On Fri, Dec 8, 2017 at 10:27 AM, Jiri Pirko <j...@resnulli.us> wrote: > From: Jiri Pirko <j...@mellanox.com> > > Since the block is freed with last chain being put, once we reach the > end of iteration of list_for_each_entry_safe, the block may be > already freed. I'm hitting this only by creating and deleting clsact:
List is still too tricky to work with refcnt. > > [ 202.171952] > ================================================================== > [ 202.180182] BUG: KASAN: use-after-free in tcf_block_put_ext+0x240/0x390 I should enable KASAN now, otherwise can't catch this even though I tested this code path for hundreds of times.
