Re: [PATCH] nfsd: pin client reference across async copy reaper cleanup

[Chuck Lever]

On 10/26/26 7:01 PM, Tristan Madani wrote:
> nfsd4_async_copy_reaper() detaches completed async copies from the
> client list and later calls cleanup_async_copy(), which eventually
> drops the stid reference via nfs4_put_stid().  That path accesses
> stid->sc_client unconditionally, but the client is not pinned during
> the cleanup phase.

Thanks for the report. The same bug is already fixed here:

  0941ff1cda56 ("nfsd: hold client reference while reaping async copies")
  https://lore.kernel.org/linux-nfs/20260928083050.642664-1-bint4b13@xxxxxxxxx/

For future NFSD submissions, please base on the nfsd-testing
branch at

  https://git.kernel.org/pub/scm/linux/kernel/git/cel/linux.git

per Documentation/filesystems/nfs/nfsd-maintainer-entry-profile.rst.


-- 
Chuck Lever (Come to NFS bake-a-thon! https://nfsv4bat.org)