| blob | cae874646d9e965719b964b9e7b0539442dbe822 |
1 /*
2 * raid1.c : Multiple Devices driver for Linux
3 *
4 * Copyright (C) 1999, 2000, 2001 Ingo Molnar, Red Hat
5 *
6 * Copyright (C) 1996, 1997, 1998 Ingo Molnar, Miguel de Icaza, Gadi Oxman
7 *
8 * RAID-1 management functions.
9 *
10 * Better read-balancing code written by Mika Kuoppala <miku@iki.fi>, 2000
11 *
12 * Fixes to reconstruction by Jakob Østergaard" <jakob@ostenfeld.dk>
13 * Various fixes by Neil Brown <neilb@cse.unsw.edu.au>
14 *
15 * Changes by Peter T. Breuer <ptb@it.uc3m.es> 31/1/2003 to support
16 * bitmapped intelligence in resync:
17 *
18 * - bitmap marked during normal i/o
19 * - bitmap used to skip nondirty blocks during sync
20 *
21 * Additions to bitmap code, (C) 2003-2004 Paul Clements, SteelEye Technology:
22 * - persistent bitmap code
23 *
24 * This program is free software; you can redistribute it and/or modify
25 * it under the terms of the GNU General Public License as published by
26 * the Free Software Foundation; either version 2, or (at your option)
27 * any later version.
28 *
29 * You should have received a copy of the GNU General Public License
30 * (for example /usr/src/linux/COPYING); if not, write to the Free
31 * Software Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
32 */
34 #include <linux/slab.h>
35 #include <linux/delay.h>
36 #include <linux/blkdev.h>
37 #include <linux/seq_file.h>
38 #include <linux/ratelimit.h>
43 /*
44 * Number of guaranteed r1bios in case of extreme VM load:
45 */
46 #define NR_RAID1_BIOS 256
48 /* When there are this many requests queue to be written by
49 * the raid1 thread, we become 'congested' to provide back-pressure
50 * for writeback.
51 */
58 {
62 /* allocate a r1bio with room for raid_disks entries in the bios array */
64 }
67 {
69 }
71 #define RESYNC_BLOCK_SIZE (64*1024)
72 //#define RESYNC_BLOCK_SIZE PAGE_SIZE
73 #define RESYNC_SECTORS (RESYNC_BLOCK_SIZE >> 9)
74 #define RESYNC_PAGES ((RESYNC_BLOCK_SIZE + PAGE_SIZE-1) / PAGE_SIZE)
75 #define RESYNC_WINDOW (2048*1024)
78 {
89 /*
90 * Allocate bios : 1 for reading, n-1 for writing
91 */
97 }
98 /*
99 * Allocate RESYNC_PAGES data pages and attach them to
100 * the first bio.
101 * If this is a user-requested check/repair, allocate
102 * RESYNC_PAGES for each bio.
103 */
106 else
117 }
118 }
119 /* If not user-requests, copy the page pointers to all bios */
125 }
131 out_free_pages:
136 out_free_bio:
141 }
144 {
155 }
160 }
163 {
171 }
172 }
175 {
180 }
183 {
191 }
196 }
199 {
211 }
213 /*
214 * raid_end_bio_io() is called when we have finished servicing a mirrored
215 * operation and are ready to return a success/failure code to the buffer
216 * cache layer.
217 */
219 {
237 /*
238 * Wake up any possible resync thread that waits for the device
239 * to go idle.
240 */
242 }
243 }
246 {
249 /* if nobody has done the final endio yet, do it now */
258 }
260 }
262 /*
263 * Update disk head position estimator based on IRQ completion info.
264 */
266 {
271 }
273 /*
274 * Find the disk number which triggered given bio
275 */
277 {
289 }
292 {
299 /*
300 * this branch is our 'one mirror IO has finished' event handler:
301 */
307 /* If all other devices have failed, we want to return
308 * the error upwards rather than fail the last device.
309 * Here we redefine "uptodate" to mean "Don't want to retry"
310 */
318 }
323 /*
324 * oops, read error:
325 */
328 KERN_ERR "md/raid1:%s: %s: "
332 b),
336 }
339 }
342 {
343 /* it really is the end of this request */
345 /* free extra copy of the data pages */
351 }
352 /* clear the bitmap if all writes complete successfully */
358 }
361 {
371 else
373 }
374 }
377 {
386 /*
387 * 'one mirror IO has finished' event handler:
388 */
394 /*
395 * Set R1BIO_Uptodate in our master bio, so that we
396 * will return a good error code for to the higher
397 * levels even if IO on some other mirrored buffer
398 * fails.
399 *
400 * The 'master' represents the composite IO operation
401 * to user-side. So if something waits for IO, then it
402 * will wait for the 'master' bio.
403 */
404 sector_t first_bad;
411 /* Maybe we can clear some bad blocks. */
417 }
418 }
424 /*
425 * In behind mode, we ACK the master bio once the I/O
426 * has safely reached all non-writemostly
427 * disks. Setting the Returned bit ensures that this
428 * gets done only once -- we don't ever want to return
429 * -EIO here, instead we'll wait
430 */
433 /* Maybe we can return now */
442 }
443 }
444 }
449 /*
450 * Let's see if all mirrored write operations have finished
451 * already.
452 */
457 }
460 /*
461 * This routine returns the disk from which the requested read should
462 * be done. There is a per-array 'next expected sequential IO' sector
463 * number - if this matches on the next IO then we use the last disk.
464 * There is also a per-disk 'last know head position' sector that is
465 * maintained from IRQ contexts, both the normal and the resync IO
466 * completion handlers update this position correctly. If there is no
467 * perfect sequential match then we pick the disk whose head is closest.
468 *
469 * If there are 2 mirrors in the same 2 devices, performance degrades
470 * because position is mirror, not device based.
471 *
472 * The rdev for the device selected will have nr_pending incremented.
473 */
475 {
482 sector_t best_dist;
487 /*
488 * Check if we can balance. We can balance on the whole
489 * device if no resync is going on, or below the resync window.
490 * We take the first readable disk when above the resync window.
491 */
492 retry:
505 }
508 sector_t dist;
509 sector_t first_bad;
525 /* Don't balance among write-mostly, just
526 * use the first as a last resort */
530 }
531 /* This is a reasonable device to use. It might
532 * even be best.
533 */
537 /* already have a better device */
540 /* cannot read here. If this is the 'primary'
541 * device, then we must not read beyond
542 * bad_sectors from another device..
543 */
555 }
558 }
565 /* Don't change to another disk for sequential reads */
568 /* If device is idle, use it */
572 }
576 }
577 }
585 /* cannot risk returning a device that failed
586 * before we inc'ed nr_pending
587 */
590 }
594 }
599 }
602 {
618 /* Note the '|| 1' - when read_balance prefers
619 * non-congested targets, it can be removed
620 */
623 else
625 }
626 }
629 }
633 {
638 }
641 {
642 /* Any writes that have been queued but are awaiting
643 * bitmap updates get flushed here.
644 */
652 /* flush any pending bitmap writes to
653 * disk before proceeding w/ I/O */
662 }
665 }
667 /* Barriers....
668 * Sometimes we need to suspend IO while we do something else,
669 * either some resync/recovery, or reconfigure the array.
670 * To do this we raise a 'barrier'.
671 * The 'barrier' is a counter that can be raised multiple times
672 * to count how many activities are happening which preclude
673 * normal IO.
674 * We can only raise the barrier if there is no pending IO.
675 * i.e. if nr_pending == 0.
676 * We choose only to raise the barrier if no-one is waiting for the
677 * barrier to go down. This means that as soon as an IO request
678 * is ready, no other operations which require a barrier will start
679 * until the IO request has had a chance.
680 *
681 * So: regular IO calls 'wait_barrier'. When that returns there
682 * is no backgroup IO happening, It must arrange to call
683 * allow_barrier when it has finished its IO.
684 * backgroup IO calls must call raise_barrier. Once that returns
685 * there is no normal IO happeing. It must arrange to call
686 * lower_barrier when the particular background IO completes.
687 */
688 #define RESYNC_DEPTH 32
691 {
694 /* Wait until no block IO is waiting */
698 /* block any new IO from starting */
701 /* Now wait for all pending IO to complete */
707 }
710 {
717 }
720 {
726 );
728 }
731 }
734 {
740 }
743 {
744 /* stop syncio and normal IO and wait for everything to
745 * go quite.
746 * We increment barrier and nr_waiting, and then
747 * wait until nr_pending match nr_queued+1
748 * This is called in the context of one normal IO request
749 * that has failed. Thus any sync request that might be pending
750 * will be blocked by nr_pending, and we need to wait for
751 * pending IO requests to complete or be queued for re-try.
752 * Thus the number queued (nr_queued) plus this request (1)
753 * must match the number of pending IOs (nr_pending) before
754 * we continue.
755 */
764 }
766 {
767 /* reverse the effect of the freeze */
773 }
776 /* duplicate the data pages for behind I/O
777 */
779 {
783 GFP_NOIO);
796 }
802 do_sync_io:
808 }
811 {
828 /*
829 * Register the new request and wait if the reconstruction
830 * thread has put up a bar for new requests.
831 * Continue immediately if no resync is active currently.
832 */
839 /* As the suspend_* range is controlled by
840 * userspace, we want an interruptible
841 * wait.
842 */
852 }
854 }
860 /*
861 * make_request() can abort the operation when READA is being
862 * used and no empty request is available.
863 *
864 */
873 /* We might need to issue multiple reads to different
874 * devices if there are bad blocks around, so we keep
875 * track of the number of reads in bio->bi_phys_segments.
876 * If this is 0, there is only one r1_bio and no locking
877 * will be needed when requests complete. If it is
878 * non-zero, then it is the number of not-completed requests.
879 */
884 /*
885 * read balancing logic:
886 */
889 read_again:
893 /* couldn't find anywhere to read from */
896 }
900 bitmap) {
901 /* Reading from a write-mostly device must
902 * take care not to over-take any writes
903 * that are 'behind'
904 */
907 }
912 max_sectors);
923 /* could not read all from this device, so we will
924 * need another r1_bio.
925 */
933 else
936 /* Cannot call generic_make_request directly
937 * as that will be queued in __make_request
938 * and subsequent mempool_alloc might block waiting
939 * for it. So hand bio over to raid1d.
940 */
954 }
956 /*
957 * WRITE:
958 */
963 }
964 /* first select target devices under rcu_lock and
965 * inc refcount on their rdev. Record them by setting
966 * bios[x] to bio
967 * If there are known/acknowledged bad blocks on any device on
968 * which we have seen a write error, we want to avoid writing those
969 * blocks.
970 * This potentially requires several writes to write around
971 * the bad blocks. Each set of writes gets it's own r1bio
972 * with a set of bios attached.
973 */
977 retry_write:
987 }
992 }
996 sector_t first_bad;
1001 max_sectors,
1004 /* mustn't write here until the bad block is
1005 * acknowledged*/
1009 }
1011 /* Cannot write here at all */
1014 /* mustn't write more than bad_sectors
1015 * to other devices yet
1016 */
1019 /* We don't set R1BIO_Degraded as that
1020 * only applies if the disk is
1021 * missing, so it might be re-added,
1022 * and we want to know to recover this
1023 * chunk.
1024 * In this case the device is here,
1025 * and the fact that this chunk is not
1026 * in-sync is recorded in the bad
1027 * block log
1028 */
1030 }
1035 }
1036 }
1038 }
1042 /* Wait for this device to become unblocked */
1053 }
1056 /* We are splitting this write into multiple parts, so
1057 * we need to prepare for allocating another r1_bio.
1058 */
1063 else
1066 }
1082 /* do behind I/O ?
1083 * Not if there are too many, or cannot
1084 * allocate memory, or a reader on WriteMostly
1085 * is waiting for behind writes to flush */
1097 }
1102 /* Yes, I really want the '__' version so that
1103 * we clear any unused pointer in the io_vec, rather
1104 * than leave them unchanged. This is important
1105 * because when we come to free the pages, we won't
1106 * know the original bi_idx, so we just free
1107 * them all
1108 */
1113 }
1129 }
1130 /* Mustn't call r1_bio_write_done before this next test,
1131 * as it could result in the bio being freed.
1132 */
1135 /* We need another r1_bio. It has already been counted
1136 * in bio->bi_phys_segments
1137 */
1145 }
1149 /* In case raid1d snuck in to freeze_array */
1154 }
1157 {
1168 }
1171 }
1175 {
1179 /*
1180 * If it is not operational, then we have already marked it as dead
1181 * else if it is the last working disks, ignore the error, let the
1182 * next level up know.
1183 * else mark the drive as failed
1184 */
1187 /*
1188 * Don't fail the drive, act as though we were just a
1189 * normal single drive.
1190 * However don't try a recovery from this drive as
1191 * it is very likely to fail.
1192 */
1195 }
1203 /*
1204 * if recovery is running, make sure it aborts.
1205 */
1215 }
1218 {
1225 }
1238 }
1240 }
1243 {
1249 }
1252 {
1258 /*
1259 * Find all failed disks within the RAID1 configuration
1260 * and mark them readable.
1261 * Called under mddev lock, so rcu protection not needed.
1262 */
1268 count++;
1270 }
1271 }
1278 }
1282 {
1301 /* as we don't honour merge_bvec_fn, we must
1302 * never risk violating it, so limit
1303 * ->max_segments to one lying with a single
1304 * page, as a one page request is never in
1305 * violation.
1306 */
1311 }
1316 /* As all devices are equivalent, we don't need a full recovery
1317 * if this was recently any drive of the array
1318 */
1323 }
1327 }
1330 {
1343 }
1344 /* Only remove non-faulty devices if recovery
1345 * is not possible.
1346 */
1352 }
1356 /* lost the race, try later */
1360 }
1362 }
1363 abort:
1367 }
1371 {
1376 /*
1377 * we have read a block, now it needs to be re-written,
1378 * or re-read if the read failed.
1379 * We don't do much here, just schedule handling by raid1d
1380 */
1386 }
1389 {
1395 sector_t first_bad;
1404 /* make sure these bits doesn't get cleared. */
1422 )
1433 }
1434 }
1435 }
1439 {
1441 /* success */
1445 /* need to record an error - either for the block or the device */
1449 }
1452 {
1453 /* Try some synchronous reads of other devices to get
1454 * good data, much like with normal read errors. Only
1455 * read into the pages we already have so we don't
1456 * need to re-issue the read request.
1457 * We don't need to freeze the array, because being in an
1458 * active sync request, there is no normal IO, and
1459 * no overlapping syncs.
1460 * We don't need to check is_badblock() again as we
1461 * made sure that anything with a bad block in range
1462 * will have bi_end_io clear.
1463 */
1482 /* No rcu protection needed here devices
1483 * can only be removed when no resync is
1484 * active, and resync is currently active
1485 */
1492 }
1493 }
1494 d++;
1502 /* Cannot read from anywhere, this block is lost.
1503 * Record a bad block on each device. If that doesn't
1504 * work just disable and interrupt the recovery.
1505 * Don't fail devices as that won't really help.
1506 */
1518 }
1526 }
1527 /* Try next page */
1530 idx++;
1532 }
1535 /* write it back and re-read */
1539 d--;
1548 }
1549 }
1554 d--;
1562 }
1565 idx ++;
1566 }
1570 }
1573 {
1574 /* We have read all readable devices. If we haven't
1575 * got the block, then there is no hope left.
1576 * If we have, then we want to do a comparison
1577 * and skip the write if everything is the same.
1578 * If any blocks failed to read, then we need to
1579 * attempt an over-write
1580 */
1592 }
1611 PAGE_SIZE))
1613 }
1620 /* No need to write to this device. */
1624 }
1625 /* fixup the bio for reuse */
1643 else
1648 PAGE_SIZE);
1649 }
1650 }
1652 }
1655 {
1664 /* ouch - failed to read all of that. */
1671 /*
1672 * schedule writes
1673 */
1689 }
1692 /* if we're here, all write(s) have completed, so clean up */
1695 }
1696 }
1698 /*
1699 * This is a kernel thread which:
1700 *
1701 * 1. Retries failed read operations on working mirrors.
1702 * 2. Updates the raid superblock when problems encounter.
1703 * 3. Performs writes following reads for array synchronising.
1704 */
1708 {
1721 /* Note: no rcu protection needed here
1722 * as this is synchronous in the raid1d thread
1723 * which is the thread that might remove
1724 * a device. If raid1d ever becomes multi-threaded....
1725 */
1726 sector_t first_bad;
1738 d++;
1741 }
1745 /* Cannot read from anywhere - mark it bad */
1750 }
1751 /* write it back and re-read */
1756 d--;
1762 }
1768 d--;
1776 "md/raid1:%s: read error corrected "
1782 }
1783 }
1784 }
1787 }
1788 }
1791 {
1793 }
1796 {
1807 }
1810 {
1817 /* bio has the data to be written to device 'i' where
1818 * we just recently had a write error.
1819 * We repeatedly clone the bio and trim down to one block,
1820 * then try the write. Where the write fails we record
1821 * a bad block.
1822 * It is conceivable that the bio doesn't exactly align with
1823 * blocks. We must handle this somehow.
1824 *
1825 * We currently own a reference on the rdev.
1826 */
1829 sector_t sector;
1848 idx++;
1853 }
1858 /* Write at 'sector' for 'sectors'*/
1872 /* failure! */
1881 }
1883 }
1886 {
1897 }
1902 }
1903 }
1906 }
1909 {
1919 /* This drive got a write error. We need to
1920 * narrow down and record precise write
1921 * errors.
1922 */
1926 /* an I/O failed, we can't clear the bitmap */
1928 }
1931 }
1935 }
1938 {
1947 /* we got a read error. Maybe the drive is bad. Maybe just
1948 * the block and we can fix it.
1949 * We freeze all other IO, and try reading the block from
1950 * other devices. When we find one, we re-write
1951 * and check it that fixes the read error.
1952 * This is all done synchronously while the array is
1953 * frozen
1954 */
1965 read_more:
1973 const unsigned long do_sync
1979 }
1986 "md/raid1:%s: redirecting sector %llu"
1997 /* Drat - have to split this up more */
2005 else
2024 }
2025 }
2028 {
2047 }
2059 else
2066 else
2067 /* just a partial read to be scheduled from separate
2068 * context
2069 */
2075 }
2077 }
2081 {
2092 }
2094 /*
2095 * perform a "sync" on one "block"
2096 *
2097 * We need to make sure that no normal I/O request - particularly write
2098 * requests - conflict with active sync requests.
2099 *
2100 * This is achieved by tracking pending requests and a 'barrier' concept
2101 * that can be installed to exclude normal IO requests.
2102 */
2104 static sector_t sync_request(struct mddev *mddev, sector_t sector_nr, int *skipped, int go_faster)
2105 {
2114 sector_t sync_blocks;
2125 /* If we aborted, we need to abort the
2126 * sync on the 'current' bitmap chunk (there will
2127 * only be one in raid1 resync.
2128 * We can find the current addess in mddev->curr_resync
2129 */
2139 }
2147 }
2148 /* before building a request, check if we can skip these blocks..
2149 * This call the bitmap_start_sync doesn't actually record anything
2150 */
2153 /* We can skip this block, and probably several more */
2156 }
2157 /*
2158 * If there is non-resync activity waiting for a turn,
2159 * and resync is going fast enough,
2160 * then let it though before starting on this new sync request.
2161 */
2172 /*
2173 * If we get a correctably read error during resync or recovery,
2174 * we might want to read from a different device. So we
2175 * flag all drives that could conceivably be read from for READ,
2176 * and any others (which will be non-In_sync devices) for WRITE.
2177 * If a read fails, we try reading from something else for which READ
2178 * is OK.
2179 */
2190 /* take from bio_init */
2209 write_targets ++;
2211 /* may need to read from here */
2224 }
2225 }
2233 }
2236 read_targets++;
2237 }
2238 }
2244 }
2245 }
2252 /* These sectors are bad on all InSync devices, so we
2253 * need to mark them bad on all write targets
2254 */
2263 }
2269 /* Cannot record the badblocks, so need to
2270 * abort the resync.
2271 * If there are multiple read targets, could just
2272 * fail the really bad ones ???
2273 */
2280 }
2282 /* only resync enough to reach the next bad->good
2283 * transition */
2285 }
2288 /* extra read targets are also write targets */
2292 /* There is nowhere to write, so all non-sync
2293 * drives must be failed - so we are finished
2294 */
2299 }
2323 }
2330 /* stop here */
2333 i--;
2337 /* remove last page from this bio */
2341 }
2343 }
2344 }
2345 }
2350 bio_full:
2353 /* For a user-requested sync, we read all readable devices and do a
2354 * compare
2355 */
2363 }
2364 }
2371 }
2373 }
2376 {
2381 }
2384 {
2396 GFP_KERNEL);
2409 r1bio_pool_free,
2427 }
2450 /*
2451 * The first working device is used as a
2452 * starting point to read balancing.
2453 */
2455 }
2462 }
2470 }
2474 abort:
2482 }
2484 }
2487 {
2496 }
2501 }
2502 /*
2503 * copy the already verified devices into our private RAID1
2504 * bookkeeping area. [whatever we allocate in run(),
2505 * should be freed in stop()]
2506 */
2509 else
2520 /* as we don't honour merge_bvec_fn, we must never risk
2521 * violating it, so limit ->max_segments to 1 lying within
2522 * a single page, as a one page request is never in violation.
2523 */
2528 }
2529 }
2550 /*
2551 * Ok, everything is just fine now
2552 */
2562 }
2564 }
2567 {
2571 /* wait for behind writes to complete */
2575 /* need to kick something here to make sure I/O goes? */
2578 }
2591 }
2594 {
2595 /* no resync is happening, and there is enough space
2596 * on all devices, so we can resize.
2597 * We need to make sure resync covers any new space.
2598 * If the array is shrinking we should possibly wait until
2599 * any io in the removed space completes, but it hardly seems
2600 * worth it.
2601 */
2611 }
2615 }
2618 {
2619 /* We need to:
2620 * 1/ resize the r1bio_pool
2621 * 2/ resize conf->mirrors
2622 *
2623 * We allocate a new r1bio_pool if we can.
2624 * Then raise a device barrier and wait until all IO stops.
2625 * Then resize conf->mirrors and swap in the new r1bio pool.
2626 *
2627 * At the same time, we "pack" the devices so that all the missing
2628 * devices have the higher raid_disk numbers.
2629 */
2638 /* Cannot change chunk_size, layout, or level */
2646 }
2658 cnt++;
2661 }
2674 }
2680 }
2684 /* ok, everything is stopped */
2698 }
2701 }
2721 }
2724 {
2737 }
2738 }
2741 {
2742 /* raid1 can take over:
2743 * raid5 with 2 devices, any layout or chunk size
2744 */
2754 }
2756 }
2759 {
2777 };
2780 {
2782 }
2785 {
2787 }