Oracle Linux 7 Will Not Boot When Fips Is Enabled on UEK4 Kernels

(Doc ID 2412923.1)

Last updated on JUNE 21, 2018

Applies to:

Linux OS - Version Oracle Linux 7.5 with Unbreakable Enterprise Kerne [4.1.12] and later
Information in this document applies to any platform.

Symptoms

A server running Oracle Linux 7 and the UEK4 kernel failed to boot when fips was enabled.

The system kernel panics with the following call trace

[ 15.420296] CPU: 0 PID: 407 Comm: cryptomgr_test Not tainted
4.1.12-124.15.2.el7uek.x86_64 #2
[ 15.420296] Hardware name: Xen HVM domU, BIOS 4.4.4OVM 09/01/2016
[ 15.420296] 0000000000000086 00000000e58b1a77 ffff880038c3fd78
ffffffff81747d12
[ 15.420296] ffffffff81a66368 000000000000005f ffff880038c3fdf8
ffffffff817429f8
[ 15.420296] ffff880000000018 ffff880038c3fe08 ffff880038c3fda8
00000000e58b1a77
[ 15.420296] Call Trace:
[ 15.420296] [<ffffffff81747d12>] dump_stack+0x63/0x81
[ 15.420296] [<ffffffff817429f8>] panic+0xda/0x22a
[ 15.420296] [<ffffffff812fa61b>] alg_test+0x3bb/0x3c0
[ 15.420296] [<ffffffff8174b37f>] ? __schedule+0x27f/0x850
[ 15.420296] [<ffffffff812f8da0>] ? crypto_unregister_pcomp+0x20/0x20
[ 15.420296] [<ffffffff812f8de5>] cryptomgr_test+0x45/0x50
[ 15.420296] [<ffffffff810aa4ea>] kthread+0xda/0xf0
[ 15.420296] [<ffffffff810aa410>] ? kthread_create_on_node+0x1b0/0x1b0
[ 15.420296] [<ffffffff817511f8>] ret_from_fork+0x58/0x90
[ 15.420296] [<ffffffff810aa410>] ? kthread_create_on_node+0x1b0/0x1b0
[ 15.420296] Kernel Offset: disabled
[ 15.420296] drm_kms_helper: panic occurred, switching back to text console

Changes

Fips was enabled as a kernel boot parameter:

Cause

	Sign In with your My Oracle Support account
	Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms