Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 30 Jan 2017 03:04:24 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 204340] [panic] nfsd, em, msix, fatal trap 9
Message-ID:  <bug-204340-8-F9ErtBefKK@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-204340-8@https.bugs.freebsd.org/bugzilla/>
References:  <bug-204340-8@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D204340

--- Comment #18 from Rick Macklem <rmacklem@FreeBSD.org> ---
Andriy Gapon, did your crash occur when the machine was being shut down
(or the nfsd threads were being killed off)?

If not, it is not caused by what these patches were intended for.
(They are in 10.3.)

Your crash basically indicates that either:
1 - The sg_group was free'd when a socket upcall was still in progress.
    Since the sg_group structures aren't free'd until the nfsd threads
    are killed (shutdown or ??), I don't think this can happen during
    normal operation.
OR
2 - The xprt structure that referenced the sg_group was free'd prematurely
    and the sg pointer was bogus.

If it was #2, I think I can come up with a simple patch to avoid this.
(Basically acquire a reference count on the xprt structure during the
 socket upcall.)

rick

--=20
You are receiving this mail because:
You are on the CC list for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-204340-8-F9ErtBefKK>