1 // SPDX-License-Identifier: GPL-2.0+
3 * linux/fs/jbd2/checkpoint.c
7 * Copyright 1999 Red Hat Software --- All Rights Reserved
9 * Checkpoint routines for the generic filesystem journaling code.
10 * Part of the ext2fs journaling system.
12 * Checkpointing is the process of ensuring that a section of the log is
13 * committed fully to disk, so that that portion of the log can be
17 #include <linux/time.h>
19 #include <linux/jbd2.h>
20 #include <linux/errno.h>
21 #include <linux/slab.h>
22 #include <linux/blkdev.h>
23 #include <trace/events/jbd2.h>
26 * Unlink a buffer from a transaction checkpoint list.
28 * Called with j_list_lock held.
30 static inline void __buffer_unlink_first(struct journal_head *jh)
32 transaction_t *transaction = jh->b_cp_transaction;
34 jh->b_cpnext->b_cpprev = jh->b_cpprev;
35 jh->b_cpprev->b_cpnext = jh->b_cpnext;
36 if (transaction->t_checkpoint_list == jh) {
37 transaction->t_checkpoint_list = jh->b_cpnext;
38 if (transaction->t_checkpoint_list == jh)
39 transaction->t_checkpoint_list = NULL;
44 * Unlink a buffer from a transaction checkpoint(io) list.
46 * Called with j_list_lock held.
48 static inline void __buffer_unlink(struct journal_head *jh)
50 transaction_t *transaction = jh->b_cp_transaction;
52 __buffer_unlink_first(jh);
53 if (transaction->t_checkpoint_io_list == jh) {
54 transaction->t_checkpoint_io_list = jh->b_cpnext;
55 if (transaction->t_checkpoint_io_list == jh)
56 transaction->t_checkpoint_io_list = NULL;
61 * Move a buffer from the checkpoint list to the checkpoint io list
63 * Called with j_list_lock held
65 static inline void __buffer_relink_io(struct journal_head *jh)
67 transaction_t *transaction = jh->b_cp_transaction;
69 __buffer_unlink_first(jh);
71 if (!transaction->t_checkpoint_io_list) {
72 jh->b_cpnext = jh->b_cpprev = jh;
74 jh->b_cpnext = transaction->t_checkpoint_io_list;
75 jh->b_cpprev = transaction->t_checkpoint_io_list->b_cpprev;
76 jh->b_cpprev->b_cpnext = jh;
77 jh->b_cpnext->b_cpprev = jh;
79 transaction->t_checkpoint_io_list = jh;
83 * Check a checkpoint buffer could be release or not.
85 * Requires j_list_lock
87 static inline bool __cp_buffer_busy(struct journal_head *jh)
89 struct buffer_head *bh = jh2bh(jh);
91 return (jh->b_transaction || buffer_locked(bh) || buffer_dirty(bh));
95 * __jbd2_log_wait_for_space: wait until there is space in the journal.
97 * Called under j-state_lock *only*. It will be unlocked if we have to wait
98 * for a checkpoint to free up some space in the log.
100 void __jbd2_log_wait_for_space(journal_t *journal)
101 __acquires(&journal->j_state_lock)
102 __releases(&journal->j_state_lock)
104 int nblocks, space_left;
105 /* assert_spin_locked(&journal->j_state_lock); */
107 nblocks = journal->j_max_transaction_buffers;
108 while (jbd2_log_space_left(journal) < nblocks) {
109 write_unlock(&journal->j_state_lock);
110 mutex_lock_io(&journal->j_checkpoint_mutex);
113 * Test again, another process may have checkpointed while we
114 * were waiting for the checkpoint lock. If there are no
115 * transactions ready to be checkpointed, try to recover
116 * journal space by calling cleanup_journal_tail(), and if
117 * that doesn't work, by waiting for the currently committing
118 * transaction to complete. If there is absolutely no way
119 * to make progress, this is either a BUG or corrupted
120 * filesystem, so abort the journal and leave a stack
121 * trace for forensic evidence.
123 write_lock(&journal->j_state_lock);
124 if (journal->j_flags & JBD2_ABORT) {
125 mutex_unlock(&journal->j_checkpoint_mutex);
128 spin_lock(&journal->j_list_lock);
129 space_left = jbd2_log_space_left(journal);
130 if (space_left < nblocks) {
131 int chkpt = journal->j_checkpoint_transactions != NULL;
134 if (journal->j_committing_transaction)
135 tid = journal->j_committing_transaction->t_tid;
136 spin_unlock(&journal->j_list_lock);
137 write_unlock(&journal->j_state_lock);
139 jbd2_log_do_checkpoint(journal);
140 } else if (jbd2_cleanup_journal_tail(journal) == 0) {
141 /* We were able to recover space; yay! */
145 * jbd2_journal_commit_transaction() may want
146 * to take the checkpoint_mutex if JBD2_FLUSHED
147 * is set. So we need to temporarily drop it.
149 mutex_unlock(&journal->j_checkpoint_mutex);
150 jbd2_log_wait_commit(journal, tid);
151 write_lock(&journal->j_state_lock);
154 printk(KERN_ERR "%s: needed %d blocks and "
155 "only had %d space available\n",
156 __func__, nblocks, space_left);
157 printk(KERN_ERR "%s: no way to get more "
158 "journal space in %s\n", __func__,
161 jbd2_journal_abort(journal, -EIO);
163 write_lock(&journal->j_state_lock);
165 spin_unlock(&journal->j_list_lock);
167 mutex_unlock(&journal->j_checkpoint_mutex);
172 __flush_batch(journal_t *journal, int *batch_count)
175 struct blk_plug plug;
177 blk_start_plug(&plug);
178 for (i = 0; i < *batch_count; i++)
179 write_dirty_buffer(journal->j_chkpt_bhs[i], REQ_SYNC);
180 blk_finish_plug(&plug);
182 for (i = 0; i < *batch_count; i++) {
183 struct buffer_head *bh = journal->j_chkpt_bhs[i];
184 BUFFER_TRACE(bh, "brelse");
191 * Perform an actual checkpoint. We take the first transaction on the
192 * list of transactions to be checkpointed and send all its buffers
193 * to disk. We submit larger chunks of data at once.
195 * The journal should be locked before calling this function.
196 * Called with j_checkpoint_mutex held.
198 int jbd2_log_do_checkpoint(journal_t *journal)
200 struct journal_head *jh;
201 struct buffer_head *bh;
202 transaction_t *transaction;
204 int result, batch_count = 0;
206 jbd_debug(1, "Start checkpoint\n");
209 * First thing: if there are any transactions in the log which
210 * don't need checkpointing, just eliminate them from the
211 * journal straight away.
213 result = jbd2_cleanup_journal_tail(journal);
214 trace_jbd2_checkpoint(journal, result);
215 jbd_debug(1, "cleanup_journal_tail returned %d\n", result);
220 * OK, we need to start writing disk blocks. Take one transaction
223 spin_lock(&journal->j_list_lock);
224 if (!journal->j_checkpoint_transactions)
226 transaction = journal->j_checkpoint_transactions;
227 if (transaction->t_chp_stats.cs_chp_time == 0)
228 transaction->t_chp_stats.cs_chp_time = jiffies;
229 this_tid = transaction->t_tid;
232 * If someone cleaned up this transaction while we slept, we're
233 * done (maybe it's a new transaction, but it fell at the same
236 if (journal->j_checkpoint_transactions != transaction ||
237 transaction->t_tid != this_tid)
240 /* checkpoint all of the transaction's buffers */
241 while (transaction->t_checkpoint_list) {
242 jh = transaction->t_checkpoint_list;
245 if (buffer_locked(bh)) {
247 spin_unlock(&journal->j_list_lock);
249 /* the journal_head may have gone by now */
250 BUFFER_TRACE(bh, "brelse");
254 if (jh->b_transaction != NULL) {
255 transaction_t *t = jh->b_transaction;
256 tid_t tid = t->t_tid;
258 transaction->t_chp_stats.cs_forced_to_close++;
259 spin_unlock(&journal->j_list_lock);
260 if (unlikely(journal->j_flags & JBD2_UNMOUNT))
262 * The journal thread is dead; so
263 * starting and waiting for a commit
264 * to finish will cause us to wait for
265 * a _very_ long time.
268 "JBD2: %s: Waiting for Godot: block %llu\n",
269 journal->j_devname, (unsigned long long) bh->b_blocknr);
272 __flush_batch(journal, &batch_count);
273 jbd2_log_start_commit(journal, tid);
275 * jbd2_journal_commit_transaction() may want
276 * to take the checkpoint_mutex if JBD2_FLUSHED
277 * is set, jbd2_update_log_tail() called by
278 * jbd2_journal_commit_transaction() may also take
279 * checkpoint_mutex. So we need to temporarily
282 mutex_unlock(&journal->j_checkpoint_mutex);
283 jbd2_log_wait_commit(journal, tid);
284 mutex_lock_io(&journal->j_checkpoint_mutex);
285 spin_lock(&journal->j_list_lock);
288 if (!buffer_dirty(bh)) {
289 BUFFER_TRACE(bh, "remove from checkpoint");
290 if (__jbd2_journal_remove_checkpoint(jh))
291 /* The transaction was released; we're done */
296 * Important: we are about to write the buffer, and
297 * possibly block, while still holding the journal
298 * lock. We cannot afford to let the transaction
299 * logic start messing around with this buffer before
300 * we write it to disk, as that would break
303 BUFFER_TRACE(bh, "queue");
305 J_ASSERT_BH(bh, !buffer_jwrite(bh));
306 journal->j_chkpt_bhs[batch_count++] = bh;
307 __buffer_relink_io(jh);
308 transaction->t_chp_stats.cs_written++;
309 if ((batch_count == JBD2_NR_BATCH) ||
311 spin_needbreak(&journal->j_list_lock))
312 goto unlock_and_flush;
317 spin_unlock(&journal->j_list_lock);
320 __flush_batch(journal, &batch_count);
321 spin_lock(&journal->j_list_lock);
326 * Now we issued all of the transaction's buffers, let's deal
327 * with the buffers that are out for I/O.
330 /* Did somebody clean up the transaction in the meanwhile? */
331 if (journal->j_checkpoint_transactions != transaction ||
332 transaction->t_tid != this_tid)
335 while (transaction->t_checkpoint_io_list) {
336 jh = transaction->t_checkpoint_io_list;
338 if (buffer_locked(bh)) {
340 spin_unlock(&journal->j_list_lock);
342 /* the journal_head may have gone by now */
343 BUFFER_TRACE(bh, "brelse");
345 spin_lock(&journal->j_list_lock);
350 * Now in whatever state the buffer currently is, we
351 * know that it has been written out and so we can
352 * drop it from the list
354 if (__jbd2_journal_remove_checkpoint(jh))
358 spin_unlock(&journal->j_list_lock);
359 result = jbd2_cleanup_journal_tail(journal);
361 return (result < 0) ? result : 0;
365 * Check the list of checkpoint transactions for the journal to see if
366 * we have already got rid of any since the last update of the log tail
367 * in the journal superblock. If so, we can instantly roll the
368 * superblock forward to remove those transactions from the log.
370 * Return <0 on error, 0 on success, 1 if there was nothing to clean up.
372 * Called with the journal lock held.
374 * This is the only part of the journaling code which really needs to be
375 * aware of transaction aborts. Checkpointing involves writing to the
376 * main filesystem area rather than to the journal, so it can proceed
377 * even in abort state, but we must not update the super block if
378 * checkpointing may have failed. Otherwise, we would lose some metadata
379 * buffers which should be written-back to the filesystem.
382 int jbd2_cleanup_journal_tail(journal_t *journal)
385 unsigned long blocknr;
387 if (is_journal_aborted(journal))
390 if (!jbd2_journal_get_log_tail(journal, &first_tid, &blocknr))
392 J_ASSERT(blocknr != 0);
395 * We need to make sure that any blocks that were recently written out
396 * --- perhaps by jbd2_log_do_checkpoint() --- are flushed out before
397 * we drop the transactions from the journal. It's unlikely this will
398 * be necessary, especially with an appropriately sized journal, but we
399 * need this to guarantee correctness. Fortunately
400 * jbd2_cleanup_journal_tail() doesn't get called all that often.
402 if (journal->j_flags & JBD2_BARRIER)
403 blkdev_issue_flush(journal->j_fs_dev);
405 return __jbd2_update_log_tail(journal, first_tid, blocknr);
409 /* Checkpoint list management */
412 * journal_clean_one_cp_list
414 * Find all the written-back checkpoint buffers in the given list and
415 * release them. If 'destroy' is set, clean all buffers unconditionally.
417 * Called with j_list_lock held.
418 * Returns 1 if we freed the transaction, 0 otherwise.
420 static int journal_clean_one_cp_list(struct journal_head *jh, bool destroy)
422 struct journal_head *last_jh;
423 struct journal_head *next_jh = jh;
428 last_jh = jh->b_cpprev;
431 next_jh = jh->b_cpnext;
433 if (!destroy && __cp_buffer_busy(jh))
436 if (__jbd2_journal_remove_checkpoint(jh))
439 * This function only frees up some memory
440 * if possible so we dont have an obligation
441 * to finish processing. Bail out if preemption
446 } while (jh != last_jh);
452 * journal_shrink_one_cp_list
454 * Find 'nr_to_scan' written-back checkpoint buffers in the given list
455 * and try to release them. If the whole transaction is released, set
456 * the 'released' parameter. Return the number of released checkpointed
459 * Called with j_list_lock held.
461 static unsigned long journal_shrink_one_cp_list(struct journal_head *jh,
462 unsigned long *nr_to_scan,
465 struct journal_head *last_jh;
466 struct journal_head *next_jh = jh;
467 unsigned long nr_freed = 0;
470 if (!jh || *nr_to_scan == 0)
473 last_jh = jh->b_cpprev;
476 next_jh = jh->b_cpnext;
479 if (__cp_buffer_busy(jh))
483 ret = __jbd2_journal_remove_checkpoint(jh);
491 } while (jh != last_jh && *nr_to_scan);
497 * jbd2_journal_shrink_checkpoint_list
499 * Find 'nr_to_scan' written-back checkpoint buffers in the journal
500 * and try to release them. Return the number of released checkpointed
503 * Called with j_list_lock held.
505 unsigned long jbd2_journal_shrink_checkpoint_list(journal_t *journal,
506 unsigned long *nr_to_scan)
508 transaction_t *transaction, *last_transaction, *next_transaction;
510 tid_t first_tid = 0, last_tid = 0, next_tid = 0;
512 unsigned long nr_freed = 0;
513 unsigned long nr_scanned = *nr_to_scan;
516 spin_lock(&journal->j_list_lock);
517 if (!journal->j_checkpoint_transactions) {
518 spin_unlock(&journal->j_list_lock);
523 * Get next shrink transaction, resume previous scan or start
524 * over again. If some others do checkpoint and drop transaction
525 * from the checkpoint list, we ignore saved j_shrink_transaction
526 * and start over unconditionally.
528 if (journal->j_shrink_transaction)
529 transaction = journal->j_shrink_transaction;
531 transaction = journal->j_checkpoint_transactions;
534 first_tid = transaction->t_tid;
535 last_transaction = journal->j_checkpoint_transactions->t_cpprev;
536 next_transaction = transaction;
537 last_tid = last_transaction->t_tid;
539 transaction = next_transaction;
540 next_transaction = transaction->t_cpnext;
541 tid = transaction->t_tid;
544 nr_freed += journal_shrink_one_cp_list(transaction->t_checkpoint_list,
545 nr_to_scan, &released);
546 if (*nr_to_scan == 0)
548 if (need_resched() || spin_needbreak(&journal->j_list_lock))
553 nr_freed += journal_shrink_one_cp_list(transaction->t_checkpoint_io_list,
554 nr_to_scan, &released);
555 if (*nr_to_scan == 0)
557 if (need_resched() || spin_needbreak(&journal->j_list_lock))
559 } while (transaction != last_transaction);
561 if (transaction != last_transaction) {
562 journal->j_shrink_transaction = next_transaction;
563 next_tid = next_transaction->t_tid;
565 journal->j_shrink_transaction = NULL;
569 spin_unlock(&journal->j_list_lock);
572 if (*nr_to_scan && next_tid)
575 nr_scanned -= *nr_to_scan;
576 trace_jbd2_shrink_checkpoint_list(journal, first_tid, tid, last_tid,
577 nr_freed, nr_scanned, next_tid);
583 * journal_clean_checkpoint_list
585 * Find all the written-back checkpoint buffers in the journal and release them.
586 * If 'destroy' is set, release all buffers unconditionally.
588 * Called with j_list_lock held.
590 void __jbd2_journal_clean_checkpoint_list(journal_t *journal, bool destroy)
592 transaction_t *transaction, *last_transaction, *next_transaction;
595 transaction = journal->j_checkpoint_transactions;
599 last_transaction = transaction->t_cpprev;
600 next_transaction = transaction;
602 transaction = next_transaction;
603 next_transaction = transaction->t_cpnext;
604 ret = journal_clean_one_cp_list(transaction->t_checkpoint_list,
607 * This function only frees up some memory if possible so we
608 * dont have an obligation to finish processing. Bail out if
609 * preemption requested:
616 * It is essential that we are as careful as in the case of
617 * t_checkpoint_list with removing the buffer from the list as
618 * we can possibly see not yet submitted buffers on io_list
620 ret = journal_clean_one_cp_list(transaction->
621 t_checkpoint_io_list, destroy);
625 * Stop scanning if we couldn't free the transaction. This
626 * avoids pointless scanning of transactions which still
627 * weren't checkpointed.
631 } while (transaction != last_transaction);
635 * Remove buffers from all checkpoint lists as journal is aborted and we just
636 * need to free memory
638 void jbd2_journal_destroy_checkpoint(journal_t *journal)
641 * We loop because __jbd2_journal_clean_checkpoint_list() may abort
642 * early due to a need of rescheduling.
645 spin_lock(&journal->j_list_lock);
646 if (!journal->j_checkpoint_transactions) {
647 spin_unlock(&journal->j_list_lock);
650 __jbd2_journal_clean_checkpoint_list(journal, true);
651 spin_unlock(&journal->j_list_lock);
657 * journal_remove_checkpoint: called after a buffer has been committed
658 * to disk (either by being write-back flushed to disk, or being
659 * committed to the log).
661 * We cannot safely clean a transaction out of the log until all of the
662 * buffer updates committed in that transaction have safely been stored
663 * elsewhere on disk. To achieve this, all of the buffers in a
664 * transaction need to be maintained on the transaction's checkpoint
665 * lists until they have been rewritten, at which point this function is
666 * called to remove the buffer from the existing transaction's
669 * The function returns 1 if it frees the transaction, 0 otherwise.
670 * The function can free jh and bh.
672 * This function is called with j_list_lock held.
674 int __jbd2_journal_remove_checkpoint(struct journal_head *jh)
676 struct transaction_chp_stats_s *stats;
677 transaction_t *transaction;
679 struct buffer_head *bh = jh2bh(jh);
681 JBUFFER_TRACE(jh, "entry");
683 transaction = jh->b_cp_transaction;
685 JBUFFER_TRACE(jh, "not on transaction");
688 journal = transaction->t_journal;
690 JBUFFER_TRACE(jh, "removing from transaction");
693 * If we have failed to write the buffer out to disk, the filesystem
694 * may become inconsistent. We cannot abort the journal here since
695 * we hold j_list_lock and we have to be careful about races with
696 * jbd2_journal_destroy(). So mark the writeback IO error in the
697 * journal here and we abort the journal later from a better context.
699 if (buffer_write_io_error(bh))
700 set_bit(JBD2_CHECKPOINT_IO_ERROR, &journal->j_atomic_flags);
703 jh->b_cp_transaction = NULL;
704 percpu_counter_dec(&journal->j_checkpoint_jh_count);
705 jbd2_journal_put_journal_head(jh);
707 /* Is this transaction empty? */
708 if (transaction->t_checkpoint_list || transaction->t_checkpoint_io_list)
712 * There is one special case to worry about: if we have just pulled the
713 * buffer off a running or committing transaction's checkpoing list,
714 * then even if the checkpoint list is empty, the transaction obviously
717 * The locking here around t_state is a bit sleazy.
718 * See the comment at the end of jbd2_journal_commit_transaction().
720 if (transaction->t_state != T_FINISHED)
724 * OK, that was the last buffer for the transaction, we can now
725 * safely remove this transaction from the log.
727 stats = &transaction->t_chp_stats;
728 if (stats->cs_chp_time)
729 stats->cs_chp_time = jbd2_time_diff(stats->cs_chp_time,
731 trace_jbd2_checkpoint_stats(journal->j_fs_dev->bd_dev,
732 transaction->t_tid, stats);
734 __jbd2_journal_drop_transaction(journal, transaction);
735 jbd2_journal_free_transaction(transaction);
740 * journal_insert_checkpoint: put a committed buffer onto a checkpoint
741 * list so that we know when it is safe to clean the transaction out of
744 * Called with the journal locked.
745 * Called with j_list_lock held.
747 void __jbd2_journal_insert_checkpoint(struct journal_head *jh,
748 transaction_t *transaction)
750 JBUFFER_TRACE(jh, "entry");
751 J_ASSERT_JH(jh, buffer_dirty(jh2bh(jh)) || buffer_jbddirty(jh2bh(jh)));
752 J_ASSERT_JH(jh, jh->b_cp_transaction == NULL);
754 /* Get reference for checkpointing transaction */
755 jbd2_journal_grab_journal_head(jh2bh(jh));
756 jh->b_cp_transaction = transaction;
758 if (!transaction->t_checkpoint_list) {
759 jh->b_cpnext = jh->b_cpprev = jh;
761 jh->b_cpnext = transaction->t_checkpoint_list;
762 jh->b_cpprev = transaction->t_checkpoint_list->b_cpprev;
763 jh->b_cpprev->b_cpnext = jh;
764 jh->b_cpnext->b_cpprev = jh;
766 transaction->t_checkpoint_list = jh;
767 percpu_counter_inc(&transaction->t_journal->j_checkpoint_jh_count);
771 * We've finished with this transaction structure: adios...
773 * The transaction must have no links except for the checkpoint by this
776 * Called with the journal locked.
777 * Called with j_list_lock held.
780 void __jbd2_journal_drop_transaction(journal_t *journal, transaction_t *transaction)
782 assert_spin_locked(&journal->j_list_lock);
784 journal->j_shrink_transaction = NULL;
785 if (transaction->t_cpnext) {
786 transaction->t_cpnext->t_cpprev = transaction->t_cpprev;
787 transaction->t_cpprev->t_cpnext = transaction->t_cpnext;
788 if (journal->j_checkpoint_transactions == transaction)
789 journal->j_checkpoint_transactions =
790 transaction->t_cpnext;
791 if (journal->j_checkpoint_transactions == transaction)
792 journal->j_checkpoint_transactions = NULL;
795 J_ASSERT(transaction->t_state == T_FINISHED);
796 J_ASSERT(transaction->t_buffers == NULL);
797 J_ASSERT(transaction->t_forget == NULL);
798 J_ASSERT(transaction->t_shadow_list == NULL);
799 J_ASSERT(transaction->t_checkpoint_list == NULL);
800 J_ASSERT(transaction->t_checkpoint_io_list == NULL);
801 J_ASSERT(atomic_read(&transaction->t_updates) == 0);
802 J_ASSERT(journal->j_committing_transaction != transaction);
803 J_ASSERT(journal->j_running_transaction != transaction);
805 trace_jbd2_drop_transaction(journal, transaction);
807 jbd_debug(1, "Dropping transaction %d, all done\n", transaction->t_tid);