1 // SPDX-License-Identifier: GPL-2.0
2 /*
3 * Copyright (C) 2008 Oracle. All rights reserved.
4 */
5
6 #include <linux/sched.h>
7 #include <linux/slab.h>
8 #include <linux/blkdev.h>
9 #include <linux/list_sort.h>
10 #include <linux/iversion.h>
11 #include "misc.h"
12 #include "ctree.h"
13 #include "tree-log.h"
14 #include "disk-io.h"
15 #include "locking.h"
16 #include "backref.h"
17 #include "compression.h"
18 #include "qgroup.h"
19 #include "block-group.h"
20 #include "space-info.h"
21 #include "inode-item.h"
22 #include "fs.h"
23 #include "accessors.h"
24 #include "extent-tree.h"
25 #include "root-tree.h"
26 #include "dir-item.h"
27 #include "file-item.h"
28 #include "file.h"
29 #include "orphan.h"
30 #include "print-tree.h"
31 #include "tree-checker.h"
32 #include "delayed-inode.h"
33
34 #define MAX_CONFLICT_INODES 10
35
36 /* magic values for the inode_only field in btrfs_log_inode:
37 *
38 * LOG_INODE_ALL means to log everything
39 * LOG_INODE_EXISTS means to log just enough to recreate the inode
40 * during log replay
41 */
42 enum {
43 LOG_INODE_ALL,
44 LOG_INODE_EXISTS,
45 };
46
47 /*
48 * directory trouble cases
49 *
50 * 1) on rename or unlink, if the inode being unlinked isn't in the fsync
51 * log, we must force a full commit before doing an fsync of the directory
52 * where the unlink was done.
53 * ---> record transid of last unlink/rename per directory
54 *
55 * mkdir foo/some_dir
56 * normal commit
57 * rename foo/some_dir foo2/some_dir
58 * mkdir foo/some_dir
59 * fsync foo/some_dir/some_file
60 *
61 * The fsync above will unlink the original some_dir without recording
62 * it in its new location (foo2). After a crash, some_dir will be gone
63 * unless the fsync of some_file forces a full commit
64 *
65 * 2) we must log any new names for any file or dir that is in the fsync
66 * log. ---> check inode while renaming/linking.
67 *
68 * 2a) we must log any new names for any file or dir during rename
69 * when the directory they are being removed from was logged.
70 * ---> check inode and old parent dir during rename
71 *
72 * 2a is actually the more important variant. With the extra logging
73 * a crash might unlink the old name without recreating the new one
74 *
75 * 3) after a crash, we must go through any directories with a link count
76 * of zero and redo the rm -rf
77 *
78 * mkdir f1/foo
79 * normal commit
80 * rm -rf f1/foo
81 * fsync(f1)
82 *
83 * The directory f1 was fully removed from the FS, but fsync was never
84 * called on f1, only its parent dir. After a crash the rm -rf must
85 * be replayed. This must be able to recurse down the entire
86 * directory tree. The inode link count fixup code takes care of the
87 * ugly details.
88 */
89
90 /*
91 * stages for the tree walking. The first
92 * stage (0) is to only pin down the blocks we find
93 * the second stage (1) is to make sure that all the inodes
94 * we find in the log are created in the subvolume.
95 *
96 * The last stage is to deal with directories and links and extents
97 * and all the other fun semantics
98 */
99 enum {
100 LOG_WALK_PIN_ONLY,
101 LOG_WALK_REPLAY_INODES,
102 LOG_WALK_REPLAY_DIR_INDEX,
103 LOG_WALK_REPLAY_ALL,
104 };
105
106 /*
107 * The walk control struct is used to pass state down the chain when processing
108 * the log tree. The stage field tells us which part of the log tree processing
109 * we are currently doing.
110 */
111 struct walk_control {
112 /*
113 * Signal that we are freeing the metadata extents of a log tree.
114 * This is used at transaction commit time while freeing a log tree.
115 */
116 bool free;
117
118 /*
119 * Signal that we are pinning the metadata extents of a log tree and the
120 * data extents its leaves point to (if using mixed block groups).
121 * This happens in the first stage of log replay to ensure that during
122 * replay, while we are modifying subvolume trees, we don't overwrite
123 * the metadata extents of log trees.
124 */
125 bool pin;
126
127 /* What stage of the replay code we're currently in. */
128 int stage;
129
130 /*
131 * Ignore any items from the inode currently being processed. Needs
132 * to be set every time we find a BTRFS_INODE_ITEM_KEY.
133 */
134 bool ignore_cur_inode;
135
136 /*
137 * The root we are currently replaying to. This is NULL for the replay
138 * stage LOG_WALK_PIN_ONLY.
139 */
140 struct btrfs_root *root;
141
142 /* The log tree we are currently processing (not NULL for any stage). */
143 struct btrfs_root *log;
144
145 /* The transaction handle used for replaying all log trees. */
146 struct btrfs_trans_handle *trans;
147
148 /*
149 * The function that gets used to process blocks we find in the tree.
150 * Note the extent_buffer might not be up to date when it is passed in,
151 * and it must be checked or read if you need the data inside it.
152 */
153 int (*process_func)(struct extent_buffer *eb,
154 struct walk_control *wc, u64 gen, int level);
155
156 /*
157 * The following are used only when stage is >= LOG_WALK_REPLAY_INODES
158 * and by the replay_one_buffer() callback.
159 */
160
161 /* The current log leaf being processed. */
162 struct extent_buffer *log_leaf;
163 /* The key being processed of the current log leaf. */
164 struct btrfs_key log_key;
165 /* The slot being processed of the current log leaf. */
166 int log_slot;
167
168 /* A path used for searches and modifications to subvolume trees. */
169 struct btrfs_path *subvol_path;
170 };
171
do_abort_log_replay(struct walk_control * wc,const char * function,unsigned int line,int error,const char * fmt,...)172 static void do_abort_log_replay(struct walk_control *wc, const char *function,
173 unsigned int line, int error, const char *fmt, ...)
174 {
175 struct btrfs_fs_info *fs_info = wc->trans->fs_info;
176 struct va_format vaf;
177 va_list args;
178
179 /*
180 * Do nothing if we already aborted, to avoid dumping leaves again which
181 * can be verbose. Further more, only the first call is useful since it
182 * is where we have a problem. Note that we do not use the flag
183 * BTRFS_FS_STATE_TRANS_ABORTED because log replay calls functions that
184 * are outside of tree-log.c that can abort transactions (such as
185 * btrfs_add_link() for example), so if that happens we still want to
186 * dump all log replay specific information below.
187 */
188 if (test_and_set_bit(BTRFS_FS_STATE_LOG_REPLAY_ABORTED, &fs_info->fs_state))
189 return;
190
191 btrfs_abort_transaction(wc->trans, error);
192
193 if (wc->subvol_path && wc->subvol_path->nodes[0]) {
194 btrfs_crit(fs_info,
195 "subvolume (root %llu) leaf currently being processed:",
196 btrfs_root_id(wc->root));
197 btrfs_print_leaf(wc->subvol_path->nodes[0]);
198 }
199
200 if (wc->log_leaf) {
201 btrfs_crit(fs_info,
202 "log tree (for root %llu) leaf currently being processed (slot %d key " BTRFS_KEY_FMT "):",
203 btrfs_root_id(wc->root), wc->log_slot,
204 BTRFS_KEY_FMT_VALUE(&wc->log_key));
205 btrfs_print_leaf(wc->log_leaf);
206 }
207
208 va_start(args, fmt);
209 vaf.fmt = fmt;
210 vaf.va = &args;
211
212 btrfs_crit(fs_info,
213 "log replay failed in %s:%u for root %llu, stage %d, with error %d: %pV",
214 function, line, btrfs_root_id(wc->root), wc->stage, error, &vaf);
215
216 va_end(args);
217 }
218
219 /*
220 * Use this for aborting a transaction during log replay while we are down the
221 * call chain of replay_one_buffer(), so that we get a lot more useful
222 * information for debugging issues when compared to a plain call to
223 * btrfs_abort_transaction().
224 */
225 #define btrfs_abort_log_replay(wc, error, fmt, args...) \
226 do_abort_log_replay((wc), __func__, __LINE__, (error), fmt, ##args)
227
228 static int btrfs_log_inode(struct btrfs_trans_handle *trans,
229 struct btrfs_inode *inode,
230 int inode_only,
231 struct btrfs_log_ctx *ctx);
232 static int link_to_fixup_dir(struct walk_control *wc, u64 objectid);
233 static noinline int replay_dir_deletes(struct walk_control *wc,
234 u64 dirid, bool del_all);
235 static void wait_log_commit(struct btrfs_root *root, int transid);
236
237 /*
238 * tree logging is a special write ahead log used to make sure that
239 * fsyncs and O_SYNCs can happen without doing full tree commits.
240 *
241 * Full tree commits are expensive because they require commonly
242 * modified blocks to be recowed, creating many dirty pages in the
243 * extent tree an 4x-6x higher write load than ext3.
244 *
245 * Instead of doing a tree commit on every fsync, we use the
246 * key ranges and transaction ids to find items for a given file or directory
247 * that have changed in this transaction. Those items are copied into
248 * a special tree (one per subvolume root), that tree is written to disk
249 * and then the fsync is considered complete.
250 *
251 * After a crash, items are copied out of the log-tree back into the
252 * subvolume tree. Any file data extents found are recorded in the extent
253 * allocation tree, and the log-tree freed.
254 *
255 * The log tree is read three times, once to pin down all the extents it is
256 * using in ram and once, once to create all the inodes logged in the tree
257 * and once to do all the other items.
258 */
259
btrfs_iget_logging(u64 objectid,struct btrfs_root * root)260 static struct btrfs_inode *btrfs_iget_logging(u64 objectid, struct btrfs_root *root)
261 {
262 unsigned int nofs_flag;
263 struct btrfs_inode *inode;
264
265 /* Only meant to be called for subvolume roots and not for log roots. */
266 ASSERT(btrfs_is_fstree(btrfs_root_id(root)), "root_id=%llu", btrfs_root_id(root));
267
268 /*
269 * We're holding a transaction handle whether we are logging or
270 * replaying a log tree, so we must make sure NOFS semantics apply
271 * because btrfs_alloc_inode() may be triggered and it uses GFP_KERNEL
272 * to allocate an inode, which can recurse back into the filesystem and
273 * attempt a transaction commit, resulting in a deadlock.
274 */
275 nofs_flag = memalloc_nofs_save();
276 inode = btrfs_iget(objectid, root);
277 memalloc_nofs_restore(nofs_flag);
278
279 return inode;
280 }
281
282 /*
283 * start a sub transaction and setup the log tree
284 * this increments the log tree writer count to make the people
285 * syncing the tree wait for us to finish
286 */
start_log_trans(struct btrfs_trans_handle * trans,struct btrfs_root * root,struct btrfs_log_ctx * ctx)287 static int start_log_trans(struct btrfs_trans_handle *trans,
288 struct btrfs_root *root,
289 struct btrfs_log_ctx *ctx)
290 {
291 struct btrfs_fs_info *fs_info = root->fs_info;
292 struct btrfs_root *tree_root = fs_info->tree_root;
293 const bool zoned = btrfs_is_zoned(fs_info);
294 int ret = 0;
295 bool created = false;
296
297 /*
298 * First check if the log root tree was already created. If not, create
299 * it before locking the root's log_mutex, just to keep lockdep happy.
300 */
301 if (!test_bit(BTRFS_ROOT_HAS_LOG_TREE, &tree_root->state)) {
302 mutex_lock(&tree_root->log_mutex);
303 if (!fs_info->log_root_tree) {
304 ret = btrfs_init_log_root_tree(trans, fs_info);
305 if (!ret) {
306 set_bit(BTRFS_ROOT_HAS_LOG_TREE, &tree_root->state);
307 created = true;
308 }
309 }
310 mutex_unlock(&tree_root->log_mutex);
311 if (ret)
312 return ret;
313 }
314
315 mutex_lock(&root->log_mutex);
316
317 again:
318 if (root->log_root) {
319 int index = (root->log_transid + 1) % 2;
320
321 if (btrfs_need_log_full_commit(trans)) {
322 ret = BTRFS_LOG_FORCE_COMMIT;
323 goto out;
324 }
325
326 if (zoned && atomic_read(&root->log_commit[index])) {
327 wait_log_commit(root, root->log_transid - 1);
328 goto again;
329 }
330
331 if (!root->log_start_pid) {
332 clear_bit(BTRFS_ROOT_MULTI_LOG_TASKS, &root->state);
333 root->log_start_pid = current->pid;
334 } else if (root->log_start_pid != current->pid) {
335 set_bit(BTRFS_ROOT_MULTI_LOG_TASKS, &root->state);
336 }
337 } else {
338 /*
339 * This means fs_info->log_root_tree was already created
340 * for some other FS trees. Do the full commit not to mix
341 * nodes from multiple log transactions to do sequential
342 * writing.
343 */
344 if (zoned && !created) {
345 ret = BTRFS_LOG_FORCE_COMMIT;
346 goto out;
347 }
348
349 ret = btrfs_add_log_tree(trans, root);
350 if (ret)
351 goto out;
352
353 set_bit(BTRFS_ROOT_HAS_LOG_TREE, &root->state);
354 clear_bit(BTRFS_ROOT_MULTI_LOG_TASKS, &root->state);
355 root->log_start_pid = current->pid;
356 }
357
358 atomic_inc(&root->log_writers);
359 if (!ctx->logging_new_name) {
360 int index = root->log_transid % 2;
361 list_add_tail(&ctx->list, &root->log_ctxs[index]);
362 ctx->log_transid = root->log_transid;
363 }
364
365 out:
366 mutex_unlock(&root->log_mutex);
367 return ret;
368 }
369
370 /*
371 * returns 0 if there was a log transaction running and we were able
372 * to join, or returns -ENOENT if there were not transactions
373 * in progress
374 */
join_running_log_trans(struct btrfs_root * root)375 static int join_running_log_trans(struct btrfs_root *root)
376 {
377 const bool zoned = btrfs_is_zoned(root->fs_info);
378 int ret = -ENOENT;
379
380 if (!test_bit(BTRFS_ROOT_HAS_LOG_TREE, &root->state))
381 return ret;
382
383 mutex_lock(&root->log_mutex);
384 again:
385 if (root->log_root) {
386 int index = (root->log_transid + 1) % 2;
387
388 ret = 0;
389 if (zoned && atomic_read(&root->log_commit[index])) {
390 wait_log_commit(root, root->log_transid - 1);
391 goto again;
392 }
393 atomic_inc(&root->log_writers);
394 }
395 mutex_unlock(&root->log_mutex);
396 return ret;
397 }
398
399 /*
400 * This either makes the current running log transaction wait
401 * until you call btrfs_end_log_trans() or it makes any future
402 * log transactions wait until you call btrfs_end_log_trans()
403 */
btrfs_pin_log_trans(struct btrfs_root * root)404 void btrfs_pin_log_trans(struct btrfs_root *root)
405 {
406 atomic_inc(&root->log_writers);
407 }
408
409 /*
410 * indicate we're done making changes to the log tree
411 * and wake up anyone waiting to do a sync
412 */
btrfs_end_log_trans(struct btrfs_root * root)413 void btrfs_end_log_trans(struct btrfs_root *root)
414 {
415 if (atomic_dec_and_test(&root->log_writers)) {
416 /* atomic_dec_and_test implies a barrier */
417 cond_wake_up_nomb(&root->log_writer_wait);
418 }
419 }
420
421 /*
422 * process_func used to pin down extents, write them or wait on them
423 */
process_one_buffer(struct extent_buffer * eb,struct walk_control * wc,u64 gen,int level)424 static int process_one_buffer(struct extent_buffer *eb,
425 struct walk_control *wc, u64 gen, int level)
426 {
427 struct btrfs_root *log = wc->log;
428 struct btrfs_trans_handle *trans = wc->trans;
429 struct btrfs_fs_info *fs_info = log->fs_info;
430 int ret = 0;
431
432 /*
433 * If this fs is mixed then we need to be able to process the leaves to
434 * pin down any logged extents, so we have to read the block.
435 */
436 if (btrfs_fs_incompat(fs_info, MIXED_GROUPS)) {
437 struct btrfs_tree_parent_check check = {
438 .level = level,
439 .transid = gen
440 };
441
442 ret = btrfs_read_extent_buffer(eb, &check);
443 if (unlikely(ret)) {
444 if (trans)
445 btrfs_abort_transaction(trans, ret);
446 else
447 btrfs_handle_fs_error(fs_info, ret, NULL);
448 return ret;
449 }
450 }
451
452 if (wc->pin) {
453 ASSERT(trans != NULL);
454 ret = btrfs_pin_extent_for_log_replay(trans, eb);
455 if (unlikely(ret)) {
456 btrfs_abort_transaction(trans, ret);
457 return ret;
458 }
459
460 if (btrfs_buffer_uptodate(eb, gen, NULL) && level == 0) {
461 ret = btrfs_exclude_logged_extents(eb);
462 if (ret)
463 btrfs_abort_transaction(trans, ret);
464 }
465 }
466 return ret;
467 }
468
469 /*
470 * Item overwrite used by log replay. The given log tree leaf, slot and key
471 * from the walk_control structure all refer to the source data we are copying
472 * out.
473 *
474 * The given root is for the tree we are copying into, and path is a scratch
475 * path for use in this function (it should be released on entry and will be
476 * released on exit).
477 *
478 * If the key is already in the destination tree the existing item is
479 * overwritten. If the existing item isn't big enough, it is extended.
480 * If it is too large, it is truncated.
481 *
482 * If the key isn't in the destination yet, a new item is inserted.
483 */
overwrite_item(struct walk_control * wc)484 static int overwrite_item(struct walk_control *wc)
485 {
486 struct btrfs_trans_handle *trans = wc->trans;
487 struct btrfs_root *root = wc->root;
488 int ret;
489 u32 item_size;
490 u64 saved_i_size = 0;
491 int save_old_i_size = 0;
492 unsigned long src_ptr;
493 unsigned long dst_ptr;
494 struct extent_buffer *dst_eb;
495 int dst_slot;
496 const bool is_inode_item = (wc->log_key.type == BTRFS_INODE_ITEM_KEY);
497
498 /*
499 * This is only used during log replay, so the root is always from a
500 * fs/subvolume tree. In case we ever need to support a log root, then
501 * we'll have to clone the leaf in the path, release the path and use
502 * the leaf before writing into the log tree. See the comments at
503 * copy_items() for more details.
504 */
505 ASSERT(btrfs_root_id(root) != BTRFS_TREE_LOG_OBJECTID, "root_id=%llu", btrfs_root_id(root));
506
507 item_size = btrfs_item_size(wc->log_leaf, wc->log_slot);
508 src_ptr = btrfs_item_ptr_offset(wc->log_leaf, wc->log_slot);
509
510 /* Look for the key in the destination tree. */
511 ret = btrfs_search_slot(NULL, root, &wc->log_key, wc->subvol_path, 0, 0);
512 if (ret < 0) {
513 btrfs_abort_log_replay(wc, ret,
514 "failed to search subvolume tree for key " BTRFS_KEY_FMT " root %llu",
515 BTRFS_KEY_FMT_VALUE(&wc->log_key),
516 btrfs_root_id(root));
517 return ret;
518 }
519
520 dst_eb = wc->subvol_path->nodes[0];
521 dst_slot = wc->subvol_path->slots[0];
522
523 if (ret == 0) {
524 char *src_copy;
525 const u32 dst_size = btrfs_item_size(dst_eb, dst_slot);
526
527 if (dst_size != item_size)
528 goto insert;
529
530 if (item_size == 0) {
531 btrfs_release_path(wc->subvol_path);
532 return 0;
533 }
534 src_copy = kmalloc(item_size, GFP_NOFS);
535 if (!src_copy) {
536 btrfs_abort_log_replay(wc, -ENOMEM,
537 "failed to allocate memory for log leaf item");
538 return -ENOMEM;
539 }
540
541 read_extent_buffer(wc->log_leaf, src_copy, src_ptr, item_size);
542 dst_ptr = btrfs_item_ptr_offset(dst_eb, dst_slot);
543 ret = memcmp_extent_buffer(dst_eb, src_copy, dst_ptr, item_size);
544
545 kfree(src_copy);
546 /*
547 * they have the same contents, just return, this saves
548 * us from cowing blocks in the destination tree and doing
549 * extra writes that may not have been done by a previous
550 * sync
551 */
552 if (ret == 0) {
553 btrfs_release_path(wc->subvol_path);
554 return 0;
555 }
556
557 /*
558 * We need to load the old nbytes into the inode so when we
559 * replay the extents we've logged we get the right nbytes.
560 */
561 if (is_inode_item) {
562 struct btrfs_inode_item *item;
563 u64 nbytes;
564 u32 mode;
565
566 item = btrfs_item_ptr(dst_eb, dst_slot,
567 struct btrfs_inode_item);
568 nbytes = btrfs_inode_nbytes(dst_eb, item);
569 item = btrfs_item_ptr(wc->log_leaf, wc->log_slot,
570 struct btrfs_inode_item);
571 btrfs_set_inode_nbytes(wc->log_leaf, item, nbytes);
572
573 /*
574 * If this is a directory we need to reset the i_size to
575 * 0 so that we can set it up properly when replaying
576 * the rest of the items in this log.
577 */
578 mode = btrfs_inode_mode(wc->log_leaf, item);
579 if (S_ISDIR(mode))
580 btrfs_set_inode_size(wc->log_leaf, item, 0);
581 }
582 } else if (is_inode_item) {
583 struct btrfs_inode_item *item;
584 u32 mode;
585
586 /*
587 * New inode, set nbytes to 0 so that the nbytes comes out
588 * properly when we replay the extents.
589 */
590 item = btrfs_item_ptr(wc->log_leaf, wc->log_slot, struct btrfs_inode_item);
591 btrfs_set_inode_nbytes(wc->log_leaf, item, 0);
592
593 /*
594 * If this is a directory we need to reset the i_size to 0 so
595 * that we can set it up properly when replaying the rest of
596 * the items in this log.
597 */
598 mode = btrfs_inode_mode(wc->log_leaf, item);
599 if (S_ISDIR(mode))
600 btrfs_set_inode_size(wc->log_leaf, item, 0);
601 }
602 insert:
603 btrfs_release_path(wc->subvol_path);
604 /* try to insert the key into the destination tree */
605 wc->subvol_path->skip_release_on_error = true;
606 ret = btrfs_insert_empty_item(trans, root, wc->subvol_path, &wc->log_key, item_size);
607 wc->subvol_path->skip_release_on_error = false;
608
609 dst_eb = wc->subvol_path->nodes[0];
610 dst_slot = wc->subvol_path->slots[0];
611
612 /* make sure any existing item is the correct size */
613 if (ret == -EEXIST || ret == -EOVERFLOW) {
614 const u32 found_size = btrfs_item_size(dst_eb, dst_slot);
615
616 if (found_size > item_size)
617 btrfs_truncate_item(trans, wc->subvol_path, item_size, 1);
618 else if (found_size < item_size)
619 btrfs_extend_item(trans, wc->subvol_path, item_size - found_size);
620 } else if (ret) {
621 btrfs_abort_log_replay(wc, ret,
622 "failed to insert item for key " BTRFS_KEY_FMT,
623 BTRFS_KEY_FMT_VALUE(&wc->log_key));
624 return ret;
625 }
626 dst_ptr = btrfs_item_ptr_offset(dst_eb, dst_slot);
627
628 /* don't overwrite an existing inode if the generation number
629 * was logged as zero. This is done when the tree logging code
630 * is just logging an inode to make sure it exists after recovery.
631 *
632 * Also, don't overwrite i_size on directories during replay.
633 * log replay inserts and removes directory items based on the
634 * state of the tree found in the subvolume, and i_size is modified
635 * as it goes
636 */
637 if (is_inode_item && ret == -EEXIST) {
638 struct btrfs_inode_item *src_item;
639 struct btrfs_inode_item *dst_item;
640
641 src_item = (struct btrfs_inode_item *)src_ptr;
642 dst_item = (struct btrfs_inode_item *)dst_ptr;
643
644 if (btrfs_inode_generation(wc->log_leaf, src_item) == 0) {
645 const u64 ino_size = btrfs_inode_size(wc->log_leaf, src_item);
646
647 /*
648 * For regular files an ino_size == 0 is used only when
649 * logging that an inode exists, as part of a directory
650 * fsync, and the inode wasn't fsynced before. In this
651 * case don't set the size of the inode in the fs/subvol
652 * tree, otherwise we would be throwing valid data away.
653 */
654 if (S_ISREG(btrfs_inode_mode(wc->log_leaf, src_item)) &&
655 S_ISREG(btrfs_inode_mode(dst_eb, dst_item)) &&
656 ino_size != 0)
657 btrfs_set_inode_size(dst_eb, dst_item, ino_size);
658 goto no_copy;
659 }
660
661 if (S_ISDIR(btrfs_inode_mode(wc->log_leaf, src_item)) &&
662 S_ISDIR(btrfs_inode_mode(dst_eb, dst_item))) {
663 save_old_i_size = 1;
664 saved_i_size = btrfs_inode_size(dst_eb, dst_item);
665 }
666 }
667
668 copy_extent_buffer(dst_eb, wc->log_leaf, dst_ptr, src_ptr, item_size);
669
670 if (save_old_i_size) {
671 struct btrfs_inode_item *dst_item;
672
673 dst_item = (struct btrfs_inode_item *)dst_ptr;
674 btrfs_set_inode_size(dst_eb, dst_item, saved_i_size);
675 }
676
677 /* make sure the generation is filled in */
678 if (is_inode_item) {
679 struct btrfs_inode_item *dst_item;
680
681 dst_item = (struct btrfs_inode_item *)dst_ptr;
682 if (btrfs_inode_generation(dst_eb, dst_item) == 0)
683 btrfs_set_inode_generation(dst_eb, dst_item, trans->transid);
684 }
685 no_copy:
686 btrfs_release_path(wc->subvol_path);
687 return 0;
688 }
689
read_alloc_one_name(struct extent_buffer * eb,void * start,int len,struct fscrypt_str * name)690 static int read_alloc_one_name(struct extent_buffer *eb, void *start, int len,
691 struct fscrypt_str *name)
692 {
693 char *buf;
694
695 buf = kmalloc(len, GFP_NOFS);
696 if (!buf)
697 return -ENOMEM;
698
699 read_extent_buffer(eb, buf, (unsigned long)start, len);
700 name->name = buf;
701 name->len = len;
702 return 0;
703 }
704
705 /* replays a single extent in 'eb' at 'slot' with 'key' into the
706 * subvolume 'root'. path is released on entry and should be released
707 * on exit.
708 *
709 * extents in the log tree have not been allocated out of the extent
710 * tree yet. So, this completes the allocation, taking a reference
711 * as required if the extent already exists or creating a new extent
712 * if it isn't in the extent allocation tree yet.
713 *
714 * The extent is inserted into the file, dropping any existing extents
715 * from the file that overlap the new one.
716 */
replay_one_extent(struct walk_control * wc)717 static noinline int replay_one_extent(struct walk_control *wc)
718 {
719 struct btrfs_trans_handle *trans = wc->trans;
720 struct btrfs_root *root = wc->root;
721 struct btrfs_drop_extents_args drop_args = { 0 };
722 struct btrfs_fs_info *fs_info = root->fs_info;
723 int found_type;
724 u64 extent_end;
725 const u64 start = wc->log_key.offset;
726 u64 nbytes = 0;
727 u64 csum_start;
728 u64 csum_end;
729 LIST_HEAD(ordered_sums);
730 u64 offset;
731 unsigned long dest_offset;
732 struct btrfs_key ins;
733 struct btrfs_file_extent_item *item;
734 struct btrfs_inode *inode = NULL;
735 int ret = 0;
736
737 item = btrfs_item_ptr(wc->log_leaf, wc->log_slot, struct btrfs_file_extent_item);
738 found_type = btrfs_file_extent_type(wc->log_leaf, item);
739
740 if (found_type == BTRFS_FILE_EXTENT_REG ||
741 found_type == BTRFS_FILE_EXTENT_PREALLOC) {
742 extent_end = start + btrfs_file_extent_num_bytes(wc->log_leaf, item);
743 /* Holes don't take up space. */
744 if (btrfs_file_extent_disk_bytenr(wc->log_leaf, item) != 0)
745 nbytes = btrfs_file_extent_num_bytes(wc->log_leaf, item);
746 } else if (found_type == BTRFS_FILE_EXTENT_INLINE) {
747 nbytes = btrfs_file_extent_ram_bytes(wc->log_leaf, item);
748 extent_end = ALIGN(start + nbytes, fs_info->sectorsize);
749 } else {
750 btrfs_abort_log_replay(wc, -EUCLEAN,
751 "unexpected extent type=%d root=%llu inode=%llu offset=%llu",
752 found_type, btrfs_root_id(root),
753 wc->log_key.objectid, wc->log_key.offset);
754 return -EUCLEAN;
755 }
756
757 inode = btrfs_iget_logging(wc->log_key.objectid, root);
758 if (IS_ERR(inode)) {
759 ret = PTR_ERR(inode);
760 btrfs_abort_log_replay(wc, ret,
761 "failed to get inode %llu for root %llu",
762 wc->log_key.objectid, btrfs_root_id(root));
763 return ret;
764 }
765
766 /*
767 * first check to see if we already have this extent in the
768 * file. This must be done before the btrfs_drop_extents run
769 * so we don't try to drop this extent.
770 */
771 ret = btrfs_lookup_file_extent(trans, root, wc->subvol_path,
772 btrfs_ino(inode), start, 0);
773
774 if (ret == 0 &&
775 (found_type == BTRFS_FILE_EXTENT_REG ||
776 found_type == BTRFS_FILE_EXTENT_PREALLOC)) {
777 struct extent_buffer *leaf = wc->subvol_path->nodes[0];
778 struct btrfs_file_extent_item existing;
779 unsigned long ptr;
780
781 ptr = btrfs_item_ptr_offset(leaf, wc->subvol_path->slots[0]);
782 read_extent_buffer(leaf, &existing, ptr, sizeof(existing));
783
784 /*
785 * we already have a pointer to this exact extent,
786 * we don't have to do anything
787 */
788 if (memcmp_extent_buffer(wc->log_leaf, &existing, (unsigned long)item,
789 sizeof(existing)) == 0) {
790 btrfs_release_path(wc->subvol_path);
791 goto out;
792 }
793 }
794 btrfs_release_path(wc->subvol_path);
795
796 /* drop any overlapping extents */
797 drop_args.start = start;
798 drop_args.end = extent_end;
799 drop_args.drop_cache = true;
800 drop_args.path = wc->subvol_path;
801 ret = btrfs_drop_extents(trans, root, inode, &drop_args);
802 if (ret) {
803 btrfs_abort_log_replay(wc, ret,
804 "failed to drop extents for inode %llu range [%llu, %llu) root %llu",
805 wc->log_key.objectid, start, extent_end,
806 btrfs_root_id(root));
807 goto out;
808 }
809
810 if (found_type == BTRFS_FILE_EXTENT_INLINE) {
811 /* inline extents are easy, we just overwrite them */
812 ret = overwrite_item(wc);
813 if (ret)
814 goto out;
815 goto update_inode;
816 }
817
818 /*
819 * If not an inline extent, it can only be a regular or prealloc one.
820 * We have checked that above and returned -EUCLEAN if not.
821 */
822
823 /* A hole and NO_HOLES feature enabled, nothing else to do. */
824 if (btrfs_file_extent_disk_bytenr(wc->log_leaf, item) == 0 &&
825 btrfs_fs_incompat(fs_info, NO_HOLES))
826 goto update_inode;
827
828 ret = btrfs_insert_empty_item(trans, root, wc->subvol_path,
829 &wc->log_key, sizeof(*item));
830 if (ret) {
831 btrfs_abort_log_replay(wc, ret,
832 "failed to insert item with key " BTRFS_KEY_FMT " root %llu",
833 BTRFS_KEY_FMT_VALUE(&wc->log_key),
834 btrfs_root_id(root));
835 goto out;
836 }
837 dest_offset = btrfs_item_ptr_offset(wc->subvol_path->nodes[0],
838 wc->subvol_path->slots[0]);
839 copy_extent_buffer(wc->subvol_path->nodes[0], wc->log_leaf, dest_offset,
840 (unsigned long)item, sizeof(*item));
841
842 /*
843 * We have an explicit hole and NO_HOLES is not enabled. We have added
844 * the hole file extent item to the subvolume tree, so we don't have
845 * anything else to do other than update the file extent item range and
846 * update the inode item.
847 */
848 if (btrfs_file_extent_disk_bytenr(wc->log_leaf, item) == 0) {
849 btrfs_release_path(wc->subvol_path);
850 goto update_inode;
851 }
852
853 ins.objectid = btrfs_file_extent_disk_bytenr(wc->log_leaf, item);
854 ins.type = BTRFS_EXTENT_ITEM_KEY;
855 ins.offset = btrfs_file_extent_disk_num_bytes(wc->log_leaf, item);
856 offset = wc->log_key.offset - btrfs_file_extent_offset(wc->log_leaf, item);
857
858 /*
859 * Manually record dirty extent, as here we did a shallow file extent
860 * item copy and skip normal backref update, but modifying extent tree
861 * all by ourselves. So need to manually record dirty extent for qgroup,
862 * as the owner of the file extent changed from log tree (doesn't affect
863 * qgroup) to fs/file tree (affects qgroup).
864 */
865 ret = btrfs_qgroup_trace_extent(trans, ins.objectid, ins.offset);
866 if (ret < 0) {
867 btrfs_abort_log_replay(wc, ret,
868 "failed to trace extent for bytenr %llu disk_num_bytes %llu inode %llu root %llu",
869 ins.objectid, ins.offset,
870 wc->log_key.objectid, btrfs_root_id(root));
871 goto out;
872 }
873
874 /*
875 * Is this extent already allocated in the extent tree?
876 * If so, just add a reference.
877 */
878 ret = btrfs_lookup_data_extent(fs_info, ins.objectid, ins.offset);
879 if (ret < 0) {
880 btrfs_abort_log_replay(wc, ret,
881 "failed to lookup data extent for bytenr %llu disk_num_bytes %llu inode %llu root %llu",
882 ins.objectid, ins.offset,
883 wc->log_key.objectid, btrfs_root_id(root));
884 goto out;
885 } else if (ret == 0) {
886 struct btrfs_ref ref = {
887 .action = BTRFS_ADD_DELAYED_REF,
888 .bytenr = ins.objectid,
889 .num_bytes = ins.offset,
890 .owning_root = btrfs_root_id(root),
891 .ref_root = btrfs_root_id(root),
892 };
893
894 btrfs_init_data_ref(&ref, wc->log_key.objectid, offset, 0, false);
895 ret = btrfs_inc_extent_ref(trans, &ref);
896 if (ret) {
897 btrfs_abort_log_replay(wc, ret,
898 "failed to increment data extent for bytenr %llu disk_num_bytes %llu inode %llu root %llu",
899 ins.objectid, ins.offset,
900 wc->log_key.objectid,
901 btrfs_root_id(root));
902 goto out;
903 }
904 } else {
905 /* Insert the extent pointer in the extent tree. */
906 ret = btrfs_alloc_logged_file_extent(trans, btrfs_root_id(root),
907 wc->log_key.objectid, offset, &ins);
908 if (ret) {
909 btrfs_abort_log_replay(wc, ret,
910 "failed to allocate logged data extent for bytenr %llu disk_num_bytes %llu offset %llu inode %llu root %llu",
911 ins.objectid, ins.offset, offset,
912 wc->log_key.objectid, btrfs_root_id(root));
913 goto out;
914 }
915 }
916
917 btrfs_release_path(wc->subvol_path);
918
919 if (btrfs_file_extent_compression(wc->log_leaf, item)) {
920 csum_start = ins.objectid;
921 csum_end = csum_start + ins.offset;
922 } else {
923 csum_start = ins.objectid + btrfs_file_extent_offset(wc->log_leaf, item);
924 csum_end = csum_start + btrfs_file_extent_num_bytes(wc->log_leaf, item);
925 }
926
927 ret = btrfs_lookup_csums_list(root->log_root, csum_start, csum_end - 1,
928 &ordered_sums, false);
929 if (ret < 0) {
930 btrfs_abort_log_replay(wc, ret,
931 "failed to lookups csums for range [%llu, %llu) inode %llu root %llu",
932 csum_start, csum_end, wc->log_key.objectid,
933 btrfs_root_id(root));
934 goto out;
935 }
936 ret = 0;
937 /*
938 * Now delete all existing cums in the csum root that cover our range.
939 * We do this because we can have an extent that is completely
940 * referenced by one file extent item and partially referenced by
941 * another file extent item (like after using the clone or extent_same
942 * ioctls). In this case if we end up doing the replay of the one that
943 * partially references the extent first, and we do not do the csum
944 * deletion below, we can get 2 csum items in the csum tree that overlap
945 * each other. For example, imagine our log has the two following file
946 * extent items:
947 *
948 * key (257 EXTENT_DATA 409600)
949 * extent data disk byte 12845056 nr 102400
950 * extent data offset 20480 nr 20480 ram 102400
951 *
952 * key (257 EXTENT_DATA 819200)
953 * extent data disk byte 12845056 nr 102400
954 * extent data offset 0 nr 102400 ram 102400
955 *
956 * Where the second one fully references the 100K extent that starts at
957 * disk byte 12845056, and the log tree has a single csum item that
958 * covers the entire range of the extent:
959 *
960 * key (EXTENT_CSUM EXTENT_CSUM 12845056) itemsize 100
961 *
962 * After the first file extent item is replayed, the csum tree gets the
963 * following csum item:
964 *
965 * key (EXTENT_CSUM EXTENT_CSUM 12865536) itemsize 20
966 *
967 * Which covers the 20K sub-range starting at offset 20K of our extent.
968 * Now when we replay the second file extent item, if we do not delete
969 * existing csum items that cover any of its blocks, we end up getting
970 * two csum items in our csum tree that overlap each other:
971 *
972 * key (EXTENT_CSUM EXTENT_CSUM 12845056) itemsize 100
973 * key (EXTENT_CSUM EXTENT_CSUM 12865536) itemsize 20
974 *
975 * Which is a problem, because after this anyone trying to lookup for
976 * the checksum of any block of our extent starting at an offset of 40K
977 * or higher, will end up looking at the second csum item only, which
978 * does not contain the checksum for any block starting at offset 40K or
979 * higher of our extent.
980 */
981 while (!list_empty(&ordered_sums)) {
982 struct btrfs_ordered_sum *sums;
983 struct btrfs_root *csum_root;
984
985 sums = list_first_entry(&ordered_sums, struct btrfs_ordered_sum, list);
986 csum_root = btrfs_csum_root(fs_info, sums->logical);
987 if (unlikely(!csum_root)) {
988 btrfs_err(fs_info,
989 "missing csum root for extent at bytenr %llu",
990 sums->logical);
991 ret = -EUCLEAN;
992 }
993
994 if (!ret) {
995 ret = btrfs_del_csums(trans, csum_root, sums->logical,
996 sums->len);
997 if (ret)
998 btrfs_abort_log_replay(wc, ret,
999 "failed to delete csums for range [%llu, %llu) inode %llu root %llu",
1000 sums->logical,
1001 sums->logical + sums->len,
1002 wc->log_key.objectid,
1003 btrfs_root_id(root));
1004 }
1005 if (!ret) {
1006 ret = btrfs_insert_data_csums(trans, csum_root, sums);
1007 if (ret)
1008 btrfs_abort_log_replay(wc, ret,
1009 "failed to add csums for range [%llu, %llu) inode %llu root %llu",
1010 sums->logical,
1011 sums->logical + sums->len,
1012 wc->log_key.objectid,
1013 btrfs_root_id(root));
1014 }
1015 list_del(&sums->list);
1016 kfree(sums);
1017 }
1018 if (ret)
1019 goto out;
1020
1021 update_inode:
1022 ret = btrfs_inode_set_file_extent_range(inode, start, extent_end - start);
1023 if (ret) {
1024 btrfs_abort_log_replay(wc, ret,
1025 "failed to set file extent range [%llu, %llu) inode %llu root %llu",
1026 start, extent_end, wc->log_key.objectid,
1027 btrfs_root_id(root));
1028 goto out;
1029 }
1030
1031 btrfs_update_inode_bytes(inode, nbytes, drop_args.bytes_found);
1032 ret = btrfs_update_inode(trans, inode);
1033 if (ret)
1034 btrfs_abort_log_replay(wc, ret,
1035 "failed to update inode %llu root %llu",
1036 wc->log_key.objectid, btrfs_root_id(root));
1037 out:
1038 iput(&inode->vfs_inode);
1039 return ret;
1040 }
1041
unlink_inode_for_log_replay(struct walk_control * wc,struct btrfs_inode * dir,struct btrfs_inode * inode,const struct fscrypt_str * name)1042 static int unlink_inode_for_log_replay(struct walk_control *wc,
1043 struct btrfs_inode *dir,
1044 struct btrfs_inode *inode,
1045 const struct fscrypt_str *name)
1046 {
1047 struct btrfs_trans_handle *trans = wc->trans;
1048 int ret;
1049
1050 ret = btrfs_unlink_inode(trans, dir, inode, name);
1051 if (ret) {
1052 btrfs_abort_log_replay(wc, ret,
1053 "failed to unlink inode %llu parent dir %llu name %.*s root %llu",
1054 btrfs_ino(inode), btrfs_ino(dir), name->len,
1055 name->name, btrfs_root_id(inode->root));
1056 return ret;
1057 }
1058 /*
1059 * Whenever we need to check if a name exists or not, we check the
1060 * fs/subvolume tree. So after an unlink we must run delayed items, so
1061 * that future checks for a name during log replay see that the name
1062 * does not exists anymore.
1063 */
1064 ret = btrfs_run_delayed_items(trans);
1065 if (ret)
1066 btrfs_abort_log_replay(wc, ret,
1067 "failed to run delayed items current inode %llu parent dir %llu name %.*s root %llu",
1068 btrfs_ino(inode), btrfs_ino(dir), name->len,
1069 name->name, btrfs_root_id(inode->root));
1070
1071 return ret;
1072 }
1073
1074 /*
1075 * when cleaning up conflicts between the directory names in the
1076 * subvolume, directory names in the log and directory names in the
1077 * inode back references, we may have to unlink inodes from directories.
1078 *
1079 * This is a helper function to do the unlink of a specific directory
1080 * item
1081 */
drop_one_dir_item(struct walk_control * wc,struct btrfs_inode * dir,struct btrfs_dir_item * di)1082 static noinline int drop_one_dir_item(struct walk_control *wc,
1083 struct btrfs_inode *dir,
1084 struct btrfs_dir_item *di)
1085 {
1086 struct btrfs_root *root = dir->root;
1087 struct btrfs_inode *inode;
1088 struct fscrypt_str name;
1089 struct extent_buffer *leaf = wc->subvol_path->nodes[0];
1090 struct btrfs_key location;
1091 int ret;
1092
1093 btrfs_dir_item_key_to_cpu(leaf, di, &location);
1094 ret = read_alloc_one_name(leaf, di + 1, btrfs_dir_name_len(leaf, di), &name);
1095 if (ret) {
1096 btrfs_abort_log_replay(wc, ret,
1097 "failed to allocate name for dir %llu root %llu",
1098 btrfs_ino(dir), btrfs_root_id(root));
1099 return ret;
1100 }
1101
1102 btrfs_release_path(wc->subvol_path);
1103
1104 inode = btrfs_iget_logging(location.objectid, root);
1105 if (IS_ERR(inode)) {
1106 ret = PTR_ERR(inode);
1107 btrfs_abort_log_replay(wc, ret,
1108 "failed to open inode %llu parent dir %llu name %.*s root %llu",
1109 location.objectid, btrfs_ino(dir),
1110 name.len, name.name, btrfs_root_id(root));
1111 inode = NULL;
1112 goto out;
1113 }
1114
1115 ret = link_to_fixup_dir(wc, location.objectid);
1116 if (ret)
1117 goto out;
1118
1119 ret = unlink_inode_for_log_replay(wc, dir, inode, &name);
1120 out:
1121 kfree(name.name);
1122 if (inode)
1123 iput(&inode->vfs_inode);
1124 return ret;
1125 }
1126
1127 /*
1128 * See if a given name and sequence number found in an inode back reference are
1129 * already in a directory and correctly point to this inode.
1130 *
1131 * Returns: < 0 on error, 0 if the directory entry does not exists and 1 if it
1132 * exists.
1133 */
inode_in_dir(struct btrfs_root * root,struct btrfs_path * path,u64 dirid,u64 objectid,u64 index,struct fscrypt_str * name)1134 static noinline int inode_in_dir(struct btrfs_root *root,
1135 struct btrfs_path *path,
1136 u64 dirid, u64 objectid, u64 index,
1137 struct fscrypt_str *name)
1138 {
1139 struct btrfs_dir_item *di;
1140 struct btrfs_key location;
1141 int ret = 0;
1142
1143 di = btrfs_lookup_dir_index_item(NULL, root, path, dirid,
1144 index, name, 0);
1145 if (IS_ERR(di)) {
1146 ret = PTR_ERR(di);
1147 goto out;
1148 } else if (di) {
1149 btrfs_dir_item_key_to_cpu(path->nodes[0], di, &location);
1150 if (location.objectid != objectid)
1151 goto out;
1152 } else {
1153 goto out;
1154 }
1155
1156 btrfs_release_path(path);
1157 di = btrfs_lookup_dir_item(NULL, root, path, dirid, name, 0);
1158 if (IS_ERR(di)) {
1159 ret = PTR_ERR(di);
1160 goto out;
1161 } else if (di) {
1162 btrfs_dir_item_key_to_cpu(path->nodes[0], di, &location);
1163 if (location.objectid == objectid)
1164 ret = 1;
1165 }
1166 out:
1167 btrfs_release_path(path);
1168 return ret;
1169 }
1170
1171 /*
1172 * helper function to check a log tree for a named back reference in
1173 * an inode. This is used to decide if a back reference that is
1174 * found in the subvolume conflicts with what we find in the log.
1175 *
1176 * inode backreferences may have multiple refs in a single item,
1177 * during replay we process one reference at a time, and we don't
1178 * want to delete valid links to a file from the subvolume if that
1179 * link is also in the log.
1180 */
backref_in_log(struct btrfs_root * log,struct btrfs_key * key,u64 ref_objectid,const struct fscrypt_str * name)1181 static noinline int backref_in_log(struct btrfs_root *log,
1182 struct btrfs_key *key,
1183 u64 ref_objectid,
1184 const struct fscrypt_str *name)
1185 {
1186 BTRFS_PATH_AUTO_FREE(path);
1187 int ret;
1188
1189 path = btrfs_alloc_path();
1190 if (!path)
1191 return -ENOMEM;
1192
1193 ret = btrfs_search_slot(NULL, log, key, path, 0, 0);
1194 if (ret < 0)
1195 return ret;
1196 if (ret == 1)
1197 return 0;
1198
1199 if (key->type == BTRFS_INODE_EXTREF_KEY)
1200 ret = !!btrfs_find_name_in_ext_backref(path->nodes[0],
1201 path->slots[0],
1202 ref_objectid, name);
1203 else
1204 ret = !!btrfs_find_name_in_backref(path->nodes[0],
1205 path->slots[0], name);
1206 return ret;
1207 }
1208
unlink_refs_not_in_log(struct walk_control * wc,struct btrfs_key * search_key,struct btrfs_inode * dir,struct btrfs_inode * inode)1209 static int unlink_refs_not_in_log(struct walk_control *wc,
1210 struct btrfs_key *search_key,
1211 struct btrfs_inode *dir,
1212 struct btrfs_inode *inode)
1213 {
1214 struct extent_buffer *leaf = wc->subvol_path->nodes[0];
1215 unsigned long ptr;
1216 unsigned long ptr_end;
1217
1218 /*
1219 * Check all the names in this back reference to see if they are in the
1220 * log. If so, we allow them to stay otherwise they must be unlinked as
1221 * a conflict.
1222 */
1223 ptr = btrfs_item_ptr_offset(leaf, wc->subvol_path->slots[0]);
1224 ptr_end = ptr + btrfs_item_size(leaf, wc->subvol_path->slots[0]);
1225 while (ptr < ptr_end) {
1226 struct fscrypt_str victim_name;
1227 struct btrfs_inode_ref *victim_ref;
1228 int ret;
1229
1230 victim_ref = (struct btrfs_inode_ref *)ptr;
1231 ret = read_alloc_one_name(leaf, (victim_ref + 1),
1232 btrfs_inode_ref_name_len(leaf, victim_ref),
1233 &victim_name);
1234 if (ret) {
1235 btrfs_abort_log_replay(wc, ret,
1236 "failed to allocate name for inode %llu parent dir %llu root %llu",
1237 btrfs_ino(inode), btrfs_ino(dir),
1238 btrfs_root_id(inode->root));
1239 return ret;
1240 }
1241
1242 ret = backref_in_log(wc->log, search_key, btrfs_ino(dir), &victim_name);
1243 if (ret) {
1244 if (ret < 0) {
1245 btrfs_abort_log_replay(wc, ret,
1246 "failed to check if backref is in log tree for inode %llu parent dir %llu name %.*s root %llu",
1247 btrfs_ino(inode), btrfs_ino(dir),
1248 victim_name.len, victim_name.name,
1249 btrfs_root_id(inode->root));
1250 kfree(victim_name.name);
1251 return ret;
1252 }
1253 kfree(victim_name.name);
1254 ptr = (unsigned long)(victim_ref + 1) + victim_name.len;
1255 continue;
1256 }
1257
1258 inc_nlink(&inode->vfs_inode);
1259 btrfs_release_path(wc->subvol_path);
1260
1261 ret = unlink_inode_for_log_replay(wc, dir, inode, &victim_name);
1262 kfree(victim_name.name);
1263 if (ret)
1264 return ret;
1265 return -EAGAIN;
1266 }
1267
1268 return 0;
1269 }
1270
unlink_extrefs_not_in_log(struct walk_control * wc,struct btrfs_key * search_key,struct btrfs_inode * dir,struct btrfs_inode * inode)1271 static int unlink_extrefs_not_in_log(struct walk_control *wc,
1272 struct btrfs_key *search_key,
1273 struct btrfs_inode *dir,
1274 struct btrfs_inode *inode)
1275 {
1276 struct extent_buffer *leaf = wc->subvol_path->nodes[0];
1277 const unsigned long base = btrfs_item_ptr_offset(leaf, wc->subvol_path->slots[0]);
1278 const u32 item_size = btrfs_item_size(leaf, wc->subvol_path->slots[0]);
1279 u32 cur_offset = 0;
1280
1281 while (cur_offset < item_size) {
1282 struct btrfs_root *log_root = wc->log;
1283 struct btrfs_inode_extref *extref;
1284 struct fscrypt_str victim_name;
1285 int ret;
1286
1287 extref = (struct btrfs_inode_extref *)(base + cur_offset);
1288 victim_name.len = btrfs_inode_extref_name_len(leaf, extref);
1289
1290 if (btrfs_inode_extref_parent(leaf, extref) != btrfs_ino(dir))
1291 goto next;
1292
1293 ret = read_alloc_one_name(leaf, &extref->name, victim_name.len,
1294 &victim_name);
1295 if (ret) {
1296 btrfs_abort_log_replay(wc, ret,
1297 "failed to allocate name for inode %llu parent dir %llu root %llu",
1298 btrfs_ino(inode), btrfs_ino(dir),
1299 btrfs_root_id(inode->root));
1300 return ret;
1301 }
1302
1303 search_key->objectid = btrfs_ino(inode);
1304 search_key->type = BTRFS_INODE_EXTREF_KEY;
1305 search_key->offset = btrfs_extref_hash(btrfs_ino(dir),
1306 victim_name.name,
1307 victim_name.len);
1308 ret = backref_in_log(log_root, search_key, btrfs_ino(dir), &victim_name);
1309 if (ret) {
1310 if (ret < 0) {
1311 btrfs_abort_log_replay(wc, ret,
1312 "failed to check if backref is in log tree for inode %llu parent dir %llu name %.*s root %llu",
1313 btrfs_ino(inode), btrfs_ino(dir),
1314 victim_name.len, victim_name.name,
1315 btrfs_root_id(inode->root));
1316 kfree(victim_name.name);
1317 return ret;
1318 }
1319 kfree(victim_name.name);
1320 next:
1321 cur_offset += victim_name.len + sizeof(*extref);
1322 continue;
1323 }
1324
1325 inc_nlink(&inode->vfs_inode);
1326 btrfs_release_path(wc->subvol_path);
1327
1328 ret = unlink_inode_for_log_replay(wc, dir, inode, &victim_name);
1329 kfree(victim_name.name);
1330 if (ret)
1331 return ret;
1332 return -EAGAIN;
1333 }
1334
1335 return 0;
1336 }
1337
__add_inode_ref(struct walk_control * wc,struct btrfs_inode * dir,struct btrfs_inode * inode,u64 ref_index,struct fscrypt_str * name)1338 static inline int __add_inode_ref(struct walk_control *wc,
1339 struct btrfs_inode *dir,
1340 struct btrfs_inode *inode,
1341 u64 ref_index, struct fscrypt_str *name)
1342 {
1343 int ret;
1344 struct btrfs_trans_handle *trans = wc->trans;
1345 struct btrfs_root *root = wc->root;
1346 struct btrfs_dir_item *di;
1347 struct btrfs_key search_key;
1348 struct btrfs_inode_extref *extref;
1349
1350 again:
1351 /* Search old style refs */
1352 search_key.objectid = btrfs_ino(inode);
1353 search_key.type = BTRFS_INODE_REF_KEY;
1354 search_key.offset = btrfs_ino(dir);
1355 ret = btrfs_search_slot(NULL, root, &search_key, wc->subvol_path, 0, 0);
1356 if (ret < 0) {
1357 btrfs_abort_log_replay(wc, ret,
1358 "failed to search subvolume tree for key " BTRFS_KEY_FMT " root %llu",
1359 BTRFS_KEY_FMT_VALUE(&search_key),
1360 btrfs_root_id(root));
1361 return ret;
1362 } else if (ret == 0) {
1363 /*
1364 * Are we trying to overwrite a back ref for the root directory?
1365 * If so, we're done.
1366 */
1367 if (search_key.objectid == search_key.offset)
1368 return 1;
1369
1370 ret = unlink_refs_not_in_log(wc, &search_key, dir, inode);
1371 if (ret == -EAGAIN)
1372 goto again;
1373 else if (ret)
1374 return ret;
1375 }
1376 btrfs_release_path(wc->subvol_path);
1377
1378 /* Same search but for extended refs */
1379 extref = btrfs_lookup_inode_extref(root, wc->subvol_path, name,
1380 btrfs_ino(inode), btrfs_ino(dir));
1381 if (IS_ERR(extref)) {
1382 return PTR_ERR(extref);
1383 } else if (extref) {
1384 ret = unlink_extrefs_not_in_log(wc, &search_key, dir, inode);
1385 if (ret == -EAGAIN)
1386 goto again;
1387 else if (ret)
1388 return ret;
1389 }
1390 btrfs_release_path(wc->subvol_path);
1391
1392 /* look for a conflicting sequence number */
1393 di = btrfs_lookup_dir_index_item(trans, root, wc->subvol_path, btrfs_ino(dir),
1394 ref_index, name, 0);
1395 if (IS_ERR(di)) {
1396 ret = PTR_ERR(di);
1397 btrfs_abort_log_replay(wc, ret,
1398 "failed to lookup dir index item for dir %llu ref_index %llu name %.*s root %llu",
1399 btrfs_ino(dir), ref_index, name->len,
1400 name->name, btrfs_root_id(root));
1401 return ret;
1402 } else if (di) {
1403 ret = drop_one_dir_item(wc, dir, di);
1404 if (ret)
1405 return ret;
1406 }
1407 btrfs_release_path(wc->subvol_path);
1408
1409 /* look for a conflicting name */
1410 di = btrfs_lookup_dir_item(trans, root, wc->subvol_path, btrfs_ino(dir), name, 0);
1411 if (IS_ERR(di)) {
1412 ret = PTR_ERR(di);
1413 btrfs_abort_log_replay(wc, ret,
1414 "failed to lookup dir item for dir %llu name %.*s root %llu",
1415 btrfs_ino(dir), name->len, name->name,
1416 btrfs_root_id(root));
1417 return ret;
1418 } else if (di) {
1419 ret = drop_one_dir_item(wc, dir, di);
1420 if (ret)
1421 return ret;
1422 }
1423 btrfs_release_path(wc->subvol_path);
1424
1425 return 0;
1426 }
1427
extref_get_fields(struct extent_buffer * eb,unsigned long ref_ptr,struct fscrypt_str * name,u64 * index,u64 * parent_objectid)1428 static int extref_get_fields(struct extent_buffer *eb, unsigned long ref_ptr,
1429 struct fscrypt_str *name, u64 *index,
1430 u64 *parent_objectid)
1431 {
1432 struct btrfs_inode_extref *extref;
1433 int ret;
1434
1435 extref = (struct btrfs_inode_extref *)ref_ptr;
1436
1437 ret = read_alloc_one_name(eb, &extref->name,
1438 btrfs_inode_extref_name_len(eb, extref), name);
1439 if (ret)
1440 return ret;
1441
1442 if (index)
1443 *index = btrfs_inode_extref_index(eb, extref);
1444 if (parent_objectid)
1445 *parent_objectid = btrfs_inode_extref_parent(eb, extref);
1446
1447 return 0;
1448 }
1449
ref_get_fields(struct extent_buffer * eb,unsigned long ref_ptr,struct fscrypt_str * name,u64 * index)1450 static int ref_get_fields(struct extent_buffer *eb, unsigned long ref_ptr,
1451 struct fscrypt_str *name, u64 *index)
1452 {
1453 struct btrfs_inode_ref *ref;
1454 int ret;
1455
1456 ref = (struct btrfs_inode_ref *)ref_ptr;
1457
1458 ret = read_alloc_one_name(eb, ref + 1, btrfs_inode_ref_name_len(eb, ref),
1459 name);
1460 if (ret)
1461 return ret;
1462
1463 if (index)
1464 *index = btrfs_inode_ref_index(eb, ref);
1465
1466 return 0;
1467 }
1468
1469 /*
1470 * Take an inode reference item from the log tree and iterate all names from the
1471 * inode reference item in the subvolume tree with the same key (if it exists).
1472 * For any name that is not in the inode reference item from the log tree, do a
1473 * proper unlink of that name (that is, remove its entry from the inode
1474 * reference item and both dir index keys).
1475 */
unlink_old_inode_refs(struct walk_control * wc,struct btrfs_inode * inode)1476 static int unlink_old_inode_refs(struct walk_control *wc, struct btrfs_inode *inode)
1477 {
1478 struct btrfs_root *root = wc->root;
1479 int ret;
1480 unsigned long ref_ptr;
1481 unsigned long ref_end;
1482 struct extent_buffer *eb;
1483
1484 again:
1485 btrfs_release_path(wc->subvol_path);
1486 ret = btrfs_search_slot(NULL, root, &wc->log_key, wc->subvol_path, 0, 0);
1487 if (ret > 0) {
1488 ret = 0;
1489 goto out;
1490 }
1491 if (ret < 0) {
1492 btrfs_abort_log_replay(wc, ret,
1493 "failed to search subvolume tree for key " BTRFS_KEY_FMT " root %llu",
1494 BTRFS_KEY_FMT_VALUE(&wc->log_key),
1495 btrfs_root_id(root));
1496 goto out;
1497 }
1498
1499 eb = wc->subvol_path->nodes[0];
1500 ref_ptr = btrfs_item_ptr_offset(eb, wc->subvol_path->slots[0]);
1501 ref_end = ref_ptr + btrfs_item_size(eb, wc->subvol_path->slots[0]);
1502 while (ref_ptr < ref_end) {
1503 struct fscrypt_str name;
1504 u64 parent_id;
1505
1506 if (wc->log_key.type == BTRFS_INODE_EXTREF_KEY) {
1507 ret = extref_get_fields(eb, ref_ptr, &name,
1508 NULL, &parent_id);
1509 if (ret) {
1510 btrfs_abort_log_replay(wc, ret,
1511 "failed to get extref details for inode %llu root %llu",
1512 btrfs_ino(inode),
1513 btrfs_root_id(root));
1514 goto out;
1515 }
1516 } else {
1517 parent_id = wc->log_key.offset;
1518 ret = ref_get_fields(eb, ref_ptr, &name, NULL);
1519 if (ret) {
1520 btrfs_abort_log_replay(wc, ret,
1521 "failed to get ref details for inode %llu parent_id %llu root %llu",
1522 btrfs_ino(inode), parent_id,
1523 btrfs_root_id(root));
1524 goto out;
1525 }
1526 }
1527
1528 if (wc->log_key.type == BTRFS_INODE_EXTREF_KEY)
1529 ret = !!btrfs_find_name_in_ext_backref(wc->log_leaf, wc->log_slot,
1530 parent_id, &name);
1531 else
1532 ret = !!btrfs_find_name_in_backref(wc->log_leaf, wc->log_slot,
1533 &name);
1534
1535 if (!ret) {
1536 struct btrfs_inode *dir;
1537
1538 btrfs_release_path(wc->subvol_path);
1539 dir = btrfs_iget_logging(parent_id, root);
1540 if (IS_ERR(dir)) {
1541 ret = PTR_ERR(dir);
1542 kfree(name.name);
1543 btrfs_abort_log_replay(wc, ret,
1544 "failed to lookup dir inode %llu root %llu",
1545 parent_id, btrfs_root_id(root));
1546 goto out;
1547 }
1548 ret = unlink_inode_for_log_replay(wc, dir, inode, &name);
1549 kfree(name.name);
1550 iput(&dir->vfs_inode);
1551 if (ret)
1552 goto out;
1553 goto again;
1554 }
1555
1556 kfree(name.name);
1557 ref_ptr += name.len;
1558 if (wc->log_key.type == BTRFS_INODE_EXTREF_KEY)
1559 ref_ptr += sizeof(struct btrfs_inode_extref);
1560 else
1561 ref_ptr += sizeof(struct btrfs_inode_ref);
1562 }
1563 ret = 0;
1564 out:
1565 btrfs_release_path(wc->subvol_path);
1566 return ret;
1567 }
1568
1569 /*
1570 * Replay one inode back reference item found in the log tree.
1571 * Path is for temporary use by this function (it should be released on return).
1572 */
add_inode_ref(struct walk_control * wc)1573 static noinline int add_inode_ref(struct walk_control *wc)
1574 {
1575 struct btrfs_trans_handle *trans = wc->trans;
1576 struct btrfs_root *root = wc->root;
1577 struct btrfs_inode *dir = NULL;
1578 struct btrfs_inode *inode = NULL;
1579 unsigned long ref_ptr;
1580 unsigned long ref_end;
1581 struct fscrypt_str name = { 0 };
1582 int ret;
1583 const bool is_extref_item = (wc->log_key.type == BTRFS_INODE_EXTREF_KEY);
1584 u64 parent_objectid;
1585 u64 inode_objectid;
1586 u64 ref_index = 0;
1587 int ref_struct_size;
1588
1589 ref_ptr = btrfs_item_ptr_offset(wc->log_leaf, wc->log_slot);
1590 ref_end = ref_ptr + btrfs_item_size(wc->log_leaf, wc->log_slot);
1591
1592 if (is_extref_item) {
1593 struct btrfs_inode_extref *r;
1594
1595 ref_struct_size = sizeof(struct btrfs_inode_extref);
1596 r = (struct btrfs_inode_extref *)ref_ptr;
1597 parent_objectid = btrfs_inode_extref_parent(wc->log_leaf, r);
1598 } else {
1599 ref_struct_size = sizeof(struct btrfs_inode_ref);
1600 parent_objectid = wc->log_key.offset;
1601 }
1602 inode_objectid = wc->log_key.objectid;
1603
1604 /*
1605 * it is possible that we didn't log all the parent directories
1606 * for a given inode. If we don't find the dir, just don't
1607 * copy the back ref in. The link count fixup code will take
1608 * care of the rest
1609 */
1610 dir = btrfs_iget_logging(parent_objectid, root);
1611 if (IS_ERR(dir)) {
1612 ret = PTR_ERR(dir);
1613 if (ret == -ENOENT)
1614 ret = 0;
1615 else
1616 btrfs_abort_log_replay(wc, ret,
1617 "failed to lookup dir inode %llu root %llu",
1618 parent_objectid, btrfs_root_id(root));
1619 dir = NULL;
1620 goto out;
1621 }
1622
1623 inode = btrfs_iget_logging(inode_objectid, root);
1624 if (IS_ERR(inode)) {
1625 ret = PTR_ERR(inode);
1626 btrfs_abort_log_replay(wc, ret,
1627 "failed to lookup inode %llu root %llu",
1628 inode_objectid, btrfs_root_id(root));
1629 inode = NULL;
1630 goto out;
1631 }
1632
1633 while (ref_ptr < ref_end) {
1634 if (is_extref_item) {
1635 ret = extref_get_fields(wc->log_leaf, ref_ptr, &name,
1636 &ref_index, &parent_objectid);
1637 if (ret) {
1638 btrfs_abort_log_replay(wc, ret,
1639 "failed to get extref details for inode %llu root %llu",
1640 btrfs_ino(inode),
1641 btrfs_root_id(root));
1642 goto out;
1643 }
1644 /*
1645 * parent object can change from one array
1646 * item to another.
1647 */
1648 if (!dir) {
1649 dir = btrfs_iget_logging(parent_objectid, root);
1650 if (IS_ERR(dir)) {
1651 ret = PTR_ERR(dir);
1652 dir = NULL;
1653 /*
1654 * A new parent dir may have not been
1655 * logged and not exist in the subvolume
1656 * tree, see the comment above before
1657 * the loop when getting the first
1658 * parent dir.
1659 */
1660 if (ret == -ENOENT) {
1661 /*
1662 * The next extref may refer to
1663 * another parent dir that
1664 * exists, so continue.
1665 */
1666 ret = 0;
1667 goto next;
1668 } else {
1669 btrfs_abort_log_replay(wc, ret,
1670 "failed to lookup dir inode %llu root %llu",
1671 parent_objectid,
1672 btrfs_root_id(root));
1673 }
1674 goto out;
1675 }
1676 }
1677 } else {
1678 ret = ref_get_fields(wc->log_leaf, ref_ptr, &name, &ref_index);
1679 if (ret) {
1680 btrfs_abort_log_replay(wc, ret,
1681 "failed to get ref details for inode %llu parent_objectid %llu root %llu",
1682 btrfs_ino(inode),
1683 parent_objectid,
1684 btrfs_root_id(root));
1685 goto out;
1686 }
1687 }
1688
1689 ret = inode_in_dir(root, wc->subvol_path, btrfs_ino(dir),
1690 btrfs_ino(inode), ref_index, &name);
1691 if (ret < 0) {
1692 btrfs_abort_log_replay(wc, ret,
1693 "failed to check if inode %llu is in dir %llu ref_index %llu name %.*s root %llu",
1694 btrfs_ino(inode), btrfs_ino(dir),
1695 ref_index, name.len, name.name,
1696 btrfs_root_id(root));
1697 goto out;
1698 } else if (ret == 0) {
1699 /*
1700 * look for a conflicting back reference in the
1701 * metadata. if we find one we have to unlink that name
1702 * of the file before we add our new link. Later on, we
1703 * overwrite any existing back reference, and we don't
1704 * want to create dangling pointers in the directory.
1705 */
1706 ret = __add_inode_ref(wc, dir, inode, ref_index, &name);
1707 if (ret) {
1708 if (ret == 1)
1709 ret = 0;
1710 goto out;
1711 }
1712
1713 /* insert our name */
1714 ret = btrfs_add_link(trans, dir, inode, &name, false, ref_index);
1715 if (ret) {
1716 btrfs_abort_log_replay(wc, ret,
1717 "failed to add link for inode %llu in dir %llu ref_index %llu name %.*s root %llu",
1718 btrfs_ino(inode),
1719 btrfs_ino(dir), ref_index,
1720 name.len, name.name,
1721 btrfs_root_id(root));
1722 goto out;
1723 }
1724
1725 ret = btrfs_update_inode(trans, inode);
1726 if (ret) {
1727 btrfs_abort_log_replay(wc, ret,
1728 "failed to update inode %llu root %llu",
1729 btrfs_ino(inode),
1730 btrfs_root_id(root));
1731 goto out;
1732 }
1733 }
1734 /* Else, ret == 1, we already have a perfect match, we're done. */
1735
1736 next:
1737 ref_ptr = (unsigned long)(ref_ptr + ref_struct_size) + name.len;
1738 kfree(name.name);
1739 name.name = NULL;
1740 if (is_extref_item && dir) {
1741 iput(&dir->vfs_inode);
1742 dir = NULL;
1743 }
1744 }
1745
1746 /*
1747 * Before we overwrite the inode reference item in the subvolume tree
1748 * with the item from the log tree, we must unlink all names from the
1749 * parent directory that are in the subvolume's tree inode reference
1750 * item, otherwise we end up with an inconsistent subvolume tree where
1751 * dir index entries exist for a name but there is no inode reference
1752 * item with the same name.
1753 */
1754 ret = unlink_old_inode_refs(wc, inode);
1755 if (ret)
1756 goto out;
1757
1758 /* finally write the back reference in the inode */
1759 ret = overwrite_item(wc);
1760 out:
1761 btrfs_release_path(wc->subvol_path);
1762 kfree(name.name);
1763 if (dir)
1764 iput(&dir->vfs_inode);
1765 if (inode)
1766 iput(&inode->vfs_inode);
1767 return ret;
1768 }
1769
count_inode_extrefs(struct btrfs_inode * inode,struct btrfs_path * path)1770 static int count_inode_extrefs(struct btrfs_inode *inode, struct btrfs_path *path)
1771 {
1772 int ret = 0;
1773 int name_len;
1774 unsigned int nlink = 0;
1775 u32 item_size;
1776 u32 cur_offset = 0;
1777 u64 inode_objectid = btrfs_ino(inode);
1778 u64 offset = 0;
1779 unsigned long ptr;
1780 struct btrfs_inode_extref *extref;
1781 struct extent_buffer *leaf;
1782
1783 while (1) {
1784 ret = btrfs_find_one_extref(inode->root, inode_objectid, offset,
1785 path, &extref, &offset);
1786 if (ret)
1787 break;
1788
1789 leaf = path->nodes[0];
1790 item_size = btrfs_item_size(leaf, path->slots[0]);
1791 ptr = btrfs_item_ptr_offset(leaf, path->slots[0]);
1792 cur_offset = 0;
1793
1794 while (cur_offset < item_size) {
1795 extref = (struct btrfs_inode_extref *) (ptr + cur_offset);
1796 name_len = btrfs_inode_extref_name_len(leaf, extref);
1797
1798 nlink++;
1799
1800 cur_offset += name_len + sizeof(*extref);
1801 }
1802
1803 offset++;
1804 btrfs_release_path(path);
1805 }
1806 btrfs_release_path(path);
1807
1808 if (ret < 0 && ret != -ENOENT)
1809 return ret;
1810 return nlink;
1811 }
1812
count_inode_refs(struct btrfs_inode * inode,struct btrfs_path * path)1813 static int count_inode_refs(struct btrfs_inode *inode, struct btrfs_path *path)
1814 {
1815 int ret;
1816 struct btrfs_key key;
1817 unsigned int nlink = 0;
1818 unsigned long ptr;
1819 unsigned long ptr_end;
1820 int name_len;
1821 u64 ino = btrfs_ino(inode);
1822
1823 key.objectid = ino;
1824 key.type = BTRFS_INODE_REF_KEY;
1825 key.offset = (u64)-1;
1826
1827 while (1) {
1828 ret = btrfs_search_slot(NULL, inode->root, &key, path, 0, 0);
1829 if (ret < 0)
1830 break;
1831 if (ret > 0) {
1832 if (path->slots[0] == 0)
1833 break;
1834 path->slots[0]--;
1835 }
1836 process_slot:
1837 btrfs_item_key_to_cpu(path->nodes[0], &key,
1838 path->slots[0]);
1839 if (key.objectid != ino ||
1840 key.type != BTRFS_INODE_REF_KEY)
1841 break;
1842 ptr = btrfs_item_ptr_offset(path->nodes[0], path->slots[0]);
1843 ptr_end = ptr + btrfs_item_size(path->nodes[0],
1844 path->slots[0]);
1845 while (ptr < ptr_end) {
1846 struct btrfs_inode_ref *ref;
1847
1848 ref = (struct btrfs_inode_ref *)ptr;
1849 name_len = btrfs_inode_ref_name_len(path->nodes[0],
1850 ref);
1851 ptr = (unsigned long)(ref + 1) + name_len;
1852 nlink++;
1853 }
1854
1855 if (key.offset == 0)
1856 break;
1857 if (path->slots[0] > 0) {
1858 path->slots[0]--;
1859 goto process_slot;
1860 }
1861 key.offset--;
1862 btrfs_release_path(path);
1863 }
1864 btrfs_release_path(path);
1865
1866 return nlink;
1867 }
1868
1869 /*
1870 * There are a few corners where the link count of the file can't
1871 * be properly maintained during replay. So, instead of adding
1872 * lots of complexity to the log code, we just scan the backrefs
1873 * for any file that has been through replay.
1874 *
1875 * The scan will update the link count on the inode to reflect the
1876 * number of back refs found. If it goes down to zero, the iput
1877 * will free the inode.
1878 */
fixup_inode_link_count(struct walk_control * wc,struct btrfs_inode * inode)1879 static noinline int fixup_inode_link_count(struct walk_control *wc,
1880 struct btrfs_inode *inode)
1881 {
1882 struct btrfs_trans_handle *trans = wc->trans;
1883 struct btrfs_root *root = inode->root;
1884 int ret;
1885 u64 nlink = 0;
1886 const u64 ino = btrfs_ino(inode);
1887
1888 ret = count_inode_refs(inode, wc->subvol_path);
1889 if (ret < 0)
1890 goto out;
1891
1892 nlink = ret;
1893
1894 ret = count_inode_extrefs(inode, wc->subvol_path);
1895 if (ret < 0)
1896 goto out;
1897
1898 nlink += ret;
1899
1900 ret = 0;
1901
1902 if (nlink != inode->vfs_inode.i_nlink) {
1903 set_nlink(&inode->vfs_inode, nlink);
1904 ret = btrfs_update_inode(trans, inode);
1905 if (ret)
1906 goto out;
1907 }
1908 if (S_ISDIR(inode->vfs_inode.i_mode))
1909 inode->index_cnt = (u64)-1;
1910
1911 if (inode->vfs_inode.i_nlink == 0) {
1912 if (S_ISDIR(inode->vfs_inode.i_mode)) {
1913 ret = replay_dir_deletes(wc, ino, true);
1914 if (ret)
1915 goto out;
1916 }
1917 ret = btrfs_insert_orphan_item(trans, root, ino);
1918 if (ret == -EEXIST)
1919 ret = 0;
1920 }
1921
1922 out:
1923 btrfs_release_path(wc->subvol_path);
1924 return ret;
1925 }
1926
fixup_inode_link_counts(struct walk_control * wc)1927 static noinline int fixup_inode_link_counts(struct walk_control *wc)
1928 {
1929 int ret;
1930 struct btrfs_key key;
1931
1932 key.objectid = BTRFS_TREE_LOG_FIXUP_OBJECTID;
1933 key.type = BTRFS_ORPHAN_ITEM_KEY;
1934 key.offset = (u64)-1;
1935 while (1) {
1936 struct btrfs_trans_handle *trans = wc->trans;
1937 struct btrfs_root *root = wc->root;
1938 struct btrfs_inode *inode;
1939
1940 ret = btrfs_search_slot(trans, root, &key, wc->subvol_path, -1, 1);
1941 if (ret < 0)
1942 break;
1943
1944 if (ret == 1) {
1945 ret = 0;
1946 if (wc->subvol_path->slots[0] == 0)
1947 break;
1948 wc->subvol_path->slots[0]--;
1949 }
1950
1951 btrfs_item_key_to_cpu(wc->subvol_path->nodes[0], &key, wc->subvol_path->slots[0]);
1952 if (key.objectid != BTRFS_TREE_LOG_FIXUP_OBJECTID ||
1953 key.type != BTRFS_ORPHAN_ITEM_KEY)
1954 break;
1955
1956 ret = btrfs_del_item(trans, root, wc->subvol_path);
1957 if (ret)
1958 break;
1959
1960 btrfs_release_path(wc->subvol_path);
1961 inode = btrfs_iget_logging(key.offset, root);
1962 if (IS_ERR(inode)) {
1963 ret = PTR_ERR(inode);
1964 break;
1965 }
1966
1967 ret = fixup_inode_link_count(wc, inode);
1968 iput(&inode->vfs_inode);
1969 if (ret)
1970 break;
1971
1972 /*
1973 * fixup on a directory may create new entries,
1974 * make sure we always look for the highest possible
1975 * offset
1976 */
1977 key.offset = (u64)-1;
1978 }
1979 btrfs_release_path(wc->subvol_path);
1980 return ret;
1981 }
1982
1983
1984 /*
1985 * record a given inode in the fixup dir so we can check its link
1986 * count when replay is done. The link count is incremented here
1987 * so the inode won't go away until we check it
1988 */
link_to_fixup_dir(struct walk_control * wc,u64 objectid)1989 static noinline int link_to_fixup_dir(struct walk_control *wc, u64 objectid)
1990 {
1991 struct btrfs_trans_handle *trans = wc->trans;
1992 struct btrfs_root *root = wc->root;
1993 struct btrfs_key key;
1994 int ret = 0;
1995 struct btrfs_inode *inode;
1996 struct inode *vfs_inode;
1997
1998 inode = btrfs_iget_logging(objectid, root);
1999 if (IS_ERR(inode)) {
2000 ret = PTR_ERR(inode);
2001 btrfs_abort_log_replay(wc, ret,
2002 "failed to lookup inode %llu root %llu",
2003 objectid, btrfs_root_id(root));
2004 return ret;
2005 }
2006
2007 vfs_inode = &inode->vfs_inode;
2008 key.objectid = BTRFS_TREE_LOG_FIXUP_OBJECTID;
2009 key.type = BTRFS_ORPHAN_ITEM_KEY;
2010 key.offset = objectid;
2011
2012 ret = btrfs_insert_empty_item(trans, root, wc->subvol_path, &key, 0);
2013
2014 btrfs_release_path(wc->subvol_path);
2015 if (ret == 0) {
2016 if (!vfs_inode->i_nlink)
2017 set_nlink(vfs_inode, 1);
2018 else
2019 inc_nlink(vfs_inode);
2020 ret = btrfs_update_inode(trans, inode);
2021 if (ret)
2022 btrfs_abort_log_replay(wc, ret,
2023 "failed to update inode %llu root %llu",
2024 objectid, btrfs_root_id(root));
2025 } else if (ret == -EEXIST) {
2026 ret = 0;
2027 } else {
2028 btrfs_abort_log_replay(wc, ret,
2029 "failed to insert fixup item for inode %llu root %llu",
2030 objectid, btrfs_root_id(root));
2031 }
2032 iput(vfs_inode);
2033
2034 return ret;
2035 }
2036
2037 /*
2038 * when replaying the log for a directory, we only insert names
2039 * for inodes that actually exist. This means an fsync on a directory
2040 * does not implicitly fsync all the new files in it
2041 */
insert_one_name(struct btrfs_trans_handle * trans,struct btrfs_root * root,u64 dirid,u64 index,const struct fscrypt_str * name,struct btrfs_key * location)2042 static noinline int insert_one_name(struct btrfs_trans_handle *trans,
2043 struct btrfs_root *root,
2044 u64 dirid, u64 index,
2045 const struct fscrypt_str *name,
2046 struct btrfs_key *location)
2047 {
2048 struct btrfs_inode *inode;
2049 struct btrfs_inode *dir;
2050 int ret;
2051
2052 inode = btrfs_iget_logging(location->objectid, root);
2053 if (IS_ERR(inode))
2054 return PTR_ERR(inode);
2055
2056 dir = btrfs_iget_logging(dirid, root);
2057 if (IS_ERR(dir)) {
2058 iput(&inode->vfs_inode);
2059 return PTR_ERR(dir);
2060 }
2061
2062 ret = btrfs_add_link(trans, dir, inode, name, true, index);
2063
2064 /* FIXME, put inode into FIXUP list */
2065
2066 iput(&inode->vfs_inode);
2067 iput(&dir->vfs_inode);
2068 return ret;
2069 }
2070
delete_conflicting_dir_entry(struct walk_control * wc,struct btrfs_inode * dir,struct btrfs_dir_item * dst_di,const struct btrfs_key * log_key,u8 log_flags,bool exists)2071 static int delete_conflicting_dir_entry(struct walk_control *wc,
2072 struct btrfs_inode *dir,
2073 struct btrfs_dir_item *dst_di,
2074 const struct btrfs_key *log_key,
2075 u8 log_flags,
2076 bool exists)
2077 {
2078 struct btrfs_key found_key;
2079
2080 btrfs_dir_item_key_to_cpu(wc->subvol_path->nodes[0], dst_di, &found_key);
2081 /* The existing dentry points to the same inode, don't delete it. */
2082 if (found_key.objectid == log_key->objectid &&
2083 found_key.type == log_key->type &&
2084 found_key.offset == log_key->offset &&
2085 btrfs_dir_flags(wc->subvol_path->nodes[0], dst_di) == log_flags)
2086 return 1;
2087
2088 /*
2089 * Don't drop the conflicting directory entry if the inode for the new
2090 * entry doesn't exist.
2091 */
2092 if (!exists)
2093 return 0;
2094
2095 return drop_one_dir_item(wc, dir, dst_di);
2096 }
2097
2098 /*
2099 * take a single entry in a log directory item and replay it into
2100 * the subvolume.
2101 *
2102 * if a conflicting item exists in the subdirectory already,
2103 * the inode it points to is unlinked and put into the link count
2104 * fix up tree.
2105 *
2106 * If a name from the log points to a file or directory that does
2107 * not exist in the FS, it is skipped. fsyncs on directories
2108 * do not force down inodes inside that directory, just changes to the
2109 * names or unlinks in a directory.
2110 *
2111 * Returns < 0 on error, 0 if the name wasn't replayed (dentry points to a
2112 * non-existing inode) and 1 if the name was replayed.
2113 */
replay_one_name(struct walk_control * wc,struct btrfs_dir_item * di)2114 static noinline int replay_one_name(struct walk_control *wc, struct btrfs_dir_item *di)
2115 {
2116 struct btrfs_trans_handle *trans = wc->trans;
2117 struct btrfs_root *root = wc->root;
2118 struct fscrypt_str name = { 0 };
2119 struct btrfs_dir_item *dir_dst_di;
2120 struct btrfs_dir_item *index_dst_di;
2121 bool dir_dst_matches = false;
2122 bool index_dst_matches = false;
2123 struct btrfs_key log_key;
2124 struct btrfs_key search_key;
2125 struct btrfs_inode *dir;
2126 u8 log_flags;
2127 bool exists;
2128 int ret;
2129 bool update_size = true;
2130 bool name_added = false;
2131
2132 dir = btrfs_iget_logging(wc->log_key.objectid, root);
2133 if (IS_ERR(dir)) {
2134 ret = PTR_ERR(dir);
2135 btrfs_abort_log_replay(wc, ret,
2136 "failed to lookup dir inode %llu root %llu",
2137 wc->log_key.objectid, btrfs_root_id(root));
2138 return ret;
2139 }
2140
2141 ret = read_alloc_one_name(wc->log_leaf, di + 1,
2142 btrfs_dir_name_len(wc->log_leaf, di), &name);
2143 if (ret) {
2144 btrfs_abort_log_replay(wc, ret,
2145 "failed to allocate name for dir %llu root %llu",
2146 btrfs_ino(dir), btrfs_root_id(root));
2147 goto out;
2148 }
2149
2150 log_flags = btrfs_dir_flags(wc->log_leaf, di);
2151 btrfs_dir_item_key_to_cpu(wc->log_leaf, di, &log_key);
2152 ret = btrfs_lookup_inode(trans, root, wc->subvol_path, &log_key, 0);
2153 btrfs_release_path(wc->subvol_path);
2154 if (ret < 0) {
2155 btrfs_abort_log_replay(wc, ret,
2156 "failed to lookup inode %llu root %llu",
2157 log_key.objectid, btrfs_root_id(root));
2158 goto out;
2159 }
2160 exists = (ret == 0);
2161 ret = 0;
2162
2163 dir_dst_di = btrfs_lookup_dir_item(trans, root, wc->subvol_path,
2164 wc->log_key.objectid, &name, 1);
2165 if (IS_ERR(dir_dst_di)) {
2166 ret = PTR_ERR(dir_dst_di);
2167 btrfs_abort_log_replay(wc, ret,
2168 "failed to lookup dir item for dir %llu name %.*s root %llu",
2169 wc->log_key.objectid, name.len, name.name,
2170 btrfs_root_id(root));
2171 goto out;
2172 } else if (dir_dst_di) {
2173 ret = delete_conflicting_dir_entry(wc, dir, dir_dst_di,
2174 &log_key, log_flags, exists);
2175 if (ret < 0) {
2176 btrfs_abort_log_replay(wc, ret,
2177 "failed to delete conflicting entry for dir %llu name %.*s root %llu",
2178 btrfs_ino(dir), name.len, name.name,
2179 btrfs_root_id(root));
2180 goto out;
2181 }
2182 dir_dst_matches = (ret == 1);
2183 }
2184
2185 btrfs_release_path(wc->subvol_path);
2186
2187 index_dst_di = btrfs_lookup_dir_index_item(trans, root, wc->subvol_path,
2188 wc->log_key.objectid,
2189 wc->log_key.offset, &name, 1);
2190 if (IS_ERR(index_dst_di)) {
2191 ret = PTR_ERR(index_dst_di);
2192 btrfs_abort_log_replay(wc, ret,
2193 "failed to lookup dir index item for dir %llu name %.*s root %llu",
2194 wc->log_key.objectid, name.len, name.name,
2195 btrfs_root_id(root));
2196 goto out;
2197 } else if (index_dst_di) {
2198 ret = delete_conflicting_dir_entry(wc, dir, index_dst_di,
2199 &log_key, log_flags, exists);
2200 if (ret < 0) {
2201 btrfs_abort_log_replay(wc, ret,
2202 "failed to delete conflicting entry for dir %llu name %.*s root %llu",
2203 btrfs_ino(dir), name.len, name.name,
2204 btrfs_root_id(root));
2205 goto out;
2206 }
2207 index_dst_matches = (ret == 1);
2208 }
2209
2210 btrfs_release_path(wc->subvol_path);
2211
2212 if (dir_dst_matches && index_dst_matches) {
2213 ret = 0;
2214 update_size = false;
2215 goto out;
2216 }
2217
2218 /*
2219 * Check if the inode reference exists in the log for the given name,
2220 * inode and parent inode
2221 */
2222 search_key.objectid = log_key.objectid;
2223 search_key.type = BTRFS_INODE_REF_KEY;
2224 search_key.offset = wc->log_key.objectid;
2225 ret = backref_in_log(root->log_root, &search_key, 0, &name);
2226 if (ret < 0) {
2227 btrfs_abort_log_replay(wc, ret,
2228 "failed to check if ref item is logged for inode %llu dir %llu name %.*s root %llu",
2229 search_key.objectid, btrfs_ino(dir),
2230 name.len, name.name, btrfs_root_id(root));
2231 goto out;
2232 } else if (ret) {
2233 /* The dentry will be added later. */
2234 ret = 0;
2235 update_size = false;
2236 goto out;
2237 }
2238
2239 search_key.objectid = log_key.objectid;
2240 search_key.type = BTRFS_INODE_EXTREF_KEY;
2241 search_key.offset = btrfs_extref_hash(wc->log_key.objectid, name.name, name.len);
2242 ret = backref_in_log(root->log_root, &search_key, wc->log_key.objectid, &name);
2243 if (ret < 0) {
2244 btrfs_abort_log_replay(wc, ret,
2245 "failed to check if extref item is logged for inode %llu dir %llu name %.*s root %llu",
2246 search_key.objectid, btrfs_ino(dir),
2247 name.len, name.name, btrfs_root_id(root));
2248 goto out;
2249 } else if (ret) {
2250 /* The dentry will be added later. */
2251 ret = 0;
2252 update_size = false;
2253 goto out;
2254 }
2255 ret = insert_one_name(trans, root, wc->log_key.objectid, wc->log_key.offset,
2256 &name, &log_key);
2257 if (ret && ret != -ENOENT && ret != -EEXIST) {
2258 btrfs_abort_log_replay(wc, ret,
2259 "failed to insert name %.*s for inode %llu dir %llu root %llu",
2260 name.len, name.name, log_key.objectid,
2261 btrfs_ino(dir), btrfs_root_id(root));
2262 goto out;
2263 }
2264 if (!ret)
2265 name_added = true;
2266 update_size = false;
2267 ret = 0;
2268
2269 out:
2270 if (!ret && update_size) {
2271 btrfs_i_size_write(dir, dir->vfs_inode.i_size + name.len * 2);
2272 ret = btrfs_update_inode(trans, dir);
2273 if (ret)
2274 btrfs_abort_log_replay(wc, ret,
2275 "failed to update dir inode %llu root %llu",
2276 btrfs_ino(dir), btrfs_root_id(root));
2277 }
2278 kfree(name.name);
2279 iput(&dir->vfs_inode);
2280 if (!ret && name_added)
2281 ret = 1;
2282 return ret;
2283 }
2284
2285 /* Replay one dir item from a BTRFS_DIR_INDEX_KEY key. */
replay_one_dir_item(struct walk_control * wc)2286 static noinline int replay_one_dir_item(struct walk_control *wc)
2287 {
2288 int ret;
2289 struct btrfs_dir_item *di;
2290
2291 /* We only log dir index keys, which only contain a single dir item. */
2292 ASSERT(wc->log_key.type == BTRFS_DIR_INDEX_KEY,
2293 "wc->log_key.type=%u", wc->log_key.type);
2294
2295 di = btrfs_item_ptr(wc->log_leaf, wc->log_slot, struct btrfs_dir_item);
2296 ret = replay_one_name(wc, di);
2297 if (ret < 0)
2298 return ret;
2299
2300 /*
2301 * If this entry refers to a non-directory (directories can not have a
2302 * link count > 1) and it was added in the transaction that was not
2303 * committed, make sure we fixup the link count of the inode the entry
2304 * points to. Otherwise something like the following would result in a
2305 * directory pointing to an inode with a wrong link that does not account
2306 * for this dir entry:
2307 *
2308 * mkdir testdir
2309 * touch testdir/foo
2310 * touch testdir/bar
2311 * sync
2312 *
2313 * ln testdir/bar testdir/bar_link
2314 * ln testdir/foo testdir/foo_link
2315 * xfs_io -c "fsync" testdir/bar
2316 *
2317 * <power failure>
2318 *
2319 * mount fs, log replay happens
2320 *
2321 * File foo would remain with a link count of 1 when it has two entries
2322 * pointing to it in the directory testdir. This would make it impossible
2323 * to ever delete the parent directory has it would result in stale
2324 * dentries that can never be deleted.
2325 */
2326 if (ret == 1 && btrfs_dir_ftype(wc->log_leaf, di) != BTRFS_FT_DIR) {
2327 struct btrfs_key di_key;
2328
2329 btrfs_dir_item_key_to_cpu(wc->log_leaf, di, &di_key);
2330 ret = link_to_fixup_dir(wc, di_key.objectid);
2331 }
2332
2333 return ret;
2334 }
2335
2336 /*
2337 * directory replay has two parts. There are the standard directory
2338 * items in the log copied from the subvolume, and range items
2339 * created in the log while the subvolume was logged.
2340 *
2341 * The range items tell us which parts of the key space the log
2342 * is authoritative for. During replay, if a key in the subvolume
2343 * directory is in a logged range item, but not actually in the log
2344 * that means it was deleted from the directory before the fsync
2345 * and should be removed.
2346 */
find_dir_range(struct btrfs_root * root,struct btrfs_path * path,u64 dirid,u64 * start_ret,u64 * end_ret)2347 static noinline int find_dir_range(struct btrfs_root *root,
2348 struct btrfs_path *path,
2349 u64 dirid,
2350 u64 *start_ret, u64 *end_ret)
2351 {
2352 struct btrfs_key key;
2353 u64 found_end;
2354 struct btrfs_dir_log_item *item;
2355 int ret;
2356 int nritems;
2357
2358 if (*start_ret == (u64)-1)
2359 return 1;
2360
2361 key.objectid = dirid;
2362 key.type = BTRFS_DIR_LOG_INDEX_KEY;
2363 key.offset = *start_ret;
2364
2365 ret = btrfs_search_slot(NULL, root, &key, path, 0, 0);
2366 if (ret < 0)
2367 goto out;
2368 if (ret > 0) {
2369 if (path->slots[0] == 0)
2370 goto out;
2371 path->slots[0]--;
2372 }
2373 if (ret != 0)
2374 btrfs_item_key_to_cpu(path->nodes[0], &key, path->slots[0]);
2375
2376 if (key.type != BTRFS_DIR_LOG_INDEX_KEY || key.objectid != dirid) {
2377 ret = 1;
2378 goto next;
2379 }
2380 item = btrfs_item_ptr(path->nodes[0], path->slots[0],
2381 struct btrfs_dir_log_item);
2382 found_end = btrfs_dir_log_end(path->nodes[0], item);
2383
2384 if (*start_ret >= key.offset && *start_ret <= found_end) {
2385 ret = 0;
2386 *start_ret = key.offset;
2387 *end_ret = found_end;
2388 goto out;
2389 }
2390 ret = 1;
2391 next:
2392 /* check the next slot in the tree to see if it is a valid item */
2393 nritems = btrfs_header_nritems(path->nodes[0]);
2394 path->slots[0]++;
2395 if (path->slots[0] >= nritems) {
2396 ret = btrfs_next_leaf(root, path);
2397 if (ret)
2398 goto out;
2399 }
2400
2401 btrfs_item_key_to_cpu(path->nodes[0], &key, path->slots[0]);
2402
2403 if (key.type != BTRFS_DIR_LOG_INDEX_KEY || key.objectid != dirid) {
2404 ret = 1;
2405 goto out;
2406 }
2407 item = btrfs_item_ptr(path->nodes[0], path->slots[0],
2408 struct btrfs_dir_log_item);
2409 found_end = btrfs_dir_log_end(path->nodes[0], item);
2410 *start_ret = key.offset;
2411 *end_ret = found_end;
2412 ret = 0;
2413 out:
2414 btrfs_release_path(path);
2415 return ret;
2416 }
2417
2418 /*
2419 * this looks for a given directory item in the log. If the directory
2420 * item is not in the log, the item is removed and the inode it points
2421 * to is unlinked
2422 */
check_item_in_log(struct walk_control * wc,struct btrfs_path * log_path,struct btrfs_inode * dir,struct btrfs_key * dir_key,bool force_remove)2423 static noinline int check_item_in_log(struct walk_control *wc,
2424 struct btrfs_path *log_path,
2425 struct btrfs_inode *dir,
2426 struct btrfs_key *dir_key,
2427 bool force_remove)
2428 {
2429 struct btrfs_trans_handle *trans = wc->trans;
2430 struct btrfs_root *root = dir->root;
2431 int ret;
2432 struct extent_buffer *eb;
2433 int slot;
2434 struct btrfs_dir_item *di;
2435 struct fscrypt_str name = { 0 };
2436 struct btrfs_inode *inode = NULL;
2437 struct btrfs_key location;
2438
2439 /*
2440 * Currently we only log dir index keys. Even if we replay a log created
2441 * by an older kernel that logged both dir index and dir item keys, all
2442 * we need to do is process the dir index keys, we (and our caller) can
2443 * safely ignore dir item keys (key type BTRFS_DIR_ITEM_KEY).
2444 */
2445 ASSERT(dir_key->type == BTRFS_DIR_INDEX_KEY, "dir_key->type=%u", dir_key->type);
2446
2447 eb = wc->subvol_path->nodes[0];
2448 slot = wc->subvol_path->slots[0];
2449 di = btrfs_item_ptr(eb, slot, struct btrfs_dir_item);
2450 ret = read_alloc_one_name(eb, di + 1, btrfs_dir_name_len(eb, di), &name);
2451 if (ret) {
2452 btrfs_abort_log_replay(wc, ret,
2453 "failed to allocate name for dir %llu index %llu root %llu",
2454 btrfs_ino(dir), dir_key->offset,
2455 btrfs_root_id(root));
2456 goto out;
2457 }
2458
2459 if (!force_remove) {
2460 struct btrfs_dir_item *log_di;
2461
2462 log_di = btrfs_lookup_dir_index_item(trans, wc->log, log_path,
2463 dir_key->objectid,
2464 dir_key->offset, &name, 0);
2465 if (IS_ERR(log_di)) {
2466 ret = PTR_ERR(log_di);
2467 btrfs_abort_log_replay(wc, ret,
2468 "failed to lookup dir index item for dir %llu index %llu name %.*s root %llu",
2469 btrfs_ino(dir), dir_key->offset,
2470 name.len, name.name,
2471 btrfs_root_id(root));
2472 goto out;
2473 } else if (log_di) {
2474 /* The dentry exists in the log, we have nothing to do. */
2475 ret = 0;
2476 goto out;
2477 }
2478 }
2479
2480 btrfs_dir_item_key_to_cpu(eb, di, &location);
2481 btrfs_release_path(wc->subvol_path);
2482 btrfs_release_path(log_path);
2483 inode = btrfs_iget_logging(location.objectid, root);
2484 if (IS_ERR(inode)) {
2485 ret = PTR_ERR(inode);
2486 inode = NULL;
2487 btrfs_abort_log_replay(wc, ret,
2488 "failed to lookup inode %llu root %llu",
2489 location.objectid, btrfs_root_id(root));
2490 goto out;
2491 }
2492
2493 ret = link_to_fixup_dir(wc, location.objectid);
2494 if (ret)
2495 goto out;
2496
2497 inc_nlink(&inode->vfs_inode);
2498 ret = unlink_inode_for_log_replay(wc, dir, inode, &name);
2499 /*
2500 * Unlike dir item keys, dir index keys can only have one name (entry) in
2501 * them, as there are no key collisions since each key has a unique offset
2502 * (an index number), so we're done.
2503 */
2504 out:
2505 btrfs_release_path(wc->subvol_path);
2506 btrfs_release_path(log_path);
2507 kfree(name.name);
2508 if (inode)
2509 iput(&inode->vfs_inode);
2510 return ret;
2511 }
2512
replay_xattr_deletes(struct walk_control * wc)2513 static int replay_xattr_deletes(struct walk_control *wc)
2514 {
2515 struct btrfs_trans_handle *trans = wc->trans;
2516 struct btrfs_root *root = wc->root;
2517 struct btrfs_root *log = wc->log;
2518 struct btrfs_key search_key;
2519 BTRFS_PATH_AUTO_FREE(log_path);
2520 const u64 ino = wc->log_key.objectid;
2521 int nritems;
2522 int ret;
2523
2524 log_path = btrfs_alloc_path();
2525 if (!log_path) {
2526 btrfs_abort_log_replay(wc, -ENOMEM, "failed to allocate path");
2527 return -ENOMEM;
2528 }
2529
2530 search_key.objectid = ino;
2531 search_key.type = BTRFS_XATTR_ITEM_KEY;
2532 search_key.offset = 0;
2533 again:
2534 ret = btrfs_search_slot(NULL, root, &search_key, wc->subvol_path, 0, 0);
2535 if (ret < 0) {
2536 btrfs_abort_log_replay(wc, ret,
2537 "failed to search xattrs for inode %llu root %llu",
2538 ino, btrfs_root_id(root));
2539 goto out;
2540 }
2541 process_leaf:
2542 nritems = btrfs_header_nritems(wc->subvol_path->nodes[0]);
2543 for (int i = wc->subvol_path->slots[0]; i < nritems; i++) {
2544 struct btrfs_key key;
2545 struct btrfs_dir_item *di;
2546 struct btrfs_dir_item *log_di;
2547 u32 total_size;
2548 u32 cur;
2549
2550 btrfs_item_key_to_cpu(wc->subvol_path->nodes[0], &key, i);
2551 if (key.objectid != ino || key.type != BTRFS_XATTR_ITEM_KEY) {
2552 ret = 0;
2553 goto out;
2554 }
2555
2556 di = btrfs_item_ptr(wc->subvol_path->nodes[0], i, struct btrfs_dir_item);
2557 total_size = btrfs_item_size(wc->subvol_path->nodes[0], i);
2558 cur = 0;
2559 while (cur < total_size) {
2560 u16 name_len = btrfs_dir_name_len(wc->subvol_path->nodes[0], di);
2561 u16 data_len = btrfs_dir_data_len(wc->subvol_path->nodes[0], di);
2562 u32 this_len = sizeof(*di) + name_len + data_len;
2563 char *name;
2564
2565 name = kmalloc(name_len, GFP_NOFS);
2566 if (!name) {
2567 ret = -ENOMEM;
2568 btrfs_abort_log_replay(wc, ret,
2569 "failed to allocate memory for name of length %u",
2570 name_len);
2571 goto out;
2572 }
2573 read_extent_buffer(wc->subvol_path->nodes[0], name,
2574 (unsigned long)(di + 1), name_len);
2575
2576 log_di = btrfs_lookup_xattr(NULL, log, log_path, ino,
2577 name, name_len, 0);
2578 btrfs_release_path(log_path);
2579 if (!log_di) {
2580 /* Doesn't exist in log tree, so delete it. */
2581 btrfs_release_path(wc->subvol_path);
2582 di = btrfs_lookup_xattr(trans, root, wc->subvol_path, ino,
2583 name, name_len, -1);
2584 if (IS_ERR(di)) {
2585 ret = PTR_ERR(di);
2586 btrfs_abort_log_replay(wc, ret,
2587 "failed to lookup xattr with name %.*s for inode %llu root %llu",
2588 name_len, name, ino,
2589 btrfs_root_id(root));
2590 kfree(name);
2591 goto out;
2592 }
2593 ASSERT(di);
2594 ret = btrfs_delete_one_dir_name(trans, root,
2595 wc->subvol_path, di);
2596 if (ret) {
2597 btrfs_abort_log_replay(wc, ret,
2598 "failed to delete xattr with name %.*s for inode %llu root %llu",
2599 name_len, name, ino,
2600 btrfs_root_id(root));
2601 kfree(name);
2602 goto out;
2603 }
2604 btrfs_release_path(wc->subvol_path);
2605 kfree(name);
2606 search_key = key;
2607 goto again;
2608 }
2609 if (IS_ERR(log_di)) {
2610 ret = PTR_ERR(log_di);
2611 btrfs_abort_log_replay(wc, ret,
2612 "failed to lookup xattr in log tree with name %.*s for inode %llu root %llu",
2613 name_len, name, ino,
2614 btrfs_root_id(root));
2615 kfree(name);
2616 goto out;
2617 }
2618 kfree(name);
2619 cur += this_len;
2620 di = (struct btrfs_dir_item *)((char *)di + this_len);
2621 }
2622 }
2623 ret = btrfs_next_leaf(root, wc->subvol_path);
2624 if (ret > 0)
2625 ret = 0;
2626 else if (ret == 0)
2627 goto process_leaf;
2628 else
2629 btrfs_abort_log_replay(wc, ret,
2630 "failed to get next leaf in subvolume root %llu",
2631 btrfs_root_id(root));
2632 out:
2633 btrfs_release_path(wc->subvol_path);
2634 return ret;
2635 }
2636
2637
2638 /*
2639 * deletion replay happens before we copy any new directory items
2640 * out of the log or out of backreferences from inodes. It
2641 * scans the log to find ranges of keys that log is authoritative for,
2642 * and then scans the directory to find items in those ranges that are
2643 * not present in the log.
2644 *
2645 * Anything we don't find in the log is unlinked and removed from the
2646 * directory.
2647 */
replay_dir_deletes(struct walk_control * wc,u64 dirid,bool del_all)2648 static noinline int replay_dir_deletes(struct walk_control *wc,
2649 u64 dirid, bool del_all)
2650 {
2651 struct btrfs_root *root = wc->root;
2652 struct btrfs_root *log = (del_all ? NULL : wc->log);
2653 u64 range_start;
2654 u64 range_end;
2655 int ret = 0;
2656 struct btrfs_key dir_key;
2657 struct btrfs_key found_key;
2658 BTRFS_PATH_AUTO_FREE(log_path);
2659 struct btrfs_inode *dir;
2660
2661 dir_key.objectid = dirid;
2662 dir_key.type = BTRFS_DIR_INDEX_KEY;
2663 log_path = btrfs_alloc_path();
2664 if (!log_path) {
2665 btrfs_abort_log_replay(wc, -ENOMEM, "failed to allocate path");
2666 return -ENOMEM;
2667 }
2668
2669 dir = btrfs_iget_logging(dirid, root);
2670 /*
2671 * It isn't an error if the inode isn't there, that can happen because
2672 * we replay the deletes before we copy in the inode item from the log.
2673 */
2674 if (IS_ERR(dir)) {
2675 ret = PTR_ERR(dir);
2676 if (ret == -ENOENT)
2677 ret = 0;
2678 else
2679 btrfs_abort_log_replay(wc, ret,
2680 "failed to lookup dir inode %llu root %llu",
2681 dirid, btrfs_root_id(root));
2682 return ret;
2683 }
2684
2685 range_start = 0;
2686 range_end = 0;
2687 while (1) {
2688 if (del_all)
2689 range_end = (u64)-1;
2690 else {
2691 ret = find_dir_range(log, wc->subvol_path, dirid,
2692 &range_start, &range_end);
2693 if (ret < 0) {
2694 btrfs_abort_log_replay(wc, ret,
2695 "failed to find range for dir %llu in log tree root %llu",
2696 dirid, btrfs_root_id(root));
2697 goto out;
2698 } else if (ret > 0) {
2699 break;
2700 }
2701 }
2702
2703 dir_key.offset = range_start;
2704 while (1) {
2705 int nritems;
2706 ret = btrfs_search_slot(NULL, root, &dir_key,
2707 wc->subvol_path, 0, 0);
2708 if (ret < 0) {
2709 btrfs_abort_log_replay(wc, ret,
2710 "failed to search root %llu for key " BTRFS_KEY_FMT,
2711 btrfs_root_id(root),
2712 BTRFS_KEY_FMT_VALUE(&dir_key));
2713 goto out;
2714 }
2715
2716 nritems = btrfs_header_nritems(wc->subvol_path->nodes[0]);
2717 if (wc->subvol_path->slots[0] >= nritems) {
2718 ret = btrfs_next_leaf(root, wc->subvol_path);
2719 if (ret == 1) {
2720 break;
2721 } else if (ret < 0) {
2722 btrfs_abort_log_replay(wc, ret,
2723 "failed to get next leaf in subvolume root %llu",
2724 btrfs_root_id(root));
2725 goto out;
2726 }
2727 }
2728 btrfs_item_key_to_cpu(wc->subvol_path->nodes[0], &found_key,
2729 wc->subvol_path->slots[0]);
2730 if (found_key.objectid != dirid ||
2731 found_key.type != dir_key.type) {
2732 ret = 0;
2733 goto out;
2734 }
2735
2736 if (found_key.offset > range_end)
2737 break;
2738
2739 ret = check_item_in_log(wc, log_path, dir, &found_key, del_all);
2740 if (ret)
2741 goto out;
2742 if (found_key.offset == (u64)-1)
2743 break;
2744 dir_key.offset = found_key.offset + 1;
2745 }
2746 btrfs_release_path(wc->subvol_path);
2747 if (range_end == (u64)-1)
2748 break;
2749 range_start = range_end + 1;
2750 }
2751 ret = 0;
2752 out:
2753 btrfs_release_path(wc->subvol_path);
2754 iput(&dir->vfs_inode);
2755 return ret;
2756 }
2757
2758 /*
2759 * the process_func used to replay items from the log tree. This
2760 * gets called in two different stages. The first stage just looks
2761 * for inodes and makes sure they are all copied into the subvolume.
2762 *
2763 * The second stage copies all the other item types from the log into
2764 * the subvolume. The two stage approach is slower, but gets rid of
2765 * lots of complexity around inodes referencing other inodes that exist
2766 * only in the log (references come from either directory items or inode
2767 * back refs).
2768 */
replay_one_buffer(struct extent_buffer * eb,struct walk_control * wc,u64 gen,int level)2769 static int replay_one_buffer(struct extent_buffer *eb,
2770 struct walk_control *wc, u64 gen, int level)
2771 {
2772 int nritems;
2773 struct btrfs_tree_parent_check check = {
2774 .transid = gen,
2775 .level = level
2776 };
2777 struct btrfs_root *root = wc->root;
2778 struct btrfs_trans_handle *trans = wc->trans;
2779 int ret;
2780
2781 if (level != 0)
2782 return 0;
2783
2784 /*
2785 * Set to NULL since it was not yet read and in case we abort log replay
2786 * on error, we have no valid log tree leaf to dump.
2787 */
2788 wc->log_leaf = NULL;
2789 ret = btrfs_read_extent_buffer(eb, &check);
2790 if (ret) {
2791 btrfs_abort_log_replay(wc, ret,
2792 "failed to read log tree leaf %llu for root %llu",
2793 eb->start, btrfs_root_id(root));
2794 return ret;
2795 }
2796
2797 ASSERT(wc->subvol_path == NULL);
2798 wc->subvol_path = btrfs_alloc_path();
2799 if (!wc->subvol_path) {
2800 btrfs_abort_log_replay(wc, -ENOMEM, "failed to allocate path");
2801 return -ENOMEM;
2802 }
2803
2804 wc->log_leaf = eb;
2805
2806 nritems = btrfs_header_nritems(eb);
2807 for (wc->log_slot = 0; wc->log_slot < nritems; wc->log_slot++) {
2808 struct btrfs_inode_item *inode_item = NULL;
2809
2810 btrfs_item_key_to_cpu(eb, &wc->log_key, wc->log_slot);
2811
2812 if (wc->log_key.type == BTRFS_INODE_ITEM_KEY) {
2813 inode_item = btrfs_item_ptr(eb, wc->log_slot,
2814 struct btrfs_inode_item);
2815 /*
2816 * An inode with no links is either:
2817 *
2818 * 1) A tmpfile (O_TMPFILE) that got fsync'ed and never
2819 * got linked before the fsync, skip it, as replaying
2820 * it is pointless since it would be deleted later.
2821 * We skip logging tmpfiles, but it's always possible
2822 * we are replaying a log created with a kernel that
2823 * used to log tmpfiles;
2824 *
2825 * 2) A non-tmpfile which got its last link deleted
2826 * while holding an open fd on it and later got
2827 * fsynced through that fd. We always log the
2828 * parent inodes when inode->last_unlink_trans is
2829 * set to the current transaction, so ignore all the
2830 * inode items for this inode. We will delete the
2831 * inode when processing the parent directory with
2832 * replay_dir_deletes().
2833 */
2834 if (btrfs_inode_nlink(eb, inode_item) == 0) {
2835 wc->ignore_cur_inode = true;
2836 continue;
2837 } else {
2838 wc->ignore_cur_inode = false;
2839 }
2840 }
2841
2842 /* Inode keys are done during the first stage. */
2843 if (wc->log_key.type == BTRFS_INODE_ITEM_KEY &&
2844 wc->stage == LOG_WALK_REPLAY_INODES) {
2845 u32 mode;
2846
2847 ret = replay_xattr_deletes(wc);
2848 if (ret)
2849 break;
2850 mode = btrfs_inode_mode(eb, inode_item);
2851 if (S_ISDIR(mode)) {
2852 ret = replay_dir_deletes(wc, wc->log_key.objectid, false);
2853 if (ret)
2854 break;
2855 }
2856 ret = overwrite_item(wc);
2857 if (ret)
2858 break;
2859
2860 /*
2861 * Before replaying extents, truncate the inode to its
2862 * size. We need to do it now and not after log replay
2863 * because before an fsync we can have prealloc extents
2864 * added beyond the inode's i_size. If we did it after,
2865 * through orphan cleanup for example, we would drop
2866 * those prealloc extents just after replaying them.
2867 */
2868 if (S_ISREG(mode)) {
2869 struct btrfs_drop_extents_args drop_args = { 0 };
2870 struct btrfs_inode *inode;
2871 u64 from;
2872
2873 inode = btrfs_iget_logging(wc->log_key.objectid, root);
2874 if (IS_ERR(inode)) {
2875 ret = PTR_ERR(inode);
2876 btrfs_abort_log_replay(wc, ret,
2877 "failed to lookup inode %llu root %llu",
2878 wc->log_key.objectid,
2879 btrfs_root_id(root));
2880 break;
2881 }
2882 from = ALIGN(i_size_read(&inode->vfs_inode),
2883 root->fs_info->sectorsize);
2884 drop_args.start = from;
2885 drop_args.end = (u64)-1;
2886 drop_args.drop_cache = true;
2887 drop_args.path = wc->subvol_path;
2888 ret = btrfs_drop_extents(trans, root, inode, &drop_args);
2889 if (ret) {
2890 btrfs_abort_log_replay(wc, ret,
2891 "failed to drop extents for inode %llu root %llu offset %llu",
2892 btrfs_ino(inode),
2893 btrfs_root_id(root),
2894 from);
2895 } else {
2896 inode_sub_bytes(&inode->vfs_inode,
2897 drop_args.bytes_found);
2898 /* Update the inode's nbytes. */
2899 ret = btrfs_update_inode(trans, inode);
2900 if (ret)
2901 btrfs_abort_log_replay(wc, ret,
2902 "failed to update inode %llu root %llu",
2903 btrfs_ino(inode),
2904 btrfs_root_id(root));
2905 }
2906 iput(&inode->vfs_inode);
2907 if (ret)
2908 break;
2909 }
2910
2911 ret = link_to_fixup_dir(wc, wc->log_key.objectid);
2912 if (ret)
2913 break;
2914 }
2915
2916 if (wc->ignore_cur_inode)
2917 continue;
2918
2919 if (wc->log_key.type == BTRFS_DIR_INDEX_KEY &&
2920 wc->stage == LOG_WALK_REPLAY_DIR_INDEX) {
2921 ret = replay_one_dir_item(wc);
2922 if (ret)
2923 break;
2924 }
2925
2926 if (wc->stage < LOG_WALK_REPLAY_ALL)
2927 continue;
2928
2929 /* these keys are simply copied */
2930 if (wc->log_key.type == BTRFS_XATTR_ITEM_KEY) {
2931 ret = overwrite_item(wc);
2932 if (ret)
2933 break;
2934 } else if (wc->log_key.type == BTRFS_INODE_REF_KEY ||
2935 wc->log_key.type == BTRFS_INODE_EXTREF_KEY) {
2936 ret = add_inode_ref(wc);
2937 if (ret)
2938 break;
2939 } else if (wc->log_key.type == BTRFS_EXTENT_DATA_KEY) {
2940 ret = replay_one_extent(wc);
2941 if (ret)
2942 break;
2943 }
2944 /*
2945 * We don't log BTRFS_DIR_ITEM_KEY keys anymore, only the
2946 * BTRFS_DIR_INDEX_KEY items which we use to derive the
2947 * BTRFS_DIR_ITEM_KEY items. If we are replaying a log from an
2948 * older kernel with such keys, ignore them.
2949 */
2950 }
2951 btrfs_free_path(wc->subvol_path);
2952 wc->subvol_path = NULL;
2953 return ret;
2954 }
2955
clean_log_buffer(struct btrfs_trans_handle * trans,struct extent_buffer * eb)2956 static int clean_log_buffer(struct btrfs_trans_handle *trans,
2957 struct extent_buffer *eb)
2958 {
2959 struct btrfs_fs_info *fs_info = eb->fs_info;
2960 struct btrfs_block_group *bg;
2961
2962 btrfs_tree_lock(eb);
2963 btrfs_clear_buffer_dirty(trans, eb);
2964 wait_on_extent_buffer_writeback(eb);
2965 btrfs_tree_unlock(eb);
2966
2967 if (trans) {
2968 int ret;
2969
2970 ret = btrfs_pin_reserved_extent(trans, eb);
2971 if (ret)
2972 btrfs_abort_transaction(trans, ret);
2973 return ret;
2974 }
2975
2976 bg = btrfs_lookup_block_group(fs_info, eb->start);
2977 if (!bg) {
2978 btrfs_err(fs_info, "unable to find block group for %llu", eb->start);
2979 btrfs_handle_fs_error(fs_info, -ENOENT, NULL);
2980 return -ENOENT;
2981 }
2982
2983 spin_lock(&bg->space_info->lock);
2984 spin_lock(&bg->lock);
2985 bg->reserved -= fs_info->nodesize;
2986 bg->space_info->bytes_reserved -= fs_info->nodesize;
2987 spin_unlock(&bg->lock);
2988 spin_unlock(&bg->space_info->lock);
2989
2990 btrfs_put_block_group(bg);
2991
2992 return 0;
2993 }
2994
walk_down_log_tree(struct btrfs_path * path,int * level,struct walk_control * wc)2995 static noinline int walk_down_log_tree(struct btrfs_path *path, int *level,
2996 struct walk_control *wc)
2997 {
2998 struct btrfs_trans_handle *trans = wc->trans;
2999 struct btrfs_fs_info *fs_info = wc->log->fs_info;
3000 u64 bytenr;
3001 u64 ptr_gen;
3002 struct extent_buffer *next;
3003 struct extent_buffer *cur;
3004 int ret = 0;
3005
3006 while (*level > 0) {
3007 struct btrfs_tree_parent_check check = { 0 };
3008
3009 cur = path->nodes[*level];
3010
3011 WARN_ON(btrfs_header_level(cur) != *level);
3012
3013 if (path->slots[*level] >=
3014 btrfs_header_nritems(cur))
3015 break;
3016
3017 bytenr = btrfs_node_blockptr(cur, path->slots[*level]);
3018 ptr_gen = btrfs_node_ptr_generation(cur, path->slots[*level]);
3019 check.transid = ptr_gen;
3020 check.level = *level - 1;
3021 check.has_first_key = true;
3022 btrfs_node_key_to_cpu(cur, &check.first_key, path->slots[*level]);
3023
3024 next = btrfs_find_create_tree_block(fs_info, bytenr,
3025 btrfs_header_owner(cur),
3026 *level - 1);
3027 if (IS_ERR(next)) {
3028 ret = PTR_ERR(next);
3029 if (trans)
3030 btrfs_abort_transaction(trans, ret);
3031 else
3032 btrfs_handle_fs_error(fs_info, ret, NULL);
3033 return ret;
3034 }
3035
3036 if (*level == 1) {
3037 ret = wc->process_func(next, wc, ptr_gen, *level - 1);
3038 if (ret) {
3039 free_extent_buffer(next);
3040 return ret;
3041 }
3042
3043 path->slots[*level]++;
3044 if (wc->free) {
3045 ret = btrfs_read_extent_buffer(next, &check);
3046 if (ret) {
3047 free_extent_buffer(next);
3048 if (trans)
3049 btrfs_abort_transaction(trans, ret);
3050 else
3051 btrfs_handle_fs_error(fs_info, ret, NULL);
3052 return ret;
3053 }
3054
3055 ret = clean_log_buffer(trans, next);
3056 if (ret) {
3057 free_extent_buffer(next);
3058 return ret;
3059 }
3060 }
3061 free_extent_buffer(next);
3062 continue;
3063 }
3064 ret = btrfs_read_extent_buffer(next, &check);
3065 if (ret) {
3066 free_extent_buffer(next);
3067 if (trans)
3068 btrfs_abort_transaction(trans, ret);
3069 else
3070 btrfs_handle_fs_error(fs_info, ret, NULL);
3071 return ret;
3072 }
3073
3074 if (path->nodes[*level-1])
3075 free_extent_buffer(path->nodes[*level-1]);
3076 path->nodes[*level-1] = next;
3077 *level = btrfs_header_level(next);
3078 path->slots[*level] = 0;
3079 cond_resched();
3080 }
3081 path->slots[*level] = btrfs_header_nritems(path->nodes[*level]);
3082
3083 cond_resched();
3084 return 0;
3085 }
3086
walk_up_log_tree(struct btrfs_path * path,int * level,struct walk_control * wc)3087 static noinline int walk_up_log_tree(struct btrfs_path *path, int *level,
3088 struct walk_control *wc)
3089 {
3090 int i;
3091 int slot;
3092 int ret;
3093
3094 for (i = *level; i < BTRFS_MAX_LEVEL - 1 && path->nodes[i]; i++) {
3095 slot = path->slots[i];
3096 if (slot + 1 < btrfs_header_nritems(path->nodes[i])) {
3097 path->slots[i]++;
3098 *level = i;
3099 WARN_ON(*level == 0);
3100 return 0;
3101 } else {
3102 ret = wc->process_func(path->nodes[*level], wc,
3103 btrfs_header_generation(path->nodes[*level]),
3104 *level);
3105 if (ret)
3106 return ret;
3107
3108 if (wc->free) {
3109 ret = clean_log_buffer(wc->trans, path->nodes[*level]);
3110 if (ret)
3111 return ret;
3112 }
3113 free_extent_buffer(path->nodes[*level]);
3114 path->nodes[*level] = NULL;
3115 *level = i + 1;
3116 }
3117 }
3118 return 1;
3119 }
3120
3121 /*
3122 * drop the reference count on the tree rooted at 'snap'. This traverses
3123 * the tree freeing any blocks that have a ref count of zero after being
3124 * decremented.
3125 */
walk_log_tree(struct walk_control * wc)3126 static int walk_log_tree(struct walk_control *wc)
3127 {
3128 struct btrfs_root *log = wc->log;
3129 int ret = 0;
3130 int wret;
3131 int level;
3132 BTRFS_PATH_AUTO_FREE(path);
3133 int orig_level;
3134
3135 path = btrfs_alloc_path();
3136 if (!path)
3137 return -ENOMEM;
3138
3139 level = btrfs_header_level(log->node);
3140 orig_level = level;
3141 path->nodes[level] = log->node;
3142 refcount_inc(&log->node->refs);
3143 path->slots[level] = 0;
3144
3145 while (1) {
3146 wret = walk_down_log_tree(path, &level, wc);
3147 if (wret > 0)
3148 break;
3149 if (wret < 0)
3150 return wret;
3151
3152 wret = walk_up_log_tree(path, &level, wc);
3153 if (wret > 0)
3154 break;
3155 if (wret < 0)
3156 return wret;
3157 }
3158
3159 /* was the root node processed? if not, catch it here */
3160 if (path->nodes[orig_level]) {
3161 ret = wc->process_func(path->nodes[orig_level], wc,
3162 btrfs_header_generation(path->nodes[orig_level]),
3163 orig_level);
3164 if (ret)
3165 return ret;
3166 if (wc->free)
3167 ret = clean_log_buffer(wc->trans, path->nodes[orig_level]);
3168 }
3169
3170 return ret;
3171 }
3172
3173 /*
3174 * helper function to update the item for a given subvolumes log root
3175 * in the tree of log roots
3176 */
update_log_root(struct btrfs_trans_handle * trans,struct btrfs_root * log,struct btrfs_root_item * root_item)3177 static int update_log_root(struct btrfs_trans_handle *trans,
3178 struct btrfs_root *log,
3179 struct btrfs_root_item *root_item)
3180 {
3181 struct btrfs_fs_info *fs_info = log->fs_info;
3182 int ret;
3183
3184 if (log->log_transid == 1) {
3185 /* insert root item on the first sync */
3186 ret = btrfs_insert_root(trans, fs_info->log_root_tree,
3187 &log->root_key, root_item);
3188 } else {
3189 ret = btrfs_update_root(trans, fs_info->log_root_tree,
3190 &log->root_key, root_item);
3191 }
3192 return ret;
3193 }
3194
wait_log_commit(struct btrfs_root * root,int transid)3195 static void wait_log_commit(struct btrfs_root *root, int transid)
3196 {
3197 DEFINE_WAIT(wait);
3198 int index = transid % 2;
3199
3200 /*
3201 * we only allow two pending log transactions at a time,
3202 * so we know that if ours is more than 2 older than the
3203 * current transaction, we're done
3204 */
3205 for (;;) {
3206 prepare_to_wait(&root->log_commit_wait[index],
3207 &wait, TASK_UNINTERRUPTIBLE);
3208
3209 if (!(root->log_transid_committed < transid &&
3210 atomic_read(&root->log_commit[index])))
3211 break;
3212
3213 mutex_unlock(&root->log_mutex);
3214 schedule();
3215 mutex_lock(&root->log_mutex);
3216 }
3217 finish_wait(&root->log_commit_wait[index], &wait);
3218 }
3219
wait_for_writer(struct btrfs_root * root)3220 static void wait_for_writer(struct btrfs_root *root)
3221 {
3222 DEFINE_WAIT(wait);
3223
3224 for (;;) {
3225 prepare_to_wait(&root->log_writer_wait, &wait,
3226 TASK_UNINTERRUPTIBLE);
3227 if (!atomic_read(&root->log_writers))
3228 break;
3229
3230 mutex_unlock(&root->log_mutex);
3231 schedule();
3232 mutex_lock(&root->log_mutex);
3233 }
3234 finish_wait(&root->log_writer_wait, &wait);
3235 }
3236
btrfs_init_log_ctx(struct btrfs_log_ctx * ctx,struct btrfs_inode * inode)3237 void btrfs_init_log_ctx(struct btrfs_log_ctx *ctx, struct btrfs_inode *inode)
3238 {
3239 ctx->log_ret = 0;
3240 ctx->log_transid = 0;
3241 ctx->log_new_dentries = false;
3242 ctx->logging_new_name = false;
3243 ctx->logging_new_delayed_dentries = false;
3244 ctx->logged_before = false;
3245 ctx->inode = inode;
3246 INIT_LIST_HEAD(&ctx->list);
3247 INIT_LIST_HEAD(&ctx->ordered_extents);
3248 INIT_LIST_HEAD(&ctx->conflict_inodes);
3249 ctx->num_conflict_inodes = 0;
3250 ctx->logging_conflict_inodes = false;
3251 ctx->scratch_eb = NULL;
3252 }
3253
btrfs_init_log_ctx_scratch_eb(struct btrfs_log_ctx * ctx)3254 void btrfs_init_log_ctx_scratch_eb(struct btrfs_log_ctx *ctx)
3255 {
3256 struct btrfs_inode *inode = ctx->inode;
3257
3258 if (!test_bit(BTRFS_INODE_NEEDS_FULL_SYNC, &inode->runtime_flags) &&
3259 !test_bit(BTRFS_INODE_COPY_EVERYTHING, &inode->runtime_flags))
3260 return;
3261
3262 /*
3263 * Don't care about allocation failure. This is just for optimization,
3264 * if we fail to allocate here, we will try again later if needed.
3265 */
3266 ctx->scratch_eb = alloc_dummy_extent_buffer(inode->root->fs_info, 0);
3267 }
3268
btrfs_release_log_ctx_extents(struct btrfs_log_ctx * ctx)3269 void btrfs_release_log_ctx_extents(struct btrfs_log_ctx *ctx)
3270 {
3271 struct btrfs_ordered_extent *ordered;
3272 struct btrfs_ordered_extent *tmp;
3273
3274 btrfs_assert_inode_locked(ctx->inode);
3275
3276 list_for_each_entry_safe(ordered, tmp, &ctx->ordered_extents, log_list) {
3277 list_del_init(&ordered->log_list);
3278 btrfs_put_ordered_extent(ordered);
3279 }
3280 }
3281
3282
btrfs_remove_log_ctx(struct btrfs_root * root,struct btrfs_log_ctx * ctx)3283 static inline void btrfs_remove_log_ctx(struct btrfs_root *root,
3284 struct btrfs_log_ctx *ctx)
3285 {
3286 mutex_lock(&root->log_mutex);
3287 list_del_init(&ctx->list);
3288 mutex_unlock(&root->log_mutex);
3289 }
3290
3291 /*
3292 * Invoked in log mutex context, or be sure there is no other task which
3293 * can access the list.
3294 */
btrfs_remove_all_log_ctxs(struct btrfs_root * root,int index,int error)3295 static inline void btrfs_remove_all_log_ctxs(struct btrfs_root *root,
3296 int index, int error)
3297 {
3298 struct btrfs_log_ctx *ctx;
3299 struct btrfs_log_ctx *safe;
3300
3301 list_for_each_entry_safe(ctx, safe, &root->log_ctxs[index], list) {
3302 list_del_init(&ctx->list);
3303 ctx->log_ret = error;
3304 }
3305 }
3306
3307 /*
3308 * Sends a given tree log down to the disk and updates the super blocks to
3309 * record it. When this call is done, you know that any inodes previously
3310 * logged are safely on disk only if it returns 0.
3311 *
3312 * Any other return value means you need to call btrfs_commit_transaction.
3313 * Some of the edge cases for fsyncing directories that have had unlinks
3314 * or renames done in the past mean that sometimes the only safe
3315 * fsync is to commit the whole FS. When btrfs_sync_log returns -EAGAIN,
3316 * that has happened.
3317 */
btrfs_sync_log(struct btrfs_trans_handle * trans,struct btrfs_root * root,struct btrfs_log_ctx * ctx)3318 int btrfs_sync_log(struct btrfs_trans_handle *trans,
3319 struct btrfs_root *root, struct btrfs_log_ctx *ctx)
3320 {
3321 int index1;
3322 int index2;
3323 int mark;
3324 int ret;
3325 struct btrfs_fs_info *fs_info = root->fs_info;
3326 struct btrfs_root *log = root->log_root;
3327 struct btrfs_root *log_root_tree = fs_info->log_root_tree;
3328 struct btrfs_root_item new_root_item;
3329 int log_transid = 0;
3330 struct btrfs_log_ctx root_log_ctx;
3331 struct blk_plug plug;
3332 u64 log_root_start;
3333 u64 log_root_level;
3334
3335 mutex_lock(&root->log_mutex);
3336 log_transid = ctx->log_transid;
3337 if (root->log_transid_committed >= log_transid) {
3338 mutex_unlock(&root->log_mutex);
3339 return ctx->log_ret;
3340 }
3341
3342 index1 = log_transid % 2;
3343 if (atomic_read(&root->log_commit[index1])) {
3344 wait_log_commit(root, log_transid);
3345 mutex_unlock(&root->log_mutex);
3346 return ctx->log_ret;
3347 }
3348 ASSERT(log_transid == root->log_transid,
3349 "log_transid=%d root->log_transid=%d", log_transid, root->log_transid);
3350 atomic_set(&root->log_commit[index1], 1);
3351
3352 /* wait for previous tree log sync to complete */
3353 if (atomic_read(&root->log_commit[(index1 + 1) % 2]))
3354 wait_log_commit(root, log_transid - 1);
3355
3356 while (1) {
3357 int batch = atomic_read(&root->log_batch);
3358 /* when we're on an ssd, just kick the log commit out */
3359 if (!btrfs_test_opt(fs_info, SSD) &&
3360 test_bit(BTRFS_ROOT_MULTI_LOG_TASKS, &root->state)) {
3361 mutex_unlock(&root->log_mutex);
3362 schedule_timeout_uninterruptible(1);
3363 mutex_lock(&root->log_mutex);
3364 }
3365 wait_for_writer(root);
3366 if (batch == atomic_read(&root->log_batch))
3367 break;
3368 }
3369
3370 /* bail out if we need to do a full commit */
3371 if (btrfs_need_log_full_commit(trans)) {
3372 ret = BTRFS_LOG_FORCE_COMMIT;
3373 mutex_unlock(&root->log_mutex);
3374 goto out;
3375 }
3376
3377 if (log_transid % 2 == 0)
3378 mark = EXTENT_DIRTY_LOG1;
3379 else
3380 mark = EXTENT_DIRTY_LOG2;
3381
3382 /* we start IO on all the marked extents here, but we don't actually
3383 * wait for them until later.
3384 */
3385 blk_start_plug(&plug);
3386 ret = btrfs_write_marked_extents(fs_info, &log->dirty_log_pages, mark);
3387 /*
3388 * -EAGAIN happens when someone, e.g., a concurrent transaction
3389 * commit, writes a dirty extent in this tree-log commit. This
3390 * concurrent write will create a hole writing out the extents,
3391 * and we cannot proceed on a zoned filesystem, requiring
3392 * sequential writing. While we can bail out to a full commit
3393 * here, but we can continue hoping the concurrent writing fills
3394 * the hole.
3395 */
3396 if (ret == -EAGAIN && btrfs_is_zoned(fs_info))
3397 ret = 0;
3398 if (ret) {
3399 blk_finish_plug(&plug);
3400 btrfs_set_log_full_commit(trans);
3401 mutex_unlock(&root->log_mutex);
3402 goto out;
3403 }
3404
3405 /*
3406 * We _must_ update under the root->log_mutex in order to make sure we
3407 * have a consistent view of the log root we are trying to commit at
3408 * this moment.
3409 *
3410 * We _must_ copy this into a local copy, because we are not holding the
3411 * log_root_tree->log_mutex yet. This is important because when we
3412 * commit the log_root_tree we must have a consistent view of the
3413 * log_root_tree when we update the super block to point at the
3414 * log_root_tree bytenr. If we update the log_root_tree here we'll race
3415 * with the commit and possibly point at the new block which we may not
3416 * have written out.
3417 */
3418 btrfs_set_root_node(&log->root_item, log->node);
3419 memcpy(&new_root_item, &log->root_item, sizeof(new_root_item));
3420
3421 btrfs_set_root_log_transid(root, root->log_transid + 1);
3422 log->log_transid = root->log_transid;
3423 root->log_start_pid = 0;
3424 /*
3425 * IO has been started, blocks of the log tree have WRITTEN flag set
3426 * in their headers. new modifications of the log will be written to
3427 * new positions. so it's safe to allow log writers to go in.
3428 */
3429 mutex_unlock(&root->log_mutex);
3430
3431 if (btrfs_is_zoned(fs_info)) {
3432 mutex_lock(&fs_info->tree_root->log_mutex);
3433 if (!log_root_tree->node) {
3434 ret = btrfs_alloc_log_tree_node(trans, log_root_tree);
3435 if (ret) {
3436 mutex_unlock(&fs_info->tree_root->log_mutex);
3437 blk_finish_plug(&plug);
3438 goto out;
3439 }
3440 }
3441 mutex_unlock(&fs_info->tree_root->log_mutex);
3442 }
3443
3444 btrfs_init_log_ctx(&root_log_ctx, NULL);
3445
3446 mutex_lock(&log_root_tree->log_mutex);
3447
3448 index2 = log_root_tree->log_transid % 2;
3449 list_add_tail(&root_log_ctx.list, &log_root_tree->log_ctxs[index2]);
3450 root_log_ctx.log_transid = log_root_tree->log_transid;
3451
3452 /*
3453 * Now we are safe to update the log_root_tree because we're under the
3454 * log_mutex, and we're a current writer so we're holding the commit
3455 * open until we drop the log_mutex.
3456 */
3457 ret = update_log_root(trans, log, &new_root_item);
3458 if (ret) {
3459 list_del_init(&root_log_ctx.list);
3460 blk_finish_plug(&plug);
3461 btrfs_set_log_full_commit(trans);
3462 if (ret != -ENOSPC)
3463 btrfs_err(fs_info,
3464 "failed to update log for root %llu ret %d",
3465 btrfs_root_id(root), ret);
3466 btrfs_wait_tree_log_extents(log, mark);
3467 mutex_unlock(&log_root_tree->log_mutex);
3468 goto out;
3469 }
3470
3471 if (log_root_tree->log_transid_committed >= root_log_ctx.log_transid) {
3472 blk_finish_plug(&plug);
3473 list_del_init(&root_log_ctx.list);
3474 mutex_unlock(&log_root_tree->log_mutex);
3475 ret = root_log_ctx.log_ret;
3476 goto out;
3477 }
3478
3479 if (atomic_read(&log_root_tree->log_commit[index2])) {
3480 blk_finish_plug(&plug);
3481 ret = btrfs_wait_tree_log_extents(log, mark);
3482 wait_log_commit(log_root_tree,
3483 root_log_ctx.log_transid);
3484 mutex_unlock(&log_root_tree->log_mutex);
3485 if (!ret)
3486 ret = root_log_ctx.log_ret;
3487 goto out;
3488 }
3489 ASSERT(root_log_ctx.log_transid == log_root_tree->log_transid,
3490 "root_log_ctx.log_transid=%d log_root_tree->log_transid=%d",
3491 root_log_ctx.log_transid, log_root_tree->log_transid);
3492 atomic_set(&log_root_tree->log_commit[index2], 1);
3493
3494 if (atomic_read(&log_root_tree->log_commit[(index2 + 1) % 2])) {
3495 wait_log_commit(log_root_tree,
3496 root_log_ctx.log_transid - 1);
3497 }
3498
3499 /*
3500 * now that we've moved on to the tree of log tree roots,
3501 * check the full commit flag again
3502 */
3503 if (btrfs_need_log_full_commit(trans)) {
3504 blk_finish_plug(&plug);
3505 btrfs_wait_tree_log_extents(log, mark);
3506 mutex_unlock(&log_root_tree->log_mutex);
3507 ret = BTRFS_LOG_FORCE_COMMIT;
3508 goto out_wake_log_root;
3509 }
3510
3511 ret = btrfs_write_marked_extents(fs_info,
3512 &log_root_tree->dirty_log_pages,
3513 EXTENT_DIRTY_LOG1 | EXTENT_DIRTY_LOG2);
3514 blk_finish_plug(&plug);
3515 /*
3516 * As described above, -EAGAIN indicates a hole in the extents. We
3517 * cannot wait for these write outs since the waiting cause a
3518 * deadlock. Bail out to the full commit instead.
3519 */
3520 if (ret == -EAGAIN && btrfs_is_zoned(fs_info)) {
3521 btrfs_set_log_full_commit(trans);
3522 btrfs_wait_tree_log_extents(log, mark);
3523 mutex_unlock(&log_root_tree->log_mutex);
3524 goto out_wake_log_root;
3525 } else if (ret) {
3526 btrfs_set_log_full_commit(trans);
3527 mutex_unlock(&log_root_tree->log_mutex);
3528 goto out_wake_log_root;
3529 }
3530 ret = btrfs_wait_tree_log_extents(log, mark);
3531 if (!ret)
3532 ret = btrfs_wait_tree_log_extents(log_root_tree,
3533 EXTENT_DIRTY_LOG1 | EXTENT_DIRTY_LOG2);
3534 if (ret) {
3535 btrfs_set_log_full_commit(trans);
3536 mutex_unlock(&log_root_tree->log_mutex);
3537 goto out_wake_log_root;
3538 }
3539
3540 log_root_start = log_root_tree->node->start;
3541 log_root_level = btrfs_header_level(log_root_tree->node);
3542 log_root_tree->log_transid++;
3543 mutex_unlock(&log_root_tree->log_mutex);
3544
3545 /*
3546 * Here we are guaranteed that nobody is going to write the superblock
3547 * for the current transaction before us and that neither we do write
3548 * our superblock before the previous transaction finishes its commit
3549 * and writes its superblock, because:
3550 *
3551 * 1) We are holding a handle on the current transaction, so no body
3552 * can commit it until we release the handle;
3553 *
3554 * 2) Before writing our superblock we acquire the tree_log_mutex, so
3555 * if the previous transaction is still committing, and hasn't yet
3556 * written its superblock, we wait for it to do it, because a
3557 * transaction commit acquires the tree_log_mutex when the commit
3558 * begins and releases it only after writing its superblock.
3559 */
3560 mutex_lock(&fs_info->tree_log_mutex);
3561
3562 /*
3563 * The previous transaction writeout phase could have failed, and thus
3564 * marked the fs in an error state. We must not commit here, as we
3565 * could have updated our generation in the super_for_commit and
3566 * writing the super here would result in transid mismatches. If there
3567 * is an error here just bail.
3568 */
3569 if (unlikely(BTRFS_FS_ERROR(fs_info))) {
3570 ret = -EIO;
3571 btrfs_set_log_full_commit(trans);
3572 btrfs_abort_transaction(trans, ret);
3573 mutex_unlock(&fs_info->tree_log_mutex);
3574 goto out_wake_log_root;
3575 }
3576
3577 btrfs_set_super_log_root(fs_info->super_for_commit, log_root_start);
3578 btrfs_set_super_log_root_level(fs_info->super_for_commit, log_root_level);
3579 ret = write_all_supers(trans);
3580 mutex_unlock(&fs_info->tree_log_mutex);
3581 if (unlikely(ret)) {
3582 btrfs_set_log_full_commit(trans);
3583 btrfs_abort_transaction(trans, ret);
3584 goto out_wake_log_root;
3585 }
3586
3587 /*
3588 * We know there can only be one task here, since we have not yet set
3589 * root->log_commit[index1] to 0 and any task attempting to sync the
3590 * log must wait for the previous log transaction to commit if it's
3591 * still in progress or wait for the current log transaction commit if
3592 * someone else already started it. We use <= and not < because the
3593 * first log transaction has an ID of 0.
3594 */
3595 ASSERT(btrfs_get_root_last_log_commit(root) <= log_transid,
3596 "last_log_commit(root)=%d log_transid=%d",
3597 btrfs_get_root_last_log_commit(root), log_transid);
3598 btrfs_set_root_last_log_commit(root, log_transid);
3599
3600 out_wake_log_root:
3601 mutex_lock(&log_root_tree->log_mutex);
3602 btrfs_remove_all_log_ctxs(log_root_tree, index2, ret);
3603
3604 log_root_tree->log_transid_committed++;
3605 atomic_set(&log_root_tree->log_commit[index2], 0);
3606 mutex_unlock(&log_root_tree->log_mutex);
3607
3608 /*
3609 * The barrier before waitqueue_active (in cond_wake_up) is needed so
3610 * all the updates above are seen by the woken threads. It might not be
3611 * necessary, but proving that seems to be hard.
3612 */
3613 cond_wake_up(&log_root_tree->log_commit_wait[index2]);
3614 out:
3615 mutex_lock(&root->log_mutex);
3616 btrfs_remove_all_log_ctxs(root, index1, ret);
3617 root->log_transid_committed++;
3618 atomic_set(&root->log_commit[index1], 0);
3619 mutex_unlock(&root->log_mutex);
3620
3621 /*
3622 * The barrier before waitqueue_active (in cond_wake_up) is needed so
3623 * all the updates above are seen by the woken threads. It might not be
3624 * necessary, but proving that seems to be hard.
3625 */
3626 cond_wake_up(&root->log_commit_wait[index1]);
3627 return ret;
3628 }
3629
free_log_tree(struct btrfs_trans_handle * trans,struct btrfs_root * log)3630 static void free_log_tree(struct btrfs_trans_handle *trans,
3631 struct btrfs_root *log)
3632 {
3633 int ret;
3634 struct walk_control wc = {
3635 .free = true,
3636 .process_func = process_one_buffer,
3637 .log = log,
3638 .trans = trans,
3639 };
3640
3641 if (log->node) {
3642 ret = walk_log_tree(&wc);
3643 if (ret) {
3644 /*
3645 * We weren't able to traverse the entire log tree, the
3646 * typical scenario is getting an -EIO when reading an
3647 * extent buffer of the tree, due to a previous writeback
3648 * failure of it.
3649 */
3650 set_bit(BTRFS_FS_STATE_LOG_CLEANUP_ERROR,
3651 &log->fs_info->fs_state);
3652
3653 /*
3654 * Some extent buffers of the log tree may still be dirty
3655 * and not yet written back to storage, because we may
3656 * have updates to a log tree without syncing a log tree,
3657 * such as during rename and link operations. So flush
3658 * them out and wait for their writeback to complete, so
3659 * that we properly cleanup their state and pages.
3660 */
3661 btrfs_write_marked_extents(log->fs_info,
3662 &log->dirty_log_pages,
3663 EXTENT_DIRTY_LOG1 | EXTENT_DIRTY_LOG2);
3664 btrfs_wait_tree_log_extents(log,
3665 EXTENT_DIRTY_LOG1 | EXTENT_DIRTY_LOG2);
3666
3667 if (trans)
3668 btrfs_abort_transaction(trans, ret);
3669 else
3670 btrfs_handle_fs_error(log->fs_info, ret, NULL);
3671 }
3672 }
3673
3674 btrfs_extent_io_tree_release(&log->dirty_log_pages);
3675 btrfs_extent_io_tree_release(&log->log_csum_range);
3676
3677 btrfs_put_root(log);
3678 }
3679
3680 /*
3681 * free all the extents used by the tree log. This should be called
3682 * at commit time of the full transaction
3683 */
btrfs_free_log(struct btrfs_trans_handle * trans,struct btrfs_root * root)3684 void btrfs_free_log(struct btrfs_trans_handle *trans, struct btrfs_root *root)
3685 {
3686 if (root->log_root) {
3687 free_log_tree(trans, root->log_root);
3688 root->log_root = NULL;
3689 clear_bit(BTRFS_ROOT_HAS_LOG_TREE, &root->state);
3690 }
3691 }
3692
btrfs_free_log_root_tree(struct btrfs_trans_handle * trans,struct btrfs_fs_info * fs_info)3693 void btrfs_free_log_root_tree(struct btrfs_trans_handle *trans, struct btrfs_fs_info *fs_info)
3694 {
3695 if (fs_info->log_root_tree) {
3696 free_log_tree(trans, fs_info->log_root_tree);
3697 fs_info->log_root_tree = NULL;
3698 clear_bit(BTRFS_ROOT_HAS_LOG_TREE, &fs_info->tree_root->state);
3699 }
3700 }
3701
mark_inode_as_not_logged(const struct btrfs_trans_handle * trans,struct btrfs_inode * inode)3702 static bool mark_inode_as_not_logged(const struct btrfs_trans_handle *trans,
3703 struct btrfs_inode *inode)
3704 {
3705 bool ret = false;
3706
3707 /*
3708 * Do this only if ->logged_trans is still 0 to prevent races with
3709 * concurrent logging as we may see the inode not logged when
3710 * inode_logged() is called but it gets logged after inode_logged() did
3711 * not find it in the log tree and we end up setting ->logged_trans to a
3712 * value less than trans->transid after the concurrent logging task has
3713 * set it to trans->transid. As a consequence, subsequent rename, unlink
3714 * and link operations may end up not logging new names and removing old
3715 * names from the log.
3716 */
3717 spin_lock(&inode->lock);
3718 if (inode->logged_trans == 0)
3719 inode->logged_trans = trans->transid - 1;
3720 else if (inode->logged_trans == trans->transid)
3721 ret = true;
3722 spin_unlock(&inode->lock);
3723
3724 return ret;
3725 }
3726
3727 /*
3728 * Check if an inode was logged in the current transaction. This correctly deals
3729 * with the case where the inode was logged but has a logged_trans of 0, which
3730 * happens if the inode is evicted and loaded again, as logged_trans is an in
3731 * memory only field (not persisted).
3732 *
3733 * Returns 1 if the inode was logged before in the transaction, 0 if it was not,
3734 * and < 0 on error.
3735 */
inode_logged(const struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_path * path_in)3736 static int inode_logged(const struct btrfs_trans_handle *trans,
3737 struct btrfs_inode *inode,
3738 struct btrfs_path *path_in)
3739 {
3740 struct btrfs_path *path = path_in;
3741 struct btrfs_key key;
3742 int ret;
3743
3744 /*
3745 * Quick lockless call, since once ->logged_trans is set to the current
3746 * transaction, we never set it to a lower value anywhere else.
3747 */
3748 if (data_race(inode->logged_trans) == trans->transid)
3749 return 1;
3750
3751 /*
3752 * If logged_trans is not 0 and not trans->transid, then we know the
3753 * inode was not logged in this transaction, so we can return false
3754 * right away. We take the lock to avoid a race caused by load/store
3755 * tearing with a concurrent btrfs_log_inode() call or a concurrent task
3756 * in this function further below - an update to trans->transid can be
3757 * teared into two 32 bits updates for example, in which case we could
3758 * see a positive value that is not trans->transid and assume the inode
3759 * was not logged when it was.
3760 */
3761 spin_lock(&inode->lock);
3762 if (inode->logged_trans == trans->transid) {
3763 spin_unlock(&inode->lock);
3764 return 1;
3765 } else if (inode->logged_trans > 0) {
3766 spin_unlock(&inode->lock);
3767 return 0;
3768 }
3769 spin_unlock(&inode->lock);
3770
3771 /*
3772 * If no log tree was created for this root in this transaction, then
3773 * the inode can not have been logged in this transaction. In that case
3774 * set logged_trans to anything greater than 0 and less than the current
3775 * transaction's ID, to avoid the search below in a future call in case
3776 * a log tree gets created after this.
3777 */
3778 if (!test_bit(BTRFS_ROOT_HAS_LOG_TREE, &inode->root->state))
3779 return mark_inode_as_not_logged(trans, inode);
3780
3781 /*
3782 * We have a log tree and the inode's logged_trans is 0. We can't tell
3783 * for sure if the inode was logged before in this transaction by looking
3784 * only at logged_trans. We could be pessimistic and assume it was, but
3785 * that can lead to unnecessarily logging an inode during rename and link
3786 * operations, and then further updating the log in followup rename and
3787 * link operations, specially if it's a directory, which adds latency
3788 * visible to applications doing a series of rename or link operations.
3789 *
3790 * A logged_trans of 0 here can mean several things:
3791 *
3792 * 1) The inode was never logged since the filesystem was mounted, and may
3793 * or may have not been evicted and loaded again;
3794 *
3795 * 2) The inode was logged in a previous transaction, then evicted and
3796 * then loaded again;
3797 *
3798 * 3) The inode was logged in the current transaction, then evicted and
3799 * then loaded again.
3800 *
3801 * For cases 1) and 2) we don't want to return true, but we need to detect
3802 * case 3) and return true. So we do a search in the log root for the inode
3803 * item.
3804 */
3805 key.objectid = btrfs_ino(inode);
3806 key.type = BTRFS_INODE_ITEM_KEY;
3807 key.offset = 0;
3808
3809 if (!path) {
3810 path = btrfs_alloc_path();
3811 if (!path)
3812 return -ENOMEM;
3813 }
3814
3815 ret = btrfs_search_slot(NULL, inode->root->log_root, &key, path, 0, 0);
3816
3817 if (path_in)
3818 btrfs_release_path(path);
3819 else
3820 btrfs_free_path(path);
3821
3822 /*
3823 * Logging an inode always results in logging its inode item. So if we
3824 * did not find the item we know the inode was not logged for sure.
3825 */
3826 if (ret < 0) {
3827 return ret;
3828 } else if (ret > 0) {
3829 /*
3830 * Set logged_trans to a value greater than 0 and less then the
3831 * current transaction to avoid doing the search in future calls.
3832 */
3833 return mark_inode_as_not_logged(trans, inode);
3834 }
3835
3836 /*
3837 * The inode was previously logged and then evicted, set logged_trans to
3838 * the current transaction's ID, to avoid future tree searches as long as
3839 * the inode is not evicted again.
3840 */
3841 spin_lock(&inode->lock);
3842 inode->logged_trans = trans->transid;
3843 spin_unlock(&inode->lock);
3844
3845 return 1;
3846 }
3847
3848 /*
3849 * Delete a directory entry from the log if it exists.
3850 *
3851 * Returns < 0 on error
3852 * 1 if the entry does not exists
3853 * 0 if the entry existed and was successfully deleted
3854 */
del_logged_dentry(struct btrfs_trans_handle * trans,struct btrfs_root * log,struct btrfs_path * path,u64 dir_ino,const struct fscrypt_str * name,u64 index)3855 static int del_logged_dentry(struct btrfs_trans_handle *trans,
3856 struct btrfs_root *log,
3857 struct btrfs_path *path,
3858 u64 dir_ino,
3859 const struct fscrypt_str *name,
3860 u64 index)
3861 {
3862 struct btrfs_dir_item *di;
3863
3864 /*
3865 * We only log dir index items of a directory, so we don't need to look
3866 * for dir item keys.
3867 */
3868 di = btrfs_lookup_dir_index_item(trans, log, path, dir_ino,
3869 index, name, -1);
3870 if (IS_ERR(di))
3871 return PTR_ERR(di);
3872 else if (!di)
3873 return 1;
3874
3875 /*
3876 * We do not need to update the size field of the directory's
3877 * inode item because on log replay we update the field to reflect
3878 * all existing entries in the directory (see overwrite_item()).
3879 */
3880 return btrfs_del_item(trans, log, path);
3881 }
3882
3883 /*
3884 * If both a file and directory are logged, and unlinks or renames are
3885 * mixed in, we have a few interesting corners:
3886 *
3887 * create file X in dir Y
3888 * link file X to X.link in dir Y
3889 * fsync file X
3890 * unlink file X but leave X.link
3891 * fsync dir Y
3892 *
3893 * After a crash we would expect only X.link to exist. But file X
3894 * didn't get fsync'd again so the log has back refs for X and X.link.
3895 *
3896 * We solve this by removing directory entries and inode backrefs from the
3897 * log when a file that was logged in the current transaction is
3898 * unlinked. Any later fsync will include the updated log entries, and
3899 * we'll be able to reconstruct the proper directory items from backrefs.
3900 *
3901 * This optimizations allows us to avoid relogging the entire inode
3902 * or the entire directory.
3903 */
btrfs_del_dir_entries_in_log(struct btrfs_trans_handle * trans,const struct fscrypt_str * name,struct btrfs_inode * dir,u64 index)3904 void btrfs_del_dir_entries_in_log(struct btrfs_trans_handle *trans,
3905 const struct fscrypt_str *name,
3906 struct btrfs_inode *dir, u64 index)
3907 {
3908 struct btrfs_root *root = dir->root;
3909 BTRFS_PATH_AUTO_FREE(path);
3910 int ret;
3911
3912 ret = inode_logged(trans, dir, NULL);
3913 if (ret == 0)
3914 return;
3915 if (ret < 0) {
3916 btrfs_set_log_full_commit(trans);
3917 return;
3918 }
3919
3920 path = btrfs_alloc_path();
3921 if (!path) {
3922 btrfs_set_log_full_commit(trans);
3923 return;
3924 }
3925
3926 ret = join_running_log_trans(root);
3927 ASSERT(ret == 0, "join_running_log_trans() ret=%d", ret);
3928 if (WARN_ON(ret))
3929 return;
3930
3931 mutex_lock(&dir->log_mutex);
3932
3933 ret = del_logged_dentry(trans, root->log_root, path, btrfs_ino(dir),
3934 name, index);
3935 mutex_unlock(&dir->log_mutex);
3936 if (ret < 0)
3937 btrfs_set_log_full_commit(trans);
3938 btrfs_end_log_trans(root);
3939 }
3940
3941 /* see comments for btrfs_del_dir_entries_in_log */
btrfs_del_inode_ref_in_log(struct btrfs_trans_handle * trans,const struct fscrypt_str * name,struct btrfs_inode * inode,struct btrfs_inode * dir)3942 void btrfs_del_inode_ref_in_log(struct btrfs_trans_handle *trans,
3943 const struct fscrypt_str *name,
3944 struct btrfs_inode *inode,
3945 struct btrfs_inode *dir)
3946 {
3947 struct btrfs_root *root = dir->root;
3948 int ret;
3949
3950 ret = inode_logged(trans, inode, NULL);
3951 if (ret == 0)
3952 return;
3953 else if (ret < 0) {
3954 btrfs_set_log_full_commit(trans);
3955 return;
3956 }
3957
3958 ret = join_running_log_trans(root);
3959 ASSERT(ret == 0, "join_running_log_trans() ret=%d", ret);
3960 if (WARN_ON(ret))
3961 return;
3962 mutex_lock(&inode->log_mutex);
3963
3964 ret = btrfs_del_inode_ref(trans, root->log_root, name, btrfs_ino(inode),
3965 btrfs_ino(dir), NULL);
3966 mutex_unlock(&inode->log_mutex);
3967 if (ret < 0 && ret != -ENOENT)
3968 btrfs_set_log_full_commit(trans);
3969 btrfs_end_log_trans(root);
3970 }
3971
3972 /*
3973 * creates a range item in the log for 'dirid'. first_offset and
3974 * last_offset tell us which parts of the key space the log should
3975 * be considered authoritative for.
3976 */
insert_dir_log_key(struct btrfs_trans_handle * trans,struct btrfs_root * log,struct btrfs_path * path,u64 dirid,u64 first_offset,u64 last_offset)3977 static noinline int insert_dir_log_key(struct btrfs_trans_handle *trans,
3978 struct btrfs_root *log,
3979 struct btrfs_path *path,
3980 u64 dirid,
3981 u64 first_offset, u64 last_offset)
3982 {
3983 int ret;
3984 struct btrfs_key key;
3985 struct btrfs_dir_log_item *item;
3986
3987 key.objectid = dirid;
3988 key.type = BTRFS_DIR_LOG_INDEX_KEY;
3989 key.offset = first_offset;
3990 ret = btrfs_insert_empty_item(trans, log, path, &key, sizeof(*item));
3991 /*
3992 * -EEXIST is fine and can happen sporadically when we are logging a
3993 * directory and have concurrent insertions in the subvolume's tree for
3994 * items from other inodes and that result in pushing off some dir items
3995 * from one leaf to another in order to accommodate for the new items.
3996 * This results in logging the same dir index range key.
3997 */
3998 if (ret && ret != -EEXIST)
3999 return ret;
4000
4001 item = btrfs_item_ptr(path->nodes[0], path->slots[0],
4002 struct btrfs_dir_log_item);
4003 if (ret == -EEXIST) {
4004 const u64 curr_end = btrfs_dir_log_end(path->nodes[0], item);
4005
4006 /*
4007 * btrfs_del_dir_entries_in_log() might have been called during
4008 * an unlink between the initial insertion of this key and the
4009 * current update, or we might be logging a single entry deletion
4010 * during a rename, so set the new last_offset to the max value.
4011 */
4012 last_offset = max(last_offset, curr_end);
4013 }
4014 btrfs_set_dir_log_end(path->nodes[0], item, last_offset);
4015 btrfs_release_path(path);
4016 return 0;
4017 }
4018
flush_dir_items_batch(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct extent_buffer * src,struct btrfs_path * dst_path,int start_slot,int count)4019 static int flush_dir_items_batch(struct btrfs_trans_handle *trans,
4020 struct btrfs_inode *inode,
4021 struct extent_buffer *src,
4022 struct btrfs_path *dst_path,
4023 int start_slot,
4024 int count)
4025 {
4026 struct btrfs_root *log = inode->root->log_root;
4027 char AUTO_KFREE(ins_data);
4028 struct btrfs_item_batch batch;
4029 struct extent_buffer *dst;
4030 unsigned long src_offset;
4031 unsigned long dst_offset;
4032 u64 last_index;
4033 struct btrfs_key key;
4034 u32 item_size;
4035 int ret;
4036 int i;
4037
4038 ASSERT(count > 0, "count=%d", count);
4039 batch.nr = count;
4040
4041 if (count == 1) {
4042 btrfs_item_key_to_cpu(src, &key, start_slot);
4043 item_size = btrfs_item_size(src, start_slot);
4044 batch.keys = &key;
4045 batch.data_sizes = &item_size;
4046 batch.total_data_size = item_size;
4047 } else {
4048 struct btrfs_key *ins_keys;
4049 u32 *ins_sizes;
4050
4051 ins_data = kmalloc_array(count, sizeof(u32) + sizeof(struct btrfs_key), GFP_NOFS);
4052 if (!ins_data)
4053 return -ENOMEM;
4054
4055 ins_sizes = (u32 *)ins_data;
4056 ins_keys = (struct btrfs_key *)(ins_data + count * sizeof(u32));
4057 batch.keys = ins_keys;
4058 batch.data_sizes = ins_sizes;
4059 batch.total_data_size = 0;
4060
4061 for (i = 0; i < count; i++) {
4062 const int slot = start_slot + i;
4063
4064 btrfs_item_key_to_cpu(src, &ins_keys[i], slot);
4065 ins_sizes[i] = btrfs_item_size(src, slot);
4066 batch.total_data_size += ins_sizes[i];
4067 }
4068 }
4069
4070 ret = btrfs_insert_empty_items(trans, log, dst_path, &batch);
4071 if (ret)
4072 return ret;
4073
4074 dst = dst_path->nodes[0];
4075 /*
4076 * Copy all the items in bulk, in a single copy operation. Item data is
4077 * organized such that it's placed at the end of a leaf and from right
4078 * to left. For example, the data for the second item ends at an offset
4079 * that matches the offset where the data for the first item starts, the
4080 * data for the third item ends at an offset that matches the offset
4081 * where the data of the second items starts, and so on.
4082 * Therefore our source and destination start offsets for copy match the
4083 * offsets of the last items (highest slots).
4084 */
4085 dst_offset = btrfs_item_ptr_offset(dst, dst_path->slots[0] + count - 1);
4086 src_offset = btrfs_item_ptr_offset(src, start_slot + count - 1);
4087 copy_extent_buffer(dst, src, dst_offset, src_offset, batch.total_data_size);
4088 btrfs_release_path(dst_path);
4089
4090 last_index = batch.keys[count - 1].offset;
4091 ASSERT(last_index > inode->last_dir_index_offset,
4092 "last_index=%llu inode->last_dir_index_offset=%llu",
4093 last_index, inode->last_dir_index_offset);
4094
4095 /*
4096 * If for some unexpected reason the last item's index is not greater
4097 * than the last index we logged, warn and force a transaction commit.
4098 */
4099 if (WARN_ON(last_index <= inode->last_dir_index_offset))
4100 ret = BTRFS_LOG_FORCE_COMMIT;
4101 else
4102 inode->last_dir_index_offset = last_index;
4103
4104 if (btrfs_get_first_dir_index_to_log(inode) == 0)
4105 btrfs_set_first_dir_index_to_log(inode, batch.keys[0].offset);
4106
4107 return ret;
4108 }
4109
clone_leaf(struct btrfs_path * path,struct btrfs_log_ctx * ctx)4110 static int clone_leaf(struct btrfs_path *path, struct btrfs_log_ctx *ctx)
4111 {
4112 const int slot = path->slots[0];
4113
4114 if (ctx->scratch_eb) {
4115 copy_extent_buffer_full(ctx->scratch_eb, path->nodes[0]);
4116 } else {
4117 ctx->scratch_eb = btrfs_clone_extent_buffer(path->nodes[0]);
4118 if (!ctx->scratch_eb)
4119 return -ENOMEM;
4120 }
4121
4122 btrfs_release_path(path);
4123 path->nodes[0] = ctx->scratch_eb;
4124 path->slots[0] = slot;
4125 /*
4126 * Add extra ref to scratch eb so that it is not freed when callers
4127 * release the path, so we can reuse it later if needed.
4128 */
4129 refcount_inc(&ctx->scratch_eb->refs);
4130
4131 return 0;
4132 }
4133
process_dir_items_leaf(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_path * path,struct btrfs_path * dst_path,struct btrfs_log_ctx * ctx,u64 * last_old_dentry_offset)4134 static int process_dir_items_leaf(struct btrfs_trans_handle *trans,
4135 struct btrfs_inode *inode,
4136 struct btrfs_path *path,
4137 struct btrfs_path *dst_path,
4138 struct btrfs_log_ctx *ctx,
4139 u64 *last_old_dentry_offset)
4140 {
4141 struct btrfs_root *log = inode->root->log_root;
4142 struct extent_buffer *src;
4143 const int nritems = btrfs_header_nritems(path->nodes[0]);
4144 const u64 ino = btrfs_ino(inode);
4145 bool last_found = false;
4146 int batch_start = 0;
4147 int batch_size = 0;
4148 int ret;
4149
4150 /*
4151 * We need to clone the leaf, release the read lock on it, and use the
4152 * clone before modifying the log tree. See the comment at copy_items()
4153 * about why we need to do this.
4154 */
4155 ret = clone_leaf(path, ctx);
4156 if (ret < 0)
4157 return ret;
4158
4159 src = path->nodes[0];
4160
4161 for (int i = path->slots[0]; i < nritems; i++) {
4162 struct btrfs_dir_item *di;
4163 struct btrfs_key key;
4164
4165 btrfs_item_key_to_cpu(src, &key, i);
4166
4167 if (key.objectid != ino || key.type != BTRFS_DIR_INDEX_KEY) {
4168 last_found = true;
4169 break;
4170 }
4171
4172 di = btrfs_item_ptr(src, i, struct btrfs_dir_item);
4173
4174 /*
4175 * Skip ranges of items that consist only of dir item keys created
4176 * in past transactions. However if we find a gap, we must log a
4177 * dir index range item for that gap, so that index keys in that
4178 * gap are deleted during log replay.
4179 */
4180 if (btrfs_dir_transid(src, di) < trans->transid) {
4181 if (key.offset > *last_old_dentry_offset + 1) {
4182 ret = insert_dir_log_key(trans, log, dst_path,
4183 ino, *last_old_dentry_offset + 1,
4184 key.offset - 1);
4185 if (ret < 0)
4186 return ret;
4187 }
4188
4189 *last_old_dentry_offset = key.offset;
4190 continue;
4191 }
4192
4193 /* If we logged this dir index item before, we can skip it. */
4194 if (key.offset <= inode->last_dir_index_offset)
4195 continue;
4196
4197 /*
4198 * We must make sure that when we log a directory entry, the
4199 * corresponding inode, after log replay, has a matching link
4200 * count. For example:
4201 *
4202 * touch foo
4203 * mkdir mydir
4204 * sync
4205 * ln foo mydir/bar
4206 * xfs_io -c "fsync" mydir
4207 * <crash>
4208 * <mount fs and log replay>
4209 *
4210 * Would result in a fsync log that when replayed, our file inode
4211 * would have a link count of 1, but we get two directory entries
4212 * pointing to the same inode. After removing one of the names,
4213 * it would not be possible to remove the other name, which
4214 * resulted always in stale file handle errors, and would not be
4215 * possible to rmdir the parent directory, since its i_size could
4216 * never be decremented to the value BTRFS_EMPTY_DIR_SIZE,
4217 * resulting in -ENOTEMPTY errors.
4218 */
4219 if (!ctx->log_new_dentries) {
4220 struct btrfs_key di_key;
4221
4222 btrfs_dir_item_key_to_cpu(src, di, &di_key);
4223 if (di_key.type != BTRFS_ROOT_ITEM_KEY)
4224 ctx->log_new_dentries = true;
4225 }
4226
4227 if (batch_size == 0)
4228 batch_start = i;
4229 batch_size++;
4230 }
4231
4232 if (batch_size > 0) {
4233 ret = flush_dir_items_batch(trans, inode, src, dst_path,
4234 batch_start, batch_size);
4235 if (ret < 0)
4236 return ret;
4237 }
4238
4239 return last_found ? 1 : 0;
4240 }
4241
4242 /*
4243 * log all the items included in the current transaction for a given
4244 * directory. This also creates the range items in the log tree required
4245 * to replay anything deleted before the fsync
4246 */
log_dir_items(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_path * path,struct btrfs_path * dst_path,struct btrfs_log_ctx * ctx,u64 min_offset,u64 * last_offset_ret)4247 static noinline int log_dir_items(struct btrfs_trans_handle *trans,
4248 struct btrfs_inode *inode,
4249 struct btrfs_path *path,
4250 struct btrfs_path *dst_path,
4251 struct btrfs_log_ctx *ctx,
4252 u64 min_offset, u64 *last_offset_ret)
4253 {
4254 struct btrfs_key min_key;
4255 struct btrfs_root *root = inode->root;
4256 struct btrfs_root *log = root->log_root;
4257 int ret;
4258 u64 last_old_dentry_offset = min_offset - 1;
4259 u64 last_offset = (u64)-1;
4260 u64 ino = btrfs_ino(inode);
4261
4262 min_key.objectid = ino;
4263 min_key.type = BTRFS_DIR_INDEX_KEY;
4264 min_key.offset = min_offset;
4265
4266 ret = btrfs_search_forward(root, &min_key, path, trans->transid);
4267
4268 /*
4269 * we didn't find anything from this transaction, see if there
4270 * is anything at all
4271 */
4272 if (ret != 0 || min_key.objectid != ino ||
4273 min_key.type != BTRFS_DIR_INDEX_KEY) {
4274 min_key.objectid = ino;
4275 min_key.type = BTRFS_DIR_INDEX_KEY;
4276 min_key.offset = (u64)-1;
4277 btrfs_release_path(path);
4278 ret = btrfs_search_slot(NULL, root, &min_key, path, 0, 0);
4279 if (ret < 0) {
4280 btrfs_release_path(path);
4281 return ret;
4282 }
4283 ret = btrfs_previous_item(root, path, ino, BTRFS_DIR_INDEX_KEY);
4284
4285 /* if ret == 0 there are items for this type,
4286 * create a range to tell us the last key of this type.
4287 * otherwise, there are no items in this directory after
4288 * *min_offset, and we create a range to indicate that.
4289 */
4290 if (ret == 0) {
4291 struct btrfs_key tmp;
4292
4293 btrfs_item_key_to_cpu(path->nodes[0], &tmp,
4294 path->slots[0]);
4295 if (tmp.type == BTRFS_DIR_INDEX_KEY)
4296 last_old_dentry_offset = tmp.offset;
4297 } else if (ret > 0) {
4298 ret = 0;
4299 }
4300
4301 goto done;
4302 }
4303
4304 /* go backward to find any previous key */
4305 ret = btrfs_previous_item(root, path, ino, BTRFS_DIR_INDEX_KEY);
4306 if (ret == 0) {
4307 struct btrfs_key tmp;
4308
4309 btrfs_item_key_to_cpu(path->nodes[0], &tmp, path->slots[0]);
4310 /*
4311 * The dir index key before the first one we found that needs to
4312 * be logged might be in a previous leaf, and there might be a
4313 * gap between these keys, meaning that we had deletions that
4314 * happened. So the key range item we log (key type
4315 * BTRFS_DIR_LOG_INDEX_KEY) must cover a range that starts at the
4316 * previous key's offset plus 1, so that those deletes are replayed.
4317 */
4318 if (tmp.type == BTRFS_DIR_INDEX_KEY)
4319 last_old_dentry_offset = tmp.offset;
4320 } else if (ret < 0) {
4321 goto done;
4322 }
4323
4324 btrfs_release_path(path);
4325
4326 /*
4327 * Find the first key from this transaction again or the one we were at
4328 * in the loop below in case we had to reschedule. We may be logging the
4329 * directory without holding its VFS lock, which happen when logging new
4330 * dentries (through log_new_dir_dentries()) or in some cases when we
4331 * need to log the parent directory of an inode. This means a dir index
4332 * key might be deleted from the inode's root, and therefore we may not
4333 * find it anymore. If we can't find it, just move to the next key. We
4334 * can not bail out and ignore, because if we do that we will simply
4335 * not log dir index keys that come after the one that was just deleted
4336 * and we can end up logging a dir index range that ends at (u64)-1
4337 * (@last_offset is initialized to that), resulting in removing dir
4338 * entries we should not remove at log replay time.
4339 */
4340 search:
4341 ret = btrfs_search_slot(NULL, root, &min_key, path, 0, 0);
4342 if (ret > 0) {
4343 ret = btrfs_next_item(root, path);
4344 if (ret > 0) {
4345 /* There are no more keys in the inode's root. */
4346 ret = 0;
4347 goto done;
4348 }
4349 }
4350 if (ret < 0)
4351 goto done;
4352
4353 /*
4354 * we have a block from this transaction, log every item in it
4355 * from our directory
4356 */
4357 while (1) {
4358 ret = process_dir_items_leaf(trans, inode, path, dst_path, ctx,
4359 &last_old_dentry_offset);
4360 if (ret != 0) {
4361 if (ret > 0)
4362 ret = 0;
4363 goto done;
4364 }
4365 path->slots[0] = btrfs_header_nritems(path->nodes[0]);
4366
4367 /*
4368 * look ahead to the next item and see if it is also
4369 * from this directory and from this transaction
4370 */
4371 ret = btrfs_next_leaf(root, path);
4372 if (ret) {
4373 if (ret == 1) {
4374 last_offset = (u64)-1;
4375 ret = 0;
4376 }
4377 goto done;
4378 }
4379 btrfs_item_key_to_cpu(path->nodes[0], &min_key, path->slots[0]);
4380 if (min_key.objectid != ino || min_key.type != BTRFS_DIR_INDEX_KEY) {
4381 last_offset = (u64)-1;
4382 goto done;
4383 }
4384 if (btrfs_header_generation(path->nodes[0]) != trans->transid) {
4385 /*
4386 * The next leaf was not changed in the current transaction
4387 * and has at least one dir index key.
4388 * We check for the next key because there might have been
4389 * one or more deletions between the last key we logged and
4390 * that next key. So the key range item we log (key type
4391 * BTRFS_DIR_LOG_INDEX_KEY) must end at the next key's
4392 * offset minus 1, so that those deletes are replayed.
4393 */
4394 last_offset = min_key.offset - 1;
4395 goto done;
4396 }
4397 if (need_resched()) {
4398 btrfs_release_path(path);
4399 cond_resched();
4400 goto search;
4401 }
4402 }
4403 done:
4404 btrfs_release_path(path);
4405 btrfs_release_path(dst_path);
4406
4407 if (ret == 0) {
4408 *last_offset_ret = last_offset;
4409 /*
4410 * In case the leaf was changed in the current transaction but
4411 * all its dir items are from a past transaction, the last item
4412 * in the leaf is a dir item and there's no gap between that last
4413 * dir item and the first one on the next leaf (which did not
4414 * change in the current transaction), then we don't need to log
4415 * a range, last_old_dentry_offset is == to last_offset.
4416 */
4417 ASSERT(last_old_dentry_offset <= last_offset,
4418 "last_old_dentry_offset=%llu last_offset=%llu",
4419 last_old_dentry_offset, last_offset);
4420 if (last_old_dentry_offset < last_offset)
4421 ret = insert_dir_log_key(trans, log, path, ino,
4422 last_old_dentry_offset + 1,
4423 last_offset);
4424 }
4425
4426 return ret;
4427 }
4428
4429 /*
4430 * If the inode was logged before and it was evicted, then its
4431 * last_dir_index_offset is 0, so we don't know the value of the last index
4432 * key offset. If that's the case, search for it and update the inode. This
4433 * is to avoid lookups in the log tree every time we try to insert a dir index
4434 * key from a leaf changed in the current transaction, and to allow us to always
4435 * do batch insertions of dir index keys.
4436 */
update_last_dir_index_offset(struct btrfs_inode * inode,struct btrfs_path * path,const struct btrfs_log_ctx * ctx)4437 static int update_last_dir_index_offset(struct btrfs_inode *inode,
4438 struct btrfs_path *path,
4439 const struct btrfs_log_ctx *ctx)
4440 {
4441 const u64 ino = btrfs_ino(inode);
4442 struct btrfs_key key;
4443 int ret;
4444
4445 lockdep_assert_held(&inode->log_mutex);
4446
4447 if (inode->last_dir_index_offset != 0)
4448 return 0;
4449
4450 if (!ctx->logged_before) {
4451 inode->last_dir_index_offset = BTRFS_DIR_START_INDEX - 1;
4452 return 0;
4453 }
4454
4455 key.objectid = ino;
4456 key.type = BTRFS_DIR_INDEX_KEY;
4457 key.offset = (u64)-1;
4458
4459 ret = btrfs_search_slot(NULL, inode->root->log_root, &key, path, 0, 0);
4460 /*
4461 * An error happened or we actually have an index key with an offset
4462 * value of (u64)-1. Bail out, we're done.
4463 */
4464 if (ret <= 0)
4465 goto out;
4466
4467 ret = 0;
4468 inode->last_dir_index_offset = BTRFS_DIR_START_INDEX - 1;
4469
4470 /*
4471 * No dir index items, bail out and leave last_dir_index_offset with
4472 * the value right before the first valid index value.
4473 */
4474 if (path->slots[0] == 0)
4475 goto out;
4476
4477 /*
4478 * btrfs_search_slot() left us at one slot beyond the slot with the last
4479 * index key, or beyond the last key of the directory that is not an
4480 * index key. If we have an index key before, set last_dir_index_offset
4481 * to its offset value, otherwise leave it with a value right before the
4482 * first valid index value, as it means we have an empty directory.
4483 */
4484 btrfs_item_key_to_cpu(path->nodes[0], &key, path->slots[0] - 1);
4485 if (key.objectid == ino && key.type == BTRFS_DIR_INDEX_KEY)
4486 inode->last_dir_index_offset = key.offset;
4487
4488 out:
4489 btrfs_release_path(path);
4490
4491 return ret;
4492 }
4493
4494 /*
4495 * logging directories is very similar to logging inodes, We find all the items
4496 * from the current transaction and write them to the log.
4497 *
4498 * The recovery code scans the directory in the subvolume, and if it finds a
4499 * key in the range logged that is not present in the log tree, then it means
4500 * that dir entry was unlinked during the transaction.
4501 *
4502 * In order for that scan to work, we must include one key smaller than
4503 * the smallest logged by this transaction and one key larger than the largest
4504 * key logged by this transaction.
4505 */
log_directory_changes(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_path * path,struct btrfs_path * dst_path,struct btrfs_log_ctx * ctx)4506 static noinline int log_directory_changes(struct btrfs_trans_handle *trans,
4507 struct btrfs_inode *inode,
4508 struct btrfs_path *path,
4509 struct btrfs_path *dst_path,
4510 struct btrfs_log_ctx *ctx)
4511 {
4512 u64 min_key;
4513 u64 max_key;
4514 int ret;
4515
4516 ret = update_last_dir_index_offset(inode, path, ctx);
4517 if (ret)
4518 return ret;
4519
4520 min_key = BTRFS_DIR_START_INDEX;
4521 max_key = 0;
4522
4523 while (1) {
4524 ret = log_dir_items(trans, inode, path, dst_path,
4525 ctx, min_key, &max_key);
4526 if (ret)
4527 return ret;
4528 if (max_key == (u64)-1)
4529 break;
4530 min_key = max_key + 1;
4531 }
4532
4533 return 0;
4534 }
4535
4536 /*
4537 * a helper function to drop items from the log before we relog an
4538 * inode. max_key_type indicates the highest item type to remove.
4539 * This cannot be run for file data extents because it does not
4540 * free the extents they point to.
4541 */
drop_inode_items(struct btrfs_trans_handle * trans,struct btrfs_root * log,struct btrfs_path * path,struct btrfs_inode * inode,int max_key_type)4542 static int drop_inode_items(struct btrfs_trans_handle *trans,
4543 struct btrfs_root *log,
4544 struct btrfs_path *path,
4545 struct btrfs_inode *inode,
4546 int max_key_type)
4547 {
4548 int ret;
4549 struct btrfs_key key;
4550 struct btrfs_key found_key;
4551 int start_slot;
4552
4553 key.objectid = btrfs_ino(inode);
4554 key.type = max_key_type;
4555 key.offset = (u64)-1;
4556
4557 while (1) {
4558 ret = btrfs_search_slot(trans, log, &key, path, -1, 1);
4559 if (ret < 0) {
4560 break;
4561 } else if (ret > 0) {
4562 if (path->slots[0] == 0)
4563 break;
4564 path->slots[0]--;
4565 }
4566
4567 btrfs_item_key_to_cpu(path->nodes[0], &found_key,
4568 path->slots[0]);
4569
4570 if (found_key.objectid != key.objectid)
4571 break;
4572
4573 found_key.offset = 0;
4574 found_key.type = 0;
4575 ret = btrfs_bin_search(path->nodes[0], 0, &found_key, &start_slot);
4576 if (ret < 0)
4577 break;
4578
4579 ret = btrfs_del_items(trans, log, path, start_slot,
4580 path->slots[0] - start_slot + 1);
4581 /*
4582 * If start slot isn't 0 then we don't need to re-search, we've
4583 * found the last guy with the objectid in this tree.
4584 */
4585 if (ret || start_slot != 0)
4586 break;
4587 btrfs_release_path(path);
4588 }
4589 btrfs_release_path(path);
4590 if (ret > 0)
4591 ret = 0;
4592 return ret;
4593 }
4594
truncate_inode_items(struct btrfs_trans_handle * trans,struct btrfs_root * log_root,struct btrfs_inode * inode,u64 new_size,u32 min_type)4595 static int truncate_inode_items(struct btrfs_trans_handle *trans,
4596 struct btrfs_root *log_root,
4597 struct btrfs_inode *inode,
4598 u64 new_size, u32 min_type)
4599 {
4600 struct btrfs_truncate_control control = {
4601 .new_size = new_size,
4602 .ino = btrfs_ino(inode),
4603 .min_type = min_type,
4604 .skip_ref_updates = true,
4605 };
4606
4607 return btrfs_truncate_inode_items(trans, log_root, &control);
4608 }
4609
fill_inode_item(struct btrfs_trans_handle * trans,struct extent_buffer * leaf,struct btrfs_inode_item * item,struct btrfs_inode * inode,bool log_inode_only,u64 logged_isize)4610 static void fill_inode_item(struct btrfs_trans_handle *trans,
4611 struct extent_buffer *leaf,
4612 struct btrfs_inode_item *item,
4613 struct btrfs_inode *inode, bool log_inode_only,
4614 u64 logged_isize)
4615 {
4616 struct inode *vfs_inode = &inode->vfs_inode;
4617 u64 gen = inode->generation;
4618 u64 flags;
4619
4620 if (log_inode_only) {
4621 /*
4622 * Set the generation to zero so the recover code can tell the
4623 * difference between a logging just to say 'this inode exists'
4624 * and a logging to say 'update this inode with these values'.
4625 * But only if the inode was not already logged before.
4626 * We access ->logged_trans directly since it was already set
4627 * up in the call chain by btrfs_log_inode(), and data_race()
4628 * to avoid false alerts from KCSAN and since it was set already
4629 * and one can set it to 0 since that only happens on eviction
4630 * and we are holding a ref on the inode.
4631 */
4632 ASSERT(data_race(inode->logged_trans) > 0);
4633 if (data_race(inode->logged_trans) < trans->transid)
4634 gen = 0;
4635
4636 btrfs_set_inode_size(leaf, item, logged_isize);
4637 } else {
4638 btrfs_set_inode_size(leaf, item, vfs_inode->i_size);
4639 }
4640
4641 btrfs_set_inode_generation(leaf, item, gen);
4642
4643 btrfs_set_inode_uid(leaf, item, i_uid_read(vfs_inode));
4644 btrfs_set_inode_gid(leaf, item, i_gid_read(vfs_inode));
4645 btrfs_set_inode_mode(leaf, item, vfs_inode->i_mode);
4646 btrfs_set_inode_nlink(leaf, item, vfs_inode->i_nlink);
4647
4648 btrfs_set_timespec_sec(leaf, &item->atime, inode_get_atime_sec(vfs_inode));
4649 btrfs_set_timespec_nsec(leaf, &item->atime, inode_get_atime_nsec(vfs_inode));
4650
4651 btrfs_set_timespec_sec(leaf, &item->mtime, inode_get_mtime_sec(vfs_inode));
4652 btrfs_set_timespec_nsec(leaf, &item->mtime, inode_get_mtime_nsec(vfs_inode));
4653
4654 btrfs_set_timespec_sec(leaf, &item->ctime, inode_get_ctime_sec(vfs_inode));
4655 btrfs_set_timespec_nsec(leaf, &item->ctime, inode_get_ctime_nsec(vfs_inode));
4656
4657 btrfs_set_timespec_sec(leaf, &item->otime, inode->i_otime_sec);
4658 btrfs_set_timespec_nsec(leaf, &item->otime, inode->i_otime_nsec);
4659
4660 /*
4661 * We do not need to set the nbytes field, in fact during a fast fsync
4662 * its value may not even be correct, since a fast fsync does not wait
4663 * for ordered extent completion, which is where we update nbytes, it
4664 * only waits for writeback to complete. During log replay as we find
4665 * file extent items and replay them, we adjust the nbytes field of the
4666 * inode item in subvolume tree as needed (see overwrite_item()).
4667 */
4668
4669 btrfs_set_inode_sequence(leaf, item, inode_peek_iversion(vfs_inode));
4670 btrfs_set_inode_transid(leaf, item, trans->transid);
4671 btrfs_set_inode_rdev(leaf, item, vfs_inode->i_rdev);
4672 flags = btrfs_inode_combine_flags(inode->flags, inode->ro_flags);
4673 btrfs_set_inode_flags(leaf, item, flags);
4674 btrfs_set_inode_block_group(leaf, item, 0);
4675 }
4676
log_inode_item(struct btrfs_trans_handle * trans,struct btrfs_root * log,struct btrfs_path * path,struct btrfs_inode * inode,bool inode_item_dropped)4677 static int log_inode_item(struct btrfs_trans_handle *trans,
4678 struct btrfs_root *log, struct btrfs_path *path,
4679 struct btrfs_inode *inode, bool inode_item_dropped)
4680 {
4681 struct btrfs_inode_item *inode_item;
4682 struct btrfs_key key;
4683 int ret;
4684
4685 btrfs_get_inode_key(inode, &key);
4686 /*
4687 * If we are doing a fast fsync and the inode was logged before in the
4688 * current transaction, then we know the inode was previously logged and
4689 * it exists in the log tree. For performance reasons, in this case use
4690 * btrfs_search_slot() directly with ins_len set to 0 so that we never
4691 * attempt a write lock on the leaf's parent, which adds unnecessary lock
4692 * contention in case there are concurrent fsyncs for other inodes of the
4693 * same subvolume. Using btrfs_insert_empty_item() when the inode item
4694 * already exists can also result in unnecessarily splitting a leaf.
4695 */
4696 if (!inode_item_dropped && inode->logged_trans == trans->transid) {
4697 ret = btrfs_search_slot(trans, log, &key, path, 0, 1);
4698 ASSERT(ret <= 0);
4699 if (ret > 0)
4700 ret = -ENOENT;
4701 } else {
4702 /*
4703 * This means it is the first fsync in the current transaction,
4704 * so the inode item is not in the log and we need to insert it.
4705 * We can never get -EEXIST because we are only called for a fast
4706 * fsync and in case an inode eviction happens after the inode was
4707 * logged before in the current transaction, when we load again
4708 * the inode, we set BTRFS_INODE_NEEDS_FULL_SYNC on its runtime
4709 * flags and set ->logged_trans to 0.
4710 */
4711 ret = btrfs_insert_empty_item(trans, log, path, &key,
4712 sizeof(*inode_item));
4713 ASSERT(ret != -EEXIST);
4714 }
4715 if (ret)
4716 return ret;
4717 inode_item = btrfs_item_ptr(path->nodes[0], path->slots[0],
4718 struct btrfs_inode_item);
4719 fill_inode_item(trans, path->nodes[0], inode_item, inode, false, 0);
4720 btrfs_release_path(path);
4721 return 0;
4722 }
4723
log_csums(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_root * log_root,struct btrfs_ordered_sum * sums)4724 static int log_csums(struct btrfs_trans_handle *trans,
4725 struct btrfs_inode *inode,
4726 struct btrfs_root *log_root,
4727 struct btrfs_ordered_sum *sums)
4728 {
4729 const u64 lock_end = sums->logical + sums->len - 1;
4730 struct extent_state *cached_state = NULL;
4731 int ret;
4732
4733 /*
4734 * If this inode was not used for reflink operations in the current
4735 * transaction with new extents, then do the fast path, no need to
4736 * worry about logging checksum items with overlapping ranges.
4737 */
4738 if (inode->last_reflink_trans < trans->transid)
4739 return btrfs_insert_data_csums(trans, log_root, sums);
4740
4741 /*
4742 * Serialize logging for checksums. This is to avoid racing with the
4743 * same checksum being logged by another task that is logging another
4744 * file which happens to refer to the same extent as well. Such races
4745 * can leave checksum items in the log with overlapping ranges.
4746 */
4747 ret = btrfs_lock_extent(&log_root->log_csum_range, sums->logical, lock_end,
4748 &cached_state);
4749 if (ret)
4750 return ret;
4751 /*
4752 * Due to extent cloning, we might have logged a csum item that covers a
4753 * subrange of a cloned extent, and later we can end up logging a csum
4754 * item for a larger subrange of the same extent or the entire range.
4755 * This would leave csum items in the log tree that cover the same range
4756 * and break the searches for checksums in the log tree, resulting in
4757 * some checksums missing in the fs/subvolume tree. So just delete (or
4758 * trim and adjust) any existing csum items in the log for this range.
4759 */
4760 ret = btrfs_del_csums(trans, log_root, sums->logical, sums->len);
4761 if (!ret)
4762 ret = btrfs_insert_data_csums(trans, log_root, sums);
4763
4764 btrfs_unlock_extent(&log_root->log_csum_range, sums->logical, lock_end,
4765 &cached_state);
4766
4767 return ret;
4768 }
4769
copy_items(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_path * dst_path,struct btrfs_path * src_path,int start_slot,int nr,int inode_only,u64 logged_isize,struct btrfs_log_ctx * ctx)4770 static noinline int copy_items(struct btrfs_trans_handle *trans,
4771 struct btrfs_inode *inode,
4772 struct btrfs_path *dst_path,
4773 struct btrfs_path *src_path,
4774 int start_slot, int nr, int inode_only,
4775 u64 logged_isize, struct btrfs_log_ctx *ctx)
4776 {
4777 struct btrfs_root *log = inode->root->log_root;
4778 struct btrfs_file_extent_item *extent;
4779 struct extent_buffer *src;
4780 int ret;
4781 struct btrfs_key *ins_keys;
4782 u32 *ins_sizes;
4783 struct btrfs_item_batch batch;
4784 char AUTO_KFREE(ins_data);
4785 int dst_index;
4786 const bool skip_csum = (inode->flags & BTRFS_INODE_NODATASUM);
4787 const u64 i_size = i_size_read(&inode->vfs_inode);
4788
4789 /*
4790 * To keep lockdep happy and avoid deadlocks, clone the source leaf and
4791 * use the clone. This is because otherwise we would be changing the log
4792 * tree, to insert items from the subvolume tree or insert csum items,
4793 * while holding a read lock on a leaf from the subvolume tree, which
4794 * creates a nasty lock dependency when COWing log tree nodes/leaves:
4795 *
4796 * 1) Modifying the log tree triggers an extent buffer allocation while
4797 * holding a write lock on a parent extent buffer from the log tree.
4798 * Allocating the pages for an extent buffer, or the extent buffer
4799 * struct, can trigger inode eviction and finally the inode eviction
4800 * will trigger a release/remove of a delayed node, which requires
4801 * taking the delayed node's mutex;
4802 *
4803 * 2) Allocating a metadata extent for a log tree can trigger the async
4804 * reclaim thread and make us wait for it to release enough space and
4805 * unblock our reservation ticket. The reclaim thread can start
4806 * flushing delayed items, and that in turn results in the need to
4807 * lock delayed node mutexes and in the need to write lock extent
4808 * buffers of a subvolume tree - all this while holding a write lock
4809 * on the parent extent buffer in the log tree.
4810 *
4811 * So one task in scenario 1) running in parallel with another task in
4812 * scenario 2) could lead to a deadlock, one wanting to lock a delayed
4813 * node mutex while having a read lock on a leaf from the subvolume,
4814 * while the other is holding the delayed node's mutex and wants to
4815 * write lock the same subvolume leaf for flushing delayed items.
4816 */
4817 ret = clone_leaf(src_path, ctx);
4818 if (ret < 0)
4819 return ret;
4820
4821 src = src_path->nodes[0];
4822
4823 ins_data = kmalloc_array(nr, sizeof(struct btrfs_key) + sizeof(u32), GFP_NOFS);
4824 if (!ins_data)
4825 return -ENOMEM;
4826
4827 ins_sizes = (u32 *)ins_data;
4828 ins_keys = (struct btrfs_key *)(ins_data + nr * sizeof(u32));
4829 batch.keys = ins_keys;
4830 batch.data_sizes = ins_sizes;
4831 batch.total_data_size = 0;
4832 batch.nr = 0;
4833
4834 dst_index = 0;
4835 for (int i = 0; i < nr; i++) {
4836 const int src_slot = start_slot + i;
4837 struct btrfs_root *csum_root;
4838 struct btrfs_ordered_sum *sums;
4839 struct btrfs_ordered_sum *sums_next;
4840 LIST_HEAD(ordered_sums);
4841 u64 disk_bytenr;
4842 u64 disk_num_bytes;
4843 u64 extent_offset;
4844 u64 extent_num_bytes;
4845 bool is_old_extent;
4846
4847 btrfs_item_key_to_cpu(src, &ins_keys[dst_index], src_slot);
4848
4849 if (ins_keys[dst_index].type != BTRFS_EXTENT_DATA_KEY)
4850 goto add_to_batch;
4851
4852 extent = btrfs_item_ptr(src, src_slot,
4853 struct btrfs_file_extent_item);
4854
4855 is_old_extent = (btrfs_file_extent_generation(src, extent) <
4856 trans->transid);
4857
4858 /*
4859 * Don't copy extents from past generations. That would make us
4860 * log a lot more metadata for common cases like doing only a
4861 * few random writes into a file and then fsync it for the first
4862 * time or after the full sync flag is set on the inode. We can
4863 * get leaves full of extent items, most of which are from past
4864 * generations, so we can skip them - as long as the inode has
4865 * not been the target of a reflink operation in this transaction,
4866 * as in that case it might have had file extent items with old
4867 * generations copied into it. We also must always log prealloc
4868 * extents that start at or beyond eof, otherwise we would lose
4869 * them on log replay.
4870 */
4871 if (is_old_extent &&
4872 ins_keys[dst_index].offset < i_size &&
4873 inode->last_reflink_trans < trans->transid)
4874 continue;
4875
4876 if (skip_csum)
4877 goto add_to_batch;
4878
4879 /* Only regular extents have checksums. */
4880 if (btrfs_file_extent_type(src, extent) != BTRFS_FILE_EXTENT_REG)
4881 goto add_to_batch;
4882
4883 /*
4884 * If it's an extent created in a past transaction, then its
4885 * checksums are already accessible from the committed csum tree,
4886 * no need to log them.
4887 */
4888 if (is_old_extent)
4889 goto add_to_batch;
4890
4891 disk_bytenr = btrfs_file_extent_disk_bytenr(src, extent);
4892 /* If it's an explicit hole, there are no checksums. */
4893 if (disk_bytenr == 0)
4894 goto add_to_batch;
4895
4896 disk_num_bytes = btrfs_file_extent_disk_num_bytes(src, extent);
4897
4898 if (btrfs_file_extent_compression(src, extent)) {
4899 extent_offset = 0;
4900 extent_num_bytes = disk_num_bytes;
4901 } else {
4902 extent_offset = btrfs_file_extent_offset(src, extent);
4903 extent_num_bytes = btrfs_file_extent_num_bytes(src, extent);
4904 }
4905
4906 csum_root = btrfs_csum_root(trans->fs_info, disk_bytenr);
4907 if (unlikely(!csum_root)) {
4908 btrfs_err(trans->fs_info,
4909 "missing csum root for extent at bytenr %llu",
4910 disk_bytenr);
4911 return -EUCLEAN;
4912 }
4913
4914 disk_bytenr += extent_offset;
4915 ret = btrfs_lookup_csums_list(csum_root, disk_bytenr,
4916 disk_bytenr + extent_num_bytes - 1,
4917 &ordered_sums, false);
4918 if (ret < 0)
4919 return ret;
4920 ret = 0;
4921
4922 list_for_each_entry_safe(sums, sums_next, &ordered_sums, list) {
4923 if (!ret)
4924 ret = log_csums(trans, inode, log, sums);
4925 list_del(&sums->list);
4926 kfree(sums);
4927 }
4928 if (ret)
4929 return ret;
4930
4931 add_to_batch:
4932 ins_sizes[dst_index] = btrfs_item_size(src, src_slot);
4933 batch.total_data_size += ins_sizes[dst_index];
4934 batch.nr++;
4935 dst_index++;
4936 }
4937
4938 /*
4939 * We have a leaf full of old extent items that don't need to be logged,
4940 * so we don't need to do anything.
4941 */
4942 if (batch.nr == 0)
4943 return 0;
4944
4945 ret = btrfs_insert_empty_items(trans, log, dst_path, &batch);
4946 if (ret)
4947 return ret;
4948
4949 dst_index = 0;
4950 for (int i = 0; i < nr; i++) {
4951 const int src_slot = start_slot + i;
4952 const int dst_slot = dst_path->slots[0] + dst_index;
4953 struct btrfs_key key;
4954 unsigned long src_offset;
4955 unsigned long dst_offset;
4956
4957 /*
4958 * We're done, all the remaining items in the source leaf
4959 * correspond to old file extent items.
4960 */
4961 if (dst_index >= batch.nr)
4962 break;
4963
4964 btrfs_item_key_to_cpu(src, &key, src_slot);
4965
4966 if (key.type != BTRFS_EXTENT_DATA_KEY)
4967 goto copy_item;
4968
4969 extent = btrfs_item_ptr(src, src_slot,
4970 struct btrfs_file_extent_item);
4971
4972 /* See the comment in the previous loop, same logic. */
4973 if (btrfs_file_extent_generation(src, extent) < trans->transid &&
4974 key.offset < i_size &&
4975 inode->last_reflink_trans < trans->transid)
4976 continue;
4977
4978 copy_item:
4979 dst_offset = btrfs_item_ptr_offset(dst_path->nodes[0], dst_slot);
4980 src_offset = btrfs_item_ptr_offset(src, src_slot);
4981
4982 if (key.type == BTRFS_INODE_ITEM_KEY) {
4983 struct btrfs_inode_item *inode_item;
4984
4985 inode_item = btrfs_item_ptr(dst_path->nodes[0], dst_slot,
4986 struct btrfs_inode_item);
4987 fill_inode_item(trans, dst_path->nodes[0], inode_item,
4988 inode, inode_only == LOG_INODE_EXISTS,
4989 logged_isize);
4990 } else {
4991 copy_extent_buffer(dst_path->nodes[0], src, dst_offset,
4992 src_offset, ins_sizes[dst_index]);
4993 }
4994
4995 dst_index++;
4996 }
4997
4998 btrfs_release_path(dst_path);
4999
5000 return ret;
5001 }
5002
extent_cmp(void * priv,const struct list_head * a,const struct list_head * b)5003 static int extent_cmp(void *priv, const struct list_head *a,
5004 const struct list_head *b)
5005 {
5006 const struct extent_map *em1, *em2;
5007
5008 em1 = list_entry(a, struct extent_map, list);
5009 em2 = list_entry(b, struct extent_map, list);
5010
5011 if (em1->start < em2->start)
5012 return -1;
5013 else if (em1->start > em2->start)
5014 return 1;
5015 return 0;
5016 }
5017
log_extent_csums(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_root * log_root,const struct extent_map * em,struct btrfs_log_ctx * ctx)5018 static int log_extent_csums(struct btrfs_trans_handle *trans,
5019 struct btrfs_inode *inode,
5020 struct btrfs_root *log_root,
5021 const struct extent_map *em,
5022 struct btrfs_log_ctx *ctx)
5023 {
5024 struct btrfs_ordered_extent *ordered;
5025 struct btrfs_root *csum_root;
5026 u64 block_start;
5027 u64 csum_offset;
5028 u64 csum_len;
5029 u64 mod_start = em->start;
5030 u64 mod_len = em->len;
5031 LIST_HEAD(ordered_sums);
5032 int ret = 0;
5033
5034 if (inode->flags & BTRFS_INODE_NODATASUM ||
5035 (em->flags & EXTENT_FLAG_PREALLOC) ||
5036 em->disk_bytenr == EXTENT_MAP_HOLE)
5037 return 0;
5038
5039 list_for_each_entry(ordered, &ctx->ordered_extents, log_list) {
5040 const u64 ordered_end = ordered->file_offset + ordered->num_bytes;
5041 const u64 mod_end = mod_start + mod_len;
5042 struct btrfs_ordered_sum *sums;
5043
5044 if (mod_len == 0)
5045 break;
5046
5047 if (ordered_end <= mod_start)
5048 continue;
5049 if (mod_end <= ordered->file_offset)
5050 break;
5051
5052 /*
5053 * We are going to copy all the csums on this ordered extent, so
5054 * go ahead and adjust mod_start and mod_len in case this ordered
5055 * extent has already been logged.
5056 */
5057 if (ordered->file_offset > mod_start) {
5058 if (ordered_end >= mod_end)
5059 mod_len = ordered->file_offset - mod_start;
5060 /*
5061 * If we have this case
5062 *
5063 * |--------- logged extent ---------|
5064 * |----- ordered extent ----|
5065 *
5066 * Just don't mess with mod_start and mod_len, we'll
5067 * just end up logging more csums than we need and it
5068 * will be ok.
5069 */
5070 } else {
5071 if (ordered_end < mod_end) {
5072 mod_len = mod_end - ordered_end;
5073 mod_start = ordered_end;
5074 } else {
5075 mod_len = 0;
5076 }
5077 }
5078
5079 /*
5080 * To keep us from looping for the above case of an ordered
5081 * extent that falls inside of the logged extent.
5082 */
5083 if (test_and_set_bit(BTRFS_ORDERED_LOGGED_CSUM, &ordered->flags))
5084 continue;
5085
5086 list_for_each_entry(sums, &ordered->csum_list, list) {
5087 ret = log_csums(trans, inode, log_root, sums);
5088 if (ret)
5089 return ret;
5090 }
5091 }
5092
5093 /* We're done, found all csums in the ordered extents. */
5094 if (mod_len == 0)
5095 return 0;
5096
5097 /* If we're compressed we have to save the entire range of csums. */
5098 if (btrfs_extent_map_is_compressed(em)) {
5099 csum_offset = 0;
5100 csum_len = em->disk_num_bytes;
5101 } else {
5102 csum_offset = mod_start - em->start;
5103 csum_len = mod_len;
5104 }
5105
5106 /* block start is already adjusted for the file extent offset. */
5107 block_start = btrfs_extent_map_block_start(em);
5108 csum_root = btrfs_csum_root(trans->fs_info, block_start);
5109 if (unlikely(!csum_root)) {
5110 btrfs_err(trans->fs_info,
5111 "missing csum root for extent at bytenr %llu",
5112 block_start);
5113 return -EUCLEAN;
5114 }
5115
5116 ret = btrfs_lookup_csums_list(csum_root, block_start + csum_offset,
5117 block_start + csum_offset + csum_len - 1,
5118 &ordered_sums, false);
5119 if (ret < 0)
5120 return ret;
5121 ret = 0;
5122
5123 while (!list_empty(&ordered_sums)) {
5124 struct btrfs_ordered_sum *sums = list_first_entry(&ordered_sums,
5125 struct btrfs_ordered_sum,
5126 list);
5127 if (!ret)
5128 ret = log_csums(trans, inode, log_root, sums);
5129 list_del(&sums->list);
5130 kfree(sums);
5131 }
5132
5133 return ret;
5134 }
5135
log_one_extent(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,const struct extent_map * em,struct btrfs_path * path,struct btrfs_log_ctx * ctx)5136 static int log_one_extent(struct btrfs_trans_handle *trans,
5137 struct btrfs_inode *inode,
5138 const struct extent_map *em,
5139 struct btrfs_path *path,
5140 struct btrfs_log_ctx *ctx)
5141 {
5142 struct btrfs_drop_extents_args drop_args = { 0 };
5143 struct btrfs_root *log = inode->root->log_root;
5144 struct btrfs_file_extent_item fi = { 0 };
5145 struct extent_buffer *leaf;
5146 struct btrfs_key key;
5147 enum btrfs_compression_type compress_type;
5148 u64 extent_offset = em->offset;
5149 u64 block_start = btrfs_extent_map_block_start(em);
5150 u64 block_len;
5151 int ret;
5152
5153 btrfs_set_stack_file_extent_generation(&fi, trans->transid);
5154 if (em->flags & EXTENT_FLAG_PREALLOC)
5155 btrfs_set_stack_file_extent_type(&fi, BTRFS_FILE_EXTENT_PREALLOC);
5156 else
5157 btrfs_set_stack_file_extent_type(&fi, BTRFS_FILE_EXTENT_REG);
5158
5159 block_len = em->disk_num_bytes;
5160 compress_type = btrfs_extent_map_compression(em);
5161 if (compress_type != BTRFS_COMPRESS_NONE) {
5162 btrfs_set_stack_file_extent_disk_bytenr(&fi, block_start);
5163 btrfs_set_stack_file_extent_disk_num_bytes(&fi, block_len);
5164 } else if (em->disk_bytenr < EXTENT_MAP_LAST_BYTE) {
5165 btrfs_set_stack_file_extent_disk_bytenr(&fi, block_start - extent_offset);
5166 btrfs_set_stack_file_extent_disk_num_bytes(&fi, block_len);
5167 }
5168
5169 btrfs_set_stack_file_extent_offset(&fi, extent_offset);
5170 btrfs_set_stack_file_extent_num_bytes(&fi, em->len);
5171 btrfs_set_stack_file_extent_ram_bytes(&fi, em->ram_bytes);
5172 btrfs_set_stack_file_extent_compression(&fi, compress_type);
5173
5174 ret = log_extent_csums(trans, inode, log, em, ctx);
5175 if (ret)
5176 return ret;
5177
5178 /*
5179 * If this is the first time we are logging the inode in the current
5180 * transaction, we can avoid btrfs_drop_extents(), which is expensive
5181 * because it does a deletion search, which always acquires write locks
5182 * for extent buffers at levels 2, 1 and 0. This not only wastes time
5183 * but also adds significant contention in a log tree, since log trees
5184 * are small, with a root at level 2 or 3 at most, due to their short
5185 * life span.
5186 */
5187 if (ctx->logged_before) {
5188 drop_args.path = path;
5189 drop_args.start = em->start;
5190 drop_args.end = btrfs_extent_map_end(em);
5191 drop_args.replace_extent = true;
5192 drop_args.extent_item_size = sizeof(fi);
5193 ret = btrfs_drop_extents(trans, log, inode, &drop_args);
5194 if (ret)
5195 return ret;
5196 }
5197
5198 if (!drop_args.extent_inserted) {
5199 key.objectid = btrfs_ino(inode);
5200 key.type = BTRFS_EXTENT_DATA_KEY;
5201 key.offset = em->start;
5202
5203 ret = btrfs_insert_empty_item(trans, log, path, &key,
5204 sizeof(fi));
5205 if (ret)
5206 return ret;
5207 }
5208 leaf = path->nodes[0];
5209 write_extent_buffer(leaf, &fi,
5210 btrfs_item_ptr_offset(leaf, path->slots[0]),
5211 sizeof(fi));
5212
5213 btrfs_release_path(path);
5214
5215 return ret;
5216 }
5217
5218 /*
5219 * Log all prealloc extents beyond the inode's i_size to make sure we do not
5220 * lose them after doing a full/fast fsync and replaying the log. We scan the
5221 * subvolume's root instead of iterating the inode's extent map tree because
5222 * otherwise we can log incorrect extent items based on extent map conversion.
5223 * That can happen due to the fact that extent maps are merged when they
5224 * are not in the extent map tree's list of modified extents.
5225 */
btrfs_log_prealloc_extents(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_path * path,struct btrfs_log_ctx * ctx)5226 static int btrfs_log_prealloc_extents(struct btrfs_trans_handle *trans,
5227 struct btrfs_inode *inode,
5228 struct btrfs_path *path,
5229 struct btrfs_log_ctx *ctx)
5230 {
5231 struct btrfs_root *root = inode->root;
5232 struct btrfs_key key;
5233 const u64 i_size = i_size_read(&inode->vfs_inode);
5234 const u64 ino = btrfs_ino(inode);
5235 BTRFS_PATH_AUTO_FREE(dst_path);
5236 bool dropped_extents = false;
5237 u64 truncate_offset = i_size;
5238 struct extent_buffer *leaf;
5239 int slot;
5240 int ins_nr = 0;
5241 int start_slot = 0;
5242 int ret;
5243
5244 if (!(inode->flags & BTRFS_INODE_PREALLOC))
5245 return 0;
5246
5247 key.objectid = ino;
5248 key.type = BTRFS_EXTENT_DATA_KEY;
5249 key.offset = i_size;
5250 ret = btrfs_search_slot(NULL, root, &key, path, 0, 0);
5251 if (ret < 0)
5252 goto out;
5253
5254 /*
5255 * We must check if there is a prealloc extent that starts before the
5256 * i_size and crosses the i_size boundary. This is to ensure later we
5257 * truncate down to the end of that extent and not to the i_size, as
5258 * otherwise we end up losing part of the prealloc extent after a log
5259 * replay and with an implicit hole if there is another prealloc extent
5260 * that starts at an offset beyond i_size.
5261 */
5262 ret = btrfs_previous_item(root, path, ino, BTRFS_EXTENT_DATA_KEY);
5263 if (ret < 0)
5264 goto out;
5265
5266 if (ret == 0) {
5267 struct btrfs_file_extent_item *ei;
5268
5269 leaf = path->nodes[0];
5270 slot = path->slots[0];
5271 ei = btrfs_item_ptr(leaf, slot, struct btrfs_file_extent_item);
5272
5273 if (btrfs_file_extent_type(leaf, ei) ==
5274 BTRFS_FILE_EXTENT_PREALLOC) {
5275 u64 extent_end;
5276
5277 btrfs_item_key_to_cpu(leaf, &key, slot);
5278 extent_end = key.offset +
5279 btrfs_file_extent_num_bytes(leaf, ei);
5280
5281 if (extent_end > i_size)
5282 truncate_offset = extent_end;
5283 }
5284 } else {
5285 ret = 0;
5286 }
5287
5288 while (true) {
5289 leaf = path->nodes[0];
5290 slot = path->slots[0];
5291
5292 if (slot >= btrfs_header_nritems(leaf)) {
5293 if (ins_nr > 0) {
5294 ret = copy_items(trans, inode, dst_path, path,
5295 start_slot, ins_nr, 1, 0, ctx);
5296 if (ret < 0)
5297 goto out;
5298 ins_nr = 0;
5299 }
5300 ret = btrfs_next_leaf(root, path);
5301 if (ret < 0)
5302 goto out;
5303 if (ret > 0) {
5304 ret = 0;
5305 break;
5306 }
5307 continue;
5308 }
5309
5310 btrfs_item_key_to_cpu(leaf, &key, slot);
5311 if (key.objectid > ino)
5312 break;
5313 if (WARN_ON_ONCE(key.objectid < ino) ||
5314 key.type < BTRFS_EXTENT_DATA_KEY ||
5315 key.offset < i_size) {
5316 path->slots[0]++;
5317 continue;
5318 }
5319 /*
5320 * Avoid overlapping items in the log tree. The first time we
5321 * get here, get rid of everything from a past fsync. After
5322 * that, if the current extent starts before the end of the last
5323 * extent we copied, truncate the last one. This can happen if
5324 * an ordered extent completion modifies the subvolume tree
5325 * while btrfs_next_leaf() has the tree unlocked.
5326 */
5327 if (!dropped_extents || key.offset < truncate_offset) {
5328 ret = truncate_inode_items(trans, root->log_root, inode,
5329 min(key.offset, truncate_offset),
5330 BTRFS_EXTENT_DATA_KEY);
5331 if (ret)
5332 goto out;
5333 dropped_extents = true;
5334 }
5335 truncate_offset = btrfs_file_extent_end(path);
5336 if (ins_nr == 0)
5337 start_slot = slot;
5338 ins_nr++;
5339 path->slots[0]++;
5340 if (!dst_path) {
5341 dst_path = btrfs_alloc_path();
5342 if (!dst_path) {
5343 ret = -ENOMEM;
5344 goto out;
5345 }
5346 }
5347 }
5348 if (ins_nr > 0)
5349 ret = copy_items(trans, inode, dst_path, path,
5350 start_slot, ins_nr, 1, 0, ctx);
5351 out:
5352 btrfs_release_path(path);
5353 return ret;
5354 }
5355
btrfs_log_changed_extents(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_path * path,struct btrfs_log_ctx * ctx)5356 static int btrfs_log_changed_extents(struct btrfs_trans_handle *trans,
5357 struct btrfs_inode *inode,
5358 struct btrfs_path *path,
5359 struct btrfs_log_ctx *ctx)
5360 {
5361 struct btrfs_ordered_extent *ordered;
5362 struct btrfs_ordered_extent *tmp;
5363 struct extent_map *em, *n;
5364 LIST_HEAD(extents);
5365 struct extent_map_tree *tree = &inode->extent_tree;
5366 int ret = 0;
5367 int num = 0;
5368
5369 write_lock(&tree->lock);
5370
5371 list_for_each_entry_safe(em, n, &tree->modified_extents, list) {
5372 list_del_init(&em->list);
5373 /*
5374 * Just an arbitrary number, this can be really CPU intensive
5375 * once we start getting a lot of extents, and really once we
5376 * have a bunch of extents we just want to commit since it will
5377 * be faster.
5378 */
5379 if (++num > 32768) {
5380 list_del_init(&tree->modified_extents);
5381 ret = -EFBIG;
5382 goto process;
5383 }
5384
5385 if (em->generation < trans->transid)
5386 continue;
5387
5388 /* We log prealloc extents beyond eof later. */
5389 if ((em->flags & EXTENT_FLAG_PREALLOC) &&
5390 em->start >= i_size_read(&inode->vfs_inode))
5391 continue;
5392
5393 /* Need a ref to keep it from getting evicted from cache */
5394 refcount_inc(&em->refs);
5395 em->flags |= EXTENT_FLAG_LOGGING;
5396 list_add_tail(&em->list, &extents);
5397 num++;
5398 }
5399
5400 list_sort(NULL, &extents, extent_cmp);
5401 process:
5402 while (!list_empty(&extents)) {
5403 em = list_first_entry(&extents, struct extent_map, list);
5404
5405 list_del_init(&em->list);
5406
5407 /*
5408 * If we had an error we just need to delete everybody from our
5409 * private list.
5410 */
5411 if (ret) {
5412 btrfs_clear_em_logging(inode, em);
5413 btrfs_free_extent_map(em);
5414 continue;
5415 }
5416
5417 write_unlock(&tree->lock);
5418
5419 ret = log_one_extent(trans, inode, em, path, ctx);
5420 write_lock(&tree->lock);
5421 btrfs_clear_em_logging(inode, em);
5422 btrfs_free_extent_map(em);
5423 }
5424 WARN_ON(!list_empty(&extents));
5425 write_unlock(&tree->lock);
5426
5427 if (!ret)
5428 ret = btrfs_log_prealloc_extents(trans, inode, path, ctx);
5429 if (ret)
5430 return ret;
5431
5432 /*
5433 * We have logged all extents successfully, now make sure the commit of
5434 * the current transaction waits for the ordered extents to complete
5435 * before it commits and wipes out the log trees, otherwise we would
5436 * lose data if an ordered extents completes after the transaction
5437 * commits and a power failure happens after the transaction commit.
5438 */
5439 list_for_each_entry_safe(ordered, tmp, &ctx->ordered_extents, log_list) {
5440 list_del_init(&ordered->log_list);
5441 set_bit(BTRFS_ORDERED_LOGGED, &ordered->flags);
5442
5443 if (!test_bit(BTRFS_ORDERED_COMPLETE, &ordered->flags)) {
5444 spin_lock(&inode->ordered_tree_lock);
5445 if (!test_bit(BTRFS_ORDERED_COMPLETE, &ordered->flags)) {
5446 set_bit(BTRFS_ORDERED_PENDING, &ordered->flags);
5447 atomic_inc(&trans->transaction->pending_ordered);
5448 }
5449 spin_unlock(&inode->ordered_tree_lock);
5450 }
5451 btrfs_put_ordered_extent(ordered);
5452 }
5453
5454 return 0;
5455 }
5456
get_inode_size_to_log(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_path * path,u64 * size_ret)5457 static int get_inode_size_to_log(struct btrfs_trans_handle *trans,
5458 struct btrfs_inode *inode,
5459 struct btrfs_path *path, u64 *size_ret)
5460 {
5461 struct btrfs_key key;
5462 struct btrfs_inode_item *item;
5463 int ret;
5464
5465 key.objectid = btrfs_ino(inode);
5466 key.type = BTRFS_INODE_ITEM_KEY;
5467 key.offset = 0;
5468
5469 /*
5470 * Our caller called inode_logged(), so logged_trans is up to date.
5471 * Use data_race() to silence any warning from KCSAN. Once logged_trans
5472 * is set, it can only be reset to 0 after inode eviction.
5473 */
5474 if (data_race(inode->logged_trans) == trans->transid) {
5475 ret = btrfs_search_slot(NULL, inode->root->log_root, &key, path, 0, 0);
5476 } else if (inode->generation < trans->transid) {
5477 path->search_commit_root = true;
5478 path->skip_locking = true;
5479 ret = btrfs_search_slot(NULL, inode->root, &key, path, 0, 0);
5480 path->search_commit_root = false;
5481 path->skip_locking = false;
5482
5483 } else {
5484 *size_ret = 0;
5485 return 0;
5486 }
5487
5488 /*
5489 * If the inode was logged before or is from a past transaction, then
5490 * its inode item must exist in the log root or in the commit root.
5491 */
5492 ASSERT(ret <= 0);
5493 if (WARN_ON_ONCE(ret > 0))
5494 ret = -ENOENT;
5495
5496 if (ret < 0)
5497 return ret;
5498
5499 item = btrfs_item_ptr(path->nodes[0], path->slots[0],
5500 struct btrfs_inode_item);
5501 *size_ret = btrfs_inode_size(path->nodes[0], item);
5502 /*
5503 * If the in-memory inode's i_size is smaller then the inode size stored
5504 * in the btree, return the inode's i_size, so that we get a correct
5505 * inode size after replaying the log when before a power failure we had
5506 * a shrinking truncate followed by addition of a new name (rename / new
5507 * hard link). Otherwise return the inode size from the btree, to avoid
5508 * data loss when replaying a log due to previously doing a write that
5509 * expands the inode's size and logging a new name immediately after.
5510 */
5511 if (*size_ret > inode->vfs_inode.i_size)
5512 *size_ret = inode->vfs_inode.i_size;
5513
5514 btrfs_release_path(path);
5515 return 0;
5516 }
5517
5518 /*
5519 * At the moment we always log all xattrs. This is to figure out at log replay
5520 * time which xattrs must have their deletion replayed. If a xattr is missing
5521 * in the log tree and exists in the fs/subvol tree, we delete it. This is
5522 * because if a xattr is deleted, the inode is fsynced and a power failure
5523 * happens, causing the log to be replayed the next time the fs is mounted,
5524 * we want the xattr to not exist anymore (same behaviour as other filesystems
5525 * with a journal, ext3/4, xfs, f2fs, etc).
5526 */
btrfs_log_all_xattrs(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_path * path,struct btrfs_path * dst_path,struct btrfs_log_ctx * ctx)5527 static int btrfs_log_all_xattrs(struct btrfs_trans_handle *trans,
5528 struct btrfs_inode *inode,
5529 struct btrfs_path *path,
5530 struct btrfs_path *dst_path,
5531 struct btrfs_log_ctx *ctx)
5532 {
5533 struct btrfs_root *root = inode->root;
5534 int ret;
5535 struct btrfs_key key;
5536 const u64 ino = btrfs_ino(inode);
5537 int ins_nr = 0;
5538 int start_slot = 0;
5539 bool found_xattrs = false;
5540
5541 if (test_bit(BTRFS_INODE_NO_XATTRS, &inode->runtime_flags))
5542 return 0;
5543
5544 key.objectid = ino;
5545 key.type = BTRFS_XATTR_ITEM_KEY;
5546 key.offset = 0;
5547
5548 ret = btrfs_search_slot(NULL, root, &key, path, 0, 0);
5549 if (ret < 0)
5550 return ret;
5551
5552 while (true) {
5553 int slot = path->slots[0];
5554 struct extent_buffer *leaf = path->nodes[0];
5555 int nritems = btrfs_header_nritems(leaf);
5556
5557 if (slot >= nritems) {
5558 if (ins_nr > 0) {
5559 ret = copy_items(trans, inode, dst_path, path,
5560 start_slot, ins_nr, 1, 0, ctx);
5561 if (ret < 0)
5562 return ret;
5563 ins_nr = 0;
5564 }
5565 ret = btrfs_next_leaf(root, path);
5566 if (ret < 0)
5567 return ret;
5568 else if (ret > 0)
5569 break;
5570 continue;
5571 }
5572
5573 btrfs_item_key_to_cpu(leaf, &key, slot);
5574 if (key.objectid != ino || key.type != BTRFS_XATTR_ITEM_KEY)
5575 break;
5576
5577 if (ins_nr == 0)
5578 start_slot = slot;
5579 ins_nr++;
5580 path->slots[0]++;
5581 found_xattrs = true;
5582 cond_resched();
5583 }
5584 if (ins_nr > 0) {
5585 ret = copy_items(trans, inode, dst_path, path,
5586 start_slot, ins_nr, 1, 0, ctx);
5587 if (ret < 0)
5588 return ret;
5589 }
5590
5591 if (!found_xattrs)
5592 set_bit(BTRFS_INODE_NO_XATTRS, &inode->runtime_flags);
5593
5594 return 0;
5595 }
5596
5597 /*
5598 * When using the NO_HOLES feature if we punched a hole that causes the
5599 * deletion of entire leafs or all the extent items of the first leaf (the one
5600 * that contains the inode item and references) we may end up not processing
5601 * any extents, because there are no leafs with a generation matching the
5602 * current transaction that have extent items for our inode. So we need to find
5603 * if any holes exist and then log them. We also need to log holes after any
5604 * truncate operation that changes the inode's size.
5605 */
btrfs_log_holes(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_path * path)5606 static int btrfs_log_holes(struct btrfs_trans_handle *trans,
5607 struct btrfs_inode *inode,
5608 struct btrfs_path *path)
5609 {
5610 struct btrfs_root *root = inode->root;
5611 struct btrfs_fs_info *fs_info = root->fs_info;
5612 struct btrfs_key key;
5613 const u64 ino = btrfs_ino(inode);
5614 const u64 i_size = i_size_read(&inode->vfs_inode);
5615 u64 prev_extent_end = 0;
5616 int ret;
5617
5618 if (!btrfs_fs_incompat(fs_info, NO_HOLES) || i_size == 0)
5619 return 0;
5620
5621 key.objectid = ino;
5622 key.type = BTRFS_EXTENT_DATA_KEY;
5623 key.offset = 0;
5624
5625 ret = btrfs_search_slot(NULL, root, &key, path, 0, 0);
5626 if (ret < 0)
5627 return ret;
5628
5629 while (true) {
5630 struct extent_buffer *leaf = path->nodes[0];
5631
5632 if (path->slots[0] >= btrfs_header_nritems(path->nodes[0])) {
5633 ret = btrfs_next_leaf(root, path);
5634 if (ret < 0)
5635 return ret;
5636 if (ret > 0) {
5637 ret = 0;
5638 break;
5639 }
5640 leaf = path->nodes[0];
5641 }
5642
5643 btrfs_item_key_to_cpu(leaf, &key, path->slots[0]);
5644 if (key.objectid != ino || key.type != BTRFS_EXTENT_DATA_KEY)
5645 break;
5646
5647 /* We have a hole, log it. */
5648 if (prev_extent_end < key.offset) {
5649 const u64 hole_len = key.offset - prev_extent_end;
5650
5651 /*
5652 * Release the path to avoid deadlocks with other code
5653 * paths that search the root while holding locks on
5654 * leafs from the log root.
5655 */
5656 btrfs_release_path(path);
5657 ret = btrfs_insert_hole_extent(trans, root->log_root,
5658 ino, prev_extent_end,
5659 hole_len);
5660 if (ret < 0)
5661 return ret;
5662
5663 /*
5664 * Search for the same key again in the root. Since it's
5665 * an extent item and we are holding the inode lock, the
5666 * key must still exist. If it doesn't just emit warning
5667 * and return an error to fall back to a transaction
5668 * commit.
5669 */
5670 ret = btrfs_search_slot(NULL, root, &key, path, 0, 0);
5671 if (ret < 0)
5672 return ret;
5673 if (WARN_ON(ret > 0))
5674 return -ENOENT;
5675 leaf = path->nodes[0];
5676 }
5677
5678 prev_extent_end = btrfs_file_extent_end(path);
5679 path->slots[0]++;
5680 cond_resched();
5681 }
5682
5683 if (prev_extent_end < i_size) {
5684 u64 hole_len;
5685
5686 btrfs_release_path(path);
5687 hole_len = ALIGN(i_size - prev_extent_end, fs_info->sectorsize);
5688 ret = btrfs_insert_hole_extent(trans, root->log_root, ino,
5689 prev_extent_end, hole_len);
5690 if (ret < 0)
5691 return ret;
5692 }
5693
5694 return 0;
5695 }
5696
5697 /*
5698 * When we are logging a new inode X, check if it doesn't have a reference that
5699 * matches the reference from some other inode Y created in a past transaction
5700 * and that was renamed in the current transaction. If we don't do this, then at
5701 * log replay time we can lose inode Y (and all its files if it's a directory):
5702 *
5703 * mkdir /mnt/x
5704 * echo "hello world" > /mnt/x/foobar
5705 * sync
5706 * mv /mnt/x /mnt/y
5707 * mkdir /mnt/x # or touch /mnt/x
5708 * xfs_io -c fsync /mnt/x
5709 * <power fail>
5710 * mount fs, trigger log replay
5711 *
5712 * After the log replay procedure, we would lose the first directory and all its
5713 * files (file foobar).
5714 * For the case where inode Y is not a directory we simply end up losing it:
5715 *
5716 * echo "123" > /mnt/foo
5717 * sync
5718 * mv /mnt/foo /mnt/bar
5719 * echo "abc" > /mnt/foo
5720 * xfs_io -c fsync /mnt/foo
5721 * <power fail>
5722 *
5723 * We also need this for cases where a snapshot entry is replaced by some other
5724 * entry (file or directory) otherwise we end up with an unreplayable log due to
5725 * attempts to delete the snapshot entry (entry of type BTRFS_ROOT_ITEM_KEY) as
5726 * if it were a regular entry:
5727 *
5728 * mkdir /mnt/x
5729 * btrfs subvolume snapshot /mnt /mnt/x/snap
5730 * btrfs subvolume delete /mnt/x/snap
5731 * rmdir /mnt/x
5732 * mkdir /mnt/x
5733 * fsync /mnt/x or fsync some new file inside it
5734 * <power fail>
5735 *
5736 * The snapshot delete, rmdir of x, mkdir of a new x and the fsync all happen in
5737 * the same transaction.
5738 */
btrfs_check_ref_name_override(struct extent_buffer * eb,const int slot,const struct btrfs_key * key,struct btrfs_inode * inode,u64 * other_ino,u64 * other_parent)5739 static int btrfs_check_ref_name_override(struct extent_buffer *eb,
5740 const int slot,
5741 const struct btrfs_key *key,
5742 struct btrfs_inode *inode,
5743 u64 *other_ino, u64 *other_parent)
5744 {
5745 BTRFS_PATH_AUTO_FREE(search_path);
5746 char AUTO_KFREE(name);
5747 u32 name_len = 0;
5748 u32 item_size = btrfs_item_size(eb, slot);
5749 u32 cur_offset = 0;
5750 unsigned long ptr = btrfs_item_ptr_offset(eb, slot);
5751
5752 search_path = btrfs_alloc_path();
5753 if (!search_path)
5754 return -ENOMEM;
5755 search_path->search_commit_root = true;
5756 search_path->skip_locking = true;
5757
5758 while (cur_offset < item_size) {
5759 u64 parent;
5760 u32 this_name_len;
5761 u32 this_len;
5762 unsigned long name_ptr;
5763 struct btrfs_dir_item *di;
5764 struct fscrypt_str name_str;
5765
5766 if (key->type == BTRFS_INODE_REF_KEY) {
5767 struct btrfs_inode_ref *iref;
5768
5769 iref = (struct btrfs_inode_ref *)(ptr + cur_offset);
5770 parent = key->offset;
5771 this_name_len = btrfs_inode_ref_name_len(eb, iref);
5772 name_ptr = (unsigned long)(iref + 1);
5773 this_len = sizeof(*iref) + this_name_len;
5774 } else {
5775 struct btrfs_inode_extref *extref;
5776
5777 extref = (struct btrfs_inode_extref *)(ptr +
5778 cur_offset);
5779 parent = btrfs_inode_extref_parent(eb, extref);
5780 this_name_len = btrfs_inode_extref_name_len(eb, extref);
5781 name_ptr = (unsigned long)&extref->name;
5782 this_len = sizeof(*extref) + this_name_len;
5783 }
5784
5785 if (this_name_len > name_len) {
5786 char *new_name;
5787
5788 new_name = krealloc(name, this_name_len, GFP_NOFS);
5789 if (!new_name)
5790 return -ENOMEM;
5791 name_len = this_name_len;
5792 name = new_name;
5793 }
5794
5795 read_extent_buffer(eb, name, name_ptr, this_name_len);
5796
5797 name_str.name = name;
5798 name_str.len = this_name_len;
5799 di = btrfs_lookup_dir_item(NULL, inode->root, search_path,
5800 parent, &name_str, 0);
5801 if (!IS_ERR_OR_NULL(di)) {
5802 struct btrfs_key di_key;
5803
5804 btrfs_dir_item_key_to_cpu(search_path->nodes[0],
5805 di, &di_key);
5806 if (di_key.type == BTRFS_INODE_ITEM_KEY) {
5807 if (di_key.objectid != key->objectid) {
5808 *other_ino = di_key.objectid;
5809 *other_parent = parent;
5810 return 1;
5811 } else {
5812 return 0;
5813 }
5814 } else {
5815 return -EAGAIN;
5816 }
5817 } else if (IS_ERR(di)) {
5818 return PTR_ERR(di);
5819 }
5820 btrfs_release_path(search_path);
5821
5822 cur_offset += this_len;
5823 }
5824
5825 return 0;
5826 }
5827
5828 /*
5829 * Check if we need to log an inode. This is used in contexts where while
5830 * logging an inode we need to log another inode (either that it exists or in
5831 * full mode). This is used instead of btrfs_inode_in_log() because the later
5832 * requires the inode to be in the log and have the log transaction committed,
5833 * while here we do not care if the log transaction was already committed - our
5834 * caller will commit the log later - and we want to avoid logging an inode
5835 * multiple times when multiple tasks have joined the same log transaction.
5836 */
need_log_inode(const struct btrfs_trans_handle * trans,struct btrfs_inode * inode)5837 static bool need_log_inode(const struct btrfs_trans_handle *trans,
5838 struct btrfs_inode *inode)
5839 {
5840 /*
5841 * If a directory was not modified, no dentries added or removed, we can
5842 * and should avoid logging it.
5843 */
5844 if (S_ISDIR(inode->vfs_inode.i_mode) && inode->last_trans < trans->transid)
5845 return false;
5846
5847 /*
5848 * If this inode does not have new/updated/deleted xattrs since the last
5849 * time it was logged and is flagged as logged in the current transaction,
5850 * we can skip logging it. As for new/deleted names, those are updated in
5851 * the log by link/unlink/rename operations.
5852 * In case the inode was logged and then evicted and reloaded, its
5853 * logged_trans will be 0, in which case we have to fully log it since
5854 * logged_trans is a transient field, not persisted.
5855 */
5856 if (inode_logged(trans, inode, NULL) == 1 &&
5857 !test_bit(BTRFS_INODE_COPY_EVERYTHING, &inode->runtime_flags))
5858 return false;
5859
5860 return true;
5861 }
5862
5863 struct btrfs_dir_list {
5864 u64 ino;
5865 struct list_head list;
5866 };
5867
5868 /*
5869 * Log the inodes of the new dentries of a directory.
5870 * See process_dir_items_leaf() for details about why it is needed.
5871 * This is a recursive operation - if an existing dentry corresponds to a
5872 * directory, that directory's new entries are logged too (same behaviour as
5873 * ext3/4, xfs, f2fs, nilfs2). Note that when logging the inodes
5874 * the dentries point to we do not acquire their VFS lock, otherwise lockdep
5875 * complains about the following circular lock dependency / possible deadlock:
5876 *
5877 * CPU0 CPU1
5878 * ---- ----
5879 * lock(&type->i_mutex_dir_key#3/2);
5880 * lock(sb_internal#2);
5881 * lock(&type->i_mutex_dir_key#3/2);
5882 * lock(&sb->s_type->i_mutex_key#14);
5883 *
5884 * Where sb_internal is the lock (a counter that works as a lock) acquired by
5885 * sb_start_intwrite() in btrfs_start_transaction().
5886 * Not acquiring the VFS lock of the inodes is still safe because:
5887 *
5888 * 1) For regular files we log with a mode of LOG_INODE_EXISTS. It's possible
5889 * that while logging the inode new references (names) are added or removed
5890 * from the inode, leaving the logged inode item with a link count that does
5891 * not match the number of logged inode reference items. This is fine because
5892 * at log replay time we compute the real number of links and correct the
5893 * link count in the inode item (see replay_one_buffer() and
5894 * link_to_fixup_dir());
5895 *
5896 * 2) For directories we log with a mode of LOG_INODE_ALL. It's possible that
5897 * while logging the inode's items new index items (key type
5898 * BTRFS_DIR_INDEX_KEY) are added to fs/subvol tree and the logged inode item
5899 * has a size that doesn't match the sum of the lengths of all the logged
5900 * names - this is ok, not a problem, because at log replay time we set the
5901 * directory's i_size to the correct value (see replay_one_name() and
5902 * overwrite_item()).
5903 */
log_new_dir_dentries(struct btrfs_trans_handle * trans,struct btrfs_inode * start_inode,struct btrfs_log_ctx * ctx)5904 static int log_new_dir_dentries(struct btrfs_trans_handle *trans,
5905 struct btrfs_inode *start_inode,
5906 struct btrfs_log_ctx *ctx)
5907 {
5908 struct btrfs_root *root = start_inode->root;
5909 struct btrfs_path *path;
5910 LIST_HEAD(dir_list);
5911 struct btrfs_dir_list *dir_elem;
5912 u64 ino = btrfs_ino(start_inode);
5913 struct btrfs_inode *curr_inode = start_inode;
5914 int ret = 0;
5915
5916 path = btrfs_alloc_path();
5917 if (!path)
5918 return -ENOMEM;
5919
5920 /* Pairs with btrfs_add_delayed_iput below. */
5921 ihold(&curr_inode->vfs_inode);
5922
5923 while (true) {
5924 struct btrfs_key key;
5925 struct btrfs_key found_key;
5926 u64 next_index;
5927 bool continue_curr_inode = true;
5928 int iter_ret;
5929
5930 key.objectid = ino;
5931 key.type = BTRFS_DIR_INDEX_KEY;
5932 key.offset = btrfs_get_first_dir_index_to_log(curr_inode);
5933 next_index = key.offset;
5934 again:
5935 btrfs_for_each_slot(root->log_root, &key, &found_key, path, iter_ret) {
5936 struct extent_buffer *leaf = path->nodes[0];
5937 struct btrfs_dir_item *di;
5938 struct btrfs_key di_key;
5939 struct btrfs_inode *di_inode;
5940 int log_mode = LOG_INODE_EXISTS;
5941 int type;
5942
5943 if (found_key.objectid != ino ||
5944 found_key.type != BTRFS_DIR_INDEX_KEY) {
5945 continue_curr_inode = false;
5946 break;
5947 }
5948
5949 next_index = found_key.offset + 1;
5950
5951 di = btrfs_item_ptr(leaf, path->slots[0], struct btrfs_dir_item);
5952 type = btrfs_dir_ftype(leaf, di);
5953 if (btrfs_dir_transid(leaf, di) < trans->transid)
5954 continue;
5955 btrfs_dir_item_key_to_cpu(leaf, di, &di_key);
5956 if (di_key.type == BTRFS_ROOT_ITEM_KEY)
5957 continue;
5958
5959 btrfs_release_path(path);
5960 di_inode = btrfs_iget_logging(di_key.objectid, root);
5961 if (IS_ERR(di_inode)) {
5962 ret = PTR_ERR(di_inode);
5963 goto out;
5964 }
5965
5966 if (!need_log_inode(trans, di_inode)) {
5967 btrfs_add_delayed_iput(di_inode);
5968 break;
5969 }
5970
5971 ctx->log_new_dentries = false;
5972 if (type == BTRFS_FT_DIR)
5973 log_mode = LOG_INODE_ALL;
5974 ret = btrfs_log_inode(trans, di_inode, log_mode, ctx);
5975 btrfs_add_delayed_iput(di_inode);
5976 if (ret)
5977 goto out;
5978 if (ctx->log_new_dentries) {
5979 dir_elem = kmalloc_obj(*dir_elem, GFP_NOFS);
5980 if (!dir_elem) {
5981 ret = -ENOMEM;
5982 goto out;
5983 }
5984 dir_elem->ino = di_key.objectid;
5985 list_add_tail(&dir_elem->list, &dir_list);
5986 }
5987 break;
5988 }
5989
5990 btrfs_release_path(path);
5991
5992 if (iter_ret < 0) {
5993 ret = iter_ret;
5994 goto out;
5995 } else if (iter_ret > 0) {
5996 continue_curr_inode = false;
5997 } else {
5998 key = found_key;
5999 }
6000
6001 if (continue_curr_inode && key.offset < (u64)-1) {
6002 key.offset++;
6003 goto again;
6004 }
6005
6006 btrfs_set_first_dir_index_to_log(curr_inode, next_index);
6007
6008 if (list_empty(&dir_list))
6009 break;
6010
6011 dir_elem = list_first_entry(&dir_list, struct btrfs_dir_list, list);
6012 ino = dir_elem->ino;
6013 list_del(&dir_elem->list);
6014 kfree(dir_elem);
6015
6016 btrfs_add_delayed_iput(curr_inode);
6017
6018 curr_inode = btrfs_iget_logging(ino, root);
6019 if (IS_ERR(curr_inode)) {
6020 ret = PTR_ERR(curr_inode);
6021 curr_inode = NULL;
6022 break;
6023 }
6024 }
6025 out:
6026 btrfs_free_path(path);
6027 if (curr_inode)
6028 btrfs_add_delayed_iput(curr_inode);
6029
6030 if (ret) {
6031 struct btrfs_dir_list *next;
6032
6033 list_for_each_entry_safe(dir_elem, next, &dir_list, list)
6034 kfree(dir_elem);
6035 }
6036
6037 return ret;
6038 }
6039
6040 struct btrfs_ino_list {
6041 u64 ino;
6042 u64 parent;
6043 struct list_head list;
6044 };
6045
free_conflicting_inodes(struct btrfs_log_ctx * ctx)6046 static void free_conflicting_inodes(struct btrfs_log_ctx *ctx)
6047 {
6048 struct btrfs_ino_list *curr;
6049 struct btrfs_ino_list *next;
6050
6051 list_for_each_entry_safe(curr, next, &ctx->conflict_inodes, list) {
6052 list_del(&curr->list);
6053 kfree(curr);
6054 }
6055 }
6056
conflicting_inode_is_dir(struct btrfs_root * root,u64 ino,struct btrfs_path * path)6057 static int conflicting_inode_is_dir(struct btrfs_root *root, u64 ino,
6058 struct btrfs_path *path)
6059 {
6060 struct btrfs_key key;
6061 int ret;
6062
6063 key.objectid = ino;
6064 key.type = BTRFS_INODE_ITEM_KEY;
6065 key.offset = 0;
6066
6067 path->search_commit_root = true;
6068 path->skip_locking = true;
6069
6070 ret = btrfs_search_slot(NULL, root, &key, path, 0, 0);
6071 if (WARN_ON_ONCE(ret > 0)) {
6072 /*
6073 * We have previously found the inode through the commit root
6074 * so this should not happen. If it does, just error out and
6075 * fallback to a transaction commit.
6076 */
6077 ret = -ENOENT;
6078 } else if (ret == 0) {
6079 struct btrfs_inode_item *item;
6080
6081 item = btrfs_item_ptr(path->nodes[0], path->slots[0],
6082 struct btrfs_inode_item);
6083 if (S_ISDIR(btrfs_inode_mode(path->nodes[0], item)))
6084 ret = 1;
6085 }
6086
6087 btrfs_release_path(path);
6088 path->search_commit_root = false;
6089 path->skip_locking = false;
6090
6091 return ret;
6092 }
6093
can_log_conflicting_inode(const struct btrfs_trans_handle * trans,const struct btrfs_inode * inode)6094 static bool can_log_conflicting_inode(const struct btrfs_trans_handle *trans,
6095 const struct btrfs_inode *inode)
6096 {
6097 if (!S_ISDIR(inode->vfs_inode.i_mode))
6098 return true;
6099
6100 if (inode->last_unlink_trans < trans->transid)
6101 return true;
6102
6103 /*
6104 * If this is a directory and its unlink_trans is not from a past
6105 * transaction then we must fallback to a transaction commit in order
6106 * to avoid getting a directory with 2 hard links after log replay.
6107 *
6108 * This happens if a directory A is renamed, moved from one parent
6109 * directory to another one, a new file is created in the old parent
6110 * directory with the old name of our directory A, the new file is
6111 * fsynced, then we moved the new file to some other parent directory
6112 * and fsync again the new file. This results in a log tree where we
6113 * logged that directory A existed, with the INODE_REF item for the
6114 * new location but without having logged its old parent inode, so
6115 * that on log replay we add a new link for the new location but the
6116 * old link remains, resulting in a link count of 2.
6117 */
6118 return false;
6119 }
6120
add_conflicting_inode(struct btrfs_trans_handle * trans,struct btrfs_root * root,struct btrfs_path * path,u64 ino,u64 parent,struct btrfs_log_ctx * ctx)6121 static int add_conflicting_inode(struct btrfs_trans_handle *trans,
6122 struct btrfs_root *root,
6123 struct btrfs_path *path,
6124 u64 ino, u64 parent,
6125 struct btrfs_log_ctx *ctx)
6126 {
6127 struct btrfs_ino_list *ino_elem;
6128 struct btrfs_inode *inode;
6129
6130 /*
6131 * It's rare to have a lot of conflicting inodes, in practice it is not
6132 * common to have more than 1 or 2. We don't want to collect too many,
6133 * as we could end up logging too many inodes (even if only in
6134 * LOG_INODE_EXISTS mode) and slow down other fsyncs or transaction
6135 * commits.
6136 */
6137 if (ctx->num_conflict_inodes >= MAX_CONFLICT_INODES)
6138 return BTRFS_LOG_FORCE_COMMIT;
6139
6140 inode = btrfs_iget_logging(ino, root);
6141 /*
6142 * If the other inode that had a conflicting dir entry was deleted in
6143 * the current transaction then we either:
6144 *
6145 * 1) Log the parent directory (later after adding it to the list) if
6146 * the inode is a directory. This is because it may be a deleted
6147 * subvolume/snapshot or it may be a regular directory that had
6148 * deleted subvolumes/snapshots (or subdirectories that had them),
6149 * and at the moment we can't deal with dropping subvolumes/snapshots
6150 * during log replay. So we just log the parent, which will result in
6151 * a fallback to a transaction commit if we are dealing with those
6152 * cases (last_unlink_trans will match the current transaction);
6153 *
6154 * 2) Do nothing if it's not a directory. During log replay we simply
6155 * unlink the conflicting dentry from the parent directory and then
6156 * add the dentry for our inode. Like this we can avoid logging the
6157 * parent directory (and maybe fallback to a transaction commit in
6158 * case it has a last_unlink_trans == trans->transid, due to moving
6159 * some inode from it to some other directory).
6160 */
6161 if (IS_ERR(inode)) {
6162 int ret = PTR_ERR(inode);
6163
6164 if (ret != -ENOENT)
6165 return ret;
6166
6167 ret = conflicting_inode_is_dir(root, ino, path);
6168 /* Not a directory or we got an error. */
6169 if (ret <= 0)
6170 return ret;
6171
6172 /* Conflicting inode is a directory, so we'll log its parent. */
6173 ino_elem = kmalloc_obj(*ino_elem, GFP_NOFS);
6174 if (!ino_elem)
6175 return -ENOMEM;
6176 ino_elem->ino = ino;
6177 ino_elem->parent = parent;
6178 list_add_tail(&ino_elem->list, &ctx->conflict_inodes);
6179 ctx->num_conflict_inodes++;
6180
6181 return 0;
6182 }
6183
6184 /*
6185 * If the inode was already logged skip it - otherwise we can hit an
6186 * infinite loop. Example:
6187 *
6188 * From the commit root (previous transaction) we have the following
6189 * inodes:
6190 *
6191 * inode 257 a directory
6192 * inode 258 with references "zz" and "zz_link" on inode 257
6193 * inode 259 with reference "a" on inode 257
6194 *
6195 * And in the current (uncommitted) transaction we have:
6196 *
6197 * inode 257 a directory, unchanged
6198 * inode 258 with references "a" and "a2" on inode 257
6199 * inode 259 with reference "zz_link" on inode 257
6200 * inode 261 with reference "zz" on inode 257
6201 *
6202 * When logging inode 261 the following infinite loop could
6203 * happen if we don't skip already logged inodes:
6204 *
6205 * - we detect inode 258 as a conflicting inode, with inode 261
6206 * on reference "zz", and log it;
6207 *
6208 * - we detect inode 259 as a conflicting inode, with inode 258
6209 * on reference "a", and log it;
6210 *
6211 * - we detect inode 258 as a conflicting inode, with inode 259
6212 * on reference "zz_link", and log it - again! After this we
6213 * repeat the above steps forever.
6214 *
6215 * Here we can use need_log_inode() because we only need to log the
6216 * inode in LOG_INODE_EXISTS mode and rename operations update the log,
6217 * so that the log ends up with the new name and without the old name.
6218 */
6219 if (!need_log_inode(trans, inode)) {
6220 btrfs_add_delayed_iput(inode);
6221 return 0;
6222 }
6223
6224 if (!can_log_conflicting_inode(trans, inode)) {
6225 btrfs_add_delayed_iput(inode);
6226 return BTRFS_LOG_FORCE_COMMIT;
6227 }
6228
6229 btrfs_add_delayed_iput(inode);
6230
6231 ino_elem = kmalloc_obj(*ino_elem, GFP_NOFS);
6232 if (!ino_elem)
6233 return -ENOMEM;
6234 ino_elem->ino = ino;
6235 ino_elem->parent = parent;
6236 list_add_tail(&ino_elem->list, &ctx->conflict_inodes);
6237 ctx->num_conflict_inodes++;
6238
6239 return 0;
6240 }
6241
log_conflicting_inodes(struct btrfs_trans_handle * trans,struct btrfs_root * root,struct btrfs_log_ctx * ctx)6242 static int log_conflicting_inodes(struct btrfs_trans_handle *trans,
6243 struct btrfs_root *root,
6244 struct btrfs_log_ctx *ctx)
6245 {
6246 const bool orig_log_new_dentries = ctx->log_new_dentries;
6247 int ret = 0;
6248
6249 /*
6250 * Conflicting inodes are logged by the first call to btrfs_log_inode(),
6251 * otherwise we could have unbounded recursion of btrfs_log_inode()
6252 * calls. This check guarantees we can have only 1 level of recursion.
6253 */
6254 if (ctx->logging_conflict_inodes)
6255 return 0;
6256
6257 ctx->logging_conflict_inodes = true;
6258
6259 /*
6260 * New conflicting inodes may be found and added to the list while we
6261 * are logging a conflicting inode, so keep iterating while the list is
6262 * not empty.
6263 */
6264 while (!list_empty(&ctx->conflict_inodes)) {
6265 struct btrfs_ino_list *curr;
6266 struct btrfs_inode *inode;
6267 u64 ino;
6268 u64 parent;
6269
6270 curr = list_first_entry(&ctx->conflict_inodes,
6271 struct btrfs_ino_list, list);
6272 ino = curr->ino;
6273 parent = curr->parent;
6274 list_del(&curr->list);
6275 kfree(curr);
6276
6277 inode = btrfs_iget_logging(ino, root);
6278 /*
6279 * If the other inode that had a conflicting dir entry was
6280 * deleted in the current transaction, we need to log its parent
6281 * directory. See the comment at add_conflicting_inode().
6282 */
6283 if (IS_ERR(inode)) {
6284 ret = PTR_ERR(inode);
6285 if (ret != -ENOENT)
6286 break;
6287
6288 inode = btrfs_iget_logging(parent, root);
6289 if (IS_ERR(inode)) {
6290 ret = PTR_ERR(inode);
6291 break;
6292 }
6293
6294 if (!can_log_conflicting_inode(trans, inode)) {
6295 btrfs_add_delayed_iput(inode);
6296 ret = BTRFS_LOG_FORCE_COMMIT;
6297 break;
6298 }
6299
6300 /*
6301 * Always log the directory, we cannot make this
6302 * conditional on need_log_inode() because the directory
6303 * might have been logged in LOG_INODE_EXISTS mode or
6304 * the dir index of the conflicting inode is not in a
6305 * dir index key range logged for the directory. So we
6306 * must make sure the deletion is recorded.
6307 */
6308 ctx->log_new_dentries = false;
6309 ret = btrfs_log_inode(trans, inode, LOG_INODE_ALL, ctx);
6310 if (!ret && ctx->log_new_dentries)
6311 ret = log_new_dir_dentries(trans, inode, ctx);
6312
6313 btrfs_add_delayed_iput(inode);
6314 if (ret)
6315 break;
6316 continue;
6317 }
6318
6319 /*
6320 * Here we can use need_log_inode() because we only need to log
6321 * the inode in LOG_INODE_EXISTS mode and rename operations
6322 * update the log, so that the log ends up with the new name and
6323 * without the old name.
6324 *
6325 * We did this check at add_conflicting_inode(), but here we do
6326 * it again because if some other task logged the inode after
6327 * that, we can avoid doing it again.
6328 */
6329 if (!need_log_inode(trans, inode)) {
6330 btrfs_add_delayed_iput(inode);
6331 continue;
6332 }
6333
6334 /*
6335 * We are safe logging the other inode without acquiring its
6336 * lock as long as we log with the LOG_INODE_EXISTS mode. We
6337 * are safe against concurrent renames of the other inode as
6338 * well because during a rename we pin the log and update the
6339 * log with the new name before we unpin it.
6340 */
6341 ret = btrfs_log_inode(trans, inode, LOG_INODE_EXISTS, ctx);
6342 btrfs_add_delayed_iput(inode);
6343 if (ret)
6344 break;
6345 }
6346
6347 ctx->log_new_dentries = orig_log_new_dentries;
6348 ctx->logging_conflict_inodes = false;
6349 if (ret)
6350 free_conflicting_inodes(ctx);
6351
6352 return ret;
6353 }
6354
copy_inode_items_to_log(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_key * min_key,const struct btrfs_key * max_key,struct btrfs_path * path,struct btrfs_path * dst_path,const u64 logged_isize,const int inode_only,struct btrfs_log_ctx * ctx,bool * need_log_inode_item)6355 static int copy_inode_items_to_log(struct btrfs_trans_handle *trans,
6356 struct btrfs_inode *inode,
6357 struct btrfs_key *min_key,
6358 const struct btrfs_key *max_key,
6359 struct btrfs_path *path,
6360 struct btrfs_path *dst_path,
6361 const u64 logged_isize,
6362 const int inode_only,
6363 struct btrfs_log_ctx *ctx,
6364 bool *need_log_inode_item)
6365 {
6366 const u64 i_size = i_size_read(&inode->vfs_inode);
6367 struct btrfs_root *root = inode->root;
6368 int ins_start_slot = 0;
6369 int ins_nr = 0;
6370 int ret;
6371
6372 while (1) {
6373 ret = btrfs_search_forward(root, min_key, path, trans->transid);
6374 if (ret < 0)
6375 return ret;
6376 if (ret > 0) {
6377 ret = 0;
6378 break;
6379 }
6380 again:
6381 /* Note, ins_nr might be > 0 here, cleanup outside the loop */
6382 if (min_key->objectid != max_key->objectid)
6383 break;
6384 if (min_key->type > max_key->type)
6385 break;
6386
6387 if (min_key->type == BTRFS_INODE_ITEM_KEY) {
6388 *need_log_inode_item = false;
6389 } else if (min_key->type == BTRFS_EXTENT_DATA_KEY &&
6390 min_key->offset >= i_size) {
6391 /*
6392 * Extents at and beyond eof are logged with
6393 * btrfs_log_prealloc_extents().
6394 * Only regular files have BTRFS_EXTENT_DATA_KEY keys,
6395 * and no keys greater than that, so bail out.
6396 */
6397 break;
6398 } else if (min_key->type == BTRFS_INODE_REF_KEY ||
6399 min_key->type == BTRFS_INODE_EXTREF_KEY) {
6400 u64 other_ino = 0;
6401 u64 other_parent = 0;
6402
6403 ret = btrfs_check_ref_name_override(path->nodes[0],
6404 path->slots[0], min_key, inode,
6405 &other_ino, &other_parent);
6406 if (ret < 0) {
6407 return ret;
6408 } else if (ret > 0 &&
6409 other_ino != btrfs_ino(ctx->inode)) {
6410 if (ins_nr > 0) {
6411 ins_nr++;
6412 } else {
6413 ins_nr = 1;
6414 ins_start_slot = path->slots[0];
6415 }
6416 ret = copy_items(trans, inode, dst_path, path,
6417 ins_start_slot, ins_nr,
6418 inode_only, logged_isize, ctx);
6419 if (ret < 0)
6420 return ret;
6421 ins_nr = 0;
6422
6423 btrfs_release_path(path);
6424 ret = add_conflicting_inode(trans, root, path,
6425 other_ino,
6426 other_parent, ctx);
6427 if (ret)
6428 return ret;
6429 goto next_key;
6430 }
6431 } else if (min_key->type == BTRFS_XATTR_ITEM_KEY) {
6432 /* Skip xattrs, logged later with btrfs_log_all_xattrs() */
6433 if (ins_nr == 0)
6434 goto next_slot;
6435 ret = copy_items(trans, inode, dst_path, path,
6436 ins_start_slot,
6437 ins_nr, inode_only, logged_isize, ctx);
6438 if (ret < 0)
6439 return ret;
6440 ins_nr = 0;
6441 goto next_slot;
6442 }
6443
6444 if (ins_nr && ins_start_slot + ins_nr == path->slots[0]) {
6445 ins_nr++;
6446 goto next_slot;
6447 } else if (!ins_nr) {
6448 ins_start_slot = path->slots[0];
6449 ins_nr = 1;
6450 goto next_slot;
6451 }
6452
6453 ret = copy_items(trans, inode, dst_path, path, ins_start_slot,
6454 ins_nr, inode_only, logged_isize, ctx);
6455 if (ret < 0)
6456 return ret;
6457 ins_nr = 1;
6458 ins_start_slot = path->slots[0];
6459 next_slot:
6460 path->slots[0]++;
6461 if (path->slots[0] < btrfs_header_nritems(path->nodes[0])) {
6462 btrfs_item_key_to_cpu(path->nodes[0], min_key,
6463 path->slots[0]);
6464 goto again;
6465 }
6466 if (ins_nr) {
6467 ret = copy_items(trans, inode, dst_path, path,
6468 ins_start_slot, ins_nr, inode_only,
6469 logged_isize, ctx);
6470 if (ret < 0)
6471 return ret;
6472 ins_nr = 0;
6473 }
6474 btrfs_release_path(path);
6475 next_key:
6476 if (min_key->offset < (u64)-1) {
6477 min_key->offset++;
6478 } else if (min_key->type < max_key->type) {
6479 min_key->type++;
6480 min_key->offset = 0;
6481 } else {
6482 break;
6483 }
6484
6485 /*
6486 * We may process many leaves full of items for our inode, so
6487 * avoid monopolizing a cpu for too long by rescheduling while
6488 * not holding locks on any tree.
6489 */
6490 cond_resched();
6491 }
6492 if (ins_nr) {
6493 ret = copy_items(trans, inode, dst_path, path, ins_start_slot,
6494 ins_nr, inode_only, logged_isize, ctx);
6495 if (ret)
6496 return ret;
6497 }
6498
6499 if (inode_only == LOG_INODE_ALL && S_ISREG(inode->vfs_inode.i_mode)) {
6500 /*
6501 * Release the path because otherwise we might attempt to double
6502 * lock the same leaf with btrfs_log_prealloc_extents() below.
6503 */
6504 btrfs_release_path(path);
6505 ret = btrfs_log_prealloc_extents(trans, inode, dst_path, ctx);
6506 }
6507
6508 return ret;
6509 }
6510
insert_delayed_items_batch(struct btrfs_trans_handle * trans,struct btrfs_root * log,struct btrfs_path * path,const struct btrfs_item_batch * batch,const struct btrfs_delayed_item * first_item)6511 static int insert_delayed_items_batch(struct btrfs_trans_handle *trans,
6512 struct btrfs_root *log,
6513 struct btrfs_path *path,
6514 const struct btrfs_item_batch *batch,
6515 const struct btrfs_delayed_item *first_item)
6516 {
6517 const struct btrfs_delayed_item *curr = first_item;
6518 int ret;
6519
6520 ret = btrfs_insert_empty_items(trans, log, path, batch);
6521 if (ret)
6522 return ret;
6523
6524 for (int i = 0; i < batch->nr; i++) {
6525 char *data_ptr;
6526
6527 data_ptr = btrfs_item_ptr(path->nodes[0], path->slots[0], char);
6528 write_extent_buffer(path->nodes[0], &curr->data,
6529 (unsigned long)data_ptr, curr->data_len);
6530 curr = list_next_entry(curr, log_list);
6531 path->slots[0]++;
6532 }
6533
6534 btrfs_release_path(path);
6535
6536 return 0;
6537 }
6538
log_delayed_insertion_items(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_path * path,const struct list_head * delayed_ins_list,struct btrfs_log_ctx * ctx)6539 static int log_delayed_insertion_items(struct btrfs_trans_handle *trans,
6540 struct btrfs_inode *inode,
6541 struct btrfs_path *path,
6542 const struct list_head *delayed_ins_list,
6543 struct btrfs_log_ctx *ctx)
6544 {
6545 /* 195 (4095 bytes of keys and sizes) fits in a single 4K page. */
6546 const int max_batch_size = 195;
6547 const int leaf_data_size = BTRFS_LEAF_DATA_SIZE(trans->fs_info);
6548 const u64 ino = btrfs_ino(inode);
6549 struct btrfs_root *log = inode->root->log_root;
6550 struct btrfs_item_batch batch = {
6551 .nr = 0,
6552 .total_data_size = 0,
6553 };
6554 const struct btrfs_delayed_item *first = NULL;
6555 const struct btrfs_delayed_item *curr;
6556 char *ins_data;
6557 struct btrfs_key *ins_keys;
6558 u32 *ins_sizes;
6559 u64 curr_batch_size = 0;
6560 int batch_idx = 0;
6561 int ret;
6562
6563 /* We are adding dir index items to the log tree. */
6564 lockdep_assert_held(&inode->log_mutex);
6565
6566 /*
6567 * We collect delayed items before copying index keys from the subvolume
6568 * to the log tree. However just after we collected them, they may have
6569 * been flushed (all of them or just some of them), and therefore we
6570 * could have copied them from the subvolume tree to the log tree.
6571 * So find the first delayed item that was not yet logged (they are
6572 * sorted by index number).
6573 */
6574 list_for_each_entry(curr, delayed_ins_list, log_list) {
6575 if (curr->index > inode->last_dir_index_offset) {
6576 first = curr;
6577 break;
6578 }
6579 }
6580
6581 /* Empty list or all delayed items were already logged. */
6582 if (!first)
6583 return 0;
6584
6585 ins_data = kmalloc_array(max_batch_size, sizeof(u32) + sizeof(struct btrfs_key), GFP_NOFS);
6586 if (!ins_data)
6587 return -ENOMEM;
6588 ins_sizes = (u32 *)ins_data;
6589 batch.data_sizes = ins_sizes;
6590 ins_keys = (struct btrfs_key *)(ins_data + max_batch_size * sizeof(u32));
6591 batch.keys = ins_keys;
6592
6593 curr = first;
6594 while (!list_entry_is_head(curr, delayed_ins_list, log_list)) {
6595 const u32 curr_size = curr->data_len + sizeof(struct btrfs_item);
6596
6597 if (curr_batch_size + curr_size > leaf_data_size ||
6598 batch.nr == max_batch_size) {
6599 ret = insert_delayed_items_batch(trans, log, path,
6600 &batch, first);
6601 if (ret)
6602 goto out;
6603 batch_idx = 0;
6604 batch.nr = 0;
6605 batch.total_data_size = 0;
6606 curr_batch_size = 0;
6607 first = curr;
6608 }
6609
6610 ins_sizes[batch_idx] = curr->data_len;
6611 ins_keys[batch_idx].objectid = ino;
6612 ins_keys[batch_idx].type = BTRFS_DIR_INDEX_KEY;
6613 ins_keys[batch_idx].offset = curr->index;
6614 curr_batch_size += curr_size;
6615 batch.total_data_size += curr->data_len;
6616 batch.nr++;
6617 batch_idx++;
6618 curr = list_next_entry(curr, log_list);
6619 }
6620
6621 ASSERT(batch.nr >= 1, "batch.nr=%d", batch.nr);
6622 ret = insert_delayed_items_batch(trans, log, path, &batch, first);
6623
6624 curr = list_last_entry(delayed_ins_list, struct btrfs_delayed_item,
6625 log_list);
6626 inode->last_dir_index_offset = curr->index;
6627 out:
6628 kfree(ins_data);
6629
6630 return ret;
6631 }
6632
log_delayed_deletions_full(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_path * path,const struct list_head * delayed_del_list,struct btrfs_log_ctx * ctx)6633 static int log_delayed_deletions_full(struct btrfs_trans_handle *trans,
6634 struct btrfs_inode *inode,
6635 struct btrfs_path *path,
6636 const struct list_head *delayed_del_list,
6637 struct btrfs_log_ctx *ctx)
6638 {
6639 const u64 ino = btrfs_ino(inode);
6640 const struct btrfs_delayed_item *curr;
6641
6642 curr = list_first_entry(delayed_del_list, struct btrfs_delayed_item,
6643 log_list);
6644
6645 while (!list_entry_is_head(curr, delayed_del_list, log_list)) {
6646 u64 first_dir_index = curr->index;
6647 u64 last_dir_index;
6648 const struct btrfs_delayed_item *next;
6649 int ret;
6650
6651 /*
6652 * Find a range of consecutive dir index items to delete. Like
6653 * this we log a single dir range item spanning several contiguous
6654 * dir items instead of logging one range item per dir index item.
6655 */
6656 next = list_next_entry(curr, log_list);
6657 while (!list_entry_is_head(next, delayed_del_list, log_list)) {
6658 if (next->index != curr->index + 1)
6659 break;
6660 curr = next;
6661 next = list_next_entry(next, log_list);
6662 }
6663
6664 last_dir_index = curr->index;
6665 ASSERT(last_dir_index >= first_dir_index,
6666 "last_dir_index=%llu first_dir_index=%llu",
6667 last_dir_index, first_dir_index);
6668
6669 ret = insert_dir_log_key(trans, inode->root->log_root, path,
6670 ino, first_dir_index, last_dir_index);
6671 if (ret)
6672 return ret;
6673 curr = list_next_entry(curr, log_list);
6674 }
6675
6676 return 0;
6677 }
6678
batch_delete_dir_index_items(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_path * path,const struct list_head * delayed_del_list,const struct btrfs_delayed_item * first,const struct btrfs_delayed_item ** last_ret)6679 static int batch_delete_dir_index_items(struct btrfs_trans_handle *trans,
6680 struct btrfs_inode *inode,
6681 struct btrfs_path *path,
6682 const struct list_head *delayed_del_list,
6683 const struct btrfs_delayed_item *first,
6684 const struct btrfs_delayed_item **last_ret)
6685 {
6686 const struct btrfs_delayed_item *next;
6687 struct extent_buffer *leaf = path->nodes[0];
6688 const int last_slot = btrfs_header_nritems(leaf) - 1;
6689 int slot = path->slots[0] + 1;
6690 const u64 ino = btrfs_ino(inode);
6691
6692 next = list_next_entry(first, log_list);
6693
6694 while (slot < last_slot &&
6695 !list_entry_is_head(next, delayed_del_list, log_list)) {
6696 struct btrfs_key key;
6697
6698 btrfs_item_key_to_cpu(leaf, &key, slot);
6699 if (key.objectid != ino ||
6700 key.type != BTRFS_DIR_INDEX_KEY ||
6701 key.offset != next->index)
6702 break;
6703
6704 slot++;
6705 *last_ret = next;
6706 next = list_next_entry(next, log_list);
6707 }
6708
6709 return btrfs_del_items(trans, inode->root->log_root, path,
6710 path->slots[0], slot - path->slots[0]);
6711 }
6712
log_delayed_deletions_incremental(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_path * path,const struct list_head * delayed_del_list,struct btrfs_log_ctx * ctx)6713 static int log_delayed_deletions_incremental(struct btrfs_trans_handle *trans,
6714 struct btrfs_inode *inode,
6715 struct btrfs_path *path,
6716 const struct list_head *delayed_del_list,
6717 struct btrfs_log_ctx *ctx)
6718 {
6719 struct btrfs_root *log = inode->root->log_root;
6720 const struct btrfs_delayed_item *curr;
6721 u64 last_range_start = 0;
6722 u64 last_range_end = 0;
6723 struct btrfs_key key;
6724
6725 key.objectid = btrfs_ino(inode);
6726 key.type = BTRFS_DIR_INDEX_KEY;
6727 curr = list_first_entry(delayed_del_list, struct btrfs_delayed_item,
6728 log_list);
6729
6730 while (!list_entry_is_head(curr, delayed_del_list, log_list)) {
6731 const struct btrfs_delayed_item *last = curr;
6732 u64 first_dir_index = curr->index;
6733 u64 last_dir_index;
6734 bool deleted_items = false;
6735 int ret;
6736
6737 key.offset = curr->index;
6738 ret = btrfs_search_slot(trans, log, &key, path, -1, 1);
6739 if (ret < 0) {
6740 return ret;
6741 } else if (ret == 0) {
6742 ret = batch_delete_dir_index_items(trans, inode, path,
6743 delayed_del_list, curr,
6744 &last);
6745 if (ret)
6746 return ret;
6747 deleted_items = true;
6748 }
6749
6750 btrfs_release_path(path);
6751
6752 /*
6753 * If we deleted items from the leaf, it means we have a range
6754 * item logging their range, so no need to add one or update an
6755 * existing one. Otherwise we have to log a dir range item.
6756 */
6757 if (deleted_items)
6758 goto next_batch;
6759
6760 last_dir_index = last->index;
6761 ASSERT(last_dir_index >= first_dir_index,
6762 "last_dir_index=%llu first_dir_index=%llu",
6763 last_dir_index, first_dir_index);
6764 /*
6765 * If this range starts right after where the previous one ends,
6766 * then we want to reuse the previous range item and change its
6767 * end offset to the end of this range. This is just to minimize
6768 * leaf space usage, by avoiding adding a new range item.
6769 */
6770 if (last_range_end != 0 && first_dir_index == last_range_end + 1)
6771 first_dir_index = last_range_start;
6772
6773 ret = insert_dir_log_key(trans, log, path, key.objectid,
6774 first_dir_index, last_dir_index);
6775 if (ret)
6776 return ret;
6777
6778 last_range_start = first_dir_index;
6779 last_range_end = last_dir_index;
6780 next_batch:
6781 curr = list_next_entry(last, log_list);
6782 }
6783
6784 return 0;
6785 }
6786
log_delayed_deletion_items(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_path * path,const struct list_head * delayed_del_list,struct btrfs_log_ctx * ctx)6787 static int log_delayed_deletion_items(struct btrfs_trans_handle *trans,
6788 struct btrfs_inode *inode,
6789 struct btrfs_path *path,
6790 const struct list_head *delayed_del_list,
6791 struct btrfs_log_ctx *ctx)
6792 {
6793 /*
6794 * We are deleting dir index items from the log tree or adding range
6795 * items to it.
6796 */
6797 lockdep_assert_held(&inode->log_mutex);
6798
6799 if (list_empty(delayed_del_list))
6800 return 0;
6801
6802 if (ctx->logged_before)
6803 return log_delayed_deletions_incremental(trans, inode, path,
6804 delayed_del_list, ctx);
6805
6806 return log_delayed_deletions_full(trans, inode, path, delayed_del_list,
6807 ctx);
6808 }
6809
6810 /*
6811 * Similar logic as for log_new_dir_dentries(), but it iterates over the delayed
6812 * items instead of the subvolume tree.
6813 */
log_new_delayed_dentries(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,const struct list_head * delayed_ins_list,struct btrfs_log_ctx * ctx)6814 static int log_new_delayed_dentries(struct btrfs_trans_handle *trans,
6815 struct btrfs_inode *inode,
6816 const struct list_head *delayed_ins_list,
6817 struct btrfs_log_ctx *ctx)
6818 {
6819 const bool orig_log_new_dentries = ctx->log_new_dentries;
6820 struct btrfs_delayed_item *item;
6821 int ret = 0;
6822
6823 /*
6824 * No need for the log mutex, plus to avoid potential deadlocks or
6825 * lockdep annotations due to nesting of delayed inode mutexes and log
6826 * mutexes.
6827 */
6828 lockdep_assert_not_held(&inode->log_mutex);
6829
6830 ASSERT(!ctx->logging_new_delayed_dentries,
6831 "ctx->logging_new_delayed_dentries=%d", ctx->logging_new_delayed_dentries);
6832 ctx->logging_new_delayed_dentries = true;
6833
6834 list_for_each_entry(item, delayed_ins_list, log_list) {
6835 struct btrfs_dir_item *dir_item;
6836 struct btrfs_inode *di_inode;
6837 struct btrfs_key key;
6838 int log_mode = LOG_INODE_EXISTS;
6839
6840 dir_item = (struct btrfs_dir_item *)item->data;
6841 btrfs_disk_key_to_cpu(&key, &dir_item->location);
6842
6843 if (key.type == BTRFS_ROOT_ITEM_KEY)
6844 continue;
6845
6846 di_inode = btrfs_iget_logging(key.objectid, inode->root);
6847 if (IS_ERR(di_inode)) {
6848 ret = PTR_ERR(di_inode);
6849 break;
6850 }
6851
6852 if (!need_log_inode(trans, di_inode)) {
6853 btrfs_add_delayed_iput(di_inode);
6854 continue;
6855 }
6856
6857 if (btrfs_stack_dir_ftype(dir_item) == BTRFS_FT_DIR)
6858 log_mode = LOG_INODE_ALL;
6859
6860 ctx->log_new_dentries = false;
6861 ret = btrfs_log_inode(trans, di_inode, log_mode, ctx);
6862
6863 if (!ret && ctx->log_new_dentries)
6864 ret = log_new_dir_dentries(trans, di_inode, ctx);
6865
6866 btrfs_add_delayed_iput(di_inode);
6867
6868 if (ret)
6869 break;
6870 }
6871
6872 ctx->log_new_dentries = orig_log_new_dentries;
6873 ctx->logging_new_delayed_dentries = false;
6874
6875 return ret;
6876 }
6877
6878 /* log a single inode in the tree log.
6879 * At least one parent directory for this inode must exist in the tree
6880 * or be logged already.
6881 *
6882 * Any items from this inode changed by the current transaction are copied
6883 * to the log tree. An extra reference is taken on any extents in this
6884 * file, allowing us to avoid a whole pile of corner cases around logging
6885 * blocks that have been removed from the tree.
6886 *
6887 * See LOG_INODE_ALL and related defines for a description of what inode_only
6888 * does.
6889 *
6890 * This handles both files and directories.
6891 */
btrfs_log_inode(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,int inode_only,struct btrfs_log_ctx * ctx)6892 static int btrfs_log_inode(struct btrfs_trans_handle *trans,
6893 struct btrfs_inode *inode,
6894 int inode_only,
6895 struct btrfs_log_ctx *ctx)
6896 {
6897 struct btrfs_path *path;
6898 struct btrfs_path *dst_path;
6899 struct btrfs_key min_key;
6900 struct btrfs_key max_key;
6901 struct btrfs_root *log = inode->root->log_root;
6902 int ret;
6903 bool fast_search = false;
6904 u64 ino = btrfs_ino(inode);
6905 struct extent_map_tree *em_tree = &inode->extent_tree;
6906 u64 logged_isize = 0;
6907 bool need_log_inode_item = true;
6908 bool xattrs_logged = false;
6909 bool inode_item_dropped = true;
6910 bool full_dir_logging = false;
6911 LIST_HEAD(delayed_ins_list);
6912 LIST_HEAD(delayed_del_list);
6913
6914 path = btrfs_alloc_path();
6915 if (!path)
6916 return -ENOMEM;
6917 dst_path = btrfs_alloc_path();
6918 if (!dst_path) {
6919 btrfs_free_path(path);
6920 return -ENOMEM;
6921 }
6922
6923 min_key.objectid = ino;
6924 min_key.type = BTRFS_INODE_ITEM_KEY;
6925 min_key.offset = 0;
6926
6927 max_key.objectid = ino;
6928
6929
6930 /* today the code can only do partial logging of directories */
6931 if (S_ISDIR(inode->vfs_inode.i_mode) ||
6932 (!test_bit(BTRFS_INODE_NEEDS_FULL_SYNC,
6933 &inode->runtime_flags) &&
6934 inode_only >= LOG_INODE_EXISTS))
6935 max_key.type = BTRFS_XATTR_ITEM_KEY;
6936 else
6937 max_key.type = (u8)-1;
6938 max_key.offset = (u64)-1;
6939
6940 if (S_ISDIR(inode->vfs_inode.i_mode) && inode_only == LOG_INODE_ALL)
6941 full_dir_logging = true;
6942
6943 /*
6944 * If we are logging a directory while we are logging dentries of the
6945 * delayed items of some other inode, then we need to flush the delayed
6946 * items of this directory and not log the delayed items directly. This
6947 * is to prevent more than one level of recursion into btrfs_log_inode()
6948 * by having something like this:
6949 *
6950 * $ mkdir -p a/b/c/d/e/f/g/h/...
6951 * $ xfs_io -c "fsync" a
6952 *
6953 * Where all directories in the path did not exist before and are
6954 * created in the current transaction.
6955 * So in such a case we directly log the delayed items of the main
6956 * directory ("a") without flushing them first, while for each of its
6957 * subdirectories we flush their delayed items before logging them.
6958 * This prevents a potential unbounded recursion like this:
6959 *
6960 * btrfs_log_inode()
6961 * log_new_delayed_dentries()
6962 * btrfs_log_inode()
6963 * log_new_delayed_dentries()
6964 * btrfs_log_inode()
6965 * log_new_delayed_dentries()
6966 * (...)
6967 *
6968 * We have thresholds for the maximum number of delayed items to have in
6969 * memory, and once they are hit, the items are flushed asynchronously.
6970 * However the limit is quite high, so lets prevent deep levels of
6971 * recursion to happen by limiting the maximum depth to be 1.
6972 */
6973 if (full_dir_logging && ctx->logging_new_delayed_dentries) {
6974 ret = btrfs_commit_inode_delayed_items(trans, inode);
6975 if (ret)
6976 goto out;
6977 }
6978
6979 mutex_lock(&inode->log_mutex);
6980
6981 /*
6982 * For symlinks, we must always log their content, which is stored in an
6983 * inline extent, otherwise we could end up with an empty symlink after
6984 * log replay, which is invalid on linux (symlink(2) returns -ENOENT if
6985 * one attempts to create an empty symlink).
6986 * We don't need to worry about flushing delalloc, because when we create
6987 * the inline extent when the symlink is created (we never have delalloc
6988 * for symlinks).
6989 */
6990 if (S_ISLNK(inode->vfs_inode.i_mode))
6991 inode_only = LOG_INODE_ALL;
6992
6993 /*
6994 * Before logging the inode item, cache the value returned by
6995 * inode_logged(), because after that we have the need to figure out if
6996 * the inode was previously logged in this transaction.
6997 */
6998 ret = inode_logged(trans, inode, path);
6999 if (ret < 0)
7000 goto out_unlock;
7001 ctx->logged_before = (ret == 1);
7002 ret = 0;
7003
7004 /*
7005 * This is for cases where logging a directory could result in losing a
7006 * a file after replaying the log. For example, if we move a file from a
7007 * directory A to a directory B, then fsync directory A, we have no way
7008 * to known the file was moved from A to B, so logging just A would
7009 * result in losing the file after a log replay.
7010 */
7011 if (full_dir_logging && inode->last_unlink_trans >= trans->transid) {
7012 ret = BTRFS_LOG_FORCE_COMMIT;
7013 goto out_unlock;
7014 }
7015
7016 /*
7017 * a brute force approach to making sure we get the most uptodate
7018 * copies of everything.
7019 */
7020 if (S_ISDIR(inode->vfs_inode.i_mode)) {
7021 clear_bit(BTRFS_INODE_COPY_EVERYTHING, &inode->runtime_flags);
7022 if (ctx->logged_before)
7023 ret = drop_inode_items(trans, log, path, inode,
7024 BTRFS_XATTR_ITEM_KEY);
7025 } else {
7026 if (inode_only == LOG_INODE_EXISTS) {
7027 /*
7028 * Make sure the new inode item we write to the log has
7029 * the same isize as the current one (if it exists).
7030 * This is necessary to prevent data loss after log
7031 * replay, and also to prevent doing a wrong expanding
7032 * truncate - for e.g. create file, write 4K into offset
7033 * 0, fsync, write 4K into offset 4096, add hard link,
7034 * fsync some other file (to sync log), power fail - if
7035 * we use the inode's current i_size, after log replay
7036 * we get a 8Kb file, with the last 4Kb extent as a hole
7037 * (zeroes), as if an expanding truncate happened,
7038 * instead of getting a file of 4Kb only.
7039 */
7040 ret = get_inode_size_to_log(trans, inode, path, &logged_isize);
7041 if (ret)
7042 goto out_unlock;
7043 }
7044 if (test_bit(BTRFS_INODE_NEEDS_FULL_SYNC,
7045 &inode->runtime_flags)) {
7046 if (inode_only == LOG_INODE_EXISTS) {
7047 max_key.type = BTRFS_XATTR_ITEM_KEY;
7048 if (ctx->logged_before)
7049 ret = drop_inode_items(trans, log, path,
7050 inode, max_key.type);
7051 } else {
7052 clear_bit(BTRFS_INODE_NEEDS_FULL_SYNC,
7053 &inode->runtime_flags);
7054 clear_bit(BTRFS_INODE_COPY_EVERYTHING,
7055 &inode->runtime_flags);
7056 if (ctx->logged_before)
7057 ret = truncate_inode_items(trans, log,
7058 inode, 0, 0);
7059 }
7060 } else if (test_and_clear_bit(BTRFS_INODE_COPY_EVERYTHING,
7061 &inode->runtime_flags) ||
7062 inode_only == LOG_INODE_EXISTS) {
7063 if (inode_only == LOG_INODE_ALL)
7064 fast_search = true;
7065 max_key.type = BTRFS_XATTR_ITEM_KEY;
7066 if (ctx->logged_before)
7067 ret = drop_inode_items(trans, log, path, inode,
7068 max_key.type);
7069 } else {
7070 if (inode_only == LOG_INODE_ALL)
7071 fast_search = true;
7072 inode_item_dropped = false;
7073 goto log_extents;
7074 }
7075
7076 }
7077 if (ret)
7078 goto out_unlock;
7079
7080 /*
7081 * If we are logging a directory in full mode, collect the delayed items
7082 * before iterating the subvolume tree, so that we don't miss any new
7083 * dir index items in case they get flushed while or right after we are
7084 * iterating the subvolume tree.
7085 */
7086 if (full_dir_logging && !ctx->logging_new_delayed_dentries)
7087 btrfs_log_get_delayed_items(inode, &delayed_ins_list,
7088 &delayed_del_list);
7089
7090 /*
7091 * If we are fsyncing a file with 0 hard links, then commit the delayed
7092 * inode because the last inode ref (or extref) item may still be in the
7093 * subvolume tree and if we log it the file will still exist after a log
7094 * replay. So commit the delayed inode to delete that last ref and we
7095 * skip logging it.
7096 */
7097 if (inode->vfs_inode.i_nlink == 0) {
7098 ret = btrfs_commit_inode_delayed_inode(inode);
7099 if (ret)
7100 goto out_unlock;
7101 }
7102
7103 ret = copy_inode_items_to_log(trans, inode, &min_key, &max_key,
7104 path, dst_path, logged_isize,
7105 inode_only, ctx,
7106 &need_log_inode_item);
7107 if (ret)
7108 goto out_unlock;
7109
7110 btrfs_release_path(path);
7111 btrfs_release_path(dst_path);
7112 ret = btrfs_log_all_xattrs(trans, inode, path, dst_path, ctx);
7113 if (ret)
7114 goto out_unlock;
7115 xattrs_logged = true;
7116 if (max_key.type >= BTRFS_EXTENT_DATA_KEY && !fast_search) {
7117 btrfs_release_path(path);
7118 btrfs_release_path(dst_path);
7119 ret = btrfs_log_holes(trans, inode, path);
7120 if (ret)
7121 goto out_unlock;
7122 }
7123 log_extents:
7124 btrfs_release_path(path);
7125 btrfs_release_path(dst_path);
7126 if (need_log_inode_item) {
7127 ret = log_inode_item(trans, log, dst_path, inode, inode_item_dropped);
7128 if (ret)
7129 goto out_unlock;
7130 /*
7131 * If we are doing a fast fsync and the inode was logged before
7132 * in this transaction, we don't need to log the xattrs because
7133 * they were logged before. If xattrs were added, changed or
7134 * deleted since the last time we logged the inode, then we have
7135 * already logged them because the inode had the runtime flag
7136 * BTRFS_INODE_COPY_EVERYTHING set.
7137 */
7138 if (!xattrs_logged && inode->logged_trans < trans->transid) {
7139 ret = btrfs_log_all_xattrs(trans, inode, path, dst_path, ctx);
7140 if (ret)
7141 goto out_unlock;
7142 btrfs_release_path(path);
7143 }
7144 }
7145 if (fast_search) {
7146 ret = btrfs_log_changed_extents(trans, inode, dst_path, ctx);
7147 if (ret)
7148 goto out_unlock;
7149 } else if (inode_only == LOG_INODE_ALL) {
7150 struct extent_map *em, *n;
7151
7152 write_lock(&em_tree->lock);
7153 list_for_each_entry_safe(em, n, &em_tree->modified_extents, list)
7154 list_del_init(&em->list);
7155 write_unlock(&em_tree->lock);
7156 }
7157
7158 if (full_dir_logging) {
7159 ret = log_directory_changes(trans, inode, path, dst_path, ctx);
7160 if (ret)
7161 goto out_unlock;
7162 ret = log_delayed_insertion_items(trans, inode, path,
7163 &delayed_ins_list, ctx);
7164 if (ret)
7165 goto out_unlock;
7166 ret = log_delayed_deletion_items(trans, inode, path,
7167 &delayed_del_list, ctx);
7168 if (ret)
7169 goto out_unlock;
7170 }
7171
7172 spin_lock(&inode->lock);
7173 inode->logged_trans = trans->transid;
7174 /*
7175 * Don't update last_log_commit if we logged that an inode exists.
7176 * We do this for three reasons:
7177 *
7178 * 1) We might have had buffered writes to this inode that were
7179 * flushed and had their ordered extents completed in this
7180 * transaction, but we did not previously log the inode with
7181 * LOG_INODE_ALL. Later the inode was evicted and after that
7182 * it was loaded again and this LOG_INODE_EXISTS log operation
7183 * happened. We must make sure that if an explicit fsync against
7184 * the inode is performed later, it logs the new extents, an
7185 * updated inode item, etc, and syncs the log. The same logic
7186 * applies to direct IO writes instead of buffered writes.
7187 *
7188 * 2) When we log the inode with LOG_INODE_EXISTS, its inode item
7189 * is logged with an i_size of 0 or whatever value was logged
7190 * before. If later the i_size of the inode is increased by a
7191 * truncate operation, the log is synced through an fsync of
7192 * some other inode and then finally an explicit fsync against
7193 * this inode is made, we must make sure this fsync logs the
7194 * inode with the new i_size, the hole between old i_size and
7195 * the new i_size, and syncs the log.
7196 *
7197 * 3) If we are logging that an ancestor inode exists as part of
7198 * logging a new name from a link or rename operation, don't update
7199 * its last_log_commit - otherwise if an explicit fsync is made
7200 * against an ancestor, the fsync considers the inode in the log
7201 * and doesn't sync the log, resulting in the ancestor missing after
7202 * a power failure unless the log was synced as part of an fsync
7203 * against any other unrelated inode.
7204 */
7205 if (!ctx->logging_new_name && inode_only != LOG_INODE_EXISTS)
7206 inode->last_log_commit = inode->last_sub_trans;
7207 spin_unlock(&inode->lock);
7208
7209 /*
7210 * Reset the last_reflink_trans so that the next fsync does not need to
7211 * go through the slower path when logging extents and their checksums.
7212 */
7213 if (inode_only == LOG_INODE_ALL)
7214 inode->last_reflink_trans = 0;
7215
7216 out_unlock:
7217 mutex_unlock(&inode->log_mutex);
7218 out:
7219 btrfs_free_path(path);
7220 btrfs_free_path(dst_path);
7221
7222 if (ret)
7223 free_conflicting_inodes(ctx);
7224 else
7225 ret = log_conflicting_inodes(trans, inode->root, ctx);
7226
7227 if (full_dir_logging && !ctx->logging_new_delayed_dentries) {
7228 if (!ret)
7229 ret = log_new_delayed_dentries(trans, inode,
7230 &delayed_ins_list, ctx);
7231
7232 btrfs_log_put_delayed_items(inode, &delayed_ins_list,
7233 &delayed_del_list);
7234 }
7235
7236 return ret;
7237 }
7238
btrfs_log_all_parents(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct btrfs_log_ctx * ctx)7239 static int btrfs_log_all_parents(struct btrfs_trans_handle *trans,
7240 struct btrfs_inode *inode,
7241 struct btrfs_log_ctx *ctx)
7242 {
7243 int ret;
7244 BTRFS_PATH_AUTO_FREE(path);
7245 struct btrfs_key key;
7246 struct btrfs_root *root = inode->root;
7247 const u64 ino = btrfs_ino(inode);
7248
7249 path = btrfs_alloc_path();
7250 if (!path)
7251 return -ENOMEM;
7252 path->skip_locking = true;
7253 path->search_commit_root = true;
7254
7255 key.objectid = ino;
7256 key.type = BTRFS_INODE_REF_KEY;
7257 key.offset = 0;
7258 ret = btrfs_search_slot(NULL, root, &key, path, 0, 0);
7259 if (ret < 0)
7260 return ret;
7261
7262 while (true) {
7263 struct extent_buffer *leaf = path->nodes[0];
7264 int slot = path->slots[0];
7265 u32 cur_offset = 0;
7266 u32 item_size;
7267 unsigned long ptr;
7268
7269 if (slot >= btrfs_header_nritems(leaf)) {
7270 ret = btrfs_next_leaf(root, path);
7271 if (ret < 0)
7272 return ret;
7273 if (ret > 0)
7274 break;
7275 continue;
7276 }
7277
7278 btrfs_item_key_to_cpu(leaf, &key, slot);
7279 /* BTRFS_INODE_EXTREF_KEY is BTRFS_INODE_REF_KEY + 1 */
7280 if (key.objectid != ino || key.type > BTRFS_INODE_EXTREF_KEY)
7281 break;
7282
7283 item_size = btrfs_item_size(leaf, slot);
7284 ptr = btrfs_item_ptr_offset(leaf, slot);
7285 while (cur_offset < item_size) {
7286 u64 dir_id;
7287 struct btrfs_inode *dir_inode;
7288
7289 if (key.type == BTRFS_INODE_EXTREF_KEY) {
7290 struct btrfs_inode_extref *extref;
7291
7292 extref = (struct btrfs_inode_extref *)
7293 (ptr + cur_offset);
7294 dir_id = btrfs_inode_extref_parent(leaf, extref);
7295 cur_offset += sizeof(*extref);
7296 cur_offset += btrfs_inode_extref_name_len(leaf,
7297 extref);
7298 } else {
7299 dir_id = key.offset;
7300 cur_offset = item_size;
7301 }
7302
7303 dir_inode = btrfs_iget_logging(dir_id, root);
7304 /*
7305 * If the parent inode was deleted, return an error to
7306 * fallback to a transaction commit. This is to prevent
7307 * getting an inode that was moved from one parent A to
7308 * a parent B, got its former parent A deleted and then
7309 * it got fsync'ed, from existing at both parents after
7310 * a log replay (and the old parent still existing).
7311 * Example:
7312 *
7313 * mkdir /mnt/A
7314 * mkdir /mnt/B
7315 * touch /mnt/B/bar
7316 * sync
7317 * mv /mnt/B/bar /mnt/A/bar
7318 * mv -T /mnt/A /mnt/B
7319 * fsync /mnt/B/bar
7320 * <power fail>
7321 *
7322 * If we ignore the old parent B which got deleted,
7323 * after a log replay we would have file bar linked
7324 * at both parents and the old parent B would still
7325 * exist.
7326 */
7327 if (IS_ERR(dir_inode))
7328 return PTR_ERR(dir_inode);
7329
7330 if (!need_log_inode(trans, dir_inode)) {
7331 btrfs_add_delayed_iput(dir_inode);
7332 continue;
7333 }
7334
7335 ctx->log_new_dentries = false;
7336 ret = btrfs_log_inode(trans, dir_inode, LOG_INODE_ALL, ctx);
7337 if (!ret && ctx->log_new_dentries)
7338 ret = log_new_dir_dentries(trans, dir_inode, ctx);
7339 btrfs_add_delayed_iput(dir_inode);
7340 if (ret)
7341 return ret;
7342 }
7343 path->slots[0]++;
7344 }
7345 return 0;
7346 }
7347
log_new_ancestors(struct btrfs_trans_handle * trans,struct btrfs_root * root,struct btrfs_path * path,struct btrfs_log_ctx * ctx)7348 static int log_new_ancestors(struct btrfs_trans_handle *trans,
7349 struct btrfs_root *root,
7350 struct btrfs_path *path,
7351 struct btrfs_log_ctx *ctx)
7352 {
7353 struct btrfs_key found_key;
7354
7355 btrfs_item_key_to_cpu(path->nodes[0], &found_key, path->slots[0]);
7356
7357 while (true) {
7358 struct extent_buffer *leaf;
7359 int slot;
7360 struct btrfs_key search_key;
7361 struct btrfs_inode *inode;
7362 u64 ino;
7363 int ret = 0;
7364
7365 btrfs_release_path(path);
7366
7367 ino = found_key.offset;
7368
7369 search_key.objectid = found_key.offset;
7370 search_key.type = BTRFS_INODE_ITEM_KEY;
7371 search_key.offset = 0;
7372 inode = btrfs_iget_logging(ino, root);
7373 if (IS_ERR(inode))
7374 return PTR_ERR(inode);
7375
7376 if (inode->generation >= trans->transid &&
7377 need_log_inode(trans, inode))
7378 ret = btrfs_log_inode(trans, inode, LOG_INODE_EXISTS, ctx);
7379 btrfs_add_delayed_iput(inode);
7380 if (ret)
7381 return ret;
7382
7383 if (search_key.objectid == BTRFS_FIRST_FREE_OBJECTID)
7384 break;
7385
7386 search_key.type = BTRFS_INODE_REF_KEY;
7387 ret = btrfs_search_slot(NULL, root, &search_key, path, 0, 0);
7388 if (ret < 0)
7389 return ret;
7390
7391 leaf = path->nodes[0];
7392 slot = path->slots[0];
7393 if (slot >= btrfs_header_nritems(leaf)) {
7394 ret = btrfs_next_leaf(root, path);
7395 if (ret < 0)
7396 return ret;
7397 else if (ret > 0)
7398 return -ENOENT;
7399 leaf = path->nodes[0];
7400 slot = path->slots[0];
7401 }
7402
7403 btrfs_item_key_to_cpu(leaf, &found_key, slot);
7404 if (found_key.objectid != search_key.objectid ||
7405 found_key.type != BTRFS_INODE_REF_KEY)
7406 return -ENOENT;
7407 }
7408 return 0;
7409 }
7410
log_new_ancestors_fast(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct dentry * parent,struct btrfs_log_ctx * ctx)7411 static int log_new_ancestors_fast(struct btrfs_trans_handle *trans,
7412 struct btrfs_inode *inode,
7413 struct dentry *parent,
7414 struct btrfs_log_ctx *ctx)
7415 {
7416 struct btrfs_root *root = inode->root;
7417 struct dentry *old_parent = NULL;
7418 struct super_block *sb = inode->vfs_inode.i_sb;
7419 int ret = 0;
7420
7421 while (true) {
7422 if (!parent || d_really_is_negative(parent) ||
7423 sb != parent->d_sb)
7424 break;
7425
7426 inode = BTRFS_I(d_inode(parent));
7427 if (root != inode->root)
7428 break;
7429
7430 if (inode->generation >= trans->transid &&
7431 need_log_inode(trans, inode)) {
7432 ret = btrfs_log_inode(trans, inode,
7433 LOG_INODE_EXISTS, ctx);
7434 if (ret)
7435 break;
7436 }
7437 if (IS_ROOT(parent))
7438 break;
7439
7440 parent = dget_parent(parent);
7441 dput(old_parent);
7442 old_parent = parent;
7443 }
7444 dput(old_parent);
7445
7446 return ret;
7447 }
7448
log_all_new_ancestors(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct dentry * parent,struct btrfs_log_ctx * ctx)7449 static int log_all_new_ancestors(struct btrfs_trans_handle *trans,
7450 struct btrfs_inode *inode,
7451 struct dentry *parent,
7452 struct btrfs_log_ctx *ctx)
7453 {
7454 struct btrfs_root *root = inode->root;
7455 const u64 ino = btrfs_ino(inode);
7456 BTRFS_PATH_AUTO_FREE(path);
7457 struct btrfs_key search_key;
7458 int ret;
7459
7460 /*
7461 * For a single hard link case, go through a fast path that does not
7462 * need to iterate the fs/subvolume tree.
7463 */
7464 if (inode->vfs_inode.i_nlink < 2)
7465 return log_new_ancestors_fast(trans, inode, parent, ctx);
7466
7467 path = btrfs_alloc_path();
7468 if (!path)
7469 return -ENOMEM;
7470
7471 search_key.objectid = ino;
7472 search_key.type = BTRFS_INODE_REF_KEY;
7473 search_key.offset = 0;
7474 again:
7475 ret = btrfs_search_slot(NULL, root, &search_key, path, 0, 0);
7476 if (ret < 0)
7477 return ret;
7478 if (ret == 0)
7479 path->slots[0]++;
7480
7481 while (true) {
7482 struct extent_buffer *leaf = path->nodes[0];
7483 int slot = path->slots[0];
7484 struct btrfs_key found_key;
7485
7486 if (slot >= btrfs_header_nritems(leaf)) {
7487 ret = btrfs_next_leaf(root, path);
7488 if (ret < 0)
7489 return ret;
7490 if (ret > 0)
7491 break;
7492 continue;
7493 }
7494
7495 btrfs_item_key_to_cpu(leaf, &found_key, slot);
7496 if (found_key.objectid != ino ||
7497 found_key.type > BTRFS_INODE_EXTREF_KEY)
7498 break;
7499
7500 /*
7501 * Don't deal with extended references because they are rare
7502 * cases and too complex to deal with (we would need to keep
7503 * track of which subitem we are processing for each item in
7504 * this loop, etc). So just return some error to fallback to
7505 * a transaction commit.
7506 */
7507 if (found_key.type == BTRFS_INODE_EXTREF_KEY)
7508 return -EMLINK;
7509
7510 /*
7511 * Logging ancestors needs to do more searches on the fs/subvol
7512 * tree, so it releases the path as needed to avoid deadlocks.
7513 * Keep track of the last inode ref key and resume from that key
7514 * after logging all new ancestors for the current hard link.
7515 */
7516 memcpy(&search_key, &found_key, sizeof(search_key));
7517
7518 ret = log_new_ancestors(trans, root, path, ctx);
7519 if (ret)
7520 return ret;
7521 btrfs_release_path(path);
7522 goto again;
7523 }
7524 return 0;
7525 }
7526
7527 /*
7528 * helper function around btrfs_log_inode to make sure newly created
7529 * parent directories also end up in the log. A minimal inode and backref
7530 * only logging is done of any parent directories that are older than
7531 * the last committed transaction
7532 */
btrfs_log_inode_parent(struct btrfs_trans_handle * trans,struct btrfs_inode * inode,struct dentry * parent,int inode_only,struct btrfs_log_ctx * ctx)7533 static int btrfs_log_inode_parent(struct btrfs_trans_handle *trans,
7534 struct btrfs_inode *inode,
7535 struct dentry *parent,
7536 int inode_only,
7537 struct btrfs_log_ctx *ctx)
7538 {
7539 struct btrfs_root *root = inode->root;
7540 struct btrfs_fs_info *fs_info = root->fs_info;
7541 int ret = 0;
7542 bool log_dentries;
7543
7544 if (btrfs_test_opt(fs_info, NOTREELOG))
7545 return BTRFS_LOG_FORCE_COMMIT;
7546
7547 if (btrfs_root_refs(&root->root_item) == 0)
7548 return BTRFS_LOG_FORCE_COMMIT;
7549
7550 /*
7551 * If we're logging an inode from a subvolume created in the current
7552 * transaction we must force a commit since the root is not persisted.
7553 */
7554 if (btrfs_root_generation(&root->root_item) == trans->transid)
7555 return BTRFS_LOG_FORCE_COMMIT;
7556
7557 /* Skip already logged inodes and without new extents. */
7558 if (btrfs_inode_in_log(inode, trans->transid) &&
7559 list_empty(&ctx->ordered_extents))
7560 return BTRFS_NO_LOG_SYNC;
7561
7562 ret = start_log_trans(trans, root, ctx);
7563 if (ret)
7564 return ret;
7565
7566 ret = btrfs_log_inode(trans, inode, inode_only, ctx);
7567 if (ret)
7568 goto end_trans;
7569
7570 /*
7571 * for regular files, if its inode is already on disk, we don't
7572 * have to worry about the parents at all. This is because
7573 * we can use the last_unlink_trans field to record renames
7574 * and other fun in this file.
7575 */
7576 if (S_ISREG(inode->vfs_inode.i_mode) &&
7577 inode->generation < trans->transid &&
7578 inode->last_unlink_trans < trans->transid) {
7579 ret = 0;
7580 goto end_trans;
7581 }
7582
7583 /*
7584 * Track if we need to log dentries because ctx->log_new_dentries can
7585 * be modified in the call chains below.
7586 */
7587 log_dentries = ctx->log_new_dentries;
7588
7589 /*
7590 * On unlink we must make sure all our current and old parent directory
7591 * inodes are fully logged. This is to prevent leaving dangling
7592 * directory index entries in directories that were our parents but are
7593 * not anymore. Not doing this results in old parent directory being
7594 * impossible to delete after log replay (rmdir will always fail with
7595 * error -ENOTEMPTY).
7596 *
7597 * Example 1:
7598 *
7599 * mkdir testdir
7600 * touch testdir/foo
7601 * ln testdir/foo testdir/bar
7602 * sync
7603 * unlink testdir/bar
7604 * xfs_io -c fsync testdir/foo
7605 * <power failure>
7606 * mount fs, triggers log replay
7607 *
7608 * If we don't log the parent directory (testdir), after log replay the
7609 * directory still has an entry pointing to the file inode using the bar
7610 * name, but a matching BTRFS_INODE_[REF|EXTREF]_KEY does not exist and
7611 * the file inode has a link count of 1.
7612 *
7613 * Example 2:
7614 *
7615 * mkdir testdir
7616 * touch foo
7617 * ln foo testdir/foo2
7618 * ln foo testdir/foo3
7619 * sync
7620 * unlink testdir/foo3
7621 * xfs_io -c fsync foo
7622 * <power failure>
7623 * mount fs, triggers log replay
7624 *
7625 * Similar as the first example, after log replay the parent directory
7626 * testdir still has an entry pointing to the inode file with name foo3
7627 * but the file inode does not have a matching BTRFS_INODE_REF_KEY item
7628 * and has a link count of 2.
7629 */
7630 if (inode->last_unlink_trans >= trans->transid) {
7631 ret = btrfs_log_all_parents(trans, inode, ctx);
7632 if (ret)
7633 goto end_trans;
7634 }
7635
7636 ret = log_all_new_ancestors(trans, inode, parent, ctx);
7637 if (ret)
7638 goto end_trans;
7639
7640 if (log_dentries)
7641 ret = log_new_dir_dentries(trans, inode, ctx);
7642 end_trans:
7643 if (ret < 0) {
7644 btrfs_set_log_full_commit(trans);
7645 ret = BTRFS_LOG_FORCE_COMMIT;
7646 }
7647
7648 if (ret)
7649 btrfs_remove_log_ctx(root, ctx);
7650 btrfs_end_log_trans(root);
7651
7652 return ret;
7653 }
7654
7655 /*
7656 * it is not safe to log dentry if the chunk root has added new
7657 * chunks. This returns 0 if the dentry was logged, and 1 otherwise.
7658 * If this returns 1, you must commit the transaction to safely get your
7659 * data on disk.
7660 */
btrfs_log_dentry_safe(struct btrfs_trans_handle * trans,struct dentry * dentry,struct btrfs_log_ctx * ctx)7661 int btrfs_log_dentry_safe(struct btrfs_trans_handle *trans,
7662 struct dentry *dentry,
7663 struct btrfs_log_ctx *ctx)
7664 {
7665 struct dentry *parent = dget_parent(dentry);
7666 int ret;
7667
7668 ret = btrfs_log_inode_parent(trans, BTRFS_I(d_inode(dentry)), parent,
7669 LOG_INODE_ALL, ctx);
7670 dput(parent);
7671
7672 return ret;
7673 }
7674
7675 /*
7676 * should be called during mount to recover any replay any log trees
7677 * from the FS
7678 */
btrfs_recover_log_trees(struct btrfs_root * log_root_tree)7679 int btrfs_recover_log_trees(struct btrfs_root *log_root_tree)
7680 {
7681 int ret;
7682 struct btrfs_path *path;
7683 struct btrfs_trans_handle *trans;
7684 struct btrfs_key key;
7685 struct btrfs_fs_info *fs_info = log_root_tree->fs_info;
7686 struct walk_control wc = {
7687 .process_func = process_one_buffer,
7688 .stage = LOG_WALK_PIN_ONLY,
7689 };
7690
7691 path = btrfs_alloc_path();
7692 if (!path)
7693 return -ENOMEM;
7694
7695 set_bit(BTRFS_FS_LOG_RECOVERING, &fs_info->flags);
7696
7697 trans = btrfs_start_transaction(fs_info->tree_root, 0);
7698 if (IS_ERR(trans)) {
7699 ret = PTR_ERR(trans);
7700 goto error;
7701 }
7702
7703 wc.trans = trans;
7704 wc.pin = true;
7705 wc.log = log_root_tree;
7706
7707 ret = walk_log_tree(&wc);
7708 wc.log = NULL;
7709 if (unlikely(ret)) {
7710 btrfs_abort_transaction(trans, ret);
7711 goto error;
7712 }
7713
7714 again:
7715 key.objectid = BTRFS_TREE_LOG_OBJECTID;
7716 key.type = BTRFS_ROOT_ITEM_KEY;
7717 key.offset = (u64)-1;
7718
7719 while (1) {
7720 struct btrfs_key found_key;
7721
7722 ret = btrfs_search_slot(NULL, log_root_tree, &key, path, 0, 0);
7723
7724 if (unlikely(ret < 0)) {
7725 btrfs_abort_transaction(trans, ret);
7726 goto error;
7727 }
7728 if (ret > 0) {
7729 if (path->slots[0] == 0)
7730 break;
7731 path->slots[0]--;
7732 }
7733 btrfs_item_key_to_cpu(path->nodes[0], &found_key,
7734 path->slots[0]);
7735 btrfs_release_path(path);
7736 if (found_key.objectid != BTRFS_TREE_LOG_OBJECTID)
7737 break;
7738
7739 wc.log = btrfs_read_tree_root(log_root_tree, &found_key);
7740 if (IS_ERR(wc.log)) {
7741 ret = PTR_ERR(wc.log);
7742 wc.log = NULL;
7743 btrfs_abort_transaction(trans, ret);
7744 goto error;
7745 }
7746
7747 wc.root = btrfs_get_fs_root(fs_info, found_key.offset, true);
7748 if (IS_ERR(wc.root)) {
7749 ret = PTR_ERR(wc.root);
7750 wc.root = NULL;
7751 if (unlikely(ret != -ENOENT)) {
7752 btrfs_abort_transaction(trans, ret);
7753 goto error;
7754 }
7755
7756 /*
7757 * We didn't find the subvol, likely because it was
7758 * deleted. This is ok, simply skip this log and go to
7759 * the next one.
7760 *
7761 * We need to exclude the root because we can't have
7762 * other log replays overwriting this log as we'll read
7763 * it back in a few more times. This will keep our
7764 * block from being modified, and we'll just bail for
7765 * each subsequent pass.
7766 */
7767 ret = btrfs_pin_extent_for_log_replay(trans, wc.log->node);
7768 if (unlikely(ret)) {
7769 btrfs_abort_transaction(trans, ret);
7770 goto error;
7771 }
7772 goto next;
7773 }
7774
7775 wc.root->log_root = wc.log;
7776 ret = btrfs_record_root_in_trans(trans, wc.root);
7777 if (unlikely(ret)) {
7778 btrfs_abort_transaction(trans, ret);
7779 goto next;
7780 }
7781
7782 ret = walk_log_tree(&wc);
7783 if (unlikely(ret)) {
7784 btrfs_abort_transaction(trans, ret);
7785 goto next;
7786 }
7787
7788 if (wc.stage == LOG_WALK_REPLAY_ALL) {
7789 struct btrfs_root *root = wc.root;
7790
7791 wc.subvol_path = path;
7792 ret = fixup_inode_link_counts(&wc);
7793 wc.subvol_path = NULL;
7794 if (unlikely(ret)) {
7795 btrfs_abort_transaction(trans, ret);
7796 goto next;
7797 }
7798 /*
7799 * We have just replayed everything, and the highest
7800 * objectid of fs roots probably has changed in case
7801 * some inode_item's got replayed.
7802 *
7803 * root->objectid_mutex is not acquired as log replay
7804 * could only happen during mount.
7805 */
7806 ret = btrfs_init_root_free_objectid(root);
7807 if (unlikely(ret)) {
7808 btrfs_abort_transaction(trans, ret);
7809 goto next;
7810 }
7811 }
7812 next:
7813 if (wc.root) {
7814 wc.root->log_root = NULL;
7815 btrfs_put_root(wc.root);
7816 }
7817 btrfs_put_root(wc.log);
7818 wc.log = NULL;
7819
7820 if (ret)
7821 goto error;
7822 if (found_key.offset == 0)
7823 break;
7824 key.offset = found_key.offset - 1;
7825 }
7826 btrfs_release_path(path);
7827
7828 /* step one is to pin it all, step two is to replay just inodes */
7829 if (wc.pin) {
7830 wc.pin = false;
7831 wc.process_func = replay_one_buffer;
7832 wc.stage = LOG_WALK_REPLAY_INODES;
7833 goto again;
7834 }
7835 /* step three is to replay everything */
7836 if (wc.stage < LOG_WALK_REPLAY_ALL) {
7837 wc.stage++;
7838 goto again;
7839 }
7840
7841 btrfs_free_path(path);
7842
7843 /* step 4: commit the transaction, which also unpins the blocks */
7844 ret = btrfs_commit_transaction(trans);
7845 if (ret)
7846 return ret;
7847
7848 clear_bit(BTRFS_FS_LOG_RECOVERING, &fs_info->flags);
7849
7850 return 0;
7851 error:
7852 if (wc.trans)
7853 btrfs_end_transaction(wc.trans);
7854 btrfs_put_root(wc.log);
7855 clear_bit(BTRFS_FS_LOG_RECOVERING, &fs_info->flags);
7856 btrfs_free_path(path);
7857 return ret;
7858 }
7859
7860 /*
7861 * there are some corner cases where we want to force a full
7862 * commit instead of allowing a directory to be logged.
7863 *
7864 * They revolve around files there were unlinked from the directory, and
7865 * this function updates the parent directory so that a full commit is
7866 * properly done if it is fsync'd later after the unlinks are done.
7867 *
7868 * Must be called before the unlink operations (updates to the subvolume tree,
7869 * inodes, etc) are done.
7870 */
btrfs_record_unlink_dir(struct btrfs_trans_handle * trans,struct btrfs_inode * dir,struct btrfs_inode * inode,bool for_rename)7871 void btrfs_record_unlink_dir(struct btrfs_trans_handle *trans,
7872 struct btrfs_inode *dir, struct btrfs_inode *inode,
7873 bool for_rename)
7874 {
7875 /*
7876 * when we're logging a file, if it hasn't been renamed
7877 * or unlinked, and its inode is fully committed on disk,
7878 * we don't have to worry about walking up the directory chain
7879 * to log its parents.
7880 *
7881 * So, we use the last_unlink_trans field to put this transid
7882 * into the file. When the file is logged we check it and
7883 * don't log the parents if the file is fully on disk.
7884 */
7885 mutex_lock(&inode->log_mutex);
7886 inode->last_unlink_trans = trans->transid;
7887 mutex_unlock(&inode->log_mutex);
7888
7889 if (!for_rename)
7890 return;
7891
7892 /*
7893 * If this directory was already logged, any new names will be logged
7894 * with btrfs_log_new_name() and old names will be deleted from the log
7895 * tree with btrfs_del_dir_entries_in_log() or with
7896 * btrfs_del_inode_ref_in_log().
7897 */
7898 if (inode_logged(trans, dir, NULL) == 1)
7899 return;
7900
7901 /*
7902 * If the inode we're about to unlink was logged before, the log will be
7903 * properly updated with the new name with btrfs_log_new_name() and the
7904 * old name removed with btrfs_del_dir_entries_in_log() or with
7905 * btrfs_del_inode_ref_in_log().
7906 */
7907 if (inode_logged(trans, inode, NULL) == 1)
7908 return;
7909
7910 /*
7911 * when renaming files across directories, if the directory
7912 * there we're unlinking from gets fsync'd later on, there's
7913 * no way to find the destination directory later and fsync it
7914 * properly. So, we have to be conservative and force commits
7915 * so the new name gets discovered.
7916 */
7917 mutex_lock(&dir->log_mutex);
7918 dir->last_unlink_trans = trans->transid;
7919 mutex_unlock(&dir->log_mutex);
7920 }
7921
7922 /*
7923 * Make sure that if someone attempts to fsync the parent directory of a deleted
7924 * snapshot, it ends up triggering a transaction commit. This is to guarantee
7925 * that after replaying the log tree of the parent directory's root we will not
7926 * see the snapshot anymore and at log replay time we will not see any log tree
7927 * corresponding to the deleted snapshot's root, which could lead to replaying
7928 * it after replaying the log tree of the parent directory (which would replay
7929 * the snapshot delete operation).
7930 *
7931 * Must be called before the actual snapshot destroy operation (updates to the
7932 * parent root and tree of tree roots trees, etc) are done.
7933 */
btrfs_record_snapshot_destroy(struct btrfs_trans_handle * trans,struct btrfs_inode * dir)7934 void btrfs_record_snapshot_destroy(struct btrfs_trans_handle *trans,
7935 struct btrfs_inode *dir)
7936 {
7937 mutex_lock(&dir->log_mutex);
7938 dir->last_unlink_trans = trans->transid;
7939 mutex_unlock(&dir->log_mutex);
7940 }
7941
7942 /*
7943 * Call this when creating a subvolume in a directory.
7944 * Because we don't commit a transaction when creating a subvolume, we can't
7945 * allow the directory pointing to the subvolume to be logged with an entry that
7946 * points to an unpersisted root if we are still in the transaction used to
7947 * create the subvolume, so make any attempt to log the directory to result in a
7948 * full log sync.
7949 * Also we don't need to worry with renames, since btrfs_rename() marks the log
7950 * for full commit when renaming a subvolume.
7951 *
7952 * Must be called before creating the subvolume entry in its parent directory.
7953 */
btrfs_record_new_subvolume(const struct btrfs_trans_handle * trans,struct btrfs_inode * dir)7954 void btrfs_record_new_subvolume(const struct btrfs_trans_handle *trans,
7955 struct btrfs_inode *dir)
7956 {
7957 mutex_lock(&dir->log_mutex);
7958 dir->last_unlink_trans = trans->transid;
7959 mutex_unlock(&dir->log_mutex);
7960 }
7961
7962 /*
7963 * Update the log after adding a new name for an inode.
7964 *
7965 * @trans: Transaction handle.
7966 * @old_dentry: The dentry associated with the old name and the old
7967 * parent directory.
7968 * @old_dir: The inode of the previous parent directory for the case
7969 * of a rename. For a link operation, it must be NULL.
7970 * @old_dir_index: The index number associated with the old name, meaningful
7971 * only for rename operations (when @old_dir is not NULL).
7972 * Ignored for link operations.
7973 * @parent: The dentry associated with the directory under which the
7974 * new name is located.
7975 *
7976 * Call this after adding a new name for an inode, as a result of a link or
7977 * rename operation, and it will properly update the log to reflect the new name.
7978 */
btrfs_log_new_name(struct btrfs_trans_handle * trans,struct dentry * old_dentry,struct btrfs_inode * old_dir,u64 old_dir_index,struct dentry * parent)7979 void btrfs_log_new_name(struct btrfs_trans_handle *trans,
7980 struct dentry *old_dentry, struct btrfs_inode *old_dir,
7981 u64 old_dir_index, struct dentry *parent)
7982 {
7983 struct btrfs_inode *inode = BTRFS_I(d_inode(old_dentry));
7984 struct btrfs_root *root = inode->root;
7985 struct btrfs_log_ctx ctx;
7986 bool log_pinned = false;
7987 int ret;
7988
7989 /* The inode has a new name (ref/extref), so make sure we log it. */
7990 set_bit(BTRFS_INODE_COPY_EVERYTHING, &inode->runtime_flags);
7991
7992 btrfs_init_log_ctx(&ctx, inode);
7993 ctx.logging_new_name = true;
7994
7995 /*
7996 * this will force the logging code to walk the dentry chain
7997 * up for the file
7998 */
7999 if (!S_ISDIR(inode->vfs_inode.i_mode))
8000 inode->last_unlink_trans = trans->transid;
8001
8002 /*
8003 * if this inode hasn't been logged and directory we're renaming it
8004 * from hasn't been logged, we don't need to log it
8005 */
8006 ret = inode_logged(trans, inode, NULL);
8007 if (ret < 0) {
8008 goto out;
8009 } else if (ret == 0) {
8010 if (!old_dir)
8011 return;
8012 /*
8013 * If the inode was not logged and we are doing a rename (old_dir is not
8014 * NULL), check if old_dir was logged - if it was not we can return and
8015 * do nothing.
8016 */
8017 ret = inode_logged(trans, old_dir, NULL);
8018 if (ret < 0)
8019 goto out;
8020 else if (ret == 0)
8021 return;
8022 }
8023 ret = 0;
8024
8025 /*
8026 * Now that we know we need to update the log, allocate the scratch eb
8027 * for the context before joining a log transaction below, as this can
8028 * take time and therefore we could delay log commits from other tasks.
8029 */
8030 btrfs_init_log_ctx_scratch_eb(&ctx);
8031
8032 /*
8033 * If we are doing a rename (old_dir is not NULL) from a directory that
8034 * was previously logged, make sure that on log replay we get the old
8035 * dir entry deleted. This is needed because we will also log the new
8036 * name of the renamed inode, so we need to make sure that after log
8037 * replay we don't end up with both the new and old dir entries existing.
8038 */
8039 if (old_dir && old_dir->logged_trans == trans->transid) {
8040 struct btrfs_root *log = old_dir->root->log_root;
8041 struct btrfs_path *path;
8042 struct fscrypt_name fname;
8043
8044 ASSERT(old_dir_index >= BTRFS_DIR_START_INDEX,
8045 "old_dir_index=%llu", old_dir_index);
8046
8047 ret = fscrypt_setup_filename(&old_dir->vfs_inode,
8048 &old_dentry->d_name, 0, &fname);
8049 if (ret)
8050 goto out;
8051
8052 path = btrfs_alloc_path();
8053 if (!path) {
8054 ret = -ENOMEM;
8055 fscrypt_free_filename(&fname);
8056 goto out;
8057 }
8058
8059 /*
8060 * We have two inodes to update in the log, the old directory and
8061 * the inode that got renamed, so we must pin the log to prevent
8062 * anyone from syncing the log until we have updated both inodes
8063 * in the log.
8064 */
8065 ret = join_running_log_trans(root);
8066 /*
8067 * At least one of the inodes was logged before, so this should
8068 * not fail, but if it does, it's not serious, just bail out and
8069 * mark the log for a full commit.
8070 */
8071 if (WARN_ON_ONCE(ret < 0)) {
8072 btrfs_free_path(path);
8073 fscrypt_free_filename(&fname);
8074 goto out;
8075 }
8076
8077 log_pinned = true;
8078
8079 /*
8080 * Other concurrent task might be logging the old directory,
8081 * as it can be triggered when logging other inode that had or
8082 * still has a dentry in the old directory. We lock the old
8083 * directory's log_mutex to ensure the deletion of the old
8084 * name is persisted, because during directory logging we
8085 * delete all BTRFS_DIR_LOG_INDEX_KEY keys and the deletion of
8086 * the old name's dir index item is in the delayed items, so
8087 * it could be missed by an in progress directory logging.
8088 */
8089 mutex_lock(&old_dir->log_mutex);
8090 ret = del_logged_dentry(trans, log, path, btrfs_ino(old_dir),
8091 &fname.disk_name, old_dir_index);
8092 if (ret > 0) {
8093 /*
8094 * The dentry does not exist in the log, so record its
8095 * deletion.
8096 */
8097 btrfs_release_path(path);
8098 ret = insert_dir_log_key(trans, log, path,
8099 btrfs_ino(old_dir),
8100 old_dir_index, old_dir_index);
8101 }
8102 mutex_unlock(&old_dir->log_mutex);
8103
8104 btrfs_free_path(path);
8105 fscrypt_free_filename(&fname);
8106 if (ret < 0)
8107 goto out;
8108 }
8109
8110 /*
8111 * We don't care about the return value. If we fail to log the new name
8112 * then we know the next attempt to sync the log will fallback to a full
8113 * transaction commit (due to a call to btrfs_set_log_full_commit()), so
8114 * we don't need to worry about getting a log committed that has an
8115 * inconsistent state after a rename operation.
8116 */
8117 btrfs_log_inode_parent(trans, inode, parent, LOG_INODE_EXISTS, &ctx);
8118 ASSERT(list_empty(&ctx.conflict_inodes));
8119 out:
8120 /*
8121 * If an error happened mark the log for a full commit because it's not
8122 * consistent and up to date or we couldn't find out if one of the
8123 * inodes was logged before in this transaction. Do it before unpinning
8124 * the log, to avoid any races with someone else trying to commit it.
8125 */
8126 if (ret < 0)
8127 btrfs_set_log_full_commit(trans);
8128 if (log_pinned)
8129 btrfs_end_log_trans(root);
8130 free_extent_buffer(ctx.scratch_eb);
8131 }
8132
8133