Bug 216878 - CIFS: kernel BUG at mm/slub.c:435
Summary: CIFS: kernel BUG at mm/slub.c:435
Status: NEW
Alias: None
Product: File System
Classification: Unclassified
Component: CIFS (show other bugs)
Hardware: All Linux
: P1 blocking
Assignee: fs_cifs
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-01-03 07:57 UTC by Xiaoli Feng
Modified: 2023-01-03 07:57 UTC (History)
0 users

See Also:
Kernel Version: 6.2.0-rc1
Subsystem:
Regression: No
Bisected commit-id:


Attachments
vmcore dmesg (51.40 KB, text/plain)
2023-01-03 07:57 UTC, Xiaoli Feng
Details

Description Xiaoli Feng 2023-01-03 07:57:12 UTC
Created attachment 303517 [details]
vmcore dmesg

The test kernel is the branch for-next of git://git.samba.org/sfrench/cifs-2.6.git. The server and client are the same kernel. When client try to mount cifs. The kernel panic.

[332881.480892] kernel BUG at mm/slub.c:435! 
[332881.481816] invalid opcode: 0000 [#1] PREEMPT SMP PTI 
[332881.482958] CPU: 0 PID: 144956 Comm: mount.cifs Kdump: loaded Not tainted 6.2.0-rc1 #1 
[332881.484714] Hardware name: Red Hat KVM, BIOS 1.15.0-1.el9 04/01/2014 
[332881.486121] RIP: 0010:__kmem_cache_free+0x2bb/0x2e0 
[332881.487231] Code: 5e e9 19 e8 ff ff 49 8b 46 08 f0 48 83 28 01 0f 85 96 fe ff ff 49 8b 46 08 4c 89 f7 48 8b 40 08 e8 4a 62 8c 00 e9 81 fe ff ff <0f> 0b 4c 8b 32 4d 85 f6 0f 85 1d fe ff ff e9 b2 fe ff ff 48 8b 15 
[332881.491300] RSP: 0018:ffffa20cc33b7bb0 EFLAGS: 00010246 
[332881.492472] RAX: ffff93dcb0bd0060 RBX: ffff93dcb0bd0060 RCX: ffff93dcb0bd0070 
[332881.494049] RDX: 00000000da820000 RSI: ffffebe380000000 RDI: ffff93dc40042400 
[332881.495584] RBP: ffff93dc40042400 R08: 0000000000000000 R09: ffff93dcb0bd0060 
[332881.497155] R10: ffffa20cc33b7a90 R11: ffffffffad3e4b48 R12: ffffebe385c2f400 
[332881.498709] R13: ffffffffc0f3c0a5 R14: ffff93dca323b800 R15: ffff93dca323ba10 
[332881.500267] FS:  00007f1798617780(0000) GS:ffff93dd1a600000(0000) knlGS:0000000000000000 
[332881.502038] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 
[332881.503324] CR2: 00007f2c31de1000 CR3: 000000010334e006 CR4: 0000000000370ef0 
[332881.504889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 
[332881.506463] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 
[332881.508024] Call Trace: 
[332881.508608]  <TASK> 
[332881.509118]  sesInfoFree+0x85/0x1a0 [cifs] 
[332881.510347]  cifs_get_smb_ses+0x3ce/0x980 [cifs] 
[332881.511468]  cifs_mount_get_session+0x65/0x1e0 [cifs] 
[332881.512701]  dfs_mount_share+0x33/0x140 [cifs] 
[332881.513840]  cifs_mount+0x60/0x2d0 [cifs] 
[332881.514874]  cifs_smb3_do_mount+0xf8/0x310 [cifs] 
[332881.516059]  smb3_get_tree+0x3d/0x70 [cifs] 
[332881.517127]  vfs_get_tree+0x25/0xc0 
[332881.518369]  do_new_mount+0x17a/0x310 
[332881.519612]  __x64_sys_mount+0x107/0x140 
[332881.520920]  do_syscall_64+0x5c/0x90 
[332881.522184]  ? __do_sys_capset+0x14d/0x220 
[332881.523498]  ? syscall_exit_work+0x103/0x130 
[332881.524832]  ? syscall_exit_to_user_mode+0x12/0x30 
[332881.526288]  ? do_syscall_64+0x69/0x90 
[332881.527509]  ? exc_page_fault+0x62/0x150 
[332881.528752]  entry_SYSCALL_64_after_hwframe+0x72/0xdc 
[332881.530237] RIP: 0033:0x7f179843f7be 
[332881.531420] Code: 48 8b 0d 65 a6 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 32 a6 1b 00 f7 d8 64 89 01 48 
[332881.536167] RSP: 002b:00007ffe73666a18 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 
[332881.538195] RAX: ffffffffffffffda RBX: 0000555761170eb0 RCX: 00007f179843f7be 
[332881.540121] RDX: 000055575f65d473 RSI: 000055575f65d4da RDI: 00007ffe7366803b 
[332881.542054] RBP: 0000000000000000 R08: 0000555761170eb0 R09: 0000000000000000 
[332881.543983] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe73668030 
[332881.545903] R13: 00007f179862b000 R14: 00007f179862d90f R15: 0000555761171ee0 


server:
# cat /etc/samba/smb.conf
[global]
    workgroup = RHTS
    realm = RHQE.COM
    server signing = auto
    kerberos method = system keytab

[cifs]
    path = /mnt/testarea/server
    writeable = yes


client:
# mount //fsqe-r430-02.lab.eng.bos.redhat.com/cifs /mnt/testarea/client/ -o sec=krb5,multiuser
client_loop: send disconnect: Broken pipe

Note You need to log in before you can comment on or make changes to this bug.