Commit | Line | Data |
---|---|---|
ac27a0ec | 1 | /* |
617ba13b | 2 | * linux/fs/ext4/resize.c |
ac27a0ec | 3 | * |
617ba13b | 4 | * Support for resizing an ext4 filesystem while it is mounted. |
ac27a0ec DK |
5 | * |
6 | * Copyright (C) 2001, 2002 Andreas Dilger <adilger@clusterfs.com> | |
7 | * | |
8 | * This could probably be made into a module, because it is not often in use. | |
9 | */ | |
10 | ||
11 | ||
617ba13b | 12 | #define EXT4FS_DEBUG |
ac27a0ec | 13 | |
ac27a0ec DK |
14 | #include <linux/errno.h> |
15 | #include <linux/slab.h> | |
16 | ||
3dcf5451 | 17 | #include "ext4_jbd2.h" |
ac27a0ec | 18 | |
8f82f840 YY |
19 | int ext4_resize_begin(struct super_block *sb) |
20 | { | |
21 | int ret = 0; | |
22 | ||
23 | if (!capable(CAP_SYS_RESOURCE)) | |
24 | return -EPERM; | |
25 | ||
ce723c31 YY |
26 | /* |
27 | * We are not allowed to do online-resizing on a filesystem mounted | |
28 | * with error, because it can destroy the filesystem easily. | |
29 | */ | |
30 | if (EXT4_SB(sb)->s_mount_state & EXT4_ERROR_FS) { | |
31 | ext4_warning(sb, "There are errors in the filesystem, " | |
32 | "so online resizing is not allowed\n"); | |
33 | return -EPERM; | |
34 | } | |
35 | ||
8f82f840 YY |
36 | if (test_and_set_bit_lock(EXT4_RESIZING, &EXT4_SB(sb)->s_resize_flags)) |
37 | ret = -EBUSY; | |
38 | ||
39 | return ret; | |
40 | } | |
41 | ||
42 | void ext4_resize_end(struct super_block *sb) | |
43 | { | |
44 | clear_bit_unlock(EXT4_RESIZING, &EXT4_SB(sb)->s_resize_flags); | |
45 | smp_mb__after_clear_bit(); | |
46 | } | |
47 | ||
ac27a0ec DK |
48 | #define outside(b, first, last) ((b) < (first) || (b) >= (last)) |
49 | #define inside(b, first, last) ((b) >= (first) && (b) < (last)) | |
50 | ||
51 | static int verify_group_input(struct super_block *sb, | |
617ba13b | 52 | struct ext4_new_group_data *input) |
ac27a0ec | 53 | { |
617ba13b MC |
54 | struct ext4_sb_info *sbi = EXT4_SB(sb); |
55 | struct ext4_super_block *es = sbi->s_es; | |
bd81d8ee | 56 | ext4_fsblk_t start = ext4_blocks_count(es); |
617ba13b | 57 | ext4_fsblk_t end = start + input->blocks_count; |
fd2d4291 | 58 | ext4_group_t group = input->group; |
617ba13b MC |
59 | ext4_fsblk_t itend = input->inode_table + sbi->s_itb_per_group; |
60 | unsigned overhead = ext4_bg_has_super(sb, group) ? | |
61 | (1 + ext4_bg_num_gdb(sb, group) + | |
ac27a0ec | 62 | le16_to_cpu(es->s_reserved_gdt_blocks)) : 0; |
617ba13b | 63 | ext4_fsblk_t metaend = start + overhead; |
ac27a0ec | 64 | struct buffer_head *bh = NULL; |
3a5b2ecd | 65 | ext4_grpblk_t free_blocks_count, offset; |
ac27a0ec DK |
66 | int err = -EINVAL; |
67 | ||
68 | input->free_blocks_count = free_blocks_count = | |
69 | input->blocks_count - 2 - overhead - sbi->s_itb_per_group; | |
70 | ||
71 | if (test_opt(sb, DEBUG)) | |
617ba13b | 72 | printk(KERN_DEBUG "EXT4-fs: adding %s group %u: %u blocks " |
ac27a0ec | 73 | "(%d free, %u reserved)\n", |
617ba13b | 74 | ext4_bg_has_super(sb, input->group) ? "normal" : |
ac27a0ec DK |
75 | "no-super", input->group, input->blocks_count, |
76 | free_blocks_count, input->reserved_blocks); | |
77 | ||
3a5b2ecd | 78 | ext4_get_group_no_and_offset(sb, start, NULL, &offset); |
ac27a0ec | 79 | if (group != sbi->s_groups_count) |
12062ddd | 80 | ext4_warning(sb, "Cannot add at group %u (only %u groups)", |
ac27a0ec | 81 | input->group, sbi->s_groups_count); |
3a5b2ecd | 82 | else if (offset != 0) |
12062ddd | 83 | ext4_warning(sb, "Last group not full"); |
ac27a0ec | 84 | else if (input->reserved_blocks > input->blocks_count / 5) |
12062ddd | 85 | ext4_warning(sb, "Reserved blocks too high (%u)", |
ac27a0ec DK |
86 | input->reserved_blocks); |
87 | else if (free_blocks_count < 0) | |
12062ddd | 88 | ext4_warning(sb, "Bad blocks count %u", |
ac27a0ec DK |
89 | input->blocks_count); |
90 | else if (!(bh = sb_bread(sb, end - 1))) | |
12062ddd | 91 | ext4_warning(sb, "Cannot read last block (%llu)", |
ac27a0ec DK |
92 | end - 1); |
93 | else if (outside(input->block_bitmap, start, end)) | |
12062ddd | 94 | ext4_warning(sb, "Block bitmap not in group (block %llu)", |
1939e49a | 95 | (unsigned long long)input->block_bitmap); |
ac27a0ec | 96 | else if (outside(input->inode_bitmap, start, end)) |
12062ddd | 97 | ext4_warning(sb, "Inode bitmap not in group (block %llu)", |
1939e49a | 98 | (unsigned long long)input->inode_bitmap); |
ac27a0ec | 99 | else if (outside(input->inode_table, start, end) || |
2b2d6d01 | 100 | outside(itend - 1, start, end)) |
12062ddd | 101 | ext4_warning(sb, "Inode table not in group (blocks %llu-%llu)", |
1939e49a | 102 | (unsigned long long)input->inode_table, itend - 1); |
ac27a0ec | 103 | else if (input->inode_bitmap == input->block_bitmap) |
12062ddd | 104 | ext4_warning(sb, "Block bitmap same as inode bitmap (%llu)", |
1939e49a | 105 | (unsigned long long)input->block_bitmap); |
ac27a0ec | 106 | else if (inside(input->block_bitmap, input->inode_table, itend)) |
12062ddd ES |
107 | ext4_warning(sb, "Block bitmap (%llu) in inode table " |
108 | "(%llu-%llu)", | |
1939e49a RD |
109 | (unsigned long long)input->block_bitmap, |
110 | (unsigned long long)input->inode_table, itend - 1); | |
ac27a0ec | 111 | else if (inside(input->inode_bitmap, input->inode_table, itend)) |
12062ddd ES |
112 | ext4_warning(sb, "Inode bitmap (%llu) in inode table " |
113 | "(%llu-%llu)", | |
1939e49a RD |
114 | (unsigned long long)input->inode_bitmap, |
115 | (unsigned long long)input->inode_table, itend - 1); | |
ac27a0ec | 116 | else if (inside(input->block_bitmap, start, metaend)) |
12062ddd | 117 | ext4_warning(sb, "Block bitmap (%llu) in GDT table (%llu-%llu)", |
1939e49a RD |
118 | (unsigned long long)input->block_bitmap, |
119 | start, metaend - 1); | |
ac27a0ec | 120 | else if (inside(input->inode_bitmap, start, metaend)) |
12062ddd | 121 | ext4_warning(sb, "Inode bitmap (%llu) in GDT table (%llu-%llu)", |
1939e49a RD |
122 | (unsigned long long)input->inode_bitmap, |
123 | start, metaend - 1); | |
ac27a0ec | 124 | else if (inside(input->inode_table, start, metaend) || |
2b2d6d01 | 125 | inside(itend - 1, start, metaend)) |
12062ddd ES |
126 | ext4_warning(sb, "Inode table (%llu-%llu) overlaps GDT table " |
127 | "(%llu-%llu)", | |
1939e49a RD |
128 | (unsigned long long)input->inode_table, |
129 | itend - 1, start, metaend - 1); | |
ac27a0ec DK |
130 | else |
131 | err = 0; | |
132 | brelse(bh); | |
133 | ||
134 | return err; | |
135 | } | |
136 | ||
137 | static struct buffer_head *bclean(handle_t *handle, struct super_block *sb, | |
617ba13b | 138 | ext4_fsblk_t blk) |
ac27a0ec DK |
139 | { |
140 | struct buffer_head *bh; | |
141 | int err; | |
142 | ||
143 | bh = sb_getblk(sb, blk); | |
144 | if (!bh) | |
145 | return ERR_PTR(-EIO); | |
617ba13b | 146 | if ((err = ext4_journal_get_write_access(handle, bh))) { |
ac27a0ec DK |
147 | brelse(bh); |
148 | bh = ERR_PTR(err); | |
149 | } else { | |
150 | lock_buffer(bh); | |
151 | memset(bh->b_data, 0, sb->s_blocksize); | |
152 | set_buffer_uptodate(bh); | |
153 | unlock_buffer(bh); | |
154 | } | |
155 | ||
156 | return bh; | |
157 | } | |
158 | ||
14904107 ES |
159 | /* |
160 | * If we have fewer than thresh credits, extend by EXT4_MAX_TRANS_DATA. | |
161 | * If that fails, restart the transaction & regain write access for the | |
162 | * buffer head which is used for block_bitmap modifications. | |
163 | */ | |
164 | static int extend_or_restart_transaction(handle_t *handle, int thresh, | |
165 | struct buffer_head *bh) | |
166 | { | |
167 | int err; | |
168 | ||
0390131b | 169 | if (ext4_handle_has_enough_credits(handle, thresh)) |
14904107 ES |
170 | return 0; |
171 | ||
172 | err = ext4_journal_extend(handle, EXT4_MAX_TRANS_DATA); | |
173 | if (err < 0) | |
174 | return err; | |
175 | if (err) { | |
176 | if ((err = ext4_journal_restart(handle, EXT4_MAX_TRANS_DATA))) | |
177 | return err; | |
2b2d6d01 | 178 | if ((err = ext4_journal_get_write_access(handle, bh))) |
14904107 | 179 | return err; |
2b2d6d01 | 180 | } |
14904107 ES |
181 | |
182 | return 0; | |
183 | } | |
184 | ||
ac27a0ec DK |
185 | /* |
186 | * Set up the block and inode bitmaps, and the inode table for the new group. | |
187 | * This doesn't need to be part of the main transaction, since we are only | |
188 | * changing blocks outside the actual filesystem. We still do journaling to | |
189 | * ensure the recovery is correct in case of a failure just after resize. | |
190 | * If any part of this fails, we simply abort the resize. | |
191 | */ | |
192 | static int setup_new_group_blocks(struct super_block *sb, | |
617ba13b | 193 | struct ext4_new_group_data *input) |
ac27a0ec | 194 | { |
617ba13b MC |
195 | struct ext4_sb_info *sbi = EXT4_SB(sb); |
196 | ext4_fsblk_t start = ext4_group_first_block_no(sb, input->group); | |
197 | int reserved_gdb = ext4_bg_has_super(sb, input->group) ? | |
ac27a0ec | 198 | le16_to_cpu(sbi->s_es->s_reserved_gdt_blocks) : 0; |
617ba13b | 199 | unsigned long gdblocks = ext4_bg_num_gdb(sb, input->group); |
ac27a0ec DK |
200 | struct buffer_head *bh; |
201 | handle_t *handle; | |
617ba13b MC |
202 | ext4_fsblk_t block; |
203 | ext4_grpblk_t bit; | |
ac27a0ec DK |
204 | int i; |
205 | int err = 0, err2; | |
206 | ||
14904107 ES |
207 | /* This transaction may be extended/restarted along the way */ |
208 | handle = ext4_journal_start_sb(sb, EXT4_MAX_TRANS_DATA); | |
209 | ||
ac27a0ec DK |
210 | if (IS_ERR(handle)) |
211 | return PTR_ERR(handle); | |
212 | ||
8f82f840 | 213 | BUG_ON(input->group != sbi->s_groups_count); |
ac27a0ec DK |
214 | |
215 | if (IS_ERR(bh = bclean(handle, sb, input->block_bitmap))) { | |
216 | err = PTR_ERR(bh); | |
217 | goto exit_journal; | |
218 | } | |
219 | ||
617ba13b | 220 | if (ext4_bg_has_super(sb, input->group)) { |
c549a95d | 221 | ext4_debug("mark backup superblock %#04llx (+0)\n", start); |
617ba13b | 222 | ext4_set_bit(0, bh->b_data); |
ac27a0ec DK |
223 | } |
224 | ||
225 | /* Copy all of the GDT blocks into the backup in this group */ | |
226 | for (i = 0, bit = 1, block = start + 1; | |
227 | i < gdblocks; i++, block++, bit++) { | |
228 | struct buffer_head *gdb; | |
229 | ||
c549a95d | 230 | ext4_debug("update backup group %#04llx (+%d)\n", block, bit); |
ac27a0ec | 231 | |
14904107 ES |
232 | if ((err = extend_or_restart_transaction(handle, 1, bh))) |
233 | goto exit_bh; | |
234 | ||
ac27a0ec DK |
235 | gdb = sb_getblk(sb, block); |
236 | if (!gdb) { | |
237 | err = -EIO; | |
238 | goto exit_bh; | |
239 | } | |
617ba13b | 240 | if ((err = ext4_journal_get_write_access(handle, gdb))) { |
ac27a0ec DK |
241 | brelse(gdb); |
242 | goto exit_bh; | |
243 | } | |
5b615287 ES |
244 | lock_buffer(gdb); |
245 | memcpy(gdb->b_data, sbi->s_group_desc[i]->b_data, gdb->b_size); | |
ac27a0ec | 246 | set_buffer_uptodate(gdb); |
5b615287 | 247 | unlock_buffer(gdb); |
b4097142 TT |
248 | err = ext4_handle_dirty_metadata(handle, NULL, gdb); |
249 | if (unlikely(err)) { | |
250 | brelse(gdb); | |
251 | goto exit_bh; | |
252 | } | |
617ba13b | 253 | ext4_set_bit(bit, bh->b_data); |
ac27a0ec DK |
254 | brelse(gdb); |
255 | } | |
256 | ||
257 | /* Zero out all of the reserved backup group descriptor table blocks */ | |
da488945 | 258 | ext4_debug("clear inode table blocks %#04llx -> %#04lx\n", |
a31437b8 LC |
259 | block, sbi->s_itb_per_group); |
260 | err = sb_issue_zeroout(sb, gdblocks + start + 1, reserved_gdb, | |
a107e5a3 | 261 | GFP_NOFS); |
a31437b8 LC |
262 | if (err) |
263 | goto exit_bh; | |
8a7411a2 TT |
264 | for (i = 0, bit = gdblocks + 1; i < reserved_gdb; i++, bit++) |
265 | ext4_set_bit(bit, bh->b_data); | |
14904107 | 266 | |
c549a95d | 267 | ext4_debug("mark block bitmap %#04llx (+%llu)\n", input->block_bitmap, |
ac27a0ec | 268 | input->block_bitmap - start); |
617ba13b | 269 | ext4_set_bit(input->block_bitmap - start, bh->b_data); |
c549a95d | 270 | ext4_debug("mark inode bitmap %#04llx (+%llu)\n", input->inode_bitmap, |
ac27a0ec | 271 | input->inode_bitmap - start); |
617ba13b | 272 | ext4_set_bit(input->inode_bitmap - start, bh->b_data); |
ac27a0ec DK |
273 | |
274 | /* Zero out all of the inode table blocks */ | |
a31437b8 | 275 | block = input->inode_table; |
da488945 | 276 | ext4_debug("clear inode table blocks %#04llx -> %#04lx\n", |
a31437b8 | 277 | block, sbi->s_itb_per_group); |
a107e5a3 | 278 | err = sb_issue_zeroout(sb, block, sbi->s_itb_per_group, GFP_NOFS); |
a31437b8 LC |
279 | if (err) |
280 | goto exit_bh; | |
8a7411a2 TT |
281 | for (i = 0, bit = input->inode_table - start; |
282 | i < sbi->s_itb_per_group; i++, bit++) | |
283 | ext4_set_bit(bit, bh->b_data); | |
14904107 ES |
284 | |
285 | if ((err = extend_or_restart_transaction(handle, 2, bh))) | |
286 | goto exit_bh; | |
287 | ||
61d08673 TT |
288 | ext4_mark_bitmap_end(input->blocks_count, sb->s_blocksize * 8, |
289 | bh->b_data); | |
b4097142 TT |
290 | err = ext4_handle_dirty_metadata(handle, NULL, bh); |
291 | if (unlikely(err)) { | |
292 | ext4_std_error(sb, err); | |
293 | goto exit_bh; | |
294 | } | |
ac27a0ec | 295 | brelse(bh); |
ac27a0ec | 296 | /* Mark unused entries in inode bitmap used */ |
c549a95d | 297 | ext4_debug("clear inode bitmap %#04llx (+%llu)\n", |
ac27a0ec DK |
298 | input->inode_bitmap, input->inode_bitmap - start); |
299 | if (IS_ERR(bh = bclean(handle, sb, input->inode_bitmap))) { | |
300 | err = PTR_ERR(bh); | |
301 | goto exit_journal; | |
302 | } | |
303 | ||
61d08673 TT |
304 | ext4_mark_bitmap_end(EXT4_INODES_PER_GROUP(sb), sb->s_blocksize * 8, |
305 | bh->b_data); | |
b4097142 TT |
306 | err = ext4_handle_dirty_metadata(handle, NULL, bh); |
307 | if (unlikely(err)) | |
308 | ext4_std_error(sb, err); | |
ac27a0ec DK |
309 | exit_bh: |
310 | brelse(bh); | |
311 | ||
312 | exit_journal: | |
617ba13b | 313 | if ((err2 = ext4_journal_stop(handle)) && !err) |
ac27a0ec DK |
314 | err = err2; |
315 | ||
316 | return err; | |
317 | } | |
318 | ||
319 | /* | |
320 | * Iterate through the groups which hold BACKUP superblock/GDT copies in an | |
617ba13b | 321 | * ext4 filesystem. The counters should be initialized to 1, 5, and 7 before |
ac27a0ec DK |
322 | * calling this for the first time. In a sparse filesystem it will be the |
323 | * sequence of powers of 3, 5, and 7: 1, 3, 5, 7, 9, 25, 27, 49, 81, ... | |
324 | * For a non-sparse filesystem it will be every group: 1, 2, 3, 4, ... | |
325 | */ | |
617ba13b | 326 | static unsigned ext4_list_backups(struct super_block *sb, unsigned *three, |
ac27a0ec DK |
327 | unsigned *five, unsigned *seven) |
328 | { | |
329 | unsigned *min = three; | |
330 | int mult = 3; | |
331 | unsigned ret; | |
332 | ||
617ba13b MC |
333 | if (!EXT4_HAS_RO_COMPAT_FEATURE(sb, |
334 | EXT4_FEATURE_RO_COMPAT_SPARSE_SUPER)) { | |
ac27a0ec DK |
335 | ret = *min; |
336 | *min += 1; | |
337 | return ret; | |
338 | } | |
339 | ||
340 | if (*five < *min) { | |
341 | min = five; | |
342 | mult = 5; | |
343 | } | |
344 | if (*seven < *min) { | |
345 | min = seven; | |
346 | mult = 7; | |
347 | } | |
348 | ||
349 | ret = *min; | |
350 | *min *= mult; | |
351 | ||
352 | return ret; | |
353 | } | |
354 | ||
355 | /* | |
356 | * Check that all of the backup GDT blocks are held in the primary GDT block. | |
357 | * It is assumed that they are stored in group order. Returns the number of | |
358 | * groups in current filesystem that have BACKUPS, or -ve error code. | |
359 | */ | |
360 | static int verify_reserved_gdb(struct super_block *sb, | |
361 | struct buffer_head *primary) | |
362 | { | |
617ba13b | 363 | const ext4_fsblk_t blk = primary->b_blocknr; |
fd2d4291 | 364 | const ext4_group_t end = EXT4_SB(sb)->s_groups_count; |
ac27a0ec DK |
365 | unsigned three = 1; |
366 | unsigned five = 5; | |
367 | unsigned seven = 7; | |
368 | unsigned grp; | |
369 | __le32 *p = (__le32 *)primary->b_data; | |
370 | int gdbackups = 0; | |
371 | ||
617ba13b | 372 | while ((grp = ext4_list_backups(sb, &three, &five, &seven)) < end) { |
bd81d8ee LV |
373 | if (le32_to_cpu(*p++) != |
374 | grp * EXT4_BLOCKS_PER_GROUP(sb) + blk){ | |
12062ddd | 375 | ext4_warning(sb, "reserved GDT %llu" |
2ae02107 | 376 | " missing grp %d (%llu)", |
ac27a0ec | 377 | blk, grp, |
bd81d8ee LV |
378 | grp * |
379 | (ext4_fsblk_t)EXT4_BLOCKS_PER_GROUP(sb) + | |
380 | blk); | |
ac27a0ec DK |
381 | return -EINVAL; |
382 | } | |
617ba13b | 383 | if (++gdbackups > EXT4_ADDR_PER_BLOCK(sb)) |
ac27a0ec DK |
384 | return -EFBIG; |
385 | } | |
386 | ||
387 | return gdbackups; | |
388 | } | |
389 | ||
390 | /* | |
391 | * Called when we need to bring a reserved group descriptor table block into | |
392 | * use from the resize inode. The primary copy of the new GDT block currently | |
393 | * is an indirect block (under the double indirect block in the resize inode). | |
394 | * The new backup GDT blocks will be stored as leaf blocks in this indirect | |
395 | * block, in group order. Even though we know all the block numbers we need, | |
396 | * we check to ensure that the resize inode has actually reserved these blocks. | |
397 | * | |
398 | * Don't need to update the block bitmaps because the blocks are still in use. | |
399 | * | |
400 | * We get all of the error cases out of the way, so that we are sure to not | |
401 | * fail once we start modifying the data on disk, because JBD has no rollback. | |
402 | */ | |
403 | static int add_new_gdb(handle_t *handle, struct inode *inode, | |
617ba13b | 404 | struct ext4_new_group_data *input, |
ac27a0ec DK |
405 | struct buffer_head **primary) |
406 | { | |
407 | struct super_block *sb = inode->i_sb; | |
617ba13b MC |
408 | struct ext4_super_block *es = EXT4_SB(sb)->s_es; |
409 | unsigned long gdb_num = input->group / EXT4_DESC_PER_BLOCK(sb); | |
410 | ext4_fsblk_t gdblock = EXT4_SB(sb)->s_sbh->b_blocknr + 1 + gdb_num; | |
ac27a0ec DK |
411 | struct buffer_head **o_group_desc, **n_group_desc; |
412 | struct buffer_head *dind; | |
413 | int gdbackups; | |
617ba13b | 414 | struct ext4_iloc iloc; |
ac27a0ec DK |
415 | __le32 *data; |
416 | int err; | |
417 | ||
418 | if (test_opt(sb, DEBUG)) | |
419 | printk(KERN_DEBUG | |
617ba13b | 420 | "EXT4-fs: ext4_add_new_gdb: adding group block %lu\n", |
ac27a0ec DK |
421 | gdb_num); |
422 | ||
af5bc92d TT |
423 | /* |
424 | * If we are not using the primary superblock/GDT copy don't resize, | |
2b2d6d01 TT |
425 | * because the user tools have no way of handling this. Probably a |
426 | * bad time to do it anyways. | |
427 | */ | |
617ba13b MC |
428 | if (EXT4_SB(sb)->s_sbh->b_blocknr != |
429 | le32_to_cpu(EXT4_SB(sb)->s_es->s_first_data_block)) { | |
12062ddd | 430 | ext4_warning(sb, "won't resize using backup superblock at %llu", |
617ba13b | 431 | (unsigned long long)EXT4_SB(sb)->s_sbh->b_blocknr); |
ac27a0ec DK |
432 | return -EPERM; |
433 | } | |
434 | ||
435 | *primary = sb_bread(sb, gdblock); | |
436 | if (!*primary) | |
437 | return -EIO; | |
438 | ||
439 | if ((gdbackups = verify_reserved_gdb(sb, *primary)) < 0) { | |
440 | err = gdbackups; | |
441 | goto exit_bh; | |
442 | } | |
443 | ||
617ba13b | 444 | data = EXT4_I(inode)->i_data + EXT4_DIND_BLOCK; |
ac27a0ec DK |
445 | dind = sb_bread(sb, le32_to_cpu(*data)); |
446 | if (!dind) { | |
447 | err = -EIO; | |
448 | goto exit_bh; | |
449 | } | |
450 | ||
451 | data = (__le32 *)dind->b_data; | |
617ba13b | 452 | if (le32_to_cpu(data[gdb_num % EXT4_ADDR_PER_BLOCK(sb)]) != gdblock) { |
12062ddd | 453 | ext4_warning(sb, "new group %u GDT block %llu not reserved", |
ac27a0ec DK |
454 | input->group, gdblock); |
455 | err = -EINVAL; | |
456 | goto exit_dind; | |
457 | } | |
458 | ||
b4097142 TT |
459 | err = ext4_journal_get_write_access(handle, EXT4_SB(sb)->s_sbh); |
460 | if (unlikely(err)) | |
ac27a0ec DK |
461 | goto exit_dind; |
462 | ||
b4097142 TT |
463 | err = ext4_journal_get_write_access(handle, *primary); |
464 | if (unlikely(err)) | |
ac27a0ec DK |
465 | goto exit_sbh; |
466 | ||
b4097142 TT |
467 | err = ext4_journal_get_write_access(handle, dind); |
468 | if (unlikely(err)) | |
469 | ext4_std_error(sb, err); | |
ac27a0ec | 470 | |
617ba13b | 471 | /* ext4_reserve_inode_write() gets a reference on the iloc */ |
b4097142 TT |
472 | err = ext4_reserve_inode_write(handle, inode, &iloc); |
473 | if (unlikely(err)) | |
ac27a0ec DK |
474 | goto exit_dindj; |
475 | ||
476 | n_group_desc = kmalloc((gdb_num + 1) * sizeof(struct buffer_head *), | |
216553c4 | 477 | GFP_NOFS); |
ac27a0ec DK |
478 | if (!n_group_desc) { |
479 | err = -ENOMEM; | |
12062ddd | 480 | ext4_warning(sb, |
ac27a0ec DK |
481 | "not enough memory for %lu groups", gdb_num + 1); |
482 | goto exit_inode; | |
483 | } | |
484 | ||
485 | /* | |
486 | * Finally, we have all of the possible failures behind us... | |
487 | * | |
488 | * Remove new GDT block from inode double-indirect block and clear out | |
489 | * the new GDT block for use (which also "frees" the backup GDT blocks | |
490 | * from the reserved inode). We don't need to change the bitmaps for | |
491 | * these blocks, because they are marked as in-use from being in the | |
492 | * reserved inode, and will become GDT blocks (primary and backup). | |
493 | */ | |
617ba13b | 494 | data[gdb_num % EXT4_ADDR_PER_BLOCK(sb)] = 0; |
b4097142 TT |
495 | err = ext4_handle_dirty_metadata(handle, NULL, dind); |
496 | if (unlikely(err)) { | |
497 | ext4_std_error(sb, err); | |
498 | goto exit_inode; | |
499 | } | |
ac27a0ec | 500 | inode->i_blocks -= (gdbackups + 1) * sb->s_blocksize >> 9; |
617ba13b | 501 | ext4_mark_iloc_dirty(handle, inode, &iloc); |
ac27a0ec | 502 | memset((*primary)->b_data, 0, sb->s_blocksize); |
b4097142 TT |
503 | err = ext4_handle_dirty_metadata(handle, NULL, *primary); |
504 | if (unlikely(err)) { | |
505 | ext4_std_error(sb, err); | |
506 | goto exit_inode; | |
507 | } | |
508 | brelse(dind); | |
ac27a0ec | 509 | |
617ba13b | 510 | o_group_desc = EXT4_SB(sb)->s_group_desc; |
ac27a0ec | 511 | memcpy(n_group_desc, o_group_desc, |
617ba13b | 512 | EXT4_SB(sb)->s_gdb_count * sizeof(struct buffer_head *)); |
ac27a0ec | 513 | n_group_desc[gdb_num] = *primary; |
617ba13b MC |
514 | EXT4_SB(sb)->s_group_desc = n_group_desc; |
515 | EXT4_SB(sb)->s_gdb_count++; | |
ac27a0ec DK |
516 | kfree(o_group_desc); |
517 | ||
e8546d06 | 518 | le16_add_cpu(&es->s_reserved_gdt_blocks, -1); |
b4097142 TT |
519 | err = ext4_handle_dirty_metadata(handle, NULL, EXT4_SB(sb)->s_sbh); |
520 | if (err) | |
521 | ext4_std_error(sb, err); | |
ac27a0ec | 522 | |
b4097142 | 523 | return err; |
ac27a0ec DK |
524 | |
525 | exit_inode: | |
537a0310 | 526 | /* ext4_handle_release_buffer(handle, iloc.bh); */ |
ac27a0ec DK |
527 | brelse(iloc.bh); |
528 | exit_dindj: | |
537a0310 | 529 | /* ext4_handle_release_buffer(handle, dind); */ |
ac27a0ec | 530 | exit_sbh: |
537a0310 | 531 | /* ext4_handle_release_buffer(handle, EXT4_SB(sb)->s_sbh); */ |
ac27a0ec DK |
532 | exit_dind: |
533 | brelse(dind); | |
534 | exit_bh: | |
535 | brelse(*primary); | |
536 | ||
617ba13b | 537 | ext4_debug("leaving with error %d\n", err); |
ac27a0ec DK |
538 | return err; |
539 | } | |
540 | ||
541 | /* | |
542 | * Called when we are adding a new group which has a backup copy of each of | |
543 | * the GDT blocks (i.e. sparse group) and there are reserved GDT blocks. | |
544 | * We need to add these reserved backup GDT blocks to the resize inode, so | |
545 | * that they are kept for future resizing and not allocated to files. | |
546 | * | |
547 | * Each reserved backup GDT block will go into a different indirect block. | |
548 | * The indirect blocks are actually the primary reserved GDT blocks, | |
549 | * so we know in advance what their block numbers are. We only get the | |
550 | * double-indirect block to verify it is pointing to the primary reserved | |
551 | * GDT blocks so we don't overwrite a data block by accident. The reserved | |
552 | * backup GDT blocks are stored in their reserved primary GDT block. | |
553 | */ | |
554 | static int reserve_backup_gdb(handle_t *handle, struct inode *inode, | |
617ba13b | 555 | struct ext4_new_group_data *input) |
ac27a0ec DK |
556 | { |
557 | struct super_block *sb = inode->i_sb; | |
617ba13b | 558 | int reserved_gdb =le16_to_cpu(EXT4_SB(sb)->s_es->s_reserved_gdt_blocks); |
ac27a0ec DK |
559 | struct buffer_head **primary; |
560 | struct buffer_head *dind; | |
617ba13b MC |
561 | struct ext4_iloc iloc; |
562 | ext4_fsblk_t blk; | |
ac27a0ec DK |
563 | __le32 *data, *end; |
564 | int gdbackups = 0; | |
565 | int res, i; | |
566 | int err; | |
567 | ||
216553c4 | 568 | primary = kmalloc(reserved_gdb * sizeof(*primary), GFP_NOFS); |
ac27a0ec DK |
569 | if (!primary) |
570 | return -ENOMEM; | |
571 | ||
617ba13b | 572 | data = EXT4_I(inode)->i_data + EXT4_DIND_BLOCK; |
ac27a0ec DK |
573 | dind = sb_bread(sb, le32_to_cpu(*data)); |
574 | if (!dind) { | |
575 | err = -EIO; | |
576 | goto exit_free; | |
577 | } | |
578 | ||
617ba13b | 579 | blk = EXT4_SB(sb)->s_sbh->b_blocknr + 1 + EXT4_SB(sb)->s_gdb_count; |
94460093 JB |
580 | data = (__le32 *)dind->b_data + (EXT4_SB(sb)->s_gdb_count % |
581 | EXT4_ADDR_PER_BLOCK(sb)); | |
617ba13b | 582 | end = (__le32 *)dind->b_data + EXT4_ADDR_PER_BLOCK(sb); |
ac27a0ec DK |
583 | |
584 | /* Get each reserved primary GDT block and verify it holds backups */ | |
585 | for (res = 0; res < reserved_gdb; res++, blk++) { | |
586 | if (le32_to_cpu(*data) != blk) { | |
12062ddd | 587 | ext4_warning(sb, "reserved block %llu" |
ac27a0ec DK |
588 | " not at offset %ld", |
589 | blk, | |
590 | (long)(data - (__le32 *)dind->b_data)); | |
591 | err = -EINVAL; | |
592 | goto exit_bh; | |
593 | } | |
594 | primary[res] = sb_bread(sb, blk); | |
595 | if (!primary[res]) { | |
596 | err = -EIO; | |
597 | goto exit_bh; | |
598 | } | |
599 | if ((gdbackups = verify_reserved_gdb(sb, primary[res])) < 0) { | |
600 | brelse(primary[res]); | |
601 | err = gdbackups; | |
602 | goto exit_bh; | |
603 | } | |
604 | if (++data >= end) | |
605 | data = (__le32 *)dind->b_data; | |
606 | } | |
607 | ||
608 | for (i = 0; i < reserved_gdb; i++) { | |
617ba13b | 609 | if ((err = ext4_journal_get_write_access(handle, primary[i]))) { |
ac27a0ec DK |
610 | /* |
611 | int j; | |
612 | for (j = 0; j < i; j++) | |
537a0310 | 613 | ext4_handle_release_buffer(handle, primary[j]); |
ac27a0ec DK |
614 | */ |
615 | goto exit_bh; | |
616 | } | |
617 | } | |
618 | ||
617ba13b | 619 | if ((err = ext4_reserve_inode_write(handle, inode, &iloc))) |
ac27a0ec DK |
620 | goto exit_bh; |
621 | ||
622 | /* | |
623 | * Finally we can add each of the reserved backup GDT blocks from | |
624 | * the new group to its reserved primary GDT block. | |
625 | */ | |
617ba13b | 626 | blk = input->group * EXT4_BLOCKS_PER_GROUP(sb); |
ac27a0ec DK |
627 | for (i = 0; i < reserved_gdb; i++) { |
628 | int err2; | |
629 | data = (__le32 *)primary[i]->b_data; | |
630 | /* printk("reserving backup %lu[%u] = %lu\n", | |
631 | primary[i]->b_blocknr, gdbackups, | |
632 | blk + primary[i]->b_blocknr); */ | |
633 | data[gdbackups] = cpu_to_le32(blk + primary[i]->b_blocknr); | |
0390131b | 634 | err2 = ext4_handle_dirty_metadata(handle, NULL, primary[i]); |
ac27a0ec DK |
635 | if (!err) |
636 | err = err2; | |
637 | } | |
638 | inode->i_blocks += reserved_gdb * sb->s_blocksize >> 9; | |
617ba13b | 639 | ext4_mark_iloc_dirty(handle, inode, &iloc); |
ac27a0ec DK |
640 | |
641 | exit_bh: | |
642 | while (--res >= 0) | |
643 | brelse(primary[res]); | |
644 | brelse(dind); | |
645 | ||
646 | exit_free: | |
647 | kfree(primary); | |
648 | ||
649 | return err; | |
650 | } | |
651 | ||
652 | /* | |
617ba13b | 653 | * Update the backup copies of the ext4 metadata. These don't need to be part |
ac27a0ec DK |
654 | * of the main resize transaction, because e2fsck will re-write them if there |
655 | * is a problem (basically only OOM will cause a problem). However, we | |
656 | * _should_ update the backups if possible, in case the primary gets trashed | |
657 | * for some reason and we need to run e2fsck from a backup superblock. The | |
658 | * important part is that the new block and inode counts are in the backup | |
659 | * superblocks, and the location of the new group metadata in the GDT backups. | |
660 | * | |
32ed5058 TT |
661 | * We do not need take the s_resize_lock for this, because these |
662 | * blocks are not otherwise touched by the filesystem code when it is | |
663 | * mounted. We don't need to worry about last changing from | |
664 | * sbi->s_groups_count, because the worst that can happen is that we | |
665 | * do not copy the full number of backups at this time. The resize | |
666 | * which changed s_groups_count will backup again. | |
ac27a0ec DK |
667 | */ |
668 | static void update_backups(struct super_block *sb, | |
669 | int blk_off, char *data, int size) | |
670 | { | |
617ba13b | 671 | struct ext4_sb_info *sbi = EXT4_SB(sb); |
fd2d4291 | 672 | const ext4_group_t last = sbi->s_groups_count; |
617ba13b | 673 | const int bpg = EXT4_BLOCKS_PER_GROUP(sb); |
ac27a0ec DK |
674 | unsigned three = 1; |
675 | unsigned five = 5; | |
676 | unsigned seven = 7; | |
fd2d4291 | 677 | ext4_group_t group; |
ac27a0ec DK |
678 | int rest = sb->s_blocksize - size; |
679 | handle_t *handle; | |
680 | int err = 0, err2; | |
681 | ||
617ba13b | 682 | handle = ext4_journal_start_sb(sb, EXT4_MAX_TRANS_DATA); |
ac27a0ec DK |
683 | if (IS_ERR(handle)) { |
684 | group = 1; | |
685 | err = PTR_ERR(handle); | |
686 | goto exit_err; | |
687 | } | |
688 | ||
617ba13b | 689 | while ((group = ext4_list_backups(sb, &three, &five, &seven)) < last) { |
ac27a0ec DK |
690 | struct buffer_head *bh; |
691 | ||
692 | /* Out of journal space, and can't get more - abort - so sad */ | |
0390131b FM |
693 | if (ext4_handle_valid(handle) && |
694 | handle->h_buffer_credits == 0 && | |
617ba13b MC |
695 | ext4_journal_extend(handle, EXT4_MAX_TRANS_DATA) && |
696 | (err = ext4_journal_restart(handle, EXT4_MAX_TRANS_DATA))) | |
ac27a0ec DK |
697 | break; |
698 | ||
699 | bh = sb_getblk(sb, group * bpg + blk_off); | |
700 | if (!bh) { | |
701 | err = -EIO; | |
702 | break; | |
703 | } | |
617ba13b | 704 | ext4_debug("update metadata backup %#04lx\n", |
ac27a0ec | 705 | (unsigned long)bh->b_blocknr); |
617ba13b | 706 | if ((err = ext4_journal_get_write_access(handle, bh))) |
ac27a0ec DK |
707 | break; |
708 | lock_buffer(bh); | |
709 | memcpy(bh->b_data, data, size); | |
710 | if (rest) | |
711 | memset(bh->b_data + size, 0, rest); | |
712 | set_buffer_uptodate(bh); | |
713 | unlock_buffer(bh); | |
b4097142 TT |
714 | err = ext4_handle_dirty_metadata(handle, NULL, bh); |
715 | if (unlikely(err)) | |
716 | ext4_std_error(sb, err); | |
ac27a0ec DK |
717 | brelse(bh); |
718 | } | |
617ba13b | 719 | if ((err2 = ext4_journal_stop(handle)) && !err) |
ac27a0ec DK |
720 | err = err2; |
721 | ||
722 | /* | |
723 | * Ugh! Need to have e2fsck write the backup copies. It is too | |
724 | * late to revert the resize, we shouldn't fail just because of | |
725 | * the backup copies (they are only needed in case of corruption). | |
726 | * | |
727 | * However, if we got here we have a journal problem too, so we | |
728 | * can't really start a transaction to mark the superblock. | |
729 | * Chicken out and just set the flag on the hope it will be written | |
730 | * to disk, and if not - we will simply wait until next fsck. | |
731 | */ | |
732 | exit_err: | |
733 | if (err) { | |
12062ddd | 734 | ext4_warning(sb, "can't update backup for group %u (err %d), " |
ac27a0ec | 735 | "forcing fsck on next reboot", group, err); |
617ba13b MC |
736 | sbi->s_mount_state &= ~EXT4_VALID_FS; |
737 | sbi->s_es->s_state &= cpu_to_le16(~EXT4_VALID_FS); | |
ac27a0ec DK |
738 | mark_buffer_dirty(sbi->s_sbh); |
739 | } | |
740 | } | |
741 | ||
742 | /* Add group descriptor data to an existing or new group descriptor block. | |
743 | * Ensure we handle all possible error conditions _before_ we start modifying | |
744 | * the filesystem, because we cannot abort the transaction and not have it | |
745 | * write the data to disk. | |
746 | * | |
747 | * If we are on a GDT block boundary, we need to get the reserved GDT block. | |
748 | * Otherwise, we may need to add backup GDT blocks for a sparse group. | |
749 | * | |
750 | * We only need to hold the superblock lock while we are actually adding | |
751 | * in the new group's counts to the superblock. Prior to that we have | |
752 | * not really "added" the group at all. We re-check that we are still | |
753 | * adding in the last group in case things have changed since verifying. | |
754 | */ | |
617ba13b | 755 | int ext4_group_add(struct super_block *sb, struct ext4_new_group_data *input) |
ac27a0ec | 756 | { |
617ba13b MC |
757 | struct ext4_sb_info *sbi = EXT4_SB(sb); |
758 | struct ext4_super_block *es = sbi->s_es; | |
759 | int reserved_gdb = ext4_bg_has_super(sb, input->group) ? | |
ac27a0ec DK |
760 | le16_to_cpu(es->s_reserved_gdt_blocks) : 0; |
761 | struct buffer_head *primary = NULL; | |
617ba13b | 762 | struct ext4_group_desc *gdp; |
ac27a0ec DK |
763 | struct inode *inode = NULL; |
764 | handle_t *handle; | |
765 | int gdb_off, gdb_num; | |
766 | int err, err2; | |
767 | ||
617ba13b MC |
768 | gdb_num = input->group / EXT4_DESC_PER_BLOCK(sb); |
769 | gdb_off = input->group % EXT4_DESC_PER_BLOCK(sb); | |
ac27a0ec | 770 | |
617ba13b MC |
771 | if (gdb_off == 0 && !EXT4_HAS_RO_COMPAT_FEATURE(sb, |
772 | EXT4_FEATURE_RO_COMPAT_SPARSE_SUPER)) { | |
12062ddd | 773 | ext4_warning(sb, "Can't resize non-sparse filesystem further"); |
ac27a0ec DK |
774 | return -EPERM; |
775 | } | |
776 | ||
bd81d8ee LV |
777 | if (ext4_blocks_count(es) + input->blocks_count < |
778 | ext4_blocks_count(es)) { | |
12062ddd | 779 | ext4_warning(sb, "blocks_count overflow"); |
ac27a0ec DK |
780 | return -EINVAL; |
781 | } | |
782 | ||
617ba13b | 783 | if (le32_to_cpu(es->s_inodes_count) + EXT4_INODES_PER_GROUP(sb) < |
ac27a0ec | 784 | le32_to_cpu(es->s_inodes_count)) { |
12062ddd | 785 | ext4_warning(sb, "inodes_count overflow"); |
ac27a0ec DK |
786 | return -EINVAL; |
787 | } | |
788 | ||
789 | if (reserved_gdb || gdb_off == 0) { | |
617ba13b | 790 | if (!EXT4_HAS_COMPAT_FEATURE(sb, |
37609fd5 JB |
791 | EXT4_FEATURE_COMPAT_RESIZE_INODE) |
792 | || !le16_to_cpu(es->s_reserved_gdt_blocks)) { | |
12062ddd | 793 | ext4_warning(sb, |
ac27a0ec DK |
794 | "No reserved GDT blocks, can't resize"); |
795 | return -EPERM; | |
796 | } | |
1d1fe1ee DH |
797 | inode = ext4_iget(sb, EXT4_RESIZE_INO); |
798 | if (IS_ERR(inode)) { | |
12062ddd | 799 | ext4_warning(sb, "Error opening resize inode"); |
1d1fe1ee | 800 | return PTR_ERR(inode); |
ac27a0ec DK |
801 | } |
802 | } | |
803 | ||
920313a7 | 804 | |
ac27a0ec DK |
805 | if ((err = verify_group_input(sb, input))) |
806 | goto exit_put; | |
807 | ||
808 | if ((err = setup_new_group_blocks(sb, input))) | |
809 | goto exit_put; | |
810 | ||
811 | /* | |
812 | * We will always be modifying at least the superblock and a GDT | |
813 | * block. If we are adding a group past the last current GDT block, | |
814 | * we will also modify the inode and the dindirect block. If we | |
815 | * are adding a group with superblock/GDT backups we will also | |
816 | * modify each of the reserved GDT dindirect blocks. | |
817 | */ | |
617ba13b MC |
818 | handle = ext4_journal_start_sb(sb, |
819 | ext4_bg_has_super(sb, input->group) ? | |
ac27a0ec DK |
820 | 3 + reserved_gdb : 4); |
821 | if (IS_ERR(handle)) { | |
822 | err = PTR_ERR(handle); | |
823 | goto exit_put; | |
824 | } | |
825 | ||
617ba13b | 826 | if ((err = ext4_journal_get_write_access(handle, sbi->s_sbh))) |
ac27a0ec DK |
827 | goto exit_journal; |
828 | ||
2b2d6d01 TT |
829 | /* |
830 | * We will only either add reserved group blocks to a backup group | |
831 | * or remove reserved blocks for the first group in a new group block. | |
832 | * Doing both would be mean more complex code, and sane people don't | |
833 | * use non-sparse filesystems anymore. This is already checked above. | |
834 | */ | |
ac27a0ec DK |
835 | if (gdb_off) { |
836 | primary = sbi->s_group_desc[gdb_num]; | |
617ba13b | 837 | if ((err = ext4_journal_get_write_access(handle, primary))) |
ac27a0ec DK |
838 | goto exit_journal; |
839 | ||
617ba13b | 840 | if (reserved_gdb && ext4_bg_num_gdb(sb, input->group) && |
ac27a0ec DK |
841 | (err = reserve_backup_gdb(handle, inode, input))) |
842 | goto exit_journal; | |
843 | } else if ((err = add_new_gdb(handle, inode, input, &primary))) | |
844 | goto exit_journal; | |
845 | ||
2b2d6d01 TT |
846 | /* |
847 | * OK, now we've set up the new group. Time to make it active. | |
848 | * | |
2b2d6d01 TT |
849 | * so we have to be safe wrt. concurrent accesses the group |
850 | * data. So we need to be careful to set all of the relevant | |
851 | * group descriptor data etc. *before* we enable the group. | |
852 | * | |
853 | * The key field here is sbi->s_groups_count: as long as | |
854 | * that retains its old value, nobody is going to access the new | |
855 | * group. | |
856 | * | |
857 | * So first we update all the descriptor metadata for the new | |
858 | * group; then we update the total disk blocks count; then we | |
859 | * update the groups count to enable the group; then finally we | |
860 | * update the free space counts so that the system can start | |
861 | * using the new disk blocks. | |
862 | */ | |
ac27a0ec DK |
863 | |
864 | /* Update group descriptor block for new group */ | |
2856922c FB |
865 | gdp = (struct ext4_group_desc *)((char *)primary->b_data + |
866 | gdb_off * EXT4_DESC_SIZE(sb)); | |
ac27a0ec | 867 | |
fdff73f0 | 868 | memset(gdp, 0, EXT4_DESC_SIZE(sb)); |
8fadc143 AR |
869 | ext4_block_bitmap_set(sb, gdp, input->block_bitmap); /* LV FIXME */ |
870 | ext4_inode_bitmap_set(sb, gdp, input->inode_bitmap); /* LV FIXME */ | |
871 | ext4_inode_table_set(sb, gdp, input->inode_table); /* LV FIXME */ | |
560671a0 AK |
872 | ext4_free_blks_set(sb, gdp, input->free_blocks_count); |
873 | ext4_free_inodes_set(sb, gdp, EXT4_INODES_PER_GROUP(sb)); | |
fdff73f0 | 874 | gdp->bg_flags = cpu_to_le16(EXT4_BG_INODE_ZEROED); |
717d50e4 | 875 | gdp->bg_checksum = ext4_group_desc_csum(sbi, input->group, gdp); |
ac27a0ec | 876 | |
5f21b0e6 FB |
877 | /* |
878 | * We can allocate memory for mb_alloc based on the new group | |
879 | * descriptor | |
880 | */ | |
920313a7 | 881 | err = ext4_mb_add_groupinfo(sb, input->group, gdp); |
08c3a813 | 882 | if (err) |
c2ea3fde TT |
883 | goto exit_journal; |
884 | ||
ac27a0ec DK |
885 | /* |
886 | * Make the new blocks and inodes valid next. We do this before | |
887 | * increasing the group count so that once the group is enabled, | |
888 | * all of its blocks and inodes are already valid. | |
889 | * | |
890 | * We always allocate group-by-group, then block-by-block or | |
891 | * inode-by-inode within a group, so enabling these | |
892 | * blocks/inodes before the group is live won't actually let us | |
893 | * allocate the new space yet. | |
894 | */ | |
bd81d8ee | 895 | ext4_blocks_count_set(es, ext4_blocks_count(es) + |
ac27a0ec | 896 | input->blocks_count); |
e8546d06 | 897 | le32_add_cpu(&es->s_inodes_count, EXT4_INODES_PER_GROUP(sb)); |
ac27a0ec DK |
898 | |
899 | /* | |
900 | * We need to protect s_groups_count against other CPUs seeing | |
901 | * inconsistent state in the superblock. | |
902 | * | |
903 | * The precise rules we use are: | |
904 | * | |
ac27a0ec DK |
905 | * * Writers must perform a smp_wmb() after updating all dependent |
906 | * data and before modifying the groups count | |
907 | * | |
ac27a0ec DK |
908 | * * Readers must perform an smp_rmb() after reading the groups count |
909 | * and before reading any dependent data. | |
910 | * | |
911 | * NB. These rules can be relaxed when checking the group count | |
912 | * while freeing data, as we can only allocate from a block | |
913 | * group after serialising against the group count, and we can | |
914 | * only then free after serialising in turn against that | |
915 | * allocation. | |
916 | */ | |
917 | smp_wmb(); | |
918 | ||
919 | /* Update the global fs size fields */ | |
920 | sbi->s_groups_count++; | |
921 | ||
b4097142 TT |
922 | err = ext4_handle_dirty_metadata(handle, NULL, primary); |
923 | if (unlikely(err)) { | |
924 | ext4_std_error(sb, err); | |
925 | goto exit_journal; | |
926 | } | |
ac27a0ec DK |
927 | |
928 | /* Update the reserved block counts only once the new group is | |
929 | * active. */ | |
bd81d8ee | 930 | ext4_r_blocks_count_set(es, ext4_r_blocks_count(es) + |
ac27a0ec DK |
931 | input->reserved_blocks); |
932 | ||
933 | /* Update the free space counts */ | |
aa0dff2d | 934 | percpu_counter_add(&sbi->s_freeblocks_counter, |
ac27a0ec | 935 | input->free_blocks_count); |
aa0dff2d | 936 | percpu_counter_add(&sbi->s_freeinodes_counter, |
617ba13b | 937 | EXT4_INODES_PER_GROUP(sb)); |
ac27a0ec | 938 | |
42007efd ES |
939 | if (EXT4_HAS_INCOMPAT_FEATURE(sb, EXT4_FEATURE_INCOMPAT_FLEX_BG) && |
940 | sbi->s_log_groups_per_flex) { | |
c62a11fd FB |
941 | ext4_group_t flex_group; |
942 | flex_group = ext4_flex_group(sbi, input->group); | |
9f24e420 TT |
943 | atomic_add(input->free_blocks_count, |
944 | &sbi->s_flex_groups[flex_group].free_blocks); | |
945 | atomic_add(EXT4_INODES_PER_GROUP(sb), | |
946 | &sbi->s_flex_groups[flex_group].free_inodes); | |
c62a11fd FB |
947 | } |
948 | ||
a0375156 | 949 | ext4_handle_dirty_super(handle, sb); |
ac27a0ec DK |
950 | |
951 | exit_journal: | |
617ba13b | 952 | if ((err2 = ext4_journal_stop(handle)) && !err) |
ac27a0ec DK |
953 | err = err2; |
954 | if (!err) { | |
955 | update_backups(sb, sbi->s_sbh->b_blocknr, (char *)es, | |
617ba13b | 956 | sizeof(struct ext4_super_block)); |
ac27a0ec DK |
957 | update_backups(sb, primary->b_blocknr, primary->b_data, |
958 | primary->b_size); | |
959 | } | |
960 | exit_put: | |
961 | iput(inode); | |
962 | return err; | |
617ba13b | 963 | } /* ext4_group_add */ |
ac27a0ec | 964 | |
2b2d6d01 TT |
965 | /* |
966 | * Extend the filesystem to the new number of blocks specified. This entry | |
ac27a0ec DK |
967 | * point is only used to extend the current filesystem to the end of the last |
968 | * existing group. It can be accessed via ioctl, or by "remount,resize=<size>" | |
969 | * for emergencies (because it has no dependencies on reserved blocks). | |
970 | * | |
617ba13b | 971 | * If we _really_ wanted, we could use default values to call ext4_group_add() |
ac27a0ec DK |
972 | * allow the "remount" trick to work for arbitrary resizing, assuming enough |
973 | * GDT blocks are reserved to grow to the desired size. | |
974 | */ | |
617ba13b MC |
975 | int ext4_group_extend(struct super_block *sb, struct ext4_super_block *es, |
976 | ext4_fsblk_t n_blocks_count) | |
ac27a0ec | 977 | { |
617ba13b | 978 | ext4_fsblk_t o_blocks_count; |
617ba13b MC |
979 | ext4_grpblk_t last; |
980 | ext4_grpblk_t add; | |
af5bc92d | 981 | struct buffer_head *bh; |
ac27a0ec DK |
982 | handle_t *handle; |
983 | int err; | |
5f21b0e6 | 984 | ext4_group_t group; |
ac27a0ec | 985 | |
bd81d8ee | 986 | o_blocks_count = ext4_blocks_count(es); |
ac27a0ec DK |
987 | |
988 | if (test_opt(sb, DEBUG)) | |
2ae02107 | 989 | printk(KERN_DEBUG "EXT4-fs: extending last group from %llu uto %llu blocks\n", |
ac27a0ec DK |
990 | o_blocks_count, n_blocks_count); |
991 | ||
992 | if (n_blocks_count == 0 || n_blocks_count == o_blocks_count) | |
993 | return 0; | |
994 | ||
995 | if (n_blocks_count > (sector_t)(~0ULL) >> (sb->s_blocksize_bits - 9)) { | |
617ba13b | 996 | printk(KERN_ERR "EXT4-fs: filesystem on %s:" |
2ae02107 | 997 | " too large to resize to %llu blocks safely\n", |
ac27a0ec DK |
998 | sb->s_id, n_blocks_count); |
999 | if (sizeof(sector_t) < 8) | |
12062ddd | 1000 | ext4_warning(sb, "CONFIG_LBDAF not enabled"); |
ac27a0ec DK |
1001 | return -EINVAL; |
1002 | } | |
1003 | ||
1004 | if (n_blocks_count < o_blocks_count) { | |
12062ddd | 1005 | ext4_warning(sb, "can't shrink FS - resize aborted"); |
8f82f840 | 1006 | return -EINVAL; |
ac27a0ec DK |
1007 | } |
1008 | ||
1009 | /* Handle the remaining blocks in the last group only. */ | |
5f21b0e6 | 1010 | ext4_get_group_no_and_offset(sb, o_blocks_count, &group, &last); |
ac27a0ec DK |
1011 | |
1012 | if (last == 0) { | |
12062ddd | 1013 | ext4_warning(sb, "need to use ext2online to resize further"); |
ac27a0ec DK |
1014 | return -EPERM; |
1015 | } | |
1016 | ||
617ba13b | 1017 | add = EXT4_BLOCKS_PER_GROUP(sb) - last; |
ac27a0ec DK |
1018 | |
1019 | if (o_blocks_count + add < o_blocks_count) { | |
12062ddd | 1020 | ext4_warning(sb, "blocks_count overflow"); |
ac27a0ec DK |
1021 | return -EINVAL; |
1022 | } | |
1023 | ||
1024 | if (o_blocks_count + add > n_blocks_count) | |
1025 | add = n_blocks_count - o_blocks_count; | |
1026 | ||
1027 | if (o_blocks_count + add < n_blocks_count) | |
12062ddd | 1028 | ext4_warning(sb, "will only finish group (%llu blocks, %u new)", |
ac27a0ec DK |
1029 | o_blocks_count + add, add); |
1030 | ||
1031 | /* See if the device is actually as big as what was requested */ | |
2b2d6d01 | 1032 | bh = sb_bread(sb, o_blocks_count + add - 1); |
ac27a0ec | 1033 | if (!bh) { |
12062ddd | 1034 | ext4_warning(sb, "can't read last block, resize aborted"); |
ac27a0ec DK |
1035 | return -ENOSPC; |
1036 | } | |
1037 | brelse(bh); | |
1038 | ||
1039 | /* We will update the superblock, one block bitmap, and | |
617ba13b | 1040 | * one group descriptor via ext4_free_blocks(). |
ac27a0ec | 1041 | */ |
617ba13b | 1042 | handle = ext4_journal_start_sb(sb, 3); |
ac27a0ec DK |
1043 | if (IS_ERR(handle)) { |
1044 | err = PTR_ERR(handle); | |
12062ddd | 1045 | ext4_warning(sb, "error %d on journal start", err); |
ac27a0ec DK |
1046 | goto exit_put; |
1047 | } | |
1048 | ||
617ba13b MC |
1049 | if ((err = ext4_journal_get_write_access(handle, |
1050 | EXT4_SB(sb)->s_sbh))) { | |
12062ddd | 1051 | ext4_warning(sb, "error %d on journal write access", err); |
617ba13b | 1052 | ext4_journal_stop(handle); |
ac27a0ec DK |
1053 | goto exit_put; |
1054 | } | |
bd81d8ee | 1055 | ext4_blocks_count_set(es, o_blocks_count + add); |
c549a95d | 1056 | ext4_debug("freeing blocks %llu through %llu\n", o_blocks_count, |
ac27a0ec | 1057 | o_blocks_count + add); |
e21675d4 | 1058 | /* We add the blocks to the bitmap and set the group need init bit */ |
0529155e | 1059 | ext4_group_add_blocks(handle, sb, o_blocks_count, add); |
a0375156 | 1060 | ext4_handle_dirty_super(handle, sb); |
2ae02107 | 1061 | ext4_debug("freed blocks %llu through %llu\n", o_blocks_count, |
ac27a0ec | 1062 | o_blocks_count + add); |
617ba13b | 1063 | if ((err = ext4_journal_stop(handle))) |
ac27a0ec | 1064 | goto exit_put; |
5f21b0e6 | 1065 | |
ac27a0ec | 1066 | if (test_opt(sb, DEBUG)) |
bd81d8ee LV |
1067 | printk(KERN_DEBUG "EXT4-fs: extended group to %llu blocks\n", |
1068 | ext4_blocks_count(es)); | |
617ba13b MC |
1069 | update_backups(sb, EXT4_SB(sb)->s_sbh->b_blocknr, (char *)es, |
1070 | sizeof(struct ext4_super_block)); | |
ac27a0ec DK |
1071 | exit_put: |
1072 | return err; | |
617ba13b | 1073 | } /* ext4_group_extend */ |