Found while running SmokeTest with AddressSanitizer.
In req_rescq.c::req_confirmresv, after logging the event, the server replies to the client saying their reservation is confirmed. In doing so, it calls reply_ack, which frees the batch_request. After replying, the server accesses the batch_request to write to the accounting log.
This was introduced in the fix of