lustre/llite/namei.c

   1 /*
   2  * GPL HEADER START
   3  *
   4  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
   5  *
   6  * This program is free software; you can redistribute it and/or modify
   7  * it under the terms of the GNU General Public License version 2 only,
   8  * as published by the Free Software Foundation.
   9  *
  10  * This program is distributed in the hope that it will be useful, but
  11  * WITHOUT ANY WARRANTY; without even the implied warranty of
  12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  13  * General Public License version 2 for more details (a copy is included
  14  * in the LICENSE file that accompanied this code).
  15  *
  16  * You should have received a copy of the GNU General Public License
  17  * version 2 along with this program; If not, see
  18  * http://www.gnu.org/licenses/gpl-2.0.html
  19  *
  20  * GPL HEADER END
  21  */
  22 /*
  23  * Copyright (c) 2002, 2010, Oracle and/or its affiliates. All rights reserved.
  24  * Use is subject to license terms.
  25  *
  26  * Copyright (c) 2011, 2017, Intel Corporation.
  27  */
  28 /*
  29  * This file is part of Lustre, http://www.lustre.org/
  30  */
  31
  32 #include <linux/fs.h>
  33 #include <linux/sched.h>
  34 #include <linux/mm.h>
  35 #include <linux/file.h>
  36 #include <linux/quotaops.h>
  37 #include <linux/highmem.h>
  38 #include <linux/pagemap.h>
  39 #include <linux/user_namespace.h>
  40 #include <linux/uidgid.h>
  41
  42 #define DEBUG_SUBSYSTEM S_LLITE
  43
  44 #include <obd_support.h>
  45 #include <lustre_fid.h>
  46 #include <lustre_dlm.h>
  47 #include "llite_internal.h"
  48
  49 #ifndef HAVE_USER_NAMESPACE_ARG
  50 #define ll_create_nd(ns, dir, de, mode, ex)     ll_create_nd(dir, de, mode, ex)
  51 #define ll_mkdir(ns, dir, dch, mode)            ll_mkdir(dir, dch, mode)
  52 #define ll_mknod(ns, dir, dch, mode, rd)        ll_mknod(dir, dch, mode, rd)
  53 #ifdef HAVE_IOPS_RENAME_WITH_FLAGS
  54 #define ll_rename(ns, src, sdc, tgt, tdc, fl)   ll_rename(src, sdc, tgt, tdc, fl)
  55 #else
  56 #define ll_rename(ns, src, sdc, tgt, tdc)       ll_rename(src, sdc, tgt, tdc)
  57 #endif /* HAVE_IOPS_RENAME_WITH_FLAGS */
  58 #define ll_symlink(nd, dir, dch, old)           ll_symlink(dir, dch, old)
  59 #endif
  60
  61 static int ll_create_it(struct inode *dir, struct dentry *dentry,
  62                         struct lookup_intent *it,
  63                         void *secctx, __u32 secctxlen, bool encrypt,
  64                         void *encctx, __u32 encctxlen, unsigned int open_flags);
  65
  66 /* called from iget5_locked->find_inode() under inode_lock spinlock */
  67 static int ll_test_inode(struct inode *inode, void *opaque)
  68 {
  69         struct ll_inode_info    *lli = ll_i2info(inode);
  70         struct lustre_md        *md = opaque;
  71
  72         if (unlikely(!(md->body->mbo_valid & OBD_MD_FLID))) {
  73                 CERROR("MDS body missing FID\n");
  74                 return 0;
  75         }
  76
  77         if (!lu_fid_eq(&lli->lli_fid, &md->body->mbo_fid1))
  78                 return 0;
  79
  80         return 1;
  81 }
  82
  83 static int ll_set_inode(struct inode *inode, void *opaque)
  84 {
  85         struct ll_inode_info *lli = ll_i2info(inode);
  86         struct mdt_body *body = ((struct lustre_md *)opaque)->body;
  87
  88         if (unlikely(!(body->mbo_valid & OBD_MD_FLID))) {
  89                 CERROR("MDS body missing FID\n");
  90                 return -EINVAL;
  91         }
  92
  93         lli->lli_fid = body->mbo_fid1;
  94         if (unlikely(!(body->mbo_valid & OBD_MD_FLTYPE))) {
  95                 CERROR("Can not initialize inode "DFID" without object type: "
  96                        "valid = %#llx\n",
  97                        PFID(&lli->lli_fid), body->mbo_valid);
  98                 return -EINVAL;
  99         }
 100
 101         inode->i_mode = (inode->i_mode & ~S_IFMT) | (body->mbo_mode & S_IFMT);
 102         if (unlikely(inode->i_mode == 0)) {
 103                 CERROR("Invalid inode "DFID" type\n", PFID(&lli->lli_fid));
 104                 return -EINVAL;
 105         }
 106
 107         ll_lli_init(lli);
 108
 109         return 0;
 110 }
 111
 112
 113 /**
 114  * Get an inode by inode number(@hash), which is already instantiated by
 115  * the intent lookup).
 116  */
 117 struct inode *ll_iget(struct super_block *sb, ino_t hash,
 118                       struct lustre_md *md)
 119 {
 120         struct inode    *inode;
 121         int             rc = 0;
 122
 123         ENTRY;
 124
 125         LASSERT(hash != 0);
 126         inode = iget5_locked(sb, hash, ll_test_inode, ll_set_inode, md);
 127         if (inode == NULL)
 128                 RETURN(ERR_PTR(-ENOMEM));
 129
 130         if (inode->i_state & I_NEW) {
 131                 rc = ll_read_inode2(inode, md);
 132                 if (rc == 0 && S_ISREG(inode->i_mode) &&
 133                     ll_i2info(inode)->lli_clob == NULL)
 134                         rc = cl_file_inode_init(inode, md);
 135
 136                 if (rc != 0) {
 137                         /* Let's clear directory lsm here, otherwise
 138                          * make_bad_inode() will reset the inode mode
 139                          * to regular, then ll_clear_inode will not
 140                          * be able to clear lsm_md */
 141                         if (S_ISDIR(inode->i_mode))
 142                                 ll_dir_clear_lsm_md(inode);
 143                         make_bad_inode(inode);
 144                         unlock_new_inode(inode);
 145                         iput(inode);
 146                         inode = ERR_PTR(rc);
 147                 } else {
 148                         inode_has_no_xattr(inode);
 149                         unlock_new_inode(inode);
 150                 }
 151         } else if (is_bad_inode(inode)) {
 152                 iput(inode);
 153                 inode = ERR_PTR(-ESTALE);
 154         } else if (!(inode->i_state & (I_FREEING | I_CLEAR))) {
 155                 rc = ll_update_inode(inode, md);
 156                 CDEBUG(D_VFSTRACE, "got inode: "DFID"(%p): rc = %d\n",
 157                        PFID(&md->body->mbo_fid1), inode, rc);
 158                 if (rc != 0) {
 159                         if (S_ISDIR(inode->i_mode))
 160                                 ll_dir_clear_lsm_md(inode);
 161                         iput(inode);
 162                         inode = ERR_PTR(rc);
 163                 }
 164         }
 165
 166         RETURN(inode);
 167 }
 168
 169 /* mark negative sub file dentries invalid and prune unused dentries */
 170 static void ll_prune_negative_children(struct inode *dir)
 171 {
 172         struct dentry *dentry;
 173         struct dentry *child;
 174
 175         ENTRY;
 176
 177 restart:
 178         spin_lock(&dir->i_lock);
 179         hlist_for_each_entry(dentry, &dir->i_dentry, d_alias) {
 180                 spin_lock(&dentry->d_lock);
 181                 list_for_each_entry(child, &dentry->d_subdirs, d_child) {
 182                         if (child->d_inode)
 183                                 continue;
 184
 185                         spin_lock_nested(&child->d_lock, DENTRY_D_LOCK_NESTED);
 186                         if (lld_is_init(child))
 187                                 ll_d2d(child)->lld_invalid = 1;
 188                         if (!ll_d_count(child)) {
 189                                 dget_dlock(child);
 190                                 __d_drop(child);
 191                                 spin_unlock(&child->d_lock);
 192                                 spin_unlock(&dentry->d_lock);
 193                                 spin_unlock(&dir->i_lock);
 194
 195                                 CDEBUG(D_DENTRY, "prune negative dentry %pd\n",
 196                                        child);
 197
 198                                 dput(child);
 199                                 goto restart;
 200                         }
 201                         spin_unlock(&child->d_lock);
 202                 }
 203                 spin_unlock(&dentry->d_lock);
 204         }
 205         spin_unlock(&dir->i_lock);
 206
 207         EXIT;
 208 }
 209
 210 int ll_test_inode_by_fid(struct inode *inode, void *opaque)
 211 {
 212         return lu_fid_eq(&ll_i2info(inode)->lli_fid, opaque);
 213 }
 214
 215 static int ll_dom_lock_cancel(struct inode *inode, struct ldlm_lock *lock)
 216 {
 217         struct lu_env *env;
 218         struct ll_inode_info *lli = ll_i2info(inode);
 219         __u16 refcheck;
 220         int rc;
 221         ENTRY;
 222
 223         env = cl_env_get(&refcheck);
 224         if (IS_ERR(env))
 225                 RETURN(PTR_ERR(env));
 226
 227         OBD_FAIL_TIMEOUT(OBD_FAIL_LDLM_REPLAY_PAUSE, cfs_fail_val);
 228
 229         /* reach MDC layer to flush data under  the DoM ldlm lock */
 230         rc = cl_object_flush(env, lli->lli_clob, lock);
 231         if (rc == -ENODATA) {
 232                 CDEBUG(D_INODE, "inode "DFID" layout has no DoM stripe\n",
 233                        PFID(ll_inode2fid(inode)));
 234                 /* most likely result of layout change, do nothing */
 235                 rc = 0;
 236         }
 237
 238         cl_env_put(env, &refcheck);
 239         RETURN(rc);
 240 }
 241
 242 static void ll_lock_cancel_bits(struct ldlm_lock *lock, __u64 to_cancel)
 243 {
 244         struct inode *inode = ll_inode_from_resource_lock(lock);
 245         struct ll_inode_info *lli;
 246         __u64 bits = to_cancel;
 247         int rc;
 248
 249         ENTRY;
 250
 251         if (!inode) {
 252                 /* That means the inode is evicted most likely and may cause
 253                  * the skipping of lock cleanups below, so print the message
 254                  * about that in log.
 255                  */
 256                 if (lock->l_resource->lr_lvb_inode)
 257                         LDLM_DEBUG(lock,
 258                                    "can't take inode for the lock (%sevicted)",
 259                                    lock->l_resource->lr_lvb_inode->i_state &
 260                                    I_FREEING ? "" : "not ");
 261                 RETURN_EXIT;
 262         }
 263
 264         if (!fid_res_name_eq(ll_inode2fid(inode),
 265                              &lock->l_resource->lr_name)) {
 266                 LDLM_ERROR(lock, "data mismatch with object "DFID"(%p)",
 267                            PFID(ll_inode2fid(inode)), inode);
 268                 LBUG();
 269         }
 270
 271         if (bits & MDS_INODELOCK_XATTR) {
 272                 ll_xattr_cache_empty(inode);
 273                 bits &= ~MDS_INODELOCK_XATTR;
 274         }
 275
 276         /* For OPEN locks we differentiate between lock modes
 277          * LCK_CR, LCK_CW, LCK_PR - bug 22891 */
 278         if (bits & MDS_INODELOCK_OPEN)
 279                 ll_have_md_lock(lock->l_conn_export, inode, &bits,
 280                                 lock->l_req_mode);
 281
 282         if (bits & MDS_INODELOCK_OPEN) {
 283                 fmode_t fmode;
 284
 285                 switch (lock->l_req_mode) {
 286                 case LCK_CW:
 287                         fmode = FMODE_WRITE;
 288                         break;
 289                 case LCK_PR:
 290                         fmode = FMODE_EXEC;
 291                         break;
 292                 case LCK_CR:
 293                         fmode = FMODE_READ;
 294                         break;
 295                 default:
 296                         LDLM_ERROR(lock, "bad lock mode for OPEN lock");
 297                         LBUG();
 298                 }
 299
 300                 ll_md_real_close(inode, fmode);
 301
 302                 bits &= ~MDS_INODELOCK_OPEN;
 303         }
 304
 305         if (bits & (MDS_INODELOCK_LOOKUP | MDS_INODELOCK_UPDATE |
 306                     MDS_INODELOCK_LAYOUT | MDS_INODELOCK_PERM |
 307                     MDS_INODELOCK_DOM))
 308                 ll_have_md_lock(lock->l_conn_export, inode, &bits, LCK_MINMODE);
 309
 310         if (bits & MDS_INODELOCK_DOM) {
 311                 rc =  ll_dom_lock_cancel(inode, lock);
 312                 if (rc < 0)
 313                         CDEBUG(D_INODE, "cannot flush DoM data "
 314                                DFID": rc = %d\n",
 315                                PFID(ll_inode2fid(inode)), rc);
 316         }
 317
 318         if (bits & MDS_INODELOCK_LAYOUT) {
 319                 struct cl_object_conf conf = {
 320                         .coc_opc = OBJECT_CONF_INVALIDATE,
 321                         .coc_inode = inode,
 322                 };
 323
 324                 rc = ll_layout_conf(inode, &conf);
 325                 if (rc < 0)
 326                         CDEBUG(D_INODE, "cannot invalidate layout of "
 327                                DFID": rc = %d\n",
 328                                PFID(ll_inode2fid(inode)), rc);
 329         }
 330
 331         lli = ll_i2info(inode);
 332
 333         if (bits & MDS_INODELOCK_UPDATE)
 334                 set_bit(LLIF_UPDATE_ATIME, &lli->lli_flags);
 335
 336         if ((bits & MDS_INODELOCK_UPDATE) && S_ISDIR(inode->i_mode)) {
 337                 CDEBUG(D_INODE, "invalidating inode "DFID" lli = %p, "
 338                        "pfid  = "DFID"\n", PFID(ll_inode2fid(inode)),
 339                        lli, PFID(&lli->lli_pfid));
 340                 truncate_inode_pages(inode->i_mapping, 0);
 341
 342                 if (unlikely(!fid_is_zero(&lli->lli_pfid))) {
 343                         struct inode *master_inode = NULL;
 344                         unsigned long hash;
 345
 346                         /* This is slave inode, since all of the child dentry
 347                          * is connected on the master inode, so we have to
 348                          * invalidate the negative children on master inode */
 349                         CDEBUG(D_INODE, "Invalidate s"DFID" m"DFID"\n",
 350                                PFID(ll_inode2fid(inode)), PFID(&lli->lli_pfid));
 351
 352                         hash = cl_fid_build_ino(&lli->lli_pfid,
 353                                         ll_need_32bit_api(ll_i2sbi(inode)));
 354
 355                         /* Do not lookup the inode with ilookup5, otherwise
 356                          * it will cause dead lock,
 357                          * 1. Client1 send chmod req to the MDT0, then on MDT0,
 358                          * it enqueues master and all of its slaves lock,
 359                          * (mdt_attr_set() -> mdt_lock_slaves()), after gets
 360                          * master and stripe0 lock, it will send the enqueue
 361                          * req (for stripe1) to MDT1, then MDT1 finds the lock
 362                          * has been granted to client2. Then MDT1 sends blocking
 363                          * ast to client2.
 364                          * 2. At the same time, client2 tries to unlink
 365                          * the striped dir (rm -rf striped_dir), and during
 366                          * lookup, it will hold the master inode of the striped
 367                          * directory, whose inode state is NEW, then tries to
 368                          * revalidate all of its slaves, (ll_prep_inode()->
 369                          * ll_iget()->ll_read_inode2()-> ll_update_inode().).
 370                          * And it will be blocked on the server side because
 371                          * of 1.
 372                          * 3. Then the client get the blocking_ast req, cancel
 373                          * the lock, but being blocked if using ->ilookup5()),
 374                          * because master inode state is NEW. */
 375                         master_inode = ilookup5_nowait(inode->i_sb, hash,
 376                                                         ll_test_inode_by_fid,
 377                                                         (void *)&lli->lli_pfid);
 378                         if (master_inode) {
 379                                 ll_prune_negative_children(master_inode);
 380                                 iput(master_inode);
 381                         }
 382                 } else {
 383                         ll_prune_negative_children(inode);
 384                 }
 385         }
 386
 387         /* at umount s_root becomes NULL */
 388         if ((bits & (MDS_INODELOCK_LOOKUP | MDS_INODELOCK_PERM)) &&
 389             inode->i_sb->s_root && !is_root_inode(inode))
 390                 ll_prune_aliases(inode);
 391
 392         if (bits & (MDS_INODELOCK_LOOKUP | MDS_INODELOCK_PERM))
 393                 forget_all_cached_acls(inode);
 394
 395         iput(inode);
 396         RETURN_EXIT;
 397 }
 398
 399 /* Check if the given lock may be downgraded instead of canceling and
 400  * that convert is really needed. */
 401 int ll_md_need_convert(struct ldlm_lock *lock)
 402 {
 403         struct ldlm_namespace *ns = ldlm_lock_to_ns(lock);
 404         struct inode *inode;
 405         __u64 wanted = lock->l_policy_data.l_inodebits.cancel_bits;
 406         __u64 bits = lock->l_policy_data.l_inodebits.bits & ~wanted;
 407         enum ldlm_mode mode = LCK_MINMODE;
 408
 409         if (!lock->l_conn_export ||
 410             !exp_connect_lock_convert(lock->l_conn_export))
 411                 return 0;
 412
 413         if (!wanted || !bits || ldlm_is_cancel(lock))
 414                 return 0;
 415
 416         /* do not convert locks other than DOM for now */
 417         if (!((bits | wanted) & MDS_INODELOCK_DOM))
 418                 return 0;
 419
 420         /* We may have already remaining bits in some other lock so
 421          * lock convert will leave us just extra lock for the same bit.
 422          * Check if client has other lock with the same bits and the same
 423          * or lower mode and don't convert if any.
 424          */
 425         switch (lock->l_req_mode) {
 426         case LCK_PR:
 427                 mode = LCK_PR;
 428                 fallthrough;
 429         case LCK_PW:
 430                 mode |= LCK_CR;
 431                 break;
 432         case LCK_CW:
 433                 mode = LCK_CW;
 434                 fallthrough;
 435         case LCK_CR:
 436                 mode |= LCK_CR;
 437                 break;
 438         default:
 439                 /* do not convert other modes */
 440                 return 0;
 441         }
 442
 443         /* is lock is too old to be converted? */
 444         lock_res_and_lock(lock);
 445         if (ktime_after(ktime_get(),
 446                         ktime_add(lock->l_last_used, ns->ns_dirty_age_limit))) {
 447                 unlock_res_and_lock(lock);
 448                 return 0;
 449         }
 450         unlock_res_and_lock(lock);
 451
 452         inode = ll_inode_from_resource_lock(lock);
 453         ll_have_md_lock(lock->l_conn_export, inode, &bits, mode);
 454         iput(inode);
 455         return !!(bits);
 456 }
 457
 458 int ll_md_blocking_ast(struct ldlm_lock *lock, struct ldlm_lock_desc *ld,
 459                        void *data, int flag)
 460 {
 461         struct lustre_handle lockh;
 462         int rc;
 463
 464         ENTRY;
 465
 466         switch (flag) {
 467         case LDLM_CB_BLOCKING:
 468         {
 469                 __u64 cancel_flags = LCF_ASYNC;
 470
 471                 /* if lock convert is not needed then still have to
 472                  * pass lock via ldlm_cli_convert() to keep all states
 473                  * correct, set cancel_bits to full lock bits to cause
 474                  * full cancel to happen.
 475                  */
 476                 if (!ll_md_need_convert(lock)) {
 477                         lock_res_and_lock(lock);
 478                         lock->l_policy_data.l_inodebits.cancel_bits =
 479                                         lock->l_policy_data.l_inodebits.bits;
 480                         unlock_res_and_lock(lock);
 481                 }
 482                 rc = ldlm_cli_convert(lock, cancel_flags);
 483                 if (!rc)
 484                         RETURN(0);
 485                 /* continue with cancel otherwise */
 486                 ldlm_lock2handle(lock, &lockh);
 487                 rc = ldlm_cli_cancel(&lockh, cancel_flags);
 488                 if (rc < 0) {
 489                         CDEBUG(D_INODE, "ldlm_cli_cancel: rc = %d\n", rc);
 490                         RETURN(rc);
 491                 }
 492                 break;
 493         }
 494         case LDLM_CB_CANCELING:
 495         {
 496                 __u64 to_cancel = lock->l_policy_data.l_inodebits.bits;
 497
 498                 /* Nothing to do for non-granted locks */
 499                 if (!ldlm_is_granted(lock))
 500                         break;
 501
 502                 /* If 'ld' is supplied then bits to be cancelled are passed
 503                  * implicitly by lock converting and cancel_bits from 'ld'
 504                  * should be used. Otherwise full cancel is being performed
 505                  * and lock inodebits are used.
 506                  *
 507                  * Note: we cannot rely on cancel_bits in lock itself at this
 508                  * moment because they can be changed by concurrent thread,
 509                  * so ldlm_cli_inodebits_convert() pass cancel bits implicitly
 510                  * in 'ld' parameter.
 511                  */
 512                 if (ld) {
 513                         /* partial bits cancel allowed only during convert */
 514                         LASSERT(ldlm_is_converting(lock));
 515                         /* mask cancel bits by lock bits so only no any unused
 516                          * bits are passed to ll_lock_cancel_bits()
 517                          */
 518                         to_cancel &= ld->l_policy_data.l_inodebits.cancel_bits;
 519                 }
 520                 ll_lock_cancel_bits(lock, to_cancel);
 521                 break;
 522         }
 523         default:
 524                 LBUG();
 525         }
 526
 527         RETURN(0);
 528 }
 529
 530 __u32 ll_i2suppgid(struct inode *i)
 531 {
 532         if (in_group_p(i->i_gid))
 533                 return (__u32)from_kgid(&init_user_ns, i->i_gid);
 534         else
 535                 return (__u32) __kgid_val(INVALID_GID);
 536 }
 537
 538 /* Pack the required supplementary groups into the supplied groups array. */
 539 void ll_i2gids(__u32 *suppgids, struct inode *i1, struct inode *i2)
 540 {
 541         LASSERT(i1 != NULL);
 542         LASSERT(suppgids != NULL);
 543
 544         suppgids[0] = ll_i2suppgid(i1);
 545
 546         if (i2)
 547                 suppgids[1] = ll_i2suppgid(i2);
 548         else
 549                 suppgids[1] = -1;
 550 }
 551
 552 /*
 553  * try to reuse three types of dentry:
 554  * 1. unhashed alias, this one is unhashed by d_invalidate (but it may be valid
 555  *    by concurrent .revalidate).
 556  * 2. INVALID alias (common case for no valid ldlm lock held, but this flag may
 557  *    be cleared by others calling d_lustre_revalidate).
 558  * 3. DISCONNECTED alias.
 559  */
 560 static struct dentry *ll_find_alias(struct inode *inode, struct dentry *dentry)
 561 {
 562         struct dentry *alias, *discon_alias, *invalid_alias;
 563
 564         if (hlist_empty(&inode->i_dentry))
 565                 return NULL;
 566
 567         discon_alias = invalid_alias = NULL;
 568
 569         spin_lock(&inode->i_lock);
 570         hlist_for_each_entry(alias, &inode->i_dentry, d_alias) {
 571                 LASSERT(alias != dentry);
 572
 573                 spin_lock(&alias->d_lock);
 574                 if ((alias->d_flags & DCACHE_DISCONNECTED) &&
 575                     S_ISDIR(inode->i_mode))
 576                         /* LASSERT(last_discon == NULL); LU-405, bz 20055 */
 577                         discon_alias = alias;
 578                 else if (alias->d_parent == dentry->d_parent             &&
 579                          alias->d_name.hash == dentry->d_name.hash       &&
 580                          alias->d_name.len == dentry->d_name.len         &&
 581                          memcmp(alias->d_name.name, dentry->d_name.name,
 582                                 dentry->d_name.len) == 0)
 583                         invalid_alias = alias;
 584                 spin_unlock(&alias->d_lock);
 585
 586                 if (invalid_alias)
 587                         break;
 588         }
 589         alias = invalid_alias ?: discon_alias ?: NULL;
 590         if (alias) {
 591                 spin_lock(&alias->d_lock);
 592                 dget_dlock(alias);
 593                 spin_unlock(&alias->d_lock);
 594         }
 595         spin_unlock(&inode->i_lock);
 596
 597         return alias;
 598 }
 599
 600 /*
 601  * Similar to d_splice_alias(), but lustre treats invalid alias
 602  * similar to DCACHE_DISCONNECTED, and tries to use it anyway.
 603  */
 604 struct dentry *ll_splice_alias(struct inode *inode, struct dentry *de)
 605 {
 606         struct dentry *new;
 607
 608         if (inode) {
 609                 new = ll_find_alias(inode, de);
 610                 if (new) {
 611                         if (!ll_d_setup(new, true))
 612                                 return ERR_PTR(-ENOMEM);
 613                         d_move(new, de);
 614                         iput(inode);
 615                         CDEBUG(D_DENTRY,
 616                                "Reuse dentry %p inode %p refc %d flags %#x\n",
 617                               new, new->d_inode, ll_d_count(new), new->d_flags);
 618                         return new;
 619                 }
 620         }
 621         if (!ll_d_setup(de, false))
 622                 return ERR_PTR(-ENOMEM);
 623         d_add(de, inode);
 624
 625         /* this needs only to be done for foreign symlink dirs as
 626          * DCACHE_SYMLINK_TYPE is already set by d_flags_for_inode()
 627          * kernel routine for files with symlink ops (ie, real symlink)
 628          */
 629         if (inode && S_ISDIR(inode->i_mode) &&
 630             ll_sbi_has_foreign_symlink(ll_i2sbi(inode)) &&
 631 #ifdef HAVE_IOP_GET_LINK
 632             inode->i_op->get_link) {
 633 #else
 634             inode->i_op->follow_link) {
 635 #endif
 636                 CDEBUG(D_INFO, "%s: inode "DFID": faking foreign dir as a symlink\n",
 637                        ll_i2sbi(inode)->ll_fsname, PFID(ll_inode2fid(inode)));
 638                 spin_lock(&de->d_lock);
 639                 /* like d_flags_for_inode() already does for files */
 640                 de->d_flags = (de->d_flags & ~DCACHE_ENTRY_TYPE) |
 641                               DCACHE_SYMLINK_TYPE;
 642                 spin_unlock(&de->d_lock);
 643         }
 644
 645         CDEBUG(D_DENTRY, "Add dentry %p inode %p refc %d flags %#x\n",
 646                de, de->d_inode, ll_d_count(de), de->d_flags);
 647         return de;
 648 }
 649
 650 static int ll_lookup_it_finish(struct ptlrpc_request *request,
 651                                struct lookup_intent *it,
 652                                struct inode *parent, struct dentry **de,
 653                                void *secctx, __u32 secctxlen,
 654                                void *encctx, __u32 encctxlen,
 655                                ktime_t kstart, bool encrypt)
 656 {
 657         struct inode             *inode = NULL;
 658         __u64                     bits = 0;
 659         int                       rc;
 660         struct dentry *alias;
 661         ENTRY;
 662
 663         /* NB 1 request reference will be taken away by ll_intent_lock()
 664          * when I return */
 665         CDEBUG(D_DENTRY, "it %p it_disposition %x\n", it,
 666                it->it_disposition);
 667         if (!it_disposition(it, DISP_LOOKUP_NEG)) {
 668                 struct req_capsule *pill = &request->rq_pill;
 669                 struct mdt_body *body = req_capsule_server_get(pill,
 670                                                                &RMF_MDT_BODY);
 671
 672                 rc = ll_prep_inode(&inode, &request->rq_pill, (*de)->d_sb, it);
 673                 if (rc)
 674                         RETURN(rc);
 675
 676                 /* If encryption context was returned by MDT, put it in
 677                  * inode now to save an extra getxattr and avoid deadlock.
 678                  */
 679                 if (body->mbo_valid & OBD_MD_ENCCTX) {
 680                         encctx = req_capsule_server_get(pill, &RMF_FILE_ENCCTX);
 681                         encctxlen = req_capsule_get_size(pill,
 682                                                          &RMF_FILE_ENCCTX,
 683                                                          RCL_SERVER);
 684
 685                         if (encctxlen) {
 686                                 CDEBUG(D_SEC,
 687                                        "server returned encryption ctx for "DFID"\n",
 688                                        PFID(ll_inode2fid(inode)));
 689                                 rc = ll_xattr_cache_insert(inode,
 690                                                            xattr_for_enc(inode),
 691                                                            encctx, encctxlen);
 692                                 if (rc)
 693                                         CWARN("%s: cannot set enc ctx for "DFID": rc = %d\n",
 694                                               ll_i2sbi(inode)->ll_fsname,
 695                                               PFID(ll_inode2fid(inode)), rc);
 696                                 else if (encrypt) {
 697                                         rc = llcrypt_prepare_readdir(inode);
 698                                         if (rc)
 699                                                 CDEBUG(D_SEC,
 700                                                  "cannot get enc info for "DFID": rc = %d\n",
 701                                                  PFID(ll_inode2fid(inode)), rc);
 702                                 }
 703                         }
 704                 }
 705
 706                 ll_set_lock_data(ll_i2sbi(parent)->ll_md_exp, inode, it, &bits);
 707                 /* OPEN can return data if lock has DoM+LAYOUT bits set */
 708                 if (it->it_op & IT_OPEN &&
 709                     bits & MDS_INODELOCK_DOM && bits & MDS_INODELOCK_LAYOUT)
 710                         ll_dom_finish_open(inode, request);
 711
 712                 /* We used to query real size from OSTs here, but actually
 713                  * this is not needed. For stat() calls size would be updated
 714                  * from subsequent do_revalidate()->ll_inode_revalidate_it() in
 715                  * 2.4 and
 716                  * vfs_getattr_it->ll_getattr()->ll_inode_revalidate_it() in 2.6
 717                  * Everybody else who needs correct file size would call
 718                  * ll_glimpse_size or some equivalent themselves anyway.
 719                  * Also see bug 7198.
 720                  */
 721
 722                 /* If security context was returned by MDT, put it in
 723                  * inode now to save an extra getxattr from security hooks,
 724                  * and avoid deadlock.
 725                  */
 726                 if (body->mbo_valid & OBD_MD_SECCTX) {
 727                         secctx = req_capsule_server_get(pill, &RMF_FILE_SECCTX);
 728                         secctxlen = req_capsule_get_size(pill,
 729                                                            &RMF_FILE_SECCTX,
 730                                                            RCL_SERVER);
 731
 732                         if (secctxlen)
 733                                 CDEBUG(D_SEC, "server returned security context"
 734                                        " for "DFID"\n",
 735                                        PFID(ll_inode2fid(inode)));
 736                 }
 737
 738                 /* resume normally on error */
 739                 ll_inode_notifysecctx(inode, secctx, secctxlen);
 740         }
 741
 742         /* Only hash *de if it is unhashed (new dentry).
 743          * Atoimc_open may passin hashed dentries for open.
 744          */
 745         alias = ll_splice_alias(inode, *de);
 746         if (IS_ERR(alias))
 747                 GOTO(out, rc = PTR_ERR(alias));
 748
 749         *de = alias;
 750
 751         if (!it_disposition(it, DISP_LOOKUP_NEG)) {
 752                 /* We have the "lookup" lock, so unhide dentry */
 753                 if (bits & MDS_INODELOCK_LOOKUP) {
 754                         d_lustre_revalidate(*de);
 755                         ll_update_dir_depth(parent, (*de)->d_inode);
 756                 }
 757
 758                 if (encrypt) {
 759                         rc = llcrypt_prepare_readdir(inode);
 760                         if (rc)
 761                                 GOTO(out, rc);
 762                         if (!llcrypt_has_encryption_key(inode))
 763                                 GOTO(out, rc = -ENOKEY);
 764                 }
 765         } else if (!it_disposition(it, DISP_OPEN_CREATE)) {
 766                 /*
 767                  * If file was created on the server, the dentry is revalidated
 768                  * in ll_create_it if the lock allows for it.
 769                  */
 770                 /* Check that parent has UPDATE lock. */
 771                 struct lookup_intent parent_it = {
 772                                         .it_op = IT_GETATTR,
 773                                         .it_lock_handle = 0 };
 774                 struct ll_inode_info *lli = ll_i2info(parent);
 775                 struct lu_fid fid = lli->lli_fid;
 776
 777                 /* If it is striped directory, get the real stripe parent */
 778                 if (unlikely(ll_dir_striped(parent))) {
 779                         down_read(&lli->lli_lsm_sem);
 780                         rc = md_get_fid_from_lsm(ll_i2mdexp(parent),
 781                                                  lli->lli_lsm_md,
 782                                                  (*de)->d_name.name,
 783                                                  (*de)->d_name.len, &fid);
 784                         up_read(&lli->lli_lsm_sem);
 785                         if (rc != 0)
 786                                 GOTO(out, rc);
 787                 }
 788
 789                 if (md_revalidate_lock(ll_i2mdexp(parent), &parent_it, &fid,
 790                                        NULL)) {
 791                         d_lustre_revalidate(*de);
 792                         ll_intent_release(&parent_it);
 793                 }
 794         }
 795
 796         if (it_disposition(it, DISP_OPEN_CREATE)) {
 797                 ll_stats_ops_tally(ll_i2sbi(parent), LPROC_LL_MKNOD,
 798                                    ktime_us_delta(ktime_get(), kstart));
 799         }
 800
 801         GOTO(out, rc = 0);
 802
 803 out:
 804         if (rc != 0 && it->it_op & IT_OPEN) {
 805                 ll_intent_drop_lock(it);
 806                 ll_open_cleanup((*de)->d_sb, &request->rq_pill);
 807         }
 808
 809         return rc;
 810 }
 811
 812 static struct dentry *ll_lookup_it(struct inode *parent, struct dentry *dentry,
 813                                    struct lookup_intent *it,
 814                                    void **secctx, __u32 *secctxlen,
 815                                    struct pcc_create_attach *pca,
 816                                    bool encrypt,
 817                                    void **encctx, __u32 *encctxlen)
 818 {
 819         ktime_t kstart = ktime_get();
 820         struct lookup_intent lookup_it = { .it_op = IT_LOOKUP };
 821         struct dentry *save = dentry, *retval;
 822         struct ptlrpc_request *req = NULL;
 823         struct md_op_data *op_data = NULL;
 824         struct lov_user_md *lum = NULL;
 825         struct ll_sb_info *sbi = ll_i2sbi(parent);
 826         __u32 opc;
 827         int rc;
 828         struct llcrypt_name fname;
 829         struct lu_fid fid;
 830         ENTRY;
 831
 832         if (dentry->d_name.len > sbi->ll_namelen)
 833                 RETURN(ERR_PTR(-ENAMETOOLONG));
 834
 835         CDEBUG(D_VFSTRACE, "VFS Op:name=%pd, dir="DFID"(%p), intent=%s\n",
 836                dentry, PFID(ll_inode2fid(parent)), parent, LL_IT2STR(it));
 837
 838         if (d_mountpoint(dentry))
 839                 CERROR("Tell Peter, lookup on mtpt, it %s\n", LL_IT2STR(it));
 840
 841         if (it == NULL || it->it_op == IT_GETXATTR)
 842                 it = &lookup_it;
 843
 844         if (it->it_op == IT_GETATTR && dentry_may_statahead(parent, dentry)) {
 845                 rc = ll_revalidate_statahead(parent, &dentry, 0);
 846                 if (rc == 1)
 847                         RETURN(dentry == save ? NULL : dentry);
 848         }
 849
 850         if (it->it_op & IT_OPEN && it->it_flags & FMODE_WRITE &&
 851             dentry->d_sb->s_flags & SB_RDONLY)
 852                 RETURN(ERR_PTR(-EROFS));
 853
 854         if (it->it_op & IT_CREAT)
 855                 opc = LUSTRE_OPC_CREATE;
 856         else
 857                 opc = LUSTRE_OPC_LOOKUP;
 858
 859         rc = ll_prepare_lookup(parent, dentry, &fname, &fid);
 860         if (rc)
 861                 RETURN(rc != -ENOENT ? ERR_PTR(rc) : NULL);
 862
 863         op_data = ll_prep_md_op_data(NULL, parent, NULL, fname.disk_name.name,
 864                                      fname.disk_name.len, 0, opc, NULL);
 865         if (IS_ERR(op_data)) {
 866                 llcrypt_free_filename(&fname);
 867                 RETURN(ERR_CAST(op_data));
 868         }
 869         if (!fid_is_zero(&fid)) {
 870                 op_data->op_fid2 = fid;
 871                 op_data->op_bias = MDS_FID_OP;
 872                 if (it->it_op & IT_OPEN)
 873                         it->it_flags |= MDS_OPEN_BY_FID;
 874         }
 875
 876         /* enforce umask if acl disabled or MDS doesn't support umask */
 877         if (!IS_POSIXACL(parent) || !exp_connect_umask(ll_i2mdexp(parent)))
 878                 it->it_create_mode &= ~current_umask();
 879
 880         if (it->it_op & IT_CREAT &&
 881             test_bit(LL_SBI_FILE_SECCTX, sbi->ll_flags)) {
 882                 rc = ll_dentry_init_security(dentry, it->it_create_mode,
 883                                              &dentry->d_name,
 884                                              &op_data->op_file_secctx_name,
 885                                              &op_data->op_file_secctx_name_size,
 886                                              &op_data->op_file_secctx,
 887                                              &op_data->op_file_secctx_size);
 888                 if (rc < 0)
 889                         GOTO(out, retval = ERR_PTR(rc));
 890                 if (secctx != NULL)
 891                         *secctx = op_data->op_file_secctx;
 892                 if (secctxlen != NULL)
 893                         *secctxlen = op_data->op_file_secctx_size;
 894         } else {
 895                 if (secctx != NULL)
 896                         *secctx = NULL;
 897                 if (secctxlen != NULL)
 898                         *secctxlen = 0;
 899         }
 900         if (it->it_op & IT_CREAT && encrypt) {
 901                 if (unlikely(filename_is_volatile(dentry->d_name.name,
 902                                                   dentry->d_name.len, NULL))) {
 903                         /* get encryption context from reference file */
 904                         int ctx_size = LLCRYPT_ENC_CTX_SIZE;
 905                         struct lustre_sb_info *lsi;
 906                         struct file *ref_file;
 907                         struct inode *ref_inode;
 908                         void *ctx;
 909
 910                         rc = volatile_ref_file(dentry->d_name.name,
 911                                                dentry->d_name.len,
 912                                                &ref_file);
 913                         if (rc)
 914                                 GOTO(out, retval = ERR_PTR(rc));
 915
 916                         ref_inode = file_inode(ref_file);
 917                         if (!ref_inode) {
 918                                 fput(ref_file);
 919                                 GOTO(inherit, rc = -EINVAL);
 920                         }
 921
 922                         lsi = s2lsi(ref_inode->i_sb);
 923
 924 getctx:
 925                         OBD_ALLOC(ctx, ctx_size);
 926                         if (!ctx)
 927                                 GOTO(out, retval = ERR_PTR(-ENOMEM));
 928
 929 #ifdef CONFIG_LL_ENCRYPTION
 930                         rc = lsi->lsi_cop->get_context(ref_inode,
 931                                                        ctx, ctx_size);
 932 #elif defined(HAVE_LUSTRE_CRYPTO)
 933                         rc = ref_inode->i_sb->s_cop->get_context(ref_inode,
 934                                                                  ctx, ctx_size);
 935 #else
 936                         rc = -ENODATA;
 937 #endif
 938                         if (rc == -ERANGE) {
 939                                 OBD_FREE(ctx, ctx_size);
 940                                 ctx_size *= 2;
 941                                 goto getctx;
 942                         }
 943                         fput(ref_file);
 944                         if (rc < 0) {
 945                                 OBD_FREE(ctx, ctx_size);
 946                                 GOTO(inherit, rc);
 947                         }
 948
 949                         op_data->op_file_encctx_size = rc;
 950                         if (rc == ctx_size) {
 951                                 op_data->op_file_encctx = ctx;
 952                         } else {
 953                                 OBD_ALLOC(op_data->op_file_encctx,
 954                                           op_data->op_file_encctx_size);
 955                                 if (!op_data->op_file_encctx) {
 956                                         OBD_FREE(ctx, ctx_size);
 957                                         GOTO(out, retval = ERR_PTR(-ENOMEM));
 958                                 }
 959                                 memcpy(op_data->op_file_encctx, ctx,
 960                                        op_data->op_file_encctx_size);
 961                                 OBD_FREE(ctx, ctx_size);
 962                         }
 963                 } else {
 964 inherit:
 965                         rc = llcrypt_inherit_context(parent, NULL, op_data,
 966                                                      false);
 967                         if (rc)
 968                                 GOTO(out, retval = ERR_PTR(rc));
 969                 }
 970                 if (encctx != NULL)
 971                         *encctx = op_data->op_file_encctx;
 972                 if (encctxlen != NULL)
 973                         *encctxlen = op_data->op_file_encctx_size;
 974         } else {
 975                 if (encctx != NULL)
 976                         *encctx = NULL;
 977                 if (encctxlen != NULL)
 978                         *encctxlen = 0;
 979         }
 980
 981         /* ask for security context upon intent:
 982          * get name of security xattr to request to server
 983          */
 984         if (it->it_op & (IT_LOOKUP | IT_GETATTR | IT_OPEN))
 985                 op_data->op_file_secctx_name_size =
 986                         ll_secctx_name_get(sbi, &op_data->op_file_secctx_name);
 987
 988         if (pca && pca->pca_dataset) {
 989                 OBD_ALLOC_PTR(lum);
 990                 if (lum == NULL)
 991                         GOTO(out, retval = ERR_PTR(-ENOMEM));
 992
 993                 lum->lmm_magic = LOV_USER_MAGIC_V1;
 994                 lum->lmm_pattern = LOV_PATTERN_F_RELEASED | LOV_PATTERN_RAID0;
 995                 op_data->op_data = lum;
 996                 op_data->op_data_size = sizeof(*lum);
 997                 op_data->op_archive_id = pca->pca_dataset->pccd_rwid;
 998                 it->it_flags |= MDS_OPEN_PCC;
 999         }
1000
1001         rc = md_intent_lock(ll_i2mdexp(parent), op_data, it, &req,
1002                             &ll_md_blocking_ast, 0);
1003         /* If the MDS allows the client to chgrp (CFS_SETGRP_PERM), but the
1004          * client does not know which suppgid should be sent to the MDS, or
1005          * some other(s) changed the target file's GID after this RPC sent
1006          * to the MDS with the suppgid as the original GID, then we should
1007          * try again with right suppgid. */
1008         if (rc == -EACCES && it->it_op & IT_OPEN &&
1009             it_disposition(it, DISP_OPEN_DENY)) {
1010                 struct mdt_body *body;
1011
1012                 LASSERT(req != NULL);
1013
1014                 body = req_capsule_server_get(&req->rq_pill, &RMF_MDT_BODY);
1015                 if (op_data->op_suppgids[0] == body->mbo_gid ||
1016                     op_data->op_suppgids[1] == body->mbo_gid ||
1017                     !in_group_p(make_kgid(&init_user_ns, body->mbo_gid)))
1018                         GOTO(out, retval = ERR_PTR(-EACCES));
1019
1020                 fid_zero(&op_data->op_fid2);
1021                 op_data->op_suppgids[1] = body->mbo_gid;
1022                 ptlrpc_req_finished(req);
1023                 req = NULL;
1024                 ll_intent_release(it);
1025                 rc = md_intent_lock(ll_i2mdexp(parent), op_data, it, &req,
1026                                     &ll_md_blocking_ast, 0);
1027         }
1028
1029         if (rc < 0)
1030                 GOTO(out, retval = ERR_PTR(rc));
1031
1032         if (pca && pca->pca_dataset) {
1033                 rc = pcc_inode_create(parent->i_sb, pca->pca_dataset,
1034                                       &op_data->op_fid2,
1035                                       &pca->pca_dentry);
1036                 if (rc)
1037                         GOTO(out, retval = ERR_PTR(rc));
1038         }
1039
1040         /* dir layout may change */
1041         ll_unlock_md_op_lsm(op_data);
1042         rc = ll_lookup_it_finish(req, it, parent, &dentry,
1043                                  secctx != NULL ? *secctx : NULL,
1044                                  secctxlen != NULL ? *secctxlen : 0,
1045                                  encctx != NULL ? *encctx : NULL,
1046                                  encctxlen != NULL ? *encctxlen : 0,
1047                                  kstart, encrypt);
1048         if (rc != 0) {
1049                 ll_intent_release(it);
1050                 GOTO(out, retval = ERR_PTR(rc));
1051         }
1052
1053         if ((it->it_op & IT_OPEN) && dentry->d_inode &&
1054             !S_ISREG(dentry->d_inode->i_mode) &&
1055             !S_ISDIR(dentry->d_inode->i_mode)) {
1056                 ll_release_openhandle(dentry, it);
1057         }
1058         ll_lookup_finish_locks(it, dentry);
1059
1060         GOTO(out, retval = (dentry == save) ? NULL : dentry);
1061
1062 out:
1063         if (op_data != NULL && !IS_ERR(op_data)) {
1064                 if (secctx != NULL && secctxlen != NULL) {
1065                         /* caller needs sec ctx info, so reset it in op_data to
1066                          * prevent it from being freed */
1067                         op_data->op_file_secctx = NULL;
1068                         op_data->op_file_secctx_size = 0;
1069                 }
1070                 if (encctx != NULL && encctxlen != NULL &&
1071                     it->it_op & IT_CREAT && encrypt) {
1072                         /* caller needs enc ctx info, so reset it in op_data to
1073                          * prevent it from being freed
1074                          */
1075                         op_data->op_file_encctx = NULL;
1076                         op_data->op_file_encctx_size = 0;
1077                 }
1078                 llcrypt_free_filename(&fname);
1079                 ll_finish_md_op_data(op_data);
1080         }
1081
1082         if (lum != NULL)
1083                 OBD_FREE_PTR(lum);
1084
1085         ptlrpc_req_finished(req);
1086         return retval;
1087 }
1088
1089 static struct dentry *ll_lookup_nd(struct inode *parent, struct dentry *dentry,
1090                                    unsigned int flags)
1091 {
1092         struct lookup_intent *itp, it = { .it_op = IT_GETATTR };
1093         struct dentry *de;
1094
1095         CDEBUG(D_VFSTRACE, "VFS Op:name=%pd, dir="DFID"(%p), flags=%u\n",
1096                dentry, PFID(ll_inode2fid(parent)), parent, flags);
1097
1098         /*
1099          * Optimize away (CREATE && !OPEN). Let .create handle the race.
1100          * but only if we have write permissions there, otherwise we need
1101          * to proceed with lookup. LU-4185
1102          */
1103         if ((flags & LOOKUP_CREATE) && !(flags & LOOKUP_OPEN) &&
1104             (inode_permission(&init_user_ns,
1105                               parent, MAY_WRITE | MAY_EXEC) == 0))
1106                 return NULL;
1107
1108         if (flags & (LOOKUP_PARENT|LOOKUP_OPEN|LOOKUP_CREATE))
1109                 itp = NULL;
1110         else
1111                 itp = &it;
1112         de = ll_lookup_it(parent, dentry, itp, NULL, NULL, NULL, false,
1113                           NULL, NULL);
1114
1115         if (itp != NULL)
1116                 ll_intent_release(itp);
1117
1118         return de;
1119 }
1120
1121 #ifdef FMODE_CREATED /* added in Linux v4.18-rc1-20-g73a09dd */
1122 # define ll_is_opened(o, f)             ((f)->f_mode & FMODE_OPENED)
1123 # define ll_finish_open(f, d, o)        finish_open((f), (d), NULL)
1124 # define ll_last_arg
1125 # define ll_set_created(o, f)                                           \
1126 do {                                                                    \
1127         (f)->f_mode |= FMODE_CREATED;                                   \
1128 } while (0)
1129
1130 #else
1131 # define ll_is_opened(o, f)             (*(o))
1132 # define ll_finish_open(f, d, o)        finish_open((f), (d), NULL, (o))
1133 # define ll_last_arg                    , int *opened
1134 # define ll_set_created(o, f)                                           \
1135 do {                                                                    \
1136         *(o) |= FILE_CREATED;                                           \
1137 } while (0)
1138
1139 #endif
1140
1141 /*
1142  * For cached negative dentry and new dentry, handle lookup/create/open
1143  * together.
1144  */
1145 static int ll_atomic_open(struct inode *dir, struct dentry *dentry,
1146                           struct file *file, unsigned open_flags,
1147                           umode_t mode ll_last_arg)
1148 {
1149         struct lookup_intent *it;
1150         struct dentry *de;
1151         long long lookup_flags = LOOKUP_OPEN;
1152         void *secctx = NULL;
1153         __u32 secctxlen = 0;
1154         void *encctx = NULL;
1155         __u32 encctxlen = 0;
1156         struct ll_sb_info *sbi = NULL;
1157         struct pcc_create_attach pca = { NULL, NULL };
1158         bool encrypt = false;
1159         int open_threshold;
1160         int rc = 0;
1161
1162         ENTRY;
1163         CDEBUG(D_VFSTRACE,
1164                "VFS Op:name=%pd, dir="DFID"(%p), file %p, open_flags %x, mode %x opened %d\n",
1165                dentry, PFID(ll_inode2fid(dir)), dir, file, open_flags, mode,
1166                ll_is_opened(opened, file));
1167
1168         /* Only negative dentries enter here */
1169         LASSERT(dentry->d_inode == NULL);
1170
1171         if (!d_unhashed(dentry)) {
1172                 /* A valid negative dentry that just passed revalidation,
1173                  * there's little point to try and open it server-side,
1174                  * even though there's a minuscule chance it might succeed.
1175                  * Either way it's a valid race to just return -ENOENT here.
1176                  */
1177                 if (!(open_flags & O_CREAT))
1178                         return -ENOENT;
1179
1180                 /* Otherwise we just unhash it to be rehashed afresh via
1181                  * lookup if necessary
1182                  */
1183                 d_drop(dentry);
1184         }
1185
1186         OBD_ALLOC(it, sizeof(*it));
1187         if (!it)
1188                 RETURN(-ENOMEM);
1189
1190         it->it_op = IT_OPEN;
1191         if (open_flags & O_CREAT) {
1192                 it->it_op |= IT_CREAT;
1193                 lookup_flags |= LOOKUP_CREATE;
1194                 sbi = ll_i2sbi(dir);
1195                 /* Volatile file is used for HSM restore, so do not use PCC */
1196                 if (!filename_is_volatile(dentry->d_name.name,
1197                                           dentry->d_name.len, NULL)) {
1198                         struct pcc_matcher item;
1199                         struct pcc_dataset *dataset;
1200
1201                         item.pm_uid = from_kuid(&init_user_ns, current_uid());
1202                         item.pm_gid = from_kgid(&init_user_ns, current_gid());
1203                         item.pm_projid = ll_i2info(dir)->lli_projid;
1204                         item.pm_name = &dentry->d_name;
1205                         dataset = pcc_dataset_match_get(&sbi->ll_pcc_super,
1206                                                         &item);
1207                         pca.pca_dataset = dataset;
1208                 }
1209         }
1210         it->it_create_mode = (mode & S_IALLUGO) | S_IFREG;
1211         it->it_flags = (open_flags & ~O_ACCMODE) | OPEN_FMODE(open_flags);
1212         it->it_flags &= ~MDS_OPEN_FL_INTERNAL;
1213
1214         if (ll_sbi_has_encrypt(ll_i2sbi(dir)) && IS_ENCRYPTED(dir)) {
1215                 /* in case of create, this is going to be a regular file because
1216                  * we set S_IFREG bit on it->it_create_mode above
1217                  */
1218                 rc = llcrypt_prepare_readdir(dir);
1219                 if (rc)
1220                         GOTO(out_release, rc);
1221                 if (open_flags & O_CREAT) {
1222                         /* For migration or mirroring without enc key, we still
1223                          * need to be able to create a volatile file.
1224                          */
1225                         if (!llcrypt_has_encryption_key(dir) &&
1226                             (!filename_is_volatile(dentry->d_name.name,
1227                                                    dentry->d_name.len, NULL) ||
1228                             (open_flags & O_FILE_ENC) != O_FILE_ENC ||
1229                             !(open_flags & O_DIRECT)))
1230                                 GOTO(out_release, rc = -ENOKEY);
1231                         encrypt = true;
1232                 }
1233         }
1234
1235         OBD_FAIL_TIMEOUT(OBD_FAIL_LLITE_CREATE_FILE_PAUSE2, cfs_fail_val);
1236
1237         /* We can only arrive at this path when we have no inode, so
1238          * we only need to request open lock if it was requested
1239          * for every open
1240          */
1241         if (ll_i2info(dir)->lli_open_thrsh_count != UINT_MAX)
1242                 open_threshold = ll_i2info(dir)->lli_open_thrsh_count;
1243         else
1244                 open_threshold = ll_i2sbi(dir)->ll_oc_thrsh_count;
1245
1246         if (open_threshold == 1 &&
1247             exp_connect_flags2(ll_i2mdexp(dir)) &
1248             OBD_CONNECT2_ATOMIC_OPEN_LOCK)
1249                 it->it_flags |= MDS_OPEN_LOCK;
1250
1251         /* Dentry added to dcache tree in ll_lookup_it */
1252         de = ll_lookup_it(dir, dentry, it, &secctx, &secctxlen, &pca, encrypt,
1253                           &encctx, &encctxlen);
1254         if (IS_ERR(de))
1255                 rc = PTR_ERR(de);
1256         else if (de != NULL)
1257                 dentry = de;
1258
1259         CFS_FAIL_TIMEOUT(OBD_FAIL_LLITE_CREATE_FILE_PAUSE, cfs_fail_val);
1260
1261         if (!rc) {
1262                 if (it_disposition(it, DISP_OPEN_CREATE)) {
1263                         /* Dentry instantiated in ll_create_it. */
1264                         rc = ll_create_it(dir, dentry, it, secctx, secctxlen,
1265                                           encrypt, encctx, encctxlen,
1266                                           open_flags);
1267                         ll_security_release_secctx(secctx, secctxlen);
1268                         llcrypt_free_ctx(encctx, encctxlen);
1269                         if (rc) {
1270                                 /* We dget in ll_splice_alias. */
1271                                 if (de != NULL)
1272                                         dput(de);
1273                                 goto out_release;
1274                         }
1275
1276                         rc = pcc_inode_create_fini(dentry->d_inode, &pca);
1277                         if (rc) {
1278                                 if (de != NULL)
1279                                         dput(de);
1280                                 GOTO(out_release, rc);
1281                         }
1282
1283                         ll_set_created(opened, file);
1284                 } else {
1285                         /* Open the file with O_CREAT, but the file already
1286                          * existed on MDT. This may happend in the case that
1287                          * the LOOKUP ibits lock is revoked and the
1288                          * corresponding dentry cache is deleted.
1289                          * i.e. In the current Lustre, the truncate operation
1290                          * will revoke the LOOKUP ibits lock, and the file
1291                          * dentry cache will be invalidated. The following open
1292                          * with O_CREAT flag will call into ->atomic_open, the
1293                          * file was wrongly though as newly created file and
1294                          * try to auto cache the file. So after client knows it
1295                          * is not a DISP_OPEN_CREATE, it should cleanup the
1296                          * already created PCC copy.
1297                          */
1298                         pcc_create_attach_cleanup(dir->i_sb, &pca);
1299
1300                         if (open_flags & O_CREAT && encrypt &&
1301                             dentry->d_inode) {
1302                                 rc = ll_set_encflags(dentry->d_inode, encctx,
1303                                                      encctxlen, true);
1304                                 llcrypt_free_ctx(encctx, encctxlen);
1305                                 if (rc)
1306                                         GOTO(out_release, rc);
1307                         }
1308                 }
1309
1310                 /* check also if a foreign file is openable */
1311                 if (dentry->d_inode && it_disposition(it, DISP_OPEN_OPEN) &&
1312                     ll_foreign_is_openable(dentry, open_flags)) {
1313                         /* Open dentry. */
1314                         if (S_ISFIFO(dentry->d_inode->i_mode)) {
1315                                 /* We cannot call open here as it might
1316                                  * deadlock. This case is unreachable in
1317                                  * practice because of OBD_CONNECT_NODEVOH. */
1318                                 rc = finish_no_open(file, de);
1319                         } else {
1320                                 file->private_data = it;
1321                                 rc = ll_finish_open(file, dentry, opened);
1322                                 /* We dget in ll_splice_alias. finish_open takes
1323                                  * care of dget for fd open.
1324                                  */
1325                                 if (de != NULL)
1326                                         dput(de);
1327                         }
1328                 } else {
1329                         rc = finish_no_open(file, de);
1330                 }
1331         } else {
1332                 pcc_create_attach_cleanup(dir->i_sb, &pca);
1333         }
1334
1335 out_release:
1336         ll_intent_release(it);
1337         OBD_FREE(it, sizeof(*it));
1338
1339         RETURN(rc);
1340 }
1341
1342 /* We depend on "mode" being set with the proper file type/umask by now */
1343 static struct inode *ll_create_node(struct inode *dir, struct lookup_intent *it)
1344 {
1345         struct inode *inode = NULL;
1346         struct ptlrpc_request *request = NULL;
1347         struct ll_sb_info *sbi = ll_i2sbi(dir);
1348         int rc;
1349         ENTRY;
1350
1351         LASSERT(it && it->it_disposition);
1352
1353         LASSERT(it_disposition(it, DISP_ENQ_CREATE_REF));
1354         request = it->it_request;
1355         it_clear_disposition(it, DISP_ENQ_CREATE_REF);
1356         rc = ll_prep_inode(&inode, &request->rq_pill, dir->i_sb, it);
1357         if (rc)
1358                 GOTO(out, inode = ERR_PTR(rc));
1359
1360         /* Pause to allow for a race with concurrent access by fid */
1361         OBD_FAIL_TIMEOUT(OBD_FAIL_LLITE_CREATE_NODE_PAUSE, cfs_fail_val);
1362
1363         /* We asked for a lock on the directory, but were granted a
1364          * lock on the inode.  Since we finally have an inode pointer,
1365          * stuff it in the lock. */
1366         CDEBUG(D_DLMTRACE, "setting l_ast_data to inode "DFID"(%p)\n",
1367                PFID(ll_inode2fid(inode)), inode);
1368         ll_set_lock_data(sbi->ll_md_exp, inode, it, NULL);
1369         EXIT;
1370  out:
1371         ptlrpc_req_finished(request);
1372         return inode;
1373 }
1374
1375 /*
1376  * By the time this is called, we already have created the directory cache
1377  * entry for the new file, but it is so far negative - it has no inode.
1378  *
1379  * We defer creating the OBD object(s) until open, to keep the intent and
1380  * non-intent code paths similar, and also because we do not have the MDS
1381  * inode number before calling ll_create_node() (which is needed for LOV),
1382  * so we would need to do yet another RPC to the MDS to store the LOV EA
1383  * data on the MDS.  If needed, we would pass the PACKED lmm as data and
1384  * lmm_size in datalen (the MDS still has code which will handle that).
1385  *
1386  * If the create succeeds, we fill in the inode information
1387  * with d_instantiate().
1388  */
1389 static int ll_create_it(struct inode *dir, struct dentry *dentry,
1390                         struct lookup_intent *it,
1391                         void *secctx, __u32 secctxlen, bool encrypt,
1392                         void *encctx, __u32 encctxlen, unsigned int open_flags)
1393 {
1394         struct inode *inode;
1395         __u64 bits = 0;
1396         int rc = 0;
1397         ENTRY;
1398
1399         CDEBUG(D_VFSTRACE, "VFS Op:name=%pd, dir="DFID"(%p), intent=%s\n",
1400                dentry, PFID(ll_inode2fid(dir)), dir, LL_IT2STR(it));
1401
1402         rc = it_open_error(DISP_OPEN_CREATE, it);
1403         if (rc)
1404                 RETURN(rc);
1405
1406         inode = ll_create_node(dir, it);
1407         if (IS_ERR(inode))
1408                 RETURN(PTR_ERR(inode));
1409
1410         /* must be done before d_instantiate, because it calls
1411          * security_d_instantiate, which means a getxattr if security
1412          * context is not set yet
1413          */
1414         rc = ll_inode_notifysecctx(inode, secctx, secctxlen);
1415         if (rc)
1416                 RETURN(rc);
1417
1418         d_instantiate(dentry, inode);
1419
1420         if (encrypt) {
1421                 bool preload = true;
1422
1423                 /* For migration or mirroring without enc key, we
1424                  * create a volatile file without enc context.
1425                  */
1426                 if (!llcrypt_has_encryption_key(dir) &&
1427                     filename_is_volatile(dentry->d_name.name,
1428                                          dentry->d_name.len, NULL) &&
1429                     (open_flags & O_FILE_ENC) == O_FILE_ENC &&
1430                     open_flags & O_DIRECT)
1431                         preload = false;
1432                 rc = ll_set_encflags(inode, encctx, encctxlen, preload);
1433                 if (rc)
1434                         RETURN(rc);
1435         }
1436
1437         if (!test_bit(LL_SBI_FILE_SECCTX, ll_i2sbi(inode)->ll_flags)) {
1438                 rc = ll_inode_init_security(dentry, inode, dir);
1439                 if (rc)
1440                         RETURN(rc);
1441         }
1442
1443         ll_set_lock_data(ll_i2sbi(dir)->ll_md_exp, inode, it, &bits);
1444         if (bits & MDS_INODELOCK_LOOKUP) {
1445                 d_lustre_revalidate(dentry);
1446                 ll_update_dir_depth(dir, inode);
1447         }
1448
1449         RETURN(0);
1450 }
1451
1452 void ll_update_times(struct ptlrpc_request *request, struct inode *inode)
1453 {
1454         struct mdt_body *body = req_capsule_server_get(&request->rq_pill,
1455                                                        &RMF_MDT_BODY);
1456
1457         LASSERT(body);
1458         if (body->mbo_valid & OBD_MD_FLMTIME &&
1459             body->mbo_mtime > inode->i_mtime.tv_sec) {
1460                 CDEBUG(D_INODE,
1461                        "setting fid " DFID " mtime from %lld to %llu\n",
1462                        PFID(ll_inode2fid(inode)),
1463                        (s64)inode->i_mtime.tv_sec, body->mbo_mtime);
1464                 inode->i_mtime.tv_sec = body->mbo_mtime;
1465         }
1466
1467         if (body->mbo_valid & OBD_MD_FLCTIME &&
1468             body->mbo_ctime > inode->i_ctime.tv_sec)
1469                 inode->i_ctime.tv_sec = body->mbo_ctime;
1470 }
1471
1472 /* once default LMV (space balanced) is set on ROOT, it should take effect if
1473  * default LMV is not set on parent directory.
1474  */
1475 static void ll_qos_mkdir_prep(struct md_op_data *op_data, struct inode *dir)
1476 {
1477         struct inode *root = dir->i_sb->s_root->d_inode;
1478         struct ll_inode_info *rlli = ll_i2info(root);
1479         struct ll_inode_info *lli = ll_i2info(dir);
1480         struct lmv_stripe_md *lsm;
1481
1482         op_data->op_dir_depth = lli->lli_inherit_depth ?: lli->lli_dir_depth;
1483
1484         /* parent directory is striped */
1485         if (unlikely(lli->lli_lsm_md))
1486                 return;
1487
1488         /* default LMV set on parent directory */
1489         if (unlikely(lli->lli_default_lsm_md))
1490                 return;
1491
1492         /* parent is ROOT */
1493         if (unlikely(dir == root))
1494                 return;
1495
1496         /* default LMV not set on ROOT */
1497         if (!rlli->lli_default_lsm_md)
1498                 return;
1499
1500         down_read(&rlli->lli_lsm_sem);
1501         lsm = rlli->lli_default_lsm_md;
1502         if (!lsm)
1503                 goto unlock;
1504
1505         /* not space balanced */
1506         if (lsm->lsm_md_master_mdt_index != LMV_OFFSET_DEFAULT)
1507                 goto unlock;
1508
1509         if (lsm->lsm_md_max_inherit != LMV_INHERIT_NONE &&
1510             (lsm->lsm_md_max_inherit == LMV_INHERIT_UNLIMITED ||
1511              lsm->lsm_md_max_inherit >= lli->lli_dir_depth)) {
1512                 op_data->op_flags |= MF_QOS_MKDIR;
1513                 if (lsm->lsm_md_max_inherit_rr != LMV_INHERIT_RR_NONE &&
1514                     (lsm->lsm_md_max_inherit_rr == LMV_INHERIT_RR_UNLIMITED ||
1515                      lsm->lsm_md_max_inherit_rr >= lli->lli_dir_depth))
1516                         op_data->op_flags |= MF_RR_MKDIR;
1517                 CDEBUG(D_INODE, DFID" requests qos mkdir %#x\n",
1518                        PFID(&lli->lli_fid), op_data->op_flags);
1519         }
1520 unlock:
1521         up_read(&rlli->lli_lsm_sem);
1522 }
1523
1524 static int ll_new_node(struct inode *dir, struct dentry *dchild,
1525                        const char *tgt, umode_t mode, __u64 rdev, __u32 opc)
1526 {
1527         struct qstr *name = &dchild->d_name;
1528         struct ptlrpc_request *request = NULL;
1529         struct md_op_data *op_data = NULL;
1530         struct inode *inode = NULL;
1531         struct ll_sb_info *sbi = ll_i2sbi(dir);
1532         struct llcrypt_str *disk_link = NULL;
1533         bool encrypt = false;
1534         int err;
1535
1536         ENTRY;
1537         if (unlikely(tgt != NULL)) {
1538                 disk_link = (struct llcrypt_str *)rdev;
1539                 rdev = 0;
1540                 if (!disk_link)
1541                         RETURN(-EINVAL);
1542         }
1543
1544 again:
1545         op_data = ll_prep_md_op_data(NULL, dir, NULL, name->name,
1546                                      name->len, 0, opc, NULL);
1547         if (IS_ERR(op_data))
1548                 GOTO(err_exit, err = PTR_ERR(op_data));
1549
1550         if (S_ISDIR(mode))
1551                 ll_qos_mkdir_prep(op_data, dir);
1552
1553         if (test_bit(LL_SBI_FILE_SECCTX, sbi->ll_flags)) {
1554                 err = ll_dentry_init_security(dchild, mode, &dchild->d_name,
1555                                               &op_data->op_file_secctx_name,
1556                                               &op_data->op_file_secctx_name_size,
1557                                               &op_data->op_file_secctx,
1558                                               &op_data->op_file_secctx_size);
1559                 if (err < 0)
1560                         GOTO(err_exit, err);
1561         }
1562
1563         if (ll_sbi_has_encrypt(sbi) &&
1564             ((IS_ENCRYPTED(dir) &&
1565             (S_ISREG(mode) || S_ISDIR(mode) || S_ISLNK(mode))) ||
1566              (unlikely(ll_sb_has_test_dummy_encryption(dir->i_sb)) &&
1567               S_ISDIR(mode)))) {
1568                 err = llcrypt_prepare_readdir(dir);
1569                 if (err)
1570                         GOTO(err_exit, err);
1571                 if (!llcrypt_has_encryption_key(dir))
1572                         GOTO(err_exit, err = -ENOKEY);
1573                 encrypt = true;
1574         }
1575
1576         if (encrypt) {
1577                 err = llcrypt_inherit_context(dir, NULL, op_data, false);
1578                 if (err)
1579                         GOTO(err_exit, err);
1580
1581                 if (S_ISLNK(mode)) {
1582                         /* llcrypt needs inode to encrypt target name, so create
1583                          * a fake inode and associate encryption context got
1584                          * from llcrypt_inherit_context.
1585                          */
1586                         struct inode *fakeinode =
1587                                 dchild->d_sb->s_op->alloc_inode(dchild->d_sb);
1588
1589                         if (!fakeinode)
1590                                 GOTO(err_exit, err = -ENOMEM);
1591                         fakeinode->i_sb = dchild->d_sb;
1592                         fakeinode->i_mode |= S_IFLNK;
1593 #ifdef IOP_XATTR
1594                         fakeinode->i_opflags |= IOP_XATTR;
1595 #endif
1596                         ll_lli_init(ll_i2info(fakeinode));
1597                         err = ll_set_encflags(fakeinode,
1598                                               op_data->op_file_encctx,
1599                                               op_data->op_file_encctx_size,
1600                                               true);
1601                         if (!err)
1602                                 err = __llcrypt_encrypt_symlink(fakeinode, tgt,
1603                                                                 strlen(tgt),
1604                                                                 disk_link);
1605
1606                         ll_xattr_cache_destroy(fakeinode);
1607                         llcrypt_put_encryption_info(fakeinode);
1608                         dchild->d_sb->s_op->destroy_inode(fakeinode);
1609                         if (err)
1610                                 GOTO(err_exit, err);
1611                 }
1612         }
1613
1614         err = md_create(sbi->ll_md_exp, op_data, tgt ? disk_link->name : NULL,
1615                         tgt ? disk_link->len : 0, mode,
1616                         from_kuid(&init_user_ns, current_fsuid()),
1617                         from_kgid(&init_user_ns, current_fsgid()),
1618                         current_cap(), rdev, &request);
1619 #if LUSTRE_VERSION_CODE < OBD_OCD_VERSION(2, 17, 58, 0)
1620         /*
1621          * server < 2.12.58 doesn't pack default LMV in intent_getattr reply,
1622          * fetch default LMV here.
1623          */
1624         if (unlikely(err == -EREMOTE)) {
1625                 struct ll_inode_info    *lli = ll_i2info(dir);
1626                 struct lmv_user_md      *lum;
1627                 int                     lumsize;
1628                 int                     err2;
1629
1630                 ptlrpc_req_finished(request);
1631                 request = NULL;
1632                 ll_finish_md_op_data(op_data);
1633                 op_data = NULL;
1634
1635                 err2 = ll_dir_getstripe(dir, (void **)&lum, &lumsize, &request,
1636                                         OBD_MD_DEFAULT_MEA);
1637                 if (err2 == 0) {
1638                         struct lustre_md md = { NULL };
1639
1640                         md.body = req_capsule_server_get(&request->rq_pill,
1641                                                          &RMF_MDT_BODY);
1642                         if (!md.body)
1643                                 GOTO(err_exit, err = -EPROTO);
1644
1645                         OBD_ALLOC_PTR(md.default_lmv);
1646                         if (!md.default_lmv)
1647                                 GOTO(err_exit, err = -ENOMEM);
1648
1649                         md.default_lmv->lsm_md_magic = lum->lum_magic;
1650                         md.default_lmv->lsm_md_stripe_count =
1651                                 lum->lum_stripe_count;
1652                         md.default_lmv->lsm_md_master_mdt_index =
1653                                 lum->lum_stripe_offset;
1654                         md.default_lmv->lsm_md_hash_type = lum->lum_hash_type;
1655                         md.default_lmv->lsm_md_max_inherit =
1656                                 lum->lum_max_inherit;
1657                         md.default_lmv->lsm_md_max_inherit_rr =
1658                                 lum->lum_max_inherit_rr;
1659
1660                         err = ll_update_inode(dir, &md);
1661                         md_free_lustre_md(sbi->ll_md_exp, &md);
1662                         if (err)
1663                                 GOTO(err_exit, err);
1664                 } else if (err2 == -ENODATA && lli->lli_default_lsm_md) {
1665                         /*
1666                          * If there are no default stripe EA on the MDT, but the
1667                          * client has default stripe, then it probably means
1668                          * default stripe EA has just been deleted.
1669                          */
1670                         down_write(&lli->lli_lsm_sem);
1671                         if (lli->lli_default_lsm_md)
1672                                 OBD_FREE_PTR(lli->lli_default_lsm_md);
1673                         lli->lli_default_lsm_md = NULL;
1674                         up_write(&lli->lli_lsm_sem);
1675                 } else {
1676                         GOTO(err_exit, err);
1677                 }
1678
1679                 ptlrpc_req_finished(request);
1680                 request = NULL;
1681                 goto again;
1682         }
1683 #endif
1684
1685         if (err < 0)
1686                 GOTO(err_exit, err);
1687
1688         ll_update_times(request, dir);
1689
1690         CFS_FAIL_TIMEOUT(OBD_FAIL_LLITE_NEWNODE_PAUSE, cfs_fail_val);
1691
1692         err = ll_prep_inode(&inode, &request->rq_pill, dchild->d_sb, NULL);
1693         if (err)
1694                 GOTO(err_exit, err);
1695
1696         /* must be done before d_instantiate, because it calls
1697          * security_d_instantiate, which means a getxattr if security
1698          * context is not set yet
1699          */
1700         err = ll_inode_notifysecctx(inode,
1701                                     op_data->op_file_secctx,
1702                                     op_data->op_file_secctx_size);
1703         if (err)
1704                 GOTO(err_exit, err);
1705
1706         d_instantiate(dchild, inode);
1707
1708         if (encrypt) {
1709                 err = ll_set_encflags(inode, op_data->op_file_encctx,
1710                                       op_data->op_file_encctx_size, true);
1711                 if (err)
1712                         GOTO(err_exit, err);
1713
1714                 if (S_ISLNK(mode)) {
1715                         struct ll_inode_info *lli = ll_i2info(inode);
1716
1717                         /* Cache the plaintext symlink target
1718                          * for later use by get_link()
1719                          */
1720                         OBD_ALLOC(lli->lli_symlink_name, strlen(tgt) + 1);
1721                         /* do not return an error if we cannot
1722                          * cache the symlink locally
1723                          */
1724                         if (lli->lli_symlink_name)
1725                                 memcpy(lli->lli_symlink_name,
1726                                        tgt, strlen(tgt) + 1);
1727                 }
1728         }
1729
1730         if (!test_bit(LL_SBI_FILE_SECCTX, sbi->ll_flags)) {
1731                 err = ll_inode_init_security(dchild, inode, dir);
1732                 if (err)
1733                         GOTO(err_exit, err);
1734         }
1735
1736         EXIT;
1737 err_exit:
1738         if (request != NULL)
1739                 ptlrpc_req_finished(request);
1740
1741         if (!IS_ERR_OR_NULL(op_data))
1742                 ll_finish_md_op_data(op_data);
1743
1744         RETURN(err);
1745 }
1746
1747 static int ll_mknod(struct user_namespace *mnt_userns, struct inode *dir,
1748                     struct dentry *dchild, umode_t mode, dev_t rdev)
1749 {
1750         ktime_t kstart = ktime_get();
1751         int err;
1752         ENTRY;
1753
1754         CDEBUG(D_VFSTRACE, "VFS Op:name=%pd, dir="DFID"(%p) mode %o dev %x\n",
1755                dchild, PFID(ll_inode2fid(dir)), dir, mode, rdev);
1756
1757         if (!IS_POSIXACL(dir) || !exp_connect_umask(ll_i2mdexp(dir)))
1758                 mode &= ~current_umask();
1759
1760         switch (mode & S_IFMT) {
1761         case 0:
1762                 mode |= S_IFREG;
1763                 fallthrough;
1764         case S_IFREG:
1765         case S_IFCHR:
1766         case S_IFBLK:
1767         case S_IFIFO:
1768         case S_IFSOCK:
1769                 err = ll_new_node(dir, dchild, NULL, mode, old_encode_dev(rdev),
1770                                   LUSTRE_OPC_MKNOD);
1771                 break;
1772         case S_IFDIR:
1773                 err = -EPERM;
1774                 break;
1775         default:
1776                 err = -EINVAL;
1777         }
1778
1779         if (!err)
1780                 ll_stats_ops_tally(ll_i2sbi(dir), LPROC_LL_MKNOD,
1781                                    ktime_us_delta(ktime_get(), kstart));
1782
1783         RETURN(err);
1784 }
1785
1786 /*
1787  * Plain create. Intent create is handled in atomic_open.
1788  */
1789 static int ll_create_nd(struct user_namespace *mnt_userns,
1790                         struct inode *dir, struct dentry *dentry,
1791                         umode_t mode, bool want_excl)
1792 {
1793         ktime_t kstart = ktime_get();
1794         int rc;
1795
1796         CFS_FAIL_TIMEOUT(OBD_FAIL_LLITE_CREATE_FILE_PAUSE, cfs_fail_val);
1797
1798         CDEBUG(D_VFSTRACE,
1799                "VFS Op:name=%pd, dir="DFID"(%p), flags=%u, excl=%d\n",
1800                dentry, PFID(ll_inode2fid(dir)), dir, mode, want_excl);
1801
1802         /* Using mknod(2) to create a regular file is designed to not recognize
1803          * volatile file name, so we use ll_mknod() here. */
1804         rc = ll_mknod(mnt_userns, dir, dentry, mode, 0);
1805
1806         CDEBUG(D_VFSTRACE, "VFS Op:name=%pd, unhashed %d\n",
1807                dentry, d_unhashed(dentry));
1808
1809         if (!rc)
1810                 ll_stats_ops_tally(ll_i2sbi(dir), LPROC_LL_CREATE,
1811                                    ktime_us_delta(ktime_get(), kstart));
1812
1813         return rc;
1814 }
1815
1816 static int ll_symlink(struct user_namespace *mnt_userns, struct inode *dir,
1817                       struct dentry *dchild, const char *oldpath)
1818 {
1819         ktime_t kstart = ktime_get();
1820         int len = strlen(oldpath);
1821         struct llcrypt_str disk_link;
1822         int err;
1823         ENTRY;
1824
1825         CDEBUG(D_VFSTRACE, "VFS Op:name=%pd, dir="DFID"(%p), target=%.*s\n",
1826                dchild, PFID(ll_inode2fid(dir)), dir, 3000, oldpath);
1827
1828         err = llcrypt_prepare_symlink(dir, oldpath, len, dir->i_sb->s_blocksize,
1829                                       &disk_link);
1830         if (err)
1831                 RETURN(err);
1832
1833         err = ll_new_node(dir, dchild, oldpath, S_IFLNK | S_IRWXUGO,
1834                           (__u64)&disk_link, LUSTRE_OPC_SYMLINK);
1835
1836         if (disk_link.name != (unsigned char *)oldpath)
1837                 kfree(disk_link.name);
1838
1839         if (!err)
1840                 ll_stats_ops_tally(ll_i2sbi(dir), LPROC_LL_SYMLINK,
1841                                    ktime_us_delta(ktime_get(), kstart));
1842
1843         RETURN(err);
1844 }
1845
1846 static int ll_link(struct dentry *old_dentry, struct inode *dir,
1847                    struct dentry *new_dentry)
1848 {
1849         struct inode *src = old_dentry->d_inode;
1850         struct qstr *name = &new_dentry->d_name;
1851         struct ll_sb_info *sbi = ll_i2sbi(dir);
1852         struct ptlrpc_request *request = NULL;
1853         struct md_op_data *op_data;
1854         ktime_t kstart = ktime_get();
1855         int err;
1856
1857         ENTRY;
1858         CDEBUG(D_VFSTRACE,
1859                "VFS Op: inode="DFID"(%p), dir="DFID"(%p), target=%pd\n",
1860                PFID(ll_inode2fid(src)), src,
1861                PFID(ll_inode2fid(dir)), dir, new_dentry);
1862
1863         err = llcrypt_prepare_link(old_dentry, dir, new_dentry);
1864         if (err)
1865                 RETURN(err);
1866
1867         op_data = ll_prep_md_op_data(NULL, src, dir, name->name, name->len,
1868                                      0, LUSTRE_OPC_ANY, NULL);
1869         if (IS_ERR(op_data))
1870                 RETURN(PTR_ERR(op_data));
1871
1872         err = md_link(sbi->ll_md_exp, op_data, &request);
1873         ll_finish_md_op_data(op_data);
1874         if (err)
1875                 GOTO(out, err);
1876
1877         ll_update_times(request, dir);
1878         ll_stats_ops_tally(sbi, LPROC_LL_LINK,
1879                            ktime_us_delta(ktime_get(), kstart));
1880         EXIT;
1881 out:
1882         ptlrpc_req_finished(request);
1883         RETURN(err);
1884 }
1885
1886 static int ll_mkdir(struct user_namespace *mnt_userns, struct inode *dir,
1887                     struct dentry *dchild, umode_t mode)
1888 {
1889         ktime_t kstart = ktime_get();
1890         int err;
1891         ENTRY;
1892
1893         CDEBUG(D_VFSTRACE, "VFS Op:name=%pd, dir="DFID"(%p)\n",
1894                dchild, PFID(ll_inode2fid(dir)), dir);
1895
1896         if (!IS_POSIXACL(dir) || !exp_connect_umask(ll_i2mdexp(dir)))
1897                 mode &= ~current_umask();
1898
1899         mode = (mode & (S_IRWXUGO|S_ISVTX)) | S_IFDIR;
1900
1901         err = ll_new_node(dir, dchild, NULL, mode, 0, LUSTRE_OPC_MKDIR);
1902         if (err == 0)
1903                 ll_stats_ops_tally(ll_i2sbi(dir), LPROC_LL_MKDIR,
1904                                    ktime_us_delta(ktime_get(), kstart));
1905
1906         RETURN(err);
1907 }
1908
1909 static int ll_rmdir(struct inode *dir, struct dentry *dchild)
1910 {
1911         struct qstr *name = &dchild->d_name;
1912         struct ptlrpc_request *request = NULL;
1913         struct md_op_data *op_data;
1914         ktime_t kstart = ktime_get();
1915         int rc;
1916
1917         ENTRY;
1918
1919         CDEBUG(D_VFSTRACE, "VFS Op:name=%pd, dir="DFID"(%p)\n",
1920                dchild, PFID(ll_inode2fid(dir)), dir);
1921
1922         if (unlikely(d_mountpoint(dchild)))
1923                 RETURN(-EBUSY);
1924
1925         /* some foreign dir may not be allowed to be removed */
1926         if (!ll_foreign_is_removable(dchild, false))
1927                 RETURN(-EPERM);
1928
1929         op_data = ll_prep_md_op_data(NULL, dir, NULL, name->name, name->len,
1930                                      S_IFDIR, LUSTRE_OPC_ANY, NULL);
1931         if (IS_ERR(op_data))
1932                 RETURN(PTR_ERR(op_data));
1933
1934         if (dchild->d_inode != NULL)
1935                 op_data->op_fid3 = *ll_inode2fid(dchild->d_inode);
1936
1937         if (fid_is_zero(&op_data->op_fid2))
1938                 op_data->op_fid2 = op_data->op_fid3;
1939         rc = md_unlink(ll_i2sbi(dir)->ll_md_exp, op_data, &request);
1940         ll_finish_md_op_data(op_data);
1941         if (!rc) {
1942                 struct mdt_body *body;
1943
1944                 ll_update_times(request, dir);
1945                 ll_stats_ops_tally(ll_i2sbi(dir), LPROC_LL_RMDIR,
1946                                    ktime_us_delta(ktime_get(), kstart));
1947
1948                 /*
1949                  * The server puts attributes in on the last unlink, use them
1950                  * to update the link count so the inode can be freed
1951                  * immediately.
1952                  */
1953                 body = req_capsule_server_get(&request->rq_pill, &RMF_MDT_BODY);
1954                 if (body->mbo_valid & OBD_MD_FLNLINK) {
1955                         spin_lock(&dchild->d_inode->i_lock);
1956                         set_nlink(dchild->d_inode, body->mbo_nlink);
1957                         spin_unlock(&dchild->d_inode->i_lock);
1958                 }
1959         }
1960
1961         ptlrpc_req_finished(request);
1962
1963         RETURN(rc);
1964 }
1965
1966 /**
1967  * Remove dir entry
1968  **/
1969 int ll_rmdir_entry(struct inode *dir, char *name, int namelen)
1970 {
1971         struct ptlrpc_request *request = NULL;
1972         struct md_op_data *op_data;
1973         ktime_t kstart = ktime_get();
1974         int rc;
1975         ENTRY;
1976
1977         CDEBUG(D_VFSTRACE, "VFS Op:name=%.*s, dir="DFID"(%p)\n",
1978                namelen, name, PFID(ll_inode2fid(dir)), dir);
1979
1980         op_data = ll_prep_md_op_data(NULL, dir, NULL, name, strlen(name),
1981                                      S_IFDIR, LUSTRE_OPC_ANY, NULL);
1982         if (IS_ERR(op_data))
1983                 RETURN(PTR_ERR(op_data));
1984         op_data->op_cli_flags |= CLI_RM_ENTRY;
1985         rc = md_unlink(ll_i2sbi(dir)->ll_md_exp, op_data, &request);
1986         ll_finish_md_op_data(op_data);
1987         if (!rc)
1988                 ll_update_times(request, dir);
1989
1990         ptlrpc_req_finished(request);
1991         if (!rc)
1992                 ll_stats_ops_tally(ll_i2sbi(dir), LPROC_LL_RMDIR,
1993                                    ktime_us_delta(ktime_get(), kstart));
1994         RETURN(rc);
1995 }
1996
1997 static int ll_unlink(struct inode *dir, struct dentry *dchild)
1998 {
1999         struct qstr *name = &dchild->d_name;
2000         struct ptlrpc_request *request = NULL;
2001         struct md_op_data *op_data;
2002         struct mdt_body *body;
2003         ktime_t kstart = ktime_get();
2004         int rc;
2005
2006         ENTRY;
2007
2008         CDEBUG(D_VFSTRACE, "VFS Op:name=%pd, dir="DFID"(%p)\n",
2009                dchild, PFID(ll_inode2fid(dir)), dir);
2010
2011         /*
2012          * XXX: unlink bind mountpoint maybe call to here,
2013          * just check it as vfs_unlink does.
2014          */
2015         if (unlikely(d_mountpoint(dchild)))
2016                 RETURN(-EBUSY);
2017
2018         /* some foreign file/dir may not be allowed to be unlinked */
2019         if (!ll_foreign_is_removable(dchild, false))
2020                 RETURN(-EPERM);
2021
2022         op_data = ll_prep_md_op_data(NULL, dir, NULL, name->name, name->len, 0,
2023                                      LUSTRE_OPC_ANY, NULL);
2024         if (IS_ERR(op_data))
2025                 RETURN(PTR_ERR(op_data));
2026
2027         op_data->op_fid3 = *ll_inode2fid(dchild->d_inode);
2028         /* notify lower layer if inode has dirty pages */
2029         if (S_ISREG(dchild->d_inode->i_mode) &&
2030             ll_i2info(dchild->d_inode)->lli_clob &&
2031             dirty_cnt(dchild->d_inode))
2032                 op_data->op_cli_flags |= CLI_DIRTY_DATA;
2033         if (fid_is_zero(&op_data->op_fid2))
2034                 op_data->op_fid2 = op_data->op_fid3;
2035         rc = md_unlink(ll_i2sbi(dir)->ll_md_exp, op_data, &request);
2036         ll_finish_md_op_data(op_data);
2037         if (rc)
2038                 GOTO(out, rc);
2039
2040         /*
2041          * The server puts attributes in on the last unlink, use them to update
2042          * the link count so the inode can be freed immediately.
2043          */
2044         body = req_capsule_server_get(&request->rq_pill, &RMF_MDT_BODY);
2045         if (body->mbo_valid & OBD_MD_FLNLINK) {
2046                 spin_lock(&dchild->d_inode->i_lock);
2047                 set_nlink(dchild->d_inode, body->mbo_nlink);
2048                 spin_unlock(&dchild->d_inode->i_lock);
2049         }
2050
2051         ll_update_times(request, dir);
2052
2053 out:
2054         ptlrpc_req_finished(request);
2055         if (!rc)
2056                 ll_stats_ops_tally(ll_i2sbi(dir), LPROC_LL_UNLINK,
2057                                    ktime_us_delta(ktime_get(), kstart));
2058         RETURN(rc);
2059 }
2060
2061 static int ll_rename(struct user_namespace *mnt_userns,
2062                      struct inode *src, struct dentry *src_dchild,
2063                      struct inode *tgt, struct dentry *tgt_dchild
2064 #if defined(HAVE_USER_NAMESPACE_ARG) || defined(HAVE_IOPS_RENAME_WITH_FLAGS)
2065                      , unsigned int flags
2066 #endif
2067                      )
2068 {
2069         struct ptlrpc_request *request = NULL;
2070         struct ll_sb_info *sbi = ll_i2sbi(src);
2071         struct md_op_data *op_data;
2072         ktime_t kstart = ktime_get();
2073         umode_t mode = 0;
2074         struct llcrypt_name foldname, fnewname;
2075         int err;
2076         ENTRY;
2077
2078 #if defined(HAVE_USER_NAMESPACE_ARG) || defined(HAVE_IOPS_RENAME_WITH_FLAGS)
2079         if (flags)
2080                 return -EINVAL;
2081 #endif
2082
2083         CDEBUG(D_VFSTRACE,
2084                "VFS Op:oldname=%pd, src_dir="DFID"(%p), newname=%pd, tgt_dir="DFID"(%p)\n",
2085                src_dchild, PFID(ll_inode2fid(src)), src,
2086                tgt_dchild, PFID(ll_inode2fid(tgt)), tgt);
2087
2088         if (unlikely(d_mountpoint(src_dchild) || d_mountpoint(tgt_dchild)))
2089                 RETURN(-EBUSY);
2090
2091 #if defined(HAVE_USER_NAMESPACE_ARG) || defined(HAVE_IOPS_RENAME_WITH_FLAGS)
2092         err = llcrypt_prepare_rename(src, src_dchild, tgt, tgt_dchild, flags);
2093 #else
2094         err = llcrypt_prepare_rename(src, src_dchild, tgt, tgt_dchild, 0);
2095 #endif
2096         if (err)
2097                 RETURN(err);
2098         /* we prevent an encrypted file from being renamed
2099          * into an unencrypted dir
2100          */
2101         if (IS_ENCRYPTED(src) && !IS_ENCRYPTED(tgt))
2102                 RETURN(-EXDEV);
2103
2104         if (src_dchild->d_inode)
2105                 mode = src_dchild->d_inode->i_mode;
2106
2107         if (tgt_dchild->d_inode)
2108                 mode = tgt_dchild->d_inode->i_mode;
2109
2110         op_data = ll_prep_md_op_data(NULL, src, tgt, NULL, 0, mode,
2111                                      LUSTRE_OPC_ANY, NULL);
2112         if (IS_ERR(op_data))
2113                 RETURN(PTR_ERR(op_data));
2114
2115         /* If the client is using a subdir mount and does a rename to what it
2116          * sees as /.fscrypt, interpret it as the .fscrypt dir at fs root.
2117          */
2118         if (unlikely(is_root_inode(tgt) && !fid_is_root(ll_inode2fid(tgt)) &&
2119                      tgt_dchild->d_name.len == strlen(dot_fscrypt_name) &&
2120                      strncmp(tgt_dchild->d_name.name, dot_fscrypt_name,
2121                              tgt_dchild->d_name.len) == 0))
2122                 lu_root_fid(&op_data->op_fid2);
2123
2124         if (src_dchild->d_inode)
2125                 op_data->op_fid3 = *ll_inode2fid(src_dchild->d_inode);
2126
2127         if (tgt_dchild->d_inode)
2128                 op_data->op_fid4 = *ll_inode2fid(tgt_dchild->d_inode);
2129
2130         err = ll_setup_filename(src, &src_dchild->d_name, 1, &foldname, NULL);
2131         if (err)
2132                 RETURN(err);
2133         err = ll_setup_filename(tgt, &tgt_dchild->d_name, 1, &fnewname, NULL);
2134         if (err) {
2135                 llcrypt_free_filename(&foldname);
2136                 RETURN(err);
2137         }
2138         err = md_rename(sbi->ll_md_exp, op_data,
2139                         foldname.disk_name.name, foldname.disk_name.len,
2140                         fnewname.disk_name.name, fnewname.disk_name.len,
2141                         &request);
2142         llcrypt_free_filename(&foldname);
2143         llcrypt_free_filename(&fnewname);
2144         ll_finish_md_op_data(op_data);
2145         if (!err) {
2146                 ll_update_times(request, src);
2147                 ll_update_times(request, tgt);
2148         }
2149
2150         ptlrpc_req_finished(request);
2151
2152         if (!err) {
2153                 d_move(src_dchild, tgt_dchild);
2154                 ll_stats_ops_tally(sbi, LPROC_LL_RENAME,
2155                                    ktime_us_delta(ktime_get(), kstart));
2156         }
2157
2158         RETURN(err);
2159 }
2160
2161 const struct inode_operations ll_dir_inode_operations = {
2162         .mknod          = ll_mknod,
2163         .atomic_open    = ll_atomic_open,
2164         .lookup         = ll_lookup_nd,
2165         .create         = ll_create_nd,
2166         /* We need all these non-raw things for NFSD, to not patch it. */
2167         .unlink         = ll_unlink,
2168         .mkdir          = ll_mkdir,
2169         .rmdir          = ll_rmdir,
2170         .symlink        = ll_symlink,
2171         .link           = ll_link,
2172         .rename         = ll_rename,
2173         .setattr        = ll_setattr,
2174         .getattr        = ll_getattr,
2175         .permission     = ll_inode_permission,
2176 #ifdef HAVE_IOP_XATTR
2177         .setxattr       = ll_setxattr,
2178         .getxattr       = ll_getxattr,
2179         .removexattr    = ll_removexattr,
2180 #endif
2181         .listxattr      = ll_listxattr,
2182         .get_acl        = ll_get_acl,
2183 #ifdef HAVE_IOP_SET_ACL
2184         .set_acl        = ll_set_acl,
2185 #endif
2186 };
2187
2188 const struct inode_operations ll_special_inode_operations = {
2189         .setattr        = ll_setattr,
2190         .getattr        = ll_getattr,
2191         .permission     = ll_inode_permission,
2192 #ifdef HAVE_IOP_XATTR
2193         .setxattr       = ll_setxattr,
2194         .getxattr       = ll_getxattr,
2195         .removexattr    = ll_removexattr,
2196 #endif
2197         .listxattr      = ll_listxattr,
2198         .get_acl        = ll_get_acl,
2199 #ifdef HAVE_IOP_SET_ACL
2200         .set_acl        = ll_set_acl,
2201 #endif
2202 };