1 // SPDX-License-Identifier: GPL-2.0
3 * Copyright (c) 2000-2005 Silicon Graphics, Inc.
8 #include "xfs_shared.h"
9 #include "xfs_format.h"
10 #include "xfs_log_format.h"
11 #include "xfs_trans_resv.h"
13 #include "xfs_mount.h"
14 #include "xfs_defer.h"
15 #include "xfs_trans.h"
16 #include "xfs_error.h"
17 #include "xfs_btree.h"
18 #include "xfs_alloc.h"
19 #include "xfs_fsops.h"
20 #include "xfs_trans_space.h"
21 #include "xfs_rtalloc.h"
22 #include "xfs_trace.h"
25 #include "xfs_ag_resv.h"
31 xfs_growfs_data_private(
32 xfs_mount_t
*mp
, /* mount point for filesystem */
33 xfs_growfs_data_t
*in
) /* growfs data input struct */
37 xfs_agnumber_t nagcount
;
38 xfs_agnumber_t nagimax
= 0;
39 xfs_rfsblock_t nb
, nb_mod
;
41 xfs_agnumber_t oagcount
;
43 LIST_HEAD (buffer_list
);
44 struct aghdr_init_data id
= {};
47 if (nb
< mp
->m_sb
.sb_dblocks
)
49 if ((error
= xfs_sb_validate_fsb_count(&mp
->m_sb
, nb
)))
51 error
= xfs_buf_read_uncached(mp
->m_ddev_targp
,
52 XFS_FSB_TO_BB(mp
, nb
) - XFS_FSS_TO_BB(mp
, 1),
53 XFS_FSS_TO_BB(mp
, 1), 0, &bp
, NULL
);
58 new = nb
; /* use new as a temporary here */
59 nb_mod
= do_div(new, mp
->m_sb
.sb_agblocks
);
60 nagcount
= new + (nb_mod
!= 0);
61 if (nb_mod
&& nb_mod
< XFS_MIN_AG_BLOCKS
) {
63 nb
= (xfs_rfsblock_t
)nagcount
* mp
->m_sb
.sb_agblocks
;
64 if (nb
< mp
->m_sb
.sb_dblocks
)
67 new = nb
- mp
->m_sb
.sb_dblocks
;
68 oagcount
= mp
->m_sb
.sb_agcount
;
70 /* allocate the new per-ag structures */
71 if (nagcount
> oagcount
) {
72 error
= xfs_initialize_perag(mp
, nagcount
, &nagimax
);
77 error
= xfs_trans_alloc(mp
, &M_RES(mp
)->tr_growdata
,
78 XFS_GROWFS_SPACE_RES(mp
), 0, XFS_TRANS_RESERVE
, &tp
);
83 * Write new AG headers to disk. Non-transactional, but need to be
84 * written and completed prior to the growfs transaction being logged.
85 * To do this, we use a delayed write buffer list and wait for
86 * submission and IO completion of the list as a whole. This allows the
87 * IO subsystem to merge all the AG headers in a single AG into a single
88 * IO and hide most of the latency of the IO from us.
90 * This also means that if we get an error whilst building the buffer
91 * list to write, we can cancel the entire list without having written
94 INIT_LIST_HEAD(&id
.buffer_list
);
95 for (id
.agno
= nagcount
- 1;
97 id
.agno
--, new -= id
.agsize
) {
99 if (id
.agno
== nagcount
- 1)
101 (id
.agno
* (xfs_rfsblock_t
)mp
->m_sb
.sb_agblocks
);
103 id
.agsize
= mp
->m_sb
.sb_agblocks
;
105 error
= xfs_ag_init_headers(mp
, &id
);
107 xfs_buf_delwri_cancel(&id
.buffer_list
);
108 goto out_trans_cancel
;
111 error
= xfs_buf_delwri_submit(&id
.buffer_list
);
113 goto out_trans_cancel
;
115 xfs_trans_agblocks_delta(tp
, id
.nfree
);
117 /* If there are new blocks in the old last AG, extend it. */
119 error
= xfs_ag_extend_space(mp
, tp
, &id
, new);
121 goto out_trans_cancel
;
125 * Update changed superblock fields transactionally. These are not
126 * seen by the rest of the world until the transaction commit applies
127 * them atomically to the superblock.
129 if (nagcount
> oagcount
)
130 xfs_trans_mod_sb(tp
, XFS_TRANS_SB_AGCOUNT
, nagcount
- oagcount
);
131 if (nb
> mp
->m_sb
.sb_dblocks
)
132 xfs_trans_mod_sb(tp
, XFS_TRANS_SB_DBLOCKS
,
133 nb
- mp
->m_sb
.sb_dblocks
);
135 xfs_trans_mod_sb(tp
, XFS_TRANS_SB_FDBLOCKS
, id
.nfree
);
136 xfs_trans_set_sync(tp
);
137 error
= xfs_trans_commit(tp
);
141 /* New allocation groups fully initialized, so update mount struct */
143 mp
->m_maxagi
= nagimax
;
144 xfs_set_low_space_thresholds(mp
);
145 mp
->m_alloc_set_aside
= xfs_alloc_set_aside(mp
);
148 * If we expanded the last AG, free the per-AG reservation
149 * so we can reinitialize it with the new size.
152 struct xfs_perag
*pag
;
154 pag
= xfs_perag_get(mp
, id
.agno
);
155 error
= xfs_ag_resv_free(pag
);
162 * Reserve AG metadata blocks. ENOSPC here does not mean there was a
163 * growfs failure, just that there still isn't space for new user data
164 * after the grow has been run.
166 error
= xfs_fs_reserve_ag_blocks(mp
);
167 if (error
== -ENOSPC
)
172 xfs_trans_cancel(tp
);
177 xfs_growfs_log_private(
178 xfs_mount_t
*mp
, /* mount point for filesystem */
179 xfs_growfs_log_t
*in
) /* growfs log input struct */
184 if (nb
< XFS_MIN_LOG_BLOCKS
|| nb
< XFS_B_TO_FSB(mp
, XFS_MIN_LOG_BYTES
))
186 if (nb
== mp
->m_sb
.sb_logblocks
&&
187 in
->isint
== (mp
->m_sb
.sb_logstart
!= 0))
190 * Moving the log is hard, need new interfaces to sync
191 * the log first, hold off all activity while moving it.
192 * Can have shorter or longer log in the same space,
193 * or transform internal to external log or vice versa.
200 struct xfs_mount
*mp
,
203 struct xfs_trans
*tp
;
210 error
= xfs_trans_alloc(mp
, &M_RES(mp
)->tr_growdata
,
211 XFS_GROWFS_SPACE_RES(mp
), 0, XFS_TRANS_RESERVE
, &tp
);
215 dpct
= imaxpct
- mp
->m_sb
.sb_imax_pct
;
216 xfs_trans_mod_sb(tp
, XFS_TRANS_SB_IMAXPCT
, dpct
);
217 xfs_trans_set_sync(tp
);
218 return xfs_trans_commit(tp
);
222 * protected versions of growfs function acquire and release locks on the mount
223 * point - exported through ioctls: XFS_IOC_FSGROWFSDATA, XFS_IOC_FSGROWFSLOG,
228 struct xfs_mount
*mp
,
229 struct xfs_growfs_data
*in
)
233 if (!capable(CAP_SYS_ADMIN
))
235 if (!mutex_trylock(&mp
->m_growlock
))
238 /* update imaxpct separately to the physical grow of the filesystem */
239 if (in
->imaxpct
!= mp
->m_sb
.sb_imax_pct
) {
240 error
= xfs_growfs_imaxpct(mp
, in
->imaxpct
);
245 if (in
->newblocks
!= mp
->m_sb
.sb_dblocks
) {
246 error
= xfs_growfs_data_private(mp
, in
);
251 /* Post growfs calculations needed to reflect new state in operations */
252 if (mp
->m_sb
.sb_imax_pct
) {
253 uint64_t icount
= mp
->m_sb
.sb_dblocks
* mp
->m_sb
.sb_imax_pct
;
255 mp
->m_maxicount
= icount
<< mp
->m_sb
.sb_inopblog
;
259 /* Update secondary superblocks now the physical grow has completed */
260 error
= xfs_update_secondary_sbs(mp
);
264 * Increment the generation unconditionally, the error could be from
265 * updating the secondary superblocks, in which case the new size
269 mutex_unlock(&mp
->m_growlock
);
276 xfs_growfs_log_t
*in
)
280 if (!capable(CAP_SYS_ADMIN
))
282 if (!mutex_trylock(&mp
->m_growlock
))
284 error
= xfs_growfs_log_private(mp
, in
);
285 mutex_unlock(&mp
->m_growlock
);
290 * exported through ioctl XFS_IOC_FSCOUNTS
296 xfs_fsop_counts_t
*cnt
)
298 cnt
->allocino
= percpu_counter_read_positive(&mp
->m_icount
);
299 cnt
->freeino
= percpu_counter_read_positive(&mp
->m_ifree
);
300 cnt
->freedata
= percpu_counter_read_positive(&mp
->m_fdblocks
) -
301 mp
->m_alloc_set_aside
;
303 spin_lock(&mp
->m_sb_lock
);
304 cnt
->freertx
= mp
->m_sb
.sb_frextents
;
305 spin_unlock(&mp
->m_sb_lock
);
310 * exported through ioctl XFS_IOC_SET_RESBLKS & XFS_IOC_GET_RESBLKS
312 * xfs_reserve_blocks is called to set m_resblks
313 * in the in-core mount table. The number of unused reserved blocks
314 * is kept in m_resblks_avail.
316 * Reserve the requested number of blocks if available. Otherwise return
317 * as many as possible to satisfy the request. The actual number
318 * reserved are returned in outval
320 * A null inval pointer indicates that only the current reserved blocks
321 * available should be returned no settings are changed.
328 xfs_fsop_resblks_t
*outval
)
330 int64_t lcounter
, delta
;
331 int64_t fdblks_delta
= 0;
336 /* If inval is null, report current values and return */
337 if (inval
== (uint64_t *)NULL
) {
340 outval
->resblks
= mp
->m_resblks
;
341 outval
->resblks_avail
= mp
->m_resblks_avail
;
348 * With per-cpu counters, this becomes an interesting problem. we need
349 * to work out if we are freeing or allocation blocks first, then we can
350 * do the modification as necessary.
352 * We do this under the m_sb_lock so that if we are near ENOSPC, we will
353 * hold out any changes while we work out what to do. This means that
354 * the amount of free space can change while we do this, so we need to
355 * retry if we end up trying to reserve more space than is available.
357 spin_lock(&mp
->m_sb_lock
);
360 * If our previous reservation was larger than the current value,
361 * then move any unused blocks back to the free pool. Modify the resblks
362 * counters directly since we shouldn't have any problems unreserving
365 if (mp
->m_resblks
> request
) {
366 lcounter
= mp
->m_resblks_avail
- request
;
367 if (lcounter
> 0) { /* release unused blocks */
368 fdblks_delta
= lcounter
;
369 mp
->m_resblks_avail
-= lcounter
;
371 mp
->m_resblks
= request
;
373 spin_unlock(&mp
->m_sb_lock
);
374 error
= xfs_mod_fdblocks(mp
, fdblks_delta
, 0);
375 spin_lock(&mp
->m_sb_lock
);
382 * If the request is larger than the current reservation, reserve the
383 * blocks before we update the reserve counters. Sample m_fdblocks and
384 * perform a partial reservation if the request exceeds free space.
388 free
= percpu_counter_sum(&mp
->m_fdblocks
) -
389 mp
->m_alloc_set_aside
;
393 delta
= request
- mp
->m_resblks
;
394 lcounter
= free
- delta
;
396 /* We can't satisfy the request, just get what we can */
399 fdblks_delta
= delta
;
402 * We'll either succeed in getting space from the free block
403 * count or we'll get an ENOSPC. If we get a ENOSPC, it means
404 * things changed while we were calculating fdblks_delta and so
405 * we should try again to see if there is anything left to
408 * Don't set the reserved flag here - we don't want to reserve
409 * the extra reserve blocks from the reserve.....
411 spin_unlock(&mp
->m_sb_lock
);
412 error
= xfs_mod_fdblocks(mp
, -fdblks_delta
, 0);
413 spin_lock(&mp
->m_sb_lock
);
414 } while (error
== -ENOSPC
);
417 * Update the reserve counters if blocks have been successfully
420 if (!error
&& fdblks_delta
) {
421 mp
->m_resblks
+= fdblks_delta
;
422 mp
->m_resblks_avail
+= fdblks_delta
;
427 outval
->resblks
= mp
->m_resblks
;
428 outval
->resblks_avail
= mp
->m_resblks_avail
;
431 spin_unlock(&mp
->m_sb_lock
);
441 case XFS_FSOP_GOING_FLAGS_DEFAULT
: {
442 struct super_block
*sb
= freeze_bdev(mp
->m_super
->s_bdev
);
444 if (sb
&& !IS_ERR(sb
)) {
445 xfs_force_shutdown(mp
, SHUTDOWN_FORCE_UMOUNT
);
446 thaw_bdev(sb
->s_bdev
, sb
);
451 case XFS_FSOP_GOING_FLAGS_LOGFLUSH
:
452 xfs_force_shutdown(mp
, SHUTDOWN_FORCE_UMOUNT
);
454 case XFS_FSOP_GOING_FLAGS_NOLOGFLUSH
:
455 xfs_force_shutdown(mp
,
456 SHUTDOWN_FORCE_UMOUNT
| SHUTDOWN_LOG_IO_ERROR
);
466 * Force a shutdown of the filesystem instantly while keeping the filesystem
467 * consistent. We don't do an unmount here; just shutdown the shop, make sure
468 * that absolutely nothing persistent happens to this filesystem after this
472 xfs_do_force_shutdown(
473 struct xfs_mount
*mp
,
478 bool logerror
= flags
& SHUTDOWN_LOG_IO_ERROR
;
481 * No need to duplicate efforts.
483 if (XFS_FORCED_SHUTDOWN(mp
) && !logerror
)
487 * This flags XFS_MOUNT_FS_SHUTDOWN, makes sure that we don't
488 * queue up anybody new on the log reservations, and wakes up
489 * everybody who's sleeping on log reservations to tell them
492 if (xfs_log_force_umount(mp
, logerror
))
495 if (flags
& SHUTDOWN_FORCE_UMOUNT
) {
497 "User initiated shutdown received. Shutting down filesystem");
502 "%s(0x%x) called from line %d of file %s. Return address = "PTR_FMT
,
503 __func__
, flags
, lnnum
, fname
, __return_address
);
505 if (flags
& SHUTDOWN_CORRUPT_INCORE
) {
506 xfs_alert_tag(mp
, XFS_PTAG_SHUTDOWN_CORRUPT
,
507 "Corruption of in-memory data detected. Shutting down filesystem");
508 if (XFS_ERRLEVEL_HIGH
<= xfs_error_level
)
510 } else if (logerror
) {
511 xfs_alert_tag(mp
, XFS_PTAG_SHUTDOWN_LOGERROR
,
512 "Log I/O Error Detected. Shutting down filesystem");
513 } else if (flags
& SHUTDOWN_DEVICE_REQ
) {
514 xfs_alert_tag(mp
, XFS_PTAG_SHUTDOWN_IOERROR
,
515 "All device paths lost. Shutting down filesystem");
516 } else if (!(flags
& SHUTDOWN_REMOTE_REQ
)) {
517 xfs_alert_tag(mp
, XFS_PTAG_SHUTDOWN_IOERROR
,
518 "I/O Error Detected. Shutting down filesystem");
522 "Please unmount the filesystem and rectify the problem(s)");
526 * Reserve free space for per-AG metadata.
529 xfs_fs_reserve_ag_blocks(
530 struct xfs_mount
*mp
)
533 struct xfs_perag
*pag
;
537 for (agno
= 0; agno
< mp
->m_sb
.sb_agcount
; agno
++) {
538 pag
= xfs_perag_get(mp
, agno
);
539 err2
= xfs_ag_resv_init(pag
, NULL
);
545 if (error
&& error
!= -ENOSPC
) {
547 "Error %d reserving per-AG metadata reserve pool.", error
);
548 xfs_force_shutdown(mp
, SHUTDOWN_CORRUPT_INCORE
);
555 * Free space reserved for per-AG metadata.
558 xfs_fs_unreserve_ag_blocks(
559 struct xfs_mount
*mp
)
562 struct xfs_perag
*pag
;
566 for (agno
= 0; agno
< mp
->m_sb
.sb_agcount
; agno
++) {
567 pag
= xfs_perag_get(mp
, agno
);
568 err2
= xfs_ag_resv_free(pag
);
576 "Error %d freeing per-AG metadata reserve pool.", error
);