[2/2] is actually fixed in 5.9, but apparently it wasn't just a speculation but rather an actual issue. It fixes locally, by moving put out of lock, because don't see a reason why it's there. Pavel Begunkov (2): io_uring: fix ->work corruption with poll_add io_uring: fix lockup in io_fail_links() fs/io_uring.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) -- 2.24.0