Two warnings, "WARNING: CPU: x PID: xxxxx at kernel/timer.c:1271 requeue_timers+0x143/0x160" and "WARNING: CPU: x PID: xxxxx at lib/timerqueue.c:74 timerqueue_del+0x59/0x70" followed by NULL pointer dereference crash triggered in rb_erase()
Issue
- The two warnings, "WARNING: CPU: x PID: xxxxx at kernel/timer.c:1271 requeue_timers+0x143/0x160" and "WARNING: CPU: x PID: xxxxx at lib/timerqueue.c:74 timerqueue_del+0x59/0x70" followed by NULL pointer dereference crash triggered in rb_erase() called within timerqueue_del()
 
------------[ cut here ]------------
WARNING: CPU: 2 PID: 27064 at kernel/timer.c:1271 requeue_timers+0x143/0x160
Modules linked in: twnotify(OE) nfsv3 nfs_acl rpcsec_gss_krb5 nfsv4 dns_resolver nfs lockd grace fscache vmw_vsock_vmci_transport vsock sb_edac iosf_mbi crc32_pclmul ppdev ghash_clmulni_intel aesni_intel lrw gf128mul glue_helper ablk_helper cryptd vmw_balloon sg joydev i2c_piix4 pcspkr vmw_vmci parport_pc parport auth_rpcgss sunrpc binfmt_misc ip_tables xfs libcrc32c sr_mod cdrom ata_generic pata_acpi vmwgfx drm_kms_helper syscopyarea ata_piix sysfillrect sysimgblt fb_sys_fops sd_mod ttm crc_t10dif crct10dif_generic libata drm nfit libnvdimm crct10dif_pclmul crct10dif_common crc32c_intel serio_raw vmxnet3 vmw_pvscsi drm_panel_orientation_quirks dm_mirror dm_region_hash dm_log dm_mod fuse [last unloaded: twnotify]
CPU: 2 PID: 27064 Comm: java Kdump: loaded Tainted: G           OE  ------------   3.10.0-1160.108.1.el7.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020
Call Trace:
 <IRQ>  [<ffffffffae5b1bec>] dump_stack+0x19/0x1f
 [<ffffffffade9f868>] __warn+0xd8/0x100
 [<ffffffffade9f9ad>] warn_slowpath_null+0x1d/0x30
 [<ffffffffadeb2683>] requeue_timers+0x143/0x160
 [<ffffffffadeb32b0>] run_timer_softirq+0x310/0x340
 [<ffffffffadee0e92>] ? try_to_wake_up+0x192/0x3a0
 [<ffffffffadea9595>] __do_softirq+0xf5/0x290
 [<ffffffffae5c8aac>] call_softirq+0x1c/0x30
 [<ffffffffade30825>] do_softirq+0x65/0xa0
 [<ffffffffadea9945>] irq_exit+0x115/0x120
 [<ffffffffae5ca058>] smp_apic_timer_interrupt+0x48/0x60
 [<ffffffffae5c63f2>] apic_timer_interrupt+0x172/0x180
 <EOI>  [<ffffffffadeda8a7>] ? finish_task_switch+0x57/0x1c0
 [<ffffffffae5b7920>] __schedule+0x320/0x680
 [<ffffffffae5b7ca9>] schedule+0x29/0x70
 [<ffffffffadf19856>] futex_wait_queue_me+0xc6/0x130
 [<ffffffffadf1a65b>] futex_wait+0x17b/0x290
 [<ffffffffadecf340>] ? hrtimer_get_res+0x50/0x50
 [<ffffffffadf19834>] ? futex_wait_queue_me+0xa4/0x130
 [<ffffffffadf1c356>] do_futex+0x106/0x4d0
 [<ffffffffadf1c7a0>] SyS_futex+0x80/0x190
 [<ffffffffae5c539a>] system_call_fastpath+0x25/0x2a
---[ end trace f4e19b63d479c0e4 ]---
IPv4: martian source 10.148.0.144 from 10.148.9.225, on dev eth1
ll header: 00000000: 00 50 56 b5 4a 21 bc 26 c7 ed f3 cf 08 00        .PV.J!.&......
IPv4: martian source 10.148.0.144 from 10.148.9.225, on dev eth1
ll header: 00000000: 00 50 56 b5 4a 21 bc 26 c7 ed f3 cf 08 00        .PV.J!.&......
IPv4: martian source 10.148.0.144 from 10.148.9.225, on dev eth1
ll header: 00000000: 00 50 56 b5 4a 21 bc 26 c7 ed f3 cf 08 00        .PV.J!.&......
------------[ cut here ]------------
WARNING: CPU: 0 PID: 0 at lib/timerqueue.c:74 timerqueue_del+0x59/0x70
Modules linked in: twnotify(OE) nfsv3 nfs_acl rpcsec_gss_krb5 nfsv4 dns_resolver nfs lockd grace fscache vmw_vsock_vmci_transport vsock sb_edac iosf_mbi crc32_pclmul ppdev ghash_clmulni_intel aesni_intel lrw gf128mul glue_helper ablk_helper cryptd vmw_balloon sg joydev i2c_piix4 pcspkr vmw_vmci parport_pc parport auth_rpcgss sunrpc binfmt_misc ip_tables xfs libcrc32c sr_mod cdrom ata_generic pata_acpi vmwgfx drm_kms_helper syscopyarea ata_piix sysfillrect sysimgblt fb_sys_fops sd_mod ttm crc_t10dif crct10dif_generic libata drm nfit libnvdimm crct10dif_pclmul crct10dif_common crc32c_intel serio_raw vmxnet3 vmw_pvscsi drm_panel_orientation_quirks dm_mirror dm_region_hash dm_log dm_mod fuse [last unloaded: twnotify]
CPU: 0 PID: 0 Comm: swapper/0 Kdump: loaded Tainted: G        W  OE  ------------   3.10.0-1160.108.1.el7.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020
Call Trace:
 [<ffffffffae5b1bec>] dump_stack+0x19/0x1f
 [<ffffffffade9f868>] __warn+0xd8/0x100
 [<ffffffffade9f9ad>] warn_slowpath_null+0x1d/0x30
 [<ffffffffae1a7509>] timerqueue_del+0x59/0x70
 [<ffffffffadecf5b7>] __remove_hrtimer+0x47/0xc0
 [<ffffffffadecf8c8>] hrtimer_start_range_ns+0x298/0x3c0
 [<ffffffffadecfa02>] hrtimer_start+0x12/0x20
 [<ffffffffadf17a00>] tick_nohz_stop_sched_tick+0x2c0/0x390
 [<ffffffffadf17b6f>] __tick_nohz_idle_enter+0x9f/0x170
 [<ffffffffadf1811f>] tick_nohz_idle_enter+0x3f/0x70
 [<ffffffffadf081d7>] cpu_startup_entry+0xa7/0x1e0
 [<ffffffffae5a03f7>] rest_init+0x77/0x80
 [<ffffffffaeb8c22b>] start_kernel+0x44b/0x470
 [<ffffffffaeb8bbc8>] ? repair_env_string+0x64/0x64
 [<ffffffffaeb8b120>] ? early_idt_handler_array+0x120/0x120
 [<ffffffffaeb8b748>] x86_64_start_reservations+0x24/0x2a
 [<ffffffffaeb8b8a2>] x86_64_start_kernel+0x154/0x17b
 [<ffffffffade000d5>] start_cpu+0x5/0x14
---[ end trace f4e19b63d479c0e5 ]---
BUG: unable to handle kernel NULL pointer dereference at           (null)
IP: [<ffffffffae1a4bf0>] rb_erase+0x120/0x3a0
PGD 8000000a89b08067 PUD 9ecfbf067 PMD 0 
Oops: 0002 [#1] SMP 
Modules linked in: twnotify(OE) nfsv3 nfs_acl rpcsec_gss_krb5 nfsv4 dns_resolver nfs lockd grace fscache vmw_vsock_vmci_transport vsock sb_edac iosf_mbi crc32_pclmul ppdev ghash_clmulni_intel aesni_intel lrw gf128mul glue_helper ablk_helper cryptd vmw_balloon sg joydev i2c_piix4 pcspkr vmw_vmci parport_pc parport auth_rpcgss sunrpc binfmt_misc ip_tables xfs libcrc32c sr_mod cdrom ata_generic pata_acpi vmwgfx drm_kms_helper syscopyarea ata_piix sysfillrect sysimgblt fb_sys_fops sd_mod ttm crc_t10dif crct10dif_generic libata drm nfit libnvdimm crct10dif_pclmul crct10dif_common crc32c_intel serio_raw vmxnet3 vmw_pvscsi drm_panel_orientation_quirks dm_mirror dm_region_hash dm_log dm_mod fuse [last unloaded: twnotify]
CPU: 0 PID: 0 Comm: swapper/0 Kdump: loaded Tainted: G        W  OE  ------------   3.10.0-1160.108.1.el7.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020
task: ffffffffaea18480 ti: ffffffffaea00000 task.ti: ffffffffaea00000
RIP: 0010:[<ffffffffae1a4bf0>]  [<ffffffffae1a4bf0>] rb_erase+0x120/0x3a0
RSP: 0018:ffffffffaea03e00  EFLAGS: 00010082
RAX: ffff9c58888e7db8 RBX: ffff9c5dfd615f80 RCX: ffff9c58888e7db9
RDX: ffff9c5887467d38 RSI: ffff9c5dfd6159f0 RDI: 0000000000000000
RBP: ffffffffaea03e00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000004 R11: 0000000000000005 R12: ffff9c5dfd6159f0
R13: ffff9c5dfd6159a0 R14: 0000000000000001 R15: ffffffffaea00000
FS:  0000000000000000(0000) GS:ffff9c5dfd600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000ff14f0000 CR4: 00000000001607f0
Call Trace:
 [<ffffffffae1a74d4>] timerqueue_del+0x24/0x70
 [<ffffffffadecf5b7>] __remove_hrtimer+0x47/0xc0
 [<ffffffffadecfd50>] hrtimer_try_to_cancel+0xd0/0x130
 [<ffffffffadecfdca>] hrtimer_cancel+0x1a/0x30
 [<ffffffffadf17407>] tick_nohz_restart+0x17/0x90
 [<ffffffffadf182e1>] tick_nohz_idle_exit+0xa1/0x150
 [<ffffffffadf082a5>] cpu_startup_entry+0x175/0x1e0
 [<ffffffffae5a03f7>] rest_init+0x77/0x80
 [<ffffffffaeb8c22b>] start_kernel+0x44b/0x470
 [<ffffffffaeb8bbc8>] ? repair_env_string+0x64/0x64
 [<ffffffffaeb8b120>] ? early_idt_handler_array+0x120/0x120
 [<ffffffffaeb8b748>] x86_64_start_reservations+0x24/0x2a
 [<ffffffffaeb8b8a2>] x86_64_start_kernel+0x154/0x17b
 [<ffffffffade000d5>] start_cpu+0x5/0x14
Code: e2 fc 74 a2 48 89 c1 48 89 d0 48 8b 50 08 48 39 ca 74 48 f6 02 01 75 b3 48 8b 7a 10 48 89 c1 48 83 c9 01 48 89 78 08 48 89 42 10 <48> 89 0f 48 8b 08 48 89 0a 48 83 e1 fc 48 89 10 0f 84 ca 00 00 
RIP  [<ffffffffae1a4bf0>] rb_erase+0x120/0x3a0
 RSP <ffffffffaea03e00>
CR2: 0000000000000000
  Environment
- Red Hat Enterprise Linux 7.9.z
 
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.