panic while renaming file

Bug #1300878 reported by Tristan Hill
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
samba
Fix Released
High
samba (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

Version: 2:4.1.3+dfsg-2ubuntu4

from log file:

2014/04/01 16:38:11.053394, 0] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order: 1:/var/run/samba/locking.tdb 2:<none> 3:<none>
[2014/04/01 16:38:11.053568, 0] ../source3/lib/util.c:785(smb_panic_s3)
  PANIC (pid 1817): invalid lock_order
[2014/04/01 16:38:11.056407, 0] ../source3/lib/util.c:896(log_stack_trace)
  BACKTRACE: 33 stack frames:
   #0 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(log_stack_trace+0x1a) [0x7fc2a8650eba]
   #1 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(smb_panic_s3+0x20) [0x7fc2a8650f90]
   #2 /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(smb_panic+0x2f) [0x7fc2a9b79c6f]
   #3 /usr/lib/x86_64-linux-gnu/samba/libdbwrap.so.0(+0x3255) [0x7fc2a511e255]
   #4 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(smbXsrv_open_create+0x19a) [0x7fc2a97954ca]
   #5 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(file_new+0x73) [0x7fc2a96fa493]
   #6 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(+0xf93dd) [0x7fc2a974d3dd]
   #7 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(create_file_default+0x1ba) [0x7fc2a974e4fa]
   #8 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(+0x1c4beb) [0x7fc2a9818beb]
   #9 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(smb_vfs_call_create_file+0xa5) [0x7fc2a9754ab5]
   #10 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(open_file_fchmod+0x80) [0x7fc2a974c7a0]
   #11 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(file_set_dosmode+0x2f9) [0x7fc2a9743e99]
   #12 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(rename_internals_fsp+0xa0f) [0x7fc2a9726c6f]
   #13 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(smbd_do_setfilepathinfo+0x178c) [0x7fc2a973c4bc]
   #14 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(smbd_smb2_request_process_setinfo+0x46f) [0x7fc2a978e8bf]
   #15 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(smbd_smb2_request_dispatch+0x8b1) [0x7fc2a977cd01]
   #16 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(+0x12958f) [0x7fc2a977d58f]
   #17 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(+0x12648c) [0x7fc2a977a48c]
   #18 /usr/lib/x86_64-linux-gnu/samba/libsamba-sockets.so.0(+0x9c74) [0x7fc2a8422c74]
   #19 /usr/lib/x86_64-linux-gnu/samba/libsamba-sockets.so.0(+0x97a9) [0x7fc2a84227a9]
   #20 /usr/lib/x86_64-linux-gnu/samba/libsamba-sockets.so.0(+0x8686) [0x7fc2a8421686]
   #21 /usr/lib/x86_64-linux-gnu/libtevent.so.0(tevent_common_loop_immediate+0xd4) [0x7fc2a703fe14]
   #22 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(run_events_poll+0x3c) [0x7fc2a8666f7c]
   #23 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(+0x37264) [0x7fc2a8667264]
   #24 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d) [0x7fc2a703f5ed]
   #25 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(smbd_process+0x9d5) [0x7fc2a9768fd5]
   #26 smbd(+0x9fa4) [0x7fc2aa1ddfa4]
   #27 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(run_events_poll+0x16c) [0x7fc2a86670ac]
   #28 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(+0x37300) [0x7fc2a8667300]
   #29 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d) [0x7fc2a703f5ed]
   #30 smbd(main+0x13eb) [0x7fc2aa1dab8b]
   #31 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7fc2a6c97ec5]
   #32 smbd(+0x6f1d) [0x7fc2aa1daf1d]
[2014/04/01 16:38:11.059231, 0] ../source3/lib/dumpcore.c:317(dump_core)
  dumping core in /var/log/samba/cores/smbd

# gdb /usr/sbin/smbd /var/log/samba/cores/smbd/core
...
(gdb) bt full
#0 0x00007fc2a6cacf79 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
        resultvar = 0
        pid = 1817
        selftid = 1817
#1 0x00007fc2a6cb0388 in __GI_abort () at abort.c:89
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0x4, sa_sigaction = 0x4}, sa_mask = {__val = {140474084789504, 140474049955744, 140474052240727, 140471200382977, 0, 0,
              140473998495016, 502, 140474049955744, 140473969806672, 140474052269333, 140474047766096, 18446744073709551615, 140474050024256, 140735896838208, 6}},
          sa_flags = -1591516624, sa_restorer = 0x0}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2 0x00007fc2a865eecb in dump_core () at ../source3/lib/dumpcore.c:336
        called = true
        __FUNCTION__ = "dump_core"
#3 0x00007fc2a8650ff7 in smb_panic_s3 (why=<optimised out>) at ../source3/lib/util.c:808
        cmd = <optimised out>
        result = <optimised out>
        __FUNCTION__ = "smb_panic_s3"
#4 0x00007fc2a9b79c6f in smb_panic (why=why@entry=0x7fc2a5122b1c "invalid lock_order") at ../lib/util/fault.c:159
No locals.
#5 0x00007fc2a511e255 in dbwrap_check_lock_order (mem_ctx=0x7fc2abec8550, db=0x7fc2abe928a0) at ../lib/dbwrap/dbwrap.c:195
        idx = <optimised out>
        state = 0x0
        locked_dbs = {0x7fc2abe89700, 0x0, 0x0}
#6 dbwrap_fetch_locked_internal (db=db@entry=0x7fc2abe928a0, mem_ctx=mem_ctx@entry=0x7fc2abec8d00, key=..., db_fn=0x7fc2a5120d50 <db_tdb_fetch_locked>)
    at ../lib/dbwrap/dbwrap.c:225
        rec = <optimised out>
        frame = 0x7fc2abec8550
#7 0x00007fc2a511e468 in dbwrap_fetch_locked (db=db@entry=0x7fc2abe928a0, mem_ctx=mem_ctx@entry=0x7fc2abec8d00, key=...) at ../lib/dbwrap/dbwrap.c:245
No locals.
#8 0x00007fc2a97954ca in smbXsrv_open_global_allocate (_global=<synthetic pointer>, mem_ctx=0x7fc2abec8d00, db=0x7fc2abe928a0) at ../source3/smbd/smbXsrv_open.c:507
        is_free = false
        was_free = false
        key_buf = "\bQĺ"
        key = <optimised out>
        id = 139576506
        i = 0
        global = 0x7fc2abec8da0
        last_free = 0
        min_tries = 3
#9 smbXsrv_open_create (conn=0x7fc2abe7f0c0, session_info=<optimised out>, now=130408402910530290, _open=_open@entry=0x7fffa1236588) at ../source3/smbd/smbXsrv_open.c:811
        table = 0x7fc2abe95c80
        local_rec = 0x0
        op = 0x7fc2abec8d00
        ptr = 0x0
        global = 0x0
        status = <optimised out>
        current_sid = 0x7fc2abea6490
        current_token = <optimised out>
        __FUNCTION__ = "smbXsrv_open_create"
#10 0x00007fc2a96fa493 in file_new (req=req@entry=0x0, conn=conn@entry=0x7fc2abe9e290, result=result@entry=0x7fffa1236668) at ../source3/smbd/files.c:100
        op = 0x0
        now = <optimised out>
        sconn = 0x7fc2abe866f0
        fsp = 0x7fc2abec8b00
        status = <optimised out>
        __FUNCTION__ = "file_new"
#11 0x00007fc2a974d3dd in create_file_unixpath (conn=conn@entry=0x7fc2abe9e290, req=req@entry=0x0, smb_fname=smb_fname@entry=0x7fc2abec6df0, access_mask=access_mask@entry=2,
    share_access=share_access@entry=7, create_disposition=create_disposition@entry=1, create_options=create_options@entry=0, file_attributes=file_attributes@entry=0,
    oplock_request=oplock_request@entry=8, allocation_size=allocation_size@entry=0, private_flags=private_flags@entry=0, sd=sd@entry=0x0, ea_list=ea_list@entry=0x0,
    result=result@entry=0x7fffa1236730, pinfo=pinfo@entry=0x7fffa123672c) at ../source3/smbd/open.c:3883
        info = 1
        fsp = 0x0
        status = <optimised out>
        __FUNCTION__ = "create_file_unixpath"
#12 0x00007fc2a974e4fa in create_file_default (conn=0x7fc2abe9e290, req=0x0, root_dir_fid=<optimised out>, smb_fname=0x7fc2abec6df0, access_mask=2, share_access=7,
    create_disposition=create_disposition@entry=1, create_options=create_options@entry=0, file_attributes=file_attributes@entry=0, oplock_request=oplock_request@entry=8,
    allocation_size=allocation_size@entry=0, private_flags=private_flags@entry=0, sd=sd@entry=0x0, ea_list=ea_list@entry=0x0, result=result@entry=0x7fffa12368c8,
    pinfo=pinfo@entry=0x0) at ../source3/smbd/open.c:4303
        info = 1
        status = <optimised out>
        stream_name = <optimised out>
        __FUNCTION__ = "create_file_default"
#13 0x00007fc2a9818beb in vfswrap_create_file (handle=<optimised out>, req=<optimised out>, root_dir_fid=<optimised out>, smb_fname=<optimised out>, access_mask=<optimised out>,
    share_access=<optimised out>, create_disposition=1, create_options=0, file_attributes=0, oplock_request=8, allocation_size=0, private_flags=0, sd=0x0, ea_list=0x0,
    result=0x7fffa12368c8, pinfo=0x0) at ../source3/modules/vfs_default.c:527
No locals.
#14 0x00007fc2a9754ab5 in smb_vfs_call_create_file (handle=<optimised out>, req=req@entry=0x0, root_dir_fid=root_dir_fid@entry=0, smb_fname=smb_fname@entry=0x7fc2abec6df0,
    access_mask=access_mask@entry=2, share_access=share_access@entry=7, create_disposition=create_disposition@entry=1, create_options=create_options@entry=0,
    file_attributes=file_attributes@entry=0, oplock_request=oplock_request@entry=8, allocation_size=allocation_size@entry=0, private_flags=private_flags@entry=0, sd=sd@entry=0x0,
    ea_list=ea_list@entry=0x0, result=result@entry=0x7fffa12368c8, pinfo=pinfo@entry=0x0) at ../source3/smbd/vfs.c:1544
No locals.
#15 0x00007fc2a974c7a0 in open_file_fchmod (conn=conn@entry=0x7fc2abe9e290, smb_fname=smb_fname@entry=0x7fc2abec6df0, result=result@entry=0x7fffa12368c8)
    at ../source3/smbd/open.c:2846
No locals.
#16 0x00007fc2a9743e99 in file_set_dosmode (conn=conn@entry=0x7fc2abe9e290, smb_fname=smb_fname@entry=0x7fc2abec6df0, dosmode=<optimised out>, parent_dir=parent_dir@entry=0x0,
    newfile=newfile@entry=true) at ../source3/smbd/dosmode.c:886
        mask = <optimised out>
        tmp = <optimised out>
        unixmode = 33264
        ret = <optimised out>
        lret = -1
        old_mode = <optimised out>
        new_create_timespec = {tv_sec = 1396350353, tv_nsec = <optimised out>}
        fsp = 0x0
        __FUNCTION__ = "file_set_dosmode"
#17 0x00007fc2a9726c6f in rename_internals_fsp (conn=conn@entry=0x7fc2abe9e290, fsp=fsp@entry=0x7fc2abea6fc0, smb_fname_dst_in=<optimised out>, attrs=attrs@entry=6,
    replace_if_exists=<optimised out>) at ../source3/smbd/reply.c:6500
        old_dosmode = <optimised out>
        create_options = 0
        ctx = <optimised out>
        smb_fname_dst = 0x7fc2abec6df0
        status = {v = 0}
        lck = 0x7fc2abec7d10
        dst_exists = <optimised out>
        old_is_stream = <optimised out>
        new_is_stream = <optimised out>
        __FUNCTION__ = "rename_internals_fsp"
#18 0x00007fc2a973c4bc in smb2_file_rename_information (req=0x7fc2a9d907a0 <DEBUGLEVEL_CLASS>, smb_fname_src=<optimised out>, fsp=0x7fc2abea6fc0, total_data=64,
    pdata=<optimised out>, conn=0x7fc2abe9e290) at ../source3/smbd/trans2.c:6273
        overwrite = false
        len = <optimised out>
        newname = 0x7fc2abec6840 "qualcare uk 1 2.pdf"
        status = {v = 0}
        ctx = 0x7fc2abec67e0
        smb_fname_dst = 0x7fc2abec6920
#19 smbd_do_setfilepathinfo (conn=conn@entry=0x7fc2abe9e290, req=req@entry=0x7fc2abec27d0, mem_ctx=<optimised out>, info_level=<optimised out>, fsp=fsp@entry=0x7fc2abea6fc0,
    smb_fname=<optimised out>, ppdata=ppdata@entry=0x7fffa1236c28, total_data=total_data@entry=64, ret_data_size=ret_data_size@entry=0x7fffa1236c1c)
    at ../source3/smbd/trans2.c:8022
        pdata = <optimised out>
        status = {v = 0}
        data_return_size = 0
        __FUNCTION__ = "smbd_do_setfilepathinfo"
#20 0x00007fc2a978e8bf in smbd_smb2_setinfo_send (in_additional_information=0, in_input_buffer=..., in_file_info_class=10 '\n', in_info_type=1 '\001', fsp=0x7fc2abea6fc0,
    smb2req=0x7fc2abec1b30, ev=0x7fc2abe7e3a0, mem_ctx=0x7fc2abec1b30) at ../source3/smbd/smb2_setinfo.c:286
        file_info_level = <optimised out>
        data = 0x7fc2abea9420 ""
        data_size = 64
        ret_size = 0
        state = 0x7fc2abec2760
        smbreq = 0x7fc2abec27d0
        conn = 0x7fc2abe9e290
        status = <optimised out>
        req = 0x7fc2abec25e0
#21 smbd_smb2_request_process_setinfo (req=req@entry=0x7fc2abec1b30) at ../source3/smbd/smb2_setinfo.c:103
        status = <optimised out>
        inbody = <optimised out>
        in_info_type = 1 '\001'
        in_file_info_class = 10 '\n'
        in_input_buffer_offset = <optimised out>
        in_input_buffer_length = 64
        in_input_buffer = {data = 0x7fc2abec22c0 "", length = 64}
        in_additional_information = 0
        in_file_id_persistent = <optimised out>
        in_file_id_volatile = <optimised out>
        in_fsp = 0x7fc2abea6fc0
        __FUNCTION__ = "smbd_smb2_request_process_setinfo"
#22 0x00007fc2a977cd01 in smbd_smb2_request_dispatch (req=req@entry=0x7fc2abec1b30) at ../source3/smbd/smb2_server.c:2258
        conn = 0x7fc2abe7f0c0
        call = <optimised out>
        intf_v = <optimised out>
        inhdr = <optimised out>
        opcode = 17
        flags = <optimised out>
        mid = <optimised out>
        status = <optimised out>
        session_status = <optimised out>
        allowed_flags = <optimised out>
        return_value = <optimised out>
        x = <optimised out>
        signing_required = <optimised out>
        encryption_required = <optimised out>
        __FUNCTION__ = "smbd_smb2_request_dispatch"
#23 0x00007fc2a977d58f in smbd_smb2_request_incoming (subreq=0x0) at ../source3/smbd/smb2_server.c:3270
        sconn = 0x7fc2abe866f0
        status = <optimised out>
        req = 0x7fc2abec1b30
        __FUNCTION__ = "smbd_smb2_request_incoming"
#24 0x00007fc2a977a48c in smbd_smb2_request_read_done (subreq=0x0) at ../source3/smbd/smb2_server.c:3131
        req = 0x7fc2abec6620
        state = 0x7fc2abeae390
        ret = 164
        sys_errno = 32706
        status = <optimised out>
        now = <optimised out>
        __FUNCTION__ = "smbd_smb2_request_read_done"
#25 0x00007fc2a8422c74 in tstream_readv_pdu_queue_done (subreq=0x7fc2abec1f00) at ../lib/tsocket/tsocket_helpers.c:430
        req = 0x7fc2abec1c50
        state = 0x7fc2abec1dd0
        ret = 164
        sys_errno = 32706
#26 0x00007fc2a84227a9 in tstream_readv_pdu_readv_done (subreq=0x7fc2abec23d0) at ../lib/tsocket/tsocket_helpers.c:319
        req = 0x7fc2abec1f00
        state = 0x7fc2abec2080
        ret = <optimised out>
        sys_errno = 32706
#27 0x00007fc2a8421686 in tstream_readv_done (subreq=0x0) at ../lib/tsocket/tsocket.c:604
        req = 0x7fc2abec23d0
        state = 0x7fc2abec2550
        ret = 160
        sys_errno = 32706
#28 0x00007fc2a703fe14 in tevent_common_loop_immediate () from /usr/lib/x86_64-linux-gnu/libtevent.so.0
No symbol table info available.
#29 0x00007fc2a8666f7c in run_events_poll (ev=0x7fc2abe7e3a0, pollrtn=0, pfds=0x0, num_pfds=0) at ../source3/lib/events.c:192
No locals.
#30 0x00007fc2a8667264 in s3_event_loop_once (ev=0x7fc2abe7e3a0, location=<optimised out>) at ../source3/lib/events.c:303
        state = 0x7fc2abe7d0e0
        timeout = 2147483647
        num_pfds = 0
        poll_errno = <optimised out>
#31 0x00007fc2a703f5ed in _tevent_loop_once () from /usr/lib/x86_64-linux-gnu/libtevent.so.0
No symbol table info available.
#32 0x00007fc2a9768fd5 in smbd_process (ev_ctx=0x7fc2abe7e3a0, msg_ctx=<optimised out>, sock_fd=<optimised out>, interactive=<optimised out>) at ../source3/smbd/process.c:3627
        frame = 0x7fc2abec67e0
        conn = <optimised out>
        sconn = <optimised out>
        ss = {ss_family = 2, __ss_align = 0,
          __ss_padding = "\000\000\000\000\000\000\000\000\220\344\347\253\302\177\000\000\000\000\000\000\000\000\000\000\031i#\224Bd%~!\000\000\000\000\000\000\000W\345\373\251\302\177\000\000\001\000\000\000\302\177\000\000\000\000\000\000\000\000\000\000\220\344\347\253\302\177\000\000\220\353f\251\302\177\000\000\000\000\000\000\000\000\000\000!\000\000\000\000\000\000\000\240\343\347\253\302\177\000\000\025U\374\251\302\177\000"}
        sa = 0x7fffa1236f90
        sa_socklen = 16
        local_address = 0x7fc2abe7eef0
        remote_address = 0x7fc2abe86b50
        locaddr = <optimised out>
        remaddr = <optimised out>
        rhost = 0x0
        ret = <optimised out>
        __FUNCTION__ = "smbd_process"
#33 0x00007fc2aa1ddfa4 in smbd_accept_connection (ev=0x7fc2abe7e3a0, fde=<optimised out>, flags=<optimised out>, private_data=<optimised out>) at ../source3/smbd/server.c:621
        status = <optimised out>
        s = 0x0
        msg_ctx = 0x7fc2abe7e490
        addr = {ss_family = 2, __ss_align = 0,
          __ss_padding = '\000' <repeats 40 times>, "\240\343\347\253\302\177\000\000(1\351\253\302\177\000\000\360f\350\253\302\177\000\000\000\000\000\000\000\000\000\000\340\320\347\253\302\177\000\000\005\000\000\000\000\000\000\000!\000\000\000\000\000\000\000\005\000\000\000\000\000\000\000 \202\350\253\302\177\000"}
        in_addrlen = 16
        fd = 33
        pid = 0
        unique_id = 9089781660033181977
        __FUNCTION__ = "smbd_accept_connection"
#34 0x00007fc2a86670ac in run_events_poll (ev=0x7fc2abe7e3a0, pollrtn=<optimised out>, pfds=0x7fc2abe88220, num_pfds=5) at ../source3/lib/events.c:257
        pfd = <optimised out>
        flags = <optimised out>
        state = <optimised out>
        pollfd_idx = 0x7fc2abe7ed40
        fde = 0x7fc2abe93a20
        pollrtn = <optimised out>
        num_pfds = 5
        pfds = 0x7fc2abe88220
        ev = 0x7fc2abe7e3a0
#35 0x00007fc2a8667300 in s3_event_loop_once (ev=0x7fc2abe7e3a0, location=<optimised out>) at ../source3/lib/events.c:326
        state = 0x7fc2abe7d0e0
        timeout = 20000
        num_pfds = 5
        poll_errno = 4
#36 0x00007fc2a703f5ed in _tevent_loop_once () from /usr/lib/x86_64-linux-gnu/libtevent.so.0
No symbol table info available.
#37 0x00007fc2aa1dab8b in smbd_parent_loop (parent=<optimised out>, ev_ctx=0x7fc2abe7e3a0) at ../source3/smbd/server.c:943
        ret = <optimised out>
        frame = 0x7fc2abe85420
#38 main (argc=<optimised out>, argv=<optimised out>) at ../source3/smbd/server.c:1577
        is_daemon = <optimised out>
        interactive = <optimised out>
        Fork = false
        no_process_group = 144
        log_stdout = <optimised out>
        ports = 0x0
        profile_level = 0x0
        opt = <optimised out>
        pc = <optimised out>
        print_build_options = 144
        long_options = {{longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x7fc2a7660340 <poptHelpOptions>, val = 0, descrip = 0x7fc2aa1e00f2 "Help options:",
            argDescrip = 0x0}, {longName = 0x7fc2aa1e0100 "daemon", shortName = 68 'D', argInfo = 0, arg = 0x0, val = 1000, descrip = 0x7fc2aa1e0107 "Become a daemon (default)",
            argDescrip = 0x0}, {longName = 0x7fc2aa1e0121 "interactive", shortName = 105 'i', argInfo = 0, arg = 0x0, val = 1001,
            descrip = 0x7fc2aa1e0bf0 "Run interactive (not a daemon)", argDescrip = 0x0}, {longName = 0x7fc2aa1e012d "foreground", shortName = 70 'F', argInfo = 0, arg = 0x0,
            val = 1002, descrip = 0x7fc2aa1e0c10 "Run daemon in foreground (for daemontools, etc.)", argDescrip = 0x0}, {longName = 0x7fc2aa1e0138 "no-process-group",
            shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 1003, descrip = 0x7fc2aa1e0c48 "Don't create a new process group", argDescrip = 0x0}, {
            longName = 0x7fc2aa1e0149 "log-stdout", shortName = 83 'S', argInfo = 0, arg = 0x0, val = 1004, descrip = 0x7fc2aa1e0154 "Log to stdout", argDescrip = 0x0}, {
            longName = 0x7fc2aa1e0162 "build-options", shortName = 98 'b', argInfo = 0, arg = 0x0, val = 98, descrip = 0x7fc2aa1e0170 "Print build options", argDescrip = 0x0}, {
            longName = 0x7fc2aa1e0184 "port", shortName = 112 'p', argInfo = 1, arg = 0x7fffa1237270, val = 0, descrip = 0x7fc2aa1e0189 "Listen on the specified ports",
            argDescrip = 0x0}, {longName = 0x7fc2aa1e01a7 "profiling-level", shortName = 80 'P', argInfo = 1, arg = 0x7fffa1237278, val = 0,
            descrip = 0x7fc2aa1e01b7 "Set profiling level", argDescrip = 0x7fc2aa1e01cb "PROFILE_LEVEL"}, {longName = 0x0, shortName = 0 '\000', argInfo = 4,
            arg = 0x7fc2a8cd56e0 <popt_common_samba>, val = 0, descrip = 0x7fc2aa1e01d9 "Common samba options:", argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000',
            argInfo = 4, arg = 0x7fc2a8cd4aa0 <popt_common_dynconfig>, val = 0, descrip = 0x7fc2aa1e0c70 "Build-time configuration overrides:", argDescrip = 0x0}, {
            longName = 0x0, shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 0, descrip = 0x0, argDescrip = 0x0}}
        parent = 0x7fc2abe866f0
        frame = <optimised out>
        status = <optimised out>
        ev_ctx = 0x7fc2abe7e3a0
        msg_ctx = 0x7fc2abe7e490
        server_id = {pid = 1437, task_id = 0, vnn = 4294967295, unique_id = 12420853167164585600}
        se = <optimised out>
        np_dir = <optimised out>
        smbd_shim_fns = {cancel_pending_lock_requests_by_fid = 0x7fc2a9752d30 <smbd_cancel_pending_lock_requests_by_fid>,
          send_stat_cache_delete_message = 0x7fc2a9758830 <smbd_send_stat_cache_delete_message>, change_to_root_user = 0x7fc2a9741d90 <smbd_change_to_root_user>,
          contend_level2_oplocks_begin = 0x7fc2a979ddb0 <smbd_contend_level2_oplocks_begin>, contend_level2_oplocks_end = 0x7fc2a979df10 <smbd_contend_level2_oplocks_end>,
          become_root = 0x7fc2a9741e70 <smbd_become_root>, unbecome_root = 0x7fc2a9741ea0 <smbd_unbecome_root>, exit_server = 0x7fc2a9797020 <smbd_exit_server>,
          exit_server_cleanly = 0x7fc2a9797040 <smbd_exit_server_cleanly>}
        __FUNCTION__ = "main"

Revision history for this message
Robie Basak (racb) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better.

We just updated Trusty to 2:4.1.6+dfsg-1ubuntu1 yesterday. Could this problem now be fixed?

Revision history for this message
Tristan Hill (stan) wrote :
Download full text (19.7 KiB)

Still getting it with 2:4.1.6+dfsg-1ubuntu1

[2014/04/03 14:40:15.203608, 0] ../lib/dbwrap/dbwrap.c:193(dbwrap_check_lock_order)
  Lock order violation: Trying /var/run/samba/smbXsrv_open_global.tdb at 1 while /var/run/samba/locking.tdb at 1 is locked
[2014/04/03 14:40:15.203964, 0] ../lib/dbwrap/dbwrap.c:133(debug_lock_order)
  lock order: 1:/var/run/samba/locking.tdb 2:<none> 3:<none>
[2014/04/03 14:40:15.204424, 0] ../source3/lib/util.c:785(smb_panic_s3)
  PANIC (pid 26515): invalid lock_order
[2014/04/03 14:40:15.207229, 0] ../source3/lib/util.c:896(log_stack_trace)
  BACKTRACE: 29 stack frames:
   #0 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(log_stack_trace+0x1a) [0x7f70713ecf3a]
   #1 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(smb_panic_s3+0x20) [0x7f70713ed010]
   #2 /usr/lib/x86_64-linux-gnu/libsamba-util.so.0(smb_panic+0x2f) [0x7f7072915c6f]
   #3 /usr/lib/x86_64-linux-gnu/samba/libdbwrap.so.0(+0x3255) [0x7f706deba255]
   #4 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(smbXsrv_open_create+0x19a) [0x7f707253203a]
   #5 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(file_new+0x73) [0x7f70724965d3]
   #6 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(+0xf997d) [0x7f70724e997d]
   #7 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(create_file_default+0x1ba) [0x7f70724eaa9a]
   #8 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(+0x1c586b) [0x7f70725b586b]
   #9 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(smb_vfs_call_create_file+0xa5) [0x7f70724f1065]
   #10 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(open_file_fchmod+0x80) [0x7f70724e8d40]
   #11 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(file_set_dosmode+0x2f9) [0x7f70724e0439]
   #12 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(rename_internals_fsp+0xa0f) [0x7f70724c320f]
   #13 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(smbd_do_setfilepathinfo+0x178c) [0x7f70724d8a5c]
   #14 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(smbd_smb2_request_process_setinfo+0x46f) [0x7f707252b41f]
   #15 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(smbd_smb2_request_dispatch+0x8d1) [0x7f7072517c21]
   #16 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(+0x128c4b) [0x7f7072518c4b]
   #17 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(+0x1298bc) [0x7f70725198bc]
   #18 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(run_events_poll+0x16c) [0x7f70714030ac]
   #19 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(+0x37300) [0x7f7071403300]
   #20 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d) [0x7f706fddb5ed]
   #21 /usr/lib/x86_64-linux-gnu/samba/libsmbd_base.so.0(smbd_process+0x9ca) [0x7f707250558a]
   #22 smbd(+0x9fa4) [0x7f7072f79fa4]
   #23 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(run_events_poll+0x16c) [0x7f70714030ac]
   #24 /usr/lib/x86_64-linux-gnu/libsmbconf.so.0(+0x37300) [0x7f7071403300]
   #25 /usr/lib/x86_64-linux-gnu/libtevent.so.0(_tevent_loop_once+0x8d) [0x7f706fddb5ed]
   #26 smbd(main+0x13eb) [0x7f7072f76b8b]
   #27 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f706fa33ec5]
   #28 smbd(+0x6f1d) [0x7f7072f76f1d]
[2014/04/03 14:40:15.210371, 0] ../source3/lib/dumpcore.c:317(dump_core)
  dumping core in /var/lo...

Revision history for this message
Tristan Hill (stan) wrote :
Revision history for this message
Robie Basak (racb) wrote :

Setting Importance to Medium for now. We can bump it if it turns out that many more people are affected.

Changed in samba (Ubuntu):
importance: Undecided → Medium
Revision history for this message
Robie Basak (racb) wrote :

Thank you for confirming it still affects the latest version, and for filing the bug upstream. I've linked the upstream bug to this bug.

Changed in samba:
importance: Unknown → Medium
status: Unknown → Confirmed
Changed in samba:
status: Confirmed → Invalid
Changed in samba:
importance: Medium → Unknown
status: Invalid → Unknown
Changed in samba (Ubuntu):
status: New → Triaged
milestone: none → trusty-updates
Changed in samba:
importance: Unknown → High
status: Unknown → In Progress
Changed in samba:
status: In Progress → Fix Released
Revision history for this message
Sebastien Bacher (seb128) wrote :

That might be something we want to backport to trusty, if somebody is interested it would be useful to have a testcase description (see https://wiki.ubuntu.com/StableReleaseUpdates)

Changed in samba (Ubuntu):
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.