From: Michael C Thompson <thompsmc@us.ibm.com>
To: Linux Audit <linux-audit@redhat.com>,
Amy Griffis <amy.griffis@hp.com>, Steve Grubb <sgrubb@redhat.com>,
aviro@redhat.com
Subject: Oops from audit
Date: Tue, 01 Aug 2006 13:36:36 -0500 [thread overview]
Message-ID: <44CF9F34.5000009@us.ibm.com> (raw)
The follow oops is generated on the lspp.45 kernel with audit 1.2.5-5.
The trigger for this oops is:
# auditctl -a exit,always -S pread64 -F 'inode<1'
Oops: 0000 [#1]
SMP
CPU: 0
EIP is at audit_receive_filter+0x30d/0x949
eax: 00000000 ebx: 00000001 ecx: 00000008 edx: c046c62d
esi: 00000000 edi: 000003eb ebp: cfce1cbc esp: cfce1c68
ds: 007b es: 007b ss: 0068
Process auditctl (pid: 20197, ti=cfce1000 task=cd864aa0 task.ti=cfce1000)
Stack: 00000001 00004ee5 d4322ed4 00000000 cfce1cd0 c04c443a 40000000
cfce1c8c
cfce1c8c 00000003 00000000 0000001e 00000000 00000000 00000000
00000000
00000000 00000000 d8e2e0ac 0000031c 000503eb cfce1d4c c044af16
00000001
Call Trace:
[<c044af16>] audit_receive+0x658/0x781
[<c05c2254>] netlink_data_ready+0x12/0x50
[<c05c1200>] netlink_sendskb+0x1f/0x37
[<c05c1bb1>] netlink_unicast+0x1a1/0x1bb
[<c05c2235>] netlink_sendmsg+0x259/0x266
[<c05a575a>] sock_sendmsg+0xe8/0x103
[<c05a694b>] sys_sendto+0xbe/0xdc
[<c05a70cb>] sys_socketcall+0xfb/0x186
[<c0403faf>] syscall_call+0x7/0xb
Code: e9 be 05 00 00 81 ff eb 03 00 00 75 07 e8 14 ed ff ff eb 05 e8 54
f6 ff ff 89 45 b8 8b 75 b8 81 fe 00 f0 ff ff 0f 87 32 06 00 00 <8b> 8e
30 01 00 00 8b 46 18 8b b6 34 01 00 00 85 c9 89 75 c8 75
Message fEIP: [<c044cbdc>] audit_receive_filter+0x30d/0x949 SS:ESP
0068:cfce1c68
next reply other threads:[~2006-08-01 18:36 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-08-01 18:36 Michael C Thompson [this message]
2006-08-01 19:05 ` Oops from audit Timothy R. Chavez
2006-08-01 19:08 ` Timothy R. Chavez
2006-08-01 21:52 ` [PATCH] fix audit oops with invalid operator Amy Griffis
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=44CF9F34.5000009@us.ibm.com \
--to=thompsmc@us.ibm.com \
--cc=amy.griffis@hp.com \
--cc=aviro@redhat.com \
--cc=linux-audit@redhat.com \
--cc=sgrubb@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox