On      tue, 3 Dec 2013 14:08:24 +0800, Liu Bo wrote:
> On Tue, Dec 03, 2013 at 01:06:34PM +0800, Wang Shilong wrote:
>> Hi Liu,
>>
>> On 12/03/2013 12:57 PM, Liu Bo wrote:
>>> On Tue, Dec 03, 2013 at 01:33:39AM +0800, Wang Shilong wrote:
>>>> From: Wang Shilong <wangsl.f...@cn.fujitsu.com>
>>>>
>>>> We came a race condition when scrubbing superblocks, the story is:
>>>>
>>>> In commiting transaction, we will update last_trans_commited after
>>>> writting superblocks. if a scrub start after writting superblocks
>>>> and before last_trans_commited, generation mismatch happens!
>>>>
>>>> We fix it by protecting writting superblock and updating 
>>>> last_trans_commited
>>>> with tree_log_mutex.
>>>>
>>>> Reported-by: Sebastian Ochmann <ochm...@informatik.uni-bonn.de>
>>>> Signed-off-by: Wang Shilong <wangsl.f...@cn.fujitsu.com>
>>>> ---
>>>> Changelog:
>>>>    v2->v3:move tree_log_mutex out of device_list_mutex.
>>>>    v1->v2: use right way to fix the problem.
>>>> ---
>>>>  fs/btrfs/scrub.c       | 11 +++++++----
>>>>  fs/btrfs/transaction.c | 13 ++++++++++---
>>>>  2 files changed, 17 insertions(+), 7 deletions(-)
>>>>
>>>> diff --git a/fs/btrfs/scrub.c b/fs/btrfs/scrub.c
>>>> index 561e2f1..a9ed102 100644
>>>> --- a/fs/btrfs/scrub.c
>>>> +++ b/fs/btrfs/scrub.c
>>>> @@ -2887,6 +2887,7 @@ int btrfs_scrub_dev(struct btrfs_fs_info *fs_info, 
>>>> u64 devid, u64 start,
>>>>    }
>>>> +  mutex_lock(&fs_info->tree_log_mutex);
>>>>    mutex_lock(&fs_info->fs_devices->device_list_mutex);
>>>>    dev = btrfs_find_device(fs_info, devid, NULL, NULL);
>>>>    if (!dev || (dev->missing && !is_dev_replace)) {
>>>> @@ -2932,14 +2933,16 @@ int btrfs_scrub_dev(struct btrfs_fs_info *fs_info, 
>>>> u64 devid, u64 start,
>>>>    atomic_inc(&fs_info->scrubs_running);
>>>>    mutex_unlock(&fs_info->scrub_lock);
>>>> +  /*
>>>> +   * holding tree_log_mutex we can avoid generation mismatch while
>>>> +   * scrubbing superblocks, see comments in commiting transaction
>>>> +   * when updating last_trans_commited.
>>>> +   */
>>>>    if (!is_dev_replace) {
>>>> -          /*
>>>> -           * by holding device list mutex, we can
>>>> -           * kick off writing super in log tree sync.
>>>> -           */
>>>>            ret = scrub_supers(sctx, dev);
>>>>    }
>>>>    mutex_unlock(&fs_info->fs_devices->device_list_mutex);
>>>> +  mutex_unlock(&fs_info->tree_log_mutex);
>>> IIRC, we already have btrfs_scrub_{pause, continue}() to avoid race
>>> situations between committing transaction and scrub processes, why not use 
>>> that
>>> instead?
>> btrfs_scrub_{pause,continue} can not stop the following case from happening:
>>
>> thread 1 thread 2
>> |->write_supers
>> |->start scrub
>> |->using last_trans_commited(not updated yet) when scrubbing supers
>> generation in disk is up to date but in memory is not.
>> |->updating last_trans_commited
>>
>> Pleae correct me if i am wrong here. :-)
> 
> One possible way is to check @scrub_pause_req inside scrub_supers(),
> before starting the real scrubing super work.
> 
> scrub_super()
> {
>       while (scrub_pause_req)
>               wait for (scrub_pause_req == 0);
> 
>       ...
> }
> 
> As we have a atomic_inc(&fs_info->scrubs_running) before scrub_supers(),
> it'd force committing transaction to wait for scrub if the scrub process
> is the former one in timeline.

Great minds think alike!

Thanks
Miao

> 
> thanks,
> -liubo
> 
>>>
>>> (Actually I don't like adding another lock unless it's been proved necessary
>>> and correct with lockdep.)
>> Right, i should test if it can pass lockdep.
>>
>> Thanks for comments.
>> Wang
>>>
>>> thanks,
>>> -liubo
>>>
>>>>    if (!ret)
>>>>            ret = scrub_enumerate_chunks(sctx, dev, start, end,
>>>> diff --git a/fs/btrfs/transaction.c b/fs/btrfs/transaction.c
>>>> index c6a872a..052eb22 100644
>>>> --- a/fs/btrfs/transaction.c
>>>> +++ b/fs/btrfs/transaction.c
>>>> @@ -1898,15 +1898,22 @@ int btrfs_commit_transaction(struct 
>>>> btrfs_trans_handle *trans,
>>>>            goto cleanup_transaction;
>>>>    }
>>>> +  btrfs_finish_extent_commit(trans, root);
>>>> +
>>>> +  /*
>>>> +   * we must gurantee last_trans_commited update is protected by
>>>> +   * tree_log_mutex with write_ctree_super together, otherwise,
>>>> +   * scubbing super will come in before updating last_trans_commited
>>>> +   * and we will get generation mismatch when scrubbing superblocks.
>>>> +   */
>>>> +  root->fs_info->last_trans_committed = cur_trans->transid;
>>>> +
>>>>    /*
>>>>     * the super is written, we can safely allow the tree-loggers
>>>>     * to go about their business
>>>>     */
>>>>    mutex_unlock(&root->fs_info->tree_log_mutex);
>>>> -  btrfs_finish_extent_commit(trans, root);
>>>> -
>>>> -  root->fs_info->last_trans_committed = cur_trans->transid;
>>>>    /*
>>>>     * We needn't acquire the lock here because there is no other task
>>>>     * which can change it.
>>>> -- 
>>>> 1.8.4
>>>>
>>>> --
>>>> To unsubscribe from this list: send the line "unsubscribe linux-btrfs" in
>>>> the body of a message to majord...@vger.kernel.org
>>>> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>>
> --
> To unsubscribe from this list: send the line "unsubscribe linux-btrfs" in
> the body of a message to majord...@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> 

--
To unsubscribe from this list: send the line "unsubscribe linux-btrfs" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to