1 // SPDX-License-Identifier: GPL-2.0-only
2 /******************************************************************************
3 *******************************************************************************
5 ** Copyright (C) Sistina Software, Inc. 1997-2003 All rights reserved.
6 ** Copyright (C) 2004-2005 Red Hat, Inc. All rights reserved.
9 *******************************************************************************
10 ******************************************************************************/
12 #include "dlm_internal.h"
13 #include "lockspace.h"
26 * Recovery waiting routines: these functions wait for a particular reply from
27 * a remote node, or for the remote node to report a certain status. They need
28 * to abort if the lockspace is stopped indicating a node has failed (perhaps
29 * the one being waited for).
33 * Wait until given function returns non-zero or lockspace is stopped
34 * (LS_RECOVERY_STOP set due to failure of a node in ls_nodes). When another
35 * function thinks it could have completed the waited-on task, they should wake
36 * up ls_wait_general to get an immediate response rather than waiting for the
37 * timeout. This uses a timeout so it can check periodically if the wait
38 * should abort due to node failure (which doesn't cause a wake_up).
39 * This should only be called by the dlm_recoverd thread.
42 int dlm_wait_function(struct dlm_ls *ls, int (*testfn) (struct dlm_ls *ls))
48 rv = wait_event_timeout(ls->ls_wait_general,
49 testfn(ls) || dlm_recovery_stopped(ls),
50 dlm_config.ci_recover_timer * HZ);
53 if (test_bit(LSFL_RCOM_WAIT, &ls->ls_flags)) {
54 log_debug(ls, "dlm_wait_function timed out");
59 if (dlm_recovery_stopped(ls)) {
60 log_debug(ls, "dlm_wait_function aborted");
67 * An efficient way for all nodes to wait for all others to have a certain
68 * status. The node with the lowest nodeid polls all the others for their
69 * status (wait_status_all) and all the others poll the node with the low id
70 * for its accumulated result (wait_status_low). When all nodes have set
71 * status flag X, then status flag X_ALL will be set on the low nodeid.
74 uint32_t dlm_recover_status(struct dlm_ls *ls)
77 spin_lock_bh(&ls->ls_recover_lock);
78 status = ls->ls_recover_status;
79 spin_unlock_bh(&ls->ls_recover_lock);
83 static void _set_recover_status(struct dlm_ls *ls, uint32_t status)
85 ls->ls_recover_status |= status;
88 void dlm_set_recover_status(struct dlm_ls *ls, uint32_t status)
90 spin_lock_bh(&ls->ls_recover_lock);
91 _set_recover_status(ls, status);
92 spin_unlock_bh(&ls->ls_recover_lock);
95 static int wait_status_all(struct dlm_ls *ls, uint32_t wait_status,
96 int save_slots, uint64_t seq)
98 struct dlm_rcom *rc = ls->ls_recover_buf;
99 struct dlm_member *memb;
100 int error = 0, delay;
102 list_for_each_entry(memb, &ls->ls_nodes, list) {
105 if (dlm_recovery_stopped(ls)) {
110 error = dlm_rcom_status(ls, memb->nodeid, 0, seq);
115 dlm_slot_save(ls, rc, memb);
117 if (le32_to_cpu(rc->rc_result) & wait_status)
128 static int wait_status_low(struct dlm_ls *ls, uint32_t wait_status,
129 uint32_t status_flags, uint64_t seq)
131 struct dlm_rcom *rc = ls->ls_recover_buf;
132 int error = 0, delay = 0, nodeid = ls->ls_low_nodeid;
135 if (dlm_recovery_stopped(ls)) {
140 error = dlm_rcom_status(ls, nodeid, status_flags, seq);
144 if (le32_to_cpu(rc->rc_result) & wait_status)
154 static int wait_status(struct dlm_ls *ls, uint32_t status, uint64_t seq)
156 uint32_t status_all = status << 1;
159 if (ls->ls_low_nodeid == dlm_our_nodeid()) {
160 error = wait_status_all(ls, status, 0, seq);
162 dlm_set_recover_status(ls, status_all);
164 error = wait_status_low(ls, status_all, 0, seq);
169 int dlm_recover_members_wait(struct dlm_ls *ls, uint64_t seq)
171 struct dlm_member *memb;
172 struct dlm_slot *slots;
173 int num_slots, slots_size;
177 list_for_each_entry(memb, &ls->ls_nodes, list) {
179 memb->generation = 0;
182 if (ls->ls_low_nodeid == dlm_our_nodeid()) {
183 error = wait_status_all(ls, DLM_RS_NODES, 1, seq);
187 /* slots array is sparse, slots_size may be > num_slots */
189 rv = dlm_slots_assign(ls, &num_slots, &slots_size, &slots, &gen);
191 spin_lock_bh(&ls->ls_recover_lock);
192 _set_recover_status(ls, DLM_RS_NODES_ALL);
193 ls->ls_num_slots = num_slots;
194 ls->ls_slots_size = slots_size;
195 ls->ls_slots = slots;
196 ls->ls_generation = gen;
197 spin_unlock_bh(&ls->ls_recover_lock);
199 dlm_set_recover_status(ls, DLM_RS_NODES_ALL);
202 error = wait_status_low(ls, DLM_RS_NODES_ALL,
203 DLM_RSF_NEED_SLOTS, seq);
207 dlm_slots_copy_in(ls);
213 int dlm_recover_directory_wait(struct dlm_ls *ls, uint64_t seq)
215 return wait_status(ls, DLM_RS_DIR, seq);
218 int dlm_recover_locks_wait(struct dlm_ls *ls, uint64_t seq)
220 return wait_status(ls, DLM_RS_LOCKS, seq);
223 int dlm_recover_done_wait(struct dlm_ls *ls, uint64_t seq)
225 return wait_status(ls, DLM_RS_DONE, seq);
229 * The recover_list contains all the rsb's for which we've requested the new
230 * master nodeid. As replies are returned from the resource directories the
231 * rsb's are removed from the list. When the list is empty we're done.
233 * The recover_list is later similarly used for all rsb's for which we've sent
234 * new lkb's and need to receive new corresponding lkid's.
236 * We use the address of the rsb struct as a simple local identifier for the
237 * rsb so we can match an rcom reply with the rsb it was sent for.
240 static int recover_list_empty(struct dlm_ls *ls)
244 spin_lock_bh(&ls->ls_recover_list_lock);
245 empty = list_empty(&ls->ls_recover_list);
246 spin_unlock_bh(&ls->ls_recover_list_lock);
251 static void recover_list_add(struct dlm_rsb *r)
253 struct dlm_ls *ls = r->res_ls;
255 spin_lock_bh(&ls->ls_recover_list_lock);
256 if (list_empty(&r->res_recover_list)) {
257 list_add_tail(&r->res_recover_list, &ls->ls_recover_list);
258 ls->ls_recover_list_count++;
261 spin_unlock_bh(&ls->ls_recover_list_lock);
264 static void recover_list_del(struct dlm_rsb *r)
266 struct dlm_ls *ls = r->res_ls;
268 spin_lock_bh(&ls->ls_recover_list_lock);
269 list_del_init(&r->res_recover_list);
270 ls->ls_recover_list_count--;
271 spin_unlock_bh(&ls->ls_recover_list_lock);
276 static void recover_list_clear(struct dlm_ls *ls)
278 struct dlm_rsb *r, *s;
280 spin_lock_bh(&ls->ls_recover_list_lock);
281 list_for_each_entry_safe(r, s, &ls->ls_recover_list, res_recover_list) {
282 list_del_init(&r->res_recover_list);
283 r->res_recover_locks_count = 0;
285 ls->ls_recover_list_count--;
288 if (ls->ls_recover_list_count != 0) {
289 log_error(ls, "warning: recover_list_count %d",
290 ls->ls_recover_list_count);
291 ls->ls_recover_list_count = 0;
293 spin_unlock_bh(&ls->ls_recover_list_lock);
296 static int recover_idr_empty(struct dlm_ls *ls)
300 spin_lock_bh(&ls->ls_recover_idr_lock);
301 if (ls->ls_recover_list_count)
303 spin_unlock_bh(&ls->ls_recover_idr_lock);
308 static int recover_idr_add(struct dlm_rsb *r)
310 struct dlm_ls *ls = r->res_ls;
313 spin_lock_bh(&ls->ls_recover_idr_lock);
318 rv = idr_alloc(&ls->ls_recover_idr, r, 1, 0, GFP_NOWAIT);
323 ls->ls_recover_list_count++;
327 spin_unlock_bh(&ls->ls_recover_idr_lock);
331 static void recover_idr_del(struct dlm_rsb *r)
333 struct dlm_ls *ls = r->res_ls;
335 spin_lock_bh(&ls->ls_recover_idr_lock);
336 idr_remove(&ls->ls_recover_idr, r->res_id);
338 ls->ls_recover_list_count--;
339 spin_unlock_bh(&ls->ls_recover_idr_lock);
344 static struct dlm_rsb *recover_idr_find(struct dlm_ls *ls, uint64_t id)
348 spin_lock_bh(&ls->ls_recover_idr_lock);
349 r = idr_find(&ls->ls_recover_idr, (int)id);
350 spin_unlock_bh(&ls->ls_recover_idr_lock);
354 static void recover_idr_clear(struct dlm_ls *ls)
359 spin_lock_bh(&ls->ls_recover_idr_lock);
361 idr_for_each_entry(&ls->ls_recover_idr, r, id) {
362 idr_remove(&ls->ls_recover_idr, id);
364 r->res_recover_locks_count = 0;
365 ls->ls_recover_list_count--;
370 if (ls->ls_recover_list_count != 0) {
371 log_error(ls, "warning: recover_list_count %d",
372 ls->ls_recover_list_count);
373 ls->ls_recover_list_count = 0;
375 spin_unlock_bh(&ls->ls_recover_idr_lock);
379 /* Master recovery: find new master node for rsb's that were
380 mastered on nodes that have been removed.
384 dlm_send_rcom_lookup -> receive_rcom_lookup
386 receive_rcom_lookup_reply <-
387 dlm_recover_master_reply
394 * Set the lock master for all LKBs in a lock queue
395 * If we are the new master of the rsb, we may have received new
396 * MSTCPY locks from other nodes already which we need to ignore
397 * when setting the new nodeid.
400 static void set_lock_master(struct list_head *queue, int nodeid)
404 list_for_each_entry(lkb, queue, lkb_statequeue) {
405 if (!test_bit(DLM_IFL_MSTCPY_BIT, &lkb->lkb_iflags)) {
406 lkb->lkb_nodeid = nodeid;
412 static void set_master_lkbs(struct dlm_rsb *r)
414 set_lock_master(&r->res_grantqueue, r->res_nodeid);
415 set_lock_master(&r->res_convertqueue, r->res_nodeid);
416 set_lock_master(&r->res_waitqueue, r->res_nodeid);
420 * Propagate the new master nodeid to locks
421 * The NEW_MASTER flag tells dlm_recover_locks() which rsb's to consider.
422 * The NEW_MASTER2 flag tells recover_lvb() and recover_grant() which
426 static void set_new_master(struct dlm_rsb *r)
429 rsb_set_flag(r, RSB_NEW_MASTER);
430 rsb_set_flag(r, RSB_NEW_MASTER2);
434 * We do async lookups on rsb's that need new masters. The rsb's
435 * waiting for a lookup reply are kept on the recover_list.
437 * Another node recovering the master may have sent us a rcom lookup,
438 * and our dlm_master_lookup() set it as the new master, along with
439 * NEW_MASTER so that we'll recover it here (this implies dir_nodeid
440 * equals our_nodeid below).
443 static int recover_master(struct dlm_rsb *r, unsigned int *count, uint64_t seq)
445 struct dlm_ls *ls = r->res_ls;
446 int our_nodeid, dir_nodeid;
453 is_removed = dlm_is_removed(ls, r->res_nodeid);
455 if (!is_removed && !rsb_flag(r, RSB_NEW_MASTER))
458 our_nodeid = dlm_our_nodeid();
459 dir_nodeid = dlm_dir_nodeid(r);
461 if (dir_nodeid == our_nodeid) {
463 r->res_master_nodeid = our_nodeid;
467 /* set master of lkbs to ourself when is_removed, or to
468 another new master which we set along with NEW_MASTER
469 in dlm_master_lookup */
474 error = dlm_send_rcom_lookup(r, dir_nodeid, seq);
482 * All MSTCPY locks are purged and rebuilt, even if the master stayed the same.
483 * This is necessary because recovery can be started, aborted and restarted,
484 * causing the master nodeid to briefly change during the aborted recovery, and
485 * change back to the original value in the second recovery. The MSTCPY locks
486 * may or may not have been purged during the aborted recovery. Another node
487 * with an outstanding request in waiters list and a request reply saved in the
488 * requestqueue, cannot know whether it should ignore the reply and resend the
489 * request, or accept the reply and complete the request. It must do the
490 * former if the remote node purged MSTCPY locks, and it must do the later if
491 * the remote node did not. This is solved by always purging MSTCPY locks, in
492 * which case, the request reply would always be ignored and the request
496 static int recover_master_static(struct dlm_rsb *r, unsigned int *count)
498 int dir_nodeid = dlm_dir_nodeid(r);
499 int new_master = dir_nodeid;
501 if (dir_nodeid == dlm_our_nodeid())
504 dlm_purge_mstcpy_locks(r);
505 r->res_master_nodeid = dir_nodeid;
506 r->res_nodeid = new_master;
513 * Go through local root resources and for each rsb which has a master which
514 * has departed, get the new master nodeid from the directory. The dir will
515 * assign mastery to the first node to look up the new master. That means
516 * we'll discover in this lookup if we're the new master of any rsb's.
518 * We fire off all the dir lookup requests individually and asynchronously to
519 * the correct dir node.
522 int dlm_recover_masters(struct dlm_ls *ls, uint64_t seq,
523 const struct list_head *root_list)
526 unsigned int total = 0;
527 unsigned int count = 0;
528 int nodir = dlm_no_directory(ls);
531 log_rinfo(ls, "dlm_recover_masters");
533 list_for_each_entry(r, root_list, res_root_list) {
534 if (dlm_recovery_stopped(ls)) {
541 error = recover_master_static(r, &count);
543 error = recover_master(r, &count, seq);
552 log_rinfo(ls, "dlm_recover_masters %u of %u", count, total);
554 error = dlm_wait_function(ls, &recover_idr_empty);
557 recover_idr_clear(ls);
561 int dlm_recover_master_reply(struct dlm_ls *ls, const struct dlm_rcom *rc)
564 int ret_nodeid, new_master;
566 r = recover_idr_find(ls, le64_to_cpu(rc->rc_id));
568 log_error(ls, "dlm_recover_master_reply no id %llx",
569 (unsigned long long)le64_to_cpu(rc->rc_id));
573 ret_nodeid = le32_to_cpu(rc->rc_result);
575 if (ret_nodeid == dlm_our_nodeid())
578 new_master = ret_nodeid;
581 r->res_master_nodeid = ret_nodeid;
582 r->res_nodeid = new_master;
587 if (recover_idr_empty(ls))
588 wake_up(&ls->ls_wait_general);
594 /* Lock recovery: rebuild the process-copy locks we hold on a
595 remastered rsb on the new rsb master.
600 dlm_send_rcom_lock -> receive_rcom_lock
601 dlm_recover_master_copy
602 receive_rcom_lock_reply <-
603 dlm_recover_process_copy
608 * keep a count of the number of lkb's we send to the new master; when we get
609 * an equal number of replies then recovery for the rsb is done
612 static int recover_locks_queue(struct dlm_rsb *r, struct list_head *head,
618 list_for_each_entry(lkb, head, lkb_statequeue) {
619 error = dlm_send_rcom_lock(r, lkb, seq);
622 r->res_recover_locks_count++;
628 static int recover_locks(struct dlm_rsb *r, uint64_t seq)
634 DLM_ASSERT(!r->res_recover_locks_count, dlm_dump_rsb(r););
636 error = recover_locks_queue(r, &r->res_grantqueue, seq);
639 error = recover_locks_queue(r, &r->res_convertqueue, seq);
642 error = recover_locks_queue(r, &r->res_waitqueue, seq);
646 if (r->res_recover_locks_count)
649 rsb_clear_flag(r, RSB_NEW_MASTER);
655 int dlm_recover_locks(struct dlm_ls *ls, uint64_t seq,
656 const struct list_head *root_list)
659 int error, count = 0;
661 list_for_each_entry(r, root_list, res_root_list) {
663 rsb_clear_flag(r, RSB_NEW_MASTER);
667 if (!rsb_flag(r, RSB_NEW_MASTER))
670 if (dlm_recovery_stopped(ls)) {
675 error = recover_locks(r, seq);
679 count += r->res_recover_locks_count;
682 log_rinfo(ls, "dlm_recover_locks %d out", count);
684 error = dlm_wait_function(ls, &recover_list_empty);
687 recover_list_clear(ls);
691 void dlm_recovered_lock(struct dlm_rsb *r)
693 DLM_ASSERT(rsb_flag(r, RSB_NEW_MASTER), dlm_dump_rsb(r););
695 r->res_recover_locks_count--;
696 if (!r->res_recover_locks_count) {
697 rsb_clear_flag(r, RSB_NEW_MASTER);
701 if (recover_list_empty(r->res_ls))
702 wake_up(&r->res_ls->ls_wait_general);
706 * The lvb needs to be recovered on all master rsb's. This includes setting
707 * the VALNOTVALID flag if necessary, and determining the correct lvb contents
708 * based on the lvb's of the locks held on the rsb.
710 * RSB_VALNOTVALID is set in two cases:
712 * 1. we are master, but not new, and we purged an EX/PW lock held by a
713 * failed node (in dlm_recover_purge which set RSB_RECOVER_LVB_INVAL)
715 * 2. we are a new master, and there are only NL/CR locks left.
716 * (We could probably improve this by only invaliding in this way when
717 * the previous master left uncleanly. VMS docs mention that.)
719 * The LVB contents are only considered for changing when this is a new master
720 * of the rsb (NEW_MASTER2). Then, the rsb's lvb is taken from any lkb with
721 * mode > CR. If no lkb's exist with mode above CR, the lvb contents are taken
722 * from the lkb with the largest lvb sequence number.
725 static void recover_lvb(struct dlm_rsb *r)
727 struct dlm_lkb *big_lkb = NULL, *iter, *high_lkb = NULL;
728 uint32_t high_seq = 0;
729 int lock_lvb_exists = 0;
730 int lvblen = r->res_ls->ls_lvblen;
732 if (!rsb_flag(r, RSB_NEW_MASTER2) &&
733 rsb_flag(r, RSB_RECOVER_LVB_INVAL)) {
735 rsb_set_flag(r, RSB_VALNOTVALID);
739 if (!rsb_flag(r, RSB_NEW_MASTER2))
742 /* we are the new master, so figure out if VALNOTVALID should
743 be set, and set the rsb lvb from the best lkb available. */
745 list_for_each_entry(iter, &r->res_grantqueue, lkb_statequeue) {
746 if (!(iter->lkb_exflags & DLM_LKF_VALBLK))
751 if (iter->lkb_grmode > DLM_LOCK_CR) {
756 if (((int)iter->lkb_lvbseq - (int)high_seq) >= 0) {
758 high_seq = iter->lkb_lvbseq;
762 list_for_each_entry(iter, &r->res_convertqueue, lkb_statequeue) {
763 if (!(iter->lkb_exflags & DLM_LKF_VALBLK))
768 if (iter->lkb_grmode > DLM_LOCK_CR) {
773 if (((int)iter->lkb_lvbseq - (int)high_seq) >= 0) {
775 high_seq = iter->lkb_lvbseq;
780 if (!lock_lvb_exists)
783 /* lvb is invalidated if only NL/CR locks remain */
785 rsb_set_flag(r, RSB_VALNOTVALID);
787 if (!r->res_lvbptr) {
788 r->res_lvbptr = dlm_allocate_lvb(r->res_ls);
794 r->res_lvbseq = big_lkb->lkb_lvbseq;
795 memcpy(r->res_lvbptr, big_lkb->lkb_lvbptr, lvblen);
796 } else if (high_lkb) {
797 r->res_lvbseq = high_lkb->lkb_lvbseq;
798 memcpy(r->res_lvbptr, high_lkb->lkb_lvbptr, lvblen);
801 memset(r->res_lvbptr, 0, lvblen);
807 /* All master rsb's flagged RECOVER_CONVERT need to be looked at. The locks
808 converting PR->CW or CW->PR need to have their lkb_grmode set. */
810 static void recover_conversion(struct dlm_rsb *r)
812 struct dlm_ls *ls = r->res_ls;
816 list_for_each_entry(lkb, &r->res_grantqueue, lkb_statequeue) {
817 if (lkb->lkb_grmode == DLM_LOCK_PR ||
818 lkb->lkb_grmode == DLM_LOCK_CW) {
819 grmode = lkb->lkb_grmode;
824 list_for_each_entry(lkb, &r->res_convertqueue, lkb_statequeue) {
825 if (lkb->lkb_grmode != DLM_LOCK_IV)
828 log_debug(ls, "recover_conversion %x set gr to rq %d",
829 lkb->lkb_id, lkb->lkb_rqmode);
830 lkb->lkb_grmode = lkb->lkb_rqmode;
832 log_debug(ls, "recover_conversion %x set gr %d",
833 lkb->lkb_id, grmode);
834 lkb->lkb_grmode = grmode;
839 /* We've become the new master for this rsb and waiting/converting locks may
840 need to be granted in dlm_recover_grant() due to locks that may have
841 existed from a removed node. */
843 static void recover_grant(struct dlm_rsb *r)
845 if (!list_empty(&r->res_waitqueue) || !list_empty(&r->res_convertqueue))
846 rsb_set_flag(r, RSB_RECOVER_GRANT);
849 void dlm_recover_rsbs(struct dlm_ls *ls, const struct list_head *root_list)
852 unsigned int count = 0;
854 list_for_each_entry(r, root_list, res_root_list) {
857 if (rsb_flag(r, RSB_RECOVER_CONVERT))
858 recover_conversion(r);
860 /* recover lvb before granting locks so the updated
861 lvb/VALNOTVALID is presented in the completion */
864 if (rsb_flag(r, RSB_NEW_MASTER2))
868 rsb_clear_flag(r, RSB_VALNOTVALID);
870 rsb_clear_flag(r, RSB_RECOVER_CONVERT);
871 rsb_clear_flag(r, RSB_RECOVER_LVB_INVAL);
872 rsb_clear_flag(r, RSB_NEW_MASTER2);
877 log_rinfo(ls, "dlm_recover_rsbs %d done", count);
880 /* Create a single list of all root rsb's to be used during recovery */
882 void dlm_clear_toss(struct dlm_ls *ls)
884 struct dlm_rsb *r, *safe;
885 unsigned int count = 0;
887 write_lock_bh(&ls->ls_rsbtbl_lock);
888 list_for_each_entry_safe(r, safe, &ls->ls_toss, res_rsbs_list) {
889 list_del(&r->res_rsbs_list);
890 rhashtable_remove_fast(&ls->ls_rsbtbl, &r->res_node,
891 dlm_rhash_rsb_params);
893 /* remove it from the toss queue if its part of it */
894 if (!list_empty(&r->res_toss_q_list))
895 list_del_init(&r->res_toss_q_list);
900 write_unlock_bh(&ls->ls_rsbtbl_lock);
903 log_rinfo(ls, "dlm_clear_toss %u done", count);