System with Veritas sisips module crashed in audit_getname function.
Issue
- System crashed with following panic message:
Kernel BUG at kernel/auditsc.c:1757
invalid opcode: 0000 [1] SMP
last sysfs file: /devices/system/node/node0/meminfo
CPU 2
Modules linked in: sisfim(PU) nfsd exportfs nfs_acl auth_rpcgss autofs4 hidp rfcomm l2cap bluetooth lockd sunrpc dmpaa(PU) vxspec(PFU) vxio(PFU) vxdmp(PU) be2iscsi ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp bnx2i cnic ipv6 xfrm_nalgo crypto_api uio cxgb3i cxgb3 8021q libiscsi_tcp libiscsi2 scsi_transport_iscsi2 scsi_transport_iscsi vxportal(PFU) fdd(PFU) vxfs(PU) sisips(PU) dm_multipath scsi_dh video backlight sbs power_meter hwmon i2c_ec i2c_core dell_wmi wmi button battery asus_acpi acpi_memhotplug ac parport_pc lp parport ide_cd tpm_tis cdrom tpm tpm_bios hpilo serio_raw st shpchp sg pcspkr i5000_edac edac_mc bnx2 dm_raid45 dm_message dm_region_hash dm_mem_cache dm_snapshot dm_zero dm_mirror dm_log dm_mod lpfc scsi_transport_fc cciss aacraid ata_piix libata mptspi scsi_transport_spi mptsas mptscsih scsi_transport_sas sd_mod scsi_mod mptbase ext3 jbd uhci_hcd ohci_hcd ehci_hcd
Pid: 15420, comm: bash Tainted: PF 2.6.18-238.12.1.el5 #1
RIP: 0010:[<ffffffff800b9a9e>] [<ffffffff800b9a9e>] __audit_getname+0x39/0x135
RSP: 0018:ffff8100771c3d58 EFLAGS: 00010202
RAX: 0000000000000014 RBX: ffff810080720000 RCX: 00000000000000d0
RDX: 0000000000000011 RSI: 0000000000000246 RDI: ffff81011619a000
RBP: 00000000ffffffdc R08: ffff81011e400fff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000007b19b02
R13: ffff81011619a000 R14: 00000000ffffff9c R15: ffff81008aacf000
FS: 00002b7865c29f50(0000) GS:ffff81012ff26e40(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000007b1bae0 CR3: 0000000075ef7000 CR4: 00000000000006e0
Process init.tecad_logf (pid: 15420, threadinfo ffff8100771c2000, task ffff81008b50c100)
Stack: ffff81011619a000 ffffffff800129c2 0000000000080000 ffff8100b1e41000
ffff810117481200 ffff8100771c3dc8 0000000000000803 ffffffff80023ad6
ffff8100b1e41000 ffff810117481200 0000000007b04201 0000000000000000
Call Trace:
[<ffffffff800129c2>] getname+0x1ad/0x1c2
[<ffffffff80023ad6>] __user_walk_fd+0x19/0x4c
[<ffffffff8004776b>] sys_chdir+0x16/0x62
[<ffffffff884cf690>] :sisips:ReadSymLink+0x0/0x160
[<ffffffff884f13a2>] :sisips:_Z12UnixRealPathPKcS0_PcPFiS0_S1_Eb+0x2b2/0x390
[<ffffffff884ec670>] :sisips:_ZN19UnicodeStringBufferD1Ev+0x20/0x40
[<ffffffff884d9539>] :sisips:hook_chdir+0x1c9/0x2f0
[<ffffffff800b963f>] audit_syscall_entry+0x1a4/0x1cf
[<ffffffff8005d28d>] tracesys+0xd5/0xe0
Environment
- Red Hat Enterprise Linux 5
- Symantec sisips module
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.