Luis Henriques 288e23
From: Jeff Layton <jlayton@kernel.org>
Luis Henriques 288e23
Date: Tue, 1 Jun 2021 09:40:25 -0400
Luis Henriques 288e23
Subject: ceph: must hold snap_rwsem when filling inode for async create
Luis Henriques 288e23
Git-commit: 27171ae6a0fdc75571e5bf3d0961631a1e4fb765
Luis Henriques 288e23
Patch-mainline: v5.13
Luis Henriques 288e23
References: bsc#1187927
Luis Henriques 288e23
Luis Henriques 288e23
...and add a lockdep assertion for it to ceph_fill_inode().
Luis Henriques 288e23
Luis Henriques 288e23
Cc: stable@vger.kernel.org # v5.7+
Luis Henriques 288e23
Fixes: 9a8d03ca2e2c3 ("ceph: attempt to do async create when possible")
Luis Henriques 288e23
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Luis Henriques 288e23
Reviewed-by: Ilya Dryomov <idryomov@gmail.com>
Luis Henriques 288e23
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Luis Henriques 288e23
[luis: inlined ceph_sb_to_mdsc() helper, as we don't have commit
Luis Henriques 288e23
 2678da88f4b4 ]
Luis Henriques 288e23
Acked-by: Luis Henriques <lhenriques@suse.com>
Luis Henriques 288e23
---
Luis Henriques 288e23
 fs/ceph/file.c  |    3 +++
Luis Henriques 288e23
 fs/ceph/inode.c |    2 ++
Luis Henriques 288e23
 2 files changed, 5 insertions(+)
Luis Henriques 288e23
Luis Henriques 288e23
--- a/fs/ceph/file.c
Luis Henriques 288e23
+++ b/fs/ceph/file.c
Luis Henriques 288e23
@@ -579,6 +579,7 @@ static int ceph_finish_async_create(stru
Luis Henriques 288e23
 	struct ceph_inode_info *ci = ceph_inode(dir);
Luis Henriques 288e23
 	struct inode *inode;
Luis Henriques 288e23
 	struct timespec64 now;
Luis Henriques 288e23
+	struct ceph_mds_client *mdsc = ceph_sb_to_client(dir->i_sb)->mdsc;
Luis Henriques 288e23
 	struct ceph_vino vino = { .ino = req->r_deleg_ino,
Luis Henriques 288e23
 				  .snap = CEPH_NOSNAP };
Luis Henriques 288e23
 
Luis Henriques 288e23
@@ -616,8 +617,10 @@ static int ceph_finish_async_create(stru
Luis Henriques 288e23
 
Luis Henriques 288e23
 	ceph_file_layout_to_legacy(lo, &in.layout);
Luis Henriques 288e23
 
Luis Henriques 288e23
+	down_read(&mdsc->snap_rwsem);
Luis Henriques 288e23
 	ret = ceph_fill_inode(inode, NULL, &iinfo, NULL, req->r_session,
Luis Henriques 288e23
 			      req->r_fmode, NULL);
Luis Henriques 288e23
+	up_read(&mdsc->snap_rwsem);
Luis Henriques 288e23
 	if (ret) {
Luis Henriques 288e23
 		dout("%s failed to fill inode: %d\n", __func__, ret);
Luis Henriques 288e23
 		ceph_dir_clear_complete(dir);
Luis Henriques 288e23
--- a/fs/ceph/inode.c
Luis Henriques 288e23
+++ b/fs/ceph/inode.c
Luis Henriques 288e23
@@ -768,6 +768,8 @@ int ceph_fill_inode(struct inode *inode,
Luis Henriques 288e23
 	bool new_version = false;
Luis Henriques 288e23
 	bool fill_inline = false;
Luis Henriques 288e23
 
Luis Henriques 288e23
+	lockdep_assert_held(&mdsc->snap_rwsem);
Luis Henriques 288e23
+
Luis Henriques 288e23
 	dout("%s %p ino %llx.%llx v %llu had %llu\n", __func__,
Luis Henriques 288e23
 	     inode, ceph_vinop(inode), le64_to_cpu(info->version),
Luis Henriques 288e23
 	     ci->i_version);
Luis Henriques 288e23