On Fri, Apr 03, 2020 at 03:35:15PM -0700, Sultan Alsawaf wrote:> + ref->retire(ref);> + mutex_unlock(&ref->callback_lock);Ugh, this patch is still wrong because the mutex unlock after ref->retire() is ause-after-free. Fun times...Sultan