linux-kernel - Oops in fsnotify_mark (2.6.37, 3.0.6)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4ED3C87D.5010400@avangate.com>
Date:	Mon, 28 Nov 2011 19:44:29 +0200
From:	Valentin Avram <valentin.avram@...ngate.com>
To:	<linux-kernel@...r.kernel.org>
Subject: Oops in fsnotify_mark (2.6.37, 3.0.6)

Hello.

Some of our servers experience an oops on auditd service restart.
All affected servers are Dell R610, running Gentoo Linux with kernels 
2.6.37 and 3.0.6 (both gentoo patched).
After repeated auditd restarts, the kernel also logs warnings and 
finally the machine goes unresponsive with the kernel logging on the 
console CPU stalls.

The affected kernels are a 2.6.37 and a 3.0.6 (gentoo-sources package).

The 2.6.37-r4-gentoo kernel is basically kernel 2.6.37 + patches from 
mpagano from here:
http://dev.gentoo.org/~mpagano/genpatches/patches-2.6.37-6.htm
(
aka
http://dev.gentoo.org/~mpagano/genpatches/tarballs/genpatches-2.6.37-6.base.tar.bz2
http://dev.gentoo.org/~mpagano/genpatches/tarballs/genpatches-2.6.37-6.extras.tar.bz2
)

The 3.0.6-gentoo kernel is also the 3.0.6 kernel + mpagano patches from 
here:
http://dev.gentoo.org/~mpagano/genpatches/tarballs/genpatches-3.0-8.base.tar.bz2
http://dev.gentoo.org/~mpagano/genpatches/tarballs/genpatches-3.0-8.extras.tar.bz2

The oops seems to happen at random when restarting the auditd 2.1.3 
(latest) daemon. Before the crash i can see the [fsnotify_mark] kernel 
thread, after the oops it is no more.

More data (kernel configs, oops and warning data, dmesg with 
CONFIG_DEBUG_INFO and CONFIG_DEBUG_LIST enabled, screenshots etc) can be 
found on the following Gentoo bug:
https://bugs.gentoo.org/show_bug.cgi?id=389405

Since the activity on the Gentoo bug thread is slow, maybe somebody from 
here has seen anything similar or has any idea what to do/test next.

Thank you for your time.

Download attachment "smime.p7s" of type "application/pkcs7-signature" (2606 bytes)