System crashed with the message "kernel BUG at mm/usercopy.c:102!"

Solution Unverified - Updated -

Issue

  • System was crashed with the below log.
...
[3635864.887576] usercopy: Kernel memory overwrite attempt detected to SLUB object 'kmalloc-8k' (offset 24, size 8190)!
[3635864.887643] ------------[ cut here ]------------
[3635864.887644] kernel BUG at mm/usercopy.c:102!
[3635864.887667] invalid opcode: 0000 [#1] SMP PTI
[3635864.887671] CPU: 2 PID: 1034798 Comm: sosreport Tainted: P           OE    --------- -  - 4.18.0-193.19.1.el8_2.x86_64 #1
[3635864.887673] Hardware name: Red Hat RHEV Hypervisor, BIOS 1.11.0-2.el7 04/01/2014
[3635864.887685] RIP: 0010:usercopy_abort+0x74/0x76
[3635864.887688] Code: 0f 45 c6 51 48 89 f9 48 c7 c2 35 5e 6b 99 41 52 48 c7 c6 a5 33 6a 99 48 c7 c7 00 5f 6b 99 48 0f 45 f2 48 89 c2 e8 1f ad e5 ff <0f> 0b 49 89 f0 48 89 f9 44 89 e2 31 f6 48 c7 c7 5c 5e 6b 99 e8 73
[3635864.887690] RSP: 0018:ffffaaef0877fd10 EFLAGS: 00010246
[3635864.887692] RAX: 0000000000000066 RBX: ffff9bd76a8f2018 RCX: 0000000000000000
[3635864.887694] RDX: 0000000000000000 RSI: ffff9bd76f896a08 RDI: ffff9bd76f896a08
[3635864.887695] RBP: 0000000000001ffe R08: 000000000000037a R09: 0000000000000077
[3635864.887696] R10: 0000000000000000 R11: ffffaaef0877fbc0 R12: 0000000000000000
[3635864.887697] R13: ffff9bd76a8f4016 R14: 00007ffffffff000 R15: ffff9bd4af3697c0
[3635864.887699] FS:  00007fa1ea5be700(0000) GS:ffff9bd76f880000(0000) knlGS:0000000000000000
[3635864.887701] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[3635864.887702] CR2: 00007fa1f7f7c28f CR3: 000000016a324000 CR4: 00000000000406e0
[3635864.887707] Call Trace:
[3635864.887730]  __check_heap_object+0xda/0x110
[3635864.887738]  __check_object_size+0xff/0x16b
[3635864.887744]  strncpy_from_user+0x4f/0x1b0
[3635864.887779]  my_strncpy_from_user+0x5/0x10 [sisips]
[3635864.887790]  ? AppfireCreateProcess+0x2a0/0x4d0 [sisips]
[3635864.887797]  ? sisips64_sys_execve+0x12c/0x215 [sisips]
[3635864.887805]  ? sym_procfs_printf+0xa5/0xa5 [symev_custom_4_18_0_193_19_1_el8_2_x86_64]
[3635864.887812]  ? do_syscall_64+0x5b/0x1a0
[3635864.887818]  ? entry_SYSCALL_64_after_hwframe+0x65/0xca
[3635864.887820] Modules linked in: binfmt_misc overlay fuse nft_chain_route_ipv4 xt_CHECKSUM nft_chain_nat_ipv4 ipt_MASQUERADE nf_nat_ipv4 nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack ipt_REJECT nf_reject_ipv4 nft_counter nft_compat symap_custom_4_18_0_193_19_1_el8_2_x86_64(POE) nf_tables nfnetlink tun bridge stp llc rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver sisfim(PE) nfs lockd grace fscache symev_custom_4_18_0_193_19_1_el8_2_x86_64(OE) sunrpc intel_rapl_msr intel_rapl_common crct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcspkr joydev virtio_balloon i2c_piix4 sisips(PE) ip_tables xfs libcrc32c sr_mod cdrom ata_generic sd_mod sg qxl drm_kms_helper syscopyarea sysfillrect ata_piix sysimgblt fb_sys_fops ttm drm libata crc32c_intel virtio_net serio_raw net_failover failover virtio_console virtio_scsi dm_mirror dm_region_hash dm_log dm_mod
[3635864.887890] ---[ end trace b0b66d4e025f3db6 ]---
[3635864.887893] RIP: 0010:usercopy_abort+0x74/0x76
[3635864.887895] Code: 0f 45 c6 51 48 89 f9 48 c7 c2 35 5e 6b 99 41 52 48 c7 c6 a5 33 6a 99 48 c7 c7 00 5f 6b 99 48 0f 45 f2 48 89 c2 e8 1f ad e5 ff <0f> 0b 49 89 f0 48 89 f9 44 89 e2 31 f6 48 c7 c7 5c 5e 6b 99 e8 73
[3635864.887897] RSP: 0018:ffffaaef0877fd10 EFLAGS: 00010246
[3635864.887898] RAX: 0000000000000066 RBX: ffff9bd76a8f2018 RCX: 0000000000000000
[3635864.887899] RDX: 0000000000000000 RSI: ffff9bd76f896a08 RDI: ffff9bd76f896a08
[3635864.887900] RBP: 0000000000001ffe R08: 000000000000037a R09: 0000000000000077
[3635864.887901] R10: 0000000000000000 R11: ffffaaef0877fbc0 R12: 0000000000000000
[3635864.887902] R13: ffff9bd76a8f4016 R14: 00007ffffffff000 R15: ffff9bd4af3697c0
[3635864.887904] FS:  00007fa1ea5be700(0000) GS:ffff9bd76f880000(0000) knlGS:0000000000000000
[3635864.887905] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[3635864.887906] CR2: 00007fa1f7f7c28f CR3: 000000016a324000 CR4: 00000000000406e0
[3635864.887910] Kernel panic - not syncing: Fatal exception
[3635864.888644] Kernel Offset: 0x17600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[3635864.888649] ---[ end Kernel panic - not syncing: Fatal exception ]---

Environment

  • Red Hat Enterprise Linux 8.2
  • Below 3rd party modules loaded
    • sisips
    • symev_custom_4_18_0_193_19_1_el8_2_x86_64
    • symap_custom_4_18_0_193_19_1_el8_2_x86_64
    • sisfim

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content