Drivers: hv: vmbus: Fix a rescind issue

The current rescind processing code will not correctly handle
the case where the host immediately rescinds a channel that has
been offerred. In this case, we could be blocked in the open call and
since the channel is rescinded, the host will not respond and we could
be blocked forever in the vmbus open call.i Fix this problem.

Signed-off-by: K. Y. Srinivasan <kys@microsoft.com>
Cc: stable@vger.kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

1 files changed, 8 insertions, 2 deletions

diff --git a/drivers/hv/channel.c b/drivers/hv/channel.c
index 19f0cf37e0ed..ba0a092ae085 100644
--- a/drivers/hv/channel.c
+++ b/drivers/hv/channel.c
@@ -659,22 +659,28 @@ void vmbus_close(struct vmbus_channel *channel)
                  */
                 return;
         }
-        mutex_lock(&vmbus_connection.channel_mutex);
         /*
          * Close all the sub-channels first and then close the
          * primary channel.
          */
         list_for_each_safe(cur, tmp, &channel->sc_list) {
                 cur_channel = list_entry(cur, struct vmbus_channel, sc_list);
-                vmbus_close_internal(cur_channel);
                 if (cur_channel->rescind) {
+                        wait_for_completion(&cur_channel->rescind_event);
+                        mutex_lock(&vmbus_connection.channel_mutex);
+                        vmbus_close_internal(cur_channel);
                         hv_process_channel_removal(
                                            cur_channel->offermsg.child_relid);
+                } else {
+                        mutex_lock(&vmbus_connection.channel_mutex);
+                        vmbus_close_internal(cur_channel);
                 }
+                mutex_unlock(&vmbus_connection.channel_mutex);
         }
         /*
          * Now close the primary.
          */
+        mutex_lock(&vmbus_connection.channel_mutex);
         vmbus_close_internal(channel);
         mutex_unlock(&vmbus_connection.channel_mutex);
 }