On Sun, 22 May 2022 20:23:50 +0800, Ming Lei wrote: > blk_mq_run_hw_queues() could be run when there isn't queued request and > after queue is cleaned up, at that time tagset is freed, because tagset > lifetime is covered by driver, and often freed after blk_cleanup_queue() > returns. > > So don't touch ->tagset for figuring out current default hctx by the mapping > built in request queue, so use-after-free on tagset can be avoided. Meantime > this way should be fast than retrieving mapping from tagset. > > [...] Applied, thanks! [1/1] blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx commit: 5d05426e2d5fd7df8afc866b78c36b37b00188b7 Best regards, -- Jens Axboe