On 10/31/18 2:40 AM, Ming Lei wrote:

brd_free() may be called in failure path on one brd instance which
disk isn't added yet, so release handler of gendisk may free the
associated request_queue early and causes the following use-after-free[1].

This patch fixes this issue by associating gendisk with request_queue
just before adding disk.

Looks good to me, thanks, applied.

-- 
Jens Axboe