Christoph Hellwig [off-list ref] wrote:

quoted

quoted

at the end of the function - but surely iocb should be expected to have
been freed when iocb->ki_complete() was called?

The iocb is refcounted and only completed when the refcount hits zero,
and an extra reference is held until the submission has completed.
Take a look at iocb_put().

Ah...  This is in struct aio_kiocb and not struct kiocb - that's why I missed
it.  Thanks.

David