Re: [gentoo-hardened] kernel upgrade problems: bad page state

[Brian Kroth]

PaX only logs bad behaviour when it's about unintended code execution,
this bug here is a kernel-internal consistency check, it doesn't mean
that the triggering userland app has a bug, it may very well just manage
to trigger a kernel bug (which in turn could be in PaX for all i know).
it'd be nice if you could find a way to reproduce it, also if you could
test with 2.6.23-pax.

More (of the same) output from 2.6.23-hardened:

Oct 30 23:12:55 tux-mc.hslc.wisc.edu IPMI Watchdog: driver initialized
Oct 30 23:15:10 tux-mc.hslc.wisc.edu Bad page state in process 'cactid'

Oct 30 23:15:10 tux-mc.hslc.wisc.edu Backtrace:
Oct 30 23:15:10 tux-mc.hslc.wisc.edu [<c044bbaf>] bad_page+0x63/0x92

Oct 30 23:15:10 tux-mc.hslc.wisc.edu [<c0455bed>] do_wp_page+0x22b/0x425
Oct 30 23:15:10 tux-mc.hslc.wisc.edu [<c06efe50>] do_nanosleep+0x5a/0x6e

Oct 30 23:15:10 tux-mc.hslc.wisc.edu [<c0414569>] do_page_fault+0x38d/0x86d
Oct 30 23:15:10 tux-mc.hslc.wisc.edu [<c0402ba8>] restore_all+0x0/0x18

Oct 30 23:15:10 tux-mc.hslc.wisc.edu [<c04141dc>] do_page_fault+0x0/0x86d
Oct 30 23:15:10 tux-mc.hslc.wisc.edu [<c06f0725>] error_code+0x75/0x80

Oct 30 23:15:10 tux-mc.hslc.wisc.edu =======================
Oct 30 23:15:11 tux-mc.hslc.wisc.edu Bad page state in process 'cactid'

Oct 30 23:15:11 tux-mc.hslc.wisc.edu Backtrace:
Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c044bbaf>] bad_page+0x63/0x92

Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c044cbe5>] __pagevec_free+0x14/0x1c
Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c044f40f>] release_pages+0x122/0x144

Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c04545bf>] zap_pte_range+0x1f4/0x28d

Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c045485e>] unmap_vmas+0xdd/0x1ec
Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c045a391>] exit_mmap+0x72/0xf0
Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c041b0f1>] mmput+0x33/0x91
Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c046bd03>] exec_mmap+0x126/0x36c
Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c046c236>] de_thread+0x2ed/0x35e
Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c046c40f>] flush_old_exec+0x56/0x20c
Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c046bbcb>] kernel_read+0x50/0x62

Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c0454b2c>] follow_page+0xd5/0x157

Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c046cc77>] do_execve+0x24f/0x37e
Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c0401685>] sys_execve+0x2f/0x7a
Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c0402b82>] syscall_call+0x7/0xb
Oct 30 23:15:11 tux-mc.hslc.wisc.edu =======================
Oct 30 23:15:15 tux-mc.hslc.wisc.edu Bad page state in process 'cactid'

Oct 30 23:15:15 tux-mc.hslc.wisc.edu Backtrace:
Oct 30 23:15:15 tux-mc.hslc.wisc.edu [<c044bbaf>] bad_page+0x63/0x92

Oct 30 23:15:15 tux-mc.hslc.wisc.edu [<c0455bed>] do_wp_page+0x22b/0x425

Oct 30 23:15:15 tux-mc.hslc.wisc.edu [<c0414569>] do_page_fault+0x38d/0x86d
Oct 30 23:15:15 tux-mc.hslc.wisc.edu [<c0432af0>] sys_nanosleep+0x54/0x5c
Oct 30 23:15:15 tux-mc.hslc.wisc.edu [<c0402ba8>] restore_all+0x0/0x18
Oct 30 23:15:15 tux-mc.hslc.wisc.edu [<c04141dc>] do_page_fault+0x0/0x86d
Oct 30 23:15:15 tux-mc.hslc.wisc.edu [<c06f0725>] error_code+0x75/0x80

Oct 30 23:15:10 tux-mc.hslc.wisc.edu page:c14ccf60 flags:0x40000001 mapping:00000000 mapcount:0 count:0 Oct 30 23:15:10 tux-mc.hslc.wisc.edu Trying to fix it up, but a reboot is needed Oct 30 23:15:10 tux-mc.hslc.wisc.edu [<c044c47c>] free_hot_cold_page+0x7c/0x178 Oct 30 23:15:10 tux-mc.hslc.wisc.edu [<c04570da>] handle_mm_fault+0x2fd/0x330 Oct 30 23:15:10 tux-mc.hslc.wisc.edu [<c041007b>] nmi_watchdog_tick+0x13/0x176 Oct 30 23:15:10 tux-mc.hslc.wisc.edu [<c06f0000>] rt_mutex_slowlock+0xd1/0x144 Oct 30 23:15:11 tux-mc.hslc.wisc.edu page:c13ea1c0 flags:0x40000001 mapping:00000000 mapcount:0 count:0 Oct 30 23:15:11 tux-mc.hslc.wisc.edu Trying to fix it up, but a reboot is needed Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c044c47c>] free_hot_cold_page+0x7c/0x178 Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c045e33e>] free_pages_and_swap_cache+0x51/0x75 Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c0454705>] unmap_page_range+0xad/0x129 Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c049707f>] load_elf_binary+0x380/0xf42 Oct 30 23:15:11 tux-mc.hslc.wisc.edu [<c046c8c2>] search_binary_handler+0x9e/0x204 Oct 30 23:15:15 tux-mc.hslc.wisc.edu page:c1504d00 flags:0x40000001 mapping:00000000 mapcount:0 count:0 Oct 30 23:15:15 tux-mc.hslc.wisc.edu Trying to fix it up, but a reboot is needed Oct 30 23:15:15 tux-mc.hslc.wisc.edu [<c044c47c>] free_hot_cold_page+0x7c/0x178 Oct 30 23:15:15 tux-mc.hslc.wisc.edu [<c043275f>] hrtimer_try_to_cancel+0x40/0x7e Oct 30 23:15:15 tux-mc.hslc.wisc.edu [<c04570da>] handle_mm_fault+0x2fd/0x330 Oct 30 23:15:15 tux-mc.hslc.wisc.edu [<c06f0000>] rt_mutex_slowlock+0xd1/0x144

smime.p7s
Description: S/MIME Cryptographic Signature