tree 6f5f784693b79fcfd0fa6a5c39e7a6d8d16a5137
parent 52e04ef4c9d459cba3afd86ec335a411b40b7fd2
author Jens Axboe <axboe@kernel.dk> 1556657045 -0600
committer Jens Axboe <axboe@kernel.dk> 1556721527 -0600

io_uring: drop req submit reference always in async punt

If we don't end up actually calling submit in io_sq_wq_submit_work(),
we still need to drop the submit reference to the request. If we
don't, then we can leak the request. This can happen if we race
with ring shutdown while flushing the workqueue for requests that
require use of the mm_struct.

Fixes: e65ef56db494 ("io_uring: use regular request ref counts")
Signed-off-by: Jens Axboe <axboe@kernel.dk>