Accessing CIFS share will crash the system with rcu_do_batch()
Issue
- Mounting CIFS/DFS share will cause a OS crash.
- RHEL 8 system abruptly crashes after accessing a CIFS/DFS share.
ls
on CIFS/DFS share crashes the system.- Cifs mount of DFS path without permission to the directory crashes the system.
- System crashes with Panic message
PANIC: "kernel BUG at mm/slub.c:314!"
- Another pattern of crash with below messages:
[18916003.847233] CIFS: Attempting to mount \\128.2.201.214\NT_BACKUP
[18916003.871613] CIFS: VFS: cifs_read_super: get root inode failed
[18916003.872939] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[18916003.872969] CIFS: Attempting to mount \\128.2.201.214\NT_BACKUP
[18916003.874419] CIFS: Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE
[18916003.874422] CIFS: VFS: \\128.2.201.214 Send error in SessSetup = -13
[18916003.874446] CIFS: VFS: cifs_mount failed w/return code = -13
[18916003.874661] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[18916003.874691] CIFS: Attempting to mount \\128.2.201.214\NT_BACKUP
[18916003.893643] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000
[18916003.893707] PGD 0 P4D 0
[18916003.893732] Oops: 0010 [#1] SMP NOPTI
[18916003.893764] CPU: 6 PID: 0 Comm: swapper/6 Kdump: loaded Tainted: G OE --------- - - 4.18.0-348.el8.x86_64 #1
[18916003.893837] Hardware name: HPE ProLiant DL380 Gen10/ProLiant DL380 Gen10, BIOS U30 11/24/2021
[18916003.893897] RIP: 0010:0x0
[18916003.893923] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6.
[18916003.893972] RSP: 0018:ffffad5a064a0ee8 EFLAGS: 00010286
[18916003.894011] RAX: ffff8b4078b80ae8 RBX: 000000000000000a RCX: 000000003ae8e5e0
[18916003.894061] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff8b4078b80ae8
[18916003.894109] RBP: 0000000000000000 R08: 000000000001a660 R09: 0000000000000028
[18916003.894126] R10: 0000000000000000 R11: 004334386b5290c0 R12: 0000000000000000
[18916003.894143] R13: ffff8b46bfdaaf40 R14: ffffffffb136c67a R15: ffff8b46bfdaafd0
[18916003.894160] FS: 0000000000000000(0000) GS:ffff8b46bfd80000(0000) knlGS:0000000000000000
[18916003.894179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[18916003.894193] CR2: ffffffffffffffd6 CR3: 0000000b59a10006 CR4: 00000000007706e0
[18916003.894209] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[18916003.894226] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[18916003.894242] PKRU: 55555554
[18916003.894250] Call Trace:
[18916003.894257] <IRQ>
[18916003.894266] rcu_do_batch+0x1bf/0x410
[18916003.894279] rcu_core+0x145/0x200
[18916003.894290] __do_softirq+0xd7/0x2d6
[18916003.894302] irq_exit+0xf7/0x100
[18916003.894312] smp_apic_timer_interrupt+0x74/0x130
[18916003.894325] apic_timer_interrupt+0xf/0x20
[18916003.894336] </IRQ>
[18916003.894344] RIP: 0010:cpuidle_enter_state+0xdb/0x3d0
[18916003.894358] Code: e8 7a 12 9e ff 80 7c 24 07 00 74 17 9c 58 0f 1f 44 00 00 f6 c4 02 0f 85 a9 02 00 00 31 ff e8 ac a8 a4 ff fb 66 0f 1f 44 00 00 <45> 85 f6 0f 88 28 01 00 00 49 63 d6 48 8b 4c 24 10 48 2b 4c 24 08
[18916003.894399] RSP: 0018:ffffad5a06317e60 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[18916003.894417] RAX: ffff8b46bfdaa180 RBX: ffffffffb2935c48 RCX: 000000000000001f
[18916003.894434] RDX: 004334015ca65304 RSI: 000000003351fed6 RDI: 0000000000000000
[18916003.894451] RBP: ffff8b46bfdb5910 R08: 0000000000000002 R09: 00000000000299c0
[18916003.894467] R10: 00bd1c835ef63192 R11: ffff8b46bfda8e84 R12: 0000000000000003
[18916003.894484] R13: ffffffffb2935ae0 R14: 0000000000000003 R15: 0000000000000003
[18916003.894503] cpuidle_enter+0x2c/0x40
[18916003.894514] do_idle+0x234/0x260
[18916003.895064] cpu_startup_entry+0x6f/0x80
[18916003.895602] start_secondary+0x19b/0x1e0
[18916003.896129] secondary_startup_64_no_verify+0xc2/0xcb
[18916003.896641] Modules linked in: des_generic md4 cmac nls_utf8 cifs rdma_cm iw_cm ib_cm ib_core libarc4 snumbd26(OE) snapapi26(OE) ipt_REJECT nf_reject_ipv4 xt_LOG nf_log_syslog nft_counter nft_compat RedCastle(OE) nf_tables nfnetlink nfsv3 nfs_acl rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace sunrpc fscache vfat fat dm_round_robin dm_multipath intel_rapl_msr intel_rapl_common isst_if_common nfit libnvdimm x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel ipmi_ssif kvm irqbypass crct10dif_pclmul crc32_pclmul ghash_clmulni_intel rapl intel_cstate intel_uncore pcspkr ses enclosure acpi_ipmi ipmi_si ipmi_devintf hpilo hpwdt ipmi_msghandler mei_me acpi_tad ioatdma mei dca lpc_ich wmi acpi_power_meter binfmt_misc xfs libcrc32c sd_mod sr_mod cdrom sg qla2xxx mgag200 drm_kms_helper syscopyarea ahci sysfillrect sysimgblt fb_sys_fops libahci drm i40e nvme_fc smartpqi nvme_fabrics libata crc32c_intel nvme_core scsi_transport_sas t10_pi scsi_transport_fc i2c_algo_bit dm_mirror
[18916003.896670] dm_region_hash dm_log dm_mod
[18916003.901606] CR2: 0000000000000000
Environment
- RHEL 8 (kernels above
4.18.0-193.el8.x86_64
) - CIFS/DFS
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.