Kernel crashes at xdr_set_page_base due to NULL pointer dereference

Solution Unverified - Updated -

Issue

  • Kernel crashes with the following log messages.

    [  477.872990] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000
    [  477.873022] PGD 0 P4D 0 
    [  477.873032] Oops: 0000 [#1] SMP PTI
    [  477.873045] CPU: 3 PID: 59 Comm: kworker/u16:2 Kdump: loaded Not tainted 4.18.0-305.el8.x86_64 #1
    [  477.873076] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 04/05/2016
    [  477.873141] Workqueue: rpciod rpc_async_schedule [sunrpc]
    [  477.873167] RIP: 0010:xdr_set_page_base+0x3d/0x80 [sunrpc]
    [  477.873184] Code: 29 f1 89 d0 39 d1 0f 46 c1 89 f1 41 03 48 30 49 8b 70 28 89 ca 81 e1 ff 0f 00 00 c1 ea 0c 48 8d 14 d6 89 ce 01 c1 48 89 57 30 <48> 8b 12 48 2b 15 c1 55 db e4 48 c7 47 18 00 00 00 00 48 c1 fa 06
    [  477.873229] RSP: 0018:ffffba5ac3367c78 EFLAGS: 00010246
    [  477.873244] RAX: 0000000000000000 RBX: ffffba5ac3367db8 RCX: 0000000000000000
    [  477.873263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffba5ac3367db8
    [  477.873282] RBP: 0000000000000000 R08: ffff94716da4d250 R09: 0000000000000000
    [  477.873300] R10: 8080808080808080 R11: ffff9471a7ce8be4 R12: 0000000000000009
    [  477.873318] R13: ffffba5ac3367db8 R14: ffff94717468d800 R15: ffffffffc07a2f50
    [  477.873338] FS:  0000000000000000(0000) GS:ffff9471a7cc0000(0000)     knlGS:0000000000000000
    [  477.873358] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
    [  477.873374] CR2: 0000000000000000 CR3: 00000000b2610003 CR4: 00000000001706e0
    [  477.873426] Call Trace:
    [  477.873450]  xdr_set_next_buffer+0xab/0x100 [sunrpc]
    [  477.873474]  xdr_inline_decode+0x169/0x1d0 [sunrpc]
    [  477.873511]  __decode_op_hdr+0x22/0x120 [nfsv4]
    [  477.873531]  ? rpc_decode_header+0x560/0x560 [sunrpc]
    [  477.873552]  decode_getfattr_generic.constprop.124+0x52/0x240 [nfsv4]
    [  477.873578]  ? __rpc_sleep_on_priority_timeout+0xe0/0xe0 [sunrpc]
    [  477.873602]  ? rpc_decode_header+0x560/0x560 [sunrpc]
    [  477.873622]  nfs4_xdr_dec_open_noattr+0xc7/0x100 [nfsv4]
    [  477.873643]  ? rpc_decode_header+0xec/0x560 [sunrpc]
    [  477.873663]  call_decode+0x1f4/0x220 [sunrpc]
    [  477.873684]  __rpc_execute+0x85/0x3c0 [sunrpc]
    [  477.873704]  rpc_async_schedule+0x29/0x40 [sunrpc]
    [  477.873721]  process_one_work+0x1a7/0x360
    [  477.873734]  worker_thread+0x30/0x390
    [  477.873746]  ? create_worker+0x1a0/0x1a0
    [  477.873758]  kthread+0x116/0x130
    [  477.873770]  ? kthread_flush_work_fn+0x10/0x10
    [  477.873786]  ret_from_fork+0x35/0x40
    [  477.873797] Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace fscache nf_nat_ftp nft_objref nf_conntrack_ftp nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nf_tables_set nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink sunrpc intel_rapl_msr intel_rapl_common sb_edac crct10dif_pclmul crc32_pclmul ghash_clmulni_intel rapl vmw_balloon vmw_vmci pcspkr joydev i2c_piix4 ip_tables xfs libcrc32c sr_mod cdrom sd_mod t10_pi sg ata_generic vmwgfx drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops ttm drm ata_piix libata crc32c_intel vmw_pvscsi serio_raw vmxnet3 dm_mirror dm_region_hash dm_log dm_mod fuse
    [  477.873987] CR2: 0000000000000000
    

Environment

  • Red Hat Enterprise Linux 8.4 (NFS client)
  • kernel >= 4.18.0-305.el8 and kernel < 4.18.0-305.17.1.el8_4
  • NFSv4

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content