Author: mjg
Date: Sat Oct 24 13:30:37 2020
New Revision: 366997
URL: https://svnweb.freebsd.org/changeset/base/366997

Log:
  vfs: fix a race where reclaim vholds freed vnodes
  
  Reported by:  pho
  Tested by:    pho (previous version)
  Fixes:        r366974 ("vfs: stop taking the interlock in vnode reclaim")

Modified:
  head/sys/kern/vfs_subr.c

Modified: head/sys/kern/vfs_subr.c
==============================================================================
--- head/sys/kern/vfs_subr.c    Sat Oct 24 13:16:10 2020        (r366996)
+++ head/sys/kern/vfs_subr.c    Sat Oct 24 13:30:37 2020        (r366997)
@@ -109,6 +109,7 @@ static void syncer_shutdown(void *arg, int howto);
 static int     vtryrecycle(struct vnode *vp);
 static void    v_init_counters(struct vnode *);
 static void    vgonel(struct vnode *);
+static bool    vhold_recycle(struct vnode *);
 static void    vfs_knllock(void *arg);
 static void    vfs_knlunlock(void *arg);
 static void    vfs_knl_assert_locked(void *arg);
@@ -1126,7 +1127,8 @@ restart:
                        goto next_iter;
                }
 
-               vhold(vp);
+               if (!vhold_recycle(vp))
+                       goto next_iter;
                TAILQ_REMOVE(&vnode_list, mvp, v_vnodelist);
                TAILQ_INSERT_AFTER(&vnode_list, vp, mvp, v_vnodelist);
                mtx_unlock(&vnode_list_mtx);
@@ -1231,7 +1233,8 @@ restart:
                if (__predict_false(vp->v_type == VBAD || vp->v_type == VNON)) {
                        continue;
                }
-               vhold(vp);
+               if (!vhold_recycle(vp))
+                       continue;
                count--;
                mtx_unlock(&vnode_list_mtx);
                vtryrecycle(vp);
@@ -3248,13 +3251,11 @@ vholdnz(struct vnode *vp)
  * However, while this is more performant, it hinders debugging by eliminating
  * the previously mentioned invariant.
  */
-bool
-vhold_smr(struct vnode *vp)
+static bool __always_inline
+_vhold_cond(struct vnode *vp)
 {
        int count;
 
-       VFS_SMR_ASSERT_ENTERED();
-
        count = atomic_load_int(&vp->v_holdcnt);
        for (;;) {
                if (count & VHOLD_NO_SMR) {
@@ -3270,6 +3271,28 @@ vhold_smr(struct vnode *vp)
                        return (true);
                }
        }
+}
+
+bool
+vhold_smr(struct vnode *vp)
+{
+
+       VFS_SMR_ASSERT_ENTERED();
+       return (_vhold_cond(vp));
+}
+
+/*
+ * Special case for vnode recycling.
+ *
+ * Vnodes are present on the global list until UMA takes them out.
+ * Attempts to recycle only need the relevant lock and have no use for SMR.
+ */
+static bool
+vhold_recycle(struct vnode *vp)
+{
+
+       mtx_assert(&vnode_list_mtx, MA_OWNED);
+       return (_vhold_cond(vp));
 }
 
 static void __noinline
_______________________________________________
svn-src-head@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-head
To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"

Reply via email to