Steve French <smfrench@xxxxxxxxx> writes:
> And note that rerunning the test with same config and same target
> server 10 minutes later ... I did not see the oops
>> [ 1967.512902] refcount_t: addition on 0; use-after-free.
from
>> [ 1967.513069] open_cached_dir_by_dentry+0xc2/0xe0 [cifs]
>> [ 1967.513142] cifs_dentry_needs_reval+0x6e/0x160 [cifs]
>> [ 1967.513173] cifs_revalidate_dentry_attr+0x30/0x340 [cifs]
>> [ 1967.513201] cifs_revalidate_dentry+0xf/0x20 [cifs]
>> [ 1967.513376] cifs_d_revalidate+0x50/0x130 [cifs]
>> [ 1967.513408] path_openat+0x794/0xff0
>> [ 1967.513412] ? __bitmap_andnot+0x26/0x70
>> [ 1967.513415] do_filp_open+0xa2/0x100
>> [ 1967.513419] ? __check_heap_object+0x5c/0x140
>> [ 1967.513421] ? __check_object_size+0xd4/0x1a0
>> [ 1967.513425] ? alloc_fd+0xba/0x180
>> [ 1967.513429] ? do_sys_openat2+0x248/0x310
>> [ 1967.513432] do_sys_openat2+0x248/0x310
That sounds like a very likely regression from that commit:
commit ad7567bc65af
Author: Muhammad Usama Anjum <musamaanjum@xxxxxxxxx>
Date: Thu Apr 15 20:24:09 2021 +0500
cifs: remove unnecessary copies of tcon->crfid.fid
Cheers,
--
Aurélien Aptel / SUSE Labs Samba Team
GPG: 1839 CB5F 9F5B FB9B AA97 8C99 03C8 A49B 521B D5D3
SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, 90409 Nürnberg, DE
GF: Felix Imendörffer, Mary Higgins, Sri Rasiah HRB 247165 (AG München)
