[PATCH] io_uring: fix logic error in io_timeout

[yangerkun]

If ctx->cached_sq_head < nxt_sq_head, we should add UINT_MAX to tmp, not
tmp_nxt.

Fixes: 5da0fb1ab34c ("io_uring: consider the overflow of sequence for timeout 
req")
Signed-off-by: yangerkun <yanger...@huawei.com>
---
 fs/io_uring.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fs/io_uring.c b/fs/io_uring.c
index d2cb277da2f4..8781ab37b170 100644
--- a/fs/io_uring.c
+++ b/fs/io_uring.c
@@ -1934,7 +1934,7 @@ static int io_timeout(struct io_kiocb *req, const struct 
io_uring_sqe *sqe)
                 * once there is some timeout req still be valid.
                 */
                if (ctx->cached_sq_head < nxt_sq_head)
-                       tmp_nxt += UINT_MAX;
+                       tmp += UINT_MAX;
 
                if (tmp >= tmp_nxt)
                        break;
-- 
2.17.2