user-mode-linux-user

[uml-user] trinity triggers (a different ?) madvise syscall issue: "BUG: Bad page map" and "BUG: Bad rss-counter"

[Toralf F. <tor...@gm...>]

The following issue at a guest kernel using current v3.9-rc6-186-g5b55d70 guest kernel
and 3.8.7 host kernel (both 32 bit Gentoo Linux) can repeatable be triggered:


2013-04-14T15:04:00.366+02:00 trinity kernel: BUG: Bad page map in process trinity-child3  pte:0032a045 pmd:358ca1e1
2013-04-14T15:04:00.366+02:00 trinity kernel: page:09b29540 count:1 mapcount:-1 mapping:  (null) index:0x0
2013-04-14T15:04:00.366+02:00 trinity kernel: page flags: 0x404(referenced|reserved)
2013-04-14T15:04:00.366+02:00 trinity kernel: addr:00100000 vm_flags:00060055 anon_vma:  (null) mapping:  (null) index:100
2013-04-14T15:04:00.366+02:00 trinity kernel: vma->vm_ops->fault: special_mapping_fault+0x0/0x80
2013-04-14T15:04:00.366+02:00 trinity kernel: 3d8cfd20:  [<0836d3b8>] dump_stack+0x22/0x24
2013-04-14T15:04:00.366+02:00 trinity kernel: 3d8cfd38:  [<0836e796>] print_bad_pte+0x17b/0x197
2013-04-14T15:04:00.366+02:00 trinity kernel: 3d8cfd7c:  [<080e2918>] unmap_single_vma+0x268/0x430
2013-04-14T15:04:00.366+02:00 trinity kernel: 3d8cfddc:  [<080e30a4>] zap_page_range+0x74/0xb0
2013-04-14T15:04:00.366+02:00 trinity kernel: 3d8cfe10:  [<080e13ed>] sys_madvise+0x3bd/0x720
2013-04-14T15:04:00.367+02:00 trinity kernel: 3d8cfeac:  [<08064a92>] handle_syscall+0x82/0xb0
2013-04-14T15:04:00.367+02:00 trinity kernel: 3d8cfef4:  [<08076e6d>] userspace+0x46d/0x590
2013-04-14T15:04:00.367+02:00 trinity kernel: 3d8cffec:  [<080617bc>] fork_handler+0x6c/0x70
2013-04-14T15:04:00.367+02:00 trinity kernel: 3d8cfffc:  [<00000000>] 0x0
2013-04-14T15:04:00.367+02:00 trinity kernel:
2013-04-14T15:04:00.367+02:00 trinity kernel: Disabling lock debugging due to kernel taint
2013-04-14T15:04:00.367+02:00 trinity kernel: BUG: Bad page state in process trinity-child3  pfn:0032a
2013-04-14T15:04:00.367+02:00 trinity kernel: page:09b29540 count:0 mapcount:-1 mapping:  (null) index:0x0
2013-04-14T15:04:00.367+02:00 trinity kernel: page flags: 0x404(referenced|reserved)
2013-04-14T15:04:00.367+02:00 trinity kernel: 3d8cfcd8:  [<0836d3b8>] dump_stack+0x22/0x24
2013-04-14T15:04:00.369+02:00 trinity kernel: 3d8cfcf0:  [<080cee75>] bad_page+0xb5/0xe0
2013-04-14T15:04:00.369+02:00 trinity kernel: 3d8cfd0c:  [<080cef13>] free_pages_prepare+0x73/0xb0
2013-04-14T15:04:00.369+02:00 trinity kernel: 3d8cfd28:  [<080d033d>] free_hot_cold_page+0x1d/0x100
2013-04-14T15:04:00.369+02:00 trinity kernel: 3d8cfd50:  [<080d2cee>] __put_single_page+0x1e/0x30
2013-04-14T15:04:00.369+02:00 trinity kernel: 3d8cfd64:  [<080d2e17>] put_page+0x27/0x30
2013-04-14T15:04:00.369+02:00 trinity kernel: 3d8cfd6c:  [<080eff4c>] free_page_and_swap_cache+0x3c/0x50
2013-04-14T15:04:00.369+02:00 trinity kernel: 3d8cfd7c:  [<080e2935>] unmap_single_vma+0x285/0x430
2013-04-14T15:04:00.369+02:00 trinity kernel: 3d8cfddc:  [<080e30a4>] zap_page_range+0x74/0xb0
2013-04-14T15:04:00.369+02:00 trinity kernel: 3d8cfe10:  [<080e13ed>] sys_madvise+0x3bd/0x720
2013-04-14T15:04:00.369+02:00 trinity kernel: 3d8cfeac:  [<08064a92>] handle_syscall+0x82/0xb0
2013-04-14T15:04:00.371+02:00 trinity kernel: 3d8cfef4:  [<08076e6d>] userspace+0x46d/0x590
2013-04-14T15:04:00.371+02:00 trinity kernel: 3d8cffec:  [<080617bc>] fork_handler+0x6c/0x70
2013-04-14T15:04:00.371+02:00 trinity kernel: 3d8cfffc:  [<00000000>] 0x0
2013-04-14T15:04:00.371+02:00 trinity kernel:
2013-04-14T15:04:01.475+02:00 trinity kernel: BUG: Bad rss-counter state mm:3d8bbd00 idx:0 val:-1

-- 
MfG/Sincerely
Toralf Förster
pgp finger print: 7B1A 07F4 EC82 0F90 D4C2 8936 872A E508 7DB6 9DA3

Re: [uml-user] trinity triggers (a different ?) madvise syscall issue: "BUG: Bad page map" and "BUG: Bad rss-counter"

[richard -r. w. <ric...@gm...>]

On Sun, Apr 14, 2013 at 3:09 PM, Toralf Förster <tor...@gm...> wrote:
> The following issue at a guest kernel using current v3.9-rc6-186-g5b55d70 guest kernel
> and 3.8.7 host kernel (both 32 bit Gentoo Linux) can repeatable be triggered:
>
>
> 2013-04-14T15:04:00.366+02:00 trinity kernel: BUG: Bad page map in process trinity-child3  pte:0032a045 pmd:358ca1e1
> 2013-04-14T15:04:00.366+02:00 trinity kernel: page:09b29540 count:1 mapcount:-1 mapping:  (null) index:0x0
> 2013-04-14T15:04:00.366+02:00 trinity kernel: page flags: 0x404(referenced|reserved)
> 2013-04-14T15:04:00.366+02:00 trinity kernel: addr:00100000 vm_flags:00060055 anon_vma:  (null) mapping:  (null) index:100

Does this also happen with stub_pte_fix.diff applied?

--
Thanks,
//richard

Re: [uml-user] trinity triggers (a different ?) madvise syscall issue: "BUG: Bad page map" and "BUG: Bad rss-counter"

[Toralf F. <tor...@gm...>]

On 04/14/2013 05:34 PM, richard -rw- weinberger wrote:
> Does this also happen with stub_pte_fix.diff applied?
You're right, I used an unpatched version - sry
:-/

-- 
MfG/Sincerely
Toralf Förster
pgp finger print: 7B1A 07F4 EC82 0F90 D4C2 8936 872A E508 7DB6 9DA3