31 May, 2019

1 commit

  • Based on 1 normalized pattern(s):

    this program is free software you can redistribute it and or modify
    it under the terms of the gnu general public license as published by
    the free software foundation either version 2 of the license or at
    your option any later version

    extracted by the scancode license scanner the SPDX license identifier

    GPL-2.0-or-later

    has been chosen to replace the boilerplate/reference in 3029 file(s).

    Signed-off-by: Thomas Gleixner
    Reviewed-by: Allison Randal
    Cc: linux-spdx@vger.kernel.org
    Link: https://lkml.kernel.org/r/20190527070032.746973796@linutronix.de
    Signed-off-by: Greg Kroah-Hartman

    Thomas Gleixner
     

18 Oct, 2018

1 commit

  • The inline key in struct rxrpc_cookie is insufficiently initialized,
    zeroing only 3 of the 4 slots, therefore an index_key_len between 13 and 15
    bytes will end up hashing uninitialized memory because the memcpy only
    partially fills the last buf[] element.

    Fix this by clearing fscache_cookie objects on allocation rather than using
    the slab constructor to initialise them. We're going to pretty much fill
    in the entire struct anyway, so bringing it into our dcache writably
    shouldn't incur much overhead.

    This removes the need to do clearance in fscache_set_key() (where we aren't
    doing it correctly anyway).

    Also, we don't need to set cookie->key_len in fscache_set_key() as we
    already did it in the only caller, so remove that.

    Fixes: ec0328e46d6e ("fscache: Maintain a catalogue of allocated cookies")
    Reported-by: syzbot+a95b989b2dde8e806af8@syzkaller.appspotmail.com
    Reported-by: Eric Sandeen
    Cc: stable
    Signed-off-by: David Howells
    Signed-off-by: Greg Kroah-Hartman

    David Howells
     

16 May, 2018

2 commits


06 Apr, 2018

1 commit

  • Maintain a catalogue of allocated cookies so that cookie collisions can be
    handled properly. For the moment, this just involves printing a warning
    and returning a NULL cookie to the caller of fscache_acquire_cookie(), but
    in future it might make sense to wait for the old cookie to finish being
    cleaned up.

    This requires the cookie key to be stored attached to the cookie so that we
    still have the key available if the netfs relinquishes the cookie. This is
    done by an earlier patch.

    The catalogue also renders redundant fscache_netfs_list (used for checking
    for duplicates), so that can be removed.

    Signed-off-by: David Howells
    Acked-by: Anna Schumaker
    Tested-by: Steve Dickson

    David Howells
     

04 Apr, 2018

2 commits

  • Attach copies of the index key and auxiliary data to the fscache cookie so
    that:

    (1) The callbacks to the netfs for this stuff can be eliminated. This
    can simplify things in the cache as the information is still
    available, even after the cache has relinquished the cookie.

    (2) Simplifies the locking requirements of accessing the information as we
    don't have to worry about the netfs object going away on us.

    (3) The cache can do lazy updating of the coherency information on disk.
    As long as the cache is flushed before reboot/poweroff, there's no
    need to update the coherency info on disk every time it changes.

    (4) Cookies can be hashed or put in a tree as the index key is easily
    available. This allows:

    (a) Checks for duplicate cookies can be made at the top fscache layer
    rather than down in the bowels of the cache backend.

    (b) Caching can be added to a netfs object that has a cookie if the
    cache is brought online after the netfs object is allocated.

    A certain amount of space is made in the cookie for inline copies of the
    data, but if it won't fit there, extra memory will be allocated for it.

    The downside of this is that live cache operation requires more memory.

    Signed-off-by: David Howells
    Acked-by: Anna Schumaker
    Tested-by: Steve Dickson

    David Howells
     
  • Add some tracepoints to fscache:

    (*) fscache_cookie - Tracks a cookie's usage count.

    (*) fscache_netfs - Logs registration of a network filesystem, including
    the pointer to the cookie allocated.

    (*) fscache_acquire - Logs cookie acquisition.

    (*) fscache_relinquish - Logs cookie relinquishment.

    (*) fscache_enable - Logs enablement of a cookie.

    (*) fscache_disable - Logs disablement of a cookie.

    (*) fscache_osm - Tracks execution of states in the object state machine.

    and cachefiles:

    (*) cachefiles_ref - Tracks a cachefiles object's usage count.

    (*) cachefiles_lookup - Logs result of lookup_one_len().

    (*) cachefiles_mkdir - Logs result of vfs_mkdir().

    (*) cachefiles_create - Logs result of vfs_create().

    (*) cachefiles_unlink - Logs calls to vfs_unlink().

    (*) cachefiles_rename - Logs calls to vfs_rename().

    (*) cachefiles_mark_active - Logs an object becoming active.

    (*) cachefiles_wait_active - Logs a wait for an old object to be
    destroyed.

    (*) cachefiles_mark_inactive - Logs an object becoming inactive.

    (*) cachefiles_mark_buried - Logs the burial of an object.

    Signed-off-by: David Howells

    David Howells
     

13 Nov, 2017

1 commit

  • Make wait_on_atomic_t() pass the TASK_* mode onto its action function as an
    extra argument and make it 'unsigned int throughout.

    Also, consolidate a bunch of identical action functions into a default
    function that can do the appropriate thing for the mode.

    Also, change the argument name in the bit_wait*() function declarations to
    reflect the fact that it's the mode and not the bit number.

    [Peter Z gives this a grudging ACK, but thinks that the whole atomic_t wait
    should be done differently, though he's not immediately sure as to how]

    Signed-off-by: David Howells
    Acked-by: Peter Zijlstra
    cc: Ingo Molnar

    David Howells
     

02 Apr, 2015

3 commits

  • Any time an incomplete operation is cancelled, the operation cancellation
    function needs to be called to clean up. This is currently being passed
    directly to some of the functions that might want to call it, but not all.

    Instead, pass the cancellation method pointer to the fscache_operation_init()
    and have that cache it in the operation struct. Further, plug in a dummy
    cancellation handler if the caller declines to set one as this allows us to
    call the function unconditionally (the extra overhead isn't worth bothering
    about as we don't expect to be calling this typically).

    The cancellation method must thence be called everywhere the CANCELLED state
    is set. Note that we call it *before* setting the CANCELLED state such that
    the method can use the old state value to guide its operation.

    fscache_do_cancel_retrieval() needs moving higher up in the sources so that
    the init function can use it now.

    Without this, the following oops may be seen:

    FS-Cache: Assertion failed
    FS-Cache: 3 == 0 is false
    ------------[ cut here ]------------
    kernel BUG at ../fs/fscache/page.c:261!
    ...
    RIP: 0010:[] fscache_release_retrieval_op+0x77/0x100
    [] fscache_put_operation+0x114/0x2da
    [] __fscache_read_or_alloc_pages+0x358/0x3b3
    [] __nfs_readpages_from_fscache+0x59/0xbf [nfs]
    [] nfs_readpages+0x10c/0x185 [nfs]
    [] ? alloc_pages_current+0x119/0x13e
    [] ? __page_cache_alloc+0xfb/0x10a
    [] __do_page_cache_readahead+0x188/0x22c
    [] ondemand_readahead+0x29e/0x2af
    [] page_cache_sync_readahead+0x38/0x3a
    [] generic_file_read_iter+0x1a2/0x55a
    [] ? nfs_revalidate_mapping+0xd6/0x288 [nfs]
    [] nfs_file_read+0x49/0x70 [nfs]
    [] new_sync_read+0x78/0x9c
    [] __vfs_read+0x13/0x38
    [] vfs_read+0x95/0x121
    [] SyS_read+0x4c/0x8a
    [] system_call_fastpath+0x12/0x17

    The assertion is showing that the remaining number of pages (n_pages) is not 0
    when the operation is being released.

    Signed-off-by: David Howells
    Reviewed-by: Steve Dickson
    Acked-by: Jeff Layton

    David Howells
     
  • Count and display through /proc/fs/fscache/stats the number of initialised
    operations.

    Signed-off-by: David Howells
    Reviewed-by: Steve Dickson
    Acked-by: Jeff Layton

    David Howells
     
  • Currently, fscache_cancel_op() only cancels pending operations - attempts to
    cancel in-progress operations are ignored. This leads to a problem in
    fscache_wait_for_operation_activation() whereby the wait is terminated, but
    the object has been killed.

    The check at the end of the function now triggers because it's no longer
    contingent on the cache having produced an I/O error since the commit that
    fixed the logic error in fscache_object_is_dead().

    The result of the check is that it tries to cancel the operation - but since
    the object may not be pending by this point, the cancellation request may be
    ignored - with the result that the the object is just put by the caller and
    fscache_put_operation has an assertion failure because the operation isn't in
    either the COMPLETE or the CANCELLED states.

    To fix this, we permit in-progress ops to be cancelled under some
    circumstances.

    The bug results in an oops that looks something like this:

    FS-Cache: fscache_wait_for_operation_activation() = -ENOBUFS [obj dead 3]
    FS-Cache:
    FS-Cache: Assertion failed
    FS-Cache: 3 == 5 is false
    ------------[ cut here ]------------
    kernel BUG at ../fs/fscache/operation.c:432!
    ...
    RIP: 0010:[] fscache_put_operation+0xf2/0x2cd
    Call Trace:
    [] __fscache_read_or_alloc_pages+0x2ec/0x3b3
    [] __nfs_readpages_from_fscache+0x59/0xbf [nfs]
    [] nfs_readpages+0x10c/0x185 [nfs]
    [] ? alloc_pages_current+0x119/0x13e
    [] ? __page_cache_alloc+0xfb/0x10a
    [] __do_page_cache_readahead+0x188/0x22c
    [] ondemand_readahead+0x29e/0x2af
    [] page_cache_sync_readahead+0x38/0x3a
    [] generic_file_read_iter+0x1a2/0x55a
    [] ? nfs_revalidate_mapping+0xd6/0x288 [nfs]
    [] nfs_file_read+0x49/0x70 [nfs]
    [] new_sync_read+0x78/0x9c
    [] __vfs_read+0x13/0x38
    [] vfs_read+0x95/0x121
    [] SyS_read+0x4c/0x8a
    [] system_call_fastpath+0x12/0x17

    Signed-off-by: David Howells
    Reviewed-by: Steve Dickson
    Acked-by: Jeff Layton

    David Howells
     

24 Feb, 2015

1 commit


16 Jul, 2014

1 commit

  • The current "wait_on_bit" interface requires an 'action'
    function to be provided which does the actual waiting.
    There are over 20 such functions, many of them identical.
    Most cases can be satisfied by one of just two functions, one
    which uses io_schedule() and one which just uses schedule().

    So:
    Rename wait_on_bit and wait_on_bit_lock to
    wait_on_bit_action and wait_on_bit_lock_action
    to make it explicit that they need an action function.

    Introduce new wait_on_bit{,_lock} and wait_on_bit{,_lock}_io
    which are *not* given an action function but implicitly use
    a standard one.
    The decision to error-out if a signal is pending is now made
    based on the 'mode' argument rather than being encoded in the action
    function.

    All instances of the old wait_on_bit and wait_on_bit_lock which
    can use the new version have been changed accordingly and their
    action functions have been discarded.
    wait_on_bit{_lock} does not return any specific error code in the
    event of a signal so the caller must check for non-zero and
    interpolate their own error code as appropriate.

    The wait_on_bit() call in __fscache_wait_on_invalidate() was
    ambiguous as it specified TASK_UNINTERRUPTIBLE but used
    fscache_wait_bit_interruptible as an action function.
    David Howells confirms this should be uniformly
    "uninterruptible"

    The main remaining user of wait_on_bit{,_lock}_action is NFS
    which needs to use a freezer-aware schedule() call.

    A comment in fs/gfs2/glock.c notes that having multiple 'action'
    functions is useful as they display differently in the 'wchan'
    field of 'ps'. (and /proc/$PID/wchan).
    As the new bit_wait{,_io} functions are tagged "__sched", they
    will not show up at all, but something higher in the stack. So
    the distinction will still be visible, only with different
    function names (gds2_glock_wait versus gfs2_glock_dq_wait in the
    gfs2/glock.c case).

    Since first version of this patch (against 3.15) two new action
    functions appeared, on in NFS and one in CIFS. CIFS also now
    uses an action function that makes the same freezer aware
    schedule call as NFS.

    Signed-off-by: NeilBrown
    Acked-by: David Howells (fscache, keys)
    Acked-by: Steven Whitehouse (gfs2)
    Acked-by: Peter Zijlstra
    Cc: Oleg Nesterov
    Cc: Steve French
    Cc: Linus Torvalds
    Link: http://lkml.kernel.org/r/20140707051603.28027.72349.stgit@notabene.brown
    Signed-off-by: Ingo Molnar

    NeilBrown
     

05 Jun, 2014

1 commit


06 Sep, 2013

1 commit

  • Extend the fscache netfs API so that the netfs can ask as to whether a cache
    object is up to date with respect to its corresponding netfs object:

    int fscache_check_consistency(struct fscache_cookie *cookie)

    This will call back to the netfs to check whether the auxiliary data associated
    with a cookie is correct. It returns 0 if it is and -ESTALE if it isn't; it
    may also return -ENOMEM and -ERESTARTSYS.

    The backends now have to implement a mandatory operation pointer:

    int (*check_consistency)(struct fscache_object *object)

    that corresponds to the above API call. FS-Cache takes care of pinning the
    object and the cookie in memory and managing this call with respect to the
    object state.

    Original-author: Hongyi Jia
    Signed-off-by: David Howells
    cc: Hongyi Jia
    cc: Milosz Tanski

    David Howells
     

19 Jun, 2013

2 commits

  • Simplify the way fscache cache objects retain their cookie. The way I
    implemented the cookie storage handling made synchronisation a pain (ie. the
    object state machine can't rely on the cookie actually still being there).

    Instead of the the object being detached from the cookie and the cookie being
    freed in __fscache_relinquish_cookie(), we defer both operations:

    (*) The detachment of the object from the list in the cookie now takes place
    in fscache_drop_object() and is thus governed by the object state machine
    (fscache_detach_from_cookie() has been removed).

    (*) The release of the cookie is now in fscache_object_destroy() - which is
    called by the cache backend just before it frees the object.

    This means that the fscache_cookie struct is now available to the cache all the
    way through from ->alloc_object() to ->drop_object() and ->put_object() -
    meaning that it's no longer necessary to take object->lock to guarantee access.

    However, __fscache_relinquish_cookie() doesn't wait for the object to go all
    the way through to destruction before letting the netfs proceed. That would
    massively slow down the netfs. Since __fscache_relinquish_cookie() leaves the
    cookie around, in must therefore break all attachments to the netfs - which
    includes ->def, ->netfs_data and any outstanding page read/writes.

    To handle this, struct fscache_cookie now has an n_active counter:

    (1) This starts off initialised to 1.

    (2) Any time the cache needs to get at the netfs data, it calls
    fscache_use_cookie() to increment it - if it is not zero. If it was zero,
    then access is not permitted.

    (3) When the cache has finished with the data, it calls fscache_unuse_cookie()
    to decrement it. This does a wake-up on it if it reaches 0.

    (4) __fscache_relinquish_cookie() decrements n_active and then waits for it to
    reach 0. The initialisation to 1 in step (1) ensures that we only get
    wake ups when we're trying to get rid of the cookie.

    This leaves __fscache_relinquish_cookie() a lot simpler.

    ***
    This fixes a problem in the current code whereby if fscache_invalidate() is
    followed sufficiently quickly by fscache_relinquish_cookie() then it is
    possible for __fscache_relinquish_cookie() to have detached the cookie from the
    object and cleared the pointer before a thread is dispatched to process the
    invalidation state in the object state machine.

    Since the pending write clearance was deferred to the invalidation state to
    make it asynchronous, we need to either wait in relinquishment for the stores
    tree to be cleared in the invalidation state or we need to handle the clearance
    in relinquishment.

    Further, if the relinquishment code does clear the tree, then the invalidation
    state need to make the clearance contingent on still having the cookie to hand
    (since that's where the tree is rooted) and we have to prevent the cookie from
    disappearing for the duration.

    This can lead to an oops like the following:

    BUG: unable to handle kernel NULL pointer dereference at 000000000000000c
    ...
    RIP: 0010:[] _spin_lock+0xe/0x30
    ...
    CR2: 000000000000000c ...
    ...
    Process kslowd002 (...)
    ....
    Call Trace:
    [] fscache_invalidate_writes+0x38/0xd0 [fscache]
    [] ? __switch_to+0xd0/0x320
    [] ? find_busiest_queue+0x69/0x150
    [] ? slow_work_enqueue+0x104/0x180
    [] fscache_object_slow_work_execute+0x5e3/0x9d0 [fscache]
    [] ? bit_waitqueue+0x17/0xd0
    [] slow_work_execute+0x233/0x310
    [] slow_work_thread+0x205/0x360
    [] ? autoremove_wake_function+0x0/0x40
    [] ? slow_work_thread+0x0/0x360
    [] kthread+0x96/0xa0
    [] child_rip+0xa/0x20
    [] ? kthread+0x0/0xa0
    [] ? child_rip+0x0/0x20

    The parameter to fscache_invalidate_writes() was object->cookie which is NULL.

    Signed-off-by: David Howells
    Tested-By: Milosz Tanski
    Acked-by: Jeff Layton

    David Howells
     
  • Fix object state machine to have separate work and wait states as that makes
    it easier to envision.

    There are now three kinds of state:

    (1) Work state. This is an execution state. No event processing is performed
    by a work state. The function attached to a work state returns a pointer
    indicating the next state to which the OSM should transition. Returning
    NO_TRANSIT repeats the current state, but goes back to the scheduler
    first.

    (2) Wait state. This is an event processing state. No execution is
    performed by a wait state. Wait states are just tables of "if event X
    occurs, clear it and transition to state Y". The dispatcher returns to
    the scheduler if none of the events in which the wait state has an
    interest are currently pending.

    (3) Out-of-band state. This is a special work state. Transitions to normal
    states can be overridden when an unexpected event occurs (eg. I/O error).
    Instead the dispatcher disables and clears the OOB event and transits to
    the specified work state. This then acts as an ordinary work state,
    though object->state points to the overridden destination. Returning
    NO_TRANSIT resumes the overridden transition.

    In addition, the states have names in their definitions, so there's no need for
    tables of state names. Further, the EV_REQUEUE event is no longer necessary as
    that is automatic for work states.

    Since the states are now separate structs rather than values in an enum, it's
    not possible to use comparisons other than (non-)equality between them, so use
    some object->flags to indicate what phase an object is in.

    The EV_RELEASE, EV_RETIRE and EV_WITHDRAW events have been squished into one
    (EV_KILL). An object flag now carries the information about retirement.

    Similarly, the RELEASING, RECYCLING and WITHDRAWING states have been merged
    into an KILL_OBJECT state and additional states have been added for handling
    waiting dependent objects (JUMPSTART_DEPS and KILL_DEPENDENTS).

    A state has also been added for synchronising with parent object initialisation
    (WAIT_FOR_PARENT) and another for initiating look up (PARENT_READY).

    Signed-off-by: David Howells
    Tested-By: Milosz Tanski
    Acked-by: Jeff Layton

    David Howells
     

21 Dec, 2012

4 commits

  • Provide fscache_cancel_op() with a pointer to a function it should invoke under
    lock if it cancels an operation.

    Use this to clear the remaining page count upon cancellation of a pending
    retrieval operation so that fscache_release_retrieval_op() doesn't get an
    assertion failure (see below). This can happen when a signal occurs, say from
    CTRL-C being pressed during data retrieval.

    FS-Cache: Assertion failed
    3 == 0 is false
    ------------[ cut here ]------------
    kernel BUG at fs/fscache/page.c:237!
    invalid opcode: 0000 [#641] SMP
    Modules linked in: cachefiles(F) nfsv4(F) nfsv3(F) nfsv2(F) nfs(F) fscache(F) auth_rpcgss(F) nfs_acl(F) lockd(F) sunrpc(F)
    CPU 0
    Pid: 6075, comm: slurp-q Tainted: GF D 3.7.0-rc8-fsdevel+ #411 /DG965RY
    RIP: 0010:[] [] fscache_release_retrieval_op+0x75/0xff [fscache]
    RSP: 0000:ffff88001c6d7988 EFLAGS: 00010296
    RAX: 000000000000000f RBX: ffff880014cdfe00 RCX: ffffffff6c102000
    RDX: ffffffff8102d1ad RSI: ffffffff6c102000 RDI: ffffffff8102d1d6
    RBP: ffff88001c6d7998 R08: 0000000000000002 R09: 0000000000000000
    R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffe00
    R13: ffff88001c6d7ab4 R14: ffff88001a8638a0 R15: ffff88001552b190
    FS: 00007f877aaf0700(0000) GS:ffff88003bc00000(0000) knlGS:0000000000000000
    CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
    CR2: 00007fff11378fd2 CR3: 000000001c6c6000 CR4: 00000000000007f0
    DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
    DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
    Process slurp-q (pid: 6075, threadinfo ffff88001c6d6000, task ffff88001c6c4080)
    Stack:
    ffffffffa007ec07 ffff880014cdfe00 ffff88001c6d79c8 ffffffffa007db4d
    ffffffffa007ec07 ffff880014cdfe00 00000000fffffe00 ffff88001c6d7ab4
    ffff88001c6d7a38 ffffffffa008116d 0000000000000000 ffff88001c6c4080
    Call Trace:
    [] ? fscache_cancel_op+0x194/0x1cf [fscache]
    [] fscache_put_operation+0x135/0x2ed [fscache]
    [] ? fscache_cancel_op+0x194/0x1cf [fscache]
    [] __fscache_read_or_alloc_pages+0x413/0x4bc [fscache]
    [] ? __alloc_pages_nodemask+0x195/0x75c
    [] __nfs_readpages_from_fscache+0x86/0x13d [nfs]
    [] nfs_readpages+0x186/0x1bd [nfs]
    [] ? alloc_pages_current+0xc7/0xe4
    [] ? __page_cache_alloc+0x84/0x91
    [] ? __do_page_cache_readahead+0xa6/0x2e0
    [] __do_page_cache_readahead+0x237/0x2e0
    [] ? __do_page_cache_readahead+0xa6/0x2e0
    [] ra_submit+0x1c/0x20
    [] ondemand_readahead+0x359/0x382
    [] page_cache_sync_readahead+0x38/0x3a
    [] generic_file_aio_read+0x26b/0x637
    [] ? nfs_mark_delegation_referenced+0xb/0xb [nfsv4]
    [] nfs_file_read+0xaa/0xcf [nfs]
    [] do_sync_read+0x91/0xd1
    [] vfs_read+0x9b/0x144
    [] sys_read+0x44/0x75
    [] system_call_fastpath+0x16/0x1b

    Signed-off-by: David Howells

    David Howells
     
  • nfs_migrate_page() does not wait for FS-Cache to finish with a page, probably
    leading to the following bad-page-state:

    BUG: Bad page state in process python-bin pfn:17d39b
    page:ffffea00053649e8 flags:004000000000100c count:0 mapcount:0 mapping:(null)
    index:38686 (Tainted: G B ---------------- )
    Pid: 31053, comm: python-bin Tainted: G B ----------------
    2.6.32-71.24.1.el6.x86_64 #1
    Call Trace:
    [] bad_page+0x107/0x160
    [] free_hot_cold_page+0x1c9/0x220
    [] __pagevec_free+0x59/0xb0
    [] ? flush_tlb_others_ipi+0x128/0x130
    [] release_pages+0x21c/0x250
    [] ? remove_migration_pte+0x28a/0x2b0
    [] ? mem_cgroup_get_reclaim_stat_from_page+0x18/0x70
    [] ____pagevec_lru_add+0x167/0x180
    [] __lru_cache_add+0x58/0x70
    [] lru_cache_add_lru+0x21/0x40
    [] putback_lru_page+0x69/0x100
    [] migrate_pages+0x13d/0x5d0
    [] ? ____pagevec_lru_add+0x167/0x180
    [] ? compaction_alloc+0x0/0x370
    [] compact_zone+0x4cc/0x600
    [] ? get_page_from_freelist+0x15c/0x820
    [] ? check_preempt_wakeup+0x1c4/0x3c0
    [] compact_zone_order+0x7e/0xb0
    [] try_to_compact_pages+0x109/0x170
    [] __alloc_pages_nodemask+0x5ed/0x850
    [] ? thread_return+0x4e/0x778
    [] alloc_pages_vma+0x93/0x150
    [] do_huge_pmd_anonymous_page+0x135/0x340
    [] ? rwsem_down_read_failed+0x26/0x30
    [] handle_mm_fault+0x245/0x2b0
    [] do_page_fault+0x123/0x3a0
    [] page_fault+0x25/0x30

    nfs_migrate_page() calls nfs_fscache_release_page() which doesn't actually wait
    - even if __GFP_WAIT is set. The reason that doesn't wait is that
    fscache_maybe_release_page() might deadlock the allocator as the work threads
    writing to the cache may all end up sleeping on memory allocation.

    However, I wonder if that is actually a problem. There are a number of things
    I can do to deal with this:

    (1) Make nfs_migrate_page() wait.

    (2) Make fscache_maybe_release_page() honour the __GFP_WAIT flag.

    (3) Set a timeout around the wait.

    (4) Make nfs_migrate_page() return an error if the page is still busy.

    For the moment, I'll select (2) and (4).

    Signed-off-by: David Howells
    Acked-by: Jeff Layton

    David Howells
     
  • The function to submit an exclusive op (fscache_submit_exclusive_op()) can BUG
    if there's been an I/O error because it may see the parent cache object in an
    unexpected state. It should only BUG if there hasn't been an I/O error.

    In this case the problem was produced by remounting the cache partition to be
    R/O. The EROFS state was detected and the cache was aborted, but not
    everything handled the aborting correctly.

    SysRq : Emergency Remount R/O
    EXT4-fs (sda6): re-mounted. Opts: (null)
    Emergency Remount complete
    CacheFiles: I/O Error: Failed to update xattr with error -30
    FS-Cache: Cache cachefiles stopped due to I/O error
    ------------[ cut here ]------------
    kernel BUG at fs/fscache/operation.c:128!
    invalid opcode: 0000 [#1] SMP
    CPU 0
    Modules linked in: cachefiles nfs fscache auth_rpcgss nfs_acl lockd sunrpc

    Pid: 6612, comm: kworker/u:2 Not tainted 3.1.0-rc8-fsdevel+ #1093 /DG965RY
    RIP: 0010:[] [] fscache_submit_exclusive_op+0x2ad/0x2c2 [fscache]
    RSP: 0018:ffff880000853d40 EFLAGS: 00010206
    RAX: ffff880038ac72a8 RBX: ffff8800181f2260 RCX: ffffffff81f2b2b0
    RDX: 0000000000000001 RSI: ffffffff8179a478 RDI: ffff8800181f2280
    RBP: ffff880000853d60 R08: 0000000000000002 R09: 0000000000000000
    R10: 0000000000000001 R11: 0000000000000001 R12: ffff880038ac7268
    R13: ffff8800181f2280 R14: ffff88003a359190 R15: 000000010122b162
    FS: 0000000000000000(0000) GS:ffff88003bc00000(0000) knlGS:0000000000000000
    CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
    CR2: 00000034cc4a77f0 CR3: 0000000010e96000 CR4: 00000000000006f0
    DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
    DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
    Process kworker/u:2 (pid: 6612, threadinfo ffff880000852000, task ffff880014c3c040)
    Stack:
    ffff8800181f2260 ffff8800181f2310 ffff880038ac7268 ffff8800181f2260
    ffff880000853dc0 ffffffffa0072375 ffff880037ecfe00 ffff88003a359198
    ffff880000853dc0 0000000000000246 0000000000000000 ffff88000a91d308
    Call Trace:
    [] fscache_object_work_func+0x792/0xe65 [fscache]
    [] process_one_work+0x1eb/0x37f
    [] ? process_one_work+0x18d/0x37f
    [] ? fscache_enqueue_dependents+0xd8/0xd8 [fscache]
    [] worker_thread+0x15a/0x21a
    [] ? rescuer_thread+0x188/0x188
    [] kthread+0x7f/0x87
    [] kernel_thread_helper+0x4/0x10
    [] ? finish_task_switch+0x45/0xc0
    [] ? retint_restore_args+0xe/0xe
    [] ? __init_kthread_worker+0x53/0x53
    [] ? gs_change+0xb/0xb

    Signed-off-by: David Howells

    David Howells
     
  • Provide a proper invalidation method rather than relying on the netfs retiring
    the cookie it has and getting a new one. The problem with this is that isn't
    easy for the netfs to make sure that it has completed/cancelled all its
    outstanding storage and retrieval operations on the cookie it is retiring.

    Instead, have the cache provide an invalidation method that will cancel or wait
    for all currently outstanding operations before invalidating the cache, and
    will cause new operations to queue up behind that. Whilst invalidation is in
    progress, some requests will be rejected until the cache can stack a barrier on
    the operation queue to cause new operations to be deferred behind it.

    Signed-off-by: David Howells

    David Howells
     

13 Aug, 2010

1 commit


23 Jul, 2010

2 commits

  • Make fscache operation to use only workqueue instead of combination of
    workqueue and slow-work. FSCACHE_OP_SLOW is dropped and
    FSCACHE_OP_FAST is renamed to FSCACHE_OP_ASYNC and uses newly added
    fscache_op_wq workqueue to execute op->processor().
    fscache_operation_init_slow() is dropped and fscache_operation_init()
    now takes @processor argument directly.

    * Unbound workqueue is used.

    * fscache_retrieval_work() is no longer necessary as OP_ASYNC now does
    the equivalent thing.

    * sysctl fscache.operation_max_active added to control concurrency.
    The default value is nr_cpus clamped between 2 and
    WQ_UNBOUND_MAX_ACTIVE.

    * debugfs support is dropped for now. Tracing API based debug
    facility is planned to be added.

    Signed-off-by: Tejun Heo
    Acked-by: David Howells

    Tejun Heo
     
  • Make fscache object state transition callbacks use workqueue instead
    of slow-work. New dedicated unbound CPU workqueue fscache_object_wq
    is created. get/put callbacks are renamed and modified to take
    @object and called directly from the enqueue wrapper and the work
    function. While at it, make all open coded instances of get/put to
    use fscache_get/put_object().

    * Unbound workqueue is used.

    * work_busy() output is printed instead of slow-work flags in object
    debugging outputs. They mean basically the same thing bit-for-bit.

    * sysctl fscache.object_max_active added to control concurrency. The
    default value is nr_cpus clamped between 4 and
    WQ_UNBOUND_MAX_ACTIVE.

    * slow_work_sleep_till_thread_needed() is replaced with fscache
    private implementation fscache_object_sleep_till_congested() which
    waits on fscache_object_wq congestion.

    * debugfs support is dropped for now. Tracing API based debug
    facility is planned to be added.

    Signed-off-by: Tejun Heo
    Acked-by: David Howells

    Tejun Heo
     

21 Nov, 2009

1 commit

  • Provide nop fscache_stat_d() macro if CONFIG_FSCACHE_STATS=n lest errors like
    the following occur:

    fs/fscache/cache.c: In function 'fscache_withdraw_cache':
    fs/fscache/cache.c:386: error: implicit declaration of function 'fscache_stat_d'
    fs/fscache/cache.c:386: error: 'fscache_n_cop_sync_cache' undeclared (first use in this function)
    fs/fscache/cache.c:386: error: (Each undeclared identifier is reported only once
    fs/fscache/cache.c:386: error: for each function it appears in.)
    fs/fscache/cache.c:392: error: 'fscache_n_cop_dissociate_pages' undeclared (first use in this function)

    Signed-off-by: David Howells

    David Howells
     

20 Nov, 2009

9 commits

  • Catch an overly long wait for an old, dying active object when we want to
    replace it with a new one. The probability is that all the slow-work threads
    are hogged, and the delete can't get a look in.

    What we do instead is:

    (1) if there's nothing in the slow work queue, we sleep until either the dying
    object has finished dying or there is something in the slow work queue
    behind which we can queue our object.

    (2) if there is something in the slow work queue, we return ETIMEDOUT to
    fscache_lookup_object(), which then puts us back on the slow work queue,
    presumably behind the deletion that we're blocked by. We are then
    deferred for a while until we work our way back through the queue -
    without blocking a slow-work thread unnecessarily.

    A backtrace similar to the following may appear in the log without this patch:

    INFO: task kslowd004:5711 blocked for more than 120 seconds.
    "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
    kslowd004 D 0000000000000000 0 5711 2 0x00000080
    ffff88000340bb80 0000000000000046 ffff88002550d000 0000000000000000
    ffff88002550d000 0000000000000007 ffff88000340bfd8 ffff88002550d2a8
    000000000000ddf0 00000000000118c0 00000000000118c0 ffff88002550d2a8
    Call Trace:
    [] ? trace_hardirqs_on+0xd/0xf
    [] ? cachefiles_wait_bit+0x0/0xd [cachefiles]
    [] cachefiles_wait_bit+0x9/0xd [cachefiles]
    [] __wait_on_bit+0x43/0x76
    [] ? ext3_xattr_get+0x1ec/0x270
    [] out_of_line_wait_on_bit+0x69/0x74
    [] ? cachefiles_wait_bit+0x0/0xd [cachefiles]
    [] ? wake_bit_function+0x0/0x2e
    [] cachefiles_mark_object_active+0x203/0x23b [cachefiles]
    [] cachefiles_walk_to_object+0x558/0x827 [cachefiles]
    [] cachefiles_lookup_object+0xac/0x12a [cachefiles]
    [] fscache_lookup_object+0x1c7/0x214 [fscache]
    [] fscache_object_state_machine+0xa5/0x52d [fscache]
    [] fscache_object_slow_work_execute+0x5f/0xa0 [fscache]
    [] slow_work_execute+0x18f/0x2d1
    [] slow_work_thread+0x1c5/0x308
    [] ? autoremove_wake_function+0x0/0x34
    [] ? slow_work_thread+0x0/0x308
    [] kthread+0x7a/0x82
    [] child_rip+0xa/0x20
    [] ? restore_args+0x0/0x30
    [] ? kthread+0x0/0x82
    [] ? child_rip+0x0/0x20
    1 lock held by kslowd004/5711:
    #0: (&sb->s_type->i_mutex_key#7/1){+.+.+.}, at: [] cachefiles_walk_to_object+0x1b3/0x827 [cachefiles]

    Signed-off-by: David Howells

    David Howells
     
  • Start processing an object's operations when that object moves into the DYING
    state as the object cannot be destroyed until all its outstanding operations
    have completed.

    Furthermore, make sure that read and allocation operations handle being woken
    up on a dead object. Such events are recorded in the Allocs.abt and
    Retrvls.abt statistics as viewable through /proc/fs/fscache/stats.

    The code for waiting for object activation for the read and allocation
    operations is also extracted into its own function as it is much the same in
    all cases, differing only in the stats incremented.

    Signed-off-by: David Howells

    David Howells
     
  • Add a stat counter to count retirement events rather than ordinary release
    events (the retire argument to fscache_relinquish_cookie()).

    Signed-off-by: David Howells

    David Howells
     
  • Handle netfs pages that the vmscan algorithm wants to evict from the pagecache
    under OOM conditions, but that are waiting for write to the cache. Under these
    conditions, vmscan calls the releasepage() function of the netfs, asking if a
    page can be discarded.

    The problem is typified by the following trace of a stuck process:

    kslowd005 D 0000000000000000 0 4253 2 0x00000080
    ffff88001b14f370 0000000000000046 ffff880020d0d000 0000000000000007
    0000000000000006 0000000000000001 ffff88001b14ffd8 ffff880020d0d2a8
    000000000000ddf0 00000000000118c0 00000000000118c0 ffff880020d0d2a8
    Call Trace:
    [] __fscache_wait_on_page_write+0x8b/0xa7 [fscache]
    [] ? autoremove_wake_function+0x0/0x34
    [] ? __fscache_check_page_write+0x63/0x70 [fscache]
    [] nfs_fscache_release_page+0x4e/0xc4 [nfs]
    [] nfs_release_page+0x3c/0x41 [nfs]
    [] try_to_release_page+0x32/0x3b
    [] shrink_page_list+0x316/0x4ac
    [] shrink_inactive_list+0x392/0x67c
    [] ? __mutex_unlock_slowpath+0x100/0x10b
    [] ? trace_hardirqs_on_caller+0x10c/0x130
    [] ? mutex_unlock+0x9/0xb
    [] shrink_list+0x8d/0x8f
    [] shrink_zone+0x278/0x33c
    [] ? ktime_get_ts+0xad/0xba
    [] try_to_free_pages+0x22e/0x392
    [] ? isolate_pages_global+0x0/0x212
    [] __alloc_pages_nodemask+0x3dc/0x5cf
    [] grab_cache_page_write_begin+0x65/0xaa
    [] ext3_write_begin+0x78/0x1eb
    [] generic_file_buffered_write+0x109/0x28c
    [] ? current_fs_time+0x22/0x29
    [] __generic_file_aio_write+0x350/0x385
    [] ? generic_file_aio_write+0x4a/0xae
    [] generic_file_aio_write+0x60/0xae
    [] do_sync_write+0xe3/0x120
    [] ? autoremove_wake_function+0x0/0x34
    [] ? __dentry_open+0x1a5/0x2b8
    [] ? dentry_open+0x82/0x89
    [] cachefiles_write_page+0x298/0x335 [cachefiles]
    [] fscache_write_op+0x178/0x2c2 [fscache]
    [] fscache_op_execute+0x7a/0xd1 [fscache]
    [] slow_work_execute+0x18f/0x2d1
    [] slow_work_thread+0x1c5/0x308
    [] ? autoremove_wake_function+0x0/0x34
    [] ? slow_work_thread+0x0/0x308
    [] kthread+0x7a/0x82
    [] child_rip+0xa/0x20
    [] ? restore_args+0x0/0x30
    [] ? tg_shares_up+0x171/0x227
    [] ? kthread+0x0/0x82
    [] ? child_rip+0x0/0x20

    In the above backtrace, the following is happening:

    (1) A page storage operation is being executed by a slow-work thread
    (fscache_write_op()).

    (2) FS-Cache farms the operation out to the cache to perform
    (cachefiles_write_page()).

    (3) CacheFiles is then calling Ext3 to perform the actual write, using Ext3's
    standard write (do_sync_write()) under KERNEL_DS directly from the netfs
    page.

    (4) However, for Ext3 to perform the write, it must allocate some memory, in
    particular, it must allocate at least one page cache page into which it
    can copy the data from the netfs page.

    (5) Under OOM conditions, the memory allocator can't immediately come up with
    a page, so it uses vmscan to find something to discard
    (try_to_free_pages()).

    (6) vmscan finds a clean netfs page it might be able to discard (possibly the
    one it's trying to write out).

    (7) The netfs is called to throw the page away (nfs_release_page()) - but it's
    called with __GFP_WAIT, so the netfs decides to wait for the store to
    complete (__fscache_wait_on_page_write()).

    (8) This blocks a slow-work processing thread - possibly against itself.

    The system ends up stuck because it can't write out any netfs pages to the
    cache without allocating more memory.

    To avoid this, we make FS-Cache cancel some writes that aren't in the middle of
    actually being performed. This means that some data won't make it into the
    cache this time. To support this, a new FS-Cache function is added
    fscache_maybe_release_page() that replaces what the netfs releasepage()
    functions used to do with respect to the cache.

    The decisions fscache_maybe_release_page() makes are counted and displayed
    through /proc/fs/fscache/stats on a line labelled "VmScan". There are four
    counters provided: "nos=N" - pages that weren't pending storage; "gon=N" -
    pages that were pending storage when we first looked, but weren't by the time
    we got the object lock; "bsy=N" - pages that we ignored as they were actively
    being written when we looked; and "can=N" - pages that we cancelled the storage
    of.

    What I'd really like to do is alter the behaviour of the cancellation
    heuristics, depending on how necessary it is to expel pages. If there are
    plenty of other pages that aren't waiting to be written to the cache that
    could be ejected first, then it would be nice to hold up on immediate
    cancellation of cache writes - but I don't see a way of doing that.

    Signed-off-by: David Howells

    David Howells
     
  • FS-Cache doesn't correctly handle the netfs requesting a read from the cache
    on an object that failed or was withdrawn by the cache. A trace similar to
    the following might be seen:

    CacheFiles: Lookup failed error -105
    [exe ] unexpected submission OP165afe [OBJ6cac OBJECT_LC_DYING]
    [exe ] objstate=OBJECT_LC_DYING [OBJECT_LC_DYING]
    [exe ] objflags=0
    [exe ] objevent=9 [fffffffffffffffb]
    [exe ] ops=0 inp=0 exc=0
    Pid: 6970, comm: exe Not tainted 2.6.32-rc6-cachefs #50
    Call Trace:
    [] fscache_submit_op+0x3ff/0x45a [fscache]
    [] __fscache_read_or_alloc_pages+0x187/0x3c4 [fscache]
    [] ? nfs_readpage_from_fscache_complete+0x0/0x66 [nfs]
    [] __nfs_readpages_from_fscache+0x7e/0x176 [nfs]
    [] ? __alloc_pages_nodemask+0x11c/0x5cf
    [] nfs_readpages+0x114/0x1d7 [nfs]
    [] __do_page_cache_readahead+0x15f/0x1ec
    [] ? __do_page_cache_readahead+0x73/0x1ec
    [] ra_submit+0x1c/0x20
    [] ondemand_readahead+0x227/0x23a
    [] page_cache_sync_readahead+0x17/0x19
    [] generic_file_aio_read+0x236/0x5a0
    [] nfs_file_read+0xe4/0xf3 [nfs]
    [] do_sync_read+0xe3/0x120
    [] ? _spin_unlock_irq+0x2b/0x31
    [] ? autoremove_wake_function+0x0/0x34
    [] ? selinux_file_permission+0x5d/0x10f
    [] ? thread_return+0x3e/0x101
    [] ? security_file_permission+0x11/0x13
    [] vfs_read+0xaa/0x16f
    [] ? trace_hardirqs_on_caller+0x10c/0x130
    [] sys_read+0x45/0x6c
    [] system_call_fastpath+0x16/0x1b

    The object state might also be OBJECT_DYING or OBJECT_WITHDRAWING.

    This should be handled by simply rejecting the new operation with ENOBUFS.
    There's no need to log an error for it. Events of this type now appear in the
    stats file under Ops:rej.

    Signed-off-by: David Howells

    David Howells
     
  • FS-Cache has two structs internally for keeping track of the internal state of
    a cached file: the fscache_cookie struct, which represents the netfs's state,
    and fscache_object struct, which represents the cache's state. Each has a
    pointer that points to the other (when both are in existence), and each has a
    spinlock for pointer maintenance.

    Since netfs operations approach these structures from the cookie side, they get
    the cookie lock first, then the object lock. Cache operations, on the other
    hand, approach from the object side, and get the object lock first. It is not
    then permitted for a cache operation to get the cookie lock whilst it is
    holding the object lock lest deadlock occur; instead, it must do one of two
    things:

    (1) increment the cookie usage counter, drop the object lock and then get both
    locks in order, or

    (2) simply hold the object lock as certain parts of the cookie may not be
    altered whilst the object lock is held.

    It is also not permitted to follow either pointer without holding the lock at
    the end you start with. To break the pointers between the cookie and the
    object, both locks must be held.

    fscache_write_op(), however, violates the locking rules: It attempts to get the
    cookie lock without (a) checking that the cookie pointer is a valid pointer,
    and (b) holding the object lock to protect the cookie pointer whilst it follows
    it. This is so that it can access the pending page store tree without
    interference from __fscache_write_page().

    This is fixed by splitting the cookie lock, such that the page store tracking
    tree is protected by its own lock, and checking that the cookie pointer is
    non-NULL before we attempt to follow it whilst holding the object lock.

    The new lock is subordinate to both the cookie lock and the object lock, and so
    should be taken after those.

    Signed-off-by: David Howells

    David Howells
     
  • Permit the operations to retrieve data from the cache or to allocate space in
    the cache for future writes to be interrupted whilst they're waiting for
    permission for the operation to proceed. Typically this wait occurs whilst the
    cache object is being looked up on disk in the background.

    If an interruption occurs, and the operation has not yet been given the
    go-ahead to run, the operation is dequeued and cancelled, and control returns
    to the read operation of the netfs routine with none of the requested pages
    having been read or in any way marked as known by the cache.

    This means that the initial wait is done interruptibly rather than
    uninterruptibly.

    In addition, extra stats values are made available to show the number of ops
    cancelled and the number of cache space allocations interrupted.

    Signed-off-by: David Howells

    David Howells
     
  • Count entries to and exits from cache operation table functions. Maintain
    these as a single counter that's added to or removed from as appropriate.

    Signed-off-by: David Howells

    David Howells
     
  • Allow the current state of all fscache objects to be dumped by doing:

    cat /proc/fs/fscache/objects

    By default, all objects and all fields will be shown. This can be restricted
    by adding a suitable key to one of the caller's keyrings (such as the session
    keyring):

    keyctl add user fscache:objlist "" @s

    The are:

    K Show hexdump of object key (don't show if not given)
    A Show hexdump of object aux data (don't show if not given)

    And paired restrictions:

    C Show objects that have a cookie
    c Show objects that don't have a cookie
    B Show objects that are busy
    b Show objects that aren't busy
    W Show objects that have pending writes
    w Show objects that don't have pending writes
    R Show objects that have outstanding reads
    r Show objects that don't have outstanding reads
    S Show objects that have slow work queued
    s Show objects that don't have slow work queued

    If neither side of a restriction pair is given, then both are implied. For
    example:

    keyctl add user fscache:objlist KB @s

    shows objects that are busy, and lists their object keys, but does not dump
    their auxiliary data. It also implies "CcWwRrSs", but as 'B' is given, 'b' is
    not implied.

    Signed-off-by: David Howells

    David Howells
     

28 May, 2009

1 commit


03 Apr, 2009

5 commits

  • Implement the data I/O part of the FS-Cache netfs API. The documentation and
    API header file were added in a previous patch.

    This patch implements the following functions for the netfs to call:

    (*) fscache_attr_changed().

    Indicate that the object has changed its attributes. The only attribute
    currently recorded is the file size. Only pages within the set file size
    will be stored in the cache.

    This operation is submitted for asynchronous processing, and will return
    immediately. It will return -ENOMEM if an out of memory error is
    encountered, -ENOBUFS if the object is not actually cached, or 0 if the
    operation is successfully queued.

    (*) fscache_read_or_alloc_page().
    (*) fscache_read_or_alloc_pages().

    Request data be fetched from the disk, and allocate internal metadata to
    track the netfs pages and reserve disk space for unknown pages.

    These operations perform semi-asynchronous data reads. Upon returning
    they will indicate which pages they think can be retrieved from disk, and
    will have set in progress attempts to retrieve those pages.

    These will return, in order of preference, -ENOMEM on memory allocation
    error, -ERESTARTSYS if a signal interrupted proceedings, -ENODATA if one
    or more requested pages are not yet cached, -ENOBUFS if the object is not
    actually cached or if there isn't space for future pages to be cached on
    this object, or 0 if successful.

    In the case of the multipage function, the pages for which reads are set
    in progress will be removed from the list and the page count decreased
    appropriately.

    If any read operations should fail, the completion function will be given
    an error, and will also be passed contextual information to allow the
    netfs to fall back to querying the server for the absent pages.

    For each successful read, the page completion function will also be
    called.

    Any pages subsequently tracked by the cache will have PG_fscache set upon
    them on return. fscache_uncache_page() must be called for such pages.

    If supplied by the netfs, the mark_pages_cached() cookie op will be
    invoked for any pages now tracked.

    (*) fscache_alloc_page().

    Allocate internal metadata to track a netfs page and reserve disk space.

    This will return -ENOMEM on memory allocation error, -ERESTARTSYS on
    signal, -ENOBUFS if the object isn't cached, or there isn't enough space
    in the cache, or 0 if successful.

    Any pages subsequently tracked by the cache will have PG_fscache set upon
    them on return. fscache_uncache_page() must be called for such pages.

    If supplied by the netfs, the mark_pages_cached() cookie op will be
    invoked for any pages now tracked.

    (*) fscache_write_page().

    Request data be stored to disk. This may only be called on pages that
    have been read or alloc'd by the above three functions and have not yet
    been uncached.

    This will return -ENOMEM on memory allocation error, -ERESTARTSYS on
    signal, -ENOBUFS if the object isn't cached, or there isn't immediately
    enough space in the cache, or 0 if successful.

    On a successful return, this operation will have queued the page for
    asynchronous writing to the cache. The page will be returned with
    PG_fscache_write set until the write completes one way or another. The
    caller will not be notified if the write fails due to an I/O error. If
    that happens, the object will become available and all pending writes will
    be aborted.

    Note that the cache may batch up page writes, and so it may take a while
    to get around to writing them out.

    The caller must assume that until PG_fscache_write is cleared the page is
    use by the cache. Any changes made to the page may be reflected on disk.
    The page may even be under DMA.

    (*) fscache_uncache_page().

    Indicate that the cache should stop tracking a page previously read or
    alloc'd from the cache. If the page was alloc'd only, but unwritten, it
    will not appear on disk.

    Signed-off-by: David Howells
    Acked-by: Steve Dickson
    Acked-by: Trond Myklebust
    Acked-by: Al Viro
    Tested-by: Daire Byrne

    David Howells
     
  • Add and document asynchronous operation handling for use by FS-Cache's data
    storage and retrieval routines.

    The following documentation is added to:

    Documentation/filesystems/caching/operations.txt

    ================================
    ASYNCHRONOUS OPERATIONS HANDLING
    ================================

    ========
    OVERVIEW
    ========

    FS-Cache has an asynchronous operations handling facility that it uses for its
    data storage and retrieval routines. Its operations are represented by
    fscache_operation structs, though these are usually embedded into some other
    structure.

    This facility is available to and expected to be be used by the cache backends,
    and FS-Cache will create operations and pass them off to the appropriate cache
    backend for completion.

    To make use of this facility, should be #included.

    ===============================
    OPERATION RECORD INITIALISATION
    ===============================

    An operation is recorded in an fscache_operation struct:

    struct fscache_operation {
    union {
    struct work_struct fast_work;
    struct slow_work slow_work;
    };
    unsigned long flags;
    fscache_operation_processor_t processor;
    ...
    };

    Someone wanting to issue an operation should allocate something with this
    struct embedded in it. They should initialise it by calling:

    void fscache_operation_init(struct fscache_operation *op,
    fscache_operation_release_t release);

    with the operation to be initialised and the release function to use.

    The op->flags parameter should be set to indicate the CPU time provision and
    the exclusivity (see the Parameters section).

    The op->fast_work, op->slow_work and op->processor flags should be set as
    appropriate for the CPU time provision (see the Parameters section).

    FSCACHE_OP_WAITING may be set in op->flags prior to each submission of the
    operation and waited for afterwards.

    ==========
    PARAMETERS
    ==========

    There are a number of parameters that can be set in the operation record's flag
    parameter. There are three options for the provision of CPU time in these
    operations:

    (1) The operation may be done synchronously (FSCACHE_OP_MYTHREAD). A thread
    may decide it wants to handle an operation itself without deferring it to
    another thread.

    This is, for example, used in read operations for calling readpages() on
    the backing filesystem in CacheFiles. Although readpages() does an
    asynchronous data fetch, the determination of whether pages exist is done
    synchronously - and the netfs does not proceed until this has been
    determined.

    If this option is to be used, FSCACHE_OP_WAITING must be set in op->flags
    before submitting the operation, and the operating thread must wait for it
    to be cleared before proceeding:

    wait_on_bit(&op->flags, FSCACHE_OP_WAITING,
    fscache_wait_bit, TASK_UNINTERRUPTIBLE);

    (2) The operation may be fast asynchronous (FSCACHE_OP_FAST), in which case it
    will be given to keventd to process. Such an operation is not permitted
    to sleep on I/O.

    This is, for example, used by CacheFiles to copy data from a backing fs
    page to a netfs page after the backing fs has read the page in.

    If this option is used, op->fast_work and op->processor must be
    initialised before submitting the operation:

    INIT_WORK(&op->fast_work, do_some_work);

    (3) The operation may be slow asynchronous (FSCACHE_OP_SLOW), in which case it
    will be given to the slow work facility to process. Such an operation is
    permitted to sleep on I/O.

    This is, for example, used by FS-Cache to handle background writes of
    pages that have just been fetched from a remote server.

    If this option is used, op->slow_work and op->processor must be
    initialised before submitting the operation:

    fscache_operation_init_slow(op, processor)

    Furthermore, operations may be one of two types:

    (1) Exclusive (FSCACHE_OP_EXCLUSIVE). Operations of this type may not run in
    conjunction with any other operation on the object being operated upon.

    An example of this is the attribute change operation, in which the file
    being written to may need truncation.

    (2) Shareable. Operations of this type may be running simultaneously. It's
    up to the operation implementation to prevent interference between other
    operations running at the same time.

    =========
    PROCEDURE
    =========

    Operations are used through the following procedure:

    (1) The submitting thread must allocate the operation and initialise it
    itself. Normally this would be part of a more specific structure with the
    generic op embedded within.

    (2) The submitting thread must then submit the operation for processing using
    one of the following two functions:

    int fscache_submit_op(struct fscache_object *object,
    struct fscache_operation *op);

    int fscache_submit_exclusive_op(struct fscache_object *object,
    struct fscache_operation *op);

    The first function should be used to submit non-exclusive ops and the
    second to submit exclusive ones. The caller must still set the
    FSCACHE_OP_EXCLUSIVE flag.

    If successful, both functions will assign the operation to the specified
    object and return 0. -ENOBUFS will be returned if the object specified is
    permanently unavailable.

    The operation manager will defer operations on an object that is still
    undergoing lookup or creation. The operation will also be deferred if an
    operation of conflicting exclusivity is in progress on the object.

    If the operation is asynchronous, the manager will retain a reference to
    it, so the caller should put their reference to it by passing it to:

    void fscache_put_operation(struct fscache_operation *op);

    (3) If the submitting thread wants to do the work itself, and has marked the
    operation with FSCACHE_OP_MYTHREAD, then it should monitor
    FSCACHE_OP_WAITING as described above and check the state of the object if
    necessary (the object might have died whilst the thread was waiting).

    When it has finished doing its processing, it should call
    fscache_put_operation() on it.

    (4) The operation holds an effective lock upon the object, preventing other
    exclusive ops conflicting until it is released. The operation can be
    enqueued for further immediate asynchronous processing by adjusting the
    CPU time provisioning option if necessary, eg:

    op->flags &= ~FSCACHE_OP_TYPE;
    op->flags |= ~FSCACHE_OP_FAST;

    and calling:

    void fscache_enqueue_operation(struct fscache_operation *op)

    This can be used to allow other things to have use of the worker thread
    pools.

    =====================
    ASYNCHRONOUS CALLBACK
    =====================

    When used in asynchronous mode, the worker thread pool will invoke the
    processor method with a pointer to the operation. This should then get at the
    container struct by using container_of():

    static void fscache_write_op(struct fscache_operation *_op)
    {
    struct fscache_storage *op =
    container_of(_op, struct fscache_storage, op);
    ...
    }

    The caller holds a reference on the operation, and will invoke
    fscache_put_operation() when the processor function returns. The processor
    function is at liberty to call fscache_enqueue_operation() or to take extra
    references.

    Signed-off-by: David Howells
    Acked-by: Steve Dickson
    Acked-by: Trond Myklebust
    Acked-by: Al Viro
    Tested-by: Daire Byrne

    David Howells
     
  • Implement the cache object management state machine.

    The following documentation is added to illuminate the working of this state
    machine. It will also be added as:

    Documentation/filesystems/caching/object.txt

    ====================================================
    IN-KERNEL CACHE OBJECT REPRESENTATION AND MANAGEMENT
    ====================================================

    ==============
    REPRESENTATION
    ==============

    FS-Cache maintains an in-kernel representation of each object that a netfs is
    currently interested in. Such objects are represented by the fscache_cookie
    struct and are referred to as cookies.

    FS-Cache also maintains a separate in-kernel representation of the objects that
    a cache backend is currently actively caching. Such objects are represented by
    the fscache_object struct. The cache backends allocate these upon request, and
    are expected to embed them in their own representations. These are referred to
    as objects.

    There is a 1:N relationship between cookies and objects. A cookie may be
    represented by multiple objects - an index may exist in more than one cache -
    or even by no objects (it may not be cached).

    Furthermore, both cookies and objects are hierarchical. The two hierarchies
    correspond, but the cookies tree is a superset of the union of the object trees
    of multiple caches:

    NETFS INDEX TREE : CACHE 1 : CACHE 2
    : :
    : +-----------+ :
    +----------->| IObject | :
    +-----------+ | : +-----------+ :
    | ICookie |-------+ : | :
    +-----------+ | : | : +-----------+
    | +------------------------------>| IObject |
    | : | : +-----------+
    | : V : |
    | : +-----------+ : |
    V +----------->| IObject | : |
    +-----------+ | : +-----------+ : |
    | ICookie |-------+ : | : V
    +-----------+ | : | : +-----------+
    | +------------------------------>| IObject |
    +-----+-----+ : | : +-----------+
    | | : | : |
    V | : V : |
    +-----------+ | : +-----------+ : |
    | ICookie |------------------------->| IObject | : |
    +-----------+ | : +-----------+ : |
    | V : | : V
    | +-----------+ : | : +-----------+
    | | ICookie |-------------------------------->| IObject |
    | +-----------+ : | : +-----------+
    V | : V : |
    +-----------+ | : +-----------+ : |
    | DCookie |------------------------->| DObject | : |
    +-----------+ | : +-----------+ : |
    | : : |
    +-------+-------+ : : |
    | | : : |
    V V : : V
    +-----------+ +-----------+ : : +-----------+
    | DCookie | | DCookie |------------------------>| DObject |
    +-----------+ +-----------+ : : +-----------+
    : :

    In the above illustration, ICookie and IObject represent indices and DCookie
    and DObject represent data storage objects. Indices may have representation in
    multiple caches, but currently, non-index objects may not. Objects of any type
    may also be entirely unrepresented.

    As far as the netfs API goes, the netfs is only actually permitted to see
    pointers to the cookies. The cookies themselves and any objects attached to
    those cookies are hidden from it.

    ===============================
    OBJECT MANAGEMENT STATE MACHINE
    ===============================

    Within FS-Cache, each active object is managed by its own individual state
    machine. The state for an object is kept in the fscache_object struct, in
    object->state. A cookie may point to a set of objects that are in different
    states.

    Each state has an action associated with it that is invoked when the machine
    wakes up in that state. There are four logical sets of states:

    (1) Preparation: states that wait for the parent objects to become ready. The
    representations are hierarchical, and it is expected that an object must
    be created or accessed with respect to its parent object.

    (2) Initialisation: states that perform lookups in the cache and validate
    what's found and that create on disk any missing metadata.

    (3) Normal running: states that allow netfs operations on objects to proceed
    and that update the state of objects.

    (4) Termination: states that detach objects from their netfs cookies, that
    delete objects from disk, that handle disk and system errors and that free
    up in-memory resources.

    In most cases, transitioning between states is in response to signalled events.
    When a state has finished processing, it will usually set the mask of events in
    which it is interested (object->event_mask) and relinquish the worker thread.
    Then when an event is raised (by calling fscache_raise_event()), if the event
    is not masked, the object will be queued for processing (by calling
    fscache_enqueue_object()).

    PROVISION OF CPU TIME
    ---------------------

    The work to be done by the various states is given CPU time by the threads of
    the slow work facility (see Documentation/slow-work.txt). This is used in
    preference to the workqueue facility because:

    (1) Threads may be completely occupied for very long periods of time by a
    particular work item. These state actions may be doing sequences of
    synchronous, journalled disk accesses (lookup, mkdir, create, setxattr,
    getxattr, truncate, unlink, rmdir, rename).

    (2) Threads may do little actual work, but may rather spend a lot of time
    sleeping on I/O. This means that single-threaded and 1-per-CPU-threaded
    workqueues don't necessarily have the right numbers of threads.

    LOCKING SIMPLIFICATION
    ----------------------

    Because only one worker thread may be operating on any particular object's
    state machine at once, this simplifies the locking, particularly with respect
    to disconnecting the netfs's representation of a cache object (fscache_cookie)
    from the cache backend's representation (fscache_object) - which may be
    requested from either end.

    =================
    THE SET OF STATES
    =================

    The object state machine has a set of states that it can be in. There are
    preparation states in which the object sets itself up and waits for its parent
    object to transit to a state that allows access to its children:

    (1) State FSCACHE_OBJECT_INIT.

    Initialise the object and wait for the parent object to become active. In
    the cache, it is expected that it will not be possible to look an object
    up from the parent object, until that parent object itself has been looked
    up.

    There are initialisation states in which the object sets itself up and accesses
    disk for the object metadata:

    (2) State FSCACHE_OBJECT_LOOKING_UP.

    Look up the object on disk, using the parent as a starting point.
    FS-Cache expects the cache backend to probe the cache to see whether this
    object is represented there, and if it is, to see if it's valid (coherency
    management).

    The cache should call fscache_object_lookup_negative() to indicate lookup
    failure for whatever reason, and should call fscache_obtained_object() to
    indicate success.

    At the completion of lookup, FS-Cache will let the netfs go ahead with
    read operations, no matter whether the file is yet cached. If not yet
    cached, read operations will be immediately rejected with ENODATA until
    the first known page is uncached - as to that point there can be no data
    to be read out of the cache for that file that isn't currently also held
    in the pagecache.

    (3) State FSCACHE_OBJECT_CREATING.

    Create an object on disk, using the parent as a starting point. This
    happens if the lookup failed to find the object, or if the object's
    coherency data indicated what's on disk is out of date. In this state,
    FS-Cache expects the cache to create

    The cache should call fscache_obtained_object() if creation completes
    successfully, fscache_object_lookup_negative() otherwise.

    At the completion of creation, FS-Cache will start processing write
    operations the netfs has queued for an object. If creation failed, the
    write ops will be transparently discarded, and nothing recorded in the
    cache.

    There are some normal running states in which the object spends its time
    servicing netfs requests:

    (4) State FSCACHE_OBJECT_AVAILABLE.

    A transient state in which pending operations are started, child objects
    are permitted to advance from FSCACHE_OBJECT_INIT state, and temporary
    lookup data is freed.

    (5) State FSCACHE_OBJECT_ACTIVE.

    The normal running state. In this state, requests the netfs makes will be
    passed on to the cache.

    (6) State FSCACHE_OBJECT_UPDATING.

    The state machine comes here to update the object in the cache from the
    netfs's records. This involves updating the auxiliary data that is used
    to maintain coherency.

    And there are terminal states in which an object cleans itself up, deallocates
    memory and potentially deletes stuff from disk:

    (7) State FSCACHE_OBJECT_LC_DYING.

    The object comes here if it is dying because of a lookup or creation
    error. This would be due to a disk error or system error of some sort.
    Temporary data is cleaned up, and the parent is released.

    (8) State FSCACHE_OBJECT_DYING.

    The object comes here if it is dying due to an error, because its parent
    cookie has been relinquished by the netfs or because the cache is being
    withdrawn.

    Any child objects waiting on this one are given CPU time so that they too
    can destroy themselves. This object waits for all its children to go away
    before advancing to the next state.

    (9) State FSCACHE_OBJECT_ABORT_INIT.

    The object comes to this state if it was waiting on its parent in
    FSCACHE_OBJECT_INIT, but its parent died. The object will destroy itself
    so that the parent may proceed from the FSCACHE_OBJECT_DYING state.

    (10) State FSCACHE_OBJECT_RELEASING.
    (11) State FSCACHE_OBJECT_RECYCLING.

    The object comes to one of these two states when dying once it is rid of
    all its children, if it is dying because the netfs relinquished its
    cookie. In the first state, the cached data is expected to persist, and
    in the second it will be deleted.

    (12) State FSCACHE_OBJECT_WITHDRAWING.

    The object transits to this state if the cache decides it wants to
    withdraw the object from service, perhaps to make space, but also due to
    error or just because the whole cache is being withdrawn.

    (13) State FSCACHE_OBJECT_DEAD.

    The object transits to this state when the in-memory object record is
    ready to be deleted. The object processor shouldn't ever see an object in
    this state.

    THE SET OF EVENTS
    -----------------

    There are a number of events that can be raised to an object state machine:

    (*) FSCACHE_OBJECT_EV_UPDATE

    The netfs requested that an object be updated. The state machine will ask
    the cache backend to update the object, and the cache backend will ask the
    netfs for details of the change through its cookie definition ops.

    (*) FSCACHE_OBJECT_EV_CLEARED

    This is signalled in two circumstances:

    (a) when an object's last child object is dropped and

    (b) when the last operation outstanding on an object is completed.

    This is used to proceed from the dying state.

    (*) FSCACHE_OBJECT_EV_ERROR

    This is signalled when an I/O error occurs during the processing of some
    object.

    (*) FSCACHE_OBJECT_EV_RELEASE
    (*) FSCACHE_OBJECT_EV_RETIRE

    These are signalled when the netfs relinquishes a cookie it was using.
    The event selected depends on whether the netfs asks for the backing
    object to be retired (deleted) or retained.

    (*) FSCACHE_OBJECT_EV_WITHDRAW

    This is signalled when the cache backend wants to withdraw an object.
    This means that the object will have to be detached from the netfs's
    cookie.

    Because the withdrawing releasing/retiring events are all handled by the object
    state machine, it doesn't matter if there's a collision with both ends trying
    to sever the connection at the same time. The state machine can just pick
    which one it wants to honour, and that effects the other.

    Signed-off-by: David Howells
    Acked-by: Steve Dickson
    Acked-by: Trond Myklebust
    Acked-by: Al Viro
    Tested-by: Daire Byrne

    David Howells
     
  • Add helpers for use with wait_on_bit().

    Signed-off-by: David Howells
    Acked-by: Steve Dickson
    Acked-by: Trond Myklebust
    Acked-by: Al Viro
    Tested-by: Daire Byrne

    David Howells
     
  • Provide a slab from which can be allocated the FS-Cache cookies that will be
    presented to the netfs.

    Also provide a slab constructor and a function to recursively discard a cookie
    and its ancestor chain.

    Signed-off-by: David Howells
    Acked-by: Steve Dickson
    Acked-by: Trond Myklebust
    Acked-by: Al Viro
    Tested-by: Daire Byrne

    David Howells