On Sat, 22 Mar 2025 11:47:27 +0000, Pavel Begunkov wrote:
> refcount_t: underflow; use-after-free.
> WARNING: CPU: 0 PID: 5823 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 lib/refcount.c:28
> RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 lib/refcount.c:28
> Call Trace:
> <TASK>
> io_notif_flush io_uring/notif.h:40 [inline]
> io_send_zc_cleanup+0x121/0x170 io_uring/net.c:1222
> io_clean_op+0x58c/0x9a0 io_uring/io_uring.c:406
> io_free_batch_list io_uring/io_uring.c:1429 [inline]
> __io_submit_flush_completions+0xc16/0xd20 io_uring/io_uring.c:1470
> io_submit_flush_completions io_uring/io_uring.h:159 [inline]
>
> [...]
Applied, thanks!
[1/1] io_uring/net: fix sendzc double notif flush
(no commit info)
Best regards,
--
Jens Axboe
