1 // SPDX-License-Identifier: GPL-2.0
3 * linux/fs/ext4/ioctl.c
5 * Copyright (C) 1993, 1994, 1995
6 * Remy Card (card@masi.ibp.fr)
7 * Laboratoire MASI - Institut Blaise Pascal
8 * Universite Pierre et Marie Curie (Paris VI)
12 #include <linux/capability.h>
13 #include <linux/time.h>
14 #include <linux/compat.h>
15 #include <linux/mount.h>
16 #include <linux/file.h>
17 #include <linux/quotaops.h>
18 #include <linux/random.h>
19 #include <linux/uuid.h>
20 #include <linux/uaccess.h>
21 #include <linux/delay.h>
22 #include <linux/iversion.h>
23 #include "ext4_jbd2.h"
25 #include <linux/fsmap.h>
27 #include <trace/events/ext4.h>
30 * Swap memory between @a and @b for @len bytes.
32 * @a: pointer to first memory area
33 * @b: pointer to second memory area
34 * @len: number of bytes to swap
37 static void memswap(void *a
, void *b
, size_t len
)
39 unsigned char *ap
, *bp
;
41 ap
= (unsigned char *)a
;
42 bp
= (unsigned char *)b
;
51 * Swap i_data and associated attributes between @inode1 and @inode2.
52 * This function is used for the primary swap between inode1 and inode2
53 * and also to revert this primary swap in case of errors.
55 * Therefore you have to make sure, that calling this method twice
56 * will revert all changes.
58 * @inode1: pointer to first inode
59 * @inode2: pointer to second inode
61 static void swap_inode_data(struct inode
*inode1
, struct inode
*inode2
)
64 struct ext4_inode_info
*ei1
;
65 struct ext4_inode_info
*ei2
;
71 swap(inode1
->i_version
, inode2
->i_version
);
72 swap(inode1
->i_atime
, inode2
->i_atime
);
73 swap(inode1
->i_mtime
, inode2
->i_mtime
);
75 memswap(ei1
->i_data
, ei2
->i_data
, sizeof(ei1
->i_data
));
76 tmp
= ei1
->i_flags
& EXT4_FL_SHOULD_SWAP
;
77 ei1
->i_flags
= (ei2
->i_flags
& EXT4_FL_SHOULD_SWAP
) |
78 (ei1
->i_flags
& ~EXT4_FL_SHOULD_SWAP
);
79 ei2
->i_flags
= tmp
| (ei2
->i_flags
& ~EXT4_FL_SHOULD_SWAP
);
80 swap(ei1
->i_disksize
, ei2
->i_disksize
);
81 ext4_es_remove_extent(inode1
, 0, EXT_MAX_BLOCKS
);
82 ext4_es_remove_extent(inode2
, 0, EXT_MAX_BLOCKS
);
84 isize
= i_size_read(inode1
);
85 i_size_write(inode1
, i_size_read(inode2
));
86 i_size_write(inode2
, isize
);
89 static void reset_inode_seed(struct inode
*inode
)
91 struct ext4_inode_info
*ei
= EXT4_I(inode
);
92 struct ext4_sb_info
*sbi
= EXT4_SB(inode
->i_sb
);
93 __le32 inum
= cpu_to_le32(inode
->i_ino
);
94 __le32 gen
= cpu_to_le32(inode
->i_generation
);
97 if (!ext4_has_metadata_csum(inode
->i_sb
))
100 csum
= ext4_chksum(sbi
, sbi
->s_csum_seed
, (__u8
*)&inum
, sizeof(inum
));
101 ei
->i_csum_seed
= ext4_chksum(sbi
, csum
, (__u8
*)&gen
, sizeof(gen
));
105 * Swap the information from the given @inode and the inode
106 * EXT4_BOOT_LOADER_INO. It will basically swap i_data and all other
107 * important fields of the inodes.
109 * @sb: the super block of the filesystem
110 * @inode: the inode to swap with EXT4_BOOT_LOADER_INO
113 static long swap_inode_boot_loader(struct super_block
*sb
,
118 struct inode
*inode_bl
;
119 struct ext4_inode_info
*ei_bl
;
120 qsize_t size
, size_bl
, diff
;
122 unsigned short bytes
;
124 inode_bl
= ext4_iget(sb
, EXT4_BOOT_LOADER_INO
, EXT4_IGET_SPECIAL
);
125 if (IS_ERR(inode_bl
))
126 return PTR_ERR(inode_bl
);
127 ei_bl
= EXT4_I(inode_bl
);
129 /* Protect orig inodes against a truncate and make sure,
130 * that only 1 swap_inode_boot_loader is running. */
131 lock_two_nondirectories(inode
, inode_bl
);
133 if (inode
->i_nlink
!= 1 || !S_ISREG(inode
->i_mode
) ||
134 IS_SWAPFILE(inode
) || IS_ENCRYPTED(inode
) ||
135 (EXT4_I(inode
)->i_flags
& EXT4_JOURNAL_DATA_FL
) ||
136 ext4_has_inline_data(inode
)) {
138 goto journal_err_out
;
141 if (IS_RDONLY(inode
) || IS_APPEND(inode
) || IS_IMMUTABLE(inode
) ||
142 !inode_owner_or_capable(inode
) || !capable(CAP_SYS_ADMIN
)) {
144 goto journal_err_out
;
147 down_write(&EXT4_I(inode
)->i_mmap_sem
);
148 err
= filemap_write_and_wait(inode
->i_mapping
);
152 err
= filemap_write_and_wait(inode_bl
->i_mapping
);
156 /* Wait for all existing dio workers */
157 inode_dio_wait(inode
);
158 inode_dio_wait(inode_bl
);
160 truncate_inode_pages(&inode
->i_data
, 0);
161 truncate_inode_pages(&inode_bl
->i_data
, 0);
163 handle
= ext4_journal_start(inode_bl
, EXT4_HT_MOVE_EXTENTS
, 2);
164 if (IS_ERR(handle
)) {
169 /* Protect extent tree against block allocations via delalloc */
170 ext4_double_down_write_data_sem(inode
, inode_bl
);
172 if (inode_bl
->i_nlink
== 0) {
173 /* this inode has never been used as a BOOT_LOADER */
174 set_nlink(inode_bl
, 1);
175 i_uid_write(inode_bl
, 0);
176 i_gid_write(inode_bl
, 0);
177 inode_bl
->i_flags
= 0;
179 inode_set_iversion(inode_bl
, 1);
180 i_size_write(inode_bl
, 0);
181 inode_bl
->i_mode
= S_IFREG
;
182 if (ext4_has_feature_extents(sb
)) {
183 ext4_set_inode_flag(inode_bl
, EXT4_INODE_EXTENTS
);
184 ext4_ext_tree_init(handle
, inode_bl
);
186 memset(ei_bl
->i_data
, 0, sizeof(ei_bl
->i_data
));
189 err
= dquot_initialize(inode
);
193 size
= (qsize_t
)(inode
->i_blocks
) * (1 << 9) + inode
->i_bytes
;
194 size_bl
= (qsize_t
)(inode_bl
->i_blocks
) * (1 << 9) + inode_bl
->i_bytes
;
195 diff
= size
- size_bl
;
196 swap_inode_data(inode
, inode_bl
);
198 inode
->i_ctime
= inode_bl
->i_ctime
= current_time(inode
);
200 inode
->i_generation
= prandom_u32();
201 inode_bl
->i_generation
= prandom_u32();
202 reset_inode_seed(inode
);
203 reset_inode_seed(inode_bl
);
205 ext4_discard_preallocations(inode
);
207 err
= ext4_mark_inode_dirty(handle
, inode
);
209 /* No need to update quota information. */
210 ext4_warning(inode
->i_sb
,
211 "couldn't mark inode #%lu dirty (err %d)",
213 /* Revert all changes: */
214 swap_inode_data(inode
, inode_bl
);
215 ext4_mark_inode_dirty(handle
, inode
);
219 blocks
= inode_bl
->i_blocks
;
220 bytes
= inode_bl
->i_bytes
;
221 inode_bl
->i_blocks
= inode
->i_blocks
;
222 inode_bl
->i_bytes
= inode
->i_bytes
;
223 err
= ext4_mark_inode_dirty(handle
, inode_bl
);
225 /* No need to update quota information. */
226 ext4_warning(inode_bl
->i_sb
,
227 "couldn't mark inode #%lu dirty (err %d)",
228 inode_bl
->i_ino
, err
);
232 /* Bootloader inode should not be counted into quota information. */
234 dquot_free_space(inode
, diff
);
236 err
= dquot_alloc_space(inode
, -1 * diff
);
240 /* Revert all changes: */
241 inode_bl
->i_blocks
= blocks
;
242 inode_bl
->i_bytes
= bytes
;
243 swap_inode_data(inode
, inode_bl
);
244 ext4_mark_inode_dirty(handle
, inode
);
245 ext4_mark_inode_dirty(handle
, inode_bl
);
249 ext4_journal_stop(handle
);
250 ext4_double_up_write_data_sem(inode
, inode_bl
);
253 up_write(&EXT4_I(inode
)->i_mmap_sem
);
255 unlock_two_nondirectories(inode
, inode_bl
);
260 #ifdef CONFIG_FS_ENCRYPTION
261 static int uuid_is_zero(__u8 u
[16])
265 for (i
= 0; i
< 16; i
++)
273 * If immutable is set and we are not clearing it, we're not allowed to change
274 * anything else in the inode. Don't error out if we're only trying to set
275 * immutable on an immutable file.
277 static int ext4_ioctl_check_immutable(struct inode
*inode
, __u32 new_projid
,
280 struct ext4_inode_info
*ei
= EXT4_I(inode
);
281 unsigned int oldflags
= ei
->i_flags
;
283 if (!(oldflags
& EXT4_IMMUTABLE_FL
) || !(flags
& EXT4_IMMUTABLE_FL
))
286 if ((oldflags
& ~EXT4_IMMUTABLE_FL
) != (flags
& ~EXT4_IMMUTABLE_FL
))
288 if (ext4_has_feature_project(inode
->i_sb
) &&
289 __kprojid_val(ei
->i_projid
) != new_projid
)
295 static int ext4_ioctl_setflags(struct inode
*inode
,
298 struct ext4_inode_info
*ei
= EXT4_I(inode
);
299 handle_t
*handle
= NULL
;
300 int err
= -EPERM
, migrate
= 0;
301 struct ext4_iloc iloc
;
302 unsigned int oldflags
, mask
, i
;
304 struct super_block
*sb
= inode
->i_sb
;
306 /* Is it quota file? Do not allow user to mess with it */
307 if (ext4_is_quota_file(inode
))
310 oldflags
= ei
->i_flags
;
312 /* The JOURNAL_DATA flag is modifiable only by root */
313 jflag
= flags
& EXT4_JOURNAL_DATA_FL
;
315 err
= vfs_ioc_setflags_prepare(inode
, oldflags
, flags
);
320 * The JOURNAL_DATA flag can only be changed by
321 * the relevant capability.
323 if ((jflag
^ oldflags
) & (EXT4_JOURNAL_DATA_FL
)) {
324 if (!capable(CAP_SYS_RESOURCE
))
327 if ((flags
^ oldflags
) & EXT4_EXTENTS_FL
)
330 if ((flags
^ oldflags
) & EXT4_CASEFOLD_FL
) {
331 if (!ext4_has_feature_casefold(sb
)) {
336 if (!S_ISDIR(inode
->i_mode
)) {
341 if (!ext4_empty_dir(inode
)) {
348 * Wait for all pending directio and then flush all the dirty pages
349 * for this file. The flush marks all the pages readonly, so any
350 * subsequent attempt to write to the file (particularly mmap pages)
351 * will come through the filesystem and fail.
353 if (S_ISREG(inode
->i_mode
) && !IS_IMMUTABLE(inode
) &&
354 (flags
& EXT4_IMMUTABLE_FL
)) {
355 inode_dio_wait(inode
);
356 err
= filemap_write_and_wait(inode
->i_mapping
);
361 handle
= ext4_journal_start(inode
, EXT4_HT_INODE
, 1);
362 if (IS_ERR(handle
)) {
363 err
= PTR_ERR(handle
);
367 ext4_handle_sync(handle
);
368 err
= ext4_reserve_inode_write(handle
, inode
, &iloc
);
372 for (i
= 0, mask
= 1; i
< 32; i
++, mask
<<= 1) {
373 if (!(mask
& EXT4_FL_USER_MODIFIABLE
))
375 /* These flags get special treatment later */
376 if (mask
== EXT4_JOURNAL_DATA_FL
|| mask
== EXT4_EXTENTS_FL
)
379 ext4_set_inode_flag(inode
, i
);
381 ext4_clear_inode_flag(inode
, i
);
384 ext4_set_inode_flags(inode
);
385 inode
->i_ctime
= current_time(inode
);
387 err
= ext4_mark_iloc_dirty(handle
, inode
, &iloc
);
389 ext4_journal_stop(handle
);
393 if ((jflag
^ oldflags
) & (EXT4_JOURNAL_DATA_FL
)) {
395 * Changes to the journaling mode can cause unsafe changes to
396 * S_DAX if we are using the DAX mount option.
398 if (test_opt(inode
->i_sb
, DAX
)) {
403 err
= ext4_change_inode_journal_flag(inode
, jflag
);
408 if (flags
& EXT4_EXTENTS_FL
)
409 err
= ext4_ext_migrate(inode
);
411 err
= ext4_ind_migrate(inode
);
419 static int ext4_ioctl_setproject(struct file
*filp
, __u32 projid
)
421 struct inode
*inode
= file_inode(filp
);
422 struct super_block
*sb
= inode
->i_sb
;
423 struct ext4_inode_info
*ei
= EXT4_I(inode
);
427 struct ext4_iloc iloc
;
428 struct ext4_inode
*raw_inode
;
429 struct dquot
*transfer_to
[MAXQUOTAS
] = { };
431 if (!ext4_has_feature_project(sb
)) {
432 if (projid
!= EXT4_DEF_PROJID
)
438 if (EXT4_INODE_SIZE(sb
) <= EXT4_GOOD_OLD_INODE_SIZE
)
441 kprojid
= make_kprojid(&init_user_ns
, (projid_t
)projid
);
443 if (projid_eq(kprojid
, EXT4_I(inode
)->i_projid
))
447 /* Is it quota file? Do not allow user to mess with it */
448 if (ext4_is_quota_file(inode
))
451 err
= ext4_get_inode_loc(inode
, &iloc
);
455 raw_inode
= ext4_raw_inode(&iloc
);
456 if (!EXT4_FITS_IN_INODE(raw_inode
, ei
, i_projid
)) {
457 err
= ext4_expand_extra_isize(inode
,
458 EXT4_SB(sb
)->s_want_extra_isize
,
466 err
= dquot_initialize(inode
);
470 handle
= ext4_journal_start(inode
, EXT4_HT_QUOTA
,
471 EXT4_QUOTA_INIT_BLOCKS(sb
) +
472 EXT4_QUOTA_DEL_BLOCKS(sb
) + 3);
474 return PTR_ERR(handle
);
476 err
= ext4_reserve_inode_write(handle
, inode
, &iloc
);
480 transfer_to
[PRJQUOTA
] = dqget(sb
, make_kqid_projid(kprojid
));
481 if (!IS_ERR(transfer_to
[PRJQUOTA
])) {
483 /* __dquot_transfer() calls back ext4_get_inode_usage() which
484 * counts xattr inode references.
486 down_read(&EXT4_I(inode
)->xattr_sem
);
487 err
= __dquot_transfer(inode
, transfer_to
);
488 up_read(&EXT4_I(inode
)->xattr_sem
);
489 dqput(transfer_to
[PRJQUOTA
]);
494 EXT4_I(inode
)->i_projid
= kprojid
;
495 inode
->i_ctime
= current_time(inode
);
497 rc
= ext4_mark_iloc_dirty(handle
, inode
, &iloc
);
501 ext4_journal_stop(handle
);
505 static int ext4_ioctl_setproject(struct file
*filp
, __u32 projid
)
507 if (projid
!= EXT4_DEF_PROJID
)
513 /* Transfer internal flags to xflags */
514 static inline __u32
ext4_iflags_to_xflags(unsigned long iflags
)
518 if (iflags
& EXT4_SYNC_FL
)
519 xflags
|= FS_XFLAG_SYNC
;
520 if (iflags
& EXT4_IMMUTABLE_FL
)
521 xflags
|= FS_XFLAG_IMMUTABLE
;
522 if (iflags
& EXT4_APPEND_FL
)
523 xflags
|= FS_XFLAG_APPEND
;
524 if (iflags
& EXT4_NODUMP_FL
)
525 xflags
|= FS_XFLAG_NODUMP
;
526 if (iflags
& EXT4_NOATIME_FL
)
527 xflags
|= FS_XFLAG_NOATIME
;
528 if (iflags
& EXT4_PROJINHERIT_FL
)
529 xflags
|= FS_XFLAG_PROJINHERIT
;
533 #define EXT4_SUPPORTED_FS_XFLAGS (FS_XFLAG_SYNC | FS_XFLAG_IMMUTABLE | \
534 FS_XFLAG_APPEND | FS_XFLAG_NODUMP | \
535 FS_XFLAG_NOATIME | FS_XFLAG_PROJINHERIT)
537 /* Transfer xflags flags to internal */
538 static inline unsigned long ext4_xflags_to_iflags(__u32 xflags
)
540 unsigned long iflags
= 0;
542 if (xflags
& FS_XFLAG_SYNC
)
543 iflags
|= EXT4_SYNC_FL
;
544 if (xflags
& FS_XFLAG_IMMUTABLE
)
545 iflags
|= EXT4_IMMUTABLE_FL
;
546 if (xflags
& FS_XFLAG_APPEND
)
547 iflags
|= EXT4_APPEND_FL
;
548 if (xflags
& FS_XFLAG_NODUMP
)
549 iflags
|= EXT4_NODUMP_FL
;
550 if (xflags
& FS_XFLAG_NOATIME
)
551 iflags
|= EXT4_NOATIME_FL
;
552 if (xflags
& FS_XFLAG_PROJINHERIT
)
553 iflags
|= EXT4_PROJINHERIT_FL
;
558 static int ext4_shutdown(struct super_block
*sb
, unsigned long arg
)
560 struct ext4_sb_info
*sbi
= EXT4_SB(sb
);
563 if (!capable(CAP_SYS_ADMIN
))
566 if (get_user(flags
, (__u32 __user
*)arg
))
569 if (flags
> EXT4_GOING_FLAGS_NOLOGFLUSH
)
572 if (ext4_forced_shutdown(sbi
))
575 ext4_msg(sb
, KERN_ALERT
, "shut down requested (%d)", flags
);
576 trace_ext4_shutdown(sb
, flags
);
579 case EXT4_GOING_FLAGS_DEFAULT
:
580 freeze_bdev(sb
->s_bdev
);
581 set_bit(EXT4_FLAGS_SHUTDOWN
, &sbi
->s_ext4_flags
);
582 thaw_bdev(sb
->s_bdev
, sb
);
584 case EXT4_GOING_FLAGS_LOGFLUSH
:
585 set_bit(EXT4_FLAGS_SHUTDOWN
, &sbi
->s_ext4_flags
);
586 if (sbi
->s_journal
&& !is_journal_aborted(sbi
->s_journal
)) {
587 (void) ext4_force_commit(sb
);
588 jbd2_journal_abort(sbi
->s_journal
, -ESHUTDOWN
);
591 case EXT4_GOING_FLAGS_NOLOGFLUSH
:
592 set_bit(EXT4_FLAGS_SHUTDOWN
, &sbi
->s_ext4_flags
);
593 if (sbi
->s_journal
&& !is_journal_aborted(sbi
->s_journal
))
594 jbd2_journal_abort(sbi
->s_journal
, -ESHUTDOWN
);
599 clear_opt(sb
, DISCARD
);
603 struct getfsmap_info
{
604 struct super_block
*gi_sb
;
605 struct fsmap_head __user
*gi_data
;
610 static int ext4_getfsmap_format(struct ext4_fsmap
*xfm
, void *priv
)
612 struct getfsmap_info
*info
= priv
;
615 trace_ext4_getfsmap_mapping(info
->gi_sb
, xfm
);
617 info
->gi_last_flags
= xfm
->fmr_flags
;
618 ext4_fsmap_from_internal(info
->gi_sb
, &fm
, xfm
);
619 if (copy_to_user(&info
->gi_data
->fmh_recs
[info
->gi_idx
++], &fm
,
620 sizeof(struct fsmap
)))
626 static int ext4_ioc_getfsmap(struct super_block
*sb
,
627 struct fsmap_head __user
*arg
)
629 struct getfsmap_info info
= { NULL
};
630 struct ext4_fsmap_head xhead
= {0};
631 struct fsmap_head head
;
632 bool aborted
= false;
635 if (copy_from_user(&head
, arg
, sizeof(struct fsmap_head
)))
637 if (memchr_inv(head
.fmh_reserved
, 0, sizeof(head
.fmh_reserved
)) ||
638 memchr_inv(head
.fmh_keys
[0].fmr_reserved
, 0,
639 sizeof(head
.fmh_keys
[0].fmr_reserved
)) ||
640 memchr_inv(head
.fmh_keys
[1].fmr_reserved
, 0,
641 sizeof(head
.fmh_keys
[1].fmr_reserved
)))
644 * ext4 doesn't report file extents at all, so the only valid
645 * file offsets are the magic ones (all zeroes or all ones).
647 if (head
.fmh_keys
[0].fmr_offset
||
648 (head
.fmh_keys
[1].fmr_offset
!= 0 &&
649 head
.fmh_keys
[1].fmr_offset
!= -1ULL))
652 xhead
.fmh_iflags
= head
.fmh_iflags
;
653 xhead
.fmh_count
= head
.fmh_count
;
654 ext4_fsmap_to_internal(sb
, &xhead
.fmh_keys
[0], &head
.fmh_keys
[0]);
655 ext4_fsmap_to_internal(sb
, &xhead
.fmh_keys
[1], &head
.fmh_keys
[1]);
657 trace_ext4_getfsmap_low_key(sb
, &xhead
.fmh_keys
[0]);
658 trace_ext4_getfsmap_high_key(sb
, &xhead
.fmh_keys
[1]);
662 error
= ext4_getfsmap(sb
, &xhead
, ext4_getfsmap_format
, &info
);
663 if (error
== EXT4_QUERY_RANGE_ABORT
) {
669 /* If we didn't abort, set the "last" flag in the last fmx */
670 if (!aborted
&& info
.gi_idx
) {
671 info
.gi_last_flags
|= FMR_OF_LAST
;
672 if (copy_to_user(&info
.gi_data
->fmh_recs
[info
.gi_idx
- 1].fmr_flags
,
674 sizeof(info
.gi_last_flags
)))
678 /* copy back header */
679 head
.fmh_entries
= xhead
.fmh_entries
;
680 head
.fmh_oflags
= xhead
.fmh_oflags
;
681 if (copy_to_user(arg
, &head
, sizeof(struct fsmap_head
)))
687 static long ext4_ioctl_group_add(struct file
*file
,
688 struct ext4_new_group_data
*input
)
690 struct super_block
*sb
= file_inode(file
)->i_sb
;
693 err
= ext4_resize_begin(sb
);
697 if (ext4_has_feature_bigalloc(sb
)) {
698 ext4_msg(sb
, KERN_ERR
,
699 "Online resizing not supported with bigalloc");
704 err
= mnt_want_write_file(file
);
708 err
= ext4_group_add(sb
, input
);
709 if (EXT4_SB(sb
)->s_journal
) {
710 jbd2_journal_lock_updates(EXT4_SB(sb
)->s_journal
);
711 err2
= jbd2_journal_flush(EXT4_SB(sb
)->s_journal
);
712 jbd2_journal_unlock_updates(EXT4_SB(sb
)->s_journal
);
716 mnt_drop_write_file(file
);
717 if (!err
&& ext4_has_group_desc_csum(sb
) &&
718 test_opt(sb
, INIT_INODE_TABLE
))
719 err
= ext4_register_li_request(sb
, input
->group
);
725 static void ext4_fill_fsxattr(struct inode
*inode
, struct fsxattr
*fa
)
727 struct ext4_inode_info
*ei
= EXT4_I(inode
);
729 simple_fill_fsxattr(fa
, ext4_iflags_to_xflags(ei
->i_flags
&
730 EXT4_FL_USER_VISIBLE
));
732 if (ext4_has_feature_project(inode
->i_sb
))
733 fa
->fsx_projid
= from_kprojid(&init_user_ns
, ei
->i_projid
);
736 /* copied from fs/ioctl.c */
737 static int fiemap_check_ranges(struct super_block
*sb
,
738 u64 start
, u64 len
, u64
*new_len
)
740 u64 maxbytes
= (u64
) sb
->s_maxbytes
;
747 if (start
> maxbytes
)
751 * Shrink request scope to what the fs can actually handle.
753 if (len
> maxbytes
|| (maxbytes
- len
) < start
)
754 *new_len
= maxbytes
- start
;
759 /* So that the fiemap access checks can't overflow on 32 bit machines. */
760 #define FIEMAP_MAX_EXTENTS (UINT_MAX / sizeof(struct fiemap_extent))
762 static int ext4_ioctl_get_es_cache(struct file
*filp
, unsigned long arg
)
764 struct fiemap fiemap
;
765 struct fiemap __user
*ufiemap
= (struct fiemap __user
*) arg
;
766 struct fiemap_extent_info fieinfo
= { 0, };
767 struct inode
*inode
= file_inode(filp
);
768 struct super_block
*sb
= inode
->i_sb
;
772 if (copy_from_user(&fiemap
, ufiemap
, sizeof(fiemap
)))
775 if (fiemap
.fm_extent_count
> FIEMAP_MAX_EXTENTS
)
778 error
= fiemap_check_ranges(sb
, fiemap
.fm_start
, fiemap
.fm_length
,
783 fieinfo
.fi_flags
= fiemap
.fm_flags
;
784 fieinfo
.fi_extents_max
= fiemap
.fm_extent_count
;
785 fieinfo
.fi_extents_start
= ufiemap
->fm_extents
;
787 if (fiemap
.fm_extent_count
!= 0 &&
788 !access_ok(fieinfo
.fi_extents_start
,
789 fieinfo
.fi_extents_max
* sizeof(struct fiemap_extent
)))
792 if (fieinfo
.fi_flags
& FIEMAP_FLAG_SYNC
)
793 filemap_write_and_wait(inode
->i_mapping
);
795 error
= ext4_get_es_cache(inode
, &fieinfo
, fiemap
.fm_start
, len
);
796 fiemap
.fm_flags
= fieinfo
.fi_flags
;
797 fiemap
.fm_mapped_extents
= fieinfo
.fi_extents_mapped
;
798 if (copy_to_user(ufiemap
, &fiemap
, sizeof(fiemap
)))
804 long ext4_ioctl(struct file
*filp
, unsigned int cmd
, unsigned long arg
)
806 struct inode
*inode
= file_inode(filp
);
807 struct super_block
*sb
= inode
->i_sb
;
808 struct ext4_inode_info
*ei
= EXT4_I(inode
);
811 ext4_debug("cmd = %u, arg = %lu\n", cmd
, arg
);
814 case FS_IOC_GETFSMAP
:
815 return ext4_ioc_getfsmap(sb
, (void __user
*)arg
);
816 case EXT4_IOC_GETFLAGS
:
817 flags
= ei
->i_flags
& EXT4_FL_USER_VISIBLE
;
818 if (S_ISREG(inode
->i_mode
))
819 flags
&= ~EXT4_PROJINHERIT_FL
;
820 return put_user(flags
, (int __user
*) arg
);
821 case EXT4_IOC_SETFLAGS
: {
824 if (!inode_owner_or_capable(inode
))
827 if (get_user(flags
, (int __user
*) arg
))
830 if (flags
& ~EXT4_FL_USER_VISIBLE
)
833 * chattr(1) grabs flags via GETFLAGS, modifies the result and
834 * passes that to SETFLAGS. So we cannot easily make SETFLAGS
835 * more restrictive than just silently masking off visible but
836 * not settable flags as we always did.
838 flags
&= EXT4_FL_USER_MODIFIABLE
;
839 if (ext4_mask_flags(inode
->i_mode
, flags
) != flags
)
842 err
= mnt_want_write_file(filp
);
847 err
= ext4_ioctl_check_immutable(inode
,
848 from_kprojid(&init_user_ns
, ei
->i_projid
),
851 err
= ext4_ioctl_setflags(inode
, flags
);
853 mnt_drop_write_file(filp
);
856 case EXT4_IOC_GETVERSION
:
857 case EXT4_IOC_GETVERSION_OLD
:
858 return put_user(inode
->i_generation
, (int __user
*) arg
);
859 case EXT4_IOC_SETVERSION
:
860 case EXT4_IOC_SETVERSION_OLD
: {
862 struct ext4_iloc iloc
;
866 if (!inode_owner_or_capable(inode
))
869 if (ext4_has_metadata_csum(inode
->i_sb
)) {
870 ext4_warning(sb
, "Setting inode version is not "
871 "supported with metadata_csum enabled.");
875 err
= mnt_want_write_file(filp
);
878 if (get_user(generation
, (int __user
*) arg
)) {
884 handle
= ext4_journal_start(inode
, EXT4_HT_INODE
, 1);
885 if (IS_ERR(handle
)) {
886 err
= PTR_ERR(handle
);
889 err
= ext4_reserve_inode_write(handle
, inode
, &iloc
);
891 inode
->i_ctime
= current_time(inode
);
892 inode
->i_generation
= generation
;
893 err
= ext4_mark_iloc_dirty(handle
, inode
, &iloc
);
895 ext4_journal_stop(handle
);
900 mnt_drop_write_file(filp
);
903 case EXT4_IOC_GROUP_EXTEND
: {
904 ext4_fsblk_t n_blocks_count
;
907 err
= ext4_resize_begin(sb
);
911 if (get_user(n_blocks_count
, (__u32 __user
*)arg
)) {
913 goto group_extend_out
;
916 if (ext4_has_feature_bigalloc(sb
)) {
917 ext4_msg(sb
, KERN_ERR
,
918 "Online resizing not supported with bigalloc");
920 goto group_extend_out
;
923 err
= mnt_want_write_file(filp
);
925 goto group_extend_out
;
927 err
= ext4_group_extend(sb
, EXT4_SB(sb
)->s_es
, n_blocks_count
);
928 if (EXT4_SB(sb
)->s_journal
) {
929 jbd2_journal_lock_updates(EXT4_SB(sb
)->s_journal
);
930 err2
= jbd2_journal_flush(EXT4_SB(sb
)->s_journal
);
931 jbd2_journal_unlock_updates(EXT4_SB(sb
)->s_journal
);
935 mnt_drop_write_file(filp
);
941 case EXT4_IOC_MOVE_EXT
: {
942 struct move_extent me
;
946 if (!(filp
->f_mode
& FMODE_READ
) ||
947 !(filp
->f_mode
& FMODE_WRITE
))
950 if (copy_from_user(&me
,
951 (struct move_extent __user
*)arg
, sizeof(me
)))
955 donor
= fdget(me
.donor_fd
);
959 if (!(donor
.file
->f_mode
& FMODE_WRITE
)) {
964 if (ext4_has_feature_bigalloc(sb
)) {
965 ext4_msg(sb
, KERN_ERR
,
966 "Online defrag not supported with bigalloc");
969 } else if (IS_DAX(inode
)) {
970 ext4_msg(sb
, KERN_ERR
,
971 "Online defrag not supported with DAX");
976 err
= mnt_want_write_file(filp
);
980 err
= ext4_move_extents(filp
, donor
.file
, me
.orig_start
,
981 me
.donor_start
, me
.len
, &me
.moved_len
);
982 mnt_drop_write_file(filp
);
984 if (copy_to_user((struct move_extent __user
*)arg
,
992 case EXT4_IOC_GROUP_ADD
: {
993 struct ext4_new_group_data input
;
995 if (copy_from_user(&input
, (struct ext4_new_group_input __user
*)arg
,
999 return ext4_ioctl_group_add(filp
, &input
);
1002 case EXT4_IOC_MIGRATE
:
1005 if (!inode_owner_or_capable(inode
))
1008 err
= mnt_want_write_file(filp
);
1012 * inode_mutex prevent write and truncate on the file.
1013 * Read still goes through. We take i_data_sem in
1014 * ext4_ext_swap_inode_data before we switch the
1015 * inode format to prevent read.
1017 inode_lock((inode
));
1018 err
= ext4_ext_migrate(inode
);
1019 inode_unlock((inode
));
1020 mnt_drop_write_file(filp
);
1024 case EXT4_IOC_ALLOC_DA_BLKS
:
1027 if (!inode_owner_or_capable(inode
))
1030 err
= mnt_want_write_file(filp
);
1033 err
= ext4_alloc_da_blocks(inode
);
1034 mnt_drop_write_file(filp
);
1038 case EXT4_IOC_SWAP_BOOT
:
1041 if (!(filp
->f_mode
& FMODE_WRITE
))
1043 err
= mnt_want_write_file(filp
);
1046 err
= swap_inode_boot_loader(sb
, inode
);
1047 mnt_drop_write_file(filp
);
1051 case EXT4_IOC_RESIZE_FS
: {
1052 ext4_fsblk_t n_blocks_count
;
1053 int err
= 0, err2
= 0;
1054 ext4_group_t o_group
= EXT4_SB(sb
)->s_groups_count
;
1056 if (copy_from_user(&n_blocks_count
, (__u64 __user
*)arg
,
1061 err
= ext4_resize_begin(sb
);
1065 err
= mnt_want_write_file(filp
);
1069 err
= ext4_resize_fs(sb
, n_blocks_count
);
1070 if (EXT4_SB(sb
)->s_journal
) {
1071 jbd2_journal_lock_updates(EXT4_SB(sb
)->s_journal
);
1072 err2
= jbd2_journal_flush(EXT4_SB(sb
)->s_journal
);
1073 jbd2_journal_unlock_updates(EXT4_SB(sb
)->s_journal
);
1077 mnt_drop_write_file(filp
);
1078 if (!err
&& (o_group
< EXT4_SB(sb
)->s_groups_count
) &&
1079 ext4_has_group_desc_csum(sb
) &&
1080 test_opt(sb
, INIT_INODE_TABLE
))
1081 err
= ext4_register_li_request(sb
, o_group
);
1084 ext4_resize_end(sb
);
1090 struct request_queue
*q
= bdev_get_queue(sb
->s_bdev
);
1091 struct fstrim_range range
;
1094 if (!capable(CAP_SYS_ADMIN
))
1097 if (!blk_queue_discard(q
))
1101 * We haven't replayed the journal, so we cannot use our
1102 * block-bitmap-guided storage zapping commands.
1104 if (test_opt(sb
, NOLOAD
) && ext4_has_feature_journal(sb
))
1107 if (copy_from_user(&range
, (struct fstrim_range __user
*)arg
,
1111 range
.minlen
= max((unsigned int)range
.minlen
,
1112 q
->limits
.discard_granularity
);
1113 ret
= ext4_trim_fs(sb
, &range
);
1117 if (copy_to_user((struct fstrim_range __user
*)arg
, &range
,
1123 case EXT4_IOC_PRECACHE_EXTENTS
:
1124 return ext4_ext_precache(inode
);
1126 case EXT4_IOC_SET_ENCRYPTION_POLICY
:
1127 if (!ext4_has_feature_encrypt(sb
))
1129 return fscrypt_ioctl_set_policy(filp
, (const void __user
*)arg
);
1131 case EXT4_IOC_GET_ENCRYPTION_PWSALT
: {
1132 #ifdef CONFIG_FS_ENCRYPTION
1134 struct ext4_sb_info
*sbi
= EXT4_SB(sb
);
1137 if (!ext4_has_feature_encrypt(sb
))
1139 if (uuid_is_zero(sbi
->s_es
->s_encrypt_pw_salt
)) {
1140 err
= mnt_want_write_file(filp
);
1143 handle
= ext4_journal_start_sb(sb
, EXT4_HT_MISC
, 1);
1144 if (IS_ERR(handle
)) {
1145 err
= PTR_ERR(handle
);
1146 goto pwsalt_err_exit
;
1148 err
= ext4_journal_get_write_access(handle
, sbi
->s_sbh
);
1150 goto pwsalt_err_journal
;
1151 generate_random_uuid(sbi
->s_es
->s_encrypt_pw_salt
);
1152 err
= ext4_handle_dirty_metadata(handle
, NULL
,
1155 err2
= ext4_journal_stop(handle
);
1159 mnt_drop_write_file(filp
);
1163 if (copy_to_user((void __user
*) arg
,
1164 sbi
->s_es
->s_encrypt_pw_salt
, 16))
1171 case EXT4_IOC_GET_ENCRYPTION_POLICY
:
1172 if (!ext4_has_feature_encrypt(sb
))
1174 return fscrypt_ioctl_get_policy(filp
, (void __user
*)arg
);
1176 case FS_IOC_GET_ENCRYPTION_POLICY_EX
:
1177 if (!ext4_has_feature_encrypt(sb
))
1179 return fscrypt_ioctl_get_policy_ex(filp
, (void __user
*)arg
);
1181 case FS_IOC_ADD_ENCRYPTION_KEY
:
1182 if (!ext4_has_feature_encrypt(sb
))
1184 return fscrypt_ioctl_add_key(filp
, (void __user
*)arg
);
1186 case FS_IOC_REMOVE_ENCRYPTION_KEY
:
1187 if (!ext4_has_feature_encrypt(sb
))
1189 return fscrypt_ioctl_remove_key(filp
, (void __user
*)arg
);
1191 case FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS
:
1192 if (!ext4_has_feature_encrypt(sb
))
1194 return fscrypt_ioctl_remove_key_all_users(filp
,
1195 (void __user
*)arg
);
1196 case FS_IOC_GET_ENCRYPTION_KEY_STATUS
:
1197 if (!ext4_has_feature_encrypt(sb
))
1199 return fscrypt_ioctl_get_key_status(filp
, (void __user
*)arg
);
1201 case FS_IOC_GET_ENCRYPTION_NONCE
:
1202 if (!ext4_has_feature_encrypt(sb
))
1204 return fscrypt_ioctl_get_nonce(filp
, (void __user
*)arg
);
1206 case EXT4_IOC_CLEAR_ES_CACHE
:
1208 if (!inode_owner_or_capable(inode
))
1210 ext4_clear_inode_es(inode
);
1214 case EXT4_IOC_GETSTATE
:
1218 if (ext4_test_inode_state(inode
, EXT4_STATE_EXT_PRECACHED
))
1219 state
|= EXT4_STATE_FLAG_EXT_PRECACHED
;
1220 if (ext4_test_inode_state(inode
, EXT4_STATE_NEW
))
1221 state
|= EXT4_STATE_FLAG_NEW
;
1222 if (ext4_test_inode_state(inode
, EXT4_STATE_NEWENTRY
))
1223 state
|= EXT4_STATE_FLAG_NEWENTRY
;
1224 if (ext4_test_inode_state(inode
, EXT4_STATE_DA_ALLOC_CLOSE
))
1225 state
|= EXT4_STATE_FLAG_DA_ALLOC_CLOSE
;
1227 return put_user(state
, (__u32 __user
*) arg
);
1230 case EXT4_IOC_GET_ES_CACHE
:
1231 return ext4_ioctl_get_es_cache(filp
, arg
);
1233 case EXT4_IOC_FSGETXATTR
:
1237 ext4_fill_fsxattr(inode
, &fa
);
1239 if (copy_to_user((struct fsxattr __user
*)arg
,
1244 case EXT4_IOC_FSSETXATTR
:
1246 struct fsxattr fa
, old_fa
;
1249 if (copy_from_user(&fa
, (struct fsxattr __user
*)arg
,
1253 /* Make sure caller has proper permission */
1254 if (!inode_owner_or_capable(inode
))
1257 if (fa
.fsx_xflags
& ~EXT4_SUPPORTED_FS_XFLAGS
)
1260 flags
= ext4_xflags_to_iflags(fa
.fsx_xflags
);
1261 if (ext4_mask_flags(inode
->i_mode
, flags
) != flags
)
1264 err
= mnt_want_write_file(filp
);
1269 ext4_fill_fsxattr(inode
, &old_fa
);
1270 err
= vfs_ioc_fssetxattr_check(inode
, &old_fa
, &fa
);
1273 flags
= (ei
->i_flags
& ~EXT4_FL_XFLAG_VISIBLE
) |
1274 (flags
& EXT4_FL_XFLAG_VISIBLE
);
1275 err
= ext4_ioctl_check_immutable(inode
, fa
.fsx_projid
, flags
);
1278 err
= ext4_ioctl_setflags(inode
, flags
);
1281 err
= ext4_ioctl_setproject(filp
, fa
.fsx_projid
);
1283 inode_unlock(inode
);
1284 mnt_drop_write_file(filp
);
1287 case EXT4_IOC_SHUTDOWN
:
1288 return ext4_shutdown(sb
, arg
);
1290 case FS_IOC_ENABLE_VERITY
:
1291 if (!ext4_has_feature_verity(sb
))
1293 return fsverity_ioctl_enable(filp
, (const void __user
*)arg
);
1295 case FS_IOC_MEASURE_VERITY
:
1296 if (!ext4_has_feature_verity(sb
))
1298 return fsverity_ioctl_measure(filp
, (void __user
*)arg
);
1305 #ifdef CONFIG_COMPAT
1306 long ext4_compat_ioctl(struct file
*file
, unsigned int cmd
, unsigned long arg
)
1308 /* These are just misnamed, they actually get/put from/to user an int */
1310 case EXT4_IOC32_GETFLAGS
:
1311 cmd
= EXT4_IOC_GETFLAGS
;
1313 case EXT4_IOC32_SETFLAGS
:
1314 cmd
= EXT4_IOC_SETFLAGS
;
1316 case EXT4_IOC32_GETVERSION
:
1317 cmd
= EXT4_IOC_GETVERSION
;
1319 case EXT4_IOC32_SETVERSION
:
1320 cmd
= EXT4_IOC_SETVERSION
;
1322 case EXT4_IOC32_GROUP_EXTEND
:
1323 cmd
= EXT4_IOC_GROUP_EXTEND
;
1325 case EXT4_IOC32_GETVERSION_OLD
:
1326 cmd
= EXT4_IOC_GETVERSION_OLD
;
1328 case EXT4_IOC32_SETVERSION_OLD
:
1329 cmd
= EXT4_IOC_SETVERSION_OLD
;
1331 case EXT4_IOC32_GETRSVSZ
:
1332 cmd
= EXT4_IOC_GETRSVSZ
;
1334 case EXT4_IOC32_SETRSVSZ
:
1335 cmd
= EXT4_IOC_SETRSVSZ
;
1337 case EXT4_IOC32_GROUP_ADD
: {
1338 struct compat_ext4_new_group_input __user
*uinput
;
1339 struct ext4_new_group_data input
;
1342 uinput
= compat_ptr(arg
);
1343 err
= get_user(input
.group
, &uinput
->group
);
1344 err
|= get_user(input
.block_bitmap
, &uinput
->block_bitmap
);
1345 err
|= get_user(input
.inode_bitmap
, &uinput
->inode_bitmap
);
1346 err
|= get_user(input
.inode_table
, &uinput
->inode_table
);
1347 err
|= get_user(input
.blocks_count
, &uinput
->blocks_count
);
1348 err
|= get_user(input
.reserved_blocks
,
1349 &uinput
->reserved_blocks
);
1352 return ext4_ioctl_group_add(file
, &input
);
1354 case EXT4_IOC_MOVE_EXT
:
1355 case EXT4_IOC_RESIZE_FS
:
1357 case EXT4_IOC_PRECACHE_EXTENTS
:
1358 case EXT4_IOC_SET_ENCRYPTION_POLICY
:
1359 case EXT4_IOC_GET_ENCRYPTION_PWSALT
:
1360 case EXT4_IOC_GET_ENCRYPTION_POLICY
:
1361 case FS_IOC_GET_ENCRYPTION_POLICY_EX
:
1362 case FS_IOC_ADD_ENCRYPTION_KEY
:
1363 case FS_IOC_REMOVE_ENCRYPTION_KEY
:
1364 case FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS
:
1365 case FS_IOC_GET_ENCRYPTION_KEY_STATUS
:
1366 case FS_IOC_GET_ENCRYPTION_NONCE
:
1367 case EXT4_IOC_SHUTDOWN
:
1368 case FS_IOC_GETFSMAP
:
1369 case FS_IOC_ENABLE_VERITY
:
1370 case FS_IOC_MEASURE_VERITY
:
1371 case EXT4_IOC_CLEAR_ES_CACHE
:
1372 case EXT4_IOC_GETSTATE
:
1373 case EXT4_IOC_GET_ES_CACHE
:
1374 case EXT4_IOC_FSGETXATTR
:
1375 case EXT4_IOC_FSSETXATTR
:
1378 return -ENOIOCTLCMD
;
1380 return ext4_ioctl(file
, cmd
, (unsigned long) compat_ptr(arg
));