freenas11.2 u5 smb_panic problem

fb0p1

Dabbler
Joined
Aug 29, 2016
Messages
11
i encounter smb_panic problem, log text

[2019/08/12 15:17:43.344133, 1] ../source3/printing/printer_list.c:234(printer_list_get_last_refresh)
Failed to fetch record!
[2019/08/12 15:17:43.344204, 1] ../source3/smbd/server_reload.c:64(delete_and_reload_printers)
pcap cache not loaded
[2019/08/12 15:17:43.346405, 1] ../source3/printing/printer_list.c:234(printer_list_get_last_refresh)
Failed to fetch record!
[2019/08/12 15:17:43.346442, 1] ../source3/smbd/server_reload.c:64(delete_and_reload_printers)
pcap cache not loaded
[2019/08/12 15:17:43.350196, 1] ../source3/printing/printer_list.c:234(printer_list_get_last_refresh)
Failed to fetch record!
[2019/08/12 15:17:43.350252, 1] ../source3/smbd/server_reload.c:64(delete_and_reload_printers)
pcap cache not loaded
[2019/08/12 15:17:46.469143, 0] ../source3/lib/popt_common.c:67(popt_s3_talloc_log_fn)
talloc: access after free error - first free may be at ../lib/util/memcache.c:219
[2019/08/12 15:17:46.469251, 0] ../source3/lib/popt_common.c:67(popt_s3_talloc_log_fn)
Bad talloc magic value - access after free
[2019/08/12 15:17:46.469275, 0] ../source3/lib/util.c:816(smb_panic_s3)
PANIC (pid 49911): Bad talloc magic value - access after free
[2019/08/12 15:17:46.470900, 0] ../lib/util/fault.c:261(log_stack_trace)
BACKTRACE: 24 stack frames:
#0 0x8018a9487 <log_stack_trace+0x37> at /usr/local/lib/samba4/libsamba-util.so.0
#1 0x80215b0c2 <smb_panic_s3+0x52> at /usr/local/lib/samba4/libsmbconf.so.0
#2 0x8018a9277 <smb_panic+0x17> at /usr/local/lib/samba4/libsamba-util.so.0
#3 0x804f416f5 <talloc_set_memlimit+0x6f5> at /usr/local/lib/libtalloc.so.2
#4 0x804f4179f <talloc_set_memlimit+0x79f> at /usr/local/lib/libtalloc.so.2
#5 0x801d617fb <create_file_default+0x516b> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#6 0x801d5d8ce <create_file_default+0x123e> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#7 0x801d5c8a4 <create_file_default+0x214> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#8 0x801d9bb34 <smbd_smb2_request_process_create+0x1694> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#9 0x801d91ef7 <smbd_smb2_request_dispatch+0xc27> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#10 0x801d9524d <smbd_smb2_process_negprot+0x193d> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#11 0x805358afd <tevent_common_invoke_fd_handler+0x8d> at /usr/local/lib/libtevent.so.0
#12 0x80535b85b <tevent_context_same_loop+0xcfb> at /usr/local/lib/libtevent.so.0
#13 0x805357e4e <_tevent_loop_once+0xce> at /usr/local/lib/libtevent.so.0
#14 0x80535808b <tevent_common_loop_wait+0x5b> at /usr/local/lib/libtevent.so.0
#15 0x801d802cd <smbd_process+0x8ad> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#16 0x102eb4f <main+0x460f> at /usr/local/sbin/smbd
#17 0x805358afd <tevent_common_invoke_fd_handler+0x8d> at /usr/local/lib/libtevent.so.0
#18 0x80535b85b <tevent_context_same_loop+0xcfb> at /usr/local/lib/libtevent.so.0
#19 0x805357e4e <_tevent_loop_once+0xce> at /usr/local/lib/libtevent.so.0
#20 0x80535808b <tevent_common_loop_wait+0x5b> at /usr/local/lib/libtevent.so.0
#21 0x102cf84 <main+0x2a44> at /usr/local/sbin/smbd
#22 0x102c331 <main+0x1df1> at /usr/local/sbin/smbd
#23 0x1027ec5 <_start+0xa5> at /usr/local/sbin/smbd
[2019/08/12 15:17:46.471218, 0] ../source3/lib/dumpcore.c:315(dump_core)
dumping core in /var/db/system/cores
[2019/08/12 15:17:46.480188, 0] ../source3/lib/popt_common.c:67(popt_s3_talloc_log_fn)
talloc: access after free error - first free may be at ../lib/util/memcache.c:219
[2019/08/12 15:17:46.480265, 0] ../source3/lib/popt_common.c:67(popt_s3_talloc_log_fn)
Bad talloc magic value - access after free
[2019/08/12 15:17:46.480288, 0] ../source3/lib/util.c:816(smb_panic_s3)
PANIC (pid 49920): Bad talloc magic value - access after free
[2019/08/12 15:17:46.481714, 0] ../lib/util/fault.c:261(log_stack_trace)
BACKTRACE: 24 stack frames:
#0 0x8018a9487 <log_stack_trace+0x37> at /usr/local/lib/samba4/libsamba-util.so.0
#1 0x80215b0c2 <smb_panic_s3+0x52> at /usr/local/lib/samba4/libsmbconf.so.0
#2 0x8018a9277 <smb_panic+0x17> at /usr/local/lib/samba4/libsamba-util.so.0
#3 0x804f416f5 <talloc_set_memlimit+0x6f5> at /usr/local/lib/libtalloc.so.2
#4 0x804f4179f <talloc_set_memlimit+0x79f> at /usr/local/lib/libtalloc.so.2
#5 0x801d617fb <create_file_default+0x516b> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#6 0x801d5d8ce <create_file_default+0x123e> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#7 0x801d5c8a4 <create_file_default+0x214> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#8 0x801d9bb34 <smbd_smb2_request_process_create+0x1694> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#9 0x801d91ef7 <smbd_smb2_request_dispatch+0xc27> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#10 0x801d9524d <smbd_smb2_process_negprot+0x193d> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#11 0x805358afd <tevent_common_invoke_fd_handler+0x8d> at /usr/local/lib/libtevent.so.0
#12 0x80535b85b <tevent_context_same_loop+0xcfb> at /usr/local/lib/libtevent.so.0
#13 0x805357e4e <_tevent_loop_once+0xce> at /usr/local/lib/libtevent.so.0
#14 0x80535808b <tevent_common_loop_wait+0x5b> at /usr/local/lib/libtevent.so.0
#15 0x801d802cd <smbd_process+0x8ad> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#16 0x102eb4f <main+0x460f> at /usr/local/sbin/smbd
#17 0x805358afd <tevent_common_invoke_fd_handler+0x8d> at /usr/local/lib/libtevent.so.0
#18 0x80535b85b <tevent_context_same_loop+0xcfb> at /usr/local/lib/libtevent.so.0
#19 0x805357e4e <_tevent_loop_once+0xce> at /usr/local/lib/libtevent.so.0
#20 0x80535808b <tevent_common_loop_wait+0x5b> at /usr/local/lib/libtevent.so.0
#21 0x102cf84 <main+0x2a44> at /usr/local/sbin/smbd
#22 0x102c331 <main+0x1df1> at /usr/local/sbin/smbd
#23 0x1027ec5 <_start+0xa5> at /usr/local/sbin/smbd
[2019/08/12 15:17:46.482015, 0] ../source3/lib/dumpcore.c:315(dump_core)
dumping core in /var/db/system/cores
[2019/08/12 15:17:46.493652, 0] ../source3/lib/popt_common.c:67(popt_s3_talloc_log_fn)
talloc: access after free error - first free may be at ../lib/util/memcache.c:219
[2019/08/12 15:17:46.493710, 0] ../source3/lib/popt_common.c:67(popt_s3_talloc_log_fn)
Bad talloc magic value - access after free
[2019/08/12 15:17:46.493733, 0] ../source3/lib/util.c:816(smb_panic_s3)
PANIC (pid 49942): Bad talloc magic value - access after free
[2019/08/12 15:17:46.495129, 0] ../lib/util/fault.c:261(log_stack_trace)
BACKTRACE: 24 stack frames:
#0 0x8018a9487 <log_stack_trace+0x37> at /usr/local/lib/samba4/libsamba-util.so.0
#1 0x80215b0c2 <smb_panic_s3+0x52> at /usr/local/lib/samba4/libsmbconf.so.0
#2 0x8018a9277 <smb_panic+0x17> at /usr/local/lib/samba4/libsamba-util.so.0
#3 0x804f416f5 <talloc_set_memlimit+0x6f5> at /usr/local/lib/libtalloc.so.2
#4 0x804f4179f <talloc_set_memlimit+0x79f> at /usr/local/lib/libtalloc.so.2
#5 0x801d617fb <create_file_default+0x516b> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#6 0x801d5d8ce <create_file_default+0x123e> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#7 0x801d5c8a4 <create_file_default+0x214> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#8 0x801d9bb34 <smbd_smb2_request_process_create+0x1694> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#9 0x801d91ef7 <smbd_smb2_request_dispatch+0xc27> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#10 0x801d9524d <smbd_smb2_process_negprot+0x193d> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#11 0x805358afd <tevent_common_invoke_fd_handler+0x8d> at /usr/local/lib/libtevent.so.0
#12 0x80535b85b <tevent_context_same_loop+0xcfb> at /usr/local/lib/libtevent.so.0
#13 0x805357e4e <_tevent_loop_once+0xce> at /usr/local/lib/libtevent.so.0
#14 0x80535808b <tevent_common_loop_wait+0x5b> at /usr/local/lib/libtevent.so.0
#15 0x801d802cd <smbd_process+0x8ad> at /usr/local/lib/samba4/private/libsmbd-base-samba4.so
#16 0x102eb4f <main+0x460f> at /usr/local/sbin/smbd
#17 0x805358afd <tevent_common_invoke_fd_handler+0x8d> at /usr/local/lib/libtevent.so.0
#18 0x80535b85b <tevent_context_same_loop+0xcfb> at /usr/local/lib/libtevent.so.0
#19 0x805357e4e <_tevent_loop_once+0xce> at /usr/local/lib/libtevent.so.0
#20 0x80535808b <tevent_common_loop_wait+0x5b> at /usr/local/lib/libtevent.so.0
#21 0x102cf84 <main+0x2a44> at /usr/local/sbin/smbd
#22 0x102c331 <main+0x1df1> at /usr/local/sbin/smbd
#23 0x1027ec5 <_start+0xa5> at /usr/local/sbin/smbd
 

Attachments

  • log.rar
    184.4 KB · Views: 278

fb0p1

Dabbler
Joined
Aug 29, 2016
Messages
11
testparm -s
# Global parameters
[global]
aio max threads = 2
deadtime = 15
disable spoolss = Yes
dns proxy = No
dos charset = CP437
hostname lookups = Yes
kernel change notify = No
lm announce = Yes
load printers = No
logging = file
max log size = 51200
max open files = 3765809
netbios name = FREENAS227
nsupdate command = /usr/local/bin/samba-nsupdate -g
obey pam restrictions = Yes
printcap name = /dev/null
security = USER
server min protocol = SMB2_02
server role = standalone server
server string = FreeNAS Server
time server = Yes
winbind nested groups = No
idmap config *: range = 90000001-100000000
idmap config * : backend = tdb
acl allow execute always = Yes
create mask = 0666
directory mask = 0777
directory name cache size = 0
dos filemode = Yes
ea support = No
map archive = No
store dos attributes = No
strict locking = No


[mwzw4]
aio write size = 0
path = "/mnt/zmpool/mwzw4"
read only = No
veto files = /.snapshot/.windows/.mac/.zfs/
vfs objects = zfs_space zfsacl streams_xattr
zfsacl:acesort = dontcare
nfs4:chown = true
nfs4:acedup = merge
nfs4:mode = special


[mwzw_4]
aio write size = 0
path = "/mnt/zmpool/mwzw_4"
read only = No
veto files = /.snapshot/.windows/.mac/.zfs/
vfs objects = zfs_space zfsacl streams_xattr
zfsacl:acesort = dontcare
nfs4:chown = true
nfs4:acedup = merge
nfs4:mode = special


[mwzw_4a]
aio write size = 0
path = "/mnt/zmpool/mwzw_4a"
read only = No
veto files = /.snapshot/.windows/.mac/.zfs/
vfs objects = zfs_space zfsacl streams_xattr
zfsacl:acesort = dontcare
nfs4:chown = true
nfs4:acedup = merge
nfs4:mode = special


[test]
aio write size = 0
path = "/mnt/zmpool/test"
read only = No
veto files = /.snapshot/.windows/.mac/.zfs/
vfs objects = zfs_space zfsacl streams_xattr
zfsacl:acesort = dontcare
nfs4:chown = true
nfs4:acedup = merge
nfs4:mode = special
 

fb0p1

Dabbler
Joined
Aug 29, 2016
Messages
11
Post output of "testparm -s"
# Global parameters
[global]
aio max threads = 2
deadtime = 15
disable spoolss = Yes
dns proxy = No
dos charset = CP437
hostname lookups = Yes
kernel change notify = No
lm announce = Yes
load printers = No
logging = file
max log size = 51200
max open files = 3765809
netbios name = FREENAS227
nsupdate command = /usr/local/bin/samba-nsupdate -g
obey pam restrictions = Yes
printcap name = /dev/null
security = USER
server min protocol = SMB2_02
server role = standalone server
server string = FreeNAS Server
time server = Yes
winbind nested groups = No
idmap config *: range = 90000001-100000000
idmap config * : backend = tdb
acl allow execute always = Yes
create mask = 0666
directory mask = 0777
directory name cache size = 0
dos filemode = Yes
ea support = No
map archive = No
store dos attributes = No
strict locking = No


[mwzw4]
aio write size = 0
path = "/mnt/zmpool/mwzw4"
read only = No
veto files = /.snapshot/.windows/.mac/.zfs/
vfs objects = zfs_space zfsacl streams_xattr
zfsacl:acesort = dontcare
nfs4:chown = true
nfs4:acedup = merge
nfs4:mode = special


[mwzw_4]
aio write size = 0
path = "/mnt/zmpool/mwzw_4"
read only = No
veto files = /.snapshot/.windows/.mac/.zfs/
vfs objects = zfs_space zfsacl streams_xattr
zfsacl:acesort = dontcare
nfs4:chown = true
nfs4:acedup = merge
nfs4:mode = special


[mwzw_4a]
aio write size = 0
path = "/mnt/zmpool/mwzw_4a"
read only = No
veto files = /.snapshot/.windows/.mac/.zfs/
vfs objects = zfs_space zfsacl streams_xattr
zfsacl:acesort = dontcare
nfs4:chown = true
nfs4:acedup = merge
nfs4:mode = special


[test]
aio write size = 0
path = "/mnt/zmpool/test"
read only = No
veto files = /.snapshot/.windows/.mac/.zfs/
vfs objects = zfs_space zfsacl streams_xattr
zfsacl:acesort = dontcare
nfs4:chown = true
nfs4:acedup = merge
nfs4:mode = special
 

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,554
Do you have an smbd core file under /var/db/system/cores? Which share are you connecting to when it crashes? What are the details of the client?
 

fb0p1

Dabbler
Joined
Aug 29, 2016
Messages
11
Do you have an smbd core file under /var/db/system/cores? Which share are you connecting to when it crashes? What are the details of the client?
each share a lot people(260) access, i don't konw which one
 

fb0p1

Dabbler
Joined
Aug 29, 2016
Messages
11
Do you have an smbd core file under /var/db/system/cores? Which share are you connecting to when it crashes? What are the details of the client?
i guess [mwzw_4a] and [mwzw_4]
 
Last edited:

fb0p1

Dabbler
Joined
Aug 29, 2016
Messages
11
Do you have an smbd core file under /var/db/system/cores? Which share are you connecting to when it crashes? What are the details of the client?
smbd.core
 

Attachments

  • smbd.rar
    8.7 MB · Views: 327

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,554
Okay. Next troubleshooting step (since I may not have time to review the core file for a while) is to remove all the auxiliary parameters you set under Services->SMB. Then service samba_server stop. Then net cache flush, then service samba_server start.
 

fb0p1

Dabbler
Joined
Aug 29, 2016
Messages
11
Okay. Next troubleshooting step (since I may not have time to review the core file for a while) is to remove all the auxiliary parameters you set under Services->SMB. Then service samba_server stop. Then net cache flush, then service samba_server start.
i'll try, thank you.
There are other cases, pid increase fast, lan virus,
 

fb0p1

Dabbler
Joined
Aug 29, 2016
Messages
11
Okay. Next troubleshooting step (since I may not have time to review the core file for a while) is to remove all the auxiliary parameters you set under Services->SMB. Then service samba_server stop. Then net cache flush, then service samba_server start.
the smb_panic still exists, please help me?
 
Top