grsecurity forums

I'm getting quite a few refcount overflows using kernel 3.11.1 patch version 2.9.1-3.11.1-201309162121:

Code: Select all

PAX: refcount overflow detected in: ksoftirqd/0:3, uid/euid: 0/0
CPU: 0 PID: 3 Comm: ksoftirqd/0 Not tainted 3.11.1-1-grsec-custom #1
Hardware name: Dell Computer Corporation Dimension 2400               /0G1548, BIOS A03 09/19/2003
task: eec448e0 ti: eec44b64 task.ti: eec44b64
EIP: 0060:[<001e3c48>] EFLAGS: 00000a83 CPU: 0
EAX: 80000001 EBX: ee1327d4 ECX: 00000100 EDX: 00000001
ESI: ee1327c4 EDI: 80000001 EBP: eec44b64 ESP: eec4fed8
 DS: 0068 ES: 0068 FS: 0000 GS: 0068 SS: 0068
CR0: 8005003b CR2: 4ec74000 CR3: 01804000 CR4: 000007f0
Stack:
 e6124c14 0000000a 00000000 000824e7 00000202 00000000 eec448e0 c1a18774
 e6124c14 0000000a c1a18820 c1a18760 eec44b64 eec44b64 00000001 eec44b64
 00000100 00000024 0002ddfd c18d9000 eec448e0 003764b2 eec02450 eec44b64
Call Trace:
 [<000824e7>] ? rcu_process_callbacks+0x15b/0x38f
 [<0002ddfd>] ? __do_softirq+0x8c/0x134
 [<003764b2>] ? ret_from_intr+0x21/0x2f
 [<00159aef>] ? ext4_calculate_overhead+0x30b/0x3e2
 [<0002debb>] ? run_ksoftirqd+0x16/0x27
 [<0004ab05>] ? smpboot_thread_fn+0x115/0x1f7
 [<0004a9f0>] ? lg_global_unlock+0x1b/0x1b
 [<000443d4>] ? kthread+0x91/0x93
 [<0037a7da>] ? ret_from_kernel_thread+0x1a/0x30
 [<00044343>] ? kthread_worker_fn+0x12c/0x12c
Code: 90 90 90 57 56 53 89 c3 8d 73 f0 8b 43 f4 83 e0 fc 8b 38 e8 74 65 ec ff 8b 43 f0 81 c7 00 00 00 80 0


Code: Select all

PAX: refcount overflow detected in: kworker/0:0:4, uid/euid: 0/0
CPU: 0 PID: 4 Comm: kworker/0:0 Not tainted 3.11.1-1-grsec-custom #1
Hardware name: Dell Computer Corporation Dimension 2400               /0G1548, BIOS A03 09/19/2003
Workqueue: events 0006eebf
task: eec44d50 ti: eec44fd4 task.ti: eec44fd4
EIP: 0060:[<0006efd1>] EFLAGS: 00000a96 CPU: 0
EAX: eefe8a04 EBX: c1a15960 ECX: eefe8a00 EDX: eed3e000
ESI: edb7a388 EDI: eec44fd4 EBP: eec44fd4 ESP: eec55f08
 DS: 0068 ES: 0068 FS: 0000 GS: 0068 SS: 0068
CR0: 8005003b CR2: 40354048 CR3: 01804000 CR4: 000007f0
Stack:
 ede62240 ee668400 eec1a660 edb7a388 ef868800 00000000 0003e567 c1a15120
 c1a15100 c1a15100 c1a15110 eec44fd4 00000000 eec44f00 c1a15100 eec1a660
 eec1a678 c1a15100 c1a15110 0003f228 eec44d50 eec44d50 c1a15100 eec44d50
Call Trace:
 [<0003e567>] ? process_one_work+0xea/0x32b
 [<0003f228>] ? worker_thread+0xfb/0x36f
 [<0003f12d>] ? manage_workers.isra.38+0x274/0x274
 [<0003f12d>] ? manage_workers.isra.38+0x274/0x274
 [<000443d4>] ? kthread+0x91/0x93
 [<0037a7da>] ? ret_from_kernel_thread+0x1a/0x30
 [<00044343>] ? kthread_worker_fn+0x12c/0x12c
Code: 08 00 8b 04 24 80 08 02 e8 5e d0 ff ff b8 30 76 a1 c1 83 c4 08 5b 5e 5f 5d e9 ec 4a 30 00 8d 41 04 f


PAX: refcount overflow detected in: ksoftirqd/0:3, uid/euid: 0/0
CPU: 0 PID: 3 Comm: ksoftirqd/0 Not tainted 3.11.1-1-grsec-custom #1
Hardware name: Dell Computer Corporation Dimension 2400               /0G1548, BIOS A03 09/19/2003
task: eec448e0 ti: eec44b64 task.ti: eec44b64
EIP: 0060:[<001e3c48>] EFLAGS: 00000a83 CPU: 0
EAX: 80000001 EBX: ee1327d4 ECX: 00000100 EDX: 00000001
ESI: ee1327c4 EDI: 80000001 EBP: eec44b64 ESP: eec4fed8
 DS: 0068 ES: 0068 FS: 0000 GS: 0068 SS: 0068
CR0: 8005003b CR2: 4ec74000 CR3: 01804000 CR4: 000007f0
Stack:
 e6124c14 0000000a 00000000 000824e7 00000202 00000000 eec448e0 c1a18774
 [<0003f12d>] ? manage_workers.isra.38+0x274/0x274
 [<000443d4>] ? kthread+0x91/0x93
 [<0037a7da>] ? ret_from_kernel_thread+0x1a/0x30
 [<00044343>] ? kthread_worker_fn+0x12c/0x12c
Code: 08 00 8b 04 24 80 08 02 e8 5e d0 ff ff b8 30 76 a1 c1 83 c4 08 5b 5e 5f 5d e9 ec 4a 30 00 8d 41 04 f


Code: Select all

PAX: refcount overflow detected in: kworker/0:0:4, uid/euid: 0/0
CPU: 0 PID: 4 Comm: kworker/0:0 Not tainted 3.11.1-1-grsec-custom #1
Hardware name: Dell Computer Corporation Dimension 2400               /0G1548, BIOS A03 09/19/2003
task: eec44d50 ti: eec44fd4 task.ti: eec44fd4
EIP: 0060:[<001e3c48>] EFLAGS: 00000a83 CPU: 0
EAX: 80000001 EBX: ee02a014 ECX: 00000102 EDX: 00000001
ESI: ee02a004 EDI: 80000001 EBP: eec44fd4 ESP: eec55ddc
 DS: 0068 ES: 0068 FS: 0000 GS: 0068 SS: 0068
CR0: 8005003b CR2: 080571a0 CR3: 01804000 CR4: 000007f0
Stack:
 00000000 0000000a 00000001 000824e7 00000202 00000000 eec44d50 c1a18774
 ee02a014 0000000a c1a18820 c1a18760 eec44fd4 eec44fd4 00000001 eec44fd4
 00000102 00000024 0002ddfd 00000008 eec55e28 ee0314bc 00000000 eeda1000
Call Trace:
 [<000824e7>] ? rcu_process_callbacks+0x15b/0x38f
 [<0002ddfd>] ? __do_softirq+0x8c/0x134
 [<0002df68>] ? irq_exit+0x53/0x6d
 [<00003ce0>] ? do_IRQ+0x38/0x7f
 [<005d18a6>] ? bit_cursor+0x510/0x573 [bitblit]
 [<0037adb8>] ? common_interrupt+0x38/0x3d
 [<0004b958>] ? finish_task_switch.isra.61+0x23/0x96
 [<00374b8a>] ? __schedule+0x21a/0x6e5
 [<005d1396>] ? update_attr.isra.5+0x97/0x97 [bitblit]
 [<00c052dc>] ? 0xc052db
 [<0003e57e>] ? process_one_work+0x101/0x32b
 [<0003f2da>] ? worker_thread+0x1ad/0x36f
 [<0003f12d>] ? manage_workers.isra.38+0x274/0x274
 [<0003f12d>] ? manage_workers.isra.38+0x274/0x274
 [<000443d4>] ? kthread+0x91/0x93
 [<0037a7da>] ? ret_from_kernel_thread+0x1a/0x30
 [<00044343>] ? kthread_worker_fn+0x12c/0x12c
Code: 90 90 90 57 56 53 89 c3 8d 73 f0 8b 43 f4 83 e0 fc 8b 38 e8 74 65 ec ff 8b 43 f0 81 c7 00 00 00 80 0


Code: Select all

PAX: refcount overflow detected in: swapper:0, uid/euid: 0/0
CPU: 0 PID: 0 Comm: swapper Not tainted 3.11.1-1-grsec-custom #1
Hardware name: Dell Computer Corporation Dimension 2400               /0G1548, BIOS A03 09/19/2003
task: c1a0a4a0 ti: c1a0a724 task.ti: c1a0a724
EIP: 0060:[<001e3c48>] EFLAGS: 00200a83 CPU: 0
EAX: 80000001 EBX: ede59514 ECX: 00000101 EDX: 00000001
ESI: ede59504 EDI: 80000001 EBP: c1a0a724 ESP: c1a01ed0
 DS: 0068 ES: 0068 FS: 0000 GS: 0068 SS: 0068
CR0: 8005003b CR2: 4fb15584 CR3: 01804000 CR4: 000007f0
Stack:
 ee01b214 0000000a 00000000 000824e7 00200202 00000000 c1a0a4a0 c1a18774
 ee01b214 0000000a c1a18820 c1a18760 c1a0a724 c1a0a724 00000001 c1a0a724
 00000101 00000024 0002ddfd c1a01f40 0004e877 01393d6d 00000001 014b303d
Call Trace:
 [<000824e7>] ? rcu_process_callbacks+0x15b/0x38f
 [<00200202>] ? pci_bus_update_busn_res_end+0x3/0xfb
 [<0002ddfd>] ? __do_softirq+0x8c/0x134
 [<0004e877>] ? sched_clock_local.constprop.4+0x41/0x12d
 [<00200000>] ? pci_create_root_bus+0x148/0x347
 [<0002df68>] ? irq_exit+0x53/0x6d
 [<00003ce0>] ? do_IRQ+0x38/0x7f
 [<0004e877>] ? sched_clock_local.constprop.4+0x41/0x12d
 [<0037adb8>] ? common_interrupt+0x38/0x3d
 [<00008902>] ? default_idle+0x2/0x3
 [<00200286>] ? pci_bus_update_busn_res_end+0x87/0xfb
 [<00008ee6>] ? arch_cpu_idle+0x1b/0x1c
 [<000579b1>] ? cpu_startup_entry+0x95/0xd4
 [<0008f800>] ? perf_output_sample+0x36d/0x594
 [<00c00a1b>] ? 0xc00a1a
 [<00c0055c>] ? 0xc0055b
 [<00010809>] ? perf_assign_events+0x12c/0x334
Code: 90 90 90 57 56 53 89 c3 8d 73 f0 8b 43 f4 83 e0 fc 8b 38 e8 74 65 ec ff 8b 43 f0 81 c7 00 00 00 80 0


etc...

i'll need the corresponding vmlinux image(s) to determine what caused these. also did you patch in anything in addition to grsec (just wondering what the -custom might mean )?

This magically went away after a second reboot (no software changes) and, as the computer is pieced together from old recycled hardware, I'm just going to assume that there was some hardware glitch.

Sorry for taking so long to reply.