Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #69518 > unrolled thread

Bug#973613: cifs-utils: CIFS kernel module crash

Back to article view | Back to linux.debian.kernel

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Bug#973613: cifs-utils: CIFS kernel module crash Koutheir Attouchi <koutheir@gmail.com> - 2021-02-12 16:40 +0100
    Bug#973613: cifs-utils: CIFS kernel module crash Salvatore Bonaccorso <carnil@debian.org> - 2021-02-12 16:50 +0100
      Bug#973613: marked as done (cifs-utils: CIFS kernel module crash) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2021-02-12 16:50 +0100

#69518 — Bug#973613: cifs-utils: CIFS kernel module crash

[Multipart message — attachments visible in raw view] — view raw

Hi,

I cannot replicate the issue with my currently-installed kernel
"5.10.0-3-amd64 #1 SMP Debian 5.10.13-1 (2021-02-06) x86_64 GNU/Linux".

Kind regards.

Dr. Koutheir Attouchi.


On Fri, Feb 12, 2021 at 8:52 AM Salvatore Bonaccorso <carnil@debian.org>
wrote:

> Control: tags -1 + moreinfo
> Control: severity - 1 important
>
> Hi,
>
> On Mon, Nov 02, 2020 at 09:30:56AM -0500, Koutheir Attouchi wrote:
> > Package: cifs-utils
> > Version: 2:6.9-1
> > Severity: critical
> > Justification: breaks unrelated software
> > X-Debbugs-Cc: koutheir@gmail.com
> >
> > Dear Maintainer,
> >
> > Attempting to mount a CIFS share crashes the CIFS module, and makes the
> system
> > unstable.
> >
> > Here is the mounting command:
> > $ sudo mount -v -t cifs -o
> >
> nodfs,_netdev,sec=ntlmssp,user,rw,nounix,iocharset=utf8,file_mode=0777,dir_mode=0777,credentials=<somewhere>/credentials.conf
> > //10.10.1.22/shares <mount-point-path>
> >
> > $ sudo dmesg
> > ...
> > [  211.588679] CIFS: Attempting to mount //10.10.1.22/shares
> > [  211.588710] CIFS: No dialect specified on mount. Default has changed
> to a
> > more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1).
> To use
> > the less secure SMB1 dialect to access old servers which do not support
> > SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
> > [  213.409379] CIFS: VFS: \\10.10.1.22\IPC$ DFS capability contradicts
> DFS flag
> > [  213.614168] CIFS: VFS: \\10.10.1.22\IPC$ validate protocol negotiate
> failed:
> > -9
> > [  213.614177] CIFS: VFS: \\10.10.1.22 failed to connect to IPC (rc=-5)
> > [  213.818979] CIFS: VFS: \\10.10.1.22\shares DFS capability contradicts
> DFS
> > flag
> > [  214.024488] CIFS: VFS: \\10.10.1.22\shares Server does not support
> validate
> > negotiate
> > [  216.072372] BUG: kernel NULL pointer dereference, address:
> 00000000000007a0
> > [  216.072380] #PF: supervisor read access in kernel mode
> > [  216.072383] #PF: error_code(0x0000) - not-present page
> > [  216.072386] PGD 0 P4D 0
> > [  216.072392] Oops: 0000 [#1] SMP PTI
> > [  216.072399] CPU: 0 PID: 3551 Comm: mount.cifs Tainted: G           OE
> > 5.9.0-1-amd64 #1 Debian 5.9.1-1
> > [  216.072402] Hardware name: LENOVO 20BE00CQGE/20BE00CQGE, BIOS
> GMET90WW (2.38
> > ) 04/13/2020
> > [  216.072460] RIP: 0010:cifs_mount+0x23b/0xcf0 [cifs]
> > [  216.072466] Code: 85 ff 74 42 48 c7 c7 e8 10 9a c1 e8 ef 14 b8 ea 41
> 83 47
> > 50 01 48 89 ef e8 f2 0a 02 00 49 8b 4f 20 48 c7 c7 e8 10 9a c1 89 c2
> <0f> b6 81
> > a0 07 00 00 83 e2 03 83 e0 fc 09 d0 88 81 a0 07 00 00 c6
> > [  216.072470] RSP: 0018:ffffb4148295fd50 EFLAGS: 00010206
> > [  216.072474] RAX: 0000000000000001 RBX: ffff9ff677a31400 RCX:
> > 0000000000000000
> > [  216.072477] RDX: 0000000000000001 RSI: 000000000000002f RDI:
> > ffffffffc19a10e8
> > [  216.072480] RBP: ffff9ff67777a900 R08: ffffb4148295fcd0 R09:
> > ffff9ff70bb71b00
> > [  216.072483] R10: ffffb4148295fd08 R11: 0000000000000000 R12:
> > ffff9ff6777f7f00
> > [  216.072486] R13: ffff9ff677a31400 R14: 0000000000000000 R15:
> > ffff9ff79c8ed800
> > [  216.072490] FS:  00007f5fddec1740(0000) GS:ffff9ff82e600000(0000)
> > knlGS:0000000000000000
> > [  216.072493] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> > [  216.072496] CR2: 00000000000007a0 CR3: 000000023fedc004 CR4:
> > 00000000001706f0
> > [  216.072499] Call Trace:
> > [  216.072516]  ? slab_pre_alloc_hook.constprop.0+0xd0/0x110
> > [  216.072556]  cifs_smb3_do_mount+0xc5/0x6a0 [cifs]
> > [  216.072566]  legacy_get_tree+0x27/0x40
> > [  216.072574]  vfs_get_tree+0x25/0xb0
> > [  216.072581]  path_mount+0x43d/0xa60
> > [  216.072589]  __x64_sys_mount+0x103/0x140
> > [  216.072596]  do_syscall_64+0x33/0x80
> > [  216.072604]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> > [  216.072609] RIP: 0033:0x7f5fddfc294a
> > [  216.072615] Code: 48 8b 0d 49 f5 0b 00 f7 d8 64 89 01 48 83 c8 ff c3
> 66 2e
> > 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05
> <48> 3d 01
> > f0 ff ff 73 01 c3 48 8b 0d 16 f5 0b 00 f7 d8 64 89 01 48
> > [  216.072618] RSP: 002b:00007ffd8ce9ecd8 EFLAGS: 00000206 ORIG_RAX:
> > 00000000000000a5
> > [  216.072622] RAX: ffffffffffffffda RBX: 00007ffd8ce9f790 RCX:
> > 00007f5fddfc294a
> > [  216.072625] RDX: 000055826fdf73fa RSI: 000055826fdf7441 RDI:
> > 00007ffd8ce9f790
> > [  216.072628] RBP: 00005582712878d0 R08: 0000558271288990 R09:
> > 0000000000000000
> > [  216.072631] R10: 000000000000000e R11: 0000000000000206 R12:
> > 0000558271288990
> > [  216.072633] R13: 0000000000000000 R14: 00007f5fde0c070e R15:
> > 00007f5fde0be000
> > [  216.072638] Modules linked in: md4 sha512_ssse3 sha512_generic cmac
> nls_utf8
> > cifs dns_resolver fscache libdes tun veth xt_conntrack
> nf_conntrack_netlink
> > xfrm_user xfrm_algo xt_addrtype br_netfilter overlay xt_CHECKSUM
> nft_chain_nat
> > xt_MASQUERADE nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4
> nft_counter
> > vboxnetadp(OE) vboxnetflt(OE) xt_tcpudp nft_compat bridge stp llc
> vboxdrv(OE)
> > nf_tables nfnetlink ctr ccm bnep snd_seq_dummy snd_hrtimer snd_seq
> > snd_seq_device bbswitch(OE) binfmt_misc intel_rapl_msr intel_rapl_common
> btusb
> > btrtl btbcm btintel x86_pkg_temp_thermal bluetooth intel_powerclamp
> kvm_intel
> > jitterentropy_rng drbg kvm irqbypass iwlmvm ghash_clmulni_intel
> > snd_hda_codec_hdmi mac80211 rapl uvcvideo snd_hda_codec_realtek
> aes_generic
> > intel_cstate videobuf2_vmalloc libarc4 snd_hda_codec_generic
> videobuf2_memops
> > videobuf2_v4l2 aesni_intel mei_wdt cdc_mbim videobuf2_common fuse
> snd_hda_intel
> > cdc_wdm crypto_simd i915 iwlwifi intel_uncore videodev snd_intel_dspcfg
> cryptd
> > snd_hda_codec
> > [  216.072704]  glue_helper pcspkr serio_raw wmi_bmof snd_hda_core
> ansi_cprng
> > cdc_ncm snd_hwdep iTCO_wdt snd_pcm intel_pmc_bxt iTCO_vendor_support
> > ecdh_generic cdc_ether mc joydev evdev rmi_smbus usbnet ecc rmi_core mii
> at24
> > libaes thinkpad_acpi sg cfg80211 drm_kms_helper watchdog cdc_acm
> snd_timer
> > tpm_tis nvram mei_me ledtrig_audio cec snd tpm_tis_core mei soundcore
> > i2c_algo_bit rfkill ac tpm rng_core button coretemp parport_pc ppdev drm
> lp
> > sunrpc parport ip_tables x_tables autofs4 ext4 crc16 mbcache jbd2
> > crc32c_generic btrfs zstd_compress raid10 raid456 async_raid6_recov
> > async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1
> raid0
> > multipath linear md_mod hid_generic usbhid hid sd_mod sr_mod cdrom t10_pi
> > crc_t10dif crct10dif_generic ahci rtsx_pci_sdmmc libahci mmc_core libata
> > xhci_pci xhci_hcd ehci_pci crct10dif_pclmul ehci_hcd crct10dif_common
> psmouse
> > e1000e crc32_pclmul scsi_mod usbcore crc32c_intel i2c_i801 lpc_ich
> i2c_smbus
> > ptp rtsx_pci pps_core usb_common wmi video
> > [  216.072821]  battery
> > [  216.072832] CR2: 00000000000007a0
> > [  216.072855] ---[ end trace 9abcbe4330f8212e ]---
> > [  216.072895] RIP: 0010:cifs_mount+0x23b/0xcf0 [cifs]
> > [  216.072900] Code: 85 ff 74 42 48 c7 c7 e8 10 9a c1 e8 ef 14 b8 ea 41
> 83 47
> > 50 01 48 89 ef e8 f2 0a 02 00 49 8b 4f 20 48 c7 c7 e8 10 9a c1 89 c2
> <0f> b6 81
> > a0 07 00 00 83 e2 03 83 e0 fc 09 d0 88 81 a0 07 00 00 c6
> > [  216.072903] RSP: 0018:ffffb4148295fd50 EFLAGS: 00010206
> > [  216.072907] RAX: 0000000000000001 RBX: ffff9ff677a31400 RCX:
> > 0000000000000000
> > [  216.072909] RDX: 0000000000000001 RSI: 000000000000002f RDI:
> > ffffffffc19a10e8
> > [  216.072912] RBP: ffff9ff67777a900 R08: ffffb4148295fcd0 R09:
> > ffff9ff70bb71b00
> > [  216.072915] R10: ffffb4148295fd08 R11: 0000000000000000 R12:
> > ffff9ff6777f7f00
> > [  216.072917] R13: ffff9ff677a31400 R14: 0000000000000000 R15:
> > ffff9ff79c8ed800
> > [  216.072921] FS:  00007f5fddec1740(0000) GS:ffff9ff82e600000(0000)
> > knlGS:0000000000000000
> > [  216.072924] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> > [  216.072927] CR2: 00000000000007a0 CR3: 000000023fedc004 CR4:
> > 00000000001706f0
>
> Can you still replicate the issue with current kernel in
> testing/unstable?
>
> If so, you seem to have OOT modules loaded and tainting the kernel,
> please try to replicate the issue without those loaded. Then we can
> possibly check with upstream.
>
> Regards,
> Salvatore
>

[toc] | [next] | [standalone]

#69519

Source: linux
Source-Version: 5.10.13-1

Hi,

On Fri, Feb 12, 2021 at 10:34:36AM -0500, Koutheir Attouchi wrote:
> Hi,
> 
> I cannot replicate the issue with my currently-installed kernel
> "5.10.0-3-amd64 #1 SMP Debian 5.10.13-1 (2021-02-06) x86_64 GNU/Linux".

Thanks for replying back. Although it would be great to ping point the
fix I'm now closing then  the bug with the upper version 5.10.13-1.

Regards,
Salvatore

[toc] | [prev] | [next] | [standalone]

#69520 — Bug#973613: marked as done (cifs-utils: CIFS kernel module crash)

[Multipart message — attachments visible in raw view] — view raw

Your message dated Fri, 12 Feb 2021 16:41:13 +0100
with message-id <YCahmVqn1g5Qk83e@eldamar.lan>
and subject line Re: Bug#973613: cifs-utils: CIFS kernel module crash
has caused the Debian Bug report #973613,
regarding cifs-utils: CIFS kernel module crash
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
973613: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=973613
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.kernel

csiph-web