On Fri, Mar 08, 2019 at 03:36:46PM -0800, Linus Torvalds wrote: > I'm getting the very strong signal that this code had all the logic > taken from fs/aio.c, bugs and all. Definitely. > Al has patches to fix the aio.c cases. I very much suspect some very > similar patches are needed in fs/io_ring.c. Very likely so. BTW, another lovely problem is that read from a registered AF_UNIX socket really needs an extra reference to struct file that would *NOT* be covered by ->inflight. Otherwise we are asking for serious trouble with garbage collector...