Source: linux
Severity: important
Tags: upstream
X-Debbugs-Cc: pdekraker+deb...@gmail.com

Dear Maintainer,

I am experiencing an issue where my system completely locks up when attempting
a large network file transfer from a mounted smb share. When copying a file
above 1 GB I am consistienly experiencing this behavior. I tried going back to
the 6.12.3 kernel which is the oldest I have on the system and the probelm is
there as well. Looking at the dump below my guess is that it was introduced
with 6.12 and netfs/read_collect.c.  I have been unable to get a dump with
6.12.15, but the behavior is consistient. The transfer starts, but after a few
seconds the whole system locks up.


2/22/25 8:38 AM         ------------[ cut here ]------------
2/22/25 8:38 AM WARNING CPU: 4 PID: 291 at fs/netfs/read_collect.c:110
netfs_consume_read_data.isra.0+0x67f/0xb50 [netfs]
2/22/25 8:38 AM Modules linked in       ccm nls_utf8 cifs cifs_arc4
nls_ucs2_utils cifs_md4 dns_resolver netfs snd_seq_dummy snd_hrtimer snd_seq
snd_seq_device xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_reject_ipv4
xt_tcpudp nft_compat nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6
nf_defrag_ipv4 nf_tables bridge stp llc rfcomm cmac algif_hash algif_skcipher
af_alg overlay qrtr bnep amd_atl intel_rapl_msr intel_rapl_common sunrpc
edac_mce_amd binfmt_misc kvm_amd snd_hda_codec_realtek snd_hda_codec_generic
snd_hda_scodec_component kvm snd_hda_codec_hdmi nls_ascii crct10dif_pclmul
nls_cp437 snd_hda_intel crc32_pclmul ghash_clmulni_intel snd_intel_dspcfg btusb
snd_intel_sdw_acpi sha512_ssse3 vfat fat snd_hda_codec sha256_ssse3 btrtl
sha1_ssse3 btintel snd_hda_core aesni_intel btbcm ahci btmtk snd_hwdep gf128mul
r8169 crypto_simd libahci snd_pcm bluetooth cryptd realtek snd_timer libata
rapl sp5100_tco snd watchdog wmi_bmof mdio_devres gigabyte_wmi soundcore
i2c_piix4 pcspkr i2c_smbus rfkill libphy scsi_mod ccp k10temp
2/22/25 8:38 AM         scsi_common button lm92 msr dm_mod parport_pc ppdev lp
parport efi_pstore configfs nfnetlink ip_tables x_tables autofs4 ext4 mbcache
jbd2 razerkbd(OE) efivarfs raid10 raid456 libcrc32c crc32c_generic
async_raid6_recov async_memcpy async_pq async_xor xor async_tx raid6_pq raid1
raid0 md_mod evdev joydev razermouse(OE) hid_generic usbhid hid amdgpu video
amdxcp i2c_algo_bit drm_ttm_helper ttm drm_exec gpu_sched drm_suballoc_helper
drm_buddy drm_display_helper xhci_pci xhci_hcd drm_kms_helper drm nvme usbcore
cec rc_core nvme_core crc32c_intel crc16 usb_common wmi gpio_amdpt gpio_generic
2/22/25 8:38 AM CPU     4 UID: 0 PID: 291 Comm: kworker/4:2 Tainted: G OE
6.12.3-amd64 #1 Debian 6.12.3-1
2/22/25 8:38 AM Tainted [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
2/22/25 8:38 AM Hardware name   Gigabyte Technology Co., Ltd. B550M AORUS
PRO-P/B550M AORUS PRO-P, BIOS F13 07/08/2021
2/22/25 8:38 AM Workqueue       cifsiod smb2_readv_worker [cifs]
2/22/25 8:38 AM RIP     0010:netfs_consume_read_data.isra.0+0x67f/0xb50 [netfs]
2/22/25 8:38 AM Code    43 28 48 39 c8 0f 84 04 02 00 00 4c 89 40 58 0f 1f 44
00 00 0f 1f 44 00 00 48 8b 43 78 48 89 43 68 48 89 43 70 e9 6e fe ff ff <0f> 0b
49 8b 47 70 48 8b 74 24 30 8b 7c 24 38 41 0f b7 97 96 00 00
2/22/25 8:38 AM RSP     0018:ffffab8240b07dd8 EFLAGS: 00010246
2/22/25 8:38 AM RAX     0000000000000000 RBX: 0000000000000000 RCX:
000000003b200000
2/22/25 8:38 AM RDX     000000003b600000 RSI: 000000003b600000 RDI:
ffffdd69cfb90000
2/22/25 8:38 AM RBP     0000000000000004 R08: 0000000000000002 R09:
0000000000400000
2/22/25 8:38 AM R10     0000000000000008 R11: 0000000000000008 R12:
ffff9cbba2abdaa8
2/22/25 8:38 AM R13     0000000000200000 R14: 000000003b400000 R15:
ffff9cbd00ce2280
2/22/25 8:38 AM FS      0000000000000000(0000) GS:ffff9cc93ee00000(0000)
knlGS:0000000000000000
2/22/25 8:38 AM CS      0010 DS: 0000 ES: 0000 CR0: 0000000080050033
2/22/25 8:38 AM CR2     00007f724be0412c CR3: 000000010a98e000 CR4:
0000000000f50ef0
2/22/25 8:38 AM PKRU    55555554
2/22/25 8:38 AM Call Trace
2/22/25 8:38 AM         <TASK>
2/22/25 8:38 AM         ? netfs_consume_read_data.isra.0+0x67f/0xb50 [netfs]
2/22/25 8:38 AM         ? __warn.cold+0x93/0xf6
2/22/25 8:38 AM         ? netfs_consume_read_data.isra.0+0x67f/0xb50 [netfs]
2/22/25 8:38 AM         ? report_bug+0xff/0x140
2/22/25 8:38 AM         ? handle_bug+0x58/0x90
2/22/25 8:38 AM         ? exc_invalid_op+0x17/0x70
2/22/25 8:38 AM         ? asm_exc_invalid_op+0x1a/0x20
2/22/25 8:38 AM         ? netfs_consume_read_data.isra.0+0x67f/0xb50 [netfs]
2/22/25 8:38 AM         ? netfs_consume_read_data.isra.0+0x48b/0xb50 [netfs]
2/22/25 8:38 AM         ? finish_task_switch.isra.0+0x97/0x2c0
2/22/25 8:38 AM         netfs_read_subreq_terminated+0x2ab/0x3f0 [netfs]
2/22/25 8:38 AM         process_one_work+0x177/0x330
2/22/25 8:38 AM         worker_thread+0x252/0x390
2/22/25 8:38 AM         ? __pfx_worker_thread+0x10/0x10
2/22/25 8:38 AM         kthread+0xd2/0x100
2/22/25 8:38 AM         ? __pfx_kthread+0x10/0x10
2/22/25 8:38 AM         ret_from_fork+0x34/0x50
2/22/25 8:38 AM         ? __pfx_kthread+0x10/0x10
2/22/25 8:38 AM         ret_from_fork_asm+0x1a/0x30
2/22/25 8:38 AM         </TASK>
2/22/25 8:38 AM         ---[ end trace 0000000000000000 ]---
2/22/25 8:38 AM netfs   R=0000003e[2] s=3b200000-3b7fffff
ctl=400000/600000/600000 sl=4
2/22/25 8:38 AM netfs   folioq: orders=09090909
2/22/25 8:38 AM BUG     kernel NULL pointer dereference, address:
0000000000000000
2/22/25 8:38 AM #PF     supervisor write access in kernel mode
2/22/25 8:38 AM #PF     error_code(0x0002) - not-present page
2/22/25 8:38 AM         PGD 0 P4D 0
2/22/25 8:38 AM Oops    Oops: 0002 [#1] PREEMPT SMP NOPTI
2/22/25 8:38 AM CPU     4 UID: 0 PID: 291 Comm: kworker/4:2 Tainted: G W OE
6.12.3-amd64 #1 Debian 6.12.3-1
2/22/25 8:38 AM Tainted [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
2/22/25 8:38 AM Hardware name   Gigabyte Technology Co., Ltd. B550M AORUS
PRO-P/B550M AORUS PRO-P, BIOS F13 07/08/2021
2/22/25 8:38 AM Workqueue       cifsiod smb2_readv_worker [cifs]
2/22/25 8:38 AM RIP     0010:netfs_consume_read_data.isra.0+0x2db/0xb50 [netfs]
2/22/25 8:38 AM Code    c4 40 5b 5d 41 5c 41 5d 41 5e 41 5f e9 e9 86 41 e8 8b
6c 24 38 48 8b 44 24 28 48 89 f3 49 2b 5f 60 49 89 5f 78 4c 8b 6c e8 08 <f0> 41
80 4d 00 08 48 8b 44 24 30 48 8b 80 58 02 00 00 a9 00 00 00
2/22/25 8:38 AM RSP     0018:ffffab8240b07dd8 EFLAGS: 00010206
2/22/25 8:38 AM RAX     ffff9cbdf4cb7200 RBX: 0000000000600000 RCX:
0000000000000027
2/22/25 8:38 AM RDX     0000000000000000 RSI: 000000003b800000 RDI:
ffff9cc93ee21780
2/22/25 8:38 AM RBP     0000000000000004 R08: 0000000000000000 R09:
ffffab8240b07c50
2/22/25 8:38 AM R10     ffffffffab4b42c8 R11: 0000000000000003 R12:
ffff9cbba2abdaa8
2/22/25 8:38 AM R13     0000000000000000 R14: 000000003b600000 R15:
ffff9cbd00ce2280
2/22/25 8:38 AM FS      0000000000000000(0000) GS:ffff9cc93ee00000(0000)
knlGS:0000000000000000
2/22/25 8:38 AM CS      0010 DS: 0000 ES: 0000 CR0: 0000000080050033
2/22/25 8:38 AM CR2     0000000000000000 CR3: 000000010a98e000 CR4:
0000000000f50ef0
2/22/25 8:38 AM PKRU    55555554
2/22/25 8:38 AM Call Trace
2/22/25 8:38 AM         <TASK>
2/22/25 8:38 AM         ? __die_body.cold+0x19/0x27
2/22/25 8:38 AM         ? page_fault_oops+0x15a/0x2d0
2/22/25 8:38 AM         ? exc_page_fault+0x7e/0x180
2/22/25 8:38 AM         ? asm_exc_page_fault+0x26/0x30
2/22/25 8:38 AM         ? netfs_consume_read_data.isra.0+0x2db/0xb50 [netfs]
2/22/25 8:38 AM         ? finish_task_switch.isra.0+0x97/0x2c0
2/22/25 8:38 AM         netfs_read_subreq_terminated+0x2ab/0x3f0 [netfs]
2/22/25 8:38 AM         process_one_work+0x177/0x330
2/22/25 8:38 AM         worker_thread+0x252/0x390
2/22/25 8:38 AM         ? __pfx_worker_thread+0x10/0x10
2/22/25 8:38 AM         kthread+0xd2/0x100
2/22/25 8:38 AM         ? __pfx_kthread+0x10/0x10
2/22/25 8:38 AM         ret_from_fork+0x34/0x50
2/22/25 8:38 AM         ? __pfx_kthread+0x10/0x10
2/22/25 8:38 AM         ret_from_fork_asm+0x1a/0x30
2/22/25 8:38 AM         </TASK>
2/22/25 8:38 AM Modules linked in       ccm nls_utf8 cifs cifs_arc4
nls_ucs2_utils cifs_md4 dns_resolver netfs snd_seq_dummy snd_hrtimer snd_seq
snd_seq_device xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_reject_ipv4
xt_tcpudp nft_compat nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6
nf_defrag_ipv4 nf_tables bridge stp llc rfcomm cmac algif_hash algif_skcipher
af_alg overlay qrtr bnep amd_atl intel_rapl_msr intel_rapl_common sunrpc
edac_mce_amd binfmt_misc kvm_amd snd_hda_codec_realtek snd_hda_codec_generic
snd_hda_scodec_component kvm snd_hda_codec_hdmi nls_ascii crct10dif_pclmul
nls_cp437 snd_hda_intel crc32_pclmul ghash_clmulni_intel snd_intel_dspcfg btusb
snd_intel_sdw_acpi sha512_ssse3 vfat fat snd_hda_codec sha256_ssse3 btrtl
sha1_ssse3 btintel snd_hda_core aesni_intel btbcm ahci btmtk snd_hwdep gf128mul
r8169 crypto_simd libahci snd_pcm bluetooth cryptd realtek snd_timer libata
rapl sp5100_tco snd watchdog wmi_bmof mdio_devres gigabyte_wmi soundcore
i2c_piix4 pcspkr i2c_smbus rfkill libphy scsi_mod ccp k10temp
2/22/25 8:38 AM         scsi_common button lm92 msr dm_mod parport_pc ppdev lp
parport efi_pstore configfs nfnetlink ip_tables x_tables autofs4 ext4 mbcache
jbd2 razerkbd(OE) efivarfs raid10 raid456 libcrc32c crc32c_generic
async_raid6_recov async_memcpy async_pq async_xor xor async_tx raid6_pq raid1
raid0 md_mod evdev joydev razermouse(OE) hid_generic usbhid hid amdgpu video
amdxcp i2c_algo_bit drm_ttm_helper ttm drm_exec gpu_sched drm_suballoc_helper
drm_buddy drm_display_helper xhci_pci xhci_hcd drm_kms_helper drm nvme usbcore
cec rc_core nvme_core crc32c_intel crc16 usb_common wmi gpio_amdpt gpio_generic
2/22/25 8:38 AM CR2     0000000000000000
2/22/25 8:38 AM         ---[ end trace 0000000000000000 ]---
2/22/25 8:38 AM RIP     0010:netfs_consume_read_data.isra.0+0x2db/0xb50 [netfs]
2/22/25 8:38 AM Code    c4 40 5b 5d 41 5c 41 5d 41 5e 41 5f e9 e9 86 41 e8 8b
6c 24 38 48 8b 44 24 28 48 89 f3 49 2b 5f 60 49 89 5f 78 4c 8b 6c e8 08 <f0> 41
80 4d 00 08 48 8b 44 24 30 48 8b 80 58 02 00 00 a9 00 00 00
2/22/25 8:38 AM RSP     0018:ffffab8240b07dd8 EFLAGS: 00010206
2/22/25 8:38 AM RAX     ffff9cbdf4cb7200 RBX: 0000000000600000 RCX:
0000000000000027
2/22/25 8:38 AM RDX     0000000000000000 RSI: 000000003b800000 RDI:
ffff9cc93ee21780
2/22/25 8:38 AM RBP     0000000000000004 R08: 0000000000000000 R09:
ffffab8240b07c50
2/22/25 8:38 AM R10     ffffffffab4b42c8 R11: 0000000000000003 R12:
ffff9cbba2abdaa8
2/22/25 8:38 AM R13     0000000000000000 R14: 000000003b600000 R15:
ffff9cbd00ce2280
2/22/25 8:38 AM FS      0000000000000000(0000) GS:ffff9cc93ee00000(0000)
knlGS:0000000000000000
2/22/25 8:38 AM CS      0010 DS: 0000 ES: 0000 CR0: 0000000080050033
2/22/25 8:38 AM CR2     0000000000000000 CR3: 000000010a98e000 CR4:
0000000000f50ef0
2/22/25 8:38 AM PKRU    55555554
2/22/25 8:38 AM note    kworker/4:2[291] exited with irqs disabled



-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.12.15-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Reply via email to