System crashes at inet_sk_rx_dst_set+0x13 due to memory corruption
Issue
- System crashes at inet_sk_rx_dst_set+0x13 due to memory corruption.
[26854124.744310] BUG: unable to handle kernel paging request at 000005a800003d60
[26854124.744316] IP: [<ffffffff815da203>] inet_sk_rx_dst_set+0x13/0x80
[26854124.744317] PGD 0
[26854124.744319] Oops: 0000 [#1] SMP
[26854124.744355] Modules linked in: ip6table_filter ip6_tables iptable_filter nfsv3 nfs fscache 8021q garp mrp stp llc bonding vfat fat intel_powerclamp coretemp intel_rapl iosf_mbi kvm irqbypass iTCO_wdt crc32_pclmul iTCO_vendor_support dcdbas ghash_clmulni_intel aesni_intel lrw gf128mul ipmi_ssif glue_helper ablk_helper cryptd pcspkr sg i2c_i801 lpc_ich shpchp wmi ipmi_si ipmi_msghandler nfit libnvdimm acpi_power_meter acpi_pad nfsd auth_rpcgss nfs_acl lockd grace binfmt_misc sunrpc ip_tables xfs libcrc32c sd_mod crc_t10dif crct10dif_generic crct10dif_pclmul crct10dif_common crc32c_intel mgag200 i2c_algo_bit drm_kms_helper syscopyarea sysfillrect sysimgblt ahci fb_sys_fops libahci qedf(OE) ttm qede(OE) ptp libfcoe pps_core qla2xxx(OE) qed(OE) drm libfc crc8 libata i2c_core fjes emcpdm(POE) emcpgpx(POE)
[26854124.744358] emcpmpx(POE) emcp(POE) scsi_transport_fc scsi_tgt dm_mirror dm_region_hash dm_log dm_mod [last unloaded: emcpioc]
[26854124.744361] CPU: 2 PID: 344198 Comm: bptm Tainted: P B W OE ------------ 3.10.0-514.41.1.el7.x86_64 #1
[26854124.744362] Hardware name: Dell Inc. PowerEdge R640/08HT8T, BIOS 2.2.10 05/15/2019
[26854124.744363] task: ffff88068c409f60 ti: ffff880473fec000 task.ti: ffff880473fec000
[26854124.744366] RIP: 0010:[<ffffffff815da203>] [<ffffffff815da203>] inet_sk_rx_dst_set+0x13/0x80
[26854124.744367] RSP: 0018:ffff880473fefb18 EFLAGS: 00010206
[26854124.744368] RAX: ffffffff81744a00 RBX: ffff8803baf13640 RCX: 00000000050005a8
[26854124.744369] RDX: 000005a800003d00 RSI: ffff8803bb570d68 RDI: ffff8803baf13640
[26854124.744370] RBP: ffff880473fefb18 R08: ffff88035402bf00 R09: 0000000180400029
[26854124.744372] R10: 0000000054029001 R11: ffffea000d500a00 R12: 0000000000000000
[26854124.744372] R13: ffff8803bb570d68 R14: ffff8803baf136b0 R15: 0000000000000000
[26854124.744374] FS: 00007f1d57e2f780(0000) GS:ffff881038c80000(0000) knlGS:0000000000000000
[26854124.744375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[26854124.744376] CR2: 000005a800003d60 CR3: 0000000510e02000 CR4: 00000000003607e0
[26854124.744377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[26854124.744378] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[26854124.744379] Call Trace:
[26854124.744382] [<ffffffff815d06a1>] tcp_rcv_established+0x601/0x760
[26854124.744384] [<ffffffff815dad9a>] tcp_v4_do_rcv+0x10a/0x340
[26854124.744387] [<ffffffff815dad9a>] ? tcp_v4_do_rcv+0x10a/0x340
[26854124.744391] [<ffffffff8155ec71>] release_sock+0xa1/0x170
[26854124.744393] [<ffffffff815c4a54>] tcp_recvmsg+0x504/0xb50
[26854124.744396] [<ffffffff815f223b>] inet_recvmsg+0x7b/0xa0
[26854124.744398] [<ffffffff8155aa5f>] sock_recvmsg+0xbf/0x100
[26854124.744402] [<ffffffff8119f941>] ? shmem_fault+0x71/0x1d0
[26854124.744431] [<ffffffffa07636dc>] ? xfs_iunlock+0x11c/0x130 [xfs]
[26854124.744434] [<ffffffff8155abd8>] SYSC_recvfrom+0xe8/0x160
[26854124.744437] [<ffffffff8155b4ce>] SyS_recvfrom+0xe/0x10
[26854124.744440] [<ffffffff8169d53d>] system_call_fastpath+0x16/0x1b
[26854124.744462] Code: e4 fe ff ff 89 c1 45 31 ed e9 ab fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 8b 56 58 48 89 e5 48 83 e2 fe 74 67 <f6> 42 60 10 74 47 8b 8a 80 00 00 00 85 c9 74 57 44 8d 41 01 4c
[26854124.744465] RIP [<ffffffff815da203>] inet_sk_rx_dst_set+0x13/0x80
[26854124.744466] RSP <ffff880473fefb18>
[26854124.744466] CR2: 000005a800003d60
Environment
- Red Hat Enterprise Linux 7
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.