Bug 13639 - Samba panic error
Summary: Samba panic error
Status: NEW
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.5.12
Hardware: x64 Linux
: P5 normal (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-10-04 07:34 UTC by Jurgen Mehja
Modified: 2019-02-07 15:12 UTC (History)
2 users (show)

See Also:

Attachments
samba core dumb (4.76 MB, application/octet-stream)
2018-10-04 07:34 UTC, Jurgen Mehja 		no flags Details
smb.conf (6.98 KB, text/plain)
2019-01-25 09:06 UTC, Jurgen Mehja 		no flags Details
smbd coredump 2019/01/25 (1.31 MB, application/gzip)
2019-01-25 09:08 UTC, Jurgen Mehja 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jurgen Mehja 2018-10-04 07:34:31 UTC 
Created attachment 14510 [details]
samba core dumb

I keep receiving the following errors on my logwatch report:
**Unmatched Entries**
 ../source3/lib/dumpcore.c:303(dump_core)  dumping core in /var/log/samba/cores/smbd : 1 Time(s)
 ../source3/lib/util.c:791(smb_panic_s3)  PANIC (pid 9058): assert failed: lock_ref_count >= 0 : 1 Time(s)
 ../source3/lib/util.c:902(log_stack_trace)  BACKTRACE: 29 stack frames:
 #0 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(log_stack_trace+0x1c) [0x7fcb88ddfc0c]   
 #1 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(smb_panic_s3+0x20) [0x7fcb88ddfce0]   
 #2 /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(smb_panic+0x2f) [0x7fcb8b2fd19f]   
 #3 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(+0x1945b0) [0x7fcb8af315b0]   
 #4 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(+0x1947af) [0x7fcb8af317af]   
 #5 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(release_posix_lock_posix_flavour+0x1fc) [0x7fcb8af3394c]   
 #6 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(brl_unlock+0x566) [0x7fcb8af2fa26]   
 #7 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(do_unlock+0xce) [0x7fcb8af2b83e]   
 #8 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(smbd_do_setfilepathinfo+0x1b60) [0x7fcb8ae942b0]   
 #9 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(+0xf8dcb) [0x7fcb8ae95dcb]   
 #10 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(reply_trans2+0x645) [0x7fcb8ae986a5]  
 #11 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(+0x122ef6) [0x7fcb8aebfef6]   
 #12 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(+0x12532a) [0x7fcb8aec232a]   
 #13 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(+0x12631c) [0x7fcb8aec331c]   
 #14 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0xaea3) [0x7fcb87a2eea3]   
 #15 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x9277) [0x7fcb87a2d277]   
 #16 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x9d) [0x7fcb87a2904d]   
 #17 /usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7fcb87a2927b]   
 #18 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x9217) [0x7fcb87a2d217]   
 #19 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(smbd_process+0x6c9) [0x7fcb8aec4649]   
 #20 /usr/sbin/smbd(+0xa724) [0x562875a9e724]   
 #21 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0xaea3) [0x7fcb87a2eea3]   
 #22 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x9277) [0x7fcb87a2d277]   
 #23 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x9d) [0x7fcb87a2904d]   
 #24 /usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7fcb87a2927b]   
 #25 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x9217) [0x7fcb87a2d217]   
 #26 /usr/sbin/smbd(main+0x1784) [0x562875a9b4f4]   
 #27 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1) [0x7fcb876a52e1]   #28 /usr/sbin/smbd(_start+0x2a) [0x562875a9b5fa] : 1 Time(s)
 ../source3/locking/posix.c:455(decrement_lock_ref_count)  PANIC: assert failed at ../source3/locking/posix.c(455): lock_ref_count >= 0 : 1 Time(s)
 ../source3/smbd/oplock.c:719(oplock_timeout_handler)  Oplock break failed for file tommaso.caravani/mail/places.sqlite-wal -- replying anyway : 1 Time(s)
 ../source3/smbd/trans2.c:1484(unix_filetype)  unix_filetype: unknown filetype 0 : 4 Time(s)

I will provide all the required informations.
Comment 1 Amit Kumar 2019-01-25 06:27:35 UTC 
1. Is issue reported on recent samba version?
 -> If issue happens on latest samba version. coredump, smb.conf, repro steps(if reproduced at will), trigger of crash, your environment details would be handy.
2. Is samba working in domain member, domain server or fileshare configuration?
Comment 2 Jurgen Mehja 2019-01-25 09:06:06 UTC 
Created attachment 14800 [details]
smb.conf
Comment 3 Jurgen Mehja 2019-01-25 09:08:24 UTC 
Created attachment 14801 [details]
smbd coredump 2019/01/25
Comment 4 Jurgen Mehja 2019-01-25 09:10:57 UTC 
1.Version 4.5.12-Debian
Cannot reproduce myself the issue, can't determinate what triggers it unfortunately.
Linux cthulhu 4.9.0-8-amd64 #1 SMP Debian 4.9.110-3+deb9u3 (2018-08-19) x86_64 GNU/Linux

2- It's working as a domain member mainly used for the files.
Comment 5 Amit Kumar 2019-02-07 06:32:44 UTC 
(In reply to Jurgen Mehja from comment #4)
||It's working as a domain member mainly used for the files.
It looks core is fixed in version you tested, is it so?
Comment 6 Jurgen Mehja 2019-02-07 15:12:36 UTC 
(In reply to Amit Kumar from comment #5)
I can confirm it's still happening:

**Unmatched Entries**
../source3/lib/dumpcore.c:303(dump_core)  dumping core in /var/log/samba/cores/smbd : 3 Time(s)
../source3/lib/util.c:791(smb_panic_s3)  PANIC (pid 18997): assert failed: lock_ref_count >= 0 : 1 Time(s)
../source3/lib/util.c:791(smb_panic_s3)  PANIC (pid 5199): assert failed: lock_ref_count >= 0 : 1 Time(s)
../source3/lib/util.c:791(smb_panic_s3)  PANIC (pid 6169): assert failed: lock_ref_count >= 0 : 1 Time(s)
../source3/lib/util.c:902(log_stack_trace)  BACKTRACE: 29 stack frames:
#0 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(log_stack_trace+0x1c) [0x7f943f58bc0c]
#1 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f943f58bce0]
#2 /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(smb_panic+0x2f) [0x7f9441aa919f]
#3 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(+0x1945b0) [0x7f94416dd5b0]
#4 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(+0x1947af) [0x7f94416dd7af]
#5 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(release_posix_lock_posix_flavour+0x1fc) [0x7f94416df94c]
#6 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(brl_unlock+0x566) [0x7f94416dba26]
#7 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(do_unlock+0xce) [0x7f94416d783e]
#8 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(smbd_do_setfilepathinfo+0x1b60) [0x7f94416402b0]
#9 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(+0xf8dcb) [0x7f9441641dcb]
#10 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(reply_trans2+0x645) [0x7f94416446a5]
#11 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(+0x122ef6) [0x7f944166bef6]
#12 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(+0x12532a) [0x7f944166e32a]
#13 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(+0x12631c) [0x7f944166f31c]
#14 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0xaea3) [0x7f943e1daea3]
#15 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x9277) [0x7f943e1d9277]
#16 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f943e1d504d]
#17 /usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f943e1d527b]
#18 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x9217) [0x7f943e1d9217]
#19 /usr/lib/x86_64-linux-gnu/samba/libsmbd-base.so.0(smbd_process+0x6c9) [0x7f9441670649]
#20 /usr/sbin/smbd(+0xa724) [0x55ea300be724]
#21 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0xaea3) [0x7f943e1daea3]
#22 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x9277) [0x7f943e1d9277]
#23 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x9d) [0x7f943e1d504d]
#24 /usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_wait+0x1b) [0x7f943e1d527b]
#25 /usr/lib/x86_64-linux-gnu/libtevent.so.0(+0x9217) [0x7f943e1d9217]
#26 /usr/sbin/smbd(main+0x1784) [0x55ea300bb4f4]
#27 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1) [0x7f943de512e1]
#28 /usr/sbin/smbd(_start+0x2a) [0x55ea300bb5fa] : 3 Time(s)
../source3/locking/posix.c:455(decrement_lock_ref_count)  PANIC: assert failed at ../source3/locking/posix.c(455): lock_ref_count >= 0 : 3 Time(s