591 void kiocb_set_cancel_fn(struct kiocb *iocb, kiocb_cancel_fn *cancel)  in kiocb_set_cancel_fn()  argument
593 	struct aio_kiocb *req = container_of(iocb, struct aio_kiocb, rw);  in kiocb_set_cancel_fn()
1099 static inline void iocb_destroy(struct aio_kiocb *iocb)  in iocb_destroy()  argument
1101 	if (iocb->ki_eventfd)  in iocb_destroy()
1102 		eventfd_ctx_put(iocb->ki_eventfd);  in iocb_destroy()
1103 	if (iocb->ki_filp)  in iocb_destroy()
1104 		fput(iocb->ki_filp);  in iocb_destroy()
1105 	percpu_ref_put(&iocb->ki_ctx->reqs);  in iocb_destroy()
1106 	kmem_cache_free(kiocb_cachep, iocb);  in iocb_destroy()
1112 static void aio_complete(struct aio_kiocb *iocb)  in aio_complete()  argument
1114 	struct kioctx	*ctx = iocb->ki_ctx;  in aio_complete()
1136 	*event = iocb->ki_res;  in aio_complete()
1140 	pr_debug("%p[%u]: %p: %p %Lx %Lx %Lx\n", ctx, tail, iocb,  in aio_complete()
1141 		 (void __user *)(unsigned long)iocb->ki_res.obj,  in aio_complete()
1142 		 iocb->ki_res.data, iocb->ki_res.res, iocb->ki_res.res2);  in aio_complete()
1161 	pr_debug("added to ring %p at [%u]\n", iocb, tail);  in aio_complete()
1168 	if (iocb->ki_eventfd)  in aio_complete()
1169 		eventfd_signal(iocb->ki_eventfd, 1);  in aio_complete()
1183 static inline void iocb_put(struct aio_kiocb *iocb)  in iocb_put()  argument
1185 	if (refcount_dec_and_test(&iocb->ki_refcnt)) {  in iocb_put()
1186 		aio_complete(iocb);  in iocb_put()
1187 		iocb_destroy(iocb);  in iocb_put()
1430 static void aio_remove_iocb(struct aio_kiocb *iocb)  in aio_remove_iocb()  argument
1432 	struct kioctx *ctx = iocb->ki_ctx;  in aio_remove_iocb()
1436 	list_del(&iocb->ki_list);  in aio_remove_iocb()
1442 	struct aio_kiocb *iocb = container_of(kiocb, struct aio_kiocb, rw);  in aio_complete_rw()  local
1444 	if (!list_empty_careful(&iocb->ki_list))  in aio_complete_rw()
1445 		aio_remove_iocb(iocb);  in aio_complete_rw()
1454 	iocb->ki_res.res = res;  in aio_complete_rw()
1455 	iocb->ki_res.res2 = 0;  in aio_complete_rw()
1456 	iocb_put(iocb);  in aio_complete_rw()
1459 static int aio_prep_rw(struct kiocb *req, const struct iocb *iocb)  in aio_prep_rw()  argument
1465 	req->ki_pos = iocb->aio_offset;  in aio_prep_rw()
1467 	if (iocb->aio_flags & IOCB_FLAG_RESFD)  in aio_prep_rw()
1469 	if (iocb->aio_flags & IOCB_FLAG_IOPRIO) {  in aio_prep_rw()
1475 		ret = ioprio_check_cap(iocb->aio_reqprio);  in aio_prep_rw()
1481 		req->ki_ioprio = iocb->aio_reqprio;  in aio_prep_rw()
1485 	ret = kiocb_set_rw_flags(req, iocb->aio_rw_flags);  in aio_prep_rw()
1493 static ssize_t aio_setup_rw(int rw, const struct iocb *iocb,  in aio_setup_rw()  argument
1497 	void __user *buf = (void __user *)(uintptr_t)iocb->aio_buf;  in aio_setup_rw()
1498 	size_t len = iocb->aio_nbytes;  in aio_setup_rw()
1529 static int aio_read(struct kiocb *req, const struct iocb *iocb,  in aio_read()  argument
1537 	ret = aio_prep_rw(req, iocb);  in aio_read()
1546 	ret = aio_setup_rw(ITER_DEST, iocb, &iovec, vectored, compat, &iter);  in aio_read()
1556 static int aio_write(struct kiocb *req, const struct iocb *iocb,  in aio_write()  argument
1564 	ret = aio_prep_rw(req, iocb);  in aio_write()
1574 	ret = aio_setup_rw(ITER_SOURCE, iocb, &iovec, vectored, compat, &iter);  in aio_write()
1590 	struct aio_kiocb *iocb = container_of(work, struct aio_kiocb, fsync.work);  in aio_fsync_work()  local
1591 	const struct cred *old_cred = override_creds(iocb->fsync.creds);  in aio_fsync_work()
1593 	iocb->ki_res.res = vfs_fsync(iocb->fsync.file, iocb->fsync.datasync);  in aio_fsync_work()
1595 	put_cred(iocb->fsync.creds);  in aio_fsync_work()
1596 	iocb_put(iocb);  in aio_fsync_work()
1599 static int aio_fsync(struct fsync_iocb *req, const struct iocb *iocb,  in aio_fsync()  argument
1602 	if (unlikely(iocb->aio_buf || iocb->aio_offset || iocb->aio_nbytes ||  in aio_fsync()
1603 			iocb->aio_rw_flags))  in aio_fsync()
1622 	struct aio_kiocb *iocb = container_of(req, struct aio_kiocb, poll);  in aio_poll_put_work()  local
1624 	iocb_put(iocb);  in aio_poll_put_work()
1675 	struct aio_kiocb *iocb = container_of(req, struct aio_kiocb, poll);  in aio_poll_complete_work()  local
1677 	struct kioctx *ctx = iocb->ki_ctx;  in aio_poll_complete_work()
1710 	list_del_init(&iocb->ki_list);  in aio_poll_complete_work()
1711 	iocb->ki_res.res = mangle_poll(mask);  in aio_poll_complete_work()
1714 	iocb_put(iocb);  in aio_poll_complete_work()
1718 static int aio_poll_cancel(struct kiocb *iocb)  in aio_poll_cancel()  argument
1720 	struct aio_kiocb *aiocb = container_of(iocb, struct aio_kiocb, rw);  in aio_poll_cancel()
1739 	struct aio_kiocb *iocb = container_of(req, struct aio_kiocb, poll);  in aio_poll_wake()  local
1761 	    spin_trylock_irqsave(&iocb->ki_ctx->ctx_lock, flags)) {  in aio_poll_wake()
1762 		struct kioctx *ctx = iocb->ki_ctx;  in aio_poll_wake()
1765 		list_del(&iocb->ki_list);  in aio_poll_wake()
1766 		iocb->ki_res.res = mangle_poll(mask);  in aio_poll_wake()
1767 		if (iocb->ki_eventfd && !eventfd_signal_allowed()) {  in aio_poll_wake()
1768 			iocb = NULL;  in aio_poll_wake()
1773 		if (iocb)  in aio_poll_wake()
1774 			iocb_put(iocb);  in aio_poll_wake()
1819 	struct aio_kiocb		*iocb;  member
1838 	pt->iocb->poll.head = head;  in aio_poll_queue_proc()
1839 	add_wait_queue(head, &pt->iocb->poll.wait);  in aio_poll_queue_proc()
1842 static int aio_poll(struct aio_kiocb *aiocb, const struct iocb *iocb)  in aio_poll()  argument
1851 	if ((u16)iocb->aio_buf != iocb->aio_buf)  in aio_poll()
1854 	if (iocb->aio_offset || iocb->aio_nbytes || iocb->aio_rw_flags)  in aio_poll()
1858 	req->events = demangle_poll(iocb->aio_buf) | EPOLLERR | EPOLLHUP;  in aio_poll()
1867 	apt.iocb = aiocb;  in aio_poll()
1917 static int __io_submit_one(struct kioctx *ctx, const struct iocb *iocb,  in __io_submit_one()  argument
1918 			   struct iocb __user *user_iocb, struct aio_kiocb *req,  in __io_submit_one()
1921 	req->ki_filp = fget(iocb->aio_fildes);  in __io_submit_one()
1925 	if (iocb->aio_flags & IOCB_FLAG_RESFD) {  in __io_submit_one()
1933 		eventfd = eventfd_ctx_fdget(iocb->aio_resfd);  in __io_submit_one()
1946 	req->ki_res.data = iocb->aio_data;  in __io_submit_one()
1950 	switch (iocb->aio_lio_opcode) {  in __io_submit_one()
1952 		return aio_read(&req->rw, iocb, false, compat);  in __io_submit_one()
1954 		return aio_write(&req->rw, iocb, false, compat);  in __io_submit_one()
1956 		return aio_read(&req->rw, iocb, true, compat);  in __io_submit_one()
1958 		return aio_write(&req->rw, iocb, true, compat);  in __io_submit_one()
1960 		return aio_fsync(&req->fsync, iocb, false);  in __io_submit_one()
1962 		return aio_fsync(&req->fsync, iocb, true);  in __io_submit_one()
1964 		return aio_poll(req, iocb);  in __io_submit_one()
1966 		pr_debug("invalid aio operation %d\n", iocb->aio_lio_opcode);  in __io_submit_one()
1971 static int io_submit_one(struct kioctx *ctx, struct iocb __user *user_iocb,  in io_submit_one()
1975 	struct iocb iocb;  in io_submit_one()  local
1978 	if (unlikely(copy_from_user(&iocb, user_iocb, sizeof(iocb))))  in io_submit_one()
1982 	if (unlikely(iocb.aio_reserved2)) {  in io_submit_one()
1989 	    (iocb.aio_buf != (unsigned long)iocb.aio_buf) ||  in io_submit_one()
1990 	    (iocb.aio_nbytes != (size_t)iocb.aio_nbytes) ||  in io_submit_one()
1991 	    ((ssize_t)iocb.aio_nbytes < 0)  in io_submit_one()
2001 	err = __io_submit_one(ctx, &iocb, user_iocb, req, compat);  in io_submit_one()
2031 		struct iocb __user * __user *, iocbpp)  in SYSCALL_DEFINE3()
2053 		struct iocb __user *user_iocb;  in SYSCALL_DEFINE3()
2124 SYSCALL_DEFINE3(io_cancel, aio_context_t, ctx_id, struct iocb __user *, iocb,  in SYSCALL_DEFINE3()  argument
2131 	u64 obj = (u64)(unsigned long)iocb;  in SYSCALL_DEFINE3()
2133 	if (unlikely(get_user(key, &iocb->aio_key)))  in SYSCALL_DEFINE3()