• Bob Peterson's avatar
    GFS2: Processes waiting on inode glock that no processes are holding · f90e5b5b
    Bob Peterson authored
    This patch fixes a race in the GFS2 glock state machine that may
    result in lockups.  The symptom is that all nodes but one will
    hang, waiting for a particular glock.  All the holder records
    will have the "W" (Waiting) bit set.  The other node will
    typically have the glock stuck in Exclusive mode (EX) with no
    holder records, but the dinode will be cached.  In other words,
    an entry with "I:" will appear in the glock dump for that glock,
    but nothing else.
    
    The race has to do with the glock "Pending Demote" bit, which
    can be set, then immediately reset, thus losing the fact that
    another node needs the glock.  The sequence of events is:
    
    1. Something schedules the glock workqueue (e.g. glock request from fs)
    2. The glock workqueue gets to the point between the test of the reply pending
    bit and the spin lock:
    
            if (test_and_clear_bit(GLF_REPLY_PENDING, &gl->gl_flags)) {
                    finish_xmote(gl, gl->gl_reply);
                    drop_ref = 1;
            }
            down_read(&gfs2_umount_flush_sem);         <---- i.e. here
            spin_lock(&gl->gl_spin);
    
    3. In comes (a) the reply to our EX lock request setting GLF_REPLY_PENDING and
                (b) the demote request which sets GLF_PENDING_DEMOTE
    
    4. The following test is executed:
    
            if (test_and_clear_bit(GLF_PENDING_DEMOTE, &gl->gl_flags) &&
                gl->gl_state != LM_ST_UNLOCKED &&
                gl->gl_demote_state != LM_ST_EXCLUSIVE) {
    
    This resets the pending demote flag, and gl->gl_demote_state is not equal to
    exclusive, however because the reply from the dlm arrived after we checked for
    the GLF_REPLY_PENDING flag, gl->gl_state is still equal to unlocked, so
    although we reset the GLF_PENDING_DEMOTE flag, we didn't then set the
    GLF_DEMOTE flag or reinstate the GLF_PENDING_DEMOTE_FLAG.
    
    The patch closes the timing window by only transitioning the
    "Pending demote" bit to the "demote" flag once we know the
    other conditions (not unlocked and not exclusive) are met.
    Signed-off-by: default avatarBob Peterson <rpeterso@redhat.com>
    Signed-off-by: default avatarSteven Whitehouse <swhiteho@redhat.com>
    f90e5b5b
glock.c 44.9 KB