io_ring_exit_work() checks ifq before shutting it down and guarantees that the pointer is stable, but instead of relying on rather complicated synchronisation recheck the ifq pointer inside. Reported-by: Kees Bakker <kees@xxxxxxxxxxxx> Signed-off-by: Pavel Begunkov <asml.silence@xxxxxxxxx> --- io_uring/zcrx.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/io_uring/zcrx.c b/io_uring/zcrx.c index 026efb8dd381..a9eaab3fccf2 100644 --- a/io_uring/zcrx.c +++ b/io_uring/zcrx.c @@ -489,9 +489,9 @@ void io_shutdown_zcrx_ifqs(struct io_ring_ctx *ctx) { lockdep_assert_held(&ctx->uring_lock); - if (ctx->ifq) - io_zcrx_scrub(ctx->ifq); - + if (!ctx->ifq) + return; + io_zcrx_scrub(ctx->ifq); io_close_queue(ctx->ifq); } -- 2.48.1