Merge tag 'md/3.20' of git://neil.brown.name/md
[linux-drm-fsl-dcu.git] / fs / nfs / write.c
1 /*
2  * linux/fs/nfs/write.c
3  *
4  * Write file data over NFS.
5  *
6  * Copyright (C) 1996, 1997, Olaf Kirch <okir@monad.swb.de>
7  */
8
9 #include <linux/types.h>
10 #include <linux/slab.h>
11 #include <linux/mm.h>
12 #include <linux/pagemap.h>
13 #include <linux/file.h>
14 #include <linux/writeback.h>
15 #include <linux/swap.h>
16 #include <linux/migrate.h>
17
18 #include <linux/sunrpc/clnt.h>
19 #include <linux/nfs_fs.h>
20 #include <linux/nfs_mount.h>
21 #include <linux/nfs_page.h>
22 #include <linux/backing-dev.h>
23 #include <linux/export.h>
24
25 #include <asm/uaccess.h>
26
27 #include "delegation.h"
28 #include "internal.h"
29 #include "iostat.h"
30 #include "nfs4_fs.h"
31 #include "fscache.h"
32 #include "pnfs.h"
33
34 #include "nfstrace.h"
35
36 #define NFSDBG_FACILITY         NFSDBG_PAGECACHE
37
38 #define MIN_POOL_WRITE          (32)
39 #define MIN_POOL_COMMIT         (4)
40
41 /*
42  * Local function declarations
43  */
44 static void nfs_redirty_request(struct nfs_page *req);
45 static const struct rpc_call_ops nfs_commit_ops;
46 static const struct nfs_pgio_completion_ops nfs_async_write_completion_ops;
47 static const struct nfs_commit_completion_ops nfs_commit_completion_ops;
48 static const struct nfs_rw_ops nfs_rw_write_ops;
49 static void nfs_clear_request_commit(struct nfs_page *req);
50 static void nfs_init_cinfo_from_inode(struct nfs_commit_info *cinfo,
51                                       struct inode *inode);
52 static struct nfs_page *
53 nfs_page_search_commits_for_head_request_locked(struct nfs_inode *nfsi,
54                                                 struct page *page);
55
56 static struct kmem_cache *nfs_wdata_cachep;
57 static mempool_t *nfs_wdata_mempool;
58 static struct kmem_cache *nfs_cdata_cachep;
59 static mempool_t *nfs_commit_mempool;
60
61 struct nfs_commit_data *nfs_commitdata_alloc(void)
62 {
63         struct nfs_commit_data *p = mempool_alloc(nfs_commit_mempool, GFP_NOIO);
64
65         if (p) {
66                 memset(p, 0, sizeof(*p));
67                 INIT_LIST_HEAD(&p->pages);
68         }
69         return p;
70 }
71 EXPORT_SYMBOL_GPL(nfs_commitdata_alloc);
72
73 void nfs_commit_free(struct nfs_commit_data *p)
74 {
75         mempool_free(p, nfs_commit_mempool);
76 }
77 EXPORT_SYMBOL_GPL(nfs_commit_free);
78
79 static struct nfs_pgio_header *nfs_writehdr_alloc(void)
80 {
81         struct nfs_pgio_header *p = mempool_alloc(nfs_wdata_mempool, GFP_NOIO);
82
83         if (p)
84                 memset(p, 0, sizeof(*p));
85         return p;
86 }
87
88 static void nfs_writehdr_free(struct nfs_pgio_header *hdr)
89 {
90         mempool_free(hdr, nfs_wdata_mempool);
91 }
92
93 static void nfs_context_set_write_error(struct nfs_open_context *ctx, int error)
94 {
95         ctx->error = error;
96         smp_wmb();
97         set_bit(NFS_CONTEXT_ERROR_WRITE, &ctx->flags);
98 }
99
100 /*
101  * nfs_page_find_head_request_locked - find head request associated with @page
102  *
103  * must be called while holding the inode lock.
104  *
105  * returns matching head request with reference held, or NULL if not found.
106  */
107 static struct nfs_page *
108 nfs_page_find_head_request_locked(struct nfs_inode *nfsi, struct page *page)
109 {
110         struct nfs_page *req = NULL;
111
112         if (PagePrivate(page))
113                 req = (struct nfs_page *)page_private(page);
114         else if (unlikely(PageSwapCache(page)))
115                 req = nfs_page_search_commits_for_head_request_locked(nfsi,
116                         page);
117
118         if (req) {
119                 WARN_ON_ONCE(req->wb_head != req);
120                 kref_get(&req->wb_kref);
121         }
122
123         return req;
124 }
125
126 /*
127  * nfs_page_find_head_request - find head request associated with @page
128  *
129  * returns matching head request with reference held, or NULL if not found.
130  */
131 static struct nfs_page *nfs_page_find_head_request(struct page *page)
132 {
133         struct inode *inode = page_file_mapping(page)->host;
134         struct nfs_page *req = NULL;
135
136         spin_lock(&inode->i_lock);
137         req = nfs_page_find_head_request_locked(NFS_I(inode), page);
138         spin_unlock(&inode->i_lock);
139         return req;
140 }
141
142 /* Adjust the file length if we're writing beyond the end */
143 static void nfs_grow_file(struct page *page, unsigned int offset, unsigned int count)
144 {
145         struct inode *inode = page_file_mapping(page)->host;
146         loff_t end, i_size;
147         pgoff_t end_index;
148
149         spin_lock(&inode->i_lock);
150         i_size = i_size_read(inode);
151         end_index = (i_size - 1) >> PAGE_CACHE_SHIFT;
152         if (i_size > 0 && page_file_index(page) < end_index)
153                 goto out;
154         end = page_file_offset(page) + ((loff_t)offset+count);
155         if (i_size >= end)
156                 goto out;
157         i_size_write(inode, end);
158         nfs_inc_stats(inode, NFSIOS_EXTENDWRITE);
159 out:
160         spin_unlock(&inode->i_lock);
161 }
162
163 /* A writeback failed: mark the page as bad, and invalidate the page cache */
164 static void nfs_set_pageerror(struct page *page)
165 {
166         nfs_zap_mapping(page_file_mapping(page)->host, page_file_mapping(page));
167 }
168
169 /*
170  * nfs_page_group_search_locked
171  * @head - head request of page group
172  * @page_offset - offset into page
173  *
174  * Search page group with head @head to find a request that contains the
175  * page offset @page_offset.
176  *
177  * Returns a pointer to the first matching nfs request, or NULL if no
178  * match is found.
179  *
180  * Must be called with the page group lock held
181  */
182 static struct nfs_page *
183 nfs_page_group_search_locked(struct nfs_page *head, unsigned int page_offset)
184 {
185         struct nfs_page *req;
186
187         WARN_ON_ONCE(head != head->wb_head);
188         WARN_ON_ONCE(!test_bit(PG_HEADLOCK, &head->wb_head->wb_flags));
189
190         req = head;
191         do {
192                 if (page_offset >= req->wb_pgbase &&
193                     page_offset < (req->wb_pgbase + req->wb_bytes))
194                         return req;
195
196                 req = req->wb_this_page;
197         } while (req != head);
198
199         return NULL;
200 }
201
202 /*
203  * nfs_page_group_covers_page
204  * @head - head request of page group
205  *
206  * Return true if the page group with head @head covers the whole page,
207  * returns false otherwise
208  */
209 static bool nfs_page_group_covers_page(struct nfs_page *req)
210 {
211         struct nfs_page *tmp;
212         unsigned int pos = 0;
213         unsigned int len = nfs_page_length(req->wb_page);
214
215         nfs_page_group_lock(req, false);
216
217         do {
218                 tmp = nfs_page_group_search_locked(req->wb_head, pos);
219                 if (tmp) {
220                         /* no way this should happen */
221                         WARN_ON_ONCE(tmp->wb_pgbase != pos);
222                         pos += tmp->wb_bytes - (pos - tmp->wb_pgbase);
223                 }
224         } while (tmp && pos < len);
225
226         nfs_page_group_unlock(req);
227         WARN_ON_ONCE(pos > len);
228         return pos == len;
229 }
230
231 /* We can set the PG_uptodate flag if we see that a write request
232  * covers the full page.
233  */
234 static void nfs_mark_uptodate(struct nfs_page *req)
235 {
236         if (PageUptodate(req->wb_page))
237                 return;
238         if (!nfs_page_group_covers_page(req))
239                 return;
240         SetPageUptodate(req->wb_page);
241 }
242
243 static int wb_priority(struct writeback_control *wbc)
244 {
245         int ret = 0;
246         if (wbc->for_reclaim)
247                 return FLUSH_HIGHPRI | FLUSH_STABLE;
248         if (wbc->sync_mode == WB_SYNC_ALL)
249                 ret = FLUSH_COND_STABLE;
250         if (wbc->for_kupdate || wbc->for_background)
251                 ret |= FLUSH_LOWPRI;
252         return ret;
253 }
254
255 /*
256  * NFS congestion control
257  */
258
259 int nfs_congestion_kb;
260
261 #define NFS_CONGESTION_ON_THRESH        (nfs_congestion_kb >> (PAGE_SHIFT-10))
262 #define NFS_CONGESTION_OFF_THRESH       \
263         (NFS_CONGESTION_ON_THRESH - (NFS_CONGESTION_ON_THRESH >> 2))
264
265 static void nfs_set_page_writeback(struct page *page)
266 {
267         struct nfs_server *nfss = NFS_SERVER(page_file_mapping(page)->host);
268         int ret = test_set_page_writeback(page);
269
270         WARN_ON_ONCE(ret != 0);
271
272         if (atomic_long_inc_return(&nfss->writeback) >
273                         NFS_CONGESTION_ON_THRESH) {
274                 set_bdi_congested(&nfss->backing_dev_info,
275                                         BLK_RW_ASYNC);
276         }
277 }
278
279 static void nfs_end_page_writeback(struct nfs_page *req)
280 {
281         struct inode *inode = page_file_mapping(req->wb_page)->host;
282         struct nfs_server *nfss = NFS_SERVER(inode);
283
284         if (!nfs_page_group_sync_on_bit(req, PG_WB_END))
285                 return;
286
287         end_page_writeback(req->wb_page);
288         if (atomic_long_dec_return(&nfss->writeback) < NFS_CONGESTION_OFF_THRESH)
289                 clear_bdi_congested(&nfss->backing_dev_info, BLK_RW_ASYNC);
290 }
291
292
293 /* nfs_page_group_clear_bits
294  *   @req - an nfs request
295  * clears all page group related bits from @req
296  */
297 static void
298 nfs_page_group_clear_bits(struct nfs_page *req)
299 {
300         clear_bit(PG_TEARDOWN, &req->wb_flags);
301         clear_bit(PG_UNLOCKPAGE, &req->wb_flags);
302         clear_bit(PG_UPTODATE, &req->wb_flags);
303         clear_bit(PG_WB_END, &req->wb_flags);
304         clear_bit(PG_REMOVE, &req->wb_flags);
305 }
306
307
308 /*
309  * nfs_unroll_locks_and_wait -  unlock all newly locked reqs and wait on @req
310  *
311  * this is a helper function for nfs_lock_and_join_requests
312  *
313  * @inode - inode associated with request page group, must be holding inode lock
314  * @head  - head request of page group, must be holding head lock
315  * @req   - request that couldn't lock and needs to wait on the req bit lock
316  * @nonblock - if true, don't actually wait
317  *
318  * NOTE: this must be called holding page_group bit lock and inode spin lock
319  *       and BOTH will be released before returning.
320  *
321  * returns 0 on success, < 0 on error.
322  */
323 static int
324 nfs_unroll_locks_and_wait(struct inode *inode, struct nfs_page *head,
325                           struct nfs_page *req, bool nonblock)
326         __releases(&inode->i_lock)
327 {
328         struct nfs_page *tmp;
329         int ret;
330
331         /* relinquish all the locks successfully grabbed this run */
332         for (tmp = head ; tmp != req; tmp = tmp->wb_this_page)
333                 nfs_unlock_request(tmp);
334
335         WARN_ON_ONCE(test_bit(PG_TEARDOWN, &req->wb_flags));
336
337         /* grab a ref on the request that will be waited on */
338         kref_get(&req->wb_kref);
339
340         nfs_page_group_unlock(head);
341         spin_unlock(&inode->i_lock);
342
343         /* release ref from nfs_page_find_head_request_locked */
344         nfs_release_request(head);
345
346         if (!nonblock)
347                 ret = nfs_wait_on_request(req);
348         else
349                 ret = -EAGAIN;
350         nfs_release_request(req);
351
352         return ret;
353 }
354
355 /*
356  * nfs_destroy_unlinked_subrequests - destroy recently unlinked subrequests
357  *
358  * @destroy_list - request list (using wb_this_page) terminated by @old_head
359  * @old_head - the old head of the list
360  *
361  * All subrequests must be locked and removed from all lists, so at this point
362  * they are only "active" in this function, and possibly in nfs_wait_on_request
363  * with a reference held by some other context.
364  */
365 static void
366 nfs_destroy_unlinked_subrequests(struct nfs_page *destroy_list,
367                                  struct nfs_page *old_head)
368 {
369         while (destroy_list) {
370                 struct nfs_page *subreq = destroy_list;
371
372                 destroy_list = (subreq->wb_this_page == old_head) ?
373                                    NULL : subreq->wb_this_page;
374
375                 WARN_ON_ONCE(old_head != subreq->wb_head);
376
377                 /* make sure old group is not used */
378                 subreq->wb_head = subreq;
379                 subreq->wb_this_page = subreq;
380
381                 /* subreq is now totally disconnected from page group or any
382                  * write / commit lists. last chance to wake any waiters */
383                 nfs_unlock_request(subreq);
384
385                 if (!test_bit(PG_TEARDOWN, &subreq->wb_flags)) {
386                         /* release ref on old head request */
387                         nfs_release_request(old_head);
388
389                         nfs_page_group_clear_bits(subreq);
390
391                         /* release the PG_INODE_REF reference */
392                         if (test_and_clear_bit(PG_INODE_REF, &subreq->wb_flags))
393                                 nfs_release_request(subreq);
394                         else
395                                 WARN_ON_ONCE(1);
396                 } else {
397                         WARN_ON_ONCE(test_bit(PG_CLEAN, &subreq->wb_flags));
398                         /* zombie requests have already released the last
399                          * reference and were waiting on the rest of the
400                          * group to complete. Since it's no longer part of a
401                          * group, simply free the request */
402                         nfs_page_group_clear_bits(subreq);
403                         nfs_free_request(subreq);
404                 }
405         }
406 }
407
408 /*
409  * nfs_lock_and_join_requests - join all subreqs to the head req and return
410  *                              a locked reference, cancelling any pending
411  *                              operations for this page.
412  *
413  * @page - the page used to lookup the "page group" of nfs_page structures
414  * @nonblock - if true, don't block waiting for request locks
415  *
416  * This function joins all sub requests to the head request by first
417  * locking all requests in the group, cancelling any pending operations
418  * and finally updating the head request to cover the whole range covered by
419  * the (former) group.  All subrequests are removed from any write or commit
420  * lists, unlinked from the group and destroyed.
421  *
422  * Returns a locked, referenced pointer to the head request - which after
423  * this call is guaranteed to be the only request associated with the page.
424  * Returns NULL if no requests are found for @page, or a ERR_PTR if an
425  * error was encountered.
426  */
427 static struct nfs_page *
428 nfs_lock_and_join_requests(struct page *page, bool nonblock)
429 {
430         struct inode *inode = page_file_mapping(page)->host;
431         struct nfs_page *head, *subreq;
432         struct nfs_page *destroy_list = NULL;
433         unsigned int total_bytes;
434         int ret;
435
436 try_again:
437         total_bytes = 0;
438
439         WARN_ON_ONCE(destroy_list);
440
441         spin_lock(&inode->i_lock);
442
443         /*
444          * A reference is taken only on the head request which acts as a
445          * reference to the whole page group - the group will not be destroyed
446          * until the head reference is released.
447          */
448         head = nfs_page_find_head_request_locked(NFS_I(inode), page);
449
450         if (!head) {
451                 spin_unlock(&inode->i_lock);
452                 return NULL;
453         }
454
455         /* holding inode lock, so always make a non-blocking call to try the
456          * page group lock */
457         ret = nfs_page_group_lock(head, true);
458         if (ret < 0) {
459                 spin_unlock(&inode->i_lock);
460
461                 if (!nonblock && ret == -EAGAIN) {
462                         nfs_page_group_lock_wait(head);
463                         nfs_release_request(head);
464                         goto try_again;
465                 }
466
467                 nfs_release_request(head);
468                 return ERR_PTR(ret);
469         }
470
471         /* lock each request in the page group */
472         subreq = head;
473         do {
474                 /*
475                  * Subrequests are always contiguous, non overlapping
476                  * and in order - but may be repeated (mirrored writes).
477                  */
478                 if (subreq->wb_offset == (head->wb_offset + total_bytes)) {
479                         /* keep track of how many bytes this group covers */
480                         total_bytes += subreq->wb_bytes;
481                 } else if (WARN_ON_ONCE(subreq->wb_offset < head->wb_offset ||
482                             ((subreq->wb_offset + subreq->wb_bytes) >
483                              (head->wb_offset + total_bytes)))) {
484                         nfs_page_group_unlock(head);
485                         spin_unlock(&inode->i_lock);
486                         return ERR_PTR(-EIO);
487                 }
488
489                 if (!nfs_lock_request(subreq)) {
490                         /* releases page group bit lock and
491                          * inode spin lock and all references */
492                         ret = nfs_unroll_locks_and_wait(inode, head,
493                                 subreq, nonblock);
494
495                         if (ret == 0)
496                                 goto try_again;
497
498                         return ERR_PTR(ret);
499                 }
500
501                 subreq = subreq->wb_this_page;
502         } while (subreq != head);
503
504         /* Now that all requests are locked, make sure they aren't on any list.
505          * Commit list removal accounting is done after locks are dropped */
506         subreq = head;
507         do {
508                 nfs_clear_request_commit(subreq);
509                 subreq = subreq->wb_this_page;
510         } while (subreq != head);
511
512         /* unlink subrequests from head, destroy them later */
513         if (head->wb_this_page != head) {
514                 /* destroy list will be terminated by head */
515                 destroy_list = head->wb_this_page;
516                 head->wb_this_page = head;
517
518                 /* change head request to cover whole range that
519                  * the former page group covered */
520                 head->wb_bytes = total_bytes;
521         }
522
523         /*
524          * prepare head request to be added to new pgio descriptor
525          */
526         nfs_page_group_clear_bits(head);
527
528         /*
529          * some part of the group was still on the inode list - otherwise
530          * the group wouldn't be involved in async write.
531          * grab a reference for the head request, iff it needs one.
532          */
533         if (!test_and_set_bit(PG_INODE_REF, &head->wb_flags))
534                 kref_get(&head->wb_kref);
535
536         nfs_page_group_unlock(head);
537
538         /* drop lock to clean uprequests on destroy list */
539         spin_unlock(&inode->i_lock);
540
541         nfs_destroy_unlinked_subrequests(destroy_list, head);
542
543         /* still holds ref on head from nfs_page_find_head_request_locked
544          * and still has lock on head from lock loop */
545         return head;
546 }
547
548 /*
549  * Find an associated nfs write request, and prepare to flush it out
550  * May return an error if the user signalled nfs_wait_on_request().
551  */
552 static int nfs_page_async_flush(struct nfs_pageio_descriptor *pgio,
553                                 struct page *page, bool nonblock)
554 {
555         struct nfs_page *req;
556         int ret = 0;
557
558         req = nfs_lock_and_join_requests(page, nonblock);
559         if (!req)
560                 goto out;
561         ret = PTR_ERR(req);
562         if (IS_ERR(req))
563                 goto out;
564
565         nfs_set_page_writeback(page);
566         WARN_ON_ONCE(test_bit(PG_CLEAN, &req->wb_flags));
567
568         ret = 0;
569         if (!nfs_pageio_add_request(pgio, req)) {
570                 nfs_redirty_request(req);
571                 ret = pgio->pg_error;
572         }
573 out:
574         return ret;
575 }
576
577 static int nfs_do_writepage(struct page *page, struct writeback_control *wbc, struct nfs_pageio_descriptor *pgio)
578 {
579         struct inode *inode = page_file_mapping(page)->host;
580         int ret;
581
582         nfs_inc_stats(inode, NFSIOS_VFSWRITEPAGE);
583         nfs_inc_stats(inode, NFSIOS_WRITEPAGES);
584
585         nfs_pageio_cond_complete(pgio, page_file_index(page));
586         ret = nfs_page_async_flush(pgio, page, wbc->sync_mode == WB_SYNC_NONE);
587         if (ret == -EAGAIN) {
588                 redirty_page_for_writepage(wbc, page);
589                 ret = 0;
590         }
591         return ret;
592 }
593
594 /*
595  * Write an mmapped page to the server.
596  */
597 static int nfs_writepage_locked(struct page *page, struct writeback_control *wbc)
598 {
599         struct nfs_pageio_descriptor pgio;
600         int err;
601
602         nfs_pageio_init_write(&pgio, page->mapping->host, wb_priority(wbc),
603                                 false, &nfs_async_write_completion_ops);
604         err = nfs_do_writepage(page, wbc, &pgio);
605         nfs_pageio_complete(&pgio);
606         if (err < 0)
607                 return err;
608         if (pgio.pg_error < 0)
609                 return pgio.pg_error;
610         return 0;
611 }
612
613 int nfs_writepage(struct page *page, struct writeback_control *wbc)
614 {
615         int ret;
616
617         ret = nfs_writepage_locked(page, wbc);
618         unlock_page(page);
619         return ret;
620 }
621
622 static int nfs_writepages_callback(struct page *page, struct writeback_control *wbc, void *data)
623 {
624         int ret;
625
626         ret = nfs_do_writepage(page, wbc, data);
627         unlock_page(page);
628         return ret;
629 }
630
631 int nfs_writepages(struct address_space *mapping, struct writeback_control *wbc)
632 {
633         struct inode *inode = mapping->host;
634         unsigned long *bitlock = &NFS_I(inode)->flags;
635         struct nfs_pageio_descriptor pgio;
636         int err;
637
638         /* Stop dirtying of new pages while we sync */
639         err = wait_on_bit_lock_action(bitlock, NFS_INO_FLUSHING,
640                         nfs_wait_bit_killable, TASK_KILLABLE);
641         if (err)
642                 goto out_err;
643
644         nfs_inc_stats(inode, NFSIOS_VFSWRITEPAGES);
645
646         nfs_pageio_init_write(&pgio, inode, wb_priority(wbc), false,
647                                 &nfs_async_write_completion_ops);
648         err = write_cache_pages(mapping, wbc, nfs_writepages_callback, &pgio);
649         nfs_pageio_complete(&pgio);
650
651         clear_bit_unlock(NFS_INO_FLUSHING, bitlock);
652         smp_mb__after_atomic();
653         wake_up_bit(bitlock, NFS_INO_FLUSHING);
654
655         if (err < 0)
656                 goto out_err;
657         err = pgio.pg_error;
658         if (err < 0)
659                 goto out_err;
660         return 0;
661 out_err:
662         return err;
663 }
664
665 /*
666  * Insert a write request into an inode
667  */
668 static void nfs_inode_add_request(struct inode *inode, struct nfs_page *req)
669 {
670         struct nfs_inode *nfsi = NFS_I(inode);
671
672         WARN_ON_ONCE(req->wb_this_page != req);
673
674         /* Lock the request! */
675         nfs_lock_request(req);
676
677         spin_lock(&inode->i_lock);
678         if (!nfsi->nrequests &&
679             NFS_PROTO(inode)->have_delegation(inode, FMODE_WRITE))
680                 inode->i_version++;
681         /*
682          * Swap-space should not get truncated. Hence no need to plug the race
683          * with invalidate/truncate.
684          */
685         if (likely(!PageSwapCache(req->wb_page))) {
686                 set_bit(PG_MAPPED, &req->wb_flags);
687                 SetPagePrivate(req->wb_page);
688                 set_page_private(req->wb_page, (unsigned long)req);
689         }
690         nfsi->nrequests++;
691         /* this a head request for a page group - mark it as having an
692          * extra reference so sub groups can follow suit.
693          * This flag also informs pgio layer when to bump nrequests when
694          * adding subrequests. */
695         WARN_ON(test_and_set_bit(PG_INODE_REF, &req->wb_flags));
696         kref_get(&req->wb_kref);
697         spin_unlock(&inode->i_lock);
698 }
699
700 /*
701  * Remove a write request from an inode
702  */
703 static void nfs_inode_remove_request(struct nfs_page *req)
704 {
705         struct inode *inode = req->wb_context->dentry->d_inode;
706         struct nfs_inode *nfsi = NFS_I(inode);
707         struct nfs_page *head;
708
709         if (nfs_page_group_sync_on_bit(req, PG_REMOVE)) {
710                 head = req->wb_head;
711
712                 spin_lock(&inode->i_lock);
713                 if (likely(!PageSwapCache(head->wb_page))) {
714                         set_page_private(head->wb_page, 0);
715                         ClearPagePrivate(head->wb_page);
716                         smp_mb__after_atomic();
717                         wake_up_page(head->wb_page, PG_private);
718                         clear_bit(PG_MAPPED, &head->wb_flags);
719                 }
720                 nfsi->nrequests--;
721                 spin_unlock(&inode->i_lock);
722         } else {
723                 spin_lock(&inode->i_lock);
724                 nfsi->nrequests--;
725                 spin_unlock(&inode->i_lock);
726         }
727
728         if (test_and_clear_bit(PG_INODE_REF, &req->wb_flags))
729                 nfs_release_request(req);
730 }
731
732 static void
733 nfs_mark_request_dirty(struct nfs_page *req)
734 {
735         __set_page_dirty_nobuffers(req->wb_page);
736 }
737
738 /*
739  * nfs_page_search_commits_for_head_request_locked
740  *
741  * Search through commit lists on @inode for the head request for @page.
742  * Must be called while holding the inode (which is cinfo) lock.
743  *
744  * Returns the head request if found, or NULL if not found.
745  */
746 static struct nfs_page *
747 nfs_page_search_commits_for_head_request_locked(struct nfs_inode *nfsi,
748                                                 struct page *page)
749 {
750         struct nfs_page *freq, *t;
751         struct nfs_commit_info cinfo;
752         struct inode *inode = &nfsi->vfs_inode;
753
754         nfs_init_cinfo_from_inode(&cinfo, inode);
755
756         /* search through pnfs commit lists */
757         freq = pnfs_search_commit_reqs(inode, &cinfo, page);
758         if (freq)
759                 return freq->wb_head;
760
761         /* Linearly search the commit list for the correct request */
762         list_for_each_entry_safe(freq, t, &cinfo.mds->list, wb_list) {
763                 if (freq->wb_page == page)
764                         return freq->wb_head;
765         }
766
767         return NULL;
768 }
769
770 /**
771  * nfs_request_add_commit_list - add request to a commit list
772  * @req: pointer to a struct nfs_page
773  * @dst: commit list head
774  * @cinfo: holds list lock and accounting info
775  *
776  * This sets the PG_CLEAN bit, updates the cinfo count of
777  * number of outstanding requests requiring a commit as well as
778  * the MM page stats.
779  *
780  * The caller must _not_ hold the cinfo->lock, but must be
781  * holding the nfs_page lock.
782  */
783 void
784 nfs_request_add_commit_list(struct nfs_page *req, struct list_head *dst,
785                             struct nfs_commit_info *cinfo)
786 {
787         set_bit(PG_CLEAN, &(req)->wb_flags);
788         spin_lock(cinfo->lock);
789         nfs_list_add_request(req, dst);
790         cinfo->mds->ncommit++;
791         spin_unlock(cinfo->lock);
792         if (!cinfo->dreq) {
793                 inc_zone_page_state(req->wb_page, NR_UNSTABLE_NFS);
794                 inc_bdi_stat(page_file_mapping(req->wb_page)->backing_dev_info,
795                              BDI_RECLAIMABLE);
796                 __mark_inode_dirty(req->wb_context->dentry->d_inode,
797                                    I_DIRTY_DATASYNC);
798         }
799 }
800 EXPORT_SYMBOL_GPL(nfs_request_add_commit_list);
801
802 /**
803  * nfs_request_remove_commit_list - Remove request from a commit list
804  * @req: pointer to a nfs_page
805  * @cinfo: holds list lock and accounting info
806  *
807  * This clears the PG_CLEAN bit, and updates the cinfo's count of
808  * number of outstanding requests requiring a commit
809  * It does not update the MM page stats.
810  *
811  * The caller _must_ hold the cinfo->lock and the nfs_page lock.
812  */
813 void
814 nfs_request_remove_commit_list(struct nfs_page *req,
815                                struct nfs_commit_info *cinfo)
816 {
817         if (!test_and_clear_bit(PG_CLEAN, &(req)->wb_flags))
818                 return;
819         nfs_list_remove_request(req);
820         cinfo->mds->ncommit--;
821 }
822 EXPORT_SYMBOL_GPL(nfs_request_remove_commit_list);
823
824 static void nfs_init_cinfo_from_inode(struct nfs_commit_info *cinfo,
825                                       struct inode *inode)
826 {
827         cinfo->lock = &inode->i_lock;
828         cinfo->mds = &NFS_I(inode)->commit_info;
829         cinfo->ds = pnfs_get_ds_info(inode);
830         cinfo->dreq = NULL;
831         cinfo->completion_ops = &nfs_commit_completion_ops;
832 }
833
834 void nfs_init_cinfo(struct nfs_commit_info *cinfo,
835                     struct inode *inode,
836                     struct nfs_direct_req *dreq)
837 {
838         if (dreq)
839                 nfs_init_cinfo_from_dreq(cinfo, dreq);
840         else
841                 nfs_init_cinfo_from_inode(cinfo, inode);
842 }
843 EXPORT_SYMBOL_GPL(nfs_init_cinfo);
844
845 /*
846  * Add a request to the inode's commit list.
847  */
848 void
849 nfs_mark_request_commit(struct nfs_page *req, struct pnfs_layout_segment *lseg,
850                         struct nfs_commit_info *cinfo, u32 ds_commit_idx)
851 {
852         if (pnfs_mark_request_commit(req, lseg, cinfo, ds_commit_idx))
853                 return;
854         nfs_request_add_commit_list(req, &cinfo->mds->list, cinfo);
855 }
856
857 static void
858 nfs_clear_page_commit(struct page *page)
859 {
860         dec_zone_page_state(page, NR_UNSTABLE_NFS);
861         dec_bdi_stat(page_file_mapping(page)->backing_dev_info, BDI_RECLAIMABLE);
862 }
863
864 /* Called holding inode (/cinfo) lock */
865 static void
866 nfs_clear_request_commit(struct nfs_page *req)
867 {
868         if (test_bit(PG_CLEAN, &req->wb_flags)) {
869                 struct inode *inode = req->wb_context->dentry->d_inode;
870                 struct nfs_commit_info cinfo;
871
872                 nfs_init_cinfo_from_inode(&cinfo, inode);
873                 if (!pnfs_clear_request_commit(req, &cinfo)) {
874                         nfs_request_remove_commit_list(req, &cinfo);
875                 }
876                 nfs_clear_page_commit(req->wb_page);
877         }
878 }
879
880 int nfs_write_need_commit(struct nfs_pgio_header *hdr)
881 {
882         if (hdr->verf.committed == NFS_DATA_SYNC)
883                 return hdr->lseg == NULL;
884         return hdr->verf.committed != NFS_FILE_SYNC;
885 }
886
887 static void nfs_write_completion(struct nfs_pgio_header *hdr)
888 {
889         struct nfs_commit_info cinfo;
890         unsigned long bytes = 0;
891
892         if (test_bit(NFS_IOHDR_REDO, &hdr->flags))
893                 goto out;
894         nfs_init_cinfo_from_inode(&cinfo, hdr->inode);
895         while (!list_empty(&hdr->pages)) {
896                 struct nfs_page *req = nfs_list_entry(hdr->pages.next);
897
898                 bytes += req->wb_bytes;
899                 nfs_list_remove_request(req);
900                 if (test_bit(NFS_IOHDR_ERROR, &hdr->flags) &&
901                     (hdr->good_bytes < bytes)) {
902                         nfs_set_pageerror(req->wb_page);
903                         nfs_context_set_write_error(req->wb_context, hdr->error);
904                         goto remove_req;
905                 }
906                 if (nfs_write_need_commit(hdr)) {
907                         memcpy(&req->wb_verf, &hdr->verf.verifier, sizeof(req->wb_verf));
908                         nfs_mark_request_commit(req, hdr->lseg, &cinfo,
909                                 hdr->pgio_mirror_idx);
910                         goto next;
911                 }
912 remove_req:
913                 nfs_inode_remove_request(req);
914 next:
915                 nfs_unlock_request(req);
916                 nfs_end_page_writeback(req);
917                 nfs_release_request(req);
918         }
919 out:
920         hdr->release(hdr);
921 }
922
923 unsigned long
924 nfs_reqs_to_commit(struct nfs_commit_info *cinfo)
925 {
926         return cinfo->mds->ncommit;
927 }
928
929 /* cinfo->lock held by caller */
930 int
931 nfs_scan_commit_list(struct list_head *src, struct list_head *dst,
932                      struct nfs_commit_info *cinfo, int max)
933 {
934         struct nfs_page *req, *tmp;
935         int ret = 0;
936
937         list_for_each_entry_safe(req, tmp, src, wb_list) {
938                 if (!nfs_lock_request(req))
939                         continue;
940                 kref_get(&req->wb_kref);
941                 if (cond_resched_lock(cinfo->lock))
942                         list_safe_reset_next(req, tmp, wb_list);
943                 nfs_request_remove_commit_list(req, cinfo);
944                 nfs_list_add_request(req, dst);
945                 ret++;
946                 if ((ret == max) && !cinfo->dreq)
947                         break;
948         }
949         return ret;
950 }
951
952 /*
953  * nfs_scan_commit - Scan an inode for commit requests
954  * @inode: NFS inode to scan
955  * @dst: mds destination list
956  * @cinfo: mds and ds lists of reqs ready to commit
957  *
958  * Moves requests from the inode's 'commit' request list.
959  * The requests are *not* checked to ensure that they form a contiguous set.
960  */
961 int
962 nfs_scan_commit(struct inode *inode, struct list_head *dst,
963                 struct nfs_commit_info *cinfo)
964 {
965         int ret = 0;
966
967         spin_lock(cinfo->lock);
968         if (cinfo->mds->ncommit > 0) {
969                 const int max = INT_MAX;
970
971                 ret = nfs_scan_commit_list(&cinfo->mds->list, dst,
972                                            cinfo, max);
973                 ret += pnfs_scan_commit_lists(inode, cinfo, max - ret);
974         }
975         spin_unlock(cinfo->lock);
976         return ret;
977 }
978
979 /*
980  * Search for an existing write request, and attempt to update
981  * it to reflect a new dirty region on a given page.
982  *
983  * If the attempt fails, then the existing request is flushed out
984  * to disk.
985  */
986 static struct nfs_page *nfs_try_to_update_request(struct inode *inode,
987                 struct page *page,
988                 unsigned int offset,
989                 unsigned int bytes)
990 {
991         struct nfs_page *req;
992         unsigned int rqend;
993         unsigned int end;
994         int error;
995
996         if (!PagePrivate(page))
997                 return NULL;
998
999         end = offset + bytes;
1000         spin_lock(&inode->i_lock);
1001
1002         for (;;) {
1003                 req = nfs_page_find_head_request_locked(NFS_I(inode), page);
1004                 if (req == NULL)
1005                         goto out_unlock;
1006
1007                 /* should be handled by nfs_flush_incompatible */
1008                 WARN_ON_ONCE(req->wb_head != req);
1009                 WARN_ON_ONCE(req->wb_this_page != req);
1010
1011                 rqend = req->wb_offset + req->wb_bytes;
1012                 /*
1013                  * Tell the caller to flush out the request if
1014                  * the offsets are non-contiguous.
1015                  * Note: nfs_flush_incompatible() will already
1016                  * have flushed out requests having wrong owners.
1017                  */
1018                 if (offset > rqend
1019                     || end < req->wb_offset)
1020                         goto out_flushme;
1021
1022                 if (nfs_lock_request(req))
1023                         break;
1024
1025                 /* The request is locked, so wait and then retry */
1026                 spin_unlock(&inode->i_lock);
1027                 error = nfs_wait_on_request(req);
1028                 nfs_release_request(req);
1029                 if (error != 0)
1030                         goto out_err;
1031                 spin_lock(&inode->i_lock);
1032         }
1033
1034         /* Okay, the request matches. Update the region */
1035         if (offset < req->wb_offset) {
1036                 req->wb_offset = offset;
1037                 req->wb_pgbase = offset;
1038         }
1039         if (end > rqend)
1040                 req->wb_bytes = end - req->wb_offset;
1041         else
1042                 req->wb_bytes = rqend - req->wb_offset;
1043 out_unlock:
1044         if (req)
1045                 nfs_clear_request_commit(req);
1046         spin_unlock(&inode->i_lock);
1047         return req;
1048 out_flushme:
1049         spin_unlock(&inode->i_lock);
1050         nfs_release_request(req);
1051         error = nfs_wb_page(inode, page);
1052 out_err:
1053         return ERR_PTR(error);
1054 }
1055
1056 /*
1057  * Try to update an existing write request, or create one if there is none.
1058  *
1059  * Note: Should always be called with the Page Lock held to prevent races
1060  * if we have to add a new request. Also assumes that the caller has
1061  * already called nfs_flush_incompatible() if necessary.
1062  */
1063 static struct nfs_page * nfs_setup_write_request(struct nfs_open_context* ctx,
1064                 struct page *page, unsigned int offset, unsigned int bytes)
1065 {
1066         struct inode *inode = page_file_mapping(page)->host;
1067         struct nfs_page *req;
1068
1069         req = nfs_try_to_update_request(inode, page, offset, bytes);
1070         if (req != NULL)
1071                 goto out;
1072         req = nfs_create_request(ctx, page, NULL, offset, bytes);
1073         if (IS_ERR(req))
1074                 goto out;
1075         nfs_inode_add_request(inode, req);
1076 out:
1077         return req;
1078 }
1079
1080 static int nfs_writepage_setup(struct nfs_open_context *ctx, struct page *page,
1081                 unsigned int offset, unsigned int count)
1082 {
1083         struct nfs_page *req;
1084
1085         req = nfs_setup_write_request(ctx, page, offset, count);
1086         if (IS_ERR(req))
1087                 return PTR_ERR(req);
1088         /* Update file length */
1089         nfs_grow_file(page, offset, count);
1090         nfs_mark_uptodate(req);
1091         nfs_mark_request_dirty(req);
1092         nfs_unlock_and_release_request(req);
1093         return 0;
1094 }
1095
1096 int nfs_flush_incompatible(struct file *file, struct page *page)
1097 {
1098         struct nfs_open_context *ctx = nfs_file_open_context(file);
1099         struct nfs_lock_context *l_ctx;
1100         struct file_lock_context *flctx = file_inode(file)->i_flctx;
1101         struct nfs_page *req;
1102         int do_flush, status;
1103         /*
1104          * Look for a request corresponding to this page. If there
1105          * is one, and it belongs to another file, we flush it out
1106          * before we try to copy anything into the page. Do this
1107          * due to the lack of an ACCESS-type call in NFSv2.
1108          * Also do the same if we find a request from an existing
1109          * dropped page.
1110          */
1111         do {
1112                 req = nfs_page_find_head_request(page);
1113                 if (req == NULL)
1114                         return 0;
1115                 l_ctx = req->wb_lock_context;
1116                 do_flush = req->wb_page != page || req->wb_context != ctx;
1117                 /* for now, flush if more than 1 request in page_group */
1118                 do_flush |= req->wb_this_page != req;
1119                 if (l_ctx && flctx &&
1120                     !(list_empty_careful(&flctx->flc_posix) &&
1121                       list_empty_careful(&flctx->flc_flock))) {
1122                         do_flush |= l_ctx->lockowner.l_owner != current->files
1123                                 || l_ctx->lockowner.l_pid != current->tgid;
1124                 }
1125                 nfs_release_request(req);
1126                 if (!do_flush)
1127                         return 0;
1128                 status = nfs_wb_page(page_file_mapping(page)->host, page);
1129         } while (status == 0);
1130         return status;
1131 }
1132
1133 /*
1134  * Avoid buffered writes when a open context credential's key would
1135  * expire soon.
1136  *
1137  * Returns -EACCES if the key will expire within RPC_KEY_EXPIRE_FAIL.
1138  *
1139  * Return 0 and set a credential flag which triggers the inode to flush
1140  * and performs  NFS_FILE_SYNC writes if the key will expired within
1141  * RPC_KEY_EXPIRE_TIMEO.
1142  */
1143 int
1144 nfs_key_timeout_notify(struct file *filp, struct inode *inode)
1145 {
1146         struct nfs_open_context *ctx = nfs_file_open_context(filp);
1147         struct rpc_auth *auth = NFS_SERVER(inode)->client->cl_auth;
1148
1149         return rpcauth_key_timeout_notify(auth, ctx->cred);
1150 }
1151
1152 /*
1153  * Test if the open context credential key is marked to expire soon.
1154  */
1155 bool nfs_ctx_key_to_expire(struct nfs_open_context *ctx)
1156 {
1157         return rpcauth_cred_key_to_expire(ctx->cred);
1158 }
1159
1160 /*
1161  * If the page cache is marked as unsafe or invalid, then we can't rely on
1162  * the PageUptodate() flag. In this case, we will need to turn off
1163  * write optimisations that depend on the page contents being correct.
1164  */
1165 static bool nfs_write_pageuptodate(struct page *page, struct inode *inode)
1166 {
1167         struct nfs_inode *nfsi = NFS_I(inode);
1168
1169         if (nfs_have_delegated_attributes(inode))
1170                 goto out;
1171         if (nfsi->cache_validity & NFS_INO_REVAL_PAGECACHE)
1172                 return false;
1173         smp_rmb();
1174         if (test_bit(NFS_INO_INVALIDATING, &nfsi->flags))
1175                 return false;
1176 out:
1177         if (nfsi->cache_validity & NFS_INO_INVALID_DATA)
1178                 return false;
1179         return PageUptodate(page) != 0;
1180 }
1181
1182 static bool
1183 is_whole_file_wrlock(struct file_lock *fl)
1184 {
1185         return fl->fl_start == 0 && fl->fl_end == OFFSET_MAX &&
1186                         fl->fl_type == F_WRLCK;
1187 }
1188
1189 /* If we know the page is up to date, and we're not using byte range locks (or
1190  * if we have the whole file locked for writing), it may be more efficient to
1191  * extend the write to cover the entire page in order to avoid fragmentation
1192  * inefficiencies.
1193  *
1194  * If the file is opened for synchronous writes then we can just skip the rest
1195  * of the checks.
1196  */
1197 static int nfs_can_extend_write(struct file *file, struct page *page, struct inode *inode)
1198 {
1199         int ret;
1200         struct file_lock_context *flctx = inode->i_flctx;
1201         struct file_lock *fl;
1202
1203         if (file->f_flags & O_DSYNC)
1204                 return 0;
1205         if (!nfs_write_pageuptodate(page, inode))
1206                 return 0;
1207         if (NFS_PROTO(inode)->have_delegation(inode, FMODE_WRITE))
1208                 return 1;
1209         if (!flctx || (list_empty_careful(&flctx->flc_flock) &&
1210                        list_empty_careful(&flctx->flc_posix)))
1211                 return 0;
1212
1213         /* Check to see if there are whole file write locks */
1214         ret = 0;
1215         spin_lock(&flctx->flc_lock);
1216         if (!list_empty(&flctx->flc_posix)) {
1217                 fl = list_first_entry(&flctx->flc_posix, struct file_lock,
1218                                         fl_list);
1219                 if (is_whole_file_wrlock(fl))
1220                         ret = 1;
1221         } else if (!list_empty(&flctx->flc_flock)) {
1222                 fl = list_first_entry(&flctx->flc_flock, struct file_lock,
1223                                         fl_list);
1224                 if (fl->fl_type == F_WRLCK)
1225                         ret = 1;
1226         }
1227         spin_unlock(&flctx->flc_lock);
1228         return ret;
1229 }
1230
1231 /*
1232  * Update and possibly write a cached page of an NFS file.
1233  *
1234  * XXX: Keep an eye on generic_file_read to make sure it doesn't do bad
1235  * things with a page scheduled for an RPC call (e.g. invalidate it).
1236  */
1237 int nfs_updatepage(struct file *file, struct page *page,
1238                 unsigned int offset, unsigned int count)
1239 {
1240         struct nfs_open_context *ctx = nfs_file_open_context(file);
1241         struct inode    *inode = page_file_mapping(page)->host;
1242         int             status = 0;
1243
1244         nfs_inc_stats(inode, NFSIOS_VFSUPDATEPAGE);
1245
1246         dprintk("NFS:       nfs_updatepage(%pD2 %d@%lld)\n",
1247                 file, count, (long long)(page_file_offset(page) + offset));
1248
1249         if (nfs_can_extend_write(file, page, inode)) {
1250                 count = max(count + offset, nfs_page_length(page));
1251                 offset = 0;
1252         }
1253
1254         status = nfs_writepage_setup(ctx, page, offset, count);
1255         if (status < 0)
1256                 nfs_set_pageerror(page);
1257         else
1258                 __set_page_dirty_nobuffers(page);
1259
1260         dprintk("NFS:       nfs_updatepage returns %d (isize %lld)\n",
1261                         status, (long long)i_size_read(inode));
1262         return status;
1263 }
1264
1265 static int flush_task_priority(int how)
1266 {
1267         switch (how & (FLUSH_HIGHPRI|FLUSH_LOWPRI)) {
1268                 case FLUSH_HIGHPRI:
1269                         return RPC_PRIORITY_HIGH;
1270                 case FLUSH_LOWPRI:
1271                         return RPC_PRIORITY_LOW;
1272         }
1273         return RPC_PRIORITY_NORMAL;
1274 }
1275
1276 static void nfs_initiate_write(struct nfs_pgio_header *hdr,
1277                                struct rpc_message *msg,
1278                                const struct nfs_rpc_ops *rpc_ops,
1279                                struct rpc_task_setup *task_setup_data, int how)
1280 {
1281         int priority = flush_task_priority(how);
1282
1283         task_setup_data->priority = priority;
1284         rpc_ops->write_setup(hdr, msg);
1285
1286         nfs4_state_protect_write(NFS_SERVER(hdr->inode)->nfs_client,
1287                                  &task_setup_data->rpc_client, msg, hdr);
1288 }
1289
1290 /* If a nfs_flush_* function fails, it should remove reqs from @head and
1291  * call this on each, which will prepare them to be retried on next
1292  * writeback using standard nfs.
1293  */
1294 static void nfs_redirty_request(struct nfs_page *req)
1295 {
1296         nfs_mark_request_dirty(req);
1297         nfs_unlock_request(req);
1298         nfs_end_page_writeback(req);
1299         nfs_release_request(req);
1300 }
1301
1302 static void nfs_async_write_error(struct list_head *head)
1303 {
1304         struct nfs_page *req;
1305
1306         while (!list_empty(head)) {
1307                 req = nfs_list_entry(head->next);
1308                 nfs_list_remove_request(req);
1309                 nfs_redirty_request(req);
1310         }
1311 }
1312
1313 static const struct nfs_pgio_completion_ops nfs_async_write_completion_ops = {
1314         .error_cleanup = nfs_async_write_error,
1315         .completion = nfs_write_completion,
1316 };
1317
1318 void nfs_pageio_init_write(struct nfs_pageio_descriptor *pgio,
1319                                struct inode *inode, int ioflags, bool force_mds,
1320                                const struct nfs_pgio_completion_ops *compl_ops)
1321 {
1322         struct nfs_server *server = NFS_SERVER(inode);
1323         const struct nfs_pageio_ops *pg_ops = &nfs_pgio_rw_ops;
1324
1325 #ifdef CONFIG_NFS_V4_1
1326         if (server->pnfs_curr_ld && !force_mds)
1327                 pg_ops = server->pnfs_curr_ld->pg_write_ops;
1328 #endif
1329         nfs_pageio_init(pgio, inode, pg_ops, compl_ops, &nfs_rw_write_ops,
1330                         server->wsize, ioflags);
1331 }
1332 EXPORT_SYMBOL_GPL(nfs_pageio_init_write);
1333
1334 void nfs_pageio_reset_write_mds(struct nfs_pageio_descriptor *pgio)
1335 {
1336         struct nfs_pgio_mirror *mirror;
1337
1338         pgio->pg_ops = &nfs_pgio_rw_ops;
1339
1340         nfs_pageio_stop_mirroring(pgio);
1341
1342         mirror = &pgio->pg_mirrors[0];
1343         mirror->pg_bsize = NFS_SERVER(pgio->pg_inode)->wsize;
1344 }
1345 EXPORT_SYMBOL_GPL(nfs_pageio_reset_write_mds);
1346
1347
1348 void nfs_commit_prepare(struct rpc_task *task, void *calldata)
1349 {
1350         struct nfs_commit_data *data = calldata;
1351
1352         NFS_PROTO(data->inode)->commit_rpc_prepare(task, data);
1353 }
1354
1355 static void nfs_writeback_release_common(struct nfs_pgio_header *hdr)
1356 {
1357         /* do nothing! */
1358 }
1359
1360 /*
1361  * Special version of should_remove_suid() that ignores capabilities.
1362  */
1363 static int nfs_should_remove_suid(const struct inode *inode)
1364 {
1365         umode_t mode = inode->i_mode;
1366         int kill = 0;
1367
1368         /* suid always must be killed */
1369         if (unlikely(mode & S_ISUID))
1370                 kill = ATTR_KILL_SUID;
1371
1372         /*
1373          * sgid without any exec bits is just a mandatory locking mark; leave
1374          * it alone.  If some exec bits are set, it's a real sgid; kill it.
1375          */
1376         if (unlikely((mode & S_ISGID) && (mode & S_IXGRP)))
1377                 kill |= ATTR_KILL_SGID;
1378
1379         if (unlikely(kill && S_ISREG(mode)))
1380                 return kill;
1381
1382         return 0;
1383 }
1384
1385 /*
1386  * This function is called when the WRITE call is complete.
1387  */
1388 static int nfs_writeback_done(struct rpc_task *task,
1389                               struct nfs_pgio_header *hdr,
1390                               struct inode *inode)
1391 {
1392         int status;
1393
1394         /*
1395          * ->write_done will attempt to use post-op attributes to detect
1396          * conflicting writes by other clients.  A strict interpretation
1397          * of close-to-open would allow us to continue caching even if
1398          * another writer had changed the file, but some applications
1399          * depend on tighter cache coherency when writing.
1400          */
1401         status = NFS_PROTO(inode)->write_done(task, hdr);
1402         if (status != 0)
1403                 return status;
1404         nfs_add_stats(inode, NFSIOS_SERVERWRITTENBYTES, hdr->res.count);
1405
1406         if (hdr->res.verf->committed < hdr->args.stable &&
1407             task->tk_status >= 0) {
1408                 /* We tried a write call, but the server did not
1409                  * commit data to stable storage even though we
1410                  * requested it.
1411                  * Note: There is a known bug in Tru64 < 5.0 in which
1412                  *       the server reports NFS_DATA_SYNC, but performs
1413                  *       NFS_FILE_SYNC. We therefore implement this checking
1414                  *       as a dprintk() in order to avoid filling syslog.
1415                  */
1416                 static unsigned long    complain;
1417
1418                 /* Note this will print the MDS for a DS write */
1419                 if (time_before(complain, jiffies)) {
1420                         dprintk("NFS:       faulty NFS server %s:"
1421                                 " (committed = %d) != (stable = %d)\n",
1422                                 NFS_SERVER(inode)->nfs_client->cl_hostname,
1423                                 hdr->res.verf->committed, hdr->args.stable);
1424                         complain = jiffies + 300 * HZ;
1425                 }
1426         }
1427
1428         /* Deal with the suid/sgid bit corner case */
1429         if (nfs_should_remove_suid(inode))
1430                 nfs_mark_for_revalidate(inode);
1431         return 0;
1432 }
1433
1434 /*
1435  * This function is called when the WRITE call is complete.
1436  */
1437 static void nfs_writeback_result(struct rpc_task *task,
1438                                  struct nfs_pgio_header *hdr)
1439 {
1440         struct nfs_pgio_args    *argp = &hdr->args;
1441         struct nfs_pgio_res     *resp = &hdr->res;
1442
1443         if (resp->count < argp->count) {
1444                 static unsigned long    complain;
1445
1446                 /* This a short write! */
1447                 nfs_inc_stats(hdr->inode, NFSIOS_SHORTWRITE);
1448
1449                 /* Has the server at least made some progress? */
1450                 if (resp->count == 0) {
1451                         if (time_before(complain, jiffies)) {
1452                                 printk(KERN_WARNING
1453                                        "NFS: Server wrote zero bytes, expected %u.\n",
1454                                        argp->count);
1455                                 complain = jiffies + 300 * HZ;
1456                         }
1457                         nfs_set_pgio_error(hdr, -EIO, argp->offset);
1458                         task->tk_status = -EIO;
1459                         return;
1460                 }
1461                 /* Was this an NFSv2 write or an NFSv3 stable write? */
1462                 if (resp->verf->committed != NFS_UNSTABLE) {
1463                         /* Resend from where the server left off */
1464                         hdr->mds_offset += resp->count;
1465                         argp->offset += resp->count;
1466                         argp->pgbase += resp->count;
1467                         argp->count -= resp->count;
1468                 } else {
1469                         /* Resend as a stable write in order to avoid
1470                          * headaches in the case of a server crash.
1471                          */
1472                         argp->stable = NFS_FILE_SYNC;
1473                 }
1474                 rpc_restart_call_prepare(task);
1475         }
1476 }
1477
1478
1479 static int nfs_commit_set_lock(struct nfs_inode *nfsi, int may_wait)
1480 {
1481         int ret;
1482
1483         if (!test_and_set_bit(NFS_INO_COMMIT, &nfsi->flags))
1484                 return 1;
1485         if (!may_wait)
1486                 return 0;
1487         ret = out_of_line_wait_on_bit_lock(&nfsi->flags,
1488                                 NFS_INO_COMMIT,
1489                                 nfs_wait_bit_killable,
1490                                 TASK_KILLABLE);
1491         return (ret < 0) ? ret : 1;
1492 }
1493
1494 static void nfs_commit_clear_lock(struct nfs_inode *nfsi)
1495 {
1496         clear_bit(NFS_INO_COMMIT, &nfsi->flags);
1497         smp_mb__after_atomic();
1498         wake_up_bit(&nfsi->flags, NFS_INO_COMMIT);
1499 }
1500
1501 void nfs_commitdata_release(struct nfs_commit_data *data)
1502 {
1503         put_nfs_open_context(data->context);
1504         nfs_commit_free(data);
1505 }
1506 EXPORT_SYMBOL_GPL(nfs_commitdata_release);
1507
1508 int nfs_initiate_commit(struct rpc_clnt *clnt, struct nfs_commit_data *data,
1509                         const struct nfs_rpc_ops *nfs_ops,
1510                         const struct rpc_call_ops *call_ops,
1511                         int how, int flags)
1512 {
1513         struct rpc_task *task;
1514         int priority = flush_task_priority(how);
1515         struct rpc_message msg = {
1516                 .rpc_argp = &data->args,
1517                 .rpc_resp = &data->res,
1518                 .rpc_cred = data->cred,
1519         };
1520         struct rpc_task_setup task_setup_data = {
1521                 .task = &data->task,
1522                 .rpc_client = clnt,
1523                 .rpc_message = &msg,
1524                 .callback_ops = call_ops,
1525                 .callback_data = data,
1526                 .workqueue = nfsiod_workqueue,
1527                 .flags = RPC_TASK_ASYNC | flags,
1528                 .priority = priority,
1529         };
1530         /* Set up the initial task struct.  */
1531         nfs_ops->commit_setup(data, &msg);
1532
1533         dprintk("NFS: %5u initiated commit call\n", data->task.tk_pid);
1534
1535         nfs4_state_protect(NFS_SERVER(data->inode)->nfs_client,
1536                 NFS_SP4_MACH_CRED_COMMIT, &task_setup_data.rpc_client, &msg);
1537
1538         task = rpc_run_task(&task_setup_data);
1539         if (IS_ERR(task))
1540                 return PTR_ERR(task);
1541         if (how & FLUSH_SYNC)
1542                 rpc_wait_for_completion_task(task);
1543         rpc_put_task(task);
1544         return 0;
1545 }
1546 EXPORT_SYMBOL_GPL(nfs_initiate_commit);
1547
1548 static loff_t nfs_get_lwb(struct list_head *head)
1549 {
1550         loff_t lwb = 0;
1551         struct nfs_page *req;
1552
1553         list_for_each_entry(req, head, wb_list)
1554                 if (lwb < (req_offset(req) + req->wb_bytes))
1555                         lwb = req_offset(req) + req->wb_bytes;
1556
1557         return lwb;
1558 }
1559
1560 /*
1561  * Set up the argument/result storage required for the RPC call.
1562  */
1563 void nfs_init_commit(struct nfs_commit_data *data,
1564                      struct list_head *head,
1565                      struct pnfs_layout_segment *lseg,
1566                      struct nfs_commit_info *cinfo)
1567 {
1568         struct nfs_page *first = nfs_list_entry(head->next);
1569         struct inode *inode = first->wb_context->dentry->d_inode;
1570
1571         /* Set up the RPC argument and reply structs
1572          * NB: take care not to mess about with data->commit et al. */
1573
1574         list_splice_init(head, &data->pages);
1575
1576         data->inode       = inode;
1577         data->cred        = first->wb_context->cred;
1578         data->lseg        = lseg; /* reference transferred */
1579         /* only set lwb for pnfs commit */
1580         if (lseg)
1581                 data->lwb = nfs_get_lwb(&data->pages);
1582         data->mds_ops     = &nfs_commit_ops;
1583         data->completion_ops = cinfo->completion_ops;
1584         data->dreq        = cinfo->dreq;
1585
1586         data->args.fh     = NFS_FH(data->inode);
1587         /* Note: we always request a commit of the entire inode */
1588         data->args.offset = 0;
1589         data->args.count  = 0;
1590         data->context     = get_nfs_open_context(first->wb_context);
1591         data->res.fattr   = &data->fattr;
1592         data->res.verf    = &data->verf;
1593         nfs_fattr_init(&data->fattr);
1594 }
1595 EXPORT_SYMBOL_GPL(nfs_init_commit);
1596
1597 void nfs_retry_commit(struct list_head *page_list,
1598                       struct pnfs_layout_segment *lseg,
1599                       struct nfs_commit_info *cinfo,
1600                       u32 ds_commit_idx)
1601 {
1602         struct nfs_page *req;
1603
1604         while (!list_empty(page_list)) {
1605                 req = nfs_list_entry(page_list->next);
1606                 nfs_list_remove_request(req);
1607                 nfs_mark_request_commit(req, lseg, cinfo, ds_commit_idx);
1608                 if (!cinfo->dreq) {
1609                         dec_zone_page_state(req->wb_page, NR_UNSTABLE_NFS);
1610                         dec_bdi_stat(page_file_mapping(req->wb_page)->backing_dev_info,
1611                                      BDI_RECLAIMABLE);
1612                 }
1613                 nfs_unlock_and_release_request(req);
1614         }
1615 }
1616 EXPORT_SYMBOL_GPL(nfs_retry_commit);
1617
1618 /*
1619  * Commit dirty pages
1620  */
1621 static int
1622 nfs_commit_list(struct inode *inode, struct list_head *head, int how,
1623                 struct nfs_commit_info *cinfo)
1624 {
1625         struct nfs_commit_data  *data;
1626
1627         data = nfs_commitdata_alloc();
1628
1629         if (!data)
1630                 goto out_bad;
1631
1632         /* Set up the argument struct */
1633         nfs_init_commit(data, head, NULL, cinfo);
1634         atomic_inc(&cinfo->mds->rpcs_out);
1635         return nfs_initiate_commit(NFS_CLIENT(inode), data, NFS_PROTO(inode),
1636                                    data->mds_ops, how, 0);
1637  out_bad:
1638         nfs_retry_commit(head, NULL, cinfo, 0);
1639         cinfo->completion_ops->error_cleanup(NFS_I(inode));
1640         return -ENOMEM;
1641 }
1642
1643 /*
1644  * COMMIT call returned
1645  */
1646 static void nfs_commit_done(struct rpc_task *task, void *calldata)
1647 {
1648         struct nfs_commit_data  *data = calldata;
1649
1650         dprintk("NFS: %5u nfs_commit_done (status %d)\n",
1651                                 task->tk_pid, task->tk_status);
1652
1653         /* Call the NFS version-specific code */
1654         NFS_PROTO(data->inode)->commit_done(task, data);
1655 }
1656
1657 static void nfs_commit_release_pages(struct nfs_commit_data *data)
1658 {
1659         struct nfs_page *req;
1660         int status = data->task.tk_status;
1661         struct nfs_commit_info cinfo;
1662         struct nfs_server *nfss;
1663
1664         while (!list_empty(&data->pages)) {
1665                 req = nfs_list_entry(data->pages.next);
1666                 nfs_list_remove_request(req);
1667                 nfs_clear_page_commit(req->wb_page);
1668
1669                 dprintk("NFS:       commit (%s/%llu %d@%lld)",
1670                         req->wb_context->dentry->d_sb->s_id,
1671                         (unsigned long long)NFS_FILEID(req->wb_context->dentry->d_inode),
1672                         req->wb_bytes,
1673                         (long long)req_offset(req));
1674                 if (status < 0) {
1675                         nfs_context_set_write_error(req->wb_context, status);
1676                         nfs_inode_remove_request(req);
1677                         dprintk(", error = %d\n", status);
1678                         goto next;
1679                 }
1680
1681                 /* Okay, COMMIT succeeded, apparently. Check the verifier
1682                  * returned by the server against all stored verfs. */
1683                 if (!memcmp(&req->wb_verf, &data->verf.verifier, sizeof(req->wb_verf))) {
1684                         /* We have a match */
1685                         nfs_inode_remove_request(req);
1686                         dprintk(" OK\n");
1687                         goto next;
1688                 }
1689                 /* We have a mismatch. Write the page again */
1690                 dprintk(" mismatch\n");
1691                 nfs_mark_request_dirty(req);
1692                 set_bit(NFS_CONTEXT_RESEND_WRITES, &req->wb_context->flags);
1693         next:
1694                 nfs_unlock_and_release_request(req);
1695         }
1696         nfss = NFS_SERVER(data->inode);
1697         if (atomic_long_read(&nfss->writeback) < NFS_CONGESTION_OFF_THRESH)
1698                 clear_bdi_congested(&nfss->backing_dev_info, BLK_RW_ASYNC);
1699
1700         nfs_init_cinfo(&cinfo, data->inode, data->dreq);
1701         if (atomic_dec_and_test(&cinfo.mds->rpcs_out))
1702                 nfs_commit_clear_lock(NFS_I(data->inode));
1703 }
1704
1705 static void nfs_commit_release(void *calldata)
1706 {
1707         struct nfs_commit_data *data = calldata;
1708
1709         data->completion_ops->completion(data);
1710         nfs_commitdata_release(calldata);
1711 }
1712
1713 static const struct rpc_call_ops nfs_commit_ops = {
1714         .rpc_call_prepare = nfs_commit_prepare,
1715         .rpc_call_done = nfs_commit_done,
1716         .rpc_release = nfs_commit_release,
1717 };
1718
1719 static const struct nfs_commit_completion_ops nfs_commit_completion_ops = {
1720         .completion = nfs_commit_release_pages,
1721         .error_cleanup = nfs_commit_clear_lock,
1722 };
1723
1724 int nfs_generic_commit_list(struct inode *inode, struct list_head *head,
1725                             int how, struct nfs_commit_info *cinfo)
1726 {
1727         int status;
1728
1729         status = pnfs_commit_list(inode, head, how, cinfo);
1730         if (status == PNFS_NOT_ATTEMPTED)
1731                 status = nfs_commit_list(inode, head, how, cinfo);
1732         return status;
1733 }
1734
1735 int nfs_commit_inode(struct inode *inode, int how)
1736 {
1737         LIST_HEAD(head);
1738         struct nfs_commit_info cinfo;
1739         int may_wait = how & FLUSH_SYNC;
1740         int res;
1741
1742         res = nfs_commit_set_lock(NFS_I(inode), may_wait);
1743         if (res <= 0)
1744                 goto out_mark_dirty;
1745         nfs_init_cinfo_from_inode(&cinfo, inode);
1746         res = nfs_scan_commit(inode, &head, &cinfo);
1747         if (res) {
1748                 int error;
1749
1750                 error = nfs_generic_commit_list(inode, &head, how, &cinfo);
1751                 if (error < 0)
1752                         return error;
1753                 if (!may_wait)
1754                         goto out_mark_dirty;
1755                 error = wait_on_bit_action(&NFS_I(inode)->flags,
1756                                 NFS_INO_COMMIT,
1757                                 nfs_wait_bit_killable,
1758                                 TASK_KILLABLE);
1759                 if (error < 0)
1760                         return error;
1761         } else
1762                 nfs_commit_clear_lock(NFS_I(inode));
1763         return res;
1764         /* Note: If we exit without ensuring that the commit is complete,
1765          * we must mark the inode as dirty. Otherwise, future calls to
1766          * sync_inode() with the WB_SYNC_ALL flag set will fail to ensure
1767          * that the data is on the disk.
1768          */
1769 out_mark_dirty:
1770         __mark_inode_dirty(inode, I_DIRTY_DATASYNC);
1771         return res;
1772 }
1773
1774 static int nfs_commit_unstable_pages(struct inode *inode, struct writeback_control *wbc)
1775 {
1776         struct nfs_inode *nfsi = NFS_I(inode);
1777         int flags = FLUSH_SYNC;
1778         int ret = 0;
1779
1780         /* no commits means nothing needs to be done */
1781         if (!nfsi->commit_info.ncommit)
1782                 return ret;
1783
1784         if (wbc->sync_mode == WB_SYNC_NONE) {
1785                 /* Don't commit yet if this is a non-blocking flush and there
1786                  * are a lot of outstanding writes for this mapping.
1787                  */
1788                 if (nfsi->commit_info.ncommit <= (nfsi->nrequests >> 1))
1789                         goto out_mark_dirty;
1790
1791                 /* don't wait for the COMMIT response */
1792                 flags = 0;
1793         }
1794
1795         ret = nfs_commit_inode(inode, flags);
1796         if (ret >= 0) {
1797                 if (wbc->sync_mode == WB_SYNC_NONE) {
1798                         if (ret < wbc->nr_to_write)
1799                                 wbc->nr_to_write -= ret;
1800                         else
1801                                 wbc->nr_to_write = 0;
1802                 }
1803                 return 0;
1804         }
1805 out_mark_dirty:
1806         __mark_inode_dirty(inode, I_DIRTY_DATASYNC);
1807         return ret;
1808 }
1809
1810 int nfs_write_inode(struct inode *inode, struct writeback_control *wbc)
1811 {
1812         return nfs_commit_unstable_pages(inode, wbc);
1813 }
1814 EXPORT_SYMBOL_GPL(nfs_write_inode);
1815
1816 /*
1817  * flush the inode to disk.
1818  */
1819 int nfs_wb_all(struct inode *inode)
1820 {
1821         struct writeback_control wbc = {
1822                 .sync_mode = WB_SYNC_ALL,
1823                 .nr_to_write = LONG_MAX,
1824                 .range_start = 0,
1825                 .range_end = LLONG_MAX,
1826         };
1827         int ret;
1828
1829         trace_nfs_writeback_inode_enter(inode);
1830
1831         ret = sync_inode(inode, &wbc);
1832
1833         trace_nfs_writeback_inode_exit(inode, ret);
1834         return ret;
1835 }
1836 EXPORT_SYMBOL_GPL(nfs_wb_all);
1837
1838 int nfs_wb_page_cancel(struct inode *inode, struct page *page)
1839 {
1840         struct nfs_page *req;
1841         int ret = 0;
1842
1843         wait_on_page_writeback(page);
1844
1845         /* blocking call to cancel all requests and join to a single (head)
1846          * request */
1847         req = nfs_lock_and_join_requests(page, false);
1848
1849         if (IS_ERR(req)) {
1850                 ret = PTR_ERR(req);
1851         } else if (req) {
1852                 /* all requests from this page have been cancelled by
1853                  * nfs_lock_and_join_requests, so just remove the head
1854                  * request from the inode / page_private pointer and
1855                  * release it */
1856                 nfs_inode_remove_request(req);
1857                 /*
1858                  * In case nfs_inode_remove_request has marked the
1859                  * page as being dirty
1860                  */
1861                 cancel_dirty_page(page, PAGE_CACHE_SIZE);
1862                 nfs_unlock_and_release_request(req);
1863         }
1864
1865         return ret;
1866 }
1867
1868 /*
1869  * Write back all requests on one page - we do this before reading it.
1870  */
1871 int nfs_wb_page(struct inode *inode, struct page *page)
1872 {
1873         loff_t range_start = page_file_offset(page);
1874         loff_t range_end = range_start + (loff_t)(PAGE_CACHE_SIZE - 1);
1875         struct writeback_control wbc = {
1876                 .sync_mode = WB_SYNC_ALL,
1877                 .nr_to_write = 0,
1878                 .range_start = range_start,
1879                 .range_end = range_end,
1880         };
1881         int ret;
1882
1883         trace_nfs_writeback_page_enter(inode);
1884
1885         for (;;) {
1886                 wait_on_page_writeback(page);
1887                 if (clear_page_dirty_for_io(page)) {
1888                         ret = nfs_writepage_locked(page, &wbc);
1889                         if (ret < 0)
1890                                 goto out_error;
1891                         continue;
1892                 }
1893                 ret = 0;
1894                 if (!PagePrivate(page))
1895                         break;
1896                 ret = nfs_commit_inode(inode, FLUSH_SYNC);
1897                 if (ret < 0)
1898                         goto out_error;
1899         }
1900 out_error:
1901         trace_nfs_writeback_page_exit(inode, ret);
1902         return ret;
1903 }
1904
1905 #ifdef CONFIG_MIGRATION
1906 int nfs_migrate_page(struct address_space *mapping, struct page *newpage,
1907                 struct page *page, enum migrate_mode mode)
1908 {
1909         /*
1910          * If PagePrivate is set, then the page is currently associated with
1911          * an in-progress read or write request. Don't try to migrate it.
1912          *
1913          * FIXME: we could do this in principle, but we'll need a way to ensure
1914          *        that we can safely release the inode reference while holding
1915          *        the page lock.
1916          */
1917         if (PagePrivate(page))
1918                 return -EBUSY;
1919
1920         if (!nfs_fscache_release_page(page, GFP_KERNEL))
1921                 return -EBUSY;
1922
1923         return migrate_page(mapping, newpage, page, mode);
1924 }
1925 #endif
1926
1927 int __init nfs_init_writepagecache(void)
1928 {
1929         nfs_wdata_cachep = kmem_cache_create("nfs_write_data",
1930                                              sizeof(struct nfs_pgio_header),
1931                                              0, SLAB_HWCACHE_ALIGN,
1932                                              NULL);
1933         if (nfs_wdata_cachep == NULL)
1934                 return -ENOMEM;
1935
1936         nfs_wdata_mempool = mempool_create_slab_pool(MIN_POOL_WRITE,
1937                                                      nfs_wdata_cachep);
1938         if (nfs_wdata_mempool == NULL)
1939                 goto out_destroy_write_cache;
1940
1941         nfs_cdata_cachep = kmem_cache_create("nfs_commit_data",
1942                                              sizeof(struct nfs_commit_data),
1943                                              0, SLAB_HWCACHE_ALIGN,
1944                                              NULL);
1945         if (nfs_cdata_cachep == NULL)
1946                 goto out_destroy_write_mempool;
1947
1948         nfs_commit_mempool = mempool_create_slab_pool(MIN_POOL_COMMIT,
1949                                                       nfs_cdata_cachep);
1950         if (nfs_commit_mempool == NULL)
1951                 goto out_destroy_commit_cache;
1952
1953         /*
1954          * NFS congestion size, scale with available memory.
1955          *
1956          *  64MB:    8192k
1957          * 128MB:   11585k
1958          * 256MB:   16384k
1959          * 512MB:   23170k
1960          *   1GB:   32768k
1961          *   2GB:   46340k
1962          *   4GB:   65536k
1963          *   8GB:   92681k
1964          *  16GB:  131072k
1965          *
1966          * This allows larger machines to have larger/more transfers.
1967          * Limit the default to 256M
1968          */
1969         nfs_congestion_kb = (16*int_sqrt(totalram_pages)) << (PAGE_SHIFT-10);
1970         if (nfs_congestion_kb > 256*1024)
1971                 nfs_congestion_kb = 256*1024;
1972
1973         return 0;
1974
1975 out_destroy_commit_cache:
1976         kmem_cache_destroy(nfs_cdata_cachep);
1977 out_destroy_write_mempool:
1978         mempool_destroy(nfs_wdata_mempool);
1979 out_destroy_write_cache:
1980         kmem_cache_destroy(nfs_wdata_cachep);
1981         return -ENOMEM;
1982 }
1983
1984 void nfs_destroy_writepagecache(void)
1985 {
1986         mempool_destroy(nfs_commit_mempool);
1987         kmem_cache_destroy(nfs_cdata_cachep);
1988         mempool_destroy(nfs_wdata_mempool);
1989         kmem_cache_destroy(nfs_wdata_cachep);
1990 }
1991
1992 static const struct nfs_rw_ops nfs_rw_write_ops = {
1993         .rw_mode                = FMODE_WRITE,
1994         .rw_alloc_header        = nfs_writehdr_alloc,
1995         .rw_free_header         = nfs_writehdr_free,
1996         .rw_release             = nfs_writeback_release_common,
1997         .rw_done                = nfs_writeback_done,
1998         .rw_result              = nfs_writeback_result,
1999         .rw_initiate            = nfs_initiate_write,
2000 };