Re: head_at_r334204, Bad link elm in callout_process()

On 29/05/2018 14:53, Hans Petter Selasky wrote:
> On 05/29/18 13:20, Andriy Gapon wrote:
>> (kgdb) p *$4.lh_first->c_links.le.le_next
>> $6 = {
>>    c_links = {
>>      le = {
>>        le_next = 0x0,
>>        le_prev = 0xfffffe0003999f98
> 
> Where does the le_prev point?
> 
> Typically happens when callouts are not properly drained before freeing memory.

Yeah, this could have been a pilot error.
I added some debugging code and that code could do callout_init + callout_reset
on an active or pending callout.  I am not seeing the problem without the
debugging code.
Sorry for the noise!


-- 
Andriy Gapon