audit.29 kernel

[Linda Knippers]

I had the same problem when I booted it on my ia64 box, as soon
as I started the auditd.

-- ljk

Steve Grubb wrote:
> On Friday 06 May 2005 13:13, David Woodhouse wrote:
> 
>>New kernel, again only on zeniv.uk.linux.org. Includes Chris' three
>>patches and my own addition.
> 
> 
> I installed on my athlon system, rebooted, entered my password and...
> 
> May  6 14:01:44 localhost kernel: ------------[ cut here ]------------
> May  6 14:01:44 localhost kernel: kernel BUG at net/core/skbuff.c:523!
> May  6 14:01:44 localhost kernel: invalid operand: 0000 [#1]
> May  6 14:01:44 localhost kernel: Modules linked in: ipt_REJECT ipt_state 
> ip_conntrack iptable_filter ip_tables dm_mod button battery ac md5 ipv6 
> uhci_hcd snd_emu10k1 snd_rawmidi snd_pcm_oss snd_mixer_oss snd_pcm snd_timer 
> snd_seq_device snd_ac97_codec snd_page_alloc snd_util_mem snd_hwdep snd 
> soundcore 3c59x floppy ext3 jbd
> May  6 14:01:44 localhost kernel: CPU:    0
> May  6 14:01:44 localhost kernel: EIP:    0060:[<c02a2c3e>]    Not tainted VLI 
> May  6 14:01:44 localhost kernel: EFLAGS: 00010202   
> (2.6.9-5.0.3.EL.audit.29)
> May  6 14:01:44 localhost kernel: EIP is at pskb_expand_head+0x2c/0x113 May  6 
> 14:01:44 localhost kernel: eax: 00000001   ebx: ef859e80   ecx: fffffc50   
> edx: 000000d0
> May  6 14:01:44 localhost kernel: esi: 000003b0   edi: effd7b80   ebp: 
> 00000050   esp: ea5a7c80 May  6 14:01:44 localhost kernel: ds: 007b   es: 
> 007b   ss: 0068
> May  6 14:01:44 localhost kernel: Process auditd (pid: 1683, 
> threadinfo=ea5a7000 task=ebff53e0)
> May  6 14:01:44 localhost kernel: Stack: effd7b80 00000000 ef859e80 000003b0 
> effd7b80 ffffffff c02bbd42 000000d0
> May  6 14:01:44 localhost kernel:        00000040 00000693 ef859e80 efdb0c20 
> ebab84e0 ffffffff c0140332 00000040
> May  6 14:01:44 localhost kernel:        efdb0c20 effd3a00 c01403ff effd3a10 
> c013f55b 00000000 c03131b4 00000693
> May  6 14:01:44 localhost kernel: Call Trace:
> May  6 14:01:44 localhost kernel:  [<c02bbd42>] netlink_unicast+0x69/0xea
> May  6 14:01:44 localhost kernel:  [<c0140332>] audit_log_end_fast+0x192/0x21b 
> May  6 14:01:44 localhost kernel:  [<c01403ff>] audit_log+0x24/0x26
> May  6 14:01:44 localhost kernel:  [<c013f55b>] audit_receive_msg+0x124/0x25c
> May  6 14:01:44 localhost kernel:  [<c013f6c5>] audit_receive_skb+0x32/0x70
> May  6 14:01:44 localhost kernel:  [<c013f72b>] audit_receive+0x28/0x7d
> May  6 14:01:44 localhost kernel:  [<c02bc51e>] netlink_data_ready+0x14/0x43
> May  6 14:01:44 localhost kernel:  [<c02bbc8c>] netlink_sendskb+0x52/0x6b
> May  6 14:01:44 localhost kernel:  [<c02bc33a>] netlink_sendmsg+0x267/0x276
> May  6 14:01:44 localhost kernel:  [<c029ea87>] sock_sendmsg+0xdb/0xf7
> May  6 14:01:44 localhost kernel:  [<c01c003e>] avc_has_perm_noaudit+0x8d/0xda
> May  6 14:01:44 localhost kernel:  [<c01430f5>] find_get_page+0x6b/0xdd
> May  6 14:01:44 localhost kernel:  [<c01440e5>] filemap_nopage+0x152/0x2a8
> May  6 14:01:44 localhost kernel:  [<c011d04b>] 
> autoremove_wake_function+0x0/0x2d
> May  6 14:01:44 localhost kernel:  [<c029fd97>] sys_sendto+0xc7/0xe2
> May  6 14:01:44 localhost kernel:  [<c01193e9>] do_page_fault+0x1ac/0x4dc
> May  6 14:01:44 localhost kernel:  [<c01894e7>] 
> simple_read_from_buffer+0xa6/0xcf
> May  6 14:01:44 localhost kernel:  [<c019ee0a>] proc_loginuid_read+0x3f/0x46
> May  6 14:01:44 localhost kernel:  [<c02a0590>] sys_socketcall+0x14c/0x1dd
> May  6 14:01:44 localhost kernel:  [<c0303257>] syscall_call+0x7/0xb
> May  6 14:01:44 localhost kernel: Code: 57 56 53 89 c3 57 57 89 54 24 04 8b 80 
> ac 00 00 00 8b 54 24 1c 2b 83 a0 00 00 00 03 44 24 04 8d 2c 08 8b 83 9c 00 00 
> 00 48 74 08 <0f> 0b 0b 02 97 37 33 c0 83 c5 7f 83 e5 80 8d 85 a0 00 00 00 e8
> 
> --
> Linux-audit mailing list
> Linux-audit at redhat.com
> http://www.redhat.com/mailman/listinfo/linux-audit
>