Loading...
1// SPDX-License-Identifier: GPL-2.0
2/*
3 * Copyright (c) 2000-2006 Silicon Graphics, Inc.
4 * Copyright (c) 2012 Red Hat, Inc.
5 * All Rights Reserved.
6 */
7#include "xfs.h"
8#include "xfs_fs.h"
9#include "xfs_shared.h"
10#include "xfs_format.h"
11#include "xfs_log_format.h"
12#include "xfs_trans_resv.h"
13#include "xfs_bit.h"
14#include "xfs_mount.h"
15#include "xfs_defer.h"
16#include "xfs_inode.h"
17#include "xfs_btree.h"
18#include "xfs_trans.h"
19#include "xfs_alloc.h"
20#include "xfs_bmap.h"
21#include "xfs_bmap_util.h"
22#include "xfs_bmap_btree.h"
23#include "xfs_rtalloc.h"
24#include "xfs_error.h"
25#include "xfs_quota.h"
26#include "xfs_trans_space.h"
27#include "xfs_trace.h"
28#include "xfs_icache.h"
29#include "xfs_iomap.h"
30#include "xfs_reflink.h"
31
32/* Kernel only BMAP related definitions and functions */
33
34/*
35 * Convert the given file system block to a disk block. We have to treat it
36 * differently based on whether the file is a real time file or not, because the
37 * bmap code does.
38 */
39xfs_daddr_t
40xfs_fsb_to_db(struct xfs_inode *ip, xfs_fsblock_t fsb)
41{
42 if (XFS_IS_REALTIME_INODE(ip))
43 return XFS_FSB_TO_BB(ip->i_mount, fsb);
44 return XFS_FSB_TO_DADDR(ip->i_mount, fsb);
45}
46
47/*
48 * Routine to zero an extent on disk allocated to the specific inode.
49 *
50 * The VFS functions take a linearised filesystem block offset, so we have to
51 * convert the sparse xfs fsb to the right format first.
52 * VFS types are real funky, too.
53 */
54int
55xfs_zero_extent(
56 struct xfs_inode *ip,
57 xfs_fsblock_t start_fsb,
58 xfs_off_t count_fsb)
59{
60 struct xfs_mount *mp = ip->i_mount;
61 struct xfs_buftarg *target = xfs_inode_buftarg(ip);
62 xfs_daddr_t sector = xfs_fsb_to_db(ip, start_fsb);
63 sector_t block = XFS_BB_TO_FSBT(mp, sector);
64
65 return blkdev_issue_zeroout(target->bt_bdev,
66 block << (mp->m_super->s_blocksize_bits - 9),
67 count_fsb << (mp->m_super->s_blocksize_bits - 9),
68 GFP_NOFS, 0);
69}
70
71#ifdef CONFIG_XFS_RT
72int
73xfs_bmap_rtalloc(
74 struct xfs_bmalloca *ap)
75{
76 struct xfs_mount *mp = ap->ip->i_mount;
77 xfs_fileoff_t orig_offset = ap->offset;
78 xfs_rtblock_t rtb;
79 xfs_extlen_t prod = 0; /* product factor for allocators */
80 xfs_extlen_t mod = 0; /* product factor for allocators */
81 xfs_extlen_t ralen = 0; /* realtime allocation length */
82 xfs_extlen_t align; /* minimum allocation alignment */
83 xfs_extlen_t orig_length = ap->length;
84 xfs_extlen_t minlen = mp->m_sb.sb_rextsize;
85 xfs_extlen_t raminlen;
86 bool rtlocked = false;
87 bool ignore_locality = false;
88 int error;
89
90 align = xfs_get_extsz_hint(ap->ip);
91retry:
92 prod = align / mp->m_sb.sb_rextsize;
93 error = xfs_bmap_extsize_align(mp, &ap->got, &ap->prev,
94 align, 1, ap->eof, 0,
95 ap->conv, &ap->offset, &ap->length);
96 if (error)
97 return error;
98 ASSERT(ap->length);
99 ASSERT(ap->length % mp->m_sb.sb_rextsize == 0);
100
101 /*
102 * If we shifted the file offset downward to satisfy an extent size
103 * hint, increase minlen by that amount so that the allocator won't
104 * give us an allocation that's too short to cover at least one of the
105 * blocks that the caller asked for.
106 */
107 if (ap->offset != orig_offset)
108 minlen += orig_offset - ap->offset;
109
110 /*
111 * If the offset & length are not perfectly aligned
112 * then kill prod, it will just get us in trouble.
113 */
114 div_u64_rem(ap->offset, align, &mod);
115 if (mod || ap->length % align)
116 prod = 1;
117 /*
118 * Set ralen to be the actual requested length in rtextents.
119 */
120 ralen = ap->length / mp->m_sb.sb_rextsize;
121 /*
122 * If the old value was close enough to XFS_BMBT_MAX_EXTLEN that
123 * we rounded up to it, cut it back so it's valid again.
124 * Note that if it's a really large request (bigger than
125 * XFS_BMBT_MAX_EXTLEN), we don't hear about that number, and can't
126 * adjust the starting point to match it.
127 */
128 if (ralen * mp->m_sb.sb_rextsize >= XFS_MAX_BMBT_EXTLEN)
129 ralen = XFS_MAX_BMBT_EXTLEN / mp->m_sb.sb_rextsize;
130
131 /*
132 * Lock out modifications to both the RT bitmap and summary inodes
133 */
134 if (!rtlocked) {
135 xfs_ilock(mp->m_rbmip, XFS_ILOCK_EXCL|XFS_ILOCK_RTBITMAP);
136 xfs_trans_ijoin(ap->tp, mp->m_rbmip, XFS_ILOCK_EXCL);
137 xfs_ilock(mp->m_rsumip, XFS_ILOCK_EXCL|XFS_ILOCK_RTSUM);
138 xfs_trans_ijoin(ap->tp, mp->m_rsumip, XFS_ILOCK_EXCL);
139 rtlocked = true;
140 }
141
142 /*
143 * If it's an allocation to an empty file at offset 0,
144 * pick an extent that will space things out in the rt area.
145 */
146 if (ap->eof && ap->offset == 0) {
147 xfs_rtblock_t rtx; /* realtime extent no */
148
149 error = xfs_rtpick_extent(mp, ap->tp, ralen, &rtx);
150 if (error)
151 return error;
152 ap->blkno = rtx * mp->m_sb.sb_rextsize;
153 } else {
154 ap->blkno = 0;
155 }
156
157 xfs_bmap_adjacent(ap);
158
159 /*
160 * Realtime allocation, done through xfs_rtallocate_extent.
161 */
162 if (ignore_locality)
163 ap->blkno = 0;
164 else
165 do_div(ap->blkno, mp->m_sb.sb_rextsize);
166 rtb = ap->blkno;
167 ap->length = ralen;
168 raminlen = max_t(xfs_extlen_t, 1, minlen / mp->m_sb.sb_rextsize);
169 error = xfs_rtallocate_extent(ap->tp, ap->blkno, raminlen, ap->length,
170 &ralen, ap->wasdel, prod, &rtb);
171 if (error)
172 return error;
173
174 if (rtb != NULLRTBLOCK) {
175 ap->blkno = rtb * mp->m_sb.sb_rextsize;
176 ap->length = ralen * mp->m_sb.sb_rextsize;
177 ap->ip->i_nblocks += ap->length;
178 xfs_trans_log_inode(ap->tp, ap->ip, XFS_ILOG_CORE);
179 if (ap->wasdel)
180 ap->ip->i_delayed_blks -= ap->length;
181 /*
182 * Adjust the disk quota also. This was reserved
183 * earlier.
184 */
185 xfs_trans_mod_dquot_byino(ap->tp, ap->ip,
186 ap->wasdel ? XFS_TRANS_DQ_DELRTBCOUNT :
187 XFS_TRANS_DQ_RTBCOUNT, ap->length);
188 return 0;
189 }
190
191 if (align > mp->m_sb.sb_rextsize) {
192 /*
193 * We previously enlarged the request length to try to satisfy
194 * an extent size hint. The allocator didn't return anything,
195 * so reset the parameters to the original values and try again
196 * without alignment criteria.
197 */
198 ap->offset = orig_offset;
199 ap->length = orig_length;
200 minlen = align = mp->m_sb.sb_rextsize;
201 goto retry;
202 }
203
204 if (!ignore_locality && ap->blkno != 0) {
205 /*
206 * If we can't allocate near a specific rt extent, try again
207 * without locality criteria.
208 */
209 ignore_locality = true;
210 goto retry;
211 }
212
213 ap->blkno = NULLFSBLOCK;
214 ap->length = 0;
215 return 0;
216}
217#endif /* CONFIG_XFS_RT */
218
219/*
220 * Extent tree block counting routines.
221 */
222
223/*
224 * Count leaf blocks given a range of extent records. Delayed allocation
225 * extents are not counted towards the totals.
226 */
227xfs_extnum_t
228xfs_bmap_count_leaves(
229 struct xfs_ifork *ifp,
230 xfs_filblks_t *count)
231{
232 struct xfs_iext_cursor icur;
233 struct xfs_bmbt_irec got;
234 xfs_extnum_t numrecs = 0;
235
236 for_each_xfs_iext(ifp, &icur, &got) {
237 if (!isnullstartblock(got.br_startblock)) {
238 *count += got.br_blockcount;
239 numrecs++;
240 }
241 }
242
243 return numrecs;
244}
245
246/*
247 * Count fsblocks of the given fork. Delayed allocation extents are
248 * not counted towards the totals.
249 */
250int
251xfs_bmap_count_blocks(
252 struct xfs_trans *tp,
253 struct xfs_inode *ip,
254 int whichfork,
255 xfs_extnum_t *nextents,
256 xfs_filblks_t *count)
257{
258 struct xfs_mount *mp = ip->i_mount;
259 struct xfs_ifork *ifp = xfs_ifork_ptr(ip, whichfork);
260 struct xfs_btree_cur *cur;
261 xfs_extlen_t btblocks = 0;
262 int error;
263
264 *nextents = 0;
265 *count = 0;
266
267 if (!ifp)
268 return 0;
269
270 switch (ifp->if_format) {
271 case XFS_DINODE_FMT_BTREE:
272 error = xfs_iread_extents(tp, ip, whichfork);
273 if (error)
274 return error;
275
276 cur = xfs_bmbt_init_cursor(mp, tp, ip, whichfork);
277 error = xfs_btree_count_blocks(cur, &btblocks);
278 xfs_btree_del_cursor(cur, error);
279 if (error)
280 return error;
281
282 /*
283 * xfs_btree_count_blocks includes the root block contained in
284 * the inode fork in @btblocks, so subtract one because we're
285 * only interested in allocated disk blocks.
286 */
287 *count += btblocks - 1;
288
289 fallthrough;
290 case XFS_DINODE_FMT_EXTENTS:
291 *nextents = xfs_bmap_count_leaves(ifp, count);
292 break;
293 }
294
295 return 0;
296}
297
298static int
299xfs_getbmap_report_one(
300 struct xfs_inode *ip,
301 struct getbmapx *bmv,
302 struct kgetbmap *out,
303 int64_t bmv_end,
304 struct xfs_bmbt_irec *got)
305{
306 struct kgetbmap *p = out + bmv->bmv_entries;
307 bool shared = false;
308 int error;
309
310 error = xfs_reflink_trim_around_shared(ip, got, &shared);
311 if (error)
312 return error;
313
314 if (isnullstartblock(got->br_startblock) ||
315 got->br_startblock == DELAYSTARTBLOCK) {
316 /*
317 * Delalloc extents that start beyond EOF can occur due to
318 * speculative EOF allocation when the delalloc extent is larger
319 * than the largest freespace extent at conversion time. These
320 * extents cannot be converted by data writeback, so can exist
321 * here even if we are not supposed to be finding delalloc
322 * extents.
323 */
324 if (got->br_startoff < XFS_B_TO_FSB(ip->i_mount, XFS_ISIZE(ip)))
325 ASSERT((bmv->bmv_iflags & BMV_IF_DELALLOC) != 0);
326
327 p->bmv_oflags |= BMV_OF_DELALLOC;
328 p->bmv_block = -2;
329 } else {
330 p->bmv_block = xfs_fsb_to_db(ip, got->br_startblock);
331 }
332
333 if (got->br_state == XFS_EXT_UNWRITTEN &&
334 (bmv->bmv_iflags & BMV_IF_PREALLOC))
335 p->bmv_oflags |= BMV_OF_PREALLOC;
336
337 if (shared)
338 p->bmv_oflags |= BMV_OF_SHARED;
339
340 p->bmv_offset = XFS_FSB_TO_BB(ip->i_mount, got->br_startoff);
341 p->bmv_length = XFS_FSB_TO_BB(ip->i_mount, got->br_blockcount);
342
343 bmv->bmv_offset = p->bmv_offset + p->bmv_length;
344 bmv->bmv_length = max(0LL, bmv_end - bmv->bmv_offset);
345 bmv->bmv_entries++;
346 return 0;
347}
348
349static void
350xfs_getbmap_report_hole(
351 struct xfs_inode *ip,
352 struct getbmapx *bmv,
353 struct kgetbmap *out,
354 int64_t bmv_end,
355 xfs_fileoff_t bno,
356 xfs_fileoff_t end)
357{
358 struct kgetbmap *p = out + bmv->bmv_entries;
359
360 if (bmv->bmv_iflags & BMV_IF_NO_HOLES)
361 return;
362
363 p->bmv_block = -1;
364 p->bmv_offset = XFS_FSB_TO_BB(ip->i_mount, bno);
365 p->bmv_length = XFS_FSB_TO_BB(ip->i_mount, end - bno);
366
367 bmv->bmv_offset = p->bmv_offset + p->bmv_length;
368 bmv->bmv_length = max(0LL, bmv_end - bmv->bmv_offset);
369 bmv->bmv_entries++;
370}
371
372static inline bool
373xfs_getbmap_full(
374 struct getbmapx *bmv)
375{
376 return bmv->bmv_length == 0 || bmv->bmv_entries >= bmv->bmv_count - 1;
377}
378
379static bool
380xfs_getbmap_next_rec(
381 struct xfs_bmbt_irec *rec,
382 xfs_fileoff_t total_end)
383{
384 xfs_fileoff_t end = rec->br_startoff + rec->br_blockcount;
385
386 if (end == total_end)
387 return false;
388
389 rec->br_startoff += rec->br_blockcount;
390 if (!isnullstartblock(rec->br_startblock) &&
391 rec->br_startblock != DELAYSTARTBLOCK)
392 rec->br_startblock += rec->br_blockcount;
393 rec->br_blockcount = total_end - end;
394 return true;
395}
396
397/*
398 * Get inode's extents as described in bmv, and format for output.
399 * Calls formatter to fill the user's buffer until all extents
400 * are mapped, until the passed-in bmv->bmv_count slots have
401 * been filled, or until the formatter short-circuits the loop,
402 * if it is tracking filled-in extents on its own.
403 */
404int /* error code */
405xfs_getbmap(
406 struct xfs_inode *ip,
407 struct getbmapx *bmv, /* user bmap structure */
408 struct kgetbmap *out)
409{
410 struct xfs_mount *mp = ip->i_mount;
411 int iflags = bmv->bmv_iflags;
412 int whichfork, lock, error = 0;
413 int64_t bmv_end, max_len;
414 xfs_fileoff_t bno, first_bno;
415 struct xfs_ifork *ifp;
416 struct xfs_bmbt_irec got, rec;
417 xfs_filblks_t len;
418 struct xfs_iext_cursor icur;
419
420 if (bmv->bmv_iflags & ~BMV_IF_VALID)
421 return -EINVAL;
422#ifndef DEBUG
423 /* Only allow CoW fork queries if we're debugging. */
424 if (iflags & BMV_IF_COWFORK)
425 return -EINVAL;
426#endif
427 if ((iflags & BMV_IF_ATTRFORK) && (iflags & BMV_IF_COWFORK))
428 return -EINVAL;
429
430 if (bmv->bmv_length < -1)
431 return -EINVAL;
432 bmv->bmv_entries = 0;
433 if (bmv->bmv_length == 0)
434 return 0;
435
436 if (iflags & BMV_IF_ATTRFORK)
437 whichfork = XFS_ATTR_FORK;
438 else if (iflags & BMV_IF_COWFORK)
439 whichfork = XFS_COW_FORK;
440 else
441 whichfork = XFS_DATA_FORK;
442
443 xfs_ilock(ip, XFS_IOLOCK_SHARED);
444 switch (whichfork) {
445 case XFS_ATTR_FORK:
446 lock = xfs_ilock_attr_map_shared(ip);
447 if (!xfs_inode_has_attr_fork(ip))
448 goto out_unlock_ilock;
449
450 max_len = 1LL << 32;
451 break;
452 case XFS_COW_FORK:
453 lock = XFS_ILOCK_SHARED;
454 xfs_ilock(ip, lock);
455
456 /* No CoW fork? Just return */
457 if (!xfs_ifork_ptr(ip, whichfork))
458 goto out_unlock_ilock;
459
460 if (xfs_get_cowextsz_hint(ip))
461 max_len = mp->m_super->s_maxbytes;
462 else
463 max_len = XFS_ISIZE(ip);
464 break;
465 case XFS_DATA_FORK:
466 if (!(iflags & BMV_IF_DELALLOC) &&
467 (ip->i_delayed_blks || XFS_ISIZE(ip) > ip->i_disk_size)) {
468 error = filemap_write_and_wait(VFS_I(ip)->i_mapping);
469 if (error)
470 goto out_unlock_iolock;
471
472 /*
473 * Even after flushing the inode, there can still be
474 * delalloc blocks on the inode beyond EOF due to
475 * speculative preallocation. These are not removed
476 * until the release function is called or the inode
477 * is inactivated. Hence we cannot assert here that
478 * ip->i_delayed_blks == 0.
479 */
480 }
481
482 if (xfs_get_extsz_hint(ip) ||
483 (ip->i_diflags &
484 (XFS_DIFLAG_PREALLOC | XFS_DIFLAG_APPEND)))
485 max_len = mp->m_super->s_maxbytes;
486 else
487 max_len = XFS_ISIZE(ip);
488
489 lock = xfs_ilock_data_map_shared(ip);
490 break;
491 }
492
493 ifp = xfs_ifork_ptr(ip, whichfork);
494
495 switch (ifp->if_format) {
496 case XFS_DINODE_FMT_EXTENTS:
497 case XFS_DINODE_FMT_BTREE:
498 break;
499 case XFS_DINODE_FMT_LOCAL:
500 /* Local format inode forks report no extents. */
501 goto out_unlock_ilock;
502 default:
503 error = -EINVAL;
504 goto out_unlock_ilock;
505 }
506
507 if (bmv->bmv_length == -1) {
508 max_len = XFS_FSB_TO_BB(mp, XFS_B_TO_FSB(mp, max_len));
509 bmv->bmv_length = max(0LL, max_len - bmv->bmv_offset);
510 }
511
512 bmv_end = bmv->bmv_offset + bmv->bmv_length;
513
514 first_bno = bno = XFS_BB_TO_FSBT(mp, bmv->bmv_offset);
515 len = XFS_BB_TO_FSB(mp, bmv->bmv_length);
516
517 error = xfs_iread_extents(NULL, ip, whichfork);
518 if (error)
519 goto out_unlock_ilock;
520
521 if (!xfs_iext_lookup_extent(ip, ifp, bno, &icur, &got)) {
522 /*
523 * Report a whole-file hole if the delalloc flag is set to
524 * stay compatible with the old implementation.
525 */
526 if (iflags & BMV_IF_DELALLOC)
527 xfs_getbmap_report_hole(ip, bmv, out, bmv_end, bno,
528 XFS_B_TO_FSB(mp, XFS_ISIZE(ip)));
529 goto out_unlock_ilock;
530 }
531
532 while (!xfs_getbmap_full(bmv)) {
533 xfs_trim_extent(&got, first_bno, len);
534
535 /*
536 * Report an entry for a hole if this extent doesn't directly
537 * follow the previous one.
538 */
539 if (got.br_startoff > bno) {
540 xfs_getbmap_report_hole(ip, bmv, out, bmv_end, bno,
541 got.br_startoff);
542 if (xfs_getbmap_full(bmv))
543 break;
544 }
545
546 /*
547 * In order to report shared extents accurately, we report each
548 * distinct shared / unshared part of a single bmbt record with
549 * an individual getbmapx record.
550 */
551 bno = got.br_startoff + got.br_blockcount;
552 rec = got;
553 do {
554 error = xfs_getbmap_report_one(ip, bmv, out, bmv_end,
555 &rec);
556 if (error || xfs_getbmap_full(bmv))
557 goto out_unlock_ilock;
558 } while (xfs_getbmap_next_rec(&rec, bno));
559
560 if (!xfs_iext_next_extent(ifp, &icur, &got)) {
561 xfs_fileoff_t end = XFS_B_TO_FSB(mp, XFS_ISIZE(ip));
562
563 out[bmv->bmv_entries - 1].bmv_oflags |= BMV_OF_LAST;
564
565 if (whichfork != XFS_ATTR_FORK && bno < end &&
566 !xfs_getbmap_full(bmv)) {
567 xfs_getbmap_report_hole(ip, bmv, out, bmv_end,
568 bno, end);
569 }
570 break;
571 }
572
573 if (bno >= first_bno + len)
574 break;
575 }
576
577out_unlock_ilock:
578 xfs_iunlock(ip, lock);
579out_unlock_iolock:
580 xfs_iunlock(ip, XFS_IOLOCK_SHARED);
581 return error;
582}
583
584/*
585 * Dead simple method of punching delalyed allocation blocks from a range in
586 * the inode. This will always punch out both the start and end blocks, even
587 * if the ranges only partially overlap them, so it is up to the caller to
588 * ensure that partial blocks are not passed in.
589 */
590int
591xfs_bmap_punch_delalloc_range(
592 struct xfs_inode *ip,
593 xfs_off_t start_byte,
594 xfs_off_t end_byte)
595{
596 struct xfs_mount *mp = ip->i_mount;
597 struct xfs_ifork *ifp = &ip->i_df;
598 xfs_fileoff_t start_fsb = XFS_B_TO_FSBT(mp, start_byte);
599 xfs_fileoff_t end_fsb = XFS_B_TO_FSB(mp, end_byte);
600 struct xfs_bmbt_irec got, del;
601 struct xfs_iext_cursor icur;
602 int error = 0;
603
604 ASSERT(!xfs_need_iread_extents(ifp));
605
606 xfs_ilock(ip, XFS_ILOCK_EXCL);
607 if (!xfs_iext_lookup_extent_before(ip, ifp, &end_fsb, &icur, &got))
608 goto out_unlock;
609
610 while (got.br_startoff + got.br_blockcount > start_fsb) {
611 del = got;
612 xfs_trim_extent(&del, start_fsb, end_fsb - start_fsb);
613
614 /*
615 * A delete can push the cursor forward. Step back to the
616 * previous extent on non-delalloc or extents outside the
617 * target range.
618 */
619 if (!del.br_blockcount ||
620 !isnullstartblock(del.br_startblock)) {
621 if (!xfs_iext_prev_extent(ifp, &icur, &got))
622 break;
623 continue;
624 }
625
626 error = xfs_bmap_del_extent_delay(ip, XFS_DATA_FORK, &icur,
627 &got, &del);
628 if (error || !xfs_iext_get_extent(ifp, &icur, &got))
629 break;
630 }
631
632out_unlock:
633 xfs_iunlock(ip, XFS_ILOCK_EXCL);
634 return error;
635}
636
637/*
638 * Test whether it is appropriate to check an inode for and free post EOF
639 * blocks. The 'force' parameter determines whether we should also consider
640 * regular files that are marked preallocated or append-only.
641 */
642bool
643xfs_can_free_eofblocks(
644 struct xfs_inode *ip,
645 bool force)
646{
647 struct xfs_bmbt_irec imap;
648 struct xfs_mount *mp = ip->i_mount;
649 xfs_fileoff_t end_fsb;
650 xfs_fileoff_t last_fsb;
651 int nimaps = 1;
652 int error;
653
654 /*
655 * Caller must either hold the exclusive io lock; or be inactivating
656 * the inode, which guarantees there are no other users of the inode.
657 */
658 ASSERT(xfs_isilocked(ip, XFS_IOLOCK_EXCL) ||
659 (VFS_I(ip)->i_state & I_FREEING));
660
661 /* prealloc/delalloc exists only on regular files */
662 if (!S_ISREG(VFS_I(ip)->i_mode))
663 return false;
664
665 /*
666 * Zero sized files with no cached pages and delalloc blocks will not
667 * have speculative prealloc/delalloc blocks to remove.
668 */
669 if (VFS_I(ip)->i_size == 0 &&
670 VFS_I(ip)->i_mapping->nrpages == 0 &&
671 ip->i_delayed_blks == 0)
672 return false;
673
674 /* If we haven't read in the extent list, then don't do it now. */
675 if (xfs_need_iread_extents(&ip->i_df))
676 return false;
677
678 /*
679 * Do not free real preallocated or append-only files unless the file
680 * has delalloc blocks and we are forced to remove them.
681 */
682 if (ip->i_diflags & (XFS_DIFLAG_PREALLOC | XFS_DIFLAG_APPEND))
683 if (!force || ip->i_delayed_blks == 0)
684 return false;
685
686 /*
687 * Do not try to free post-EOF blocks if EOF is beyond the end of the
688 * range supported by the page cache, because the truncation will loop
689 * forever.
690 */
691 end_fsb = XFS_B_TO_FSB(mp, (xfs_ufsize_t)XFS_ISIZE(ip));
692 if (XFS_IS_REALTIME_INODE(ip) && mp->m_sb.sb_rextsize > 1)
693 end_fsb = roundup_64(end_fsb, mp->m_sb.sb_rextsize);
694 last_fsb = XFS_B_TO_FSB(mp, mp->m_super->s_maxbytes);
695 if (last_fsb <= end_fsb)
696 return false;
697
698 /*
699 * Look up the mapping for the first block past EOF. If we can't find
700 * it, there's nothing to free.
701 */
702 xfs_ilock(ip, XFS_ILOCK_SHARED);
703 error = xfs_bmapi_read(ip, end_fsb, last_fsb - end_fsb, &imap, &nimaps,
704 0);
705 xfs_iunlock(ip, XFS_ILOCK_SHARED);
706 if (error || nimaps == 0)
707 return false;
708
709 /*
710 * If there's a real mapping there or there are delayed allocation
711 * reservations, then we have post-EOF blocks to try to free.
712 */
713 return imap.br_startblock != HOLESTARTBLOCK || ip->i_delayed_blks;
714}
715
716/*
717 * This is called to free any blocks beyond eof. The caller must hold
718 * IOLOCK_EXCL unless we are in the inode reclaim path and have the only
719 * reference to the inode.
720 */
721int
722xfs_free_eofblocks(
723 struct xfs_inode *ip)
724{
725 struct xfs_trans *tp;
726 struct xfs_mount *mp = ip->i_mount;
727 int error;
728
729 /* Attach the dquots to the inode up front. */
730 error = xfs_qm_dqattach(ip);
731 if (error)
732 return error;
733
734 /* Wait on dio to ensure i_size has settled. */
735 inode_dio_wait(VFS_I(ip));
736
737 error = xfs_trans_alloc(mp, &M_RES(mp)->tr_itruncate, 0, 0, 0, &tp);
738 if (error) {
739 ASSERT(xfs_is_shutdown(mp));
740 return error;
741 }
742
743 xfs_ilock(ip, XFS_ILOCK_EXCL);
744 xfs_trans_ijoin(tp, ip, 0);
745
746 /*
747 * Do not update the on-disk file size. If we update the on-disk file
748 * size and then the system crashes before the contents of the file are
749 * flushed to disk then the files may be full of holes (ie NULL files
750 * bug).
751 */
752 error = xfs_itruncate_extents_flags(&tp, ip, XFS_DATA_FORK,
753 XFS_ISIZE(ip), XFS_BMAPI_NODISCARD);
754 if (error)
755 goto err_cancel;
756
757 error = xfs_trans_commit(tp);
758 if (error)
759 goto out_unlock;
760
761 xfs_inode_clear_eofblocks_tag(ip);
762 goto out_unlock;
763
764err_cancel:
765 /*
766 * If we get an error at this point we simply don't
767 * bother truncating the file.
768 */
769 xfs_trans_cancel(tp);
770out_unlock:
771 xfs_iunlock(ip, XFS_ILOCK_EXCL);
772 return error;
773}
774
775int
776xfs_alloc_file_space(
777 struct xfs_inode *ip,
778 xfs_off_t offset,
779 xfs_off_t len)
780{
781 xfs_mount_t *mp = ip->i_mount;
782 xfs_off_t count;
783 xfs_filblks_t allocated_fsb;
784 xfs_filblks_t allocatesize_fsb;
785 xfs_extlen_t extsz, temp;
786 xfs_fileoff_t startoffset_fsb;
787 xfs_fileoff_t endoffset_fsb;
788 int nimaps;
789 int rt;
790 xfs_trans_t *tp;
791 xfs_bmbt_irec_t imaps[1], *imapp;
792 int error;
793
794 trace_xfs_alloc_file_space(ip);
795
796 if (xfs_is_shutdown(mp))
797 return -EIO;
798
799 error = xfs_qm_dqattach(ip);
800 if (error)
801 return error;
802
803 if (len <= 0)
804 return -EINVAL;
805
806 rt = XFS_IS_REALTIME_INODE(ip);
807 extsz = xfs_get_extsz_hint(ip);
808
809 count = len;
810 imapp = &imaps[0];
811 nimaps = 1;
812 startoffset_fsb = XFS_B_TO_FSBT(mp, offset);
813 endoffset_fsb = XFS_B_TO_FSB(mp, offset + count);
814 allocatesize_fsb = endoffset_fsb - startoffset_fsb;
815
816 /*
817 * Allocate file space until done or until there is an error
818 */
819 while (allocatesize_fsb && !error) {
820 xfs_fileoff_t s, e;
821 unsigned int dblocks, rblocks, resblks;
822
823 /*
824 * Determine space reservations for data/realtime.
825 */
826 if (unlikely(extsz)) {
827 s = startoffset_fsb;
828 do_div(s, extsz);
829 s *= extsz;
830 e = startoffset_fsb + allocatesize_fsb;
831 div_u64_rem(startoffset_fsb, extsz, &temp);
832 if (temp)
833 e += temp;
834 div_u64_rem(e, extsz, &temp);
835 if (temp)
836 e += extsz - temp;
837 } else {
838 s = 0;
839 e = allocatesize_fsb;
840 }
841
842 /*
843 * The transaction reservation is limited to a 32-bit block
844 * count, hence we need to limit the number of blocks we are
845 * trying to reserve to avoid an overflow. We can't allocate
846 * more than @nimaps extents, and an extent is limited on disk
847 * to XFS_BMBT_MAX_EXTLEN (21 bits), so use that to enforce the
848 * limit.
849 */
850 resblks = min_t(xfs_fileoff_t, (e - s),
851 (XFS_MAX_BMBT_EXTLEN * nimaps));
852 if (unlikely(rt)) {
853 dblocks = XFS_DIOSTRAT_SPACE_RES(mp, 0);
854 rblocks = resblks;
855 } else {
856 dblocks = XFS_DIOSTRAT_SPACE_RES(mp, resblks);
857 rblocks = 0;
858 }
859
860 error = xfs_trans_alloc_inode(ip, &M_RES(mp)->tr_write,
861 dblocks, rblocks, false, &tp);
862 if (error)
863 break;
864
865 error = xfs_iext_count_may_overflow(ip, XFS_DATA_FORK,
866 XFS_IEXT_ADD_NOSPLIT_CNT);
867 if (error == -EFBIG)
868 error = xfs_iext_count_upgrade(tp, ip,
869 XFS_IEXT_ADD_NOSPLIT_CNT);
870 if (error)
871 goto error;
872
873 error = xfs_bmapi_write(tp, ip, startoffset_fsb,
874 allocatesize_fsb, XFS_BMAPI_PREALLOC, 0, imapp,
875 &nimaps);
876 if (error)
877 goto error;
878
879 ip->i_diflags |= XFS_DIFLAG_PREALLOC;
880 xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
881
882 error = xfs_trans_commit(tp);
883 xfs_iunlock(ip, XFS_ILOCK_EXCL);
884 if (error)
885 break;
886
887 allocated_fsb = imapp->br_blockcount;
888
889 if (nimaps == 0) {
890 error = -ENOSPC;
891 break;
892 }
893
894 startoffset_fsb += allocated_fsb;
895 allocatesize_fsb -= allocated_fsb;
896 }
897
898 return error;
899
900error:
901 xfs_trans_cancel(tp);
902 xfs_iunlock(ip, XFS_ILOCK_EXCL);
903 return error;
904}
905
906static int
907xfs_unmap_extent(
908 struct xfs_inode *ip,
909 xfs_fileoff_t startoffset_fsb,
910 xfs_filblks_t len_fsb,
911 int *done)
912{
913 struct xfs_mount *mp = ip->i_mount;
914 struct xfs_trans *tp;
915 uint resblks = XFS_DIOSTRAT_SPACE_RES(mp, 0);
916 int error;
917
918 error = xfs_trans_alloc_inode(ip, &M_RES(mp)->tr_write, resblks, 0,
919 false, &tp);
920 if (error)
921 return error;
922
923 error = xfs_iext_count_may_overflow(ip, XFS_DATA_FORK,
924 XFS_IEXT_PUNCH_HOLE_CNT);
925 if (error == -EFBIG)
926 error = xfs_iext_count_upgrade(tp, ip, XFS_IEXT_PUNCH_HOLE_CNT);
927 if (error)
928 goto out_trans_cancel;
929
930 error = xfs_bunmapi(tp, ip, startoffset_fsb, len_fsb, 0, 2, done);
931 if (error)
932 goto out_trans_cancel;
933
934 error = xfs_trans_commit(tp);
935out_unlock:
936 xfs_iunlock(ip, XFS_ILOCK_EXCL);
937 return error;
938
939out_trans_cancel:
940 xfs_trans_cancel(tp);
941 goto out_unlock;
942}
943
944/* Caller must first wait for the completion of any pending DIOs if required. */
945int
946xfs_flush_unmap_range(
947 struct xfs_inode *ip,
948 xfs_off_t offset,
949 xfs_off_t len)
950{
951 struct xfs_mount *mp = ip->i_mount;
952 struct inode *inode = VFS_I(ip);
953 xfs_off_t rounding, start, end;
954 int error;
955
956 rounding = max_t(xfs_off_t, mp->m_sb.sb_blocksize, PAGE_SIZE);
957 start = round_down(offset, rounding);
958 end = round_up(offset + len, rounding) - 1;
959
960 error = filemap_write_and_wait_range(inode->i_mapping, start, end);
961 if (error)
962 return error;
963 truncate_pagecache_range(inode, start, end);
964 return 0;
965}
966
967int
968xfs_free_file_space(
969 struct xfs_inode *ip,
970 xfs_off_t offset,
971 xfs_off_t len)
972{
973 struct xfs_mount *mp = ip->i_mount;
974 xfs_fileoff_t startoffset_fsb;
975 xfs_fileoff_t endoffset_fsb;
976 int done = 0, error;
977
978 trace_xfs_free_file_space(ip);
979
980 error = xfs_qm_dqattach(ip);
981 if (error)
982 return error;
983
984 if (len <= 0) /* if nothing being freed */
985 return 0;
986
987 startoffset_fsb = XFS_B_TO_FSB(mp, offset);
988 endoffset_fsb = XFS_B_TO_FSBT(mp, offset + len);
989
990 /* We can only free complete realtime extents. */
991 if (XFS_IS_REALTIME_INODE(ip) && mp->m_sb.sb_rextsize > 1) {
992 startoffset_fsb = roundup_64(startoffset_fsb,
993 mp->m_sb.sb_rextsize);
994 endoffset_fsb = rounddown_64(endoffset_fsb,
995 mp->m_sb.sb_rextsize);
996 }
997
998 /*
999 * Need to zero the stuff we're not freeing, on disk.
1000 */
1001 if (endoffset_fsb > startoffset_fsb) {
1002 while (!done) {
1003 error = xfs_unmap_extent(ip, startoffset_fsb,
1004 endoffset_fsb - startoffset_fsb, &done);
1005 if (error)
1006 return error;
1007 }
1008 }
1009
1010 /*
1011 * Now that we've unmap all full blocks we'll have to zero out any
1012 * partial block at the beginning and/or end. xfs_zero_range is smart
1013 * enough to skip any holes, including those we just created, but we
1014 * must take care not to zero beyond EOF and enlarge i_size.
1015 */
1016 if (offset >= XFS_ISIZE(ip))
1017 return 0;
1018 if (offset + len > XFS_ISIZE(ip))
1019 len = XFS_ISIZE(ip) - offset;
1020 error = xfs_zero_range(ip, offset, len, NULL);
1021 if (error)
1022 return error;
1023
1024 /*
1025 * If we zeroed right up to EOF and EOF straddles a page boundary we
1026 * must make sure that the post-EOF area is also zeroed because the
1027 * page could be mmap'd and xfs_zero_range doesn't do that for us.
1028 * Writeback of the eof page will do this, albeit clumsily.
1029 */
1030 if (offset + len >= XFS_ISIZE(ip) && offset_in_page(offset + len) > 0) {
1031 error = filemap_write_and_wait_range(VFS_I(ip)->i_mapping,
1032 round_down(offset + len, PAGE_SIZE), LLONG_MAX);
1033 }
1034
1035 return error;
1036}
1037
1038static int
1039xfs_prepare_shift(
1040 struct xfs_inode *ip,
1041 loff_t offset)
1042{
1043 struct xfs_mount *mp = ip->i_mount;
1044 int error;
1045
1046 /*
1047 * Trim eofblocks to avoid shifting uninitialized post-eof preallocation
1048 * into the accessible region of the file.
1049 */
1050 if (xfs_can_free_eofblocks(ip, true)) {
1051 error = xfs_free_eofblocks(ip);
1052 if (error)
1053 return error;
1054 }
1055
1056 /*
1057 * Shift operations must stabilize the start block offset boundary along
1058 * with the full range of the operation. If we don't, a COW writeback
1059 * completion could race with an insert, front merge with the start
1060 * extent (after split) during the shift and corrupt the file. Start
1061 * with the block just prior to the start to stabilize the boundary.
1062 */
1063 offset = round_down(offset, mp->m_sb.sb_blocksize);
1064 if (offset)
1065 offset -= mp->m_sb.sb_blocksize;
1066
1067 /*
1068 * Writeback and invalidate cache for the remainder of the file as we're
1069 * about to shift down every extent from offset to EOF.
1070 */
1071 error = xfs_flush_unmap_range(ip, offset, XFS_ISIZE(ip));
1072 if (error)
1073 return error;
1074
1075 /*
1076 * Clean out anything hanging around in the cow fork now that
1077 * we've flushed all the dirty data out to disk to avoid having
1078 * CoW extents at the wrong offsets.
1079 */
1080 if (xfs_inode_has_cow_data(ip)) {
1081 error = xfs_reflink_cancel_cow_range(ip, offset, NULLFILEOFF,
1082 true);
1083 if (error)
1084 return error;
1085 }
1086
1087 return 0;
1088}
1089
1090/*
1091 * xfs_collapse_file_space()
1092 * This routine frees disk space and shift extent for the given file.
1093 * The first thing we do is to free data blocks in the specified range
1094 * by calling xfs_free_file_space(). It would also sync dirty data
1095 * and invalidate page cache over the region on which collapse range
1096 * is working. And Shift extent records to the left to cover a hole.
1097 * RETURNS:
1098 * 0 on success
1099 * errno on error
1100 *
1101 */
1102int
1103xfs_collapse_file_space(
1104 struct xfs_inode *ip,
1105 xfs_off_t offset,
1106 xfs_off_t len)
1107{
1108 struct xfs_mount *mp = ip->i_mount;
1109 struct xfs_trans *tp;
1110 int error;
1111 xfs_fileoff_t next_fsb = XFS_B_TO_FSB(mp, offset + len);
1112 xfs_fileoff_t shift_fsb = XFS_B_TO_FSB(mp, len);
1113 bool done = false;
1114
1115 ASSERT(xfs_isilocked(ip, XFS_IOLOCK_EXCL));
1116 ASSERT(xfs_isilocked(ip, XFS_MMAPLOCK_EXCL));
1117
1118 trace_xfs_collapse_file_space(ip);
1119
1120 error = xfs_free_file_space(ip, offset, len);
1121 if (error)
1122 return error;
1123
1124 error = xfs_prepare_shift(ip, offset);
1125 if (error)
1126 return error;
1127
1128 error = xfs_trans_alloc(mp, &M_RES(mp)->tr_write, 0, 0, 0, &tp);
1129 if (error)
1130 return error;
1131
1132 xfs_ilock(ip, XFS_ILOCK_EXCL);
1133 xfs_trans_ijoin(tp, ip, 0);
1134
1135 while (!done) {
1136 error = xfs_bmap_collapse_extents(tp, ip, &next_fsb, shift_fsb,
1137 &done);
1138 if (error)
1139 goto out_trans_cancel;
1140 if (done)
1141 break;
1142
1143 /* finish any deferred frees and roll the transaction */
1144 error = xfs_defer_finish(&tp);
1145 if (error)
1146 goto out_trans_cancel;
1147 }
1148
1149 error = xfs_trans_commit(tp);
1150 xfs_iunlock(ip, XFS_ILOCK_EXCL);
1151 return error;
1152
1153out_trans_cancel:
1154 xfs_trans_cancel(tp);
1155 xfs_iunlock(ip, XFS_ILOCK_EXCL);
1156 return error;
1157}
1158
1159/*
1160 * xfs_insert_file_space()
1161 * This routine create hole space by shifting extents for the given file.
1162 * The first thing we do is to sync dirty data and invalidate page cache
1163 * over the region on which insert range is working. And split an extent
1164 * to two extents at given offset by calling xfs_bmap_split_extent.
1165 * And shift all extent records which are laying between [offset,
1166 * last allocated extent] to the right to reserve hole range.
1167 * RETURNS:
1168 * 0 on success
1169 * errno on error
1170 */
1171int
1172xfs_insert_file_space(
1173 struct xfs_inode *ip,
1174 loff_t offset,
1175 loff_t len)
1176{
1177 struct xfs_mount *mp = ip->i_mount;
1178 struct xfs_trans *tp;
1179 int error;
1180 xfs_fileoff_t stop_fsb = XFS_B_TO_FSB(mp, offset);
1181 xfs_fileoff_t next_fsb = NULLFSBLOCK;
1182 xfs_fileoff_t shift_fsb = XFS_B_TO_FSB(mp, len);
1183 bool done = false;
1184
1185 ASSERT(xfs_isilocked(ip, XFS_IOLOCK_EXCL));
1186 ASSERT(xfs_isilocked(ip, XFS_MMAPLOCK_EXCL));
1187
1188 trace_xfs_insert_file_space(ip);
1189
1190 error = xfs_bmap_can_insert_extents(ip, stop_fsb, shift_fsb);
1191 if (error)
1192 return error;
1193
1194 error = xfs_prepare_shift(ip, offset);
1195 if (error)
1196 return error;
1197
1198 error = xfs_trans_alloc(mp, &M_RES(mp)->tr_write,
1199 XFS_DIOSTRAT_SPACE_RES(mp, 0), 0, 0, &tp);
1200 if (error)
1201 return error;
1202
1203 xfs_ilock(ip, XFS_ILOCK_EXCL);
1204 xfs_trans_ijoin(tp, ip, 0);
1205
1206 error = xfs_iext_count_may_overflow(ip, XFS_DATA_FORK,
1207 XFS_IEXT_PUNCH_HOLE_CNT);
1208 if (error == -EFBIG)
1209 error = xfs_iext_count_upgrade(tp, ip, XFS_IEXT_PUNCH_HOLE_CNT);
1210 if (error)
1211 goto out_trans_cancel;
1212
1213 /*
1214 * The extent shifting code works on extent granularity. So, if stop_fsb
1215 * is not the starting block of extent, we need to split the extent at
1216 * stop_fsb.
1217 */
1218 error = xfs_bmap_split_extent(tp, ip, stop_fsb);
1219 if (error)
1220 goto out_trans_cancel;
1221
1222 do {
1223 error = xfs_defer_finish(&tp);
1224 if (error)
1225 goto out_trans_cancel;
1226
1227 error = xfs_bmap_insert_extents(tp, ip, &next_fsb, shift_fsb,
1228 &done, stop_fsb);
1229 if (error)
1230 goto out_trans_cancel;
1231 } while (!done);
1232
1233 error = xfs_trans_commit(tp);
1234 xfs_iunlock(ip, XFS_ILOCK_EXCL);
1235 return error;
1236
1237out_trans_cancel:
1238 xfs_trans_cancel(tp);
1239 xfs_iunlock(ip, XFS_ILOCK_EXCL);
1240 return error;
1241}
1242
1243/*
1244 * We need to check that the format of the data fork in the temporary inode is
1245 * valid for the target inode before doing the swap. This is not a problem with
1246 * attr1 because of the fixed fork offset, but attr2 has a dynamically sized
1247 * data fork depending on the space the attribute fork is taking so we can get
1248 * invalid formats on the target inode.
1249 *
1250 * E.g. target has space for 7 extents in extent format, temp inode only has
1251 * space for 6. If we defragment down to 7 extents, then the tmp format is a
1252 * btree, but when swapped it needs to be in extent format. Hence we can't just
1253 * blindly swap data forks on attr2 filesystems.
1254 *
1255 * Note that we check the swap in both directions so that we don't end up with
1256 * a corrupt temporary inode, either.
1257 *
1258 * Note that fixing the way xfs_fsr sets up the attribute fork in the source
1259 * inode will prevent this situation from occurring, so all we do here is
1260 * reject and log the attempt. basically we are putting the responsibility on
1261 * userspace to get this right.
1262 */
1263static int
1264xfs_swap_extents_check_format(
1265 struct xfs_inode *ip, /* target inode */
1266 struct xfs_inode *tip) /* tmp inode */
1267{
1268 struct xfs_ifork *ifp = &ip->i_df;
1269 struct xfs_ifork *tifp = &tip->i_df;
1270
1271 /* User/group/project quota ids must match if quotas are enforced. */
1272 if (XFS_IS_QUOTA_ON(ip->i_mount) &&
1273 (!uid_eq(VFS_I(ip)->i_uid, VFS_I(tip)->i_uid) ||
1274 !gid_eq(VFS_I(ip)->i_gid, VFS_I(tip)->i_gid) ||
1275 ip->i_projid != tip->i_projid))
1276 return -EINVAL;
1277
1278 /* Should never get a local format */
1279 if (ifp->if_format == XFS_DINODE_FMT_LOCAL ||
1280 tifp->if_format == XFS_DINODE_FMT_LOCAL)
1281 return -EINVAL;
1282
1283 /*
1284 * if the target inode has less extents that then temporary inode then
1285 * why did userspace call us?
1286 */
1287 if (ifp->if_nextents < tifp->if_nextents)
1288 return -EINVAL;
1289
1290 /*
1291 * If we have to use the (expensive) rmap swap method, we can
1292 * handle any number of extents and any format.
1293 */
1294 if (xfs_has_rmapbt(ip->i_mount))
1295 return 0;
1296
1297 /*
1298 * if the target inode is in extent form and the temp inode is in btree
1299 * form then we will end up with the target inode in the wrong format
1300 * as we already know there are less extents in the temp inode.
1301 */
1302 if (ifp->if_format == XFS_DINODE_FMT_EXTENTS &&
1303 tifp->if_format == XFS_DINODE_FMT_BTREE)
1304 return -EINVAL;
1305
1306 /* Check temp in extent form to max in target */
1307 if (tifp->if_format == XFS_DINODE_FMT_EXTENTS &&
1308 tifp->if_nextents > XFS_IFORK_MAXEXT(ip, XFS_DATA_FORK))
1309 return -EINVAL;
1310
1311 /* Check target in extent form to max in temp */
1312 if (ifp->if_format == XFS_DINODE_FMT_EXTENTS &&
1313 ifp->if_nextents > XFS_IFORK_MAXEXT(tip, XFS_DATA_FORK))
1314 return -EINVAL;
1315
1316 /*
1317 * If we are in a btree format, check that the temp root block will fit
1318 * in the target and that it has enough extents to be in btree format
1319 * in the target.
1320 *
1321 * Note that we have to be careful to allow btree->extent conversions
1322 * (a common defrag case) which will occur when the temp inode is in
1323 * extent format...
1324 */
1325 if (tifp->if_format == XFS_DINODE_FMT_BTREE) {
1326 if (xfs_inode_has_attr_fork(ip) &&
1327 XFS_BMAP_BMDR_SPACE(tifp->if_broot) > xfs_inode_fork_boff(ip))
1328 return -EINVAL;
1329 if (tifp->if_nextents <= XFS_IFORK_MAXEXT(ip, XFS_DATA_FORK))
1330 return -EINVAL;
1331 }
1332
1333 /* Reciprocal target->temp btree format checks */
1334 if (ifp->if_format == XFS_DINODE_FMT_BTREE) {
1335 if (xfs_inode_has_attr_fork(tip) &&
1336 XFS_BMAP_BMDR_SPACE(ip->i_df.if_broot) > xfs_inode_fork_boff(tip))
1337 return -EINVAL;
1338 if (ifp->if_nextents <= XFS_IFORK_MAXEXT(tip, XFS_DATA_FORK))
1339 return -EINVAL;
1340 }
1341
1342 return 0;
1343}
1344
1345static int
1346xfs_swap_extent_flush(
1347 struct xfs_inode *ip)
1348{
1349 int error;
1350
1351 error = filemap_write_and_wait(VFS_I(ip)->i_mapping);
1352 if (error)
1353 return error;
1354 truncate_pagecache_range(VFS_I(ip), 0, -1);
1355
1356 /* Verify O_DIRECT for ftmp */
1357 if (VFS_I(ip)->i_mapping->nrpages)
1358 return -EINVAL;
1359 return 0;
1360}
1361
1362/*
1363 * Move extents from one file to another, when rmap is enabled.
1364 */
1365STATIC int
1366xfs_swap_extent_rmap(
1367 struct xfs_trans **tpp,
1368 struct xfs_inode *ip,
1369 struct xfs_inode *tip)
1370{
1371 struct xfs_trans *tp = *tpp;
1372 struct xfs_bmbt_irec irec;
1373 struct xfs_bmbt_irec uirec;
1374 struct xfs_bmbt_irec tirec;
1375 xfs_fileoff_t offset_fsb;
1376 xfs_fileoff_t end_fsb;
1377 xfs_filblks_t count_fsb;
1378 int error;
1379 xfs_filblks_t ilen;
1380 xfs_filblks_t rlen;
1381 int nimaps;
1382 uint64_t tip_flags2;
1383
1384 /*
1385 * If the source file has shared blocks, we must flag the donor
1386 * file as having shared blocks so that we get the shared-block
1387 * rmap functions when we go to fix up the rmaps. The flags
1388 * will be switch for reals later.
1389 */
1390 tip_flags2 = tip->i_diflags2;
1391 if (ip->i_diflags2 & XFS_DIFLAG2_REFLINK)
1392 tip->i_diflags2 |= XFS_DIFLAG2_REFLINK;
1393
1394 offset_fsb = 0;
1395 end_fsb = XFS_B_TO_FSB(ip->i_mount, i_size_read(VFS_I(ip)));
1396 count_fsb = (xfs_filblks_t)(end_fsb - offset_fsb);
1397
1398 while (count_fsb) {
1399 /* Read extent from the donor file */
1400 nimaps = 1;
1401 error = xfs_bmapi_read(tip, offset_fsb, count_fsb, &tirec,
1402 &nimaps, 0);
1403 if (error)
1404 goto out;
1405 ASSERT(nimaps == 1);
1406 ASSERT(tirec.br_startblock != DELAYSTARTBLOCK);
1407
1408 trace_xfs_swap_extent_rmap_remap(tip, &tirec);
1409 ilen = tirec.br_blockcount;
1410
1411 /* Unmap the old blocks in the source file. */
1412 while (tirec.br_blockcount) {
1413 ASSERT(tp->t_firstblock == NULLFSBLOCK);
1414 trace_xfs_swap_extent_rmap_remap_piece(tip, &tirec);
1415
1416 /* Read extent from the source file */
1417 nimaps = 1;
1418 error = xfs_bmapi_read(ip, tirec.br_startoff,
1419 tirec.br_blockcount, &irec,
1420 &nimaps, 0);
1421 if (error)
1422 goto out;
1423 ASSERT(nimaps == 1);
1424 ASSERT(tirec.br_startoff == irec.br_startoff);
1425 trace_xfs_swap_extent_rmap_remap_piece(ip, &irec);
1426
1427 /* Trim the extent. */
1428 uirec = tirec;
1429 uirec.br_blockcount = rlen = min_t(xfs_filblks_t,
1430 tirec.br_blockcount,
1431 irec.br_blockcount);
1432 trace_xfs_swap_extent_rmap_remap_piece(tip, &uirec);
1433
1434 if (xfs_bmap_is_real_extent(&uirec)) {
1435 error = xfs_iext_count_may_overflow(ip,
1436 XFS_DATA_FORK,
1437 XFS_IEXT_SWAP_RMAP_CNT);
1438 if (error == -EFBIG)
1439 error = xfs_iext_count_upgrade(tp, ip,
1440 XFS_IEXT_SWAP_RMAP_CNT);
1441 if (error)
1442 goto out;
1443 }
1444
1445 if (xfs_bmap_is_real_extent(&irec)) {
1446 error = xfs_iext_count_may_overflow(tip,
1447 XFS_DATA_FORK,
1448 XFS_IEXT_SWAP_RMAP_CNT);
1449 if (error == -EFBIG)
1450 error = xfs_iext_count_upgrade(tp, ip,
1451 XFS_IEXT_SWAP_RMAP_CNT);
1452 if (error)
1453 goto out;
1454 }
1455
1456 /* Remove the mapping from the donor file. */
1457 xfs_bmap_unmap_extent(tp, tip, &uirec);
1458
1459 /* Remove the mapping from the source file. */
1460 xfs_bmap_unmap_extent(tp, ip, &irec);
1461
1462 /* Map the donor file's blocks into the source file. */
1463 xfs_bmap_map_extent(tp, ip, &uirec);
1464
1465 /* Map the source file's blocks into the donor file. */
1466 xfs_bmap_map_extent(tp, tip, &irec);
1467
1468 error = xfs_defer_finish(tpp);
1469 tp = *tpp;
1470 if (error)
1471 goto out;
1472
1473 tirec.br_startoff += rlen;
1474 if (tirec.br_startblock != HOLESTARTBLOCK &&
1475 tirec.br_startblock != DELAYSTARTBLOCK)
1476 tirec.br_startblock += rlen;
1477 tirec.br_blockcount -= rlen;
1478 }
1479
1480 /* Roll on... */
1481 count_fsb -= ilen;
1482 offset_fsb += ilen;
1483 }
1484
1485 tip->i_diflags2 = tip_flags2;
1486 return 0;
1487
1488out:
1489 trace_xfs_swap_extent_rmap_error(ip, error, _RET_IP_);
1490 tip->i_diflags2 = tip_flags2;
1491 return error;
1492}
1493
1494/* Swap the extents of two files by swapping data forks. */
1495STATIC int
1496xfs_swap_extent_forks(
1497 struct xfs_trans *tp,
1498 struct xfs_inode *ip,
1499 struct xfs_inode *tip,
1500 int *src_log_flags,
1501 int *target_log_flags)
1502{
1503 xfs_filblks_t aforkblks = 0;
1504 xfs_filblks_t taforkblks = 0;
1505 xfs_extnum_t junk;
1506 uint64_t tmp;
1507 int error;
1508
1509 /*
1510 * Count the number of extended attribute blocks
1511 */
1512 if (xfs_inode_has_attr_fork(ip) && ip->i_af.if_nextents > 0 &&
1513 ip->i_af.if_format != XFS_DINODE_FMT_LOCAL) {
1514 error = xfs_bmap_count_blocks(tp, ip, XFS_ATTR_FORK, &junk,
1515 &aforkblks);
1516 if (error)
1517 return error;
1518 }
1519 if (xfs_inode_has_attr_fork(tip) && tip->i_af.if_nextents > 0 &&
1520 tip->i_af.if_format != XFS_DINODE_FMT_LOCAL) {
1521 error = xfs_bmap_count_blocks(tp, tip, XFS_ATTR_FORK, &junk,
1522 &taforkblks);
1523 if (error)
1524 return error;
1525 }
1526
1527 /*
1528 * Btree format (v3) inodes have the inode number stamped in the bmbt
1529 * block headers. We can't start changing the bmbt blocks until the
1530 * inode owner change is logged so recovery does the right thing in the
1531 * event of a crash. Set the owner change log flags now and leave the
1532 * bmbt scan as the last step.
1533 */
1534 if (xfs_has_v3inodes(ip->i_mount)) {
1535 if (ip->i_df.if_format == XFS_DINODE_FMT_BTREE)
1536 (*target_log_flags) |= XFS_ILOG_DOWNER;
1537 if (tip->i_df.if_format == XFS_DINODE_FMT_BTREE)
1538 (*src_log_flags) |= XFS_ILOG_DOWNER;
1539 }
1540
1541 /*
1542 * Swap the data forks of the inodes
1543 */
1544 swap(ip->i_df, tip->i_df);
1545
1546 /*
1547 * Fix the on-disk inode values
1548 */
1549 tmp = (uint64_t)ip->i_nblocks;
1550 ip->i_nblocks = tip->i_nblocks - taforkblks + aforkblks;
1551 tip->i_nblocks = tmp + taforkblks - aforkblks;
1552
1553 /*
1554 * The extents in the source inode could still contain speculative
1555 * preallocation beyond EOF (e.g. the file is open but not modified
1556 * while defrag is in progress). In that case, we need to copy over the
1557 * number of delalloc blocks the data fork in the source inode is
1558 * tracking beyond EOF so that when the fork is truncated away when the
1559 * temporary inode is unlinked we don't underrun the i_delayed_blks
1560 * counter on that inode.
1561 */
1562 ASSERT(tip->i_delayed_blks == 0);
1563 tip->i_delayed_blks = ip->i_delayed_blks;
1564 ip->i_delayed_blks = 0;
1565
1566 switch (ip->i_df.if_format) {
1567 case XFS_DINODE_FMT_EXTENTS:
1568 (*src_log_flags) |= XFS_ILOG_DEXT;
1569 break;
1570 case XFS_DINODE_FMT_BTREE:
1571 ASSERT(!xfs_has_v3inodes(ip->i_mount) ||
1572 (*src_log_flags & XFS_ILOG_DOWNER));
1573 (*src_log_flags) |= XFS_ILOG_DBROOT;
1574 break;
1575 }
1576
1577 switch (tip->i_df.if_format) {
1578 case XFS_DINODE_FMT_EXTENTS:
1579 (*target_log_flags) |= XFS_ILOG_DEXT;
1580 break;
1581 case XFS_DINODE_FMT_BTREE:
1582 (*target_log_flags) |= XFS_ILOG_DBROOT;
1583 ASSERT(!xfs_has_v3inodes(ip->i_mount) ||
1584 (*target_log_flags & XFS_ILOG_DOWNER));
1585 break;
1586 }
1587
1588 return 0;
1589}
1590
1591/*
1592 * Fix up the owners of the bmbt blocks to refer to the current inode. The
1593 * change owner scan attempts to order all modified buffers in the current
1594 * transaction. In the event of ordered buffer failure, the offending buffer is
1595 * physically logged as a fallback and the scan returns -EAGAIN. We must roll
1596 * the transaction in this case to replenish the fallback log reservation and
1597 * restart the scan. This process repeats until the scan completes.
1598 */
1599static int
1600xfs_swap_change_owner(
1601 struct xfs_trans **tpp,
1602 struct xfs_inode *ip,
1603 struct xfs_inode *tmpip)
1604{
1605 int error;
1606 struct xfs_trans *tp = *tpp;
1607
1608 do {
1609 error = xfs_bmbt_change_owner(tp, ip, XFS_DATA_FORK, ip->i_ino,
1610 NULL);
1611 /* success or fatal error */
1612 if (error != -EAGAIN)
1613 break;
1614
1615 error = xfs_trans_roll(tpp);
1616 if (error)
1617 break;
1618 tp = *tpp;
1619
1620 /*
1621 * Redirty both inodes so they can relog and keep the log tail
1622 * moving forward.
1623 */
1624 xfs_trans_ijoin(tp, ip, 0);
1625 xfs_trans_ijoin(tp, tmpip, 0);
1626 xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
1627 xfs_trans_log_inode(tp, tmpip, XFS_ILOG_CORE);
1628 } while (true);
1629
1630 return error;
1631}
1632
1633int
1634xfs_swap_extents(
1635 struct xfs_inode *ip, /* target inode */
1636 struct xfs_inode *tip, /* tmp inode */
1637 struct xfs_swapext *sxp)
1638{
1639 struct xfs_mount *mp = ip->i_mount;
1640 struct xfs_trans *tp;
1641 struct xfs_bstat *sbp = &sxp->sx_stat;
1642 int src_log_flags, target_log_flags;
1643 int error = 0;
1644 uint64_t f;
1645 int resblks = 0;
1646 unsigned int flags = 0;
1647
1648 /*
1649 * Lock the inodes against other IO, page faults and truncate to
1650 * begin with. Then we can ensure the inodes are flushed and have no
1651 * page cache safely. Once we have done this we can take the ilocks and
1652 * do the rest of the checks.
1653 */
1654 lock_two_nondirectories(VFS_I(ip), VFS_I(tip));
1655 filemap_invalidate_lock_two(VFS_I(ip)->i_mapping,
1656 VFS_I(tip)->i_mapping);
1657
1658 /* Verify that both files have the same format */
1659 if ((VFS_I(ip)->i_mode & S_IFMT) != (VFS_I(tip)->i_mode & S_IFMT)) {
1660 error = -EINVAL;
1661 goto out_unlock;
1662 }
1663
1664 /* Verify both files are either real-time or non-realtime */
1665 if (XFS_IS_REALTIME_INODE(ip) != XFS_IS_REALTIME_INODE(tip)) {
1666 error = -EINVAL;
1667 goto out_unlock;
1668 }
1669
1670 error = xfs_qm_dqattach(ip);
1671 if (error)
1672 goto out_unlock;
1673
1674 error = xfs_qm_dqattach(tip);
1675 if (error)
1676 goto out_unlock;
1677
1678 error = xfs_swap_extent_flush(ip);
1679 if (error)
1680 goto out_unlock;
1681 error = xfs_swap_extent_flush(tip);
1682 if (error)
1683 goto out_unlock;
1684
1685 if (xfs_inode_has_cow_data(tip)) {
1686 error = xfs_reflink_cancel_cow_range(tip, 0, NULLFILEOFF, true);
1687 if (error)
1688 goto out_unlock;
1689 }
1690
1691 /*
1692 * Extent "swapping" with rmap requires a permanent reservation and
1693 * a block reservation because it's really just a remap operation
1694 * performed with log redo items!
1695 */
1696 if (xfs_has_rmapbt(mp)) {
1697 int w = XFS_DATA_FORK;
1698 uint32_t ipnext = ip->i_df.if_nextents;
1699 uint32_t tipnext = tip->i_df.if_nextents;
1700
1701 /*
1702 * Conceptually this shouldn't affect the shape of either bmbt,
1703 * but since we atomically move extents one by one, we reserve
1704 * enough space to rebuild both trees.
1705 */
1706 resblks = XFS_SWAP_RMAP_SPACE_RES(mp, ipnext, w);
1707 resblks += XFS_SWAP_RMAP_SPACE_RES(mp, tipnext, w);
1708
1709 /*
1710 * If either inode straddles a bmapbt block allocation boundary,
1711 * the rmapbt algorithm triggers repeated allocs and frees as
1712 * extents are remapped. This can exhaust the block reservation
1713 * prematurely and cause shutdown. Return freed blocks to the
1714 * transaction reservation to counter this behavior.
1715 */
1716 flags |= XFS_TRANS_RES_FDBLKS;
1717 }
1718 error = xfs_trans_alloc(mp, &M_RES(mp)->tr_write, resblks, 0, flags,
1719 &tp);
1720 if (error)
1721 goto out_unlock;
1722
1723 /*
1724 * Lock and join the inodes to the tansaction so that transaction commit
1725 * or cancel will unlock the inodes from this point onwards.
1726 */
1727 xfs_lock_two_inodes(ip, XFS_ILOCK_EXCL, tip, XFS_ILOCK_EXCL);
1728 xfs_trans_ijoin(tp, ip, 0);
1729 xfs_trans_ijoin(tp, tip, 0);
1730
1731
1732 /* Verify all data are being swapped */
1733 if (sxp->sx_offset != 0 ||
1734 sxp->sx_length != ip->i_disk_size ||
1735 sxp->sx_length != tip->i_disk_size) {
1736 error = -EFAULT;
1737 goto out_trans_cancel;
1738 }
1739
1740 trace_xfs_swap_extent_before(ip, 0);
1741 trace_xfs_swap_extent_before(tip, 1);
1742
1743 /* check inode formats now that data is flushed */
1744 error = xfs_swap_extents_check_format(ip, tip);
1745 if (error) {
1746 xfs_notice(mp,
1747 "%s: inode 0x%llx format is incompatible for exchanging.",
1748 __func__, ip->i_ino);
1749 goto out_trans_cancel;
1750 }
1751
1752 /*
1753 * Compare the current change & modify times with that
1754 * passed in. If they differ, we abort this swap.
1755 * This is the mechanism used to ensure the calling
1756 * process that the file was not changed out from
1757 * under it.
1758 */
1759 if ((sbp->bs_ctime.tv_sec != VFS_I(ip)->i_ctime.tv_sec) ||
1760 (sbp->bs_ctime.tv_nsec != VFS_I(ip)->i_ctime.tv_nsec) ||
1761 (sbp->bs_mtime.tv_sec != VFS_I(ip)->i_mtime.tv_sec) ||
1762 (sbp->bs_mtime.tv_nsec != VFS_I(ip)->i_mtime.tv_nsec)) {
1763 error = -EBUSY;
1764 goto out_trans_cancel;
1765 }
1766
1767 /*
1768 * Note the trickiness in setting the log flags - we set the owner log
1769 * flag on the opposite inode (i.e. the inode we are setting the new
1770 * owner to be) because once we swap the forks and log that, log
1771 * recovery is going to see the fork as owned by the swapped inode,
1772 * not the pre-swapped inodes.
1773 */
1774 src_log_flags = XFS_ILOG_CORE;
1775 target_log_flags = XFS_ILOG_CORE;
1776
1777 if (xfs_has_rmapbt(mp))
1778 error = xfs_swap_extent_rmap(&tp, ip, tip);
1779 else
1780 error = xfs_swap_extent_forks(tp, ip, tip, &src_log_flags,
1781 &target_log_flags);
1782 if (error)
1783 goto out_trans_cancel;
1784
1785 /* Do we have to swap reflink flags? */
1786 if ((ip->i_diflags2 & XFS_DIFLAG2_REFLINK) ^
1787 (tip->i_diflags2 & XFS_DIFLAG2_REFLINK)) {
1788 f = ip->i_diflags2 & XFS_DIFLAG2_REFLINK;
1789 ip->i_diflags2 &= ~XFS_DIFLAG2_REFLINK;
1790 ip->i_diflags2 |= tip->i_diflags2 & XFS_DIFLAG2_REFLINK;
1791 tip->i_diflags2 &= ~XFS_DIFLAG2_REFLINK;
1792 tip->i_diflags2 |= f & XFS_DIFLAG2_REFLINK;
1793 }
1794
1795 /* Swap the cow forks. */
1796 if (xfs_has_reflink(mp)) {
1797 ASSERT(!ip->i_cowfp ||
1798 ip->i_cowfp->if_format == XFS_DINODE_FMT_EXTENTS);
1799 ASSERT(!tip->i_cowfp ||
1800 tip->i_cowfp->if_format == XFS_DINODE_FMT_EXTENTS);
1801
1802 swap(ip->i_cowfp, tip->i_cowfp);
1803
1804 if (ip->i_cowfp && ip->i_cowfp->if_bytes)
1805 xfs_inode_set_cowblocks_tag(ip);
1806 else
1807 xfs_inode_clear_cowblocks_tag(ip);
1808 if (tip->i_cowfp && tip->i_cowfp->if_bytes)
1809 xfs_inode_set_cowblocks_tag(tip);
1810 else
1811 xfs_inode_clear_cowblocks_tag(tip);
1812 }
1813
1814 xfs_trans_log_inode(tp, ip, src_log_flags);
1815 xfs_trans_log_inode(tp, tip, target_log_flags);
1816
1817 /*
1818 * The extent forks have been swapped, but crc=1,rmapbt=0 filesystems
1819 * have inode number owner values in the bmbt blocks that still refer to
1820 * the old inode. Scan each bmbt to fix up the owner values with the
1821 * inode number of the current inode.
1822 */
1823 if (src_log_flags & XFS_ILOG_DOWNER) {
1824 error = xfs_swap_change_owner(&tp, ip, tip);
1825 if (error)
1826 goto out_trans_cancel;
1827 }
1828 if (target_log_flags & XFS_ILOG_DOWNER) {
1829 error = xfs_swap_change_owner(&tp, tip, ip);
1830 if (error)
1831 goto out_trans_cancel;
1832 }
1833
1834 /*
1835 * If this is a synchronous mount, make sure that the
1836 * transaction goes to disk before returning to the user.
1837 */
1838 if (xfs_has_wsync(mp))
1839 xfs_trans_set_sync(tp);
1840
1841 error = xfs_trans_commit(tp);
1842
1843 trace_xfs_swap_extent_after(ip, 0);
1844 trace_xfs_swap_extent_after(tip, 1);
1845
1846out_unlock_ilock:
1847 xfs_iunlock(ip, XFS_ILOCK_EXCL);
1848 xfs_iunlock(tip, XFS_ILOCK_EXCL);
1849out_unlock:
1850 filemap_invalidate_unlock_two(VFS_I(ip)->i_mapping,
1851 VFS_I(tip)->i_mapping);
1852 unlock_two_nondirectories(VFS_I(ip), VFS_I(tip));
1853 return error;
1854
1855out_trans_cancel:
1856 xfs_trans_cancel(tp);
1857 goto out_unlock_ilock;
1858}
1// SPDX-License-Identifier: GPL-2.0
2/*
3 * Copyright (c) 2000-2006 Silicon Graphics, Inc.
4 * Copyright (c) 2012 Red Hat, Inc.
5 * All Rights Reserved.
6 */
7#include "xfs.h"
8#include "xfs_fs.h"
9#include "xfs_shared.h"
10#include "xfs_format.h"
11#include "xfs_log_format.h"
12#include "xfs_trans_resv.h"
13#include "xfs_bit.h"
14#include "xfs_mount.h"
15#include "xfs_defer.h"
16#include "xfs_inode.h"
17#include "xfs_btree.h"
18#include "xfs_trans.h"
19#include "xfs_alloc.h"
20#include "xfs_bmap.h"
21#include "xfs_bmap_util.h"
22#include "xfs_bmap_btree.h"
23#include "xfs_rtalloc.h"
24#include "xfs_error.h"
25#include "xfs_quota.h"
26#include "xfs_trans_space.h"
27#include "xfs_trace.h"
28#include "xfs_icache.h"
29#include "xfs_iomap.h"
30#include "xfs_reflink.h"
31#include "xfs_rtbitmap.h"
32#include "xfs_rtgroup.h"
33
34/* Kernel only BMAP related definitions and functions */
35
36/*
37 * Convert the given file system block to a disk block. We have to treat it
38 * differently based on whether the file is a real time file or not, because the
39 * bmap code does.
40 */
41xfs_daddr_t
42xfs_fsb_to_db(struct xfs_inode *ip, xfs_fsblock_t fsb)
43{
44 if (XFS_IS_REALTIME_INODE(ip))
45 return xfs_rtb_to_daddr(ip->i_mount, fsb);
46 return XFS_FSB_TO_DADDR(ip->i_mount, fsb);
47}
48
49/*
50 * Routine to zero an extent on disk allocated to the specific inode.
51 */
52int
53xfs_zero_extent(
54 struct xfs_inode *ip,
55 xfs_fsblock_t start_fsb,
56 xfs_off_t count_fsb)
57{
58 return blkdev_issue_zeroout(xfs_inode_buftarg(ip)->bt_bdev,
59 xfs_fsb_to_db(ip, start_fsb),
60 XFS_FSB_TO_BB(ip->i_mount, count_fsb),
61 GFP_KERNEL, 0);
62}
63
64/*
65 * Extent tree block counting routines.
66 */
67
68/*
69 * Count leaf blocks given a range of extent records. Delayed allocation
70 * extents are not counted towards the totals.
71 */
72xfs_extnum_t
73xfs_bmap_count_leaves(
74 struct xfs_ifork *ifp,
75 xfs_filblks_t *count)
76{
77 struct xfs_iext_cursor icur;
78 struct xfs_bmbt_irec got;
79 xfs_extnum_t numrecs = 0;
80
81 for_each_xfs_iext(ifp, &icur, &got) {
82 if (!isnullstartblock(got.br_startblock)) {
83 *count += got.br_blockcount;
84 numrecs++;
85 }
86 }
87
88 return numrecs;
89}
90
91/*
92 * Count fsblocks of the given fork. Delayed allocation extents are
93 * not counted towards the totals.
94 */
95int
96xfs_bmap_count_blocks(
97 struct xfs_trans *tp,
98 struct xfs_inode *ip,
99 int whichfork,
100 xfs_extnum_t *nextents,
101 xfs_filblks_t *count)
102{
103 struct xfs_mount *mp = ip->i_mount;
104 struct xfs_ifork *ifp = xfs_ifork_ptr(ip, whichfork);
105 struct xfs_btree_cur *cur;
106 xfs_filblks_t btblocks = 0;
107 int error;
108
109 *nextents = 0;
110 *count = 0;
111
112 if (!ifp)
113 return 0;
114
115 switch (ifp->if_format) {
116 case XFS_DINODE_FMT_BTREE:
117 error = xfs_iread_extents(tp, ip, whichfork);
118 if (error)
119 return error;
120
121 cur = xfs_bmbt_init_cursor(mp, tp, ip, whichfork);
122 error = xfs_btree_count_blocks(cur, &btblocks);
123 xfs_btree_del_cursor(cur, error);
124 if (error)
125 return error;
126
127 /*
128 * xfs_btree_count_blocks includes the root block contained in
129 * the inode fork in @btblocks, so subtract one because we're
130 * only interested in allocated disk blocks.
131 */
132 *count += btblocks - 1;
133
134 fallthrough;
135 case XFS_DINODE_FMT_EXTENTS:
136 *nextents = xfs_bmap_count_leaves(ifp, count);
137 break;
138 }
139
140 return 0;
141}
142
143static int
144xfs_getbmap_report_one(
145 struct xfs_inode *ip,
146 struct getbmapx *bmv,
147 struct kgetbmap *out,
148 int64_t bmv_end,
149 struct xfs_bmbt_irec *got)
150{
151 struct kgetbmap *p = out + bmv->bmv_entries;
152 bool shared = false;
153 int error;
154
155 error = xfs_reflink_trim_around_shared(ip, got, &shared);
156 if (error)
157 return error;
158
159 if (isnullstartblock(got->br_startblock) ||
160 got->br_startblock == DELAYSTARTBLOCK) {
161 /*
162 * Take the flush completion as being a point-in-time snapshot
163 * where there are no delalloc extents, and if any new ones
164 * have been created racily, just skip them as being 'after'
165 * the flush and so don't get reported.
166 */
167 if (!(bmv->bmv_iflags & BMV_IF_DELALLOC))
168 return 0;
169
170 p->bmv_oflags |= BMV_OF_DELALLOC;
171 p->bmv_block = -2;
172 } else {
173 p->bmv_block = xfs_fsb_to_db(ip, got->br_startblock);
174 }
175
176 if (got->br_state == XFS_EXT_UNWRITTEN &&
177 (bmv->bmv_iflags & BMV_IF_PREALLOC))
178 p->bmv_oflags |= BMV_OF_PREALLOC;
179
180 if (shared)
181 p->bmv_oflags |= BMV_OF_SHARED;
182
183 p->bmv_offset = XFS_FSB_TO_BB(ip->i_mount, got->br_startoff);
184 p->bmv_length = XFS_FSB_TO_BB(ip->i_mount, got->br_blockcount);
185
186 bmv->bmv_offset = p->bmv_offset + p->bmv_length;
187 bmv->bmv_length = max(0LL, bmv_end - bmv->bmv_offset);
188 bmv->bmv_entries++;
189 return 0;
190}
191
192static void
193xfs_getbmap_report_hole(
194 struct xfs_inode *ip,
195 struct getbmapx *bmv,
196 struct kgetbmap *out,
197 int64_t bmv_end,
198 xfs_fileoff_t bno,
199 xfs_fileoff_t end)
200{
201 struct kgetbmap *p = out + bmv->bmv_entries;
202
203 if (bmv->bmv_iflags & BMV_IF_NO_HOLES)
204 return;
205
206 p->bmv_block = -1;
207 p->bmv_offset = XFS_FSB_TO_BB(ip->i_mount, bno);
208 p->bmv_length = XFS_FSB_TO_BB(ip->i_mount, end - bno);
209
210 bmv->bmv_offset = p->bmv_offset + p->bmv_length;
211 bmv->bmv_length = max(0LL, bmv_end - bmv->bmv_offset);
212 bmv->bmv_entries++;
213}
214
215static inline bool
216xfs_getbmap_full(
217 struct getbmapx *bmv)
218{
219 return bmv->bmv_length == 0 || bmv->bmv_entries >= bmv->bmv_count - 1;
220}
221
222static bool
223xfs_getbmap_next_rec(
224 struct xfs_bmbt_irec *rec,
225 xfs_fileoff_t total_end)
226{
227 xfs_fileoff_t end = rec->br_startoff + rec->br_blockcount;
228
229 if (end == total_end)
230 return false;
231
232 rec->br_startoff += rec->br_blockcount;
233 if (!isnullstartblock(rec->br_startblock) &&
234 rec->br_startblock != DELAYSTARTBLOCK)
235 rec->br_startblock += rec->br_blockcount;
236 rec->br_blockcount = total_end - end;
237 return true;
238}
239
240/*
241 * Get inode's extents as described in bmv, and format for output.
242 * Calls formatter to fill the user's buffer until all extents
243 * are mapped, until the passed-in bmv->bmv_count slots have
244 * been filled, or until the formatter short-circuits the loop,
245 * if it is tracking filled-in extents on its own.
246 */
247int /* error code */
248xfs_getbmap(
249 struct xfs_inode *ip,
250 struct getbmapx *bmv, /* user bmap structure */
251 struct kgetbmap *out)
252{
253 struct xfs_mount *mp = ip->i_mount;
254 int iflags = bmv->bmv_iflags;
255 int whichfork, lock, error = 0;
256 int64_t bmv_end, max_len;
257 xfs_fileoff_t bno, first_bno;
258 struct xfs_ifork *ifp;
259 struct xfs_bmbt_irec got, rec;
260 xfs_filblks_t len;
261 struct xfs_iext_cursor icur;
262
263 if (bmv->bmv_iflags & ~BMV_IF_VALID)
264 return -EINVAL;
265#ifndef DEBUG
266 /* Only allow CoW fork queries if we're debugging. */
267 if (iflags & BMV_IF_COWFORK)
268 return -EINVAL;
269#endif
270 if ((iflags & BMV_IF_ATTRFORK) && (iflags & BMV_IF_COWFORK))
271 return -EINVAL;
272
273 if (bmv->bmv_length < -1)
274 return -EINVAL;
275 bmv->bmv_entries = 0;
276 if (bmv->bmv_length == 0)
277 return 0;
278
279 if (iflags & BMV_IF_ATTRFORK)
280 whichfork = XFS_ATTR_FORK;
281 else if (iflags & BMV_IF_COWFORK)
282 whichfork = XFS_COW_FORK;
283 else
284 whichfork = XFS_DATA_FORK;
285
286 xfs_ilock(ip, XFS_IOLOCK_SHARED);
287 switch (whichfork) {
288 case XFS_ATTR_FORK:
289 lock = xfs_ilock_attr_map_shared(ip);
290 if (!xfs_inode_has_attr_fork(ip))
291 goto out_unlock_ilock;
292
293 max_len = 1LL << 32;
294 break;
295 case XFS_COW_FORK:
296 lock = XFS_ILOCK_SHARED;
297 xfs_ilock(ip, lock);
298
299 /* No CoW fork? Just return */
300 if (!xfs_ifork_ptr(ip, whichfork))
301 goto out_unlock_ilock;
302
303 if (xfs_get_cowextsz_hint(ip))
304 max_len = mp->m_super->s_maxbytes;
305 else
306 max_len = XFS_ISIZE(ip);
307 break;
308 case XFS_DATA_FORK:
309 if (!(iflags & BMV_IF_DELALLOC) &&
310 (ip->i_delayed_blks || XFS_ISIZE(ip) > ip->i_disk_size)) {
311 error = filemap_write_and_wait(VFS_I(ip)->i_mapping);
312 if (error)
313 goto out_unlock_iolock;
314
315 /*
316 * Even after flushing the inode, there can still be
317 * delalloc blocks on the inode beyond EOF due to
318 * speculative preallocation. These are not removed
319 * until the release function is called or the inode
320 * is inactivated. Hence we cannot assert here that
321 * ip->i_delayed_blks == 0.
322 */
323 }
324
325 if (xfs_get_extsz_hint(ip) ||
326 (ip->i_diflags & XFS_DIFLAG_PREALLOC))
327 max_len = mp->m_super->s_maxbytes;
328 else
329 max_len = XFS_ISIZE(ip);
330
331 lock = xfs_ilock_data_map_shared(ip);
332 break;
333 }
334
335 ifp = xfs_ifork_ptr(ip, whichfork);
336
337 switch (ifp->if_format) {
338 case XFS_DINODE_FMT_EXTENTS:
339 case XFS_DINODE_FMT_BTREE:
340 break;
341 case XFS_DINODE_FMT_LOCAL:
342 /* Local format inode forks report no extents. */
343 goto out_unlock_ilock;
344 default:
345 error = -EINVAL;
346 goto out_unlock_ilock;
347 }
348
349 if (bmv->bmv_length == -1) {
350 max_len = XFS_FSB_TO_BB(mp, XFS_B_TO_FSB(mp, max_len));
351 bmv->bmv_length = max(0LL, max_len - bmv->bmv_offset);
352 }
353
354 bmv_end = bmv->bmv_offset + bmv->bmv_length;
355
356 first_bno = bno = XFS_BB_TO_FSBT(mp, bmv->bmv_offset);
357 len = XFS_BB_TO_FSB(mp, bmv->bmv_length);
358
359 error = xfs_iread_extents(NULL, ip, whichfork);
360 if (error)
361 goto out_unlock_ilock;
362
363 if (!xfs_iext_lookup_extent(ip, ifp, bno, &icur, &got)) {
364 /*
365 * Report a whole-file hole if the delalloc flag is set to
366 * stay compatible with the old implementation.
367 */
368 if (iflags & BMV_IF_DELALLOC)
369 xfs_getbmap_report_hole(ip, bmv, out, bmv_end, bno,
370 XFS_B_TO_FSB(mp, XFS_ISIZE(ip)));
371 goto out_unlock_ilock;
372 }
373
374 while (!xfs_getbmap_full(bmv)) {
375 xfs_trim_extent(&got, first_bno, len);
376
377 /*
378 * Report an entry for a hole if this extent doesn't directly
379 * follow the previous one.
380 */
381 if (got.br_startoff > bno) {
382 xfs_getbmap_report_hole(ip, bmv, out, bmv_end, bno,
383 got.br_startoff);
384 if (xfs_getbmap_full(bmv))
385 break;
386 }
387
388 /*
389 * In order to report shared extents accurately, we report each
390 * distinct shared / unshared part of a single bmbt record with
391 * an individual getbmapx record.
392 */
393 bno = got.br_startoff + got.br_blockcount;
394 rec = got;
395 do {
396 error = xfs_getbmap_report_one(ip, bmv, out, bmv_end,
397 &rec);
398 if (error || xfs_getbmap_full(bmv))
399 goto out_unlock_ilock;
400 } while (xfs_getbmap_next_rec(&rec, bno));
401
402 if (!xfs_iext_next_extent(ifp, &icur, &got)) {
403 xfs_fileoff_t end = XFS_B_TO_FSB(mp, XFS_ISIZE(ip));
404
405 if (bmv->bmv_entries > 0)
406 out[bmv->bmv_entries - 1].bmv_oflags |=
407 BMV_OF_LAST;
408
409 if (whichfork != XFS_ATTR_FORK && bno < end &&
410 !xfs_getbmap_full(bmv)) {
411 xfs_getbmap_report_hole(ip, bmv, out, bmv_end,
412 bno, end);
413 }
414 break;
415 }
416
417 if (bno >= first_bno + len)
418 break;
419 }
420
421out_unlock_ilock:
422 xfs_iunlock(ip, lock);
423out_unlock_iolock:
424 xfs_iunlock(ip, XFS_IOLOCK_SHARED);
425 return error;
426}
427
428/*
429 * Dead simple method of punching delalyed allocation blocks from a range in
430 * the inode. This will always punch out both the start and end blocks, even
431 * if the ranges only partially overlap them, so it is up to the caller to
432 * ensure that partial blocks are not passed in.
433 */
434void
435xfs_bmap_punch_delalloc_range(
436 struct xfs_inode *ip,
437 int whichfork,
438 xfs_off_t start_byte,
439 xfs_off_t end_byte)
440{
441 struct xfs_mount *mp = ip->i_mount;
442 struct xfs_ifork *ifp = xfs_ifork_ptr(ip, whichfork);
443 xfs_fileoff_t start_fsb = XFS_B_TO_FSBT(mp, start_byte);
444 xfs_fileoff_t end_fsb = XFS_B_TO_FSB(mp, end_byte);
445 struct xfs_bmbt_irec got, del;
446 struct xfs_iext_cursor icur;
447
448 ASSERT(!xfs_need_iread_extents(ifp));
449
450 xfs_ilock(ip, XFS_ILOCK_EXCL);
451 if (!xfs_iext_lookup_extent_before(ip, ifp, &end_fsb, &icur, &got))
452 goto out_unlock;
453
454 while (got.br_startoff + got.br_blockcount > start_fsb) {
455 del = got;
456 xfs_trim_extent(&del, start_fsb, end_fsb - start_fsb);
457
458 /*
459 * A delete can push the cursor forward. Step back to the
460 * previous extent on non-delalloc or extents outside the
461 * target range.
462 */
463 if (!del.br_blockcount ||
464 !isnullstartblock(del.br_startblock)) {
465 if (!xfs_iext_prev_extent(ifp, &icur, &got))
466 break;
467 continue;
468 }
469
470 xfs_bmap_del_extent_delay(ip, whichfork, &icur, &got, &del);
471 if (!xfs_iext_get_extent(ifp, &icur, &got))
472 break;
473 }
474
475 if (whichfork == XFS_COW_FORK && !ifp->if_bytes)
476 xfs_inode_clear_cowblocks_tag(ip);
477
478out_unlock:
479 xfs_iunlock(ip, XFS_ILOCK_EXCL);
480}
481
482/*
483 * Test whether it is appropriate to check an inode for and free post EOF
484 * blocks.
485 */
486bool
487xfs_can_free_eofblocks(
488 struct xfs_inode *ip)
489{
490 struct xfs_mount *mp = ip->i_mount;
491 bool found_blocks = false;
492 xfs_fileoff_t end_fsb;
493 xfs_fileoff_t last_fsb;
494 struct xfs_bmbt_irec imap;
495 struct xfs_iext_cursor icur;
496
497 /*
498 * Caller must either hold the exclusive io lock; or be inactivating
499 * the inode, which guarantees there are no other users of the inode.
500 */
501 if (!(VFS_I(ip)->i_state & I_FREEING))
502 xfs_assert_ilocked(ip, XFS_IOLOCK_EXCL);
503
504 /* prealloc/delalloc exists only on regular files */
505 if (!S_ISREG(VFS_I(ip)->i_mode))
506 return false;
507
508 /*
509 * Zero sized files with no cached pages and delalloc blocks will not
510 * have speculative prealloc/delalloc blocks to remove.
511 */
512 if (VFS_I(ip)->i_size == 0 &&
513 VFS_I(ip)->i_mapping->nrpages == 0 &&
514 ip->i_delayed_blks == 0)
515 return false;
516
517 /* If we haven't read in the extent list, then don't do it now. */
518 if (xfs_need_iread_extents(&ip->i_df))
519 return false;
520
521 /*
522 * Do not free real extents in preallocated files unless the file has
523 * delalloc blocks and we are forced to remove them.
524 */
525 if ((ip->i_diflags & XFS_DIFLAG_PREALLOC) && !ip->i_delayed_blks)
526 return false;
527
528 /*
529 * Do not try to free post-EOF blocks if EOF is beyond the end of the
530 * range supported by the page cache, because the truncation will loop
531 * forever.
532 */
533 end_fsb = XFS_B_TO_FSB(mp, (xfs_ufsize_t)XFS_ISIZE(ip));
534 if (xfs_inode_has_bigrtalloc(ip))
535 end_fsb = xfs_fileoff_roundup_rtx(mp, end_fsb);
536 last_fsb = XFS_B_TO_FSB(mp, mp->m_super->s_maxbytes);
537 if (last_fsb <= end_fsb)
538 return false;
539
540 /*
541 * Check if there is an post-EOF extent to free. If there are any
542 * delalloc blocks attached to the inode (data fork delalloc
543 * reservations or CoW extents of any kind), we need to free them so
544 * that inactivation doesn't fail to erase them.
545 */
546 xfs_ilock(ip, XFS_ILOCK_SHARED);
547 if (ip->i_delayed_blks ||
548 xfs_iext_lookup_extent(ip, &ip->i_df, end_fsb, &icur, &imap))
549 found_blocks = true;
550 xfs_iunlock(ip, XFS_ILOCK_SHARED);
551 return found_blocks;
552}
553
554/*
555 * This is called to free any blocks beyond eof. The caller must hold
556 * IOLOCK_EXCL unless we are in the inode reclaim path and have the only
557 * reference to the inode.
558 */
559int
560xfs_free_eofblocks(
561 struct xfs_inode *ip)
562{
563 struct xfs_trans *tp;
564 struct xfs_mount *mp = ip->i_mount;
565 int error;
566
567 /* Attach the dquots to the inode up front. */
568 error = xfs_qm_dqattach(ip);
569 if (error)
570 return error;
571
572 /* Wait on dio to ensure i_size has settled. */
573 inode_dio_wait(VFS_I(ip));
574
575 /*
576 * For preallocated files only free delayed allocations.
577 *
578 * Note that this means we also leave speculative preallocations in
579 * place for preallocated files.
580 */
581 if (ip->i_diflags & (XFS_DIFLAG_PREALLOC | XFS_DIFLAG_APPEND)) {
582 if (ip->i_delayed_blks) {
583 xfs_bmap_punch_delalloc_range(ip, XFS_DATA_FORK,
584 round_up(XFS_ISIZE(ip), mp->m_sb.sb_blocksize),
585 LLONG_MAX);
586 }
587 xfs_inode_clear_eofblocks_tag(ip);
588 return 0;
589 }
590
591 error = xfs_trans_alloc(mp, &M_RES(mp)->tr_itruncate, 0, 0, 0, &tp);
592 if (error) {
593 ASSERT(xfs_is_shutdown(mp));
594 return error;
595 }
596
597 xfs_ilock(ip, XFS_ILOCK_EXCL);
598 xfs_trans_ijoin(tp, ip, 0);
599
600 /*
601 * Do not update the on-disk file size. If we update the on-disk file
602 * size and then the system crashes before the contents of the file are
603 * flushed to disk then the files may be full of holes (ie NULL files
604 * bug).
605 */
606 error = xfs_itruncate_extents_flags(&tp, ip, XFS_DATA_FORK,
607 XFS_ISIZE(ip), XFS_BMAPI_NODISCARD);
608 if (error)
609 goto err_cancel;
610
611 error = xfs_trans_commit(tp);
612 if (error)
613 goto out_unlock;
614
615 xfs_inode_clear_eofblocks_tag(ip);
616 goto out_unlock;
617
618err_cancel:
619 /*
620 * If we get an error at this point we simply don't
621 * bother truncating the file.
622 */
623 xfs_trans_cancel(tp);
624out_unlock:
625 xfs_iunlock(ip, XFS_ILOCK_EXCL);
626 return error;
627}
628
629int
630xfs_alloc_file_space(
631 struct xfs_inode *ip,
632 xfs_off_t offset,
633 xfs_off_t len)
634{
635 xfs_mount_t *mp = ip->i_mount;
636 xfs_off_t count;
637 xfs_filblks_t allocatesize_fsb;
638 xfs_extlen_t extsz, temp;
639 xfs_fileoff_t startoffset_fsb;
640 xfs_fileoff_t endoffset_fsb;
641 int rt;
642 xfs_trans_t *tp;
643 xfs_bmbt_irec_t imaps[1], *imapp;
644 int error;
645
646 if (xfs_is_always_cow_inode(ip))
647 return 0;
648
649 trace_xfs_alloc_file_space(ip);
650
651 if (xfs_is_shutdown(mp))
652 return -EIO;
653
654 error = xfs_qm_dqattach(ip);
655 if (error)
656 return error;
657
658 if (len <= 0)
659 return -EINVAL;
660
661 rt = XFS_IS_REALTIME_INODE(ip);
662 extsz = xfs_get_extsz_hint(ip);
663
664 count = len;
665 imapp = &imaps[0];
666 startoffset_fsb = XFS_B_TO_FSBT(mp, offset);
667 endoffset_fsb = XFS_B_TO_FSB(mp, offset + count);
668 allocatesize_fsb = endoffset_fsb - startoffset_fsb;
669
670 /*
671 * Allocate file space until done or until there is an error
672 */
673 while (allocatesize_fsb && !error) {
674 xfs_fileoff_t s, e;
675 unsigned int dblocks, rblocks, resblks;
676 int nimaps = 1;
677
678 /*
679 * Determine space reservations for data/realtime.
680 */
681 if (unlikely(extsz)) {
682 s = startoffset_fsb;
683 do_div(s, extsz);
684 s *= extsz;
685 e = startoffset_fsb + allocatesize_fsb;
686 div_u64_rem(startoffset_fsb, extsz, &temp);
687 if (temp)
688 e += temp;
689 div_u64_rem(e, extsz, &temp);
690 if (temp)
691 e += extsz - temp;
692 } else {
693 s = 0;
694 e = allocatesize_fsb;
695 }
696
697 /*
698 * The transaction reservation is limited to a 32-bit block
699 * count, hence we need to limit the number of blocks we are
700 * trying to reserve to avoid an overflow. We can't allocate
701 * more than @nimaps extents, and an extent is limited on disk
702 * to XFS_BMBT_MAX_EXTLEN (21 bits), so use that to enforce the
703 * limit.
704 */
705 resblks = min_t(xfs_fileoff_t, (e - s),
706 (XFS_MAX_BMBT_EXTLEN * nimaps));
707 if (unlikely(rt)) {
708 dblocks = XFS_DIOSTRAT_SPACE_RES(mp, 0);
709 rblocks = resblks;
710 } else {
711 dblocks = XFS_DIOSTRAT_SPACE_RES(mp, resblks);
712 rblocks = 0;
713 }
714
715 error = xfs_trans_alloc_inode(ip, &M_RES(mp)->tr_write,
716 dblocks, rblocks, false, &tp);
717 if (error)
718 break;
719
720 error = xfs_iext_count_extend(tp, ip, XFS_DATA_FORK,
721 XFS_IEXT_ADD_NOSPLIT_CNT);
722 if (error)
723 goto error;
724
725 /*
726 * If the allocator cannot find a single free extent large
727 * enough to cover the start block of the requested range,
728 * xfs_bmapi_write will return -ENOSR.
729 *
730 * In that case we simply need to keep looping with the same
731 * startoffset_fsb so that one of the following allocations
732 * will eventually reach the requested range.
733 */
734 error = xfs_bmapi_write(tp, ip, startoffset_fsb,
735 allocatesize_fsb, XFS_BMAPI_PREALLOC, 0, imapp,
736 &nimaps);
737 if (error) {
738 if (error != -ENOSR)
739 goto error;
740 error = 0;
741 } else {
742 startoffset_fsb += imapp->br_blockcount;
743 allocatesize_fsb -= imapp->br_blockcount;
744 }
745
746 ip->i_diflags |= XFS_DIFLAG_PREALLOC;
747 xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
748
749 error = xfs_trans_commit(tp);
750 xfs_iunlock(ip, XFS_ILOCK_EXCL);
751 }
752
753 return error;
754
755error:
756 xfs_trans_cancel(tp);
757 xfs_iunlock(ip, XFS_ILOCK_EXCL);
758 return error;
759}
760
761static int
762xfs_unmap_extent(
763 struct xfs_inode *ip,
764 xfs_fileoff_t startoffset_fsb,
765 xfs_filblks_t len_fsb,
766 int *done)
767{
768 struct xfs_mount *mp = ip->i_mount;
769 struct xfs_trans *tp;
770 uint resblks = XFS_DIOSTRAT_SPACE_RES(mp, 0);
771 int error;
772
773 error = xfs_trans_alloc_inode(ip, &M_RES(mp)->tr_write, resblks, 0,
774 false, &tp);
775 if (error)
776 return error;
777
778 error = xfs_iext_count_extend(tp, ip, XFS_DATA_FORK,
779 XFS_IEXT_PUNCH_HOLE_CNT);
780 if (error)
781 goto out_trans_cancel;
782
783 error = xfs_bunmapi(tp, ip, startoffset_fsb, len_fsb, 0, 2, done);
784 if (error)
785 goto out_trans_cancel;
786
787 error = xfs_trans_commit(tp);
788out_unlock:
789 xfs_iunlock(ip, XFS_ILOCK_EXCL);
790 return error;
791
792out_trans_cancel:
793 xfs_trans_cancel(tp);
794 goto out_unlock;
795}
796
797/* Caller must first wait for the completion of any pending DIOs if required. */
798int
799xfs_flush_unmap_range(
800 struct xfs_inode *ip,
801 xfs_off_t offset,
802 xfs_off_t len)
803{
804 struct inode *inode = VFS_I(ip);
805 xfs_off_t rounding, start, end;
806 int error;
807
808 /*
809 * Make sure we extend the flush out to extent alignment
810 * boundaries so any extent range overlapping the start/end
811 * of the modification we are about to do is clean and idle.
812 */
813 rounding = max_t(xfs_off_t, xfs_inode_alloc_unitsize(ip), PAGE_SIZE);
814 start = rounddown_64(offset, rounding);
815 end = roundup_64(offset + len, rounding) - 1;
816
817 error = filemap_write_and_wait_range(inode->i_mapping, start, end);
818 if (error)
819 return error;
820 truncate_pagecache_range(inode, start, end);
821 return 0;
822}
823
824int
825xfs_free_file_space(
826 struct xfs_inode *ip,
827 xfs_off_t offset,
828 xfs_off_t len)
829{
830 struct xfs_mount *mp = ip->i_mount;
831 xfs_fileoff_t startoffset_fsb;
832 xfs_fileoff_t endoffset_fsb;
833 int done = 0, error;
834
835 trace_xfs_free_file_space(ip);
836
837 error = xfs_qm_dqattach(ip);
838 if (error)
839 return error;
840
841 if (len <= 0) /* if nothing being freed */
842 return 0;
843
844 /*
845 * Now AIO and DIO has drained we flush and (if necessary) invalidate
846 * the cached range over the first operation we are about to run.
847 */
848 error = xfs_flush_unmap_range(ip, offset, len);
849 if (error)
850 return error;
851
852 startoffset_fsb = XFS_B_TO_FSB(mp, offset);
853 endoffset_fsb = XFS_B_TO_FSBT(mp, offset + len);
854
855 /* We can only free complete realtime extents. */
856 if (xfs_inode_has_bigrtalloc(ip)) {
857 startoffset_fsb = xfs_fileoff_roundup_rtx(mp, startoffset_fsb);
858 endoffset_fsb = xfs_fileoff_rounddown_rtx(mp, endoffset_fsb);
859 }
860
861 /*
862 * Need to zero the stuff we're not freeing, on disk.
863 */
864 if (endoffset_fsb > startoffset_fsb) {
865 while (!done) {
866 error = xfs_unmap_extent(ip, startoffset_fsb,
867 endoffset_fsb - startoffset_fsb, &done);
868 if (error)
869 return error;
870 }
871 }
872
873 /*
874 * Now that we've unmap all full blocks we'll have to zero out any
875 * partial block at the beginning and/or end. xfs_zero_range is smart
876 * enough to skip any holes, including those we just created, but we
877 * must take care not to zero beyond EOF and enlarge i_size.
878 */
879 if (offset >= XFS_ISIZE(ip))
880 return 0;
881 if (offset + len > XFS_ISIZE(ip))
882 len = XFS_ISIZE(ip) - offset;
883 error = xfs_zero_range(ip, offset, len, NULL);
884 if (error)
885 return error;
886
887 /*
888 * If we zeroed right up to EOF and EOF straddles a page boundary we
889 * must make sure that the post-EOF area is also zeroed because the
890 * page could be mmap'd and xfs_zero_range doesn't do that for us.
891 * Writeback of the eof page will do this, albeit clumsily.
892 */
893 if (offset + len >= XFS_ISIZE(ip) && offset_in_page(offset + len) > 0) {
894 error = filemap_write_and_wait_range(VFS_I(ip)->i_mapping,
895 round_down(offset + len, PAGE_SIZE), LLONG_MAX);
896 }
897
898 return error;
899}
900
901static int
902xfs_prepare_shift(
903 struct xfs_inode *ip,
904 loff_t offset)
905{
906 unsigned int rounding;
907 int error;
908
909 /*
910 * Trim eofblocks to avoid shifting uninitialized post-eof preallocation
911 * into the accessible region of the file.
912 */
913 if (xfs_can_free_eofblocks(ip)) {
914 error = xfs_free_eofblocks(ip);
915 if (error)
916 return error;
917 }
918
919 /*
920 * Shift operations must stabilize the start block offset boundary along
921 * with the full range of the operation. If we don't, a COW writeback
922 * completion could race with an insert, front merge with the start
923 * extent (after split) during the shift and corrupt the file. Start
924 * with the allocation unit just prior to the start to stabilize the
925 * boundary.
926 */
927 rounding = xfs_inode_alloc_unitsize(ip);
928 offset = rounddown_64(offset, rounding);
929 if (offset)
930 offset -= rounding;
931
932 /*
933 * Writeback and invalidate cache for the remainder of the file as we're
934 * about to shift down every extent from offset to EOF.
935 */
936 error = xfs_flush_unmap_range(ip, offset, XFS_ISIZE(ip));
937 if (error)
938 return error;
939
940 /*
941 * Clean out anything hanging around in the cow fork now that
942 * we've flushed all the dirty data out to disk to avoid having
943 * CoW extents at the wrong offsets.
944 */
945 if (xfs_inode_has_cow_data(ip)) {
946 error = xfs_reflink_cancel_cow_range(ip, offset, NULLFILEOFF,
947 true);
948 if (error)
949 return error;
950 }
951
952 return 0;
953}
954
955/*
956 * xfs_collapse_file_space()
957 * This routine frees disk space and shift extent for the given file.
958 * The first thing we do is to free data blocks in the specified range
959 * by calling xfs_free_file_space(). It would also sync dirty data
960 * and invalidate page cache over the region on which collapse range
961 * is working. And Shift extent records to the left to cover a hole.
962 * RETURNS:
963 * 0 on success
964 * errno on error
965 *
966 */
967int
968xfs_collapse_file_space(
969 struct xfs_inode *ip,
970 xfs_off_t offset,
971 xfs_off_t len)
972{
973 struct xfs_mount *mp = ip->i_mount;
974 struct xfs_trans *tp;
975 int error;
976 xfs_fileoff_t next_fsb = XFS_B_TO_FSB(mp, offset + len);
977 xfs_fileoff_t shift_fsb = XFS_B_TO_FSB(mp, len);
978 bool done = false;
979
980 xfs_assert_ilocked(ip, XFS_IOLOCK_EXCL | XFS_MMAPLOCK_EXCL);
981
982 trace_xfs_collapse_file_space(ip);
983
984 error = xfs_free_file_space(ip, offset, len);
985 if (error)
986 return error;
987
988 error = xfs_prepare_shift(ip, offset);
989 if (error)
990 return error;
991
992 error = xfs_trans_alloc(mp, &M_RES(mp)->tr_write, 0, 0, 0, &tp);
993 if (error)
994 return error;
995
996 xfs_ilock(ip, XFS_ILOCK_EXCL);
997 xfs_trans_ijoin(tp, ip, 0);
998
999 while (!done) {
1000 error = xfs_bmap_collapse_extents(tp, ip, &next_fsb, shift_fsb,
1001 &done);
1002 if (error)
1003 goto out_trans_cancel;
1004 if (done)
1005 break;
1006
1007 /* finish any deferred frees and roll the transaction */
1008 error = xfs_defer_finish(&tp);
1009 if (error)
1010 goto out_trans_cancel;
1011 }
1012
1013 error = xfs_trans_commit(tp);
1014 xfs_iunlock(ip, XFS_ILOCK_EXCL);
1015 return error;
1016
1017out_trans_cancel:
1018 xfs_trans_cancel(tp);
1019 xfs_iunlock(ip, XFS_ILOCK_EXCL);
1020 return error;
1021}
1022
1023/*
1024 * xfs_insert_file_space()
1025 * This routine create hole space by shifting extents for the given file.
1026 * The first thing we do is to sync dirty data and invalidate page cache
1027 * over the region on which insert range is working. And split an extent
1028 * to two extents at given offset by calling xfs_bmap_split_extent.
1029 * And shift all extent records which are laying between [offset,
1030 * last allocated extent] to the right to reserve hole range.
1031 * RETURNS:
1032 * 0 on success
1033 * errno on error
1034 */
1035int
1036xfs_insert_file_space(
1037 struct xfs_inode *ip,
1038 loff_t offset,
1039 loff_t len)
1040{
1041 struct xfs_mount *mp = ip->i_mount;
1042 struct xfs_trans *tp;
1043 int error;
1044 xfs_fileoff_t stop_fsb = XFS_B_TO_FSB(mp, offset);
1045 xfs_fileoff_t next_fsb = NULLFSBLOCK;
1046 xfs_fileoff_t shift_fsb = XFS_B_TO_FSB(mp, len);
1047 bool done = false;
1048
1049 xfs_assert_ilocked(ip, XFS_IOLOCK_EXCL | XFS_MMAPLOCK_EXCL);
1050
1051 trace_xfs_insert_file_space(ip);
1052
1053 error = xfs_bmap_can_insert_extents(ip, stop_fsb, shift_fsb);
1054 if (error)
1055 return error;
1056
1057 error = xfs_prepare_shift(ip, offset);
1058 if (error)
1059 return error;
1060
1061 error = xfs_trans_alloc(mp, &M_RES(mp)->tr_write,
1062 XFS_DIOSTRAT_SPACE_RES(mp, 0), 0, 0, &tp);
1063 if (error)
1064 return error;
1065
1066 xfs_ilock(ip, XFS_ILOCK_EXCL);
1067 xfs_trans_ijoin(tp, ip, 0);
1068
1069 error = xfs_iext_count_extend(tp, ip, XFS_DATA_FORK,
1070 XFS_IEXT_PUNCH_HOLE_CNT);
1071 if (error)
1072 goto out_trans_cancel;
1073
1074 /*
1075 * The extent shifting code works on extent granularity. So, if stop_fsb
1076 * is not the starting block of extent, we need to split the extent at
1077 * stop_fsb.
1078 */
1079 error = xfs_bmap_split_extent(tp, ip, stop_fsb);
1080 if (error)
1081 goto out_trans_cancel;
1082
1083 do {
1084 error = xfs_defer_finish(&tp);
1085 if (error)
1086 goto out_trans_cancel;
1087
1088 error = xfs_bmap_insert_extents(tp, ip, &next_fsb, shift_fsb,
1089 &done, stop_fsb);
1090 if (error)
1091 goto out_trans_cancel;
1092 } while (!done);
1093
1094 error = xfs_trans_commit(tp);
1095 xfs_iunlock(ip, XFS_ILOCK_EXCL);
1096 return error;
1097
1098out_trans_cancel:
1099 xfs_trans_cancel(tp);
1100 xfs_iunlock(ip, XFS_ILOCK_EXCL);
1101 return error;
1102}
1103
1104/*
1105 * We need to check that the format of the data fork in the temporary inode is
1106 * valid for the target inode before doing the swap. This is not a problem with
1107 * attr1 because of the fixed fork offset, but attr2 has a dynamically sized
1108 * data fork depending on the space the attribute fork is taking so we can get
1109 * invalid formats on the target inode.
1110 *
1111 * E.g. target has space for 7 extents in extent format, temp inode only has
1112 * space for 6. If we defragment down to 7 extents, then the tmp format is a
1113 * btree, but when swapped it needs to be in extent format. Hence we can't just
1114 * blindly swap data forks on attr2 filesystems.
1115 *
1116 * Note that we check the swap in both directions so that we don't end up with
1117 * a corrupt temporary inode, either.
1118 *
1119 * Note that fixing the way xfs_fsr sets up the attribute fork in the source
1120 * inode will prevent this situation from occurring, so all we do here is
1121 * reject and log the attempt. basically we are putting the responsibility on
1122 * userspace to get this right.
1123 */
1124static int
1125xfs_swap_extents_check_format(
1126 struct xfs_inode *ip, /* target inode */
1127 struct xfs_inode *tip) /* tmp inode */
1128{
1129 struct xfs_ifork *ifp = &ip->i_df;
1130 struct xfs_ifork *tifp = &tip->i_df;
1131
1132 /* User/group/project quota ids must match if quotas are enforced. */
1133 if (XFS_IS_QUOTA_ON(ip->i_mount) &&
1134 (!uid_eq(VFS_I(ip)->i_uid, VFS_I(tip)->i_uid) ||
1135 !gid_eq(VFS_I(ip)->i_gid, VFS_I(tip)->i_gid) ||
1136 ip->i_projid != tip->i_projid))
1137 return -EINVAL;
1138
1139 /* Should never get a local format */
1140 if (ifp->if_format == XFS_DINODE_FMT_LOCAL ||
1141 tifp->if_format == XFS_DINODE_FMT_LOCAL)
1142 return -EINVAL;
1143
1144 /*
1145 * if the target inode has less extents that then temporary inode then
1146 * why did userspace call us?
1147 */
1148 if (ifp->if_nextents < tifp->if_nextents)
1149 return -EINVAL;
1150
1151 /*
1152 * If we have to use the (expensive) rmap swap method, we can
1153 * handle any number of extents and any format.
1154 */
1155 if (xfs_has_rmapbt(ip->i_mount))
1156 return 0;
1157
1158 /*
1159 * if the target inode is in extent form and the temp inode is in btree
1160 * form then we will end up with the target inode in the wrong format
1161 * as we already know there are less extents in the temp inode.
1162 */
1163 if (ifp->if_format == XFS_DINODE_FMT_EXTENTS &&
1164 tifp->if_format == XFS_DINODE_FMT_BTREE)
1165 return -EINVAL;
1166
1167 /* Check temp in extent form to max in target */
1168 if (tifp->if_format == XFS_DINODE_FMT_EXTENTS &&
1169 tifp->if_nextents > XFS_IFORK_MAXEXT(ip, XFS_DATA_FORK))
1170 return -EINVAL;
1171
1172 /* Check target in extent form to max in temp */
1173 if (ifp->if_format == XFS_DINODE_FMT_EXTENTS &&
1174 ifp->if_nextents > XFS_IFORK_MAXEXT(tip, XFS_DATA_FORK))
1175 return -EINVAL;
1176
1177 /*
1178 * If we are in a btree format, check that the temp root block will fit
1179 * in the target and that it has enough extents to be in btree format
1180 * in the target.
1181 *
1182 * Note that we have to be careful to allow btree->extent conversions
1183 * (a common defrag case) which will occur when the temp inode is in
1184 * extent format...
1185 */
1186 if (tifp->if_format == XFS_DINODE_FMT_BTREE) {
1187 if (xfs_inode_has_attr_fork(ip) &&
1188 xfs_bmap_bmdr_space(tifp->if_broot) > xfs_inode_fork_boff(ip))
1189 return -EINVAL;
1190 if (tifp->if_nextents <= XFS_IFORK_MAXEXT(ip, XFS_DATA_FORK))
1191 return -EINVAL;
1192 }
1193
1194 /* Reciprocal target->temp btree format checks */
1195 if (ifp->if_format == XFS_DINODE_FMT_BTREE) {
1196 if (xfs_inode_has_attr_fork(tip) &&
1197 xfs_bmap_bmdr_space(ip->i_df.if_broot) > xfs_inode_fork_boff(tip))
1198 return -EINVAL;
1199 if (ifp->if_nextents <= XFS_IFORK_MAXEXT(tip, XFS_DATA_FORK))
1200 return -EINVAL;
1201 }
1202
1203 return 0;
1204}
1205
1206static int
1207xfs_swap_extent_flush(
1208 struct xfs_inode *ip)
1209{
1210 int error;
1211
1212 error = filemap_write_and_wait(VFS_I(ip)->i_mapping);
1213 if (error)
1214 return error;
1215 truncate_pagecache_range(VFS_I(ip), 0, -1);
1216
1217 /* Verify O_DIRECT for ftmp */
1218 if (VFS_I(ip)->i_mapping->nrpages)
1219 return -EINVAL;
1220 return 0;
1221}
1222
1223/*
1224 * Move extents from one file to another, when rmap is enabled.
1225 */
1226STATIC int
1227xfs_swap_extent_rmap(
1228 struct xfs_trans **tpp,
1229 struct xfs_inode *ip,
1230 struct xfs_inode *tip)
1231{
1232 struct xfs_trans *tp = *tpp;
1233 struct xfs_bmbt_irec irec;
1234 struct xfs_bmbt_irec uirec;
1235 struct xfs_bmbt_irec tirec;
1236 xfs_fileoff_t offset_fsb;
1237 xfs_fileoff_t end_fsb;
1238 xfs_filblks_t count_fsb;
1239 int error;
1240 xfs_filblks_t ilen;
1241 xfs_filblks_t rlen;
1242 int nimaps;
1243 uint64_t tip_flags2;
1244
1245 /*
1246 * If the source file has shared blocks, we must flag the donor
1247 * file as having shared blocks so that we get the shared-block
1248 * rmap functions when we go to fix up the rmaps. The flags
1249 * will be switch for reals later.
1250 */
1251 tip_flags2 = tip->i_diflags2;
1252 if (ip->i_diflags2 & XFS_DIFLAG2_REFLINK)
1253 tip->i_diflags2 |= XFS_DIFLAG2_REFLINK;
1254
1255 offset_fsb = 0;
1256 end_fsb = XFS_B_TO_FSB(ip->i_mount, i_size_read(VFS_I(ip)));
1257 count_fsb = (xfs_filblks_t)(end_fsb - offset_fsb);
1258
1259 while (count_fsb) {
1260 /* Read extent from the donor file */
1261 nimaps = 1;
1262 error = xfs_bmapi_read(tip, offset_fsb, count_fsb, &tirec,
1263 &nimaps, 0);
1264 if (error)
1265 goto out;
1266 ASSERT(nimaps == 1);
1267 ASSERT(tirec.br_startblock != DELAYSTARTBLOCK);
1268
1269 trace_xfs_swap_extent_rmap_remap(tip, &tirec);
1270 ilen = tirec.br_blockcount;
1271
1272 /* Unmap the old blocks in the source file. */
1273 while (tirec.br_blockcount) {
1274 ASSERT(tp->t_highest_agno == NULLAGNUMBER);
1275 trace_xfs_swap_extent_rmap_remap_piece(tip, &tirec);
1276
1277 /* Read extent from the source file */
1278 nimaps = 1;
1279 error = xfs_bmapi_read(ip, tirec.br_startoff,
1280 tirec.br_blockcount, &irec,
1281 &nimaps, 0);
1282 if (error)
1283 goto out;
1284 ASSERT(nimaps == 1);
1285 ASSERT(tirec.br_startoff == irec.br_startoff);
1286 trace_xfs_swap_extent_rmap_remap_piece(ip, &irec);
1287
1288 /* Trim the extent. */
1289 uirec = tirec;
1290 uirec.br_blockcount = rlen = min_t(xfs_filblks_t,
1291 tirec.br_blockcount,
1292 irec.br_blockcount);
1293 trace_xfs_swap_extent_rmap_remap_piece(tip, &uirec);
1294
1295 if (xfs_bmap_is_real_extent(&uirec)) {
1296 error = xfs_iext_count_extend(tp, ip,
1297 XFS_DATA_FORK,
1298 XFS_IEXT_SWAP_RMAP_CNT);
1299 if (error)
1300 goto out;
1301 }
1302
1303 if (xfs_bmap_is_real_extent(&irec)) {
1304 error = xfs_iext_count_extend(tp, tip,
1305 XFS_DATA_FORK,
1306 XFS_IEXT_SWAP_RMAP_CNT);
1307 if (error)
1308 goto out;
1309 }
1310
1311 /* Remove the mapping from the donor file. */
1312 xfs_bmap_unmap_extent(tp, tip, XFS_DATA_FORK, &uirec);
1313
1314 /* Remove the mapping from the source file. */
1315 xfs_bmap_unmap_extent(tp, ip, XFS_DATA_FORK, &irec);
1316
1317 /* Map the donor file's blocks into the source file. */
1318 xfs_bmap_map_extent(tp, ip, XFS_DATA_FORK, &uirec);
1319
1320 /* Map the source file's blocks into the donor file. */
1321 xfs_bmap_map_extent(tp, tip, XFS_DATA_FORK, &irec);
1322
1323 error = xfs_defer_finish(tpp);
1324 tp = *tpp;
1325 if (error)
1326 goto out;
1327
1328 tirec.br_startoff += rlen;
1329 if (tirec.br_startblock != HOLESTARTBLOCK &&
1330 tirec.br_startblock != DELAYSTARTBLOCK)
1331 tirec.br_startblock += rlen;
1332 tirec.br_blockcount -= rlen;
1333 }
1334
1335 /* Roll on... */
1336 count_fsb -= ilen;
1337 offset_fsb += ilen;
1338 }
1339
1340 tip->i_diflags2 = tip_flags2;
1341 return 0;
1342
1343out:
1344 trace_xfs_swap_extent_rmap_error(ip, error, _RET_IP_);
1345 tip->i_diflags2 = tip_flags2;
1346 return error;
1347}
1348
1349/* Swap the extents of two files by swapping data forks. */
1350STATIC int
1351xfs_swap_extent_forks(
1352 struct xfs_trans *tp,
1353 struct xfs_inode *ip,
1354 struct xfs_inode *tip,
1355 int *src_log_flags,
1356 int *target_log_flags)
1357{
1358 xfs_filblks_t aforkblks = 0;
1359 xfs_filblks_t taforkblks = 0;
1360 xfs_extnum_t junk;
1361 uint64_t tmp;
1362 int error;
1363
1364 /*
1365 * Count the number of extended attribute blocks
1366 */
1367 if (xfs_inode_has_attr_fork(ip) && ip->i_af.if_nextents > 0 &&
1368 ip->i_af.if_format != XFS_DINODE_FMT_LOCAL) {
1369 error = xfs_bmap_count_blocks(tp, ip, XFS_ATTR_FORK, &junk,
1370 &aforkblks);
1371 if (error)
1372 return error;
1373 }
1374 if (xfs_inode_has_attr_fork(tip) && tip->i_af.if_nextents > 0 &&
1375 tip->i_af.if_format != XFS_DINODE_FMT_LOCAL) {
1376 error = xfs_bmap_count_blocks(tp, tip, XFS_ATTR_FORK, &junk,
1377 &taforkblks);
1378 if (error)
1379 return error;
1380 }
1381
1382 /*
1383 * Btree format (v3) inodes have the inode number stamped in the bmbt
1384 * block headers. We can't start changing the bmbt blocks until the
1385 * inode owner change is logged so recovery does the right thing in the
1386 * event of a crash. Set the owner change log flags now and leave the
1387 * bmbt scan as the last step.
1388 */
1389 if (xfs_has_v3inodes(ip->i_mount)) {
1390 if (ip->i_df.if_format == XFS_DINODE_FMT_BTREE)
1391 (*target_log_flags) |= XFS_ILOG_DOWNER;
1392 if (tip->i_df.if_format == XFS_DINODE_FMT_BTREE)
1393 (*src_log_flags) |= XFS_ILOG_DOWNER;
1394 }
1395
1396 /*
1397 * Swap the data forks of the inodes
1398 */
1399 swap(ip->i_df, tip->i_df);
1400
1401 /*
1402 * Fix the on-disk inode values
1403 */
1404 tmp = (uint64_t)ip->i_nblocks;
1405 ip->i_nblocks = tip->i_nblocks - taforkblks + aforkblks;
1406 tip->i_nblocks = tmp + taforkblks - aforkblks;
1407
1408 /*
1409 * The extents in the source inode could still contain speculative
1410 * preallocation beyond EOF (e.g. the file is open but not modified
1411 * while defrag is in progress). In that case, we need to copy over the
1412 * number of delalloc blocks the data fork in the source inode is
1413 * tracking beyond EOF so that when the fork is truncated away when the
1414 * temporary inode is unlinked we don't underrun the i_delayed_blks
1415 * counter on that inode.
1416 */
1417 ASSERT(tip->i_delayed_blks == 0);
1418 tip->i_delayed_blks = ip->i_delayed_blks;
1419 ip->i_delayed_blks = 0;
1420
1421 switch (ip->i_df.if_format) {
1422 case XFS_DINODE_FMT_EXTENTS:
1423 (*src_log_flags) |= XFS_ILOG_DEXT;
1424 break;
1425 case XFS_DINODE_FMT_BTREE:
1426 ASSERT(!xfs_has_v3inodes(ip->i_mount) ||
1427 (*src_log_flags & XFS_ILOG_DOWNER));
1428 (*src_log_flags) |= XFS_ILOG_DBROOT;
1429 break;
1430 }
1431
1432 switch (tip->i_df.if_format) {
1433 case XFS_DINODE_FMT_EXTENTS:
1434 (*target_log_flags) |= XFS_ILOG_DEXT;
1435 break;
1436 case XFS_DINODE_FMT_BTREE:
1437 (*target_log_flags) |= XFS_ILOG_DBROOT;
1438 ASSERT(!xfs_has_v3inodes(ip->i_mount) ||
1439 (*target_log_flags & XFS_ILOG_DOWNER));
1440 break;
1441 }
1442
1443 return 0;
1444}
1445
1446/*
1447 * Fix up the owners of the bmbt blocks to refer to the current inode. The
1448 * change owner scan attempts to order all modified buffers in the current
1449 * transaction. In the event of ordered buffer failure, the offending buffer is
1450 * physically logged as a fallback and the scan returns -EAGAIN. We must roll
1451 * the transaction in this case to replenish the fallback log reservation and
1452 * restart the scan. This process repeats until the scan completes.
1453 */
1454static int
1455xfs_swap_change_owner(
1456 struct xfs_trans **tpp,
1457 struct xfs_inode *ip,
1458 struct xfs_inode *tmpip)
1459{
1460 int error;
1461 struct xfs_trans *tp = *tpp;
1462
1463 do {
1464 error = xfs_bmbt_change_owner(tp, ip, XFS_DATA_FORK, ip->i_ino,
1465 NULL);
1466 /* success or fatal error */
1467 if (error != -EAGAIN)
1468 break;
1469
1470 error = xfs_trans_roll(tpp);
1471 if (error)
1472 break;
1473 tp = *tpp;
1474
1475 /*
1476 * Redirty both inodes so they can relog and keep the log tail
1477 * moving forward.
1478 */
1479 xfs_trans_ijoin(tp, ip, 0);
1480 xfs_trans_ijoin(tp, tmpip, 0);
1481 xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
1482 xfs_trans_log_inode(tp, tmpip, XFS_ILOG_CORE);
1483 } while (true);
1484
1485 return error;
1486}
1487
1488int
1489xfs_swap_extents(
1490 struct xfs_inode *ip, /* target inode */
1491 struct xfs_inode *tip, /* tmp inode */
1492 struct xfs_swapext *sxp)
1493{
1494 struct xfs_mount *mp = ip->i_mount;
1495 struct xfs_trans *tp;
1496 struct xfs_bstat *sbp = &sxp->sx_stat;
1497 int src_log_flags, target_log_flags;
1498 int error = 0;
1499 uint64_t f;
1500 int resblks = 0;
1501 unsigned int flags = 0;
1502 struct timespec64 ctime, mtime;
1503
1504 /*
1505 * Lock the inodes against other IO, page faults and truncate to
1506 * begin with. Then we can ensure the inodes are flushed and have no
1507 * page cache safely. Once we have done this we can take the ilocks and
1508 * do the rest of the checks.
1509 */
1510 lock_two_nondirectories(VFS_I(ip), VFS_I(tip));
1511 filemap_invalidate_lock_two(VFS_I(ip)->i_mapping,
1512 VFS_I(tip)->i_mapping);
1513
1514 /* Verify that both files have the same format */
1515 if ((VFS_I(ip)->i_mode & S_IFMT) != (VFS_I(tip)->i_mode & S_IFMT)) {
1516 error = -EINVAL;
1517 goto out_unlock;
1518 }
1519
1520 /* Verify both files are either real-time or non-realtime */
1521 if (XFS_IS_REALTIME_INODE(ip) != XFS_IS_REALTIME_INODE(tip)) {
1522 error = -EINVAL;
1523 goto out_unlock;
1524 }
1525
1526 /*
1527 * The rmapbt implementation is unable to resume a swapext operation
1528 * after a crash if the allocation unit size is larger than a block.
1529 * This (deprecated) interface will not be upgraded to handle this
1530 * situation. Defragmentation must be performed with the commit range
1531 * ioctl.
1532 */
1533 if (XFS_IS_REALTIME_INODE(ip) && xfs_has_rtgroups(ip->i_mount)) {
1534 error = -EOPNOTSUPP;
1535 goto out_unlock;
1536 }
1537
1538 error = xfs_qm_dqattach(ip);
1539 if (error)
1540 goto out_unlock;
1541
1542 error = xfs_qm_dqattach(tip);
1543 if (error)
1544 goto out_unlock;
1545
1546 error = xfs_swap_extent_flush(ip);
1547 if (error)
1548 goto out_unlock;
1549 error = xfs_swap_extent_flush(tip);
1550 if (error)
1551 goto out_unlock;
1552
1553 if (xfs_inode_has_cow_data(tip)) {
1554 error = xfs_reflink_cancel_cow_range(tip, 0, NULLFILEOFF, true);
1555 if (error)
1556 goto out_unlock;
1557 }
1558
1559 /*
1560 * Extent "swapping" with rmap requires a permanent reservation and
1561 * a block reservation because it's really just a remap operation
1562 * performed with log redo items!
1563 */
1564 if (xfs_has_rmapbt(mp)) {
1565 int w = XFS_DATA_FORK;
1566 uint32_t ipnext = ip->i_df.if_nextents;
1567 uint32_t tipnext = tip->i_df.if_nextents;
1568
1569 /*
1570 * Conceptually this shouldn't affect the shape of either bmbt,
1571 * but since we atomically move extents one by one, we reserve
1572 * enough space to rebuild both trees.
1573 */
1574 resblks = XFS_SWAP_RMAP_SPACE_RES(mp, ipnext, w);
1575 resblks += XFS_SWAP_RMAP_SPACE_RES(mp, tipnext, w);
1576
1577 /*
1578 * If either inode straddles a bmapbt block allocation boundary,
1579 * the rmapbt algorithm triggers repeated allocs and frees as
1580 * extents are remapped. This can exhaust the block reservation
1581 * prematurely and cause shutdown. Return freed blocks to the
1582 * transaction reservation to counter this behavior.
1583 */
1584 flags |= XFS_TRANS_RES_FDBLKS;
1585 }
1586 error = xfs_trans_alloc(mp, &M_RES(mp)->tr_write, resblks, 0, flags,
1587 &tp);
1588 if (error)
1589 goto out_unlock;
1590
1591 /*
1592 * Lock and join the inodes to the tansaction so that transaction commit
1593 * or cancel will unlock the inodes from this point onwards.
1594 */
1595 xfs_lock_two_inodes(ip, XFS_ILOCK_EXCL, tip, XFS_ILOCK_EXCL);
1596 xfs_trans_ijoin(tp, ip, 0);
1597 xfs_trans_ijoin(tp, tip, 0);
1598
1599
1600 /* Verify all data are being swapped */
1601 if (sxp->sx_offset != 0 ||
1602 sxp->sx_length != ip->i_disk_size ||
1603 sxp->sx_length != tip->i_disk_size) {
1604 error = -EFAULT;
1605 goto out_trans_cancel;
1606 }
1607
1608 trace_xfs_swap_extent_before(ip, 0);
1609 trace_xfs_swap_extent_before(tip, 1);
1610
1611 /* check inode formats now that data is flushed */
1612 error = xfs_swap_extents_check_format(ip, tip);
1613 if (error) {
1614 xfs_notice(mp,
1615 "%s: inode 0x%llx format is incompatible for exchanging.",
1616 __func__, ip->i_ino);
1617 goto out_trans_cancel;
1618 }
1619
1620 /*
1621 * Compare the current change & modify times with that
1622 * passed in. If they differ, we abort this swap.
1623 * This is the mechanism used to ensure the calling
1624 * process that the file was not changed out from
1625 * under it.
1626 */
1627 ctime = inode_get_ctime(VFS_I(ip));
1628 mtime = inode_get_mtime(VFS_I(ip));
1629 if ((sbp->bs_ctime.tv_sec != ctime.tv_sec) ||
1630 (sbp->bs_ctime.tv_nsec != ctime.tv_nsec) ||
1631 (sbp->bs_mtime.tv_sec != mtime.tv_sec) ||
1632 (sbp->bs_mtime.tv_nsec != mtime.tv_nsec)) {
1633 error = -EBUSY;
1634 goto out_trans_cancel;
1635 }
1636
1637 /*
1638 * Note the trickiness in setting the log flags - we set the owner log
1639 * flag on the opposite inode (i.e. the inode we are setting the new
1640 * owner to be) because once we swap the forks and log that, log
1641 * recovery is going to see the fork as owned by the swapped inode,
1642 * not the pre-swapped inodes.
1643 */
1644 src_log_flags = XFS_ILOG_CORE;
1645 target_log_flags = XFS_ILOG_CORE;
1646
1647 if (xfs_has_rmapbt(mp))
1648 error = xfs_swap_extent_rmap(&tp, ip, tip);
1649 else
1650 error = xfs_swap_extent_forks(tp, ip, tip, &src_log_flags,
1651 &target_log_flags);
1652 if (error)
1653 goto out_trans_cancel;
1654
1655 /* Do we have to swap reflink flags? */
1656 if ((ip->i_diflags2 & XFS_DIFLAG2_REFLINK) ^
1657 (tip->i_diflags2 & XFS_DIFLAG2_REFLINK)) {
1658 f = ip->i_diflags2 & XFS_DIFLAG2_REFLINK;
1659 ip->i_diflags2 &= ~XFS_DIFLAG2_REFLINK;
1660 ip->i_diflags2 |= tip->i_diflags2 & XFS_DIFLAG2_REFLINK;
1661 tip->i_diflags2 &= ~XFS_DIFLAG2_REFLINK;
1662 tip->i_diflags2 |= f & XFS_DIFLAG2_REFLINK;
1663 }
1664
1665 /* Swap the cow forks. */
1666 if (xfs_has_reflink(mp)) {
1667 ASSERT(!ip->i_cowfp ||
1668 ip->i_cowfp->if_format == XFS_DINODE_FMT_EXTENTS);
1669 ASSERT(!tip->i_cowfp ||
1670 tip->i_cowfp->if_format == XFS_DINODE_FMT_EXTENTS);
1671
1672 swap(ip->i_cowfp, tip->i_cowfp);
1673
1674 if (ip->i_cowfp && ip->i_cowfp->if_bytes)
1675 xfs_inode_set_cowblocks_tag(ip);
1676 else
1677 xfs_inode_clear_cowblocks_tag(ip);
1678 if (tip->i_cowfp && tip->i_cowfp->if_bytes)
1679 xfs_inode_set_cowblocks_tag(tip);
1680 else
1681 xfs_inode_clear_cowblocks_tag(tip);
1682 }
1683
1684 xfs_trans_log_inode(tp, ip, src_log_flags);
1685 xfs_trans_log_inode(tp, tip, target_log_flags);
1686
1687 /*
1688 * The extent forks have been swapped, but crc=1,rmapbt=0 filesystems
1689 * have inode number owner values in the bmbt blocks that still refer to
1690 * the old inode. Scan each bmbt to fix up the owner values with the
1691 * inode number of the current inode.
1692 */
1693 if (src_log_flags & XFS_ILOG_DOWNER) {
1694 error = xfs_swap_change_owner(&tp, ip, tip);
1695 if (error)
1696 goto out_trans_cancel;
1697 }
1698 if (target_log_flags & XFS_ILOG_DOWNER) {
1699 error = xfs_swap_change_owner(&tp, tip, ip);
1700 if (error)
1701 goto out_trans_cancel;
1702 }
1703
1704 /*
1705 * If this is a synchronous mount, make sure that the
1706 * transaction goes to disk before returning to the user.
1707 */
1708 if (xfs_has_wsync(mp))
1709 xfs_trans_set_sync(tp);
1710
1711 error = xfs_trans_commit(tp);
1712
1713 trace_xfs_swap_extent_after(ip, 0);
1714 trace_xfs_swap_extent_after(tip, 1);
1715
1716out_unlock_ilock:
1717 xfs_iunlock(ip, XFS_ILOCK_EXCL);
1718 xfs_iunlock(tip, XFS_ILOCK_EXCL);
1719out_unlock:
1720 filemap_invalidate_unlock_two(VFS_I(ip)->i_mapping,
1721 VFS_I(tip)->i_mapping);
1722 unlock_two_nondirectories(VFS_I(ip), VFS_I(tip));
1723 return error;
1724
1725out_trans_cancel:
1726 xfs_trans_cancel(tp);
1727 goto out_unlock_ilock;
1728}