Bug 16584 - CIFS/SMP panic problem
Summary: CIFS/SMP panic problem
Status: RESOLVED CODE_FIX
Alias: None
Product: File System
Classification: Unclassified
Component: CIFS (show other bugs)
Hardware: All Linux
: P1 normal
Assignee: Jeff Layton
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-08-13 20:19 UTC by diabel
Modified: 2010-09-14 15:17 UTC (History)
2 users (show)

See Also:
Kernel Version: 2.6.35-git11 and previous
Subsystem:
Regression: No
Bisected commit-id:


Attachments
make fs/cifs/connect.lst result (470.97 KB, text/plain)
2010-08-16 00:25 UTC, diabel
Details
patch -- fix potential NULL pointer dereference in cifs_find_smb_session (998 bytes, patch)
2010-08-16 14:37 UTC, Jeff Layton
Details | Diff
fstab file (2.41 KB, application/octet-stream)
2010-08-24 21:04 UTC, diabel
Details
Works on 2.6.35.4 version. (410.32 KB, application/octet-stream)
2010-08-30 13:23 UTC, diabel
Details

Description diabel 2010-08-13 20:19:06 UTC
2.6.35-git11 and previous but older than 2.6.32.14 (last that I've got)


When connecting my se c902 udev running my script:

sleep 4
ifconfig usb0 mtu 1200 192.168.2.254 netmask 255.255.255.0 up
sleep 5
mount /home/memstick >> /var/log/c902.log&
sleep 1
mount /home/phone >> /var/log/c902.log&

then  I've got in all terminals some Oops about SMP

disconnecting c902 will execute kernel panic.

Log from dmesg filelog:


usbcore: registered new interface driver option
option: v0.7.2:USB Driver for GSM modems
usbcore: registered new interface driver cdc_ether
usbcore: registered new interface driver cdc_eem
usbcore: registered new interface driver cdc_subset
lib80211: common routines for IEEE802.11 drivers
lib80211_crypt: registered algorithm 'NULL'
usb 7-6: new high speed USB device using ehci_hcd and address 3
usb 7-6: New USB device found, idVendor=0fce, idProduct=d0d4
usb 7-6: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 7-6: Product: Sony Ericsson C902
usb 7-6: Manufacturer: Sony Ericsson
usb 7-6: SerialNumber: 3536260373083970
cdc_acm 7-6:3.1: ttyACM0: USB ACM device
cdc_acm 7-6:3.3: ttyACM1: USB ACM device
cdc_ether 7-6:3.8: usb0: register 'cdc_ether' at usb-0000:00:1d.7-6, CDC Ethernet Device, 02:80:37:11:03:00
ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready
CIFS: Unknown mount option unixextensions
BUG: unable to handle kernel NULL pointer dereference at (null)
IP: [<ffffffff811ae169>] strncmp+0x6/0x29
PGD 0
Oops: 0000 [#1] SMP
last sysfs file: /sys/devices/pci0000:00/0000:00:1d.7/usb7/7-6/7-6:3.9/interface
CPU 0
Modules linked in: snd_hda_codec_analog snd_hda_codec_intelhdmi snd_hrtimer lib80211 uio_cif uio_pdrv_genirq uio_pdrv uio cdc_subset cdc_eem cdc_ether usbnet option usb_wwan usbserial ohci_hcd usbtmc cdc_acm usblp ldusb iowarrior usbtest ums_cypress ums_usbat ums_sddr09 ums_sddr55 usb_storage usb_libusual scsi_wait_scan hid_microsoft hid_cherry hid_ezkey hid_kye hid_chicony hid_kensington hid_apple hid_logitech hid_cypress hid_belkin hid_monterey cuse nls_cp850 nls_iso8859_2
nls_iso8859_1 snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device snd_pcm_oss snd_mixer_oss fuse snd_hda_codec_realtek hid_a4tech ath5k snd_hda_intel snd_hda_codec usbhid nvidia(P) snd_hwdep mac80211 snd_pcm ehci_hcd ath uhci_hcd snd_timer snd cfg80211 usbcore soundcore evdev snd_page_alloc

Pid: 5339, comm: mount.cifs Tainted: P            2.6.35-git11-ide #15 AB9/AB9RPO(Intel965+ICH8)/OEM
RIP: 0010:[<ffffffff811ae169>]  [<ffffffff811ae169>] strncmp+0x6/0x29
RSP: 0018:ffff8800a5e33ce8  EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffff8800a5f06000 RCX: ffff8800ae469027
RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff8800a5e33ce8 R08: 0000000000000007 R09: ffff8800ae46908d
R10: 000000000000005c R11: 0000000000000004 R12: ffff88009ff5fc00
R13: ffff88009b310e00 R14: 0000000000000005 R15: ffff88009ff5fe10
FS:  00007f78de32b700(0000) GS:ffff880001800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000008783e000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process mount.cifs (pid: 5339, threadinfo ffff8800a5e32000, task ffff88009b3cb2a0)
Stack:
 ffff8800a5e33d98 ffffffff8112ebe1 ffff8800a5e33d08 ffffffff811ac39e
<0> ffff8800ae469027 ffff8800a5f06030 0100000000000000 ffff8800a0f88800
<0> 000000049ff5fc48 ffff88009ff5fe10 ffff88009b3709a0 ffff88009ff5fe00
Call Trace:
 [<ffffffff8112ebe1>] cifs_mount+0x18ca/0x23f1
 [<ffffffff811ac39e>] ? prop_local_init_percpu+0x28/0x2a
 [<ffffffff8112271d>] cifs_get_sb+0xd5/0x22c
 [<ffffffff810958cb>] vfs_kern_mount+0x5d/0x106
 [<ffffffff810959d2>] do_kern_mount+0x48/0xea
 [<ffffffff810aa68b>] do_mount+0x6d0/0x749
 [<ffffffff810aa933>] sys_mount+0x87/0xc8
 [<ffffffff81001e6b>] system_call_fastpath+0x16/0x1b
Code: 75 e5 c9 c3 55 48 89 e5 8a 07 8a 16 48 ff c7 48 ff c6 38 d0 74 07 19 c0 83 c8 01 eb 06 84 c0 75 e7 31 c0 c9 c3 55 48 89 e5 eb 1a <8a> 07 3a 06 74 07 19 c0 83 c8 01 eb 14 84 c0 74 0e 48 ff c7 48
RIP  [<ffffffff811ae169>] strncmp+0x6/0x29
 RSP <ffff8800a5e33ce8>
CR2: 0000000000000000
---[ end trace 692e1ebe00a7db2f ]---

(sorry for my english)

Btw. why cifs need so much time to umount?
Comment 1 Jeff Layton 2010-08-13 22:04:14 UTC
Can you provide the relevant fstab entries?

Also, it would be helpful to follow the directions on oopses here:

     http://wiki.samba.org/index.php/LinuxCIFS_troubleshooting

...so that we can determine at what line this is falling down.
Comment 2 diabel 2010-08-14 22:35:37 UTC
At this time I can olny give this:
(I used this "echo 7 > /proc/fs/cifs/cifsFYI")


usb 2-6: new high speed USB device using ehci_hcd and address 4
usb 2-6: New USB device found, idVendor=0fce, idProduct=d0d4
usb 2-6: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 2-6: Product: Sony Ericsson C902
usb 2-6: Manufacturer: Sony Ericsson
usb 2-6: SerialNumber: 3536260373083970
cdc_acm 2-6:3.1: ttyACM0: USB ACM device
cdc_acm 2-6:3.3: ttyACM1: USB ACM device
cdc_ether 2-6:3.8: usb0: register 'cdc_ether' at usb-0000:00:1d.7-6, CDC Ethernet Device, 02:80:37:11:03:00
fs/cifs/cifsfs.c: Devname: //192.168.2.1/Memory Stick flags: 64 
fs/cifs/connect.c: CIFS VFS: in cifs_mount as Xid: 0 with uid: 0
fs/cifs/connect.c: Username: root
fs/cifs/connect.c: UNC: \\192.168.2.1\Memory Stick ip: 192.168.2.1
fs/cifs/connect.c: Socket created
fs/cifs/connect.c: sndbuf 16384 rcvbuf 87380 rcvtimeo 0x1b58
fs/cifs/transport.c: Sending smb:  total_len 72
fs/cifs/connect.c: Demultiplex PID: 9357
fs/cifs/fscache.c: CIFS: get client cookie (0xffff8800b8ce5000/0xffff8800bf9c5050)
fs/cifs/connect.c: CIFS VFS: in cifs_get_smb_ses as Xid: 1 with uid: 0
fs/cifs/connect.c: Existing smb sess not found
fs/cifs/cifssmb.c: secFlags 0x7
fs/cifs/transport.c: For smb_command 114
fs/cifs/transport.c: Sending smb:  total_len 82
fs/cifs/connect.c: rfc1002 length 0x82000004
fs/cifs/connect.c: Good RFC 1002 session rsp
fs/cifs/connect.c: rfc1002 length 0x51
fs/cifs/cifssmb.c: Dialect: 2
fs/cifs/cifssmb.c: negprot rc 0
fs/cifs/connect.c: Security Mode: 0x3 Capabilities: 0x7c TimeAdjust: 3600
fs/cifs/sess.c: sess setup type 1
fs/cifs/transport.c: For smb_command 115
fs/cifs/transport.c: Sending smb:  total_len 232
fs/cifs/connect.c: rfc1002 length 0x27
Status code returned 0xc0000022 NT_STATUS_ACCESS_DENIED
fs/cifs/netmisc.c: Mapping smb error code 5 to POSIX err -13
fs/cifs/misc.c: Null buffer passed to cifs_small_buf_release
fs/cifs/sess.c: ssetup rc from sendrecv2 is -13
fs/cifs/sess.c: ssetup freeing small buf ffff8800095f01c0
CIFS VFS: Send error in SessSetup = -13
fs/cifs/connect.c: CIFS VFS: leaving cifs_get_smb_ses (xid = 1) rc = -13
fs/cifs/fscache.c: CIFS: release client cookie (0xffff8800b8ce5000/0xffff8800bf9c5050)
fs/cifs/connect.c: CIFS VFS: leaving cifs_mount (xid = 0) rc = -13
CIFS VFS: cifs_mount failed w/return code = -13
fs/cifs/cifsfs.c: Devname: //192.168.2.1/Internal Memory flags: 64 
fs/cifs/connect.c: CIFS VFS: in cifs_mount as Xid: 2 with uid: 0
CIFS: Unknown mount option unixextensions
fs/cifs/connect.c: Username: root
fs/cifs/connect.c: UNC: \\192.168.2.1\Internal Memory ip: 192.168.2.1
fs/cifs/connect.c: Socket created
fs/cifs/connect.c: sndbuf 16384 rcvbuf 87380 rcvtimeo 0x1b58
fs/cifs/transport.c: Sending smb:  total_len 72
fs/cifs/fscache.c: CIFS: get client cookie (0xffff88009be4b200/0xffff8800bf9c5050)
fs/cifs/connect.c: CIFS VFS: in cifs_get_smb_ses as Xid: 3 with uid: 0
fs/cifs/connect.c: Existing smb sess not found
fs/cifs/cifssmb.c: secFlags 0x7
fs/cifs/transport.c: For smb_command 114
fs/cifs/transport.c: Sending smb:  total_len 82
fs/cifs/connect.c: Demultiplex PID: 9360
fs/cifs/connect.c: rfc1002 length 0x82000004
fs/cifs/connect.c: Good RFC 1002 session rsp
fs/cifs/connect.c: rfc1002 length 0x51
fs/cifs/cifssmb.c: Dialect: 2
fs/cifs/cifssmb.c: negprot rc 0
fs/cifs/connect.c: Security Mode: 0x3 Capabilities: 0x7c TimeAdjust: 3600
fs/cifs/sess.c: sess setup type 1
fs/cifs/transport.c: For smb_command 115
fs/cifs/transport.c: Sending smb:  total_len 232
fs/cifs/connect.c: rfc1002 length 0x27
Status code returned 0xc0000022 NT_STATUS_ACCESS_DENIED
fs/cifs/netmisc.c: Mapping smb error code 5 to POSIX err -13
fs/cifs/misc.c: Null buffer passed to cifs_small_buf_release
fs/cifs/sess.c: ssetup rc from sendrecv2 is -13
fs/cifs/sess.c: ssetup freeing small buf ffff8800095f0380
CIFS VFS: Send error in SessSetup = -13
fs/cifs/connect.c: CIFS VFS: leaving cifs_get_smb_ses (xid = 3) rc = -13
fs/cifs/fscache.c: CIFS: release client cookie (0xffff88009be4b200/0xffff8800bf9c5050)
fs/cifs/connect.c: CIFS VFS: leaving cifs_mount (xid = 2) rc = -13
CIFS VFS: cifs_mount failed w/return code = -13
usb 2-6: USB disconnect, address 4
cdc_ether 2-6:3.8: usb0: unregister 'cdc_ether' usb-0000:00:1d.7-6, CDC Ethernet Device
usb 2-6: new high speed USB device using ehci_hcd and address 5
usb 2-6: New USB device found, idVendor=0fce, idProduct=d0d4
usb 2-6: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 2-6: Product: Sony Ericsson C902
usb 2-6: Manufacturer: Sony Ericsson
usb 2-6: SerialNumber: 3536260373083970
cdc_acm 2-6:3.1: ttyACM0: USB ACM device
cdc_acm 2-6:3.3: ttyACM1: USB ACM device
cdc_ether 2-6:3.8: usb0: register 'cdc_ether' at usb-0000:00:1d.7-6, CDC Ethernet Device, 02:80:37:11:03:00
ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready
fs/cifs/cifsfs.c: Devname: //192.168.2.1/Memory Stick flags: 64 
fs/cifs/connect.c: CIFS VFS: in cifs_mount as Xid: 4 with uid: 0
fs/cifs/connect.c: Username: root
fs/cifs/connect.c: UNC: \\192.168.2.1\Memory Stick ip: 192.168.2.1
fs/cifs/connect.c: Socket created
fs/cifs/connect.c: sndbuf 16384 rcvbuf 87380 rcvtimeo 0x1b58
fs/cifs/transport.c: Sending smb:  total_len 72
fs/cifs/fscache.c: CIFS: get client cookie (0xffff88008ab6a200/0xffff8800bf9c5050)
fs/cifs/connect.c: CIFS VFS: in cifs_get_smb_ses as Xid: 5 with uid: 0
fs/cifs/connect.c: Existing smb sess not found
fs/cifs/cifssmb.c: secFlags 0x7
fs/cifs/transport.c: For smb_command 114
fs/cifs/transport.c: Sending smb:  total_len 82
fs/cifs/connect.c: Demultiplex PID: 9556
fs/cifs/connect.c: rfc1002 length 0x82000004
fs/cifs/connect.c: Good RFC 1002 session rsp
fs/cifs/connect.c: rfc1002 length 0x51
fs/cifs/cifssmb.c: Dialect: 2
fs/cifs/cifssmb.c: negprot rc 0
fs/cifs/connect.c: Security Mode: 0x3 Capabilities: 0x7c TimeAdjust: 3600
fs/cifs/sess.c: sess setup type 1
fs/cifs/transport.c: For smb_command 115
fs/cifs/transport.c: Sending smb:  total_len 232
fs/cifs/connect.c: rfc1002 length 0x5c
fs/cifs/misc.c: Null buffer passed to cifs_small_buf_release
fs/cifs/sess.c: ssetup rc from sendrecv2 is 0
fs/cifs/sess.c: UID = 0 
fs/cifs/sess.c: bleft 46
fs/cifs/sess.c: serverOS=OSE
fs/cifs/sess.c: serverNOS=NQ 4.32
fs/cifs/sess.c: serverDomain=KSIEGOWOSC
fs/cifs/sess.c: ssetup freeing small buf ffff8800bfa47a40
fs/cifs/connect.c: CIFS Session Established successfully
fs/cifs/connect.c: CIFS VFS: leaving cifs_get_smb_ses (xid = 5) rc = 0
fs/cifs/connect.c: file mode: 0x1ff  dir mode: 0x1ff
fs/cifs/connect.c: CIFS VFS: in cifs_get_tcon as Xid: 6 with uid: 0
fs/cifs/transport.c: For smb_command 117
fs/cifs/transport.c: Sending smb:  total_len 108
fs/cifs/connect.c: rfc1002 length 0x3c
fs/cifs/connect.c: disk share connection
fs/cifs/connect.c: nativeFileSystem=FAT32
fs/cifs/connect.c: Tcon flags: 0x0 
fs/cifs/connect.c: CIFS VFS: leaving cifs_get_tcon (xid = 6) rc = 0
fs/cifs/connect.c: CIFS Tcon rc = 0
fs/cifs/fscache.c: CIFS: get superblock cookie (0xffff8800bf9c5050/0xffff8800bf9c50a0)
fs/cifs/cifssmb.c: In QFSDeviceInfo
fs/cifs/transport.c: For smb_command 50
fs/cifs/transport.c: Sending smb:  total_len 72
fs/cifs/connect.c: rfc1002 length 0x44
fs/cifs/cifssmb.c: In QFSAttributeInfo
fs/cifs/transport.c: For smb_command 50
fs/cifs/transport.c: Sending smb:  total_len 72
fs/cifs/connect.c: rfc1002 length 0x52
fs/cifs/connect.c: CIFS VFS: leaving cifs_mount (xid = 4) rc = 0
fs/cifs/inode.c: CIFS VFS: in cifs_root_iget as Xid: 7 with uid: 0
fs/cifs/inode.c: Getting info on 
fs/cifs/transport.c: For smb_command 50
fs/cifs/transport.c: Sending smb:  total_len 78
fs/cifs/connect.c: rfc1002 length 0x86
fs/cifs/inode.c: looking for uniqueid=3
fs/cifs/inode.c: cifs_revalidate_cache: revalidating inode 3
fs/cifs/inode.c: cifs_revalidate_cache: inode 3 is new
fs/cifs/inode.c: inode 0xffff880086b0e050 old_time=0 new_time=4316751591
fs/cifs/cifsfs.c: Devname: //192.168.2.1/Internal Memory flags: 64 
fs/cifs/connect.c: CIFS VFS: in cifs_mount as Xid: 8 with uid: 0
CIFS: Unknown mount option unixextensions
fs/cifs/connect.c: Username: root
fs/cifs/connect.c: UNC: \\192.168.2.1\Internal Memory ip: 192.168.2.1
fs/cifs/connect.c: Existing tcp session with server found
fs/cifs/connect.c: CIFS VFS: in cifs_get_smb_ses as Xid: 9 with uid: 0
BUG: unable to handle kernel NULL pointer dereference at (null)
IP: [<ffffffff811ae169>] strncmp+0x6/0x29
PGD 0 
Oops: 0000 [#1] SMP 
last sysfs file: /sys/devices/pci0000:00/0000:00:1d.7/usb2/2-6/2-6:3.9/interface
CPU 0 
Modules linked in: snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device snd_pcm_oss 
snd_mixer_oss fuse snd_hda_codec_realtek cdc_acm hid_a4tech snd_hda_intel usbhid cdc_ether usbnet nvidia(P) 
ath5k snd_hda_codec mac80211 snd_hwdep snd_pcm snd_timer uhci_hcd ehci_hcd evdev ath cfg80211 snd usbcore 
soundcore snd_page_alloc

Pid: 9558, comm: mount.cifs Tainted: P            2.6.35-git11 #13 AB9/AB9RPO(Intel965+ICH8)/OEM
RIP: 0010:[<ffffffff811ae169>]  [<ffffffff811ae169>] strncmp+0x6/0x29
RSP: 0018:ffff880009569ce8  EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffff8800b905f240 RCX: ffff88008a977027
RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff880009569ce8 R08: 0000000000000001 R09: 00000000fffffffb
R10: 0000000000000010 R11: 0000000000000000 R12: ffff8800b91f4e00
R13: ffff88008ab6b000 R14: 0000000000000009 R15: ffff88008ab6a210
FS:  00007f12ef194700(0000) GS:ffff880001600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 00000000bd489000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process mount.cifs (pid: 9558, threadinfo ffff880009568000, task ffff8800095a8b40)
Stack:
 ffff880009569d98 ffffffff8112ebe1 ffff880009569d08 ffffffff811ac39e
<0> ffff88008a977027 ffff8800b905f270 01ffffffff0a0200 ffff88009bfbb800
<0> 00000008b91f4e48 ffff88008ab6a210 ffff880087a9ebe0 ffff88008ab6a200
Call Trace:
 [<ffffffff8112ebe1>] cifs_mount+0x18ca/0x23f1
 [<ffffffff811ac39e>] ? prop_local_init_percpu+0x28/0x2a
 [<ffffffff8112271d>] cifs_get_sb+0xd5/0x22c
 [<ffffffff810958cb>] vfs_kern_mount+0x5d/0x106
 [<ffffffff810959d2>] do_kern_mount+0x48/0xea
 [<ffffffff810aa68b>] do_mount+0x6d0/0x749
 [<ffffffff810aa933>] sys_mount+0x87/0xc8
 [<ffffffff81001e6b>] system_call_fastpath+0x16/0x1b
Code: 75 e5 c9 c3 55 48 89 e5 8a 07 8a 16 48 ff c7 48 ff c6 38 d0 74 07 19 c0 83 c8 01 eb 06 84 c0 75 e7 31 
c0 c9 c3 55 48 89 e5 eb 1a <8a> 07 3a 06 74 07 19 c0 83 c8 01 eb 14 84 c0 74 0e 48 ff c7 48 
RIP  [<ffffffff811ae169>] strncmp+0x6/0x29
 RSP <ffff880009569ce8>
CR2: 0000000000000000
---[ end trace c77639154bde92a6 ]---
Comment 3 Jeff Layton 2010-08-15 11:48:59 UTC
Ok, another way to get the info needed would be to run:

    # make fs/cifs/connect.lst

in the same build tree that was used to build the kernel above. Then, attach the resulting connect.lst file to this bug.
Comment 4 diabel 2010-08-16 00:25:18 UTC
Created attachment 27456 [details]
make fs/cifs/connect.lst result
Comment 5 Jeff Layton 2010-08-16 14:37:30 UTC
Created attachment 27467 [details]
patch -- fix potential NULL pointer dereference in cifs_find_smb_session

Ok, I think this may be the problem. Can you test this patch out and let me know whether it fixes the oops?

If not, then I'll need the fstab entry that I originally requested.
Comment 6 Jeff Layton 2010-08-23 16:22:57 UTC
I think we may also need the patch that I sent to Steve this morning:

http://www.spinics.net/lists/linux-cifs/msg00647.html
Comment 7 diabel 2010-08-24 21:04:12 UTC
Created attachment 27891 [details]
fstab file

Soory for dealy. This settings(fstab) always works. Sorry but your path doesn't work. I will paste debug info at weekend.
Comment 8 Jeff Layton 2010-08-25 15:10:03 UTC
Ok, I think this will probably be fixed by the patch that I posted a couple of days ago:

http://www.spinics.net/lists/linux-cifs/msg00647.html

...can you test a kernel with both patches and let me know if it resolves the problem for you? Both patches should be in an upcoming -rc...
Comment 9 diabel 2010-08-30 13:23:00 UTC
At weekend I tested some kernels, that path don't work. I tested new kernels 2.6.36-rc1 and rc2 and the bug is still there. Works stable on 2.6.35.4. So I think that soled. Today I will test 2.6.36-rc3 with config from 2.6.35.4 and paste the results here.

results from 2.6.35.4

fs/cifs/cifsfs.c: Devname: //192.168.2.1/Memory Stick flags: 64 
fs/cifs/connect.c: CIFS VFS: in cifs_mount as Xid: 101 with uid: 0
fs/cifs/connect.c: Username: root
fs/cifs/connect.c: UNC: \\192.168.2.1\Memory Stick ip: 192.168.2.1
fs/cifs/netmisc.c: address conversion returned 1 for 192.168.2.1
fs/cifs/connect.c: Socket created
fs/cifs/connect.c: sndbuf 16384 rcvbuf 87380 rcvtimeo 0x1b58
fs/cifs/transport.c: Sending smb:  total_len 72
fs/cifs/connect.c: CIFS VFS: in cifs_get_smb_ses as Xid: 102 with uid: 0
fs/cifs/connect.c: Demultiplex PID: 59849
fs/cifs/connect.c: Existing smb sess not found
fs/cifs/cifssmb.c: secFlags 0x7
fs/cifs/transport.c: For smb_command 114
fs/cifs/transport.c: Sending smb:  total_len 82
fs/cifs/connect.c: rfc1002 length 0x82000004
fs/cifs/connect.c: Good RFC 1002 session rsp
fs/cifs/connect.c: rfc1002 length 0x51
fs/cifs/cifssmb.c: Dialect: 2
fs/cifs/cifssmb.c: Max buf = 11676
fs/cifs/cifssmb.c: negprot rc 0
fs/cifs/connect.c: Security Mode: 0x3 Capabilities: 0x7c TimeAdjust: 3600
fs/cifs/sess.c: sess setup type 2
fs/cifs/transport.c: For smb_command 115
fs/cifs/transport.c: Sending smb:  total_len 224
fs/cifs/connect.c: rfc1002 length 0x5c
fs/cifs/misc.c: Null buffer passed to cifs_small_buf_release
fs/cifs/sess.c: ssetup rc from sendrecv2 is 0
fs/cifs/sess.c: UID = 0 
fs/cifs/sess.c: bleft 46
fs/cifs/sess.c: serverOS=OSE
fs/cifs/sess.c: serverNOS=NQ 4.32
fs/cifs/sess.c: serverDomain=KSIEGOWOSC
fs/cifs/sess.c: ssetup freeing small buf ffff8800286896c0
fs/cifs/connect.c: CIFS Session Established successfully
fs/cifs/connect.c: CIFS VFS: leaving cifs_get_smb_ses (xid = 102) rc = 0
fs/cifs/connect.c: file mode: 0x1ff  dir mode: 0x1ff
fs/cifs/connect.c: CIFS VFS: in cifs_get_tcon as Xid: 103 with uid: 0
fs/cifs/transport.c: For smb_command 117
fs/cifs/transport.c: Sending smb:  total_len 108
fs/cifs/connect.c: rfc1002 length 0x3c
fs/cifs/connect.c: disk share connection
fs/cifs/connect.c: nativeFileSystem=FAT32
fs/cifs/connect.c: Tcon flags: 0x0 
fs/cifs/connect.c: CIFS VFS: leaving cifs_get_tcon (xid = 103) rc = 0
fs/cifs/connect.c: CIFS Tcon rc = 0
fs/cifs/cifssmb.c: In QFSDeviceInfo
fs/cifs/transport.c: For smb_command 50
fs/cifs/transport.c: Sending smb:  total_len 72
fs/cifs/connect.c: rfc1002 length 0x44
fs/cifs/cifssmb.c: In QFSAttributeInfo
fs/cifs/transport.c: For smb_command 50
fs/cifs/transport.c: Sending smb:  total_len 72
fs/cifs/connect.c: rfc1002 length 0x52
fs/cifs/connect.c: CIFS VFS: leaving cifs_mount (xid = 101) rc = 0
fs/cifs/inode.c: CIFS VFS: in cifs_root_iget as Xid: 104 with uid: 0
fs/cifs/inode.c: Getting info on 
fs/cifs/transport.c: For smb_command 50
fs/cifs/transport.c: Sending smb:  total_len 78
fs/cifs/connect.c: rfc1002 length 0x86
fs/cifs/inode.c: looking for uniqueid=5
fs/cifs/inode.c: cifs_revalidate_cache: revalidating inode 5
fs/cifs/inode.c: cifs_revalidate_cache: inode 5 is new
fs/cifs/inode.c: inode 0xffff880063f6c048 old_time=0 new_time=4307901404
usb-storage: queuecommand called
usb-storage: *** thread awakened.
usb-storage: Command TEST_UNIT_READY (6 bytes)
usb-storage:  00 00 00 00 00 00
usb-storage: Bulk Command S 0x43425355 T 0xef6 L 0 F 0 Trg 0 LUN 0 CL 6
usb-storage: usb_stor_bulk_transfer_buf: xfer 31 bytes
usb-storage: Status code 0; transferred 31/31
usb-storage: -- transfer complete
usb-storage: Bulk command transfer result=0
usb-storage: Attempting to get CSW...
usb-storage: usb_stor_bulk_transfer_buf: xfer 13 bytes
usb-storage: Status code 0; transferred 13/13
usb-storage: -- transfer complete
usb-storage: Bulk status result = 0
usb-storage: Bulk Status S 0x53425355 T 0xef6 R 0 Stat 0x0
usb-storage: scsi cmd done, result=0x0
usb-storage: *** thread sleeping.
fs/cifs/cifsfs.c: Devname: //192.168.2.1/Internal Memory flags: 64 
fs/cifs/connect.c: CIFS VFS: in cifs_mount as Xid: 105 with uid: 0
CIFS: Unknown mount option unixextensions
fs/cifs/connect.c: Username: root
fs/cifs/connect.c: UNC: \\192.168.2.1\Internal Memory ip: 192.168.2.1
fs/cifs/netmisc.c: address conversion returned 1 for 192.168.2.1
fs/cifs/connect.c: Existing tcp session with server found
fs/cifs/connect.c: CIFS VFS: in cifs_get_smb_ses as Xid: 106 with uid: 0
fs/cifs/connect.c: Existing smb sess found (status=1)
fs/cifs/connect.c: CIFS VFS: leaving cifs_get_smb_ses (xid = 106) rc = 0
fs/cifs/connect.c: file mode: 0x1ff  dir mode: 0x1ff
fs/cifs/connect.c: CIFS VFS: in cifs_get_tcon as Xid: 107 with uid: 0
fs/cifs/transport.c: For smb_command 117
fs/cifs/transport.c: Sending smb:  total_len 114
fs/cifs/connect.c: rfc1002 length 0x3c
fs/cifs/connect.c: disk share connection
fs/cifs/connect.c: nativeFileSystem=FAT32
fs/cifs/connect.c: Tcon flags: 0x0 
fs/cifs/connect.c: CIFS VFS: leaving cifs_get_tcon (xid = 107) rc = 0
fs/cifs/connect.c: CIFS Tcon rc = 0
fs/cifs/cifssmb.c: In QFSDeviceInfo
fs/cifs/transport.c: For smb_command 50
fs/cifs/transport.c: Sending smb:  total_len 72
fs/cifs/connect.c: rfc1002 length 0x44
fs/cifs/cifssmb.c: In QFSAttributeInfo
fs/cifs/transport.c: For smb_command 50
fs/cifs/transport.c: Sending smb:  total_len 72
fs/cifs/connect.c: rfc1002 length 0x52
fs/cifs/connect.c: CIFS VFS: leaving cifs_mount (xid = 105) rc = 0
fs/cifs/inode.c: CIFS VFS: in cifs_root_iget as Xid: 108 with uid: 0
fs/cifs/inode.c: Getting info on 
fs/cifs/transport.c: For smb_command 50
fs/cifs/transport.c: Sending smb:  total_len 78
fs/cifs/connect.c: rfc1002 length 0x86
fs/cifs/inode.c: looking for uniqueid=6
fs/cifs/inode.c: cifs_revalidate_cache: revalidating inode 6
fs/cifs/inode.c: cifs_revalidate_cache: inode 6 is new
fs/cifs/inode.c: inode 0xffff880008a56548 old_time=0 new_time=4307902365
usb-storage: queuecommand called
usb-storage: *** thread awakened.
usb-storage: Command TEST_UNIT_READY (6 bytes)
usb-storage:  00 00 00 00 00 00
usb-storage: Bulk Command S 0x43425355 T 0xef7 L 0 F 0 Trg 0 LUN 0 CL 6
usb-storage: usb_stor_bulk_transfer_buf: xfer 31 bytes
usb-storage: Status code 0; transferred 31/31
usb-storage: -- transfer complete
usb-storage: Bulk command transfer result=0
usb-storage: Attempting to get CSW...
usb-storage: usb_stor_bulk_transfer_buf: xfer 13 bytes
usb-storage: Status code 0; transferred 13/13
usb-storage: -- transfer complete
usb-storage: Bulk status result = 0
usb-storage: Bulk Status S 0x53425355 T 0xef7 R 0 Stat 0x0
usb-storage: scsi cmd done, result=0x0
usb-storage: *** thread sleeping.

Hope this helps. 
New attachment:
make fs/cifs/connect.lst from 2.6.35.4.
Comment 10 diabel 2010-08-30 13:23:44 UTC
Created attachment 28411 [details]
Works on 2.6.35.4 version.
Comment 11 Jeff Layton 2010-09-03 12:09:21 UTC
(In reply to comment #10)
> Created an attachment (id=28411) [details]
> Works on 2.6.35.4 version.

What exactly do you mean here? That it panics on that version or that it's fixed? Is this fixed in recent mainline git?
Comment 12 diabel 2010-09-04 22:50:57 UTC
I want to upgrade the kernel, but on 2.6.35-git11 and newest (2.6.36) I had panic. It works good on 2.6.35.4. Someone must fix it. I download (full source) 2.6.35.4 without any patch or something. So I think It's fixed, I have no problems with my SE and cifs mount.
Comment 13 Michal Suchanek 2010-09-14 14:58:30 UTC
Hello

I think I also have this issue. I recently upgraded to a dual-core processor and the machine would run for some days and then it would suddenly crash when copying data over cifs (which worked perfectly the days before and would crash immediately after reboot).

I will try to resolve some of the messages I have in the log.
Comment 14 Jeff Layton 2010-09-14 15:17:03 UTC
Ok, closing this bug with a resolution of CODE_FIX based on the comments from diabel.

Michal, I suggest opening a new bug when you gather some info on your crash. Crashing when copying data sounds like a different problem from this one, which tends to oop up at mount time.

Note You need to log in before you can comment on or make changes to this bug.