zfcp: Fix deadlock between zfcp ERP and SCSI
Subsystems (3)
PATCH 2/5 zfcp: Fix deadlock between zfcp ERP and SCSI
From: Christof Schmitt <[email protected]>
The SCSI stack requires low level drivers to register and unregister devices. For zfcp this leads to the situation where zfcp calls the SCSI stack, the SCSI tries to scan the new device and the scan SCSI command fails. This would require the zfcp erp, but the erp thread is already blocked in the register call.
The fix is to make sure that the calls from the ERP thread to the SCSI stack do not block the ERP thread. In detail:
1) Use a workqueue to avoid blocking of the scsi_scan_target calls.
2) When removing a unit make sure that no scsi_scan_target call is pending.
3) Replace scsi_flush_work with scsi_target_unblock. This avoids blocking and has the same result.
--- drivers/s390/scsi/zfcp_aux.c | 2 + drivers/s390/scsi/zfcp_def.h | 5 +++ drivers/s390/scsi/zfcp_erp.c | 64 +++++++++++++++++++++++++++++++++++++++--- drivers/s390/scsi/zfcp_scsi.c | 5 +++ 4 files changed, 72 insertions(+), 4 deletions(-)
drivers/s390/scsi/zfcp_aux.c +2 -0
@@ -913,6 +913,8 @@ unit->sysfs_device.release = zfcp_sysfs_unit_release;dev_set_drvdata (&unit->sysfs_device, unit); +init_waitqueue_head (&unit->scsi_scan_wq); +/* mark unit unusable as long as sysfs registration is not complete */ atomic_set_mask (ZFCP_STATUS_COMMON_REMOVE , &unit->status);
drivers/s390/scsi/zfcp_def.h +5 -0
@@ -637,6 +637,7 @@#define ZFCP_STATUS_UNIT_SHARED 0x00000004#define ZFCP_STATUS_UNIT_READONLY 0x00000008#define ZFCP_STATUS_UNIT_REGISTERED 0x00000010 +#define ZFCP_STATUS_UNIT_SCSI_WORK_PENDING 0x00000020/* FSF request status (this does not have a common part) */ #define ZFCP_STATUS_FSFREQ_NOT_INIT 0x00000000
@@ -980,6 +981,10 @@struct scsi_device *device;/* scsi device struct pointer */ struct zfcp_erp_action erp_action;/* pending error recovery */ atomic_t erp_counter; +wait_queue_head_t scsi_scan_wq;/* can be used to wait until +all scsi_scan_target +requests have been +completed. */ };/* FSF request */
drivers/s390/scsi/zfcp_erp.c +60 -4
82 lines not on this page · raw message
drivers/s390/scsi/zfcp_scsi.c +5 -0
@@ -22,6 +22,7 @@#define ZFCP_LOG_AREA ZFCP_LOG_AREA_SCSI#include "zfcp_ext.h" +#include <asm/atomic.h> static void zfcp_scsi_slave_destroy (struct scsi_device *sdp);static int zfcp_scsi_slave_alloc (struct scsi_device *sdp);
@@ -179,6 +180,10 @@struct zfcp_unit *unit = (struct zfcp_unit *) sdpnt->hostdata;if (unit) { +zfcp_erp_wait (unit->port->adapter); +wait_event (unit->scsi_scan_wq, +atomic_test_mask (ZFCP_STATUS_UNIT_SCSI_WORK_PENDING , + &unit->status) ==0 );atomic_clear_mask (ZFCP_STATUS_UNIT_REGISTERED , &unit->status); sdpnt->hostdata =NULL ; unit->device =NULL ;
-------------------------------------------------------
Curious why you are calling scsi_scan_target() or scsi_target_block()/scsi_target_unblock() directly. I would have thought the add/remove rport code would have done this for you, and it deals with all the flush conditions, etc.
-- james
Quoted 173 lines · Swen Schillig
From: Christof Schmitt <[email protected]>
The SCSI stack requires low level drivers to register and unregister devices. For zfcp this leads to the situation where zfcp calls the SCSI stack, the SCSI tries to scan the new device and the scan SCSI command fails. This would require the zfcp erp, but the erp thread is already blocked in the register call.
The fix is to make sure that the calls from the ERP thread to the SCSI stack do not block the ERP thread. In detail:
1) Use a workqueue to avoid blocking of thescsi_scan_targetcalls.
2) When removing a unit make sure that noscsi_scan_targetcall is pending.
3) Replacescsi_flush_workwithscsi_target_unblock. This avoids blocking and has the same result.Signed-off-by Christof Schmitt <[email protected]>Signed-off-by Swen Schillig <[email protected]>--- drivers/s390/scsi/zfcp_aux.c | 2 + drivers/s390/scsi/zfcp_def.h | 5 +++ drivers/s390/scsi/zfcp_erp.c | 64 +++++++++++++++++++++++++++++++++++++++--- drivers/s390/scsi/zfcp_scsi.c | 5 +++ 4 files changed, 72 insertions(+), 4 deletions(-)drivers/s390/scsi/zfcp_aux.c +2
-0@@ -913,6 +913,8 @@ unit->sysfs_device.release = zfcp_sysfs_unit_release;dev_set_drvdata (&unit->sysfs_device, unit); +init_waitqueue_head (&unit->scsi_scan_wq); +/* mark unit unusable as long as sysfs registration is not complete */ atomic_set_mask (ZFCP_STATUS_COMMON_REMOVE , &unit->status);drivers/s390/scsi/zfcp_def.h +5
-0@@ -637,6 +637,7 @@#define ZFCP_STATUS_UNIT_SHARED 0x00000004#define ZFCP_STATUS_UNIT_READONLY 0x00000008#define ZFCP_STATUS_UNIT_REGISTERED 0x00000010 +#define ZFCP_STATUS_UNIT_SCSI_WORK_PENDING 0x00000020/* FSF request status (this does not have a common part) */ #define ZFCP_STATUS_FSFREQ_NOT_INIT 0x00000000@@ -980,6 +981,10 @@struct scsi_device *device;/* scsi device struct pointer */ struct zfcp_erp_action erp_action;/* pending error recovery */ atomic_t erp_counter; +wait_queue_head_t scsi_scan_wq;/* can be used to wait until +all scsi_scan_target +requests have been +completed. */ };/* FSF request */ drivers/s390/scsi/zfcp_erp.c +60
-4@@ -1591,6 +1591,62 @@return result; } +struct zfcp_erp_add_work { +struct zfcp_unit *unit; +struct work_struct work; +}; + +/** +* zfcp_erp_scsi_scan +* @data: pointer to a struct zfcp_erp_add_work +* +* Registers a logical unit with the SCSI stack. +*/ +static void zfcp_erp_scsi_scan (struct work_struct *work) +{ +struct zfcp_erp_add_work *p = + container_of(work, struct zfcp_erp_add_work, work); +struct zfcp_unit *unit = p->unit; +struct fc_rport *rport = unit->port->rport; +scsi_scan_target (&rport->dev,0 , rport->scsi_target_id, + unit->scsi_lun,0 ); +atomic_clear_mask (ZFCP_STATUS_UNIT_SCSI_WORK_PENDING , &unit->status); +wake_up (&unit->scsi_scan_wq); +zfcp_unit_put (unit); +kfree (p); +} + +/** +* zfcp_erp_schedule_work +* @unit: pointer to unit which should be registered with SCSI stack +* +* Schedules work which registers a unit with the SCSI stack +*/ +static void +zfcp_erp_schedule_work (struct zfcp_unit *unit) +{ +struct zfcp_erp_add_work *p; + + p =kmalloc (sizeof (*p),GFP_KERNEL ); +if (!p) { +ZFCP_LOG_NORMAL ("error: Out of resources. Could not register " +"the FCP-LUN 0x%Lx connected to " +"the port with WWPN 0x%Lx connected to " +"the adapter %s with the SCSI stack.\n" , + unit->fcp_lun, + unit->port->wwpn, +zfcp_get_busid_by_unit (unit)); +return ; + } + +zfcp_unit_get (unit); +memset (p,0 ,sizeof (*p)); +atomic_set_mask (ZFCP_STATUS_UNIT_SCSI_WORK_PENDING , &unit->status); +INIT_WORK (&p->work, zfcp_erp_scsi_scan); + p->unit = unit; +schedule_work (&p->work); +} +/* * function: * @@ -3092,9 +3148,9 @@ && port->rport) {atomic_set_mask (ZFCP_STATUS_UNIT_REGISTERED , &unit->status); -scsi_scan_target (&port->rport->dev,0 , - port->rport->scsi_target_id, - unit->scsi_lun,0 ); +if (atomic_test_mask (ZFCP_STATUS_UNIT_SCSI_WORK_PENDING , + &unit->status) ==0 ) +zfcp_erp_schedule_work (unit); }zfcp_unit_put (unit);break ;@@ -3121,7 +3177,7 @@zfcp_get_busid_by_port (port), port->wwpn); else { -scsi_flush_work (adapter->scsi_host); +scsi_target_unblock (&port->rport->dev); port->rport->maxframe_size = port->maxframe_size; port->rport->supported_classes = port->supported_classes;drivers/s390/scsi/zfcp_scsi.c +5
-2@@ -22,6 +22,7 @@#define ZFCP_LOG_AREA ZFCP_LOG_AREA_SCSI#include "zfcp_ext.h" +#include <asm/atomic.h> static void zfcp_scsi_slave_destroy (struct scsi_device *sdp);static int zfcp_scsi_slave_alloc (struct scsi_device *sdp);@@ -179,6 +180,10 @@struct zfcp_unit *unit = (struct zfcp_unit *) sdpnt->hostdata;if (unit) { +zfcp_erp_wait (unit->port->adapter); +wait_event (unit->scsi_scan_wq, +atomic_test_mask (ZFCP_STATUS_UNIT_SCSI_WORK_PENDING , + &unit->status) ==0 );atomic_clear_mask (ZFCP_STATUS_UNIT_REGISTERED , &unit->status); sdpnt->hostdata =NULL ; unit->device =NULL ; ------------------------------------------------------- -To unsubscribe from this list: send the line "unsubscribe linux-scsi" in the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Quoted 4 lines · James Smart
Curious why you are calling
scsi_scan_target()or scsi_target_block()/scsi_target_unblock() directly. I would have thought the add/remove rport code would have done this for you, and it deals with all the flush conditions, etc.
fc_remote_port_add issues a scsi_scan_target with SCAN_WILD_CARD. This tries to get all LUNs for the target via REPORT LUNS for LUN 0. The current design for zfcp is to prevent the wildcard scan from the SCSI layer by not allocating a device for LUN 0. When a FCP adapter does not support NPIV, the adapter can still be shared among multiple Linux systems. Each Linux system can access different LUNs, that are activated manually via sysfs. So, the wildcard scan from the FC transport class does nothing and zfcp activates the LUNs it wants to use via direct calls to scsi_scan_target. If every adapter would support NPIV, zfcp could rely on the scan by the FC transport class, unfortunately, this is not the case.
Christof Schmitt
Quoted 5 lines · James Smart
Curious why you are calling
scsi_scan_target()or scsi_target_block()/scsi_target_unblock() directly. I would have thought the add/remove rport code would have done this for you, and it deals with all the flush conditions, etc.
Quoted 16 lines
-- james
Quoted 13 lines · Swen Schillig
From: Christof Schmitt <[email protected]>
The SCSI stack requires low level drivers to register and unregister devices. For zfcp this leads to the situation where zfcp calls the SCSI stack, the SCSI tries to scan the new device and the scan SCSI command fails. This would require the zfcp erp, but the erp thread is already blocked in the register call. The fix is to make sure that the calls from the ERP thread to the SCSI stack do not block the ERP thread. In detail:
1) Use a workqueue to avoid blocking of thescsi_scan_targetcalls.
2) When removing a unit make sure that noscsi_scan_targetcall is pending.
3) Replacescsi_flush_workwithscsi_target_unblock. This avoids blocking and has the same result.
Reading the patch again, I think there is still a race:
Quoted 4 lines
Quoted 4 lines
(quoted diff) +4
-0+static void zfcp_erp_scsi_scan(struct work_struct *work) +{ + struct zfcp_erp_add_work *p = + container_of(work, struct zfcp_erp_add_work, work);
Quoted 8 lines
Review
Quoted 8 lines
(quoted diff) +8
-0+ struct zfcp_unit *unit = p->unit; + struct fc_rport *rport = unit->port->rport; + scsi_scan_target(&rport->dev, 0, rport->scsi_target_id, + unit->scsi_lun, 0); + atomic_clear_mask(ZFCP_STATUS_UNIT_SCSI_WORK_PENDING, &unit->status); + wake_up(&unit->scsi_scan_wq); + zfcp_unit_put(unit); + kfree(p);
This function gets executed via schedule_work() and therefore there is nothing that prevents the rport to go. E.g. the following might happen:
function gets enqueued for execution via schedule_work(), adapter gets shut down, call to fc_remort_port_delete(), port->rport gets deleted, then zfcp_erp_scsi_scan() gets called and tries to derefence port->rport which is NULL. Addressing exception is the result.
The patch below should fix that, but it changes the call from scsi_scan_target() to scsi_add_device(). I think that should be ok.
--- drivers/s390/scsi/zfcp_def.h | 1 + drivers/s390/scsi/zfcp_erp.c | 37 +++++++++++++++++++------------------ 2 files changed, 20 insertions(+), 18 deletions(-)
drivers/s390/scsi/zfcp_def.h +1 -0
@@ -961,6 +961,7 @@ struct zfcp_port {atomic_t erp_counter;u32 maxframe_size;u32 supported_classes; +unsigned int scsi_target_id; };/* the struct device sysfs_device must be at the beginning of this structure.
drivers/s390/scsi/zfcp_erp.c +19 -18
@@ -1591,7 +1591,7 @@ zfcp_erp_strategy_check_adapter(struct z }struct zfcp_erp_add_work { -struct zfcp_unit *unit; +struct zfcp_unit *unit;struct work_struct work; };
@@ -1603,15 +1603,14 @@ struct zfcp_erp_add_work {*/ static void zfcp_erp_scsi_scan (struct work_struct *work) { -struct zfcp_erp_add_work *p = - container_of(work, struct zfcp_erp_add_work, work); -struct zfcp_unit *unit = p->unit; -struct fc_rport *rport = unit->port->rport; -scsi_scan_target (&rport->dev,0 , rport->scsi_target_id, - unit->scsi_lun,0 ); -atomic_clear_mask (ZFCP_STATUS_UNIT_SCSI_WORK_PENDING , &unit->status); -wake_up (&unit->scsi_scan_wq); -zfcp_unit_put (unit); +struct zfcp_erp_add_work *p; + + p = container_of(work, struct zfcp_erp_add_work, work); +scsi_add_device (p->unit->port->adapter->scsi_host,0 , + p->unit->port->scsi_target_id, p->unit->scsi_lun); +atomic_clear_mask (ZFCP_STATUS_UNIT_SCSI_WORK_PENDING , &p->unit->status); +wake_up (&p->unit->scsi_scan_wq); +zfcp_unit_put (p->unit);kfree (p); }
@@ -3161,25 +3160,27 @@ zfcp_erp_action_cleanup(int action, strubreak ; } -if ((result ==ZFCP_ERP_SUCCEEDED ) - && !port->rport) { +if ((result ==ZFCP_ERP_SUCCEEDED ) && !port->rport) {struct fc_rport_identifiers ids; +struct fc_rport *rport; + ids.node_name = port->wwnn; ids.port_name = port->wwpn; ids.port_id = port->d_id; ids.roles =FC_RPORT_ROLE_FCP_TARGET ; - port->rport = -fc_remote_port_add (adapter->scsi_host,0 , &ids); -if (!port->rport) + rport =fc_remote_port_add (adapter->scsi_host,0 , &ids); +if (!rport)ZFCP_LOG_NORMAL ("failed registration of rport" "(adapter %s, wwpn=0x%016Lx)\n" ,zfcp_get_busid_by_port (port), port->wwpn);else { -scsi_target_unblock (&port->rport->dev); - port->rport->maxframe_size = port->maxframe_size; - port->rport->supported_classes = + port->rport = rport; + port->scsi_target_id = rport->scsi_target_id; + rport->maxframe_size = port->maxframe_size; + rport->supported_classes = port->supported_classes; +scsi_target_unblock (&port->rport->dev); } }if ((result !=ZFCP_ERP_SUCCEEDED ) && port->rport) {