The kernel crashes in vfs_write() due to NULL pointer dereference

Solution Unverified - Updated -

Issue

  • The kernel crashes in vfs_write() due to NULL pointer dereference
[ 1432.532933] BUG: unable to handle kernel NULL pointer dereference at 0000000000000037
[ 1432.532964] IP: [<ffffffffac0417e9>] vfs_write+0x19/0x1f0
[ 1432.532986] PGD 8000000173482067 PUD 106330067 PMD 0 
[ 1432.533004] Oops: 0000 [#1] SMP 
[ 1432.533017] Modules linked in: symbdsnap(POE) macsec vsock_diag tcp_diag udp_diag inet_diag unix_diag af_packet_diag netlink_diag binfmt_misc xt_CHECKSUM iptable_mangle ipt_MASQUERADE nf_nat_masquerade_ipv4 iptable_nat nf_nat_ipv4 nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack ipt_REJECT nf_reject_ipv4 tun bridge stp llc ebtable_filter ebtables devlink ip6table_filter ip6_tables iptable_filter nfsv3 nfs fscache vmw_vsock_vmci_transport vsock dm_mirror dm_region_hash dm_log dm_mod ppdev iosf_mbi crc32_pclmul vmw_balloon ghash_clmulni_intel aesni_intel lrw gf128mul glue_helper ablk_helper cryptd joydev pcspkr sg parport_pc parport vmw_vmci i2c_piix4 nfsd auth_rpcgss nfs_acl lockd grace sunrpc ip_tables xfs libcrc32c sr_mod cdrom sd_mod crc_t10dif crct10dif_generic crct10dif_pclmul
[ 1432.533282]  crct10dif_common crc32c_intel serio_raw vmxnet3 ahci vmw_pvscsi libahci ata_generic pata_acpi vmwgfx drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops ttm nfit ata_piix drm libnvdimm libata drm_panel_orientation_quirks
[ 1432.533360] CPU: 2 PID: 12532 Comm: pmx-spam-compil Kdump: loaded Tainted: P           OE  ------------ T 3.10.0-957.21.3.el7.x86_64 #1
[ 1432.533393] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 12/12/2018
[ 1432.533421] task: ffff8850728f1040 ti: ffff884fc7080000 task.ti: ffff884fc7080000
[ 1432.533441] RIP: 0010:[<ffffffffac0417e9>]  [<ffffffffac0417e9>] vfs_write+0x19/0x1f0
[ 1432.533466] RSP: 0018:ffff884fc7083820  EFLAGS: 00010282
[ 1432.533482] RAX: fffffffffffffff3 RBX: fffffffffffffff3 RCX: ffff884fc7083860
[ 1432.533501] RDX: 0000000000000001 RSI: ffffffffc0933391 RDI: fffffffffffffff3
[ 1432.533521] RBP: ffff884fc7083850 R08: 000000000001f1a0 R09: ffffffffac05327d
[ 1432.533540] R10: ffff88507fd1f1a0 R11: ffffe60301f54800 R12: fffffffffffffff3
[ 1432.533559] R13: 00007ffffffff000 R14: ffff884f6f2a1500 R15: 0000000000001000
[ 1432.533580] FS:  0000000000000000(0000) GS:ffff88507fd00000(0063) knlGS:00000000f7472700
[ 1432.533602] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1432.533618] CR2: 0000000000000037 CR3: 0000000185eb8000 CR4: 00000000007607e0
[ 1432.533671] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1432.533691] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1432.533711] PKRU: 55555554
[ 1432.533720] Call Trace:
[ 1432.533744]  [<ffffffffc0927255>] osDropCache+0x75/0xc0 [symbdsnap]
[ 1432.533766]  [<ffffffffc09299a5>] osAllocPage+0x25/0x40 [symbdsnap]
[ 1432.533786]  [<ffffffffc0929b00>] osCreateAndPopulateBios+0x140/0x460 [symbdsnap]
[ 1432.533809]  [<ffffffffc09179ab>] ? cleanupBioList+0x56/0x56 [symbdsnap]
[ 1432.533830]  [<ffffffffc0917ac7>] symSnapIssueReadFunc+0xa0/0x24d [symbdsnap]
[ 1432.533852]  [<ffffffffc09184f5>] ? symCoreProcessCurrentBio+0x540/0x765 [symbdsnap]
[ 1432.533877]  [<ffffffffac1454e7>] ? generic_make_request+0x147/0x380
[ 1432.533896]  [<ffffffffac07e9c2>] ? bvec_alloc+0x92/0x120
[ 1432.533913]  [<ffffffffac145790>] ? submit_bio+0x70/0x150
[ 1432.533929]  [<ffffffffac07ec63>] ? bio_alloc_bioset+0x213/0x310
[ 1432.534038]  [<ffffffffc0506385>] ? xfs_add_to_ioend+0x145/0x1d0 [xfs]
[ 1432.534069]  [<ffffffffc05069a7>] ? xfs_do_writepage+0x1d7/0x510 [xfs]
[ 1432.534089]  [<ffffffffabfc25bc>] ? write_cache_pages+0x21c/0x470
[ 1432.534117]  [<ffffffffc05067d0>] ? xfs_aops_discard_page+0x150/0x150 [xfs]
[ 1432.534147]  [<ffffffffc05065cb>] ? xfs_vm_writepages+0x6b/0xa0 [xfs]
[ 1432.534951]  [<ffffffffabfc36d1>] ? do_writepages+0x21/0x50
[ 1432.535723]  [<ffffffffabfb7f75>] ? __filemap_fdatawrite_range+0x65/0x80
[ 1432.536508]  [<ffffffffabfb80c1>] ? filemap_write_and_wait_range+0x41/0x90
[ 1432.537323]  [<ffffffffc051d40a>] ? xfs_setattr_size+0xfa/0x300 [xfs]
[ 1432.538085]  [<ffffffffac060a99>] ? inode_change_ok+0xd9/0x180
[ 1432.538851]  [<ffffffffc051d650>] ? xfs_vn_setattr_size+0x40/0x80 [xfs]
[ 1432.539621]  [<ffffffffc051d73b>] ? xfs_vn_setattr+0xab/0xc0 [xfs]
[ 1432.540368]  [<ffffffffac0607f4>] ? notify_change+0x2c4/0x420
[ 1432.541182]  [<ffffffffac03f575>] ? do_truncate+0x75/0xc0
[ 1432.541901]  [<ffffffffac03f74c>] ? vfs_truncate+0x18c/0x1f0
[ 1432.542594]  [<ffffffffac03f83c>] ? do_sys_truncate+0x8c/0xb0
[ 1432.543263]  [<ffffffffac570925>] ? do_page_fault+0x35/0x90
[ 1432.543911]  [<ffffffffac03fa0e>] ? SyS_truncate+0xe/0x10
[ 1432.544530]  [<ffffffffabe86e98>] ? sys32_truncate64+0x18/0x20
[ 1432.545123]  [<ffffffffac579bb0>] ? sysenter_dispatch+0xd/0x2b
[ 1432.545687] Code: ff ff eb ba 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 89 fb 48 83 ec 08 <f6> 47 44 02 0f 84 ad 01 00 00 48 8b 47 28 48 85 c0 0f 84 6b 01 
[ 1432.546918] RIP  [<ffffffffac0417e9>] vfs_write+0x19/0x1f0
[ 1432.547481]  RSP <ffff884fc7083820>
[ 1432.548037] CR2: 0000000000000037

Environment

  • Red Hat Enterprise Linux 7.6 (kernel-3.10.0-957.21.3.el7)
  • Veritas System Recovery18 SP4 for Linux

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content