Re: [PATCH] NFSD: Don't dereference cp_clp in async COPY tracepoints

From: Chuck Lever

Date: Wed Oct 28 2026 - 15:03:37 EST


On Wed, 28 Oct 2026 10:10:38 -0400, Jeff Layton wrote:
> nfsd4_unhash_copy() and find_async_copy() clear cp_clp before
> nfsd4_stop_copy() fires trace_nfsd_copy_async_cancel(), which reads
> copy->cp_clp->cl_addr: NULL deref on shutdown or OFFLOAD_CANCEL. The
> kthread's nfsd_copy_async{,_done} events race the same clear.
>
> Pass the client explicitly: cp_stid.sc_client for async copies (never
> cleared), cstate->clp for the sync paths.
>
> [...]

Applied to nfsd-testing, thanks!

[1/1] NFSD: Don't dereference cp_clp in async COPY tracepoints
commit: 944812cf2b775193097bd4d1f1dd96ab928d1d97

--
Chuck Lever