io_uring/net: always use current transfer count for buffer put io_uring-6.16-20250621
authorJens Axboe <axboe@kernel.dk>
Fri, 20 Jun 2025 13:41:21 +0000 (07:41 -0600)
committerJens Axboe <axboe@kernel.dk>
Fri, 20 Jun 2025 14:33:45 +0000 (08:33 -0600)
commit51a4598ad5d9eb6be4ec9ba65bbfdf0ac302eb2e
tree57c9f0fad20d5e6979844e4f01c531b9c9467520
parente1c75831f682eef0f68b35723437146ed86070b1
io_uring/net: always use current transfer count for buffer put

A previous fix corrected the retry condition for when to continue a
current bundle, but it missed that the current (not the total) transfer
count also applies to the buffer put. If not, then for incrementally
consumed buffer rings repeated completions on the same request may end
up over consuming.

Reported-by: Roy Tang (ErgoniaTrading) <royonia@ergonia.io>
Cc: stable@vger.kernel.org
Fixes: 3a08988123c8 ("io_uring/net: only retry recv bundle for a full transfer")
Link: https://github.com/axboe/liburing/issues/1423
Signed-off-by: Jens Axboe <axboe@kernel.dk>
io_uring/net.c