On 11/13/20 6:44 AM, Ming Lei wrote: > For avoiding use-after-free on flush request, we call its .end_io() from > both timeout code path and __blk_mq_end_request(). > > When flush request's ref doesn't drop to zero, it is still used, we > can't mark it as IDLE, so fix it by marking IDLE when its refcount drops > to zero really. Applied, thanks. -- Jens Axboe