Kernel panic inside __audit_getname() function.
Issue
- Kernel panic at __audit_getname+0x39 with following call traces.
Kernel BUG at kernel/auditsc.c:1757
invalid opcode: 0000 [1] SMP
last sysfs file: /class/scsi_host/host4/proc_name
CPU 8
Modules linked in: twnotify(U) sisfim(PU) autofs4 lockd sunrpc be2iscsi ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp bnx2i cnic ipv6 xfrm_nalgo crypto_api uio cxgb3i libcxgbi cxgb3 8021q libiscsi_tcp libiscsi2 scsi_transport_iscsi2 scsi_transport_iscsi sisips(PU) dm_multipath scsi_dh video backlight sbs power_meter i2c_ec dell_wmi wmi button battery asus_acpi acpi_memhotplug ac parport_pc lp parport tpm_tis tpm tg3 i2c_piix4 tpm_bios hpilo bnx2 k10temp i2c_core serio_raw amd64_edac_mod edac_mc pcspkr hwmon sg dm_raid45 dm_message dm_region_hash dm_mem_cache dm_snapshot dm_zero dm_mirror dm_log dm_mod lpfc scsi_transport_fc shpchp cciss sd_mod scsi_mod ext3 jbd uhci_hcd ohci_hcd ehci_hcd
Pid: 22121, comm: logrotate Tainted: P ---- 2.6.18-308.24.1.el5 #1
RIP: 0010:[<ffffffff800babe9>] [<ffffffff800babe9>] __audit_getname+0x39/0x139
RSP: 0018:ffff8102042b7dc8 EFLAGS: 00010202
RAX: 0000000000000014 RBX: ffff81020ba7a800 RCX: 00000000000000d0
RDX: 0000000000000012 RSI: 0000000000000246 RDI: ffff81020c9a0000
RBP: 00000000ffffffdc R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffdaccd300
R13: ffff81020c9a0000 R14: 00000000ffffff9c R15: 0000000000000003
FS: 00002ba999208b40(0000) GS:ffff810107b77ac0(0000) knlGS:00000000f7c9a6c0
CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 0000003673a41d80 CR3: 0000000414786000 CR4: 00000000000006e0
Process logrotate (pid: 22121, threadinfo ffff8102042b6000, task ffff8102046487e0)
Stack: ffff81020c9a0000 ffffffff80012a17 ffff8102042b7e48 ffffffff886fc866
00007fffdaccd300 ffff8102042b7e48 0000000000000000 ffffffff80023aac
ffffffff886fc866 00007fffdaccd300 ffff8102282aa940 00000000ffffff9c
Call Trace:
[<ffffffff80012a17>] getname+0x1ad/0x1c2
[<ffffffff80023aac>] __user_walk_fd+0x19/0x4c
[<ffffffff886f7d40>] :twnotify:twnotify_getfilename2+0x39/0x423
[<ffffffff886f86fe>] :twnotify:twnotify_prep_event_2filesx+0x59/0xe6
[<ffffffff886fab20>] :twnotify:twnotify_sys_rename+0x70/0x94
[<ffffffff8005d28d>] tracesys+0xd5/0xe0
Code: 0f 0b 68 72 fc 2b 80 c2 dd 06 eb fe 48 98 48 6b c0 30 48 89
RIP [<ffffffff800babe9>] __audit_getname+0x39/0x139
RSP <ffff8102042b7dc8>
Environment
- Red Hat Enterprise Linux 5
- kernel-2.6.18-308.24.1.el5
- twnotify unsigned(U) kernel module.
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.