LU-10092 pcc: security and permission for non-root user access

[fs/lustre-release.git] / lustre / llite / file.c

/*
 * GPL HEADER START
 *
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 only,
 * as published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License version 2 for more details (a copy is included
 * in the LICENSE file that accompanied this code).
 *
 * You should have received a copy of the GNU General Public License
 * version 2 along with this program; If not, see
 * http://www.gnu.org/licenses/gpl-2.0.html
 *
 * GPL HEADER END
 */
/*
 * Copyright (c) 2002, 2010, Oracle and/or its affiliates. All rights reserved.
 * Use is subject to license terms.
 *
 * Copyright (c) 2011, 2017, Intel Corporation.
 */
/*
 * This file is part of Lustre, http://www.lustre.org/
 * Lustre is a trademark of Sun Microsystems, Inc.
 *
 * lustre/llite/file.c
 *
 * Author: Peter Braam <braam@clusterfs.com>
 * Author: Phil Schwan <phil@clusterfs.com>
 * Author: Andreas Dilger <adilger@clusterfs.com>
 */

#define DEBUG_SUBSYSTEM S_LLITE
#include <lustre_dlm.h>
#include <linux/pagemap.h>
#include <linux/file.h>
#include <linux/sched.h>
#include <linux/user_namespace.h>
#ifdef HAVE_UIDGID_HEADER
# include <linux/uidgid.h>
#endif

#include <uapi/linux/lustre/lustre_ioctl.h>
#include <lustre_swab.h>

#include "cl_object.h"
#include "llite_internal.h"
#include "vvp_internal.h"

struct split_param {
        struct inode    *sp_inode;
        __u16           sp_mirror_id;
};

struct pcc_param {
        __u64   pa_data_version;
        __u32   pa_archive_id;
        __u32   pa_layout_gen;
};

static int
ll_put_grouplock(struct inode *inode, struct file *file, unsigned long arg);

static int ll_lease_close(struct obd_client_handle *och, struct inode *inode,
                          bool *lease_broken);

static struct ll_file_data *ll_file_data_get(void)
{
        struct ll_file_data *fd;

        OBD_SLAB_ALLOC_PTR_GFP(fd, ll_file_data_slab, GFP_NOFS);
        if (fd == NULL)
                return NULL;

        fd->fd_write_failed = false;
        pcc_file_init(&fd->fd_pcc_file);

        return fd;
}

static void ll_file_data_put(struct ll_file_data *fd)
{
        if (fd != NULL)
                OBD_SLAB_FREE_PTR(fd, ll_file_data_slab);
}

/**
 * Packs all the attributes into @op_data for the CLOSE rpc.
 */
static void ll_prepare_close(struct inode *inode, struct md_op_data *op_data,
                             struct obd_client_handle *och)
{
        ENTRY;

        ll_prep_md_op_data(op_data, inode, NULL, NULL,
                           0, 0, LUSTRE_OPC_ANY, NULL);

        op_data->op_attr.ia_mode = inode->i_mode;
        op_data->op_attr.ia_atime = inode->i_atime;
        op_data->op_attr.ia_mtime = inode->i_mtime;
        op_data->op_attr.ia_ctime = inode->i_ctime;
        op_data->op_attr.ia_size = i_size_read(inode);
        op_data->op_attr.ia_valid |= (ATTR_MODE | ATTR_ATIME | ATTR_ATIME_SET |
                                      ATTR_MTIME | ATTR_MTIME_SET |
                                      ATTR_CTIME);
        op_data->op_xvalid |= OP_XVALID_CTIME_SET;
        op_data->op_attr_blocks = inode->i_blocks;
        op_data->op_attr_flags = ll_inode_to_ext_flags(inode->i_flags);
        if (ll_file_test_flag(ll_i2info(inode), LLIF_PROJECT_INHERIT))
                op_data->op_attr_flags |= LUSTRE_PROJINHERIT_FL;
        op_data->op_open_handle = och->och_open_handle;

        if (och->och_flags & FMODE_WRITE &&
            ll_file_test_and_clear_flag(ll_i2info(inode), LLIF_DATA_MODIFIED))
                /* For HSM: if inode data has been modified, pack it so that
                 * MDT can set data dirty flag in the archive. */
                op_data->op_bias |= MDS_DATA_MODIFIED;

        EXIT;
}

/**
 * Perform a close, possibly with a bias.
 * The meaning of "data" depends on the value of "bias".
 *
 * If \a bias is MDS_HSM_RELEASE then \a data is a pointer to the data version.
 * If \a bias is MDS_CLOSE_LAYOUT_SWAP then \a data is a pointer to the inode to
 * swap layouts with.
 */
static int ll_close_inode_openhandle(struct inode *inode,
                                     struct obd_client_handle *och,
                                     enum mds_op_bias bias, void *data)
{
        struct obd_export *md_exp = ll_i2mdexp(inode);
        const struct ll_inode_info *lli = ll_i2info(inode);
        struct md_op_data *op_data;
        struct ptlrpc_request *req = NULL;
        int rc;
        ENTRY;

        if (class_exp2obd(md_exp) == NULL) {
                CERROR("%s: invalid MDC connection handle closing "DFID"\n",
                       ll_i2sbi(inode)->ll_fsname, PFID(&lli->lli_fid));
                GOTO(out, rc = 0);
        }

        OBD_ALLOC_PTR(op_data);
        /* We leak openhandle and request here on error, but not much to be
         * done in OOM case since app won't retry close on error either. */
        if (op_data == NULL)
                GOTO(out, rc = -ENOMEM);

        ll_prepare_close(inode, op_data, och);
        switch (bias) {
        case MDS_CLOSE_LAYOUT_MERGE:
                /* merge blocks from the victim inode */
                op_data->op_attr_blocks += ((struct inode *)data)->i_blocks;
                op_data->op_attr.ia_valid |= ATTR_SIZE;
                op_data->op_xvalid |= OP_XVALID_BLOCKS;
        case MDS_CLOSE_LAYOUT_SPLIT:
        case MDS_CLOSE_LAYOUT_SWAP: {
                struct split_param *sp = data;

                LASSERT(data != NULL);
                op_data->op_bias |= bias;
                op_data->op_data_version = 0;
                op_data->op_lease_handle = och->och_lease_handle;
                if (bias == MDS_CLOSE_LAYOUT_SPLIT) {
                        op_data->op_fid2 = *ll_inode2fid(sp->sp_inode);
                        op_data->op_mirror_id = sp->sp_mirror_id;
                } else {
                        op_data->op_fid2 = *ll_inode2fid(data);
                }
                break;
        }

        case MDS_CLOSE_RESYNC_DONE: {
                struct ll_ioc_lease *ioc = data;

                LASSERT(data != NULL);
                op_data->op_attr_blocks +=
                        ioc->lil_count * op_data->op_attr_blocks;
                op_data->op_attr.ia_valid |= ATTR_SIZE;
                op_data->op_xvalid |= OP_XVALID_BLOCKS;
                op_data->op_bias |= MDS_CLOSE_RESYNC_DONE;

                op_data->op_lease_handle = och->och_lease_handle;
                op_data->op_data = &ioc->lil_ids[0];
                op_data->op_data_size =
                        ioc->lil_count * sizeof(ioc->lil_ids[0]);
                break;
        }

        case MDS_PCC_ATTACH: {
                struct pcc_param *param = data;

                LASSERT(data != NULL);
                op_data->op_bias |= MDS_HSM_RELEASE | MDS_PCC_ATTACH;
                op_data->op_archive_id = param->pa_archive_id;
                op_data->op_data_version = param->pa_data_version;
                op_data->op_lease_handle = och->och_lease_handle;
                break;
        }

        case MDS_HSM_RELEASE:
                LASSERT(data != NULL);
                op_data->op_bias |= MDS_HSM_RELEASE;
                op_data->op_data_version = *(__u64 *)data;
                op_data->op_lease_handle = och->och_lease_handle;
                op_data->op_attr.ia_valid |= ATTR_SIZE;
                op_data->op_xvalid |= OP_XVALID_BLOCKS;
                break;

        default:
                LASSERT(data == NULL);
                break;
        }

        if (!(op_data->op_attr.ia_valid & ATTR_SIZE))
                op_data->op_xvalid |= OP_XVALID_LAZYSIZE;
        if (!(op_data->op_xvalid & OP_XVALID_BLOCKS))
                op_data->op_xvalid |= OP_XVALID_LAZYBLOCKS;

        rc = md_close(md_exp, op_data, och->och_mod, &req);
        if (rc != 0 && rc != -EINTR)
                CERROR("%s: inode "DFID" mdc close failed: rc = %d\n",
                       md_exp->exp_obd->obd_name, PFID(&lli->lli_fid), rc);

        if (rc == 0 && op_data->op_bias & bias) {
                struct mdt_body *body;

                body = req_capsule_server_get(&req->rq_pill, &RMF_MDT_BODY);
                if (!(body->mbo_valid & OBD_MD_CLOSE_INTENT_EXECED))
                        rc = -EBUSY;

                if (bias & MDS_PCC_ATTACH) {
                        struct pcc_param *param = data;

                        param->pa_layout_gen = body->mbo_layout_gen;
                }
        }

        ll_finish_md_op_data(op_data);
        EXIT;
out:

        md_clear_open_replay_data(md_exp, och);
        och->och_open_handle.cookie = DEAD_HANDLE_MAGIC;
        OBD_FREE_PTR(och);

        ptlrpc_req_finished(req);       /* This is close request */
        return rc;
}

int ll_md_real_close(struct inode *inode, fmode_t fmode)
{
        struct ll_inode_info *lli = ll_i2info(inode);
        struct obd_client_handle **och_p;
        struct obd_client_handle *och;
        __u64 *och_usecount;
        int rc = 0;
        ENTRY;

        if (fmode & FMODE_WRITE) {
                och_p = &lli->lli_mds_write_och;
                och_usecount = &lli->lli_open_fd_write_count;
        } else if (fmode & FMODE_EXEC) {
                och_p = &lli->lli_mds_exec_och;
                och_usecount = &lli->lli_open_fd_exec_count;
        } else {
                LASSERT(fmode & FMODE_READ);
                och_p = &lli->lli_mds_read_och;
                och_usecount = &lli->lli_open_fd_read_count;
        }

        mutex_lock(&lli->lli_och_mutex);
        if (*och_usecount > 0) {
                /* There are still users of this handle, so skip
                 * freeing it. */
                mutex_unlock(&lli->lli_och_mutex);
                RETURN(0);
        }

        och = *och_p;
        *och_p = NULL;
        mutex_unlock(&lli->lli_och_mutex);

        if (och != NULL) {
                /* There might be a race and this handle may already
                 * be closed. */
                rc = ll_close_inode_openhandle(inode, och, 0, NULL);
        }

        RETURN(rc);
}

static int ll_md_close(struct inode *inode, struct file *file)
{
        union ldlm_policy_data policy = {
                .l_inodebits    = { MDS_INODELOCK_OPEN },
        };
        __u64 flags = LDLM_FL_BLOCK_GRANTED | LDLM_FL_TEST_LOCK;
        struct ll_file_data *fd = LUSTRE_FPRIVATE(file);
        struct ll_inode_info *lli = ll_i2info(inode);
        struct lustre_handle lockh;
        enum ldlm_mode lockmode;
        int rc = 0;
        ENTRY;

        /* clear group lock, if present */
        if (unlikely(fd->fd_flags & LL_FILE_GROUP_LOCKED))
                ll_put_grouplock(inode, file, fd->fd_grouplock.lg_gid);

        if (fd->fd_lease_och != NULL) {
                bool lease_broken;

                /* Usually the lease is not released when the
                 * application crashed, we need to release here. */
                rc = ll_lease_close(fd->fd_lease_och, inode, &lease_broken);
                CDEBUG(rc ? D_ERROR : D_INODE, "Clean up lease "DFID" %d/%d\n",
                        PFID(&lli->lli_fid), rc, lease_broken);

                fd->fd_lease_och = NULL;
        }

        if (fd->fd_och != NULL) {
                rc = ll_close_inode_openhandle(inode, fd->fd_och, 0, NULL);
                fd->fd_och = NULL;
                GOTO(out, rc);
        }

        /* Let's see if we have good enough OPEN lock on the file and if
           we can skip talking to MDS */
        mutex_lock(&lli->lli_och_mutex);
        if (fd->fd_omode & FMODE_WRITE) {
                lockmode = LCK_CW;
                LASSERT(lli->lli_open_fd_write_count);
                lli->lli_open_fd_write_count--;
        } else if (fd->fd_omode & FMODE_EXEC) {
                lockmode = LCK_PR;
                LASSERT(lli->lli_open_fd_exec_count);
                lli->lli_open_fd_exec_count--;
        } else {
                lockmode = LCK_CR;
                LASSERT(lli->lli_open_fd_read_count);
                lli->lli_open_fd_read_count--;
        }
        mutex_unlock(&lli->lli_och_mutex);

        if (!md_lock_match(ll_i2mdexp(inode), flags, ll_inode2fid(inode),
                           LDLM_IBITS, &policy, lockmode, &lockh))
                rc = ll_md_real_close(inode, fd->fd_omode);

out:
        LUSTRE_FPRIVATE(file) = NULL;
        ll_file_data_put(fd);

        RETURN(rc);
}

/* While this returns an error code, fput() the caller does not, so we need
 * to make every effort to clean up all of our state here.  Also, applications
 * rarely check close errors and even if an error is returned they will not
 * re-try the close call.
 */
int ll_file_release(struct inode *inode, struct file *file)
{
        struct ll_file_data *fd;
        struct ll_sb_info *sbi = ll_i2sbi(inode);
        struct ll_inode_info *lli = ll_i2info(inode);
        int rc;
        ENTRY;

        CDEBUG(D_VFSTRACE, "VFS Op:inode="DFID"(%p)\n",
               PFID(ll_inode2fid(inode)), inode);

        if (inode->i_sb->s_root != file_dentry(file))
                ll_stats_ops_tally(sbi, LPROC_LL_RELEASE, 1);
        fd = LUSTRE_FPRIVATE(file);
        LASSERT(fd != NULL);

        /* The last ref on @file, maybe not the the owner pid of statahead,
         * because parent and child process can share the same file handle. */
        if (S_ISDIR(inode->i_mode) && lli->lli_opendir_key == fd)
                ll_deauthorize_statahead(inode, fd);

        if (inode->i_sb->s_root == file_dentry(file)) {
                LUSTRE_FPRIVATE(file) = NULL;
                ll_file_data_put(fd);
                RETURN(0);
        }

        pcc_file_release(inode, file);

        if (!S_ISDIR(inode->i_mode)) {
                if (lli->lli_clob != NULL)
                        lov_read_and_clear_async_rc(lli->lli_clob);
                lli->lli_async_rc = 0;
        }

        rc = ll_md_close(inode, file);

        if (CFS_FAIL_TIMEOUT_MS(OBD_FAIL_PTLRPC_DUMP_LOG, cfs_fail_val))
                libcfs_debug_dumplog();

        RETURN(rc);
}

static inline int ll_dom_readpage(void *data, struct page *page)
{
        struct niobuf_local *lnb = data;
        void *kaddr;

        kaddr = ll_kmap_atomic(page, KM_USER0);
        memcpy(kaddr, lnb->lnb_data, lnb->lnb_len);
        if (lnb->lnb_len < PAGE_SIZE)
                memset(kaddr + lnb->lnb_len, 0,
                       PAGE_SIZE - lnb->lnb_len);
        flush_dcache_page(page);
        SetPageUptodate(page);
        ll_kunmap_atomic(kaddr, KM_USER0);
        unlock_page(page);

        return 0;
}

void ll_dom_finish_open(struct inode *inode, struct ptlrpc_request *req,
                        struct lookup_intent *it)
{
        struct ll_inode_info *lli = ll_i2info(inode);
        struct cl_object *obj = lli->lli_clob;
        struct address_space *mapping = inode->i_mapping;
        struct page *vmpage;
        struct niobuf_remote *rnb;
        char *data;
        unsigned long index, start;
        struct niobuf_local lnb;

        ENTRY;

        if (obj == NULL)
                RETURN_EXIT;

        if (!req_capsule_has_field(&req->rq_pill, &RMF_NIOBUF_INLINE,
                                   RCL_SERVER))
                RETURN_EXIT;

        rnb = req_capsule_server_get(&req->rq_pill, &RMF_NIOBUF_INLINE);
        if (rnb == NULL || rnb->rnb_len == 0)
                RETURN_EXIT;

        /* LU-11595: Server may return whole file and that is OK always or
         * it may return just file tail and its offset must be aligned with
         * client PAGE_SIZE to be used on that client, if server's PAGE_SIZE is
         * smaller then offset may be not aligned and that data is just ignored.
         */
        if (rnb->rnb_offset % PAGE_SIZE)
                RETURN_EXIT;

        /* Server returns whole file or just file tail if it fills in
         * reply buffer, in both cases total size should be inode size.
         */
        if (rnb->rnb_offset + rnb->rnb_len < i_size_read(inode)) {
                CERROR("%s: server returns off/len %llu/%u < i_size %llu\n",
                       ll_i2sbi(inode)->ll_fsname, rnb->rnb_offset,
                       rnb->rnb_len, i_size_read(inode));
                RETURN_EXIT;
        }

        CDEBUG(D_INFO, "Get data along with open at %llu len %i, i_size %llu\n",
               rnb->rnb_offset, rnb->rnb_len, i_size_read(inode));

        data = (char *)rnb + sizeof(*rnb);

        lnb.lnb_file_offset = rnb->rnb_offset;
        start = lnb.lnb_file_offset / PAGE_SIZE;
        index = 0;
        LASSERT(lnb.lnb_file_offset % PAGE_SIZE == 0);
        lnb.lnb_page_offset = 0;
        do {
                lnb.lnb_data = data + (index << PAGE_SHIFT);
                lnb.lnb_len = rnb->rnb_len - (index << PAGE_SHIFT);
                if (lnb.lnb_len > PAGE_SIZE)
                        lnb.lnb_len = PAGE_SIZE;

                vmpage = read_cache_page(mapping, index + start,
                                         ll_dom_readpage, &lnb);
                if (IS_ERR(vmpage)) {
                        CWARN("%s: cannot fill page %lu for "DFID
                              " with data: rc = %li\n",
                              ll_i2sbi(inode)->ll_fsname, index + start,
                              PFID(lu_object_fid(&obj->co_lu)),
                              PTR_ERR(vmpage));
                        break;
                }
                put_page(vmpage);
                index++;
        } while (rnb->rnb_len > (index << PAGE_SHIFT));
        EXIT;
}

static int ll_intent_file_open(struct dentry *de, void *lmm, int lmmsize,
                                struct lookup_intent *itp)
{
        struct ll_sb_info *sbi = ll_i2sbi(de->d_inode);
        struct dentry *parent = de->d_parent;
        char *name = NULL;
        int len = 0;
        struct md_op_data *op_data;
        struct ptlrpc_request *req = NULL;
        int rc;
        ENTRY;

        LASSERT(parent != NULL);
        LASSERT(itp->it_flags & MDS_OPEN_BY_FID);

        /* if server supports open-by-fid, or file name is invalid, don't pack
         * name in open request */
        if (OBD_FAIL_CHECK(OBD_FAIL_LLITE_OPEN_BY_NAME) ||
            !(exp_connect_flags(sbi->ll_md_exp) & OBD_CONNECT_OPEN_BY_FID)) {
retry:
                len = de->d_name.len;
                name = kmalloc(len + 1, GFP_NOFS);
                if (!name)
                        RETURN(-ENOMEM);

                /* race here */
                spin_lock(&de->d_lock);
                if (len != de->d_name.len) {
                        spin_unlock(&de->d_lock);
                        kfree(name);
                        goto retry;
                }
                memcpy(name, de->d_name.name, len);
                name[len] = '\0';
                spin_unlock(&de->d_lock);

                if (!lu_name_is_valid_2(name, len)) {
                        kfree(name);
                        RETURN(-ESTALE);
                }
        }

        op_data = ll_prep_md_op_data(NULL, parent->d_inode, de->d_inode,
                                     name, len, 0, LUSTRE_OPC_ANY, NULL);
        if (IS_ERR(op_data)) {
                kfree(name);
                RETURN(PTR_ERR(op_data));
        }
        op_data->op_data = lmm;
        op_data->op_data_size = lmmsize;

        rc = md_intent_lock(sbi->ll_md_exp, op_data, itp, &req,
                            &ll_md_blocking_ast, 0);
        kfree(name);
        ll_finish_md_op_data(op_data);
        if (rc == -ESTALE) {
                /* reason for keep own exit path - don`t flood log
                 * with messages with -ESTALE errors.
                 */
                if (!it_disposition(itp, DISP_OPEN_OPEN) ||
                     it_open_error(DISP_OPEN_OPEN, itp))
                        GOTO(out, rc);
                ll_release_openhandle(de, itp);
                GOTO(out, rc);
        }

        if (it_disposition(itp, DISP_LOOKUP_NEG))
                GOTO(out, rc = -ENOENT);

        if (rc != 0 || it_open_error(DISP_OPEN_OPEN, itp)) {
                rc = rc ? rc : it_open_error(DISP_OPEN_OPEN, itp);
                CDEBUG(D_VFSTRACE, "lock enqueue: err: %d\n", rc);
                GOTO(out, rc);
        }

        rc = ll_prep_inode(&de->d_inode, req, NULL, itp);

        if (!rc && itp->it_lock_mode) {
                struct lustre_handle handle = {.cookie = itp->it_lock_handle};
                struct ldlm_lock *lock;
                bool has_dom_bit = false;

                /* If we got a lock back and it has a LOOKUP bit set,
                 * make sure the dentry is marked as valid so we can find it.
                 * We don't need to care about actual hashing since other bits
                 * of kernel will deal with that later.
                 */
                lock = ldlm_handle2lock(&handle);
                if (lock) {
                        has_dom_bit = ldlm_has_dom(lock);
                        if (lock->l_policy_data.l_inodebits.bits &
                            MDS_INODELOCK_LOOKUP)
                                d_lustre_revalidate(de);

                        LDLM_LOCK_PUT(lock);
                }
                ll_set_lock_data(sbi->ll_md_exp, de->d_inode, itp, NULL);
                if (has_dom_bit)
                        ll_dom_finish_open(de->d_inode, req, itp);
        }

out:
        ptlrpc_req_finished(req);
        ll_intent_drop_lock(itp);

        /* We did open by fid, but by the time we got to the server,
         * the object disappeared. If this is a create, we cannot really
         * tell the userspace that the file it was trying to create
         * does not exist. Instead let's return -ESTALE, and the VFS will
         * retry the create with LOOKUP_REVAL that we are going to catch
         * in ll_revalidate_dentry() and use lookup then.
         */
        if (rc == -ENOENT && itp->it_op & IT_CREAT)
                rc = -ESTALE;

        RETURN(rc);
}

static int ll_och_fill(struct obd_export *md_exp, struct lookup_intent *it,
                       struct obd_client_handle *och)
{
        struct mdt_body *body;

        body = req_capsule_server_get(&it->it_request->rq_pill, &RMF_MDT_BODY);
        och->och_open_handle = body->mbo_open_handle;
        och->och_fid = body->mbo_fid1;
        och->och_lease_handle.cookie = it->it_lock_handle;
        och->och_magic = OBD_CLIENT_HANDLE_MAGIC;
        och->och_flags = it->it_flags;

        return md_set_open_replay_data(md_exp, och, it);
}

static int ll_local_open(struct file *file, struct lookup_intent *it,
                         struct ll_file_data *fd, struct obd_client_handle *och)
{
        struct inode *inode = file_inode(file);
        ENTRY;

        LASSERT(!LUSTRE_FPRIVATE(file));

        LASSERT(fd != NULL);

        if (och) {
                int rc;

                rc = ll_och_fill(ll_i2sbi(inode)->ll_md_exp, it, och);
                if (rc != 0)
                        RETURN(rc);
        }

        LUSTRE_FPRIVATE(file) = fd;
        ll_readahead_init(inode, &fd->fd_ras);
        fd->fd_omode = it->it_flags & (FMODE_READ | FMODE_WRITE | FMODE_EXEC);

        /* ll_cl_context initialize */
        rwlock_init(&fd->fd_lock);
        INIT_LIST_HEAD(&fd->fd_lccs);

        RETURN(0);
}

/* Open a file, and (for the very first open) create objects on the OSTs at
 * this time.  If opened with O_LOV_DELAY_CREATE, then we don't do the object
 * creation or open until ll_lov_setstripe() ioctl is called.
 *
 * If we already have the stripe MD locally then we don't request it in
 * md_open(), by passing a lmm_size = 0.
 *
 * It is up to the application to ensure no other processes open this file
 * in the O_LOV_DELAY_CREATE case, or the default striping pattern will be
 * used.  We might be able to avoid races of that sort by getting lli_open_sem
 * before returning in the O_LOV_DELAY_CREATE case and dropping it here
 * or in ll_file_release(), but I'm not sure that is desirable/necessary.
 */
int ll_file_open(struct inode *inode, struct file *file)
{
        struct ll_inode_info *lli = ll_i2info(inode);
        struct lookup_intent *it, oit = { .it_op = IT_OPEN,
                                          .it_flags = file->f_flags };
        struct obd_client_handle **och_p = NULL;
        __u64 *och_usecount = NULL;
        struct ll_file_data *fd;
        int rc = 0;
        ENTRY;

        CDEBUG(D_VFSTRACE, "VFS Op:inode="DFID"(%p), flags %o\n",
               PFID(ll_inode2fid(inode)), inode, file->f_flags);

        it = file->private_data; /* XXX: compat macro */
        file->private_data = NULL; /* prevent ll_local_open assertion */

        fd = ll_file_data_get();
        if (fd == NULL)
                GOTO(out_nofiledata, rc = -ENOMEM);

        fd->fd_file = file;
        if (S_ISDIR(inode->i_mode))
                ll_authorize_statahead(inode, fd);

        if (inode->i_sb->s_root == file_dentry(file)) {
                LUSTRE_FPRIVATE(file) = fd;
                RETURN(0);
        }

        if (!it || !it->it_disposition) {
                /* Convert f_flags into access mode. We cannot use file->f_mode,
                 * because everything but O_ACCMODE mask was stripped from
                 * there */
                if ((oit.it_flags + 1) & O_ACCMODE)
                        oit.it_flags++;
                if (file->f_flags & O_TRUNC)
                        oit.it_flags |= FMODE_WRITE;

                /* kernel only call f_op->open in dentry_open.  filp_open calls
                 * dentry_open after call to open_namei that checks permissions.
                 * Only nfsd_open call dentry_open directly without checking
                 * permissions and because of that this code below is safe.
                 */
                if (oit.it_flags & (FMODE_WRITE | FMODE_READ))
                        oit.it_flags |= MDS_OPEN_OWNEROVERRIDE;

                /* We do not want O_EXCL here, presumably we opened the file
                 * already? XXX - NFS implications? */
                oit.it_flags &= ~O_EXCL;

                /* bug20584, if "it_flags" contains O_CREAT, the file will be
                 * created if necessary, then "IT_CREAT" should be set to keep
                 * consistent with it */
                if (oit.it_flags & O_CREAT)
                        oit.it_op |= IT_CREAT;

                it = &oit;
        }

restart:
        /* Let's see if we have file open on MDS already. */
        if (it->it_flags & FMODE_WRITE) {
                och_p = &lli->lli_mds_write_och;
                och_usecount = &lli->lli_open_fd_write_count;
        } else if (it->it_flags & FMODE_EXEC) {
                och_p = &lli->lli_mds_exec_och;
                och_usecount = &lli->lli_open_fd_exec_count;
         } else {
                och_p = &lli->lli_mds_read_och;
                och_usecount = &lli->lli_open_fd_read_count;
        }

        mutex_lock(&lli->lli_och_mutex);
        if (*och_p) { /* Open handle is present */
                if (it_disposition(it, DISP_OPEN_OPEN)) {
                        /* Well, there's extra open request that we do not need,
                           let's close it somehow. This will decref request. */
                        rc = it_open_error(DISP_OPEN_OPEN, it);
                        if (rc) {
                                mutex_unlock(&lli->lli_och_mutex);
                                GOTO(out_openerr, rc);
                        }

                        ll_release_openhandle(file_dentry(file), it);
                }
                (*och_usecount)++;

                rc = ll_local_open(file, it, fd, NULL);
                if (rc) {
                        (*och_usecount)--;
                        mutex_unlock(&lli->lli_och_mutex);
                        GOTO(out_openerr, rc);
                }
        } else {
                LASSERT(*och_usecount == 0);
                if (!it->it_disposition) {
                        struct ll_dentry_data *ldd = ll_d2d(file->f_path.dentry);
                        /* We cannot just request lock handle now, new ELC code
                           means that one of other OPEN locks for this file
                           could be cancelled, and since blocking ast handler
                           would attempt to grab och_mutex as well, that would
                           result in a deadlock */
                        mutex_unlock(&lli->lli_och_mutex);
                        /*
                         * Normally called under two situations:
                         * 1. NFS export.
                         * 2. A race/condition on MDS resulting in no open
                         *    handle to be returned from LOOKUP|OPEN request,
                         *    for example if the target entry was a symlink.
                         *
                         *  Only fetch MDS_OPEN_LOCK if this is in NFS path,
                         *  marked by a bit set in ll_iget_for_nfs. Clear the
                         *  bit so that it's not confusing later callers.
                         *
                         *  NB; when ldd is NULL, it must have come via normal
                         *  lookup path only, since ll_iget_for_nfs always calls
                         *  ll_d_init().
                         */
                        if (ldd && ldd->lld_nfs_dentry) {
                                ldd->lld_nfs_dentry = 0;
                                it->it_flags |= MDS_OPEN_LOCK;
                        }

                         /*
                         * Always specify MDS_OPEN_BY_FID because we don't want
                         * to get file with different fid.
                         */
                        it->it_flags |= MDS_OPEN_BY_FID;
                        rc = ll_intent_file_open(file_dentry(file), NULL, 0,
                                                 it);
                        if (rc)
                                GOTO(out_openerr, rc);

                        goto restart;
                }
                OBD_ALLOC(*och_p, sizeof (struct obd_client_handle));
                if (!*och_p)
                        GOTO(out_och_free, rc = -ENOMEM);

                (*och_usecount)++;

                /* md_intent_lock() didn't get a request ref if there was an
                 * open error, so don't do cleanup on the request here
                 * (bug 3430) */
                /* XXX (green): Should not we bail out on any error here, not
                 * just open error? */
                rc = it_open_error(DISP_OPEN_OPEN, it);
                if (rc != 0)
                        GOTO(out_och_free, rc);

                LASSERTF(it_disposition(it, DISP_ENQ_OPEN_REF),
                         "inode %p: disposition %x, status %d\n", inode,
                         it_disposition(it, ~0), it->it_status);

                rc = ll_local_open(file, it, fd, *och_p);
                if (rc)
                        GOTO(out_och_free, rc);
        }

        rc = pcc_file_open(inode, file);
        if (rc)
                GOTO(out_och_free, rc);

        mutex_unlock(&lli->lli_och_mutex);
        fd = NULL;

        /* Must do this outside lli_och_mutex lock to prevent deadlock where
           different kind of OPEN lock for this same inode gets cancelled
           by ldlm_cancel_lru */
        if (!S_ISREG(inode->i_mode))
                GOTO(out_och_free, rc);

        cl_lov_delay_create_clear(&file->f_flags);
        GOTO(out_och_free, rc);

out_och_free:
        if (rc) {
                if (och_p && *och_p) {
                        OBD_FREE(*och_p, sizeof (struct obd_client_handle));
                        *och_p = NULL; /* OBD_FREE writes some magic there */
                        (*och_usecount)--;
                }
                mutex_unlock(&lli->lli_och_mutex);

out_openerr:
                if (lli->lli_opendir_key == fd)
                        ll_deauthorize_statahead(inode, fd);

                if (fd != NULL)
                        ll_file_data_put(fd);
        } else {
                ll_stats_ops_tally(ll_i2sbi(inode), LPROC_LL_OPEN, 1);
        }

out_nofiledata:
        if (it && it_disposition(it, DISP_ENQ_OPEN_REF)) {
                ptlrpc_req_finished(it->it_request);
                it_clear_disposition(it, DISP_ENQ_OPEN_REF);
        }

        return rc;
}

static int ll_md_blocking_lease_ast(struct ldlm_lock *lock,
                        struct ldlm_lock_desc *desc, void *data, int flag)
{
        int rc;
        struct lustre_handle lockh;
        ENTRY;

        switch (flag) {
        case LDLM_CB_BLOCKING:
                ldlm_lock2handle(lock, &lockh);
                rc = ldlm_cli_cancel(&lockh, LCF_ASYNC);
                if (rc < 0) {
                        CDEBUG(D_INODE, "ldlm_cli_cancel: %d\n", rc);
                        RETURN(rc);
                }
                break;
        case LDLM_CB_CANCELING:
                /* do nothing */
                break;
        }
        RETURN(0);
}

/**
 * When setting a lease on a file, we take ownership of the lli_mds_*_och
 * and save it as fd->fd_och so as to force client to reopen the file even
 * if it has an open lock in cache already.
 */
static int ll_lease_och_acquire(struct inode *inode, struct file *file,
                                struct lustre_handle *old_open_handle)
{
        struct ll_inode_info *lli = ll_i2info(inode);
        struct ll_file_data *fd = LUSTRE_FPRIVATE(file);
        struct obd_client_handle **och_p;
        __u64 *och_usecount;
        int rc = 0;
        ENTRY;

        /* Get the openhandle of the file */
        mutex_lock(&lli->lli_och_mutex);
        if (fd->fd_lease_och != NULL)
                GOTO(out_unlock, rc = -EBUSY);

        if (fd->fd_och == NULL) {
                if (file->f_mode & FMODE_WRITE) {
                        LASSERT(lli->lli_mds_write_och != NULL);
                        och_p = &lli->lli_mds_write_och;
                        och_usecount = &lli->lli_open_fd_write_count;
                } else {
                        LASSERT(lli->lli_mds_read_och != NULL);
                        och_p = &lli->lli_mds_read_och;
                        och_usecount = &lli->lli_open_fd_read_count;
                }

                if (*och_usecount > 1)
                        GOTO(out_unlock, rc = -EBUSY);

                fd->fd_och = *och_p;
                *och_usecount = 0;
                *och_p = NULL;
        }

        *old_open_handle = fd->fd_och->och_open_handle;

        EXIT;
out_unlock:
        mutex_unlock(&lli->lli_och_mutex);
        return rc;
}

/**
 * Release ownership on lli_mds_*_och when putting back a file lease.
 */
static int ll_lease_och_release(struct inode *inode, struct file *file)
{
        struct ll_inode_info *lli = ll_i2info(inode);
        struct ll_file_data *fd = LUSTRE_FPRIVATE(file);
        struct obd_client_handle **och_p;
        struct obd_client_handle *old_och = NULL;
        __u64 *och_usecount;
        int rc = 0;
        ENTRY;

        mutex_lock(&lli->lli_och_mutex);
        if (file->f_mode & FMODE_WRITE) {
                och_p = &lli->lli_mds_write_och;
                och_usecount = &lli->lli_open_fd_write_count;
        } else {
                och_p = &lli->lli_mds_read_och;
                och_usecount = &lli->lli_open_fd_read_count;
        }

        /* The file may have been open by another process (broken lease) so
         * *och_p is not NULL. In this case we should simply increase usecount
         * and close fd_och.
         */
        if (*och_p != NULL) {
                old_och = fd->fd_och;
                (*och_usecount)++;
        } else {
                *och_p = fd->fd_och;
                *och_usecount = 1;
        }
        fd->fd_och = NULL;
        mutex_unlock(&lli->lli_och_mutex);

        if (old_och != NULL)
                rc = ll_close_inode_openhandle(inode, old_och, 0, NULL);

        RETURN(rc);
}

/**
 * Acquire a lease and open the file.
 */
static struct obd_client_handle *
ll_lease_open(struct inode *inode, struct file *file, fmode_t fmode,
              __u64 open_flags)
{
        struct lookup_intent it = { .it_op = IT_OPEN };
        struct ll_sb_info *sbi = ll_i2sbi(inode);
        struct md_op_data *op_data;
        struct ptlrpc_request *req = NULL;
        struct lustre_handle old_open_handle = { 0 };
        struct obd_client_handle *och = NULL;
        int rc;
        int rc2;
        ENTRY;

        if (fmode != FMODE_WRITE && fmode != FMODE_READ)
                RETURN(ERR_PTR(-EINVAL));

        if (file != NULL) {
                if (!(fmode & file->f_mode) || (file->f_mode & FMODE_EXEC))
                        RETURN(ERR_PTR(-EPERM));

                rc = ll_lease_och_acquire(inode, file, &old_open_handle);
                if (rc)
                        RETURN(ERR_PTR(rc));
        }

        OBD_ALLOC_PTR(och);
        if (och == NULL)
                RETURN(ERR_PTR(-ENOMEM));

        op_data = ll_prep_md_op_data(NULL, inode, inode, NULL, 0, 0,
                                        LUSTRE_OPC_ANY, NULL);
        if (IS_ERR(op_data))
                GOTO(out, rc = PTR_ERR(op_data));

        /* To tell the MDT this openhandle is from the same owner */
        op_data->op_open_handle = old_open_handle;

        it.it_flags = fmode | open_flags;
        it.it_flags |= MDS_OPEN_LOCK | MDS_OPEN_BY_FID | MDS_OPEN_LEASE;
        rc = md_intent_lock(sbi->ll_md_exp, op_data, &it, &req,
                            &ll_md_blocking_lease_ast,
        /* LDLM_FL_NO_LRU: To not put the lease lock into LRU list, otherwise
         * it can be cancelled which may mislead applications that the lease is
         * broken;
         * LDLM_FL_EXCL: Set this flag so that it won't be matched by normal
         * open in ll_md_blocking_ast(). Otherwise as ll_md_blocking_lease_ast
         * doesn't deal with openhandle, so normal openhandle will be leaked. */
                            LDLM_FL_NO_LRU | LDLM_FL_EXCL);
        ll_finish_md_op_data(op_data);
        ptlrpc_req_finished(req);
        if (rc < 0)
                GOTO(out_release_it, rc);

        if (it_disposition(&it, DISP_LOOKUP_NEG))
                GOTO(out_release_it, rc = -ENOENT);

        rc = it_open_error(DISP_OPEN_OPEN, &it);
        if (rc)
                GOTO(out_release_it, rc);

        LASSERT(it_disposition(&it, DISP_ENQ_OPEN_REF));
        ll_och_fill(sbi->ll_md_exp, &it, och);

        if (!it_disposition(&it, DISP_OPEN_LEASE)) /* old server? */
                GOTO(out_close, rc = -EOPNOTSUPP);

        /* already get lease, handle lease lock */
        ll_set_lock_data(sbi->ll_md_exp, inode, &it, NULL);
        if (it.it_lock_mode == 0 ||
            it.it_lock_bits != MDS_INODELOCK_OPEN) {
                /* open lock must return for lease */
                CERROR(DFID "lease granted but no open lock, %d/%llu.\n",
                        PFID(ll_inode2fid(inode)), it.it_lock_mode,
                        it.it_lock_bits);
                GOTO(out_close, rc = -EPROTO);
        }

        ll_intent_release(&it);
        RETURN(och);

out_close:
        /* Cancel open lock */
        if (it.it_lock_mode != 0) {
                ldlm_lock_decref_and_cancel(&och->och_lease_handle,
                                            it.it_lock_mode);
                it.it_lock_mode = 0;
                och->och_lease_handle.cookie = 0ULL;
        }
        rc2 = ll_close_inode_openhandle(inode, och, 0, NULL);
        if (rc2 < 0)
                CERROR("%s: error closing file "DFID": %d\n",
                       sbi->ll_fsname, PFID(&ll_i2info(inode)->lli_fid), rc2);
        och = NULL; /* och has been freed in ll_close_inode_openhandle() */
out_release_it:
        ll_intent_release(&it);
out:
        if (och != NULL)
                OBD_FREE_PTR(och);
        RETURN(ERR_PTR(rc));
}

/**
 * Check whether a layout swap can be done between two inodes.
 *
 * \param[in] inode1  First inode to check
 * \param[in] inode2  Second inode to check
 *
 * \retval 0 on success, layout swap can be performed between both inodes
 * \retval negative error code if requirements are not met
 */
static int ll_check_swap_layouts_validity(struct inode *inode1,
                                          struct inode *inode2)
{
        if (!S_ISREG(inode1->i_mode) || !S_ISREG(inode2->i_mode))
                return -EINVAL;

        if (inode_permission(inode1, MAY_WRITE) ||
            inode_permission(inode2, MAY_WRITE))
                return -EPERM;

        if (inode1->i_sb != inode2->i_sb)
                return -EXDEV;

        return 0;
}

static int ll_swap_layouts_close(struct obd_client_handle *och,
                                 struct inode *inode, struct inode *inode2)
{
        const struct lu_fid     *fid1 = ll_inode2fid(inode);
        const struct lu_fid     *fid2;
        int                      rc;
        ENTRY;

        CDEBUG(D_INODE, "%s: biased close of file "DFID"\n",
               ll_i2sbi(inode)->ll_fsname, PFID(fid1));

        rc = ll_check_swap_layouts_validity(inode, inode2);
        if (rc < 0)
                GOTO(out_free_och, rc);

        /* We now know that inode2 is a lustre inode */
        fid2 = ll_inode2fid(inode2);

        rc = lu_fid_cmp(fid1, fid2);
        if (rc == 0)
                GOTO(out_free_och, rc = -EINVAL);

        /* Close the file and {swap,merge} layouts between inode & inode2.
         * NB: lease lock handle is released in mdc_close_layout_swap_pack()
         * because we still need it to pack l_remote_handle to MDT. */
        rc = ll_close_inode_openhandle(inode, och, MDS_CLOSE_LAYOUT_SWAP,
                                       inode2);

        och = NULL; /* freed in ll_close_inode_openhandle() */

out_free_och:
        if (och != NULL)
                OBD_FREE_PTR(och);

        RETURN(rc);
}

/**
 * Release lease and close the file.
 * It will check if the lease has ever broken.
 */
static int ll_lease_close_intent(struct obd_client_handle *och,
                                 struct inode *inode,
                                 bool *lease_broken, enum mds_op_bias bias,
                                 void *data)
{
        struct ldlm_lock *lock;
        bool cancelled = true;
        int rc;
        ENTRY;

        lock = ldlm_handle2lock(&och->och_lease_handle);
        if (lock != NULL) {
                lock_res_and_lock(lock);
                cancelled = ldlm_is_cancel(lock);
                unlock_res_and_lock(lock);
                LDLM_LOCK_PUT(lock);
        }

        CDEBUG(D_INODE, "lease for "DFID" broken? %d, bias: %x\n",
               PFID(&ll_i2info(inode)->lli_fid), cancelled, bias);

        if (lease_broken != NULL)
                *lease_broken = cancelled;

        if (!cancelled && !bias)
                ldlm_cli_cancel(&och->och_lease_handle, 0);

        if (cancelled) { /* no need to excute intent */
                bias = 0;
                data = NULL;
        }

        rc = ll_close_inode_openhandle(inode, och, bias, data);
        RETURN(rc);
}

static int ll_lease_close(struct obd_client_handle *och, struct inode *inode,
                          bool *lease_broken)
{
        return ll_lease_close_intent(och, inode, lease_broken, 0, NULL);
}

/**
 * After lease is taken, send the RPC MDS_REINT_RESYNC to the MDT
 */
static int ll_lease_file_resync(struct obd_client_handle *och,
                                struct inode *inode, unsigned long arg)
{
        struct ll_sb_info *sbi = ll_i2sbi(inode);
        struct md_op_data *op_data;
        struct ll_ioc_lease_id ioc;
        __u64 data_version_unused;
        int rc;
        ENTRY;

        op_data = ll_prep_md_op_data(NULL, inode, NULL, NULL, 0, 0,
                                     LUSTRE_OPC_ANY, NULL);
        if (IS_ERR(op_data))
                RETURN(PTR_ERR(op_data));

        if (copy_from_user(&ioc, (struct ll_ioc_lease_id __user *)arg,
                           sizeof(ioc)))
                RETURN(-EFAULT);

        /* before starting file resync, it's necessary to clean up page cache
         * in client memory, otherwise once the layout version is increased,
         * writing back cached data will be denied the OSTs. */
        rc = ll_data_version(inode, &data_version_unused, LL_DV_WR_FLUSH);
        if (rc)
                GOTO(out, rc);

        op_data->op_lease_handle = och->och_lease_handle;
        op_data->op_mirror_id = ioc.lil_mirror_id;
        rc = md_file_resync(sbi->ll_md_exp, op_data);
        if (rc)
                GOTO(out, rc);

        EXIT;
out:
        ll_finish_md_op_data(op_data);
        return rc;
}

int ll_merge_attr(const struct lu_env *env, struct inode *inode)
{
        struct ll_inode_info *lli = ll_i2info(inode);
        struct cl_object *obj = lli->lli_clob;
        struct cl_attr *attr = vvp_env_thread_attr(env);
        s64 atime;
        s64 mtime;
        s64 ctime;
        int rc = 0;

        ENTRY;

        ll_inode_size_lock(inode);

        /* Merge timestamps the most recently obtained from MDS with
         * timestamps obtained from OSTs.
         *
         * Do not overwrite atime of inode because it may be refreshed
         * by file_accessed() function. If the read was served by cache
         * data, there is no RPC to be sent so that atime may not be
         * transferred to OSTs at all. MDT only updates atime at close time
         * if it's at least 'mdd.*.atime_diff' older.
         * All in all, the atime in Lustre does not strictly comply with
         * POSIX. Solving this problem needs to send an RPC to MDT for each
         * read, this will hurt performance.
         */
        if (inode->i_atime.tv_sec < lli->lli_atime ||
            lli->lli_update_atime) {
                inode->i_atime.tv_sec = lli->lli_atime;
                lli->lli_update_atime = 0;
        }
        inode->i_mtime.tv_sec = lli->lli_mtime;
        inode->i_ctime.tv_sec = lli->lli_ctime;

        mtime = inode->i_mtime.tv_sec;
        atime = inode->i_atime.tv_sec;
        ctime = inode->i_ctime.tv_sec;

        cl_object_attr_lock(obj);
        if (OBD_FAIL_CHECK(OBD_FAIL_MDC_MERGE))
                rc = -EINVAL;
        else
                rc = cl_object_attr_get(env, obj, attr);
        cl_object_attr_unlock(obj);

        if (rc != 0)
                GOTO(out_size_unlock, rc = (rc == -ENODATA ? 0 : rc));

        if (atime < attr->cat_atime)
                atime = attr->cat_atime;

        if (ctime < attr->cat_ctime)
                ctime = attr->cat_ctime;

        if (mtime < attr->cat_mtime)
                mtime = attr->cat_mtime;

        CDEBUG(D_VFSTRACE, DFID" updating i_size %llu\n",
               PFID(&lli->lli_fid), attr->cat_size);

        i_size_write(inode, attr->cat_size);
        inode->i_blocks = attr->cat_blocks;

        inode->i_mtime.tv_sec = mtime;
        inode->i_atime.tv_sec = atime;
        inode->i_ctime.tv_sec = ctime;

out_size_unlock:
        ll_inode_size_unlock(inode);

        RETURN(rc);
}

/**
 * Set designated mirror for I/O.
 *
 * So far only read, write, and truncated can support to issue I/O to
 * designated mirror.
 */
void ll_io_set_mirror(struct cl_io *io, const struct file *file)
{
        struct ll_file_data *fd = LUSTRE_FPRIVATE(file);

        /* clear layout version for generic(non-resync) I/O in case it carries
         * stale layout version due to I/O restart */
        io->ci_layout_version = 0;

        /* FLR: disable non-delay for designated mirror I/O because obviously
         * only one mirror is available */
        if (fd->fd_designated_mirror > 0) {
                io->ci_ndelay = 0;
                io->ci_designated_mirror = fd->fd_designated_mirror;
                io->ci_layout_version = fd->fd_layout_version;
        }

        CDEBUG(D_VFSTRACE, "%s: desiginated mirror: %d\n",
               file->f_path.dentry->d_name.name, io->ci_designated_mirror);
}

static bool file_is_noatime(const struct file *file)
{
        const struct vfsmount *mnt = file->f_path.mnt;
        const struct inode *inode = file_inode((struct file *)file);

        /* Adapted from file_accessed() and touch_atime().*/
        if (file->f_flags & O_NOATIME)
                return true;

        if (inode->i_flags & S_NOATIME)
                return true;

        if (IS_NOATIME(inode))
                return true;

        if (mnt->mnt_flags & (MNT_NOATIME | MNT_READONLY))
                return true;

        if ((mnt->mnt_flags & MNT_NODIRATIME) && S_ISDIR(inode->i_mode))
                return true;

        if ((inode->i_sb->s_flags & MS_NODIRATIME) && S_ISDIR(inode->i_mode))
                return true;

        return false;
}

static void ll_io_init(struct cl_io *io, struct file *file, enum cl_io_type iot)
{
        struct inode *inode = file_inode(file);
        struct ll_file_data *fd  = LUSTRE_FPRIVATE(file);

        io->u.ci_rw.crw_nonblock = file->f_flags & O_NONBLOCK;
        io->ci_lock_no_expand = fd->ll_lock_no_expand;

        if (iot == CIT_WRITE) {
                io->u.ci_wr.wr_append = !!(file->f_flags & O_APPEND);
                io->u.ci_wr.wr_sync   = !!(file->f_flags & O_SYNC ||
                                           file->f_flags & O_DIRECT ||
                                           IS_SYNC(inode));
        }
        io->ci_obj = ll_i2info(inode)->lli_clob;
        io->ci_lockreq = CILR_MAYBE;
        if (ll_file_nolock(file)) {
                io->ci_lockreq = CILR_NEVER;
                io->ci_no_srvlock = 1;
        } else if (file->f_flags & O_APPEND) {
                io->ci_lockreq = CILR_MANDATORY;
        }
        io->ci_noatime = file_is_noatime(file);

        /* FLR: only use non-delay I/O for read as there is only one
         * avaliable mirror for write. */
        io->ci_ndelay = !(iot == CIT_WRITE);

        ll_io_set_mirror(io, file);
}

static void ll_heat_add(struct inode *inode, enum cl_io_type iot,
                        __u64 count)
{
        struct ll_inode_info *lli = ll_i2info(inode);
        struct ll_sb_info *sbi = ll_i2sbi(inode);
        enum obd_heat_type sample_type;
        enum obd_heat_type iobyte_type;
        __u64 now = ktime_get_real_seconds();

        if (!ll_sbi_has_file_heat(sbi) ||
            lli->lli_heat_flags & LU_HEAT_FLAG_OFF)
                return;

        if (iot == CIT_READ) {
                sample_type = OBD_HEAT_READSAMPLE;
                iobyte_type = OBD_HEAT_READBYTE;
        } else if (iot == CIT_WRITE) {
                sample_type = OBD_HEAT_WRITESAMPLE;
                iobyte_type = OBD_HEAT_WRITEBYTE;
        } else {
                return;
        }

        spin_lock(&lli->lli_heat_lock);
        obd_heat_add(&lli->lli_heat_instances[sample_type], now, 1,
                     sbi->ll_heat_decay_weight, sbi->ll_heat_period_second);
        obd_heat_add(&lli->lli_heat_instances[iobyte_type], now, count,
                     sbi->ll_heat_decay_weight, sbi->ll_heat_period_second);
        spin_unlock(&lli->lli_heat_lock);
}

static ssize_t
ll_file_io_generic(const struct lu_env *env, struct vvp_io_args *args,
                   struct file *file, enum cl_io_type iot,
                   loff_t *ppos, size_t count)
{
        struct vvp_io           *vio = vvp_env_io(env);
        struct inode            *inode = file_inode(file);
        struct ll_inode_info    *lli = ll_i2info(inode);
        struct ll_file_data     *fd  = LUSTRE_FPRIVATE(file);
        struct range_lock       range;
        struct cl_io            *io;
        ssize_t                 result = 0;
        int                     rc = 0;
        unsigned                retried = 0;
        bool                    restarted = false;

        ENTRY;

        CDEBUG(D_VFSTRACE, "%s: %s ppos: %llu, count: %zu\n",
                file_dentry(file)->d_name.name,
                iot == CIT_READ ? "read" : "write", *ppos, count);

restart:
        io = vvp_env_thread_io(env);
        ll_io_init(io, file, iot);
        io->ci_ndelay_tried = retried;

        if (cl_io_rw_init(env, io, iot, *ppos, count) == 0) {
                bool range_locked = false;

                if (file->f_flags & O_APPEND)
                        range_lock_init(&range, 0, LUSTRE_EOF);
                else
                        range_lock_init(&range, *ppos, *ppos + count - 1);

                vio->vui_fd  = LUSTRE_FPRIVATE(file);
                vio->vui_io_subtype = args->via_io_subtype;

                switch (vio->vui_io_subtype) {
                case IO_NORMAL:
                        vio->vui_iter = args->u.normal.via_iter;
                        vio->vui_iocb = args->u.normal.via_iocb;
                        /* Direct IO reads must also take range lock,
                         * or multiple reads will try to work on the same pages
                         * See LU-6227 for details. */
                        if (((iot == CIT_WRITE) ||
                            (iot == CIT_READ && (file->f_flags & O_DIRECT))) &&
                            !(vio->vui_fd->fd_flags & LL_FILE_GROUP_LOCKED)) {
                                CDEBUG(D_VFSTRACE, "Range lock "RL_FMT"\n",
                                       RL_PARA(&range));
                                rc = range_lock(&lli->lli_write_tree, &range);
                                if (rc < 0)
                                        GOTO(out, rc);

                                range_locked = true;
                        }
                        break;
                case IO_SPLICE:
                        vio->u.splice.vui_pipe = args->u.splice.via_pipe;
                        vio->u.splice.vui_flags = args->u.splice.via_flags;
                        break;
                default:
                        CERROR("unknown IO subtype %u\n", vio->vui_io_subtype);
                        LBUG();
                }

                ll_cl_add(file, env, io, LCC_RW);
                rc = cl_io_loop(env, io);
                ll_cl_remove(file, env);

                if (range_locked) {
                        CDEBUG(D_VFSTRACE, "Range unlock "RL_FMT"\n",
                               RL_PARA(&range));
                        range_unlock(&lli->lli_write_tree, &range);
                }
        } else {
                /* cl_io_rw_init() handled IO */
                rc = io->ci_result;
        }

        if (io->ci_nob > 0) {
                result += io->ci_nob;
                count  -= io->ci_nob;
                *ppos = io->u.ci_wr.wr.crw_pos; /* for splice */

                /* prepare IO restart */
                if (count > 0 && args->via_io_subtype == IO_NORMAL)
                        args->u.normal.via_iter = vio->vui_iter;
        }
out:
        cl_io_fini(env, io);

        CDEBUG(D_VFSTRACE,
               "%s: %d io complete with rc: %d, result: %zd, restart: %d\n",
               file->f_path.dentry->d_name.name,
               iot, rc, result, io->ci_need_restart);

        if ((rc == 0 || rc == -ENODATA) && count > 0 && io->ci_need_restart) {
                CDEBUG(D_VFSTRACE,
                       "%s: restart %s from %lld, count: %zu, ret: %zd, rc: %d\n",
                       file_dentry(file)->d_name.name,
                       iot == CIT_READ ? "read" : "write",
                       *ppos, count, result, rc);
                /* preserve the tried count for FLR */
                retried = io->ci_ndelay_tried;
                restarted = true;
                goto restart;
        }

        if (iot == CIT_READ) {
                if (result > 0)
                        ll_stats_ops_tally(ll_i2sbi(inode),
                                           LPROC_LL_READ_BYTES, result);
        } else if (iot == CIT_WRITE) {
                if (result > 0) {
                        ll_stats_ops_tally(ll_i2sbi(inode),
                                           LPROC_LL_WRITE_BYTES, result);
                        fd->fd_write_failed = false;
                } else if (result == 0 && rc == 0) {
                        rc = io->ci_result;
                        if (rc < 0)
                                fd->fd_write_failed = true;
                        else
                                fd->fd_write_failed = false;
                } else if (rc != -ERESTARTSYS) {
                        fd->fd_write_failed = true;
                }
        }

        CDEBUG(D_VFSTRACE, "iot: %d, result: %zd\n", iot, result);
        if (result > 0)
                ll_heat_add(inode, iot, result);

        RETURN(result > 0 ? result : rc);
}

/**
 * The purpose of fast read is to overcome per I/O overhead and improve IOPS
 * especially for small I/O.
 *
 * To serve a read request, CLIO has to create and initialize a cl_io and
 * then request DLM lock. This has turned out to have siginificant overhead
 * and affects the performance of small I/O dramatically.
 *
 * It's not necessary to create a cl_io for each I/O. Under the help of read
 * ahead, most of the pages being read are already in memory cache and we can
 * read those pages directly because if the pages exist, the corresponding DLM
 * lock must exist so that page content must be valid.
 *
 * In fast read implementation, the llite speculatively finds and reads pages
 * in memory cache. There are three scenarios for fast read:
 *   - If the page exists and is uptodate, kernel VM will provide the data and
 *     CLIO won't be intervened;
 *   - If the page was brought into memory by read ahead, it will be exported
 *     and read ahead parameters will be updated;
 *   - Otherwise the page is not in memory, we can't do fast read. Therefore,
 *     it will go back and invoke normal read, i.e., a cl_io will be created
 *     and DLM lock will be requested.
 *
 * POSIX compliance: posix standard states that read is intended to be atomic.
 * Lustre read implementation is in line with Linux kernel read implementation
 * and neither of them complies with POSIX standard in this matter. Fast read
 * doesn't make the situation worse on single node but it may interleave write
 * results from multiple nodes due to short read handling in ll_file_aio_read().
 *
 * \param env - lu_env
 * \param iocb - kiocb from kernel
 * \param iter - user space buffers where the data will be copied
 *
 * \retval - number of bytes have been read, or error code if error occurred.
 */
static ssize_t
ll_do_fast_read(struct kiocb *iocb, struct iov_iter *iter)
{
        ssize_t result;

        if (!ll_sbi_has_fast_read(ll_i2sbi(file_inode(iocb->ki_filp))))
                return 0;

        /* NB: we can't do direct IO for fast read because it will need a lock
         * to make IO engine happy. */
        if (iocb->ki_filp->f_flags & O_DIRECT)
                return 0;

        result = generic_file_read_iter(iocb, iter);

        /* If the first page is not in cache, generic_file_aio_read() will be
         * returned with -ENODATA.
         * See corresponding code in ll_readpage(). */
        if (result == -ENODATA)
                result = 0;

        if (result > 0) {
                ll_heat_add(file_inode(iocb->ki_filp), CIT_READ, result);
                ll_stats_ops_tally(ll_i2sbi(file_inode(iocb->ki_filp)),
                                LPROC_LL_READ_BYTES, result);
        }

        return result;
}

/*
 * Read from a file (through the page cache).
 */
static ssize_t ll_file_read_iter(struct kiocb *iocb, struct iov_iter *to)
{
        struct lu_env *env;
        struct vvp_io_args *args;
        ssize_t result;
        ssize_t rc2;
        __u16 refcheck;
        bool cached;

        /**
         * Currently when PCC read failed, we do not fall back to the
         * normal read path, just return the error.
         * The resaon is that: for RW-PCC, the file data may be modified
         * in the PCC and inconsistent with the data on OSTs (or file
         * data has been removed from the Lustre file system), at this
         * time, fallback to the normal read path may read the wrong
         * data.
         * TODO: for RO-PCC (readonly PCC), fall back to normal read
         * path: read data from data copy on OSTs.
         */
        result = pcc_file_read_iter(iocb, to, &cached);
        if (cached)
                return result;

        ll_ras_enter(iocb->ki_filp);

        result = ll_do_fast_read(iocb, to);
        if (result < 0 || iov_iter_count(to) == 0)
                GOTO(out, result);

        env = cl_env_get(&refcheck);
        if (IS_ERR(env))
                return PTR_ERR(env);

        args = ll_env_args(env, IO_NORMAL);
        args->u.normal.via_iter = to;
        args->u.normal.via_iocb = iocb;

        rc2 = ll_file_io_generic(env, args, iocb->ki_filp, CIT_READ,
                                 &iocb->ki_pos, iov_iter_count(to));
        if (rc2 > 0)
                result += rc2;
        else if (result == 0)
                result = rc2;

        cl_env_put(env, &refcheck);
out:
        return result;
}

/**
 * Similar trick to ll_do_fast_read, this improves write speed for tiny writes.
 * If a page is already in the page cache and dirty (and some other things -
 * See ll_tiny_write_begin for the instantiation of these rules), then we can
 * write to it without doing a full I/O, because Lustre already knows about it
 * and will write it out.  This saves a lot of processing time.
 *
 * All writes here are within one page, so exclusion is handled by the page
 * lock on the vm page.  We do not do tiny writes for writes which touch
 * multiple pages because it's very unlikely multiple sequential pages are
 * are already dirty.
 *
 * We limit these to < PAGE_SIZE because PAGE_SIZE writes are relatively common
 * and are unlikely to be to already dirty pages.
 *
 * Attribute updates are important here, we do them in ll_tiny_write_end.
 */
static ssize_t ll_do_tiny_write(struct kiocb *iocb, struct iov_iter *iter)
{
        ssize_t count = iov_iter_count(iter);
        struct  file *file = iocb->ki_filp;
        struct  inode *inode = file_inode(file);
        bool    lock_inode = !IS_NOSEC(inode);
        ssize_t result = 0;

        ENTRY;

        /* Restrict writes to single page and < PAGE_SIZE.  See comment at top
         * of function for why.
         */
        if (count >= PAGE_SIZE ||
            (iocb->ki_pos & (PAGE_SIZE-1)) + count > PAGE_SIZE)
                RETURN(0);

        if (unlikely(lock_inode))
                inode_lock(inode);
        result = __generic_file_write_iter(iocb, iter);

        if (unlikely(lock_inode))
                inode_unlock(inode);

        /* If the page is not already dirty, ll_tiny_write_begin returns
         * -ENODATA.  We continue on to normal write.
         */
        if (result == -ENODATA)
                result = 0;

        if (result > 0) {
                ll_heat_add(inode, CIT_WRITE, result);
                ll_stats_ops_tally(ll_i2sbi(inode), LPROC_LL_WRITE_BYTES,
                                   result);
                ll_file_set_flag(ll_i2info(inode), LLIF_DATA_MODIFIED);
        }

        CDEBUG(D_VFSTRACE, "result: %zu, original count %zu\n", result, count);

        RETURN(result);
}

/*
 * Write to a file (through the page cache).
 */
static ssize_t ll_file_write_iter(struct kiocb *iocb, struct iov_iter *from)
{
        struct vvp_io_args *args;
        struct lu_env *env;
        ssize_t rc_tiny = 0, rc_normal;
        __u16 refcheck;
        bool cached;
        int result;

        ENTRY;

        /**
         * When PCC write failed, we usually do not fall back to the normal
         * write path, just return the error. But there is a special case when
         * returned error code is -ENOSPC due to running out of space on PCC HSM
         * bakcend. At this time, it will fall back to normal I/O path and
         * retry the I/O. As the file is in HSM released state, it will restore
         * the file data to OSTs first and redo the write again. And the
         * restore process will revoke the layout lock and detach the file
         * from PCC cache automatically.
         */
        result = pcc_file_write_iter(iocb, from, &cached);
        if (cached && result != -ENOSPC && result != -EDQUOT)
                return result;

        /* NB: we can't do direct IO for tiny writes because they use the page
         * cache, we can't do sync writes because tiny writes can't flush
         * pages, and we can't do append writes because we can't guarantee the
         * required DLM locks are held to protect file size.
         */
        if (ll_sbi_has_tiny_write(ll_i2sbi(file_inode(iocb->ki_filp))) &&
            !(iocb->ki_filp->f_flags & (O_DIRECT | O_SYNC | O_APPEND)))
                rc_tiny = ll_do_tiny_write(iocb, from);

        /* In case of error, go on and try normal write - Only stop if tiny
         * write completed I/O.
         */
        if (iov_iter_count(from) == 0)
                GOTO(out, rc_normal = rc_tiny);

        env = cl_env_get(&refcheck);
        if (IS_ERR(env))
                return PTR_ERR(env);

        args = ll_env_args(env, IO_NORMAL);
        args->u.normal.via_iter = from;
        args->u.normal.via_iocb = iocb;

        rc_normal = ll_file_io_generic(env, args, iocb->ki_filp, CIT_WRITE,
                                    &iocb->ki_pos, iov_iter_count(from));

        /* On success, combine bytes written. */
        if (rc_tiny >= 0 && rc_normal > 0)
                rc_normal += rc_tiny;
        /* On error, only return error from normal write if tiny write did not
         * write any bytes.  Otherwise return bytes written by tiny write.
         */
        else if (rc_tiny > 0)
                rc_normal = rc_tiny;

        cl_env_put(env, &refcheck);
out:
        RETURN(rc_normal);
}

#ifndef HAVE_FILE_OPERATIONS_READ_WRITE_ITER
/*
 * XXX: exact copy from kernel code (__generic_file_aio_write_nolock)
 */
static int ll_file_get_iov_count(const struct iovec *iov,
                                 unsigned long *nr_segs, size_t *count)
{
        size_t cnt = 0;
        unsigned long seg;

        for (seg = 0; seg < *nr_segs; seg++) {
                const struct iovec *iv = &iov[seg];

                /*
                 * If any segment has a negative length, or the cumulative
                 * length ever wraps negative then return -EINVAL.
                 */
                cnt += iv->iov_len;
                if (unlikely((ssize_t)(cnt|iv->iov_len) < 0))
                        return -EINVAL;
                if (access_ok(VERIFY_READ, iv->iov_base, iv->iov_len))
                        continue;
                if (seg == 0)
                        return -EFAULT;
                *nr_segs = seg;
                cnt -= iv->iov_len;     /* This segment is no good */
                break;
        }
        *count = cnt;
        return 0;
}

static ssize_t ll_file_aio_read(struct kiocb *iocb, const struct iovec *iov,
                                unsigned long nr_segs, loff_t pos)
{
        struct iov_iter to;
        size_t iov_count;
        ssize_t result;
        ENTRY;

        result = ll_file_get_iov_count(iov, &nr_segs, &iov_count);
        if (result)
                RETURN(result);

# ifdef HAVE_IOV_ITER_INIT_DIRECTION
        iov_iter_init(&to, READ, iov, nr_segs, iov_count);
# else /* !HAVE_IOV_ITER_INIT_DIRECTION */
        iov_iter_init(&to, iov, nr_segs, iov_count, 0);
# endif /* HAVE_IOV_ITER_INIT_DIRECTION */

        result = ll_file_read_iter(iocb, &to);

        RETURN(result);
}

static ssize_t ll_file_read(struct file *file, char __user *buf, size_t count,
                            loff_t *ppos)
{
        struct iovec   iov = { .iov_base = buf, .iov_len = count };
        struct kiocb   kiocb;
        ssize_t        result;
        ENTRY;

        init_sync_kiocb(&kiocb, file);
        kiocb.ki_pos = *ppos;
#ifdef HAVE_KIOCB_KI_LEFT
        kiocb.ki_left = count;
#elif defined(HAVE_KI_NBYTES)
        kiocb.i_nbytes = count;
#endif

        result = ll_file_aio_read(&kiocb, &iov, 1, kiocb.ki_pos);
        *ppos = kiocb.ki_pos;

        RETURN(result);
}

/*
 * Write to a file (through the page cache).
 * AIO stuff
 */
static ssize_t ll_file_aio_write(struct kiocb *iocb, const struct iovec *iov,
                                 unsigned long nr_segs, loff_t pos)
{
        struct iov_iter from;
        size_t iov_count;
        ssize_t result;
        ENTRY;

        result = ll_file_get_iov_count(iov, &nr_segs, &iov_count);
        if (result)
                RETURN(result);

# ifdef HAVE_IOV_ITER_INIT_DIRECTION
        iov_iter_init(&from, WRITE, iov, nr_segs, iov_count);
# else /* !HAVE_IOV_ITER_INIT_DIRECTION */
        iov_iter_init(&from, iov, nr_segs, iov_count, 0);
# endif /* HAVE_IOV_ITER_INIT_DIRECTION */

        result = ll_file_write_iter(iocb, &from);

        RETURN(result);
}

static ssize_t ll_file_write(struct file *file, const char __user *buf,
                             size_t count, loff_t *ppos)
{
        struct iovec   iov = { .iov_base = (void __user *)buf,
                               .iov_len = count };
        struct kiocb   kiocb;
        ssize_t        result;

        ENTRY;

        init_sync_kiocb(&kiocb, file);
        kiocb.ki_pos = *ppos;
#ifdef HAVE_KIOCB_KI_LEFT
        kiocb.ki_left = count;
#elif defined(HAVE_KI_NBYTES)
        kiocb.ki_nbytes = count;
#endif

        result = ll_file_aio_write(&kiocb, &iov, 1, kiocb.ki_pos);
        *ppos = kiocb.ki_pos;

        RETURN(result);
}
#endif /* !HAVE_FILE_OPERATIONS_READ_WRITE_ITER */

/*
 * Send file content (through pagecache) somewhere with helper
 */
static ssize_t ll_file_splice_read(struct file *in_file, loff_t *ppos,
                                   struct pipe_inode_info *pipe, size_t count,
                                   unsigned int flags)
{
        struct lu_env *env;
        struct vvp_io_args *args;
        ssize_t result;
        __u16 refcheck;
        bool cached;

        ENTRY;

        result = pcc_file_splice_read(in_file, ppos, pipe,
                                      count, flags, &cached);
        if (cached)
                RETURN(result);

        ll_ras_enter(in_file);

        env = cl_env_get(&refcheck);
        if (IS_ERR(env))
                RETURN(PTR_ERR(env));

        args = ll_env_args(env, IO_SPLICE);
        args->u.splice.via_pipe = pipe;
        args->u.splice.via_flags = flags;

        result = ll_file_io_generic(env, args, in_file, CIT_READ, ppos, count);
        cl_env_put(env, &refcheck);
        RETURN(result);
}

int ll_lov_setstripe_ea_info(struct inode *inode, struct dentry *dentry,
                             __u64 flags, struct lov_user_md *lum, int lum_size)
{
        struct lookup_intent oit = {
                .it_op = IT_OPEN,
                .it_flags = flags | MDS_OPEN_BY_FID,
        };
        int rc;
        ENTRY;

        ll_inode_size_lock(inode);
        rc = ll_intent_file_open(dentry, lum, lum_size, &oit);
        if (rc < 0)
                GOTO(out_unlock, rc);

        ll_release_openhandle(dentry, &oit);

out_unlock:
        ll_inode_size_unlock(inode);
        ll_intent_release(&oit);

        RETURN(rc);
}

int ll_lov_getstripe_ea_info(struct inode *inode, const char *filename,
                             struct lov_mds_md **lmmp, int *lmm_size,
                             struct ptlrpc_request **request)
{
        struct ll_sb_info *sbi = ll_i2sbi(inode);
        struct mdt_body  *body;
        struct lov_mds_md *lmm = NULL;
        struct ptlrpc_request *req = NULL;
        struct md_op_data *op_data;
        int rc, lmmsize;

        rc = ll_get_default_mdsize(sbi, &lmmsize);
        if (rc)
                RETURN(rc);

        op_data = ll_prep_md_op_data(NULL, inode, NULL, filename,
                                     strlen(filename), lmmsize,
                                     LUSTRE_OPC_ANY, NULL);
        if (IS_ERR(op_data))
                RETURN(PTR_ERR(op_data));

        op_data->op_valid = OBD_MD_FLEASIZE | OBD_MD_FLDIREA;
        rc = md_getattr_name(sbi->ll_md_exp, op_data, &req);
        ll_finish_md_op_data(op_data);
        if (rc < 0) {
                CDEBUG(D_INFO, "md_getattr_name failed "
                       "on %s: rc %d\n", filename, rc);
                GOTO(out, rc);
        }

        body = req_capsule_server_get(&req->rq_pill, &RMF_MDT_BODY);
        LASSERT(body != NULL); /* checked by mdc_getattr_name */

        lmmsize = body->mbo_eadatasize;

        if (!(body->mbo_valid & (OBD_MD_FLEASIZE | OBD_MD_FLDIREA)) ||
                        lmmsize == 0) {
                GOTO(out, rc = -ENODATA);
        }

        lmm = req_capsule_server_sized_get(&req->rq_pill, &RMF_MDT_MD, lmmsize);
        LASSERT(lmm != NULL);

        if (lmm->lmm_magic != cpu_to_le32(LOV_MAGIC_V1) &&
            lmm->lmm_magic != cpu_to_le32(LOV_MAGIC_V3) &&
            lmm->lmm_magic != cpu_to_le32(LOV_MAGIC_COMP_V1) &&
            lmm->lmm_magic != cpu_to_le32(LOV_MAGIC_FOREIGN))
                GOTO(out, rc = -EPROTO);

        /*
         * This is coming from the MDS, so is probably in
         * little endian.  We convert it to host endian before
         * passing it to userspace.
         */
        if (LOV_MAGIC != cpu_to_le32(LOV_MAGIC)) {
                int stripe_count;

                if (lmm->lmm_magic == cpu_to_le32(LOV_MAGIC_V1) ||
                    lmm->lmm_magic == cpu_to_le32(LOV_MAGIC_V3)) {
                        stripe_count = le16_to_cpu(lmm->lmm_stripe_count);
                        if (le32_to_cpu(lmm->lmm_pattern) &
                            LOV_PATTERN_F_RELEASED)
                                stripe_count = 0;
                }

                /* if function called for directory - we should
                 * avoid swab not existent lsm objects */
                if (lmm->lmm_magic == cpu_to_le32(LOV_MAGIC_V1)) {
                        lustre_swab_lov_user_md_v1(
                                        (struct lov_user_md_v1 *)lmm);
                        if (S_ISREG(body->mbo_mode))
                                lustre_swab_lov_user_md_objects(
                                    ((struct lov_user_md_v1 *)lmm)->lmm_objects,
                                    stripe_count);
                } else if (lmm->lmm_magic == cpu_to_le32(LOV_MAGIC_V3)) {
                        lustre_swab_lov_user_md_v3(
                                        (struct lov_user_md_v3 *)lmm);
                        if (S_ISREG(body->mbo_mode))
                                lustre_swab_lov_user_md_objects(
                                    ((struct lov_user_md_v3 *)lmm)->lmm_objects,
                                    stripe_count);
                } else if (lmm->lmm_magic ==
                           cpu_to_le32(LOV_MAGIC_COMP_V1)) {
                        lustre_swab_lov_comp_md_v1(
                                        (struct lov_comp_md_v1 *)lmm);
                } else if (lmm->lmm_magic ==
                           cpu_to_le32(LOV_MAGIC_FOREIGN)) {
                        struct lov_foreign_md *lfm;

                        lfm = (struct lov_foreign_md *)lmm;
                        __swab32s(&lfm->lfm_magic);
                        __swab32s(&lfm->lfm_length);
                        __swab32s(&lfm->lfm_type);
                        __swab32s(&lfm->lfm_flags);
                }
        }

out:
        *lmmp = lmm;
        *lmm_size = lmmsize;
        *request = req;
        return rc;
}

static int ll_lov_setea(struct inode *inode, struct file *file,
                        void __user *arg)
{
        __u64                    flags = MDS_OPEN_HAS_OBJS | FMODE_WRITE;
        struct lov_user_md      *lump;
        int                      lum_size = sizeof(struct lov_user_md) +
                                            sizeof(struct lov_user_ost_data);
        int                      rc;
        ENTRY;

        if (!cfs_capable(CFS_CAP_SYS_ADMIN))
                RETURN(-EPERM);

        OBD_ALLOC_LARGE(lump, lum_size);
        if (lump == NULL)
                RETURN(-ENOMEM);

        if (copy_from_user(lump, arg, lum_size))
                GOTO(out_lump, rc = -EFAULT);

        rc = ll_lov_setstripe_ea_info(inode, file_dentry(file), flags, lump,
                                      lum_size);
        cl_lov_delay_create_clear(&file->f_flags);

out_lump:
        OBD_FREE_LARGE(lump, lum_size);
        RETURN(rc);
}

static int ll_file_getstripe(struct inode *inode, void __user *lum, size_t size)
{
        struct lu_env   *env;
        __u16           refcheck;
        int             rc;
        ENTRY;

        env = cl_env_get(&refcheck);
        if (IS_ERR(env))
                RETURN(PTR_ERR(env));

        rc = cl_object_getstripe(env, ll_i2info(inode)->lli_clob, lum, size);
        cl_env_put(env, &refcheck);
        RETURN(rc);
}

static int ll_lov_setstripe(struct inode *inode, struct file *file,
                            void __user *arg)
{
        struct lov_user_md __user *lum = (struct lov_user_md __user *)arg;
        struct lov_user_md        *klum;
        int                        lum_size, rc;
        __u64                      flags = FMODE_WRITE;
        ENTRY;

        rc = ll_copy_user_md(lum, &klum);
        if (rc < 0)
                RETURN(rc);

        lum_size = rc;
        rc = ll_lov_setstripe_ea_info(inode, file_dentry(file), flags, klum,
                                      lum_size);
        if (!rc) {
                __u32 gen;

                rc = put_user(0, &lum->lmm_stripe_count);
                if (rc)
                        GOTO(out, rc);

                rc = ll_layout_refresh(inode, &gen);
                if (rc)
                        GOTO(out, rc);

                rc = ll_file_getstripe(inode, arg, lum_size);
        }
        cl_lov_delay_create_clear(&file->f_flags);

out:
        OBD_FREE(klum, lum_size);
        RETURN(rc);
}

static int
ll_get_grouplock(struct inode *inode, struct file *file, unsigned long arg)
{
        struct ll_inode_info *lli = ll_i2info(inode);
        struct cl_object *obj = lli->lli_clob;
        struct ll_file_data *fd = LUSTRE_FPRIVATE(file);
        struct ll_grouplock grouplock;
        int rc;
        ENTRY;

        if (arg == 0) {
                CWARN("group id for group lock must not be 0\n");
                RETURN(-EINVAL);
        }

        if (ll_file_nolock(file))
                RETURN(-EOPNOTSUPP);

        spin_lock(&lli->lli_lock);
        if (fd->fd_flags & LL_FILE_GROUP_LOCKED) {
                CWARN("group lock already existed with gid %lu\n",
                      fd->fd_grouplock.lg_gid);
                spin_unlock(&lli->lli_lock);
                RETURN(-EINVAL);
        }
        LASSERT(fd->fd_grouplock.lg_lock == NULL);
        spin_unlock(&lli->lli_lock);

        /**
         * XXX: group lock needs to protect all OST objects while PFL
         * can add new OST objects during the IO, so we'd instantiate
         * all OST objects before getting its group lock.
         */
        if (obj) {
                struct lu_env *env;
                __u16 refcheck;
                struct cl_layout cl = {
                        .cl_is_composite = false,
                };
                struct lu_extent ext = {
                        .e_start = 0,
                        .e_end = OBD_OBJECT_EOF,
                };

                env = cl_env_get(&refcheck);
                if (IS_ERR(env))
                        RETURN(PTR_ERR(env));

                rc = cl_object_layout_get(env, obj, &cl);
                if (!rc && cl.cl_is_composite)
                        rc = ll_layout_write_intent(inode, LAYOUT_INTENT_WRITE,
                                                    &ext);

                cl_env_put(env, &refcheck);
                if (rc)
                        RETURN(rc);
        }

        rc = cl_get_grouplock(ll_i2info(inode)->lli_clob,
                              arg, (file->f_flags & O_NONBLOCK), &grouplock);
        if (rc)
                RETURN(rc);

        spin_lock(&lli->lli_lock);
        if (fd->fd_flags & LL_FILE_GROUP_LOCKED) {
                spin_unlock(&lli->lli_lock);
                CERROR("another thread just won the race\n");
                cl_put_grouplock(&grouplock);
                RETURN(-EINVAL);
        }

        fd->fd_flags |= LL_FILE_GROUP_LOCKED;
        fd->fd_grouplock = grouplock;
        spin_unlock(&lli->lli_lock);

        CDEBUG(D_INFO, "group lock %lu obtained\n", arg);
        RETURN(0);
}

static int ll_put_grouplock(struct inode *inode, struct file *file,
                            unsigned long arg)
{
        struct ll_inode_info   *lli = ll_i2info(inode);
        struct ll_file_data    *fd = LUSTRE_FPRIVATE(file);
        struct ll_grouplock     grouplock;
        ENTRY;

        spin_lock(&lli->lli_lock);
        if (!(fd->fd_flags & LL_FILE_GROUP_LOCKED)) {
                spin_unlock(&lli->lli_lock);
                CWARN("no group lock held\n");
                RETURN(-EINVAL);
        }

        LASSERT(fd->fd_grouplock.lg_lock != NULL);

        if (fd->fd_grouplock.lg_gid != arg) {
                CWARN("group lock %lu doesn't match current id %lu\n",
                      arg, fd->fd_grouplock.lg_gid);
                spin_unlock(&lli->lli_lock);
                RETURN(-EINVAL);
        }

        grouplock = fd->fd_grouplock;
        memset(&fd->fd_grouplock, 0, sizeof(fd->fd_grouplock));
        fd->fd_flags &= ~LL_FILE_GROUP_LOCKED;
        spin_unlock(&lli->lli_lock);

        cl_put_grouplock(&grouplock);
        CDEBUG(D_INFO, "group lock %lu released\n", arg);
        RETURN(0);
}

/**
 * Close inode open handle
 *
 * \param dentry [in]     dentry which contains the inode
 * \param it     [in,out] intent which contains open info and result
 *
 * \retval 0     success
 * \retval <0    failure
 */
int ll_release_openhandle(struct dentry *dentry, struct lookup_intent *it)
{
        struct inode *inode = dentry->d_inode;
        struct obd_client_handle *och;
        int rc;
        ENTRY;

        LASSERT(inode);

        /* Root ? Do nothing. */
        if (dentry->d_inode->i_sb->s_root == dentry)
                RETURN(0);

        /* No open handle to close? Move away */
        if (!it_disposition(it, DISP_OPEN_OPEN))
                RETURN(0);

        LASSERT(it_open_error(DISP_OPEN_OPEN, it) == 0);

        OBD_ALLOC(och, sizeof(*och));
        if (!och)
                GOTO(out, rc = -ENOMEM);

        ll_och_fill(ll_i2sbi(inode)->ll_md_exp, it, och);

        rc = ll_close_inode_openhandle(inode, och, 0, NULL);
out:
        /* this one is in place of ll_file_open */
        if (it_disposition(it, DISP_ENQ_OPEN_REF)) {
                ptlrpc_req_finished(it->it_request);
                it_clear_disposition(it, DISP_ENQ_OPEN_REF);
        }
        RETURN(rc);
}

/**
 * Get size for inode for which FIEMAP mapping is requested.
 * Make the FIEMAP get_info call and returns the result.
 * \param fiemap        kernel buffer to hold extens
 * \param num_bytes     kernel buffer size
 */
static int ll_do_fiemap(struct inode *inode, struct fiemap *fiemap,
                        size_t num_bytes)
{
        struct lu_env                   *env;
        __u16                           refcheck;
        int                             rc = 0;
        struct ll_fiemap_info_key       fmkey = { .lfik_name = KEY_FIEMAP, };
        ENTRY;

        /* Checks for fiemap flags */
        if (fiemap->fm_flags & ~LUSTRE_FIEMAP_FLAGS_COMPAT) {
                fiemap->fm_flags &= ~LUSTRE_FIEMAP_FLAGS_COMPAT;
                return -EBADR;
        }

        /* Check for FIEMAP_FLAG_SYNC */
        if (fiemap->fm_flags & FIEMAP_FLAG_SYNC) {
                rc = filemap_fdatawrite(inode->i_mapping);
                if (rc)
                        return rc;
        }

        env = cl_env_get(&refcheck);
        if (IS_ERR(env))
                RETURN(PTR_ERR(env));

        if (i_size_read(inode) == 0) {
                rc = ll_glimpse_size(inode);
                if (rc)
                        GOTO(out, rc);
        }

        fmkey.lfik_oa.o_valid = OBD_MD_FLID | OBD_MD_FLGROUP;
        obdo_from_inode(&fmkey.lfik_oa, inode, OBD_MD_FLSIZE);
        obdo_set_parent_fid(&fmkey.lfik_oa, &ll_i2info(inode)->lli_fid);

        /* If filesize is 0, then there would be no objects for mapping */
        if (fmkey.lfik_oa.o_size == 0) {
                fiemap->fm_mapped_extents = 0;
                GOTO(out, rc = 0);
        }

        fmkey.lfik_fiemap = *fiemap;

        rc = cl_object_fiemap(env, ll_i2info(inode)->lli_clob,
                              &fmkey, fiemap, &num_bytes);
out:
        cl_env_put(env, &refcheck);
        RETURN(rc);
}

int ll_fid2path(struct inode *inode, void __user *arg)
{
        struct obd_export       *exp = ll_i2mdexp(inode);
        const struct getinfo_fid2path __user *gfin = arg;
        __u32                    pathlen;
        struct getinfo_fid2path *gfout;
        size_t                   outsize;
        int                      rc;

        ENTRY;

        if (!cfs_capable(CFS_CAP_DAC_READ_SEARCH) &&
            !(ll_i2sbi(inode)->ll_flags & LL_SBI_USER_FID2PATH))
                RETURN(-EPERM);

        /* Only need to get the buflen */
        if (get_user(pathlen, &gfin->gf_pathlen))
                RETURN(-EFAULT);

        if (pathlen > PATH_MAX)
                RETURN(-EINVAL);

        outsize = sizeof(*gfout) + pathlen;
        OBD_ALLOC(gfout, outsize);
        if (gfout == NULL)
                RETURN(-ENOMEM);

        if (copy_from_user(gfout, arg, sizeof(*gfout)))
                GOTO(gf_free, rc = -EFAULT);
        /* append root FID after gfout to let MDT know the root FID so that it
         * can lookup the correct path, this is mainly for fileset.
         * old server without fileset mount support will ignore this. */
        *gfout->gf_u.gf_root_fid = *ll_inode2fid(inode);

        /* Call mdc_iocontrol */
        rc = obd_iocontrol(OBD_IOC_FID2PATH, exp, outsize, gfout, NULL);
        if (rc != 0)
                GOTO(gf_free, rc);

        if (copy_to_user(arg, gfout, outsize))
                rc = -EFAULT;

gf_free:
        OBD_FREE(gfout, outsize);
        RETURN(rc);
}

static int
ll_ioc_data_version(struct inode *inode, struct ioc_data_version *ioc)
{
        struct cl_object *obj = ll_i2info(inode)->lli_clob;
        struct lu_env *env;
        struct cl_io *io;
        __u16  refcheck;
        int result;

        ENTRY;

        ioc->idv_version = 0;
        ioc->idv_layout_version = UINT_MAX;

        /* If no file object initialized, we consider its version is 0. */
        if (obj == NULL)
                RETURN(0);

        env = cl_env_get(&refcheck);
        if (IS_ERR(env))
                RETURN(PTR_ERR(env));

        io = vvp_env_thread_io(env);
        io->ci_obj = obj;
        io->u.ci_data_version.dv_data_version = 0;
        io->u.ci_data_version.dv_layout_version = UINT_MAX;
        io->u.ci_data_version.dv_flags = ioc->idv_flags;

restart:
        if (cl_io_init(env, io, CIT_DATA_VERSION, io->ci_obj) == 0)
                result = cl_io_loop(env, io);
        else
                result = io->ci_result;

        ioc->idv_version = io->u.ci_data_version.dv_data_version;
        ioc->idv_layout_version = io->u.ci_data_version.dv_layout_version;

        cl_io_fini(env, io);

        if (unlikely(io->ci_need_restart))
                goto restart;

        cl_env_put(env, &refcheck);

        RETURN(result);
}

/*
 * Read the data_version for inode.
 *
 * This value is computed using stripe object version on OST.
 * Version is computed using server side locking.
 *
 * @param flags if do sync on the OST side;
 *              0: no sync
 *              LL_DV_RD_FLUSH: flush dirty pages, LCK_PR on OSTs
 *              LL_DV_WR_FLUSH: drop all caching pages, LCK_PW on OSTs
 */
int ll_data_version(struct inode *inode, __u64 *data_version, int flags)
{
        struct ioc_data_version ioc = { .idv_flags = flags };
        int rc;

        rc = ll_ioc_data_version(inode, &ioc);
        if (!rc)
                *data_version = ioc.idv_version;

        return rc;
}

/*
 * Trigger a HSM release request for the provided inode.
 */
int ll_hsm_release(struct inode *inode)
{
        struct lu_env *env;
        struct obd_client_handle *och = NULL;
        __u64 data_version = 0;
        int rc;
        __u16 refcheck;
        ENTRY;

        CDEBUG(D_INODE, "%s: Releasing file "DFID".\n",
               ll_i2sbi(inode)->ll_fsname,
               PFID(&ll_i2info(inode)->lli_fid));

        och = ll_lease_open(inode, NULL, FMODE_WRITE, MDS_OPEN_RELEASE);
        if (IS_ERR(och))
                GOTO(out, rc = PTR_ERR(och));

        /* Grab latest data_version and [am]time values */
        rc = ll_data_version(inode, &data_version, LL_DV_WR_FLUSH);
        if (rc != 0)
                GOTO(out, rc);

        env = cl_env_get(&refcheck);
        if (IS_ERR(env))
                GOTO(out, rc = PTR_ERR(env));

        rc = ll_merge_attr(env, inode);
        cl_env_put(env, &refcheck);

        /* If error happen, we have the wrong size for a file.
         * Don't release it.
         */
        if (rc != 0)
                GOTO(out, rc);

        /* Release the file.
         * NB: lease lock handle is released in mdc_hsm_release_pack() because
         * we still need it to pack l_remote_handle to MDT. */
        rc = ll_close_inode_openhandle(inode, och, MDS_HSM_RELEASE,
                                       &data_version);
        och = NULL;

        EXIT;
out:
        if (och != NULL && !IS_ERR(och)) /* close the file */
                ll_lease_close(och, inode, NULL);

        return rc;
}

struct ll_swap_stack {
        __u64                    dv1;
        __u64                    dv2;
        struct inode            *inode1;
        struct inode            *inode2;
        bool                     check_dv1;
        bool                     check_dv2;
};

static int ll_swap_layouts(struct file *file1, struct file *file2,
                           struct lustre_swap_layouts *lsl)
{
        struct mdc_swap_layouts  msl;
        struct md_op_data       *op_data;
        __u32                    gid;
        __u64                    dv;
        struct ll_swap_stack    *llss = NULL;
        int                      rc;

        OBD_ALLOC_PTR(llss);
        if (llss == NULL)
                RETURN(-ENOMEM);

        llss->inode1 = file_inode(file1);
        llss->inode2 = file_inode(file2);

        rc = ll_check_swap_layouts_validity(llss->inode1, llss->inode2);
        if (rc < 0)
                GOTO(free, rc);

        /* we use 2 bool because it is easier to swap than 2 bits */
        if (lsl->sl_flags & SWAP_LAYOUTS_CHECK_DV1)
                llss->check_dv1 = true;

        if (lsl->sl_flags & SWAP_LAYOUTS_CHECK_DV2)
                llss->check_dv2 = true;

        /* we cannot use lsl->sl_dvX directly because we may swap them */
        llss->dv1 = lsl->sl_dv1;
        llss->dv2 = lsl->sl_dv2;

        rc = lu_fid_cmp(ll_inode2fid(llss->inode1), ll_inode2fid(llss->inode2));
        if (rc == 0) /* same file, done! */
                GOTO(free, rc);

        if (rc < 0) { /* sequentialize it */
                swap(llss->inode1, llss->inode2);
                swap(file1, file2);
                swap(llss->dv1, llss->dv2);
                swap(llss->check_dv1, llss->check_dv2);
        }

        gid = lsl->sl_gid;
        if (gid != 0) { /* application asks to flush dirty cache */
                rc = ll_get_grouplock(llss->inode1, file1, gid);
                if (rc < 0)
                        GOTO(free, rc);

                rc = ll_get_grouplock(llss->inode2, file2, gid);
                if (rc < 0) {
                        ll_put_grouplock(llss->inode1, file1, gid);
                        GOTO(free, rc);
                }
        }

        /* ultimate check, before swaping the layouts we check if
         * dataversion has changed (if requested) */
        if (llss->check_dv1) {
                rc = ll_data_version(llss->inode1, &dv, 0);
                if (rc)
                        GOTO(putgl, rc);
                if (dv != llss->dv1)
                        GOTO(putgl, rc = -EAGAIN);
        }

        if (llss->check_dv2) {
                rc = ll_data_version(llss->inode2, &dv, 0);
                if (rc)
                        GOTO(putgl, rc);
                if (dv != llss->dv2)
                        GOTO(putgl, rc = -EAGAIN);
        }

        /* struct md_op_data is used to send the swap args to the mdt
         * only flags is missing, so we use struct mdc_swap_layouts
         * through the md_op_data->op_data */
        /* flags from user space have to be converted before they are send to
         * server, no flag is sent today, they are only used on the client */
        msl.msl_flags = 0;
        rc = -ENOMEM;
        op_data = ll_prep_md_op_data(NULL, llss->inode1, llss->inode2, NULL, 0,
                                     0, LUSTRE_OPC_ANY, &msl);
        if (IS_ERR(op_data))
                GOTO(free, rc = PTR_ERR(op_data));

        rc = obd_iocontrol(LL_IOC_LOV_SWAP_LAYOUTS, ll_i2mdexp(llss->inode1),
                           sizeof(*op_data), op_data, NULL);
        ll_finish_md_op_data(op_data);

        if (rc < 0)
                GOTO(putgl, rc);

putgl:
        if (gid != 0) {
                ll_put_grouplock(llss->inode2, file2, gid);
                ll_put_grouplock(llss->inode1, file1, gid);
        }

free:
        if (llss != NULL)
                OBD_FREE_PTR(llss);

        RETURN(rc);
}

int ll_hsm_state_set(struct inode *inode, struct hsm_state_set *hss)
{
        struct obd_export *exp = ll_i2mdexp(inode);
        struct md_op_data *op_data;
        int rc;
        ENTRY;

        /* Detect out-of range masks */
        if ((hss->hss_setmask | hss->hss_clearmask) & ~HSM_FLAGS_MASK)
                RETURN(-EINVAL);

        /* Non-root users are forbidden to set or clear flags which are
         * NOT defined in HSM_USER_MASK. */
        if (((hss->hss_setmask | hss->hss_clearmask) & ~HSM_USER_MASK) &&
            !cfs_capable(CFS_CAP_SYS_ADMIN))
                RETURN(-EPERM);

        if (!exp_connect_archive_id_array(exp)) {
                /* Detect out-of range archive id */
                if ((hss->hss_valid & HSS_ARCHIVE_ID) &&
                    (hss->hss_archive_id > LL_HSM_ORIGIN_MAX_ARCHIVE))
                        RETURN(-EINVAL);
        }

        op_data = ll_prep_md_op_data(NULL, inode, NULL, NULL, 0, 0,
                                     LUSTRE_OPC_ANY, hss);
        if (IS_ERR(op_data))
                RETURN(PTR_ERR(op_data));

        rc = obd_iocontrol(LL_IOC_HSM_STATE_SET, exp, sizeof(*op_data),
                           op_data, NULL);

        ll_finish_md_op_data(op_data);

        RETURN(rc);
}

static int ll_hsm_import(struct inode *inode, struct file *file,
                         struct hsm_user_import *hui)
{
        struct hsm_state_set    *hss = NULL;
        struct iattr            *attr = NULL;
        int                      rc;
        ENTRY;

        if (!S_ISREG(inode->i_mode))
                RETURN(-EINVAL);

        /* set HSM flags */
        OBD_ALLOC_PTR(hss);
        if (hss == NULL)
                GOTO(out, rc = -ENOMEM);

        hss->hss_valid = HSS_SETMASK | HSS_ARCHIVE_ID;
        hss->hss_archive_id = hui->hui_archive_id;
        hss->hss_setmask = HS_ARCHIVED | HS_EXISTS | HS_RELEASED;
        rc = ll_hsm_state_set(inode, hss);
        if (rc != 0)
                GOTO(out, rc);

        OBD_ALLOC_PTR(attr);
        if (attr == NULL)
                GOTO(out, rc = -ENOMEM);

        attr->ia_mode = hui->hui_mode & (S_IRWXU | S_IRWXG | S_IRWXO);
        attr->ia_mode |= S_IFREG;
        attr->ia_uid = make_kuid(&init_user_ns, hui->hui_uid);
        attr->ia_gid = make_kgid(&init_user_ns, hui->hui_gid);
        attr->ia_size = hui->hui_size;
        attr->ia_mtime.tv_sec = hui->hui_mtime;
        attr->ia_mtime.tv_nsec = hui->hui_mtime_ns;
        attr->ia_atime.tv_sec = hui->hui_atime;
        attr->ia_atime.tv_nsec = hui->hui_atime_ns;

        attr->ia_valid = ATTR_SIZE | ATTR_MODE | ATTR_FORCE |
                         ATTR_UID | ATTR_GID |
                         ATTR_MTIME | ATTR_MTIME_SET |
                         ATTR_ATIME | ATTR_ATIME_SET;

        inode_lock(inode);

        rc = ll_setattr_raw(file_dentry(file), attr, 0, true);
        if (rc == -ENODATA)
                rc = 0;

        inode_unlock(inode);

out:
        if (hss != NULL)
                OBD_FREE_PTR(hss);

        if (attr != NULL)
                OBD_FREE_PTR(attr);

        RETURN(rc);
}

static inline long ll_lease_type_from_fmode(fmode_t fmode)
{
        return ((fmode & FMODE_READ) ? LL_LEASE_RDLCK : 0) |
               ((fmode & FMODE_WRITE) ? LL_LEASE_WRLCK : 0);
}

static int ll_file_futimes_3(struct file *file, const struct ll_futimes_3 *lfu)
{
        struct inode *inode = file_inode(file);
        struct iattr ia = {
                .ia_valid = ATTR_ATIME | ATTR_ATIME_SET |
                            ATTR_MTIME | ATTR_MTIME_SET |
                            ATTR_CTIME,
                .ia_atime = {
                        .tv_sec = lfu->lfu_atime_sec,
                        .tv_nsec = lfu->lfu_atime_nsec,
                },
                .ia_mtime = {
                        .tv_sec = lfu->lfu_mtime_sec,
                        .tv_nsec = lfu->lfu_mtime_nsec,
                },
                .ia_ctime = {
                        .tv_sec = lfu->lfu_ctime_sec,
                        .tv_nsec = lfu->lfu_ctime_nsec,
                },
        };
        int rc;
        ENTRY;

        if (!capable(CAP_SYS_ADMIN))
                RETURN(-EPERM);

        if (!S_ISREG(inode->i_mode))
                RETURN(-EINVAL);

        inode_lock(inode);
        rc = ll_setattr_raw(file_dentry(file), &ia, OP_XVALID_CTIME_SET,
                            false);
        inode_unlock(inode);

        RETURN(rc);
}

static enum cl_lock_mode cl_mode_user_to_kernel(enum lock_mode_user mode)
{
        switch (mode) {
        case MODE_READ_USER:
                return CLM_READ;
        case MODE_WRITE_USER:
                return CLM_WRITE;
        default:
                return -EINVAL;
        }
}

static const char *const user_lockname[] = LOCK_MODE_NAMES;

/* Used to allow the upper layers of the client to request an LDLM lock
 * without doing an actual read or write.
 *
 * Used for ladvise lockahead to manually request specific locks.
 *
 * \param[in] file      file this ladvise lock request is on
 * \param[in] ladvise   ladvise struct describing this lock request
 *
 * \retval 0            success, no detailed result available (sync requests
 *                      and requests sent to the server [not handled locally]
 *                      cannot return detailed results)
 * \retval LLA_RESULT_{SAME,DIFFERENT} - detailed result of the lock request,
 *                                       see definitions for details.
 * \retval negative     negative errno on error
 */
int ll_file_lock_ahead(struct file *file, struct llapi_lu_ladvise *ladvise)
{
        struct lu_env *env = NULL;
        struct cl_io *io  = NULL;
        struct cl_lock *lock = NULL;
        struct cl_lock_descr *descr = NULL;
        struct dentry *dentry = file->f_path.dentry;
        struct inode *inode = dentry->d_inode;
        enum cl_lock_mode cl_mode;
        off_t start = ladvise->lla_start;
        off_t end = ladvise->lla_end;
        int result;
        __u16 refcheck;

        ENTRY;

        CDEBUG(D_VFSTRACE, "Lock request: file=%.*s, inode=%p, mode=%s "
               "start=%llu, end=%llu\n", dentry->d_name.len,
               dentry->d_name.name, dentry->d_inode,
               user_lockname[ladvise->lla_lockahead_mode], (__u64) start,
               (__u64) end);

        cl_mode = cl_mode_user_to_kernel(ladvise->lla_lockahead_mode);
        if (cl_mode < 0)
                GOTO(out, result = cl_mode);

        /* Get IO environment */
        result = cl_io_get(inode, &env, &io, &refcheck);
        if (result <= 0)
                GOTO(out, result);

        result = cl_io_init(env, io, CIT_MISC, io->ci_obj);
        if (result > 0) {
                /*
                 * nothing to do for this io. This currently happens when
                 * stripe sub-object's are not yet created.
                 */
                result = io->ci_result;
        } else if (result == 0) {
                lock = vvp_env_lock(env);
                descr = &lock->cll_descr;

                descr->cld_obj   = io->ci_obj;
                /* Convert byte offsets to pages */
                descr->cld_start = cl_index(io->ci_obj, start);
                descr->cld_end   = cl_index(io->ci_obj, end);
                descr->cld_mode  = cl_mode;
                /* CEF_MUST is used because we do not want to convert a
                 * lockahead request to a lockless lock */
                descr->cld_enq_flags = CEF_MUST | CEF_LOCK_NO_EXPAND |
                                       CEF_NONBLOCK;

                if (ladvise->lla_peradvice_flags & LF_ASYNC)
                        descr->cld_enq_flags |= CEF_SPECULATIVE;

                result = cl_lock_request(env, io, lock);

                /* On success, we need to release the lock */
                if (result >= 0)
                        cl_lock_release(env, lock);
        }
        cl_io_fini(env, io);
        cl_env_put(env, &refcheck);

        /* -ECANCELED indicates a matching lock with a different extent
         * was already present, and -EEXIST indicates a matching lock
         * on exactly the same extent was already present.
         * We convert them to positive values for userspace to make
         * recognizing true errors easier.
         * Note we can only return these detailed results on async requests,
         * as sync requests look the same as i/o requests for locking. */
        if (result == -ECANCELED)
                result = LLA_RESULT_DIFFERENT;
        else if (result == -EEXIST)
                result = LLA_RESULT_SAME;

out:
        RETURN(result);
}
static const char *const ladvise_names[] = LU_LADVISE_NAMES;

static int ll_ladvise_sanity(struct inode *inode,
                             struct llapi_lu_ladvise *ladvise)
{
        struct ll_sb_info *sbi = ll_i2sbi(inode);
        enum lu_ladvise_type advice = ladvise->lla_advice;
        /* Note the peradvice flags is a 32 bit field, so per advice flags must
         * be in the first 32 bits of enum ladvise_flags */
        __u32 flags = ladvise->lla_peradvice_flags;
        /* 3 lines at 80 characters per line, should be plenty */
        int rc = 0;

        if (advice > LU_LADVISE_MAX || advice == LU_LADVISE_INVALID) {
                rc = -EINVAL;
                CDEBUG(D_VFSTRACE, "%s: advice with value '%d' not recognized,"
                       "last supported advice is %s (value '%d'): rc = %d\n",
                       sbi->ll_fsname, advice,
                       ladvise_names[LU_LADVISE_MAX-1], LU_LADVISE_MAX-1, rc);
                GOTO(out, rc);
        }

        /* Per-advice checks */
        switch (advice) {
        case LU_LADVISE_LOCKNOEXPAND:
                if (flags & ~LF_LOCKNOEXPAND_MASK) {
                        rc = -EINVAL;
                        CDEBUG(D_VFSTRACE, "%s: Invalid flags (%x) for %s: "
                               "rc = %d\n", sbi->ll_fsname, flags,
                               ladvise_names[advice], rc);
                        GOTO(out, rc);
                }
                break;
        case LU_LADVISE_LOCKAHEAD:
                /* Currently only READ and WRITE modes can be requested */
                if (ladvise->lla_lockahead_mode >= MODE_MAX_USER ||
                    ladvise->lla_lockahead_mode == 0) {
                        rc = -EINVAL;
                        CDEBUG(D_VFSTRACE, "%s: Invalid mode (%d) for %s: "
                               "rc = %d\n", sbi->ll_fsname,
                               ladvise->lla_lockahead_mode,
                               ladvise_names[advice], rc);
                        GOTO(out, rc);
                }
        case LU_LADVISE_WILLREAD:
        case LU_LADVISE_DONTNEED:
        default:
                /* Note fall through above - These checks apply to all advices
                 * except LOCKNOEXPAND */
                if (flags & ~LF_DEFAULT_MASK) {
                        rc = -EINVAL;
                        CDEBUG(D_VFSTRACE, "%s: Invalid flags (%x) for %s: "
                               "rc = %d\n", sbi->ll_fsname, flags,
                               ladvise_names[advice], rc);
                        GOTO(out, rc);
                }
                if (ladvise->lla_start >= ladvise->lla_end) {
                        rc = -EINVAL;
                        CDEBUG(D_VFSTRACE, "%s: Invalid range (%llu to %llu) "
                               "for %s: rc = %d\n", sbi->ll_fsname,
                               ladvise->lla_start, ladvise->lla_end,
                               ladvise_names[advice], rc);
                        GOTO(out, rc);
                }
                break;
        }

out:
        return rc;
}
#undef ERRSIZE

/*
 * Give file access advices
 *
 * The ladvise interface is similar to Linux fadvise() system call, except it
 * forwards the advices directly from Lustre client to server. The server side
 * codes will apply appropriate read-ahead and caching techniques for the
 * corresponding files.
 *
 * A typical workload for ladvise is e.g. a bunch of different clients are
 * doing small random reads of a file, so prefetching pages into OSS cache
 * with big linear reads before the random IO is a net benefit. Fetching
 * all that data into each client cache with fadvise() may not be, due to
 * much more data being sent to the client.
 */
static int ll_ladvise(struct inode *inode, struct file *file, __u64 flags,
                      struct llapi_lu_ladvise *ladvise)
{
        struct lu_env *env;
        struct cl_io *io;
        struct cl_ladvise_io *lio;
        int rc;
        __u16 refcheck;
        ENTRY;

        env = cl_env_get(&refcheck);
        if (IS_ERR(env))
                RETURN(PTR_ERR(env));

        io = vvp_env_thread_io(env);
        io->ci_obj = ll_i2info(inode)->lli_clob;

        /* initialize parameters for ladvise */
        lio = &io->u.ci_ladvise;
        lio->li_start = ladvise->lla_start;
        lio->li_end = ladvise->lla_end;
        lio->li_fid = ll_inode2fid(inode);
        lio->li_advice = ladvise->lla_advice;
        lio->li_flags = flags;

        if (cl_io_init(env, io, CIT_LADVISE, io->ci_obj) == 0)
                rc = cl_io_loop(env, io);
        else
                rc = io->ci_result;

        cl_io_fini(env, io);
        cl_env_put(env, &refcheck);
        RETURN(rc);
}

static int ll_lock_noexpand(struct file *file, int flags)
{
        struct ll_file_data *fd = LUSTRE_FPRIVATE(file);

        fd->ll_lock_no_expand = !(flags & LF_UNSET);

        return 0;
}

int ll_ioctl_fsgetxattr(struct inode *inode, unsigned int cmd,
                        unsigned long arg)
{
        struct fsxattr fsxattr;

        if (copy_from_user(&fsxattr,
                           (const struct fsxattr __user *)arg,
                           sizeof(fsxattr)))
                RETURN(-EFAULT);

        fsxattr.fsx_xflags = ll_inode_flags_to_xflags(inode->i_flags);
        if (ll_file_test_flag(ll_i2info(inode), LLIF_PROJECT_INHERIT))
                fsxattr.fsx_xflags |= FS_XFLAG_PROJINHERIT;
        fsxattr.fsx_projid = ll_i2info(inode)->lli_projid;
        if (copy_to_user((struct fsxattr __user *)arg,
                         &fsxattr, sizeof(fsxattr)))
                RETURN(-EFAULT);

        RETURN(0);
}

int ll_ioctl_check_project(struct inode *inode, struct fsxattr *fa)
{
        /*
         * Project Quota ID state is only allowed to change from within the init
         * namespace. Enforce that restriction only if we are trying to change
         * the quota ID state. Everything else is allowed in user namespaces.
         */
        if (current_user_ns() == &init_user_ns)
                return 0;

        if (ll_i2info(inode)->lli_projid != fa->fsx_projid)
                return -EINVAL;

        if (ll_file_test_flag(ll_i2info(inode), LLIF_PROJECT_INHERIT)) {
                if (!(fa->fsx_xflags & FS_XFLAG_PROJINHERIT))
                        return -EINVAL;
        } else {
                if (fa->fsx_xflags & FS_XFLAG_PROJINHERIT)
                        return -EINVAL;
        }

        return 0;
}

int ll_ioctl_fssetxattr(struct inode *inode, unsigned int cmd,
                        unsigned long arg)
{

        struct md_op_data *op_data;
        struct ptlrpc_request *req = NULL;
        int rc = 0;
        struct fsxattr fsxattr;
        struct cl_object *obj;
        struct iattr *attr;
        int flags;

        if (copy_from_user(&fsxattr,
                           (const struct fsxattr __user *)arg,
                           sizeof(fsxattr)))
                RETURN(-EFAULT);

        rc = ll_ioctl_check_project(inode, &fsxattr);
        if (rc)
                RETURN(rc);

        op_data = ll_prep_md_op_data(NULL, inode, NULL, NULL, 0, 0,
                                     LUSTRE_OPC_ANY, NULL);
        if (IS_ERR(op_data))
                RETURN(PTR_ERR(op_data));

        flags = ll_xflags_to_inode_flags(fsxattr.fsx_xflags);
        op_data->op_attr_flags = ll_inode_to_ext_flags(flags);
        if (fsxattr.fsx_xflags & FS_XFLAG_PROJINHERIT)
                op_data->op_attr_flags |= LUSTRE_PROJINHERIT_FL;
        op_data->op_projid = fsxattr.fsx_projid;
        op_data->op_xvalid |= OP_XVALID_PROJID | OP_XVALID_FLAGS;
        rc = md_setattr(ll_i2sbi(inode)->ll_md_exp, op_data, NULL,
                        0, &req);
        ptlrpc_req_finished(req);
        if (rc)
                GOTO(out_fsxattr, rc);
        ll_update_inode_flags(inode, op_data->op_attr_flags);
        obj = ll_i2info(inode)->lli_clob;
        if (obj == NULL)
                GOTO(out_fsxattr, rc);

        OBD_ALLOC_PTR(attr);
        if (attr == NULL)
                GOTO(out_fsxattr, rc = -ENOMEM);

        rc = cl_setattr_ost(obj, attr, OP_XVALID_FLAGS,
                            fsxattr.fsx_xflags);
        OBD_FREE_PTR(attr);
out_fsxattr:
        ll_finish_md_op_data(op_data);
        RETURN(rc);
}

static long ll_file_unlock_lease(struct file *file, struct ll_ioc_lease *ioc,
                                 unsigned long arg)
{
        struct inode            *inode = file_inode(file);
        struct ll_file_data     *fd = LUSTRE_FPRIVATE(file);
        struct ll_inode_info    *lli = ll_i2info(inode);
        struct obd_client_handle *och = NULL;
        struct split_param sp;
        struct pcc_param param;
        bool lease_broken = false;
        fmode_t fmode = 0;
        enum mds_op_bias bias = 0;
        struct file *layout_file = NULL;
        void *data = NULL;
        size_t data_size = 0;
        bool attached = false;
        long rc, rc2 = 0;

        ENTRY;

        mutex_lock(&lli->lli_och_mutex);
        if (fd->fd_lease_och != NULL) {
                och = fd->fd_lease_och;
                fd->fd_lease_och = NULL;
        }
        mutex_unlock(&lli->lli_och_mutex);

        if (och == NULL)
                RETURN(-ENOLCK);

        fmode = och->och_flags;

        switch (ioc->lil_flags) {
        case LL_LEASE_RESYNC_DONE:
                if (ioc->lil_count > IOC_IDS_MAX)
                        GOTO(out_lease_close, rc = -EINVAL);

                data_size = offsetof(typeof(*ioc), lil_ids[ioc->lil_count]);
                OBD_ALLOC(data, data_size);
                if (!data)
                        GOTO(out_lease_close, rc = -ENOMEM);

                if (copy_from_user(data, (void __user *)arg, data_size))
                        GOTO(out_lease_close, rc = -EFAULT);

                bias = MDS_CLOSE_RESYNC_DONE;
                break;
        case LL_LEASE_LAYOUT_MERGE: {
                int fd;

                if (ioc->lil_count != 1)
                        GOTO(out_lease_close, rc = -EINVAL);

                arg += sizeof(*ioc);
                if (copy_from_user(&fd, (void __user *)arg, sizeof(__u32)))
                        GOTO(out_lease_close, rc = -EFAULT);

                layout_file = fget(fd);
                if (!layout_file)
                        GOTO(out_lease_close, rc = -EBADF);

                if ((file->f_flags & O_ACCMODE) == O_RDONLY ||
                                (layout_file->f_flags & O_ACCMODE) == O_RDONLY)
                        GOTO(out_lease_close, rc = -EPERM);

                data = file_inode(layout_file);
                bias = MDS_CLOSE_LAYOUT_MERGE;
                break;
        }
        case LL_LEASE_LAYOUT_SPLIT: {
                int fdv;
                int mirror_id;

                if (ioc->lil_count != 2)
                        GOTO(out_lease_close, rc = -EINVAL);

                arg += sizeof(*ioc);
                if (copy_from_user(&fdv, (void __user *)arg, sizeof(__u32)))
                        GOTO(out_lease_close, rc = -EFAULT);

                arg += sizeof(__u32);
                if (copy_from_user(&mirror_id, (void __user *)arg,
                                   sizeof(__u32)))
                        GOTO(out_lease_close, rc = -EFAULT);

                layout_file = fget(fdv);
                if (!layout_file)
                        GOTO(out_lease_close, rc = -EBADF);

                sp.sp_inode = file_inode(layout_file);
                sp.sp_mirror_id = (__u16)mirror_id;
                data = &sp;
                bias = MDS_CLOSE_LAYOUT_SPLIT;
                break;
        }
        case LL_LEASE_PCC_ATTACH:
                if (ioc->lil_count != 1)
                        RETURN(-EINVAL);

                arg += sizeof(*ioc);
                if (copy_from_user(&param.pa_archive_id, (void __user *)arg,
                                   sizeof(__u32)))
                        GOTO(out_lease_close, rc2 = -EFAULT);

                rc2 = pcc_readwrite_attach(file, inode, param.pa_archive_id);
                if (rc2)
                        GOTO(out_lease_close, rc2);

                attached = true;
                /* Grab latest data version */
                rc2 = ll_data_version(inode, &param.pa_data_version,
                                     LL_DV_WR_FLUSH);
                if (rc2)
                        GOTO(out_lease_close, rc2);

                data = &param;
                bias = MDS_PCC_ATTACH;
                break;
        default:
                /* without close intent */
                break;
        }

out_lease_close:
        rc = ll_lease_close_intent(och, inode, &lease_broken, bias, data);
        if (rc < 0)
                GOTO(out, rc);

        rc = ll_lease_och_release(inode, file);
        if (rc < 0)
                GOTO(out, rc);

        if (lease_broken)
                fmode = 0;
        EXIT;

out:
        switch (ioc->lil_flags) {
        case LL_LEASE_RESYNC_DONE:
                if (data)
                        OBD_FREE(data, data_size);
                break;
        case LL_LEASE_LAYOUT_MERGE:
        case LL_LEASE_LAYOUT_SPLIT:
                if (layout_file)
                        fput(layout_file);
                break;
        case LL_LEASE_PCC_ATTACH:
                if (!rc)
                        rc = rc2;
                rc = pcc_readwrite_attach_fini(file, inode,
                                               param.pa_layout_gen,
                                               lease_broken, rc,
                                               attached);
                break;
        }

        if (!rc)
                rc = ll_lease_type_from_fmode(fmode);
        RETURN(rc);
}

static long ll_file_set_lease(struct file *file, struct ll_ioc_lease *ioc,
                              unsigned long arg)
{
        struct inode *inode = file_inode(file);
        struct ll_inode_info *lli = ll_i2info(inode);
        struct ll_file_data *fd = LUSTRE_FPRIVATE(file);
        struct obd_client_handle *och = NULL;
        __u64 open_flags = 0;
        bool lease_broken;
        fmode_t fmode;
        long rc;
        ENTRY;

        switch (ioc->lil_mode) {
        case LL_LEASE_WRLCK:
                if (!(file->f_mode & FMODE_WRITE))
                        RETURN(-EPERM);
                fmode = FMODE_WRITE;
                break;
        case LL_LEASE_RDLCK:
                if (!(file->f_mode & FMODE_READ))
                        RETURN(-EPERM);
                fmode = FMODE_READ;
                break;
        case LL_LEASE_UNLCK:
                RETURN(ll_file_unlock_lease(file, ioc, arg));
        default:
                RETURN(-EINVAL);
        }

        CDEBUG(D_INODE, "Set lease with mode %u\n", fmode);

        /* apply for lease */
        if (ioc->lil_flags & LL_LEASE_RESYNC)
                open_flags = MDS_OPEN_RESYNC;
        och = ll_lease_open(inode, file, fmode, open_flags);
        if (IS_ERR(och))
                RETURN(PTR_ERR(och));

        if (ioc->lil_flags & LL_LEASE_RESYNC) {
                rc = ll_lease_file_resync(och, inode, arg);
                if (rc) {
                        ll_lease_close(och, inode, NULL);
                        RETURN(rc);
                }
                rc = ll_layout_refresh(inode, &fd->fd_layout_version);
                if (rc) {
                        ll_lease_close(och, inode, NULL);
                        RETURN(rc);
                }
        }

        rc = 0;
        mutex_lock(&lli->lli_och_mutex);
        if (fd->fd_lease_och == NULL) {
                fd->fd_lease_och = och;
                och = NULL;
        }
        mutex_unlock(&lli->lli_och_mutex);
        if (och != NULL) {
                /* impossible now that only excl is supported for now */
                ll_lease_close(och, inode, &lease_broken);
                rc = -EBUSY;
        }
        RETURN(rc);
}

static void ll_heat_get(struct inode *inode, struct lu_heat *heat)
{
        struct ll_inode_info *lli = ll_i2info(inode);
        struct ll_sb_info *sbi = ll_i2sbi(inode);
        __u64 now = ktime_get_real_seconds();
        int i;

        spin_lock(&lli->lli_heat_lock);
        heat->lh_flags = lli->lli_heat_flags;
        for (i = 0; i < heat->lh_count; i++)
                heat->lh_heat[i] = obd_heat_get(&lli->lli_heat_instances[i],
                                                now, sbi->ll_heat_decay_weight,
                                                sbi->ll_heat_period_second);
        spin_unlock(&lli->lli_heat_lock);
}

static int ll_heat_set(struct inode *inode, enum lu_heat_flag flags)
{
        struct ll_inode_info *lli = ll_i2info(inode);
        int rc = 0;

        spin_lock(&lli->lli_heat_lock);
        if (flags & LU_HEAT_FLAG_CLEAR)
                obd_heat_clear(lli->lli_heat_instances, OBD_HEAT_COUNT);

        if (flags & LU_HEAT_FLAG_OFF)
                lli->lli_heat_flags |= LU_HEAT_FLAG_OFF;
        else
                lli->lli_heat_flags &= ~LU_HEAT_FLAG_OFF;

        spin_unlock(&lli->lli_heat_lock);

        RETURN(rc);
}

static long
ll_file_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
{
        struct inode            *inode = file_inode(file);
        struct ll_file_data     *fd = LUSTRE_FPRIVATE(file);
        int                      flags, rc;
        ENTRY;

        CDEBUG(D_VFSTRACE, "VFS Op:inode="DFID"(%p), cmd=%x\n",
               PFID(ll_inode2fid(inode)), inode, cmd);
        ll_stats_ops_tally(ll_i2sbi(inode), LPROC_LL_IOCTL, 1);

        /* asm-ppc{,64} declares TCGETS, et. al. as type 't' not 'T' */
        if (_IOC_TYPE(cmd) == 'T' || _IOC_TYPE(cmd) == 't') /* tty ioctls */
                RETURN(-ENOTTY);

        switch (cmd) {
        case LL_IOC_GETFLAGS:
                /* Get the current value of the file flags */
                return put_user(fd->fd_flags, (int __user *)arg);
        case LL_IOC_SETFLAGS:
        case LL_IOC_CLRFLAGS:
                /* Set or clear specific file flags */
                /* XXX This probably needs checks to ensure the flags are
                 *     not abused, and to handle any flag side effects.
                 */
                if (get_user(flags, (int __user *) arg))
                        RETURN(-EFAULT);

                if (cmd == LL_IOC_SETFLAGS) {
                        if ((flags & LL_FILE_IGNORE_LOCK) &&
                            !(file->f_flags & O_DIRECT)) {
                                CERROR("%s: unable to disable locking on "
                                       "non-O_DIRECT file\n", current->comm);
                                RETURN(-EINVAL);
                        }

                        fd->fd_flags |= flags;
                } else {
                        fd->fd_flags &= ~flags;
                }
                RETURN(0);
        case LL_IOC_LOV_SETSTRIPE:
        case LL_IOC_LOV_SETSTRIPE_NEW:
                RETURN(ll_lov_setstripe(inode, file, (void __user *)arg));
        case LL_IOC_LOV_SETEA:
                RETURN(ll_lov_setea(inode, file, (void __user *)arg));
        case LL_IOC_LOV_SWAP_LAYOUTS: {
                struct file *file2;
                struct lustre_swap_layouts lsl;

                if (copy_from_user(&lsl, (char __user *)arg,
                                   sizeof(struct lustre_swap_layouts)))
                        RETURN(-EFAULT);

                if ((file->f_flags & O_ACCMODE) == O_RDONLY)
                        RETURN(-EPERM);

                file2 = fget(lsl.sl_fd);
                if (file2 == NULL)
                        RETURN(-EBADF);

                /* O_WRONLY or O_RDWR */
                if ((file2->f_flags & O_ACCMODE) == O_RDONLY)
                        GOTO(out, rc = -EPERM);

                if (lsl.sl_flags & SWAP_LAYOUTS_CLOSE) {
                        struct inode                    *inode2;
                        struct ll_inode_info            *lli;
                        struct obd_client_handle        *och = NULL;

                        lli = ll_i2info(inode);
                        mutex_lock(&lli->lli_och_mutex);
                        if (fd->fd_lease_och != NULL) {
                                och = fd->fd_lease_och;
                                fd->fd_lease_och = NULL;
                        }
                        mutex_unlock(&lli->lli_och_mutex);
                        if (och == NULL)
                                GOTO(out, rc = -ENOLCK);
                        inode2 = file_inode(file2);
                        rc = ll_swap_layouts_close(och, inode, inode2);
                } else {
                        rc = ll_swap_layouts(file, file2, &lsl);
                }
out:
                fput(file2);
                RETURN(rc);
        }
        case LL_IOC_LOV_GETSTRIPE:
        case LL_IOC_LOV_GETSTRIPE_NEW:
                RETURN(ll_file_getstripe(inode, (void __user *)arg, 0));
        case FS_IOC_GETFLAGS:
        case FS_IOC_SETFLAGS:
                RETURN(ll_iocontrol(inode, file, cmd, arg));
        case FSFILT_IOC_GETVERSION:
        case FS_IOC_GETVERSION:
                RETURN(put_user(inode->i_generation, (int __user *)arg));
        /* We need to special case any other ioctls we want to handle,
         * to send them to the MDS/OST as appropriate and to properly
         * network encode the arg field. */
        case FS_IOC_SETVERSION:
                RETURN(-ENOTSUPP);

        case LL_IOC_GROUP_LOCK:
                RETURN(ll_get_grouplock(inode, file, arg));
        case LL_IOC_GROUP_UNLOCK:
                RETURN(ll_put_grouplock(inode, file, arg));
        case IOC_OBD_STATFS:
                RETURN(ll_obd_statfs(inode, (void __user *)arg));

        case LL_IOC_FLUSHCTX:
                RETURN(ll_flush_ctx(inode));
        case LL_IOC_PATH2FID: {
                if (copy_to_user((void __user *)arg, ll_inode2fid(inode),
                                 sizeof(struct lu_fid)))
                        RETURN(-EFAULT);

                RETURN(0);
        }
        case LL_IOC_GETPARENT:
                RETURN(ll_getparent(file, (struct getparent __user *)arg));

        case OBD_IOC_FID2PATH:
                RETURN(ll_fid2path(inode, (void __user *)arg));
        case LL_IOC_DATA_VERSION: {
                struct ioc_data_version idv;
                int rc;

                if (copy_from_user(&idv, (char __user *)arg, sizeof(idv)))
                        RETURN(-EFAULT);

                idv.idv_flags &= LL_DV_RD_FLUSH | LL_DV_WR_FLUSH;
                rc = ll_ioc_data_version(inode, &idv);

                if (rc == 0 &&
                    copy_to_user((char __user *)arg, &idv, sizeof(idv)))
                        RETURN(-EFAULT);

                RETURN(rc);
        }

        case LL_IOC_GET_MDTIDX: {
                int mdtidx;

                mdtidx = ll_get_mdt_idx(inode);
                if (mdtidx < 0)
                        RETURN(mdtidx);

                if (put_user((int)mdtidx, (int __user *)arg))
                        RETURN(-EFAULT);

                RETURN(0);
        }
        case OBD_IOC_GETDTNAME:
        case OBD_IOC_GETMDNAME:
                RETURN(ll_get_obd_name(inode, cmd, arg));
        case LL_IOC_HSM_STATE_GET: {
                struct md_op_data       *op_data;
                struct hsm_user_state   *hus;
                int                      rc;

                OBD_ALLOC_PTR(hus);
                if (hus == NULL)
                        RETURN(-ENOMEM);

                op_data = ll_prep_md_op_data(NULL, inode, NULL, NULL, 0, 0,
                                             LUSTRE_OPC_ANY, hus);
                if (IS_ERR(op_data)) {
                        OBD_FREE_PTR(hus);
                        RETURN(PTR_ERR(op_data));
                }

                rc = obd_iocontrol(cmd, ll_i2mdexp(inode), sizeof(*op_data),
                                   op_data, NULL);

                if (copy_to_user((void __user *)arg, hus, sizeof(*hus)))
                        rc = -EFAULT;

                ll_finish_md_op_data(op_data);
                OBD_FREE_PTR(hus);
                RETURN(rc);
        }
        case LL_IOC_HSM_STATE_SET: {
                struct hsm_state_set    *hss;
                int                      rc;

                OBD_ALLOC_PTR(hss);
                if (hss == NULL)
                        RETURN(-ENOMEM);

                if (copy_from_user(hss, (char __user *)arg, sizeof(*hss))) {
                        OBD_FREE_PTR(hss);
                        RETURN(-EFAULT);
                }

                rc = ll_hsm_state_set(inode, hss);

                OBD_FREE_PTR(hss);
                RETURN(rc);
        }
        case LL_IOC_HSM_ACTION: {
                struct md_op_data               *op_data;
                struct hsm_current_action       *hca;
                int                              rc;

                OBD_ALLOC_PTR(hca);
                if (hca == NULL)
                        RETURN(-ENOMEM);

                op_data = ll_prep_md_op_data(NULL, inode, NULL, NULL, 0, 0,
                                             LUSTRE_OPC_ANY, hca);
                if (IS_ERR(op_data)) {
                        OBD_FREE_PTR(hca);
                        RETURN(PTR_ERR(op_data));
                }

                rc = obd_iocontrol(cmd, ll_i2mdexp(inode), sizeof(*op_data),
                                   op_data, NULL);

                if (copy_to_user((char __user *)arg, hca, sizeof(*hca)))
                        rc = -EFAULT;

                ll_finish_md_op_data(op_data);
                OBD_FREE_PTR(hca);
                RETURN(rc);
        }
        case LL_IOC_SET_LEASE_OLD: {
                struct ll_ioc_lease ioc = { .lil_mode = (__u32)arg };

                RETURN(ll_file_set_lease(file, &ioc, 0));
        }
        case LL_IOC_SET_LEASE: {
                struct ll_ioc_lease ioc;

                if (copy_from_user(&ioc, (void __user *)arg, sizeof(ioc)))
                        RETURN(-EFAULT);

                RETURN(ll_file_set_lease(file, &ioc, arg));
        }
        case LL_IOC_GET_LEASE: {
                struct ll_inode_info *lli = ll_i2info(inode);
                struct ldlm_lock *lock = NULL;
                fmode_t fmode = 0;

                mutex_lock(&lli->lli_och_mutex);
                if (fd->fd_lease_och != NULL) {
                        struct obd_client_handle *och = fd->fd_lease_och;

                        lock = ldlm_handle2lock(&och->och_lease_handle);
                        if (lock != NULL) {
                                lock_res_and_lock(lock);
                                if (!ldlm_is_cancel(lock))
                                        fmode = och->och_flags;

                                unlock_res_and_lock(lock);
                                LDLM_LOCK_PUT(lock);
                        }
                }
                mutex_unlock(&lli->lli_och_mutex);

                RETURN(ll_lease_type_from_fmode(fmode));
        }
        case LL_IOC_HSM_IMPORT: {
                struct hsm_user_import *hui;

                OBD_ALLOC_PTR(hui);
                if (hui == NULL)
                        RETURN(-ENOMEM);

                if (copy_from_user(hui, (void __user *)arg, sizeof(*hui))) {
                        OBD_FREE_PTR(hui);
                        RETURN(-EFAULT);
                }

                rc = ll_hsm_import(inode, file, hui);

                OBD_FREE_PTR(hui);
                RETURN(rc);
        }
        case LL_IOC_FUTIMES_3: {
                struct ll_futimes_3 lfu;

                if (copy_from_user(&lfu,
                                   (const struct ll_futimes_3 __user *)arg,
                                   sizeof(lfu)))
                        RETURN(-EFAULT);

                RETURN(ll_file_futimes_3(file, &lfu));
        }
        case LL_IOC_LADVISE: {
                struct llapi_ladvise_hdr *k_ladvise_hdr;
                struct llapi_ladvise_hdr __user *u_ladvise_hdr;
                int i;
                int num_advise;
                int alloc_size = sizeof(*k_ladvise_hdr);

                rc = 0;
                u_ladvise_hdr = (void __user *)arg;
                OBD_ALLOC_PTR(k_ladvise_hdr);
                if (k_ladvise_hdr == NULL)
                        RETURN(-ENOMEM);

                if (copy_from_user(k_ladvise_hdr, u_ladvise_hdr, alloc_size))
                        GOTO(out_ladvise, rc = -EFAULT);

                if (k_ladvise_hdr->lah_magic != LADVISE_MAGIC ||
                    k_ladvise_hdr->lah_count < 1)
                        GOTO(out_ladvise, rc = -EINVAL);

                num_advise = k_ladvise_hdr->lah_count;
                if (num_advise >= LAH_COUNT_MAX)
                        GOTO(out_ladvise, rc = -EFBIG);

                OBD_FREE_PTR(k_ladvise_hdr);
                alloc_size = offsetof(typeof(*k_ladvise_hdr),
                                      lah_advise[num_advise]);
                OBD_ALLOC(k_ladvise_hdr, alloc_size);
                if (k_ladvise_hdr == NULL)
                        RETURN(-ENOMEM);

                /*
                 * TODO: submit multiple advices to one server in a single RPC
                 */
                if (copy_from_user(k_ladvise_hdr, u_ladvise_hdr, alloc_size))
                        GOTO(out_ladvise, rc = -EFAULT);

                for (i = 0; i < num_advise; i++) {
                        struct llapi_lu_ladvise *k_ladvise =
                                        &k_ladvise_hdr->lah_advise[i];
                        struct llapi_lu_ladvise __user *u_ladvise =
                                        &u_ladvise_hdr->lah_advise[i];

                        rc = ll_ladvise_sanity(inode, k_ladvise);
                        if (rc)
                                GOTO(out_ladvise, rc);

                        switch (k_ladvise->lla_advice) {
                        case LU_LADVISE_LOCKNOEXPAND:
                                rc = ll_lock_noexpand(file,
                                               k_ladvise->lla_peradvice_flags);
                                GOTO(out_ladvise, rc);
                        case LU_LADVISE_LOCKAHEAD:

                                rc = ll_file_lock_ahead(file, k_ladvise);

                                if (rc < 0)
                                        GOTO(out_ladvise, rc);

                                if (put_user(rc,
                                             &u_ladvise->lla_lockahead_result))
                                        GOTO(out_ladvise, rc = -EFAULT);
                                break;
                        default:
                                rc = ll_ladvise(inode, file,
                                                k_ladvise_hdr->lah_flags,
                                                k_ladvise);
                                if (rc)
                                        GOTO(out_ladvise, rc);
                                break;
                        }

                }

out_ladvise:
                OBD_FREE(k_ladvise_hdr, alloc_size);
                RETURN(rc);
        }
        case LL_IOC_FLR_SET_MIRROR: {
                /* mirror I/O must be direct to avoid polluting page cache
                 * by stale data. */
                if (!(file->f_flags & O_DIRECT))
                        RETURN(-EINVAL);

                fd->fd_designated_mirror = (__u32)arg;
                RETURN(0);
        }
        case LL_IOC_FSGETXATTR:
                RETURN(ll_ioctl_fsgetxattr(inode, cmd, arg));
        case LL_IOC_FSSETXATTR:
                RETURN(ll_ioctl_fssetxattr(inode, cmd, arg));
        case BLKSSZGET:
                RETURN(put_user(PAGE_SIZE, (int __user *)arg));
        case LL_IOC_HEAT_GET: {
                struct lu_heat uheat;
                struct lu_heat *heat;
                int size;

                if (copy_from_user(&uheat, (void __user *)arg, sizeof(uheat)))
                        RETURN(-EFAULT);

                if (uheat.lh_count > OBD_HEAT_COUNT)
                        uheat.lh_count = OBD_HEAT_COUNT;

                size = offsetof(typeof(uheat), lh_heat[uheat.lh_count]);
                OBD_ALLOC(heat, size);
                if (heat == NULL)
                        RETURN(-ENOMEM);

                heat->lh_count = uheat.lh_count;
                ll_heat_get(inode, heat);
                rc = copy_to_user((char __user *)arg, heat, size);
                OBD_FREE(heat, size);
                RETURN(rc ? -EFAULT : 0);
        }
        case LL_IOC_HEAT_SET: {
                __u64 flags;

                if (copy_from_user(&flags, (void __user *)arg, sizeof(flags)))
                        RETURN(-EFAULT);

                rc = ll_heat_set(inode, flags);
                RETURN(rc);
        }
        case LL_IOC_PCC_DETACH:
                if (!S_ISREG(inode->i_mode))
                        RETURN(-EINVAL);

                if (!inode_owner_or_capable(inode))
                        RETURN(-EPERM);

                RETURN(pcc_ioctl_detach(inode));
        case LL_IOC_PCC_STATE: {
                struct lu_pcc_state __user *ustate =
                        (struct lu_pcc_state __user *)arg;
                struct lu_pcc_state *state;

                OBD_ALLOC_PTR(state);
                if (state == NULL)
                        RETURN(-ENOMEM);

                if (copy_from_user(state, ustate, sizeof(*state)))
                        GOTO(out_state, rc = -EFAULT);

                rc = pcc_ioctl_state(file, inode, state);
                if (rc)
                        GOTO(out_state, rc);

                if (copy_to_user(ustate, state, sizeof(*state)))
                        GOTO(out_state, rc = -EFAULT);

out_state:
                OBD_FREE_PTR(state);
                RETURN(rc);
        }
        default:
                RETURN(obd_iocontrol(cmd, ll_i2dtexp(inode), 0, NULL,
                                     (void __user *)arg));
        }
}

#ifndef HAVE_FILE_LLSEEK_SIZE
static inline loff_t
llseek_execute(struct file *file, loff_t offset, loff_t maxsize)
{
        if (offset < 0 && !(file->f_mode & FMODE_UNSIGNED_OFFSET))
                return -EINVAL;
        if (offset > maxsize)
                return -EINVAL;

        if (offset != file->f_pos) {
                file->f_pos = offset;
                file->f_version = 0;
        }
        return offset;
}

static loff_t
generic_file_llseek_size(struct file *file, loff_t offset, int origin,
                loff_t maxsize, loff_t eof)
{
        struct inode *inode = file_inode(file);

        switch (origin) {
        case SEEK_END:
                offset += eof;
                break;
        case SEEK_CUR:
                /*
                 * Here we special-case the lseek(fd, 0, SEEK_CUR)
                 * position-querying operation.  Avoid rewriting the "same"
                 * f_pos value back to the file because a concurrent read(),
                 * write() or lseek() might have altered it
                 */
                if (offset == 0)
                        return file->f_pos;
                /*
                 * f_lock protects against read/modify/write race with other
                 * SEEK_CURs. Note that parallel writes and reads behave
                 * like SEEK_SET.
                 */
                inode_lock(inode);
                offset = llseek_execute(file, file->f_pos + offset, maxsize);
                inode_unlock(inode);
                return offset;
        case SEEK_DATA:
                /*
                 * In the generic case the entire file is data, so as long as
                 * offset isn't at the end of the file then the offset is data.
                 */
                if (offset >= eof)
                        return -ENXIO;
                break;
        case SEEK_HOLE:
                /*
                 * There is a virtual hole at the end of the file, so as long as
                 * offset isn't i_size or larger, return i_size.
                 */
                if (offset >= eof)
                        return -ENXIO;
                offset = eof;
                break;
        }

        return llseek_execute(file, offset, maxsize);
}
#endif

static loff_t ll_file_seek(struct file *file, loff_t offset, int origin)
{
        struct inode *inode = file_inode(file);
        loff_t retval, eof = 0;

        ENTRY;
        retval = offset + ((origin == SEEK_END) ? i_size_read(inode) :
                           (origin == SEEK_CUR) ? file->f_pos : 0);
        CDEBUG(D_VFSTRACE, "VFS Op:inode="DFID"(%p), to=%llu=%#llx(%d)\n",
               PFID(ll_inode2fid(inode)), inode, retval, retval,
               origin);
        ll_stats_ops_tally(ll_i2sbi(inode), LPROC_LL_LLSEEK, 1);

        if (origin == SEEK_END || origin == SEEK_HOLE || origin == SEEK_DATA) {
                retval = ll_glimpse_size(inode);
                if (retval != 0)
                        RETURN(retval);
                eof = i_size_read(inode);
        }

        retval = ll_generic_file_llseek_size(file, offset, origin,
                                          ll_file_maxbytes(inode), eof);
        RETURN(retval);
}

static int ll_flush(struct file *file, fl_owner_t id)
{
        struct inode *inode = file_inode(file);
        struct ll_inode_info *lli = ll_i2info(inode);
        struct ll_file_data *fd = LUSTRE_FPRIVATE(file);
        int rc, err;

        LASSERT(!S_ISDIR(inode->i_mode));

        /* catch async errors that were recorded back when async writeback
         * failed for pages in this mapping. */
        rc = lli->lli_async_rc;
        lli->lli_async_rc = 0;
        if (lli->lli_clob != NULL) {
                err = lov_read_and_clear_async_rc(lli->lli_clob);
                if (rc == 0)
                        rc = err;
        }

        /* The application has been told write failure already.
         * Do not report failure again. */
        if (fd->fd_write_failed)
                return 0;
        return rc ? -EIO : 0;
}

/**
 * Called to make sure a portion of file has been written out.
 * if @mode is not CL_FSYNC_LOCAL, it will send OST_SYNC RPCs to OST.
 *
 * Return how many pages have been written.
 */
int cl_sync_file_range(struct inode *inode, loff_t start, loff_t end,
                       enum cl_fsync_mode mode, int ignore_layout)
{
        struct lu_env *env;
        struct cl_io *io;
        struct cl_fsync_io *fio;
        int result;
        __u16 refcheck;
        ENTRY;

        if (mode != CL_FSYNC_NONE && mode != CL_FSYNC_LOCAL &&
            mode != CL_FSYNC_DISCARD && mode != CL_FSYNC_ALL)
                RETURN(-EINVAL);

        env = cl_env_get(&refcheck);
        if (IS_ERR(env))
                RETURN(PTR_ERR(env));

        io = vvp_env_thread_io(env);
        io->ci_obj = ll_i2info(inode)->lli_clob;
        io->ci_ignore_layout = ignore_layout;

        /* initialize parameters for sync */
        fio = &io->u.ci_fsync;
        fio->fi_start = start;
        fio->fi_end = end;
        fio->fi_fid = ll_inode2fid(inode);
        fio->fi_mode = mode;
        fio->fi_nr_written = 0;

        if (cl_io_init(env, io, CIT_FSYNC, io->ci_obj) == 0)
                result = cl_io_loop(env, io);
        else
                result = io->ci_result;
        if (result == 0)
                result = fio->fi_nr_written;
        cl_io_fini(env, io);
        cl_env_put(env, &refcheck);

        RETURN(result);
}

/*
 * When dentry is provided (the 'else' case), file_dentry() may be
 * null and dentry must be used directly rather than pulled from
 * file_dentry() as is done otherwise.
 */

#ifdef HAVE_FILE_FSYNC_4ARGS
int ll_fsync(struct file *file, loff_t start, loff_t end, int datasync)
{
        struct dentry *dentry = file_dentry(file);
#elif defined(HAVE_FILE_FSYNC_2ARGS)
int ll_fsync(struct file *file, int datasync)
{
        struct dentry *dentry = file_dentry(file);
        loff_t start = 0;
        loff_t end = LLONG_MAX;
#else
int ll_fsync(struct file *file, struct dentry *dentry, int datasync)
{
        loff_t start = 0;
        loff_t end = LLONG_MAX;
#endif
        struct inode *inode = dentry->d_inode;
        struct ll_inode_info *lli = ll_i2info(inode);
        struct ptlrpc_request *req;
        int rc, err;

        ENTRY;

        CDEBUG(D_VFSTRACE, "VFS Op:inode="DFID"(%p)\n",
               PFID(ll_inode2fid(inode)), inode);
        ll_stats_ops_tally(ll_i2sbi(inode), LPROC_LL_FSYNC, 1);

#ifdef HAVE_FILE_FSYNC_4ARGS
        rc = filemap_write_and_wait_range(inode->i_mapping, start, end);
        inode_lock(inode);
#else
        /* fsync's caller has already called _fdata{sync,write}, we want
         * that IO to finish before calling the osc and mdc sync methods */
        rc = filemap_fdatawait(inode->i_mapping);
#endif

        /* catch async errors that were recorded back when async writeback
         * failed for pages in this mapping. */
        if (!S_ISDIR(inode->i_mode)) {
                err = lli->lli_async_rc;
                lli->lli_async_rc = 0;
                if (rc == 0)
                        rc = err;
                if (lli->lli_clob != NULL) {
                        err = lov_read_and_clear_async_rc(lli->lli_clob);
                        if (rc == 0)
                                rc = err;
                }
        }

        err = md_fsync(ll_i2sbi(inode)->ll_md_exp, ll_inode2fid(inode), &req);
        if (!rc)
                rc = err;
        if (!err)
                ptlrpc_req_finished(req);

        if (S_ISREG(inode->i_mode)) {
                struct ll_file_data *fd = LUSTRE_FPRIVATE(file);
                bool cached;

                /* Sync metadata on MDT first, and then sync the cached data
                 * on PCC.
                 */
                err = pcc_fsync(file, start, end, datasync, &cached);
                if (!cached)
                        err = cl_sync_file_range(inode, start, end,
                                                 CL_FSYNC_ALL, 0);
                if (rc == 0 && err < 0)
                        rc = err;
                if (rc < 0)
                        fd->fd_write_failed = true;
                else
                        fd->fd_write_failed = false;
        }

#ifdef HAVE_FILE_FSYNC_4ARGS
        inode_unlock(inode);
#endif
        RETURN(rc);
}

static int
ll_file_flock(struct file *file, int cmd, struct file_lock *file_lock)
{
        struct inode *inode = file_inode(file);
        struct ll_sb_info *sbi = ll_i2sbi(inode);
        struct ldlm_enqueue_info einfo = {
                .ei_type        = LDLM_FLOCK,
                .ei_cb_cp       = ldlm_flock_completion_ast,
                .ei_cbdata      = file_lock,
        };
        struct md_op_data *op_data;
        struct lustre_handle lockh = { 0 };
        union ldlm_policy_data flock = { { 0 } };
        int fl_type = file_lock->fl_type;
        __u64 flags = 0;
        int rc;
        int rc2 = 0;
        ENTRY;

        CDEBUG(D_VFSTRACE, "VFS Op:inode="DFID" file_lock=%p\n",
               PFID(ll_inode2fid(inode)), file_lock);

        ll_stats_ops_tally(ll_i2sbi(inode), LPROC_LL_FLOCK, 1);

        if (file_lock->fl_flags & FL_FLOCK) {
                LASSERT((cmd == F_SETLKW) || (cmd == F_SETLK));
                /* flocks are whole-file locks */
                flock.l_flock.end = OFFSET_MAX;
                /* For flocks owner is determined by the local file desctiptor*/
                flock.l_flock.owner = (unsigned long)file_lock->fl_file;
        } else if (file_lock->fl_flags & FL_POSIX) {
                flock.l_flock.owner = (unsigned long)file_lock->fl_owner;
                flock.l_flock.start = file_lock->fl_start;
                flock.l_flock.end = file_lock->fl_end;
        } else {
                RETURN(-EINVAL);
        }
        flock.l_flock.pid = file_lock->fl_pid;

        /* Somewhat ugly workaround for svc lockd.
         * lockd installs custom fl_lmops->lm_compare_owner that checks
         * for the fl_owner to be the same (which it always is on local node
         * I guess between lockd processes) and then compares pid.
         * As such we assign pid to the owner field to make it all work,
         * conflict with normal locks is unlikely since pid space and
         * pointer space for current->files are not intersecting */
        if (file_lock->fl_lmops && file_lock->fl_lmops->lm_compare_owner)
                flock.l_flock.owner = (unsigned long)file_lock->fl_pid;

        switch (fl_type) {
        case F_RDLCK:
                einfo.ei_mode = LCK_PR;
                break;
        case F_UNLCK:
                /* An unlock request may or may not have any relation to
                 * existing locks so we may not be able to pass a lock handle
                 * via a normal ldlm_lock_cancel() request. The request may even
                 * unlock a byte range in the middle of an existing lock. In
                 * order to process an unlock request we need all of the same
                 * information that is given with a normal read or write record
                 * lock request. To avoid creating another ldlm unlock (cancel)
                 * message we'll treat a LCK_NL flock request as an unlock. */
                einfo.ei_mode = LCK_NL;
                break;
        case F_WRLCK:
                einfo.ei_mode = LCK_PW;
                break;
        default:
                CDEBUG(D_INFO, "Unknown fcntl lock type: %d\n", fl_type);
                RETURN (-ENOTSUPP);
        }

        switch (cmd) {
        case F_SETLKW:
#ifdef F_SETLKW64
        case F_SETLKW64:
#endif
                flags = 0;
                break;
        case F_SETLK:
#ifdef F_SETLK64
        case F_SETLK64:
#endif
                flags = LDLM_FL_BLOCK_NOWAIT;
                break;
        case F_GETLK:
#ifdef F_GETLK64
        case F_GETLK64:
#endif
                flags = LDLM_FL_TEST_LOCK;
                break;
        default:
                CERROR("unknown fcntl lock command: %d\n", cmd);
                RETURN (-EINVAL);
        }

        /* Save the old mode so that if the mode in the lock changes we
         * can decrement the appropriate reader or writer refcount. */
        file_lock->fl_type = einfo.ei_mode;

        op_data = ll_prep_md_op_data(NULL, inode, NULL, NULL, 0, 0,
                                     LUSTRE_OPC_ANY, NULL);
        if (IS_ERR(op_data))
                RETURN(PTR_ERR(op_data));

        CDEBUG(D_DLMTRACE, "inode="DFID", pid=%u, flags=%#llx, mode=%u, "
               "start=%llu, end=%llu\n", PFID(ll_inode2fid(inode)),
               flock.l_flock.pid, flags, einfo.ei_mode,
               flock.l_flock.start, flock.l_flock.end);

        rc = md_enqueue(sbi->ll_md_exp, &einfo, &flock, op_data, &lockh,
                        flags);

        /* Restore the file lock type if not TEST lock. */
        if (!(flags & LDLM_FL_TEST_LOCK))
                file_lock->fl_type = fl_type;

#ifdef HAVE_LOCKS_LOCK_FILE_WAIT
        if ((rc == 0 || file_lock->fl_type == F_UNLCK) &&
            !(flags & LDLM_FL_TEST_LOCK))
                rc2  = locks_lock_file_wait(file, file_lock);
#else
        if ((file_lock->fl_flags & FL_FLOCK) &&
            (rc == 0 || file_lock->fl_type == F_UNLCK))
                rc2  = flock_lock_file_wait(file, file_lock);
        if ((file_lock->fl_flags & FL_POSIX) &&
            (rc == 0 || file_lock->fl_type == F_UNLCK) &&
            !(flags & LDLM_FL_TEST_LOCK))
                rc2  = posix_lock_file_wait(file, file_lock);
#endif /* HAVE_LOCKS_LOCK_FILE_WAIT */

        if (rc2 && file_lock->fl_type != F_UNLCK) {
                einfo.ei_mode = LCK_NL;
                md_enqueue(sbi->ll_md_exp, &einfo, &flock, op_data,
                           &lockh, flags);
                rc = rc2;
        }

        ll_finish_md_op_data(op_data);

        RETURN(rc);
}

int ll_get_fid_by_name(struct inode *parent, const char *name,
                       int namelen, struct lu_fid *fid,
                       struct inode **inode)
{
        struct md_op_data       *op_data = NULL;
        struct mdt_body         *body;
        struct ptlrpc_request   *req;
        int                     rc;
        ENTRY;

        op_data = ll_prep_md_op_data(NULL, parent, NULL, name, namelen, 0,
                                     LUSTRE_OPC_ANY, NULL);
        if (IS_ERR(op_data))
                RETURN(PTR_ERR(op_data));

        op_data->op_valid = OBD_MD_FLID | OBD_MD_FLTYPE;
        rc = md_getattr_name(ll_i2sbi(parent)->ll_md_exp, op_data, &req);
        ll_finish_md_op_data(op_data);
        if (rc < 0)
                RETURN(rc);

        body = req_capsule_server_get(&req->rq_pill, &RMF_MDT_BODY);
        if (body == NULL)
                GOTO(out_req, rc = -EFAULT);
        if (fid != NULL)
                *fid = body->mbo_fid1;

        if (inode != NULL)
                rc = ll_prep_inode(inode, req, parent->i_sb, NULL);
out_req:
        ptlrpc_req_finished(req);
        RETURN(rc);
}

int ll_migrate(struct inode *parent, struct file *file, struct lmv_user_md *lum,
               const char *name)
{
        struct dentry *dchild = NULL;
        struct inode *child_inode = NULL;
        struct md_op_data *op_data;
        struct ptlrpc_request *request = NULL;
        struct obd_client_handle *och = NULL;
        struct qstr qstr;
        struct mdt_body *body;
        __u64 data_version = 0;
        size_t namelen = strlen(name);
        int lumlen = lmv_user_md_size(lum->lum_stripe_count, lum->lum_magic);
        int rc;
        ENTRY;

        CDEBUG(D_VFSTRACE, "migrate "DFID"/%s to MDT%04x stripe count %d\n",
               PFID(ll_inode2fid(parent)), name,
               lum->lum_stripe_offset, lum->lum_stripe_count);

        if (lum->lum_magic != cpu_to_le32(LMV_USER_MAGIC) &&
            lum->lum_magic != cpu_to_le32(LMV_USER_MAGIC_SPECIFIC))
                lustre_swab_lmv_user_md(lum);

        /* Get child FID first */
        qstr.hash = ll_full_name_hash(file_dentry(file), name, namelen);
        qstr.name = name;
        qstr.len = namelen;
        dchild = d_lookup(file_dentry(file), &qstr);
        if (dchild) {
                if (dchild->d_inode)
                        child_inode = igrab(dchild->d_inode);
                dput(dchild);
        }

        if (!child_inode) {
                rc = ll_get_fid_by_name(parent, name, namelen, NULL,
                                        &child_inode);
                if (rc)
                        RETURN(rc);
        }

        if (!child_inode)
                RETURN(-ENOENT);

        if (!(exp_connect_flags2(ll_i2sbi(parent)->ll_md_exp) &
              OBD_CONNECT2_DIR_MIGRATE)) {
                if (le32_to_cpu(lum->lum_stripe_count) > 1 ||
                    ll_i2info(child_inode)->lli_lsm_md) {
                        CERROR("%s: MDT doesn't support stripe directory "
                               "migration!\n", ll_i2sbi(parent)->ll_fsname);
                        GOTO(out_iput, rc = -EOPNOTSUPP);
                }
        }

        /*
         * lfs migrate command needs to be blocked on the client
         * by checking the migrate FID against the FID of the
         * filesystem root.
         */
        if (child_inode == parent->i_sb->s_root->d_inode)
                GOTO(out_iput, rc = -EINVAL);

        op_data = ll_prep_md_op_data(NULL, parent, NULL, name, namelen,
                                     child_inode->i_mode, LUSTRE_OPC_ANY, NULL);
        if (IS_ERR(op_data))
                GOTO(out_iput, rc = PTR_ERR(op_data));

        inode_lock(child_inode);
        op_data->op_fid3 = *ll_inode2fid(child_inode);
        if (!fid_is_sane(&op_data->op_fid3)) {
                CERROR("%s: migrate %s, but FID "DFID" is insane\n",
                       ll_i2sbi(parent)->ll_fsname, name,
                       PFID(&op_data->op_fid3));
                GOTO(out_unlock, rc = -EINVAL);
        }

        op_data->op_cli_flags |= CLI_MIGRATE | CLI_SET_MEA;
        op_data->op_data = lum;
        op_data->op_data_size = lumlen;

again:
        if (S_ISREG(child_inode->i_mode)) {
                och = ll_lease_open(child_inode, NULL, FMODE_WRITE, 0);
                if (IS_ERR(och)) {
                        rc = PTR_ERR(och);
                        och = NULL;
                        GOTO(out_unlock, rc);
                }

                rc = ll_data_version(child_inode, &data_version,
                                     LL_DV_WR_FLUSH);
                if (rc != 0)
                        GOTO(out_close, rc);

                op_data->op_open_handle = och->och_open_handle;
                op_data->op_data_version = data_version;
                op_data->op_lease_handle = och->och_lease_handle;
                op_data->op_bias |= MDS_CLOSE_MIGRATE;

                spin_lock(&och->och_mod->mod_open_req->rq_lock);
                och->och_mod->mod_open_req->rq_replay = 0;
                spin_unlock(&och->och_mod->mod_open_req->rq_lock);
        }

        rc = md_rename(ll_i2sbi(parent)->ll_md_exp, op_data, name, namelen,
                       name, namelen, &request);
        if (rc == 0) {
                LASSERT(request != NULL);
                ll_update_times(request, parent);
        }

        if (rc == 0 || rc == -EAGAIN) {
                body = req_capsule_server_get(&request->rq_pill, &RMF_MDT_BODY);
                LASSERT(body != NULL);

                /* If the server does release layout lock, then we cleanup
                 * the client och here, otherwise release it in out_close: */
                if (och && body->mbo_valid & OBD_MD_CLOSE_INTENT_EXECED) {
                        obd_mod_put(och->och_mod);
                        md_clear_open_replay_data(ll_i2sbi(parent)->ll_md_exp,
                                                  och);
                        och->och_open_handle.cookie = DEAD_HANDLE_MAGIC;
                        OBD_FREE_PTR(och);
                        och = NULL;
                }
        }

        if (request != NULL) {
                ptlrpc_req_finished(request);
                request = NULL;
        }

        /* Try again if the lease has cancelled. */
        if (rc == -EAGAIN && S_ISREG(child_inode->i_mode))
                goto again;

out_close:
        if (och)
                ll_lease_close(och, child_inode, NULL);
        if (!rc)
                clear_nlink(child_inode);
out_unlock:
        inode_unlock(child_inode);
        ll_finish_md_op_data(op_data);
out_iput:
        iput(child_inode);
        RETURN(rc);
}

static int
ll_file_noflock(struct file *file, int cmd, struct file_lock *file_lock)
{
        ENTRY;

        RETURN(-ENOSYS);
}

/**
 * test if some locks matching bits and l_req_mode are acquired
 * - bits can be in different locks
 * - if found clear the common lock bits in *bits
 * - the bits not found, are kept in *bits
 * \param inode [IN]
 * \param bits [IN] searched lock bits [IN]
 * \param l_req_mode [IN] searched lock mode
 * \retval boolean, true iff all bits are found
 */
int ll_have_md_lock(struct inode *inode, __u64 *bits, enum ldlm_mode l_req_mode)
{
        struct lustre_handle lockh;
        union ldlm_policy_data policy;
        enum ldlm_mode mode = (l_req_mode == LCK_MINMODE) ?
                              (LCK_CR | LCK_CW | LCK_PR | LCK_PW) : l_req_mode;
        struct lu_fid *fid;
        __u64 flags;
        int i;
        ENTRY;

        if (!inode)
               RETURN(0);

        fid = &ll_i2info(inode)->lli_fid;
        CDEBUG(D_INFO, "trying to match res "DFID" mode %s\n", PFID(fid),
               ldlm_lockname[mode]);

        flags = LDLM_FL_BLOCK_GRANTED | LDLM_FL_CBPENDING | LDLM_FL_TEST_LOCK;
        for (i = 0; i <= MDS_INODELOCK_MAXSHIFT && *bits != 0; i++) {
                policy.l_inodebits.bits = *bits & (1 << i);
                if (policy.l_inodebits.bits == 0)
                        continue;

                if (md_lock_match(ll_i2mdexp(inode), flags, fid, LDLM_IBITS,
                                  &policy, mode, &lockh)) {
                        struct ldlm_lock *lock;

                        lock = ldlm_handle2lock(&lockh);
                        if (lock) {
                                *bits &=
                                      ~(lock->l_policy_data.l_inodebits.bits);
                                LDLM_LOCK_PUT(lock);
                        } else {
                                *bits &= ~policy.l_inodebits.bits;
                        }
                }
        }
        RETURN(*bits == 0);
}

enum ldlm_mode ll_take_md_lock(struct inode *inode, __u64 bits,
                               struct lustre_handle *lockh, __u64 flags,
                               enum ldlm_mode mode)
{
        union ldlm_policy_data policy = { .l_inodebits = { bits } };
        struct lu_fid *fid;
        enum ldlm_mode rc;
        ENTRY;

        fid = &ll_i2info(inode)->lli_fid;
        CDEBUG(D_INFO, "trying to match res "DFID"\n", PFID(fid));

        rc = md_lock_match(ll_i2mdexp(inode), LDLM_FL_BLOCK_GRANTED|flags,
                           fid, LDLM_IBITS, &policy, mode, lockh);

        RETURN(rc);
}

static int ll_inode_revalidate_fini(struct inode *inode, int rc)
{
        /* Already unlinked. Just update nlink and return success */
        if (rc == -ENOENT) {
                clear_nlink(inode);
                /* If it is striped directory, and there is bad stripe
                 * Let's revalidate the dentry again, instead of returning
                 * error */
                if (S_ISDIR(inode->i_mode) &&
                    ll_i2info(inode)->lli_lsm_md != NULL)
                        return 0;

                /* This path cannot be hit for regular files unless in
                 * case of obscure races, so no need to to validate
                 * size. */
                if (!S_ISREG(inode->i_mode) && !S_ISDIR(inode->i_mode))
                        return 0;
        } else if (rc != 0) {
                CDEBUG_LIMIT((rc == -EACCES || rc == -EIDRM) ? D_INFO : D_ERROR,
                             "%s: revalidate FID "DFID" error: rc = %d\n",
                             ll_i2sbi(inode)->ll_fsname,
                             PFID(ll_inode2fid(inode)), rc);
        }

        return rc;
}

static int ll_inode_revalidate(struct dentry *dentry, enum ldlm_intent_flags op)
{
        struct inode *inode = dentry->d_inode;
        struct obd_export *exp = ll_i2mdexp(inode);
        struct lookup_intent oit = {
                .it_op = op,
        };
        struct ptlrpc_request *req = NULL;
        struct md_op_data *op_data;
        int rc = 0;
        ENTRY;

        CDEBUG(D_VFSTRACE, "VFS Op:inode="DFID"(%p),name=%s\n",
               PFID(ll_inode2fid(inode)), inode, dentry->d_name.name);

        /* Call getattr by fid, so do not provide name at all. */
        op_data = ll_prep_md_op_data(NULL, inode, inode, NULL, 0, 0,
                                     LUSTRE_OPC_ANY, NULL);
        if (IS_ERR(op_data))
                RETURN(PTR_ERR(op_data));

        rc = md_intent_lock(exp, op_data, &oit, &req, &ll_md_blocking_ast, 0);
        ll_finish_md_op_data(op_data);
        if (rc < 0) {
                rc = ll_inode_revalidate_fini(inode, rc);
                GOTO(out, rc);
        }

        rc = ll_revalidate_it_finish(req, &oit, dentry);
        if (rc != 0) {
                ll_intent_release(&oit);
                GOTO(out, rc);
        }

        /* Unlinked? Unhash dentry, so it is not picked up later by
         * do_lookup() -> ll_revalidate_it(). We cannot use d_drop
         * here to preserve get_cwd functionality on 2.6.
         * Bug 10503 */
        if (!dentry->d_inode->i_nlink) {
                ll_lock_dcache(inode);
                d_lustre_invalidate(dentry, 0);
                ll_unlock_dcache(inode);
        }

        ll_lookup_finish_locks(&oit, dentry);
out:
        ptlrpc_req_finished(req);

        return rc;
}

static int ll_merge_md_attr(struct inode *inode)
{
        struct ll_inode_info *lli = ll_i2info(inode);
        struct cl_attr attr = { 0 };
        int rc;

        LASSERT(lli->lli_lsm_md != NULL);

        /* foreign dir is not striped dir */
        if (lli->lli_lsm_md->lsm_md_magic == LMV_MAGIC_FOREIGN)
                RETURN(0);

        down_read(&lli->lli_lsm_sem);
        rc = md_merge_attr(ll_i2mdexp(inode), ll_i2info(inode)->lli_lsm_md,
                           &attr, ll_md_blocking_ast);
        up_read(&lli->lli_lsm_sem);
        if (rc != 0)
                RETURN(rc);

        set_nlink(inode, attr.cat_nlink);
        inode->i_blocks = attr.cat_blocks;
        i_size_write(inode, attr.cat_size);

        ll_i2info(inode)->lli_atime = attr.cat_atime;
        ll_i2info(inode)->lli_mtime = attr.cat_mtime;
        ll_i2info(inode)->lli_ctime = attr.cat_ctime;

        RETURN(0);
}

int ll_getattr_dentry(struct dentry *de, struct kstat *stat)
{
        struct inode *inode = de->d_inode;
        struct ll_sb_info *sbi = ll_i2sbi(inode);
        struct ll_inode_info *lli = ll_i2info(inode);
        int rc;

        ll_stats_ops_tally(sbi, LPROC_LL_GETATTR, 1);

        rc = ll_inode_revalidate(de, IT_GETATTR);
        if (rc < 0)
                RETURN(rc);

        if (S_ISREG(inode->i_mode)) {
                bool cached;

                rc = pcc_inode_getattr(inode, &cached);
                if (cached && rc < 0)
                        RETURN(rc);

                /* In case of restore, the MDT has the right size and has
                 * already send it back without granting the layout lock,
                 * inode is up-to-date so glimpse is useless.
                 * Also to glimpse we need the layout, in case of a running
                 * restore the MDT holds the layout lock so the glimpse will
                 * block up to the end of restore (getattr will block)
                 */
                if (!cached && !ll_file_test_flag(lli, LLIF_FILE_RESTORING)) {
                        rc = ll_glimpse_size(inode);
                        if (rc < 0)
                                RETURN(rc);
                }
        } else {
                /* If object isn't regular a file then don't validate size. */
                if (S_ISDIR(inode->i_mode) &&
                    lli->lli_lsm_md != NULL) {
                        rc = ll_merge_md_attr(inode);
                        if (rc < 0)
                                RETURN(rc);
                }

                inode->i_atime.tv_sec = lli->lli_atime;
                inode->i_mtime.tv_sec = lli->lli_mtime;
                inode->i_ctime.tv_sec = lli->lli_ctime;
        }

        OBD_FAIL_TIMEOUT(OBD_FAIL_GETATTR_DELAY, 30);

        if (ll_need_32bit_api(sbi)) {
                stat->ino = cl_fid_build_ino(&lli->lli_fid, 1);
                stat->dev = ll_compat_encode_dev(inode->i_sb->s_dev);
                stat->rdev = ll_compat_encode_dev(inode->i_rdev);
        } else {
                stat->ino = inode->i_ino;
                stat->dev = inode->i_sb->s_dev;
                stat->rdev = inode->i_rdev;
        }

        stat->mode = inode->i_mode;
        stat->uid = inode->i_uid;
        stat->gid = inode->i_gid;
        stat->atime = inode->i_atime;
        stat->mtime = inode->i_mtime;
        stat->ctime = inode->i_ctime;
        stat->blksize = sbi->ll_stat_blksize ?: 1 << inode->i_blkbits;

        stat->nlink = inode->i_nlink;
        stat->size = i_size_read(inode);
        stat->blocks = inode->i_blocks;

        return 0;
}

#ifdef HAVE_INODEOPS_ENHANCED_GETATTR
int ll_getattr(const struct path *path, struct kstat *stat,
               u32 request_mask, unsigned int flags)
{
        struct dentry *de = path->dentry;
#else
int ll_getattr(struct vfsmount *mnt, struct dentry *de, struct kstat *stat)
{
#endif
        return ll_getattr_dentry(de, stat);
}

static int ll_fiemap(struct inode *inode, struct fiemap_extent_info *fieinfo,
                     __u64 start, __u64 len)
{
        int             rc;
        size_t          num_bytes;
        struct fiemap   *fiemap;
        unsigned int    extent_count = fieinfo->fi_extents_max;

        num_bytes = sizeof(*fiemap) + (extent_count *
                                       sizeof(struct fiemap_extent));
        OBD_ALLOC_LARGE(fiemap, num_bytes);

        if (fiemap == NULL)
                RETURN(-ENOMEM);

        fiemap->fm_flags = fieinfo->fi_flags;
        fiemap->fm_extent_count = fieinfo->fi_extents_max;
        fiemap->fm_start = start;
        fiemap->fm_length = len;
        if (extent_count > 0 &&
            copy_from_user(&fiemap->fm_extents[0], fieinfo->fi_extents_start,
                           sizeof(struct fiemap_extent)) != 0)
                GOTO(out, rc = -EFAULT);

        rc = ll_do_fiemap(inode, fiemap, num_bytes);

        fieinfo->fi_flags = fiemap->fm_flags;
        fieinfo->fi_extents_mapped = fiemap->fm_mapped_extents;
        if (extent_count > 0 &&
            copy_to_user(fieinfo->fi_extents_start, &fiemap->fm_extents[0],
                         fiemap->fm_mapped_extents *
                         sizeof(struct fiemap_extent)) != 0)
                GOTO(out, rc = -EFAULT);
out:
        OBD_FREE_LARGE(fiemap, num_bytes);
        return rc;
}

struct posix_acl *ll_get_acl(struct inode *inode, int type)
{
        struct ll_inode_info *lli = ll_i2info(inode);
        struct posix_acl *acl = NULL;
        ENTRY;

        spin_lock(&lli->lli_lock);
        /* VFS' acl_permission_check->check_acl will release the refcount */
        acl = posix_acl_dup(lli->lli_posix_acl);
        spin_unlock(&lli->lli_lock);

        RETURN(acl);
}

#ifdef HAVE_IOP_SET_ACL
#ifdef CONFIG_FS_POSIX_ACL
int ll_set_acl(struct inode *inode, struct posix_acl *acl, int type)
{
        struct ll_sb_info *sbi = ll_i2sbi(inode);
        struct ptlrpc_request *req = NULL;
        const char *name = NULL;
        char *value = NULL;
        size_t value_size = 0;
        int rc = 0;
        ENTRY;

        switch (type) {
        case ACL_TYPE_ACCESS:
                name = XATTR_NAME_POSIX_ACL_ACCESS;
                if (acl)
                        rc = posix_acl_update_mode(inode, &inode->i_mode, &acl);
                break;

        case ACL_TYPE_DEFAULT:
                name = XATTR_NAME_POSIX_ACL_DEFAULT;
                if (!S_ISDIR(inode->i_mode))
                        rc = acl ? -EACCES : 0;
                break;

        default:
                rc = -EINVAL;
                break;
        }
        if (rc)
                return rc;

        if (acl) {
                value_size = posix_acl_xattr_size(acl->a_count);
                value = kmalloc(value_size, GFP_NOFS);
                if (value == NULL)
                        GOTO(out, rc = -ENOMEM);

                rc = posix_acl_to_xattr(&init_user_ns, acl, value, value_size);
                if (rc < 0)
                        GOTO(out_value, rc);
        }

        rc = md_setxattr(sbi->ll_md_exp, ll_inode2fid(inode),
                         value ? OBD_MD_FLXATTR : OBD_MD_FLXATTRRM,
                         name, value, value_size, 0, 0, &req);

        ptlrpc_req_finished(req);
out_value:
        kfree(value);
out:
        if (rc)
                forget_cached_acl(inode, type);
        else
                set_cached_acl(inode, type, acl);
        RETURN(rc);
}
#endif /* CONFIG_FS_POSIX_ACL */
#endif /* HAVE_IOP_SET_ACL */

#ifndef HAVE_GENERIC_PERMISSION_2ARGS
static int
# ifdef HAVE_GENERIC_PERMISSION_4ARGS
ll_check_acl(struct inode *inode, int mask, unsigned int flags)
# else
ll_check_acl(struct inode *inode, int mask)
# endif
{
# ifdef CONFIG_FS_POSIX_ACL
        struct posix_acl *acl;
        int rc;
        ENTRY;

#  ifdef HAVE_GENERIC_PERMISSION_4ARGS
        if (flags & IPERM_FLAG_RCU)
                return -ECHILD;
#  endif
        acl = ll_get_acl(inode, ACL_TYPE_ACCESS);

        if (!acl)
                RETURN(-EAGAIN);

        rc = posix_acl_permission(inode, acl, mask);
        posix_acl_release(acl);

        RETURN(rc);
# else /* !CONFIG_FS_POSIX_ACL */
        return -EAGAIN;
# endif /* CONFIG_FS_POSIX_ACL */
}
#endif /* HAVE_GENERIC_PERMISSION_2ARGS */

#ifdef HAVE_GENERIC_PERMISSION_4ARGS
int ll_inode_permission(struct inode *inode, int mask, unsigned int flags)
#else
# ifdef HAVE_INODE_PERMISION_2ARGS
int ll_inode_permission(struct inode *inode, int mask)
# else
int ll_inode_permission(struct inode *inode, int mask, struct nameidata *nd)
# endif
#endif
{
        int rc = 0;
        struct ll_sb_info *sbi;
        struct root_squash_info *squash;
        struct cred *cred = NULL;
        const struct cred *old_cred = NULL;
        cfs_cap_t cap;
        bool squash_id = false;
        ENTRY;

#ifdef MAY_NOT_BLOCK
        if (mask & MAY_NOT_BLOCK)
                return -ECHILD;
#elif defined(HAVE_GENERIC_PERMISSION_4ARGS)
        if (flags & IPERM_FLAG_RCU)
                return -ECHILD;
#endif

       /* as root inode are NOT getting validated in lookup operation,
        * need to do it before permission check. */

        if (inode == inode->i_sb->s_root->d_inode) {
                rc = ll_inode_revalidate(inode->i_sb->s_root, IT_LOOKUP);
                if (rc)
                        RETURN(rc);
        }

        CDEBUG(D_VFSTRACE, "VFS Op:inode="DFID"(%p), inode mode %x mask %o\n",
               PFID(ll_inode2fid(inode)), inode, inode->i_mode, mask);

        /* squash fsuid/fsgid if needed */
        sbi = ll_i2sbi(inode);
        squash = &sbi->ll_squash;
        if (unlikely(squash->rsi_uid != 0 &&
                     uid_eq(current_fsuid(), GLOBAL_ROOT_UID) &&
                     !(sbi->ll_flags & LL_SBI_NOROOTSQUASH))) {
                        squash_id = true;
        }
        if (squash_id) {
                CDEBUG(D_OTHER, "squash creds (%d:%d)=>(%d:%d)\n",
                       __kuid_val(current_fsuid()), __kgid_val(current_fsgid()),
                       squash->rsi_uid, squash->rsi_gid);

                /* update current process's credentials
                 * and FS capability */
                cred = prepare_creds();
                if (cred == NULL)
                        RETURN(-ENOMEM);

                cred->fsuid = make_kuid(&init_user_ns, squash->rsi_uid);
                cred->fsgid = make_kgid(&init_user_ns, squash->rsi_gid);
                for (cap = 0; cap < sizeof(cfs_cap_t) * 8; cap++) {
                        if ((1 << cap) & CFS_CAP_FS_MASK)
                                cap_lower(cred->cap_effective, cap);
                }
                old_cred = override_creds(cred);
        }

        ll_stats_ops_tally(sbi, LPROC_LL_INODE_PERM, 1);
        rc = ll_generic_permission(inode, mask, flags, ll_check_acl);
        /* restore current process's credentials and FS capability */
        if (squash_id) {
                revert_creds(old_cred);
                put_cred(cred);
        }

        RETURN(rc);
}

/* -o localflock - only provides locally consistent flock locks */
struct file_operations ll_file_operations = {
#ifdef HAVE_FILE_OPERATIONS_READ_WRITE_ITER
# ifdef HAVE_SYNC_READ_WRITE
        .read           = new_sync_read,
        .write          = new_sync_write,
# endif
        .read_iter      = ll_file_read_iter,
        .write_iter     = ll_file_write_iter,
#else /* !HAVE_FILE_OPERATIONS_READ_WRITE_ITER */
        .read           = ll_file_read,
        .aio_read       = ll_file_aio_read,
        .write          = ll_file_write,
        .aio_write      = ll_file_aio_write,
#endif /* HAVE_FILE_OPERATIONS_READ_WRITE_ITER */
        .unlocked_ioctl = ll_file_ioctl,
        .open           = ll_file_open,
        .release        = ll_file_release,
        .mmap           = ll_file_mmap,
        .llseek         = ll_file_seek,
        .splice_read    = ll_file_splice_read,
        .fsync          = ll_fsync,
        .flush          = ll_flush
};

struct file_operations ll_file_operations_flock = {
#ifdef HAVE_FILE_OPERATIONS_READ_WRITE_ITER
# ifdef HAVE_SYNC_READ_WRITE
        .read           = new_sync_read,
        .write          = new_sync_write,
# endif /* HAVE_SYNC_READ_WRITE */
        .read_iter      = ll_file_read_iter,
        .write_iter     = ll_file_write_iter,
#else /* !HAVE_FILE_OPERATIONS_READ_WRITE_ITER */
        .read           = ll_file_read,
        .aio_read       = ll_file_aio_read,
        .write          = ll_file_write,
        .aio_write      = ll_file_aio_write,
#endif /* HAVE_FILE_OPERATIONS_READ_WRITE_ITER */
        .unlocked_ioctl = ll_file_ioctl,
        .open           = ll_file_open,
        .release        = ll_file_release,
        .mmap           = ll_file_mmap,
        .llseek         = ll_file_seek,
        .splice_read    = ll_file_splice_read,
        .fsync          = ll_fsync,
        .flush          = ll_flush,
        .flock          = ll_file_flock,
        .lock           = ll_file_flock
};

/* These are for -o noflock - to return ENOSYS on flock calls */
struct file_operations ll_file_operations_noflock = {
#ifdef HAVE_FILE_OPERATIONS_READ_WRITE_ITER
# ifdef HAVE_SYNC_READ_WRITE
        .read           = new_sync_read,
        .write          = new_sync_write,
# endif /* HAVE_SYNC_READ_WRITE */
        .read_iter      = ll_file_read_iter,
        .write_iter     = ll_file_write_iter,
#else /* !HAVE_FILE_OPERATIONS_READ_WRITE_ITER */
        .read           = ll_file_read,
        .aio_read       = ll_file_aio_read,
        .write          = ll_file_write,
        .aio_write      = ll_file_aio_write,
#endif /* HAVE_FILE_OPERATIONS_READ_WRITE_ITER */
        .unlocked_ioctl = ll_file_ioctl,
        .open           = ll_file_open,
        .release        = ll_file_release,
        .mmap           = ll_file_mmap,
        .llseek         = ll_file_seek,
        .splice_read    = ll_file_splice_read,
        .fsync          = ll_fsync,
        .flush          = ll_flush,
        .flock          = ll_file_noflock,
        .lock           = ll_file_noflock
};

struct inode_operations ll_file_inode_operations = {
        .setattr        = ll_setattr,
        .getattr        = ll_getattr,
        .permission     = ll_inode_permission,
#ifdef HAVE_IOP_XATTR
        .setxattr       = ll_setxattr,
        .getxattr       = ll_getxattr,
        .removexattr    = ll_removexattr,
#endif
        .listxattr      = ll_listxattr,
        .fiemap         = ll_fiemap,
#ifdef HAVE_IOP_GET_ACL
        .get_acl        = ll_get_acl,
#endif
#ifdef HAVE_IOP_SET_ACL
        .set_acl        = ll_set_acl,
#endif
};

int ll_layout_conf(struct inode *inode, const struct cl_object_conf *conf)
{
        struct ll_inode_info *lli = ll_i2info(inode);
        struct cl_object *obj = lli->lli_clob;
        struct lu_env *env;
        int rc;
        __u16 refcheck;
        ENTRY;

        if (obj == NULL)
                RETURN(0);

        env = cl_env_get(&refcheck);
        if (IS_ERR(env))
                RETURN(PTR_ERR(env));

        rc = cl_conf_set(env, lli->lli_clob, conf);
        if (rc < 0)
                GOTO(out, rc);

        if (conf->coc_opc == OBJECT_CONF_SET) {
                struct ldlm_lock *lock = conf->coc_lock;
                struct cl_layout cl = {
                        .cl_layout_gen = 0,
                };

                LASSERT(lock != NULL);
                LASSERT(ldlm_has_layout(lock));

                /* it can only be allowed to match after layout is
                 * applied to inode otherwise false layout would be
                 * seen. Applying layout shoud happen before dropping
                 * the intent lock. */
                ldlm_lock_allow_match(lock);

                rc = cl_object_layout_get(env, obj, &cl);
                if (rc < 0)
                        GOTO(out, rc);

                CDEBUG(D_VFSTRACE,
                       DFID": layout version change: %u -> %u\n",
                       PFID(&lli->lli_fid), ll_layout_version_get(lli),
                       cl.cl_layout_gen);
                ll_layout_version_set(lli, cl.cl_layout_gen);
        }

out:
        cl_env_put(env, &refcheck);

        RETURN(rc);
}

/* Fetch layout from MDT with getxattr request, if it's not ready yet */
static int ll_layout_fetch(struct inode *inode, struct ldlm_lock *lock)

{
        struct ll_sb_info *sbi = ll_i2sbi(inode);
        struct ptlrpc_request *req;
        void *lvbdata;
        void *lmm;
        int lmmsize;
        int rc;
        ENTRY;

        CDEBUG(D_INODE, DFID" LVB_READY=%d l_lvb_data=%p l_lvb_len=%d\n",
               PFID(ll_inode2fid(inode)), ldlm_is_lvb_ready(lock),
               lock->l_lvb_data, lock->l_lvb_len);

        if (lock->l_lvb_data != NULL)
                RETURN(0);

        /* if layout lock was granted right away, the layout is returned
         * within DLM_LVB of dlm reply; otherwise if the lock was ever
         * blocked and then granted via completion ast, we have to fetch
         * layout here. Please note that we can't use the LVB buffer in
         * completion AST because it doesn't have a large enough buffer */
        rc = ll_get_default_mdsize(sbi, &lmmsize);
        if (rc < 0)
                RETURN(rc);

        rc = md_getxattr(sbi->ll_md_exp, ll_inode2fid(inode), OBD_MD_FLXATTR,
                         XATTR_NAME_LOV, lmmsize, &req);
        if (rc < 0) {
                if (rc == -ENODATA)
                        GOTO(out, rc = 0); /* empty layout */
                else
                        RETURN(rc);
        }

        lmmsize = rc;
        rc = 0;
        if (lmmsize == 0) /* empty layout */
                GOTO(out, rc = 0);

        lmm = req_capsule_server_sized_get(&req->rq_pill, &RMF_EADATA, lmmsize);
        if (lmm == NULL)
                GOTO(out, rc = -EFAULT);

        OBD_ALLOC_LARGE(lvbdata, lmmsize);
        if (lvbdata == NULL)
                GOTO(out, rc = -ENOMEM);

        memcpy(lvbdata, lmm, lmmsize);
        lock_res_and_lock(lock);
        if (unlikely(lock->l_lvb_data == NULL)) {
                lock->l_lvb_type = LVB_T_LAYOUT;
                lock->l_lvb_data = lvbdata;
                lock->l_lvb_len = lmmsize;
                lvbdata = NULL;
        }
        unlock_res_and_lock(lock);

        if (lvbdata)
                OBD_FREE_LARGE(lvbdata, lmmsize);

        EXIT;

out:
        ptlrpc_req_finished(req);
        return rc;
}

/**
 * Apply the layout to the inode. Layout lock is held and will be released
 * in this function.
 */
static int ll_layout_lock_set(struct lustre_handle *lockh, enum ldlm_mode mode,
                              struct inode *inode)
{
        struct ll_inode_info *lli = ll_i2info(inode);
        struct ll_sb_info    *sbi = ll_i2sbi(inode);
        struct ldlm_lock *lock;
        struct cl_object_conf conf;
        int rc = 0;
        bool lvb_ready;
        bool wait_layout = false;
        ENTRY;

        LASSERT(lustre_handle_is_used(lockh));

        lock = ldlm_handle2lock(lockh);
        LASSERT(lock != NULL);
        LASSERT(ldlm_has_layout(lock));

        LDLM_DEBUG(lock, "file "DFID"(%p) being reconfigured",
                   PFID(&lli->lli_fid), inode);

        /* in case this is a caching lock and reinstate with new inode */
        md_set_lock_data(sbi->ll_md_exp, lockh, inode, NULL);

        lock_res_and_lock(lock);
        lvb_ready = ldlm_is_lvb_ready(lock);
        unlock_res_and_lock(lock);

        /* checking lvb_ready is racy but this is okay. The worst case is
         * that multi processes may configure the file on the same time. */
        if (lvb_ready)
                GOTO(out, rc = 0);

        rc = ll_layout_fetch(inode, lock);
        if (rc < 0)
                GOTO(out, rc);

        /* for layout lock, lmm is stored in lock's lvb.
         * lvb_data is immutable if the lock is held so it's safe to access it
         * without res lock.
         *
         * set layout to file. Unlikely this will fail as old layout was
         * surely eliminated */
        memset(&conf, 0, sizeof conf);
        conf.coc_opc = OBJECT_CONF_SET;
        conf.coc_inode = inode;
        conf.coc_lock = lock;
        conf.u.coc_layout.lb_buf = lock->l_lvb_data;
        conf.u.coc_layout.lb_len = lock->l_lvb_len;
        rc = ll_layout_conf(inode, &conf);

        /* refresh layout failed, need to wait */
        wait_layout = rc == -EBUSY;
        EXIT;
out:
        LDLM_LOCK_PUT(lock);
        ldlm_lock_decref(lockh, mode);

        /* wait for IO to complete if it's still being used. */
        if (wait_layout) {
                CDEBUG(D_INODE, "%s: "DFID"(%p) wait for layout reconf\n",
                       sbi->ll_fsname, PFID(&lli->lli_fid), inode);

                memset(&conf, 0, sizeof conf);
                conf.coc_opc = OBJECT_CONF_WAIT;
                conf.coc_inode = inode;
                rc = ll_layout_conf(inode, &conf);
                if (rc == 0)
                        rc = -EAGAIN;

                CDEBUG(D_INODE, "%s file="DFID" waiting layout return: %d\n",
                       sbi->ll_fsname, PFID(&lli->lli_fid), rc);
        }
        RETURN(rc);
}

/**
 * Issue layout intent RPC to MDS.
 * \param inode [in]    file inode
 * \param intent [in]   layout intent
 *
 * \retval 0    on success
 * \retval < 0  error code
 */
static int ll_layout_intent(struct inode *inode, struct layout_intent *intent)
{
        struct ll_inode_info  *lli = ll_i2info(inode);
        struct ll_sb_info     *sbi = ll_i2sbi(inode);
        struct md_op_data     *op_data;
        struct lookup_intent it;
        struct ptlrpc_request *req;
        int rc;
        ENTRY;

        op_data = ll_prep_md_op_data(NULL, inode, inode, NULL,
                                     0, 0, LUSTRE_OPC_ANY, NULL);
        if (IS_ERR(op_data))
                RETURN(PTR_ERR(op_data));

        op_data->op_data = intent;
        op_data->op_data_size = sizeof(*intent);

        memset(&it, 0, sizeof(it));
        it.it_op = IT_LAYOUT;
        if (intent->li_opc == LAYOUT_INTENT_WRITE ||
            intent->li_opc == LAYOUT_INTENT_TRUNC)
                it.it_flags = FMODE_WRITE;

        LDLM_DEBUG_NOLOCK("%s: requeue layout lock for file "DFID"(%p)",
                          sbi->ll_fsname, PFID(&lli->lli_fid), inode);

        rc = md_intent_lock(sbi->ll_md_exp, op_data, &it, &req,
                            &ll_md_blocking_ast, 0);
        if (it.it_request != NULL)
                ptlrpc_req_finished(it.it_request);
        it.it_request = NULL;

        ll_finish_md_op_data(op_data);

        /* set lock data in case this is a new lock */
        if (!rc)
                ll_set_lock_data(sbi->ll_md_exp, inode, &it, NULL);

        ll_intent_drop_lock(&it);

        RETURN(rc);
}

/**
 * This function checks if there exists a LAYOUT lock on the client side,
 * or enqueues it if it doesn't have one in cache.
 *
 * This function will not hold layout lock so it may be revoked any time after
 * this function returns. Any operations depend on layout should be redone
 * in that case.
 *
 * This function should be called before lov_io_init() to get an uptodate
 * layout version, the caller should save the version number and after IO
 * is finished, this function should be called again to verify that layout
 * is not changed during IO time.
 */
int ll_layout_refresh(struct inode *inode, __u32 *gen)
{
        struct ll_inode_info    *lli = ll_i2info(inode);
        struct ll_sb_info       *sbi = ll_i2sbi(inode);
        struct lustre_handle lockh;
        struct layout_intent intent = {
                .li_opc = LAYOUT_INTENT_ACCESS,
        };
        enum ldlm_mode mode;
        int rc;
        ENTRY;

        *gen = ll_layout_version_get(lli);
        if (!(sbi->ll_flags & LL_SBI_LAYOUT_LOCK) || *gen != CL_LAYOUT_GEN_NONE)
                RETURN(0);

        /* sanity checks */
        LASSERT(fid_is_sane(ll_inode2fid(inode)));
        LASSERT(S_ISREG(inode->i_mode));

        /* take layout lock mutex to enqueue layout lock exclusively. */
        mutex_lock(&lli->lli_layout_mutex);

        while (1) {
                /* mostly layout lock is caching on the local side, so try to
                 * match it before grabbing layout lock mutex. */
                mode = ll_take_md_lock(inode, MDS_INODELOCK_LAYOUT, &lockh, 0,
                                       LCK_CR | LCK_CW | LCK_PR | LCK_PW);
                if (mode != 0) { /* hit cached lock */
                        rc = ll_layout_lock_set(&lockh, mode, inode);
                        if (rc == -EAGAIN)
                                continue;
                        break;
                }

                rc = ll_layout_intent(inode, &intent);
                if (rc != 0)
                        break;
        }

        if (rc == 0)
                *gen = ll_layout_version_get(lli);
        mutex_unlock(&lli->lli_layout_mutex);

        RETURN(rc);
}

/**
 * Issue layout intent RPC indicating where in a file an IO is about to write.
 *
 * \param[in] inode     file inode.
 * \param[in] ext       write range with start offset of fille in bytes where
 *                      an IO is about to write, and exclusive end offset in
 *                      bytes.
 *
 * \retval 0    on success
 * \retval < 0  error code
 */
int ll_layout_write_intent(struct inode *inode, enum layout_intent_opc opc,
                           struct lu_extent *ext)
{
        struct layout_intent intent = {
                .li_opc = opc,
                .li_extent.e_start = ext->e_start,
                .li_extent.e_end = ext->e_end,
        };
        int rc;
        ENTRY;

        rc = ll_layout_intent(inode, &intent);

        RETURN(rc);
}

/**
 *  This function send a restore request to the MDT
 */
int ll_layout_restore(struct inode *inode, loff_t offset, __u64 length)
{
        struct hsm_user_request *hur;
        int                      len, rc;
        ENTRY;

        len = sizeof(struct hsm_user_request) +
              sizeof(struct hsm_user_item);
        OBD_ALLOC(hur, len);
        if (hur == NULL)
                RETURN(-ENOMEM);

        hur->hur_request.hr_action = HUA_RESTORE;
        hur->hur_request.hr_archive_id = 0;
        hur->hur_request.hr_flags = 0;
        memcpy(&hur->hur_user_item[0].hui_fid, &ll_i2info(inode)->lli_fid,
               sizeof(hur->hur_user_item[0].hui_fid));
        hur->hur_user_item[0].hui_extent.offset = offset;
        hur->hur_user_item[0].hui_extent.length = length;
        hur->hur_request.hr_itemcount = 1;
        rc = obd_iocontrol(LL_IOC_HSM_REQUEST, ll_i2sbi(inode)->ll_md_exp,
                           len, hur, NULL);
        OBD_FREE(hur, len);
        RETURN(rc);
}