Re: [PATCH v1] io_uring: fix dangling iovec after provided-buffer bundle grow failure
Jens Axboe <[email protected]>
| Newsgroups | org.kernel.vger.io-uring,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <[email protected]> |
On 7/5/26 5:45 PM, Hao-Yu Yang wrote: > BUG: KASAN: double-free in io_vec_free+0x2c/0x90 > Freed by task 73: > kfree+0x104/0x3b0 > io_vec_free+0x2c/0x90 > __io_submit_flush_completions+0xc03/0x1e40 > io_submit_sqes+0xdb5/0x2310 > > Allocated by task 73: > io_ring_buffers_peek+0x559/0xc60 > io_buffers_select+0x1c1/0x460 > io_send+0x770/0x1050 Please also send your reproducer, the above looks a bit synthesized rather than a real trace... Is it actually from KASAN, or is it from whatever LLM you're using? -- Jens Axboe