> +void mmu_notifier_release(struct mm_struct *mm)...> + hlist_for_each_entry_safe_rcu(mn, n, t,> + &mm->mmu_notifier.head, hlist) {> + if (mn->ops->release)> + mn->ops->release(mn, mm);> + hlist_del(&mn->hlist);USE_AFTER_FREE!!! I made this same comment as well as other relaventcomments last week.Robin