audit.50 kernel

Steve Grubb sgrubb at redhat.com
Thu May 26 14:40:56 UTC 2005


On Thursday 26 May 2005 10:09, David Woodhouse wrote:
> * Thu May 25 2005 David Woodhouse <dwmw2 at redhat.com> audit.50

This oopsed in about 10 seconds. I started my script from yesterday and let it run for a few seconds and opened kmail. Immediately oopsed.

May 26 10:27:12 localhost kernel: Unable to handle kernel NULL pointer dereference at virtual address 00000008
May 26 10:27:12 localhost kernel:  printing eip:
May 26 10:27:12 localhost kernel: c0141fc8
May 26 10:27:12 localhost kernel: *pde = 1fe22067
May 26 10:27:12 localhost kernel: Oops: 0000 [#1]
May 26 10:27:12 localhost kernel: Modules linked in: parport_pc lp parport autofs4 i2c_dev i2c_core ipt_REJECT ipt_state ip_conntrack iptable_filter ip_tables dm_mod button battery ac md5 ipv6 uhci_hcd snd_emu10k1 snd_rawmidi snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd_seq_device snd_ac97_codec snd_page_alloc snd_util_mem snd_hwdep snd soundcore 3c59x floppy ext3 jbd
May 26 10:27:12 localhost kernel: CPU:    0
May 26 10:27:12 localhost kernel: EIP:    0060:[<c0141fc8>]    Not tainted VLI
May 26 10:27:12 localhost kernel: EFLAGS: 00210246   (2.6.9-5.0.3.EL.audit.50)
May 26 10:27:12 localhost kernel: EIP is at audit_update_watch+0x26c/0x2c5
May 26 10:27:12 localhost kernel: eax: 00000000   ebx: e615d630   ecx: e615d6b4   edx: 00000000
May 26 10:27:12 localhost kernel: esi: e5089ee0   edi: e615d6a8   ebp: 00000000   esp: e18cae80
May 26 10:27:12 localhost kernel: ds: 007b   es: 007b   ss: 0068
May 26 10:27:12 localhost kernel: Process kded (pid: 2779, threadinfo=e18ca000 task=e18a11e0)
May 26 10:27:12 localhost kernel: Stack: 00000000 00000000 00000000 e615d630 e18caf60 e615d6a8 e615d6d8 c017eddb
May 26 10:27:12 localhost kernel:        e615d630 c16928e4 ef07e022 cd0f9ab0 00000007 e18caf10 cd0f9ab0 e18caf60
May 26 10:27:12 localhost kernel:        00000000 e18caf10 c01730c3 eff02aa0 e18caf08 cd0f9ab0 e6dd8284 cd0f9ab0
May 26 10:27:12 localhost kernel: Call Trace:
May 26 10:27:12 localhost kernel:  [<c017eddb>] __d_lookup+0x145/0x1ef
May 26 10:27:12 localhost kernel:  [<c01730c3>] do_lookup+0x1f/0x8f
May 26 10:27:12 localhost kernel:  [<c0173b6c>] link_path_walk+0xa39/0xd98
May 26 10:27:12 localhost kernel:  [<c016ee1d>] cp_new_stat64+0x124/0x139
May 26 10:27:12 localhost kernel:  [<c0174145>] path_lookup+0xfe/0x12c

gdb says:
(gdb) list *0xc0141fc8
0xc0141fc8 is in audit_update_watch (kernel/auditfs.c:542).
537     kernel/auditfs.c: No such file or directory.
        in kernel/auditfs.c




More information about the Linux-audit mailing list