Re: [PATCH v2] bcache: fix cached_dev.sb_bio use-after-free and crash

Jens Axboe <[email protected]> Sun, 22 Mar 2026 08:30:39 -0600

Newsgroups	org.kernel.vger.linux-bcache,org.kernel.vger.linux-block,org.kernel.vger.stable
Message-ID	<177418983975.306181.7832678653109865447.b4-ty@b4>

On Sun, 22 Mar 2026 21:41:02 +0800, [email protected] wrote:
> In our production environment, we have received multiple crash reports
> regarding libceph, which have caught our attention:
> 
> ```
> [6888366.280350] Call Trace:
> [6888366.280452]  blk_update_request+0x14e/0x370
> [6888366.280561]  blk_mq_end_request+0x1a/0x130
> [6888366.280671]  rbd_img_handle_request+0x1a0/0x1b0 [rbd]
> [6888366.280792]  rbd_obj_handle_request+0x32/0x40 [rbd]
> [6888366.280903]  __complete_request+0x22/0x70 [libceph]
> [6888366.281032]  osd_dispatch+0x15e/0xb40 [libceph]
> [6888366.281164]  ? inet_recvmsg+0x5b/0xd0
> [6888366.281272]  ? ceph_tcp_recvmsg+0x6f/0xa0 [libceph]
> [6888366.281405]  ceph_con_process_message+0x79/0x140 [libceph]
> [6888366.281534]  ceph_con_v1_try_read+0x5d7/0xf30 [libceph]
> [6888366.281661]  ceph_con_workfn+0x329/0x680 [libceph]
> ```
> 
> [...]

Applied, thanks!

[1/1] bcache: fix cached_dev.sb_bio use-after-free and crash
      commit: b36478a1fece72b5d4540141fd31024dcba1d241

Best regards,
-- 
Jens Axboe