Kernel crashes at xdr_set_page_base due to NULL pointer dereference

Solution Unverified - Updated -

Issue

  • Kernel crashes with the following log messages.

    [  477.872990] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000
    [  477.873022] PGD 0 P4D 0 
    [  477.873032] Oops: 0000 [#1] SMP PTI
    [  477.873045] CPU: 3 PID: 59 Comm: kworker/u16:2 Kdump: loaded Not tainted 4.18.0-305.el8.x86_64 #1
    [  477.873076] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 04/05/2016
    [  477.873141] Workqueue: rpciod rpc_async_schedule [sunrpc]
    [  477.873167] RIP: 0010:xdr_set_page_base+0x3d/0x80 [sunrpc]
    [  477.873184] Code: 29 f1 89 d0 39 d1 0f 46 c1 89 f1 41 03 48 30 49 8b 70 28 89 ca 81 e1 ff 0f 00 00 c1 ea 0c 48 8d 14 d6 89 ce 01 c1 48 89 57 30 <48> 8b 12 48 2b 15 c1 55 db e4 48 c7 47 18 00 00 00 00 48 c1 fa 06
    [  477.873229] RSP: 0018:ffffba5ac3367c78 EFLAGS: 00010246
    [  477.873244] RAX: 0000000000000000 RBX: ffffba5ac3367db8 RCX: 0000000000000000
    [  477.873263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffba5ac3367db8
    [  477.873282] RBP: 0000000000000000 R08: ffff94716da4d250 R09: 0000000000000000
    [  477.873300] R10: 8080808080808080 R11: ffff9471a7ce8be4 R12: 0000000000000009
    [  477.873318] R13: ffffba5ac3367db8 R14: ffff94717468d800 R15: ffffffffc07a2f50
    [  477.873338] FS:  0000000000000000(0000) GS:ffff9471a7cc0000(0000)     knlGS:0000000000000000
    [  477.873358] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
    [  477.873374] CR2: 0000000000000000 CR3: 00000000b2610003 CR4: 00000000001706e0
    [  477.873426] Call Trace:
    [  477.873450]  xdr_set_next_buffer+0xab/0x100 [sunrpc]
    [  477.873474]  xdr_inline_decode+0x169/0x1d0 [sunrpc]
    [  477.873511]  __decode_op_hdr+0x22/0x120 [nfsv4]
    [  477.873531]  ? rpc_decode_header+0x560/0x560 [sunrpc]
    [  477.873552]  decode_getfattr_generic.constprop.124+0x52/0x240 [nfsv4]
    [  477.873578]  ? __rpc_sleep_on_priority_timeout+0xe0/0xe0 [sunrpc]
    [  477.873602]  ? rpc_decode_header+0x560/0x560 [sunrpc]
    [  477.873622]  nfs4_xdr_dec_open_noattr+0xc7/0x100 [nfsv4]
    [  477.873643]  ? rpc_decode_header+0xec/0x560 [sunrpc]
    [  477.873663]  call_decode+0x1f4/0x220 [sunrpc]
    [  477.873684]  __rpc_execute+0x85/0x3c0 [sunrpc]
    [  477.873704]  rpc_async_schedule+0x29/0x40 [sunrpc]
    [  477.873721]  process_one_work+0x1a7/0x360
    [  477.873734]  worker_thread+0x30/0x390
    [  477.873746]  ? create_worker+0x1a0/0x1a0
    [  477.873758]  kthread+0x116/0x130
    [  477.873770]  ? kthread_flush_work_fn+0x10/0x10
    [  477.873786]  ret_from_fork+0x35/0x40
    [  477.873797] Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace fscache nf_nat_ftp nft_objref nf_conntrack_ftp nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nf_tables_set nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink sunrpc intel_rapl_msr intel_rapl_common sb_edac crct10dif_pclmul crc32_pclmul ghash_clmulni_intel rapl vmw_balloon vmw_vmci pcspkr joydev i2c_piix4 ip_tables xfs libcrc32c sr_mod cdrom sd_mod t10_pi sg ata_generic vmwgfx drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops ttm drm ata_piix libata crc32c_intel vmw_pvscsi serio_raw vmxnet3 dm_mirror dm_region_hash dm_log dm_mod fuse
    [  477.873987] CR2: 0000000000000000
    

Environment

  • Red Hat Enterprise Linux 8.4 (NFS client)
  • kernel >= 4.18.0-305.el8 and kernel < 4.18.0-305.17.1.el8_4
  • NFSv4

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In