Skip to content
Commit f2320f1d authored by Jens Axboe's avatar Jens Axboe
Browse files

io_uring/sqpoll: don't put task_struct on tctx setup failure



A recent commit moved the error handling of sqpoll thread and tctx
failures into the thread itself, as part of fixing an issue. However, it
missed that tctx allocation may also fail, and that
io_sq_offload_create() does its own error handling for the task_struct
in that case.

Remove the manual task putting in io_sq_offload_create(), as
io_sq_thread() will notice that the tctx did not get setup and hence it
should put itself and exit.

Reported-by: default avatar <syzbot+763e12bbf004fb1062e4@syzkaller.appspotmail.com>
Fixes: ac0b8b32 ("io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo()")
Signed-off-by: default avatarJens Axboe <axboe@kernel.dk>
parent 91a7703a
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment