Accessing CIFS share will crash the system with rcu_do_batch()

Solution Verified - Updated -

Issue

  • Mounting CIFS/DFS share will cause a OS crash.
  • RHEL 8 system abruptly crashes after accessing a CIFS/DFS share.
  • ls on CIFS/DFS share crashes the system.
  • Cifs mount of DFS path without permission to the directory crashes the system.
  • System crashes with Panic message PANIC: "kernel BUG at mm/slub.c:314!"
  • Another pattern of crash with below messages:
[18916003.847233] CIFS: Attempting to mount \\128.2.201.214\NT_BACKUP
[18916003.871613] CIFS: VFS: cifs_read_super: get root inode failed
[18916003.872939] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[18916003.872969] CIFS: Attempting to mount \\128.2.201.214\NT_BACKUP
[18916003.874419] CIFS: Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE
[18916003.874422] CIFS: VFS: \\128.2.201.214 Send error in SessSetup = -13
[18916003.874446] CIFS: VFS: cifs_mount failed w/return code = -13
[18916003.874661] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[18916003.874691] CIFS: Attempting to mount \\128.2.201.214\NT_BACKUP
[18916003.893643] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000
[18916003.893707] PGD 0 P4D 0 
[18916003.893732] Oops: 0010 [#1] SMP NOPTI
[18916003.893764] CPU: 6 PID: 0 Comm: swapper/6 Kdump: loaded Tainted: G           OE    --------- -  - 4.18.0-348.el8.x86_64 #1
[18916003.893837] Hardware name: HPE ProLiant DL380 Gen10/ProLiant DL380 Gen10, BIOS U30 11/24/2021
[18916003.893897] RIP: 0010:0x0
[18916003.893923] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6.
[18916003.893972] RSP: 0018:ffffad5a064a0ee8 EFLAGS: 00010286
[18916003.894011] RAX: ffff8b4078b80ae8 RBX: 000000000000000a RCX: 000000003ae8e5e0
[18916003.894061] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff8b4078b80ae8
[18916003.894109] RBP: 0000000000000000 R08: 000000000001a660 R09: 0000000000000028
[18916003.894126] R10: 0000000000000000 R11: 004334386b5290c0 R12: 0000000000000000
[18916003.894143] R13: ffff8b46bfdaaf40 R14: ffffffffb136c67a R15: ffff8b46bfdaafd0
[18916003.894160] FS:  0000000000000000(0000) GS:ffff8b46bfd80000(0000) knlGS:0000000000000000
[18916003.894179] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[18916003.894193] CR2: ffffffffffffffd6 CR3: 0000000b59a10006 CR4: 00000000007706e0
[18916003.894209] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[18916003.894226] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[18916003.894242] PKRU: 55555554
[18916003.894250] Call Trace:
[18916003.894257]  <IRQ>
[18916003.894266]  rcu_do_batch+0x1bf/0x410
[18916003.894279]  rcu_core+0x145/0x200
[18916003.894290]  __do_softirq+0xd7/0x2d6
[18916003.894302]  irq_exit+0xf7/0x100
[18916003.894312]  smp_apic_timer_interrupt+0x74/0x130
[18916003.894325]  apic_timer_interrupt+0xf/0x20
[18916003.894336]  </IRQ>
[18916003.894344] RIP: 0010:cpuidle_enter_state+0xdb/0x3d0
[18916003.894358] Code: e8 7a 12 9e ff 80 7c 24 07 00 74 17 9c 58 0f 1f 44 00 00 f6 c4 02 0f 85 a9 02 00 00 31 ff e8 ac a8 a4 ff fb 66 0f 1f 44 00 00 <45> 85 f6 0f 88 28 01 00 00 49 63 d6 48 8b 4c 24 10 48 2b 4c 24 08
[18916003.894399] RSP: 0018:ffffad5a06317e60 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[18916003.894417] RAX: ffff8b46bfdaa180 RBX: ffffffffb2935c48 RCX: 000000000000001f
[18916003.894434] RDX: 004334015ca65304 RSI: 000000003351fed6 RDI: 0000000000000000
[18916003.894451] RBP: ffff8b46bfdb5910 R08: 0000000000000002 R09: 00000000000299c0
[18916003.894467] R10: 00bd1c835ef63192 R11: ffff8b46bfda8e84 R12: 0000000000000003
[18916003.894484] R13: ffffffffb2935ae0 R14: 0000000000000003 R15: 0000000000000003
[18916003.894503]  cpuidle_enter+0x2c/0x40
[18916003.894514]  do_idle+0x234/0x260
[18916003.895064]  cpu_startup_entry+0x6f/0x80
[18916003.895602]  start_secondary+0x19b/0x1e0
[18916003.896129]  secondary_startup_64_no_verify+0xc2/0xcb
[18916003.896641] Modules linked in: des_generic md4 cmac nls_utf8 cifs rdma_cm iw_cm ib_cm ib_core libarc4 snumbd26(OE) snapapi26(OE) ipt_REJECT nf_reject_ipv4 xt_LOG nf_log_syslog nft_counter nft_compat RedCastle(OE) nf_tables nfnetlink nfsv3 nfs_acl rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace sunrpc fscache vfat fat dm_round_robin dm_multipath intel_rapl_msr intel_rapl_common isst_if_common nfit libnvdimm x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel ipmi_ssif kvm irqbypass crct10dif_pclmul crc32_pclmul ghash_clmulni_intel rapl intel_cstate intel_uncore pcspkr ses enclosure acpi_ipmi ipmi_si ipmi_devintf hpilo hpwdt ipmi_msghandler mei_me acpi_tad ioatdma mei dca lpc_ich wmi acpi_power_meter binfmt_misc xfs libcrc32c sd_mod sr_mod cdrom sg qla2xxx mgag200 drm_kms_helper syscopyarea ahci sysfillrect sysimgblt fb_sys_fops libahci drm i40e nvme_fc smartpqi nvme_fabrics libata crc32c_intel nvme_core scsi_transport_sas t10_pi scsi_transport_fc i2c_algo_bit dm_mirror
[18916003.896670]  dm_region_hash dm_log dm_mod
[18916003.901606] CR2: 0000000000000000

Environment

  • RHEL 8 (kernels above 4.18.0-193.el8.x86_64)
  • CIFS/DFS

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content