From cb3d7cd839b30d70a4b36b8bce85ae1de9b62262 Mon Sep 17 00:00:00 2001
From: Alan Somers <asomers@FreeBSD.org>
Date: Mon, 28 May 2018 20:47:39 +0000
Subject: [PATCH] Fix "Bad tailq" panic when auditing auditon(A_SETCLASS, ...)

Due to an oversight in r195280, auditon(A_SETCLASS, ...) would cause a tailq
element to get added to the tailq twice, resulting in a circular tailq. This
panics when INVARIANTS are on.

MFC after:	2 weeks
Differential Revision:	https://reviews.freebsd.org/D15381
---
 sys/security/audit/audit_bsm.c | 1 -
 1 file changed, 1 deletion(-)

diff --git a/sys/security/audit/audit_bsm.c b/sys/security/audit/audit_bsm.c
index 829d97d79b3..8f3d4a96bcc 100644
--- a/sys/security/audit/audit_bsm.c
+++ b/sys/security/audit/audit_bsm.c
@@ -427,7 +427,6 @@ audit_sys_auditon(struct audit_record *ar, struct au_record *rec)
 		break;
 
 	case A_SETCLASS:
-		kau_write(rec, tok);
 		tok = au_to_arg32(2, "setclass:ec_event",
 		    ar->ar_arg_auditon.au_evclass.ec_number);
 		kau_write(rec, tok);