On 2/26/25 11:21 AM, Keith Busch wrote: > @@ -789,7 +856,7 @@ static struct io_rsrc_node *io_sqe_buffer_register(struct io_ring_ctx *ctx, > } > done: > if (ret) { > - kvfree(imu); > + io_free_imu(ctx, imu); > if (node) > io_put_rsrc_node(ctx, node); > node = ERR_PTR(ret); 'imu' can be NULL here in the error path, which this is. That was fine before with kvfree(), but it'll bomb now. Best fix is probably just to check for non-NULL before calling io_free_imu(), as other paths should be fine. -- Jens Axboe