kernel BUG at /build/linux-lz1RHE/linux-4.10.0/mm/usercopy.c:75!

Bug #1693458 reported by Dani
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Confirmed
Medium
Unassigned

Bug Description

I'm experiencing a freeze of the desktop on a fresh install of 17.04 (ubuntu gnome). It's running on an HP EliteDesk 800 G1 TWR. The kern.log extract is the following:

May 24 12:13:14 danielbitherm kernel: [11545.460598] ------------[ cut here ]------------
May 24 12:13:14 danielbitherm kernel: [11545.460604] kernel BUG at /build/linux-lz1RHE/linux-4.10.0/mm/usercopy.c:75!
May 24 12:13:14 danielbitherm kernel: [11545.460611] invalid opcode: 0000 [#1] SMP
May 24 12:13:14 danielbitherm kernel: [11545.460613] Modules linked in: intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp kvm hp_wmi irqbypass sparse_keymap crct10dif_pclmul crc32_pclmul snd_hda_codec_hdmi ghash_clmulni_intel snd_hda_codec_realtek snd_hda_codec_generic snd_hda_intel pcbc input_leds snd_hda_codec snd_hda_core snd_hwdep snd_pcm snd_seq_midi aesni_intel snd_seq_midi_event snd_rawmidi snd_seq snd_seq_device snd_timer snd soundcore aes_x86_64 crypto_simd glue_helper cryptd mei_me intel_cstate intel_rapl_perf shpchp mei tpm_infineon lpc_ich serio_raw mac_hid parport_pc ppdev lp parport ip_tables x_tables autofs4 hid_generic usbhid hid nouveau mxm_wmi ttm i915 i2c_algo_bit drm_kms_helper psmouse syscopyarea ahci sysfillrect sysimgblt libahci e1000e fb_sys_fops drm ptp pps_core wmi fjes video
May 24 12:13:14 danielbitherm kernel: [11545.460654] CPU: 2 PID: 1513 Comm: Xorg Not tainted 4.10.0-21-generic #23-Ubuntu
May 24 12:13:14 danielbitherm kernel: [11545.460657] Hardware name: Hewlett-Packard HP EliteDesk 800 G1 TWR/18E4, BIOS L01 v02.21 12/17/2013
May 24 12:13:14 danielbitherm kernel: [11545.460660] task: ffff9a3c21a70000 task.stack: ffffbf85c3074000
May 24 12:13:14 danielbitherm kernel: [11545.460665] RIP: 0010:__check_object_size+0x77/0x1d7
May 24 12:13:14 danielbitherm kernel: [11545.460668] RSP: 0018:ffffbf85c3077bf0 EFLAGS: 00010286
May 24 12:13:14 danielbitherm kernel: [11545.460670] RAX: 0000000000000060 RBX: ffff9a3c21ac5eff RCX: 0000000000000000
May 24 12:13:14 danielbitherm kernel: [11545.460673] RDX: 0000000000000000 RSI: ffff9a3c2eb0dc88 RDI: ffff9a3c2eb0dc88
May 24 12:13:14 danielbitherm kernel: [11545.460676] RBP: ffffbf85c3077c10 R08: 000000000007071c R09: 00000000000003e6
May 24 12:13:14 danielbitherm kernel: [11545.460679] R10: 00000000000000c0 R11: ffffffffa94487ed R12: 00000000000000a0
May 24 12:13:14 danielbitherm kernel: [11545.460681] R13: 0000000000000000 R14: ffff9a3c21ac5f9f R15: ffff9a3c21ac5eff
May 24 12:13:14 danielbitherm kernel: [11545.460685] FS: 00007fd0f984ea40(0000) GS:ffff9a3c2eb00000(0000) knlGS:0000000000000000
May 24 12:13:14 danielbitherm kernel: [11545.460688] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
May 24 12:13:14 danielbitherm kernel: [11545.460690] CR2: 00007fd0e0785000 CR3: 0000000221ac1000 CR4: 00000000001406e0
May 24 12:13:14 danielbitherm kernel: [11545.460693] Call Trace:
May 24 12:13:14 danielbitherm kernel: [11545.460722] nouveau_gem_ioctl_pushbuf+0x1eb/0x1610 [nouveau]
May 24 12:13:14 danielbitherm kernel: [11545.460728] ? insert_pfn.isra.66+0x38/0xf0
May 24 12:13:14 danielbitherm kernel: [11545.460730] ? vm_insert_mixed+0x64/0x90
May 24 12:13:14 danielbitherm kernel: [11545.460733] ? __check_object_size+0x100/0x1d7
May 24 12:13:14 danielbitherm kernel: [11545.460754] drm_ioctl+0x21b/0x4c0 [drm]
May 24 12:13:14 danielbitherm kernel: [11545.460772] ? nouveau_gem_ioctl_new+0x150/0x150 [nouveau]
May 24 12:13:14 danielbitherm kernel: [11545.460775] ? __do_fault+0x21/0xd0
May 24 12:13:14 danielbitherm kernel: [11545.460793] nouveau_drm_ioctl+0x74/0xc0 [nouveau]
May 24 12:13:14 danielbitherm kernel: [11545.460796] do_vfs_ioctl+0xa3/0x610
May 24 12:13:14 danielbitherm kernel: [11545.460799] ? __do_page_fault+0x266/0x4e0
May 24 12:13:14 danielbitherm kernel: [11545.460802] SyS_ioctl+0x79/0x90
May 24 12:13:14 danielbitherm kernel: [11545.460805] entry_SYSCALL_64_fastpath+0x1e/0xad
May 24 12:13:14 danielbitherm kernel: [11545.460808] RIP: 0033:0x7fd0f724b987
May 24 12:13:14 danielbitherm kernel: [11545.460810] RSP: 002b:00007ffce5a38158 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
May 24 12:13:14 danielbitherm kernel: [11545.460813] RAX: ffffffffffffffda RBX: 0000000000001e08 RCX: 00007fd0f724b987
May 24 12:13:14 danielbitherm kernel: [11545.460816] RDX: 00007ffce5a381c0 RSI: 00000000c0406481 RDI: 000000000000000d
May 24 12:13:14 danielbitherm kernel: [11545.460818] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000782
May 24 12:13:14 danielbitherm kernel: [11545.460821] R10: 000055ebb7668980 R11: 0000000000000246 R12: 0000000000000009
May 24 12:13:14 danielbitherm kernel: [11545.460824] R13: 0000000000000000 R14: 0000000000010e48 R15: 0000000000001e08
May 24 12:13:14 danielbitherm kernel: [11545.460827] Code: 48 0f 44 d1 48 c7 c6 46 13 ea a8 48 c7 c1 65 63 e9 a8 48 0f 44 f1 4d 89 e1 49 89 c0 48 89 d9 48 c7 c7 78 dd e9 a8 e8 f8 d8 f6 ff <0f> 0b e8 52 c3 fb ff 85 c0 75 73 48 89 df e8 f6 42 e3 ff 84 c0
May 24 12:13:14 danielbitherm kernel: [11545.460846] RIP: __check_object_size+0x77/0x1d7 RSP: ffffbf85c3077bf0
May 24 12:13:14 danielbitherm kernel: [11545.466022] ---[ end trace 852b20b5661b0db2 ]---

The system becomes totally unresponsive and I have to do a hard reset on it. Current /proc/version_signature is Ubuntu 4.10.0-21.23-generic 4.10.11 . In the attachment I've included the lspci -vnvn output.
---
ApportVersion: 2.20.4-0ubuntu4.1
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC2: daniel 1496 F.... pulseaudio
 /dev/snd/controlC0: daniel 1496 F.... pulseaudio
 /dev/snd/controlC1: daniel 1496 F.... pulseaudio
CurrentDesktop: GNOME
DistroRelease: Ubuntu 17.04
HibernationDevice: RESUME=UUID=64d0f223-930a-41c8-85a1-185edcb30e1c
InstallationDate: Installed on 2017-05-23 (2 days ago)
InstallationMedia: Ubuntu-GNOME 17.04 "Zesty Zapus" - Release amd64 (20170412)
IwConfig:
 lo no wireless extensions.

 eno1 no wireless extensions.
MachineType: Hewlett-Packard HP EliteDesk 800 G1 TWR
Package: linux (not installed)
ProcFB:
 0 nouveaufb
 1 inteldrmfb
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-4.10.0-21-generic root=UUID=9b96f568-b07e-4fb8-a59d-9a5d92ca5be8 ro quiet splash vt.handoff=7
ProcVersionSignature: Ubuntu 4.10.0-21.23-generic 4.10.11
RelatedPackageVersions:
 linux-restricted-modules-4.10.0-21-generic N/A
 linux-backports-modules-4.10.0-21-generic N/A
 linux-firmware 1.164.1
RfKill:

Tags: zesty
Uname: Linux 4.10.0-21-generic x86_64
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo
_MarkForUpload: True
dmi.bios.date: 12/17/2013
dmi.bios.vendor: Hewlett-Packard
dmi.bios.version: L01 v02.21
dmi.board.asset.tag: CZC4123TWN
dmi.board.name: 18E4
dmi.board.vendor: Hewlett-Packard
dmi.chassis.asset.tag: CZC4123TWN
dmi.chassis.type: 6
dmi.chassis.vendor: Hewlett-Packard
dmi.modalias: dmi:bvnHewlett-Packard:bvrL01v02.21:bd12/17/2013:svnHewlett-Packard:pnHPEliteDesk800G1TWR:pvr:rvnHewlett-Packard:rn18E4:rvr:cvnHewlett-Packard:ct6:cvr:
dmi.product.name: HP EliteDesk 800 G1 TWR
dmi.sys.vendor: Hewlett-Packard

Revision history for this message
Dani (danielperezdeandres) wrote :
Revision history for this message
Brad Figg (brad-figg) wrote : Missing required logs.

This bug is missing log files that will aid in diagnosing the problem. From a terminal window please run:

apport-collect 1693458

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

Changed in linux (Ubuntu):
status: New → Incomplete
Revision history for this message
Dani (danielperezdeandres) wrote : AlsaInfo.txt

apport information

tags: added: apport-collected
description: updated
Revision history for this message
Dani (danielperezdeandres) wrote : CRDA.txt

apport information

Revision history for this message
Dani (danielperezdeandres) wrote : CurrentDmesg.txt

apport information

Revision history for this message
Dani (danielperezdeandres) wrote : JournalErrors.txt

apport information

Revision history for this message
Dani (danielperezdeandres) wrote : Lspci.txt

apport information

Revision history for this message
Dani (danielperezdeandres) wrote : Lsusb.txt

apport information

Revision history for this message
Dani (danielperezdeandres) wrote : ProcCpuinfo.txt

apport information

Revision history for this message
Dani (danielperezdeandres) wrote : ProcCpuinfoMinimal.txt

apport information

Revision history for this message
Dani (danielperezdeandres) wrote : ProcEnviron.txt

apport information

Revision history for this message
Dani (danielperezdeandres) wrote : ProcInterrupts.txt

apport information

Revision history for this message
Dani (danielperezdeandres) wrote : ProcModules.txt

apport information

Revision history for this message
Dani (danielperezdeandres) wrote : PulseList.txt

apport information

Revision history for this message
Dani (danielperezdeandres) wrote : UdevDb.txt

apport information

Revision history for this message
Dani (danielperezdeandres) wrote : WifiSyslog.txt

apport information

Changed in linux (Ubuntu):
status: Incomplete → Confirmed
Revision history for this message
Joseph Salisbury (jsalisbury) wrote :

Did this issue start happening after an update/upgrade? Was there a prior kernel version where you were not having this particular problem?

Would it be possible for you to test the latest upstream kernel? Refer to https://wiki.ubuntu.com/KernelMainlineBuilds . Please test the latest v4.12 kernel[0].

If this bug is fixed in the mainline kernel, please add the following tag 'kernel-fixed-upstream'.

If the mainline kernel does not fix this bug, please add the tag: 'kernel-bug-exists-upstream'.

Once testing of the upstream kernel is complete, please mark this bug as "Confirmed".

Thanks in advance.

[0] http://kernel.ubuntu.com/~kernel-ppa/mainline/v4.12-rc2

Changed in linux (Ubuntu):
importance: Undecided → Medium
tags: added: kernel-da-key
Changed in linux (Ubuntu):
status: Confirmed → Incomplete
Revision history for this message
rgouveia (rgouveia) wrote :
Download full text (11.9 KiB)

I can confirm that I've experienced this bug as well on a brand new install of 17.04. Has happen twice when I leave the computer locked. When I try to resume, monitors don't come up and I can't SSH in as well.

I'm testing 4.12.0-041200rc2-generic #201705212331 SMP Mon May 22 03:32:26 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux as suggested.

Here's the trace from syslog:

kernel: [ 6429.211300] usercopy: kernel memory overwrite attempt detected to ffff954d8d3bfb3c (kmalloc-192) (160 bytes)
kernel: [ 6429.211326] ------------[ cut here ]------------
kernel: [ 6429.211333] kernel BUG at /build/linux-lz1RHE/linux-4.10.0/mm/usercopy.c:75!
kernel: [ 6429.211337] invalid opcode: 0000 [#1] SMP
kernel: [ 6429.211326] ------------[ cut here ]------------
kernel: [ 6429.211333] kernel BUG at /build/linux-lz1RHE/linux-4.10.0/mm/usercopy.c:75!
kernel: [ 6429.211337] invalid opcode: 0000 [#1] SMP
kernel: [ 6429.211339] Modules linked in: cmac rfcomm bnep nls_iso8859_1 snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic ath3k dcdbas btusb snd_hda_intel btrtl dell_smm_hwmon snd_usb_audio snd_hda_codec btbcm snd_hda_core arc4 ath9k ath9k_common ath9k_hw snd_usbmidi_lib intel_rapl btintel snd_hwdep ath mac80211 snd_seq_midi snd_seq_midi_event cfg80211 snd_rawmidi snd_pcm snd_seq x86_pkg_temp_thermal bluetooth joydev input_leds snd_seq_device snd_timer snd intel_powerclamp coretemp kvm_intel kvm soundcore shpchp irqbypass mei_me mei intel_cstate lpc_ich intel_rapl_perf mac_hid parport_pc ppdev lp parport ip_tables x_tables autofs4 algif_skcipher af_alg dm_crypt ums_realtek uas usb_storage hid_generic usbhid hid crct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcbc nouveau mxm_wmi aesni_intel
kernel: [ 6429.211378] wmi i2c_algo_bit ttm drm_kms_helper aes_x86_64 crypto_simd glue_helper cryptd syscopyarea sysfillrect sysimgblt fb_sys_fops ahci drm r8169 libahci mii fjes video
kernel: [ 6429.211389] CPU: 0 PID: 2637 Comm: skypeforlinux Not tainted 4.10.0-21-generic #23-Ubuntu
kernel: [ 6429.211393] Hardware name: Dell Inc. Inspiron 3847/088DT1 , BIOS A05 08/18/2014
kernel: [ 6429.211396] task: ffff954d8fdc5a00 task.stack: ffffb539c3be4000
kernel: [ 6429.211402] RIP: 0010:__check_object_size+0x77/0x1d7
kernel: [ 6429.211404] RSP: 0018:ffffb539c3be7bf0 EFLAGS: 00010286
kernel: [ 6429.211407] RAX: 0000000000000060 RBX: ffff954d8d3bfb3c RCX: 0000000000000000
kernel: [ 6429.211410] RDX: 0000000000000000 RSI: ffff954d9ec0dc88 RDI: ffff954d9ec0dc88
kernel: [ 6429.211413] RBP: ffffb539c3be7c10 R08: 0000000000033964 R09: 000000000000038f
kernel: [ 6429.211416] R10: 00000000000000c0 R11: ffffffffa36487ed R12: 00000000000000a0
kernel: [ 6429.211422] R13: 0000000000000000 R14: ffff954d8d3bfbdc R15: ffff954d8d3bfb3c
kernel: [ 6429.211426] FS: 00007fa833a1bac0(0000) GS:ffff954d9ec00000(0000) knlGS:0000000000000000
kernel: [ 6429.211429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kernel: [ 6429.211431] CR2: 00007fa833ae0000 CR3: 0000000207920000 CR4: 00000000001406f0
kernel: [ 6429.211434] Call Trace:
kernel: [ 6429.211463] nouveau_gem_ioctl_pushbuf+0x1eb/0x1610 [nouveau]
kernel: [ 6429.211468] ? insert_pfn.isra.66+0xc1/0xf0
kernel: [ 6429.211471] ? vm...

rgouveia (rgouveia)
Changed in linux (Ubuntu):
status: Incomplete → Confirmed
Revision history for this message
Dani (danielperezdeandres) wrote :

#18 Joseph,
The bug appeared after a fresh install of 17.04. I was previously using 16.04 and hadn't experienced this bug (that I'm aware of).

I will try to boot the v4.12 kernel and let you know. This is my work computer and I have to squeeze the time for this test.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.