Kernel panic inside __audit_getname() function.

Solution Unverified - Updated -

Issue

  • Kernel panic at __audit_getname+0x39 with following call traces.
Kernel BUG at kernel/auditsc.c:1757
invalid opcode: 0000 [1] SMP 
last sysfs file: /class/scsi_host/host4/proc_name
CPU 8 
Modules linked in: twnotify(U) sisfim(PU) autofs4 lockd sunrpc be2iscsi ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp bnx2i cnic ipv6 xfrm_nalgo crypto_api uio cxgb3i libcxgbi cxgb3 8021q libiscsi_tcp libiscsi2 scsi_transport_iscsi2 scsi_transport_iscsi sisips(PU) dm_multipath scsi_dh video backlight sbs power_meter i2c_ec dell_wmi wmi button battery asus_acpi acpi_memhotplug ac parport_pc lp parport tpm_tis tpm tg3 i2c_piix4 tpm_bios hpilo bnx2 k10temp i2c_core serio_raw amd64_edac_mod edac_mc pcspkr hwmon sg dm_raid45 dm_message dm_region_hash dm_mem_cache dm_snapshot dm_zero dm_mirror dm_log dm_mod lpfc scsi_transport_fc shpchp cciss sd_mod scsi_mod ext3 jbd uhci_hcd ohci_hcd ehci_hcd
Pid: 22121, comm: logrotate Tainted: P     ---- 2.6.18-308.24.1.el5 #1
RIP: 0010:[<ffffffff800babe9>]  [<ffffffff800babe9>] __audit_getname+0x39/0x139
RSP: 0018:ffff8102042b7dc8  EFLAGS: 00010202
RAX: 0000000000000014 RBX: ffff81020ba7a800 RCX: 00000000000000d0
RDX: 0000000000000012 RSI: 0000000000000246 RDI: ffff81020c9a0000
RBP: 00000000ffffffdc R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffdaccd300
R13: ffff81020c9a0000 R14: 00000000ffffff9c R15: 0000000000000003
FS:  00002ba999208b40(0000) GS:ffff810107b77ac0(0000) knlGS:00000000f7c9a6c0
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 0000003673a41d80 CR3: 0000000414786000 CR4: 00000000000006e0
Process logrotate (pid: 22121, threadinfo ffff8102042b6000, task ffff8102046487e0)
Stack:  ffff81020c9a0000 ffffffff80012a17 ffff8102042b7e48 ffffffff886fc866
 00007fffdaccd300 ffff8102042b7e48 0000000000000000 ffffffff80023aac
 ffffffff886fc866 00007fffdaccd300 ffff8102282aa940 00000000ffffff9c
Call Trace:
 [<ffffffff80012a17>] getname+0x1ad/0x1c2
 [<ffffffff80023aac>] __user_walk_fd+0x19/0x4c
 [<ffffffff886f7d40>] :twnotify:twnotify_getfilename2+0x39/0x423
 [<ffffffff886f86fe>] :twnotify:twnotify_prep_event_2filesx+0x59/0xe6
 [<ffffffff886fab20>] :twnotify:twnotify_sys_rename+0x70/0x94
 [<ffffffff8005d28d>] tracesys+0xd5/0xe0


Code: 0f 0b 68 72 fc 2b 80 c2 dd 06 eb fe 48 98 48 6b c0 30 48 89 
RIP  [<ffffffff800babe9>] __audit_getname+0x39/0x139
 RSP <ffff8102042b7dc8>

Environment

  • Red Hat Enterprise Linux 5
  • kernel-2.6.18-308.24.1.el5
  • twnotify unsigned(U) kernel module.

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.