c/mirror_zfs
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_zfs.git synced 2024-12-26 03:09:34 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fix zfsctl_expire_snapshot() deadlock

Browse Source 
It is possible for an automounted snapshot which is expiring to
deadlock with a manual unmount of the snapshot.  This can occur
because taskq_cancel_id() will block if the task is currently
executing until it completes.  But it will never complete because
zfsctl_unmount_snapshot() is holding the zsb->z_ctldir_lock which
zfsctl_expire_snapshot() must acquire.

---------------------- z_unmount/0:2153 ---------------------
  mutex_lock                <blocking on zsb->z_ctldir_lock>
  zfsctl_unmount_snapshot
  zfsctl_expire_snapshot
  taskq_thread

------------------------- zfs:10690 -------------------------
  taskq_wait_id             <waiting for z_unmount to exit>
  taskq_cancel_id
  __zfsctl_unmount_snapshot
  zfsctl_unmount_snapshot   <takes zsb->z_ctldir_lock>
  zfs_unmount_snap
  zfs_ioc_destroy_snaps_nvl
  zfsdev_ioctl
  do_vfs_ioctl

We resolve the deadlock by dropping the zsb->z_ctldir_lock before
calling __zfsctl_unmount_snapshot().  The lock is only there to
prevent concurrent modification to the zsb->z_ctldir_snaps AVL
tree.  Moreover, we're careful to remove the zfs_snapentry_t from
the AVL tree before dropping the lock which ensures no other tasks
can find it.  On failure it's added back to the tree.

Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Chris Dunlap <cdunlap@llnl.gov>
Closes #1527
This commit is contained in:
Brian Behlendorf 2013-07-11 14:11:32 -07:00
parent e34f17a8df
commit 76351672c2
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
module/zfs/zfs_ctldir.c
View File

@ -732,7 +732,11 @@ zfsctl_unmount_snapshot(zfs_sb_t *zsb, char *name, int flags)
sep = avl_find(&zsb->z_ctldir_snaps, &search, NULL); sep = avl_find(&zsb->z_ctldir_snaps, &search, NULL);
if (sep) { if (sep) {
avl_remove(&zsb->z_ctldir_snaps, sep); avl_remove(&zsb->z_ctldir_snaps, sep);
mutex_exit(&zsb->z_ctldir_lock);
error = __zfsctl_unmount_snapshot(sep, flags); error = __zfsctl_unmount_snapshot(sep, flags);
mutex_enter(&zsb->z_ctldir_lock);
if (error == EBUSY) if (error == EBUSY)
avl_add(&zsb->z_ctldir_snaps, sep); avl_add(&zsb->z_ctldir_snaps, sep);
else else
@ -767,7 +771,11 @@ zfsctl_unmount_snapshots(zfs_sb_t *zsb, int flags, int *count)
while (sep != NULL) { while (sep != NULL) {
next = AVL_NEXT(&zsb->z_ctldir_snaps, sep); next = AVL_NEXT(&zsb->z_ctldir_snaps, sep);
avl_remove(&zsb->z_ctldir_snaps, sep); avl_remove(&zsb->z_ctldir_snaps, sep);
mutex_exit(&zsb->z_ctldir_lock);
error = __zfsctl_unmount_snapshot(sep, flags); error = __zfsctl_unmount_snapshot(sep, flags);
mutex_enter(&zsb->z_ctldir_lock);
if (error == EBUSY) { if (error == EBUSY) {
avl_add(&zsb->z_ctldir_snaps, sep); avl_add(&zsb->z_ctldir_snaps, sep);
(*count)++; (*count)++;