xfs
[Top] [All Lists]

Re: [PATCH 04/10] xfs: add configurable error support to metadata buffer

To: Dave Chinner <david@xxxxxxxxxxxxx>
Subject: Re: [PATCH 04/10] xfs: add configurable error support to metadata buffers
From: Brian Foster <bfoster@xxxxxxxxxx>
Date: Tue, 11 Aug 2015 10:18:53 -0400
Cc: xfs@xxxxxxxxxxx
Delivered-to: xfs@xxxxxxxxxxx
In-reply-to: <1438772921-28715-5-git-send-email-david@xxxxxxxxxxxxx>
References: <1438772921-28715-1-git-send-email-david@xxxxxxxxxxxxx> <1438772921-28715-5-git-send-email-david@xxxxxxxxxxxxx>
User-agent: Mutt/1.5.23 (2014-03-12)
On Wed, Aug 05, 2015 at 09:08:35PM +1000, Dave Chinner wrote:
> From: Dave Chinner <dchinner@xxxxxxxxxx>
> 
> With the error configuration handle for async metadata write errors
> in place, we can now add initial support to the IO error processing
> in xfs_buf_iodone_error().
> 
> Add an infrastructure function to look up the configuration handle,
> and rearrange the error handling to prepare the way for different
> error handling conigurations to be used.
> 
> Signed-off-by: Dave Chinner <dchinner@xxxxxxxxxx>
> ---
>  fs/xfs/xfs_buf.h      |   1 +
>  fs/xfs/xfs_buf_item.c | 112 
> ++++++++++++++++++++++++++++++--------------------
>  fs/xfs/xfs_mount.h    |   3 ++
>  fs/xfs/xfs_sysfs.c    |  17 ++++++++
>  4 files changed, 88 insertions(+), 45 deletions(-)
> 
> diff --git a/fs/xfs/xfs_buf.h b/fs/xfs/xfs_buf.h
> index 68c8f2d..ed0ea41 100644
> --- a/fs/xfs/xfs_buf.h
> +++ b/fs/xfs/xfs_buf.h
> @@ -181,6 +181,7 @@ typedef struct xfs_buf {
>       unsigned int            b_page_count;   /* size of page array */
>       unsigned int            b_offset;       /* page offset in first page */
>       int                     b_error;        /* error code on I/O */
> +     int                     b_last_error;   /* previous async I/O error */
>       const struct xfs_buf_ops        *b_ops;
>  
>  #ifdef XFS_BUF_LOCK_TRACKING
> diff --git a/fs/xfs/xfs_buf_item.c b/fs/xfs/xfs_buf_item.c
> index ee63961..a09ae26 100644
> --- a/fs/xfs/xfs_buf_item.c
> +++ b/fs/xfs/xfs_buf_item.c
> @@ -924,35 +924,22 @@ xfs_buf_do_callbacks(
>       }
>  }
>  
> -/*
> - * This is the iodone() function for buffers which have had callbacks
> - * attached to them by xfs_buf_attach_iodone().  It should remove each
> - * log item from the buffer's list and call the callback of each in turn.
> - * When done, the buffer's fsprivate field is set to NULL and the buffer
> - * is unlocked with a call to iodone().
> - */

A pre-function comment would be nice to at least explain what the return
value means.

> -void
> -xfs_buf_iodone_callbacks(
> +static bool
> +xfs_buf_iodone_callback_error(
>       struct xfs_buf          *bp)
>  {
>       struct xfs_log_item     *lip = bp->b_fspriv;
>       struct xfs_mount        *mp = lip->li_mountp;
>       static ulong            lasttime;
>       static xfs_buftarg_t    *lasttarg;
> -
> -     if (likely(!bp->b_error))
> -             goto do_callbacks;
> +     struct xfs_error_cfg    *cfg;
>  
>       /*
>        * If we've already decided to shutdown the filesystem because of
>        * I/O errors, there's no point in giving this a retry.
>        */
> -     if (XFS_FORCED_SHUTDOWN(mp)) {
> -             xfs_buf_stale(bp);
> -             bp->b_flags |= XBF_DONE;
> -             trace_xfs_buf_item_iodone(bp, _RET_IP_);
> -             goto do_callbacks;
> -     }

Looks like we've lost a tracepoint here.

> +     if (XFS_FORCED_SHUTDOWN(mp))
> +             goto out_stale;
>  
>       if (bp->b_target != lasttarg ||
>           time_after(jiffies, (lasttime + 5*HZ))) {
> @@ -961,45 +948,80 @@ xfs_buf_iodone_callbacks(
>       }
>       lasttarg = bp->b_target;
>  
> +     /* synchronous writes will have callers process the error */
> +     if (!(bp->b_flags & XBF_ASYNC))
> +             goto out_stale;
> +

Why mark it stale?

> +     trace_xfs_buf_item_iodone_async(bp, _RET_IP_);
> +     ASSERT(bp->b_iodone != NULL);
> +
>       /*
>        * If the write was asynchronous then no one will be looking for the
> -      * error.  Clear the error state and write the buffer out again.
> -      *
> -      * XXX: This helps against transient write errors, but we need to find
> -      * a way to shut the filesystem down if the writes keep failing.
> -      *
> -      * In practice we'll shut the filesystem down soon as non-transient
> -      * errors tend to affect the whole device and a failing log write
> -      * will make us give up.  But we really ought to do better here.
> +      * error.  If this is the first failure of this type, clear the error
> +      * state and write the buffer out again. This means we always retry an
> +      * async write failure at least once, but we also need to set the buffer
> +      * up to behave correctly now for repeated failures.
>        */
> -     if (XFS_BUF_ISASYNC(bp)) {
> -             ASSERT(bp->b_iodone != NULL);
> -
> -             trace_xfs_buf_item_iodone_async(bp, _RET_IP_);
> +     cfg = xfs_error_get_cfg(mp, XFS_ERR_METADATA, bp->b_error);

cfg isn't used until after the following block of code.

Brian

> +     if (!(bp->b_flags & (XBF_STALE|XBF_WRITE_FAIL)) ||
> +          bp->b_last_error != bp->b_error) {
> +             bp->b_flags |= (XBF_WRITE | XBF_ASYNC |
> +                             XBF_DONE | XBF_WRITE_FAIL);
> +             bp->b_last_error = bp->b_error;
> +             xfs_buf_ioerror(bp, 0);
> +             xfs_buf_submit(bp);
> +             return true;
> +     }
>  
> -             xfs_buf_ioerror(bp, 0); /* errno of 0 unsets the flag */
> +     /*
> +      * Repeated failure on an async write. Take action according to the
> +      * error configuration we have been set up to use.
> +      */
> +     if (cfg->fail_speed == XFS_ERR_FAIL_FAST)
> +             goto permanent_error;
>  
> -             if (!(bp->b_flags & (XBF_STALE|XBF_WRITE_FAIL))) {
> -                     bp->b_flags |= XBF_WRITE | XBF_ASYNC |
> -                                    XBF_DONE | XBF_WRITE_FAIL;
> -                     xfs_buf_submit(bp);
> -             } else {
> -                     xfs_buf_relse(bp);
> -             }
> -
> -             return;
> -     }
> +     /* still a transient error, higher layers will retry */
> +     xfs_buf_ioerror(bp, 0);
> +     xfs_buf_relse(bp);
> +     return true;
>  
>       /*
> -      * If the write of the buffer was synchronous, we want to make
> -      * sure to return the error to the caller of xfs_bwrite().
> +      * Permanent error - we need to trigger a shutdown if we haven't already
> +      * to indicate that inconsistency will result from this action.
>        */
> +permanent_error:
> +     xfs_force_shutdown(mp, SHUTDOWN_META_IO_ERROR);
> +out_stale:
>       xfs_buf_stale(bp);
>       bp->b_flags |= XBF_DONE;
> -
>       trace_xfs_buf_error_relse(bp, _RET_IP_);
> +     return false;
> +}
> +
> +/*
> + * This is the iodone() function for buffers which have had callbacks 
> attached
> + * to them by xfs_buf_attach_iodone(). We need to iterate the items on the
> + * callback list, mark the buffer as having no more callbacks and then push 
> the
> + * buffer through IO completion processing.
> + */
> +void
> +xfs_buf_iodone_callbacks(
> +     struct xfs_buf          *bp)
> +{
> +     /*
> +      * If there is an error, process it. Some errors require us
> +      * to run callbacks after failure processing is done so we
> +      * detect that and take appropriate action.
> +      */
> +     if (bp->b_error && xfs_buf_iodone_callback_error(bp))
> +             return;
> +
> +     /*
> +      * Successful IO or permanent error. Either way, we can clear the
> +      * retry state here in preparation for the next error that may occur.
> +      */
> +     bp->b_last_error = 0;
>  
> -do_callbacks:
>       xfs_buf_do_callbacks(bp);
>       bp->b_fspriv = NULL;
>       bp->b_iodone = NULL;
> diff --git a/fs/xfs/xfs_mount.h b/fs/xfs/xfs_mount.h
> index 753060f..21caa5a 100644
> --- a/fs/xfs/xfs_mount.h
> +++ b/fs/xfs/xfs_mount.h
> @@ -366,4 +366,7 @@ extern int        xfs_dev_is_read_only(struct xfs_mount 
> *, char *);
>  
>  extern void  xfs_set_low_space_thresholds(struct xfs_mount *);
>  
> +struct xfs_error_cfg * xfs_error_get_cfg(struct xfs_mount *mp,
> +             int error_class, int error);
> +
>  #endif       /* __XFS_MOUNT_H__ */
> diff --git a/fs/xfs/xfs_sysfs.c b/fs/xfs/xfs_sysfs.c
> index cb7ced0..3667d33 100644
> --- a/fs/xfs/xfs_sysfs.c
> +++ b/fs/xfs/xfs_sysfs.c
> @@ -355,3 +355,20 @@ xfs_error_sysfs_del(
>       xfs_sysfs_del(&mp->m_error_meta_kobj);
>       xfs_sysfs_del(&mp->m_error_kobj);
>  }
> +
> +struct xfs_error_cfg *
> +xfs_error_get_cfg(
> +     struct xfs_mount        *mp,
> +     int                     error_class,
> +     int                     error)
> +{
> +     struct xfs_error_cfg    *cfg;
> +
> +     switch (error) {
> +     default:
> +             cfg = &mp->m_error_cfg[error_class][XFS_ERR_DEFAULT];
> +             break;
> +     }
> +
> +     return cfg;
> +}
> -- 
> 2.1.4
> 
> _______________________________________________
> xfs mailing list
> xfs@xxxxxxxxxxx
> http://oss.sgi.com/mailman/listinfo/xfs

<Prev in Thread] Current Thread [Next in Thread>