Kernel panic, null pointer dereference in sock_wfree calling sk_write_space() function pointer, which is NULL

Solution Unverified - Updated -

Issue

  • Kernel panic, null pointer dereference in sock_wfree() calling sk->sk_write_space() function pointer, which is NULL
  • Panic with backtrace:
#10 [ffff88033fd03d30] sock_wfree at ffffffff81558d4b
#11 [ffff88033fd03d50] skb_release_head_state at ffffffff8155e336
#12 [ffff88033fd03d68] skb_release_all at ffffffff8155e9d2
#13 [ffff88033fd03d80] consume_skb at ffffffff8155eedc
#14 [ffff88033fd03da0] __dev_kfree_skb_any at ffffffff8156ed5d
#15 [ffff88033fd03e00] vmxnet3_poll_rx_only at ffffffffa00c35aa [vmxnet3]
#16 [ffff88033fd03e38] net_rx_action at ffffffff81570910
#17 [ffff88033fd03eb8] __do_softirq at ffffffff8108f63f
#18 [ffff88033fd03f28] call_softirq at ffffffff81698f5c
#19 [ffff88033fd03f40] do_softirq at ffffffff8102d365
#20 [ffff88033fd03f60] irq_exit at ffffffff8108f9d5
#21 [ffff88033fd03f78] do_IRQ at ffffffff81699af8
--- <IRQ stack> ---

Environment

  • RHEL 7.2
  • kernel-3.10.0-514.21.1.el7.x86_64 (RHEL 7.3 kernel)
  • VMware VM
  • Two vmxnet3 interfaces
  • Sophos Antivirus third-party kernel modules:
crash> mod -t
NAME                TAINTS
talpa_syscallhook   OE
talpa_vcdevice      OE
talpa_pedevice      OE
talpa_pedconnector  OE
talpa_linux         OE
talpa_core          OE
talpa_vfshook       OE

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.