From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id C62CC4A07 for ; Mon, 1 Jul 2024 01:08:15 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.133.124 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1719796097; cv=none; b=gAQRSkO/+xdv5lE0t0y1qQBppK/oynDBCQDxbIIqm+EAVMtErIK6+ciS76T3zPGsiEcBHdY9ImyXoveItkpxzF3WLaJjjJbOiAGpACdnbqRAqnNOLWHJnaTFbYD9muV19aQkDYGndhus4vOtFFY3VQpc7ciXdnFTigUjDrYZAQM= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1719796097; c=relaxed/simple; bh=QV7oB0MzBepH3Gfv/sfxZY2kIPARX64YeKWtqGVi7fg=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=Gv595KG9td/lhzVkwvr7uz/ooftyWoRiL3SX96fwrezLiTxMaMT61JJ3DCRC2pjb1Jm4bBPU+apG6bQob2DzC7GqokZvtmKjz3JaAbVMvuFhFqvSS5oN2yMRWZ3fWdcq6zYcuWi3KpeDdV6gy3oorPdmAstyNkysItZkqCKOi4g= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=U068HH5R; arc=none smtp.client-ip=170.10.133.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="U068HH5R" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1719796094; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:autocrypt:autocrypt; bh=V5j0C14UkFNEgU8QNuYTSpJEUKhs7EJnYTgNEqeZvhM=; b=U068HH5RU5rAHBhh54P/NPLuMTOK4DW5EOaIkA5kKAzsGNakB86yH2jAJPRidE1KSQ+RXW lxG2yZMy16F1DhENehesB2s/ixttVPLN/GfLH+jesn90gLKE9gE+uF0PCCvFlawqlBxy4k yja+kiZcoMfWfPDDrzxx+UUPm4CEOvQ= Received: from mail-pf1-f197.google.com (mail-pf1-f197.google.com [209.85.210.197]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-408-zmt-3zTqMw-QkKK-x_xoMw-1; Sun, 30 Jun 2024 21:08:13 -0400 X-MC-Unique: zmt-3zTqMw-QkKK-x_xoMw-1 Received: by mail-pf1-f197.google.com with SMTP id d2e1a72fcca58-7065df788f6so2385205b3a.3 for ; Sun, 30 Jun 2024 18:08:13 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1719796092; x=1720400892; h=content-transfer-encoding:in-reply-to:autocrypt:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=V5j0C14UkFNEgU8QNuYTSpJEUKhs7EJnYTgNEqeZvhM=; b=M2l4NFeH9Q3veoQ3Rnk28aY0d1W5Muor9C5YmOB0FmEd/AWrgNQQxhWlPljA+F+XEO Eq0NoP+KpPaC7YwLXU4Oy2kFZVdujIst3huEdd6We1Q1t4xRhE5ZK9MI9t++U2s6n1US 7Dz6obsw2FuvBYPfg+wX9a89kjhkvNmVWjJS76LZSpE7WyflZco8vSXJA8JLgxTIeYlu rnNM6I9Ntto9Wk/XqPyutw0OIfY9hHXvtCSYzY3zDlvh5FgqpvlYDyHAPtJtvJ8jTR0c Zj+hxzzUROBQj4prQi6vJQyOivpB1RWjLypOSOBCjD/rLDnzIskRaqprkdOeW3RqCRwQ nsXg== X-Forwarded-Encrypted: i=1; AJvYcCUTG6tzCYLIFiFL3/oONkIB1KDIH1kPoS8lEvdzIokb7iPaNZlcbb9TusCgSGHLA79KBAMQqAKvbraGJ+N7F976pqAUfsRgJzpxEIFA X-Gm-Message-State: AOJu0Yy4huK5WG9gMvHjV1RwmzIraoIC0bcDO09j4mtbyHBa+w4uUgt9 1VQXWCye+mC8QIcXEZFva/I5eZd+jZtRJS25IwrtqyOOBDMOMWaqdc+MTIIXH3pBVCEsW9K0GD8 +f2ReTkPsRQzBWfZSk3cZRvEKvWXvP7/8oOFDlhURtNjxvV12+wvL234X+60aVQ== X-Received: by 2002:a05:6a20:ba99:b0:1bd:1d15:f089 with SMTP id adf61e73a8af0-1bef6242eeamr5462306637.54.1719796092216; Sun, 30 Jun 2024 18:08:12 -0700 (PDT) X-Google-Smtp-Source: AGHT+IEg7qtY/QXMS6S2ii2fOZIzTOLQPr0GDKRhgQHXTfkEFEcWlAztbrnL5mL3j61qvOuCKC962Q== X-Received: by 2002:a05:6a20:ba99:b0:1bd:1d15:f089 with SMTP id adf61e73a8af0-1bef6242eeamr5462288637.54.1719796091815; Sun, 30 Jun 2024 18:08:11 -0700 (PDT) Received: from ?IPV6:2403:580f:7fe0:0:ae49:39b9:2ee8:2187? (2403-580f-7fe0-0-ae49-39b9-2ee8-2187.ip6.aussiebb.net. [2403:580f:7fe0:0:ae49:39b9:2ee8:2187]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-1fac10e2239sm52143735ad.67.2024.06.30.18.08.07 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 30 Jun 2024 18:08:11 -0700 (PDT) Message-ID: Date: Mon, 1 Jul 2024 09:08:06 +0800 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [RFC v3 1/1] fs/namespace: remove RCU sync for MNT_DETACH umount To: Jan Kara Cc: Matthew Wilcox , Lucas Karpinski , viro@zeniv.linux.org.uk, brauner@kernel.org, raven@themaw.net, linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, Alexander Larsson , Eric Chanudet References: <20240626201129.272750-2-lkarpins@redhat.com> <20240626201129.272750-3-lkarpins@redhat.com> <50512ec3-da6d-4140-9659-58e0514a4970@redhat.com> <20240627115418.lcnpctgailhlaffc@quack3> <20240628111345.3bbcgie4gar6icyj@quack3> Content-Language: en-US From: Ian Kent Autocrypt: addr=ikent@redhat.com; keydata= xsFNBE6c/ycBEADdYbAI5BKjE+yw+dOE+xucCEYiGyRhOI9JiZLUBh+PDz8cDnNxcCspH44o E7oTH0XPn9f7Zh0TkXWA8G6BZVCNifG7mM9K8Ecp3NheQYCk488ucSV/dz6DJ8BqX4psd4TI gpcs2iDQlg5CmuXDhc5z1ztNubv8hElSlFX/4l/U18OfrdTbbcjF/fivBkzkVobtltiL+msN bDq5S0K2KOxRxuXGaDShvfbz6DnajoVLEkNgEnGpSLxQNlJXdQBTE509MA30Q2aGk6oqHBQv zxjVyOu+WLGPSj7hF8SdYOjizVKIARGJzDy8qT4v/TLdVqPa2d0rx7DFvBRzOqYQL13/Zvie kuGbj3XvFibVt2ecS87WCJ/nlQxCa0KjGy0eb3i4XObtcU23fnd0ieZsQs4uDhZgzYB8LNud WXx9/Q0qsWfvZw7hEdPdPRBmwRmt2O1fbfk5CQN1EtNgS372PbOjQHaIV6n+QQP2ELIa3X5Z RnyaXyzwaCt6ETUHTslEaR9nOG6N3sIohIwlIywGK6WQmRBPyz5X1oF2Ld9E0crlaZYFPMRH hQtFxdycIBpTlc59g7uIXzwRx65HJcyBflj72YoTzwchN6Wf2rKq9xmtkV2Eihwo8WH3XkL9 cjVKjg8rKRmqIMSRCpqFBWJpT1FzecQ8EMV0fk18Q5MLj441yQARAQABzRtJYW4gS2VudCA8 aWtlbnRAcmVkaGF0LmNvbT7CwXgEEwECACIFAk6eM44CGwMGCwkIBwMCBhUIAgkKCwQWAgMB Ah4BAheAAAoJEOdnc4D1T9ipMWwP/1FJJWjVYZekg0QOBixULBQ9Gx2TQewOp1DW/BViOMb7 uYxrlsnvE7TDyqw5yQz6dfb8/b9dPn68qhDecW9bsu72e9i143Cd4shTlkZfORiZjX70196j r2LiI6L11uSoVhDGeikSdfRtNWyEwAx2iLstwi7FccslNE4cWIIH2v0dxDYSpcfMaLmT9a7f xdoMLW58nwIz0GxQs/2OMykn/VISt25wrepmBiacWu6oqQrpIYh3jyvMQYTBtdalUDDJqf+W aUO3+sNFRRysLGcCvEnNuWC3CeTTqU74XTUhf4cmAOyk+seA3MkPyzjVFufLipoYcCnjUavs MKBXQ8SCVdDxYxZwS8/FOhB8J2fN8w6gC5uK0ZKAzTj2WhJdxGe+hjf7zdyOcxMl5idbOOFu 5gIm0Y5Q4mXz4q5vfjRlhQKvcqBc2HBTlI6xKAP/nxCAH4VzR5J9fhqxrWfcoREyUFHLMBuJ GCRWxN7ZQoTYYPl6uTRVbQMfr/tEck2IWsqsqPZsV63zhGLWVufBxg88RD+YHiGCduhcKica 8UluTK4aYLt8YadkGKgy812X+zSubS6D7yZELNA+Ge1yesyJOZsbpojdFLAdwVkBa1xXkDhH BK0zUFE08obrnrEUeQDxAhIiN9pctG0nvqyBwTLGFoE5oRXJbtNXcHlEYcUxl8BizsFNBE6c /ycBEADZzcb88XlSiooYoEt3vuGkYoSkz7potX864MSNGekek1cwUrXeUdHUlw5zwPoC4H5J F7D8q7lYoelBYJ+Mf0vdLzJLbbEtN5+v+s2UEbkDlnUQS1yRo1LxyNhJiXsQVr7WVA/c8qcD WUYX7q/4Ckg77UO4l/eHCWNnHu7GkvKLVEgRjKPKroIEnjI0HMK3f6ABDReoc741RF5XX3qw mCgKZx0AkLjObXE3W769dtbNbWmW0lgFKe6dxlYrlZbq25Aubhcu2qTdQ/okx6uQ41+vQDxg YtocsT/CG1u0PpbtMeIm3mVQRXmjDFKjKAx9WOX/BHpk7VEtsNQUEp1lZo6hH7jeo5meCYFz gIbXdsMA9TjpzPpiWK9GetbD5KhnDId4ANMrWPNuGC/uPHDjtEJyf0cwknsRFLhL4/NJKvqA uiXQ57x6qxrkuuinBQ3S9RR3JY7R7c3rqpWyaTuNNGPkIrRNyePky/ZTgTMA5of8Wioyz06X Nhr6mG5xT+MHztKAQddV3xFy9f3Jrvtd6UvFbQPwG7Lv+/UztY5vPAzp7aJGz2pDbb0QBC9u 1mrHICB4awPlja/ljn+uuIb8Ow3jSy+Sx58VFEK7ctIOULdmnHXMFEihnOZO3NlNa6q+XZOK 7J00Ne6y0IBAaNTM+xMF+JRc7Gx6bChES9vxMyMbXwARAQABwsFfBBgBAgAJBQJOnP8nAhsM AAoJEOdnc4D1T9iphf4QAJuR1jVyLLSkBDOPCa3ejvEqp4H5QUogl1ASkEboMiWcQJQdLaH6 zHNySMnsN6g/UVhuviANBxtW2DFfANPiydox85CdH71gLkcOE1J7J6Fnxgjpc1Dq5kxhimBS qa2hlsKUt3MLXbjEYL5OTSV2RtNP04KwlGS/xMfNwQf2O2aJoC4mSs4OeZwsHJFVF8rKXDvL /NzMCnysWCwjVIDhHBBIOC3mecYtXrasv9nl77LgffyyaAAQZz7yZcvn8puj9jH9h+mrL02W +gd+Sh6Grvo5Kk4ngzfT/FtscVGv9zFWxfyoQHRyuhk0SOsoTNYN8XIWhosp9GViyDtEFXmr hiazz7XHc32u+o9+WugpTBZktYpORxLVwf9h1PY7CPDNX4EaIO64oyy9O3/huhOTOGhanVvq lYHyEYCFY7pIfaSNhgZs2aV0oP13XV6PGb5xir5ah+NW9gQk/obnvY5TAVtgTjAte5tZ+coC SBkOU1xMiW5Td7QwkNmtXKHyEF6dxCAMK1KHIqxrBaZO27PEDSHaIPHePi7y4KKq9C9U8k5V 5dFA0mqH/st9Sw6tFbqPkqjvvMLETDPVxOzinpU2VBGhce4wufSIoVLOjQnbIo1FIqWgDx24 eHv235mnNuGHrG+EapIh7g/67K0uAzwp17eyUYlE5BMcwRlaHMuKTil6 In-Reply-To: <20240628111345.3bbcgie4gar6icyj@quack3> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 28/6/24 19:13, Jan Kara wrote: > On Fri 28-06-24 10:58:54, Ian Kent wrote: >> On 27/6/24 19:54, Jan Kara wrote: >>> On Thu 27-06-24 09:11:14, Ian Kent wrote: >>>> On 27/6/24 04:47, Matthew Wilcox wrote: >>>>> On Wed, Jun 26, 2024 at 04:07:49PM -0400, Lucas Karpinski wrote: >>>>>> +++ b/fs/namespace.c >>>>>> @@ -78,6 +78,7 @@ static struct kmem_cache *mnt_cache __ro_after_init; >>>>>> static DECLARE_RWSEM(namespace_sem); >>>>>> static HLIST_HEAD(unmounted); /* protected by namespace_sem */ >>>>>> static LIST_HEAD(ex_mountpoints); /* protected by namespace_sem */ >>>>>> +static bool lazy_unlock = false; /* protected by namespace_sem */ >>>>> That's a pretty ugly way of doing it. How about this? >>>> Ha! >>>> >>>> That was my original thought but I also didn't much like changing all the >>>> callers. >>>> >>>> I don't really like the proliferation of these small helper functions either >>>> but if everyone >>>> >>>> is happy to do this I think it's a great idea. >>> So I know you've suggested removing synchronize_rcu_expedited() call in >>> your comment to v2. But I wonder why is it safe? I *thought* >>> synchronize_rcu_expedited() is there to synchronize the dropping of the >>> last mnt reference (and maybe something else) - see the comment at the >>> beginning of mntput_no_expire() - and this change would break that? >> Interesting, because of the definition of lazy umount I didn't look closely >> enough at that. >> >> But I wonder, how exactly would that race occur, is holding the rcu read >> lock sufficient since the rcu'd mount free won't be done until it's >> released (at least I think that's how rcu works). > I'm concerned about a race like: > > [path lookup] [umount -l] > ... > path_put() > mntput(mnt) > mntput_no_expire(m) > rcu_read_lock(); > if (likely(READ_ONCE(mnt->mnt_ns))) { > do_umount() > umount_tree() > ... > mnt->mnt_ns = NULL; > ... > namespace_unlock() > mntput(&m->mnt) > mntput_no_expire(mnt) > smp_mb(); > mnt_add_count(mnt, -1); > count = mnt_get_count(mnt); > if (count != 0) { > ... > return; > mnt_add_count(mnt, -1); > rcu_read_unlock(); > return; > -> KABOOM, mnt->mnt_count dropped to 0 but nobody cleaned up the mount! > } > > And this scenario is exactly prevented by synchronize_rcu() in > namespace_unlock(). I just wanted to say that I don't have a reply to this yet, having been distracted looking at the concern that Christian raised, in fact this looks like it will be hard to grok ... Ian