Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751210AbdCQSAr (ORCPT ); Fri, 17 Mar 2017 14:00:47 -0400 Received: from mail-it0-f65.google.com ([209.85.214.65]:36273 "EHLO mail-it0-f65.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751057AbdCQSAq (ORCPT ); Fri, 17 Mar 2017 14:00:46 -0400 MIME-Version: 1.0 In-Reply-To: References: <20170317115924.GA82960@inn.lkp.intel.com> From: Linus Torvalds Date: Fri, 17 Mar 2017 11:00:44 -0700 X-Google-Sender-Auth: Ks49-hGCh74Cql2ZxI49infUu5Q Message-ID: Subject: Re: [x86] 45fc8757d1: BUG:unable_to_handle_kernel To: kernel test robot Cc: Thomas Garnier , Ingo Molnar , Alexander Potapenko , Andrew Morton , Andrey Ryabinin , Andy Lutomirski , Ard Biesheuvel , Boris Ostrovsky , Borislav Petkov , Chris Wilson , Christian Borntraeger , Dmitry Vyukov , Frederic Weisbecker , Jiri Kosina , Joerg Roedel , Jonathan Corbet , Josh Poimboeuf , Juergen Gross , Kees Cook , Len Brown , Lorenzo Stoakes , "Luis R . Rodriguez" , Matt Fleming , Michal Hocko , Paolo Bonzini , Paul Gortmaker , Pavel Machek , Peter Zijlstra , =?UTF-8?B?UmFkaW0gS3LEjW3DocWZ?= , "Rafael J . Wysocki" , Rusty Russell , Stanislaw Gruszka , Thomas Gleixner , Tim Chen , Vitaly Kuznetsov , zijun_hu , LKML , "H. Peter Anvin" , tipbuild@zytor.com, LKP Content-Type: text/plain; charset=UTF-8 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 634 Lines: 17 On Fri, Mar 17, 2017 at 10:49 AM, Linus Torvalds wrote: > > The linear address can be used to look up which entry it is. I assume > the GDT starts at ffffffffff577000, and that this is at offset 0x60 > from that. Whatever descriptor that would be.. Hmm. That should be gdt index 12, aka GDT_ENTRY_TLS_MIN. I guess user space can set almost anything there. Including setting a segment type that isn't accessed, and that the CPU will change on the first actual access. We do have code to verify the limits and types etc iirc, I guess we can make sure to set the accessed bit too. Linus