parent 98ba4031ab2adc8b394295e68aa4c8fe9d5060db author Jens Axboe 1227017225 +0100 committer Jens Axboe 1227017336 +0100 block: hold extra reference to bio in blk_rq_map_user_iov() If the size passed in is OK but we end up mapping too many segments, we call the unmap path directly like from IO completion. But from IO completion we have an extra reference to the bio, so this error case goes OOPS when it attempts to free and already free bio. Fix it by getting an extra reference to the bio before calling the unmap failure case. Reported-by: Petr Vandrovec Signed-off-by: Jens Axboe öUöš x