On Sun, Feb 04, 2024 at 02:17:37AM +0000, Al Viro wrote: > ->permission(), ->get_link() and ->inode_get_acl() might dereference > ->s_fs_info (and, in case of ->permission(), ->s_fs_info->fc->user_ns > as well) when called from rcu pathwalk. > > Freeing ->s_fs_info->fc is rcu-delayed; we need to make freeing ->s_fs_info > and dropping ->user_ns rcu-delayed too. > > Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx> > --- Reviewed-by: Christian Brauner <brauner@xxxxxxxxxx>
