xref: /openbmc/linux/fs/ceph/caps.c (revision 176f011b)
1 // SPDX-License-Identifier: GPL-2.0
2 #include <linux/ceph/ceph_debug.h>
3 
4 #include <linux/fs.h>
5 #include <linux/kernel.h>
6 #include <linux/sched/signal.h>
7 #include <linux/slab.h>
8 #include <linux/vmalloc.h>
9 #include <linux/wait.h>
10 #include <linux/writeback.h>
11 
12 #include "super.h"
13 #include "mds_client.h"
14 #include "cache.h"
15 #include <linux/ceph/decode.h>
16 #include <linux/ceph/messenger.h>
17 
18 /*
19  * Capability management
20  *
21  * The Ceph metadata servers control client access to inode metadata
22  * and file data by issuing capabilities, granting clients permission
23  * to read and/or write both inode field and file data to OSDs
24  * (storage nodes).  Each capability consists of a set of bits
25  * indicating which operations are allowed.
26  *
27  * If the client holds a *_SHARED cap, the client has a coherent value
28  * that can be safely read from the cached inode.
29  *
30  * In the case of a *_EXCL (exclusive) or FILE_WR capabilities, the
31  * client is allowed to change inode attributes (e.g., file size,
32  * mtime), note its dirty state in the ceph_cap, and asynchronously
33  * flush that metadata change to the MDS.
34  *
35  * In the event of a conflicting operation (perhaps by another
36  * client), the MDS will revoke the conflicting client capabilities.
37  *
38  * In order for a client to cache an inode, it must hold a capability
39  * with at least one MDS server.  When inodes are released, release
40  * notifications are batched and periodically sent en masse to the MDS
41  * cluster to release server state.
42  */
43 
44 static u64 __get_oldest_flush_tid(struct ceph_mds_client *mdsc);
45 static void __kick_flushing_caps(struct ceph_mds_client *mdsc,
46 				 struct ceph_mds_session *session,
47 				 struct ceph_inode_info *ci,
48 				 u64 oldest_flush_tid);
49 
50 /*
51  * Generate readable cap strings for debugging output.
52  */
53 #define MAX_CAP_STR 20
54 static char cap_str[MAX_CAP_STR][40];
55 static DEFINE_SPINLOCK(cap_str_lock);
56 static int last_cap_str;
57 
58 static char *gcap_string(char *s, int c)
59 {
60 	if (c & CEPH_CAP_GSHARED)
61 		*s++ = 's';
62 	if (c & CEPH_CAP_GEXCL)
63 		*s++ = 'x';
64 	if (c & CEPH_CAP_GCACHE)
65 		*s++ = 'c';
66 	if (c & CEPH_CAP_GRD)
67 		*s++ = 'r';
68 	if (c & CEPH_CAP_GWR)
69 		*s++ = 'w';
70 	if (c & CEPH_CAP_GBUFFER)
71 		*s++ = 'b';
72 	if (c & CEPH_CAP_GWREXTEND)
73 		*s++ = 'a';
74 	if (c & CEPH_CAP_GLAZYIO)
75 		*s++ = 'l';
76 	return s;
77 }
78 
79 const char *ceph_cap_string(int caps)
80 {
81 	int i;
82 	char *s;
83 	int c;
84 
85 	spin_lock(&cap_str_lock);
86 	i = last_cap_str++;
87 	if (last_cap_str == MAX_CAP_STR)
88 		last_cap_str = 0;
89 	spin_unlock(&cap_str_lock);
90 
91 	s = cap_str[i];
92 
93 	if (caps & CEPH_CAP_PIN)
94 		*s++ = 'p';
95 
96 	c = (caps >> CEPH_CAP_SAUTH) & 3;
97 	if (c) {
98 		*s++ = 'A';
99 		s = gcap_string(s, c);
100 	}
101 
102 	c = (caps >> CEPH_CAP_SLINK) & 3;
103 	if (c) {
104 		*s++ = 'L';
105 		s = gcap_string(s, c);
106 	}
107 
108 	c = (caps >> CEPH_CAP_SXATTR) & 3;
109 	if (c) {
110 		*s++ = 'X';
111 		s = gcap_string(s, c);
112 	}
113 
114 	c = caps >> CEPH_CAP_SFILE;
115 	if (c) {
116 		*s++ = 'F';
117 		s = gcap_string(s, c);
118 	}
119 
120 	if (s == cap_str[i])
121 		*s++ = '-';
122 	*s = 0;
123 	return cap_str[i];
124 }
125 
126 void ceph_caps_init(struct ceph_mds_client *mdsc)
127 {
128 	INIT_LIST_HEAD(&mdsc->caps_list);
129 	spin_lock_init(&mdsc->caps_list_lock);
130 }
131 
132 void ceph_caps_finalize(struct ceph_mds_client *mdsc)
133 {
134 	struct ceph_cap *cap;
135 
136 	spin_lock(&mdsc->caps_list_lock);
137 	while (!list_empty(&mdsc->caps_list)) {
138 		cap = list_first_entry(&mdsc->caps_list,
139 				       struct ceph_cap, caps_item);
140 		list_del(&cap->caps_item);
141 		kmem_cache_free(ceph_cap_cachep, cap);
142 	}
143 	mdsc->caps_total_count = 0;
144 	mdsc->caps_avail_count = 0;
145 	mdsc->caps_use_count = 0;
146 	mdsc->caps_reserve_count = 0;
147 	mdsc->caps_min_count = 0;
148 	spin_unlock(&mdsc->caps_list_lock);
149 }
150 
151 void ceph_adjust_min_caps(struct ceph_mds_client *mdsc, int delta)
152 {
153 	spin_lock(&mdsc->caps_list_lock);
154 	mdsc->caps_min_count += delta;
155 	BUG_ON(mdsc->caps_min_count < 0);
156 	spin_unlock(&mdsc->caps_list_lock);
157 }
158 
159 static void __ceph_unreserve_caps(struct ceph_mds_client *mdsc, int nr_caps)
160 {
161 	struct ceph_cap *cap;
162 	int i;
163 
164 	if (nr_caps) {
165 		BUG_ON(mdsc->caps_reserve_count < nr_caps);
166 		mdsc->caps_reserve_count -= nr_caps;
167 		if (mdsc->caps_avail_count >=
168 		    mdsc->caps_reserve_count + mdsc->caps_min_count) {
169 			mdsc->caps_total_count -= nr_caps;
170 			for (i = 0; i < nr_caps; i++) {
171 				cap = list_first_entry(&mdsc->caps_list,
172 					struct ceph_cap, caps_item);
173 				list_del(&cap->caps_item);
174 				kmem_cache_free(ceph_cap_cachep, cap);
175 			}
176 		} else {
177 			mdsc->caps_avail_count += nr_caps;
178 		}
179 
180 		dout("%s: caps %d = %d used + %d resv + %d avail\n",
181 		     __func__,
182 		     mdsc->caps_total_count, mdsc->caps_use_count,
183 		     mdsc->caps_reserve_count, mdsc->caps_avail_count);
184 		BUG_ON(mdsc->caps_total_count != mdsc->caps_use_count +
185 						 mdsc->caps_reserve_count +
186 						 mdsc->caps_avail_count);
187 	}
188 }
189 
190 /*
191  * Called under mdsc->mutex.
192  */
193 int ceph_reserve_caps(struct ceph_mds_client *mdsc,
194 		      struct ceph_cap_reservation *ctx, int need)
195 {
196 	int i, j;
197 	struct ceph_cap *cap;
198 	int have;
199 	int alloc = 0;
200 	int max_caps;
201 	int err = 0;
202 	bool trimmed = false;
203 	struct ceph_mds_session *s;
204 	LIST_HEAD(newcaps);
205 
206 	dout("reserve caps ctx=%p need=%d\n", ctx, need);
207 
208 	/* first reserve any caps that are already allocated */
209 	spin_lock(&mdsc->caps_list_lock);
210 	if (mdsc->caps_avail_count >= need)
211 		have = need;
212 	else
213 		have = mdsc->caps_avail_count;
214 	mdsc->caps_avail_count -= have;
215 	mdsc->caps_reserve_count += have;
216 	BUG_ON(mdsc->caps_total_count != mdsc->caps_use_count +
217 					 mdsc->caps_reserve_count +
218 					 mdsc->caps_avail_count);
219 	spin_unlock(&mdsc->caps_list_lock);
220 
221 	for (i = have; i < need; ) {
222 		cap = kmem_cache_alloc(ceph_cap_cachep, GFP_NOFS);
223 		if (cap) {
224 			list_add(&cap->caps_item, &newcaps);
225 			alloc++;
226 			i++;
227 			continue;
228 		}
229 
230 		if (!trimmed) {
231 			for (j = 0; j < mdsc->max_sessions; j++) {
232 				s = __ceph_lookup_mds_session(mdsc, j);
233 				if (!s)
234 					continue;
235 				mutex_unlock(&mdsc->mutex);
236 
237 				mutex_lock(&s->s_mutex);
238 				max_caps = s->s_nr_caps - (need - i);
239 				ceph_trim_caps(mdsc, s, max_caps);
240 				mutex_unlock(&s->s_mutex);
241 
242 				ceph_put_mds_session(s);
243 				mutex_lock(&mdsc->mutex);
244 			}
245 			trimmed = true;
246 
247 			spin_lock(&mdsc->caps_list_lock);
248 			if (mdsc->caps_avail_count) {
249 				int more_have;
250 				if (mdsc->caps_avail_count >= need - i)
251 					more_have = need - i;
252 				else
253 					more_have = mdsc->caps_avail_count;
254 
255 				i += more_have;
256 				have += more_have;
257 				mdsc->caps_avail_count -= more_have;
258 				mdsc->caps_reserve_count += more_have;
259 
260 			}
261 			spin_unlock(&mdsc->caps_list_lock);
262 
263 			continue;
264 		}
265 
266 		pr_warn("reserve caps ctx=%p ENOMEM need=%d got=%d\n",
267 			ctx, need, have + alloc);
268 		err = -ENOMEM;
269 		break;
270 	}
271 
272 	if (!err) {
273 		BUG_ON(have + alloc != need);
274 		ctx->count = need;
275 	}
276 
277 	spin_lock(&mdsc->caps_list_lock);
278 	mdsc->caps_total_count += alloc;
279 	mdsc->caps_reserve_count += alloc;
280 	list_splice(&newcaps, &mdsc->caps_list);
281 
282 	BUG_ON(mdsc->caps_total_count != mdsc->caps_use_count +
283 					 mdsc->caps_reserve_count +
284 					 mdsc->caps_avail_count);
285 
286 	if (err)
287 		__ceph_unreserve_caps(mdsc, have + alloc);
288 
289 	spin_unlock(&mdsc->caps_list_lock);
290 
291 	dout("reserve caps ctx=%p %d = %d used + %d resv + %d avail\n",
292 	     ctx, mdsc->caps_total_count, mdsc->caps_use_count,
293 	     mdsc->caps_reserve_count, mdsc->caps_avail_count);
294 	return err;
295 }
296 
297 void ceph_unreserve_caps(struct ceph_mds_client *mdsc,
298 			struct ceph_cap_reservation *ctx)
299 {
300 	dout("unreserve caps ctx=%p count=%d\n", ctx, ctx->count);
301 	spin_lock(&mdsc->caps_list_lock);
302 	__ceph_unreserve_caps(mdsc, ctx->count);
303 	ctx->count = 0;
304 	spin_unlock(&mdsc->caps_list_lock);
305 }
306 
307 struct ceph_cap *ceph_get_cap(struct ceph_mds_client *mdsc,
308 			      struct ceph_cap_reservation *ctx)
309 {
310 	struct ceph_cap *cap = NULL;
311 
312 	/* temporary, until we do something about cap import/export */
313 	if (!ctx) {
314 		cap = kmem_cache_alloc(ceph_cap_cachep, GFP_NOFS);
315 		if (cap) {
316 			spin_lock(&mdsc->caps_list_lock);
317 			mdsc->caps_use_count++;
318 			mdsc->caps_total_count++;
319 			spin_unlock(&mdsc->caps_list_lock);
320 		} else {
321 			spin_lock(&mdsc->caps_list_lock);
322 			if (mdsc->caps_avail_count) {
323 				BUG_ON(list_empty(&mdsc->caps_list));
324 
325 				mdsc->caps_avail_count--;
326 				mdsc->caps_use_count++;
327 				cap = list_first_entry(&mdsc->caps_list,
328 						struct ceph_cap, caps_item);
329 				list_del(&cap->caps_item);
330 
331 				BUG_ON(mdsc->caps_total_count != mdsc->caps_use_count +
332 				       mdsc->caps_reserve_count + mdsc->caps_avail_count);
333 			}
334 			spin_unlock(&mdsc->caps_list_lock);
335 		}
336 
337 		return cap;
338 	}
339 
340 	spin_lock(&mdsc->caps_list_lock);
341 	dout("get_cap ctx=%p (%d) %d = %d used + %d resv + %d avail\n",
342 	     ctx, ctx->count, mdsc->caps_total_count, mdsc->caps_use_count,
343 	     mdsc->caps_reserve_count, mdsc->caps_avail_count);
344 	BUG_ON(!ctx->count);
345 	BUG_ON(ctx->count > mdsc->caps_reserve_count);
346 	BUG_ON(list_empty(&mdsc->caps_list));
347 
348 	ctx->count--;
349 	mdsc->caps_reserve_count--;
350 	mdsc->caps_use_count++;
351 
352 	cap = list_first_entry(&mdsc->caps_list, struct ceph_cap, caps_item);
353 	list_del(&cap->caps_item);
354 
355 	BUG_ON(mdsc->caps_total_count != mdsc->caps_use_count +
356 	       mdsc->caps_reserve_count + mdsc->caps_avail_count);
357 	spin_unlock(&mdsc->caps_list_lock);
358 	return cap;
359 }
360 
361 void ceph_put_cap(struct ceph_mds_client *mdsc, struct ceph_cap *cap)
362 {
363 	spin_lock(&mdsc->caps_list_lock);
364 	dout("put_cap %p %d = %d used + %d resv + %d avail\n",
365 	     cap, mdsc->caps_total_count, mdsc->caps_use_count,
366 	     mdsc->caps_reserve_count, mdsc->caps_avail_count);
367 	mdsc->caps_use_count--;
368 	/*
369 	 * Keep some preallocated caps around (ceph_min_count), to
370 	 * avoid lots of free/alloc churn.
371 	 */
372 	if (mdsc->caps_avail_count >= mdsc->caps_reserve_count +
373 				      mdsc->caps_min_count) {
374 		mdsc->caps_total_count--;
375 		kmem_cache_free(ceph_cap_cachep, cap);
376 	} else {
377 		mdsc->caps_avail_count++;
378 		list_add(&cap->caps_item, &mdsc->caps_list);
379 	}
380 
381 	BUG_ON(mdsc->caps_total_count != mdsc->caps_use_count +
382 	       mdsc->caps_reserve_count + mdsc->caps_avail_count);
383 	spin_unlock(&mdsc->caps_list_lock);
384 }
385 
386 void ceph_reservation_status(struct ceph_fs_client *fsc,
387 			     int *total, int *avail, int *used, int *reserved,
388 			     int *min)
389 {
390 	struct ceph_mds_client *mdsc = fsc->mdsc;
391 
392 	spin_lock(&mdsc->caps_list_lock);
393 
394 	if (total)
395 		*total = mdsc->caps_total_count;
396 	if (avail)
397 		*avail = mdsc->caps_avail_count;
398 	if (used)
399 		*used = mdsc->caps_use_count;
400 	if (reserved)
401 		*reserved = mdsc->caps_reserve_count;
402 	if (min)
403 		*min = mdsc->caps_min_count;
404 
405 	spin_unlock(&mdsc->caps_list_lock);
406 }
407 
408 /*
409  * Find ceph_cap for given mds, if any.
410  *
411  * Called with i_ceph_lock held.
412  */
413 static struct ceph_cap *__get_cap_for_mds(struct ceph_inode_info *ci, int mds)
414 {
415 	struct ceph_cap *cap;
416 	struct rb_node *n = ci->i_caps.rb_node;
417 
418 	while (n) {
419 		cap = rb_entry(n, struct ceph_cap, ci_node);
420 		if (mds < cap->mds)
421 			n = n->rb_left;
422 		else if (mds > cap->mds)
423 			n = n->rb_right;
424 		else
425 			return cap;
426 	}
427 	return NULL;
428 }
429 
430 struct ceph_cap *ceph_get_cap_for_mds(struct ceph_inode_info *ci, int mds)
431 {
432 	struct ceph_cap *cap;
433 
434 	spin_lock(&ci->i_ceph_lock);
435 	cap = __get_cap_for_mds(ci, mds);
436 	spin_unlock(&ci->i_ceph_lock);
437 	return cap;
438 }
439 
440 /*
441  * Return id of any MDS with a cap, preferably FILE_WR|BUFFER|EXCL, else -1.
442  */
443 static int __ceph_get_cap_mds(struct ceph_inode_info *ci)
444 {
445 	struct ceph_cap *cap;
446 	int mds = -1;
447 	struct rb_node *p;
448 
449 	/* prefer mds with WR|BUFFER|EXCL caps */
450 	for (p = rb_first(&ci->i_caps); p; p = rb_next(p)) {
451 		cap = rb_entry(p, struct ceph_cap, ci_node);
452 		mds = cap->mds;
453 		if (cap->issued & (CEPH_CAP_FILE_WR |
454 				   CEPH_CAP_FILE_BUFFER |
455 				   CEPH_CAP_FILE_EXCL))
456 			break;
457 	}
458 	return mds;
459 }
460 
461 int ceph_get_cap_mds(struct inode *inode)
462 {
463 	struct ceph_inode_info *ci = ceph_inode(inode);
464 	int mds;
465 	spin_lock(&ci->i_ceph_lock);
466 	mds = __ceph_get_cap_mds(ceph_inode(inode));
467 	spin_unlock(&ci->i_ceph_lock);
468 	return mds;
469 }
470 
471 /*
472  * Called under i_ceph_lock.
473  */
474 static void __insert_cap_node(struct ceph_inode_info *ci,
475 			      struct ceph_cap *new)
476 {
477 	struct rb_node **p = &ci->i_caps.rb_node;
478 	struct rb_node *parent = NULL;
479 	struct ceph_cap *cap = NULL;
480 
481 	while (*p) {
482 		parent = *p;
483 		cap = rb_entry(parent, struct ceph_cap, ci_node);
484 		if (new->mds < cap->mds)
485 			p = &(*p)->rb_left;
486 		else if (new->mds > cap->mds)
487 			p = &(*p)->rb_right;
488 		else
489 			BUG();
490 	}
491 
492 	rb_link_node(&new->ci_node, parent, p);
493 	rb_insert_color(&new->ci_node, &ci->i_caps);
494 }
495 
496 /*
497  * (re)set cap hold timeouts, which control the delayed release
498  * of unused caps back to the MDS.  Should be called on cap use.
499  */
500 static void __cap_set_timeouts(struct ceph_mds_client *mdsc,
501 			       struct ceph_inode_info *ci)
502 {
503 	struct ceph_mount_options *ma = mdsc->fsc->mount_options;
504 
505 	ci->i_hold_caps_min = round_jiffies(jiffies +
506 					    ma->caps_wanted_delay_min * HZ);
507 	ci->i_hold_caps_max = round_jiffies(jiffies +
508 					    ma->caps_wanted_delay_max * HZ);
509 	dout("__cap_set_timeouts %p min %lu max %lu\n", &ci->vfs_inode,
510 	     ci->i_hold_caps_min - jiffies, ci->i_hold_caps_max - jiffies);
511 }
512 
513 /*
514  * (Re)queue cap at the end of the delayed cap release list.
515  *
516  * If I_FLUSH is set, leave the inode at the front of the list.
517  *
518  * Caller holds i_ceph_lock
519  *    -> we take mdsc->cap_delay_lock
520  */
521 static void __cap_delay_requeue(struct ceph_mds_client *mdsc,
522 				struct ceph_inode_info *ci,
523 				bool set_timeout)
524 {
525 	dout("__cap_delay_requeue %p flags %d at %lu\n", &ci->vfs_inode,
526 	     ci->i_ceph_flags, ci->i_hold_caps_max);
527 	if (!mdsc->stopping) {
528 		spin_lock(&mdsc->cap_delay_lock);
529 		if (!list_empty(&ci->i_cap_delay_list)) {
530 			if (ci->i_ceph_flags & CEPH_I_FLUSH)
531 				goto no_change;
532 			list_del_init(&ci->i_cap_delay_list);
533 		}
534 		if (set_timeout)
535 			__cap_set_timeouts(mdsc, ci);
536 		list_add_tail(&ci->i_cap_delay_list, &mdsc->cap_delay_list);
537 no_change:
538 		spin_unlock(&mdsc->cap_delay_lock);
539 	}
540 }
541 
542 /*
543  * Queue an inode for immediate writeback.  Mark inode with I_FLUSH,
544  * indicating we should send a cap message to flush dirty metadata
545  * asap, and move to the front of the delayed cap list.
546  */
547 static void __cap_delay_requeue_front(struct ceph_mds_client *mdsc,
548 				      struct ceph_inode_info *ci)
549 {
550 	dout("__cap_delay_requeue_front %p\n", &ci->vfs_inode);
551 	spin_lock(&mdsc->cap_delay_lock);
552 	ci->i_ceph_flags |= CEPH_I_FLUSH;
553 	if (!list_empty(&ci->i_cap_delay_list))
554 		list_del_init(&ci->i_cap_delay_list);
555 	list_add(&ci->i_cap_delay_list, &mdsc->cap_delay_list);
556 	spin_unlock(&mdsc->cap_delay_lock);
557 }
558 
559 /*
560  * Cancel delayed work on cap.
561  *
562  * Caller must hold i_ceph_lock.
563  */
564 static void __cap_delay_cancel(struct ceph_mds_client *mdsc,
565 			       struct ceph_inode_info *ci)
566 {
567 	dout("__cap_delay_cancel %p\n", &ci->vfs_inode);
568 	if (list_empty(&ci->i_cap_delay_list))
569 		return;
570 	spin_lock(&mdsc->cap_delay_lock);
571 	list_del_init(&ci->i_cap_delay_list);
572 	spin_unlock(&mdsc->cap_delay_lock);
573 }
574 
575 /*
576  * Common issue checks for add_cap, handle_cap_grant.
577  */
578 static void __check_cap_issue(struct ceph_inode_info *ci, struct ceph_cap *cap,
579 			      unsigned issued)
580 {
581 	unsigned had = __ceph_caps_issued(ci, NULL);
582 
583 	/*
584 	 * Each time we receive FILE_CACHE anew, we increment
585 	 * i_rdcache_gen.
586 	 */
587 	if ((issued & (CEPH_CAP_FILE_CACHE|CEPH_CAP_FILE_LAZYIO)) &&
588 	    (had & (CEPH_CAP_FILE_CACHE|CEPH_CAP_FILE_LAZYIO)) == 0) {
589 		ci->i_rdcache_gen++;
590 	}
591 
592 	/*
593 	 * If FILE_SHARED is newly issued, mark dir not complete. We don't
594 	 * know what happened to this directory while we didn't have the cap.
595 	 * If FILE_SHARED is being revoked, also mark dir not complete. It
596 	 * stops on-going cached readdir.
597 	 */
598 	if ((issued & CEPH_CAP_FILE_SHARED) != (had & CEPH_CAP_FILE_SHARED)) {
599 		if (issued & CEPH_CAP_FILE_SHARED)
600 			atomic_inc(&ci->i_shared_gen);
601 		if (S_ISDIR(ci->vfs_inode.i_mode)) {
602 			dout(" marking %p NOT complete\n", &ci->vfs_inode);
603 			__ceph_dir_clear_complete(ci);
604 		}
605 	}
606 }
607 
608 /*
609  * Add a capability under the given MDS session.
610  *
611  * Caller should hold session snap_rwsem (read) and s_mutex.
612  *
613  * @fmode is the open file mode, if we are opening a file, otherwise
614  * it is < 0.  (This is so we can atomically add the cap and add an
615  * open file reference to it.)
616  */
617 void ceph_add_cap(struct inode *inode,
618 		  struct ceph_mds_session *session, u64 cap_id,
619 		  int fmode, unsigned issued, unsigned wanted,
620 		  unsigned seq, unsigned mseq, u64 realmino, int flags,
621 		  struct ceph_cap **new_cap)
622 {
623 	struct ceph_mds_client *mdsc = ceph_inode_to_client(inode)->mdsc;
624 	struct ceph_inode_info *ci = ceph_inode(inode);
625 	struct ceph_cap *cap;
626 	int mds = session->s_mds;
627 	int actual_wanted;
628 
629 	dout("add_cap %p mds%d cap %llx %s seq %d\n", inode,
630 	     session->s_mds, cap_id, ceph_cap_string(issued), seq);
631 
632 	/*
633 	 * If we are opening the file, include file mode wanted bits
634 	 * in wanted.
635 	 */
636 	if (fmode >= 0)
637 		wanted |= ceph_caps_for_mode(fmode);
638 
639 	cap = __get_cap_for_mds(ci, mds);
640 	if (!cap) {
641 		cap = *new_cap;
642 		*new_cap = NULL;
643 
644 		cap->issued = 0;
645 		cap->implemented = 0;
646 		cap->mds = mds;
647 		cap->mds_wanted = 0;
648 		cap->mseq = 0;
649 
650 		cap->ci = ci;
651 		__insert_cap_node(ci, cap);
652 
653 		/* add to session cap list */
654 		cap->session = session;
655 		spin_lock(&session->s_cap_lock);
656 		list_add_tail(&cap->session_caps, &session->s_caps);
657 		session->s_nr_caps++;
658 		spin_unlock(&session->s_cap_lock);
659 	} else {
660 		if (cap->cap_gen < session->s_cap_gen)
661 			cap->issued = cap->implemented = CEPH_CAP_PIN;
662 
663 		/*
664 		 * auth mds of the inode changed. we received the cap export
665 		 * message, but still haven't received the cap import message.
666 		 * handle_cap_export() updated the new auth MDS' cap.
667 		 *
668 		 * "ceph_seq_cmp(seq, cap->seq) <= 0" means we are processing
669 		 * a message that was send before the cap import message. So
670 		 * don't remove caps.
671 		 */
672 		if (ceph_seq_cmp(seq, cap->seq) <= 0) {
673 			WARN_ON(cap != ci->i_auth_cap);
674 			WARN_ON(cap->cap_id != cap_id);
675 			seq = cap->seq;
676 			mseq = cap->mseq;
677 			issued |= cap->issued;
678 			flags |= CEPH_CAP_FLAG_AUTH;
679 		}
680 	}
681 
682 	if (!ci->i_snap_realm ||
683 	    ((flags & CEPH_CAP_FLAG_AUTH) &&
684 	     realmino != (u64)-1 && ci->i_snap_realm->ino != realmino)) {
685 		/*
686 		 * add this inode to the appropriate snap realm
687 		 */
688 		struct ceph_snap_realm *realm = ceph_lookup_snap_realm(mdsc,
689 							       realmino);
690 		if (realm) {
691 			struct ceph_snap_realm *oldrealm = ci->i_snap_realm;
692 			if (oldrealm) {
693 				spin_lock(&oldrealm->inodes_with_caps_lock);
694 				list_del_init(&ci->i_snap_realm_item);
695 				spin_unlock(&oldrealm->inodes_with_caps_lock);
696 			}
697 
698 			spin_lock(&realm->inodes_with_caps_lock);
699 			list_add(&ci->i_snap_realm_item,
700 				 &realm->inodes_with_caps);
701 			ci->i_snap_realm = realm;
702 			if (realm->ino == ci->i_vino.ino)
703 				realm->inode = inode;
704 			spin_unlock(&realm->inodes_with_caps_lock);
705 
706 			if (oldrealm)
707 				ceph_put_snap_realm(mdsc, oldrealm);
708 		} else {
709 			pr_err("ceph_add_cap: couldn't find snap realm %llx\n",
710 			       realmino);
711 			WARN_ON(!realm);
712 		}
713 	}
714 
715 	__check_cap_issue(ci, cap, issued);
716 
717 	/*
718 	 * If we are issued caps we don't want, or the mds' wanted
719 	 * value appears to be off, queue a check so we'll release
720 	 * later and/or update the mds wanted value.
721 	 */
722 	actual_wanted = __ceph_caps_wanted(ci);
723 	if ((wanted & ~actual_wanted) ||
724 	    (issued & ~actual_wanted & CEPH_CAP_ANY_WR)) {
725 		dout(" issued %s, mds wanted %s, actual %s, queueing\n",
726 		     ceph_cap_string(issued), ceph_cap_string(wanted),
727 		     ceph_cap_string(actual_wanted));
728 		__cap_delay_requeue(mdsc, ci, true);
729 	}
730 
731 	if (flags & CEPH_CAP_FLAG_AUTH) {
732 		if (!ci->i_auth_cap ||
733 		    ceph_seq_cmp(ci->i_auth_cap->mseq, mseq) < 0) {
734 			ci->i_auth_cap = cap;
735 			cap->mds_wanted = wanted;
736 		}
737 	} else {
738 		WARN_ON(ci->i_auth_cap == cap);
739 	}
740 
741 	dout("add_cap inode %p (%llx.%llx) cap %p %s now %s seq %d mds%d\n",
742 	     inode, ceph_vinop(inode), cap, ceph_cap_string(issued),
743 	     ceph_cap_string(issued|cap->issued), seq, mds);
744 	cap->cap_id = cap_id;
745 	cap->issued = issued;
746 	cap->implemented |= issued;
747 	if (ceph_seq_cmp(mseq, cap->mseq) > 0)
748 		cap->mds_wanted = wanted;
749 	else
750 		cap->mds_wanted |= wanted;
751 	cap->seq = seq;
752 	cap->issue_seq = seq;
753 	cap->mseq = mseq;
754 	cap->cap_gen = session->s_cap_gen;
755 
756 	if (fmode >= 0)
757 		__ceph_get_fmode(ci, fmode);
758 }
759 
760 /*
761  * Return true if cap has not timed out and belongs to the current
762  * generation of the MDS session (i.e. has not gone 'stale' due to
763  * us losing touch with the mds).
764  */
765 static int __cap_is_valid(struct ceph_cap *cap)
766 {
767 	unsigned long ttl;
768 	u32 gen;
769 
770 	spin_lock(&cap->session->s_gen_ttl_lock);
771 	gen = cap->session->s_cap_gen;
772 	ttl = cap->session->s_cap_ttl;
773 	spin_unlock(&cap->session->s_gen_ttl_lock);
774 
775 	if (cap->cap_gen < gen || time_after_eq(jiffies, ttl)) {
776 		dout("__cap_is_valid %p cap %p issued %s "
777 		     "but STALE (gen %u vs %u)\n", &cap->ci->vfs_inode,
778 		     cap, ceph_cap_string(cap->issued), cap->cap_gen, gen);
779 		return 0;
780 	}
781 
782 	return 1;
783 }
784 
785 /*
786  * Return set of valid cap bits issued to us.  Note that caps time
787  * out, and may be invalidated in bulk if the client session times out
788  * and session->s_cap_gen is bumped.
789  */
790 int __ceph_caps_issued(struct ceph_inode_info *ci, int *implemented)
791 {
792 	int have = ci->i_snap_caps;
793 	struct ceph_cap *cap;
794 	struct rb_node *p;
795 
796 	if (implemented)
797 		*implemented = 0;
798 	for (p = rb_first(&ci->i_caps); p; p = rb_next(p)) {
799 		cap = rb_entry(p, struct ceph_cap, ci_node);
800 		if (!__cap_is_valid(cap))
801 			continue;
802 		dout("__ceph_caps_issued %p cap %p issued %s\n",
803 		     &ci->vfs_inode, cap, ceph_cap_string(cap->issued));
804 		have |= cap->issued;
805 		if (implemented)
806 			*implemented |= cap->implemented;
807 	}
808 	/*
809 	 * exclude caps issued by non-auth MDS, but are been revoking
810 	 * by the auth MDS. The non-auth MDS should be revoking/exporting
811 	 * these caps, but the message is delayed.
812 	 */
813 	if (ci->i_auth_cap) {
814 		cap = ci->i_auth_cap;
815 		have &= ~cap->implemented | cap->issued;
816 	}
817 	return have;
818 }
819 
820 /*
821  * Get cap bits issued by caps other than @ocap
822  */
823 int __ceph_caps_issued_other(struct ceph_inode_info *ci, struct ceph_cap *ocap)
824 {
825 	int have = ci->i_snap_caps;
826 	struct ceph_cap *cap;
827 	struct rb_node *p;
828 
829 	for (p = rb_first(&ci->i_caps); p; p = rb_next(p)) {
830 		cap = rb_entry(p, struct ceph_cap, ci_node);
831 		if (cap == ocap)
832 			continue;
833 		if (!__cap_is_valid(cap))
834 			continue;
835 		have |= cap->issued;
836 	}
837 	return have;
838 }
839 
840 /*
841  * Move a cap to the end of the LRU (oldest caps at list head, newest
842  * at list tail).
843  */
844 static void __touch_cap(struct ceph_cap *cap)
845 {
846 	struct ceph_mds_session *s = cap->session;
847 
848 	spin_lock(&s->s_cap_lock);
849 	if (!s->s_cap_iterator) {
850 		dout("__touch_cap %p cap %p mds%d\n", &cap->ci->vfs_inode, cap,
851 		     s->s_mds);
852 		list_move_tail(&cap->session_caps, &s->s_caps);
853 	} else {
854 		dout("__touch_cap %p cap %p mds%d NOP, iterating over caps\n",
855 		     &cap->ci->vfs_inode, cap, s->s_mds);
856 	}
857 	spin_unlock(&s->s_cap_lock);
858 }
859 
860 /*
861  * Check if we hold the given mask.  If so, move the cap(s) to the
862  * front of their respective LRUs.  (This is the preferred way for
863  * callers to check for caps they want.)
864  */
865 int __ceph_caps_issued_mask(struct ceph_inode_info *ci, int mask, int touch)
866 {
867 	struct ceph_cap *cap;
868 	struct rb_node *p;
869 	int have = ci->i_snap_caps;
870 
871 	if ((have & mask) == mask) {
872 		dout("__ceph_caps_issued_mask %p snap issued %s"
873 		     " (mask %s)\n", &ci->vfs_inode,
874 		     ceph_cap_string(have),
875 		     ceph_cap_string(mask));
876 		return 1;
877 	}
878 
879 	for (p = rb_first(&ci->i_caps); p; p = rb_next(p)) {
880 		cap = rb_entry(p, struct ceph_cap, ci_node);
881 		if (!__cap_is_valid(cap))
882 			continue;
883 		if ((cap->issued & mask) == mask) {
884 			dout("__ceph_caps_issued_mask %p cap %p issued %s"
885 			     " (mask %s)\n", &ci->vfs_inode, cap,
886 			     ceph_cap_string(cap->issued),
887 			     ceph_cap_string(mask));
888 			if (touch)
889 				__touch_cap(cap);
890 			return 1;
891 		}
892 
893 		/* does a combination of caps satisfy mask? */
894 		have |= cap->issued;
895 		if ((have & mask) == mask) {
896 			dout("__ceph_caps_issued_mask %p combo issued %s"
897 			     " (mask %s)\n", &ci->vfs_inode,
898 			     ceph_cap_string(cap->issued),
899 			     ceph_cap_string(mask));
900 			if (touch) {
901 				struct rb_node *q;
902 
903 				/* touch this + preceding caps */
904 				__touch_cap(cap);
905 				for (q = rb_first(&ci->i_caps); q != p;
906 				     q = rb_next(q)) {
907 					cap = rb_entry(q, struct ceph_cap,
908 						       ci_node);
909 					if (!__cap_is_valid(cap))
910 						continue;
911 					__touch_cap(cap);
912 				}
913 			}
914 			return 1;
915 		}
916 	}
917 
918 	return 0;
919 }
920 
921 /*
922  * Return true if mask caps are currently being revoked by an MDS.
923  */
924 int __ceph_caps_revoking_other(struct ceph_inode_info *ci,
925 			       struct ceph_cap *ocap, int mask)
926 {
927 	struct ceph_cap *cap;
928 	struct rb_node *p;
929 
930 	for (p = rb_first(&ci->i_caps); p; p = rb_next(p)) {
931 		cap = rb_entry(p, struct ceph_cap, ci_node);
932 		if (cap != ocap &&
933 		    (cap->implemented & ~cap->issued & mask))
934 			return 1;
935 	}
936 	return 0;
937 }
938 
939 int ceph_caps_revoking(struct ceph_inode_info *ci, int mask)
940 {
941 	struct inode *inode = &ci->vfs_inode;
942 	int ret;
943 
944 	spin_lock(&ci->i_ceph_lock);
945 	ret = __ceph_caps_revoking_other(ci, NULL, mask);
946 	spin_unlock(&ci->i_ceph_lock);
947 	dout("ceph_caps_revoking %p %s = %d\n", inode,
948 	     ceph_cap_string(mask), ret);
949 	return ret;
950 }
951 
952 int __ceph_caps_used(struct ceph_inode_info *ci)
953 {
954 	int used = 0;
955 	if (ci->i_pin_ref)
956 		used |= CEPH_CAP_PIN;
957 	if (ci->i_rd_ref)
958 		used |= CEPH_CAP_FILE_RD;
959 	if (ci->i_rdcache_ref ||
960 	    (!S_ISDIR(ci->vfs_inode.i_mode) && /* ignore readdir cache */
961 	     ci->vfs_inode.i_data.nrpages))
962 		used |= CEPH_CAP_FILE_CACHE;
963 	if (ci->i_wr_ref)
964 		used |= CEPH_CAP_FILE_WR;
965 	if (ci->i_wb_ref || ci->i_wrbuffer_ref)
966 		used |= CEPH_CAP_FILE_BUFFER;
967 	return used;
968 }
969 
970 /*
971  * wanted, by virtue of open file modes
972  */
973 int __ceph_caps_file_wanted(struct ceph_inode_info *ci)
974 {
975 	int i, bits = 0;
976 	for (i = 0; i < CEPH_FILE_MODE_BITS; i++) {
977 		if (ci->i_nr_by_mode[i])
978 			bits |= 1 << i;
979 	}
980 	if (bits == 0)
981 		return 0;
982 	return ceph_caps_for_mode(bits >> 1);
983 }
984 
985 /*
986  * Return caps we have registered with the MDS(s) as 'wanted'.
987  */
988 int __ceph_caps_mds_wanted(struct ceph_inode_info *ci, bool check)
989 {
990 	struct ceph_cap *cap;
991 	struct rb_node *p;
992 	int mds_wanted = 0;
993 
994 	for (p = rb_first(&ci->i_caps); p; p = rb_next(p)) {
995 		cap = rb_entry(p, struct ceph_cap, ci_node);
996 		if (check && !__cap_is_valid(cap))
997 			continue;
998 		if (cap == ci->i_auth_cap)
999 			mds_wanted |= cap->mds_wanted;
1000 		else
1001 			mds_wanted |= (cap->mds_wanted & ~CEPH_CAP_ANY_FILE_WR);
1002 	}
1003 	return mds_wanted;
1004 }
1005 
1006 /*
1007  * called under i_ceph_lock
1008  */
1009 static int __ceph_is_single_caps(struct ceph_inode_info *ci)
1010 {
1011 	return rb_first(&ci->i_caps) == rb_last(&ci->i_caps);
1012 }
1013 
1014 static int __ceph_is_any_caps(struct ceph_inode_info *ci)
1015 {
1016 	return !RB_EMPTY_ROOT(&ci->i_caps);
1017 }
1018 
1019 int ceph_is_any_caps(struct inode *inode)
1020 {
1021 	struct ceph_inode_info *ci = ceph_inode(inode);
1022 	int ret;
1023 
1024 	spin_lock(&ci->i_ceph_lock);
1025 	ret = __ceph_is_any_caps(ci);
1026 	spin_unlock(&ci->i_ceph_lock);
1027 
1028 	return ret;
1029 }
1030 
1031 static void drop_inode_snap_realm(struct ceph_inode_info *ci)
1032 {
1033 	struct ceph_snap_realm *realm = ci->i_snap_realm;
1034 	spin_lock(&realm->inodes_with_caps_lock);
1035 	list_del_init(&ci->i_snap_realm_item);
1036 	ci->i_snap_realm_counter++;
1037 	ci->i_snap_realm = NULL;
1038 	spin_unlock(&realm->inodes_with_caps_lock);
1039 	ceph_put_snap_realm(ceph_sb_to_client(ci->vfs_inode.i_sb)->mdsc,
1040 			    realm);
1041 }
1042 
1043 /*
1044  * Remove a cap.  Take steps to deal with a racing iterate_session_caps.
1045  *
1046  * caller should hold i_ceph_lock.
1047  * caller will not hold session s_mutex if called from destroy_inode.
1048  */
1049 void __ceph_remove_cap(struct ceph_cap *cap, bool queue_release)
1050 {
1051 	struct ceph_mds_session *session = cap->session;
1052 	struct ceph_inode_info *ci = cap->ci;
1053 	struct ceph_mds_client *mdsc =
1054 		ceph_sb_to_client(ci->vfs_inode.i_sb)->mdsc;
1055 	int removed = 0;
1056 
1057 	dout("__ceph_remove_cap %p from %p\n", cap, &ci->vfs_inode);
1058 
1059 	/* remove from session list */
1060 	spin_lock(&session->s_cap_lock);
1061 	if (session->s_cap_iterator == cap) {
1062 		/* not yet, we are iterating over this very cap */
1063 		dout("__ceph_remove_cap  delaying %p removal from session %p\n",
1064 		     cap, cap->session);
1065 	} else {
1066 		list_del_init(&cap->session_caps);
1067 		session->s_nr_caps--;
1068 		cap->session = NULL;
1069 		removed = 1;
1070 	}
1071 	/* protect backpointer with s_cap_lock: see iterate_session_caps */
1072 	cap->ci = NULL;
1073 
1074 	/*
1075 	 * s_cap_reconnect is protected by s_cap_lock. no one changes
1076 	 * s_cap_gen while session is in the reconnect state.
1077 	 */
1078 	if (queue_release &&
1079 	    (!session->s_cap_reconnect || cap->cap_gen == session->s_cap_gen)) {
1080 		cap->queue_release = 1;
1081 		if (removed) {
1082 			list_add_tail(&cap->session_caps,
1083 				      &session->s_cap_releases);
1084 			session->s_num_cap_releases++;
1085 			removed = 0;
1086 		}
1087 	} else {
1088 		cap->queue_release = 0;
1089 	}
1090 	cap->cap_ino = ci->i_vino.ino;
1091 
1092 	spin_unlock(&session->s_cap_lock);
1093 
1094 	/* remove from inode list */
1095 	rb_erase(&cap->ci_node, &ci->i_caps);
1096 	if (ci->i_auth_cap == cap)
1097 		ci->i_auth_cap = NULL;
1098 
1099 	if (removed)
1100 		ceph_put_cap(mdsc, cap);
1101 
1102 	/* when reconnect denied, we remove session caps forcibly,
1103 	 * i_wr_ref can be non-zero. If there are ongoing write,
1104 	 * keep i_snap_realm.
1105 	 */
1106 	if (!__ceph_is_any_caps(ci) && ci->i_wr_ref == 0 && ci->i_snap_realm)
1107 		drop_inode_snap_realm(ci);
1108 
1109 	if (!__ceph_is_any_real_caps(ci))
1110 		__cap_delay_cancel(mdsc, ci);
1111 }
1112 
1113 struct cap_msg_args {
1114 	struct ceph_mds_session	*session;
1115 	u64			ino, cid, follows;
1116 	u64			flush_tid, oldest_flush_tid, size, max_size;
1117 	u64			xattr_version;
1118 	struct ceph_buffer	*xattr_buf;
1119 	struct timespec64	atime, mtime, ctime;
1120 	int			op, caps, wanted, dirty;
1121 	u32			seq, issue_seq, mseq, time_warp_seq;
1122 	u32			flags;
1123 	kuid_t			uid;
1124 	kgid_t			gid;
1125 	umode_t			mode;
1126 	bool			inline_data;
1127 };
1128 
1129 /*
1130  * Build and send a cap message to the given MDS.
1131  *
1132  * Caller should be holding s_mutex.
1133  */
1134 static int send_cap_msg(struct cap_msg_args *arg)
1135 {
1136 	struct ceph_mds_caps *fc;
1137 	struct ceph_msg *msg;
1138 	void *p;
1139 	size_t extra_len;
1140 	struct timespec64 zerotime = {0};
1141 	struct ceph_osd_client *osdc = &arg->session->s_mdsc->fsc->client->osdc;
1142 
1143 	dout("send_cap_msg %s %llx %llx caps %s wanted %s dirty %s"
1144 	     " seq %u/%u tid %llu/%llu mseq %u follows %lld size %llu/%llu"
1145 	     " xattr_ver %llu xattr_len %d\n", ceph_cap_op_name(arg->op),
1146 	     arg->cid, arg->ino, ceph_cap_string(arg->caps),
1147 	     ceph_cap_string(arg->wanted), ceph_cap_string(arg->dirty),
1148 	     arg->seq, arg->issue_seq, arg->flush_tid, arg->oldest_flush_tid,
1149 	     arg->mseq, arg->follows, arg->size, arg->max_size,
1150 	     arg->xattr_version,
1151 	     arg->xattr_buf ? (int)arg->xattr_buf->vec.iov_len : 0);
1152 
1153 	/* flock buffer size + inline version + inline data size +
1154 	 * osd_epoch_barrier + oldest_flush_tid */
1155 	extra_len = 4 + 8 + 4 + 4 + 8 + 4 + 4 + 4 + 8 + 8 + 4;
1156 	msg = ceph_msg_new(CEPH_MSG_CLIENT_CAPS, sizeof(*fc) + extra_len,
1157 			   GFP_NOFS, false);
1158 	if (!msg)
1159 		return -ENOMEM;
1160 
1161 	msg->hdr.version = cpu_to_le16(10);
1162 	msg->hdr.tid = cpu_to_le64(arg->flush_tid);
1163 
1164 	fc = msg->front.iov_base;
1165 	memset(fc, 0, sizeof(*fc));
1166 
1167 	fc->cap_id = cpu_to_le64(arg->cid);
1168 	fc->op = cpu_to_le32(arg->op);
1169 	fc->seq = cpu_to_le32(arg->seq);
1170 	fc->issue_seq = cpu_to_le32(arg->issue_seq);
1171 	fc->migrate_seq = cpu_to_le32(arg->mseq);
1172 	fc->caps = cpu_to_le32(arg->caps);
1173 	fc->wanted = cpu_to_le32(arg->wanted);
1174 	fc->dirty = cpu_to_le32(arg->dirty);
1175 	fc->ino = cpu_to_le64(arg->ino);
1176 	fc->snap_follows = cpu_to_le64(arg->follows);
1177 
1178 	fc->size = cpu_to_le64(arg->size);
1179 	fc->max_size = cpu_to_le64(arg->max_size);
1180 	ceph_encode_timespec64(&fc->mtime, &arg->mtime);
1181 	ceph_encode_timespec64(&fc->atime, &arg->atime);
1182 	ceph_encode_timespec64(&fc->ctime, &arg->ctime);
1183 	fc->time_warp_seq = cpu_to_le32(arg->time_warp_seq);
1184 
1185 	fc->uid = cpu_to_le32(from_kuid(&init_user_ns, arg->uid));
1186 	fc->gid = cpu_to_le32(from_kgid(&init_user_ns, arg->gid));
1187 	fc->mode = cpu_to_le32(arg->mode);
1188 
1189 	fc->xattr_version = cpu_to_le64(arg->xattr_version);
1190 	if (arg->xattr_buf) {
1191 		msg->middle = ceph_buffer_get(arg->xattr_buf);
1192 		fc->xattr_len = cpu_to_le32(arg->xattr_buf->vec.iov_len);
1193 		msg->hdr.middle_len = cpu_to_le32(arg->xattr_buf->vec.iov_len);
1194 	}
1195 
1196 	p = fc + 1;
1197 	/* flock buffer size (version 2) */
1198 	ceph_encode_32(&p, 0);
1199 	/* inline version (version 4) */
1200 	ceph_encode_64(&p, arg->inline_data ? 0 : CEPH_INLINE_NONE);
1201 	/* inline data size */
1202 	ceph_encode_32(&p, 0);
1203 	/*
1204 	 * osd_epoch_barrier (version 5)
1205 	 * The epoch_barrier is protected osdc->lock, so READ_ONCE here in
1206 	 * case it was recently changed
1207 	 */
1208 	ceph_encode_32(&p, READ_ONCE(osdc->epoch_barrier));
1209 	/* oldest_flush_tid (version 6) */
1210 	ceph_encode_64(&p, arg->oldest_flush_tid);
1211 
1212 	/*
1213 	 * caller_uid/caller_gid (version 7)
1214 	 *
1215 	 * Currently, we don't properly track which caller dirtied the caps
1216 	 * last, and force a flush of them when there is a conflict. For now,
1217 	 * just set this to 0:0, to emulate how the MDS has worked up to now.
1218 	 */
1219 	ceph_encode_32(&p, 0);
1220 	ceph_encode_32(&p, 0);
1221 
1222 	/* pool namespace (version 8) (mds always ignores this) */
1223 	ceph_encode_32(&p, 0);
1224 
1225 	/*
1226 	 * btime and change_attr (version 9)
1227 	 *
1228 	 * We just zero these out for now, as the MDS ignores them unless
1229 	 * the requisite feature flags are set (which we don't do yet).
1230 	 */
1231 	ceph_encode_timespec64(p, &zerotime);
1232 	p += sizeof(struct ceph_timespec);
1233 	ceph_encode_64(&p, 0);
1234 
1235 	/* Advisory flags (version 10) */
1236 	ceph_encode_32(&p, arg->flags);
1237 
1238 	ceph_con_send(&arg->session->s_con, msg);
1239 	return 0;
1240 }
1241 
1242 /*
1243  * Queue cap releases when an inode is dropped from our cache.  Since
1244  * inode is about to be destroyed, there is no need for i_ceph_lock.
1245  */
1246 void ceph_queue_caps_release(struct inode *inode)
1247 {
1248 	struct ceph_inode_info *ci = ceph_inode(inode);
1249 	struct rb_node *p;
1250 
1251 	p = rb_first(&ci->i_caps);
1252 	while (p) {
1253 		struct ceph_cap *cap = rb_entry(p, struct ceph_cap, ci_node);
1254 		p = rb_next(p);
1255 		__ceph_remove_cap(cap, true);
1256 	}
1257 }
1258 
1259 /*
1260  * Send a cap msg on the given inode.  Update our caps state, then
1261  * drop i_ceph_lock and send the message.
1262  *
1263  * Make note of max_size reported/requested from mds, revoked caps
1264  * that have now been implemented.
1265  *
1266  * Make half-hearted attempt ot to invalidate page cache if we are
1267  * dropping RDCACHE.  Note that this will leave behind locked pages
1268  * that we'll then need to deal with elsewhere.
1269  *
1270  * Return non-zero if delayed release, or we experienced an error
1271  * such that the caller should requeue + retry later.
1272  *
1273  * called with i_ceph_lock, then drops it.
1274  * caller should hold snap_rwsem (read), s_mutex.
1275  */
1276 static int __send_cap(struct ceph_mds_client *mdsc, struct ceph_cap *cap,
1277 		      int op, bool sync, int used, int want, int retain,
1278 		      int flushing, u64 flush_tid, u64 oldest_flush_tid)
1279 	__releases(cap->ci->i_ceph_lock)
1280 {
1281 	struct ceph_inode_info *ci = cap->ci;
1282 	struct inode *inode = &ci->vfs_inode;
1283 	struct cap_msg_args arg;
1284 	int held, revoking;
1285 	int wake = 0;
1286 	int delayed = 0;
1287 	int ret;
1288 
1289 	held = cap->issued | cap->implemented;
1290 	revoking = cap->implemented & ~cap->issued;
1291 	retain &= ~revoking;
1292 
1293 	dout("__send_cap %p cap %p session %p %s -> %s (revoking %s)\n",
1294 	     inode, cap, cap->session,
1295 	     ceph_cap_string(held), ceph_cap_string(held & retain),
1296 	     ceph_cap_string(revoking));
1297 	BUG_ON((retain & CEPH_CAP_PIN) == 0);
1298 
1299 	arg.session = cap->session;
1300 
1301 	/* don't release wanted unless we've waited a bit. */
1302 	if ((ci->i_ceph_flags & CEPH_I_NODELAY) == 0 &&
1303 	    time_before(jiffies, ci->i_hold_caps_min)) {
1304 		dout(" delaying issued %s -> %s, wanted %s -> %s on send\n",
1305 		     ceph_cap_string(cap->issued),
1306 		     ceph_cap_string(cap->issued & retain),
1307 		     ceph_cap_string(cap->mds_wanted),
1308 		     ceph_cap_string(want));
1309 		want |= cap->mds_wanted;
1310 		retain |= cap->issued;
1311 		delayed = 1;
1312 	}
1313 	ci->i_ceph_flags &= ~(CEPH_I_NODELAY | CEPH_I_FLUSH);
1314 	if (want & ~cap->mds_wanted) {
1315 		/* user space may open/close single file frequently.
1316 		 * This avoids droping mds_wanted immediately after
1317 		 * requesting new mds_wanted.
1318 		 */
1319 		__cap_set_timeouts(mdsc, ci);
1320 	}
1321 
1322 	cap->issued &= retain;  /* drop bits we don't want */
1323 	if (cap->implemented & ~cap->issued) {
1324 		/*
1325 		 * Wake up any waiters on wanted -> needed transition.
1326 		 * This is due to the weird transition from buffered
1327 		 * to sync IO... we need to flush dirty pages _before_
1328 		 * allowing sync writes to avoid reordering.
1329 		 */
1330 		wake = 1;
1331 	}
1332 	cap->implemented &= cap->issued | used;
1333 	cap->mds_wanted = want;
1334 
1335 	arg.ino = ceph_vino(inode).ino;
1336 	arg.cid = cap->cap_id;
1337 	arg.follows = flushing ? ci->i_head_snapc->seq : 0;
1338 	arg.flush_tid = flush_tid;
1339 	arg.oldest_flush_tid = oldest_flush_tid;
1340 
1341 	arg.size = inode->i_size;
1342 	ci->i_reported_size = arg.size;
1343 	arg.max_size = ci->i_wanted_max_size;
1344 	ci->i_requested_max_size = arg.max_size;
1345 
1346 	if (flushing & CEPH_CAP_XATTR_EXCL) {
1347 		__ceph_build_xattrs_blob(ci);
1348 		arg.xattr_version = ci->i_xattrs.version;
1349 		arg.xattr_buf = ci->i_xattrs.blob;
1350 	} else {
1351 		arg.xattr_buf = NULL;
1352 	}
1353 
1354 	arg.mtime = inode->i_mtime;
1355 	arg.atime = inode->i_atime;
1356 	arg.ctime = inode->i_ctime;
1357 
1358 	arg.op = op;
1359 	arg.caps = cap->implemented;
1360 	arg.wanted = want;
1361 	arg.dirty = flushing;
1362 
1363 	arg.seq = cap->seq;
1364 	arg.issue_seq = cap->issue_seq;
1365 	arg.mseq = cap->mseq;
1366 	arg.time_warp_seq = ci->i_time_warp_seq;
1367 
1368 	arg.uid = inode->i_uid;
1369 	arg.gid = inode->i_gid;
1370 	arg.mode = inode->i_mode;
1371 
1372 	arg.inline_data = ci->i_inline_version != CEPH_INLINE_NONE;
1373 	if (list_empty(&ci->i_cap_snaps))
1374 		arg.flags = CEPH_CLIENT_CAPS_NO_CAPSNAP;
1375 	else
1376 		arg.flags = CEPH_CLIENT_CAPS_PENDING_CAPSNAP;
1377 	if (sync)
1378 		arg.flags |= CEPH_CLIENT_CAPS_SYNC;
1379 
1380 	spin_unlock(&ci->i_ceph_lock);
1381 
1382 	ret = send_cap_msg(&arg);
1383 	if (ret < 0) {
1384 		dout("error sending cap msg, must requeue %p\n", inode);
1385 		delayed = 1;
1386 	}
1387 
1388 	if (wake)
1389 		wake_up_all(&ci->i_cap_wq);
1390 
1391 	return delayed;
1392 }
1393 
1394 static inline int __send_flush_snap(struct inode *inode,
1395 				    struct ceph_mds_session *session,
1396 				    struct ceph_cap_snap *capsnap,
1397 				    u32 mseq, u64 oldest_flush_tid)
1398 {
1399 	struct cap_msg_args	arg;
1400 
1401 	arg.session = session;
1402 	arg.ino = ceph_vino(inode).ino;
1403 	arg.cid = 0;
1404 	arg.follows = capsnap->follows;
1405 	arg.flush_tid = capsnap->cap_flush.tid;
1406 	arg.oldest_flush_tid = oldest_flush_tid;
1407 
1408 	arg.size = capsnap->size;
1409 	arg.max_size = 0;
1410 	arg.xattr_version = capsnap->xattr_version;
1411 	arg.xattr_buf = capsnap->xattr_blob;
1412 
1413 	arg.atime = capsnap->atime;
1414 	arg.mtime = capsnap->mtime;
1415 	arg.ctime = capsnap->ctime;
1416 
1417 	arg.op = CEPH_CAP_OP_FLUSHSNAP;
1418 	arg.caps = capsnap->issued;
1419 	arg.wanted = 0;
1420 	arg.dirty = capsnap->dirty;
1421 
1422 	arg.seq = 0;
1423 	arg.issue_seq = 0;
1424 	arg.mseq = mseq;
1425 	arg.time_warp_seq = capsnap->time_warp_seq;
1426 
1427 	arg.uid = capsnap->uid;
1428 	arg.gid = capsnap->gid;
1429 	arg.mode = capsnap->mode;
1430 
1431 	arg.inline_data = capsnap->inline_data;
1432 	arg.flags = 0;
1433 
1434 	return send_cap_msg(&arg);
1435 }
1436 
1437 /*
1438  * When a snapshot is taken, clients accumulate dirty metadata on
1439  * inodes with capabilities in ceph_cap_snaps to describe the file
1440  * state at the time the snapshot was taken.  This must be flushed
1441  * asynchronously back to the MDS once sync writes complete and dirty
1442  * data is written out.
1443  *
1444  * Called under i_ceph_lock.  Takes s_mutex as needed.
1445  */
1446 static void __ceph_flush_snaps(struct ceph_inode_info *ci,
1447 			       struct ceph_mds_session *session)
1448 		__releases(ci->i_ceph_lock)
1449 		__acquires(ci->i_ceph_lock)
1450 {
1451 	struct inode *inode = &ci->vfs_inode;
1452 	struct ceph_mds_client *mdsc = session->s_mdsc;
1453 	struct ceph_cap_snap *capsnap;
1454 	u64 oldest_flush_tid = 0;
1455 	u64 first_tid = 1, last_tid = 0;
1456 
1457 	dout("__flush_snaps %p session %p\n", inode, session);
1458 
1459 	list_for_each_entry(capsnap, &ci->i_cap_snaps, ci_item) {
1460 		/*
1461 		 * we need to wait for sync writes to complete and for dirty
1462 		 * pages to be written out.
1463 		 */
1464 		if (capsnap->dirty_pages || capsnap->writing)
1465 			break;
1466 
1467 		/* should be removed by ceph_try_drop_cap_snap() */
1468 		BUG_ON(!capsnap->need_flush);
1469 
1470 		/* only flush each capsnap once */
1471 		if (capsnap->cap_flush.tid > 0) {
1472 			dout(" already flushed %p, skipping\n", capsnap);
1473 			continue;
1474 		}
1475 
1476 		spin_lock(&mdsc->cap_dirty_lock);
1477 		capsnap->cap_flush.tid = ++mdsc->last_cap_flush_tid;
1478 		list_add_tail(&capsnap->cap_flush.g_list,
1479 			      &mdsc->cap_flush_list);
1480 		if (oldest_flush_tid == 0)
1481 			oldest_flush_tid = __get_oldest_flush_tid(mdsc);
1482 		if (list_empty(&ci->i_flushing_item)) {
1483 			list_add_tail(&ci->i_flushing_item,
1484 				      &session->s_cap_flushing);
1485 		}
1486 		spin_unlock(&mdsc->cap_dirty_lock);
1487 
1488 		list_add_tail(&capsnap->cap_flush.i_list,
1489 			      &ci->i_cap_flush_list);
1490 
1491 		if (first_tid == 1)
1492 			first_tid = capsnap->cap_flush.tid;
1493 		last_tid = capsnap->cap_flush.tid;
1494 	}
1495 
1496 	ci->i_ceph_flags &= ~CEPH_I_FLUSH_SNAPS;
1497 
1498 	while (first_tid <= last_tid) {
1499 		struct ceph_cap *cap = ci->i_auth_cap;
1500 		struct ceph_cap_flush *cf;
1501 		int ret;
1502 
1503 		if (!(cap && cap->session == session)) {
1504 			dout("__flush_snaps %p auth cap %p not mds%d, "
1505 			     "stop\n", inode, cap, session->s_mds);
1506 			break;
1507 		}
1508 
1509 		ret = -ENOENT;
1510 		list_for_each_entry(cf, &ci->i_cap_flush_list, i_list) {
1511 			if (cf->tid >= first_tid) {
1512 				ret = 0;
1513 				break;
1514 			}
1515 		}
1516 		if (ret < 0)
1517 			break;
1518 
1519 		first_tid = cf->tid + 1;
1520 
1521 		capsnap = container_of(cf, struct ceph_cap_snap, cap_flush);
1522 		refcount_inc(&capsnap->nref);
1523 		spin_unlock(&ci->i_ceph_lock);
1524 
1525 		dout("__flush_snaps %p capsnap %p tid %llu %s\n",
1526 		     inode, capsnap, cf->tid, ceph_cap_string(capsnap->dirty));
1527 
1528 		ret = __send_flush_snap(inode, session, capsnap, cap->mseq,
1529 					oldest_flush_tid);
1530 		if (ret < 0) {
1531 			pr_err("__flush_snaps: error sending cap flushsnap, "
1532 			       "ino (%llx.%llx) tid %llu follows %llu\n",
1533 				ceph_vinop(inode), cf->tid, capsnap->follows);
1534 		}
1535 
1536 		ceph_put_cap_snap(capsnap);
1537 		spin_lock(&ci->i_ceph_lock);
1538 	}
1539 }
1540 
1541 void ceph_flush_snaps(struct ceph_inode_info *ci,
1542 		      struct ceph_mds_session **psession)
1543 {
1544 	struct inode *inode = &ci->vfs_inode;
1545 	struct ceph_mds_client *mdsc = ceph_inode_to_client(inode)->mdsc;
1546 	struct ceph_mds_session *session = NULL;
1547 	int mds;
1548 
1549 	dout("ceph_flush_snaps %p\n", inode);
1550 	if (psession)
1551 		session = *psession;
1552 retry:
1553 	spin_lock(&ci->i_ceph_lock);
1554 	if (!(ci->i_ceph_flags & CEPH_I_FLUSH_SNAPS)) {
1555 		dout(" no capsnap needs flush, doing nothing\n");
1556 		goto out;
1557 	}
1558 	if (!ci->i_auth_cap) {
1559 		dout(" no auth cap (migrating?), doing nothing\n");
1560 		goto out;
1561 	}
1562 
1563 	mds = ci->i_auth_cap->session->s_mds;
1564 	if (session && session->s_mds != mds) {
1565 		dout(" oops, wrong session %p mutex\n", session);
1566 		mutex_unlock(&session->s_mutex);
1567 		ceph_put_mds_session(session);
1568 		session = NULL;
1569 	}
1570 	if (!session) {
1571 		spin_unlock(&ci->i_ceph_lock);
1572 		mutex_lock(&mdsc->mutex);
1573 		session = __ceph_lookup_mds_session(mdsc, mds);
1574 		mutex_unlock(&mdsc->mutex);
1575 		if (session) {
1576 			dout(" inverting session/ino locks on %p\n", session);
1577 			mutex_lock(&session->s_mutex);
1578 		}
1579 		goto retry;
1580 	}
1581 
1582 	// make sure flushsnap messages are sent in proper order.
1583 	if (ci->i_ceph_flags & CEPH_I_KICK_FLUSH) {
1584 		__kick_flushing_caps(mdsc, session, ci, 0);
1585 		ci->i_ceph_flags &= ~CEPH_I_KICK_FLUSH;
1586 	}
1587 
1588 	__ceph_flush_snaps(ci, session);
1589 out:
1590 	spin_unlock(&ci->i_ceph_lock);
1591 
1592 	if (psession) {
1593 		*psession = session;
1594 	} else if (session) {
1595 		mutex_unlock(&session->s_mutex);
1596 		ceph_put_mds_session(session);
1597 	}
1598 	/* we flushed them all; remove this inode from the queue */
1599 	spin_lock(&mdsc->snap_flush_lock);
1600 	list_del_init(&ci->i_snap_flush_item);
1601 	spin_unlock(&mdsc->snap_flush_lock);
1602 }
1603 
1604 /*
1605  * Mark caps dirty.  If inode is newly dirty, return the dirty flags.
1606  * Caller is then responsible for calling __mark_inode_dirty with the
1607  * returned flags value.
1608  */
1609 int __ceph_mark_dirty_caps(struct ceph_inode_info *ci, int mask,
1610 			   struct ceph_cap_flush **pcf)
1611 {
1612 	struct ceph_mds_client *mdsc =
1613 		ceph_sb_to_client(ci->vfs_inode.i_sb)->mdsc;
1614 	struct inode *inode = &ci->vfs_inode;
1615 	int was = ci->i_dirty_caps;
1616 	int dirty = 0;
1617 
1618 	if (!ci->i_auth_cap) {
1619 		pr_warn("__mark_dirty_caps %p %llx mask %s, "
1620 			"but no auth cap (session was closed?)\n",
1621 			inode, ceph_ino(inode), ceph_cap_string(mask));
1622 		return 0;
1623 	}
1624 
1625 	dout("__mark_dirty_caps %p %s dirty %s -> %s\n", &ci->vfs_inode,
1626 	     ceph_cap_string(mask), ceph_cap_string(was),
1627 	     ceph_cap_string(was | mask));
1628 	ci->i_dirty_caps |= mask;
1629 	if (was == 0) {
1630 		WARN_ON_ONCE(ci->i_prealloc_cap_flush);
1631 		swap(ci->i_prealloc_cap_flush, *pcf);
1632 
1633 		if (!ci->i_head_snapc) {
1634 			WARN_ON_ONCE(!rwsem_is_locked(&mdsc->snap_rwsem));
1635 			ci->i_head_snapc = ceph_get_snap_context(
1636 				ci->i_snap_realm->cached_context);
1637 		}
1638 		dout(" inode %p now dirty snapc %p auth cap %p\n",
1639 		     &ci->vfs_inode, ci->i_head_snapc, ci->i_auth_cap);
1640 		BUG_ON(!list_empty(&ci->i_dirty_item));
1641 		spin_lock(&mdsc->cap_dirty_lock);
1642 		list_add(&ci->i_dirty_item, &mdsc->cap_dirty);
1643 		spin_unlock(&mdsc->cap_dirty_lock);
1644 		if (ci->i_flushing_caps == 0) {
1645 			ihold(inode);
1646 			dirty |= I_DIRTY_SYNC;
1647 		}
1648 	} else {
1649 		WARN_ON_ONCE(!ci->i_prealloc_cap_flush);
1650 	}
1651 	BUG_ON(list_empty(&ci->i_dirty_item));
1652 	if (((was | ci->i_flushing_caps) & CEPH_CAP_FILE_BUFFER) &&
1653 	    (mask & CEPH_CAP_FILE_BUFFER))
1654 		dirty |= I_DIRTY_DATASYNC;
1655 	__cap_delay_requeue(mdsc, ci, true);
1656 	return dirty;
1657 }
1658 
1659 struct ceph_cap_flush *ceph_alloc_cap_flush(void)
1660 {
1661 	return kmem_cache_alloc(ceph_cap_flush_cachep, GFP_KERNEL);
1662 }
1663 
1664 void ceph_free_cap_flush(struct ceph_cap_flush *cf)
1665 {
1666 	if (cf)
1667 		kmem_cache_free(ceph_cap_flush_cachep, cf);
1668 }
1669 
1670 static u64 __get_oldest_flush_tid(struct ceph_mds_client *mdsc)
1671 {
1672 	if (!list_empty(&mdsc->cap_flush_list)) {
1673 		struct ceph_cap_flush *cf =
1674 			list_first_entry(&mdsc->cap_flush_list,
1675 					 struct ceph_cap_flush, g_list);
1676 		return cf->tid;
1677 	}
1678 	return 0;
1679 }
1680 
1681 /*
1682  * Remove cap_flush from the mdsc's or inode's flushing cap list.
1683  * Return true if caller needs to wake up flush waiters.
1684  */
1685 static bool __finish_cap_flush(struct ceph_mds_client *mdsc,
1686 			       struct ceph_inode_info *ci,
1687 			       struct ceph_cap_flush *cf)
1688 {
1689 	struct ceph_cap_flush *prev;
1690 	bool wake = cf->wake;
1691 	if (mdsc) {
1692 		/* are there older pending cap flushes? */
1693 		if (wake && cf->g_list.prev != &mdsc->cap_flush_list) {
1694 			prev = list_prev_entry(cf, g_list);
1695 			prev->wake = true;
1696 			wake = false;
1697 		}
1698 		list_del(&cf->g_list);
1699 	} else if (ci) {
1700 		if (wake && cf->i_list.prev != &ci->i_cap_flush_list) {
1701 			prev = list_prev_entry(cf, i_list);
1702 			prev->wake = true;
1703 			wake = false;
1704 		}
1705 		list_del(&cf->i_list);
1706 	} else {
1707 		BUG_ON(1);
1708 	}
1709 	return wake;
1710 }
1711 
1712 /*
1713  * Add dirty inode to the flushing list.  Assigned a seq number so we
1714  * can wait for caps to flush without starving.
1715  *
1716  * Called under i_ceph_lock.
1717  */
1718 static int __mark_caps_flushing(struct inode *inode,
1719 				struct ceph_mds_session *session, bool wake,
1720 				u64 *flush_tid, u64 *oldest_flush_tid)
1721 {
1722 	struct ceph_mds_client *mdsc = ceph_sb_to_client(inode->i_sb)->mdsc;
1723 	struct ceph_inode_info *ci = ceph_inode(inode);
1724 	struct ceph_cap_flush *cf = NULL;
1725 	int flushing;
1726 
1727 	BUG_ON(ci->i_dirty_caps == 0);
1728 	BUG_ON(list_empty(&ci->i_dirty_item));
1729 	BUG_ON(!ci->i_prealloc_cap_flush);
1730 
1731 	flushing = ci->i_dirty_caps;
1732 	dout("__mark_caps_flushing flushing %s, flushing_caps %s -> %s\n",
1733 	     ceph_cap_string(flushing),
1734 	     ceph_cap_string(ci->i_flushing_caps),
1735 	     ceph_cap_string(ci->i_flushing_caps | flushing));
1736 	ci->i_flushing_caps |= flushing;
1737 	ci->i_dirty_caps = 0;
1738 	dout(" inode %p now !dirty\n", inode);
1739 
1740 	swap(cf, ci->i_prealloc_cap_flush);
1741 	cf->caps = flushing;
1742 	cf->wake = wake;
1743 
1744 	spin_lock(&mdsc->cap_dirty_lock);
1745 	list_del_init(&ci->i_dirty_item);
1746 
1747 	cf->tid = ++mdsc->last_cap_flush_tid;
1748 	list_add_tail(&cf->g_list, &mdsc->cap_flush_list);
1749 	*oldest_flush_tid = __get_oldest_flush_tid(mdsc);
1750 
1751 	if (list_empty(&ci->i_flushing_item)) {
1752 		list_add_tail(&ci->i_flushing_item, &session->s_cap_flushing);
1753 		mdsc->num_cap_flushing++;
1754 	}
1755 	spin_unlock(&mdsc->cap_dirty_lock);
1756 
1757 	list_add_tail(&cf->i_list, &ci->i_cap_flush_list);
1758 
1759 	*flush_tid = cf->tid;
1760 	return flushing;
1761 }
1762 
1763 /*
1764  * try to invalidate mapping pages without blocking.
1765  */
1766 static int try_nonblocking_invalidate(struct inode *inode)
1767 {
1768 	struct ceph_inode_info *ci = ceph_inode(inode);
1769 	u32 invalidating_gen = ci->i_rdcache_gen;
1770 
1771 	spin_unlock(&ci->i_ceph_lock);
1772 	invalidate_mapping_pages(&inode->i_data, 0, -1);
1773 	spin_lock(&ci->i_ceph_lock);
1774 
1775 	if (inode->i_data.nrpages == 0 &&
1776 	    invalidating_gen == ci->i_rdcache_gen) {
1777 		/* success. */
1778 		dout("try_nonblocking_invalidate %p success\n", inode);
1779 		/* save any racing async invalidate some trouble */
1780 		ci->i_rdcache_revoking = ci->i_rdcache_gen - 1;
1781 		return 0;
1782 	}
1783 	dout("try_nonblocking_invalidate %p failed\n", inode);
1784 	return -1;
1785 }
1786 
1787 bool __ceph_should_report_size(struct ceph_inode_info *ci)
1788 {
1789 	loff_t size = ci->vfs_inode.i_size;
1790 	/* mds will adjust max size according to the reported size */
1791 	if (ci->i_flushing_caps & CEPH_CAP_FILE_WR)
1792 		return false;
1793 	if (size >= ci->i_max_size)
1794 		return true;
1795 	/* half of previous max_size increment has been used */
1796 	if (ci->i_max_size > ci->i_reported_size &&
1797 	    (size << 1) >= ci->i_max_size + ci->i_reported_size)
1798 		return true;
1799 	return false;
1800 }
1801 
1802 /*
1803  * Swiss army knife function to examine currently used and wanted
1804  * versus held caps.  Release, flush, ack revoked caps to mds as
1805  * appropriate.
1806  *
1807  *  CHECK_CAPS_NODELAY - caller is delayed work and we should not delay
1808  *    cap release further.
1809  *  CHECK_CAPS_AUTHONLY - we should only check the auth cap
1810  *  CHECK_CAPS_FLUSH - we should flush any dirty caps immediately, without
1811  *    further delay.
1812  */
1813 void ceph_check_caps(struct ceph_inode_info *ci, int flags,
1814 		     struct ceph_mds_session *session)
1815 {
1816 	struct ceph_fs_client *fsc = ceph_inode_to_client(&ci->vfs_inode);
1817 	struct ceph_mds_client *mdsc = fsc->mdsc;
1818 	struct inode *inode = &ci->vfs_inode;
1819 	struct ceph_cap *cap;
1820 	u64 flush_tid, oldest_flush_tid;
1821 	int file_wanted, used, cap_used;
1822 	int took_snap_rwsem = 0;             /* true if mdsc->snap_rwsem held */
1823 	int issued, implemented, want, retain, revoking, flushing = 0;
1824 	int mds = -1;   /* keep track of how far we've gone through i_caps list
1825 			   to avoid an infinite loop on retry */
1826 	struct rb_node *p;
1827 	int delayed = 0, sent = 0;
1828 	bool no_delay = flags & CHECK_CAPS_NODELAY;
1829 	bool queue_invalidate = false;
1830 	bool tried_invalidate = false;
1831 
1832 	/* if we are unmounting, flush any unused caps immediately. */
1833 	if (mdsc->stopping)
1834 		no_delay = true;
1835 
1836 	spin_lock(&ci->i_ceph_lock);
1837 
1838 	if (ci->i_ceph_flags & CEPH_I_FLUSH)
1839 		flags |= CHECK_CAPS_FLUSH;
1840 
1841 	if (!(flags & CHECK_CAPS_AUTHONLY) ||
1842 	    (ci->i_auth_cap && __ceph_is_single_caps(ci)))
1843 		__cap_delay_cancel(mdsc, ci);
1844 
1845 	goto retry_locked;
1846 retry:
1847 	spin_lock(&ci->i_ceph_lock);
1848 retry_locked:
1849 	file_wanted = __ceph_caps_file_wanted(ci);
1850 	used = __ceph_caps_used(ci);
1851 	issued = __ceph_caps_issued(ci, &implemented);
1852 	revoking = implemented & ~issued;
1853 
1854 	want = file_wanted;
1855 	retain = file_wanted | used | CEPH_CAP_PIN;
1856 	if (!mdsc->stopping && inode->i_nlink > 0) {
1857 		if (file_wanted) {
1858 			retain |= CEPH_CAP_ANY;       /* be greedy */
1859 		} else if (S_ISDIR(inode->i_mode) &&
1860 			   (issued & CEPH_CAP_FILE_SHARED) &&
1861 			   __ceph_dir_is_complete(ci)) {
1862 			/*
1863 			 * If a directory is complete, we want to keep
1864 			 * the exclusive cap. So that MDS does not end up
1865 			 * revoking the shared cap on every create/unlink
1866 			 * operation.
1867 			 */
1868 			if (IS_RDONLY(inode))
1869 				want = CEPH_CAP_ANY_SHARED;
1870 			else
1871 				want = CEPH_CAP_ANY_SHARED | CEPH_CAP_FILE_EXCL;
1872 			retain |= want;
1873 		} else {
1874 
1875 			retain |= CEPH_CAP_ANY_SHARED;
1876 			/*
1877 			 * keep RD only if we didn't have the file open RW,
1878 			 * because then the mds would revoke it anyway to
1879 			 * journal max_size=0.
1880 			 */
1881 			if (ci->i_max_size == 0)
1882 				retain |= CEPH_CAP_ANY_RD;
1883 		}
1884 	}
1885 
1886 	dout("check_caps %p file_want %s used %s dirty %s flushing %s"
1887 	     " issued %s revoking %s retain %s %s%s%s\n", inode,
1888 	     ceph_cap_string(file_wanted),
1889 	     ceph_cap_string(used), ceph_cap_string(ci->i_dirty_caps),
1890 	     ceph_cap_string(ci->i_flushing_caps),
1891 	     ceph_cap_string(issued), ceph_cap_string(revoking),
1892 	     ceph_cap_string(retain),
1893 	     (flags & CHECK_CAPS_AUTHONLY) ? " AUTHONLY" : "",
1894 	     (flags & CHECK_CAPS_NODELAY) ? " NODELAY" : "",
1895 	     (flags & CHECK_CAPS_FLUSH) ? " FLUSH" : "");
1896 
1897 	/*
1898 	 * If we no longer need to hold onto old our caps, and we may
1899 	 * have cached pages, but don't want them, then try to invalidate.
1900 	 * If we fail, it's because pages are locked.... try again later.
1901 	 */
1902 	if ((!no_delay || mdsc->stopping) &&
1903 	    !S_ISDIR(inode->i_mode) &&		/* ignore readdir cache */
1904 	    !(ci->i_wb_ref || ci->i_wrbuffer_ref) &&   /* no dirty pages... */
1905 	    inode->i_data.nrpages &&		/* have cached pages */
1906 	    (revoking & (CEPH_CAP_FILE_CACHE|
1907 			 CEPH_CAP_FILE_LAZYIO)) && /*  or revoking cache */
1908 	    !tried_invalidate) {
1909 		dout("check_caps trying to invalidate on %p\n", inode);
1910 		if (try_nonblocking_invalidate(inode) < 0) {
1911 			dout("check_caps queuing invalidate\n");
1912 			queue_invalidate = true;
1913 			ci->i_rdcache_revoking = ci->i_rdcache_gen;
1914 		}
1915 		tried_invalidate = true;
1916 		goto retry_locked;
1917 	}
1918 
1919 	for (p = rb_first(&ci->i_caps); p; p = rb_next(p)) {
1920 		cap = rb_entry(p, struct ceph_cap, ci_node);
1921 
1922 		/* avoid looping forever */
1923 		if (mds >= cap->mds ||
1924 		    ((flags & CHECK_CAPS_AUTHONLY) && cap != ci->i_auth_cap))
1925 			continue;
1926 
1927 		/* NOTE: no side-effects allowed, until we take s_mutex */
1928 
1929 		cap_used = used;
1930 		if (ci->i_auth_cap && cap != ci->i_auth_cap)
1931 			cap_used &= ~ci->i_auth_cap->issued;
1932 
1933 		revoking = cap->implemented & ~cap->issued;
1934 		dout(" mds%d cap %p used %s issued %s implemented %s revoking %s\n",
1935 		     cap->mds, cap, ceph_cap_string(cap_used),
1936 		     ceph_cap_string(cap->issued),
1937 		     ceph_cap_string(cap->implemented),
1938 		     ceph_cap_string(revoking));
1939 
1940 		if (cap == ci->i_auth_cap &&
1941 		    (cap->issued & CEPH_CAP_FILE_WR)) {
1942 			/* request larger max_size from MDS? */
1943 			if (ci->i_wanted_max_size > ci->i_max_size &&
1944 			    ci->i_wanted_max_size > ci->i_requested_max_size) {
1945 				dout("requesting new max_size\n");
1946 				goto ack;
1947 			}
1948 
1949 			/* approaching file_max? */
1950 			if (__ceph_should_report_size(ci)) {
1951 				dout("i_size approaching max_size\n");
1952 				goto ack;
1953 			}
1954 		}
1955 		/* flush anything dirty? */
1956 		if (cap == ci->i_auth_cap) {
1957 			if ((flags & CHECK_CAPS_FLUSH) && ci->i_dirty_caps) {
1958 				dout("flushing dirty caps\n");
1959 				goto ack;
1960 			}
1961 			if (ci->i_ceph_flags & CEPH_I_FLUSH_SNAPS) {
1962 				dout("flushing snap caps\n");
1963 				goto ack;
1964 			}
1965 		}
1966 
1967 		/* completed revocation? going down and there are no caps? */
1968 		if (revoking && (revoking & cap_used) == 0) {
1969 			dout("completed revocation of %s\n",
1970 			     ceph_cap_string(cap->implemented & ~cap->issued));
1971 			goto ack;
1972 		}
1973 
1974 		/* want more caps from mds? */
1975 		if (want & ~(cap->mds_wanted | cap->issued))
1976 			goto ack;
1977 
1978 		/* things we might delay */
1979 		if ((cap->issued & ~retain) == 0)
1980 			continue;     /* nope, all good */
1981 
1982 		if (no_delay)
1983 			goto ack;
1984 
1985 		/* delay? */
1986 		if ((ci->i_ceph_flags & CEPH_I_NODELAY) == 0 &&
1987 		    time_before(jiffies, ci->i_hold_caps_max)) {
1988 			dout(" delaying issued %s -> %s, wanted %s -> %s\n",
1989 			     ceph_cap_string(cap->issued),
1990 			     ceph_cap_string(cap->issued & retain),
1991 			     ceph_cap_string(cap->mds_wanted),
1992 			     ceph_cap_string(want));
1993 			delayed++;
1994 			continue;
1995 		}
1996 
1997 ack:
1998 		if (ci->i_ceph_flags & CEPH_I_NOFLUSH) {
1999 			dout(" skipping %p I_NOFLUSH set\n", inode);
2000 			continue;
2001 		}
2002 
2003 		if (session && session != cap->session) {
2004 			dout("oops, wrong session %p mutex\n", session);
2005 			mutex_unlock(&session->s_mutex);
2006 			session = NULL;
2007 		}
2008 		if (!session) {
2009 			session = cap->session;
2010 			if (mutex_trylock(&session->s_mutex) == 0) {
2011 				dout("inverting session/ino locks on %p\n",
2012 				     session);
2013 				spin_unlock(&ci->i_ceph_lock);
2014 				if (took_snap_rwsem) {
2015 					up_read(&mdsc->snap_rwsem);
2016 					took_snap_rwsem = 0;
2017 				}
2018 				mutex_lock(&session->s_mutex);
2019 				goto retry;
2020 			}
2021 		}
2022 
2023 		/* kick flushing and flush snaps before sending normal
2024 		 * cap message */
2025 		if (cap == ci->i_auth_cap &&
2026 		    (ci->i_ceph_flags &
2027 		     (CEPH_I_KICK_FLUSH | CEPH_I_FLUSH_SNAPS))) {
2028 			if (ci->i_ceph_flags & CEPH_I_KICK_FLUSH) {
2029 				__kick_flushing_caps(mdsc, session, ci, 0);
2030 				ci->i_ceph_flags &= ~CEPH_I_KICK_FLUSH;
2031 			}
2032 			if (ci->i_ceph_flags & CEPH_I_FLUSH_SNAPS)
2033 				__ceph_flush_snaps(ci, session);
2034 
2035 			goto retry_locked;
2036 		}
2037 
2038 		/* take snap_rwsem after session mutex */
2039 		if (!took_snap_rwsem) {
2040 			if (down_read_trylock(&mdsc->snap_rwsem) == 0) {
2041 				dout("inverting snap/in locks on %p\n",
2042 				     inode);
2043 				spin_unlock(&ci->i_ceph_lock);
2044 				down_read(&mdsc->snap_rwsem);
2045 				took_snap_rwsem = 1;
2046 				goto retry;
2047 			}
2048 			took_snap_rwsem = 1;
2049 		}
2050 
2051 		if (cap == ci->i_auth_cap && ci->i_dirty_caps) {
2052 			flushing = __mark_caps_flushing(inode, session, false,
2053 							&flush_tid,
2054 							&oldest_flush_tid);
2055 		} else {
2056 			flushing = 0;
2057 			flush_tid = 0;
2058 			spin_lock(&mdsc->cap_dirty_lock);
2059 			oldest_flush_tid = __get_oldest_flush_tid(mdsc);
2060 			spin_unlock(&mdsc->cap_dirty_lock);
2061 		}
2062 
2063 		mds = cap->mds;  /* remember mds, so we don't repeat */
2064 		sent++;
2065 
2066 		/* __send_cap drops i_ceph_lock */
2067 		delayed += __send_cap(mdsc, cap, CEPH_CAP_OP_UPDATE, false,
2068 				cap_used, want, retain, flushing,
2069 				flush_tid, oldest_flush_tid);
2070 		goto retry; /* retake i_ceph_lock and restart our cap scan. */
2071 	}
2072 
2073 	/* Reschedule delayed caps release if we delayed anything */
2074 	if (delayed)
2075 		__cap_delay_requeue(mdsc, ci, false);
2076 
2077 	spin_unlock(&ci->i_ceph_lock);
2078 
2079 	if (queue_invalidate)
2080 		ceph_queue_invalidate(inode);
2081 
2082 	if (session)
2083 		mutex_unlock(&session->s_mutex);
2084 	if (took_snap_rwsem)
2085 		up_read(&mdsc->snap_rwsem);
2086 }
2087 
2088 /*
2089  * Try to flush dirty caps back to the auth mds.
2090  */
2091 static int try_flush_caps(struct inode *inode, u64 *ptid)
2092 {
2093 	struct ceph_mds_client *mdsc = ceph_sb_to_client(inode->i_sb)->mdsc;
2094 	struct ceph_inode_info *ci = ceph_inode(inode);
2095 	struct ceph_mds_session *session = NULL;
2096 	int flushing = 0;
2097 	u64 flush_tid = 0, oldest_flush_tid = 0;
2098 
2099 retry:
2100 	spin_lock(&ci->i_ceph_lock);
2101 	if (ci->i_ceph_flags & CEPH_I_NOFLUSH) {
2102 		spin_unlock(&ci->i_ceph_lock);
2103 		dout("try_flush_caps skipping %p I_NOFLUSH set\n", inode);
2104 		goto out;
2105 	}
2106 	if (ci->i_dirty_caps && ci->i_auth_cap) {
2107 		struct ceph_cap *cap = ci->i_auth_cap;
2108 		int used = __ceph_caps_used(ci);
2109 		int want = __ceph_caps_wanted(ci);
2110 		int delayed;
2111 
2112 		if (!session || session != cap->session) {
2113 			spin_unlock(&ci->i_ceph_lock);
2114 			if (session)
2115 				mutex_unlock(&session->s_mutex);
2116 			session = cap->session;
2117 			mutex_lock(&session->s_mutex);
2118 			goto retry;
2119 		}
2120 		if (cap->session->s_state < CEPH_MDS_SESSION_OPEN) {
2121 			spin_unlock(&ci->i_ceph_lock);
2122 			goto out;
2123 		}
2124 
2125 		flushing = __mark_caps_flushing(inode, session, true,
2126 						&flush_tid, &oldest_flush_tid);
2127 
2128 		/* __send_cap drops i_ceph_lock */
2129 		delayed = __send_cap(mdsc, cap, CEPH_CAP_OP_FLUSH, true,
2130 				used, want, (cap->issued | cap->implemented),
2131 				flushing, flush_tid, oldest_flush_tid);
2132 
2133 		if (delayed) {
2134 			spin_lock(&ci->i_ceph_lock);
2135 			__cap_delay_requeue(mdsc, ci, true);
2136 			spin_unlock(&ci->i_ceph_lock);
2137 		}
2138 	} else {
2139 		if (!list_empty(&ci->i_cap_flush_list)) {
2140 			struct ceph_cap_flush *cf =
2141 				list_last_entry(&ci->i_cap_flush_list,
2142 						struct ceph_cap_flush, i_list);
2143 			cf->wake = true;
2144 			flush_tid = cf->tid;
2145 		}
2146 		flushing = ci->i_flushing_caps;
2147 		spin_unlock(&ci->i_ceph_lock);
2148 	}
2149 out:
2150 	if (session)
2151 		mutex_unlock(&session->s_mutex);
2152 
2153 	*ptid = flush_tid;
2154 	return flushing;
2155 }
2156 
2157 /*
2158  * Return true if we've flushed caps through the given flush_tid.
2159  */
2160 static int caps_are_flushed(struct inode *inode, u64 flush_tid)
2161 {
2162 	struct ceph_inode_info *ci = ceph_inode(inode);
2163 	int ret = 1;
2164 
2165 	spin_lock(&ci->i_ceph_lock);
2166 	if (!list_empty(&ci->i_cap_flush_list)) {
2167 		struct ceph_cap_flush * cf =
2168 			list_first_entry(&ci->i_cap_flush_list,
2169 					 struct ceph_cap_flush, i_list);
2170 		if (cf->tid <= flush_tid)
2171 			ret = 0;
2172 	}
2173 	spin_unlock(&ci->i_ceph_lock);
2174 	return ret;
2175 }
2176 
2177 /*
2178  * wait for any unsafe requests to complete.
2179  */
2180 static int unsafe_request_wait(struct inode *inode)
2181 {
2182 	struct ceph_inode_info *ci = ceph_inode(inode);
2183 	struct ceph_mds_request *req1 = NULL, *req2 = NULL;
2184 	int ret, err = 0;
2185 
2186 	spin_lock(&ci->i_unsafe_lock);
2187 	if (S_ISDIR(inode->i_mode) && !list_empty(&ci->i_unsafe_dirops)) {
2188 		req1 = list_last_entry(&ci->i_unsafe_dirops,
2189 					struct ceph_mds_request,
2190 					r_unsafe_dir_item);
2191 		ceph_mdsc_get_request(req1);
2192 	}
2193 	if (!list_empty(&ci->i_unsafe_iops)) {
2194 		req2 = list_last_entry(&ci->i_unsafe_iops,
2195 					struct ceph_mds_request,
2196 					r_unsafe_target_item);
2197 		ceph_mdsc_get_request(req2);
2198 	}
2199 	spin_unlock(&ci->i_unsafe_lock);
2200 
2201 	dout("unsafe_request_wait %p wait on tid %llu %llu\n",
2202 	     inode, req1 ? req1->r_tid : 0ULL, req2 ? req2->r_tid : 0ULL);
2203 	if (req1) {
2204 		ret = !wait_for_completion_timeout(&req1->r_safe_completion,
2205 					ceph_timeout_jiffies(req1->r_timeout));
2206 		if (ret)
2207 			err = -EIO;
2208 		ceph_mdsc_put_request(req1);
2209 	}
2210 	if (req2) {
2211 		ret = !wait_for_completion_timeout(&req2->r_safe_completion,
2212 					ceph_timeout_jiffies(req2->r_timeout));
2213 		if (ret)
2214 			err = -EIO;
2215 		ceph_mdsc_put_request(req2);
2216 	}
2217 	return err;
2218 }
2219 
2220 int ceph_fsync(struct file *file, loff_t start, loff_t end, int datasync)
2221 {
2222 	struct inode *inode = file->f_mapping->host;
2223 	struct ceph_inode_info *ci = ceph_inode(inode);
2224 	u64 flush_tid;
2225 	int ret;
2226 	int dirty;
2227 
2228 	dout("fsync %p%s\n", inode, datasync ? " datasync" : "");
2229 
2230 	ret = file_write_and_wait_range(file, start, end);
2231 	if (ret < 0)
2232 		goto out;
2233 
2234 	if (datasync)
2235 		goto out;
2236 
2237 	inode_lock(inode);
2238 
2239 	dirty = try_flush_caps(inode, &flush_tid);
2240 	dout("fsync dirty caps are %s\n", ceph_cap_string(dirty));
2241 
2242 	ret = unsafe_request_wait(inode);
2243 
2244 	/*
2245 	 * only wait on non-file metadata writeback (the mds
2246 	 * can recover size and mtime, so we don't need to
2247 	 * wait for that)
2248 	 */
2249 	if (!ret && (dirty & ~CEPH_CAP_ANY_FILE_WR)) {
2250 		ret = wait_event_interruptible(ci->i_cap_wq,
2251 					caps_are_flushed(inode, flush_tid));
2252 	}
2253 	inode_unlock(inode);
2254 out:
2255 	dout("fsync %p%s result=%d\n", inode, datasync ? " datasync" : "", ret);
2256 	return ret;
2257 }
2258 
2259 /*
2260  * Flush any dirty caps back to the mds.  If we aren't asked to wait,
2261  * queue inode for flush but don't do so immediately, because we can
2262  * get by with fewer MDS messages if we wait for data writeback to
2263  * complete first.
2264  */
2265 int ceph_write_inode(struct inode *inode, struct writeback_control *wbc)
2266 {
2267 	struct ceph_inode_info *ci = ceph_inode(inode);
2268 	u64 flush_tid;
2269 	int err = 0;
2270 	int dirty;
2271 	int wait = (wbc->sync_mode == WB_SYNC_ALL && !wbc->for_sync);
2272 
2273 	dout("write_inode %p wait=%d\n", inode, wait);
2274 	if (wait) {
2275 		dirty = try_flush_caps(inode, &flush_tid);
2276 		if (dirty)
2277 			err = wait_event_interruptible(ci->i_cap_wq,
2278 				       caps_are_flushed(inode, flush_tid));
2279 	} else {
2280 		struct ceph_mds_client *mdsc =
2281 			ceph_sb_to_client(inode->i_sb)->mdsc;
2282 
2283 		spin_lock(&ci->i_ceph_lock);
2284 		if (__ceph_caps_dirty(ci))
2285 			__cap_delay_requeue_front(mdsc, ci);
2286 		spin_unlock(&ci->i_ceph_lock);
2287 	}
2288 	return err;
2289 }
2290 
2291 static void __kick_flushing_caps(struct ceph_mds_client *mdsc,
2292 				 struct ceph_mds_session *session,
2293 				 struct ceph_inode_info *ci,
2294 				 u64 oldest_flush_tid)
2295 	__releases(ci->i_ceph_lock)
2296 	__acquires(ci->i_ceph_lock)
2297 {
2298 	struct inode *inode = &ci->vfs_inode;
2299 	struct ceph_cap *cap;
2300 	struct ceph_cap_flush *cf;
2301 	int ret;
2302 	u64 first_tid = 0;
2303 
2304 	list_for_each_entry(cf, &ci->i_cap_flush_list, i_list) {
2305 		if (cf->tid < first_tid)
2306 			continue;
2307 
2308 		cap = ci->i_auth_cap;
2309 		if (!(cap && cap->session == session)) {
2310 			pr_err("%p auth cap %p not mds%d ???\n",
2311 			       inode, cap, session->s_mds);
2312 			break;
2313 		}
2314 
2315 		first_tid = cf->tid + 1;
2316 
2317 		if (cf->caps) {
2318 			dout("kick_flushing_caps %p cap %p tid %llu %s\n",
2319 			     inode, cap, cf->tid, ceph_cap_string(cf->caps));
2320 			ci->i_ceph_flags |= CEPH_I_NODELAY;
2321 			ret = __send_cap(mdsc, cap, CEPH_CAP_OP_FLUSH,
2322 					  false, __ceph_caps_used(ci),
2323 					  __ceph_caps_wanted(ci),
2324 					  cap->issued | cap->implemented,
2325 					  cf->caps, cf->tid, oldest_flush_tid);
2326 			if (ret) {
2327 				pr_err("kick_flushing_caps: error sending "
2328 					"cap flush, ino (%llx.%llx) "
2329 					"tid %llu flushing %s\n",
2330 					ceph_vinop(inode), cf->tid,
2331 					ceph_cap_string(cf->caps));
2332 			}
2333 		} else {
2334 			struct ceph_cap_snap *capsnap =
2335 					container_of(cf, struct ceph_cap_snap,
2336 						    cap_flush);
2337 			dout("kick_flushing_caps %p capsnap %p tid %llu %s\n",
2338 			     inode, capsnap, cf->tid,
2339 			     ceph_cap_string(capsnap->dirty));
2340 
2341 			refcount_inc(&capsnap->nref);
2342 			spin_unlock(&ci->i_ceph_lock);
2343 
2344 			ret = __send_flush_snap(inode, session, capsnap, cap->mseq,
2345 						oldest_flush_tid);
2346 			if (ret < 0) {
2347 				pr_err("kick_flushing_caps: error sending "
2348 					"cap flushsnap, ino (%llx.%llx) "
2349 					"tid %llu follows %llu\n",
2350 					ceph_vinop(inode), cf->tid,
2351 					capsnap->follows);
2352 			}
2353 
2354 			ceph_put_cap_snap(capsnap);
2355 		}
2356 
2357 		spin_lock(&ci->i_ceph_lock);
2358 	}
2359 }
2360 
2361 void ceph_early_kick_flushing_caps(struct ceph_mds_client *mdsc,
2362 				   struct ceph_mds_session *session)
2363 {
2364 	struct ceph_inode_info *ci;
2365 	struct ceph_cap *cap;
2366 	u64 oldest_flush_tid;
2367 
2368 	dout("early_kick_flushing_caps mds%d\n", session->s_mds);
2369 
2370 	spin_lock(&mdsc->cap_dirty_lock);
2371 	oldest_flush_tid = __get_oldest_flush_tid(mdsc);
2372 	spin_unlock(&mdsc->cap_dirty_lock);
2373 
2374 	list_for_each_entry(ci, &session->s_cap_flushing, i_flushing_item) {
2375 		spin_lock(&ci->i_ceph_lock);
2376 		cap = ci->i_auth_cap;
2377 		if (!(cap && cap->session == session)) {
2378 			pr_err("%p auth cap %p not mds%d ???\n",
2379 				&ci->vfs_inode, cap, session->s_mds);
2380 			spin_unlock(&ci->i_ceph_lock);
2381 			continue;
2382 		}
2383 
2384 
2385 		/*
2386 		 * if flushing caps were revoked, we re-send the cap flush
2387 		 * in client reconnect stage. This guarantees MDS * processes
2388 		 * the cap flush message before issuing the flushing caps to
2389 		 * other client.
2390 		 */
2391 		if ((cap->issued & ci->i_flushing_caps) !=
2392 		    ci->i_flushing_caps) {
2393 			ci->i_ceph_flags &= ~CEPH_I_KICK_FLUSH;
2394 			__kick_flushing_caps(mdsc, session, ci,
2395 					     oldest_flush_tid);
2396 		} else {
2397 			ci->i_ceph_flags |= CEPH_I_KICK_FLUSH;
2398 		}
2399 
2400 		spin_unlock(&ci->i_ceph_lock);
2401 	}
2402 }
2403 
2404 void ceph_kick_flushing_caps(struct ceph_mds_client *mdsc,
2405 			     struct ceph_mds_session *session)
2406 {
2407 	struct ceph_inode_info *ci;
2408 	struct ceph_cap *cap;
2409 	u64 oldest_flush_tid;
2410 
2411 	dout("kick_flushing_caps mds%d\n", session->s_mds);
2412 
2413 	spin_lock(&mdsc->cap_dirty_lock);
2414 	oldest_flush_tid = __get_oldest_flush_tid(mdsc);
2415 	spin_unlock(&mdsc->cap_dirty_lock);
2416 
2417 	list_for_each_entry(ci, &session->s_cap_flushing, i_flushing_item) {
2418 		spin_lock(&ci->i_ceph_lock);
2419 		cap = ci->i_auth_cap;
2420 		if (!(cap && cap->session == session)) {
2421 			pr_err("%p auth cap %p not mds%d ???\n",
2422 				&ci->vfs_inode, cap, session->s_mds);
2423 			spin_unlock(&ci->i_ceph_lock);
2424 			continue;
2425 		}
2426 		if (ci->i_ceph_flags & CEPH_I_KICK_FLUSH) {
2427 			ci->i_ceph_flags &= ~CEPH_I_KICK_FLUSH;
2428 			__kick_flushing_caps(mdsc, session, ci,
2429 					     oldest_flush_tid);
2430 		}
2431 		spin_unlock(&ci->i_ceph_lock);
2432 	}
2433 }
2434 
2435 static void kick_flushing_inode_caps(struct ceph_mds_client *mdsc,
2436 				     struct ceph_mds_session *session,
2437 				     struct inode *inode)
2438 	__releases(ci->i_ceph_lock)
2439 {
2440 	struct ceph_inode_info *ci = ceph_inode(inode);
2441 	struct ceph_cap *cap;
2442 
2443 	cap = ci->i_auth_cap;
2444 	dout("kick_flushing_inode_caps %p flushing %s\n", inode,
2445 	     ceph_cap_string(ci->i_flushing_caps));
2446 
2447 	if (!list_empty(&ci->i_cap_flush_list)) {
2448 		u64 oldest_flush_tid;
2449 		spin_lock(&mdsc->cap_dirty_lock);
2450 		list_move_tail(&ci->i_flushing_item,
2451 			       &cap->session->s_cap_flushing);
2452 		oldest_flush_tid = __get_oldest_flush_tid(mdsc);
2453 		spin_unlock(&mdsc->cap_dirty_lock);
2454 
2455 		ci->i_ceph_flags &= ~CEPH_I_KICK_FLUSH;
2456 		__kick_flushing_caps(mdsc, session, ci, oldest_flush_tid);
2457 		spin_unlock(&ci->i_ceph_lock);
2458 	} else {
2459 		spin_unlock(&ci->i_ceph_lock);
2460 	}
2461 }
2462 
2463 
2464 /*
2465  * Take references to capabilities we hold, so that we don't release
2466  * them to the MDS prematurely.
2467  *
2468  * Protected by i_ceph_lock.
2469  */
2470 static void __take_cap_refs(struct ceph_inode_info *ci, int got,
2471 			    bool snap_rwsem_locked)
2472 {
2473 	if (got & CEPH_CAP_PIN)
2474 		ci->i_pin_ref++;
2475 	if (got & CEPH_CAP_FILE_RD)
2476 		ci->i_rd_ref++;
2477 	if (got & CEPH_CAP_FILE_CACHE)
2478 		ci->i_rdcache_ref++;
2479 	if (got & CEPH_CAP_FILE_WR) {
2480 		if (ci->i_wr_ref == 0 && !ci->i_head_snapc) {
2481 			BUG_ON(!snap_rwsem_locked);
2482 			ci->i_head_snapc = ceph_get_snap_context(
2483 					ci->i_snap_realm->cached_context);
2484 		}
2485 		ci->i_wr_ref++;
2486 	}
2487 	if (got & CEPH_CAP_FILE_BUFFER) {
2488 		if (ci->i_wb_ref == 0)
2489 			ihold(&ci->vfs_inode);
2490 		ci->i_wb_ref++;
2491 		dout("__take_cap_refs %p wb %d -> %d (?)\n",
2492 		     &ci->vfs_inode, ci->i_wb_ref-1, ci->i_wb_ref);
2493 	}
2494 }
2495 
2496 /*
2497  * Try to grab cap references.  Specify those refs we @want, and the
2498  * minimal set we @need.  Also include the larger offset we are writing
2499  * to (when applicable), and check against max_size here as well.
2500  * Note that caller is responsible for ensuring max_size increases are
2501  * requested from the MDS.
2502  */
2503 static int try_get_cap_refs(struct ceph_inode_info *ci, int need, int want,
2504 			    loff_t endoff, bool nonblock, int *got, int *err)
2505 {
2506 	struct inode *inode = &ci->vfs_inode;
2507 	struct ceph_mds_client *mdsc = ceph_inode_to_client(inode)->mdsc;
2508 	int ret = 0;
2509 	int have, implemented;
2510 	int file_wanted;
2511 	bool snap_rwsem_locked = false;
2512 
2513 	dout("get_cap_refs %p need %s want %s\n", inode,
2514 	     ceph_cap_string(need), ceph_cap_string(want));
2515 
2516 again:
2517 	spin_lock(&ci->i_ceph_lock);
2518 
2519 	/* make sure file is actually open */
2520 	file_wanted = __ceph_caps_file_wanted(ci);
2521 	if ((file_wanted & need) != need) {
2522 		dout("try_get_cap_refs need %s file_wanted %s, EBADF\n",
2523 		     ceph_cap_string(need), ceph_cap_string(file_wanted));
2524 		*err = -EBADF;
2525 		ret = 1;
2526 		goto out_unlock;
2527 	}
2528 
2529 	/* finish pending truncate */
2530 	while (ci->i_truncate_pending) {
2531 		spin_unlock(&ci->i_ceph_lock);
2532 		if (snap_rwsem_locked) {
2533 			up_read(&mdsc->snap_rwsem);
2534 			snap_rwsem_locked = false;
2535 		}
2536 		__ceph_do_pending_vmtruncate(inode);
2537 		spin_lock(&ci->i_ceph_lock);
2538 	}
2539 
2540 	have = __ceph_caps_issued(ci, &implemented);
2541 
2542 	if (have & need & CEPH_CAP_FILE_WR) {
2543 		if (endoff >= 0 && endoff > (loff_t)ci->i_max_size) {
2544 			dout("get_cap_refs %p endoff %llu > maxsize %llu\n",
2545 			     inode, endoff, ci->i_max_size);
2546 			if (endoff > ci->i_requested_max_size) {
2547 				*err = -EAGAIN;
2548 				ret = 1;
2549 			}
2550 			goto out_unlock;
2551 		}
2552 		/*
2553 		 * If a sync write is in progress, we must wait, so that we
2554 		 * can get a final snapshot value for size+mtime.
2555 		 */
2556 		if (__ceph_have_pending_cap_snap(ci)) {
2557 			dout("get_cap_refs %p cap_snap_pending\n", inode);
2558 			goto out_unlock;
2559 		}
2560 	}
2561 
2562 	if ((have & need) == need) {
2563 		/*
2564 		 * Look at (implemented & ~have & not) so that we keep waiting
2565 		 * on transition from wanted -> needed caps.  This is needed
2566 		 * for WRBUFFER|WR -> WR to avoid a new WR sync write from
2567 		 * going before a prior buffered writeback happens.
2568 		 */
2569 		int not = want & ~(have & need);
2570 		int revoking = implemented & ~have;
2571 		dout("get_cap_refs %p have %s but not %s (revoking %s)\n",
2572 		     inode, ceph_cap_string(have), ceph_cap_string(not),
2573 		     ceph_cap_string(revoking));
2574 		if ((revoking & not) == 0) {
2575 			if (!snap_rwsem_locked &&
2576 			    !ci->i_head_snapc &&
2577 			    (need & CEPH_CAP_FILE_WR)) {
2578 				if (!down_read_trylock(&mdsc->snap_rwsem)) {
2579 					/*
2580 					 * we can not call down_read() when
2581 					 * task isn't in TASK_RUNNING state
2582 					 */
2583 					if (nonblock) {
2584 						*err = -EAGAIN;
2585 						ret = 1;
2586 						goto out_unlock;
2587 					}
2588 
2589 					spin_unlock(&ci->i_ceph_lock);
2590 					down_read(&mdsc->snap_rwsem);
2591 					snap_rwsem_locked = true;
2592 					goto again;
2593 				}
2594 				snap_rwsem_locked = true;
2595 			}
2596 			*got = need | (have & want);
2597 			if ((need & CEPH_CAP_FILE_RD) &&
2598 			    !(*got & CEPH_CAP_FILE_CACHE))
2599 				ceph_disable_fscache_readpage(ci);
2600 			__take_cap_refs(ci, *got, true);
2601 			ret = 1;
2602 		}
2603 	} else {
2604 		int session_readonly = false;
2605 		if ((need & CEPH_CAP_FILE_WR) && ci->i_auth_cap) {
2606 			struct ceph_mds_session *s = ci->i_auth_cap->session;
2607 			spin_lock(&s->s_cap_lock);
2608 			session_readonly = s->s_readonly;
2609 			spin_unlock(&s->s_cap_lock);
2610 		}
2611 		if (session_readonly) {
2612 			dout("get_cap_refs %p needed %s but mds%d readonly\n",
2613 			     inode, ceph_cap_string(need), ci->i_auth_cap->mds);
2614 			*err = -EROFS;
2615 			ret = 1;
2616 			goto out_unlock;
2617 		}
2618 
2619 		if (ci->i_ceph_flags & CEPH_I_CAP_DROPPED) {
2620 			int mds_wanted;
2621 			if (READ_ONCE(mdsc->fsc->mount_state) ==
2622 			    CEPH_MOUNT_SHUTDOWN) {
2623 				dout("get_cap_refs %p forced umount\n", inode);
2624 				*err = -EIO;
2625 				ret = 1;
2626 				goto out_unlock;
2627 			}
2628 			mds_wanted = __ceph_caps_mds_wanted(ci, false);
2629 			if (need & ~(mds_wanted & need)) {
2630 				dout("get_cap_refs %p caps were dropped"
2631 				     " (session killed?)\n", inode);
2632 				*err = -ESTALE;
2633 				ret = 1;
2634 				goto out_unlock;
2635 			}
2636 			if (!(file_wanted & ~mds_wanted))
2637 				ci->i_ceph_flags &= ~CEPH_I_CAP_DROPPED;
2638 		}
2639 
2640 		dout("get_cap_refs %p have %s needed %s\n", inode,
2641 		     ceph_cap_string(have), ceph_cap_string(need));
2642 	}
2643 out_unlock:
2644 	spin_unlock(&ci->i_ceph_lock);
2645 	if (snap_rwsem_locked)
2646 		up_read(&mdsc->snap_rwsem);
2647 
2648 	dout("get_cap_refs %p ret %d got %s\n", inode,
2649 	     ret, ceph_cap_string(*got));
2650 	return ret;
2651 }
2652 
2653 /*
2654  * Check the offset we are writing up to against our current
2655  * max_size.  If necessary, tell the MDS we want to write to
2656  * a larger offset.
2657  */
2658 static void check_max_size(struct inode *inode, loff_t endoff)
2659 {
2660 	struct ceph_inode_info *ci = ceph_inode(inode);
2661 	int check = 0;
2662 
2663 	/* do we need to explicitly request a larger max_size? */
2664 	spin_lock(&ci->i_ceph_lock);
2665 	if (endoff >= ci->i_max_size && endoff > ci->i_wanted_max_size) {
2666 		dout("write %p at large endoff %llu, req max_size\n",
2667 		     inode, endoff);
2668 		ci->i_wanted_max_size = endoff;
2669 	}
2670 	/* duplicate ceph_check_caps()'s logic */
2671 	if (ci->i_auth_cap &&
2672 	    (ci->i_auth_cap->issued & CEPH_CAP_FILE_WR) &&
2673 	    ci->i_wanted_max_size > ci->i_max_size &&
2674 	    ci->i_wanted_max_size > ci->i_requested_max_size)
2675 		check = 1;
2676 	spin_unlock(&ci->i_ceph_lock);
2677 	if (check)
2678 		ceph_check_caps(ci, CHECK_CAPS_AUTHONLY, NULL);
2679 }
2680 
2681 int ceph_try_get_caps(struct ceph_inode_info *ci, int need, int want,
2682 		      bool nonblock, int *got)
2683 {
2684 	int ret, err = 0;
2685 
2686 	BUG_ON(need & ~CEPH_CAP_FILE_RD);
2687 	BUG_ON(want & ~(CEPH_CAP_FILE_CACHE|CEPH_CAP_FILE_LAZYIO|CEPH_CAP_FILE_SHARED));
2688 	ret = ceph_pool_perm_check(ci, need);
2689 	if (ret < 0)
2690 		return ret;
2691 
2692 	ret = try_get_cap_refs(ci, need, want, 0, nonblock, got, &err);
2693 	if (ret) {
2694 		if (err == -EAGAIN) {
2695 			ret = 0;
2696 		} else if (err < 0) {
2697 			ret = err;
2698 		}
2699 	}
2700 	return ret;
2701 }
2702 
2703 /*
2704  * Wait for caps, and take cap references.  If we can't get a WR cap
2705  * due to a small max_size, make sure we check_max_size (and possibly
2706  * ask the mds) so we don't get hung up indefinitely.
2707  */
2708 int ceph_get_caps(struct ceph_inode_info *ci, int need, int want,
2709 		  loff_t endoff, int *got, struct page **pinned_page)
2710 {
2711 	int _got, ret, err = 0;
2712 
2713 	ret = ceph_pool_perm_check(ci, need);
2714 	if (ret < 0)
2715 		return ret;
2716 
2717 	while (true) {
2718 		if (endoff > 0)
2719 			check_max_size(&ci->vfs_inode, endoff);
2720 
2721 		err = 0;
2722 		_got = 0;
2723 		ret = try_get_cap_refs(ci, need, want, endoff,
2724 				       false, &_got, &err);
2725 		if (ret) {
2726 			if (err == -EAGAIN)
2727 				continue;
2728 			if (err < 0)
2729 				ret = err;
2730 		} else {
2731 			DEFINE_WAIT_FUNC(wait, woken_wake_function);
2732 			add_wait_queue(&ci->i_cap_wq, &wait);
2733 
2734 			while (!try_get_cap_refs(ci, need, want, endoff,
2735 						 true, &_got, &err)) {
2736 				if (signal_pending(current)) {
2737 					ret = -ERESTARTSYS;
2738 					break;
2739 				}
2740 				wait_woken(&wait, TASK_INTERRUPTIBLE, MAX_SCHEDULE_TIMEOUT);
2741 			}
2742 
2743 			remove_wait_queue(&ci->i_cap_wq, &wait);
2744 
2745 			if (err == -EAGAIN)
2746 				continue;
2747 			if (err < 0)
2748 				ret = err;
2749 		}
2750 		if (ret < 0) {
2751 			if (err == -ESTALE) {
2752 				/* session was killed, try renew caps */
2753 				ret = ceph_renew_caps(&ci->vfs_inode);
2754 				if (ret == 0)
2755 					continue;
2756 			}
2757 			return ret;
2758 		}
2759 
2760 		if (ci->i_inline_version != CEPH_INLINE_NONE &&
2761 		    (_got & (CEPH_CAP_FILE_CACHE|CEPH_CAP_FILE_LAZYIO)) &&
2762 		    i_size_read(&ci->vfs_inode) > 0) {
2763 			struct page *page =
2764 				find_get_page(ci->vfs_inode.i_mapping, 0);
2765 			if (page) {
2766 				if (PageUptodate(page)) {
2767 					*pinned_page = page;
2768 					break;
2769 				}
2770 				put_page(page);
2771 			}
2772 			/*
2773 			 * drop cap refs first because getattr while
2774 			 * holding * caps refs can cause deadlock.
2775 			 */
2776 			ceph_put_cap_refs(ci, _got);
2777 			_got = 0;
2778 
2779 			/*
2780 			 * getattr request will bring inline data into
2781 			 * page cache
2782 			 */
2783 			ret = __ceph_do_getattr(&ci->vfs_inode, NULL,
2784 						CEPH_STAT_CAP_INLINE_DATA,
2785 						true);
2786 			if (ret < 0)
2787 				return ret;
2788 			continue;
2789 		}
2790 		break;
2791 	}
2792 
2793 	if ((_got & CEPH_CAP_FILE_RD) && (_got & CEPH_CAP_FILE_CACHE))
2794 		ceph_fscache_revalidate_cookie(ci);
2795 
2796 	*got = _got;
2797 	return 0;
2798 }
2799 
2800 /*
2801  * Take cap refs.  Caller must already know we hold at least one ref
2802  * on the caps in question or we don't know this is safe.
2803  */
2804 void ceph_get_cap_refs(struct ceph_inode_info *ci, int caps)
2805 {
2806 	spin_lock(&ci->i_ceph_lock);
2807 	__take_cap_refs(ci, caps, false);
2808 	spin_unlock(&ci->i_ceph_lock);
2809 }
2810 
2811 
2812 /*
2813  * drop cap_snap that is not associated with any snapshot.
2814  * we don't need to send FLUSHSNAP message for it.
2815  */
2816 static int ceph_try_drop_cap_snap(struct ceph_inode_info *ci,
2817 				  struct ceph_cap_snap *capsnap)
2818 {
2819 	if (!capsnap->need_flush &&
2820 	    !capsnap->writing && !capsnap->dirty_pages) {
2821 		dout("dropping cap_snap %p follows %llu\n",
2822 		     capsnap, capsnap->follows);
2823 		BUG_ON(capsnap->cap_flush.tid > 0);
2824 		ceph_put_snap_context(capsnap->context);
2825 		if (!list_is_last(&capsnap->ci_item, &ci->i_cap_snaps))
2826 			ci->i_ceph_flags |= CEPH_I_FLUSH_SNAPS;
2827 
2828 		list_del(&capsnap->ci_item);
2829 		ceph_put_cap_snap(capsnap);
2830 		return 1;
2831 	}
2832 	return 0;
2833 }
2834 
2835 /*
2836  * Release cap refs.
2837  *
2838  * If we released the last ref on any given cap, call ceph_check_caps
2839  * to release (or schedule a release).
2840  *
2841  * If we are releasing a WR cap (from a sync write), finalize any affected
2842  * cap_snap, and wake up any waiters.
2843  */
2844 void ceph_put_cap_refs(struct ceph_inode_info *ci, int had)
2845 {
2846 	struct inode *inode = &ci->vfs_inode;
2847 	int last = 0, put = 0, flushsnaps = 0, wake = 0;
2848 
2849 	spin_lock(&ci->i_ceph_lock);
2850 	if (had & CEPH_CAP_PIN)
2851 		--ci->i_pin_ref;
2852 	if (had & CEPH_CAP_FILE_RD)
2853 		if (--ci->i_rd_ref == 0)
2854 			last++;
2855 	if (had & CEPH_CAP_FILE_CACHE)
2856 		if (--ci->i_rdcache_ref == 0)
2857 			last++;
2858 	if (had & CEPH_CAP_FILE_BUFFER) {
2859 		if (--ci->i_wb_ref == 0) {
2860 			last++;
2861 			put++;
2862 		}
2863 		dout("put_cap_refs %p wb %d -> %d (?)\n",
2864 		     inode, ci->i_wb_ref+1, ci->i_wb_ref);
2865 	}
2866 	if (had & CEPH_CAP_FILE_WR)
2867 		if (--ci->i_wr_ref == 0) {
2868 			last++;
2869 			if (__ceph_have_pending_cap_snap(ci)) {
2870 				struct ceph_cap_snap *capsnap =
2871 					list_last_entry(&ci->i_cap_snaps,
2872 							struct ceph_cap_snap,
2873 							ci_item);
2874 				capsnap->writing = 0;
2875 				if (ceph_try_drop_cap_snap(ci, capsnap))
2876 					put++;
2877 				else if (__ceph_finish_cap_snap(ci, capsnap))
2878 					flushsnaps = 1;
2879 				wake = 1;
2880 			}
2881 			if (ci->i_wrbuffer_ref_head == 0 &&
2882 			    ci->i_dirty_caps == 0 &&
2883 			    ci->i_flushing_caps == 0) {
2884 				BUG_ON(!ci->i_head_snapc);
2885 				ceph_put_snap_context(ci->i_head_snapc);
2886 				ci->i_head_snapc = NULL;
2887 			}
2888 			/* see comment in __ceph_remove_cap() */
2889 			if (!__ceph_is_any_caps(ci) && ci->i_snap_realm)
2890 				drop_inode_snap_realm(ci);
2891 		}
2892 	spin_unlock(&ci->i_ceph_lock);
2893 
2894 	dout("put_cap_refs %p had %s%s%s\n", inode, ceph_cap_string(had),
2895 	     last ? " last" : "", put ? " put" : "");
2896 
2897 	if (last && !flushsnaps)
2898 		ceph_check_caps(ci, 0, NULL);
2899 	else if (flushsnaps)
2900 		ceph_flush_snaps(ci, NULL);
2901 	if (wake)
2902 		wake_up_all(&ci->i_cap_wq);
2903 	while (put-- > 0)
2904 		iput(inode);
2905 }
2906 
2907 /*
2908  * Release @nr WRBUFFER refs on dirty pages for the given @snapc snap
2909  * context.  Adjust per-snap dirty page accounting as appropriate.
2910  * Once all dirty data for a cap_snap is flushed, flush snapped file
2911  * metadata back to the MDS.  If we dropped the last ref, call
2912  * ceph_check_caps.
2913  */
2914 void ceph_put_wrbuffer_cap_refs(struct ceph_inode_info *ci, int nr,
2915 				struct ceph_snap_context *snapc)
2916 {
2917 	struct inode *inode = &ci->vfs_inode;
2918 	struct ceph_cap_snap *capsnap = NULL;
2919 	int put = 0;
2920 	bool last = false;
2921 	bool found = false;
2922 	bool flush_snaps = false;
2923 	bool complete_capsnap = false;
2924 
2925 	spin_lock(&ci->i_ceph_lock);
2926 	ci->i_wrbuffer_ref -= nr;
2927 	if (ci->i_wrbuffer_ref == 0) {
2928 		last = true;
2929 		put++;
2930 	}
2931 
2932 	if (ci->i_head_snapc == snapc) {
2933 		ci->i_wrbuffer_ref_head -= nr;
2934 		if (ci->i_wrbuffer_ref_head == 0 &&
2935 		    ci->i_wr_ref == 0 &&
2936 		    ci->i_dirty_caps == 0 &&
2937 		    ci->i_flushing_caps == 0) {
2938 			BUG_ON(!ci->i_head_snapc);
2939 			ceph_put_snap_context(ci->i_head_snapc);
2940 			ci->i_head_snapc = NULL;
2941 		}
2942 		dout("put_wrbuffer_cap_refs on %p head %d/%d -> %d/%d %s\n",
2943 		     inode,
2944 		     ci->i_wrbuffer_ref+nr, ci->i_wrbuffer_ref_head+nr,
2945 		     ci->i_wrbuffer_ref, ci->i_wrbuffer_ref_head,
2946 		     last ? " LAST" : "");
2947 	} else {
2948 		list_for_each_entry(capsnap, &ci->i_cap_snaps, ci_item) {
2949 			if (capsnap->context == snapc) {
2950 				found = true;
2951 				break;
2952 			}
2953 		}
2954 		BUG_ON(!found);
2955 		capsnap->dirty_pages -= nr;
2956 		if (capsnap->dirty_pages == 0) {
2957 			complete_capsnap = true;
2958 			if (!capsnap->writing) {
2959 				if (ceph_try_drop_cap_snap(ci, capsnap)) {
2960 					put++;
2961 				} else {
2962 					ci->i_ceph_flags |= CEPH_I_FLUSH_SNAPS;
2963 					flush_snaps = true;
2964 				}
2965 			}
2966 		}
2967 		dout("put_wrbuffer_cap_refs on %p cap_snap %p "
2968 		     " snap %lld %d/%d -> %d/%d %s%s\n",
2969 		     inode, capsnap, capsnap->context->seq,
2970 		     ci->i_wrbuffer_ref+nr, capsnap->dirty_pages + nr,
2971 		     ci->i_wrbuffer_ref, capsnap->dirty_pages,
2972 		     last ? " (wrbuffer last)" : "",
2973 		     complete_capsnap ? " (complete capsnap)" : "");
2974 	}
2975 
2976 	spin_unlock(&ci->i_ceph_lock);
2977 
2978 	if (last) {
2979 		ceph_check_caps(ci, CHECK_CAPS_AUTHONLY, NULL);
2980 	} else if (flush_snaps) {
2981 		ceph_flush_snaps(ci, NULL);
2982 	}
2983 	if (complete_capsnap)
2984 		wake_up_all(&ci->i_cap_wq);
2985 	while (put-- > 0)
2986 		iput(inode);
2987 }
2988 
2989 /*
2990  * Invalidate unlinked inode's aliases, so we can drop the inode ASAP.
2991  */
2992 static void invalidate_aliases(struct inode *inode)
2993 {
2994 	struct dentry *dn, *prev = NULL;
2995 
2996 	dout("invalidate_aliases inode %p\n", inode);
2997 	d_prune_aliases(inode);
2998 	/*
2999 	 * For non-directory inode, d_find_alias() only returns
3000 	 * hashed dentry. After calling d_invalidate(), the
3001 	 * dentry becomes unhashed.
3002 	 *
3003 	 * For directory inode, d_find_alias() can return
3004 	 * unhashed dentry. But directory inode should have
3005 	 * one alias at most.
3006 	 */
3007 	while ((dn = d_find_alias(inode))) {
3008 		if (dn == prev) {
3009 			dput(dn);
3010 			break;
3011 		}
3012 		d_invalidate(dn);
3013 		if (prev)
3014 			dput(prev);
3015 		prev = dn;
3016 	}
3017 	if (prev)
3018 		dput(prev);
3019 }
3020 
3021 struct cap_extra_info {
3022 	struct ceph_string *pool_ns;
3023 	/* inline data */
3024 	u64 inline_version;
3025 	void *inline_data;
3026 	u32 inline_len;
3027 	/* dirstat */
3028 	bool dirstat_valid;
3029 	u64 nfiles;
3030 	u64 nsubdirs;
3031 	/* currently issued */
3032 	int issued;
3033 };
3034 
3035 /*
3036  * Handle a cap GRANT message from the MDS.  (Note that a GRANT may
3037  * actually be a revocation if it specifies a smaller cap set.)
3038  *
3039  * caller holds s_mutex and i_ceph_lock, we drop both.
3040  */
3041 static void handle_cap_grant(struct inode *inode,
3042 			     struct ceph_mds_session *session,
3043 			     struct ceph_cap *cap,
3044 			     struct ceph_mds_caps *grant,
3045 			     struct ceph_buffer *xattr_buf,
3046 			     struct cap_extra_info *extra_info)
3047 	__releases(ci->i_ceph_lock)
3048 	__releases(session->s_mdsc->snap_rwsem)
3049 {
3050 	struct ceph_inode_info *ci = ceph_inode(inode);
3051 	int seq = le32_to_cpu(grant->seq);
3052 	int newcaps = le32_to_cpu(grant->caps);
3053 	int used, wanted, dirty;
3054 	u64 size = le64_to_cpu(grant->size);
3055 	u64 max_size = le64_to_cpu(grant->max_size);
3056 	unsigned char check_caps = 0;
3057 	bool was_stale = cap->cap_gen < session->s_cap_gen;
3058 	bool wake = false;
3059 	bool writeback = false;
3060 	bool queue_trunc = false;
3061 	bool queue_invalidate = false;
3062 	bool deleted_inode = false;
3063 	bool fill_inline = false;
3064 
3065 	dout("handle_cap_grant inode %p cap %p mds%d seq %d %s\n",
3066 	     inode, cap, session->s_mds, seq, ceph_cap_string(newcaps));
3067 	dout(" size %llu max_size %llu, i_size %llu\n", size, max_size,
3068 		inode->i_size);
3069 
3070 
3071 	/*
3072 	 * If CACHE is being revoked, and we have no dirty buffers,
3073 	 * try to invalidate (once).  (If there are dirty buffers, we
3074 	 * will invalidate _after_ writeback.)
3075 	 */
3076 	if (!S_ISDIR(inode->i_mode) && /* don't invalidate readdir cache */
3077 	    ((cap->issued & ~newcaps) & CEPH_CAP_FILE_CACHE) &&
3078 	    (newcaps & CEPH_CAP_FILE_LAZYIO) == 0 &&
3079 	    !(ci->i_wrbuffer_ref || ci->i_wb_ref)) {
3080 		if (try_nonblocking_invalidate(inode)) {
3081 			/* there were locked pages.. invalidate later
3082 			   in a separate thread. */
3083 			if (ci->i_rdcache_revoking != ci->i_rdcache_gen) {
3084 				queue_invalidate = true;
3085 				ci->i_rdcache_revoking = ci->i_rdcache_gen;
3086 			}
3087 		}
3088 	}
3089 
3090 	if (was_stale)
3091 		cap->issued = cap->implemented = CEPH_CAP_PIN;
3092 
3093 	/*
3094 	 * auth mds of the inode changed. we received the cap export message,
3095 	 * but still haven't received the cap import message. handle_cap_export
3096 	 * updated the new auth MDS' cap.
3097 	 *
3098 	 * "ceph_seq_cmp(seq, cap->seq) <= 0" means we are processing a message
3099 	 * that was sent before the cap import message. So don't remove caps.
3100 	 */
3101 	if (ceph_seq_cmp(seq, cap->seq) <= 0) {
3102 		WARN_ON(cap != ci->i_auth_cap);
3103 		WARN_ON(cap->cap_id != le64_to_cpu(grant->cap_id));
3104 		seq = cap->seq;
3105 		newcaps |= cap->issued;
3106 	}
3107 
3108 	/* side effects now are allowed */
3109 	cap->cap_gen = session->s_cap_gen;
3110 	cap->seq = seq;
3111 
3112 	__check_cap_issue(ci, cap, newcaps);
3113 
3114 	if ((newcaps & CEPH_CAP_AUTH_SHARED) &&
3115 	    (extra_info->issued & CEPH_CAP_AUTH_EXCL) == 0) {
3116 		inode->i_mode = le32_to_cpu(grant->mode);
3117 		inode->i_uid = make_kuid(&init_user_ns, le32_to_cpu(grant->uid));
3118 		inode->i_gid = make_kgid(&init_user_ns, le32_to_cpu(grant->gid));
3119 		dout("%p mode 0%o uid.gid %d.%d\n", inode, inode->i_mode,
3120 		     from_kuid(&init_user_ns, inode->i_uid),
3121 		     from_kgid(&init_user_ns, inode->i_gid));
3122 	}
3123 
3124 	if ((newcaps & CEPH_CAP_LINK_SHARED) &&
3125 	    (extra_info->issued & CEPH_CAP_LINK_EXCL) == 0) {
3126 		set_nlink(inode, le32_to_cpu(grant->nlink));
3127 		if (inode->i_nlink == 0 &&
3128 		    (newcaps & (CEPH_CAP_LINK_SHARED | CEPH_CAP_LINK_EXCL)))
3129 			deleted_inode = true;
3130 	}
3131 
3132 	if ((extra_info->issued & CEPH_CAP_XATTR_EXCL) == 0 &&
3133 	    grant->xattr_len) {
3134 		int len = le32_to_cpu(grant->xattr_len);
3135 		u64 version = le64_to_cpu(grant->xattr_version);
3136 
3137 		if (version > ci->i_xattrs.version) {
3138 			dout(" got new xattrs v%llu on %p len %d\n",
3139 			     version, inode, len);
3140 			if (ci->i_xattrs.blob)
3141 				ceph_buffer_put(ci->i_xattrs.blob);
3142 			ci->i_xattrs.blob = ceph_buffer_get(xattr_buf);
3143 			ci->i_xattrs.version = version;
3144 			ceph_forget_all_cached_acls(inode);
3145 		}
3146 	}
3147 
3148 	if (newcaps & CEPH_CAP_ANY_RD) {
3149 		struct timespec64 mtime, atime, ctime;
3150 		/* ctime/mtime/atime? */
3151 		ceph_decode_timespec64(&mtime, &grant->mtime);
3152 		ceph_decode_timespec64(&atime, &grant->atime);
3153 		ceph_decode_timespec64(&ctime, &grant->ctime);
3154 		ceph_fill_file_time(inode, extra_info->issued,
3155 				    le32_to_cpu(grant->time_warp_seq),
3156 				    &ctime, &mtime, &atime);
3157 	}
3158 
3159 	if ((newcaps & CEPH_CAP_FILE_SHARED) && extra_info->dirstat_valid) {
3160 		ci->i_files = extra_info->nfiles;
3161 		ci->i_subdirs = extra_info->nsubdirs;
3162 	}
3163 
3164 	if (newcaps & (CEPH_CAP_ANY_FILE_RD | CEPH_CAP_ANY_FILE_WR)) {
3165 		/* file layout may have changed */
3166 		s64 old_pool = ci->i_layout.pool_id;
3167 		struct ceph_string *old_ns;
3168 
3169 		ceph_file_layout_from_legacy(&ci->i_layout, &grant->layout);
3170 		old_ns = rcu_dereference_protected(ci->i_layout.pool_ns,
3171 					lockdep_is_held(&ci->i_ceph_lock));
3172 		rcu_assign_pointer(ci->i_layout.pool_ns, extra_info->pool_ns);
3173 
3174 		if (ci->i_layout.pool_id != old_pool ||
3175 		    extra_info->pool_ns != old_ns)
3176 			ci->i_ceph_flags &= ~CEPH_I_POOL_PERM;
3177 
3178 		extra_info->pool_ns = old_ns;
3179 
3180 		/* size/truncate_seq? */
3181 		queue_trunc = ceph_fill_file_size(inode, extra_info->issued,
3182 					le32_to_cpu(grant->truncate_seq),
3183 					le64_to_cpu(grant->truncate_size),
3184 					size);
3185 	}
3186 
3187 	if (ci->i_auth_cap == cap && (newcaps & CEPH_CAP_ANY_FILE_WR)) {
3188 		if (max_size != ci->i_max_size) {
3189 			dout("max_size %lld -> %llu\n",
3190 			     ci->i_max_size, max_size);
3191 			ci->i_max_size = max_size;
3192 			if (max_size >= ci->i_wanted_max_size) {
3193 				ci->i_wanted_max_size = 0;  /* reset */
3194 				ci->i_requested_max_size = 0;
3195 			}
3196 			wake = true;
3197 		} else if (ci->i_wanted_max_size > ci->i_max_size &&
3198 			   ci->i_wanted_max_size > ci->i_requested_max_size) {
3199 			/* CEPH_CAP_OP_IMPORT */
3200 			wake = true;
3201 		}
3202 	}
3203 
3204 	/* check cap bits */
3205 	wanted = __ceph_caps_wanted(ci);
3206 	used = __ceph_caps_used(ci);
3207 	dirty = __ceph_caps_dirty(ci);
3208 	dout(" my wanted = %s, used = %s, dirty %s\n",
3209 	     ceph_cap_string(wanted),
3210 	     ceph_cap_string(used),
3211 	     ceph_cap_string(dirty));
3212 
3213 	if ((was_stale || le32_to_cpu(grant->op) == CEPH_CAP_OP_IMPORT) &&
3214 	    (wanted & ~(cap->mds_wanted | newcaps))) {
3215 		/*
3216 		 * If mds is importing cap, prior cap messages that update
3217 		 * 'wanted' may get dropped by mds (migrate seq mismatch).
3218 		 *
3219 		 * We don't send cap message to update 'wanted' if what we
3220 		 * want are already issued. If mds revokes caps, cap message
3221 		 * that releases caps also tells mds what we want. But if
3222 		 * caps got revoked by mds forcedly (session stale). We may
3223 		 * haven't told mds what we want.
3224 		 */
3225 		check_caps = 1;
3226 	}
3227 
3228 	/* revocation, grant, or no-op? */
3229 	if (cap->issued & ~newcaps) {
3230 		int revoking = cap->issued & ~newcaps;
3231 
3232 		dout("revocation: %s -> %s (revoking %s)\n",
3233 		     ceph_cap_string(cap->issued),
3234 		     ceph_cap_string(newcaps),
3235 		     ceph_cap_string(revoking));
3236 		if (revoking & used & CEPH_CAP_FILE_BUFFER)
3237 			writeback = true;  /* initiate writeback; will delay ack */
3238 		else if (revoking == CEPH_CAP_FILE_CACHE &&
3239 			 (newcaps & CEPH_CAP_FILE_LAZYIO) == 0 &&
3240 			 queue_invalidate)
3241 			; /* do nothing yet, invalidation will be queued */
3242 		else if (cap == ci->i_auth_cap)
3243 			check_caps = 1; /* check auth cap only */
3244 		else
3245 			check_caps = 2; /* check all caps */
3246 		cap->issued = newcaps;
3247 		cap->implemented |= newcaps;
3248 	} else if (cap->issued == newcaps) {
3249 		dout("caps unchanged: %s -> %s\n",
3250 		     ceph_cap_string(cap->issued), ceph_cap_string(newcaps));
3251 	} else {
3252 		dout("grant: %s -> %s\n", ceph_cap_string(cap->issued),
3253 		     ceph_cap_string(newcaps));
3254 		/* non-auth MDS is revoking the newly grant caps ? */
3255 		if (cap == ci->i_auth_cap &&
3256 		    __ceph_caps_revoking_other(ci, cap, newcaps))
3257 		    check_caps = 2;
3258 
3259 		cap->issued = newcaps;
3260 		cap->implemented |= newcaps; /* add bits only, to
3261 					      * avoid stepping on a
3262 					      * pending revocation */
3263 		wake = true;
3264 	}
3265 	BUG_ON(cap->issued & ~cap->implemented);
3266 
3267 	if (extra_info->inline_version > 0 &&
3268 	    extra_info->inline_version >= ci->i_inline_version) {
3269 		ci->i_inline_version = extra_info->inline_version;
3270 		if (ci->i_inline_version != CEPH_INLINE_NONE &&
3271 		    (newcaps & (CEPH_CAP_FILE_CACHE|CEPH_CAP_FILE_LAZYIO)))
3272 			fill_inline = true;
3273 	}
3274 
3275 	if (le32_to_cpu(grant->op) == CEPH_CAP_OP_IMPORT) {
3276 		if (newcaps & ~extra_info->issued)
3277 			wake = true;
3278 		kick_flushing_inode_caps(session->s_mdsc, session, inode);
3279 		up_read(&session->s_mdsc->snap_rwsem);
3280 	} else {
3281 		spin_unlock(&ci->i_ceph_lock);
3282 	}
3283 
3284 	if (fill_inline)
3285 		ceph_fill_inline_data(inode, NULL, extra_info->inline_data,
3286 				      extra_info->inline_len);
3287 
3288 	if (queue_trunc)
3289 		ceph_queue_vmtruncate(inode);
3290 
3291 	if (writeback)
3292 		/*
3293 		 * queue inode for writeback: we can't actually call
3294 		 * filemap_write_and_wait, etc. from message handler
3295 		 * context.
3296 		 */
3297 		ceph_queue_writeback(inode);
3298 	if (queue_invalidate)
3299 		ceph_queue_invalidate(inode);
3300 	if (deleted_inode)
3301 		invalidate_aliases(inode);
3302 	if (wake)
3303 		wake_up_all(&ci->i_cap_wq);
3304 
3305 	if (check_caps == 1)
3306 		ceph_check_caps(ci, CHECK_CAPS_NODELAY|CHECK_CAPS_AUTHONLY,
3307 				session);
3308 	else if (check_caps == 2)
3309 		ceph_check_caps(ci, CHECK_CAPS_NODELAY, session);
3310 	else
3311 		mutex_unlock(&session->s_mutex);
3312 }
3313 
3314 /*
3315  * Handle FLUSH_ACK from MDS, indicating that metadata we sent to the
3316  * MDS has been safely committed.
3317  */
3318 static void handle_cap_flush_ack(struct inode *inode, u64 flush_tid,
3319 				 struct ceph_mds_caps *m,
3320 				 struct ceph_mds_session *session,
3321 				 struct ceph_cap *cap)
3322 	__releases(ci->i_ceph_lock)
3323 {
3324 	struct ceph_inode_info *ci = ceph_inode(inode);
3325 	struct ceph_mds_client *mdsc = ceph_sb_to_client(inode->i_sb)->mdsc;
3326 	struct ceph_cap_flush *cf, *tmp_cf;
3327 	LIST_HEAD(to_remove);
3328 	unsigned seq = le32_to_cpu(m->seq);
3329 	int dirty = le32_to_cpu(m->dirty);
3330 	int cleaned = 0;
3331 	bool drop = false;
3332 	bool wake_ci = false;
3333 	bool wake_mdsc = false;
3334 
3335 	list_for_each_entry_safe(cf, tmp_cf, &ci->i_cap_flush_list, i_list) {
3336 		if (cf->tid == flush_tid)
3337 			cleaned = cf->caps;
3338 		if (cf->caps == 0) /* capsnap */
3339 			continue;
3340 		if (cf->tid <= flush_tid) {
3341 			if (__finish_cap_flush(NULL, ci, cf))
3342 				wake_ci = true;
3343 			list_add_tail(&cf->i_list, &to_remove);
3344 		} else {
3345 			cleaned &= ~cf->caps;
3346 			if (!cleaned)
3347 				break;
3348 		}
3349 	}
3350 
3351 	dout("handle_cap_flush_ack inode %p mds%d seq %d on %s cleaned %s,"
3352 	     " flushing %s -> %s\n",
3353 	     inode, session->s_mds, seq, ceph_cap_string(dirty),
3354 	     ceph_cap_string(cleaned), ceph_cap_string(ci->i_flushing_caps),
3355 	     ceph_cap_string(ci->i_flushing_caps & ~cleaned));
3356 
3357 	if (list_empty(&to_remove) && !cleaned)
3358 		goto out;
3359 
3360 	ci->i_flushing_caps &= ~cleaned;
3361 
3362 	spin_lock(&mdsc->cap_dirty_lock);
3363 
3364 	list_for_each_entry(cf, &to_remove, i_list) {
3365 		if (__finish_cap_flush(mdsc, NULL, cf))
3366 			wake_mdsc = true;
3367 	}
3368 
3369 	if (ci->i_flushing_caps == 0) {
3370 		if (list_empty(&ci->i_cap_flush_list)) {
3371 			list_del_init(&ci->i_flushing_item);
3372 			if (!list_empty(&session->s_cap_flushing)) {
3373 				dout(" mds%d still flushing cap on %p\n",
3374 				     session->s_mds,
3375 				     &list_first_entry(&session->s_cap_flushing,
3376 						struct ceph_inode_info,
3377 						i_flushing_item)->vfs_inode);
3378 			}
3379 		}
3380 		mdsc->num_cap_flushing--;
3381 		dout(" inode %p now !flushing\n", inode);
3382 
3383 		if (ci->i_dirty_caps == 0) {
3384 			dout(" inode %p now clean\n", inode);
3385 			BUG_ON(!list_empty(&ci->i_dirty_item));
3386 			drop = true;
3387 			if (ci->i_wr_ref == 0 &&
3388 			    ci->i_wrbuffer_ref_head == 0) {
3389 				BUG_ON(!ci->i_head_snapc);
3390 				ceph_put_snap_context(ci->i_head_snapc);
3391 				ci->i_head_snapc = NULL;
3392 			}
3393 		} else {
3394 			BUG_ON(list_empty(&ci->i_dirty_item));
3395 		}
3396 	}
3397 	spin_unlock(&mdsc->cap_dirty_lock);
3398 
3399 out:
3400 	spin_unlock(&ci->i_ceph_lock);
3401 
3402 	while (!list_empty(&to_remove)) {
3403 		cf = list_first_entry(&to_remove,
3404 				      struct ceph_cap_flush, i_list);
3405 		list_del(&cf->i_list);
3406 		ceph_free_cap_flush(cf);
3407 	}
3408 
3409 	if (wake_ci)
3410 		wake_up_all(&ci->i_cap_wq);
3411 	if (wake_mdsc)
3412 		wake_up_all(&mdsc->cap_flushing_wq);
3413 	if (drop)
3414 		iput(inode);
3415 }
3416 
3417 /*
3418  * Handle FLUSHSNAP_ACK.  MDS has flushed snap data to disk and we can
3419  * throw away our cap_snap.
3420  *
3421  * Caller hold s_mutex.
3422  */
3423 static void handle_cap_flushsnap_ack(struct inode *inode, u64 flush_tid,
3424 				     struct ceph_mds_caps *m,
3425 				     struct ceph_mds_session *session)
3426 {
3427 	struct ceph_inode_info *ci = ceph_inode(inode);
3428 	struct ceph_mds_client *mdsc = ceph_sb_to_client(inode->i_sb)->mdsc;
3429 	u64 follows = le64_to_cpu(m->snap_follows);
3430 	struct ceph_cap_snap *capsnap;
3431 	bool flushed = false;
3432 	bool wake_ci = false;
3433 	bool wake_mdsc = false;
3434 
3435 	dout("handle_cap_flushsnap_ack inode %p ci %p mds%d follows %lld\n",
3436 	     inode, ci, session->s_mds, follows);
3437 
3438 	spin_lock(&ci->i_ceph_lock);
3439 	list_for_each_entry(capsnap, &ci->i_cap_snaps, ci_item) {
3440 		if (capsnap->follows == follows) {
3441 			if (capsnap->cap_flush.tid != flush_tid) {
3442 				dout(" cap_snap %p follows %lld tid %lld !="
3443 				     " %lld\n", capsnap, follows,
3444 				     flush_tid, capsnap->cap_flush.tid);
3445 				break;
3446 			}
3447 			flushed = true;
3448 			break;
3449 		} else {
3450 			dout(" skipping cap_snap %p follows %lld\n",
3451 			     capsnap, capsnap->follows);
3452 		}
3453 	}
3454 	if (flushed) {
3455 		WARN_ON(capsnap->dirty_pages || capsnap->writing);
3456 		dout(" removing %p cap_snap %p follows %lld\n",
3457 		     inode, capsnap, follows);
3458 		list_del(&capsnap->ci_item);
3459 		if (__finish_cap_flush(NULL, ci, &capsnap->cap_flush))
3460 			wake_ci = true;
3461 
3462 		spin_lock(&mdsc->cap_dirty_lock);
3463 
3464 		if (list_empty(&ci->i_cap_flush_list))
3465 			list_del_init(&ci->i_flushing_item);
3466 
3467 		if (__finish_cap_flush(mdsc, NULL, &capsnap->cap_flush))
3468 			wake_mdsc = true;
3469 
3470 		spin_unlock(&mdsc->cap_dirty_lock);
3471 	}
3472 	spin_unlock(&ci->i_ceph_lock);
3473 	if (flushed) {
3474 		ceph_put_snap_context(capsnap->context);
3475 		ceph_put_cap_snap(capsnap);
3476 		if (wake_ci)
3477 			wake_up_all(&ci->i_cap_wq);
3478 		if (wake_mdsc)
3479 			wake_up_all(&mdsc->cap_flushing_wq);
3480 		iput(inode);
3481 	}
3482 }
3483 
3484 /*
3485  * Handle TRUNC from MDS, indicating file truncation.
3486  *
3487  * caller hold s_mutex.
3488  */
3489 static void handle_cap_trunc(struct inode *inode,
3490 			     struct ceph_mds_caps *trunc,
3491 			     struct ceph_mds_session *session)
3492 	__releases(ci->i_ceph_lock)
3493 {
3494 	struct ceph_inode_info *ci = ceph_inode(inode);
3495 	int mds = session->s_mds;
3496 	int seq = le32_to_cpu(trunc->seq);
3497 	u32 truncate_seq = le32_to_cpu(trunc->truncate_seq);
3498 	u64 truncate_size = le64_to_cpu(trunc->truncate_size);
3499 	u64 size = le64_to_cpu(trunc->size);
3500 	int implemented = 0;
3501 	int dirty = __ceph_caps_dirty(ci);
3502 	int issued = __ceph_caps_issued(ceph_inode(inode), &implemented);
3503 	int queue_trunc = 0;
3504 
3505 	issued |= implemented | dirty;
3506 
3507 	dout("handle_cap_trunc inode %p mds%d seq %d to %lld seq %d\n",
3508 	     inode, mds, seq, truncate_size, truncate_seq);
3509 	queue_trunc = ceph_fill_file_size(inode, issued,
3510 					  truncate_seq, truncate_size, size);
3511 	spin_unlock(&ci->i_ceph_lock);
3512 
3513 	if (queue_trunc)
3514 		ceph_queue_vmtruncate(inode);
3515 }
3516 
3517 /*
3518  * Handle EXPORT from MDS.  Cap is being migrated _from_ this mds to a
3519  * different one.  If we are the most recent migration we've seen (as
3520  * indicated by mseq), make note of the migrating cap bits for the
3521  * duration (until we see the corresponding IMPORT).
3522  *
3523  * caller holds s_mutex
3524  */
3525 static void handle_cap_export(struct inode *inode, struct ceph_mds_caps *ex,
3526 			      struct ceph_mds_cap_peer *ph,
3527 			      struct ceph_mds_session *session)
3528 {
3529 	struct ceph_mds_client *mdsc = ceph_inode_to_client(inode)->mdsc;
3530 	struct ceph_mds_session *tsession = NULL;
3531 	struct ceph_cap *cap, *tcap, *new_cap = NULL;
3532 	struct ceph_inode_info *ci = ceph_inode(inode);
3533 	u64 t_cap_id;
3534 	unsigned mseq = le32_to_cpu(ex->migrate_seq);
3535 	unsigned t_seq, t_mseq;
3536 	int target, issued;
3537 	int mds = session->s_mds;
3538 
3539 	if (ph) {
3540 		t_cap_id = le64_to_cpu(ph->cap_id);
3541 		t_seq = le32_to_cpu(ph->seq);
3542 		t_mseq = le32_to_cpu(ph->mseq);
3543 		target = le32_to_cpu(ph->mds);
3544 	} else {
3545 		t_cap_id = t_seq = t_mseq = 0;
3546 		target = -1;
3547 	}
3548 
3549 	dout("handle_cap_export inode %p ci %p mds%d mseq %d target %d\n",
3550 	     inode, ci, mds, mseq, target);
3551 retry:
3552 	spin_lock(&ci->i_ceph_lock);
3553 	cap = __get_cap_for_mds(ci, mds);
3554 	if (!cap || cap->cap_id != le64_to_cpu(ex->cap_id))
3555 		goto out_unlock;
3556 
3557 	if (target < 0) {
3558 		if (cap->mds_wanted | cap->issued)
3559 			ci->i_ceph_flags |= CEPH_I_CAP_DROPPED;
3560 		__ceph_remove_cap(cap, false);
3561 		goto out_unlock;
3562 	}
3563 
3564 	/*
3565 	 * now we know we haven't received the cap import message yet
3566 	 * because the exported cap still exist.
3567 	 */
3568 
3569 	issued = cap->issued;
3570 	if (issued != cap->implemented)
3571 		pr_err_ratelimited("handle_cap_export: issued != implemented: "
3572 				"ino (%llx.%llx) mds%d seq %d mseq %d "
3573 				"issued %s implemented %s\n",
3574 				ceph_vinop(inode), mds, cap->seq, cap->mseq,
3575 				ceph_cap_string(issued),
3576 				ceph_cap_string(cap->implemented));
3577 
3578 
3579 	tcap = __get_cap_for_mds(ci, target);
3580 	if (tcap) {
3581 		/* already have caps from the target */
3582 		if (tcap->cap_id == t_cap_id &&
3583 		    ceph_seq_cmp(tcap->seq, t_seq) < 0) {
3584 			dout(" updating import cap %p mds%d\n", tcap, target);
3585 			tcap->cap_id = t_cap_id;
3586 			tcap->seq = t_seq - 1;
3587 			tcap->issue_seq = t_seq - 1;
3588 			tcap->issued |= issued;
3589 			tcap->implemented |= issued;
3590 			if (cap == ci->i_auth_cap)
3591 				ci->i_auth_cap = tcap;
3592 
3593 			if (!list_empty(&ci->i_cap_flush_list) &&
3594 			    ci->i_auth_cap == tcap) {
3595 				spin_lock(&mdsc->cap_dirty_lock);
3596 				list_move_tail(&ci->i_flushing_item,
3597 					       &tcap->session->s_cap_flushing);
3598 				spin_unlock(&mdsc->cap_dirty_lock);
3599 			}
3600 		}
3601 		__ceph_remove_cap(cap, false);
3602 		goto out_unlock;
3603 	} else if (tsession) {
3604 		/* add placeholder for the export tagert */
3605 		int flag = (cap == ci->i_auth_cap) ? CEPH_CAP_FLAG_AUTH : 0;
3606 		tcap = new_cap;
3607 		ceph_add_cap(inode, tsession, t_cap_id, -1, issued, 0,
3608 			     t_seq - 1, t_mseq, (u64)-1, flag, &new_cap);
3609 
3610 		if (!list_empty(&ci->i_cap_flush_list) &&
3611 		    ci->i_auth_cap == tcap) {
3612 			spin_lock(&mdsc->cap_dirty_lock);
3613 			list_move_tail(&ci->i_flushing_item,
3614 				       &tcap->session->s_cap_flushing);
3615 			spin_unlock(&mdsc->cap_dirty_lock);
3616 		}
3617 
3618 		__ceph_remove_cap(cap, false);
3619 		goto out_unlock;
3620 	}
3621 
3622 	spin_unlock(&ci->i_ceph_lock);
3623 	mutex_unlock(&session->s_mutex);
3624 
3625 	/* open target session */
3626 	tsession = ceph_mdsc_open_export_target_session(mdsc, target);
3627 	if (!IS_ERR(tsession)) {
3628 		if (mds > target) {
3629 			mutex_lock(&session->s_mutex);
3630 			mutex_lock_nested(&tsession->s_mutex,
3631 					  SINGLE_DEPTH_NESTING);
3632 		} else {
3633 			mutex_lock(&tsession->s_mutex);
3634 			mutex_lock_nested(&session->s_mutex,
3635 					  SINGLE_DEPTH_NESTING);
3636 		}
3637 		new_cap = ceph_get_cap(mdsc, NULL);
3638 	} else {
3639 		WARN_ON(1);
3640 		tsession = NULL;
3641 		target = -1;
3642 	}
3643 	goto retry;
3644 
3645 out_unlock:
3646 	spin_unlock(&ci->i_ceph_lock);
3647 	mutex_unlock(&session->s_mutex);
3648 	if (tsession) {
3649 		mutex_unlock(&tsession->s_mutex);
3650 		ceph_put_mds_session(tsession);
3651 	}
3652 	if (new_cap)
3653 		ceph_put_cap(mdsc, new_cap);
3654 }
3655 
3656 /*
3657  * Handle cap IMPORT.
3658  *
3659  * caller holds s_mutex. acquires i_ceph_lock
3660  */
3661 static void handle_cap_import(struct ceph_mds_client *mdsc,
3662 			      struct inode *inode, struct ceph_mds_caps *im,
3663 			      struct ceph_mds_cap_peer *ph,
3664 			      struct ceph_mds_session *session,
3665 			      struct ceph_cap **target_cap, int *old_issued)
3666 	__acquires(ci->i_ceph_lock)
3667 {
3668 	struct ceph_inode_info *ci = ceph_inode(inode);
3669 	struct ceph_cap *cap, *ocap, *new_cap = NULL;
3670 	int mds = session->s_mds;
3671 	int issued;
3672 	unsigned caps = le32_to_cpu(im->caps);
3673 	unsigned wanted = le32_to_cpu(im->wanted);
3674 	unsigned seq = le32_to_cpu(im->seq);
3675 	unsigned mseq = le32_to_cpu(im->migrate_seq);
3676 	u64 realmino = le64_to_cpu(im->realm);
3677 	u64 cap_id = le64_to_cpu(im->cap_id);
3678 	u64 p_cap_id;
3679 	int peer;
3680 
3681 	if (ph) {
3682 		p_cap_id = le64_to_cpu(ph->cap_id);
3683 		peer = le32_to_cpu(ph->mds);
3684 	} else {
3685 		p_cap_id = 0;
3686 		peer = -1;
3687 	}
3688 
3689 	dout("handle_cap_import inode %p ci %p mds%d mseq %d peer %d\n",
3690 	     inode, ci, mds, mseq, peer);
3691 
3692 retry:
3693 	spin_lock(&ci->i_ceph_lock);
3694 	cap = __get_cap_for_mds(ci, mds);
3695 	if (!cap) {
3696 		if (!new_cap) {
3697 			spin_unlock(&ci->i_ceph_lock);
3698 			new_cap = ceph_get_cap(mdsc, NULL);
3699 			goto retry;
3700 		}
3701 		cap = new_cap;
3702 	} else {
3703 		if (new_cap) {
3704 			ceph_put_cap(mdsc, new_cap);
3705 			new_cap = NULL;
3706 		}
3707 	}
3708 
3709 	__ceph_caps_issued(ci, &issued);
3710 	issued |= __ceph_caps_dirty(ci);
3711 
3712 	ceph_add_cap(inode, session, cap_id, -1, caps, wanted, seq, mseq,
3713 		     realmino, CEPH_CAP_FLAG_AUTH, &new_cap);
3714 
3715 	ocap = peer >= 0 ? __get_cap_for_mds(ci, peer) : NULL;
3716 	if (ocap && ocap->cap_id == p_cap_id) {
3717 		dout(" remove export cap %p mds%d flags %d\n",
3718 		     ocap, peer, ph->flags);
3719 		if ((ph->flags & CEPH_CAP_FLAG_AUTH) &&
3720 		    (ocap->seq != le32_to_cpu(ph->seq) ||
3721 		     ocap->mseq != le32_to_cpu(ph->mseq))) {
3722 			pr_err_ratelimited("handle_cap_import: "
3723 					"mismatched seq/mseq: ino (%llx.%llx) "
3724 					"mds%d seq %d mseq %d importer mds%d "
3725 					"has peer seq %d mseq %d\n",
3726 					ceph_vinop(inode), peer, ocap->seq,
3727 					ocap->mseq, mds, le32_to_cpu(ph->seq),
3728 					le32_to_cpu(ph->mseq));
3729 		}
3730 		__ceph_remove_cap(ocap, (ph->flags & CEPH_CAP_FLAG_RELEASE));
3731 	}
3732 
3733 	/* make sure we re-request max_size, if necessary */
3734 	ci->i_requested_max_size = 0;
3735 
3736 	*old_issued = issued;
3737 	*target_cap = cap;
3738 }
3739 
3740 /*
3741  * Handle a caps message from the MDS.
3742  *
3743  * Identify the appropriate session, inode, and call the right handler
3744  * based on the cap op.
3745  */
3746 void ceph_handle_caps(struct ceph_mds_session *session,
3747 		      struct ceph_msg *msg)
3748 {
3749 	struct ceph_mds_client *mdsc = session->s_mdsc;
3750 	struct inode *inode;
3751 	struct ceph_inode_info *ci;
3752 	struct ceph_cap *cap;
3753 	struct ceph_mds_caps *h;
3754 	struct ceph_mds_cap_peer *peer = NULL;
3755 	struct ceph_snap_realm *realm = NULL;
3756 	int op;
3757 	int msg_version = le16_to_cpu(msg->hdr.version);
3758 	u32 seq, mseq;
3759 	struct ceph_vino vino;
3760 	void *snaptrace;
3761 	size_t snaptrace_len;
3762 	void *p, *end;
3763 	struct cap_extra_info extra_info = {};
3764 
3765 	dout("handle_caps from mds%d\n", session->s_mds);
3766 
3767 	/* decode */
3768 	end = msg->front.iov_base + msg->front.iov_len;
3769 	if (msg->front.iov_len < sizeof(*h))
3770 		goto bad;
3771 	h = msg->front.iov_base;
3772 	op = le32_to_cpu(h->op);
3773 	vino.ino = le64_to_cpu(h->ino);
3774 	vino.snap = CEPH_NOSNAP;
3775 	seq = le32_to_cpu(h->seq);
3776 	mseq = le32_to_cpu(h->migrate_seq);
3777 
3778 	snaptrace = h + 1;
3779 	snaptrace_len = le32_to_cpu(h->snap_trace_len);
3780 	p = snaptrace + snaptrace_len;
3781 
3782 	if (msg_version >= 2) {
3783 		u32 flock_len;
3784 		ceph_decode_32_safe(&p, end, flock_len, bad);
3785 		if (p + flock_len > end)
3786 			goto bad;
3787 		p += flock_len;
3788 	}
3789 
3790 	if (msg_version >= 3) {
3791 		if (op == CEPH_CAP_OP_IMPORT) {
3792 			if (p + sizeof(*peer) > end)
3793 				goto bad;
3794 			peer = p;
3795 			p += sizeof(*peer);
3796 		} else if (op == CEPH_CAP_OP_EXPORT) {
3797 			/* recorded in unused fields */
3798 			peer = (void *)&h->size;
3799 		}
3800 	}
3801 
3802 	if (msg_version >= 4) {
3803 		ceph_decode_64_safe(&p, end, extra_info.inline_version, bad);
3804 		ceph_decode_32_safe(&p, end, extra_info.inline_len, bad);
3805 		if (p + extra_info.inline_len > end)
3806 			goto bad;
3807 		extra_info.inline_data = p;
3808 		p += extra_info.inline_len;
3809 	}
3810 
3811 	if (msg_version >= 5) {
3812 		struct ceph_osd_client	*osdc = &mdsc->fsc->client->osdc;
3813 		u32			epoch_barrier;
3814 
3815 		ceph_decode_32_safe(&p, end, epoch_barrier, bad);
3816 		ceph_osdc_update_epoch_barrier(osdc, epoch_barrier);
3817 	}
3818 
3819 	if (msg_version >= 8) {
3820 		u64 flush_tid;
3821 		u32 caller_uid, caller_gid;
3822 		u32 pool_ns_len;
3823 
3824 		/* version >= 6 */
3825 		ceph_decode_64_safe(&p, end, flush_tid, bad);
3826 		/* version >= 7 */
3827 		ceph_decode_32_safe(&p, end, caller_uid, bad);
3828 		ceph_decode_32_safe(&p, end, caller_gid, bad);
3829 		/* version >= 8 */
3830 		ceph_decode_32_safe(&p, end, pool_ns_len, bad);
3831 		if (pool_ns_len > 0) {
3832 			ceph_decode_need(&p, end, pool_ns_len, bad);
3833 			extra_info.pool_ns =
3834 				ceph_find_or_create_string(p, pool_ns_len);
3835 			p += pool_ns_len;
3836 		}
3837 	}
3838 
3839 	if (msg_version >= 11) {
3840 		struct ceph_timespec *btime;
3841 		u64 change_attr;
3842 		u32 flags;
3843 
3844 		/* version >= 9 */
3845 		if (p + sizeof(*btime) > end)
3846 			goto bad;
3847 		btime = p;
3848 		p += sizeof(*btime);
3849 		ceph_decode_64_safe(&p, end, change_attr, bad);
3850 		/* version >= 10 */
3851 		ceph_decode_32_safe(&p, end, flags, bad);
3852 		/* version >= 11 */
3853 		extra_info.dirstat_valid = true;
3854 		ceph_decode_64_safe(&p, end, extra_info.nfiles, bad);
3855 		ceph_decode_64_safe(&p, end, extra_info.nsubdirs, bad);
3856 	}
3857 
3858 	/* lookup ino */
3859 	inode = ceph_find_inode(mdsc->fsc->sb, vino);
3860 	ci = ceph_inode(inode);
3861 	dout(" op %s ino %llx.%llx inode %p\n", ceph_cap_op_name(op), vino.ino,
3862 	     vino.snap, inode);
3863 
3864 	mutex_lock(&session->s_mutex);
3865 	session->s_seq++;
3866 	dout(" mds%d seq %lld cap seq %u\n", session->s_mds, session->s_seq,
3867 	     (unsigned)seq);
3868 
3869 	if (!inode) {
3870 		dout(" i don't have ino %llx\n", vino.ino);
3871 
3872 		if (op == CEPH_CAP_OP_IMPORT) {
3873 			cap = ceph_get_cap(mdsc, NULL);
3874 			cap->cap_ino = vino.ino;
3875 			cap->queue_release = 1;
3876 			cap->cap_id = le64_to_cpu(h->cap_id);
3877 			cap->mseq = mseq;
3878 			cap->seq = seq;
3879 			cap->issue_seq = seq;
3880 			spin_lock(&session->s_cap_lock);
3881 			list_add_tail(&cap->session_caps,
3882 					&session->s_cap_releases);
3883 			session->s_num_cap_releases++;
3884 			spin_unlock(&session->s_cap_lock);
3885 		}
3886 		goto flush_cap_releases;
3887 	}
3888 
3889 	/* these will work even if we don't have a cap yet */
3890 	switch (op) {
3891 	case CEPH_CAP_OP_FLUSHSNAP_ACK:
3892 		handle_cap_flushsnap_ack(inode, le64_to_cpu(msg->hdr.tid),
3893 					 h, session);
3894 		goto done;
3895 
3896 	case CEPH_CAP_OP_EXPORT:
3897 		handle_cap_export(inode, h, peer, session);
3898 		goto done_unlocked;
3899 
3900 	case CEPH_CAP_OP_IMPORT:
3901 		realm = NULL;
3902 		if (snaptrace_len) {
3903 			down_write(&mdsc->snap_rwsem);
3904 			ceph_update_snap_trace(mdsc, snaptrace,
3905 					       snaptrace + snaptrace_len,
3906 					       false, &realm);
3907 			downgrade_write(&mdsc->snap_rwsem);
3908 		} else {
3909 			down_read(&mdsc->snap_rwsem);
3910 		}
3911 		handle_cap_import(mdsc, inode, h, peer, session,
3912 				  &cap, &extra_info.issued);
3913 		handle_cap_grant(inode, session, cap,
3914 				 h, msg->middle, &extra_info);
3915 		if (realm)
3916 			ceph_put_snap_realm(mdsc, realm);
3917 		goto done_unlocked;
3918 	}
3919 
3920 	/* the rest require a cap */
3921 	spin_lock(&ci->i_ceph_lock);
3922 	cap = __get_cap_for_mds(ceph_inode(inode), session->s_mds);
3923 	if (!cap) {
3924 		dout(" no cap on %p ino %llx.%llx from mds%d\n",
3925 		     inode, ceph_ino(inode), ceph_snap(inode),
3926 		     session->s_mds);
3927 		spin_unlock(&ci->i_ceph_lock);
3928 		goto flush_cap_releases;
3929 	}
3930 
3931 	/* note that each of these drops i_ceph_lock for us */
3932 	switch (op) {
3933 	case CEPH_CAP_OP_REVOKE:
3934 	case CEPH_CAP_OP_GRANT:
3935 		__ceph_caps_issued(ci, &extra_info.issued);
3936 		extra_info.issued |= __ceph_caps_dirty(ci);
3937 		handle_cap_grant(inode, session, cap,
3938 				 h, msg->middle, &extra_info);
3939 		goto done_unlocked;
3940 
3941 	case CEPH_CAP_OP_FLUSH_ACK:
3942 		handle_cap_flush_ack(inode, le64_to_cpu(msg->hdr.tid),
3943 				     h, session, cap);
3944 		break;
3945 
3946 	case CEPH_CAP_OP_TRUNC:
3947 		handle_cap_trunc(inode, h, session);
3948 		break;
3949 
3950 	default:
3951 		spin_unlock(&ci->i_ceph_lock);
3952 		pr_err("ceph_handle_caps: unknown cap op %d %s\n", op,
3953 		       ceph_cap_op_name(op));
3954 	}
3955 
3956 	goto done;
3957 
3958 flush_cap_releases:
3959 	/*
3960 	 * send any cap release message to try to move things
3961 	 * along for the mds (who clearly thinks we still have this
3962 	 * cap).
3963 	 */
3964 	ceph_send_cap_releases(mdsc, session);
3965 
3966 done:
3967 	mutex_unlock(&session->s_mutex);
3968 done_unlocked:
3969 	iput(inode);
3970 	ceph_put_string(extra_info.pool_ns);
3971 	return;
3972 
3973 bad:
3974 	pr_err("ceph_handle_caps: corrupt message\n");
3975 	ceph_msg_dump(msg);
3976 	return;
3977 }
3978 
3979 /*
3980  * Delayed work handler to process end of delayed cap release LRU list.
3981  */
3982 void ceph_check_delayed_caps(struct ceph_mds_client *mdsc)
3983 {
3984 	struct inode *inode;
3985 	struct ceph_inode_info *ci;
3986 	int flags = CHECK_CAPS_NODELAY;
3987 
3988 	dout("check_delayed_caps\n");
3989 	while (1) {
3990 		spin_lock(&mdsc->cap_delay_lock);
3991 		if (list_empty(&mdsc->cap_delay_list))
3992 			break;
3993 		ci = list_first_entry(&mdsc->cap_delay_list,
3994 				      struct ceph_inode_info,
3995 				      i_cap_delay_list);
3996 		if ((ci->i_ceph_flags & CEPH_I_FLUSH) == 0 &&
3997 		    time_before(jiffies, ci->i_hold_caps_max))
3998 			break;
3999 		list_del_init(&ci->i_cap_delay_list);
4000 
4001 		inode = igrab(&ci->vfs_inode);
4002 		spin_unlock(&mdsc->cap_delay_lock);
4003 
4004 		if (inode) {
4005 			dout("check_delayed_caps on %p\n", inode);
4006 			ceph_check_caps(ci, flags, NULL);
4007 			iput(inode);
4008 		}
4009 	}
4010 	spin_unlock(&mdsc->cap_delay_lock);
4011 }
4012 
4013 /*
4014  * Flush all dirty caps to the mds
4015  */
4016 void ceph_flush_dirty_caps(struct ceph_mds_client *mdsc)
4017 {
4018 	struct ceph_inode_info *ci;
4019 	struct inode *inode;
4020 
4021 	dout("flush_dirty_caps\n");
4022 	spin_lock(&mdsc->cap_dirty_lock);
4023 	while (!list_empty(&mdsc->cap_dirty)) {
4024 		ci = list_first_entry(&mdsc->cap_dirty, struct ceph_inode_info,
4025 				      i_dirty_item);
4026 		inode = &ci->vfs_inode;
4027 		ihold(inode);
4028 		dout("flush_dirty_caps %p\n", inode);
4029 		spin_unlock(&mdsc->cap_dirty_lock);
4030 		ceph_check_caps(ci, CHECK_CAPS_NODELAY|CHECK_CAPS_FLUSH, NULL);
4031 		iput(inode);
4032 		spin_lock(&mdsc->cap_dirty_lock);
4033 	}
4034 	spin_unlock(&mdsc->cap_dirty_lock);
4035 	dout("flush_dirty_caps done\n");
4036 }
4037 
4038 void __ceph_get_fmode(struct ceph_inode_info *ci, int fmode)
4039 {
4040 	int i;
4041 	int bits = (fmode << 1) | 1;
4042 	for (i = 0; i < CEPH_FILE_MODE_BITS; i++) {
4043 		if (bits & (1 << i))
4044 			ci->i_nr_by_mode[i]++;
4045 	}
4046 }
4047 
4048 /*
4049  * Drop open file reference.  If we were the last open file,
4050  * we may need to release capabilities to the MDS (or schedule
4051  * their delayed release).
4052  */
4053 void ceph_put_fmode(struct ceph_inode_info *ci, int fmode)
4054 {
4055 	int i, last = 0;
4056 	int bits = (fmode << 1) | 1;
4057 	spin_lock(&ci->i_ceph_lock);
4058 	for (i = 0; i < CEPH_FILE_MODE_BITS; i++) {
4059 		if (bits & (1 << i)) {
4060 			BUG_ON(ci->i_nr_by_mode[i] == 0);
4061 			if (--ci->i_nr_by_mode[i] == 0)
4062 				last++;
4063 		}
4064 	}
4065 	dout("put_fmode %p fmode %d {%d,%d,%d,%d}\n",
4066 	     &ci->vfs_inode, fmode,
4067 	     ci->i_nr_by_mode[0], ci->i_nr_by_mode[1],
4068 	     ci->i_nr_by_mode[2], ci->i_nr_by_mode[3]);
4069 	spin_unlock(&ci->i_ceph_lock);
4070 
4071 	if (last && ci->i_vino.snap == CEPH_NOSNAP)
4072 		ceph_check_caps(ci, 0, NULL);
4073 }
4074 
4075 /*
4076  * For a soon-to-be unlinked file, drop the AUTH_RDCACHE caps. If it
4077  * looks like the link count will hit 0, drop any other caps (other
4078  * than PIN) we don't specifically want (due to the file still being
4079  * open).
4080  */
4081 int ceph_drop_caps_for_unlink(struct inode *inode)
4082 {
4083 	struct ceph_inode_info *ci = ceph_inode(inode);
4084 	int drop = CEPH_CAP_LINK_SHARED | CEPH_CAP_LINK_EXCL;
4085 
4086 	spin_lock(&ci->i_ceph_lock);
4087 	if (inode->i_nlink == 1) {
4088 		drop |= ~(__ceph_caps_wanted(ci) | CEPH_CAP_PIN);
4089 
4090 		ci->i_ceph_flags |= CEPH_I_NODELAY;
4091 		if (__ceph_caps_dirty(ci)) {
4092 			struct ceph_mds_client *mdsc =
4093 				ceph_inode_to_client(inode)->mdsc;
4094 			__cap_delay_requeue_front(mdsc, ci);
4095 		}
4096 	}
4097 	spin_unlock(&ci->i_ceph_lock);
4098 	return drop;
4099 }
4100 
4101 /*
4102  * Helpers for embedding cap and dentry lease releases into mds
4103  * requests.
4104  *
4105  * @force is used by dentry_release (below) to force inclusion of a
4106  * record for the directory inode, even when there aren't any caps to
4107  * drop.
4108  */
4109 int ceph_encode_inode_release(void **p, struct inode *inode,
4110 			      int mds, int drop, int unless, int force)
4111 {
4112 	struct ceph_inode_info *ci = ceph_inode(inode);
4113 	struct ceph_cap *cap;
4114 	struct ceph_mds_request_release *rel = *p;
4115 	int used, dirty;
4116 	int ret = 0;
4117 
4118 	spin_lock(&ci->i_ceph_lock);
4119 	used = __ceph_caps_used(ci);
4120 	dirty = __ceph_caps_dirty(ci);
4121 
4122 	dout("encode_inode_release %p mds%d used|dirty %s drop %s unless %s\n",
4123 	     inode, mds, ceph_cap_string(used|dirty), ceph_cap_string(drop),
4124 	     ceph_cap_string(unless));
4125 
4126 	/* only drop unused, clean caps */
4127 	drop &= ~(used | dirty);
4128 
4129 	cap = __get_cap_for_mds(ci, mds);
4130 	if (cap && __cap_is_valid(cap)) {
4131 		unless &= cap->issued;
4132 		if (unless) {
4133 			if (unless & CEPH_CAP_AUTH_EXCL)
4134 				drop &= ~CEPH_CAP_AUTH_SHARED;
4135 			if (unless & CEPH_CAP_LINK_EXCL)
4136 				drop &= ~CEPH_CAP_LINK_SHARED;
4137 			if (unless & CEPH_CAP_XATTR_EXCL)
4138 				drop &= ~CEPH_CAP_XATTR_SHARED;
4139 			if (unless & CEPH_CAP_FILE_EXCL)
4140 				drop &= ~CEPH_CAP_FILE_SHARED;
4141 		}
4142 
4143 		if (force || (cap->issued & drop)) {
4144 			if (cap->issued & drop) {
4145 				int wanted = __ceph_caps_wanted(ci);
4146 				if ((ci->i_ceph_flags & CEPH_I_NODELAY) == 0)
4147 					wanted |= cap->mds_wanted;
4148 				dout("encode_inode_release %p cap %p "
4149 				     "%s -> %s, wanted %s -> %s\n", inode, cap,
4150 				     ceph_cap_string(cap->issued),
4151 				     ceph_cap_string(cap->issued & ~drop),
4152 				     ceph_cap_string(cap->mds_wanted),
4153 				     ceph_cap_string(wanted));
4154 
4155 				cap->issued &= ~drop;
4156 				cap->implemented &= ~drop;
4157 				cap->mds_wanted = wanted;
4158 			} else {
4159 				dout("encode_inode_release %p cap %p %s"
4160 				     " (force)\n", inode, cap,
4161 				     ceph_cap_string(cap->issued));
4162 			}
4163 
4164 			rel->ino = cpu_to_le64(ceph_ino(inode));
4165 			rel->cap_id = cpu_to_le64(cap->cap_id);
4166 			rel->seq = cpu_to_le32(cap->seq);
4167 			rel->issue_seq = cpu_to_le32(cap->issue_seq);
4168 			rel->mseq = cpu_to_le32(cap->mseq);
4169 			rel->caps = cpu_to_le32(cap->implemented);
4170 			rel->wanted = cpu_to_le32(cap->mds_wanted);
4171 			rel->dname_len = 0;
4172 			rel->dname_seq = 0;
4173 			*p += sizeof(*rel);
4174 			ret = 1;
4175 		} else {
4176 			dout("encode_inode_release %p cap %p %s (noop)\n",
4177 			     inode, cap, ceph_cap_string(cap->issued));
4178 		}
4179 	}
4180 	spin_unlock(&ci->i_ceph_lock);
4181 	return ret;
4182 }
4183 
4184 int ceph_encode_dentry_release(void **p, struct dentry *dentry,
4185 			       struct inode *dir,
4186 			       int mds, int drop, int unless)
4187 {
4188 	struct dentry *parent = NULL;
4189 	struct ceph_mds_request_release *rel = *p;
4190 	struct ceph_dentry_info *di = ceph_dentry(dentry);
4191 	int force = 0;
4192 	int ret;
4193 
4194 	/*
4195 	 * force an record for the directory caps if we have a dentry lease.
4196 	 * this is racy (can't take i_ceph_lock and d_lock together), but it
4197 	 * doesn't have to be perfect; the mds will revoke anything we don't
4198 	 * release.
4199 	 */
4200 	spin_lock(&dentry->d_lock);
4201 	if (di->lease_session && di->lease_session->s_mds == mds)
4202 		force = 1;
4203 	if (!dir) {
4204 		parent = dget(dentry->d_parent);
4205 		dir = d_inode(parent);
4206 	}
4207 	spin_unlock(&dentry->d_lock);
4208 
4209 	ret = ceph_encode_inode_release(p, dir, mds, drop, unless, force);
4210 	dput(parent);
4211 
4212 	spin_lock(&dentry->d_lock);
4213 	if (ret && di->lease_session && di->lease_session->s_mds == mds) {
4214 		dout("encode_dentry_release %p mds%d seq %d\n",
4215 		     dentry, mds, (int)di->lease_seq);
4216 		rel->dname_len = cpu_to_le32(dentry->d_name.len);
4217 		memcpy(*p, dentry->d_name.name, dentry->d_name.len);
4218 		*p += dentry->d_name.len;
4219 		rel->dname_seq = cpu_to_le32(di->lease_seq);
4220 		__ceph_mdsc_drop_dentry_lease(dentry);
4221 	}
4222 	spin_unlock(&dentry->d_lock);
4223 	return ret;
4224 }
4225