lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date:	Fri, 05 Aug 2016 19:13:40 +0200
From:	Eric Dumazet <eric.dumazet@...il.com>
To:	linux-kernel <linux-kernel@...r.kernel.org>
Cc:	Linus Torvalds <torvalds@...ux-foundation.org>
Subject: [BUG] Bad page states

Hi guys

I noticed following errors with current tree.

Bisected to nowhere :(

Anyone has an idea ?

git bisect start
# bad: [dd7fd3a82ce55e5772d41b1faa2439f15318a902] ACPI / hotplug / PCI: Runtime resume bridges before bus rescans
git bisect bad dd7fd3a82ce55e5772d41b1faa2439f15318a902
# good: [523d939ef98fd712632d93a5a2b588e477a7565e] Linux 4.7
git bisect good 523d939ef98fd712632d93a5a2b588e477a7565e
# good: [52e9f87ae8be96a863e44c7d8d7f482fb279dddd] mm, page_alloc: wake kswapd based on the highest eligible zone
git bisect good 52e9f87ae8be96a863e44c7d8d7f482fb279dddd
# good: [043248cd4e9603e2e8858c4e20810d8e40be7d9d] Merge tag 'armsoc-dt' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
git bisect good 043248cd4e9603e2e8858c4e20810d8e40be7d9d
# good: [d0e62ef6ed257715a88d0e5d7cd850a1695429e2] drm/nouveau/gr/nv3x: fix instobj write offsets in gr setup
git bisect good d0e62ef6ed257715a88d0e5d7cd850a1695429e2
# good: [affe8a2abd0d7815bb2653eea2717d0e0f8ac7e3] Merge tag 'for-linus-20160801' of git://git.infradead.org/linux-mtd
git bisect good affe8a2abd0d7815bb2653eea2717d0e0f8ac7e3
# good: [f0936155f2204720655aefbc2f17c25a2c80a59e] Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
git bisect good f0936155f2204720655aefbc2f17c25a2c80a59e
# bad: [fdf1f7ff1bd7f1c6d1d5dc2b29b6b11a4f722276] Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending
git bisect bad fdf1f7ff1bd7f1c6d1d5dc2b29b6b11a4f722276
# bad: [3a303258ef40a29dd4a3ebd29dcb16afd546bd59] Merge tag 'upstream-4.8-rc1' of git://git.infradead.org/linux-ubifs
git bisect bad 3a303258ef40a29dd4a3ebd29dcb16afd546bd59
# bad: [c1ece76719205690f4b448460d9b85c130e8021b] Merge tag 'media/v4.8-5' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media
git bisect bad c1ece76719205690f4b448460d9b85c130e8021b
# good: [9049fc745300c5e2236cbfc69f5e8cadb6f1f57c] dynamic_debug: add jump label support
git bisect good 9049fc745300c5e2236cbfc69f5e8cadb6f1f57c
# good: [49aadcf1b6f4240751921dad52e86c760d70a5f1] extable.h: add stddef.h so "NULL" definition is not implicit
git bisect good 49aadcf1b6f4240751921dad52e86c760d70a5f1
# bad: [cd70c37b5a23eee7aa411205e2b4c74097f52336] [media] staging: add MEDIA_SUPPORT dependency
git bisect bad cd70c37b5a23eee7aa411205e2b4c74097f52336
# good: [9f8b333308dcb6af321526a54612cfaa7999a995] [media] vim2m: copy the other colorspace-related fields as well
git bisect good 9f8b333308dcb6af321526a54612cfaa7999a995
# good: [52e37f0a6655158c731a35b79106d3150fd3847c] [media] media: adv7180: Fix broken interrupt register access
git bisect good 52e37f0a6655158c731a35b79106d3150fd3847c
# bad: [5bbea66bf8d9ba898abbe5499f06998a993364f6] [media] vivid: don't handle CEC_MSG_SET_STREAM_PATH
git bisect bad 5bbea66bf8d9ba898abbe5499f06998a993364f6
# first bad commit: [5bbea66bf8d9ba898abbe5499f06998a993364f6] [media] vivid: don't handle CEC_MSG_SET_STREAM_PATH



[   32.666450] BUG: Bad page state in process swapper/0  pfn:1fd945c
[   32.672542] page:ffffea007f651700 count:0 mapcount:-511 mapping:          (null) index:0x0
[   32.680823] flags: 0x1000000000000000()
[   32.684655] page dumped because: nonzero mapcount
[   32.689360] Modules linked in: w1_therm wire cdc_acm ehci_pci ehci_hcd mlx4_en ib_uverbs mlx4_ib ib_core mlx4_core xt_TCPMSS ip6table_mangle ip6_tables ipv6
[   32.689376] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.7.0-smp-DEV #240
[   32.689378]  0000000000000000 ffff881fff803d98 ffffffff81655177 ffffea007f651700
[   32.689379]  ffffffff819eb8b0 ffff881fff803dc8 ffffffff816528ab ffff881fff803dc8
[   32.689381]  0000000000000000 0000000000000002 0000000000000000 ffff881fff803dd8
[   32.689382] Call Trace:
[   32.689383]  <IRQ>  [<ffffffff81655177>] dump_stack+0x4d/0x63
[   32.689390]  [<ffffffff816528ab>] bad_page+0x101/0x11e
[   32.689391]  [<ffffffff8165293e>] free_pages_check_bad+0x76/0x78
[   32.689394]  [<ffffffff811a8d02>] __free_pages_ok+0x3d2/0x4a0
[   32.689395]  [<ffffffff811a9b29>] __free_pages+0x19/0x30
[   32.689397]  [<ffffffff810b8c95>] free_task+0x65/0xa0
[   32.689399]  [<ffffffff810b8d67>] __put_task_struct+0x97/0x130
[   32.689401]  [<ffffffff810be214>] delayed_put_task_struct+0x84/0x90
[   32.689403]  [<ffffffff8111457d>] rcu_process_callbacks+0x1ed/0x5b0
[   32.689405]  [<ffffffff8165fecb>] __do_softirq+0xcb/0x279
[   32.689407]  [<ffffffff810c10ba>] irq_exit+0x9a/0xb0
[   32.689408]  [<ffffffff8165fd06>] smp_apic_timer_interrupt+0x46/0x60
[   32.689409]  [<ffffffff8165e38f>] apic_timer_interrupt+0x7f/0x90
[   32.689410]  <EOI>  [<ffffffff81556405>] ? cpuidle_enter_state+0xe5/0x250
[   32.689414]  [<ffffffff815563e8>] ? cpuidle_enter_state+0xc8/0x250
[   32.689415]  [<ffffffff815565a7>] cpuidle_enter+0x17/0x20
[   32.689417]  [<ffffffff810fa027>] cpu_startup_entry+0x277/0x340
[   32.689418]  [<ffffffff81657a37>] rest_init+0x77/0x80
[   32.689421]  [<ffffffff81d20034>] start_kernel+0x415/0x422
[   32.689422]  [<ffffffff81d1fa04>] ? set_init_arg+0x5a/0x5a
[   32.689423]  [<ffffffff81d1f591>] x86_64_start_reservations+0x2f/0x31
[   32.689424]  [<ffffffff81d1f684>] x86_64_start_kernel+0xf1/0xf5
...
[   43.477693] BUG: Bad page state in process S05containers  pfn:1ff02a3
[   43.484417] page:ffffea007fc0a8c0 count:0 mapcount:-511 mapping:          (null) index:0x0
[   43.492737] flags: 0x1000000000000000()
[   43.496602] page dumped because: nonzero mapcount
[   43.501298] Modules linked in: w1_therm wire cdc_acm ehci_pci ehci_hcd mlx4_en ib_uverbs mlx4_ib ib_core mlx4_core xt_TCPMSS ip6table_mangle ip6_tables ipv6
[   43.501313] CPU: 14 PID: 5488 Comm: S05containers Tainted: G    B           4.7.0-smp-DEV #240
[   43.501315]  0000000000000000 ffff881fdcbeb978 ffffffff81655177 ffffea007fc0a8c0
[   43.501316]  ffffffff819eb8b0 ffff881fdcbeb9a8 ffffffff816528ab ffffea007f5b1880
[   43.501318]  0000000000000000 ffffea007fc0a8c0 0000000000000000 ffff881fdcbeb9b8
[   43.501319] Call Trace:
[   43.501326]  [<ffffffff81655177>] dump_stack+0x4d/0x63
[   43.501328]  [<ffffffff816528ab>] bad_page+0x101/0x11e
[   43.501330]  [<ffffffff8165293e>] free_pages_check_bad+0x76/0x78
[   43.501332]  [<ffffffff811a82cd>] free_pcppages_bulk+0x38d/0x3a0
[   43.501334]  [<ffffffff811a9ad3>] free_hot_cold_page+0x1b3/0x1f0
[   43.501335]  [<ffffffff811a9e68>] free_hot_cold_page_list+0x48/0xb0
[   43.501337]  [<ffffffff811b1c49>] release_pages+0x279/0x380
[   43.501340]  [<ffffffff811eaafe>] free_pages_and_swap_cache+0x8e/0xb0
[   43.501344]  [<ffffffff811d313a>] tlb_flush_mmu_free+0x3a/0x60
[   43.501346]  [<ffffffff811d3fbe>] tlb_flush_mmu+0x1e/0x30
[   43.501347]  [<ffffffff811d3fe4>] tlb_finish_mmu+0x14/0x40
[   43.501348]  [<ffffffff811dd608>] exit_mmap+0xe8/0x140
[   43.501352]  [<ffffffff810b8fcd>] mmput+0x3d/0xe0
[   43.501354]  [<ffffffff8121c7f0>] flush_old_exec+0x370/0x680
[   43.501358]  [<ffffffff8126df92>] load_elf_binary+0x332/0x1780
[   43.501359]  [<ffffffff8126b07c>] ? load_misc_binary+0x6c/0x420
[   43.501361]  [<ffffffff811d2994>] ? get_user_pages_remote+0x54/0x60
[   43.501362]  [<ffffffff8121d1e2>] ? copy_strings.isra.25+0x1b2/0x370
[   43.501363]  [<ffffffff8121bee6>] search_binary_handler+0xa6/0x1f0
[   43.501364]  [<ffffffff8121dc2e>] do_execveat_common.isra.37+0x53e/0x700
[   43.501366]  [<ffffffff8121de1c>] do_execve+0x2c/0x30
[   43.501368]  [<ffffffff81226002>] ? getname+0x12/0x20
[   43.501369]  [<ffffffff8121e07e>] SyS_execve+0x2e/0x40
[   43.501371]  [<ffffffff810028a0>] do_syscall_64+0x50/0xa0
[   43.501374]  [<ffffffff8165d87c>] entry_SYSCALL64_slow_path+0x25/0x25


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ