audit.66 kernel

[Steve Grubb]

On Wednesday 22 June 2005 16:50, David Woodhouse wrote:
> Can you reproduce on audit.65?

Yep...here it is:

Jun 22 18:08:58 localhost kernel: Unable to handle kernel NULL pointer dereference at virtual address 00000000
Jun 22 18:08:58 localhost kernel:  printing eip:
Jun 22 18:08:58 localhost kernel: c01430ad
Jun 22 18:08:58 localhost kernel: *pde = 00000000
Jun 22 18:08:58 localhost kernel: Oops: 0000 [#1]
Jun 22 18:08:58 localhost kernel: Modules linked in: tun parport_pc lp parport autofs4 i2c_dev i2c_core ipt_REJECT ipt_state ip_conntrack iptable_filter ip_tables dm_mod button battery ac md5 ipv6 uhci_hcd snd_emu10k1 snd_rawmidi snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd_seq_device snd_ac97_codec snd_page_alloc snd_util_mem snd_hwdep snd soundcore 3c59x floppy ext3 jbd
Jun 22 18:08:58 localhost kernel: CPU:    0
Jun 22 18:08:58 localhost kernel: EIP:    0060:[<c01430ad>]    Not tainted VLI
Jun 22 18:08:58 localhost kernel: EFLAGS: 00210246   (2.6.9-11.EL.audit.65)
Jun 22 18:08:58 localhost kernel: EIP is at auditfs_attach_wdata+0x2c6/0x401
Jun 22 18:08:58 localhost kernel: eax: 0000000f   ebx: d9f6be08   ecx: 00200246   edx: e1ec4154
Jun 22 18:08:58 localhost kernel: esi: 00000000   edi: de61fbcc   ebp: e1ec4154   esp: da9e8e84
Jun 22 18:08:58 localhost kernel: ds: 007b   es: 007b   ss: 0068
Jun 22 18:08:58 localhost kernel: Process auditctl (pid: 19613, threadinfo=da9e8000 task=ddaecd50)
Jun 22 18:08:58 localhost kernel: Stack: e1f1438c 00000001 e01d22e8 ee893408 e01d22dc ee893408 00000001 da9e8f58
Jun 22 18:08:58 localhost kernel:        c0145313 fffffff5 ee893408 00000001 c0175b9c fffffff5 ee893408 0024a603
Jun 22 18:08:58 localhost kernel:        da9e8f58 c017635f 00a9b066 dfdab008 e0a59370 c0156eae 00000101 00000000
Jun 22 18:08:58 localhost kernel: Call Trace:
Jun 22 18:08:58 localhost kernel:  [<c0145313>] audit_notify_watch+0x47/0x55
Jun 22 18:08:58 localhost kernel:  [<c0175b9c>] permission+0xf/0x4f
Jun 22 18:08:58 localhost kernel:  [<c017635f>] link_path_walk+0x12c/0xd98
Jun 22 18:08:58 localhost kernel:  [<c0156eae>] handle_mm_fault+0xd5/0x1fd
Jun 22 18:08:58 localhost kernel:  [<c017724b>] path_lookup+0x104/0x135
Jun 22 18:08:58 localhost kernel:  [<c017793f>] open_namei+0x99/0x57e
Jun 22 18:08:58 localhost kernel:  [<c01660c7>] filp_open+0x23/0x3c
Jun 22 18:08:58 localhost kernel:  [<c03060a0>] __cond_resched+0x14/0x3b
Jun 22 18:08:58 localhost kernel:  [<c01de50a>] direct_strncpy_from_user+0x3e/0x5d
Jun 22 18:08:58 localhost kernel:  [<c016659e>] sys_open+0x31/0x7d
Jun 22 18:08:58 localhost kernel:  [<c03078fb>] syscall_call+0x7/0xb
Jun 22 18:08:58 localhost kernel: Code: e9 38 fe ff ff 89 e8 e8 7b 0b 00 00 8b 54 24 08 8b 32 85 f6 74 0e 8b 06 0f 18 00 90 8b 5f 08 8d 6e ec eb d8 89 e8 e8 5c 0b 00 00 <8b> 36 85 f6 0f 85 ff fd ff ff 81 3d c8 69 35 c0 3c 4b 24 1d 74
Jun 22 18:08:58 localhost kernel:  <0>Fatal exception: panic in 5 seconds