grsecurity forums

by **quasar366** » Fri Oct 09, 2015 11:25 am

This is the resumption from topic viewtopic.php?f=3&t=4272&start=15#p15555

I've tested with nopcid boot option, but nothing changed. Here is the dmesg from one of a virtual guest machine:

Code: Select all: [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Linux version 4.2.3 (root@ubsrv) (gcc version 4.8.4 (Ubuntu 4.8.4-2ubuntu1~14.04) ) #1 SMP Thu Oct 8 10:08:57 CEST 2015 [ 0.000000] Command line: BOOT_IMAGE=/boot/vmlinuz-4.2.3 root=UUID=ecd19c96-6290-49a1-8a04-2f56c40e5534 ro serial=tty0 console=ttyS0,115200n8 nopcid [ 0.000000] x86/fpu: xstate_offset[2]: 0240, xstate_sizes[2]: 0100 [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x04: 'AVX registers' [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 0x340 bytes, using 'standard' format. [ 0.000000] x86/fpu: Using 'eager' FPU context switches. [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000bffdffff] usable [ 0.000000] BIOS-e820: [mem 0x00000000bffe0000-0x00000000bfffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x00000001c1bfffff] usable [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.8 present. [ 0.000000] Hypervisor detected: KVM [ 0.000000] e820: last_pfn = 0x1c1c00 max_arch_pfn = 0x400000000 [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WC UC- WT [ 0.000000] e820: last_pfn = 0xbffe0 max_arch_pfn = 0x400000000 [ 0.000000] found SMP MP-table at [mem 0x000f0e60-0x000f0e6f] mapped at [ffff8800000f0e60] [ 0.000000] Scanning 1 areas for low memory corruption [ 0.000000] init_memory_mapping: [mem 0x00000000-0x000fffff] [ 0.000000] init_memory_mapping: [mem 0x1c1a00000-0x1c1bfffff] [ 0.000000] init_memory_mapping: [mem 0x1c0000000-0x1c19fffff] [ 0.000000] init_memory_mapping: [mem 0x1a0000000-0x1bfffffff] [ 0.000000] init_memory_mapping: [mem 0x00100000-0xbffdffff] [ 0.000000] init_memory_mapping: [mem 0x100000000-0x19fffffff] [ 0.000000] RAMDISK: [mem 0x35d2e000-0x36e8efff] [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000F0BC0 000014 (v00 BOCHS ) [ 0.000000] ACPI: RSDT 0x00000000BFFE18C7 000030 (v01 BOCHS BXPCRSDT 00000001 BXPC 00000001) [ 0.000000] ACPI: FACP 0x00000000BFFE0B37 000074 (v01 BOCHS BXPCFACP 00000001 BXPC 00000001) [ 0.000000] ACPI: DSDT 0x00000000BFFE0040 000AF7 (v01 BOCHS BXPCDSDT 00000001 BXPC 00000001) [ 0.000000] ACPI: FACS 0x00000000BFFE0000 000040 [ 0.000000] ACPI: SSDT 0x00000000BFFE0BAB 000C94 (v01 BOCHS BXPCSSDT 00000001 BXPC 00000001) [ 0.000000] ACPI: APIC 0x00000000BFFE183F 000088 (v01 BOCHS BXPCAPIC 00000001 BXPC 00000001) [ 0.000000] No NUMA configuration found [ 0.000000] Faking a node at [mem 0x0000000000000000-0x00000001c1bfffff] [ 0.000000] NODE_DATA(0) allocated [mem 0x1c1bf9000-0x1c1bfdfff] [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 1:c1bf5001, primary cpu clock [ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.000000] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.000000] Normal [mem 0x0000000100000000-0x00000001c1bfffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000bffdffff] [ 0.000000] node 0: [mem 0x0000000100000000-0x00000001c1bfffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x00000001c1bfffff] [ 0.000000] ACPI: PM-Timer IO Port: 0x608 [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] smpboot: Allowing 3 CPUs, 0 hotplug CPUs [ 0.000000] e820: [mem 0xc0000000-0xfeffbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645519600211568 ns [ 0.000000] setup_percpu: NR_CPUS:256 nr_cpumask_bits:256 nr_cpu_ids:3 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 29 pages/cpu @ffff8801c1800000 s78616 r8192 d31976 u524288 [ 0.000000] KVM setup async PF for cpu 0 [ 0.000000] kvm-stealtime: cpu 0, msr 1c180c540 [ 0.000000] Built 1 zonelists in Node order, mobility grouping on. Total pages: 1555193 [ 0.000000] Policy zone: Normal [ 0.000000] Kernel command line: BOOT_IMAGE=/boot/vmlinuz-4.2.3 root=UUID=ecd19c96-6290-49a1-8a04-2f56c40e5534 ro serial=tty0 console=ttyS0,115200n8 nopcid [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes) [ 0.000000] Memory: 6109568K/6319608K available (7610K kernel code, 3224K rwdata, 6852K rodata, 3108K init, 1476K bss, 210040K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=3, Nodes=1 [ 0.000000] Hierarchical RCU implementation. [ 0.000000] Build-time adjustment of leaf fanout to 64. [ 0.000000] RCU restricting CPUs from NR_CPUS=256 to nr_cpu_ids=3. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=3 [ 0.000000] NR_IRQS:16640 nr_irqs:448 16 [ 0.000000] Offload RCU callbacks from all CPUs [ 0.000000] Offload RCU callbacks from CPUs: 0-2. [ 0.000000] Console: colour VGA+ 80x25 [ 0.000000] console [ttyS0] enabled [ 0.000000] tsc: Detected 2998.262 MHz processor [ 0.181951] Calibrating delay loop (skipped) preset value.. 5996.52 BogoMIPS (lpj=11993048) [ 0.182921] pid_max: default: 32768 minimum: 501 [ 0.183463] ACPI: Core revision 20150619 [ 0.184925] ACPI: All ACPI Tables successfully acquired [ 0.185666] Security Framework initialized [ 0.186141] AppArmor: AppArmor initialized [ 0.194512] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.201046] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.202903] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 0.203811] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 0.204899] Initializing cgroup subsys blkio [ 0.205403] Initializing cgroup subsys memory [ 0.205964] Initializing cgroup subsys devices [ 0.206475] Initializing cgroup subsys freezer [ 0.206986] Initializing cgroup subsys net_cls [ 0.207501] Initializing cgroup subsys perf_event [ 0.208044] Initializing cgroup subsys hugetlb [ 0.209420] mce: CPU supports 10 MCE banks [ 0.209974] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 [ 0.210582] Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 [ 0.233862] Freeing SMP alternatives memory: 36K (ffffffff82709000 - ffffffff82712000) [ 0.286214] ftrace: allocating 28420 entries in 112 pages [ 0.415134] x2apic enabled [ 0.415658] Switched APIC routing to physical x2apic. [ 0.417002] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 [ 0.417873] smpboot: CPU0: Intel Xeon E312xx (Sandy Bridge) (fam: 06, model: 2a, stepping: 01) [ 0.419049] Performance Events: unsupported p6 CPU model 42 no PMU driver, software events only. [ 0.421570] x86: Booting SMP configuration: [ 0.422163] .... node #0, CPUs: #1 [ 0.430795] kvm-clock: cpu 1, msr 1:c1bf5041, secondary cpu clock [ 0.452704] KVM setup async PF for cpu 1 [ 0.453230] #2 [ 0.453230] kvm-stealtime: cpu 1, msr 1c188c540 [ 0.461218] kvm-clock: cpu 2, msr 1:c1bf5081, secondary cpu clock [ 0.483118] x86: Booted up 1 node, 3 CPUs [ 0.483119] KVM setup async PF for cpu 2 [ 0.483123] kvm-stealtime: cpu 2, msr 1c190c540 [ 0.484584] smpboot: Total of 3 processors activated (17989.57 BogoMIPS) [ 0.531792] devtmpfs: initialized [ 0.535812] evm: security.ima [ 0.536164] evm: security.capability [ 0.536765] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns [ 0.538025] pinctrl core: initialized pinctrl subsystem [ 0.538762] RTC time: 15:12:29, date: 10/09/15 [ 0.539383] NET: Registered protocol family 16 [ 0.543978] cpuidle: using governor ladder [ 0.547980] cpuidle: using governor menu [ 0.548664] ACPI: bus type PCI registered [ 0.549118] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 [ 0.549944] PCI: Using configuration type 1 for base access [ 0.552850] ACPI: Added _OSI(Module Device) [ 0.553330] ACPI: Added _OSI(Processor Device) [ 0.553822] ACPI: Added _OSI(3.0 _SCP Extensions) [ 0.554359] ACPI: Added _OSI(Processor Aggregator Device) [ 0.555918] ACPI: Interpreter enabled [ 0.556347] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S1_] (20150619/hwxface-580) [ 0.557379] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S2_] (20150619/hwxface-580) [ 0.558419] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S3_] (20150619/hwxface-580) [ 0.559465] ACPI: (supports S0 S5) [ 0.559859] ACPI: Using IOAPIC for interrupt routing [ 0.560424] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 0.563367] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 0.564061] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI] [ 0.564825] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM [ 0.565587] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. [ 0.567087] acpiphp: Slot [3] registered [ 0.567576] acpiphp: Slot [5] registered [ 0.568039] acpiphp: Slot [6] registered [ 0.568501] acpiphp: Slot [7] registered [ 0.568978] acpiphp: Slot [8] registered [ 0.569441] acpiphp: Slot [9] registered [ 0.569895] acpiphp: Slot [10] registered [ 0.570362] acpiphp: Slot [11] registered [ 0.570836] acpiphp: Slot [12] registered [ 0.571317] acpiphp: Slot [13] registered [ 0.571810] acpiphp: Slot [14] registered [ 0.572288] acpiphp: Slot [15] registered [ 0.572771] acpiphp: Slot [16] registered [ 0.573274] acpiphp: Slot [17] registered [ 0.573753] acpiphp: Slot [18] registered [ 0.574246] acpiphp: Slot [19] registered [ 0.574723] acpiphp: Slot [20] registered [ 0.575198] acpiphp: Slot [21] registered [ 0.575664] acpiphp: Slot [22] registered [ 0.576126] acpiphp: Slot [23] registered [ 0.576588] acpiphp: Slot [24] registered [ 0.577049] acpiphp: Slot [25] registered [ 0.577518] acpiphp: Slot [26] registered [ 0.577991] acpiphp: Slot [27] registered [ 0.578452] acpiphp: Slot [28] registered [ 0.578912] acpiphp: Slot [29] registered [ 0.579375] acpiphp: Slot [30] registered [ 0.579837] acpiphp: Slot [31] registered [ 0.580291] PCI host bridge to bus 0000:00 [ 0.580744] pci_bus 0000:00: root bus resource [bus 00-ff] [ 0.581340] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 0.582089] pci_bus 0000:00: root bus resource [io 0x0d00-0xadff window] [ 0.582828] pci_bus 0000:00: root bus resource [io 0xae0f-0xaeff window] [ 0.583564] pci_bus 0000:00: root bus resource [io 0xaf20-0xafdf window] [ 0.584299] pci_bus 0000:00: root bus resource [io 0xafe4-0xffff window] [ 0.585034] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 0.585842] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] [ 0.602301] pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] [ 0.603290] pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] [ 0.604045] pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] [ 0.604866] pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] [ 0.606037] pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI [ 0.606838] pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB [ 0.851720] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 0.852491] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 0.853232] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 0.853978] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 0.854688] ACPI: PCI Interrupt Link [LNKS] (IRQs *9) [ 0.855607] ACPI: Enabled 16 GPEs in block 00 to 0F [ 0.856320] vgaarb: setting as boot device: PCI:0000:00:02.0 [ 0.856753] vgaarb: device added: PCI:0000:00:02.0,decodes=io+mem,owns=io+mem,locks=none [ 0.857366] vgaarb: loaded [ 0.857578] vgaarb: bridge control possible 0000:00:02.0 [ 0.858184] SCSI subsystem initialized [ 0.858635] ACPI: bus type USB registered [ 0.858979] usbcore: registered new interface driver usbfs [ 0.859405] usbcore: registered new interface driver hub [ 0.859826] usbcore: registered new device driver usb [ 0.860515] PCI: Using ACPI for IRQ routing [ 0.861322] NetLabel: Initializing [ 0.861721] NetLabel: domain hash size = 128 [ 0.862216] NetLabel: protocols = UNLABELED CIPSOv4 [ 0.862774] NetLabel: unlabeled traffic allowed by default [ 0.863514] clocksource: Switched to clocksource kvm-clock [ 0.871350] AppArmor: AppArmor Filesystem Enabled [ 0.872255] pnp: PnP ACPI init [ 0.873213] pnp: PnP ACPI: found 5 devices [ 0.880791] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 0.881852] NET: Registered protocol family 2 [ 0.883026] TCP established hash table entries: 65536 (order: 7, 524288 bytes) [ 0.885057] TCP bind hash table entries: 65536 (order: 8, 1048576 bytes) [ 0.886700] TCP: Hash tables configured (established 65536 bind 65536) [ 0.887729] UDP hash table entries: 4096 (order: 5, 131072 bytes) [ 0.888721] UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes) [ 0.889555] NET: Registered protocol family 1 [ 0.890082] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 0.890746] pci 0000:00:01.0: PIIX3: Enabling Passive Release [ 0.891395] pci 0000:00:01.0: Activating ISA DMA hang workarounds [ 0.913035] ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 11 [ 0.956560] ACPI: PCI Interrupt Link [LNKA] enabled at IRQ 10 [ 0.999681] ACPI: PCI Interrupt Link [LNKB] enabled at IRQ 10 [ 1.042013] ACPI: PCI Interrupt Link [LNKC] enabled at IRQ 11 [ 1.063901] Trying to unpack rootfs image as initramfs... [ 1.297160] Freeing initrd memory: 17796K (ffff880035d2e000 - ffff880036e8f000) [ 1.298041] PCI-DMA: Using software bounce buffering for IO (SWIOTLB) [ 1.298740] software IO TLB [mem 0xbbfe0000-0xbffe0000] (64MB) mapped at [ffff8800bbfe0000-ffff8800bffdffff] [ 1.299953] microcode: CPU0 sig=0x206a1, pf=0x1, revision=0x1 [ 1.300475] microcode: CPU1 sig=0x206a1, pf=0x1, revision=0x1 [ 1.300928] microcode: CPU2 sig=0x206a1, pf=0x1, revision=0x1 [ 1.301651] microcode: Microcode Update Driver: v2.00 <tigran@aivazian.fsnet.co.uk>, Peter Oruba [ 1.302381] Scanning for low memory corruption every 60 seconds [ 1.303263] futex hash table entries: 1024 (order: 4, 65536 bytes) [ 1.303773] Initialise system trusted keyring [ 1.304125] audit: initializing netlink subsys (disabled) [ 1.304548] audit: type=2000 audit(1444403550.070:1): initialized [ 1.305340] HugeTLB registered 2 MB page size, pre-allocated 0 pages [ 1.306100] zpool: loaded [ 1.306621] VFS: Disk quotas dquot_6.6.0 [ 1.307085] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 1.308215] fuse init (API version 7.23) [ 1.308815] Key type big_key registered [ 1.310458] Key type asymmetric registered [ 1.310787] Asymmetric key parser 'x509' registered [ 1.311170] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251) [ 1.311841] io scheduler noop registered [ 1.312302] io scheduler deadline registered [ 1.312782] io scheduler cfq registered (default) [ 1.313386] pci_hotplug: PCI Hot Plug PCI Core version: 0.5 [ 1.314064] pciehp: PCI Express Hot Plug Controller Driver version: 0.4 [ 1.314987] ipmi message handler version 39.2 [ 1.315655] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 1.316641] ACPI: Power Button [PWRF] [ 1.317397] GHES: HEST is not enabled! [ 1.338985] virtio-pci 0000:00:03.0: virtio_pci: leaving for legacy driver [ 1.361209] virtio-pci 0000:00:05.0: virtio_pci: leaving for legacy driver [ 1.384116] virtio-pci 0000:00:06.0: virtio_pci: leaving for legacy driver [ 1.405586] virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver [ 1.426726] virtio-pci 0000:00:08.0: virtio_pci: leaving for legacy driver [ 1.449577] virtio-pci 0000:00:09.0: virtio_pci: leaving for legacy driver [ 1.450840] Serial: 8250/16550 driver, 32 ports, IRQ sharing enabled [ 1.477302] 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 1.479238] MOXA Intellio family driver version 6.0k [ 1.479664] MOXA Smartio/Industio family driver version 2.0.5 [ 1.480203] Linux agpgart interface v0.103 [ 1.483244] brd: module loaded [ 1.484854] loop: module loaded [ 1.487636] vda: vda1 [ 1.496832] vdb: vdb1 vdb2 < vdb5 > [ 1.499305] vdc: vdc1 [ 1.503278] scsi host0: ata_piix [ 1.504397] scsi host1: ata_piix [ 1.505103] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc180 irq 14 [ 1.506301] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc188 irq 15 [ 1.507574] libphy: Fixed MDIO Bus: probed [ 1.508332] tun: Universal TUN/TAP device driver, 1.6 [ 1.509043] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com> [ 2.231694] ata1.01: ATAPI: QEMU DVD-ROM, 2.1.2, max UDMA/100 [ 2.311535] PPP generic driver version 2.4.2 [ 2.311731] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 2.311737] ehci-pci: EHCI PCI platform driver [ 2.313141] tsc: Refined TSC clocksource calibration: 2998.263 MHz [ 2.313607] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x2b37dcd9946, max_idle_ns: 440795353631 ns [ 2.314620] ata1.01: configured for MWDMA2 [ 2.315475] scsi 0:0:1:0: CD-ROM QEMU QEMU DVD-ROM 2.1. PQ: 0 ANSI: 5 [ 2.324701] sr 0:0:1:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray [ 2.326042] cdrom: Uniform CD-ROM driver Revision: 3.20 [ 2.326948] sr 0:0:1:0: Attached scsi generic sg0 type 5 [ 2.333400] ehci-pci 0000:00:04.7: EHCI Host Controller [ 2.333985] ehci-pci 0000:00:04.7: new USB bus registered, assigned bus number 1 [ 2.334898] ehci-pci 0000:00:04.7: irq 11, io mem 0xfebd2000 [ 2.347631] ehci-pci 0000:00:04.7: USB 2.0 started, EHCI 1.00 [ 2.348448] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002 [ 2.349182] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 2.350007] usb usb1: Product: EHCI Host Controller [ 2.350835] usb usb1: Manufacturer: Linux 4.2.3 ehci_hcd [ 2.351747] usb usb1: SerialNumber: 0000:00:04.7 [ 2.352779] hub 1-0:1.0: USB hub found [ 2.353277] hub 1-0:1.0: 6 ports detected [ 2.354135] ehci-platform: EHCI generic platform driver [ 2.354782] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 2.355543] ohci-pci: OHCI PCI platform driver [ 2.356096] ohci-platform: OHCI generic platform driver [ 2.356731] uhci_hcd: USB Universal Host Controller Interface driver [ 2.380805] uhci_hcd 0000:00:04.0: UHCI Host Controller [ 2.381420] uhci_hcd 0000:00:04.0: new USB bus registered, assigned bus number 2 [ 2.382262] uhci_hcd 0000:00:04.0: detected 2 ports [ 2.382847] uhci_hcd 0000:00:04.0: irq 11, io base 0x0000c0e0 [ 2.383624] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001 [ 2.384387] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 2.385229] usb usb2: Product: UHCI Host Controller [ 2.385804] usb usb2: Manufacturer: Linux 4.2.3 uhci_hcd [ 2.386409] usb usb2: SerialNumber: 0000:00:04.0 [ 2.387085] hub 2-0:1.0: USB hub found [ 2.387541] hub 2-0:1.0: 2 ports detected [ 2.410693] uhci_hcd 0000:00:04.1: UHCI Host Controller [ 2.411358] uhci_hcd 0000:00:04.1: new USB bus registered, assigned bus number 3 [ 2.412256] uhci_hcd 0000:00:04.1: detected 2 ports [ 2.412869] uhci_hcd 0000:00:04.1: irq 10, io base 0x0000c100 [ 2.413629] usb usb3: New USB device found, idVendor=1d6b, idProduct=0001 [ 2.414398] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 2.415206] usb usb3: Product: UHCI Host Controller [ 2.415808] usb usb3: Manufacturer: Linux 4.2.3 uhci_hcd [ 2.416395] usb usb3: SerialNumber: 0000:00:04.1 [ 2.417043] hub 3-0:1.0: USB hub found [ 2.417486] hub 3-0:1.0: 2 ports detected [ 2.440410] uhci_hcd 0000:00:04.2: UHCI Host Controller [ 2.441129] uhci_hcd 0000:00:04.2: new USB bus registered, assigned bus number 4 [ 2.441848] uhci_hcd 0000:00:04.2: detected 2 ports [ 2.442288] uhci_hcd 0000:00:04.2: irq 10, io base 0x0000c120 [ 2.443025] usb usb4: New USB device found, idVendor=1d6b, idProduct=0001 [ 2.443835] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 2.444707] usb usb4: Product: UHCI Host Controller [ 2.445248] usb usb4: Manufacturer: Linux 4.2.3 uhci_hcd [ 2.445931] usb usb4: SerialNumber: 0000:00:04.2 [ 2.446601] hub 4-0:1.0: USB hub found [ 2.447047] hub 4-0:1.0: 2 ports detected [ 2.447689] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 2.449828] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 2.450436] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 2.451126] mousedev: PS/2 mouse device common for all mice [ 2.452033] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1 [ 2.453445] rtc_cmos 00:00: RTC can wake from S4 [ 2.454193] rtc_cmos 00:00: rtc core: registered rtc_cmos as rtc0 [ 2.454955] rtc_cmos 00:00: alarms up to one day, 0 bytes nvram [ 2.455686] device-mapper: uevent: version 1.0.3 [ 2.456285] device-mapper: ioctl: 4.33.0-ioctl (2015-8-18) initialised: dm-devel@redhat.com [ 2.457245] ledtrig-cpu: registered to indicate activity on CPUs [ 2.458279] NET: Registered protocol family 10 [ 2.459090] NET: Registered protocol family 17 [ 2.459650] Key type dns_resolver registered [ 2.460498] Loading compiled-in X.509 certificates [ 2.461638] Loaded X.509 cert 'Build time autogenerated kernel key: e5578bfbb37b4544672ed8d408d9b2bec78a20c9' [ 2.462758] registered taskstats version 1 [ 2.463235] zswap: loading zswap [ 2.468754] zpool: no driver for type zbud [ 2.469274] zswap: zbud zpool not available [ 2.469773] zswap: zpool creation failed [ 2.480266] Key type trusted registered [ 2.503357] Key type encrypted registered [ 2.503885] AppArmor: AppArmor sha1 policy hashing enabled [ 2.504512] ima: No TPM chip found, activating TPM-bypass! [ 2.505145] evm: HMAC attrs: 0x1 [ 2.505845] Magic number: 3:459:234 [ 2.506383] rtc_cmos 00:00: setting system clock to 2015-10-09 15:12:31 UTC (1444403551) [ 2.507368] BIOS EDD facility v0.16 2004-Jun-25, 0 devices found [ 2.508064] EDD information not available. [ 2.509287] Freeing unused kernel memory: 3108K (ffffffff82400000 - ffffffff82709000) Loading, please wait... [ 2.625065] systemd-udevd[115]: starting version 204 [ 2.639849] systemd-udevd[115]: segfault at ffffffffff5ff000 ip 000003cc9a5c2c59 sp 000003fab75f5ab4 error 5 [ 2.641092] grsec: Segmentation fault occurred at ffffffffff5ff000 in /lib/systemd/systemd-udevd[systemd-udevd:115] uid/euid:0/0 gid/egid:0/0, parent /init[init:1] uid/euid:0/0 gid/egid:0/0 [ 2.642968] grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /lib/systemd/systemd-udevd[systemd-udevd:115] uid/euid:0/0 gid/egid:0/0, parent /init[init:1] uid/euid:0/0 gid/egid:0/0 Begin: Loading essential drivers ... done. Begin: Running /scripts/init-premount ... done. Begin: Mounting root file system ... Begin: Running /scripts/local-top ... done. Gave up waiting for root device. Common problems: - Boot args (cat /proc/cmdline) - Check rootdelay= (did the system wait long enough?) - Check root= (did the system wait for the right device?) - Missing modules (cat /proc/modules; ls /dev) ALERT! /dev/disk/by-uuid/ecd19c96-6290-49a1-8a04-2f56c40e5534 does not exist. Dropping to a shell! [ 32.729996] hid: module verification failed: signature and/or required key missing - tainting kernel [ 32.745880] hidraw: raw HID events driver (C) Jiri Kosina [ 32.754833] usbcore: registered new interface driver usbhid [ 32.755454] usbhid: USB HID core driver BusyBox v1.21.1 (Ubuntu 1:1.21.0-1ubuntu1) built-in shell (ash) Enter 'help' for a list of built-in commands. (initramfs)

by **PaX Team** » Fri Oct 09, 2015 7:40 pm

the latest PaX (and soon grsec) patch should fix this.

by **quasar366** » Sat Oct 10, 2015 4:47 am

I'm sorry to say, the latest grsecurity-3.1-4.2.3-201510092347.patch did not solved the systemd-udevd segmentation fault boot issue. Just tested with nopcid and without:

Code: Select all: [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Linux version 4.2.3 (root@srv14dev) (gcc version 4.8.4 (Ubuntu 4.8.4-2ubuntu1~14.04) ) #1 SMP Sat Oct 10 09:55:00 CEST 2015 [ 0.000000] Command line: BOOT_IMAGE=/boot/vmlinuz-4.2.3 root=UUID=ecd19c96-6290-49a1-8a04-2f56c40e5534 ro serial=tty0 console=ttyS0,115200n8 [ 0.000000] x86/fpu: xstate_offset[2]: 0240, xstate_sizes[2]: 0100 [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x04: 'AVX registers' [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 0x340 bytes, using 'standard' format. [ 0.000000] x86/fpu: Using 'eager' FPU context switches. [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000bffdffff] usable [ 0.000000] BIOS-e820: [mem 0x00000000bffe0000-0x00000000bfffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x00000001c1bfffff] usable [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.8 present. [ 0.000000] Hypervisor detected: KVM [ 0.000000] e820: last_pfn = 0x1c1c00 max_arch_pfn = 0x400000000 [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WC UC- WT [ 0.000000] e820: last_pfn = 0xbffe0 max_arch_pfn = 0x400000000 [ 0.000000] found SMP MP-table at [mem 0x000f0e60-0x000f0e6f] mapped at [ffff8800000f0e60] [ 0.000000] Scanning 1 areas for low memory corruption [ 0.000000] init_memory_mapping: [mem 0x00000000-0x000fffff] [ 0.000000] init_memory_mapping: [mem 0x1c1a00000-0x1c1bfffff] [ 0.000000] init_memory_mapping: [mem 0x1c0000000-0x1c19fffff] [ 0.000000] init_memory_mapping: [mem 0x1a0000000-0x1bfffffff] [ 0.000000] init_memory_mapping: [mem 0x00100000-0xbffdffff] [ 0.000000] init_memory_mapping: [mem 0x100000000-0x19fffffff] [ 0.000000] RAMDISK: [mem 0x35d38000-0x36e93fff] [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000F0BC0 000014 (v00 BOCHS ) [ 0.000000] ACPI: RSDT 0x00000000BFFE18C7 000030 (v01 BOCHS BXPCRSDT 00000001 BXPC 00000001) [ 0.000000] ACPI: FACP 0x00000000BFFE0B37 000074 (v01 BOCHS BXPCFACP 00000001 BXPC 00000001) [ 0.000000] ACPI: DSDT 0x00000000BFFE0040 000AF7 (v01 BOCHS BXPCDSDT 00000001 BXPC 00000001) [ 0.000000] ACPI: FACS 0x00000000BFFE0000 000040 [ 0.000000] ACPI: SSDT 0x00000000BFFE0BAB 000C94 (v01 BOCHS BXPCSSDT 00000001 BXPC 00000001) [ 0.000000] ACPI: APIC 0x00000000BFFE183F 000088 (v01 BOCHS BXPCAPIC 00000001 BXPC 00000001) [ 0.000000] No NUMA configuration found [ 0.000000] Faking a node at [mem 0x0000000000000000-0x00000001c1bfffff] [ 0.000000] NODE_DATA(0) allocated [mem 0x1c1bf9000-0x1c1bfdfff] [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 0:2712001, primary cpu clock [ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.000000] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.000000] Normal [mem 0x0000000100000000-0x00000001c1bfffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000bffdffff] [ 0.000000] node 0: [mem 0x0000000100000000-0x00000001c1bfffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x00000001c1bfffff] [ 0.000000] ACPI: PM-Timer IO Port: 0x608 [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] smpboot: Allowing 3 CPUs, 0 hotplug CPUs [ 0.000000] e820: [mem 0xc0000000-0xfeffbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645519600211568 ns [ 0.000000] setup_percpu: NR_CPUS:256 nr_cpumask_bits:256 nr_cpu_ids:3 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 29 pages/cpu @ffff8801c1800000 s78552 r8192 d32040 u524288 [ 0.000000] KVM setup async PF for cpu 0 [ 0.000000] kvm-stealtime: cpu 0, msr 1c180c540 [ 0.000000] Built 1 zonelists in Node order, mobility grouping on. Total pages: 1555193 [ 0.000000] Policy zone: Normal [ 0.000000] Kernel command line: BOOT_IMAGE=/boot/vmlinuz-4.2.3 root=UUID=ecd19c96-6290-49a1-8a04-2f56c40e5534 ro serial=tty0 console=ttyS0,115200n8 [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes) [ 0.000000] Memory: 6109588K/6319608K available (7599K kernel code, 3223K rwdata, 6848K rodata, 3108K init, 1492K bss, 210020K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=3, Nodes=1 [ 0.000000] Hierarchical RCU implementation. [ 0.000000] Build-time adjustment of leaf fanout to 64. [ 0.000000] RCU restricting CPUs from NR_CPUS=256 to nr_cpu_ids=3. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=3 [ 0.000000] NR_IRQS:16640 nr_irqs:448 16 [ 0.000000] Offload RCU callbacks from all CPUs [ 0.000000] Offload RCU callbacks from CPUs: 0-2. [ 0.000000] Console: colour VGA+ 80x25 [ 0.000000] console [ttyS0] enabled [ 0.000000] tsc: Detected 2998.262 MHz processor [ 0.172467] Calibrating delay loop (skipped) preset value.. 5996.52 BogoMIPS (lpj=11993048) [ 0.173421] pid_max: default: 32768 minimum: 501 [ 0.173955] ACPI: Core revision 20150619 [ 0.175388] ACPI: All ACPI Tables successfully acquired [ 0.176061] Security Framework initialized [ 0.176529] AppArmor: AppArmor initialized [ 0.184979] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.192090] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.193706] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 0.194605] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 0.195604] Initializing cgroup subsys blkio [ 0.196101] Initializing cgroup subsys memory [ 0.196606] Initializing cgroup subsys devices [ 0.197112] Initializing cgroup subsys freezer [ 0.197616] Initializing cgroup subsys net_cls [ 0.198121] Initializing cgroup subsys perf_event [ 0.198657] Initializing cgroup subsys hugetlb [ 0.200025] mce: CPU supports 10 MCE banks [ 0.200530] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 [ 0.201135] Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 [ 0.224030] Freeing SMP alternatives memory: 36K (ffffffff82709000 - ffffffff82712000) [ 0.275647] ftrace: allocating 28367 entries in 111 pages [ 0.403770] x2apic enabled [ 0.404290] Switched APIC routing to physical x2apic. [ 0.405635] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 [ 0.406480] smpboot: CPU0: Intel Xeon E312xx (Sandy Bridge) (fam: 06, model: 2a, stepping: 01) [ 0.407556] Performance Events: unsupported p6 CPU model 42 no PMU driver, software events only. [ 0.410050] x86: Booting SMP configuration: [ 0.410694] .... node #0, CPUs: #1 [ 0.419469] kvm-clock: cpu 1, msr 0:2712041, secondary cpu clock [ 0.441351] KVM setup async PF for cpu 1 [ 0.441903] #2 [ 0.441903] kvm-stealtime: cpu 1, msr 1c188c540 [ 0.450554] kvm-clock: cpu 2, msr 0:2712081, secondary cpu clock [ 0.475368] x86: Booted up 1 node, 3 CPUs [ 0.475371] KVM setup async PF for cpu 2 [ 0.475375] kvm-stealtime: cpu 2, msr 1c190c540 [ 0.476818] smpboot: Total of 3 processors activated (17989.57 BogoMIPS) [ 0.525834] devtmpfs: initialized [ 0.528566] evm: security.ima [ 0.528905] evm: security.capability [ 0.529500] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns [ 0.530709] pinctrl core: initialized pinctrl subsystem [ 0.531422] RTC time: 8:39:17, date: 10/10/15 [ 0.532034] NET: Registered protocol family 16 [ 0.549642] cpuidle: using governor ladder [ 0.557730] cpuidle: using governor menu [ 0.558422] ACPI: bus type PCI registered [ 0.558902] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 [ 0.559719] PCI: Using configuration type 1 for base access [ 0.566677] ACPI: Added _OSI(Module Device) [ 0.567206] ACPI: Added _OSI(Processor Device) [ 0.567743] ACPI: Added _OSI(3.0 _SCP Extensions) [ 0.568277] ACPI: Added _OSI(Processor Aggregator Device) [ 0.569873] ACPI: Interpreter enabled [ 0.570302] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S1_] (20150619/hwxface-580) [ 0.571375] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S2_] (20150619/hwxface-580) [ 0.572439] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S3_] (20150619/hwxface-580) [ 0.573537] ACPI: (supports S0 S5) [ 0.573972] ACPI: Using IOAPIC for interrupt routing [ 0.574597] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 0.577729] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 0.578449] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI] [ 0.579423] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM [ 0.580482] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. [ 0.582524] acpiphp: Slot [3] registered [ 0.583081] acpiphp: Slot [5] registered [ 0.583545] acpiphp: Slot [6] registered [ 0.584009] acpiphp: Slot [7] registered [ 0.584473] acpiphp: Slot [8] registered [ 0.584937] acpiphp: Slot [9] registered [ 0.585401] acpiphp: Slot [10] registered [ 0.585875] acpiphp: Slot [11] registered [ 0.586349] acpiphp: Slot [12] registered [ 0.586837] acpiphp: Slot [13] registered [ 0.587313] acpiphp: Slot [14] registered [ 0.587785] acpiphp: Slot [15] registered [ 0.588261] acpiphp: Slot [16] registered [ 0.588735] acpiphp: Slot [17] registered [ 0.589207] acpiphp: Slot [18] registered [ 0.589680] acpiphp: Slot [19] registered [ 0.590155] acpiphp: Slot [20] registered [ 0.590628] acpiphp: Slot [21] registered [ 0.591115] acpiphp: Slot [22] registered [ 0.591592] acpiphp: Slot [23] registered [ 0.592068] acpiphp: Slot [24] registered [ 0.592542] acpiphp: Slot [25] registered [ 0.593016] acpiphp: Slot [26] registered [ 0.593493] acpiphp: Slot [27] registered [ 0.593971] acpiphp: Slot [28] registered [ 0.594458] acpiphp: Slot [29] registered [ 0.594946] acpiphp: Slot [30] registered [ 0.595440] acpiphp: Slot [31] registered [ 0.595914] PCI host bridge to bus 0000:00 [ 0.596379] pci_bus 0000:00: root bus resource [bus 00-ff] [ 0.596999] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 0.597769] pci_bus 0000:00: root bus resource [io 0x0d00-0xadff window] [ 0.598542] pci_bus 0000:00: root bus resource [io 0xae0f-0xaeff window] [ 0.599321] pci_bus 0000:00: root bus resource [io 0xaf20-0xafdf window] [ 0.600112] pci_bus 0000:00: root bus resource [io 0xafe4-0xffff window] [ 0.600892] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 0.601747] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] [ 0.618373] pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] [ 0.619202] pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] [ 0.619930] pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] [ 0.620723] pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] [ 0.621886] pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI [ 0.622701] pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB [ 0.881245] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 0.882022] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 0.882769] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 0.883514] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 0.884215] ACPI: PCI Interrupt Link [LNKS] (IRQs *9) [ 0.885113] ACPI: Enabled 16 GPEs in block 00 to 0F [ 0.885828] vgaarb: setting as boot device: PCI:0000:00:02.0 [ 0.886268] vgaarb: device added: PCI:0000:00:02.0,decodes=io+mem,owns=io+mem,locks=none [ 0.886890] vgaarb: loaded [ 0.887103] vgaarb: bridge control possible 0000:00:02.0 [ 0.887688] SCSI subsystem initialized [ 0.888098] ACPI: bus type USB registered [ 0.888577] usbcore: registered new interface driver usbfs [ 0.889199] usbcore: registered new interface driver hub [ 0.889804] usbcore: registered new device driver usb [ 0.890611] PCI: Using ACPI for IRQ routing [ 0.891427] NetLabel: Initializing [ 0.891819] NetLabel: domain hash size = 128 [ 0.892304] NetLabel: protocols = UNLABELED CIPSOv4 [ 0.893030] NetLabel: unlabeled traffic allowed by default [ 0.893775] clocksource: Switched to clocksource kvm-clock [ 0.900582] AppArmor: AppArmor Filesystem Enabled [ 0.901210] pnp: PnP ACPI init [ 0.901915] pnp: PnP ACPI: found 5 devices [ 0.908530] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 0.909601] NET: Registered protocol family 2 [ 0.910817] TCP established hash table entries: 65536 (order: 7, 524288 bytes) [ 0.912673] TCP bind hash table entries: 65536 (order: 8, 1048576 bytes) [ 0.914271] TCP: Hash tables configured (established 65536 bind 65536) [ 0.915318] UDP hash table entries: 4096 (order: 5, 131072 bytes) [ 0.916721] UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes) [ 0.917584] NET: Registered protocol family 1 [ 0.918120] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 0.918820] pci 0000:00:01.0: PIIX3: Enabling Passive Release [ 0.919480] pci 0000:00:01.0: Activating ISA DMA hang workarounds [ 0.942038] ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 11 [ 0.985208] ACPI: PCI Interrupt Link [LNKA] enabled at IRQ 10 [ 1.028452] ACPI: PCI Interrupt Link [LNKB] enabled at IRQ 10 [ 1.070793] ACPI: PCI Interrupt Link [LNKC] enabled at IRQ 11 [ 1.092757] Trying to unpack rootfs image as initramfs... [ 1.331447] Freeing initrd memory: 17776K (ffff880035d38000 - ffff880036e94000) [ 1.332404] PCI-DMA: Using software bounce buffering for IO (SWIOTLB) [ 1.333193] software IO TLB [mem 0xbbfe0000-0xbffe0000] (64MB) mapped at [ffff8800bbfe0000-ffff8800bffdffff] [ 1.334521] microcode: CPU0 sig=0x206a1, pf=0x1, revision=0x1 [ 1.335220] microcode: CPU1 sig=0x206a1, pf=0x1, revision=0x1 [ 1.335676] microcode: CPU2 sig=0x206a1, pf=0x1, revision=0x1 [ 1.336422] microcode: Microcode Update Driver: v2.00 <tigran@aivazian.fsnet.co.uk>, Peter Oruba [ 1.337131] Scanning for low memory corruption every 60 seconds [ 1.337968] futex hash table entries: 1024 (order: 4, 65536 bytes) [ 1.338688] Initialise system trusted keyring [ 1.339275] audit: initializing netlink subsys (disabled) [ 1.339977] audit: type=2000 audit(1444466358.851:1): initialized [ 1.341025] HugeTLB registered 2 MB page size, pre-allocated 0 pages [ 1.342045] VFS: Disk quotas dquot_6.6.0 [ 1.342555] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 1.343632] fuse init (API version 7.23) [ 1.344802] Key type big_key registered [ 1.346140] Key type asymmetric registered [ 1.346673] Asymmetric key parser 'x509' registered [ 1.347307] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251) [ 1.348373] io scheduler noop registered [ 1.348735] io scheduler deadline registered [ 1.349121] io scheduler cfq registered (default) [ 1.349709] pci_hotplug: PCI Hot Plug PCI Core version: 0.5 [ 1.350247] pciehp: PCI Express Hot Plug Controller Driver version: 0.4 [ 1.350866] ipmi message handler version 39.2 [ 1.351313] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 1.351947] ACPI: Power Button [PWRF] [ 1.352534] GHES: HEST is not enabled! [ 1.374604] virtio-pci 0000:00:03.0: virtio_pci: leaving for legacy driver [ 1.396684] virtio-pci 0000:00:05.0: virtio_pci: leaving for legacy driver [ 1.418929] virtio-pci 0000:00:06.0: virtio_pci: leaving for legacy driver [ 1.440386] virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver [ 1.461771] virtio-pci 0000:00:08.0: virtio_pci: leaving for legacy driver [ 1.483995] virtio-pci 0000:00:09.0: virtio_pci: leaving for legacy driver [ 1.485242] Serial: 8250/16550 driver, 32 ports, IRQ sharing enabled [ 1.510917] 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 1.512872] MOXA Intellio family driver version 6.0k [ 1.513482] MOXA Smartio/Industio family driver version 2.0.5 [ 1.514313] Linux agpgart interface v0.103 [ 1.517307] brd: module loaded [ 1.518650] loop: module loaded [ 1.521657] vda: vda1 [ 1.523221] vdb: vdb1 vdb2 < vdb5 > [ 1.524454] vdc: vdc1 [ 1.526668] scsi host0: ata_piix [ 1.527284] scsi host1: ata_piix [ 1.527705] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc180 irq 14 [ 1.528478] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc188 irq 15 [ 1.529507] libphy: Fixed MDIO Bus: probed [ 1.530165] tun: Universal TUN/TAP device driver, 1.6 [ 1.530767] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com> [ 2.309337] PPP generic driver version 2.4.2 [ 2.309914] ata1.01: ATAPI: QEMU DVD-ROM, 2.1.2, max UDMA/100 [ 2.310972] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 2.311062] ata1.01: configured for MWDMA2 [ 2.311774] scsi 0:0:1:0: CD-ROM QEMU QEMU DVD-ROM 2.1. PQ: 0 ANSI: 5 [ 2.313599] ehci-pci: EHCI PCI platform driver [ 2.318321] sr 0:0:1:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray [ 2.319091] cdrom: Uniform CD-ROM driver Revision: 3.20 [ 2.319816] sr 0:0:1:0: Attached scsi generic sg0 type 5 [ 2.333847] tsc: Refined TSC clocksource calibration: 2998.262 MHz [ 2.334559] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x2b37db7b5d5, max_idle_ns: 440795229237 ns [ 2.336118] ehci-pci 0000:00:04.7: EHCI Host Controller [ 2.336127] ehci-pci 0000:00:04.7: new USB bus registered, assigned bus number 1 [ 2.338806] ehci-pci 0000:00:04.7: irq 11, io mem 0xfebd2000 [ 2.349832] ehci-pci 0000:00:04.7: USB 2.0 started, EHCI 1.00 [ 2.350611] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002 [ 2.351917] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 2.353346] usb usb1: Product: EHCI Host Controller [ 2.354341] usb usb1: Manufacturer: Linux 4.2.3 ehci_hcd [ 2.355439] usb usb1: SerialNumber: 0000:00:04.7 [ 2.356820] hub 1-0:1.0: USB hub found [ 2.357658] hub 1-0:1.0: 6 ports detected [ 2.358878] ehci-platform: EHCI generic platform driver [ 2.359484] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 2.360194] ohci-pci: OHCI PCI platform driver [ 2.360711] ohci-platform: OHCI generic platform driver [ 2.361305] uhci_hcd: USB Universal Host Controller Interface driver [ 2.383991] uhci_hcd 0000:00:04.0: UHCI Host Controller [ 2.384602] uhci_hcd 0000:00:04.0: new USB bus registered, assigned bus number 2 [ 2.385432] uhci_hcd 0000:00:04.0: detected 2 ports [ 2.386032] uhci_hcd 0000:00:04.0: irq 11, io base 0x0000c0e0 [ 2.386807] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001 [ 2.387592] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 2.388490] usb usb2: Product: UHCI Host Controller [ 2.389093] usb usb2: Manufacturer: Linux 4.2.3 uhci_hcd [ 2.389686] usb usb2: SerialNumber: 0000:00:04.0 [ 2.390438] hub 2-0:1.0: USB hub found [ 2.390934] hub 2-0:1.0: 2 ports detected [ 2.413410] uhci_hcd 0000:00:04.1: UHCI Host Controller [ 2.414062] uhci_hcd 0000:00:04.1: new USB bus registered, assigned bus number 3 [ 2.414951] uhci_hcd 0000:00:04.1: detected 2 ports [ 2.415544] uhci_hcd 0000:00:04.1: irq 10, io base 0x0000c100 [ 2.416357] usb usb3: New USB device found, idVendor=1d6b, idProduct=0001 [ 2.417127] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 2.417966] usb usb3: Product: UHCI Host Controller [ 2.418522] usb usb3: Manufacturer: Linux 4.2.3 uhci_hcd [ 2.419140] usb usb3: SerialNumber: 0000:00:04.1 [ 2.420010] hub 3-0:1.0: USB hub found [ 2.420508] hub 3-0:1.0: 2 ports detected [ 2.443426] uhci_hcd 0000:00:04.2: UHCI Host Controller [ 2.444045] uhci_hcd 0000:00:04.2: new USB bus registered, assigned bus number 4 [ 2.444902] uhci_hcd 0000:00:04.2: detected 2 ports [ 2.445511] uhci_hcd 0000:00:04.2: irq 10, io base 0x0000c120 [ 2.446288] usb usb4: New USB device found, idVendor=1d6b, idProduct=0001 [ 2.447084] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 2.447915] usb usb4: Product: UHCI Host Controller [ 2.448485] usb usb4: Manufacturer: Linux 4.2.3 uhci_hcd [ 2.449098] usb usb4: SerialNumber: 0000:00:04.2 [ 2.449815] hub 4-0:1.0: USB hub found [ 2.450270] hub 4-0:1.0: 2 ports detected [ 2.450903] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 2.452541] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 2.453014] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 2.453691] mousedev: PS/2 mouse device common for all mice [ 2.454634] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1 [ 2.455847] rtc_cmos 00:00: RTC can wake from S4 [ 2.456603] rtc_cmos 00:00: rtc core: registered rtc_cmos as rtc0 [ 2.457368] rtc_cmos 00:00: alarms up to one day, 0 bytes nvram [ 2.458080] device-mapper: uevent: version 1.0.3 [ 2.458783] device-mapper: ioctl: 4.33.0-ioctl (2015-8-18) initialised: dm-devel@redhat.com [ 2.460313] ledtrig-cpu: registered to indicate activity on CPUs [ 2.461469] NET: Registered protocol family 10 [ 2.462337] NET: Registered protocol family 17 [ 2.462937] Key type dns_resolver registered [ 2.464107] Loading compiled-in X.509 certificates [ 2.465312] Loaded X.509 cert 'Build time autogenerated kernel key: d94c545a76dc7479ad77aa2f640835cbbdace9a6' [ 2.466484] registered taskstats version 1 [ 2.477782] Key type trusted registered [ 2.498551] Key type encrypted registered [ 2.499156] AppArmor: AppArmor sha1 policy hashing enabled [ 2.499799] ima: No TPM chip found, activating TPM-bypass! [ 2.500442] evm: HMAC attrs: 0x1 [ 2.501191] Magic number: 3:754:674 [ 2.501744] rtc_cmos 00:00: setting system clock to 2015-10-10 08:39:19 UTC (1444466359) [ 2.502865] BIOS EDD facility v0.16 2004-Jun-25, 0 devices found [ 2.503597] EDD information not available. [ 2.505715] Freeing unused kernel memory: 3108K (ffffffff82400000 - ffffffff82709000) Loading, please wait... [ 2.624092] systemd-udevd[113]: starting version 204 [ 2.636638] systemd-udevd[113]: segfault at ffffffffff5ff000 ip 000003e1dfdc8c59 sp 000003f45db641b4 error 5 [ 2.642290] grsec: Segmentation fault occurred at ffffffffff5ff000 in /lib/systemd/systemd-udevd[systemd-udevd:113] uid/euid:0/0 gid/egid:0/0, parent /init[init:1] uid/euid:0/0 gid/egid:0/0 [ 2.650791] grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /lib/systemd/systemd-udevd[systemd-udevd:113] uid/euid:0/0 gid/egid:0/0, parent /init[init:1] uid/euid:0/0 gid/egid:0/0 Begin: Loading essential drivers ... done. Begin: Running /scripts/init-premount ... done. Begin: Mounting root file system ... Begin: Running /scripts/local-top ... done. Gave up waiting for root device. Common problems: - Boot args (cat /proc/cmdline) - Check rootdelay= (did the system wait long enough?) - Check root= (did the system wait for the right device?) - Missing modules (cat /proc/modules; ls /dev) ALERT! /dev/disk/by-uuid/ecd19c96-6290-49a1-8a04-2f56c40e5534 does not exist. Dropping to a shell! [ 32.738389] hid: module verification failed: signature and/or required key missing - tainting kernel [ 32.754297] hidraw: raw HID events driver (C) Jiri Kosina [ 32.763568] usbcore: registered new interface driver usbhid [ 32.764235] usbhid: USB HID core driver BusyBox v1.21.1 (Ubuntu 1:1.21.0-1ubuntu1) built-in shell (ash) Enter 'help' for a list of built-in commands. (initramfs)

I'm not sure, if this grsecurity related. Yesterday I experienced a kernel crash after starting virtualbox with my ubuntu 14.04 desktop system and kernel 4.2.3 / grsecurity-3.1-4.2.3-201

Code: Select all: [11297.057445] ------------[ cut here ]------------ [11297.057447] WARNING: CPU: 1 PID: 11934 at kernel/sched/core.c:2342 preempt_notifier_register+0x30/0x70() [11297.057447] registering preempt_notifier while notifiers disabled [11297.057448] Modules linked in: nls_utf8(E) udf(E) crc_itu_t(E) pci_stub(E) vboxpci(OE) vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) vhost_net(E) vhost(E) macvtap(E) macvlan(E) act_police(E) cls_basic(E) cls_flow(E) cls_fw(E) cls_u32(E) sch_fq_codel(E) sch_tbf(E) sch_prio(E) sch_htb(E) sch_hfsc(E) sch_ingress(E) sch_sfq(E) xt_CHECKSUM(E) ipt_rpfilter(E) xt_statistic(E) xt_CT(E) nf_log_ipv4(E) nf_log_common(E) xt_LOG(E) xt_connlimit(E) xt_realm(E) xt_addrtype(E) xt_comment(E) xt_recent(E) xt_nat(E) ipt_REJECT(E) nf_reject_ipv4(E) ipt_MASQUERADE(E) nf_nat_masquerade_ipv4(E) ipt_ECN(E) ipt_CLUSTERIP(E) ipt_ah(E) xt_set(E) ip_set(E) nf_nat_tftp(E) nf_nat_snmp_basic(E) nf_conntrack_snmp(E) nf_nat_sip(E) nf_nat_pptp(E) nf_nat_proto_gre(E) nf_nat_irc(E) nf_nat_h323(E) nf_nat_ftp(E) nf_nat_amanda(E) ts_kmp(E) nf_conntrack_amanda(E) nf_conntrack_sane(E) nf_conntrack_tftp(E) nf_conntrack_sip(E) nf_conntrack_proto_udplite(E) nf_conntrack_proto_sctp(E) nf_conntrack_pptp(E) nf_conntrack_proto_gre(E) nf_conntrack_netlink(E) nf_conntrack_netbios_ns(E) nf_conntrack_broadcast(E) nf_conntrack_irc(E) nf_conntrack_h323(E) nf_conntrack_ftp(E) xt_TPROXY(E) nf_defrag_ipv6(E) xt_time(E) xt_TCPMSS(E) xt_tcpmss(E) xt_sctp(E) xt_policy(E) xt_pkttype(E) xt_physdev(E) br_netfilter(E) xt_owner(E) xt_NFQUEUE(E) xt_NFLOG(E) nfnetlink_log(E) xt_multiport(E) xt_mark(E) xt_mac(E) xt_limit(E) xt_length(E) xt_iprange(E) xt_helper(E) xt_hashlimit(E) xt_DSCP(E) xt_dscp(E) xt_dccp(E) xt_conntrack(E) xt_connmark(E) xt_CLASSIFY(E) xt_AUDIT(E) xt_tcpudp(E) xt_state(E) iptable_raw(E) iptable_nat(E) nf_nat_ipv4(E) nf_nat(E) nf_conntrack_ipv4(E) nf_defrag_ipv4(E) nf_conntrack(E) iptable_mangle(E) nfnetlink(E) iptable_filter(E) ip_tables(E) x_tables(E) cmac(E) bnep(E) rfcomm(E) binfmt_misc(E) bridge(E) stp(E) llc(E) eeepc_wmi(E) asus_wmi(E) sparse_keymap(E) snd_hda_codec_hdmi(E) snd_hda_codec_realtek(E) snd_hda_codec_generic(E) snd_hda_intel(E) snd_hda_codec(E) snd_hda_core(E) snd_hwdep(E) snd_pcm(E) btusb(E) btrtl(E) intel_rapl(E) btbcm(E) iosf_mbi(E) x86_pkg_temp_thermal(E) snd_seq_midi(E) intel_powerclamp(E) btintel(E) snd_seq_midi_event(E) dm_multipath(E) kvm_intel(E) snd_rawmidi(E) bluetooth(E) parport_pc(E) scsi_dh(E) snd_seq(E) kvm(E) snd_seq_device(E) ppdev(E) snd_timer(E) usbip_host(E) vhci_hcd(E) serio_raw(E) usbip_core(E) lpc_ich(E) snd(E) evdev(E) soundcore(E) shpchp(E) tpm_infineon(E) acpi_cpufreq(E) hwmon_vid(E) coretemp(E) lp(E) parport(E) drbg(E) ansi_cprng(E) xts(E) sha256_ssse3(E) dm_crypt(E) hid_cherry(E) hid_generic(E) i915(E) crct10dif_pclmul(E) crc32_pclmul(E) i2c_algo_bit(E) ghash_clmulni_intel(E) drm_kms_helper(E) aesni_intel(E) r8169(E) ahci(E) psmouse(E) mii(E) via_velocity(E) crc_ccitt(E) libahci(E) usbhid(E) aes_x86_64(E) lrw(E) gf128mul(E) glue_helper(E) hid(E) ablk_helper(E) drm(E) cryptd(E) wmi(E) video(E) [11297.057503] CPU: 1 PID: 11934 Comm: EMT-0 Tainted: G W OE 4.2.3 #1 [11297.057504] Hardware name: ASUS All Series/Z87M-PLUS, BIOS 1107 11/04/2014 [11297.057504] ffffffff81d3d684 ffffc90005e3bc78 ffffffff8175f759 0000000000000000 [11297.057506] ffffc90005e3bcc8 ffffc90005e3bcb8 ffffffff8106487a ffffc90005e3bd08 [11297.057507] ffff8804cb6a7fa0 ffffc90005ea7000 0000000000000000 ffff88034cac1c00 [11297.057509] Call Trace: [11297.057510] [<ffffffff8175f759>] dump_stack+0x45/0x5d [11297.057512] [<ffffffff8106487a>] warn_slowpath_common+0x8a/0xd0 [11297.057514] [<ffffffff81064906>] warn_slowpath_fmt+0x46/0x50 [11297.057515] [<ffffffff8108aaf0>] preempt_notifier_register+0x30/0x70 [11297.057520] [<ffffffffa086041c>] VBoxHost_RTThreadCtxHooksRegister+0x3c/0x60 [vboxdrv] [11297.057522] [<ffffffff8136e7fa>] ? rb_erase+0xea/0x510 [11297.057526] [<ffffffffa08511c1>] ? supdrvIOCtlFast+0x91/0xc0 [vboxdrv] [11297.057531] [<ffffffffa084d52b>] ? VBoxDrvLinuxIOCtl_4_3_30+0x4b/0x320 [vboxdrv] [11297.057532] [<ffffffff811e31f0>] ? do_vfs_ioctl+0x410/0x700 [11297.057534] [<ffffffff810d097e>] ? cpu_clock_sample+0x5e/0x80 [11297.057535] [<ffffffff810d060a>] ? sample_to_timespec+0x5a/0x70 [11297.057537] [<ffffffff810d0a50>] ? posix_cpu_clock_get_task+0xb0/0xf0 [11297.057538] [<ffffffff81762cf1>] ? __schedule+0x3f1/0xa00 [11297.057540] [<ffffffff811e355f>] ? SyS_ioctl+0x7f/0x90 [11297.057541] [<ffffffff810d0c93>] ? thread_cpu_clock_get+0x13/0x20 [11297.057543] [<ffffffff81766d1f>] ? entry_SYSCALL_64_fastpath+0x16/0x72 [11297.057544] ---[ end trace a5511037e16ea089 ]---

by **quasar366** » Sun Oct 11, 2015 5:27 am

If I'm disable MPROTECT for /lib/systemd/systemd-udevd, it goes a step further:

Code: Select all: ..... [ 2.023278] device-mapper: uevent: version 1.0.3 [ 2.024027] device-mapper: ioctl: 4.33.0-ioctl (2015-8-18) initialised: dm-devel@redhat.com [ 2.025174] ledtrig-cpu: registered to indicate activity on CPUs [ 2.026288] NET: Registered protocol family 10 [ 2.027404] NET: Registered protocol family 17 [ 2.028085] Key type dns_resolver registered [ 2.029049] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 [ 2.030831] Loading compiled-in X.509 certificates [ 2.032219] Loaded X.509 cert 'Build time autogenerated kernel key: 23c569a4ef0ff6ebcc327895aadcdc4bc67745d8' [ 2.033824] registered taskstats version 1 [ 2.045094] Key type trusted registered [ 2.065683] Key type encrypted registered [ 2.066379] AppArmor: AppArmor sha1 policy hashing enabled [ 2.067100] ima: No TPM chip found, activating TPM-bypass! [ 2.067844] evm: HMAC attrs: 0x1 [ 2.068635] Magic number: 3:420:171 [ 2.069195] rtc_cmos rtc_cmos: setting system clock to 2015-10-11 09:09:19 UTC (1444554559) [ 2.070314] BIOS EDD facility v0.16 2004-Jun-25, 0 devices found [ 2.071086] EDD information not available. [ 2.072332] Freeing unused kernel memory: 3108K (ffffffff82400000 - ffffffff82709000) [ 2.084349] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x2b37db7b5d5, max_idle_ns: 440795229237 ns Loading, please wait... [ 2.180749] systemd-udevd[114]: starting version 204 [ 2.194457] systemd-udevd[116]: segfault at ffffffffff5ff000 ip 00000392a9ac4c59 sp 000003a6559083a4 error 5 [ 2.195626] grsec: Segmentation fault occurred at ffffffffff5ff000 in /lib/systemd/systemd-udevd[systemd-udevd:116] uid/euid:0/0 gid/egid:0/0, parent /lib/systemd/systemd-udevd[systemd-udevd:114] uid/euid:0/0 gid/egid:0/0 [ 2.199146] systemd-udevd[117]: segfault at ffffffffff5ff000 ip 00000392a9ac4c59 sp 000003a6559083a4 error 5 [ 2.200247] grsec: Segmentation fault occurred at ffffffffff5ff000 in /lib/systemd/systemd-udevd[systemd-udevd:117] uid/euid:0/0 gid/egid:0/0, parent /lib/systemd/systemd-udevd[systemd-udevd:114] uid/euid:0/0 gid/egid:0/0 [ 2.204365] grsec: bruteforce prevention initiated for the next 30 minutes or until service restarted, stalling each fork 30 seconds. Please investigate the crash report for /lib/systemd/systemd-udevd[systemd-udevd:117] uid/euid:0/0 gid/egid:0/0, parent /lib/systemd/systemd-udevd[systemd-udevd:114] uid/euid:0/0 gid/egid:0/0 [ 2.207793] grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /lib/systemd/systemd-udevd[systemd-udevd:117] uid/euid:0/0 gid/egid:0/0, parent /lib/systemd/systemd-udevd[systemd-udevd:114] uid/euid:0/0 gid/egid:0/0 [ 2.211318] grsec: bruteforce prevention initiated for the next 30 minutes or until service restarted, stalling each fork 30 seconds. Please investigate the crash report for /lib/systemd/systemd-udevd[systemd-udevd:116] uid/euid:0/0 gid/egid:0/0, parent /lib/systemd/systemd-udevd[systemd-udevd:114] uid/euid:0/0 gid/egid:0/0 [ 2.214513] grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /lib/systemd/systemd-udevd[systemd-udevd:116] uid/euid:0/0 gid/egid:0/0, parent /lib/systemd/systemd-udevd[systemd-udevd:114] uid/euid:0/0 gid/egid:0/0 [ 2.220370] pata_acpi: module verification failed: signature and/or required key missing - tainting kernel Begin: Loading essential drivers ... done. Begin: Running /scripts/init-premount ... done. Begin: Mounting root file system ... Begin: Running /scripts/local-top ... done. [ 32.224658] systemd-udevd[114]: segfault at ffffffffff5ff000 ip 00000392a9ac4c59 sp 000003a6559083c4 error 5 [ 32.226862] grsec: Segmentation fault occurred at ffffffffff5ff000 in /lib/systemd/systemd-udevd[systemd-udevd:114] uid/euid:0/0 gid/egid:0/0, parent /init[init:1] uid/euid:0/0 gid/egid:0/0 [ 32.230440] grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /lib/systemd/systemd-udevd[systemd-udevd:114] uid/euid:0/0 gid/egid:0/0, parent /init[init:1] uid/euid:0/0 gid/egid:0/0 Gave up waiting for root device. Common problems: - Boot args (cat /proc/cmdline) - Check rootdelay= (did the system wait long enough?) - Check root= (did the system wait for the right device?) - Missing modules (cat /proc/modules; ls /dev) ALERT! /dev/disk/by-uuid/ecd19c96-6290-49a1-8a04-2f56c40e5534 does not exist. Dropping to a shell! [ 32.305983] hidraw: raw HID events driver (C) Jiri Kosina [ 32.315373] usbcore: registered new interface driver usbhid [ 32.316125] usbhid: USB HID core driver BusyBox v1.21.1 (Ubuntu 1:1.21.0-1ubuntu1) built-in shell (ash) Enter 'help' for a list of built-in commands. (initramfs)

I renamed the subject of the topic, to address the real problem.
Just to clarify, all systems are booting and running well now with latest grsecurity-3.1-4.2.3-201510092347.patch (also with UDEREF enabled), except the virtual guests, when the kernel was build with grsecurity patch. (Sry for my bad english)

by **PaX Team** » Sun Oct 11, 2015 7:52 am

quasar366 wrote:Just to clarify, all systems are booting and running well now with latest grsecurity-3.1-4.2.3-201510092347.patch (also with UDEREF enabled), except the virtual guests, when the kernel was build with grsecurity patch. (Sry for my bad english)

yes i know what the problem is (a fixmap used by the pvclock code isn't mapped with userland access rights) and i tried to address it already (make said fixmap userland accessible) but it seems that the necessary page table changes are not propagated to the per-cpu page tables (another PaX feature needed for KERNEXEC/UDEREF) so i'll have to figure that part out then it'll work, thanks for your patience

.

by **quasar366** » Mon Oct 12, 2015 4:20 am

With latest grsecurity-3.1-4.2.3-201510111839.patch all virtual guests are booting and running fine now!
Thank you for your awesome work!

One note: I don't know, if this is kernel or grsec specific, if I try to start/restart my iptable based firewall, it needs now more then 10 seconds with 100% cpu load on one core, which (re-)started within ~1 second before.

by **PaX Team** » Mon Oct 12, 2015 6:20 am

quasar366 wrote:One note: I don't know, if this is kernel or grsec specific, if I try to start/restart my iptable based firewall, it needs now more then 10 seconds with 100% cpu load on one core, which (re-)started within ~1 second before.

first, you can try it with a vanilla kernel just to see if it's not an upstream issue, then you can try to run perf record on the iptables command and see where the cpu is spinning, that'd give us (or upstream) a clue where to look.

by **quasar366** » Fri Oct 16, 2015 7:15 am

At first, thank you for the pm!

So I have tracked down the problem. I'm using shorewall firewall and if it tries to load the kernel module, there is about > 8 sec. a 100% cpu load on one core.
I have also tested a vanilla kernel only and there is no problem with shorewall. These affects only kvm guests, if compiled with grsec.
I have also tried to disable symlinksifownermatch as mentioned in the pm, but this had no effect. I also made an strace to see the difference, but there is no. It seems that this happens, while shorewall is looking for the right path for kernel modules.

by **PaX Team** » Fri Oct 16, 2015 7:55 am

can you also try 'perf' as suggested above?

by **quasar366** » Fri Oct 16, 2015 12:48 pm

yes of course. I'll send you a download link to get the data

by **PaX Team** » Fri Oct 16, 2015 6:53 pm

thanks but i can't analyze it myself as i don't have your vmlinux and other binaries, so you should run perf report on this and determine who the major CPU consumers are compared to a vanilla kernel.

by **quasar366** » Sat Oct 17, 2015 8:23 am

Sorry, my mistake

I executed following command (which is the default command, if "shorewall check" was performed):

Code: Select all: perf record /usr/bin/perl -w /usr/share/shorewall/compiler.pl --verbose=1 --family=4 --config_path=/etc/shorewall:/usr/share/shorewall --shorewallrc=/usr/share/shorewall/shorewallrc --log_verbosity=-1 --refresh=:none:

# Grsec output:

Code: Select all: 76,42% perl [kernel.vmlinux] [k] native_write_cr0 6,44% sh [kernel.vmlinux] [k] native_write_cr0 5,39% iptables [kernel.vmlinux] [k] native_write_cr0 1,20% perl [kernel.vmlinux] [k] copy_page_range 1,06% perl [kernel.vmlinux] [k] unmap_single_vma 0,34% grep [kernel.vmlinux] [k] native_write_cr0 0,32% perl [kernel.vmlinux] [k] native_set_pte_at 0,28% perl [kernel.vmlinux] [k] native_pax_open_kernel 0,27% ipset [kernel.vmlinux] [k] native_write_cr0 0,26% perl [kernel.vmlinux] [k] native_pax_close_kernel 0,20% perl libperl.so.5.18.2 [.] Perl_yyparse 0,18% perl libperl.so.5.18.2 [.] Perl_hv_common 0,18% perl libperl.so.5.18.2 [.] Perl_yylex 0,16% iptables [kernel.vmlinux] [k] _raw_spin_unlock_irqrestore 0,13% perl [kernel.vmlinux] [k] page_remove_rmap 0,13% tc [kernel.vmlinux] [k] native_write_cr0 0,12% tail [kernel.vmlinux] [k] native_write_cr0 0,11% perl [kernel.vmlinux] [k] __do_page_fault 0,11% sh [kernel.vmlinux] [k] unmap_single_vma 0,10% brctl [kernel.vmlinux] [k] native_write_cr0 0,10% perl [kernel.vmlinux] [k] vm_normal_page 0,10% perl [kernel.vmlinux] [k] __tlb_remove_page 0,09% uname [kernel.vmlinux] [k] native_write_cr0 0,09% perl [kernel.vmlinux] [k] native_read_cr0 0,09% perl libperl.so.5.18.2 [.] Perl_leave_scope 0,08% perl [kernel.vmlinux] [k] free_pages_and_swap_cache 0,08% perl libperl.so.5.18.2 [.] Perl_Slab_Alloc 0,08% iptables [kernel.vmlinux] [k] alloc_vmap_area 0,07% perl [kernel.vmlinux] [k] get_page_from_freelist 0,07% id [kernel.vmlinux] [k] native_write_cr0 0,07% perl [kernel.vmlinux] [k] release_pages 0,07% iptables [kernel.vmlinux] [k] unlock_page 0,07% sh [kernel.vmlinux] [k] unlock_page 0,06% perl [kernel.vmlinux] [k] unlock_page 0,06% getparams [kernel.vmlinux] [k] native_write_cr0 0,06% iptables [kernel.vmlinux] [k] unmap_single_vma 0,06% perl libperl.so.5.18.2 [.] 0x0000000000071f78 0,06% sh [kernel.vmlinux] [k] __do_page_fault 0,06% iptables [kernel.vmlinux] [k] __do_page_fault 0,06% perl libperl.so.5.18.2 [.] 0x0000000000071f9a 0,05% perl [kernel.vmlinux] [k] filemap_map_pages 0,05% ip [kernel.vmlinux] [k] native_write_cr0 0,05% lsmod [kernel.vmlinux] [k] native_write_cr0 0,05% perl libperl.so.5.18.2 [.] Perl_gv_fetchpvn_flags 0,05% perl libperl.so.5.18.2 [.] Perl_rpeep 0,05% perl libperl.so.5.18.2 [.] Perl_sv_gets 0,05% perl libperl.so.5.18.2 [.] Perl_sv_setsv_flags 0,05% perl libperl.so.5.18.2 [.] 0x0000000000071f8d 0,04% perl libperl.so.5.18.2 [.] Perl_pp_entersub 0,04% perl libperl.so.5.18.2 [.] Perl_sv_upgrade 0,04% perl [kernel.vmlinux] [k] _raw_spin_unlock_irqrestore 0,04% perl libperl.so.5.18.2 [.] Perl_pad_findmy_pvn 0,04% sh [kernel.vmlinux] [k] native_pax_open_kernel 0,04% iptables [kernel.vmlinux] [k] native_pax_open_kernel 0,04% perl [kernel.vmlinux] [k] alloc_vmap_area 0,03% perl libperl.so.5.18.2 [.] Perl_pp_and 0,03% perl libperl.so.5.18.2 [.] Perl_scalar 0,03% sh [kernel.vmlinux] [k] get_page_from_freelist 0,03% iptables [kernel.vmlinux] [k] __wake_up_bit 0,03% iptables libip4tc.so.0.1.0 [.] iptc_init 0,03% perl [kernel.vmlinux] [k] clear_page_c_e 0,03% perl libperl.so.5.18.2 [.] Perl_pp_nextstate 0,03% perl libperl.so.5.18.2 [.] Perl_sv_clear 0,03% sh [kernel.vmlinux] [k] _raw_spin_unlock_irqrestore 0,03% iptables [kernel.vmlinux] [k] filemap_map_pages

# Vanilla output

Code: Select all: 6,26% perl [kernel.kallsyms] [k] copy_page_range 3,82% perl libperl.so.5.18.2 [.] Perl_yyparse 3,77% perl [kernel.kallsyms] [k] unmap_single_vma 2,27% perl libperl.so.5.18.2 [.] Perl_hv_common 2,16% iptables [kernel.kallsyms] [k] _raw_spin_unlock_irqrestore 2,16% perl [kernel.kallsyms] [k] page_remove_rmap 1,94% perl libperl.so.5.18.2 [.] Perl_yylex 1,61% perl [kernel.kallsyms] [k] release_pages 1,38% perl libperl.so.5.18.2 [.] 0x0000000000071f78 1,22% perl libperl.so.5.18.2 [.] Perl_Slab_Alloc 1,22% perl libperl.so.5.18.2 [.] 0x0000000000071f9a 1,05% iptables [kernel.kallsyms] [k] __do_page_fault 1,05% perl [kernel.kallsyms] [k] _raw_spin_unlock_irqrestore 1,05% perl libperl.so.5.18.2 [.] Perl_pad_findmy_pvn 1,05% perl libperl.so.5.18.2 [.] Perl_rpeep 0,94% perl libperl.so.5.18.2 [.] Perl_sv_gets 0,83% perl [kernel.kallsyms] [k] __do_page_fault 0,78% perl libperl.so.5.18.2 [.] Perl_gv_fetchpvn_flags 0,78% perl libperl.so.5.18.2 [.] 0x0000000000071f8d 0,72% perl [kernel.kallsyms] [k] vm_normal_page 0,66% perl [kernel.kallsyms] [k] free_pages_and_swap_cache 0,66% perl libperl.so.5.18.2 [.] Perl_pp_entersub 0,61% perl libperl.so.5.18.2 [.] Perl_leave_scope 0,61% perl libperl.so.5.18.2 [.] 0x0000000000071f97 0,61% sh [kernel.kallsyms] [k] _raw_spin_unlock_irqrestore 0,55% perl libperl.so.5.18.2 [.] Perl_sv_clear 0,55% sh [kernel.kallsyms] [k] __do_page_fault 0,50% iptables [kernel.kallsyms] [k] filemap_map_pages 0,50% perl libperl.so.5.18.2 [.] Perl_pp_padsv 0,44% iptables [kernel.kallsyms] [k] copy_page 0,44% perl [kernel.kallsyms] [k] __tlb_remove_page 0,44% perl libc-2.19.so [.] memset 0,44% perl libperl.so.5.18.2 [.] Perl_op_linklist 0,44% sh libc-2.19.so [.] _dl_addr 0,39% perl [kernel.kallsyms] [k] get_page_from_freelist 0,39% perl libperl.so.5.18.2 [.] Perl_pad_alloc 0,39% perl libperl.so.5.18.2 [.] Perl_pp_const 0,39% perl libperl.so.5.18.2 [.] Perl_pp_nextstate 0,39% perl libperl.so.5.18.2 [.] Perl_scalar 0,33% iptables [ip_tables] [k] get_counters 0,33% iptables [kernel.kallsyms] [k] _raw_spin_lock 0,33% iptables [kernel.kallsyms] [k] unlock_page 0,33% perl libperl.so.5.18.2 [.] Perl_newSV 0,33% perl libperl.so.5.18.2 [.] Perl_newSVOP 0,33% perl libperl.so.5.18.2 [.] Perl_pp_rv2av 0,33% perl libperl.so.5.18.2 [.] Perl_sv_setsv_flags 0,33% sh [kernel.kallsyms] [k] filemap_map_pages 0,28% iptables [kernel.kallsyms] [k] get_page_from_freelist 0,28% iptables libip4tc.so.0.1.0 [.] iptc_init 0,28% perl [kernel.kallsyms] [k] native_set_pte_at 0,28% perl libc-2.19.so [.] malloc 0,28% perl libperl.so.5.18.2 [.] Perl_newUNOP 0,28% perl libperl.so.5.18.2 [.] Perl_sv_upgrade 0,22% iptables [kernel.kallsyms] [k] clear_page_c_e 0,22% iptables [kernel.kallsyms] [k] kmem_cache_alloc 0,22% iptables [kernel.kallsyms] [k] strcmp 0,22% iptables libc-2.19.so [.] 0x0000000000080890 0,22% perl [kernel.kallsyms] [k] anon_vma_clone 0,22% perl [kernel.kallsyms] [k] clear_page_c_e 0,22% perl [kernel.kallsyms] [k] copy_process.part.28 0,22% perl libperl.so.5.18.2 [.] Perl_av_extend_guts 0,22% perl libperl.so.5.18.2 [.] Perl_av_fetch 0,22% perl libperl.so.5.18.2 [.] Perl_cv_undef 0,22% perl libperl.so.5.18.2 [.] Perl_hv_common_key_len 0,22% perl libperl.so.5.18.2 [.] Perl_newOP

by **PaX Team** » Sat Oct 17, 2015 8:39 am

can you expand the perl and sh lines until the callers of native_write_cr0 become visible and post that?

by **quasar366** » Sat Oct 17, 2015 11:46 am

# perl

Code: Select all: 76,42% perl [kernel.vmlinux] [k] native_write_cr0 1,20% perl [kernel.vmlinux] [k] copy_page_range 0,32% perl [kernel.vmlinux] [k] native_set_pte_at 0,28% perl [kernel.vmlinux] [k] native_pax_open_kernel 0,26% perl [kernel.vmlinux] [k] native_pax_close_kernel 0,20% perl libperl.so.5.18.2 [.] Perl_yyparse 0,18% perl libperl.so.5.18.2 [.] Perl_hv_common 0,18% perl libperl.so.5.18.2 [.] Perl_yylex 0,11% perl [kernel.vmlinux] [k] __do_page_fault 0,09% perl [kernel.vmlinux] [k] native_read_cr0 0,09% perl libperl.so.5.18.2 [.] Perl_leave_scope 0,08% perl libperl.so.5.18.2 [.] Perl_Slab_Alloc 0,07% perl [kernel.vmlinux] [k] get_page_from_freelist 0,06% perl [kernel.vmlinux] [k] unlock_page 0,06% perl libperl.so.5.18.2 [.] 0x0000000000071f78 0,06% perl libperl.so.5.18.2 [.] 0x0000000000071f9a 0,05% perl [kernel.vmlinux] [k] filemap_map_pages 0,05% perl libperl.so.5.18.2 [.] Perl_gv_fetchpvn_flags 0,05% perl libperl.so.5.18.2 [.] Perl_rpeep 0,05% perl libperl.so.5.18.2 [.] Perl_sv_gets 0,05% perl libperl.so.5.18.2 [.] Perl_sv_setsv_flags 0,05% perl libperl.so.5.18.2 [.] 0x0000000000071f8d 0,04% perl libperl.so.5.18.2 [.] Perl_pp_entersub 0,04% perl libperl.so.5.18.2 [.] Perl_sv_upgrade 0,04% perl [kernel.vmlinux] [k] _raw_spin_unlock_irqrestore 0,04% perl libperl.so.5.18.2 [.] Perl_pad_findmy_pvn 0,04% perl [kernel.vmlinux] [k] alloc_vmap_area 0,03% perl libperl.so.5.18.2 [.] Perl_pp_and 0,03% perl libperl.so.5.18.2 [.] Perl_scalar 0,03% perl [kernel.vmlinux] [k] clear_page_c_e 0,03% perl libperl.so.5.18.2 [.] Perl_pp_nextstate 0,03% perl libperl.so.5.18.2 [.] Perl_sv_clear 0,03% perl [kernel.vmlinux] [k] handle_mm_fault 0,03% perl libperl.so.5.18.2 [.] Perl_pp_gvsv 0,02% perl [kernel.vmlinux] [k] copy_process.part.36 0,02% perl libperl.so.5.18.2 [.] Perl_pp_padsv 0,02% perl libperl.so.5.18.2 [.] 0x0000000000071f97 0,02% perl libc-2.19.so [.] memset 0,02% perl libperl.so.5.18.2 [.] Perl_pp_rv2av 0,02% perl libperl.so.5.18.2 [.] Perl_rv2cv_op_cv 0,02% perl [kernel.vmlinux] [k] _raw_spin_lock 0,02% perl libc-2.19.so [.] free 0,02% perl libperl.so.5.18.2 [.] Perl_av_store 0,02% perl libperl.so.5.18.2 [.] Perl_hv_common_key_len 0,02% perl libperl.so.5.18.2 [.] Perl_pp_const 0,02% perl libperl.so.5.18.2 [.] Perl_pp_or 0,01% perl [kernel.vmlinux] [k] up_read 0,01% perl libc-2.19.so [.] __libc_calloc 0,01% perl libc-2.19.so [.] malloc 0,01% perl libperl.so.5.18.2 [.] Perl_newOP 0,01% perl libperl.so.5.18.2 [.] Perl_op_linklist 0,01% perl libperl.so.5.18.2 [.] Perl_pad_tidy 0,01% perl libperl.so.5.18.2 [.] Perl_pp_leavesub 0,01% perl libperl.so.5.18.2 [.] Perl_push_scope 0,01% perl libperl.so.5.18.2 [.] 0x0000000000071f92 0,01% perl [kernel.vmlinux] [k] anon_vma_clone 0,01% perl [kernel.vmlinux] [k] finish_task_switch 0,01% perl libc-2.19.so [.] 0x0000000000160081 0,01% perl libperl.so.5.18.2 [.] Perl_PerlIO_get_cnt 0,01% perl libperl.so.5.18.2 [.] Perl_alloccopstash 0,01% perl libperl.so.5.18.2 [.] Perl_newATTRSUB_flags 0,01% perl libperl.so.5.18.2 [.] Perl_newBINOP 0,01% perl libperl.so.5.18.2 [.] Perl_newLISTOP 0,01% perl libperl.so.5.18.2 [.] Perl_newSVOP 0,01% perl libperl.so.5.18.2 [.] Perl_pad_add_name_pvn

there is more, but I have problems with copy and paste because of invisible signs! Is there a command to export content in a textfile? I can do this only for the first page of perf report

# sh

Code: Select all: 6,44% sh [kernel.vmlinux] [k] native_write_cr0 0,11% sh [kernel.vmlinux] [k] unmap_single_vma 0,10% pe [kernel.vmlinux] [k] __tlb_remove_page 0,02% pe [kernel.vmlinux] [k] dec_zone_page_state 0,01% sh [kernel.vmlinux] [k] change_protection 0,01% sh [kernel.vmlinux] [k] find_vma 0,01% pelibc-2.19.so [.] _IO _iter_begin 0,00% sh [kernel.vmlinux] [k] __pmd_alloc 0,00% sh [kernel.vmlinux] [k] up_writ

by **PaX Team** » Sat Oct 17, 2015 3:23 pm

thanks, i already have an idea where the overhead is coming from (per-pte pax_open/close_kernel calls that are especially painful during fork), but i'll have to think about how best reduce it, hopefully some existing infrastructure for batched pte updates can be reused here.

grsecurity forums

[solved] kvm segfaults with grsecurity-3.1-4.2.3-2015100

[solved] kvm segfaults with grsecurity-3.1-4.2.3-2015100

Re: segfaults with kernel 4.2.3 and grsecurity-3.1-4.2.3-201

Re: segfaults with kernel 4.2.3 and grsecurity-3.1-4.2.3-201

Re: segfaults with kernel 4.2.3 and grsecurity-3.1-4.2.3-201

Re: segfaults with kernel 4.2.3 and grsecurity-3.1-4.2.3-201

Re: [solved] kvm segfaults with grsecurity-3.1-4.2.3-2015100

Re: [solved] kvm segfaults with grsecurity-3.1-4.2.3-2015100

Re: [solved] kvm segfaults with grsecurity-3.1-4.2.3-2015100

Re: [solved] kvm segfaults with grsecurity-3.1-4.2.3-2015100

Re: [solved] kvm segfaults with grsecurity-3.1-4.2.3-2015100

Re: [solved] kvm segfaults with grsecurity-3.1-4.2.3-2015100

Re: [solved] kvm segfaults with grsecurity-3.1-4.2.3-2015100

Re: [solved] kvm segfaults with grsecurity-3.1-4.2.3-2015100

Re: [solved] kvm segfaults with grsecurity-3.1-4.2.3-2015100

Re: [solved] kvm segfaults with grsecurity-3.1-4.2.3-2015100