Re. 2.6.15-mm1

[David Woodhouse]

On Fri, 2006-01-06 at 00:31 +0100, Etienne Lorrain wrote:
> Jan  5 22:41:37 localhost kernel: Unable to handle kernel NULL pointer dereference at virtual address 00000010
> Jan  5 22:41:37 localhost kernel:  printing eip:
> Jan  5 22:41:37 localhost kernel: c013da3a
> Jan  5 22:41:37 localhost kernel: *pde = 1d165067
> Jan  5 22:41:37 localhost kernel: *pte = 00000000
> Jan  5 22:41:37 localhost kernel: Oops: 0000 [#1]
> Jan  5 22:41:37 localhost kernel: last sysfs file: /class/vc/vcs7/dev
> Jan  5 22:41:37 localhost kernel: Modules linked in: autofs4 pcmcia ipt_REJECT ipt_state ip_conntrack iptable_filter ip_tables vfat fat yenta_socket rsrc_nonstatic pcmcia_core uhci_hcd ehci_hcd i2c_viapro i2c_core snd_via82xx snd_ac97_codec snd_ac97_bus snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd_page_alloc snd_mpu401_uart snd_rawmidi snd_seq_device snd soundcore ext3 jbd
> Jan  5 22:41:37 localhost kernel: CPU:    0
> Jan  5 22:41:37 localhost kernel: EIP:    0060:[<c013da3a>]    Not tainted VLI
> Jan  5 22:41:37 localhost kernel: EFLAGS: 00013256   (2.6.15-mm1)
> Jan  5 22:41:37 localhost kernel: EIP is at __audit_inode+0xba/0x190
> Jan  5 22:41:37 localhost kernel: eax: 00000008   ebx: 00000000   ecx: dcbf02c0   edx: d9343268
> Jan  5 22:41:37 localhost kernel: esi: d922ef44   edi: d9fd3000   ebp: dcbf02c0   esp: d922ee88
> Jan  5 22:41:37 localhost kernel: ds: 007b   es: 007b   ss: 0068 
> Jan  5 22:41:37 localhost kernel: Process X (pid: 2192, threadinfo=d922e000 task=d8abcff0)
> Jan  5 22:41:37 localhost kernel: Stack: <0>00000003 00000000 dcbf02c0 fffffffe d922ef44 d9fd3000 00000003 c017002c
> Jan  5 22:41:37 localhost kernel:        <0>d9fd3000 d9343268 00000101 00000101 00000101 d922ef44 ffffffe9 00000003
> Jan  5 22:41:37 localhost kernel:        <0>c0170096 d922e000 00000002 d922ef44 00000006 c017011f d9fd3000 00000001
> Jan  5 22:41:38 localhost gdm[2183]: gdm_slave_xioerror_handler: Fatal X error - Restarting :0
> Jan  5 22:41:38 localhost kernel: Call Trace:
> Jan  5 22:41:39 localhost kernel:  [<c017002c>] path_lookup+0x1ac/0x1d0
> Jan  5 22:41:40 localhost kernel:  [<c0170096>] __path_lookup_intent_open+0x46/0xa0
> Jan  5 22:41:41 localhost kernel:  [<c017011f>] path_lookup_open+0x2f/0x40
> Jan  5 22:41:41 localhost kernel:  [<c0170b33>] open_namei+0x73/0x530
> Jan  5 22:41:42 localhost kernel:  [<c0144cdd>] __alloc_pages+0x5d/0x390
> Jan  5 22:41:42 localhost kernel:  [<c015e8b8>] filp_open+0x38/0x60
> Jan  5 22:41:42 localhost kernel:  [<c015eaf0>] get_unused_fd+0xb0/0xe0
> Jan  5 22:41:42 localhost kernel:  [<c015ec45>] do_sys_open+0x55/0x100
> Jan  5 22:41:42 localhost kernel:  [<c01031a5>] syscall_call+0x7/0xb
> Jan  5 22:41:43 localhost kernel: Code: 42 38 89 d8 c1 e0 05 8d 04 98 c7 44 10 3c 00 00 00 00 89 d8 8b 54 24 24 8b 4c 24 08 c1 e0 05 8d 04 98 8d 2c 08 8b 82 c4 00 00 00 <8b> 40 08 89 45 48 0f b7 42 28 66 89 45 4c 8b 42 30 89 45 50 8b

Your oops was word-wrapped. I've fixed it up for you, but please make
the effort to ensure that your mail isn't corrupted. If you think your
mail client might be misbehaving, try sending the mail to yourself
first, to make sure it arrives OK.

Please could you tell me the line of code which corresponds to
'__audit_inode+0xba/0x190'? Assuming your kernel was compiled with
debugging information, you can do this by loading your vmlinux into gdb
and issuing the command 'list *__audit_inode+0xba'.

What audit rules had you entered? You shouldn't be seeing this code path
unless you've actually enabled auditing for yourself.

-- 
dwmw2