2019-10-23 00:25:58 +08:00
|
|
|
#ifndef INTERNAL_IO_WQ_H
|
|
|
|
#define INTERNAL_IO_WQ_H
|
|
|
|
|
2021-02-20 03:33:30 +08:00
|
|
|
#include <linux/refcount.h>
|
2020-10-15 00:48:51 +08:00
|
|
|
#include <linux/io_uring.h>
|
|
|
|
|
2019-10-23 00:25:58 +08:00
|
|
|
struct io_wq;
|
|
|
|
|
|
|
|
enum {
|
|
|
|
IO_WQ_WORK_CANCEL = 1,
|
2020-06-25 23:20:53 +08:00
|
|
|
IO_WQ_WORK_HASHED = 2,
|
|
|
|
IO_WQ_WORK_UNBOUND = 4,
|
|
|
|
IO_WQ_WORK_CONCURRENT = 16,
|
2019-10-23 00:25:58 +08:00
|
|
|
|
|
|
|
IO_WQ_HASH_SHIFT = 24, /* upper 8 bits are used for hash key */
|
|
|
|
};
|
|
|
|
|
|
|
|
enum io_wq_cancel {
|
|
|
|
IO_WQ_CANCEL_OK, /* cancelled before started */
|
|
|
|
IO_WQ_CANCEL_RUNNING, /* found, running, and attempted cancelled */
|
|
|
|
IO_WQ_CANCEL_NOTFOUND, /* work not found */
|
|
|
|
};
|
|
|
|
|
2020-03-24 03:57:22 +08:00
|
|
|
static inline void wq_list_add_after(struct io_wq_work_node *node,
|
|
|
|
struct io_wq_work_node *pos,
|
|
|
|
struct io_wq_work_list *list)
|
|
|
|
{
|
|
|
|
struct io_wq_work_node *next = pos->next;
|
|
|
|
|
|
|
|
pos->next = node;
|
|
|
|
node->next = next;
|
|
|
|
if (!next)
|
|
|
|
list->last = node;
|
|
|
|
}
|
|
|
|
|
2019-11-27 02:59:32 +08:00
|
|
|
static inline void wq_list_add_tail(struct io_wq_work_node *node,
|
|
|
|
struct io_wq_work_list *list)
|
|
|
|
{
|
|
|
|
if (!list->first) {
|
2019-12-08 12:06:46 +08:00
|
|
|
list->last = node;
|
|
|
|
WRITE_ONCE(list->first, node);
|
2019-11-27 02:59:32 +08:00
|
|
|
} else {
|
|
|
|
list->last->next = node;
|
|
|
|
list->last = node;
|
|
|
|
}
|
io_uring: fix io_wqe->work_list corruption
For the first time a req punted to io-wq, we'll initialize io_wq_work's
list to be NULL, then insert req to io_wqe->work_list. If this req is not
inserted into tail of io_wqe->work_list, this req's io_wq_work list will
point to another req's io_wq_work. For splitted bio case, this req maybe
inserted to io_wqe->work_list repeatedly, once we insert it to tail of
io_wqe->work_list for the second time, now io_wq_work->list->next will be
invalid pointer, which then result in many strang error, panic, kernel
soft-lockup, rcu stall, etc.
In my vm, kernel doest not have commit cc29e1bf0d63f7 ("block: disable
iopoll for split bio"), below fio job can reproduce this bug steadily:
[global]
name=iouring-sqpoll-iopoll-1
ioengine=io_uring
iodepth=128
numjobs=1
thread
rw=randread
direct=1
registerfiles=1
hipri=1
bs=4m
size=100M
runtime=120
time_based
group_reporting
randrepeat=0
[device]
directory=/home/feiman.wxg/mntpoint/ # an ext4 mount point
If we have commit cc29e1bf0d63f7 ("block: disable iopoll for split bio"),
there will no splitted bio case for polled io, but I think we still to need
to fix this list corruption, it also should maybe go to stable branchs.
To fix this corruption, if a req is inserted into tail of io_wqe->work_list,
initialize req->io_wq_work->list->next to bu NULL.
Cc: stable@vger.kernel.org
Signed-off-by: Xiaoguang Wang <xiaoguang.wang@linux.alibaba.com>
Reviewed-by: Pavel Begunkov <asml.silence@gmail.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
2020-12-18 15:26:48 +08:00
|
|
|
node->next = NULL;
|
2019-11-27 02:59:32 +08:00
|
|
|
}
|
|
|
|
|
2020-03-24 03:57:22 +08:00
|
|
|
static inline void wq_list_cut(struct io_wq_work_list *list,
|
|
|
|
struct io_wq_work_node *last,
|
2019-11-27 02:59:32 +08:00
|
|
|
struct io_wq_work_node *prev)
|
|
|
|
{
|
2020-03-24 03:57:22 +08:00
|
|
|
/* first in the list, if prev==NULL */
|
|
|
|
if (!prev)
|
|
|
|
WRITE_ONCE(list->first, last->next);
|
|
|
|
else
|
|
|
|
prev->next = last->next;
|
|
|
|
|
|
|
|
if (last == list->last)
|
2019-11-27 02:59:32 +08:00
|
|
|
list->last = prev;
|
2020-03-24 03:57:22 +08:00
|
|
|
last->next = NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline void wq_list_del(struct io_wq_work_list *list,
|
|
|
|
struct io_wq_work_node *node,
|
|
|
|
struct io_wq_work_node *prev)
|
|
|
|
{
|
|
|
|
wq_list_cut(list, node, prev);
|
2019-11-27 02:59:32 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
#define wq_list_for_each(pos, prv, head) \
|
|
|
|
for (pos = (head)->first, prv = NULL; pos; prv = pos, pos = (pos)->next)
|
|
|
|
|
2019-12-08 12:06:46 +08:00
|
|
|
#define wq_list_empty(list) (READ_ONCE((list)->first) == NULL)
|
2019-11-27 02:59:32 +08:00
|
|
|
#define INIT_WQ_LIST(list) do { \
|
|
|
|
(list)->first = NULL; \
|
|
|
|
(list)->last = NULL; \
|
|
|
|
} while (0)
|
|
|
|
|
2019-10-23 00:25:58 +08:00
|
|
|
struct io_wq_work {
|
2020-03-23 05:23:29 +08:00
|
|
|
struct io_wq_work_node list;
|
2021-02-16 04:40:22 +08:00
|
|
|
const struct cred *creds;
|
2019-11-27 02:59:32 +08:00
|
|
|
unsigned flags;
|
2019-10-23 00:25:58 +08:00
|
|
|
};
|
|
|
|
|
2020-03-24 03:57:22 +08:00
|
|
|
static inline struct io_wq_work *wq_next_work(struct io_wq_work *work)
|
|
|
|
{
|
|
|
|
if (!work->list.next)
|
|
|
|
return NULL;
|
|
|
|
|
|
|
|
return container_of(work->list.next, struct io_wq_work, list);
|
|
|
|
}
|
|
|
|
|
2021-02-04 21:52:08 +08:00
|
|
|
typedef struct io_wq_work *(free_work_fn)(struct io_wq_work *);
|
|
|
|
typedef void (io_wq_work_fn)(struct io_wq_work *);
|
2019-11-13 13:31:31 +08:00
|
|
|
|
2021-02-20 03:33:30 +08:00
|
|
|
struct io_wq_hash {
|
|
|
|
refcount_t refs;
|
|
|
|
unsigned long map;
|
|
|
|
struct wait_queue_head wait;
|
|
|
|
};
|
|
|
|
|
|
|
|
static inline void io_wq_put_hash(struct io_wq_hash *hash)
|
|
|
|
{
|
|
|
|
if (refcount_dec_and_test(&hash->refs))
|
|
|
|
kfree(hash);
|
|
|
|
}
|
|
|
|
|
2019-11-25 23:49:20 +08:00
|
|
|
struct io_wq_data {
|
2021-02-20 03:33:30 +08:00
|
|
|
struct io_wq_hash *hash;
|
2020-06-09 02:08:20 +08:00
|
|
|
io_wq_work_fn *do_work;
|
2020-03-04 21:14:12 +08:00
|
|
|
free_work_fn *free_work;
|
2019-11-25 23:49:20 +08:00
|
|
|
};
|
|
|
|
|
|
|
|
struct io_wq *io_wq_create(unsigned bounded, struct io_wq_data *data);
|
2019-10-23 00:25:58 +08:00
|
|
|
void io_wq_destroy(struct io_wq *wq);
|
|
|
|
|
|
|
|
void io_wq_enqueue(struct io_wq *wq, struct io_wq_work *work);
|
2020-03-14 05:31:04 +08:00
|
|
|
void io_wq_hash_work(struct io_wq_work *work, void *val);
|
|
|
|
|
2021-02-18 12:05:41 +08:00
|
|
|
pid_t io_wq_fork_thread(int (*fn)(void *), void *arg);
|
|
|
|
|
2020-03-14 05:31:04 +08:00
|
|
|
static inline bool io_wq_is_hashed(struct io_wq_work *work)
|
|
|
|
{
|
|
|
|
return work->flags & IO_WQ_WORK_HASHED;
|
|
|
|
}
|
2019-10-23 00:25:58 +08:00
|
|
|
|
2019-10-29 11:49:21 +08:00
|
|
|
typedef bool (work_cancel_fn)(struct io_wq_work *, void *);
|
|
|
|
|
|
|
|
enum io_wq_cancel io_wq_cancel_cb(struct io_wq *wq, work_cancel_fn *cancel,
|
2020-06-15 15:24:03 +08:00
|
|
|
void *data, bool cancel_all);
|
2019-10-29 11:49:21 +08:00
|
|
|
|
2019-10-23 00:25:58 +08:00
|
|
|
#if defined(CONFIG_IO_WQ)
|
|
|
|
extern void io_wq_worker_sleeping(struct task_struct *);
|
|
|
|
extern void io_wq_worker_running(struct task_struct *);
|
|
|
|
#else
|
|
|
|
static inline void io_wq_worker_sleeping(struct task_struct *tsk)
|
|
|
|
{
|
|
|
|
}
|
|
|
|
static inline void io_wq_worker_running(struct task_struct *tsk)
|
|
|
|
{
|
|
|
|
}
|
2019-12-18 05:13:37 +08:00
|
|
|
#endif
|
2019-10-23 00:25:58 +08:00
|
|
|
|
2019-12-18 05:13:37 +08:00
|
|
|
static inline bool io_wq_current_is_worker(void)
|
|
|
|
{
|
2021-02-17 05:15:30 +08:00
|
|
|
return in_task() && (current->flags & PF_IO_WORKER) &&
|
|
|
|
current->pf_io_worker;
|
2019-12-18 05:13:37 +08:00
|
|
|
}
|
|
|
|
#endif
|