suspicious general protection fault
Posted: Wed Nov 04, 2015 3:46 amHello all,
running linux-4.2.5 with grsecurity-3.1-4.2.5-201511021814.patch on an AMD Geode SC1100 I got following output:
[..]
CPU: NSC Unknown (fam: 05, model: 09, stepping: 01)
Performance Events: no PMU driver, software events only.
PAX: suspicious general protection fault: 0000 [#1]
CPU: 0 PID: 8 Comm: kdevtmpfs Not tainted 4.2.5-grsec-20151103 #1
task: c7847a00 ti: c7847c1c task.ti: c7847c1c
EIP: 0060:[<0008f243>] EFLAGS: 00010246 CPU: 0
EAX: 00000001 EBX: c7806b80 ECX: c1c16000 EDX: 00000000
ESI: 00000000 EDI: 8e61c0c1 EBP: c7849eb8 ESP: c7849e54
DS: 0068 ES: 0068 FS: 0000 GS: 0068 SS: 0068
CR0: 8005003b CR2: ffda3000 CR3: 01803000 CR4: 00000000
Stack:
c7806e40 dc6e2b08 00091524 ffffffff 000791b5 c7806148 c7806150 c7812b60
000000d0 c7806140 c1c132b8 c1c132b8 000000d0 c78038e0 00000202 c784b210
00020200 c7847a00 c7849eb8 00036619 c784a260 c1c132b8 c1c132b8 c7849ee0
Call Trace:
[<00091524>] ? copy_mnt_ns+0x48/0x30e
[<000791b5>] ? ____cache_alloc+0x12d/0x3a4
[<00020200>] ? no_context+0x13f/0x2f4
[<00036619>] ? create_new_namespaces+0x43/0x103
[<00020200>] ? no_context+0x13f/0x2f4
[<000367c5>] ? unshare_nsproxy_namespaces+0x55/0x6c
[<00020200>] ? no_context+0x13f/0x2f4
[<00026228>] ? SyS_unshare+0xeb/0x199
[<0012e303>] ? devtmpfsd+0x24/0x262
[<00020000>] ? is_prefetch.isra.31+0xe2/0x155
[<00353537>] ? iret_exc+0x119827/0x5c62f0
[<002375bc>] ? __schedule+0x32c/0x43b
[<0012e2df>] ? handle_remove+0x20a/0x20a
[<0012e2df>] ? handle_remove+0x20a/0x20a
[<000360bf>] ? kthread+0x7f/0x84
[<00238eea>] ? ret_from_kernel_thread+0x1a/0x30
[<00036040>] ? init_completion+0x18/0x18
Code: 40 10 e8 7c c7 01 00 85 c0 89 c6 74 0b 89 d8 e8 87 a6 fe ff 89 f0 eb 61 c7 43 0c a0 3c 81 c1 b8 01 00 00 00 31 d2 b9 00 60 c1 c1 <e8> 08 c5 05 3f b9 78 95 44 c2 89 43 20 8d 43 18 89 53 24 ba 7b
EIP: [<0008f243>] alloc_mnt_ns.isra.31+0x4a/0x9b SS:ESP 0068:c7849e54
---[ end trace 90701ce1e9b9c5c5 ]---
Kernel panic - not syncing: grsec: halting the system due to suspicious kernel crash caused by root
---[ end Kernel panic - not syncing: grsec: halting the system due to suspicious kernel crash caused by root
random: nonblocking pool is initialized
Any hints what is going wrong?
Thanks,
Thorsten
running linux-4.2.5 with grsecurity-3.1-4.2.5-201511021814.patch on an AMD Geode SC1100 I got following output:
[..]
CPU: NSC Unknown (fam: 05, model: 09, stepping: 01)
Performance Events: no PMU driver, software events only.
PAX: suspicious general protection fault: 0000 [#1]
CPU: 0 PID: 8 Comm: kdevtmpfs Not tainted 4.2.5-grsec-20151103 #1
task: c7847a00 ti: c7847c1c task.ti: c7847c1c
EIP: 0060:[<0008f243>] EFLAGS: 00010246 CPU: 0
EAX: 00000001 EBX: c7806b80 ECX: c1c16000 EDX: 00000000
ESI: 00000000 EDI: 8e61c0c1 EBP: c7849eb8 ESP: c7849e54
DS: 0068 ES: 0068 FS: 0000 GS: 0068 SS: 0068
CR0: 8005003b CR2: ffda3000 CR3: 01803000 CR4: 00000000
Stack:
c7806e40 dc6e2b08 00091524 ffffffff 000791b5 c7806148 c7806150 c7812b60
000000d0 c7806140 c1c132b8 c1c132b8 000000d0 c78038e0 00000202 c784b210
00020200 c7847a00 c7849eb8 00036619 c784a260 c1c132b8 c1c132b8 c7849ee0
Call Trace:
[<00091524>] ? copy_mnt_ns+0x48/0x30e
[<000791b5>] ? ____cache_alloc+0x12d/0x3a4
[<00020200>] ? no_context+0x13f/0x2f4
[<00036619>] ? create_new_namespaces+0x43/0x103
[<00020200>] ? no_context+0x13f/0x2f4
[<000367c5>] ? unshare_nsproxy_namespaces+0x55/0x6c
[<00020200>] ? no_context+0x13f/0x2f4
[<00026228>] ? SyS_unshare+0xeb/0x199
[<0012e303>] ? devtmpfsd+0x24/0x262
[<00020000>] ? is_prefetch.isra.31+0xe2/0x155
[<00353537>] ? iret_exc+0x119827/0x5c62f0
[<002375bc>] ? __schedule+0x32c/0x43b
[<0012e2df>] ? handle_remove+0x20a/0x20a
[<0012e2df>] ? handle_remove+0x20a/0x20a
[<000360bf>] ? kthread+0x7f/0x84
[<00238eea>] ? ret_from_kernel_thread+0x1a/0x30
[<00036040>] ? init_completion+0x18/0x18
Code: 40 10 e8 7c c7 01 00 85 c0 89 c6 74 0b 89 d8 e8 87 a6 fe ff 89 f0 eb 61 c7 43 0c a0 3c 81 c1 b8 01 00 00 00 31 d2 b9 00 60 c1 c1 <e8> 08 c5 05 3f b9 78 95 44 c2 89 43 20 8d 43 18 89 53 24 ba 7b
EIP: [<0008f243>] alloc_mnt_ns.isra.31+0x4a/0x9b SS:ESP 0068:c7849e54
---[ end trace 90701ce1e9b9c5c5 ]---
Kernel panic - not syncing: grsec: halting the system due to suspicious kernel crash caused by root
---[ end Kernel panic - not syncing: grsec: halting the system due to suspicious kernel crash caused by root
random: nonblocking pool is initialized
Any hints what is going wrong?
Thanks,
Thorsten