Subject: [to-be-updated] aio-fix-kioctx-not-being-freed-after-cancellation-at-exit-time.patch removed from -mm tree To: bcrl@xxxxxxxxx,jwboyer@xxxxxxxxxx,koverstreet@xxxxxxxxxx,zab@xxxxxxxxxx,mm-commits@xxxxxxxxxxxxxxx From: akpm@xxxxxxxxxxxxxxxxxxxx Date: Thu, 23 May 2013 13:50:30 -0700 The patch titled Subject: aio: fix kioctx not being freed after cancellation at exit time has been removed from the -mm tree. Its filename was aio-fix-kioctx-not-being-freed-after-cancellation-at-exit-time.patch This patch was dropped because an updated version will be merged ------------------------------------------------------ From: Benjamin LaHaise <bcrl@xxxxxxxxx> Subject: aio: fix kioctx not being freed after cancellation at exit time The recent changes overhauling fs/aio.c introduced a bug that results in the kioctx not being freed when outstanding kiocbs are cancelled at exit_aio() time. Specifically, a kiocb that is cancelled has its completion events discarded by batch_complete_aio(), which then fails to wake up the process stuck in free_ioctx(). Fix this by removing the event suppression in batch_complete_aio() and modify the wait_event() condition in free_ioctx() appropriately. This patch was tested with the cancel operation in the thread based code posted yesterday. Signed-off-by: Benjamin LaHaise <bcrl@xxxxxxxxx> Signed-off-by: Kent Overstreet <koverstreet@xxxxxxxxxx> Cc: Kent Overstreet <koverstreet@xxxxxxxxxx> Cc: Josh Boyer <jwboyer@xxxxxxxxxx> Cc: Zach Brown <zab@xxxxxxxxxx> Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> --- fs/aio.c | 15 +++------------ 1 file changed, 3 insertions(+), 12 deletions(-) diff -puN fs/aio.c~aio-fix-kioctx-not-being-freed-after-cancellation-at-exit-time fs/aio.c --- a/fs/aio.c~aio-fix-kioctx-not-being-freed-after-cancellation-at-exit-time +++ a/fs/aio.c @@ -349,7 +349,9 @@ static void free_ioctx(struct kioctx *ct kunmap_atomic(ring); while (atomic_read(&ctx->reqs_available) < ctx->nr_events - 1) { - wait_event(ctx->wait, head != ctx->shadow_tail); + wait_event(ctx->wait, + (head != ctx->shadow_tail) || + (atomic_read(&ctx->reqs_available) >= ctx->nr_events - 1)); avail = (head <= ctx->shadow_tail ? ctx->shadow_tail : ctx->nr_events) - head; @@ -774,17 +776,6 @@ void batch_complete_aio(struct batch_com n = rb_parent(n); } - if (unlikely(xchg(&req->ki_cancel, - KIOCB_CANCELLED) == KIOCB_CANCELLED)) { - /* - * Can't use the percpu reqs_available here - could race - * with free_ioctx() - */ - atomic_inc(&req->ki_ctx->reqs_available); - aio_put_req(req); - continue; - } - if (unlikely(req->ki_eventfd != eventfd)) { if (eventfd) { /* Make event visible */ _ Patches currently in -mm which might be from bcrl@xxxxxxxxx are aio-fix-io_getevents-documentation.patch virtio-blk-convert-to-batch-completion.patch mtip32xx-convert-to-batch-completion.patch aio-convert-the-ioctx-list-to-radix-tree.patch -- To unsubscribe from this list: send the line "unsubscribe mm-commits" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html