Linux Audio

Check our new training course

Loading...
v6.8
   1// SPDX-License-Identifier: GPL-2.0-only
   2/*
   3 * Copyright (C) 2001-2002 Sistina Software (UK) Limited.
   4 *
   5 * This file is released under the GPL.
   6 */
   7
   8#include <linux/blkdev.h>
   9#include <linux/device-mapper.h>
  10#include <linux/delay.h>
  11#include <linux/fs.h>
  12#include <linux/init.h>
  13#include <linux/kdev_t.h>
  14#include <linux/list.h>
  15#include <linux/list_bl.h>
  16#include <linux/mempool.h>
  17#include <linux/module.h>
  18#include <linux/slab.h>
  19#include <linux/vmalloc.h>
  20#include <linux/log2.h>
  21#include <linux/dm-kcopyd.h>
  22
  23#include "dm.h"
  24
  25#include "dm-exception-store.h"
  26
  27#define DM_MSG_PREFIX "snapshots"
  28
  29static const char dm_snapshot_merge_target_name[] = "snapshot-merge";
  30
  31#define dm_target_is_snapshot_merge(ti) \
  32	((ti)->type->name == dm_snapshot_merge_target_name)
  33
  34/*
  35 * The size of the mempool used to track chunks in use.
  36 */
  37#define MIN_IOS 256
  38
  39#define DM_TRACKED_CHUNK_HASH_SIZE	16
  40#define DM_TRACKED_CHUNK_HASH(x)	((unsigned long)(x) & \
  41					 (DM_TRACKED_CHUNK_HASH_SIZE - 1))
  42
  43struct dm_exception_table {
  44	uint32_t hash_mask;
  45	unsigned int hash_shift;
  46	struct hlist_bl_head *table;
  47};
  48
  49struct dm_snapshot {
  50	struct rw_semaphore lock;
  51
  52	struct dm_dev *origin;
  53	struct dm_dev *cow;
  54
  55	struct dm_target *ti;
  56
  57	/* List of snapshots per Origin */
  58	struct list_head list;
  59
  60	/*
  61	 * You can't use a snapshot if this is 0 (e.g. if full).
  62	 * A snapshot-merge target never clears this.
  63	 */
  64	int valid;
  65
  66	/*
  67	 * The snapshot overflowed because of a write to the snapshot device.
  68	 * We don't have to invalidate the snapshot in this case, but we need
  69	 * to prevent further writes.
  70	 */
  71	int snapshot_overflowed;
  72
  73	/* Origin writes don't trigger exceptions until this is set */
  74	int active;
  75
  76	atomic_t pending_exceptions_count;
  77
  78	spinlock_t pe_allocation_lock;
  79
  80	/* Protected by "pe_allocation_lock" */
  81	sector_t exception_start_sequence;
  82
  83	/* Protected by kcopyd single-threaded callback */
  84	sector_t exception_complete_sequence;
  85
  86	/*
  87	 * A list of pending exceptions that completed out of order.
  88	 * Protected by kcopyd single-threaded callback.
  89	 */
  90	struct rb_root out_of_order_tree;
  91
  92	mempool_t pending_pool;
  93
  94	struct dm_exception_table pending;
  95	struct dm_exception_table complete;
  96
  97	/*
  98	 * pe_lock protects all pending_exception operations and access
  99	 * as well as the snapshot_bios list.
 100	 */
 101	spinlock_t pe_lock;
 102
 103	/* Chunks with outstanding reads */
 104	spinlock_t tracked_chunk_lock;
 105	struct hlist_head tracked_chunk_hash[DM_TRACKED_CHUNK_HASH_SIZE];
 106
 107	/* The on disk metadata handler */
 108	struct dm_exception_store *store;
 109
 110	unsigned int in_progress;
 111	struct wait_queue_head in_progress_wait;
 112
 113	struct dm_kcopyd_client *kcopyd_client;
 114
 115	/* Wait for events based on state_bits */
 116	unsigned long state_bits;
 117
 118	/* Range of chunks currently being merged. */
 119	chunk_t first_merging_chunk;
 120	int num_merging_chunks;
 121
 122	/*
 123	 * The merge operation failed if this flag is set.
 124	 * Failure modes are handled as follows:
 125	 * - I/O error reading the header
 126	 *	=> don't load the target; abort.
 127	 * - Header does not have "valid" flag set
 128	 *	=> use the origin; forget about the snapshot.
 129	 * - I/O error when reading exceptions
 130	 *	=> don't load the target; abort.
 131	 *         (We can't use the intermediate origin state.)
 132	 * - I/O error while merging
 133	 *	=> stop merging; set merge_failed; process I/O normally.
 134	 */
 135	bool merge_failed:1;
 136
 137	bool discard_zeroes_cow:1;
 138	bool discard_passdown_origin:1;
 139
 140	/*
 141	 * Incoming bios that overlap with chunks being merged must wait
 142	 * for them to be committed.
 143	 */
 144	struct bio_list bios_queued_during_merge;
 
 
 
 
 
 145};
 146
 147/*
 148 * state_bits:
 149 *   RUNNING_MERGE  - Merge operation is in progress.
 150 *   SHUTDOWN_MERGE - Set to signal that merge needs to be stopped;
 151 *                    cleared afterwards.
 152 */
 153#define RUNNING_MERGE          0
 154#define SHUTDOWN_MERGE         1
 155
 156/*
 157 * Maximum number of chunks being copied on write.
 158 *
 159 * The value was decided experimentally as a trade-off between memory
 160 * consumption, stalling the kernel's workqueues and maintaining a high enough
 161 * throughput.
 162 */
 163#define DEFAULT_COW_THRESHOLD 2048
 164
 165static unsigned int cow_threshold = DEFAULT_COW_THRESHOLD;
 166module_param_named(snapshot_cow_threshold, cow_threshold, uint, 0644);
 167MODULE_PARM_DESC(snapshot_cow_threshold, "Maximum number of chunks being copied on write");
 168
 169DECLARE_DM_KCOPYD_THROTTLE_WITH_MODULE_PARM(snapshot_copy_throttle,
 170		"A percentage of time allocated for copy on write");
 171
 172struct dm_dev *dm_snap_origin(struct dm_snapshot *s)
 173{
 174	return s->origin;
 175}
 176EXPORT_SYMBOL(dm_snap_origin);
 177
 178struct dm_dev *dm_snap_cow(struct dm_snapshot *s)
 179{
 180	return s->cow;
 181}
 182EXPORT_SYMBOL(dm_snap_cow);
 183
 184static sector_t chunk_to_sector(struct dm_exception_store *store,
 185				chunk_t chunk)
 186{
 187	return chunk << store->chunk_shift;
 188}
 189
 190static int bdev_equal(struct block_device *lhs, struct block_device *rhs)
 191{
 192	/*
 193	 * There is only ever one instance of a particular block
 194	 * device so we can compare pointers safely.
 195	 */
 196	return lhs == rhs;
 197}
 198
 199struct dm_snap_pending_exception {
 200	struct dm_exception e;
 201
 202	/*
 203	 * Origin buffers waiting for this to complete are held
 204	 * in a bio list
 205	 */
 206	struct bio_list origin_bios;
 207	struct bio_list snapshot_bios;
 208
 209	/* Pointer back to snapshot context */
 210	struct dm_snapshot *snap;
 211
 212	/*
 213	 * 1 indicates the exception has already been sent to
 214	 * kcopyd.
 215	 */
 216	int started;
 217
 218	/* There was copying error. */
 219	int copy_error;
 220
 221	/* A sequence number, it is used for in-order completion. */
 222	sector_t exception_sequence;
 223
 224	struct rb_node out_of_order_node;
 225
 226	/*
 227	 * For writing a complete chunk, bypassing the copy.
 228	 */
 229	struct bio *full_bio;
 230	bio_end_io_t *full_bio_end_io;
 231};
 232
 233/*
 234 * Hash table mapping origin volumes to lists of snapshots and
 235 * a lock to protect it
 236 */
 237static struct kmem_cache *exception_cache;
 238static struct kmem_cache *pending_cache;
 239
 240struct dm_snap_tracked_chunk {
 241	struct hlist_node node;
 242	chunk_t chunk;
 243};
 244
 245static void init_tracked_chunk(struct bio *bio)
 246{
 247	struct dm_snap_tracked_chunk *c = dm_per_bio_data(bio, sizeof(struct dm_snap_tracked_chunk));
 248
 249	INIT_HLIST_NODE(&c->node);
 250}
 251
 252static bool is_bio_tracked(struct bio *bio)
 253{
 254	struct dm_snap_tracked_chunk *c = dm_per_bio_data(bio, sizeof(struct dm_snap_tracked_chunk));
 255
 256	return !hlist_unhashed(&c->node);
 257}
 258
 259static void track_chunk(struct dm_snapshot *s, struct bio *bio, chunk_t chunk)
 260{
 261	struct dm_snap_tracked_chunk *c = dm_per_bio_data(bio, sizeof(struct dm_snap_tracked_chunk));
 262
 263	c->chunk = chunk;
 264
 265	spin_lock_irq(&s->tracked_chunk_lock);
 266	hlist_add_head(&c->node,
 267		       &s->tracked_chunk_hash[DM_TRACKED_CHUNK_HASH(chunk)]);
 268	spin_unlock_irq(&s->tracked_chunk_lock);
 269}
 270
 271static void stop_tracking_chunk(struct dm_snapshot *s, struct bio *bio)
 272{
 273	struct dm_snap_tracked_chunk *c = dm_per_bio_data(bio, sizeof(struct dm_snap_tracked_chunk));
 274	unsigned long flags;
 275
 276	spin_lock_irqsave(&s->tracked_chunk_lock, flags);
 277	hlist_del(&c->node);
 278	spin_unlock_irqrestore(&s->tracked_chunk_lock, flags);
 279}
 280
 281static int __chunk_is_tracked(struct dm_snapshot *s, chunk_t chunk)
 282{
 283	struct dm_snap_tracked_chunk *c;
 284	int found = 0;
 285
 286	spin_lock_irq(&s->tracked_chunk_lock);
 287
 288	hlist_for_each_entry(c,
 289	    &s->tracked_chunk_hash[DM_TRACKED_CHUNK_HASH(chunk)], node) {
 290		if (c->chunk == chunk) {
 291			found = 1;
 292			break;
 293		}
 294	}
 295
 296	spin_unlock_irq(&s->tracked_chunk_lock);
 297
 298	return found;
 299}
 300
 301/*
 302 * This conflicting I/O is extremely improbable in the caller,
 303 * so fsleep(1000) is sufficient and there is no need for a wait queue.
 304 */
 305static void __check_for_conflicting_io(struct dm_snapshot *s, chunk_t chunk)
 306{
 307	while (__chunk_is_tracked(s, chunk))
 308		fsleep(1000);
 309}
 310
 311/*
 312 * One of these per registered origin, held in the snapshot_origins hash
 313 */
 314struct origin {
 315	/* The origin device */
 316	struct block_device *bdev;
 317
 318	struct list_head hash_list;
 319
 320	/* List of snapshots for this origin */
 321	struct list_head snapshots;
 322};
 323
 324/*
 325 * This structure is allocated for each origin target
 326 */
 327struct dm_origin {
 328	struct dm_dev *dev;
 329	struct dm_target *ti;
 330	unsigned int split_boundary;
 331	struct list_head hash_list;
 332};
 333
 334/*
 335 * Size of the hash table for origin volumes. If we make this
 336 * the size of the minors list then it should be nearly perfect
 337 */
 338#define ORIGIN_HASH_SIZE 256
 339#define ORIGIN_MASK      0xFF
 340static struct list_head *_origins;
 341static struct list_head *_dm_origins;
 342static struct rw_semaphore _origins_lock;
 343
 344static DECLARE_WAIT_QUEUE_HEAD(_pending_exceptions_done);
 345static DEFINE_SPINLOCK(_pending_exceptions_done_spinlock);
 346static uint64_t _pending_exceptions_done_count;
 347
 348static int init_origin_hash(void)
 349{
 350	int i;
 351
 352	_origins = kmalloc_array(ORIGIN_HASH_SIZE, sizeof(struct list_head),
 353				 GFP_KERNEL);
 354	if (!_origins) {
 355		DMERR("unable to allocate memory for _origins");
 356		return -ENOMEM;
 357	}
 358	for (i = 0; i < ORIGIN_HASH_SIZE; i++)
 359		INIT_LIST_HEAD(_origins + i);
 360
 361	_dm_origins = kmalloc_array(ORIGIN_HASH_SIZE,
 362				    sizeof(struct list_head),
 363				    GFP_KERNEL);
 364	if (!_dm_origins) {
 365		DMERR("unable to allocate memory for _dm_origins");
 366		kfree(_origins);
 367		return -ENOMEM;
 368	}
 369	for (i = 0; i < ORIGIN_HASH_SIZE; i++)
 370		INIT_LIST_HEAD(_dm_origins + i);
 371
 372	init_rwsem(&_origins_lock);
 373
 374	return 0;
 375}
 376
 377static void exit_origin_hash(void)
 378{
 379	kfree(_origins);
 380	kfree(_dm_origins);
 381}
 382
 383static unsigned int origin_hash(struct block_device *bdev)
 384{
 385	return bdev->bd_dev & ORIGIN_MASK;
 386}
 387
 388static struct origin *__lookup_origin(struct block_device *origin)
 389{
 390	struct list_head *ol;
 391	struct origin *o;
 392
 393	ol = &_origins[origin_hash(origin)];
 394	list_for_each_entry(o, ol, hash_list)
 395		if (bdev_equal(o->bdev, origin))
 396			return o;
 397
 398	return NULL;
 399}
 400
 401static void __insert_origin(struct origin *o)
 402{
 403	struct list_head *sl = &_origins[origin_hash(o->bdev)];
 404
 405	list_add_tail(&o->hash_list, sl);
 406}
 407
 408static struct dm_origin *__lookup_dm_origin(struct block_device *origin)
 409{
 410	struct list_head *ol;
 411	struct dm_origin *o;
 412
 413	ol = &_dm_origins[origin_hash(origin)];
 414	list_for_each_entry(o, ol, hash_list)
 415		if (bdev_equal(o->dev->bdev, origin))
 416			return o;
 417
 418	return NULL;
 419}
 420
 421static void __insert_dm_origin(struct dm_origin *o)
 422{
 423	struct list_head *sl = &_dm_origins[origin_hash(o->dev->bdev)];
 424
 425	list_add_tail(&o->hash_list, sl);
 426}
 427
 428static void __remove_dm_origin(struct dm_origin *o)
 429{
 430	list_del(&o->hash_list);
 431}
 432
 433/*
 434 * _origins_lock must be held when calling this function.
 435 * Returns number of snapshots registered using the supplied cow device, plus:
 436 * snap_src - a snapshot suitable for use as a source of exception handover
 437 * snap_dest - a snapshot capable of receiving exception handover.
 438 * snap_merge - an existing snapshot-merge target linked to the same origin.
 439 *   There can be at most one snapshot-merge target. The parameter is optional.
 440 *
 441 * Possible return values and states of snap_src and snap_dest.
 442 *   0: NULL, NULL  - first new snapshot
 443 *   1: snap_src, NULL - normal snapshot
 444 *   2: snap_src, snap_dest  - waiting for handover
 445 *   2: snap_src, NULL - handed over, waiting for old to be deleted
 446 *   1: NULL, snap_dest - source got destroyed without handover
 447 */
 448static int __find_snapshots_sharing_cow(struct dm_snapshot *snap,
 449					struct dm_snapshot **snap_src,
 450					struct dm_snapshot **snap_dest,
 451					struct dm_snapshot **snap_merge)
 452{
 453	struct dm_snapshot *s;
 454	struct origin *o;
 455	int count = 0;
 456	int active;
 457
 458	o = __lookup_origin(snap->origin->bdev);
 459	if (!o)
 460		goto out;
 461
 462	list_for_each_entry(s, &o->snapshots, list) {
 463		if (dm_target_is_snapshot_merge(s->ti) && snap_merge)
 464			*snap_merge = s;
 465		if (!bdev_equal(s->cow->bdev, snap->cow->bdev))
 466			continue;
 467
 468		down_read(&s->lock);
 469		active = s->active;
 470		up_read(&s->lock);
 471
 472		if (active) {
 473			if (snap_src)
 474				*snap_src = s;
 475		} else if (snap_dest)
 476			*snap_dest = s;
 477
 478		count++;
 479	}
 480
 481out:
 482	return count;
 483}
 484
 485/*
 486 * On success, returns 1 if this snapshot is a handover destination,
 487 * otherwise returns 0.
 488 */
 489static int __validate_exception_handover(struct dm_snapshot *snap)
 490{
 491	struct dm_snapshot *snap_src = NULL, *snap_dest = NULL;
 492	struct dm_snapshot *snap_merge = NULL;
 493
 494	/* Does snapshot need exceptions handed over to it? */
 495	if ((__find_snapshots_sharing_cow(snap, &snap_src, &snap_dest,
 496					  &snap_merge) == 2) ||
 497	    snap_dest) {
 498		snap->ti->error = "Snapshot cow pairing for exception table handover failed";
 
 499		return -EINVAL;
 500	}
 501
 502	/*
 503	 * If no snap_src was found, snap cannot become a handover
 504	 * destination.
 505	 */
 506	if (!snap_src)
 507		return 0;
 508
 509	/*
 510	 * Non-snapshot-merge handover?
 511	 */
 512	if (!dm_target_is_snapshot_merge(snap->ti))
 513		return 1;
 514
 515	/*
 516	 * Do not allow more than one merging snapshot.
 517	 */
 518	if (snap_merge) {
 519		snap->ti->error = "A snapshot is already merging.";
 520		return -EINVAL;
 521	}
 522
 523	if (!snap_src->store->type->prepare_merge ||
 524	    !snap_src->store->type->commit_merge) {
 525		snap->ti->error = "Snapshot exception store does not support snapshot-merge.";
 
 526		return -EINVAL;
 527	}
 528
 529	return 1;
 530}
 531
 532static void __insert_snapshot(struct origin *o, struct dm_snapshot *s)
 533{
 534	struct dm_snapshot *l;
 535
 536	/* Sort the list according to chunk size, largest-first smallest-last */
 537	list_for_each_entry(l, &o->snapshots, list)
 538		if (l->store->chunk_size < s->store->chunk_size)
 539			break;
 540	list_add_tail(&s->list, &l->list);
 541}
 542
 543/*
 544 * Make a note of the snapshot and its origin so we can look it
 545 * up when the origin has a write on it.
 546 *
 547 * Also validate snapshot exception store handovers.
 548 * On success, returns 1 if this registration is a handover destination,
 549 * otherwise returns 0.
 550 */
 551static int register_snapshot(struct dm_snapshot *snap)
 552{
 553	struct origin *o, *new_o = NULL;
 554	struct block_device *bdev = snap->origin->bdev;
 555	int r = 0;
 556
 557	new_o = kmalloc(sizeof(*new_o), GFP_KERNEL);
 558	if (!new_o)
 559		return -ENOMEM;
 560
 561	down_write(&_origins_lock);
 562
 563	r = __validate_exception_handover(snap);
 564	if (r < 0) {
 565		kfree(new_o);
 566		goto out;
 567	}
 568
 569	o = __lookup_origin(bdev);
 570	if (o)
 571		kfree(new_o);
 572	else {
 573		/* New origin */
 574		o = new_o;
 575
 576		/* Initialise the struct */
 577		INIT_LIST_HEAD(&o->snapshots);
 578		o->bdev = bdev;
 579
 580		__insert_origin(o);
 581	}
 582
 583	__insert_snapshot(o, snap);
 584
 585out:
 586	up_write(&_origins_lock);
 587
 588	return r;
 589}
 590
 591/*
 592 * Move snapshot to correct place in list according to chunk size.
 593 */
 594static void reregister_snapshot(struct dm_snapshot *s)
 595{
 596	struct block_device *bdev = s->origin->bdev;
 597
 598	down_write(&_origins_lock);
 599
 600	list_del(&s->list);
 601	__insert_snapshot(__lookup_origin(bdev), s);
 602
 603	up_write(&_origins_lock);
 604}
 605
 606static void unregister_snapshot(struct dm_snapshot *s)
 607{
 608	struct origin *o;
 609
 610	down_write(&_origins_lock);
 611	o = __lookup_origin(s->origin->bdev);
 612
 613	list_del(&s->list);
 614	if (o && list_empty(&o->snapshots)) {
 615		list_del(&o->hash_list);
 616		kfree(o);
 617	}
 618
 619	up_write(&_origins_lock);
 620}
 621
 622/*
 623 * Implementation of the exception hash tables.
 624 * The lowest hash_shift bits of the chunk number are ignored, allowing
 625 * some consecutive chunks to be grouped together.
 626 */
 627static uint32_t exception_hash(struct dm_exception_table *et, chunk_t chunk);
 628
 629/* Lock to protect access to the completed and pending exception hash tables. */
 630struct dm_exception_table_lock {
 631	struct hlist_bl_head *complete_slot;
 632	struct hlist_bl_head *pending_slot;
 633};
 634
 635static void dm_exception_table_lock_init(struct dm_snapshot *s, chunk_t chunk,
 636					 struct dm_exception_table_lock *lock)
 637{
 638	struct dm_exception_table *complete = &s->complete;
 639	struct dm_exception_table *pending = &s->pending;
 640
 641	lock->complete_slot = &complete->table[exception_hash(complete, chunk)];
 642	lock->pending_slot = &pending->table[exception_hash(pending, chunk)];
 643}
 644
 645static void dm_exception_table_lock(struct dm_exception_table_lock *lock)
 646{
 647	hlist_bl_lock(lock->complete_slot);
 648	hlist_bl_lock(lock->pending_slot);
 649}
 650
 651static void dm_exception_table_unlock(struct dm_exception_table_lock *lock)
 652{
 653	hlist_bl_unlock(lock->pending_slot);
 654	hlist_bl_unlock(lock->complete_slot);
 655}
 656
 657static int dm_exception_table_init(struct dm_exception_table *et,
 658				   uint32_t size, unsigned int hash_shift)
 659{
 660	unsigned int i;
 661
 662	et->hash_shift = hash_shift;
 663	et->hash_mask = size - 1;
 664	et->table = kvmalloc_array(size, sizeof(struct hlist_bl_head),
 665				   GFP_KERNEL);
 666	if (!et->table)
 667		return -ENOMEM;
 668
 669	for (i = 0; i < size; i++)
 670		INIT_HLIST_BL_HEAD(et->table + i);
 671
 672	return 0;
 673}
 674
 675static void dm_exception_table_exit(struct dm_exception_table *et,
 676				    struct kmem_cache *mem)
 677{
 678	struct hlist_bl_head *slot;
 679	struct dm_exception *ex;
 680	struct hlist_bl_node *pos, *n;
 681	int i, size;
 682
 683	size = et->hash_mask + 1;
 684	for (i = 0; i < size; i++) {
 685		slot = et->table + i;
 686
 687		hlist_bl_for_each_entry_safe(ex, pos, n, slot, hash_list)
 688			kmem_cache_free(mem, ex);
 689	}
 690
 691	kvfree(et->table);
 692}
 693
 694static uint32_t exception_hash(struct dm_exception_table *et, chunk_t chunk)
 695{
 696	return (chunk >> et->hash_shift) & et->hash_mask;
 697}
 698
 699static void dm_remove_exception(struct dm_exception *e)
 700{
 701	hlist_bl_del(&e->hash_list);
 702}
 703
 704/*
 705 * Return the exception data for a sector, or NULL if not
 706 * remapped.
 707 */
 708static struct dm_exception *dm_lookup_exception(struct dm_exception_table *et,
 709						chunk_t chunk)
 710{
 711	struct hlist_bl_head *slot;
 712	struct hlist_bl_node *pos;
 713	struct dm_exception *e;
 714
 715	slot = &et->table[exception_hash(et, chunk)];
 716	hlist_bl_for_each_entry(e, pos, slot, hash_list)
 717		if (chunk >= e->old_chunk &&
 718		    chunk <= e->old_chunk + dm_consecutive_chunk_count(e))
 719			return e;
 720
 721	return NULL;
 722}
 723
 724static struct dm_exception *alloc_completed_exception(gfp_t gfp)
 725{
 726	struct dm_exception *e;
 727
 728	e = kmem_cache_alloc(exception_cache, gfp);
 729	if (!e && gfp == GFP_NOIO)
 730		e = kmem_cache_alloc(exception_cache, GFP_ATOMIC);
 731
 732	return e;
 733}
 734
 735static void free_completed_exception(struct dm_exception *e)
 736{
 737	kmem_cache_free(exception_cache, e);
 738}
 739
 740static struct dm_snap_pending_exception *alloc_pending_exception(struct dm_snapshot *s)
 741{
 742	struct dm_snap_pending_exception *pe = mempool_alloc(&s->pending_pool,
 743							     GFP_NOIO);
 744
 745	atomic_inc(&s->pending_exceptions_count);
 746	pe->snap = s;
 747
 748	return pe;
 749}
 750
 751static void free_pending_exception(struct dm_snap_pending_exception *pe)
 752{
 753	struct dm_snapshot *s = pe->snap;
 754
 755	mempool_free(pe, &s->pending_pool);
 756	smp_mb__before_atomic();
 757	atomic_dec(&s->pending_exceptions_count);
 758}
 759
 760static void dm_insert_exception(struct dm_exception_table *eh,
 761				struct dm_exception *new_e)
 762{
 763	struct hlist_bl_head *l;
 764	struct hlist_bl_node *pos;
 765	struct dm_exception *e = NULL;
 766
 767	l = &eh->table[exception_hash(eh, new_e->old_chunk)];
 768
 769	/* Add immediately if this table doesn't support consecutive chunks */
 770	if (!eh->hash_shift)
 771		goto out;
 772
 773	/* List is ordered by old_chunk */
 774	hlist_bl_for_each_entry(e, pos, l, hash_list) {
 775		/* Insert after an existing chunk? */
 776		if (new_e->old_chunk == (e->old_chunk +
 777					 dm_consecutive_chunk_count(e) + 1) &&
 778		    new_e->new_chunk == (dm_chunk_number(e->new_chunk) +
 779					 dm_consecutive_chunk_count(e) + 1)) {
 780			dm_consecutive_chunk_count_inc(e);
 781			free_completed_exception(new_e);
 782			return;
 783		}
 784
 785		/* Insert before an existing chunk? */
 786		if (new_e->old_chunk == (e->old_chunk - 1) &&
 787		    new_e->new_chunk == (dm_chunk_number(e->new_chunk) - 1)) {
 788			dm_consecutive_chunk_count_inc(e);
 789			e->old_chunk--;
 790			e->new_chunk--;
 791			free_completed_exception(new_e);
 792			return;
 793		}
 794
 795		if (new_e->old_chunk < e->old_chunk)
 796			break;
 797	}
 798
 799out:
 800	if (!e) {
 801		/*
 802		 * Either the table doesn't support consecutive chunks or slot
 803		 * l is empty.
 804		 */
 805		hlist_bl_add_head(&new_e->hash_list, l);
 806	} else if (new_e->old_chunk < e->old_chunk) {
 807		/* Add before an existing exception */
 808		hlist_bl_add_before(&new_e->hash_list, &e->hash_list);
 809	} else {
 810		/* Add to l's tail: e is the last exception in this slot */
 811		hlist_bl_add_behind(&new_e->hash_list, &e->hash_list);
 812	}
 813}
 814
 815/*
 816 * Callback used by the exception stores to load exceptions when
 817 * initialising.
 818 */
 819static int dm_add_exception(void *context, chunk_t old, chunk_t new)
 820{
 821	struct dm_exception_table_lock lock;
 822	struct dm_snapshot *s = context;
 823	struct dm_exception *e;
 824
 825	e = alloc_completed_exception(GFP_KERNEL);
 826	if (!e)
 827		return -ENOMEM;
 828
 829	e->old_chunk = old;
 830
 831	/* Consecutive_count is implicitly initialised to zero */
 832	e->new_chunk = new;
 833
 834	/*
 835	 * Although there is no need to lock access to the exception tables
 836	 * here, if we don't then hlist_bl_add_head(), called by
 837	 * dm_insert_exception(), will complain about accessing the
 838	 * corresponding list without locking it first.
 839	 */
 840	dm_exception_table_lock_init(s, old, &lock);
 841
 842	dm_exception_table_lock(&lock);
 843	dm_insert_exception(&s->complete, e);
 844	dm_exception_table_unlock(&lock);
 845
 846	return 0;
 847}
 848
 849/*
 850 * Return a minimum chunk size of all snapshots that have the specified origin.
 851 * Return zero if the origin has no snapshots.
 852 */
 853static uint32_t __minimum_chunk_size(struct origin *o)
 854{
 855	struct dm_snapshot *snap;
 856	unsigned int chunk_size = rounddown_pow_of_two(UINT_MAX);
 857
 858	if (o)
 859		list_for_each_entry(snap, &o->snapshots, list)
 860			chunk_size = min_not_zero(chunk_size,
 861						  snap->store->chunk_size);
 862
 863	return (uint32_t) chunk_size;
 864}
 865
 866/*
 867 * Hard coded magic.
 868 */
 869static int calc_max_buckets(void)
 870{
 871	/* use a fixed size of 2MB */
 872	unsigned long mem = 2 * 1024 * 1024;
 873
 874	mem /= sizeof(struct hlist_bl_head);
 875
 876	return mem;
 877}
 878
 879/*
 880 * Allocate room for a suitable hash table.
 881 */
 882static int init_hash_tables(struct dm_snapshot *s)
 883{
 884	sector_t hash_size, cow_dev_size, max_buckets;
 885
 886	/*
 887	 * Calculate based on the size of the original volume or
 888	 * the COW volume...
 889	 */
 890	cow_dev_size = get_dev_size(s->cow->bdev);
 891	max_buckets = calc_max_buckets();
 892
 893	hash_size = cow_dev_size >> s->store->chunk_shift;
 894	hash_size = min(hash_size, max_buckets);
 895
 896	if (hash_size < 64)
 897		hash_size = 64;
 898	hash_size = rounddown_pow_of_two(hash_size);
 899	if (dm_exception_table_init(&s->complete, hash_size,
 900				    DM_CHUNK_CONSECUTIVE_BITS))
 901		return -ENOMEM;
 902
 903	/*
 904	 * Allocate hash table for in-flight exceptions
 905	 * Make this smaller than the real hash table
 906	 */
 907	hash_size >>= 3;
 908	if (hash_size < 64)
 909		hash_size = 64;
 910
 911	if (dm_exception_table_init(&s->pending, hash_size, 0)) {
 912		dm_exception_table_exit(&s->complete, exception_cache);
 913		return -ENOMEM;
 914	}
 915
 916	return 0;
 917}
 918
 919static void merge_shutdown(struct dm_snapshot *s)
 920{
 921	clear_bit_unlock(RUNNING_MERGE, &s->state_bits);
 922	smp_mb__after_atomic();
 923	wake_up_bit(&s->state_bits, RUNNING_MERGE);
 924}
 925
 926static struct bio *__release_queued_bios_after_merge(struct dm_snapshot *s)
 927{
 928	s->first_merging_chunk = 0;
 929	s->num_merging_chunks = 0;
 930
 931	return bio_list_get(&s->bios_queued_during_merge);
 932}
 933
 934/*
 935 * Remove one chunk from the index of completed exceptions.
 936 */
 937static int __remove_single_exception_chunk(struct dm_snapshot *s,
 938					   chunk_t old_chunk)
 939{
 940	struct dm_exception *e;
 941
 942	e = dm_lookup_exception(&s->complete, old_chunk);
 943	if (!e) {
 944		DMERR("Corruption detected: exception for block %llu is on disk but not in memory",
 
 945		      (unsigned long long)old_chunk);
 946		return -EINVAL;
 947	}
 948
 949	/*
 950	 * If this is the only chunk using this exception, remove exception.
 951	 */
 952	if (!dm_consecutive_chunk_count(e)) {
 953		dm_remove_exception(e);
 954		free_completed_exception(e);
 955		return 0;
 956	}
 957
 958	/*
 959	 * The chunk may be either at the beginning or the end of a
 960	 * group of consecutive chunks - never in the middle.  We are
 961	 * removing chunks in the opposite order to that in which they
 962	 * were added, so this should always be true.
 963	 * Decrement the consecutive chunk counter and adjust the
 964	 * starting point if necessary.
 965	 */
 966	if (old_chunk == e->old_chunk) {
 967		e->old_chunk++;
 968		e->new_chunk++;
 969	} else if (old_chunk != e->old_chunk +
 970		   dm_consecutive_chunk_count(e)) {
 971		DMERR("Attempt to merge block %llu from the middle of a chunk range [%llu - %llu]",
 
 972		      (unsigned long long)old_chunk,
 973		      (unsigned long long)e->old_chunk,
 974		      (unsigned long long)
 975		      e->old_chunk + dm_consecutive_chunk_count(e));
 976		return -EINVAL;
 977	}
 978
 979	dm_consecutive_chunk_count_dec(e);
 980
 981	return 0;
 982}
 983
 984static void flush_bios(struct bio *bio);
 985
 986static int remove_single_exception_chunk(struct dm_snapshot *s)
 987{
 988	struct bio *b = NULL;
 989	int r;
 990	chunk_t old_chunk = s->first_merging_chunk + s->num_merging_chunks - 1;
 991
 992	down_write(&s->lock);
 993
 994	/*
 995	 * Process chunks (and associated exceptions) in reverse order
 996	 * so that dm_consecutive_chunk_count_dec() accounting works.
 997	 */
 998	do {
 999		r = __remove_single_exception_chunk(s, old_chunk);
1000		if (r)
1001			goto out;
1002	} while (old_chunk-- > s->first_merging_chunk);
1003
1004	b = __release_queued_bios_after_merge(s);
1005
1006out:
1007	up_write(&s->lock);
1008	if (b)
1009		flush_bios(b);
1010
1011	return r;
1012}
1013
1014static int origin_write_extent(struct dm_snapshot *merging_snap,
1015			       sector_t sector, unsigned int chunk_size);
1016
1017static void merge_callback(int read_err, unsigned long write_err,
1018			   void *context);
1019
1020static uint64_t read_pending_exceptions_done_count(void)
1021{
1022	uint64_t pending_exceptions_done;
1023
1024	spin_lock(&_pending_exceptions_done_spinlock);
1025	pending_exceptions_done = _pending_exceptions_done_count;
1026	spin_unlock(&_pending_exceptions_done_spinlock);
1027
1028	return pending_exceptions_done;
1029}
1030
1031static void increment_pending_exceptions_done_count(void)
1032{
1033	spin_lock(&_pending_exceptions_done_spinlock);
1034	_pending_exceptions_done_count++;
1035	spin_unlock(&_pending_exceptions_done_spinlock);
1036
1037	wake_up_all(&_pending_exceptions_done);
1038}
1039
1040static void snapshot_merge_next_chunks(struct dm_snapshot *s)
1041{
1042	int i, linear_chunks;
1043	chunk_t old_chunk, new_chunk;
1044	struct dm_io_region src, dest;
1045	sector_t io_size;
1046	uint64_t previous_count;
1047
1048	BUG_ON(!test_bit(RUNNING_MERGE, &s->state_bits));
1049	if (unlikely(test_bit(SHUTDOWN_MERGE, &s->state_bits)))
1050		goto shut;
1051
1052	/*
1053	 * valid flag never changes during merge, so no lock required.
1054	 */
1055	if (!s->valid) {
1056		DMERR("Snapshot is invalid: can't merge");
1057		goto shut;
1058	}
1059
1060	linear_chunks = s->store->type->prepare_merge(s->store, &old_chunk,
1061						      &new_chunk);
1062	if (linear_chunks <= 0) {
1063		if (linear_chunks < 0) {
1064			DMERR("Read error in exception store: shutting down merge");
 
1065			down_write(&s->lock);
1066			s->merge_failed = true;
1067			up_write(&s->lock);
1068		}
1069		goto shut;
1070	}
1071
1072	/* Adjust old_chunk and new_chunk to reflect start of linear region */
1073	old_chunk = old_chunk + 1 - linear_chunks;
1074	new_chunk = new_chunk + 1 - linear_chunks;
1075
1076	/*
1077	 * Use one (potentially large) I/O to copy all 'linear_chunks'
1078	 * from the exception store to the origin
1079	 */
1080	io_size = linear_chunks * s->store->chunk_size;
1081
1082	dest.bdev = s->origin->bdev;
1083	dest.sector = chunk_to_sector(s->store, old_chunk);
1084	dest.count = min(io_size, get_dev_size(dest.bdev) - dest.sector);
1085
1086	src.bdev = s->cow->bdev;
1087	src.sector = chunk_to_sector(s->store, new_chunk);
1088	src.count = dest.count;
1089
1090	/*
1091	 * Reallocate any exceptions needed in other snapshots then
1092	 * wait for the pending exceptions to complete.
1093	 * Each time any pending exception (globally on the system)
1094	 * completes we are woken and repeat the process to find out
1095	 * if we can proceed.  While this may not seem a particularly
1096	 * efficient algorithm, it is not expected to have any
1097	 * significant impact on performance.
1098	 */
1099	previous_count = read_pending_exceptions_done_count();
1100	while (origin_write_extent(s, dest.sector, io_size)) {
1101		wait_event(_pending_exceptions_done,
1102			   (read_pending_exceptions_done_count() !=
1103			    previous_count));
1104		/* Retry after the wait, until all exceptions are done. */
1105		previous_count = read_pending_exceptions_done_count();
1106	}
1107
1108	down_write(&s->lock);
1109	s->first_merging_chunk = old_chunk;
1110	s->num_merging_chunks = linear_chunks;
1111	up_write(&s->lock);
1112
1113	/* Wait until writes to all 'linear_chunks' drain */
1114	for (i = 0; i < linear_chunks; i++)
1115		__check_for_conflicting_io(s, old_chunk + i);
1116
1117	dm_kcopyd_copy(s->kcopyd_client, &src, 1, &dest, 0, merge_callback, s);
1118	return;
1119
1120shut:
1121	merge_shutdown(s);
1122}
1123
1124static void error_bios(struct bio *bio);
1125
 
 
 
 
 
 
 
 
 
 
 
1126static void merge_callback(int read_err, unsigned long write_err, void *context)
1127{
1128	struct dm_snapshot *s = context;
1129	struct bio *b = NULL;
1130
1131	if (read_err || write_err) {
1132		if (read_err)
1133			DMERR("Read error: shutting down merge.");
1134		else
1135			DMERR("Write error: shutting down merge.");
1136		goto shut;
1137	}
1138
1139	if (blkdev_issue_flush(s->origin->bdev) < 0) {
1140		DMERR("Flush after merge failed: shutting down merge");
1141		goto shut;
1142	}
1143
1144	if (s->store->type->commit_merge(s->store,
1145					 s->num_merging_chunks) < 0) {
1146		DMERR("Write error in exception store: shutting down merge");
1147		goto shut;
1148	}
1149
1150	if (remove_single_exception_chunk(s) < 0)
1151		goto shut;
1152
1153	snapshot_merge_next_chunks(s);
1154
1155	return;
1156
1157shut:
1158	down_write(&s->lock);
1159	s->merge_failed = true;
1160	b = __release_queued_bios_after_merge(s);
1161	up_write(&s->lock);
1162	error_bios(b);
1163
1164	merge_shutdown(s);
1165}
1166
1167static void start_merge(struct dm_snapshot *s)
1168{
1169	if (!test_and_set_bit(RUNNING_MERGE, &s->state_bits))
1170		snapshot_merge_next_chunks(s);
1171}
1172
1173/*
1174 * Stop the merging process and wait until it finishes.
1175 */
1176static void stop_merge(struct dm_snapshot *s)
1177{
1178	set_bit(SHUTDOWN_MERGE, &s->state_bits);
1179	wait_on_bit(&s->state_bits, RUNNING_MERGE, TASK_UNINTERRUPTIBLE);
1180	clear_bit(SHUTDOWN_MERGE, &s->state_bits);
1181}
1182
1183static int parse_snapshot_features(struct dm_arg_set *as, struct dm_snapshot *s,
1184				   struct dm_target *ti)
1185{
1186	int r;
1187	unsigned int argc;
1188	const char *arg_name;
1189
1190	static const struct dm_arg _args[] = {
1191		{0, 2, "Invalid number of feature arguments"},
1192	};
1193
1194	/*
1195	 * No feature arguments supplied.
1196	 */
1197	if (!as->argc)
1198		return 0;
1199
1200	r = dm_read_arg_group(_args, as, &argc, &ti->error);
1201	if (r)
1202		return -EINVAL;
1203
1204	while (argc && !r) {
1205		arg_name = dm_shift_arg(as);
1206		argc--;
1207
1208		if (!strcasecmp(arg_name, "discard_zeroes_cow"))
1209			s->discard_zeroes_cow = true;
1210
1211		else if (!strcasecmp(arg_name, "discard_passdown_origin"))
1212			s->discard_passdown_origin = true;
1213
1214		else {
1215			ti->error = "Unrecognised feature requested";
1216			r = -EINVAL;
1217			break;
1218		}
1219	}
1220
1221	if (!s->discard_zeroes_cow && s->discard_passdown_origin) {
1222		/*
1223		 * TODO: really these are disjoint.. but ti->num_discard_bios
1224		 * and dm_bio_get_target_bio_nr() require rigid constraints.
1225		 */
1226		ti->error = "discard_passdown_origin feature depends on discard_zeroes_cow";
1227		r = -EINVAL;
1228	}
1229
1230	return r;
1231}
1232
1233/*
1234 * Construct a snapshot mapping:
1235 * <origin_dev> <COW-dev> <p|po|n> <chunk-size> [<# feature args> [<arg>]*]
1236 */
1237static int snapshot_ctr(struct dm_target *ti, unsigned int argc, char **argv)
1238{
1239	struct dm_snapshot *s;
1240	struct dm_arg_set as;
1241	int i;
1242	int r = -EINVAL;
1243	char *origin_path, *cow_path;
1244	unsigned int args_used, num_flush_bios = 1;
1245	blk_mode_t origin_mode = BLK_OPEN_READ;
 
1246
1247	if (argc < 4) {
1248		ti->error = "requires 4 or more arguments";
1249		r = -EINVAL;
1250		goto bad;
1251	}
1252
1253	if (dm_target_is_snapshot_merge(ti)) {
1254		num_flush_bios = 2;
1255		origin_mode = BLK_OPEN_WRITE;
1256	}
1257
1258	s = kzalloc(sizeof(*s), GFP_KERNEL);
1259	if (!s) {
1260		ti->error = "Cannot allocate private snapshot structure";
1261		r = -ENOMEM;
1262		goto bad;
1263	}
1264
1265	as.argc = argc;
1266	as.argv = argv;
1267	dm_consume_args(&as, 4);
1268	r = parse_snapshot_features(&as, s, ti);
1269	if (r)
1270		goto bad_features;
1271
1272	origin_path = argv[0];
1273	argv++;
1274	argc--;
1275
1276	r = dm_get_device(ti, origin_path, origin_mode, &s->origin);
1277	if (r) {
1278		ti->error = "Cannot get origin device";
1279		goto bad_origin;
1280	}
 
1281
1282	cow_path = argv[0];
1283	argv++;
1284	argc--;
1285
 
 
 
 
 
 
 
1286	r = dm_get_device(ti, cow_path, dm_table_get_mode(ti->table), &s->cow);
1287	if (r) {
1288		ti->error = "Cannot get COW device";
1289		goto bad_cow;
1290	}
1291	if (s->cow->bdev && s->cow->bdev == s->origin->bdev) {
1292		ti->error = "COW device cannot be the same as origin device";
1293		r = -EINVAL;
1294		goto bad_store;
1295	}
1296
1297	r = dm_exception_store_create(ti, argc, argv, s, &args_used, &s->store);
1298	if (r) {
1299		ti->error = "Couldn't create exception store";
1300		r = -EINVAL;
1301		goto bad_store;
1302	}
1303
1304	argv += args_used;
1305	argc -= args_used;
1306
1307	s->ti = ti;
1308	s->valid = 1;
1309	s->snapshot_overflowed = 0;
1310	s->active = 0;
1311	atomic_set(&s->pending_exceptions_count, 0);
1312	spin_lock_init(&s->pe_allocation_lock);
1313	s->exception_start_sequence = 0;
1314	s->exception_complete_sequence = 0;
1315	s->out_of_order_tree = RB_ROOT;
1316	init_rwsem(&s->lock);
1317	INIT_LIST_HEAD(&s->list);
1318	spin_lock_init(&s->pe_lock);
1319	s->state_bits = 0;
1320	s->merge_failed = false;
1321	s->first_merging_chunk = 0;
1322	s->num_merging_chunks = 0;
1323	bio_list_init(&s->bios_queued_during_merge);
 
1324
1325	/* Allocate hash table for COW data */
1326	if (init_hash_tables(s)) {
1327		ti->error = "Unable to allocate hash table space";
1328		r = -ENOMEM;
1329		goto bad_hash_tables;
1330	}
1331
1332	init_waitqueue_head(&s->in_progress_wait);
1333
1334	s->kcopyd_client = dm_kcopyd_client_create(&dm_kcopyd_throttle);
1335	if (IS_ERR(s->kcopyd_client)) {
1336		r = PTR_ERR(s->kcopyd_client);
1337		ti->error = "Could not create kcopyd client";
1338		goto bad_kcopyd;
1339	}
1340
1341	r = mempool_init_slab_pool(&s->pending_pool, MIN_IOS, pending_cache);
1342	if (r) {
1343		ti->error = "Could not allocate mempool for pending exceptions";
1344		goto bad_pending_pool;
1345	}
1346
1347	for (i = 0; i < DM_TRACKED_CHUNK_HASH_SIZE; i++)
1348		INIT_HLIST_HEAD(&s->tracked_chunk_hash[i]);
1349
1350	spin_lock_init(&s->tracked_chunk_lock);
1351
1352	ti->private = s;
1353	ti->num_flush_bios = num_flush_bios;
1354	if (s->discard_zeroes_cow)
1355		ti->num_discard_bios = (s->discard_passdown_origin ? 2 : 1);
1356	ti->per_io_data_size = sizeof(struct dm_snap_tracked_chunk);
1357
1358	/* Add snapshot to the list of snapshots for this origin */
1359	/* Exceptions aren't triggered till snapshot_resume() is called */
1360	r = register_snapshot(s);
1361	if (r == -ENOMEM) {
1362		ti->error = "Snapshot origin struct allocation failed";
1363		goto bad_load_and_register;
1364	} else if (r < 0) {
1365		/* invalid handover, register_snapshot has set ti->error */
1366		goto bad_load_and_register;
1367	}
1368
1369	/*
1370	 * Metadata must only be loaded into one table at once, so skip this
1371	 * if metadata will be handed over during resume.
1372	 * Chunk size will be set during the handover - set it to zero to
1373	 * ensure it's ignored.
1374	 */
1375	if (r > 0) {
1376		s->store->chunk_size = 0;
1377		return 0;
1378	}
1379
1380	r = s->store->type->read_metadata(s->store, dm_add_exception,
1381					  (void *)s);
1382	if (r < 0) {
1383		ti->error = "Failed to read snapshot metadata";
1384		goto bad_read_metadata;
1385	} else if (r > 0) {
1386		s->valid = 0;
1387		DMWARN("Snapshot is marked invalid.");
1388	}
1389
1390	if (!s->store->chunk_size) {
1391		ti->error = "Chunk size not set";
1392		r = -EINVAL;
1393		goto bad_read_metadata;
1394	}
1395
1396	r = dm_set_target_max_io_len(ti, s->store->chunk_size);
1397	if (r)
1398		goto bad_read_metadata;
1399
1400	return 0;
1401
1402bad_read_metadata:
1403	unregister_snapshot(s);
1404bad_load_and_register:
1405	mempool_exit(&s->pending_pool);
1406bad_pending_pool:
1407	dm_kcopyd_client_destroy(s->kcopyd_client);
1408bad_kcopyd:
1409	dm_exception_table_exit(&s->pending, pending_cache);
1410	dm_exception_table_exit(&s->complete, exception_cache);
1411bad_hash_tables:
1412	dm_exception_store_destroy(s->store);
1413bad_store:
1414	dm_put_device(ti, s->cow);
1415bad_cow:
1416	dm_put_device(ti, s->origin);
1417bad_origin:
1418bad_features:
1419	kfree(s);
1420bad:
1421	return r;
1422}
1423
1424static void __free_exceptions(struct dm_snapshot *s)
1425{
1426	dm_kcopyd_client_destroy(s->kcopyd_client);
1427	s->kcopyd_client = NULL;
1428
1429	dm_exception_table_exit(&s->pending, pending_cache);
1430	dm_exception_table_exit(&s->complete, exception_cache);
1431}
1432
1433static void __handover_exceptions(struct dm_snapshot *snap_src,
1434				  struct dm_snapshot *snap_dest)
1435{
1436	union {
1437		struct dm_exception_table table_swap;
1438		struct dm_exception_store *store_swap;
1439	} u;
1440
1441	/*
1442	 * Swap all snapshot context information between the two instances.
1443	 */
1444	u.table_swap = snap_dest->complete;
1445	snap_dest->complete = snap_src->complete;
1446	snap_src->complete = u.table_swap;
1447
1448	u.store_swap = snap_dest->store;
1449	snap_dest->store = snap_src->store;
1450	snap_dest->store->userspace_supports_overflow = u.store_swap->userspace_supports_overflow;
1451	snap_src->store = u.store_swap;
1452
1453	snap_dest->store->snap = snap_dest;
1454	snap_src->store->snap = snap_src;
1455
1456	snap_dest->ti->max_io_len = snap_dest->store->chunk_size;
1457	snap_dest->valid = snap_src->valid;
1458	snap_dest->snapshot_overflowed = snap_src->snapshot_overflowed;
1459
1460	/*
1461	 * Set source invalid to ensure it receives no further I/O.
1462	 */
1463	snap_src->valid = 0;
1464}
1465
1466static void snapshot_dtr(struct dm_target *ti)
1467{
1468#ifdef CONFIG_DM_DEBUG
1469	int i;
1470#endif
1471	struct dm_snapshot *s = ti->private;
1472	struct dm_snapshot *snap_src = NULL, *snap_dest = NULL;
1473
1474	down_read(&_origins_lock);
1475	/* Check whether exception handover must be cancelled */
1476	(void) __find_snapshots_sharing_cow(s, &snap_src, &snap_dest, NULL);
1477	if (snap_src && snap_dest && (s == snap_src)) {
1478		down_write(&snap_dest->lock);
1479		snap_dest->valid = 0;
1480		up_write(&snap_dest->lock);
1481		DMERR("Cancelling snapshot handover.");
1482	}
1483	up_read(&_origins_lock);
1484
1485	if (dm_target_is_snapshot_merge(ti))
1486		stop_merge(s);
1487
1488	/* Prevent further origin writes from using this snapshot. */
1489	/* After this returns there can be no new kcopyd jobs. */
1490	unregister_snapshot(s);
1491
1492	while (atomic_read(&s->pending_exceptions_count))
1493		fsleep(1000);
1494	/*
1495	 * Ensure instructions in mempool_exit aren't reordered
1496	 * before atomic_read.
1497	 */
1498	smp_mb();
1499
1500#ifdef CONFIG_DM_DEBUG
1501	for (i = 0; i < DM_TRACKED_CHUNK_HASH_SIZE; i++)
1502		BUG_ON(!hlist_empty(&s->tracked_chunk_hash[i]));
1503#endif
1504
1505	__free_exceptions(s);
1506
1507	mempool_exit(&s->pending_pool);
1508
1509	dm_exception_store_destroy(s->store);
1510
 
 
1511	dm_put_device(ti, s->cow);
1512
1513	dm_put_device(ti, s->origin);
1514
1515	WARN_ON(s->in_progress);
1516
1517	kfree(s);
1518}
1519
1520static void account_start_copy(struct dm_snapshot *s)
1521{
1522	spin_lock(&s->in_progress_wait.lock);
1523	s->in_progress++;
1524	spin_unlock(&s->in_progress_wait.lock);
1525}
1526
1527static void account_end_copy(struct dm_snapshot *s)
1528{
1529	spin_lock(&s->in_progress_wait.lock);
1530	BUG_ON(!s->in_progress);
1531	s->in_progress--;
1532	if (likely(s->in_progress <= cow_threshold) &&
1533	    unlikely(waitqueue_active(&s->in_progress_wait)))
1534		wake_up_locked(&s->in_progress_wait);
1535	spin_unlock(&s->in_progress_wait.lock);
1536}
1537
1538static bool wait_for_in_progress(struct dm_snapshot *s, bool unlock_origins)
1539{
1540	if (unlikely(s->in_progress > cow_threshold)) {
1541		spin_lock(&s->in_progress_wait.lock);
1542		if (likely(s->in_progress > cow_threshold)) {
1543			/*
1544			 * NOTE: this throttle doesn't account for whether
1545			 * the caller is servicing an IO that will trigger a COW
1546			 * so excess throttling may result for chunks not required
1547			 * to be COW'd.  But if cow_threshold was reached, extra
1548			 * throttling is unlikely to negatively impact performance.
1549			 */
1550			DECLARE_WAITQUEUE(wait, current);
1551
1552			__add_wait_queue(&s->in_progress_wait, &wait);
1553			__set_current_state(TASK_UNINTERRUPTIBLE);
1554			spin_unlock(&s->in_progress_wait.lock);
1555			if (unlock_origins)
1556				up_read(&_origins_lock);
1557			io_schedule();
1558			remove_wait_queue(&s->in_progress_wait, &wait);
1559			return false;
1560		}
1561		spin_unlock(&s->in_progress_wait.lock);
1562	}
1563	return true;
1564}
1565
1566/*
1567 * Flush a list of buffers.
1568 */
1569static void flush_bios(struct bio *bio)
1570{
1571	struct bio *n;
1572
1573	while (bio) {
1574		n = bio->bi_next;
1575		bio->bi_next = NULL;
1576		submit_bio_noacct(bio);
1577		bio = n;
1578	}
1579}
1580
1581static int do_origin(struct dm_dev *origin, struct bio *bio, bool limit);
1582
1583/*
1584 * Flush a list of buffers.
1585 */
1586static void retry_origin_bios(struct dm_snapshot *s, struct bio *bio)
1587{
1588	struct bio *n;
1589	int r;
1590
1591	while (bio) {
1592		n = bio->bi_next;
1593		bio->bi_next = NULL;
1594		r = do_origin(s->origin, bio, false);
1595		if (r == DM_MAPIO_REMAPPED)
1596			submit_bio_noacct(bio);
1597		bio = n;
1598	}
1599}
1600
1601/*
1602 * Error a list of buffers.
1603 */
1604static void error_bios(struct bio *bio)
1605{
1606	struct bio *n;
1607
1608	while (bio) {
1609		n = bio->bi_next;
1610		bio->bi_next = NULL;
1611		bio_io_error(bio);
1612		bio = n;
1613	}
1614}
1615
1616static void __invalidate_snapshot(struct dm_snapshot *s, int err)
1617{
1618	if (!s->valid)
1619		return;
1620
1621	if (err == -EIO)
1622		DMERR("Invalidating snapshot: Error reading/writing.");
1623	else if (err == -ENOMEM)
1624		DMERR("Invalidating snapshot: Unable to allocate exception.");
1625
1626	if (s->store->type->drop_snapshot)
1627		s->store->type->drop_snapshot(s->store);
1628
1629	s->valid = 0;
1630
1631	dm_table_event(s->ti->table);
1632}
1633
1634static void invalidate_snapshot(struct dm_snapshot *s, int err)
1635{
1636	down_write(&s->lock);
1637	__invalidate_snapshot(s, err);
1638	up_write(&s->lock);
1639}
1640
1641static void pending_complete(void *context, int success)
1642{
1643	struct dm_snap_pending_exception *pe = context;
1644	struct dm_exception *e;
1645	struct dm_snapshot *s = pe->snap;
1646	struct bio *origin_bios = NULL;
1647	struct bio *snapshot_bios = NULL;
1648	struct bio *full_bio = NULL;
1649	struct dm_exception_table_lock lock;
1650	int error = 0;
1651
1652	dm_exception_table_lock_init(s, pe->e.old_chunk, &lock);
1653
1654	if (!success) {
1655		/* Read/write error - snapshot is unusable */
1656		invalidate_snapshot(s, -EIO);
1657		error = 1;
1658
1659		dm_exception_table_lock(&lock);
1660		goto out;
1661	}
1662
1663	e = alloc_completed_exception(GFP_NOIO);
1664	if (!e) {
1665		invalidate_snapshot(s, -ENOMEM);
1666		error = 1;
1667
1668		dm_exception_table_lock(&lock);
1669		goto out;
1670	}
1671	*e = pe->e;
1672
1673	down_read(&s->lock);
1674	dm_exception_table_lock(&lock);
1675	if (!s->valid) {
1676		up_read(&s->lock);
1677		free_completed_exception(e);
1678		error = 1;
1679
1680		goto out;
1681	}
1682
1683	/*
1684	 * Add a proper exception. After inserting the completed exception all
1685	 * subsequent snapshot reads to this chunk will be redirected to the
1686	 * COW device.  This ensures that we do not starve. Moreover, as long
1687	 * as the pending exception exists, neither origin writes nor snapshot
1688	 * merging can overwrite the chunk in origin.
1689	 */
1690	dm_insert_exception(&s->complete, e);
1691	up_read(&s->lock);
1692
1693	/* Wait for conflicting reads to drain */
1694	if (__chunk_is_tracked(s, pe->e.old_chunk)) {
1695		dm_exception_table_unlock(&lock);
1696		__check_for_conflicting_io(s, pe->e.old_chunk);
1697		dm_exception_table_lock(&lock);
1698	}
1699
1700out:
1701	/* Remove the in-flight exception from the list */
1702	dm_remove_exception(&pe->e);
1703
1704	dm_exception_table_unlock(&lock);
1705
1706	snapshot_bios = bio_list_get(&pe->snapshot_bios);
1707	origin_bios = bio_list_get(&pe->origin_bios);
1708	full_bio = pe->full_bio;
1709	if (full_bio)
1710		full_bio->bi_end_io = pe->full_bio_end_io;
1711	increment_pending_exceptions_done_count();
1712
1713	/* Submit any pending write bios */
1714	if (error) {
1715		if (full_bio)
1716			bio_io_error(full_bio);
1717		error_bios(snapshot_bios);
1718	} else {
1719		if (full_bio)
1720			bio_endio(full_bio);
1721		flush_bios(snapshot_bios);
1722	}
1723
1724	retry_origin_bios(s, origin_bios);
1725
1726	free_pending_exception(pe);
1727}
1728
1729static void complete_exception(struct dm_snap_pending_exception *pe)
1730{
1731	struct dm_snapshot *s = pe->snap;
1732
1733	/* Update the metadata if we are persistent */
1734	s->store->type->commit_exception(s->store, &pe->e, !pe->copy_error,
1735					 pending_complete, pe);
1736}
1737
1738/*
1739 * Called when the copy I/O has finished.  kcopyd actually runs
1740 * this code so don't block.
1741 */
1742static void copy_callback(int read_err, unsigned long write_err, void *context)
1743{
1744	struct dm_snap_pending_exception *pe = context;
1745	struct dm_snapshot *s = pe->snap;
1746
1747	pe->copy_error = read_err || write_err;
1748
1749	if (pe->exception_sequence == s->exception_complete_sequence) {
1750		struct rb_node *next;
1751
1752		s->exception_complete_sequence++;
1753		complete_exception(pe);
1754
1755		next = rb_first(&s->out_of_order_tree);
1756		while (next) {
1757			pe = rb_entry(next, struct dm_snap_pending_exception,
1758					out_of_order_node);
1759			if (pe->exception_sequence != s->exception_complete_sequence)
1760				break;
1761			next = rb_next(next);
1762			s->exception_complete_sequence++;
1763			rb_erase(&pe->out_of_order_node, &s->out_of_order_tree);
1764			complete_exception(pe);
1765			cond_resched();
1766		}
1767	} else {
1768		struct rb_node *parent = NULL;
1769		struct rb_node **p = &s->out_of_order_tree.rb_node;
1770		struct dm_snap_pending_exception *pe2;
1771
1772		while (*p) {
1773			pe2 = rb_entry(*p, struct dm_snap_pending_exception, out_of_order_node);
1774			parent = *p;
1775
1776			BUG_ON(pe->exception_sequence == pe2->exception_sequence);
1777			if (pe->exception_sequence < pe2->exception_sequence)
1778				p = &((*p)->rb_left);
1779			else
1780				p = &((*p)->rb_right);
1781		}
1782
1783		rb_link_node(&pe->out_of_order_node, parent, p);
1784		rb_insert_color(&pe->out_of_order_node, &s->out_of_order_tree);
1785	}
1786	account_end_copy(s);
1787}
1788
1789/*
1790 * Dispatches the copy operation to kcopyd.
1791 */
1792static void start_copy(struct dm_snap_pending_exception *pe)
1793{
1794	struct dm_snapshot *s = pe->snap;
1795	struct dm_io_region src, dest;
1796	struct block_device *bdev = s->origin->bdev;
1797	sector_t dev_size;
1798
1799	dev_size = get_dev_size(bdev);
1800
1801	src.bdev = bdev;
1802	src.sector = chunk_to_sector(s->store, pe->e.old_chunk);
1803	src.count = min((sector_t)s->store->chunk_size, dev_size - src.sector);
1804
1805	dest.bdev = s->cow->bdev;
1806	dest.sector = chunk_to_sector(s->store, pe->e.new_chunk);
1807	dest.count = src.count;
1808
1809	/* Hand over to kcopyd */
1810	account_start_copy(s);
1811	dm_kcopyd_copy(s->kcopyd_client, &src, 1, &dest, 0, copy_callback, pe);
1812}
1813
1814static void full_bio_end_io(struct bio *bio)
1815{
1816	void *callback_data = bio->bi_private;
1817
1818	dm_kcopyd_do_callback(callback_data, 0, bio->bi_status ? 1 : 0);
1819}
1820
1821static void start_full_bio(struct dm_snap_pending_exception *pe,
1822			   struct bio *bio)
1823{
1824	struct dm_snapshot *s = pe->snap;
1825	void *callback_data;
1826
1827	pe->full_bio = bio;
1828	pe->full_bio_end_io = bio->bi_end_io;
1829
1830	account_start_copy(s);
1831	callback_data = dm_kcopyd_prepare_callback(s->kcopyd_client,
1832						   copy_callback, pe);
1833
1834	bio->bi_end_io = full_bio_end_io;
1835	bio->bi_private = callback_data;
1836
1837	submit_bio_noacct(bio);
1838}
1839
1840static struct dm_snap_pending_exception *
1841__lookup_pending_exception(struct dm_snapshot *s, chunk_t chunk)
1842{
1843	struct dm_exception *e = dm_lookup_exception(&s->pending, chunk);
1844
1845	if (!e)
1846		return NULL;
1847
1848	return container_of(e, struct dm_snap_pending_exception, e);
1849}
1850
1851/*
1852 * Inserts a pending exception into the pending table.
1853 *
1854 * NOTE: a write lock must be held on the chunk's pending exception table slot
1855 * before calling this.
1856 */
1857static struct dm_snap_pending_exception *
1858__insert_pending_exception(struct dm_snapshot *s,
1859			   struct dm_snap_pending_exception *pe, chunk_t chunk)
1860{
1861	pe->e.old_chunk = chunk;
1862	bio_list_init(&pe->origin_bios);
1863	bio_list_init(&pe->snapshot_bios);
1864	pe->started = 0;
1865	pe->full_bio = NULL;
1866
1867	spin_lock(&s->pe_allocation_lock);
1868	if (s->store->type->prepare_exception(s->store, &pe->e)) {
1869		spin_unlock(&s->pe_allocation_lock);
1870		free_pending_exception(pe);
1871		return NULL;
1872	}
1873
1874	pe->exception_sequence = s->exception_start_sequence++;
1875	spin_unlock(&s->pe_allocation_lock);
1876
1877	dm_insert_exception(&s->pending, &pe->e);
1878
1879	return pe;
1880}
1881
1882/*
1883 * Looks to see if this snapshot already has a pending exception
1884 * for this chunk, otherwise it allocates a new one and inserts
1885 * it into the pending table.
1886 *
1887 * NOTE: a write lock must be held on the chunk's pending exception table slot
1888 * before calling this.
1889 */
1890static struct dm_snap_pending_exception *
1891__find_pending_exception(struct dm_snapshot *s,
1892			 struct dm_snap_pending_exception *pe, chunk_t chunk)
1893{
1894	struct dm_snap_pending_exception *pe2;
1895
1896	pe2 = __lookup_pending_exception(s, chunk);
1897	if (pe2) {
1898		free_pending_exception(pe);
1899		return pe2;
1900	}
1901
1902	return __insert_pending_exception(s, pe, chunk);
1903}
1904
1905static void remap_exception(struct dm_snapshot *s, struct dm_exception *e,
1906			    struct bio *bio, chunk_t chunk)
1907{
1908	bio_set_dev(bio, s->cow->bdev);
1909	bio->bi_iter.bi_sector =
1910		chunk_to_sector(s->store, dm_chunk_number(e->new_chunk) +
1911				(chunk - e->old_chunk)) +
1912		(bio->bi_iter.bi_sector & s->store->chunk_mask);
1913}
1914
1915static void zero_callback(int read_err, unsigned long write_err, void *context)
1916{
1917	struct bio *bio = context;
1918	struct dm_snapshot *s = bio->bi_private;
1919
1920	account_end_copy(s);
1921	bio->bi_status = write_err ? BLK_STS_IOERR : 0;
1922	bio_endio(bio);
1923}
1924
1925static void zero_exception(struct dm_snapshot *s, struct dm_exception *e,
1926			   struct bio *bio, chunk_t chunk)
1927{
1928	struct dm_io_region dest;
1929
1930	dest.bdev = s->cow->bdev;
1931	dest.sector = bio->bi_iter.bi_sector;
1932	dest.count = s->store->chunk_size;
1933
1934	account_start_copy(s);
1935	WARN_ON_ONCE(bio->bi_private);
1936	bio->bi_private = s;
1937	dm_kcopyd_zero(s->kcopyd_client, 1, &dest, 0, zero_callback, bio);
1938}
1939
1940static bool io_overlaps_chunk(struct dm_snapshot *s, struct bio *bio)
1941{
1942	return bio->bi_iter.bi_size ==
1943		(s->store->chunk_size << SECTOR_SHIFT);
1944}
1945
1946static int snapshot_map(struct dm_target *ti, struct bio *bio)
1947{
1948	struct dm_exception *e;
1949	struct dm_snapshot *s = ti->private;
1950	int r = DM_MAPIO_REMAPPED;
1951	chunk_t chunk;
1952	struct dm_snap_pending_exception *pe = NULL;
1953	struct dm_exception_table_lock lock;
1954
1955	init_tracked_chunk(bio);
1956
1957	if (bio->bi_opf & REQ_PREFLUSH) {
1958		bio_set_dev(bio, s->cow->bdev);
1959		return DM_MAPIO_REMAPPED;
1960	}
1961
1962	chunk = sector_to_chunk(s->store, bio->bi_iter.bi_sector);
1963	dm_exception_table_lock_init(s, chunk, &lock);
1964
1965	/* Full snapshots are not usable */
1966	/* To get here the table must be live so s->active is always set. */
1967	if (!s->valid)
1968		return DM_MAPIO_KILL;
1969
1970	if (bio_data_dir(bio) == WRITE) {
1971		while (unlikely(!wait_for_in_progress(s, false)))
1972			; /* wait_for_in_progress() has slept */
1973	}
1974
1975	down_read(&s->lock);
1976	dm_exception_table_lock(&lock);
1977
1978	if (!s->valid || (unlikely(s->snapshot_overflowed) &&
1979	    bio_data_dir(bio) == WRITE)) {
1980		r = DM_MAPIO_KILL;
1981		goto out_unlock;
1982	}
1983
1984	if (unlikely(bio_op(bio) == REQ_OP_DISCARD)) {
1985		if (s->discard_passdown_origin && dm_bio_get_target_bio_nr(bio)) {
1986			/*
1987			 * passdown discard to origin (without triggering
1988			 * snapshot exceptions via do_origin; doing so would
1989			 * defeat the goal of freeing space in origin that is
1990			 * implied by the "discard_passdown_origin" feature)
1991			 */
1992			bio_set_dev(bio, s->origin->bdev);
1993			track_chunk(s, bio, chunk);
1994			goto out_unlock;
1995		}
1996		/* discard to snapshot (target_bio_nr == 0) zeroes exceptions */
1997	}
1998
1999	/* If the block is already remapped - use that, else remap it */
2000	e = dm_lookup_exception(&s->complete, chunk);
2001	if (e) {
2002		remap_exception(s, e, bio, chunk);
2003		if (unlikely(bio_op(bio) == REQ_OP_DISCARD) &&
2004		    io_overlaps_chunk(s, bio)) {
2005			dm_exception_table_unlock(&lock);
2006			up_read(&s->lock);
2007			zero_exception(s, e, bio, chunk);
2008			r = DM_MAPIO_SUBMITTED; /* discard is not issued */
2009			goto out;
2010		}
2011		goto out_unlock;
2012	}
2013
2014	if (unlikely(bio_op(bio) == REQ_OP_DISCARD)) {
2015		/*
2016		 * If no exception exists, complete discard immediately
2017		 * otherwise it'll trigger copy-out.
2018		 */
2019		bio_endio(bio);
2020		r = DM_MAPIO_SUBMITTED;
2021		goto out_unlock;
2022	}
2023
2024	/*
2025	 * Write to snapshot - higher level takes care of RW/RO
2026	 * flags so we should only get this if we are
2027	 * writable.
2028	 */
2029	if (bio_data_dir(bio) == WRITE) {
2030		pe = __lookup_pending_exception(s, chunk);
2031		if (!pe) {
2032			dm_exception_table_unlock(&lock);
2033			pe = alloc_pending_exception(s);
2034			dm_exception_table_lock(&lock);
2035
2036			e = dm_lookup_exception(&s->complete, chunk);
2037			if (e) {
2038				free_pending_exception(pe);
2039				remap_exception(s, e, bio, chunk);
2040				goto out_unlock;
2041			}
2042
2043			pe = __find_pending_exception(s, pe, chunk);
2044			if (!pe) {
2045				dm_exception_table_unlock(&lock);
2046				up_read(&s->lock);
2047
2048				down_write(&s->lock);
2049
2050				if (s->store->userspace_supports_overflow) {
2051					if (s->valid && !s->snapshot_overflowed) {
2052						s->snapshot_overflowed = 1;
2053						DMERR("Snapshot overflowed: Unable to allocate exception.");
2054					}
2055				} else
2056					__invalidate_snapshot(s, -ENOMEM);
2057				up_write(&s->lock);
2058
2059				r = DM_MAPIO_KILL;
2060				goto out;
2061			}
2062		}
2063
2064		remap_exception(s, &pe->e, bio, chunk);
2065
2066		r = DM_MAPIO_SUBMITTED;
2067
2068		if (!pe->started && io_overlaps_chunk(s, bio)) {
2069			pe->started = 1;
2070
2071			dm_exception_table_unlock(&lock);
2072			up_read(&s->lock);
2073
2074			start_full_bio(pe, bio);
2075			goto out;
2076		}
2077
2078		bio_list_add(&pe->snapshot_bios, bio);
2079
2080		if (!pe->started) {
2081			/* this is protected by the exception table lock */
2082			pe->started = 1;
2083
2084			dm_exception_table_unlock(&lock);
2085			up_read(&s->lock);
2086
2087			start_copy(pe);
2088			goto out;
2089		}
2090	} else {
2091		bio_set_dev(bio, s->origin->bdev);
2092		track_chunk(s, bio, chunk);
2093	}
2094
2095out_unlock:
2096	dm_exception_table_unlock(&lock);
2097	up_read(&s->lock);
2098out:
2099	return r;
2100}
2101
2102/*
2103 * A snapshot-merge target behaves like a combination of a snapshot
2104 * target and a snapshot-origin target.  It only generates new
2105 * exceptions in other snapshots and not in the one that is being
2106 * merged.
2107 *
2108 * For each chunk, if there is an existing exception, it is used to
2109 * redirect I/O to the cow device.  Otherwise I/O is sent to the origin,
2110 * which in turn might generate exceptions in other snapshots.
2111 * If merging is currently taking place on the chunk in question, the
2112 * I/O is deferred by adding it to s->bios_queued_during_merge.
2113 */
2114static int snapshot_merge_map(struct dm_target *ti, struct bio *bio)
2115{
2116	struct dm_exception *e;
2117	struct dm_snapshot *s = ti->private;
2118	int r = DM_MAPIO_REMAPPED;
2119	chunk_t chunk;
2120
2121	init_tracked_chunk(bio);
2122
2123	if (bio->bi_opf & REQ_PREFLUSH) {
2124		if (!dm_bio_get_target_bio_nr(bio))
2125			bio_set_dev(bio, s->origin->bdev);
2126		else
2127			bio_set_dev(bio, s->cow->bdev);
2128		return DM_MAPIO_REMAPPED;
2129	}
2130
2131	if (unlikely(bio_op(bio) == REQ_OP_DISCARD)) {
2132		/* Once merging, discards no longer effect change */
2133		bio_endio(bio);
2134		return DM_MAPIO_SUBMITTED;
2135	}
2136
2137	chunk = sector_to_chunk(s->store, bio->bi_iter.bi_sector);
2138
2139	down_write(&s->lock);
2140
2141	/* Full merging snapshots are redirected to the origin */
2142	if (!s->valid)
2143		goto redirect_to_origin;
2144
2145	/* If the block is already remapped - use that */
2146	e = dm_lookup_exception(&s->complete, chunk);
2147	if (e) {
2148		/* Queue writes overlapping with chunks being merged */
2149		if (bio_data_dir(bio) == WRITE &&
2150		    chunk >= s->first_merging_chunk &&
2151		    chunk < (s->first_merging_chunk +
2152			     s->num_merging_chunks)) {
2153			bio_set_dev(bio, s->origin->bdev);
2154			bio_list_add(&s->bios_queued_during_merge, bio);
2155			r = DM_MAPIO_SUBMITTED;
2156			goto out_unlock;
2157		}
2158
2159		remap_exception(s, e, bio, chunk);
2160
2161		if (bio_data_dir(bio) == WRITE)
2162			track_chunk(s, bio, chunk);
2163		goto out_unlock;
2164	}
2165
2166redirect_to_origin:
2167	bio_set_dev(bio, s->origin->bdev);
2168
2169	if (bio_data_dir(bio) == WRITE) {
2170		up_write(&s->lock);
2171		return do_origin(s->origin, bio, false);
2172	}
2173
2174out_unlock:
2175	up_write(&s->lock);
2176
2177	return r;
2178}
2179
2180static int snapshot_end_io(struct dm_target *ti, struct bio *bio,
2181		blk_status_t *error)
2182{
2183	struct dm_snapshot *s = ti->private;
2184
2185	if (is_bio_tracked(bio))
2186		stop_tracking_chunk(s, bio);
2187
2188	return DM_ENDIO_DONE;
2189}
2190
2191static void snapshot_merge_presuspend(struct dm_target *ti)
2192{
2193	struct dm_snapshot *s = ti->private;
2194
2195	stop_merge(s);
2196}
2197
2198static int snapshot_preresume(struct dm_target *ti)
2199{
2200	int r = 0;
2201	struct dm_snapshot *s = ti->private;
2202	struct dm_snapshot *snap_src = NULL, *snap_dest = NULL;
2203
2204	down_read(&_origins_lock);
2205	(void) __find_snapshots_sharing_cow(s, &snap_src, &snap_dest, NULL);
2206	if (snap_src && snap_dest) {
2207		down_read(&snap_src->lock);
2208		if (s == snap_src) {
2209			DMERR("Unable to resume snapshot source until handover completes.");
 
2210			r = -EINVAL;
2211		} else if (!dm_suspended(snap_src->ti)) {
2212			DMERR("Unable to perform snapshot handover until source is suspended.");
 
2213			r = -EINVAL;
2214		}
2215		up_read(&snap_src->lock);
2216	}
2217	up_read(&_origins_lock);
2218
2219	return r;
2220}
2221
2222static void snapshot_resume(struct dm_target *ti)
2223{
2224	struct dm_snapshot *s = ti->private;
2225	struct dm_snapshot *snap_src = NULL, *snap_dest = NULL, *snap_merging = NULL;
2226	struct dm_origin *o;
2227	struct mapped_device *origin_md = NULL;
2228	bool must_restart_merging = false;
2229
2230	down_read(&_origins_lock);
2231
2232	o = __lookup_dm_origin(s->origin->bdev);
2233	if (o)
2234		origin_md = dm_table_get_md(o->ti->table);
2235	if (!origin_md) {
2236		(void) __find_snapshots_sharing_cow(s, NULL, NULL, &snap_merging);
2237		if (snap_merging)
2238			origin_md = dm_table_get_md(snap_merging->ti->table);
2239	}
2240	if (origin_md == dm_table_get_md(ti->table))
2241		origin_md = NULL;
2242	if (origin_md) {
2243		if (dm_hold(origin_md))
2244			origin_md = NULL;
2245	}
2246
2247	up_read(&_origins_lock);
2248
2249	if (origin_md) {
2250		dm_internal_suspend_fast(origin_md);
2251		if (snap_merging && test_bit(RUNNING_MERGE, &snap_merging->state_bits)) {
2252			must_restart_merging = true;
2253			stop_merge(snap_merging);
2254		}
2255	}
2256
2257	down_read(&_origins_lock);
2258
2259	(void) __find_snapshots_sharing_cow(s, &snap_src, &snap_dest, NULL);
2260	if (snap_src && snap_dest) {
2261		down_write(&snap_src->lock);
2262		down_write_nested(&snap_dest->lock, SINGLE_DEPTH_NESTING);
2263		__handover_exceptions(snap_src, snap_dest);
2264		up_write(&snap_dest->lock);
2265		up_write(&snap_src->lock);
2266	}
2267
2268	up_read(&_origins_lock);
2269
2270	if (origin_md) {
2271		if (must_restart_merging)
2272			start_merge(snap_merging);
2273		dm_internal_resume_fast(origin_md);
2274		dm_put(origin_md);
2275	}
2276
2277	/* Now we have correct chunk size, reregister */
2278	reregister_snapshot(s);
2279
2280	down_write(&s->lock);
2281	s->active = 1;
2282	up_write(&s->lock);
2283}
2284
2285static uint32_t get_origin_minimum_chunksize(struct block_device *bdev)
2286{
2287	uint32_t min_chunksize;
2288
2289	down_read(&_origins_lock);
2290	min_chunksize = __minimum_chunk_size(__lookup_origin(bdev));
2291	up_read(&_origins_lock);
2292
2293	return min_chunksize;
2294}
2295
2296static void snapshot_merge_resume(struct dm_target *ti)
2297{
2298	struct dm_snapshot *s = ti->private;
2299
2300	/*
2301	 * Handover exceptions from existing snapshot.
2302	 */
2303	snapshot_resume(ti);
2304
2305	/*
2306	 * snapshot-merge acts as an origin, so set ti->max_io_len
2307	 */
2308	ti->max_io_len = get_origin_minimum_chunksize(s->origin->bdev);
2309
2310	start_merge(s);
2311}
2312
2313static void snapshot_status(struct dm_target *ti, status_type_t type,
2314			    unsigned int status_flags, char *result, unsigned int maxlen)
2315{
2316	unsigned int sz = 0;
2317	struct dm_snapshot *snap = ti->private;
2318	unsigned int num_features;
2319
2320	switch (type) {
2321	case STATUSTYPE_INFO:
2322
2323		down_write(&snap->lock);
2324
2325		if (!snap->valid)
2326			DMEMIT("Invalid");
2327		else if (snap->merge_failed)
2328			DMEMIT("Merge failed");
2329		else if (snap->snapshot_overflowed)
2330			DMEMIT("Overflow");
2331		else {
2332			if (snap->store->type->usage) {
2333				sector_t total_sectors, sectors_allocated,
2334					 metadata_sectors;
2335				snap->store->type->usage(snap->store,
2336							 &total_sectors,
2337							 &sectors_allocated,
2338							 &metadata_sectors);
2339				DMEMIT("%llu/%llu %llu",
2340				       (unsigned long long)sectors_allocated,
2341				       (unsigned long long)total_sectors,
2342				       (unsigned long long)metadata_sectors);
2343			} else
 
2344				DMEMIT("Unknown");
2345		}
2346
2347		up_write(&snap->lock);
2348
2349		break;
2350
2351	case STATUSTYPE_TABLE:
2352		/*
2353		 * kdevname returns a static pointer so we need
2354		 * to make private copies if the output is to
2355		 * make sense.
2356		 */
2357		DMEMIT("%s %s", snap->origin->name, snap->cow->name);
2358		sz += snap->store->type->status(snap->store, type, result + sz,
2359						maxlen - sz);
2360		num_features = snap->discard_zeroes_cow + snap->discard_passdown_origin;
2361		if (num_features) {
2362			DMEMIT(" %u", num_features);
2363			if (snap->discard_zeroes_cow)
2364				DMEMIT(" discard_zeroes_cow");
2365			if (snap->discard_passdown_origin)
2366				DMEMIT(" discard_passdown_origin");
2367		}
2368		break;
2369
2370	case STATUSTYPE_IMA:
2371		DMEMIT_TARGET_NAME_VERSION(ti->type);
2372		DMEMIT(",snap_origin_name=%s", snap->origin->name);
2373		DMEMIT(",snap_cow_name=%s", snap->cow->name);
2374		DMEMIT(",snap_valid=%c", snap->valid ? 'y' : 'n');
2375		DMEMIT(",snap_merge_failed=%c", snap->merge_failed ? 'y' : 'n');
2376		DMEMIT(",snapshot_overflowed=%c", snap->snapshot_overflowed ? 'y' : 'n');
2377		DMEMIT(";");
2378		break;
2379	}
2380}
2381
2382static int snapshot_iterate_devices(struct dm_target *ti,
2383				    iterate_devices_callout_fn fn, void *data)
2384{
2385	struct dm_snapshot *snap = ti->private;
2386	int r;
2387
2388	r = fn(ti, snap->origin, 0, ti->len, data);
2389
2390	if (!r)
2391		r = fn(ti, snap->cow, 0, get_dev_size(snap->cow->bdev), data);
2392
2393	return r;
2394}
2395
2396static void snapshot_io_hints(struct dm_target *ti, struct queue_limits *limits)
2397{
2398	struct dm_snapshot *snap = ti->private;
2399
2400	if (snap->discard_zeroes_cow) {
2401		struct dm_snapshot *snap_src = NULL, *snap_dest = NULL;
2402
2403		down_read(&_origins_lock);
2404
2405		(void) __find_snapshots_sharing_cow(snap, &snap_src, &snap_dest, NULL);
2406		if (snap_src && snap_dest)
2407			snap = snap_src;
2408
2409		/* All discards are split on chunk_size boundary */
2410		limits->discard_granularity = snap->store->chunk_size;
2411		limits->max_discard_sectors = snap->store->chunk_size;
2412
2413		up_read(&_origins_lock);
2414	}
2415}
2416
2417/*
2418 *---------------------------------------------------------------
2419 * Origin methods
2420 *---------------------------------------------------------------
2421 */
2422/*
2423 * If no exceptions need creating, DM_MAPIO_REMAPPED is returned and any
2424 * supplied bio was ignored.  The caller may submit it immediately.
2425 * (No remapping actually occurs as the origin is always a direct linear
2426 * map.)
2427 *
2428 * If further exceptions are required, DM_MAPIO_SUBMITTED is returned
2429 * and any supplied bio is added to a list to be submitted once all
2430 * the necessary exceptions exist.
2431 */
2432static int __origin_write(struct list_head *snapshots, sector_t sector,
2433			  struct bio *bio)
2434{
2435	int r = DM_MAPIO_REMAPPED;
2436	struct dm_snapshot *snap;
2437	struct dm_exception *e;
2438	struct dm_snap_pending_exception *pe, *pe2;
2439	struct dm_snap_pending_exception *pe_to_start_now = NULL;
2440	struct dm_snap_pending_exception *pe_to_start_last = NULL;
2441	struct dm_exception_table_lock lock;
2442	chunk_t chunk;
2443
2444	/* Do all the snapshots on this origin */
2445	list_for_each_entry(snap, snapshots, list) {
2446		/*
2447		 * Don't make new exceptions in a merging snapshot
2448		 * because it has effectively been deleted
2449		 */
2450		if (dm_target_is_snapshot_merge(snap->ti))
2451			continue;
2452
2453		/* Nothing to do if writing beyond end of snapshot */
2454		if (sector >= dm_table_get_size(snap->ti->table))
2455			continue;
2456
2457		/*
2458		 * Remember, different snapshots can have
2459		 * different chunk sizes.
2460		 */
2461		chunk = sector_to_chunk(snap->store, sector);
2462		dm_exception_table_lock_init(snap, chunk, &lock);
2463
2464		down_read(&snap->lock);
2465		dm_exception_table_lock(&lock);
2466
2467		/* Only deal with valid and active snapshots */
2468		if (!snap->valid || !snap->active)
2469			goto next_snapshot;
2470
2471		pe = __lookup_pending_exception(snap, chunk);
2472		if (!pe) {
2473			/*
2474			 * Check exception table to see if block is already
2475			 * remapped in this snapshot and trigger an exception
2476			 * if not.
2477			 */
2478			e = dm_lookup_exception(&snap->complete, chunk);
2479			if (e)
2480				goto next_snapshot;
2481
2482			dm_exception_table_unlock(&lock);
2483			pe = alloc_pending_exception(snap);
2484			dm_exception_table_lock(&lock);
2485
2486			pe2 = __lookup_pending_exception(snap, chunk);
2487
2488			if (!pe2) {
2489				e = dm_lookup_exception(&snap->complete, chunk);
2490				if (e) {
2491					free_pending_exception(pe);
2492					goto next_snapshot;
2493				}
2494
2495				pe = __insert_pending_exception(snap, pe, chunk);
2496				if (!pe) {
2497					dm_exception_table_unlock(&lock);
2498					up_read(&snap->lock);
2499
2500					invalidate_snapshot(snap, -ENOMEM);
2501					continue;
2502				}
2503			} else {
2504				free_pending_exception(pe);
2505				pe = pe2;
2506			}
2507		}
2508
2509		r = DM_MAPIO_SUBMITTED;
2510
2511		/*
2512		 * If an origin bio was supplied, queue it to wait for the
2513		 * completion of this exception, and start this one last,
2514		 * at the end of the function.
2515		 */
2516		if (bio) {
2517			bio_list_add(&pe->origin_bios, bio);
2518			bio = NULL;
2519
2520			if (!pe->started) {
2521				pe->started = 1;
2522				pe_to_start_last = pe;
2523			}
2524		}
2525
2526		if (!pe->started) {
2527			pe->started = 1;
2528			pe_to_start_now = pe;
2529		}
2530
2531next_snapshot:
2532		dm_exception_table_unlock(&lock);
2533		up_read(&snap->lock);
2534
2535		if (pe_to_start_now) {
2536			start_copy(pe_to_start_now);
2537			pe_to_start_now = NULL;
2538		}
2539	}
2540
2541	/*
2542	 * Submit the exception against which the bio is queued last,
2543	 * to give the other exceptions a head start.
2544	 */
2545	if (pe_to_start_last)
2546		start_copy(pe_to_start_last);
2547
2548	return r;
2549}
2550
2551/*
2552 * Called on a write from the origin driver.
2553 */
2554static int do_origin(struct dm_dev *origin, struct bio *bio, bool limit)
2555{
2556	struct origin *o;
2557	int r = DM_MAPIO_REMAPPED;
2558
2559again:
2560	down_read(&_origins_lock);
2561	o = __lookup_origin(origin->bdev);
2562	if (o) {
2563		if (limit) {
2564			struct dm_snapshot *s;
2565
2566			list_for_each_entry(s, &o->snapshots, list)
2567				if (unlikely(!wait_for_in_progress(s, true)))
2568					goto again;
2569		}
2570
2571		r = __origin_write(&o->snapshots, bio->bi_iter.bi_sector, bio);
2572	}
2573	up_read(&_origins_lock);
2574
2575	return r;
2576}
2577
2578/*
2579 * Trigger exceptions in all non-merging snapshots.
2580 *
2581 * The chunk size of the merging snapshot may be larger than the chunk
2582 * size of some other snapshot so we may need to reallocate multiple
2583 * chunks in other snapshots.
2584 *
2585 * We scan all the overlapping exceptions in the other snapshots.
2586 * Returns 1 if anything was reallocated and must be waited for,
2587 * otherwise returns 0.
2588 *
2589 * size must be a multiple of merging_snap's chunk_size.
2590 */
2591static int origin_write_extent(struct dm_snapshot *merging_snap,
2592			       sector_t sector, unsigned int size)
2593{
2594	int must_wait = 0;
2595	sector_t n;
2596	struct origin *o;
2597
2598	/*
2599	 * The origin's __minimum_chunk_size() got stored in max_io_len
2600	 * by snapshot_merge_resume().
2601	 */
2602	down_read(&_origins_lock);
2603	o = __lookup_origin(merging_snap->origin->bdev);
2604	for (n = 0; n < size; n += merging_snap->ti->max_io_len)
2605		if (__origin_write(&o->snapshots, sector + n, NULL) ==
2606		    DM_MAPIO_SUBMITTED)
2607			must_wait = 1;
2608	up_read(&_origins_lock);
2609
2610	return must_wait;
2611}
2612
2613/*
2614 * Origin: maps a linear range of a device, with hooks for snapshotting.
2615 */
2616
2617/*
2618 * Construct an origin mapping: <dev_path>
2619 * The context for an origin is merely a 'struct dm_dev *'
2620 * pointing to the real device.
2621 */
2622static int origin_ctr(struct dm_target *ti, unsigned int argc, char **argv)
2623{
2624	int r;
2625	struct dm_origin *o;
2626
2627	if (argc != 1) {
2628		ti->error = "origin: incorrect number of arguments";
2629		return -EINVAL;
2630	}
2631
2632	o = kmalloc(sizeof(struct dm_origin), GFP_KERNEL);
2633	if (!o) {
2634		ti->error = "Cannot allocate private origin structure";
2635		r = -ENOMEM;
2636		goto bad_alloc;
2637	}
2638
2639	r = dm_get_device(ti, argv[0], dm_table_get_mode(ti->table), &o->dev);
2640	if (r) {
2641		ti->error = "Cannot get target device";
2642		goto bad_open;
2643	}
2644
2645	o->ti = ti;
2646	ti->private = o;
2647	ti->num_flush_bios = 1;
2648
2649	return 0;
2650
2651bad_open:
2652	kfree(o);
2653bad_alloc:
2654	return r;
2655}
2656
2657static void origin_dtr(struct dm_target *ti)
2658{
2659	struct dm_origin *o = ti->private;
2660
2661	dm_put_device(ti, o->dev);
2662	kfree(o);
2663}
2664
2665static int origin_map(struct dm_target *ti, struct bio *bio)
2666{
2667	struct dm_origin *o = ti->private;
2668	unsigned int available_sectors;
2669
2670	bio_set_dev(bio, o->dev->bdev);
2671
2672	if (unlikely(bio->bi_opf & REQ_PREFLUSH))
2673		return DM_MAPIO_REMAPPED;
2674
2675	if (bio_data_dir(bio) != WRITE)
2676		return DM_MAPIO_REMAPPED;
2677
2678	available_sectors = o->split_boundary -
2679		((unsigned int)bio->bi_iter.bi_sector & (o->split_boundary - 1));
2680
2681	if (bio_sectors(bio) > available_sectors)
2682		dm_accept_partial_bio(bio, available_sectors);
2683
2684	/* Only tell snapshots if this is a write */
2685	return do_origin(o->dev, bio, true);
2686}
2687
2688/*
2689 * Set the target "max_io_len" field to the minimum of all the snapshots'
2690 * chunk sizes.
2691 */
2692static void origin_resume(struct dm_target *ti)
2693{
2694	struct dm_origin *o = ti->private;
2695
2696	o->split_boundary = get_origin_minimum_chunksize(o->dev->bdev);
2697
2698	down_write(&_origins_lock);
2699	__insert_dm_origin(o);
2700	up_write(&_origins_lock);
2701}
2702
2703static void origin_postsuspend(struct dm_target *ti)
2704{
2705	struct dm_origin *o = ti->private;
2706
2707	down_write(&_origins_lock);
2708	__remove_dm_origin(o);
2709	up_write(&_origins_lock);
2710}
2711
2712static void origin_status(struct dm_target *ti, status_type_t type,
2713			  unsigned int status_flags, char *result, unsigned int maxlen)
2714{
2715	struct dm_origin *o = ti->private;
2716
2717	switch (type) {
2718	case STATUSTYPE_INFO:
2719		result[0] = '\0';
2720		break;
2721
2722	case STATUSTYPE_TABLE:
2723		snprintf(result, maxlen, "%s", o->dev->name);
2724		break;
2725	case STATUSTYPE_IMA:
2726		result[0] = '\0';
2727		break;
2728	}
2729}
2730
2731static int origin_iterate_devices(struct dm_target *ti,
2732				  iterate_devices_callout_fn fn, void *data)
2733{
2734	struct dm_origin *o = ti->private;
2735
2736	return fn(ti, o->dev, 0, ti->len, data);
2737}
2738
2739static struct target_type origin_target = {
2740	.name    = "snapshot-origin",
2741	.version = {1, 9, 0},
2742	.module  = THIS_MODULE,
2743	.ctr     = origin_ctr,
2744	.dtr     = origin_dtr,
2745	.map     = origin_map,
2746	.resume  = origin_resume,
2747	.postsuspend = origin_postsuspend,
2748	.status  = origin_status,
2749	.iterate_devices = origin_iterate_devices,
2750};
2751
2752static struct target_type snapshot_target = {
2753	.name    = "snapshot",
2754	.version = {1, 16, 0},
2755	.module  = THIS_MODULE,
2756	.ctr     = snapshot_ctr,
2757	.dtr     = snapshot_dtr,
2758	.map     = snapshot_map,
2759	.end_io  = snapshot_end_io,
2760	.preresume  = snapshot_preresume,
2761	.resume  = snapshot_resume,
2762	.status  = snapshot_status,
2763	.iterate_devices = snapshot_iterate_devices,
2764	.io_hints = snapshot_io_hints,
2765};
2766
2767static struct target_type merge_target = {
2768	.name    = dm_snapshot_merge_target_name,
2769	.version = {1, 5, 0},
2770	.module  = THIS_MODULE,
2771	.ctr     = snapshot_ctr,
2772	.dtr     = snapshot_dtr,
2773	.map     = snapshot_merge_map,
2774	.end_io  = snapshot_end_io,
2775	.presuspend = snapshot_merge_presuspend,
2776	.preresume  = snapshot_preresume,
2777	.resume  = snapshot_merge_resume,
2778	.status  = snapshot_status,
2779	.iterate_devices = snapshot_iterate_devices,
2780	.io_hints = snapshot_io_hints,
2781};
2782
2783static int __init dm_snapshot_init(void)
2784{
2785	int r;
2786
2787	r = dm_exception_store_init();
2788	if (r) {
2789		DMERR("Failed to initialize exception stores");
2790		return r;
2791	}
2792
2793	r = init_origin_hash();
2794	if (r) {
2795		DMERR("init_origin_hash failed.");
2796		goto bad_origin_hash;
2797	}
2798
2799	exception_cache = KMEM_CACHE(dm_exception, 0);
2800	if (!exception_cache) {
2801		DMERR("Couldn't create exception cache.");
2802		r = -ENOMEM;
2803		goto bad_exception_cache;
2804	}
2805
2806	pending_cache = KMEM_CACHE(dm_snap_pending_exception, 0);
2807	if (!pending_cache) {
2808		DMERR("Couldn't create pending cache.");
2809		r = -ENOMEM;
2810		goto bad_pending_cache;
2811	}
2812
2813	r = dm_register_target(&snapshot_target);
2814	if (r < 0)
 
2815		goto bad_register_snapshot_target;
 
2816
2817	r = dm_register_target(&origin_target);
2818	if (r < 0)
 
2819		goto bad_register_origin_target;
 
2820
2821	r = dm_register_target(&merge_target);
2822	if (r < 0)
 
2823		goto bad_register_merge_target;
 
2824
2825	return 0;
2826
2827bad_register_merge_target:
2828	dm_unregister_target(&origin_target);
2829bad_register_origin_target:
2830	dm_unregister_target(&snapshot_target);
2831bad_register_snapshot_target:
2832	kmem_cache_destroy(pending_cache);
2833bad_pending_cache:
2834	kmem_cache_destroy(exception_cache);
2835bad_exception_cache:
2836	exit_origin_hash();
2837bad_origin_hash:
2838	dm_exception_store_exit();
2839
2840	return r;
2841}
2842
2843static void __exit dm_snapshot_exit(void)
2844{
2845	dm_unregister_target(&snapshot_target);
2846	dm_unregister_target(&origin_target);
2847	dm_unregister_target(&merge_target);
2848
2849	exit_origin_hash();
2850	kmem_cache_destroy(pending_cache);
2851	kmem_cache_destroy(exception_cache);
2852
2853	dm_exception_store_exit();
2854}
2855
2856/* Module hooks */
2857module_init(dm_snapshot_init);
2858module_exit(dm_snapshot_exit);
2859
2860MODULE_DESCRIPTION(DM_NAME " snapshot target");
2861MODULE_AUTHOR("Joe Thornber");
2862MODULE_LICENSE("GPL");
2863MODULE_ALIAS("dm-snapshot-origin");
2864MODULE_ALIAS("dm-snapshot-merge");
v5.14.15
 
   1/*
   2 * Copyright (C) 2001-2002 Sistina Software (UK) Limited.
   3 *
   4 * This file is released under the GPL.
   5 */
   6
   7#include <linux/blkdev.h>
   8#include <linux/device-mapper.h>
   9#include <linux/delay.h>
  10#include <linux/fs.h>
  11#include <linux/init.h>
  12#include <linux/kdev_t.h>
  13#include <linux/list.h>
  14#include <linux/list_bl.h>
  15#include <linux/mempool.h>
  16#include <linux/module.h>
  17#include <linux/slab.h>
  18#include <linux/vmalloc.h>
  19#include <linux/log2.h>
  20#include <linux/dm-kcopyd.h>
  21
  22#include "dm.h"
  23
  24#include "dm-exception-store.h"
  25
  26#define DM_MSG_PREFIX "snapshots"
  27
  28static const char dm_snapshot_merge_target_name[] = "snapshot-merge";
  29
  30#define dm_target_is_snapshot_merge(ti) \
  31	((ti)->type->name == dm_snapshot_merge_target_name)
  32
  33/*
  34 * The size of the mempool used to track chunks in use.
  35 */
  36#define MIN_IOS 256
  37
  38#define DM_TRACKED_CHUNK_HASH_SIZE	16
  39#define DM_TRACKED_CHUNK_HASH(x)	((unsigned long)(x) & \
  40					 (DM_TRACKED_CHUNK_HASH_SIZE - 1))
  41
  42struct dm_exception_table {
  43	uint32_t hash_mask;
  44	unsigned hash_shift;
  45	struct hlist_bl_head *table;
  46};
  47
  48struct dm_snapshot {
  49	struct rw_semaphore lock;
  50
  51	struct dm_dev *origin;
  52	struct dm_dev *cow;
  53
  54	struct dm_target *ti;
  55
  56	/* List of snapshots per Origin */
  57	struct list_head list;
  58
  59	/*
  60	 * You can't use a snapshot if this is 0 (e.g. if full).
  61	 * A snapshot-merge target never clears this.
  62	 */
  63	int valid;
  64
  65	/*
  66	 * The snapshot overflowed because of a write to the snapshot device.
  67	 * We don't have to invalidate the snapshot in this case, but we need
  68	 * to prevent further writes.
  69	 */
  70	int snapshot_overflowed;
  71
  72	/* Origin writes don't trigger exceptions until this is set */
  73	int active;
  74
  75	atomic_t pending_exceptions_count;
  76
  77	spinlock_t pe_allocation_lock;
  78
  79	/* Protected by "pe_allocation_lock" */
  80	sector_t exception_start_sequence;
  81
  82	/* Protected by kcopyd single-threaded callback */
  83	sector_t exception_complete_sequence;
  84
  85	/*
  86	 * A list of pending exceptions that completed out of order.
  87	 * Protected by kcopyd single-threaded callback.
  88	 */
  89	struct rb_root out_of_order_tree;
  90
  91	mempool_t pending_pool;
  92
  93	struct dm_exception_table pending;
  94	struct dm_exception_table complete;
  95
  96	/*
  97	 * pe_lock protects all pending_exception operations and access
  98	 * as well as the snapshot_bios list.
  99	 */
 100	spinlock_t pe_lock;
 101
 102	/* Chunks with outstanding reads */
 103	spinlock_t tracked_chunk_lock;
 104	struct hlist_head tracked_chunk_hash[DM_TRACKED_CHUNK_HASH_SIZE];
 105
 106	/* The on disk metadata handler */
 107	struct dm_exception_store *store;
 108
 109	unsigned in_progress;
 110	struct wait_queue_head in_progress_wait;
 111
 112	struct dm_kcopyd_client *kcopyd_client;
 113
 114	/* Wait for events based on state_bits */
 115	unsigned long state_bits;
 116
 117	/* Range of chunks currently being merged. */
 118	chunk_t first_merging_chunk;
 119	int num_merging_chunks;
 120
 121	/*
 122	 * The merge operation failed if this flag is set.
 123	 * Failure modes are handled as follows:
 124	 * - I/O error reading the header
 125	 *   	=> don't load the target; abort.
 126	 * - Header does not have "valid" flag set
 127	 *   	=> use the origin; forget about the snapshot.
 128	 * - I/O error when reading exceptions
 129	 *   	=> don't load the target; abort.
 130	 *         (We can't use the intermediate origin state.)
 131	 * - I/O error while merging
 132	 *	=> stop merging; set merge_failed; process I/O normally.
 133	 */
 134	bool merge_failed:1;
 135
 136	bool discard_zeroes_cow:1;
 137	bool discard_passdown_origin:1;
 138
 139	/*
 140	 * Incoming bios that overlap with chunks being merged must wait
 141	 * for them to be committed.
 142	 */
 143	struct bio_list bios_queued_during_merge;
 144
 145	/*
 146	 * Flush data after merge.
 147	 */
 148	struct bio flush_bio;
 149};
 150
 151/*
 152 * state_bits:
 153 *   RUNNING_MERGE  - Merge operation is in progress.
 154 *   SHUTDOWN_MERGE - Set to signal that merge needs to be stopped;
 155 *                    cleared afterwards.
 156 */
 157#define RUNNING_MERGE          0
 158#define SHUTDOWN_MERGE         1
 159
 160/*
 161 * Maximum number of chunks being copied on write.
 162 *
 163 * The value was decided experimentally as a trade-off between memory
 164 * consumption, stalling the kernel's workqueues and maintaining a high enough
 165 * throughput.
 166 */
 167#define DEFAULT_COW_THRESHOLD 2048
 168
 169static unsigned cow_threshold = DEFAULT_COW_THRESHOLD;
 170module_param_named(snapshot_cow_threshold, cow_threshold, uint, 0644);
 171MODULE_PARM_DESC(snapshot_cow_threshold, "Maximum number of chunks being copied on write");
 172
 173DECLARE_DM_KCOPYD_THROTTLE_WITH_MODULE_PARM(snapshot_copy_throttle,
 174		"A percentage of time allocated for copy on write");
 175
 176struct dm_dev *dm_snap_origin(struct dm_snapshot *s)
 177{
 178	return s->origin;
 179}
 180EXPORT_SYMBOL(dm_snap_origin);
 181
 182struct dm_dev *dm_snap_cow(struct dm_snapshot *s)
 183{
 184	return s->cow;
 185}
 186EXPORT_SYMBOL(dm_snap_cow);
 187
 188static sector_t chunk_to_sector(struct dm_exception_store *store,
 189				chunk_t chunk)
 190{
 191	return chunk << store->chunk_shift;
 192}
 193
 194static int bdev_equal(struct block_device *lhs, struct block_device *rhs)
 195{
 196	/*
 197	 * There is only ever one instance of a particular block
 198	 * device so we can compare pointers safely.
 199	 */
 200	return lhs == rhs;
 201}
 202
 203struct dm_snap_pending_exception {
 204	struct dm_exception e;
 205
 206	/*
 207	 * Origin buffers waiting for this to complete are held
 208	 * in a bio list
 209	 */
 210	struct bio_list origin_bios;
 211	struct bio_list snapshot_bios;
 212
 213	/* Pointer back to snapshot context */
 214	struct dm_snapshot *snap;
 215
 216	/*
 217	 * 1 indicates the exception has already been sent to
 218	 * kcopyd.
 219	 */
 220	int started;
 221
 222	/* There was copying error. */
 223	int copy_error;
 224
 225	/* A sequence number, it is used for in-order completion. */
 226	sector_t exception_sequence;
 227
 228	struct rb_node out_of_order_node;
 229
 230	/*
 231	 * For writing a complete chunk, bypassing the copy.
 232	 */
 233	struct bio *full_bio;
 234	bio_end_io_t *full_bio_end_io;
 235};
 236
 237/*
 238 * Hash table mapping origin volumes to lists of snapshots and
 239 * a lock to protect it
 240 */
 241static struct kmem_cache *exception_cache;
 242static struct kmem_cache *pending_cache;
 243
 244struct dm_snap_tracked_chunk {
 245	struct hlist_node node;
 246	chunk_t chunk;
 247};
 248
 249static void init_tracked_chunk(struct bio *bio)
 250{
 251	struct dm_snap_tracked_chunk *c = dm_per_bio_data(bio, sizeof(struct dm_snap_tracked_chunk));
 
 252	INIT_HLIST_NODE(&c->node);
 253}
 254
 255static bool is_bio_tracked(struct bio *bio)
 256{
 257	struct dm_snap_tracked_chunk *c = dm_per_bio_data(bio, sizeof(struct dm_snap_tracked_chunk));
 
 258	return !hlist_unhashed(&c->node);
 259}
 260
 261static void track_chunk(struct dm_snapshot *s, struct bio *bio, chunk_t chunk)
 262{
 263	struct dm_snap_tracked_chunk *c = dm_per_bio_data(bio, sizeof(struct dm_snap_tracked_chunk));
 264
 265	c->chunk = chunk;
 266
 267	spin_lock_irq(&s->tracked_chunk_lock);
 268	hlist_add_head(&c->node,
 269		       &s->tracked_chunk_hash[DM_TRACKED_CHUNK_HASH(chunk)]);
 270	spin_unlock_irq(&s->tracked_chunk_lock);
 271}
 272
 273static void stop_tracking_chunk(struct dm_snapshot *s, struct bio *bio)
 274{
 275	struct dm_snap_tracked_chunk *c = dm_per_bio_data(bio, sizeof(struct dm_snap_tracked_chunk));
 276	unsigned long flags;
 277
 278	spin_lock_irqsave(&s->tracked_chunk_lock, flags);
 279	hlist_del(&c->node);
 280	spin_unlock_irqrestore(&s->tracked_chunk_lock, flags);
 281}
 282
 283static int __chunk_is_tracked(struct dm_snapshot *s, chunk_t chunk)
 284{
 285	struct dm_snap_tracked_chunk *c;
 286	int found = 0;
 287
 288	spin_lock_irq(&s->tracked_chunk_lock);
 289
 290	hlist_for_each_entry(c,
 291	    &s->tracked_chunk_hash[DM_TRACKED_CHUNK_HASH(chunk)], node) {
 292		if (c->chunk == chunk) {
 293			found = 1;
 294			break;
 295		}
 296	}
 297
 298	spin_unlock_irq(&s->tracked_chunk_lock);
 299
 300	return found;
 301}
 302
 303/*
 304 * This conflicting I/O is extremely improbable in the caller,
 305 * so msleep(1) is sufficient and there is no need for a wait queue.
 306 */
 307static void __check_for_conflicting_io(struct dm_snapshot *s, chunk_t chunk)
 308{
 309	while (__chunk_is_tracked(s, chunk))
 310		msleep(1);
 311}
 312
 313/*
 314 * One of these per registered origin, held in the snapshot_origins hash
 315 */
 316struct origin {
 317	/* The origin device */
 318	struct block_device *bdev;
 319
 320	struct list_head hash_list;
 321
 322	/* List of snapshots for this origin */
 323	struct list_head snapshots;
 324};
 325
 326/*
 327 * This structure is allocated for each origin target
 328 */
 329struct dm_origin {
 330	struct dm_dev *dev;
 331	struct dm_target *ti;
 332	unsigned split_boundary;
 333	struct list_head hash_list;
 334};
 335
 336/*
 337 * Size of the hash table for origin volumes. If we make this
 338 * the size of the minors list then it should be nearly perfect
 339 */
 340#define ORIGIN_HASH_SIZE 256
 341#define ORIGIN_MASK      0xFF
 342static struct list_head *_origins;
 343static struct list_head *_dm_origins;
 344static struct rw_semaphore _origins_lock;
 345
 346static DECLARE_WAIT_QUEUE_HEAD(_pending_exceptions_done);
 347static DEFINE_SPINLOCK(_pending_exceptions_done_spinlock);
 348static uint64_t _pending_exceptions_done_count;
 349
 350static int init_origin_hash(void)
 351{
 352	int i;
 353
 354	_origins = kmalloc_array(ORIGIN_HASH_SIZE, sizeof(struct list_head),
 355				 GFP_KERNEL);
 356	if (!_origins) {
 357		DMERR("unable to allocate memory for _origins");
 358		return -ENOMEM;
 359	}
 360	for (i = 0; i < ORIGIN_HASH_SIZE; i++)
 361		INIT_LIST_HEAD(_origins + i);
 362
 363	_dm_origins = kmalloc_array(ORIGIN_HASH_SIZE,
 364				    sizeof(struct list_head),
 365				    GFP_KERNEL);
 366	if (!_dm_origins) {
 367		DMERR("unable to allocate memory for _dm_origins");
 368		kfree(_origins);
 369		return -ENOMEM;
 370	}
 371	for (i = 0; i < ORIGIN_HASH_SIZE; i++)
 372		INIT_LIST_HEAD(_dm_origins + i);
 373
 374	init_rwsem(&_origins_lock);
 375
 376	return 0;
 377}
 378
 379static void exit_origin_hash(void)
 380{
 381	kfree(_origins);
 382	kfree(_dm_origins);
 383}
 384
 385static unsigned origin_hash(struct block_device *bdev)
 386{
 387	return bdev->bd_dev & ORIGIN_MASK;
 388}
 389
 390static struct origin *__lookup_origin(struct block_device *origin)
 391{
 392	struct list_head *ol;
 393	struct origin *o;
 394
 395	ol = &_origins[origin_hash(origin)];
 396	list_for_each_entry (o, ol, hash_list)
 397		if (bdev_equal(o->bdev, origin))
 398			return o;
 399
 400	return NULL;
 401}
 402
 403static void __insert_origin(struct origin *o)
 404{
 405	struct list_head *sl = &_origins[origin_hash(o->bdev)];
 
 406	list_add_tail(&o->hash_list, sl);
 407}
 408
 409static struct dm_origin *__lookup_dm_origin(struct block_device *origin)
 410{
 411	struct list_head *ol;
 412	struct dm_origin *o;
 413
 414	ol = &_dm_origins[origin_hash(origin)];
 415	list_for_each_entry (o, ol, hash_list)
 416		if (bdev_equal(o->dev->bdev, origin))
 417			return o;
 418
 419	return NULL;
 420}
 421
 422static void __insert_dm_origin(struct dm_origin *o)
 423{
 424	struct list_head *sl = &_dm_origins[origin_hash(o->dev->bdev)];
 
 425	list_add_tail(&o->hash_list, sl);
 426}
 427
 428static void __remove_dm_origin(struct dm_origin *o)
 429{
 430	list_del(&o->hash_list);
 431}
 432
 433/*
 434 * _origins_lock must be held when calling this function.
 435 * Returns number of snapshots registered using the supplied cow device, plus:
 436 * snap_src - a snapshot suitable for use as a source of exception handover
 437 * snap_dest - a snapshot capable of receiving exception handover.
 438 * snap_merge - an existing snapshot-merge target linked to the same origin.
 439 *   There can be at most one snapshot-merge target. The parameter is optional.
 440 *
 441 * Possible return values and states of snap_src and snap_dest.
 442 *   0: NULL, NULL  - first new snapshot
 443 *   1: snap_src, NULL - normal snapshot
 444 *   2: snap_src, snap_dest  - waiting for handover
 445 *   2: snap_src, NULL - handed over, waiting for old to be deleted
 446 *   1: NULL, snap_dest - source got destroyed without handover
 447 */
 448static int __find_snapshots_sharing_cow(struct dm_snapshot *snap,
 449					struct dm_snapshot **snap_src,
 450					struct dm_snapshot **snap_dest,
 451					struct dm_snapshot **snap_merge)
 452{
 453	struct dm_snapshot *s;
 454	struct origin *o;
 455	int count = 0;
 456	int active;
 457
 458	o = __lookup_origin(snap->origin->bdev);
 459	if (!o)
 460		goto out;
 461
 462	list_for_each_entry(s, &o->snapshots, list) {
 463		if (dm_target_is_snapshot_merge(s->ti) && snap_merge)
 464			*snap_merge = s;
 465		if (!bdev_equal(s->cow->bdev, snap->cow->bdev))
 466			continue;
 467
 468		down_read(&s->lock);
 469		active = s->active;
 470		up_read(&s->lock);
 471
 472		if (active) {
 473			if (snap_src)
 474				*snap_src = s;
 475		} else if (snap_dest)
 476			*snap_dest = s;
 477
 478		count++;
 479	}
 480
 481out:
 482	return count;
 483}
 484
 485/*
 486 * On success, returns 1 if this snapshot is a handover destination,
 487 * otherwise returns 0.
 488 */
 489static int __validate_exception_handover(struct dm_snapshot *snap)
 490{
 491	struct dm_snapshot *snap_src = NULL, *snap_dest = NULL;
 492	struct dm_snapshot *snap_merge = NULL;
 493
 494	/* Does snapshot need exceptions handed over to it? */
 495	if ((__find_snapshots_sharing_cow(snap, &snap_src, &snap_dest,
 496					  &snap_merge) == 2) ||
 497	    snap_dest) {
 498		snap->ti->error = "Snapshot cow pairing for exception "
 499				  "table handover failed";
 500		return -EINVAL;
 501	}
 502
 503	/*
 504	 * If no snap_src was found, snap cannot become a handover
 505	 * destination.
 506	 */
 507	if (!snap_src)
 508		return 0;
 509
 510	/*
 511	 * Non-snapshot-merge handover?
 512	 */
 513	if (!dm_target_is_snapshot_merge(snap->ti))
 514		return 1;
 515
 516	/*
 517	 * Do not allow more than one merging snapshot.
 518	 */
 519	if (snap_merge) {
 520		snap->ti->error = "A snapshot is already merging.";
 521		return -EINVAL;
 522	}
 523
 524	if (!snap_src->store->type->prepare_merge ||
 525	    !snap_src->store->type->commit_merge) {
 526		snap->ti->error = "Snapshot exception store does not "
 527				  "support snapshot-merge.";
 528		return -EINVAL;
 529	}
 530
 531	return 1;
 532}
 533
 534static void __insert_snapshot(struct origin *o, struct dm_snapshot *s)
 535{
 536	struct dm_snapshot *l;
 537
 538	/* Sort the list according to chunk size, largest-first smallest-last */
 539	list_for_each_entry(l, &o->snapshots, list)
 540		if (l->store->chunk_size < s->store->chunk_size)
 541			break;
 542	list_add_tail(&s->list, &l->list);
 543}
 544
 545/*
 546 * Make a note of the snapshot and its origin so we can look it
 547 * up when the origin has a write on it.
 548 *
 549 * Also validate snapshot exception store handovers.
 550 * On success, returns 1 if this registration is a handover destination,
 551 * otherwise returns 0.
 552 */
 553static int register_snapshot(struct dm_snapshot *snap)
 554{
 555	struct origin *o, *new_o = NULL;
 556	struct block_device *bdev = snap->origin->bdev;
 557	int r = 0;
 558
 559	new_o = kmalloc(sizeof(*new_o), GFP_KERNEL);
 560	if (!new_o)
 561		return -ENOMEM;
 562
 563	down_write(&_origins_lock);
 564
 565	r = __validate_exception_handover(snap);
 566	if (r < 0) {
 567		kfree(new_o);
 568		goto out;
 569	}
 570
 571	o = __lookup_origin(bdev);
 572	if (o)
 573		kfree(new_o);
 574	else {
 575		/* New origin */
 576		o = new_o;
 577
 578		/* Initialise the struct */
 579		INIT_LIST_HEAD(&o->snapshots);
 580		o->bdev = bdev;
 581
 582		__insert_origin(o);
 583	}
 584
 585	__insert_snapshot(o, snap);
 586
 587out:
 588	up_write(&_origins_lock);
 589
 590	return r;
 591}
 592
 593/*
 594 * Move snapshot to correct place in list according to chunk size.
 595 */
 596static void reregister_snapshot(struct dm_snapshot *s)
 597{
 598	struct block_device *bdev = s->origin->bdev;
 599
 600	down_write(&_origins_lock);
 601
 602	list_del(&s->list);
 603	__insert_snapshot(__lookup_origin(bdev), s);
 604
 605	up_write(&_origins_lock);
 606}
 607
 608static void unregister_snapshot(struct dm_snapshot *s)
 609{
 610	struct origin *o;
 611
 612	down_write(&_origins_lock);
 613	o = __lookup_origin(s->origin->bdev);
 614
 615	list_del(&s->list);
 616	if (o && list_empty(&o->snapshots)) {
 617		list_del(&o->hash_list);
 618		kfree(o);
 619	}
 620
 621	up_write(&_origins_lock);
 622}
 623
 624/*
 625 * Implementation of the exception hash tables.
 626 * The lowest hash_shift bits of the chunk number are ignored, allowing
 627 * some consecutive chunks to be grouped together.
 628 */
 629static uint32_t exception_hash(struct dm_exception_table *et, chunk_t chunk);
 630
 631/* Lock to protect access to the completed and pending exception hash tables. */
 632struct dm_exception_table_lock {
 633	struct hlist_bl_head *complete_slot;
 634	struct hlist_bl_head *pending_slot;
 635};
 636
 637static void dm_exception_table_lock_init(struct dm_snapshot *s, chunk_t chunk,
 638					 struct dm_exception_table_lock *lock)
 639{
 640	struct dm_exception_table *complete = &s->complete;
 641	struct dm_exception_table *pending = &s->pending;
 642
 643	lock->complete_slot = &complete->table[exception_hash(complete, chunk)];
 644	lock->pending_slot = &pending->table[exception_hash(pending, chunk)];
 645}
 646
 647static void dm_exception_table_lock(struct dm_exception_table_lock *lock)
 648{
 649	hlist_bl_lock(lock->complete_slot);
 650	hlist_bl_lock(lock->pending_slot);
 651}
 652
 653static void dm_exception_table_unlock(struct dm_exception_table_lock *lock)
 654{
 655	hlist_bl_unlock(lock->pending_slot);
 656	hlist_bl_unlock(lock->complete_slot);
 657}
 658
 659static int dm_exception_table_init(struct dm_exception_table *et,
 660				   uint32_t size, unsigned hash_shift)
 661{
 662	unsigned int i;
 663
 664	et->hash_shift = hash_shift;
 665	et->hash_mask = size - 1;
 666	et->table = kvmalloc_array(size, sizeof(struct hlist_bl_head),
 667				   GFP_KERNEL);
 668	if (!et->table)
 669		return -ENOMEM;
 670
 671	for (i = 0; i < size; i++)
 672		INIT_HLIST_BL_HEAD(et->table + i);
 673
 674	return 0;
 675}
 676
 677static void dm_exception_table_exit(struct dm_exception_table *et,
 678				    struct kmem_cache *mem)
 679{
 680	struct hlist_bl_head *slot;
 681	struct dm_exception *ex;
 682	struct hlist_bl_node *pos, *n;
 683	int i, size;
 684
 685	size = et->hash_mask + 1;
 686	for (i = 0; i < size; i++) {
 687		slot = et->table + i;
 688
 689		hlist_bl_for_each_entry_safe(ex, pos, n, slot, hash_list)
 690			kmem_cache_free(mem, ex);
 691	}
 692
 693	kvfree(et->table);
 694}
 695
 696static uint32_t exception_hash(struct dm_exception_table *et, chunk_t chunk)
 697{
 698	return (chunk >> et->hash_shift) & et->hash_mask;
 699}
 700
 701static void dm_remove_exception(struct dm_exception *e)
 702{
 703	hlist_bl_del(&e->hash_list);
 704}
 705
 706/*
 707 * Return the exception data for a sector, or NULL if not
 708 * remapped.
 709 */
 710static struct dm_exception *dm_lookup_exception(struct dm_exception_table *et,
 711						chunk_t chunk)
 712{
 713	struct hlist_bl_head *slot;
 714	struct hlist_bl_node *pos;
 715	struct dm_exception *e;
 716
 717	slot = &et->table[exception_hash(et, chunk)];
 718	hlist_bl_for_each_entry(e, pos, slot, hash_list)
 719		if (chunk >= e->old_chunk &&
 720		    chunk <= e->old_chunk + dm_consecutive_chunk_count(e))
 721			return e;
 722
 723	return NULL;
 724}
 725
 726static struct dm_exception *alloc_completed_exception(gfp_t gfp)
 727{
 728	struct dm_exception *e;
 729
 730	e = kmem_cache_alloc(exception_cache, gfp);
 731	if (!e && gfp == GFP_NOIO)
 732		e = kmem_cache_alloc(exception_cache, GFP_ATOMIC);
 733
 734	return e;
 735}
 736
 737static void free_completed_exception(struct dm_exception *e)
 738{
 739	kmem_cache_free(exception_cache, e);
 740}
 741
 742static struct dm_snap_pending_exception *alloc_pending_exception(struct dm_snapshot *s)
 743{
 744	struct dm_snap_pending_exception *pe = mempool_alloc(&s->pending_pool,
 745							     GFP_NOIO);
 746
 747	atomic_inc(&s->pending_exceptions_count);
 748	pe->snap = s;
 749
 750	return pe;
 751}
 752
 753static void free_pending_exception(struct dm_snap_pending_exception *pe)
 754{
 755	struct dm_snapshot *s = pe->snap;
 756
 757	mempool_free(pe, &s->pending_pool);
 758	smp_mb__before_atomic();
 759	atomic_dec(&s->pending_exceptions_count);
 760}
 761
 762static void dm_insert_exception(struct dm_exception_table *eh,
 763				struct dm_exception *new_e)
 764{
 765	struct hlist_bl_head *l;
 766	struct hlist_bl_node *pos;
 767	struct dm_exception *e = NULL;
 768
 769	l = &eh->table[exception_hash(eh, new_e->old_chunk)];
 770
 771	/* Add immediately if this table doesn't support consecutive chunks */
 772	if (!eh->hash_shift)
 773		goto out;
 774
 775	/* List is ordered by old_chunk */
 776	hlist_bl_for_each_entry(e, pos, l, hash_list) {
 777		/* Insert after an existing chunk? */
 778		if (new_e->old_chunk == (e->old_chunk +
 779					 dm_consecutive_chunk_count(e) + 1) &&
 780		    new_e->new_chunk == (dm_chunk_number(e->new_chunk) +
 781					 dm_consecutive_chunk_count(e) + 1)) {
 782			dm_consecutive_chunk_count_inc(e);
 783			free_completed_exception(new_e);
 784			return;
 785		}
 786
 787		/* Insert before an existing chunk? */
 788		if (new_e->old_chunk == (e->old_chunk - 1) &&
 789		    new_e->new_chunk == (dm_chunk_number(e->new_chunk) - 1)) {
 790			dm_consecutive_chunk_count_inc(e);
 791			e->old_chunk--;
 792			e->new_chunk--;
 793			free_completed_exception(new_e);
 794			return;
 795		}
 796
 797		if (new_e->old_chunk < e->old_chunk)
 798			break;
 799	}
 800
 801out:
 802	if (!e) {
 803		/*
 804		 * Either the table doesn't support consecutive chunks or slot
 805		 * l is empty.
 806		 */
 807		hlist_bl_add_head(&new_e->hash_list, l);
 808	} else if (new_e->old_chunk < e->old_chunk) {
 809		/* Add before an existing exception */
 810		hlist_bl_add_before(&new_e->hash_list, &e->hash_list);
 811	} else {
 812		/* Add to l's tail: e is the last exception in this slot */
 813		hlist_bl_add_behind(&new_e->hash_list, &e->hash_list);
 814	}
 815}
 816
 817/*
 818 * Callback used by the exception stores to load exceptions when
 819 * initialising.
 820 */
 821static int dm_add_exception(void *context, chunk_t old, chunk_t new)
 822{
 823	struct dm_exception_table_lock lock;
 824	struct dm_snapshot *s = context;
 825	struct dm_exception *e;
 826
 827	e = alloc_completed_exception(GFP_KERNEL);
 828	if (!e)
 829		return -ENOMEM;
 830
 831	e->old_chunk = old;
 832
 833	/* Consecutive_count is implicitly initialised to zero */
 834	e->new_chunk = new;
 835
 836	/*
 837	 * Although there is no need to lock access to the exception tables
 838	 * here, if we don't then hlist_bl_add_head(), called by
 839	 * dm_insert_exception(), will complain about accessing the
 840	 * corresponding list without locking it first.
 841	 */
 842	dm_exception_table_lock_init(s, old, &lock);
 843
 844	dm_exception_table_lock(&lock);
 845	dm_insert_exception(&s->complete, e);
 846	dm_exception_table_unlock(&lock);
 847
 848	return 0;
 849}
 850
 851/*
 852 * Return a minimum chunk size of all snapshots that have the specified origin.
 853 * Return zero if the origin has no snapshots.
 854 */
 855static uint32_t __minimum_chunk_size(struct origin *o)
 856{
 857	struct dm_snapshot *snap;
 858	unsigned chunk_size = rounddown_pow_of_two(UINT_MAX);
 859
 860	if (o)
 861		list_for_each_entry(snap, &o->snapshots, list)
 862			chunk_size = min_not_zero(chunk_size,
 863						  snap->store->chunk_size);
 864
 865	return (uint32_t) chunk_size;
 866}
 867
 868/*
 869 * Hard coded magic.
 870 */
 871static int calc_max_buckets(void)
 872{
 873	/* use a fixed size of 2MB */
 874	unsigned long mem = 2 * 1024 * 1024;
 
 875	mem /= sizeof(struct hlist_bl_head);
 876
 877	return mem;
 878}
 879
 880/*
 881 * Allocate room for a suitable hash table.
 882 */
 883static int init_hash_tables(struct dm_snapshot *s)
 884{
 885	sector_t hash_size, cow_dev_size, max_buckets;
 886
 887	/*
 888	 * Calculate based on the size of the original volume or
 889	 * the COW volume...
 890	 */
 891	cow_dev_size = get_dev_size(s->cow->bdev);
 892	max_buckets = calc_max_buckets();
 893
 894	hash_size = cow_dev_size >> s->store->chunk_shift;
 895	hash_size = min(hash_size, max_buckets);
 896
 897	if (hash_size < 64)
 898		hash_size = 64;
 899	hash_size = rounddown_pow_of_two(hash_size);
 900	if (dm_exception_table_init(&s->complete, hash_size,
 901				    DM_CHUNK_CONSECUTIVE_BITS))
 902		return -ENOMEM;
 903
 904	/*
 905	 * Allocate hash table for in-flight exceptions
 906	 * Make this smaller than the real hash table
 907	 */
 908	hash_size >>= 3;
 909	if (hash_size < 64)
 910		hash_size = 64;
 911
 912	if (dm_exception_table_init(&s->pending, hash_size, 0)) {
 913		dm_exception_table_exit(&s->complete, exception_cache);
 914		return -ENOMEM;
 915	}
 916
 917	return 0;
 918}
 919
 920static void merge_shutdown(struct dm_snapshot *s)
 921{
 922	clear_bit_unlock(RUNNING_MERGE, &s->state_bits);
 923	smp_mb__after_atomic();
 924	wake_up_bit(&s->state_bits, RUNNING_MERGE);
 925}
 926
 927static struct bio *__release_queued_bios_after_merge(struct dm_snapshot *s)
 928{
 929	s->first_merging_chunk = 0;
 930	s->num_merging_chunks = 0;
 931
 932	return bio_list_get(&s->bios_queued_during_merge);
 933}
 934
 935/*
 936 * Remove one chunk from the index of completed exceptions.
 937 */
 938static int __remove_single_exception_chunk(struct dm_snapshot *s,
 939					   chunk_t old_chunk)
 940{
 941	struct dm_exception *e;
 942
 943	e = dm_lookup_exception(&s->complete, old_chunk);
 944	if (!e) {
 945		DMERR("Corruption detected: exception for block %llu is "
 946		      "on disk but not in memory",
 947		      (unsigned long long)old_chunk);
 948		return -EINVAL;
 949	}
 950
 951	/*
 952	 * If this is the only chunk using this exception, remove exception.
 953	 */
 954	if (!dm_consecutive_chunk_count(e)) {
 955		dm_remove_exception(e);
 956		free_completed_exception(e);
 957		return 0;
 958	}
 959
 960	/*
 961	 * The chunk may be either at the beginning or the end of a
 962	 * group of consecutive chunks - never in the middle.  We are
 963	 * removing chunks in the opposite order to that in which they
 964	 * were added, so this should always be true.
 965	 * Decrement the consecutive chunk counter and adjust the
 966	 * starting point if necessary.
 967	 */
 968	if (old_chunk == e->old_chunk) {
 969		e->old_chunk++;
 970		e->new_chunk++;
 971	} else if (old_chunk != e->old_chunk +
 972		   dm_consecutive_chunk_count(e)) {
 973		DMERR("Attempt to merge block %llu from the "
 974		      "middle of a chunk range [%llu - %llu]",
 975		      (unsigned long long)old_chunk,
 976		      (unsigned long long)e->old_chunk,
 977		      (unsigned long long)
 978		      e->old_chunk + dm_consecutive_chunk_count(e));
 979		return -EINVAL;
 980	}
 981
 982	dm_consecutive_chunk_count_dec(e);
 983
 984	return 0;
 985}
 986
 987static void flush_bios(struct bio *bio);
 988
 989static int remove_single_exception_chunk(struct dm_snapshot *s)
 990{
 991	struct bio *b = NULL;
 992	int r;
 993	chunk_t old_chunk = s->first_merging_chunk + s->num_merging_chunks - 1;
 994
 995	down_write(&s->lock);
 996
 997	/*
 998	 * Process chunks (and associated exceptions) in reverse order
 999	 * so that dm_consecutive_chunk_count_dec() accounting works.
1000	 */
1001	do {
1002		r = __remove_single_exception_chunk(s, old_chunk);
1003		if (r)
1004			goto out;
1005	} while (old_chunk-- > s->first_merging_chunk);
1006
1007	b = __release_queued_bios_after_merge(s);
1008
1009out:
1010	up_write(&s->lock);
1011	if (b)
1012		flush_bios(b);
1013
1014	return r;
1015}
1016
1017static int origin_write_extent(struct dm_snapshot *merging_snap,
1018			       sector_t sector, unsigned chunk_size);
1019
1020static void merge_callback(int read_err, unsigned long write_err,
1021			   void *context);
1022
1023static uint64_t read_pending_exceptions_done_count(void)
1024{
1025	uint64_t pending_exceptions_done;
1026
1027	spin_lock(&_pending_exceptions_done_spinlock);
1028	pending_exceptions_done = _pending_exceptions_done_count;
1029	spin_unlock(&_pending_exceptions_done_spinlock);
1030
1031	return pending_exceptions_done;
1032}
1033
1034static void increment_pending_exceptions_done_count(void)
1035{
1036	spin_lock(&_pending_exceptions_done_spinlock);
1037	_pending_exceptions_done_count++;
1038	spin_unlock(&_pending_exceptions_done_spinlock);
1039
1040	wake_up_all(&_pending_exceptions_done);
1041}
1042
1043static void snapshot_merge_next_chunks(struct dm_snapshot *s)
1044{
1045	int i, linear_chunks;
1046	chunk_t old_chunk, new_chunk;
1047	struct dm_io_region src, dest;
1048	sector_t io_size;
1049	uint64_t previous_count;
1050
1051	BUG_ON(!test_bit(RUNNING_MERGE, &s->state_bits));
1052	if (unlikely(test_bit(SHUTDOWN_MERGE, &s->state_bits)))
1053		goto shut;
1054
1055	/*
1056	 * valid flag never changes during merge, so no lock required.
1057	 */
1058	if (!s->valid) {
1059		DMERR("Snapshot is invalid: can't merge");
1060		goto shut;
1061	}
1062
1063	linear_chunks = s->store->type->prepare_merge(s->store, &old_chunk,
1064						      &new_chunk);
1065	if (linear_chunks <= 0) {
1066		if (linear_chunks < 0) {
1067			DMERR("Read error in exception store: "
1068			      "shutting down merge");
1069			down_write(&s->lock);
1070			s->merge_failed = true;
1071			up_write(&s->lock);
1072		}
1073		goto shut;
1074	}
1075
1076	/* Adjust old_chunk and new_chunk to reflect start of linear region */
1077	old_chunk = old_chunk + 1 - linear_chunks;
1078	new_chunk = new_chunk + 1 - linear_chunks;
1079
1080	/*
1081	 * Use one (potentially large) I/O to copy all 'linear_chunks'
1082	 * from the exception store to the origin
1083	 */
1084	io_size = linear_chunks * s->store->chunk_size;
1085
1086	dest.bdev = s->origin->bdev;
1087	dest.sector = chunk_to_sector(s->store, old_chunk);
1088	dest.count = min(io_size, get_dev_size(dest.bdev) - dest.sector);
1089
1090	src.bdev = s->cow->bdev;
1091	src.sector = chunk_to_sector(s->store, new_chunk);
1092	src.count = dest.count;
1093
1094	/*
1095	 * Reallocate any exceptions needed in other snapshots then
1096	 * wait for the pending exceptions to complete.
1097	 * Each time any pending exception (globally on the system)
1098	 * completes we are woken and repeat the process to find out
1099	 * if we can proceed.  While this may not seem a particularly
1100	 * efficient algorithm, it is not expected to have any
1101	 * significant impact on performance.
1102	 */
1103	previous_count = read_pending_exceptions_done_count();
1104	while (origin_write_extent(s, dest.sector, io_size)) {
1105		wait_event(_pending_exceptions_done,
1106			   (read_pending_exceptions_done_count() !=
1107			    previous_count));
1108		/* Retry after the wait, until all exceptions are done. */
1109		previous_count = read_pending_exceptions_done_count();
1110	}
1111
1112	down_write(&s->lock);
1113	s->first_merging_chunk = old_chunk;
1114	s->num_merging_chunks = linear_chunks;
1115	up_write(&s->lock);
1116
1117	/* Wait until writes to all 'linear_chunks' drain */
1118	for (i = 0; i < linear_chunks; i++)
1119		__check_for_conflicting_io(s, old_chunk + i);
1120
1121	dm_kcopyd_copy(s->kcopyd_client, &src, 1, &dest, 0, merge_callback, s);
1122	return;
1123
1124shut:
1125	merge_shutdown(s);
1126}
1127
1128static void error_bios(struct bio *bio);
1129
1130static int flush_data(struct dm_snapshot *s)
1131{
1132	struct bio *flush_bio = &s->flush_bio;
1133
1134	bio_reset(flush_bio);
1135	bio_set_dev(flush_bio, s->origin->bdev);
1136	flush_bio->bi_opf = REQ_OP_WRITE | REQ_PREFLUSH;
1137
1138	return submit_bio_wait(flush_bio);
1139}
1140
1141static void merge_callback(int read_err, unsigned long write_err, void *context)
1142{
1143	struct dm_snapshot *s = context;
1144	struct bio *b = NULL;
1145
1146	if (read_err || write_err) {
1147		if (read_err)
1148			DMERR("Read error: shutting down merge.");
1149		else
1150			DMERR("Write error: shutting down merge.");
1151		goto shut;
1152	}
1153
1154	if (flush_data(s) < 0) {
1155		DMERR("Flush after merge failed: shutting down merge");
1156		goto shut;
1157	}
1158
1159	if (s->store->type->commit_merge(s->store,
1160					 s->num_merging_chunks) < 0) {
1161		DMERR("Write error in exception store: shutting down merge");
1162		goto shut;
1163	}
1164
1165	if (remove_single_exception_chunk(s) < 0)
1166		goto shut;
1167
1168	snapshot_merge_next_chunks(s);
1169
1170	return;
1171
1172shut:
1173	down_write(&s->lock);
1174	s->merge_failed = true;
1175	b = __release_queued_bios_after_merge(s);
1176	up_write(&s->lock);
1177	error_bios(b);
1178
1179	merge_shutdown(s);
1180}
1181
1182static void start_merge(struct dm_snapshot *s)
1183{
1184	if (!test_and_set_bit(RUNNING_MERGE, &s->state_bits))
1185		snapshot_merge_next_chunks(s);
1186}
1187
1188/*
1189 * Stop the merging process and wait until it finishes.
1190 */
1191static void stop_merge(struct dm_snapshot *s)
1192{
1193	set_bit(SHUTDOWN_MERGE, &s->state_bits);
1194	wait_on_bit(&s->state_bits, RUNNING_MERGE, TASK_UNINTERRUPTIBLE);
1195	clear_bit(SHUTDOWN_MERGE, &s->state_bits);
1196}
1197
1198static int parse_snapshot_features(struct dm_arg_set *as, struct dm_snapshot *s,
1199				   struct dm_target *ti)
1200{
1201	int r;
1202	unsigned argc;
1203	const char *arg_name;
1204
1205	static const struct dm_arg _args[] = {
1206		{0, 2, "Invalid number of feature arguments"},
1207	};
1208
1209	/*
1210	 * No feature arguments supplied.
1211	 */
1212	if (!as->argc)
1213		return 0;
1214
1215	r = dm_read_arg_group(_args, as, &argc, &ti->error);
1216	if (r)
1217		return -EINVAL;
1218
1219	while (argc && !r) {
1220		arg_name = dm_shift_arg(as);
1221		argc--;
1222
1223		if (!strcasecmp(arg_name, "discard_zeroes_cow"))
1224			s->discard_zeroes_cow = true;
1225
1226		else if (!strcasecmp(arg_name, "discard_passdown_origin"))
1227			s->discard_passdown_origin = true;
1228
1229		else {
1230			ti->error = "Unrecognised feature requested";
1231			r = -EINVAL;
1232			break;
1233		}
1234	}
1235
1236	if (!s->discard_zeroes_cow && s->discard_passdown_origin) {
1237		/*
1238		 * TODO: really these are disjoint.. but ti->num_discard_bios
1239		 * and dm_bio_get_target_bio_nr() require rigid constraints.
1240		 */
1241		ti->error = "discard_passdown_origin feature depends on discard_zeroes_cow";
1242		r = -EINVAL;
1243	}
1244
1245	return r;
1246}
1247
1248/*
1249 * Construct a snapshot mapping:
1250 * <origin_dev> <COW-dev> <p|po|n> <chunk-size> [<# feature args> [<arg>]*]
1251 */
1252static int snapshot_ctr(struct dm_target *ti, unsigned int argc, char **argv)
1253{
1254	struct dm_snapshot *s;
1255	struct dm_arg_set as;
1256	int i;
1257	int r = -EINVAL;
1258	char *origin_path, *cow_path;
1259	dev_t origin_dev, cow_dev;
1260	unsigned args_used, num_flush_bios = 1;
1261	fmode_t origin_mode = FMODE_READ;
1262
1263	if (argc < 4) {
1264		ti->error = "requires 4 or more arguments";
1265		r = -EINVAL;
1266		goto bad;
1267	}
1268
1269	if (dm_target_is_snapshot_merge(ti)) {
1270		num_flush_bios = 2;
1271		origin_mode = FMODE_WRITE;
1272	}
1273
1274	s = kzalloc(sizeof(*s), GFP_KERNEL);
1275	if (!s) {
1276		ti->error = "Cannot allocate private snapshot structure";
1277		r = -ENOMEM;
1278		goto bad;
1279	}
1280
1281	as.argc = argc;
1282	as.argv = argv;
1283	dm_consume_args(&as, 4);
1284	r = parse_snapshot_features(&as, s, ti);
1285	if (r)
1286		goto bad_features;
1287
1288	origin_path = argv[0];
1289	argv++;
1290	argc--;
1291
1292	r = dm_get_device(ti, origin_path, origin_mode, &s->origin);
1293	if (r) {
1294		ti->error = "Cannot get origin device";
1295		goto bad_origin;
1296	}
1297	origin_dev = s->origin->bdev->bd_dev;
1298
1299	cow_path = argv[0];
1300	argv++;
1301	argc--;
1302
1303	cow_dev = dm_get_dev_t(cow_path);
1304	if (cow_dev && cow_dev == origin_dev) {
1305		ti->error = "COW device cannot be the same as origin device";
1306		r = -EINVAL;
1307		goto bad_cow;
1308	}
1309
1310	r = dm_get_device(ti, cow_path, dm_table_get_mode(ti->table), &s->cow);
1311	if (r) {
1312		ti->error = "Cannot get COW device";
1313		goto bad_cow;
1314	}
 
 
 
 
 
1315
1316	r = dm_exception_store_create(ti, argc, argv, s, &args_used, &s->store);
1317	if (r) {
1318		ti->error = "Couldn't create exception store";
1319		r = -EINVAL;
1320		goto bad_store;
1321	}
1322
1323	argv += args_used;
1324	argc -= args_used;
1325
1326	s->ti = ti;
1327	s->valid = 1;
1328	s->snapshot_overflowed = 0;
1329	s->active = 0;
1330	atomic_set(&s->pending_exceptions_count, 0);
1331	spin_lock_init(&s->pe_allocation_lock);
1332	s->exception_start_sequence = 0;
1333	s->exception_complete_sequence = 0;
1334	s->out_of_order_tree = RB_ROOT;
1335	init_rwsem(&s->lock);
1336	INIT_LIST_HEAD(&s->list);
1337	spin_lock_init(&s->pe_lock);
1338	s->state_bits = 0;
1339	s->merge_failed = false;
1340	s->first_merging_chunk = 0;
1341	s->num_merging_chunks = 0;
1342	bio_list_init(&s->bios_queued_during_merge);
1343	bio_init(&s->flush_bio, NULL, 0);
1344
1345	/* Allocate hash table for COW data */
1346	if (init_hash_tables(s)) {
1347		ti->error = "Unable to allocate hash table space";
1348		r = -ENOMEM;
1349		goto bad_hash_tables;
1350	}
1351
1352	init_waitqueue_head(&s->in_progress_wait);
1353
1354	s->kcopyd_client = dm_kcopyd_client_create(&dm_kcopyd_throttle);
1355	if (IS_ERR(s->kcopyd_client)) {
1356		r = PTR_ERR(s->kcopyd_client);
1357		ti->error = "Could not create kcopyd client";
1358		goto bad_kcopyd;
1359	}
1360
1361	r = mempool_init_slab_pool(&s->pending_pool, MIN_IOS, pending_cache);
1362	if (r) {
1363		ti->error = "Could not allocate mempool for pending exceptions";
1364		goto bad_pending_pool;
1365	}
1366
1367	for (i = 0; i < DM_TRACKED_CHUNK_HASH_SIZE; i++)
1368		INIT_HLIST_HEAD(&s->tracked_chunk_hash[i]);
1369
1370	spin_lock_init(&s->tracked_chunk_lock);
1371
1372	ti->private = s;
1373	ti->num_flush_bios = num_flush_bios;
1374	if (s->discard_zeroes_cow)
1375		ti->num_discard_bios = (s->discard_passdown_origin ? 2 : 1);
1376	ti->per_io_data_size = sizeof(struct dm_snap_tracked_chunk);
1377
1378	/* Add snapshot to the list of snapshots for this origin */
1379	/* Exceptions aren't triggered till snapshot_resume() is called */
1380	r = register_snapshot(s);
1381	if (r == -ENOMEM) {
1382		ti->error = "Snapshot origin struct allocation failed";
1383		goto bad_load_and_register;
1384	} else if (r < 0) {
1385		/* invalid handover, register_snapshot has set ti->error */
1386		goto bad_load_and_register;
1387	}
1388
1389	/*
1390	 * Metadata must only be loaded into one table at once, so skip this
1391	 * if metadata will be handed over during resume.
1392	 * Chunk size will be set during the handover - set it to zero to
1393	 * ensure it's ignored.
1394	 */
1395	if (r > 0) {
1396		s->store->chunk_size = 0;
1397		return 0;
1398	}
1399
1400	r = s->store->type->read_metadata(s->store, dm_add_exception,
1401					  (void *)s);
1402	if (r < 0) {
1403		ti->error = "Failed to read snapshot metadata";
1404		goto bad_read_metadata;
1405	} else if (r > 0) {
1406		s->valid = 0;
1407		DMWARN("Snapshot is marked invalid.");
1408	}
1409
1410	if (!s->store->chunk_size) {
1411		ti->error = "Chunk size not set";
1412		r = -EINVAL;
1413		goto bad_read_metadata;
1414	}
1415
1416	r = dm_set_target_max_io_len(ti, s->store->chunk_size);
1417	if (r)
1418		goto bad_read_metadata;
1419
1420	return 0;
1421
1422bad_read_metadata:
1423	unregister_snapshot(s);
1424bad_load_and_register:
1425	mempool_exit(&s->pending_pool);
1426bad_pending_pool:
1427	dm_kcopyd_client_destroy(s->kcopyd_client);
1428bad_kcopyd:
1429	dm_exception_table_exit(&s->pending, pending_cache);
1430	dm_exception_table_exit(&s->complete, exception_cache);
1431bad_hash_tables:
1432	dm_exception_store_destroy(s->store);
1433bad_store:
1434	dm_put_device(ti, s->cow);
1435bad_cow:
1436	dm_put_device(ti, s->origin);
1437bad_origin:
1438bad_features:
1439	kfree(s);
1440bad:
1441	return r;
1442}
1443
1444static void __free_exceptions(struct dm_snapshot *s)
1445{
1446	dm_kcopyd_client_destroy(s->kcopyd_client);
1447	s->kcopyd_client = NULL;
1448
1449	dm_exception_table_exit(&s->pending, pending_cache);
1450	dm_exception_table_exit(&s->complete, exception_cache);
1451}
1452
1453static void __handover_exceptions(struct dm_snapshot *snap_src,
1454				  struct dm_snapshot *snap_dest)
1455{
1456	union {
1457		struct dm_exception_table table_swap;
1458		struct dm_exception_store *store_swap;
1459	} u;
1460
1461	/*
1462	 * Swap all snapshot context information between the two instances.
1463	 */
1464	u.table_swap = snap_dest->complete;
1465	snap_dest->complete = snap_src->complete;
1466	snap_src->complete = u.table_swap;
1467
1468	u.store_swap = snap_dest->store;
1469	snap_dest->store = snap_src->store;
1470	snap_dest->store->userspace_supports_overflow = u.store_swap->userspace_supports_overflow;
1471	snap_src->store = u.store_swap;
1472
1473	snap_dest->store->snap = snap_dest;
1474	snap_src->store->snap = snap_src;
1475
1476	snap_dest->ti->max_io_len = snap_dest->store->chunk_size;
1477	snap_dest->valid = snap_src->valid;
1478	snap_dest->snapshot_overflowed = snap_src->snapshot_overflowed;
1479
1480	/*
1481	 * Set source invalid to ensure it receives no further I/O.
1482	 */
1483	snap_src->valid = 0;
1484}
1485
1486static void snapshot_dtr(struct dm_target *ti)
1487{
1488#ifdef CONFIG_DM_DEBUG
1489	int i;
1490#endif
1491	struct dm_snapshot *s = ti->private;
1492	struct dm_snapshot *snap_src = NULL, *snap_dest = NULL;
1493
1494	down_read(&_origins_lock);
1495	/* Check whether exception handover must be cancelled */
1496	(void) __find_snapshots_sharing_cow(s, &snap_src, &snap_dest, NULL);
1497	if (snap_src && snap_dest && (s == snap_src)) {
1498		down_write(&snap_dest->lock);
1499		snap_dest->valid = 0;
1500		up_write(&snap_dest->lock);
1501		DMERR("Cancelling snapshot handover.");
1502	}
1503	up_read(&_origins_lock);
1504
1505	if (dm_target_is_snapshot_merge(ti))
1506		stop_merge(s);
1507
1508	/* Prevent further origin writes from using this snapshot. */
1509	/* After this returns there can be no new kcopyd jobs. */
1510	unregister_snapshot(s);
1511
1512	while (atomic_read(&s->pending_exceptions_count))
1513		msleep(1);
1514	/*
1515	 * Ensure instructions in mempool_exit aren't reordered
1516	 * before atomic_read.
1517	 */
1518	smp_mb();
1519
1520#ifdef CONFIG_DM_DEBUG
1521	for (i = 0; i < DM_TRACKED_CHUNK_HASH_SIZE; i++)
1522		BUG_ON(!hlist_empty(&s->tracked_chunk_hash[i]));
1523#endif
1524
1525	__free_exceptions(s);
1526
1527	mempool_exit(&s->pending_pool);
1528
1529	dm_exception_store_destroy(s->store);
1530
1531	bio_uninit(&s->flush_bio);
1532
1533	dm_put_device(ti, s->cow);
1534
1535	dm_put_device(ti, s->origin);
1536
1537	WARN_ON(s->in_progress);
1538
1539	kfree(s);
1540}
1541
1542static void account_start_copy(struct dm_snapshot *s)
1543{
1544	spin_lock(&s->in_progress_wait.lock);
1545	s->in_progress++;
1546	spin_unlock(&s->in_progress_wait.lock);
1547}
1548
1549static void account_end_copy(struct dm_snapshot *s)
1550{
1551	spin_lock(&s->in_progress_wait.lock);
1552	BUG_ON(!s->in_progress);
1553	s->in_progress--;
1554	if (likely(s->in_progress <= cow_threshold) &&
1555	    unlikely(waitqueue_active(&s->in_progress_wait)))
1556		wake_up_locked(&s->in_progress_wait);
1557	spin_unlock(&s->in_progress_wait.lock);
1558}
1559
1560static bool wait_for_in_progress(struct dm_snapshot *s, bool unlock_origins)
1561{
1562	if (unlikely(s->in_progress > cow_threshold)) {
1563		spin_lock(&s->in_progress_wait.lock);
1564		if (likely(s->in_progress > cow_threshold)) {
1565			/*
1566			 * NOTE: this throttle doesn't account for whether
1567			 * the caller is servicing an IO that will trigger a COW
1568			 * so excess throttling may result for chunks not required
1569			 * to be COW'd.  But if cow_threshold was reached, extra
1570			 * throttling is unlikely to negatively impact performance.
1571			 */
1572			DECLARE_WAITQUEUE(wait, current);
 
1573			__add_wait_queue(&s->in_progress_wait, &wait);
1574			__set_current_state(TASK_UNINTERRUPTIBLE);
1575			spin_unlock(&s->in_progress_wait.lock);
1576			if (unlock_origins)
1577				up_read(&_origins_lock);
1578			io_schedule();
1579			remove_wait_queue(&s->in_progress_wait, &wait);
1580			return false;
1581		}
1582		spin_unlock(&s->in_progress_wait.lock);
1583	}
1584	return true;
1585}
1586
1587/*
1588 * Flush a list of buffers.
1589 */
1590static void flush_bios(struct bio *bio)
1591{
1592	struct bio *n;
1593
1594	while (bio) {
1595		n = bio->bi_next;
1596		bio->bi_next = NULL;
1597		submit_bio_noacct(bio);
1598		bio = n;
1599	}
1600}
1601
1602static int do_origin(struct dm_dev *origin, struct bio *bio, bool limit);
1603
1604/*
1605 * Flush a list of buffers.
1606 */
1607static void retry_origin_bios(struct dm_snapshot *s, struct bio *bio)
1608{
1609	struct bio *n;
1610	int r;
1611
1612	while (bio) {
1613		n = bio->bi_next;
1614		bio->bi_next = NULL;
1615		r = do_origin(s->origin, bio, false);
1616		if (r == DM_MAPIO_REMAPPED)
1617			submit_bio_noacct(bio);
1618		bio = n;
1619	}
1620}
1621
1622/*
1623 * Error a list of buffers.
1624 */
1625static void error_bios(struct bio *bio)
1626{
1627	struct bio *n;
1628
1629	while (bio) {
1630		n = bio->bi_next;
1631		bio->bi_next = NULL;
1632		bio_io_error(bio);
1633		bio = n;
1634	}
1635}
1636
1637static void __invalidate_snapshot(struct dm_snapshot *s, int err)
1638{
1639	if (!s->valid)
1640		return;
1641
1642	if (err == -EIO)
1643		DMERR("Invalidating snapshot: Error reading/writing.");
1644	else if (err == -ENOMEM)
1645		DMERR("Invalidating snapshot: Unable to allocate exception.");
1646
1647	if (s->store->type->drop_snapshot)
1648		s->store->type->drop_snapshot(s->store);
1649
1650	s->valid = 0;
1651
1652	dm_table_event(s->ti->table);
1653}
1654
1655static void invalidate_snapshot(struct dm_snapshot *s, int err)
1656{
1657	down_write(&s->lock);
1658	__invalidate_snapshot(s, err);
1659	up_write(&s->lock);
1660}
1661
1662static void pending_complete(void *context, int success)
1663{
1664	struct dm_snap_pending_exception *pe = context;
1665	struct dm_exception *e;
1666	struct dm_snapshot *s = pe->snap;
1667	struct bio *origin_bios = NULL;
1668	struct bio *snapshot_bios = NULL;
1669	struct bio *full_bio = NULL;
1670	struct dm_exception_table_lock lock;
1671	int error = 0;
1672
1673	dm_exception_table_lock_init(s, pe->e.old_chunk, &lock);
1674
1675	if (!success) {
1676		/* Read/write error - snapshot is unusable */
1677		invalidate_snapshot(s, -EIO);
1678		error = 1;
1679
1680		dm_exception_table_lock(&lock);
1681		goto out;
1682	}
1683
1684	e = alloc_completed_exception(GFP_NOIO);
1685	if (!e) {
1686		invalidate_snapshot(s, -ENOMEM);
1687		error = 1;
1688
1689		dm_exception_table_lock(&lock);
1690		goto out;
1691	}
1692	*e = pe->e;
1693
1694	down_read(&s->lock);
1695	dm_exception_table_lock(&lock);
1696	if (!s->valid) {
1697		up_read(&s->lock);
1698		free_completed_exception(e);
1699		error = 1;
1700
1701		goto out;
1702	}
1703
1704	/*
1705	 * Add a proper exception. After inserting the completed exception all
1706	 * subsequent snapshot reads to this chunk will be redirected to the
1707	 * COW device.  This ensures that we do not starve. Moreover, as long
1708	 * as the pending exception exists, neither origin writes nor snapshot
1709	 * merging can overwrite the chunk in origin.
1710	 */
1711	dm_insert_exception(&s->complete, e);
1712	up_read(&s->lock);
1713
1714	/* Wait for conflicting reads to drain */
1715	if (__chunk_is_tracked(s, pe->e.old_chunk)) {
1716		dm_exception_table_unlock(&lock);
1717		__check_for_conflicting_io(s, pe->e.old_chunk);
1718		dm_exception_table_lock(&lock);
1719	}
1720
1721out:
1722	/* Remove the in-flight exception from the list */
1723	dm_remove_exception(&pe->e);
1724
1725	dm_exception_table_unlock(&lock);
1726
1727	snapshot_bios = bio_list_get(&pe->snapshot_bios);
1728	origin_bios = bio_list_get(&pe->origin_bios);
1729	full_bio = pe->full_bio;
1730	if (full_bio)
1731		full_bio->bi_end_io = pe->full_bio_end_io;
1732	increment_pending_exceptions_done_count();
1733
1734	/* Submit any pending write bios */
1735	if (error) {
1736		if (full_bio)
1737			bio_io_error(full_bio);
1738		error_bios(snapshot_bios);
1739	} else {
1740		if (full_bio)
1741			bio_endio(full_bio);
1742		flush_bios(snapshot_bios);
1743	}
1744
1745	retry_origin_bios(s, origin_bios);
1746
1747	free_pending_exception(pe);
1748}
1749
1750static void complete_exception(struct dm_snap_pending_exception *pe)
1751{
1752	struct dm_snapshot *s = pe->snap;
1753
1754	/* Update the metadata if we are persistent */
1755	s->store->type->commit_exception(s->store, &pe->e, !pe->copy_error,
1756					 pending_complete, pe);
1757}
1758
1759/*
1760 * Called when the copy I/O has finished.  kcopyd actually runs
1761 * this code so don't block.
1762 */
1763static void copy_callback(int read_err, unsigned long write_err, void *context)
1764{
1765	struct dm_snap_pending_exception *pe = context;
1766	struct dm_snapshot *s = pe->snap;
1767
1768	pe->copy_error = read_err || write_err;
1769
1770	if (pe->exception_sequence == s->exception_complete_sequence) {
1771		struct rb_node *next;
1772
1773		s->exception_complete_sequence++;
1774		complete_exception(pe);
1775
1776		next = rb_first(&s->out_of_order_tree);
1777		while (next) {
1778			pe = rb_entry(next, struct dm_snap_pending_exception,
1779					out_of_order_node);
1780			if (pe->exception_sequence != s->exception_complete_sequence)
1781				break;
1782			next = rb_next(next);
1783			s->exception_complete_sequence++;
1784			rb_erase(&pe->out_of_order_node, &s->out_of_order_tree);
1785			complete_exception(pe);
1786			cond_resched();
1787		}
1788	} else {
1789		struct rb_node *parent = NULL;
1790		struct rb_node **p = &s->out_of_order_tree.rb_node;
1791		struct dm_snap_pending_exception *pe2;
1792
1793		while (*p) {
1794			pe2 = rb_entry(*p, struct dm_snap_pending_exception, out_of_order_node);
1795			parent = *p;
1796
1797			BUG_ON(pe->exception_sequence == pe2->exception_sequence);
1798			if (pe->exception_sequence < pe2->exception_sequence)
1799				p = &((*p)->rb_left);
1800			else
1801				p = &((*p)->rb_right);
1802		}
1803
1804		rb_link_node(&pe->out_of_order_node, parent, p);
1805		rb_insert_color(&pe->out_of_order_node, &s->out_of_order_tree);
1806	}
1807	account_end_copy(s);
1808}
1809
1810/*
1811 * Dispatches the copy operation to kcopyd.
1812 */
1813static void start_copy(struct dm_snap_pending_exception *pe)
1814{
1815	struct dm_snapshot *s = pe->snap;
1816	struct dm_io_region src, dest;
1817	struct block_device *bdev = s->origin->bdev;
1818	sector_t dev_size;
1819
1820	dev_size = get_dev_size(bdev);
1821
1822	src.bdev = bdev;
1823	src.sector = chunk_to_sector(s->store, pe->e.old_chunk);
1824	src.count = min((sector_t)s->store->chunk_size, dev_size - src.sector);
1825
1826	dest.bdev = s->cow->bdev;
1827	dest.sector = chunk_to_sector(s->store, pe->e.new_chunk);
1828	dest.count = src.count;
1829
1830	/* Hand over to kcopyd */
1831	account_start_copy(s);
1832	dm_kcopyd_copy(s->kcopyd_client, &src, 1, &dest, 0, copy_callback, pe);
1833}
1834
1835static void full_bio_end_io(struct bio *bio)
1836{
1837	void *callback_data = bio->bi_private;
1838
1839	dm_kcopyd_do_callback(callback_data, 0, bio->bi_status ? 1 : 0);
1840}
1841
1842static void start_full_bio(struct dm_snap_pending_exception *pe,
1843			   struct bio *bio)
1844{
1845	struct dm_snapshot *s = pe->snap;
1846	void *callback_data;
1847
1848	pe->full_bio = bio;
1849	pe->full_bio_end_io = bio->bi_end_io;
1850
1851	account_start_copy(s);
1852	callback_data = dm_kcopyd_prepare_callback(s->kcopyd_client,
1853						   copy_callback, pe);
1854
1855	bio->bi_end_io = full_bio_end_io;
1856	bio->bi_private = callback_data;
1857
1858	submit_bio_noacct(bio);
1859}
1860
1861static struct dm_snap_pending_exception *
1862__lookup_pending_exception(struct dm_snapshot *s, chunk_t chunk)
1863{
1864	struct dm_exception *e = dm_lookup_exception(&s->pending, chunk);
1865
1866	if (!e)
1867		return NULL;
1868
1869	return container_of(e, struct dm_snap_pending_exception, e);
1870}
1871
1872/*
1873 * Inserts a pending exception into the pending table.
1874 *
1875 * NOTE: a write lock must be held on the chunk's pending exception table slot
1876 * before calling this.
1877 */
1878static struct dm_snap_pending_exception *
1879__insert_pending_exception(struct dm_snapshot *s,
1880			   struct dm_snap_pending_exception *pe, chunk_t chunk)
1881{
1882	pe->e.old_chunk = chunk;
1883	bio_list_init(&pe->origin_bios);
1884	bio_list_init(&pe->snapshot_bios);
1885	pe->started = 0;
1886	pe->full_bio = NULL;
1887
1888	spin_lock(&s->pe_allocation_lock);
1889	if (s->store->type->prepare_exception(s->store, &pe->e)) {
1890		spin_unlock(&s->pe_allocation_lock);
1891		free_pending_exception(pe);
1892		return NULL;
1893	}
1894
1895	pe->exception_sequence = s->exception_start_sequence++;
1896	spin_unlock(&s->pe_allocation_lock);
1897
1898	dm_insert_exception(&s->pending, &pe->e);
1899
1900	return pe;
1901}
1902
1903/*
1904 * Looks to see if this snapshot already has a pending exception
1905 * for this chunk, otherwise it allocates a new one and inserts
1906 * it into the pending table.
1907 *
1908 * NOTE: a write lock must be held on the chunk's pending exception table slot
1909 * before calling this.
1910 */
1911static struct dm_snap_pending_exception *
1912__find_pending_exception(struct dm_snapshot *s,
1913			 struct dm_snap_pending_exception *pe, chunk_t chunk)
1914{
1915	struct dm_snap_pending_exception *pe2;
1916
1917	pe2 = __lookup_pending_exception(s, chunk);
1918	if (pe2) {
1919		free_pending_exception(pe);
1920		return pe2;
1921	}
1922
1923	return __insert_pending_exception(s, pe, chunk);
1924}
1925
1926static void remap_exception(struct dm_snapshot *s, struct dm_exception *e,
1927			    struct bio *bio, chunk_t chunk)
1928{
1929	bio_set_dev(bio, s->cow->bdev);
1930	bio->bi_iter.bi_sector =
1931		chunk_to_sector(s->store, dm_chunk_number(e->new_chunk) +
1932				(chunk - e->old_chunk)) +
1933		(bio->bi_iter.bi_sector & s->store->chunk_mask);
1934}
1935
1936static void zero_callback(int read_err, unsigned long write_err, void *context)
1937{
1938	struct bio *bio = context;
1939	struct dm_snapshot *s = bio->bi_private;
1940
1941	account_end_copy(s);
1942	bio->bi_status = write_err ? BLK_STS_IOERR : 0;
1943	bio_endio(bio);
1944}
1945
1946static void zero_exception(struct dm_snapshot *s, struct dm_exception *e,
1947			   struct bio *bio, chunk_t chunk)
1948{
1949	struct dm_io_region dest;
1950
1951	dest.bdev = s->cow->bdev;
1952	dest.sector = bio->bi_iter.bi_sector;
1953	dest.count = s->store->chunk_size;
1954
1955	account_start_copy(s);
1956	WARN_ON_ONCE(bio->bi_private);
1957	bio->bi_private = s;
1958	dm_kcopyd_zero(s->kcopyd_client, 1, &dest, 0, zero_callback, bio);
1959}
1960
1961static bool io_overlaps_chunk(struct dm_snapshot *s, struct bio *bio)
1962{
1963	return bio->bi_iter.bi_size ==
1964		(s->store->chunk_size << SECTOR_SHIFT);
1965}
1966
1967static int snapshot_map(struct dm_target *ti, struct bio *bio)
1968{
1969	struct dm_exception *e;
1970	struct dm_snapshot *s = ti->private;
1971	int r = DM_MAPIO_REMAPPED;
1972	chunk_t chunk;
1973	struct dm_snap_pending_exception *pe = NULL;
1974	struct dm_exception_table_lock lock;
1975
1976	init_tracked_chunk(bio);
1977
1978	if (bio->bi_opf & REQ_PREFLUSH) {
1979		bio_set_dev(bio, s->cow->bdev);
1980		return DM_MAPIO_REMAPPED;
1981	}
1982
1983	chunk = sector_to_chunk(s->store, bio->bi_iter.bi_sector);
1984	dm_exception_table_lock_init(s, chunk, &lock);
1985
1986	/* Full snapshots are not usable */
1987	/* To get here the table must be live so s->active is always set. */
1988	if (!s->valid)
1989		return DM_MAPIO_KILL;
1990
1991	if (bio_data_dir(bio) == WRITE) {
1992		while (unlikely(!wait_for_in_progress(s, false)))
1993			; /* wait_for_in_progress() has slept */
1994	}
1995
1996	down_read(&s->lock);
1997	dm_exception_table_lock(&lock);
1998
1999	if (!s->valid || (unlikely(s->snapshot_overflowed) &&
2000	    bio_data_dir(bio) == WRITE)) {
2001		r = DM_MAPIO_KILL;
2002		goto out_unlock;
2003	}
2004
2005	if (unlikely(bio_op(bio) == REQ_OP_DISCARD)) {
2006		if (s->discard_passdown_origin && dm_bio_get_target_bio_nr(bio)) {
2007			/*
2008			 * passdown discard to origin (without triggering
2009			 * snapshot exceptions via do_origin; doing so would
2010			 * defeat the goal of freeing space in origin that is
2011			 * implied by the "discard_passdown_origin" feature)
2012			 */
2013			bio_set_dev(bio, s->origin->bdev);
2014			track_chunk(s, bio, chunk);
2015			goto out_unlock;
2016		}
2017		/* discard to snapshot (target_bio_nr == 0) zeroes exceptions */
2018	}
2019
2020	/* If the block is already remapped - use that, else remap it */
2021	e = dm_lookup_exception(&s->complete, chunk);
2022	if (e) {
2023		remap_exception(s, e, bio, chunk);
2024		if (unlikely(bio_op(bio) == REQ_OP_DISCARD) &&
2025		    io_overlaps_chunk(s, bio)) {
2026			dm_exception_table_unlock(&lock);
2027			up_read(&s->lock);
2028			zero_exception(s, e, bio, chunk);
2029			r = DM_MAPIO_SUBMITTED; /* discard is not issued */
2030			goto out;
2031		}
2032		goto out_unlock;
2033	}
2034
2035	if (unlikely(bio_op(bio) == REQ_OP_DISCARD)) {
2036		/*
2037		 * If no exception exists, complete discard immediately
2038		 * otherwise it'll trigger copy-out.
2039		 */
2040		bio_endio(bio);
2041		r = DM_MAPIO_SUBMITTED;
2042		goto out_unlock;
2043	}
2044
2045	/*
2046	 * Write to snapshot - higher level takes care of RW/RO
2047	 * flags so we should only get this if we are
2048	 * writeable.
2049	 */
2050	if (bio_data_dir(bio) == WRITE) {
2051		pe = __lookup_pending_exception(s, chunk);
2052		if (!pe) {
2053			dm_exception_table_unlock(&lock);
2054			pe = alloc_pending_exception(s);
2055			dm_exception_table_lock(&lock);
2056
2057			e = dm_lookup_exception(&s->complete, chunk);
2058			if (e) {
2059				free_pending_exception(pe);
2060				remap_exception(s, e, bio, chunk);
2061				goto out_unlock;
2062			}
2063
2064			pe = __find_pending_exception(s, pe, chunk);
2065			if (!pe) {
2066				dm_exception_table_unlock(&lock);
2067				up_read(&s->lock);
2068
2069				down_write(&s->lock);
2070
2071				if (s->store->userspace_supports_overflow) {
2072					if (s->valid && !s->snapshot_overflowed) {
2073						s->snapshot_overflowed = 1;
2074						DMERR("Snapshot overflowed: Unable to allocate exception.");
2075					}
2076				} else
2077					__invalidate_snapshot(s, -ENOMEM);
2078				up_write(&s->lock);
2079
2080				r = DM_MAPIO_KILL;
2081				goto out;
2082			}
2083		}
2084
2085		remap_exception(s, &pe->e, bio, chunk);
2086
2087		r = DM_MAPIO_SUBMITTED;
2088
2089		if (!pe->started && io_overlaps_chunk(s, bio)) {
2090			pe->started = 1;
2091
2092			dm_exception_table_unlock(&lock);
2093			up_read(&s->lock);
2094
2095			start_full_bio(pe, bio);
2096			goto out;
2097		}
2098
2099		bio_list_add(&pe->snapshot_bios, bio);
2100
2101		if (!pe->started) {
2102			/* this is protected by the exception table lock */
2103			pe->started = 1;
2104
2105			dm_exception_table_unlock(&lock);
2106			up_read(&s->lock);
2107
2108			start_copy(pe);
2109			goto out;
2110		}
2111	} else {
2112		bio_set_dev(bio, s->origin->bdev);
2113		track_chunk(s, bio, chunk);
2114	}
2115
2116out_unlock:
2117	dm_exception_table_unlock(&lock);
2118	up_read(&s->lock);
2119out:
2120	return r;
2121}
2122
2123/*
2124 * A snapshot-merge target behaves like a combination of a snapshot
2125 * target and a snapshot-origin target.  It only generates new
2126 * exceptions in other snapshots and not in the one that is being
2127 * merged.
2128 *
2129 * For each chunk, if there is an existing exception, it is used to
2130 * redirect I/O to the cow device.  Otherwise I/O is sent to the origin,
2131 * which in turn might generate exceptions in other snapshots.
2132 * If merging is currently taking place on the chunk in question, the
2133 * I/O is deferred by adding it to s->bios_queued_during_merge.
2134 */
2135static int snapshot_merge_map(struct dm_target *ti, struct bio *bio)
2136{
2137	struct dm_exception *e;
2138	struct dm_snapshot *s = ti->private;
2139	int r = DM_MAPIO_REMAPPED;
2140	chunk_t chunk;
2141
2142	init_tracked_chunk(bio);
2143
2144	if (bio->bi_opf & REQ_PREFLUSH) {
2145		if (!dm_bio_get_target_bio_nr(bio))
2146			bio_set_dev(bio, s->origin->bdev);
2147		else
2148			bio_set_dev(bio, s->cow->bdev);
2149		return DM_MAPIO_REMAPPED;
2150	}
2151
2152	if (unlikely(bio_op(bio) == REQ_OP_DISCARD)) {
2153		/* Once merging, discards no longer effect change */
2154		bio_endio(bio);
2155		return DM_MAPIO_SUBMITTED;
2156	}
2157
2158	chunk = sector_to_chunk(s->store, bio->bi_iter.bi_sector);
2159
2160	down_write(&s->lock);
2161
2162	/* Full merging snapshots are redirected to the origin */
2163	if (!s->valid)
2164		goto redirect_to_origin;
2165
2166	/* If the block is already remapped - use that */
2167	e = dm_lookup_exception(&s->complete, chunk);
2168	if (e) {
2169		/* Queue writes overlapping with chunks being merged */
2170		if (bio_data_dir(bio) == WRITE &&
2171		    chunk >= s->first_merging_chunk &&
2172		    chunk < (s->first_merging_chunk +
2173			     s->num_merging_chunks)) {
2174			bio_set_dev(bio, s->origin->bdev);
2175			bio_list_add(&s->bios_queued_during_merge, bio);
2176			r = DM_MAPIO_SUBMITTED;
2177			goto out_unlock;
2178		}
2179
2180		remap_exception(s, e, bio, chunk);
2181
2182		if (bio_data_dir(bio) == WRITE)
2183			track_chunk(s, bio, chunk);
2184		goto out_unlock;
2185	}
2186
2187redirect_to_origin:
2188	bio_set_dev(bio, s->origin->bdev);
2189
2190	if (bio_data_dir(bio) == WRITE) {
2191		up_write(&s->lock);
2192		return do_origin(s->origin, bio, false);
2193	}
2194
2195out_unlock:
2196	up_write(&s->lock);
2197
2198	return r;
2199}
2200
2201static int snapshot_end_io(struct dm_target *ti, struct bio *bio,
2202		blk_status_t *error)
2203{
2204	struct dm_snapshot *s = ti->private;
2205
2206	if (is_bio_tracked(bio))
2207		stop_tracking_chunk(s, bio);
2208
2209	return DM_ENDIO_DONE;
2210}
2211
2212static void snapshot_merge_presuspend(struct dm_target *ti)
2213{
2214	struct dm_snapshot *s = ti->private;
2215
2216	stop_merge(s);
2217}
2218
2219static int snapshot_preresume(struct dm_target *ti)
2220{
2221	int r = 0;
2222	struct dm_snapshot *s = ti->private;
2223	struct dm_snapshot *snap_src = NULL, *snap_dest = NULL;
2224
2225	down_read(&_origins_lock);
2226	(void) __find_snapshots_sharing_cow(s, &snap_src, &snap_dest, NULL);
2227	if (snap_src && snap_dest) {
2228		down_read(&snap_src->lock);
2229		if (s == snap_src) {
2230			DMERR("Unable to resume snapshot source until "
2231			      "handover completes.");
2232			r = -EINVAL;
2233		} else if (!dm_suspended(snap_src->ti)) {
2234			DMERR("Unable to perform snapshot handover until "
2235			      "source is suspended.");
2236			r = -EINVAL;
2237		}
2238		up_read(&snap_src->lock);
2239	}
2240	up_read(&_origins_lock);
2241
2242	return r;
2243}
2244
2245static void snapshot_resume(struct dm_target *ti)
2246{
2247	struct dm_snapshot *s = ti->private;
2248	struct dm_snapshot *snap_src = NULL, *snap_dest = NULL, *snap_merging = NULL;
2249	struct dm_origin *o;
2250	struct mapped_device *origin_md = NULL;
2251	bool must_restart_merging = false;
2252
2253	down_read(&_origins_lock);
2254
2255	o = __lookup_dm_origin(s->origin->bdev);
2256	if (o)
2257		origin_md = dm_table_get_md(o->ti->table);
2258	if (!origin_md) {
2259		(void) __find_snapshots_sharing_cow(s, NULL, NULL, &snap_merging);
2260		if (snap_merging)
2261			origin_md = dm_table_get_md(snap_merging->ti->table);
2262	}
2263	if (origin_md == dm_table_get_md(ti->table))
2264		origin_md = NULL;
2265	if (origin_md) {
2266		if (dm_hold(origin_md))
2267			origin_md = NULL;
2268	}
2269
2270	up_read(&_origins_lock);
2271
2272	if (origin_md) {
2273		dm_internal_suspend_fast(origin_md);
2274		if (snap_merging && test_bit(RUNNING_MERGE, &snap_merging->state_bits)) {
2275			must_restart_merging = true;
2276			stop_merge(snap_merging);
2277		}
2278	}
2279
2280	down_read(&_origins_lock);
2281
2282	(void) __find_snapshots_sharing_cow(s, &snap_src, &snap_dest, NULL);
2283	if (snap_src && snap_dest) {
2284		down_write(&snap_src->lock);
2285		down_write_nested(&snap_dest->lock, SINGLE_DEPTH_NESTING);
2286		__handover_exceptions(snap_src, snap_dest);
2287		up_write(&snap_dest->lock);
2288		up_write(&snap_src->lock);
2289	}
2290
2291	up_read(&_origins_lock);
2292
2293	if (origin_md) {
2294		if (must_restart_merging)
2295			start_merge(snap_merging);
2296		dm_internal_resume_fast(origin_md);
2297		dm_put(origin_md);
2298	}
2299
2300	/* Now we have correct chunk size, reregister */
2301	reregister_snapshot(s);
2302
2303	down_write(&s->lock);
2304	s->active = 1;
2305	up_write(&s->lock);
2306}
2307
2308static uint32_t get_origin_minimum_chunksize(struct block_device *bdev)
2309{
2310	uint32_t min_chunksize;
2311
2312	down_read(&_origins_lock);
2313	min_chunksize = __minimum_chunk_size(__lookup_origin(bdev));
2314	up_read(&_origins_lock);
2315
2316	return min_chunksize;
2317}
2318
2319static void snapshot_merge_resume(struct dm_target *ti)
2320{
2321	struct dm_snapshot *s = ti->private;
2322
2323	/*
2324	 * Handover exceptions from existing snapshot.
2325	 */
2326	snapshot_resume(ti);
2327
2328	/*
2329	 * snapshot-merge acts as an origin, so set ti->max_io_len
2330	 */
2331	ti->max_io_len = get_origin_minimum_chunksize(s->origin->bdev);
2332
2333	start_merge(s);
2334}
2335
2336static void snapshot_status(struct dm_target *ti, status_type_t type,
2337			    unsigned status_flags, char *result, unsigned maxlen)
2338{
2339	unsigned sz = 0;
2340	struct dm_snapshot *snap = ti->private;
2341	unsigned num_features;
2342
2343	switch (type) {
2344	case STATUSTYPE_INFO:
2345
2346		down_write(&snap->lock);
2347
2348		if (!snap->valid)
2349			DMEMIT("Invalid");
2350		else if (snap->merge_failed)
2351			DMEMIT("Merge failed");
2352		else if (snap->snapshot_overflowed)
2353			DMEMIT("Overflow");
2354		else {
2355			if (snap->store->type->usage) {
2356				sector_t total_sectors, sectors_allocated,
2357					 metadata_sectors;
2358				snap->store->type->usage(snap->store,
2359							 &total_sectors,
2360							 &sectors_allocated,
2361							 &metadata_sectors);
2362				DMEMIT("%llu/%llu %llu",
2363				       (unsigned long long)sectors_allocated,
2364				       (unsigned long long)total_sectors,
2365				       (unsigned long long)metadata_sectors);
2366			}
2367			else
2368				DMEMIT("Unknown");
2369		}
2370
2371		up_write(&snap->lock);
2372
2373		break;
2374
2375	case STATUSTYPE_TABLE:
2376		/*
2377		 * kdevname returns a static pointer so we need
2378		 * to make private copies if the output is to
2379		 * make sense.
2380		 */
2381		DMEMIT("%s %s", snap->origin->name, snap->cow->name);
2382		sz += snap->store->type->status(snap->store, type, result + sz,
2383						maxlen - sz);
2384		num_features = snap->discard_zeroes_cow + snap->discard_passdown_origin;
2385		if (num_features) {
2386			DMEMIT(" %u", num_features);
2387			if (snap->discard_zeroes_cow)
2388				DMEMIT(" discard_zeroes_cow");
2389			if (snap->discard_passdown_origin)
2390				DMEMIT(" discard_passdown_origin");
2391		}
2392		break;
 
 
 
 
 
 
 
 
 
 
2393	}
2394}
2395
2396static int snapshot_iterate_devices(struct dm_target *ti,
2397				    iterate_devices_callout_fn fn, void *data)
2398{
2399	struct dm_snapshot *snap = ti->private;
2400	int r;
2401
2402	r = fn(ti, snap->origin, 0, ti->len, data);
2403
2404	if (!r)
2405		r = fn(ti, snap->cow, 0, get_dev_size(snap->cow->bdev), data);
2406
2407	return r;
2408}
2409
2410static void snapshot_io_hints(struct dm_target *ti, struct queue_limits *limits)
2411{
2412	struct dm_snapshot *snap = ti->private;
2413
2414	if (snap->discard_zeroes_cow) {
2415		struct dm_snapshot *snap_src = NULL, *snap_dest = NULL;
2416
2417		down_read(&_origins_lock);
2418
2419		(void) __find_snapshots_sharing_cow(snap, &snap_src, &snap_dest, NULL);
2420		if (snap_src && snap_dest)
2421			snap = snap_src;
2422
2423		/* All discards are split on chunk_size boundary */
2424		limits->discard_granularity = snap->store->chunk_size;
2425		limits->max_discard_sectors = snap->store->chunk_size;
2426
2427		up_read(&_origins_lock);
2428	}
2429}
2430
2431/*-----------------------------------------------------------------
 
2432 * Origin methods
2433 *---------------------------------------------------------------*/
2434
2435/*
2436 * If no exceptions need creating, DM_MAPIO_REMAPPED is returned and any
2437 * supplied bio was ignored.  The caller may submit it immediately.
2438 * (No remapping actually occurs as the origin is always a direct linear
2439 * map.)
2440 *
2441 * If further exceptions are required, DM_MAPIO_SUBMITTED is returned
2442 * and any supplied bio is added to a list to be submitted once all
2443 * the necessary exceptions exist.
2444 */
2445static int __origin_write(struct list_head *snapshots, sector_t sector,
2446			  struct bio *bio)
2447{
2448	int r = DM_MAPIO_REMAPPED;
2449	struct dm_snapshot *snap;
2450	struct dm_exception *e;
2451	struct dm_snap_pending_exception *pe, *pe2;
2452	struct dm_snap_pending_exception *pe_to_start_now = NULL;
2453	struct dm_snap_pending_exception *pe_to_start_last = NULL;
2454	struct dm_exception_table_lock lock;
2455	chunk_t chunk;
2456
2457	/* Do all the snapshots on this origin */
2458	list_for_each_entry (snap, snapshots, list) {
2459		/*
2460		 * Don't make new exceptions in a merging snapshot
2461		 * because it has effectively been deleted
2462		 */
2463		if (dm_target_is_snapshot_merge(snap->ti))
2464			continue;
2465
2466		/* Nothing to do if writing beyond end of snapshot */
2467		if (sector >= dm_table_get_size(snap->ti->table))
2468			continue;
2469
2470		/*
2471		 * Remember, different snapshots can have
2472		 * different chunk sizes.
2473		 */
2474		chunk = sector_to_chunk(snap->store, sector);
2475		dm_exception_table_lock_init(snap, chunk, &lock);
2476
2477		down_read(&snap->lock);
2478		dm_exception_table_lock(&lock);
2479
2480		/* Only deal with valid and active snapshots */
2481		if (!snap->valid || !snap->active)
2482			goto next_snapshot;
2483
2484		pe = __lookup_pending_exception(snap, chunk);
2485		if (!pe) {
2486			/*
2487			 * Check exception table to see if block is already
2488			 * remapped in this snapshot and trigger an exception
2489			 * if not.
2490			 */
2491			e = dm_lookup_exception(&snap->complete, chunk);
2492			if (e)
2493				goto next_snapshot;
2494
2495			dm_exception_table_unlock(&lock);
2496			pe = alloc_pending_exception(snap);
2497			dm_exception_table_lock(&lock);
2498
2499			pe2 = __lookup_pending_exception(snap, chunk);
2500
2501			if (!pe2) {
2502				e = dm_lookup_exception(&snap->complete, chunk);
2503				if (e) {
2504					free_pending_exception(pe);
2505					goto next_snapshot;
2506				}
2507
2508				pe = __insert_pending_exception(snap, pe, chunk);
2509				if (!pe) {
2510					dm_exception_table_unlock(&lock);
2511					up_read(&snap->lock);
2512
2513					invalidate_snapshot(snap, -ENOMEM);
2514					continue;
2515				}
2516			} else {
2517				free_pending_exception(pe);
2518				pe = pe2;
2519			}
2520		}
2521
2522		r = DM_MAPIO_SUBMITTED;
2523
2524		/*
2525		 * If an origin bio was supplied, queue it to wait for the
2526		 * completion of this exception, and start this one last,
2527		 * at the end of the function.
2528		 */
2529		if (bio) {
2530			bio_list_add(&pe->origin_bios, bio);
2531			bio = NULL;
2532
2533			if (!pe->started) {
2534				pe->started = 1;
2535				pe_to_start_last = pe;
2536			}
2537		}
2538
2539		if (!pe->started) {
2540			pe->started = 1;
2541			pe_to_start_now = pe;
2542		}
2543
2544next_snapshot:
2545		dm_exception_table_unlock(&lock);
2546		up_read(&snap->lock);
2547
2548		if (pe_to_start_now) {
2549			start_copy(pe_to_start_now);
2550			pe_to_start_now = NULL;
2551		}
2552	}
2553
2554	/*
2555	 * Submit the exception against which the bio is queued last,
2556	 * to give the other exceptions a head start.
2557	 */
2558	if (pe_to_start_last)
2559		start_copy(pe_to_start_last);
2560
2561	return r;
2562}
2563
2564/*
2565 * Called on a write from the origin driver.
2566 */
2567static int do_origin(struct dm_dev *origin, struct bio *bio, bool limit)
2568{
2569	struct origin *o;
2570	int r = DM_MAPIO_REMAPPED;
2571
2572again:
2573	down_read(&_origins_lock);
2574	o = __lookup_origin(origin->bdev);
2575	if (o) {
2576		if (limit) {
2577			struct dm_snapshot *s;
 
2578			list_for_each_entry(s, &o->snapshots, list)
2579				if (unlikely(!wait_for_in_progress(s, true)))
2580					goto again;
2581		}
2582
2583		r = __origin_write(&o->snapshots, bio->bi_iter.bi_sector, bio);
2584	}
2585	up_read(&_origins_lock);
2586
2587	return r;
2588}
2589
2590/*
2591 * Trigger exceptions in all non-merging snapshots.
2592 *
2593 * The chunk size of the merging snapshot may be larger than the chunk
2594 * size of some other snapshot so we may need to reallocate multiple
2595 * chunks in other snapshots.
2596 *
2597 * We scan all the overlapping exceptions in the other snapshots.
2598 * Returns 1 if anything was reallocated and must be waited for,
2599 * otherwise returns 0.
2600 *
2601 * size must be a multiple of merging_snap's chunk_size.
2602 */
2603static int origin_write_extent(struct dm_snapshot *merging_snap,
2604			       sector_t sector, unsigned size)
2605{
2606	int must_wait = 0;
2607	sector_t n;
2608	struct origin *o;
2609
2610	/*
2611	 * The origin's __minimum_chunk_size() got stored in max_io_len
2612	 * by snapshot_merge_resume().
2613	 */
2614	down_read(&_origins_lock);
2615	o = __lookup_origin(merging_snap->origin->bdev);
2616	for (n = 0; n < size; n += merging_snap->ti->max_io_len)
2617		if (__origin_write(&o->snapshots, sector + n, NULL) ==
2618		    DM_MAPIO_SUBMITTED)
2619			must_wait = 1;
2620	up_read(&_origins_lock);
2621
2622	return must_wait;
2623}
2624
2625/*
2626 * Origin: maps a linear range of a device, with hooks for snapshotting.
2627 */
2628
2629/*
2630 * Construct an origin mapping: <dev_path>
2631 * The context for an origin is merely a 'struct dm_dev *'
2632 * pointing to the real device.
2633 */
2634static int origin_ctr(struct dm_target *ti, unsigned int argc, char **argv)
2635{
2636	int r;
2637	struct dm_origin *o;
2638
2639	if (argc != 1) {
2640		ti->error = "origin: incorrect number of arguments";
2641		return -EINVAL;
2642	}
2643
2644	o = kmalloc(sizeof(struct dm_origin), GFP_KERNEL);
2645	if (!o) {
2646		ti->error = "Cannot allocate private origin structure";
2647		r = -ENOMEM;
2648		goto bad_alloc;
2649	}
2650
2651	r = dm_get_device(ti, argv[0], dm_table_get_mode(ti->table), &o->dev);
2652	if (r) {
2653		ti->error = "Cannot get target device";
2654		goto bad_open;
2655	}
2656
2657	o->ti = ti;
2658	ti->private = o;
2659	ti->num_flush_bios = 1;
2660
2661	return 0;
2662
2663bad_open:
2664	kfree(o);
2665bad_alloc:
2666	return r;
2667}
2668
2669static void origin_dtr(struct dm_target *ti)
2670{
2671	struct dm_origin *o = ti->private;
2672
2673	dm_put_device(ti, o->dev);
2674	kfree(o);
2675}
2676
2677static int origin_map(struct dm_target *ti, struct bio *bio)
2678{
2679	struct dm_origin *o = ti->private;
2680	unsigned available_sectors;
2681
2682	bio_set_dev(bio, o->dev->bdev);
2683
2684	if (unlikely(bio->bi_opf & REQ_PREFLUSH))
2685		return DM_MAPIO_REMAPPED;
2686
2687	if (bio_data_dir(bio) != WRITE)
2688		return DM_MAPIO_REMAPPED;
2689
2690	available_sectors = o->split_boundary -
2691		((unsigned)bio->bi_iter.bi_sector & (o->split_boundary - 1));
2692
2693	if (bio_sectors(bio) > available_sectors)
2694		dm_accept_partial_bio(bio, available_sectors);
2695
2696	/* Only tell snapshots if this is a write */
2697	return do_origin(o->dev, bio, true);
2698}
2699
2700/*
2701 * Set the target "max_io_len" field to the minimum of all the snapshots'
2702 * chunk sizes.
2703 */
2704static void origin_resume(struct dm_target *ti)
2705{
2706	struct dm_origin *o = ti->private;
2707
2708	o->split_boundary = get_origin_minimum_chunksize(o->dev->bdev);
2709
2710	down_write(&_origins_lock);
2711	__insert_dm_origin(o);
2712	up_write(&_origins_lock);
2713}
2714
2715static void origin_postsuspend(struct dm_target *ti)
2716{
2717	struct dm_origin *o = ti->private;
2718
2719	down_write(&_origins_lock);
2720	__remove_dm_origin(o);
2721	up_write(&_origins_lock);
2722}
2723
2724static void origin_status(struct dm_target *ti, status_type_t type,
2725			  unsigned status_flags, char *result, unsigned maxlen)
2726{
2727	struct dm_origin *o = ti->private;
2728
2729	switch (type) {
2730	case STATUSTYPE_INFO:
2731		result[0] = '\0';
2732		break;
2733
2734	case STATUSTYPE_TABLE:
2735		snprintf(result, maxlen, "%s", o->dev->name);
2736		break;
 
 
 
2737	}
2738}
2739
2740static int origin_iterate_devices(struct dm_target *ti,
2741				  iterate_devices_callout_fn fn, void *data)
2742{
2743	struct dm_origin *o = ti->private;
2744
2745	return fn(ti, o->dev, 0, ti->len, data);
2746}
2747
2748static struct target_type origin_target = {
2749	.name    = "snapshot-origin",
2750	.version = {1, 9, 0},
2751	.module  = THIS_MODULE,
2752	.ctr     = origin_ctr,
2753	.dtr     = origin_dtr,
2754	.map     = origin_map,
2755	.resume  = origin_resume,
2756	.postsuspend = origin_postsuspend,
2757	.status  = origin_status,
2758	.iterate_devices = origin_iterate_devices,
2759};
2760
2761static struct target_type snapshot_target = {
2762	.name    = "snapshot",
2763	.version = {1, 16, 0},
2764	.module  = THIS_MODULE,
2765	.ctr     = snapshot_ctr,
2766	.dtr     = snapshot_dtr,
2767	.map     = snapshot_map,
2768	.end_io  = snapshot_end_io,
2769	.preresume  = snapshot_preresume,
2770	.resume  = snapshot_resume,
2771	.status  = snapshot_status,
2772	.iterate_devices = snapshot_iterate_devices,
2773	.io_hints = snapshot_io_hints,
2774};
2775
2776static struct target_type merge_target = {
2777	.name    = dm_snapshot_merge_target_name,
2778	.version = {1, 5, 0},
2779	.module  = THIS_MODULE,
2780	.ctr     = snapshot_ctr,
2781	.dtr     = snapshot_dtr,
2782	.map     = snapshot_merge_map,
2783	.end_io  = snapshot_end_io,
2784	.presuspend = snapshot_merge_presuspend,
2785	.preresume  = snapshot_preresume,
2786	.resume  = snapshot_merge_resume,
2787	.status  = snapshot_status,
2788	.iterate_devices = snapshot_iterate_devices,
2789	.io_hints = snapshot_io_hints,
2790};
2791
2792static int __init dm_snapshot_init(void)
2793{
2794	int r;
2795
2796	r = dm_exception_store_init();
2797	if (r) {
2798		DMERR("Failed to initialize exception stores");
2799		return r;
2800	}
2801
2802	r = init_origin_hash();
2803	if (r) {
2804		DMERR("init_origin_hash failed.");
2805		goto bad_origin_hash;
2806	}
2807
2808	exception_cache = KMEM_CACHE(dm_exception, 0);
2809	if (!exception_cache) {
2810		DMERR("Couldn't create exception cache.");
2811		r = -ENOMEM;
2812		goto bad_exception_cache;
2813	}
2814
2815	pending_cache = KMEM_CACHE(dm_snap_pending_exception, 0);
2816	if (!pending_cache) {
2817		DMERR("Couldn't create pending cache.");
2818		r = -ENOMEM;
2819		goto bad_pending_cache;
2820	}
2821
2822	r = dm_register_target(&snapshot_target);
2823	if (r < 0) {
2824		DMERR("snapshot target register failed %d", r);
2825		goto bad_register_snapshot_target;
2826	}
2827
2828	r = dm_register_target(&origin_target);
2829	if (r < 0) {
2830		DMERR("Origin target register failed %d", r);
2831		goto bad_register_origin_target;
2832	}
2833
2834	r = dm_register_target(&merge_target);
2835	if (r < 0) {
2836		DMERR("Merge target register failed %d", r);
2837		goto bad_register_merge_target;
2838	}
2839
2840	return 0;
2841
2842bad_register_merge_target:
2843	dm_unregister_target(&origin_target);
2844bad_register_origin_target:
2845	dm_unregister_target(&snapshot_target);
2846bad_register_snapshot_target:
2847	kmem_cache_destroy(pending_cache);
2848bad_pending_cache:
2849	kmem_cache_destroy(exception_cache);
2850bad_exception_cache:
2851	exit_origin_hash();
2852bad_origin_hash:
2853	dm_exception_store_exit();
2854
2855	return r;
2856}
2857
2858static void __exit dm_snapshot_exit(void)
2859{
2860	dm_unregister_target(&snapshot_target);
2861	dm_unregister_target(&origin_target);
2862	dm_unregister_target(&merge_target);
2863
2864	exit_origin_hash();
2865	kmem_cache_destroy(pending_cache);
2866	kmem_cache_destroy(exception_cache);
2867
2868	dm_exception_store_exit();
2869}
2870
2871/* Module hooks */
2872module_init(dm_snapshot_init);
2873module_exit(dm_snapshot_exit);
2874
2875MODULE_DESCRIPTION(DM_NAME " snapshot target");
2876MODULE_AUTHOR("Joe Thornber");
2877MODULE_LICENSE("GPL");
2878MODULE_ALIAS("dm-snapshot-origin");
2879MODULE_ALIAS("dm-snapshot-merge");