[Pkg-samba-maint] Bug#506171: smbfs: After some time, cifs mounts fail (errors -6, -5). Kernel oops possible.

David Buckley debian at bucko.me.uk
Wed Nov 19 01:04:41 UTC 2008


Package: smbfs
Version: 3.0.24-6etch10
Severity: important


After some time, my cifs mount fail.

The shares initially mount fine but after some time (often, for
instance, if I leave my media player paused instead of stopped), I am
unable to access anything. Example:

$ ls /smb/cirno/media_rw
ls: /smb/cirno/media_rw: Input/output error

dmesg symptoms are:

[17686.551543]  CIFS VFS: cifs_mount failed w/return code = -6

and

[24129.293542]  CIFS VFS: Unexpected lookup error -5

Both of which appear repeatedly, normally starting with the first.

While the bug is in effect, I can use smbclient on the exact share name
with no trouble, and can access differently named autofs shares on the
same server with no trouble (eg. if I refer to the server as cIrno). I
need to reboot to fix it, though the bug hangs my reboot so I need to
Magic SysRq Sync, Umount, reBoot.


The shares are pretty much un-umountable. If I try with for example

# umount -l //cirno/media

I get no error, but a short while afterwards I will be greeted by a
kernel oops. My full dmesg output (repeats marked with ...) is attached.

The server runs Samba 2:3.2.3-1 with UNIX extensions disabled (otherwise
softlinks in the shares misbehave).


I use auto.smb to mount the shares (presumably explaining the repeated
mount errors); output of auto.smb on the machine is:

-fstype=cifs,uid=1000,gid=1000,iocharset=utf8,credentials=/etc/auto.smb.cirno
\
        /print$ ://cirno/print$ \
        /media_rw ://cirno/media_rw \
        /media_pub ://cirno/media_pub \
        /media ://cirno/media \
        /bucko ://cirno/bucko

The machine operates a softlinked union of 10 hard drives, all of which
are set to powersave after 20 minutes. I once caused the bug
instantaneously by attempting to list the contents of all 10 drives (which
were almost all off), then listing contents of a different alias to the
same share (I use multiple case variations of the server name precisely
due to this bug), so it may be a threading issue.




-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (700, 'stable'), (600, 'testing'), (100, 'unstable')
Architecture: sh: line 1: 14135 Killed                  COLUMNS=79 dpkg --print-installation-architecture 2>/dev/null (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.26-1-amd64
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8) (ignored: LC_ALL set to en_GB.utf8)

Versions of packages smbfs depends on:
ii  lib 2.7-13                               GNU C Library: Shared libraries
ii  lib 1.39+1.40-WIP-2006.11.14+dfsg-2etch1 common error description library
ii  lib 1.4.4-7etch6                         MIT Kerberos runtime libraries
ii  lib 2.1.30-13.3                          OpenLDAP libraries
ii  net 4.29                                 Basic TCP/IP networking system
ii  sam 3.0.24-6etch10                       Samba common files used by both th

smbfs recommends no packages.

-- no debconf information

-- dmesg

[ 1473.987971]  CIFS VFS: Write2 ret -28, wrote 0
... (~1000 times)
[ 1918.787265]  CIFS VFS: cifs_mount failed w/return code = -6
... (~20 times)
[ 3952.844818]  CIFS VFS: cifs_mount failed w/return code = -6
... (a few more times, more sporadically)
[11785.652957]  CIFS VFS: cifs_mount failed w/return code = -6
[11785.711497] Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE
[11785.711510]  CIFS VFS: Send error in SessSetup = -13
[11785.855793]  CIFS VFS: cifs_mount failed w/return code = -13
[11785.863783] Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE
[11785.863783]  CIFS VFS: Send error in SessSetup = -13
[11785.996326]  CIFS VFS: cifs_mount failed w/return code = -13
[11786.004118] Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE
[11786.004128]  CIFS VFS: Send error in SessSetup = -13
[11786.137212]  CIFS VFS: cifs_mount failed w/return code = -13
[11786.144949] Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE
[11786.144959]  CIFS VFS: Send error in SessSetup = -13
[11786.286875]  CIFS VFS: cifs_mount failed w/return code = -13
[11787.896268]  CIFS VFS: Unexpected lookup error -5
[16470.228948]  CIFS VFS: cifs_mount failed w/return code = -6
... Thousands of the "-5", interspersed with 2-10 "-6" errors.
[55622.789613]  CIFS VFS: Unexpected lookup error -5
[57008.179189]  CIFS VFS: cifs_umount failed with return code -5
[57019.758916] BUG: unable to handle kernel NULL pointer dereference at 00000000000000c7
[57019.758916] IP: [<ffffffffa0befd23>] :cifs:smb_init+0x179/0x2bf
[57019.758916] PGD 0 
[57019.758916] Oops: 0000 [1] SMP 
[57019.758916] CPU 1 
[57019.758916] Modules linked in: cifs nvidia(P) uinput ppdev parport_pc lp parport ac battery autofs4 ipv6 bridge nls_utf8 ntfs nls_base dm_snapshot dm_mirror dm_log dm_mod tun kvm_intel kvm loop snd_hda_intel snd_emu10k1_synth snd_emux_synth snd_seq_virmidi snd_seq_midi_emul snd_emu10k1 firmware_class snd_ac97_codec ac97_bus snd_pcm_oss snd_mixer_oss snd_pcm snd_util_mem snd_hwdep snd_seq_dummy snd_seq_oss snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq snd_timer snd_seq_device joydev snd wacom emu10k1_gp i2c_i801 snd_page_alloc sg i2c_core gameport button soundcore intel_agp floppy usblp iTCO_wdt evdev pcspkr sr_mod cdrom ext3 jbd mbcache usb_storage usbhid hid ff_memless sd_mod ata_generic ohci1394 ata_piix r8169 ieee1394 it821x ide_core libata scsi_mod dock uhci_hcd ehci_hcd thermal processor fan thermal_sys
[57019.758916] Pid: 12001, comm: automount Tainted: P          2.6.26-1-amd64 #1
[57019.758916] RIP: 0010:[<ffffffffa0befd23>]  [<ffffffffa0befd23>] :cifs:smb_init+0x179/0x2bf
[57019.758916] RSP: 0018:ffff8101b652bbb8  EFLAGS: 00010286
[57019.758916] RAX: ffffffffffffffff RBX: ffff8101b1cc9600 RCX: ffff8101b652bc50
[57019.758916] RDX: ffff8101b1cc9600 RSI: 000000000000000f RDI: 0000000000000032
[57019.758916] RBP: ffff8101b65f6bc0 R08: ffff8101b652bc48 R09: ffffffffa03a6480
[57019.758916] R10: ffff8101bc1e86c4 R11: ffffffffa0c0497d R12: ffff8101b65e0cc0
[57019.758916] R13: 0000000000000032 R14: ffff8101b652bc48 R15: ffff8101b652bc50
[57019.758916] FS:  00007f98825746e0(0000) GS:ffff8101bf0858c0(0000) knlGS:0000000000000000
[57019.758916] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[57019.758916] CR2: 00000000000000c7 CR3: 00000001b0525000 CR4: 00000000000026e0
[57019.758916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[57019.758916] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[57019.758916] Process automount (pid: 12001, threadinfo ffff8101b652a000, task ffff8101b65518b0)
[57019.758916] Stack:  00000040001200d2 0000000f00011c18 00000002b04c6e40 0000000000000000
[57019.758916]  0000000000000002 0000000100000000 0000000000000001 00000000bfc07df5
[57019.758916]  ffff810000010e00 ffff8101b65f6bc0 ffff8101b65f6bc0 ffff8101b65e0cc0
[57019.758916] Call Trace:
[57019.758916]  [<ffffffffa0bf3b0e>] ? :cifs:CIFSSMBQPathInfo+0x4f/0x269
[57019.758916]  [<ffffffff802aaf62>] ? __d_lookup+0xb3/0xfb
[57019.758916]  [<ffffffffa0c03f4b>] ? :cifs:cifs_get_inode_info+0xf3/0x7d4
[57019.758916]  [<ffffffff802a19e6>] ? do_lookup+0x63/0x1c1
[57019.758916]  [<ffffffff802af641>] ? mntput_no_expire+0x20/0x117
[57019.758916]  [<ffffffffa0bfebef>] ? :cifs:build_path_from_dentry+0x1c3/0x1da
[57019.758916]  [<ffffffffa0c04801>] ? :cifs:cifs_revalidate+0x1d5/0x351
[57019.758916]  [<ffffffffa0c0498f>] ? :cifs:cifs_getattr+0x12/0x34
[57019.758916]  [<ffffffff8029ddcc>] ? vfs_lstat_fd+0x2f/0x47
[57019.758916]  [<ffffffff80221f78>] ? do_page_fault+0x5d8/0x9c8
[57019.758916]  [<ffffffff8029ddfd>] ? sys_newlstat+0x19/0x31
[57019.758916]  [<ffffffff802af641>] ? mntput_no_expire+0x20/0x117
[57019.758916]  [<ffffffff8031d983>] ? __up_read+0x13/0x8a
[57019.758916]  [<ffffffff80429b79>] ? error_exit+0x0/0x60
[57019.758916]  [<ffffffff8020be9a>] ? system_call_after_swapgs+0x8a/0x8f
[57019.758916] 
[57019.758916] 
[57019.758916] Code: 83 88 03 00 01 bd 90 ff ff ff 0f 84 50 01 00 00 48 c7 c7 1d 45 c1 a0 31 c0 e8 69 55 64 df e9 3d 01 00 00 48 8b 43 38 48 8b 40 28 <83> b8 c8 00 00 00 03 0f 84 07 ff ff ff e8 7c 15 78 ff 48 8b 7b 
[57019.758916] RIP  [<ffffffffa0befd23>] :cifs:smb_init+0x179/0x2bf
[57019.758916]  RSP <ffff8101b652bbb8>
[57019.758916] CR2: 00000000000000c7
[57019.758916] ---[ end trace 5fdd92d26b6fea28 ]---
[57021.470299] Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE
[57021.470299]  CIFS VFS: Send error in SessSetup = -13
[57021.602308]  CIFS VFS: cifs_mount failed w/return code = -13
[57021.609995] Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE
[57021.610004]  CIFS VFS: Send error in SessSetup = -13
[57021.737905]  CIFS VFS: cifs_mount failed w/return code = -13
[57021.745667] Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE
[57021.745676]  CIFS VFS: Send error in SessSetup = -13
[57021.875661]  CIFS VFS: cifs_mount failed w/return code = -13
[57021.899310] Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE
[57021.899318]  CIFS VFS: Send error in SessSetup = -13
[57022.041989]  CIFS VFS: cifs_mount failed w/return code = -13
[57262.633632] BUG: unable to handle kernel paging request at 000003e8000003e8
[57262.633632] IP: [<ffffffff8031dc95>] strnlen+0x11/0x1a
[57262.633632] PGD 0 
[57262.633632] Oops: 0000 [2] SMP 
[57262.633632] CPU 0 
[57262.633632] Modules linked in: cifs nvidia(P) uinput ppdev parport_pc lp parport ac battery autofs4 ipv6 bridge nls_utf8 ntfs nls_base dm_snapshot dm_mirror dm_log dm_mod tun kvm_intel kvm loop snd_hda_intel snd_emu10k1_synth snd_emux_synth snd_seq_virmidi snd_seq_midi_emul snd_emu10k1 firmware_class snd_ac97_codec ac97_bus snd_pcm_oss snd_mixer_oss snd_pcm snd_util_mem snd_hwdep snd_seq_dummy snd_seq_oss snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq snd_timer snd_seq_device joydev snd wacom emu10k1_gp i2c_i801 snd_page_alloc sg i2c_core gameport button soundcore intel_agp floppy usblp iTCO_wdt evdev pcspkr sr_mod cdrom ext3 jbd mbcache usb_storage usbhid hid ff_memless sd_mod ata_generic ohci1394 ata_piix r8169 ieee1394 it821x ide_core libata scsi_mod dock uhci_hcd ehci_hcd thermal processor fan thermal_sys
[57262.633632] Pid: 14126, comm: mv Tainted: P      D   2.6.26-1-amd64 #1
[57262.633632] RIP: 0010:[<ffffffff8031dc95>]  [<ffffffff8031dc95>] strnlen+0x11/0x1a
[57262.633633] RSP: 0018:ffff8101b651fbe0  EFLAGS: 00010297
[57262.633633] RAX: 000003e8000003e8 RBX: 0000000000000000 RCX: 00000000ffffffff
[57262.633633] RDX: 000003e8000003e8 RSI: fffffffffffffffe RDI: 000003e8000003e8
[57262.633633] RBP: ffff8101b64453e3 R08: 00000000ffffffff R09: 0000000000000000
[57262.633633] R10: ffffffffffffffff R11: ffff8101bd9237c0 R12: 000003e8000003e8
[57262.633633] R13: 00000000ffffffff R14: ffff8101b6446000 R15: ffff8101b6446000
[57262.633633] FS:  00007fce5b3bc770(0000) GS:ffffffff8053b000(0000) knlGS:0000000000000000
[57262.633633] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[57262.633633] CR2: 000003e8000003e8 CR3: 00000001b65f2000 CR4: 00000000000026e0
[57262.633633] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[57262.633633] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[57262.633633] Process mv (pid: 14126, threadinfo ffff8101b651e000, task ffff8101bcdb6de0)
[57262.633633] Stack:  ffffffff8031ebc4 ffff8101bd9237c0 ffff8101b651fd88 ffff8101b64453e3
[57262.633633]  00000000ffffffff 0000000000000000 ffffffff8031ef40 ffff810100000002
[57262.633633]  ffffffff8031f18b ffff810100000001 ffffffff80245f4b ffff8101bfc02a20
[57262.633633] Call Trace:
[57262.633633]  [<ffffffff8031ebc4>] ? string+0x34/0x93
[57262.633633]  [<ffffffff8031ef40>] ? vsnprintf+0x31d/0x5b1
[57262.633633]  [<ffffffff8031f18b>] ? vsnprintf+0x568/0x5b1
[57262.633633]  [<ffffffff80245f4b>] ? bit_waitqueue+0x10/0x97
[57262.633633]  [<ffffffff8027c8ad>] ? zone_statistics+0x3a/0x8e
[57262.633633]  [<ffffffff802b3a83>] ? seq_printf+0x67/0x8f
[57262.633633]  [<ffffffff802b3a83>] ? seq_printf+0x67/0x8f
[57262.633633]  [<ffffffff802af641>] ? mntput_no_expire+0x20/0x117
[57262.633633]  [<ffffffff802ab820>] ? d_path+0xd4/0xe2
[57262.633633]  [<ffffffff802b399e>] ? seq_escape+0x3a/0xb8
[57262.633633]  [<ffffffffa0bef525>] ? :cifs:cifs_show_options+0x84/0x27b
[57262.633633]  [<ffffffff802b1258>] ? show_vfsmnt+0xcb/0xe6
[57262.633633]  [<ffffffff802b3ffa>] ? seq_read+0x1c7/0x29d
[57262.633633]  [<ffffffff8029b330>] ? vfs_read+0xaa/0x152
[57262.633633]  [<ffffffff8029b711>] ? sys_read+0x45/0x6e
[57262.633633]  [<ffffffff8020be9a>] ? system_call_after_swapgs+0x8a/0x8f
[57262.633633] 
[57262.633633] 
[57262.633633] Code: f2 ae 48 f7 d1 48 8d 44 11 ff 40 38 30 74 0a 48 ff c8 48 39 d0 73 f3 31 c0 c3 48 89 f8 eb 03 48 ff c0 48 ff ce 48 83 fe ff 74 05 <80> 38 00 75 ef 48 29 f8 c3 31 c0 eb 12 41 38 c8 74 0a 48 ff c2 
[57262.633633] RIP  [<ffffffff8031dc95>] strnlen+0x11/0x1a
[57262.633633]  RSP <ffff8101b651fbe0>
[57262.633633] CR2: 000003e8000003e8
[57262.633633] ---[ end trace 5fdd92d26b6fea28 ]---
[57273.260108] BUG: unable to handle kernel paging request at 000003e8000003e8
[57273.260108] IP: [<ffffffff8031dc95>] strnlen+0x11/0x1a
[57273.260108] PGD 0 
[57273.260108] Oops: 0000 [3] SMP 
[57273.260108] CPU 1 
[57273.260108] Modules linked in: cifs nvidia(P) uinput ppdev parport_pc lp parport ac battery autofs4 ipv6 bridge nls_utf8 ntfs nls_base dm_snapshot dm_mirror dm_log dm_mod tun kvm_intel kvm loop snd_hda_intel snd_emu10k1_synth snd_emux_synth snd_seq_virmidi snd_seq_midi_emul snd_emu10k1 firmware_class snd_ac97_codec ac97_bus snd_pcm_oss snd_mixer_oss snd_pcm snd_util_mem snd_hwdep snd_seq_dummy snd_seq_oss snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq snd_timer snd_seq_device joydev snd wacom emu10k1_gp i2c_i801 snd_page_alloc sg i2c_core gameport button soundcore intel_agp floppy usblp iTCO_wdt evdev pcspkr sr_mod cdrom ext3 jbd mbcache usb_storage usbhid hid ff_memless sd_mod ata_generic ohci1394 ata_piix r8169 ieee1394 it821x ide_core libata scsi_mod dock uhci_hcd ehci_hcd thermal processor fan thermal_sys
[57273.260108] Pid: 14135, comm: dpkg Tainted: P      D   2.6.26-1-amd64 #1
[57273.260108] RIP: 0010:[<ffffffff8031dc95>]  [<ffffffff8031dc95>] strnlen+0x11/0x1a
[57273.260108] RSP: 0018:ffff8101bd919be0  EFLAGS: 00010297
[57273.260108] RAX: 000003e8000003e8 RBX: 0000000000000000 RCX: 00000000ffffffff
[57273.260108] RDX: 000003e8000003e8 RSI: fffffffffffffffe RDI: 000003e8000003e8
[57273.260108] RBP: ffff8101b198f3e3 R08: 00000000ffffffff R09: 0000000000000000
[57273.260108] R10: ffffffffffffffff R11: ffff8101b65b5ac0 R12: 000003e8000003e8
[57273.260108] R13: 00000000ffffffff R14: ffff8101b1990000 R15: ffff8101b1990000
[57273.260108] FS:  00007f7f281336e0(0000) GS:ffff8101bf0858c0(0000) knlGS:0000000000000000
[57273.260108] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[57273.260108] CR2: 000003e8000003e8 CR3: 00000001b6154000 CR4: 00000000000026e0
[57273.260108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[57273.260108] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[57273.260108] Process dpkg (pid: 14135, threadinfo ffff8101bd918000, task ffff8101bcde14b0)
[57273.260108] Stack:  ffffffff8031ebc4 ffff8101b65b5ac0 ffff8101bd919d88 ffff8101b198f3e3
[57273.260108]  00000000ffffffff 0000000000000000 ffffffff8031ef40 ffff810100000002
[57273.260108]  ffffffff8031f18b ffff810100000001 ffffffff80245f4b ffff8101bfc02a20
[57273.260108] Call Trace:
[57273.260108]  [<ffffffff8031ebc4>] ? string+0x34/0x93
[57273.260108]  [<ffffffff8031ef40>] ? vsnprintf+0x31d/0x5b1
[57273.260108]  [<ffffffff8031f18b>] ? vsnprintf+0x568/0x5b1
[57273.260108]  [<ffffffff80245f4b>] ? bit_waitqueue+0x10/0x97
[57273.260108]  [<ffffffff8027c8ad>] ? zone_statistics+0x3a/0x8e
[57273.260108]  [<ffffffff802b3a83>] ? seq_printf+0x67/0x8f
[57273.260108]  [<ffffffff802b3a83>] ? seq_printf+0x67/0x8f
[57273.260108]  [<ffffffff802af641>] ? mntput_no_expire+0x20/0x117
[57273.260108]  [<ffffffff802ab820>] ? d_path+0xd4/0xe2
[57273.260108]  [<ffffffff802b399e>] ? seq_escape+0x3a/0xb8
[57273.260108]  [<ffffffffa0bef525>] ? :cifs:cifs_show_options+0x84/0x27b
[57273.260108]  [<ffffffff802b1258>] ? show_vfsmnt+0xcb/0xe6
[57273.260108]  [<ffffffff802b3ffa>] ? seq_read+0x1c7/0x29d
[57273.260108]  [<ffffffff8029b330>] ? vfs_read+0xaa/0x152
[57273.260108]  [<ffffffff8029b711>] ? sys_read+0x45/0x6e
[57273.260108]  [<ffffffff8020be9a>] ? system_call_after_swapgs+0x8a/0x8f
[57273.260108] 
[57273.260108] 
[57273.260108] Code: f2 ae 48 f7 d1 48 8d 44 11 ff 40 38 30 74 0a 48 ff c8 48 39 d0 73 f3 31 c0 c3 48 89 f8 eb 03 48 ff c0 48 ff ce 48 83 fe ff 74 05 <80> 38 00 75 ef 48 29 f8 c3 31 c0 eb 12 41 38 c8 74 0a 48 ff c2 
[57273.260108] RIP  [<ffffffff8031dc95>] strnlen+0x11/0x1a
[57273.260108]  RSP <ffff8101bd919be0>
[57273.260108] CR2: 000003e8000003e8
[57273.263725] ---[ end trace 5fdd92d26b6fea28 ]---





More information about the Pkg-samba-maint mailing list