Re: [PATCH] md: fix memleak for mempool

[Xiao Ni]

----- Original Message -----
> From: "Jack Wang" <xjtuwjp@xxxxxxxxx>
> To: shli@xxxxxx, linux-raid@xxxxxxxxxxxxxxx
> Cc: xni@xxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, "Jack Wang" <jinpu.wang@xxxxxxxxxxxxxxxx>
> Sent: Friday, October 19, 2018 10:21:31 PM
> Subject: [PATCH] md: fix memleak for mempool
> 
> From: Jack Wang <jinpu.wang@xxxxxxxxxxxxxxxx>
> 
> I noticed kmemleak report memory leak when run create/stop
> md in a loop, backtrace:
> [<000000001ca975e7>] mempool_create_node+0x86/0xd0
> [<0000000095576bcd>] md_run+0x1057/0x1410 [md_mod]
> [<000000007b45c5fc>] do_md_run+0x15/0x130 [md_mod]
> [<000000001ede9ec0>] md_ioctl+0x1f49/0x25d0 [md_mod]
> [<000000004142cacf>] blkdev_ioctl+0x680/0xd00
> 
> The root cause is we alloc mddev->flush_pool and
> mddev->flush_bio_pool in md_run, but from do_md_stop
> will not call into md_stop but __md_stop, move the
> mempool_destroy to __md_stop fixes the problem for me.
> 
> The bug was introduced in 5a409b4f56d5, the fixes should go to
> 4.18+
> 
> Cc: Xiao Ni <xni@xxxxxxxxxx>
> Fixes: 5a409b4f56d5 ("MD: fix lock contention for flush bios")
> Signed-off-by: Jack Wang <jinpu.wang@xxxxxxxxxxxxxxxx>
> ---
>  drivers/md/md.c | 16 ++++++++--------
>  1 file changed, 8 insertions(+), 8 deletions(-)
> 
> diff --git a/drivers/md/md.c b/drivers/md/md.c
> index 4c0f3e0331d5..feb6145097da 100644
> --- a/drivers/md/md.c
> +++ b/drivers/md/md.c
> @@ -5904,14 +5904,6 @@ static void __md_stop(struct mddev *mddev)
>  		mddev->to_remove = &md_redundancy_group;
>  	module_put(pers->owner);
>  	clear_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
> -}
> -
> -void md_stop(struct mddev *mddev)
> -{
> -	/* stop the array and free an attached data structures.
> -	 * This is called from dm-raid
> -	 */
> -	__md_stop(mddev);
>  	if (mddev->flush_bio_pool) {
>  		mempool_destroy(mddev->flush_bio_pool);
>  		mddev->flush_bio_pool = NULL;
> @@ -5920,6 +5912,14 @@ void md_stop(struct mddev *mddev)
>  		mempool_destroy(mddev->flush_pool);
>  		mddev->flush_pool = NULL;
>  	}
> +}
> +
> +void md_stop(struct mddev *mddev)
> +{
> +	/* stop the array and free an attached data structures.
> +	 * This is called from dm-raid
> +	 */
> +	__md_stop(mddev);
>  	bioset_exit(&mddev->bio_set);
>  	bioset_exit(&mddev->sync_set);
>  }
> --
> 2.7.4
> 
> 

Reviewed-by: Xiao Ni <xni@xxxxxxxxxx>