On Fri, Apr 03, 2020 at 03:35:15PM -0700, Sultan Alsawaf wrote:

• 	ref->retire(ref);
  

• 	mutex_unlock(&ref->callback_lock);
  

Ugh, this patch is still wrong because the mutex unlock after ref->retire() is a use-after-free. Fun times...

Sultan