From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-ot1-f48.google.com (mail-ot1-f48.google.com [209.85.210.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 5BF6E3AD507 for ; Mon, 6 Jul 2026 16:20:38 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.210.48 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783354839; cv=none; b=XQ6x8DqjQaOmsP0HL3NG+Nf8jsHuiZsjJorl9hj7uDz2jsQaYYYQtc1C9JlwiMBqhj8F1K2jAw0ch2hGC77LZ8gyo+wsaHoyFUaj4sJAP3DREV5dc4LNYfaAmetIjaINWoYEmEXmII8Y/fzy05QdpDUdD4ltrdELYBt6OyfKPlg= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783354839; c=relaxed/simple; bh=oR0WvqZjV70FbMSpp+7vB1Jt9kCOVocW2H7FBZ5EjMY=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=pFmU5Cf1xTv9K9maCk8oO3NBhmnsedQ0qYbkdNDES2sihOsFufBa17LiGd5tDIQaHo+PjopGobQrnkKJNeQbQ7RJHKZFehiPgCUTtN4tOIQrpG51hD7xt/2mcKQuovuWkDeBUR0DlILcWST1lndRt51g7cGIYgeADvISddUc2YY= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=kernel.dk; spf=pass smtp.mailfrom=kernel.dk; dkim=pass (2048-bit key) header.d=kernel-dk.20251104.gappssmtp.com header.i=@kernel-dk.20251104.gappssmtp.com header.b=vZsRbFM4; arc=none smtp.client-ip=209.85.210.48 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=kernel.dk Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=kernel.dk Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel-dk.20251104.gappssmtp.com header.i=@kernel-dk.20251104.gappssmtp.com header.b="vZsRbFM4" Received: by mail-ot1-f48.google.com with SMTP id 46e09a7af769-7eb5a9f02e8so1447028a34.0 for ; Mon, 06 Jul 2026 09:20:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel-dk.20251104.gappssmtp.com; s=20251104; t=1783354837; x=1783959637; darn=vger.kernel.org; h=content-transfer-encoding:content-type:in-reply-to:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:from:to:cc:subject:date:message-id:reply-to :content-type; bh=2cUQU8CIImJ7kDrBTq8y47XEOwo0AWHu00WcVNGsvI8=; b=vZsRbFM4lUbXUIp+uXwobDJBbLygNyhtUGauWVwvbbju3RzzoKE7xOEU2w5CAZXObs e9/I2XJjiNkl+Smi52q2R889XL1QThIZnYGMCe/WUAQ04CGmuRoGHOOgZjcTvhwNLQRl FTyFp7zFh57JOjFmpJfKjL8bPvdrWXzdPEWwYYNYYq4UfKYekmqAJTqGo/XphsBEq8hK HmcWOpGR3fcyeS+3kmsXgS7yMLVhE0dDd1M+RQraT3X0/BfDv/xAtFnfBh5/0zFXr7gG QEgbX0KTc11q9C8BYzNcA51bkSKB3vBt+QQwS88jNrQzGbefBEX4fYWGOo4O00zaxSAH BjJw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783354837; x=1783959637; h=content-transfer-encoding:content-type:in-reply-to:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=2cUQU8CIImJ7kDrBTq8y47XEOwo0AWHu00WcVNGsvI8=; b=hxugr72rpwuYFsLfEY1pA7c2FX7EZ6R7gcvNuFq1x6pllD6RaVd0aN/C1YSAd6e0fd VaKCRGK8ZDGqp6kUCQb1yE2FBNZp9KJT4P+93gtLxL6WSp+9TkkwX9mKJGgcZCYrogEG hO4/MXWpf3QVb044IRn1Ds96zuw6DYrSnxcFiad96nF73ciQ7e7jbMTWOs2JGuys7kWB 5iIT0rTn7zY9t4Y7Wf04iv9KyD0326NoBRbCF2BbJSAZHKptD6PM7V0MEnD7vxH5kSjT EQgFnPav4dgiMShQVBT1sppBVysfS0pDa6xuN/pCKK5ATvg5cGfBR0LzmJvdPgdUiOgb c8aA== X-Forwarded-Encrypted: i=1; AFNElJ89YnuN685OOIA99JhJTjXdq8AHhS8C4R3I66FX3KEk/RhHpDxsUWu0GPls/nJJzzOtmSpGv6FkI5kCwv4=@vger.kernel.org X-Gm-Message-State: AOJu0YzFoORpNynvFXJxH+3gMKGe07nbg2hq+92F9qu8+e2OL1Ic9ZHt bc0IAlC47wIwHeJbm5J1lNzMuo3Bo+EqDUqefpoIEOisp5sKkIKwWkNXE5QmhzDG9qc= X-Gm-Gg: AfdE7clMGnZYFZyR6j2c+Hv1RUq7JbrdobyqPSbB6mVt9ypROf0lpqOKPx4qFZdd/yn d/yW6znIgGvIrIfkKHAwl951xl01g2C1jOisPssygAQdJ97lubm+qhO4TkDveaG9ZjuBd1woFlD embSuhdYlYyCBBOaSiTvq4ePHSv44Uc9SWb45QFul21aozbIHJbGESU1C4T3V1ugH5A3YX9qp0J JGZlwezaZBXWQGtT7G0AO44PzI/qN5yqS9Gb3iJB9qayy77541g+EE9NimrxzZ5aCBuZ1mmmUas xSxp2MjlleL7Rr/jJ09xxJTMmrSNovDdVIMkdHmhbMHoE8E8kz/MumXrnXo+iBYm69J9Ute7J7f oM+2R/KrEaoeJuF8F8xjZ73eHET26/f5+5hYlemQZ39tnSGerjiJyH4tMIV9xIZW4SnwPPkdpWW blG6W7e8nX92VjvzjGhVwg8IuwFl3RuxWOt5RAnp/mIGjQ+7cZDeD23uZLvW2zpCpW2Xh7+LzcY Do8fxpKfg== X-Received: by 2002:a05:6830:2b2c:b0:7e6:c752:3f0c with SMTP id 46e09a7af769-7ebb23649a7mr629964a34.24.1783354837302; Mon, 06 Jul 2026 09:20:37 -0700 (PDT) Received: from [192.168.1.150] ([198.8.77.157]) by smtp.gmail.com with ESMTPSA id 46e09a7af769-7eb54291227sm11909993a34.3.2026.07.06.09.20.36 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 06 Jul 2026 09:20:36 -0700 (PDT) Message-ID: <0a370728-f8be-4aaa-bbc6-276376adc5ce@kernel.dk> Date: Mon, 6 Jul 2026 10:20:36 -0600 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v1] io_uring: fix dangling iovec after provided-buffer bundle grow failure To: Hao-Yu Yang , linux-kernel@vger.kernel.org Cc: io-uring@vger.kernel.org References: <20260705234534.768138-1-naup96721@gmail.com> Content-Language: en-US From: Jens Axboe In-Reply-To: <20260705234534.768138-1-naup96721@gmail.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit On 7/5/26 5:45 PM, Hao-Yu Yang wrote: > BUG: KASAN: double-free in io_vec_free+0x2c/0x90 > Freed by task 73: > kfree+0x104/0x3b0 > io_vec_free+0x2c/0x90 > __io_submit_flush_completions+0xc03/0x1e40 > io_submit_sqes+0xdb5/0x2310 > > Allocated by task 73: > io_ring_buffers_peek+0x559/0xc60 > io_buffers_select+0x1c1/0x460 > io_send+0x770/0x1050 Please also send your reproducer, the above looks a bit synthesized rather than a real trace... Is it actually from KASAN, or is it from whatever LLM you're using? -- Jens Axboe