xref: /openbmc/linux/fs/xfs/xfs_ioctl.c (revision 5e012745)
1 // SPDX-License-Identifier: GPL-2.0
2 /*
3  * Copyright (c) 2000-2005 Silicon Graphics, Inc.
4  * All Rights Reserved.
5  */
6 #include "xfs.h"
7 #include "xfs_fs.h"
8 #include "xfs_shared.h"
9 #include "xfs_format.h"
10 #include "xfs_log_format.h"
11 #include "xfs_trans_resv.h"
12 #include "xfs_mount.h"
13 #include "xfs_inode.h"
14 #include "xfs_rtalloc.h"
15 #include "xfs_iwalk.h"
16 #include "xfs_itable.h"
17 #include "xfs_error.h"
18 #include "xfs_attr.h"
19 #include "xfs_bmap.h"
20 #include "xfs_bmap_util.h"
21 #include "xfs_fsops.h"
22 #include "xfs_discard.h"
23 #include "xfs_quota.h"
24 #include "xfs_export.h"
25 #include "xfs_trace.h"
26 #include "xfs_icache.h"
27 #include "xfs_trans.h"
28 #include "xfs_acl.h"
29 #include "xfs_btree.h"
30 #include <linux/fsmap.h>
31 #include "xfs_fsmap.h"
32 #include "scrub/xfs_scrub.h"
33 #include "xfs_sb.h"
34 #include "xfs_ag.h"
35 #include "xfs_health.h"
36 
37 #include <linux/mount.h>
38 #include <linux/namei.h>
39 
40 /*
41  * xfs_find_handle maps from userspace xfs_fsop_handlereq structure to
42  * a file or fs handle.
43  *
44  * XFS_IOC_PATH_TO_FSHANDLE
45  *    returns fs handle for a mount point or path within that mount point
46  * XFS_IOC_FD_TO_HANDLE
47  *    returns full handle for a FD opened in user space
48  * XFS_IOC_PATH_TO_HANDLE
49  *    returns full handle for a path
50  */
51 int
52 xfs_find_handle(
53 	unsigned int		cmd,
54 	xfs_fsop_handlereq_t	*hreq)
55 {
56 	int			hsize;
57 	xfs_handle_t		handle;
58 	struct inode		*inode;
59 	struct fd		f = {NULL};
60 	struct path		path;
61 	int			error;
62 	struct xfs_inode	*ip;
63 
64 	if (cmd == XFS_IOC_FD_TO_HANDLE) {
65 		f = fdget(hreq->fd);
66 		if (!f.file)
67 			return -EBADF;
68 		inode = file_inode(f.file);
69 	} else {
70 		error = user_lpath((const char __user *)hreq->path, &path);
71 		if (error)
72 			return error;
73 		inode = d_inode(path.dentry);
74 	}
75 	ip = XFS_I(inode);
76 
77 	/*
78 	 * We can only generate handles for inodes residing on a XFS filesystem,
79 	 * and only for regular files, directories or symbolic links.
80 	 */
81 	error = -EINVAL;
82 	if (inode->i_sb->s_magic != XFS_SB_MAGIC)
83 		goto out_put;
84 
85 	error = -EBADF;
86 	if (!S_ISREG(inode->i_mode) &&
87 	    !S_ISDIR(inode->i_mode) &&
88 	    !S_ISLNK(inode->i_mode))
89 		goto out_put;
90 
91 
92 	memcpy(&handle.ha_fsid, ip->i_mount->m_fixedfsid, sizeof(xfs_fsid_t));
93 
94 	if (cmd == XFS_IOC_PATH_TO_FSHANDLE) {
95 		/*
96 		 * This handle only contains an fsid, zero the rest.
97 		 */
98 		memset(&handle.ha_fid, 0, sizeof(handle.ha_fid));
99 		hsize = sizeof(xfs_fsid_t);
100 	} else {
101 		handle.ha_fid.fid_len = sizeof(xfs_fid_t) -
102 					sizeof(handle.ha_fid.fid_len);
103 		handle.ha_fid.fid_pad = 0;
104 		handle.ha_fid.fid_gen = inode->i_generation;
105 		handle.ha_fid.fid_ino = ip->i_ino;
106 		hsize = sizeof(xfs_handle_t);
107 	}
108 
109 	error = -EFAULT;
110 	if (copy_to_user(hreq->ohandle, &handle, hsize) ||
111 	    copy_to_user(hreq->ohandlen, &hsize, sizeof(__s32)))
112 		goto out_put;
113 
114 	error = 0;
115 
116  out_put:
117 	if (cmd == XFS_IOC_FD_TO_HANDLE)
118 		fdput(f);
119 	else
120 		path_put(&path);
121 	return error;
122 }
123 
124 /*
125  * No need to do permission checks on the various pathname components
126  * as the handle operations are privileged.
127  */
128 STATIC int
129 xfs_handle_acceptable(
130 	void			*context,
131 	struct dentry		*dentry)
132 {
133 	return 1;
134 }
135 
136 /*
137  * Convert userspace handle data into a dentry.
138  */
139 struct dentry *
140 xfs_handle_to_dentry(
141 	struct file		*parfilp,
142 	void __user		*uhandle,
143 	u32			hlen)
144 {
145 	xfs_handle_t		handle;
146 	struct xfs_fid64	fid;
147 
148 	/*
149 	 * Only allow handle opens under a directory.
150 	 */
151 	if (!S_ISDIR(file_inode(parfilp)->i_mode))
152 		return ERR_PTR(-ENOTDIR);
153 
154 	if (hlen != sizeof(xfs_handle_t))
155 		return ERR_PTR(-EINVAL);
156 	if (copy_from_user(&handle, uhandle, hlen))
157 		return ERR_PTR(-EFAULT);
158 	if (handle.ha_fid.fid_len !=
159 	    sizeof(handle.ha_fid) - sizeof(handle.ha_fid.fid_len))
160 		return ERR_PTR(-EINVAL);
161 
162 	memset(&fid, 0, sizeof(struct fid));
163 	fid.ino = handle.ha_fid.fid_ino;
164 	fid.gen = handle.ha_fid.fid_gen;
165 
166 	return exportfs_decode_fh(parfilp->f_path.mnt, (struct fid *)&fid, 3,
167 			FILEID_INO32_GEN | XFS_FILEID_TYPE_64FLAG,
168 			xfs_handle_acceptable, NULL);
169 }
170 
171 STATIC struct dentry *
172 xfs_handlereq_to_dentry(
173 	struct file		*parfilp,
174 	xfs_fsop_handlereq_t	*hreq)
175 {
176 	return xfs_handle_to_dentry(parfilp, hreq->ihandle, hreq->ihandlen);
177 }
178 
179 int
180 xfs_open_by_handle(
181 	struct file		*parfilp,
182 	xfs_fsop_handlereq_t	*hreq)
183 {
184 	const struct cred	*cred = current_cred();
185 	int			error;
186 	int			fd;
187 	int			permflag;
188 	struct file		*filp;
189 	struct inode		*inode;
190 	struct dentry		*dentry;
191 	fmode_t			fmode;
192 	struct path		path;
193 
194 	if (!capable(CAP_SYS_ADMIN))
195 		return -EPERM;
196 
197 	dentry = xfs_handlereq_to_dentry(parfilp, hreq);
198 	if (IS_ERR(dentry))
199 		return PTR_ERR(dentry);
200 	inode = d_inode(dentry);
201 
202 	/* Restrict xfs_open_by_handle to directories & regular files. */
203 	if (!(S_ISREG(inode->i_mode) || S_ISDIR(inode->i_mode))) {
204 		error = -EPERM;
205 		goto out_dput;
206 	}
207 
208 #if BITS_PER_LONG != 32
209 	hreq->oflags |= O_LARGEFILE;
210 #endif
211 
212 	permflag = hreq->oflags;
213 	fmode = OPEN_FMODE(permflag);
214 	if ((!(permflag & O_APPEND) || (permflag & O_TRUNC)) &&
215 	    (fmode & FMODE_WRITE) && IS_APPEND(inode)) {
216 		error = -EPERM;
217 		goto out_dput;
218 	}
219 
220 	if ((fmode & FMODE_WRITE) && IS_IMMUTABLE(inode)) {
221 		error = -EPERM;
222 		goto out_dput;
223 	}
224 
225 	/* Can't write directories. */
226 	if (S_ISDIR(inode->i_mode) && (fmode & FMODE_WRITE)) {
227 		error = -EISDIR;
228 		goto out_dput;
229 	}
230 
231 	fd = get_unused_fd_flags(0);
232 	if (fd < 0) {
233 		error = fd;
234 		goto out_dput;
235 	}
236 
237 	path.mnt = parfilp->f_path.mnt;
238 	path.dentry = dentry;
239 	filp = dentry_open(&path, hreq->oflags, cred);
240 	dput(dentry);
241 	if (IS_ERR(filp)) {
242 		put_unused_fd(fd);
243 		return PTR_ERR(filp);
244 	}
245 
246 	if (S_ISREG(inode->i_mode)) {
247 		filp->f_flags |= O_NOATIME;
248 		filp->f_mode |= FMODE_NOCMTIME;
249 	}
250 
251 	fd_install(fd, filp);
252 	return fd;
253 
254  out_dput:
255 	dput(dentry);
256 	return error;
257 }
258 
259 int
260 xfs_readlink_by_handle(
261 	struct file		*parfilp,
262 	xfs_fsop_handlereq_t	*hreq)
263 {
264 	struct dentry		*dentry;
265 	__u32			olen;
266 	int			error;
267 
268 	if (!capable(CAP_SYS_ADMIN))
269 		return -EPERM;
270 
271 	dentry = xfs_handlereq_to_dentry(parfilp, hreq);
272 	if (IS_ERR(dentry))
273 		return PTR_ERR(dentry);
274 
275 	/* Restrict this handle operation to symlinks only. */
276 	if (!d_is_symlink(dentry)) {
277 		error = -EINVAL;
278 		goto out_dput;
279 	}
280 
281 	if (copy_from_user(&olen, hreq->ohandlen, sizeof(__u32))) {
282 		error = -EFAULT;
283 		goto out_dput;
284 	}
285 
286 	error = vfs_readlink(dentry, hreq->ohandle, olen);
287 
288  out_dput:
289 	dput(dentry);
290 	return error;
291 }
292 
293 int
294 xfs_set_dmattrs(
295 	xfs_inode_t     *ip,
296 	uint		evmask,
297 	uint16_t	state)
298 {
299 	xfs_mount_t	*mp = ip->i_mount;
300 	xfs_trans_t	*tp;
301 	int		error;
302 
303 	if (!capable(CAP_SYS_ADMIN))
304 		return -EPERM;
305 
306 	if (XFS_FORCED_SHUTDOWN(mp))
307 		return -EIO;
308 
309 	error = xfs_trans_alloc(mp, &M_RES(mp)->tr_ichange, 0, 0, 0, &tp);
310 	if (error)
311 		return error;
312 
313 	xfs_ilock(ip, XFS_ILOCK_EXCL);
314 	xfs_trans_ijoin(tp, ip, XFS_ILOCK_EXCL);
315 
316 	ip->i_d.di_dmevmask = evmask;
317 	ip->i_d.di_dmstate  = state;
318 
319 	xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
320 	error = xfs_trans_commit(tp);
321 
322 	return error;
323 }
324 
325 STATIC int
326 xfs_fssetdm_by_handle(
327 	struct file		*parfilp,
328 	void			__user *arg)
329 {
330 	int			error;
331 	struct fsdmidata	fsd;
332 	xfs_fsop_setdm_handlereq_t dmhreq;
333 	struct dentry		*dentry;
334 
335 	if (!capable(CAP_MKNOD))
336 		return -EPERM;
337 	if (copy_from_user(&dmhreq, arg, sizeof(xfs_fsop_setdm_handlereq_t)))
338 		return -EFAULT;
339 
340 	error = mnt_want_write_file(parfilp);
341 	if (error)
342 		return error;
343 
344 	dentry = xfs_handlereq_to_dentry(parfilp, &dmhreq.hreq);
345 	if (IS_ERR(dentry)) {
346 		mnt_drop_write_file(parfilp);
347 		return PTR_ERR(dentry);
348 	}
349 
350 	if (IS_IMMUTABLE(d_inode(dentry)) || IS_APPEND(d_inode(dentry))) {
351 		error = -EPERM;
352 		goto out;
353 	}
354 
355 	if (copy_from_user(&fsd, dmhreq.data, sizeof(fsd))) {
356 		error = -EFAULT;
357 		goto out;
358 	}
359 
360 	error = xfs_set_dmattrs(XFS_I(d_inode(dentry)), fsd.fsd_dmevmask,
361 				 fsd.fsd_dmstate);
362 
363  out:
364 	mnt_drop_write_file(parfilp);
365 	dput(dentry);
366 	return error;
367 }
368 
369 STATIC int
370 xfs_attrlist_by_handle(
371 	struct file		*parfilp,
372 	void			__user *arg)
373 {
374 	int			error = -ENOMEM;
375 	attrlist_cursor_kern_t	*cursor;
376 	struct xfs_fsop_attrlist_handlereq __user	*p = arg;
377 	xfs_fsop_attrlist_handlereq_t al_hreq;
378 	struct dentry		*dentry;
379 	char			*kbuf;
380 
381 	if (!capable(CAP_SYS_ADMIN))
382 		return -EPERM;
383 	if (copy_from_user(&al_hreq, arg, sizeof(xfs_fsop_attrlist_handlereq_t)))
384 		return -EFAULT;
385 	if (al_hreq.buflen < sizeof(struct attrlist) ||
386 	    al_hreq.buflen > XFS_XATTR_LIST_MAX)
387 		return -EINVAL;
388 
389 	/*
390 	 * Reject flags, only allow namespaces.
391 	 */
392 	if (al_hreq.flags & ~(ATTR_ROOT | ATTR_SECURE))
393 		return -EINVAL;
394 
395 	dentry = xfs_handlereq_to_dentry(parfilp, &al_hreq.hreq);
396 	if (IS_ERR(dentry))
397 		return PTR_ERR(dentry);
398 
399 	kbuf = kmem_zalloc_large(al_hreq.buflen, KM_SLEEP);
400 	if (!kbuf)
401 		goto out_dput;
402 
403 	cursor = (attrlist_cursor_kern_t *)&al_hreq.pos;
404 	error = xfs_attr_list(XFS_I(d_inode(dentry)), kbuf, al_hreq.buflen,
405 					al_hreq.flags, cursor);
406 	if (error)
407 		goto out_kfree;
408 
409 	if (copy_to_user(&p->pos, cursor, sizeof(attrlist_cursor_kern_t))) {
410 		error = -EFAULT;
411 		goto out_kfree;
412 	}
413 
414 	if (copy_to_user(al_hreq.buffer, kbuf, al_hreq.buflen))
415 		error = -EFAULT;
416 
417 out_kfree:
418 	kmem_free(kbuf);
419 out_dput:
420 	dput(dentry);
421 	return error;
422 }
423 
424 int
425 xfs_attrmulti_attr_get(
426 	struct inode		*inode,
427 	unsigned char		*name,
428 	unsigned char		__user *ubuf,
429 	uint32_t		*len,
430 	uint32_t		flags)
431 {
432 	unsigned char		*kbuf;
433 	int			error = -EFAULT;
434 
435 	if (*len > XFS_XATTR_SIZE_MAX)
436 		return -EINVAL;
437 	kbuf = kmem_zalloc_large(*len, KM_SLEEP);
438 	if (!kbuf)
439 		return -ENOMEM;
440 
441 	error = xfs_attr_get(XFS_I(inode), name, kbuf, (int *)len, flags);
442 	if (error)
443 		goto out_kfree;
444 
445 	if (copy_to_user(ubuf, kbuf, *len))
446 		error = -EFAULT;
447 
448 out_kfree:
449 	kmem_free(kbuf);
450 	return error;
451 }
452 
453 int
454 xfs_attrmulti_attr_set(
455 	struct inode		*inode,
456 	unsigned char		*name,
457 	const unsigned char	__user *ubuf,
458 	uint32_t		len,
459 	uint32_t		flags)
460 {
461 	unsigned char		*kbuf;
462 	int			error;
463 
464 	if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
465 		return -EPERM;
466 	if (len > XFS_XATTR_SIZE_MAX)
467 		return -EINVAL;
468 
469 	kbuf = memdup_user(ubuf, len);
470 	if (IS_ERR(kbuf))
471 		return PTR_ERR(kbuf);
472 
473 	error = xfs_attr_set(XFS_I(inode), name, kbuf, len, flags);
474 	if (!error)
475 		xfs_forget_acl(inode, name, flags);
476 	kfree(kbuf);
477 	return error;
478 }
479 
480 int
481 xfs_attrmulti_attr_remove(
482 	struct inode		*inode,
483 	unsigned char		*name,
484 	uint32_t		flags)
485 {
486 	int			error;
487 
488 	if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
489 		return -EPERM;
490 	error = xfs_attr_remove(XFS_I(inode), name, flags);
491 	if (!error)
492 		xfs_forget_acl(inode, name, flags);
493 	return error;
494 }
495 
496 STATIC int
497 xfs_attrmulti_by_handle(
498 	struct file		*parfilp,
499 	void			__user *arg)
500 {
501 	int			error;
502 	xfs_attr_multiop_t	*ops;
503 	xfs_fsop_attrmulti_handlereq_t am_hreq;
504 	struct dentry		*dentry;
505 	unsigned int		i, size;
506 	unsigned char		*attr_name;
507 
508 	if (!capable(CAP_SYS_ADMIN))
509 		return -EPERM;
510 	if (copy_from_user(&am_hreq, arg, sizeof(xfs_fsop_attrmulti_handlereq_t)))
511 		return -EFAULT;
512 
513 	/* overflow check */
514 	if (am_hreq.opcount >= INT_MAX / sizeof(xfs_attr_multiop_t))
515 		return -E2BIG;
516 
517 	dentry = xfs_handlereq_to_dentry(parfilp, &am_hreq.hreq);
518 	if (IS_ERR(dentry))
519 		return PTR_ERR(dentry);
520 
521 	error = -E2BIG;
522 	size = am_hreq.opcount * sizeof(xfs_attr_multiop_t);
523 	if (!size || size > 16 * PAGE_SIZE)
524 		goto out_dput;
525 
526 	ops = memdup_user(am_hreq.ops, size);
527 	if (IS_ERR(ops)) {
528 		error = PTR_ERR(ops);
529 		goto out_dput;
530 	}
531 
532 	error = -ENOMEM;
533 	attr_name = kmalloc(MAXNAMELEN, GFP_KERNEL);
534 	if (!attr_name)
535 		goto out_kfree_ops;
536 
537 	error = 0;
538 	for (i = 0; i < am_hreq.opcount; i++) {
539 		ops[i].am_error = strncpy_from_user((char *)attr_name,
540 				ops[i].am_attrname, MAXNAMELEN);
541 		if (ops[i].am_error == 0 || ops[i].am_error == MAXNAMELEN)
542 			error = -ERANGE;
543 		if (ops[i].am_error < 0)
544 			break;
545 
546 		switch (ops[i].am_opcode) {
547 		case ATTR_OP_GET:
548 			ops[i].am_error = xfs_attrmulti_attr_get(
549 					d_inode(dentry), attr_name,
550 					ops[i].am_attrvalue, &ops[i].am_length,
551 					ops[i].am_flags);
552 			break;
553 		case ATTR_OP_SET:
554 			ops[i].am_error = mnt_want_write_file(parfilp);
555 			if (ops[i].am_error)
556 				break;
557 			ops[i].am_error = xfs_attrmulti_attr_set(
558 					d_inode(dentry), attr_name,
559 					ops[i].am_attrvalue, ops[i].am_length,
560 					ops[i].am_flags);
561 			mnt_drop_write_file(parfilp);
562 			break;
563 		case ATTR_OP_REMOVE:
564 			ops[i].am_error = mnt_want_write_file(parfilp);
565 			if (ops[i].am_error)
566 				break;
567 			ops[i].am_error = xfs_attrmulti_attr_remove(
568 					d_inode(dentry), attr_name,
569 					ops[i].am_flags);
570 			mnt_drop_write_file(parfilp);
571 			break;
572 		default:
573 			ops[i].am_error = -EINVAL;
574 		}
575 	}
576 
577 	if (copy_to_user(am_hreq.ops, ops, size))
578 		error = -EFAULT;
579 
580 	kfree(attr_name);
581  out_kfree_ops:
582 	kfree(ops);
583  out_dput:
584 	dput(dentry);
585 	return error;
586 }
587 
588 int
589 xfs_ioc_space(
590 	struct file		*filp,
591 	unsigned int		cmd,
592 	xfs_flock64_t		*bf)
593 {
594 	struct inode		*inode = file_inode(filp);
595 	struct xfs_inode	*ip = XFS_I(inode);
596 	struct iattr		iattr;
597 	enum xfs_prealloc_flags	flags = 0;
598 	uint			iolock = XFS_IOLOCK_EXCL | XFS_MMAPLOCK_EXCL;
599 	int			error;
600 
601 	if (inode->i_flags & (S_IMMUTABLE|S_APPEND))
602 		return -EPERM;
603 
604 	if (!(filp->f_mode & FMODE_WRITE))
605 		return -EBADF;
606 
607 	if (!S_ISREG(inode->i_mode))
608 		return -EINVAL;
609 
610 	if (filp->f_flags & O_DSYNC)
611 		flags |= XFS_PREALLOC_SYNC;
612 	if (filp->f_mode & FMODE_NOCMTIME)
613 		flags |= XFS_PREALLOC_INVISIBLE;
614 
615 	error = mnt_want_write_file(filp);
616 	if (error)
617 		return error;
618 
619 	xfs_ilock(ip, iolock);
620 	error = xfs_break_layouts(inode, &iolock, BREAK_UNMAP);
621 	if (error)
622 		goto out_unlock;
623 
624 	switch (bf->l_whence) {
625 	case 0: /*SEEK_SET*/
626 		break;
627 	case 1: /*SEEK_CUR*/
628 		bf->l_start += filp->f_pos;
629 		break;
630 	case 2: /*SEEK_END*/
631 		bf->l_start += XFS_ISIZE(ip);
632 		break;
633 	default:
634 		error = -EINVAL;
635 		goto out_unlock;
636 	}
637 
638 	/*
639 	 * length of <= 0 for resv/unresv/zero is invalid.  length for
640 	 * alloc/free is ignored completely and we have no idea what userspace
641 	 * might have set it to, so set it to zero to allow range
642 	 * checks to pass.
643 	 */
644 	switch (cmd) {
645 	case XFS_IOC_ZERO_RANGE:
646 	case XFS_IOC_RESVSP:
647 	case XFS_IOC_RESVSP64:
648 	case XFS_IOC_UNRESVSP:
649 	case XFS_IOC_UNRESVSP64:
650 		if (bf->l_len <= 0) {
651 			error = -EINVAL;
652 			goto out_unlock;
653 		}
654 		break;
655 	default:
656 		bf->l_len = 0;
657 		break;
658 	}
659 
660 	if (bf->l_start < 0 ||
661 	    bf->l_start > inode->i_sb->s_maxbytes ||
662 	    bf->l_start + bf->l_len < 0 ||
663 	    bf->l_start + bf->l_len >= inode->i_sb->s_maxbytes) {
664 		error = -EINVAL;
665 		goto out_unlock;
666 	}
667 
668 	switch (cmd) {
669 	case XFS_IOC_ZERO_RANGE:
670 		flags |= XFS_PREALLOC_SET;
671 		error = xfs_zero_file_space(ip, bf->l_start, bf->l_len);
672 		break;
673 	case XFS_IOC_RESVSP:
674 	case XFS_IOC_RESVSP64:
675 		flags |= XFS_PREALLOC_SET;
676 		error = xfs_alloc_file_space(ip, bf->l_start, bf->l_len,
677 						XFS_BMAPI_PREALLOC);
678 		break;
679 	case XFS_IOC_UNRESVSP:
680 	case XFS_IOC_UNRESVSP64:
681 		error = xfs_free_file_space(ip, bf->l_start, bf->l_len);
682 		break;
683 	case XFS_IOC_ALLOCSP:
684 	case XFS_IOC_ALLOCSP64:
685 	case XFS_IOC_FREESP:
686 	case XFS_IOC_FREESP64:
687 		flags |= XFS_PREALLOC_CLEAR;
688 		if (bf->l_start > XFS_ISIZE(ip)) {
689 			error = xfs_alloc_file_space(ip, XFS_ISIZE(ip),
690 					bf->l_start - XFS_ISIZE(ip), 0);
691 			if (error)
692 				goto out_unlock;
693 		}
694 
695 		iattr.ia_valid = ATTR_SIZE;
696 		iattr.ia_size = bf->l_start;
697 
698 		error = xfs_vn_setattr_size(file_dentry(filp), &iattr);
699 		break;
700 	default:
701 		ASSERT(0);
702 		error = -EINVAL;
703 	}
704 
705 	if (error)
706 		goto out_unlock;
707 
708 	error = xfs_update_prealloc_flags(ip, flags);
709 
710 out_unlock:
711 	xfs_iunlock(ip, iolock);
712 	mnt_drop_write_file(filp);
713 	return error;
714 }
715 
716 /* Return 0 on success or positive error */
717 int
718 xfs_fsbulkstat_one_fmt(
719 	struct xfs_ibulk		*breq,
720 	const struct xfs_bulkstat	*bstat)
721 {
722 	struct xfs_bstat		bs1;
723 
724 	xfs_bulkstat_to_bstat(breq->mp, &bs1, bstat);
725 	if (copy_to_user(breq->ubuffer, &bs1, sizeof(bs1)))
726 		return -EFAULT;
727 	return xfs_ibulk_advance(breq, sizeof(struct xfs_bstat));
728 }
729 
730 int
731 xfs_fsinumbers_fmt(
732 	struct xfs_ibulk		*breq,
733 	const struct xfs_inumbers	*igrp)
734 {
735 	struct xfs_inogrp		ig1;
736 
737 	xfs_inumbers_to_inogrp(&ig1, igrp);
738 	if (copy_to_user(breq->ubuffer, &ig1, sizeof(struct xfs_inogrp)))
739 		return -EFAULT;
740 	return xfs_ibulk_advance(breq, sizeof(struct xfs_inogrp));
741 }
742 
743 STATIC int
744 xfs_ioc_fsbulkstat(
745 	xfs_mount_t		*mp,
746 	unsigned int		cmd,
747 	void			__user *arg)
748 {
749 	struct xfs_fsop_bulkreq	bulkreq;
750 	struct xfs_ibulk	breq = {
751 		.mp		= mp,
752 		.ocount		= 0,
753 	};
754 	xfs_ino_t		lastino;
755 	int			error;
756 
757 	/* done = 1 if there are more stats to get and if bulkstat */
758 	/* should be called again (unused here, but used in dmapi) */
759 
760 	if (!capable(CAP_SYS_ADMIN))
761 		return -EPERM;
762 
763 	if (XFS_FORCED_SHUTDOWN(mp))
764 		return -EIO;
765 
766 	if (copy_from_user(&bulkreq, arg, sizeof(struct xfs_fsop_bulkreq)))
767 		return -EFAULT;
768 
769 	if (copy_from_user(&lastino, bulkreq.lastip, sizeof(__s64)))
770 		return -EFAULT;
771 
772 	if (bulkreq.icount <= 0)
773 		return -EINVAL;
774 
775 	if (bulkreq.ubuffer == NULL)
776 		return -EINVAL;
777 
778 	breq.ubuffer = bulkreq.ubuffer;
779 	breq.icount = bulkreq.icount;
780 
781 	/*
782 	 * FSBULKSTAT_SINGLE expects that *lastip contains the inode number
783 	 * that we want to stat.  However, FSINUMBERS and FSBULKSTAT expect
784 	 * that *lastip contains either zero or the number of the last inode to
785 	 * be examined by the previous call and return results starting with
786 	 * the next inode after that.  The new bulk request back end functions
787 	 * take the inode to start with, so we have to compute the startino
788 	 * parameter from lastino to maintain correct function.  lastino == 0
789 	 * is a special case because it has traditionally meant "first inode
790 	 * in filesystem".
791 	 */
792 	if (cmd == XFS_IOC_FSINUMBERS) {
793 		breq.startino = lastino ? lastino + 1 : 0;
794 		error = xfs_inumbers(&breq, xfs_fsinumbers_fmt);
795 		lastino = breq.startino - 1;
796 	} else if (cmd == XFS_IOC_FSBULKSTAT_SINGLE) {
797 		breq.startino = lastino;
798 		breq.icount = 1;
799 		error = xfs_bulkstat_one(&breq, xfs_fsbulkstat_one_fmt);
800 	} else {	/* XFS_IOC_FSBULKSTAT */
801 		breq.startino = lastino ? lastino + 1 : 0;
802 		error = xfs_bulkstat(&breq, xfs_fsbulkstat_one_fmt);
803 		lastino = breq.startino - 1;
804 	}
805 
806 	if (error)
807 		return error;
808 
809 	if (bulkreq.lastip != NULL &&
810 	    copy_to_user(bulkreq.lastip, &lastino, sizeof(xfs_ino_t)))
811 		return -EFAULT;
812 
813 	if (bulkreq.ocount != NULL &&
814 	    copy_to_user(bulkreq.ocount, &breq.ocount, sizeof(__s32)))
815 		return -EFAULT;
816 
817 	return 0;
818 }
819 
820 /* Return 0 on success or positive error */
821 static int
822 xfs_bulkstat_fmt(
823 	struct xfs_ibulk		*breq,
824 	const struct xfs_bulkstat	*bstat)
825 {
826 	if (copy_to_user(breq->ubuffer, bstat, sizeof(struct xfs_bulkstat)))
827 		return -EFAULT;
828 	return xfs_ibulk_advance(breq, sizeof(struct xfs_bulkstat));
829 }
830 
831 /*
832  * Check the incoming bulk request @hdr from userspace and initialize the
833  * internal @breq bulk request appropriately.  Returns 0 if the bulk request
834  * should proceed; XFS_ITER_ABORT if there's nothing to do; or the usual
835  * negative error code.
836  */
837 static int
838 xfs_bulk_ireq_setup(
839 	struct xfs_mount	*mp,
840 	struct xfs_bulk_ireq	*hdr,
841 	struct xfs_ibulk	*breq,
842 	void __user		*ubuffer)
843 {
844 	if (hdr->icount == 0 ||
845 	    (hdr->flags & ~XFS_BULK_IREQ_FLAGS_ALL) ||
846 	    memchr_inv(hdr->reserved, 0, sizeof(hdr->reserved)))
847 		return -EINVAL;
848 
849 	breq->startino = hdr->ino;
850 	breq->ubuffer = ubuffer;
851 	breq->icount = hdr->icount;
852 	breq->ocount = 0;
853 	breq->flags = 0;
854 
855 	/*
856 	 * The @ino parameter is a special value, so we must look it up here.
857 	 * We're not allowed to have IREQ_AGNO, and we only return one inode
858 	 * worth of data.
859 	 */
860 	if (hdr->flags & XFS_BULK_IREQ_SPECIAL) {
861 		if (hdr->flags & XFS_BULK_IREQ_AGNO)
862 			return -EINVAL;
863 
864 		switch (hdr->ino) {
865 		case XFS_BULK_IREQ_SPECIAL_ROOT:
866 			hdr->ino = mp->m_sb.sb_rootino;
867 			break;
868 		default:
869 			return -EINVAL;
870 		}
871 		breq->icount = 1;
872 	}
873 
874 	/*
875 	 * The IREQ_AGNO flag means that we only want results from a given AG.
876 	 * If @hdr->ino is zero, we start iterating in that AG.  If @hdr->ino is
877 	 * beyond the specified AG then we return no results.
878 	 */
879 	if (hdr->flags & XFS_BULK_IREQ_AGNO) {
880 		if (hdr->agno >= mp->m_sb.sb_agcount)
881 			return -EINVAL;
882 
883 		if (breq->startino == 0)
884 			breq->startino = XFS_AGINO_TO_INO(mp, hdr->agno, 0);
885 		else if (XFS_INO_TO_AGNO(mp, breq->startino) < hdr->agno)
886 			return -EINVAL;
887 
888 		breq->flags |= XFS_IBULK_SAME_AG;
889 
890 		/* Asking for an inode past the end of the AG?  We're done! */
891 		if (XFS_INO_TO_AGNO(mp, breq->startino) > hdr->agno)
892 			return XFS_ITER_ABORT;
893 	} else if (hdr->agno)
894 		return -EINVAL;
895 
896 	/* Asking for an inode past the end of the FS?  We're done! */
897 	if (XFS_INO_TO_AGNO(mp, breq->startino) >= mp->m_sb.sb_agcount)
898 		return XFS_ITER_ABORT;
899 
900 	return 0;
901 }
902 
903 /*
904  * Update the userspace bulk request @hdr to reflect the end state of the
905  * internal bulk request @breq.
906  */
907 static void
908 xfs_bulk_ireq_teardown(
909 	struct xfs_bulk_ireq	*hdr,
910 	struct xfs_ibulk	*breq)
911 {
912 	hdr->ino = breq->startino;
913 	hdr->ocount = breq->ocount;
914 }
915 
916 /* Handle the v5 bulkstat ioctl. */
917 STATIC int
918 xfs_ioc_bulkstat(
919 	struct xfs_mount		*mp,
920 	unsigned int			cmd,
921 	struct xfs_bulkstat_req __user	*arg)
922 {
923 	struct xfs_bulk_ireq		hdr;
924 	struct xfs_ibulk		breq = {
925 		.mp			= mp,
926 	};
927 	int				error;
928 
929 	if (!capable(CAP_SYS_ADMIN))
930 		return -EPERM;
931 
932 	if (XFS_FORCED_SHUTDOWN(mp))
933 		return -EIO;
934 
935 	if (copy_from_user(&hdr, &arg->hdr, sizeof(hdr)))
936 		return -EFAULT;
937 
938 	error = xfs_bulk_ireq_setup(mp, &hdr, &breq, arg->bulkstat);
939 	if (error == XFS_ITER_ABORT)
940 		goto out_teardown;
941 	if (error < 0)
942 		return error;
943 
944 	error = xfs_bulkstat(&breq, xfs_bulkstat_fmt);
945 	if (error)
946 		return error;
947 
948 out_teardown:
949 	xfs_bulk_ireq_teardown(&hdr, &breq);
950 	if (copy_to_user(&arg->hdr, &hdr, sizeof(hdr)))
951 		return -EFAULT;
952 
953 	return 0;
954 }
955 
956 STATIC int
957 xfs_inumbers_fmt(
958 	struct xfs_ibulk		*breq,
959 	const struct xfs_inumbers	*igrp)
960 {
961 	if (copy_to_user(breq->ubuffer, igrp, sizeof(struct xfs_inumbers)))
962 		return -EFAULT;
963 	return xfs_ibulk_advance(breq, sizeof(struct xfs_inumbers));
964 }
965 
966 /* Handle the v5 inumbers ioctl. */
967 STATIC int
968 xfs_ioc_inumbers(
969 	struct xfs_mount		*mp,
970 	unsigned int			cmd,
971 	struct xfs_inumbers_req __user	*arg)
972 {
973 	struct xfs_bulk_ireq		hdr;
974 	struct xfs_ibulk		breq = {
975 		.mp			= mp,
976 	};
977 	int				error;
978 
979 	if (!capable(CAP_SYS_ADMIN))
980 		return -EPERM;
981 
982 	if (XFS_FORCED_SHUTDOWN(mp))
983 		return -EIO;
984 
985 	if (copy_from_user(&hdr, &arg->hdr, sizeof(hdr)))
986 		return -EFAULT;
987 
988 	error = xfs_bulk_ireq_setup(mp, &hdr, &breq, arg->inumbers);
989 	if (error == XFS_ITER_ABORT)
990 		goto out_teardown;
991 	if (error < 0)
992 		return error;
993 
994 	error = xfs_inumbers(&breq, xfs_inumbers_fmt);
995 	if (error)
996 		return error;
997 
998 out_teardown:
999 	xfs_bulk_ireq_teardown(&hdr, &breq);
1000 	if (copy_to_user(&arg->hdr, &hdr, sizeof(hdr)))
1001 		return -EFAULT;
1002 
1003 	return 0;
1004 }
1005 
1006 STATIC int
1007 xfs_ioc_fsgeometry(
1008 	struct xfs_mount	*mp,
1009 	void			__user *arg,
1010 	int			struct_version)
1011 {
1012 	struct xfs_fsop_geom	fsgeo;
1013 	size_t			len;
1014 
1015 	xfs_fs_geometry(&mp->m_sb, &fsgeo, struct_version);
1016 
1017 	if (struct_version <= 3)
1018 		len = sizeof(struct xfs_fsop_geom_v1);
1019 	else if (struct_version == 4)
1020 		len = sizeof(struct xfs_fsop_geom_v4);
1021 	else {
1022 		xfs_fsop_geom_health(mp, &fsgeo);
1023 		len = sizeof(fsgeo);
1024 	}
1025 
1026 	if (copy_to_user(arg, &fsgeo, len))
1027 		return -EFAULT;
1028 	return 0;
1029 }
1030 
1031 STATIC int
1032 xfs_ioc_ag_geometry(
1033 	struct xfs_mount	*mp,
1034 	void			__user *arg)
1035 {
1036 	struct xfs_ag_geometry	ageo;
1037 	int			error;
1038 
1039 	if (copy_from_user(&ageo, arg, sizeof(ageo)))
1040 		return -EFAULT;
1041 
1042 	error = xfs_ag_get_geometry(mp, ageo.ag_number, &ageo);
1043 	if (error)
1044 		return error;
1045 
1046 	if (copy_to_user(arg, &ageo, sizeof(ageo)))
1047 		return -EFAULT;
1048 	return 0;
1049 }
1050 
1051 /*
1052  * Linux extended inode flags interface.
1053  */
1054 
1055 STATIC unsigned int
1056 xfs_merge_ioc_xflags(
1057 	unsigned int	flags,
1058 	unsigned int	start)
1059 {
1060 	unsigned int	xflags = start;
1061 
1062 	if (flags & FS_IMMUTABLE_FL)
1063 		xflags |= FS_XFLAG_IMMUTABLE;
1064 	else
1065 		xflags &= ~FS_XFLAG_IMMUTABLE;
1066 	if (flags & FS_APPEND_FL)
1067 		xflags |= FS_XFLAG_APPEND;
1068 	else
1069 		xflags &= ~FS_XFLAG_APPEND;
1070 	if (flags & FS_SYNC_FL)
1071 		xflags |= FS_XFLAG_SYNC;
1072 	else
1073 		xflags &= ~FS_XFLAG_SYNC;
1074 	if (flags & FS_NOATIME_FL)
1075 		xflags |= FS_XFLAG_NOATIME;
1076 	else
1077 		xflags &= ~FS_XFLAG_NOATIME;
1078 	if (flags & FS_NODUMP_FL)
1079 		xflags |= FS_XFLAG_NODUMP;
1080 	else
1081 		xflags &= ~FS_XFLAG_NODUMP;
1082 
1083 	return xflags;
1084 }
1085 
1086 STATIC unsigned int
1087 xfs_di2lxflags(
1088 	uint16_t	di_flags)
1089 {
1090 	unsigned int	flags = 0;
1091 
1092 	if (di_flags & XFS_DIFLAG_IMMUTABLE)
1093 		flags |= FS_IMMUTABLE_FL;
1094 	if (di_flags & XFS_DIFLAG_APPEND)
1095 		flags |= FS_APPEND_FL;
1096 	if (di_flags & XFS_DIFLAG_SYNC)
1097 		flags |= FS_SYNC_FL;
1098 	if (di_flags & XFS_DIFLAG_NOATIME)
1099 		flags |= FS_NOATIME_FL;
1100 	if (di_flags & XFS_DIFLAG_NODUMP)
1101 		flags |= FS_NODUMP_FL;
1102 	return flags;
1103 }
1104 
1105 static void
1106 xfs_fill_fsxattr(
1107 	struct xfs_inode	*ip,
1108 	bool			attr,
1109 	struct fsxattr		*fa)
1110 {
1111 	simple_fill_fsxattr(fa, xfs_ip2xflags(ip));
1112 	fa->fsx_extsize = ip->i_d.di_extsize << ip->i_mount->m_sb.sb_blocklog;
1113 	fa->fsx_cowextsize = ip->i_d.di_cowextsize <<
1114 			ip->i_mount->m_sb.sb_blocklog;
1115 	fa->fsx_projid = xfs_get_projid(ip);
1116 
1117 	if (attr) {
1118 		if (ip->i_afp) {
1119 			if (ip->i_afp->if_flags & XFS_IFEXTENTS)
1120 				fa->fsx_nextents = xfs_iext_count(ip->i_afp);
1121 			else
1122 				fa->fsx_nextents = ip->i_d.di_anextents;
1123 		} else
1124 			fa->fsx_nextents = 0;
1125 	} else {
1126 		if (ip->i_df.if_flags & XFS_IFEXTENTS)
1127 			fa->fsx_nextents = xfs_iext_count(&ip->i_df);
1128 		else
1129 			fa->fsx_nextents = ip->i_d.di_nextents;
1130 	}
1131 }
1132 
1133 STATIC int
1134 xfs_ioc_fsgetxattr(
1135 	xfs_inode_t		*ip,
1136 	int			attr,
1137 	void			__user *arg)
1138 {
1139 	struct fsxattr		fa;
1140 
1141 	xfs_ilock(ip, XFS_ILOCK_SHARED);
1142 	xfs_fill_fsxattr(ip, attr, &fa);
1143 	xfs_iunlock(ip, XFS_ILOCK_SHARED);
1144 
1145 	if (copy_to_user(arg, &fa, sizeof(fa)))
1146 		return -EFAULT;
1147 	return 0;
1148 }
1149 
1150 STATIC uint16_t
1151 xfs_flags2diflags(
1152 	struct xfs_inode	*ip,
1153 	unsigned int		xflags)
1154 {
1155 	/* can't set PREALLOC this way, just preserve it */
1156 	uint16_t		di_flags =
1157 		(ip->i_d.di_flags & XFS_DIFLAG_PREALLOC);
1158 
1159 	if (xflags & FS_XFLAG_IMMUTABLE)
1160 		di_flags |= XFS_DIFLAG_IMMUTABLE;
1161 	if (xflags & FS_XFLAG_APPEND)
1162 		di_flags |= XFS_DIFLAG_APPEND;
1163 	if (xflags & FS_XFLAG_SYNC)
1164 		di_flags |= XFS_DIFLAG_SYNC;
1165 	if (xflags & FS_XFLAG_NOATIME)
1166 		di_flags |= XFS_DIFLAG_NOATIME;
1167 	if (xflags & FS_XFLAG_NODUMP)
1168 		di_flags |= XFS_DIFLAG_NODUMP;
1169 	if (xflags & FS_XFLAG_NODEFRAG)
1170 		di_flags |= XFS_DIFLAG_NODEFRAG;
1171 	if (xflags & FS_XFLAG_FILESTREAM)
1172 		di_flags |= XFS_DIFLAG_FILESTREAM;
1173 	if (S_ISDIR(VFS_I(ip)->i_mode)) {
1174 		if (xflags & FS_XFLAG_RTINHERIT)
1175 			di_flags |= XFS_DIFLAG_RTINHERIT;
1176 		if (xflags & FS_XFLAG_NOSYMLINKS)
1177 			di_flags |= XFS_DIFLAG_NOSYMLINKS;
1178 		if (xflags & FS_XFLAG_EXTSZINHERIT)
1179 			di_flags |= XFS_DIFLAG_EXTSZINHERIT;
1180 		if (xflags & FS_XFLAG_PROJINHERIT)
1181 			di_flags |= XFS_DIFLAG_PROJINHERIT;
1182 	} else if (S_ISREG(VFS_I(ip)->i_mode)) {
1183 		if (xflags & FS_XFLAG_REALTIME)
1184 			di_flags |= XFS_DIFLAG_REALTIME;
1185 		if (xflags & FS_XFLAG_EXTSIZE)
1186 			di_flags |= XFS_DIFLAG_EXTSIZE;
1187 	}
1188 
1189 	return di_flags;
1190 }
1191 
1192 STATIC uint64_t
1193 xfs_flags2diflags2(
1194 	struct xfs_inode	*ip,
1195 	unsigned int		xflags)
1196 {
1197 	uint64_t		di_flags2 =
1198 		(ip->i_d.di_flags2 & XFS_DIFLAG2_REFLINK);
1199 
1200 	if (xflags & FS_XFLAG_DAX)
1201 		di_flags2 |= XFS_DIFLAG2_DAX;
1202 	if (xflags & FS_XFLAG_COWEXTSIZE)
1203 		di_flags2 |= XFS_DIFLAG2_COWEXTSIZE;
1204 
1205 	return di_flags2;
1206 }
1207 
1208 STATIC void
1209 xfs_diflags_to_linux(
1210 	struct xfs_inode	*ip)
1211 {
1212 	struct inode		*inode = VFS_I(ip);
1213 	unsigned int		xflags = xfs_ip2xflags(ip);
1214 
1215 	if (xflags & FS_XFLAG_IMMUTABLE)
1216 		inode->i_flags |= S_IMMUTABLE;
1217 	else
1218 		inode->i_flags &= ~S_IMMUTABLE;
1219 	if (xflags & FS_XFLAG_APPEND)
1220 		inode->i_flags |= S_APPEND;
1221 	else
1222 		inode->i_flags &= ~S_APPEND;
1223 	if (xflags & FS_XFLAG_SYNC)
1224 		inode->i_flags |= S_SYNC;
1225 	else
1226 		inode->i_flags &= ~S_SYNC;
1227 	if (xflags & FS_XFLAG_NOATIME)
1228 		inode->i_flags |= S_NOATIME;
1229 	else
1230 		inode->i_flags &= ~S_NOATIME;
1231 #if 0	/* disabled until the flag switching races are sorted out */
1232 	if (xflags & FS_XFLAG_DAX)
1233 		inode->i_flags |= S_DAX;
1234 	else
1235 		inode->i_flags &= ~S_DAX;
1236 #endif
1237 }
1238 
1239 static int
1240 xfs_ioctl_setattr_xflags(
1241 	struct xfs_trans	*tp,
1242 	struct xfs_inode	*ip,
1243 	struct fsxattr		*fa)
1244 {
1245 	struct xfs_mount	*mp = ip->i_mount;
1246 	uint64_t		di_flags2;
1247 
1248 	/* Can't change realtime flag if any extents are allocated. */
1249 	if ((ip->i_d.di_nextents || ip->i_delayed_blks) &&
1250 	    XFS_IS_REALTIME_INODE(ip) != (fa->fsx_xflags & FS_XFLAG_REALTIME))
1251 		return -EINVAL;
1252 
1253 	/* If realtime flag is set then must have realtime device */
1254 	if (fa->fsx_xflags & FS_XFLAG_REALTIME) {
1255 		if (mp->m_sb.sb_rblocks == 0 || mp->m_sb.sb_rextsize == 0 ||
1256 		    (ip->i_d.di_extsize % mp->m_sb.sb_rextsize))
1257 			return -EINVAL;
1258 	}
1259 
1260 	/* Clear reflink if we are actually able to set the rt flag. */
1261 	if ((fa->fsx_xflags & FS_XFLAG_REALTIME) && xfs_is_reflink_inode(ip))
1262 		ip->i_d.di_flags2 &= ~XFS_DIFLAG2_REFLINK;
1263 
1264 	/* Don't allow us to set DAX mode for a reflinked file for now. */
1265 	if ((fa->fsx_xflags & FS_XFLAG_DAX) && xfs_is_reflink_inode(ip))
1266 		return -EINVAL;
1267 
1268 	/* diflags2 only valid for v3 inodes. */
1269 	di_flags2 = xfs_flags2diflags2(ip, fa->fsx_xflags);
1270 	if (di_flags2 && ip->i_d.di_version < 3)
1271 		return -EINVAL;
1272 
1273 	ip->i_d.di_flags = xfs_flags2diflags(ip, fa->fsx_xflags);
1274 	ip->i_d.di_flags2 = di_flags2;
1275 
1276 	xfs_diflags_to_linux(ip);
1277 	xfs_trans_ichgtime(tp, ip, XFS_ICHGTIME_CHG);
1278 	xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
1279 	XFS_STATS_INC(mp, xs_ig_attrchg);
1280 	return 0;
1281 }
1282 
1283 /*
1284  * If we are changing DAX flags, we have to ensure the file is clean and any
1285  * cached objects in the address space are invalidated and removed. This
1286  * requires us to lock out other IO and page faults similar to a truncate
1287  * operation. The locks need to be held until the transaction has been committed
1288  * so that the cache invalidation is atomic with respect to the DAX flag
1289  * manipulation.
1290  */
1291 static int
1292 xfs_ioctl_setattr_dax_invalidate(
1293 	struct xfs_inode	*ip,
1294 	struct fsxattr		*fa,
1295 	int			*join_flags)
1296 {
1297 	struct inode		*inode = VFS_I(ip);
1298 	struct super_block	*sb = inode->i_sb;
1299 	int			error;
1300 
1301 	*join_flags = 0;
1302 
1303 	/*
1304 	 * It is only valid to set the DAX flag on regular files and
1305 	 * directories on filesystems where the block size is equal to the page
1306 	 * size. On directories it serves as an inherited hint so we don't
1307 	 * have to check the device for dax support or flush pagecache.
1308 	 */
1309 	if (fa->fsx_xflags & FS_XFLAG_DAX) {
1310 		if (!(S_ISREG(inode->i_mode) || S_ISDIR(inode->i_mode)))
1311 			return -EINVAL;
1312 		if (S_ISREG(inode->i_mode) &&
1313 		    !bdev_dax_supported(xfs_find_bdev_for_inode(VFS_I(ip)),
1314 				sb->s_blocksize))
1315 			return -EINVAL;
1316 	}
1317 
1318 	/* If the DAX state is not changing, we have nothing to do here. */
1319 	if ((fa->fsx_xflags & FS_XFLAG_DAX) && IS_DAX(inode))
1320 		return 0;
1321 	if (!(fa->fsx_xflags & FS_XFLAG_DAX) && !IS_DAX(inode))
1322 		return 0;
1323 
1324 	if (S_ISDIR(inode->i_mode))
1325 		return 0;
1326 
1327 	/* lock, flush and invalidate mapping in preparation for flag change */
1328 	xfs_ilock(ip, XFS_MMAPLOCK_EXCL | XFS_IOLOCK_EXCL);
1329 	error = filemap_write_and_wait(inode->i_mapping);
1330 	if (error)
1331 		goto out_unlock;
1332 	error = invalidate_inode_pages2(inode->i_mapping);
1333 	if (error)
1334 		goto out_unlock;
1335 
1336 	*join_flags = XFS_MMAPLOCK_EXCL | XFS_IOLOCK_EXCL;
1337 	return 0;
1338 
1339 out_unlock:
1340 	xfs_iunlock(ip, XFS_MMAPLOCK_EXCL | XFS_IOLOCK_EXCL);
1341 	return error;
1342 
1343 }
1344 
1345 /*
1346  * Set up the transaction structure for the setattr operation, checking that we
1347  * have permission to do so. On success, return a clean transaction and the
1348  * inode locked exclusively ready for further operation specific checks. On
1349  * failure, return an error without modifying or locking the inode.
1350  *
1351  * The inode might already be IO locked on call. If this is the case, it is
1352  * indicated in @join_flags and we take full responsibility for ensuring they
1353  * are unlocked from now on. Hence if we have an error here, we still have to
1354  * unlock them. Otherwise, once they are joined to the transaction, they will
1355  * be unlocked on commit/cancel.
1356  */
1357 static struct xfs_trans *
1358 xfs_ioctl_setattr_get_trans(
1359 	struct xfs_inode	*ip,
1360 	int			join_flags)
1361 {
1362 	struct xfs_mount	*mp = ip->i_mount;
1363 	struct xfs_trans	*tp;
1364 	int			error = -EROFS;
1365 
1366 	if (mp->m_flags & XFS_MOUNT_RDONLY)
1367 		goto out_unlock;
1368 	error = -EIO;
1369 	if (XFS_FORCED_SHUTDOWN(mp))
1370 		goto out_unlock;
1371 
1372 	error = xfs_trans_alloc(mp, &M_RES(mp)->tr_ichange, 0, 0, 0, &tp);
1373 	if (error)
1374 		goto out_unlock;
1375 
1376 	xfs_ilock(ip, XFS_ILOCK_EXCL);
1377 	xfs_trans_ijoin(tp, ip, XFS_ILOCK_EXCL | join_flags);
1378 	join_flags = 0;
1379 
1380 	/*
1381 	 * CAP_FOWNER overrides the following restrictions:
1382 	 *
1383 	 * The user ID of the calling process must be equal to the file owner
1384 	 * ID, except in cases where the CAP_FSETID capability is applicable.
1385 	 */
1386 	if (!inode_owner_or_capable(VFS_I(ip))) {
1387 		error = -EPERM;
1388 		goto out_cancel;
1389 	}
1390 
1391 	if (mp->m_flags & XFS_MOUNT_WSYNC)
1392 		xfs_trans_set_sync(tp);
1393 
1394 	return tp;
1395 
1396 out_cancel:
1397 	xfs_trans_cancel(tp);
1398 out_unlock:
1399 	if (join_flags)
1400 		xfs_iunlock(ip, join_flags);
1401 	return ERR_PTR(error);
1402 }
1403 
1404 /*
1405  * extent size hint validation is somewhat cumbersome. Rules are:
1406  *
1407  * 1. extent size hint is only valid for directories and regular files
1408  * 2. FS_XFLAG_EXTSIZE is only valid for regular files
1409  * 3. FS_XFLAG_EXTSZINHERIT is only valid for directories.
1410  * 4. can only be changed on regular files if no extents are allocated
1411  * 5. can be changed on directories at any time
1412  * 6. extsize hint of 0 turns off hints, clears inode flags.
1413  * 7. Extent size must be a multiple of the appropriate block size.
1414  * 8. for non-realtime files, the extent size hint must be limited
1415  *    to half the AG size to avoid alignment extending the extent beyond the
1416  *    limits of the AG.
1417  *
1418  * Please keep this function in sync with xfs_scrub_inode_extsize.
1419  */
1420 static int
1421 xfs_ioctl_setattr_check_extsize(
1422 	struct xfs_inode	*ip,
1423 	struct fsxattr		*fa)
1424 {
1425 	struct xfs_mount	*mp = ip->i_mount;
1426 	xfs_extlen_t		size;
1427 	xfs_fsblock_t		extsize_fsb;
1428 
1429 	if (S_ISREG(VFS_I(ip)->i_mode) && ip->i_d.di_nextents &&
1430 	    ((ip->i_d.di_extsize << mp->m_sb.sb_blocklog) != fa->fsx_extsize))
1431 		return -EINVAL;
1432 
1433 	if (fa->fsx_extsize == 0)
1434 		return 0;
1435 
1436 	extsize_fsb = XFS_B_TO_FSB(mp, fa->fsx_extsize);
1437 	if (extsize_fsb > MAXEXTLEN)
1438 		return -EINVAL;
1439 
1440 	if (XFS_IS_REALTIME_INODE(ip) ||
1441 	    (fa->fsx_xflags & FS_XFLAG_REALTIME)) {
1442 		size = mp->m_sb.sb_rextsize << mp->m_sb.sb_blocklog;
1443 	} else {
1444 		size = mp->m_sb.sb_blocksize;
1445 		if (extsize_fsb > mp->m_sb.sb_agblocks / 2)
1446 			return -EINVAL;
1447 	}
1448 
1449 	if (fa->fsx_extsize % size)
1450 		return -EINVAL;
1451 
1452 	return 0;
1453 }
1454 
1455 /*
1456  * CoW extent size hint validation rules are:
1457  *
1458  * 1. CoW extent size hint can only be set if reflink is enabled on the fs.
1459  *    The inode does not have to have any shared blocks, but it must be a v3.
1460  * 2. FS_XFLAG_COWEXTSIZE is only valid for directories and regular files;
1461  *    for a directory, the hint is propagated to new files.
1462  * 3. Can be changed on files & directories at any time.
1463  * 4. CoW extsize hint of 0 turns off hints, clears inode flags.
1464  * 5. Extent size must be a multiple of the appropriate block size.
1465  * 6. The extent size hint must be limited to half the AG size to avoid
1466  *    alignment extending the extent beyond the limits of the AG.
1467  *
1468  * Please keep this function in sync with xfs_scrub_inode_cowextsize.
1469  */
1470 static int
1471 xfs_ioctl_setattr_check_cowextsize(
1472 	struct xfs_inode	*ip,
1473 	struct fsxattr		*fa)
1474 {
1475 	struct xfs_mount	*mp = ip->i_mount;
1476 	xfs_extlen_t		size;
1477 	xfs_fsblock_t		cowextsize_fsb;
1478 
1479 	if (!(fa->fsx_xflags & FS_XFLAG_COWEXTSIZE))
1480 		return 0;
1481 
1482 	if (!xfs_sb_version_hasreflink(&ip->i_mount->m_sb) ||
1483 	    ip->i_d.di_version != 3)
1484 		return -EINVAL;
1485 
1486 	if (fa->fsx_cowextsize == 0)
1487 		return 0;
1488 
1489 	cowextsize_fsb = XFS_B_TO_FSB(mp, fa->fsx_cowextsize);
1490 	if (cowextsize_fsb > MAXEXTLEN)
1491 		return -EINVAL;
1492 
1493 	size = mp->m_sb.sb_blocksize;
1494 	if (cowextsize_fsb > mp->m_sb.sb_agblocks / 2)
1495 		return -EINVAL;
1496 
1497 	if (fa->fsx_cowextsize % size)
1498 		return -EINVAL;
1499 
1500 	return 0;
1501 }
1502 
1503 static int
1504 xfs_ioctl_setattr_check_projid(
1505 	struct xfs_inode	*ip,
1506 	struct fsxattr		*fa)
1507 {
1508 	/* Disallow 32bit project ids if projid32bit feature is not enabled. */
1509 	if (fa->fsx_projid > (uint16_t)-1 &&
1510 	    !xfs_sb_version_hasprojid32bit(&ip->i_mount->m_sb))
1511 		return -EINVAL;
1512 	return 0;
1513 }
1514 
1515 STATIC int
1516 xfs_ioctl_setattr(
1517 	xfs_inode_t		*ip,
1518 	struct fsxattr		*fa)
1519 {
1520 	struct fsxattr		old_fa;
1521 	struct xfs_mount	*mp = ip->i_mount;
1522 	struct xfs_trans	*tp;
1523 	struct xfs_dquot	*udqp = NULL;
1524 	struct xfs_dquot	*pdqp = NULL;
1525 	struct xfs_dquot	*olddquot = NULL;
1526 	int			code;
1527 	int			join_flags = 0;
1528 
1529 	trace_xfs_ioctl_setattr(ip);
1530 
1531 	code = xfs_ioctl_setattr_check_projid(ip, fa);
1532 	if (code)
1533 		return code;
1534 
1535 	/*
1536 	 * If disk quotas is on, we make sure that the dquots do exist on disk,
1537 	 * before we start any other transactions. Trying to do this later
1538 	 * is messy. We don't care to take a readlock to look at the ids
1539 	 * in inode here, because we can't hold it across the trans_reserve.
1540 	 * If the IDs do change before we take the ilock, we're covered
1541 	 * because the i_*dquot fields will get updated anyway.
1542 	 */
1543 	if (XFS_IS_QUOTA_ON(mp)) {
1544 		code = xfs_qm_vop_dqalloc(ip, ip->i_d.di_uid,
1545 					 ip->i_d.di_gid, fa->fsx_projid,
1546 					 XFS_QMOPT_PQUOTA, &udqp, NULL, &pdqp);
1547 		if (code)
1548 			return code;
1549 	}
1550 
1551 	/*
1552 	 * Changing DAX config may require inode locking for mapping
1553 	 * invalidation. These need to be held all the way to transaction commit
1554 	 * or cancel time, so need to be passed through to
1555 	 * xfs_ioctl_setattr_get_trans() so it can apply them to the join call
1556 	 * appropriately.
1557 	 */
1558 	code = xfs_ioctl_setattr_dax_invalidate(ip, fa, &join_flags);
1559 	if (code)
1560 		goto error_free_dquots;
1561 
1562 	tp = xfs_ioctl_setattr_get_trans(ip, join_flags);
1563 	if (IS_ERR(tp)) {
1564 		code = PTR_ERR(tp);
1565 		goto error_free_dquots;
1566 	}
1567 
1568 	if (XFS_IS_QUOTA_RUNNING(mp) && XFS_IS_PQUOTA_ON(mp) &&
1569 	    xfs_get_projid(ip) != fa->fsx_projid) {
1570 		code = xfs_qm_vop_chown_reserve(tp, ip, udqp, NULL, pdqp,
1571 				capable(CAP_FOWNER) ?  XFS_QMOPT_FORCE_RES : 0);
1572 		if (code)	/* out of quota */
1573 			goto error_trans_cancel;
1574 	}
1575 
1576 	xfs_fill_fsxattr(ip, false, &old_fa);
1577 	code = vfs_ioc_fssetxattr_check(VFS_I(ip), &old_fa, fa);
1578 	if (code)
1579 		goto error_trans_cancel;
1580 
1581 	code = xfs_ioctl_setattr_check_extsize(ip, fa);
1582 	if (code)
1583 		goto error_trans_cancel;
1584 
1585 	code = xfs_ioctl_setattr_check_cowextsize(ip, fa);
1586 	if (code)
1587 		goto error_trans_cancel;
1588 
1589 	code = xfs_ioctl_setattr_xflags(tp, ip, fa);
1590 	if (code)
1591 		goto error_trans_cancel;
1592 
1593 	/*
1594 	 * Change file ownership.  Must be the owner or privileged.  CAP_FSETID
1595 	 * overrides the following restrictions:
1596 	 *
1597 	 * The set-user-ID and set-group-ID bits of a file will be cleared upon
1598 	 * successful return from chown()
1599 	 */
1600 
1601 	if ((VFS_I(ip)->i_mode & (S_ISUID|S_ISGID)) &&
1602 	    !capable_wrt_inode_uidgid(VFS_I(ip), CAP_FSETID))
1603 		VFS_I(ip)->i_mode &= ~(S_ISUID|S_ISGID);
1604 
1605 	/* Change the ownerships and register project quota modifications */
1606 	if (xfs_get_projid(ip) != fa->fsx_projid) {
1607 		if (XFS_IS_QUOTA_RUNNING(mp) && XFS_IS_PQUOTA_ON(mp)) {
1608 			olddquot = xfs_qm_vop_chown(tp, ip,
1609 						&ip->i_pdquot, pdqp);
1610 		}
1611 		ASSERT(ip->i_d.di_version > 1);
1612 		xfs_set_projid(ip, fa->fsx_projid);
1613 	}
1614 
1615 	/*
1616 	 * Only set the extent size hint if we've already determined that the
1617 	 * extent size hint should be set on the inode. If no extent size flags
1618 	 * are set on the inode then unconditionally clear the extent size hint.
1619 	 */
1620 	if (ip->i_d.di_flags & (XFS_DIFLAG_EXTSIZE | XFS_DIFLAG_EXTSZINHERIT))
1621 		ip->i_d.di_extsize = fa->fsx_extsize >> mp->m_sb.sb_blocklog;
1622 	else
1623 		ip->i_d.di_extsize = 0;
1624 	if (ip->i_d.di_version == 3 &&
1625 	    (ip->i_d.di_flags2 & XFS_DIFLAG2_COWEXTSIZE))
1626 		ip->i_d.di_cowextsize = fa->fsx_cowextsize >>
1627 				mp->m_sb.sb_blocklog;
1628 	else
1629 		ip->i_d.di_cowextsize = 0;
1630 
1631 	code = xfs_trans_commit(tp);
1632 
1633 	/*
1634 	 * Release any dquot(s) the inode had kept before chown.
1635 	 */
1636 	xfs_qm_dqrele(olddquot);
1637 	xfs_qm_dqrele(udqp);
1638 	xfs_qm_dqrele(pdqp);
1639 
1640 	return code;
1641 
1642 error_trans_cancel:
1643 	xfs_trans_cancel(tp);
1644 error_free_dquots:
1645 	xfs_qm_dqrele(udqp);
1646 	xfs_qm_dqrele(pdqp);
1647 	return code;
1648 }
1649 
1650 STATIC int
1651 xfs_ioc_fssetxattr(
1652 	xfs_inode_t		*ip,
1653 	struct file		*filp,
1654 	void			__user *arg)
1655 {
1656 	struct fsxattr		fa;
1657 	int error;
1658 
1659 	if (copy_from_user(&fa, arg, sizeof(fa)))
1660 		return -EFAULT;
1661 
1662 	error = mnt_want_write_file(filp);
1663 	if (error)
1664 		return error;
1665 	error = xfs_ioctl_setattr(ip, &fa);
1666 	mnt_drop_write_file(filp);
1667 	return error;
1668 }
1669 
1670 STATIC int
1671 xfs_ioc_getxflags(
1672 	xfs_inode_t		*ip,
1673 	void			__user *arg)
1674 {
1675 	unsigned int		flags;
1676 
1677 	flags = xfs_di2lxflags(ip->i_d.di_flags);
1678 	if (copy_to_user(arg, &flags, sizeof(flags)))
1679 		return -EFAULT;
1680 	return 0;
1681 }
1682 
1683 STATIC int
1684 xfs_ioc_setxflags(
1685 	struct xfs_inode	*ip,
1686 	struct file		*filp,
1687 	void			__user *arg)
1688 {
1689 	struct xfs_trans	*tp;
1690 	struct fsxattr		fa;
1691 	struct fsxattr		old_fa;
1692 	unsigned int		flags;
1693 	int			join_flags = 0;
1694 	int			error;
1695 
1696 	if (copy_from_user(&flags, arg, sizeof(flags)))
1697 		return -EFAULT;
1698 
1699 	if (flags & ~(FS_IMMUTABLE_FL | FS_APPEND_FL | \
1700 		      FS_NOATIME_FL | FS_NODUMP_FL | \
1701 		      FS_SYNC_FL))
1702 		return -EOPNOTSUPP;
1703 
1704 	fa.fsx_xflags = xfs_merge_ioc_xflags(flags, xfs_ip2xflags(ip));
1705 
1706 	error = mnt_want_write_file(filp);
1707 	if (error)
1708 		return error;
1709 
1710 	/*
1711 	 * Changing DAX config may require inode locking for mapping
1712 	 * invalidation. These need to be held all the way to transaction commit
1713 	 * or cancel time, so need to be passed through to
1714 	 * xfs_ioctl_setattr_get_trans() so it can apply them to the join call
1715 	 * appropriately.
1716 	 */
1717 	error = xfs_ioctl_setattr_dax_invalidate(ip, &fa, &join_flags);
1718 	if (error)
1719 		goto out_drop_write;
1720 
1721 	tp = xfs_ioctl_setattr_get_trans(ip, join_flags);
1722 	if (IS_ERR(tp)) {
1723 		error = PTR_ERR(tp);
1724 		goto out_drop_write;
1725 	}
1726 
1727 	xfs_fill_fsxattr(ip, false, &old_fa);
1728 	error = vfs_ioc_fssetxattr_check(VFS_I(ip), &old_fa, &fa);
1729 	if (error) {
1730 		xfs_trans_cancel(tp);
1731 		goto out_drop_write;
1732 	}
1733 
1734 	error = xfs_ioctl_setattr_xflags(tp, ip, &fa);
1735 	if (error) {
1736 		xfs_trans_cancel(tp);
1737 		goto out_drop_write;
1738 	}
1739 
1740 	error = xfs_trans_commit(tp);
1741 out_drop_write:
1742 	mnt_drop_write_file(filp);
1743 	return error;
1744 }
1745 
1746 static bool
1747 xfs_getbmap_format(
1748 	struct kgetbmap		*p,
1749 	struct getbmapx __user	*u,
1750 	size_t			recsize)
1751 {
1752 	if (put_user(p->bmv_offset, &u->bmv_offset) ||
1753 	    put_user(p->bmv_block, &u->bmv_block) ||
1754 	    put_user(p->bmv_length, &u->bmv_length) ||
1755 	    put_user(0, &u->bmv_count) ||
1756 	    put_user(0, &u->bmv_entries))
1757 		return false;
1758 	if (recsize < sizeof(struct getbmapx))
1759 		return true;
1760 	if (put_user(0, &u->bmv_iflags) ||
1761 	    put_user(p->bmv_oflags, &u->bmv_oflags) ||
1762 	    put_user(0, &u->bmv_unused1) ||
1763 	    put_user(0, &u->bmv_unused2))
1764 		return false;
1765 	return true;
1766 }
1767 
1768 STATIC int
1769 xfs_ioc_getbmap(
1770 	struct file		*file,
1771 	unsigned int		cmd,
1772 	void			__user *arg)
1773 {
1774 	struct getbmapx		bmx = { 0 };
1775 	struct kgetbmap		*buf;
1776 	size_t			recsize;
1777 	int			error, i;
1778 
1779 	switch (cmd) {
1780 	case XFS_IOC_GETBMAPA:
1781 		bmx.bmv_iflags = BMV_IF_ATTRFORK;
1782 		/*FALLTHRU*/
1783 	case XFS_IOC_GETBMAP:
1784 		if (file->f_mode & FMODE_NOCMTIME)
1785 			bmx.bmv_iflags |= BMV_IF_NO_DMAPI_READ;
1786 		/* struct getbmap is a strict subset of struct getbmapx. */
1787 		recsize = sizeof(struct getbmap);
1788 		break;
1789 	case XFS_IOC_GETBMAPX:
1790 		recsize = sizeof(struct getbmapx);
1791 		break;
1792 	default:
1793 		return -EINVAL;
1794 	}
1795 
1796 	if (copy_from_user(&bmx, arg, recsize))
1797 		return -EFAULT;
1798 
1799 	if (bmx.bmv_count < 2)
1800 		return -EINVAL;
1801 	if (bmx.bmv_count > ULONG_MAX / recsize)
1802 		return -ENOMEM;
1803 
1804 	buf = kmem_zalloc_large(bmx.bmv_count * sizeof(*buf), 0);
1805 	if (!buf)
1806 		return -ENOMEM;
1807 
1808 	error = xfs_getbmap(XFS_I(file_inode(file)), &bmx, buf);
1809 	if (error)
1810 		goto out_free_buf;
1811 
1812 	error = -EFAULT;
1813 	if (copy_to_user(arg, &bmx, recsize))
1814 		goto out_free_buf;
1815 	arg += recsize;
1816 
1817 	for (i = 0; i < bmx.bmv_entries; i++) {
1818 		if (!xfs_getbmap_format(buf + i, arg, recsize))
1819 			goto out_free_buf;
1820 		arg += recsize;
1821 	}
1822 
1823 	error = 0;
1824 out_free_buf:
1825 	kmem_free(buf);
1826 	return error;
1827 }
1828 
1829 struct getfsmap_info {
1830 	struct xfs_mount	*mp;
1831 	struct fsmap_head __user *data;
1832 	unsigned int		idx;
1833 	__u32			last_flags;
1834 };
1835 
1836 STATIC int
1837 xfs_getfsmap_format(struct xfs_fsmap *xfm, void *priv)
1838 {
1839 	struct getfsmap_info	*info = priv;
1840 	struct fsmap		fm;
1841 
1842 	trace_xfs_getfsmap_mapping(info->mp, xfm);
1843 
1844 	info->last_flags = xfm->fmr_flags;
1845 	xfs_fsmap_from_internal(&fm, xfm);
1846 	if (copy_to_user(&info->data->fmh_recs[info->idx++], &fm,
1847 			sizeof(struct fsmap)))
1848 		return -EFAULT;
1849 
1850 	return 0;
1851 }
1852 
1853 STATIC int
1854 xfs_ioc_getfsmap(
1855 	struct xfs_inode	*ip,
1856 	struct fsmap_head	__user *arg)
1857 {
1858 	struct getfsmap_info	info = { NULL };
1859 	struct xfs_fsmap_head	xhead = {0};
1860 	struct fsmap_head	head;
1861 	bool			aborted = false;
1862 	int			error;
1863 
1864 	if (copy_from_user(&head, arg, sizeof(struct fsmap_head)))
1865 		return -EFAULT;
1866 	if (memchr_inv(head.fmh_reserved, 0, sizeof(head.fmh_reserved)) ||
1867 	    memchr_inv(head.fmh_keys[0].fmr_reserved, 0,
1868 		       sizeof(head.fmh_keys[0].fmr_reserved)) ||
1869 	    memchr_inv(head.fmh_keys[1].fmr_reserved, 0,
1870 		       sizeof(head.fmh_keys[1].fmr_reserved)))
1871 		return -EINVAL;
1872 
1873 	xhead.fmh_iflags = head.fmh_iflags;
1874 	xhead.fmh_count = head.fmh_count;
1875 	xfs_fsmap_to_internal(&xhead.fmh_keys[0], &head.fmh_keys[0]);
1876 	xfs_fsmap_to_internal(&xhead.fmh_keys[1], &head.fmh_keys[1]);
1877 
1878 	trace_xfs_getfsmap_low_key(ip->i_mount, &xhead.fmh_keys[0]);
1879 	trace_xfs_getfsmap_high_key(ip->i_mount, &xhead.fmh_keys[1]);
1880 
1881 	info.mp = ip->i_mount;
1882 	info.data = arg;
1883 	error = xfs_getfsmap(ip->i_mount, &xhead, xfs_getfsmap_format, &info);
1884 	if (error == XFS_BTREE_QUERY_RANGE_ABORT) {
1885 		error = 0;
1886 		aborted = true;
1887 	} else if (error)
1888 		return error;
1889 
1890 	/* If we didn't abort, set the "last" flag in the last fmx */
1891 	if (!aborted && info.idx) {
1892 		info.last_flags |= FMR_OF_LAST;
1893 		if (copy_to_user(&info.data->fmh_recs[info.idx - 1].fmr_flags,
1894 				&info.last_flags, sizeof(info.last_flags)))
1895 			return -EFAULT;
1896 	}
1897 
1898 	/* copy back header */
1899 	head.fmh_entries = xhead.fmh_entries;
1900 	head.fmh_oflags = xhead.fmh_oflags;
1901 	if (copy_to_user(arg, &head, sizeof(struct fsmap_head)))
1902 		return -EFAULT;
1903 
1904 	return 0;
1905 }
1906 
1907 STATIC int
1908 xfs_ioc_scrub_metadata(
1909 	struct xfs_inode		*ip,
1910 	void				__user *arg)
1911 {
1912 	struct xfs_scrub_metadata	scrub;
1913 	int				error;
1914 
1915 	if (!capable(CAP_SYS_ADMIN))
1916 		return -EPERM;
1917 
1918 	if (copy_from_user(&scrub, arg, sizeof(scrub)))
1919 		return -EFAULT;
1920 
1921 	error = xfs_scrub_metadata(ip, &scrub);
1922 	if (error)
1923 		return error;
1924 
1925 	if (copy_to_user(arg, &scrub, sizeof(scrub)))
1926 		return -EFAULT;
1927 
1928 	return 0;
1929 }
1930 
1931 int
1932 xfs_ioc_swapext(
1933 	xfs_swapext_t	*sxp)
1934 {
1935 	xfs_inode_t     *ip, *tip;
1936 	struct fd	f, tmp;
1937 	int		error = 0;
1938 
1939 	/* Pull information for the target fd */
1940 	f = fdget((int)sxp->sx_fdtarget);
1941 	if (!f.file) {
1942 		error = -EINVAL;
1943 		goto out;
1944 	}
1945 
1946 	if (!(f.file->f_mode & FMODE_WRITE) ||
1947 	    !(f.file->f_mode & FMODE_READ) ||
1948 	    (f.file->f_flags & O_APPEND)) {
1949 		error = -EBADF;
1950 		goto out_put_file;
1951 	}
1952 
1953 	tmp = fdget((int)sxp->sx_fdtmp);
1954 	if (!tmp.file) {
1955 		error = -EINVAL;
1956 		goto out_put_file;
1957 	}
1958 
1959 	if (!(tmp.file->f_mode & FMODE_WRITE) ||
1960 	    !(tmp.file->f_mode & FMODE_READ) ||
1961 	    (tmp.file->f_flags & O_APPEND)) {
1962 		error = -EBADF;
1963 		goto out_put_tmp_file;
1964 	}
1965 
1966 	if (IS_SWAPFILE(file_inode(f.file)) ||
1967 	    IS_SWAPFILE(file_inode(tmp.file))) {
1968 		error = -EINVAL;
1969 		goto out_put_tmp_file;
1970 	}
1971 
1972 	/*
1973 	 * We need to ensure that the fds passed in point to XFS inodes
1974 	 * before we cast and access them as XFS structures as we have no
1975 	 * control over what the user passes us here.
1976 	 */
1977 	if (f.file->f_op != &xfs_file_operations ||
1978 	    tmp.file->f_op != &xfs_file_operations) {
1979 		error = -EINVAL;
1980 		goto out_put_tmp_file;
1981 	}
1982 
1983 	ip = XFS_I(file_inode(f.file));
1984 	tip = XFS_I(file_inode(tmp.file));
1985 
1986 	if (ip->i_mount != tip->i_mount) {
1987 		error = -EINVAL;
1988 		goto out_put_tmp_file;
1989 	}
1990 
1991 	if (ip->i_ino == tip->i_ino) {
1992 		error = -EINVAL;
1993 		goto out_put_tmp_file;
1994 	}
1995 
1996 	if (XFS_FORCED_SHUTDOWN(ip->i_mount)) {
1997 		error = -EIO;
1998 		goto out_put_tmp_file;
1999 	}
2000 
2001 	error = xfs_swap_extents(ip, tip, sxp);
2002 
2003  out_put_tmp_file:
2004 	fdput(tmp);
2005  out_put_file:
2006 	fdput(f);
2007  out:
2008 	return error;
2009 }
2010 
2011 static int
2012 xfs_ioc_getlabel(
2013 	struct xfs_mount	*mp,
2014 	char			__user *user_label)
2015 {
2016 	struct xfs_sb		*sbp = &mp->m_sb;
2017 	char			label[XFSLABEL_MAX + 1];
2018 
2019 	/* Paranoia */
2020 	BUILD_BUG_ON(sizeof(sbp->sb_fname) > FSLABEL_MAX);
2021 
2022 	/* 1 larger than sb_fname, so this ensures a trailing NUL char */
2023 	memset(label, 0, sizeof(label));
2024 	spin_lock(&mp->m_sb_lock);
2025 	strncpy(label, sbp->sb_fname, XFSLABEL_MAX);
2026 	spin_unlock(&mp->m_sb_lock);
2027 
2028 	if (copy_to_user(user_label, label, sizeof(label)))
2029 		return -EFAULT;
2030 	return 0;
2031 }
2032 
2033 static int
2034 xfs_ioc_setlabel(
2035 	struct file		*filp,
2036 	struct xfs_mount	*mp,
2037 	char			__user *newlabel)
2038 {
2039 	struct xfs_sb		*sbp = &mp->m_sb;
2040 	char			label[XFSLABEL_MAX + 1];
2041 	size_t			len;
2042 	int			error;
2043 
2044 	if (!capable(CAP_SYS_ADMIN))
2045 		return -EPERM;
2046 	/*
2047 	 * The generic ioctl allows up to FSLABEL_MAX chars, but XFS is much
2048 	 * smaller, at 12 bytes.  We copy one more to be sure we find the
2049 	 * (required) NULL character to test the incoming label length.
2050 	 * NB: The on disk label doesn't need to be null terminated.
2051 	 */
2052 	if (copy_from_user(label, newlabel, XFSLABEL_MAX + 1))
2053 		return -EFAULT;
2054 	len = strnlen(label, XFSLABEL_MAX + 1);
2055 	if (len > sizeof(sbp->sb_fname))
2056 		return -EINVAL;
2057 
2058 	error = mnt_want_write_file(filp);
2059 	if (error)
2060 		return error;
2061 
2062 	spin_lock(&mp->m_sb_lock);
2063 	memset(sbp->sb_fname, 0, sizeof(sbp->sb_fname));
2064 	memcpy(sbp->sb_fname, label, len);
2065 	spin_unlock(&mp->m_sb_lock);
2066 
2067 	/*
2068 	 * Now we do several things to satisfy userspace.
2069 	 * In addition to normal logging of the primary superblock, we also
2070 	 * immediately write these changes to sector zero for the primary, then
2071 	 * update all backup supers (as xfs_db does for a label change), then
2072 	 * invalidate the block device page cache.  This is so that any prior
2073 	 * buffered reads from userspace (i.e. from blkid) are invalidated,
2074 	 * and userspace will see the newly-written label.
2075 	 */
2076 	error = xfs_sync_sb_buf(mp);
2077 	if (error)
2078 		goto out;
2079 	/*
2080 	 * growfs also updates backup supers so lock against that.
2081 	 */
2082 	mutex_lock(&mp->m_growlock);
2083 	error = xfs_update_secondary_sbs(mp);
2084 	mutex_unlock(&mp->m_growlock);
2085 
2086 	invalidate_bdev(mp->m_ddev_targp->bt_bdev);
2087 
2088 out:
2089 	mnt_drop_write_file(filp);
2090 	return error;
2091 }
2092 
2093 /*
2094  * Note: some of the ioctl's return positive numbers as a
2095  * byte count indicating success, such as readlink_by_handle.
2096  * So we don't "sign flip" like most other routines.  This means
2097  * true errors need to be returned as a negative value.
2098  */
2099 long
2100 xfs_file_ioctl(
2101 	struct file		*filp,
2102 	unsigned int		cmd,
2103 	unsigned long		p)
2104 {
2105 	struct inode		*inode = file_inode(filp);
2106 	struct xfs_inode	*ip = XFS_I(inode);
2107 	struct xfs_mount	*mp = ip->i_mount;
2108 	void			__user *arg = (void __user *)p;
2109 	int			error;
2110 
2111 	trace_xfs_file_ioctl(ip);
2112 
2113 	switch (cmd) {
2114 	case FITRIM:
2115 		return xfs_ioc_trim(mp, arg);
2116 	case FS_IOC_GETFSLABEL:
2117 		return xfs_ioc_getlabel(mp, arg);
2118 	case FS_IOC_SETFSLABEL:
2119 		return xfs_ioc_setlabel(filp, mp, arg);
2120 	case XFS_IOC_ALLOCSP:
2121 	case XFS_IOC_FREESP:
2122 	case XFS_IOC_RESVSP:
2123 	case XFS_IOC_UNRESVSP:
2124 	case XFS_IOC_ALLOCSP64:
2125 	case XFS_IOC_FREESP64:
2126 	case XFS_IOC_RESVSP64:
2127 	case XFS_IOC_UNRESVSP64:
2128 	case XFS_IOC_ZERO_RANGE: {
2129 		xfs_flock64_t		bf;
2130 
2131 		if (copy_from_user(&bf, arg, sizeof(bf)))
2132 			return -EFAULT;
2133 		return xfs_ioc_space(filp, cmd, &bf);
2134 	}
2135 	case XFS_IOC_DIOINFO: {
2136 		struct dioattr	da;
2137 		xfs_buftarg_t	*target =
2138 			XFS_IS_REALTIME_INODE(ip) ?
2139 			mp->m_rtdev_targp : mp->m_ddev_targp;
2140 
2141 		da.d_mem =  da.d_miniosz = target->bt_logical_sectorsize;
2142 		da.d_maxiosz = INT_MAX & ~(da.d_miniosz - 1);
2143 
2144 		if (copy_to_user(arg, &da, sizeof(da)))
2145 			return -EFAULT;
2146 		return 0;
2147 	}
2148 
2149 	case XFS_IOC_FSBULKSTAT_SINGLE:
2150 	case XFS_IOC_FSBULKSTAT:
2151 	case XFS_IOC_FSINUMBERS:
2152 		return xfs_ioc_fsbulkstat(mp, cmd, arg);
2153 
2154 	case XFS_IOC_BULKSTAT:
2155 		return xfs_ioc_bulkstat(mp, cmd, arg);
2156 	case XFS_IOC_INUMBERS:
2157 		return xfs_ioc_inumbers(mp, cmd, arg);
2158 
2159 	case XFS_IOC_FSGEOMETRY_V1:
2160 		return xfs_ioc_fsgeometry(mp, arg, 3);
2161 	case XFS_IOC_FSGEOMETRY_V4:
2162 		return xfs_ioc_fsgeometry(mp, arg, 4);
2163 	case XFS_IOC_FSGEOMETRY:
2164 		return xfs_ioc_fsgeometry(mp, arg, 5);
2165 
2166 	case XFS_IOC_AG_GEOMETRY:
2167 		return xfs_ioc_ag_geometry(mp, arg);
2168 
2169 	case XFS_IOC_GETVERSION:
2170 		return put_user(inode->i_generation, (int __user *)arg);
2171 
2172 	case XFS_IOC_FSGETXATTR:
2173 		return xfs_ioc_fsgetxattr(ip, 0, arg);
2174 	case XFS_IOC_FSGETXATTRA:
2175 		return xfs_ioc_fsgetxattr(ip, 1, arg);
2176 	case XFS_IOC_FSSETXATTR:
2177 		return xfs_ioc_fssetxattr(ip, filp, arg);
2178 	case XFS_IOC_GETXFLAGS:
2179 		return xfs_ioc_getxflags(ip, arg);
2180 	case XFS_IOC_SETXFLAGS:
2181 		return xfs_ioc_setxflags(ip, filp, arg);
2182 
2183 	case XFS_IOC_FSSETDM: {
2184 		struct fsdmidata	dmi;
2185 
2186 		if (copy_from_user(&dmi, arg, sizeof(dmi)))
2187 			return -EFAULT;
2188 
2189 		error = mnt_want_write_file(filp);
2190 		if (error)
2191 			return error;
2192 
2193 		error = xfs_set_dmattrs(ip, dmi.fsd_dmevmask,
2194 				dmi.fsd_dmstate);
2195 		mnt_drop_write_file(filp);
2196 		return error;
2197 	}
2198 
2199 	case XFS_IOC_GETBMAP:
2200 	case XFS_IOC_GETBMAPA:
2201 	case XFS_IOC_GETBMAPX:
2202 		return xfs_ioc_getbmap(filp, cmd, arg);
2203 
2204 	case FS_IOC_GETFSMAP:
2205 		return xfs_ioc_getfsmap(ip, arg);
2206 
2207 	case XFS_IOC_SCRUB_METADATA:
2208 		return xfs_ioc_scrub_metadata(ip, arg);
2209 
2210 	case XFS_IOC_FD_TO_HANDLE:
2211 	case XFS_IOC_PATH_TO_HANDLE:
2212 	case XFS_IOC_PATH_TO_FSHANDLE: {
2213 		xfs_fsop_handlereq_t	hreq;
2214 
2215 		if (copy_from_user(&hreq, arg, sizeof(hreq)))
2216 			return -EFAULT;
2217 		return xfs_find_handle(cmd, &hreq);
2218 	}
2219 	case XFS_IOC_OPEN_BY_HANDLE: {
2220 		xfs_fsop_handlereq_t	hreq;
2221 
2222 		if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
2223 			return -EFAULT;
2224 		return xfs_open_by_handle(filp, &hreq);
2225 	}
2226 	case XFS_IOC_FSSETDM_BY_HANDLE:
2227 		return xfs_fssetdm_by_handle(filp, arg);
2228 
2229 	case XFS_IOC_READLINK_BY_HANDLE: {
2230 		xfs_fsop_handlereq_t	hreq;
2231 
2232 		if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
2233 			return -EFAULT;
2234 		return xfs_readlink_by_handle(filp, &hreq);
2235 	}
2236 	case XFS_IOC_ATTRLIST_BY_HANDLE:
2237 		return xfs_attrlist_by_handle(filp, arg);
2238 
2239 	case XFS_IOC_ATTRMULTI_BY_HANDLE:
2240 		return xfs_attrmulti_by_handle(filp, arg);
2241 
2242 	case XFS_IOC_SWAPEXT: {
2243 		struct xfs_swapext	sxp;
2244 
2245 		if (copy_from_user(&sxp, arg, sizeof(xfs_swapext_t)))
2246 			return -EFAULT;
2247 		error = mnt_want_write_file(filp);
2248 		if (error)
2249 			return error;
2250 		error = xfs_ioc_swapext(&sxp);
2251 		mnt_drop_write_file(filp);
2252 		return error;
2253 	}
2254 
2255 	case XFS_IOC_FSCOUNTS: {
2256 		xfs_fsop_counts_t out;
2257 
2258 		xfs_fs_counts(mp, &out);
2259 
2260 		if (copy_to_user(arg, &out, sizeof(out)))
2261 			return -EFAULT;
2262 		return 0;
2263 	}
2264 
2265 	case XFS_IOC_SET_RESBLKS: {
2266 		xfs_fsop_resblks_t inout;
2267 		uint64_t	   in;
2268 
2269 		if (!capable(CAP_SYS_ADMIN))
2270 			return -EPERM;
2271 
2272 		if (mp->m_flags & XFS_MOUNT_RDONLY)
2273 			return -EROFS;
2274 
2275 		if (copy_from_user(&inout, arg, sizeof(inout)))
2276 			return -EFAULT;
2277 
2278 		error = mnt_want_write_file(filp);
2279 		if (error)
2280 			return error;
2281 
2282 		/* input parameter is passed in resblks field of structure */
2283 		in = inout.resblks;
2284 		error = xfs_reserve_blocks(mp, &in, &inout);
2285 		mnt_drop_write_file(filp);
2286 		if (error)
2287 			return error;
2288 
2289 		if (copy_to_user(arg, &inout, sizeof(inout)))
2290 			return -EFAULT;
2291 		return 0;
2292 	}
2293 
2294 	case XFS_IOC_GET_RESBLKS: {
2295 		xfs_fsop_resblks_t out;
2296 
2297 		if (!capable(CAP_SYS_ADMIN))
2298 			return -EPERM;
2299 
2300 		error = xfs_reserve_blocks(mp, NULL, &out);
2301 		if (error)
2302 			return error;
2303 
2304 		if (copy_to_user(arg, &out, sizeof(out)))
2305 			return -EFAULT;
2306 
2307 		return 0;
2308 	}
2309 
2310 	case XFS_IOC_FSGROWFSDATA: {
2311 		xfs_growfs_data_t in;
2312 
2313 		if (copy_from_user(&in, arg, sizeof(in)))
2314 			return -EFAULT;
2315 
2316 		error = mnt_want_write_file(filp);
2317 		if (error)
2318 			return error;
2319 		error = xfs_growfs_data(mp, &in);
2320 		mnt_drop_write_file(filp);
2321 		return error;
2322 	}
2323 
2324 	case XFS_IOC_FSGROWFSLOG: {
2325 		xfs_growfs_log_t in;
2326 
2327 		if (copy_from_user(&in, arg, sizeof(in)))
2328 			return -EFAULT;
2329 
2330 		error = mnt_want_write_file(filp);
2331 		if (error)
2332 			return error;
2333 		error = xfs_growfs_log(mp, &in);
2334 		mnt_drop_write_file(filp);
2335 		return error;
2336 	}
2337 
2338 	case XFS_IOC_FSGROWFSRT: {
2339 		xfs_growfs_rt_t in;
2340 
2341 		if (copy_from_user(&in, arg, sizeof(in)))
2342 			return -EFAULT;
2343 
2344 		error = mnt_want_write_file(filp);
2345 		if (error)
2346 			return error;
2347 		error = xfs_growfs_rt(mp, &in);
2348 		mnt_drop_write_file(filp);
2349 		return error;
2350 	}
2351 
2352 	case XFS_IOC_GOINGDOWN: {
2353 		uint32_t in;
2354 
2355 		if (!capable(CAP_SYS_ADMIN))
2356 			return -EPERM;
2357 
2358 		if (get_user(in, (uint32_t __user *)arg))
2359 			return -EFAULT;
2360 
2361 		return xfs_fs_goingdown(mp, in);
2362 	}
2363 
2364 	case XFS_IOC_ERROR_INJECTION: {
2365 		xfs_error_injection_t in;
2366 
2367 		if (!capable(CAP_SYS_ADMIN))
2368 			return -EPERM;
2369 
2370 		if (copy_from_user(&in, arg, sizeof(in)))
2371 			return -EFAULT;
2372 
2373 		return xfs_errortag_add(mp, in.errtag);
2374 	}
2375 
2376 	case XFS_IOC_ERROR_CLEARALL:
2377 		if (!capable(CAP_SYS_ADMIN))
2378 			return -EPERM;
2379 
2380 		return xfs_errortag_clearall(mp);
2381 
2382 	case XFS_IOC_FREE_EOFBLOCKS: {
2383 		struct xfs_fs_eofblocks eofb;
2384 		struct xfs_eofblocks keofb;
2385 
2386 		if (!capable(CAP_SYS_ADMIN))
2387 			return -EPERM;
2388 
2389 		if (mp->m_flags & XFS_MOUNT_RDONLY)
2390 			return -EROFS;
2391 
2392 		if (copy_from_user(&eofb, arg, sizeof(eofb)))
2393 			return -EFAULT;
2394 
2395 		error = xfs_fs_eofblocks_from_user(&eofb, &keofb);
2396 		if (error)
2397 			return error;
2398 
2399 		return xfs_icache_free_eofblocks(mp, &keofb);
2400 	}
2401 
2402 	default:
2403 		return -ENOTTY;
2404 	}
2405 }
2406