[Bugs] [Bug 1234877] New: Samba crashes with 3.7.2 and VFS module

Tue Jun 23 12:29:45 UTC 2015

https://bugzilla.redhat.com/show_bug.cgi?id=1234877

            Bug ID: 1234877
           Summary: Samba crashes with 3.7.2 and VFS module
           Product: GlusterFS
           Version: mainline
         Component: libgfapi
          Severity: high
          Assignee: bugs at gluster.org
          Reporter: denis.lambolez at gmail.com
        QA Contact: sdharane at redhat.com
                CC: bugs at gluster.org, gluster-bugs at redhat.com

Description of problem:
After upgrading to "3.7.2-ubuntu1~vivid1" for GlusterFS and
"2:4.1.13+dfsg-4ubuntu3glusterfs3.7.2vivid1" for the Samba VFS Module, I'm
experiencing crash of the smbd deamon, at a high frequency rate. The system was
stable with the 3.6 version.  

Actual results:
Here is the dump of the samba panic action script. It seems that there is a
problem in glfs_chdir () from /usr/lib/x86_64-linux-gnu/libgfapi.so.0.
============================================================================
The Samba 'panic action' script, /usr/share/samba/panic-action,
was called for PID 3286 (/usr/sbin/smbd).

This means there was a problem with the program, such as a segfault.
Below is a backtrace for this process generated with gdb, which shows
the state of the program at the time the error occurred.  The Samba log
files may contain additional information about the problem.

If the problem persists, you are encouraged to first install the
samba-dbg package, which contains the debugging symbols for the Samba
binaries.  Then submit the provided information as a bug report to
Ubuntu by visiting this link:
https://launchpad.net/ubuntu/+source/samba/+filebug

[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
0x00007fc5fcf4389b in __GI___waitpid (pid=12767,
stat_loc=stat_loc at entry=0x7ffcf6243f90, options=options at entry=0) at
../sysdeps/unix/sysv/linux/waitpid.c:40
#0  0x00007fc5fcf4389b in __GI___waitpid (pid=12767,
stat_loc=stat_loc at entry=0x7ffcf6243f90, options=options at entry=0) at
../sysdeps/unix/sysv/linux/waitpid.c:40
#1  0x00007fc5fcebcffb in do_system (line=line at entry=0x7fc601f34d10
"/usr/share/samba/panic-action 3286") at ../sysdeps/posix/system.c:148
#2  0x00007fc5fcebd3da in __libc_system (line=line at entry=0x7fc601f34d10
"/usr/share/samba/panic-action 3286") at ../sysdeps/posix/system.c:184
#3  0x00007fc6001d7c05 in system (line=line at entry=0x7fc601f34d10
"/usr/share/samba/panic-action 3286") at pt-system.c:28
#4  0x00007fc5fe8612d1 in smb_panic_s3 (why=<optimized out>) at
../source3/lib/util.c:798
#5  0x00007fc5fffaedcf in smb_panic (why=why at entry=0x7fc5fffbb77c "internal
error") at ../lib/util/fault.c:159
#6  0x00007fc5fffaefef in fault_report (sig=<optimized out>) at
../lib/util/fault.c:77
#7  sig_fault (sig=<optimized out>) at ../lib/util/fault.c:88
#8  <signal handler called>
#9  0x00007fc5eeb722dd in glfs_chdir () from
/usr/lib/x86_64-linux-gnu/libgfapi.so.0
#10 0x00007fc5ffb862a3 in vfs_ChDir (conn=0x7fc601fb1830, path=0x7fc5ffc9c3f6
"/") at ../source3/smbd/vfs.c:840
#11 0x00007fc5ffb9b8fb in close_cnum (conn=0x7fc601fb1830, vuid=3164412539) at
../source3/smbd/service.c:1136
#12 0x00007fc5ffbc4b6c in smbXsrv_tcon_disconnect (tcon=0x7fc601fb06c0,
vuid=3164412539) at ../source3/smbd/smbXsrv_tcon.c:977
#13 0x00007fc5ffbc4f52 in smbXsrv_tcon_disconnect_all_callback
(local_rec=0x7ffcf6244a00, private_data=0x7ffcf6244ad0) at
../source3/smbd/smbXsrv_tcon.c:1058
#14 0x00007fc5fb539a03 in db_rbt_traverse_internal (db=db at entry=0x7fc601f32da0,
n=0x0, f=f at entry=0x7fc5ffbc4ee0 <smbXsrv_tcon_disconnect_all_callback>,
private_data=private_data at entry=0x7ffcf6244ad0,
count=count at entry=0x7ffcf6244a8c, rw=rw at entry=true) at
../lib/dbwrap/dbwrap_rbt.c:401
#15 0x00007fc5fb539b3f in db_rbt_traverse (db=0x7fc601f32da0, f=0x7fc5ffbc4ee0
<smbXsrv_tcon_disconnect_all_callback>, private_data=0x7ffcf6244ad0) at
../lib/dbwrap/dbwrap_rbt.c:427
#16 0x00007fc5fb53860a in dbwrap_traverse (db=<optimized out>,
f=f at entry=0x7fc5ffbc4ee0 <smbXsrv_tcon_disconnect_all_callback>,
private_data=private_data at entry=0x7ffcf6244ad0,
count=count at entry=0x7ffcf6244acc) at ../lib/dbwrap/dbwrap.c:353
#17 0x00007fc5ffbc3a39 in smbXsrv_tcon_disconnect_all (table=<optimized out>,
vuid=<optimized out>) at ../source3/smbd/smbXsrv_tcon.c:1007
#18 0x00007fc5ffbc50ca in smb2srv_tcon_disconnect_all
(session=session at entry=0x7fc601f33a20) at ../source3/smbd/smbXsrv_tcon.c:1165
#19 0x00007fc5ffbc26f7 in smbXsrv_session_logoff (session=0x7fc601f33a20) at
../source3/smbd/smbXsrv_session.c:1387
#20 0x00007fc5ffbc2aa2 in smbXsrv_session_logoff_all_callback
(local_rec=0x7ffcf6244ba0, private_data=0x7ffcf6244c70) at
../source3/smbd/smbXsrv_session.c:1473
#21 0x00007fc5fb539a03 in db_rbt_traverse_internal (db=db at entry=0x7fc601f30f90,
n=0x0, f=f at entry=0x7fc5ffbc2a50 <smbXsrv_session_logoff_all_callback>,
private_data=private_data at entry=0x7ffcf6244c70,
count=count at entry=0x7ffcf6244c2c, rw=rw at entry=true) at
../lib/dbwrap/dbwrap_rbt.c:401
#22 0x00007fc5fb539b3f in db_rbt_traverse (db=0x7fc601f30f90, f=0x7fc5ffbc2a50
<smbXsrv_session_logoff_all_callback>, private_data=0x7ffcf6244c70) at
../lib/dbwrap/dbwrap_rbt.c:427
#23 0x00007fc5fb53860a in dbwrap_traverse (db=<optimized out>,
f=f at entry=0x7fc5ffbc2a50 <smbXsrv_session_logoff_all_callback>,
private_data=private_data at entry=0x7ffcf6244c70,
count=count at entry=0x7ffcf6244c6c) at ../lib/dbwrap/dbwrap.c:353
#24 0x00007fc5ffbc2aeb in smbXsrv_session_logoff_all
(conn=conn at entry=0x7fc601f22050) at ../source3/smbd/smbXsrv_session.c:1428
#25 0x00007fc5ffbc7a26 in exit_server_common (how=how at entry=SERVER_EXIT_NORMAL,
reason=0x7fc5ffc8c26f "termination signal") at
../source3/smbd/server_exit.c:138
#26 0x00007fc5ffbc7e9e in smbd_exit_server_cleanly (explanation=<optimized
out>) at ../source3/smbd/server_exit.c:238
#27 0x00007fc5fe1b8b32 in exit_server_cleanly
(reason=reason at entry=0x7fc5ffc8c26f "termination signal") at
../source3/lib/smbd_shim.c:113
#28 0x00007fc5ffb92ce0 in smbd_sig_term_handler (ev=<optimized out>,
se=<optimized out>, signum=<optimized out>, count=<optimized out>,
siginfo=<optimized out>, private_data=<optimized out>) at
../source3/smbd/process.c:903
#29 0x00007fc5fd249fcf in tevent_common_check_signal () from
/usr/lib/x86_64-linux-gnu/libtevent.so.0
#30 0x00007fc5fe877674 in run_events_poll (ev=0x7fc601f1cfc0, pollrtn=-1,
pfds=0x7fc601f23e60, num_pfds=3) at ../source3/lib/events.c:187
#31 0x00007fc5fe877a37 in s3_event_loop_once (ev=0x7fc601f1cfc0,
location=<optimized out>) at ../source3/lib/events.c:326
#32 0x00007fc5fd2469ad in _tevent_loop_once () from
/usr/lib/x86_64-linux-gnu/libtevent.so.0
#33 0x00007fc5ffb990cc in smbd_process (ev_ctx=0x7fc601f1cfc0,
msg_ctx=0x7fc6001c67c0 <DEBUGLEVEL_CLASS>, sock_fd=32721024, interactive=64) at
../source3/smbd/process.c:3695
#34 0x00007fc600615100 in smbd_accept_connection (ev=0x7fc601f1cfc0,
fde=<optimized out>, flags=<optimized out>, private_data=<optimized out>) at
../source3/smbd/server.c:610
#35 0x00007fc5fe8777c1 in run_events_poll (ev=0x7fc601f1cfc0,
pollrtn=<optimized out>, pfds=0x7fc601f23e60, num_pfds=5) at
../source3/lib/events.c:257
#36 0x00007fc5fe877a37 in s3_event_loop_once (ev=0x7fc601f1cfc0,
location=<optimized out>) at ../source3/lib/events.c:326
#37 0x00007fc5fd2469ad in _tevent_loop_once () from
/usr/lib/x86_64-linux-gnu/libtevent.so.0
#38 0x00007fc600611e43 in smbd_parent_loop (parent=<optimized out>,
ev_ctx=<optimized out>) at ../source3/smbd/server.c:934
#39 main (argc=32624576, argv=0x7fc601f1d7b0) at ../source3/smbd/server.c:1566
A debugging session is active.

        Inferior 1 [process 3286] will be detached.

Quit anyway? (y or n) [answered Y; input not from terminal]
============================================================================

Additional info:
The Samba server runs in cluster mode (CTDB). Shares are stored on a Gluster
replicated volume and are exposed through Samba VFS module.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.