#include
#include
#include
#include
int main(void)
{
int fd;
char buffer[3];
ssize_t n;
fd = open("/sys/firmware/acpi/tables/data/BERT", O_RDONLY);
if (fd < 0) {
fprintf(stderr, "open failed: %d (%s)\n", errno,
strerror(errno));
return -1;
}
do {
n = read(fd, buffer, sizeof(buffer));
} while (n > 0);
return 0;
}
Without the fix it will oops. With the fix it works OK.
== Regession Potential ==
This only affects the reading of the ACPI BERT table from /sys as root
so it is limited in scope to just a very narrow use case. Normally the
BERT table is just handled by the kernel, so access to this table is
just for debugging purposes.
---
Issue found on new ARM64 node "hotdog" 4.15.0-91.92~16.04.1
Failed 2 of 2 attempts.
Test suite HEAD SHA1: 3f43e81
sysfs STARTING
sysfs RETURNED 0
sysfs FAILED (kernel oopsed)
[ 1075.760640] Unable to handle kernel paging request at virtual address
4a70072a
[ 1075.763319] Unable to handle kernel paging request at virtual address
4a70e4ba
[ 1075.768563] Mem abort info:
[ 1075.768566] ESR = 0x9621
[ 1075.768568] Exception class = DABT (current EL), IL = 32 bits
[ 1075.768569] SET = 0, FnV = 0
[ 1075.768570] EA = 0, S1PTW = 0
[ 1075.768571] Data abort info:
[ 1075.768577] ISV = 0, ISS = 0x0021
[ 1075.776489] Mem abort info:
[ 1075.776491] ESR = 0x9621
[ 1075.776493] Exception class = DABT (current EL), IL = 32 bits
[ 1075.776494] SET = 0, FnV = 0
[ 1075.776495] EA = 0, S1PTW = 0
[ 1075.776496] Data abort info:
[ 1075.776500] ISV = 0, ISS = 0x0021
[ 1075.779284] CM = 0, WnR = 0
[ 1075.779288] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.779290] [4a70072a] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=006880280703
[ 1075.782342] CM = 0, WnR = 0
[ 1075.782346] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.782352] [4a70e4ba] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=00688028e703
[ 1075.788262] Internal error: Oops: 9621 [#2] SMP
[ 1075.788269] Modules linked in: unix_diag binfmt_misc snd_seq
snd_seq_device snd_timer snd soundcore userio vfio_iommu_type1 vfio hci_vhci
bluetooth ecdh_generic uhid cuse vhost_vsock vmw_vsock_virtio_transport_common
vhost_net vhost vsock tap dccp_ipv4 dccp ipx p8023 atm psnap p8022 llc
algif_rng algif_aead anubis fcrypt khazad seed tea md4 michael_mic
poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic tgr192
wp512 algif_hash chacha20_neon chacha20_generic blowfish_generic
blowfish_common cast5_generic des_generic salsa20_generic camellia_generic
cast6_generic cast_common serpent_generic twofish_generic twofish_common
algif_skcipher af_alg nls_iso8859_1 ipmi_ssif ipmi_devintf joydev input_leds
ipmi_msghandler shpchp i2c_xlp9xx(+) thunderx2_pmu ib_iser rdma_cm iw_cm ib_cm
ib_core
[ 1075.942470]
[Kernel-packages] [Bug 1866772] Re: Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
This bug was fixed in the package linux - 4.15.0-99.100
---
linux (4.15.0-99.100) bionic; urgency=medium
* CVE-2020-11884
- SAUCE: s390/mm: fix page table upgrade vs 2ndary address mode accesses
-- Marcelo Henrique Cerri Wed, 22 Apr
2020 15:31:14 -0300
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1866772
Title:
Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Status in Stress-ng:
New
Status in ubuntu-kernel-tests:
In Progress
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Bionic:
Fix Released
Status in linux source package in Eoan:
Fix Released
Status in linux source package in Focal:
Fix Released
Bug description:
== SRU Request [ BIONIC, DISCO, EOAN, FOCAL ] ==
Reading /sys/firmware/acpi/tables/data/BERT as root at at odd byte
offset will cause an oops. This is because the source address is I/O
mapped and this needs to be read with an I/O memcpy rather than an
memcpy.
== Fix ==
The fix is upstream (linux-next) commit that will land in 5.7, the
backport to bionic, eoan and focal is just a minor context wiggle.
commit 08c07cefb3042a55bc9f8243814b504d5eff93f3
Author: Colin Ian King
Date: Thu Mar 12 11:13:45 2020 +
ACPI: sysfs: copy ACPI data using io memory copying
== Test ==
Running on hotdog with the reproducer below (run as root):
#include
#include
#include
#include
#include
#include
#include
int main(void)
{
int fd;
char buffer[3];
ssize_t n;
fd = open("/sys/firmware/acpi/tables/data/BERT", O_RDONLY);
if (fd < 0) {
fprintf(stderr, "open failed: %d (%s)\n", errno,
strerror(errno));
return -1;
}
do {
n = read(fd, buffer, sizeof(buffer));
} while (n > 0);
return 0;
}
Without the fix it will oops. With the fix it works OK.
== Regession Potential ==
This only affects the reading of the ACPI BERT table from /sys as root
so it is limited in scope to just a very narrow use case. Normally the
BERT table is just handled by the kernel, so access to this table is
just for debugging purposes.
---
Issue found on new ARM64 node "hotdog" 4.15.0-91.92~16.04.1
Failed 2 of 2 attempts.
Test suite HEAD SHA1: 3f43e81
sysfs STARTING
sysfs RETURNED 0
sysfs FAILED (kernel oopsed)
[ 1075.760640] Unable to handle kernel paging request at virtual address
4a70072a
[ 1075.763319] Unable to handle kernel paging request at virtual address
4a70e4ba
[ 1075.768563] Mem abort info:
[ 1075.768566] ESR = 0x9621
[ 1075.768568] Exception class = DABT (current EL), IL = 32 bits
[ 1075.768569] SET = 0, FnV = 0
[ 1075.768570] EA = 0, S1PTW = 0
[ 1075.768571] Data abort info:
[ 1075.768577] ISV = 0, ISS = 0x0021
[ 1075.776489] Mem abort info:
[ 1075.776491] ESR = 0x9621
[ 1075.776493] Exception class = DABT (current EL), IL = 32 bits
[ 1075.776494] SET = 0, FnV = 0
[ 1075.776495] EA = 0, S1PTW = 0
[ 1075.776496] Data abort info:
[ 1075.776500] ISV = 0, ISS = 0x0021
[ 1075.779284] CM = 0, WnR = 0
[ 1075.779288] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.779290] [4a70072a] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=006880280703
[ 1075.782342] CM = 0, WnR = 0
[ 1075.782346] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.782352] [4a70e4ba] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=00688028e703
[ 1075.788262] Internal error: Oops: 9621 [#2] SMP
[ 1075.788269] Modules linked in: unix_diag binfmt_misc snd_seq
snd_seq_device snd_timer snd soundcore userio vfio_iommu_type1 vfio hci_vhci
bluetooth ecdh_generic uhid cuse vhost_vsock vmw_vsock_virtio_transport_common
vhost_net vhost vsock tap dccp_ipv4 dccp ipx p8023 atm psnap p8022 llc
algif_rng algif_aead anubis fcrypt khazad seed tea md4 michael_mic
poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic tgr192
wp512 algif_hash chacha20_neon chacha20_generic blowfish_generic
blowfish_common cast5_generic des_generic salsa20_generic camellia_generic
cast6_generic cast_common serpent_generic twofish_generic twofish_common
algif_skcipher af_alg nls_iso8859_1 ipmi_ssif ipmi_devintf joydev input_leds
ipmi_msghandler shpchp i2c_xlp9xx(+) thunderx2_pmu ib_iser rdma_cm iw_cm ib_cm
ib_core
[ 1075.942470] iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi autofs4
btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq
async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear
hid_generic usbhid hid uas
[Kernel-packages] [Bug 1866772] Re: Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
** Description changed:
- == SRU Request [ BIONIC, EOAN, FOCAL ] ==
+ == SRU Request [ BIONIC, DISCO, EOAN, FOCAL ] ==
Reading /sys/firmware/acpi/tables/data/BERT as root at at odd byte
offset will cause an oops. This is because the source address is I/O
mapped and this needs to be read with an I/O memcpy rather than an
memcpy.
== Fix ==
The fix is upstream (linux-next) commit that will land in 5.7, the
backport to bionic, eoan and focal is just a minor context wiggle.
commit 08c07cefb3042a55bc9f8243814b504d5eff93f3
Author: Colin Ian King
Date: Thu Mar 12 11:13:45 2020 +
ACPI: sysfs: copy ACPI data using io memory copying
== Test ==
Running on hotdog with the reproducer below (run as root):
#include
#include
#include
#include
#include
#include
#include
int main(void)
{
int fd;
char buffer[3];
ssize_t n;
fd = open("/sys/firmware/acpi/tables/data/BERT", O_RDONLY);
if (fd < 0) {
fprintf(stderr, "open failed: %d (%s)\n", errno,
strerror(errno));
return -1;
}
do {
n = read(fd, buffer, sizeof(buffer));
} while (n > 0);
return 0;
}
Without the fix it will oops. With the fix it works OK.
== Regession Potential ==
This only affects the reading of the ACPI BERT table from /sys as root
so it is limited in scope to just a very narrow use case. Normally the
BERT table is just handled by the kernel, so access to this table is
just for debugging purposes.
---
Issue found on new ARM64 node "hotdog" 4.15.0-91.92~16.04.1
Failed 2 of 2 attempts.
Test suite HEAD SHA1: 3f43e81
sysfs STARTING
sysfs RETURNED 0
sysfs FAILED (kernel oopsed)
[ 1075.760640] Unable to handle kernel paging request at virtual address
4a70072a
[ 1075.763319] Unable to handle kernel paging request at virtual address
4a70e4ba
[ 1075.768563] Mem abort info:
[ 1075.768566] ESR = 0x9621
[ 1075.768568] Exception class = DABT (current EL), IL = 32 bits
[ 1075.768569] SET = 0, FnV = 0
[ 1075.768570] EA = 0, S1PTW = 0
[ 1075.768571] Data abort info:
[ 1075.768577] ISV = 0, ISS = 0x0021
[ 1075.776489] Mem abort info:
[ 1075.776491] ESR = 0x9621
[ 1075.776493] Exception class = DABT (current EL), IL = 32 bits
[ 1075.776494] SET = 0, FnV = 0
[ 1075.776495] EA = 0, S1PTW = 0
[ 1075.776496] Data abort info:
[ 1075.776500] ISV = 0, ISS = 0x0021
[ 1075.779284] CM = 0, WnR = 0
[ 1075.779288] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.779290] [4a70072a] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=006880280703
[ 1075.782342] CM = 0, WnR = 0
[ 1075.782346] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.782352] [4a70e4ba] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=00688028e703
[ 1075.788262] Internal error: Oops: 9621 [#2] SMP
[ 1075.788269] Modules linked in: unix_diag binfmt_misc snd_seq
snd_seq_device snd_timer snd soundcore userio vfio_iommu_type1 vfio hci_vhci
bluetooth ecdh_generic uhid cuse vhost_vsock vmw_vsock_virtio_transport_common
vhost_net vhost vsock tap dccp_ipv4 dccp ipx p8023 atm psnap p8022 llc
algif_rng algif_aead anubis fcrypt khazad seed tea md4 michael_mic
poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic tgr192
wp512 algif_hash chacha20_neon chacha20_generic blowfish_generic
blowfish_common cast5_generic des_generic salsa20_generic camellia_generic
cast6_generic cast_common serpent_generic twofish_generic twofish_common
algif_skcipher af_alg nls_iso8859_1 ipmi_ssif ipmi_devintf joydev input_leds
ipmi_msghandler shpchp i2c_xlp9xx(+) thunderx2_pmu ib_iser rdma_cm iw_cm ib_cm
ib_core
[ 1075.942470] iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi autofs4
btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq
async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear
hid_generic usbhid hid uas usb_storage aes_ce_blk aes_ce_cipher crc32_ce qede
ast i2c_algo_bit crct10dif_ce ptp ghash_ce ttm drm_kms_helper sha2_ce pps_core
syscopyarea sysfillrect sysimgblt fb_sys_fops sha256_arm64 sha1_ce mpt3sas qed
drm raid_class scsi_transport_sas ahci libahci gpio_xlp aes_neon_bs
aes_neon_blk crypto_simd cryptd aes_arm64
[ 1075.991997] Process stress-ng-sysfs (pid: 108395, stack limit =
0x9cb607b8)
[ 1075.999643] CPU: 100 PID: 108395 Comm: stress-ng-sysfs Tainted: G D
4.15.0-91-generic #92~16.04.1-Ubuntu
[ 1076.010324] Hardware name: To be filled by O.E.M. Saber/Saber, BIOS
0ACKL027 07/01/2019
[ 1076.018314] pstate: 8049 (Nzcv daif +PAN -UAO)
[ 1076.023096] pc :
[Kernel-packages] [Bug 1866772] Re: Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Hello Colin, I can see this issue with 5.0 kernel (5.0.0-47.51~18.04.1) as well, with the same node hotdog-kernel. Do you think if we should fix this in 5.0 as well? Thanks sysfs FAILED (kernel oopsed) [ 1108.615397] Unable to handle kernel paging request at virtual address 46afa6a6 [ 1108.617127] Unable to handle kernel paging request at virtual address 46afd2d7 [ 1108.623317] Mem abort info: [ 1108.627466] Unable to handle kernel paging request at virtual address 46ad [ 1108.627469] Mem abort info: [ 1108.627470] ESR = 0x9621 [ 1108.627473] Exception class = DABT (current EL), IL = 32 bits [ 1108.627477] SET = 0, FnV = 0 [ 1108.627480] EA = 0, S1PTW = 0 [ 1108.627482] Data abort info: [ 1108.627485] ISV = 0, ISS = 0x0021 [ 1108.627487] CM = 0, WnR = 0 [ 1108.627490] swapper pgtable: 4k pages, 48-bit VAs, pgdp=815ac000 [ 1108.627495] [46ad] pgd=00bffcfff003, pud=009f28e05003, pmd=009de53f9003, pte=00688028f703 [ 1108.627507] Internal error: Oops: 9621 [#1] SMP [ 1108.627515] Modules linked in: unix_diag binfmt_misc snd_seq snd_seq_device snd_timer snd soundcore userio cuse hci_vhci bluetooth ecdh_generic vfio_iommu_type1 vfio uhid vhost_vsock vmw_vsock_virtio_transport_common vsock vhost_net vhost tap dccp_ipv4 dccp atm algif_rng aegis128 aegis128l aegis256 morus1280 morus640 algif_aead anubis fcrypt khazad seed sm4_generic tea crc32_generic md4 michael_mic nhpoly1305_neon nhpoly1305 poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic streebog_generic tgr192 wp512 algif_hash blowfish_generic blowfish_common cast5_generic des_generic salsa20_generic chacha_neon chacha_generic camellia_generic cast6_generic cast_common serpent_generic twofish_generic twofish_common algif_skcipher af_alg nls_iso8859_1 ipmi_ssif joydev input_leds ipmi_devintf ipmi_msghandler thunderx2_pmu sch_fq_codel ib_iser rdma_cm iw_cm ib_cm ib_core iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi ip_tables x_tables autofs4 btrfs zstd_compress raid10 raid456 [ 1108.627576] async_raid6_recov async_memcpy async_pq async_xor async_tx xor xor_neon raid6_pq libcrc32c raid1 raid0 multipath linear i2c_smbus aes_ce_blk aes_ce_cipher uas ast i2c_algo_bit ttm drm_kms_helper syscopyarea crct10dif_ce usb_storage ghash_ce sysfillrect qede sha2_ce sysimgblt mpt3sas fb_sys_fops qed sha256_arm64 sha1_ce raid_class drm scsi_transport_sas ahci crc8 gpio_xlp i2c_xlp9xx hid_generic usbhid hid aes_neon_bs aes_neon_blk crypto_simd cryptd aes_arm64 [ 1108.627607] Process stress-ng-sysfs (pid: 203940, stack limit = 0x47d7ff87) [ 1108.627612] CPU: 93 PID: 203940 Comm: stress-ng-sysfs Not tainted 5.0.0-47-generic #51~18.04.1-Ubuntu [ 1108.627614] Hardware name: To be filled by O.E.M. Saber/Saber, BIOS 0ACKL027 07/01/2019 [ 1108.627616] pstate: 8049 (Nzcv daif +PAN -UAO) [ 1108.627623] pc : __memcpy+0x9c/0x180 [ 1108.627629] lr : memory_read_from_buffer+0x64/0x88 [ 1108.627630] sp : 59933c90 [ 1108.627631] x29: 59933c90 x28: 809e4d35ac40 [ 1108.627634] x27: x26: [ 1108.627636] x25: 5600 x24: 46af [ 1108.627637] x23: 809ee6fad000 x22: 0003 [ 1108.627639] x21: 59933d08 x20: 0003 [ 1108.627640] x19: 0001 x18: [ 1108.627641] x17: x16: [ 1108.627643] x15: x14: [ 1108.627644] x13: x12: [ 1108.627645] x11: x10: [ 1108.627647] x9 : x8 : [ 1108.627648] x7 : 106cd1d8 x6 : 809ee6fad000 [ 1108.627650] x5 : 0003 x4 : 0001 [ 1108.627651] x3 : 46af x2 : 0003 [ 1108.627653] x1 : 46ad x0 : 809ee6fad000 [ 1108.627655] Call trace: [ 1108.627657] __memcpy+0x9c/0x180 [ 1108.627661] acpi_data_show+0x54/0x80 [ 1108.627664] sysfs_kf_bin_read+0x6c/0xa8 [ 1108.627669] kernfs_fop_read+0xa8/0x228 [ 1108.627674] __vfs_read+0x48/0x80 [ 1108.627676] vfs_read+0x94/0x150 [ 1108.627678] ksys_read+0x74/0xf0 [ 1108.627680] __arm64_sys_read+0x24/0x30 [ 1108.627686] el0_svc_common+0x88/0x180 [ 1108.627688] el0_svc_handler+0x38/0x78 [ 1108.627692] el0_svc+0x8/0xc [ 1108.627695] Code: 36100062 b8404423 b80044c3 36080062 (78402423) [ 1108.627698] ---[ end trace 3ac0a382f7e22655 ]--- [ 1108.631236] Mem abort info: [ 1108.634018] ESR = 0x9621 [ 1108.634020] Exception class = DABT (current EL), IL = 32 bits [ 1108.634021] SET = 0, FnV = 0 [ 1108.634025] EA = 0, S1PTW = 0 [ 1108.641929] ESR = 0x9621 [ 1108.641930] Exception class = DABT (current EL), IL = 32 bits [ 1108.641931] SET = 0, FnV = 0 [ 1108.641934] EA = 0, S1PTW = 0 [ 1108.644717] Data abort info: [
[Kernel-packages] [Bug 1866772] Re: Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Tested on Bionic with kernel 4.15.0-97-generic #98 with reproducer and
stress-ng sysfs test, fix worked fine.
** Tags removed: verification-needed-bionic
** Tags added: verification-done-bionic
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1866772
Title:
Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Status in Stress-ng:
New
Status in ubuntu-kernel-tests:
In Progress
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Bionic:
Fix Committed
Status in linux source package in Eoan:
Fix Committed
Status in linux source package in Focal:
Fix Released
Bug description:
== SRU Request [ BIONIC, EOAN, FOCAL ] ==
Reading /sys/firmware/acpi/tables/data/BERT as root at at odd byte
offset will cause an oops. This is because the source address is I/O
mapped and this needs to be read with an I/O memcpy rather than an
memcpy.
== Fix ==
The fix is upstream (linux-next) commit that will land in 5.7, the
backport to bionic, eoan and focal is just a minor context wiggle.
commit 08c07cefb3042a55bc9f8243814b504d5eff93f3
Author: Colin Ian King
Date: Thu Mar 12 11:13:45 2020 +
ACPI: sysfs: copy ACPI data using io memory copying
== Test ==
Running on hotdog with the reproducer below (run as root):
#include
#include
#include
#include
#include
#include
#include
int main(void)
{
int fd;
char buffer[3];
ssize_t n;
fd = open("/sys/firmware/acpi/tables/data/BERT", O_RDONLY);
if (fd < 0) {
fprintf(stderr, "open failed: %d (%s)\n", errno,
strerror(errno));
return -1;
}
do {
n = read(fd, buffer, sizeof(buffer));
} while (n > 0);
return 0;
}
Without the fix it will oops. With the fix it works OK.
== Regession Potential ==
This only affects the reading of the ACPI BERT table from /sys as root
so it is limited in scope to just a very narrow use case. Normally the
BERT table is just handled by the kernel, so access to this table is
just for debugging purposes.
---
Issue found on new ARM64 node "hotdog" 4.15.0-91.92~16.04.1
Failed 2 of 2 attempts.
Test suite HEAD SHA1: 3f43e81
sysfs STARTING
sysfs RETURNED 0
sysfs FAILED (kernel oopsed)
[ 1075.760640] Unable to handle kernel paging request at virtual address
4a70072a
[ 1075.763319] Unable to handle kernel paging request at virtual address
4a70e4ba
[ 1075.768563] Mem abort info:
[ 1075.768566] ESR = 0x9621
[ 1075.768568] Exception class = DABT (current EL), IL = 32 bits
[ 1075.768569] SET = 0, FnV = 0
[ 1075.768570] EA = 0, S1PTW = 0
[ 1075.768571] Data abort info:
[ 1075.768577] ISV = 0, ISS = 0x0021
[ 1075.776489] Mem abort info:
[ 1075.776491] ESR = 0x9621
[ 1075.776493] Exception class = DABT (current EL), IL = 32 bits
[ 1075.776494] SET = 0, FnV = 0
[ 1075.776495] EA = 0, S1PTW = 0
[ 1075.776496] Data abort info:
[ 1075.776500] ISV = 0, ISS = 0x0021
[ 1075.779284] CM = 0, WnR = 0
[ 1075.779288] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.779290] [4a70072a] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=006880280703
[ 1075.782342] CM = 0, WnR = 0
[ 1075.782346] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.782352] [4a70e4ba] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=00688028e703
[ 1075.788262] Internal error: Oops: 9621 [#2] SMP
[ 1075.788269] Modules linked in: unix_diag binfmt_misc snd_seq
snd_seq_device snd_timer snd soundcore userio vfio_iommu_type1 vfio hci_vhci
bluetooth ecdh_generic uhid cuse vhost_vsock vmw_vsock_virtio_transport_common
vhost_net vhost vsock tap dccp_ipv4 dccp ipx p8023 atm psnap p8022 llc
algif_rng algif_aead anubis fcrypt khazad seed tea md4 michael_mic
poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic tgr192
wp512 algif_hash chacha20_neon chacha20_generic blowfish_generic
blowfish_common cast5_generic des_generic salsa20_generic camellia_generic
cast6_generic cast_common serpent_generic twofish_generic twofish_common
algif_skcipher af_alg nls_iso8859_1 ipmi_ssif ipmi_devintf joydev input_leds
ipmi_msghandler shpchp i2c_xlp9xx(+) thunderx2_pmu ib_iser rdma_cm iw_cm ib_cm
ib_core
[ 1075.942470] iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi autofs4
btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq
async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear
hid_generic usbhid hid uas usb_storage aes_ce_blk aes_ce_cipher crc32_ce qede
ast i2c_algo_bit crct10dif_ce ptp
[Kernel-packages] [Bug 1866772] Re: Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
This bug is awaiting verification that the kernel in -proposed solves
the problem. Please test the kernel and update this bug with the
results. If the problem is solved, change the tag 'verification-needed-
bionic' to 'verification-done-bionic'. If the problem still exists,
change the tag 'verification-needed-bionic' to 'verification-failed-
bionic'.
If verification is not done by 5 working days from today, this fix will
be dropped from the source code, and this bug will be closed.
See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how
to enable and use -proposed. Thank you!
** Tags added: verification-needed-bionic
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1866772
Title:
Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Status in Stress-ng:
New
Status in ubuntu-kernel-tests:
In Progress
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Bionic:
Fix Committed
Status in linux source package in Eoan:
Fix Committed
Status in linux source package in Focal:
Fix Released
Bug description:
== SRU Request [ BIONIC, EOAN, FOCAL ] ==
Reading /sys/firmware/acpi/tables/data/BERT as root at at odd byte
offset will cause an oops. This is because the source address is I/O
mapped and this needs to be read with an I/O memcpy rather than an
memcpy.
== Fix ==
The fix is upstream (linux-next) commit that will land in 5.7, the
backport to bionic, eoan and focal is just a minor context wiggle.
commit 08c07cefb3042a55bc9f8243814b504d5eff93f3
Author: Colin Ian King
Date: Thu Mar 12 11:13:45 2020 +
ACPI: sysfs: copy ACPI data using io memory copying
== Test ==
Running on hotdog with the reproducer below (run as root):
#include
#include
#include
#include
#include
#include
#include
int main(void)
{
int fd;
char buffer[3];
ssize_t n;
fd = open("/sys/firmware/acpi/tables/data/BERT", O_RDONLY);
if (fd < 0) {
fprintf(stderr, "open failed: %d (%s)\n", errno,
strerror(errno));
return -1;
}
do {
n = read(fd, buffer, sizeof(buffer));
} while (n > 0);
return 0;
}
Without the fix it will oops. With the fix it works OK.
== Regession Potential ==
This only affects the reading of the ACPI BERT table from /sys as root
so it is limited in scope to just a very narrow use case. Normally the
BERT table is just handled by the kernel, so access to this table is
just for debugging purposes.
---
Issue found on new ARM64 node "hotdog" 4.15.0-91.92~16.04.1
Failed 2 of 2 attempts.
Test suite HEAD SHA1: 3f43e81
sysfs STARTING
sysfs RETURNED 0
sysfs FAILED (kernel oopsed)
[ 1075.760640] Unable to handle kernel paging request at virtual address
4a70072a
[ 1075.763319] Unable to handle kernel paging request at virtual address
4a70e4ba
[ 1075.768563] Mem abort info:
[ 1075.768566] ESR = 0x9621
[ 1075.768568] Exception class = DABT (current EL), IL = 32 bits
[ 1075.768569] SET = 0, FnV = 0
[ 1075.768570] EA = 0, S1PTW = 0
[ 1075.768571] Data abort info:
[ 1075.768577] ISV = 0, ISS = 0x0021
[ 1075.776489] Mem abort info:
[ 1075.776491] ESR = 0x9621
[ 1075.776493] Exception class = DABT (current EL), IL = 32 bits
[ 1075.776494] SET = 0, FnV = 0
[ 1075.776495] EA = 0, S1PTW = 0
[ 1075.776496] Data abort info:
[ 1075.776500] ISV = 0, ISS = 0x0021
[ 1075.779284] CM = 0, WnR = 0
[ 1075.779288] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.779290] [4a70072a] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=006880280703
[ 1075.782342] CM = 0, WnR = 0
[ 1075.782346] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.782352] [4a70e4ba] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=00688028e703
[ 1075.788262] Internal error: Oops: 9621 [#2] SMP
[ 1075.788269] Modules linked in: unix_diag binfmt_misc snd_seq
snd_seq_device snd_timer snd soundcore userio vfio_iommu_type1 vfio hci_vhci
bluetooth ecdh_generic uhid cuse vhost_vsock vmw_vsock_virtio_transport_common
vhost_net vhost vsock tap dccp_ipv4 dccp ipx p8023 atm psnap p8022 llc
algif_rng algif_aead anubis fcrypt khazad seed tea md4 michael_mic
poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic tgr192
wp512 algif_hash chacha20_neon chacha20_generic blowfish_generic
blowfish_common cast5_generic des_generic salsa20_generic camellia_generic
cast6_generic cast_common serpent_generic twofish_generic twofish_common
algif_skcipher af_alg nls_iso8859_1 ipmi_ssif ipmi_devintf
[Kernel-packages] [Bug 1866772] Re: Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Focal passes autotest stress-ng tests:
14:06:30 INFO | Summary:
14:06:30 INFO | Stressors run: 191
14:06:30 INFO | Skipped: 1, binderfs
14:06:30 INFO | Failed: 0,
14:06:30 INFO | Oopsed: 0,
14:06:30 INFO | Oomed: 0,
14:06:30 INFO | Passed: 190, access af-alg affinity aio aiol bad-altstack
bigheap branch brk cache cap chattr chdir chmod chown chroot clock close
context cpu crypt cyclic daemon dccp dentry dev dev-shm dir dirdeep dnotify dup
dynlib enosys env epoll eventfd fallocate fanotify fault fcntl fiemap fifo
file-ioctl filename flock fork fp-error fstat full funcret futex get getdent
getrandom handle hdd hrtimers icache icmp-flood inode-flags inotify io iomix
ioprio ipsec-mb itimer judy key kill klog lease link locka lockbus lockf
lockofd loop madvise malloc mcontend membarrier memfd memhotplug memrate
memthrash mergesort mincore mknod mlock mmap mmapaddr mmapfixed mmapfork
mmapmany mq mremap msg msync netdev netlink-proc netlink-task nice null open
personality physpage pidfd pipe pipeherd pkey poll prctl procfs pthread ptrace
pty radixsort ramfs rawdev rawsock readahead reboot rename revio rlimit rmap
rtc schedpolicy sctp seal seccomp seek sem sem-sysv sendfile set shellsort shm
shm-sysv sigfd sigfpe sigio sigpending sigpipe sigq sigrt sigsegv sigsuspend
skiplist sleep sock sockabuse sockdiag sockmany softlockup splice stackmmap
stream swap switch symlink sync-file sysbadaddr sysfs tee timer timerfd
tlb-shootdown tmpfs tree tsearch tun udp udp-flood unshare urandom userfaultfd
utime vdso vfork vm vm-addr vm-rw vm-segv vm-splice wait x86syscall yield zero
zombie
14:06:30 INFO | Badret: 0,
14:06:30 INFO |
14:06:30 INFO | Tests took 972 seconds to run
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1866772
Title:
Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Status in Stress-ng:
New
Status in ubuntu-kernel-tests:
In Progress
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Bionic:
Fix Committed
Status in linux source package in Eoan:
Fix Committed
Status in linux source package in Focal:
Fix Released
Bug description:
== SRU Request [ BIONIC, EOAN, FOCAL ] ==
Reading /sys/firmware/acpi/tables/data/BERT as root at at odd byte
offset will cause an oops. This is because the source address is I/O
mapped and this needs to be read with an I/O memcpy rather than an
memcpy.
== Fix ==
The fix is upstream (linux-next) commit that will land in 5.7, the
backport to bionic, eoan and focal is just a minor context wiggle.
commit 08c07cefb3042a55bc9f8243814b504d5eff93f3
Author: Colin Ian King
Date: Thu Mar 12 11:13:45 2020 +
ACPI: sysfs: copy ACPI data using io memory copying
== Test ==
Running on hotdog with the reproducer below (run as root):
#include
#include
#include
#include
#include
#include
#include
int main(void)
{
int fd;
char buffer[3];
ssize_t n;
fd = open("/sys/firmware/acpi/tables/data/BERT", O_RDONLY);
if (fd < 0) {
fprintf(stderr, "open failed: %d (%s)\n", errno,
strerror(errno));
return -1;
}
do {
n = read(fd, buffer, sizeof(buffer));
} while (n > 0);
return 0;
}
Without the fix it will oops. With the fix it works OK.
== Regession Potential ==
This only affects the reading of the ACPI BERT table from /sys as root
so it is limited in scope to just a very narrow use case. Normally the
BERT table is just handled by the kernel, so access to this table is
just for debugging purposes.
---
Issue found on new ARM64 node "hotdog" 4.15.0-91.92~16.04.1
Failed 2 of 2 attempts.
Test suite HEAD SHA1: 3f43e81
sysfs STARTING
sysfs RETURNED 0
sysfs FAILED (kernel oopsed)
[ 1075.760640] Unable to handle kernel paging request at virtual address
4a70072a
[ 1075.763319] Unable to handle kernel paging request at virtual address
4a70e4ba
[ 1075.768563] Mem abort info:
[ 1075.768566] ESR = 0x9621
[ 1075.768568] Exception class = DABT (current EL), IL = 32 bits
[ 1075.768569] SET = 0, FnV = 0
[ 1075.768570] EA = 0, S1PTW = 0
[ 1075.768571] Data abort info:
[ 1075.768577] ISV = 0, ISS = 0x0021
[ 1075.776489] Mem abort info:
[ 1075.776491] ESR = 0x9621
[ 1075.776493] Exception class = DABT (current EL), IL = 32 bits
[ 1075.776494] SET = 0, FnV = 0
[ 1075.776495] EA = 0, S1PTW = 0
[ 1075.776496] Data abort info:
[ 1075.776500] ISV = 0, ISS = 0x0021
[ 1075.779284] CM = 0, WnR = 0
[ 1075.779288] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.779290] [4a70072a] *pgd=00bffcffe003,
[Kernel-packages] [Bug 1866772] Re: Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Tested on Focal with kernel 5.4.0-23-generic #27-Ubuntu with reproducer
and it works fine. There is another issue with the sysfs test, need to
debug that and I'll file another bug for that.
** Tags removed: verification-needed-focal
** Tags added: verification-done-focal
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1866772
Title:
Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Status in Stress-ng:
New
Status in ubuntu-kernel-tests:
In Progress
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Bionic:
Fix Committed
Status in linux source package in Eoan:
Fix Committed
Status in linux source package in Focal:
Fix Released
Bug description:
== SRU Request [ BIONIC, EOAN, FOCAL ] ==
Reading /sys/firmware/acpi/tables/data/BERT as root at at odd byte
offset will cause an oops. This is because the source address is I/O
mapped and this needs to be read with an I/O memcpy rather than an
memcpy.
== Fix ==
The fix is upstream (linux-next) commit that will land in 5.7, the
backport to bionic, eoan and focal is just a minor context wiggle.
commit 08c07cefb3042a55bc9f8243814b504d5eff93f3
Author: Colin Ian King
Date: Thu Mar 12 11:13:45 2020 +
ACPI: sysfs: copy ACPI data using io memory copying
== Test ==
Running on hotdog with the reproducer below (run as root):
#include
#include
#include
#include
#include
#include
#include
int main(void)
{
int fd;
char buffer[3];
ssize_t n;
fd = open("/sys/firmware/acpi/tables/data/BERT", O_RDONLY);
if (fd < 0) {
fprintf(stderr, "open failed: %d (%s)\n", errno,
strerror(errno));
return -1;
}
do {
n = read(fd, buffer, sizeof(buffer));
} while (n > 0);
return 0;
}
Without the fix it will oops. With the fix it works OK.
== Regession Potential ==
This only affects the reading of the ACPI BERT table from /sys as root
so it is limited in scope to just a very narrow use case. Normally the
BERT table is just handled by the kernel, so access to this table is
just for debugging purposes.
---
Issue found on new ARM64 node "hotdog" 4.15.0-91.92~16.04.1
Failed 2 of 2 attempts.
Test suite HEAD SHA1: 3f43e81
sysfs STARTING
sysfs RETURNED 0
sysfs FAILED (kernel oopsed)
[ 1075.760640] Unable to handle kernel paging request at virtual address
4a70072a
[ 1075.763319] Unable to handle kernel paging request at virtual address
4a70e4ba
[ 1075.768563] Mem abort info:
[ 1075.768566] ESR = 0x9621
[ 1075.768568] Exception class = DABT (current EL), IL = 32 bits
[ 1075.768569] SET = 0, FnV = 0
[ 1075.768570] EA = 0, S1PTW = 0
[ 1075.768571] Data abort info:
[ 1075.768577] ISV = 0, ISS = 0x0021
[ 1075.776489] Mem abort info:
[ 1075.776491] ESR = 0x9621
[ 1075.776493] Exception class = DABT (current EL), IL = 32 bits
[ 1075.776494] SET = 0, FnV = 0
[ 1075.776495] EA = 0, S1PTW = 0
[ 1075.776496] Data abort info:
[ 1075.776500] ISV = 0, ISS = 0x0021
[ 1075.779284] CM = 0, WnR = 0
[ 1075.779288] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.779290] [4a70072a] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=006880280703
[ 1075.782342] CM = 0, WnR = 0
[ 1075.782346] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.782352] [4a70e4ba] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=00688028e703
[ 1075.788262] Internal error: Oops: 9621 [#2] SMP
[ 1075.788269] Modules linked in: unix_diag binfmt_misc snd_seq
snd_seq_device snd_timer snd soundcore userio vfio_iommu_type1 vfio hci_vhci
bluetooth ecdh_generic uhid cuse vhost_vsock vmw_vsock_virtio_transport_common
vhost_net vhost vsock tap dccp_ipv4 dccp ipx p8023 atm psnap p8022 llc
algif_rng algif_aead anubis fcrypt khazad seed tea md4 michael_mic
poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic tgr192
wp512 algif_hash chacha20_neon chacha20_generic blowfish_generic
blowfish_common cast5_generic des_generic salsa20_generic camellia_generic
cast6_generic cast_common serpent_generic twofish_generic twofish_common
algif_skcipher af_alg nls_iso8859_1 ipmi_ssif ipmi_devintf joydev input_leds
ipmi_msghandler shpchp i2c_xlp9xx(+) thunderx2_pmu ib_iser rdma_cm iw_cm ib_cm
ib_core
[ 1075.942470] iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi autofs4
btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq
async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear
hid_generic usbhid hid uas usb_storage
[Kernel-packages] [Bug 1866772] Re: Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Tested on Eoan with kernel 5.3.0-47-generic #39-Ubuntu with reproducer
and stress-ng sysfs test, fix worked fine.
** Tags removed: verification-needed-eoan
** Tags added: verification-done-eoan
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1866772
Title:
Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Status in Stress-ng:
New
Status in ubuntu-kernel-tests:
In Progress
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Bionic:
Fix Committed
Status in linux source package in Eoan:
Fix Committed
Status in linux source package in Focal:
Fix Released
Bug description:
== SRU Request [ BIONIC, EOAN, FOCAL ] ==
Reading /sys/firmware/acpi/tables/data/BERT as root at at odd byte
offset will cause an oops. This is because the source address is I/O
mapped and this needs to be read with an I/O memcpy rather than an
memcpy.
== Fix ==
The fix is upstream (linux-next) commit that will land in 5.7, the
backport to bionic, eoan and focal is just a minor context wiggle.
commit 08c07cefb3042a55bc9f8243814b504d5eff93f3
Author: Colin Ian King
Date: Thu Mar 12 11:13:45 2020 +
ACPI: sysfs: copy ACPI data using io memory copying
== Test ==
Running on hotdog with the reproducer below (run as root):
#include
#include
#include
#include
#include
#include
#include
int main(void)
{
int fd;
char buffer[3];
ssize_t n;
fd = open("/sys/firmware/acpi/tables/data/BERT", O_RDONLY);
if (fd < 0) {
fprintf(stderr, "open failed: %d (%s)\n", errno,
strerror(errno));
return -1;
}
do {
n = read(fd, buffer, sizeof(buffer));
} while (n > 0);
return 0;
}
Without the fix it will oops. With the fix it works OK.
== Regession Potential ==
This only affects the reading of the ACPI BERT table from /sys as root
so it is limited in scope to just a very narrow use case. Normally the
BERT table is just handled by the kernel, so access to this table is
just for debugging purposes.
---
Issue found on new ARM64 node "hotdog" 4.15.0-91.92~16.04.1
Failed 2 of 2 attempts.
Test suite HEAD SHA1: 3f43e81
sysfs STARTING
sysfs RETURNED 0
sysfs FAILED (kernel oopsed)
[ 1075.760640] Unable to handle kernel paging request at virtual address
4a70072a
[ 1075.763319] Unable to handle kernel paging request at virtual address
4a70e4ba
[ 1075.768563] Mem abort info:
[ 1075.768566] ESR = 0x9621
[ 1075.768568] Exception class = DABT (current EL), IL = 32 bits
[ 1075.768569] SET = 0, FnV = 0
[ 1075.768570] EA = 0, S1PTW = 0
[ 1075.768571] Data abort info:
[ 1075.768577] ISV = 0, ISS = 0x0021
[ 1075.776489] Mem abort info:
[ 1075.776491] ESR = 0x9621
[ 1075.776493] Exception class = DABT (current EL), IL = 32 bits
[ 1075.776494] SET = 0, FnV = 0
[ 1075.776495] EA = 0, S1PTW = 0
[ 1075.776496] Data abort info:
[ 1075.776500] ISV = 0, ISS = 0x0021
[ 1075.779284] CM = 0, WnR = 0
[ 1075.779288] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.779290] [4a70072a] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=006880280703
[ 1075.782342] CM = 0, WnR = 0
[ 1075.782346] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.782352] [4a70e4ba] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=00688028e703
[ 1075.788262] Internal error: Oops: 9621 [#2] SMP
[ 1075.788269] Modules linked in: unix_diag binfmt_misc snd_seq
snd_seq_device snd_timer snd soundcore userio vfio_iommu_type1 vfio hci_vhci
bluetooth ecdh_generic uhid cuse vhost_vsock vmw_vsock_virtio_transport_common
vhost_net vhost vsock tap dccp_ipv4 dccp ipx p8023 atm psnap p8022 llc
algif_rng algif_aead anubis fcrypt khazad seed tea md4 michael_mic
poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic tgr192
wp512 algif_hash chacha20_neon chacha20_generic blowfish_generic
blowfish_common cast5_generic des_generic salsa20_generic camellia_generic
cast6_generic cast_common serpent_generic twofish_generic twofish_common
algif_skcipher af_alg nls_iso8859_1 ipmi_ssif ipmi_devintf joydev input_leds
ipmi_msghandler shpchp i2c_xlp9xx(+) thunderx2_pmu ib_iser rdma_cm iw_cm ib_cm
ib_core
[ 1075.942470] iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi autofs4
btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq
async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear
hid_generic usbhid hid uas usb_storage aes_ce_blk aes_ce_cipher crc32_ce qede
ast i2c_algo_bit crct10dif_ce ptp
[Kernel-packages] [Bug 1866772] Re: Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
This bug is awaiting verification that the kernel in -proposed solves
the problem. Please test the kernel and update this bug with the
results. If the problem is solved, change the tag 'verification-needed-
eoan' to 'verification-done-eoan'. If the problem still exists, change
the tag 'verification-needed-eoan' to 'verification-failed-eoan'.
If verification is not done by 5 working days from today, this fix will
be dropped from the source code, and this bug will be closed.
See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how
to enable and use -proposed. Thank you!
** Tags added: verification-needed-eoan
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1866772
Title:
Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Status in Stress-ng:
New
Status in ubuntu-kernel-tests:
In Progress
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Bionic:
Fix Committed
Status in linux source package in Eoan:
Fix Committed
Status in linux source package in Focal:
Fix Released
Bug description:
== SRU Request [ BIONIC, EOAN, FOCAL ] ==
Reading /sys/firmware/acpi/tables/data/BERT as root at at odd byte
offset will cause an oops. This is because the source address is I/O
mapped and this needs to be read with an I/O memcpy rather than an
memcpy.
== Fix ==
The fix is upstream (linux-next) commit that will land in 5.7, the
backport to bionic, eoan and focal is just a minor context wiggle.
commit 08c07cefb3042a55bc9f8243814b504d5eff93f3
Author: Colin Ian King
Date: Thu Mar 12 11:13:45 2020 +
ACPI: sysfs: copy ACPI data using io memory copying
== Test ==
Running on hotdog with the reproducer below (run as root):
#include
#include
#include
#include
#include
#include
#include
int main(void)
{
int fd;
char buffer[3];
ssize_t n;
fd = open("/sys/firmware/acpi/tables/data/BERT", O_RDONLY);
if (fd < 0) {
fprintf(stderr, "open failed: %d (%s)\n", errno,
strerror(errno));
return -1;
}
do {
n = read(fd, buffer, sizeof(buffer));
} while (n > 0);
return 0;
}
Without the fix it will oops. With the fix it works OK.
== Regession Potential ==
This only affects the reading of the ACPI BERT table from /sys as root
so it is limited in scope to just a very narrow use case. Normally the
BERT table is just handled by the kernel, so access to this table is
just for debugging purposes.
---
Issue found on new ARM64 node "hotdog" 4.15.0-91.92~16.04.1
Failed 2 of 2 attempts.
Test suite HEAD SHA1: 3f43e81
sysfs STARTING
sysfs RETURNED 0
sysfs FAILED (kernel oopsed)
[ 1075.760640] Unable to handle kernel paging request at virtual address
4a70072a
[ 1075.763319] Unable to handle kernel paging request at virtual address
4a70e4ba
[ 1075.768563] Mem abort info:
[ 1075.768566] ESR = 0x9621
[ 1075.768568] Exception class = DABT (current EL), IL = 32 bits
[ 1075.768569] SET = 0, FnV = 0
[ 1075.768570] EA = 0, S1PTW = 0
[ 1075.768571] Data abort info:
[ 1075.768577] ISV = 0, ISS = 0x0021
[ 1075.776489] Mem abort info:
[ 1075.776491] ESR = 0x9621
[ 1075.776493] Exception class = DABT (current EL), IL = 32 bits
[ 1075.776494] SET = 0, FnV = 0
[ 1075.776495] EA = 0, S1PTW = 0
[ 1075.776496] Data abort info:
[ 1075.776500] ISV = 0, ISS = 0x0021
[ 1075.779284] CM = 0, WnR = 0
[ 1075.779288] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.779290] [4a70072a] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=006880280703
[ 1075.782342] CM = 0, WnR = 0
[ 1075.782346] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.782352] [4a70e4ba] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=00688028e703
[ 1075.788262] Internal error: Oops: 9621 [#2] SMP
[ 1075.788269] Modules linked in: unix_diag binfmt_misc snd_seq
snd_seq_device snd_timer snd soundcore userio vfio_iommu_type1 vfio hci_vhci
bluetooth ecdh_generic uhid cuse vhost_vsock vmw_vsock_virtio_transport_common
vhost_net vhost vsock tap dccp_ipv4 dccp ipx p8023 atm psnap p8022 llc
algif_rng algif_aead anubis fcrypt khazad seed tea md4 michael_mic
poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic tgr192
wp512 algif_hash chacha20_neon chacha20_generic blowfish_generic
blowfish_common cast5_generic des_generic salsa20_generic camellia_generic
cast6_generic cast_common serpent_generic twofish_generic twofish_common
algif_skcipher af_alg nls_iso8859_1 ipmi_ssif ipmi_devintf joydev
[Kernel-packages] [Bug 1866772] Re: Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
** Changed in: linux (Ubuntu Bionic)
Status: Incomplete => Fix Committed
** Changed in: linux (Ubuntu Eoan)
Status: Incomplete => Fix Committed
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1866772
Title:
Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Status in Stress-ng:
New
Status in ubuntu-kernel-tests:
In Progress
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Bionic:
Fix Committed
Status in linux source package in Eoan:
Fix Committed
Status in linux source package in Focal:
Fix Released
Bug description:
== SRU Request [ BIONIC, EOAN, FOCAL ] ==
Reading /sys/firmware/acpi/tables/data/BERT as root at at odd byte
offset will cause an oops. This is because the source address is I/O
mapped and this needs to be read with an I/O memcpy rather than an
memcpy.
== Fix ==
The fix is upstream (linux-next) commit that will land in 5.7, the
backport to bionic, eoan and focal is just a minor context wiggle.
commit 08c07cefb3042a55bc9f8243814b504d5eff93f3
Author: Colin Ian King
Date: Thu Mar 12 11:13:45 2020 +
ACPI: sysfs: copy ACPI data using io memory copying
== Test ==
Running on hotdog with the reproducer below (run as root):
#include
#include
#include
#include
#include
#include
#include
int main(void)
{
int fd;
char buffer[3];
ssize_t n;
fd = open("/sys/firmware/acpi/tables/data/BERT", O_RDONLY);
if (fd < 0) {
fprintf(stderr, "open failed: %d (%s)\n", errno,
strerror(errno));
return -1;
}
do {
n = read(fd, buffer, sizeof(buffer));
} while (n > 0);
return 0;
}
Without the fix it will oops. With the fix it works OK.
== Regession Potential ==
This only affects the reading of the ACPI BERT table from /sys as root
so it is limited in scope to just a very narrow use case. Normally the
BERT table is just handled by the kernel, so access to this table is
just for debugging purposes.
---
Issue found on new ARM64 node "hotdog" 4.15.0-91.92~16.04.1
Failed 2 of 2 attempts.
Test suite HEAD SHA1: 3f43e81
sysfs STARTING
sysfs RETURNED 0
sysfs FAILED (kernel oopsed)
[ 1075.760640] Unable to handle kernel paging request at virtual address
4a70072a
[ 1075.763319] Unable to handle kernel paging request at virtual address
4a70e4ba
[ 1075.768563] Mem abort info:
[ 1075.768566] ESR = 0x9621
[ 1075.768568] Exception class = DABT (current EL), IL = 32 bits
[ 1075.768569] SET = 0, FnV = 0
[ 1075.768570] EA = 0, S1PTW = 0
[ 1075.768571] Data abort info:
[ 1075.768577] ISV = 0, ISS = 0x0021
[ 1075.776489] Mem abort info:
[ 1075.776491] ESR = 0x9621
[ 1075.776493] Exception class = DABT (current EL), IL = 32 bits
[ 1075.776494] SET = 0, FnV = 0
[ 1075.776495] EA = 0, S1PTW = 0
[ 1075.776496] Data abort info:
[ 1075.776500] ISV = 0, ISS = 0x0021
[ 1075.779284] CM = 0, WnR = 0
[ 1075.779288] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.779290] [4a70072a] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=006880280703
[ 1075.782342] CM = 0, WnR = 0
[ 1075.782346] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.782352] [4a70e4ba] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=00688028e703
[ 1075.788262] Internal error: Oops: 9621 [#2] SMP
[ 1075.788269] Modules linked in: unix_diag binfmt_misc snd_seq
snd_seq_device snd_timer snd soundcore userio vfio_iommu_type1 vfio hci_vhci
bluetooth ecdh_generic uhid cuse vhost_vsock vmw_vsock_virtio_transport_common
vhost_net vhost vsock tap dccp_ipv4 dccp ipx p8023 atm psnap p8022 llc
algif_rng algif_aead anubis fcrypt khazad seed tea md4 michael_mic
poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic tgr192
wp512 algif_hash chacha20_neon chacha20_generic blowfish_generic
blowfish_common cast5_generic des_generic salsa20_generic camellia_generic
cast6_generic cast_common serpent_generic twofish_generic twofish_common
algif_skcipher af_alg nls_iso8859_1 ipmi_ssif ipmi_devintf joydev input_leds
ipmi_msghandler shpchp i2c_xlp9xx(+) thunderx2_pmu ib_iser rdma_cm iw_cm ib_cm
ib_core
[ 1075.942470] iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi autofs4
btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq
async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear
hid_generic usbhid hid uas usb_storage aes_ce_blk aes_ce_cipher crc32_ce qede
ast i2c_algo_bit crct10dif_ce ptp ghash_ce ttm drm_kms_helper sha2_ce
[Kernel-packages] [Bug 1866772] Re: Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
This bug was fixed in the package linux - 5.4.0-21.25
---
linux (5.4.0-21.25) focal; urgency=medium
* CVE-2020-8835
- SAUCE: bpf: undo incorrect __reg_bound_offset32 handling
-- Thadeu Lima de Souza Cascardo Thu, 26 Mar
2020 17:51:28 -0300
** Changed in: linux (Ubuntu Focal)
Status: Incomplete => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-8835
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1866772
Title:
Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Status in Stress-ng:
New
Status in ubuntu-kernel-tests:
In Progress
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Bionic:
Incomplete
Status in linux source package in Eoan:
Incomplete
Status in linux source package in Focal:
Fix Released
Bug description:
== SRU Request [ BIONIC, EOAN, FOCAL ] ==
Reading /sys/firmware/acpi/tables/data/BERT as root at at odd byte
offset will cause an oops. This is because the source address is I/O
mapped and this needs to be read with an I/O memcpy rather than an
memcpy.
== Fix ==
The fix is upstream (linux-next) commit that will land in 5.7, the
backport to bionic, eoan and focal is just a minor context wiggle.
commit 08c07cefb3042a55bc9f8243814b504d5eff93f3
Author: Colin Ian King
Date: Thu Mar 12 11:13:45 2020 +
ACPI: sysfs: copy ACPI data using io memory copying
== Test ==
Running on hotdog with the reproducer below (run as root):
#include
#include
#include
#include
#include
#include
#include
int main(void)
{
int fd;
char buffer[3];
ssize_t n;
fd = open("/sys/firmware/acpi/tables/data/BERT", O_RDONLY);
if (fd < 0) {
fprintf(stderr, "open failed: %d (%s)\n", errno,
strerror(errno));
return -1;
}
do {
n = read(fd, buffer, sizeof(buffer));
} while (n > 0);
return 0;
}
Without the fix it will oops. With the fix it works OK.
== Regession Potential ==
This only affects the reading of the ACPI BERT table from /sys as root
so it is limited in scope to just a very narrow use case. Normally the
BERT table is just handled by the kernel, so access to this table is
just for debugging purposes.
---
Issue found on new ARM64 node "hotdog" 4.15.0-91.92~16.04.1
Failed 2 of 2 attempts.
Test suite HEAD SHA1: 3f43e81
sysfs STARTING
sysfs RETURNED 0
sysfs FAILED (kernel oopsed)
[ 1075.760640] Unable to handle kernel paging request at virtual address
4a70072a
[ 1075.763319] Unable to handle kernel paging request at virtual address
4a70e4ba
[ 1075.768563] Mem abort info:
[ 1075.768566] ESR = 0x9621
[ 1075.768568] Exception class = DABT (current EL), IL = 32 bits
[ 1075.768569] SET = 0, FnV = 0
[ 1075.768570] EA = 0, S1PTW = 0
[ 1075.768571] Data abort info:
[ 1075.768577] ISV = 0, ISS = 0x0021
[ 1075.776489] Mem abort info:
[ 1075.776491] ESR = 0x9621
[ 1075.776493] Exception class = DABT (current EL), IL = 32 bits
[ 1075.776494] SET = 0, FnV = 0
[ 1075.776495] EA = 0, S1PTW = 0
[ 1075.776496] Data abort info:
[ 1075.776500] ISV = 0, ISS = 0x0021
[ 1075.779284] CM = 0, WnR = 0
[ 1075.779288] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.779290] [4a70072a] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=006880280703
[ 1075.782342] CM = 0, WnR = 0
[ 1075.782346] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.782352] [4a70e4ba] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=00688028e703
[ 1075.788262] Internal error: Oops: 9621 [#2] SMP
[ 1075.788269] Modules linked in: unix_diag binfmt_misc snd_seq
snd_seq_device snd_timer snd soundcore userio vfio_iommu_type1 vfio hci_vhci
bluetooth ecdh_generic uhid cuse vhost_vsock vmw_vsock_virtio_transport_common
vhost_net vhost vsock tap dccp_ipv4 dccp ipx p8023 atm psnap p8022 llc
algif_rng algif_aead anubis fcrypt khazad seed tea md4 michael_mic
poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic tgr192
wp512 algif_hash chacha20_neon chacha20_generic blowfish_generic
blowfish_common cast5_generic des_generic salsa20_generic camellia_generic
cast6_generic cast_common serpent_generic twofish_generic twofish_common
algif_skcipher af_alg nls_iso8859_1 ipmi_ssif ipmi_devintf joydev input_leds
ipmi_msghandler shpchp i2c_xlp9xx(+) thunderx2_pmu ib_iser rdma_cm iw_cm ib_cm
ib_core
[ 1075.942470] iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi autofs4
btrfs zstd_compress raid10 raid456 async_raid6_recov
[Kernel-packages] [Bug 1866772] Re: Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
** Also affects: linux (Ubuntu)
Importance: Undecided
Status: New
** Also affects: linux (Ubuntu Focal)
Importance: Undecided
Status: New
** Also affects: linux (Ubuntu Bionic)
Importance: Undecided
Status: New
** Also affects: linux (Ubuntu Eoan)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1866772
Title:
Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
Status in Stress-ng:
New
Status in ubuntu-kernel-tests:
In Progress
Status in linux package in Ubuntu:
New
Status in linux source package in Bionic:
New
Status in linux source package in Eoan:
New
Status in linux source package in Focal:
New
Bug description:
== SRU Request [ BIONIC, EOAN, FOCAL ] ==
Reading /sys/firmware/acpi/tables/data/BERT as root at at odd byte
offset will cause an oops. This is because the source address is I/O
mapped and this needs to be read with an I/O memcpy rather than an
memcpy.
== Fix ==
The fix is upstream (linux-next) commit that will land in 5.7, the
backport to bionic, eoan and focal is just a minor context wiggle.
commit 08c07cefb3042a55bc9f8243814b504d5eff93f3
Author: Colin Ian King
Date: Thu Mar 12 11:13:45 2020 +
ACPI: sysfs: copy ACPI data using io memory copying
== Test ==
Running on hotdog with the reproducer below (run as root):
#include
#include
#include
#include
#include
#include
#include
int main(void)
{
int fd;
char buffer[3];
ssize_t n;
fd = open("/sys/firmware/acpi/tables/data/BERT", O_RDONLY);
if (fd < 0) {
fprintf(stderr, "open failed: %d (%s)\n", errno,
strerror(errno));
return -1;
}
do {
n = read(fd, buffer, sizeof(buffer));
} while (n > 0);
return 0;
}
Without the fix it will oops. With the fix it works OK.
== Regession Potential ==
This only affects the reading of the ACPI BERT table from /sys as root
so it is limited in scope to just a very narrow use case. Normally the
BERT table is just handled by the kernel, so access to this table is
just for debugging purposes.
---
Issue found on new ARM64 node "hotdog" 4.15.0-91.92~16.04.1
Failed 2 of 2 attempts.
Test suite HEAD SHA1: 3f43e81
sysfs STARTING
sysfs RETURNED 0
sysfs FAILED (kernel oopsed)
[ 1075.760640] Unable to handle kernel paging request at virtual address
4a70072a
[ 1075.763319] Unable to handle kernel paging request at virtual address
4a70e4ba
[ 1075.768563] Mem abort info:
[ 1075.768566] ESR = 0x9621
[ 1075.768568] Exception class = DABT (current EL), IL = 32 bits
[ 1075.768569] SET = 0, FnV = 0
[ 1075.768570] EA = 0, S1PTW = 0
[ 1075.768571] Data abort info:
[ 1075.768577] ISV = 0, ISS = 0x0021
[ 1075.776489] Mem abort info:
[ 1075.776491] ESR = 0x9621
[ 1075.776493] Exception class = DABT (current EL), IL = 32 bits
[ 1075.776494] SET = 0, FnV = 0
[ 1075.776495] EA = 0, S1PTW = 0
[ 1075.776496] Data abort info:
[ 1075.776500] ISV = 0, ISS = 0x0021
[ 1075.779284] CM = 0, WnR = 0
[ 1075.779288] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.779290] [4a70072a] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=006880280703
[ 1075.782342] CM = 0, WnR = 0
[ 1075.782346] swapper pgtable: 4k pages, 48-bit VAs, pgd = facfed4f
[ 1075.782352] [4a70e4ba] *pgd=00bffcffe003,
*pud=009f6122c003, *pmd=00bf5adf4003, *pte=00688028e703
[ 1075.788262] Internal error: Oops: 9621 [#2] SMP
[ 1075.788269] Modules linked in: unix_diag binfmt_misc snd_seq
snd_seq_device snd_timer snd soundcore userio vfio_iommu_type1 vfio hci_vhci
bluetooth ecdh_generic uhid cuse vhost_vsock vmw_vsock_virtio_transport_common
vhost_net vhost vsock tap dccp_ipv4 dccp ipx p8023 atm psnap p8022 llc
algif_rng algif_aead anubis fcrypt khazad seed tea md4 michael_mic
poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic tgr192
wp512 algif_hash chacha20_neon chacha20_generic blowfish_generic
blowfish_common cast5_generic des_generic salsa20_generic camellia_generic
cast6_generic cast_common serpent_generic twofish_generic twofish_common
algif_skcipher af_alg nls_iso8859_1 ipmi_ssif ipmi_devintf joydev input_leds
ipmi_msghandler shpchp i2c_xlp9xx(+) thunderx2_pmu ib_iser rdma_cm iw_cm ib_cm
ib_core
[ 1075.942470] iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi autofs4
btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq
async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear
hid_generic usbhid hid uas
