inode.c 55.1 KB
Newer Older
L
Linus Torvalds 已提交
1 2
/*
 * (C) 1997 Linus Torvalds
3
 * (C) 1999 Andrea Arcangeli <andrea@suse.de> (dynamic inode allocation)
L
Linus Torvalds 已提交
4
 */
A
Al Viro 已提交
5
#include <linux/export.h>
L
Linus Torvalds 已提交
6 7 8 9 10 11 12 13
#include <linux/fs.h>
#include <linux/mm.h>
#include <linux/backing-dev.h>
#include <linux/hash.h>
#include <linux/swap.h>
#include <linux/security.h>
#include <linux/cdev.h>
#include <linux/bootmem.h>
14
#include <linux/fsnotify.h>
15
#include <linux/mount.h>
A
Al Viro 已提交
16
#include <linux/posix_acl.h>
17
#include <linux/prefetch.h>
18
#include <linux/buffer_head.h> /* for inode_has_buffers */
M
Miklos Szeredi 已提交
19
#include <linux/ratelimit.h>
20
#include <linux/list_lru.h>
21
#include <trace/events/writeback.h>
22
#include "internal.h"
L
Linus Torvalds 已提交
23

24
/*
25
 * Inode locking rules:
26 27 28
 *
 * inode->i_lock protects:
 *   inode->i_state, inode->i_hash, __iget()
29
 * Inode LRU list locks protect:
30
 *   inode->i_sb->s_inode_lru, inode->i_lru
31 32
 * inode->i_sb->s_inode_list_lock protects:
 *   inode->i_sb->s_inodes, inode->i_sb_list
33
 * bdi->wb.list_lock protects:
34
 *   bdi->wb.b_{dirty,io,more_io,dirty_time}, inode->i_io_list
35 36
 * inode_hash_lock protects:
 *   inode_hashtable, inode->i_hash
37 38
 *
 * Lock ordering:
39
 *
40
 * inode->i_sb->s_inode_list_lock
41
 *   inode->i_lock
42
 *     Inode LRU list locks
43
 *
44
 * bdi->wb.list_lock
45
 *   inode->i_lock
46 47
 *
 * inode_hash_lock
48
 *   inode->i_sb->s_inode_list_lock
49 50 51 52
 *   inode->i_lock
 *
 * iunique_lock
 *   inode_hash_lock
53 54
 */

55 56
static unsigned int i_hash_mask __read_mostly;
static unsigned int i_hash_shift __read_mostly;
57 58
static struct hlist_head *inode_hashtable __read_mostly;
static __cacheline_aligned_in_smp DEFINE_SPINLOCK(inode_hash_lock);
L
Linus Torvalds 已提交
59

J
Jens Axboe 已提交
60 61 62 63 64 65 66 67
/*
 * Empty aops. Can be used for the cases where the user does not
 * define any of the address_space operations.
 */
const struct address_space_operations empty_aops = {
};
EXPORT_SYMBOL(empty_aops);

L
Linus Torvalds 已提交
68 69 70 71 72
/*
 * Statistics gathering..
 */
struct inodes_stat_t inodes_stat;

73 74
static DEFINE_PER_CPU(unsigned long, nr_inodes);
static DEFINE_PER_CPU(unsigned long, nr_unused);
75

76
static struct kmem_cache *inode_cachep __read_mostly;
L
Linus Torvalds 已提交
77

78
static long get_nr_inodes(void)
79
{
80
	int i;
81
	long sum = 0;
82 83 84
	for_each_possible_cpu(i)
		sum += per_cpu(nr_inodes, i);
	return sum < 0 ? 0 : sum;
85 86
}

87
static inline long get_nr_inodes_unused(void)
88
{
89
	int i;
90
	long sum = 0;
91 92 93
	for_each_possible_cpu(i)
		sum += per_cpu(nr_unused, i);
	return sum < 0 ? 0 : sum;
94 95
}

96
long get_nr_dirty_inodes(void)
97
{
98
	/* not actually dirty inodes, but a wild approximation */
99
	long nr_dirty = get_nr_inodes() - get_nr_inodes_unused();
100 101 102 103 104 105 106
	return nr_dirty > 0 ? nr_dirty : 0;
}

/*
 * Handle nr_inode sysctl
 */
#ifdef CONFIG_SYSCTL
107
int proc_nr_inodes(struct ctl_table *table, int write,
108 109 110
		   void __user *buffer, size_t *lenp, loff_t *ppos)
{
	inodes_stat.nr_inodes = get_nr_inodes();
111
	inodes_stat.nr_unused = get_nr_inodes_unused();
112
	return proc_doulongvec_minmax(table, write, buffer, lenp, ppos);
113 114 115
}
#endif

116 117 118 119 120
static int no_open(struct inode *inode, struct file *file)
{
	return -ENXIO;
}

D
David Chinner 已提交
121
/**
122
 * inode_init_always - perform inode structure initialisation
R
Randy Dunlap 已提交
123 124
 * @sb: superblock inode belongs to
 * @inode: inode to initialise
D
David Chinner 已提交
125 126 127 128
 *
 * These are initializations that need to be done on every inode
 * allocation as the fields are not initialised by slab allocation.
 */
129
int inode_init_always(struct super_block *sb, struct inode *inode)
L
Linus Torvalds 已提交
130
{
131
	static const struct inode_operations empty_iops;
132
	static const struct file_operations no_open_fops = {.open = no_open};
133
	struct address_space *const mapping = &inode->i_data;
D
David Chinner 已提交
134 135 136 137 138 139

	inode->i_sb = sb;
	inode->i_blkbits = sb->s_blocksize_bits;
	inode->i_flags = 0;
	atomic_set(&inode->i_count, 1);
	inode->i_op = &empty_iops;
140
	inode->i_fop = &no_open_fops;
M
Miklos Szeredi 已提交
141
	inode->__i_nlink = 1;
142
	inode->i_opflags = 0;
143 144
	if (sb->s_xattr)
		inode->i_opflags |= IOP_XATTR;
145 146
	i_uid_write(inode, 0);
	i_gid_write(inode, 0);
D
David Chinner 已提交
147 148
	atomic_set(&inode->i_writecount, 0);
	inode->i_size = 0;
149
	inode->i_write_hint = WRITE_LIFE_NOT_SET;
D
David Chinner 已提交
150 151 152 153 154 155
	inode->i_blocks = 0;
	inode->i_bytes = 0;
	inode->i_generation = 0;
	inode->i_pipe = NULL;
	inode->i_bdev = NULL;
	inode->i_cdev = NULL;
A
Al Viro 已提交
156
	inode->i_link = NULL;
A
Al Viro 已提交
157
	inode->i_dir_seq = 0;
D
David Chinner 已提交
158 159
	inode->i_rdev = 0;
	inode->dirtied_when = 0;
M
Mimi Zohar 已提交
160

161 162 163 164 165 166
#ifdef CONFIG_CGROUP_WRITEBACK
	inode->i_wb_frn_winner = 0;
	inode->i_wb_frn_avg_time = 0;
	inode->i_wb_frn_history = 0;
#endif

M
Mimi Zohar 已提交
167
	if (security_inode_alloc(inode))
168
		goto out;
D
David Chinner 已提交
169 170 171
	spin_lock_init(&inode->i_lock);
	lockdep_set_class(&inode->i_lock, &sb->s_type->i_lock_key);

172 173
	init_rwsem(&inode->i_rwsem);
	lockdep_set_class(&inode->i_rwsem, &sb->s_type->i_mutex_key);
D
David Chinner 已提交
174

C
Christoph Hellwig 已提交
175
	atomic_set(&inode->i_dio_count, 0);
D
David Chinner 已提交
176 177 178 179

	mapping->a_ops = &empty_aops;
	mapping->host = inode;
	mapping->flags = 0;
180
	atomic_set(&mapping->i_mmap_writable, 0);
H
Hugh Dickins 已提交
181
	mapping_set_gfp_mask(mapping, GFP_HIGHUSER_MOVABLE);
182
	mapping->private_data = NULL;
D
David Chinner 已提交
183 184 185
	mapping->writeback_index = 0;
	inode->i_private = NULL;
	inode->i_mapping = mapping;
A
Al Viro 已提交
186
	INIT_HLIST_HEAD(&inode->i_dentry);	/* buggered by rcu freeing */
A
Al Viro 已提交
187 188 189
#ifdef CONFIG_FS_POSIX_ACL
	inode->i_acl = inode->i_default_acl = ACL_NOT_CACHED;
#endif
D
David Chinner 已提交
190

191 192 193
#ifdef CONFIG_FSNOTIFY
	inode->i_fsnotify_mask = 0;
#endif
194
	inode->i_flctx = NULL;
195
	this_cpu_inc(nr_inodes);
196

197 198 199
	return 0;
out:
	return -ENOMEM;
L
Linus Torvalds 已提交
200
}
D
David Chinner 已提交
201 202 203 204 205 206 207 208 209 210 211
EXPORT_SYMBOL(inode_init_always);

static struct inode *alloc_inode(struct super_block *sb)
{
	struct inode *inode;

	if (sb->s_op->alloc_inode)
		inode = sb->s_op->alloc_inode(sb);
	else
		inode = kmem_cache_alloc(inode_cachep, GFP_KERNEL);

212 213 214 215 216 217 218 219 220 221 222 223
	if (!inode)
		return NULL;

	if (unlikely(inode_init_always(sb, inode))) {
		if (inode->i_sb->s_op->destroy_inode)
			inode->i_sb->s_op->destroy_inode(inode);
		else
			kmem_cache_free(inode_cachep, inode);
		return NULL;
	}

	return inode;
D
David Chinner 已提交
224
}
L
Linus Torvalds 已提交
225

226 227 228 229 230 231
void free_inode_nonrcu(struct inode *inode)
{
	kmem_cache_free(inode_cachep, inode);
}
EXPORT_SYMBOL(free_inode_nonrcu);

C
Christoph Hellwig 已提交
232
void __destroy_inode(struct inode *inode)
L
Linus Torvalds 已提交
233
{
234
	BUG_ON(inode_has_buffers(inode));
235
	inode_detach_wb(inode);
L
Linus Torvalds 已提交
236
	security_inode_free(inode);
237
	fsnotify_inode_delete(inode);
238
	locks_free_lock_context(inode);
M
Miklos Szeredi 已提交
239 240 241 242 243
	if (!inode->i_nlink) {
		WARN_ON(atomic_long_read(&inode->i_sb->s_remove_count) == 0);
		atomic_long_dec(&inode->i_sb->s_remove_count);
	}

A
Al Viro 已提交
244
#ifdef CONFIG_FS_POSIX_ACL
245
	if (inode->i_acl && !is_uncached_acl(inode->i_acl))
A
Al Viro 已提交
246
		posix_acl_release(inode->i_acl);
247
	if (inode->i_default_acl && !is_uncached_acl(inode->i_default_acl))
A
Al Viro 已提交
248 249
		posix_acl_release(inode->i_default_acl);
#endif
250
	this_cpu_dec(nr_inodes);
C
Christoph Hellwig 已提交
251 252 253
}
EXPORT_SYMBOL(__destroy_inode);

N
Nick Piggin 已提交
254 255 256 257 258 259
static void i_callback(struct rcu_head *head)
{
	struct inode *inode = container_of(head, struct inode, i_rcu);
	kmem_cache_free(inode_cachep, inode);
}

C
Christoph Hellwig 已提交
260
static void destroy_inode(struct inode *inode)
C
Christoph Hellwig 已提交
261
{
N
Nick Piggin 已提交
262
	BUG_ON(!list_empty(&inode->i_lru));
C
Christoph Hellwig 已提交
263
	__destroy_inode(inode);
L
Linus Torvalds 已提交
264 265 266
	if (inode->i_sb->s_op->destroy_inode)
		inode->i_sb->s_op->destroy_inode(inode);
	else
N
Nick Piggin 已提交
267
		call_rcu(&inode->i_rcu, i_callback);
L
Linus Torvalds 已提交
268 269
}

M
Miklos Szeredi 已提交
270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338
/**
 * drop_nlink - directly drop an inode's link count
 * @inode: inode
 *
 * This is a low-level filesystem helper to replace any
 * direct filesystem manipulation of i_nlink.  In cases
 * where we are attempting to track writes to the
 * filesystem, a decrement to zero means an imminent
 * write when the file is truncated and actually unlinked
 * on the filesystem.
 */
void drop_nlink(struct inode *inode)
{
	WARN_ON(inode->i_nlink == 0);
	inode->__i_nlink--;
	if (!inode->i_nlink)
		atomic_long_inc(&inode->i_sb->s_remove_count);
}
EXPORT_SYMBOL(drop_nlink);

/**
 * clear_nlink - directly zero an inode's link count
 * @inode: inode
 *
 * This is a low-level filesystem helper to replace any
 * direct filesystem manipulation of i_nlink.  See
 * drop_nlink() for why we care about i_nlink hitting zero.
 */
void clear_nlink(struct inode *inode)
{
	if (inode->i_nlink) {
		inode->__i_nlink = 0;
		atomic_long_inc(&inode->i_sb->s_remove_count);
	}
}
EXPORT_SYMBOL(clear_nlink);

/**
 * set_nlink - directly set an inode's link count
 * @inode: inode
 * @nlink: new nlink (should be non-zero)
 *
 * This is a low-level filesystem helper to replace any
 * direct filesystem manipulation of i_nlink.
 */
void set_nlink(struct inode *inode, unsigned int nlink)
{
	if (!nlink) {
		clear_nlink(inode);
	} else {
		/* Yes, some filesystems do change nlink from zero to one */
		if (inode->i_nlink == 0)
			atomic_long_dec(&inode->i_sb->s_remove_count);

		inode->__i_nlink = nlink;
	}
}
EXPORT_SYMBOL(set_nlink);

/**
 * inc_nlink - directly increment an inode's link count
 * @inode: inode
 *
 * This is a low-level filesystem helper to replace any
 * direct filesystem manipulation of i_nlink.  Currently,
 * it is only here for parity with dec_nlink().
 */
void inc_nlink(struct inode *inode)
{
339 340
	if (unlikely(inode->i_nlink == 0)) {
		WARN_ON(!(inode->i_state & I_LINKABLE));
M
Miklos Szeredi 已提交
341
		atomic_long_dec(&inode->i_sb->s_remove_count);
342
	}
M
Miklos Szeredi 已提交
343 344 345 346 347

	inode->__i_nlink++;
}
EXPORT_SYMBOL(inc_nlink);

348 349 350
void address_space_init_once(struct address_space *mapping)
{
	memset(mapping, 0, sizeof(*mapping));
351
	INIT_RADIX_TREE(&mapping->page_tree, GFP_ATOMIC | __GFP_ACCOUNT);
352
	spin_lock_init(&mapping->tree_lock);
353
	init_rwsem(&mapping->i_mmap_rwsem);
354 355
	INIT_LIST_HEAD(&mapping->private_list);
	spin_lock_init(&mapping->private_lock);
356
	mapping->i_mmap = RB_ROOT;
357 358 359
}
EXPORT_SYMBOL(address_space_init_once);

L
Linus Torvalds 已提交
360 361 362 363 364 365 366 367 368 369
/*
 * These are initializations that only need to be done
 * once, because the fields are idempotent across use
 * of the inode, so let the slab aware of that.
 */
void inode_init_once(struct inode *inode)
{
	memset(inode, 0, sizeof(*inode));
	INIT_HLIST_NODE(&inode->i_hash);
	INIT_LIST_HEAD(&inode->i_devices);
370
	INIT_LIST_HEAD(&inode->i_io_list);
371
	INIT_LIST_HEAD(&inode->i_wb_list);
N
Nick Piggin 已提交
372
	INIT_LIST_HEAD(&inode->i_lru);
373
	address_space_init_once(&inode->i_data);
L
Linus Torvalds 已提交
374 375 376 377
	i_size_ordered_init(inode);
}
EXPORT_SYMBOL(inode_init_once);

378
static void init_once(void *foo)
L
Linus Torvalds 已提交
379
{
380
	struct inode *inode = (struct inode *) foo;
L
Linus Torvalds 已提交
381

C
Christoph Lameter 已提交
382
	inode_init_once(inode);
L
Linus Torvalds 已提交
383 384 385
}

/*
386
 * inode->i_lock must be held
L
Linus Torvalds 已提交
387
 */
388
void __iget(struct inode *inode)
L
Linus Torvalds 已提交
389
{
390 391
	atomic_inc(&inode->i_count);
}
392

A
Al Viro 已提交
393 394 395 396 397 398 399 400 401
/*
 * get additional reference to inode; caller must already hold one.
 */
void ihold(struct inode *inode)
{
	WARN_ON(atomic_inc_return(&inode->i_count) < 2);
}
EXPORT_SYMBOL(ihold);

402 403
static void inode_lru_list_add(struct inode *inode)
{
404
	if (list_lru_add(&inode->i_sb->s_inode_lru, &inode->i_lru))
405
		this_cpu_inc(nr_unused);
406 407
	else
		inode->i_state |= I_REFERENCED;
408
}
409

410 411 412 413 414 415 416
/*
 * Add inode to LRU if needed (inode is unused and clean).
 *
 * Needs inode->i_lock held.
 */
void inode_add_lru(struct inode *inode)
{
417 418
	if (!(inode->i_state & (I_DIRTY_ALL | I_SYNC |
				I_FREEING | I_WILL_FREE)) &&
419 420 421 422 423
	    !atomic_read(&inode->i_count) && inode->i_sb->s_flags & MS_ACTIVE)
		inode_lru_list_add(inode);
}


424 425
static void inode_lru_list_del(struct inode *inode)
{
426 427

	if (list_lru_del(&inode->i_sb->s_inode_lru, &inode->i_lru))
428
		this_cpu_dec(nr_unused);
L
Linus Torvalds 已提交
429 430
}

431 432 433 434 435 436
/**
 * inode_sb_list_add - add inode to the superblock list of inodes
 * @inode: inode to add
 */
void inode_sb_list_add(struct inode *inode)
{
437
	spin_lock(&inode->i_sb->s_inode_list_lock);
438
	list_add(&inode->i_sb_list, &inode->i_sb->s_inodes);
439
	spin_unlock(&inode->i_sb->s_inode_list_lock);
440 441 442
}
EXPORT_SYMBOL_GPL(inode_sb_list_add);

443
static inline void inode_sb_list_del(struct inode *inode)
444
{
445
	if (!list_empty(&inode->i_sb_list)) {
446
		spin_lock(&inode->i_sb->s_inode_list_lock);
447
		list_del_init(&inode->i_sb_list);
448
		spin_unlock(&inode->i_sb->s_inode_list_lock);
449
	}
450 451
}

452 453 454 455 456 457
static unsigned long hash(struct super_block *sb, unsigned long hashval)
{
	unsigned long tmp;

	tmp = (hashval * (unsigned long)sb) ^ (GOLDEN_RATIO_PRIME + hashval) /
			L1_CACHE_BYTES;
458 459
	tmp = tmp ^ ((tmp ^ GOLDEN_RATIO_PRIME) >> i_hash_shift);
	return tmp & i_hash_mask;
460 461 462 463 464 465 466 467 468 469 470 471
}

/**
 *	__insert_inode_hash - hash an inode
 *	@inode: unhashed inode
 *	@hashval: unsigned long value used to locate this object in the
 *		inode_hashtable.
 *
 *	Add an inode to the inode hash for this superblock.
 */
void __insert_inode_hash(struct inode *inode, unsigned long hashval)
{
472 473
	struct hlist_head *b = inode_hashtable + hash(inode->i_sb, hashval);

474
	spin_lock(&inode_hash_lock);
475
	spin_lock(&inode->i_lock);
476
	hlist_add_head(&inode->i_hash, b);
477
	spin_unlock(&inode->i_lock);
478
	spin_unlock(&inode_hash_lock);
479 480 481 482
}
EXPORT_SYMBOL(__insert_inode_hash);

/**
483
 *	__remove_inode_hash - remove an inode from the hash
484 485 486 487
 *	@inode: inode to unhash
 *
 *	Remove an inode from the superblock.
 */
488
void __remove_inode_hash(struct inode *inode)
489
{
490
	spin_lock(&inode_hash_lock);
491
	spin_lock(&inode->i_lock);
492
	hlist_del_init(&inode->i_hash);
493
	spin_unlock(&inode->i_lock);
494
	spin_unlock(&inode_hash_lock);
495
}
496
EXPORT_SYMBOL(__remove_inode_hash);
497

498
void clear_inode(struct inode *inode)
A
Al Viro 已提交
499 500
{
	might_sleep();
501 502 503 504 505 506
	/*
	 * We have to cycle tree_lock here because reclaim can be still in the
	 * process of removing the last page (in __delete_from_page_cache())
	 * and we must not free mapping under it.
	 */
	spin_lock_irq(&inode->i_data.tree_lock);
A
Al Viro 已提交
507
	BUG_ON(inode->i_data.nrpages);
508
	BUG_ON(inode->i_data.nrexceptional);
509
	spin_unlock_irq(&inode->i_data.tree_lock);
A
Al Viro 已提交
510 511 512
	BUG_ON(!list_empty(&inode->i_data.private_list));
	BUG_ON(!(inode->i_state & I_FREEING));
	BUG_ON(inode->i_state & I_CLEAR);
513
	BUG_ON(!list_empty(&inode->i_wb_list));
N
Nick Piggin 已提交
514
	/* don't need i_lock here, no concurrent mods to i_state */
A
Al Viro 已提交
515 516
	inode->i_state = I_FREEING | I_CLEAR;
}
517
EXPORT_SYMBOL(clear_inode);
A
Al Viro 已提交
518

D
Dave Chinner 已提交
519 520 521 522 523 524 525 526 527 528 529 530 531
/*
 * Free the inode passed in, removing it from the lists it is still connected
 * to. We remove any pages still attached to the inode and wait for any IO that
 * is still in progress before finally destroying the inode.
 *
 * An inode must already be marked I_FREEING so that we avoid the inode being
 * moved back onto lists if we race with other code that manipulates the lists
 * (e.g. writeback_single_inode). The caller is responsible for setting this.
 *
 * An inode must already be removed from the LRU list before being evicted from
 * the cache. This should occur atomically with setting the I_FREEING state
 * flag, so no inodes here should ever be on the LRU when being evicted.
 */
532
static void evict(struct inode *inode)
533 534 535
{
	const struct super_operations *op = inode->i_sb->s_op;

D
Dave Chinner 已提交
536 537 538
	BUG_ON(!(inode->i_state & I_FREEING));
	BUG_ON(!list_empty(&inode->i_lru));

539 540
	if (!list_empty(&inode->i_io_list))
		inode_io_list_del(inode);
541

542 543
	inode_sb_list_del(inode);

544 545 546 547 548 549 550
	/*
	 * Wait for flusher thread to be done with the inode so that filesystem
	 * does not start destroying it while writeback is still running. Since
	 * the inode has I_FREEING set, flusher thread won't start new work on
	 * the inode.  We just have to wait for running writeback to finish.
	 */
	inode_wait_for_writeback(inode);
551

A
Al Viro 已提交
552 553
	if (op->evict_inode) {
		op->evict_inode(inode);
554
	} else {
555
		truncate_inode_pages_final(&inode->i_data);
556
		clear_inode(inode);
557
	}
558 559 560 561
	if (S_ISBLK(inode->i_mode) && inode->i_bdev)
		bd_forget(inode);
	if (S_ISCHR(inode->i_mode) && inode->i_cdev)
		cd_forget(inode);
D
Dave Chinner 已提交
562 563 564 565 566 567 568 569 570

	remove_inode_hash(inode);

	spin_lock(&inode->i_lock);
	wake_up_bit(&inode->i_state, __I_NEW);
	BUG_ON(inode->i_state != (I_FREEING | I_CLEAR));
	spin_unlock(&inode->i_lock);

	destroy_inode(inode);
571 572
}

L
Linus Torvalds 已提交
573 574 575 576 577 578 579 580 581 582 583 584
/*
 * dispose_list - dispose of the contents of a local list
 * @head: the head of the list to free
 *
 * Dispose-list gets a local list with local inodes in it, so it doesn't
 * need to worry about list corruption and SMP locks.
 */
static void dispose_list(struct list_head *head)
{
	while (!list_empty(head)) {
		struct inode *inode;

N
Nick Piggin 已提交
585 586
		inode = list_first_entry(head, struct inode, i_lru);
		list_del_init(&inode->i_lru);
L
Linus Torvalds 已提交
587

588
		evict(inode);
589
		cond_resched();
L
Linus Torvalds 已提交
590 591 592
	}
}

A
Al Viro 已提交
593 594 595 596 597 598 599 600
/**
 * evict_inodes	- evict all evictable inodes for a superblock
 * @sb:		superblock to operate on
 *
 * Make sure that no inodes with zero refcount are retained.  This is
 * called by superblock shutdown after having MS_ACTIVE flag removed,
 * so any inode reaching zero refcount during or after that call will
 * be immediately evicted.
L
Linus Torvalds 已提交
601
 */
A
Al Viro 已提交
602
void evict_inodes(struct super_block *sb)
L
Linus Torvalds 已提交
603
{
A
Al Viro 已提交
604 605
	struct inode *inode, *next;
	LIST_HEAD(dispose);
L
Linus Torvalds 已提交
606

607
again:
608
	spin_lock(&sb->s_inode_list_lock);
A
Al Viro 已提交
609 610
	list_for_each_entry_safe(inode, next, &sb->s_inodes, i_sb_list) {
		if (atomic_read(&inode->i_count))
N
Nick Piggin 已提交
611
			continue;
612 613 614 615

		spin_lock(&inode->i_lock);
		if (inode->i_state & (I_NEW | I_FREEING | I_WILL_FREE)) {
			spin_unlock(&inode->i_lock);
L
Linus Torvalds 已提交
616
			continue;
617
		}
A
Al Viro 已提交
618 619

		inode->i_state |= I_FREEING;
620
		inode_lru_list_del(inode);
621
		spin_unlock(&inode->i_lock);
622
		list_add(&inode->i_lru, &dispose);
623 624 625 626 627 628 629 630 631 632 633 634

		/*
		 * We can have a ton of inodes to evict at unmount time given
		 * enough memory, check to see if we need to go to sleep for a
		 * bit so we don't livelock.
		 */
		if (need_resched()) {
			spin_unlock(&sb->s_inode_list_lock);
			cond_resched();
			dispose_list(&dispose);
			goto again;
		}
L
Linus Torvalds 已提交
635
	}
636
	spin_unlock(&sb->s_inode_list_lock);
A
Al Viro 已提交
637 638

	dispose_list(&dispose);
L
Linus Torvalds 已提交
639 640 641
}

/**
642 643
 * invalidate_inodes	- attempt to free all inodes on a superblock
 * @sb:		superblock to operate on
644
 * @kill_dirty: flag to guide handling of dirty inodes
L
Linus Torvalds 已提交
645
 *
646 647
 * Attempts to free all inodes for a given superblock.  If there were any
 * busy inodes return a non-zero value, else zero.
648 649
 * If @kill_dirty is set, discard dirty inodes too, otherwise treat
 * them as busy.
L
Linus Torvalds 已提交
650
 */
651
int invalidate_inodes(struct super_block *sb, bool kill_dirty)
L
Linus Torvalds 已提交
652
{
653
	int busy = 0;
654 655
	struct inode *inode, *next;
	LIST_HEAD(dispose);
L
Linus Torvalds 已提交
656

657
	spin_lock(&sb->s_inode_list_lock);
658
	list_for_each_entry_safe(inode, next, &sb->s_inodes, i_sb_list) {
659 660 661
		spin_lock(&inode->i_lock);
		if (inode->i_state & (I_NEW | I_FREEING | I_WILL_FREE)) {
			spin_unlock(&inode->i_lock);
N
Nick Piggin 已提交
662
			continue;
663
		}
664
		if (inode->i_state & I_DIRTY_ALL && !kill_dirty) {
665
			spin_unlock(&inode->i_lock);
666 667 668
			busy = 1;
			continue;
		}
669
		if (atomic_read(&inode->i_count)) {
670
			spin_unlock(&inode->i_lock);
671
			busy = 1;
L
Linus Torvalds 已提交
672 673
			continue;
		}
674 675

		inode->i_state |= I_FREEING;
676
		inode_lru_list_del(inode);
677
		spin_unlock(&inode->i_lock);
678
		list_add(&inode->i_lru, &dispose);
L
Linus Torvalds 已提交
679
	}
680
	spin_unlock(&sb->s_inode_list_lock);
L
Linus Torvalds 已提交
681

682
	dispose_list(&dispose);
L
Linus Torvalds 已提交
683 684 685 686 687

	return busy;
}

/*
688
 * Isolate the inode from the LRU in preparation for freeing it.
L
Linus Torvalds 已提交
689 690
 *
 * Any inodes which are pinned purely because of attached pagecache have their
691 692
 * pagecache removed.  If the inode has metadata buffers attached to
 * mapping->private_list then try to remove them.
L
Linus Torvalds 已提交
693
 *
694 695 696 697 698 699 700
 * If the inode has the I_REFERENCED flag set, then it means that it has been
 * used recently - the flag is set in iput_final(). When we encounter such an
 * inode, clear the flag and move it to the back of the LRU so it gets another
 * pass through the LRU before it gets reclaimed. This is necessary because of
 * the fact we are doing lazy LRU updates to minimise lock contention so the
 * LRU does not have strict ordering. Hence we don't want to reclaim inodes
 * with this flag set because they are the inodes that are out of order.
L
Linus Torvalds 已提交
701
 */
702 703
static enum lru_status inode_lru_isolate(struct list_head *item,
		struct list_lru_one *lru, spinlock_t *lru_lock, void *arg)
L
Linus Torvalds 已提交
704
{
705 706
	struct list_head *freeable = arg;
	struct inode	*inode = container_of(item, struct inode, i_lru);
L
Linus Torvalds 已提交
707

708 709 710 711 712 713
	/*
	 * we are inverting the lru lock/inode->i_lock here, so use a trylock.
	 * If we fail to get the lock, just skip it.
	 */
	if (!spin_trylock(&inode->i_lock))
		return LRU_SKIP;
L
Linus Torvalds 已提交
714

715 716 717 718 719 720
	/*
	 * Referenced or dirty inodes are still in use. Give them another pass
	 * through the LRU as we canot reclaim them now.
	 */
	if (atomic_read(&inode->i_count) ||
	    (inode->i_state & ~I_REFERENCED)) {
721
		list_lru_isolate(lru, &inode->i_lru);
722 723 724 725
		spin_unlock(&inode->i_lock);
		this_cpu_dec(nr_unused);
		return LRU_REMOVED;
	}
L
Linus Torvalds 已提交
726

727 728 729 730 731 732
	/* recently referenced inodes get one more pass */
	if (inode->i_state & I_REFERENCED) {
		inode->i_state &= ~I_REFERENCED;
		spin_unlock(&inode->i_lock);
		return LRU_ROTATE;
	}
L
Linus Torvalds 已提交
733

734 735 736 737 738 739 740 741 742 743 744 745 746
	if (inode_has_buffers(inode) || inode->i_data.nrpages) {
		__iget(inode);
		spin_unlock(&inode->i_lock);
		spin_unlock(lru_lock);
		if (remove_inode_buffers(inode)) {
			unsigned long reap;
			reap = invalidate_mapping_pages(&inode->i_data, 0, -1);
			if (current_is_kswapd())
				__count_vm_events(KSWAPD_INODESTEAL, reap);
			else
				__count_vm_events(PGINODESTEAL, reap);
			if (current->reclaim_state)
				current->reclaim_state->reclaimed_slab += reap;
747
		}
748 749 750 751
		iput(inode);
		spin_lock(lru_lock);
		return LRU_RETRY;
	}
752

753 754
	WARN_ON(inode->i_state & I_NEW);
	inode->i_state |= I_FREEING;
755
	list_lru_isolate_move(lru, &inode->i_lru, freeable);
756
	spin_unlock(&inode->i_lock);
757

758 759 760
	this_cpu_dec(nr_unused);
	return LRU_REMOVED;
}
N
Nick Piggin 已提交
761

762 763 764 765 766 767
/*
 * Walk the superblock inode LRU for freeable inodes and attempt to free them.
 * This is called from the superblock shrinker function with a number of inodes
 * to trim from the LRU. Inodes to be freed are moved to a temporary list and
 * then are freed outside inode_lock by dispose_list().
 */
768
long prune_icache_sb(struct super_block *sb, struct shrink_control *sc)
769 770 771
{
	LIST_HEAD(freeable);
	long freed;
L
Linus Torvalds 已提交
772

773 774
	freed = list_lru_shrink_walk(&sb->s_inode_lru, sc,
				     inode_lru_isolate, &freeable);
L
Linus Torvalds 已提交
775
	dispose_list(&freeable);
776
	return freed;
L
Linus Torvalds 已提交
777 778 779 780 781 782
}

static void __wait_on_freeing_inode(struct inode *inode);
/*
 * Called with the inode lock held.
 */
783 784 785 786
static struct inode *find_inode(struct super_block *sb,
				struct hlist_head *head,
				int (*test)(struct inode *, void *),
				void *data)
L
Linus Torvalds 已提交
787
{
788
	struct inode *inode = NULL;
L
Linus Torvalds 已提交
789 790

repeat:
791
	hlist_for_each_entry(inode, head, i_hash) {
792
		if (inode->i_sb != sb)
L
Linus Torvalds 已提交
793
			continue;
794
		if (!test(inode, data))
L
Linus Torvalds 已提交
795
			continue;
796
		spin_lock(&inode->i_lock);
A
Al Viro 已提交
797
		if (inode->i_state & (I_FREEING|I_WILL_FREE)) {
L
Linus Torvalds 已提交
798 799 800
			__wait_on_freeing_inode(inode);
			goto repeat;
		}
801
		__iget(inode);
802
		spin_unlock(&inode->i_lock);
803
		return inode;
L
Linus Torvalds 已提交
804
	}
805
	return NULL;
L
Linus Torvalds 已提交
806 807 808 809 810 811
}

/*
 * find_inode_fast is the fast path version of find_inode, see the comment at
 * iget_locked for details.
 */
812 813
static struct inode *find_inode_fast(struct super_block *sb,
				struct hlist_head *head, unsigned long ino)
L
Linus Torvalds 已提交
814
{
815
	struct inode *inode = NULL;
L
Linus Torvalds 已提交
816 817

repeat:
818
	hlist_for_each_entry(inode, head, i_hash) {
819
		if (inode->i_ino != ino)
L
Linus Torvalds 已提交
820
			continue;
821
		if (inode->i_sb != sb)
L
Linus Torvalds 已提交
822
			continue;
823
		spin_lock(&inode->i_lock);
A
Al Viro 已提交
824
		if (inode->i_state & (I_FREEING|I_WILL_FREE)) {
L
Linus Torvalds 已提交
825 826 827
			__wait_on_freeing_inode(inode);
			goto repeat;
		}
828
		__iget(inode);
829
		spin_unlock(&inode->i_lock);
830
		return inode;
L
Linus Torvalds 已提交
831
	}
832
	return NULL;
833 834
}

835 836 837 838
/*
 * Each cpu owns a range of LAST_INO_BATCH numbers.
 * 'shared_last_ino' is dirtied only once out of LAST_INO_BATCH allocations,
 * to renew the exhausted range.
839
 *
840 841 842 843 844 845 846 847 848
 * This does not significantly increase overflow rate because every CPU can
 * consume at most LAST_INO_BATCH-1 unused inode numbers. So there is
 * NR_CPUS*(LAST_INO_BATCH-1) wastage. At 4096 and 1024, this is ~0.1% of the
 * 2^32 range, and is a worst-case. Even a 50% wastage would only increase
 * overflow rate by 2x, which does not seem too significant.
 *
 * On a 32bit, non LFS stat() call, glibc will generate an EOVERFLOW
 * error if st_ino won't fit in target struct field. Use 32bit counter
 * here to attempt to avoid that.
849
 */
850 851 852
#define LAST_INO_BATCH 1024
static DEFINE_PER_CPU(unsigned int, last_ino);

853
unsigned int get_next_ino(void)
854
{
855 856
	unsigned int *p = &get_cpu_var(last_ino);
	unsigned int res = *p;
857

858 859 860 861 862 863 864 865 866
#ifdef CONFIG_SMP
	if (unlikely((res & (LAST_INO_BATCH-1)) == 0)) {
		static atomic_t shared_last_ino;
		int next = atomic_add_return(LAST_INO_BATCH, &shared_last_ino);

		res = next - LAST_INO_BATCH;
	}
#endif

867 868 869 870 871
	res++;
	/* get_next_ino should not provide a 0 inode number */
	if (unlikely(!res))
		res++;
	*p = res;
872 873
	put_cpu_var(last_ino);
	return res;
874
}
875
EXPORT_SYMBOL(get_next_ino);
876

877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899
/**
 *	new_inode_pseudo 	- obtain an inode
 *	@sb: superblock
 *
 *	Allocates a new inode for given superblock.
 *	Inode wont be chained in superblock s_inodes list
 *	This means :
 *	- fs can't be unmount
 *	- quotas, fsnotify, writeback can't work
 */
struct inode *new_inode_pseudo(struct super_block *sb)
{
	struct inode *inode = alloc_inode(sb);

	if (inode) {
		spin_lock(&inode->i_lock);
		inode->i_state = 0;
		spin_unlock(&inode->i_lock);
		INIT_LIST_HEAD(&inode->i_sb_list);
	}
	return inode;
}

L
Linus Torvalds 已提交
900 901 902 903
/**
 *	new_inode 	- obtain an inode
 *	@sb: superblock
 *
904
 *	Allocates a new inode for given superblock. The default gfp_mask
H
Hugh Dickins 已提交
905
 *	for allocations related to inode->i_mapping is GFP_HIGHUSER_MOVABLE.
906 907 908 909 910
 *	If HIGHMEM pages are unsuitable or it is known that pages allocated
 *	for the page cache are not reclaimable or migratable,
 *	mapping_set_gfp_mask() must be called with suitable flags on the
 *	newly created inode's mapping
 *
L
Linus Torvalds 已提交
911 912 913
 */
struct inode *new_inode(struct super_block *sb)
{
914
	struct inode *inode;
L
Linus Torvalds 已提交
915

916
	spin_lock_prefetch(&sb->s_inode_list_lock);
917

918 919
	inode = new_inode_pseudo(sb);
	if (inode)
920
		inode_sb_list_add(inode);
L
Linus Torvalds 已提交
921 922 923 924
	return inode;
}
EXPORT_SYMBOL(new_inode);

925
#ifdef CONFIG_DEBUG_LOCK_ALLOC
926 927
void lockdep_annotate_inode_mutex_key(struct inode *inode)
{
928
	if (S_ISDIR(inode->i_mode)) {
929 930
		struct file_system_type *type = inode->i_sb->s_type;

931
		/* Set new key only if filesystem hasn't already changed it */
932
		if (lockdep_match_class(&inode->i_rwsem, &type->i_mutex_key)) {
933 934 935
			/*
			 * ensure nobody is actually holding i_mutex
			 */
936 937 938
			// mutex_destroy(&inode->i_mutex);
			init_rwsem(&inode->i_rwsem);
			lockdep_set_class(&inode->i_rwsem,
939 940
					  &type->i_mutex_dir_key);
		}
941
	}
942 943
}
EXPORT_SYMBOL(lockdep_annotate_inode_mutex_key);
944
#endif
945 946 947 948 949 950 951 952 953 954 955

/**
 * unlock_new_inode - clear the I_NEW state and wake up any waiters
 * @inode:	new inode to unlock
 *
 * Called when the inode is fully initialised to clear the new state of the
 * inode and wake up anyone waiting for the inode to finish initialisation.
 */
void unlock_new_inode(struct inode *inode)
{
	lockdep_annotate_inode_mutex_key(inode);
956
	spin_lock(&inode->i_lock);
C
Christoph Hellwig 已提交
957 958
	WARN_ON(!(inode->i_state & I_NEW));
	inode->i_state &= ~I_NEW;
A
Al Viro 已提交
959
	smp_mb();
960 961
	wake_up_bit(&inode->i_state, __I_NEW);
	spin_unlock(&inode->i_lock);
L
Linus Torvalds 已提交
962 963 964
}
EXPORT_SYMBOL(unlock_new_inode);

965 966
/**
 * lock_two_nondirectories - take two i_mutexes on non-directory objects
967 968 969 970
 *
 * Lock any non-NULL argument that is not a directory.
 * Zero, one or two objects may be locked by this function.
 *
971 972 973 974 975
 * @inode1: first inode to lock
 * @inode2: second inode to lock
 */
void lock_two_nondirectories(struct inode *inode1, struct inode *inode2)
{
976 977 978 979
	if (inode1 > inode2)
		swap(inode1, inode2);

	if (inode1 && !S_ISDIR(inode1->i_mode))
A
Al Viro 已提交
980
		inode_lock(inode1);
981
	if (inode2 && !S_ISDIR(inode2->i_mode) && inode2 != inode1)
A
Al Viro 已提交
982
		inode_lock_nested(inode2, I_MUTEX_NONDIR2);
983 984 985 986 987 988 989 990 991 992
}
EXPORT_SYMBOL(lock_two_nondirectories);

/**
 * unlock_two_nondirectories - release locks from lock_two_nondirectories()
 * @inode1: first inode to unlock
 * @inode2: second inode to unlock
 */
void unlock_two_nondirectories(struct inode *inode1, struct inode *inode2)
{
993
	if (inode1 && !S_ISDIR(inode1->i_mode))
A
Al Viro 已提交
994
		inode_unlock(inode1);
995
	if (inode2 && !S_ISDIR(inode2->i_mode) && inode2 != inode1)
A
Al Viro 已提交
996
		inode_unlock(inode2);
997 998 999
}
EXPORT_SYMBOL(unlock_two_nondirectories);

C
Christoph Hellwig 已提交
1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015
/**
 * iget5_locked - obtain an inode from a mounted file system
 * @sb:		super block of file system
 * @hashval:	hash value (usually inode number) to get
 * @test:	callback used for comparisons between inodes
 * @set:	callback used to initialize a new struct inode
 * @data:	opaque data pointer to pass to @test and @set
 *
 * Search for the inode specified by @hashval and @data in the inode cache,
 * and if present it is return it with an increased reference count. This is
 * a generalized version of iget_locked() for file systems where the inode
 * number is not sufficient for unique identification of an inode.
 *
 * If the inode is not in cache, allocate a new inode and return it locked,
 * hashed, and with the I_NEW flag set. The file system gets to fill it in
 * before unlocking it via unlock_new_inode().
L
Linus Torvalds 已提交
1016
 *
C
Christoph Hellwig 已提交
1017 1018
 * Note both @test and @set are called with the inode_hash_lock held, so can't
 * sleep.
L
Linus Torvalds 已提交
1019
 */
C
Christoph Hellwig 已提交
1020 1021 1022
struct inode *iget5_locked(struct super_block *sb, unsigned long hashval,
		int (*test)(struct inode *, void *),
		int (*set)(struct inode *, void *), void *data)
L
Linus Torvalds 已提交
1023
{
C
Christoph Hellwig 已提交
1024
	struct hlist_head *head = inode_hashtable + hash(sb, hashval);
1025
	struct inode *inode;
1026
again:
C
Christoph Hellwig 已提交
1027 1028 1029 1030 1031 1032
	spin_lock(&inode_hash_lock);
	inode = find_inode(sb, head, test, data);
	spin_unlock(&inode_hash_lock);

	if (inode) {
		wait_on_inode(inode);
1033 1034 1035 1036
		if (unlikely(inode_unhashed(inode))) {
			iput(inode);
			goto again;
		}
C
Christoph Hellwig 已提交
1037 1038 1039
		return inode;
	}

L
Linus Torvalds 已提交
1040 1041
	inode = alloc_inode(sb);
	if (inode) {
1042
		struct inode *old;
L
Linus Torvalds 已提交
1043

1044
		spin_lock(&inode_hash_lock);
L
Linus Torvalds 已提交
1045 1046 1047 1048 1049 1050
		/* We released the lock, so.. */
		old = find_inode(sb, head, test, data);
		if (!old) {
			if (set(inode, data))
				goto set_failed;

1051 1052
			spin_lock(&inode->i_lock);
			inode->i_state = I_NEW;
1053
			hlist_add_head(&inode->i_hash, head);
1054
			spin_unlock(&inode->i_lock);
1055
			inode_sb_list_add(inode);
1056
			spin_unlock(&inode_hash_lock);
L
Linus Torvalds 已提交
1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068

			/* Return the locked inode with I_NEW set, the
			 * caller is responsible for filling in the contents
			 */
			return inode;
		}

		/*
		 * Uhhuh, somebody else created the same inode under
		 * us. Use the old inode instead of the one we just
		 * allocated.
		 */
1069
		spin_unlock(&inode_hash_lock);
L
Linus Torvalds 已提交
1070 1071 1072
		destroy_inode(inode);
		inode = old;
		wait_on_inode(inode);
1073 1074 1075 1076
		if (unlikely(inode_unhashed(inode))) {
			iput(inode);
			goto again;
		}
L
Linus Torvalds 已提交
1077 1078 1079 1080
	}
	return inode;

set_failed:
1081
	spin_unlock(&inode_hash_lock);
L
Linus Torvalds 已提交
1082 1083 1084
	destroy_inode(inode);
	return NULL;
}
C
Christoph Hellwig 已提交
1085
EXPORT_SYMBOL(iget5_locked);
L
Linus Torvalds 已提交
1086

C
Christoph Hellwig 已提交
1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098
/**
 * iget_locked - obtain an inode from a mounted file system
 * @sb:		super block of file system
 * @ino:	inode number to get
 *
 * Search for the inode specified by @ino in the inode cache and if present
 * return it with an increased reference count. This is for file systems
 * where the inode number is sufficient for unique identification of an inode.
 *
 * If the inode is not in cache, allocate a new inode and return it locked,
 * hashed, and with the I_NEW flag set.  The file system gets to fill it in
 * before unlocking it via unlock_new_inode().
L
Linus Torvalds 已提交
1099
 */
C
Christoph Hellwig 已提交
1100
struct inode *iget_locked(struct super_block *sb, unsigned long ino)
L
Linus Torvalds 已提交
1101
{
C
Christoph Hellwig 已提交
1102
	struct hlist_head *head = inode_hashtable + hash(sb, ino);
1103
	struct inode *inode;
1104
again:
C
Christoph Hellwig 已提交
1105 1106 1107 1108 1109
	spin_lock(&inode_hash_lock);
	inode = find_inode_fast(sb, head, ino);
	spin_unlock(&inode_hash_lock);
	if (inode) {
		wait_on_inode(inode);
1110 1111 1112 1113
		if (unlikely(inode_unhashed(inode))) {
			iput(inode);
			goto again;
		}
C
Christoph Hellwig 已提交
1114 1115 1116
		return inode;
	}

L
Linus Torvalds 已提交
1117 1118
	inode = alloc_inode(sb);
	if (inode) {
1119
		struct inode *old;
L
Linus Torvalds 已提交
1120

1121
		spin_lock(&inode_hash_lock);
L
Linus Torvalds 已提交
1122 1123 1124 1125
		/* We released the lock, so.. */
		old = find_inode_fast(sb, head, ino);
		if (!old) {
			inode->i_ino = ino;
1126 1127
			spin_lock(&inode->i_lock);
			inode->i_state = I_NEW;
1128
			hlist_add_head(&inode->i_hash, head);
1129
			spin_unlock(&inode->i_lock);
1130
			inode_sb_list_add(inode);
1131
			spin_unlock(&inode_hash_lock);
L
Linus Torvalds 已提交
1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143

			/* Return the locked inode with I_NEW set, the
			 * caller is responsible for filling in the contents
			 */
			return inode;
		}

		/*
		 * Uhhuh, somebody else created the same inode under
		 * us. Use the old inode instead of the one we just
		 * allocated.
		 */
1144
		spin_unlock(&inode_hash_lock);
L
Linus Torvalds 已提交
1145 1146 1147
		destroy_inode(inode);
		inode = old;
		wait_on_inode(inode);
1148 1149 1150 1151
		if (unlikely(inode_unhashed(inode))) {
			iput(inode);
			goto again;
		}
L
Linus Torvalds 已提交
1152 1153 1154
	}
	return inode;
}
C
Christoph Hellwig 已提交
1155
EXPORT_SYMBOL(iget_locked);
L
Linus Torvalds 已提交
1156

1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168
/*
 * search the inode cache for a matching inode number.
 * If we find one, then the inode number we are trying to
 * allocate is not unique and so we should not use it.
 *
 * Returns 1 if the inode number is unique, 0 if it is not.
 */
static int test_inode_iunique(struct super_block *sb, unsigned long ino)
{
	struct hlist_head *b = inode_hashtable + hash(sb, ino);
	struct inode *inode;

1169
	spin_lock(&inode_hash_lock);
1170
	hlist_for_each_entry(inode, b, i_hash) {
1171 1172
		if (inode->i_ino == ino && inode->i_sb == sb) {
			spin_unlock(&inode_hash_lock);
1173
			return 0;
1174
		}
1175
	}
1176
	spin_unlock(&inode_hash_lock);
1177 1178 1179 1180

	return 1;
}

L
Linus Torvalds 已提交
1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195 1196
/**
 *	iunique - get a unique inode number
 *	@sb: superblock
 *	@max_reserved: highest reserved inode number
 *
 *	Obtain an inode number that is unique on the system for a given
 *	superblock. This is used by file systems that have no natural
 *	permanent inode numbering system. An inode number is returned that
 *	is higher than the reserved limit but unique.
 *
 *	BUGS:
 *	With a large number of inodes live on the file system this function
 *	currently becomes quite slow.
 */
ino_t iunique(struct super_block *sb, ino_t max_reserved)
{
1197 1198 1199 1200 1201
	/*
	 * On a 32bit, non LFS stat() call, glibc will generate an EOVERFLOW
	 * error if st_ino won't fit in target struct field. Use 32bit counter
	 * here to attempt to avoid that.
	 */
1202
	static DEFINE_SPINLOCK(iunique_lock);
1203
	static unsigned int counter;
L
Linus Torvalds 已提交
1204
	ino_t res;
1205

1206
	spin_lock(&iunique_lock);
1207 1208 1209
	do {
		if (counter <= max_reserved)
			counter = max_reserved + 1;
L
Linus Torvalds 已提交
1210
		res = counter++;
1211 1212
	} while (!test_inode_iunique(sb, res));
	spin_unlock(&iunique_lock);
L
Linus Torvalds 已提交
1213

1214 1215
	return res;
}
L
Linus Torvalds 已提交
1216 1217 1218 1219
EXPORT_SYMBOL(iunique);

struct inode *igrab(struct inode *inode)
{
1220 1221
	spin_lock(&inode->i_lock);
	if (!(inode->i_state & (I_FREEING|I_WILL_FREE))) {
L
Linus Torvalds 已提交
1222
		__iget(inode);
1223 1224 1225
		spin_unlock(&inode->i_lock);
	} else {
		spin_unlock(&inode->i_lock);
L
Linus Torvalds 已提交
1226 1227 1228 1229 1230 1231
		/*
		 * Handle the case where s_op->clear_inode is not been
		 * called yet, and somebody is calling igrab
		 * while the inode is getting freed.
		 */
		inode = NULL;
1232
	}
L
Linus Torvalds 已提交
1233 1234 1235 1236 1237
	return inode;
}
EXPORT_SYMBOL(igrab);

/**
C
Christoph Hellwig 已提交
1238
 * ilookup5_nowait - search for an inode in the inode cache
L
Linus Torvalds 已提交
1239
 * @sb:		super block of file system to search
C
Christoph Hellwig 已提交
1240
 * @hashval:	hash value (usually inode number) to search for
L
Linus Torvalds 已提交
1241 1242 1243
 * @test:	callback used for comparisons between inodes
 * @data:	opaque data pointer to pass to @test
 *
C
Christoph Hellwig 已提交
1244
 * Search for the inode specified by @hashval and @data in the inode cache.
L
Linus Torvalds 已提交
1245 1246 1247
 * If the inode is in the cache, the inode is returned with an incremented
 * reference count.
 *
C
Christoph Hellwig 已提交
1248 1249
 * Note: I_NEW is not waited upon so you have to be very careful what you do
 * with the returned inode.  You probably should be using ilookup5() instead.
L
Linus Torvalds 已提交
1250
 *
1251
 * Note2: @test is called with the inode_hash_lock held, so can't sleep.
L
Linus Torvalds 已提交
1252
 */
C
Christoph Hellwig 已提交
1253 1254
struct inode *ilookup5_nowait(struct super_block *sb, unsigned long hashval,
		int (*test)(struct inode *, void *), void *data)
L
Linus Torvalds 已提交
1255
{
C
Christoph Hellwig 已提交
1256
	struct hlist_head *head = inode_hashtable + hash(sb, hashval);
L
Linus Torvalds 已提交
1257 1258
	struct inode *inode;

1259
	spin_lock(&inode_hash_lock);
L
Linus Torvalds 已提交
1260
	inode = find_inode(sb, head, test, data);
1261
	spin_unlock(&inode_hash_lock);
1262

C
Christoph Hellwig 已提交
1263
	return inode;
1264 1265 1266 1267 1268 1269 1270 1271 1272 1273
}
EXPORT_SYMBOL(ilookup5_nowait);

/**
 * ilookup5 - search for an inode in the inode cache
 * @sb:		super block of file system to search
 * @hashval:	hash value (usually inode number) to search for
 * @test:	callback used for comparisons between inodes
 * @data:	opaque data pointer to pass to @test
 *
C
Christoph Hellwig 已提交
1274 1275 1276
 * Search for the inode specified by @hashval and @data in the inode cache,
 * and if the inode is in the cache, return the inode with an incremented
 * reference count.  Waits on I_NEW before returning the inode.
1277
 * returned with an incremented reference count.
L
Linus Torvalds 已提交
1278
 *
C
Christoph Hellwig 已提交
1279 1280
 * This is a generalized version of ilookup() for file systems where the
 * inode number is not sufficient for unique identification of an inode.
L
Linus Torvalds 已提交
1281
 *
C
Christoph Hellwig 已提交
1282
 * Note: @test is called with the inode_hash_lock held, so can't sleep.
L
Linus Torvalds 已提交
1283 1284 1285 1286
 */
struct inode *ilookup5(struct super_block *sb, unsigned long hashval,
		int (*test)(struct inode *, void *), void *data)
{
1287 1288 1289 1290
	struct inode *inode;
again:
	inode = ilookup5_nowait(sb, hashval, test, data);
	if (inode) {
C
Christoph Hellwig 已提交
1291
		wait_on_inode(inode);
1292 1293 1294 1295 1296
		if (unlikely(inode_unhashed(inode))) {
			iput(inode);
			goto again;
		}
	}
C
Christoph Hellwig 已提交
1297
	return inode;
L
Linus Torvalds 已提交
1298 1299 1300 1301 1302 1303 1304 1305
}
EXPORT_SYMBOL(ilookup5);

/**
 * ilookup - search for an inode in the inode cache
 * @sb:		super block of file system to search
 * @ino:	inode number to search for
 *
C
Christoph Hellwig 已提交
1306 1307
 * Search for the inode @ino in the inode cache, and if the inode is in the
 * cache, the inode is returned with an incremented reference count.
L
Linus Torvalds 已提交
1308 1309 1310 1311 1312
 */
struct inode *ilookup(struct super_block *sb, unsigned long ino)
{
	struct hlist_head *head = inode_hashtable + hash(sb, ino);
	struct inode *inode;
1313
again:
C
Christoph Hellwig 已提交
1314 1315 1316
	spin_lock(&inode_hash_lock);
	inode = find_inode_fast(sb, head, ino);
	spin_unlock(&inode_hash_lock);
L
Linus Torvalds 已提交
1317

1318
	if (inode) {
C
Christoph Hellwig 已提交
1319
		wait_on_inode(inode);
1320 1321 1322 1323 1324
		if (unlikely(inode_unhashed(inode))) {
			iput(inode);
			goto again;
		}
	}
C
Christoph Hellwig 已提交
1325
	return inode;
L
Linus Torvalds 已提交
1326
}
C
Christoph Hellwig 已提交
1327
EXPORT_SYMBOL(ilookup);
L
Linus Torvalds 已提交
1328

1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378
/**
 * find_inode_nowait - find an inode in the inode cache
 * @sb:		super block of file system to search
 * @hashval:	hash value (usually inode number) to search for
 * @match:	callback used for comparisons between inodes
 * @data:	opaque data pointer to pass to @match
 *
 * Search for the inode specified by @hashval and @data in the inode
 * cache, where the helper function @match will return 0 if the inode
 * does not match, 1 if the inode does match, and -1 if the search
 * should be stopped.  The @match function must be responsible for
 * taking the i_lock spin_lock and checking i_state for an inode being
 * freed or being initialized, and incrementing the reference count
 * before returning 1.  It also must not sleep, since it is called with
 * the inode_hash_lock spinlock held.
 *
 * This is a even more generalized version of ilookup5() when the
 * function must never block --- find_inode() can block in
 * __wait_on_freeing_inode() --- or when the caller can not increment
 * the reference count because the resulting iput() might cause an
 * inode eviction.  The tradeoff is that the @match funtion must be
 * very carefully implemented.
 */
struct inode *find_inode_nowait(struct super_block *sb,
				unsigned long hashval,
				int (*match)(struct inode *, unsigned long,
					     void *),
				void *data)
{
	struct hlist_head *head = inode_hashtable + hash(sb, hashval);
	struct inode *inode, *ret_inode = NULL;
	int mval;

	spin_lock(&inode_hash_lock);
	hlist_for_each_entry(inode, head, i_hash) {
		if (inode->i_sb != sb)
			continue;
		mval = match(inode, hashval, data);
		if (mval == 0)
			continue;
		if (mval == 1)
			ret_inode = inode;
		goto out;
	}
out:
	spin_unlock(&inode_hash_lock);
	return ret_inode;
}
EXPORT_SYMBOL(find_inode_nowait);

A
Al Viro 已提交
1379 1380 1381 1382 1383 1384 1385
int insert_inode_locked(struct inode *inode)
{
	struct super_block *sb = inode->i_sb;
	ino_t ino = inode->i_ino;
	struct hlist_head *head = inode_hashtable + hash(sb, ino);

	while (1) {
1386
		struct inode *old = NULL;
1387
		spin_lock(&inode_hash_lock);
1388
		hlist_for_each_entry(old, head, i_hash) {
1389 1390 1391 1392
			if (old->i_ino != ino)
				continue;
			if (old->i_sb != sb)
				continue;
1393 1394 1395
			spin_lock(&old->i_lock);
			if (old->i_state & (I_FREEING|I_WILL_FREE)) {
				spin_unlock(&old->i_lock);
1396
				continue;
1397
			}
1398 1399
			break;
		}
1400
		if (likely(!old)) {
1401 1402
			spin_lock(&inode->i_lock);
			inode->i_state |= I_NEW;
A
Al Viro 已提交
1403
			hlist_add_head(&inode->i_hash, head);
1404
			spin_unlock(&inode->i_lock);
1405
			spin_unlock(&inode_hash_lock);
A
Al Viro 已提交
1406 1407 1408
			return 0;
		}
		__iget(old);
1409
		spin_unlock(&old->i_lock);
1410
		spin_unlock(&inode_hash_lock);
A
Al Viro 已提交
1411
		wait_on_inode(old);
A
Al Viro 已提交
1412
		if (unlikely(!inode_unhashed(old))) {
A
Al Viro 已提交
1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426 1427
			iput(old);
			return -EBUSY;
		}
		iput(old);
	}
}
EXPORT_SYMBOL(insert_inode_locked);

int insert_inode_locked4(struct inode *inode, unsigned long hashval,
		int (*test)(struct inode *, void *), void *data)
{
	struct super_block *sb = inode->i_sb;
	struct hlist_head *head = inode_hashtable + hash(sb, hashval);

	while (1) {
1428 1429
		struct inode *old = NULL;

1430
		spin_lock(&inode_hash_lock);
1431
		hlist_for_each_entry(old, head, i_hash) {
1432 1433 1434 1435
			if (old->i_sb != sb)
				continue;
			if (!test(old, data))
				continue;
1436 1437 1438
			spin_lock(&old->i_lock);
			if (old->i_state & (I_FREEING|I_WILL_FREE)) {
				spin_unlock(&old->i_lock);
1439
				continue;
1440
			}
1441 1442
			break;
		}
1443
		if (likely(!old)) {
1444 1445
			spin_lock(&inode->i_lock);
			inode->i_state |= I_NEW;
A
Al Viro 已提交
1446
			hlist_add_head(&inode->i_hash, head);
1447
			spin_unlock(&inode->i_lock);
1448
			spin_unlock(&inode_hash_lock);
A
Al Viro 已提交
1449 1450 1451
			return 0;
		}
		__iget(old);
1452
		spin_unlock(&old->i_lock);
1453
		spin_unlock(&inode_hash_lock);
A
Al Viro 已提交
1454
		wait_on_inode(old);
A
Al Viro 已提交
1455
		if (unlikely(!inode_unhashed(old))) {
A
Al Viro 已提交
1456 1457 1458 1459 1460 1461 1462 1463
			iput(old);
			return -EBUSY;
		}
		iput(old);
	}
}
EXPORT_SYMBOL(insert_inode_locked4);

L
Linus Torvalds 已提交
1464

1465 1466 1467 1468 1469 1470 1471 1472 1473
int generic_delete_inode(struct inode *inode)
{
	return 1;
}
EXPORT_SYMBOL(generic_delete_inode);

/*
 * Called when we're dropping the last reference
 * to an inode.
1474
 *
1475 1476 1477 1478 1479
 * Call the FS "drop_inode()" function, defaulting to
 * the legacy UNIX filesystem behaviour.  If it tells
 * us to evict inode, do so.  Otherwise, retain inode
 * in cache if fs is alive, sync and evict if fs is
 * shutting down.
1480
 */
1481
static void iput_final(struct inode *inode)
L
Linus Torvalds 已提交
1482 1483
{
	struct super_block *sb = inode->i_sb;
1484 1485 1486
	const struct super_operations *op = inode->i_sb->s_op;
	int drop;

1487 1488
	WARN_ON(inode->i_state & I_NEW);

1489
	if (op->drop_inode)
1490 1491 1492
		drop = op->drop_inode(inode);
	else
		drop = generic_drop_inode(inode);
L
Linus Torvalds 已提交
1493

D
Dave Chinner 已提交
1494
	if (!drop && (sb->s_flags & MS_ACTIVE)) {
1495
		inode_add_lru(inode);
D
Dave Chinner 已提交
1496 1497 1498 1499
		spin_unlock(&inode->i_lock);
		return;
	}

1500
	if (!drop) {
1501
		inode->i_state |= I_WILL_FREE;
1502
		spin_unlock(&inode->i_lock);
L
Linus Torvalds 已提交
1503
		write_inode_now(inode, 1);
1504
		spin_lock(&inode->i_lock);
1505
		WARN_ON(inode->i_state & I_NEW);
1506
		inode->i_state &= ~I_WILL_FREE;
L
Linus Torvalds 已提交
1507
	}
N
Nick Piggin 已提交
1508

1509
	inode->i_state |= I_FREEING;
1510 1511
	if (!list_empty(&inode->i_lru))
		inode_lru_list_del(inode);
D
Dave Chinner 已提交
1512 1513
	spin_unlock(&inode->i_lock);

1514
	evict(inode);
L
Linus Torvalds 已提交
1515 1516 1517
}

/**
1518
 *	iput	- put an inode
L
Linus Torvalds 已提交
1519 1520 1521 1522 1523 1524 1525 1526 1527
 *	@inode: inode to put
 *
 *	Puts an inode, dropping its usage count. If the inode use count hits
 *	zero, the inode is then freed and may also be destroyed.
 *
 *	Consequently, iput() can sleep.
 */
void iput(struct inode *inode)
{
1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540 1541
	if (!inode)
		return;
	BUG_ON(inode->i_state & I_CLEAR);
retry:
	if (atomic_dec_and_lock(&inode->i_count, &inode->i_lock)) {
		if (inode->i_nlink && (inode->i_state & I_DIRTY_TIME)) {
			atomic_inc(&inode->i_count);
			inode->i_state &= ~I_DIRTY_TIME;
			spin_unlock(&inode->i_lock);
			trace_writeback_lazytime_iput(inode);
			mark_inode_dirty_sync(inode);
			goto retry;
		}
		iput_final(inode);
L
Linus Torvalds 已提交
1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553
	}
}
EXPORT_SYMBOL(iput);

/**
 *	bmap	- find a block number in a file
 *	@inode: inode of file
 *	@block: block to find
 *
 *	Returns the block number on the device holding the inode that
 *	is the disk block number for the block of the file requested.
 *	That is, asked for block 4 of inode 1 the function will return the
1554
 *	disk block relative to the disk start that holds that block of the
L
Linus Torvalds 已提交
1555 1556
 *	file.
 */
1557
sector_t bmap(struct inode *inode, sector_t block)
L
Linus Torvalds 已提交
1558 1559 1560 1561 1562 1563 1564 1565
{
	sector_t res = 0;
	if (inode->i_mapping->a_ops->bmap)
		res = inode->i_mapping->a_ops->bmap(inode->i_mapping, block);
	return res;
}
EXPORT_SYMBOL(bmap);

1566 1567 1568 1569 1570 1571
/*
 * Update times in overlayed inode from underlying real inode
 */
static void update_ovl_inode_times(struct dentry *dentry, struct inode *inode,
			       bool rcu)
{
1572
	struct dentry *upperdentry;
1573

1574 1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589
	/*
	 * Nothing to do if in rcu or if non-overlayfs
	 */
	if (rcu || likely(!(dentry->d_flags & DCACHE_OP_REAL)))
		return;

	upperdentry = d_real(dentry, NULL, 0, D_REAL_UPPER);

	/*
	 * If file is on lower then we can't update atime, so no worries about
	 * stale mtime/ctime.
	 */
	if (upperdentry) {
		struct inode *realinode = d_inode(upperdentry);

		if ((!timespec_equal(&inode->i_mtime, &realinode->i_mtime) ||
1590 1591 1592 1593 1594 1595 1596
		     !timespec_equal(&inode->i_ctime, &realinode->i_ctime))) {
			inode->i_mtime = realinode->i_mtime;
			inode->i_ctime = realinode->i_ctime;
		}
	}
}

1597 1598 1599 1600 1601
/*
 * With relative atime, only update atime if the previous atime is
 * earlier than either the ctime or mtime or if at least a day has
 * passed since the last atime update.
 */
1602 1603
static int relatime_need_update(const struct path *path, struct inode *inode,
				struct timespec now, bool rcu)
1604 1605
{

1606
	if (!(path->mnt->mnt_flags & MNT_RELATIME))
1607
		return 1;
1608 1609

	update_ovl_inode_times(path->dentry, inode, rcu);
1610 1611 1612 1613 1614 1615 1616 1617 1618 1619 1620 1621 1622 1623 1624 1625 1626 1627 1628 1629 1630 1631 1632
	/*
	 * Is mtime younger than atime? If yes, update atime:
	 */
	if (timespec_compare(&inode->i_mtime, &inode->i_atime) >= 0)
		return 1;
	/*
	 * Is ctime younger than atime? If yes, update atime:
	 */
	if (timespec_compare(&inode->i_ctime, &inode->i_atime) >= 0)
		return 1;

	/*
	 * Is the previous atime value older than a day? If yes,
	 * update atime:
	 */
	if ((long)(now.tv_sec - inode->i_atime.tv_sec) >= 24*60*60)
		return 1;
	/*
	 * Good, we can skip the atime update:
	 */
	return 0;
}

1633
int generic_update_time(struct inode *inode, struct timespec *time, int flags)
1634
{
1635
	int iflags = I_DIRTY_TIME;
1636 1637 1638 1639 1640 1641 1642 1643 1644

	if (flags & S_ATIME)
		inode->i_atime = *time;
	if (flags & S_VERSION)
		inode_inc_iversion(inode);
	if (flags & S_CTIME)
		inode->i_ctime = *time;
	if (flags & S_MTIME)
		inode->i_mtime = *time;
1645 1646 1647 1648

	if (!(inode->i_sb->s_flags & MS_LAZYTIME) || (flags & S_VERSION))
		iflags |= I_DIRTY_SYNC;
	__mark_inode_dirty(inode, iflags);
1649 1650
	return 0;
}
1651 1652 1653 1654 1655 1656 1657 1658 1659 1660 1661 1662 1663 1664 1665
EXPORT_SYMBOL(generic_update_time);

/*
 * This does the actual work of updating an inodes time or version.  Must have
 * had called mnt_want_write() before calling this.
 */
static int update_time(struct inode *inode, struct timespec *time, int flags)
{
	int (*update_time)(struct inode *, struct timespec *, int);

	update_time = inode->i_op->update_time ? inode->i_op->update_time :
		generic_update_time;

	return update_time(inode, time, flags);
}
1666

L
Linus Torvalds 已提交
1667
/**
C
Christoph Hellwig 已提交
1668
 *	touch_atime	-	update the access time
1669
 *	@path: the &struct path to update
R
Randy Dunlap 已提交
1670
 *	@inode: inode to update
L
Linus Torvalds 已提交
1671 1672 1673 1674 1675
 *
 *	Update the accessed time on an inode and mark it for writeback.
 *	This function automatically handles read only file systems and media,
 *	as well as the "noatime" flag and inode specific "noatime" markers.
 */
1676 1677
bool __atime_needs_update(const struct path *path, struct inode *inode,
			  bool rcu)
L
Linus Torvalds 已提交
1678
{
A
Al Viro 已提交
1679
	struct vfsmount *mnt = path->mnt;
L
Linus Torvalds 已提交
1680 1681
	struct timespec now;

1682
	if (inode->i_flags & S_NOATIME)
1683
		return false;
1684 1685 1686 1687 1688 1689 1690

	/* Atime updates will likely cause i_uid and i_gid to be written
	 * back improprely if their true value is unknown to the vfs.
	 */
	if (HAS_UNMAPPED_ID(inode))
		return false;

1691
	if (IS_NOATIME(inode))
1692
		return false;
A
Andrew Morton 已提交
1693
	if ((inode->i_sb->s_flags & MS_NODIRATIME) && S_ISDIR(inode->i_mode))
1694
		return false;
V
Valerie Henson 已提交
1695

1696
	if (mnt->mnt_flags & MNT_NOATIME)
1697
		return false;
1698
	if ((mnt->mnt_flags & MNT_NODIRATIME) && S_ISDIR(inode->i_mode))
1699
		return false;
L
Linus Torvalds 已提交
1700

1701
	now = current_time(inode);
1702

1703
	if (!relatime_need_update(path, inode, now, rcu))
1704
		return false;
1705

V
Valerie Henson 已提交
1706
	if (timespec_equal(&inode->i_atime, &now))
1707 1708 1709 1710 1711 1712 1713 1714 1715 1716 1717
		return false;

	return true;
}

void touch_atime(const struct path *path)
{
	struct vfsmount *mnt = path->mnt;
	struct inode *inode = d_inode(path->dentry);
	struct timespec now;

1718
	if (!__atime_needs_update(path, inode, false))
A
Andi Kleen 已提交
1719 1720
		return;

1721
	if (!sb_start_write_trylock(inode->i_sb))
A
Andi Kleen 已提交
1722
		return;
V
Valerie Henson 已提交
1723

1724
	if (__mnt_want_write(mnt) != 0)
1725
		goto skip_update;
1726 1727 1728 1729 1730 1731
	/*
	 * File systems can error out when updating inodes if they need to
	 * allocate new space to modify an inode (such is the case for
	 * Btrfs), but since we touch atime while walking down the path we
	 * really don't care if we failed to update the atime of the file,
	 * so just ignore the return value.
1732 1733
	 * We may also fail on filesystems that have the ability to make parts
	 * of the fs read only, e.g. subvolumes in Btrfs.
1734
	 */
1735
	now = current_time(inode);
1736
	update_time(inode, &now, S_ATIME);
1737 1738 1739
	__mnt_drop_write(mnt);
skip_update:
	sb_end_write(inode->i_sb);
L
Linus Torvalds 已提交
1740
}
C
Christoph Hellwig 已提交
1741
EXPORT_SYMBOL(touch_atime);
L
Linus Torvalds 已提交
1742

1743 1744 1745 1746 1747 1748 1749 1750
/*
 * The logic we want is
 *
 *	if suid or (sgid and xgrp)
 *		remove privs
 */
int should_remove_suid(struct dentry *dentry)
{
1751
	umode_t mode = d_inode(dentry)->i_mode;
1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765 1766 1767 1768 1769 1770 1771
	int kill = 0;

	/* suid always must be killed */
	if (unlikely(mode & S_ISUID))
		kill = ATTR_KILL_SUID;

	/*
	 * sgid without any exec bits is just a mandatory locking mark; leave
	 * it alone.  If some exec bits are set, it's a real sgid; kill it.
	 */
	if (unlikely((mode & S_ISGID) && (mode & S_IXGRP)))
		kill |= ATTR_KILL_SGID;

	if (unlikely(kill && !capable(CAP_FSETID) && S_ISREG(mode)))
		return kill;

	return 0;
}
EXPORT_SYMBOL(should_remove_suid);

1772 1773 1774 1775 1776
/*
 * Return mask of changes for notify_change() that need to be done as a
 * response to write or truncate. Return 0 if nothing has to be changed.
 * Negative value on error (change should be denied).
 */
1777
int dentry_needs_remove_privs(struct dentry *dentry)
1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794 1795
{
	struct inode *inode = d_inode(dentry);
	int mask = 0;
	int ret;

	if (IS_NOSEC(inode))
		return 0;

	mask = should_remove_suid(dentry);
	ret = security_inode_need_killpriv(dentry);
	if (ret < 0)
		return ret;
	if (ret)
		mask |= ATTR_KILL_PRIV;
	return mask;
}

static int __remove_privs(struct dentry *dentry, int kill)
1796 1797 1798 1799
{
	struct iattr newattrs;

	newattrs.ia_valid = ATTR_FORCE | kill;
1800 1801 1802 1803 1804
	/*
	 * Note we call this on write, so notify_change will not
	 * encounter any conflicting delegations:
	 */
	return notify_change(dentry, &newattrs, NULL);
1805 1806
}

1807 1808 1809 1810 1811
/*
 * Remove special file priviledges (suid, capabilities) when file is written
 * to or truncated.
 */
int file_remove_privs(struct file *file)
1812
{
1813 1814
	struct dentry *dentry = file_dentry(file);
	struct inode *inode = file_inode(file);
1815
	int kill;
1816 1817 1818 1819 1820 1821
	int error = 0;

	/* Fast path for nothing security related */
	if (IS_NOSEC(inode))
		return 0;

1822
	kill = dentry_needs_remove_privs(dentry);
1823 1824 1825 1826
	if (kill < 0)
		return kill;
	if (kill)
		error = __remove_privs(dentry, kill);
J
Jan Kara 已提交
1827 1828
	if (!error)
		inode_has_no_xattr(inode);
1829 1830 1831

	return error;
}
1832
EXPORT_SYMBOL(file_remove_privs);
1833

L
Linus Torvalds 已提交
1834
/**
1835 1836
 *	file_update_time	-	update mtime and ctime time
 *	@file: file accessed
L
Linus Torvalds 已提交
1837
 *
1838 1839 1840 1841
 *	Update the mtime and ctime members of an inode and mark the inode
 *	for writeback.  Note that this function is meant exclusively for
 *	usage in the file write path of filesystems, and filesystems may
 *	choose to explicitly ignore update via this function with the
1842
 *	S_NOCMTIME inode flag, e.g. for network filesystem where these
1843 1844
 *	timestamps are handled by the server.  This can return an error for
 *	file systems who need to allocate space in order to update an inode.
L
Linus Torvalds 已提交
1845 1846
 */

1847
int file_update_time(struct file *file)
L
Linus Torvalds 已提交
1848
{
A
Al Viro 已提交
1849
	struct inode *inode = file_inode(file);
L
Linus Torvalds 已提交
1850
	struct timespec now;
1851 1852
	int sync_it = 0;
	int ret;
L
Linus Torvalds 已提交
1853

A
Andi Kleen 已提交
1854
	/* First try to exhaust all avenues to not sync */
L
Linus Torvalds 已提交
1855
	if (IS_NOCMTIME(inode))
1856
		return 0;
1857

1858
	now = current_time(inode);
A
Andi Kleen 已提交
1859 1860
	if (!timespec_equal(&inode->i_mtime, &now))
		sync_it = S_MTIME;
L
Linus Torvalds 已提交
1861

A
Andi Kleen 已提交
1862 1863
	if (!timespec_equal(&inode->i_ctime, &now))
		sync_it |= S_CTIME;
1864

A
Andi Kleen 已提交
1865 1866
	if (IS_I_VERSION(inode))
		sync_it |= S_VERSION;
1867

A
Andi Kleen 已提交
1868
	if (!sync_it)
1869
		return 0;
A
Andi Kleen 已提交
1870 1871

	/* Finally allowed to write? Takes lock. */
1872
	if (__mnt_want_write_file(file))
1873
		return 0;
A
Andi Kleen 已提交
1874

1875
	ret = update_time(inode, &now, sync_it);
1876
	__mnt_drop_write_file(file);
1877 1878

	return ret;
L
Linus Torvalds 已提交
1879
}
1880
EXPORT_SYMBOL(file_update_time);
L
Linus Torvalds 已提交
1881 1882 1883 1884 1885 1886 1887 1888 1889 1890 1891 1892

int inode_needs_sync(struct inode *inode)
{
	if (IS_SYNC(inode))
		return 1;
	if (S_ISDIR(inode->i_mode) && IS_DIRSYNC(inode))
		return 1;
	return 0;
}
EXPORT_SYMBOL(inode_needs_sync);

/*
1893 1894 1895 1896 1897 1898
 * If we try to find an inode in the inode hash while it is being
 * deleted, we have to wait until the filesystem completes its
 * deletion before reporting that it isn't found.  This function waits
 * until the deletion _might_ have completed.  Callers are responsible
 * to recheck inode state.
 *
C
Christoph Hellwig 已提交
1899
 * It doesn't matter if I_NEW is not set initially, a call to
1900 1901
 * wake_up_bit(&inode->i_state, __I_NEW) after removing from the hash list
 * will DTRT.
L
Linus Torvalds 已提交
1902 1903 1904 1905
 */
static void __wait_on_freeing_inode(struct inode *inode)
{
	wait_queue_head_t *wq;
C
Christoph Hellwig 已提交
1906 1907
	DEFINE_WAIT_BIT(wait, &inode->i_state, __I_NEW);
	wq = bit_waitqueue(&inode->i_state, __I_NEW);
1908
	prepare_to_wait(wq, &wait.wq_entry, TASK_UNINTERRUPTIBLE);
1909
	spin_unlock(&inode->i_lock);
1910
	spin_unlock(&inode_hash_lock);
L
Linus Torvalds 已提交
1911
	schedule();
1912
	finish_wait(wq, &wait.wq_entry);
1913
	spin_lock(&inode_hash_lock);
L
Linus Torvalds 已提交
1914 1915 1916 1917 1918 1919 1920 1921 1922 1923 1924 1925 1926 1927 1928 1929 1930 1931 1932 1933 1934 1935 1936 1937 1938 1939 1940 1941
}

static __initdata unsigned long ihash_entries;
static int __init set_ihash_entries(char *str)
{
	if (!str)
		return 0;
	ihash_entries = simple_strtoul(str, &str, 0);
	return 1;
}
__setup("ihash_entries=", set_ihash_entries);

/*
 * Initialize the waitqueues and inode hash table.
 */
void __init inode_init_early(void)
{
	/* If hashes are distributed across NUMA nodes, defer
	 * hash allocation until vmalloc space is available.
	 */
	if (hashdist)
		return;

	inode_hashtable =
		alloc_large_system_hash("Inode-cache",
					sizeof(struct hlist_head),
					ihash_entries,
					14,
1942
					HASH_EARLY | HASH_ZERO,
L
Linus Torvalds 已提交
1943 1944
					&i_hash_shift,
					&i_hash_mask,
1945
					0,
L
Linus Torvalds 已提交
1946 1947 1948
					0);
}

1949
void __init inode_init(void)
L
Linus Torvalds 已提交
1950 1951
{
	/* inode slab cache */
1952 1953 1954 1955
	inode_cachep = kmem_cache_create("inode_cache",
					 sizeof(struct inode),
					 0,
					 (SLAB_RECLAIM_ACCOUNT|SLAB_PANIC|
1956
					 SLAB_MEM_SPREAD|SLAB_ACCOUNT),
1957
					 init_once);
L
Linus Torvalds 已提交
1958 1959 1960 1961 1962 1963 1964 1965 1966 1967

	/* Hash may have been set up in inode_init_early */
	if (!hashdist)
		return;

	inode_hashtable =
		alloc_large_system_hash("Inode-cache",
					sizeof(struct hlist_head),
					ihash_entries,
					14,
1968
					HASH_ZERO,
L
Linus Torvalds 已提交
1969 1970
					&i_hash_shift,
					&i_hash_mask,
1971
					0,
L
Linus Torvalds 已提交
1972 1973 1974 1975 1976 1977 1978 1979 1980 1981 1982 1983 1984
					0);
}

void init_special_inode(struct inode *inode, umode_t mode, dev_t rdev)
{
	inode->i_mode = mode;
	if (S_ISCHR(mode)) {
		inode->i_fop = &def_chr_fops;
		inode->i_rdev = rdev;
	} else if (S_ISBLK(mode)) {
		inode->i_fop = &def_blk_fops;
		inode->i_rdev = rdev;
	} else if (S_ISFIFO(mode))
1985
		inode->i_fop = &pipefifo_fops;
L
Linus Torvalds 已提交
1986
	else if (S_ISSOCK(mode))
1987
		;	/* leave it no_open_fops */
L
Linus Torvalds 已提交
1988
	else
1989 1990 1991
		printk(KERN_DEBUG "init_special_inode: bogus i_mode (%o) for"
				  " inode %s:%lu\n", mode, inode->i_sb->s_id,
				  inode->i_ino);
L
Linus Torvalds 已提交
1992 1993
}
EXPORT_SYMBOL(init_special_inode);
1994 1995

/**
1996
 * inode_init_owner - Init uid,gid,mode for new inode according to posix standards
1997 1998 1999 2000 2001
 * @inode: New inode
 * @dir: Directory inode
 * @mode: mode of the new inode
 */
void inode_init_owner(struct inode *inode, const struct inode *dir,
A
Al Viro 已提交
2002
			umode_t mode)
2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013
{
	inode->i_uid = current_fsuid();
	if (dir && dir->i_mode & S_ISGID) {
		inode->i_gid = dir->i_gid;
		if (S_ISDIR(mode))
			mode |= S_ISGID;
	} else
		inode->i_gid = current_fsgid();
	inode->i_mode = mode;
}
EXPORT_SYMBOL(inode_init_owner);
2014

2015 2016 2017 2018
/**
 * inode_owner_or_capable - check current task permissions to inode
 * @inode: inode being checked
 *
2019 2020
 * Return true if current either has CAP_FOWNER in a namespace with the
 * inode owner uid mapped, or owns the file.
2021
 */
2022
bool inode_owner_or_capable(const struct inode *inode)
2023
{
2024 2025
	struct user_namespace *ns;

2026
	if (uid_eq(current_fsuid(), inode->i_uid))
2027
		return true;
2028 2029

	ns = current_user_ns();
2030
	if (kuid_has_mapping(ns, inode->i_uid) && ns_capable(ns, CAP_FOWNER))
2031 2032 2033
		return true;
	return false;
}
2034
EXPORT_SYMBOL(inode_owner_or_capable);
2035 2036 2037 2038 2039 2040 2041 2042 2043 2044

/*
 * Direct i/o helper functions
 */
static void __inode_dio_wait(struct inode *inode)
{
	wait_queue_head_t *wq = bit_waitqueue(&inode->i_state, __I_DIO_WAKEUP);
	DEFINE_WAIT_BIT(q, &inode->i_state, __I_DIO_WAKEUP);

	do {
2045
		prepare_to_wait(wq, &q.wq_entry, TASK_UNINTERRUPTIBLE);
2046 2047 2048
		if (atomic_read(&inode->i_dio_count))
			schedule();
	} while (atomic_read(&inode->i_dio_count));
2049
	finish_wait(wq, &q.wq_entry);
2050 2051 2052 2053 2054 2055 2056 2057 2058 2059 2060 2061 2062 2063 2064 2065 2066 2067 2068
}

/**
 * inode_dio_wait - wait for outstanding DIO requests to finish
 * @inode: inode to wait for
 *
 * Waits for all pending direct I/O requests to finish so that we can
 * proceed with a truncate or equivalent operation.
 *
 * Must be called under a lock that serializes taking new references
 * to i_dio_count, usually by inode->i_mutex.
 */
void inode_dio_wait(struct inode *inode)
{
	if (atomic_read(&inode->i_dio_count))
		__inode_dio_wait(inode);
}
EXPORT_SYMBOL(inode_dio_wait);

2069 2070 2071 2072 2073 2074 2075 2076
/*
 * inode_set_flags - atomically set some inode flags
 *
 * Note: the caller should be holding i_mutex, or else be sure that
 * they have exclusive access to the inode structure (i.e., while the
 * inode is being instantiated).  The reason for the cmpxchg() loop
 * --- which wouldn't be necessary if all code paths which modify
 * i_flags actually followed this rule, is that there is at least one
2077 2078
 * code path which doesn't today so we use cmpxchg() out of an abundance
 * of caution.
2079 2080 2081 2082 2083 2084 2085 2086 2087 2088 2089 2090 2091 2092 2093 2094 2095 2096 2097
 *
 * In the long run, i_mutex is overkill, and we should probably look
 * at using the i_lock spinlock to protect i_flags, and then make sure
 * it is so documented in include/linux/fs.h and that all code follows
 * the locking convention!!
 */
void inode_set_flags(struct inode *inode, unsigned int flags,
		     unsigned int mask)
{
	unsigned int old_flags, new_flags;

	WARN_ON_ONCE(flags & ~mask);
	do {
		old_flags = ACCESS_ONCE(inode->i_flags);
		new_flags = (old_flags & ~mask) | flags;
	} while (unlikely(cmpxchg(&inode->i_flags, old_flags,
				  new_flags) != old_flags));
}
EXPORT_SYMBOL(inode_set_flags);
2098 2099 2100 2101 2102 2103

void inode_nohighmem(struct inode *inode)
{
	mapping_set_gfp_mask(inode->i_mapping, GFP_USER);
}
EXPORT_SYMBOL(inode_nohighmem);
D
Deepa Dinamani 已提交
2104 2105 2106 2107 2108 2109 2110 2111 2112 2113 2114 2115 2116 2117 2118 2119 2120 2121 2122 2123 2124 2125 2126

/**
 * current_time - Return FS time
 * @inode: inode.
 *
 * Return the current time truncated to the time granularity supported by
 * the fs.
 *
 * Note that inode and inode->sb cannot be NULL.
 * Otherwise, the function warns and returns time without truncation.
 */
struct timespec current_time(struct inode *inode)
{
	struct timespec now = current_kernel_time();

	if (unlikely(!inode->i_sb)) {
		WARN(1, "current_time() called with uninitialized super_block in the inode");
		return now;
	}

	return timespec_trunc(now, inode->i_sb->s_time_gran);
}
EXPORT_SYMBOL(current_time);