1 files changed, 9 insertions, 0 deletions

diff --git a/drivers/block/rbd.c b/drivers/block/rbd.c
index 94747afc2e78..34a981ba1b9e 100644
--- a/drivers/block/rbd.c
+++ b/drivers/block/rbd.c
@@ -1382,6 +1382,13 @@ static void rbd_obj_request_put(struct rbd_obj_request *obj_request)
         kref_put(&obj_request->kref, rbd_obj_request_destroy);
 }
 
+static void rbd_img_request_get(struct rbd_img_request *img_request)
+{
+        dout("%s: img %p (was %d)\n", __func__, img_request,
+             atomic_read(&img_request->kref.refcount));
+        kref_get(&img_request->kref);
+}
+
 static bool img_request_child_test(struct rbd_img_request *img_request);
 static void rbd_parent_request_destroy(struct kref *kref);
 static void rbd_img_request_destroy(struct kref *kref);
@@ -2142,6 +2149,7 @@ static void rbd_img_obj_callback(struct rbd_obj_request *obj_request)
         img_request->next_completion = which;
 out:
         spin_unlock_irq(&img_request->completion_lock);
+        rbd_img_request_put(img_request);
 
         if (!more)
                 rbd_img_request_complete(img_request);
@@ -2242,6 +2250,7 @@ static int rbd_img_request_fill(struct rbd_img_request *img_request,
                         goto out_unwind;
                 obj_request->osd_req = osd_req;
                 obj_request->callback = rbd_img_obj_callback;
+                rbd_img_request_get(img_request);
 
                 if (write_request) {
                         osd_req_op_alloc_hint_init(osd_req, which,