From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from out203-205-221-240.mail.qq.com (out203-205-221-240.mail.qq.com [203.205.221.240]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D098140F726 for ; Wed, 12 Aug 2026 09:34:04 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=203.205.221.240 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786527248; cv=none; b=kFml0s27ibCBB24tqiHWM0CGJUrTjKn9fKRv0QD5P74d0m6OII8bnvEZO1ZHtUrbNRxMBKwe9nx46RqC5oWn4h5tJ8XL2UFBDSJJdutQ5gklcsC0EgCacSorw/6KPbAM+rbyFkBjbMz+BsTtb6rKHy1AFXikb5j1+ewL3uLqB2M= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786527248; c=relaxed/simple; bh=pDLTuzghNhMp0N8WtMMBazfblsV6Oy6x0y4nTGzaYn4=; h=Message-ID:From:To:Cc:Subject:Date:In-Reply-To:References: MIME-Version; b=Bqkj9d5WrCJhHwoe2BBL9Z3qyPMi/3nwyNWvpSAnxL79NoOr2YjLcVxVuL+OQTBq6RnBvgib+OS8vjD0GX2H+2HPVaF/rUeBjqHnEGkV0pxeH3UJa6isJWgFZJbqQWCLX7O5r0SSAhj9tB19SdMoZFcmkUjHg9Waqi/HEtKWL1M= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com; spf=pass smtp.mailfrom=qq.com; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b=TfoSP/Vo; arc=none smtp.client-ip=203.205.221.240 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=qq.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b="TfoSP/Vo" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201512; t=1786527236; bh=IxRPR0+w1NRbGbVPx3H5gOke6XAgRib6Jm+45ohlXr4=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=TfoSP/Vovm46hy/o9E5/7ABSPAHvoWSPq7VBdSx3KYKKd+uEL1RGVOjZLHhFIihav ZSlnMyj/3/JUJQzwq7IvQBqTmLq041DoRTan0/w+QjKEGy7F4pP7QYzz3RUqMl52yu WyLVv5vHpDm/EDeT2PvlUXkdL0I4Ida5gbg/TVrk= Received: from lxu-ped-host.. ([111.198.231.89]) by newxmesmtplogicsvrsza73-0.qq.com (NewEsmtp) with SMTP id 87638631; Wed, 12 Aug 2026 17:33:54 +0800 X-QQ-mid: xmsmtpt1786527234t1iv2bk2h Message-ID: X-QQ-XMAILINFO: NHTNowOA4hJdK70wkRPwRfSsjTfoi0rBUTrsBfwrJGgHVqxv5ihQMnZZgl11xf wuPNM4FZH3dlEbLdemz2RWuyjphC8ldMalvXrk1F/n2cm4JQVsjLpr0bV3VaqAvA6HoV8cZ9XsNu Oa2I28Ze4puXyT97hgDfSksmhcf8Bt95URDb4eSwhJj8axsEx0bX0dznuQeRhQlB98ABxrw3Nbal H2kknYDbw20ovNtAsxf1sB7ug8whzFFc79IuM6e7yZkpVDcuBjTrn1GAhqXv8mUjM0lhG7PuW2mU Rb1JM9sZO6MzOt0q2pUg/N9XYnALxUhiliTJQc8DaoaJial9hOdQdGuHjJ7Kp3zvZPlXuOoDm3tE pOBoDfI3intzMCHCLQLYctPAo8yNdtFTFVv6rBCyFic+51deXUcVSoIHChaPR/dRzdF7tpP7M+W5 1xdFN7QA93pRTgDt2KeUdgLO20GWR//9SB+AbwZOA+dOIKxTuwJIbgwv11S+jXpmUvxI6QnGQ4S+ piPlA1ka3/vzYIlJyHtEdGLNAt7RKTnVUd94302bbKtWMvvGcHGMIkht1dh42KtH/bPeaXXZZazG 8HzO+zhm43Ay1XYAWQGxHGtiDGoWlFgXnUJWQFhfc5/0S9PItimJCsafkL+8cWJEHAnxlouTu3eR EyIiJmuIHtEghhWf06L+ku59lTv3oizUsOj+OHeSBOiEGU9XVubyZBvLDZkBFny0t8LyvyN7MEQA MPcllfnSBPOJlWUgpPntW0vUaPbqxsz9HMY+oasUEc7yo5A/znR0rhn+aI6OZasbSNDG6FjCXMtx j+tB8z622COGRQ9EIDupuWJjV8j56Nug2DWEKxH6qyQhgbhJoqUQ+5/Ee3paEcoZSDDTPjNj3owp 3JxzBDptO4Q+XvN/Sf5Wa4jaGGJ2uexV2XgVWPGSm8VoBHooYZaGXkhUN/1W84oK/j8NbbI62TiG e+hJteiw4Mlz9lbbQ9Cegm8IjirsLA3mvxxm6bFynPoC4qzOU851RbhrokdfrhO6mDy2MJgfOu8G hc9etiqd+E6meUeqnx X-QQ-XMRINFO: MPJ6Tf5t3I/ylTmHUqvI8+Wpn+Gzalws3A== From: Edward Adam Davis To: syzbot+a43f81e0646c5bbd2b88@syzkaller.appspotmail.com Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: [syzbot] [io-uring?] [net?] WARNING: refcount bug in zcrx_unregister_user Date: Wed, 12 Aug 2026 17:33:54 +0800 X-OQ-MSGID: <20260812093354.145587-2-eadavis@qq.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <6a7bbccb.ac361c09.22ff0a.0048.GAE@google.com> References: <6a7bbccb.ac361c09.22ff0a.0048.GAE@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit #syz test diff --git a/io_uring/zcrx.c b/io_uring/zcrx.c index f1464ea8ca64..75f799f20818 100644 --- a/io_uring/zcrx.c +++ b/io_uring/zcrx.c @@ -550,6 +550,7 @@ static struct io_zcrx_ifq *io_zcrx_ifq_alloc(struct io_ring_ctx *ctx) static void io_zcrx_drop_netdev(struct io_zcrx_ifq *ifq) { + BUG_ON(ifq); guard(mutex)(&ifq->pp_lock); if (!ifq->netdev) @@ -567,6 +568,7 @@ static void io_close_queue(struct io_zcrx_ifq *ifq) .mp_priv = ifq, }; + printk("ifq: %p, %s\n", ifq, __func__); scoped_guard(mutex, &ifq->pp_lock) { netdev = ifq->netdev; netdev_tracker = ifq->netdev_tracker;