內(nèi)核call trace 怎么分析？有什么跟蹤方法？？

我愛你我的菜

Jul 10 09:17:29 localhost kernel: [72248.034021] BUG: unable to handle kernel paging request at ffffffdc
Jul 10 09:17:29 localhost kernel: [72248.034097] IP: [<c12fa2c2>] strlen+0x12/0x20
Jul 10 09:17:29 localhost kernel: [72248.034148] *pdpt = 00000000019a2001 *pde = 00000000019a7067 *pte = 0000000000000000
Jul 10 09:17:29 localhost kernel: [72248.034231] Oops: 0000 [#1] SMP
Jul 10 09:17:29 localhost kernel: [72248.034273] Modules linked in: nls_iso8859_1 usb_storage policyrules(O) bmsvfat(O) bmsfat(O) iptable_filter ip_tables tdaudit(O) scriptcontrol(O) binfmt_misc padlock_sha padlock_aes via_cputemp hwmon_vid kvm_intel kvm aesni_intel snd_hda_codec_hdmi aes_i586 xts lrw snd_hda_codec_realtek gf128mul ablk_helper cryptd snd_seq_midi snd_hda_intel snd_seq_midi_event dm_multipath snd_hda_codec scsi_dh snd_hwdep snd_rawmidi snd_pcm snd_seq serio_raw snd_page_alloc snd_seq_device snd_timer snd soundcore dm_mirror dm_region_hash dm_log hid_generic usbhid hid radeon i2c_algo_bit sdhci_pci ttm sdhci ahci drm_kms_helper libahci drm video r8169
Jul 10 09:17:29 localhost kernel: [72248.034952] Pid: 13946, comm: updatedb.mlocat Tainted: G        W  O 3.8.13.13-cdos #1 Zhaoxin Semiconductor Co., Ltd. INVALID/Type2 - Board Product Name1
Jul 10 09:17:29 localhost kernel: [72248.035079] EIP: 0060:[<c12fa2c2>] EFLAGS: 00010246 CPU: 1
Jul 10 09:17:29 localhost kernel: [72248.035131] EIP is at strlen+0x12/0x20
Jul 10 09:17:29 localhost kernel: [72248.035171] EAX: 00000000 EBX: eea9d000 ECX: ffffffff EDX: 00000000
Jul 10 09:17:29 localhost kernel: [72248.035234] ESI: ebd04780 EDI: ffffffdc EBP: ecdadd04 ESP: ecdadd00
Jul 10 09:17:29 localhost kernel: [72248.035297]  DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
Jul 10 09:17:29 localhost kernel: [72248.035353] CR0: 80050033 CR2: ffffffdc CR3: 2cc7e000 CR4: 001406f0
Jul 10 09:17:29 localhost kernel: [72248.035417] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
Jul 10 09:17:29 localhost kernel: [72248.035480] DR6: ffff0ff0 DR7: 00000400
Jul 10 09:17:29 localhost kernel: [72248.035521] Process updatedb.mlocat (pid: 13946, ti=ecdac000 task=ecb10000 task.ti=ecdac000)
Jul 10 09:17:29 localhost kernel: [72248.035605] Stack:
Jul 10 09:17:29 localhost kernel: [72248.035627]  00000004 ecdadf40 f85b529b df0a2830 ecdadd5c c122af7e ecdadda4 00000014
Jul 10 09:17:29 localhost kernel: [72248.035728]  ffffffdc ecdadd40 c1229ca5 ecdadd5c c17cd836 ef77ca9c 00000060 f5dcb930
Jul 10 09:17:29 localhost kernel: [72248.035829]  c17cd836 00000006 00000060 00000000 c17cd836 00000007 00840053 00000000
Jul 10 09:17:29 localhost kernel: [72248.035929] Call Trace:
Jul 10 09:17:29 localhost kernel: [72248.035963]  [<f85b529b>] td_file_permission+0x1ab/0x3a0 [tdaudit]
Jul 10 09:17:29 localhost kernel: [72248.036030]  [<c122af7e>] ? ext4_xattr_get+0x4e/0x1f0
Jul 10 09:17:29 localhost kernel: [72248.036086]  [<c1229ca5>] ? ext4_xattr_find_entry+0x25/0xd0
Jul 10 09:17:29 localhost kernel: [72248.036148]  [<c1280a9a>] ? inode_has_perm.isra.34.constprop.63+0x3a/0x50
Jul 10 09:17:29 localhost kernel: [72248.036220]  [<c127c1ec>] ? security_file_open+0x8c/0x90
Jul 10 09:17:29 localhost kernel: [72248.036278]  [<c10746d6>] ? lg_local_unlock+0x16/0x20
Jul 10 09:17:29 localhost kernel: [72248.036334]  [<c117c28a>] ? mntput_no_expire+0x3a/0x120
Jul 10 09:17:29 localhost kernel: [72248.036389]  [<c117c38d>] ? mntput+0x1d/0x30
Jul 10 09:17:29 localhost kernel: [72248.036436]  [<c1169b8a>] ? path_put+0x1a/0x20
Jul 10 09:17:29 localhost kernel: [72248.036483]  [<c116a385>] ? terminate_walk+0x35/0x40
Jul 10 09:17:29 localhost kernel: [72248.036536]  [<c116cb74>] ? do_last+0x654/0xc40
Jul 10 09:17:29 localhost kernel: [72248.036585]  [<c116a6a6>] ? inode_permission+0x16/0x50
Jul 10 09:17:29 localhost kernel: [72248.036639]  [<c116d1b9>] ? link_path_walk+0x59/0x730
Jul 10 09:17:29 localhost kernel: [72248.036693]  [<c116e2f2>] ? path_openat+0xa2/0x3c0
Jul 10 09:17:29 localhost kernel: [72248.036744]  [<c12fa951>] ? copy_to_user+0x41/0x60
Jul 10 09:17:29 localhost kernel: [72248.036797]  [<c1165579>] ? cp_new_stat64+0x109/0x130
Jul 10 09:17:29 localhost kernel: [72248.036851]  [<c1171360>] ? sys_ioctl+0x80/0x80
Jul 10 09:17:29 localhost kernel: [72248.036900]  [<c127b178>] security_file_permission+0x28/0xc0
Jul 10 09:17:29 localhost kernel: [72248.036962]  [<c160997d>] ? _raw_spin_lock+0xd/0x10
Jul 10 09:17:29 localhost kernel: [72248.037014]  [<c1171360>] ? sys_ioctl+0x80/0x80
Jul 10 09:17:29 localhost kernel: [72248.037062]  [<c11716a3>] vfs_readdir+0x43/0xd0
Jul 10 09:17:29 localhost kernel: [72248.037110]  [<c11718db>] sys_getdents64+0x6b/0xd0
Jul 10 09:17:29 localhost kernel: [72248.037163]  [<c1610e4d>] sysenter_do_call+0x12/0x28
Jul 10 09:17:29 localhost kernel: [72248.037215] Code: f7 be 01 00 00 00 89 f0 48 5e 5d c3 8d b6 00 00 00 00 8d bc 27 00 00 00 00 55 89 e5 57 3e 8d 74 26 00 b9 ff ff ff ff 89 c7 31 c0 <f2> ae f7 d1 8d 41 ff 5f 5d c3 8d 74 26 00 55 89 e5 57 3e 8d 74
Jul 10 09:17:29 localhost kernel: [72248.037690] EIP: [<c12fa2c2>] strlen+0x12/0x20 SS:ESP 0068:ecdadd00
Jul 10 09:17:29 localhost kernel: [72248.037760] CR2: 00000000ffffffdc
Jul 10 09:17:29 localhost kernel: [72248.037898] ---[ end trace 05a810e93aaedcf6 ]---
Jul 11 09:17:27 localhost kernel: [158645.985248] BUG: unable to handle kernel paging request at ffffffdc
Jul 11 09:17:27 localhost kernel: [158645.985324] IP: [<c12fa2c2>] strlen+0x12/0x20
Jul 11 09:17:27 localhost kernel: [158645.985376] *pdpt = 00000000019a2001 *pde = 00000000019a7067 *pte = 0000000000000000
Jul 11 09:17:27 localhost kernel: [158645.985461] Oops: 0000 [#2] SMP
Jul 11 09:17:27 localhost kernel: [158645.985500] Modules linked in: nls_iso8859_1 usb_storage policyrules(O) bmsvfat(O) bmsfat(O) iptable_filter ip_tables tdaudit(O) scriptcontrol(O) binfmt_misc padlock_sha padlock_aes via_cputemp hwmon_vid kvm_intel kvm aesni_intel snd_hda_codec_hdmi aes_i586 xts lrw snd_hda_codec_realtek gf128mul ablk_helper cryptd snd_seq_midi snd_hda_intel snd_seq_midi_event dm_multipath snd_hda_codec scsi_dh snd_hwdep snd_rawmidi snd_pcm snd_seq serio_raw snd_page_alloc snd_seq_device snd_timer snd soundcore dm_mirror dm_region_hash dm_log hid_generic usbhid hid radeon i2c_algo_bit sdhci_pci ttm sdhci ahci drm_kms_helper libahci drm video r8169
Jul 11 09:17:27 localhost kernel: [158645.988003] Pid: 32228, comm: updatedb.mlocat Tainted: G      D W  O 3.8.13.13-cdos #1 Zhaoxin Semiconductor Co., Ltd. INVALID/Type2 - Board Product Name1
Jul 11 09:17:27 localhost kernel: [158645.988003] EIP: 0060:[<c12fa2c2>] EFLAGS: 00010246 CPU: 3
Jul 11 09:17:27 localhost kernel: [158645.988003] EIP is at strlen+0x12/0x20
Jul 11 09:17:27 localhost kernel: [158645.988003] EAX: 00000000 EBX: ecc01000 ECX: ffffffff EDX: 00000000
Jul 11 09:17:27 localhost kernel: [158645.988003] ESI: ebd04780 EDI: ffffffdc EBP: dcfd3d04 ESP: dcfd3d00
Jul 11 09:17:27 localhost kernel: [158645.988003]  DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
Jul 11 09:17:27 localhost kernel: [158645.988003] CR0: 80050033 CR2: ffffffdc CR3: 1c911000 CR4: 001406f0
Jul 11 09:17:27 localhost kernel: [158645.988003] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
Jul 11 09:17:27 localhost kernel: [158645.988003] DR6: ffff0ff0 DR7: 00000400
Jul 11 09:17:27 localhost kernel: [158645.988003] Process updatedb.mlocat (pid: 32228, ti=dcfd2000 task=f1e619a0 task.ti=dcfd2000)
Jul 11 09:17:27 localhost kernel: [158645.988003] Stack:
Jul 11 09:17:27 localhost kernel: [158645.988003]  00000004 dcfd3f40 f85b529b df0a2830 dcfd3d5c c122af7e dcfd3da4 00000014
Jul 11 09:17:27 localhost kernel: [158645.988003]  ffffffdc dcfd3d40 c1229ca5 dcfd3d5c c17cd836 ef77ca9c 00000060 f5dcb930
Jul 11 09:17:27 localhost kernel: [158645.988003]  c17cd836 00000006 00000060 00000000 c17cd836 00000007 00840053 00000000
Jul 11 09:17:27 localhost kernel: [158645.988003] Call Trace:
Jul 11 09:17:27 localhost kernel: [158645.988003]  [<f85b529b>] td_file_permission+0x1ab/0x3a0 [tdaudit]
Jul 11 09:17:27 localhost kernel: [158645.988003]  [<c122af7e>] ? ext4_xattr_get+0x4e/0x1f0
Jul 11 09:17:27 localhost kernel: [158645.988003]  [<c1229ca5>] ? ext4_xattr_find_entry+0x25/0xd0
Jul 11 09:17:27 localhost kernel: [158645.988003]  [<c1280a9a>] ? inode_has_perm.isra.34.constprop.63+0x3a/0x50
Jul 11 09:17:27 localhost kernel: [158645.988003]  [<c127c1ec>] ? security_file_open+0x8c/0x90
Jul 11 09:17:27 localhost kernel: [158645.988003]  [<c10746d6>] ? lg_local_unlock+0x16/0x20
Jul 11 09:17:27 localhost kernel: [158645.988003]  [<c117c28a>] ? mntput_no_expire+0x3a/0x120
Jul 11 09:17:27 localhost kernel: [158646.068888]  [<c117c38d>] ? mntput+0x1d/0x30
Jul 11 09:17:27 localhost kernel: [158646.068888]  [<c1169b8a>] ? path_put+0x1a/0x20
Jul 11 09:17:27 localhost kernel: [158646.068888]  [<c116a385>] ? terminate_walk+0x35/0x40
Jul 11 09:17:27 localhost kernel: [158646.068888]  [<c116cb74>] ? do_last+0x654/0xc40
Jul 11 09:17:27 localhost kernel: [158646.068888]  [<c116a6a6>] ? inode_permission+0x16/0x50
Jul 11 09:17:27 localhost kernel: [158646.068888]  [<c116d1b9>] ? link_path_walk+0x59/0x730
Jul 11 09:17:27 localhost kernel: [158646.068888]  [<c116e2f2>] ? path_openat+0xa2/0x3c0
Jul 11 09:17:27 localhost kernel: [158646.068888]  [<c12fa951>] ? copy_to_user+0x41/0x60
Jul 11 09:17:27 localhost kernel: [158646.068888]  [<c1165579>] ? cp_new_stat64+0x109/0x130
Jul 11 09:17:27 localhost kernel: [158646.068888]  [<c1171360>] ? sys_ioctl+0x80/0x80
Jul 11 09:17:27 localhost kernel: [158646.068888]  [<c127b178>] security_file_permission+0x28/0xc0
Jul 11 09:17:27 localhost kernel: [158646.105214]  [<c160997d>] ? _raw_spin_lock+0xd/0x10
Jul 11 09:17:27 localhost kernel: [158646.105214]  [<c1171360>] ? sys_ioctl+0x80/0x80
Jul 11 09:17:27 localhost kernel: [158646.105214]  [<c11716a3>] vfs_readdir+0x43/0xd0
Jul 11 09:17:27 localhost kernel: [158646.105214]  [<c11718db>] sys_getdents64+0x6b/0xd0
Jul 11 09:17:27 localhost kernel: [158646.105214]  [<c1610e4d>] sysenter_do_call+0x12/0x28
Jul 11 09:17:27 localhost kernel: [158646.105214] Code: f7 be 01 00 00 00 89 f0 48 5e 5d c3 8d b6 00 00 00 00 8d bc 27 00 00 00 00 55 89 e5 57 3e 8d 74 26 00 b9 ff ff ff ff 89 c7 31 c0 <f2> ae f7 d1 8d 41 ff 5f 5d c3 8d 74 26 00 55 89 e5 57 3e 8d 74
Jul 11 09:17:27 localhost kernel: [158646.105214] EIP: [<c12fa2c2>] strlen+0x12/0x20 SS:ESP 0068:dcfd3d00
Jul 11 09:17:27 localhost kernel: [158646.105214] CR2: 00000000ffffffdc
Jul 11 09:17:27 localhost kernel: [158646.105214] ---[ end trace 05a810e93aaedcf7 ]---
Jul 11 11:37:40 localhost kernel: [167058.879205] apsc_client_ui[6288]: segfault at 0 ip   (null) sp b9538e6c error 14
Jul 11 11:37:50 localhost kernel: [167068.694516] SELinux: initialized (dev fuse, type fuse), uses genfs_contexts
Jul 11 11:38:52 localhost kernel: [167131.456025] usb 1-1: new high-speed USB device number 5 using ehci-pci
Jul 11 11:38:53 localhost kernel: [167131.590786] usb 1-1: New USB device found, idVendor=0930, idProduct=6544
Jul 11 11:38:53 localhost kernel: [167131.590794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
Jul 11 11:38:53 localhost kernel: [167131.590798] usb 1-1: Product: TransMemory     
Jul 11 11:38:53 localhost kernel: [167131.590802] usb 1-1: Manufacturer: TOSHIBA
Jul 11 11:38:53 localhost kernel: [167131.590806] usb 1-1: SerialNumber: 1AAFBE58A90CCE7087653F1E
Jul 11 11:38:53 localhost kernel: [167131.591925] scsi6 : usb-storage 1-1:1.0
Jul 11 11:38:54 localhost kernel: [167132.617847] scsi 6:0:0:0: Direct-Access     TOSHIBA  TransMemory      1.00 PQ: 0 ANSI: 4
Jul 11 11:38:54 localhost kernel: [167132.619521] sd 6:0:0:0: Attached scsi generic sg2 type 0
Jul 11 11:38:54 localhost kernel: [167132.619828] sd 6:0:0:0: [sdb] 15155200 512-byte logical blocks: (7.75 GB/7.22 GiB)
Jul 11 11:38:54 localhost kernel: [167132.620620] sd 6:0:0:0: [sdb] Write Protect is off
Jul 11 11:38:54 localhost kernel: [167132.620630] sd 6:0:0:0: [sdb] Mode Sense: 45 00 00 00
Jul 11 11:38:54 localhost kernel: [167132.622019] sd 6:0:0:0: [sdb] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA
Jul 11 11:38:54 localhost kernel: [167132.628116]  sdb: sdb1
Jul 11 11:38:54 localhost kernel: [167132.631073] sd 6:0:0:0: [sdb] Attached SCSI removable disk
Jul 11 11:38:54 localhost kernel: [167132.854611] SELinux: initialized (dev sdb1, type vfat), uses genfs_contexts
Jul 11 11:39:33 localhost kernel: [167171.713623] ima turn off

zhayun604863141

先看看出錯(cuò)的指令在哪里
     objdump反匯編vmlinux，查找td_file_permission+0x1ab對(duì)應(yīng)的代碼。 <你這里f85b529b對(duì)應(yīng)的應(yīng)該是模塊地址吧，那樣需要反匯編ko文件，或直接addr2line試試>

不過通過你這信息分析，很有可能是td_file_permission調(diào)用strlen函數(shù)時(shí)(有可能是間接調(diào)用)，傳給strlen的參數(shù)有問題。