[CentOS] meaning and cause of kernel panic ??

[Jordi Molina]

Evening,

I'm not a big guru in kernel panic analysis but the parts:

Modules linked in: md5 ipv6 autofs4
i2c_dev i2c_core uhci_hcd 3c59x mii floppy ata_piix libata dm_snapshot
dm_zero dm_mirr
or ext3 jbd dm_mod 3w_xxxx sd_mod scsi_mod

Aug 15 23:01:28 mydomain kernel: Process ossec-syscheckd (pid: 11762,
threadinfo=c48f8000 task=c75a27e0)

may point to that ossec update.


regards
Jordi

On 8/16/07, Noel Sanchez <noel at lighthouselane.org> wrote:
> Hello all. I have been running running centos 4.5 final for some time with
> any problems. Been running great, until today. System was frozen and
> /var/log/messages showed:
>
> Aug 15 23:01:28 mydomain kernel: Unable to handle kernel NULL pointer
> dereference at virtual address 00000000
> Aug 15 23:01:28 mydomain kernel:  printing eip:
> Aug 15 23:01:28 mydomain kernel: c01b2de4
> Aug 15 23:01:28 mydomain kernel: *pde = 0790d067
> Aug 15 23:01:28 mydomain kernel: Oops: 0000 [#1]
> Aug 15 23:01:28 mydomain kernel: Modules linked in: md5 ipv6 autofs4
> i2c_dev i2c_core uhci_hcd 3c59x mii floppy ata_piix libata dm_snapshot
> dm_zero dm_mirr
> or ext3 jbd dm_mod 3w_xxxx sd_mod scsi_mod
> Aug 15 23:01:28 mydomain kernel: CPU:    0
> Aug 15 23:01:28 mydomain kernel: EIP:    0060:[<c01b2de4>]    Not tainted VLI
> Aug 15 23:01:28 mydomain kernel: EFLAGS: 00010246   (2.6.9-55.0.2.EL)
> Aug 15 23:01:28 mydomain kernel: EIP is at sysfs_readdir+0x1b2/0x216
> Aug 15 23:01:28 mydomain kernel: eax: 00000000   ebx: c54ee0e0   ecx:
> ffffffff   edx: 00000000
> Aug 15 23:01:28 mydomain kernel: esi: c54ee0e4   edi: 00000000   ebp:
> c1be11e4   esp: c48f8f60
> Aug 15 23:01:28 mydomain kernel: ds: 007b   es: 007b   ss: 0068
> Aug 15 23:01:28 mydomain kernel: Process ossec-syscheckd (pid: 11762,
> threadinfo=c48f8000 task=c75a27e0)
> Aug 15 23:01:28 mydomain kernel: Stack: bff7125c c7ff5420 c0180d15
> c48f8fa0 c717f920 c0372960 c717f920 c7f2b8b0
> Aug 15 23:01:28 mydomain kernel:        c0180d15 c018097e c48f8fa0
> ffffffda 0856a5dc c717f920 00000000 c0180fcb
> Aug 15 23:01:28 mydomain kernel:        0856a644 0856a62c 00000f98
> ffffffea 00000009 0856a5c0 002e8ff4 c48f8000
> Aug 15 23:01:28 mydomain kernel: Call Trace:
> Aug 15 23:01:28 mydomain kernel:  [<c0180d15>] filldir64+0x0/0x11a
> Aug 15 23:01:28 mydomain kernel:  [<c0180d15>] filldir64+0x0/0x11a
> Aug 15 23:01:28 mydomain kernel:  [<c018097e>] vfs_readdir+0x8a/0xb7
> Aug 15 23:01:28 mydomain kernel:  [<c0180fcb>] sys_getdents64+0x80/0xba
> Aug 15 23:01:28 mydomain kernel:  [<c031af83>] syscall_call+0x7/0xb
> Aug 15 23:01:28 mydomain kernel:  [<c031007b>] xfrm_parse_spi+0xb2/0xd3
> Aug 15 23:01:28 mydomain kernel: Code: 04 89 69 0c 8b 75 00 8b 44 24 04 83
> c0 0c 39 c6 74 73 8d 5e fc 83 7b 14 00 74 66 89 d8 e8 ec e2 ff ff 89 c2 83
> c9 ff
>  31 c0 89 d7 <f2> ae f7 d1 49 0f b7 43 1c c1 e8 0c 50 ff 73 20 8b 44 24 18 ff
> Aug 15 23:01:28 mydomain kernel:  <0>Fatal exception: panic in 5 seconds
>
> # uname -a
> Linux mydomain.com 2.6.9-55.0.2.EL #1 Tue Jun 26 14:08:18 EDT 2007 i686
> i686 i386 GNU/Linux
>
> I don't understand the meaning of all of this? I'm trying to find the
> cause of why my system froze or crashed. The only recent change ( a few
> weeks ago ) that I did was an upgrade of ossec from 1.2 to 1.3. Does this
> log show or hint to the cause of the problem?
>
> Thank You
>
> Noel
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


-- 
Jordi Molina Casas (warp3r)
mail: warp3r at gmail.com
www: www.warp3r.com