NFS server crashes due to BUG_ON() from set_freepointer() that is hit in rpc.mountd task's context
Issue
- NFS server crashes due to BUG_ON() from set_freepointer() that is hit in rpc.mountd task's context.
[8391402.211175] ------------[ cut here ]------------
[8391402.211184] kernel BUG at mm/slub.c:376!
[8391402.211214] invalid opcode: 0000 [#1] SMP NOPTI
[8391402.211234] CPU: 31 PID: 2725790 Comm: rpc.mountd Kdump: loaded Tainted: G W --------- - - 4.18.0-477.13.1.el8_8.x86_64 #1
[8391402.211281] Hardware name: HPE ProLiant XL450 Gen10/ProLiant XL450 Gen10, BIOS U40 04/20/2023
[8391402.211312] RIP: 0010:__slab_free+0x19e/0x350
[8391402.211335] Code: 1f 44 00 00 eb 9c 41 f7 46 08 00 0d 21 00 0f 85 16 ff ff ff 4d 85 ed 0f 85 0d ff ff ff 80 4c 24 5b 80 45 31 ff e9 57 ff ff ff <0f> 0b 49 3b 54 24 28 75 c4 49 89 5c 24 20 49 89 4c 24 28 49 0f ba
[8391402.211404] RSP: 0018:ffffbb716281bd40 EFLAGS: 00010246
[8391402.211426] RAX: ffff9bd521b7e800 RBX: ffff9bd521b7e000 RCX: ffff9bd521b7e000
[8391402.211453] RDX: 0000000080080006 RSI: fffff4eab486de00 RDI: ffff9bb9000056c0
[8391402.211479] RBP: ffffbb716281bde0 R08: 0000000000000001 R09: ffffffffc0855f99
[8391402.211506] R10: ffff9bd521b7e000 R11: 0000000000000001 R12: fffff4eab486de00
[8391402.211532] R13: ffff9bd521b7e000 R14: ffff9bb9000056c0 R15: ffff9bd0dfb8ec80
[8391402.211560] FS: 00007fec2ca26880(0000) GS:ffff9be7df540000(0000) knlGS:0000000000000000
[8391402.211590] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[8391402.211612] CR2: 000055e2245f2310 CR3: 000000173d054005 CR4: 00000000007706e0
[8391402.211639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[8391402.211666] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[8391402.211693] PKRU: 55555554
[8391402.211704] Call Trace:
[8391402.211719] ? vsnprintf+0x105/0x520
[8391402.211739] ? __free_client+0x99/0xf0 [nfsd]
[8391402.211790] kfree+0x22e/0x250
[8391402.211806] __free_client+0x99/0xf0 [nfsd]
[8391402.211838] client_info_show+0x185/0x1b0 [nfsd]
[8391402.211870] seq_read+0x163/0x420
[8391402.211887] vfs_read+0x91/0x150
[8391402.211904] ksys_read+0x4f/0xb0
[8391402.211919] do_syscall_64+0x5b/0x1b0
[8391402.211938] entry_SYSCALL_64_after_hwframe+0x61/0xc6
[8391402.211961] RIP: 0033:0x7fec2bb60985
[8391402.211977] Code: fe ff ff 50 48 8d 3d 12 ca 06 00 e8 65 ed 01 00 0f 1f 44 00 00 f3 0f 1e fa 48 8d 05 b5 4d 2a 00 8b 00 85 c0 75 0f 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 53 c3 66 90 41 54 49 89 d4 55 48 89 f5 53 89
[8391402.212044] RSP: 002b:00007ffff1d35cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[8391402.212073] RAX: ffffffffffffffda RBX: 000055ee32aa6c70 RCX: 00007fec2bb60985
[8391402.212100] RDX: 0000000000001000 RSI: 000055ee329a34c0 RDI: 000000000000000d
[8391402.212127] RBP: 0000000000000d68 R08: 0000000000000003 R09: 000055ee3298c20e
[8391402.212490] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec2bdfc860
[8391402.212757] R13: 00007fec2bdfd3a0 R14: 00000000000007ff R15: 000055ee32aa6c70
[8391402.212998] Modules linked in: [...]
...
[8391402.215479] Red Hat flags: eBPF/rawtrace
Environment
- Red Hat Enterprise Linux 8.8.z
- NFS server
- No 3rd-party/out-of-tree modules
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.