1 // SPDX-License-Identifier: GPL-2.0-or-later
3  * Copyright (C) 2017-2023 Oracle.  All Rights Reserved.
51 /* Install this scrub-by-handle inode and prepare it for scrubbing. */
64 	 * Don't allow scrubbing by handle of any non-directory inode records  in xchk_install_handle_iscrub()
69 	 * Scrubbers of inode-rooted metadata files (e.g. quota files) will  in xchk_install_handle_iscrub()
73 	if (xfs_is_metadir_inode(ip) && !S_ISDIR(VFS_I(ip)->i_mode)) {  in xchk_install_handle_iscrub()
75 		sc->ip = NULL;  in xchk_install_handle_iscrub()
76 		return -ENOENT;  in xchk_install_handle_iscrub()
94 	struct xfs_mount	*mp = sc->mp;  in xchk_setup_inode()
95 	struct xfs_inode	*ip_in = XFS_I(file_inode(sc->file));  in xchk_setup_inode()
98 	xfs_agnumber_t		agno = XFS_INO_TO_AGNO(mp, sc->sm->sm_ino);  in xchk_setup_inode()
105 	if (sc->sm->sm_ino == 0 || sc->sm->sm_ino == ip_in->i_ino) {  in xchk_setup_inode()
114 	 * On pre-metadir filesystems, reject internal metadata files.  For  in xchk_setup_inode()
117 	 * validate the lack of parent pointers in the sb-root metadata inodes.  in xchk_setup_inode()
119 	if (!xfs_has_metadir(mp) && xfs_is_sb_inum(mp, sc->sm->sm_ino))  in xchk_setup_inode()
120 		return -ENOENT;  in xchk_setup_inode()
122 	if (!xfs_verify_ino(sc->mp, sc->sm->sm_ino))  in xchk_setup_inode()
123 		return -ENOENT;  in xchk_setup_inode()
126 	error = xchk_iget_safe(sc, sc->sm->sm_ino, &ip);  in xchk_setup_inode()
129 	if (error == -ENOENT)  in xchk_setup_inode()
131 	if (error != -EFSCORRUPTED && error != -EFSBADCRC && error != -EINVAL)  in xchk_setup_inode()
148 	 * should flag the corruption and exit to userspace to let it fix the  in xchk_setup_inode()
160 	error = xchk_iget_agi(sc, sc->sm->sm_ino, &agi_bp, &ip);  in xchk_setup_inode()
166 	if (error == -ENOENT)  in xchk_setup_inode()
168 	if (error != -EFSCORRUPTED && error != -EFSBADCRC && error != -EINVAL)  in xchk_setup_inode()
174 		error = -ECANCELED;  in xchk_setup_inode()
189 	pag = xfs_perag_get(mp, XFS_INO_TO_AGNO(mp, sc->sm->sm_ino));  in xchk_setup_inode()
191 		error = -EFSCORRUPTED;  in xchk_setup_inode()
195 	error = xfs_imap(pag, sc->tp, sc->sm->sm_ino, &imap,  in xchk_setup_inode()
198 	if (error == -EINVAL || error == -ENOENT)  in xchk_setup_inode()
209 	 * the inode until we can flag the corruption in xchk_inode.  The  in xchk_setup_inode()
221 	trace_xchk_op_error(sc, agno, XFS_INO_TO_AGBNO(mp, sc->sm->sm_ino),  in xchk_setup_inode()
227 	return -ENOENT;  in xchk_setup_inode()
238 	uint16_t		mode,  in xchk_inode_extsize()  argument
242 	uint32_t		value = be32_to_cpu(dip->di_extsize);  in xchk_inode_extsize()
244 	fa = xfs_inode_validate_extsize(sc->mp, value, mode, flags);  in xchk_inode_extsize()
254 	 * device.  Flag this as an administrative warning since we will clean  in xchk_inode_extsize()
259 	    xfs_extlen_to_rtxmod(sc->mp, value) > 0)  in xchk_inode_extsize()
269 	uint16_t		mode,  in xchk_inode_cowextsize()  argument
274 	uint32_t		value = be32_to_cpu(dip->di_cowextsize);  in xchk_inode_cowextsize()
276 	fa = xfs_inode_validate_cowextsize(sc->mp, value, mode, flags, flags2);  in xchk_inode_cowextsize()
286 	 * Flag this as an administrative warning since we will clean this up  in xchk_inode_cowextsize()
291 	    value % sc->mp->m_sb.sb_rextsize > 0)  in xchk_inode_cowextsize()
301 	uint16_t		mode,  in xchk_inode_flags()  argument
304 	struct xfs_mount	*mp = sc->mp;  in xchk_inode_flags()
311 	if ((flags & XFS_DIFLAG_REALTIME) && !mp->m_rtdev_targp)  in xchk_inode_flags()
314 	/* new rt bitmap flag only valid for rbmino */  in xchk_inode_flags()
315 	if ((flags & XFS_DIFLAG_NEWRTBM) && ino != mp->m_sb.sb_rbmino)  in xchk_inode_flags()
318 	/* directory-only flags */  in xchk_inode_flags()
323 	    !S_ISDIR(mode))  in xchk_inode_flags()
326 	/* file-only flags */  in xchk_inode_flags()
328 	    !S_ISREG(mode))  in xchk_inode_flags()
346 	uint16_t		mode,  in xchk_inode_flags2()  argument
350 	struct xfs_mount	*mp = sc->mp;  in xchk_inode_flags2()
356 	/* reflink flag requires reflink feature */  in xchk_inode_flags2()
361 	/* cowextsize flag is checked w.r.t. mode separately */  in xchk_inode_flags2()
363 	/* file/dir-only flags */  in xchk_inode_flags2()
364 	if ((flags2 & XFS_DIFLAG2_DAX) && !(S_ISREG(mode) || S_ISDIR(mode)))  in xchk_inode_flags2()
367 	/* file-only flags */  in xchk_inode_flags2()
368 	if ((flags2 & XFS_DIFLAG2_REFLINK) && !S_ISREG(mode))  in xchk_inode_flags2()
410 	struct xfs_mount	*mp = sc->mp;  in xchk_dinode()
418 	uint16_t		mode;  in xchk_dinode()  local
420 	flags = be16_to_cpu(dip->di_flags);  in xchk_dinode()
421 	if (dip->di_version >= 3)  in xchk_dinode()
422 		flags2 = be64_to_cpu(dip->di_flags2);  in xchk_dinode()
427 	mode = be16_to_cpu(dip->di_mode);  in xchk_dinode()
428 	switch (mode & S_IFMT) {  in xchk_dinode()
436 		/* mode is recognized */  in xchk_dinode()
444 	switch (dip->di_version) {  in xchk_dinode()
456 			if (be16_to_cpu(dip->di_metatype) >= XFS_METAFILE_MAX)  in xchk_dinode()
459 			if (dip->di_metatype != 0)  in xchk_dinode()
463 		if (dip->di_mode == 0 && sc->ip)  in xchk_dinode()
466 		if (dip->di_projid_hi != 0 &&  in xchk_dinode()
470 		prid = be16_to_cpu(dip->di_projid_lo);  in xchk_dinode()
478 		prid |= (prid_t)be16_to_cpu(dip->di_projid_hi) << 16;  in xchk_dinode()
481 	 * di_uid/di_gid -- -1 isn't invalid, but there's no way that  in xchk_dinode()
484 	if (dip->di_uid == cpu_to_be32(-1U) ||  in xchk_dinode()
485 	    dip->di_gid == cpu_to_be32(-1U))  in xchk_dinode()
489 	 * project id of -1 isn't supposed to be valid, but the kernel didn't  in xchk_dinode()
492 	if (prid == -1U)  in xchk_dinode()
496 	switch (dip->di_format) {  in xchk_dinode()
498 		if (!S_ISCHR(mode) && !S_ISBLK(mode) &&  in xchk_dinode()
499 		    !S_ISFIFO(mode) && !S_ISSOCK(mode))  in xchk_dinode()
503 		if (!S_ISDIR(mode) && !S_ISLNK(mode))  in xchk_dinode()
507 		if (!S_ISREG(mode) && !S_ISDIR(mode) && !S_ISLNK(mode))  in xchk_dinode()
511 		if (!S_ISREG(mode) && !S_ISDIR(mode))  in xchk_dinode()
515 		if (!S_ISREG(mode))  in xchk_dinode()
525 	xchk_dinode_nsec(sc, ino, dip, dip->di_atime);  in xchk_dinode()
526 	xchk_dinode_nsec(sc, ino, dip, dip->di_mtime);  in xchk_dinode()
527 	xchk_dinode_nsec(sc, ino, dip, dip->di_ctime);  in xchk_dinode()
531 	 * the VFS such as the upper bit being set and zero-length  in xchk_dinode()
534 	isize = be64_to_cpu(dip->di_size);  in xchk_dinode()
539 	if (!S_ISDIR(mode) && !S_ISREG(mode) && !S_ISLNK(mode) && isize != 0)  in xchk_dinode()
543 	if (S_ISDIR(mode) && (isize == 0 || isize >= XFS_DIR2_SPACE_SIZE))  in xchk_dinode()
547 	if (S_ISLNK(mode) && (isize == 0 || isize >= XFS_SYMLINK_MAXLEN))  in xchk_dinode()
554 	 * overly large offsets, flag the inode for admin review.  in xchk_dinode()
556 	if (isize > mp->m_super->s_maxbytes)  in xchk_dinode()
567 		 * best we can do without cross-referencing with the  in xchk_dinode()
570 		if (be64_to_cpu(dip->di_nblocks) >=  in xchk_dinode()
571 		    mp->m_sb.sb_dblocks + mp->m_sb.sb_rblocks)  in xchk_dinode()
574 		if (be64_to_cpu(dip->di_nblocks) >= mp->m_sb.sb_dblocks)  in xchk_dinode()
578 	xchk_inode_flags(sc, dip, ino, mode, flags);  in xchk_dinode()
580 	xchk_inode_extsize(sc, dip, ino, mode, flags);  in xchk_dinode()
587 	switch (dip->di_format) {  in xchk_dinode()
603 	if (XFS_DFORK_BOFF(dip) >= mp->m_sb.sb_inodesize)  in xchk_dinode()
605 	if (naextents != 0 && dip->di_forkoff == 0)  in xchk_dinode()
607 	if (dip->di_forkoff == 0 && dip->di_aformat != XFS_DINODE_FMT_EXTENTS)  in xchk_dinode()
611 	if (dip->di_aformat != XFS_DINODE_FMT_LOCAL &&  in xchk_dinode()
612 	    dip->di_aformat != XFS_DINODE_FMT_EXTENTS &&  in xchk_dinode()
613 	    dip->di_aformat != XFS_DINODE_FMT_BTREE)  in xchk_dinode()
618 	switch (dip->di_aformat) {  in xchk_dinode()
632 	if (dip->di_version >= 3) {  in xchk_dinode()
633 		xchk_dinode_nsec(sc, ino, dip, dip->di_crtime);  in xchk_dinode()
634 		xchk_inode_flags2(sc, dip, ino, mode, flags, flags2);  in xchk_dinode()
635 		xchk_inode_cowextsize(sc, dip, ino, mode, flags,  in xchk_dinode()
655 	if (!sc->sa.fino_cur || xchk_skip_xref(sc->sm))  in xchk_inode_xref_finobt()
658 	agino = XFS_INO_TO_AGINO(sc->mp, ino);  in xchk_inode_xref_finobt()
664 	error = xfs_inobt_lookup(sc->sa.fino_cur, agino, XFS_LOOKUP_LE,  in xchk_inode_xref_finobt()
666 	if (!xchk_should_check_xref(sc, &error, &sc->sa.fino_cur) ||  in xchk_inode_xref_finobt()
670 	error = xfs_inobt_get_rec(sc->sa.fino_cur, &rec, &has_record);  in xchk_inode_xref_finobt()
671 	if (!xchk_should_check_xref(sc, &error, &sc->sa.fino_cur) ||  in xchk_inode_xref_finobt()
683 	if (rec.ir_free & XFS_INOBT_MASK(agino - rec.ir_startino))  in xchk_inode_xref_finobt()
684 		xchk_btree_xref_set_corrupt(sc, sc->sa.fino_cur, 0);  in xchk_inode_xref_finobt()
698 	if (xchk_skip_xref(sc->sm))  in xchk_inode_xref_bmap()
706 		xchk_ino_xref_set_corrupt(sc, sc->ip->i_ino);  in xchk_inode_xref_bmap()
712 		xchk_ino_xref_set_corrupt(sc, sc->ip->i_ino);  in xchk_inode_xref_bmap()
715 	if (count + acount != be64_to_cpu(dip->di_nblocks))  in xchk_inode_xref_bmap()
716 		xchk_ino_xref_set_corrupt(sc, sc->ip->i_ino);  in xchk_inode_xref_bmap()
719 /* Cross-reference with the other btrees. */
730 	if (sc->sm->sm_flags & XFS_SCRUB_OFLAG_CORRUPT)  in xchk_inode_xref()
733 	agno = XFS_INO_TO_AGNO(sc->mp, ino);  in xchk_inode_xref()
734 	agbno = XFS_INO_TO_AGBNO(sc->mp, ino);  in xchk_inode_xref()
736 	error = xchk_ag_init_existing(sc, agno, &sc->sa);  in xchk_inode_xref()
748 	xchk_ag_free(sc, &sc->sa);  in xchk_inode_xref()
753  * either flag an error (shared extents w/ no flag) or a preen (flag set w/o
762 	struct xfs_mount	*mp = sc->mp;  in xchk_inode_check_reflink_iflag()
769 	error = xfs_reflink_inode_has_shared_extents(sc->tp, sc->ip,  in xchk_inode_check_reflink_iflag()
774 	if (xfs_is_reflink_inode(sc->ip) && !has_shared)  in xchk_inode_check_reflink_iflag()
776 	else if (!xfs_is_reflink_inode(sc->ip) && has_shared)  in xchk_inode_check_reflink_iflag()
788 	if (VFS_I(sc->ip)->i_nlink == 0) {  in xchk_inode_check_unlinked()
789 		if (!xfs_inode_on_unlinked_list(sc->ip))  in xchk_inode_check_unlinked()
790 			xchk_ino_set_corrupt(sc, sc->ip->i_ino);  in xchk_inode_check_unlinked()
792 		if (xfs_inode_on_unlinked_list(sc->ip))  in xchk_inode_check_unlinked()
793 			xchk_ino_set_corrupt(sc, sc->ip->i_ino);  in xchk_inode_check_unlinked()
806 	 * If sc->ip is NULL, that means that the setup function called  in xchk_inode()
808 	 * and a NULL inode, so flag the corruption error and return.  in xchk_inode()
810 	if (!sc->ip) {  in xchk_inode()
811 		xchk_ino_set_corrupt(sc, sc->sm->sm_ino);  in xchk_inode()
816 	xfs_inode_to_disk(sc->ip, &di, 0);  in xchk_inode()
817 	xchk_dinode(sc, &di, sc->ip->i_ino);  in xchk_inode()
818 	if (sc->sm->sm_flags & XFS_SCRUB_OFLAG_CORRUPT)  in xchk_inode()
823 	 * iflag.  We already checked the iflag against the file mode when  in xchk_inode()
826 	if (S_ISREG(VFS_I(sc->ip)->i_mode))  in xchk_inode()
827 		xchk_inode_check_reflink_iflag(sc, sc->ip->i_ino);  in xchk_inode()
831 	xchk_inode_xref(sc, sc->ip->i_ino, &di);  in xchk_inode()