| blob | df445091384a3795ea9a112af87188074a2eb52d |
1 /*
2 * raid1.c : Multiple Devices driver for Linux
3 *
4 * Copyright (C) 1999, 2000, 2001 Ingo Molnar, Red Hat
5 *
6 * Copyright (C) 1996, 1997, 1998 Ingo Molnar, Miguel de Icaza, Gadi Oxman
7 *
8 * RAID-1 management functions.
9 *
10 * Better read-balancing code written by Mika Kuoppala <miku@iki.fi>, 2000
11 *
12 * Fixes to reconstruction by Jakob Østergaard" <jakob@ostenfeld.dk>
13 * Various fixes by Neil Brown <neilb@cse.unsw.edu.au>
14 *
15 * Changes by Peter T. Breuer <ptb@it.uc3m.es> 31/1/2003 to support
16 * bitmapped intelligence in resync:
17 *
18 * - bitmap marked during normal i/o
19 * - bitmap used to skip nondirty blocks during sync
20 *
21 * Additions to bitmap code, (C) 2003-2004 Paul Clements, SteelEye Technology:
22 * - persistent bitmap code
23 *
24 * This program is free software; you can redistribute it and/or modify
25 * it under the terms of the GNU General Public License as published by
26 * the Free Software Foundation; either version 2, or (at your option)
27 * any later version.
28 *
29 * You should have received a copy of the GNU General Public License
30 * (for example /usr/src/linux/COPYING); if not, write to the Free
31 * Software Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
32 */
34 #include <linux/slab.h>
35 #include <linux/delay.h>
36 #include <linux/blkdev.h>
37 #include <linux/module.h>
38 #include <linux/seq_file.h>
39 #include <linux/ratelimit.h>
44 /*
45 * Number of guaranteed r1bios in case of extreme VM load:
46 */
47 #define NR_RAID1_BIOS 256
49 /* When there are this many requests queue to be written by
50 * the raid1 thread, we become 'congested' to provide back-pressure
51 * for writeback.
52 */
59 {
63 /* allocate a r1bio with room for raid_disks entries in the bios array */
65 }
68 {
70 }
72 #define RESYNC_BLOCK_SIZE (64*1024)
73 //#define RESYNC_BLOCK_SIZE PAGE_SIZE
74 #define RESYNC_SECTORS (RESYNC_BLOCK_SIZE >> 9)
75 #define RESYNC_PAGES ((RESYNC_BLOCK_SIZE + PAGE_SIZE-1) / PAGE_SIZE)
76 #define RESYNC_WINDOW (2048*1024)
79 {
90 /*
91 * Allocate bios : 1 for reading, n-1 for writing
92 */
98 }
99 /*
100 * Allocate RESYNC_PAGES data pages and attach them to
101 * the first bio.
102 * If this is a user-requested check/repair, allocate
103 * RESYNC_PAGES for each bio.
104 */
107 else
118 }
119 }
120 /* If not user-requests, copy the page pointers to all bios */
126 }
132 out_free_pages:
137 out_free_bio:
142 }
145 {
156 }
161 }
164 {
172 }
173 }
176 {
181 }
184 {
192 }
197 }
200 {
212 }
214 /*
215 * raid_end_bio_io() is called when we have finished servicing a mirrored
216 * operation and are ready to return a success/failure code to the buffer
217 * cache layer.
218 */
220 {
238 /*
239 * Wake up any possible resync thread that waits for the device
240 * to go idle.
241 */
243 }
244 }
247 {
250 /* if nobody has done the final endio yet, do it now */
259 }
261 }
263 /*
264 * Update disk head position estimator based on IRQ completion info.
265 */
267 {
272 }
274 /*
275 * Find the disk number which triggered given bio
276 */
278 {
291 }
294 {
301 /*
302 * this branch is our 'one mirror IO has finished' event handler:
303 */
309 /* If all other devices have failed, we want to return
310 * the error upwards rather than fail the last device.
311 * Here we redefine "uptodate" to mean "Don't want to retry"
312 */
320 }
325 /*
326 * oops, read error:
327 */
330 KERN_ERR "md/raid1:%s: %s: "
334 b),
338 }
341 }
344 {
345 /* it really is the end of this request */
347 /* free extra copy of the data pages */
353 }
354 /* clear the bitmap if all writes complete successfully */
360 }
363 {
373 else
375 }
376 }
379 {
388 /*
389 * 'one mirror IO has finished' event handler:
390 */
401 /*
402 * Set R1BIO_Uptodate in our master bio, so that we
403 * will return a good error code for to the higher
404 * levels even if IO on some other mirrored buffer
405 * fails.
406 *
407 * The 'master' represents the composite IO operation
408 * to user-side. So if something waits for IO, then it
409 * will wait for the 'master' bio.
410 */
411 sector_t first_bad;
418 /* Maybe we can clear some bad blocks. */
424 }
425 }
431 /*
432 * In behind mode, we ACK the master bio once the I/O
433 * has safely reached all non-writemostly
434 * disks. Setting the Returned bit ensures that this
435 * gets done only once -- we don't ever want to return
436 * -EIO here, instead we'll wait
437 */
440 /* Maybe we can return now */
449 }
450 }
451 }
456 /*
457 * Let's see if all mirrored write operations have finished
458 * already.
459 */
464 }
467 /*
468 * This routine returns the disk from which the requested read should
469 * be done. There is a per-array 'next expected sequential IO' sector
470 * number - if this matches on the next IO then we use the last disk.
471 * There is also a per-disk 'last know head position' sector that is
472 * maintained from IRQ contexts, both the normal and the resync IO
473 * completion handlers update this position correctly. If there is no
474 * perfect sequential match then we pick the disk whose head is closest.
475 *
476 * If there are 2 mirrors in the same 2 devices, performance degrades
477 * because position is mirror, not device based.
478 *
479 * The rdev for the device selected will have nr_pending incremented.
480 */
482 {
489 sector_t best_dist;
494 /*
495 * Check if we can balance. We can balance on the whole
496 * device if no resync is going on, or below the resync window.
497 * We take the first readable disk when above the resync window.
498 */
499 retry:
512 }
515 sector_t dist;
516 sector_t first_bad;
533 /* Don't balance among write-mostly, just
534 * use the first as a last resort */
539 /* Cannot use this */
545 }
547 }
548 /* This is a reasonable device to use. It might
549 * even be best.
550 */
554 /* already have a better device */
557 /* cannot read here. If this is the 'primary'
558 * device, then we must not read beyond
559 * bad_sectors from another device..
560 */
572 }
575 }
582 /* Don't change to another disk for sequential reads */
585 /* If device is idle, use it */
589 }
593 }
594 }
602 /* cannot risk returning a device that failed
603 * before we inc'ed nr_pending
604 */
607 }
611 }
616 }
621 {
642 }
643 }
644 }
646 }
649 }
652 {
668 /* Note the '|| 1' - when read_balance prefers
669 * non-congested targets, it can be removed
670 */
673 else
675 }
676 }
679 }
683 {
688 }
691 {
692 /* Any writes that have been queued but are awaiting
693 * bitmap updates get flushed here.
694 */
702 /* flush any pending bitmap writes to
703 * disk before proceeding w/ I/O */
712 }
715 }
717 /* Barriers....
718 * Sometimes we need to suspend IO while we do something else,
719 * either some resync/recovery, or reconfigure the array.
720 * To do this we raise a 'barrier'.
721 * The 'barrier' is a counter that can be raised multiple times
722 * to count how many activities are happening which preclude
723 * normal IO.
724 * We can only raise the barrier if there is no pending IO.
725 * i.e. if nr_pending == 0.
726 * We choose only to raise the barrier if no-one is waiting for the
727 * barrier to go down. This means that as soon as an IO request
728 * is ready, no other operations which require a barrier will start
729 * until the IO request has had a chance.
730 *
731 * So: regular IO calls 'wait_barrier'. When that returns there
732 * is no backgroup IO happening, It must arrange to call
733 * allow_barrier when it has finished its IO.
734 * backgroup IO calls must call raise_barrier. Once that returns
735 * there is no normal IO happeing. It must arrange to call
736 * lower_barrier when the particular background IO completes.
737 */
738 #define RESYNC_DEPTH 32
741 {
744 /* Wait until no block IO is waiting */
748 /* block any new IO from starting */
751 /* Now wait for all pending IO to complete */
757 }
760 {
767 }
770 {
774 /* Wait for the barrier to drop.
775 * However if there are already pending
776 * requests (preventing the barrier from
777 * rising completely), and the
778 * pre-process bio queue isn't empty,
779 * then don't wait, as we need to empty
780 * that queue to get the nr_pending
781 * count down.
782 */
789 );
791 }
794 }
797 {
803 }
806 {
807 /* stop syncio and normal IO and wait for everything to
808 * go quite.
809 * We increment barrier and nr_waiting, and then
810 * wait until nr_pending match nr_queued+1
811 * This is called in the context of one normal IO request
812 * that has failed. Thus any sync request that might be pending
813 * will be blocked by nr_pending, and we need to wait for
814 * pending IO requests to complete or be queued for re-try.
815 * Thus the number queued (nr_queued) plus this request (1)
816 * must match the number of pending IOs (nr_pending) before
817 * we continue.
818 */
827 }
829 {
830 /* reverse the effect of the freeze */
836 }
839 /* duplicate the data pages for behind I/O
840 */
842 {
846 GFP_NOIO);
859 }
865 do_sync_io:
871 }
874 {
891 /*
892 * Register the new request and wait if the reconstruction
893 * thread has put up a bar for new requests.
894 * Continue immediately if no resync is active currently.
895 */
902 /* As the suspend_* range is controlled by
903 * userspace, we want an interruptible
904 * wait.
905 */
915 }
917 }
923 /*
924 * make_request() can abort the operation when READA is being
925 * used and no empty request is available.
926 *
927 */
936 /* We might need to issue multiple reads to different
937 * devices if there are bad blocks around, so we keep
938 * track of the number of reads in bio->bi_phys_segments.
939 * If this is 0, there is only one r1_bio and no locking
940 * will be needed when requests complete. If it is
941 * non-zero, then it is the number of not-completed requests.
942 */
947 /*
948 * read balancing logic:
949 */
952 read_again:
956 /* couldn't find anywhere to read from */
959 }
963 bitmap) {
964 /* Reading from a write-mostly device must
965 * take care not to over-take any writes
966 * that are 'behind'
967 */
970 }
975 max_sectors);
986 /* could not read all from this device, so we will
987 * need another r1_bio.
988 */
996 else
999 /* Cannot call generic_make_request directly
1000 * as that will be queued in __make_request
1001 * and subsequent mempool_alloc might block waiting
1002 * for it. So hand bio over to raid1d.
1003 */
1017 }
1019 /*
1020 * WRITE:
1021 */
1026 }
1027 /* first select target devices under rcu_lock and
1028 * inc refcount on their rdev. Record them by setting
1029 * bios[x] to bio
1030 * If there are known/acknowledged bad blocks on any device on
1031 * which we have seen a write error, we want to avoid writing those
1032 * blocks.
1033 * This potentially requires several writes to write around
1034 * the bad blocks. Each set of writes gets it's own r1bio
1035 * with a set of bios attached.
1036 */
1040 retry_write:
1050 }
1057 }
1061 sector_t first_bad;
1066 max_sectors,
1069 /* mustn't write here until the bad block is
1070 * acknowledged*/
1074 }
1076 /* Cannot write here at all */
1079 /* mustn't write more than bad_sectors
1080 * to other devices yet
1081 */
1084 /* We don't set R1BIO_Degraded as that
1085 * only applies if the disk is
1086 * missing, so it might be re-added,
1087 * and we want to know to recover this
1088 * chunk.
1089 * In this case the device is here,
1090 * and the fact that this chunk is not
1091 * in-sync is recorded in the bad
1092 * block log
1093 */
1095 }
1100 }
1101 }
1103 }
1107 /* Wait for this device to become unblocked */
1118 }
1121 /* We are splitting this write into multiple parts, so
1122 * we need to prepare for allocating another r1_bio.
1123 */
1128 else
1131 }
1147 /* do behind I/O ?
1148 * Not if there are too many, or cannot
1149 * allocate memory, or a reader on WriteMostly
1150 * is waiting for behind writes to flush */
1162 }
1167 /* Yes, I really want the '__' version so that
1168 * we clear any unused pointer in the io_vec, rather
1169 * than leave them unchanged. This is important
1170 * because when we come to free the pages, we won't
1171 * know the original bi_idx, so we just free
1172 * them all
1173 */
1178 }
1194 }
1195 /* Mustn't call r1_bio_write_done before this next test,
1196 * as it could result in the bio being freed.
1197 */
1200 /* We need another r1_bio. It has already been counted
1201 * in bio->bi_phys_segments
1202 */
1210 }
1214 /* In case raid1d snuck in to freeze_array */
1219 }
1222 {
1233 }
1236 }
1240 {
1244 /*
1245 * If it is not operational, then we have already marked it as dead
1246 * else if it is the last working disks, ignore the error, let the
1247 * next level up know.
1248 * else mark the drive as failed
1249 */
1252 /*
1253 * Don't fail the drive, act as though we were just a
1254 * normal single drive.
1255 * However don't try a recovery from this drive as
1256 * it is very likely to fail.
1257 */
1260 }
1268 /*
1269 * if recovery is running, make sure it aborts.
1270 */
1280 }
1283 {
1290 }
1303 }
1305 }
1308 {
1314 }
1317 {
1323 /*
1324 * Find all failed disks within the RAID1 configuration
1325 * and mark them readable.
1326 * Called under mddev lock, so rcu protection not needed.
1327 */
1335 /* replacement has just become active */
1338 count++;
1340 /* Replaced device not technically
1341 * faulty, but we need to be sure
1342 * it gets removed and never re-added
1343 */
1347 }
1348 }
1352 count++;
1354 }
1355 }
1362 }
1366 {
1384 }
1396 /* As all devices are equivalent, we don't need a full recovery
1397 * if this was recently any drive of the array
1398 */
1403 }
1406 /* Add this device as a replacement */
1414 }
1415 }
1417 /* Some requests might not have seen this new
1418 * merge_bvec_fn. We must wait for them to complete
1419 * before merging the device fully.
1420 * First we make sure any code which has tested
1421 * our function has submitted the request, then
1422 * we wait for all outstanding requests to complete.
1423 */
1428 }
1432 }
1435 {
1450 }
1451 /* Only remove non-faulty devices if recovery
1452 * is not possible.
1453 */
1459 }
1463 /* lost the race, try later */
1468 /* We just removed a device that is being replaced.
1469 * Move down the replacement. We drain all IO before
1470 * doing this to avoid confusion.
1471 */
1483 }
1484 abort:
1488 }
1492 {
1497 /*
1498 * we have read a block, now it needs to be re-written,
1499 * or re-read if the read failed.
1500 * We don't do much here, just schedule handling by raid1d
1501 */
1507 }
1510 {
1516 sector_t first_bad;
1525 /* make sure these bits doesn't get cleared. */
1547 )
1558 }
1559 }
1560 }
1564 {
1566 /* success */
1574 }
1575 /* need to record an error - either for the block or the device */
1579 }
1582 {
1583 /* Try some synchronous reads of other devices to get
1584 * good data, much like with normal read errors. Only
1585 * read into the pages we already have so we don't
1586 * need to re-issue the read request.
1587 * We don't need to freeze the array, because being in an
1588 * active sync request, there is no normal IO, and
1589 * no overlapping syncs.
1590 * We don't need to check is_badblock() again as we
1591 * made sure that anything with a bad block in range
1592 * will have bi_end_io clear.
1593 */
1612 /* No rcu protection needed here devices
1613 * can only be removed when no resync is
1614 * active, and resync is currently active
1615 */
1622 }
1623 }
1624 d++;
1632 /* Cannot read from anywhere, this block is lost.
1633 * Record a bad block on each device. If that doesn't
1634 * work just disable and interrupt the recovery.
1635 * Don't fail devices as that won't really help.
1636 */
1648 }
1656 }
1657 /* Try next page */
1660 idx++;
1662 }
1665 /* write it back and re-read */
1669 d--;
1678 }
1679 }
1684 d--;
1692 }
1695 idx ++;
1696 }
1700 }
1703 {
1704 /* We have read all readable devices. If we haven't
1705 * got the block, then there is no hope left.
1706 * If we have, then we want to do a comparison
1707 * and skip the write if everything is the same.
1708 * If any blocks failed to read, then we need to
1709 * attempt an over-write
1710 */
1723 }
1744 }
1751 /* No need to write to this device. */
1755 }
1756 /* fixup the bio for reuse */
1774 else
1779 PAGE_SIZE);
1780 }
1781 }
1783 }
1786 {
1795 /* ouch - failed to read all of that. */
1802 /*
1803 * schedule writes
1804 */
1820 }
1823 /* if we're here, all write(s) have completed, so clean up */
1831 }
1832 }
1833 }
1835 /*
1836 * This is a kernel thread which:
1837 *
1838 * 1. Retries failed read operations on working mirrors.
1839 * 2. Updates the raid superblock when problems encounter.
1840 * 3. Performs writes following reads for array synchronising.
1841 */
1845 {
1858 /* Note: no rcu protection needed here
1859 * as this is synchronous in the raid1d thread
1860 * which is the thread that might remove
1861 * a device. If raid1d ever becomes multi-threaded....
1862 */
1863 sector_t first_bad;
1875 d++;
1878 }
1882 /* Cannot read from anywhere - mark it bad */
1887 }
1888 /* write it back and re-read */
1893 d--;
1899 }
1905 d--;
1913 "md/raid1:%s: read error corrected "
1919 }
1920 }
1921 }
1924 }
1925 }
1928 {
1930 }
1933 {
1944 }
1947 {
1954 /* bio has the data to be written to device 'i' where
1955 * we just recently had a write error.
1956 * We repeatedly clone the bio and trim down to one block,
1957 * then try the write. Where the write fails we record
1958 * a bad block.
1959 * It is conceivable that the bio doesn't exactly align with
1960 * blocks. We must handle this somehow.
1961 *
1962 * We currently own a reference on the rdev.
1963 */
1966 sector_t sector;
1985 idx++;
1990 }
1995 /* Write at 'sector' for 'sectors'*/
2009 /* failure! */
2018 }
2020 }
2023 {
2034 }
2039 }
2040 }
2043 }
2046 {
2056 /* This drive got a write error. We need to
2057 * narrow down and record precise write
2058 * errors.
2059 */
2063 /* an I/O failed, we can't clear the bitmap */
2065 }
2068 }
2072 }
2075 {
2084 /* we got a read error. Maybe the drive is bad. Maybe just
2085 * the block and we can fix it.
2086 * We freeze all other IO, and try reading the block from
2087 * other devices. When we find one, we re-write
2088 * and check it that fixes the read error.
2089 * This is all done synchronously while the array is
2090 * frozen
2091 */
2102 read_more:
2110 const unsigned long do_sync
2116 }
2123 "md/raid1:%s: redirecting sector %llu"
2134 /* Drat - have to split this up more */
2142 else
2161 }
2162 }
2165 {
2184 }
2196 else
2203 else
2204 /* just a partial read to be scheduled from separate
2205 * context
2206 */
2212 }
2214 }
2218 {
2229 }
2231 /*
2232 * perform a "sync" on one "block"
2233 *
2234 * We need to make sure that no normal I/O request - particularly write
2235 * requests - conflict with active sync requests.
2236 *
2237 * This is achieved by tracking pending requests and a 'barrier' concept
2238 * that can be installed to exclude normal IO requests.
2239 */
2241 static sector_t sync_request(struct mddev *mddev, sector_t sector_nr, int *skipped, int go_faster)
2242 {
2251 sector_t sync_blocks;
2262 /* If we aborted, we need to abort the
2263 * sync on the 'current' bitmap chunk (there will
2264 * only be one in raid1 resync.
2265 * We can find the current addess in mddev->curr_resync
2266 */
2276 }
2284 }
2285 /* before building a request, check if we can skip these blocks..
2286 * This call the bitmap_start_sync doesn't actually record anything
2287 */
2290 /* We can skip this block, and probably several more */
2293 }
2294 /*
2295 * If there is non-resync activity waiting for a turn,
2296 * and resync is going fast enough,
2297 * then let it though before starting on this new sync request.
2298 */
2309 /*
2310 * If we get a correctably read error during resync or recovery,
2311 * we might want to read from a different device. So we
2312 * flag all drives that could conceivably be read from for READ,
2313 * and any others (which will be non-In_sync devices) for WRITE.
2314 * If a read fails, we try reading from something else for which READ
2315 * is OK.
2316 */
2327 /* take from bio_init */
2347 write_targets ++;
2349 /* may need to read from here */
2362 }
2363 }
2371 }
2374 read_targets++;
2375 }
2376 }
2382 }
2383 }
2390 /* These sectors are bad on all InSync devices, so we
2391 * need to mark them bad on all write targets
2392 */
2400 }
2406 /* Cannot record the badblocks, so need to
2407 * abort the resync.
2408 * If there are multiple read targets, could just
2409 * fail the really bad ones ???
2410 */
2417 }
2419 /* only resync enough to reach the next bad->good
2420 * transition */
2422 }
2425 /* extra read targets are also write targets */
2429 /* There is nowhere to write, so all non-sync
2430 * drives must be failed - so we are finished
2431 */
2432 sector_t rv;
2439 }
2463 }
2470 /* stop here */
2473 i--;
2477 /* remove last page from this bio */
2481 }
2483 }
2484 }
2485 }
2490 bio_full:
2493 /* For a user-requested sync, we read all readable devices and do a
2494 * compare
2495 */
2501 read_targets--;
2504 }
2505 }
2512 }
2514 }
2517 {
2522 }
2525 {
2538 GFP_KERNEL);
2551 r1bio_pool_free,
2568 else
2579 }
2599 /* This slot has a replacement. */
2601 /* No original, just make the replacement
2602 * a recovering spare
2603 */
2608 /* Original is not in_sync - bad */
2610 }
2618 /*
2619 * The first working device is used as a
2620 * starting point to read balancing.
2621 */
2623 }
2629 }
2637 }
2641 abort:
2649 }
2651 }
2655 {
2665 }
2670 }
2671 /*
2672 * copy the already verified devices into our private RAID1
2673 * bookkeeping area. [whatever we allocate in run(),
2674 * should be freed in stop()]
2675 */
2678 else
2689 }
2710 /*
2711 * Ok, everything is just fine now
2712 */
2723 }
2729 }
2732 {
2736 /* wait for behind writes to complete */
2740 /* need to kick something here to make sure I/O goes? */
2743 }
2756 }
2759 {
2760 /* no resync is happening, and there is enough space
2761 * on all devices, so we can resize.
2762 * We need to make sure resync covers any new space.
2763 * If the array is shrinking we should possibly wait until
2764 * any io in the removed space completes, but it hardly seems
2765 * worth it.
2766 */
2776 }
2780 }
2783 {
2784 /* We need to:
2785 * 1/ resize the r1bio_pool
2786 * 2/ resize conf->mirrors
2787 *
2788 * We allocate a new r1bio_pool if we can.
2789 * Then raise a device barrier and wait until all IO stops.
2790 * Then resize conf->mirrors and swap in the new r1bio pool.
2791 *
2792 * At the same time, we "pack" the devices so that all the missing
2793 * devices have the higher raid_disk numbers.
2794 */
2803 /* Cannot change chunk_size, layout, or level */
2811 }
2823 cnt++;
2826 }
2839 }
2841 GFP_KERNEL);
2846 }
2850 /* ok, everything is stopped */
2864 }
2867 }
2887 }
2890 {
2903 }
2904 }
2907 {
2908 /* raid1 can take over:
2909 * raid5 with 2 devices, any layout or chunk size
2910 */
2920 }
2922 }
2925 {
2943 };
2946 {
2948 }
2951 {
2953 }