CIFS crash mounting DFS share in 22.04

[Matthew Hoberg]

I am trying to mount a DFS share in 22.04 and receive a kernel issue with cifs when trying to browse. The DFS share is a combination of 2 shared folders on server into one single share.

lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=22.04
DISTRIB_CODENAME=jammy
DISTRIB_DESCRIPTION="Ubuntu 22.04 LTS"

mount -v -t cifs -o rw,credentials=/etc/creds.conf,iocharset=utf8,file_mode=0777,dir_mode=0777 //server/dfsroot /shares/dfs-share

The mount command doesn't show error, but show "Killed" when trying to list directory.

In dmesg I see the following error.
[ 277.443961] BUG: kernel NULL pointer dereference, address: 0000000000000000
[ 277.446091] #PF: supervisor instruction fetch in kernel mode
[ 277.447677] #PF: error_code(0x0010) - not-present page
[ 277.449108] PGD 0 P4D 0
[ 277.449613] Oops: 0010 [#1] SMP PTI
[ 277.450456] CPU: 0 PID: 741 Comm: ls Not tainted 5.15.0-1005-kvm #5-Ubuntu
[ 277.452491] Hardware name: Nutanix AHV, BIOS 0.0.0 02/06/2015
[ 277.454110] RIP: 0010:0x0000000000000000
[ 277.455096] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6.
[ 277.457115] RSP: 0018:ffffb443007c3b50 EFLAGS: 00010293
[ 277.458566] RAX: 0000000000000000 RBX: ffffb443007c3cf4 RCX: 0000000000000001
[ 277.460693] RDX: 0000000000000000 RSI: 0000000000220004 RDI: ffffb443007c3bc0
[ 277.463268] RBP: ffffb443007c3b98 R08: 0000000000000004 R09: ffffb443007c3a38
[ 277.466096] R10: 000000005fbea222 R11: 00000000bbd3941c R12: 0000000000000004
[ 277.468906] R13: 0000000000000000 R14: ffffb443007c3bc0 R15: 0000000000000000
[ 277.471698] FS: 00007fa2a8ad6800(0000) GS:ffff953afaa00000(0000) knlGS:0000000000000000
[ 277.474735] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 277.476383] CR2: ffffffffffffffd6 CR3: 000000000b370006 CR4: 00000000000206b0
[ 277.478882] Call Trace:
[ 277.479496] <TASK>
[ 277.479955] 0xffffffffab8cc4a5
[ 277.480883] ? 0xffffffffab8ceae7
[ 277.481883] 0xffffffffab8ce02d
[ 277.482803] ? 0xffffffffab8ce23f
[ 277.483805] 0xffffffffab8ce6eb
[ 277.484724] ? 0xffffffffab8ceae7
[ 277.485716] 0xffffffffab8cf839
[ 277.486628] 0xffffffffab8d32ba
[ 277.487546] ? 0xffffffffab8b986b
[ 277.488549] ? 0xffffffffabb1f8c4
[ 277.489556] ? 0xffffffffab8d2b27
[ 277.490571] 0xffffffffab8d34ca
[ 277.491493] 0xffffffffab8c67b5
[ 277.492424] ? 0xffffffffab827f1d
[ 277.493423] 0xffffffffab8c7170
[ 277.494341] ? 0xffffffffab8280e8
[ 277.495343] ? 0xffffffffab749e59
[ 277.496338] ? 0xffffffffab749f29
[ 277.497331] ? 0xffffffffabec05e1
[ 277.498312] 0xffffffffab8c71ca
[ 277.499043] 0xffffffffabebdea4
[ 277.499743] ? 0xffffffffabec0699
[ 277.500517] ? 0xffffffffabec01b3
[ 277.501293] ? 0xffffffffac000a65
[ 277.502069] 0xffffffffac00007c
[ 277.502775] RIP: 0033:0x00007fa2a8c841ee
[ 277.503767] Code: ff 64 c7 00 16 00 00 00 e9 8e fd ff ff e8 4a 25 02 00 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 89 ca b8 4c 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 2a 41 89 c1 85 c0 74 0f 48 8b 05 0c 4c 10 00
[ 277.510054] RSP: 002b:00007ffd9922c858 EFLAGS: 00000246 ORIG_RAX: 000000000000014c
[ 277.512340] RAX: ffffffffffffffda RBX: 00005629a7abc108 RCX: 00007fa2a8c841ee
[ 277.514486] RDX: 0000000000000100 RSI: 00007ffd9922c990 RDI: 00000000ffffff9c
[ 277.516608] RBP: 0000000000000002 R08: 00007ffd9922c860 R09: 0000000000000005
[ 277.518721] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fa2a868a083
[ 277.520856] R13: 00007ffd9922c990 R14: 0000000000000003 R15: 0000000000000000
[ 277.522986] </TASK>
[ 277.523363] Modules linked in: cmac nls_utf8 cifs cifs_arc4 cifs_md4 dns_resolver sunrpc nls_iso8859_1 nls_cp437 vfat fat loop pata_acpi dm_multipath dm_mod fuse configfs efivarfs ip_tables x_tables
[ 277.529854] CR2: 0000000000000000
[ 277.530627] ---[ end trace bd7cbad450f78cc5 ]---
[ 277.531864] RIP: 0010:0x0000000000000000
[ 277.532866] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6.
[ 277.534884] RSP: 0018:ffffb443007c3b50 EFLAGS: 00010293
[ 277.536319] RAX: 0000000000000000 RBX: ffffb443007c3cf4 RCX: 0000000000000001
[ 277.538436] RDX: 0000000000000000 RSI: 0000000000220004 RDI: ffffb443007c3bc0
[ 277.540536] RBP: ffffb443007c3b98 R08: 0000000000000004 R09: ffffb443007c3a38
[ 277.542647] R10: 000000005fbea222 R11: 00000000bbd3941c R12: 0000000000000004
[ 277.544746] R13: 0000000000000000 R14: ffffb443007c3bc0 R15: 0000000000000000
[ 277.546861] FS: 00007fa2a8ad6800(0000) GS:ffff953afaa00000(0000) knlGS:0000000000000000
[ 277.549309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 277.550934] CR2: ffffffffffffffd6 CR3: 000000000b370006 CR4: 00000000000206b0
[ 281.886307] BUG: kernel NULL pointer dereference, address: 0000000000000000
[ 281.888856] #PF: supervisor instruction fetch in kernel mode
[ 281.890757] #PF: error_code(0x0010) - not-present page
[ 281.892412] PGD 0 P4D 0
[ 281.893007] Oops: 0010 [#2] SMP PTI
[ 281.893984] CPU: 0 PID: 746 Comm: ls Tainted: G D 5.15.0-1005-kvm #5-Ubuntu
[ 281.896918] Hardware name: Nutanix AHV, BIOS 0.0.0 02/06/2015
[ 281.898825] RIP: 0010:0x0000000000000000
[ 281.899990] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6.
[ 281.902350] RSP: 0018:ffffb44300d87ab0 EFLAGS: 00010293
[ 281.904093] RAX: 0000000000000000 RBX: ffffb44300d87c54 RCX: 0000000000000001
[ 281.906556] RDX: 0000000000000000 RSI: 0000000000220004 RDI: ffffb44300d87b20
[ 281.909042] RBP: ffffb44300d87af8 R08: 0000000000000004 R09: 0000000000000064
[ 281.911515] R10: ffff953acd6b4cf8 R11: 0000000000000001 R12: 0000000000000004
[ 281.914350] R13: 0000000000000000 R14: ffffb44300d87b20 R15: 0000000000000000
[ 281.916856] FS: 00007f6652df4800(0000) GS:ffff953afaa00000(0000) knlGS:0000000000000000
[ 281.919756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 281.921647] CR2: ffffffffffffffd6 CR3: 000000001122a006 CR4: 00000000000206b0
[ 281.924157] Call Trace:
[ 281.924702] <TASK>
[ 281.925106] 0xffffffffab8cc4a5
[ 281.925936] 0xffffffffab8ce02d
[ 281.926831] ? 0xffffffffab8ce2e4
[ 281.927735] 0xffffffffab8ce6eb
[ 281.928565] 0xffffffffab8cf839
[ 281.929398] 0xffffffffab8d32ba
[ 281.930241] ? 0xffffffffab8b986b
[ 281.931163] ? 0xffffffffabb1f8c4
[ 281.932065] ? 0xffffffffab8d2b27
[ 281.932976] 0xffffffffab8d34ca
[ 281.933808] 0xffffffffab8c67b5
[ 281.934624] 0xffffffffab8c7170
[ 281.935477] ? 0xffffffffc04d6049
[ 281.936381] ? 0xffffffffc04cd9e3
[ 281.937284] ? 0xffffffffc04d6051
[ 281.938178] ? 0xffffffffab827ca6
[ 281.939108] 0xffffffffab8c71ca
[ 281.939946] 0xffffffffabebdea4
[ 281.940774] ? 0xffffffffab8280e8
[ 281.941661] ? 0xffffffffab749e59
[ 281.942588] ? 0xffffffffab749f29
[ 281.943488] ? 0xffffffffabec05e1
[ 281.944386] ? 0xffffffffabebdeb1
[ 281.945281] 0xffffffffac00007c
[ 281.946107] RIP: 0033:0x00007f6652fa21ee
[ 281.947254] Code: ff 64 c7 00 16 00 00 00 e9 8e fd ff ff e8 4a 25 02 00 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 89 ca b8 4c 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 2a 41 89 c1 85 c0 74 0f 48 8b 05 0c 4c 10 00
[ 281.954528] RSP: 002b:00007ffc37b0f6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000014c
[ 281.957173] RAX: ffffffffffffffda RBX: 00005567df50c5a8 RCX: 00007f6652fa21ee
[ 281.959654] RDX: 0000000000000100 RSI: 00007ffc37b0f800 RDI: 00000000ffffff9c
[ 281.962130] RBP: 000000000000025e R08: 00007ffc37b0f6d0 R09: 0000000000000005
[ 281.964599] R10: 000000000000025e R11: 0000000000000246 R12: 00007f66529a8083
[ 281.967076] R13: 00007ffc37b0f800 R14: 0000000000000003 R15: 0000000000000000
[ 281.969569] </TASK>
[ 281.970010] Modules linked in: cmac nls_utf8 cifs cifs_arc4 cifs_md4 dns_resolver sunrpc nls_iso8859_1 nls_cp437 vfat fat loop pata_acpi dm_multipath dm_mod fuse configfs efivarfs ip_tables x_tables
[ 281.976827] CR2: 0000000000000000
[ 281.977716] ---[ end trace bd7cbad450f78cc6 ]---
[ 281.979186] RIP: 0010:0x0000000000000000
[ 281.980352] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6.
[ 281.982716] RSP: 0018:ffffb443007c3b50 EFLAGS: 00010293
[ 281.984414] RAX: 0000000000000000 RBX: ffffb443007c3cf4 RCX: 0000000000000001
[ 281.986893] RDX: 0000000000000000 RSI: 0000000000220004 RDI: ffffb443007c3bc0
[ 281.989367] RBP: ffffb443007c3b98 R08: 0000000000000004 R09: ffffb443007c3a38
[ 281.991849] R10: 000000005fbea222 R11: 00000000bbd3941c R12: 0000000000000004
[ 281.994319] R13: 0000000000000000 R14: ffffb443007c3bc0 R15: 0000000000000000
[ 281.996789] FS: 00007f6652df4800(0000) GS:ffff953afaa00000(0000) knlGS:0000000000000000
[ 281.999670] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 282.001572] CR2: ffffffffffffffd6 CR3: 000000001122a006 CR4: 00000000000206b0
---
ProblemType: Bug
AlsaDevices: Error: command ['ls', '-l', '/dev/snd/'] failed with exit code 2: ls: cannot access '/dev/snd/': No such file or directory
AplayDevices: Error: [Errno 2] No such file or directory: 'aplay'
ApportVersion: 2.20.11-0ubuntu82.1
Architecture: amd64
ArecordDevices: Error: [Errno 2] No such file or directory: 'arecord'
CRDA: N/A
CasperMD5CheckResult: unknown
DistroRelease: Ubuntu 22.04
IwConfig: Error: [Errno 2] No such file or directory: 'iwconfig'
Lsusb: Error: command ['lsusb'] failed with exit code 1:
Lsusb-t: Error: command ['lsusb', '-t'] failed with exit code 1: /sys/bus/usb/devices: No such file or directory
Lsusb-v: Error: command ['lsusb', '-v'] failed with exit code 1:
MachineType: Nutanix AHV
Package: linux (not installed)
PciMultimedia:

ProcEnviron:
 TERM=xterm-256color
 PATH=(custom, no user)
 LANG=C.UTF-8
 SHELL=/bin/bash
ProcFB: 0 EFI VGA
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-5.15.0-1005-kvm root=PARTUUID=fd888548-f3bf-4766-8e25-46b2dee0a776 ro console=tty1 console=ttyS0 panic=-1
ProcVersionSignature: Ubuntu 5.15.0-1005.5-kvm 5.15.30
RelatedPackageVersions:
 linux-restricted-modules-5.15.0-1005-kvm N/A
 linux-backports-modules-5.15.0-1005-kvm N/A
 linux-firmware N/A
RfKill: Error: [Errno 2] No such file or directory: 'rfkill'
Tags: jammy uec-images
Uname: Linux 5.15.0-1005-kvm x86_64
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: N/A
_MarkForUpload: True
dmi.bios.date: 02/06/2015
dmi.bios.release: 0.0
dmi.bios.vendor: EFI Development Kit II / OVMF
dmi.bios.version: 0.0.0
dmi.chassis.type: 1
dmi.chassis.vendor: Red Hat
dmi.chassis.version: RHEL 7.6.0 PC (i440FX + PIIX, 1996)
dmi.modalias: dmi:bvnEFIDevelopmentKitII/OVMF:bvr0.0.0:bd02/06/2015:br0.0:svnNutanix:pnAHV:pvrRHEL7.6.0PC(i440FX+PIIX,1996):cvnRedHat:ct1:cvrRHEL7.6.0PC(i440FX+PIIX,1996):sku:
dmi.product.family: Red Hat Enterprise Linux
dmi.product.name: AHV
dmi.product.version: RHEL 7.6.0 PC (i440FX + PIIX, 1996)
dmi.sys.vendor: Nutanix

[Ubuntu Foundations Team Bug Bot (crichton)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. It seems that your bug report is not filed about a specific source package though, rather it is just filed against Ubuntu in general. It is important that bug reports be filed about source packages so that people interested in the package can find the bugs about it. You can find some hints about determining what package your bug might be about at https://wiki.ubuntu.com/Bugs/FindRightPackage. You might also ask for help in the #ubuntu-bugs irc channel on Libera.chat.

To change the source package that this bug is filed about visit https://bugs.launchpad.net/ubuntu/+bug/1973678/+editstatus and add the package name in the text box next to the word Package.

[This is an automated message. I apologize if it reached you inappropriately; please just reply to this message indicating so.]

[Matthew Hoberg (hobermat)]

This looks to be issue with running the cloud kvm image, but not on the generic cloud image.

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

This bug is missing log files that will aid in diagnosing the problem. While running an Ubuntu kernel (not a mainline or third-party kernel) please enter the following command in a terminal window:

apport-collect 1973678

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

[Matthew Hoberg (hobermat)]

apport information

[Matthew Hoberg (hobermat)]

apport information

[Matthew Hoberg (hobermat)]

apport information

[Matthew Hoberg (hobermat)]

apport information

[Matthew Hoberg (hobermat)]

apport information

[Matthew Hoberg (hobermat)]

apport information

[Matthew Hoberg (hobermat)]

apport information

[Matthew Hoberg (hobermat)]

apport information

[Matthew Hoberg (hobermat)]

apport information

[Matthew Hoberg (hobermat)]

apport information

[Matthew Hoberg (hobermat)]

apport information

[Liam Baker (liambaker-sm)]

I have the same problem in Windows Subsystem for Linux, Ubuntu 20.04
I have a CIFS share containing 24 DFS folders.
Opening any subfolder in the share causes an instant kernel panic.
I do not have this problem on embedded hardware reading from the same share running the xilinx 4.6.0 kernel and 16.04LTS derivative (Petalinux 2016).

'Virtual Machine' has encountered a fatal error. The guest operating system reported that it failed with the following error codes: ErrorCode0: 0x0, ErrorCode1: 0x0, ErrorCode2: 0x0, ErrorCode3: 0x0, ErrorCode4: 0x0. If the problem persists, contact Product Support for the guest operating system. (Virtual machine ID 2AE8F1B1-E89F-426B-867C-E089D530D127)

Guest message:
[ 5664.306032] CR2: ffffffffffffffd6 CR3: 00000001844ee004 CR4: 00000000003706a0
[ 5664.306033] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 5664.306035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 5664.306036] Call Trace:
[ 5664.306549] __traverse_mounts+0x8f/0x220
[ 5664.306885] step_into+0x430/0x6c0
[ 5664.307085] ? cifs_d_revalidate+0x49/0xd0
[ 5664.307088] walk_component+0x72/0x1b0
[ 5664.307107] path_lookupat.isra.0+0x6e/0x150
[ 5664.307109] ? cifs_revalidate_dentry_attr+0x3f/0x230
[ 5664.307111] filename_lookup+0xae/0x140
[ 5664.307157] ? __check_object_size+0x136/0x150
[ 5664.307337] ? strncpy_from_user+0x4e/0x140
[ 5664.307340] __x64_sys_chdir+0x3e/0xe0
[ 5664.307621] do_syscall_64+0x33/0x80
[ 5664.307846] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 5664.307906] RIP: 0033:0x7f03cf10ba1b
[ 5664.307908] Code: c3 48 8b 15 77 d4 0d 00 f7 d8 64 89 02 b8 ff ff ff ff eb c6 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 50 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 45 d4 0d 00 f7 d8 64 89 01 48
[ 5664.307911] RSP: 002b:00007ffdfac2d908 EFLAGS: 00000246 ORIG_RAX: 0000000000000050
[ 5664.307913] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f03cf10ba1b
[ 5664.307914] RDX: 0000561b7d79f360 RSI: 0000561b7d88e310 RDI: 0000561b7d892df0
[ 5664.307915] RBP: 0000561b7d892df0 R08: 0000000000000003 R09: 0000000000000001
[ 5664.307917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000561b7d98e1d0
[ 5664.307918] R13: 0000000000000000 R14: 000000000000000a R15: 0000000000000000
[ 5664.307982] Modules linked in:
[ 5664.308086] CR2: 0000000000000000
[ 5664.308088] ---[ end trace d8722f6ff345c4cf ]---
[ 5664.308289] RIP: 0010:0x0
[ 5664.308291] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6.
[ 5664.308292] RSP: 0018:ffffc90002b8bca0 EFLAGS: 00010293
[ 5664.308312] RAX: 0000000000000000 RBX: ffffc90002b8bd10 RCX: 0000000000000001
[ 5664.308314] RDX: 0000000000000000 RSI: 0000000000020000 RDI: ffffc90002b8bd10
[ 5664.308316] RBP: ffffc90002b8be40 R08: 0000000000000002 R09: 0000000000000064
[ 5664.308317] R10: ffff8883e1b9ba80 R11: 432f6b6300000061 R12: 0000000000000002
[ 5664.308318] R13: 0000000000000000 R14: 00000000002a0044 R15: 0000000000000000
[ 5664.308320] FS: 00007f03ceffa740(0000) GS:ffff8883f7d00000(0000) knlGS:0000000000000000
[ 5664.308322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 5664.308323] CR2: ffffffffffffffd6 CR3: 00000001844ee004 CR4: 000...

[Laszlo Laszlo (laszlolaszlo80)]

Hello,

I have got very same issue.
command: sudo mount.cifs --verbose -o username=*******,domain=corporatedomain.org //kak1fs01.intranet.nav.gov.hu/start2/KDrive/K50 /home/username/K

OS: 22.04.3
Kernel: 6.2.0-34-generic #34~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 7 13:12:03 UTC 2 x86_64 x86_64 x86_64 GNU/Linux
mount.cifs version: 6.14

If you need more information

[Laszlo Laszlo (laszlolaszlo80)]

I installed these packages:
linux-image-5.19.0-50-generic linux-headers-5.19.0-50-generic linux-modules-extra-5.19.0-50-generic
I boot in with that kernel and cifs mount works fine. Maybe 6.20 kernel contains some nasty.