Oops while checking file system auditing

Steve Grubb sgrubb at redhat.com
Tue May 24 19:19:22 UTC 2005


On Tuesday 24 May 2005 14:06, Timothy R. Chavez wrote:
> Can you also provide architecture, UP/SMP, etc

I just upgraded to the .48 kernel and did this:

-a entry,always -S mkdir
-a entry,always -S kill
-w /etc/passwd -k fk_passwd -p rwea
-w /var/run/dbus/system_bus_socket -k dbus-test -p rwea

This kills the machine dead...well except for the blinking numlock & caps lock 
lights. 

May 24 15:12:07 localhost kernel: kernel BUG at mm/slab.c:2787!
May 24 15:12:07 localhost kernel: invalid operand: 0000 [#1]
May 24 15:12:07 localhost kernel: Modules linked in: parport_pc lp parport 
autofs4 i2c_dev i2c_core ipt_REJECT ipt_state ip_conntrack iptable_filter 
ip_tables dm_mod button battery ac md5 ipv6 uhci_hcd snd_emu10k1 snd_rawmidi 
snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd_seq_device snd_ac97_codec 
snd_page_alloc snd_util_mem snd_hwdep snd soundcore 3c59x floppy ext3 jbd
May 24 15:12:07 localhost kernel: CPU:    0
May 24 15:12:07 localhost kernel: EIP:    0060:[<c014c5f3>]    Not tainted VLI
May 24 15:12:07 localhost kernel: EFLAGS: 00010086   (2.6.9-5.0.3.EL.audit.48)
May 24 15:12:07 localhost kernel: EIP is at cache_reap+0x111/0x273
May 24 15:12:07 localhost kernel: eax: effefbbc   ebx: effefba0   ecx: 
effefb00   edx: 00000034
May 24 15:12:07 localhost kernel: esi: effefc28   edi: 00000001   ebp: 
c03feae0   esp: eff18f5c
May 24 15:12:07 localhost kernel: ds: 007b   es: 007b   ss: 0068
May 24 15:12:07 localhost kernel: Process events/0 (pid: 3, 
threadinfo=eff18000 task=efe20bd0)
May 24 15:12:07 localhost kernel: Stack: c03feb20 c03feb20 00000283 00000000 
c16ff160 c01321a4 c014c4e2 ffffffff
May 24 15:12:07 localhost kernel:        ffffffff 00000001 00000000 c011b9f2 
00010000 00000000 efe20bd0 eff18fcc
May 24 15:12:07 localhost kernel:        c03015c9 00000000 efe20bd0 c011b9f2 
00100100 00200200 00000004 efe20bd0
May 24 15:12:07 localhost kernel: Call Trace:
May 24 15:12:07 localhost kernel:  [<c01321a4>] worker_thread+0x1eb/0x2f0
May 24 15:12:07 localhost kernel:  [<c014c4e2>] cache_reap+0x0/0x273
May 24 15:12:07 localhost kernel:  [<c011b9f2>] default_wake_function+0x0/0xc
May 24 15:12:07 localhost kernel:  [<c03015c9>] schedule+0x431/0x544
May 24 15:12:07 localhost kernel:  [<c011b9f2>] default_wake_function+0x0/0xc
May 24 15:12:07 localhost kernel:  [<c0131fb9>] worker_thread+0x0/0x2f0
May 24 15:12:07 localhost kernel:  [<c0136f81>] kthread+0x69/0x91
May 24 15:12:07 localhost kernel:  [<c0136f18>] kthread+0x0/0x91
May 24 15:12:07 localhost kernel:  [<c01041d9>] kernel_thread_helper+0x5/0xb
May 24 15:12:07 localhost kernel: Code: e9 05 01 00 00 6b 4b 3c 05 8b 53 40 01 
ca 4a 89 d0 31 d2 f7 f1 89 c7 8b 4b 1c 8d 43 1c 39 c1 0f 84 e5 00 00 00 83 79 
10 00 74 08 <0f> 0b e3 0a 15 43 31 c0 8b 01 8b 51 04 89 50 04 89 02 c7 41 04




More information about the Linux-audit mailing list