From: Penglei Jiang <superman.xpt@gmail.com>
Date: Sun, 15 Jun 2025 16:39:06 +0000 (-0700)
Subject: io_uring: fix task leak issue in io_wq_create()
X-Git-Tag: v6.16-rc3~22^2~3
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=89465d923bda180299e69ee2800aab84ad0ba689;p=thirdparty%2Fkernel%2Flinux.git

io_uring: fix task leak issue in io_wq_create()

Add missing put_task_struct() in the error path

Cc: stable@vger.kernel.org
Fixes: 0f8baa3c9802 ("io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()")
Signed-off-by: Penglei Jiang <superman.xpt@gmail.com>
Link: https://lore.kernel.org/r/20250615163906.2367-1-superman.xpt@gmail.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
---

diff --git a/io_uring/io-wq.c b/io_uring/io-wq.c
index cd1fcb115739a..be91edf34f013 100644
--- a/io_uring/io-wq.c
+++ b/io_uring/io-wq.c
@@ -1259,8 +1259,10 @@ struct io_wq *io_wq_create(unsigned bounded, struct io_wq_data *data)
 	atomic_set(&wq->worker_refs, 1);
 	init_completion(&wq->worker_done);
 	ret = cpuhp_state_add_instance_nocalls(io_wq_online, &wq->cpuhp_node);
-	if (ret)
+	if (ret) {
+		put_task_struct(wq->task);
 		goto err;
+	}
 
 	return wq;
 err: