Loading...
1/*
2 * Copyright (c) 2000-2002 Silicon Graphics, Inc.
3 * All Rights Reserved.
4 *
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License as
7 * published by the Free Software Foundation.
8 *
9 * This program is distributed in the hope that it would be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write the Free Software Foundation,
16 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
17 */
18#include "xfs.h"
19#include "xfs_fs.h"
20#include "xfs_shared.h"
21#include "xfs_format.h"
22#include "xfs_log_format.h"
23#include "xfs_trans_resv.h"
24#include "xfs_mount.h"
25#include "xfs_inode.h"
26#include "xfs_error.h"
27#include "xfs_trans.h"
28#include "xfs_trans_priv.h"
29#include "xfs_quota.h"
30#include "xfs_qm.h"
31
32STATIC void xfs_trans_alloc_dqinfo(xfs_trans_t *);
33
34/*
35 * Add the locked dquot to the transaction.
36 * The dquot must be locked, and it cannot be associated with any
37 * transaction.
38 */
39void
40xfs_trans_dqjoin(
41 xfs_trans_t *tp,
42 xfs_dquot_t *dqp)
43{
44 ASSERT(dqp->q_transp != tp);
45 ASSERT(XFS_DQ_IS_LOCKED(dqp));
46 ASSERT(dqp->q_logitem.qli_dquot == dqp);
47
48 /*
49 * Get a log_item_desc to point at the new item.
50 */
51 xfs_trans_add_item(tp, &dqp->q_logitem.qli_item);
52
53 /*
54 * Initialize d_transp so we can later determine if this dquot is
55 * associated with this transaction.
56 */
57 dqp->q_transp = tp;
58}
59
60
61/*
62 * This is called to mark the dquot as needing
63 * to be logged when the transaction is committed. The dquot must
64 * already be associated with the given transaction.
65 * Note that it marks the entire transaction as dirty. In the ordinary
66 * case, this gets called via xfs_trans_commit, after the transaction
67 * is already dirty. However, there's nothing stop this from getting
68 * called directly, as done by xfs_qm_scall_setqlim. Hence, the TRANS_DIRTY
69 * flag.
70 */
71void
72xfs_trans_log_dquot(
73 xfs_trans_t *tp,
74 xfs_dquot_t *dqp)
75{
76 ASSERT(dqp->q_transp == tp);
77 ASSERT(XFS_DQ_IS_LOCKED(dqp));
78
79 tp->t_flags |= XFS_TRANS_DIRTY;
80 dqp->q_logitem.qli_item.li_desc->lid_flags |= XFS_LID_DIRTY;
81}
82
83/*
84 * Carry forward whatever is left of the quota blk reservation to
85 * the spanky new transaction
86 */
87void
88xfs_trans_dup_dqinfo(
89 xfs_trans_t *otp,
90 xfs_trans_t *ntp)
91{
92 xfs_dqtrx_t *oq, *nq;
93 int i, j;
94 xfs_dqtrx_t *oqa, *nqa;
95 ulong blk_res_used;
96
97 if (!otp->t_dqinfo)
98 return;
99
100 xfs_trans_alloc_dqinfo(ntp);
101
102 /*
103 * Because the quota blk reservation is carried forward,
104 * it is also necessary to carry forward the DQ_DIRTY flag.
105 */
106 if (otp->t_flags & XFS_TRANS_DQ_DIRTY)
107 ntp->t_flags |= XFS_TRANS_DQ_DIRTY;
108
109 for (j = 0; j < XFS_QM_TRANS_DQTYPES; j++) {
110 oqa = otp->t_dqinfo->dqs[j];
111 nqa = ntp->t_dqinfo->dqs[j];
112 for (i = 0; i < XFS_QM_TRANS_MAXDQS; i++) {
113 blk_res_used = 0;
114
115 if (oqa[i].qt_dquot == NULL)
116 break;
117 oq = &oqa[i];
118 nq = &nqa[i];
119
120 if (oq->qt_blk_res && oq->qt_bcount_delta > 0)
121 blk_res_used = oq->qt_bcount_delta;
122
123 nq->qt_dquot = oq->qt_dquot;
124 nq->qt_bcount_delta = nq->qt_icount_delta = 0;
125 nq->qt_rtbcount_delta = 0;
126
127 /*
128 * Transfer whatever is left of the reservations.
129 */
130 nq->qt_blk_res = oq->qt_blk_res - blk_res_used;
131 oq->qt_blk_res = blk_res_used;
132
133 nq->qt_rtblk_res = oq->qt_rtblk_res -
134 oq->qt_rtblk_res_used;
135 oq->qt_rtblk_res = oq->qt_rtblk_res_used;
136
137 nq->qt_ino_res = oq->qt_ino_res - oq->qt_ino_res_used;
138 oq->qt_ino_res = oq->qt_ino_res_used;
139
140 }
141 }
142}
143
144/*
145 * Wrap around mod_dquot to account for both user and group quotas.
146 */
147void
148xfs_trans_mod_dquot_byino(
149 xfs_trans_t *tp,
150 xfs_inode_t *ip,
151 uint field,
152 long delta)
153{
154 xfs_mount_t *mp = tp->t_mountp;
155
156 if (!XFS_IS_QUOTA_RUNNING(mp) ||
157 !XFS_IS_QUOTA_ON(mp) ||
158 xfs_is_quota_inode(&mp->m_sb, ip->i_ino))
159 return;
160
161 if (tp->t_dqinfo == NULL)
162 xfs_trans_alloc_dqinfo(tp);
163
164 if (XFS_IS_UQUOTA_ON(mp) && ip->i_udquot)
165 (void) xfs_trans_mod_dquot(tp, ip->i_udquot, field, delta);
166 if (XFS_IS_GQUOTA_ON(mp) && ip->i_gdquot)
167 (void) xfs_trans_mod_dquot(tp, ip->i_gdquot, field, delta);
168 if (XFS_IS_PQUOTA_ON(mp) && ip->i_pdquot)
169 (void) xfs_trans_mod_dquot(tp, ip->i_pdquot, field, delta);
170}
171
172STATIC struct xfs_dqtrx *
173xfs_trans_get_dqtrx(
174 struct xfs_trans *tp,
175 struct xfs_dquot *dqp)
176{
177 int i;
178 struct xfs_dqtrx *qa;
179
180 if (XFS_QM_ISUDQ(dqp))
181 qa = tp->t_dqinfo->dqs[XFS_QM_TRANS_USR];
182 else if (XFS_QM_ISGDQ(dqp))
183 qa = tp->t_dqinfo->dqs[XFS_QM_TRANS_GRP];
184 else if (XFS_QM_ISPDQ(dqp))
185 qa = tp->t_dqinfo->dqs[XFS_QM_TRANS_PRJ];
186 else
187 return NULL;
188
189 for (i = 0; i < XFS_QM_TRANS_MAXDQS; i++) {
190 if (qa[i].qt_dquot == NULL ||
191 qa[i].qt_dquot == dqp)
192 return &qa[i];
193 }
194
195 return NULL;
196}
197
198/*
199 * Make the changes in the transaction structure.
200 * The moral equivalent to xfs_trans_mod_sb().
201 * We don't touch any fields in the dquot, so we don't care
202 * if it's locked or not (most of the time it won't be).
203 */
204void
205xfs_trans_mod_dquot(
206 xfs_trans_t *tp,
207 xfs_dquot_t *dqp,
208 uint field,
209 long delta)
210{
211 xfs_dqtrx_t *qtrx;
212
213 ASSERT(tp);
214 ASSERT(XFS_IS_QUOTA_RUNNING(tp->t_mountp));
215 qtrx = NULL;
216
217 if (tp->t_dqinfo == NULL)
218 xfs_trans_alloc_dqinfo(tp);
219 /*
220 * Find either the first free slot or the slot that belongs
221 * to this dquot.
222 */
223 qtrx = xfs_trans_get_dqtrx(tp, dqp);
224 ASSERT(qtrx);
225 if (qtrx->qt_dquot == NULL)
226 qtrx->qt_dquot = dqp;
227
228 switch (field) {
229
230 /*
231 * regular disk blk reservation
232 */
233 case XFS_TRANS_DQ_RES_BLKS:
234 qtrx->qt_blk_res += (ulong)delta;
235 break;
236
237 /*
238 * inode reservation
239 */
240 case XFS_TRANS_DQ_RES_INOS:
241 qtrx->qt_ino_res += (ulong)delta;
242 break;
243
244 /*
245 * disk blocks used.
246 */
247 case XFS_TRANS_DQ_BCOUNT:
248 qtrx->qt_bcount_delta += delta;
249 break;
250
251 case XFS_TRANS_DQ_DELBCOUNT:
252 qtrx->qt_delbcnt_delta += delta;
253 break;
254
255 /*
256 * Inode Count
257 */
258 case XFS_TRANS_DQ_ICOUNT:
259 if (qtrx->qt_ino_res && delta > 0) {
260 qtrx->qt_ino_res_used += (ulong)delta;
261 ASSERT(qtrx->qt_ino_res >= qtrx->qt_ino_res_used);
262 }
263 qtrx->qt_icount_delta += delta;
264 break;
265
266 /*
267 * rtblk reservation
268 */
269 case XFS_TRANS_DQ_RES_RTBLKS:
270 qtrx->qt_rtblk_res += (ulong)delta;
271 break;
272
273 /*
274 * rtblk count
275 */
276 case XFS_TRANS_DQ_RTBCOUNT:
277 if (qtrx->qt_rtblk_res && delta > 0) {
278 qtrx->qt_rtblk_res_used += (ulong)delta;
279 ASSERT(qtrx->qt_rtblk_res >= qtrx->qt_rtblk_res_used);
280 }
281 qtrx->qt_rtbcount_delta += delta;
282 break;
283
284 case XFS_TRANS_DQ_DELRTBCOUNT:
285 qtrx->qt_delrtb_delta += delta;
286 break;
287
288 default:
289 ASSERT(0);
290 }
291 tp->t_flags |= XFS_TRANS_DQ_DIRTY;
292}
293
294
295/*
296 * Given an array of dqtrx structures, lock all the dquots associated and join
297 * them to the transaction, provided they have been modified. We know that the
298 * highest number of dquots of one type - usr, grp and prj - involved in a
299 * transaction is 3 so we don't need to make this very generic.
300 */
301STATIC void
302xfs_trans_dqlockedjoin(
303 xfs_trans_t *tp,
304 xfs_dqtrx_t *q)
305{
306 ASSERT(q[0].qt_dquot != NULL);
307 if (q[1].qt_dquot == NULL) {
308 xfs_dqlock(q[0].qt_dquot);
309 xfs_trans_dqjoin(tp, q[0].qt_dquot);
310 } else {
311 ASSERT(XFS_QM_TRANS_MAXDQS == 2);
312 xfs_dqlock2(q[0].qt_dquot, q[1].qt_dquot);
313 xfs_trans_dqjoin(tp, q[0].qt_dquot);
314 xfs_trans_dqjoin(tp, q[1].qt_dquot);
315 }
316}
317
318
319/*
320 * Called by xfs_trans_commit() and similar in spirit to
321 * xfs_trans_apply_sb_deltas().
322 * Go thru all the dquots belonging to this transaction and modify the
323 * INCORE dquot to reflect the actual usages.
324 * Unreserve just the reservations done by this transaction.
325 * dquot is still left locked at exit.
326 */
327void
328xfs_trans_apply_dquot_deltas(
329 struct xfs_trans *tp)
330{
331 int i, j;
332 struct xfs_dquot *dqp;
333 struct xfs_dqtrx *qtrx, *qa;
334 struct xfs_disk_dquot *d;
335 long totalbdelta;
336 long totalrtbdelta;
337
338 if (!(tp->t_flags & XFS_TRANS_DQ_DIRTY))
339 return;
340
341 ASSERT(tp->t_dqinfo);
342 for (j = 0; j < XFS_QM_TRANS_DQTYPES; j++) {
343 qa = tp->t_dqinfo->dqs[j];
344 if (qa[0].qt_dquot == NULL)
345 continue;
346
347 /*
348 * Lock all of the dquots and join them to the transaction.
349 */
350 xfs_trans_dqlockedjoin(tp, qa);
351
352 for (i = 0; i < XFS_QM_TRANS_MAXDQS; i++) {
353 qtrx = &qa[i];
354 /*
355 * The array of dquots is filled
356 * sequentially, not sparsely.
357 */
358 if ((dqp = qtrx->qt_dquot) == NULL)
359 break;
360
361 ASSERT(XFS_DQ_IS_LOCKED(dqp));
362 ASSERT(dqp->q_transp == tp);
363
364 /*
365 * adjust the actual number of blocks used
366 */
367 d = &dqp->q_core;
368
369 /*
370 * The issue here is - sometimes we don't make a blkquota
371 * reservation intentionally to be fair to users
372 * (when the amount is small). On the other hand,
373 * delayed allocs do make reservations, but that's
374 * outside of a transaction, so we have no
375 * idea how much was really reserved.
376 * So, here we've accumulated delayed allocation blks and
377 * non-delay blks. The assumption is that the
378 * delayed ones are always reserved (outside of a
379 * transaction), and the others may or may not have
380 * quota reservations.
381 */
382 totalbdelta = qtrx->qt_bcount_delta +
383 qtrx->qt_delbcnt_delta;
384 totalrtbdelta = qtrx->qt_rtbcount_delta +
385 qtrx->qt_delrtb_delta;
386#ifdef DEBUG
387 if (totalbdelta < 0)
388 ASSERT(be64_to_cpu(d->d_bcount) >=
389 -totalbdelta);
390
391 if (totalrtbdelta < 0)
392 ASSERT(be64_to_cpu(d->d_rtbcount) >=
393 -totalrtbdelta);
394
395 if (qtrx->qt_icount_delta < 0)
396 ASSERT(be64_to_cpu(d->d_icount) >=
397 -qtrx->qt_icount_delta);
398#endif
399 if (totalbdelta)
400 be64_add_cpu(&d->d_bcount, (xfs_qcnt_t)totalbdelta);
401
402 if (qtrx->qt_icount_delta)
403 be64_add_cpu(&d->d_icount, (xfs_qcnt_t)qtrx->qt_icount_delta);
404
405 if (totalrtbdelta)
406 be64_add_cpu(&d->d_rtbcount, (xfs_qcnt_t)totalrtbdelta);
407
408 /*
409 * Get any default limits in use.
410 * Start/reset the timer(s) if needed.
411 */
412 if (d->d_id) {
413 xfs_qm_adjust_dqlimits(tp->t_mountp, dqp);
414 xfs_qm_adjust_dqtimers(tp->t_mountp, d);
415 }
416
417 dqp->dq_flags |= XFS_DQ_DIRTY;
418 /*
419 * add this to the list of items to get logged
420 */
421 xfs_trans_log_dquot(tp, dqp);
422 /*
423 * Take off what's left of the original reservation.
424 * In case of delayed allocations, there's no
425 * reservation that a transaction structure knows of.
426 */
427 if (qtrx->qt_blk_res != 0) {
428 ulong blk_res_used = 0;
429
430 if (qtrx->qt_bcount_delta > 0)
431 blk_res_used = qtrx->qt_bcount_delta;
432
433 if (qtrx->qt_blk_res != blk_res_used) {
434 if (qtrx->qt_blk_res > blk_res_used)
435 dqp->q_res_bcount -= (xfs_qcnt_t)
436 (qtrx->qt_blk_res -
437 blk_res_used);
438 else
439 dqp->q_res_bcount -= (xfs_qcnt_t)
440 (blk_res_used -
441 qtrx->qt_blk_res);
442 }
443 } else {
444 /*
445 * These blks were never reserved, either inside
446 * a transaction or outside one (in a delayed
447 * allocation). Also, this isn't always a
448 * negative number since we sometimes
449 * deliberately skip quota reservations.
450 */
451 if (qtrx->qt_bcount_delta) {
452 dqp->q_res_bcount +=
453 (xfs_qcnt_t)qtrx->qt_bcount_delta;
454 }
455 }
456 /*
457 * Adjust the RT reservation.
458 */
459 if (qtrx->qt_rtblk_res != 0) {
460 if (qtrx->qt_rtblk_res != qtrx->qt_rtblk_res_used) {
461 if (qtrx->qt_rtblk_res >
462 qtrx->qt_rtblk_res_used)
463 dqp->q_res_rtbcount -= (xfs_qcnt_t)
464 (qtrx->qt_rtblk_res -
465 qtrx->qt_rtblk_res_used);
466 else
467 dqp->q_res_rtbcount -= (xfs_qcnt_t)
468 (qtrx->qt_rtblk_res_used -
469 qtrx->qt_rtblk_res);
470 }
471 } else {
472 if (qtrx->qt_rtbcount_delta)
473 dqp->q_res_rtbcount +=
474 (xfs_qcnt_t)qtrx->qt_rtbcount_delta;
475 }
476
477 /*
478 * Adjust the inode reservation.
479 */
480 if (qtrx->qt_ino_res != 0) {
481 ASSERT(qtrx->qt_ino_res >=
482 qtrx->qt_ino_res_used);
483 if (qtrx->qt_ino_res > qtrx->qt_ino_res_used)
484 dqp->q_res_icount -= (xfs_qcnt_t)
485 (qtrx->qt_ino_res -
486 qtrx->qt_ino_res_used);
487 } else {
488 if (qtrx->qt_icount_delta)
489 dqp->q_res_icount +=
490 (xfs_qcnt_t)qtrx->qt_icount_delta;
491 }
492
493 ASSERT(dqp->q_res_bcount >=
494 be64_to_cpu(dqp->q_core.d_bcount));
495 ASSERT(dqp->q_res_icount >=
496 be64_to_cpu(dqp->q_core.d_icount));
497 ASSERT(dqp->q_res_rtbcount >=
498 be64_to_cpu(dqp->q_core.d_rtbcount));
499 }
500 }
501}
502
503/*
504 * Release the reservations, and adjust the dquots accordingly.
505 * This is called only when the transaction is being aborted. If by
506 * any chance we have done dquot modifications incore (ie. deltas) already,
507 * we simply throw those away, since that's the expected behavior
508 * when a transaction is curtailed without a commit.
509 */
510void
511xfs_trans_unreserve_and_mod_dquots(
512 xfs_trans_t *tp)
513{
514 int i, j;
515 xfs_dquot_t *dqp;
516 xfs_dqtrx_t *qtrx, *qa;
517 bool locked;
518
519 if (!tp->t_dqinfo || !(tp->t_flags & XFS_TRANS_DQ_DIRTY))
520 return;
521
522 for (j = 0; j < XFS_QM_TRANS_DQTYPES; j++) {
523 qa = tp->t_dqinfo->dqs[j];
524
525 for (i = 0; i < XFS_QM_TRANS_MAXDQS; i++) {
526 qtrx = &qa[i];
527 /*
528 * We assume that the array of dquots is filled
529 * sequentially, not sparsely.
530 */
531 if ((dqp = qtrx->qt_dquot) == NULL)
532 break;
533 /*
534 * Unreserve the original reservation. We don't care
535 * about the number of blocks used field, or deltas.
536 * Also we don't bother to zero the fields.
537 */
538 locked = false;
539 if (qtrx->qt_blk_res) {
540 xfs_dqlock(dqp);
541 locked = true;
542 dqp->q_res_bcount -=
543 (xfs_qcnt_t)qtrx->qt_blk_res;
544 }
545 if (qtrx->qt_ino_res) {
546 if (!locked) {
547 xfs_dqlock(dqp);
548 locked = true;
549 }
550 dqp->q_res_icount -=
551 (xfs_qcnt_t)qtrx->qt_ino_res;
552 }
553
554 if (qtrx->qt_rtblk_res) {
555 if (!locked) {
556 xfs_dqlock(dqp);
557 locked = true;
558 }
559 dqp->q_res_rtbcount -=
560 (xfs_qcnt_t)qtrx->qt_rtblk_res;
561 }
562 if (locked)
563 xfs_dqunlock(dqp);
564
565 }
566 }
567}
568
569STATIC void
570xfs_quota_warn(
571 struct xfs_mount *mp,
572 struct xfs_dquot *dqp,
573 int type)
574{
575 enum quota_type qtype;
576
577 if (dqp->dq_flags & XFS_DQ_PROJ)
578 qtype = PRJQUOTA;
579 else if (dqp->dq_flags & XFS_DQ_USER)
580 qtype = USRQUOTA;
581 else
582 qtype = GRPQUOTA;
583
584 quota_send_warning(make_kqid(&init_user_ns, qtype,
585 be32_to_cpu(dqp->q_core.d_id)),
586 mp->m_super->s_dev, type);
587}
588
589/*
590 * This reserves disk blocks and inodes against a dquot.
591 * Flags indicate if the dquot is to be locked here and also
592 * if the blk reservation is for RT or regular blocks.
593 * Sending in XFS_QMOPT_FORCE_RES flag skips the quota check.
594 */
595STATIC int
596xfs_trans_dqresv(
597 xfs_trans_t *tp,
598 xfs_mount_t *mp,
599 xfs_dquot_t *dqp,
600 long nblks,
601 long ninos,
602 uint flags)
603{
604 xfs_qcnt_t hardlimit;
605 xfs_qcnt_t softlimit;
606 time_t timer;
607 xfs_qwarncnt_t warns;
608 xfs_qwarncnt_t warnlimit;
609 xfs_qcnt_t total_count;
610 xfs_qcnt_t *resbcountp;
611 xfs_quotainfo_t *q = mp->m_quotainfo;
612 struct xfs_def_quota *defq;
613
614
615 xfs_dqlock(dqp);
616
617 defq = xfs_get_defquota(dqp, q);
618
619 if (flags & XFS_TRANS_DQ_RES_BLKS) {
620 hardlimit = be64_to_cpu(dqp->q_core.d_blk_hardlimit);
621 if (!hardlimit)
622 hardlimit = defq->bhardlimit;
623 softlimit = be64_to_cpu(dqp->q_core.d_blk_softlimit);
624 if (!softlimit)
625 softlimit = defq->bsoftlimit;
626 timer = be32_to_cpu(dqp->q_core.d_btimer);
627 warns = be16_to_cpu(dqp->q_core.d_bwarns);
628 warnlimit = dqp->q_mount->m_quotainfo->qi_bwarnlimit;
629 resbcountp = &dqp->q_res_bcount;
630 } else {
631 ASSERT(flags & XFS_TRANS_DQ_RES_RTBLKS);
632 hardlimit = be64_to_cpu(dqp->q_core.d_rtb_hardlimit);
633 if (!hardlimit)
634 hardlimit = defq->rtbhardlimit;
635 softlimit = be64_to_cpu(dqp->q_core.d_rtb_softlimit);
636 if (!softlimit)
637 softlimit = defq->rtbsoftlimit;
638 timer = be32_to_cpu(dqp->q_core.d_rtbtimer);
639 warns = be16_to_cpu(dqp->q_core.d_rtbwarns);
640 warnlimit = dqp->q_mount->m_quotainfo->qi_rtbwarnlimit;
641 resbcountp = &dqp->q_res_rtbcount;
642 }
643
644 if ((flags & XFS_QMOPT_FORCE_RES) == 0 &&
645 dqp->q_core.d_id &&
646 ((XFS_IS_UQUOTA_ENFORCED(dqp->q_mount) && XFS_QM_ISUDQ(dqp)) ||
647 (XFS_IS_GQUOTA_ENFORCED(dqp->q_mount) && XFS_QM_ISGDQ(dqp)) ||
648 (XFS_IS_PQUOTA_ENFORCED(dqp->q_mount) && XFS_QM_ISPDQ(dqp)))) {
649 if (nblks > 0) {
650 /*
651 * dquot is locked already. See if we'd go over the
652 * hardlimit or exceed the timelimit if we allocate
653 * nblks.
654 */
655 total_count = *resbcountp + nblks;
656 if (hardlimit && total_count > hardlimit) {
657 xfs_quota_warn(mp, dqp, QUOTA_NL_BHARDWARN);
658 goto error_return;
659 }
660 if (softlimit && total_count > softlimit) {
661 if ((timer != 0 && get_seconds() > timer) ||
662 (warns != 0 && warns >= warnlimit)) {
663 xfs_quota_warn(mp, dqp,
664 QUOTA_NL_BSOFTLONGWARN);
665 goto error_return;
666 }
667
668 xfs_quota_warn(mp, dqp, QUOTA_NL_BSOFTWARN);
669 }
670 }
671 if (ninos > 0) {
672 total_count = be64_to_cpu(dqp->q_core.d_icount) + ninos;
673 timer = be32_to_cpu(dqp->q_core.d_itimer);
674 warns = be16_to_cpu(dqp->q_core.d_iwarns);
675 warnlimit = dqp->q_mount->m_quotainfo->qi_iwarnlimit;
676 hardlimit = be64_to_cpu(dqp->q_core.d_ino_hardlimit);
677 if (!hardlimit)
678 hardlimit = defq->ihardlimit;
679 softlimit = be64_to_cpu(dqp->q_core.d_ino_softlimit);
680 if (!softlimit)
681 softlimit = defq->isoftlimit;
682
683 if (hardlimit && total_count > hardlimit) {
684 xfs_quota_warn(mp, dqp, QUOTA_NL_IHARDWARN);
685 goto error_return;
686 }
687 if (softlimit && total_count > softlimit) {
688 if ((timer != 0 && get_seconds() > timer) ||
689 (warns != 0 && warns >= warnlimit)) {
690 xfs_quota_warn(mp, dqp,
691 QUOTA_NL_ISOFTLONGWARN);
692 goto error_return;
693 }
694 xfs_quota_warn(mp, dqp, QUOTA_NL_ISOFTWARN);
695 }
696 }
697 }
698
699 /*
700 * Change the reservation, but not the actual usage.
701 * Note that q_res_bcount = q_core.d_bcount + resv
702 */
703 (*resbcountp) += (xfs_qcnt_t)nblks;
704 if (ninos != 0)
705 dqp->q_res_icount += (xfs_qcnt_t)ninos;
706
707 /*
708 * note the reservation amt in the trans struct too,
709 * so that the transaction knows how much was reserved by
710 * it against this particular dquot.
711 * We don't do this when we are reserving for a delayed allocation,
712 * because we don't have the luxury of a transaction envelope then.
713 */
714 if (tp) {
715 ASSERT(tp->t_dqinfo);
716 ASSERT(flags & XFS_QMOPT_RESBLK_MASK);
717 if (nblks != 0)
718 xfs_trans_mod_dquot(tp, dqp,
719 flags & XFS_QMOPT_RESBLK_MASK,
720 nblks);
721 if (ninos != 0)
722 xfs_trans_mod_dquot(tp, dqp,
723 XFS_TRANS_DQ_RES_INOS,
724 ninos);
725 }
726 ASSERT(dqp->q_res_bcount >= be64_to_cpu(dqp->q_core.d_bcount));
727 ASSERT(dqp->q_res_rtbcount >= be64_to_cpu(dqp->q_core.d_rtbcount));
728 ASSERT(dqp->q_res_icount >= be64_to_cpu(dqp->q_core.d_icount));
729
730 xfs_dqunlock(dqp);
731 return 0;
732
733error_return:
734 xfs_dqunlock(dqp);
735 if (flags & XFS_QMOPT_ENOSPC)
736 return -ENOSPC;
737 return -EDQUOT;
738}
739
740
741/*
742 * Given dquot(s), make disk block and/or inode reservations against them.
743 * The fact that this does the reservation against user, group and
744 * project quotas is important, because this follows a all-or-nothing
745 * approach.
746 *
747 * flags = XFS_QMOPT_FORCE_RES evades limit enforcement. Used by chown.
748 * XFS_QMOPT_ENOSPC returns ENOSPC not EDQUOT. Used by pquota.
749 * XFS_TRANS_DQ_RES_BLKS reserves regular disk blocks
750 * XFS_TRANS_DQ_RES_RTBLKS reserves realtime disk blocks
751 * dquots are unlocked on return, if they were not locked by caller.
752 */
753int
754xfs_trans_reserve_quota_bydquots(
755 struct xfs_trans *tp,
756 struct xfs_mount *mp,
757 struct xfs_dquot *udqp,
758 struct xfs_dquot *gdqp,
759 struct xfs_dquot *pdqp,
760 long nblks,
761 long ninos,
762 uint flags)
763{
764 int error;
765
766 if (!XFS_IS_QUOTA_RUNNING(mp) || !XFS_IS_QUOTA_ON(mp))
767 return 0;
768
769 if (tp && tp->t_dqinfo == NULL)
770 xfs_trans_alloc_dqinfo(tp);
771
772 ASSERT(flags & XFS_QMOPT_RESBLK_MASK);
773
774 if (udqp) {
775 error = xfs_trans_dqresv(tp, mp, udqp, nblks, ninos,
776 (flags & ~XFS_QMOPT_ENOSPC));
777 if (error)
778 return error;
779 }
780
781 if (gdqp) {
782 error = xfs_trans_dqresv(tp, mp, gdqp, nblks, ninos, flags);
783 if (error)
784 goto unwind_usr;
785 }
786
787 if (pdqp) {
788 error = xfs_trans_dqresv(tp, mp, pdqp, nblks, ninos, flags);
789 if (error)
790 goto unwind_grp;
791 }
792
793 /*
794 * Didn't change anything critical, so, no need to log
795 */
796 return 0;
797
798unwind_grp:
799 flags |= XFS_QMOPT_FORCE_RES;
800 if (gdqp)
801 xfs_trans_dqresv(tp, mp, gdqp, -nblks, -ninos, flags);
802unwind_usr:
803 flags |= XFS_QMOPT_FORCE_RES;
804 if (udqp)
805 xfs_trans_dqresv(tp, mp, udqp, -nblks, -ninos, flags);
806 return error;
807}
808
809
810/*
811 * Lock the dquot and change the reservation if we can.
812 * This doesn't change the actual usage, just the reservation.
813 * The inode sent in is locked.
814 */
815int
816xfs_trans_reserve_quota_nblks(
817 struct xfs_trans *tp,
818 struct xfs_inode *ip,
819 long nblks,
820 long ninos,
821 uint flags)
822{
823 struct xfs_mount *mp = ip->i_mount;
824
825 if (!XFS_IS_QUOTA_RUNNING(mp) || !XFS_IS_QUOTA_ON(mp))
826 return 0;
827 if (XFS_IS_PQUOTA_ON(mp))
828 flags |= XFS_QMOPT_ENOSPC;
829
830 ASSERT(!xfs_is_quota_inode(&mp->m_sb, ip->i_ino));
831
832 ASSERT(xfs_isilocked(ip, XFS_ILOCK_EXCL));
833 ASSERT((flags & ~(XFS_QMOPT_FORCE_RES | XFS_QMOPT_ENOSPC)) ==
834 XFS_TRANS_DQ_RES_RTBLKS ||
835 (flags & ~(XFS_QMOPT_FORCE_RES | XFS_QMOPT_ENOSPC)) ==
836 XFS_TRANS_DQ_RES_BLKS);
837
838 /*
839 * Reserve nblks against these dquots, with trans as the mediator.
840 */
841 return xfs_trans_reserve_quota_bydquots(tp, mp,
842 ip->i_udquot, ip->i_gdquot,
843 ip->i_pdquot,
844 nblks, ninos, flags);
845}
846
847/*
848 * This routine is called to allocate a quotaoff log item.
849 */
850xfs_qoff_logitem_t *
851xfs_trans_get_qoff_item(
852 xfs_trans_t *tp,
853 xfs_qoff_logitem_t *startqoff,
854 uint flags)
855{
856 xfs_qoff_logitem_t *q;
857
858 ASSERT(tp != NULL);
859
860 q = xfs_qm_qoff_logitem_init(tp->t_mountp, startqoff, flags);
861 ASSERT(q != NULL);
862
863 /*
864 * Get a log_item_desc to point at the new item.
865 */
866 xfs_trans_add_item(tp, &q->qql_item);
867 return q;
868}
869
870
871/*
872 * This is called to mark the quotaoff logitem as needing
873 * to be logged when the transaction is committed. The logitem must
874 * already be associated with the given transaction.
875 */
876void
877xfs_trans_log_quotaoff_item(
878 xfs_trans_t *tp,
879 xfs_qoff_logitem_t *qlp)
880{
881 tp->t_flags |= XFS_TRANS_DIRTY;
882 qlp->qql_item.li_desc->lid_flags |= XFS_LID_DIRTY;
883}
884
885STATIC void
886xfs_trans_alloc_dqinfo(
887 xfs_trans_t *tp)
888{
889 tp->t_dqinfo = kmem_zone_zalloc(xfs_qm_dqtrxzone, KM_SLEEP);
890}
891
892void
893xfs_trans_free_dqinfo(
894 xfs_trans_t *tp)
895{
896 if (!tp->t_dqinfo)
897 return;
898 kmem_zone_free(xfs_qm_dqtrxzone, tp->t_dqinfo);
899 tp->t_dqinfo = NULL;
900}
1// SPDX-License-Identifier: GPL-2.0
2/*
3 * Copyright (c) 2000-2002 Silicon Graphics, Inc.
4 * All Rights Reserved.
5 */
6#include "xfs.h"
7#include "xfs_fs.h"
8#include "xfs_shared.h"
9#include "xfs_format.h"
10#include "xfs_log_format.h"
11#include "xfs_trans_resv.h"
12#include "xfs_mount.h"
13#include "xfs_inode.h"
14#include "xfs_trans.h"
15#include "xfs_trans_priv.h"
16#include "xfs_quota.h"
17#include "xfs_qm.h"
18#include "xfs_trace.h"
19
20STATIC void xfs_trans_alloc_dqinfo(xfs_trans_t *);
21
22/*
23 * Add the locked dquot to the transaction.
24 * The dquot must be locked, and it cannot be associated with any
25 * transaction.
26 */
27void
28xfs_trans_dqjoin(
29 struct xfs_trans *tp,
30 struct xfs_dquot *dqp)
31{
32 ASSERT(XFS_DQ_IS_LOCKED(dqp));
33 ASSERT(dqp->q_logitem.qli_dquot == dqp);
34
35 /*
36 * Get a log_item_desc to point at the new item.
37 */
38 xfs_trans_add_item(tp, &dqp->q_logitem.qli_item);
39}
40
41/*
42 * This is called to mark the dquot as needing
43 * to be logged when the transaction is committed. The dquot must
44 * already be associated with the given transaction.
45 * Note that it marks the entire transaction as dirty. In the ordinary
46 * case, this gets called via xfs_trans_commit, after the transaction
47 * is already dirty. However, there's nothing stop this from getting
48 * called directly, as done by xfs_qm_scall_setqlim. Hence, the TRANS_DIRTY
49 * flag.
50 */
51void
52xfs_trans_log_dquot(
53 struct xfs_trans *tp,
54 struct xfs_dquot *dqp)
55{
56 ASSERT(XFS_DQ_IS_LOCKED(dqp));
57
58 tp->t_flags |= XFS_TRANS_DIRTY;
59 set_bit(XFS_LI_DIRTY, &dqp->q_logitem.qli_item.li_flags);
60}
61
62/*
63 * Carry forward whatever is left of the quota blk reservation to
64 * the spanky new transaction
65 */
66void
67xfs_trans_dup_dqinfo(
68 struct xfs_trans *otp,
69 struct xfs_trans *ntp)
70{
71 struct xfs_dqtrx *oq, *nq;
72 int i, j;
73 struct xfs_dqtrx *oqa, *nqa;
74 uint64_t blk_res_used;
75
76 if (!otp->t_dqinfo)
77 return;
78
79 xfs_trans_alloc_dqinfo(ntp);
80
81 /*
82 * Because the quota blk reservation is carried forward,
83 * it is also necessary to carry forward the DQ_DIRTY flag.
84 */
85 if (otp->t_flags & XFS_TRANS_DQ_DIRTY)
86 ntp->t_flags |= XFS_TRANS_DQ_DIRTY;
87
88 for (j = 0; j < XFS_QM_TRANS_DQTYPES; j++) {
89 oqa = otp->t_dqinfo->dqs[j];
90 nqa = ntp->t_dqinfo->dqs[j];
91 for (i = 0; i < XFS_QM_TRANS_MAXDQS; i++) {
92 blk_res_used = 0;
93
94 if (oqa[i].qt_dquot == NULL)
95 break;
96 oq = &oqa[i];
97 nq = &nqa[i];
98
99 if (oq->qt_blk_res && oq->qt_bcount_delta > 0)
100 blk_res_used = oq->qt_bcount_delta;
101
102 nq->qt_dquot = oq->qt_dquot;
103 nq->qt_bcount_delta = nq->qt_icount_delta = 0;
104 nq->qt_rtbcount_delta = 0;
105
106 /*
107 * Transfer whatever is left of the reservations.
108 */
109 nq->qt_blk_res = oq->qt_blk_res - blk_res_used;
110 oq->qt_blk_res = blk_res_used;
111
112 nq->qt_rtblk_res = oq->qt_rtblk_res -
113 oq->qt_rtblk_res_used;
114 oq->qt_rtblk_res = oq->qt_rtblk_res_used;
115
116 nq->qt_ino_res = oq->qt_ino_res - oq->qt_ino_res_used;
117 oq->qt_ino_res = oq->qt_ino_res_used;
118
119 }
120 }
121}
122
123/*
124 * Wrap around mod_dquot to account for both user and group quotas.
125 */
126void
127xfs_trans_mod_dquot_byino(
128 xfs_trans_t *tp,
129 xfs_inode_t *ip,
130 uint field,
131 int64_t delta)
132{
133 xfs_mount_t *mp = tp->t_mountp;
134
135 if (!XFS_IS_QUOTA_RUNNING(mp) ||
136 !XFS_IS_QUOTA_ON(mp) ||
137 xfs_is_quota_inode(&mp->m_sb, ip->i_ino))
138 return;
139
140 if (tp->t_dqinfo == NULL)
141 xfs_trans_alloc_dqinfo(tp);
142
143 if (XFS_IS_UQUOTA_ON(mp) && ip->i_udquot)
144 (void) xfs_trans_mod_dquot(tp, ip->i_udquot, field, delta);
145 if (XFS_IS_GQUOTA_ON(mp) && ip->i_gdquot)
146 (void) xfs_trans_mod_dquot(tp, ip->i_gdquot, field, delta);
147 if (XFS_IS_PQUOTA_ON(mp) && ip->i_pdquot)
148 (void) xfs_trans_mod_dquot(tp, ip->i_pdquot, field, delta);
149}
150
151STATIC struct xfs_dqtrx *
152xfs_trans_get_dqtrx(
153 struct xfs_trans *tp,
154 struct xfs_dquot *dqp)
155{
156 int i;
157 struct xfs_dqtrx *qa;
158
159 switch (xfs_dquot_type(dqp)) {
160 case XFS_DQTYPE_USER:
161 qa = tp->t_dqinfo->dqs[XFS_QM_TRANS_USR];
162 break;
163 case XFS_DQTYPE_GROUP:
164 qa = tp->t_dqinfo->dqs[XFS_QM_TRANS_GRP];
165 break;
166 case XFS_DQTYPE_PROJ:
167 qa = tp->t_dqinfo->dqs[XFS_QM_TRANS_PRJ];
168 break;
169 default:
170 return NULL;
171 }
172
173 for (i = 0; i < XFS_QM_TRANS_MAXDQS; i++) {
174 if (qa[i].qt_dquot == NULL ||
175 qa[i].qt_dquot == dqp)
176 return &qa[i];
177 }
178
179 return NULL;
180}
181
182/*
183 * Make the changes in the transaction structure.
184 * The moral equivalent to xfs_trans_mod_sb().
185 * We don't touch any fields in the dquot, so we don't care
186 * if it's locked or not (most of the time it won't be).
187 */
188void
189xfs_trans_mod_dquot(
190 struct xfs_trans *tp,
191 struct xfs_dquot *dqp,
192 uint field,
193 int64_t delta)
194{
195 struct xfs_dqtrx *qtrx;
196
197 ASSERT(tp);
198 ASSERT(XFS_IS_QUOTA_RUNNING(tp->t_mountp));
199 qtrx = NULL;
200
201 if (tp->t_dqinfo == NULL)
202 xfs_trans_alloc_dqinfo(tp);
203 /*
204 * Find either the first free slot or the slot that belongs
205 * to this dquot.
206 */
207 qtrx = xfs_trans_get_dqtrx(tp, dqp);
208 ASSERT(qtrx);
209 if (qtrx->qt_dquot == NULL)
210 qtrx->qt_dquot = dqp;
211
212 if (delta) {
213 trace_xfs_trans_mod_dquot_before(qtrx);
214 trace_xfs_trans_mod_dquot(tp, dqp, field, delta);
215 }
216
217 switch (field) {
218
219 /*
220 * regular disk blk reservation
221 */
222 case XFS_TRANS_DQ_RES_BLKS:
223 qtrx->qt_blk_res += delta;
224 break;
225
226 /*
227 * inode reservation
228 */
229 case XFS_TRANS_DQ_RES_INOS:
230 qtrx->qt_ino_res += delta;
231 break;
232
233 /*
234 * disk blocks used.
235 */
236 case XFS_TRANS_DQ_BCOUNT:
237 qtrx->qt_bcount_delta += delta;
238 break;
239
240 case XFS_TRANS_DQ_DELBCOUNT:
241 qtrx->qt_delbcnt_delta += delta;
242 break;
243
244 /*
245 * Inode Count
246 */
247 case XFS_TRANS_DQ_ICOUNT:
248 if (qtrx->qt_ino_res && delta > 0) {
249 qtrx->qt_ino_res_used += delta;
250 ASSERT(qtrx->qt_ino_res >= qtrx->qt_ino_res_used);
251 }
252 qtrx->qt_icount_delta += delta;
253 break;
254
255 /*
256 * rtblk reservation
257 */
258 case XFS_TRANS_DQ_RES_RTBLKS:
259 qtrx->qt_rtblk_res += delta;
260 break;
261
262 /*
263 * rtblk count
264 */
265 case XFS_TRANS_DQ_RTBCOUNT:
266 if (qtrx->qt_rtblk_res && delta > 0) {
267 qtrx->qt_rtblk_res_used += delta;
268 ASSERT(qtrx->qt_rtblk_res >= qtrx->qt_rtblk_res_used);
269 }
270 qtrx->qt_rtbcount_delta += delta;
271 break;
272
273 case XFS_TRANS_DQ_DELRTBCOUNT:
274 qtrx->qt_delrtb_delta += delta;
275 break;
276
277 default:
278 ASSERT(0);
279 }
280
281 if (delta)
282 trace_xfs_trans_mod_dquot_after(qtrx);
283
284 tp->t_flags |= XFS_TRANS_DQ_DIRTY;
285}
286
287
288/*
289 * Given an array of dqtrx structures, lock all the dquots associated and join
290 * them to the transaction, provided they have been modified. We know that the
291 * highest number of dquots of one type - usr, grp and prj - involved in a
292 * transaction is 3 so we don't need to make this very generic.
293 */
294STATIC void
295xfs_trans_dqlockedjoin(
296 struct xfs_trans *tp,
297 struct xfs_dqtrx *q)
298{
299 ASSERT(q[0].qt_dquot != NULL);
300 if (q[1].qt_dquot == NULL) {
301 xfs_dqlock(q[0].qt_dquot);
302 xfs_trans_dqjoin(tp, q[0].qt_dquot);
303 } else {
304 ASSERT(XFS_QM_TRANS_MAXDQS == 2);
305 xfs_dqlock2(q[0].qt_dquot, q[1].qt_dquot);
306 xfs_trans_dqjoin(tp, q[0].qt_dquot);
307 xfs_trans_dqjoin(tp, q[1].qt_dquot);
308 }
309}
310
311/* Apply dqtrx changes to the quota reservation counters. */
312static inline void
313xfs_apply_quota_reservation_deltas(
314 struct xfs_dquot_res *res,
315 uint64_t reserved,
316 int64_t res_used,
317 int64_t count_delta)
318{
319 if (reserved != 0) {
320 /*
321 * Subtle math here: If reserved > res_used (the normal case),
322 * we're simply subtracting the unused transaction quota
323 * reservation from the dquot reservation.
324 *
325 * If, however, res_used > reserved, then we have allocated
326 * more quota blocks than were reserved for the transaction.
327 * We must add that excess to the dquot reservation since it
328 * tracks (usage + resv) and by definition we didn't reserve
329 * that excess.
330 */
331 res->reserved -= abs(reserved - res_used);
332 } else if (count_delta != 0) {
333 /*
334 * These blks were never reserved, either inside a transaction
335 * or outside one (in a delayed allocation). Also, this isn't
336 * always a negative number since we sometimes deliberately
337 * skip quota reservations.
338 */
339 res->reserved += count_delta;
340 }
341}
342
343/*
344 * Called by xfs_trans_commit() and similar in spirit to
345 * xfs_trans_apply_sb_deltas().
346 * Go thru all the dquots belonging to this transaction and modify the
347 * INCORE dquot to reflect the actual usages.
348 * Unreserve just the reservations done by this transaction.
349 * dquot is still left locked at exit.
350 */
351void
352xfs_trans_apply_dquot_deltas(
353 struct xfs_trans *tp)
354{
355 int i, j;
356 struct xfs_dquot *dqp;
357 struct xfs_dqtrx *qtrx, *qa;
358 int64_t totalbdelta;
359 int64_t totalrtbdelta;
360
361 if (!(tp->t_flags & XFS_TRANS_DQ_DIRTY))
362 return;
363
364 ASSERT(tp->t_dqinfo);
365 for (j = 0; j < XFS_QM_TRANS_DQTYPES; j++) {
366 qa = tp->t_dqinfo->dqs[j];
367 if (qa[0].qt_dquot == NULL)
368 continue;
369
370 /*
371 * Lock all of the dquots and join them to the transaction.
372 */
373 xfs_trans_dqlockedjoin(tp, qa);
374
375 for (i = 0; i < XFS_QM_TRANS_MAXDQS; i++) {
376 uint64_t blk_res_used;
377
378 qtrx = &qa[i];
379 /*
380 * The array of dquots is filled
381 * sequentially, not sparsely.
382 */
383 if ((dqp = qtrx->qt_dquot) == NULL)
384 break;
385
386 ASSERT(XFS_DQ_IS_LOCKED(dqp));
387
388 /*
389 * adjust the actual number of blocks used
390 */
391
392 /*
393 * The issue here is - sometimes we don't make a blkquota
394 * reservation intentionally to be fair to users
395 * (when the amount is small). On the other hand,
396 * delayed allocs do make reservations, but that's
397 * outside of a transaction, so we have no
398 * idea how much was really reserved.
399 * So, here we've accumulated delayed allocation blks and
400 * non-delay blks. The assumption is that the
401 * delayed ones are always reserved (outside of a
402 * transaction), and the others may or may not have
403 * quota reservations.
404 */
405 totalbdelta = qtrx->qt_bcount_delta +
406 qtrx->qt_delbcnt_delta;
407 totalrtbdelta = qtrx->qt_rtbcount_delta +
408 qtrx->qt_delrtb_delta;
409
410 if (totalbdelta != 0 || totalrtbdelta != 0 ||
411 qtrx->qt_icount_delta != 0) {
412 trace_xfs_trans_apply_dquot_deltas_before(dqp);
413 trace_xfs_trans_apply_dquot_deltas(qtrx);
414 }
415
416#ifdef DEBUG
417 if (totalbdelta < 0)
418 ASSERT(dqp->q_blk.count >= -totalbdelta);
419
420 if (totalrtbdelta < 0)
421 ASSERT(dqp->q_rtb.count >= -totalrtbdelta);
422
423 if (qtrx->qt_icount_delta < 0)
424 ASSERT(dqp->q_ino.count >= -qtrx->qt_icount_delta);
425#endif
426 if (totalbdelta)
427 dqp->q_blk.count += totalbdelta;
428
429 if (qtrx->qt_icount_delta)
430 dqp->q_ino.count += qtrx->qt_icount_delta;
431
432 if (totalrtbdelta)
433 dqp->q_rtb.count += totalrtbdelta;
434
435 if (totalbdelta != 0 || totalrtbdelta != 0 ||
436 qtrx->qt_icount_delta != 0)
437 trace_xfs_trans_apply_dquot_deltas_after(dqp);
438
439 /*
440 * Get any default limits in use.
441 * Start/reset the timer(s) if needed.
442 */
443 if (dqp->q_id) {
444 xfs_qm_adjust_dqlimits(dqp);
445 xfs_qm_adjust_dqtimers(dqp);
446 }
447
448 dqp->q_flags |= XFS_DQFLAG_DIRTY;
449 /*
450 * add this to the list of items to get logged
451 */
452 xfs_trans_log_dquot(tp, dqp);
453 /*
454 * Take off what's left of the original reservation.
455 * In case of delayed allocations, there's no
456 * reservation that a transaction structure knows of.
457 */
458 blk_res_used = max_t(int64_t, 0, qtrx->qt_bcount_delta);
459 xfs_apply_quota_reservation_deltas(&dqp->q_blk,
460 qtrx->qt_blk_res, blk_res_used,
461 qtrx->qt_bcount_delta);
462
463 /*
464 * Adjust the RT reservation.
465 */
466 xfs_apply_quota_reservation_deltas(&dqp->q_rtb,
467 qtrx->qt_rtblk_res,
468 qtrx->qt_rtblk_res_used,
469 qtrx->qt_rtbcount_delta);
470
471 /*
472 * Adjust the inode reservation.
473 */
474 ASSERT(qtrx->qt_ino_res >= qtrx->qt_ino_res_used);
475 xfs_apply_quota_reservation_deltas(&dqp->q_ino,
476 qtrx->qt_ino_res,
477 qtrx->qt_ino_res_used,
478 qtrx->qt_icount_delta);
479
480 ASSERT(dqp->q_blk.reserved >= dqp->q_blk.count);
481 ASSERT(dqp->q_ino.reserved >= dqp->q_ino.count);
482 ASSERT(dqp->q_rtb.reserved >= dqp->q_rtb.count);
483 }
484 }
485}
486
487/*
488 * Release the reservations, and adjust the dquots accordingly.
489 * This is called only when the transaction is being aborted. If by
490 * any chance we have done dquot modifications incore (ie. deltas) already,
491 * we simply throw those away, since that's the expected behavior
492 * when a transaction is curtailed without a commit.
493 */
494void
495xfs_trans_unreserve_and_mod_dquots(
496 struct xfs_trans *tp)
497{
498 int i, j;
499 struct xfs_dquot *dqp;
500 struct xfs_dqtrx *qtrx, *qa;
501 bool locked;
502
503 if (!tp->t_dqinfo || !(tp->t_flags & XFS_TRANS_DQ_DIRTY))
504 return;
505
506 for (j = 0; j < XFS_QM_TRANS_DQTYPES; j++) {
507 qa = tp->t_dqinfo->dqs[j];
508
509 for (i = 0; i < XFS_QM_TRANS_MAXDQS; i++) {
510 qtrx = &qa[i];
511 /*
512 * We assume that the array of dquots is filled
513 * sequentially, not sparsely.
514 */
515 if ((dqp = qtrx->qt_dquot) == NULL)
516 break;
517 /*
518 * Unreserve the original reservation. We don't care
519 * about the number of blocks used field, or deltas.
520 * Also we don't bother to zero the fields.
521 */
522 locked = false;
523 if (qtrx->qt_blk_res) {
524 xfs_dqlock(dqp);
525 locked = true;
526 dqp->q_blk.reserved -=
527 (xfs_qcnt_t)qtrx->qt_blk_res;
528 }
529 if (qtrx->qt_ino_res) {
530 if (!locked) {
531 xfs_dqlock(dqp);
532 locked = true;
533 }
534 dqp->q_ino.reserved -=
535 (xfs_qcnt_t)qtrx->qt_ino_res;
536 }
537
538 if (qtrx->qt_rtblk_res) {
539 if (!locked) {
540 xfs_dqlock(dqp);
541 locked = true;
542 }
543 dqp->q_rtb.reserved -=
544 (xfs_qcnt_t)qtrx->qt_rtblk_res;
545 }
546 if (locked)
547 xfs_dqunlock(dqp);
548
549 }
550 }
551}
552
553STATIC void
554xfs_quota_warn(
555 struct xfs_mount *mp,
556 struct xfs_dquot *dqp,
557 int type)
558{
559 enum quota_type qtype;
560
561 switch (xfs_dquot_type(dqp)) {
562 case XFS_DQTYPE_PROJ:
563 qtype = PRJQUOTA;
564 break;
565 case XFS_DQTYPE_USER:
566 qtype = USRQUOTA;
567 break;
568 case XFS_DQTYPE_GROUP:
569 qtype = GRPQUOTA;
570 break;
571 default:
572 return;
573 }
574
575 quota_send_warning(make_kqid(&init_user_ns, qtype, dqp->q_id),
576 mp->m_super->s_dev, type);
577}
578
579/*
580 * Decide if we can make an additional reservation against a quota resource.
581 * Returns an inode QUOTA_NL_ warning code and whether or not it's fatal.
582 *
583 * Note that we assume that the numeric difference between the inode and block
584 * warning codes will always be 3 since it's userspace ABI now, and will never
585 * decrease the quota reservation, so the *BELOW messages are irrelevant.
586 */
587static inline int
588xfs_dqresv_check(
589 struct xfs_dquot_res *res,
590 struct xfs_quota_limits *qlim,
591 int64_t delta,
592 bool *fatal)
593{
594 xfs_qcnt_t hardlimit = res->hardlimit;
595 xfs_qcnt_t softlimit = res->softlimit;
596 xfs_qcnt_t total_count = res->reserved + delta;
597
598 BUILD_BUG_ON(QUOTA_NL_BHARDWARN != QUOTA_NL_IHARDWARN + 3);
599 BUILD_BUG_ON(QUOTA_NL_BSOFTLONGWARN != QUOTA_NL_ISOFTLONGWARN + 3);
600 BUILD_BUG_ON(QUOTA_NL_BSOFTWARN != QUOTA_NL_ISOFTWARN + 3);
601
602 *fatal = false;
603 if (delta <= 0)
604 return QUOTA_NL_NOWARN;
605
606 if (!hardlimit)
607 hardlimit = qlim->hard;
608 if (!softlimit)
609 softlimit = qlim->soft;
610
611 if (hardlimit && total_count > hardlimit) {
612 *fatal = true;
613 return QUOTA_NL_IHARDWARN;
614 }
615
616 if (softlimit && total_count > softlimit) {
617 time64_t now = ktime_get_real_seconds();
618
619 if ((res->timer != 0 && now > res->timer) ||
620 (res->warnings != 0 && res->warnings >= qlim->warn)) {
621 *fatal = true;
622 return QUOTA_NL_ISOFTLONGWARN;
623 }
624
625 res->warnings++;
626 return QUOTA_NL_ISOFTWARN;
627 }
628
629 return QUOTA_NL_NOWARN;
630}
631
632/*
633 * This reserves disk blocks and inodes against a dquot.
634 * Flags indicate if the dquot is to be locked here and also
635 * if the blk reservation is for RT or regular blocks.
636 * Sending in XFS_QMOPT_FORCE_RES flag skips the quota check.
637 */
638STATIC int
639xfs_trans_dqresv(
640 struct xfs_trans *tp,
641 struct xfs_mount *mp,
642 struct xfs_dquot *dqp,
643 int64_t nblks,
644 long ninos,
645 uint flags)
646{
647 struct xfs_quotainfo *q = mp->m_quotainfo;
648 struct xfs_def_quota *defq;
649 struct xfs_dquot_res *blkres;
650 struct xfs_quota_limits *qlim;
651
652 xfs_dqlock(dqp);
653
654 defq = xfs_get_defquota(q, xfs_dquot_type(dqp));
655
656 if (flags & XFS_TRANS_DQ_RES_BLKS) {
657 blkres = &dqp->q_blk;
658 qlim = &defq->blk;
659 } else {
660 blkres = &dqp->q_rtb;
661 qlim = &defq->rtb;
662 }
663
664 if ((flags & XFS_QMOPT_FORCE_RES) == 0 && dqp->q_id &&
665 xfs_dquot_is_enforced(dqp)) {
666 int quota_nl;
667 bool fatal;
668
669 /*
670 * dquot is locked already. See if we'd go over the hardlimit
671 * or exceed the timelimit if we'd reserve resources.
672 */
673 quota_nl = xfs_dqresv_check(blkres, qlim, nblks, &fatal);
674 if (quota_nl != QUOTA_NL_NOWARN) {
675 /*
676 * Quota block warning codes are 3 more than the inode
677 * codes, which we check above.
678 */
679 xfs_quota_warn(mp, dqp, quota_nl + 3);
680 if (fatal)
681 goto error_return;
682 }
683
684 quota_nl = xfs_dqresv_check(&dqp->q_ino, &defq->ino, ninos,
685 &fatal);
686 if (quota_nl != QUOTA_NL_NOWARN) {
687 xfs_quota_warn(mp, dqp, quota_nl);
688 if (fatal)
689 goto error_return;
690 }
691 }
692
693 /*
694 * Change the reservation, but not the actual usage.
695 * Note that q_blk.reserved = q_blk.count + resv
696 */
697 blkres->reserved += (xfs_qcnt_t)nblks;
698 dqp->q_ino.reserved += (xfs_qcnt_t)ninos;
699
700 /*
701 * note the reservation amt in the trans struct too,
702 * so that the transaction knows how much was reserved by
703 * it against this particular dquot.
704 * We don't do this when we are reserving for a delayed allocation,
705 * because we don't have the luxury of a transaction envelope then.
706 */
707 if (tp) {
708 ASSERT(tp->t_dqinfo);
709 ASSERT(flags & XFS_QMOPT_RESBLK_MASK);
710 if (nblks != 0)
711 xfs_trans_mod_dquot(tp, dqp,
712 flags & XFS_QMOPT_RESBLK_MASK,
713 nblks);
714 if (ninos != 0)
715 xfs_trans_mod_dquot(tp, dqp,
716 XFS_TRANS_DQ_RES_INOS,
717 ninos);
718 }
719 ASSERT(dqp->q_blk.reserved >= dqp->q_blk.count);
720 ASSERT(dqp->q_rtb.reserved >= dqp->q_rtb.count);
721 ASSERT(dqp->q_ino.reserved >= dqp->q_ino.count);
722
723 xfs_dqunlock(dqp);
724 return 0;
725
726error_return:
727 xfs_dqunlock(dqp);
728 if (xfs_dquot_type(dqp) == XFS_DQTYPE_PROJ)
729 return -ENOSPC;
730 return -EDQUOT;
731}
732
733
734/*
735 * Given dquot(s), make disk block and/or inode reservations against them.
736 * The fact that this does the reservation against user, group and
737 * project quotas is important, because this follows a all-or-nothing
738 * approach.
739 *
740 * flags = XFS_QMOPT_FORCE_RES evades limit enforcement. Used by chown.
741 * XFS_QMOPT_ENOSPC returns ENOSPC not EDQUOT. Used by pquota.
742 * XFS_TRANS_DQ_RES_BLKS reserves regular disk blocks
743 * XFS_TRANS_DQ_RES_RTBLKS reserves realtime disk blocks
744 * dquots are unlocked on return, if they were not locked by caller.
745 */
746int
747xfs_trans_reserve_quota_bydquots(
748 struct xfs_trans *tp,
749 struct xfs_mount *mp,
750 struct xfs_dquot *udqp,
751 struct xfs_dquot *gdqp,
752 struct xfs_dquot *pdqp,
753 int64_t nblks,
754 long ninos,
755 uint flags)
756{
757 int error;
758
759 if (!XFS_IS_QUOTA_RUNNING(mp) || !XFS_IS_QUOTA_ON(mp))
760 return 0;
761
762 if (tp && tp->t_dqinfo == NULL)
763 xfs_trans_alloc_dqinfo(tp);
764
765 ASSERT(flags & XFS_QMOPT_RESBLK_MASK);
766
767 if (udqp) {
768 error = xfs_trans_dqresv(tp, mp, udqp, nblks, ninos, flags);
769 if (error)
770 return error;
771 }
772
773 if (gdqp) {
774 error = xfs_trans_dqresv(tp, mp, gdqp, nblks, ninos, flags);
775 if (error)
776 goto unwind_usr;
777 }
778
779 if (pdqp) {
780 error = xfs_trans_dqresv(tp, mp, pdqp, nblks, ninos, flags);
781 if (error)
782 goto unwind_grp;
783 }
784
785 /*
786 * Didn't change anything critical, so, no need to log
787 */
788 return 0;
789
790unwind_grp:
791 flags |= XFS_QMOPT_FORCE_RES;
792 if (gdqp)
793 xfs_trans_dqresv(tp, mp, gdqp, -nblks, -ninos, flags);
794unwind_usr:
795 flags |= XFS_QMOPT_FORCE_RES;
796 if (udqp)
797 xfs_trans_dqresv(tp, mp, udqp, -nblks, -ninos, flags);
798 return error;
799}
800
801
802/*
803 * Lock the dquot and change the reservation if we can.
804 * This doesn't change the actual usage, just the reservation.
805 * The inode sent in is locked.
806 */
807int
808xfs_trans_reserve_quota_nblks(
809 struct xfs_trans *tp,
810 struct xfs_inode *ip,
811 int64_t nblks,
812 long ninos,
813 uint flags)
814{
815 struct xfs_mount *mp = ip->i_mount;
816
817 if (!XFS_IS_QUOTA_RUNNING(mp) || !XFS_IS_QUOTA_ON(mp))
818 return 0;
819
820 ASSERT(!xfs_is_quota_inode(&mp->m_sb, ip->i_ino));
821
822 ASSERT(xfs_isilocked(ip, XFS_ILOCK_EXCL));
823 ASSERT((flags & ~(XFS_QMOPT_FORCE_RES)) == XFS_TRANS_DQ_RES_RTBLKS ||
824 (flags & ~(XFS_QMOPT_FORCE_RES)) == XFS_TRANS_DQ_RES_BLKS);
825
826 /*
827 * Reserve nblks against these dquots, with trans as the mediator.
828 */
829 return xfs_trans_reserve_quota_bydquots(tp, mp,
830 ip->i_udquot, ip->i_gdquot,
831 ip->i_pdquot,
832 nblks, ninos, flags);
833}
834
835/*
836 * This routine is called to allocate a quotaoff log item.
837 */
838struct xfs_qoff_logitem *
839xfs_trans_get_qoff_item(
840 struct xfs_trans *tp,
841 struct xfs_qoff_logitem *startqoff,
842 uint flags)
843{
844 struct xfs_qoff_logitem *q;
845
846 ASSERT(tp != NULL);
847
848 q = xfs_qm_qoff_logitem_init(tp->t_mountp, startqoff, flags);
849 ASSERT(q != NULL);
850
851 /*
852 * Get a log_item_desc to point at the new item.
853 */
854 xfs_trans_add_item(tp, &q->qql_item);
855 return q;
856}
857
858
859/*
860 * This is called to mark the quotaoff logitem as needing
861 * to be logged when the transaction is committed. The logitem must
862 * already be associated with the given transaction.
863 */
864void
865xfs_trans_log_quotaoff_item(
866 struct xfs_trans *tp,
867 struct xfs_qoff_logitem *qlp)
868{
869 tp->t_flags |= XFS_TRANS_DIRTY;
870 set_bit(XFS_LI_DIRTY, &qlp->qql_item.li_flags);
871}
872
873STATIC void
874xfs_trans_alloc_dqinfo(
875 xfs_trans_t *tp)
876{
877 tp->t_dqinfo = kmem_cache_zalloc(xfs_qm_dqtrxzone,
878 GFP_KERNEL | __GFP_NOFAIL);
879}
880
881void
882xfs_trans_free_dqinfo(
883 xfs_trans_t *tp)
884{
885 if (!tp->t_dqinfo)
886 return;
887 kmem_cache_free(xfs_qm_dqtrxzone, tp->t_dqinfo);
888 tp->t_dqinfo = NULL;
889}