Back to home page

OSCL-LXR

 
 

    


0001 // SPDX-License-Identifier: GPL-2.0
0002 #include <linux/ceph/ceph_debug.h>
0003 
0004 #include <linux/fs.h>
0005 #include <linux/kernel.h>
0006 #include <linux/sched/signal.h>
0007 #include <linux/slab.h>
0008 #include <linux/vmalloc.h>
0009 #include <linux/wait.h>
0010 #include <linux/writeback.h>
0011 #include <linux/iversion.h>
0012 
0013 #include "super.h"
0014 #include "mds_client.h"
0015 #include "cache.h"
0016 #include <linux/ceph/decode.h>
0017 #include <linux/ceph/messenger.h>
0018 
0019 /*
0020  * Capability management
0021  *
0022  * The Ceph metadata servers control client access to inode metadata
0023  * and file data by issuing capabilities, granting clients permission
0024  * to read and/or write both inode field and file data to OSDs
0025  * (storage nodes).  Each capability consists of a set of bits
0026  * indicating which operations are allowed.
0027  *
0028  * If the client holds a *_SHARED cap, the client has a coherent value
0029  * that can be safely read from the cached inode.
0030  *
0031  * In the case of a *_EXCL (exclusive) or FILE_WR capabilities, the
0032  * client is allowed to change inode attributes (e.g., file size,
0033  * mtime), note its dirty state in the ceph_cap, and asynchronously
0034  * flush that metadata change to the MDS.
0035  *
0036  * In the event of a conflicting operation (perhaps by another
0037  * client), the MDS will revoke the conflicting client capabilities.
0038  *
0039  * In order for a client to cache an inode, it must hold a capability
0040  * with at least one MDS server.  When inodes are released, release
0041  * notifications are batched and periodically sent en masse to the MDS
0042  * cluster to release server state.
0043  */
0044 
0045 static u64 __get_oldest_flush_tid(struct ceph_mds_client *mdsc);
0046 static void __kick_flushing_caps(struct ceph_mds_client *mdsc,
0047                  struct ceph_mds_session *session,
0048                  struct ceph_inode_info *ci,
0049                  u64 oldest_flush_tid);
0050 
0051 /*
0052  * Generate readable cap strings for debugging output.
0053  */
0054 #define MAX_CAP_STR 20
0055 static char cap_str[MAX_CAP_STR][40];
0056 static DEFINE_SPINLOCK(cap_str_lock);
0057 static int last_cap_str;
0058 
0059 static char *gcap_string(char *s, int c)
0060 {
0061     if (c & CEPH_CAP_GSHARED)
0062         *s++ = 's';
0063     if (c & CEPH_CAP_GEXCL)
0064         *s++ = 'x';
0065     if (c & CEPH_CAP_GCACHE)
0066         *s++ = 'c';
0067     if (c & CEPH_CAP_GRD)
0068         *s++ = 'r';
0069     if (c & CEPH_CAP_GWR)
0070         *s++ = 'w';
0071     if (c & CEPH_CAP_GBUFFER)
0072         *s++ = 'b';
0073     if (c & CEPH_CAP_GWREXTEND)
0074         *s++ = 'a';
0075     if (c & CEPH_CAP_GLAZYIO)
0076         *s++ = 'l';
0077     return s;
0078 }
0079 
0080 const char *ceph_cap_string(int caps)
0081 {
0082     int i;
0083     char *s;
0084     int c;
0085 
0086     spin_lock(&cap_str_lock);
0087     i = last_cap_str++;
0088     if (last_cap_str == MAX_CAP_STR)
0089         last_cap_str = 0;
0090     spin_unlock(&cap_str_lock);
0091 
0092     s = cap_str[i];
0093 
0094     if (caps & CEPH_CAP_PIN)
0095         *s++ = 'p';
0096 
0097     c = (caps >> CEPH_CAP_SAUTH) & 3;
0098     if (c) {
0099         *s++ = 'A';
0100         s = gcap_string(s, c);
0101     }
0102 
0103     c = (caps >> CEPH_CAP_SLINK) & 3;
0104     if (c) {
0105         *s++ = 'L';
0106         s = gcap_string(s, c);
0107     }
0108 
0109     c = (caps >> CEPH_CAP_SXATTR) & 3;
0110     if (c) {
0111         *s++ = 'X';
0112         s = gcap_string(s, c);
0113     }
0114 
0115     c = caps >> CEPH_CAP_SFILE;
0116     if (c) {
0117         *s++ = 'F';
0118         s = gcap_string(s, c);
0119     }
0120 
0121     if (s == cap_str[i])
0122         *s++ = '-';
0123     *s = 0;
0124     return cap_str[i];
0125 }
0126 
0127 void ceph_caps_init(struct ceph_mds_client *mdsc)
0128 {
0129     INIT_LIST_HEAD(&mdsc->caps_list);
0130     spin_lock_init(&mdsc->caps_list_lock);
0131 }
0132 
0133 void ceph_caps_finalize(struct ceph_mds_client *mdsc)
0134 {
0135     struct ceph_cap *cap;
0136 
0137     spin_lock(&mdsc->caps_list_lock);
0138     while (!list_empty(&mdsc->caps_list)) {
0139         cap = list_first_entry(&mdsc->caps_list,
0140                        struct ceph_cap, caps_item);
0141         list_del(&cap->caps_item);
0142         kmem_cache_free(ceph_cap_cachep, cap);
0143     }
0144     mdsc->caps_total_count = 0;
0145     mdsc->caps_avail_count = 0;
0146     mdsc->caps_use_count = 0;
0147     mdsc->caps_reserve_count = 0;
0148     mdsc->caps_min_count = 0;
0149     spin_unlock(&mdsc->caps_list_lock);
0150 }
0151 
0152 void ceph_adjust_caps_max_min(struct ceph_mds_client *mdsc,
0153                   struct ceph_mount_options *fsopt)
0154 {
0155     spin_lock(&mdsc->caps_list_lock);
0156     mdsc->caps_min_count = fsopt->max_readdir;
0157     if (mdsc->caps_min_count < 1024)
0158         mdsc->caps_min_count = 1024;
0159     mdsc->caps_use_max = fsopt->caps_max;
0160     if (mdsc->caps_use_max > 0 &&
0161         mdsc->caps_use_max < mdsc->caps_min_count)
0162         mdsc->caps_use_max = mdsc->caps_min_count;
0163     spin_unlock(&mdsc->caps_list_lock);
0164 }
0165 
0166 static void __ceph_unreserve_caps(struct ceph_mds_client *mdsc, int nr_caps)
0167 {
0168     struct ceph_cap *cap;
0169     int i;
0170 
0171     if (nr_caps) {
0172         BUG_ON(mdsc->caps_reserve_count < nr_caps);
0173         mdsc->caps_reserve_count -= nr_caps;
0174         if (mdsc->caps_avail_count >=
0175             mdsc->caps_reserve_count + mdsc->caps_min_count) {
0176             mdsc->caps_total_count -= nr_caps;
0177             for (i = 0; i < nr_caps; i++) {
0178                 cap = list_first_entry(&mdsc->caps_list,
0179                     struct ceph_cap, caps_item);
0180                 list_del(&cap->caps_item);
0181                 kmem_cache_free(ceph_cap_cachep, cap);
0182             }
0183         } else {
0184             mdsc->caps_avail_count += nr_caps;
0185         }
0186 
0187         dout("%s: caps %d = %d used + %d resv + %d avail\n",
0188              __func__,
0189              mdsc->caps_total_count, mdsc->caps_use_count,
0190              mdsc->caps_reserve_count, mdsc->caps_avail_count);
0191         BUG_ON(mdsc->caps_total_count != mdsc->caps_use_count +
0192                          mdsc->caps_reserve_count +
0193                          mdsc->caps_avail_count);
0194     }
0195 }
0196 
0197 /*
0198  * Called under mdsc->mutex.
0199  */
0200 int ceph_reserve_caps(struct ceph_mds_client *mdsc,
0201               struct ceph_cap_reservation *ctx, int need)
0202 {
0203     int i, j;
0204     struct ceph_cap *cap;
0205     int have;
0206     int alloc = 0;
0207     int max_caps;
0208     int err = 0;
0209     bool trimmed = false;
0210     struct ceph_mds_session *s;
0211     LIST_HEAD(newcaps);
0212 
0213     dout("reserve caps ctx=%p need=%d\n", ctx, need);
0214 
0215     /* first reserve any caps that are already allocated */
0216     spin_lock(&mdsc->caps_list_lock);
0217     if (mdsc->caps_avail_count >= need)
0218         have = need;
0219     else
0220         have = mdsc->caps_avail_count;
0221     mdsc->caps_avail_count -= have;
0222     mdsc->caps_reserve_count += have;
0223     BUG_ON(mdsc->caps_total_count != mdsc->caps_use_count +
0224                      mdsc->caps_reserve_count +
0225                      mdsc->caps_avail_count);
0226     spin_unlock(&mdsc->caps_list_lock);
0227 
0228     for (i = have; i < need; ) {
0229         cap = kmem_cache_alloc(ceph_cap_cachep, GFP_NOFS);
0230         if (cap) {
0231             list_add(&cap->caps_item, &newcaps);
0232             alloc++;
0233             i++;
0234             continue;
0235         }
0236 
0237         if (!trimmed) {
0238             for (j = 0; j < mdsc->max_sessions; j++) {
0239                 s = __ceph_lookup_mds_session(mdsc, j);
0240                 if (!s)
0241                     continue;
0242                 mutex_unlock(&mdsc->mutex);
0243 
0244                 mutex_lock(&s->s_mutex);
0245                 max_caps = s->s_nr_caps - (need - i);
0246                 ceph_trim_caps(mdsc, s, max_caps);
0247                 mutex_unlock(&s->s_mutex);
0248 
0249                 ceph_put_mds_session(s);
0250                 mutex_lock(&mdsc->mutex);
0251             }
0252             trimmed = true;
0253 
0254             spin_lock(&mdsc->caps_list_lock);
0255             if (mdsc->caps_avail_count) {
0256                 int more_have;
0257                 if (mdsc->caps_avail_count >= need - i)
0258                     more_have = need - i;
0259                 else
0260                     more_have = mdsc->caps_avail_count;
0261 
0262                 i += more_have;
0263                 have += more_have;
0264                 mdsc->caps_avail_count -= more_have;
0265                 mdsc->caps_reserve_count += more_have;
0266 
0267             }
0268             spin_unlock(&mdsc->caps_list_lock);
0269 
0270             continue;
0271         }
0272 
0273         pr_warn("reserve caps ctx=%p ENOMEM need=%d got=%d\n",
0274             ctx, need, have + alloc);
0275         err = -ENOMEM;
0276         break;
0277     }
0278 
0279     if (!err) {
0280         BUG_ON(have + alloc != need);
0281         ctx->count = need;
0282         ctx->used = 0;
0283     }
0284 
0285     spin_lock(&mdsc->caps_list_lock);
0286     mdsc->caps_total_count += alloc;
0287     mdsc->caps_reserve_count += alloc;
0288     list_splice(&newcaps, &mdsc->caps_list);
0289 
0290     BUG_ON(mdsc->caps_total_count != mdsc->caps_use_count +
0291                      mdsc->caps_reserve_count +
0292                      mdsc->caps_avail_count);
0293 
0294     if (err)
0295         __ceph_unreserve_caps(mdsc, have + alloc);
0296 
0297     spin_unlock(&mdsc->caps_list_lock);
0298 
0299     dout("reserve caps ctx=%p %d = %d used + %d resv + %d avail\n",
0300          ctx, mdsc->caps_total_count, mdsc->caps_use_count,
0301          mdsc->caps_reserve_count, mdsc->caps_avail_count);
0302     return err;
0303 }
0304 
0305 void ceph_unreserve_caps(struct ceph_mds_client *mdsc,
0306              struct ceph_cap_reservation *ctx)
0307 {
0308     bool reclaim = false;
0309     if (!ctx->count)
0310         return;
0311 
0312     dout("unreserve caps ctx=%p count=%d\n", ctx, ctx->count);
0313     spin_lock(&mdsc->caps_list_lock);
0314     __ceph_unreserve_caps(mdsc, ctx->count);
0315     ctx->count = 0;
0316 
0317     if (mdsc->caps_use_max > 0 &&
0318         mdsc->caps_use_count > mdsc->caps_use_max)
0319         reclaim = true;
0320     spin_unlock(&mdsc->caps_list_lock);
0321 
0322     if (reclaim)
0323         ceph_reclaim_caps_nr(mdsc, ctx->used);
0324 }
0325 
0326 struct ceph_cap *ceph_get_cap(struct ceph_mds_client *mdsc,
0327                   struct ceph_cap_reservation *ctx)
0328 {
0329     struct ceph_cap *cap = NULL;
0330 
0331     /* temporary, until we do something about cap import/export */
0332     if (!ctx) {
0333         cap = kmem_cache_alloc(ceph_cap_cachep, GFP_NOFS);
0334         if (cap) {
0335             spin_lock(&mdsc->caps_list_lock);
0336             mdsc->caps_use_count++;
0337             mdsc->caps_total_count++;
0338             spin_unlock(&mdsc->caps_list_lock);
0339         } else {
0340             spin_lock(&mdsc->caps_list_lock);
0341             if (mdsc->caps_avail_count) {
0342                 BUG_ON(list_empty(&mdsc->caps_list));
0343 
0344                 mdsc->caps_avail_count--;
0345                 mdsc->caps_use_count++;
0346                 cap = list_first_entry(&mdsc->caps_list,
0347                         struct ceph_cap, caps_item);
0348                 list_del(&cap->caps_item);
0349 
0350                 BUG_ON(mdsc->caps_total_count != mdsc->caps_use_count +
0351                        mdsc->caps_reserve_count + mdsc->caps_avail_count);
0352             }
0353             spin_unlock(&mdsc->caps_list_lock);
0354         }
0355 
0356         return cap;
0357     }
0358 
0359     spin_lock(&mdsc->caps_list_lock);
0360     dout("get_cap ctx=%p (%d) %d = %d used + %d resv + %d avail\n",
0361          ctx, ctx->count, mdsc->caps_total_count, mdsc->caps_use_count,
0362          mdsc->caps_reserve_count, mdsc->caps_avail_count);
0363     BUG_ON(!ctx->count);
0364     BUG_ON(ctx->count > mdsc->caps_reserve_count);
0365     BUG_ON(list_empty(&mdsc->caps_list));
0366 
0367     ctx->count--;
0368     ctx->used++;
0369     mdsc->caps_reserve_count--;
0370     mdsc->caps_use_count++;
0371 
0372     cap = list_first_entry(&mdsc->caps_list, struct ceph_cap, caps_item);
0373     list_del(&cap->caps_item);
0374 
0375     BUG_ON(mdsc->caps_total_count != mdsc->caps_use_count +
0376            mdsc->caps_reserve_count + mdsc->caps_avail_count);
0377     spin_unlock(&mdsc->caps_list_lock);
0378     return cap;
0379 }
0380 
0381 void ceph_put_cap(struct ceph_mds_client *mdsc, struct ceph_cap *cap)
0382 {
0383     spin_lock(&mdsc->caps_list_lock);
0384     dout("put_cap %p %d = %d used + %d resv + %d avail\n",
0385          cap, mdsc->caps_total_count, mdsc->caps_use_count,
0386          mdsc->caps_reserve_count, mdsc->caps_avail_count);
0387     mdsc->caps_use_count--;
0388     /*
0389      * Keep some preallocated caps around (ceph_min_count), to
0390      * avoid lots of free/alloc churn.
0391      */
0392     if (mdsc->caps_avail_count >= mdsc->caps_reserve_count +
0393                       mdsc->caps_min_count) {
0394         mdsc->caps_total_count--;
0395         kmem_cache_free(ceph_cap_cachep, cap);
0396     } else {
0397         mdsc->caps_avail_count++;
0398         list_add(&cap->caps_item, &mdsc->caps_list);
0399     }
0400 
0401     BUG_ON(mdsc->caps_total_count != mdsc->caps_use_count +
0402            mdsc->caps_reserve_count + mdsc->caps_avail_count);
0403     spin_unlock(&mdsc->caps_list_lock);
0404 }
0405 
0406 void ceph_reservation_status(struct ceph_fs_client *fsc,
0407                  int *total, int *avail, int *used, int *reserved,
0408                  int *min)
0409 {
0410     struct ceph_mds_client *mdsc = fsc->mdsc;
0411 
0412     spin_lock(&mdsc->caps_list_lock);
0413 
0414     if (total)
0415         *total = mdsc->caps_total_count;
0416     if (avail)
0417         *avail = mdsc->caps_avail_count;
0418     if (used)
0419         *used = mdsc->caps_use_count;
0420     if (reserved)
0421         *reserved = mdsc->caps_reserve_count;
0422     if (min)
0423         *min = mdsc->caps_min_count;
0424 
0425     spin_unlock(&mdsc->caps_list_lock);
0426 }
0427 
0428 /*
0429  * Find ceph_cap for given mds, if any.
0430  *
0431  * Called with i_ceph_lock held.
0432  */
0433 static struct ceph_cap *__get_cap_for_mds(struct ceph_inode_info *ci, int mds)
0434 {
0435     struct ceph_cap *cap;
0436     struct rb_node *n = ci->i_caps.rb_node;
0437 
0438     while (n) {
0439         cap = rb_entry(n, struct ceph_cap, ci_node);
0440         if (mds < cap->mds)
0441             n = n->rb_left;
0442         else if (mds > cap->mds)
0443             n = n->rb_right;
0444         else
0445             return cap;
0446     }
0447     return NULL;
0448 }
0449 
0450 struct ceph_cap *ceph_get_cap_for_mds(struct ceph_inode_info *ci, int mds)
0451 {
0452     struct ceph_cap *cap;
0453 
0454     spin_lock(&ci->i_ceph_lock);
0455     cap = __get_cap_for_mds(ci, mds);
0456     spin_unlock(&ci->i_ceph_lock);
0457     return cap;
0458 }
0459 
0460 /*
0461  * Called under i_ceph_lock.
0462  */
0463 static void __insert_cap_node(struct ceph_inode_info *ci,
0464                   struct ceph_cap *new)
0465 {
0466     struct rb_node **p = &ci->i_caps.rb_node;
0467     struct rb_node *parent = NULL;
0468     struct ceph_cap *cap = NULL;
0469 
0470     while (*p) {
0471         parent = *p;
0472         cap = rb_entry(parent, struct ceph_cap, ci_node);
0473         if (new->mds < cap->mds)
0474             p = &(*p)->rb_left;
0475         else if (new->mds > cap->mds)
0476             p = &(*p)->rb_right;
0477         else
0478             BUG();
0479     }
0480 
0481     rb_link_node(&new->ci_node, parent, p);
0482     rb_insert_color(&new->ci_node, &ci->i_caps);
0483 }
0484 
0485 /*
0486  * (re)set cap hold timeouts, which control the delayed release
0487  * of unused caps back to the MDS.  Should be called on cap use.
0488  */
0489 static void __cap_set_timeouts(struct ceph_mds_client *mdsc,
0490                    struct ceph_inode_info *ci)
0491 {
0492     struct ceph_mount_options *opt = mdsc->fsc->mount_options;
0493     ci->i_hold_caps_max = round_jiffies(jiffies +
0494                         opt->caps_wanted_delay_max * HZ);
0495     dout("__cap_set_timeouts %p %lu\n", &ci->netfs.inode,
0496          ci->i_hold_caps_max - jiffies);
0497 }
0498 
0499 /*
0500  * (Re)queue cap at the end of the delayed cap release list.
0501  *
0502  * If I_FLUSH is set, leave the inode at the front of the list.
0503  *
0504  * Caller holds i_ceph_lock
0505  *    -> we take mdsc->cap_delay_lock
0506  */
0507 static void __cap_delay_requeue(struct ceph_mds_client *mdsc,
0508                 struct ceph_inode_info *ci)
0509 {
0510     dout("__cap_delay_requeue %p flags 0x%lx at %lu\n", &ci->netfs.inode,
0511          ci->i_ceph_flags, ci->i_hold_caps_max);
0512     if (!mdsc->stopping) {
0513         spin_lock(&mdsc->cap_delay_lock);
0514         if (!list_empty(&ci->i_cap_delay_list)) {
0515             if (ci->i_ceph_flags & CEPH_I_FLUSH)
0516                 goto no_change;
0517             list_del_init(&ci->i_cap_delay_list);
0518         }
0519         __cap_set_timeouts(mdsc, ci);
0520         list_add_tail(&ci->i_cap_delay_list, &mdsc->cap_delay_list);
0521 no_change:
0522         spin_unlock(&mdsc->cap_delay_lock);
0523     }
0524 }
0525 
0526 /*
0527  * Queue an inode for immediate writeback.  Mark inode with I_FLUSH,
0528  * indicating we should send a cap message to flush dirty metadata
0529  * asap, and move to the front of the delayed cap list.
0530  */
0531 static void __cap_delay_requeue_front(struct ceph_mds_client *mdsc,
0532                       struct ceph_inode_info *ci)
0533 {
0534     dout("__cap_delay_requeue_front %p\n", &ci->netfs.inode);
0535     spin_lock(&mdsc->cap_delay_lock);
0536     ci->i_ceph_flags |= CEPH_I_FLUSH;
0537     if (!list_empty(&ci->i_cap_delay_list))
0538         list_del_init(&ci->i_cap_delay_list);
0539     list_add(&ci->i_cap_delay_list, &mdsc->cap_delay_list);
0540     spin_unlock(&mdsc->cap_delay_lock);
0541 }
0542 
0543 /*
0544  * Cancel delayed work on cap.
0545  *
0546  * Caller must hold i_ceph_lock.
0547  */
0548 static void __cap_delay_cancel(struct ceph_mds_client *mdsc,
0549                    struct ceph_inode_info *ci)
0550 {
0551     dout("__cap_delay_cancel %p\n", &ci->netfs.inode);
0552     if (list_empty(&ci->i_cap_delay_list))
0553         return;
0554     spin_lock(&mdsc->cap_delay_lock);
0555     list_del_init(&ci->i_cap_delay_list);
0556     spin_unlock(&mdsc->cap_delay_lock);
0557 }
0558 
0559 /* Common issue checks for add_cap, handle_cap_grant. */
0560 static void __check_cap_issue(struct ceph_inode_info *ci, struct ceph_cap *cap,
0561                   unsigned issued)
0562 {
0563     unsigned had = __ceph_caps_issued(ci, NULL);
0564 
0565     lockdep_assert_held(&ci->i_ceph_lock);
0566 
0567     /*
0568      * Each time we receive FILE_CACHE anew, we increment
0569      * i_rdcache_gen.
0570      */
0571     if (S_ISREG(ci->netfs.inode.i_mode) &&
0572         (issued & (CEPH_CAP_FILE_CACHE|CEPH_CAP_FILE_LAZYIO)) &&
0573         (had & (CEPH_CAP_FILE_CACHE|CEPH_CAP_FILE_LAZYIO)) == 0) {
0574         ci->i_rdcache_gen++;
0575     }
0576 
0577     /*
0578      * If FILE_SHARED is newly issued, mark dir not complete. We don't
0579      * know what happened to this directory while we didn't have the cap.
0580      * If FILE_SHARED is being revoked, also mark dir not complete. It
0581      * stops on-going cached readdir.
0582      */
0583     if ((issued & CEPH_CAP_FILE_SHARED) != (had & CEPH_CAP_FILE_SHARED)) {
0584         if (issued & CEPH_CAP_FILE_SHARED)
0585             atomic_inc(&ci->i_shared_gen);
0586         if (S_ISDIR(ci->netfs.inode.i_mode)) {
0587             dout(" marking %p NOT complete\n", &ci->netfs.inode);
0588             __ceph_dir_clear_complete(ci);
0589         }
0590     }
0591 
0592     /* Wipe saved layout if we're losing DIR_CREATE caps */
0593     if (S_ISDIR(ci->netfs.inode.i_mode) && (had & CEPH_CAP_DIR_CREATE) &&
0594         !(issued & CEPH_CAP_DIR_CREATE)) {
0595          ceph_put_string(rcu_dereference_raw(ci->i_cached_layout.pool_ns));
0596          memset(&ci->i_cached_layout, 0, sizeof(ci->i_cached_layout));
0597     }
0598 }
0599 
0600 /**
0601  * change_auth_cap_ses - move inode to appropriate lists when auth caps change
0602  * @ci: inode to be moved
0603  * @session: new auth caps session
0604  */
0605 void change_auth_cap_ses(struct ceph_inode_info *ci,
0606              struct ceph_mds_session *session)
0607 {
0608     lockdep_assert_held(&ci->i_ceph_lock);
0609 
0610     if (list_empty(&ci->i_dirty_item) && list_empty(&ci->i_flushing_item))
0611         return;
0612 
0613     spin_lock(&session->s_mdsc->cap_dirty_lock);
0614     if (!list_empty(&ci->i_dirty_item))
0615         list_move(&ci->i_dirty_item, &session->s_cap_dirty);
0616     if (!list_empty(&ci->i_flushing_item))
0617         list_move_tail(&ci->i_flushing_item, &session->s_cap_flushing);
0618     spin_unlock(&session->s_mdsc->cap_dirty_lock);
0619 }
0620 
0621 /*
0622  * Add a capability under the given MDS session.
0623  *
0624  * Caller should hold session snap_rwsem (read) and ci->i_ceph_lock
0625  *
0626  * @fmode is the open file mode, if we are opening a file, otherwise
0627  * it is < 0.  (This is so we can atomically add the cap and add an
0628  * open file reference to it.)
0629  */
0630 void ceph_add_cap(struct inode *inode,
0631           struct ceph_mds_session *session, u64 cap_id,
0632           unsigned issued, unsigned wanted,
0633           unsigned seq, unsigned mseq, u64 realmino, int flags,
0634           struct ceph_cap **new_cap)
0635 {
0636     struct ceph_mds_client *mdsc = ceph_inode_to_client(inode)->mdsc;
0637     struct ceph_inode_info *ci = ceph_inode(inode);
0638     struct ceph_cap *cap;
0639     int mds = session->s_mds;
0640     int actual_wanted;
0641     u32 gen;
0642 
0643     lockdep_assert_held(&ci->i_ceph_lock);
0644 
0645     dout("add_cap %p mds%d cap %llx %s seq %d\n", inode,
0646          session->s_mds, cap_id, ceph_cap_string(issued), seq);
0647 
0648     gen = atomic_read(&session->s_cap_gen);
0649 
0650     cap = __get_cap_for_mds(ci, mds);
0651     if (!cap) {
0652         cap = *new_cap;
0653         *new_cap = NULL;
0654 
0655         cap->issued = 0;
0656         cap->implemented = 0;
0657         cap->mds = mds;
0658         cap->mds_wanted = 0;
0659         cap->mseq = 0;
0660 
0661         cap->ci = ci;
0662         __insert_cap_node(ci, cap);
0663 
0664         /* add to session cap list */
0665         cap->session = session;
0666         spin_lock(&session->s_cap_lock);
0667         list_add_tail(&cap->session_caps, &session->s_caps);
0668         session->s_nr_caps++;
0669         atomic64_inc(&mdsc->metric.total_caps);
0670         spin_unlock(&session->s_cap_lock);
0671     } else {
0672         spin_lock(&session->s_cap_lock);
0673         list_move_tail(&cap->session_caps, &session->s_caps);
0674         spin_unlock(&session->s_cap_lock);
0675 
0676         if (cap->cap_gen < gen)
0677             cap->issued = cap->implemented = CEPH_CAP_PIN;
0678 
0679         /*
0680          * auth mds of the inode changed. we received the cap export
0681          * message, but still haven't received the cap import message.
0682          * handle_cap_export() updated the new auth MDS' cap.
0683          *
0684          * "ceph_seq_cmp(seq, cap->seq) <= 0" means we are processing
0685          * a message that was send before the cap import message. So
0686          * don't remove caps.
0687          */
0688         if (ceph_seq_cmp(seq, cap->seq) <= 0) {
0689             WARN_ON(cap != ci->i_auth_cap);
0690             WARN_ON(cap->cap_id != cap_id);
0691             seq = cap->seq;
0692             mseq = cap->mseq;
0693             issued |= cap->issued;
0694             flags |= CEPH_CAP_FLAG_AUTH;
0695         }
0696     }
0697 
0698     if (!ci->i_snap_realm ||
0699         ((flags & CEPH_CAP_FLAG_AUTH) &&
0700          realmino != (u64)-1 && ci->i_snap_realm->ino != realmino)) {
0701         /*
0702          * add this inode to the appropriate snap realm
0703          */
0704         struct ceph_snap_realm *realm = ceph_lookup_snap_realm(mdsc,
0705                                    realmino);
0706         if (realm)
0707             ceph_change_snap_realm(inode, realm);
0708         else
0709             WARN(1, "%s: couldn't find snap realm 0x%llx (ino 0x%llx oldrealm 0x%llx)\n",
0710                  __func__, realmino, ci->i_vino.ino,
0711                  ci->i_snap_realm ? ci->i_snap_realm->ino : 0);
0712     }
0713 
0714     __check_cap_issue(ci, cap, issued);
0715 
0716     /*
0717      * If we are issued caps we don't want, or the mds' wanted
0718      * value appears to be off, queue a check so we'll release
0719      * later and/or update the mds wanted value.
0720      */
0721     actual_wanted = __ceph_caps_wanted(ci);
0722     if ((wanted & ~actual_wanted) ||
0723         (issued & ~actual_wanted & CEPH_CAP_ANY_WR)) {
0724         dout(" issued %s, mds wanted %s, actual %s, queueing\n",
0725              ceph_cap_string(issued), ceph_cap_string(wanted),
0726              ceph_cap_string(actual_wanted));
0727         __cap_delay_requeue(mdsc, ci);
0728     }
0729 
0730     if (flags & CEPH_CAP_FLAG_AUTH) {
0731         if (!ci->i_auth_cap ||
0732             ceph_seq_cmp(ci->i_auth_cap->mseq, mseq) < 0) {
0733             if (ci->i_auth_cap &&
0734                 ci->i_auth_cap->session != cap->session)
0735                 change_auth_cap_ses(ci, cap->session);
0736             ci->i_auth_cap = cap;
0737             cap->mds_wanted = wanted;
0738         }
0739     } else {
0740         WARN_ON(ci->i_auth_cap == cap);
0741     }
0742 
0743     dout("add_cap inode %p (%llx.%llx) cap %p %s now %s seq %d mds%d\n",
0744          inode, ceph_vinop(inode), cap, ceph_cap_string(issued),
0745          ceph_cap_string(issued|cap->issued), seq, mds);
0746     cap->cap_id = cap_id;
0747     cap->issued = issued;
0748     cap->implemented |= issued;
0749     if (ceph_seq_cmp(mseq, cap->mseq) > 0)
0750         cap->mds_wanted = wanted;
0751     else
0752         cap->mds_wanted |= wanted;
0753     cap->seq = seq;
0754     cap->issue_seq = seq;
0755     cap->mseq = mseq;
0756     cap->cap_gen = gen;
0757 }
0758 
0759 /*
0760  * Return true if cap has not timed out and belongs to the current
0761  * generation of the MDS session (i.e. has not gone 'stale' due to
0762  * us losing touch with the mds).
0763  */
0764 static int __cap_is_valid(struct ceph_cap *cap)
0765 {
0766     unsigned long ttl;
0767     u32 gen;
0768 
0769     gen = atomic_read(&cap->session->s_cap_gen);
0770     ttl = cap->session->s_cap_ttl;
0771 
0772     if (cap->cap_gen < gen || time_after_eq(jiffies, ttl)) {
0773         dout("__cap_is_valid %p cap %p issued %s "
0774              "but STALE (gen %u vs %u)\n", &cap->ci->netfs.inode,
0775              cap, ceph_cap_string(cap->issued), cap->cap_gen, gen);
0776         return 0;
0777     }
0778 
0779     return 1;
0780 }
0781 
0782 /*
0783  * Return set of valid cap bits issued to us.  Note that caps time
0784  * out, and may be invalidated in bulk if the client session times out
0785  * and session->s_cap_gen is bumped.
0786  */
0787 int __ceph_caps_issued(struct ceph_inode_info *ci, int *implemented)
0788 {
0789     int have = ci->i_snap_caps;
0790     struct ceph_cap *cap;
0791     struct rb_node *p;
0792 
0793     if (implemented)
0794         *implemented = 0;
0795     for (p = rb_first(&ci->i_caps); p; p = rb_next(p)) {
0796         cap = rb_entry(p, struct ceph_cap, ci_node);
0797         if (!__cap_is_valid(cap))
0798             continue;
0799         dout("__ceph_caps_issued %p cap %p issued %s\n",
0800              &ci->netfs.inode, cap, ceph_cap_string(cap->issued));
0801         have |= cap->issued;
0802         if (implemented)
0803             *implemented |= cap->implemented;
0804     }
0805     /*
0806      * exclude caps issued by non-auth MDS, but are been revoking
0807      * by the auth MDS. The non-auth MDS should be revoking/exporting
0808      * these caps, but the message is delayed.
0809      */
0810     if (ci->i_auth_cap) {
0811         cap = ci->i_auth_cap;
0812         have &= ~cap->implemented | cap->issued;
0813     }
0814     return have;
0815 }
0816 
0817 /*
0818  * Get cap bits issued by caps other than @ocap
0819  */
0820 int __ceph_caps_issued_other(struct ceph_inode_info *ci, struct ceph_cap *ocap)
0821 {
0822     int have = ci->i_snap_caps;
0823     struct ceph_cap *cap;
0824     struct rb_node *p;
0825 
0826     for (p = rb_first(&ci->i_caps); p; p = rb_next(p)) {
0827         cap = rb_entry(p, struct ceph_cap, ci_node);
0828         if (cap == ocap)
0829             continue;
0830         if (!__cap_is_valid(cap))
0831             continue;
0832         have |= cap->issued;
0833     }
0834     return have;
0835 }
0836 
0837 /*
0838  * Move a cap to the end of the LRU (oldest caps at list head, newest
0839  * at list tail).
0840  */
0841 static void __touch_cap(struct ceph_cap *cap)
0842 {
0843     struct ceph_mds_session *s = cap->session;
0844 
0845     spin_lock(&s->s_cap_lock);
0846     if (!s->s_cap_iterator) {
0847         dout("__touch_cap %p cap %p mds%d\n", &cap->ci->netfs.inode, cap,
0848              s->s_mds);
0849         list_move_tail(&cap->session_caps, &s->s_caps);
0850     } else {
0851         dout("__touch_cap %p cap %p mds%d NOP, iterating over caps\n",
0852              &cap->ci->netfs.inode, cap, s->s_mds);
0853     }
0854     spin_unlock(&s->s_cap_lock);
0855 }
0856 
0857 /*
0858  * Check if we hold the given mask.  If so, move the cap(s) to the
0859  * front of their respective LRUs.  (This is the preferred way for
0860  * callers to check for caps they want.)
0861  */
0862 int __ceph_caps_issued_mask(struct ceph_inode_info *ci, int mask, int touch)
0863 {
0864     struct ceph_cap *cap;
0865     struct rb_node *p;
0866     int have = ci->i_snap_caps;
0867 
0868     if ((have & mask) == mask) {
0869         dout("__ceph_caps_issued_mask ino 0x%llx snap issued %s"
0870              " (mask %s)\n", ceph_ino(&ci->netfs.inode),
0871              ceph_cap_string(have),
0872              ceph_cap_string(mask));
0873         return 1;
0874     }
0875 
0876     for (p = rb_first(&ci->i_caps); p; p = rb_next(p)) {
0877         cap = rb_entry(p, struct ceph_cap, ci_node);
0878         if (!__cap_is_valid(cap))
0879             continue;
0880         if ((cap->issued & mask) == mask) {
0881             dout("__ceph_caps_issued_mask ino 0x%llx cap %p issued %s"
0882                  " (mask %s)\n", ceph_ino(&ci->netfs.inode), cap,
0883                  ceph_cap_string(cap->issued),
0884                  ceph_cap_string(mask));
0885             if (touch)
0886                 __touch_cap(cap);
0887             return 1;
0888         }
0889 
0890         /* does a combination of caps satisfy mask? */
0891         have |= cap->issued;
0892         if ((have & mask) == mask) {
0893             dout("__ceph_caps_issued_mask ino 0x%llx combo issued %s"
0894                  " (mask %s)\n", ceph_ino(&ci->netfs.inode),
0895                  ceph_cap_string(cap->issued),
0896                  ceph_cap_string(mask));
0897             if (touch) {
0898                 struct rb_node *q;
0899 
0900                 /* touch this + preceding caps */
0901                 __touch_cap(cap);
0902                 for (q = rb_first(&ci->i_caps); q != p;
0903                      q = rb_next(q)) {
0904                     cap = rb_entry(q, struct ceph_cap,
0905                                ci_node);
0906                     if (!__cap_is_valid(cap))
0907                         continue;
0908                     if (cap->issued & mask)
0909                         __touch_cap(cap);
0910                 }
0911             }
0912             return 1;
0913         }
0914     }
0915 
0916     return 0;
0917 }
0918 
0919 int __ceph_caps_issued_mask_metric(struct ceph_inode_info *ci, int mask,
0920                    int touch)
0921 {
0922     struct ceph_fs_client *fsc = ceph_sb_to_client(ci->netfs.inode.i_sb);
0923     int r;
0924 
0925     r = __ceph_caps_issued_mask(ci, mask, touch);
0926     if (r)
0927         ceph_update_cap_hit(&fsc->mdsc->metric);
0928     else
0929         ceph_update_cap_mis(&fsc->mdsc->metric);
0930     return r;
0931 }
0932 
0933 /*
0934  * Return true if mask caps are currently being revoked by an MDS.
0935  */
0936 int __ceph_caps_revoking_other(struct ceph_inode_info *ci,
0937                    struct ceph_cap *ocap, int mask)
0938 {
0939     struct ceph_cap *cap;
0940     struct rb_node *p;
0941 
0942     for (p = rb_first(&ci->i_caps); p; p = rb_next(p)) {
0943         cap = rb_entry(p, struct ceph_cap, ci_node);
0944         if (cap != ocap &&
0945             (cap->implemented & ~cap->issued & mask))
0946             return 1;
0947     }
0948     return 0;
0949 }
0950 
0951 int ceph_caps_revoking(struct ceph_inode_info *ci, int mask)
0952 {
0953     struct inode *inode = &ci->netfs.inode;
0954     int ret;
0955 
0956     spin_lock(&ci->i_ceph_lock);
0957     ret = __ceph_caps_revoking_other(ci, NULL, mask);
0958     spin_unlock(&ci->i_ceph_lock);
0959     dout("ceph_caps_revoking %p %s = %d\n", inode,
0960          ceph_cap_string(mask), ret);
0961     return ret;
0962 }
0963 
0964 int __ceph_caps_used(struct ceph_inode_info *ci)
0965 {
0966     int used = 0;
0967     if (ci->i_pin_ref)
0968         used |= CEPH_CAP_PIN;
0969     if (ci->i_rd_ref)
0970         used |= CEPH_CAP_FILE_RD;
0971     if (ci->i_rdcache_ref ||
0972         (S_ISREG(ci->netfs.inode.i_mode) &&
0973          ci->netfs.inode.i_data.nrpages))
0974         used |= CEPH_CAP_FILE_CACHE;
0975     if (ci->i_wr_ref)
0976         used |= CEPH_CAP_FILE_WR;
0977     if (ci->i_wb_ref || ci->i_wrbuffer_ref)
0978         used |= CEPH_CAP_FILE_BUFFER;
0979     if (ci->i_fx_ref)
0980         used |= CEPH_CAP_FILE_EXCL;
0981     return used;
0982 }
0983 
0984 #define FMODE_WAIT_BIAS 1000
0985 
0986 /*
0987  * wanted, by virtue of open file modes
0988  */
0989 int __ceph_caps_file_wanted(struct ceph_inode_info *ci)
0990 {
0991     const int PIN_SHIFT = ffs(CEPH_FILE_MODE_PIN);
0992     const int RD_SHIFT = ffs(CEPH_FILE_MODE_RD);
0993     const int WR_SHIFT = ffs(CEPH_FILE_MODE_WR);
0994     const int LAZY_SHIFT = ffs(CEPH_FILE_MODE_LAZY);
0995     struct ceph_mount_options *opt =
0996         ceph_inode_to_client(&ci->netfs.inode)->mount_options;
0997     unsigned long used_cutoff = jiffies - opt->caps_wanted_delay_max * HZ;
0998     unsigned long idle_cutoff = jiffies - opt->caps_wanted_delay_min * HZ;
0999 
1000     if (S_ISDIR(ci->netfs.inode.i_mode)) {
1001         int want = 0;
1002 
1003         /* use used_cutoff here, to keep dir's wanted caps longer */
1004         if (ci->i_nr_by_mode[RD_SHIFT] > 0 ||
1005             time_after(ci->i_last_rd, used_cutoff))
1006             want |= CEPH_CAP_ANY_SHARED;
1007 
1008         if (ci->i_nr_by_mode[WR_SHIFT] > 0 ||
1009             time_after(ci->i_last_wr, used_cutoff)) {
1010             want |= CEPH_CAP_ANY_SHARED | CEPH_CAP_FILE_EXCL;
1011             if (opt->flags & CEPH_MOUNT_OPT_ASYNC_DIROPS)
1012                 want |= CEPH_CAP_ANY_DIR_OPS;
1013         }
1014 
1015         if (want || ci->i_nr_by_mode[PIN_SHIFT] > 0)
1016             want |= CEPH_CAP_PIN;
1017 
1018         return want;
1019     } else {
1020         int bits = 0;
1021 
1022         if (ci->i_nr_by_mode[RD_SHIFT] > 0) {
1023             if (ci->i_nr_by_mode[RD_SHIFT] >= FMODE_WAIT_BIAS ||
1024                 time_after(ci->i_last_rd, used_cutoff))
1025                 bits |= 1 << RD_SHIFT;
1026         } else if (time_after(ci->i_last_rd, idle_cutoff)) {
1027             bits |= 1 << RD_SHIFT;
1028         }
1029 
1030         if (ci->i_nr_by_mode[WR_SHIFT] > 0) {
1031             if (ci->i_nr_by_mode[WR_SHIFT] >= FMODE_WAIT_BIAS ||
1032                 time_after(ci->i_last_wr, used_cutoff))
1033                 bits |= 1 << WR_SHIFT;
1034         } else if (time_after(ci->i_last_wr, idle_cutoff)) {
1035             bits |= 1 << WR_SHIFT;
1036         }
1037 
1038         /* check lazyio only when read/write is wanted */
1039         if ((bits & (CEPH_FILE_MODE_RDWR << 1)) &&
1040             ci->i_nr_by_mode[LAZY_SHIFT] > 0)
1041             bits |= 1 << LAZY_SHIFT;
1042 
1043         return bits ? ceph_caps_for_mode(bits >> 1) : 0;
1044     }
1045 }
1046 
1047 /*
1048  * wanted, by virtue of open file modes AND cap refs (buffered/cached data)
1049  */
1050 int __ceph_caps_wanted(struct ceph_inode_info *ci)
1051 {
1052     int w = __ceph_caps_file_wanted(ci) | __ceph_caps_used(ci);
1053     if (S_ISDIR(ci->netfs.inode.i_mode)) {
1054         /* we want EXCL if holding caps of dir ops */
1055         if (w & CEPH_CAP_ANY_DIR_OPS)
1056             w |= CEPH_CAP_FILE_EXCL;
1057     } else {
1058         /* we want EXCL if dirty data */
1059         if (w & CEPH_CAP_FILE_BUFFER)
1060             w |= CEPH_CAP_FILE_EXCL;
1061     }
1062     return w;
1063 }
1064 
1065 /*
1066  * Return caps we have registered with the MDS(s) as 'wanted'.
1067  */
1068 int __ceph_caps_mds_wanted(struct ceph_inode_info *ci, bool check)
1069 {
1070     struct ceph_cap *cap;
1071     struct rb_node *p;
1072     int mds_wanted = 0;
1073 
1074     for (p = rb_first(&ci->i_caps); p; p = rb_next(p)) {
1075         cap = rb_entry(p, struct ceph_cap, ci_node);
1076         if (check && !__cap_is_valid(cap))
1077             continue;
1078         if (cap == ci->i_auth_cap)
1079             mds_wanted |= cap->mds_wanted;
1080         else
1081             mds_wanted |= (cap->mds_wanted & ~CEPH_CAP_ANY_FILE_WR);
1082     }
1083     return mds_wanted;
1084 }
1085 
1086 int ceph_is_any_caps(struct inode *inode)
1087 {
1088     struct ceph_inode_info *ci = ceph_inode(inode);
1089     int ret;
1090 
1091     spin_lock(&ci->i_ceph_lock);
1092     ret = __ceph_is_any_real_caps(ci);
1093     spin_unlock(&ci->i_ceph_lock);
1094 
1095     return ret;
1096 }
1097 
1098 /*
1099  * Remove a cap.  Take steps to deal with a racing iterate_session_caps.
1100  *
1101  * caller should hold i_ceph_lock.
1102  * caller will not hold session s_mutex if called from destroy_inode.
1103  */
1104 void __ceph_remove_cap(struct ceph_cap *cap, bool queue_release)
1105 {
1106     struct ceph_mds_session *session = cap->session;
1107     struct ceph_inode_info *ci = cap->ci;
1108     struct ceph_mds_client *mdsc;
1109     int removed = 0;
1110 
1111     /* 'ci' being NULL means the remove have already occurred */
1112     if (!ci) {
1113         dout("%s: cap inode is NULL\n", __func__);
1114         return;
1115     }
1116 
1117     lockdep_assert_held(&ci->i_ceph_lock);
1118 
1119     dout("__ceph_remove_cap %p from %p\n", cap, &ci->netfs.inode);
1120 
1121     mdsc = ceph_inode_to_client(&ci->netfs.inode)->mdsc;
1122 
1123     /* remove from inode's cap rbtree, and clear auth cap */
1124     rb_erase(&cap->ci_node, &ci->i_caps);
1125     if (ci->i_auth_cap == cap)
1126         ci->i_auth_cap = NULL;
1127 
1128     /* remove from session list */
1129     spin_lock(&session->s_cap_lock);
1130     if (session->s_cap_iterator == cap) {
1131         /* not yet, we are iterating over this very cap */
1132         dout("__ceph_remove_cap  delaying %p removal from session %p\n",
1133              cap, cap->session);
1134     } else {
1135         list_del_init(&cap->session_caps);
1136         session->s_nr_caps--;
1137         atomic64_dec(&mdsc->metric.total_caps);
1138         cap->session = NULL;
1139         removed = 1;
1140     }
1141     /* protect backpointer with s_cap_lock: see iterate_session_caps */
1142     cap->ci = NULL;
1143 
1144     /*
1145      * s_cap_reconnect is protected by s_cap_lock. no one changes
1146      * s_cap_gen while session is in the reconnect state.
1147      */
1148     if (queue_release &&
1149         (!session->s_cap_reconnect ||
1150          cap->cap_gen == atomic_read(&session->s_cap_gen))) {
1151         cap->queue_release = 1;
1152         if (removed) {
1153             __ceph_queue_cap_release(session, cap);
1154             removed = 0;
1155         }
1156     } else {
1157         cap->queue_release = 0;
1158     }
1159     cap->cap_ino = ci->i_vino.ino;
1160 
1161     spin_unlock(&session->s_cap_lock);
1162 
1163     if (removed)
1164         ceph_put_cap(mdsc, cap);
1165 
1166     if (!__ceph_is_any_real_caps(ci)) {
1167         /* when reconnect denied, we remove session caps forcibly,
1168          * i_wr_ref can be non-zero. If there are ongoing write,
1169          * keep i_snap_realm.
1170          */
1171         if (ci->i_wr_ref == 0 && ci->i_snap_realm)
1172             ceph_change_snap_realm(&ci->netfs.inode, NULL);
1173 
1174         __cap_delay_cancel(mdsc, ci);
1175     }
1176 }
1177 
1178 void ceph_remove_cap(struct ceph_cap *cap, bool queue_release)
1179 {
1180     struct ceph_inode_info *ci = cap->ci;
1181     struct ceph_fs_client *fsc;
1182 
1183     /* 'ci' being NULL means the remove have already occurred */
1184     if (!ci) {
1185         dout("%s: cap inode is NULL\n", __func__);
1186         return;
1187     }
1188 
1189     lockdep_assert_held(&ci->i_ceph_lock);
1190 
1191     fsc = ceph_inode_to_client(&ci->netfs.inode);
1192     WARN_ON_ONCE(ci->i_auth_cap == cap &&
1193              !list_empty(&ci->i_dirty_item) &&
1194              !fsc->blocklisted &&
1195              !ceph_inode_is_shutdown(&ci->netfs.inode));
1196 
1197     __ceph_remove_cap(cap, queue_release);
1198 }
1199 
1200 struct cap_msg_args {
1201     struct ceph_mds_session *session;
1202     u64         ino, cid, follows;
1203     u64         flush_tid, oldest_flush_tid, size, max_size;
1204     u64         xattr_version;
1205     u64         change_attr;
1206     struct ceph_buffer  *xattr_buf;
1207     struct ceph_buffer  *old_xattr_buf;
1208     struct timespec64   atime, mtime, ctime, btime;
1209     int         op, caps, wanted, dirty;
1210     u32         seq, issue_seq, mseq, time_warp_seq;
1211     u32         flags;
1212     kuid_t          uid;
1213     kgid_t          gid;
1214     umode_t         mode;
1215     bool            inline_data;
1216     bool            wake;
1217 };
1218 
1219 /*
1220  * cap struct size + flock buffer size + inline version + inline data size +
1221  * osd_epoch_barrier + oldest_flush_tid
1222  */
1223 #define CAP_MSG_SIZE (sizeof(struct ceph_mds_caps) + \
1224               4 + 8 + 4 + 4 + 8 + 4 + 4 + 4 + 8 + 8 + 4)
1225 
1226 /* Marshal up the cap msg to the MDS */
1227 static void encode_cap_msg(struct ceph_msg *msg, struct cap_msg_args *arg)
1228 {
1229     struct ceph_mds_caps *fc;
1230     void *p;
1231     struct ceph_osd_client *osdc = &arg->session->s_mdsc->fsc->client->osdc;
1232 
1233     dout("%s %s %llx %llx caps %s wanted %s dirty %s seq %u/%u tid %llu/%llu mseq %u follows %lld size %llu/%llu xattr_ver %llu xattr_len %d\n",
1234          __func__, ceph_cap_op_name(arg->op), arg->cid, arg->ino,
1235          ceph_cap_string(arg->caps), ceph_cap_string(arg->wanted),
1236          ceph_cap_string(arg->dirty), arg->seq, arg->issue_seq,
1237          arg->flush_tid, arg->oldest_flush_tid, arg->mseq, arg->follows,
1238          arg->size, arg->max_size, arg->xattr_version,
1239          arg->xattr_buf ? (int)arg->xattr_buf->vec.iov_len : 0);
1240 
1241     msg->hdr.version = cpu_to_le16(10);
1242     msg->hdr.tid = cpu_to_le64(arg->flush_tid);
1243 
1244     fc = msg->front.iov_base;
1245     memset(fc, 0, sizeof(*fc));
1246 
1247     fc->cap_id = cpu_to_le64(arg->cid);
1248     fc->op = cpu_to_le32(arg->op);
1249     fc->seq = cpu_to_le32(arg->seq);
1250     fc->issue_seq = cpu_to_le32(arg->issue_seq);
1251     fc->migrate_seq = cpu_to_le32(arg->mseq);
1252     fc->caps = cpu_to_le32(arg->caps);
1253     fc->wanted = cpu_to_le32(arg->wanted);
1254     fc->dirty = cpu_to_le32(arg->dirty);
1255     fc->ino = cpu_to_le64(arg->ino);
1256     fc->snap_follows = cpu_to_le64(arg->follows);
1257 
1258     fc->size = cpu_to_le64(arg->size);
1259     fc->max_size = cpu_to_le64(arg->max_size);
1260     ceph_encode_timespec64(&fc->mtime, &arg->mtime);
1261     ceph_encode_timespec64(&fc->atime, &arg->atime);
1262     ceph_encode_timespec64(&fc->ctime, &arg->ctime);
1263     fc->time_warp_seq = cpu_to_le32(arg->time_warp_seq);
1264 
1265     fc->uid = cpu_to_le32(from_kuid(&init_user_ns, arg->uid));
1266     fc->gid = cpu_to_le32(from_kgid(&init_user_ns, arg->gid));
1267     fc->mode = cpu_to_le32(arg->mode);
1268 
1269     fc->xattr_version = cpu_to_le64(arg->xattr_version);
1270     if (arg->xattr_buf) {
1271         msg->middle = ceph_buffer_get(arg->xattr_buf);
1272         fc->xattr_len = cpu_to_le32(arg->xattr_buf->vec.iov_len);
1273         msg->hdr.middle_len = cpu_to_le32(arg->xattr_buf->vec.iov_len);
1274     }
1275 
1276     p = fc + 1;
1277     /* flock buffer size (version 2) */
1278     ceph_encode_32(&p, 0);
1279     /* inline version (version 4) */
1280     ceph_encode_64(&p, arg->inline_data ? 0 : CEPH_INLINE_NONE);
1281     /* inline data size */
1282     ceph_encode_32(&p, 0);
1283     /*
1284      * osd_epoch_barrier (version 5)
1285      * The epoch_barrier is protected osdc->lock, so READ_ONCE here in
1286      * case it was recently changed
1287      */
1288     ceph_encode_32(&p, READ_ONCE(osdc->epoch_barrier));
1289     /* oldest_flush_tid (version 6) */
1290     ceph_encode_64(&p, arg->oldest_flush_tid);
1291 
1292     /*
1293      * caller_uid/caller_gid (version 7)
1294      *
1295      * Currently, we don't properly track which caller dirtied the caps
1296      * last, and force a flush of them when there is a conflict. For now,
1297      * just set this to 0:0, to emulate how the MDS has worked up to now.
1298      */
1299     ceph_encode_32(&p, 0);
1300     ceph_encode_32(&p, 0);
1301 
1302     /* pool namespace (version 8) (mds always ignores this) */
1303     ceph_encode_32(&p, 0);
1304 
1305     /* btime and change_attr (version 9) */
1306     ceph_encode_timespec64(p, &arg->btime);
1307     p += sizeof(struct ceph_timespec);
1308     ceph_encode_64(&p, arg->change_attr);
1309 
1310     /* Advisory flags (version 10) */
1311     ceph_encode_32(&p, arg->flags);
1312 }
1313 
1314 /*
1315  * Queue cap releases when an inode is dropped from our cache.
1316  */
1317 void __ceph_remove_caps(struct ceph_inode_info *ci)
1318 {
1319     struct rb_node *p;
1320 
1321     /* lock i_ceph_lock, because ceph_d_revalidate(..., LOOKUP_RCU)
1322      * may call __ceph_caps_issued_mask() on a freeing inode. */
1323     spin_lock(&ci->i_ceph_lock);
1324     p = rb_first(&ci->i_caps);
1325     while (p) {
1326         struct ceph_cap *cap = rb_entry(p, struct ceph_cap, ci_node);
1327         p = rb_next(p);
1328         ceph_remove_cap(cap, true);
1329     }
1330     spin_unlock(&ci->i_ceph_lock);
1331 }
1332 
1333 /*
1334  * Prepare to send a cap message to an MDS. Update the cap state, and populate
1335  * the arg struct with the parameters that will need to be sent. This should
1336  * be done under the i_ceph_lock to guard against changes to cap state.
1337  *
1338  * Make note of max_size reported/requested from mds, revoked caps
1339  * that have now been implemented.
1340  */
1341 static void __prep_cap(struct cap_msg_args *arg, struct ceph_cap *cap,
1342                int op, int flags, int used, int want, int retain,
1343                int flushing, u64 flush_tid, u64 oldest_flush_tid)
1344 {
1345     struct ceph_inode_info *ci = cap->ci;
1346     struct inode *inode = &ci->netfs.inode;
1347     int held, revoking;
1348 
1349     lockdep_assert_held(&ci->i_ceph_lock);
1350 
1351     held = cap->issued | cap->implemented;
1352     revoking = cap->implemented & ~cap->issued;
1353     retain &= ~revoking;
1354 
1355     dout("%s %p cap %p session %p %s -> %s (revoking %s)\n",
1356          __func__, inode, cap, cap->session,
1357          ceph_cap_string(held), ceph_cap_string(held & retain),
1358          ceph_cap_string(revoking));
1359     BUG_ON((retain & CEPH_CAP_PIN) == 0);
1360 
1361     ci->i_ceph_flags &= ~CEPH_I_FLUSH;
1362 
1363     cap->issued &= retain;  /* drop bits we don't want */
1364     /*
1365      * Wake up any waiters on wanted -> needed transition. This is due to
1366      * the weird transition from buffered to sync IO... we need to flush
1367      * dirty pages _before_ allowing sync writes to avoid reordering.
1368      */
1369     arg->wake = cap->implemented & ~cap->issued;
1370     cap->implemented &= cap->issued | used;
1371     cap->mds_wanted = want;
1372 
1373     arg->session = cap->session;
1374     arg->ino = ceph_vino(inode).ino;
1375     arg->cid = cap->cap_id;
1376     arg->follows = flushing ? ci->i_head_snapc->seq : 0;
1377     arg->flush_tid = flush_tid;
1378     arg->oldest_flush_tid = oldest_flush_tid;
1379 
1380     arg->size = i_size_read(inode);
1381     ci->i_reported_size = arg->size;
1382     arg->max_size = ci->i_wanted_max_size;
1383     if (cap == ci->i_auth_cap) {
1384         if (want & CEPH_CAP_ANY_FILE_WR)
1385             ci->i_requested_max_size = arg->max_size;
1386         else
1387             ci->i_requested_max_size = 0;
1388     }
1389 
1390     if (flushing & CEPH_CAP_XATTR_EXCL) {
1391         arg->old_xattr_buf = __ceph_build_xattrs_blob(ci);
1392         arg->xattr_version = ci->i_xattrs.version;
1393         arg->xattr_buf = ci->i_xattrs.blob;
1394     } else {
1395         arg->xattr_buf = NULL;
1396         arg->old_xattr_buf = NULL;
1397     }
1398 
1399     arg->mtime = inode->i_mtime;
1400     arg->atime = inode->i_atime;
1401     arg->ctime = inode->i_ctime;
1402     arg->btime = ci->i_btime;
1403     arg->change_attr = inode_peek_iversion_raw(inode);
1404 
1405     arg->op = op;
1406     arg->caps = cap->implemented;
1407     arg->wanted = want;
1408     arg->dirty = flushing;
1409 
1410     arg->seq = cap->seq;
1411     arg->issue_seq = cap->issue_seq;
1412     arg->mseq = cap->mseq;
1413     arg->time_warp_seq = ci->i_time_warp_seq;
1414 
1415     arg->uid = inode->i_uid;
1416     arg->gid = inode->i_gid;
1417     arg->mode = inode->i_mode;
1418 
1419     arg->inline_data = ci->i_inline_version != CEPH_INLINE_NONE;
1420     if (!(flags & CEPH_CLIENT_CAPS_PENDING_CAPSNAP) &&
1421         !list_empty(&ci->i_cap_snaps)) {
1422         struct ceph_cap_snap *capsnap;
1423         list_for_each_entry_reverse(capsnap, &ci->i_cap_snaps, ci_item) {
1424             if (capsnap->cap_flush.tid)
1425                 break;
1426             if (capsnap->need_flush) {
1427                 flags |= CEPH_CLIENT_CAPS_PENDING_CAPSNAP;
1428                 break;
1429             }
1430         }
1431     }
1432     arg->flags = flags;
1433 }
1434 
1435 /*
1436  * Send a cap msg on the given inode.
1437  *
1438  * Caller should hold snap_rwsem (read), s_mutex.
1439  */
1440 static void __send_cap(struct cap_msg_args *arg, struct ceph_inode_info *ci)
1441 {
1442     struct ceph_msg *msg;
1443     struct inode *inode = &ci->netfs.inode;
1444 
1445     msg = ceph_msg_new(CEPH_MSG_CLIENT_CAPS, CAP_MSG_SIZE, GFP_NOFS, false);
1446     if (!msg) {
1447         pr_err("error allocating cap msg: ino (%llx.%llx) flushing %s tid %llu, requeuing cap.\n",
1448                ceph_vinop(inode), ceph_cap_string(arg->dirty),
1449                arg->flush_tid);
1450         spin_lock(&ci->i_ceph_lock);
1451         __cap_delay_requeue(arg->session->s_mdsc, ci);
1452         spin_unlock(&ci->i_ceph_lock);
1453         return;
1454     }
1455 
1456     encode_cap_msg(msg, arg);
1457     ceph_con_send(&arg->session->s_con, msg);
1458     ceph_buffer_put(arg->old_xattr_buf);
1459     if (arg->wake)
1460         wake_up_all(&ci->i_cap_wq);
1461 }
1462 
1463 static inline int __send_flush_snap(struct inode *inode,
1464                     struct ceph_mds_session *session,
1465                     struct ceph_cap_snap *capsnap,
1466                     u32 mseq, u64 oldest_flush_tid)
1467 {
1468     struct cap_msg_args arg;
1469     struct ceph_msg     *msg;
1470 
1471     msg = ceph_msg_new(CEPH_MSG_CLIENT_CAPS, CAP_MSG_SIZE, GFP_NOFS, false);
1472     if (!msg)
1473         return -ENOMEM;
1474 
1475     arg.session = session;
1476     arg.ino = ceph_vino(inode).ino;
1477     arg.cid = 0;
1478     arg.follows = capsnap->follows;
1479     arg.flush_tid = capsnap->cap_flush.tid;
1480     arg.oldest_flush_tid = oldest_flush_tid;
1481 
1482     arg.size = capsnap->size;
1483     arg.max_size = 0;
1484     arg.xattr_version = capsnap->xattr_version;
1485     arg.xattr_buf = capsnap->xattr_blob;
1486     arg.old_xattr_buf = NULL;
1487 
1488     arg.atime = capsnap->atime;
1489     arg.mtime = capsnap->mtime;
1490     arg.ctime = capsnap->ctime;
1491     arg.btime = capsnap->btime;
1492     arg.change_attr = capsnap->change_attr;
1493 
1494     arg.op = CEPH_CAP_OP_FLUSHSNAP;
1495     arg.caps = capsnap->issued;
1496     arg.wanted = 0;
1497     arg.dirty = capsnap->dirty;
1498 
1499     arg.seq = 0;
1500     arg.issue_seq = 0;
1501     arg.mseq = mseq;
1502     arg.time_warp_seq = capsnap->time_warp_seq;
1503 
1504     arg.uid = capsnap->uid;
1505     arg.gid = capsnap->gid;
1506     arg.mode = capsnap->mode;
1507 
1508     arg.inline_data = capsnap->inline_data;
1509     arg.flags = 0;
1510     arg.wake = false;
1511 
1512     encode_cap_msg(msg, &arg);
1513     ceph_con_send(&arg.session->s_con, msg);
1514     return 0;
1515 }
1516 
1517 /*
1518  * When a snapshot is taken, clients accumulate dirty metadata on
1519  * inodes with capabilities in ceph_cap_snaps to describe the file
1520  * state at the time the snapshot was taken.  This must be flushed
1521  * asynchronously back to the MDS once sync writes complete and dirty
1522  * data is written out.
1523  *
1524  * Called under i_ceph_lock.
1525  */
1526 static void __ceph_flush_snaps(struct ceph_inode_info *ci,
1527                    struct ceph_mds_session *session)
1528         __releases(ci->i_ceph_lock)
1529         __acquires(ci->i_ceph_lock)
1530 {
1531     struct inode *inode = &ci->netfs.inode;
1532     struct ceph_mds_client *mdsc = session->s_mdsc;
1533     struct ceph_cap_snap *capsnap;
1534     u64 oldest_flush_tid = 0;
1535     u64 first_tid = 1, last_tid = 0;
1536 
1537     dout("__flush_snaps %p session %p\n", inode, session);
1538 
1539     list_for_each_entry(capsnap, &ci->i_cap_snaps, ci_item) {
1540         /*
1541          * we need to wait for sync writes to complete and for dirty
1542          * pages to be written out.
1543          */
1544         if (capsnap->dirty_pages || capsnap->writing)
1545             break;
1546 
1547         /* should be removed by ceph_try_drop_cap_snap() */
1548         BUG_ON(!capsnap->need_flush);
1549 
1550         /* only flush each capsnap once */
1551         if (capsnap->cap_flush.tid > 0) {
1552             dout(" already flushed %p, skipping\n", capsnap);
1553             continue;
1554         }
1555 
1556         spin_lock(&mdsc->cap_dirty_lock);
1557         capsnap->cap_flush.tid = ++mdsc->last_cap_flush_tid;
1558         list_add_tail(&capsnap->cap_flush.g_list,
1559                   &mdsc->cap_flush_list);
1560         if (oldest_flush_tid == 0)
1561             oldest_flush_tid = __get_oldest_flush_tid(mdsc);
1562         if (list_empty(&ci->i_flushing_item)) {
1563             list_add_tail(&ci->i_flushing_item,
1564                       &session->s_cap_flushing);
1565         }
1566         spin_unlock(&mdsc->cap_dirty_lock);
1567 
1568         list_add_tail(&capsnap->cap_flush.i_list,
1569                   &ci->i_cap_flush_list);
1570 
1571         if (first_tid == 1)
1572             first_tid = capsnap->cap_flush.tid;
1573         last_tid = capsnap->cap_flush.tid;
1574     }
1575 
1576     ci->i_ceph_flags &= ~CEPH_I_FLUSH_SNAPS;
1577 
1578     while (first_tid <= last_tid) {
1579         struct ceph_cap *cap = ci->i_auth_cap;
1580         struct ceph_cap_flush *cf = NULL, *iter;
1581         int ret;
1582 
1583         if (!(cap && cap->session == session)) {
1584             dout("__flush_snaps %p auth cap %p not mds%d, "
1585                  "stop\n", inode, cap, session->s_mds);
1586             break;
1587         }
1588 
1589         ret = -ENOENT;
1590         list_for_each_entry(iter, &ci->i_cap_flush_list, i_list) {
1591             if (iter->tid >= first_tid) {
1592                 cf = iter;
1593                 ret = 0;
1594                 break;
1595             }
1596         }
1597         if (ret < 0)
1598             break;
1599 
1600         first_tid = cf->tid + 1;
1601 
1602         capsnap = container_of(cf, struct ceph_cap_snap, cap_flush);
1603         refcount_inc(&capsnap->nref);
1604         spin_unlock(&ci->i_ceph_lock);
1605 
1606         dout("__flush_snaps %p capsnap %p tid %llu %s\n",
1607              inode, capsnap, cf->tid, ceph_cap_string(capsnap->dirty));
1608 
1609         ret = __send_flush_snap(inode, session, capsnap, cap->mseq,
1610                     oldest_flush_tid);
1611         if (ret < 0) {
1612             pr_err("__flush_snaps: error sending cap flushsnap, "
1613                    "ino (%llx.%llx) tid %llu follows %llu\n",
1614                 ceph_vinop(inode), cf->tid, capsnap->follows);
1615         }
1616 
1617         ceph_put_cap_snap(capsnap);
1618         spin_lock(&ci->i_ceph_lock);
1619     }
1620 }
1621 
1622 void ceph_flush_snaps(struct ceph_inode_info *ci,
1623               struct ceph_mds_session **psession)
1624 {
1625     struct inode *inode = &ci->netfs.inode;
1626     struct ceph_mds_client *mdsc = ceph_inode_to_client(inode)->mdsc;
1627     struct ceph_mds_session *session = NULL;
1628     int mds;
1629 
1630     dout("ceph_flush_snaps %p\n", inode);
1631     if (psession)
1632         session = *psession;
1633 retry:
1634     spin_lock(&ci->i_ceph_lock);
1635     if (!(ci->i_ceph_flags & CEPH_I_FLUSH_SNAPS)) {
1636         dout(" no capsnap needs flush, doing nothing\n");
1637         goto out;
1638     }
1639     if (!ci->i_auth_cap) {
1640         dout(" no auth cap (migrating?), doing nothing\n");
1641         goto out;
1642     }
1643 
1644     mds = ci->i_auth_cap->session->s_mds;
1645     if (session && session->s_mds != mds) {
1646         dout(" oops, wrong session %p mutex\n", session);
1647         ceph_put_mds_session(session);
1648         session = NULL;
1649     }
1650     if (!session) {
1651         spin_unlock(&ci->i_ceph_lock);
1652         mutex_lock(&mdsc->mutex);
1653         session = __ceph_lookup_mds_session(mdsc, mds);
1654         mutex_unlock(&mdsc->mutex);
1655         goto retry;
1656     }
1657 
1658     // make sure flushsnap messages are sent in proper order.
1659     if (ci->i_ceph_flags & CEPH_I_KICK_FLUSH)
1660         __kick_flushing_caps(mdsc, session, ci, 0);
1661 
1662     __ceph_flush_snaps(ci, session);
1663 out:
1664     spin_unlock(&ci->i_ceph_lock);
1665 
1666     if (psession)
1667         *psession = session;
1668     else
1669         ceph_put_mds_session(session);
1670     /* we flushed them all; remove this inode from the queue */
1671     spin_lock(&mdsc->snap_flush_lock);
1672     list_del_init(&ci->i_snap_flush_item);
1673     spin_unlock(&mdsc->snap_flush_lock);
1674 }
1675 
1676 /*
1677  * Mark caps dirty.  If inode is newly dirty, return the dirty flags.
1678  * Caller is then responsible for calling __mark_inode_dirty with the
1679  * returned flags value.
1680  */
1681 int __ceph_mark_dirty_caps(struct ceph_inode_info *ci, int mask,
1682                struct ceph_cap_flush **pcf)
1683 {
1684     struct ceph_mds_client *mdsc =
1685         ceph_sb_to_client(ci->netfs.inode.i_sb)->mdsc;
1686     struct inode *inode = &ci->netfs.inode;
1687     int was = ci->i_dirty_caps;
1688     int dirty = 0;
1689 
1690     lockdep_assert_held(&ci->i_ceph_lock);
1691 
1692     if (!ci->i_auth_cap) {
1693         pr_warn("__mark_dirty_caps %p %llx mask %s, "
1694             "but no auth cap (session was closed?)\n",
1695             inode, ceph_ino(inode), ceph_cap_string(mask));
1696         return 0;
1697     }
1698 
1699     dout("__mark_dirty_caps %p %s dirty %s -> %s\n", &ci->netfs.inode,
1700          ceph_cap_string(mask), ceph_cap_string(was),
1701          ceph_cap_string(was | mask));
1702     ci->i_dirty_caps |= mask;
1703     if (was == 0) {
1704         struct ceph_mds_session *session = ci->i_auth_cap->session;
1705 
1706         WARN_ON_ONCE(ci->i_prealloc_cap_flush);
1707         swap(ci->i_prealloc_cap_flush, *pcf);
1708 
1709         if (!ci->i_head_snapc) {
1710             WARN_ON_ONCE(!rwsem_is_locked(&mdsc->snap_rwsem));
1711             ci->i_head_snapc = ceph_get_snap_context(
1712                 ci->i_snap_realm->cached_context);
1713         }
1714         dout(" inode %p now dirty snapc %p auth cap %p\n",
1715              &ci->netfs.inode, ci->i_head_snapc, ci->i_auth_cap);
1716         BUG_ON(!list_empty(&ci->i_dirty_item));
1717         spin_lock(&mdsc->cap_dirty_lock);
1718         list_add(&ci->i_dirty_item, &session->s_cap_dirty);
1719         spin_unlock(&mdsc->cap_dirty_lock);
1720         if (ci->i_flushing_caps == 0) {
1721             ihold(inode);
1722             dirty |= I_DIRTY_SYNC;
1723         }
1724     } else {
1725         WARN_ON_ONCE(!ci->i_prealloc_cap_flush);
1726     }
1727     BUG_ON(list_empty(&ci->i_dirty_item));
1728     if (((was | ci->i_flushing_caps) & CEPH_CAP_FILE_BUFFER) &&
1729         (mask & CEPH_CAP_FILE_BUFFER))
1730         dirty |= I_DIRTY_DATASYNC;
1731     __cap_delay_requeue(mdsc, ci);
1732     return dirty;
1733 }
1734 
1735 struct ceph_cap_flush *ceph_alloc_cap_flush(void)
1736 {
1737     struct ceph_cap_flush *cf;
1738 
1739     cf = kmem_cache_alloc(ceph_cap_flush_cachep, GFP_KERNEL);
1740     if (!cf)
1741         return NULL;
1742 
1743     cf->is_capsnap = false;
1744     return cf;
1745 }
1746 
1747 void ceph_free_cap_flush(struct ceph_cap_flush *cf)
1748 {
1749     if (cf)
1750         kmem_cache_free(ceph_cap_flush_cachep, cf);
1751 }
1752 
1753 static u64 __get_oldest_flush_tid(struct ceph_mds_client *mdsc)
1754 {
1755     if (!list_empty(&mdsc->cap_flush_list)) {
1756         struct ceph_cap_flush *cf =
1757             list_first_entry(&mdsc->cap_flush_list,
1758                      struct ceph_cap_flush, g_list);
1759         return cf->tid;
1760     }
1761     return 0;
1762 }
1763 
1764 /*
1765  * Remove cap_flush from the mdsc's or inode's flushing cap list.
1766  * Return true if caller needs to wake up flush waiters.
1767  */
1768 static bool __detach_cap_flush_from_mdsc(struct ceph_mds_client *mdsc,
1769                      struct ceph_cap_flush *cf)
1770 {
1771     struct ceph_cap_flush *prev;
1772     bool wake = cf->wake;
1773 
1774     if (wake && cf->g_list.prev != &mdsc->cap_flush_list) {
1775         prev = list_prev_entry(cf, g_list);
1776         prev->wake = true;
1777         wake = false;
1778     }
1779     list_del_init(&cf->g_list);
1780     return wake;
1781 }
1782 
1783 static bool __detach_cap_flush_from_ci(struct ceph_inode_info *ci,
1784                        struct ceph_cap_flush *cf)
1785 {
1786     struct ceph_cap_flush *prev;
1787     bool wake = cf->wake;
1788 
1789     if (wake && cf->i_list.prev != &ci->i_cap_flush_list) {
1790         prev = list_prev_entry(cf, i_list);
1791         prev->wake = true;
1792         wake = false;
1793     }
1794     list_del_init(&cf->i_list);
1795     return wake;
1796 }
1797 
1798 /*
1799  * Add dirty inode to the flushing list.  Assigned a seq number so we
1800  * can wait for caps to flush without starving.
1801  *
1802  * Called under i_ceph_lock. Returns the flush tid.
1803  */
1804 static u64 __mark_caps_flushing(struct inode *inode,
1805                 struct ceph_mds_session *session, bool wake,
1806                 u64 *oldest_flush_tid)
1807 {
1808     struct ceph_mds_client *mdsc = ceph_sb_to_client(inode->i_sb)->mdsc;
1809     struct ceph_inode_info *ci = ceph_inode(inode);
1810     struct ceph_cap_flush *cf = NULL;
1811     int flushing;
1812 
1813     lockdep_assert_held(&ci->i_ceph_lock);
1814     BUG_ON(ci->i_dirty_caps == 0);
1815     BUG_ON(list_empty(&ci->i_dirty_item));
1816     BUG_ON(!ci->i_prealloc_cap_flush);
1817 
1818     flushing = ci->i_dirty_caps;
1819     dout("__mark_caps_flushing flushing %s, flushing_caps %s -> %s\n",
1820          ceph_cap_string(flushing),
1821          ceph_cap_string(ci->i_flushing_caps),
1822          ceph_cap_string(ci->i_flushing_caps | flushing));
1823     ci->i_flushing_caps |= flushing;
1824     ci->i_dirty_caps = 0;
1825     dout(" inode %p now !dirty\n", inode);
1826 
1827     swap(cf, ci->i_prealloc_cap_flush);
1828     cf->caps = flushing;
1829     cf->wake = wake;
1830 
1831     spin_lock(&mdsc->cap_dirty_lock);
1832     list_del_init(&ci->i_dirty_item);
1833 
1834     cf->tid = ++mdsc->last_cap_flush_tid;
1835     list_add_tail(&cf->g_list, &mdsc->cap_flush_list);
1836     *oldest_flush_tid = __get_oldest_flush_tid(mdsc);
1837 
1838     if (list_empty(&ci->i_flushing_item)) {
1839         list_add_tail(&ci->i_flushing_item, &session->s_cap_flushing);
1840         mdsc->num_cap_flushing++;
1841     }
1842     spin_unlock(&mdsc->cap_dirty_lock);
1843 
1844     list_add_tail(&cf->i_list, &ci->i_cap_flush_list);
1845 
1846     return cf->tid;
1847 }
1848 
1849 /*
1850  * try to invalidate mapping pages without blocking.
1851  */
1852 static int try_nonblocking_invalidate(struct inode *inode)
1853     __releases(ci->i_ceph_lock)
1854     __acquires(ci->i_ceph_lock)
1855 {
1856     struct ceph_inode_info *ci = ceph_inode(inode);
1857     u32 invalidating_gen = ci->i_rdcache_gen;
1858 
1859     spin_unlock(&ci->i_ceph_lock);
1860     ceph_fscache_invalidate(inode, false);
1861     invalidate_mapping_pages(&inode->i_data, 0, -1);
1862     spin_lock(&ci->i_ceph_lock);
1863 
1864     if (inode->i_data.nrpages == 0 &&
1865         invalidating_gen == ci->i_rdcache_gen) {
1866         /* success. */
1867         dout("try_nonblocking_invalidate %p success\n", inode);
1868         /* save any racing async invalidate some trouble */
1869         ci->i_rdcache_revoking = ci->i_rdcache_gen - 1;
1870         return 0;
1871     }
1872     dout("try_nonblocking_invalidate %p failed\n", inode);
1873     return -1;
1874 }
1875 
1876 bool __ceph_should_report_size(struct ceph_inode_info *ci)
1877 {
1878     loff_t size = i_size_read(&ci->netfs.inode);
1879     /* mds will adjust max size according to the reported size */
1880     if (ci->i_flushing_caps & CEPH_CAP_FILE_WR)
1881         return false;
1882     if (size >= ci->i_max_size)
1883         return true;
1884     /* half of previous max_size increment has been used */
1885     if (ci->i_max_size > ci->i_reported_size &&
1886         (size << 1) >= ci->i_max_size + ci->i_reported_size)
1887         return true;
1888     return false;
1889 }
1890 
1891 /*
1892  * Swiss army knife function to examine currently used and wanted
1893  * versus held caps.  Release, flush, ack revoked caps to mds as
1894  * appropriate.
1895  *
1896  *  CHECK_CAPS_AUTHONLY - we should only check the auth cap
1897  *  CHECK_CAPS_FLUSH - we should flush any dirty caps immediately, without
1898  *    further delay.
1899  */
1900 void ceph_check_caps(struct ceph_inode_info *ci, int flags,
1901              struct ceph_mds_session *session)
1902 {
1903     struct inode *inode = &ci->netfs.inode;
1904     struct ceph_mds_client *mdsc = ceph_sb_to_mdsc(inode->i_sb);
1905     struct ceph_cap *cap;
1906     u64 flush_tid, oldest_flush_tid;
1907     int file_wanted, used, cap_used;
1908     int issued, implemented, want, retain, revoking, flushing = 0;
1909     int mds = -1;   /* keep track of how far we've gone through i_caps list
1910                to avoid an infinite loop on retry */
1911     struct rb_node *p;
1912     bool queue_invalidate = false;
1913     bool tried_invalidate = false;
1914     bool queue_writeback = false;
1915 
1916     if (session)
1917         ceph_get_mds_session(session);
1918 
1919     spin_lock(&ci->i_ceph_lock);
1920     if (ci->i_ceph_flags & CEPH_I_ASYNC_CREATE) {
1921         /* Don't send messages until we get async create reply */
1922         spin_unlock(&ci->i_ceph_lock);
1923         ceph_put_mds_session(session);
1924         return;
1925     }
1926 
1927     if (ci->i_ceph_flags & CEPH_I_FLUSH)
1928         flags |= CHECK_CAPS_FLUSH;
1929 retry:
1930     /* Caps wanted by virtue of active open files. */
1931     file_wanted = __ceph_caps_file_wanted(ci);
1932 
1933     /* Caps which have active references against them */
1934     used = __ceph_caps_used(ci);
1935 
1936     /*
1937      * "issued" represents the current caps that the MDS wants us to have.
1938      * "implemented" is the set that we have been granted, and includes the
1939      * ones that have not yet been returned to the MDS (the "revoking" set,
1940      * usually because they have outstanding references).
1941      */
1942     issued = __ceph_caps_issued(ci, &implemented);
1943     revoking = implemented & ~issued;
1944 
1945     want = file_wanted;
1946 
1947     /* The ones we currently want to retain (may be adjusted below) */
1948     retain = file_wanted | used | CEPH_CAP_PIN;
1949     if (!mdsc->stopping && inode->i_nlink > 0) {
1950         if (file_wanted) {
1951             retain |= CEPH_CAP_ANY;       /* be greedy */
1952         } else if (S_ISDIR(inode->i_mode) &&
1953                (issued & CEPH_CAP_FILE_SHARED) &&
1954                __ceph_dir_is_complete(ci)) {
1955             /*
1956              * If a directory is complete, we want to keep
1957              * the exclusive cap. So that MDS does not end up
1958              * revoking the shared cap on every create/unlink
1959              * operation.
1960              */
1961             if (IS_RDONLY(inode)) {
1962                 want = CEPH_CAP_ANY_SHARED;
1963             } else {
1964                 want |= CEPH_CAP_ANY_SHARED | CEPH_CAP_FILE_EXCL;
1965             }
1966             retain |= want;
1967         } else {
1968 
1969             retain |= CEPH_CAP_ANY_SHARED;
1970             /*
1971              * keep RD only if we didn't have the file open RW,
1972              * because then the mds would revoke it anyway to
1973              * journal max_size=0.
1974              */
1975             if (ci->i_max_size == 0)
1976                 retain |= CEPH_CAP_ANY_RD;
1977         }
1978     }
1979 
1980     dout("check_caps %llx.%llx file_want %s used %s dirty %s flushing %s"
1981          " issued %s revoking %s retain %s %s%s%s\n", ceph_vinop(inode),
1982          ceph_cap_string(file_wanted),
1983          ceph_cap_string(used), ceph_cap_string(ci->i_dirty_caps),
1984          ceph_cap_string(ci->i_flushing_caps),
1985          ceph_cap_string(issued), ceph_cap_string(revoking),
1986          ceph_cap_string(retain),
1987          (flags & CHECK_CAPS_AUTHONLY) ? " AUTHONLY" : "",
1988          (flags & CHECK_CAPS_FLUSH) ? " FLUSH" : "",
1989          (flags & CHECK_CAPS_NOINVAL) ? " NOINVAL" : "");
1990 
1991     /*
1992      * If we no longer need to hold onto old our caps, and we may
1993      * have cached pages, but don't want them, then try to invalidate.
1994      * If we fail, it's because pages are locked.... try again later.
1995      */
1996     if ((!(flags & CHECK_CAPS_NOINVAL) || mdsc->stopping) &&
1997         S_ISREG(inode->i_mode) &&
1998         !(ci->i_wb_ref || ci->i_wrbuffer_ref) &&   /* no dirty pages... */
1999         inode->i_data.nrpages &&        /* have cached pages */
2000         (revoking & (CEPH_CAP_FILE_CACHE|
2001              CEPH_CAP_FILE_LAZYIO)) && /*  or revoking cache */
2002         !tried_invalidate) {
2003         dout("check_caps trying to invalidate on %llx.%llx\n",
2004              ceph_vinop(inode));
2005         if (try_nonblocking_invalidate(inode) < 0) {
2006             dout("check_caps queuing invalidate\n");
2007             queue_invalidate = true;
2008             ci->i_rdcache_revoking = ci->i_rdcache_gen;
2009         }
2010         tried_invalidate = true;
2011         goto retry;
2012     }
2013 
2014     for (p = rb_first(&ci->i_caps); p; p = rb_next(p)) {
2015         int mflags = 0;
2016         struct cap_msg_args arg;
2017 
2018         cap = rb_entry(p, struct ceph_cap, ci_node);
2019 
2020         /* avoid looping forever */
2021         if (mds >= cap->mds ||
2022             ((flags & CHECK_CAPS_AUTHONLY) && cap != ci->i_auth_cap))
2023             continue;
2024 
2025         /*
2026          * If we have an auth cap, we don't need to consider any
2027          * overlapping caps as used.
2028          */
2029         cap_used = used;
2030         if (ci->i_auth_cap && cap != ci->i_auth_cap)
2031             cap_used &= ~ci->i_auth_cap->issued;
2032 
2033         revoking = cap->implemented & ~cap->issued;
2034         dout(" mds%d cap %p used %s issued %s implemented %s revoking %s\n",
2035              cap->mds, cap, ceph_cap_string(cap_used),
2036              ceph_cap_string(cap->issued),
2037              ceph_cap_string(cap->implemented),
2038              ceph_cap_string(revoking));
2039 
2040         if (cap == ci->i_auth_cap &&
2041             (cap->issued & CEPH_CAP_FILE_WR)) {
2042             /* request larger max_size from MDS? */
2043             if (ci->i_wanted_max_size > ci->i_max_size &&
2044                 ci->i_wanted_max_size > ci->i_requested_max_size) {
2045                 dout("requesting new max_size\n");
2046                 goto ack;
2047             }
2048 
2049             /* approaching file_max? */
2050             if (__ceph_should_report_size(ci)) {
2051                 dout("i_size approaching max_size\n");
2052                 goto ack;
2053             }
2054         }
2055         /* flush anything dirty? */
2056         if (cap == ci->i_auth_cap) {
2057             if ((flags & CHECK_CAPS_FLUSH) && ci->i_dirty_caps) {
2058                 dout("flushing dirty caps\n");
2059                 goto ack;
2060             }
2061             if (ci->i_ceph_flags & CEPH_I_FLUSH_SNAPS) {
2062                 dout("flushing snap caps\n");
2063                 goto ack;
2064             }
2065         }
2066 
2067         /* completed revocation? going down and there are no caps? */
2068         if (revoking) {
2069             if ((revoking & cap_used) == 0) {
2070                 dout("completed revocation of %s\n",
2071                       ceph_cap_string(cap->implemented & ~cap->issued));
2072                 goto ack;
2073             }
2074 
2075             /*
2076              * If the "i_wrbuffer_ref" was increased by mmap or generic
2077              * cache write just before the ceph_check_caps() is called,
2078              * the Fb capability revoking will fail this time. Then we
2079              * must wait for the BDI's delayed work to flush the dirty
2080              * pages and to release the "i_wrbuffer_ref", which will cost
2081              * at most 5 seconds. That means the MDS needs to wait at
2082              * most 5 seconds to finished the Fb capability's revocation.
2083              *
2084              * Let's queue a writeback for it.
2085              */
2086             if (S_ISREG(inode->i_mode) && ci->i_wrbuffer_ref &&
2087                 (revoking & CEPH_CAP_FILE_BUFFER))
2088                 queue_writeback = true;
2089         }
2090 
2091         /* want more caps from mds? */
2092         if (want & ~cap->mds_wanted) {
2093             if (want & ~(cap->mds_wanted | cap->issued))
2094                 goto ack;
2095             if (!__cap_is_valid(cap))
2096                 goto ack;
2097         }
2098 
2099         /* things we might delay */
2100         if ((cap->issued & ~retain) == 0)
2101             continue;     /* nope, all good */
2102 
2103 ack:
2104         ceph_put_mds_session(session);
2105         session = ceph_get_mds_session(cap->session);
2106 
2107         /* kick flushing and flush snaps before sending normal
2108          * cap message */
2109         if (cap == ci->i_auth_cap &&
2110             (ci->i_ceph_flags &
2111              (CEPH_I_KICK_FLUSH | CEPH_I_FLUSH_SNAPS))) {
2112             if (ci->i_ceph_flags & CEPH_I_KICK_FLUSH)
2113                 __kick_flushing_caps(mdsc, session, ci, 0);
2114             if (ci->i_ceph_flags & CEPH_I_FLUSH_SNAPS)
2115                 __ceph_flush_snaps(ci, session);
2116 
2117             goto retry;
2118         }
2119 
2120         if (cap == ci->i_auth_cap && ci->i_dirty_caps) {
2121             flushing = ci->i_dirty_caps;
2122             flush_tid = __mark_caps_flushing(inode, session, false,
2123                              &oldest_flush_tid);
2124             if (flags & CHECK_CAPS_FLUSH &&
2125                 list_empty(&session->s_cap_dirty))
2126                 mflags |= CEPH_CLIENT_CAPS_SYNC;
2127         } else {
2128             flushing = 0;
2129             flush_tid = 0;
2130             spin_lock(&mdsc->cap_dirty_lock);
2131             oldest_flush_tid = __get_oldest_flush_tid(mdsc);
2132             spin_unlock(&mdsc->cap_dirty_lock);
2133         }
2134 
2135         mds = cap->mds;  /* remember mds, so we don't repeat */
2136 
2137         __prep_cap(&arg, cap, CEPH_CAP_OP_UPDATE, mflags, cap_used,
2138                want, retain, flushing, flush_tid, oldest_flush_tid);
2139 
2140         spin_unlock(&ci->i_ceph_lock);
2141         __send_cap(&arg, ci);
2142         spin_lock(&ci->i_ceph_lock);
2143 
2144         goto retry; /* retake i_ceph_lock and restart our cap scan. */
2145     }
2146 
2147     /* periodically re-calculate caps wanted by open files */
2148     if (__ceph_is_any_real_caps(ci) &&
2149         list_empty(&ci->i_cap_delay_list) &&
2150         (file_wanted & ~CEPH_CAP_PIN) &&
2151         !(used & (CEPH_CAP_FILE_RD | CEPH_CAP_ANY_FILE_WR))) {
2152         __cap_delay_requeue(mdsc, ci);
2153     }
2154 
2155     spin_unlock(&ci->i_ceph_lock);
2156 
2157     ceph_put_mds_session(session);
2158     if (queue_writeback)
2159         ceph_queue_writeback(inode);
2160     if (queue_invalidate)
2161         ceph_queue_invalidate(inode);
2162 }
2163 
2164 /*
2165  * Try to flush dirty caps back to the auth mds.
2166  */
2167 static int try_flush_caps(struct inode *inode, u64 *ptid)
2168 {
2169     struct ceph_mds_client *mdsc = ceph_sb_to_client(inode->i_sb)->mdsc;
2170     struct ceph_inode_info *ci = ceph_inode(inode);
2171     int flushing = 0;
2172     u64 flush_tid = 0, oldest_flush_tid = 0;
2173 
2174     spin_lock(&ci->i_ceph_lock);
2175 retry_locked:
2176     if (ci->i_dirty_caps && ci->i_auth_cap) {
2177         struct ceph_cap *cap = ci->i_auth_cap;
2178         struct cap_msg_args arg;
2179         struct ceph_mds_session *session = cap->session;
2180 
2181         if (session->s_state < CEPH_MDS_SESSION_OPEN) {
2182             spin_unlock(&ci->i_ceph_lock);
2183             goto out;
2184         }
2185 
2186         if (ci->i_ceph_flags &
2187             (CEPH_I_KICK_FLUSH | CEPH_I_FLUSH_SNAPS)) {
2188             if (ci->i_ceph_flags & CEPH_I_KICK_FLUSH)
2189                 __kick_flushing_caps(mdsc, session, ci, 0);
2190             if (ci->i_ceph_flags & CEPH_I_FLUSH_SNAPS)
2191                 __ceph_flush_snaps(ci, session);
2192             goto retry_locked;
2193         }
2194 
2195         flushing = ci->i_dirty_caps;
2196         flush_tid = __mark_caps_flushing(inode, session, true,
2197                          &oldest_flush_tid);
2198 
2199         __prep_cap(&arg, cap, CEPH_CAP_OP_FLUSH, CEPH_CLIENT_CAPS_SYNC,
2200                __ceph_caps_used(ci), __ceph_caps_wanted(ci),
2201                (cap->issued | cap->implemented),
2202                flushing, flush_tid, oldest_flush_tid);
2203         spin_unlock(&ci->i_ceph_lock);
2204 
2205         __send_cap(&arg, ci);
2206     } else {
2207         if (!list_empty(&ci->i_cap_flush_list)) {
2208             struct ceph_cap_flush *cf =
2209                 list_last_entry(&ci->i_cap_flush_list,
2210                         struct ceph_cap_flush, i_list);
2211             cf->wake = true;
2212             flush_tid = cf->tid;
2213         }
2214         flushing = ci->i_flushing_caps;
2215         spin_unlock(&ci->i_ceph_lock);
2216     }
2217 out:
2218     *ptid = flush_tid;
2219     return flushing;
2220 }
2221 
2222 /*
2223  * Return true if we've flushed caps through the given flush_tid.
2224  */
2225 static int caps_are_flushed(struct inode *inode, u64 flush_tid)
2226 {
2227     struct ceph_inode_info *ci = ceph_inode(inode);
2228     int ret = 1;
2229 
2230     spin_lock(&ci->i_ceph_lock);
2231     if (!list_empty(&ci->i_cap_flush_list)) {
2232         struct ceph_cap_flush * cf =
2233             list_first_entry(&ci->i_cap_flush_list,
2234                      struct ceph_cap_flush, i_list);
2235         if (cf->tid <= flush_tid)
2236             ret = 0;
2237     }
2238     spin_unlock(&ci->i_ceph_lock);
2239     return ret;
2240 }
2241 
2242 /*
2243  * flush the mdlog and wait for any unsafe requests to complete.
2244  */
2245 static int flush_mdlog_and_wait_inode_unsafe_requests(struct inode *inode)
2246 {
2247     struct ceph_mds_client *mdsc = ceph_sb_to_client(inode->i_sb)->mdsc;
2248     struct ceph_inode_info *ci = ceph_inode(inode);
2249     struct ceph_mds_request *req1 = NULL, *req2 = NULL;
2250     unsigned int max_sessions;
2251     int ret, err = 0;
2252 
2253     spin_lock(&ci->i_unsafe_lock);
2254     if (S_ISDIR(inode->i_mode) && !list_empty(&ci->i_unsafe_dirops)) {
2255         req1 = list_last_entry(&ci->i_unsafe_dirops,
2256                     struct ceph_mds_request,
2257                     r_unsafe_dir_item);
2258         ceph_mdsc_get_request(req1);
2259     }
2260     if (!list_empty(&ci->i_unsafe_iops)) {
2261         req2 = list_last_entry(&ci->i_unsafe_iops,
2262                     struct ceph_mds_request,
2263                     r_unsafe_target_item);
2264         ceph_mdsc_get_request(req2);
2265     }
2266     spin_unlock(&ci->i_unsafe_lock);
2267 
2268     /*
2269      * The mdsc->max_sessions is unlikely to be changed
2270      * mostly, here we will retry it by reallocating the
2271      * sessions array memory to get rid of the mdsc->mutex
2272      * lock.
2273      */
2274 retry:
2275     max_sessions = mdsc->max_sessions;
2276 
2277     /*
2278      * Trigger to flush the journal logs in all the relevant MDSes
2279      * manually, or in the worst case we must wait at most 5 seconds
2280      * to wait the journal logs to be flushed by the MDSes periodically.
2281      */
2282     if ((req1 || req2) && likely(max_sessions)) {
2283         struct ceph_mds_session **sessions = NULL;
2284         struct ceph_mds_session *s;
2285         struct ceph_mds_request *req;
2286         int i;
2287 
2288         sessions = kzalloc(max_sessions * sizeof(s), GFP_KERNEL);
2289         if (!sessions) {
2290             err = -ENOMEM;
2291             goto out;
2292         }
2293 
2294         spin_lock(&ci->i_unsafe_lock);
2295         if (req1) {
2296             list_for_each_entry(req, &ci->i_unsafe_dirops,
2297                         r_unsafe_dir_item) {
2298                 s = req->r_session;
2299                 if (!s)
2300                     continue;
2301                 if (unlikely(s->s_mds >= max_sessions)) {
2302                     spin_unlock(&ci->i_unsafe_lock);
2303                     for (i = 0; i < max_sessions; i++) {
2304                         s = sessions[i];
2305                         if (s)
2306                             ceph_put_mds_session(s);
2307                     }
2308                     kfree(sessions);
2309                     goto retry;
2310                 }
2311                 if (!sessions[s->s_mds]) {
2312                     s = ceph_get_mds_session(s);
2313                     sessions[s->s_mds] = s;
2314                 }
2315             }
2316         }
2317         if (req2) {
2318             list_for_each_entry(req, &ci->i_unsafe_iops,
2319                         r_unsafe_target_item) {
2320                 s = req->r_session;
2321                 if (!s)
2322                     continue;
2323                 if (unlikely(s->s_mds >= max_sessions)) {
2324                     spin_unlock(&ci->i_unsafe_lock);
2325                     for (i = 0; i < max_sessions; i++) {
2326                         s = sessions[i];
2327                         if (s)
2328                             ceph_put_mds_session(s);
2329                     }
2330                     kfree(sessions);
2331                     goto retry;
2332                 }
2333                 if (!sessions[s->s_mds]) {
2334                     s = ceph_get_mds_session(s);
2335                     sessions[s->s_mds] = s;
2336                 }
2337             }
2338         }
2339         spin_unlock(&ci->i_unsafe_lock);
2340 
2341         /* the auth MDS */
2342         spin_lock(&ci->i_ceph_lock);
2343         if (ci->i_auth_cap) {
2344               s = ci->i_auth_cap->session;
2345               if (!sessions[s->s_mds])
2346                   sessions[s->s_mds] = ceph_get_mds_session(s);
2347         }
2348         spin_unlock(&ci->i_ceph_lock);
2349 
2350         /* send flush mdlog request to MDSes */
2351         for (i = 0; i < max_sessions; i++) {
2352             s = sessions[i];
2353             if (s) {
2354                 send_flush_mdlog(s);
2355                 ceph_put_mds_session(s);
2356             }
2357         }
2358         kfree(sessions);
2359     }
2360 
2361     dout("%s %p wait on tid %llu %llu\n", __func__,
2362          inode, req1 ? req1->r_tid : 0ULL, req2 ? req2->r_tid : 0ULL);
2363     if (req1) {
2364         ret = !wait_for_completion_timeout(&req1->r_safe_completion,
2365                     ceph_timeout_jiffies(req1->r_timeout));
2366         if (ret)
2367             err = -EIO;
2368     }
2369     if (req2) {
2370         ret = !wait_for_completion_timeout(&req2->r_safe_completion,
2371                     ceph_timeout_jiffies(req2->r_timeout));
2372         if (ret)
2373             err = -EIO;
2374     }
2375 
2376 out:
2377     if (req1)
2378         ceph_mdsc_put_request(req1);
2379     if (req2)
2380         ceph_mdsc_put_request(req2);
2381     return err;
2382 }
2383 
2384 int ceph_fsync(struct file *file, loff_t start, loff_t end, int datasync)
2385 {
2386     struct inode *inode = file->f_mapping->host;
2387     struct ceph_inode_info *ci = ceph_inode(inode);
2388     u64 flush_tid;
2389     int ret, err;
2390     int dirty;
2391 
2392     dout("fsync %p%s\n", inode, datasync ? " datasync" : "");
2393 
2394     ret = file_write_and_wait_range(file, start, end);
2395     if (datasync)
2396         goto out;
2397 
2398     ret = ceph_wait_on_async_create(inode);
2399     if (ret)
2400         goto out;
2401 
2402     dirty = try_flush_caps(inode, &flush_tid);
2403     dout("fsync dirty caps are %s\n", ceph_cap_string(dirty));
2404 
2405     err = flush_mdlog_and_wait_inode_unsafe_requests(inode);
2406 
2407     /*
2408      * only wait on non-file metadata writeback (the mds
2409      * can recover size and mtime, so we don't need to
2410      * wait for that)
2411      */
2412     if (!err && (dirty & ~CEPH_CAP_ANY_FILE_WR)) {
2413         err = wait_event_interruptible(ci->i_cap_wq,
2414                     caps_are_flushed(inode, flush_tid));
2415     }
2416 
2417     if (err < 0)
2418         ret = err;
2419 
2420     err = file_check_and_advance_wb_err(file);
2421     if (err < 0)
2422         ret = err;
2423 out:
2424     dout("fsync %p%s result=%d\n", inode, datasync ? " datasync" : "", ret);
2425     return ret;
2426 }
2427 
2428 /*
2429  * Flush any dirty caps back to the mds.  If we aren't asked to wait,
2430  * queue inode for flush but don't do so immediately, because we can
2431  * get by with fewer MDS messages if we wait for data writeback to
2432  * complete first.
2433  */
2434 int ceph_write_inode(struct inode *inode, struct writeback_control *wbc)
2435 {
2436     struct ceph_inode_info *ci = ceph_inode(inode);
2437     u64 flush_tid;
2438     int err = 0;
2439     int dirty;
2440     int wait = (wbc->sync_mode == WB_SYNC_ALL && !wbc->for_sync);
2441 
2442     dout("write_inode %p wait=%d\n", inode, wait);
2443     ceph_fscache_unpin_writeback(inode, wbc);
2444     if (wait) {
2445         err = ceph_wait_on_async_create(inode);
2446         if (err)
2447             return err;
2448         dirty = try_flush_caps(inode, &flush_tid);
2449         if (dirty)
2450             err = wait_event_interruptible(ci->i_cap_wq,
2451                        caps_are_flushed(inode, flush_tid));
2452     } else {
2453         struct ceph_mds_client *mdsc =
2454             ceph_sb_to_client(inode->i_sb)->mdsc;
2455 
2456         spin_lock(&ci->i_ceph_lock);
2457         if (__ceph_caps_dirty(ci))
2458             __cap_delay_requeue_front(mdsc, ci);
2459         spin_unlock(&ci->i_ceph_lock);
2460     }
2461     return err;
2462 }
2463 
2464 static void __kick_flushing_caps(struct ceph_mds_client *mdsc,
2465                  struct ceph_mds_session *session,
2466                  struct ceph_inode_info *ci,
2467                  u64 oldest_flush_tid)
2468     __releases(ci->i_ceph_lock)
2469     __acquires(ci->i_ceph_lock)
2470 {
2471     struct inode *inode = &ci->netfs.inode;
2472     struct ceph_cap *cap;
2473     struct ceph_cap_flush *cf;
2474     int ret;
2475     u64 first_tid = 0;
2476     u64 last_snap_flush = 0;
2477 
2478     /* Don't do anything until create reply comes in */
2479     if (ci->i_ceph_flags & CEPH_I_ASYNC_CREATE)
2480         return;
2481 
2482     ci->i_ceph_flags &= ~CEPH_I_KICK_FLUSH;
2483 
2484     list_for_each_entry_reverse(cf, &ci->i_cap_flush_list, i_list) {
2485         if (cf->is_capsnap) {
2486             last_snap_flush = cf->tid;
2487             break;
2488         }
2489     }
2490 
2491     list_for_each_entry(cf, &ci->i_cap_flush_list, i_list) {
2492         if (cf->tid < first_tid)
2493             continue;
2494 
2495         cap = ci->i_auth_cap;
2496         if (!(cap && cap->session == session)) {
2497             pr_err("%p auth cap %p not mds%d ???\n",
2498                    inode, cap, session->s_mds);
2499             break;
2500         }
2501 
2502         first_tid = cf->tid + 1;
2503 
2504         if (!cf->is_capsnap) {
2505             struct cap_msg_args arg;
2506 
2507             dout("kick_flushing_caps %p cap %p tid %llu %s\n",
2508                  inode, cap, cf->tid, ceph_cap_string(cf->caps));
2509             __prep_cap(&arg, cap, CEPH_CAP_OP_FLUSH,
2510                      (cf->tid < last_snap_flush ?
2511                       CEPH_CLIENT_CAPS_PENDING_CAPSNAP : 0),
2512                       __ceph_caps_used(ci),
2513                       __ceph_caps_wanted(ci),
2514                       (cap->issued | cap->implemented),
2515                       cf->caps, cf->tid, oldest_flush_tid);
2516             spin_unlock(&ci->i_ceph_lock);
2517             __send_cap(&arg, ci);
2518         } else {
2519             struct ceph_cap_snap *capsnap =
2520                     container_of(cf, struct ceph_cap_snap,
2521                             cap_flush);
2522             dout("kick_flushing_caps %p capsnap %p tid %llu %s\n",
2523                  inode, capsnap, cf->tid,
2524                  ceph_cap_string(capsnap->dirty));
2525 
2526             refcount_inc(&capsnap->nref);
2527             spin_unlock(&ci->i_ceph_lock);
2528 
2529             ret = __send_flush_snap(inode, session, capsnap, cap->mseq,
2530                         oldest_flush_tid);
2531             if (ret < 0) {
2532                 pr_err("kick_flushing_caps: error sending "
2533                     "cap flushsnap, ino (%llx.%llx) "
2534                     "tid %llu follows %llu\n",
2535                     ceph_vinop(inode), cf->tid,
2536                     capsnap->follows);
2537             }
2538 
2539             ceph_put_cap_snap(capsnap);
2540         }
2541 
2542         spin_lock(&ci->i_ceph_lock);
2543     }
2544 }
2545 
2546 void ceph_early_kick_flushing_caps(struct ceph_mds_client *mdsc,
2547                    struct ceph_mds_session *session)
2548 {
2549     struct ceph_inode_info *ci;
2550     struct ceph_cap *cap;
2551     u64 oldest_flush_tid;
2552 
2553     dout("early_kick_flushing_caps mds%d\n", session->s_mds);
2554 
2555     spin_lock(&mdsc->cap_dirty_lock);
2556     oldest_flush_tid = __get_oldest_flush_tid(mdsc);
2557     spin_unlock(&mdsc->cap_dirty_lock);
2558 
2559     list_for_each_entry(ci, &session->s_cap_flushing, i_flushing_item) {
2560         spin_lock(&ci->i_ceph_lock);
2561         cap = ci->i_auth_cap;
2562         if (!(cap && cap->session == session)) {
2563             pr_err("%p auth cap %p not mds%d ???\n",
2564                 &ci->netfs.inode, cap, session->s_mds);
2565             spin_unlock(&ci->i_ceph_lock);
2566             continue;
2567         }
2568 
2569 
2570         /*
2571          * if flushing caps were revoked, we re-send the cap flush
2572          * in client reconnect stage. This guarantees MDS * processes
2573          * the cap flush message before issuing the flushing caps to
2574          * other client.
2575          */
2576         if ((cap->issued & ci->i_flushing_caps) !=
2577             ci->i_flushing_caps) {
2578             /* encode_caps_cb() also will reset these sequence
2579              * numbers. make sure sequence numbers in cap flush
2580              * message match later reconnect message */
2581             cap->seq = 0;
2582             cap->issue_seq = 0;
2583             cap->mseq = 0;
2584             __kick_flushing_caps(mdsc, session, ci,
2585                          oldest_flush_tid);
2586         } else {
2587             ci->i_ceph_flags |= CEPH_I_KICK_FLUSH;
2588         }
2589 
2590         spin_unlock(&ci->i_ceph_lock);
2591     }
2592 }
2593 
2594 void ceph_kick_flushing_caps(struct ceph_mds_client *mdsc,
2595                  struct ceph_mds_session *session)
2596 {
2597     struct ceph_inode_info *ci;
2598     struct ceph_cap *cap;
2599     u64 oldest_flush_tid;
2600 
2601     lockdep_assert_held(&session->s_mutex);
2602 
2603     dout("kick_flushing_caps mds%d\n", session->s_mds);
2604 
2605     spin_lock(&mdsc->cap_dirty_lock);
2606     oldest_flush_tid = __get_oldest_flush_tid(mdsc);
2607     spin_unlock(&mdsc->cap_dirty_lock);
2608 
2609     list_for_each_entry(ci, &session->s_cap_flushing, i_flushing_item) {
2610         spin_lock(&ci->i_ceph_lock);
2611         cap = ci->i_auth_cap;
2612         if (!(cap && cap->session == session)) {
2613             pr_err("%p auth cap %p not mds%d ???\n",
2614                 &ci->netfs.inode, cap, session->s_mds);
2615             spin_unlock(&ci->i_ceph_lock);
2616             continue;
2617         }
2618         if (ci->i_ceph_flags & CEPH_I_KICK_FLUSH) {
2619             __kick_flushing_caps(mdsc, session, ci,
2620                          oldest_flush_tid);
2621         }
2622         spin_unlock(&ci->i_ceph_lock);
2623     }
2624 }
2625 
2626 void ceph_kick_flushing_inode_caps(struct ceph_mds_session *session,
2627                    struct ceph_inode_info *ci)
2628 {
2629     struct ceph_mds_client *mdsc = session->s_mdsc;
2630     struct ceph_cap *cap = ci->i_auth_cap;
2631 
2632     lockdep_assert_held(&ci->i_ceph_lock);
2633 
2634     dout("%s %p flushing %s\n", __func__, &ci->netfs.inode,
2635          ceph_cap_string(ci->i_flushing_caps));
2636 
2637     if (!list_empty(&ci->i_cap_flush_list)) {
2638         u64 oldest_flush_tid;
2639         spin_lock(&mdsc->cap_dirty_lock);
2640         list_move_tail(&ci->i_flushing_item,
2641                    &cap->session->s_cap_flushing);
2642         oldest_flush_tid = __get_oldest_flush_tid(mdsc);
2643         spin_unlock(&mdsc->cap_dirty_lock);
2644 
2645         __kick_flushing_caps(mdsc, session, ci, oldest_flush_tid);
2646     }
2647 }
2648 
2649 
2650 /*
2651  * Take references to capabilities we hold, so that we don't release
2652  * them to the MDS prematurely.
2653  */
2654 void ceph_take_cap_refs(struct ceph_inode_info *ci, int got,
2655                 bool snap_rwsem_locked)
2656 {
2657     lockdep_assert_held(&ci->i_ceph_lock);
2658 
2659     if (got & CEPH_CAP_PIN)
2660         ci->i_pin_ref++;
2661     if (got & CEPH_CAP_FILE_RD)
2662         ci->i_rd_ref++;
2663     if (got & CEPH_CAP_FILE_CACHE)
2664         ci->i_rdcache_ref++;
2665     if (got & CEPH_CAP_FILE_EXCL)
2666         ci->i_fx_ref++;
2667     if (got & CEPH_CAP_FILE_WR) {
2668         if (ci->i_wr_ref == 0 && !ci->i_head_snapc) {
2669             BUG_ON(!snap_rwsem_locked);
2670             ci->i_head_snapc = ceph_get_snap_context(
2671                     ci->i_snap_realm->cached_context);
2672         }
2673         ci->i_wr_ref++;
2674     }
2675     if (got & CEPH_CAP_FILE_BUFFER) {
2676         if (ci->i_wb_ref == 0)
2677             ihold(&ci->netfs.inode);
2678         ci->i_wb_ref++;
2679         dout("%s %p wb %d -> %d (?)\n", __func__,
2680              &ci->netfs.inode, ci->i_wb_ref-1, ci->i_wb_ref);
2681     }
2682 }
2683 
2684 /*
2685  * Try to grab cap references.  Specify those refs we @want, and the
2686  * minimal set we @need.  Also include the larger offset we are writing
2687  * to (when applicable), and check against max_size here as well.
2688  * Note that caller is responsible for ensuring max_size increases are
2689  * requested from the MDS.
2690  *
2691  * Returns 0 if caps were not able to be acquired (yet), 1 if succeed,
2692  * or a negative error code. There are 3 speical error codes:
2693  *  -EAGAIN:  need to sleep but non-blocking is specified
2694  *  -EFBIG:   ask caller to call check_max_size() and try again.
2695  *  -EUCLEAN: ask caller to call ceph_renew_caps() and try again.
2696  */
2697 enum {
2698     /* first 8 bits are reserved for CEPH_FILE_MODE_FOO */
2699     NON_BLOCKING    = (1 << 8),
2700     CHECK_FILELOCK  = (1 << 9),
2701 };
2702 
2703 static int try_get_cap_refs(struct inode *inode, int need, int want,
2704                 loff_t endoff, int flags, int *got)
2705 {
2706     struct ceph_inode_info *ci = ceph_inode(inode);
2707     struct ceph_mds_client *mdsc = ceph_inode_to_client(inode)->mdsc;
2708     int ret = 0;
2709     int have, implemented;
2710     bool snap_rwsem_locked = false;
2711 
2712     dout("get_cap_refs %p need %s want %s\n", inode,
2713          ceph_cap_string(need), ceph_cap_string(want));
2714 
2715 again:
2716     spin_lock(&ci->i_ceph_lock);
2717 
2718     if ((flags & CHECK_FILELOCK) &&
2719         (ci->i_ceph_flags & CEPH_I_ERROR_FILELOCK)) {
2720         dout("try_get_cap_refs %p error filelock\n", inode);
2721         ret = -EIO;
2722         goto out_unlock;
2723     }
2724 
2725     /* finish pending truncate */
2726     while (ci->i_truncate_pending) {
2727         spin_unlock(&ci->i_ceph_lock);
2728         if (snap_rwsem_locked) {
2729             up_read(&mdsc->snap_rwsem);
2730             snap_rwsem_locked = false;
2731         }
2732         __ceph_do_pending_vmtruncate(inode);
2733         spin_lock(&ci->i_ceph_lock);
2734     }
2735 
2736     have = __ceph_caps_issued(ci, &implemented);
2737 
2738     if (have & need & CEPH_CAP_FILE_WR) {
2739         if (endoff >= 0 && endoff > (loff_t)ci->i_max_size) {
2740             dout("get_cap_refs %p endoff %llu > maxsize %llu\n",
2741                  inode, endoff, ci->i_max_size);
2742             if (endoff > ci->i_requested_max_size)
2743                 ret = ci->i_auth_cap ? -EFBIG : -EUCLEAN;
2744             goto out_unlock;
2745         }
2746         /*
2747          * If a sync write is in progress, we must wait, so that we
2748          * can get a final snapshot value for size+mtime.
2749          */
2750         if (__ceph_have_pending_cap_snap(ci)) {
2751             dout("get_cap_refs %p cap_snap_pending\n", inode);
2752             goto out_unlock;
2753         }
2754     }
2755 
2756     if ((have & need) == need) {
2757         /*
2758          * Look at (implemented & ~have & not) so that we keep waiting
2759          * on transition from wanted -> needed caps.  This is needed
2760          * for WRBUFFER|WR -> WR to avoid a new WR sync write from
2761          * going before a prior buffered writeback happens.
2762          */
2763         int not = want & ~(have & need);
2764         int revoking = implemented & ~have;
2765         dout("get_cap_refs %p have %s but not %s (revoking %s)\n",
2766              inode, ceph_cap_string(have), ceph_cap_string(not),
2767              ceph_cap_string(revoking));
2768         if ((revoking & not) == 0) {
2769             if (!snap_rwsem_locked &&
2770                 !ci->i_head_snapc &&
2771                 (need & CEPH_CAP_FILE_WR)) {
2772                 if (!down_read_trylock(&mdsc->snap_rwsem)) {
2773                     /*
2774                      * we can not call down_read() when
2775                      * task isn't in TASK_RUNNING state
2776                      */
2777                     if (flags & NON_BLOCKING) {
2778                         ret = -EAGAIN;
2779                         goto out_unlock;
2780                     }
2781 
2782                     spin_unlock(&ci->i_ceph_lock);
2783                     down_read(&mdsc->snap_rwsem);
2784                     snap_rwsem_locked = true;
2785                     goto again;
2786                 }
2787                 snap_rwsem_locked = true;
2788             }
2789             if ((have & want) == want)
2790                 *got = need | want;
2791             else
2792                 *got = need;
2793             ceph_take_cap_refs(ci, *got, true);
2794             ret = 1;
2795         }
2796     } else {
2797         int session_readonly = false;
2798         int mds_wanted;
2799         if (ci->i_auth_cap &&
2800             (need & (CEPH_CAP_FILE_WR | CEPH_CAP_FILE_EXCL))) {
2801             struct ceph_mds_session *s = ci->i_auth_cap->session;
2802             spin_lock(&s->s_cap_lock);
2803             session_readonly = s->s_readonly;
2804             spin_unlock(&s->s_cap_lock);
2805         }
2806         if (session_readonly) {
2807             dout("get_cap_refs %p need %s but mds%d readonly\n",
2808                  inode, ceph_cap_string(need), ci->i_auth_cap->mds);
2809             ret = -EROFS;
2810             goto out_unlock;
2811         }
2812 
2813         if (ceph_inode_is_shutdown(inode)) {
2814             dout("get_cap_refs %p inode is shutdown\n", inode);
2815             ret = -ESTALE;
2816             goto out_unlock;
2817         }
2818         mds_wanted = __ceph_caps_mds_wanted(ci, false);
2819         if (need & ~mds_wanted) {
2820             dout("get_cap_refs %p need %s > mds_wanted %s\n",
2821                  inode, ceph_cap_string(need),
2822                  ceph_cap_string(mds_wanted));
2823             ret = -EUCLEAN;
2824             goto out_unlock;
2825         }
2826 
2827         dout("get_cap_refs %p have %s need %s\n", inode,
2828              ceph_cap_string(have), ceph_cap_string(need));
2829     }
2830 out_unlock:
2831 
2832     __ceph_touch_fmode(ci, mdsc, flags);
2833 
2834     spin_unlock(&ci->i_ceph_lock);
2835     if (snap_rwsem_locked)
2836         up_read(&mdsc->snap_rwsem);
2837 
2838     if (!ret)
2839         ceph_update_cap_mis(&mdsc->metric);
2840     else if (ret == 1)
2841         ceph_update_cap_hit(&mdsc->metric);
2842 
2843     dout("get_cap_refs %p ret %d got %s\n", inode,
2844          ret, ceph_cap_string(*got));
2845     return ret;
2846 }
2847 
2848 /*
2849  * Check the offset we are writing up to against our current
2850  * max_size.  If necessary, tell the MDS we want to write to
2851  * a larger offset.
2852  */
2853 static void check_max_size(struct inode *inode, loff_t endoff)
2854 {
2855     struct ceph_inode_info *ci = ceph_inode(inode);
2856     int check = 0;
2857 
2858     /* do we need to explicitly request a larger max_size? */
2859     spin_lock(&ci->i_ceph_lock);
2860     if (endoff >= ci->i_max_size && endoff > ci->i_wanted_max_size) {
2861         dout("write %p at large endoff %llu, req max_size\n",
2862              inode, endoff);
2863         ci->i_wanted_max_size = endoff;
2864     }
2865     /* duplicate ceph_check_caps()'s logic */
2866     if (ci->i_auth_cap &&
2867         (ci->i_auth_cap->issued & CEPH_CAP_FILE_WR) &&
2868         ci->i_wanted_max_size > ci->i_max_size &&
2869         ci->i_wanted_max_size > ci->i_requested_max_size)
2870         check = 1;
2871     spin_unlock(&ci->i_ceph_lock);
2872     if (check)
2873         ceph_check_caps(ci, CHECK_CAPS_AUTHONLY, NULL);
2874 }
2875 
2876 static inline int get_used_fmode(int caps)
2877 {
2878     int fmode = 0;
2879     if (caps & CEPH_CAP_FILE_RD)
2880         fmode |= CEPH_FILE_MODE_RD;
2881     if (caps & CEPH_CAP_FILE_WR)
2882         fmode |= CEPH_FILE_MODE_WR;
2883     return fmode;
2884 }
2885 
2886 int ceph_try_get_caps(struct inode *inode, int need, int want,
2887               bool nonblock, int *got)
2888 {
2889     int ret, flags;
2890 
2891     BUG_ON(need & ~CEPH_CAP_FILE_RD);
2892     BUG_ON(want & ~(CEPH_CAP_FILE_CACHE | CEPH_CAP_FILE_LAZYIO |
2893             CEPH_CAP_FILE_SHARED | CEPH_CAP_FILE_EXCL |
2894             CEPH_CAP_ANY_DIR_OPS));
2895     if (need) {
2896         ret = ceph_pool_perm_check(inode, need);
2897         if (ret < 0)
2898             return ret;
2899     }
2900 
2901     flags = get_used_fmode(need | want);
2902     if (nonblock)
2903         flags |= NON_BLOCKING;
2904 
2905     ret = try_get_cap_refs(inode, need, want, 0, flags, got);
2906     /* three special error codes */
2907     if (ret == -EAGAIN || ret == -EFBIG || ret == -EUCLEAN)
2908         ret = 0;
2909     return ret;
2910 }
2911 
2912 /*
2913  * Wait for caps, and take cap references.  If we can't get a WR cap
2914  * due to a small max_size, make sure we check_max_size (and possibly
2915  * ask the mds) so we don't get hung up indefinitely.
2916  */
2917 int ceph_get_caps(struct file *filp, int need, int want, loff_t endoff, int *got)
2918 {
2919     struct ceph_file_info *fi = filp->private_data;
2920     struct inode *inode = file_inode(filp);
2921     struct ceph_inode_info *ci = ceph_inode(inode);
2922     struct ceph_fs_client *fsc = ceph_inode_to_client(inode);
2923     int ret, _got, flags;
2924 
2925     ret = ceph_pool_perm_check(inode, need);
2926     if (ret < 0)
2927         return ret;
2928 
2929     if ((fi->fmode & CEPH_FILE_MODE_WR) &&
2930         fi->filp_gen != READ_ONCE(fsc->filp_gen))
2931         return -EBADF;
2932 
2933     flags = get_used_fmode(need | want);
2934 
2935     while (true) {
2936         flags &= CEPH_FILE_MODE_MASK;
2937         if (atomic_read(&fi->num_locks))
2938             flags |= CHECK_FILELOCK;
2939         _got = 0;
2940         ret = try_get_cap_refs(inode, need, want, endoff,
2941                        flags, &_got);
2942         WARN_ON_ONCE(ret == -EAGAIN);
2943         if (!ret) {
2944             struct ceph_mds_client *mdsc = fsc->mdsc;
2945             struct cap_wait cw;
2946             DEFINE_WAIT_FUNC(wait, woken_wake_function);
2947 
2948             cw.ino = ceph_ino(inode);
2949             cw.tgid = current->tgid;
2950             cw.need = need;
2951             cw.want = want;
2952 
2953             spin_lock(&mdsc->caps_list_lock);
2954             list_add(&cw.list, &mdsc->cap_wait_list);
2955             spin_unlock(&mdsc->caps_list_lock);
2956 
2957             /* make sure used fmode not timeout */
2958             ceph_get_fmode(ci, flags, FMODE_WAIT_BIAS);
2959             add_wait_queue(&ci->i_cap_wq, &wait);
2960 
2961             flags |= NON_BLOCKING;
2962             while (!(ret = try_get_cap_refs(inode, need, want,
2963                             endoff, flags, &_got))) {
2964                 if (signal_pending(current)) {
2965                     ret = -ERESTARTSYS;
2966                     break;
2967                 }
2968                 wait_woken(&wait, TASK_INTERRUPTIBLE, MAX_SCHEDULE_TIMEOUT);
2969             }
2970 
2971             remove_wait_queue(&ci->i_cap_wq, &wait);
2972             ceph_put_fmode(ci, flags, FMODE_WAIT_BIAS);
2973 
2974             spin_lock(&mdsc->caps_list_lock);
2975             list_del(&cw.list);
2976             spin_unlock(&mdsc->caps_list_lock);
2977 
2978             if (ret == -EAGAIN)
2979                 continue;
2980         }
2981 
2982         if ((fi->fmode & CEPH_FILE_MODE_WR) &&
2983             fi->filp_gen != READ_ONCE(fsc->filp_gen)) {
2984             if (ret >= 0 && _got)
2985                 ceph_put_cap_refs(ci, _got);
2986             return -EBADF;
2987         }
2988 
2989         if (ret < 0) {
2990             if (ret == -EFBIG || ret == -EUCLEAN) {
2991                 int ret2 = ceph_wait_on_async_create(inode);
2992                 if (ret2 < 0)
2993                     return ret2;
2994             }
2995             if (ret == -EFBIG) {
2996                 check_max_size(inode, endoff);
2997                 continue;
2998             }
2999             if (ret == -EUCLEAN) {
3000                 /* session was killed, try renew caps */
3001                 ret = ceph_renew_caps(inode, flags);
3002                 if (ret == 0)
3003                     continue;
3004             }
3005             return ret;
3006         }
3007 
3008         if (S_ISREG(ci->netfs.inode.i_mode) &&
3009             ceph_has_inline_data(ci) &&
3010             (_got & (CEPH_CAP_FILE_CACHE|CEPH_CAP_FILE_LAZYIO)) &&
3011             i_size_read(inode) > 0) {
3012             struct page *page =
3013                 find_get_page(inode->i_mapping, 0);
3014             if (page) {
3015                 bool uptodate = PageUptodate(page);
3016 
3017                 put_page(page);
3018                 if (uptodate)
3019                     break;
3020             }
3021             /*
3022              * drop cap refs first because getattr while
3023              * holding * caps refs can cause deadlock.
3024              */
3025             ceph_put_cap_refs(ci, _got);
3026             _got = 0;
3027 
3028             /*
3029              * getattr request will bring inline data into
3030              * page cache
3031              */
3032             ret = __ceph_do_getattr(inode, NULL,
3033                         CEPH_STAT_CAP_INLINE_DATA,
3034                         true);
3035             if (ret < 0)
3036                 return ret;
3037             continue;
3038         }
3039         break;
3040     }
3041     *got = _got;
3042     return 0;
3043 }
3044 
3045 /*
3046  * Take cap refs.  Caller must already know we hold at least one ref
3047  * on the caps in question or we don't know this is safe.
3048  */
3049 void ceph_get_cap_refs(struct ceph_inode_info *ci, int caps)
3050 {
3051     spin_lock(&ci->i_ceph_lock);
3052     ceph_take_cap_refs(ci, caps, false);
3053     spin_unlock(&ci->i_ceph_lock);
3054 }
3055 
3056 
3057 /*
3058  * drop cap_snap that is not associated with any snapshot.
3059  * we don't need to send FLUSHSNAP message for it.
3060  */
3061 static int ceph_try_drop_cap_snap(struct ceph_inode_info *ci,
3062                   struct ceph_cap_snap *capsnap)
3063 {
3064     if (!capsnap->need_flush &&
3065         !capsnap->writing && !capsnap->dirty_pages) {
3066         dout("dropping cap_snap %p follows %llu\n",
3067              capsnap, capsnap->follows);
3068         BUG_ON(capsnap->cap_flush.tid > 0);
3069         ceph_put_snap_context(capsnap->context);
3070         if (!list_is_last(&capsnap->ci_item, &ci->i_cap_snaps))
3071             ci->i_ceph_flags |= CEPH_I_FLUSH_SNAPS;
3072 
3073         list_del(&capsnap->ci_item);
3074         ceph_put_cap_snap(capsnap);
3075         return 1;
3076     }
3077     return 0;
3078 }
3079 
3080 enum put_cap_refs_mode {
3081     PUT_CAP_REFS_SYNC = 0,
3082     PUT_CAP_REFS_NO_CHECK,
3083     PUT_CAP_REFS_ASYNC,
3084 };
3085 
3086 /*
3087  * Release cap refs.
3088  *
3089  * If we released the last ref on any given cap, call ceph_check_caps
3090  * to release (or schedule a release).
3091  *
3092  * If we are releasing a WR cap (from a sync write), finalize any affected
3093  * cap_snap, and wake up any waiters.
3094  */
3095 static void __ceph_put_cap_refs(struct ceph_inode_info *ci, int had,
3096                 enum put_cap_refs_mode mode)
3097 {
3098     struct inode *inode = &ci->netfs.inode;
3099     int last = 0, put = 0, flushsnaps = 0, wake = 0;
3100     bool check_flushsnaps = false;
3101 
3102     spin_lock(&ci->i_ceph_lock);
3103     if (had & CEPH_CAP_PIN)
3104         --ci->i_pin_ref;
3105     if (had & CEPH_CAP_FILE_RD)
3106         if (--ci->i_rd_ref == 0)
3107             last++;
3108     if (had & CEPH_CAP_FILE_CACHE)
3109         if (--ci->i_rdcache_ref == 0)
3110             last++;
3111     if (had & CEPH_CAP_FILE_EXCL)
3112         if (--ci->i_fx_ref == 0)
3113             last++;
3114     if (had & CEPH_CAP_FILE_BUFFER) {
3115         if (--ci->i_wb_ref == 0) {
3116             last++;
3117             /* put the ref held by ceph_take_cap_refs() */
3118             put++;
3119             check_flushsnaps = true;
3120         }
3121         dout("put_cap_refs %p wb %d -> %d (?)\n",
3122              inode, ci->i_wb_ref+1, ci->i_wb_ref);
3123     }
3124     if (had & CEPH_CAP_FILE_WR) {
3125         if (--ci->i_wr_ref == 0) {
3126             last++;
3127             check_flushsnaps = true;
3128             if (ci->i_wrbuffer_ref_head == 0 &&
3129                 ci->i_dirty_caps == 0 &&
3130                 ci->i_flushing_caps == 0) {
3131                 BUG_ON(!ci->i_head_snapc);
3132                 ceph_put_snap_context(ci->i_head_snapc);
3133                 ci->i_head_snapc = NULL;
3134             }
3135             /* see comment in __ceph_remove_cap() */
3136             if (!__ceph_is_any_real_caps(ci) && ci->i_snap_realm)
3137                 ceph_change_snap_realm(inode, NULL);
3138         }
3139     }
3140     if (check_flushsnaps && __ceph_have_pending_cap_snap(ci)) {
3141         struct ceph_cap_snap *capsnap =
3142             list_last_entry(&ci->i_cap_snaps,
3143                     struct ceph_cap_snap,
3144                     ci_item);
3145 
3146         capsnap->writing = 0;
3147         if (ceph_try_drop_cap_snap(ci, capsnap))
3148             /* put the ref held by ceph_queue_cap_snap() */
3149             put++;
3150         else if (__ceph_finish_cap_snap(ci, capsnap))
3151             flushsnaps = 1;
3152         wake = 1;
3153     }
3154     spin_unlock(&ci->i_ceph_lock);
3155 
3156     dout("put_cap_refs %p had %s%s%s\n", inode, ceph_cap_string(had),
3157          last ? " last" : "", put ? " put" : "");
3158 
3159     switch (mode) {
3160     case PUT_CAP_REFS_SYNC:
3161         if (last)
3162             ceph_check_caps(ci, 0, NULL);
3163         else if (flushsnaps)
3164             ceph_flush_snaps(ci, NULL);
3165         break;
3166     case PUT_CAP_REFS_ASYNC:
3167         if (last)
3168             ceph_queue_check_caps(inode);
3169         else if (flushsnaps)
3170             ceph_queue_flush_snaps(inode);
3171         break;
3172     default:
3173         break;
3174     }
3175     if (wake)
3176         wake_up_all(&ci->i_cap_wq);
3177     while (put-- > 0)
3178         iput(inode);
3179 }
3180 
3181 void ceph_put_cap_refs(struct ceph_inode_info *ci, int had)
3182 {
3183     __ceph_put_cap_refs(ci, had, PUT_CAP_REFS_SYNC);
3184 }
3185 
3186 void ceph_put_cap_refs_async(struct ceph_inode_info *ci, int had)
3187 {
3188     __ceph_put_cap_refs(ci, had, PUT_CAP_REFS_ASYNC);
3189 }
3190 
3191 void ceph_put_cap_refs_no_check_caps(struct ceph_inode_info *ci, int had)
3192 {
3193     __ceph_put_cap_refs(ci, had, PUT_CAP_REFS_NO_CHECK);
3194 }
3195 
3196 /*
3197  * Release @nr WRBUFFER refs on dirty pages for the given @snapc snap
3198  * context.  Adjust per-snap dirty page accounting as appropriate.
3199  * Once all dirty data for a cap_snap is flushed, flush snapped file
3200  * metadata back to the MDS.  If we dropped the last ref, call
3201  * ceph_check_caps.
3202  */
3203 void ceph_put_wrbuffer_cap_refs(struct ceph_inode_info *ci, int nr,
3204                 struct ceph_snap_context *snapc)
3205 {
3206     struct inode *inode = &ci->netfs.inode;
3207     struct ceph_cap_snap *capsnap = NULL, *iter;
3208     int put = 0;
3209     bool last = false;
3210     bool flush_snaps = false;
3211     bool complete_capsnap = false;
3212 
3213     spin_lock(&ci->i_ceph_lock);
3214     ci->i_wrbuffer_ref -= nr;
3215     if (ci->i_wrbuffer_ref == 0) {
3216         last = true;
3217         put++;
3218     }
3219 
3220     if (ci->i_head_snapc == snapc) {
3221         ci->i_wrbuffer_ref_head -= nr;
3222         if (ci->i_wrbuffer_ref_head == 0 &&
3223             ci->i_wr_ref == 0 &&
3224             ci->i_dirty_caps == 0 &&
3225             ci->i_flushing_caps == 0) {
3226             BUG_ON(!ci->i_head_snapc);
3227             ceph_put_snap_context(ci->i_head_snapc);
3228             ci->i_head_snapc = NULL;
3229         }
3230         dout("put_wrbuffer_cap_refs on %p head %d/%d -> %d/%d %s\n",
3231              inode,
3232              ci->i_wrbuffer_ref+nr, ci->i_wrbuffer_ref_head+nr,
3233              ci->i_wrbuffer_ref, ci->i_wrbuffer_ref_head,
3234              last ? " LAST" : "");
3235     } else {
3236         list_for_each_entry(iter, &ci->i_cap_snaps, ci_item) {
3237             if (iter->context == snapc) {
3238                 capsnap = iter;
3239                 break;
3240             }
3241         }
3242 
3243         if (!capsnap) {
3244             /*
3245              * The capsnap should already be removed when removing
3246              * auth cap in the case of a forced unmount.
3247              */
3248             WARN_ON_ONCE(ci->i_auth_cap);
3249             goto unlock;
3250         }
3251 
3252         capsnap->dirty_pages -= nr;
3253         if (capsnap->dirty_pages == 0) {
3254             complete_capsnap = true;
3255             if (!capsnap->writing) {
3256                 if (ceph_try_drop_cap_snap(ci, capsnap)) {
3257                     put++;
3258                 } else {
3259                     ci->i_ceph_flags |= CEPH_I_FLUSH_SNAPS;
3260                     flush_snaps = true;
3261                 }
3262             }
3263         }
3264         dout("put_wrbuffer_cap_refs on %p cap_snap %p "
3265              " snap %lld %d/%d -> %d/%d %s%s\n",
3266              inode, capsnap, capsnap->context->seq,
3267              ci->i_wrbuffer_ref+nr, capsnap->dirty_pages + nr,
3268              ci->i_wrbuffer_ref, capsnap->dirty_pages,
3269              last ? " (wrbuffer last)" : "",
3270              complete_capsnap ? " (complete capsnap)" : "");
3271     }
3272 
3273 unlock:
3274     spin_unlock(&ci->i_ceph_lock);
3275 
3276     if (last) {
3277         ceph_check_caps(ci, 0, NULL);
3278     } else if (flush_snaps) {
3279         ceph_flush_snaps(ci, NULL);
3280     }
3281     if (complete_capsnap)
3282         wake_up_all(&ci->i_cap_wq);
3283     while (put-- > 0) {
3284         iput(inode);
3285     }
3286 }
3287 
3288 /*
3289  * Invalidate unlinked inode's aliases, so we can drop the inode ASAP.
3290  */
3291 static void invalidate_aliases(struct inode *inode)
3292 {
3293     struct dentry *dn, *prev = NULL;
3294 
3295     dout("invalidate_aliases inode %p\n", inode);
3296     d_prune_aliases(inode);
3297     /*
3298      * For non-directory inode, d_find_alias() only returns
3299      * hashed dentry. After calling d_invalidate(), the
3300      * dentry becomes unhashed.
3301      *
3302      * For directory inode, d_find_alias() can return
3303      * unhashed dentry. But directory inode should have
3304      * one alias at most.
3305      */
3306     while ((dn = d_find_alias(inode))) {
3307         if (dn == prev) {
3308             dput(dn);
3309             break;
3310         }
3311         d_invalidate(dn);
3312         if (prev)
3313             dput(prev);
3314         prev = dn;
3315     }
3316     if (prev)
3317         dput(prev);
3318 }
3319 
3320 struct cap_extra_info {
3321     struct ceph_string *pool_ns;
3322     /* inline data */
3323     u64 inline_version;
3324     void *inline_data;
3325     u32 inline_len;
3326     /* dirstat */
3327     bool dirstat_valid;
3328     u64 nfiles;
3329     u64 nsubdirs;
3330     u64 change_attr;
3331     /* currently issued */
3332     int issued;
3333     struct timespec64 btime;
3334 };
3335 
3336 /*
3337  * Handle a cap GRANT message from the MDS.  (Note that a GRANT may
3338  * actually be a revocation if it specifies a smaller cap set.)
3339  *
3340  * caller holds s_mutex and i_ceph_lock, we drop both.
3341  */
3342 static void handle_cap_grant(struct inode *inode,
3343                  struct ceph_mds_session *session,
3344                  struct ceph_cap *cap,
3345                  struct ceph_mds_caps *grant,
3346                  struct ceph_buffer *xattr_buf,
3347                  struct cap_extra_info *extra_info)
3348     __releases(ci->i_ceph_lock)
3349     __releases(session->s_mdsc->snap_rwsem)
3350 {
3351     struct ceph_inode_info *ci = ceph_inode(inode);
3352     int seq = le32_to_cpu(grant->seq);
3353     int newcaps = le32_to_cpu(grant->caps);
3354     int used, wanted, dirty;
3355     u64 size = le64_to_cpu(grant->size);
3356     u64 max_size = le64_to_cpu(grant->max_size);
3357     unsigned char check_caps = 0;
3358     bool was_stale = cap->cap_gen < atomic_read(&session->s_cap_gen);
3359     bool wake = false;
3360     bool writeback = false;
3361     bool queue_trunc = false;
3362     bool queue_invalidate = false;
3363     bool deleted_inode = false;
3364     bool fill_inline = false;
3365 
3366     dout("handle_cap_grant inode %p cap %p mds%d seq %d %s\n",
3367          inode, cap, session->s_mds, seq, ceph_cap_string(newcaps));
3368     dout(" size %llu max_size %llu, i_size %llu\n", size, max_size,
3369         i_size_read(inode));
3370 
3371 
3372     /*
3373      * If CACHE is being revoked, and we have no dirty buffers,
3374      * try to invalidate (once).  (If there are dirty buffers, we
3375      * will invalidate _after_ writeback.)
3376      */
3377     if (S_ISREG(inode->i_mode) && /* don't invalidate readdir cache */
3378         ((cap->issued & ~newcaps) & CEPH_CAP_FILE_CACHE) &&
3379         (newcaps & CEPH_CAP_FILE_LAZYIO) == 0 &&
3380         !(ci->i_wrbuffer_ref || ci->i_wb_ref)) {
3381         if (try_nonblocking_invalidate(inode)) {
3382             /* there were locked pages.. invalidate later
3383                in a separate thread. */
3384             if (ci->i_rdcache_revoking != ci->i_rdcache_gen) {
3385                 queue_invalidate = true;
3386                 ci->i_rdcache_revoking = ci->i_rdcache_gen;
3387             }
3388         }
3389     }
3390 
3391     if (was_stale)
3392         cap->issued = cap->implemented = CEPH_CAP_PIN;
3393 
3394     /*
3395      * auth mds of the inode changed. we received the cap export message,
3396      * but still haven't received the cap import message. handle_cap_export
3397      * updated the new auth MDS' cap.
3398      *
3399      * "ceph_seq_cmp(seq, cap->seq) <= 0" means we are processing a message
3400      * that was sent before the cap import message. So don't remove caps.
3401      */
3402     if (ceph_seq_cmp(seq, cap->seq) <= 0) {
3403         WARN_ON(cap != ci->i_auth_cap);
3404         WARN_ON(cap->cap_id != le64_to_cpu(grant->cap_id));
3405         seq = cap->seq;
3406         newcaps |= cap->issued;
3407     }
3408 
3409     /* side effects now are allowed */
3410     cap->cap_gen = atomic_read(&session->s_cap_gen);
3411     cap->seq = seq;
3412 
3413     __check_cap_issue(ci, cap, newcaps);
3414 
3415     inode_set_max_iversion_raw(inode, extra_info->change_attr);
3416 
3417     if ((newcaps & CEPH_CAP_AUTH_SHARED) &&
3418         (extra_info->issued & CEPH_CAP_AUTH_EXCL) == 0) {
3419         umode_t mode = le32_to_cpu(grant->mode);
3420 
3421         if (inode_wrong_type(inode, mode))
3422             pr_warn_once("inode type changed! (ino %llx.%llx is 0%o, mds says 0%o)\n",
3423                      ceph_vinop(inode), inode->i_mode, mode);
3424         else
3425             inode->i_mode = mode;
3426         inode->i_uid = make_kuid(&init_user_ns, le32_to_cpu(grant->uid));
3427         inode->i_gid = make_kgid(&init_user_ns, le32_to_cpu(grant->gid));
3428         ci->i_btime = extra_info->btime;
3429         dout("%p mode 0%o uid.gid %d.%d\n", inode, inode->i_mode,
3430              from_kuid(&init_user_ns, inode->i_uid),
3431              from_kgid(&init_user_ns, inode->i_gid));
3432     }
3433 
3434     if ((newcaps & CEPH_CAP_LINK_SHARED) &&
3435         (extra_info->issued & CEPH_CAP_LINK_EXCL) == 0) {
3436         set_nlink(inode, le32_to_cpu(grant->nlink));
3437         if (inode->i_nlink == 0)
3438             deleted_inode = true;
3439     }
3440 
3441     if ((extra_info->issued & CEPH_CAP_XATTR_EXCL) == 0 &&
3442         grant->xattr_len) {
3443         int len = le32_to_cpu(grant->xattr_len);
3444         u64 version = le64_to_cpu(grant->xattr_version);
3445 
3446         if (version > ci->i_xattrs.version) {
3447             dout(" got new xattrs v%llu on %p len %d\n",
3448                  version, inode, len);
3449             if (ci->i_xattrs.blob)
3450                 ceph_buffer_put(ci->i_xattrs.blob);
3451             ci->i_xattrs.blob = ceph_buffer_get(xattr_buf);
3452             ci->i_xattrs.version = version;
3453             ceph_forget_all_cached_acls(inode);
3454             ceph_security_invalidate_secctx(inode);
3455         }
3456     }
3457 
3458     if (newcaps & CEPH_CAP_ANY_RD) {
3459         struct timespec64 mtime, atime, ctime;
3460         /* ctime/mtime/atime? */
3461         ceph_decode_timespec64(&mtime, &grant->mtime);
3462         ceph_decode_timespec64(&atime, &grant->atime);
3463         ceph_decode_timespec64(&ctime, &grant->ctime);
3464         ceph_fill_file_time(inode, extra_info->issued,
3465                     le32_to_cpu(grant->time_warp_seq),
3466                     &ctime, &mtime, &atime);
3467     }
3468 
3469     if ((newcaps & CEPH_CAP_FILE_SHARED) && extra_info->dirstat_valid) {
3470         ci->i_files = extra_info->nfiles;
3471         ci->i_subdirs = extra_info->nsubdirs;
3472     }
3473 
3474     if (newcaps & (CEPH_CAP_ANY_FILE_RD | CEPH_CAP_ANY_FILE_WR)) {
3475         /* file layout may have changed */
3476         s64 old_pool = ci->i_layout.pool_id;
3477         struct ceph_string *old_ns;
3478 
3479         ceph_file_layout_from_legacy(&ci->i_layout, &grant->layout);
3480         old_ns = rcu_dereference_protected(ci->i_layout.pool_ns,
3481                     lockdep_is_held(&ci->i_ceph_lock));
3482         rcu_assign_pointer(ci->i_layout.pool_ns, extra_info->pool_ns);
3483 
3484         if (ci->i_layout.pool_id != old_pool ||
3485             extra_info->pool_ns != old_ns)
3486             ci->i_ceph_flags &= ~CEPH_I_POOL_PERM;
3487 
3488         extra_info->pool_ns = old_ns;
3489 
3490         /* size/truncate_seq? */
3491         queue_trunc = ceph_fill_file_size(inode, extra_info->issued,
3492                     le32_to_cpu(grant->truncate_seq),
3493                     le64_to_cpu(grant->truncate_size),
3494                     size);
3495     }
3496 
3497     if (ci->i_auth_cap == cap && (newcaps & CEPH_CAP_ANY_FILE_WR)) {
3498         if (max_size != ci->i_max_size) {
3499             dout("max_size %lld -> %llu\n",
3500                  ci->i_max_size, max_size);
3501             ci->i_max_size = max_size;
3502             if (max_size >= ci->i_wanted_max_size) {
3503                 ci->i_wanted_max_size = 0;  /* reset */
3504                 ci->i_requested_max_size = 0;
3505             }
3506             wake = true;
3507         }
3508     }
3509 
3510     /* check cap bits */
3511     wanted = __ceph_caps_wanted(ci);
3512     used = __ceph_caps_used(ci);
3513     dirty = __ceph_caps_dirty(ci);
3514     dout(" my wanted = %s, used = %s, dirty %s\n",
3515          ceph_cap_string(wanted),
3516          ceph_cap_string(used),
3517          ceph_cap_string(dirty));
3518 
3519     if ((was_stale || le32_to_cpu(grant->op) == CEPH_CAP_OP_IMPORT) &&
3520         (wanted & ~(cap->mds_wanted | newcaps))) {
3521         /*
3522          * If mds is importing cap, prior cap messages that update
3523          * 'wanted' may get dropped by mds (migrate seq mismatch).
3524          *
3525          * We don't send cap message to update 'wanted' if what we
3526          * want are already issued. If mds revokes caps, cap message
3527          * that releases caps also tells mds what we want. But if
3528          * caps got revoked by mds forcedly (session stale). We may
3529          * haven't told mds what we want.
3530          */
3531         check_caps = 1;
3532     }
3533 
3534     /* revocation, grant, or no-op? */
3535     if (cap->issued & ~newcaps) {
3536         int revoking = cap->issued & ~newcaps;
3537 
3538         dout("revocation: %s -> %s (revoking %s)\n",
3539              ceph_cap_string(cap->issued),
3540              ceph_cap_string(newcaps),
3541              ceph_cap_string(revoking));
3542         if (S_ISREG(inode->i_mode) &&
3543             (revoking & used & CEPH_CAP_FILE_BUFFER))
3544             writeback = true;  /* initiate writeback; will delay ack */
3545         else if (queue_invalidate &&
3546              revoking == CEPH_CAP_FILE_CACHE &&
3547              (newcaps & CEPH_CAP_FILE_LAZYIO) == 0)
3548             ; /* do nothing yet, invalidation will be queued */
3549         else if (cap == ci->i_auth_cap)
3550             check_caps = 1; /* check auth cap only */
3551         else
3552             check_caps = 2; /* check all caps */
3553         cap->issued = newcaps;
3554         cap->implemented |= newcaps;
3555     } else if (cap->issued == newcaps) {
3556         dout("caps unchanged: %s -> %s\n",
3557              ceph_cap_string(cap->issued), ceph_cap_string(newcaps));
3558     } else {
3559         dout("grant: %s -> %s\n", ceph_cap_string(cap->issued),
3560              ceph_cap_string(newcaps));
3561         /* non-auth MDS is revoking the newly grant caps ? */
3562         if (cap == ci->i_auth_cap &&
3563             __ceph_caps_revoking_other(ci, cap, newcaps))
3564             check_caps = 2;
3565 
3566         cap->issued = newcaps;
3567         cap->implemented |= newcaps; /* add bits only, to
3568                           * avoid stepping on a
3569                           * pending revocation */
3570         wake = true;
3571     }
3572     BUG_ON(cap->issued & ~cap->implemented);
3573 
3574     if (extra_info->inline_version > 0 &&
3575         extra_info->inline_version >= ci->i_inline_version) {
3576         ci->i_inline_version = extra_info->inline_version;
3577         if (ci->i_inline_version != CEPH_INLINE_NONE &&
3578             (newcaps & (CEPH_CAP_FILE_CACHE|CEPH_CAP_FILE_LAZYIO)))
3579             fill_inline = true;
3580     }
3581 
3582     if (le32_to_cpu(grant->op) == CEPH_CAP_OP_IMPORT) {
3583         if (ci->i_auth_cap == cap) {
3584             if (newcaps & ~extra_info->issued)
3585                 wake = true;
3586 
3587             if (ci->i_requested_max_size > max_size ||
3588                 !(le32_to_cpu(grant->wanted) & CEPH_CAP_ANY_FILE_WR)) {
3589                 /* re-request max_size if necessary */
3590                 ci->i_requested_max_size = 0;
3591                 wake = true;
3592             }
3593 
3594             ceph_kick_flushing_inode_caps(session, ci);
3595         }
3596         up_read(&session->s_mdsc->snap_rwsem);
3597     }
3598     spin_unlock(&ci->i_ceph_lock);
3599 
3600     if (fill_inline)
3601         ceph_fill_inline_data(inode, NULL, extra_info->inline_data,
3602                       extra_info->inline_len);
3603 
3604     if (queue_trunc)
3605         ceph_queue_vmtruncate(inode);
3606 
3607     if (writeback)
3608         /*
3609          * queue inode for writeback: we can't actually call
3610          * filemap_write_and_wait, etc. from message handler
3611          * context.
3612          */
3613         ceph_queue_writeback(inode);
3614     if (queue_invalidate)
3615         ceph_queue_invalidate(inode);
3616     if (deleted_inode)
3617         invalidate_aliases(inode);
3618     if (wake)
3619         wake_up_all(&ci->i_cap_wq);
3620 
3621     mutex_unlock(&session->s_mutex);
3622     if (check_caps == 1)
3623         ceph_check_caps(ci, CHECK_CAPS_AUTHONLY | CHECK_CAPS_NOINVAL,
3624                 session);
3625     else if (check_caps == 2)
3626         ceph_check_caps(ci, CHECK_CAPS_NOINVAL, session);
3627 }
3628 
3629 /*
3630  * Handle FLUSH_ACK from MDS, indicating that metadata we sent to the
3631  * MDS has been safely committed.
3632  */
3633 static void handle_cap_flush_ack(struct inode *inode, u64 flush_tid,
3634                  struct ceph_mds_caps *m,
3635                  struct ceph_mds_session *session,
3636                  struct ceph_cap *cap)
3637     __releases(ci->i_ceph_lock)
3638 {
3639     struct ceph_inode_info *ci = ceph_inode(inode);
3640     struct ceph_mds_client *mdsc = ceph_sb_to_client(inode->i_sb)->mdsc;
3641     struct ceph_cap_flush *cf, *tmp_cf;
3642     LIST_HEAD(to_remove);
3643     unsigned seq = le32_to_cpu(m->seq);
3644     int dirty = le32_to_cpu(m->dirty);
3645     int cleaned = 0;
3646     bool drop = false;
3647     bool wake_ci = false;
3648     bool wake_mdsc = false;
3649 
3650     list_for_each_entry_safe(cf, tmp_cf, &ci->i_cap_flush_list, i_list) {
3651         /* Is this the one that was flushed? */
3652         if (cf->tid == flush_tid)
3653             cleaned = cf->caps;
3654 
3655         /* Is this a capsnap? */
3656         if (cf->is_capsnap)
3657             continue;
3658 
3659         if (cf->tid <= flush_tid) {
3660             /*
3661              * An earlier or current tid. The FLUSH_ACK should
3662              * represent a superset of this flush's caps.
3663              */
3664             wake_ci |= __detach_cap_flush_from_ci(ci, cf);
3665             list_add_tail(&cf->i_list, &to_remove);
3666         } else {
3667             /*
3668              * This is a later one. Any caps in it are still dirty
3669              * so don't count them as cleaned.
3670              */
3671             cleaned &= ~cf->caps;
3672             if (!cleaned)
3673                 break;
3674         }
3675     }
3676 
3677     dout("handle_cap_flush_ack inode %p mds%d seq %d on %s cleaned %s,"
3678          " flushing %s -> %s\n",
3679          inode, session->s_mds, seq, ceph_cap_string(dirty),
3680          ceph_cap_string(cleaned), ceph_cap_string(ci->i_flushing_caps),
3681          ceph_cap_string(ci->i_flushing_caps & ~cleaned));
3682 
3683     if (list_empty(&to_remove) && !cleaned)
3684         goto out;
3685 
3686     ci->i_flushing_caps &= ~cleaned;
3687 
3688     spin_lock(&mdsc->cap_dirty_lock);
3689 
3690     list_for_each_entry(cf, &to_remove, i_list)
3691         wake_mdsc |= __detach_cap_flush_from_mdsc(mdsc, cf);
3692 
3693     if (ci->i_flushing_caps == 0) {
3694         if (list_empty(&ci->i_cap_flush_list)) {
3695             list_del_init(&ci->i_flushing_item);
3696             if (!list_empty(&session->s_cap_flushing)) {
3697                 dout(" mds%d still flushing cap on %p\n",
3698                      session->s_mds,
3699                      &list_first_entry(&session->s_cap_flushing,
3700                         struct ceph_inode_info,
3701                         i_flushing_item)->netfs.inode);
3702             }
3703         }
3704         mdsc->num_cap_flushing--;
3705         dout(" inode %p now !flushing\n", inode);
3706 
3707         if (ci->i_dirty_caps == 0) {
3708             dout(" inode %p now clean\n", inode);
3709             BUG_ON(!list_empty(&ci->i_dirty_item));
3710             drop = true;
3711             if (ci->i_wr_ref == 0 &&
3712                 ci->i_wrbuffer_ref_head == 0) {
3713                 BUG_ON(!ci->i_head_snapc);
3714                 ceph_put_snap_context(ci->i_head_snapc);
3715                 ci->i_head_snapc = NULL;
3716             }
3717         } else {
3718             BUG_ON(list_empty(&ci->i_dirty_item));
3719         }
3720     }
3721     spin_unlock(&mdsc->cap_dirty_lock);
3722 
3723 out:
3724     spin_unlock(&ci->i_ceph_lock);
3725 
3726     while (!list_empty(&to_remove)) {
3727         cf = list_first_entry(&to_remove,
3728                       struct ceph_cap_flush, i_list);
3729         list_del_init(&cf->i_list);
3730         if (!cf->is_capsnap)
3731             ceph_free_cap_flush(cf);
3732     }
3733 
3734     if (wake_ci)
3735         wake_up_all(&ci->i_cap_wq);
3736     if (wake_mdsc)
3737         wake_up_all(&mdsc->cap_flushing_wq);
3738     if (drop)
3739         iput(inode);
3740 }
3741 
3742 void __ceph_remove_capsnap(struct inode *inode, struct ceph_cap_snap *capsnap,
3743                bool *wake_ci, bool *wake_mdsc)
3744 {
3745     struct ceph_inode_info *ci = ceph_inode(inode);
3746     struct ceph_mds_client *mdsc = ceph_sb_to_client(inode->i_sb)->mdsc;
3747     bool ret;
3748 
3749     lockdep_assert_held(&ci->i_ceph_lock);
3750 
3751     dout("removing capsnap %p, inode %p ci %p\n", capsnap, inode, ci);
3752 
3753     list_del_init(&capsnap->ci_item);
3754     ret = __detach_cap_flush_from_ci(ci, &capsnap->cap_flush);
3755     if (wake_ci)
3756         *wake_ci = ret;
3757 
3758     spin_lock(&mdsc->cap_dirty_lock);
3759     if (list_empty(&ci->i_cap_flush_list))
3760         list_del_init(&ci->i_flushing_item);
3761 
3762     ret = __detach_cap_flush_from_mdsc(mdsc, &capsnap->cap_flush);
3763     if (wake_mdsc)
3764         *wake_mdsc = ret;
3765     spin_unlock(&mdsc->cap_dirty_lock);
3766 }
3767 
3768 void ceph_remove_capsnap(struct inode *inode, struct ceph_cap_snap *capsnap,
3769              bool *wake_ci, bool *wake_mdsc)
3770 {
3771     struct ceph_inode_info *ci = ceph_inode(inode);
3772 
3773     lockdep_assert_held(&ci->i_ceph_lock);
3774 
3775     WARN_ON_ONCE(capsnap->dirty_pages || capsnap->writing);
3776     __ceph_remove_capsnap(inode, capsnap, wake_ci, wake_mdsc);
3777 }
3778 
3779 /*
3780  * Handle FLUSHSNAP_ACK.  MDS has flushed snap data to disk and we can
3781  * throw away our cap_snap.
3782  *
3783  * Caller hold s_mutex.
3784  */
3785 static void handle_cap_flushsnap_ack(struct inode *inode, u64 flush_tid,
3786                      struct ceph_mds_caps *m,
3787                      struct ceph_mds_session *session)
3788 {
3789     struct ceph_inode_info *ci = ceph_inode(inode);
3790     struct ceph_mds_client *mdsc = ceph_sb_to_client(inode->i_sb)->mdsc;
3791     u64 follows = le64_to_cpu(m->snap_follows);
3792     struct ceph_cap_snap *capsnap = NULL, *iter;
3793     bool wake_ci = false;
3794     bool wake_mdsc = false;
3795 
3796     dout("handle_cap_flushsnap_ack inode %p ci %p mds%d follows %lld\n",
3797          inode, ci, session->s_mds, follows);
3798 
3799     spin_lock(&ci->i_ceph_lock);
3800     list_for_each_entry(iter, &ci->i_cap_snaps, ci_item) {
3801         if (iter->follows == follows) {
3802             if (iter->cap_flush.tid != flush_tid) {
3803                 dout(" cap_snap %p follows %lld tid %lld !="
3804                      " %lld\n", iter, follows,
3805                      flush_tid, iter->cap_flush.tid);
3806                 break;
3807             }
3808             capsnap = iter;
3809             break;
3810         } else {
3811             dout(" skipping cap_snap %p follows %lld\n",
3812                  iter, iter->follows);
3813         }
3814     }
3815     if (capsnap)
3816         ceph_remove_capsnap(inode, capsnap, &wake_ci, &wake_mdsc);
3817     spin_unlock(&ci->i_ceph_lock);
3818 
3819     if (capsnap) {
3820         ceph_put_snap_context(capsnap->context);
3821         ceph_put_cap_snap(capsnap);
3822         if (wake_ci)
3823             wake_up_all(&ci->i_cap_wq);
3824         if (wake_mdsc)
3825             wake_up_all(&mdsc->cap_flushing_wq);
3826         iput(inode);
3827     }
3828 }
3829 
3830 /*
3831  * Handle TRUNC from MDS, indicating file truncation.
3832  *
3833  * caller hold s_mutex.
3834  */
3835 static bool handle_cap_trunc(struct inode *inode,
3836                  struct ceph_mds_caps *trunc,
3837                  struct ceph_mds_session *session)
3838 {
3839     struct ceph_inode_info *ci = ceph_inode(inode);
3840     int mds = session->s_mds;
3841     int seq = le32_to_cpu(trunc->seq);
3842     u32 truncate_seq = le32_to_cpu(trunc->truncate_seq);
3843     u64 truncate_size = le64_to_cpu(trunc->truncate_size);
3844     u64 size = le64_to_cpu(trunc->size);
3845     int implemented = 0;
3846     int dirty = __ceph_caps_dirty(ci);
3847     int issued = __ceph_caps_issued(ceph_inode(inode), &implemented);
3848     bool queue_trunc = false;
3849 
3850     lockdep_assert_held(&ci->i_ceph_lock);
3851 
3852     issued |= implemented | dirty;
3853 
3854     dout("handle_cap_trunc inode %p mds%d seq %d to %lld seq %d\n",
3855          inode, mds, seq, truncate_size, truncate_seq);
3856     queue_trunc = ceph_fill_file_size(inode, issued,
3857                       truncate_seq, truncate_size, size);
3858     return queue_trunc;
3859 }
3860 
3861 /*
3862  * Handle EXPORT from MDS.  Cap is being migrated _from_ this mds to a
3863  * different one.  If we are the most recent migration we've seen (as
3864  * indicated by mseq), make note of the migrating cap bits for the
3865  * duration (until we see the corresponding IMPORT).
3866  *
3867  * caller holds s_mutex
3868  */
3869 static void handle_cap_export(struct inode *inode, struct ceph_mds_caps *ex,
3870                   struct ceph_mds_cap_peer *ph,
3871                   struct ceph_mds_session *session)
3872 {
3873     struct ceph_mds_client *mdsc = ceph_inode_to_client(inode)->mdsc;
3874     struct ceph_mds_session *tsession = NULL;
3875     struct ceph_cap *cap, *tcap, *new_cap = NULL;
3876     struct ceph_inode_info *ci = ceph_inode(inode);
3877     u64 t_cap_id;
3878     unsigned mseq = le32_to_cpu(ex->migrate_seq);
3879     unsigned t_seq, t_mseq;
3880     int target, issued;
3881     int mds = session->s_mds;
3882 
3883     if (ph) {
3884         t_cap_id = le64_to_cpu(ph->cap_id);
3885         t_seq = le32_to_cpu(ph->seq);
3886         t_mseq = le32_to_cpu(ph->mseq);
3887         target = le32_to_cpu(ph->mds);
3888     } else {
3889         t_cap_id = t_seq = t_mseq = 0;
3890         target = -1;
3891     }
3892 
3893     dout("handle_cap_export inode %p ci %p mds%d mseq %d target %d\n",
3894          inode, ci, mds, mseq, target);
3895 retry:
3896     down_read(&mdsc->snap_rwsem);
3897     spin_lock(&ci->i_ceph_lock);
3898     cap = __get_cap_for_mds(ci, mds);
3899     if (!cap || cap->cap_id != le64_to_cpu(ex->cap_id))
3900         goto out_unlock;
3901 
3902     if (target < 0) {
3903         ceph_remove_cap(cap, false);
3904         goto out_unlock;
3905     }
3906 
3907     /*
3908      * now we know we haven't received the cap import message yet
3909      * because the exported cap still exist.
3910      */
3911 
3912     issued = cap->issued;
3913     if (issued != cap->implemented)
3914         pr_err_ratelimited("handle_cap_export: issued != implemented: "
3915                 "ino (%llx.%llx) mds%d seq %d mseq %d "
3916                 "issued %s implemented %s\n",
3917                 ceph_vinop(inode), mds, cap->seq, cap->mseq,
3918                 ceph_cap_string(issued),
3919                 ceph_cap_string(cap->implemented));
3920 
3921 
3922     tcap = __get_cap_for_mds(ci, target);
3923     if (tcap) {
3924         /* already have caps from the target */
3925         if (tcap->cap_id == t_cap_id &&
3926             ceph_seq_cmp(tcap->seq, t_seq) < 0) {
3927             dout(" updating import cap %p mds%d\n", tcap, target);
3928             tcap->cap_id = t_cap_id;
3929             tcap->seq = t_seq - 1;
3930             tcap->issue_seq = t_seq - 1;
3931             tcap->issued |= issued;
3932             tcap->implemented |= issued;
3933             if (cap == ci->i_auth_cap) {
3934                 ci->i_auth_cap = tcap;
3935                 change_auth_cap_ses(ci, tcap->session);
3936             }
3937         }
3938         ceph_remove_cap(cap, false);
3939         goto out_unlock;
3940     } else if (tsession) {
3941         /* add placeholder for the export tagert */
3942         int flag = (cap == ci->i_auth_cap) ? CEPH_CAP_FLAG_AUTH : 0;
3943         tcap = new_cap;
3944         ceph_add_cap(inode, tsession, t_cap_id, issued, 0,
3945                  t_seq - 1, t_mseq, (u64)-1, flag, &new_cap);
3946 
3947         if (!list_empty(&ci->i_cap_flush_list) &&
3948             ci->i_auth_cap == tcap) {
3949             spin_lock(&mdsc->cap_dirty_lock);
3950             list_move_tail(&ci->i_flushing_item,
3951                        &tcap->session->s_cap_flushing);
3952             spin_unlock(&mdsc->cap_dirty_lock);
3953         }
3954 
3955         ceph_remove_cap(cap, false);
3956         goto out_unlock;
3957     }
3958 
3959     spin_unlock(&ci->i_ceph_lock);
3960     up_read(&mdsc->snap_rwsem);
3961     mutex_unlock(&session->s_mutex);
3962 
3963     /* open target session */
3964     tsession = ceph_mdsc_open_export_target_session(mdsc, target);
3965     if (!IS_ERR(tsession)) {
3966         if (mds > target) {
3967             mutex_lock(&session->s_mutex);
3968             mutex_lock_nested(&tsession->s_mutex,
3969                       SINGLE_DEPTH_NESTING);
3970         } else {
3971             mutex_lock(&tsession->s_mutex);
3972             mutex_lock_nested(&session->s_mutex,
3973                       SINGLE_DEPTH_NESTING);
3974         }
3975         new_cap = ceph_get_cap(mdsc, NULL);
3976     } else {
3977         WARN_ON(1);
3978         tsession = NULL;
3979         target = -1;
3980         mutex_lock(&session->s_mutex);
3981     }
3982     goto retry;
3983 
3984 out_unlock:
3985     spin_unlock(&ci->i_ceph_lock);
3986     up_read(&mdsc->snap_rwsem);
3987     mutex_unlock(&session->s_mutex);
3988     if (tsession) {
3989         mutex_unlock(&tsession->s_mutex);
3990         ceph_put_mds_session(tsession);
3991     }
3992     if (new_cap)
3993         ceph_put_cap(mdsc, new_cap);
3994 }
3995 
3996 /*
3997  * Handle cap IMPORT.
3998  *
3999  * caller holds s_mutex. acquires i_ceph_lock
4000  */
4001 static void handle_cap_import(struct ceph_mds_client *mdsc,
4002                   struct inode *inode, struct ceph_mds_caps *im,
4003                   struct ceph_mds_cap_peer *ph,
4004                   struct ceph_mds_session *session,
4005                   struct ceph_cap **target_cap, int *old_issued)
4006 {
4007     struct ceph_inode_info *ci = ceph_inode(inode);
4008     struct ceph_cap *cap, *ocap, *new_cap = NULL;
4009     int mds = session->s_mds;
4010     int issued;
4011     unsigned caps = le32_to_cpu(im->caps);
4012     unsigned wanted = le32_to_cpu(im->wanted);
4013     unsigned seq = le32_to_cpu(im->seq);
4014     unsigned mseq = le32_to_cpu(im->migrate_seq);
4015     u64 realmino = le64_to_cpu(im->realm);
4016     u64 cap_id = le64_to_cpu(im->cap_id);
4017     u64 p_cap_id;
4018     int peer;
4019 
4020     if (ph) {
4021         p_cap_id = le64_to_cpu(ph->cap_id);
4022         peer = le32_to_cpu(ph->mds);
4023     } else {
4024         p_cap_id = 0;
4025         peer = -1;
4026     }
4027 
4028     dout("handle_cap_import inode %p ci %p mds%d mseq %d peer %d\n",
4029          inode, ci, mds, mseq, peer);
4030 retry:
4031     cap = __get_cap_for_mds(ci, mds);
4032     if (!cap) {
4033         if (!new_cap) {
4034             spin_unlock(&ci->i_ceph_lock);
4035             new_cap = ceph_get_cap(mdsc, NULL);
4036             spin_lock(&ci->i_ceph_lock);
4037             goto retry;
4038         }
4039         cap = new_cap;
4040     } else {
4041         if (new_cap) {
4042             ceph_put_cap(mdsc, new_cap);
4043             new_cap = NULL;
4044         }
4045     }
4046 
4047     __ceph_caps_issued(ci, &issued);
4048     issued |= __ceph_caps_dirty(ci);
4049 
4050     ceph_add_cap(inode, session, cap_id, caps, wanted, seq, mseq,
4051              realmino, CEPH_CAP_FLAG_AUTH, &new_cap);
4052 
4053     ocap = peer >= 0 ? __get_cap_for_mds(ci, peer) : NULL;
4054     if (ocap && ocap->cap_id == p_cap_id) {
4055         dout(" remove export cap %p mds%d flags %d\n",
4056              ocap, peer, ph->flags);
4057         if ((ph->flags & CEPH_CAP_FLAG_AUTH) &&
4058             (ocap->seq != le32_to_cpu(ph->seq) ||
4059              ocap->mseq != le32_to_cpu(ph->mseq))) {
4060             pr_err_ratelimited("handle_cap_import: "
4061                     "mismatched seq/mseq: ino (%llx.%llx) "
4062                     "mds%d seq %d mseq %d importer mds%d "
4063                     "has peer seq %d mseq %d\n",
4064                     ceph_vinop(inode), peer, ocap->seq,
4065                     ocap->mseq, mds, le32_to_cpu(ph->seq),
4066                     le32_to_cpu(ph->mseq));
4067         }
4068         ceph_remove_cap(ocap, (ph->flags & CEPH_CAP_FLAG_RELEASE));
4069     }
4070 
4071     *old_issued = issued;
4072     *target_cap = cap;
4073 }
4074 
4075 /*
4076  * Handle a caps message from the MDS.
4077  *
4078  * Identify the appropriate session, inode, and call the right handler
4079  * based on the cap op.
4080  */
4081 void ceph_handle_caps(struct ceph_mds_session *session,
4082               struct ceph_msg *msg)
4083 {
4084     struct ceph_mds_client *mdsc = session->s_mdsc;
4085     struct inode *inode;
4086     struct ceph_inode_info *ci;
4087     struct ceph_cap *cap;
4088     struct ceph_mds_caps *h;
4089     struct ceph_mds_cap_peer *peer = NULL;
4090     struct ceph_snap_realm *realm = NULL;
4091     int op;
4092     int msg_version = le16_to_cpu(msg->hdr.version);
4093     u32 seq, mseq;
4094     struct ceph_vino vino;
4095     void *snaptrace;
4096     size_t snaptrace_len;
4097     void *p, *end;
4098     struct cap_extra_info extra_info = {};
4099     bool queue_trunc;
4100 
4101     dout("handle_caps from mds%d\n", session->s_mds);
4102 
4103     /* decode */
4104     end = msg->front.iov_base + msg->front.iov_len;
4105     if (msg->front.iov_len < sizeof(*h))
4106         goto bad;
4107     h = msg->front.iov_base;
4108     op = le32_to_cpu(h->op);
4109     vino.ino = le64_to_cpu(h->ino);
4110     vino.snap = CEPH_NOSNAP;
4111     seq = le32_to_cpu(h->seq);
4112     mseq = le32_to_cpu(h->migrate_seq);
4113 
4114     snaptrace = h + 1;
4115     snaptrace_len = le32_to_cpu(h->snap_trace_len);
4116     p = snaptrace + snaptrace_len;
4117 
4118     if (msg_version >= 2) {
4119         u32 flock_len;
4120         ceph_decode_32_safe(&p, end, flock_len, bad);
4121         if (p + flock_len > end)
4122             goto bad;
4123         p += flock_len;
4124     }
4125 
4126     if (msg_version >= 3) {
4127         if (op == CEPH_CAP_OP_IMPORT) {
4128             if (p + sizeof(*peer) > end)
4129                 goto bad;
4130             peer = p;
4131             p += sizeof(*peer);
4132         } else if (op == CEPH_CAP_OP_EXPORT) {
4133             /* recorded in unused fields */
4134             peer = (void *)&h->size;
4135         }
4136     }
4137 
4138     if (msg_version >= 4) {
4139         ceph_decode_64_safe(&p, end, extra_info.inline_version, bad);
4140         ceph_decode_32_safe(&p, end, extra_info.inline_len, bad);
4141         if (p + extra_info.inline_len > end)
4142             goto bad;
4143         extra_info.inline_data = p;
4144         p += extra_info.inline_len;
4145     }
4146 
4147     if (msg_version >= 5) {
4148         struct ceph_osd_client  *osdc = &mdsc->fsc->client->osdc;
4149         u32         epoch_barrier;
4150 
4151         ceph_decode_32_safe(&p, end, epoch_barrier, bad);
4152         ceph_osdc_update_epoch_barrier(osdc, epoch_barrier);
4153     }
4154 
4155     if (msg_version >= 8) {
4156         u32 pool_ns_len;
4157 
4158         /* version >= 6 */
4159         ceph_decode_skip_64(&p, end, bad);  // flush_tid
4160         /* version >= 7 */
4161         ceph_decode_skip_32(&p, end, bad);  // caller_uid
4162         ceph_decode_skip_32(&p, end, bad);  // caller_gid
4163         /* version >= 8 */
4164         ceph_decode_32_safe(&p, end, pool_ns_len, bad);
4165         if (pool_ns_len > 0) {
4166             ceph_decode_need(&p, end, pool_ns_len, bad);
4167             extra_info.pool_ns =
4168                 ceph_find_or_create_string(p, pool_ns_len);
4169             p += pool_ns_len;
4170         }
4171     }
4172 
4173     if (msg_version >= 9) {
4174         struct ceph_timespec *btime;
4175 
4176         if (p + sizeof(*btime) > end)
4177             goto bad;
4178         btime = p;
4179         ceph_decode_timespec64(&extra_info.btime, btime);
4180         p += sizeof(*btime);
4181         ceph_decode_64_safe(&p, end, extra_info.change_attr, bad);
4182     }
4183 
4184     if (msg_version >= 11) {
4185         /* version >= 10 */
4186         ceph_decode_skip_32(&p, end, bad); // flags
4187         /* version >= 11 */
4188         extra_info.dirstat_valid = true;
4189         ceph_decode_64_safe(&p, end, extra_info.nfiles, bad);
4190         ceph_decode_64_safe(&p, end, extra_info.nsubdirs, bad);
4191     }
4192 
4193     /* lookup ino */
4194     inode = ceph_find_inode(mdsc->fsc->sb, vino);
4195     dout(" op %s ino %llx.%llx inode %p\n", ceph_cap_op_name(op), vino.ino,
4196          vino.snap, inode);
4197 
4198     mutex_lock(&session->s_mutex);
4199     inc_session_sequence(session);
4200     dout(" mds%d seq %lld cap seq %u\n", session->s_mds, session->s_seq,
4201          (unsigned)seq);
4202 
4203     if (!inode) {
4204         dout(" i don't have ino %llx\n", vino.ino);
4205 
4206         if (op == CEPH_CAP_OP_IMPORT) {
4207             cap = ceph_get_cap(mdsc, NULL);
4208             cap->cap_ino = vino.ino;
4209             cap->queue_release = 1;
4210             cap->cap_id = le64_to_cpu(h->cap_id);
4211             cap->mseq = mseq;
4212             cap->seq = seq;
4213             cap->issue_seq = seq;
4214             spin_lock(&session->s_cap_lock);
4215             __ceph_queue_cap_release(session, cap);
4216             spin_unlock(&session->s_cap_lock);
4217         }
4218         goto flush_cap_releases;
4219     }
4220     ci = ceph_inode(inode);
4221 
4222     /* these will work even if we don't have a cap yet */
4223     switch (op) {
4224     case CEPH_CAP_OP_FLUSHSNAP_ACK:
4225         handle_cap_flushsnap_ack(inode, le64_to_cpu(msg->hdr.tid),
4226                      h, session);
4227         goto done;
4228 
4229     case CEPH_CAP_OP_EXPORT:
4230         handle_cap_export(inode, h, peer, session);
4231         goto done_unlocked;
4232 
4233     case CEPH_CAP_OP_IMPORT:
4234         realm = NULL;
4235         if (snaptrace_len) {
4236             down_write(&mdsc->snap_rwsem);
4237             ceph_update_snap_trace(mdsc, snaptrace,
4238                            snaptrace + snaptrace_len,
4239                            false, &realm);
4240             downgrade_write(&mdsc->snap_rwsem);
4241         } else {
4242             down_read(&mdsc->snap_rwsem);
4243         }
4244         spin_lock(&ci->i_ceph_lock);
4245         handle_cap_import(mdsc, inode, h, peer, session,
4246                   &cap, &extra_info.issued);
4247         handle_cap_grant(inode, session, cap,
4248                  h, msg->middle, &extra_info);
4249         if (realm)
4250             ceph_put_snap_realm(mdsc, realm);
4251         goto done_unlocked;
4252     }
4253 
4254     /* the rest require a cap */
4255     spin_lock(&ci->i_ceph_lock);
4256     cap = __get_cap_for_mds(ceph_inode(inode), session->s_mds);
4257     if (!cap) {
4258         dout(" no cap on %p ino %llx.%llx from mds%d\n",
4259              inode, ceph_ino(inode), ceph_snap(inode),
4260              session->s_mds);
4261         spin_unlock(&ci->i_ceph_lock);
4262         goto flush_cap_releases;
4263     }
4264 
4265     /* note that each of these drops i_ceph_lock for us */
4266     switch (op) {
4267     case CEPH_CAP_OP_REVOKE:
4268     case CEPH_CAP_OP_GRANT:
4269         __ceph_caps_issued(ci, &extra_info.issued);
4270         extra_info.issued |= __ceph_caps_dirty(ci);
4271         handle_cap_grant(inode, session, cap,
4272                  h, msg->middle, &extra_info);
4273         goto done_unlocked;
4274 
4275     case CEPH_CAP_OP_FLUSH_ACK:
4276         handle_cap_flush_ack(inode, le64_to_cpu(msg->hdr.tid),
4277                      h, session, cap);
4278         break;
4279 
4280     case CEPH_CAP_OP_TRUNC:
4281         queue_trunc = handle_cap_trunc(inode, h, session);
4282         spin_unlock(&ci->i_ceph_lock);
4283         if (queue_trunc)
4284             ceph_queue_vmtruncate(inode);
4285         break;
4286 
4287     default:
4288         spin_unlock(&ci->i_ceph_lock);
4289         pr_err("ceph_handle_caps: unknown cap op %d %s\n", op,
4290                ceph_cap_op_name(op));
4291     }
4292 
4293 done:
4294     mutex_unlock(&session->s_mutex);
4295 done_unlocked:
4296     iput(inode);
4297 out:
4298     ceph_put_string(extra_info.pool_ns);
4299     return;
4300 
4301 flush_cap_releases:
4302     /*
4303      * send any cap release message to try to move things
4304      * along for the mds (who clearly thinks we still have this
4305      * cap).
4306      */
4307     ceph_flush_cap_releases(mdsc, session);
4308     goto done;
4309 
4310 bad:
4311     pr_err("ceph_handle_caps: corrupt message\n");
4312     ceph_msg_dump(msg);
4313     goto out;
4314 }
4315 
4316 /*
4317  * Delayed work handler to process end of delayed cap release LRU list.
4318  *
4319  * If new caps are added to the list while processing it, these won't get
4320  * processed in this run.  In this case, the ci->i_hold_caps_max will be
4321  * returned so that the work can be scheduled accordingly.
4322  */
4323 unsigned long ceph_check_delayed_caps(struct ceph_mds_client *mdsc)
4324 {
4325     struct inode *inode;
4326     struct ceph_inode_info *ci;
4327     struct ceph_mount_options *opt = mdsc->fsc->mount_options;
4328     unsigned long delay_max = opt->caps_wanted_delay_max * HZ;
4329     unsigned long loop_start = jiffies;
4330     unsigned long delay = 0;
4331 
4332     dout("check_delayed_caps\n");
4333     spin_lock(&mdsc->cap_delay_lock);
4334     while (!list_empty(&mdsc->cap_delay_list)) {
4335         ci = list_first_entry(&mdsc->cap_delay_list,
4336                       struct ceph_inode_info,
4337                       i_cap_delay_list);
4338         if (time_before(loop_start, ci->i_hold_caps_max - delay_max)) {
4339             dout("%s caps added recently.  Exiting loop", __func__);
4340             delay = ci->i_hold_caps_max;
4341             break;
4342         }
4343         if ((ci->i_ceph_flags & CEPH_I_FLUSH) == 0 &&
4344             time_before(jiffies, ci->i_hold_caps_max))
4345             break;
4346         list_del_init(&ci->i_cap_delay_list);
4347 
4348         inode = igrab(&ci->netfs.inode);
4349         if (inode) {
4350             spin_unlock(&mdsc->cap_delay_lock);
4351             dout("check_delayed_caps on %p\n", inode);
4352             ceph_check_caps(ci, 0, NULL);
4353             iput(inode);
4354             spin_lock(&mdsc->cap_delay_lock);
4355         }
4356     }
4357     spin_unlock(&mdsc->cap_delay_lock);
4358 
4359     return delay;
4360 }
4361 
4362 /*
4363  * Flush all dirty caps to the mds
4364  */
4365 static void flush_dirty_session_caps(struct ceph_mds_session *s)
4366 {
4367     struct ceph_mds_client *mdsc = s->s_mdsc;
4368     struct ceph_inode_info *ci;
4369     struct inode *inode;
4370 
4371     dout("flush_dirty_caps\n");
4372     spin_lock(&mdsc->cap_dirty_lock);
4373     while (!list_empty(&s->s_cap_dirty)) {
4374         ci = list_first_entry(&s->s_cap_dirty, struct ceph_inode_info,
4375                       i_dirty_item);
4376         inode = &ci->netfs.inode;
4377         ihold(inode);
4378         dout("flush_dirty_caps %llx.%llx\n", ceph_vinop(inode));
4379         spin_unlock(&mdsc->cap_dirty_lock);
4380         ceph_wait_on_async_create(inode);
4381         ceph_check_caps(ci, CHECK_CAPS_FLUSH, NULL);
4382         iput(inode);
4383         spin_lock(&mdsc->cap_dirty_lock);
4384     }
4385     spin_unlock(&mdsc->cap_dirty_lock);
4386     dout("flush_dirty_caps done\n");
4387 }
4388 
4389 void ceph_flush_dirty_caps(struct ceph_mds_client *mdsc)
4390 {
4391     ceph_mdsc_iterate_sessions(mdsc, flush_dirty_session_caps, true);
4392 }
4393 
4394 void __ceph_touch_fmode(struct ceph_inode_info *ci,
4395             struct ceph_mds_client *mdsc, int fmode)
4396 {
4397     unsigned long now = jiffies;
4398     if (fmode & CEPH_FILE_MODE_RD)
4399         ci->i_last_rd = now;
4400     if (fmode & CEPH_FILE_MODE_WR)
4401         ci->i_last_wr = now;
4402     /* queue periodic check */
4403     if (fmode &&
4404         __ceph_is_any_real_caps(ci) &&
4405         list_empty(&ci->i_cap_delay_list))
4406         __cap_delay_requeue(mdsc, ci);
4407 }
4408 
4409 void ceph_get_fmode(struct ceph_inode_info *ci, int fmode, int count)
4410 {
4411     struct ceph_mds_client *mdsc = ceph_sb_to_mdsc(ci->netfs.inode.i_sb);
4412     int bits = (fmode << 1) | 1;
4413     bool already_opened = false;
4414     int i;
4415 
4416     if (count == 1)
4417         atomic64_inc(&mdsc->metric.opened_files);
4418 
4419     spin_lock(&ci->i_ceph_lock);
4420     for (i = 0; i < CEPH_FILE_MODE_BITS; i++) {
4421         /*
4422          * If any of the mode ref is larger than 0,
4423          * that means it has been already opened by
4424          * others. Just skip checking the PIN ref.
4425          */
4426         if (i && ci->i_nr_by_mode[i])
4427             already_opened = true;
4428 
4429         if (bits & (1 << i))
4430             ci->i_nr_by_mode[i] += count;
4431     }
4432 
4433     if (!already_opened)
4434         percpu_counter_inc(&mdsc->metric.opened_inodes);
4435     spin_unlock(&ci->i_ceph_lock);
4436 }
4437 
4438 /*
4439  * Drop open file reference.  If we were the last open file,
4440  * we may need to release capabilities to the MDS (or schedule
4441  * their delayed release).
4442  */
4443 void ceph_put_fmode(struct ceph_inode_info *ci, int fmode, int count)
4444 {
4445     struct ceph_mds_client *mdsc = ceph_sb_to_mdsc(ci->netfs.inode.i_sb);
4446     int bits = (fmode << 1) | 1;
4447     bool is_closed = true;
4448     int i;
4449 
4450     if (count == 1)
4451         atomic64_dec(&mdsc->metric.opened_files);
4452 
4453     spin_lock(&ci->i_ceph_lock);
4454     for (i = 0; i < CEPH_FILE_MODE_BITS; i++) {
4455         if (bits & (1 << i)) {
4456             BUG_ON(ci->i_nr_by_mode[i] < count);
4457             ci->i_nr_by_mode[i] -= count;
4458         }
4459 
4460         /*
4461          * If any of the mode ref is not 0 after
4462          * decreased, that means it is still opened
4463          * by others. Just skip checking the PIN ref.
4464          */
4465         if (i && ci->i_nr_by_mode[i])
4466             is_closed = false;
4467     }
4468 
4469     if (is_closed)
4470         percpu_counter_dec(&mdsc->metric.opened_inodes);
4471     spin_unlock(&ci->i_ceph_lock);
4472 }
4473 
4474 /*
4475  * For a soon-to-be unlinked file, drop the LINK caps. If it
4476  * looks like the link count will hit 0, drop any other caps (other
4477  * than PIN) we don't specifically want (due to the file still being
4478  * open).
4479  */
4480 int ceph_drop_caps_for_unlink(struct inode *inode)
4481 {
4482     struct ceph_inode_info *ci = ceph_inode(inode);
4483     int drop = CEPH_CAP_LINK_SHARED | CEPH_CAP_LINK_EXCL;
4484 
4485     spin_lock(&ci->i_ceph_lock);
4486     if (inode->i_nlink == 1) {
4487         drop |= ~(__ceph_caps_wanted(ci) | CEPH_CAP_PIN);
4488 
4489         if (__ceph_caps_dirty(ci)) {
4490             struct ceph_mds_client *mdsc =
4491                 ceph_inode_to_client(inode)->mdsc;
4492             __cap_delay_requeue_front(mdsc, ci);
4493         }
4494     }
4495     spin_unlock(&ci->i_ceph_lock);
4496     return drop;
4497 }
4498 
4499 /*
4500  * Helpers for embedding cap and dentry lease releases into mds
4501  * requests.
4502  *
4503  * @force is used by dentry_release (below) to force inclusion of a
4504  * record for the directory inode, even when there aren't any caps to
4505  * drop.
4506  */
4507 int ceph_encode_inode_release(void **p, struct inode *inode,
4508                   int mds, int drop, int unless, int force)
4509 {
4510     struct ceph_inode_info *ci = ceph_inode(inode);
4511     struct ceph_cap *cap;
4512     struct ceph_mds_request_release *rel = *p;
4513     int used, dirty;
4514     int ret = 0;
4515 
4516     spin_lock(&ci->i_ceph_lock);
4517     used = __ceph_caps_used(ci);
4518     dirty = __ceph_caps_dirty(ci);
4519 
4520     dout("encode_inode_release %p mds%d used|dirty %s drop %s unless %s\n",
4521          inode, mds, ceph_cap_string(used|dirty), ceph_cap_string(drop),
4522          ceph_cap_string(unless));
4523 
4524     /* only drop unused, clean caps */
4525     drop &= ~(used | dirty);
4526 
4527     cap = __get_cap_for_mds(ci, mds);
4528     if (cap && __cap_is_valid(cap)) {
4529         unless &= cap->issued;
4530         if (unless) {
4531             if (unless & CEPH_CAP_AUTH_EXCL)
4532                 drop &= ~CEPH_CAP_AUTH_SHARED;
4533             if (unless & CEPH_CAP_LINK_EXCL)
4534                 drop &= ~CEPH_CAP_LINK_SHARED;
4535             if (unless & CEPH_CAP_XATTR_EXCL)
4536                 drop &= ~CEPH_CAP_XATTR_SHARED;
4537             if (unless & CEPH_CAP_FILE_EXCL)
4538                 drop &= ~CEPH_CAP_FILE_SHARED;
4539         }
4540 
4541         if (force || (cap->issued & drop)) {
4542             if (cap->issued & drop) {
4543                 int wanted = __ceph_caps_wanted(ci);
4544                 dout("encode_inode_release %p cap %p "
4545                      "%s -> %s, wanted %s -> %s\n", inode, cap,
4546                      ceph_cap_string(cap->issued),
4547                      ceph_cap_string(cap->issued & ~drop),
4548                      ceph_cap_string(cap->mds_wanted),
4549                      ceph_cap_string(wanted));
4550 
4551                 cap->issued &= ~drop;
4552                 cap->implemented &= ~drop;
4553                 cap->mds_wanted = wanted;
4554                 if (cap == ci->i_auth_cap &&
4555                     !(wanted & CEPH_CAP_ANY_FILE_WR))
4556                     ci->i_requested_max_size = 0;
4557             } else {
4558                 dout("encode_inode_release %p cap %p %s"
4559                      " (force)\n", inode, cap,
4560                      ceph_cap_string(cap->issued));
4561             }
4562 
4563             rel->ino = cpu_to_le64(ceph_ino(inode));
4564             rel->cap_id = cpu_to_le64(cap->cap_id);
4565             rel->seq = cpu_to_le32(cap->seq);
4566             rel->issue_seq = cpu_to_le32(cap->issue_seq);
4567             rel->mseq = cpu_to_le32(cap->mseq);
4568             rel->caps = cpu_to_le32(cap->implemented);
4569             rel->wanted = cpu_to_le32(cap->mds_wanted);
4570             rel->dname_len = 0;
4571             rel->dname_seq = 0;
4572             *p += sizeof(*rel);
4573             ret = 1;
4574         } else {
4575             dout("encode_inode_release %p cap %p %s (noop)\n",
4576                  inode, cap, ceph_cap_string(cap->issued));
4577         }
4578     }
4579     spin_unlock(&ci->i_ceph_lock);
4580     return ret;
4581 }
4582 
4583 int ceph_encode_dentry_release(void **p, struct dentry *dentry,
4584                    struct inode *dir,
4585                    int mds, int drop, int unless)
4586 {
4587     struct dentry *parent = NULL;
4588     struct ceph_mds_request_release *rel = *p;
4589     struct ceph_dentry_info *di = ceph_dentry(dentry);
4590     int force = 0;
4591     int ret;
4592 
4593     /*
4594      * force an record for the directory caps if we have a dentry lease.
4595      * this is racy (can't take i_ceph_lock and d_lock together), but it
4596      * doesn't have to be perfect; the mds will revoke anything we don't
4597      * release.
4598      */
4599     spin_lock(&dentry->d_lock);
4600     if (di->lease_session && di->lease_session->s_mds == mds)
4601         force = 1;
4602     if (!dir) {
4603         parent = dget(dentry->d_parent);
4604         dir = d_inode(parent);
4605     }
4606     spin_unlock(&dentry->d_lock);
4607 
4608     ret = ceph_encode_inode_release(p, dir, mds, drop, unless, force);
4609     dput(parent);
4610 
4611     spin_lock(&dentry->d_lock);
4612     if (ret && di->lease_session && di->lease_session->s_mds == mds) {
4613         dout("encode_dentry_release %p mds%d seq %d\n",
4614              dentry, mds, (int)di->lease_seq);
4615         rel->dname_len = cpu_to_le32(dentry->d_name.len);
4616         memcpy(*p, dentry->d_name.name, dentry->d_name.len);
4617         *p += dentry->d_name.len;
4618         rel->dname_seq = cpu_to_le32(di->lease_seq);
4619         __ceph_mdsc_drop_dentry_lease(dentry);
4620     }
4621     spin_unlock(&dentry->d_lock);
4622     return ret;
4623 }
4624 
4625 static int remove_capsnaps(struct ceph_mds_client *mdsc, struct inode *inode)
4626 {
4627     struct ceph_inode_info *ci = ceph_inode(inode);
4628     struct ceph_cap_snap *capsnap;
4629     int capsnap_release = 0;
4630 
4631     lockdep_assert_held(&ci->i_ceph_lock);
4632 
4633     dout("removing capsnaps, ci is %p, inode is %p\n", ci, inode);
4634 
4635     while (!list_empty(&ci->i_cap_snaps)) {
4636         capsnap = list_first_entry(&ci->i_cap_snaps,
4637                        struct ceph_cap_snap, ci_item);
4638         __ceph_remove_capsnap(inode, capsnap, NULL, NULL);
4639         ceph_put_snap_context(capsnap->context);
4640         ceph_put_cap_snap(capsnap);
4641         capsnap_release++;
4642     }
4643     wake_up_all(&ci->i_cap_wq);
4644     wake_up_all(&mdsc->cap_flushing_wq);
4645     return capsnap_release;
4646 }
4647 
4648 int ceph_purge_inode_cap(struct inode *inode, struct ceph_cap *cap, bool *invalidate)
4649 {
4650     struct ceph_fs_client *fsc = ceph_inode_to_client(inode);
4651     struct ceph_mds_client *mdsc = fsc->mdsc;
4652     struct ceph_inode_info *ci = ceph_inode(inode);
4653     bool is_auth;
4654     bool dirty_dropped = false;
4655     int iputs = 0;
4656 
4657     lockdep_assert_held(&ci->i_ceph_lock);
4658 
4659     dout("removing cap %p, ci is %p, inode is %p\n",
4660          cap, ci, &ci->netfs.inode);
4661 
4662     is_auth = (cap == ci->i_auth_cap);
4663     __ceph_remove_cap(cap, false);
4664     if (is_auth) {
4665         struct ceph_cap_flush *cf;
4666 
4667         if (ceph_inode_is_shutdown(inode)) {
4668             if (inode->i_data.nrpages > 0)
4669                 *invalidate = true;
4670             if (ci->i_wrbuffer_ref > 0)
4671                 mapping_set_error(&inode->i_data, -EIO);
4672         }
4673 
4674         spin_lock(&mdsc->cap_dirty_lock);
4675 
4676         /* trash all of the cap flushes for this inode */
4677         while (!list_empty(&ci->i_cap_flush_list)) {
4678             cf = list_first_entry(&ci->i_cap_flush_list,
4679                           struct ceph_cap_flush, i_list);
4680             list_del_init(&cf->g_list);
4681             list_del_init(&cf->i_list);
4682             if (!cf->is_capsnap)
4683                 ceph_free_cap_flush(cf);
4684         }
4685 
4686         if (!list_empty(&ci->i_dirty_item)) {
4687             pr_warn_ratelimited(
4688                 " dropping dirty %s state for %p %lld\n",
4689                 ceph_cap_string(ci->i_dirty_caps),
4690                 inode, ceph_ino(inode));
4691             ci->i_dirty_caps = 0;
4692             list_del_init(&ci->i_dirty_item);
4693             dirty_dropped = true;
4694         }
4695         if (!list_empty(&ci->i_flushing_item)) {
4696             pr_warn_ratelimited(
4697                 " dropping dirty+flushing %s state for %p %lld\n",
4698                 ceph_cap_string(ci->i_flushing_caps),
4699                 inode, ceph_ino(inode));
4700             ci->i_flushing_caps = 0;
4701             list_del_init(&ci->i_flushing_item);
4702             mdsc->num_cap_flushing--;
4703             dirty_dropped = true;
4704         }
4705         spin_unlock(&mdsc->cap_dirty_lock);
4706 
4707         if (dirty_dropped) {
4708             mapping_set_error(inode->i_mapping, -EIO);
4709 
4710             if (ci->i_wrbuffer_ref_head == 0 &&
4711                 ci->i_wr_ref == 0 &&
4712                 ci->i_dirty_caps == 0 &&
4713                 ci->i_flushing_caps == 0) {
4714                 ceph_put_snap_context(ci->i_head_snapc);
4715                 ci->i_head_snapc = NULL;
4716             }
4717         }
4718 
4719         if (atomic_read(&ci->i_filelock_ref) > 0) {
4720             /* make further file lock syscall return -EIO */
4721             ci->i_ceph_flags |= CEPH_I_ERROR_FILELOCK;
4722             pr_warn_ratelimited(" dropping file locks for %p %lld\n",
4723                         inode, ceph_ino(inode));
4724         }
4725 
4726         if (!ci->i_dirty_caps && ci->i_prealloc_cap_flush) {
4727             cf = ci->i_prealloc_cap_flush;
4728             ci->i_prealloc_cap_flush = NULL;
4729             if (!cf->is_capsnap)
4730                 ceph_free_cap_flush(cf);
4731         }
4732 
4733         if (!list_empty(&ci->i_cap_snaps))
4734             iputs = remove_capsnaps(mdsc, inode);
4735     }
4736     if (dirty_dropped)
4737         ++iputs;
4738     return iputs;
4739 }