Two warnings, "WARNING: CPU: x PID: xxxxx at kernel/timer.c:1271 requeue_timers+0x143/0x160" and "WARNING: CPU: x PID: xxxxx at lib/timerqueue.c:74 timerqueue_del+0x59/0x70" followed by NULL pointer dereference crash triggered in rb_erase()

Solution Unverified - Updated -

Issue

  • The two warnings, "WARNING: CPU: x PID: xxxxx at kernel/timer.c:1271 requeue_timers+0x143/0x160" and "WARNING: CPU: x PID: xxxxx at lib/timerqueue.c:74 timerqueue_del+0x59/0x70" followed by NULL pointer dereference crash triggered in rb_erase() called within timerqueue_del()
------------[ cut here ]------------
WARNING: CPU: 2 PID: 27064 at kernel/timer.c:1271 requeue_timers+0x143/0x160
Modules linked in: twnotify(OE) nfsv3 nfs_acl rpcsec_gss_krb5 nfsv4 dns_resolver nfs lockd grace fscache vmw_vsock_vmci_transport vsock sb_edac iosf_mbi crc32_pclmul ppdev ghash_clmulni_intel aesni_intel lrw gf128mul glue_helper ablk_helper cryptd vmw_balloon sg joydev i2c_piix4 pcspkr vmw_vmci parport_pc parport auth_rpcgss sunrpc binfmt_misc ip_tables xfs libcrc32c sr_mod cdrom ata_generic pata_acpi vmwgfx drm_kms_helper syscopyarea ata_piix sysfillrect sysimgblt fb_sys_fops sd_mod ttm crc_t10dif crct10dif_generic libata drm nfit libnvdimm crct10dif_pclmul crct10dif_common crc32c_intel serio_raw vmxnet3 vmw_pvscsi drm_panel_orientation_quirks dm_mirror dm_region_hash dm_log dm_mod fuse [last unloaded: twnotify]
CPU: 2 PID: 27064 Comm: java Kdump: loaded Tainted: G           OE  ------------   3.10.0-1160.108.1.el7.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020
Call Trace:
 <IRQ>  [<ffffffffae5b1bec>] dump_stack+0x19/0x1f
 [<ffffffffade9f868>] __warn+0xd8/0x100
 [<ffffffffade9f9ad>] warn_slowpath_null+0x1d/0x30
 [<ffffffffadeb2683>] requeue_timers+0x143/0x160
 [<ffffffffadeb32b0>] run_timer_softirq+0x310/0x340
 [<ffffffffadee0e92>] ? try_to_wake_up+0x192/0x3a0
 [<ffffffffadea9595>] __do_softirq+0xf5/0x290
 [<ffffffffae5c8aac>] call_softirq+0x1c/0x30
 [<ffffffffade30825>] do_softirq+0x65/0xa0
 [<ffffffffadea9945>] irq_exit+0x115/0x120
 [<ffffffffae5ca058>] smp_apic_timer_interrupt+0x48/0x60
 [<ffffffffae5c63f2>] apic_timer_interrupt+0x172/0x180
 <EOI>  [<ffffffffadeda8a7>] ? finish_task_switch+0x57/0x1c0
 [<ffffffffae5b7920>] __schedule+0x320/0x680
 [<ffffffffae5b7ca9>] schedule+0x29/0x70
 [<ffffffffadf19856>] futex_wait_queue_me+0xc6/0x130
 [<ffffffffadf1a65b>] futex_wait+0x17b/0x290
 [<ffffffffadecf340>] ? hrtimer_get_res+0x50/0x50
 [<ffffffffadf19834>] ? futex_wait_queue_me+0xa4/0x130
 [<ffffffffadf1c356>] do_futex+0x106/0x4d0
 [<ffffffffadf1c7a0>] SyS_futex+0x80/0x190
 [<ffffffffae5c539a>] system_call_fastpath+0x25/0x2a
---[ end trace f4e19b63d479c0e4 ]---
IPv4: martian source 10.148.0.144 from 10.148.9.225, on dev eth1
ll header: 00000000: 00 50 56 b5 4a 21 bc 26 c7 ed f3 cf 08 00        .PV.J!.&......
IPv4: martian source 10.148.0.144 from 10.148.9.225, on dev eth1
ll header: 00000000: 00 50 56 b5 4a 21 bc 26 c7 ed f3 cf 08 00        .PV.J!.&......
IPv4: martian source 10.148.0.144 from 10.148.9.225, on dev eth1
ll header: 00000000: 00 50 56 b5 4a 21 bc 26 c7 ed f3 cf 08 00        .PV.J!.&......
------------[ cut here ]------------
WARNING: CPU: 0 PID: 0 at lib/timerqueue.c:74 timerqueue_del+0x59/0x70
Modules linked in: twnotify(OE) nfsv3 nfs_acl rpcsec_gss_krb5 nfsv4 dns_resolver nfs lockd grace fscache vmw_vsock_vmci_transport vsock sb_edac iosf_mbi crc32_pclmul ppdev ghash_clmulni_intel aesni_intel lrw gf128mul glue_helper ablk_helper cryptd vmw_balloon sg joydev i2c_piix4 pcspkr vmw_vmci parport_pc parport auth_rpcgss sunrpc binfmt_misc ip_tables xfs libcrc32c sr_mod cdrom ata_generic pata_acpi vmwgfx drm_kms_helper syscopyarea ata_piix sysfillrect sysimgblt fb_sys_fops sd_mod ttm crc_t10dif crct10dif_generic libata drm nfit libnvdimm crct10dif_pclmul crct10dif_common crc32c_intel serio_raw vmxnet3 vmw_pvscsi drm_panel_orientation_quirks dm_mirror dm_region_hash dm_log dm_mod fuse [last unloaded: twnotify]
CPU: 0 PID: 0 Comm: swapper/0 Kdump: loaded Tainted: G        W  OE  ------------   3.10.0-1160.108.1.el7.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020
Call Trace:
 [<ffffffffae5b1bec>] dump_stack+0x19/0x1f
 [<ffffffffade9f868>] __warn+0xd8/0x100
 [<ffffffffade9f9ad>] warn_slowpath_null+0x1d/0x30
 [<ffffffffae1a7509>] timerqueue_del+0x59/0x70
 [<ffffffffadecf5b7>] __remove_hrtimer+0x47/0xc0
 [<ffffffffadecf8c8>] hrtimer_start_range_ns+0x298/0x3c0
 [<ffffffffadecfa02>] hrtimer_start+0x12/0x20
 [<ffffffffadf17a00>] tick_nohz_stop_sched_tick+0x2c0/0x390
 [<ffffffffadf17b6f>] __tick_nohz_idle_enter+0x9f/0x170
 [<ffffffffadf1811f>] tick_nohz_idle_enter+0x3f/0x70
 [<ffffffffadf081d7>] cpu_startup_entry+0xa7/0x1e0
 [<ffffffffae5a03f7>] rest_init+0x77/0x80
 [<ffffffffaeb8c22b>] start_kernel+0x44b/0x470
 [<ffffffffaeb8bbc8>] ? repair_env_string+0x64/0x64
 [<ffffffffaeb8b120>] ? early_idt_handler_array+0x120/0x120
 [<ffffffffaeb8b748>] x86_64_start_reservations+0x24/0x2a
 [<ffffffffaeb8b8a2>] x86_64_start_kernel+0x154/0x17b
 [<ffffffffade000d5>] start_cpu+0x5/0x14
---[ end trace f4e19b63d479c0e5 ]---
BUG: unable to handle kernel NULL pointer dereference at           (null)
IP: [<ffffffffae1a4bf0>] rb_erase+0x120/0x3a0
PGD 8000000a89b08067 PUD 9ecfbf067 PMD 0 
Oops: 0002 [#1] SMP 
Modules linked in: twnotify(OE) nfsv3 nfs_acl rpcsec_gss_krb5 nfsv4 dns_resolver nfs lockd grace fscache vmw_vsock_vmci_transport vsock sb_edac iosf_mbi crc32_pclmul ppdev ghash_clmulni_intel aesni_intel lrw gf128mul glue_helper ablk_helper cryptd vmw_balloon sg joydev i2c_piix4 pcspkr vmw_vmci parport_pc parport auth_rpcgss sunrpc binfmt_misc ip_tables xfs libcrc32c sr_mod cdrom ata_generic pata_acpi vmwgfx drm_kms_helper syscopyarea ata_piix sysfillrect sysimgblt fb_sys_fops sd_mod ttm crc_t10dif crct10dif_generic libata drm nfit libnvdimm crct10dif_pclmul crct10dif_common crc32c_intel serio_raw vmxnet3 vmw_pvscsi drm_panel_orientation_quirks dm_mirror dm_region_hash dm_log dm_mod fuse [last unloaded: twnotify]
CPU: 0 PID: 0 Comm: swapper/0 Kdump: loaded Tainted: G        W  OE  ------------   3.10.0-1160.108.1.el7.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020
task: ffffffffaea18480 ti: ffffffffaea00000 task.ti: ffffffffaea00000
RIP: 0010:[<ffffffffae1a4bf0>]  [<ffffffffae1a4bf0>] rb_erase+0x120/0x3a0
RSP: 0018:ffffffffaea03e00  EFLAGS: 00010082
RAX: ffff9c58888e7db8 RBX: ffff9c5dfd615f80 RCX: ffff9c58888e7db9
RDX: ffff9c5887467d38 RSI: ffff9c5dfd6159f0 RDI: 0000000000000000
RBP: ffffffffaea03e00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000004 R11: 0000000000000005 R12: ffff9c5dfd6159f0
R13: ffff9c5dfd6159a0 R14: 0000000000000001 R15: ffffffffaea00000
FS:  0000000000000000(0000) GS:ffff9c5dfd600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000ff14f0000 CR4: 00000000001607f0
Call Trace:
 [<ffffffffae1a74d4>] timerqueue_del+0x24/0x70
 [<ffffffffadecf5b7>] __remove_hrtimer+0x47/0xc0
 [<ffffffffadecfd50>] hrtimer_try_to_cancel+0xd0/0x130
 [<ffffffffadecfdca>] hrtimer_cancel+0x1a/0x30
 [<ffffffffadf17407>] tick_nohz_restart+0x17/0x90
 [<ffffffffadf182e1>] tick_nohz_idle_exit+0xa1/0x150
 [<ffffffffadf082a5>] cpu_startup_entry+0x175/0x1e0
 [<ffffffffae5a03f7>] rest_init+0x77/0x80
 [<ffffffffaeb8c22b>] start_kernel+0x44b/0x470
 [<ffffffffaeb8bbc8>] ? repair_env_string+0x64/0x64
 [<ffffffffaeb8b120>] ? early_idt_handler_array+0x120/0x120
 [<ffffffffaeb8b748>] x86_64_start_reservations+0x24/0x2a
 [<ffffffffaeb8b8a2>] x86_64_start_kernel+0x154/0x17b
 [<ffffffffade000d5>] start_cpu+0x5/0x14
Code: e2 fc 74 a2 48 89 c1 48 89 d0 48 8b 50 08 48 39 ca 74 48 f6 02 01 75 b3 48 8b 7a 10 48 89 c1 48 83 c9 01 48 89 78 08 48 89 42 10 <48> 89 0f 48 8b 08 48 89 0a 48 83 e1 fc 48 89 10 0f 84 ca 00 00 
RIP  [<ffffffffae1a4bf0>] rb_erase+0x120/0x3a0
 RSP <ffffffffaea03e00>
CR2: 0000000000000000

Environment

  • Red Hat Enterprise Linux 7.9.z

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content