Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 574500 - sys-kernel/hardened-sources-4.3.5-r2 BUG: Bad page map in process
Summary: sys-kernel/hardened-sources-4.3.5-r2 BUG: Bad page map in process
Status: RESOLVED OBSOLETE
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Hardened (show other bugs)
Hardware: x86 Linux
: Normal normal (vote)
Assignee: The Gentoo Linux Hardened Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-02-12 07:12 UTC by Kai Dietrich
Modified: 2018-10-12 00:35 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
full dmesg output (dmesg-4.3.5-r2-bad-page-maps.txt,142.44 KB, text/plain)
2016-02-12 07:12 UTC, Kai Dietrich
Details
kernel .config (config-linux-4.3.5-hardened-r2,72.53 KB, text/plain)
2016-02-12 07:13 UTC, Kai Dietrich
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Kai Dietrich 2016-02-12 07:12:47 UTC
Created attachment 425280 [details]
full dmesg output

I'm getting "BUG: Bad page map in process ..." messages in dmesg and probably lots of killed processes with hardened-sources-4.3.5-r2. This didn't happen with hardened-sources-4.3.5-r1.

Here is a sample from dmesg:
[54697.674573] BUG: Bad page map in process sleep  pte:48341e33e41aedff pmd:34ac0067
[54697.674590] addr:17863000 vm_flags:04040000 anon_vma:   (nil) mapping:   (nil) index:1064
[54697.674604] file:   (nil) fault:   (nil) mmap:   (nil) readpage:   (nil)
[54697.674621] CPU: 1 PID: 18462 Comm: sleep Tainted: G    B   W       4.3.5-hardened-r2 #1
[54697.674633] Hardware name: PhoenixAward 945GSE/945GSE, BIOS 6.00 PG 08/25/2009
[54697.674644]  00000000 002454a5 f5ad6090 000ea4a6 cff81834 00000000 00000000 00000000
[54697.674677]  00000000 00001064 e41aedff 48341e33 00001064 00000000 e41ae000 00000e33
[54697.674709]  48341e33 e41aedff 000eb7c3 e41aedff 48341e33 00000000 f5ad6090 17863000
[54697.674740] Call Trace:
[54697.674762]  [<002454a5>] ? dump_stack+0x3e/0x59
[54697.674781]  [<000ea4a6>] ? print_bad_pte+0x166/0x1f0
[54697.674801]  [<000eb7c3>] ? vm_normal_page+0x93/0xc0
[54697.674821]  [<000ebad2>] ? unmap_single_vma+0x2e2/0x510
[54697.674841]  [<000d7470>] ? SyS_readahead+0xe0/0xe0
[54697.674860]  [<000ec48b>] ? unmap_vmas+0x3b/0x50
[54697.674877]  [<000f3d20>] ? exit_mmap+0x80/0x100
[54697.674897]  [<000490a4>] ? mmput+0x34/0xa0
[54697.674915]  [<0023cd41>] ? gr_put_exec_file+0x11/0x50
[54697.674931]  [<0004e07d>] ? do_exit+0x20d/0x8e0
[54697.674949]  [<0004e7ae>] ? do_group_exit+0x2e/0xa0
[54697.674966]  [<0004e82f>] ? SyS_exit_group+0xf/0x10
[54697.674983]  [<005ab5aa>] ? syscall_call+0x7/0x7
[54697.675004]  [<005ab5bc>] ? restore_all_pax+0xc/0xc
[54697.675019] swap_free: Bad swap file entry 14e8a2f7
[54697.675031] swap_free: Bad swap file entry 010f9998
[54697.675044] swap_free: Bad swap file entry 1bab25c2
[54697.675058] swap_free: Bad swap file entry 19eff91a
...


Full dmesg and .config attached.

Hardware is an Intel Atom N270 x86 CPU with many NICs (Allnet FW8888).
Comment 1 Kai Dietrich 2016-02-12 07:13:27 UTC
Created attachment 425282 [details]
kernel .config
Comment 2 Kai Dietrich 2016-02-12 07:27:15 UTC
The offending "sleep" process/call is coming from a while-loop in a bash script that is being run as a background daemon.

The system is acting as a router/firewall - so it has some traffic on the interfaces. The hardware is an early 32bit-only Atom with hyperthreading enabled (see /proc/cpuinfo below).

Note also, that the
"NETDEV WATCHDOG: en1 (e1000): transmit queue 0 timed out" and subsequent "e1000 0000:05:0a.0 en1: Reset adapter" message is also appearing with other kernels and something I'm debugging separately (but might be related, see https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/drivers/net/ethernet/intel/e1000?id=9eab46b7cb8d0b0dcf014bf7b25e0e72b9e4d929 ). On hardened-sources-4.3.5-r1 I had 5 days uptime (before I rebooted into 4.3.5-r2) despite multiple tx-queue/adapter resets from the e1000).






sgateway ~ # cat /proc/cpuinfo
processor       : 0
vendor_id       : GenuineIntel
cpu family      : 6
model           : 28
model name      : Intel(R) Atom(TM) CPU N270   @ 1.60GHz
stepping        : 2
microcode       : 0x212
cpu MHz         : 1596.073
cache size      : 512 KB
physical id     : 0
siblings        : 2
core id         : 0
cpu cores       : 1
apicid          : 0
initial apicid  : 0
fdiv_bug        : no
f00f_bug        : no
coma_bug        : no
fpu             : yes
fpu_exception   : yes
cpuid level     : 10
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic mtrr pge mca cmov pat clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx constant_tsc arch_perfmon pebs bts aperfmperf pni dtes64 monitor ds_cpl est tm2 ssse3 xtpr pdcm movbe lahf_lm dtherm
bugs            :
bogomips        : 3193.15
clflush size    : 64
cache_alignment : 64
address sizes   : 32 bits physical, 32 bits virtual
power management:

processor       : 1
vendor_id       : GenuineIntel
cpu family      : 6
model           : 28
model name      : Intel(R) Atom(TM) CPU N270   @ 1.60GHz
stepping        : 2
microcode       : 0x212
cpu MHz         : 1596.073
cache size      : 512 KB
physical id     : 0
siblings        : 2
core id         : 0
cpu cores       : 1
apicid          : 1
initial apicid  : 1
fdiv_bug        : no
f00f_bug        : no
coma_bug        : no
fpu             : yes
fpu_exception   : yes
cpuid level     : 10
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic mtrr pge mca cmov pat clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx constant_tsc arch_perfmon pebs bts aperfmperf pni dtes64 monitor ds_cpl est tm2 ssse3 xtpr pdcm movbe lahf_lm dtherm
bugs            :
bogomips        : 3193.15
clflush size    : 64
cache_alignment : 64
address sizes   : 32 bits physical, 32 bits virtual
power management:
Comment 3 Kai Dietrich 2016-02-12 08:48:57 UTC
Also:

The system does NOT have a swap partition:

sgateway ~ # cat /proc/swaps
Filename                                Type            Size    Used    Priority
sgateway ~ #

Memory usage is low during normal operation:
sgateway ~ # vmstat
procs -----------memory---------- ---swap-- -----io---- -system-- ------cpu-----
 r  b   swpd   free   buff  cache   si   so    bi    bo   in   cs us sy id wa st
 1  0      0 1962024  19680  39196    0    0     4     1  185   23  0  0 99  0  0