xref: /openbmc/linux/fs/nfs/nfs4proc.c (revision afc98d90)
1 /*
2  *  fs/nfs/nfs4proc.c
3  *
4  *  Client-side procedure declarations for NFSv4.
5  *
6  *  Copyright (c) 2002 The Regents of the University of Michigan.
7  *  All rights reserved.
8  *
9  *  Kendrick Smith <kmsmith@umich.edu>
10  *  Andy Adamson   <andros@umich.edu>
11  *
12  *  Redistribution and use in source and binary forms, with or without
13  *  modification, are permitted provided that the following conditions
14  *  are met:
15  *
16  *  1. Redistributions of source code must retain the above copyright
17  *     notice, this list of conditions and the following disclaimer.
18  *  2. Redistributions in binary form must reproduce the above copyright
19  *     notice, this list of conditions and the following disclaimer in the
20  *     documentation and/or other materials provided with the distribution.
21  *  3. Neither the name of the University nor the names of its
22  *     contributors may be used to endorse or promote products derived
23  *     from this software without specific prior written permission.
24  *
25  *  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
26  *  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
27  *  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
28  *  DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
29  *  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
30  *  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
31  *  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
32  *  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
33  *  LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
34  *  NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
35  *  SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36  */
37 
38 #include <linux/mm.h>
39 #include <linux/delay.h>
40 #include <linux/errno.h>
41 #include <linux/string.h>
42 #include <linux/ratelimit.h>
43 #include <linux/printk.h>
44 #include <linux/slab.h>
45 #include <linux/sunrpc/clnt.h>
46 #include <linux/nfs.h>
47 #include <linux/nfs4.h>
48 #include <linux/nfs_fs.h>
49 #include <linux/nfs_page.h>
50 #include <linux/nfs_mount.h>
51 #include <linux/namei.h>
52 #include <linux/mount.h>
53 #include <linux/module.h>
54 #include <linux/nfs_idmap.h>
55 #include <linux/xattr.h>
56 #include <linux/utsname.h>
57 #include <linux/freezer.h>
58 
59 #include "nfs4_fs.h"
60 #include "delegation.h"
61 #include "internal.h"
62 #include "iostat.h"
63 #include "callback.h"
64 #include "pnfs.h"
65 #include "netns.h"
66 #include "nfs4session.h"
67 #include "fscache.h"
68 
69 #include "nfs4trace.h"
70 
71 #define NFSDBG_FACILITY		NFSDBG_PROC
72 
73 #define NFS4_POLL_RETRY_MIN	(HZ/10)
74 #define NFS4_POLL_RETRY_MAX	(15*HZ)
75 
76 struct nfs4_opendata;
77 static int _nfs4_proc_open(struct nfs4_opendata *data);
78 static int _nfs4_recover_proc_open(struct nfs4_opendata *data);
79 static int nfs4_do_fsinfo(struct nfs_server *, struct nfs_fh *, struct nfs_fsinfo *);
80 static int nfs4_async_handle_error(struct rpc_task *, const struct nfs_server *, struct nfs4_state *);
81 static void nfs_fixup_referral_attributes(struct nfs_fattr *fattr);
82 static int nfs4_proc_getattr(struct nfs_server *, struct nfs_fh *, struct nfs_fattr *, struct nfs4_label *label);
83 static int _nfs4_proc_getattr(struct nfs_server *server, struct nfs_fh *fhandle, struct nfs_fattr *fattr, struct nfs4_label *label);
84 static int nfs4_do_setattr(struct inode *inode, struct rpc_cred *cred,
85 			    struct nfs_fattr *fattr, struct iattr *sattr,
86 			    struct nfs4_state *state, struct nfs4_label *ilabel,
87 			    struct nfs4_label *olabel);
88 #ifdef CONFIG_NFS_V4_1
89 static int nfs41_test_stateid(struct nfs_server *, nfs4_stateid *,
90 		struct rpc_cred *);
91 static int nfs41_free_stateid(struct nfs_server *, nfs4_stateid *,
92 		struct rpc_cred *);
93 #endif
94 
95 #ifdef CONFIG_NFS_V4_SECURITY_LABEL
96 static inline struct nfs4_label *
97 nfs4_label_init_security(struct inode *dir, struct dentry *dentry,
98 	struct iattr *sattr, struct nfs4_label *label)
99 {
100 	int err;
101 
102 	if (label == NULL)
103 		return NULL;
104 
105 	if (nfs_server_capable(dir, NFS_CAP_SECURITY_LABEL) == 0)
106 		return NULL;
107 
108 	err = security_dentry_init_security(dentry, sattr->ia_mode,
109 				&dentry->d_name, (void **)&label->label, &label->len);
110 	if (err == 0)
111 		return label;
112 
113 	return NULL;
114 }
115 static inline void
116 nfs4_label_release_security(struct nfs4_label *label)
117 {
118 	if (label)
119 		security_release_secctx(label->label, label->len);
120 }
121 static inline u32 *nfs4_bitmask(struct nfs_server *server, struct nfs4_label *label)
122 {
123 	if (label)
124 		return server->attr_bitmask;
125 
126 	return server->attr_bitmask_nl;
127 }
128 #else
129 static inline struct nfs4_label *
130 nfs4_label_init_security(struct inode *dir, struct dentry *dentry,
131 	struct iattr *sattr, struct nfs4_label *l)
132 { return NULL; }
133 static inline void
134 nfs4_label_release_security(struct nfs4_label *label)
135 { return; }
136 static inline u32 *
137 nfs4_bitmask(struct nfs_server *server, struct nfs4_label *label)
138 { return server->attr_bitmask; }
139 #endif
140 
141 /* Prevent leaks of NFSv4 errors into userland */
142 static int nfs4_map_errors(int err)
143 {
144 	if (err >= -1000)
145 		return err;
146 	switch (err) {
147 	case -NFS4ERR_RESOURCE:
148 	case -NFS4ERR_LAYOUTTRYLATER:
149 	case -NFS4ERR_RECALLCONFLICT:
150 		return -EREMOTEIO;
151 	case -NFS4ERR_WRONGSEC:
152 	case -NFS4ERR_WRONG_CRED:
153 		return -EPERM;
154 	case -NFS4ERR_BADOWNER:
155 	case -NFS4ERR_BADNAME:
156 		return -EINVAL;
157 	case -NFS4ERR_SHARE_DENIED:
158 		return -EACCES;
159 	case -NFS4ERR_MINOR_VERS_MISMATCH:
160 		return -EPROTONOSUPPORT;
161 	case -NFS4ERR_ACCESS:
162 		return -EACCES;
163 	case -NFS4ERR_FILE_OPEN:
164 		return -EBUSY;
165 	default:
166 		dprintk("%s could not handle NFSv4 error %d\n",
167 				__func__, -err);
168 		break;
169 	}
170 	return -EIO;
171 }
172 
173 /*
174  * This is our standard bitmap for GETATTR requests.
175  */
176 const u32 nfs4_fattr_bitmap[3] = {
177 	FATTR4_WORD0_TYPE
178 	| FATTR4_WORD0_CHANGE
179 	| FATTR4_WORD0_SIZE
180 	| FATTR4_WORD0_FSID
181 	| FATTR4_WORD0_FILEID,
182 	FATTR4_WORD1_MODE
183 	| FATTR4_WORD1_NUMLINKS
184 	| FATTR4_WORD1_OWNER
185 	| FATTR4_WORD1_OWNER_GROUP
186 	| FATTR4_WORD1_RAWDEV
187 	| FATTR4_WORD1_SPACE_USED
188 	| FATTR4_WORD1_TIME_ACCESS
189 	| FATTR4_WORD1_TIME_METADATA
190 	| FATTR4_WORD1_TIME_MODIFY,
191 #ifdef CONFIG_NFS_V4_SECURITY_LABEL
192 	FATTR4_WORD2_SECURITY_LABEL
193 #endif
194 };
195 
196 static const u32 nfs4_pnfs_open_bitmap[3] = {
197 	FATTR4_WORD0_TYPE
198 	| FATTR4_WORD0_CHANGE
199 	| FATTR4_WORD0_SIZE
200 	| FATTR4_WORD0_FSID
201 	| FATTR4_WORD0_FILEID,
202 	FATTR4_WORD1_MODE
203 	| FATTR4_WORD1_NUMLINKS
204 	| FATTR4_WORD1_OWNER
205 	| FATTR4_WORD1_OWNER_GROUP
206 	| FATTR4_WORD1_RAWDEV
207 	| FATTR4_WORD1_SPACE_USED
208 	| FATTR4_WORD1_TIME_ACCESS
209 	| FATTR4_WORD1_TIME_METADATA
210 	| FATTR4_WORD1_TIME_MODIFY,
211 	FATTR4_WORD2_MDSTHRESHOLD
212 };
213 
214 static const u32 nfs4_open_noattr_bitmap[3] = {
215 	FATTR4_WORD0_TYPE
216 	| FATTR4_WORD0_CHANGE
217 	| FATTR4_WORD0_FILEID,
218 };
219 
220 const u32 nfs4_statfs_bitmap[3] = {
221 	FATTR4_WORD0_FILES_AVAIL
222 	| FATTR4_WORD0_FILES_FREE
223 	| FATTR4_WORD0_FILES_TOTAL,
224 	FATTR4_WORD1_SPACE_AVAIL
225 	| FATTR4_WORD1_SPACE_FREE
226 	| FATTR4_WORD1_SPACE_TOTAL
227 };
228 
229 const u32 nfs4_pathconf_bitmap[3] = {
230 	FATTR4_WORD0_MAXLINK
231 	| FATTR4_WORD0_MAXNAME,
232 	0
233 };
234 
235 const u32 nfs4_fsinfo_bitmap[3] = { FATTR4_WORD0_MAXFILESIZE
236 			| FATTR4_WORD0_MAXREAD
237 			| FATTR4_WORD0_MAXWRITE
238 			| FATTR4_WORD0_LEASE_TIME,
239 			FATTR4_WORD1_TIME_DELTA
240 			| FATTR4_WORD1_FS_LAYOUT_TYPES,
241 			FATTR4_WORD2_LAYOUT_BLKSIZE
242 };
243 
244 const u32 nfs4_fs_locations_bitmap[3] = {
245 	FATTR4_WORD0_TYPE
246 	| FATTR4_WORD0_CHANGE
247 	| FATTR4_WORD0_SIZE
248 	| FATTR4_WORD0_FSID
249 	| FATTR4_WORD0_FILEID
250 	| FATTR4_WORD0_FS_LOCATIONS,
251 	FATTR4_WORD1_MODE
252 	| FATTR4_WORD1_NUMLINKS
253 	| FATTR4_WORD1_OWNER
254 	| FATTR4_WORD1_OWNER_GROUP
255 	| FATTR4_WORD1_RAWDEV
256 	| FATTR4_WORD1_SPACE_USED
257 	| FATTR4_WORD1_TIME_ACCESS
258 	| FATTR4_WORD1_TIME_METADATA
259 	| FATTR4_WORD1_TIME_MODIFY
260 	| FATTR4_WORD1_MOUNTED_ON_FILEID,
261 };
262 
263 static void nfs4_setup_readdir(u64 cookie, __be32 *verifier, struct dentry *dentry,
264 		struct nfs4_readdir_arg *readdir)
265 {
266 	__be32 *start, *p;
267 
268 	if (cookie > 2) {
269 		readdir->cookie = cookie;
270 		memcpy(&readdir->verifier, verifier, sizeof(readdir->verifier));
271 		return;
272 	}
273 
274 	readdir->cookie = 0;
275 	memset(&readdir->verifier, 0, sizeof(readdir->verifier));
276 	if (cookie == 2)
277 		return;
278 
279 	/*
280 	 * NFSv4 servers do not return entries for '.' and '..'
281 	 * Therefore, we fake these entries here.  We let '.'
282 	 * have cookie 0 and '..' have cookie 1.  Note that
283 	 * when talking to the server, we always send cookie 0
284 	 * instead of 1 or 2.
285 	 */
286 	start = p = kmap_atomic(*readdir->pages);
287 
288 	if (cookie == 0) {
289 		*p++ = xdr_one;                                  /* next */
290 		*p++ = xdr_zero;                   /* cookie, first word */
291 		*p++ = xdr_one;                   /* cookie, second word */
292 		*p++ = xdr_one;                             /* entry len */
293 		memcpy(p, ".\0\0\0", 4);                        /* entry */
294 		p++;
295 		*p++ = xdr_one;                         /* bitmap length */
296 		*p++ = htonl(FATTR4_WORD0_FILEID);             /* bitmap */
297 		*p++ = htonl(8);              /* attribute buffer length */
298 		p = xdr_encode_hyper(p, NFS_FILEID(dentry->d_inode));
299 	}
300 
301 	*p++ = xdr_one;                                  /* next */
302 	*p++ = xdr_zero;                   /* cookie, first word */
303 	*p++ = xdr_two;                   /* cookie, second word */
304 	*p++ = xdr_two;                             /* entry len */
305 	memcpy(p, "..\0\0", 4);                         /* entry */
306 	p++;
307 	*p++ = xdr_one;                         /* bitmap length */
308 	*p++ = htonl(FATTR4_WORD0_FILEID);             /* bitmap */
309 	*p++ = htonl(8);              /* attribute buffer length */
310 	p = xdr_encode_hyper(p, NFS_FILEID(dentry->d_parent->d_inode));
311 
312 	readdir->pgbase = (char *)p - (char *)start;
313 	readdir->count -= readdir->pgbase;
314 	kunmap_atomic(start);
315 }
316 
317 static int nfs4_delay(struct rpc_clnt *clnt, long *timeout)
318 {
319 	int res = 0;
320 
321 	might_sleep();
322 
323 	if (*timeout <= 0)
324 		*timeout = NFS4_POLL_RETRY_MIN;
325 	if (*timeout > NFS4_POLL_RETRY_MAX)
326 		*timeout = NFS4_POLL_RETRY_MAX;
327 	freezable_schedule_timeout_killable_unsafe(*timeout);
328 	if (fatal_signal_pending(current))
329 		res = -ERESTARTSYS;
330 	*timeout <<= 1;
331 	return res;
332 }
333 
334 /* This is the error handling routine for processes that are allowed
335  * to sleep.
336  */
337 static int nfs4_handle_exception(struct nfs_server *server, int errorcode, struct nfs4_exception *exception)
338 {
339 	struct nfs_client *clp = server->nfs_client;
340 	struct nfs4_state *state = exception->state;
341 	struct inode *inode = exception->inode;
342 	int ret = errorcode;
343 
344 	exception->retry = 0;
345 	switch(errorcode) {
346 		case 0:
347 			return 0;
348 		case -NFS4ERR_OPENMODE:
349 			if (inode && nfs4_have_delegation(inode, FMODE_READ)) {
350 				nfs4_inode_return_delegation(inode);
351 				exception->retry = 1;
352 				return 0;
353 			}
354 			if (state == NULL)
355 				break;
356 			ret = nfs4_schedule_stateid_recovery(server, state);
357 			if (ret < 0)
358 				break;
359 			goto wait_on_recovery;
360 		case -NFS4ERR_DELEG_REVOKED:
361 		case -NFS4ERR_ADMIN_REVOKED:
362 		case -NFS4ERR_BAD_STATEID:
363 			if (inode != NULL && nfs4_have_delegation(inode, FMODE_READ)) {
364 				nfs_remove_bad_delegation(inode);
365 				exception->retry = 1;
366 				break;
367 			}
368 			if (state == NULL)
369 				break;
370 			ret = nfs4_schedule_stateid_recovery(server, state);
371 			if (ret < 0)
372 				break;
373 			goto wait_on_recovery;
374 		case -NFS4ERR_EXPIRED:
375 			if (state != NULL) {
376 				ret = nfs4_schedule_stateid_recovery(server, state);
377 				if (ret < 0)
378 					break;
379 			}
380 		case -NFS4ERR_STALE_STATEID:
381 		case -NFS4ERR_STALE_CLIENTID:
382 			nfs4_schedule_lease_recovery(clp);
383 			goto wait_on_recovery;
384 		case -NFS4ERR_MOVED:
385 			ret = nfs4_schedule_migration_recovery(server);
386 			if (ret < 0)
387 				break;
388 			goto wait_on_recovery;
389 		case -NFS4ERR_LEASE_MOVED:
390 			nfs4_schedule_lease_moved_recovery(clp);
391 			goto wait_on_recovery;
392 #if defined(CONFIG_NFS_V4_1)
393 		case -NFS4ERR_BADSESSION:
394 		case -NFS4ERR_BADSLOT:
395 		case -NFS4ERR_BAD_HIGH_SLOT:
396 		case -NFS4ERR_CONN_NOT_BOUND_TO_SESSION:
397 		case -NFS4ERR_DEADSESSION:
398 		case -NFS4ERR_SEQ_FALSE_RETRY:
399 		case -NFS4ERR_SEQ_MISORDERED:
400 			dprintk("%s ERROR: %d Reset session\n", __func__,
401 				errorcode);
402 			nfs4_schedule_session_recovery(clp->cl_session, errorcode);
403 			goto wait_on_recovery;
404 #endif /* defined(CONFIG_NFS_V4_1) */
405 		case -NFS4ERR_FILE_OPEN:
406 			if (exception->timeout > HZ) {
407 				/* We have retried a decent amount, time to
408 				 * fail
409 				 */
410 				ret = -EBUSY;
411 				break;
412 			}
413 		case -NFS4ERR_GRACE:
414 		case -NFS4ERR_DELAY:
415 			ret = nfs4_delay(server->client, &exception->timeout);
416 			if (ret != 0)
417 				break;
418 		case -NFS4ERR_RETRY_UNCACHED_REP:
419 		case -NFS4ERR_OLD_STATEID:
420 			exception->retry = 1;
421 			break;
422 		case -NFS4ERR_BADOWNER:
423 			/* The following works around a Linux server bug! */
424 		case -NFS4ERR_BADNAME:
425 			if (server->caps & NFS_CAP_UIDGID_NOMAP) {
426 				server->caps &= ~NFS_CAP_UIDGID_NOMAP;
427 				exception->retry = 1;
428 				printk(KERN_WARNING "NFS: v4 server %s "
429 						"does not accept raw "
430 						"uid/gids. "
431 						"Reenabling the idmapper.\n",
432 						server->nfs_client->cl_hostname);
433 			}
434 	}
435 	/* We failed to handle the error */
436 	return nfs4_map_errors(ret);
437 wait_on_recovery:
438 	ret = nfs4_wait_clnt_recover(clp);
439 	if (test_bit(NFS_MIG_FAILED, &server->mig_status))
440 		return -EIO;
441 	if (ret == 0)
442 		exception->retry = 1;
443 	return ret;
444 }
445 
446 /*
447  * Return 'true' if 'clp' is using an rpc_client that is integrity protected
448  * or 'false' otherwise.
449  */
450 static bool _nfs4_is_integrity_protected(struct nfs_client *clp)
451 {
452 	rpc_authflavor_t flavor = clp->cl_rpcclient->cl_auth->au_flavor;
453 
454 	if (flavor == RPC_AUTH_GSS_KRB5I ||
455 	    flavor == RPC_AUTH_GSS_KRB5P)
456 		return true;
457 
458 	return false;
459 }
460 
461 static void do_renew_lease(struct nfs_client *clp, unsigned long timestamp)
462 {
463 	spin_lock(&clp->cl_lock);
464 	if (time_before(clp->cl_last_renewal,timestamp))
465 		clp->cl_last_renewal = timestamp;
466 	spin_unlock(&clp->cl_lock);
467 }
468 
469 static void renew_lease(const struct nfs_server *server, unsigned long timestamp)
470 {
471 	do_renew_lease(server->nfs_client, timestamp);
472 }
473 
474 struct nfs4_call_sync_data {
475 	const struct nfs_server *seq_server;
476 	struct nfs4_sequence_args *seq_args;
477 	struct nfs4_sequence_res *seq_res;
478 };
479 
480 static void nfs4_init_sequence(struct nfs4_sequence_args *args,
481 			       struct nfs4_sequence_res *res, int cache_reply)
482 {
483 	args->sa_slot = NULL;
484 	args->sa_cache_this = cache_reply;
485 	args->sa_privileged = 0;
486 
487 	res->sr_slot = NULL;
488 }
489 
490 static void nfs4_set_sequence_privileged(struct nfs4_sequence_args *args)
491 {
492 	args->sa_privileged = 1;
493 }
494 
495 static int nfs40_setup_sequence(const struct nfs_server *server,
496 				struct nfs4_sequence_args *args,
497 				struct nfs4_sequence_res *res,
498 				struct rpc_task *task)
499 {
500 	struct nfs4_slot_table *tbl = server->nfs_client->cl_slot_tbl;
501 	struct nfs4_slot *slot;
502 
503 	/* slot already allocated? */
504 	if (res->sr_slot != NULL)
505 		goto out_start;
506 
507 	spin_lock(&tbl->slot_tbl_lock);
508 	if (nfs4_slot_tbl_draining(tbl) && !args->sa_privileged)
509 		goto out_sleep;
510 
511 	slot = nfs4_alloc_slot(tbl);
512 	if (IS_ERR(slot)) {
513 		if (slot == ERR_PTR(-ENOMEM))
514 			task->tk_timeout = HZ >> 2;
515 		goto out_sleep;
516 	}
517 	spin_unlock(&tbl->slot_tbl_lock);
518 
519 	args->sa_slot = slot;
520 	res->sr_slot = slot;
521 
522 out_start:
523 	rpc_call_start(task);
524 	return 0;
525 
526 out_sleep:
527 	if (args->sa_privileged)
528 		rpc_sleep_on_priority(&tbl->slot_tbl_waitq, task,
529 				NULL, RPC_PRIORITY_PRIVILEGED);
530 	else
531 		rpc_sleep_on(&tbl->slot_tbl_waitq, task, NULL);
532 	spin_unlock(&tbl->slot_tbl_lock);
533 	return -EAGAIN;
534 }
535 
536 static int nfs40_sequence_done(struct rpc_task *task,
537 			       struct nfs4_sequence_res *res)
538 {
539 	struct nfs4_slot *slot = res->sr_slot;
540 	struct nfs4_slot_table *tbl;
541 
542 	if (slot == NULL)
543 		goto out;
544 
545 	tbl = slot->table;
546 	spin_lock(&tbl->slot_tbl_lock);
547 	if (!nfs41_wake_and_assign_slot(tbl, slot))
548 		nfs4_free_slot(tbl, slot);
549 	spin_unlock(&tbl->slot_tbl_lock);
550 
551 	res->sr_slot = NULL;
552 out:
553 	return 1;
554 }
555 
556 #if defined(CONFIG_NFS_V4_1)
557 
558 static void nfs41_sequence_free_slot(struct nfs4_sequence_res *res)
559 {
560 	struct nfs4_session *session;
561 	struct nfs4_slot_table *tbl;
562 	struct nfs4_slot *slot = res->sr_slot;
563 	bool send_new_highest_used_slotid = false;
564 
565 	tbl = slot->table;
566 	session = tbl->session;
567 
568 	spin_lock(&tbl->slot_tbl_lock);
569 	/* Be nice to the server: try to ensure that the last transmitted
570 	 * value for highest_user_slotid <= target_highest_slotid
571 	 */
572 	if (tbl->highest_used_slotid > tbl->target_highest_slotid)
573 		send_new_highest_used_slotid = true;
574 
575 	if (nfs41_wake_and_assign_slot(tbl, slot)) {
576 		send_new_highest_used_slotid = false;
577 		goto out_unlock;
578 	}
579 	nfs4_free_slot(tbl, slot);
580 
581 	if (tbl->highest_used_slotid != NFS4_NO_SLOT)
582 		send_new_highest_used_slotid = false;
583 out_unlock:
584 	spin_unlock(&tbl->slot_tbl_lock);
585 	res->sr_slot = NULL;
586 	if (send_new_highest_used_slotid)
587 		nfs41_server_notify_highest_slotid_update(session->clp);
588 }
589 
590 int nfs41_sequence_done(struct rpc_task *task, struct nfs4_sequence_res *res)
591 {
592 	struct nfs4_session *session;
593 	struct nfs4_slot *slot = res->sr_slot;
594 	struct nfs_client *clp;
595 	bool interrupted = false;
596 	int ret = 1;
597 
598 	if (slot == NULL)
599 		goto out_noaction;
600 	/* don't increment the sequence number if the task wasn't sent */
601 	if (!RPC_WAS_SENT(task))
602 		goto out;
603 
604 	session = slot->table->session;
605 
606 	if (slot->interrupted) {
607 		slot->interrupted = 0;
608 		interrupted = true;
609 	}
610 
611 	trace_nfs4_sequence_done(session, res);
612 	/* Check the SEQUENCE operation status */
613 	switch (res->sr_status) {
614 	case 0:
615 		/* Update the slot's sequence and clientid lease timer */
616 		++slot->seq_nr;
617 		clp = session->clp;
618 		do_renew_lease(clp, res->sr_timestamp);
619 		/* Check sequence flags */
620 		if (res->sr_status_flags != 0)
621 			nfs4_schedule_lease_recovery(clp);
622 		nfs41_update_target_slotid(slot->table, slot, res);
623 		break;
624 	case 1:
625 		/*
626 		 * sr_status remains 1 if an RPC level error occurred.
627 		 * The server may or may not have processed the sequence
628 		 * operation..
629 		 * Mark the slot as having hosted an interrupted RPC call.
630 		 */
631 		slot->interrupted = 1;
632 		goto out;
633 	case -NFS4ERR_DELAY:
634 		/* The server detected a resend of the RPC call and
635 		 * returned NFS4ERR_DELAY as per Section 2.10.6.2
636 		 * of RFC5661.
637 		 */
638 		dprintk("%s: slot=%u seq=%u: Operation in progress\n",
639 			__func__,
640 			slot->slot_nr,
641 			slot->seq_nr);
642 		goto out_retry;
643 	case -NFS4ERR_BADSLOT:
644 		/*
645 		 * The slot id we used was probably retired. Try again
646 		 * using a different slot id.
647 		 */
648 		goto retry_nowait;
649 	case -NFS4ERR_SEQ_MISORDERED:
650 		/*
651 		 * Was the last operation on this sequence interrupted?
652 		 * If so, retry after bumping the sequence number.
653 		 */
654 		if (interrupted) {
655 			++slot->seq_nr;
656 			goto retry_nowait;
657 		}
658 		/*
659 		 * Could this slot have been previously retired?
660 		 * If so, then the server may be expecting seq_nr = 1!
661 		 */
662 		if (slot->seq_nr != 1) {
663 			slot->seq_nr = 1;
664 			goto retry_nowait;
665 		}
666 		break;
667 	case -NFS4ERR_SEQ_FALSE_RETRY:
668 		++slot->seq_nr;
669 		goto retry_nowait;
670 	default:
671 		/* Just update the slot sequence no. */
672 		++slot->seq_nr;
673 	}
674 out:
675 	/* The session may be reset by one of the error handlers. */
676 	dprintk("%s: Error %d free the slot \n", __func__, res->sr_status);
677 	nfs41_sequence_free_slot(res);
678 out_noaction:
679 	return ret;
680 retry_nowait:
681 	if (rpc_restart_call_prepare(task)) {
682 		task->tk_status = 0;
683 		ret = 0;
684 	}
685 	goto out;
686 out_retry:
687 	if (!rpc_restart_call(task))
688 		goto out;
689 	rpc_delay(task, NFS4_POLL_RETRY_MAX);
690 	return 0;
691 }
692 EXPORT_SYMBOL_GPL(nfs41_sequence_done);
693 
694 static int nfs4_sequence_done(struct rpc_task *task,
695 			       struct nfs4_sequence_res *res)
696 {
697 	if (res->sr_slot == NULL)
698 		return 1;
699 	if (!res->sr_slot->table->session)
700 		return nfs40_sequence_done(task, res);
701 	return nfs41_sequence_done(task, res);
702 }
703 
704 int nfs41_setup_sequence(struct nfs4_session *session,
705 				struct nfs4_sequence_args *args,
706 				struct nfs4_sequence_res *res,
707 				struct rpc_task *task)
708 {
709 	struct nfs4_slot *slot;
710 	struct nfs4_slot_table *tbl;
711 
712 	dprintk("--> %s\n", __func__);
713 	/* slot already allocated? */
714 	if (res->sr_slot != NULL)
715 		goto out_success;
716 
717 	tbl = &session->fc_slot_table;
718 
719 	task->tk_timeout = 0;
720 
721 	spin_lock(&tbl->slot_tbl_lock);
722 	if (test_bit(NFS4_SLOT_TBL_DRAINING, &tbl->slot_tbl_state) &&
723 	    !args->sa_privileged) {
724 		/* The state manager will wait until the slot table is empty */
725 		dprintk("%s session is draining\n", __func__);
726 		goto out_sleep;
727 	}
728 
729 	slot = nfs4_alloc_slot(tbl);
730 	if (IS_ERR(slot)) {
731 		/* If out of memory, try again in 1/4 second */
732 		if (slot == ERR_PTR(-ENOMEM))
733 			task->tk_timeout = HZ >> 2;
734 		dprintk("<-- %s: no free slots\n", __func__);
735 		goto out_sleep;
736 	}
737 	spin_unlock(&tbl->slot_tbl_lock);
738 
739 	args->sa_slot = slot;
740 
741 	dprintk("<-- %s slotid=%u seqid=%u\n", __func__,
742 			slot->slot_nr, slot->seq_nr);
743 
744 	res->sr_slot = slot;
745 	res->sr_timestamp = jiffies;
746 	res->sr_status_flags = 0;
747 	/*
748 	 * sr_status is only set in decode_sequence, and so will remain
749 	 * set to 1 if an rpc level failure occurs.
750 	 */
751 	res->sr_status = 1;
752 	trace_nfs4_setup_sequence(session, args);
753 out_success:
754 	rpc_call_start(task);
755 	return 0;
756 out_sleep:
757 	/* Privileged tasks are queued with top priority */
758 	if (args->sa_privileged)
759 		rpc_sleep_on_priority(&tbl->slot_tbl_waitq, task,
760 				NULL, RPC_PRIORITY_PRIVILEGED);
761 	else
762 		rpc_sleep_on(&tbl->slot_tbl_waitq, task, NULL);
763 	spin_unlock(&tbl->slot_tbl_lock);
764 	return -EAGAIN;
765 }
766 EXPORT_SYMBOL_GPL(nfs41_setup_sequence);
767 
768 static int nfs4_setup_sequence(const struct nfs_server *server,
769 			       struct nfs4_sequence_args *args,
770 			       struct nfs4_sequence_res *res,
771 			       struct rpc_task *task)
772 {
773 	struct nfs4_session *session = nfs4_get_session(server);
774 	int ret = 0;
775 
776 	if (!session)
777 		return nfs40_setup_sequence(server, args, res, task);
778 
779 	dprintk("--> %s clp %p session %p sr_slot %u\n",
780 		__func__, session->clp, session, res->sr_slot ?
781 			res->sr_slot->slot_nr : NFS4_NO_SLOT);
782 
783 	ret = nfs41_setup_sequence(session, args, res, task);
784 
785 	dprintk("<-- %s status=%d\n", __func__, ret);
786 	return ret;
787 }
788 
789 static void nfs41_call_sync_prepare(struct rpc_task *task, void *calldata)
790 {
791 	struct nfs4_call_sync_data *data = calldata;
792 	struct nfs4_session *session = nfs4_get_session(data->seq_server);
793 
794 	dprintk("--> %s data->seq_server %p\n", __func__, data->seq_server);
795 
796 	nfs41_setup_sequence(session, data->seq_args, data->seq_res, task);
797 }
798 
799 static void nfs41_call_sync_done(struct rpc_task *task, void *calldata)
800 {
801 	struct nfs4_call_sync_data *data = calldata;
802 
803 	nfs41_sequence_done(task, data->seq_res);
804 }
805 
806 static const struct rpc_call_ops nfs41_call_sync_ops = {
807 	.rpc_call_prepare = nfs41_call_sync_prepare,
808 	.rpc_call_done = nfs41_call_sync_done,
809 };
810 
811 #else	/* !CONFIG_NFS_V4_1 */
812 
813 static int nfs4_setup_sequence(const struct nfs_server *server,
814 			       struct nfs4_sequence_args *args,
815 			       struct nfs4_sequence_res *res,
816 			       struct rpc_task *task)
817 {
818 	return nfs40_setup_sequence(server, args, res, task);
819 }
820 
821 static int nfs4_sequence_done(struct rpc_task *task,
822 			       struct nfs4_sequence_res *res)
823 {
824 	return nfs40_sequence_done(task, res);
825 }
826 
827 #endif	/* !CONFIG_NFS_V4_1 */
828 
829 static void nfs40_call_sync_prepare(struct rpc_task *task, void *calldata)
830 {
831 	struct nfs4_call_sync_data *data = calldata;
832 	nfs4_setup_sequence(data->seq_server,
833 				data->seq_args, data->seq_res, task);
834 }
835 
836 static void nfs40_call_sync_done(struct rpc_task *task, void *calldata)
837 {
838 	struct nfs4_call_sync_data *data = calldata;
839 	nfs4_sequence_done(task, data->seq_res);
840 }
841 
842 static const struct rpc_call_ops nfs40_call_sync_ops = {
843 	.rpc_call_prepare = nfs40_call_sync_prepare,
844 	.rpc_call_done = nfs40_call_sync_done,
845 };
846 
847 static int nfs4_call_sync_sequence(struct rpc_clnt *clnt,
848 				   struct nfs_server *server,
849 				   struct rpc_message *msg,
850 				   struct nfs4_sequence_args *args,
851 				   struct nfs4_sequence_res *res)
852 {
853 	int ret;
854 	struct rpc_task *task;
855 	struct nfs_client *clp = server->nfs_client;
856 	struct nfs4_call_sync_data data = {
857 		.seq_server = server,
858 		.seq_args = args,
859 		.seq_res = res,
860 	};
861 	struct rpc_task_setup task_setup = {
862 		.rpc_client = clnt,
863 		.rpc_message = msg,
864 		.callback_ops = clp->cl_mvops->call_sync_ops,
865 		.callback_data = &data
866 	};
867 
868 	task = rpc_run_task(&task_setup);
869 	if (IS_ERR(task))
870 		ret = PTR_ERR(task);
871 	else {
872 		ret = task->tk_status;
873 		rpc_put_task(task);
874 	}
875 	return ret;
876 }
877 
878 static
879 int nfs4_call_sync(struct rpc_clnt *clnt,
880 		   struct nfs_server *server,
881 		   struct rpc_message *msg,
882 		   struct nfs4_sequence_args *args,
883 		   struct nfs4_sequence_res *res,
884 		   int cache_reply)
885 {
886 	nfs4_init_sequence(args, res, cache_reply);
887 	return nfs4_call_sync_sequence(clnt, server, msg, args, res);
888 }
889 
890 static void update_changeattr(struct inode *dir, struct nfs4_change_info *cinfo)
891 {
892 	struct nfs_inode *nfsi = NFS_I(dir);
893 
894 	spin_lock(&dir->i_lock);
895 	nfsi->cache_validity |= NFS_INO_INVALID_ATTR|NFS_INO_INVALID_DATA;
896 	if (!cinfo->atomic || cinfo->before != dir->i_version)
897 		nfs_force_lookup_revalidate(dir);
898 	dir->i_version = cinfo->after;
899 	nfs_fscache_invalidate(dir);
900 	spin_unlock(&dir->i_lock);
901 }
902 
903 struct nfs4_opendata {
904 	struct kref kref;
905 	struct nfs_openargs o_arg;
906 	struct nfs_openres o_res;
907 	struct nfs_open_confirmargs c_arg;
908 	struct nfs_open_confirmres c_res;
909 	struct nfs4_string owner_name;
910 	struct nfs4_string group_name;
911 	struct nfs_fattr f_attr;
912 	struct nfs4_label *f_label;
913 	struct dentry *dir;
914 	struct dentry *dentry;
915 	struct nfs4_state_owner *owner;
916 	struct nfs4_state *state;
917 	struct iattr attrs;
918 	unsigned long timestamp;
919 	unsigned int rpc_done : 1;
920 	unsigned int file_created : 1;
921 	unsigned int is_recover : 1;
922 	int rpc_status;
923 	int cancelled;
924 };
925 
926 static bool nfs4_clear_cap_atomic_open_v1(struct nfs_server *server,
927 		int err, struct nfs4_exception *exception)
928 {
929 	if (err != -EINVAL)
930 		return false;
931 	if (!(server->caps & NFS_CAP_ATOMIC_OPEN_V1))
932 		return false;
933 	server->caps &= ~NFS_CAP_ATOMIC_OPEN_V1;
934 	exception->retry = 1;
935 	return true;
936 }
937 
938 static enum open_claim_type4
939 nfs4_map_atomic_open_claim(struct nfs_server *server,
940 		enum open_claim_type4 claim)
941 {
942 	if (server->caps & NFS_CAP_ATOMIC_OPEN_V1)
943 		return claim;
944 	switch (claim) {
945 	default:
946 		return claim;
947 	case NFS4_OPEN_CLAIM_FH:
948 		return NFS4_OPEN_CLAIM_NULL;
949 	case NFS4_OPEN_CLAIM_DELEG_CUR_FH:
950 		return NFS4_OPEN_CLAIM_DELEGATE_CUR;
951 	case NFS4_OPEN_CLAIM_DELEG_PREV_FH:
952 		return NFS4_OPEN_CLAIM_DELEGATE_PREV;
953 	}
954 }
955 
956 static void nfs4_init_opendata_res(struct nfs4_opendata *p)
957 {
958 	p->o_res.f_attr = &p->f_attr;
959 	p->o_res.f_label = p->f_label;
960 	p->o_res.seqid = p->o_arg.seqid;
961 	p->c_res.seqid = p->c_arg.seqid;
962 	p->o_res.server = p->o_arg.server;
963 	p->o_res.access_request = p->o_arg.access;
964 	nfs_fattr_init(&p->f_attr);
965 	nfs_fattr_init_names(&p->f_attr, &p->owner_name, &p->group_name);
966 }
967 
968 static struct nfs4_opendata *nfs4_opendata_alloc(struct dentry *dentry,
969 		struct nfs4_state_owner *sp, fmode_t fmode, int flags,
970 		const struct iattr *attrs,
971 		struct nfs4_label *label,
972 		enum open_claim_type4 claim,
973 		gfp_t gfp_mask)
974 {
975 	struct dentry *parent = dget_parent(dentry);
976 	struct inode *dir = parent->d_inode;
977 	struct nfs_server *server = NFS_SERVER(dir);
978 	struct nfs4_opendata *p;
979 
980 	p = kzalloc(sizeof(*p), gfp_mask);
981 	if (p == NULL)
982 		goto err;
983 
984 	p->f_label = nfs4_label_alloc(server, gfp_mask);
985 	if (IS_ERR(p->f_label))
986 		goto err_free_p;
987 
988 	p->o_arg.seqid = nfs_alloc_seqid(&sp->so_seqid, gfp_mask);
989 	if (p->o_arg.seqid == NULL)
990 		goto err_free_label;
991 	nfs_sb_active(dentry->d_sb);
992 	p->dentry = dget(dentry);
993 	p->dir = parent;
994 	p->owner = sp;
995 	atomic_inc(&sp->so_count);
996 	p->o_arg.open_flags = flags;
997 	p->o_arg.fmode = fmode & (FMODE_READ|FMODE_WRITE);
998 	/* don't put an ACCESS op in OPEN compound if O_EXCL, because ACCESS
999 	 * will return permission denied for all bits until close */
1000 	if (!(flags & O_EXCL)) {
1001 		/* ask server to check for all possible rights as results
1002 		 * are cached */
1003 		p->o_arg.access = NFS4_ACCESS_READ | NFS4_ACCESS_MODIFY |
1004 				  NFS4_ACCESS_EXTEND | NFS4_ACCESS_EXECUTE;
1005 	}
1006 	p->o_arg.clientid = server->nfs_client->cl_clientid;
1007 	p->o_arg.id.create_time = ktime_to_ns(sp->so_seqid.create_time);
1008 	p->o_arg.id.uniquifier = sp->so_seqid.owner_id;
1009 	p->o_arg.name = &dentry->d_name;
1010 	p->o_arg.server = server;
1011 	p->o_arg.bitmask = nfs4_bitmask(server, label);
1012 	p->o_arg.open_bitmap = &nfs4_fattr_bitmap[0];
1013 	p->o_arg.label = label;
1014 	p->o_arg.claim = nfs4_map_atomic_open_claim(server, claim);
1015 	switch (p->o_arg.claim) {
1016 	case NFS4_OPEN_CLAIM_NULL:
1017 	case NFS4_OPEN_CLAIM_DELEGATE_CUR:
1018 	case NFS4_OPEN_CLAIM_DELEGATE_PREV:
1019 		p->o_arg.fh = NFS_FH(dir);
1020 		break;
1021 	case NFS4_OPEN_CLAIM_PREVIOUS:
1022 	case NFS4_OPEN_CLAIM_FH:
1023 	case NFS4_OPEN_CLAIM_DELEG_CUR_FH:
1024 	case NFS4_OPEN_CLAIM_DELEG_PREV_FH:
1025 		p->o_arg.fh = NFS_FH(dentry->d_inode);
1026 	}
1027 	if (attrs != NULL && attrs->ia_valid != 0) {
1028 		__u32 verf[2];
1029 
1030 		p->o_arg.u.attrs = &p->attrs;
1031 		memcpy(&p->attrs, attrs, sizeof(p->attrs));
1032 
1033 		verf[0] = jiffies;
1034 		verf[1] = current->pid;
1035 		memcpy(p->o_arg.u.verifier.data, verf,
1036 				sizeof(p->o_arg.u.verifier.data));
1037 	}
1038 	p->c_arg.fh = &p->o_res.fh;
1039 	p->c_arg.stateid = &p->o_res.stateid;
1040 	p->c_arg.seqid = p->o_arg.seqid;
1041 	nfs4_init_opendata_res(p);
1042 	kref_init(&p->kref);
1043 	return p;
1044 
1045 err_free_label:
1046 	nfs4_label_free(p->f_label);
1047 err_free_p:
1048 	kfree(p);
1049 err:
1050 	dput(parent);
1051 	return NULL;
1052 }
1053 
1054 static void nfs4_opendata_free(struct kref *kref)
1055 {
1056 	struct nfs4_opendata *p = container_of(kref,
1057 			struct nfs4_opendata, kref);
1058 	struct super_block *sb = p->dentry->d_sb;
1059 
1060 	nfs_free_seqid(p->o_arg.seqid);
1061 	if (p->state != NULL)
1062 		nfs4_put_open_state(p->state);
1063 	nfs4_put_state_owner(p->owner);
1064 
1065 	nfs4_label_free(p->f_label);
1066 
1067 	dput(p->dir);
1068 	dput(p->dentry);
1069 	nfs_sb_deactive(sb);
1070 	nfs_fattr_free_names(&p->f_attr);
1071 	kfree(p);
1072 }
1073 
1074 static void nfs4_opendata_put(struct nfs4_opendata *p)
1075 {
1076 	if (p != NULL)
1077 		kref_put(&p->kref, nfs4_opendata_free);
1078 }
1079 
1080 static int nfs4_wait_for_completion_rpc_task(struct rpc_task *task)
1081 {
1082 	int ret;
1083 
1084 	ret = rpc_wait_for_completion_task(task);
1085 	return ret;
1086 }
1087 
1088 static int can_open_cached(struct nfs4_state *state, fmode_t mode, int open_mode)
1089 {
1090 	int ret = 0;
1091 
1092 	if (open_mode & (O_EXCL|O_TRUNC))
1093 		goto out;
1094 	switch (mode & (FMODE_READ|FMODE_WRITE)) {
1095 		case FMODE_READ:
1096 			ret |= test_bit(NFS_O_RDONLY_STATE, &state->flags) != 0
1097 				&& state->n_rdonly != 0;
1098 			break;
1099 		case FMODE_WRITE:
1100 			ret |= test_bit(NFS_O_WRONLY_STATE, &state->flags) != 0
1101 				&& state->n_wronly != 0;
1102 			break;
1103 		case FMODE_READ|FMODE_WRITE:
1104 			ret |= test_bit(NFS_O_RDWR_STATE, &state->flags) != 0
1105 				&& state->n_rdwr != 0;
1106 	}
1107 out:
1108 	return ret;
1109 }
1110 
1111 static int can_open_delegated(struct nfs_delegation *delegation, fmode_t fmode)
1112 {
1113 	if (delegation == NULL)
1114 		return 0;
1115 	if ((delegation->type & fmode) != fmode)
1116 		return 0;
1117 	if (test_bit(NFS_DELEGATION_NEED_RECLAIM, &delegation->flags))
1118 		return 0;
1119 	if (test_bit(NFS_DELEGATION_RETURNING, &delegation->flags))
1120 		return 0;
1121 	nfs_mark_delegation_referenced(delegation);
1122 	return 1;
1123 }
1124 
1125 static void update_open_stateflags(struct nfs4_state *state, fmode_t fmode)
1126 {
1127 	switch (fmode) {
1128 		case FMODE_WRITE:
1129 			state->n_wronly++;
1130 			break;
1131 		case FMODE_READ:
1132 			state->n_rdonly++;
1133 			break;
1134 		case FMODE_READ|FMODE_WRITE:
1135 			state->n_rdwr++;
1136 	}
1137 	nfs4_state_set_mode_locked(state, state->state | fmode);
1138 }
1139 
1140 static void nfs_set_open_stateid_locked(struct nfs4_state *state, nfs4_stateid *stateid, fmode_t fmode)
1141 {
1142 	if (test_bit(NFS_DELEGATED_STATE, &state->flags) == 0)
1143 		nfs4_stateid_copy(&state->stateid, stateid);
1144 	nfs4_stateid_copy(&state->open_stateid, stateid);
1145 	set_bit(NFS_OPEN_STATE, &state->flags);
1146 	switch (fmode) {
1147 		case FMODE_READ:
1148 			set_bit(NFS_O_RDONLY_STATE, &state->flags);
1149 			break;
1150 		case FMODE_WRITE:
1151 			set_bit(NFS_O_WRONLY_STATE, &state->flags);
1152 			break;
1153 		case FMODE_READ|FMODE_WRITE:
1154 			set_bit(NFS_O_RDWR_STATE, &state->flags);
1155 	}
1156 }
1157 
1158 static void nfs_set_open_stateid(struct nfs4_state *state, nfs4_stateid *stateid, fmode_t fmode)
1159 {
1160 	write_seqlock(&state->seqlock);
1161 	nfs_set_open_stateid_locked(state, stateid, fmode);
1162 	write_sequnlock(&state->seqlock);
1163 }
1164 
1165 static void __update_open_stateid(struct nfs4_state *state, nfs4_stateid *open_stateid, const nfs4_stateid *deleg_stateid, fmode_t fmode)
1166 {
1167 	/*
1168 	 * Protect the call to nfs4_state_set_mode_locked and
1169 	 * serialise the stateid update
1170 	 */
1171 	write_seqlock(&state->seqlock);
1172 	if (deleg_stateid != NULL) {
1173 		nfs4_stateid_copy(&state->stateid, deleg_stateid);
1174 		set_bit(NFS_DELEGATED_STATE, &state->flags);
1175 	}
1176 	if (open_stateid != NULL)
1177 		nfs_set_open_stateid_locked(state, open_stateid, fmode);
1178 	write_sequnlock(&state->seqlock);
1179 	spin_lock(&state->owner->so_lock);
1180 	update_open_stateflags(state, fmode);
1181 	spin_unlock(&state->owner->so_lock);
1182 }
1183 
1184 static int update_open_stateid(struct nfs4_state *state, nfs4_stateid *open_stateid, nfs4_stateid *delegation, fmode_t fmode)
1185 {
1186 	struct nfs_inode *nfsi = NFS_I(state->inode);
1187 	struct nfs_delegation *deleg_cur;
1188 	int ret = 0;
1189 
1190 	fmode &= (FMODE_READ|FMODE_WRITE);
1191 
1192 	rcu_read_lock();
1193 	deleg_cur = rcu_dereference(nfsi->delegation);
1194 	if (deleg_cur == NULL)
1195 		goto no_delegation;
1196 
1197 	spin_lock(&deleg_cur->lock);
1198 	if (rcu_dereference(nfsi->delegation) != deleg_cur ||
1199 	   test_bit(NFS_DELEGATION_RETURNING, &deleg_cur->flags) ||
1200 	    (deleg_cur->type & fmode) != fmode)
1201 		goto no_delegation_unlock;
1202 
1203 	if (delegation == NULL)
1204 		delegation = &deleg_cur->stateid;
1205 	else if (!nfs4_stateid_match(&deleg_cur->stateid, delegation))
1206 		goto no_delegation_unlock;
1207 
1208 	nfs_mark_delegation_referenced(deleg_cur);
1209 	__update_open_stateid(state, open_stateid, &deleg_cur->stateid, fmode);
1210 	ret = 1;
1211 no_delegation_unlock:
1212 	spin_unlock(&deleg_cur->lock);
1213 no_delegation:
1214 	rcu_read_unlock();
1215 
1216 	if (!ret && open_stateid != NULL) {
1217 		__update_open_stateid(state, open_stateid, NULL, fmode);
1218 		ret = 1;
1219 	}
1220 
1221 	return ret;
1222 }
1223 
1224 
1225 static void nfs4_return_incompatible_delegation(struct inode *inode, fmode_t fmode)
1226 {
1227 	struct nfs_delegation *delegation;
1228 
1229 	rcu_read_lock();
1230 	delegation = rcu_dereference(NFS_I(inode)->delegation);
1231 	if (delegation == NULL || (delegation->type & fmode) == fmode) {
1232 		rcu_read_unlock();
1233 		return;
1234 	}
1235 	rcu_read_unlock();
1236 	nfs4_inode_return_delegation(inode);
1237 }
1238 
1239 static struct nfs4_state *nfs4_try_open_cached(struct nfs4_opendata *opendata)
1240 {
1241 	struct nfs4_state *state = opendata->state;
1242 	struct nfs_inode *nfsi = NFS_I(state->inode);
1243 	struct nfs_delegation *delegation;
1244 	int open_mode = opendata->o_arg.open_flags;
1245 	fmode_t fmode = opendata->o_arg.fmode;
1246 	nfs4_stateid stateid;
1247 	int ret = -EAGAIN;
1248 
1249 	for (;;) {
1250 		if (can_open_cached(state, fmode, open_mode)) {
1251 			spin_lock(&state->owner->so_lock);
1252 			if (can_open_cached(state, fmode, open_mode)) {
1253 				update_open_stateflags(state, fmode);
1254 				spin_unlock(&state->owner->so_lock);
1255 				goto out_return_state;
1256 			}
1257 			spin_unlock(&state->owner->so_lock);
1258 		}
1259 		rcu_read_lock();
1260 		delegation = rcu_dereference(nfsi->delegation);
1261 		if (!can_open_delegated(delegation, fmode)) {
1262 			rcu_read_unlock();
1263 			break;
1264 		}
1265 		/* Save the delegation */
1266 		nfs4_stateid_copy(&stateid, &delegation->stateid);
1267 		rcu_read_unlock();
1268 		nfs_release_seqid(opendata->o_arg.seqid);
1269 		if (!opendata->is_recover) {
1270 			ret = nfs_may_open(state->inode, state->owner->so_cred, open_mode);
1271 			if (ret != 0)
1272 				goto out;
1273 		}
1274 		ret = -EAGAIN;
1275 
1276 		/* Try to update the stateid using the delegation */
1277 		if (update_open_stateid(state, NULL, &stateid, fmode))
1278 			goto out_return_state;
1279 	}
1280 out:
1281 	return ERR_PTR(ret);
1282 out_return_state:
1283 	atomic_inc(&state->count);
1284 	return state;
1285 }
1286 
1287 static void
1288 nfs4_opendata_check_deleg(struct nfs4_opendata *data, struct nfs4_state *state)
1289 {
1290 	struct nfs_client *clp = NFS_SERVER(state->inode)->nfs_client;
1291 	struct nfs_delegation *delegation;
1292 	int delegation_flags = 0;
1293 
1294 	rcu_read_lock();
1295 	delegation = rcu_dereference(NFS_I(state->inode)->delegation);
1296 	if (delegation)
1297 		delegation_flags = delegation->flags;
1298 	rcu_read_unlock();
1299 	if (data->o_arg.claim == NFS4_OPEN_CLAIM_DELEGATE_CUR) {
1300 		pr_err_ratelimited("NFS: Broken NFSv4 server %s is "
1301 				   "returning a delegation for "
1302 				   "OPEN(CLAIM_DELEGATE_CUR)\n",
1303 				   clp->cl_hostname);
1304 	} else if ((delegation_flags & 1UL<<NFS_DELEGATION_NEED_RECLAIM) == 0)
1305 		nfs_inode_set_delegation(state->inode,
1306 					 data->owner->so_cred,
1307 					 &data->o_res);
1308 	else
1309 		nfs_inode_reclaim_delegation(state->inode,
1310 					     data->owner->so_cred,
1311 					     &data->o_res);
1312 }
1313 
1314 /*
1315  * Check the inode attributes against the CLAIM_PREVIOUS returned attributes
1316  * and update the nfs4_state.
1317  */
1318 static struct nfs4_state *
1319 _nfs4_opendata_reclaim_to_nfs4_state(struct nfs4_opendata *data)
1320 {
1321 	struct inode *inode = data->state->inode;
1322 	struct nfs4_state *state = data->state;
1323 	int ret;
1324 
1325 	if (!data->rpc_done) {
1326 		if (data->rpc_status) {
1327 			ret = data->rpc_status;
1328 			goto err;
1329 		}
1330 		/* cached opens have already been processed */
1331 		goto update;
1332 	}
1333 
1334 	ret = nfs_refresh_inode(inode, &data->f_attr);
1335 	if (ret)
1336 		goto err;
1337 
1338 	if (data->o_res.delegation_type != 0)
1339 		nfs4_opendata_check_deleg(data, state);
1340 update:
1341 	update_open_stateid(state, &data->o_res.stateid, NULL,
1342 			    data->o_arg.fmode);
1343 	atomic_inc(&state->count);
1344 
1345 	return state;
1346 err:
1347 	return ERR_PTR(ret);
1348 
1349 }
1350 
1351 static struct nfs4_state *
1352 _nfs4_opendata_to_nfs4_state(struct nfs4_opendata *data)
1353 {
1354 	struct inode *inode;
1355 	struct nfs4_state *state = NULL;
1356 	int ret;
1357 
1358 	if (!data->rpc_done) {
1359 		state = nfs4_try_open_cached(data);
1360 		goto out;
1361 	}
1362 
1363 	ret = -EAGAIN;
1364 	if (!(data->f_attr.valid & NFS_ATTR_FATTR))
1365 		goto err;
1366 	inode = nfs_fhget(data->dir->d_sb, &data->o_res.fh, &data->f_attr, data->f_label);
1367 	ret = PTR_ERR(inode);
1368 	if (IS_ERR(inode))
1369 		goto err;
1370 	ret = -ENOMEM;
1371 	state = nfs4_get_open_state(inode, data->owner);
1372 	if (state == NULL)
1373 		goto err_put_inode;
1374 	if (data->o_res.delegation_type != 0)
1375 		nfs4_opendata_check_deleg(data, state);
1376 	update_open_stateid(state, &data->o_res.stateid, NULL,
1377 			data->o_arg.fmode);
1378 	iput(inode);
1379 out:
1380 	nfs_release_seqid(data->o_arg.seqid);
1381 	return state;
1382 err_put_inode:
1383 	iput(inode);
1384 err:
1385 	return ERR_PTR(ret);
1386 }
1387 
1388 static struct nfs4_state *
1389 nfs4_opendata_to_nfs4_state(struct nfs4_opendata *data)
1390 {
1391 	if (data->o_arg.claim == NFS4_OPEN_CLAIM_PREVIOUS)
1392 		return _nfs4_opendata_reclaim_to_nfs4_state(data);
1393 	return _nfs4_opendata_to_nfs4_state(data);
1394 }
1395 
1396 static struct nfs_open_context *nfs4_state_find_open_context(struct nfs4_state *state)
1397 {
1398 	struct nfs_inode *nfsi = NFS_I(state->inode);
1399 	struct nfs_open_context *ctx;
1400 
1401 	spin_lock(&state->inode->i_lock);
1402 	list_for_each_entry(ctx, &nfsi->open_files, list) {
1403 		if (ctx->state != state)
1404 			continue;
1405 		get_nfs_open_context(ctx);
1406 		spin_unlock(&state->inode->i_lock);
1407 		return ctx;
1408 	}
1409 	spin_unlock(&state->inode->i_lock);
1410 	return ERR_PTR(-ENOENT);
1411 }
1412 
1413 static struct nfs4_opendata *nfs4_open_recoverdata_alloc(struct nfs_open_context *ctx,
1414 		struct nfs4_state *state, enum open_claim_type4 claim)
1415 {
1416 	struct nfs4_opendata *opendata;
1417 
1418 	opendata = nfs4_opendata_alloc(ctx->dentry, state->owner, 0, 0,
1419 			NULL, NULL, claim, GFP_NOFS);
1420 	if (opendata == NULL)
1421 		return ERR_PTR(-ENOMEM);
1422 	opendata->state = state;
1423 	atomic_inc(&state->count);
1424 	return opendata;
1425 }
1426 
1427 static int nfs4_open_recover_helper(struct nfs4_opendata *opendata, fmode_t fmode, struct nfs4_state **res)
1428 {
1429 	struct nfs4_state *newstate;
1430 	int ret;
1431 
1432 	opendata->o_arg.open_flags = 0;
1433 	opendata->o_arg.fmode = fmode;
1434 	memset(&opendata->o_res, 0, sizeof(opendata->o_res));
1435 	memset(&opendata->c_res, 0, sizeof(opendata->c_res));
1436 	nfs4_init_opendata_res(opendata);
1437 	ret = _nfs4_recover_proc_open(opendata);
1438 	if (ret != 0)
1439 		return ret;
1440 	newstate = nfs4_opendata_to_nfs4_state(opendata);
1441 	if (IS_ERR(newstate))
1442 		return PTR_ERR(newstate);
1443 	nfs4_close_state(newstate, fmode);
1444 	*res = newstate;
1445 	return 0;
1446 }
1447 
1448 static int nfs4_open_recover(struct nfs4_opendata *opendata, struct nfs4_state *state)
1449 {
1450 	struct nfs4_state *newstate;
1451 	int ret;
1452 
1453 	/* memory barrier prior to reading state->n_* */
1454 	clear_bit(NFS_DELEGATED_STATE, &state->flags);
1455 	clear_bit(NFS_OPEN_STATE, &state->flags);
1456 	smp_rmb();
1457 	if (state->n_rdwr != 0) {
1458 		clear_bit(NFS_O_RDWR_STATE, &state->flags);
1459 		ret = nfs4_open_recover_helper(opendata, FMODE_READ|FMODE_WRITE, &newstate);
1460 		if (ret != 0)
1461 			return ret;
1462 		if (newstate != state)
1463 			return -ESTALE;
1464 	}
1465 	if (state->n_wronly != 0) {
1466 		clear_bit(NFS_O_WRONLY_STATE, &state->flags);
1467 		ret = nfs4_open_recover_helper(opendata, FMODE_WRITE, &newstate);
1468 		if (ret != 0)
1469 			return ret;
1470 		if (newstate != state)
1471 			return -ESTALE;
1472 	}
1473 	if (state->n_rdonly != 0) {
1474 		clear_bit(NFS_O_RDONLY_STATE, &state->flags);
1475 		ret = nfs4_open_recover_helper(opendata, FMODE_READ, &newstate);
1476 		if (ret != 0)
1477 			return ret;
1478 		if (newstate != state)
1479 			return -ESTALE;
1480 	}
1481 	/*
1482 	 * We may have performed cached opens for all three recoveries.
1483 	 * Check if we need to update the current stateid.
1484 	 */
1485 	if (test_bit(NFS_DELEGATED_STATE, &state->flags) == 0 &&
1486 	    !nfs4_stateid_match(&state->stateid, &state->open_stateid)) {
1487 		write_seqlock(&state->seqlock);
1488 		if (test_bit(NFS_DELEGATED_STATE, &state->flags) == 0)
1489 			nfs4_stateid_copy(&state->stateid, &state->open_stateid);
1490 		write_sequnlock(&state->seqlock);
1491 	}
1492 	return 0;
1493 }
1494 
1495 /*
1496  * OPEN_RECLAIM:
1497  * 	reclaim state on the server after a reboot.
1498  */
1499 static int _nfs4_do_open_reclaim(struct nfs_open_context *ctx, struct nfs4_state *state)
1500 {
1501 	struct nfs_delegation *delegation;
1502 	struct nfs4_opendata *opendata;
1503 	fmode_t delegation_type = 0;
1504 	int status;
1505 
1506 	opendata = nfs4_open_recoverdata_alloc(ctx, state,
1507 			NFS4_OPEN_CLAIM_PREVIOUS);
1508 	if (IS_ERR(opendata))
1509 		return PTR_ERR(opendata);
1510 	rcu_read_lock();
1511 	delegation = rcu_dereference(NFS_I(state->inode)->delegation);
1512 	if (delegation != NULL && test_bit(NFS_DELEGATION_NEED_RECLAIM, &delegation->flags) != 0)
1513 		delegation_type = delegation->type;
1514 	rcu_read_unlock();
1515 	opendata->o_arg.u.delegation_type = delegation_type;
1516 	status = nfs4_open_recover(opendata, state);
1517 	nfs4_opendata_put(opendata);
1518 	return status;
1519 }
1520 
1521 static int nfs4_do_open_reclaim(struct nfs_open_context *ctx, struct nfs4_state *state)
1522 {
1523 	struct nfs_server *server = NFS_SERVER(state->inode);
1524 	struct nfs4_exception exception = { };
1525 	int err;
1526 	do {
1527 		err = _nfs4_do_open_reclaim(ctx, state);
1528 		trace_nfs4_open_reclaim(ctx, 0, err);
1529 		if (nfs4_clear_cap_atomic_open_v1(server, err, &exception))
1530 			continue;
1531 		if (err != -NFS4ERR_DELAY)
1532 			break;
1533 		nfs4_handle_exception(server, err, &exception);
1534 	} while (exception.retry);
1535 	return err;
1536 }
1537 
1538 static int nfs4_open_reclaim(struct nfs4_state_owner *sp, struct nfs4_state *state)
1539 {
1540 	struct nfs_open_context *ctx;
1541 	int ret;
1542 
1543 	ctx = nfs4_state_find_open_context(state);
1544 	if (IS_ERR(ctx))
1545 		return -EAGAIN;
1546 	ret = nfs4_do_open_reclaim(ctx, state);
1547 	put_nfs_open_context(ctx);
1548 	return ret;
1549 }
1550 
1551 static int nfs4_handle_delegation_recall_error(struct nfs_server *server, struct nfs4_state *state, const nfs4_stateid *stateid, int err)
1552 {
1553 	switch (err) {
1554 		default:
1555 			printk(KERN_ERR "NFS: %s: unhandled error "
1556 					"%d.\n", __func__, err);
1557 		case 0:
1558 		case -ENOENT:
1559 		case -ESTALE:
1560 			break;
1561 		case -NFS4ERR_BADSESSION:
1562 		case -NFS4ERR_BADSLOT:
1563 		case -NFS4ERR_BAD_HIGH_SLOT:
1564 		case -NFS4ERR_CONN_NOT_BOUND_TO_SESSION:
1565 		case -NFS4ERR_DEADSESSION:
1566 			set_bit(NFS_DELEGATED_STATE, &state->flags);
1567 			nfs4_schedule_session_recovery(server->nfs_client->cl_session, err);
1568 			return -EAGAIN;
1569 		case -NFS4ERR_STALE_CLIENTID:
1570 		case -NFS4ERR_STALE_STATEID:
1571 			set_bit(NFS_DELEGATED_STATE, &state->flags);
1572 		case -NFS4ERR_EXPIRED:
1573 			/* Don't recall a delegation if it was lost */
1574 			nfs4_schedule_lease_recovery(server->nfs_client);
1575 			return -EAGAIN;
1576 		case -NFS4ERR_MOVED:
1577 			nfs4_schedule_migration_recovery(server);
1578 			return -EAGAIN;
1579 		case -NFS4ERR_LEASE_MOVED:
1580 			nfs4_schedule_lease_moved_recovery(server->nfs_client);
1581 			return -EAGAIN;
1582 		case -NFS4ERR_DELEG_REVOKED:
1583 		case -NFS4ERR_ADMIN_REVOKED:
1584 		case -NFS4ERR_BAD_STATEID:
1585 		case -NFS4ERR_OPENMODE:
1586 			nfs_inode_find_state_and_recover(state->inode,
1587 					stateid);
1588 			nfs4_schedule_stateid_recovery(server, state);
1589 			return 0;
1590 		case -NFS4ERR_DELAY:
1591 		case -NFS4ERR_GRACE:
1592 			set_bit(NFS_DELEGATED_STATE, &state->flags);
1593 			ssleep(1);
1594 			return -EAGAIN;
1595 		case -ENOMEM:
1596 		case -NFS4ERR_DENIED:
1597 			/* kill_proc(fl->fl_pid, SIGLOST, 1); */
1598 			return 0;
1599 	}
1600 	return err;
1601 }
1602 
1603 int nfs4_open_delegation_recall(struct nfs_open_context *ctx, struct nfs4_state *state, const nfs4_stateid *stateid)
1604 {
1605 	struct nfs_server *server = NFS_SERVER(state->inode);
1606 	struct nfs4_opendata *opendata;
1607 	int err;
1608 
1609 	opendata = nfs4_open_recoverdata_alloc(ctx, state,
1610 			NFS4_OPEN_CLAIM_DELEG_CUR_FH);
1611 	if (IS_ERR(opendata))
1612 		return PTR_ERR(opendata);
1613 	nfs4_stateid_copy(&opendata->o_arg.u.delegation, stateid);
1614 	err = nfs4_open_recover(opendata, state);
1615 	nfs4_opendata_put(opendata);
1616 	return nfs4_handle_delegation_recall_error(server, state, stateid, err);
1617 }
1618 
1619 static void nfs4_open_confirm_prepare(struct rpc_task *task, void *calldata)
1620 {
1621 	struct nfs4_opendata *data = calldata;
1622 
1623 	nfs40_setup_sequence(data->o_arg.server, &data->c_arg.seq_args,
1624 				&data->c_res.seq_res, task);
1625 }
1626 
1627 static void nfs4_open_confirm_done(struct rpc_task *task, void *calldata)
1628 {
1629 	struct nfs4_opendata *data = calldata;
1630 
1631 	nfs40_sequence_done(task, &data->c_res.seq_res);
1632 
1633 	data->rpc_status = task->tk_status;
1634 	if (data->rpc_status == 0) {
1635 		nfs4_stateid_copy(&data->o_res.stateid, &data->c_res.stateid);
1636 		nfs_confirm_seqid(&data->owner->so_seqid, 0);
1637 		renew_lease(data->o_res.server, data->timestamp);
1638 		data->rpc_done = 1;
1639 	}
1640 }
1641 
1642 static void nfs4_open_confirm_release(void *calldata)
1643 {
1644 	struct nfs4_opendata *data = calldata;
1645 	struct nfs4_state *state = NULL;
1646 
1647 	/* If this request hasn't been cancelled, do nothing */
1648 	if (data->cancelled == 0)
1649 		goto out_free;
1650 	/* In case of error, no cleanup! */
1651 	if (!data->rpc_done)
1652 		goto out_free;
1653 	state = nfs4_opendata_to_nfs4_state(data);
1654 	if (!IS_ERR(state))
1655 		nfs4_close_state(state, data->o_arg.fmode);
1656 out_free:
1657 	nfs4_opendata_put(data);
1658 }
1659 
1660 static const struct rpc_call_ops nfs4_open_confirm_ops = {
1661 	.rpc_call_prepare = nfs4_open_confirm_prepare,
1662 	.rpc_call_done = nfs4_open_confirm_done,
1663 	.rpc_release = nfs4_open_confirm_release,
1664 };
1665 
1666 /*
1667  * Note: On error, nfs4_proc_open_confirm will free the struct nfs4_opendata
1668  */
1669 static int _nfs4_proc_open_confirm(struct nfs4_opendata *data)
1670 {
1671 	struct nfs_server *server = NFS_SERVER(data->dir->d_inode);
1672 	struct rpc_task *task;
1673 	struct  rpc_message msg = {
1674 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_OPEN_CONFIRM],
1675 		.rpc_argp = &data->c_arg,
1676 		.rpc_resp = &data->c_res,
1677 		.rpc_cred = data->owner->so_cred,
1678 	};
1679 	struct rpc_task_setup task_setup_data = {
1680 		.rpc_client = server->client,
1681 		.rpc_message = &msg,
1682 		.callback_ops = &nfs4_open_confirm_ops,
1683 		.callback_data = data,
1684 		.workqueue = nfsiod_workqueue,
1685 		.flags = RPC_TASK_ASYNC,
1686 	};
1687 	int status;
1688 
1689 	nfs4_init_sequence(&data->c_arg.seq_args, &data->c_res.seq_res, 1);
1690 	kref_get(&data->kref);
1691 	data->rpc_done = 0;
1692 	data->rpc_status = 0;
1693 	data->timestamp = jiffies;
1694 	task = rpc_run_task(&task_setup_data);
1695 	if (IS_ERR(task))
1696 		return PTR_ERR(task);
1697 	status = nfs4_wait_for_completion_rpc_task(task);
1698 	if (status != 0) {
1699 		data->cancelled = 1;
1700 		smp_wmb();
1701 	} else
1702 		status = data->rpc_status;
1703 	rpc_put_task(task);
1704 	return status;
1705 }
1706 
1707 static void nfs4_open_prepare(struct rpc_task *task, void *calldata)
1708 {
1709 	struct nfs4_opendata *data = calldata;
1710 	struct nfs4_state_owner *sp = data->owner;
1711 	struct nfs_client *clp = sp->so_server->nfs_client;
1712 
1713 	if (nfs_wait_on_sequence(data->o_arg.seqid, task) != 0)
1714 		goto out_wait;
1715 	/*
1716 	 * Check if we still need to send an OPEN call, or if we can use
1717 	 * a delegation instead.
1718 	 */
1719 	if (data->state != NULL) {
1720 		struct nfs_delegation *delegation;
1721 
1722 		if (can_open_cached(data->state, data->o_arg.fmode, data->o_arg.open_flags))
1723 			goto out_no_action;
1724 		rcu_read_lock();
1725 		delegation = rcu_dereference(NFS_I(data->state->inode)->delegation);
1726 		if (data->o_arg.claim != NFS4_OPEN_CLAIM_DELEGATE_CUR &&
1727 		    data->o_arg.claim != NFS4_OPEN_CLAIM_DELEG_CUR_FH &&
1728 		    can_open_delegated(delegation, data->o_arg.fmode))
1729 			goto unlock_no_action;
1730 		rcu_read_unlock();
1731 	}
1732 	/* Update client id. */
1733 	data->o_arg.clientid = clp->cl_clientid;
1734 	switch (data->o_arg.claim) {
1735 	case NFS4_OPEN_CLAIM_PREVIOUS:
1736 	case NFS4_OPEN_CLAIM_DELEG_CUR_FH:
1737 	case NFS4_OPEN_CLAIM_DELEG_PREV_FH:
1738 		data->o_arg.open_bitmap = &nfs4_open_noattr_bitmap[0];
1739 	case NFS4_OPEN_CLAIM_FH:
1740 		task->tk_msg.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_OPEN_NOATTR];
1741 		nfs_copy_fh(&data->o_res.fh, data->o_arg.fh);
1742 	}
1743 	data->timestamp = jiffies;
1744 	if (nfs4_setup_sequence(data->o_arg.server,
1745 				&data->o_arg.seq_args,
1746 				&data->o_res.seq_res,
1747 				task) != 0)
1748 		nfs_release_seqid(data->o_arg.seqid);
1749 
1750 	/* Set the create mode (note dependency on the session type) */
1751 	data->o_arg.createmode = NFS4_CREATE_UNCHECKED;
1752 	if (data->o_arg.open_flags & O_EXCL) {
1753 		data->o_arg.createmode = NFS4_CREATE_EXCLUSIVE;
1754 		if (nfs4_has_persistent_session(clp))
1755 			data->o_arg.createmode = NFS4_CREATE_GUARDED;
1756 		else if (clp->cl_mvops->minor_version > 0)
1757 			data->o_arg.createmode = NFS4_CREATE_EXCLUSIVE4_1;
1758 	}
1759 	return;
1760 unlock_no_action:
1761 	rcu_read_unlock();
1762 out_no_action:
1763 	task->tk_action = NULL;
1764 out_wait:
1765 	nfs4_sequence_done(task, &data->o_res.seq_res);
1766 }
1767 
1768 static void nfs4_open_done(struct rpc_task *task, void *calldata)
1769 {
1770 	struct nfs4_opendata *data = calldata;
1771 
1772 	data->rpc_status = task->tk_status;
1773 
1774 	if (!nfs4_sequence_done(task, &data->o_res.seq_res))
1775 		return;
1776 
1777 	if (task->tk_status == 0) {
1778 		if (data->o_res.f_attr->valid & NFS_ATTR_FATTR_TYPE) {
1779 			switch (data->o_res.f_attr->mode & S_IFMT) {
1780 			case S_IFREG:
1781 				break;
1782 			case S_IFLNK:
1783 				data->rpc_status = -ELOOP;
1784 				break;
1785 			case S_IFDIR:
1786 				data->rpc_status = -EISDIR;
1787 				break;
1788 			default:
1789 				data->rpc_status = -ENOTDIR;
1790 			}
1791 		}
1792 		renew_lease(data->o_res.server, data->timestamp);
1793 		if (!(data->o_res.rflags & NFS4_OPEN_RESULT_CONFIRM))
1794 			nfs_confirm_seqid(&data->owner->so_seqid, 0);
1795 	}
1796 	data->rpc_done = 1;
1797 }
1798 
1799 static void nfs4_open_release(void *calldata)
1800 {
1801 	struct nfs4_opendata *data = calldata;
1802 	struct nfs4_state *state = NULL;
1803 
1804 	/* If this request hasn't been cancelled, do nothing */
1805 	if (data->cancelled == 0)
1806 		goto out_free;
1807 	/* In case of error, no cleanup! */
1808 	if (data->rpc_status != 0 || !data->rpc_done)
1809 		goto out_free;
1810 	/* In case we need an open_confirm, no cleanup! */
1811 	if (data->o_res.rflags & NFS4_OPEN_RESULT_CONFIRM)
1812 		goto out_free;
1813 	state = nfs4_opendata_to_nfs4_state(data);
1814 	if (!IS_ERR(state))
1815 		nfs4_close_state(state, data->o_arg.fmode);
1816 out_free:
1817 	nfs4_opendata_put(data);
1818 }
1819 
1820 static const struct rpc_call_ops nfs4_open_ops = {
1821 	.rpc_call_prepare = nfs4_open_prepare,
1822 	.rpc_call_done = nfs4_open_done,
1823 	.rpc_release = nfs4_open_release,
1824 };
1825 
1826 static int nfs4_run_open_task(struct nfs4_opendata *data, int isrecover)
1827 {
1828 	struct inode *dir = data->dir->d_inode;
1829 	struct nfs_server *server = NFS_SERVER(dir);
1830 	struct nfs_openargs *o_arg = &data->o_arg;
1831 	struct nfs_openres *o_res = &data->o_res;
1832 	struct rpc_task *task;
1833 	struct rpc_message msg = {
1834 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_OPEN],
1835 		.rpc_argp = o_arg,
1836 		.rpc_resp = o_res,
1837 		.rpc_cred = data->owner->so_cred,
1838 	};
1839 	struct rpc_task_setup task_setup_data = {
1840 		.rpc_client = server->client,
1841 		.rpc_message = &msg,
1842 		.callback_ops = &nfs4_open_ops,
1843 		.callback_data = data,
1844 		.workqueue = nfsiod_workqueue,
1845 		.flags = RPC_TASK_ASYNC,
1846 	};
1847 	int status;
1848 
1849 	nfs4_init_sequence(&o_arg->seq_args, &o_res->seq_res, 1);
1850 	kref_get(&data->kref);
1851 	data->rpc_done = 0;
1852 	data->rpc_status = 0;
1853 	data->cancelled = 0;
1854 	data->is_recover = 0;
1855 	if (isrecover) {
1856 		nfs4_set_sequence_privileged(&o_arg->seq_args);
1857 		data->is_recover = 1;
1858 	}
1859 	task = rpc_run_task(&task_setup_data);
1860         if (IS_ERR(task))
1861                 return PTR_ERR(task);
1862         status = nfs4_wait_for_completion_rpc_task(task);
1863         if (status != 0) {
1864                 data->cancelled = 1;
1865                 smp_wmb();
1866         } else
1867                 status = data->rpc_status;
1868         rpc_put_task(task);
1869 
1870 	return status;
1871 }
1872 
1873 static int _nfs4_recover_proc_open(struct nfs4_opendata *data)
1874 {
1875 	struct inode *dir = data->dir->d_inode;
1876 	struct nfs_openres *o_res = &data->o_res;
1877         int status;
1878 
1879 	status = nfs4_run_open_task(data, 1);
1880 	if (status != 0 || !data->rpc_done)
1881 		return status;
1882 
1883 	nfs_fattr_map_and_free_names(NFS_SERVER(dir), &data->f_attr);
1884 
1885 	if (o_res->rflags & NFS4_OPEN_RESULT_CONFIRM) {
1886 		status = _nfs4_proc_open_confirm(data);
1887 		if (status != 0)
1888 			return status;
1889 	}
1890 
1891 	return status;
1892 }
1893 
1894 static int nfs4_opendata_access(struct rpc_cred *cred,
1895 				struct nfs4_opendata *opendata,
1896 				struct nfs4_state *state, fmode_t fmode,
1897 				int openflags)
1898 {
1899 	struct nfs_access_entry cache;
1900 	u32 mask;
1901 
1902 	/* access call failed or for some reason the server doesn't
1903 	 * support any access modes -- defer access call until later */
1904 	if (opendata->o_res.access_supported == 0)
1905 		return 0;
1906 
1907 	mask = 0;
1908 	/* don't check MAY_WRITE - a newly created file may not have
1909 	 * write mode bits, but POSIX allows the creating process to write.
1910 	 * use openflags to check for exec, because fmode won't
1911 	 * always have FMODE_EXEC set when file open for exec. */
1912 	if (openflags & __FMODE_EXEC) {
1913 		/* ONLY check for exec rights */
1914 		mask = MAY_EXEC;
1915 	} else if (fmode & FMODE_READ)
1916 		mask = MAY_READ;
1917 
1918 	cache.cred = cred;
1919 	cache.jiffies = jiffies;
1920 	nfs_access_set_mask(&cache, opendata->o_res.access_result);
1921 	nfs_access_add_cache(state->inode, &cache);
1922 
1923 	if ((mask & ~cache.mask & (MAY_READ | MAY_EXEC)) == 0)
1924 		return 0;
1925 
1926 	/* even though OPEN succeeded, access is denied. Close the file */
1927 	nfs4_close_state(state, fmode);
1928 	return -EACCES;
1929 }
1930 
1931 /*
1932  * Note: On error, nfs4_proc_open will free the struct nfs4_opendata
1933  */
1934 static int _nfs4_proc_open(struct nfs4_opendata *data)
1935 {
1936 	struct inode *dir = data->dir->d_inode;
1937 	struct nfs_server *server = NFS_SERVER(dir);
1938 	struct nfs_openargs *o_arg = &data->o_arg;
1939 	struct nfs_openres *o_res = &data->o_res;
1940 	int status;
1941 
1942 	status = nfs4_run_open_task(data, 0);
1943 	if (!data->rpc_done)
1944 		return status;
1945 	if (status != 0) {
1946 		if (status == -NFS4ERR_BADNAME &&
1947 				!(o_arg->open_flags & O_CREAT))
1948 			return -ENOENT;
1949 		return status;
1950 	}
1951 
1952 	nfs_fattr_map_and_free_names(server, &data->f_attr);
1953 
1954 	if (o_arg->open_flags & O_CREAT) {
1955 		update_changeattr(dir, &o_res->cinfo);
1956 		if (o_arg->open_flags & O_EXCL)
1957 			data->file_created = 1;
1958 		else if (o_res->cinfo.before != o_res->cinfo.after)
1959 			data->file_created = 1;
1960 	}
1961 	if ((o_res->rflags & NFS4_OPEN_RESULT_LOCKTYPE_POSIX) == 0)
1962 		server->caps &= ~NFS_CAP_POSIX_LOCK;
1963 	if(o_res->rflags & NFS4_OPEN_RESULT_CONFIRM) {
1964 		status = _nfs4_proc_open_confirm(data);
1965 		if (status != 0)
1966 			return status;
1967 	}
1968 	if (!(o_res->f_attr->valid & NFS_ATTR_FATTR))
1969 		_nfs4_proc_getattr(server, &o_res->fh, o_res->f_attr, o_res->f_label);
1970 	return 0;
1971 }
1972 
1973 static int nfs4_recover_expired_lease(struct nfs_server *server)
1974 {
1975 	return nfs4_client_recover_expired_lease(server->nfs_client);
1976 }
1977 
1978 /*
1979  * OPEN_EXPIRED:
1980  * 	reclaim state on the server after a network partition.
1981  * 	Assumes caller holds the appropriate lock
1982  */
1983 static int _nfs4_open_expired(struct nfs_open_context *ctx, struct nfs4_state *state)
1984 {
1985 	struct nfs4_opendata *opendata;
1986 	int ret;
1987 
1988 	opendata = nfs4_open_recoverdata_alloc(ctx, state,
1989 			NFS4_OPEN_CLAIM_FH);
1990 	if (IS_ERR(opendata))
1991 		return PTR_ERR(opendata);
1992 	ret = nfs4_open_recover(opendata, state);
1993 	if (ret == -ESTALE)
1994 		d_drop(ctx->dentry);
1995 	nfs4_opendata_put(opendata);
1996 	return ret;
1997 }
1998 
1999 static int nfs4_do_open_expired(struct nfs_open_context *ctx, struct nfs4_state *state)
2000 {
2001 	struct nfs_server *server = NFS_SERVER(state->inode);
2002 	struct nfs4_exception exception = { };
2003 	int err;
2004 
2005 	do {
2006 		err = _nfs4_open_expired(ctx, state);
2007 		trace_nfs4_open_expired(ctx, 0, err);
2008 		if (nfs4_clear_cap_atomic_open_v1(server, err, &exception))
2009 			continue;
2010 		switch (err) {
2011 		default:
2012 			goto out;
2013 		case -NFS4ERR_GRACE:
2014 		case -NFS4ERR_DELAY:
2015 			nfs4_handle_exception(server, err, &exception);
2016 			err = 0;
2017 		}
2018 	} while (exception.retry);
2019 out:
2020 	return err;
2021 }
2022 
2023 static int nfs4_open_expired(struct nfs4_state_owner *sp, struct nfs4_state *state)
2024 {
2025 	struct nfs_open_context *ctx;
2026 	int ret;
2027 
2028 	ctx = nfs4_state_find_open_context(state);
2029 	if (IS_ERR(ctx))
2030 		return -EAGAIN;
2031 	ret = nfs4_do_open_expired(ctx, state);
2032 	put_nfs_open_context(ctx);
2033 	return ret;
2034 }
2035 
2036 #if defined(CONFIG_NFS_V4_1)
2037 static void nfs41_clear_delegation_stateid(struct nfs4_state *state)
2038 {
2039 	struct nfs_server *server = NFS_SERVER(state->inode);
2040 	nfs4_stateid *stateid = &state->stateid;
2041 	struct nfs_delegation *delegation;
2042 	struct rpc_cred *cred = NULL;
2043 	int status = -NFS4ERR_BAD_STATEID;
2044 
2045 	/* If a state reset has been done, test_stateid is unneeded */
2046 	if (test_bit(NFS_DELEGATED_STATE, &state->flags) == 0)
2047 		return;
2048 
2049 	/* Get the delegation credential for use by test/free_stateid */
2050 	rcu_read_lock();
2051 	delegation = rcu_dereference(NFS_I(state->inode)->delegation);
2052 	if (delegation != NULL &&
2053 	    nfs4_stateid_match(&delegation->stateid, stateid)) {
2054 		cred = get_rpccred(delegation->cred);
2055 		rcu_read_unlock();
2056 		status = nfs41_test_stateid(server, stateid, cred);
2057 		trace_nfs4_test_delegation_stateid(state, NULL, status);
2058 	} else
2059 		rcu_read_unlock();
2060 
2061 	if (status != NFS_OK) {
2062 		/* Free the stateid unless the server explicitly
2063 		 * informs us the stateid is unrecognized. */
2064 		if (status != -NFS4ERR_BAD_STATEID)
2065 			nfs41_free_stateid(server, stateid, cred);
2066 		nfs_remove_bad_delegation(state->inode);
2067 
2068 		write_seqlock(&state->seqlock);
2069 		nfs4_stateid_copy(&state->stateid, &state->open_stateid);
2070 		write_sequnlock(&state->seqlock);
2071 		clear_bit(NFS_DELEGATED_STATE, &state->flags);
2072 	}
2073 
2074 	if (cred != NULL)
2075 		put_rpccred(cred);
2076 }
2077 
2078 /**
2079  * nfs41_check_open_stateid - possibly free an open stateid
2080  *
2081  * @state: NFSv4 state for an inode
2082  *
2083  * Returns NFS_OK if recovery for this stateid is now finished.
2084  * Otherwise a negative NFS4ERR value is returned.
2085  */
2086 static int nfs41_check_open_stateid(struct nfs4_state *state)
2087 {
2088 	struct nfs_server *server = NFS_SERVER(state->inode);
2089 	nfs4_stateid *stateid = &state->open_stateid;
2090 	struct rpc_cred *cred = state->owner->so_cred;
2091 	int status;
2092 
2093 	/* If a state reset has been done, test_stateid is unneeded */
2094 	if ((test_bit(NFS_O_RDONLY_STATE, &state->flags) == 0) &&
2095 	    (test_bit(NFS_O_WRONLY_STATE, &state->flags) == 0) &&
2096 	    (test_bit(NFS_O_RDWR_STATE, &state->flags) == 0))
2097 		return -NFS4ERR_BAD_STATEID;
2098 
2099 	status = nfs41_test_stateid(server, stateid, cred);
2100 	trace_nfs4_test_open_stateid(state, NULL, status);
2101 	if (status != NFS_OK) {
2102 		/* Free the stateid unless the server explicitly
2103 		 * informs us the stateid is unrecognized. */
2104 		if (status != -NFS4ERR_BAD_STATEID)
2105 			nfs41_free_stateid(server, stateid, cred);
2106 
2107 		clear_bit(NFS_O_RDONLY_STATE, &state->flags);
2108 		clear_bit(NFS_O_WRONLY_STATE, &state->flags);
2109 		clear_bit(NFS_O_RDWR_STATE, &state->flags);
2110 		clear_bit(NFS_OPEN_STATE, &state->flags);
2111 	}
2112 	return status;
2113 }
2114 
2115 static int nfs41_open_expired(struct nfs4_state_owner *sp, struct nfs4_state *state)
2116 {
2117 	int status;
2118 
2119 	nfs41_clear_delegation_stateid(state);
2120 	status = nfs41_check_open_stateid(state);
2121 	if (status != NFS_OK)
2122 		status = nfs4_open_expired(sp, state);
2123 	return status;
2124 }
2125 #endif
2126 
2127 /*
2128  * on an EXCLUSIVE create, the server should send back a bitmask with FATTR4-*
2129  * fields corresponding to attributes that were used to store the verifier.
2130  * Make sure we clobber those fields in the later setattr call
2131  */
2132 static inline void nfs4_exclusive_attrset(struct nfs4_opendata *opendata, struct iattr *sattr)
2133 {
2134 	if ((opendata->o_res.attrset[1] & FATTR4_WORD1_TIME_ACCESS) &&
2135 	    !(sattr->ia_valid & ATTR_ATIME_SET))
2136 		sattr->ia_valid |= ATTR_ATIME;
2137 
2138 	if ((opendata->o_res.attrset[1] & FATTR4_WORD1_TIME_MODIFY) &&
2139 	    !(sattr->ia_valid & ATTR_MTIME_SET))
2140 		sattr->ia_valid |= ATTR_MTIME;
2141 }
2142 
2143 static int _nfs4_open_and_get_state(struct nfs4_opendata *opendata,
2144 		fmode_t fmode,
2145 		int flags,
2146 		struct nfs_open_context *ctx)
2147 {
2148 	struct nfs4_state_owner *sp = opendata->owner;
2149 	struct nfs_server *server = sp->so_server;
2150 	struct dentry *dentry;
2151 	struct nfs4_state *state;
2152 	unsigned int seq;
2153 	int ret;
2154 
2155 	seq = raw_seqcount_begin(&sp->so_reclaim_seqcount);
2156 
2157 	ret = _nfs4_proc_open(opendata);
2158 	if (ret != 0)
2159 		goto out;
2160 
2161 	state = nfs4_opendata_to_nfs4_state(opendata);
2162 	ret = PTR_ERR(state);
2163 	if (IS_ERR(state))
2164 		goto out;
2165 	if (server->caps & NFS_CAP_POSIX_LOCK)
2166 		set_bit(NFS_STATE_POSIX_LOCKS, &state->flags);
2167 
2168 	dentry = opendata->dentry;
2169 	if (dentry->d_inode == NULL) {
2170 		/* FIXME: Is this d_drop() ever needed? */
2171 		d_drop(dentry);
2172 		dentry = d_add_unique(dentry, igrab(state->inode));
2173 		if (dentry == NULL) {
2174 			dentry = opendata->dentry;
2175 		} else if (dentry != ctx->dentry) {
2176 			dput(ctx->dentry);
2177 			ctx->dentry = dget(dentry);
2178 		}
2179 		nfs_set_verifier(dentry,
2180 				nfs_save_change_attribute(opendata->dir->d_inode));
2181 	}
2182 
2183 	ret = nfs4_opendata_access(sp->so_cred, opendata, state, fmode, flags);
2184 	if (ret != 0)
2185 		goto out;
2186 
2187 	ctx->state = state;
2188 	if (dentry->d_inode == state->inode) {
2189 		nfs_inode_attach_open_context(ctx);
2190 		if (read_seqcount_retry(&sp->so_reclaim_seqcount, seq))
2191 			nfs4_schedule_stateid_recovery(server, state);
2192 	}
2193 out:
2194 	return ret;
2195 }
2196 
2197 /*
2198  * Returns a referenced nfs4_state
2199  */
2200 static int _nfs4_do_open(struct inode *dir,
2201 			struct nfs_open_context *ctx,
2202 			int flags,
2203 			struct iattr *sattr,
2204 			struct nfs4_label *label,
2205 			int *opened)
2206 {
2207 	struct nfs4_state_owner  *sp;
2208 	struct nfs4_state     *state = NULL;
2209 	struct nfs_server       *server = NFS_SERVER(dir);
2210 	struct nfs4_opendata *opendata;
2211 	struct dentry *dentry = ctx->dentry;
2212 	struct rpc_cred *cred = ctx->cred;
2213 	struct nfs4_threshold **ctx_th = &ctx->mdsthreshold;
2214 	fmode_t fmode = ctx->mode & (FMODE_READ|FMODE_WRITE|FMODE_EXEC);
2215 	enum open_claim_type4 claim = NFS4_OPEN_CLAIM_NULL;
2216 	struct nfs4_label *olabel = NULL;
2217 	int status;
2218 
2219 	/* Protect against reboot recovery conflicts */
2220 	status = -ENOMEM;
2221 	sp = nfs4_get_state_owner(server, cred, GFP_KERNEL);
2222 	if (sp == NULL) {
2223 		dprintk("nfs4_do_open: nfs4_get_state_owner failed!\n");
2224 		goto out_err;
2225 	}
2226 	status = nfs4_recover_expired_lease(server);
2227 	if (status != 0)
2228 		goto err_put_state_owner;
2229 	if (dentry->d_inode != NULL)
2230 		nfs4_return_incompatible_delegation(dentry->d_inode, fmode);
2231 	status = -ENOMEM;
2232 	if (dentry->d_inode)
2233 		claim = NFS4_OPEN_CLAIM_FH;
2234 	opendata = nfs4_opendata_alloc(dentry, sp, fmode, flags, sattr,
2235 			label, claim, GFP_KERNEL);
2236 	if (opendata == NULL)
2237 		goto err_put_state_owner;
2238 
2239 	if (label) {
2240 		olabel = nfs4_label_alloc(server, GFP_KERNEL);
2241 		if (IS_ERR(olabel)) {
2242 			status = PTR_ERR(olabel);
2243 			goto err_opendata_put;
2244 		}
2245 	}
2246 
2247 	if (ctx_th && server->attr_bitmask[2] & FATTR4_WORD2_MDSTHRESHOLD) {
2248 		opendata->f_attr.mdsthreshold = pnfs_mdsthreshold_alloc();
2249 		if (!opendata->f_attr.mdsthreshold)
2250 			goto err_free_label;
2251 		opendata->o_arg.open_bitmap = &nfs4_pnfs_open_bitmap[0];
2252 	}
2253 	if (dentry->d_inode != NULL)
2254 		opendata->state = nfs4_get_open_state(dentry->d_inode, sp);
2255 
2256 	status = _nfs4_open_and_get_state(opendata, fmode, flags, ctx);
2257 	if (status != 0)
2258 		goto err_free_label;
2259 	state = ctx->state;
2260 
2261 	if ((opendata->o_arg.open_flags & O_EXCL) &&
2262 	    (opendata->o_arg.createmode != NFS4_CREATE_GUARDED)) {
2263 		nfs4_exclusive_attrset(opendata, sattr);
2264 
2265 		nfs_fattr_init(opendata->o_res.f_attr);
2266 		status = nfs4_do_setattr(state->inode, cred,
2267 				opendata->o_res.f_attr, sattr,
2268 				state, label, olabel);
2269 		if (status == 0) {
2270 			nfs_setattr_update_inode(state->inode, sattr);
2271 			nfs_post_op_update_inode(state->inode, opendata->o_res.f_attr);
2272 			nfs_setsecurity(state->inode, opendata->o_res.f_attr, olabel);
2273 		}
2274 	}
2275 	if (opendata->file_created)
2276 		*opened |= FILE_CREATED;
2277 
2278 	if (pnfs_use_threshold(ctx_th, opendata->f_attr.mdsthreshold, server))
2279 		*ctx_th = opendata->f_attr.mdsthreshold;
2280 	else
2281 		kfree(opendata->f_attr.mdsthreshold);
2282 	opendata->f_attr.mdsthreshold = NULL;
2283 
2284 	nfs4_label_free(olabel);
2285 
2286 	nfs4_opendata_put(opendata);
2287 	nfs4_put_state_owner(sp);
2288 	return 0;
2289 err_free_label:
2290 	nfs4_label_free(olabel);
2291 err_opendata_put:
2292 	kfree(opendata->f_attr.mdsthreshold);
2293 	nfs4_opendata_put(opendata);
2294 err_put_state_owner:
2295 	nfs4_put_state_owner(sp);
2296 out_err:
2297 	return status;
2298 }
2299 
2300 
2301 static struct nfs4_state *nfs4_do_open(struct inode *dir,
2302 					struct nfs_open_context *ctx,
2303 					int flags,
2304 					struct iattr *sattr,
2305 					struct nfs4_label *label,
2306 					int *opened)
2307 {
2308 	struct nfs_server *server = NFS_SERVER(dir);
2309 	struct nfs4_exception exception = { };
2310 	struct nfs4_state *res;
2311 	int status;
2312 
2313 	do {
2314 		status = _nfs4_do_open(dir, ctx, flags, sattr, label, opened);
2315 		res = ctx->state;
2316 		trace_nfs4_open_file(ctx, flags, status);
2317 		if (status == 0)
2318 			break;
2319 		/* NOTE: BAD_SEQID means the server and client disagree about the
2320 		 * book-keeping w.r.t. state-changing operations
2321 		 * (OPEN/CLOSE/LOCK/LOCKU...)
2322 		 * It is actually a sign of a bug on the client or on the server.
2323 		 *
2324 		 * If we receive a BAD_SEQID error in the particular case of
2325 		 * doing an OPEN, we assume that nfs_increment_open_seqid() will
2326 		 * have unhashed the old state_owner for us, and that we can
2327 		 * therefore safely retry using a new one. We should still warn
2328 		 * the user though...
2329 		 */
2330 		if (status == -NFS4ERR_BAD_SEQID) {
2331 			pr_warn_ratelimited("NFS: v4 server %s "
2332 					" returned a bad sequence-id error!\n",
2333 					NFS_SERVER(dir)->nfs_client->cl_hostname);
2334 			exception.retry = 1;
2335 			continue;
2336 		}
2337 		/*
2338 		 * BAD_STATEID on OPEN means that the server cancelled our
2339 		 * state before it received the OPEN_CONFIRM.
2340 		 * Recover by retrying the request as per the discussion
2341 		 * on Page 181 of RFC3530.
2342 		 */
2343 		if (status == -NFS4ERR_BAD_STATEID) {
2344 			exception.retry = 1;
2345 			continue;
2346 		}
2347 		if (status == -EAGAIN) {
2348 			/* We must have found a delegation */
2349 			exception.retry = 1;
2350 			continue;
2351 		}
2352 		if (nfs4_clear_cap_atomic_open_v1(server, status, &exception))
2353 			continue;
2354 		res = ERR_PTR(nfs4_handle_exception(server,
2355 					status, &exception));
2356 	} while (exception.retry);
2357 	return res;
2358 }
2359 
2360 static int _nfs4_do_setattr(struct inode *inode, struct rpc_cred *cred,
2361 			    struct nfs_fattr *fattr, struct iattr *sattr,
2362 			    struct nfs4_state *state, struct nfs4_label *ilabel,
2363 			    struct nfs4_label *olabel)
2364 {
2365 	struct nfs_server *server = NFS_SERVER(inode);
2366         struct nfs_setattrargs  arg = {
2367                 .fh             = NFS_FH(inode),
2368                 .iap            = sattr,
2369 		.server		= server,
2370 		.bitmask = server->attr_bitmask,
2371 		.label		= ilabel,
2372         };
2373         struct nfs_setattrres  res = {
2374 		.fattr		= fattr,
2375 		.label		= olabel,
2376 		.server		= server,
2377         };
2378         struct rpc_message msg = {
2379 		.rpc_proc	= &nfs4_procedures[NFSPROC4_CLNT_SETATTR],
2380 		.rpc_argp	= &arg,
2381 		.rpc_resp	= &res,
2382 		.rpc_cred	= cred,
2383         };
2384 	unsigned long timestamp = jiffies;
2385 	fmode_t fmode;
2386 	bool truncate;
2387 	int status;
2388 
2389 	arg.bitmask = nfs4_bitmask(server, ilabel);
2390 	if (ilabel)
2391 		arg.bitmask = nfs4_bitmask(server, olabel);
2392 
2393 	nfs_fattr_init(fattr);
2394 
2395 	/* Servers should only apply open mode checks for file size changes */
2396 	truncate = (sattr->ia_valid & ATTR_SIZE) ? true : false;
2397 	fmode = truncate ? FMODE_WRITE : FMODE_READ;
2398 
2399 	if (nfs4_copy_delegation_stateid(&arg.stateid, inode, fmode)) {
2400 		/* Use that stateid */
2401 	} else if (truncate && state != NULL && nfs4_valid_open_stateid(state)) {
2402 		struct nfs_lockowner lockowner = {
2403 			.l_owner = current->files,
2404 			.l_pid = current->tgid,
2405 		};
2406 		nfs4_select_rw_stateid(&arg.stateid, state, FMODE_WRITE,
2407 				&lockowner);
2408 	} else
2409 		nfs4_stateid_copy(&arg.stateid, &zero_stateid);
2410 
2411 	status = nfs4_call_sync(server->client, server, &msg, &arg.seq_args, &res.seq_res, 1);
2412 	if (status == 0 && state != NULL)
2413 		renew_lease(server, timestamp);
2414 	return status;
2415 }
2416 
2417 static int nfs4_do_setattr(struct inode *inode, struct rpc_cred *cred,
2418 			   struct nfs_fattr *fattr, struct iattr *sattr,
2419 			   struct nfs4_state *state, struct nfs4_label *ilabel,
2420 			   struct nfs4_label *olabel)
2421 {
2422 	struct nfs_server *server = NFS_SERVER(inode);
2423 	struct nfs4_exception exception = {
2424 		.state = state,
2425 		.inode = inode,
2426 	};
2427 	int err;
2428 	do {
2429 		err = _nfs4_do_setattr(inode, cred, fattr, sattr, state, ilabel, olabel);
2430 		trace_nfs4_setattr(inode, err);
2431 		switch (err) {
2432 		case -NFS4ERR_OPENMODE:
2433 			if (!(sattr->ia_valid & ATTR_SIZE)) {
2434 				pr_warn_once("NFSv4: server %s is incorrectly "
2435 						"applying open mode checks to "
2436 						"a SETATTR that is not "
2437 						"changing file size.\n",
2438 						server->nfs_client->cl_hostname);
2439 			}
2440 			if (state && !(state->state & FMODE_WRITE)) {
2441 				err = -EBADF;
2442 				if (sattr->ia_valid & ATTR_OPEN)
2443 					err = -EACCES;
2444 				goto out;
2445 			}
2446 		}
2447 		err = nfs4_handle_exception(server, err, &exception);
2448 	} while (exception.retry);
2449 out:
2450 	return err;
2451 }
2452 
2453 struct nfs4_closedata {
2454 	struct inode *inode;
2455 	struct nfs4_state *state;
2456 	struct nfs_closeargs arg;
2457 	struct nfs_closeres res;
2458 	struct nfs_fattr fattr;
2459 	unsigned long timestamp;
2460 	bool roc;
2461 	u32 roc_barrier;
2462 };
2463 
2464 static void nfs4_free_closedata(void *data)
2465 {
2466 	struct nfs4_closedata *calldata = data;
2467 	struct nfs4_state_owner *sp = calldata->state->owner;
2468 	struct super_block *sb = calldata->state->inode->i_sb;
2469 
2470 	if (calldata->roc)
2471 		pnfs_roc_release(calldata->state->inode);
2472 	nfs4_put_open_state(calldata->state);
2473 	nfs_free_seqid(calldata->arg.seqid);
2474 	nfs4_put_state_owner(sp);
2475 	nfs_sb_deactive(sb);
2476 	kfree(calldata);
2477 }
2478 
2479 static void nfs4_close_clear_stateid_flags(struct nfs4_state *state,
2480 		fmode_t fmode)
2481 {
2482 	spin_lock(&state->owner->so_lock);
2483 	clear_bit(NFS_O_RDWR_STATE, &state->flags);
2484 	switch (fmode & (FMODE_READ|FMODE_WRITE)) {
2485 	case FMODE_WRITE:
2486 		clear_bit(NFS_O_RDONLY_STATE, &state->flags);
2487 		break;
2488 	case FMODE_READ:
2489 		clear_bit(NFS_O_WRONLY_STATE, &state->flags);
2490 		break;
2491 	case 0:
2492 		clear_bit(NFS_O_RDONLY_STATE, &state->flags);
2493 		clear_bit(NFS_O_WRONLY_STATE, &state->flags);
2494 		clear_bit(NFS_OPEN_STATE, &state->flags);
2495 	}
2496 	spin_unlock(&state->owner->so_lock);
2497 }
2498 
2499 static void nfs4_close_done(struct rpc_task *task, void *data)
2500 {
2501 	struct nfs4_closedata *calldata = data;
2502 	struct nfs4_state *state = calldata->state;
2503 	struct nfs_server *server = NFS_SERVER(calldata->inode);
2504 
2505 	dprintk("%s: begin!\n", __func__);
2506 	if (!nfs4_sequence_done(task, &calldata->res.seq_res))
2507 		return;
2508 	trace_nfs4_close(state, &calldata->arg, &calldata->res, task->tk_status);
2509         /* hmm. we are done with the inode, and in the process of freeing
2510 	 * the state_owner. we keep this around to process errors
2511 	 */
2512 	switch (task->tk_status) {
2513 		case 0:
2514 			if (calldata->roc)
2515 				pnfs_roc_set_barrier(state->inode,
2516 						     calldata->roc_barrier);
2517 			nfs_set_open_stateid(state, &calldata->res.stateid, 0);
2518 			renew_lease(server, calldata->timestamp);
2519 			break;
2520 		case -NFS4ERR_ADMIN_REVOKED:
2521 		case -NFS4ERR_STALE_STATEID:
2522 		case -NFS4ERR_OLD_STATEID:
2523 		case -NFS4ERR_BAD_STATEID:
2524 		case -NFS4ERR_EXPIRED:
2525 			if (calldata->arg.fmode == 0)
2526 				break;
2527 		default:
2528 			if (nfs4_async_handle_error(task, server, state) == -EAGAIN) {
2529 				rpc_restart_call_prepare(task);
2530 				goto out_release;
2531 			}
2532 	}
2533 	nfs4_close_clear_stateid_flags(state, calldata->arg.fmode);
2534 out_release:
2535 	nfs_release_seqid(calldata->arg.seqid);
2536 	nfs_refresh_inode(calldata->inode, calldata->res.fattr);
2537 	dprintk("%s: done, ret = %d!\n", __func__, task->tk_status);
2538 }
2539 
2540 static void nfs4_close_prepare(struct rpc_task *task, void *data)
2541 {
2542 	struct nfs4_closedata *calldata = data;
2543 	struct nfs4_state *state = calldata->state;
2544 	struct inode *inode = calldata->inode;
2545 	int call_close = 0;
2546 
2547 	dprintk("%s: begin!\n", __func__);
2548 	if (nfs_wait_on_sequence(calldata->arg.seqid, task) != 0)
2549 		goto out_wait;
2550 
2551 	task->tk_msg.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_OPEN_DOWNGRADE];
2552 	calldata->arg.fmode = FMODE_READ|FMODE_WRITE;
2553 	spin_lock(&state->owner->so_lock);
2554 	/* Calculate the change in open mode */
2555 	if (state->n_rdwr == 0) {
2556 		if (state->n_rdonly == 0) {
2557 			call_close |= test_bit(NFS_O_RDONLY_STATE, &state->flags);
2558 			call_close |= test_bit(NFS_O_RDWR_STATE, &state->flags);
2559 			calldata->arg.fmode &= ~FMODE_READ;
2560 		}
2561 		if (state->n_wronly == 0) {
2562 			call_close |= test_bit(NFS_O_WRONLY_STATE, &state->flags);
2563 			call_close |= test_bit(NFS_O_RDWR_STATE, &state->flags);
2564 			calldata->arg.fmode &= ~FMODE_WRITE;
2565 		}
2566 	}
2567 	if (!nfs4_valid_open_stateid(state))
2568 		call_close = 0;
2569 	spin_unlock(&state->owner->so_lock);
2570 
2571 	if (!call_close) {
2572 		/* Note: exit _without_ calling nfs4_close_done */
2573 		goto out_no_action;
2574 	}
2575 
2576 	if (calldata->arg.fmode == 0) {
2577 		task->tk_msg.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_CLOSE];
2578 		if (calldata->roc &&
2579 		    pnfs_roc_drain(inode, &calldata->roc_barrier, task)) {
2580 			nfs_release_seqid(calldata->arg.seqid);
2581 			goto out_wait;
2582 		    }
2583 	}
2584 
2585 	nfs_fattr_init(calldata->res.fattr);
2586 	calldata->timestamp = jiffies;
2587 	if (nfs4_setup_sequence(NFS_SERVER(inode),
2588 				&calldata->arg.seq_args,
2589 				&calldata->res.seq_res,
2590 				task) != 0)
2591 		nfs_release_seqid(calldata->arg.seqid);
2592 	dprintk("%s: done!\n", __func__);
2593 	return;
2594 out_no_action:
2595 	task->tk_action = NULL;
2596 out_wait:
2597 	nfs4_sequence_done(task, &calldata->res.seq_res);
2598 }
2599 
2600 static const struct rpc_call_ops nfs4_close_ops = {
2601 	.rpc_call_prepare = nfs4_close_prepare,
2602 	.rpc_call_done = nfs4_close_done,
2603 	.rpc_release = nfs4_free_closedata,
2604 };
2605 
2606 /*
2607  * It is possible for data to be read/written from a mem-mapped file
2608  * after the sys_close call (which hits the vfs layer as a flush).
2609  * This means that we can't safely call nfsv4 close on a file until
2610  * the inode is cleared. This in turn means that we are not good
2611  * NFSv4 citizens - we do not indicate to the server to update the file's
2612  * share state even when we are done with one of the three share
2613  * stateid's in the inode.
2614  *
2615  * NOTE: Caller must be holding the sp->so_owner semaphore!
2616  */
2617 int nfs4_do_close(struct nfs4_state *state, gfp_t gfp_mask, int wait)
2618 {
2619 	struct nfs_server *server = NFS_SERVER(state->inode);
2620 	struct nfs4_closedata *calldata;
2621 	struct nfs4_state_owner *sp = state->owner;
2622 	struct rpc_task *task;
2623 	struct rpc_message msg = {
2624 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_CLOSE],
2625 		.rpc_cred = state->owner->so_cred,
2626 	};
2627 	struct rpc_task_setup task_setup_data = {
2628 		.rpc_client = server->client,
2629 		.rpc_message = &msg,
2630 		.callback_ops = &nfs4_close_ops,
2631 		.workqueue = nfsiod_workqueue,
2632 		.flags = RPC_TASK_ASYNC,
2633 	};
2634 	int status = -ENOMEM;
2635 
2636 	nfs4_state_protect(server->nfs_client, NFS_SP4_MACH_CRED_CLEANUP,
2637 		&task_setup_data.rpc_client, &msg);
2638 
2639 	calldata = kzalloc(sizeof(*calldata), gfp_mask);
2640 	if (calldata == NULL)
2641 		goto out;
2642 	nfs4_init_sequence(&calldata->arg.seq_args, &calldata->res.seq_res, 1);
2643 	calldata->inode = state->inode;
2644 	calldata->state = state;
2645 	calldata->arg.fh = NFS_FH(state->inode);
2646 	calldata->arg.stateid = &state->open_stateid;
2647 	/* Serialization for the sequence id */
2648 	calldata->arg.seqid = nfs_alloc_seqid(&state->owner->so_seqid, gfp_mask);
2649 	if (calldata->arg.seqid == NULL)
2650 		goto out_free_calldata;
2651 	calldata->arg.fmode = 0;
2652 	calldata->arg.bitmask = server->cache_consistency_bitmask;
2653 	calldata->res.fattr = &calldata->fattr;
2654 	calldata->res.seqid = calldata->arg.seqid;
2655 	calldata->res.server = server;
2656 	calldata->roc = pnfs_roc(state->inode);
2657 	nfs_sb_active(calldata->inode->i_sb);
2658 
2659 	msg.rpc_argp = &calldata->arg;
2660 	msg.rpc_resp = &calldata->res;
2661 	task_setup_data.callback_data = calldata;
2662 	task = rpc_run_task(&task_setup_data);
2663 	if (IS_ERR(task))
2664 		return PTR_ERR(task);
2665 	status = 0;
2666 	if (wait)
2667 		status = rpc_wait_for_completion_task(task);
2668 	rpc_put_task(task);
2669 	return status;
2670 out_free_calldata:
2671 	kfree(calldata);
2672 out:
2673 	nfs4_put_open_state(state);
2674 	nfs4_put_state_owner(sp);
2675 	return status;
2676 }
2677 
2678 static struct inode *
2679 nfs4_atomic_open(struct inode *dir, struct nfs_open_context *ctx,
2680 		int open_flags, struct iattr *attr, int *opened)
2681 {
2682 	struct nfs4_state *state;
2683 	struct nfs4_label l = {0, 0, 0, NULL}, *label = NULL;
2684 
2685 	label = nfs4_label_init_security(dir, ctx->dentry, attr, &l);
2686 
2687 	/* Protect against concurrent sillydeletes */
2688 	state = nfs4_do_open(dir, ctx, open_flags, attr, label, opened);
2689 
2690 	nfs4_label_release_security(label);
2691 
2692 	if (IS_ERR(state))
2693 		return ERR_CAST(state);
2694 	return state->inode;
2695 }
2696 
2697 static void nfs4_close_context(struct nfs_open_context *ctx, int is_sync)
2698 {
2699 	if (ctx->state == NULL)
2700 		return;
2701 	if (is_sync)
2702 		nfs4_close_sync(ctx->state, ctx->mode);
2703 	else
2704 		nfs4_close_state(ctx->state, ctx->mode);
2705 }
2706 
2707 #define FATTR4_WORD1_NFS40_MASK (2*FATTR4_WORD1_MOUNTED_ON_FILEID - 1UL)
2708 #define FATTR4_WORD2_NFS41_MASK (2*FATTR4_WORD2_SUPPATTR_EXCLCREAT - 1UL)
2709 #define FATTR4_WORD2_NFS42_MASK (2*FATTR4_WORD2_CHANGE_SECURITY_LABEL - 1UL)
2710 
2711 static int _nfs4_server_capabilities(struct nfs_server *server, struct nfs_fh *fhandle)
2712 {
2713 	struct nfs4_server_caps_arg args = {
2714 		.fhandle = fhandle,
2715 	};
2716 	struct nfs4_server_caps_res res = {};
2717 	struct rpc_message msg = {
2718 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_SERVER_CAPS],
2719 		.rpc_argp = &args,
2720 		.rpc_resp = &res,
2721 	};
2722 	int status;
2723 
2724 	status = nfs4_call_sync(server->client, server, &msg, &args.seq_args, &res.seq_res, 0);
2725 	if (status == 0) {
2726 		/* Sanity check the server answers */
2727 		switch (server->nfs_client->cl_minorversion) {
2728 		case 0:
2729 			res.attr_bitmask[1] &= FATTR4_WORD1_NFS40_MASK;
2730 			res.attr_bitmask[2] = 0;
2731 			break;
2732 		case 1:
2733 			res.attr_bitmask[2] &= FATTR4_WORD2_NFS41_MASK;
2734 			break;
2735 		case 2:
2736 			res.attr_bitmask[2] &= FATTR4_WORD2_NFS42_MASK;
2737 		}
2738 		memcpy(server->attr_bitmask, res.attr_bitmask, sizeof(server->attr_bitmask));
2739 		server->caps &= ~(NFS_CAP_ACLS|NFS_CAP_HARDLINKS|
2740 				NFS_CAP_SYMLINKS|NFS_CAP_FILEID|
2741 				NFS_CAP_MODE|NFS_CAP_NLINK|NFS_CAP_OWNER|
2742 				NFS_CAP_OWNER_GROUP|NFS_CAP_ATIME|
2743 				NFS_CAP_CTIME|NFS_CAP_MTIME|
2744 				NFS_CAP_SECURITY_LABEL);
2745 		if (res.attr_bitmask[0] & FATTR4_WORD0_ACL &&
2746 				res.acl_bitmask & ACL4_SUPPORT_ALLOW_ACL)
2747 			server->caps |= NFS_CAP_ACLS;
2748 		if (res.has_links != 0)
2749 			server->caps |= NFS_CAP_HARDLINKS;
2750 		if (res.has_symlinks != 0)
2751 			server->caps |= NFS_CAP_SYMLINKS;
2752 		if (res.attr_bitmask[0] & FATTR4_WORD0_FILEID)
2753 			server->caps |= NFS_CAP_FILEID;
2754 		if (res.attr_bitmask[1] & FATTR4_WORD1_MODE)
2755 			server->caps |= NFS_CAP_MODE;
2756 		if (res.attr_bitmask[1] & FATTR4_WORD1_NUMLINKS)
2757 			server->caps |= NFS_CAP_NLINK;
2758 		if (res.attr_bitmask[1] & FATTR4_WORD1_OWNER)
2759 			server->caps |= NFS_CAP_OWNER;
2760 		if (res.attr_bitmask[1] & FATTR4_WORD1_OWNER_GROUP)
2761 			server->caps |= NFS_CAP_OWNER_GROUP;
2762 		if (res.attr_bitmask[1] & FATTR4_WORD1_TIME_ACCESS)
2763 			server->caps |= NFS_CAP_ATIME;
2764 		if (res.attr_bitmask[1] & FATTR4_WORD1_TIME_METADATA)
2765 			server->caps |= NFS_CAP_CTIME;
2766 		if (res.attr_bitmask[1] & FATTR4_WORD1_TIME_MODIFY)
2767 			server->caps |= NFS_CAP_MTIME;
2768 #ifdef CONFIG_NFS_V4_SECURITY_LABEL
2769 		if (res.attr_bitmask[2] & FATTR4_WORD2_SECURITY_LABEL)
2770 			server->caps |= NFS_CAP_SECURITY_LABEL;
2771 #endif
2772 		memcpy(server->attr_bitmask_nl, res.attr_bitmask,
2773 				sizeof(server->attr_bitmask));
2774 		server->attr_bitmask_nl[2] &= ~FATTR4_WORD2_SECURITY_LABEL;
2775 
2776 		memcpy(server->cache_consistency_bitmask, res.attr_bitmask, sizeof(server->cache_consistency_bitmask));
2777 		server->cache_consistency_bitmask[0] &= FATTR4_WORD0_CHANGE|FATTR4_WORD0_SIZE;
2778 		server->cache_consistency_bitmask[1] &= FATTR4_WORD1_TIME_METADATA|FATTR4_WORD1_TIME_MODIFY;
2779 		server->cache_consistency_bitmask[2] = 0;
2780 		server->acl_bitmask = res.acl_bitmask;
2781 		server->fh_expire_type = res.fh_expire_type;
2782 	}
2783 
2784 	return status;
2785 }
2786 
2787 int nfs4_server_capabilities(struct nfs_server *server, struct nfs_fh *fhandle)
2788 {
2789 	struct nfs4_exception exception = { };
2790 	int err;
2791 	do {
2792 		err = nfs4_handle_exception(server,
2793 				_nfs4_server_capabilities(server, fhandle),
2794 				&exception);
2795 	} while (exception.retry);
2796 	return err;
2797 }
2798 
2799 static int _nfs4_lookup_root(struct nfs_server *server, struct nfs_fh *fhandle,
2800 		struct nfs_fsinfo *info)
2801 {
2802 	u32 bitmask[3];
2803 	struct nfs4_lookup_root_arg args = {
2804 		.bitmask = bitmask,
2805 	};
2806 	struct nfs4_lookup_res res = {
2807 		.server = server,
2808 		.fattr = info->fattr,
2809 		.fh = fhandle,
2810 	};
2811 	struct rpc_message msg = {
2812 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_LOOKUP_ROOT],
2813 		.rpc_argp = &args,
2814 		.rpc_resp = &res,
2815 	};
2816 
2817 	bitmask[0] = nfs4_fattr_bitmap[0];
2818 	bitmask[1] = nfs4_fattr_bitmap[1];
2819 	/*
2820 	 * Process the label in the upcoming getfattr
2821 	 */
2822 	bitmask[2] = nfs4_fattr_bitmap[2] & ~FATTR4_WORD2_SECURITY_LABEL;
2823 
2824 	nfs_fattr_init(info->fattr);
2825 	return nfs4_call_sync(server->client, server, &msg, &args.seq_args, &res.seq_res, 0);
2826 }
2827 
2828 static int nfs4_lookup_root(struct nfs_server *server, struct nfs_fh *fhandle,
2829 		struct nfs_fsinfo *info)
2830 {
2831 	struct nfs4_exception exception = { };
2832 	int err;
2833 	do {
2834 		err = _nfs4_lookup_root(server, fhandle, info);
2835 		trace_nfs4_lookup_root(server, fhandle, info->fattr, err);
2836 		switch (err) {
2837 		case 0:
2838 		case -NFS4ERR_WRONGSEC:
2839 			goto out;
2840 		default:
2841 			err = nfs4_handle_exception(server, err, &exception);
2842 		}
2843 	} while (exception.retry);
2844 out:
2845 	return err;
2846 }
2847 
2848 static int nfs4_lookup_root_sec(struct nfs_server *server, struct nfs_fh *fhandle,
2849 				struct nfs_fsinfo *info, rpc_authflavor_t flavor)
2850 {
2851 	struct rpc_auth_create_args auth_args = {
2852 		.pseudoflavor = flavor,
2853 	};
2854 	struct rpc_auth *auth;
2855 	int ret;
2856 
2857 	auth = rpcauth_create(&auth_args, server->client);
2858 	if (IS_ERR(auth)) {
2859 		ret = -EACCES;
2860 		goto out;
2861 	}
2862 	ret = nfs4_lookup_root(server, fhandle, info);
2863 out:
2864 	return ret;
2865 }
2866 
2867 /*
2868  * Retry pseudoroot lookup with various security flavors.  We do this when:
2869  *
2870  *   NFSv4.0: the PUTROOTFH operation returns NFS4ERR_WRONGSEC
2871  *   NFSv4.1: the server does not support the SECINFO_NO_NAME operation
2872  *
2873  * Returns zero on success, or a negative NFS4ERR value, or a
2874  * negative errno value.
2875  */
2876 static int nfs4_find_root_sec(struct nfs_server *server, struct nfs_fh *fhandle,
2877 			      struct nfs_fsinfo *info)
2878 {
2879 	/* Per 3530bis 15.33.5 */
2880 	static const rpc_authflavor_t flav_array[] = {
2881 		RPC_AUTH_GSS_KRB5P,
2882 		RPC_AUTH_GSS_KRB5I,
2883 		RPC_AUTH_GSS_KRB5,
2884 		RPC_AUTH_UNIX,			/* courtesy */
2885 		RPC_AUTH_NULL,
2886 	};
2887 	int status = -EPERM;
2888 	size_t i;
2889 
2890 	if (server->auth_info.flavor_len > 0) {
2891 		/* try each flavor specified by user */
2892 		for (i = 0; i < server->auth_info.flavor_len; i++) {
2893 			status = nfs4_lookup_root_sec(server, fhandle, info,
2894 						server->auth_info.flavors[i]);
2895 			if (status == -NFS4ERR_WRONGSEC || status == -EACCES)
2896 				continue;
2897 			break;
2898 		}
2899 	} else {
2900 		/* no flavors specified by user, try default list */
2901 		for (i = 0; i < ARRAY_SIZE(flav_array); i++) {
2902 			status = nfs4_lookup_root_sec(server, fhandle, info,
2903 						      flav_array[i]);
2904 			if (status == -NFS4ERR_WRONGSEC || status == -EACCES)
2905 				continue;
2906 			break;
2907 		}
2908 	}
2909 
2910 	/*
2911 	 * -EACCESS could mean that the user doesn't have correct permissions
2912 	 * to access the mount.  It could also mean that we tried to mount
2913 	 * with a gss auth flavor, but rpc.gssd isn't running.  Either way,
2914 	 * existing mount programs don't handle -EACCES very well so it should
2915 	 * be mapped to -EPERM instead.
2916 	 */
2917 	if (status == -EACCES)
2918 		status = -EPERM;
2919 	return status;
2920 }
2921 
2922 static int nfs4_do_find_root_sec(struct nfs_server *server,
2923 		struct nfs_fh *fhandle, struct nfs_fsinfo *info)
2924 {
2925 	int mv = server->nfs_client->cl_minorversion;
2926 	return nfs_v4_minor_ops[mv]->find_root_sec(server, fhandle, info);
2927 }
2928 
2929 /**
2930  * nfs4_proc_get_rootfh - get file handle for server's pseudoroot
2931  * @server: initialized nfs_server handle
2932  * @fhandle: we fill in the pseudo-fs root file handle
2933  * @info: we fill in an FSINFO struct
2934  * @auth_probe: probe the auth flavours
2935  *
2936  * Returns zero on success, or a negative errno.
2937  */
2938 int nfs4_proc_get_rootfh(struct nfs_server *server, struct nfs_fh *fhandle,
2939 			 struct nfs_fsinfo *info,
2940 			 bool auth_probe)
2941 {
2942 	int status;
2943 
2944 	switch (auth_probe) {
2945 	case false:
2946 		status = nfs4_lookup_root(server, fhandle, info);
2947 		if (status != -NFS4ERR_WRONGSEC)
2948 			break;
2949 	default:
2950 		status = nfs4_do_find_root_sec(server, fhandle, info);
2951 	}
2952 
2953 	if (status == 0)
2954 		status = nfs4_server_capabilities(server, fhandle);
2955 	if (status == 0)
2956 		status = nfs4_do_fsinfo(server, fhandle, info);
2957 
2958 	return nfs4_map_errors(status);
2959 }
2960 
2961 static int nfs4_proc_get_root(struct nfs_server *server, struct nfs_fh *mntfh,
2962 			      struct nfs_fsinfo *info)
2963 {
2964 	int error;
2965 	struct nfs_fattr *fattr = info->fattr;
2966 	struct nfs4_label *label = NULL;
2967 
2968 	error = nfs4_server_capabilities(server, mntfh);
2969 	if (error < 0) {
2970 		dprintk("nfs4_get_root: getcaps error = %d\n", -error);
2971 		return error;
2972 	}
2973 
2974 	label = nfs4_label_alloc(server, GFP_KERNEL);
2975 	if (IS_ERR(label))
2976 		return PTR_ERR(label);
2977 
2978 	error = nfs4_proc_getattr(server, mntfh, fattr, label);
2979 	if (error < 0) {
2980 		dprintk("nfs4_get_root: getattr error = %d\n", -error);
2981 		goto err_free_label;
2982 	}
2983 
2984 	if (fattr->valid & NFS_ATTR_FATTR_FSID &&
2985 	    !nfs_fsid_equal(&server->fsid, &fattr->fsid))
2986 		memcpy(&server->fsid, &fattr->fsid, sizeof(server->fsid));
2987 
2988 err_free_label:
2989 	nfs4_label_free(label);
2990 
2991 	return error;
2992 }
2993 
2994 /*
2995  * Get locations and (maybe) other attributes of a referral.
2996  * Note that we'll actually follow the referral later when
2997  * we detect fsid mismatch in inode revalidation
2998  */
2999 static int nfs4_get_referral(struct rpc_clnt *client, struct inode *dir,
3000 			     const struct qstr *name, struct nfs_fattr *fattr,
3001 			     struct nfs_fh *fhandle)
3002 {
3003 	int status = -ENOMEM;
3004 	struct page *page = NULL;
3005 	struct nfs4_fs_locations *locations = NULL;
3006 
3007 	page = alloc_page(GFP_KERNEL);
3008 	if (page == NULL)
3009 		goto out;
3010 	locations = kmalloc(sizeof(struct nfs4_fs_locations), GFP_KERNEL);
3011 	if (locations == NULL)
3012 		goto out;
3013 
3014 	status = nfs4_proc_fs_locations(client, dir, name, locations, page);
3015 	if (status != 0)
3016 		goto out;
3017 
3018 	/*
3019 	 * If the fsid didn't change, this is a migration event, not a
3020 	 * referral.  Cause us to drop into the exception handler, which
3021 	 * will kick off migration recovery.
3022 	 */
3023 	if (nfs_fsid_equal(&NFS_SERVER(dir)->fsid, &locations->fattr.fsid)) {
3024 		dprintk("%s: server did not return a different fsid for"
3025 			" a referral at %s\n", __func__, name->name);
3026 		status = -NFS4ERR_MOVED;
3027 		goto out;
3028 	}
3029 	/* Fixup attributes for the nfs_lookup() call to nfs_fhget() */
3030 	nfs_fixup_referral_attributes(&locations->fattr);
3031 
3032 	/* replace the lookup nfs_fattr with the locations nfs_fattr */
3033 	memcpy(fattr, &locations->fattr, sizeof(struct nfs_fattr));
3034 	memset(fhandle, 0, sizeof(struct nfs_fh));
3035 out:
3036 	if (page)
3037 		__free_page(page);
3038 	kfree(locations);
3039 	return status;
3040 }
3041 
3042 static int _nfs4_proc_getattr(struct nfs_server *server, struct nfs_fh *fhandle,
3043 				struct nfs_fattr *fattr, struct nfs4_label *label)
3044 {
3045 	struct nfs4_getattr_arg args = {
3046 		.fh = fhandle,
3047 		.bitmask = server->attr_bitmask,
3048 	};
3049 	struct nfs4_getattr_res res = {
3050 		.fattr = fattr,
3051 		.label = label,
3052 		.server = server,
3053 	};
3054 	struct rpc_message msg = {
3055 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_GETATTR],
3056 		.rpc_argp = &args,
3057 		.rpc_resp = &res,
3058 	};
3059 
3060 	args.bitmask = nfs4_bitmask(server, label);
3061 
3062 	nfs_fattr_init(fattr);
3063 	return nfs4_call_sync(server->client, server, &msg, &args.seq_args, &res.seq_res, 0);
3064 }
3065 
3066 static int nfs4_proc_getattr(struct nfs_server *server, struct nfs_fh *fhandle,
3067 				struct nfs_fattr *fattr, struct nfs4_label *label)
3068 {
3069 	struct nfs4_exception exception = { };
3070 	int err;
3071 	do {
3072 		err = _nfs4_proc_getattr(server, fhandle, fattr, label);
3073 		trace_nfs4_getattr(server, fhandle, fattr, err);
3074 		err = nfs4_handle_exception(server, err,
3075 				&exception);
3076 	} while (exception.retry);
3077 	return err;
3078 }
3079 
3080 /*
3081  * The file is not closed if it is opened due to the a request to change
3082  * the size of the file. The open call will not be needed once the
3083  * VFS layer lookup-intents are implemented.
3084  *
3085  * Close is called when the inode is destroyed.
3086  * If we haven't opened the file for O_WRONLY, we
3087  * need to in the size_change case to obtain a stateid.
3088  *
3089  * Got race?
3090  * Because OPEN is always done by name in nfsv4, it is
3091  * possible that we opened a different file by the same
3092  * name.  We can recognize this race condition, but we
3093  * can't do anything about it besides returning an error.
3094  *
3095  * This will be fixed with VFS changes (lookup-intent).
3096  */
3097 static int
3098 nfs4_proc_setattr(struct dentry *dentry, struct nfs_fattr *fattr,
3099 		  struct iattr *sattr)
3100 {
3101 	struct inode *inode = dentry->d_inode;
3102 	struct rpc_cred *cred = NULL;
3103 	struct nfs4_state *state = NULL;
3104 	struct nfs4_label *label = NULL;
3105 	int status;
3106 
3107 	if (pnfs_ld_layoutret_on_setattr(inode))
3108 		pnfs_commit_and_return_layout(inode);
3109 
3110 	nfs_fattr_init(fattr);
3111 
3112 	/* Deal with open(O_TRUNC) */
3113 	if (sattr->ia_valid & ATTR_OPEN)
3114 		sattr->ia_valid &= ~(ATTR_MTIME|ATTR_CTIME);
3115 
3116 	/* Optimization: if the end result is no change, don't RPC */
3117 	if ((sattr->ia_valid & ~(ATTR_FILE|ATTR_OPEN)) == 0)
3118 		return 0;
3119 
3120 	/* Search for an existing open(O_WRITE) file */
3121 	if (sattr->ia_valid & ATTR_FILE) {
3122 		struct nfs_open_context *ctx;
3123 
3124 		ctx = nfs_file_open_context(sattr->ia_file);
3125 		if (ctx) {
3126 			cred = ctx->cred;
3127 			state = ctx->state;
3128 		}
3129 	}
3130 
3131 	label = nfs4_label_alloc(NFS_SERVER(inode), GFP_KERNEL);
3132 	if (IS_ERR(label))
3133 		return PTR_ERR(label);
3134 
3135 	status = nfs4_do_setattr(inode, cred, fattr, sattr, state, NULL, label);
3136 	if (status == 0) {
3137 		nfs_setattr_update_inode(inode, sattr);
3138 		nfs_setsecurity(inode, fattr, label);
3139 	}
3140 	nfs4_label_free(label);
3141 	return status;
3142 }
3143 
3144 static int _nfs4_proc_lookup(struct rpc_clnt *clnt, struct inode *dir,
3145 		const struct qstr *name, struct nfs_fh *fhandle,
3146 		struct nfs_fattr *fattr, struct nfs4_label *label)
3147 {
3148 	struct nfs_server *server = NFS_SERVER(dir);
3149 	int		       status;
3150 	struct nfs4_lookup_arg args = {
3151 		.bitmask = server->attr_bitmask,
3152 		.dir_fh = NFS_FH(dir),
3153 		.name = name,
3154 	};
3155 	struct nfs4_lookup_res res = {
3156 		.server = server,
3157 		.fattr = fattr,
3158 		.label = label,
3159 		.fh = fhandle,
3160 	};
3161 	struct rpc_message msg = {
3162 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_LOOKUP],
3163 		.rpc_argp = &args,
3164 		.rpc_resp = &res,
3165 	};
3166 
3167 	args.bitmask = nfs4_bitmask(server, label);
3168 
3169 	nfs_fattr_init(fattr);
3170 
3171 	dprintk("NFS call  lookup %s\n", name->name);
3172 	status = nfs4_call_sync(clnt, server, &msg, &args.seq_args, &res.seq_res, 0);
3173 	dprintk("NFS reply lookup: %d\n", status);
3174 	return status;
3175 }
3176 
3177 static void nfs_fixup_secinfo_attributes(struct nfs_fattr *fattr)
3178 {
3179 	fattr->valid |= NFS_ATTR_FATTR_TYPE | NFS_ATTR_FATTR_MODE |
3180 		NFS_ATTR_FATTR_NLINK | NFS_ATTR_FATTR_MOUNTPOINT;
3181 	fattr->mode = S_IFDIR | S_IRUGO | S_IXUGO;
3182 	fattr->nlink = 2;
3183 }
3184 
3185 static int nfs4_proc_lookup_common(struct rpc_clnt **clnt, struct inode *dir,
3186 				   struct qstr *name, struct nfs_fh *fhandle,
3187 				   struct nfs_fattr *fattr, struct nfs4_label *label)
3188 {
3189 	struct nfs4_exception exception = { };
3190 	struct rpc_clnt *client = *clnt;
3191 	int err;
3192 	do {
3193 		err = _nfs4_proc_lookup(client, dir, name, fhandle, fattr, label);
3194 		trace_nfs4_lookup(dir, name, err);
3195 		switch (err) {
3196 		case -NFS4ERR_BADNAME:
3197 			err = -ENOENT;
3198 			goto out;
3199 		case -NFS4ERR_MOVED:
3200 			err = nfs4_get_referral(client, dir, name, fattr, fhandle);
3201 			goto out;
3202 		case -NFS4ERR_WRONGSEC:
3203 			err = -EPERM;
3204 			if (client != *clnt)
3205 				goto out;
3206 			client = nfs4_create_sec_client(client, dir, name);
3207 			if (IS_ERR(client))
3208 				return PTR_ERR(client);
3209 
3210 			exception.retry = 1;
3211 			break;
3212 		default:
3213 			err = nfs4_handle_exception(NFS_SERVER(dir), err, &exception);
3214 		}
3215 	} while (exception.retry);
3216 
3217 out:
3218 	if (err == 0)
3219 		*clnt = client;
3220 	else if (client != *clnt)
3221 		rpc_shutdown_client(client);
3222 
3223 	return err;
3224 }
3225 
3226 static int nfs4_proc_lookup(struct inode *dir, struct qstr *name,
3227 			    struct nfs_fh *fhandle, struct nfs_fattr *fattr,
3228 			    struct nfs4_label *label)
3229 {
3230 	int status;
3231 	struct rpc_clnt *client = NFS_CLIENT(dir);
3232 
3233 	status = nfs4_proc_lookup_common(&client, dir, name, fhandle, fattr, label);
3234 	if (client != NFS_CLIENT(dir)) {
3235 		rpc_shutdown_client(client);
3236 		nfs_fixup_secinfo_attributes(fattr);
3237 	}
3238 	return status;
3239 }
3240 
3241 struct rpc_clnt *
3242 nfs4_proc_lookup_mountpoint(struct inode *dir, struct qstr *name,
3243 			    struct nfs_fh *fhandle, struct nfs_fattr *fattr)
3244 {
3245 	struct rpc_clnt *client = NFS_CLIENT(dir);
3246 	int status;
3247 
3248 	status = nfs4_proc_lookup_common(&client, dir, name, fhandle, fattr, NULL);
3249 	if (status < 0)
3250 		return ERR_PTR(status);
3251 	return (client == NFS_CLIENT(dir)) ? rpc_clone_client(client) : client;
3252 }
3253 
3254 static int _nfs4_proc_access(struct inode *inode, struct nfs_access_entry *entry)
3255 {
3256 	struct nfs_server *server = NFS_SERVER(inode);
3257 	struct nfs4_accessargs args = {
3258 		.fh = NFS_FH(inode),
3259 		.bitmask = server->cache_consistency_bitmask,
3260 	};
3261 	struct nfs4_accessres res = {
3262 		.server = server,
3263 	};
3264 	struct rpc_message msg = {
3265 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_ACCESS],
3266 		.rpc_argp = &args,
3267 		.rpc_resp = &res,
3268 		.rpc_cred = entry->cred,
3269 	};
3270 	int mode = entry->mask;
3271 	int status = 0;
3272 
3273 	/*
3274 	 * Determine which access bits we want to ask for...
3275 	 */
3276 	if (mode & MAY_READ)
3277 		args.access |= NFS4_ACCESS_READ;
3278 	if (S_ISDIR(inode->i_mode)) {
3279 		if (mode & MAY_WRITE)
3280 			args.access |= NFS4_ACCESS_MODIFY | NFS4_ACCESS_EXTEND | NFS4_ACCESS_DELETE;
3281 		if (mode & MAY_EXEC)
3282 			args.access |= NFS4_ACCESS_LOOKUP;
3283 	} else {
3284 		if (mode & MAY_WRITE)
3285 			args.access |= NFS4_ACCESS_MODIFY | NFS4_ACCESS_EXTEND;
3286 		if (mode & MAY_EXEC)
3287 			args.access |= NFS4_ACCESS_EXECUTE;
3288 	}
3289 
3290 	res.fattr = nfs_alloc_fattr();
3291 	if (res.fattr == NULL)
3292 		return -ENOMEM;
3293 
3294 	status = nfs4_call_sync(server->client, server, &msg, &args.seq_args, &res.seq_res, 0);
3295 	if (!status) {
3296 		nfs_access_set_mask(entry, res.access);
3297 		nfs_refresh_inode(inode, res.fattr);
3298 	}
3299 	nfs_free_fattr(res.fattr);
3300 	return status;
3301 }
3302 
3303 static int nfs4_proc_access(struct inode *inode, struct nfs_access_entry *entry)
3304 {
3305 	struct nfs4_exception exception = { };
3306 	int err;
3307 	do {
3308 		err = _nfs4_proc_access(inode, entry);
3309 		trace_nfs4_access(inode, err);
3310 		err = nfs4_handle_exception(NFS_SERVER(inode), err,
3311 				&exception);
3312 	} while (exception.retry);
3313 	return err;
3314 }
3315 
3316 /*
3317  * TODO: For the time being, we don't try to get any attributes
3318  * along with any of the zero-copy operations READ, READDIR,
3319  * READLINK, WRITE.
3320  *
3321  * In the case of the first three, we want to put the GETATTR
3322  * after the read-type operation -- this is because it is hard
3323  * to predict the length of a GETATTR response in v4, and thus
3324  * align the READ data correctly.  This means that the GETATTR
3325  * may end up partially falling into the page cache, and we should
3326  * shift it into the 'tail' of the xdr_buf before processing.
3327  * To do this efficiently, we need to know the total length
3328  * of data received, which doesn't seem to be available outside
3329  * of the RPC layer.
3330  *
3331  * In the case of WRITE, we also want to put the GETATTR after
3332  * the operation -- in this case because we want to make sure
3333  * we get the post-operation mtime and size.
3334  *
3335  * Both of these changes to the XDR layer would in fact be quite
3336  * minor, but I decided to leave them for a subsequent patch.
3337  */
3338 static int _nfs4_proc_readlink(struct inode *inode, struct page *page,
3339 		unsigned int pgbase, unsigned int pglen)
3340 {
3341 	struct nfs4_readlink args = {
3342 		.fh       = NFS_FH(inode),
3343 		.pgbase	  = pgbase,
3344 		.pglen    = pglen,
3345 		.pages    = &page,
3346 	};
3347 	struct nfs4_readlink_res res;
3348 	struct rpc_message msg = {
3349 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_READLINK],
3350 		.rpc_argp = &args,
3351 		.rpc_resp = &res,
3352 	};
3353 
3354 	return nfs4_call_sync(NFS_SERVER(inode)->client, NFS_SERVER(inode), &msg, &args.seq_args, &res.seq_res, 0);
3355 }
3356 
3357 static int nfs4_proc_readlink(struct inode *inode, struct page *page,
3358 		unsigned int pgbase, unsigned int pglen)
3359 {
3360 	struct nfs4_exception exception = { };
3361 	int err;
3362 	do {
3363 		err = _nfs4_proc_readlink(inode, page, pgbase, pglen);
3364 		trace_nfs4_readlink(inode, err);
3365 		err = nfs4_handle_exception(NFS_SERVER(inode), err,
3366 				&exception);
3367 	} while (exception.retry);
3368 	return err;
3369 }
3370 
3371 /*
3372  * This is just for mknod.  open(O_CREAT) will always do ->open_context().
3373  */
3374 static int
3375 nfs4_proc_create(struct inode *dir, struct dentry *dentry, struct iattr *sattr,
3376 		 int flags)
3377 {
3378 	struct nfs4_label l, *ilabel = NULL;
3379 	struct nfs_open_context *ctx;
3380 	struct nfs4_state *state;
3381 	int opened = 0;
3382 	int status = 0;
3383 
3384 	ctx = alloc_nfs_open_context(dentry, FMODE_READ);
3385 	if (IS_ERR(ctx))
3386 		return PTR_ERR(ctx);
3387 
3388 	ilabel = nfs4_label_init_security(dir, dentry, sattr, &l);
3389 
3390 	sattr->ia_mode &= ~current_umask();
3391 	state = nfs4_do_open(dir, ctx, flags, sattr, ilabel, &opened);
3392 	if (IS_ERR(state)) {
3393 		status = PTR_ERR(state);
3394 		goto out;
3395 	}
3396 out:
3397 	nfs4_label_release_security(ilabel);
3398 	put_nfs_open_context(ctx);
3399 	return status;
3400 }
3401 
3402 static int _nfs4_proc_remove(struct inode *dir, struct qstr *name)
3403 {
3404 	struct nfs_server *server = NFS_SERVER(dir);
3405 	struct nfs_removeargs args = {
3406 		.fh = NFS_FH(dir),
3407 		.name = *name,
3408 	};
3409 	struct nfs_removeres res = {
3410 		.server = server,
3411 	};
3412 	struct rpc_message msg = {
3413 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_REMOVE],
3414 		.rpc_argp = &args,
3415 		.rpc_resp = &res,
3416 	};
3417 	int status;
3418 
3419 	status = nfs4_call_sync(server->client, server, &msg, &args.seq_args, &res.seq_res, 1);
3420 	if (status == 0)
3421 		update_changeattr(dir, &res.cinfo);
3422 	return status;
3423 }
3424 
3425 static int nfs4_proc_remove(struct inode *dir, struct qstr *name)
3426 {
3427 	struct nfs4_exception exception = { };
3428 	int err;
3429 	do {
3430 		err = _nfs4_proc_remove(dir, name);
3431 		trace_nfs4_remove(dir, name, err);
3432 		err = nfs4_handle_exception(NFS_SERVER(dir), err,
3433 				&exception);
3434 	} while (exception.retry);
3435 	return err;
3436 }
3437 
3438 static void nfs4_proc_unlink_setup(struct rpc_message *msg, struct inode *dir)
3439 {
3440 	struct nfs_server *server = NFS_SERVER(dir);
3441 	struct nfs_removeargs *args = msg->rpc_argp;
3442 	struct nfs_removeres *res = msg->rpc_resp;
3443 
3444 	res->server = server;
3445 	msg->rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_REMOVE];
3446 	nfs4_init_sequence(&args->seq_args, &res->seq_res, 1);
3447 
3448 	nfs_fattr_init(res->dir_attr);
3449 }
3450 
3451 static void nfs4_proc_unlink_rpc_prepare(struct rpc_task *task, struct nfs_unlinkdata *data)
3452 {
3453 	nfs4_setup_sequence(NFS_SERVER(data->dir),
3454 			&data->args.seq_args,
3455 			&data->res.seq_res,
3456 			task);
3457 }
3458 
3459 static int nfs4_proc_unlink_done(struct rpc_task *task, struct inode *dir)
3460 {
3461 	struct nfs_unlinkdata *data = task->tk_calldata;
3462 	struct nfs_removeres *res = &data->res;
3463 
3464 	if (!nfs4_sequence_done(task, &res->seq_res))
3465 		return 0;
3466 	if (nfs4_async_handle_error(task, res->server, NULL) == -EAGAIN)
3467 		return 0;
3468 	update_changeattr(dir, &res->cinfo);
3469 	return 1;
3470 }
3471 
3472 static void nfs4_proc_rename_setup(struct rpc_message *msg, struct inode *dir)
3473 {
3474 	struct nfs_server *server = NFS_SERVER(dir);
3475 	struct nfs_renameargs *arg = msg->rpc_argp;
3476 	struct nfs_renameres *res = msg->rpc_resp;
3477 
3478 	msg->rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_RENAME];
3479 	res->server = server;
3480 	nfs4_init_sequence(&arg->seq_args, &res->seq_res, 1);
3481 }
3482 
3483 static void nfs4_proc_rename_rpc_prepare(struct rpc_task *task, struct nfs_renamedata *data)
3484 {
3485 	nfs4_setup_sequence(NFS_SERVER(data->old_dir),
3486 			&data->args.seq_args,
3487 			&data->res.seq_res,
3488 			task);
3489 }
3490 
3491 static int nfs4_proc_rename_done(struct rpc_task *task, struct inode *old_dir,
3492 				 struct inode *new_dir)
3493 {
3494 	struct nfs_renamedata *data = task->tk_calldata;
3495 	struct nfs_renameres *res = &data->res;
3496 
3497 	if (!nfs4_sequence_done(task, &res->seq_res))
3498 		return 0;
3499 	if (nfs4_async_handle_error(task, res->server, NULL) == -EAGAIN)
3500 		return 0;
3501 
3502 	update_changeattr(old_dir, &res->old_cinfo);
3503 	update_changeattr(new_dir, &res->new_cinfo);
3504 	return 1;
3505 }
3506 
3507 static int _nfs4_proc_rename(struct inode *old_dir, struct qstr *old_name,
3508 		struct inode *new_dir, struct qstr *new_name)
3509 {
3510 	struct nfs_server *server = NFS_SERVER(old_dir);
3511 	struct nfs_renameargs arg = {
3512 		.old_dir = NFS_FH(old_dir),
3513 		.new_dir = NFS_FH(new_dir),
3514 		.old_name = old_name,
3515 		.new_name = new_name,
3516 	};
3517 	struct nfs_renameres res = {
3518 		.server = server,
3519 	};
3520 	struct rpc_message msg = {
3521 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_RENAME],
3522 		.rpc_argp = &arg,
3523 		.rpc_resp = &res,
3524 	};
3525 	int status = -ENOMEM;
3526 
3527 	status = nfs4_call_sync(server->client, server, &msg, &arg.seq_args, &res.seq_res, 1);
3528 	if (!status) {
3529 		update_changeattr(old_dir, &res.old_cinfo);
3530 		update_changeattr(new_dir, &res.new_cinfo);
3531 	}
3532 	return status;
3533 }
3534 
3535 static int nfs4_proc_rename(struct inode *old_dir, struct qstr *old_name,
3536 		struct inode *new_dir, struct qstr *new_name)
3537 {
3538 	struct nfs4_exception exception = { };
3539 	int err;
3540 	do {
3541 		err = _nfs4_proc_rename(old_dir, old_name,
3542 					new_dir, new_name);
3543 		trace_nfs4_rename(old_dir, old_name, new_dir, new_name, err);
3544 		err = nfs4_handle_exception(NFS_SERVER(old_dir), err,
3545 				&exception);
3546 	} while (exception.retry);
3547 	return err;
3548 }
3549 
3550 static int _nfs4_proc_link(struct inode *inode, struct inode *dir, struct qstr *name)
3551 {
3552 	struct nfs_server *server = NFS_SERVER(inode);
3553 	struct nfs4_link_arg arg = {
3554 		.fh     = NFS_FH(inode),
3555 		.dir_fh = NFS_FH(dir),
3556 		.name   = name,
3557 		.bitmask = server->attr_bitmask,
3558 	};
3559 	struct nfs4_link_res res = {
3560 		.server = server,
3561 		.label = NULL,
3562 	};
3563 	struct rpc_message msg = {
3564 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_LINK],
3565 		.rpc_argp = &arg,
3566 		.rpc_resp = &res,
3567 	};
3568 	int status = -ENOMEM;
3569 
3570 	res.fattr = nfs_alloc_fattr();
3571 	if (res.fattr == NULL)
3572 		goto out;
3573 
3574 	res.label = nfs4_label_alloc(server, GFP_KERNEL);
3575 	if (IS_ERR(res.label)) {
3576 		status = PTR_ERR(res.label);
3577 		goto out;
3578 	}
3579 	arg.bitmask = nfs4_bitmask(server, res.label);
3580 
3581 	status = nfs4_call_sync(server->client, server, &msg, &arg.seq_args, &res.seq_res, 1);
3582 	if (!status) {
3583 		update_changeattr(dir, &res.cinfo);
3584 		status = nfs_post_op_update_inode(inode, res.fattr);
3585 		if (!status)
3586 			nfs_setsecurity(inode, res.fattr, res.label);
3587 	}
3588 
3589 
3590 	nfs4_label_free(res.label);
3591 
3592 out:
3593 	nfs_free_fattr(res.fattr);
3594 	return status;
3595 }
3596 
3597 static int nfs4_proc_link(struct inode *inode, struct inode *dir, struct qstr *name)
3598 {
3599 	struct nfs4_exception exception = { };
3600 	int err;
3601 	do {
3602 		err = nfs4_handle_exception(NFS_SERVER(inode),
3603 				_nfs4_proc_link(inode, dir, name),
3604 				&exception);
3605 	} while (exception.retry);
3606 	return err;
3607 }
3608 
3609 struct nfs4_createdata {
3610 	struct rpc_message msg;
3611 	struct nfs4_create_arg arg;
3612 	struct nfs4_create_res res;
3613 	struct nfs_fh fh;
3614 	struct nfs_fattr fattr;
3615 	struct nfs4_label *label;
3616 };
3617 
3618 static struct nfs4_createdata *nfs4_alloc_createdata(struct inode *dir,
3619 		struct qstr *name, struct iattr *sattr, u32 ftype)
3620 {
3621 	struct nfs4_createdata *data;
3622 
3623 	data = kzalloc(sizeof(*data), GFP_KERNEL);
3624 	if (data != NULL) {
3625 		struct nfs_server *server = NFS_SERVER(dir);
3626 
3627 		data->label = nfs4_label_alloc(server, GFP_KERNEL);
3628 		if (IS_ERR(data->label))
3629 			goto out_free;
3630 
3631 		data->msg.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_CREATE];
3632 		data->msg.rpc_argp = &data->arg;
3633 		data->msg.rpc_resp = &data->res;
3634 		data->arg.dir_fh = NFS_FH(dir);
3635 		data->arg.server = server;
3636 		data->arg.name = name;
3637 		data->arg.attrs = sattr;
3638 		data->arg.ftype = ftype;
3639 		data->arg.bitmask = nfs4_bitmask(server, data->label);
3640 		data->res.server = server;
3641 		data->res.fh = &data->fh;
3642 		data->res.fattr = &data->fattr;
3643 		data->res.label = data->label;
3644 		nfs_fattr_init(data->res.fattr);
3645 	}
3646 	return data;
3647 out_free:
3648 	kfree(data);
3649 	return NULL;
3650 }
3651 
3652 static int nfs4_do_create(struct inode *dir, struct dentry *dentry, struct nfs4_createdata *data)
3653 {
3654 	int status = nfs4_call_sync(NFS_SERVER(dir)->client, NFS_SERVER(dir), &data->msg,
3655 				    &data->arg.seq_args, &data->res.seq_res, 1);
3656 	if (status == 0) {
3657 		update_changeattr(dir, &data->res.dir_cinfo);
3658 		status = nfs_instantiate(dentry, data->res.fh, data->res.fattr, data->res.label);
3659 	}
3660 	return status;
3661 }
3662 
3663 static void nfs4_free_createdata(struct nfs4_createdata *data)
3664 {
3665 	nfs4_label_free(data->label);
3666 	kfree(data);
3667 }
3668 
3669 static int _nfs4_proc_symlink(struct inode *dir, struct dentry *dentry,
3670 		struct page *page, unsigned int len, struct iattr *sattr,
3671 		struct nfs4_label *label)
3672 {
3673 	struct nfs4_createdata *data;
3674 	int status = -ENAMETOOLONG;
3675 
3676 	if (len > NFS4_MAXPATHLEN)
3677 		goto out;
3678 
3679 	status = -ENOMEM;
3680 	data = nfs4_alloc_createdata(dir, &dentry->d_name, sattr, NF4LNK);
3681 	if (data == NULL)
3682 		goto out;
3683 
3684 	data->msg.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_SYMLINK];
3685 	data->arg.u.symlink.pages = &page;
3686 	data->arg.u.symlink.len = len;
3687 	data->arg.label = label;
3688 
3689 	status = nfs4_do_create(dir, dentry, data);
3690 
3691 	nfs4_free_createdata(data);
3692 out:
3693 	return status;
3694 }
3695 
3696 static int nfs4_proc_symlink(struct inode *dir, struct dentry *dentry,
3697 		struct page *page, unsigned int len, struct iattr *sattr)
3698 {
3699 	struct nfs4_exception exception = { };
3700 	struct nfs4_label l, *label = NULL;
3701 	int err;
3702 
3703 	label = nfs4_label_init_security(dir, dentry, sattr, &l);
3704 
3705 	do {
3706 		err = _nfs4_proc_symlink(dir, dentry, page, len, sattr, label);
3707 		trace_nfs4_symlink(dir, &dentry->d_name, err);
3708 		err = nfs4_handle_exception(NFS_SERVER(dir), err,
3709 				&exception);
3710 	} while (exception.retry);
3711 
3712 	nfs4_label_release_security(label);
3713 	return err;
3714 }
3715 
3716 static int _nfs4_proc_mkdir(struct inode *dir, struct dentry *dentry,
3717 		struct iattr *sattr, struct nfs4_label *label)
3718 {
3719 	struct nfs4_createdata *data;
3720 	int status = -ENOMEM;
3721 
3722 	data = nfs4_alloc_createdata(dir, &dentry->d_name, sattr, NF4DIR);
3723 	if (data == NULL)
3724 		goto out;
3725 
3726 	data->arg.label = label;
3727 	status = nfs4_do_create(dir, dentry, data);
3728 
3729 	nfs4_free_createdata(data);
3730 out:
3731 	return status;
3732 }
3733 
3734 static int nfs4_proc_mkdir(struct inode *dir, struct dentry *dentry,
3735 		struct iattr *sattr)
3736 {
3737 	struct nfs4_exception exception = { };
3738 	struct nfs4_label l, *label = NULL;
3739 	int err;
3740 
3741 	label = nfs4_label_init_security(dir, dentry, sattr, &l);
3742 
3743 	sattr->ia_mode &= ~current_umask();
3744 	do {
3745 		err = _nfs4_proc_mkdir(dir, dentry, sattr, label);
3746 		trace_nfs4_mkdir(dir, &dentry->d_name, err);
3747 		err = nfs4_handle_exception(NFS_SERVER(dir), err,
3748 				&exception);
3749 	} while (exception.retry);
3750 	nfs4_label_release_security(label);
3751 
3752 	return err;
3753 }
3754 
3755 static int _nfs4_proc_readdir(struct dentry *dentry, struct rpc_cred *cred,
3756 		u64 cookie, struct page **pages, unsigned int count, int plus)
3757 {
3758 	struct inode		*dir = dentry->d_inode;
3759 	struct nfs4_readdir_arg args = {
3760 		.fh = NFS_FH(dir),
3761 		.pages = pages,
3762 		.pgbase = 0,
3763 		.count = count,
3764 		.bitmask = NFS_SERVER(dentry->d_inode)->attr_bitmask,
3765 		.plus = plus,
3766 	};
3767 	struct nfs4_readdir_res res;
3768 	struct rpc_message msg = {
3769 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_READDIR],
3770 		.rpc_argp = &args,
3771 		.rpc_resp = &res,
3772 		.rpc_cred = cred,
3773 	};
3774 	int			status;
3775 
3776 	dprintk("%s: dentry = %pd2, cookie = %Lu\n", __func__,
3777 			dentry,
3778 			(unsigned long long)cookie);
3779 	nfs4_setup_readdir(cookie, NFS_I(dir)->cookieverf, dentry, &args);
3780 	res.pgbase = args.pgbase;
3781 	status = nfs4_call_sync(NFS_SERVER(dir)->client, NFS_SERVER(dir), &msg, &args.seq_args, &res.seq_res, 0);
3782 	if (status >= 0) {
3783 		memcpy(NFS_I(dir)->cookieverf, res.verifier.data, NFS4_VERIFIER_SIZE);
3784 		status += args.pgbase;
3785 	}
3786 
3787 	nfs_invalidate_atime(dir);
3788 
3789 	dprintk("%s: returns %d\n", __func__, status);
3790 	return status;
3791 }
3792 
3793 static int nfs4_proc_readdir(struct dentry *dentry, struct rpc_cred *cred,
3794 		u64 cookie, struct page **pages, unsigned int count, int plus)
3795 {
3796 	struct nfs4_exception exception = { };
3797 	int err;
3798 	do {
3799 		err = _nfs4_proc_readdir(dentry, cred, cookie,
3800 				pages, count, plus);
3801 		trace_nfs4_readdir(dentry->d_inode, err);
3802 		err = nfs4_handle_exception(NFS_SERVER(dentry->d_inode), err,
3803 				&exception);
3804 	} while (exception.retry);
3805 	return err;
3806 }
3807 
3808 static int _nfs4_proc_mknod(struct inode *dir, struct dentry *dentry,
3809 		struct iattr *sattr, struct nfs4_label *label, dev_t rdev)
3810 {
3811 	struct nfs4_createdata *data;
3812 	int mode = sattr->ia_mode;
3813 	int status = -ENOMEM;
3814 
3815 	data = nfs4_alloc_createdata(dir, &dentry->d_name, sattr, NF4SOCK);
3816 	if (data == NULL)
3817 		goto out;
3818 
3819 	if (S_ISFIFO(mode))
3820 		data->arg.ftype = NF4FIFO;
3821 	else if (S_ISBLK(mode)) {
3822 		data->arg.ftype = NF4BLK;
3823 		data->arg.u.device.specdata1 = MAJOR(rdev);
3824 		data->arg.u.device.specdata2 = MINOR(rdev);
3825 	}
3826 	else if (S_ISCHR(mode)) {
3827 		data->arg.ftype = NF4CHR;
3828 		data->arg.u.device.specdata1 = MAJOR(rdev);
3829 		data->arg.u.device.specdata2 = MINOR(rdev);
3830 	} else if (!S_ISSOCK(mode)) {
3831 		status = -EINVAL;
3832 		goto out_free;
3833 	}
3834 
3835 	data->arg.label = label;
3836 	status = nfs4_do_create(dir, dentry, data);
3837 out_free:
3838 	nfs4_free_createdata(data);
3839 out:
3840 	return status;
3841 }
3842 
3843 static int nfs4_proc_mknod(struct inode *dir, struct dentry *dentry,
3844 		struct iattr *sattr, dev_t rdev)
3845 {
3846 	struct nfs4_exception exception = { };
3847 	struct nfs4_label l, *label = NULL;
3848 	int err;
3849 
3850 	label = nfs4_label_init_security(dir, dentry, sattr, &l);
3851 
3852 	sattr->ia_mode &= ~current_umask();
3853 	do {
3854 		err = _nfs4_proc_mknod(dir, dentry, sattr, label, rdev);
3855 		trace_nfs4_mknod(dir, &dentry->d_name, err);
3856 		err = nfs4_handle_exception(NFS_SERVER(dir), err,
3857 				&exception);
3858 	} while (exception.retry);
3859 
3860 	nfs4_label_release_security(label);
3861 
3862 	return err;
3863 }
3864 
3865 static int _nfs4_proc_statfs(struct nfs_server *server, struct nfs_fh *fhandle,
3866 		 struct nfs_fsstat *fsstat)
3867 {
3868 	struct nfs4_statfs_arg args = {
3869 		.fh = fhandle,
3870 		.bitmask = server->attr_bitmask,
3871 	};
3872 	struct nfs4_statfs_res res = {
3873 		.fsstat = fsstat,
3874 	};
3875 	struct rpc_message msg = {
3876 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_STATFS],
3877 		.rpc_argp = &args,
3878 		.rpc_resp = &res,
3879 	};
3880 
3881 	nfs_fattr_init(fsstat->fattr);
3882 	return  nfs4_call_sync(server->client, server, &msg, &args.seq_args, &res.seq_res, 0);
3883 }
3884 
3885 static int nfs4_proc_statfs(struct nfs_server *server, struct nfs_fh *fhandle, struct nfs_fsstat *fsstat)
3886 {
3887 	struct nfs4_exception exception = { };
3888 	int err;
3889 	do {
3890 		err = nfs4_handle_exception(server,
3891 				_nfs4_proc_statfs(server, fhandle, fsstat),
3892 				&exception);
3893 	} while (exception.retry);
3894 	return err;
3895 }
3896 
3897 static int _nfs4_do_fsinfo(struct nfs_server *server, struct nfs_fh *fhandle,
3898 		struct nfs_fsinfo *fsinfo)
3899 {
3900 	struct nfs4_fsinfo_arg args = {
3901 		.fh = fhandle,
3902 		.bitmask = server->attr_bitmask,
3903 	};
3904 	struct nfs4_fsinfo_res res = {
3905 		.fsinfo = fsinfo,
3906 	};
3907 	struct rpc_message msg = {
3908 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_FSINFO],
3909 		.rpc_argp = &args,
3910 		.rpc_resp = &res,
3911 	};
3912 
3913 	return nfs4_call_sync(server->client, server, &msg, &args.seq_args, &res.seq_res, 0);
3914 }
3915 
3916 static int nfs4_do_fsinfo(struct nfs_server *server, struct nfs_fh *fhandle, struct nfs_fsinfo *fsinfo)
3917 {
3918 	struct nfs4_exception exception = { };
3919 	unsigned long now = jiffies;
3920 	int err;
3921 
3922 	do {
3923 		err = _nfs4_do_fsinfo(server, fhandle, fsinfo);
3924 		trace_nfs4_fsinfo(server, fhandle, fsinfo->fattr, err);
3925 		if (err == 0) {
3926 			struct nfs_client *clp = server->nfs_client;
3927 
3928 			spin_lock(&clp->cl_lock);
3929 			clp->cl_lease_time = fsinfo->lease_time * HZ;
3930 			clp->cl_last_renewal = now;
3931 			spin_unlock(&clp->cl_lock);
3932 			break;
3933 		}
3934 		err = nfs4_handle_exception(server, err, &exception);
3935 	} while (exception.retry);
3936 	return err;
3937 }
3938 
3939 static int nfs4_proc_fsinfo(struct nfs_server *server, struct nfs_fh *fhandle, struct nfs_fsinfo *fsinfo)
3940 {
3941 	int error;
3942 
3943 	nfs_fattr_init(fsinfo->fattr);
3944 	error = nfs4_do_fsinfo(server, fhandle, fsinfo);
3945 	if (error == 0) {
3946 		/* block layout checks this! */
3947 		server->pnfs_blksize = fsinfo->blksize;
3948 		set_pnfs_layoutdriver(server, fhandle, fsinfo->layouttype);
3949 	}
3950 
3951 	return error;
3952 }
3953 
3954 static int _nfs4_proc_pathconf(struct nfs_server *server, struct nfs_fh *fhandle,
3955 		struct nfs_pathconf *pathconf)
3956 {
3957 	struct nfs4_pathconf_arg args = {
3958 		.fh = fhandle,
3959 		.bitmask = server->attr_bitmask,
3960 	};
3961 	struct nfs4_pathconf_res res = {
3962 		.pathconf = pathconf,
3963 	};
3964 	struct rpc_message msg = {
3965 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_PATHCONF],
3966 		.rpc_argp = &args,
3967 		.rpc_resp = &res,
3968 	};
3969 
3970 	/* None of the pathconf attributes are mandatory to implement */
3971 	if ((args.bitmask[0] & nfs4_pathconf_bitmap[0]) == 0) {
3972 		memset(pathconf, 0, sizeof(*pathconf));
3973 		return 0;
3974 	}
3975 
3976 	nfs_fattr_init(pathconf->fattr);
3977 	return nfs4_call_sync(server->client, server, &msg, &args.seq_args, &res.seq_res, 0);
3978 }
3979 
3980 static int nfs4_proc_pathconf(struct nfs_server *server, struct nfs_fh *fhandle,
3981 		struct nfs_pathconf *pathconf)
3982 {
3983 	struct nfs4_exception exception = { };
3984 	int err;
3985 
3986 	do {
3987 		err = nfs4_handle_exception(server,
3988 				_nfs4_proc_pathconf(server, fhandle, pathconf),
3989 				&exception);
3990 	} while (exception.retry);
3991 	return err;
3992 }
3993 
3994 int nfs4_set_rw_stateid(nfs4_stateid *stateid,
3995 		const struct nfs_open_context *ctx,
3996 		const struct nfs_lock_context *l_ctx,
3997 		fmode_t fmode)
3998 {
3999 	const struct nfs_lockowner *lockowner = NULL;
4000 
4001 	if (l_ctx != NULL)
4002 		lockowner = &l_ctx->lockowner;
4003 	return nfs4_select_rw_stateid(stateid, ctx->state, fmode, lockowner);
4004 }
4005 EXPORT_SYMBOL_GPL(nfs4_set_rw_stateid);
4006 
4007 static bool nfs4_stateid_is_current(nfs4_stateid *stateid,
4008 		const struct nfs_open_context *ctx,
4009 		const struct nfs_lock_context *l_ctx,
4010 		fmode_t fmode)
4011 {
4012 	nfs4_stateid current_stateid;
4013 
4014 	if (nfs4_set_rw_stateid(&current_stateid, ctx, l_ctx, fmode))
4015 		return false;
4016 	return nfs4_stateid_match(stateid, &current_stateid);
4017 }
4018 
4019 static bool nfs4_error_stateid_expired(int err)
4020 {
4021 	switch (err) {
4022 	case -NFS4ERR_DELEG_REVOKED:
4023 	case -NFS4ERR_ADMIN_REVOKED:
4024 	case -NFS4ERR_BAD_STATEID:
4025 	case -NFS4ERR_STALE_STATEID:
4026 	case -NFS4ERR_OLD_STATEID:
4027 	case -NFS4ERR_OPENMODE:
4028 	case -NFS4ERR_EXPIRED:
4029 		return true;
4030 	}
4031 	return false;
4032 }
4033 
4034 void __nfs4_read_done_cb(struct nfs_read_data *data)
4035 {
4036 	nfs_invalidate_atime(data->header->inode);
4037 }
4038 
4039 static int nfs4_read_done_cb(struct rpc_task *task, struct nfs_read_data *data)
4040 {
4041 	struct nfs_server *server = NFS_SERVER(data->header->inode);
4042 
4043 	trace_nfs4_read(data, task->tk_status);
4044 	if (nfs4_async_handle_error(task, server, data->args.context->state) == -EAGAIN) {
4045 		rpc_restart_call_prepare(task);
4046 		return -EAGAIN;
4047 	}
4048 
4049 	__nfs4_read_done_cb(data);
4050 	if (task->tk_status > 0)
4051 		renew_lease(server, data->timestamp);
4052 	return 0;
4053 }
4054 
4055 static bool nfs4_read_stateid_changed(struct rpc_task *task,
4056 		struct nfs_readargs *args)
4057 {
4058 
4059 	if (!nfs4_error_stateid_expired(task->tk_status) ||
4060 		nfs4_stateid_is_current(&args->stateid,
4061 				args->context,
4062 				args->lock_context,
4063 				FMODE_READ))
4064 		return false;
4065 	rpc_restart_call_prepare(task);
4066 	return true;
4067 }
4068 
4069 static int nfs4_read_done(struct rpc_task *task, struct nfs_read_data *data)
4070 {
4071 
4072 	dprintk("--> %s\n", __func__);
4073 
4074 	if (!nfs4_sequence_done(task, &data->res.seq_res))
4075 		return -EAGAIN;
4076 	if (nfs4_read_stateid_changed(task, &data->args))
4077 		return -EAGAIN;
4078 	return data->read_done_cb ? data->read_done_cb(task, data) :
4079 				    nfs4_read_done_cb(task, data);
4080 }
4081 
4082 static void nfs4_proc_read_setup(struct nfs_read_data *data, struct rpc_message *msg)
4083 {
4084 	data->timestamp   = jiffies;
4085 	data->read_done_cb = nfs4_read_done_cb;
4086 	msg->rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_READ];
4087 	nfs4_init_sequence(&data->args.seq_args, &data->res.seq_res, 0);
4088 }
4089 
4090 static int nfs4_proc_read_rpc_prepare(struct rpc_task *task, struct nfs_read_data *data)
4091 {
4092 	if (nfs4_setup_sequence(NFS_SERVER(data->header->inode),
4093 			&data->args.seq_args,
4094 			&data->res.seq_res,
4095 			task))
4096 		return 0;
4097 	if (nfs4_set_rw_stateid(&data->args.stateid, data->args.context,
4098 				data->args.lock_context, FMODE_READ) == -EIO)
4099 		return -EIO;
4100 	if (unlikely(test_bit(NFS_CONTEXT_BAD, &data->args.context->flags)))
4101 		return -EIO;
4102 	return 0;
4103 }
4104 
4105 static int nfs4_write_done_cb(struct rpc_task *task, struct nfs_write_data *data)
4106 {
4107 	struct inode *inode = data->header->inode;
4108 
4109 	trace_nfs4_write(data, task->tk_status);
4110 	if (nfs4_async_handle_error(task, NFS_SERVER(inode), data->args.context->state) == -EAGAIN) {
4111 		rpc_restart_call_prepare(task);
4112 		return -EAGAIN;
4113 	}
4114 	if (task->tk_status >= 0) {
4115 		renew_lease(NFS_SERVER(inode), data->timestamp);
4116 		nfs_post_op_update_inode_force_wcc(inode, &data->fattr);
4117 	}
4118 	return 0;
4119 }
4120 
4121 static bool nfs4_write_stateid_changed(struct rpc_task *task,
4122 		struct nfs_writeargs *args)
4123 {
4124 
4125 	if (!nfs4_error_stateid_expired(task->tk_status) ||
4126 		nfs4_stateid_is_current(&args->stateid,
4127 				args->context,
4128 				args->lock_context,
4129 				FMODE_WRITE))
4130 		return false;
4131 	rpc_restart_call_prepare(task);
4132 	return true;
4133 }
4134 
4135 static int nfs4_write_done(struct rpc_task *task, struct nfs_write_data *data)
4136 {
4137 	if (!nfs4_sequence_done(task, &data->res.seq_res))
4138 		return -EAGAIN;
4139 	if (nfs4_write_stateid_changed(task, &data->args))
4140 		return -EAGAIN;
4141 	return data->write_done_cb ? data->write_done_cb(task, data) :
4142 		nfs4_write_done_cb(task, data);
4143 }
4144 
4145 static
4146 bool nfs4_write_need_cache_consistency_data(const struct nfs_write_data *data)
4147 {
4148 	const struct nfs_pgio_header *hdr = data->header;
4149 
4150 	/* Don't request attributes for pNFS or O_DIRECT writes */
4151 	if (data->ds_clp != NULL || hdr->dreq != NULL)
4152 		return false;
4153 	/* Otherwise, request attributes if and only if we don't hold
4154 	 * a delegation
4155 	 */
4156 	return nfs4_have_delegation(hdr->inode, FMODE_READ) == 0;
4157 }
4158 
4159 static void nfs4_proc_write_setup(struct nfs_write_data *data, struct rpc_message *msg)
4160 {
4161 	struct nfs_server *server = NFS_SERVER(data->header->inode);
4162 
4163 	if (!nfs4_write_need_cache_consistency_data(data)) {
4164 		data->args.bitmask = NULL;
4165 		data->res.fattr = NULL;
4166 	} else
4167 		data->args.bitmask = server->cache_consistency_bitmask;
4168 
4169 	if (!data->write_done_cb)
4170 		data->write_done_cb = nfs4_write_done_cb;
4171 	data->res.server = server;
4172 	data->timestamp   = jiffies;
4173 
4174 	msg->rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_WRITE];
4175 	nfs4_init_sequence(&data->args.seq_args, &data->res.seq_res, 1);
4176 }
4177 
4178 static int nfs4_proc_write_rpc_prepare(struct rpc_task *task, struct nfs_write_data *data)
4179 {
4180 	if (nfs4_setup_sequence(NFS_SERVER(data->header->inode),
4181 			&data->args.seq_args,
4182 			&data->res.seq_res,
4183 			task))
4184 		return 0;
4185 	if (nfs4_set_rw_stateid(&data->args.stateid, data->args.context,
4186 				data->args.lock_context, FMODE_WRITE) == -EIO)
4187 		return -EIO;
4188 	if (unlikely(test_bit(NFS_CONTEXT_BAD, &data->args.context->flags)))
4189 		return -EIO;
4190 	return 0;
4191 }
4192 
4193 static void nfs4_proc_commit_rpc_prepare(struct rpc_task *task, struct nfs_commit_data *data)
4194 {
4195 	nfs4_setup_sequence(NFS_SERVER(data->inode),
4196 			&data->args.seq_args,
4197 			&data->res.seq_res,
4198 			task);
4199 }
4200 
4201 static int nfs4_commit_done_cb(struct rpc_task *task, struct nfs_commit_data *data)
4202 {
4203 	struct inode *inode = data->inode;
4204 
4205 	trace_nfs4_commit(data, task->tk_status);
4206 	if (nfs4_async_handle_error(task, NFS_SERVER(inode), NULL) == -EAGAIN) {
4207 		rpc_restart_call_prepare(task);
4208 		return -EAGAIN;
4209 	}
4210 	return 0;
4211 }
4212 
4213 static int nfs4_commit_done(struct rpc_task *task, struct nfs_commit_data *data)
4214 {
4215 	if (!nfs4_sequence_done(task, &data->res.seq_res))
4216 		return -EAGAIN;
4217 	return data->commit_done_cb(task, data);
4218 }
4219 
4220 static void nfs4_proc_commit_setup(struct nfs_commit_data *data, struct rpc_message *msg)
4221 {
4222 	struct nfs_server *server = NFS_SERVER(data->inode);
4223 
4224 	if (data->commit_done_cb == NULL)
4225 		data->commit_done_cb = nfs4_commit_done_cb;
4226 	data->res.server = server;
4227 	msg->rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_COMMIT];
4228 	nfs4_init_sequence(&data->args.seq_args, &data->res.seq_res, 1);
4229 }
4230 
4231 struct nfs4_renewdata {
4232 	struct nfs_client	*client;
4233 	unsigned long		timestamp;
4234 };
4235 
4236 /*
4237  * nfs4_proc_async_renew(): This is not one of the nfs_rpc_ops; it is a special
4238  * standalone procedure for queueing an asynchronous RENEW.
4239  */
4240 static void nfs4_renew_release(void *calldata)
4241 {
4242 	struct nfs4_renewdata *data = calldata;
4243 	struct nfs_client *clp = data->client;
4244 
4245 	if (atomic_read(&clp->cl_count) > 1)
4246 		nfs4_schedule_state_renewal(clp);
4247 	nfs_put_client(clp);
4248 	kfree(data);
4249 }
4250 
4251 static void nfs4_renew_done(struct rpc_task *task, void *calldata)
4252 {
4253 	struct nfs4_renewdata *data = calldata;
4254 	struct nfs_client *clp = data->client;
4255 	unsigned long timestamp = data->timestamp;
4256 
4257 	trace_nfs4_renew_async(clp, task->tk_status);
4258 	switch (task->tk_status) {
4259 	case 0:
4260 		break;
4261 	case -NFS4ERR_LEASE_MOVED:
4262 		nfs4_schedule_lease_moved_recovery(clp);
4263 		break;
4264 	default:
4265 		/* Unless we're shutting down, schedule state recovery! */
4266 		if (test_bit(NFS_CS_RENEWD, &clp->cl_res_state) == 0)
4267 			return;
4268 		if (task->tk_status != NFS4ERR_CB_PATH_DOWN) {
4269 			nfs4_schedule_lease_recovery(clp);
4270 			return;
4271 		}
4272 		nfs4_schedule_path_down_recovery(clp);
4273 	}
4274 	do_renew_lease(clp, timestamp);
4275 }
4276 
4277 static const struct rpc_call_ops nfs4_renew_ops = {
4278 	.rpc_call_done = nfs4_renew_done,
4279 	.rpc_release = nfs4_renew_release,
4280 };
4281 
4282 static int nfs4_proc_async_renew(struct nfs_client *clp, struct rpc_cred *cred, unsigned renew_flags)
4283 {
4284 	struct rpc_message msg = {
4285 		.rpc_proc	= &nfs4_procedures[NFSPROC4_CLNT_RENEW],
4286 		.rpc_argp	= clp,
4287 		.rpc_cred	= cred,
4288 	};
4289 	struct nfs4_renewdata *data;
4290 
4291 	if (renew_flags == 0)
4292 		return 0;
4293 	if (!atomic_inc_not_zero(&clp->cl_count))
4294 		return -EIO;
4295 	data = kmalloc(sizeof(*data), GFP_NOFS);
4296 	if (data == NULL)
4297 		return -ENOMEM;
4298 	data->client = clp;
4299 	data->timestamp = jiffies;
4300 	return rpc_call_async(clp->cl_rpcclient, &msg, RPC_TASK_TIMEOUT,
4301 			&nfs4_renew_ops, data);
4302 }
4303 
4304 static int nfs4_proc_renew(struct nfs_client *clp, struct rpc_cred *cred)
4305 {
4306 	struct rpc_message msg = {
4307 		.rpc_proc	= &nfs4_procedures[NFSPROC4_CLNT_RENEW],
4308 		.rpc_argp	= clp,
4309 		.rpc_cred	= cred,
4310 	};
4311 	unsigned long now = jiffies;
4312 	int status;
4313 
4314 	status = rpc_call_sync(clp->cl_rpcclient, &msg, RPC_TASK_TIMEOUT);
4315 	if (status < 0)
4316 		return status;
4317 	do_renew_lease(clp, now);
4318 	return 0;
4319 }
4320 
4321 static inline int nfs4_server_supports_acls(struct nfs_server *server)
4322 {
4323 	return server->caps & NFS_CAP_ACLS;
4324 }
4325 
4326 /* Assuming that XATTR_SIZE_MAX is a multiple of PAGE_SIZE, and that
4327  * it's OK to put sizeof(void) * (XATTR_SIZE_MAX/PAGE_SIZE) bytes on
4328  * the stack.
4329  */
4330 #define NFS4ACL_MAXPAGES DIV_ROUND_UP(XATTR_SIZE_MAX, PAGE_SIZE)
4331 
4332 static int buf_to_pages_noslab(const void *buf, size_t buflen,
4333 		struct page **pages, unsigned int *pgbase)
4334 {
4335 	struct page *newpage, **spages;
4336 	int rc = 0;
4337 	size_t len;
4338 	spages = pages;
4339 
4340 	do {
4341 		len = min_t(size_t, PAGE_SIZE, buflen);
4342 		newpage = alloc_page(GFP_KERNEL);
4343 
4344 		if (newpage == NULL)
4345 			goto unwind;
4346 		memcpy(page_address(newpage), buf, len);
4347                 buf += len;
4348                 buflen -= len;
4349 		*pages++ = newpage;
4350 		rc++;
4351 	} while (buflen != 0);
4352 
4353 	return rc;
4354 
4355 unwind:
4356 	for(; rc > 0; rc--)
4357 		__free_page(spages[rc-1]);
4358 	return -ENOMEM;
4359 }
4360 
4361 struct nfs4_cached_acl {
4362 	int cached;
4363 	size_t len;
4364 	char data[0];
4365 };
4366 
4367 static void nfs4_set_cached_acl(struct inode *inode, struct nfs4_cached_acl *acl)
4368 {
4369 	struct nfs_inode *nfsi = NFS_I(inode);
4370 
4371 	spin_lock(&inode->i_lock);
4372 	kfree(nfsi->nfs4_acl);
4373 	nfsi->nfs4_acl = acl;
4374 	spin_unlock(&inode->i_lock);
4375 }
4376 
4377 static void nfs4_zap_acl_attr(struct inode *inode)
4378 {
4379 	nfs4_set_cached_acl(inode, NULL);
4380 }
4381 
4382 static inline ssize_t nfs4_read_cached_acl(struct inode *inode, char *buf, size_t buflen)
4383 {
4384 	struct nfs_inode *nfsi = NFS_I(inode);
4385 	struct nfs4_cached_acl *acl;
4386 	int ret = -ENOENT;
4387 
4388 	spin_lock(&inode->i_lock);
4389 	acl = nfsi->nfs4_acl;
4390 	if (acl == NULL)
4391 		goto out;
4392 	if (buf == NULL) /* user is just asking for length */
4393 		goto out_len;
4394 	if (acl->cached == 0)
4395 		goto out;
4396 	ret = -ERANGE; /* see getxattr(2) man page */
4397 	if (acl->len > buflen)
4398 		goto out;
4399 	memcpy(buf, acl->data, acl->len);
4400 out_len:
4401 	ret = acl->len;
4402 out:
4403 	spin_unlock(&inode->i_lock);
4404 	return ret;
4405 }
4406 
4407 static void nfs4_write_cached_acl(struct inode *inode, struct page **pages, size_t pgbase, size_t acl_len)
4408 {
4409 	struct nfs4_cached_acl *acl;
4410 	size_t buflen = sizeof(*acl) + acl_len;
4411 
4412 	if (buflen <= PAGE_SIZE) {
4413 		acl = kmalloc(buflen, GFP_KERNEL);
4414 		if (acl == NULL)
4415 			goto out;
4416 		acl->cached = 1;
4417 		_copy_from_pages(acl->data, pages, pgbase, acl_len);
4418 	} else {
4419 		acl = kmalloc(sizeof(*acl), GFP_KERNEL);
4420 		if (acl == NULL)
4421 			goto out;
4422 		acl->cached = 0;
4423 	}
4424 	acl->len = acl_len;
4425 out:
4426 	nfs4_set_cached_acl(inode, acl);
4427 }
4428 
4429 /*
4430  * The getxattr API returns the required buffer length when called with a
4431  * NULL buf. The NFSv4 acl tool then calls getxattr again after allocating
4432  * the required buf.  On a NULL buf, we send a page of data to the server
4433  * guessing that the ACL request can be serviced by a page. If so, we cache
4434  * up to the page of ACL data, and the 2nd call to getxattr is serviced by
4435  * the cache. If not so, we throw away the page, and cache the required
4436  * length. The next getxattr call will then produce another round trip to
4437  * the server, this time with the input buf of the required size.
4438  */
4439 static ssize_t __nfs4_get_acl_uncached(struct inode *inode, void *buf, size_t buflen)
4440 {
4441 	struct page *pages[NFS4ACL_MAXPAGES] = {NULL, };
4442 	struct nfs_getaclargs args = {
4443 		.fh = NFS_FH(inode),
4444 		.acl_pages = pages,
4445 		.acl_len = buflen,
4446 	};
4447 	struct nfs_getaclres res = {
4448 		.acl_len = buflen,
4449 	};
4450 	struct rpc_message msg = {
4451 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_GETACL],
4452 		.rpc_argp = &args,
4453 		.rpc_resp = &res,
4454 	};
4455 	unsigned int npages = DIV_ROUND_UP(buflen, PAGE_SIZE);
4456 	int ret = -ENOMEM, i;
4457 
4458 	/* As long as we're doing a round trip to the server anyway,
4459 	 * let's be prepared for a page of acl data. */
4460 	if (npages == 0)
4461 		npages = 1;
4462 	if (npages > ARRAY_SIZE(pages))
4463 		return -ERANGE;
4464 
4465 	for (i = 0; i < npages; i++) {
4466 		pages[i] = alloc_page(GFP_KERNEL);
4467 		if (!pages[i])
4468 			goto out_free;
4469 	}
4470 
4471 	/* for decoding across pages */
4472 	res.acl_scratch = alloc_page(GFP_KERNEL);
4473 	if (!res.acl_scratch)
4474 		goto out_free;
4475 
4476 	args.acl_len = npages * PAGE_SIZE;
4477 	args.acl_pgbase = 0;
4478 
4479 	dprintk("%s  buf %p buflen %zu npages %d args.acl_len %zu\n",
4480 		__func__, buf, buflen, npages, args.acl_len);
4481 	ret = nfs4_call_sync(NFS_SERVER(inode)->client, NFS_SERVER(inode),
4482 			     &msg, &args.seq_args, &res.seq_res, 0);
4483 	if (ret)
4484 		goto out_free;
4485 
4486 	/* Handle the case where the passed-in buffer is too short */
4487 	if (res.acl_flags & NFS4_ACL_TRUNC) {
4488 		/* Did the user only issue a request for the acl length? */
4489 		if (buf == NULL)
4490 			goto out_ok;
4491 		ret = -ERANGE;
4492 		goto out_free;
4493 	}
4494 	nfs4_write_cached_acl(inode, pages, res.acl_data_offset, res.acl_len);
4495 	if (buf) {
4496 		if (res.acl_len > buflen) {
4497 			ret = -ERANGE;
4498 			goto out_free;
4499 		}
4500 		_copy_from_pages(buf, pages, res.acl_data_offset, res.acl_len);
4501 	}
4502 out_ok:
4503 	ret = res.acl_len;
4504 out_free:
4505 	for (i = 0; i < npages; i++)
4506 		if (pages[i])
4507 			__free_page(pages[i]);
4508 	if (res.acl_scratch)
4509 		__free_page(res.acl_scratch);
4510 	return ret;
4511 }
4512 
4513 static ssize_t nfs4_get_acl_uncached(struct inode *inode, void *buf, size_t buflen)
4514 {
4515 	struct nfs4_exception exception = { };
4516 	ssize_t ret;
4517 	do {
4518 		ret = __nfs4_get_acl_uncached(inode, buf, buflen);
4519 		trace_nfs4_get_acl(inode, ret);
4520 		if (ret >= 0)
4521 			break;
4522 		ret = nfs4_handle_exception(NFS_SERVER(inode), ret, &exception);
4523 	} while (exception.retry);
4524 	return ret;
4525 }
4526 
4527 static ssize_t nfs4_proc_get_acl(struct inode *inode, void *buf, size_t buflen)
4528 {
4529 	struct nfs_server *server = NFS_SERVER(inode);
4530 	int ret;
4531 
4532 	if (!nfs4_server_supports_acls(server))
4533 		return -EOPNOTSUPP;
4534 	ret = nfs_revalidate_inode(server, inode);
4535 	if (ret < 0)
4536 		return ret;
4537 	if (NFS_I(inode)->cache_validity & NFS_INO_INVALID_ACL)
4538 		nfs_zap_acl_cache(inode);
4539 	ret = nfs4_read_cached_acl(inode, buf, buflen);
4540 	if (ret != -ENOENT)
4541 		/* -ENOENT is returned if there is no ACL or if there is an ACL
4542 		 * but no cached acl data, just the acl length */
4543 		return ret;
4544 	return nfs4_get_acl_uncached(inode, buf, buflen);
4545 }
4546 
4547 static int __nfs4_proc_set_acl(struct inode *inode, const void *buf, size_t buflen)
4548 {
4549 	struct nfs_server *server = NFS_SERVER(inode);
4550 	struct page *pages[NFS4ACL_MAXPAGES];
4551 	struct nfs_setaclargs arg = {
4552 		.fh		= NFS_FH(inode),
4553 		.acl_pages	= pages,
4554 		.acl_len	= buflen,
4555 	};
4556 	struct nfs_setaclres res;
4557 	struct rpc_message msg = {
4558 		.rpc_proc	= &nfs4_procedures[NFSPROC4_CLNT_SETACL],
4559 		.rpc_argp	= &arg,
4560 		.rpc_resp	= &res,
4561 	};
4562 	unsigned int npages = DIV_ROUND_UP(buflen, PAGE_SIZE);
4563 	int ret, i;
4564 
4565 	if (!nfs4_server_supports_acls(server))
4566 		return -EOPNOTSUPP;
4567 	if (npages > ARRAY_SIZE(pages))
4568 		return -ERANGE;
4569 	i = buf_to_pages_noslab(buf, buflen, arg.acl_pages, &arg.acl_pgbase);
4570 	if (i < 0)
4571 		return i;
4572 	nfs4_inode_return_delegation(inode);
4573 	ret = nfs4_call_sync(server->client, server, &msg, &arg.seq_args, &res.seq_res, 1);
4574 
4575 	/*
4576 	 * Free each page after tx, so the only ref left is
4577 	 * held by the network stack
4578 	 */
4579 	for (; i > 0; i--)
4580 		put_page(pages[i-1]);
4581 
4582 	/*
4583 	 * Acl update can result in inode attribute update.
4584 	 * so mark the attribute cache invalid.
4585 	 */
4586 	spin_lock(&inode->i_lock);
4587 	NFS_I(inode)->cache_validity |= NFS_INO_INVALID_ATTR;
4588 	spin_unlock(&inode->i_lock);
4589 	nfs_access_zap_cache(inode);
4590 	nfs_zap_acl_cache(inode);
4591 	return ret;
4592 }
4593 
4594 static int nfs4_proc_set_acl(struct inode *inode, const void *buf, size_t buflen)
4595 {
4596 	struct nfs4_exception exception = { };
4597 	int err;
4598 	do {
4599 		err = __nfs4_proc_set_acl(inode, buf, buflen);
4600 		trace_nfs4_set_acl(inode, err);
4601 		err = nfs4_handle_exception(NFS_SERVER(inode), err,
4602 				&exception);
4603 	} while (exception.retry);
4604 	return err;
4605 }
4606 
4607 #ifdef CONFIG_NFS_V4_SECURITY_LABEL
4608 static int _nfs4_get_security_label(struct inode *inode, void *buf,
4609 					size_t buflen)
4610 {
4611 	struct nfs_server *server = NFS_SERVER(inode);
4612 	struct nfs_fattr fattr;
4613 	struct nfs4_label label = {0, 0, buflen, buf};
4614 
4615 	u32 bitmask[3] = { 0, 0, FATTR4_WORD2_SECURITY_LABEL };
4616 	struct nfs4_getattr_arg arg = {
4617 		.fh		= NFS_FH(inode),
4618 		.bitmask	= bitmask,
4619 	};
4620 	struct nfs4_getattr_res res = {
4621 		.fattr		= &fattr,
4622 		.label		= &label,
4623 		.server		= server,
4624 	};
4625 	struct rpc_message msg = {
4626 		.rpc_proc	= &nfs4_procedures[NFSPROC4_CLNT_GETATTR],
4627 		.rpc_argp	= &arg,
4628 		.rpc_resp	= &res,
4629 	};
4630 	int ret;
4631 
4632 	nfs_fattr_init(&fattr);
4633 
4634 	ret = nfs4_call_sync(server->client, server, &msg, &arg.seq_args, &res.seq_res, 0);
4635 	if (ret)
4636 		return ret;
4637 	if (!(fattr.valid & NFS_ATTR_FATTR_V4_SECURITY_LABEL))
4638 		return -ENOENT;
4639 	if (buflen < label.len)
4640 		return -ERANGE;
4641 	return 0;
4642 }
4643 
4644 static int nfs4_get_security_label(struct inode *inode, void *buf,
4645 					size_t buflen)
4646 {
4647 	struct nfs4_exception exception = { };
4648 	int err;
4649 
4650 	if (!nfs_server_capable(inode, NFS_CAP_SECURITY_LABEL))
4651 		return -EOPNOTSUPP;
4652 
4653 	do {
4654 		err = _nfs4_get_security_label(inode, buf, buflen);
4655 		trace_nfs4_get_security_label(inode, err);
4656 		err = nfs4_handle_exception(NFS_SERVER(inode), err,
4657 				&exception);
4658 	} while (exception.retry);
4659 	return err;
4660 }
4661 
4662 static int _nfs4_do_set_security_label(struct inode *inode,
4663 		struct nfs4_label *ilabel,
4664 		struct nfs_fattr *fattr,
4665 		struct nfs4_label *olabel)
4666 {
4667 
4668 	struct iattr sattr = {0};
4669 	struct nfs_server *server = NFS_SERVER(inode);
4670 	const u32 bitmask[3] = { 0, 0, FATTR4_WORD2_SECURITY_LABEL };
4671 	struct nfs_setattrargs arg = {
4672 		.fh             = NFS_FH(inode),
4673 		.iap            = &sattr,
4674 		.server		= server,
4675 		.bitmask	= bitmask,
4676 		.label		= ilabel,
4677 	};
4678 	struct nfs_setattrres res = {
4679 		.fattr		= fattr,
4680 		.label		= olabel,
4681 		.server		= server,
4682 	};
4683 	struct rpc_message msg = {
4684 		.rpc_proc       = &nfs4_procedures[NFSPROC4_CLNT_SETATTR],
4685 		.rpc_argp       = &arg,
4686 		.rpc_resp       = &res,
4687 	};
4688 	int status;
4689 
4690 	nfs4_stateid_copy(&arg.stateid, &zero_stateid);
4691 
4692 	status = nfs4_call_sync(server->client, server, &msg, &arg.seq_args, &res.seq_res, 1);
4693 	if (status)
4694 		dprintk("%s failed: %d\n", __func__, status);
4695 
4696 	return status;
4697 }
4698 
4699 static int nfs4_do_set_security_label(struct inode *inode,
4700 		struct nfs4_label *ilabel,
4701 		struct nfs_fattr *fattr,
4702 		struct nfs4_label *olabel)
4703 {
4704 	struct nfs4_exception exception = { };
4705 	int err;
4706 
4707 	do {
4708 		err = _nfs4_do_set_security_label(inode, ilabel,
4709 				fattr, olabel);
4710 		trace_nfs4_set_security_label(inode, err);
4711 		err = nfs4_handle_exception(NFS_SERVER(inode), err,
4712 				&exception);
4713 	} while (exception.retry);
4714 	return err;
4715 }
4716 
4717 static int
4718 nfs4_set_security_label(struct dentry *dentry, const void *buf, size_t buflen)
4719 {
4720 	struct nfs4_label ilabel, *olabel = NULL;
4721 	struct nfs_fattr fattr;
4722 	struct rpc_cred *cred;
4723 	struct inode *inode = dentry->d_inode;
4724 	int status;
4725 
4726 	if (!nfs_server_capable(inode, NFS_CAP_SECURITY_LABEL))
4727 		return -EOPNOTSUPP;
4728 
4729 	nfs_fattr_init(&fattr);
4730 
4731 	ilabel.pi = 0;
4732 	ilabel.lfs = 0;
4733 	ilabel.label = (char *)buf;
4734 	ilabel.len = buflen;
4735 
4736 	cred = rpc_lookup_cred();
4737 	if (IS_ERR(cred))
4738 		return PTR_ERR(cred);
4739 
4740 	olabel = nfs4_label_alloc(NFS_SERVER(inode), GFP_KERNEL);
4741 	if (IS_ERR(olabel)) {
4742 		status = -PTR_ERR(olabel);
4743 		goto out;
4744 	}
4745 
4746 	status = nfs4_do_set_security_label(inode, &ilabel, &fattr, olabel);
4747 	if (status == 0)
4748 		nfs_setsecurity(inode, &fattr, olabel);
4749 
4750 	nfs4_label_free(olabel);
4751 out:
4752 	put_rpccred(cred);
4753 	return status;
4754 }
4755 #endif	/* CONFIG_NFS_V4_SECURITY_LABEL */
4756 
4757 
4758 static int
4759 nfs4_async_handle_error(struct rpc_task *task, const struct nfs_server *server, struct nfs4_state *state)
4760 {
4761 	struct nfs_client *clp = server->nfs_client;
4762 
4763 	if (task->tk_status >= 0)
4764 		return 0;
4765 	switch(task->tk_status) {
4766 		case -NFS4ERR_DELEG_REVOKED:
4767 		case -NFS4ERR_ADMIN_REVOKED:
4768 		case -NFS4ERR_BAD_STATEID:
4769 			if (state == NULL)
4770 				break;
4771 			nfs_remove_bad_delegation(state->inode);
4772 		case -NFS4ERR_OPENMODE:
4773 			if (state == NULL)
4774 				break;
4775 			if (nfs4_schedule_stateid_recovery(server, state) < 0)
4776 				goto recovery_failed;
4777 			goto wait_on_recovery;
4778 		case -NFS4ERR_EXPIRED:
4779 			if (state != NULL) {
4780 				if (nfs4_schedule_stateid_recovery(server, state) < 0)
4781 					goto recovery_failed;
4782 			}
4783 		case -NFS4ERR_STALE_STATEID:
4784 		case -NFS4ERR_STALE_CLIENTID:
4785 			nfs4_schedule_lease_recovery(clp);
4786 			goto wait_on_recovery;
4787 		case -NFS4ERR_MOVED:
4788 			if (nfs4_schedule_migration_recovery(server) < 0)
4789 				goto recovery_failed;
4790 			goto wait_on_recovery;
4791 		case -NFS4ERR_LEASE_MOVED:
4792 			nfs4_schedule_lease_moved_recovery(clp);
4793 			goto wait_on_recovery;
4794 #if defined(CONFIG_NFS_V4_1)
4795 		case -NFS4ERR_BADSESSION:
4796 		case -NFS4ERR_BADSLOT:
4797 		case -NFS4ERR_BAD_HIGH_SLOT:
4798 		case -NFS4ERR_DEADSESSION:
4799 		case -NFS4ERR_CONN_NOT_BOUND_TO_SESSION:
4800 		case -NFS4ERR_SEQ_FALSE_RETRY:
4801 		case -NFS4ERR_SEQ_MISORDERED:
4802 			dprintk("%s ERROR %d, Reset session\n", __func__,
4803 				task->tk_status);
4804 			nfs4_schedule_session_recovery(clp->cl_session, task->tk_status);
4805 			goto wait_on_recovery;
4806 #endif /* CONFIG_NFS_V4_1 */
4807 		case -NFS4ERR_DELAY:
4808 			nfs_inc_server_stats(server, NFSIOS_DELAY);
4809 		case -NFS4ERR_GRACE:
4810 			rpc_delay(task, NFS4_POLL_RETRY_MAX);
4811 		case -NFS4ERR_RETRY_UNCACHED_REP:
4812 		case -NFS4ERR_OLD_STATEID:
4813 			goto restart_call;
4814 	}
4815 	task->tk_status = nfs4_map_errors(task->tk_status);
4816 	return 0;
4817 recovery_failed:
4818 	task->tk_status = -EIO;
4819 	return 0;
4820 wait_on_recovery:
4821 	rpc_sleep_on(&clp->cl_rpcwaitq, task, NULL);
4822 	if (test_bit(NFS4CLNT_MANAGER_RUNNING, &clp->cl_state) == 0)
4823 		rpc_wake_up_queued_task(&clp->cl_rpcwaitq, task);
4824 	if (test_bit(NFS_MIG_FAILED, &server->mig_status))
4825 		goto recovery_failed;
4826 restart_call:
4827 	task->tk_status = 0;
4828 	return -EAGAIN;
4829 }
4830 
4831 static void nfs4_init_boot_verifier(const struct nfs_client *clp,
4832 				    nfs4_verifier *bootverf)
4833 {
4834 	__be32 verf[2];
4835 
4836 	if (test_bit(NFS4CLNT_PURGE_STATE, &clp->cl_state)) {
4837 		/* An impossible timestamp guarantees this value
4838 		 * will never match a generated boot time. */
4839 		verf[0] = 0;
4840 		verf[1] = cpu_to_be32(NSEC_PER_SEC + 1);
4841 	} else {
4842 		struct nfs_net *nn = net_generic(clp->cl_net, nfs_net_id);
4843 		verf[0] = cpu_to_be32(nn->boot_time.tv_sec);
4844 		verf[1] = cpu_to_be32(nn->boot_time.tv_nsec);
4845 	}
4846 	memcpy(bootverf->data, verf, sizeof(bootverf->data));
4847 }
4848 
4849 static unsigned int
4850 nfs4_init_nonuniform_client_string(const struct nfs_client *clp,
4851 				   char *buf, size_t len)
4852 {
4853 	unsigned int result;
4854 
4855 	rcu_read_lock();
4856 	result = scnprintf(buf, len, "Linux NFSv4.0 %s/%s %s",
4857 				clp->cl_ipaddr,
4858 				rpc_peeraddr2str(clp->cl_rpcclient,
4859 							RPC_DISPLAY_ADDR),
4860 				rpc_peeraddr2str(clp->cl_rpcclient,
4861 							RPC_DISPLAY_PROTO));
4862 	rcu_read_unlock();
4863 	return result;
4864 }
4865 
4866 static unsigned int
4867 nfs4_init_uniform_client_string(const struct nfs_client *clp,
4868 				char *buf, size_t len)
4869 {
4870 	const char *nodename = clp->cl_rpcclient->cl_nodename;
4871 
4872 	if (nfs4_client_id_uniquifier[0] != '\0')
4873 		return scnprintf(buf, len, "Linux NFSv%u.%u %s/%s",
4874 				clp->rpc_ops->version,
4875 				clp->cl_minorversion,
4876 				nfs4_client_id_uniquifier,
4877 				nodename);
4878 	return scnprintf(buf, len, "Linux NFSv%u.%u %s",
4879 				clp->rpc_ops->version, clp->cl_minorversion,
4880 				nodename);
4881 }
4882 
4883 /**
4884  * nfs4_proc_setclientid - Negotiate client ID
4885  * @clp: state data structure
4886  * @program: RPC program for NFSv4 callback service
4887  * @port: IP port number for NFS4 callback service
4888  * @cred: RPC credential to use for this call
4889  * @res: where to place the result
4890  *
4891  * Returns zero, a negative errno, or a negative NFS4ERR status code.
4892  */
4893 int nfs4_proc_setclientid(struct nfs_client *clp, u32 program,
4894 		unsigned short port, struct rpc_cred *cred,
4895 		struct nfs4_setclientid_res *res)
4896 {
4897 	nfs4_verifier sc_verifier;
4898 	struct nfs4_setclientid setclientid = {
4899 		.sc_verifier = &sc_verifier,
4900 		.sc_prog = program,
4901 		.sc_cb_ident = clp->cl_cb_ident,
4902 	};
4903 	struct rpc_message msg = {
4904 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_SETCLIENTID],
4905 		.rpc_argp = &setclientid,
4906 		.rpc_resp = res,
4907 		.rpc_cred = cred,
4908 	};
4909 	int status;
4910 
4911 	/* nfs_client_id4 */
4912 	nfs4_init_boot_verifier(clp, &sc_verifier);
4913 	if (test_bit(NFS_CS_MIGRATION, &clp->cl_flags))
4914 		setclientid.sc_name_len =
4915 				nfs4_init_uniform_client_string(clp,
4916 						setclientid.sc_name,
4917 						sizeof(setclientid.sc_name));
4918 	else
4919 		setclientid.sc_name_len =
4920 				nfs4_init_nonuniform_client_string(clp,
4921 						setclientid.sc_name,
4922 						sizeof(setclientid.sc_name));
4923 	/* cb_client4 */
4924 	rcu_read_lock();
4925 	setclientid.sc_netid_len = scnprintf(setclientid.sc_netid,
4926 				sizeof(setclientid.sc_netid), "%s",
4927 				rpc_peeraddr2str(clp->cl_rpcclient,
4928 							RPC_DISPLAY_NETID));
4929 	rcu_read_unlock();
4930 	setclientid.sc_uaddr_len = scnprintf(setclientid.sc_uaddr,
4931 				sizeof(setclientid.sc_uaddr), "%s.%u.%u",
4932 				clp->cl_ipaddr, port >> 8, port & 255);
4933 
4934 	dprintk("NFS call  setclientid auth=%s, '%.*s'\n",
4935 		clp->cl_rpcclient->cl_auth->au_ops->au_name,
4936 		setclientid.sc_name_len, setclientid.sc_name);
4937 	status = rpc_call_sync(clp->cl_rpcclient, &msg, RPC_TASK_TIMEOUT);
4938 	trace_nfs4_setclientid(clp, status);
4939 	dprintk("NFS reply setclientid: %d\n", status);
4940 	return status;
4941 }
4942 
4943 /**
4944  * nfs4_proc_setclientid_confirm - Confirm client ID
4945  * @clp: state data structure
4946  * @res: result of a previous SETCLIENTID
4947  * @cred: RPC credential to use for this call
4948  *
4949  * Returns zero, a negative errno, or a negative NFS4ERR status code.
4950  */
4951 int nfs4_proc_setclientid_confirm(struct nfs_client *clp,
4952 		struct nfs4_setclientid_res *arg,
4953 		struct rpc_cred *cred)
4954 {
4955 	struct rpc_message msg = {
4956 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_SETCLIENTID_CONFIRM],
4957 		.rpc_argp = arg,
4958 		.rpc_cred = cred,
4959 	};
4960 	int status;
4961 
4962 	dprintk("NFS call  setclientid_confirm auth=%s, (client ID %llx)\n",
4963 		clp->cl_rpcclient->cl_auth->au_ops->au_name,
4964 		clp->cl_clientid);
4965 	status = rpc_call_sync(clp->cl_rpcclient, &msg, RPC_TASK_TIMEOUT);
4966 	trace_nfs4_setclientid_confirm(clp, status);
4967 	dprintk("NFS reply setclientid_confirm: %d\n", status);
4968 	return status;
4969 }
4970 
4971 struct nfs4_delegreturndata {
4972 	struct nfs4_delegreturnargs args;
4973 	struct nfs4_delegreturnres res;
4974 	struct nfs_fh fh;
4975 	nfs4_stateid stateid;
4976 	unsigned long timestamp;
4977 	struct nfs_fattr fattr;
4978 	int rpc_status;
4979 };
4980 
4981 static void nfs4_delegreturn_done(struct rpc_task *task, void *calldata)
4982 {
4983 	struct nfs4_delegreturndata *data = calldata;
4984 
4985 	if (!nfs4_sequence_done(task, &data->res.seq_res))
4986 		return;
4987 
4988 	trace_nfs4_delegreturn_exit(&data->args, &data->res, task->tk_status);
4989 	switch (task->tk_status) {
4990 	case 0:
4991 		renew_lease(data->res.server, data->timestamp);
4992 		break;
4993 	case -NFS4ERR_ADMIN_REVOKED:
4994 	case -NFS4ERR_DELEG_REVOKED:
4995 	case -NFS4ERR_BAD_STATEID:
4996 	case -NFS4ERR_OLD_STATEID:
4997 	case -NFS4ERR_STALE_STATEID:
4998 	case -NFS4ERR_EXPIRED:
4999 		task->tk_status = 0;
5000 		break;
5001 	default:
5002 		if (nfs4_async_handle_error(task, data->res.server, NULL) ==
5003 				-EAGAIN) {
5004 			rpc_restart_call_prepare(task);
5005 			return;
5006 		}
5007 	}
5008 	data->rpc_status = task->tk_status;
5009 }
5010 
5011 static void nfs4_delegreturn_release(void *calldata)
5012 {
5013 	kfree(calldata);
5014 }
5015 
5016 static void nfs4_delegreturn_prepare(struct rpc_task *task, void *data)
5017 {
5018 	struct nfs4_delegreturndata *d_data;
5019 
5020 	d_data = (struct nfs4_delegreturndata *)data;
5021 
5022 	nfs4_setup_sequence(d_data->res.server,
5023 			&d_data->args.seq_args,
5024 			&d_data->res.seq_res,
5025 			task);
5026 }
5027 
5028 static const struct rpc_call_ops nfs4_delegreturn_ops = {
5029 	.rpc_call_prepare = nfs4_delegreturn_prepare,
5030 	.rpc_call_done = nfs4_delegreturn_done,
5031 	.rpc_release = nfs4_delegreturn_release,
5032 };
5033 
5034 static int _nfs4_proc_delegreturn(struct inode *inode, struct rpc_cred *cred, const nfs4_stateid *stateid, int issync)
5035 {
5036 	struct nfs4_delegreturndata *data;
5037 	struct nfs_server *server = NFS_SERVER(inode);
5038 	struct rpc_task *task;
5039 	struct rpc_message msg = {
5040 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_DELEGRETURN],
5041 		.rpc_cred = cred,
5042 	};
5043 	struct rpc_task_setup task_setup_data = {
5044 		.rpc_client = server->client,
5045 		.rpc_message = &msg,
5046 		.callback_ops = &nfs4_delegreturn_ops,
5047 		.flags = RPC_TASK_ASYNC,
5048 	};
5049 	int status = 0;
5050 
5051 	data = kzalloc(sizeof(*data), GFP_NOFS);
5052 	if (data == NULL)
5053 		return -ENOMEM;
5054 	nfs4_init_sequence(&data->args.seq_args, &data->res.seq_res, 1);
5055 	data->args.fhandle = &data->fh;
5056 	data->args.stateid = &data->stateid;
5057 	data->args.bitmask = server->cache_consistency_bitmask;
5058 	nfs_copy_fh(&data->fh, NFS_FH(inode));
5059 	nfs4_stateid_copy(&data->stateid, stateid);
5060 	data->res.fattr = &data->fattr;
5061 	data->res.server = server;
5062 	nfs_fattr_init(data->res.fattr);
5063 	data->timestamp = jiffies;
5064 	data->rpc_status = 0;
5065 
5066 	task_setup_data.callback_data = data;
5067 	msg.rpc_argp = &data->args;
5068 	msg.rpc_resp = &data->res;
5069 	task = rpc_run_task(&task_setup_data);
5070 	if (IS_ERR(task))
5071 		return PTR_ERR(task);
5072 	if (!issync)
5073 		goto out;
5074 	status = nfs4_wait_for_completion_rpc_task(task);
5075 	if (status != 0)
5076 		goto out;
5077 	status = data->rpc_status;
5078 	if (status == 0)
5079 		nfs_post_op_update_inode_force_wcc(inode, &data->fattr);
5080 	else
5081 		nfs_refresh_inode(inode, &data->fattr);
5082 out:
5083 	rpc_put_task(task);
5084 	return status;
5085 }
5086 
5087 int nfs4_proc_delegreturn(struct inode *inode, struct rpc_cred *cred, const nfs4_stateid *stateid, int issync)
5088 {
5089 	struct nfs_server *server = NFS_SERVER(inode);
5090 	struct nfs4_exception exception = { };
5091 	int err;
5092 	do {
5093 		err = _nfs4_proc_delegreturn(inode, cred, stateid, issync);
5094 		trace_nfs4_delegreturn(inode, err);
5095 		switch (err) {
5096 			case -NFS4ERR_STALE_STATEID:
5097 			case -NFS4ERR_EXPIRED:
5098 			case 0:
5099 				return 0;
5100 		}
5101 		err = nfs4_handle_exception(server, err, &exception);
5102 	} while (exception.retry);
5103 	return err;
5104 }
5105 
5106 #define NFS4_LOCK_MINTIMEOUT (1 * HZ)
5107 #define NFS4_LOCK_MAXTIMEOUT (30 * HZ)
5108 
5109 /*
5110  * sleep, with exponential backoff, and retry the LOCK operation.
5111  */
5112 static unsigned long
5113 nfs4_set_lock_task_retry(unsigned long timeout)
5114 {
5115 	freezable_schedule_timeout_killable_unsafe(timeout);
5116 	timeout <<= 1;
5117 	if (timeout > NFS4_LOCK_MAXTIMEOUT)
5118 		return NFS4_LOCK_MAXTIMEOUT;
5119 	return timeout;
5120 }
5121 
5122 static int _nfs4_proc_getlk(struct nfs4_state *state, int cmd, struct file_lock *request)
5123 {
5124 	struct inode *inode = state->inode;
5125 	struct nfs_server *server = NFS_SERVER(inode);
5126 	struct nfs_client *clp = server->nfs_client;
5127 	struct nfs_lockt_args arg = {
5128 		.fh = NFS_FH(inode),
5129 		.fl = request,
5130 	};
5131 	struct nfs_lockt_res res = {
5132 		.denied = request,
5133 	};
5134 	struct rpc_message msg = {
5135 		.rpc_proc	= &nfs4_procedures[NFSPROC4_CLNT_LOCKT],
5136 		.rpc_argp       = &arg,
5137 		.rpc_resp       = &res,
5138 		.rpc_cred	= state->owner->so_cred,
5139 	};
5140 	struct nfs4_lock_state *lsp;
5141 	int status;
5142 
5143 	arg.lock_owner.clientid = clp->cl_clientid;
5144 	status = nfs4_set_lock_state(state, request);
5145 	if (status != 0)
5146 		goto out;
5147 	lsp = request->fl_u.nfs4_fl.owner;
5148 	arg.lock_owner.id = lsp->ls_seqid.owner_id;
5149 	arg.lock_owner.s_dev = server->s_dev;
5150 	status = nfs4_call_sync(server->client, server, &msg, &arg.seq_args, &res.seq_res, 1);
5151 	switch (status) {
5152 		case 0:
5153 			request->fl_type = F_UNLCK;
5154 			break;
5155 		case -NFS4ERR_DENIED:
5156 			status = 0;
5157 	}
5158 	request->fl_ops->fl_release_private(request);
5159 	request->fl_ops = NULL;
5160 out:
5161 	return status;
5162 }
5163 
5164 static int nfs4_proc_getlk(struct nfs4_state *state, int cmd, struct file_lock *request)
5165 {
5166 	struct nfs4_exception exception = { };
5167 	int err;
5168 
5169 	do {
5170 		err = _nfs4_proc_getlk(state, cmd, request);
5171 		trace_nfs4_get_lock(request, state, cmd, err);
5172 		err = nfs4_handle_exception(NFS_SERVER(state->inode), err,
5173 				&exception);
5174 	} while (exception.retry);
5175 	return err;
5176 }
5177 
5178 static int do_vfs_lock(struct file *file, struct file_lock *fl)
5179 {
5180 	int res = 0;
5181 	switch (fl->fl_flags & (FL_POSIX|FL_FLOCK)) {
5182 		case FL_POSIX:
5183 			res = posix_lock_file_wait(file, fl);
5184 			break;
5185 		case FL_FLOCK:
5186 			res = flock_lock_file_wait(file, fl);
5187 			break;
5188 		default:
5189 			BUG();
5190 	}
5191 	return res;
5192 }
5193 
5194 struct nfs4_unlockdata {
5195 	struct nfs_locku_args arg;
5196 	struct nfs_locku_res res;
5197 	struct nfs4_lock_state *lsp;
5198 	struct nfs_open_context *ctx;
5199 	struct file_lock fl;
5200 	const struct nfs_server *server;
5201 	unsigned long timestamp;
5202 };
5203 
5204 static struct nfs4_unlockdata *nfs4_alloc_unlockdata(struct file_lock *fl,
5205 		struct nfs_open_context *ctx,
5206 		struct nfs4_lock_state *lsp,
5207 		struct nfs_seqid *seqid)
5208 {
5209 	struct nfs4_unlockdata *p;
5210 	struct inode *inode = lsp->ls_state->inode;
5211 
5212 	p = kzalloc(sizeof(*p), GFP_NOFS);
5213 	if (p == NULL)
5214 		return NULL;
5215 	p->arg.fh = NFS_FH(inode);
5216 	p->arg.fl = &p->fl;
5217 	p->arg.seqid = seqid;
5218 	p->res.seqid = seqid;
5219 	p->arg.stateid = &lsp->ls_stateid;
5220 	p->lsp = lsp;
5221 	atomic_inc(&lsp->ls_count);
5222 	/* Ensure we don't close file until we're done freeing locks! */
5223 	p->ctx = get_nfs_open_context(ctx);
5224 	memcpy(&p->fl, fl, sizeof(p->fl));
5225 	p->server = NFS_SERVER(inode);
5226 	return p;
5227 }
5228 
5229 static void nfs4_locku_release_calldata(void *data)
5230 {
5231 	struct nfs4_unlockdata *calldata = data;
5232 	nfs_free_seqid(calldata->arg.seqid);
5233 	nfs4_put_lock_state(calldata->lsp);
5234 	put_nfs_open_context(calldata->ctx);
5235 	kfree(calldata);
5236 }
5237 
5238 static void nfs4_locku_done(struct rpc_task *task, void *data)
5239 {
5240 	struct nfs4_unlockdata *calldata = data;
5241 
5242 	if (!nfs4_sequence_done(task, &calldata->res.seq_res))
5243 		return;
5244 	switch (task->tk_status) {
5245 		case 0:
5246 			nfs4_stateid_copy(&calldata->lsp->ls_stateid,
5247 					&calldata->res.stateid);
5248 			renew_lease(calldata->server, calldata->timestamp);
5249 			break;
5250 		case -NFS4ERR_BAD_STATEID:
5251 		case -NFS4ERR_OLD_STATEID:
5252 		case -NFS4ERR_STALE_STATEID:
5253 		case -NFS4ERR_EXPIRED:
5254 			break;
5255 		default:
5256 			if (nfs4_async_handle_error(task, calldata->server, NULL) == -EAGAIN)
5257 				rpc_restart_call_prepare(task);
5258 	}
5259 	nfs_release_seqid(calldata->arg.seqid);
5260 }
5261 
5262 static void nfs4_locku_prepare(struct rpc_task *task, void *data)
5263 {
5264 	struct nfs4_unlockdata *calldata = data;
5265 
5266 	if (nfs_wait_on_sequence(calldata->arg.seqid, task) != 0)
5267 		goto out_wait;
5268 	if (test_bit(NFS_LOCK_INITIALIZED, &calldata->lsp->ls_flags) == 0) {
5269 		/* Note: exit _without_ running nfs4_locku_done */
5270 		goto out_no_action;
5271 	}
5272 	calldata->timestamp = jiffies;
5273 	if (nfs4_setup_sequence(calldata->server,
5274 				&calldata->arg.seq_args,
5275 				&calldata->res.seq_res,
5276 				task) != 0)
5277 		nfs_release_seqid(calldata->arg.seqid);
5278 	return;
5279 out_no_action:
5280 	task->tk_action = NULL;
5281 out_wait:
5282 	nfs4_sequence_done(task, &calldata->res.seq_res);
5283 }
5284 
5285 static const struct rpc_call_ops nfs4_locku_ops = {
5286 	.rpc_call_prepare = nfs4_locku_prepare,
5287 	.rpc_call_done = nfs4_locku_done,
5288 	.rpc_release = nfs4_locku_release_calldata,
5289 };
5290 
5291 static struct rpc_task *nfs4_do_unlck(struct file_lock *fl,
5292 		struct nfs_open_context *ctx,
5293 		struct nfs4_lock_state *lsp,
5294 		struct nfs_seqid *seqid)
5295 {
5296 	struct nfs4_unlockdata *data;
5297 	struct rpc_message msg = {
5298 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_LOCKU],
5299 		.rpc_cred = ctx->cred,
5300 	};
5301 	struct rpc_task_setup task_setup_data = {
5302 		.rpc_client = NFS_CLIENT(lsp->ls_state->inode),
5303 		.rpc_message = &msg,
5304 		.callback_ops = &nfs4_locku_ops,
5305 		.workqueue = nfsiod_workqueue,
5306 		.flags = RPC_TASK_ASYNC,
5307 	};
5308 
5309 	nfs4_state_protect(NFS_SERVER(lsp->ls_state->inode)->nfs_client,
5310 		NFS_SP4_MACH_CRED_CLEANUP, &task_setup_data.rpc_client, &msg);
5311 
5312 	/* Ensure this is an unlock - when canceling a lock, the
5313 	 * canceled lock is passed in, and it won't be an unlock.
5314 	 */
5315 	fl->fl_type = F_UNLCK;
5316 
5317 	data = nfs4_alloc_unlockdata(fl, ctx, lsp, seqid);
5318 	if (data == NULL) {
5319 		nfs_free_seqid(seqid);
5320 		return ERR_PTR(-ENOMEM);
5321 	}
5322 
5323 	nfs4_init_sequence(&data->arg.seq_args, &data->res.seq_res, 1);
5324 	msg.rpc_argp = &data->arg;
5325 	msg.rpc_resp = &data->res;
5326 	task_setup_data.callback_data = data;
5327 	return rpc_run_task(&task_setup_data);
5328 }
5329 
5330 static int nfs4_proc_unlck(struct nfs4_state *state, int cmd, struct file_lock *request)
5331 {
5332 	struct inode *inode = state->inode;
5333 	struct nfs4_state_owner *sp = state->owner;
5334 	struct nfs_inode *nfsi = NFS_I(inode);
5335 	struct nfs_seqid *seqid;
5336 	struct nfs4_lock_state *lsp;
5337 	struct rpc_task *task;
5338 	int status = 0;
5339 	unsigned char fl_flags = request->fl_flags;
5340 
5341 	status = nfs4_set_lock_state(state, request);
5342 	/* Unlock _before_ we do the RPC call */
5343 	request->fl_flags |= FL_EXISTS;
5344 	/* Exclude nfs_delegation_claim_locks() */
5345 	mutex_lock(&sp->so_delegreturn_mutex);
5346 	/* Exclude nfs4_reclaim_open_stateid() - note nesting! */
5347 	down_read(&nfsi->rwsem);
5348 	if (do_vfs_lock(request->fl_file, request) == -ENOENT) {
5349 		up_read(&nfsi->rwsem);
5350 		mutex_unlock(&sp->so_delegreturn_mutex);
5351 		goto out;
5352 	}
5353 	up_read(&nfsi->rwsem);
5354 	mutex_unlock(&sp->so_delegreturn_mutex);
5355 	if (status != 0)
5356 		goto out;
5357 	/* Is this a delegated lock? */
5358 	lsp = request->fl_u.nfs4_fl.owner;
5359 	if (test_bit(NFS_LOCK_INITIALIZED, &lsp->ls_flags) == 0)
5360 		goto out;
5361 	seqid = nfs_alloc_seqid(&lsp->ls_seqid, GFP_KERNEL);
5362 	status = -ENOMEM;
5363 	if (seqid == NULL)
5364 		goto out;
5365 	task = nfs4_do_unlck(request, nfs_file_open_context(request->fl_file), lsp, seqid);
5366 	status = PTR_ERR(task);
5367 	if (IS_ERR(task))
5368 		goto out;
5369 	status = nfs4_wait_for_completion_rpc_task(task);
5370 	rpc_put_task(task);
5371 out:
5372 	request->fl_flags = fl_flags;
5373 	trace_nfs4_unlock(request, state, F_SETLK, status);
5374 	return status;
5375 }
5376 
5377 struct nfs4_lockdata {
5378 	struct nfs_lock_args arg;
5379 	struct nfs_lock_res res;
5380 	struct nfs4_lock_state *lsp;
5381 	struct nfs_open_context *ctx;
5382 	struct file_lock fl;
5383 	unsigned long timestamp;
5384 	int rpc_status;
5385 	int cancelled;
5386 	struct nfs_server *server;
5387 };
5388 
5389 static struct nfs4_lockdata *nfs4_alloc_lockdata(struct file_lock *fl,
5390 		struct nfs_open_context *ctx, struct nfs4_lock_state *lsp,
5391 		gfp_t gfp_mask)
5392 {
5393 	struct nfs4_lockdata *p;
5394 	struct inode *inode = lsp->ls_state->inode;
5395 	struct nfs_server *server = NFS_SERVER(inode);
5396 
5397 	p = kzalloc(sizeof(*p), gfp_mask);
5398 	if (p == NULL)
5399 		return NULL;
5400 
5401 	p->arg.fh = NFS_FH(inode);
5402 	p->arg.fl = &p->fl;
5403 	p->arg.open_seqid = nfs_alloc_seqid(&lsp->ls_state->owner->so_seqid, gfp_mask);
5404 	if (p->arg.open_seqid == NULL)
5405 		goto out_free;
5406 	p->arg.lock_seqid = nfs_alloc_seqid(&lsp->ls_seqid, gfp_mask);
5407 	if (p->arg.lock_seqid == NULL)
5408 		goto out_free_seqid;
5409 	p->arg.lock_stateid = &lsp->ls_stateid;
5410 	p->arg.lock_owner.clientid = server->nfs_client->cl_clientid;
5411 	p->arg.lock_owner.id = lsp->ls_seqid.owner_id;
5412 	p->arg.lock_owner.s_dev = server->s_dev;
5413 	p->res.lock_seqid = p->arg.lock_seqid;
5414 	p->lsp = lsp;
5415 	p->server = server;
5416 	atomic_inc(&lsp->ls_count);
5417 	p->ctx = get_nfs_open_context(ctx);
5418 	memcpy(&p->fl, fl, sizeof(p->fl));
5419 	return p;
5420 out_free_seqid:
5421 	nfs_free_seqid(p->arg.open_seqid);
5422 out_free:
5423 	kfree(p);
5424 	return NULL;
5425 }
5426 
5427 static void nfs4_lock_prepare(struct rpc_task *task, void *calldata)
5428 {
5429 	struct nfs4_lockdata *data = calldata;
5430 	struct nfs4_state *state = data->lsp->ls_state;
5431 
5432 	dprintk("%s: begin!\n", __func__);
5433 	if (nfs_wait_on_sequence(data->arg.lock_seqid, task) != 0)
5434 		goto out_wait;
5435 	/* Do we need to do an open_to_lock_owner? */
5436 	if (!(data->arg.lock_seqid->sequence->flags & NFS_SEQID_CONFIRMED)) {
5437 		if (nfs_wait_on_sequence(data->arg.open_seqid, task) != 0) {
5438 			goto out_release_lock_seqid;
5439 		}
5440 		data->arg.open_stateid = &state->open_stateid;
5441 		data->arg.new_lock_owner = 1;
5442 		data->res.open_seqid = data->arg.open_seqid;
5443 	} else
5444 		data->arg.new_lock_owner = 0;
5445 	if (!nfs4_valid_open_stateid(state)) {
5446 		data->rpc_status = -EBADF;
5447 		task->tk_action = NULL;
5448 		goto out_release_open_seqid;
5449 	}
5450 	data->timestamp = jiffies;
5451 	if (nfs4_setup_sequence(data->server,
5452 				&data->arg.seq_args,
5453 				&data->res.seq_res,
5454 				task) == 0)
5455 		return;
5456 out_release_open_seqid:
5457 	nfs_release_seqid(data->arg.open_seqid);
5458 out_release_lock_seqid:
5459 	nfs_release_seqid(data->arg.lock_seqid);
5460 out_wait:
5461 	nfs4_sequence_done(task, &data->res.seq_res);
5462 	dprintk("%s: done!, ret = %d\n", __func__, data->rpc_status);
5463 }
5464 
5465 static void nfs4_lock_done(struct rpc_task *task, void *calldata)
5466 {
5467 	struct nfs4_lockdata *data = calldata;
5468 
5469 	dprintk("%s: begin!\n", __func__);
5470 
5471 	if (!nfs4_sequence_done(task, &data->res.seq_res))
5472 		return;
5473 
5474 	data->rpc_status = task->tk_status;
5475 	if (data->arg.new_lock_owner != 0) {
5476 		if (data->rpc_status == 0)
5477 			nfs_confirm_seqid(&data->lsp->ls_seqid, 0);
5478 		else
5479 			goto out;
5480 	}
5481 	if (data->rpc_status == 0) {
5482 		nfs4_stateid_copy(&data->lsp->ls_stateid, &data->res.stateid);
5483 		set_bit(NFS_LOCK_INITIALIZED, &data->lsp->ls_flags);
5484 		renew_lease(NFS_SERVER(data->ctx->dentry->d_inode), data->timestamp);
5485 	}
5486 out:
5487 	dprintk("%s: done, ret = %d!\n", __func__, data->rpc_status);
5488 }
5489 
5490 static void nfs4_lock_release(void *calldata)
5491 {
5492 	struct nfs4_lockdata *data = calldata;
5493 
5494 	dprintk("%s: begin!\n", __func__);
5495 	nfs_free_seqid(data->arg.open_seqid);
5496 	if (data->cancelled != 0) {
5497 		struct rpc_task *task;
5498 		task = nfs4_do_unlck(&data->fl, data->ctx, data->lsp,
5499 				data->arg.lock_seqid);
5500 		if (!IS_ERR(task))
5501 			rpc_put_task_async(task);
5502 		dprintk("%s: cancelling lock!\n", __func__);
5503 	} else
5504 		nfs_free_seqid(data->arg.lock_seqid);
5505 	nfs4_put_lock_state(data->lsp);
5506 	put_nfs_open_context(data->ctx);
5507 	kfree(data);
5508 	dprintk("%s: done!\n", __func__);
5509 }
5510 
5511 static const struct rpc_call_ops nfs4_lock_ops = {
5512 	.rpc_call_prepare = nfs4_lock_prepare,
5513 	.rpc_call_done = nfs4_lock_done,
5514 	.rpc_release = nfs4_lock_release,
5515 };
5516 
5517 static void nfs4_handle_setlk_error(struct nfs_server *server, struct nfs4_lock_state *lsp, int new_lock_owner, int error)
5518 {
5519 	switch (error) {
5520 	case -NFS4ERR_ADMIN_REVOKED:
5521 	case -NFS4ERR_BAD_STATEID:
5522 		lsp->ls_seqid.flags &= ~NFS_SEQID_CONFIRMED;
5523 		if (new_lock_owner != 0 ||
5524 		   test_bit(NFS_LOCK_INITIALIZED, &lsp->ls_flags) != 0)
5525 			nfs4_schedule_stateid_recovery(server, lsp->ls_state);
5526 		break;
5527 	case -NFS4ERR_STALE_STATEID:
5528 		lsp->ls_seqid.flags &= ~NFS_SEQID_CONFIRMED;
5529 	case -NFS4ERR_EXPIRED:
5530 		nfs4_schedule_lease_recovery(server->nfs_client);
5531 	};
5532 }
5533 
5534 static int _nfs4_do_setlk(struct nfs4_state *state, int cmd, struct file_lock *fl, int recovery_type)
5535 {
5536 	struct nfs4_lockdata *data;
5537 	struct rpc_task *task;
5538 	struct rpc_message msg = {
5539 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_LOCK],
5540 		.rpc_cred = state->owner->so_cred,
5541 	};
5542 	struct rpc_task_setup task_setup_data = {
5543 		.rpc_client = NFS_CLIENT(state->inode),
5544 		.rpc_message = &msg,
5545 		.callback_ops = &nfs4_lock_ops,
5546 		.workqueue = nfsiod_workqueue,
5547 		.flags = RPC_TASK_ASYNC,
5548 	};
5549 	int ret;
5550 
5551 	dprintk("%s: begin!\n", __func__);
5552 	data = nfs4_alloc_lockdata(fl, nfs_file_open_context(fl->fl_file),
5553 			fl->fl_u.nfs4_fl.owner,
5554 			recovery_type == NFS_LOCK_NEW ? GFP_KERNEL : GFP_NOFS);
5555 	if (data == NULL)
5556 		return -ENOMEM;
5557 	if (IS_SETLKW(cmd))
5558 		data->arg.block = 1;
5559 	nfs4_init_sequence(&data->arg.seq_args, &data->res.seq_res, 1);
5560 	msg.rpc_argp = &data->arg;
5561 	msg.rpc_resp = &data->res;
5562 	task_setup_data.callback_data = data;
5563 	if (recovery_type > NFS_LOCK_NEW) {
5564 		if (recovery_type == NFS_LOCK_RECLAIM)
5565 			data->arg.reclaim = NFS_LOCK_RECLAIM;
5566 		nfs4_set_sequence_privileged(&data->arg.seq_args);
5567 	}
5568 	task = rpc_run_task(&task_setup_data);
5569 	if (IS_ERR(task))
5570 		return PTR_ERR(task);
5571 	ret = nfs4_wait_for_completion_rpc_task(task);
5572 	if (ret == 0) {
5573 		ret = data->rpc_status;
5574 		if (ret)
5575 			nfs4_handle_setlk_error(data->server, data->lsp,
5576 					data->arg.new_lock_owner, ret);
5577 	} else
5578 		data->cancelled = 1;
5579 	rpc_put_task(task);
5580 	dprintk("%s: done, ret = %d!\n", __func__, ret);
5581 	return ret;
5582 }
5583 
5584 static int nfs4_lock_reclaim(struct nfs4_state *state, struct file_lock *request)
5585 {
5586 	struct nfs_server *server = NFS_SERVER(state->inode);
5587 	struct nfs4_exception exception = {
5588 		.inode = state->inode,
5589 	};
5590 	int err;
5591 
5592 	do {
5593 		/* Cache the lock if possible... */
5594 		if (test_bit(NFS_DELEGATED_STATE, &state->flags) != 0)
5595 			return 0;
5596 		err = _nfs4_do_setlk(state, F_SETLK, request, NFS_LOCK_RECLAIM);
5597 		trace_nfs4_lock_reclaim(request, state, F_SETLK, err);
5598 		if (err != -NFS4ERR_DELAY)
5599 			break;
5600 		nfs4_handle_exception(server, err, &exception);
5601 	} while (exception.retry);
5602 	return err;
5603 }
5604 
5605 static int nfs4_lock_expired(struct nfs4_state *state, struct file_lock *request)
5606 {
5607 	struct nfs_server *server = NFS_SERVER(state->inode);
5608 	struct nfs4_exception exception = {
5609 		.inode = state->inode,
5610 	};
5611 	int err;
5612 
5613 	err = nfs4_set_lock_state(state, request);
5614 	if (err != 0)
5615 		return err;
5616 	if (!recover_lost_locks) {
5617 		set_bit(NFS_LOCK_LOST, &request->fl_u.nfs4_fl.owner->ls_flags);
5618 		return 0;
5619 	}
5620 	do {
5621 		if (test_bit(NFS_DELEGATED_STATE, &state->flags) != 0)
5622 			return 0;
5623 		err = _nfs4_do_setlk(state, F_SETLK, request, NFS_LOCK_EXPIRED);
5624 		trace_nfs4_lock_expired(request, state, F_SETLK, err);
5625 		switch (err) {
5626 		default:
5627 			goto out;
5628 		case -NFS4ERR_GRACE:
5629 		case -NFS4ERR_DELAY:
5630 			nfs4_handle_exception(server, err, &exception);
5631 			err = 0;
5632 		}
5633 	} while (exception.retry);
5634 out:
5635 	return err;
5636 }
5637 
5638 #if defined(CONFIG_NFS_V4_1)
5639 /**
5640  * nfs41_check_expired_locks - possibly free a lock stateid
5641  *
5642  * @state: NFSv4 state for an inode
5643  *
5644  * Returns NFS_OK if recovery for this stateid is now finished.
5645  * Otherwise a negative NFS4ERR value is returned.
5646  */
5647 static int nfs41_check_expired_locks(struct nfs4_state *state)
5648 {
5649 	int status, ret = -NFS4ERR_BAD_STATEID;
5650 	struct nfs4_lock_state *lsp;
5651 	struct nfs_server *server = NFS_SERVER(state->inode);
5652 
5653 	list_for_each_entry(lsp, &state->lock_states, ls_locks) {
5654 		if (test_bit(NFS_LOCK_INITIALIZED, &lsp->ls_flags)) {
5655 			struct rpc_cred *cred = lsp->ls_state->owner->so_cred;
5656 
5657 			status = nfs41_test_stateid(server,
5658 					&lsp->ls_stateid,
5659 					cred);
5660 			trace_nfs4_test_lock_stateid(state, lsp, status);
5661 			if (status != NFS_OK) {
5662 				/* Free the stateid unless the server
5663 				 * informs us the stateid is unrecognized. */
5664 				if (status != -NFS4ERR_BAD_STATEID)
5665 					nfs41_free_stateid(server,
5666 							&lsp->ls_stateid,
5667 							cred);
5668 				clear_bit(NFS_LOCK_INITIALIZED, &lsp->ls_flags);
5669 				ret = status;
5670 			}
5671 		}
5672 	};
5673 
5674 	return ret;
5675 }
5676 
5677 static int nfs41_lock_expired(struct nfs4_state *state, struct file_lock *request)
5678 {
5679 	int status = NFS_OK;
5680 
5681 	if (test_bit(LK_STATE_IN_USE, &state->flags))
5682 		status = nfs41_check_expired_locks(state);
5683 	if (status != NFS_OK)
5684 		status = nfs4_lock_expired(state, request);
5685 	return status;
5686 }
5687 #endif
5688 
5689 static int _nfs4_proc_setlk(struct nfs4_state *state, int cmd, struct file_lock *request)
5690 {
5691 	struct nfs4_state_owner *sp = state->owner;
5692 	struct nfs_inode *nfsi = NFS_I(state->inode);
5693 	unsigned char fl_flags = request->fl_flags;
5694 	unsigned int seq;
5695 	int status = -ENOLCK;
5696 
5697 	if ((fl_flags & FL_POSIX) &&
5698 			!test_bit(NFS_STATE_POSIX_LOCKS, &state->flags))
5699 		goto out;
5700 	/* Is this a delegated open? */
5701 	status = nfs4_set_lock_state(state, request);
5702 	if (status != 0)
5703 		goto out;
5704 	request->fl_flags |= FL_ACCESS;
5705 	status = do_vfs_lock(request->fl_file, request);
5706 	if (status < 0)
5707 		goto out;
5708 	down_read(&nfsi->rwsem);
5709 	if (test_bit(NFS_DELEGATED_STATE, &state->flags)) {
5710 		/* Yes: cache locks! */
5711 		/* ...but avoid races with delegation recall... */
5712 		request->fl_flags = fl_flags & ~FL_SLEEP;
5713 		status = do_vfs_lock(request->fl_file, request);
5714 		goto out_unlock;
5715 	}
5716 	seq = raw_seqcount_begin(&sp->so_reclaim_seqcount);
5717 	up_read(&nfsi->rwsem);
5718 	status = _nfs4_do_setlk(state, cmd, request, NFS_LOCK_NEW);
5719 	if (status != 0)
5720 		goto out;
5721 	down_read(&nfsi->rwsem);
5722 	if (read_seqcount_retry(&sp->so_reclaim_seqcount, seq)) {
5723 		status = -NFS4ERR_DELAY;
5724 		goto out_unlock;
5725 	}
5726 	/* Note: we always want to sleep here! */
5727 	request->fl_flags = fl_flags | FL_SLEEP;
5728 	if (do_vfs_lock(request->fl_file, request) < 0)
5729 		printk(KERN_WARNING "NFS: %s: VFS is out of sync with lock "
5730 			"manager!\n", __func__);
5731 out_unlock:
5732 	up_read(&nfsi->rwsem);
5733 out:
5734 	request->fl_flags = fl_flags;
5735 	return status;
5736 }
5737 
5738 static int nfs4_proc_setlk(struct nfs4_state *state, int cmd, struct file_lock *request)
5739 {
5740 	struct nfs4_exception exception = {
5741 		.state = state,
5742 		.inode = state->inode,
5743 	};
5744 	int err;
5745 
5746 	do {
5747 		err = _nfs4_proc_setlk(state, cmd, request);
5748 		trace_nfs4_set_lock(request, state, cmd, err);
5749 		if (err == -NFS4ERR_DENIED)
5750 			err = -EAGAIN;
5751 		err = nfs4_handle_exception(NFS_SERVER(state->inode),
5752 				err, &exception);
5753 	} while (exception.retry);
5754 	return err;
5755 }
5756 
5757 static int
5758 nfs4_proc_lock(struct file *filp, int cmd, struct file_lock *request)
5759 {
5760 	struct nfs_open_context *ctx;
5761 	struct nfs4_state *state;
5762 	unsigned long timeout = NFS4_LOCK_MINTIMEOUT;
5763 	int status;
5764 
5765 	/* verify open state */
5766 	ctx = nfs_file_open_context(filp);
5767 	state = ctx->state;
5768 
5769 	if (request->fl_start < 0 || request->fl_end < 0)
5770 		return -EINVAL;
5771 
5772 	if (IS_GETLK(cmd)) {
5773 		if (state != NULL)
5774 			return nfs4_proc_getlk(state, F_GETLK, request);
5775 		return 0;
5776 	}
5777 
5778 	if (!(IS_SETLK(cmd) || IS_SETLKW(cmd)))
5779 		return -EINVAL;
5780 
5781 	if (request->fl_type == F_UNLCK) {
5782 		if (state != NULL)
5783 			return nfs4_proc_unlck(state, cmd, request);
5784 		return 0;
5785 	}
5786 
5787 	if (state == NULL)
5788 		return -ENOLCK;
5789 	/*
5790 	 * Don't rely on the VFS having checked the file open mode,
5791 	 * since it won't do this for flock() locks.
5792 	 */
5793 	switch (request->fl_type) {
5794 	case F_RDLCK:
5795 		if (!(filp->f_mode & FMODE_READ))
5796 			return -EBADF;
5797 		break;
5798 	case F_WRLCK:
5799 		if (!(filp->f_mode & FMODE_WRITE))
5800 			return -EBADF;
5801 	}
5802 
5803 	do {
5804 		status = nfs4_proc_setlk(state, cmd, request);
5805 		if ((status != -EAGAIN) || IS_SETLK(cmd))
5806 			break;
5807 		timeout = nfs4_set_lock_task_retry(timeout);
5808 		status = -ERESTARTSYS;
5809 		if (signalled())
5810 			break;
5811 	} while(status < 0);
5812 	return status;
5813 }
5814 
5815 int nfs4_lock_delegation_recall(struct file_lock *fl, struct nfs4_state *state, const nfs4_stateid *stateid)
5816 {
5817 	struct nfs_server *server = NFS_SERVER(state->inode);
5818 	int err;
5819 
5820 	err = nfs4_set_lock_state(state, fl);
5821 	if (err != 0)
5822 		return err;
5823 	err = _nfs4_do_setlk(state, F_SETLK, fl, NFS_LOCK_NEW);
5824 	return nfs4_handle_delegation_recall_error(server, state, stateid, err);
5825 }
5826 
5827 struct nfs_release_lockowner_data {
5828 	struct nfs4_lock_state *lsp;
5829 	struct nfs_server *server;
5830 	struct nfs_release_lockowner_args args;
5831 	struct nfs4_sequence_args seq_args;
5832 	struct nfs4_sequence_res seq_res;
5833 	unsigned long timestamp;
5834 };
5835 
5836 static void nfs4_release_lockowner_prepare(struct rpc_task *task, void *calldata)
5837 {
5838 	struct nfs_release_lockowner_data *data = calldata;
5839 	nfs40_setup_sequence(data->server,
5840 				&data->seq_args, &data->seq_res, task);
5841 	data->timestamp = jiffies;
5842 }
5843 
5844 static void nfs4_release_lockowner_done(struct rpc_task *task, void *calldata)
5845 {
5846 	struct nfs_release_lockowner_data *data = calldata;
5847 	struct nfs_server *server = data->server;
5848 
5849 	nfs40_sequence_done(task, &data->seq_res);
5850 
5851 	switch (task->tk_status) {
5852 	case 0:
5853 		renew_lease(server, data->timestamp);
5854 		break;
5855 	case -NFS4ERR_STALE_CLIENTID:
5856 	case -NFS4ERR_EXPIRED:
5857 	case -NFS4ERR_LEASE_MOVED:
5858 	case -NFS4ERR_DELAY:
5859 		if (nfs4_async_handle_error(task, server, NULL) == -EAGAIN)
5860 			rpc_restart_call_prepare(task);
5861 	}
5862 }
5863 
5864 static void nfs4_release_lockowner_release(void *calldata)
5865 {
5866 	struct nfs_release_lockowner_data *data = calldata;
5867 	nfs4_free_lock_state(data->server, data->lsp);
5868 	kfree(calldata);
5869 }
5870 
5871 static const struct rpc_call_ops nfs4_release_lockowner_ops = {
5872 	.rpc_call_prepare = nfs4_release_lockowner_prepare,
5873 	.rpc_call_done = nfs4_release_lockowner_done,
5874 	.rpc_release = nfs4_release_lockowner_release,
5875 };
5876 
5877 static int nfs4_release_lockowner(struct nfs_server *server, struct nfs4_lock_state *lsp)
5878 {
5879 	struct nfs_release_lockowner_data *data;
5880 	struct rpc_message msg = {
5881 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_RELEASE_LOCKOWNER],
5882 	};
5883 
5884 	if (server->nfs_client->cl_mvops->minor_version != 0)
5885 		return -EINVAL;
5886 
5887 	data = kmalloc(sizeof(*data), GFP_NOFS);
5888 	if (!data)
5889 		return -ENOMEM;
5890 	nfs4_init_sequence(&data->seq_args, &data->seq_res, 0);
5891 	data->lsp = lsp;
5892 	data->server = server;
5893 	data->args.lock_owner.clientid = server->nfs_client->cl_clientid;
5894 	data->args.lock_owner.id = lsp->ls_seqid.owner_id;
5895 	data->args.lock_owner.s_dev = server->s_dev;
5896 
5897 	msg.rpc_argp = &data->args;
5898 	rpc_call_async(server->client, &msg, 0, &nfs4_release_lockowner_ops, data);
5899 	return 0;
5900 }
5901 
5902 #define XATTR_NAME_NFSV4_ACL "system.nfs4_acl"
5903 
5904 static int nfs4_xattr_set_nfs4_acl(struct dentry *dentry, const char *key,
5905 				   const void *buf, size_t buflen,
5906 				   int flags, int type)
5907 {
5908 	if (strcmp(key, "") != 0)
5909 		return -EINVAL;
5910 
5911 	return nfs4_proc_set_acl(dentry->d_inode, buf, buflen);
5912 }
5913 
5914 static int nfs4_xattr_get_nfs4_acl(struct dentry *dentry, const char *key,
5915 				   void *buf, size_t buflen, int type)
5916 {
5917 	if (strcmp(key, "") != 0)
5918 		return -EINVAL;
5919 
5920 	return nfs4_proc_get_acl(dentry->d_inode, buf, buflen);
5921 }
5922 
5923 static size_t nfs4_xattr_list_nfs4_acl(struct dentry *dentry, char *list,
5924 				       size_t list_len, const char *name,
5925 				       size_t name_len, int type)
5926 {
5927 	size_t len = sizeof(XATTR_NAME_NFSV4_ACL);
5928 
5929 	if (!nfs4_server_supports_acls(NFS_SERVER(dentry->d_inode)))
5930 		return 0;
5931 
5932 	if (list && len <= list_len)
5933 		memcpy(list, XATTR_NAME_NFSV4_ACL, len);
5934 	return len;
5935 }
5936 
5937 #ifdef CONFIG_NFS_V4_SECURITY_LABEL
5938 static inline int nfs4_server_supports_labels(struct nfs_server *server)
5939 {
5940 	return server->caps & NFS_CAP_SECURITY_LABEL;
5941 }
5942 
5943 static int nfs4_xattr_set_nfs4_label(struct dentry *dentry, const char *key,
5944 				   const void *buf, size_t buflen,
5945 				   int flags, int type)
5946 {
5947 	if (security_ismaclabel(key))
5948 		return nfs4_set_security_label(dentry, buf, buflen);
5949 
5950 	return -EOPNOTSUPP;
5951 }
5952 
5953 static int nfs4_xattr_get_nfs4_label(struct dentry *dentry, const char *key,
5954 				   void *buf, size_t buflen, int type)
5955 {
5956 	if (security_ismaclabel(key))
5957 		return nfs4_get_security_label(dentry->d_inode, buf, buflen);
5958 	return -EOPNOTSUPP;
5959 }
5960 
5961 static size_t nfs4_xattr_list_nfs4_label(struct dentry *dentry, char *list,
5962 				       size_t list_len, const char *name,
5963 				       size_t name_len, int type)
5964 {
5965 	size_t len = 0;
5966 
5967 	if (nfs_server_capable(dentry->d_inode, NFS_CAP_SECURITY_LABEL)) {
5968 		len = security_inode_listsecurity(dentry->d_inode, NULL, 0);
5969 		if (list && len <= list_len)
5970 			security_inode_listsecurity(dentry->d_inode, list, len);
5971 	}
5972 	return len;
5973 }
5974 
5975 static const struct xattr_handler nfs4_xattr_nfs4_label_handler = {
5976 	.prefix = XATTR_SECURITY_PREFIX,
5977 	.list	= nfs4_xattr_list_nfs4_label,
5978 	.get	= nfs4_xattr_get_nfs4_label,
5979 	.set	= nfs4_xattr_set_nfs4_label,
5980 };
5981 #endif
5982 
5983 
5984 /*
5985  * nfs_fhget will use either the mounted_on_fileid or the fileid
5986  */
5987 static void nfs_fixup_referral_attributes(struct nfs_fattr *fattr)
5988 {
5989 	if (!(((fattr->valid & NFS_ATTR_FATTR_MOUNTED_ON_FILEID) ||
5990 	       (fattr->valid & NFS_ATTR_FATTR_FILEID)) &&
5991 	      (fattr->valid & NFS_ATTR_FATTR_FSID) &&
5992 	      (fattr->valid & NFS_ATTR_FATTR_V4_LOCATIONS)))
5993 		return;
5994 
5995 	fattr->valid |= NFS_ATTR_FATTR_TYPE | NFS_ATTR_FATTR_MODE |
5996 		NFS_ATTR_FATTR_NLINK | NFS_ATTR_FATTR_V4_REFERRAL;
5997 	fattr->mode = S_IFDIR | S_IRUGO | S_IXUGO;
5998 	fattr->nlink = 2;
5999 }
6000 
6001 static int _nfs4_proc_fs_locations(struct rpc_clnt *client, struct inode *dir,
6002 				   const struct qstr *name,
6003 				   struct nfs4_fs_locations *fs_locations,
6004 				   struct page *page)
6005 {
6006 	struct nfs_server *server = NFS_SERVER(dir);
6007 	u32 bitmask[3] = {
6008 		[0] = FATTR4_WORD0_FSID | FATTR4_WORD0_FS_LOCATIONS,
6009 	};
6010 	struct nfs4_fs_locations_arg args = {
6011 		.dir_fh = NFS_FH(dir),
6012 		.name = name,
6013 		.page = page,
6014 		.bitmask = bitmask,
6015 	};
6016 	struct nfs4_fs_locations_res res = {
6017 		.fs_locations = fs_locations,
6018 	};
6019 	struct rpc_message msg = {
6020 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_FS_LOCATIONS],
6021 		.rpc_argp = &args,
6022 		.rpc_resp = &res,
6023 	};
6024 	int status;
6025 
6026 	dprintk("%s: start\n", __func__);
6027 
6028 	/* Ask for the fileid of the absent filesystem if mounted_on_fileid
6029 	 * is not supported */
6030 	if (NFS_SERVER(dir)->attr_bitmask[1] & FATTR4_WORD1_MOUNTED_ON_FILEID)
6031 		bitmask[1] |= FATTR4_WORD1_MOUNTED_ON_FILEID;
6032 	else
6033 		bitmask[0] |= FATTR4_WORD0_FILEID;
6034 
6035 	nfs_fattr_init(&fs_locations->fattr);
6036 	fs_locations->server = server;
6037 	fs_locations->nlocations = 0;
6038 	status = nfs4_call_sync(client, server, &msg, &args.seq_args, &res.seq_res, 0);
6039 	dprintk("%s: returned status = %d\n", __func__, status);
6040 	return status;
6041 }
6042 
6043 int nfs4_proc_fs_locations(struct rpc_clnt *client, struct inode *dir,
6044 			   const struct qstr *name,
6045 			   struct nfs4_fs_locations *fs_locations,
6046 			   struct page *page)
6047 {
6048 	struct nfs4_exception exception = { };
6049 	int err;
6050 	do {
6051 		err = _nfs4_proc_fs_locations(client, dir, name,
6052 				fs_locations, page);
6053 		trace_nfs4_get_fs_locations(dir, name, err);
6054 		err = nfs4_handle_exception(NFS_SERVER(dir), err,
6055 				&exception);
6056 	} while (exception.retry);
6057 	return err;
6058 }
6059 
6060 /*
6061  * This operation also signals the server that this client is
6062  * performing migration recovery.  The server can stop returning
6063  * NFS4ERR_LEASE_MOVED to this client.  A RENEW operation is
6064  * appended to this compound to identify the client ID which is
6065  * performing recovery.
6066  */
6067 static int _nfs40_proc_get_locations(struct inode *inode,
6068 				     struct nfs4_fs_locations *locations,
6069 				     struct page *page, struct rpc_cred *cred)
6070 {
6071 	struct nfs_server *server = NFS_SERVER(inode);
6072 	struct rpc_clnt *clnt = server->client;
6073 	u32 bitmask[2] = {
6074 		[0] = FATTR4_WORD0_FSID | FATTR4_WORD0_FS_LOCATIONS,
6075 	};
6076 	struct nfs4_fs_locations_arg args = {
6077 		.clientid	= server->nfs_client->cl_clientid,
6078 		.fh		= NFS_FH(inode),
6079 		.page		= page,
6080 		.bitmask	= bitmask,
6081 		.migration	= 1,		/* skip LOOKUP */
6082 		.renew		= 1,		/* append RENEW */
6083 	};
6084 	struct nfs4_fs_locations_res res = {
6085 		.fs_locations	= locations,
6086 		.migration	= 1,
6087 		.renew		= 1,
6088 	};
6089 	struct rpc_message msg = {
6090 		.rpc_proc	= &nfs4_procedures[NFSPROC4_CLNT_FS_LOCATIONS],
6091 		.rpc_argp	= &args,
6092 		.rpc_resp	= &res,
6093 		.rpc_cred	= cred,
6094 	};
6095 	unsigned long now = jiffies;
6096 	int status;
6097 
6098 	nfs_fattr_init(&locations->fattr);
6099 	locations->server = server;
6100 	locations->nlocations = 0;
6101 
6102 	nfs4_init_sequence(&args.seq_args, &res.seq_res, 0);
6103 	nfs4_set_sequence_privileged(&args.seq_args);
6104 	status = nfs4_call_sync_sequence(clnt, server, &msg,
6105 					&args.seq_args, &res.seq_res);
6106 	if (status)
6107 		return status;
6108 
6109 	renew_lease(server, now);
6110 	return 0;
6111 }
6112 
6113 #ifdef CONFIG_NFS_V4_1
6114 
6115 /*
6116  * This operation also signals the server that this client is
6117  * performing migration recovery.  The server can stop asserting
6118  * SEQ4_STATUS_LEASE_MOVED for this client.  The client ID
6119  * performing this operation is identified in the SEQUENCE
6120  * operation in this compound.
6121  *
6122  * When the client supports GETATTR(fs_locations_info), it can
6123  * be plumbed in here.
6124  */
6125 static int _nfs41_proc_get_locations(struct inode *inode,
6126 				     struct nfs4_fs_locations *locations,
6127 				     struct page *page, struct rpc_cred *cred)
6128 {
6129 	struct nfs_server *server = NFS_SERVER(inode);
6130 	struct rpc_clnt *clnt = server->client;
6131 	u32 bitmask[2] = {
6132 		[0] = FATTR4_WORD0_FSID | FATTR4_WORD0_FS_LOCATIONS,
6133 	};
6134 	struct nfs4_fs_locations_arg args = {
6135 		.fh		= NFS_FH(inode),
6136 		.page		= page,
6137 		.bitmask	= bitmask,
6138 		.migration	= 1,		/* skip LOOKUP */
6139 	};
6140 	struct nfs4_fs_locations_res res = {
6141 		.fs_locations	= locations,
6142 		.migration	= 1,
6143 	};
6144 	struct rpc_message msg = {
6145 		.rpc_proc	= &nfs4_procedures[NFSPROC4_CLNT_FS_LOCATIONS],
6146 		.rpc_argp	= &args,
6147 		.rpc_resp	= &res,
6148 		.rpc_cred	= cred,
6149 	};
6150 	int status;
6151 
6152 	nfs_fattr_init(&locations->fattr);
6153 	locations->server = server;
6154 	locations->nlocations = 0;
6155 
6156 	nfs4_init_sequence(&args.seq_args, &res.seq_res, 0);
6157 	nfs4_set_sequence_privileged(&args.seq_args);
6158 	status = nfs4_call_sync_sequence(clnt, server, &msg,
6159 					&args.seq_args, &res.seq_res);
6160 	if (status == NFS4_OK &&
6161 	    res.seq_res.sr_status_flags & SEQ4_STATUS_LEASE_MOVED)
6162 		status = -NFS4ERR_LEASE_MOVED;
6163 	return status;
6164 }
6165 
6166 #endif	/* CONFIG_NFS_V4_1 */
6167 
6168 /**
6169  * nfs4_proc_get_locations - discover locations for a migrated FSID
6170  * @inode: inode on FSID that is migrating
6171  * @locations: result of query
6172  * @page: buffer
6173  * @cred: credential to use for this operation
6174  *
6175  * Returns NFS4_OK on success, a negative NFS4ERR status code if the
6176  * operation failed, or a negative errno if a local error occurred.
6177  *
6178  * On success, "locations" is filled in, but if the server has
6179  * no locations information, NFS_ATTR_FATTR_V4_LOCATIONS is not
6180  * asserted.
6181  *
6182  * -NFS4ERR_LEASE_MOVED is returned if the server still has leases
6183  * from this client that require migration recovery.
6184  */
6185 int nfs4_proc_get_locations(struct inode *inode,
6186 			    struct nfs4_fs_locations *locations,
6187 			    struct page *page, struct rpc_cred *cred)
6188 {
6189 	struct nfs_server *server = NFS_SERVER(inode);
6190 	struct nfs_client *clp = server->nfs_client;
6191 	const struct nfs4_mig_recovery_ops *ops =
6192 					clp->cl_mvops->mig_recovery_ops;
6193 	struct nfs4_exception exception = { };
6194 	int status;
6195 
6196 	dprintk("%s: FSID %llx:%llx on \"%s\"\n", __func__,
6197 		(unsigned long long)server->fsid.major,
6198 		(unsigned long long)server->fsid.minor,
6199 		clp->cl_hostname);
6200 	nfs_display_fhandle(NFS_FH(inode), __func__);
6201 
6202 	do {
6203 		status = ops->get_locations(inode, locations, page, cred);
6204 		if (status != -NFS4ERR_DELAY)
6205 			break;
6206 		nfs4_handle_exception(server, status, &exception);
6207 	} while (exception.retry);
6208 	return status;
6209 }
6210 
6211 /*
6212  * This operation also signals the server that this client is
6213  * performing "lease moved" recovery.  The server can stop
6214  * returning NFS4ERR_LEASE_MOVED to this client.  A RENEW operation
6215  * is appended to this compound to identify the client ID which is
6216  * performing recovery.
6217  */
6218 static int _nfs40_proc_fsid_present(struct inode *inode, struct rpc_cred *cred)
6219 {
6220 	struct nfs_server *server = NFS_SERVER(inode);
6221 	struct nfs_client *clp = NFS_SERVER(inode)->nfs_client;
6222 	struct rpc_clnt *clnt = server->client;
6223 	struct nfs4_fsid_present_arg args = {
6224 		.fh		= NFS_FH(inode),
6225 		.clientid	= clp->cl_clientid,
6226 		.renew		= 1,		/* append RENEW */
6227 	};
6228 	struct nfs4_fsid_present_res res = {
6229 		.renew		= 1,
6230 	};
6231 	struct rpc_message msg = {
6232 		.rpc_proc	= &nfs4_procedures[NFSPROC4_CLNT_FSID_PRESENT],
6233 		.rpc_argp	= &args,
6234 		.rpc_resp	= &res,
6235 		.rpc_cred	= cred,
6236 	};
6237 	unsigned long now = jiffies;
6238 	int status;
6239 
6240 	res.fh = nfs_alloc_fhandle();
6241 	if (res.fh == NULL)
6242 		return -ENOMEM;
6243 
6244 	nfs4_init_sequence(&args.seq_args, &res.seq_res, 0);
6245 	nfs4_set_sequence_privileged(&args.seq_args);
6246 	status = nfs4_call_sync_sequence(clnt, server, &msg,
6247 						&args.seq_args, &res.seq_res);
6248 	nfs_free_fhandle(res.fh);
6249 	if (status)
6250 		return status;
6251 
6252 	do_renew_lease(clp, now);
6253 	return 0;
6254 }
6255 
6256 #ifdef CONFIG_NFS_V4_1
6257 
6258 /*
6259  * This operation also signals the server that this client is
6260  * performing "lease moved" recovery.  The server can stop asserting
6261  * SEQ4_STATUS_LEASE_MOVED for this client.  The client ID performing
6262  * this operation is identified in the SEQUENCE operation in this
6263  * compound.
6264  */
6265 static int _nfs41_proc_fsid_present(struct inode *inode, struct rpc_cred *cred)
6266 {
6267 	struct nfs_server *server = NFS_SERVER(inode);
6268 	struct rpc_clnt *clnt = server->client;
6269 	struct nfs4_fsid_present_arg args = {
6270 		.fh		= NFS_FH(inode),
6271 	};
6272 	struct nfs4_fsid_present_res res = {
6273 	};
6274 	struct rpc_message msg = {
6275 		.rpc_proc	= &nfs4_procedures[NFSPROC4_CLNT_FSID_PRESENT],
6276 		.rpc_argp	= &args,
6277 		.rpc_resp	= &res,
6278 		.rpc_cred	= cred,
6279 	};
6280 	int status;
6281 
6282 	res.fh = nfs_alloc_fhandle();
6283 	if (res.fh == NULL)
6284 		return -ENOMEM;
6285 
6286 	nfs4_init_sequence(&args.seq_args, &res.seq_res, 0);
6287 	nfs4_set_sequence_privileged(&args.seq_args);
6288 	status = nfs4_call_sync_sequence(clnt, server, &msg,
6289 						&args.seq_args, &res.seq_res);
6290 	nfs_free_fhandle(res.fh);
6291 	if (status == NFS4_OK &&
6292 	    res.seq_res.sr_status_flags & SEQ4_STATUS_LEASE_MOVED)
6293 		status = -NFS4ERR_LEASE_MOVED;
6294 	return status;
6295 }
6296 
6297 #endif	/* CONFIG_NFS_V4_1 */
6298 
6299 /**
6300  * nfs4_proc_fsid_present - Is this FSID present or absent on server?
6301  * @inode: inode on FSID to check
6302  * @cred: credential to use for this operation
6303  *
6304  * Server indicates whether the FSID is present, moved, or not
6305  * recognized.  This operation is necessary to clear a LEASE_MOVED
6306  * condition for this client ID.
6307  *
6308  * Returns NFS4_OK if the FSID is present on this server,
6309  * -NFS4ERR_MOVED if the FSID is no longer present, a negative
6310  *  NFS4ERR code if some error occurred on the server, or a
6311  *  negative errno if a local failure occurred.
6312  */
6313 int nfs4_proc_fsid_present(struct inode *inode, struct rpc_cred *cred)
6314 {
6315 	struct nfs_server *server = NFS_SERVER(inode);
6316 	struct nfs_client *clp = server->nfs_client;
6317 	const struct nfs4_mig_recovery_ops *ops =
6318 					clp->cl_mvops->mig_recovery_ops;
6319 	struct nfs4_exception exception = { };
6320 	int status;
6321 
6322 	dprintk("%s: FSID %llx:%llx on \"%s\"\n", __func__,
6323 		(unsigned long long)server->fsid.major,
6324 		(unsigned long long)server->fsid.minor,
6325 		clp->cl_hostname);
6326 	nfs_display_fhandle(NFS_FH(inode), __func__);
6327 
6328 	do {
6329 		status = ops->fsid_present(inode, cred);
6330 		if (status != -NFS4ERR_DELAY)
6331 			break;
6332 		nfs4_handle_exception(server, status, &exception);
6333 	} while (exception.retry);
6334 	return status;
6335 }
6336 
6337 /**
6338  * If 'use_integrity' is true and the state managment nfs_client
6339  * cl_rpcclient is using krb5i/p, use the integrity protected cl_rpcclient
6340  * and the machine credential as per RFC3530bis and RFC5661 Security
6341  * Considerations sections. Otherwise, just use the user cred with the
6342  * filesystem's rpc_client.
6343  */
6344 static int _nfs4_proc_secinfo(struct inode *dir, const struct qstr *name, struct nfs4_secinfo_flavors *flavors, bool use_integrity)
6345 {
6346 	int status;
6347 	struct nfs4_secinfo_arg args = {
6348 		.dir_fh = NFS_FH(dir),
6349 		.name   = name,
6350 	};
6351 	struct nfs4_secinfo_res res = {
6352 		.flavors     = flavors,
6353 	};
6354 	struct rpc_message msg = {
6355 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_SECINFO],
6356 		.rpc_argp = &args,
6357 		.rpc_resp = &res,
6358 	};
6359 	struct rpc_clnt *clnt = NFS_SERVER(dir)->client;
6360 	struct rpc_cred *cred = NULL;
6361 
6362 	if (use_integrity) {
6363 		clnt = NFS_SERVER(dir)->nfs_client->cl_rpcclient;
6364 		cred = nfs4_get_clid_cred(NFS_SERVER(dir)->nfs_client);
6365 		msg.rpc_cred = cred;
6366 	}
6367 
6368 	dprintk("NFS call  secinfo %s\n", name->name);
6369 
6370 	nfs4_state_protect(NFS_SERVER(dir)->nfs_client,
6371 		NFS_SP4_MACH_CRED_SECINFO, &clnt, &msg);
6372 
6373 	status = nfs4_call_sync(clnt, NFS_SERVER(dir), &msg, &args.seq_args,
6374 				&res.seq_res, 0);
6375 	dprintk("NFS reply  secinfo: %d\n", status);
6376 
6377 	if (cred)
6378 		put_rpccred(cred);
6379 
6380 	return status;
6381 }
6382 
6383 int nfs4_proc_secinfo(struct inode *dir, const struct qstr *name,
6384 		      struct nfs4_secinfo_flavors *flavors)
6385 {
6386 	struct nfs4_exception exception = { };
6387 	int err;
6388 	do {
6389 		err = -NFS4ERR_WRONGSEC;
6390 
6391 		/* try to use integrity protection with machine cred */
6392 		if (_nfs4_is_integrity_protected(NFS_SERVER(dir)->nfs_client))
6393 			err = _nfs4_proc_secinfo(dir, name, flavors, true);
6394 
6395 		/*
6396 		 * if unable to use integrity protection, or SECINFO with
6397 		 * integrity protection returns NFS4ERR_WRONGSEC (which is
6398 		 * disallowed by spec, but exists in deployed servers) use
6399 		 * the current filesystem's rpc_client and the user cred.
6400 		 */
6401 		if (err == -NFS4ERR_WRONGSEC)
6402 			err = _nfs4_proc_secinfo(dir, name, flavors, false);
6403 
6404 		trace_nfs4_secinfo(dir, name, err);
6405 		err = nfs4_handle_exception(NFS_SERVER(dir), err,
6406 				&exception);
6407 	} while (exception.retry);
6408 	return err;
6409 }
6410 
6411 #ifdef CONFIG_NFS_V4_1
6412 /*
6413  * Check the exchange flags returned by the server for invalid flags, having
6414  * both PNFS and NON_PNFS flags set, and not having one of NON_PNFS, PNFS, or
6415  * DS flags set.
6416  */
6417 static int nfs4_check_cl_exchange_flags(u32 flags)
6418 {
6419 	if (flags & ~EXCHGID4_FLAG_MASK_R)
6420 		goto out_inval;
6421 	if ((flags & EXCHGID4_FLAG_USE_PNFS_MDS) &&
6422 	    (flags & EXCHGID4_FLAG_USE_NON_PNFS))
6423 		goto out_inval;
6424 	if (!(flags & (EXCHGID4_FLAG_MASK_PNFS)))
6425 		goto out_inval;
6426 	return NFS_OK;
6427 out_inval:
6428 	return -NFS4ERR_INVAL;
6429 }
6430 
6431 static bool
6432 nfs41_same_server_scope(struct nfs41_server_scope *a,
6433 			struct nfs41_server_scope *b)
6434 {
6435 	if (a->server_scope_sz == b->server_scope_sz &&
6436 	    memcmp(a->server_scope, b->server_scope, a->server_scope_sz) == 0)
6437 		return true;
6438 
6439 	return false;
6440 }
6441 
6442 /*
6443  * nfs4_proc_bind_conn_to_session()
6444  *
6445  * The 4.1 client currently uses the same TCP connection for the
6446  * fore and backchannel.
6447  */
6448 int nfs4_proc_bind_conn_to_session(struct nfs_client *clp, struct rpc_cred *cred)
6449 {
6450 	int status;
6451 	struct nfs41_bind_conn_to_session_res res;
6452 	struct rpc_message msg = {
6453 		.rpc_proc =
6454 			&nfs4_procedures[NFSPROC4_CLNT_BIND_CONN_TO_SESSION],
6455 		.rpc_argp = clp,
6456 		.rpc_resp = &res,
6457 		.rpc_cred = cred,
6458 	};
6459 
6460 	dprintk("--> %s\n", __func__);
6461 
6462 	res.session = kzalloc(sizeof(struct nfs4_session), GFP_NOFS);
6463 	if (unlikely(res.session == NULL)) {
6464 		status = -ENOMEM;
6465 		goto out;
6466 	}
6467 
6468 	status = rpc_call_sync(clp->cl_rpcclient, &msg, RPC_TASK_TIMEOUT);
6469 	trace_nfs4_bind_conn_to_session(clp, status);
6470 	if (status == 0) {
6471 		if (memcmp(res.session->sess_id.data,
6472 		    clp->cl_session->sess_id.data, NFS4_MAX_SESSIONID_LEN)) {
6473 			dprintk("NFS: %s: Session ID mismatch\n", __func__);
6474 			status = -EIO;
6475 			goto out_session;
6476 		}
6477 		if (res.dir != NFS4_CDFS4_BOTH) {
6478 			dprintk("NFS: %s: Unexpected direction from server\n",
6479 				__func__);
6480 			status = -EIO;
6481 			goto out_session;
6482 		}
6483 		if (res.use_conn_in_rdma_mode) {
6484 			dprintk("NFS: %s: Server returned RDMA mode = true\n",
6485 				__func__);
6486 			status = -EIO;
6487 			goto out_session;
6488 		}
6489 	}
6490 out_session:
6491 	kfree(res.session);
6492 out:
6493 	dprintk("<-- %s status= %d\n", __func__, status);
6494 	return status;
6495 }
6496 
6497 /*
6498  * Minimum set of SP4_MACH_CRED operations from RFC 5661 in the enforce map
6499  * and operations we'd like to see to enable certain features in the allow map
6500  */
6501 static const struct nfs41_state_protection nfs4_sp4_mach_cred_request = {
6502 	.how = SP4_MACH_CRED,
6503 	.enforce.u.words = {
6504 		[1] = 1 << (OP_BIND_CONN_TO_SESSION - 32) |
6505 		      1 << (OP_EXCHANGE_ID - 32) |
6506 		      1 << (OP_CREATE_SESSION - 32) |
6507 		      1 << (OP_DESTROY_SESSION - 32) |
6508 		      1 << (OP_DESTROY_CLIENTID - 32)
6509 	},
6510 	.allow.u.words = {
6511 		[0] = 1 << (OP_CLOSE) |
6512 		      1 << (OP_LOCKU) |
6513 		      1 << (OP_COMMIT),
6514 		[1] = 1 << (OP_SECINFO - 32) |
6515 		      1 << (OP_SECINFO_NO_NAME - 32) |
6516 		      1 << (OP_TEST_STATEID - 32) |
6517 		      1 << (OP_FREE_STATEID - 32) |
6518 		      1 << (OP_WRITE - 32)
6519 	}
6520 };
6521 
6522 /*
6523  * Select the state protection mode for client `clp' given the server results
6524  * from exchange_id in `sp'.
6525  *
6526  * Returns 0 on success, negative errno otherwise.
6527  */
6528 static int nfs4_sp4_select_mode(struct nfs_client *clp,
6529 				 struct nfs41_state_protection *sp)
6530 {
6531 	static const u32 supported_enforce[NFS4_OP_MAP_NUM_WORDS] = {
6532 		[1] = 1 << (OP_BIND_CONN_TO_SESSION - 32) |
6533 		      1 << (OP_EXCHANGE_ID - 32) |
6534 		      1 << (OP_CREATE_SESSION - 32) |
6535 		      1 << (OP_DESTROY_SESSION - 32) |
6536 		      1 << (OP_DESTROY_CLIENTID - 32)
6537 	};
6538 	unsigned int i;
6539 
6540 	if (sp->how == SP4_MACH_CRED) {
6541 		/* Print state protect result */
6542 		dfprintk(MOUNT, "Server SP4_MACH_CRED support:\n");
6543 		for (i = 0; i <= LAST_NFS4_OP; i++) {
6544 			if (test_bit(i, sp->enforce.u.longs))
6545 				dfprintk(MOUNT, "  enforce op %d\n", i);
6546 			if (test_bit(i, sp->allow.u.longs))
6547 				dfprintk(MOUNT, "  allow op %d\n", i);
6548 		}
6549 
6550 		/* make sure nothing is on enforce list that isn't supported */
6551 		for (i = 0; i < NFS4_OP_MAP_NUM_WORDS; i++) {
6552 			if (sp->enforce.u.words[i] & ~supported_enforce[i]) {
6553 				dfprintk(MOUNT, "sp4_mach_cred: disabled\n");
6554 				return -EINVAL;
6555 			}
6556 		}
6557 
6558 		/*
6559 		 * Minimal mode - state operations are allowed to use machine
6560 		 * credential.  Note this already happens by default, so the
6561 		 * client doesn't have to do anything more than the negotiation.
6562 		 *
6563 		 * NOTE: we don't care if EXCHANGE_ID is in the list -
6564 		 *       we're already using the machine cred for exchange_id
6565 		 *       and will never use a different cred.
6566 		 */
6567 		if (test_bit(OP_BIND_CONN_TO_SESSION, sp->enforce.u.longs) &&
6568 		    test_bit(OP_CREATE_SESSION, sp->enforce.u.longs) &&
6569 		    test_bit(OP_DESTROY_SESSION, sp->enforce.u.longs) &&
6570 		    test_bit(OP_DESTROY_CLIENTID, sp->enforce.u.longs)) {
6571 			dfprintk(MOUNT, "sp4_mach_cred:\n");
6572 			dfprintk(MOUNT, "  minimal mode enabled\n");
6573 			set_bit(NFS_SP4_MACH_CRED_MINIMAL, &clp->cl_sp4_flags);
6574 		} else {
6575 			dfprintk(MOUNT, "sp4_mach_cred: disabled\n");
6576 			return -EINVAL;
6577 		}
6578 
6579 		if (test_bit(OP_CLOSE, sp->allow.u.longs) &&
6580 		    test_bit(OP_LOCKU, sp->allow.u.longs)) {
6581 			dfprintk(MOUNT, "  cleanup mode enabled\n");
6582 			set_bit(NFS_SP4_MACH_CRED_CLEANUP, &clp->cl_sp4_flags);
6583 		}
6584 
6585 		if (test_bit(OP_SECINFO, sp->allow.u.longs) &&
6586 		    test_bit(OP_SECINFO_NO_NAME, sp->allow.u.longs)) {
6587 			dfprintk(MOUNT, "  secinfo mode enabled\n");
6588 			set_bit(NFS_SP4_MACH_CRED_SECINFO, &clp->cl_sp4_flags);
6589 		}
6590 
6591 		if (test_bit(OP_TEST_STATEID, sp->allow.u.longs) &&
6592 		    test_bit(OP_FREE_STATEID, sp->allow.u.longs)) {
6593 			dfprintk(MOUNT, "  stateid mode enabled\n");
6594 			set_bit(NFS_SP4_MACH_CRED_STATEID, &clp->cl_sp4_flags);
6595 		}
6596 
6597 		if (test_bit(OP_WRITE, sp->allow.u.longs)) {
6598 			dfprintk(MOUNT, "  write mode enabled\n");
6599 			set_bit(NFS_SP4_MACH_CRED_WRITE, &clp->cl_sp4_flags);
6600 		}
6601 
6602 		if (test_bit(OP_COMMIT, sp->allow.u.longs)) {
6603 			dfprintk(MOUNT, "  commit mode enabled\n");
6604 			set_bit(NFS_SP4_MACH_CRED_COMMIT, &clp->cl_sp4_flags);
6605 		}
6606 	}
6607 
6608 	return 0;
6609 }
6610 
6611 /*
6612  * _nfs4_proc_exchange_id()
6613  *
6614  * Wrapper for EXCHANGE_ID operation.
6615  */
6616 static int _nfs4_proc_exchange_id(struct nfs_client *clp, struct rpc_cred *cred,
6617 	u32 sp4_how)
6618 {
6619 	nfs4_verifier verifier;
6620 	struct nfs41_exchange_id_args args = {
6621 		.verifier = &verifier,
6622 		.client = clp,
6623 #ifdef CONFIG_NFS_V4_1_MIGRATION
6624 		.flags = EXCHGID4_FLAG_SUPP_MOVED_REFER |
6625 			 EXCHGID4_FLAG_BIND_PRINC_STATEID |
6626 			 EXCHGID4_FLAG_SUPP_MOVED_MIGR,
6627 #else
6628 		.flags = EXCHGID4_FLAG_SUPP_MOVED_REFER |
6629 			 EXCHGID4_FLAG_BIND_PRINC_STATEID,
6630 #endif
6631 	};
6632 	struct nfs41_exchange_id_res res = {
6633 		0
6634 	};
6635 	int status;
6636 	struct rpc_message msg = {
6637 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_EXCHANGE_ID],
6638 		.rpc_argp = &args,
6639 		.rpc_resp = &res,
6640 		.rpc_cred = cred,
6641 	};
6642 
6643 	nfs4_init_boot_verifier(clp, &verifier);
6644 	args.id_len = nfs4_init_uniform_client_string(clp, args.id,
6645 							sizeof(args.id));
6646 	dprintk("NFS call  exchange_id auth=%s, '%.*s'\n",
6647 		clp->cl_rpcclient->cl_auth->au_ops->au_name,
6648 		args.id_len, args.id);
6649 
6650 	res.server_owner = kzalloc(sizeof(struct nfs41_server_owner),
6651 					GFP_NOFS);
6652 	if (unlikely(res.server_owner == NULL)) {
6653 		status = -ENOMEM;
6654 		goto out;
6655 	}
6656 
6657 	res.server_scope = kzalloc(sizeof(struct nfs41_server_scope),
6658 					GFP_NOFS);
6659 	if (unlikely(res.server_scope == NULL)) {
6660 		status = -ENOMEM;
6661 		goto out_server_owner;
6662 	}
6663 
6664 	res.impl_id = kzalloc(sizeof(struct nfs41_impl_id), GFP_NOFS);
6665 	if (unlikely(res.impl_id == NULL)) {
6666 		status = -ENOMEM;
6667 		goto out_server_scope;
6668 	}
6669 
6670 	switch (sp4_how) {
6671 	case SP4_NONE:
6672 		args.state_protect.how = SP4_NONE;
6673 		break;
6674 
6675 	case SP4_MACH_CRED:
6676 		args.state_protect = nfs4_sp4_mach_cred_request;
6677 		break;
6678 
6679 	default:
6680 		/* unsupported! */
6681 		WARN_ON_ONCE(1);
6682 		status = -EINVAL;
6683 		goto out_server_scope;
6684 	}
6685 
6686 	status = rpc_call_sync(clp->cl_rpcclient, &msg, RPC_TASK_TIMEOUT);
6687 	trace_nfs4_exchange_id(clp, status);
6688 	if (status == 0)
6689 		status = nfs4_check_cl_exchange_flags(res.flags);
6690 
6691 	if (status == 0)
6692 		status = nfs4_sp4_select_mode(clp, &res.state_protect);
6693 
6694 	if (status == 0) {
6695 		clp->cl_clientid = res.clientid;
6696 		clp->cl_exchange_flags = (res.flags & ~EXCHGID4_FLAG_CONFIRMED_R);
6697 		if (!(res.flags & EXCHGID4_FLAG_CONFIRMED_R))
6698 			clp->cl_seqid = res.seqid;
6699 
6700 		kfree(clp->cl_serverowner);
6701 		clp->cl_serverowner = res.server_owner;
6702 		res.server_owner = NULL;
6703 
6704 		/* use the most recent implementation id */
6705 		kfree(clp->cl_implid);
6706 		clp->cl_implid = res.impl_id;
6707 
6708 		if (clp->cl_serverscope != NULL &&
6709 		    !nfs41_same_server_scope(clp->cl_serverscope,
6710 					     res.server_scope)) {
6711 			dprintk("%s: server_scope mismatch detected\n",
6712 				__func__);
6713 			set_bit(NFS4CLNT_SERVER_SCOPE_MISMATCH, &clp->cl_state);
6714 			kfree(clp->cl_serverscope);
6715 			clp->cl_serverscope = NULL;
6716 		}
6717 
6718 		if (clp->cl_serverscope == NULL) {
6719 			clp->cl_serverscope = res.server_scope;
6720 			goto out;
6721 		}
6722 	} else
6723 		kfree(res.impl_id);
6724 
6725 out_server_owner:
6726 	kfree(res.server_owner);
6727 out_server_scope:
6728 	kfree(res.server_scope);
6729 out:
6730 	if (clp->cl_implid != NULL)
6731 		dprintk("NFS reply exchange_id: Server Implementation ID: "
6732 			"domain: %s, name: %s, date: %llu,%u\n",
6733 			clp->cl_implid->domain, clp->cl_implid->name,
6734 			clp->cl_implid->date.seconds,
6735 			clp->cl_implid->date.nseconds);
6736 	dprintk("NFS reply exchange_id: %d\n", status);
6737 	return status;
6738 }
6739 
6740 /*
6741  * nfs4_proc_exchange_id()
6742  *
6743  * Returns zero, a negative errno, or a negative NFS4ERR status code.
6744  *
6745  * Since the clientid has expired, all compounds using sessions
6746  * associated with the stale clientid will be returning
6747  * NFS4ERR_BADSESSION in the sequence operation, and will therefore
6748  * be in some phase of session reset.
6749  *
6750  * Will attempt to negotiate SP4_MACH_CRED if krb5i / krb5p auth is used.
6751  */
6752 int nfs4_proc_exchange_id(struct nfs_client *clp, struct rpc_cred *cred)
6753 {
6754 	rpc_authflavor_t authflavor = clp->cl_rpcclient->cl_auth->au_flavor;
6755 	int status;
6756 
6757 	/* try SP4_MACH_CRED if krb5i/p	*/
6758 	if (authflavor == RPC_AUTH_GSS_KRB5I ||
6759 	    authflavor == RPC_AUTH_GSS_KRB5P) {
6760 		status = _nfs4_proc_exchange_id(clp, cred, SP4_MACH_CRED);
6761 		if (!status)
6762 			return 0;
6763 	}
6764 
6765 	/* try SP4_NONE */
6766 	return _nfs4_proc_exchange_id(clp, cred, SP4_NONE);
6767 }
6768 
6769 static int _nfs4_proc_destroy_clientid(struct nfs_client *clp,
6770 		struct rpc_cred *cred)
6771 {
6772 	struct rpc_message msg = {
6773 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_DESTROY_CLIENTID],
6774 		.rpc_argp = clp,
6775 		.rpc_cred = cred,
6776 	};
6777 	int status;
6778 
6779 	status = rpc_call_sync(clp->cl_rpcclient, &msg, RPC_TASK_TIMEOUT);
6780 	trace_nfs4_destroy_clientid(clp, status);
6781 	if (status)
6782 		dprintk("NFS: Got error %d from the server %s on "
6783 			"DESTROY_CLIENTID.", status, clp->cl_hostname);
6784 	return status;
6785 }
6786 
6787 static int nfs4_proc_destroy_clientid(struct nfs_client *clp,
6788 		struct rpc_cred *cred)
6789 {
6790 	unsigned int loop;
6791 	int ret;
6792 
6793 	for (loop = NFS4_MAX_LOOP_ON_RECOVER; loop != 0; loop--) {
6794 		ret = _nfs4_proc_destroy_clientid(clp, cred);
6795 		switch (ret) {
6796 		case -NFS4ERR_DELAY:
6797 		case -NFS4ERR_CLIENTID_BUSY:
6798 			ssleep(1);
6799 			break;
6800 		default:
6801 			return ret;
6802 		}
6803 	}
6804 	return 0;
6805 }
6806 
6807 int nfs4_destroy_clientid(struct nfs_client *clp)
6808 {
6809 	struct rpc_cred *cred;
6810 	int ret = 0;
6811 
6812 	if (clp->cl_mvops->minor_version < 1)
6813 		goto out;
6814 	if (clp->cl_exchange_flags == 0)
6815 		goto out;
6816 	if (clp->cl_preserve_clid)
6817 		goto out;
6818 	cred = nfs4_get_clid_cred(clp);
6819 	ret = nfs4_proc_destroy_clientid(clp, cred);
6820 	if (cred)
6821 		put_rpccred(cred);
6822 	switch (ret) {
6823 	case 0:
6824 	case -NFS4ERR_STALE_CLIENTID:
6825 		clp->cl_exchange_flags = 0;
6826 	}
6827 out:
6828 	return ret;
6829 }
6830 
6831 struct nfs4_get_lease_time_data {
6832 	struct nfs4_get_lease_time_args *args;
6833 	struct nfs4_get_lease_time_res *res;
6834 	struct nfs_client *clp;
6835 };
6836 
6837 static void nfs4_get_lease_time_prepare(struct rpc_task *task,
6838 					void *calldata)
6839 {
6840 	struct nfs4_get_lease_time_data *data =
6841 			(struct nfs4_get_lease_time_data *)calldata;
6842 
6843 	dprintk("--> %s\n", __func__);
6844 	/* just setup sequence, do not trigger session recovery
6845 	   since we're invoked within one */
6846 	nfs41_setup_sequence(data->clp->cl_session,
6847 			&data->args->la_seq_args,
6848 			&data->res->lr_seq_res,
6849 			task);
6850 	dprintk("<-- %s\n", __func__);
6851 }
6852 
6853 /*
6854  * Called from nfs4_state_manager thread for session setup, so don't recover
6855  * from sequence operation or clientid errors.
6856  */
6857 static void nfs4_get_lease_time_done(struct rpc_task *task, void *calldata)
6858 {
6859 	struct nfs4_get_lease_time_data *data =
6860 			(struct nfs4_get_lease_time_data *)calldata;
6861 
6862 	dprintk("--> %s\n", __func__);
6863 	if (!nfs41_sequence_done(task, &data->res->lr_seq_res))
6864 		return;
6865 	switch (task->tk_status) {
6866 	case -NFS4ERR_DELAY:
6867 	case -NFS4ERR_GRACE:
6868 		dprintk("%s Retry: tk_status %d\n", __func__, task->tk_status);
6869 		rpc_delay(task, NFS4_POLL_RETRY_MIN);
6870 		task->tk_status = 0;
6871 		/* fall through */
6872 	case -NFS4ERR_RETRY_UNCACHED_REP:
6873 		rpc_restart_call_prepare(task);
6874 		return;
6875 	}
6876 	dprintk("<-- %s\n", __func__);
6877 }
6878 
6879 static const struct rpc_call_ops nfs4_get_lease_time_ops = {
6880 	.rpc_call_prepare = nfs4_get_lease_time_prepare,
6881 	.rpc_call_done = nfs4_get_lease_time_done,
6882 };
6883 
6884 int nfs4_proc_get_lease_time(struct nfs_client *clp, struct nfs_fsinfo *fsinfo)
6885 {
6886 	struct rpc_task *task;
6887 	struct nfs4_get_lease_time_args args;
6888 	struct nfs4_get_lease_time_res res = {
6889 		.lr_fsinfo = fsinfo,
6890 	};
6891 	struct nfs4_get_lease_time_data data = {
6892 		.args = &args,
6893 		.res = &res,
6894 		.clp = clp,
6895 	};
6896 	struct rpc_message msg = {
6897 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_GET_LEASE_TIME],
6898 		.rpc_argp = &args,
6899 		.rpc_resp = &res,
6900 	};
6901 	struct rpc_task_setup task_setup = {
6902 		.rpc_client = clp->cl_rpcclient,
6903 		.rpc_message = &msg,
6904 		.callback_ops = &nfs4_get_lease_time_ops,
6905 		.callback_data = &data,
6906 		.flags = RPC_TASK_TIMEOUT,
6907 	};
6908 	int status;
6909 
6910 	nfs4_init_sequence(&args.la_seq_args, &res.lr_seq_res, 0);
6911 	nfs4_set_sequence_privileged(&args.la_seq_args);
6912 	dprintk("--> %s\n", __func__);
6913 	task = rpc_run_task(&task_setup);
6914 
6915 	if (IS_ERR(task))
6916 		status = PTR_ERR(task);
6917 	else {
6918 		status = task->tk_status;
6919 		rpc_put_task(task);
6920 	}
6921 	dprintk("<-- %s return %d\n", __func__, status);
6922 
6923 	return status;
6924 }
6925 
6926 /*
6927  * Initialize the values to be used by the client in CREATE_SESSION
6928  * If nfs4_init_session set the fore channel request and response sizes,
6929  * use them.
6930  *
6931  * Set the back channel max_resp_sz_cached to zero to force the client to
6932  * always set csa_cachethis to FALSE because the current implementation
6933  * of the back channel DRC only supports caching the CB_SEQUENCE operation.
6934  */
6935 static void nfs4_init_channel_attrs(struct nfs41_create_session_args *args)
6936 {
6937 	unsigned int max_rqst_sz, max_resp_sz;
6938 
6939 	max_rqst_sz = NFS_MAX_FILE_IO_SIZE + nfs41_maxwrite_overhead;
6940 	max_resp_sz = NFS_MAX_FILE_IO_SIZE + nfs41_maxread_overhead;
6941 
6942 	/* Fore channel attributes */
6943 	args->fc_attrs.max_rqst_sz = max_rqst_sz;
6944 	args->fc_attrs.max_resp_sz = max_resp_sz;
6945 	args->fc_attrs.max_ops = NFS4_MAX_OPS;
6946 	args->fc_attrs.max_reqs = max_session_slots;
6947 
6948 	dprintk("%s: Fore Channel : max_rqst_sz=%u max_resp_sz=%u "
6949 		"max_ops=%u max_reqs=%u\n",
6950 		__func__,
6951 		args->fc_attrs.max_rqst_sz, args->fc_attrs.max_resp_sz,
6952 		args->fc_attrs.max_ops, args->fc_attrs.max_reqs);
6953 
6954 	/* Back channel attributes */
6955 	args->bc_attrs.max_rqst_sz = PAGE_SIZE;
6956 	args->bc_attrs.max_resp_sz = PAGE_SIZE;
6957 	args->bc_attrs.max_resp_sz_cached = 0;
6958 	args->bc_attrs.max_ops = NFS4_MAX_BACK_CHANNEL_OPS;
6959 	args->bc_attrs.max_reqs = 1;
6960 
6961 	dprintk("%s: Back Channel : max_rqst_sz=%u max_resp_sz=%u "
6962 		"max_resp_sz_cached=%u max_ops=%u max_reqs=%u\n",
6963 		__func__,
6964 		args->bc_attrs.max_rqst_sz, args->bc_attrs.max_resp_sz,
6965 		args->bc_attrs.max_resp_sz_cached, args->bc_attrs.max_ops,
6966 		args->bc_attrs.max_reqs);
6967 }
6968 
6969 static int nfs4_verify_fore_channel_attrs(struct nfs41_create_session_args *args, struct nfs4_session *session)
6970 {
6971 	struct nfs4_channel_attrs *sent = &args->fc_attrs;
6972 	struct nfs4_channel_attrs *rcvd = &session->fc_attrs;
6973 
6974 	if (rcvd->max_resp_sz > sent->max_resp_sz)
6975 		return -EINVAL;
6976 	/*
6977 	 * Our requested max_ops is the minimum we need; we're not
6978 	 * prepared to break up compounds into smaller pieces than that.
6979 	 * So, no point even trying to continue if the server won't
6980 	 * cooperate:
6981 	 */
6982 	if (rcvd->max_ops < sent->max_ops)
6983 		return -EINVAL;
6984 	if (rcvd->max_reqs == 0)
6985 		return -EINVAL;
6986 	if (rcvd->max_reqs > NFS4_MAX_SLOT_TABLE)
6987 		rcvd->max_reqs = NFS4_MAX_SLOT_TABLE;
6988 	return 0;
6989 }
6990 
6991 static int nfs4_verify_back_channel_attrs(struct nfs41_create_session_args *args, struct nfs4_session *session)
6992 {
6993 	struct nfs4_channel_attrs *sent = &args->bc_attrs;
6994 	struct nfs4_channel_attrs *rcvd = &session->bc_attrs;
6995 
6996 	if (rcvd->max_rqst_sz > sent->max_rqst_sz)
6997 		return -EINVAL;
6998 	if (rcvd->max_resp_sz < sent->max_resp_sz)
6999 		return -EINVAL;
7000 	if (rcvd->max_resp_sz_cached > sent->max_resp_sz_cached)
7001 		return -EINVAL;
7002 	/* These would render the backchannel useless: */
7003 	if (rcvd->max_ops != sent->max_ops)
7004 		return -EINVAL;
7005 	if (rcvd->max_reqs != sent->max_reqs)
7006 		return -EINVAL;
7007 	return 0;
7008 }
7009 
7010 static int nfs4_verify_channel_attrs(struct nfs41_create_session_args *args,
7011 				     struct nfs4_session *session)
7012 {
7013 	int ret;
7014 
7015 	ret = nfs4_verify_fore_channel_attrs(args, session);
7016 	if (ret)
7017 		return ret;
7018 	return nfs4_verify_back_channel_attrs(args, session);
7019 }
7020 
7021 static int _nfs4_proc_create_session(struct nfs_client *clp,
7022 		struct rpc_cred *cred)
7023 {
7024 	struct nfs4_session *session = clp->cl_session;
7025 	struct nfs41_create_session_args args = {
7026 		.client = clp,
7027 		.cb_program = NFS4_CALLBACK,
7028 	};
7029 	struct nfs41_create_session_res res = {
7030 		.client = clp,
7031 	};
7032 	struct rpc_message msg = {
7033 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_CREATE_SESSION],
7034 		.rpc_argp = &args,
7035 		.rpc_resp = &res,
7036 		.rpc_cred = cred,
7037 	};
7038 	int status;
7039 
7040 	nfs4_init_channel_attrs(&args);
7041 	args.flags = (SESSION4_PERSIST | SESSION4_BACK_CHAN);
7042 
7043 	status = rpc_call_sync(session->clp->cl_rpcclient, &msg, RPC_TASK_TIMEOUT);
7044 	trace_nfs4_create_session(clp, status);
7045 
7046 	if (!status) {
7047 		/* Verify the session's negotiated channel_attrs values */
7048 		status = nfs4_verify_channel_attrs(&args, session);
7049 		/* Increment the clientid slot sequence id */
7050 		clp->cl_seqid++;
7051 	}
7052 
7053 	return status;
7054 }
7055 
7056 /*
7057  * Issues a CREATE_SESSION operation to the server.
7058  * It is the responsibility of the caller to verify the session is
7059  * expired before calling this routine.
7060  */
7061 int nfs4_proc_create_session(struct nfs_client *clp, struct rpc_cred *cred)
7062 {
7063 	int status;
7064 	unsigned *ptr;
7065 	struct nfs4_session *session = clp->cl_session;
7066 
7067 	dprintk("--> %s clp=%p session=%p\n", __func__, clp, session);
7068 
7069 	status = _nfs4_proc_create_session(clp, cred);
7070 	if (status)
7071 		goto out;
7072 
7073 	/* Init or reset the session slot tables */
7074 	status = nfs4_setup_session_slot_tables(session);
7075 	dprintk("slot table setup returned %d\n", status);
7076 	if (status)
7077 		goto out;
7078 
7079 	ptr = (unsigned *)&session->sess_id.data[0];
7080 	dprintk("%s client>seqid %d sessionid %u:%u:%u:%u\n", __func__,
7081 		clp->cl_seqid, ptr[0], ptr[1], ptr[2], ptr[3]);
7082 out:
7083 	dprintk("<-- %s\n", __func__);
7084 	return status;
7085 }
7086 
7087 /*
7088  * Issue the over-the-wire RPC DESTROY_SESSION.
7089  * The caller must serialize access to this routine.
7090  */
7091 int nfs4_proc_destroy_session(struct nfs4_session *session,
7092 		struct rpc_cred *cred)
7093 {
7094 	struct rpc_message msg = {
7095 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_DESTROY_SESSION],
7096 		.rpc_argp = session,
7097 		.rpc_cred = cred,
7098 	};
7099 	int status = 0;
7100 
7101 	dprintk("--> nfs4_proc_destroy_session\n");
7102 
7103 	/* session is still being setup */
7104 	if (session->clp->cl_cons_state != NFS_CS_READY)
7105 		return status;
7106 
7107 	status = rpc_call_sync(session->clp->cl_rpcclient, &msg, RPC_TASK_TIMEOUT);
7108 	trace_nfs4_destroy_session(session->clp, status);
7109 
7110 	if (status)
7111 		dprintk("NFS: Got error %d from the server on DESTROY_SESSION. "
7112 			"Session has been destroyed regardless...\n", status);
7113 
7114 	dprintk("<-- nfs4_proc_destroy_session\n");
7115 	return status;
7116 }
7117 
7118 /*
7119  * Renew the cl_session lease.
7120  */
7121 struct nfs4_sequence_data {
7122 	struct nfs_client *clp;
7123 	struct nfs4_sequence_args args;
7124 	struct nfs4_sequence_res res;
7125 };
7126 
7127 static void nfs41_sequence_release(void *data)
7128 {
7129 	struct nfs4_sequence_data *calldata = data;
7130 	struct nfs_client *clp = calldata->clp;
7131 
7132 	if (atomic_read(&clp->cl_count) > 1)
7133 		nfs4_schedule_state_renewal(clp);
7134 	nfs_put_client(clp);
7135 	kfree(calldata);
7136 }
7137 
7138 static int nfs41_sequence_handle_errors(struct rpc_task *task, struct nfs_client *clp)
7139 {
7140 	switch(task->tk_status) {
7141 	case -NFS4ERR_DELAY:
7142 		rpc_delay(task, NFS4_POLL_RETRY_MAX);
7143 		return -EAGAIN;
7144 	default:
7145 		nfs4_schedule_lease_recovery(clp);
7146 	}
7147 	return 0;
7148 }
7149 
7150 static void nfs41_sequence_call_done(struct rpc_task *task, void *data)
7151 {
7152 	struct nfs4_sequence_data *calldata = data;
7153 	struct nfs_client *clp = calldata->clp;
7154 
7155 	if (!nfs41_sequence_done(task, task->tk_msg.rpc_resp))
7156 		return;
7157 
7158 	trace_nfs4_sequence(clp, task->tk_status);
7159 	if (task->tk_status < 0) {
7160 		dprintk("%s ERROR %d\n", __func__, task->tk_status);
7161 		if (atomic_read(&clp->cl_count) == 1)
7162 			goto out;
7163 
7164 		if (nfs41_sequence_handle_errors(task, clp) == -EAGAIN) {
7165 			rpc_restart_call_prepare(task);
7166 			return;
7167 		}
7168 	}
7169 	dprintk("%s rpc_cred %p\n", __func__, task->tk_msg.rpc_cred);
7170 out:
7171 	dprintk("<-- %s\n", __func__);
7172 }
7173 
7174 static void nfs41_sequence_prepare(struct rpc_task *task, void *data)
7175 {
7176 	struct nfs4_sequence_data *calldata = data;
7177 	struct nfs_client *clp = calldata->clp;
7178 	struct nfs4_sequence_args *args;
7179 	struct nfs4_sequence_res *res;
7180 
7181 	args = task->tk_msg.rpc_argp;
7182 	res = task->tk_msg.rpc_resp;
7183 
7184 	nfs41_setup_sequence(clp->cl_session, args, res, task);
7185 }
7186 
7187 static const struct rpc_call_ops nfs41_sequence_ops = {
7188 	.rpc_call_done = nfs41_sequence_call_done,
7189 	.rpc_call_prepare = nfs41_sequence_prepare,
7190 	.rpc_release = nfs41_sequence_release,
7191 };
7192 
7193 static struct rpc_task *_nfs41_proc_sequence(struct nfs_client *clp,
7194 		struct rpc_cred *cred,
7195 		bool is_privileged)
7196 {
7197 	struct nfs4_sequence_data *calldata;
7198 	struct rpc_message msg = {
7199 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_SEQUENCE],
7200 		.rpc_cred = cred,
7201 	};
7202 	struct rpc_task_setup task_setup_data = {
7203 		.rpc_client = clp->cl_rpcclient,
7204 		.rpc_message = &msg,
7205 		.callback_ops = &nfs41_sequence_ops,
7206 		.flags = RPC_TASK_ASYNC | RPC_TASK_TIMEOUT,
7207 	};
7208 
7209 	if (!atomic_inc_not_zero(&clp->cl_count))
7210 		return ERR_PTR(-EIO);
7211 	calldata = kzalloc(sizeof(*calldata), GFP_NOFS);
7212 	if (calldata == NULL) {
7213 		nfs_put_client(clp);
7214 		return ERR_PTR(-ENOMEM);
7215 	}
7216 	nfs4_init_sequence(&calldata->args, &calldata->res, 0);
7217 	if (is_privileged)
7218 		nfs4_set_sequence_privileged(&calldata->args);
7219 	msg.rpc_argp = &calldata->args;
7220 	msg.rpc_resp = &calldata->res;
7221 	calldata->clp = clp;
7222 	task_setup_data.callback_data = calldata;
7223 
7224 	return rpc_run_task(&task_setup_data);
7225 }
7226 
7227 static int nfs41_proc_async_sequence(struct nfs_client *clp, struct rpc_cred *cred, unsigned renew_flags)
7228 {
7229 	struct rpc_task *task;
7230 	int ret = 0;
7231 
7232 	if ((renew_flags & NFS4_RENEW_TIMEOUT) == 0)
7233 		return 0;
7234 	task = _nfs41_proc_sequence(clp, cred, false);
7235 	if (IS_ERR(task))
7236 		ret = PTR_ERR(task);
7237 	else
7238 		rpc_put_task_async(task);
7239 	dprintk("<-- %s status=%d\n", __func__, ret);
7240 	return ret;
7241 }
7242 
7243 static int nfs4_proc_sequence(struct nfs_client *clp, struct rpc_cred *cred)
7244 {
7245 	struct rpc_task *task;
7246 	int ret;
7247 
7248 	task = _nfs41_proc_sequence(clp, cred, true);
7249 	if (IS_ERR(task)) {
7250 		ret = PTR_ERR(task);
7251 		goto out;
7252 	}
7253 	ret = rpc_wait_for_completion_task(task);
7254 	if (!ret) {
7255 		struct nfs4_sequence_res *res = task->tk_msg.rpc_resp;
7256 
7257 		if (task->tk_status == 0)
7258 			nfs41_handle_sequence_flag_errors(clp, res->sr_status_flags);
7259 		ret = task->tk_status;
7260 	}
7261 	rpc_put_task(task);
7262 out:
7263 	dprintk("<-- %s status=%d\n", __func__, ret);
7264 	return ret;
7265 }
7266 
7267 struct nfs4_reclaim_complete_data {
7268 	struct nfs_client *clp;
7269 	struct nfs41_reclaim_complete_args arg;
7270 	struct nfs41_reclaim_complete_res res;
7271 };
7272 
7273 static void nfs4_reclaim_complete_prepare(struct rpc_task *task, void *data)
7274 {
7275 	struct nfs4_reclaim_complete_data *calldata = data;
7276 
7277 	nfs41_setup_sequence(calldata->clp->cl_session,
7278 			&calldata->arg.seq_args,
7279 			&calldata->res.seq_res,
7280 			task);
7281 }
7282 
7283 static int nfs41_reclaim_complete_handle_errors(struct rpc_task *task, struct nfs_client *clp)
7284 {
7285 	switch(task->tk_status) {
7286 	case 0:
7287 	case -NFS4ERR_COMPLETE_ALREADY:
7288 	case -NFS4ERR_WRONG_CRED: /* What to do here? */
7289 		break;
7290 	case -NFS4ERR_DELAY:
7291 		rpc_delay(task, NFS4_POLL_RETRY_MAX);
7292 		/* fall through */
7293 	case -NFS4ERR_RETRY_UNCACHED_REP:
7294 		return -EAGAIN;
7295 	default:
7296 		nfs4_schedule_lease_recovery(clp);
7297 	}
7298 	return 0;
7299 }
7300 
7301 static void nfs4_reclaim_complete_done(struct rpc_task *task, void *data)
7302 {
7303 	struct nfs4_reclaim_complete_data *calldata = data;
7304 	struct nfs_client *clp = calldata->clp;
7305 	struct nfs4_sequence_res *res = &calldata->res.seq_res;
7306 
7307 	dprintk("--> %s\n", __func__);
7308 	if (!nfs41_sequence_done(task, res))
7309 		return;
7310 
7311 	trace_nfs4_reclaim_complete(clp, task->tk_status);
7312 	if (nfs41_reclaim_complete_handle_errors(task, clp) == -EAGAIN) {
7313 		rpc_restart_call_prepare(task);
7314 		return;
7315 	}
7316 	dprintk("<-- %s\n", __func__);
7317 }
7318 
7319 static void nfs4_free_reclaim_complete_data(void *data)
7320 {
7321 	struct nfs4_reclaim_complete_data *calldata = data;
7322 
7323 	kfree(calldata);
7324 }
7325 
7326 static const struct rpc_call_ops nfs4_reclaim_complete_call_ops = {
7327 	.rpc_call_prepare = nfs4_reclaim_complete_prepare,
7328 	.rpc_call_done = nfs4_reclaim_complete_done,
7329 	.rpc_release = nfs4_free_reclaim_complete_data,
7330 };
7331 
7332 /*
7333  * Issue a global reclaim complete.
7334  */
7335 static int nfs41_proc_reclaim_complete(struct nfs_client *clp,
7336 		struct rpc_cred *cred)
7337 {
7338 	struct nfs4_reclaim_complete_data *calldata;
7339 	struct rpc_task *task;
7340 	struct rpc_message msg = {
7341 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_RECLAIM_COMPLETE],
7342 		.rpc_cred = cred,
7343 	};
7344 	struct rpc_task_setup task_setup_data = {
7345 		.rpc_client = clp->cl_rpcclient,
7346 		.rpc_message = &msg,
7347 		.callback_ops = &nfs4_reclaim_complete_call_ops,
7348 		.flags = RPC_TASK_ASYNC,
7349 	};
7350 	int status = -ENOMEM;
7351 
7352 	dprintk("--> %s\n", __func__);
7353 	calldata = kzalloc(sizeof(*calldata), GFP_NOFS);
7354 	if (calldata == NULL)
7355 		goto out;
7356 	calldata->clp = clp;
7357 	calldata->arg.one_fs = 0;
7358 
7359 	nfs4_init_sequence(&calldata->arg.seq_args, &calldata->res.seq_res, 0);
7360 	nfs4_set_sequence_privileged(&calldata->arg.seq_args);
7361 	msg.rpc_argp = &calldata->arg;
7362 	msg.rpc_resp = &calldata->res;
7363 	task_setup_data.callback_data = calldata;
7364 	task = rpc_run_task(&task_setup_data);
7365 	if (IS_ERR(task)) {
7366 		status = PTR_ERR(task);
7367 		goto out;
7368 	}
7369 	status = nfs4_wait_for_completion_rpc_task(task);
7370 	if (status == 0)
7371 		status = task->tk_status;
7372 	rpc_put_task(task);
7373 	return 0;
7374 out:
7375 	dprintk("<-- %s status=%d\n", __func__, status);
7376 	return status;
7377 }
7378 
7379 static void
7380 nfs4_layoutget_prepare(struct rpc_task *task, void *calldata)
7381 {
7382 	struct nfs4_layoutget *lgp = calldata;
7383 	struct nfs_server *server = NFS_SERVER(lgp->args.inode);
7384 	struct nfs4_session *session = nfs4_get_session(server);
7385 
7386 	dprintk("--> %s\n", __func__);
7387 	/* Note the is a race here, where a CB_LAYOUTRECALL can come in
7388 	 * right now covering the LAYOUTGET we are about to send.
7389 	 * However, that is not so catastrophic, and there seems
7390 	 * to be no way to prevent it completely.
7391 	 */
7392 	if (nfs41_setup_sequence(session, &lgp->args.seq_args,
7393 				&lgp->res.seq_res, task))
7394 		return;
7395 	if (pnfs_choose_layoutget_stateid(&lgp->args.stateid,
7396 					  NFS_I(lgp->args.inode)->layout,
7397 					  lgp->args.ctx->state)) {
7398 		rpc_exit(task, NFS4_OK);
7399 	}
7400 }
7401 
7402 static void nfs4_layoutget_done(struct rpc_task *task, void *calldata)
7403 {
7404 	struct nfs4_layoutget *lgp = calldata;
7405 	struct inode *inode = lgp->args.inode;
7406 	struct nfs_server *server = NFS_SERVER(inode);
7407 	struct pnfs_layout_hdr *lo;
7408 	struct nfs4_state *state = NULL;
7409 	unsigned long timeo, now, giveup;
7410 
7411 	dprintk("--> %s tk_status => %d\n", __func__, -task->tk_status);
7412 
7413 	if (!nfs41_sequence_done(task, &lgp->res.seq_res))
7414 		goto out;
7415 
7416 	switch (task->tk_status) {
7417 	case 0:
7418 		goto out;
7419 	/*
7420 	 * NFS4ERR_LAYOUTTRYLATER is a conflict with another client
7421 	 * (or clients) writing to the same RAID stripe
7422 	 */
7423 	case -NFS4ERR_LAYOUTTRYLATER:
7424 	/*
7425 	 * NFS4ERR_RECALLCONFLICT is when conflict with self (must recall
7426 	 * existing layout before getting a new one).
7427 	 */
7428 	case -NFS4ERR_RECALLCONFLICT:
7429 		timeo = rpc_get_timeout(task->tk_client);
7430 		giveup = lgp->args.timestamp + timeo;
7431 		now = jiffies;
7432 		if (time_after(giveup, now)) {
7433 			unsigned long delay;
7434 
7435 			/* Delay for:
7436 			 * - Not less then NFS4_POLL_RETRY_MIN.
7437 			 * - One last time a jiffie before we give up
7438 			 * - exponential backoff (time_now minus start_attempt)
7439 			 */
7440 			delay = max_t(unsigned long, NFS4_POLL_RETRY_MIN,
7441 				    min((giveup - now - 1),
7442 					now - lgp->args.timestamp));
7443 
7444 			dprintk("%s: NFS4ERR_RECALLCONFLICT waiting %lu\n",
7445 				__func__, delay);
7446 			rpc_delay(task, delay);
7447 			task->tk_status = 0;
7448 			rpc_restart_call_prepare(task);
7449 			goto out; /* Do not call nfs4_async_handle_error() */
7450 		}
7451 		break;
7452 	case -NFS4ERR_EXPIRED:
7453 	case -NFS4ERR_BAD_STATEID:
7454 		spin_lock(&inode->i_lock);
7455 		lo = NFS_I(inode)->layout;
7456 		if (!lo || list_empty(&lo->plh_segs)) {
7457 			spin_unlock(&inode->i_lock);
7458 			/* If the open stateid was bad, then recover it. */
7459 			state = lgp->args.ctx->state;
7460 		} else {
7461 			LIST_HEAD(head);
7462 
7463 			pnfs_mark_matching_lsegs_invalid(lo, &head, NULL);
7464 			spin_unlock(&inode->i_lock);
7465 			/* Mark the bad layout state as invalid, then
7466 			 * retry using the open stateid. */
7467 			pnfs_free_lseg_list(&head);
7468 		}
7469 	}
7470 	if (nfs4_async_handle_error(task, server, state) == -EAGAIN)
7471 		rpc_restart_call_prepare(task);
7472 out:
7473 	dprintk("<-- %s\n", __func__);
7474 }
7475 
7476 static size_t max_response_pages(struct nfs_server *server)
7477 {
7478 	u32 max_resp_sz = server->nfs_client->cl_session->fc_attrs.max_resp_sz;
7479 	return nfs_page_array_len(0, max_resp_sz);
7480 }
7481 
7482 static void nfs4_free_pages(struct page **pages, size_t size)
7483 {
7484 	int i;
7485 
7486 	if (!pages)
7487 		return;
7488 
7489 	for (i = 0; i < size; i++) {
7490 		if (!pages[i])
7491 			break;
7492 		__free_page(pages[i]);
7493 	}
7494 	kfree(pages);
7495 }
7496 
7497 static struct page **nfs4_alloc_pages(size_t size, gfp_t gfp_flags)
7498 {
7499 	struct page **pages;
7500 	int i;
7501 
7502 	pages = kcalloc(size, sizeof(struct page *), gfp_flags);
7503 	if (!pages) {
7504 		dprintk("%s: can't alloc array of %zu pages\n", __func__, size);
7505 		return NULL;
7506 	}
7507 
7508 	for (i = 0; i < size; i++) {
7509 		pages[i] = alloc_page(gfp_flags);
7510 		if (!pages[i]) {
7511 			dprintk("%s: failed to allocate page\n", __func__);
7512 			nfs4_free_pages(pages, size);
7513 			return NULL;
7514 		}
7515 	}
7516 
7517 	return pages;
7518 }
7519 
7520 static void nfs4_layoutget_release(void *calldata)
7521 {
7522 	struct nfs4_layoutget *lgp = calldata;
7523 	struct inode *inode = lgp->args.inode;
7524 	struct nfs_server *server = NFS_SERVER(inode);
7525 	size_t max_pages = max_response_pages(server);
7526 
7527 	dprintk("--> %s\n", __func__);
7528 	nfs4_free_pages(lgp->args.layout.pages, max_pages);
7529 	pnfs_put_layout_hdr(NFS_I(inode)->layout);
7530 	put_nfs_open_context(lgp->args.ctx);
7531 	kfree(calldata);
7532 	dprintk("<-- %s\n", __func__);
7533 }
7534 
7535 static const struct rpc_call_ops nfs4_layoutget_call_ops = {
7536 	.rpc_call_prepare = nfs4_layoutget_prepare,
7537 	.rpc_call_done = nfs4_layoutget_done,
7538 	.rpc_release = nfs4_layoutget_release,
7539 };
7540 
7541 struct pnfs_layout_segment *
7542 nfs4_proc_layoutget(struct nfs4_layoutget *lgp, gfp_t gfp_flags)
7543 {
7544 	struct inode *inode = lgp->args.inode;
7545 	struct nfs_server *server = NFS_SERVER(inode);
7546 	size_t max_pages = max_response_pages(server);
7547 	struct rpc_task *task;
7548 	struct rpc_message msg = {
7549 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_LAYOUTGET],
7550 		.rpc_argp = &lgp->args,
7551 		.rpc_resp = &lgp->res,
7552 		.rpc_cred = lgp->cred,
7553 	};
7554 	struct rpc_task_setup task_setup_data = {
7555 		.rpc_client = server->client,
7556 		.rpc_message = &msg,
7557 		.callback_ops = &nfs4_layoutget_call_ops,
7558 		.callback_data = lgp,
7559 		.flags = RPC_TASK_ASYNC,
7560 	};
7561 	struct pnfs_layout_segment *lseg = NULL;
7562 	int status = 0;
7563 
7564 	dprintk("--> %s\n", __func__);
7565 
7566 	lgp->args.layout.pages = nfs4_alloc_pages(max_pages, gfp_flags);
7567 	if (!lgp->args.layout.pages) {
7568 		nfs4_layoutget_release(lgp);
7569 		return ERR_PTR(-ENOMEM);
7570 	}
7571 	lgp->args.layout.pglen = max_pages * PAGE_SIZE;
7572 	lgp->args.timestamp = jiffies;
7573 
7574 	lgp->res.layoutp = &lgp->args.layout;
7575 	lgp->res.seq_res.sr_slot = NULL;
7576 	nfs4_init_sequence(&lgp->args.seq_args, &lgp->res.seq_res, 0);
7577 
7578 	/* nfs4_layoutget_release calls pnfs_put_layout_hdr */
7579 	pnfs_get_layout_hdr(NFS_I(inode)->layout);
7580 
7581 	task = rpc_run_task(&task_setup_data);
7582 	if (IS_ERR(task))
7583 		return ERR_CAST(task);
7584 	status = nfs4_wait_for_completion_rpc_task(task);
7585 	if (status == 0)
7586 		status = task->tk_status;
7587 	trace_nfs4_layoutget(lgp->args.ctx,
7588 			&lgp->args.range,
7589 			&lgp->res.range,
7590 			status);
7591 	/* if layoutp->len is 0, nfs4_layoutget_prepare called rpc_exit */
7592 	if (status == 0 && lgp->res.layoutp->len)
7593 		lseg = pnfs_layout_process(lgp);
7594 	rpc_put_task(task);
7595 	dprintk("<-- %s status=%d\n", __func__, status);
7596 	if (status)
7597 		return ERR_PTR(status);
7598 	return lseg;
7599 }
7600 
7601 static void
7602 nfs4_layoutreturn_prepare(struct rpc_task *task, void *calldata)
7603 {
7604 	struct nfs4_layoutreturn *lrp = calldata;
7605 
7606 	dprintk("--> %s\n", __func__);
7607 	nfs41_setup_sequence(lrp->clp->cl_session,
7608 			&lrp->args.seq_args,
7609 			&lrp->res.seq_res,
7610 			task);
7611 }
7612 
7613 static void nfs4_layoutreturn_done(struct rpc_task *task, void *calldata)
7614 {
7615 	struct nfs4_layoutreturn *lrp = calldata;
7616 	struct nfs_server *server;
7617 
7618 	dprintk("--> %s\n", __func__);
7619 
7620 	if (!nfs41_sequence_done(task, &lrp->res.seq_res))
7621 		return;
7622 
7623 	server = NFS_SERVER(lrp->args.inode);
7624 	switch (task->tk_status) {
7625 	default:
7626 		task->tk_status = 0;
7627 	case 0:
7628 		break;
7629 	case -NFS4ERR_DELAY:
7630 		if (nfs4_async_handle_error(task, server, NULL) != -EAGAIN)
7631 			break;
7632 		rpc_restart_call_prepare(task);
7633 		return;
7634 	}
7635 	dprintk("<-- %s\n", __func__);
7636 }
7637 
7638 static void nfs4_layoutreturn_release(void *calldata)
7639 {
7640 	struct nfs4_layoutreturn *lrp = calldata;
7641 	struct pnfs_layout_hdr *lo = lrp->args.layout;
7642 
7643 	dprintk("--> %s\n", __func__);
7644 	spin_lock(&lo->plh_inode->i_lock);
7645 	if (lrp->res.lrs_present)
7646 		pnfs_set_layout_stateid(lo, &lrp->res.stateid, true);
7647 	lo->plh_block_lgets--;
7648 	spin_unlock(&lo->plh_inode->i_lock);
7649 	pnfs_put_layout_hdr(lrp->args.layout);
7650 	kfree(calldata);
7651 	dprintk("<-- %s\n", __func__);
7652 }
7653 
7654 static const struct rpc_call_ops nfs4_layoutreturn_call_ops = {
7655 	.rpc_call_prepare = nfs4_layoutreturn_prepare,
7656 	.rpc_call_done = nfs4_layoutreturn_done,
7657 	.rpc_release = nfs4_layoutreturn_release,
7658 };
7659 
7660 int nfs4_proc_layoutreturn(struct nfs4_layoutreturn *lrp)
7661 {
7662 	struct rpc_task *task;
7663 	struct rpc_message msg = {
7664 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_LAYOUTRETURN],
7665 		.rpc_argp = &lrp->args,
7666 		.rpc_resp = &lrp->res,
7667 		.rpc_cred = lrp->cred,
7668 	};
7669 	struct rpc_task_setup task_setup_data = {
7670 		.rpc_client = NFS_SERVER(lrp->args.inode)->client,
7671 		.rpc_message = &msg,
7672 		.callback_ops = &nfs4_layoutreturn_call_ops,
7673 		.callback_data = lrp,
7674 	};
7675 	int status;
7676 
7677 	dprintk("--> %s\n", __func__);
7678 	nfs4_init_sequence(&lrp->args.seq_args, &lrp->res.seq_res, 1);
7679 	task = rpc_run_task(&task_setup_data);
7680 	if (IS_ERR(task))
7681 		return PTR_ERR(task);
7682 	status = task->tk_status;
7683 	trace_nfs4_layoutreturn(lrp->args.inode, status);
7684 	dprintk("<-- %s status=%d\n", __func__, status);
7685 	rpc_put_task(task);
7686 	return status;
7687 }
7688 
7689 /*
7690  * Retrieve the list of Data Server devices from the MDS.
7691  */
7692 static int _nfs4_getdevicelist(struct nfs_server *server,
7693 				    const struct nfs_fh *fh,
7694 				    struct pnfs_devicelist *devlist)
7695 {
7696 	struct nfs4_getdevicelist_args args = {
7697 		.fh = fh,
7698 		.layoutclass = server->pnfs_curr_ld->id,
7699 	};
7700 	struct nfs4_getdevicelist_res res = {
7701 		.devlist = devlist,
7702 	};
7703 	struct rpc_message msg = {
7704 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_GETDEVICELIST],
7705 		.rpc_argp = &args,
7706 		.rpc_resp = &res,
7707 	};
7708 	int status;
7709 
7710 	dprintk("--> %s\n", __func__);
7711 	status = nfs4_call_sync(server->client, server, &msg, &args.seq_args,
7712 				&res.seq_res, 0);
7713 	dprintk("<-- %s status=%d\n", __func__, status);
7714 	return status;
7715 }
7716 
7717 int nfs4_proc_getdevicelist(struct nfs_server *server,
7718 			    const struct nfs_fh *fh,
7719 			    struct pnfs_devicelist *devlist)
7720 {
7721 	struct nfs4_exception exception = { };
7722 	int err;
7723 
7724 	do {
7725 		err = nfs4_handle_exception(server,
7726 				_nfs4_getdevicelist(server, fh, devlist),
7727 				&exception);
7728 	} while (exception.retry);
7729 
7730 	dprintk("%s: err=%d, num_devs=%u\n", __func__,
7731 		err, devlist->num_devs);
7732 
7733 	return err;
7734 }
7735 EXPORT_SYMBOL_GPL(nfs4_proc_getdevicelist);
7736 
7737 static int
7738 _nfs4_proc_getdeviceinfo(struct nfs_server *server,
7739 		struct pnfs_device *pdev,
7740 		struct rpc_cred *cred)
7741 {
7742 	struct nfs4_getdeviceinfo_args args = {
7743 		.pdev = pdev,
7744 	};
7745 	struct nfs4_getdeviceinfo_res res = {
7746 		.pdev = pdev,
7747 	};
7748 	struct rpc_message msg = {
7749 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_GETDEVICEINFO],
7750 		.rpc_argp = &args,
7751 		.rpc_resp = &res,
7752 		.rpc_cred = cred,
7753 	};
7754 	int status;
7755 
7756 	dprintk("--> %s\n", __func__);
7757 	status = nfs4_call_sync(server->client, server, &msg, &args.seq_args, &res.seq_res, 0);
7758 	dprintk("<-- %s status=%d\n", __func__, status);
7759 
7760 	return status;
7761 }
7762 
7763 int nfs4_proc_getdeviceinfo(struct nfs_server *server,
7764 		struct pnfs_device *pdev,
7765 		struct rpc_cred *cred)
7766 {
7767 	struct nfs4_exception exception = { };
7768 	int err;
7769 
7770 	do {
7771 		err = nfs4_handle_exception(server,
7772 					_nfs4_proc_getdeviceinfo(server, pdev, cred),
7773 					&exception);
7774 	} while (exception.retry);
7775 	return err;
7776 }
7777 EXPORT_SYMBOL_GPL(nfs4_proc_getdeviceinfo);
7778 
7779 static void nfs4_layoutcommit_prepare(struct rpc_task *task, void *calldata)
7780 {
7781 	struct nfs4_layoutcommit_data *data = calldata;
7782 	struct nfs_server *server = NFS_SERVER(data->args.inode);
7783 	struct nfs4_session *session = nfs4_get_session(server);
7784 
7785 	nfs41_setup_sequence(session,
7786 			&data->args.seq_args,
7787 			&data->res.seq_res,
7788 			task);
7789 }
7790 
7791 static void
7792 nfs4_layoutcommit_done(struct rpc_task *task, void *calldata)
7793 {
7794 	struct nfs4_layoutcommit_data *data = calldata;
7795 	struct nfs_server *server = NFS_SERVER(data->args.inode);
7796 
7797 	if (!nfs41_sequence_done(task, &data->res.seq_res))
7798 		return;
7799 
7800 	switch (task->tk_status) { /* Just ignore these failures */
7801 	case -NFS4ERR_DELEG_REVOKED: /* layout was recalled */
7802 	case -NFS4ERR_BADIOMODE:     /* no IOMODE_RW layout for range */
7803 	case -NFS4ERR_BADLAYOUT:     /* no layout */
7804 	case -NFS4ERR_GRACE:	    /* loca_recalim always false */
7805 		task->tk_status = 0;
7806 	case 0:
7807 		break;
7808 	default:
7809 		if (nfs4_async_handle_error(task, server, NULL) == -EAGAIN) {
7810 			rpc_restart_call_prepare(task);
7811 			return;
7812 		}
7813 	}
7814 }
7815 
7816 static void nfs4_layoutcommit_release(void *calldata)
7817 {
7818 	struct nfs4_layoutcommit_data *data = calldata;
7819 
7820 	pnfs_cleanup_layoutcommit(data);
7821 	nfs_post_op_update_inode_force_wcc(data->args.inode,
7822 					   data->res.fattr);
7823 	put_rpccred(data->cred);
7824 	kfree(data);
7825 }
7826 
7827 static const struct rpc_call_ops nfs4_layoutcommit_ops = {
7828 	.rpc_call_prepare = nfs4_layoutcommit_prepare,
7829 	.rpc_call_done = nfs4_layoutcommit_done,
7830 	.rpc_release = nfs4_layoutcommit_release,
7831 };
7832 
7833 int
7834 nfs4_proc_layoutcommit(struct nfs4_layoutcommit_data *data, bool sync)
7835 {
7836 	struct rpc_message msg = {
7837 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_LAYOUTCOMMIT],
7838 		.rpc_argp = &data->args,
7839 		.rpc_resp = &data->res,
7840 		.rpc_cred = data->cred,
7841 	};
7842 	struct rpc_task_setup task_setup_data = {
7843 		.task = &data->task,
7844 		.rpc_client = NFS_CLIENT(data->args.inode),
7845 		.rpc_message = &msg,
7846 		.callback_ops = &nfs4_layoutcommit_ops,
7847 		.callback_data = data,
7848 		.flags = RPC_TASK_ASYNC,
7849 	};
7850 	struct rpc_task *task;
7851 	int status = 0;
7852 
7853 	dprintk("NFS: %4d initiating layoutcommit call. sync %d "
7854 		"lbw: %llu inode %lu\n",
7855 		data->task.tk_pid, sync,
7856 		data->args.lastbytewritten,
7857 		data->args.inode->i_ino);
7858 
7859 	nfs4_init_sequence(&data->args.seq_args, &data->res.seq_res, 1);
7860 	task = rpc_run_task(&task_setup_data);
7861 	if (IS_ERR(task))
7862 		return PTR_ERR(task);
7863 	if (sync == false)
7864 		goto out;
7865 	status = nfs4_wait_for_completion_rpc_task(task);
7866 	if (status != 0)
7867 		goto out;
7868 	status = task->tk_status;
7869 	trace_nfs4_layoutcommit(data->args.inode, status);
7870 out:
7871 	dprintk("%s: status %d\n", __func__, status);
7872 	rpc_put_task(task);
7873 	return status;
7874 }
7875 
7876 /**
7877  * Use the state managment nfs_client cl_rpcclient, which uses krb5i (if
7878  * possible) as per RFC3530bis and RFC5661 Security Considerations sections
7879  */
7880 static int
7881 _nfs41_proc_secinfo_no_name(struct nfs_server *server, struct nfs_fh *fhandle,
7882 		    struct nfs_fsinfo *info,
7883 		    struct nfs4_secinfo_flavors *flavors, bool use_integrity)
7884 {
7885 	struct nfs41_secinfo_no_name_args args = {
7886 		.style = SECINFO_STYLE_CURRENT_FH,
7887 	};
7888 	struct nfs4_secinfo_res res = {
7889 		.flavors = flavors,
7890 	};
7891 	struct rpc_message msg = {
7892 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_SECINFO_NO_NAME],
7893 		.rpc_argp = &args,
7894 		.rpc_resp = &res,
7895 	};
7896 	struct rpc_clnt *clnt = server->client;
7897 	struct rpc_cred *cred = NULL;
7898 	int status;
7899 
7900 	if (use_integrity) {
7901 		clnt = server->nfs_client->cl_rpcclient;
7902 		cred = nfs4_get_clid_cred(server->nfs_client);
7903 		msg.rpc_cred = cred;
7904 	}
7905 
7906 	dprintk("--> %s\n", __func__);
7907 	status = nfs4_call_sync(clnt, server, &msg, &args.seq_args,
7908 				&res.seq_res, 0);
7909 	dprintk("<-- %s status=%d\n", __func__, status);
7910 
7911 	if (cred)
7912 		put_rpccred(cred);
7913 
7914 	return status;
7915 }
7916 
7917 static int
7918 nfs41_proc_secinfo_no_name(struct nfs_server *server, struct nfs_fh *fhandle,
7919 			   struct nfs_fsinfo *info, struct nfs4_secinfo_flavors *flavors)
7920 {
7921 	struct nfs4_exception exception = { };
7922 	int err;
7923 	do {
7924 		/* first try using integrity protection */
7925 		err = -NFS4ERR_WRONGSEC;
7926 
7927 		/* try to use integrity protection with machine cred */
7928 		if (_nfs4_is_integrity_protected(server->nfs_client))
7929 			err = _nfs41_proc_secinfo_no_name(server, fhandle, info,
7930 							  flavors, true);
7931 
7932 		/*
7933 		 * if unable to use integrity protection, or SECINFO with
7934 		 * integrity protection returns NFS4ERR_WRONGSEC (which is
7935 		 * disallowed by spec, but exists in deployed servers) use
7936 		 * the current filesystem's rpc_client and the user cred.
7937 		 */
7938 		if (err == -NFS4ERR_WRONGSEC)
7939 			err = _nfs41_proc_secinfo_no_name(server, fhandle, info,
7940 							  flavors, false);
7941 
7942 		switch (err) {
7943 		case 0:
7944 		case -NFS4ERR_WRONGSEC:
7945 		case -ENOTSUPP:
7946 			goto out;
7947 		default:
7948 			err = nfs4_handle_exception(server, err, &exception);
7949 		}
7950 	} while (exception.retry);
7951 out:
7952 	return err;
7953 }
7954 
7955 static int
7956 nfs41_find_root_sec(struct nfs_server *server, struct nfs_fh *fhandle,
7957 		    struct nfs_fsinfo *info)
7958 {
7959 	int err;
7960 	struct page *page;
7961 	rpc_authflavor_t flavor = RPC_AUTH_MAXFLAVOR;
7962 	struct nfs4_secinfo_flavors *flavors;
7963 	struct nfs4_secinfo4 *secinfo;
7964 	int i;
7965 
7966 	page = alloc_page(GFP_KERNEL);
7967 	if (!page) {
7968 		err = -ENOMEM;
7969 		goto out;
7970 	}
7971 
7972 	flavors = page_address(page);
7973 	err = nfs41_proc_secinfo_no_name(server, fhandle, info, flavors);
7974 
7975 	/*
7976 	 * Fall back on "guess and check" method if
7977 	 * the server doesn't support SECINFO_NO_NAME
7978 	 */
7979 	if (err == -NFS4ERR_WRONGSEC || err == -ENOTSUPP) {
7980 		err = nfs4_find_root_sec(server, fhandle, info);
7981 		goto out_freepage;
7982 	}
7983 	if (err)
7984 		goto out_freepage;
7985 
7986 	for (i = 0; i < flavors->num_flavors; i++) {
7987 		secinfo = &flavors->flavors[i];
7988 
7989 		switch (secinfo->flavor) {
7990 		case RPC_AUTH_NULL:
7991 		case RPC_AUTH_UNIX:
7992 		case RPC_AUTH_GSS:
7993 			flavor = rpcauth_get_pseudoflavor(secinfo->flavor,
7994 					&secinfo->flavor_info);
7995 			break;
7996 		default:
7997 			flavor = RPC_AUTH_MAXFLAVOR;
7998 			break;
7999 		}
8000 
8001 		if (!nfs_auth_info_match(&server->auth_info, flavor))
8002 			flavor = RPC_AUTH_MAXFLAVOR;
8003 
8004 		if (flavor != RPC_AUTH_MAXFLAVOR) {
8005 			err = nfs4_lookup_root_sec(server, fhandle,
8006 						   info, flavor);
8007 			if (!err)
8008 				break;
8009 		}
8010 	}
8011 
8012 	if (flavor == RPC_AUTH_MAXFLAVOR)
8013 		err = -EPERM;
8014 
8015 out_freepage:
8016 	put_page(page);
8017 	if (err == -EACCES)
8018 		return -EPERM;
8019 out:
8020 	return err;
8021 }
8022 
8023 static int _nfs41_test_stateid(struct nfs_server *server,
8024 		nfs4_stateid *stateid,
8025 		struct rpc_cred *cred)
8026 {
8027 	int status;
8028 	struct nfs41_test_stateid_args args = {
8029 		.stateid = stateid,
8030 	};
8031 	struct nfs41_test_stateid_res res;
8032 	struct rpc_message msg = {
8033 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_TEST_STATEID],
8034 		.rpc_argp = &args,
8035 		.rpc_resp = &res,
8036 		.rpc_cred = cred,
8037 	};
8038 	struct rpc_clnt *rpc_client = server->client;
8039 
8040 	nfs4_state_protect(server->nfs_client, NFS_SP4_MACH_CRED_STATEID,
8041 		&rpc_client, &msg);
8042 
8043 	dprintk("NFS call  test_stateid %p\n", stateid);
8044 	nfs4_init_sequence(&args.seq_args, &res.seq_res, 0);
8045 	nfs4_set_sequence_privileged(&args.seq_args);
8046 	status = nfs4_call_sync_sequence(rpc_client, server, &msg,
8047 			&args.seq_args, &res.seq_res);
8048 	if (status != NFS_OK) {
8049 		dprintk("NFS reply test_stateid: failed, %d\n", status);
8050 		return status;
8051 	}
8052 	dprintk("NFS reply test_stateid: succeeded, %d\n", -res.status);
8053 	return -res.status;
8054 }
8055 
8056 /**
8057  * nfs41_test_stateid - perform a TEST_STATEID operation
8058  *
8059  * @server: server / transport on which to perform the operation
8060  * @stateid: state ID to test
8061  * @cred: credential
8062  *
8063  * Returns NFS_OK if the server recognizes that "stateid" is valid.
8064  * Otherwise a negative NFS4ERR value is returned if the operation
8065  * failed or the state ID is not currently valid.
8066  */
8067 static int nfs41_test_stateid(struct nfs_server *server,
8068 		nfs4_stateid *stateid,
8069 		struct rpc_cred *cred)
8070 {
8071 	struct nfs4_exception exception = { };
8072 	int err;
8073 	do {
8074 		err = _nfs41_test_stateid(server, stateid, cred);
8075 		if (err != -NFS4ERR_DELAY)
8076 			break;
8077 		nfs4_handle_exception(server, err, &exception);
8078 	} while (exception.retry);
8079 	return err;
8080 }
8081 
8082 struct nfs_free_stateid_data {
8083 	struct nfs_server *server;
8084 	struct nfs41_free_stateid_args args;
8085 	struct nfs41_free_stateid_res res;
8086 };
8087 
8088 static void nfs41_free_stateid_prepare(struct rpc_task *task, void *calldata)
8089 {
8090 	struct nfs_free_stateid_data *data = calldata;
8091 	nfs41_setup_sequence(nfs4_get_session(data->server),
8092 			&data->args.seq_args,
8093 			&data->res.seq_res,
8094 			task);
8095 }
8096 
8097 static void nfs41_free_stateid_done(struct rpc_task *task, void *calldata)
8098 {
8099 	struct nfs_free_stateid_data *data = calldata;
8100 
8101 	nfs41_sequence_done(task, &data->res.seq_res);
8102 
8103 	switch (task->tk_status) {
8104 	case -NFS4ERR_DELAY:
8105 		if (nfs4_async_handle_error(task, data->server, NULL) == -EAGAIN)
8106 			rpc_restart_call_prepare(task);
8107 	}
8108 }
8109 
8110 static void nfs41_free_stateid_release(void *calldata)
8111 {
8112 	kfree(calldata);
8113 }
8114 
8115 static const struct rpc_call_ops nfs41_free_stateid_ops = {
8116 	.rpc_call_prepare = nfs41_free_stateid_prepare,
8117 	.rpc_call_done = nfs41_free_stateid_done,
8118 	.rpc_release = nfs41_free_stateid_release,
8119 };
8120 
8121 static struct rpc_task *_nfs41_free_stateid(struct nfs_server *server,
8122 		nfs4_stateid *stateid,
8123 		struct rpc_cred *cred,
8124 		bool privileged)
8125 {
8126 	struct rpc_message msg = {
8127 		.rpc_proc = &nfs4_procedures[NFSPROC4_CLNT_FREE_STATEID],
8128 		.rpc_cred = cred,
8129 	};
8130 	struct rpc_task_setup task_setup = {
8131 		.rpc_client = server->client,
8132 		.rpc_message = &msg,
8133 		.callback_ops = &nfs41_free_stateid_ops,
8134 		.flags = RPC_TASK_ASYNC,
8135 	};
8136 	struct nfs_free_stateid_data *data;
8137 
8138 	nfs4_state_protect(server->nfs_client, NFS_SP4_MACH_CRED_STATEID,
8139 		&task_setup.rpc_client, &msg);
8140 
8141 	dprintk("NFS call  free_stateid %p\n", stateid);
8142 	data = kmalloc(sizeof(*data), GFP_NOFS);
8143 	if (!data)
8144 		return ERR_PTR(-ENOMEM);
8145 	data->server = server;
8146 	nfs4_stateid_copy(&data->args.stateid, stateid);
8147 
8148 	task_setup.callback_data = data;
8149 
8150 	msg.rpc_argp = &data->args;
8151 	msg.rpc_resp = &data->res;
8152 	nfs4_init_sequence(&data->args.seq_args, &data->res.seq_res, 0);
8153 	if (privileged)
8154 		nfs4_set_sequence_privileged(&data->args.seq_args);
8155 
8156 	return rpc_run_task(&task_setup);
8157 }
8158 
8159 /**
8160  * nfs41_free_stateid - perform a FREE_STATEID operation
8161  *
8162  * @server: server / transport on which to perform the operation
8163  * @stateid: state ID to release
8164  * @cred: credential
8165  *
8166  * Returns NFS_OK if the server freed "stateid".  Otherwise a
8167  * negative NFS4ERR value is returned.
8168  */
8169 static int nfs41_free_stateid(struct nfs_server *server,
8170 		nfs4_stateid *stateid,
8171 		struct rpc_cred *cred)
8172 {
8173 	struct rpc_task *task;
8174 	int ret;
8175 
8176 	task = _nfs41_free_stateid(server, stateid, cred, true);
8177 	if (IS_ERR(task))
8178 		return PTR_ERR(task);
8179 	ret = rpc_wait_for_completion_task(task);
8180 	if (!ret)
8181 		ret = task->tk_status;
8182 	rpc_put_task(task);
8183 	return ret;
8184 }
8185 
8186 static int nfs41_free_lock_state(struct nfs_server *server, struct nfs4_lock_state *lsp)
8187 {
8188 	struct rpc_task *task;
8189 	struct rpc_cred *cred = lsp->ls_state->owner->so_cred;
8190 
8191 	task = _nfs41_free_stateid(server, &lsp->ls_stateid, cred, false);
8192 	nfs4_free_lock_state(server, lsp);
8193 	if (IS_ERR(task))
8194 		return PTR_ERR(task);
8195 	rpc_put_task(task);
8196 	return 0;
8197 }
8198 
8199 static bool nfs41_match_stateid(const nfs4_stateid *s1,
8200 		const nfs4_stateid *s2)
8201 {
8202 	if (memcmp(s1->other, s2->other, sizeof(s1->other)) != 0)
8203 		return false;
8204 
8205 	if (s1->seqid == s2->seqid)
8206 		return true;
8207 	if (s1->seqid == 0 || s2->seqid == 0)
8208 		return true;
8209 
8210 	return false;
8211 }
8212 
8213 #endif /* CONFIG_NFS_V4_1 */
8214 
8215 static bool nfs4_match_stateid(const nfs4_stateid *s1,
8216 		const nfs4_stateid *s2)
8217 {
8218 	return nfs4_stateid_match(s1, s2);
8219 }
8220 
8221 
8222 static const struct nfs4_state_recovery_ops nfs40_reboot_recovery_ops = {
8223 	.owner_flag_bit = NFS_OWNER_RECLAIM_REBOOT,
8224 	.state_flag_bit	= NFS_STATE_RECLAIM_REBOOT,
8225 	.recover_open	= nfs4_open_reclaim,
8226 	.recover_lock	= nfs4_lock_reclaim,
8227 	.establish_clid = nfs4_init_clientid,
8228 	.detect_trunking = nfs40_discover_server_trunking,
8229 };
8230 
8231 #if defined(CONFIG_NFS_V4_1)
8232 static const struct nfs4_state_recovery_ops nfs41_reboot_recovery_ops = {
8233 	.owner_flag_bit = NFS_OWNER_RECLAIM_REBOOT,
8234 	.state_flag_bit	= NFS_STATE_RECLAIM_REBOOT,
8235 	.recover_open	= nfs4_open_reclaim,
8236 	.recover_lock	= nfs4_lock_reclaim,
8237 	.establish_clid = nfs41_init_clientid,
8238 	.reclaim_complete = nfs41_proc_reclaim_complete,
8239 	.detect_trunking = nfs41_discover_server_trunking,
8240 };
8241 #endif /* CONFIG_NFS_V4_1 */
8242 
8243 static const struct nfs4_state_recovery_ops nfs40_nograce_recovery_ops = {
8244 	.owner_flag_bit = NFS_OWNER_RECLAIM_NOGRACE,
8245 	.state_flag_bit	= NFS_STATE_RECLAIM_NOGRACE,
8246 	.recover_open	= nfs4_open_expired,
8247 	.recover_lock	= nfs4_lock_expired,
8248 	.establish_clid = nfs4_init_clientid,
8249 };
8250 
8251 #if defined(CONFIG_NFS_V4_1)
8252 static const struct nfs4_state_recovery_ops nfs41_nograce_recovery_ops = {
8253 	.owner_flag_bit = NFS_OWNER_RECLAIM_NOGRACE,
8254 	.state_flag_bit	= NFS_STATE_RECLAIM_NOGRACE,
8255 	.recover_open	= nfs41_open_expired,
8256 	.recover_lock	= nfs41_lock_expired,
8257 	.establish_clid = nfs41_init_clientid,
8258 };
8259 #endif /* CONFIG_NFS_V4_1 */
8260 
8261 static const struct nfs4_state_maintenance_ops nfs40_state_renewal_ops = {
8262 	.sched_state_renewal = nfs4_proc_async_renew,
8263 	.get_state_renewal_cred_locked = nfs4_get_renew_cred_locked,
8264 	.renew_lease = nfs4_proc_renew,
8265 };
8266 
8267 #if defined(CONFIG_NFS_V4_1)
8268 static const struct nfs4_state_maintenance_ops nfs41_state_renewal_ops = {
8269 	.sched_state_renewal = nfs41_proc_async_sequence,
8270 	.get_state_renewal_cred_locked = nfs4_get_machine_cred_locked,
8271 	.renew_lease = nfs4_proc_sequence,
8272 };
8273 #endif
8274 
8275 static const struct nfs4_mig_recovery_ops nfs40_mig_recovery_ops = {
8276 	.get_locations = _nfs40_proc_get_locations,
8277 	.fsid_present = _nfs40_proc_fsid_present,
8278 };
8279 
8280 #if defined(CONFIG_NFS_V4_1)
8281 static const struct nfs4_mig_recovery_ops nfs41_mig_recovery_ops = {
8282 	.get_locations = _nfs41_proc_get_locations,
8283 	.fsid_present = _nfs41_proc_fsid_present,
8284 };
8285 #endif	/* CONFIG_NFS_V4_1 */
8286 
8287 static const struct nfs4_minor_version_ops nfs_v4_0_minor_ops = {
8288 	.minor_version = 0,
8289 	.init_caps = NFS_CAP_READDIRPLUS
8290 		| NFS_CAP_ATOMIC_OPEN
8291 		| NFS_CAP_CHANGE_ATTR
8292 		| NFS_CAP_POSIX_LOCK,
8293 	.init_client = nfs40_init_client,
8294 	.shutdown_client = nfs40_shutdown_client,
8295 	.match_stateid = nfs4_match_stateid,
8296 	.find_root_sec = nfs4_find_root_sec,
8297 	.free_lock_state = nfs4_release_lockowner,
8298 	.call_sync_ops = &nfs40_call_sync_ops,
8299 	.reboot_recovery_ops = &nfs40_reboot_recovery_ops,
8300 	.nograce_recovery_ops = &nfs40_nograce_recovery_ops,
8301 	.state_renewal_ops = &nfs40_state_renewal_ops,
8302 	.mig_recovery_ops = &nfs40_mig_recovery_ops,
8303 };
8304 
8305 #if defined(CONFIG_NFS_V4_1)
8306 static const struct nfs4_minor_version_ops nfs_v4_1_minor_ops = {
8307 	.minor_version = 1,
8308 	.init_caps = NFS_CAP_READDIRPLUS
8309 		| NFS_CAP_ATOMIC_OPEN
8310 		| NFS_CAP_CHANGE_ATTR
8311 		| NFS_CAP_POSIX_LOCK
8312 		| NFS_CAP_STATEID_NFSV41
8313 		| NFS_CAP_ATOMIC_OPEN_V1,
8314 	.init_client = nfs41_init_client,
8315 	.shutdown_client = nfs41_shutdown_client,
8316 	.match_stateid = nfs41_match_stateid,
8317 	.find_root_sec = nfs41_find_root_sec,
8318 	.free_lock_state = nfs41_free_lock_state,
8319 	.call_sync_ops = &nfs41_call_sync_ops,
8320 	.reboot_recovery_ops = &nfs41_reboot_recovery_ops,
8321 	.nograce_recovery_ops = &nfs41_nograce_recovery_ops,
8322 	.state_renewal_ops = &nfs41_state_renewal_ops,
8323 	.mig_recovery_ops = &nfs41_mig_recovery_ops,
8324 };
8325 #endif
8326 
8327 #if defined(CONFIG_NFS_V4_2)
8328 static const struct nfs4_minor_version_ops nfs_v4_2_minor_ops = {
8329 	.minor_version = 2,
8330 	.init_caps = NFS_CAP_READDIRPLUS
8331 		| NFS_CAP_ATOMIC_OPEN
8332 		| NFS_CAP_CHANGE_ATTR
8333 		| NFS_CAP_POSIX_LOCK
8334 		| NFS_CAP_STATEID_NFSV41
8335 		| NFS_CAP_ATOMIC_OPEN_V1,
8336 	.init_client = nfs41_init_client,
8337 	.shutdown_client = nfs41_shutdown_client,
8338 	.match_stateid = nfs41_match_stateid,
8339 	.find_root_sec = nfs41_find_root_sec,
8340 	.free_lock_state = nfs41_free_lock_state,
8341 	.call_sync_ops = &nfs41_call_sync_ops,
8342 	.reboot_recovery_ops = &nfs41_reboot_recovery_ops,
8343 	.nograce_recovery_ops = &nfs41_nograce_recovery_ops,
8344 	.state_renewal_ops = &nfs41_state_renewal_ops,
8345 };
8346 #endif
8347 
8348 const struct nfs4_minor_version_ops *nfs_v4_minor_ops[] = {
8349 	[0] = &nfs_v4_0_minor_ops,
8350 #if defined(CONFIG_NFS_V4_1)
8351 	[1] = &nfs_v4_1_minor_ops,
8352 #endif
8353 #if defined(CONFIG_NFS_V4_2)
8354 	[2] = &nfs_v4_2_minor_ops,
8355 #endif
8356 };
8357 
8358 static const struct inode_operations nfs4_dir_inode_operations = {
8359 	.create		= nfs_create,
8360 	.lookup		= nfs_lookup,
8361 	.atomic_open	= nfs_atomic_open,
8362 	.link		= nfs_link,
8363 	.unlink		= nfs_unlink,
8364 	.symlink	= nfs_symlink,
8365 	.mkdir		= nfs_mkdir,
8366 	.rmdir		= nfs_rmdir,
8367 	.mknod		= nfs_mknod,
8368 	.rename		= nfs_rename,
8369 	.permission	= nfs_permission,
8370 	.getattr	= nfs_getattr,
8371 	.setattr	= nfs_setattr,
8372 	.getxattr	= generic_getxattr,
8373 	.setxattr	= generic_setxattr,
8374 	.listxattr	= generic_listxattr,
8375 	.removexattr	= generic_removexattr,
8376 };
8377 
8378 static const struct inode_operations nfs4_file_inode_operations = {
8379 	.permission	= nfs_permission,
8380 	.getattr	= nfs_getattr,
8381 	.setattr	= nfs_setattr,
8382 	.getxattr	= generic_getxattr,
8383 	.setxattr	= generic_setxattr,
8384 	.listxattr	= generic_listxattr,
8385 	.removexattr	= generic_removexattr,
8386 };
8387 
8388 const struct nfs_rpc_ops nfs_v4_clientops = {
8389 	.version	= 4,			/* protocol version */
8390 	.dentry_ops	= &nfs4_dentry_operations,
8391 	.dir_inode_ops	= &nfs4_dir_inode_operations,
8392 	.file_inode_ops	= &nfs4_file_inode_operations,
8393 	.file_ops	= &nfs4_file_operations,
8394 	.getroot	= nfs4_proc_get_root,
8395 	.submount	= nfs4_submount,
8396 	.try_mount	= nfs4_try_mount,
8397 	.getattr	= nfs4_proc_getattr,
8398 	.setattr	= nfs4_proc_setattr,
8399 	.lookup		= nfs4_proc_lookup,
8400 	.access		= nfs4_proc_access,
8401 	.readlink	= nfs4_proc_readlink,
8402 	.create		= nfs4_proc_create,
8403 	.remove		= nfs4_proc_remove,
8404 	.unlink_setup	= nfs4_proc_unlink_setup,
8405 	.unlink_rpc_prepare = nfs4_proc_unlink_rpc_prepare,
8406 	.unlink_done	= nfs4_proc_unlink_done,
8407 	.rename		= nfs4_proc_rename,
8408 	.rename_setup	= nfs4_proc_rename_setup,
8409 	.rename_rpc_prepare = nfs4_proc_rename_rpc_prepare,
8410 	.rename_done	= nfs4_proc_rename_done,
8411 	.link		= nfs4_proc_link,
8412 	.symlink	= nfs4_proc_symlink,
8413 	.mkdir		= nfs4_proc_mkdir,
8414 	.rmdir		= nfs4_proc_remove,
8415 	.readdir	= nfs4_proc_readdir,
8416 	.mknod		= nfs4_proc_mknod,
8417 	.statfs		= nfs4_proc_statfs,
8418 	.fsinfo		= nfs4_proc_fsinfo,
8419 	.pathconf	= nfs4_proc_pathconf,
8420 	.set_capabilities = nfs4_server_capabilities,
8421 	.decode_dirent	= nfs4_decode_dirent,
8422 	.read_setup	= nfs4_proc_read_setup,
8423 	.read_pageio_init = pnfs_pageio_init_read,
8424 	.read_rpc_prepare = nfs4_proc_read_rpc_prepare,
8425 	.read_done	= nfs4_read_done,
8426 	.write_setup	= nfs4_proc_write_setup,
8427 	.write_pageio_init = pnfs_pageio_init_write,
8428 	.write_rpc_prepare = nfs4_proc_write_rpc_prepare,
8429 	.write_done	= nfs4_write_done,
8430 	.commit_setup	= nfs4_proc_commit_setup,
8431 	.commit_rpc_prepare = nfs4_proc_commit_rpc_prepare,
8432 	.commit_done	= nfs4_commit_done,
8433 	.lock		= nfs4_proc_lock,
8434 	.clear_acl_cache = nfs4_zap_acl_attr,
8435 	.close_context  = nfs4_close_context,
8436 	.open_context	= nfs4_atomic_open,
8437 	.have_delegation = nfs4_have_delegation,
8438 	.return_delegation = nfs4_inode_return_delegation,
8439 	.alloc_client	= nfs4_alloc_client,
8440 	.init_client	= nfs4_init_client,
8441 	.free_client	= nfs4_free_client,
8442 	.create_server	= nfs4_create_server,
8443 	.clone_server	= nfs_clone_server,
8444 };
8445 
8446 static const struct xattr_handler nfs4_xattr_nfs4_acl_handler = {
8447 	.prefix	= XATTR_NAME_NFSV4_ACL,
8448 	.list	= nfs4_xattr_list_nfs4_acl,
8449 	.get	= nfs4_xattr_get_nfs4_acl,
8450 	.set	= nfs4_xattr_set_nfs4_acl,
8451 };
8452 
8453 const struct xattr_handler *nfs4_xattr_handlers[] = {
8454 	&nfs4_xattr_nfs4_acl_handler,
8455 #ifdef CONFIG_NFS_V4_SECURITY_LABEL
8456 	&nfs4_xattr_nfs4_label_handler,
8457 #endif
8458 	NULL
8459 };
8460 
8461 /*
8462  * Local variables:
8463  *  c-basic-offset: 8
8464  * End:
8465  */
8466