Package: linux-image
Version: 6.1.0-17-amd64

Any copy from Samba share to itself produces:

-------------------------------------------------------------------------------------------------
[ 246.536754] BUG: kernel NULL pointer dereference, address: 0000000000000000
[ 246.536766] #PF: supervisor read access in kernel mode
[ 246.536770] #PF: error_code(0x0000) - not-present page
[ 246.536774] PGD 0 P4D 0
[ 246.536780] Oops: 0000 [#1] PREEMPT SMP NOPTI
[ 246.536787] CPU: 1 PID: 4838 Comm: mc Not tainted 6.1.0-17-amd64 #1 Debian 6.1.69-1
[ 246.536793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 246.536796] RIP: 0010:cifs_flush_folio+0x3f/0x100 [cifs]
[ 246.536915] Code: d2 41 54 49 89 cc 31 c9 55 48 89 f5 48 c1 ee 0c 53 48 83 ec 08 48 8b 7f 30 e8 8d 9a 82 d6 48 3d 00 f0 ff ff 0f 87 a5 00 00 00 <48> 8b 10 48 89 c3 b8 00 10 00 00 f7 c2 0
0 00 01 00 74 07 0f b6 4b
[ 246.536919] RSP: 0018:ffffad9783a8fc98 EFLAGS: 00010207
[ 246.536924] RAX: 0000000000000000 RBX: 0000000000dde217 RCX: 0000000000000000
[ 246.536928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff922fca18cc80
[ 246.536932] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 246.536935] R10: 0000000000dde216 R11: ffff922f84625800 R12: ffffad9783a8fd08
[ 246.536938] R13: ffffad9783a8fd00 R14: ffff922f90222170 R15: 0000000000000001
[ 246.536942] FS: 00007f03033dcf80(0000) GS:ffff9230b7c40000(0000) knlGS:0000000000000000
[ 246.536947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 246.536951] CR2: 0000000000000000 CR3: 000000014a5c4002 CR4: 0000000000170ee0
[ 246.536961] Call Trace:
[ 246.536967] <TASK>
[ 246.536971] ? __die_body.cold+0x1a/0x1f
[ 246.536982] ? page_fault_oops+0xd2/0x2b0
[ 246.536992] ? exc_page_fault+0x70/0x170
[ 246.537000] ? asm_exc_page_fault+0x22/0x30
[ 246.537012] ? cifs_flush_folio+0x3f/0x100 [cifs]
[ 246.537111] ? cifs_flush_folio+0x33/0x100 [cifs]
[ 246.537181] ? cifs_precopy_set_eof+0x2b/0x150 [cifs]
[ 246.537251] cifs_remap_file_range+0x16d/0x680 [cifs]
[ 246.537323] do_clone_file_range+0xe6/0x230
[ 246.537361] vfs_clone_file_range+0x37/0x140
[ 246.537369] ioctl_file_clone+0x49/0xb0
[ 246.537377] do_vfs_ioctl+0x77/0x910
[ 246.537384] __x64_sys_ioctl+0x6e/0xd0
[ 246.537390] do_syscall_64+0x58/0xc0
[ 246.537402] ? exit_to_user_mode_prepare+0x14b/0x1e0
[ 246.537411] ? syscall_exit_to_user_mode+0x27/0x40
[ 246.537417] ? do_syscall_64+0x67/0xc0
[ 246.537424] ? do_syscall_64+0x67/0xc0
[ 246.537431] ? exit_to_user_mode_prepare+0x40/0x1e0
[ 246.537436] entry_SYSCALL_64_after_hwframe+0x64/0xce
[ 246.537445] RIP: 0033:0x7f0302de4b5b
------------------------------------------------------------------------------------

Previous versions of kernel are free of this bug.
I've found it on 7 installations of this kernel.


Arcady Ivanov. IT group chief of IKIR FEB RAS.
site: http://www.arccomm.ru
phone: +7(914)0244191