From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael C Thompson Subject: Oops from audit Date: Tue, 01 Aug 2006 13:36:36 -0500 Message-ID: <44CF9F34.5000009@us.ibm.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Return-path: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Linux Audit , Amy Griffis , Steve Grubb , aviro@redhat.com List-Id: linux-audit@redhat.com The follow oops is generated on the lspp.45 kernel with audit 1.2.5-5. The trigger for this oops is: # auditctl -a exit,always -S pread64 -F 'inode<1' Oops: 0000 [#1] SMP CPU: 0 EIP is at audit_receive_filter+0x30d/0x949 eax: 00000000 ebx: 00000001 ecx: 00000008 edx: c046c62d esi: 00000000 edi: 000003eb ebp: cfce1cbc esp: cfce1c68 ds: 007b es: 007b ss: 0068 Process auditctl (pid: 20197, ti=cfce1000 task=cd864aa0 task.ti=cfce1000) Stack: 00000001 00004ee5 d4322ed4 00000000 cfce1cd0 c04c443a 40000000 cfce1c8c cfce1c8c 00000003 00000000 0000001e 00000000 00000000 00000000 00000000 00000000 00000000 d8e2e0ac 0000031c 000503eb cfce1d4c c044af16 00000001 Call Trace: [] audit_receive+0x658/0x781 [] netlink_data_ready+0x12/0x50 [] netlink_sendskb+0x1f/0x37 [] netlink_unicast+0x1a1/0x1bb [] netlink_sendmsg+0x259/0x266 [] sock_sendmsg+0xe8/0x103 [] sys_sendto+0xbe/0xdc [] sys_socketcall+0xfb/0x186 [] syscall_call+0x7/0xb Code: e9 be 05 00 00 81 ff eb 03 00 00 75 07 e8 14 ed ff ff eb 05 e8 54 f6 ff ff 89 45 b8 8b 75 b8 81 fe 00 f0 ff ff 0f 87 32 06 00 00 <8b> 8e 30 01 00 00 8b 46 18 8b b6 34 01 00 00 85 c9 89 75 c8 75 Message fEIP: [] audit_receive_filter+0x30d/0x949 SS:ESP 0068:cfce1c68