1 files changed, 9 insertions, 11 deletions

diff --git a/fs/aio.c b/fs/aio.c
index ee20fc4240e0..55991e4132a7 100644
--- a/fs/aio.c
+++ b/fs/aio.c
@@ -298,17 +298,23 @@ static void wait_for_all_aios(struct kioctx *ctx)
         struct task_struct *tsk = current;
         DECLARE_WAITQUEUE(wait, tsk);
 
+        spin_lock_irq(&ctx->ctx_lock);
         if (!ctx->reqs_active)
-                return;
+                goto out;
 
         add_wait_queue(&ctx->wait, &wait);
         set_task_state(tsk, TASK_UNINTERRUPTIBLE);
         while (ctx->reqs_active) {
+                spin_unlock_irq(&ctx->ctx_lock);
                 schedule();
                 set_task_state(tsk, TASK_UNINTERRUPTIBLE);
+                spin_lock_irq(&ctx->ctx_lock);
         }
         __set_task_state(tsk, TASK_RUNNING);
         remove_wait_queue(&ctx->wait, &wait);
+
+out:
+        spin_unlock_irq(&ctx->ctx_lock);
 }
 
 /* wait_on_sync_kiocb:
@@ -424,7 +430,6 @@ static struct kiocb fastcall *__aio_get_req(struct kioctx *ctx)
         ring = kmap_atomic(ctx->ring_info.ring_pages[0], KM_USER0);
         if (ctx->reqs_active < aio_ring_avail(&ctx->ring_info, ring)) {
                 list_add(&req->ki_list, &ctx->active_reqs);
-                get_ioctx(ctx);
                 ctx->reqs_active++;
                 okay = 1;
         }
@@ -536,8 +541,6 @@ int fastcall aio_put_req(struct kiocb *req)
         spin_lock_irq(&ctx->ctx_lock);
         ret = __aio_put_req(ctx, req);
         spin_unlock_irq(&ctx->ctx_lock);
-        if (ret)
-                put_ioctx(ctx);
         return ret;
 }
 
@@ -779,8 +782,7 @@ static int __aio_run_iocbs(struct kioctx *ctx)
                  */
                 iocb->ki_users++;       /* grab extra reference */
                 aio_run_iocb(iocb);
-                if (__aio_put_req(ctx, iocb))  /* drop extra ref */
-                        put_ioctx(ctx);
+                __aio_put_req(ctx, iocb);
         }
         if (!list_empty(&ctx->run_list))
                 return 1;
@@ -997,14 +999,10 @@ put_rq:
         /* everything turned out well, dispose of the aiocb. */
         ret = __aio_put_req(ctx, iocb);
 
-        spin_unlock_irqrestore(&ctx->ctx_lock, flags);
-
         if (waitqueue_active(&ctx->wait))
                 wake_up(&ctx->wait);
 
-        if (ret)
-                put_ioctx(ctx);
-
+        spin_unlock_irqrestore(&ctx->ctx_lock, flags);
         return ret;
 }