1 // SPDX-License-Identifier: GPL-2.0
3 * linux/fs/ext4/ioctl.c
5 * Copyright (C) 1993, 1994, 1995
7 * Laboratoire MASI - Institut Blaise Pascal
8 * Universite Pierre et Marie Curie (Paris VI)
12 #include <linux/capability.h>
13 #include <linux/time.h>
14 #include <linux/compat.h>
15 #include <linux/mount.h>
16 #include <linux/file.h>
17 #include <linux/quotaops.h>
18 #include <linux/random.h>
19 #include <linux/uuid.h>
20 #include <linux/uaccess.h>
21 #include <linux/delay.h>
22 #include <linux/iversion.h>
23 #include "ext4_jbd2.h"
25 #include <linux/fsmap.h>
27 #include <trace/events/ext4.h>
30 * Swap memory between @a and @b for @len bytes.
32 * @a: pointer to first memory area
33 * @b: pointer to second memory area
34 * @len: number of bytes to swap
37 static void memswap(void *a, void *b, size_t len)
39 unsigned char *ap, *bp;
41 ap = (unsigned char *)a;
42 bp = (unsigned char *)b;
51 * Swap i_data and associated attributes between @inode1 and @inode2.
52 * This function is used for the primary swap between inode1 and inode2
53 * and also to revert this primary swap in case of errors.
55 * Therefore you have to make sure, that calling this method twice
56 * will revert all changes.
58 * @inode1: pointer to first inode
59 * @inode2: pointer to second inode
61 static void swap_inode_data(struct inode *inode1, struct inode *inode2)
64 struct ext4_inode_info *ei1;
65 struct ext4_inode_info *ei2;
71 swap(inode1->i_version, inode2->i_version);
72 swap(inode1->i_atime, inode2->i_atime);
73 swap(inode1->i_mtime, inode2->i_mtime);
75 memswap(ei1->i_data, ei2->i_data, sizeof(ei1->i_data));
76 tmp = ei1->i_flags & EXT4_FL_SHOULD_SWAP;
77 ei1->i_flags = (ei2->i_flags & EXT4_FL_SHOULD_SWAP) |
78 (ei1->i_flags & ~EXT4_FL_SHOULD_SWAP);
79 ei2->i_flags = tmp | (ei2->i_flags & ~EXT4_FL_SHOULD_SWAP);
80 swap(ei1->i_disksize, ei2->i_disksize);
81 ext4_es_remove_extent(inode1, 0, EXT_MAX_BLOCKS);
82 ext4_es_remove_extent(inode2, 0, EXT_MAX_BLOCKS);
84 isize = i_size_read(inode1);
85 i_size_write(inode1, i_size_read(inode2));
86 i_size_write(inode2, isize);
89 static void reset_inode_seed(struct inode *inode)
91 struct ext4_inode_info *ei = EXT4_I(inode);
92 struct ext4_sb_info *sbi = EXT4_SB(inode->i_sb);
93 __le32 inum = cpu_to_le32(inode->i_ino);
94 __le32 gen = cpu_to_le32(inode->i_generation);
97 if (!ext4_has_metadata_csum(inode->i_sb))
100 csum = ext4_chksum(sbi, sbi->s_csum_seed, (__u8 *)&inum, sizeof(inum));
101 ei->i_csum_seed = ext4_chksum(sbi, csum, (__u8 *)&gen, sizeof(gen));
105 * Swap the information from the given @inode and the inode
106 * EXT4_BOOT_LOADER_INO. It will basically swap i_data and all other
107 * important fields of the inodes.
109 * @sb: the super block of the filesystem
110 * @inode: the inode to swap with EXT4_BOOT_LOADER_INO
113 static long swap_inode_boot_loader(struct super_block *sb,
118 struct inode *inode_bl;
119 struct ext4_inode_info *ei_bl;
120 qsize_t size, size_bl, diff;
122 unsigned short bytes;
124 inode_bl = ext4_iget(sb, EXT4_BOOT_LOADER_INO, EXT4_IGET_SPECIAL);
125 if (IS_ERR(inode_bl))
126 return PTR_ERR(inode_bl);
127 ei_bl = EXT4_I(inode_bl);
129 /* Protect orig inodes against a truncate and make sure,
130 * that only 1 swap_inode_boot_loader is running. */
131 lock_two_nondirectories(inode, inode_bl);
133 if (inode->i_nlink != 1 || !S_ISREG(inode->i_mode) ||
134 IS_SWAPFILE(inode) || IS_ENCRYPTED(inode) ||
135 (EXT4_I(inode)->i_flags & EXT4_JOURNAL_DATA_FL) ||
136 ext4_has_inline_data(inode)) {
138 goto journal_err_out;
141 if (IS_RDONLY(inode) || IS_APPEND(inode) || IS_IMMUTABLE(inode) ||
142 !inode_owner_or_capable(inode) || !capable(CAP_SYS_ADMIN)) {
144 goto journal_err_out;
147 down_write(&EXT4_I(inode)->i_mmap_sem);
148 err = filemap_write_and_wait(inode->i_mapping);
152 err = filemap_write_and_wait(inode_bl->i_mapping);
156 /* Wait for all existing dio workers */
157 inode_dio_wait(inode);
158 inode_dio_wait(inode_bl);
160 truncate_inode_pages(&inode->i_data, 0);
161 truncate_inode_pages(&inode_bl->i_data, 0);
163 handle = ext4_journal_start(inode_bl, EXT4_HT_MOVE_EXTENTS, 2);
164 if (IS_ERR(handle)) {
169 /* Protect extent tree against block allocations via delalloc */
170 ext4_double_down_write_data_sem(inode, inode_bl);
172 if (inode_bl->i_nlink == 0) {
173 /* this inode has never been used as a BOOT_LOADER */
174 set_nlink(inode_bl, 1);
175 i_uid_write(inode_bl, 0);
176 i_gid_write(inode_bl, 0);
177 inode_bl->i_flags = 0;
179 inode_set_iversion(inode_bl, 1);
180 i_size_write(inode_bl, 0);
181 inode_bl->i_mode = S_IFREG;
182 if (ext4_has_feature_extents(sb)) {
183 ext4_set_inode_flag(inode_bl, EXT4_INODE_EXTENTS);
184 ext4_ext_tree_init(handle, inode_bl);
186 memset(ei_bl->i_data, 0, sizeof(ei_bl->i_data));
189 err = dquot_initialize(inode);
193 size = (qsize_t)(inode->i_blocks) * (1 << 9) + inode->i_bytes;
194 size_bl = (qsize_t)(inode_bl->i_blocks) * (1 << 9) + inode_bl->i_bytes;
195 diff = size - size_bl;
196 swap_inode_data(inode, inode_bl);
198 inode->i_ctime = inode_bl->i_ctime = current_time(inode);
200 inode->i_generation = prandom_u32();
201 inode_bl->i_generation = prandom_u32();
202 reset_inode_seed(inode);
203 reset_inode_seed(inode_bl);
205 ext4_discard_preallocations(inode);
207 err = ext4_mark_inode_dirty(handle, inode);
209 /* No need to update quota information. */
210 ext4_warning(inode->i_sb,
211 "couldn't mark inode #%lu dirty (err %d)",
213 /* Revert all changes: */
214 swap_inode_data(inode, inode_bl);
215 ext4_mark_inode_dirty(handle, inode);
219 blocks = inode_bl->i_blocks;
220 bytes = inode_bl->i_bytes;
221 inode_bl->i_blocks = inode->i_blocks;
222 inode_bl->i_bytes = inode->i_bytes;
223 err = ext4_mark_inode_dirty(handle, inode_bl);
225 /* No need to update quota information. */
226 ext4_warning(inode_bl->i_sb,
227 "couldn't mark inode #%lu dirty (err %d)",
228 inode_bl->i_ino, err);
232 /* Bootloader inode should not be counted into quota information. */
234 dquot_free_space(inode, diff);
236 err = dquot_alloc_space(inode, -1 * diff);
240 /* Revert all changes: */
241 inode_bl->i_blocks = blocks;
242 inode_bl->i_bytes = bytes;
243 swap_inode_data(inode, inode_bl);
244 ext4_mark_inode_dirty(handle, inode);
245 ext4_mark_inode_dirty(handle, inode_bl);
249 ext4_journal_stop(handle);
250 ext4_double_up_write_data_sem(inode, inode_bl);
253 up_write(&EXT4_I(inode)->i_mmap_sem);
255 unlock_two_nondirectories(inode, inode_bl);
260 #ifdef CONFIG_FS_ENCRYPTION
261 static int uuid_is_zero(__u8 u[16])
265 for (i = 0; i < 16; i++)
273 * If immutable is set and we are not clearing it, we're not allowed to change
274 * anything else in the inode. Don't error out if we're only trying to set
275 * immutable on an immutable file.
277 static int ext4_ioctl_check_immutable(struct inode *inode, __u32 new_projid,
280 struct ext4_inode_info *ei = EXT4_I(inode);
281 unsigned int oldflags = ei->i_flags;
283 if (!(oldflags & EXT4_IMMUTABLE_FL) || !(flags & EXT4_IMMUTABLE_FL))
286 if ((oldflags & ~EXT4_IMMUTABLE_FL) != (flags & ~EXT4_IMMUTABLE_FL))
288 if (ext4_has_feature_project(inode->i_sb) &&
289 __kprojid_val(ei->i_projid) != new_projid)
295 static int ext4_ioctl_setflags(struct inode *inode,
298 struct ext4_inode_info *ei = EXT4_I(inode);
299 handle_t *handle = NULL;
300 int err = -EPERM, migrate = 0;
301 struct ext4_iloc iloc;
302 unsigned int oldflags, mask, i;
304 struct super_block *sb = inode->i_sb;
306 /* Is it quota file? Do not allow user to mess with it */
307 if (ext4_is_quota_file(inode))
310 oldflags = ei->i_flags;
312 /* The JOURNAL_DATA flag is modifiable only by root */
313 jflag = flags & EXT4_JOURNAL_DATA_FL;
315 err = vfs_ioc_setflags_prepare(inode, oldflags, flags);
320 * The JOURNAL_DATA flag can only be changed by
321 * the relevant capability.
323 if ((jflag ^ oldflags) & (EXT4_JOURNAL_DATA_FL)) {
324 if (!capable(CAP_SYS_RESOURCE))
327 if ((flags ^ oldflags) & EXT4_EXTENTS_FL)
330 if ((flags ^ oldflags) & EXT4_CASEFOLD_FL) {
331 if (!ext4_has_feature_casefold(sb)) {
336 if (!S_ISDIR(inode->i_mode)) {
341 if (!ext4_empty_dir(inode)) {
348 * Wait for all pending directio and then flush all the dirty pages
349 * for this file. The flush marks all the pages readonly, so any
350 * subsequent attempt to write to the file (particularly mmap pages)
351 * will come through the filesystem and fail.
353 if (S_ISREG(inode->i_mode) && !IS_IMMUTABLE(inode) &&
354 (flags & EXT4_IMMUTABLE_FL)) {
355 inode_dio_wait(inode);
356 err = filemap_write_and_wait(inode->i_mapping);
361 handle = ext4_journal_start(inode, EXT4_HT_INODE, 1);
362 if (IS_ERR(handle)) {
363 err = PTR_ERR(handle);
367 ext4_handle_sync(handle);
368 err = ext4_reserve_inode_write(handle, inode, &iloc);
372 for (i = 0, mask = 1; i < 32; i++, mask <<= 1) {
373 if (!(mask & EXT4_FL_USER_MODIFIABLE))
375 /* These flags get special treatment later */
376 if (mask == EXT4_JOURNAL_DATA_FL || mask == EXT4_EXTENTS_FL)
379 ext4_set_inode_flag(inode, i);
381 ext4_clear_inode_flag(inode, i);
384 ext4_set_inode_flags(inode);
385 inode->i_ctime = current_time(inode);
387 err = ext4_mark_iloc_dirty(handle, inode, &iloc);
389 ext4_journal_stop(handle);
393 if ((jflag ^ oldflags) & (EXT4_JOURNAL_DATA_FL)) {
395 * Changes to the journaling mode can cause unsafe changes to
396 * S_DAX if we are using the DAX mount option.
398 if (test_opt(inode->i_sb, DAX)) {
403 err = ext4_change_inode_journal_flag(inode, jflag);
408 if (flags & EXT4_EXTENTS_FL)
409 err = ext4_ext_migrate(inode);
411 err = ext4_ind_migrate(inode);
419 static int ext4_ioctl_setproject(struct file *filp, __u32 projid)
421 struct inode *inode = file_inode(filp);
422 struct super_block *sb = inode->i_sb;
423 struct ext4_inode_info *ei = EXT4_I(inode);
427 struct ext4_iloc iloc;
428 struct ext4_inode *raw_inode;
429 struct dquot *transfer_to[MAXQUOTAS] = { };
431 if (!ext4_has_feature_project(sb)) {
432 if (projid != EXT4_DEF_PROJID)
438 if (EXT4_INODE_SIZE(sb) <= EXT4_GOOD_OLD_INODE_SIZE)
441 kprojid = make_kprojid(&init_user_ns, (projid_t)projid);
443 if (projid_eq(kprojid, EXT4_I(inode)->i_projid))
447 /* Is it quota file? Do not allow user to mess with it */
448 if (ext4_is_quota_file(inode))
451 err = ext4_get_inode_loc(inode, &iloc);
455 raw_inode = ext4_raw_inode(&iloc);
456 if (!EXT4_FITS_IN_INODE(raw_inode, ei, i_projid)) {
457 err = ext4_expand_extra_isize(inode,
458 EXT4_SB(sb)->s_want_extra_isize,
466 err = dquot_initialize(inode);
470 handle = ext4_journal_start(inode, EXT4_HT_QUOTA,
471 EXT4_QUOTA_INIT_BLOCKS(sb) +
472 EXT4_QUOTA_DEL_BLOCKS(sb) + 3);
474 return PTR_ERR(handle);
476 err = ext4_reserve_inode_write(handle, inode, &iloc);
480 transfer_to[PRJQUOTA] = dqget(sb, make_kqid_projid(kprojid));
481 if (!IS_ERR(transfer_to[PRJQUOTA])) {
483 /* __dquot_transfer() calls back ext4_get_inode_usage() which
484 * counts xattr inode references.
486 down_read(&EXT4_I(inode)->xattr_sem);
487 err = __dquot_transfer(inode, transfer_to);
488 up_read(&EXT4_I(inode)->xattr_sem);
489 dqput(transfer_to[PRJQUOTA]);
494 EXT4_I(inode)->i_projid = kprojid;
495 inode->i_ctime = current_time(inode);
497 rc = ext4_mark_iloc_dirty(handle, inode, &iloc);
501 ext4_journal_stop(handle);
505 static int ext4_ioctl_setproject(struct file *filp, __u32 projid)
507 if (projid != EXT4_DEF_PROJID)
513 /* Transfer internal flags to xflags */
514 static inline __u32 ext4_iflags_to_xflags(unsigned long iflags)
518 if (iflags & EXT4_SYNC_FL)
519 xflags |= FS_XFLAG_SYNC;
520 if (iflags & EXT4_IMMUTABLE_FL)
521 xflags |= FS_XFLAG_IMMUTABLE;
522 if (iflags & EXT4_APPEND_FL)
523 xflags |= FS_XFLAG_APPEND;
524 if (iflags & EXT4_NODUMP_FL)
525 xflags |= FS_XFLAG_NODUMP;
526 if (iflags & EXT4_NOATIME_FL)
527 xflags |= FS_XFLAG_NOATIME;
528 if (iflags & EXT4_PROJINHERIT_FL)
529 xflags |= FS_XFLAG_PROJINHERIT;
533 #define EXT4_SUPPORTED_FS_XFLAGS (FS_XFLAG_SYNC | FS_XFLAG_IMMUTABLE | \
534 FS_XFLAG_APPEND | FS_XFLAG_NODUMP | \
535 FS_XFLAG_NOATIME | FS_XFLAG_PROJINHERIT)
537 /* Transfer xflags flags to internal */
538 static inline unsigned long ext4_xflags_to_iflags(__u32 xflags)
540 unsigned long iflags = 0;
542 if (xflags & FS_XFLAG_SYNC)
543 iflags |= EXT4_SYNC_FL;
544 if (xflags & FS_XFLAG_IMMUTABLE)
545 iflags |= EXT4_IMMUTABLE_FL;
546 if (xflags & FS_XFLAG_APPEND)
547 iflags |= EXT4_APPEND_FL;
548 if (xflags & FS_XFLAG_NODUMP)
549 iflags |= EXT4_NODUMP_FL;
550 if (xflags & FS_XFLAG_NOATIME)
551 iflags |= EXT4_NOATIME_FL;
552 if (xflags & FS_XFLAG_PROJINHERIT)
553 iflags |= EXT4_PROJINHERIT_FL;
558 static int ext4_shutdown(struct super_block *sb, unsigned long arg)
560 struct ext4_sb_info *sbi = EXT4_SB(sb);
563 if (!capable(CAP_SYS_ADMIN))
566 if (get_user(flags, (__u32 __user *)arg))
569 if (flags > EXT4_GOING_FLAGS_NOLOGFLUSH)
572 if (ext4_forced_shutdown(sbi))
575 ext4_msg(sb, KERN_ALERT, "shut down requested (%d)", flags);
576 trace_ext4_shutdown(sb, flags);
579 case EXT4_GOING_FLAGS_DEFAULT:
580 freeze_bdev(sb->s_bdev);
581 set_bit(EXT4_FLAGS_SHUTDOWN, &sbi->s_ext4_flags);
582 thaw_bdev(sb->s_bdev, sb);
584 case EXT4_GOING_FLAGS_LOGFLUSH:
585 set_bit(EXT4_FLAGS_SHUTDOWN, &sbi->s_ext4_flags);
586 if (sbi->s_journal && !is_journal_aborted(sbi->s_journal)) {
587 (void) ext4_force_commit(sb);
588 jbd2_journal_abort(sbi->s_journal, -ESHUTDOWN);
591 case EXT4_GOING_FLAGS_NOLOGFLUSH:
592 set_bit(EXT4_FLAGS_SHUTDOWN, &sbi->s_ext4_flags);
593 if (sbi->s_journal && !is_journal_aborted(sbi->s_journal))
594 jbd2_journal_abort(sbi->s_journal, -ESHUTDOWN);
599 clear_opt(sb, DISCARD);
603 struct getfsmap_info {
604 struct super_block *gi_sb;
605 struct fsmap_head __user *gi_data;
610 static int ext4_getfsmap_format(struct ext4_fsmap *xfm, void *priv)
612 struct getfsmap_info *info = priv;
615 trace_ext4_getfsmap_mapping(info->gi_sb, xfm);
617 info->gi_last_flags = xfm->fmr_flags;
618 ext4_fsmap_from_internal(info->gi_sb, &fm, xfm);
619 if (copy_to_user(&info->gi_data->fmh_recs[info->gi_idx++], &fm,
620 sizeof(struct fsmap)))
626 static int ext4_ioc_getfsmap(struct super_block *sb,
627 struct fsmap_head __user *arg)
629 struct getfsmap_info info = { NULL };
630 struct ext4_fsmap_head xhead = {0};
631 struct fsmap_head head;
632 bool aborted = false;
635 if (copy_from_user(&head, arg, sizeof(struct fsmap_head)))
637 if (memchr_inv(head.fmh_reserved, 0, sizeof(head.fmh_reserved)) ||
638 memchr_inv(head.fmh_keys[0].fmr_reserved, 0,
639 sizeof(head.fmh_keys[0].fmr_reserved)) ||
640 memchr_inv(head.fmh_keys[1].fmr_reserved, 0,
641 sizeof(head.fmh_keys[1].fmr_reserved)))
644 * ext4 doesn't report file extents at all, so the only valid
645 * file offsets are the magic ones (all zeroes or all ones).
647 if (head.fmh_keys[0].fmr_offset ||
648 (head.fmh_keys[1].fmr_offset != 0 &&
649 head.fmh_keys[1].fmr_offset != -1ULL))
652 xhead.fmh_iflags = head.fmh_iflags;
653 xhead.fmh_count = head.fmh_count;
654 ext4_fsmap_to_internal(sb, &xhead.fmh_keys[0], &head.fmh_keys[0]);
655 ext4_fsmap_to_internal(sb, &xhead.fmh_keys[1], &head.fmh_keys[1]);
657 trace_ext4_getfsmap_low_key(sb, &xhead.fmh_keys[0]);
658 trace_ext4_getfsmap_high_key(sb, &xhead.fmh_keys[1]);
662 error = ext4_getfsmap(sb, &xhead, ext4_getfsmap_format, &info);
663 if (error == EXT4_QUERY_RANGE_ABORT) {
669 /* If we didn't abort, set the "last" flag in the last fmx */
670 if (!aborted && info.gi_idx) {
671 info.gi_last_flags |= FMR_OF_LAST;
672 if (copy_to_user(&info.gi_data->fmh_recs[info.gi_idx - 1].fmr_flags,
674 sizeof(info.gi_last_flags)))
678 /* copy back header */
679 head.fmh_entries = xhead.fmh_entries;
680 head.fmh_oflags = xhead.fmh_oflags;
681 if (copy_to_user(arg, &head, sizeof(struct fsmap_head)))
687 static long ext4_ioctl_group_add(struct file *file,
688 struct ext4_new_group_data *input)
690 struct super_block *sb = file_inode(file)->i_sb;
693 err = ext4_resize_begin(sb);
697 if (ext4_has_feature_bigalloc(sb)) {
698 ext4_msg(sb, KERN_ERR,
699 "Online resizing not supported with bigalloc");
704 err = mnt_want_write_file(file);
708 err = ext4_group_add(sb, input);
709 if (EXT4_SB(sb)->s_journal) {
710 jbd2_journal_lock_updates(EXT4_SB(sb)->s_journal);
711 err2 = jbd2_journal_flush(EXT4_SB(sb)->s_journal);
712 jbd2_journal_unlock_updates(EXT4_SB(sb)->s_journal);
716 mnt_drop_write_file(file);
717 if (!err && ext4_has_group_desc_csum(sb) &&
718 test_opt(sb, INIT_INODE_TABLE))
719 err = ext4_register_li_request(sb, input->group);
725 static void ext4_fill_fsxattr(struct inode *inode, struct fsxattr *fa)
727 struct ext4_inode_info *ei = EXT4_I(inode);
729 simple_fill_fsxattr(fa, ext4_iflags_to_xflags(ei->i_flags &
730 EXT4_FL_USER_VISIBLE));
732 if (ext4_has_feature_project(inode->i_sb))
733 fa->fsx_projid = from_kprojid(&init_user_ns, ei->i_projid);
736 /* copied from fs/ioctl.c */
737 static int fiemap_check_ranges(struct super_block *sb,
738 u64 start, u64 len, u64 *new_len)
740 u64 maxbytes = (u64) sb->s_maxbytes;
747 if (start > maxbytes)
751 * Shrink request scope to what the fs can actually handle.
753 if (len > maxbytes || (maxbytes - len) < start)
754 *new_len = maxbytes - start;
759 /* So that the fiemap access checks can't overflow on 32 bit machines. */
760 #define FIEMAP_MAX_EXTENTS (UINT_MAX / sizeof(struct fiemap_extent))
762 static int ext4_ioctl_get_es_cache(struct file *filp, unsigned long arg)
764 struct fiemap fiemap;
765 struct fiemap __user *ufiemap = (struct fiemap __user *) arg;
766 struct fiemap_extent_info fieinfo = { 0, };
767 struct inode *inode = file_inode(filp);
768 struct super_block *sb = inode->i_sb;
772 if (copy_from_user(&fiemap, ufiemap, sizeof(fiemap)))
775 if (fiemap.fm_extent_count > FIEMAP_MAX_EXTENTS)
778 error = fiemap_check_ranges(sb, fiemap.fm_start, fiemap.fm_length,
783 fieinfo.fi_flags = fiemap.fm_flags;
784 fieinfo.fi_extents_max = fiemap.fm_extent_count;
785 fieinfo.fi_extents_start = ufiemap->fm_extents;
787 if (fiemap.fm_extent_count != 0 &&
788 !access_ok(fieinfo.fi_extents_start,
789 fieinfo.fi_extents_max * sizeof(struct fiemap_extent)))
792 if (fieinfo.fi_flags & FIEMAP_FLAG_SYNC)
793 filemap_write_and_wait(inode->i_mapping);
795 error = ext4_get_es_cache(inode, &fieinfo, fiemap.fm_start, len);
796 fiemap.fm_flags = fieinfo.fi_flags;
797 fiemap.fm_mapped_extents = fieinfo.fi_extents_mapped;
798 if (copy_to_user(ufiemap, &fiemap, sizeof(fiemap)))
804 long ext4_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
806 struct inode *inode = file_inode(filp);
807 struct super_block *sb = inode->i_sb;
808 struct ext4_inode_info *ei = EXT4_I(inode);
811 ext4_debug("cmd = %u, arg = %lu\n", cmd, arg);
814 case FS_IOC_GETFSMAP:
815 return ext4_ioc_getfsmap(sb, (void __user *)arg);
816 case EXT4_IOC_GETFLAGS:
817 flags = ei->i_flags & EXT4_FL_USER_VISIBLE;
818 if (S_ISREG(inode->i_mode))
819 flags &= ~EXT4_PROJINHERIT_FL;
820 return put_user(flags, (int __user *) arg);
821 case EXT4_IOC_SETFLAGS: {
824 if (!inode_owner_or_capable(inode))
827 if (get_user(flags, (int __user *) arg))
830 if (flags & ~EXT4_FL_USER_VISIBLE)
833 * chattr(1) grabs flags via GETFLAGS, modifies the result and
834 * passes that to SETFLAGS. So we cannot easily make SETFLAGS
835 * more restrictive than just silently masking off visible but
836 * not settable flags as we always did.
838 flags &= EXT4_FL_USER_MODIFIABLE;
839 if (ext4_mask_flags(inode->i_mode, flags) != flags)
842 err = mnt_want_write_file(filp);
847 err = ext4_ioctl_check_immutable(inode,
848 from_kprojid(&init_user_ns, ei->i_projid),
851 err = ext4_ioctl_setflags(inode, flags);
853 mnt_drop_write_file(filp);
856 case EXT4_IOC_GETVERSION:
857 case EXT4_IOC_GETVERSION_OLD:
858 return put_user(inode->i_generation, (int __user *) arg);
859 case EXT4_IOC_SETVERSION:
860 case EXT4_IOC_SETVERSION_OLD: {
862 struct ext4_iloc iloc;
866 if (!inode_owner_or_capable(inode))
869 if (ext4_has_metadata_csum(inode->i_sb)) {
870 ext4_warning(sb, "Setting inode version is not "
871 "supported with metadata_csum enabled.");
875 err = mnt_want_write_file(filp);
878 if (get_user(generation, (int __user *) arg)) {
884 handle = ext4_journal_start(inode, EXT4_HT_INODE, 1);
885 if (IS_ERR(handle)) {
886 err = PTR_ERR(handle);
889 err = ext4_reserve_inode_write(handle, inode, &iloc);
891 inode->i_ctime = current_time(inode);
892 inode->i_generation = generation;
893 err = ext4_mark_iloc_dirty(handle, inode, &iloc);
895 ext4_journal_stop(handle);
900 mnt_drop_write_file(filp);
903 case EXT4_IOC_GROUP_EXTEND: {
904 ext4_fsblk_t n_blocks_count;
907 err = ext4_resize_begin(sb);
911 if (get_user(n_blocks_count, (__u32 __user *)arg)) {
913 goto group_extend_out;
916 if (ext4_has_feature_bigalloc(sb)) {
917 ext4_msg(sb, KERN_ERR,
918 "Online resizing not supported with bigalloc");
920 goto group_extend_out;
923 err = mnt_want_write_file(filp);
925 goto group_extend_out;
927 err = ext4_group_extend(sb, EXT4_SB(sb)->s_es, n_blocks_count);
928 if (EXT4_SB(sb)->s_journal) {
929 jbd2_journal_lock_updates(EXT4_SB(sb)->s_journal);
930 err2 = jbd2_journal_flush(EXT4_SB(sb)->s_journal);
931 jbd2_journal_unlock_updates(EXT4_SB(sb)->s_journal);
935 mnt_drop_write_file(filp);
941 case EXT4_IOC_MOVE_EXT: {
942 struct move_extent me;
946 if (!(filp->f_mode & FMODE_READ) ||
947 !(filp->f_mode & FMODE_WRITE))
950 if (copy_from_user(&me,
951 (struct move_extent __user *)arg, sizeof(me)))
955 donor = fdget(me.donor_fd);
959 if (!(donor.file->f_mode & FMODE_WRITE)) {
964 if (ext4_has_feature_bigalloc(sb)) {
965 ext4_msg(sb, KERN_ERR,
966 "Online defrag not supported with bigalloc");
969 } else if (IS_DAX(inode)) {
970 ext4_msg(sb, KERN_ERR,
971 "Online defrag not supported with DAX");
976 err = mnt_want_write_file(filp);
980 err = ext4_move_extents(filp, donor.file, me.orig_start,
981 me.donor_start, me.len, &me.moved_len);
982 mnt_drop_write_file(filp);
984 if (copy_to_user((struct move_extent __user *)arg,
992 case EXT4_IOC_GROUP_ADD: {
993 struct ext4_new_group_data input;
995 if (copy_from_user(&input, (struct ext4_new_group_input __user *)arg,
999 return ext4_ioctl_group_add(filp, &input);
1002 case EXT4_IOC_MIGRATE:
1005 if (!inode_owner_or_capable(inode))
1008 err = mnt_want_write_file(filp);
1012 * inode_mutex prevent write and truncate on the file.
1013 * Read still goes through. We take i_data_sem in
1014 * ext4_ext_swap_inode_data before we switch the
1015 * inode format to prevent read.
1017 inode_lock((inode));
1018 err = ext4_ext_migrate(inode);
1019 inode_unlock((inode));
1020 mnt_drop_write_file(filp);
1024 case EXT4_IOC_ALLOC_DA_BLKS:
1027 if (!inode_owner_or_capable(inode))
1030 err = mnt_want_write_file(filp);
1033 err = ext4_alloc_da_blocks(inode);
1034 mnt_drop_write_file(filp);
1038 case EXT4_IOC_SWAP_BOOT:
1041 if (!(filp->f_mode & FMODE_WRITE))
1043 err = mnt_want_write_file(filp);
1046 err = swap_inode_boot_loader(sb, inode);
1047 mnt_drop_write_file(filp);
1051 case EXT4_IOC_RESIZE_FS: {
1052 ext4_fsblk_t n_blocks_count;
1053 int err = 0, err2 = 0;
1054 ext4_group_t o_group = EXT4_SB(sb)->s_groups_count;
1056 if (copy_from_user(&n_blocks_count, (__u64 __user *)arg,
1061 err = ext4_resize_begin(sb);
1065 err = mnt_want_write_file(filp);
1069 err = ext4_resize_fs(sb, n_blocks_count);
1070 if (EXT4_SB(sb)->s_journal) {
1071 jbd2_journal_lock_updates(EXT4_SB(sb)->s_journal);
1072 err2 = jbd2_journal_flush(EXT4_SB(sb)->s_journal);
1073 jbd2_journal_unlock_updates(EXT4_SB(sb)->s_journal);
1077 mnt_drop_write_file(filp);
1078 if (!err && (o_group < EXT4_SB(sb)->s_groups_count) &&
1079 ext4_has_group_desc_csum(sb) &&
1080 test_opt(sb, INIT_INODE_TABLE))
1081 err = ext4_register_li_request(sb, o_group);
1084 ext4_resize_end(sb);
1090 struct request_queue *q = bdev_get_queue(sb->s_bdev);
1091 struct fstrim_range range;
1094 if (!capable(CAP_SYS_ADMIN))
1097 if (!blk_queue_discard(q))
1101 * We haven't replayed the journal, so we cannot use our
1102 * block-bitmap-guided storage zapping commands.
1104 if (test_opt(sb, NOLOAD) && ext4_has_feature_journal(sb))
1107 if (copy_from_user(&range, (struct fstrim_range __user *)arg,
1111 range.minlen = max((unsigned int)range.minlen,
1112 q->limits.discard_granularity);
1113 ret = ext4_trim_fs(sb, &range);
1117 if (copy_to_user((struct fstrim_range __user *)arg, &range,
1123 case EXT4_IOC_PRECACHE_EXTENTS:
1124 return ext4_ext_precache(inode);
1126 case EXT4_IOC_SET_ENCRYPTION_POLICY:
1127 if (!ext4_has_feature_encrypt(sb))
1129 return fscrypt_ioctl_set_policy(filp, (const void __user *)arg);
1131 case EXT4_IOC_GET_ENCRYPTION_PWSALT: {
1132 #ifdef CONFIG_FS_ENCRYPTION
1134 struct ext4_sb_info *sbi = EXT4_SB(sb);
1137 if (!ext4_has_feature_encrypt(sb))
1139 if (uuid_is_zero(sbi->s_es->s_encrypt_pw_salt)) {
1140 err = mnt_want_write_file(filp);
1143 handle = ext4_journal_start_sb(sb, EXT4_HT_MISC, 1);
1144 if (IS_ERR(handle)) {
1145 err = PTR_ERR(handle);
1146 goto pwsalt_err_exit;
1148 err = ext4_journal_get_write_access(handle, sbi->s_sbh);
1150 goto pwsalt_err_journal;
1151 generate_random_uuid(sbi->s_es->s_encrypt_pw_salt);
1152 err = ext4_handle_dirty_metadata(handle, NULL,
1155 err2 = ext4_journal_stop(handle);
1159 mnt_drop_write_file(filp);
1163 if (copy_to_user((void __user *) arg,
1164 sbi->s_es->s_encrypt_pw_salt, 16))
1171 case EXT4_IOC_GET_ENCRYPTION_POLICY:
1172 if (!ext4_has_feature_encrypt(sb))
1174 return fscrypt_ioctl_get_policy(filp, (void __user *)arg);
1176 case FS_IOC_GET_ENCRYPTION_POLICY_EX:
1177 if (!ext4_has_feature_encrypt(sb))
1179 return fscrypt_ioctl_get_policy_ex(filp, (void __user *)arg);
1181 case FS_IOC_ADD_ENCRYPTION_KEY:
1182 if (!ext4_has_feature_encrypt(sb))
1184 return fscrypt_ioctl_add_key(filp, (void __user *)arg);
1186 case FS_IOC_REMOVE_ENCRYPTION_KEY:
1187 if (!ext4_has_feature_encrypt(sb))
1189 return fscrypt_ioctl_remove_key(filp, (void __user *)arg);
1191 case FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS:
1192 if (!ext4_has_feature_encrypt(sb))
1194 return fscrypt_ioctl_remove_key_all_users(filp,
1195 (void __user *)arg);
1196 case FS_IOC_GET_ENCRYPTION_KEY_STATUS:
1197 if (!ext4_has_feature_encrypt(sb))
1199 return fscrypt_ioctl_get_key_status(filp, (void __user *)arg);
1201 case FS_IOC_GET_ENCRYPTION_NONCE:
1202 if (!ext4_has_feature_encrypt(sb))
1204 return fscrypt_ioctl_get_nonce(filp, (void __user *)arg);
1206 case EXT4_IOC_CLEAR_ES_CACHE:
1208 if (!inode_owner_or_capable(inode))
1210 ext4_clear_inode_es(inode);
1214 case EXT4_IOC_GETSTATE:
1218 if (ext4_test_inode_state(inode, EXT4_STATE_EXT_PRECACHED))
1219 state |= EXT4_STATE_FLAG_EXT_PRECACHED;
1220 if (ext4_test_inode_state(inode, EXT4_STATE_NEW))
1221 state |= EXT4_STATE_FLAG_NEW;
1222 if (ext4_test_inode_state(inode, EXT4_STATE_NEWENTRY))
1223 state |= EXT4_STATE_FLAG_NEWENTRY;
1224 if (ext4_test_inode_state(inode, EXT4_STATE_DA_ALLOC_CLOSE))
1225 state |= EXT4_STATE_FLAG_DA_ALLOC_CLOSE;
1227 return put_user(state, (__u32 __user *) arg);
1230 case EXT4_IOC_GET_ES_CACHE:
1231 return ext4_ioctl_get_es_cache(filp, arg);
1233 case EXT4_IOC_FSGETXATTR:
1237 ext4_fill_fsxattr(inode, &fa);
1239 if (copy_to_user((struct fsxattr __user *)arg,
1244 case EXT4_IOC_FSSETXATTR:
1246 struct fsxattr fa, old_fa;
1249 if (copy_from_user(&fa, (struct fsxattr __user *)arg,
1253 /* Make sure caller has proper permission */
1254 if (!inode_owner_or_capable(inode))
1257 if (fa.fsx_xflags & ~EXT4_SUPPORTED_FS_XFLAGS)
1260 flags = ext4_xflags_to_iflags(fa.fsx_xflags);
1261 if (ext4_mask_flags(inode->i_mode, flags) != flags)
1264 err = mnt_want_write_file(filp);
1269 ext4_fill_fsxattr(inode, &old_fa);
1270 err = vfs_ioc_fssetxattr_check(inode, &old_fa, &fa);
1273 flags = (ei->i_flags & ~EXT4_FL_XFLAG_VISIBLE) |
1274 (flags & EXT4_FL_XFLAG_VISIBLE);
1275 err = ext4_ioctl_check_immutable(inode, fa.fsx_projid, flags);
1278 err = ext4_ioctl_setflags(inode, flags);
1281 err = ext4_ioctl_setproject(filp, fa.fsx_projid);
1283 inode_unlock(inode);
1284 mnt_drop_write_file(filp);
1287 case EXT4_IOC_SHUTDOWN:
1288 return ext4_shutdown(sb, arg);
1290 case FS_IOC_ENABLE_VERITY:
1291 if (!ext4_has_feature_verity(sb))
1293 return fsverity_ioctl_enable(filp, (const void __user *)arg);
1295 case FS_IOC_MEASURE_VERITY:
1296 if (!ext4_has_feature_verity(sb))
1298 return fsverity_ioctl_measure(filp, (void __user *)arg);
1305 #ifdef CONFIG_COMPAT
1306 long ext4_compat_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
1308 /* These are just misnamed, they actually get/put from/to user an int */
1310 case EXT4_IOC32_GETFLAGS:
1311 cmd = EXT4_IOC_GETFLAGS;
1313 case EXT4_IOC32_SETFLAGS:
1314 cmd = EXT4_IOC_SETFLAGS;
1316 case EXT4_IOC32_GETVERSION:
1317 cmd = EXT4_IOC_GETVERSION;
1319 case EXT4_IOC32_SETVERSION:
1320 cmd = EXT4_IOC_SETVERSION;
1322 case EXT4_IOC32_GROUP_EXTEND:
1323 cmd = EXT4_IOC_GROUP_EXTEND;
1325 case EXT4_IOC32_GETVERSION_OLD:
1326 cmd = EXT4_IOC_GETVERSION_OLD;
1328 case EXT4_IOC32_SETVERSION_OLD:
1329 cmd = EXT4_IOC_SETVERSION_OLD;
1331 case EXT4_IOC32_GETRSVSZ:
1332 cmd = EXT4_IOC_GETRSVSZ;
1334 case EXT4_IOC32_SETRSVSZ:
1335 cmd = EXT4_IOC_SETRSVSZ;
1337 case EXT4_IOC32_GROUP_ADD: {
1338 struct compat_ext4_new_group_input __user *uinput;
1339 struct ext4_new_group_data input;
1342 uinput = compat_ptr(arg);
1343 err = get_user(input.group, &uinput->group);
1344 err |= get_user(input.block_bitmap, &uinput->block_bitmap);
1345 err |= get_user(input.inode_bitmap, &uinput->inode_bitmap);
1346 err |= get_user(input.inode_table, &uinput->inode_table);
1347 err |= get_user(input.blocks_count, &uinput->blocks_count);
1348 err |= get_user(input.reserved_blocks,
1349 &uinput->reserved_blocks);
1352 return ext4_ioctl_group_add(file, &input);
1354 case EXT4_IOC_MOVE_EXT:
1355 case EXT4_IOC_RESIZE_FS:
1357 case EXT4_IOC_PRECACHE_EXTENTS:
1358 case EXT4_IOC_SET_ENCRYPTION_POLICY:
1359 case EXT4_IOC_GET_ENCRYPTION_PWSALT:
1360 case EXT4_IOC_GET_ENCRYPTION_POLICY:
1361 case FS_IOC_GET_ENCRYPTION_POLICY_EX:
1362 case FS_IOC_ADD_ENCRYPTION_KEY:
1363 case FS_IOC_REMOVE_ENCRYPTION_KEY:
1364 case FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS:
1365 case FS_IOC_GET_ENCRYPTION_KEY_STATUS:
1366 case FS_IOC_GET_ENCRYPTION_NONCE:
1367 case EXT4_IOC_SHUTDOWN:
1368 case FS_IOC_GETFSMAP:
1369 case FS_IOC_ENABLE_VERITY:
1370 case FS_IOC_MEASURE_VERITY:
1371 case EXT4_IOC_CLEAR_ES_CACHE:
1372 case EXT4_IOC_GETSTATE:
1373 case EXT4_IOC_GET_ES_CACHE:
1374 case EXT4_IOC_FSGETXATTR:
1375 case EXT4_IOC_FSSETXATTR:
1378 return -ENOIOCTLCMD;
1380 return ext4_ioctl(file, cmd, (unsigned long) compat_ptr(arg));