1 // SPDX-License-Identifier: GPL-2.0+
2 /*
3 * linux/fs/jbd2/commit.c
4 *
5 * Written by Stephen C. Tweedie <sct@redhat.com>, 1998
6 *
7 * Copyright 1998 Red Hat corp --- All Rights Reserved
8 *
9 * Journal commit routines for the generic filesystem journaling code;
10 * part of the ext2fs journaling system.
11 */
12
13 #include <linux/time.h>
14 #include <linux/fs.h>
15 #include <linux/jbd2.h>
16 #include <linux/errno.h>
17 #include <linux/slab.h>
18 #include <linux/mm.h>
19 #include <linux/pagemap.h>
20 #include <linux/jiffies.h>
21 #include <linux/crc32.h>
22 #include <linux/writeback.h>
23 #include <linux/backing-dev.h>
24 #include <linux/bio.h>
25 #include <linux/blkdev.h>
26 #include <linux/bitops.h>
27 #include <trace/events/jbd2.h>
28
29 /*
30 * IO end handler for temporary buffer_heads handling writes to the journal.
31 */
journal_end_buffer_io_sync(struct buffer_head * bh,int uptodate)32 static void journal_end_buffer_io_sync(struct buffer_head *bh, int uptodate)
33 {
34 struct buffer_head *orig_bh = bh->b_private;
35
36 BUFFER_TRACE(bh, "");
37 if (uptodate)
38 set_buffer_uptodate(bh);
39 else
40 clear_buffer_uptodate(bh);
41 if (orig_bh) {
42 clear_bit_unlock(BH_Shadow, &orig_bh->b_state);
43 smp_mb__after_atomic();
44 wake_up_bit(&orig_bh->b_state, BH_Shadow);
45 }
46 unlock_buffer(bh);
47 }
48
49 /*
50 * When an ext4 file is truncated, it is possible that some pages are not
51 * successfully freed, because they are attached to a committing transaction.
52 * After the transaction commits, these pages are left on the LRU, with no
53 * ->mapping, and with attached buffers. These pages are trivially reclaimable
54 * by the VM, but their apparent absence upsets the VM accounting, and it makes
55 * the numbers in /proc/meminfo look odd.
56 *
57 * So here, we have a buffer which has just come off the forget list. Look to
58 * see if we can strip all buffers from the backing page.
59 *
60 * Called under lock_journal(), and possibly under journal_datalist_lock. The
61 * caller provided us with a ref against the buffer, and we drop that here.
62 */
release_buffer_page(struct buffer_head * bh)63 static void release_buffer_page(struct buffer_head *bh)
64 {
65 struct folio *folio;
66
67 if (buffer_dirty(bh))
68 goto nope;
69 if (atomic_read(&bh->b_count) != 1)
70 goto nope;
71 folio = bh->b_folio;
72 if (folio->mapping)
73 goto nope;
74
75 /* OK, it's a truncated page */
76 if (!folio_trylock(folio))
77 goto nope;
78
79 folio_get(folio);
80 __brelse(bh);
81 try_to_free_buffers(folio);
82 folio_unlock(folio);
83 folio_put(folio);
84 return;
85
86 nope:
87 __brelse(bh);
88 }
89
jbd2_commit_block_csum_set(journal_t * j,struct buffer_head * bh)90 static void jbd2_commit_block_csum_set(journal_t *j, struct buffer_head *bh)
91 {
92 struct commit_header *h;
93 __u32 csum;
94
95 if (!jbd2_journal_has_csum_v2or3(j))
96 return;
97
98 h = (struct commit_header *)(bh->b_data);
99 h->h_chksum_type = 0;
100 h->h_chksum_size = 0;
101 h->h_chksum[0] = 0;
102 csum = jbd2_chksum(j, j->j_csum_seed, bh->b_data, j->j_blocksize);
103 h->h_chksum[0] = cpu_to_be32(csum);
104 }
105
106 /*
107 * Done it all: now submit the commit record. We should have
108 * cleaned up our previous buffers by now, so if we are in abort
109 * mode we can now just skip the rest of the journal write
110 * entirely.
111 *
112 * Returns 1 if the journal needs to be aborted or 0 on success
113 */
journal_submit_commit_record(journal_t * journal,transaction_t * commit_transaction,struct buffer_head ** cbh,__u32 crc32_sum)114 static int journal_submit_commit_record(journal_t *journal,
115 transaction_t *commit_transaction,
116 struct buffer_head **cbh,
117 __u32 crc32_sum)
118 {
119 struct commit_header *tmp;
120 struct buffer_head *bh;
121 struct timespec64 now;
122 blk_opf_t write_flags = REQ_OP_WRITE | JBD2_JOURNAL_REQ_FLAGS;
123
124 *cbh = NULL;
125
126 if (is_journal_aborted(journal))
127 return 0;
128
129 bh = jbd2_journal_get_descriptor_buffer(commit_transaction,
130 JBD2_COMMIT_BLOCK);
131 if (!bh)
132 return 1;
133
134 tmp = (struct commit_header *)bh->b_data;
135 ktime_get_coarse_real_ts64(&now);
136 tmp->h_commit_sec = cpu_to_be64(now.tv_sec);
137 tmp->h_commit_nsec = cpu_to_be32(now.tv_nsec);
138
139 if (jbd2_has_feature_checksum(journal)) {
140 tmp->h_chksum_type = JBD2_CRC32_CHKSUM;
141 tmp->h_chksum_size = JBD2_CRC32_CHKSUM_SIZE;
142 tmp->h_chksum[0] = cpu_to_be32(crc32_sum);
143 }
144 jbd2_commit_block_csum_set(journal, bh);
145
146 BUFFER_TRACE(bh, "submit commit block");
147 lock_buffer(bh);
148 clear_buffer_dirty(bh);
149 set_buffer_uptodate(bh);
150 bh->b_end_io = journal_end_buffer_io_sync;
151
152 if (journal->j_flags & JBD2_BARRIER &&
153 !jbd2_has_feature_async_commit(journal))
154 write_flags |= REQ_PREFLUSH | REQ_FUA;
155
156 submit_bh(write_flags, bh);
157 *cbh = bh;
158 return 0;
159 }
160
161 /*
162 * This function along with journal_submit_commit_record
163 * allows to write the commit record asynchronously.
164 */
journal_wait_on_commit_record(journal_t * journal,struct buffer_head * bh)165 static int journal_wait_on_commit_record(journal_t *journal,
166 struct buffer_head *bh)
167 {
168 int ret = 0;
169
170 clear_buffer_dirty(bh);
171 wait_on_buffer(bh);
172
173 if (unlikely(!buffer_uptodate(bh)))
174 ret = -EIO;
175 put_bh(bh); /* One for getblk() */
176
177 return ret;
178 }
179
180 /* Send all the data buffers related to an inode */
jbd2_submit_inode_data(journal_t * journal,struct jbd2_inode * jinode)181 int jbd2_submit_inode_data(journal_t *journal, struct jbd2_inode *jinode)
182 {
183 if (!jinode || !(jinode->i_flags & JI_WRITE_DATA))
184 return 0;
185
186 trace_jbd2_submit_inode_data(jinode->i_vfs_inode);
187 return journal->j_submit_inode_data_buffers(jinode);
188
189 }
190 EXPORT_SYMBOL(jbd2_submit_inode_data);
191
jbd2_wait_inode_data(journal_t * journal,struct jbd2_inode * jinode)192 int jbd2_wait_inode_data(journal_t *journal, struct jbd2_inode *jinode)
193 {
194 if (!jinode || !(jinode->i_flags & JI_WAIT_DATA) ||
195 !jinode->i_vfs_inode || !jinode->i_vfs_inode->i_mapping)
196 return 0;
197 return filemap_fdatawait_range_keep_errors(
198 jinode->i_vfs_inode->i_mapping, jinode->i_dirty_start,
199 jinode->i_dirty_end);
200 }
201 EXPORT_SYMBOL(jbd2_wait_inode_data);
202
203 /*
204 * Submit all the data buffers of inode associated with the transaction to
205 * disk.
206 *
207 * We are in a committing transaction. Therefore no new inode can be added to
208 * our inode list. We use JI_COMMIT_RUNNING flag to protect inode we currently
209 * operate on from being released while we write out pages.
210 */
journal_submit_data_buffers(journal_t * journal,transaction_t * commit_transaction)211 static int journal_submit_data_buffers(journal_t *journal,
212 transaction_t *commit_transaction)
213 {
214 struct jbd2_inode *jinode;
215 int err, ret = 0;
216
217 spin_lock(&journal->j_list_lock);
218 list_for_each_entry(jinode, &commit_transaction->t_inode_list, i_list) {
219 if (!(jinode->i_flags & JI_WRITE_DATA))
220 continue;
221 jinode->i_flags |= JI_COMMIT_RUNNING;
222 spin_unlock(&journal->j_list_lock);
223 /* submit the inode data buffers. */
224 trace_jbd2_submit_inode_data(jinode->i_vfs_inode);
225 if (journal->j_submit_inode_data_buffers) {
226 err = journal->j_submit_inode_data_buffers(jinode);
227 if (!ret)
228 ret = err;
229 }
230 spin_lock(&journal->j_list_lock);
231 J_ASSERT(jinode->i_transaction == commit_transaction);
232 jinode->i_flags &= ~JI_COMMIT_RUNNING;
233 smp_mb();
234 wake_up_bit(&jinode->i_flags, __JI_COMMIT_RUNNING);
235 }
236 spin_unlock(&journal->j_list_lock);
237 return ret;
238 }
239
jbd2_journal_finish_inode_data_buffers(struct jbd2_inode * jinode)240 int jbd2_journal_finish_inode_data_buffers(struct jbd2_inode *jinode)
241 {
242 struct address_space *mapping = jinode->i_vfs_inode->i_mapping;
243
244 return filemap_fdatawait_range_keep_errors(mapping,
245 jinode->i_dirty_start,
246 jinode->i_dirty_end);
247 }
248
249 /*
250 * Wait for data submitted for writeout, refile inodes to proper
251 * transaction if needed.
252 *
253 */
journal_finish_inode_data_buffers(journal_t * journal,transaction_t * commit_transaction)254 static int journal_finish_inode_data_buffers(journal_t *journal,
255 transaction_t *commit_transaction)
256 {
257 struct jbd2_inode *jinode, *next_i;
258 int err, ret = 0;
259
260 /* For locking, see the comment in journal_submit_data_buffers() */
261 spin_lock(&journal->j_list_lock);
262 list_for_each_entry(jinode, &commit_transaction->t_inode_list, i_list) {
263 if (!(jinode->i_flags & JI_WAIT_DATA))
264 continue;
265 jinode->i_flags |= JI_COMMIT_RUNNING;
266 spin_unlock(&journal->j_list_lock);
267 /* wait for the inode data buffers writeout. */
268 if (journal->j_finish_inode_data_buffers) {
269 err = journal->j_finish_inode_data_buffers(jinode);
270 if (!ret)
271 ret = err;
272 }
273 cond_resched();
274 spin_lock(&journal->j_list_lock);
275 jinode->i_flags &= ~JI_COMMIT_RUNNING;
276 smp_mb();
277 wake_up_bit(&jinode->i_flags, __JI_COMMIT_RUNNING);
278 }
279
280 /* Now refile inode to proper lists */
281 list_for_each_entry_safe(jinode, next_i,
282 &commit_transaction->t_inode_list, i_list) {
283 list_del(&jinode->i_list);
284 if (jinode->i_next_transaction) {
285 jinode->i_transaction = jinode->i_next_transaction;
286 jinode->i_next_transaction = NULL;
287 list_add(&jinode->i_list,
288 &jinode->i_transaction->t_inode_list);
289 } else {
290 jinode->i_transaction = NULL;
291 jinode->i_dirty_start = 0;
292 jinode->i_dirty_end = 0;
293 }
294 }
295 spin_unlock(&journal->j_list_lock);
296
297 return ret;
298 }
299
jbd2_checksum_data(__u32 crc32_sum,struct buffer_head * bh)300 static __u32 jbd2_checksum_data(__u32 crc32_sum, struct buffer_head *bh)
301 {
302 char *addr;
303 __u32 checksum;
304
305 addr = kmap_local_folio(bh->b_folio, bh_offset(bh));
306 checksum = crc32_be(crc32_sum, addr, bh->b_size);
307 kunmap_local(addr);
308
309 return checksum;
310 }
311
write_tag_block(journal_t * j,journal_block_tag_t * tag,unsigned long long block)312 static void write_tag_block(journal_t *j, journal_block_tag_t *tag,
313 unsigned long long block)
314 {
315 tag->t_blocknr = cpu_to_be32(block & (u32)~0);
316 if (jbd2_has_feature_64bit(j))
317 tag->t_blocknr_high = cpu_to_be32((block >> 31) >> 1);
318 }
319
jbd2_block_tag_csum_set(journal_t * j,journal_block_tag_t * tag,struct buffer_head * bh,__u32 sequence)320 static void jbd2_block_tag_csum_set(journal_t *j, journal_block_tag_t *tag,
321 struct buffer_head *bh, __u32 sequence)
322 {
323 journal_block_tag3_t *tag3 = (journal_block_tag3_t *)tag;
324 __u8 *addr;
325 __u32 csum32;
326 __be32 seq;
327
328 if (!jbd2_journal_has_csum_v2or3(j))
329 return;
330
331 seq = cpu_to_be32(sequence);
332 addr = kmap_local_folio(bh->b_folio, bh_offset(bh));
333 csum32 = jbd2_chksum(j, j->j_csum_seed, (__u8 *)&seq, sizeof(seq));
334 csum32 = jbd2_chksum(j, csum32, addr, bh->b_size);
335 kunmap_local(addr);
336
337 if (jbd2_has_feature_csum3(j))
338 tag3->t_checksum = cpu_to_be32(csum32);
339 else
340 tag->t_checksum = cpu_to_be16(csum32);
341 }
342 /*
343 * jbd2_journal_commit_transaction
344 *
345 * The primary function for committing a transaction to the log. This
346 * function is called by the journal thread to begin a complete commit.
347 */
jbd2_journal_commit_transaction(journal_t * journal)348 void jbd2_journal_commit_transaction(journal_t *journal)
349 {
350 struct transaction_stats_s stats;
351 transaction_t *commit_transaction;
352 struct journal_head *jh;
353 struct buffer_head *descriptor;
354 struct buffer_head **wbuf = journal->j_wbuf;
355 int bufs;
356 int flags;
357 int err;
358 unsigned long long blocknr;
359 ktime_t start_time;
360 u64 commit_time;
361 char *tagp = NULL;
362 journal_block_tag_t *tag = NULL;
363 int space_left = 0;
364 int first_tag = 0;
365 int tag_flag;
366 int i;
367 int tag_bytes = journal_tag_bytes(journal);
368 struct buffer_head *cbh = NULL; /* For transactional checksums */
369 __u32 crc32_sum = ~0;
370 struct blk_plug plug;
371 /* Tail of the journal */
372 unsigned long first_block;
373 tid_t first_tid;
374 int update_tail;
375 int csum_size = 0;
376 LIST_HEAD(io_bufs);
377 LIST_HEAD(log_bufs);
378
379 if (jbd2_journal_has_csum_v2or3(journal))
380 csum_size = sizeof(struct jbd2_journal_block_tail);
381
382 /*
383 * First job: lock down the current transaction and wait for
384 * all outstanding updates to complete.
385 */
386
387 /* Do we need to erase the effects of a prior jbd2_journal_flush? */
388 if (journal->j_flags & JBD2_FLUSHED) {
389 jbd2_debug(3, "super block updated\n");
390 mutex_lock_io(&journal->j_checkpoint_mutex);
391 /*
392 * We hold j_checkpoint_mutex so tail cannot change under us.
393 * We don't need any special data guarantees for writing sb
394 * since journal is empty and it is ok for write to be
395 * flushed only with transaction commit.
396 */
397 jbd2_journal_update_sb_log_tail(journal,
398 journal->j_tail_sequence,
399 journal->j_tail, 0);
400 mutex_unlock(&journal->j_checkpoint_mutex);
401 } else {
402 jbd2_debug(3, "superblock not updated\n");
403 }
404
405 J_ASSERT(journal->j_running_transaction != NULL);
406 J_ASSERT(journal->j_committing_transaction == NULL);
407
408 write_lock(&journal->j_state_lock);
409 journal->j_flags |= JBD2_FULL_COMMIT_ONGOING;
410 while (journal->j_flags & JBD2_FAST_COMMIT_ONGOING) {
411 DEFINE_WAIT(wait);
412
413 prepare_to_wait(&journal->j_fc_wait, &wait,
414 TASK_UNINTERRUPTIBLE);
415 write_unlock(&journal->j_state_lock);
416 schedule();
417 write_lock(&journal->j_state_lock);
418 finish_wait(&journal->j_fc_wait, &wait);
419 /*
420 * TODO: by blocking fast commits here, we are increasing
421 * fsync() latency slightly. Strictly speaking, we don't need
422 * to block fast commits until the transaction enters T_FLUSH
423 * state. So an optimization is possible where we block new fast
424 * commits here and wait for existing ones to complete
425 * just before we enter T_FLUSH. That way, the existing fast
426 * commits and this full commit can proceed parallely.
427 */
428 }
429 write_unlock(&journal->j_state_lock);
430
431 commit_transaction = journal->j_running_transaction;
432
433 trace_jbd2_start_commit(journal, commit_transaction);
434 jbd2_debug(1, "JBD2: starting commit of transaction %d\n",
435 commit_transaction->t_tid);
436
437 write_lock(&journal->j_state_lock);
438 journal->j_fc_off = 0;
439 J_ASSERT(commit_transaction->t_state == T_RUNNING);
440 commit_transaction->t_state = T_LOCKED;
441
442 trace_jbd2_commit_locking(journal, commit_transaction);
443 stats.run.rs_wait = commit_transaction->t_max_wait;
444 stats.run.rs_request_delay = 0;
445 stats.run.rs_locked = jiffies;
446 if (commit_transaction->t_requested)
447 stats.run.rs_request_delay =
448 jbd2_time_diff(commit_transaction->t_requested,
449 stats.run.rs_locked);
450 stats.run.rs_running = jbd2_time_diff(commit_transaction->t_start,
451 stats.run.rs_locked);
452
453 // waits for any t_updates to finish
454 jbd2_journal_wait_updates(journal);
455
456 commit_transaction->t_state = T_SWITCH;
457
458 J_ASSERT (atomic_read(&commit_transaction->t_outstanding_credits) <=
459 journal->j_max_transaction_buffers);
460
461 /*
462 * First thing we are allowed to do is to discard any remaining
463 * BJ_Reserved buffers. Note, it is _not_ permissible to assume
464 * that there are no such buffers: if a large filesystem
465 * operation like a truncate needs to split itself over multiple
466 * transactions, then it may try to do a jbd2_journal_restart() while
467 * there are still BJ_Reserved buffers outstanding. These must
468 * be released cleanly from the current transaction.
469 *
470 * In this case, the filesystem must still reserve write access
471 * again before modifying the buffer in the new transaction, but
472 * we do not require it to remember exactly which old buffers it
473 * has reserved. This is consistent with the existing behaviour
474 * that multiple jbd2_journal_get_write_access() calls to the same
475 * buffer are perfectly permissible.
476 * We use journal->j_state_lock here to serialize processing of
477 * t_reserved_list with eviction of buffers from journal_unmap_buffer().
478 */
479 while (commit_transaction->t_reserved_list) {
480 jh = commit_transaction->t_reserved_list;
481 JBUFFER_TRACE(jh, "reserved, unused: refile");
482 /*
483 * A jbd2_journal_get_undo_access()+jbd2_journal_release_buffer() may
484 * leave undo-committed data.
485 */
486 if (jh->b_committed_data) {
487 struct buffer_head *bh = jh2bh(jh);
488
489 spin_lock(&jh->b_state_lock);
490 jbd2_free(jh->b_committed_data, bh->b_size);
491 jh->b_committed_data = NULL;
492 spin_unlock(&jh->b_state_lock);
493 }
494 jbd2_journal_refile_buffer(journal, jh);
495 }
496
497 write_unlock(&journal->j_state_lock);
498 /*
499 * Now try to drop any written-back buffers from the journal's
500 * checkpoint lists. We do this *before* commit because it potentially
501 * frees some memory
502 */
503 spin_lock(&journal->j_list_lock);
504 __jbd2_journal_clean_checkpoint_list(journal, JBD2_SHRINK_BUSY_STOP);
505 spin_unlock(&journal->j_list_lock);
506
507 jbd2_debug(3, "JBD2: commit phase 1\n");
508
509 /*
510 * Clear revoked flag to reflect there is no revoked buffers
511 * in the next transaction which is going to be started.
512 */
513 jbd2_clear_buffer_revoked_flags(journal);
514
515 /*
516 * Switch to a new revoke table.
517 */
518 jbd2_journal_switch_revoke_table(journal);
519
520 write_lock(&journal->j_state_lock);
521 /*
522 * Reserved credits cannot be claimed anymore, free them
523 */
524 atomic_sub(atomic_read(&journal->j_reserved_credits),
525 &commit_transaction->t_outstanding_credits);
526
527 trace_jbd2_commit_flushing(journal, commit_transaction);
528 stats.run.rs_flushing = jiffies;
529 stats.run.rs_locked = jbd2_time_diff(stats.run.rs_locked,
530 stats.run.rs_flushing);
531
532 commit_transaction->t_state = T_FLUSH;
533 journal->j_committing_transaction = commit_transaction;
534 journal->j_running_transaction = NULL;
535 start_time = ktime_get();
536 commit_transaction->t_log_start = journal->j_head;
537 wake_up_all(&journal->j_wait_transaction_locked);
538 write_unlock(&journal->j_state_lock);
539
540 jbd2_debug(3, "JBD2: commit phase 2a\n");
541
542 /*
543 * Now start flushing things to disk, in the order they appear
544 * on the transaction lists. Data blocks go first.
545 */
546 err = journal_submit_data_buffers(journal, commit_transaction);
547 if (err)
548 jbd2_journal_abort(journal, err);
549
550 blk_start_plug(&plug);
551 jbd2_journal_write_revoke_records(commit_transaction, &log_bufs);
552
553 jbd2_debug(3, "JBD2: commit phase 2b\n");
554
555 /*
556 * Way to go: we have now written out all of the data for a
557 * transaction! Now comes the tricky part: we need to write out
558 * metadata. Loop over the transaction's entire buffer list:
559 */
560 write_lock(&journal->j_state_lock);
561 commit_transaction->t_state = T_COMMIT;
562 write_unlock(&journal->j_state_lock);
563
564 trace_jbd2_commit_logging(journal, commit_transaction);
565 stats.run.rs_logging = jiffies;
566 stats.run.rs_flushing = jbd2_time_diff(stats.run.rs_flushing,
567 stats.run.rs_logging);
568 stats.run.rs_blocks = commit_transaction->t_nr_buffers;
569 stats.run.rs_blocks_logged = 0;
570
571 J_ASSERT(commit_transaction->t_nr_buffers <=
572 atomic_read(&commit_transaction->t_outstanding_credits));
573
574 bufs = 0;
575 descriptor = NULL;
576 while (commit_transaction->t_buffers) {
577
578 /* Find the next buffer to be journaled... */
579
580 jh = commit_transaction->t_buffers;
581
582 /* If we're in abort mode, we just un-journal the buffer and
583 release it. */
584
585 if (is_journal_aborted(journal)) {
586 clear_buffer_jbddirty(jh2bh(jh));
587 JBUFFER_TRACE(jh, "journal is aborting: refile");
588 jbd2_buffer_abort_trigger(jh,
589 jh->b_frozen_data ?
590 jh->b_frozen_triggers :
591 jh->b_triggers);
592 jbd2_journal_refile_buffer(journal, jh);
593 /* If that was the last one, we need to clean up
594 * any descriptor buffers which may have been
595 * already allocated, even if we are now
596 * aborting. */
597 if (!commit_transaction->t_buffers)
598 goto start_journal_io;
599 continue;
600 }
601
602 /* Make sure we have a descriptor block in which to
603 record the metadata buffer. */
604
605 if (!descriptor) {
606 J_ASSERT (bufs == 0);
607
608 jbd2_debug(4, "JBD2: get descriptor\n");
609
610 descriptor = jbd2_journal_get_descriptor_buffer(
611 commit_transaction,
612 JBD2_DESCRIPTOR_BLOCK);
613 if (!descriptor) {
614 jbd2_journal_abort(journal, -EIO);
615 continue;
616 }
617
618 jbd2_debug(4, "JBD2: got buffer %llu (%p)\n",
619 (unsigned long long)descriptor->b_blocknr,
620 descriptor->b_data);
621 tagp = &descriptor->b_data[sizeof(journal_header_t)];
622 space_left = descriptor->b_size -
623 sizeof(journal_header_t);
624 first_tag = 1;
625 set_buffer_jwrite(descriptor);
626 set_buffer_dirty(descriptor);
627 wbuf[bufs++] = descriptor;
628
629 /* Record it so that we can wait for IO
630 completion later */
631 BUFFER_TRACE(descriptor, "ph3: file as descriptor");
632 jbd2_file_log_bh(&log_bufs, descriptor);
633 }
634
635 /* Where is the buffer to be written? */
636
637 err = jbd2_journal_next_log_block(journal, &blocknr);
638 /* If the block mapping failed, just abandon the buffer
639 and repeat this loop: we'll fall into the
640 refile-on-abort condition above. */
641 if (err) {
642 jbd2_journal_abort(journal, err);
643 continue;
644 }
645
646 /*
647 * start_this_handle() uses t_outstanding_credits to determine
648 * the free space in the log.
649 */
650 atomic_dec(&commit_transaction->t_outstanding_credits);
651
652 /* Bump b_count to prevent truncate from stumbling over
653 the shadowed buffer! @@@ This can go if we ever get
654 rid of the shadow pairing of buffers. */
655 atomic_inc(&jh2bh(jh)->b_count);
656
657 /*
658 * Make a temporary IO buffer with which to write it out
659 * (this will requeue the metadata buffer to BJ_Shadow).
660 */
661 set_bit(BH_JWrite, &jh2bh(jh)->b_state);
662 JBUFFER_TRACE(jh, "ph3: write metadata");
663 flags = jbd2_journal_write_metadata_buffer(commit_transaction,
664 jh, &wbuf[bufs], blocknr);
665 if (flags < 0) {
666 jbd2_journal_abort(journal, flags);
667 continue;
668 }
669 jbd2_file_log_bh(&io_bufs, wbuf[bufs]);
670
671 /* Record the new block's tag in the current descriptor
672 buffer */
673
674 tag_flag = 0;
675 if (flags & 1)
676 tag_flag |= JBD2_FLAG_ESCAPE;
677 if (!first_tag)
678 tag_flag |= JBD2_FLAG_SAME_UUID;
679
680 tag = (journal_block_tag_t *) tagp;
681 write_tag_block(journal, tag, jh2bh(jh)->b_blocknr);
682 tag->t_flags = cpu_to_be16(tag_flag);
683 jbd2_block_tag_csum_set(journal, tag, wbuf[bufs],
684 commit_transaction->t_tid);
685 tagp += tag_bytes;
686 space_left -= tag_bytes;
687 bufs++;
688
689 if (first_tag) {
690 memcpy (tagp, journal->j_uuid, 16);
691 tagp += 16;
692 space_left -= 16;
693 first_tag = 0;
694 }
695
696 /* If there's no more to do, or if the descriptor is full,
697 let the IO rip! */
698
699 if (bufs == journal->j_wbufsize ||
700 commit_transaction->t_buffers == NULL ||
701 space_left < tag_bytes + 16 + csum_size) {
702
703 jbd2_debug(4, "JBD2: Submit %d IOs\n", bufs);
704
705 /* Write an end-of-descriptor marker before
706 submitting the IOs. "tag" still points to
707 the last tag we set up. */
708
709 tag->t_flags |= cpu_to_be16(JBD2_FLAG_LAST_TAG);
710 start_journal_io:
711 if (descriptor)
712 jbd2_descriptor_block_csum_set(journal,
713 descriptor);
714
715 for (i = 0; i < bufs; i++) {
716 struct buffer_head *bh = wbuf[i];
717
718 /*
719 * Compute checksum.
720 */
721 if (jbd2_has_feature_checksum(journal)) {
722 crc32_sum =
723 jbd2_checksum_data(crc32_sum, bh);
724 }
725
726 lock_buffer(bh);
727 clear_buffer_dirty(bh);
728 set_buffer_uptodate(bh);
729 bh->b_end_io = journal_end_buffer_io_sync;
730 submit_bh(REQ_OP_WRITE | JBD2_JOURNAL_REQ_FLAGS,
731 bh);
732 }
733 cond_resched();
734
735 /* Force a new descriptor to be generated next
736 time round the loop. */
737 descriptor = NULL;
738 bufs = 0;
739 }
740 }
741
742 err = journal_finish_inode_data_buffers(journal, commit_transaction);
743 if (err) {
744 printk(KERN_WARNING
745 "JBD2: Detected IO errors while flushing file data "
746 "on %s\n", journal->j_devname);
747 if (journal->j_flags & JBD2_ABORT_ON_SYNCDATA_ERR)
748 jbd2_journal_abort(journal, err);
749 err = 0;
750 }
751
752 /*
753 * Get current oldest transaction in the log before we issue flush
754 * to the filesystem device. After the flush we can be sure that
755 * blocks of all older transactions are checkpointed to persistent
756 * storage and we will be safe to update journal start in the
757 * superblock with the numbers we get here.
758 */
759 update_tail =
760 jbd2_journal_get_log_tail(journal, &first_tid, &first_block);
761
762 write_lock(&journal->j_state_lock);
763 if (update_tail) {
764 long freed = first_block - journal->j_tail;
765
766 if (first_block < journal->j_tail)
767 freed += journal->j_last - journal->j_first;
768 /* Update tail only if we free significant amount of space */
769 if (freed < jbd2_journal_get_max_txn_bufs(journal))
770 update_tail = 0;
771 }
772 J_ASSERT(commit_transaction->t_state == T_COMMIT);
773 commit_transaction->t_state = T_COMMIT_DFLUSH;
774 write_unlock(&journal->j_state_lock);
775
776 /*
777 * If the journal is not located on the file system device,
778 * then we must flush the file system device before we issue
779 * the commit record
780 */
781 if (commit_transaction->t_need_data_flush &&
782 (journal->j_fs_dev != journal->j_dev) &&
783 (journal->j_flags & JBD2_BARRIER))
784 blkdev_issue_flush(journal->j_fs_dev);
785
786 /* Done it all: now write the commit record asynchronously. */
787 if (jbd2_has_feature_async_commit(journal)) {
788 err = journal_submit_commit_record(journal, commit_transaction,
789 &cbh, crc32_sum);
790 if (err)
791 jbd2_journal_abort(journal, err);
792 }
793
794 blk_finish_plug(&plug);
795
796 /* Lo and behold: we have just managed to send a transaction to
797 the log. Before we can commit it, wait for the IO so far to
798 complete. Control buffers being written are on the
799 transaction's t_log_list queue, and metadata buffers are on
800 the io_bufs list.
801
802 Wait for the buffers in reverse order. That way we are
803 less likely to be woken up until all IOs have completed, and
804 so we incur less scheduling load.
805 */
806
807 jbd2_debug(3, "JBD2: commit phase 3\n");
808
809 while (!list_empty(&io_bufs)) {
810 struct buffer_head *bh = list_entry(io_bufs.prev,
811 struct buffer_head,
812 b_assoc_buffers);
813
814 wait_on_buffer(bh);
815 cond_resched();
816
817 if (unlikely(!buffer_uptodate(bh)))
818 err = -EIO;
819 jbd2_unfile_log_bh(bh);
820 stats.run.rs_blocks_logged++;
821
822 /*
823 * The list contains temporary buffer heads created by
824 * jbd2_journal_write_metadata_buffer().
825 */
826 BUFFER_TRACE(bh, "dumping temporary bh");
827 __brelse(bh);
828 J_ASSERT_BH(bh, atomic_read(&bh->b_count) == 0);
829 free_buffer_head(bh);
830
831 /* We also have to refile the corresponding shadowed buffer */
832 jh = commit_transaction->t_shadow_list->b_tprev;
833 bh = jh2bh(jh);
834 clear_buffer_jwrite(bh);
835 J_ASSERT_BH(bh, buffer_jbddirty(bh));
836 J_ASSERT_BH(bh, !buffer_shadow(bh));
837
838 /* The metadata is now released for reuse, but we need
839 to remember it against this transaction so that when
840 we finally commit, we can do any checkpointing
841 required. */
842 JBUFFER_TRACE(jh, "file as BJ_Forget");
843 jbd2_journal_file_buffer(jh, commit_transaction, BJ_Forget);
844 JBUFFER_TRACE(jh, "brelse shadowed buffer");
845 __brelse(bh);
846 }
847
848 J_ASSERT (commit_transaction->t_shadow_list == NULL);
849
850 jbd2_debug(3, "JBD2: commit phase 4\n");
851
852 /* Here we wait for the revoke record and descriptor record buffers */
853 while (!list_empty(&log_bufs)) {
854 struct buffer_head *bh;
855
856 bh = list_entry(log_bufs.prev, struct buffer_head, b_assoc_buffers);
857 wait_on_buffer(bh);
858 cond_resched();
859
860 if (unlikely(!buffer_uptodate(bh)))
861 err = -EIO;
862
863 BUFFER_TRACE(bh, "ph5: control buffer writeout done: unfile");
864 clear_buffer_jwrite(bh);
865 jbd2_unfile_log_bh(bh);
866 stats.run.rs_blocks_logged++;
867 __brelse(bh); /* One for getblk */
868 /* AKPM: bforget here */
869 }
870
871 if (err)
872 jbd2_journal_abort(journal, err);
873
874 jbd2_debug(3, "JBD2: commit phase 5\n");
875 write_lock(&journal->j_state_lock);
876 J_ASSERT(commit_transaction->t_state == T_COMMIT_DFLUSH);
877 commit_transaction->t_state = T_COMMIT_JFLUSH;
878 write_unlock(&journal->j_state_lock);
879
880 if (!jbd2_has_feature_async_commit(journal)) {
881 err = journal_submit_commit_record(journal, commit_transaction,
882 &cbh, crc32_sum);
883 if (err)
884 jbd2_journal_abort(journal, err);
885 }
886 if (cbh)
887 err = journal_wait_on_commit_record(journal, cbh);
888 stats.run.rs_blocks_logged++;
889 if (jbd2_has_feature_async_commit(journal) &&
890 journal->j_flags & JBD2_BARRIER) {
891 blkdev_issue_flush(journal->j_dev);
892 }
893
894 if (err)
895 jbd2_journal_abort(journal, err);
896
897 WARN_ON_ONCE(
898 atomic_read(&commit_transaction->t_outstanding_credits) < 0);
899
900 /*
901 * Now disk caches for filesystem device are flushed so we are safe to
902 * erase checkpointed transactions from the log by updating journal
903 * superblock.
904 */
905 if (update_tail)
906 jbd2_update_log_tail(journal, first_tid, first_block);
907
908 /* End of a transaction! Finally, we can do checkpoint
909 processing: any buffers committed as a result of this
910 transaction can be removed from any checkpoint list it was on
911 before. */
912
913 jbd2_debug(3, "JBD2: commit phase 6\n");
914
915 J_ASSERT(list_empty(&commit_transaction->t_inode_list));
916 J_ASSERT(commit_transaction->t_buffers == NULL);
917 J_ASSERT(commit_transaction->t_checkpoint_list == NULL);
918 J_ASSERT(commit_transaction->t_shadow_list == NULL);
919
920 restart_loop:
921 /*
922 * As there are other places (journal_unmap_buffer()) adding buffers
923 * to this list we have to be careful and hold the j_list_lock.
924 */
925 spin_lock(&journal->j_list_lock);
926 while (commit_transaction->t_forget) {
927 transaction_t *cp_transaction;
928 struct buffer_head *bh;
929 int try_to_free = 0;
930 bool drop_ref;
931
932 jh = commit_transaction->t_forget;
933 spin_unlock(&journal->j_list_lock);
934 bh = jh2bh(jh);
935 /*
936 * Get a reference so that bh cannot be freed before we are
937 * done with it.
938 */
939 get_bh(bh);
940 spin_lock(&jh->b_state_lock);
941 J_ASSERT_JH(jh, jh->b_transaction == commit_transaction);
942
943 /*
944 * If there is undo-protected committed data against
945 * this buffer, then we can remove it now. If it is a
946 * buffer needing such protection, the old frozen_data
947 * field now points to a committed version of the
948 * buffer, so rotate that field to the new committed
949 * data.
950 *
951 * Otherwise, we can just throw away the frozen data now.
952 *
953 * We also know that the frozen data has already fired
954 * its triggers if they exist, so we can clear that too.
955 */
956 if (jh->b_committed_data) {
957 jbd2_free(jh->b_committed_data, bh->b_size);
958 jh->b_committed_data = NULL;
959 if (jh->b_frozen_data) {
960 jh->b_committed_data = jh->b_frozen_data;
961 jh->b_frozen_data = NULL;
962 jh->b_frozen_triggers = NULL;
963 }
964 } else if (jh->b_frozen_data) {
965 jbd2_free(jh->b_frozen_data, bh->b_size);
966 jh->b_frozen_data = NULL;
967 jh->b_frozen_triggers = NULL;
968 }
969
970 spin_lock(&journal->j_list_lock);
971 cp_transaction = jh->b_cp_transaction;
972 if (cp_transaction) {
973 JBUFFER_TRACE(jh, "remove from old cp transaction");
974 cp_transaction->t_chp_stats.cs_dropped++;
975 __jbd2_journal_remove_checkpoint(jh);
976 }
977
978 /* Only re-checkpoint the buffer_head if it is marked
979 * dirty. If the buffer was added to the BJ_Forget list
980 * by jbd2_journal_forget, it may no longer be dirty and
981 * there's no point in keeping a checkpoint record for
982 * it. */
983
984 /*
985 * A buffer which has been freed while still being journaled
986 * by a previous transaction, refile the buffer to BJ_Forget of
987 * the running transaction. If the just committed transaction
988 * contains "add to orphan" operation, we can completely
989 * invalidate the buffer now. We are rather through in that
990 * since the buffer may be still accessible when blocksize <
991 * pagesize and it is attached to the last partial page.
992 */
993 if (buffer_freed(bh) && !jh->b_next_transaction) {
994 struct address_space *mapping;
995
996 clear_buffer_freed(bh);
997 clear_buffer_jbddirty(bh);
998
999 /*
1000 * Block device buffers need to stay mapped all the
1001 * time, so it is enough to clear buffer_jbddirty and
1002 * buffer_freed bits. For the file mapping buffers (i.e.
1003 * journalled data) we need to unmap buffer and clear
1004 * more bits. We also need to be careful about the check
1005 * because the data page mapping can get cleared under
1006 * our hands. Note that if mapping == NULL, we don't
1007 * need to make buffer unmapped because the page is
1008 * already detached from the mapping and buffers cannot
1009 * get reused.
1010 */
1011 mapping = READ_ONCE(bh->b_folio->mapping);
1012 if (mapping && !sb_is_blkdev_sb(mapping->host->i_sb)) {
1013 clear_buffer_mapped(bh);
1014 clear_buffer_new(bh);
1015 clear_buffer_req(bh);
1016 bh->b_bdev = NULL;
1017 }
1018 }
1019
1020 if (buffer_jbddirty(bh)) {
1021 JBUFFER_TRACE(jh, "add to new checkpointing trans");
1022 __jbd2_journal_insert_checkpoint(jh, commit_transaction);
1023 if (is_journal_aborted(journal))
1024 clear_buffer_jbddirty(bh);
1025 } else {
1026 J_ASSERT_BH(bh, !buffer_dirty(bh));
1027 /*
1028 * The buffer on BJ_Forget list and not jbddirty means
1029 * it has been freed by this transaction and hence it
1030 * could not have been reallocated until this
1031 * transaction has committed. *BUT* it could be
1032 * reallocated once we have written all the data to
1033 * disk and before we process the buffer on BJ_Forget
1034 * list.
1035 */
1036 if (!jh->b_next_transaction)
1037 try_to_free = 1;
1038 }
1039 JBUFFER_TRACE(jh, "refile or unfile buffer");
1040 drop_ref = __jbd2_journal_refile_buffer(jh);
1041 spin_unlock(&jh->b_state_lock);
1042 if (drop_ref)
1043 jbd2_journal_put_journal_head(jh);
1044 if (try_to_free)
1045 release_buffer_page(bh); /* Drops bh reference */
1046 else
1047 __brelse(bh);
1048 cond_resched_lock(&journal->j_list_lock);
1049 }
1050 spin_unlock(&journal->j_list_lock);
1051 /*
1052 * This is a bit sleazy. We use j_list_lock to protect transition
1053 * of a transaction into T_FINISHED state and calling
1054 * __jbd2_journal_drop_transaction(). Otherwise we could race with
1055 * other checkpointing code processing the transaction...
1056 */
1057 write_lock(&journal->j_state_lock);
1058 spin_lock(&journal->j_list_lock);
1059 /*
1060 * Now recheck if some buffers did not get attached to the transaction
1061 * while the lock was dropped...
1062 */
1063 if (commit_transaction->t_forget) {
1064 spin_unlock(&journal->j_list_lock);
1065 write_unlock(&journal->j_state_lock);
1066 goto restart_loop;
1067 }
1068
1069 /* Add the transaction to the checkpoint list
1070 * __journal_remove_checkpoint() can not destroy transaction
1071 * under us because it is not marked as T_FINISHED yet */
1072 if (journal->j_checkpoint_transactions == NULL) {
1073 journal->j_checkpoint_transactions = commit_transaction;
1074 commit_transaction->t_cpnext = commit_transaction;
1075 commit_transaction->t_cpprev = commit_transaction;
1076 } else {
1077 commit_transaction->t_cpnext =
1078 journal->j_checkpoint_transactions;
1079 commit_transaction->t_cpprev =
1080 commit_transaction->t_cpnext->t_cpprev;
1081 commit_transaction->t_cpnext->t_cpprev =
1082 commit_transaction;
1083 commit_transaction->t_cpprev->t_cpnext =
1084 commit_transaction;
1085 }
1086 spin_unlock(&journal->j_list_lock);
1087
1088 /* Done with this transaction! */
1089
1090 jbd2_debug(3, "JBD2: commit phase 7\n");
1091
1092 J_ASSERT(commit_transaction->t_state == T_COMMIT_JFLUSH);
1093
1094 commit_transaction->t_start = jiffies;
1095 stats.run.rs_logging = jbd2_time_diff(stats.run.rs_logging,
1096 commit_transaction->t_start);
1097
1098 /*
1099 * File the transaction statistics
1100 */
1101 stats.ts_tid = commit_transaction->t_tid;
1102 stats.run.rs_handle_count =
1103 atomic_read(&commit_transaction->t_handle_count);
1104 trace_jbd2_run_stats(journal->j_fs_dev->bd_dev,
1105 commit_transaction->t_tid, &stats.run);
1106 stats.ts_requested = (commit_transaction->t_requested) ? 1 : 0;
1107
1108 commit_transaction->t_state = T_COMMIT_CALLBACK;
1109 J_ASSERT(commit_transaction == journal->j_committing_transaction);
1110 journal->j_commit_sequence = commit_transaction->t_tid;
1111 journal->j_committing_transaction = NULL;
1112 commit_time = ktime_to_ns(ktime_sub(ktime_get(), start_time));
1113
1114 /*
1115 * weight the commit time higher than the average time so we don't
1116 * react too strongly to vast changes in the commit time
1117 */
1118 if (likely(journal->j_average_commit_time))
1119 journal->j_average_commit_time = (commit_time +
1120 journal->j_average_commit_time*3) / 4;
1121 else
1122 journal->j_average_commit_time = commit_time;
1123
1124 write_unlock(&journal->j_state_lock);
1125
1126 if (journal->j_commit_callback)
1127 journal->j_commit_callback(journal, commit_transaction);
1128 if (journal->j_fc_cleanup_callback)
1129 journal->j_fc_cleanup_callback(journal, 1, commit_transaction->t_tid);
1130
1131 trace_jbd2_end_commit(journal, commit_transaction);
1132 jbd2_debug(1, "JBD2: commit %d complete, head %d\n",
1133 journal->j_commit_sequence, journal->j_tail_sequence);
1134
1135 write_lock(&journal->j_state_lock);
1136 journal->j_flags &= ~JBD2_FULL_COMMIT_ONGOING;
1137 journal->j_flags &= ~JBD2_FAST_COMMIT_ONGOING;
1138 spin_lock(&journal->j_list_lock);
1139 commit_transaction->t_state = T_FINISHED;
1140 /* Check if the transaction can be dropped now that we are finished */
1141 if (commit_transaction->t_checkpoint_list == NULL) {
1142 __jbd2_journal_drop_transaction(journal, commit_transaction);
1143 jbd2_journal_free_transaction(commit_transaction);
1144 }
1145 spin_unlock(&journal->j_list_lock);
1146 write_unlock(&journal->j_state_lock);
1147 wake_up(&journal->j_wait_done_commit);
1148 wake_up(&journal->j_fc_wait);
1149
1150 /*
1151 * Calculate overall stats
1152 */
1153 spin_lock(&journal->j_history_lock);
1154 journal->j_stats.ts_tid++;
1155 journal->j_stats.ts_requested += stats.ts_requested;
1156 journal->j_stats.run.rs_wait += stats.run.rs_wait;
1157 journal->j_stats.run.rs_request_delay += stats.run.rs_request_delay;
1158 journal->j_stats.run.rs_running += stats.run.rs_running;
1159 journal->j_stats.run.rs_locked += stats.run.rs_locked;
1160 journal->j_stats.run.rs_flushing += stats.run.rs_flushing;
1161 journal->j_stats.run.rs_logging += stats.run.rs_logging;
1162 journal->j_stats.run.rs_handle_count += stats.run.rs_handle_count;
1163 journal->j_stats.run.rs_blocks += stats.run.rs_blocks;
1164 journal->j_stats.run.rs_blocks_logged += stats.run.rs_blocks_logged;
1165 spin_unlock(&journal->j_history_lock);
1166 }
1167