Hi Linus, io_uring fixes for the 5.17-rc1 merge window: - Fix the io_uring POLLFREE handling, similarly to how it was done for aio (Pavel) - Remove (now) unused function (Jiapeng) - Small series fixing an issue with work cancelations. A window exists where work isn't locatable in the pending list, and isn't active in a worker yet either. (me) Please pull! The following changes since commit fb3b0673b7d5b477ed104949450cd511337ba3c6: Merge tag 'mailbox-v5.17' of git://git.linaro.org/landing-teams/working/fujitsu/integration (2022-01-13 11:19:07 -0800) are available in the Git repository at: git://git.kernel.dk/linux-block.git tags/io_uring-5.17-2022-01-21 for you to fetch changes up to 73031f761cb7c2397d73957d14d041c31fe58c34: io-wq: delete dead lock shuffling code (2022-01-19 13:11:58 -0700) ---------------------------------------------------------------- io_uring-5.17-2022-01-21 ---------------------------------------------------------------- Jens Axboe (7): io-wq: remove useless 'work' argument to __io_worker_busy() io-wq: make io_worker lock a raw spinlock io-wq: invoke work cancelation with wqe->lock held io-wq: perform both unstarted and started work cancelations in one go io-wq: add intermediate work step between pending list and active work io_uring: perform poll removal even if async work removal is successful io-wq: delete dead lock shuffling code Jiapeng Chong (1): io_uring: Remove unused function req_ref_put Pavel Begunkov (1): io_uring: fix UAF due to missing POLLFREE handling fs/io-wq.c | 91 ++++++++++++++++++++++++++++++++++++----------------------- fs/io_uring.c | 79 ++++++++++++++++++++++++++++++++++++++------------- 2 files changed, 116 insertions(+), 54 deletions(-) -- Jens Axboe