xref: /linux/drivers/md/md.c (revision 7b15c24f805339a585cfe7d72f446b7e88b9bcc0)
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3    md.c : Multiple Devices driver for Linux
4      Copyright (C) 1998, 1999, 2000 Ingo Molnar
5 
6      completely rewritten, based on the MD driver code from Marc Zyngier
7 
8    Changes:
9 
10    - RAID-1/RAID-5 extensions by Miguel de Icaza, Gadi Oxman, Ingo Molnar
11    - RAID-6 extensions by H. Peter Anvin <hpa@zytor.com>
12    - boot support for linear and striped mode by Harald Hoyer <HarryH@Royal.Net>
13    - kerneld support by Boris Tobotras <boris@xtalk.msk.su>
14    - kmod support by: Cyrus Durgin
15    - RAID0 bugfixes: Mark Anthony Lisher <markal@iname.com>
16    - Devfs support by Richard Gooch <rgooch@atnf.csiro.au>
17 
18    - lots of fixes and improvements to the RAID1/RAID5 and generic
19      RAID code (such as request based resynchronization):
20 
21      Neil Brown <neilb@cse.unsw.edu.au>.
22 
23    - persistent bitmap code
24      Copyright (C) 2003-2004, Paul Clements, SteelEye Technology, Inc.
25 
26 
27    Errors, Warnings, etc.
28    Please use:
29      pr_crit() for error conditions that risk data loss
30      pr_err() for error conditions that are unexpected, like an IO error
31          or internal inconsistency
32      pr_warn() for error conditions that could have been predicated, like
33          adding a device to an array when it has incompatible metadata
34      pr_info() for every interesting, very rare events, like an array starting
35          or stopping, or resync starting or stopping
36      pr_debug() for everything else.
37 
38 */
39 
40 #include <linux/sched/mm.h>
41 #include <linux/sched/signal.h>
42 #include <linux/kthread.h>
43 #include <linux/blkdev.h>
44 #include <linux/blk-integrity.h>
45 #include <linux/badblocks.h>
46 #include <linux/sysctl.h>
47 #include <linux/seq_file.h>
48 #include <linux/fs.h>
49 #include <linux/poll.h>
50 #include <linux/ctype.h>
51 #include <linux/string.h>
52 #include <linux/hdreg.h>
53 #include <linux/proc_fs.h>
54 #include <linux/random.h>
55 #include <linux/major.h>
56 #include <linux/module.h>
57 #include <linux/reboot.h>
58 #include <linux/file.h>
59 #include <linux/compat.h>
60 #include <linux/delay.h>
61 #include <linux/raid/md_p.h>
62 #include <linux/raid/md_u.h>
63 #include <linux/raid/detect.h>
64 #include <linux/slab.h>
65 #include <linux/percpu-refcount.h>
66 #include <linux/part_stat.h>
67 
68 #include "md.h"
69 #include "md-bitmap.h"
70 #include "md-cluster.h"
71 
72 static const char *action_name[NR_SYNC_ACTIONS] = {
73 	[ACTION_RESYNC]		= "resync",
74 	[ACTION_RECOVER]	= "recover",
75 	[ACTION_CHECK]		= "check",
76 	[ACTION_REPAIR]		= "repair",
77 	[ACTION_RESHAPE]	= "reshape",
78 	[ACTION_FROZEN]		= "frozen",
79 	[ACTION_IDLE]		= "idle",
80 };
81 
82 static DEFINE_XARRAY(md_submodule);
83 
84 static const struct kobj_type md_ktype;
85 
86 static DECLARE_WAIT_QUEUE_HEAD(resync_wait);
87 
88 /*
89  * This workqueue is used for sync_work to register new sync_thread, and for
90  * del_work to remove rdev, and for event_work that is only set by dm-raid.
91  *
92  * Noted that sync_work will grab reconfig_mutex, hence never flush this
93  * workqueue whith reconfig_mutex grabbed.
94  */
95 static struct workqueue_struct *md_misc_wq;
96 
97 static int remove_and_add_spares(struct mddev *mddev,
98 				 struct md_rdev *this);
99 static void mddev_detach(struct mddev *mddev);
100 static void export_rdev(struct md_rdev *rdev);
101 static void md_wakeup_thread_directly(struct md_thread __rcu **thread);
102 
103 /*
104  * Default number of read corrections we'll attempt on an rdev
105  * before ejecting it from the array. We divide the read error
106  * count by 2 for every hour elapsed between read errors.
107  */
108 #define MD_DEFAULT_MAX_CORRECTED_READ_ERRORS 20
109 /* Default safemode delay: 200 msec */
110 #define DEFAULT_SAFEMODE_DELAY ((200 * HZ)/1000 +1)
111 /*
112  * Current RAID-1,4,5,6,10 parallel reconstruction 'guaranteed speed limit'
113  * is sysctl_speed_limit_min, 1000 KB/sec by default, so the extra system load
114  * does not show up that much. Increase it if you want to have more guaranteed
115  * speed. Note that the RAID driver will use the maximum bandwidth
116  * sysctl_speed_limit_max, 200 MB/sec by default, if the IO subsystem is idle.
117  *
118  * Background sync IO speed control:
119  *
120  * - below speed min:
121  *   no limit;
122  * - above speed min and below speed max:
123  *   a) if mddev is idle, then no limit;
124  *   b) if mddev is busy handling normal IO, then limit inflight sync IO
125  *   to sync_io_depth;
126  * - above speed max:
127  *   sync IO can't be issued;
128  *
129  * Following configurations can be changed via /proc/sys/dev/raid/ for system
130  * or /sys/block/mdX/md/ for one array.
131  */
132 static int sysctl_speed_limit_min = 1000;
133 static int sysctl_speed_limit_max = 200000;
134 static int sysctl_sync_io_depth = 32;
135 
136 static int speed_min(struct mddev *mddev)
137 {
138 	return mddev->sync_speed_min ?
139 		mddev->sync_speed_min : sysctl_speed_limit_min;
140 }
141 
142 static int speed_max(struct mddev *mddev)
143 {
144 	return mddev->sync_speed_max ?
145 		mddev->sync_speed_max : sysctl_speed_limit_max;
146 }
147 
148 static int sync_io_depth(struct mddev *mddev)
149 {
150 	return mddev->sync_io_depth ?
151 		mddev->sync_io_depth : sysctl_sync_io_depth;
152 }
153 
154 static void rdev_uninit_serial(struct md_rdev *rdev)
155 {
156 	if (!test_and_clear_bit(CollisionCheck, &rdev->flags))
157 		return;
158 
159 	kvfree(rdev->serial);
160 	rdev->serial = NULL;
161 }
162 
163 static void rdevs_uninit_serial(struct mddev *mddev)
164 {
165 	struct md_rdev *rdev;
166 
167 	rdev_for_each(rdev, mddev)
168 		rdev_uninit_serial(rdev);
169 }
170 
171 static int rdev_init_serial(struct md_rdev *rdev)
172 {
173 	/* serial_nums equals with BARRIER_BUCKETS_NR */
174 	int i, serial_nums = 1 << ((PAGE_SHIFT - ilog2(sizeof(atomic_t))));
175 	struct serial_in_rdev *serial = NULL;
176 
177 	if (test_bit(CollisionCheck, &rdev->flags))
178 		return 0;
179 
180 	serial = kvmalloc(sizeof(struct serial_in_rdev) * serial_nums,
181 			  GFP_KERNEL);
182 	if (!serial)
183 		return -ENOMEM;
184 
185 	for (i = 0; i < serial_nums; i++) {
186 		struct serial_in_rdev *serial_tmp = &serial[i];
187 
188 		spin_lock_init(&serial_tmp->serial_lock);
189 		serial_tmp->serial_rb = RB_ROOT_CACHED;
190 	}
191 
192 	rdev->serial = serial;
193 	set_bit(CollisionCheck, &rdev->flags);
194 
195 	return 0;
196 }
197 
198 static int rdevs_init_serial(struct mddev *mddev)
199 {
200 	struct md_rdev *rdev;
201 	int ret = 0;
202 
203 	rdev_for_each(rdev, mddev) {
204 		ret = rdev_init_serial(rdev);
205 		if (ret)
206 			break;
207 	}
208 
209 	/* Free all resources if pool is not existed */
210 	if (ret && !mddev->serial_info_pool)
211 		rdevs_uninit_serial(mddev);
212 
213 	return ret;
214 }
215 
216 /*
217  * rdev needs to enable serial stuffs if it meets the conditions:
218  * 1. it is multi-queue device flaged with writemostly.
219  * 2. the write-behind mode is enabled.
220  */
221 static int rdev_need_serial(struct md_rdev *rdev)
222 {
223 	return (rdev && rdev->mddev->bitmap_info.max_write_behind > 0 &&
224 		rdev->bdev->bd_disk->queue->nr_hw_queues != 1 &&
225 		test_bit(WriteMostly, &rdev->flags));
226 }
227 
228 /*
229  * Init resource for rdev(s), then create serial_info_pool if:
230  * 1. rdev is the first device which return true from rdev_enable_serial.
231  * 2. rdev is NULL, means we want to enable serialization for all rdevs.
232  */
233 void mddev_create_serial_pool(struct mddev *mddev, struct md_rdev *rdev)
234 {
235 	int ret = 0;
236 
237 	if (rdev && !rdev_need_serial(rdev) &&
238 	    !test_bit(CollisionCheck, &rdev->flags))
239 		return;
240 
241 	if (!rdev)
242 		ret = rdevs_init_serial(mddev);
243 	else
244 		ret = rdev_init_serial(rdev);
245 	if (ret)
246 		return;
247 
248 	if (mddev->serial_info_pool == NULL) {
249 		/*
250 		 * already in memalloc noio context by
251 		 * mddev_suspend()
252 		 */
253 		mddev->serial_info_pool =
254 			mempool_create_kmalloc_pool(NR_SERIAL_INFOS,
255 						sizeof(struct serial_info));
256 		if (!mddev->serial_info_pool) {
257 			rdevs_uninit_serial(mddev);
258 			pr_err("can't alloc memory pool for serialization\n");
259 		}
260 	}
261 }
262 
263 /*
264  * Free resource from rdev(s), and destroy serial_info_pool under conditions:
265  * 1. rdev is the last device flaged with CollisionCheck.
266  * 2. when bitmap is destroyed while policy is not enabled.
267  * 3. for disable policy, the pool is destroyed only when no rdev needs it.
268  */
269 void mddev_destroy_serial_pool(struct mddev *mddev, struct md_rdev *rdev)
270 {
271 	if (rdev && !test_bit(CollisionCheck, &rdev->flags))
272 		return;
273 
274 	if (mddev->serial_info_pool) {
275 		struct md_rdev *temp;
276 		int num = 0; /* used to track if other rdevs need the pool */
277 
278 		rdev_for_each(temp, mddev) {
279 			if (!rdev) {
280 				if (!test_bit(MD_SERIALIZE_POLICY,
281 					      &mddev->flags) ||
282 				    !rdev_need_serial(temp))
283 					rdev_uninit_serial(temp);
284 				else
285 					num++;
286 			} else if (temp != rdev &&
287 				   test_bit(CollisionCheck, &temp->flags))
288 				num++;
289 		}
290 
291 		if (rdev)
292 			rdev_uninit_serial(rdev);
293 
294 		if (num)
295 			pr_info("The mempool could be used by other devices\n");
296 		else {
297 			mempool_destroy(mddev->serial_info_pool);
298 			mddev->serial_info_pool = NULL;
299 		}
300 	}
301 }
302 
303 static struct ctl_table_header *raid_table_header;
304 
305 static const struct ctl_table raid_table[] = {
306 	{
307 		.procname	= "speed_limit_min",
308 		.data		= &sysctl_speed_limit_min,
309 		.maxlen		= sizeof(int),
310 		.mode		= 0644,
311 		.proc_handler	= proc_dointvec,
312 	},
313 	{
314 		.procname	= "speed_limit_max",
315 		.data		= &sysctl_speed_limit_max,
316 		.maxlen		= sizeof(int),
317 		.mode		= 0644,
318 		.proc_handler	= proc_dointvec,
319 	},
320 	{
321 		.procname	= "sync_io_depth",
322 		.data		= &sysctl_sync_io_depth,
323 		.maxlen		= sizeof(int),
324 		.mode		= 0644,
325 		.proc_handler	= proc_dointvec,
326 	},
327 };
328 
329 static int start_readonly;
330 
331 /*
332  * The original mechanism for creating an md device is to create
333  * a device node in /dev and to open it.  This causes races with device-close.
334  * The preferred method is to write to the "new_array" module parameter.
335  * This can avoid races.
336  * Setting create_on_open to false disables the original mechanism
337  * so all the races disappear.
338  */
339 static bool create_on_open = true;
340 static bool legacy_async_del_gendisk = true;
341 static bool check_new_feature = true;
342 
343 /*
344  * We have a system wide 'event count' that is incremented
345  * on any 'interesting' event, and readers of /proc/mdstat
346  * can use 'poll' or 'select' to find out when the event
347  * count increases.
348  *
349  * Events are:
350  *  start array, stop array, error, add device, remove device,
351  *  start build, activate spare
352  */
353 static DECLARE_WAIT_QUEUE_HEAD(md_event_waiters);
354 static atomic_t md_event_count;
355 void md_new_event(void)
356 {
357 	atomic_inc(&md_event_count);
358 	wake_up(&md_event_waiters);
359 }
360 EXPORT_SYMBOL_GPL(md_new_event);
361 
362 /*
363  * Enables to iterate over all existing md arrays
364  * all_mddevs_lock protects this list.
365  */
366 static LIST_HEAD(all_mddevs);
367 static DEFINE_SPINLOCK(all_mddevs_lock);
368 
369 static bool is_md_suspended(struct mddev *mddev)
370 {
371 	return percpu_ref_is_dying(&mddev->active_io);
372 }
373 /* Rather than calling directly into the personality make_request function,
374  * IO requests come here first so that we can check if the device is
375  * being suspended pending a reconfiguration.
376  * We hold a refcount over the call to ->make_request.  By the time that
377  * call has finished, the bio has been linked into some internal structure
378  * and so is visible to ->quiesce(), so we don't need the refcount any more.
379  */
380 static bool is_suspended(struct mddev *mddev, struct bio *bio)
381 {
382 	if (is_md_suspended(mddev))
383 		return true;
384 	if (bio_data_dir(bio) != WRITE)
385 		return false;
386 	if (READ_ONCE(mddev->suspend_lo) >= READ_ONCE(mddev->suspend_hi))
387 		return false;
388 	if (bio->bi_iter.bi_sector >= READ_ONCE(mddev->suspend_hi))
389 		return false;
390 	if (bio_end_sector(bio) < READ_ONCE(mddev->suspend_lo))
391 		return false;
392 	return true;
393 }
394 
395 bool md_handle_request(struct mddev *mddev, struct bio *bio)
396 {
397 check_suspended:
398 	if (unlikely(md_cloned_bio(mddev, bio))) {
399 		/*
400 		 * This bio is an MD cloned bio and already holds an
401 		 * active_io reference, so percpu_ref_get() is safe here.
402 		 */
403 		percpu_ref_get(&mddev->active_io);
404 	} else {
405 		if (is_suspended(mddev, bio)) {
406 			/* Bail out if REQ_NOWAIT is set for the bio */
407 			if (bio->bi_opf & REQ_NOWAIT) {
408 				bio_wouldblock_error(bio);
409 				return true;
410 			}
411 			wait_event(mddev->sb_wait, !is_suspended(mddev, bio));
412 		}
413 		if (!percpu_ref_tryget_live(&mddev->active_io))
414 			goto check_suspended;
415 	}
416 	if (!mddev->pers->make_request(mddev, bio)) {
417 		percpu_ref_put(&mddev->active_io);
418 		if (mddev_is_dm(mddev) && mddev->pers->prepare_suspend)
419 			return false;
420 		goto check_suspended;
421 	}
422 
423 	percpu_ref_put(&mddev->active_io);
424 	return true;
425 }
426 EXPORT_SYMBOL(md_handle_request);
427 
428 static void md_submit_bio(struct bio *bio)
429 {
430 	const int rw = bio_data_dir(bio);
431 	struct mddev *mddev = bio->bi_bdev->bd_disk->private_data;
432 
433 	if (mddev == NULL || mddev->pers == NULL) {
434 		bio_io_error(bio);
435 		return;
436 	}
437 
438 	if (unlikely(test_bit(MD_BROKEN, &mddev->flags)) && (rw == WRITE)) {
439 		bio_io_error(bio);
440 		return;
441 	}
442 
443 	bio = bio_split_to_limits(bio);
444 	if (!bio)
445 		return;
446 
447 	if (mddev->ro == MD_RDONLY && unlikely(rw == WRITE)) {
448 		if (bio_sectors(bio) != 0)
449 			bio->bi_status = BLK_STS_IOERR;
450 		bio_endio(bio);
451 		return;
452 	}
453 
454 	/* bio could be mergeable after passing to underlayer */
455 	bio->bi_opf &= ~REQ_NOMERGE;
456 
457 	md_handle_request(mddev, bio);
458 }
459 
460 /*
461  * Make sure no new requests are submitted to the device, and any requests that
462  * have been submitted are completely handled.
463  */
464 int mddev_suspend(struct mddev *mddev, bool interruptible)
465 {
466 	int err = 0;
467 
468 	/*
469 	 * hold reconfig_mutex to wait for normal io will deadlock, because
470 	 * other context can't update super_block, and normal io can rely on
471 	 * updating super_block.
472 	 */
473 	lockdep_assert_not_held(&mddev->reconfig_mutex);
474 
475 	if (interruptible)
476 		err = mutex_lock_interruptible(&mddev->suspend_mutex);
477 	else
478 		mutex_lock(&mddev->suspend_mutex);
479 	if (err)
480 		return err;
481 
482 	if (mddev->suspended) {
483 		WRITE_ONCE(mddev->suspended, mddev->suspended + 1);
484 		mutex_unlock(&mddev->suspend_mutex);
485 		return 0;
486 	}
487 
488 	percpu_ref_kill(&mddev->active_io);
489 
490 	/*
491 	 * RAID456 IO can sleep in wait_for_reshape while still holding an
492 	 * active_io reference. If reshape is already interrupted or frozen,
493 	 * wake those waiters so they can abort and drop the reference instead
494 	 * of deadlocking suspend.
495 	 */
496 	if (mddev->pers && mddev->pers->prepare_suspend &&
497 	    reshape_interrupted(mddev))
498 		mddev->pers->prepare_suspend(mddev);
499 
500 	if (interruptible)
501 		err = wait_event_interruptible(mddev->sb_wait,
502 				percpu_ref_is_zero(&mddev->active_io));
503 	else
504 		wait_event(mddev->sb_wait,
505 				percpu_ref_is_zero(&mddev->active_io));
506 	if (err) {
507 		percpu_ref_resurrect(&mddev->active_io);
508 		mutex_unlock(&mddev->suspend_mutex);
509 		return err;
510 	}
511 
512 	/*
513 	 * For raid456, io might be waiting for reshape to make progress,
514 	 * allow new reshape to start while waiting for io to be done to
515 	 * prevent deadlock.
516 	 */
517 	WRITE_ONCE(mddev->suspended, mddev->suspended + 1);
518 
519 	/* restrict memory reclaim I/O during raid array is suspend */
520 	mddev->noio_flag = memalloc_noio_save();
521 
522 	mutex_unlock(&mddev->suspend_mutex);
523 	return 0;
524 }
525 EXPORT_SYMBOL_GPL(mddev_suspend);
526 
527 static void __mddev_resume(struct mddev *mddev, bool recovery_needed)
528 {
529 	lockdep_assert_not_held(&mddev->reconfig_mutex);
530 
531 	mutex_lock(&mddev->suspend_mutex);
532 	WRITE_ONCE(mddev->suspended, mddev->suspended - 1);
533 	if (mddev->suspended) {
534 		mutex_unlock(&mddev->suspend_mutex);
535 		return;
536 	}
537 
538 	/* entred the memalloc scope from mddev_suspend() */
539 	memalloc_noio_restore(mddev->noio_flag);
540 
541 	percpu_ref_resurrect(&mddev->active_io);
542 	wake_up(&mddev->sb_wait);
543 
544 	if (recovery_needed)
545 		set_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
546 	md_wakeup_thread(mddev->thread);
547 	md_wakeup_thread(mddev->sync_thread); /* possibly kick off a reshape */
548 
549 	mutex_unlock(&mddev->suspend_mutex);
550 }
551 
552 void mddev_resume(struct mddev *mddev)
553 {
554 	return __mddev_resume(mddev, true);
555 }
556 EXPORT_SYMBOL_GPL(mddev_resume);
557 
558 /* sync bdev before setting device to readonly or stopping raid*/
559 static int mddev_set_closing_and_sync_blockdev(struct mddev *mddev, int opener_num)
560 {
561 	mutex_lock(&mddev->open_mutex);
562 	if (mddev->pers && atomic_read(&mddev->openers) > opener_num) {
563 		mutex_unlock(&mddev->open_mutex);
564 		return -EBUSY;
565 	}
566 	if (test_and_set_bit(MD_CLOSING, &mddev->flags)) {
567 		mutex_unlock(&mddev->open_mutex);
568 		return -EBUSY;
569 	}
570 	mutex_unlock(&mddev->open_mutex);
571 
572 	sync_blockdev(mddev->gendisk->part0);
573 	return 0;
574 }
575 
576 /*
577  * The only difference from bio_chain_endio() is that the current
578  * bi_status of bio does not affect the bi_status of parent.
579  */
580 static void md_end_flush(struct bio *bio)
581 {
582 	struct bio *parent = bio->bi_private;
583 
584 	/*
585 	 * If any flush io error before the power failure,
586 	 * disk data may be lost.
587 	 */
588 	if (bio->bi_status)
589 		pr_err("md: %pg flush io error %d\n", bio->bi_bdev,
590 			blk_status_to_errno(bio->bi_status));
591 
592 	bio_put(bio);
593 	bio_endio(parent);
594 }
595 
596 bool md_flush_request(struct mddev *mddev, struct bio *bio)
597 {
598 	struct md_rdev *rdev;
599 	struct bio *new;
600 
601 	/*
602 	 * md_flush_reqeust() should be called under md_handle_request() and
603 	 * 'active_io' is already grabbed. Hence it's safe to get rdev directly
604 	 * without rcu protection.
605 	 */
606 	WARN_ON(percpu_ref_is_zero(&mddev->active_io));
607 
608 	rdev_for_each(rdev, mddev) {
609 		if (rdev->raid_disk < 0 || test_bit(Faulty, &rdev->flags))
610 			continue;
611 
612 		new = bio_alloc_bioset(rdev->bdev, 0,
613 				       REQ_OP_WRITE | REQ_PREFLUSH, GFP_NOIO,
614 				       &mddev->bio_set);
615 		new->bi_private = bio;
616 		new->bi_end_io = md_end_flush;
617 		bio_inc_remaining(bio);
618 		submit_bio(new);
619 	}
620 
621 	if (bio_sectors(bio) == 0) {
622 		bio_endio(bio);
623 		return true;
624 	}
625 
626 	bio->bi_opf &= ~REQ_PREFLUSH;
627 	return false;
628 }
629 EXPORT_SYMBOL(md_flush_request);
630 
631 static inline struct mddev *mddev_get(struct mddev *mddev)
632 {
633 	lockdep_assert_held(&all_mddevs_lock);
634 
635 	if (test_bit(MD_DELETED, &mddev->flags))
636 		return NULL;
637 	atomic_inc(&mddev->active);
638 	return mddev;
639 }
640 
641 static void mddev_delayed_delete(struct work_struct *ws);
642 
643 static void __mddev_put(struct mddev *mddev)
644 {
645 	if (mddev->raid_disks || !list_empty(&mddev->disks) ||
646 	    mddev->ctime || mddev->hold_active)
647 		return;
648 
649 	/*
650 	 * If array is freed by stopping array, MD_DELETED is set by
651 	 * do_md_stop(), MD_DELETED is still set here in case mddev is freed
652 	 * directly by closing a mddev that is created by create_on_open.
653 	 */
654 	set_bit(MD_DELETED, &mddev->flags);
655 	/*
656 	 * Call queue_work inside the spinlock so that flush_workqueue() after
657 	 * mddev_find will succeed in waiting for the work to be done.
658 	 */
659 	queue_work(md_misc_wq, &mddev->del_work);
660 }
661 
662 static void mddev_put_locked(struct mddev *mddev)
663 {
664 	if (atomic_dec_and_test(&mddev->active))
665 		__mddev_put(mddev);
666 }
667 
668 void mddev_put(struct mddev *mddev)
669 {
670 	if (!atomic_dec_and_lock(&mddev->active, &all_mddevs_lock))
671 		return;
672 
673 	__mddev_put(mddev);
674 	spin_unlock(&all_mddevs_lock);
675 }
676 
677 static void md_safemode_timeout(struct timer_list *t);
678 static void md_start_sync(struct work_struct *ws);
679 
680 static void active_io_release(struct percpu_ref *ref)
681 {
682 	struct mddev *mddev = container_of(ref, struct mddev, active_io);
683 
684 	wake_up(&mddev->sb_wait);
685 }
686 
687 static void no_op(struct percpu_ref *r) {}
688 
689 static void md_bitmap_sysfs_add(struct mddev *mddev)
690 {
691 	if (sysfs_update_groups(&mddev->kobj, mddev->bitmap_ops->groups))
692 		pr_warn("md: cannot register extra bitmap attributes for %s\n",
693 			mdname(mddev));
694 	else
695 		/*
696 		 * Inform user with KOBJ_CHANGE about new bitmap
697 		 * attributes.
698 		 */
699 		kobject_uevent(&mddev->kobj, KOBJ_CHANGE);
700 }
701 
702 static void md_bitmap_sysfs_del(struct mddev *mddev)
703 {
704 	int nr_groups = 0;
705 
706 	for (nr_groups = 0; mddev->bitmap_ops->groups[nr_groups]; nr_groups++)
707 		;
708 
709 	while (--nr_groups >= 1)
710 		sysfs_unmerge_group(&mddev->kobj,
711 				    mddev->bitmap_ops->groups[nr_groups]);
712 	sysfs_remove_group(&mddev->kobj, mddev->bitmap_ops->groups[0]);
713 }
714 
715 bool mddev_set_bitmap_ops_nosysfs(struct mddev *mddev)
716 {
717 	struct md_submodule_head *head;
718 
719 	if (mddev->bitmap_ops &&
720 	    mddev->bitmap_ops->head.id == mddev->bitmap_id)
721 		return true;
722 
723 	xa_lock(&md_submodule);
724 	head = xa_load(&md_submodule, mddev->bitmap_id);
725 
726 	if (!head) {
727 		pr_warn("md: can't find bitmap id %d\n", mddev->bitmap_id);
728 		goto err;
729 	}
730 
731 	if (head->type != MD_BITMAP) {
732 		pr_warn("md: invalid bitmap id %d\n", mddev->bitmap_id);
733 		goto err;
734 	}
735 
736 	mddev->bitmap_ops = (void *)head;
737 	xa_unlock(&md_submodule);
738 	return true;
739 
740 err:
741 	xa_unlock(&md_submodule);
742 	return false;
743 }
744 
745 int mddev_init(struct mddev *mddev)
746 {
747 	int err = 0;
748 
749 	if (!IS_ENABLED(CONFIG_MD_BITMAP))
750 		mddev->bitmap_id = ID_BITMAP_NONE;
751 	else
752 		mddev->bitmap_id = ID_BITMAP;
753 
754 	if (percpu_ref_init(&mddev->active_io, active_io_release,
755 			    PERCPU_REF_ALLOW_REINIT, GFP_KERNEL))
756 		return -ENOMEM;
757 
758 	if (percpu_ref_init(&mddev->writes_pending, no_op,
759 			    PERCPU_REF_ALLOW_REINIT, GFP_KERNEL)) {
760 		err = -ENOMEM;
761 		goto exit_acitve_io;
762 	}
763 
764 	err = bioset_init(&mddev->bio_set, BIO_POOL_SIZE, 0, BIOSET_NEED_BVECS);
765 	if (err)
766 		goto exit_writes_pending;
767 
768 	err = bioset_init(&mddev->sync_set, BIO_POOL_SIZE, 0, BIOSET_NEED_BVECS);
769 	if (err)
770 		goto exit_bio_set;
771 
772 	err = bioset_init(&mddev->io_clone_set, BIO_POOL_SIZE,
773 			  offsetof(struct md_io_clone, bio_clone), 0);
774 	if (err)
775 		goto exit_sync_set;
776 
777 	/* We want to start with the refcount at zero */
778 	percpu_ref_put(&mddev->writes_pending);
779 
780 	mutex_init(&mddev->open_mutex);
781 	mutex_init(&mddev->reconfig_mutex);
782 	mutex_init(&mddev->suspend_mutex);
783 	mutex_init(&mddev->bitmap_info.mutex);
784 	INIT_LIST_HEAD(&mddev->disks);
785 	INIT_LIST_HEAD(&mddev->all_mddevs);
786 	INIT_LIST_HEAD(&mddev->deleting);
787 	timer_setup(&mddev->safemode_timer, md_safemode_timeout, 0);
788 	atomic_set(&mddev->active, 1);
789 	atomic_set(&mddev->openers, 0);
790 	atomic_set(&mddev->sync_seq, 0);
791 	spin_lock_init(&mddev->lock);
792 	init_waitqueue_head(&mddev->sb_wait);
793 	init_waitqueue_head(&mddev->recovery_wait);
794 	mddev->reshape_position = MaxSector;
795 	mddev->reshape_backwards = 0;
796 	mddev->last_sync_action = ACTION_IDLE;
797 	mddev->resync_min = 0;
798 	mddev->resync_max = MaxSector;
799 	mddev->level = LEVEL_NONE;
800 
801 	INIT_WORK(&mddev->sync_work, md_start_sync);
802 	INIT_WORK(&mddev->del_work, mddev_delayed_delete);
803 
804 	return 0;
805 
806 exit_sync_set:
807 	bioset_exit(&mddev->sync_set);
808 exit_bio_set:
809 	bioset_exit(&mddev->bio_set);
810 exit_writes_pending:
811 	percpu_ref_exit(&mddev->writes_pending);
812 exit_acitve_io:
813 	percpu_ref_exit(&mddev->active_io);
814 	return err;
815 }
816 EXPORT_SYMBOL_GPL(mddev_init);
817 
818 void mddev_destroy(struct mddev *mddev)
819 {
820 	bioset_exit(&mddev->bio_set);
821 	bioset_exit(&mddev->sync_set);
822 	bioset_exit(&mddev->io_clone_set);
823 	percpu_ref_exit(&mddev->active_io);
824 	percpu_ref_exit(&mddev->writes_pending);
825 }
826 EXPORT_SYMBOL_GPL(mddev_destroy);
827 
828 static struct mddev *mddev_find_locked(dev_t unit)
829 {
830 	struct mddev *mddev;
831 
832 	list_for_each_entry(mddev, &all_mddevs, all_mddevs)
833 		if (mddev->unit == unit)
834 			return mddev;
835 
836 	return NULL;
837 }
838 
839 /* find an unused unit number */
840 static dev_t mddev_alloc_unit(void)
841 {
842 	static int next_minor = 512;
843 	int start = next_minor;
844 	bool is_free = 0;
845 	dev_t dev = 0;
846 
847 	while (!is_free) {
848 		dev = MKDEV(MD_MAJOR, next_minor);
849 		next_minor++;
850 		if (next_minor > MINORMASK)
851 			next_minor = 0;
852 		if (next_minor == start)
853 			return 0;		/* Oh dear, all in use. */
854 		is_free = !mddev_find_locked(dev);
855 	}
856 
857 	return dev;
858 }
859 
860 static struct mddev *mddev_alloc(dev_t unit)
861 {
862 	struct mddev *new;
863 	int error;
864 
865 	if (unit && MAJOR(unit) != MD_MAJOR)
866 		unit &= ~((1 << MdpMinorShift) - 1);
867 
868 	new = kzalloc_obj(*new);
869 	if (!new)
870 		return ERR_PTR(-ENOMEM);
871 
872 	error = mddev_init(new);
873 	if (error)
874 		goto out_free_new;
875 
876 	spin_lock(&all_mddevs_lock);
877 	if (unit) {
878 		error = -EEXIST;
879 		if (mddev_find_locked(unit))
880 			goto out_destroy_new;
881 		new->unit = unit;
882 		if (MAJOR(unit) == MD_MAJOR)
883 			new->md_minor = MINOR(unit);
884 		else
885 			new->md_minor = MINOR(unit) >> MdpMinorShift;
886 		new->hold_active = UNTIL_IOCTL;
887 	} else {
888 		error = -ENODEV;
889 		new->unit = mddev_alloc_unit();
890 		if (!new->unit)
891 			goto out_destroy_new;
892 		new->md_minor = MINOR(new->unit);
893 		new->hold_active = UNTIL_STOP;
894 	}
895 
896 	list_add(&new->all_mddevs, &all_mddevs);
897 	spin_unlock(&all_mddevs_lock);
898 	return new;
899 
900 out_destroy_new:
901 	spin_unlock(&all_mddevs_lock);
902 	mddev_destroy(new);
903 out_free_new:
904 	kfree(new);
905 	return ERR_PTR(error);
906 }
907 
908 static void mddev_free(struct mddev *mddev)
909 {
910 	spin_lock(&all_mddevs_lock);
911 	list_del(&mddev->all_mddevs);
912 	spin_unlock(&all_mddevs_lock);
913 
914 	mddev_destroy(mddev);
915 	kfree(mddev);
916 }
917 
918 static const struct attribute_group md_redundancy_group;
919 
920 void mddev_unlock(struct mddev *mddev)
921 {
922 	struct md_rdev *rdev;
923 	struct md_rdev *tmp;
924 	LIST_HEAD(delete);
925 
926 	if (!list_empty(&mddev->deleting))
927 		list_splice_init(&mddev->deleting, &delete);
928 
929 	if (mddev->to_remove) {
930 		/* These cannot be removed under reconfig_mutex as
931 		 * an access to the files will try to take reconfig_mutex
932 		 * while holding the file unremovable, which leads to
933 		 * a deadlock.
934 		 * So hold set sysfs_active while the remove in happeing,
935 		 * and anything else which might set ->to_remove or my
936 		 * otherwise change the sysfs namespace will fail with
937 		 * -EBUSY if sysfs_active is still set.
938 		 * We set sysfs_active under reconfig_mutex and elsewhere
939 		 * test it under the same mutex to ensure its correct value
940 		 * is seen.
941 		 */
942 		const struct attribute_group *to_remove = mddev->to_remove;
943 		mddev->to_remove = NULL;
944 		mddev->sysfs_active = 1;
945 		mutex_unlock(&mddev->reconfig_mutex);
946 
947 		if (mddev->kobj.sd) {
948 			if (to_remove != &md_redundancy_group)
949 				sysfs_remove_group(&mddev->kobj, to_remove);
950 			if (mddev->pers == NULL ||
951 			    mddev->pers->sync_request == NULL) {
952 				sysfs_remove_group(&mddev->kobj, &md_redundancy_group);
953 				if (mddev->sysfs_action)
954 					sysfs_put(mddev->sysfs_action);
955 				if (mddev->sysfs_completed)
956 					sysfs_put(mddev->sysfs_completed);
957 				if (mddev->sysfs_degraded)
958 					sysfs_put(mddev->sysfs_degraded);
959 				mddev->sysfs_action = NULL;
960 				mddev->sysfs_completed = NULL;
961 				mddev->sysfs_degraded = NULL;
962 			}
963 		}
964 		mddev->sysfs_active = 0;
965 	} else
966 		mutex_unlock(&mddev->reconfig_mutex);
967 
968 	md_wakeup_thread(mddev->thread);
969 	wake_up(&mddev->sb_wait);
970 
971 	list_for_each_entry_safe(rdev, tmp, &delete, same_set) {
972 		list_del_init(&rdev->same_set);
973 		kobject_del(&rdev->kobj);
974 		export_rdev(rdev);
975 	}
976 
977 	if (!legacy_async_del_gendisk) {
978 		/*
979 		 * Call del_gendisk after release reconfig_mutex to avoid
980 		 * deadlock (e.g. call del_gendisk under the lock and an
981 		 * access to sysfs files waits the lock)
982 		 * And MD_DELETED is only used for md raid which is set in
983 		 * do_md_stop. dm raid only uses md_stop to stop. So dm raid
984 		 * doesn't need to check MD_DELETED when getting reconfig lock
985 		 */
986 		if (test_bit(MD_DELETED, &mddev->flags) &&
987 		    !test_and_set_bit(MD_DO_DELETE, &mddev->flags)) {
988 			kobject_del(&mddev->kobj);
989 			del_gendisk(mddev->gendisk);
990 		}
991 	}
992 }
993 EXPORT_SYMBOL_GPL(mddev_unlock);
994 
995 struct md_rdev *md_find_rdev_nr_rcu(struct mddev *mddev, int nr)
996 {
997 	struct md_rdev *rdev;
998 
999 	rdev_for_each_rcu(rdev, mddev)
1000 		if (rdev->desc_nr == nr)
1001 			return rdev;
1002 
1003 	return NULL;
1004 }
1005 EXPORT_SYMBOL_GPL(md_find_rdev_nr_rcu);
1006 
1007 static struct md_rdev *find_rdev(struct mddev *mddev, dev_t dev)
1008 {
1009 	struct md_rdev *rdev;
1010 
1011 	rdev_for_each(rdev, mddev)
1012 		if (rdev->bdev->bd_dev == dev)
1013 			return rdev;
1014 
1015 	return NULL;
1016 }
1017 
1018 struct md_rdev *md_find_rdev_rcu(struct mddev *mddev, dev_t dev)
1019 {
1020 	struct md_rdev *rdev;
1021 
1022 	rdev_for_each_rcu(rdev, mddev)
1023 		if (rdev->bdev->bd_dev == dev)
1024 			return rdev;
1025 
1026 	return NULL;
1027 }
1028 EXPORT_SYMBOL_GPL(md_find_rdev_rcu);
1029 
1030 static struct md_personality *get_pers(int level, char *clevel)
1031 {
1032 	struct md_personality *ret = NULL;
1033 	struct md_submodule_head *head;
1034 	unsigned long i;
1035 
1036 	xa_lock(&md_submodule);
1037 	xa_for_each(&md_submodule, i, head) {
1038 		if (head->type != MD_PERSONALITY)
1039 			continue;
1040 		if ((level != LEVEL_NONE && head->id == level) ||
1041 		    !strcmp(head->name, clevel)) {
1042 			if (try_module_get(head->owner))
1043 				ret = (void *)head;
1044 			break;
1045 		}
1046 	}
1047 	xa_unlock(&md_submodule);
1048 
1049 	if (!ret) {
1050 		if (level != LEVEL_NONE)
1051 			pr_warn("md: personality for level %d is not loaded!\n",
1052 				level);
1053 		else
1054 			pr_warn("md: personality for level %s is not loaded!\n",
1055 				clevel);
1056 	}
1057 
1058 	return ret;
1059 }
1060 
1061 static void put_pers(struct md_personality *pers)
1062 {
1063 	module_put(pers->head.owner);
1064 }
1065 
1066 /* return the offset of the super block in 512byte sectors */
1067 static inline sector_t calc_dev_sboffset(struct md_rdev *rdev)
1068 {
1069 	return MD_NEW_SIZE_SECTORS(bdev_nr_sectors(rdev->bdev));
1070 }
1071 
1072 static int alloc_disk_sb(struct md_rdev *rdev)
1073 {
1074 	rdev->sb_page = alloc_page(GFP_KERNEL);
1075 	if (!rdev->sb_page)
1076 		return -ENOMEM;
1077 	return 0;
1078 }
1079 
1080 void md_rdev_clear(struct md_rdev *rdev)
1081 {
1082 	if (rdev->sb_page) {
1083 		put_page(rdev->sb_page);
1084 		rdev->sb_loaded = 0;
1085 		rdev->sb_page = NULL;
1086 		rdev->sb_start = 0;
1087 		rdev->sectors = 0;
1088 	}
1089 	if (rdev->bb_page) {
1090 		put_page(rdev->bb_page);
1091 		rdev->bb_page = NULL;
1092 	}
1093 	badblocks_exit(&rdev->badblocks);
1094 }
1095 EXPORT_SYMBOL_GPL(md_rdev_clear);
1096 
1097 static void super_written(struct bio *bio)
1098 {
1099 	struct md_rdev *rdev = bio->bi_private;
1100 	struct mddev *mddev = rdev->mddev;
1101 
1102 	if (bio->bi_status) {
1103 		pr_err("md: %s gets error=%d\n", __func__,
1104 		       blk_status_to_errno(bio->bi_status));
1105 		md_error(mddev, rdev);
1106 		if (!test_bit(Faulty, &rdev->flags)
1107 		    && (bio->bi_opf & MD_FAILFAST)) {
1108 			set_bit(MD_SB_NEED_REWRITE, &mddev->sb_flags);
1109 			set_bit(LastDev, &rdev->flags);
1110 		}
1111 	} else
1112 		clear_bit(LastDev, &rdev->flags);
1113 
1114 	bio_put(bio);
1115 
1116 	rdev_dec_pending(rdev, mddev);
1117 
1118 	if (atomic_dec_and_test(&mddev->pending_writes))
1119 		wake_up(&mddev->sb_wait);
1120 }
1121 
1122 /**
1123  * md_write_metadata - write metadata to underlying disk, including
1124  * array superblock, badblocks, bitmap superblock and bitmap bits.
1125  * @mddev:	the array to write
1126  * @rdev:	the underlying disk to write
1127  * @sector:	the offset to @rdev
1128  * @size:	the length of the metadata
1129  * @page:	the metadata
1130  * @offset:	the offset to @page
1131  *
1132  * Write @size bytes of @page start from @offset, to @sector of @rdev, Increment
1133  * mddev->pending_writes before returning, and decrement it on completion,
1134  * waking up sb_wait. Caller must call md_super_wait() after issuing io to all
1135  * rdev. If an error occurred, md_error() will be called, and the @rdev will be
1136  * kicked out from @mddev.
1137  */
1138 void md_write_metadata(struct mddev *mddev, struct md_rdev *rdev,
1139 		       sector_t sector, int size, struct page *page,
1140 		       unsigned int offset)
1141 {
1142 	struct bio *bio;
1143 
1144 	if (!page)
1145 		return;
1146 
1147 	if (test_bit(Faulty, &rdev->flags))
1148 		return;
1149 
1150 	bio = bio_alloc_bioset(rdev->meta_bdev ? rdev->meta_bdev : rdev->bdev,
1151 			      1,
1152 			      REQ_OP_WRITE | REQ_SYNC | REQ_IDLE | REQ_META
1153 				  | REQ_PREFLUSH | REQ_FUA,
1154 			      GFP_NOIO, &mddev->sync_set);
1155 
1156 	atomic_inc(&rdev->nr_pending);
1157 
1158 	bio->bi_iter.bi_sector = sector;
1159 	__bio_add_page(bio, page, size, offset);
1160 	bio->bi_private = rdev;
1161 	bio->bi_end_io = super_written;
1162 
1163 	if (test_bit(MD_FAILFAST_SUPPORTED, &mddev->flags) &&
1164 	    test_bit(FailFast, &rdev->flags) &&
1165 	    !test_bit(LastDev, &rdev->flags))
1166 		bio->bi_opf |= MD_FAILFAST;
1167 
1168 	atomic_inc(&mddev->pending_writes);
1169 	submit_bio(bio);
1170 }
1171 
1172 int md_super_wait(struct mddev *mddev)
1173 {
1174 	/* wait for all superblock writes that were scheduled to complete */
1175 	wait_event(mddev->sb_wait, atomic_read(&mddev->pending_writes)==0);
1176 	if (test_and_clear_bit(MD_SB_NEED_REWRITE, &mddev->sb_flags))
1177 		return -EAGAIN;
1178 	return 0;
1179 }
1180 
1181 int sync_page_io(struct md_rdev *rdev, sector_t sector, int size,
1182 		 struct page *page, blk_opf_t opf, bool metadata_op)
1183 {
1184 	struct bio bio;
1185 	struct bio_vec bvec;
1186 
1187 	if (metadata_op && rdev->meta_bdev)
1188 		bio_init(&bio, rdev->meta_bdev, &bvec, 1, opf);
1189 	else
1190 		bio_init(&bio, rdev->bdev, &bvec, 1, opf);
1191 
1192 	if (metadata_op)
1193 		bio.bi_iter.bi_sector = sector + rdev->sb_start;
1194 	else if (rdev->mddev->reshape_position != MaxSector &&
1195 		 (rdev->mddev->reshape_backwards ==
1196 		  (sector >= rdev->mddev->reshape_position)))
1197 		bio.bi_iter.bi_sector = sector + rdev->new_data_offset;
1198 	else
1199 		bio.bi_iter.bi_sector = sector + rdev->data_offset;
1200 	__bio_add_page(&bio, page, size, 0);
1201 
1202 	submit_bio_wait(&bio);
1203 
1204 	return !bio.bi_status;
1205 }
1206 EXPORT_SYMBOL_GPL(sync_page_io);
1207 
1208 static int read_disk_sb(struct md_rdev *rdev, int size)
1209 {
1210 	if (rdev->sb_loaded)
1211 		return 0;
1212 
1213 	if (!sync_page_io(rdev, 0, size, rdev->sb_page, REQ_OP_READ, true))
1214 		goto fail;
1215 	rdev->sb_loaded = 1;
1216 	return 0;
1217 
1218 fail:
1219 	pr_err("md: disabled device %pg, could not read superblock.\n",
1220 	       rdev->bdev);
1221 	return -EINVAL;
1222 }
1223 
1224 static int md_uuid_equal(mdp_super_t *sb1, mdp_super_t *sb2)
1225 {
1226 	return	sb1->set_uuid0 == sb2->set_uuid0 &&
1227 		sb1->set_uuid1 == sb2->set_uuid1 &&
1228 		sb1->set_uuid2 == sb2->set_uuid2 &&
1229 		sb1->set_uuid3 == sb2->set_uuid3;
1230 }
1231 
1232 static int md_sb_equal(mdp_super_t *sb1, mdp_super_t *sb2)
1233 {
1234 	int ret;
1235 	mdp_super_t *tmp1, *tmp2;
1236 
1237 	tmp1 = kmalloc_obj(*tmp1);
1238 	tmp2 = kmalloc_obj(*tmp2);
1239 
1240 	if (!tmp1 || !tmp2) {
1241 		ret = 0;
1242 		goto abort;
1243 	}
1244 
1245 	*tmp1 = *sb1;
1246 	*tmp2 = *sb2;
1247 
1248 	/*
1249 	 * nr_disks is not constant
1250 	 */
1251 	tmp1->nr_disks = 0;
1252 	tmp2->nr_disks = 0;
1253 
1254 	ret = (memcmp(tmp1, tmp2, MD_SB_GENERIC_CONSTANT_WORDS * 4) == 0);
1255 abort:
1256 	kfree(tmp1);
1257 	kfree(tmp2);
1258 	return ret;
1259 }
1260 
1261 static u32 md_csum_fold(u32 csum)
1262 {
1263 	csum = (csum & 0xffff) + (csum >> 16);
1264 	return (csum & 0xffff) + (csum >> 16);
1265 }
1266 
1267 static unsigned int calc_sb_csum(mdp_super_t *sb)
1268 {
1269 	u64 newcsum = 0;
1270 	u32 *sb32 = (u32*)sb;
1271 	int i;
1272 	unsigned int disk_csum, csum;
1273 
1274 	disk_csum = sb->sb_csum;
1275 	sb->sb_csum = 0;
1276 
1277 	for (i = 0; i < MD_SB_BYTES/4 ; i++)
1278 		newcsum += sb32[i];
1279 	csum = (newcsum & 0xffffffff) + (newcsum>>32);
1280 
1281 #ifdef CONFIG_ALPHA
1282 	/* This used to use csum_partial, which was wrong for several
1283 	 * reasons including that different results are returned on
1284 	 * different architectures.  It isn't critical that we get exactly
1285 	 * the same return value as before (we always csum_fold before
1286 	 * testing, and that removes any differences).  However as we
1287 	 * know that csum_partial always returned a 16bit value on
1288 	 * alphas, do a fold to maximise conformity to previous behaviour.
1289 	 */
1290 	sb->sb_csum = md_csum_fold(disk_csum);
1291 #else
1292 	sb->sb_csum = disk_csum;
1293 #endif
1294 	return csum;
1295 }
1296 
1297 /*
1298  * Handle superblock details.
1299  * We want to be able to handle multiple superblock formats
1300  * so we have a common interface to them all, and an array of
1301  * different handlers.
1302  * We rely on user-space to write the initial superblock, and support
1303  * reading and updating of superblocks.
1304  * Interface methods are:
1305  *   int load_super(struct md_rdev *dev, struct md_rdev *refdev, int minor_version)
1306  *      loads and validates a superblock on dev.
1307  *      if refdev != NULL, compare superblocks on both devices
1308  *    Return:
1309  *      0 - dev has a superblock that is compatible with refdev
1310  *      1 - dev has a superblock that is compatible and newer than refdev
1311  *          so dev should be used as the refdev in future
1312  *     -EINVAL superblock incompatible or invalid
1313  *     -othererror e.g. -EIO
1314  *
1315  *   int validate_super(struct mddev *mddev, struct md_rdev *dev)
1316  *      Verify that dev is acceptable into mddev.
1317  *       The first time, mddev->raid_disks will be 0, and data from
1318  *       dev should be merged in.  Subsequent calls check that dev
1319  *       is new enough.  Return 0 or -EINVAL
1320  *
1321  *   void sync_super(struct mddev *mddev, struct md_rdev *dev)
1322  *     Update the superblock for rdev with data in mddev
1323  *     This does not write to disc.
1324  *
1325  */
1326 
1327 struct super_type  {
1328 	char		    *name;
1329 	struct module	    *owner;
1330 	int		    (*load_super)(struct md_rdev *rdev,
1331 					  struct md_rdev *refdev,
1332 					  int minor_version);
1333 	int		    (*validate_super)(struct mddev *mddev,
1334 					      struct md_rdev *freshest,
1335 					      struct md_rdev *rdev);
1336 	void		    (*sync_super)(struct mddev *mddev,
1337 					  struct md_rdev *rdev);
1338 	unsigned long long  (*rdev_size_change)(struct md_rdev *rdev,
1339 						sector_t num_sectors);
1340 	int		    (*allow_new_offset)(struct md_rdev *rdev,
1341 						unsigned long long new_offset);
1342 };
1343 
1344 /*
1345  * Check that the given mddev has no bitmap.
1346  *
1347  * This function is called from the run method of all personalities that do not
1348  * support bitmaps. It prints an error message and returns non-zero if mddev
1349  * has a bitmap. Otherwise, it returns 0.
1350  *
1351  */
1352 int md_check_no_bitmap(struct mddev *mddev)
1353 {
1354 	if (!mddev->bitmap_info.file && !mddev->bitmap_info.offset)
1355 		return 0;
1356 	pr_warn("%s: bitmaps are not supported for %s\n",
1357 		mdname(mddev), mddev->pers->head.name);
1358 	return 1;
1359 }
1360 EXPORT_SYMBOL(md_check_no_bitmap);
1361 
1362 /*
1363  * load_super for 0.90.0
1364  */
1365 static int super_90_load(struct md_rdev *rdev, struct md_rdev *refdev, int minor_version)
1366 {
1367 	mdp_super_t *sb;
1368 	int ret;
1369 	bool spare_disk = true;
1370 
1371 	/*
1372 	 * Calculate the position of the superblock (512byte sectors),
1373 	 * it's at the end of the disk.
1374 	 *
1375 	 * It also happens to be a multiple of 4Kb.
1376 	 */
1377 	rdev->sb_start = calc_dev_sboffset(rdev);
1378 
1379 	ret = read_disk_sb(rdev, MD_SB_BYTES);
1380 	if (ret)
1381 		return ret;
1382 
1383 	ret = -EINVAL;
1384 
1385 	sb = page_address(rdev->sb_page);
1386 
1387 	if (sb->md_magic != MD_SB_MAGIC) {
1388 		pr_warn("md: invalid raid superblock magic on %pg\n",
1389 			rdev->bdev);
1390 		goto abort;
1391 	}
1392 
1393 	if (sb->major_version != 0 ||
1394 	    sb->minor_version < 90 ||
1395 	    sb->minor_version > 91) {
1396 		pr_warn("Bad version number %d.%d on %pg\n",
1397 			sb->major_version, sb->minor_version, rdev->bdev);
1398 		goto abort;
1399 	}
1400 
1401 	if (sb->raid_disks <= 0)
1402 		goto abort;
1403 
1404 	if (md_csum_fold(calc_sb_csum(sb)) != md_csum_fold(sb->sb_csum)) {
1405 		pr_warn("md: invalid superblock checksum on %pg\n", rdev->bdev);
1406 		goto abort;
1407 	}
1408 
1409 	rdev->preferred_minor = sb->md_minor;
1410 	rdev->data_offset = 0;
1411 	rdev->new_data_offset = 0;
1412 	rdev->sb_size = MD_SB_BYTES;
1413 	rdev->badblocks.shift = -1;
1414 
1415 	rdev->desc_nr = sb->this_disk.number;
1416 
1417 	/* not spare disk */
1418 	if (rdev->desc_nr >= 0 && rdev->desc_nr < MD_SB_DISKS &&
1419 	    sb->disks[rdev->desc_nr].state & ((1<<MD_DISK_SYNC) | (1 << MD_DISK_ACTIVE)))
1420 		spare_disk = false;
1421 
1422 	if (!refdev) {
1423 		if (!spare_disk)
1424 			ret = 1;
1425 		else
1426 			ret = 0;
1427 	} else {
1428 		__u64 ev1, ev2;
1429 		mdp_super_t *refsb = page_address(refdev->sb_page);
1430 		if (!md_uuid_equal(refsb, sb)) {
1431 			pr_warn("md: %pg has different UUID to %pg\n",
1432 				rdev->bdev, refdev->bdev);
1433 			goto abort;
1434 		}
1435 		if (!md_sb_equal(refsb, sb)) {
1436 			pr_warn("md: %pg has same UUID but different superblock to %pg\n",
1437 				rdev->bdev, refdev->bdev);
1438 			goto abort;
1439 		}
1440 		ev1 = md_event(sb);
1441 		ev2 = md_event(refsb);
1442 
1443 		if (!spare_disk && ev1 > ev2)
1444 			ret = 1;
1445 		else
1446 			ret = 0;
1447 	}
1448 	rdev->sectors = rdev->sb_start;
1449 	/* Limit to 4TB as metadata cannot record more than that.
1450 	 * (not needed for Linear and RAID0 as metadata doesn't
1451 	 * record this size)
1452 	 */
1453 	if ((u64)rdev->sectors >= (2ULL << 32) && sb->level >= 1)
1454 		rdev->sectors = (sector_t)(2ULL << 32) - 2;
1455 
1456 	if (rdev->sectors < ((sector_t)sb->size) * 2 && sb->level >= 1)
1457 		/* "this cannot possibly happen" ... */
1458 		ret = -EINVAL;
1459 
1460  abort:
1461 	return ret;
1462 }
1463 
1464 static u64 md_bitmap_events_cleared(struct mddev *mddev)
1465 {
1466 	struct md_bitmap_stats stats;
1467 	int err;
1468 
1469 	if (!md_bitmap_enabled(mddev, false))
1470 		return 0;
1471 
1472 	err = mddev->bitmap_ops->get_stats(mddev->bitmap, &stats);
1473 	if (err)
1474 		return 0;
1475 
1476 	return stats.events_cleared;
1477 }
1478 
1479 /*
1480  * validate_super for 0.90.0
1481  * note: we are not using "freshest" for 0.9 superblock
1482  */
1483 static int super_90_validate(struct mddev *mddev, struct md_rdev *freshest, struct md_rdev *rdev)
1484 {
1485 	mdp_disk_t *desc;
1486 	mdp_super_t *sb = page_address(rdev->sb_page);
1487 	__u64 ev1 = md_event(sb);
1488 
1489 	rdev->raid_disk = -1;
1490 	clear_bit(Faulty, &rdev->flags);
1491 	clear_bit(In_sync, &rdev->flags);
1492 	clear_bit(Bitmap_sync, &rdev->flags);
1493 	clear_bit(WriteMostly, &rdev->flags);
1494 
1495 	if (mddev->raid_disks == 0) {
1496 		mddev->major_version = 0;
1497 		mddev->minor_version = sb->minor_version;
1498 		mddev->patch_version = sb->patch_version;
1499 		mddev->external = 0;
1500 		mddev->chunk_sectors = sb->chunk_size >> 9;
1501 		mddev->ctime = sb->ctime;
1502 		mddev->utime = sb->utime;
1503 		mddev->level = sb->level;
1504 		mddev->clevel[0] = 0;
1505 		mddev->layout = sb->layout;
1506 		mddev->raid_disks = sb->raid_disks;
1507 		mddev->dev_sectors = ((sector_t)sb->size) * 2;
1508 		mddev->events = ev1;
1509 		mddev->bitmap_info.offset = 0;
1510 		mddev->bitmap_info.space = 0;
1511 		/* bitmap can use 60 K after the 4K superblocks */
1512 		mddev->bitmap_info.default_offset = MD_SB_BYTES >> 9;
1513 		mddev->bitmap_info.default_space = 64*2 - (MD_SB_BYTES >> 9);
1514 		mddev->reshape_backwards = 0;
1515 
1516 		if (mddev->minor_version >= 91) {
1517 			mddev->reshape_position = sb->reshape_position;
1518 			mddev->delta_disks = sb->delta_disks;
1519 			mddev->new_level = sb->new_level;
1520 			mddev->new_layout = sb->new_layout;
1521 			mddev->new_chunk_sectors = sb->new_chunk >> 9;
1522 			if (mddev->delta_disks < 0)
1523 				mddev->reshape_backwards = 1;
1524 		} else {
1525 			mddev->reshape_position = MaxSector;
1526 			mddev->delta_disks = 0;
1527 			mddev->new_level = mddev->level;
1528 			mddev->new_layout = mddev->layout;
1529 			mddev->new_chunk_sectors = mddev->chunk_sectors;
1530 		}
1531 		if (mddev->level == 0)
1532 			mddev->layout = -1;
1533 
1534 		if (sb->state & (1<<MD_SB_CLEAN))
1535 			mddev->resync_offset = MaxSector;
1536 		else {
1537 			if (sb->events_hi == sb->cp_events_hi &&
1538 				sb->events_lo == sb->cp_events_lo) {
1539 				mddev->resync_offset = sb->recovery_cp;
1540 			} else
1541 				mddev->resync_offset = 0;
1542 		}
1543 
1544 		memcpy(mddev->uuid+0, &sb->set_uuid0, 4);
1545 		memcpy(mddev->uuid+4, &sb->set_uuid1, 4);
1546 		memcpy(mddev->uuid+8, &sb->set_uuid2, 4);
1547 		memcpy(mddev->uuid+12,&sb->set_uuid3, 4);
1548 
1549 		mddev->max_disks = MD_SB_DISKS;
1550 
1551 		if (sb->state & (1<<MD_SB_BITMAP_PRESENT) &&
1552 		    mddev->bitmap_info.file == NULL) {
1553 			mddev->bitmap_info.offset =
1554 				mddev->bitmap_info.default_offset;
1555 			mddev->bitmap_info.space =
1556 				mddev->bitmap_info.default_space;
1557 		}
1558 
1559 	} else if (mddev->pers == NULL) {
1560 		/* Insist on good event counter while assembling, except
1561 		 * for spares (which don't need an event count) */
1562 		++ev1;
1563 		if (sb->disks[rdev->desc_nr].state & (
1564 			    (1<<MD_DISK_SYNC) | (1 << MD_DISK_ACTIVE)))
1565 			if (ev1 < mddev->events)
1566 				return -EINVAL;
1567 	} else if (mddev->bitmap) {
1568 		/* if adding to array with a bitmap, then we can accept an
1569 		 * older device ... but not too old.
1570 		 */
1571 		if (ev1 < md_bitmap_events_cleared(mddev))
1572 			return 0;
1573 		if (ev1 < mddev->events)
1574 			set_bit(Bitmap_sync, &rdev->flags);
1575 	} else {
1576 		if (ev1 < mddev->events)
1577 			/* just a hot-add of a new device, leave raid_disk at -1 */
1578 			return 0;
1579 	}
1580 
1581 	desc = sb->disks + rdev->desc_nr;
1582 
1583 	if (desc->state & (1<<MD_DISK_FAULTY))
1584 		set_bit(Faulty, &rdev->flags);
1585 	else if (desc->state & (1<<MD_DISK_SYNC)) {
1586 		set_bit(In_sync, &rdev->flags);
1587 		rdev->raid_disk = desc->raid_disk;
1588 		rdev->saved_raid_disk = desc->raid_disk;
1589 	} else if (desc->state & (1<<MD_DISK_ACTIVE)) {
1590 		/* active but not in sync implies recovery up to
1591 		 * reshape position.  We don't know exactly where
1592 		 * that is, so set to zero for now
1593 		 */
1594 		if (mddev->minor_version >= 91) {
1595 			rdev->recovery_offset = 0;
1596 			rdev->raid_disk = desc->raid_disk;
1597 		}
1598 	}
1599 	if (desc->state & (1<<MD_DISK_WRITEMOSTLY))
1600 		set_bit(WriteMostly, &rdev->flags);
1601 	if (desc->state & (1<<MD_DISK_FAILFAST))
1602 		set_bit(FailFast, &rdev->flags);
1603 	return 0;
1604 }
1605 
1606 /*
1607  * sync_super for 0.90.0
1608  */
1609 static void super_90_sync(struct mddev *mddev, struct md_rdev *rdev)
1610 {
1611 	mdp_super_t *sb;
1612 	struct md_rdev *rdev2;
1613 	int next_spare = mddev->raid_disks;
1614 
1615 	/* make rdev->sb match mddev data..
1616 	 *
1617 	 * 1/ zero out disks
1618 	 * 2/ Add info for each disk, keeping track of highest desc_nr (next_spare);
1619 	 * 3/ any empty disks < next_spare become removed
1620 	 *
1621 	 * disks[0] gets initialised to REMOVED because
1622 	 * we cannot be sure from other fields if it has
1623 	 * been initialised or not.
1624 	 */
1625 	int i;
1626 	int active=0, working=0,failed=0,spare=0,nr_disks=0;
1627 
1628 	rdev->sb_size = MD_SB_BYTES;
1629 
1630 	sb = page_address(rdev->sb_page);
1631 
1632 	memset(sb, 0, sizeof(*sb));
1633 
1634 	sb->md_magic = MD_SB_MAGIC;
1635 	sb->major_version = mddev->major_version;
1636 	sb->patch_version = mddev->patch_version;
1637 	sb->gvalid_words  = 0; /* ignored */
1638 	memcpy(&sb->set_uuid0, mddev->uuid+0, 4);
1639 	memcpy(&sb->set_uuid1, mddev->uuid+4, 4);
1640 	memcpy(&sb->set_uuid2, mddev->uuid+8, 4);
1641 	memcpy(&sb->set_uuid3, mddev->uuid+12,4);
1642 
1643 	sb->ctime = clamp_t(time64_t, mddev->ctime, 0, U32_MAX);
1644 	sb->level = mddev->level;
1645 	sb->size = mddev->dev_sectors / 2;
1646 	sb->raid_disks = mddev->raid_disks;
1647 	sb->md_minor = mddev->md_minor;
1648 	sb->not_persistent = 0;
1649 	sb->utime = clamp_t(time64_t, mddev->utime, 0, U32_MAX);
1650 	sb->state = 0;
1651 	sb->events_hi = (mddev->events>>32);
1652 	sb->events_lo = (u32)mddev->events;
1653 
1654 	if (mddev->reshape_position == MaxSector)
1655 		sb->minor_version = 90;
1656 	else {
1657 		sb->minor_version = 91;
1658 		sb->reshape_position = mddev->reshape_position;
1659 		sb->new_level = mddev->new_level;
1660 		sb->delta_disks = mddev->delta_disks;
1661 		sb->new_layout = mddev->new_layout;
1662 		sb->new_chunk = mddev->new_chunk_sectors << 9;
1663 	}
1664 	mddev->minor_version = sb->minor_version;
1665 	if (mddev->in_sync)
1666 	{
1667 		sb->recovery_cp = mddev->resync_offset;
1668 		sb->cp_events_hi = (mddev->events>>32);
1669 		sb->cp_events_lo = (u32)mddev->events;
1670 		if (mddev->resync_offset == MaxSector)
1671 			sb->state = (1<< MD_SB_CLEAN);
1672 	} else
1673 		sb->recovery_cp = 0;
1674 
1675 	sb->layout = mddev->layout;
1676 	sb->chunk_size = mddev->chunk_sectors << 9;
1677 
1678 	if (mddev->bitmap && mddev->bitmap_info.file == NULL)
1679 		sb->state |= (1<<MD_SB_BITMAP_PRESENT);
1680 
1681 	sb->disks[0].state = (1<<MD_DISK_REMOVED);
1682 	rdev_for_each(rdev2, mddev) {
1683 		mdp_disk_t *d;
1684 		int desc_nr;
1685 		int is_active = test_bit(In_sync, &rdev2->flags);
1686 
1687 		if (rdev2->raid_disk >= 0 &&
1688 		    sb->minor_version >= 91)
1689 			/* we have nowhere to store the recovery_offset,
1690 			 * but if it is not below the reshape_position,
1691 			 * we can piggy-back on that.
1692 			 */
1693 			is_active = 1;
1694 		if (rdev2->raid_disk < 0 ||
1695 		    test_bit(Faulty, &rdev2->flags))
1696 			is_active = 0;
1697 		if (is_active)
1698 			desc_nr = rdev2->raid_disk;
1699 		else
1700 			desc_nr = next_spare++;
1701 		rdev2->desc_nr = desc_nr;
1702 		d = &sb->disks[rdev2->desc_nr];
1703 		nr_disks++;
1704 		d->number = rdev2->desc_nr;
1705 		d->major = MAJOR(rdev2->bdev->bd_dev);
1706 		d->minor = MINOR(rdev2->bdev->bd_dev);
1707 		if (is_active)
1708 			d->raid_disk = rdev2->raid_disk;
1709 		else
1710 			d->raid_disk = rdev2->desc_nr; /* compatibility */
1711 		if (test_bit(Faulty, &rdev2->flags))
1712 			d->state = (1<<MD_DISK_FAULTY);
1713 		else if (is_active) {
1714 			d->state = (1<<MD_DISK_ACTIVE);
1715 			if (test_bit(In_sync, &rdev2->flags))
1716 				d->state |= (1<<MD_DISK_SYNC);
1717 			active++;
1718 			working++;
1719 		} else {
1720 			d->state = 0;
1721 			spare++;
1722 			working++;
1723 		}
1724 		if (test_bit(WriteMostly, &rdev2->flags))
1725 			d->state |= (1<<MD_DISK_WRITEMOSTLY);
1726 		if (test_bit(FailFast, &rdev2->flags))
1727 			d->state |= (1<<MD_DISK_FAILFAST);
1728 	}
1729 	/* now set the "removed" and "faulty" bits on any missing devices */
1730 	for (i=0 ; i < mddev->raid_disks ; i++) {
1731 		mdp_disk_t *d = &sb->disks[i];
1732 		if (d->state == 0 && d->number == 0) {
1733 			d->number = i;
1734 			d->raid_disk = i;
1735 			d->state = (1<<MD_DISK_REMOVED);
1736 			d->state |= (1<<MD_DISK_FAULTY);
1737 			failed++;
1738 		}
1739 	}
1740 	sb->nr_disks = nr_disks;
1741 	sb->active_disks = active;
1742 	sb->working_disks = working;
1743 	sb->failed_disks = failed;
1744 	sb->spare_disks = spare;
1745 
1746 	sb->this_disk = sb->disks[rdev->desc_nr];
1747 	sb->sb_csum = calc_sb_csum(sb);
1748 }
1749 
1750 /*
1751  * rdev_size_change for 0.90.0
1752  */
1753 static unsigned long long
1754 super_90_rdev_size_change(struct md_rdev *rdev, sector_t num_sectors)
1755 {
1756 	if (num_sectors && num_sectors < rdev->mddev->dev_sectors)
1757 		return 0; /* component must fit device */
1758 	if (rdev->mddev->bitmap_info.offset)
1759 		return 0; /* can't move bitmap */
1760 	rdev->sb_start = calc_dev_sboffset(rdev);
1761 	if (!num_sectors || num_sectors > rdev->sb_start)
1762 		num_sectors = rdev->sb_start;
1763 	/* Limit to 4TB as metadata cannot record more than that.
1764 	 * 4TB == 2^32 KB, or 2*2^32 sectors.
1765 	 */
1766 	if ((u64)num_sectors >= (2ULL << 32) && rdev->mddev->level >= 1)
1767 		num_sectors = (sector_t)(2ULL << 32) - 2;
1768 	do {
1769 		md_write_metadata(rdev->mddev, rdev, rdev->sb_start,
1770 				  rdev->sb_size, rdev->sb_page, 0);
1771 	} while (md_super_wait(rdev->mddev) < 0);
1772 	return num_sectors;
1773 }
1774 
1775 static int
1776 super_90_allow_new_offset(struct md_rdev *rdev, unsigned long long new_offset)
1777 {
1778 	/* non-zero offset changes not possible with v0.90 */
1779 	return new_offset == 0;
1780 }
1781 
1782 /*
1783  * version 1 superblock
1784  */
1785 
1786 static __le32 calc_sb_1_csum(struct mdp_superblock_1 *sb)
1787 {
1788 	__le32 disk_csum;
1789 	u32 csum;
1790 	unsigned long long newcsum;
1791 	int size = 256 + le32_to_cpu(sb->max_dev)*2;
1792 	__le32 *isuper = (__le32*)sb;
1793 
1794 	disk_csum = sb->sb_csum;
1795 	sb->sb_csum = 0;
1796 	newcsum = 0;
1797 	for (; size >= 4; size -= 4)
1798 		newcsum += le32_to_cpu(*isuper++);
1799 
1800 	if (size == 2)
1801 		newcsum += le16_to_cpu(*(__le16*) isuper);
1802 
1803 	csum = (newcsum & 0xffffffff) + (newcsum >> 32);
1804 	sb->sb_csum = disk_csum;
1805 	return cpu_to_le32(csum);
1806 }
1807 
1808 static int super_1_load(struct md_rdev *rdev, struct md_rdev *refdev, int minor_version)
1809 {
1810 	struct mdp_superblock_1 *sb;
1811 	int ret;
1812 	sector_t sb_start;
1813 	sector_t sectors;
1814 	int bmask;
1815 	bool spare_disk = true;
1816 
1817 	/*
1818 	 * Calculate the position of the superblock in 512byte sectors.
1819 	 * It is always aligned to a 4K boundary and
1820 	 * depeding on minor_version, it can be:
1821 	 * 0: At least 8K, but less than 12K, from end of device
1822 	 * 1: At start of device
1823 	 * 2: 4K from start of device.
1824 	 */
1825 	switch(minor_version) {
1826 	case 0:
1827 		sb_start = bdev_nr_sectors(rdev->bdev) - 8 * 2;
1828 		sb_start &= ~(sector_t)(4*2-1);
1829 		break;
1830 	case 1:
1831 		sb_start = 0;
1832 		break;
1833 	case 2:
1834 		sb_start = 8;
1835 		break;
1836 	default:
1837 		return -EINVAL;
1838 	}
1839 	rdev->sb_start = sb_start;
1840 
1841 	/* superblock is rarely larger than 1K, but it can be larger,
1842 	 * and it is safe to read 4k, so we do that
1843 	 */
1844 	ret = read_disk_sb(rdev, 4096);
1845 	if (ret) return ret;
1846 
1847 	sb = page_address(rdev->sb_page);
1848 
1849 	if (sb->magic != cpu_to_le32(MD_SB_MAGIC) ||
1850 	    sb->major_version != cpu_to_le32(1) ||
1851 	    le32_to_cpu(sb->max_dev) > (4096-256)/2 ||
1852 	    le64_to_cpu(sb->super_offset) != rdev->sb_start ||
1853 	    (le32_to_cpu(sb->feature_map) & ~MD_FEATURE_ALL) != 0)
1854 		return -EINVAL;
1855 
1856 	if (calc_sb_1_csum(sb) != sb->sb_csum) {
1857 		pr_warn("md: invalid superblock checksum on %pg\n",
1858 			rdev->bdev);
1859 		return -EINVAL;
1860 	}
1861 	if (le64_to_cpu(sb->data_size) < 10) {
1862 		pr_warn("md: data_size too small on %pg\n",
1863 			rdev->bdev);
1864 		return -EINVAL;
1865 	}
1866 	if (sb->pad0 ||
1867 	    sb->pad3[0] ||
1868 	    memcmp(sb->pad3, sb->pad3+1, sizeof(sb->pad3) - sizeof(sb->pad3[1]))) {
1869 		pr_warn("Some padding is non-zero on %pg, might be a new feature\n",
1870 			rdev->bdev);
1871 		if (check_new_feature)
1872 			return -EINVAL;
1873 		pr_warn("check_new_feature is disabled, data corruption possible\n");
1874 	}
1875 
1876 	rdev->preferred_minor = 0xffff;
1877 	rdev->data_offset = le64_to_cpu(sb->data_offset);
1878 	rdev->new_data_offset = rdev->data_offset;
1879 	if ((le32_to_cpu(sb->feature_map) & MD_FEATURE_RESHAPE_ACTIVE) &&
1880 	    (le32_to_cpu(sb->feature_map) & MD_FEATURE_NEW_OFFSET))
1881 		rdev->new_data_offset += (s32)le32_to_cpu(sb->new_offset);
1882 	atomic_set(&rdev->corrected_errors, le32_to_cpu(sb->cnt_corrected_read));
1883 
1884 	rdev->sb_size = le32_to_cpu(sb->max_dev) * 2 + 256;
1885 	bmask = queue_logical_block_size(rdev->bdev->bd_disk->queue)-1;
1886 	if (rdev->sb_size & bmask)
1887 		rdev->sb_size = (rdev->sb_size | bmask) + 1;
1888 
1889 	if (minor_version
1890 	    && rdev->data_offset < sb_start + (rdev->sb_size/512))
1891 		return -EINVAL;
1892 	if (minor_version
1893 	    && rdev->new_data_offset < sb_start + (rdev->sb_size/512))
1894 		return -EINVAL;
1895 
1896 	rdev->desc_nr = le32_to_cpu(sb->dev_number);
1897 
1898 	if (!rdev->bb_page) {
1899 		rdev->bb_page = alloc_page(GFP_KERNEL);
1900 		if (!rdev->bb_page)
1901 			return -ENOMEM;
1902 	}
1903 	if ((le32_to_cpu(sb->feature_map) & MD_FEATURE_BAD_BLOCKS) &&
1904 	    rdev->badblocks.count == 0) {
1905 		/* need to load the bad block list.
1906 		 * Currently we limit it to one page.
1907 		 */
1908 		s32 offset;
1909 		sector_t bb_sector;
1910 		__le64 *bbp;
1911 		int i;
1912 		int sectors = le16_to_cpu(sb->bblog_size);
1913 		if (sectors > (PAGE_SIZE / 512))
1914 			return -EINVAL;
1915 		offset = le32_to_cpu(sb->bblog_offset);
1916 		if (offset == 0)
1917 			return -EINVAL;
1918 		bb_sector = (long long)offset;
1919 		if (!sync_page_io(rdev, bb_sector, sectors << 9,
1920 				  rdev->bb_page, REQ_OP_READ, true))
1921 			return -EIO;
1922 		bbp = (__le64 *)page_address(rdev->bb_page);
1923 		rdev->badblocks.shift = sb->bblog_shift;
1924 		for (i = 0 ; i < (sectors << (9-3)) ; i++, bbp++) {
1925 			u64 bb = le64_to_cpu(*bbp);
1926 			int count = bb & (0x3ff);
1927 			u64 sector = bb >> 10;
1928 			sector <<= sb->bblog_shift;
1929 			count <<= sb->bblog_shift;
1930 			if (bb + 1 == 0)
1931 				break;
1932 			if (!badblocks_set(&rdev->badblocks, sector, count, 1))
1933 				return -EINVAL;
1934 		}
1935 	} else if (sb->bblog_offset != 0)
1936 		rdev->badblocks.shift = 0;
1937 
1938 	if ((le32_to_cpu(sb->feature_map) &
1939 	    (MD_FEATURE_PPL | MD_FEATURE_MULTIPLE_PPLS))) {
1940 		rdev->ppl.offset = (__s16)le16_to_cpu(sb->ppl.offset);
1941 		rdev->ppl.size = le16_to_cpu(sb->ppl.size);
1942 		rdev->ppl.sector = rdev->sb_start + rdev->ppl.offset;
1943 	}
1944 
1945 	if ((le32_to_cpu(sb->feature_map) & MD_FEATURE_RAID0_LAYOUT) &&
1946 	    sb->level != 0)
1947 		return -EINVAL;
1948 
1949 	/* not spare disk */
1950 	if (rdev->desc_nr >= 0 && rdev->desc_nr < le32_to_cpu(sb->max_dev) &&
1951 	    (le16_to_cpu(sb->dev_roles[rdev->desc_nr]) < MD_DISK_ROLE_MAX ||
1952 	     le16_to_cpu(sb->dev_roles[rdev->desc_nr]) == MD_DISK_ROLE_JOURNAL))
1953 		spare_disk = false;
1954 
1955 	if (!refdev) {
1956 		if (!spare_disk)
1957 			ret = 1;
1958 		else
1959 			ret = 0;
1960 	} else {
1961 		__u64 ev1, ev2;
1962 		struct mdp_superblock_1 *refsb = page_address(refdev->sb_page);
1963 
1964 		if (memcmp(sb->set_uuid, refsb->set_uuid, 16) != 0 ||
1965 		    sb->level != refsb->level ||
1966 		    sb->layout != refsb->layout ||
1967 		    sb->chunksize != refsb->chunksize) {
1968 			pr_warn("md: %pg has strangely different superblock to %pg\n",
1969 				rdev->bdev,
1970 				refdev->bdev);
1971 			return -EINVAL;
1972 		}
1973 		ev1 = le64_to_cpu(sb->events);
1974 		ev2 = le64_to_cpu(refsb->events);
1975 
1976 		if (!spare_disk && ev1 > ev2)
1977 			ret = 1;
1978 		else
1979 			ret = 0;
1980 	}
1981 	if (minor_version)
1982 		sectors = bdev_nr_sectors(rdev->bdev) - rdev->data_offset;
1983 	else
1984 		sectors = rdev->sb_start;
1985 	if (sectors < le64_to_cpu(sb->data_size))
1986 		return -EINVAL;
1987 	rdev->sectors = le64_to_cpu(sb->data_size);
1988 	return ret;
1989 }
1990 
1991 static int super_1_validate(struct mddev *mddev, struct md_rdev *freshest, struct md_rdev *rdev)
1992 {
1993 	struct mdp_superblock_1 *sb = page_address(rdev->sb_page);
1994 	__u64 ev1 = le64_to_cpu(sb->events);
1995 	int role;
1996 
1997 	rdev->raid_disk = -1;
1998 	clear_bit(Faulty, &rdev->flags);
1999 	clear_bit(In_sync, &rdev->flags);
2000 	clear_bit(Bitmap_sync, &rdev->flags);
2001 	clear_bit(WriteMostly, &rdev->flags);
2002 
2003 	if (mddev->raid_disks == 0) {
2004 		mddev->major_version = 1;
2005 		mddev->patch_version = 0;
2006 		mddev->external = 0;
2007 		mddev->chunk_sectors = le32_to_cpu(sb->chunksize);
2008 		mddev->ctime = le64_to_cpu(sb->ctime);
2009 		mddev->utime = le64_to_cpu(sb->utime);
2010 		mddev->level = le32_to_cpu(sb->level);
2011 		mddev->clevel[0] = 0;
2012 		mddev->layout = le32_to_cpu(sb->layout);
2013 		mddev->raid_disks = le32_to_cpu(sb->raid_disks);
2014 		mddev->dev_sectors = le64_to_cpu(sb->size);
2015 		mddev->events = ev1;
2016 		mddev->bitmap_info.offset = 0;
2017 		mddev->bitmap_info.space = 0;
2018 		/* Default location for bitmap is 1K after superblock
2019 		 * using 3K - total of 4K
2020 		 */
2021 		mddev->bitmap_info.default_offset = 1024 >> 9;
2022 		mddev->bitmap_info.default_space = (4096-1024) >> 9;
2023 		mddev->reshape_backwards = 0;
2024 
2025 		mddev->resync_offset = le64_to_cpu(sb->resync_offset);
2026 		memcpy(mddev->uuid, sb->set_uuid, 16);
2027 
2028 		mddev->max_disks =  (4096-256)/2;
2029 
2030 		if (!mddev->logical_block_size)
2031 			mddev->logical_block_size = le32_to_cpu(sb->logical_block_size);
2032 
2033 		if ((le32_to_cpu(sb->feature_map) & MD_FEATURE_BITMAP_OFFSET) &&
2034 		    mddev->bitmap_info.file == NULL) {
2035 			mddev->bitmap_info.offset =
2036 				(__s32)le32_to_cpu(sb->bitmap_offset);
2037 			/* Metadata doesn't record how much space is available.
2038 			 * For 1.0, we assume we can use up to the superblock
2039 			 * if before, else to 4K beyond superblock.
2040 			 * For others, assume no change is possible.
2041 			 */
2042 			if (mddev->minor_version > 0)
2043 				mddev->bitmap_info.space = 0;
2044 			else if (mddev->bitmap_info.offset > 0)
2045 				mddev->bitmap_info.space =
2046 					8 - mddev->bitmap_info.offset;
2047 			else
2048 				mddev->bitmap_info.space =
2049 					-mddev->bitmap_info.offset;
2050 		}
2051 
2052 		if ((le32_to_cpu(sb->feature_map) & MD_FEATURE_RESHAPE_ACTIVE)) {
2053 			mddev->reshape_position = le64_to_cpu(sb->reshape_position);
2054 			mddev->delta_disks = le32_to_cpu(sb->delta_disks);
2055 			mddev->new_level = le32_to_cpu(sb->new_level);
2056 			mddev->new_layout = le32_to_cpu(sb->new_layout);
2057 			mddev->new_chunk_sectors = le32_to_cpu(sb->new_chunk);
2058 			if (mddev->delta_disks < 0 ||
2059 			    (mddev->delta_disks == 0 &&
2060 			     (le32_to_cpu(sb->feature_map)
2061 			      & MD_FEATURE_RESHAPE_BACKWARDS)))
2062 				mddev->reshape_backwards = 1;
2063 		} else {
2064 			mddev->reshape_position = MaxSector;
2065 			mddev->delta_disks = 0;
2066 			mddev->new_level = mddev->level;
2067 			mddev->new_layout = mddev->layout;
2068 			mddev->new_chunk_sectors = mddev->chunk_sectors;
2069 		}
2070 
2071 		if (mddev->level == 0 &&
2072 		    !(le32_to_cpu(sb->feature_map) & MD_FEATURE_RAID0_LAYOUT))
2073 			mddev->layout = -1;
2074 
2075 		if (le32_to_cpu(sb->feature_map) & MD_FEATURE_JOURNAL)
2076 			set_bit(MD_HAS_JOURNAL, &mddev->flags);
2077 
2078 		if (le32_to_cpu(sb->feature_map) &
2079 		    (MD_FEATURE_PPL | MD_FEATURE_MULTIPLE_PPLS)) {
2080 			if (le32_to_cpu(sb->feature_map) &
2081 			    (MD_FEATURE_BITMAP_OFFSET | MD_FEATURE_JOURNAL))
2082 				return -EINVAL;
2083 			if ((le32_to_cpu(sb->feature_map) & MD_FEATURE_PPL) &&
2084 			    (le32_to_cpu(sb->feature_map) &
2085 					    MD_FEATURE_MULTIPLE_PPLS))
2086 				return -EINVAL;
2087 			set_bit(MD_HAS_PPL, &mddev->flags);
2088 		}
2089 	} else if (mddev->pers == NULL) {
2090 		/* Insist of good event counter while assembling, except for
2091 		 * spares (which don't need an event count).
2092 		 * Similar to mdadm, we allow event counter difference of 1
2093 		 * from the freshest device.
2094 		 */
2095 		if (rdev->desc_nr >= 0 &&
2096 		    rdev->desc_nr < le32_to_cpu(sb->max_dev) &&
2097 		    (le16_to_cpu(sb->dev_roles[rdev->desc_nr]) < MD_DISK_ROLE_MAX ||
2098 		     le16_to_cpu(sb->dev_roles[rdev->desc_nr]) == MD_DISK_ROLE_JOURNAL))
2099 			if (ev1 + 1 < mddev->events)
2100 				return -EINVAL;
2101 	} else if (mddev->bitmap) {
2102 		/* If adding to array with a bitmap, then we can accept an
2103 		 * older device, but not too old.
2104 		 */
2105 		if (ev1 < md_bitmap_events_cleared(mddev))
2106 			return 0;
2107 		if (ev1 < mddev->events)
2108 			set_bit(Bitmap_sync, &rdev->flags);
2109 	} else {
2110 		if (ev1 < mddev->events)
2111 			/* just a hot-add of a new device, leave raid_disk at -1 */
2112 			return 0;
2113 	}
2114 
2115 	if (rdev->desc_nr < 0 ||
2116 	    rdev->desc_nr >= le32_to_cpu(sb->max_dev)) {
2117 		role = MD_DISK_ROLE_SPARE;
2118 		rdev->desc_nr = -1;
2119 	} else if (mddev->pers == NULL && freshest && ev1 < mddev->events) {
2120 		/*
2121 		 * If we are assembling, and our event counter is smaller than the
2122 		 * highest event counter, we cannot trust our superblock about the role.
2123 		 * It could happen that our rdev was marked as Faulty, and all other
2124 		 * superblocks were updated with +1 event counter.
2125 		 * Then, before the next superblock update, which typically happens when
2126 		 * remove_and_add_spares() removes the device from the array, there was
2127 		 * a crash or reboot.
2128 		 * If we allow current rdev without consulting the freshest superblock,
2129 		 * we could cause data corruption.
2130 		 * Note that in this case our event counter is smaller by 1 than the
2131 		 * highest, otherwise, this rdev would not be allowed into array;
2132 		 * both kernel and mdadm allow event counter difference of 1.
2133 		 */
2134 		struct mdp_superblock_1 *freshest_sb = page_address(freshest->sb_page);
2135 		u32 freshest_max_dev = le32_to_cpu(freshest_sb->max_dev);
2136 
2137 		if (rdev->desc_nr >= freshest_max_dev) {
2138 			/* this is unexpected, better not proceed */
2139 			pr_warn("md: %s: rdev[%pg]: desc_nr(%d) >= freshest(%pg)->sb->max_dev(%u)\n",
2140 				mdname(mddev), rdev->bdev, rdev->desc_nr,
2141 				freshest->bdev, freshest_max_dev);
2142 			return -EUCLEAN;
2143 		}
2144 
2145 		role = le16_to_cpu(freshest_sb->dev_roles[rdev->desc_nr]);
2146 		pr_debug("md: %s: rdev[%pg]: role=%d(0x%x) according to freshest %pg\n",
2147 			 mdname(mddev), rdev->bdev, role, role, freshest->bdev);
2148 	} else {
2149 		role = le16_to_cpu(sb->dev_roles[rdev->desc_nr]);
2150 	}
2151 	switch (role) {
2152 	case MD_DISK_ROLE_SPARE: /* spare */
2153 		break;
2154 	case MD_DISK_ROLE_FAULTY: /* faulty */
2155 		set_bit(Faulty, &rdev->flags);
2156 		break;
2157 	case MD_DISK_ROLE_JOURNAL: /* journal device */
2158 		if (!(le32_to_cpu(sb->feature_map) & MD_FEATURE_JOURNAL)) {
2159 			/* journal device without journal feature */
2160 			pr_warn("md: journal device provided without journal feature, ignoring the device\n");
2161 			return -EINVAL;
2162 		}
2163 		set_bit(Journal, &rdev->flags);
2164 		rdev->journal_tail = le64_to_cpu(sb->journal_tail);
2165 		rdev->raid_disk = 0;
2166 		break;
2167 	default:
2168 		rdev->saved_raid_disk = role;
2169 		if ((le32_to_cpu(sb->feature_map) &
2170 		     MD_FEATURE_RECOVERY_OFFSET)) {
2171 			rdev->recovery_offset = le64_to_cpu(sb->recovery_offset);
2172 			if (!(le32_to_cpu(sb->feature_map) &
2173 			      MD_FEATURE_RECOVERY_BITMAP))
2174 				rdev->saved_raid_disk = -1;
2175 		} else {
2176 			/*
2177 			 * If the array is FROZEN, then the device can't
2178 			 * be in_sync with rest of array.
2179 			 */
2180 			if (!test_bit(MD_RECOVERY_FROZEN,
2181 				      &mddev->recovery))
2182 				set_bit(In_sync, &rdev->flags);
2183 		}
2184 		rdev->raid_disk = role;
2185 		break;
2186 	}
2187 	if (sb->devflags & WriteMostly1)
2188 		set_bit(WriteMostly, &rdev->flags);
2189 	if (sb->devflags & FailFast1)
2190 		set_bit(FailFast, &rdev->flags);
2191 	if (le32_to_cpu(sb->feature_map) & MD_FEATURE_REPLACEMENT)
2192 		set_bit(Replacement, &rdev->flags);
2193 
2194 	return 0;
2195 }
2196 
2197 static void super_1_sync(struct mddev *mddev, struct md_rdev *rdev)
2198 {
2199 	struct mdp_superblock_1 *sb;
2200 	struct md_rdev *rdev2;
2201 	int max_dev, i;
2202 	/* make rdev->sb match mddev and rdev data. */
2203 
2204 	sb = page_address(rdev->sb_page);
2205 
2206 	sb->feature_map = 0;
2207 	sb->pad0 = 0;
2208 	sb->recovery_offset = cpu_to_le64(0);
2209 	memset(sb->pad3, 0, sizeof(sb->pad3));
2210 
2211 	sb->utime = cpu_to_le64((__u64)mddev->utime);
2212 	sb->events = cpu_to_le64(mddev->events);
2213 	if (mddev->in_sync)
2214 		sb->resync_offset = cpu_to_le64(mddev->resync_offset);
2215 	else if (test_bit(MD_JOURNAL_CLEAN, &mddev->flags))
2216 		sb->resync_offset = cpu_to_le64(MaxSector);
2217 	else
2218 		sb->resync_offset = cpu_to_le64(0);
2219 
2220 	sb->cnt_corrected_read = cpu_to_le32(atomic_read(&rdev->corrected_errors));
2221 
2222 	sb->raid_disks = cpu_to_le32(mddev->raid_disks);
2223 	sb->size = cpu_to_le64(mddev->dev_sectors);
2224 	sb->chunksize = cpu_to_le32(mddev->chunk_sectors);
2225 	sb->level = cpu_to_le32(mddev->level);
2226 	sb->layout = cpu_to_le32(mddev->layout);
2227 	sb->logical_block_size = cpu_to_le32(mddev->logical_block_size);
2228 	if (test_bit(FailFast, &rdev->flags))
2229 		sb->devflags |= FailFast1;
2230 	else
2231 		sb->devflags &= ~FailFast1;
2232 
2233 	if (test_bit(WriteMostly, &rdev->flags))
2234 		sb->devflags |= WriteMostly1;
2235 	else
2236 		sb->devflags &= ~WriteMostly1;
2237 	sb->data_offset = cpu_to_le64(rdev->data_offset);
2238 	sb->data_size = cpu_to_le64(rdev->sectors);
2239 
2240 	if (mddev->bitmap && mddev->bitmap_info.file == NULL) {
2241 		sb->bitmap_offset = cpu_to_le32((__u32)mddev->bitmap_info.offset);
2242 		sb->feature_map = cpu_to_le32(MD_FEATURE_BITMAP_OFFSET);
2243 	}
2244 
2245 	if (rdev->raid_disk >= 0 && !test_bit(Journal, &rdev->flags) &&
2246 	    !test_bit(In_sync, &rdev->flags)) {
2247 		sb->feature_map |=
2248 			cpu_to_le32(MD_FEATURE_RECOVERY_OFFSET);
2249 		sb->recovery_offset =
2250 			cpu_to_le64(rdev->recovery_offset);
2251 		if (rdev->saved_raid_disk >= 0 && mddev->bitmap)
2252 			sb->feature_map |=
2253 				cpu_to_le32(MD_FEATURE_RECOVERY_BITMAP);
2254 	}
2255 	/* Note: recovery_offset and journal_tail share space  */
2256 	if (test_bit(Journal, &rdev->flags))
2257 		sb->journal_tail = cpu_to_le64(rdev->journal_tail);
2258 	if (test_bit(Replacement, &rdev->flags))
2259 		sb->feature_map |=
2260 			cpu_to_le32(MD_FEATURE_REPLACEMENT);
2261 
2262 	if (mddev->reshape_position != MaxSector) {
2263 		sb->feature_map |= cpu_to_le32(MD_FEATURE_RESHAPE_ACTIVE);
2264 		sb->reshape_position = cpu_to_le64(mddev->reshape_position);
2265 		sb->new_layout = cpu_to_le32(mddev->new_layout);
2266 		sb->delta_disks = cpu_to_le32(mddev->delta_disks);
2267 		sb->new_level = cpu_to_le32(mddev->new_level);
2268 		sb->new_chunk = cpu_to_le32(mddev->new_chunk_sectors);
2269 		if (mddev->delta_disks == 0 &&
2270 		    mddev->reshape_backwards)
2271 			sb->feature_map
2272 				|= cpu_to_le32(MD_FEATURE_RESHAPE_BACKWARDS);
2273 		if (rdev->new_data_offset != rdev->data_offset) {
2274 			sb->feature_map
2275 				|= cpu_to_le32(MD_FEATURE_NEW_OFFSET);
2276 			sb->new_offset = cpu_to_le32((__u32)(rdev->new_data_offset
2277 							     - rdev->data_offset));
2278 		}
2279 	}
2280 
2281 	if (mddev_is_clustered(mddev))
2282 		sb->feature_map |= cpu_to_le32(MD_FEATURE_CLUSTERED);
2283 
2284 	if (rdev->badblocks.count == 0)
2285 		/* Nothing to do for bad blocks*/ ;
2286 	else if (sb->bblog_offset == 0)
2287 		/* Cannot record bad blocks on this device */
2288 		md_error(mddev, rdev);
2289 	else {
2290 		struct badblocks *bb = &rdev->badblocks;
2291 		__le64 *bbp = (__le64 *)page_address(rdev->bb_page);
2292 		u64 *p = bb->page;
2293 		sb->feature_map |= cpu_to_le32(MD_FEATURE_BAD_BLOCKS);
2294 		if (bb->changed) {
2295 			unsigned seq;
2296 
2297 retry:
2298 			seq = read_seqbegin(&bb->lock);
2299 
2300 			memset(bbp, 0xff, PAGE_SIZE);
2301 
2302 			for (i = 0 ; i < bb->count ; i++) {
2303 				u64 internal_bb = p[i];
2304 				u64 store_bb = ((BB_OFFSET(internal_bb) << 10)
2305 						| BB_LEN(internal_bb));
2306 				bbp[i] = cpu_to_le64(store_bb);
2307 			}
2308 			bb->changed = 0;
2309 			if (read_seqretry(&bb->lock, seq))
2310 				goto retry;
2311 
2312 			bb->sector = (rdev->sb_start +
2313 				      (int)le32_to_cpu(sb->bblog_offset));
2314 			bb->size = le16_to_cpu(sb->bblog_size);
2315 		}
2316 	}
2317 
2318 	max_dev = 0;
2319 	rdev_for_each(rdev2, mddev)
2320 		if (rdev2->desc_nr+1 > max_dev)
2321 			max_dev = rdev2->desc_nr+1;
2322 
2323 	if (max_dev > le32_to_cpu(sb->max_dev)) {
2324 		int bmask;
2325 		sb->max_dev = cpu_to_le32(max_dev);
2326 		rdev->sb_size = max_dev * 2 + 256;
2327 		bmask = queue_logical_block_size(rdev->bdev->bd_disk->queue)-1;
2328 		if (rdev->sb_size & bmask)
2329 			rdev->sb_size = (rdev->sb_size | bmask) + 1;
2330 	} else
2331 		max_dev = le32_to_cpu(sb->max_dev);
2332 
2333 	for (i=0; i<max_dev;i++)
2334 		sb->dev_roles[i] = cpu_to_le16(MD_DISK_ROLE_SPARE);
2335 
2336 	if (test_bit(MD_HAS_JOURNAL, &mddev->flags))
2337 		sb->feature_map |= cpu_to_le32(MD_FEATURE_JOURNAL);
2338 
2339 	if (test_bit(MD_HAS_PPL, &mddev->flags)) {
2340 		if (test_bit(MD_HAS_MULTIPLE_PPLS, &mddev->flags))
2341 			sb->feature_map |=
2342 			    cpu_to_le32(MD_FEATURE_MULTIPLE_PPLS);
2343 		else
2344 			sb->feature_map |= cpu_to_le32(MD_FEATURE_PPL);
2345 		sb->ppl.offset = cpu_to_le16(rdev->ppl.offset);
2346 		sb->ppl.size = cpu_to_le16(rdev->ppl.size);
2347 	}
2348 
2349 	rdev_for_each(rdev2, mddev) {
2350 		i = rdev2->desc_nr;
2351 		if (test_bit(Faulty, &rdev2->flags))
2352 			sb->dev_roles[i] = cpu_to_le16(MD_DISK_ROLE_FAULTY);
2353 		else if (test_bit(In_sync, &rdev2->flags))
2354 			sb->dev_roles[i] = cpu_to_le16(rdev2->raid_disk);
2355 		else if (test_bit(Journal, &rdev2->flags))
2356 			sb->dev_roles[i] = cpu_to_le16(MD_DISK_ROLE_JOURNAL);
2357 		else if (rdev2->raid_disk >= 0)
2358 			sb->dev_roles[i] = cpu_to_le16(rdev2->raid_disk);
2359 		else
2360 			sb->dev_roles[i] = cpu_to_le16(MD_DISK_ROLE_SPARE);
2361 	}
2362 
2363 	sb->sb_csum = calc_sb_1_csum(sb);
2364 }
2365 
2366 static sector_t super_1_choose_bm_space(sector_t dev_size)
2367 {
2368 	sector_t bm_space;
2369 
2370 	/* if the device is bigger than 8Gig, save 64k for bitmap
2371 	 * usage, if bigger than 200Gig, save 128k
2372 	 */
2373 	if (dev_size < 64*2)
2374 		bm_space = 0;
2375 	else if (dev_size - 64*2 >= 200*1024*1024*2)
2376 		bm_space = 128*2;
2377 	else if (dev_size - 4*2 > 8*1024*1024*2)
2378 		bm_space = 64*2;
2379 	else
2380 		bm_space = 4*2;
2381 	return bm_space;
2382 }
2383 
2384 static unsigned long long
2385 super_1_rdev_size_change(struct md_rdev *rdev, sector_t num_sectors)
2386 {
2387 	struct mdp_superblock_1 *sb;
2388 	sector_t max_sectors;
2389 	if (num_sectors && num_sectors < rdev->mddev->dev_sectors)
2390 		return 0; /* component must fit device */
2391 	if (rdev->data_offset != rdev->new_data_offset)
2392 		return 0; /* too confusing */
2393 	if (rdev->sb_start < rdev->data_offset) {
2394 		/* minor versions 1 and 2; superblock before data */
2395 		max_sectors = bdev_nr_sectors(rdev->bdev) - rdev->data_offset;
2396 		if (!num_sectors || num_sectors > max_sectors)
2397 			num_sectors = max_sectors;
2398 	} else if (rdev->mddev->bitmap_info.offset) {
2399 		/* minor version 0 with bitmap we can't move */
2400 		return 0;
2401 	} else {
2402 		/* minor version 0; superblock after data */
2403 		sector_t sb_start, bm_space;
2404 		sector_t dev_size = bdev_nr_sectors(rdev->bdev);
2405 
2406 		/* 8K is for superblock */
2407 		sb_start = dev_size - 8*2;
2408 		sb_start &= ~(sector_t)(4*2 - 1);
2409 
2410 		bm_space = super_1_choose_bm_space(dev_size);
2411 
2412 		/* Space that can be used to store date needs to decrease
2413 		 * superblock bitmap space and bad block space(4K)
2414 		 */
2415 		max_sectors = sb_start - bm_space - 4*2;
2416 
2417 		if (!num_sectors || num_sectors > max_sectors)
2418 			num_sectors = max_sectors;
2419 		rdev->sb_start = sb_start;
2420 	}
2421 	sb = page_address(rdev->sb_page);
2422 	sb->data_size = cpu_to_le64(num_sectors);
2423 	sb->super_offset = cpu_to_le64(rdev->sb_start);
2424 	sb->sb_csum = calc_sb_1_csum(sb);
2425 	do {
2426 		md_write_metadata(rdev->mddev, rdev, rdev->sb_start,
2427 				  rdev->sb_size, rdev->sb_page, 0);
2428 	} while (md_super_wait(rdev->mddev) < 0);
2429 	return num_sectors;
2430 
2431 }
2432 
2433 static int
2434 super_1_allow_new_offset(struct md_rdev *rdev,
2435 			 unsigned long long new_offset)
2436 {
2437 	struct mddev *mddev = rdev->mddev;
2438 
2439 	/* All necessary checks on new >= old have been done */
2440 	if (new_offset >= rdev->data_offset)
2441 		return 1;
2442 
2443 	/* with 1.0 metadata, there is no metadata to tread on
2444 	 * so we can always move back */
2445 	if (mddev->minor_version == 0)
2446 		return 1;
2447 
2448 	/* otherwise we must be sure not to step on
2449 	 * any metadata, so stay:
2450 	 * 36K beyond start of superblock
2451 	 * beyond end of badblocks
2452 	 * beyond write-intent bitmap
2453 	 */
2454 	if (rdev->sb_start + (32+4)*2 > new_offset)
2455 		return 0;
2456 
2457 	if (md_bitmap_registered(mddev) && !mddev->bitmap_info.file) {
2458 		struct md_bitmap_stats stats;
2459 		int err;
2460 
2461 		err = mddev->bitmap_ops->get_stats(mddev->bitmap, &stats);
2462 		if (!err && rdev->sb_start + mddev->bitmap_info.offset +
2463 		    stats.file_pages * (PAGE_SIZE >> 9) > new_offset)
2464 			return 0;
2465 	}
2466 
2467 	if (rdev->badblocks.sector + rdev->badblocks.size > new_offset)
2468 		return 0;
2469 
2470 	return 1;
2471 }
2472 
2473 static struct super_type super_types[] = {
2474 	[0] = {
2475 		.name	= "0.90.0",
2476 		.owner	= THIS_MODULE,
2477 		.load_super	    = super_90_load,
2478 		.validate_super	    = super_90_validate,
2479 		.sync_super	    = super_90_sync,
2480 		.rdev_size_change   = super_90_rdev_size_change,
2481 		.allow_new_offset   = super_90_allow_new_offset,
2482 	},
2483 	[1] = {
2484 		.name	= "md-1",
2485 		.owner	= THIS_MODULE,
2486 		.load_super	    = super_1_load,
2487 		.validate_super	    = super_1_validate,
2488 		.sync_super	    = super_1_sync,
2489 		.rdev_size_change   = super_1_rdev_size_change,
2490 		.allow_new_offset   = super_1_allow_new_offset,
2491 	},
2492 };
2493 
2494 static void sync_super(struct mddev *mddev, struct md_rdev *rdev)
2495 {
2496 	if (mddev->sync_super) {
2497 		mddev->sync_super(mddev, rdev);
2498 		return;
2499 	}
2500 
2501 	BUG_ON(mddev->major_version >= ARRAY_SIZE(super_types));
2502 
2503 	super_types[mddev->major_version].sync_super(mddev, rdev);
2504 }
2505 
2506 static int match_mddev_units(struct mddev *mddev1, struct mddev *mddev2)
2507 {
2508 	struct md_rdev *rdev, *rdev2;
2509 
2510 	rcu_read_lock();
2511 	rdev_for_each_rcu(rdev, mddev1) {
2512 		if (test_bit(Faulty, &rdev->flags) ||
2513 		    test_bit(Journal, &rdev->flags) ||
2514 		    rdev->raid_disk == -1)
2515 			continue;
2516 		rdev_for_each_rcu(rdev2, mddev2) {
2517 			if (test_bit(Faulty, &rdev2->flags) ||
2518 			    test_bit(Journal, &rdev2->flags) ||
2519 			    rdev2->raid_disk == -1)
2520 				continue;
2521 			if (rdev->bdev->bd_disk == rdev2->bdev->bd_disk) {
2522 				rcu_read_unlock();
2523 				return 1;
2524 			}
2525 		}
2526 	}
2527 	rcu_read_unlock();
2528 	return 0;
2529 }
2530 
2531 static LIST_HEAD(pending_raid_disks);
2532 
2533 /*
2534  * Try to register data integrity profile for an mddev
2535  *
2536  * This is called when an array is started and after a disk has been kicked
2537  * from the array. It only succeeds if all working and active component devices
2538  * are integrity capable with matching profiles.
2539  */
2540 int md_integrity_register(struct mddev *mddev)
2541 {
2542 	if (list_empty(&mddev->disks))
2543 		return 0; /* nothing to do */
2544 	if (mddev_is_dm(mddev) || !blk_get_integrity(mddev->gendisk))
2545 		return 0; /* shouldn't register */
2546 
2547 	pr_debug("md: data integrity enabled on %s\n", mdname(mddev));
2548 	return 0;
2549 }
2550 EXPORT_SYMBOL(md_integrity_register);
2551 
2552 static bool rdev_read_only(struct md_rdev *rdev)
2553 {
2554 	return bdev_read_only(rdev->bdev) ||
2555 		(rdev->meta_bdev && bdev_read_only(rdev->meta_bdev));
2556 }
2557 
2558 static int bind_rdev_to_array(struct md_rdev *rdev, struct mddev *mddev)
2559 {
2560 	char b[BDEVNAME_SIZE];
2561 	int err;
2562 
2563 	/* prevent duplicates */
2564 	if (find_rdev(mddev, rdev->bdev->bd_dev))
2565 		return -EEXIST;
2566 
2567 	if (rdev_read_only(rdev) && mddev->pers)
2568 		return -EROFS;
2569 
2570 	/* make sure rdev->sectors exceeds mddev->dev_sectors */
2571 	if (!test_bit(Journal, &rdev->flags) &&
2572 	    rdev->sectors &&
2573 	    (mddev->dev_sectors == 0 || rdev->sectors < mddev->dev_sectors)) {
2574 		if (mddev->pers) {
2575 			/* Cannot change size, so fail
2576 			 * If mddev->level <= 0, then we don't care
2577 			 * about aligning sizes (e.g. linear)
2578 			 */
2579 			if (mddev->level > 0)
2580 				return -ENOSPC;
2581 		} else
2582 			mddev->dev_sectors = rdev->sectors;
2583 	}
2584 
2585 	/* Verify rdev->desc_nr is unique.
2586 	 * If it is -1, assign a free number, else
2587 	 * check number is not in use
2588 	 */
2589 	rcu_read_lock();
2590 	if (rdev->desc_nr < 0) {
2591 		int choice = 0;
2592 		if (mddev->pers)
2593 			choice = mddev->raid_disks;
2594 		while (md_find_rdev_nr_rcu(mddev, choice))
2595 			choice++;
2596 		rdev->desc_nr = choice;
2597 	} else {
2598 		if (md_find_rdev_nr_rcu(mddev, rdev->desc_nr)) {
2599 			rcu_read_unlock();
2600 			return -EBUSY;
2601 		}
2602 	}
2603 	rcu_read_unlock();
2604 	if (!test_bit(Journal, &rdev->flags) &&
2605 	    mddev->max_disks && rdev->desc_nr >= mddev->max_disks) {
2606 		pr_warn("md: %s: array is limited to %d devices\n",
2607 			mdname(mddev), mddev->max_disks);
2608 		return -EBUSY;
2609 	}
2610 	snprintf(b, sizeof(b), "%pg", rdev->bdev);
2611 	strreplace(b, '/', '!');
2612 
2613 	rdev->mddev = mddev;
2614 	pr_debug("md: bind<%s>\n", b);
2615 
2616 	if (mddev->raid_disks)
2617 		mddev_create_serial_pool(mddev, rdev);
2618 
2619 	if ((err = kobject_add(&rdev->kobj, &mddev->kobj, "dev-%s", b)))
2620 		goto fail;
2621 
2622 	/* failure here is OK */
2623 	err = sysfs_create_link(&rdev->kobj, bdev_kobj(rdev->bdev), "block");
2624 	rdev->sysfs_state = sysfs_get_dirent_safe(rdev->kobj.sd, "state");
2625 	rdev->sysfs_unack_badblocks =
2626 		sysfs_get_dirent_safe(rdev->kobj.sd, "unacknowledged_bad_blocks");
2627 	rdev->sysfs_badblocks =
2628 		sysfs_get_dirent_safe(rdev->kobj.sd, "bad_blocks");
2629 
2630 	list_add_rcu(&rdev->same_set, &mddev->disks);
2631 	bd_link_disk_holder(rdev->bdev, mddev->gendisk);
2632 
2633 	return 0;
2634 
2635  fail:
2636 	pr_warn("md: failed to register dev-%s for %s\n",
2637 		b, mdname(mddev));
2638 	mddev_destroy_serial_pool(mddev, rdev);
2639 	return err;
2640 }
2641 
2642 void md_autodetect_dev(dev_t dev);
2643 
2644 /* just for claiming the bdev */
2645 static struct md_rdev claim_rdev;
2646 
2647 static void export_rdev(struct md_rdev *rdev)
2648 {
2649 	pr_debug("md: export_rdev(%pg)\n", rdev->bdev);
2650 	md_rdev_clear(rdev);
2651 #ifndef MODULE
2652 	if (test_bit(AutoDetected, &rdev->flags))
2653 		md_autodetect_dev(rdev->bdev->bd_dev);
2654 #endif
2655 	fput(rdev->bdev_file);
2656 	rdev->bdev = NULL;
2657 	kobject_put(&rdev->kobj);
2658 }
2659 
2660 static void md_kick_rdev_from_array(struct md_rdev *rdev)
2661 {
2662 	struct mddev *mddev = rdev->mddev;
2663 
2664 	bd_unlink_disk_holder(rdev->bdev, rdev->mddev->gendisk);
2665 	list_del_rcu(&rdev->same_set);
2666 	pr_debug("md: unbind<%pg>\n", rdev->bdev);
2667 	mddev_destroy_serial_pool(rdev->mddev, rdev);
2668 	WRITE_ONCE(rdev->mddev, NULL);
2669 	sysfs_remove_link(&rdev->kobj, "block");
2670 	sysfs_put(rdev->sysfs_state);
2671 	sysfs_put(rdev->sysfs_unack_badblocks);
2672 	sysfs_put(rdev->sysfs_badblocks);
2673 	rdev->sysfs_state = NULL;
2674 	rdev->sysfs_unack_badblocks = NULL;
2675 	rdev->sysfs_badblocks = NULL;
2676 	rdev->badblocks.count = 0;
2677 
2678 	synchronize_rcu();
2679 
2680 	/*
2681 	 * kobject_del() will wait for all in progress writers to be done, where
2682 	 * reconfig_mutex is held, hence it can't be called under
2683 	 * reconfig_mutex and it's delayed to mddev_unlock().
2684 	 */
2685 	list_add(&rdev->same_set, &mddev->deleting);
2686 }
2687 
2688 static void export_array(struct mddev *mddev)
2689 {
2690 	struct md_rdev *rdev;
2691 
2692 	while (!list_empty(&mddev->disks)) {
2693 		rdev = list_first_entry(&mddev->disks, struct md_rdev,
2694 					same_set);
2695 		md_kick_rdev_from_array(rdev);
2696 	}
2697 	mddev->raid_disks = 0;
2698 	mddev->major_version = 0;
2699 }
2700 
2701 static bool set_in_sync(struct mddev *mddev)
2702 {
2703 	lockdep_assert_held(&mddev->lock);
2704 	if (!mddev->in_sync) {
2705 		mddev->sync_checkers++;
2706 		spin_unlock(&mddev->lock);
2707 		percpu_ref_switch_to_atomic_sync(&mddev->writes_pending);
2708 		spin_lock(&mddev->lock);
2709 		if (!mddev->in_sync &&
2710 		    percpu_ref_is_zero(&mddev->writes_pending)) {
2711 			mddev->in_sync = 1;
2712 			/*
2713 			 * Ensure ->in_sync is visible before we clear
2714 			 * ->sync_checkers.
2715 			 */
2716 			smp_mb();
2717 			set_bit(MD_SB_CHANGE_CLEAN, &mddev->sb_flags);
2718 			sysfs_notify_dirent_safe(mddev->sysfs_state);
2719 		}
2720 		if (--mddev->sync_checkers == 0)
2721 			percpu_ref_switch_to_percpu(&mddev->writes_pending);
2722 	}
2723 	if (mddev->safemode == 1)
2724 		mddev->safemode = 0;
2725 	return mddev->in_sync;
2726 }
2727 
2728 static void sync_sbs(struct mddev *mddev, int nospares)
2729 {
2730 	/* Update each superblock (in-memory image), but
2731 	 * if we are allowed to, skip spares which already
2732 	 * have the right event counter, or have one earlier
2733 	 * (which would mean they aren't being marked as dirty
2734 	 * with the rest of the array)
2735 	 */
2736 	struct md_rdev *rdev;
2737 	rdev_for_each(rdev, mddev) {
2738 		if (rdev->sb_events == mddev->events ||
2739 		    (nospares &&
2740 		     rdev->raid_disk < 0 &&
2741 		     rdev->sb_events+1 == mddev->events)) {
2742 			/* Don't update this superblock */
2743 			rdev->sb_loaded = 2;
2744 		} else {
2745 			sync_super(mddev, rdev);
2746 			rdev->sb_loaded = 1;
2747 		}
2748 	}
2749 }
2750 
2751 static bool does_sb_need_changing(struct mddev *mddev)
2752 {
2753 	struct md_rdev *rdev = NULL, *iter;
2754 	struct mdp_superblock_1 *sb;
2755 	int role;
2756 
2757 	/* Find a good rdev */
2758 	rdev_for_each(iter, mddev)
2759 		if ((iter->raid_disk >= 0) && !test_bit(Faulty, &iter->flags)) {
2760 			rdev = iter;
2761 			break;
2762 		}
2763 
2764 	/* No good device found. */
2765 	if (!rdev)
2766 		return false;
2767 
2768 	sb = page_address(rdev->sb_page);
2769 	/* Check if a device has become faulty or a spare become active */
2770 	rdev_for_each(rdev, mddev) {
2771 		role = le16_to_cpu(sb->dev_roles[rdev->desc_nr]);
2772 		/* Device activated? */
2773 		if (role == MD_DISK_ROLE_SPARE && rdev->raid_disk >= 0 &&
2774 		    !test_bit(Faulty, &rdev->flags))
2775 			return true;
2776 		/* Device turned faulty? */
2777 		if (test_bit(Faulty, &rdev->flags) && (role < MD_DISK_ROLE_MAX))
2778 			return true;
2779 	}
2780 
2781 	/* Check if any mddev parameters have changed */
2782 	if ((mddev->dev_sectors != le64_to_cpu(sb->size)) ||
2783 	    (mddev->reshape_position != le64_to_cpu(sb->reshape_position)) ||
2784 	    (mddev->layout != le32_to_cpu(sb->layout)) ||
2785 	    (mddev->raid_disks != le32_to_cpu(sb->raid_disks)) ||
2786 	    (mddev->chunk_sectors != le32_to_cpu(sb->chunksize)))
2787 		return true;
2788 
2789 	return false;
2790 }
2791 
2792 void md_update_sb(struct mddev *mddev, int force_change)
2793 {
2794 	struct md_rdev *rdev;
2795 	int sync_req;
2796 	int nospares = 0;
2797 	int any_badblocks_changed = 0;
2798 	int ret = -1;
2799 
2800 	if (!md_is_rdwr(mddev)) {
2801 		if (force_change)
2802 			set_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags);
2803 		if (!mddev_is_dm(mddev))
2804 			pr_err_ratelimited("%s: can't update sb for read-only array %s\n",
2805 					   __func__, mdname(mddev));
2806 		return;
2807 	}
2808 
2809 repeat:
2810 	if (mddev_is_clustered(mddev)) {
2811 		if (test_and_clear_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags))
2812 			force_change = 1;
2813 		if (test_and_clear_bit(MD_SB_CHANGE_CLEAN, &mddev->sb_flags))
2814 			nospares = 1;
2815 		ret = mddev->cluster_ops->metadata_update_start(mddev);
2816 		/* Has someone else has updated the sb */
2817 		if (!does_sb_need_changing(mddev)) {
2818 			if (ret == 0)
2819 				mddev->cluster_ops->metadata_update_cancel(mddev);
2820 			bit_clear_unless(&mddev->sb_flags, BIT(MD_SB_CHANGE_PENDING),
2821 							 BIT(MD_SB_CHANGE_DEVS) |
2822 							 BIT(MD_SB_CHANGE_CLEAN));
2823 			return;
2824 		}
2825 	}
2826 
2827 	/*
2828 	 * First make sure individual recovery_offsets are correct
2829 	 * curr_resync_completed can only be used during recovery.
2830 	 * During reshape/resync it might use array-addresses rather
2831 	 * that device addresses.
2832 	 */
2833 	rdev_for_each(rdev, mddev) {
2834 		if (rdev->raid_disk >= 0 &&
2835 		    mddev->delta_disks >= 0 &&
2836 		    test_bit(MD_RECOVERY_RUNNING, &mddev->recovery) &&
2837 		    test_bit(MD_RECOVERY_RECOVER, &mddev->recovery) &&
2838 		    !test_bit(MD_RECOVERY_RESHAPE, &mddev->recovery) &&
2839 		    !test_bit(Journal, &rdev->flags) &&
2840 		    !test_bit(In_sync, &rdev->flags) &&
2841 		    mddev->curr_resync_completed > rdev->recovery_offset)
2842 				rdev->recovery_offset = mddev->curr_resync_completed;
2843 
2844 	}
2845 	if (!mddev->persistent) {
2846 		clear_bit(MD_SB_CHANGE_CLEAN, &mddev->sb_flags);
2847 		clear_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags);
2848 		if (!mddev->external) {
2849 			clear_bit(MD_SB_CHANGE_PENDING, &mddev->sb_flags);
2850 			rdev_for_each(rdev, mddev) {
2851 				if (rdev->badblocks.changed) {
2852 					rdev->badblocks.changed = 0;
2853 					ack_all_badblocks(&rdev->badblocks);
2854 					md_error(mddev, rdev);
2855 				}
2856 				clear_bit(Blocked, &rdev->flags);
2857 				clear_bit(BlockedBadBlocks, &rdev->flags);
2858 				wake_up(&rdev->blocked_wait);
2859 			}
2860 		}
2861 		wake_up(&mddev->sb_wait);
2862 		return;
2863 	}
2864 
2865 	spin_lock(&mddev->lock);
2866 
2867 	mddev->utime = ktime_get_real_seconds();
2868 
2869 	if (test_and_clear_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags))
2870 		force_change = 1;
2871 	if (test_and_clear_bit(MD_SB_CHANGE_CLEAN, &mddev->sb_flags))
2872 		/* just a clean<-> dirty transition, possibly leave spares alone,
2873 		 * though if events isn't the right even/odd, we will have to do
2874 		 * spares after all
2875 		 */
2876 		nospares = 1;
2877 	if (force_change)
2878 		nospares = 0;
2879 	if (mddev->degraded)
2880 		/* If the array is degraded, then skipping spares is both
2881 		 * dangerous and fairly pointless.
2882 		 * Dangerous because a device that was removed from the array
2883 		 * might have a event_count that still looks up-to-date,
2884 		 * so it can be re-added without a resync.
2885 		 * Pointless because if there are any spares to skip,
2886 		 * then a recovery will happen and soon that array won't
2887 		 * be degraded any more and the spare can go back to sleep then.
2888 		 */
2889 		nospares = 0;
2890 
2891 	sync_req = mddev->in_sync;
2892 
2893 	/* If this is just a dirty<->clean transition, and the array is clean
2894 	 * and 'events' is odd, we can roll back to the previous clean state */
2895 	if (nospares
2896 	    && (mddev->in_sync && mddev->resync_offset == MaxSector)
2897 	    && mddev->can_decrease_events
2898 	    && mddev->events != 1) {
2899 		mddev->events--;
2900 		mddev->can_decrease_events = 0;
2901 	} else {
2902 		/* otherwise we have to go forward and ... */
2903 		mddev->events ++;
2904 		mddev->can_decrease_events = nospares;
2905 	}
2906 
2907 	/*
2908 	 * This 64-bit counter should never wrap.
2909 	 * Either we are in around ~1 trillion A.C., assuming
2910 	 * 1 reboot per second, or we have a bug...
2911 	 */
2912 	WARN_ON(mddev->events == 0);
2913 
2914 	rdev_for_each(rdev, mddev) {
2915 		if (rdev->badblocks.changed)
2916 			any_badblocks_changed++;
2917 		if (test_bit(Faulty, &rdev->flags))
2918 			set_bit(FaultRecorded, &rdev->flags);
2919 	}
2920 
2921 	sync_sbs(mddev, nospares);
2922 	spin_unlock(&mddev->lock);
2923 
2924 	pr_debug("md: updating %s RAID superblock on device (in sync %d)\n",
2925 		 mdname(mddev), mddev->in_sync);
2926 
2927 	mddev_add_trace_msg(mddev, "md md_update_sb");
2928 rewrite:
2929 	if (md_bitmap_enabled(mddev, false))
2930 		mddev->bitmap_ops->update_sb(mddev->bitmap);
2931 	rdev_for_each(rdev, mddev) {
2932 		if (rdev->sb_loaded != 1)
2933 			continue; /* no noise on spare devices */
2934 
2935 		if (!test_bit(Faulty, &rdev->flags)) {
2936 			md_write_metadata(mddev, rdev, rdev->sb_start,
2937 					  rdev->sb_size, rdev->sb_page, 0);
2938 			pr_debug("md: (write) %pg's sb offset: %llu\n",
2939 				 rdev->bdev,
2940 				 (unsigned long long)rdev->sb_start);
2941 			rdev->sb_events = mddev->events;
2942 			if (rdev->badblocks.size) {
2943 				md_write_metadata(mddev, rdev,
2944 						  rdev->badblocks.sector,
2945 						  rdev->badblocks.size << 9,
2946 						  rdev->bb_page, 0);
2947 				rdev->badblocks.size = 0;
2948 			}
2949 
2950 		} else
2951 			pr_debug("md: %pg (skipping faulty)\n",
2952 				 rdev->bdev);
2953 	}
2954 	if (md_super_wait(mddev) < 0)
2955 		goto rewrite;
2956 	/* if there was a failure, MD_SB_CHANGE_DEVS was set, and we re-write super */
2957 
2958 	if (mddev_is_clustered(mddev) && ret == 0)
2959 		mddev->cluster_ops->metadata_update_finish(mddev);
2960 
2961 	if (mddev->in_sync != sync_req ||
2962 	    !bit_clear_unless(&mddev->sb_flags, BIT(MD_SB_CHANGE_PENDING),
2963 			       BIT(MD_SB_CHANGE_DEVS) | BIT(MD_SB_CHANGE_CLEAN)))
2964 		/* have to write it out again */
2965 		goto repeat;
2966 	wake_up(&mddev->sb_wait);
2967 	if (test_bit(MD_RECOVERY_RUNNING, &mddev->recovery))
2968 		sysfs_notify_dirent_safe(mddev->sysfs_completed);
2969 
2970 	rdev_for_each(rdev, mddev) {
2971 		if (test_and_clear_bit(FaultRecorded, &rdev->flags))
2972 			clear_bit(Blocked, &rdev->flags);
2973 
2974 		if (any_badblocks_changed)
2975 			ack_all_badblocks(&rdev->badblocks);
2976 		clear_bit(BlockedBadBlocks, &rdev->flags);
2977 		wake_up(&rdev->blocked_wait);
2978 	}
2979 }
2980 EXPORT_SYMBOL(md_update_sb);
2981 
2982 static int add_bound_rdev(struct md_rdev *rdev)
2983 {
2984 	struct mddev *mddev = rdev->mddev;
2985 	int err = 0;
2986 	bool add_journal = test_bit(Journal, &rdev->flags);
2987 
2988 	if (!mddev->pers->hot_remove_disk || add_journal) {
2989 		/* If there is hot_add_disk but no hot_remove_disk
2990 		 * then added disks for geometry changes,
2991 		 * and should be added immediately.
2992 		 */
2993 		super_types[mddev->major_version].
2994 			validate_super(mddev, NULL/*freshest*/, rdev);
2995 		err = mddev->pers->hot_add_disk(mddev, rdev);
2996 		if (err) {
2997 			md_kick_rdev_from_array(rdev);
2998 			return err;
2999 		}
3000 	}
3001 	sysfs_notify_dirent_safe(rdev->sysfs_state);
3002 
3003 	set_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags);
3004 	if (mddev->degraded)
3005 		set_bit(MD_RECOVERY_RECOVER, &mddev->recovery);
3006 	set_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
3007 	md_new_event();
3008 	return 0;
3009 }
3010 
3011 /* words written to sysfs files may, or may not, be \n terminated.
3012  * We want to accept with case. For this we use cmd_match.
3013  */
3014 static int cmd_match(const char *cmd, const char *str)
3015 {
3016 	/* See if cmd, written into a sysfs file, matches
3017 	 * str.  They must either be the same, or cmd can
3018 	 * have a trailing newline
3019 	 */
3020 	while (*cmd && *str && *cmd == *str) {
3021 		cmd++;
3022 		str++;
3023 	}
3024 	if (*cmd == '\n')
3025 		cmd++;
3026 	if (*str || *cmd)
3027 		return 0;
3028 	return 1;
3029 }
3030 
3031 struct rdev_sysfs_entry {
3032 	struct attribute attr;
3033 	ssize_t (*show)(struct md_rdev *, char *);
3034 	ssize_t (*store)(struct md_rdev *, const char *, size_t);
3035 };
3036 
3037 static ssize_t
3038 state_show(struct md_rdev *rdev, char *page)
3039 {
3040 	char *sep = ",";
3041 	size_t len = 0;
3042 	unsigned long flags = READ_ONCE(rdev->flags);
3043 
3044 	if (test_bit(Faulty, &flags) ||
3045 	    (!test_bit(ExternalBbl, &flags) &&
3046 	    rdev->badblocks.unacked_exist))
3047 		len += sprintf(page+len, "faulty%s", sep);
3048 	if (test_bit(In_sync, &flags))
3049 		len += sprintf(page+len, "in_sync%s", sep);
3050 	if (test_bit(Journal, &flags))
3051 		len += sprintf(page+len, "journal%s", sep);
3052 	if (test_bit(WriteMostly, &flags))
3053 		len += sprintf(page+len, "write_mostly%s", sep);
3054 	if (test_bit(Blocked, &flags) ||
3055 	    (rdev->badblocks.unacked_exist
3056 	     && !test_bit(Faulty, &flags)))
3057 		len += sprintf(page+len, "blocked%s", sep);
3058 	if (!test_bit(Faulty, &flags) &&
3059 	    !test_bit(Journal, &flags) &&
3060 	    !test_bit(In_sync, &flags))
3061 		len += sprintf(page+len, "spare%s", sep);
3062 	if (test_bit(WriteErrorSeen, &flags))
3063 		len += sprintf(page+len, "write_error%s", sep);
3064 	if (test_bit(WantReplacement, &flags))
3065 		len += sprintf(page+len, "want_replacement%s", sep);
3066 	if (test_bit(Replacement, &flags))
3067 		len += sprintf(page+len, "replacement%s", sep);
3068 	if (test_bit(ExternalBbl, &flags))
3069 		len += sprintf(page+len, "external_bbl%s", sep);
3070 	if (test_bit(FailFast, &flags))
3071 		len += sprintf(page+len, "failfast%s", sep);
3072 
3073 	if (len)
3074 		len -= strlen(sep);
3075 
3076 	return len+sprintf(page+len, "\n");
3077 }
3078 
3079 static ssize_t
3080 state_store(struct md_rdev *rdev, const char *buf, size_t len)
3081 {
3082 	/* can write
3083 	 *  faulty  - simulates an error
3084 	 *  remove  - disconnects the device
3085 	 *  writemostly - sets write_mostly
3086 	 *  -writemostly - clears write_mostly
3087 	 *  blocked - sets the Blocked flags
3088 	 *  -blocked - clears the Blocked and possibly simulates an error
3089 	 *  insync - sets Insync providing device isn't active
3090 	 *  -insync - clear Insync for a device with a slot assigned,
3091 	 *            so that it gets rebuilt based on bitmap
3092 	 *  write_error - sets WriteErrorSeen
3093 	 *  -write_error - clears WriteErrorSeen
3094 	 *  {,-}failfast - set/clear FailFast
3095 	 */
3096 
3097 	struct mddev *mddev = rdev->mddev;
3098 	int err = -EINVAL;
3099 	bool need_update_sb = false;
3100 
3101 	if (cmd_match(buf, "faulty") && rdev->mddev->pers) {
3102 		md_error(rdev->mddev, rdev);
3103 
3104 		if (test_bit(MD_BROKEN, &rdev->mddev->flags))
3105 			err = -EBUSY;
3106 		else
3107 			err = 0;
3108 	} else if (cmd_match(buf, "remove")) {
3109 		if (rdev->mddev->pers) {
3110 			clear_bit(Blocked, &rdev->flags);
3111 			remove_and_add_spares(rdev->mddev, rdev);
3112 		}
3113 		if (rdev->raid_disk >= 0)
3114 			err = -EBUSY;
3115 		else {
3116 			err = 0;
3117 			if (mddev_is_clustered(mddev))
3118 				err = mddev->cluster_ops->remove_disk(mddev, rdev);
3119 
3120 			if (err == 0) {
3121 				md_kick_rdev_from_array(rdev);
3122 				if (mddev->pers)
3123 					set_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags);
3124 				md_new_event();
3125 			}
3126 		}
3127 	} else if (cmd_match(buf, "writemostly")) {
3128 		set_bit(WriteMostly, &rdev->flags);
3129 		mddev_create_serial_pool(rdev->mddev, rdev);
3130 		need_update_sb = true;
3131 		err = 0;
3132 	} else if (cmd_match(buf, "-writemostly")) {
3133 		mddev_destroy_serial_pool(rdev->mddev, rdev);
3134 		clear_bit(WriteMostly, &rdev->flags);
3135 		need_update_sb = true;
3136 		err = 0;
3137 	} else if (cmd_match(buf, "blocked")) {
3138 		set_bit(Blocked, &rdev->flags);
3139 		err = 0;
3140 	} else if (cmd_match(buf, "-blocked")) {
3141 		if (!test_bit(Faulty, &rdev->flags) &&
3142 		    !test_bit(ExternalBbl, &rdev->flags) &&
3143 		    rdev->badblocks.unacked_exist) {
3144 			/* metadata handler doesn't understand badblocks,
3145 			 * so we need to fail the device
3146 			 */
3147 			md_error(rdev->mddev, rdev);
3148 		}
3149 		clear_bit(Blocked, &rdev->flags);
3150 		clear_bit(BlockedBadBlocks, &rdev->flags);
3151 		wake_up(&rdev->blocked_wait);
3152 		set_bit(MD_RECOVERY_NEEDED, &rdev->mddev->recovery);
3153 
3154 		err = 0;
3155 	} else if (cmd_match(buf, "insync") && rdev->raid_disk == -1) {
3156 		set_bit(In_sync, &rdev->flags);
3157 		err = 0;
3158 	} else if (cmd_match(buf, "failfast")) {
3159 		set_bit(FailFast, &rdev->flags);
3160 		need_update_sb = true;
3161 		err = 0;
3162 	} else if (cmd_match(buf, "-failfast")) {
3163 		clear_bit(FailFast, &rdev->flags);
3164 		need_update_sb = true;
3165 		err = 0;
3166 	} else if (cmd_match(buf, "-insync") && rdev->raid_disk >= 0 &&
3167 		   !test_bit(Journal, &rdev->flags)) {
3168 		if (rdev->mddev->pers == NULL) {
3169 			clear_bit(In_sync, &rdev->flags);
3170 			rdev->saved_raid_disk = rdev->raid_disk;
3171 			rdev->raid_disk = -1;
3172 			err = 0;
3173 		}
3174 	} else if (cmd_match(buf, "write_error")) {
3175 		set_bit(WriteErrorSeen, &rdev->flags);
3176 		err = 0;
3177 	} else if (cmd_match(buf, "-write_error")) {
3178 		clear_bit(WriteErrorSeen, &rdev->flags);
3179 		err = 0;
3180 	} else if (cmd_match(buf, "want_replacement")) {
3181 		/* Any non-spare device that is not a replacement can
3182 		 * become want_replacement at any time, but we then need to
3183 		 * check if recovery is needed.
3184 		 */
3185 		if (rdev->raid_disk >= 0 &&
3186 		    !test_bit(Journal, &rdev->flags) &&
3187 		    !test_bit(Replacement, &rdev->flags))
3188 			set_bit(WantReplacement, &rdev->flags);
3189 		set_bit(MD_RECOVERY_NEEDED, &rdev->mddev->recovery);
3190 		err = 0;
3191 	} else if (cmd_match(buf, "-want_replacement")) {
3192 		/* Clearing 'want_replacement' is always allowed.
3193 		 * Once replacements starts it is too late though.
3194 		 */
3195 		err = 0;
3196 		clear_bit(WantReplacement, &rdev->flags);
3197 	} else if (cmd_match(buf, "replacement")) {
3198 		/* Can only set a device as a replacement when array has not
3199 		 * yet been started.  Once running, replacement is automatic
3200 		 * from spares, or by assigning 'slot'.
3201 		 */
3202 		if (rdev->mddev->pers)
3203 			err = -EBUSY;
3204 		else {
3205 			set_bit(Replacement, &rdev->flags);
3206 			err = 0;
3207 		}
3208 	} else if (cmd_match(buf, "-replacement")) {
3209 		/* Similarly, can only clear Replacement before start */
3210 		if (rdev->mddev->pers)
3211 			err = -EBUSY;
3212 		else {
3213 			clear_bit(Replacement, &rdev->flags);
3214 			err = 0;
3215 		}
3216 	} else if (cmd_match(buf, "re-add")) {
3217 		if (!rdev->mddev->pers)
3218 			err = -EINVAL;
3219 		else if (test_bit(Faulty, &rdev->flags) && (rdev->raid_disk == -1) &&
3220 				rdev->saved_raid_disk >= 0) {
3221 			/* clear_bit is performed _after_ all the devices
3222 			 * have their local Faulty bit cleared. If any writes
3223 			 * happen in the meantime in the local node, they
3224 			 * will land in the local bitmap, which will be synced
3225 			 * by this node eventually
3226 			 */
3227 			if (!mddev_is_clustered(rdev->mddev) ||
3228 			    (err = mddev->cluster_ops->gather_bitmaps(rdev)) == 0) {
3229 				clear_bit(Faulty, &rdev->flags);
3230 				err = add_bound_rdev(rdev);
3231 			}
3232 		} else
3233 			err = -EBUSY;
3234 	} else if (cmd_match(buf, "external_bbl") && (rdev->mddev->external)) {
3235 		set_bit(ExternalBbl, &rdev->flags);
3236 		rdev->badblocks.shift = 0;
3237 		err = 0;
3238 	} else if (cmd_match(buf, "-external_bbl") && (rdev->mddev->external)) {
3239 		clear_bit(ExternalBbl, &rdev->flags);
3240 		err = 0;
3241 	}
3242 	if (need_update_sb)
3243 		md_update_sb(mddev, 1);
3244 	if (!err)
3245 		sysfs_notify_dirent_safe(rdev->sysfs_state);
3246 	return err ? err : len;
3247 }
3248 static struct rdev_sysfs_entry rdev_state =
3249 __ATTR_PREALLOC(state, S_IRUGO|S_IWUSR, state_show, state_store);
3250 
3251 static ssize_t
3252 errors_show(struct md_rdev *rdev, char *page)
3253 {
3254 	return sprintf(page, "%d\n", atomic_read(&rdev->corrected_errors));
3255 }
3256 
3257 static ssize_t
3258 errors_store(struct md_rdev *rdev, const char *buf, size_t len)
3259 {
3260 	unsigned int n;
3261 	int rv;
3262 
3263 	rv = kstrtouint(buf, 10, &n);
3264 	if (rv < 0)
3265 		return rv;
3266 	atomic_set(&rdev->corrected_errors, n);
3267 	return len;
3268 }
3269 static struct rdev_sysfs_entry rdev_errors =
3270 __ATTR(errors, S_IRUGO|S_IWUSR, errors_show, errors_store);
3271 
3272 static ssize_t
3273 slot_show(struct md_rdev *rdev, char *page)
3274 {
3275 	if (test_bit(Journal, &rdev->flags))
3276 		return sprintf(page, "journal\n");
3277 	else if (rdev->raid_disk < 0)
3278 		return sprintf(page, "none\n");
3279 	else
3280 		return sprintf(page, "%d\n", rdev->raid_disk);
3281 }
3282 
3283 static ssize_t
3284 slot_store(struct md_rdev *rdev, const char *buf, size_t len)
3285 {
3286 	int slot;
3287 	int err;
3288 
3289 	if (test_bit(Journal, &rdev->flags))
3290 		return -EBUSY;
3291 	if (strncmp(buf, "none", 4)==0)
3292 		slot = -1;
3293 	else {
3294 		err = kstrtouint(buf, 10, (unsigned int *)&slot);
3295 		if (err < 0)
3296 			return err;
3297 		if (slot < 0)
3298 			/* overflow */
3299 			return -ENOSPC;
3300 	}
3301 	if (rdev->mddev->pers && slot == -1) {
3302 		/* Setting 'slot' on an active array requires also
3303 		 * updating the 'rd%d' link, and communicating
3304 		 * with the personality with ->hot_*_disk.
3305 		 * For now we only support removing
3306 		 * failed/spare devices.  This normally happens automatically,
3307 		 * but not when the metadata is externally managed.
3308 		 */
3309 		if (rdev->raid_disk == -1)
3310 			return -EEXIST;
3311 		/* personality does all needed checks */
3312 		if (rdev->mddev->pers->hot_remove_disk == NULL)
3313 			return -EINVAL;
3314 		clear_bit(Blocked, &rdev->flags);
3315 		remove_and_add_spares(rdev->mddev, rdev);
3316 		if (rdev->raid_disk >= 0)
3317 			return -EBUSY;
3318 		set_bit(MD_RECOVERY_NEEDED, &rdev->mddev->recovery);
3319 	} else if (rdev->mddev->pers) {
3320 		/* Activating a spare .. or possibly reactivating
3321 		 * if we ever get bitmaps working here.
3322 		 */
3323 		int err;
3324 
3325 		if (rdev->raid_disk != -1)
3326 			return -EBUSY;
3327 
3328 		if (test_bit(MD_RECOVERY_RUNNING, &rdev->mddev->recovery))
3329 			return -EBUSY;
3330 
3331 		if (rdev->mddev->pers->hot_add_disk == NULL)
3332 			return -EINVAL;
3333 
3334 		if (slot >= rdev->mddev->raid_disks &&
3335 		    slot >= rdev->mddev->raid_disks + rdev->mddev->delta_disks)
3336 			return -ENOSPC;
3337 
3338 		rdev->raid_disk = slot;
3339 		if (test_bit(In_sync, &rdev->flags))
3340 			rdev->saved_raid_disk = slot;
3341 		else
3342 			rdev->saved_raid_disk = -1;
3343 		clear_bit(In_sync, &rdev->flags);
3344 		clear_bit(Bitmap_sync, &rdev->flags);
3345 		err = rdev->mddev->pers->hot_add_disk(rdev->mddev, rdev);
3346 		if (err) {
3347 			rdev->raid_disk = -1;
3348 			return err;
3349 		} else
3350 			sysfs_notify_dirent_safe(rdev->sysfs_state);
3351 		/* failure here is OK */;
3352 		sysfs_link_rdev(rdev->mddev, rdev);
3353 		/* don't wakeup anyone, leave that to userspace. */
3354 	} else {
3355 		if (slot >= rdev->mddev->raid_disks &&
3356 		    slot >= rdev->mddev->raid_disks + rdev->mddev->delta_disks)
3357 			return -ENOSPC;
3358 		rdev->raid_disk = slot;
3359 		/* assume it is working */
3360 		clear_bit(Faulty, &rdev->flags);
3361 		clear_bit(WriteMostly, &rdev->flags);
3362 		set_bit(In_sync, &rdev->flags);
3363 		sysfs_notify_dirent_safe(rdev->sysfs_state);
3364 	}
3365 	return len;
3366 }
3367 
3368 static struct rdev_sysfs_entry rdev_slot =
3369 __ATTR(slot, S_IRUGO|S_IWUSR, slot_show, slot_store);
3370 
3371 static ssize_t
3372 offset_show(struct md_rdev *rdev, char *page)
3373 {
3374 	return sprintf(page, "%llu\n", (unsigned long long)rdev->data_offset);
3375 }
3376 
3377 static ssize_t
3378 offset_store(struct md_rdev *rdev, const char *buf, size_t len)
3379 {
3380 	unsigned long long offset;
3381 	if (kstrtoull(buf, 10, &offset) < 0)
3382 		return -EINVAL;
3383 	if (rdev->mddev->pers && rdev->raid_disk >= 0)
3384 		return -EBUSY;
3385 	if (rdev->sectors && rdev->mddev->external)
3386 		/* Must set offset before size, so overlap checks
3387 		 * can be sane */
3388 		return -EBUSY;
3389 	rdev->data_offset = offset;
3390 	rdev->new_data_offset = offset;
3391 	return len;
3392 }
3393 
3394 static struct rdev_sysfs_entry rdev_offset =
3395 __ATTR(offset, S_IRUGO|S_IWUSR, offset_show, offset_store);
3396 
3397 static ssize_t new_offset_show(struct md_rdev *rdev, char *page)
3398 {
3399 	return sprintf(page, "%llu\n",
3400 		       (unsigned long long)rdev->new_data_offset);
3401 }
3402 
3403 static ssize_t new_offset_store(struct md_rdev *rdev,
3404 				const char *buf, size_t len)
3405 {
3406 	unsigned long long new_offset;
3407 	struct mddev *mddev = rdev->mddev;
3408 
3409 	if (kstrtoull(buf, 10, &new_offset) < 0)
3410 		return -EINVAL;
3411 
3412 	if (test_bit(MD_RECOVERY_RUNNING, &mddev->recovery))
3413 		return -EBUSY;
3414 	if (new_offset == rdev->data_offset)
3415 		/* reset is always permitted */
3416 		;
3417 	else if (new_offset > rdev->data_offset) {
3418 		/* must not push array size beyond rdev_sectors */
3419 		if (new_offset - rdev->data_offset
3420 		    + mddev->dev_sectors > rdev->sectors)
3421 				return -E2BIG;
3422 	}
3423 	/* Metadata worries about other space details. */
3424 
3425 	/* decreasing the offset is inconsistent with a backwards
3426 	 * reshape.
3427 	 */
3428 	if (new_offset < rdev->data_offset &&
3429 	    mddev->reshape_backwards)
3430 		return -EINVAL;
3431 	/* Increasing offset is inconsistent with forwards
3432 	 * reshape.  reshape_direction should be set to
3433 	 * 'backwards' first.
3434 	 */
3435 	if (new_offset > rdev->data_offset &&
3436 	    !mddev->reshape_backwards)
3437 		return -EINVAL;
3438 
3439 	if (mddev->pers && mddev->persistent &&
3440 	    !super_types[mddev->major_version]
3441 	    .allow_new_offset(rdev, new_offset))
3442 		return -E2BIG;
3443 	rdev->new_data_offset = new_offset;
3444 	if (new_offset > rdev->data_offset)
3445 		mddev->reshape_backwards = 1;
3446 	else if (new_offset < rdev->data_offset)
3447 		mddev->reshape_backwards = 0;
3448 
3449 	return len;
3450 }
3451 static struct rdev_sysfs_entry rdev_new_offset =
3452 __ATTR(new_offset, S_IRUGO|S_IWUSR, new_offset_show, new_offset_store);
3453 
3454 static ssize_t
3455 rdev_size_show(struct md_rdev *rdev, char *page)
3456 {
3457 	return sprintf(page, "%llu\n", (unsigned long long)rdev->sectors / 2);
3458 }
3459 
3460 static int md_rdevs_overlap(struct md_rdev *a, struct md_rdev *b)
3461 {
3462 	/* check if two start/length pairs overlap */
3463 	if (a->data_offset + a->sectors <= b->data_offset)
3464 		return false;
3465 	if (b->data_offset + b->sectors <= a->data_offset)
3466 		return false;
3467 	return true;
3468 }
3469 
3470 static bool md_rdev_overlaps(struct md_rdev *rdev)
3471 {
3472 	struct mddev *mddev;
3473 	struct md_rdev *rdev2;
3474 
3475 	spin_lock(&all_mddevs_lock);
3476 	list_for_each_entry(mddev, &all_mddevs, all_mddevs) {
3477 		if (test_bit(MD_DELETED, &mddev->flags))
3478 			continue;
3479 		rdev_for_each(rdev2, mddev) {
3480 			if (rdev != rdev2 && rdev->bdev == rdev2->bdev &&
3481 			    md_rdevs_overlap(rdev, rdev2)) {
3482 				spin_unlock(&all_mddevs_lock);
3483 				return true;
3484 			}
3485 		}
3486 	}
3487 	spin_unlock(&all_mddevs_lock);
3488 	return false;
3489 }
3490 
3491 static int strict_blocks_to_sectors(const char *buf, sector_t *sectors)
3492 {
3493 	unsigned long long blocks;
3494 	sector_t new;
3495 
3496 	if (kstrtoull(buf, 10, &blocks) < 0)
3497 		return -EINVAL;
3498 
3499 	if (blocks & 1ULL << (8 * sizeof(blocks) - 1))
3500 		return -EINVAL; /* sector conversion overflow */
3501 
3502 	new = blocks * 2;
3503 	if (new != blocks * 2)
3504 		return -EINVAL; /* unsigned long long to sector_t overflow */
3505 
3506 	*sectors = new;
3507 	return 0;
3508 }
3509 
3510 static ssize_t
3511 rdev_size_store(struct md_rdev *rdev, const char *buf, size_t len)
3512 {
3513 	struct mddev *my_mddev = rdev->mddev;
3514 	sector_t oldsectors = rdev->sectors;
3515 	sector_t sectors;
3516 
3517 	if (test_bit(Journal, &rdev->flags))
3518 		return -EBUSY;
3519 	if (strict_blocks_to_sectors(buf, &sectors) < 0)
3520 		return -EINVAL;
3521 	if (rdev->data_offset != rdev->new_data_offset)
3522 		return -EINVAL; /* too confusing */
3523 	if (my_mddev->pers && rdev->raid_disk >= 0) {
3524 		if (my_mddev->persistent) {
3525 			sectors = super_types[my_mddev->major_version].
3526 				rdev_size_change(rdev, sectors);
3527 			if (!sectors)
3528 				return -EBUSY;
3529 		} else if (!sectors)
3530 			sectors = bdev_nr_sectors(rdev->bdev) -
3531 				rdev->data_offset;
3532 		if (!my_mddev->pers->resize)
3533 			/* Cannot change size for RAID0 or Linear etc */
3534 			return -EINVAL;
3535 	}
3536 	if (sectors < my_mddev->dev_sectors)
3537 		return -EINVAL; /* component must fit device */
3538 
3539 	rdev->sectors = sectors;
3540 
3541 	/*
3542 	 * Check that all other rdevs with the same bdev do not overlap.  This
3543 	 * check does not provide a hard guarantee, it just helps avoid
3544 	 * dangerous mistakes.
3545 	 */
3546 	if (sectors > oldsectors && my_mddev->external &&
3547 	    md_rdev_overlaps(rdev)) {
3548 		/*
3549 		 * Someone else could have slipped in a size change here, but
3550 		 * doing so is just silly.  We put oldsectors back because we
3551 		 * know it is safe, and trust userspace not to race with itself.
3552 		 */
3553 		rdev->sectors = oldsectors;
3554 		return -EBUSY;
3555 	}
3556 	return len;
3557 }
3558 
3559 static struct rdev_sysfs_entry rdev_size =
3560 __ATTR(size, S_IRUGO|S_IWUSR, rdev_size_show, rdev_size_store);
3561 
3562 static ssize_t recovery_start_show(struct md_rdev *rdev, char *page)
3563 {
3564 	unsigned long long recovery_start = rdev->recovery_offset;
3565 
3566 	if (test_bit(In_sync, &rdev->flags) ||
3567 	    recovery_start == MaxSector)
3568 		return sprintf(page, "none\n");
3569 
3570 	return sprintf(page, "%llu\n", recovery_start);
3571 }
3572 
3573 static ssize_t recovery_start_store(struct md_rdev *rdev, const char *buf, size_t len)
3574 {
3575 	unsigned long long recovery_start;
3576 
3577 	if (cmd_match(buf, "none"))
3578 		recovery_start = MaxSector;
3579 	else if (kstrtoull(buf, 10, &recovery_start))
3580 		return -EINVAL;
3581 
3582 	if (rdev->mddev->pers &&
3583 	    rdev->raid_disk >= 0)
3584 		return -EBUSY;
3585 
3586 	rdev->recovery_offset = recovery_start;
3587 	if (recovery_start == MaxSector)
3588 		set_bit(In_sync, &rdev->flags);
3589 	else
3590 		clear_bit(In_sync, &rdev->flags);
3591 	return len;
3592 }
3593 
3594 static struct rdev_sysfs_entry rdev_recovery_start =
3595 __ATTR(recovery_start, S_IRUGO|S_IWUSR, recovery_start_show, recovery_start_store);
3596 
3597 /* sysfs access to bad-blocks list.
3598  * We present two files.
3599  * 'bad-blocks' lists sector numbers and lengths of ranges that
3600  *    are recorded as bad.  The list is truncated to fit within
3601  *    the one-page limit of sysfs.
3602  *    Writing "sector length" to this file adds an acknowledged
3603  *    bad block list.
3604  * 'unacknowledged-bad-blocks' lists bad blocks that have not yet
3605  *    been acknowledged.  Writing to this file adds bad blocks
3606  *    without acknowledging them.  This is largely for testing.
3607  */
3608 static ssize_t bb_show(struct md_rdev *rdev, char *page)
3609 {
3610 	return badblocks_show(&rdev->badblocks, page, 0);
3611 }
3612 static ssize_t bb_store(struct md_rdev *rdev, const char *page, size_t len)
3613 {
3614 	int rv = badblocks_store(&rdev->badblocks, page, len, 0);
3615 	/* Maybe that ack was all we needed */
3616 	if (test_and_clear_bit(BlockedBadBlocks, &rdev->flags))
3617 		wake_up(&rdev->blocked_wait);
3618 	return rv;
3619 }
3620 static struct rdev_sysfs_entry rdev_bad_blocks =
3621 __ATTR(bad_blocks, S_IRUGO|S_IWUSR, bb_show, bb_store);
3622 
3623 static ssize_t ubb_show(struct md_rdev *rdev, char *page)
3624 {
3625 	return badblocks_show(&rdev->badblocks, page, 1);
3626 }
3627 static ssize_t ubb_store(struct md_rdev *rdev, const char *page, size_t len)
3628 {
3629 	return badblocks_store(&rdev->badblocks, page, len, 1);
3630 }
3631 static struct rdev_sysfs_entry rdev_unack_bad_blocks =
3632 __ATTR(unacknowledged_bad_blocks, S_IRUGO|S_IWUSR, ubb_show, ubb_store);
3633 
3634 static ssize_t
3635 ppl_sector_show(struct md_rdev *rdev, char *page)
3636 {
3637 	return sprintf(page, "%llu\n", (unsigned long long)rdev->ppl.sector);
3638 }
3639 
3640 static ssize_t
3641 ppl_sector_store(struct md_rdev *rdev, const char *buf, size_t len)
3642 {
3643 	unsigned long long sector;
3644 
3645 	if (kstrtoull(buf, 10, &sector) < 0)
3646 		return -EINVAL;
3647 	if (sector != (sector_t)sector)
3648 		return -EINVAL;
3649 
3650 	if (rdev->mddev->pers && test_bit(MD_HAS_PPL, &rdev->mddev->flags) &&
3651 	    rdev->raid_disk >= 0)
3652 		return -EBUSY;
3653 
3654 	if (rdev->mddev->persistent) {
3655 		if (rdev->mddev->major_version == 0)
3656 			return -EINVAL;
3657 		if ((sector > rdev->sb_start &&
3658 		     sector - rdev->sb_start > S16_MAX) ||
3659 		    (sector < rdev->sb_start &&
3660 		     rdev->sb_start - sector > -S16_MIN))
3661 			return -EINVAL;
3662 		rdev->ppl.offset = sector - rdev->sb_start;
3663 	} else if (!rdev->mddev->external) {
3664 		return -EBUSY;
3665 	}
3666 	rdev->ppl.sector = sector;
3667 	return len;
3668 }
3669 
3670 static struct rdev_sysfs_entry rdev_ppl_sector =
3671 __ATTR(ppl_sector, S_IRUGO|S_IWUSR, ppl_sector_show, ppl_sector_store);
3672 
3673 static ssize_t
3674 ppl_size_show(struct md_rdev *rdev, char *page)
3675 {
3676 	return sprintf(page, "%u\n", rdev->ppl.size);
3677 }
3678 
3679 static ssize_t
3680 ppl_size_store(struct md_rdev *rdev, const char *buf, size_t len)
3681 {
3682 	unsigned int size;
3683 
3684 	if (kstrtouint(buf, 10, &size) < 0)
3685 		return -EINVAL;
3686 
3687 	if (rdev->mddev->pers && test_bit(MD_HAS_PPL, &rdev->mddev->flags) &&
3688 	    rdev->raid_disk >= 0)
3689 		return -EBUSY;
3690 
3691 	if (rdev->mddev->persistent) {
3692 		if (rdev->mddev->major_version == 0)
3693 			return -EINVAL;
3694 		if (size > U16_MAX)
3695 			return -EINVAL;
3696 	} else if (!rdev->mddev->external) {
3697 		return -EBUSY;
3698 	}
3699 	rdev->ppl.size = size;
3700 	return len;
3701 }
3702 
3703 static struct rdev_sysfs_entry rdev_ppl_size =
3704 __ATTR(ppl_size, S_IRUGO|S_IWUSR, ppl_size_show, ppl_size_store);
3705 
3706 static struct attribute *rdev_default_attrs[] = {
3707 	&rdev_state.attr,
3708 	&rdev_errors.attr,
3709 	&rdev_slot.attr,
3710 	&rdev_offset.attr,
3711 	&rdev_new_offset.attr,
3712 	&rdev_size.attr,
3713 	&rdev_recovery_start.attr,
3714 	&rdev_bad_blocks.attr,
3715 	&rdev_unack_bad_blocks.attr,
3716 	&rdev_ppl_sector.attr,
3717 	&rdev_ppl_size.attr,
3718 	NULL,
3719 };
3720 ATTRIBUTE_GROUPS(rdev_default);
3721 static ssize_t
3722 rdev_attr_show(struct kobject *kobj, struct attribute *attr, char *page)
3723 {
3724 	struct rdev_sysfs_entry *entry = container_of(attr, struct rdev_sysfs_entry, attr);
3725 	struct md_rdev *rdev = container_of(kobj, struct md_rdev, kobj);
3726 
3727 	if (!entry->show)
3728 		return -EIO;
3729 	if (!rdev->mddev)
3730 		return -ENODEV;
3731 	return entry->show(rdev, page);
3732 }
3733 
3734 static ssize_t
3735 rdev_attr_store(struct kobject *kobj, struct attribute *attr,
3736 	      const char *page, size_t length)
3737 {
3738 	struct rdev_sysfs_entry *entry = container_of(attr, struct rdev_sysfs_entry, attr);
3739 	struct md_rdev *rdev = container_of(kobj, struct md_rdev, kobj);
3740 	struct kernfs_node *kn = NULL;
3741 	bool suspend = false;
3742 	ssize_t rv;
3743 	struct mddev *mddev = READ_ONCE(rdev->mddev);
3744 
3745 	if (!entry->store)
3746 		return -EIO;
3747 	if (!capable(CAP_SYS_ADMIN))
3748 		return -EACCES;
3749 	if (!mddev)
3750 		return -ENODEV;
3751 
3752 	if (entry->store == state_store) {
3753 		if (cmd_match(page, "remove"))
3754 			kn = sysfs_break_active_protection(kobj, attr);
3755 		if (cmd_match(page, "remove") || cmd_match(page, "re-add") ||
3756 		    cmd_match(page, "writemostly") ||
3757 		    cmd_match(page, "-writemostly"))
3758 			suspend = true;
3759 	}
3760 
3761 	rv = suspend ? mddev_suspend_and_lock(mddev) : mddev_lock(mddev);
3762 	if (!rv) {
3763 		if (rdev->mddev == NULL)
3764 			rv = -ENODEV;
3765 		else
3766 			rv = entry->store(rdev, page, length);
3767 		suspend ? mddev_unlock_and_resume(mddev) : mddev_unlock(mddev);
3768 	}
3769 
3770 	if (kn)
3771 		sysfs_unbreak_active_protection(kn);
3772 
3773 	return rv;
3774 }
3775 
3776 static void rdev_free(struct kobject *ko)
3777 {
3778 	struct md_rdev *rdev = container_of(ko, struct md_rdev, kobj);
3779 	kfree(rdev);
3780 }
3781 static const struct sysfs_ops rdev_sysfs_ops = {
3782 	.show		= rdev_attr_show,
3783 	.store		= rdev_attr_store,
3784 };
3785 static const struct kobj_type rdev_ktype = {
3786 	.release	= rdev_free,
3787 	.sysfs_ops	= &rdev_sysfs_ops,
3788 	.default_groups	= rdev_default_groups,
3789 };
3790 
3791 int md_rdev_init(struct md_rdev *rdev)
3792 {
3793 	rdev->desc_nr = -1;
3794 	rdev->saved_raid_disk = -1;
3795 	rdev->raid_disk = -1;
3796 	rdev->flags = 0;
3797 	rdev->data_offset = 0;
3798 	rdev->new_data_offset = 0;
3799 	rdev->sb_events = 0;
3800 	rdev->last_read_error = 0;
3801 	rdev->sb_loaded = 0;
3802 	rdev->bb_page = NULL;
3803 	atomic_set(&rdev->nr_pending, 0);
3804 	atomic_set(&rdev->read_errors, 0);
3805 	atomic_set(&rdev->corrected_errors, 0);
3806 
3807 	INIT_LIST_HEAD(&rdev->same_set);
3808 	init_waitqueue_head(&rdev->blocked_wait);
3809 
3810 	/* Add space to store bad block list.
3811 	 * This reserves the space even on arrays where it cannot
3812 	 * be used - I wonder if that matters
3813 	 */
3814 	return badblocks_init(&rdev->badblocks, 0);
3815 }
3816 EXPORT_SYMBOL_GPL(md_rdev_init);
3817 
3818 /*
3819  * Import a device. If 'super_format' >= 0, then sanity check the superblock
3820  *
3821  * mark the device faulty if:
3822  *
3823  *   - the device is nonexistent (zero size)
3824  *   - the device has no valid superblock
3825  *
3826  * a faulty rdev _never_ has rdev->sb set.
3827  */
3828 static struct md_rdev *md_import_device(dev_t newdev, int super_format, int super_minor)
3829 {
3830 	struct md_rdev *rdev;
3831 	sector_t size;
3832 	int err;
3833 
3834 	rdev = kzalloc_obj(*rdev);
3835 	if (!rdev)
3836 		return ERR_PTR(-ENOMEM);
3837 
3838 	err = md_rdev_init(rdev);
3839 	if (err)
3840 		goto out_free_rdev;
3841 	err = alloc_disk_sb(rdev);
3842 	if (err)
3843 		goto out_clear_rdev;
3844 
3845 	rdev->bdev_file = bdev_file_open_by_dev(newdev,
3846 			BLK_OPEN_READ | BLK_OPEN_WRITE,
3847 			super_format == -2 ? &claim_rdev : rdev, NULL);
3848 	if (IS_ERR(rdev->bdev_file)) {
3849 		pr_warn("md: could not open device unknown-block(%u,%u).\n",
3850 			MAJOR(newdev), MINOR(newdev));
3851 		err = PTR_ERR(rdev->bdev_file);
3852 		goto out_clear_rdev;
3853 	}
3854 	rdev->bdev = file_bdev(rdev->bdev_file);
3855 
3856 	kobject_init(&rdev->kobj, &rdev_ktype);
3857 
3858 	size = bdev_nr_bytes(rdev->bdev) >> BLOCK_SIZE_BITS;
3859 	if (!size) {
3860 		pr_warn("md: %pg has zero or unknown size, marking faulty!\n",
3861 			rdev->bdev);
3862 		err = -EINVAL;
3863 		goto out_blkdev_put;
3864 	}
3865 
3866 	if (super_format >= 0) {
3867 		err = super_types[super_format].
3868 			load_super(rdev, NULL, super_minor);
3869 		if (err == -EINVAL) {
3870 			pr_warn("md: %pg does not have a valid v%d.%d superblock, not importing!\n",
3871 				rdev->bdev,
3872 				super_format, super_minor);
3873 			goto out_blkdev_put;
3874 		}
3875 		if (err < 0) {
3876 			pr_warn("md: could not read %pg's sb, not importing!\n",
3877 				rdev->bdev);
3878 			goto out_blkdev_put;
3879 		}
3880 	}
3881 
3882 	return rdev;
3883 
3884 out_blkdev_put:
3885 	fput(rdev->bdev_file);
3886 out_clear_rdev:
3887 	md_rdev_clear(rdev);
3888 out_free_rdev:
3889 	kfree(rdev);
3890 	return ERR_PTR(err);
3891 }
3892 
3893 /*
3894  * Check a full RAID array for plausibility
3895  */
3896 
3897 static int analyze_sbs(struct mddev *mddev)
3898 {
3899 	struct md_rdev *rdev, *freshest, *tmp;
3900 
3901 	freshest = NULL;
3902 	rdev_for_each_safe(rdev, tmp, mddev)
3903 		switch (super_types[mddev->major_version].
3904 			load_super(rdev, freshest, mddev->minor_version)) {
3905 		case 1:
3906 			freshest = rdev;
3907 			break;
3908 		case 0:
3909 			break;
3910 		default:
3911 			pr_warn("md: fatal superblock inconsistency in %pg -- removing from array\n",
3912 				rdev->bdev);
3913 			md_kick_rdev_from_array(rdev);
3914 		}
3915 
3916 	/* Cannot find a valid fresh disk */
3917 	if (!freshest) {
3918 		pr_warn("md: cannot find a valid disk\n");
3919 		return -EINVAL;
3920 	}
3921 
3922 	super_types[mddev->major_version].
3923 		validate_super(mddev, NULL/*freshest*/, freshest);
3924 
3925 	rdev_for_each_safe(rdev, tmp, mddev) {
3926 		if (mddev->max_disks &&
3927 		    rdev->desc_nr >= mddev->max_disks) {
3928 			pr_warn("md: %s: %pg: only %d devices permitted\n",
3929 				mdname(mddev), rdev->bdev,
3930 				mddev->max_disks);
3931 			md_kick_rdev_from_array(rdev);
3932 			continue;
3933 		}
3934 		if (rdev != freshest) {
3935 			if (super_types[mddev->major_version].
3936 			    validate_super(mddev, freshest, rdev)) {
3937 				pr_warn("md: kicking non-fresh %pg from array!\n",
3938 					rdev->bdev);
3939 				md_kick_rdev_from_array(rdev);
3940 				continue;
3941 			}
3942 		}
3943 		if (rdev->raid_disk >= (mddev->raid_disks - min(0, mddev->delta_disks)) &&
3944 		    !test_bit(Journal, &rdev->flags)) {
3945 			rdev->raid_disk = -1;
3946 			clear_bit(In_sync, &rdev->flags);
3947 		}
3948 	}
3949 
3950 	return 0;
3951 }
3952 
3953 /* Read a fixed-point number.
3954  * Numbers in sysfs attributes should be in "standard" units where
3955  * possible, so time should be in seconds.
3956  * However we internally use a a much smaller unit such as
3957  * milliseconds or jiffies.
3958  * This function takes a decimal number with a possible fractional
3959  * component, and produces an integer which is the result of
3960  * multiplying that number by 10^'scale'.
3961  * all without any floating-point arithmetic.
3962  */
3963 int strict_strtoul_scaled(const char *cp, unsigned long *res, int scale)
3964 {
3965 	unsigned long result = 0;
3966 	long decimals = -1;
3967 	while (isdigit(*cp) || (*cp == '.' && decimals < 0)) {
3968 		if (*cp == '.')
3969 			decimals = 0;
3970 		else if (decimals < scale) {
3971 			unsigned int value;
3972 			value = *cp - '0';
3973 			result = result * 10 + value;
3974 			if (decimals >= 0)
3975 				decimals++;
3976 		}
3977 		cp++;
3978 	}
3979 	if (*cp == '\n')
3980 		cp++;
3981 	if (*cp)
3982 		return -EINVAL;
3983 	if (decimals < 0)
3984 		decimals = 0;
3985 	*res = result * int_pow(10, scale - decimals);
3986 	return 0;
3987 }
3988 
3989 static ssize_t
3990 safe_delay_show(struct mddev *mddev, char *page)
3991 {
3992 	unsigned int msec = ((unsigned long)mddev->safemode_delay*1000)/HZ;
3993 
3994 	return sprintf(page, "%u.%03u\n", msec/1000, msec%1000);
3995 }
3996 static ssize_t
3997 safe_delay_store(struct mddev *mddev, const char *cbuf, size_t len)
3998 {
3999 	unsigned long msec;
4000 
4001 	if (mddev_is_clustered(mddev)) {
4002 		pr_warn("md: Safemode is disabled for clustered mode\n");
4003 		return -EINVAL;
4004 	}
4005 
4006 	if (strict_strtoul_scaled(cbuf, &msec, 3) < 0 || msec > UINT_MAX / HZ)
4007 		return -EINVAL;
4008 	if (msec == 0)
4009 		mddev->safemode_delay = 0;
4010 	else {
4011 		unsigned long old_delay = mddev->safemode_delay;
4012 		unsigned long new_delay = (msec*HZ)/1000;
4013 
4014 		if (new_delay == 0)
4015 			new_delay = 1;
4016 		mddev->safemode_delay = new_delay;
4017 		if (new_delay < old_delay || old_delay == 0)
4018 			mod_timer(&mddev->safemode_timer, jiffies+1);
4019 	}
4020 	return len;
4021 }
4022 static struct md_sysfs_entry md_safe_delay =
4023 __ATTR(safe_mode_delay, S_IRUGO|S_IWUSR,safe_delay_show, safe_delay_store);
4024 
4025 static ssize_t
4026 level_show(struct mddev *mddev, char *page)
4027 {
4028 	struct md_personality *p;
4029 	int ret;
4030 	spin_lock(&mddev->lock);
4031 	p = mddev->pers;
4032 	if (p)
4033 		ret = sprintf(page, "%s\n", p->head.name);
4034 	else if (mddev->clevel[0])
4035 		ret = sprintf(page, "%s\n", mddev->clevel);
4036 	else if (mddev->level != LEVEL_NONE)
4037 		ret = sprintf(page, "%d\n", mddev->level);
4038 	else
4039 		ret = 0;
4040 	spin_unlock(&mddev->lock);
4041 	return ret;
4042 }
4043 
4044 static ssize_t
4045 level_store(struct mddev *mddev, const char *buf, size_t len)
4046 {
4047 	char clevel[16];
4048 	ssize_t rv;
4049 	size_t slen = len;
4050 	struct md_personality *pers, *oldpers;
4051 	long level;
4052 	void *priv, *oldpriv;
4053 	struct md_rdev *rdev;
4054 
4055 	if (slen == 0 || slen >= sizeof(clevel))
4056 		return -EINVAL;
4057 
4058 	rv = mddev_suspend_and_lock(mddev);
4059 	if (rv)
4060 		return rv;
4061 
4062 	if (mddev->pers == NULL) {
4063 		memcpy(mddev->clevel, buf, slen);
4064 		if (mddev->clevel[slen-1] == '\n')
4065 			slen--;
4066 		mddev->clevel[slen] = 0;
4067 		mddev->level = LEVEL_NONE;
4068 		rv = len;
4069 		goto out_unlock;
4070 	}
4071 	rv = -EROFS;
4072 	if (!md_is_rdwr(mddev))
4073 		goto out_unlock;
4074 
4075 	/* request to change the personality.  Need to ensure:
4076 	 *  - array is not engaged in resync/recovery/reshape
4077 	 *  - old personality can be suspended
4078 	 *  - new personality will access other array.
4079 	 */
4080 
4081 	rv = -EBUSY;
4082 	if (test_bit(MD_RECOVERY_RUNNING, &mddev->recovery) ||
4083 	    mddev->reshape_position != MaxSector ||
4084 	    mddev->sysfs_active)
4085 		goto out_unlock;
4086 
4087 	rv = -EINVAL;
4088 	if (!mddev->pers->quiesce) {
4089 		pr_warn("md: %s: %s does not support online personality change\n",
4090 			mdname(mddev), mddev->pers->head.name);
4091 		goto out_unlock;
4092 	}
4093 
4094 	/* Now find the new personality */
4095 	memcpy(clevel, buf, slen);
4096 	if (clevel[slen-1] == '\n')
4097 		slen--;
4098 	clevel[slen] = 0;
4099 	if (kstrtol(clevel, 10, &level))
4100 		level = LEVEL_NONE;
4101 
4102 	if (request_module("md-%s", clevel) != 0)
4103 		request_module("md-level-%s", clevel);
4104 	pers = get_pers(level, clevel);
4105 	if (!pers) {
4106 		rv = -EINVAL;
4107 		goto out_unlock;
4108 	}
4109 
4110 	if (pers == mddev->pers) {
4111 		/* Nothing to do! */
4112 		put_pers(pers);
4113 		rv = len;
4114 		goto out_unlock;
4115 	}
4116 	if (!pers->takeover) {
4117 		put_pers(pers);
4118 		pr_warn("md: %s: %s does not support personality takeover\n",
4119 			mdname(mddev), clevel);
4120 		rv = -EINVAL;
4121 		goto out_unlock;
4122 	}
4123 
4124 	rdev_for_each(rdev, mddev)
4125 		rdev->new_raid_disk = rdev->raid_disk;
4126 
4127 	/* ->takeover must set new_* and/or delta_disks
4128 	 * if it succeeds, and may set them when it fails.
4129 	 */
4130 	priv = pers->takeover(mddev);
4131 	if (IS_ERR(priv)) {
4132 		mddev->new_level = mddev->level;
4133 		mddev->new_layout = mddev->layout;
4134 		mddev->new_chunk_sectors = mddev->chunk_sectors;
4135 		mddev->raid_disks -= mddev->delta_disks;
4136 		mddev->delta_disks = 0;
4137 		mddev->reshape_backwards = 0;
4138 		put_pers(pers);
4139 		pr_warn("md: %s: %s would not accept array\n",
4140 			mdname(mddev), clevel);
4141 		rv = PTR_ERR(priv);
4142 		goto out_unlock;
4143 	}
4144 
4145 	/* Looks like we have a winner */
4146 	mddev_detach(mddev);
4147 
4148 	spin_lock(&mddev->lock);
4149 	oldpers = mddev->pers;
4150 	oldpriv = mddev->private;
4151 	mddev->pers = pers;
4152 	mddev->private = priv;
4153 	strscpy(mddev->clevel, pers->head.name, sizeof(mddev->clevel));
4154 	mddev->level = mddev->new_level;
4155 	mddev->layout = mddev->new_layout;
4156 	mddev->chunk_sectors = mddev->new_chunk_sectors;
4157 	mddev->delta_disks = 0;
4158 	mddev->reshape_backwards = 0;
4159 	mddev->degraded = 0;
4160 	spin_unlock(&mddev->lock);
4161 
4162 	if (oldpers->sync_request == NULL &&
4163 	    mddev->external) {
4164 		/* We are converting from a no-redundancy array
4165 		 * to a redundancy array and metadata is managed
4166 		 * externally so we need to be sure that writes
4167 		 * won't block due to a need to transition
4168 		 *      clean->dirty
4169 		 * until external management is started.
4170 		 */
4171 		mddev->in_sync = 0;
4172 		mddev->safemode_delay = 0;
4173 		mddev->safemode = 0;
4174 	}
4175 
4176 	oldpers->free(mddev, oldpriv);
4177 
4178 	if (oldpers->sync_request == NULL &&
4179 	    pers->sync_request != NULL) {
4180 		/* need to add the md_redundancy_group */
4181 		if (sysfs_create_group(&mddev->kobj, &md_redundancy_group))
4182 			pr_warn("md: cannot register extra attributes for %s\n",
4183 				mdname(mddev));
4184 		mddev->sysfs_action = sysfs_get_dirent(mddev->kobj.sd, "sync_action");
4185 		mddev->sysfs_completed = sysfs_get_dirent_safe(mddev->kobj.sd, "sync_completed");
4186 		mddev->sysfs_degraded = sysfs_get_dirent_safe(mddev->kobj.sd, "degraded");
4187 	}
4188 	if (oldpers->sync_request != NULL &&
4189 	    pers->sync_request == NULL) {
4190 		/* need to remove the md_redundancy_group */
4191 		if (mddev->to_remove == NULL)
4192 			mddev->to_remove = &md_redundancy_group;
4193 	}
4194 
4195 	put_pers(oldpers);
4196 
4197 	rdev_for_each(rdev, mddev) {
4198 		if (rdev->raid_disk < 0)
4199 			continue;
4200 		if (rdev->new_raid_disk >= mddev->raid_disks)
4201 			rdev->new_raid_disk = -1;
4202 		if (rdev->new_raid_disk == rdev->raid_disk)
4203 			continue;
4204 		sysfs_unlink_rdev(mddev, rdev);
4205 	}
4206 	rdev_for_each(rdev, mddev) {
4207 		if (rdev->raid_disk < 0)
4208 			continue;
4209 		if (rdev->new_raid_disk == rdev->raid_disk)
4210 			continue;
4211 		rdev->raid_disk = rdev->new_raid_disk;
4212 		if (rdev->raid_disk < 0)
4213 			clear_bit(In_sync, &rdev->flags);
4214 		else {
4215 			if (sysfs_link_rdev(mddev, rdev))
4216 				pr_warn("md: cannot register rd%d for %s after level change\n",
4217 					rdev->raid_disk, mdname(mddev));
4218 		}
4219 	}
4220 
4221 	if (pers->sync_request == NULL) {
4222 		/* this is now an array without redundancy, so
4223 		 * it must always be in_sync
4224 		 */
4225 		mddev->in_sync = 1;
4226 		timer_delete_sync(&mddev->safemode_timer);
4227 	}
4228 	pers->run(mddev);
4229 	set_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags);
4230 	if (!mddev->thread)
4231 		md_update_sb(mddev, 1);
4232 	sysfs_notify_dirent_safe(mddev->sysfs_level);
4233 	md_new_event();
4234 	rv = len;
4235 out_unlock:
4236 	mddev_unlock_and_resume(mddev);
4237 	return rv;
4238 }
4239 
4240 static struct md_sysfs_entry md_level =
4241 __ATTR(level, S_IRUGO|S_IWUSR, level_show, level_store);
4242 
4243 static ssize_t
4244 new_level_show(struct mddev *mddev, char *page)
4245 {
4246 	return sprintf(page, "%d\n", mddev->new_level);
4247 }
4248 
4249 static ssize_t
4250 new_level_store(struct mddev *mddev, const char *buf, size_t len)
4251 {
4252 	unsigned int n;
4253 	int err;
4254 
4255 	err = kstrtouint(buf, 10, &n);
4256 	if (err < 0)
4257 		return err;
4258 	err = mddev_lock(mddev);
4259 	if (err)
4260 		return err;
4261 
4262 	mddev->new_level = n;
4263 	md_update_sb(mddev, 1);
4264 
4265 	mddev_unlock(mddev);
4266 	return len;
4267 }
4268 static struct md_sysfs_entry md_new_level =
4269 __ATTR(new_level, 0664, new_level_show, new_level_store);
4270 
4271 static ssize_t
4272 bitmap_type_show(struct mddev *mddev, char *page)
4273 {
4274 	struct md_submodule_head *head;
4275 	unsigned long i;
4276 	ssize_t len = 0;
4277 
4278 	if (mddev->bitmap_id == ID_BITMAP_NONE)
4279 		len += sprintf(page + len, "[none] ");
4280 	else
4281 		len += sprintf(page + len, "none ");
4282 
4283 	xa_lock(&md_submodule);
4284 	xa_for_each(&md_submodule, i, head) {
4285 		if (head->type != MD_BITMAP || head->id == ID_BITMAP_NONE)
4286 			continue;
4287 
4288 		if (mddev->bitmap_id == head->id)
4289 			len += sprintf(page + len, "[%s] ", head->name);
4290 		else
4291 			len += sprintf(page + len, "%s ", head->name);
4292 	}
4293 	xa_unlock(&md_submodule);
4294 
4295 	len += sprintf(page + len, "\n");
4296 	return len;
4297 }
4298 
4299 static ssize_t
4300 bitmap_type_store(struct mddev *mddev, const char *buf, size_t len)
4301 {
4302 	struct md_submodule_head *head;
4303 	enum md_submodule_id id;
4304 	unsigned long i;
4305 	int err = 0;
4306 
4307 	xa_lock(&md_submodule);
4308 
4309 	if (mddev->bitmap_ops) {
4310 		err = -EBUSY;
4311 		goto out;
4312 	}
4313 
4314 	if (cmd_match(buf, "none")) {
4315 		mddev->bitmap_id = ID_BITMAP_NONE;
4316 		goto out;
4317 	}
4318 
4319 	xa_for_each(&md_submodule, i, head) {
4320 		if (head->type == MD_BITMAP && cmd_match(buf, head->name)) {
4321 			mddev->bitmap_id = head->id;
4322 			goto out;
4323 		}
4324 	}
4325 
4326 	err = kstrtoint(buf, 10, &id);
4327 	if (err)
4328 		goto out;
4329 
4330 	if (id == ID_BITMAP_NONE) {
4331 		mddev->bitmap_id = id;
4332 		goto out;
4333 	}
4334 
4335 	head = xa_load(&md_submodule, id);
4336 	if (head && head->type == MD_BITMAP) {
4337 		mddev->bitmap_id = id;
4338 		goto out;
4339 	}
4340 
4341 	err = -ENOENT;
4342 
4343 out:
4344 	xa_unlock(&md_submodule);
4345 	return err ? err : len;
4346 }
4347 
4348 static struct md_sysfs_entry md_bitmap_type =
4349 __ATTR(bitmap_type, 0664, bitmap_type_show, bitmap_type_store);
4350 
4351 static ssize_t
4352 layout_show(struct mddev *mddev, char *page)
4353 {
4354 	/* just a number, not meaningful for all levels */
4355 	if (mddev->reshape_position != MaxSector &&
4356 	    mddev->layout != mddev->new_layout)
4357 		return sprintf(page, "%d (%d)\n",
4358 			       mddev->new_layout, mddev->layout);
4359 	return sprintf(page, "%d\n", mddev->layout);
4360 }
4361 
4362 static ssize_t
4363 layout_store(struct mddev *mddev, const char *buf, size_t len)
4364 {
4365 	unsigned int n;
4366 	int err;
4367 
4368 	err = kstrtouint(buf, 10, &n);
4369 	if (err < 0)
4370 		return err;
4371 	err = mddev_lock(mddev);
4372 	if (err)
4373 		return err;
4374 
4375 	if (mddev->pers) {
4376 		if (mddev->pers->check_reshape == NULL)
4377 			err = -EBUSY;
4378 		else if (!md_is_rdwr(mddev))
4379 			err = -EROFS;
4380 		else {
4381 			mddev->new_layout = n;
4382 			err = mddev->pers->check_reshape(mddev);
4383 			if (err)
4384 				mddev->new_layout = mddev->layout;
4385 		}
4386 	} else {
4387 		mddev->new_layout = n;
4388 		if (mddev->reshape_position == MaxSector)
4389 			mddev->layout = n;
4390 	}
4391 	mddev_unlock(mddev);
4392 	return err ?: len;
4393 }
4394 static struct md_sysfs_entry md_layout =
4395 __ATTR(layout, S_IRUGO|S_IWUSR, layout_show, layout_store);
4396 
4397 static ssize_t
4398 raid_disks_show(struct mddev *mddev, char *page)
4399 {
4400 	if (mddev->raid_disks == 0)
4401 		return 0;
4402 	if (mddev->reshape_position != MaxSector &&
4403 	    mddev->delta_disks != 0)
4404 		return sprintf(page, "%d (%d)\n", mddev->raid_disks,
4405 			       mddev->raid_disks - mddev->delta_disks);
4406 	return sprintf(page, "%d\n", mddev->raid_disks);
4407 }
4408 
4409 static int update_raid_disks(struct mddev *mddev, int raid_disks);
4410 
4411 static ssize_t
4412 raid_disks_store(struct mddev *mddev, const char *buf, size_t len)
4413 {
4414 	unsigned int n;
4415 	int err;
4416 
4417 	err = kstrtouint(buf, 10, &n);
4418 	if (err < 0)
4419 		return err;
4420 
4421 	err = mddev_suspend_and_lock(mddev);
4422 	if (err)
4423 		return err;
4424 	if (mddev->pers) {
4425 		if (n != mddev->raid_disks)
4426 			err = update_raid_disks(mddev, n);
4427 	} else if (mddev->reshape_position != MaxSector) {
4428 		struct md_rdev *rdev;
4429 		int olddisks = mddev->raid_disks - mddev->delta_disks;
4430 
4431 		err = -EINVAL;
4432 		rdev_for_each(rdev, mddev) {
4433 			if (olddisks < n &&
4434 			    rdev->data_offset < rdev->new_data_offset)
4435 				goto out_unlock;
4436 			if (olddisks > n &&
4437 			    rdev->data_offset > rdev->new_data_offset)
4438 				goto out_unlock;
4439 		}
4440 		err = 0;
4441 		mddev->delta_disks = n - olddisks;
4442 		mddev->raid_disks = n;
4443 		mddev->reshape_backwards = (mddev->delta_disks < 0);
4444 	} else
4445 		mddev->raid_disks = n;
4446 out_unlock:
4447 	mddev_unlock_and_resume(mddev);
4448 	return err ? err : len;
4449 }
4450 static struct md_sysfs_entry md_raid_disks =
4451 __ATTR(raid_disks, S_IRUGO|S_IWUSR, raid_disks_show, raid_disks_store);
4452 
4453 static ssize_t
4454 uuid_show(struct mddev *mddev, char *page)
4455 {
4456 	return sprintf(page, "%pU\n", mddev->uuid);
4457 }
4458 static struct md_sysfs_entry md_uuid =
4459 __ATTR(uuid, S_IRUGO, uuid_show, NULL);
4460 
4461 static ssize_t
4462 chunk_size_show(struct mddev *mddev, char *page)
4463 {
4464 	if (mddev->reshape_position != MaxSector &&
4465 	    mddev->chunk_sectors != mddev->new_chunk_sectors)
4466 		return sprintf(page, "%d (%d)\n",
4467 			       mddev->new_chunk_sectors << 9,
4468 			       mddev->chunk_sectors << 9);
4469 	return sprintf(page, "%d\n", mddev->chunk_sectors << 9);
4470 }
4471 
4472 static ssize_t
4473 chunk_size_store(struct mddev *mddev, const char *buf, size_t len)
4474 {
4475 	unsigned long n;
4476 	int err;
4477 
4478 	err = kstrtoul(buf, 10, &n);
4479 	if (err < 0)
4480 		return err;
4481 
4482 	err = mddev_lock(mddev);
4483 	if (err)
4484 		return err;
4485 	if (mddev->pers) {
4486 		if (mddev->pers->check_reshape == NULL)
4487 			err = -EBUSY;
4488 		else if (!md_is_rdwr(mddev))
4489 			err = -EROFS;
4490 		else {
4491 			mddev->new_chunk_sectors = n >> 9;
4492 			err = mddev->pers->check_reshape(mddev);
4493 			if (err)
4494 				mddev->new_chunk_sectors = mddev->chunk_sectors;
4495 		}
4496 	} else {
4497 		mddev->new_chunk_sectors = n >> 9;
4498 		if (mddev->reshape_position == MaxSector)
4499 			mddev->chunk_sectors = n >> 9;
4500 	}
4501 	mddev_unlock(mddev);
4502 	return err ?: len;
4503 }
4504 static struct md_sysfs_entry md_chunk_size =
4505 __ATTR(chunk_size, S_IRUGO|S_IWUSR, chunk_size_show, chunk_size_store);
4506 
4507 static ssize_t
4508 resync_start_show(struct mddev *mddev, char *page)
4509 {
4510 	if (mddev->resync_offset == MaxSector)
4511 		return sprintf(page, "none\n");
4512 	return sprintf(page, "%llu\n", (unsigned long long)mddev->resync_offset);
4513 }
4514 
4515 static ssize_t
4516 resync_start_store(struct mddev *mddev, const char *buf, size_t len)
4517 {
4518 	unsigned long long n;
4519 	int err;
4520 
4521 	if (cmd_match(buf, "none"))
4522 		n = MaxSector;
4523 	else {
4524 		err = kstrtoull(buf, 10, &n);
4525 		if (err < 0)
4526 			return err;
4527 		if (n != (sector_t)n)
4528 			return -EINVAL;
4529 	}
4530 
4531 	err = mddev_lock(mddev);
4532 	if (err)
4533 		return err;
4534 	if (mddev->pers && !test_bit(MD_RECOVERY_FROZEN, &mddev->recovery))
4535 		err = -EBUSY;
4536 
4537 	if (!err) {
4538 		mddev->resync_offset = n;
4539 		if (mddev->pers)
4540 			set_bit(MD_SB_CHANGE_CLEAN, &mddev->sb_flags);
4541 	}
4542 	mddev_unlock(mddev);
4543 	return err ?: len;
4544 }
4545 static struct md_sysfs_entry md_resync_start =
4546 __ATTR_PREALLOC(resync_start, S_IRUGO|S_IWUSR,
4547 		resync_start_show, resync_start_store);
4548 
4549 /*
4550  * The array state can be:
4551  *
4552  * clear
4553  *     No devices, no size, no level
4554  *     Equivalent to STOP_ARRAY ioctl
4555  * inactive
4556  *     May have some settings, but array is not active
4557  *        all IO results in error
4558  *     When written, doesn't tear down array, but just stops it
4559  * suspended (not supported yet)
4560  *     All IO requests will block. The array can be reconfigured.
4561  *     Writing this, if accepted, will block until array is quiescent
4562  * readonly
4563  *     no resync can happen.  no superblocks get written.
4564  *     write requests fail
4565  * read-auto
4566  *     like readonly, but behaves like 'clean' on a write request.
4567  *
4568  * clean - no pending writes, but otherwise active.
4569  *     When written to inactive array, starts without resync
4570  *     If a write request arrives then
4571  *       if metadata is known, mark 'dirty' and switch to 'active'.
4572  *       if not known, block and switch to write-pending
4573  *     If written to an active array that has pending writes, then fails.
4574  * active
4575  *     fully active: IO and resync can be happening.
4576  *     When written to inactive array, starts with resync
4577  *
4578  * write-pending
4579  *     clean, but writes are blocked waiting for 'active' to be written.
4580  *
4581  * active-idle
4582  *     like active, but no writes have been seen for a while (100msec).
4583  *
4584  * broken
4585 *     Array is failed. It's useful because mounted-arrays aren't stopped
4586 *     when array is failed, so this state will at least alert the user that
4587 *     something is wrong.
4588  */
4589 enum array_state { clear, inactive, suspended, readonly, read_auto, clean, active,
4590 		   write_pending, active_idle, broken, bad_word};
4591 static char *array_states[] = {
4592 	"clear", "inactive", "suspended", "readonly", "read-auto", "clean", "active",
4593 	"write-pending", "active-idle", "broken", NULL };
4594 
4595 static int match_word(const char *word, char **list)
4596 {
4597 	int n;
4598 	for (n=0; list[n]; n++)
4599 		if (cmd_match(word, list[n]))
4600 			break;
4601 	return n;
4602 }
4603 
4604 static ssize_t
4605 array_state_show(struct mddev *mddev, char *page)
4606 {
4607 	enum array_state st = inactive;
4608 
4609 	if (mddev->pers && !test_bit(MD_NOT_READY, &mddev->flags)) {
4610 		switch(mddev->ro) {
4611 		case MD_RDONLY:
4612 			st = readonly;
4613 			break;
4614 		case MD_AUTO_READ:
4615 			st = read_auto;
4616 			break;
4617 		case MD_RDWR:
4618 			spin_lock(&mddev->lock);
4619 			if (test_bit(MD_SB_CHANGE_PENDING, &mddev->sb_flags))
4620 				st = write_pending;
4621 			else if (mddev->in_sync)
4622 				st = clean;
4623 			else if (mddev->safemode)
4624 				st = active_idle;
4625 			else
4626 				st = active;
4627 			spin_unlock(&mddev->lock);
4628 		}
4629 
4630 		if (test_bit(MD_BROKEN, &mddev->flags) && st == clean)
4631 			st = broken;
4632 	} else {
4633 		if (list_empty(&mddev->disks) &&
4634 		    mddev->raid_disks == 0 &&
4635 		    mddev->dev_sectors == 0)
4636 			st = clear;
4637 		else
4638 			st = inactive;
4639 	}
4640 	return sprintf(page, "%s\n", array_states[st]);
4641 }
4642 
4643 static int do_md_stop(struct mddev *mddev, int ro);
4644 static int md_set_readonly(struct mddev *mddev);
4645 static int restart_array(struct mddev *mddev);
4646 
4647 static ssize_t
4648 array_state_store(struct mddev *mddev, const char *buf, size_t len)
4649 {
4650 	int err = 0;
4651 	enum array_state st = match_word(buf, array_states);
4652 
4653 	/* No lock dependent actions */
4654 	switch (st) {
4655 	case suspended:		/* not supported yet */
4656 	case write_pending:	/* cannot be set */
4657 	case active_idle:	/* cannot be set */
4658 	case broken:		/* cannot be set */
4659 	case bad_word:
4660 		return -EINVAL;
4661 	case clear:
4662 	case readonly:
4663 	case inactive:
4664 	case read_auto:
4665 		if (!mddev->pers || !md_is_rdwr(mddev))
4666 			break;
4667 		/* write sysfs will not open mddev and opener should be 0 */
4668 		err = mddev_set_closing_and_sync_blockdev(mddev, 0);
4669 		if (err)
4670 			return err;
4671 		break;
4672 	default:
4673 		break;
4674 	}
4675 
4676 	if (mddev->pers && (st == active || st == clean) &&
4677 	    mddev->ro != MD_RDONLY) {
4678 		/* don't take reconfig_mutex when toggling between
4679 		 * clean and active
4680 		 */
4681 		spin_lock(&mddev->lock);
4682 		if (st == active) {
4683 			restart_array(mddev);
4684 			clear_bit(MD_SB_CHANGE_PENDING, &mddev->sb_flags);
4685 			md_wakeup_thread(mddev->thread);
4686 			wake_up(&mddev->sb_wait);
4687 		} else /* st == clean */ {
4688 			restart_array(mddev);
4689 			if (!set_in_sync(mddev))
4690 				err = -EBUSY;
4691 		}
4692 		if (!err)
4693 			sysfs_notify_dirent_safe(mddev->sysfs_state);
4694 		spin_unlock(&mddev->lock);
4695 		return err ?: len;
4696 	}
4697 	err = mddev_lock(mddev);
4698 	if (err)
4699 		return err;
4700 
4701 	switch (st) {
4702 	case inactive:
4703 		/* stop an active array, return 0 otherwise */
4704 		if (mddev->pers)
4705 			err = do_md_stop(mddev, 2);
4706 		break;
4707 	case clear:
4708 		err = do_md_stop(mddev, 0);
4709 		break;
4710 	case readonly:
4711 		if (mddev->pers)
4712 			err = md_set_readonly(mddev);
4713 		else {
4714 			mddev->ro = MD_RDONLY;
4715 			set_disk_ro(mddev->gendisk, 1);
4716 			err = do_md_run(mddev);
4717 		}
4718 		break;
4719 	case read_auto:
4720 		if (mddev->pers) {
4721 			if (md_is_rdwr(mddev))
4722 				err = md_set_readonly(mddev);
4723 			else if (mddev->ro == MD_RDONLY)
4724 				err = restart_array(mddev);
4725 			if (err == 0) {
4726 				mddev->ro = MD_AUTO_READ;
4727 				set_disk_ro(mddev->gendisk, 0);
4728 			}
4729 		} else {
4730 			mddev->ro = MD_AUTO_READ;
4731 			err = do_md_run(mddev);
4732 		}
4733 		break;
4734 	case clean:
4735 		if (mddev->pers) {
4736 			err = restart_array(mddev);
4737 			if (err)
4738 				break;
4739 			spin_lock(&mddev->lock);
4740 			if (!set_in_sync(mddev))
4741 				err = -EBUSY;
4742 			spin_unlock(&mddev->lock);
4743 		} else
4744 			err = -EINVAL;
4745 		break;
4746 	case active:
4747 		if (mddev->pers) {
4748 			err = restart_array(mddev);
4749 			if (err)
4750 				break;
4751 			clear_bit(MD_SB_CHANGE_PENDING, &mddev->sb_flags);
4752 			wake_up(&mddev->sb_wait);
4753 			err = 0;
4754 		} else {
4755 			mddev->ro = MD_RDWR;
4756 			set_disk_ro(mddev->gendisk, 0);
4757 			err = do_md_run(mddev);
4758 		}
4759 		break;
4760 	default:
4761 		err = -EINVAL;
4762 		break;
4763 	}
4764 
4765 	if (!err) {
4766 		if (mddev->hold_active == UNTIL_IOCTL)
4767 			mddev->hold_active = 0;
4768 		sysfs_notify_dirent_safe(mddev->sysfs_state);
4769 	}
4770 	mddev_unlock(mddev);
4771 
4772 	if (st == readonly || st == read_auto || st == inactive ||
4773 	    (err && st == clear))
4774 		clear_bit(MD_CLOSING, &mddev->flags);
4775 
4776 	return err ?: len;
4777 }
4778 static struct md_sysfs_entry md_array_state =
4779 __ATTR_PREALLOC(array_state, S_IRUGO|S_IWUSR, array_state_show, array_state_store);
4780 
4781 static ssize_t
4782 max_corrected_read_errors_show(struct mddev *mddev, char *page) {
4783 	return sprintf(page, "%d\n",
4784 		       atomic_read(&mddev->max_corr_read_errors));
4785 }
4786 
4787 static ssize_t
4788 max_corrected_read_errors_store(struct mddev *mddev, const char *buf, size_t len)
4789 {
4790 	unsigned int n;
4791 	int rv;
4792 
4793 	rv = kstrtouint(buf, 10, &n);
4794 	if (rv < 0)
4795 		return rv;
4796 	if (n > INT_MAX)
4797 		return -EINVAL;
4798 	atomic_set(&mddev->max_corr_read_errors, n);
4799 	return len;
4800 }
4801 
4802 static struct md_sysfs_entry max_corr_read_errors =
4803 __ATTR(max_read_errors, S_IRUGO|S_IWUSR, max_corrected_read_errors_show,
4804 	max_corrected_read_errors_store);
4805 
4806 static ssize_t
4807 null_show(struct mddev *mddev, char *page)
4808 {
4809 	return -EINVAL;
4810 }
4811 
4812 static ssize_t
4813 new_dev_store(struct mddev *mddev, const char *buf, size_t len)
4814 {
4815 	/* buf must be %d:%d\n? giving major and minor numbers */
4816 	/* The new device is added to the array.
4817 	 * If the array has a persistent superblock, we read the
4818 	 * superblock to initialise info and check validity.
4819 	 * Otherwise, only checking done is that in bind_rdev_to_array,
4820 	 * which mainly checks size.
4821 	 */
4822 	char *e;
4823 	int major = simple_strtoul(buf, &e, 10);
4824 	int minor;
4825 	dev_t dev;
4826 	struct md_rdev *rdev;
4827 	int err;
4828 
4829 	if (!*buf || *e != ':' || !e[1] || e[1] == '\n')
4830 		return -EINVAL;
4831 	minor = simple_strtoul(e+1, &e, 10);
4832 	if (*e && *e != '\n')
4833 		return -EINVAL;
4834 	dev = MKDEV(major, minor);
4835 	if (major != MAJOR(dev) ||
4836 	    minor != MINOR(dev))
4837 		return -EOVERFLOW;
4838 
4839 	err = mddev_suspend_and_lock(mddev);
4840 	if (err)
4841 		return err;
4842 	if (mddev->persistent) {
4843 		rdev = md_import_device(dev, mddev->major_version,
4844 					mddev->minor_version);
4845 		if (!IS_ERR(rdev) && !list_empty(&mddev->disks)) {
4846 			struct md_rdev *rdev0
4847 				= list_entry(mddev->disks.next,
4848 					     struct md_rdev, same_set);
4849 			err = super_types[mddev->major_version]
4850 				.load_super(rdev, rdev0, mddev->minor_version);
4851 			if (err < 0)
4852 				goto out;
4853 		}
4854 	} else if (mddev->external)
4855 		rdev = md_import_device(dev, -2, -1);
4856 	else
4857 		rdev = md_import_device(dev, -1, -1);
4858 
4859 	if (IS_ERR(rdev)) {
4860 		mddev_unlock_and_resume(mddev);
4861 		return PTR_ERR(rdev);
4862 	}
4863 	err = bind_rdev_to_array(rdev, mddev);
4864  out:
4865 	if (err)
4866 		export_rdev(rdev);
4867 	mddev_unlock_and_resume(mddev);
4868 	if (!err)
4869 		md_new_event();
4870 	return err ? err : len;
4871 }
4872 
4873 static struct md_sysfs_entry md_new_device =
4874 __ATTR(new_dev, S_IWUSR, null_show, new_dev_store);
4875 
4876 static ssize_t
4877 bitmap_store(struct mddev *mddev, const char *buf, size_t len)
4878 {
4879 	char *end;
4880 	unsigned long chunk, end_chunk;
4881 	int err;
4882 
4883 	if (!md_bitmap_enabled(mddev, false))
4884 		return len;
4885 
4886 	err = mddev_lock(mddev);
4887 	if (err)
4888 		return err;
4889 	if (!mddev->bitmap)
4890 		goto out;
4891 	/* buf should be <chunk> <chunk> ... or <chunk>-<chunk> ... (range) */
4892 	while (*buf) {
4893 		chunk = end_chunk = simple_strtoul(buf, &end, 0);
4894 		if (buf == end)
4895 			break;
4896 
4897 		if (*end == '-') { /* range */
4898 			buf = end + 1;
4899 			end_chunk = simple_strtoul(buf, &end, 0);
4900 			if (buf == end)
4901 				break;
4902 		}
4903 
4904 		if (*end && !isspace(*end))
4905 			break;
4906 
4907 		mddev->bitmap_ops->dirty_bits(mddev, chunk, end_chunk);
4908 		buf = skip_spaces(end);
4909 	}
4910 	mddev->bitmap_ops->unplug(mddev, true); /* flush the bits to disk */
4911 out:
4912 	mddev_unlock(mddev);
4913 	return len;
4914 }
4915 
4916 static struct md_sysfs_entry md_bitmap =
4917 __ATTR(bitmap_set_bits, S_IWUSR, null_show, bitmap_store);
4918 
4919 static ssize_t
4920 size_show(struct mddev *mddev, char *page)
4921 {
4922 	return sprintf(page, "%llu\n",
4923 		(unsigned long long)mddev->dev_sectors / 2);
4924 }
4925 
4926 static int update_size(struct mddev *mddev, sector_t num_sectors);
4927 
4928 static ssize_t
4929 size_store(struct mddev *mddev, const char *buf, size_t len)
4930 {
4931 	/* If array is inactive, we can reduce the component size, but
4932 	 * not increase it (except from 0).
4933 	 * If array is active, we can try an on-line resize
4934 	 */
4935 	sector_t sectors;
4936 	int err = strict_blocks_to_sectors(buf, &sectors);
4937 
4938 	if (err < 0)
4939 		return err;
4940 	err = mddev_lock(mddev);
4941 	if (err)
4942 		return err;
4943 	if (mddev->pers) {
4944 		err = update_size(mddev, sectors);
4945 		if (err == 0)
4946 			md_update_sb(mddev, 1);
4947 	} else {
4948 		if (mddev->dev_sectors == 0 ||
4949 		    mddev->dev_sectors > sectors)
4950 			mddev->dev_sectors = sectors;
4951 		else
4952 			err = -ENOSPC;
4953 	}
4954 	mddev_unlock(mddev);
4955 	return err ? err : len;
4956 }
4957 
4958 static struct md_sysfs_entry md_size =
4959 __ATTR(component_size, S_IRUGO|S_IWUSR, size_show, size_store);
4960 
4961 /* Metadata version.
4962  * This is one of
4963  *   'none' for arrays with no metadata (good luck...)
4964  *   'external' for arrays with externally managed metadata,
4965  * or N.M for internally known formats
4966  */
4967 static ssize_t
4968 metadata_show(struct mddev *mddev, char *page)
4969 {
4970 	if (mddev->persistent)
4971 		return sprintf(page, "%d.%d\n",
4972 			       mddev->major_version, mddev->minor_version);
4973 	else if (mddev->external)
4974 		return sprintf(page, "external:%s\n", mddev->metadata_type);
4975 	else
4976 		return sprintf(page, "none\n");
4977 }
4978 
4979 static ssize_t
4980 metadata_store(struct mddev *mddev, const char *buf, size_t len)
4981 {
4982 	int major, minor;
4983 	char *e;
4984 	int err;
4985 	/* Changing the details of 'external' metadata is
4986 	 * always permitted.  Otherwise there must be
4987 	 * no devices attached to the array.
4988 	 */
4989 
4990 	err = mddev_lock(mddev);
4991 	if (err)
4992 		return err;
4993 	err = -EBUSY;
4994 	if (mddev->external && strncmp(buf, "external:", 9) == 0)
4995 		;
4996 	else if (!list_empty(&mddev->disks))
4997 		goto out_unlock;
4998 
4999 	err = 0;
5000 	if (cmd_match(buf, "none")) {
5001 		mddev->persistent = 0;
5002 		mddev->external = 0;
5003 		mddev->major_version = 0;
5004 		mddev->minor_version = 90;
5005 		goto out_unlock;
5006 	}
5007 	if (strncmp(buf, "external:", 9) == 0) {
5008 		size_t namelen = len-9;
5009 		if (namelen >= sizeof(mddev->metadata_type))
5010 			namelen = sizeof(mddev->metadata_type)-1;
5011 		memcpy(mddev->metadata_type, buf+9, namelen);
5012 		mddev->metadata_type[namelen] = 0;
5013 		if (namelen && mddev->metadata_type[namelen-1] == '\n')
5014 			mddev->metadata_type[--namelen] = 0;
5015 		mddev->persistent = 0;
5016 		mddev->external = 1;
5017 		mddev->major_version = 0;
5018 		mddev->minor_version = 90;
5019 		goto out_unlock;
5020 	}
5021 	major = simple_strtoul(buf, &e, 10);
5022 	err = -EINVAL;
5023 	if (e==buf || *e != '.')
5024 		goto out_unlock;
5025 	buf = e+1;
5026 	minor = simple_strtoul(buf, &e, 10);
5027 	if (e==buf || (*e && *e != '\n') )
5028 		goto out_unlock;
5029 	err = -ENOENT;
5030 	if (major >= ARRAY_SIZE(super_types) || super_types[major].name == NULL)
5031 		goto out_unlock;
5032 	mddev->major_version = major;
5033 	mddev->minor_version = minor;
5034 	mddev->persistent = 1;
5035 	mddev->external = 0;
5036 	err = 0;
5037 out_unlock:
5038 	mddev_unlock(mddev);
5039 	return err ?: len;
5040 }
5041 
5042 static struct md_sysfs_entry md_metadata =
5043 __ATTR_PREALLOC(metadata_version, S_IRUGO|S_IWUSR, metadata_show, metadata_store);
5044 
5045 static bool rdev_needs_recovery(struct md_rdev *rdev, sector_t sectors)
5046 {
5047 	return rdev->raid_disk >= 0 &&
5048 	       !test_bit(Journal, &rdev->flags) &&
5049 	       !test_bit(Faulty, &rdev->flags) &&
5050 	       !test_bit(In_sync, &rdev->flags) &&
5051 	       rdev->recovery_offset < sectors;
5052 }
5053 
5054 static enum sync_action md_get_active_sync_action(struct mddev *mddev)
5055 {
5056 	struct md_rdev *rdev;
5057 	bool is_recover = false;
5058 
5059 	if (mddev->resync_offset < MaxSector)
5060 		return ACTION_RESYNC;
5061 
5062 	if (mddev->reshape_position != MaxSector)
5063 		return ACTION_RESHAPE;
5064 
5065 	rcu_read_lock();
5066 	rdev_for_each_rcu(rdev, mddev) {
5067 		if (rdev_needs_recovery(rdev, MaxSector)) {
5068 			is_recover = true;
5069 			break;
5070 		}
5071 	}
5072 	rcu_read_unlock();
5073 
5074 	return is_recover ? ACTION_RECOVER : ACTION_IDLE;
5075 }
5076 
5077 enum sync_action md_sync_action(struct mddev *mddev)
5078 {
5079 	unsigned long recovery = mddev->recovery;
5080 	enum sync_action active_action;
5081 
5082 	/*
5083 	 * frozen has the highest priority, means running sync_thread will be
5084 	 * stopped immediately, and no new sync_thread can start.
5085 	 */
5086 	if (test_bit(MD_RECOVERY_FROZEN, &recovery))
5087 		return ACTION_FROZEN;
5088 
5089 	/*
5090 	 * read-only array can't register sync_thread, and it can only
5091 	 * add/remove spares.
5092 	 */
5093 	if (!md_is_rdwr(mddev))
5094 		return ACTION_IDLE;
5095 
5096 	/*
5097 	 * idle means no sync_thread is running, and no new sync_thread is
5098 	 * requested.
5099 	 */
5100 	if (!test_bit(MD_RECOVERY_RUNNING, &recovery) &&
5101 	    !test_bit(MD_RECOVERY_NEEDED, &recovery))
5102 		return ACTION_IDLE;
5103 
5104 	/*
5105 	 * Check if any sync operation (resync/recover/reshape) is
5106 	 * currently active. This ensures that only one sync operation
5107 	 * can run at a time. Returns the type of active operation, or
5108 	 * ACTION_IDLE if none are active.
5109 	 */
5110 	active_action = md_get_active_sync_action(mddev);
5111 	if (active_action != ACTION_IDLE)
5112 		return active_action;
5113 
5114 	if (test_bit(MD_RECOVERY_RESHAPE, &recovery))
5115 		return ACTION_RESHAPE;
5116 
5117 	if (test_bit(MD_RECOVERY_RECOVER, &recovery))
5118 		return ACTION_RECOVER;
5119 
5120 	if (test_bit(MD_RECOVERY_SYNC, &recovery)) {
5121 		/*
5122 		 * MD_RECOVERY_CHECK must be paired with
5123 		 * MD_RECOVERY_REQUESTED.
5124 		 */
5125 		if (test_bit(MD_RECOVERY_CHECK, &recovery))
5126 			return ACTION_CHECK;
5127 		if (test_bit(MD_RECOVERY_REQUESTED, &recovery))
5128 			return ACTION_REPAIR;
5129 		return ACTION_RESYNC;
5130 	}
5131 
5132 	/*
5133 	 * MD_RECOVERY_NEEDED or MD_RECOVERY_RUNNING is set, however, no
5134 	 * sync_action is specified.
5135 	 */
5136 	return ACTION_IDLE;
5137 }
5138 
5139 enum sync_action md_sync_action_by_name(const char *page)
5140 {
5141 	enum sync_action action;
5142 
5143 	for (action = 0; action < NR_SYNC_ACTIONS; ++action) {
5144 		if (cmd_match(page, action_name[action]))
5145 			return action;
5146 	}
5147 
5148 	return NR_SYNC_ACTIONS;
5149 }
5150 
5151 const char *md_sync_action_name(enum sync_action action)
5152 {
5153 	return action_name[action];
5154 }
5155 
5156 static ssize_t
5157 action_show(struct mddev *mddev, char *page)
5158 {
5159 	enum sync_action action = md_sync_action(mddev);
5160 
5161 	return sprintf(page, "%s\n", md_sync_action_name(action));
5162 }
5163 
5164 /**
5165  * stop_sync_thread() - wait for sync_thread to stop if it's running.
5166  * @mddev:	the array.
5167  * @locked:	if set, reconfig_mutex will still be held after this function
5168  *		return; if not set, reconfig_mutex will be released after this
5169  *		function return.
5170  */
5171 static void stop_sync_thread(struct mddev *mddev, bool locked)
5172 {
5173 	int sync_seq = atomic_read(&mddev->sync_seq);
5174 
5175 	if (!test_bit(MD_RECOVERY_RUNNING, &mddev->recovery)) {
5176 		if (!locked)
5177 			mddev_unlock(mddev);
5178 		return;
5179 	}
5180 
5181 	mddev_unlock(mddev);
5182 
5183 	set_bit(MD_RECOVERY_INTR, &mddev->recovery);
5184 	/*
5185 	 * Thread might be blocked waiting for metadata update which will now
5186 	 * never happen
5187 	 */
5188 	md_wakeup_thread_directly(&mddev->sync_thread);
5189 	if (work_pending(&mddev->sync_work))
5190 		flush_work(&mddev->sync_work);
5191 
5192 	wait_event(resync_wait,
5193 		   !test_bit(MD_RECOVERY_RUNNING, &mddev->recovery) ||
5194 		   (!test_bit(MD_RECOVERY_FROZEN, &mddev->recovery) &&
5195 		    sync_seq != atomic_read(&mddev->sync_seq)));
5196 
5197 	if (locked)
5198 		mddev_lock_nointr(mddev);
5199 }
5200 
5201 void md_idle_sync_thread(struct mddev *mddev)
5202 {
5203 	lockdep_assert_held(&mddev->reconfig_mutex);
5204 
5205 	clear_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
5206 	stop_sync_thread(mddev, true);
5207 }
5208 EXPORT_SYMBOL_GPL(md_idle_sync_thread);
5209 
5210 void md_frozen_sync_thread(struct mddev *mddev)
5211 {
5212 	lockdep_assert_held(&mddev->reconfig_mutex);
5213 
5214 	set_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
5215 	stop_sync_thread(mddev, true);
5216 }
5217 EXPORT_SYMBOL_GPL(md_frozen_sync_thread);
5218 
5219 void md_unfrozen_sync_thread(struct mddev *mddev)
5220 {
5221 	lockdep_assert_held(&mddev->reconfig_mutex);
5222 
5223 	clear_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
5224 	set_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
5225 	md_wakeup_thread(mddev->thread);
5226 	sysfs_notify_dirent_safe(mddev->sysfs_action);
5227 }
5228 EXPORT_SYMBOL_GPL(md_unfrozen_sync_thread);
5229 
5230 static int mddev_start_reshape(struct mddev *mddev)
5231 {
5232 	int ret;
5233 
5234 	if (mddev->pers->start_reshape == NULL)
5235 		return -EINVAL;
5236 
5237 	if (mddev->reshape_position == MaxSector ||
5238 	    mddev->pers->check_reshape == NULL ||
5239 	    mddev->pers->check_reshape(mddev)) {
5240 		clear_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
5241 		ret = mddev->pers->start_reshape(mddev);
5242 		if (ret)
5243 			return ret;
5244 	} else {
5245 		/*
5246 		 * If reshape is still in progress, and md_check_recovery() can
5247 		 * continue to reshape, don't restart reshape because data can
5248 		 * be corrupted for raid456.
5249 		 */
5250 		clear_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
5251 	}
5252 
5253 	sysfs_notify_dirent_safe(mddev->sysfs_degraded);
5254 	return 0;
5255 }
5256 
5257 static ssize_t
5258 action_store(struct mddev *mddev, const char *page, size_t len)
5259 {
5260 	int ret;
5261 	enum sync_action action;
5262 
5263 	if (!mddev->pers || !mddev->pers->sync_request)
5264 		return -EINVAL;
5265 
5266 retry:
5267 	if (work_busy(&mddev->sync_work))
5268 		flush_work(&mddev->sync_work);
5269 
5270 	ret = mddev_lock(mddev);
5271 	if (ret)
5272 		return ret;
5273 
5274 	if (work_busy(&mddev->sync_work)) {
5275 		mddev_unlock(mddev);
5276 		goto retry;
5277 	}
5278 
5279 	action = md_sync_action_by_name(page);
5280 
5281 	/* TODO: mdadm rely on "idle" to start sync_thread. */
5282 	if (test_bit(MD_RECOVERY_RUNNING, &mddev->recovery)) {
5283 		switch (action) {
5284 		case ACTION_FROZEN:
5285 			md_frozen_sync_thread(mddev);
5286 			ret = len;
5287 			goto out;
5288 		case ACTION_IDLE:
5289 			md_idle_sync_thread(mddev);
5290 			break;
5291 		case ACTION_RESHAPE:
5292 		case ACTION_RECOVER:
5293 		case ACTION_CHECK:
5294 		case ACTION_REPAIR:
5295 		case ACTION_RESYNC:
5296 			ret = -EBUSY;
5297 			goto out;
5298 		default:
5299 			ret = -EINVAL;
5300 			goto out;
5301 		}
5302 	} else {
5303 		switch (action) {
5304 		case ACTION_FROZEN:
5305 			set_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
5306 			ret = len;
5307 			goto out;
5308 		case ACTION_RESHAPE:
5309 			clear_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
5310 			ret = mddev_start_reshape(mddev);
5311 			if (ret)
5312 				goto out;
5313 			break;
5314 		case ACTION_RECOVER:
5315 			clear_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
5316 			set_bit(MD_RECOVERY_RECOVER, &mddev->recovery);
5317 			break;
5318 		case ACTION_CHECK:
5319 			set_bit(MD_RECOVERY_CHECK, &mddev->recovery);
5320 			fallthrough;
5321 		case ACTION_REPAIR:
5322 			set_bit(MD_RECOVERY_REQUESTED, &mddev->recovery);
5323 			set_bit(MD_RECOVERY_SYNC, &mddev->recovery);
5324 			fallthrough;
5325 		case ACTION_RESYNC:
5326 		case ACTION_IDLE:
5327 			clear_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
5328 			break;
5329 		default:
5330 			ret = -EINVAL;
5331 			goto out;
5332 		}
5333 	}
5334 
5335 	if (mddev->ro == MD_AUTO_READ) {
5336 		/* A write to sync_action is enough to justify
5337 		 * canceling read-auto mode
5338 		 */
5339 		mddev->ro = MD_RDWR;
5340 		md_wakeup_thread(mddev->sync_thread);
5341 	}
5342 
5343 	set_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
5344 	md_wakeup_thread(mddev->thread);
5345 	sysfs_notify_dirent_safe(mddev->sysfs_action);
5346 	ret = len;
5347 
5348 out:
5349 	mddev_unlock(mddev);
5350 	return ret;
5351 }
5352 
5353 static struct md_sysfs_entry md_scan_mode =
5354 __ATTR_PREALLOC(sync_action, S_IRUGO|S_IWUSR, action_show, action_store);
5355 
5356 static ssize_t
5357 last_sync_action_show(struct mddev *mddev, char *page)
5358 {
5359 	return sprintf(page, "%s\n",
5360 		       md_sync_action_name(mddev->last_sync_action));
5361 }
5362 
5363 static struct md_sysfs_entry md_last_scan_mode = __ATTR_RO(last_sync_action);
5364 
5365 static ssize_t
5366 mismatch_cnt_show(struct mddev *mddev, char *page)
5367 {
5368 	return sprintf(page, "%llu\n",
5369 		       (unsigned long long)
5370 		       atomic64_read(&mddev->resync_mismatches));
5371 }
5372 
5373 static struct md_sysfs_entry md_mismatches = __ATTR_RO(mismatch_cnt);
5374 
5375 static ssize_t
5376 sync_min_show(struct mddev *mddev, char *page)
5377 {
5378 	return sprintf(page, "%d (%s)\n", speed_min(mddev),
5379 		       mddev->sync_speed_min ? "local" : "system");
5380 }
5381 
5382 static ssize_t
5383 sync_min_store(struct mddev *mddev, const char *buf, size_t len)
5384 {
5385 	unsigned int min;
5386 	int rv;
5387 
5388 	if (strncmp(buf, "system", 6) == 0) {
5389 		min = 0;
5390 	} else {
5391 		rv = kstrtouint(buf, 10, &min);
5392 		if (rv < 0)
5393 			return rv;
5394 		if (min == 0)
5395 			return -EINVAL;
5396 	}
5397 	mddev->sync_speed_min = min;
5398 	return len;
5399 }
5400 
5401 static struct md_sysfs_entry md_sync_min =
5402 __ATTR(sync_speed_min, S_IRUGO|S_IWUSR, sync_min_show, sync_min_store);
5403 
5404 static ssize_t
5405 sync_max_show(struct mddev *mddev, char *page)
5406 {
5407 	return sprintf(page, "%d (%s)\n", speed_max(mddev),
5408 		       mddev->sync_speed_max ? "local" : "system");
5409 }
5410 
5411 static ssize_t
5412 sync_max_store(struct mddev *mddev, const char *buf, size_t len)
5413 {
5414 	unsigned int max;
5415 	int rv;
5416 
5417 	if (strncmp(buf, "system", 6) == 0) {
5418 		max = 0;
5419 	} else {
5420 		rv = kstrtouint(buf, 10, &max);
5421 		if (rv < 0)
5422 			return rv;
5423 		if (max == 0)
5424 			return -EINVAL;
5425 	}
5426 	mddev->sync_speed_max = max;
5427 	return len;
5428 }
5429 
5430 static struct md_sysfs_entry md_sync_max =
5431 __ATTR(sync_speed_max, S_IRUGO|S_IWUSR, sync_max_show, sync_max_store);
5432 
5433 static ssize_t
5434 sync_io_depth_show(struct mddev *mddev, char *page)
5435 {
5436 	return sprintf(page, "%d (%s)\n", sync_io_depth(mddev),
5437 		       mddev->sync_io_depth ? "local" : "system");
5438 }
5439 
5440 static ssize_t
5441 sync_io_depth_store(struct mddev *mddev, const char *buf, size_t len)
5442 {
5443 	unsigned int max;
5444 	int rv;
5445 
5446 	if (strncmp(buf, "system", 6) == 0) {
5447 		max = 0;
5448 	} else {
5449 		rv = kstrtouint(buf, 10, &max);
5450 		if (rv < 0)
5451 			return rv;
5452 		if (max == 0)
5453 			return -EINVAL;
5454 	}
5455 	mddev->sync_io_depth = max;
5456 	return len;
5457 }
5458 
5459 static struct md_sysfs_entry md_sync_io_depth =
5460 __ATTR_RW(sync_io_depth);
5461 
5462 static ssize_t
5463 degraded_show(struct mddev *mddev, char *page)
5464 {
5465 	return sprintf(page, "%d\n", mddev->degraded);
5466 }
5467 static struct md_sysfs_entry md_degraded = __ATTR_RO(degraded);
5468 
5469 static ssize_t
5470 sync_force_parallel_show(struct mddev *mddev, char *page)
5471 {
5472 	return sprintf(page, "%d\n", mddev->parallel_resync);
5473 }
5474 
5475 static ssize_t
5476 sync_force_parallel_store(struct mddev *mddev, const char *buf, size_t len)
5477 {
5478 	long n;
5479 
5480 	if (kstrtol(buf, 10, &n))
5481 		return -EINVAL;
5482 
5483 	if (n != 0 && n != 1)
5484 		return -EINVAL;
5485 
5486 	mddev->parallel_resync = n;
5487 
5488 	if (mddev->sync_thread)
5489 		wake_up(&resync_wait);
5490 
5491 	return len;
5492 }
5493 
5494 /* force parallel resync, even with shared block devices */
5495 static struct md_sysfs_entry md_sync_force_parallel =
5496 __ATTR(sync_force_parallel, S_IRUGO|S_IWUSR,
5497        sync_force_parallel_show, sync_force_parallel_store);
5498 
5499 static ssize_t
5500 sync_speed_show(struct mddev *mddev, char *page)
5501 {
5502 	unsigned long resync, dt, db;
5503 	if (mddev->curr_resync == MD_RESYNC_NONE)
5504 		return sprintf(page, "none\n");
5505 	resync = mddev->curr_mark_cnt - atomic_read(&mddev->recovery_active);
5506 	dt = (jiffies - mddev->resync_mark) / HZ;
5507 	if (!dt) dt++;
5508 	db = resync - mddev->resync_mark_cnt;
5509 	return sprintf(page, "%lu\n", db/dt/2); /* K/sec */
5510 }
5511 
5512 static struct md_sysfs_entry md_sync_speed = __ATTR_RO(sync_speed);
5513 
5514 static ssize_t
5515 sync_completed_show(struct mddev *mddev, char *page)
5516 {
5517 	unsigned long long max_sectors, resync;
5518 
5519 	if (!test_bit(MD_RECOVERY_RUNNING, &mddev->recovery))
5520 		return sprintf(page, "none\n");
5521 
5522 	if (mddev->curr_resync == MD_RESYNC_YIELDED ||
5523 	    mddev->curr_resync == MD_RESYNC_DELAYED)
5524 		return sprintf(page, "delayed\n");
5525 
5526 	if (test_bit(MD_RECOVERY_SYNC, &mddev->recovery) ||
5527 	    test_bit(MD_RECOVERY_RESHAPE, &mddev->recovery))
5528 		max_sectors = mddev->resync_max_sectors;
5529 	else
5530 		max_sectors = mddev->dev_sectors;
5531 
5532 	resync = mddev->curr_resync_completed;
5533 	return sprintf(page, "%llu / %llu\n", resync, max_sectors);
5534 }
5535 
5536 static struct md_sysfs_entry md_sync_completed =
5537 	__ATTR_PREALLOC(sync_completed, S_IRUGO, sync_completed_show, NULL);
5538 
5539 static ssize_t
5540 min_sync_show(struct mddev *mddev, char *page)
5541 {
5542 	return sprintf(page, "%llu\n",
5543 		       (unsigned long long)mddev->resync_min);
5544 }
5545 static ssize_t
5546 min_sync_store(struct mddev *mddev, const char *buf, size_t len)
5547 {
5548 	unsigned long long min;
5549 	int err;
5550 
5551 	if (kstrtoull(buf, 10, &min))
5552 		return -EINVAL;
5553 
5554 	spin_lock(&mddev->lock);
5555 	err = -EINVAL;
5556 	if (min > mddev->resync_max)
5557 		goto out_unlock;
5558 
5559 	err = -EBUSY;
5560 	if (test_bit(MD_RECOVERY_RUNNING, &mddev->recovery))
5561 		goto out_unlock;
5562 
5563 	/* Round down to multiple of 4K for safety */
5564 	mddev->resync_min = round_down(min, 8);
5565 	err = 0;
5566 
5567 out_unlock:
5568 	spin_unlock(&mddev->lock);
5569 	return err ?: len;
5570 }
5571 
5572 static struct md_sysfs_entry md_min_sync =
5573 __ATTR(sync_min, S_IRUGO|S_IWUSR, min_sync_show, min_sync_store);
5574 
5575 static ssize_t
5576 max_sync_show(struct mddev *mddev, char *page)
5577 {
5578 	if (mddev->resync_max == MaxSector)
5579 		return sprintf(page, "max\n");
5580 	else
5581 		return sprintf(page, "%llu\n",
5582 			       (unsigned long long)mddev->resync_max);
5583 }
5584 static ssize_t
5585 max_sync_store(struct mddev *mddev, const char *buf, size_t len)
5586 {
5587 	int err;
5588 	spin_lock(&mddev->lock);
5589 	if (strncmp(buf, "max", 3) == 0)
5590 		mddev->resync_max = MaxSector;
5591 	else {
5592 		unsigned long long max;
5593 		int chunk;
5594 
5595 		err = -EINVAL;
5596 		if (kstrtoull(buf, 10, &max))
5597 			goto out_unlock;
5598 		if (max < mddev->resync_min)
5599 			goto out_unlock;
5600 
5601 		err = -EBUSY;
5602 		if (max < mddev->resync_max && md_is_rdwr(mddev) &&
5603 		    test_bit(MD_RECOVERY_RUNNING, &mddev->recovery))
5604 			goto out_unlock;
5605 
5606 		/* Must be a multiple of chunk_size */
5607 		chunk = mddev->chunk_sectors;
5608 		if (chunk) {
5609 			sector_t temp = max;
5610 
5611 			err = -EINVAL;
5612 			if (sector_div(temp, chunk))
5613 				goto out_unlock;
5614 		}
5615 		mddev->resync_max = max;
5616 	}
5617 	wake_up(&mddev->recovery_wait);
5618 	err = 0;
5619 out_unlock:
5620 	spin_unlock(&mddev->lock);
5621 	return err ?: len;
5622 }
5623 
5624 static struct md_sysfs_entry md_max_sync =
5625 __ATTR(sync_max, S_IRUGO|S_IWUSR, max_sync_show, max_sync_store);
5626 
5627 static ssize_t
5628 suspend_lo_show(struct mddev *mddev, char *page)
5629 {
5630 	return sprintf(page, "%llu\n",
5631 		       (unsigned long long)READ_ONCE(mddev->suspend_lo));
5632 }
5633 
5634 static ssize_t
5635 suspend_lo_store(struct mddev *mddev, const char *buf, size_t len)
5636 {
5637 	unsigned long long new;
5638 	int err;
5639 
5640 	err = kstrtoull(buf, 10, &new);
5641 	if (err < 0)
5642 		return err;
5643 	if (new != (sector_t)new)
5644 		return -EINVAL;
5645 
5646 	err = mddev_suspend(mddev, true);
5647 	if (err)
5648 		return err;
5649 
5650 	WRITE_ONCE(mddev->suspend_lo, new);
5651 	mddev_resume(mddev);
5652 
5653 	return len;
5654 }
5655 static struct md_sysfs_entry md_suspend_lo =
5656 __ATTR(suspend_lo, S_IRUGO|S_IWUSR, suspend_lo_show, suspend_lo_store);
5657 
5658 static ssize_t
5659 suspend_hi_show(struct mddev *mddev, char *page)
5660 {
5661 	return sprintf(page, "%llu\n",
5662 		       (unsigned long long)READ_ONCE(mddev->suspend_hi));
5663 }
5664 
5665 static ssize_t
5666 suspend_hi_store(struct mddev *mddev, const char *buf, size_t len)
5667 {
5668 	unsigned long long new;
5669 	int err;
5670 
5671 	err = kstrtoull(buf, 10, &new);
5672 	if (err < 0)
5673 		return err;
5674 	if (new != (sector_t)new)
5675 		return -EINVAL;
5676 
5677 	err = mddev_suspend(mddev, true);
5678 	if (err)
5679 		return err;
5680 
5681 	WRITE_ONCE(mddev->suspend_hi, new);
5682 	mddev_resume(mddev);
5683 
5684 	return len;
5685 }
5686 static struct md_sysfs_entry md_suspend_hi =
5687 __ATTR(suspend_hi, S_IRUGO|S_IWUSR, suspend_hi_show, suspend_hi_store);
5688 
5689 static ssize_t
5690 reshape_position_show(struct mddev *mddev, char *page)
5691 {
5692 	if (mddev->reshape_position != MaxSector)
5693 		return sprintf(page, "%llu\n",
5694 			       (unsigned long long)mddev->reshape_position);
5695 	strcpy(page, "none\n");
5696 	return 5;
5697 }
5698 
5699 static ssize_t
5700 reshape_position_store(struct mddev *mddev, const char *buf, size_t len)
5701 {
5702 	struct md_rdev *rdev;
5703 	unsigned long long new;
5704 	int err;
5705 
5706 	err = kstrtoull(buf, 10, &new);
5707 	if (err < 0)
5708 		return err;
5709 	if (new != (sector_t)new)
5710 		return -EINVAL;
5711 	err = mddev_lock(mddev);
5712 	if (err)
5713 		return err;
5714 	err = -EBUSY;
5715 	if (mddev->pers)
5716 		goto unlock;
5717 	mddev->reshape_position = new;
5718 	mddev->delta_disks = 0;
5719 	mddev->reshape_backwards = 0;
5720 	mddev->new_level = mddev->level;
5721 	mddev->new_layout = mddev->layout;
5722 	mddev->new_chunk_sectors = mddev->chunk_sectors;
5723 	rdev_for_each(rdev, mddev)
5724 		rdev->new_data_offset = rdev->data_offset;
5725 	err = 0;
5726 unlock:
5727 	mddev_unlock(mddev);
5728 	return err ?: len;
5729 }
5730 
5731 static struct md_sysfs_entry md_reshape_position =
5732 __ATTR(reshape_position, S_IRUGO|S_IWUSR, reshape_position_show,
5733        reshape_position_store);
5734 
5735 static ssize_t
5736 reshape_direction_show(struct mddev *mddev, char *page)
5737 {
5738 	return sprintf(page, "%s\n",
5739 		       mddev->reshape_backwards ? "backwards" : "forwards");
5740 }
5741 
5742 static ssize_t
5743 reshape_direction_store(struct mddev *mddev, const char *buf, size_t len)
5744 {
5745 	int backwards = 0;
5746 	int err;
5747 
5748 	if (cmd_match(buf, "forwards"))
5749 		backwards = 0;
5750 	else if (cmd_match(buf, "backwards"))
5751 		backwards = 1;
5752 	else
5753 		return -EINVAL;
5754 	if (mddev->reshape_backwards == backwards)
5755 		return len;
5756 
5757 	err = mddev_lock(mddev);
5758 	if (err)
5759 		return err;
5760 	/* check if we are allowed to change */
5761 	if (mddev->delta_disks)
5762 		err = -EBUSY;
5763 	else if (mddev->persistent &&
5764 	    mddev->major_version == 0)
5765 		err =  -EINVAL;
5766 	else
5767 		mddev->reshape_backwards = backwards;
5768 	mddev_unlock(mddev);
5769 	return err ?: len;
5770 }
5771 
5772 static struct md_sysfs_entry md_reshape_direction =
5773 __ATTR(reshape_direction, S_IRUGO|S_IWUSR, reshape_direction_show,
5774        reshape_direction_store);
5775 
5776 static ssize_t
5777 array_size_show(struct mddev *mddev, char *page)
5778 {
5779 	if (mddev->external_size)
5780 		return sprintf(page, "%llu\n",
5781 			       (unsigned long long)mddev->array_sectors/2);
5782 	else
5783 		return sprintf(page, "default\n");
5784 }
5785 
5786 static ssize_t
5787 array_size_store(struct mddev *mddev, const char *buf, size_t len)
5788 {
5789 	sector_t sectors;
5790 	int err;
5791 
5792 	err = mddev_lock(mddev);
5793 	if (err)
5794 		return err;
5795 
5796 	/* cluster raid doesn't support change array_sectors */
5797 	if (mddev_is_clustered(mddev)) {
5798 		mddev_unlock(mddev);
5799 		return -EINVAL;
5800 	}
5801 
5802 	if (strncmp(buf, "default", 7) == 0) {
5803 		if (mddev->pers)
5804 			sectors = mddev->pers->size(mddev, 0, 0);
5805 		else
5806 			sectors = mddev->array_sectors;
5807 
5808 		mddev->external_size = 0;
5809 	} else {
5810 		if (strict_blocks_to_sectors(buf, &sectors) < 0)
5811 			err = -EINVAL;
5812 		else if (mddev->pers && mddev->pers->size(mddev, 0, 0) < sectors)
5813 			err = -E2BIG;
5814 		else
5815 			mddev->external_size = 1;
5816 	}
5817 
5818 	if (!err) {
5819 		mddev->array_sectors = sectors;
5820 		if (mddev->pers)
5821 			set_capacity_and_notify(mddev->gendisk,
5822 						mddev->array_sectors);
5823 	}
5824 	mddev_unlock(mddev);
5825 	return err ?: len;
5826 }
5827 
5828 static struct md_sysfs_entry md_array_size =
5829 __ATTR(array_size, S_IRUGO|S_IWUSR, array_size_show,
5830        array_size_store);
5831 
5832 static ssize_t
5833 consistency_policy_show(struct mddev *mddev, char *page)
5834 {
5835 	int ret;
5836 
5837 	if (test_bit(MD_HAS_JOURNAL, &mddev->flags)) {
5838 		ret = sprintf(page, "journal\n");
5839 	} else if (test_bit(MD_HAS_PPL, &mddev->flags)) {
5840 		ret = sprintf(page, "ppl\n");
5841 	} else if (mddev->bitmap) {
5842 		ret = sprintf(page, "bitmap\n");
5843 	} else if (mddev->pers) {
5844 		if (mddev->pers->sync_request)
5845 			ret = sprintf(page, "resync\n");
5846 		else
5847 			ret = sprintf(page, "none\n");
5848 	} else {
5849 		ret = sprintf(page, "unknown\n");
5850 	}
5851 
5852 	return ret;
5853 }
5854 
5855 static ssize_t
5856 consistency_policy_store(struct mddev *mddev, const char *buf, size_t len)
5857 {
5858 	int err = 0;
5859 
5860 	if (mddev->pers) {
5861 		if (mddev->pers->change_consistency_policy)
5862 			err = mddev->pers->change_consistency_policy(mddev, buf);
5863 		else
5864 			err = -EBUSY;
5865 	} else if (mddev->external && strncmp(buf, "ppl", 3) == 0) {
5866 		set_bit(MD_HAS_PPL, &mddev->flags);
5867 	} else {
5868 		err = -EINVAL;
5869 	}
5870 
5871 	return err ? err : len;
5872 }
5873 
5874 static struct md_sysfs_entry md_consistency_policy =
5875 __ATTR(consistency_policy, S_IRUGO | S_IWUSR, consistency_policy_show,
5876        consistency_policy_store);
5877 
5878 static ssize_t fail_last_dev_show(struct mddev *mddev, char *page)
5879 {
5880 	return sprintf(page, "%d\n", test_bit(MD_FAILLAST_DEV, &mddev->flags));
5881 }
5882 
5883 /*
5884  * Setting MD_FAILLAST_DEV to allow last device to be forcibly removed
5885  * from RAID1/RAID10.
5886  */
5887 static ssize_t
5888 fail_last_dev_store(struct mddev *mddev, const char *buf, size_t len)
5889 {
5890 	int ret;
5891 	bool value;
5892 
5893 	ret = kstrtobool(buf, &value);
5894 	if (ret)
5895 		return ret;
5896 
5897 	if (value)
5898 		set_bit(MD_FAILLAST_DEV, &mddev->flags);
5899 	else
5900 		clear_bit(MD_FAILLAST_DEV, &mddev->flags);
5901 
5902 	return len;
5903 }
5904 static struct md_sysfs_entry md_fail_last_dev =
5905 __ATTR(fail_last_dev, S_IRUGO | S_IWUSR, fail_last_dev_show,
5906        fail_last_dev_store);
5907 
5908 static ssize_t serialize_policy_show(struct mddev *mddev, char *page)
5909 {
5910 	if (mddev->pers == NULL || (mddev->pers->head.id != ID_RAID1))
5911 		return sprintf(page, "n/a\n");
5912 	else
5913 		return sprintf(page, "%d\n",
5914 			       test_bit(MD_SERIALIZE_POLICY, &mddev->flags));
5915 }
5916 
5917 /*
5918  * Setting MD_SERIALIZE_POLICY enforce write IO is not reordered
5919  * for raid1.
5920  */
5921 static ssize_t
5922 serialize_policy_store(struct mddev *mddev, const char *buf, size_t len)
5923 {
5924 	int err;
5925 	bool value;
5926 
5927 	err = kstrtobool(buf, &value);
5928 	if (err)
5929 		return err;
5930 
5931 	if (value == test_bit(MD_SERIALIZE_POLICY, &mddev->flags))
5932 		return len;
5933 
5934 	err = mddev_suspend_and_lock(mddev);
5935 	if (err)
5936 		return err;
5937 	if (mddev->pers == NULL || (mddev->pers->head.id != ID_RAID1)) {
5938 		pr_err("md: serialize_policy is only effective for raid1\n");
5939 		err = -EINVAL;
5940 		goto unlock;
5941 	}
5942 
5943 	if (value) {
5944 		mddev_create_serial_pool(mddev, NULL);
5945 		set_bit(MD_SERIALIZE_POLICY, &mddev->flags);
5946 	} else {
5947 		mddev_destroy_serial_pool(mddev, NULL);
5948 		clear_bit(MD_SERIALIZE_POLICY, &mddev->flags);
5949 	}
5950 unlock:
5951 	mddev_unlock_and_resume(mddev);
5952 	return err ?: len;
5953 }
5954 
5955 static struct md_sysfs_entry md_serialize_policy =
5956 __ATTR(serialize_policy, S_IRUGO | S_IWUSR, serialize_policy_show,
5957        serialize_policy_store);
5958 
5959 static int mddev_set_logical_block_size(struct mddev *mddev,
5960 				unsigned int lbs)
5961 {
5962 	int err = 0;
5963 	struct queue_limits lim;
5964 
5965 	if (queue_logical_block_size(mddev->gendisk->queue) >= lbs) {
5966 		pr_err("%s: Cannot set LBS smaller than mddev LBS %u\n",
5967 		       mdname(mddev), lbs);
5968 		return -EINVAL;
5969 	}
5970 
5971 	lim = queue_limits_start_update(mddev->gendisk->queue);
5972 	lim.logical_block_size = lbs;
5973 	pr_info("%s: logical_block_size is changed, data may be lost\n",
5974 		mdname(mddev));
5975 	err = queue_limits_commit_update(mddev->gendisk->queue, &lim);
5976 	if (err)
5977 		return err;
5978 
5979 	mddev->logical_block_size = lbs;
5980 	/* New lbs will be written to superblock after array is running */
5981 	set_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags);
5982 	return 0;
5983 }
5984 
5985 static ssize_t
5986 lbs_show(struct mddev *mddev, char *page)
5987 {
5988 	return sprintf(page, "%u\n", mddev->logical_block_size);
5989 }
5990 
5991 static ssize_t
5992 lbs_store(struct mddev *mddev, const char *buf, size_t len)
5993 {
5994 	unsigned int lbs;
5995 	int err = -EBUSY;
5996 
5997 	/* Only 1.x meta supports configurable LBS */
5998 	if (mddev->major_version == 0)
5999 		return -EINVAL;
6000 
6001 	err = kstrtouint(buf, 10, &lbs);
6002 	if (err < 0)
6003 		return -EINVAL;
6004 
6005 	if (mddev->pers) {
6006 		unsigned int curr_lbs;
6007 
6008 		if (mddev->logical_block_size)
6009 			return -EBUSY;
6010 		/*
6011 		 * To fix forward compatibility issues, LBS is not
6012 		 * configured for arrays from old kernels (<=6.18) by default.
6013 		 * If the user confirms no rollback to old kernels,
6014 		 * enable LBS by writing current LBS — to prevent data
6015 		 * loss from LBS changes.
6016 		 */
6017 		curr_lbs = queue_logical_block_size(mddev->gendisk->queue);
6018 		if (lbs != curr_lbs)
6019 			return -EINVAL;
6020 
6021 		mddev->logical_block_size = curr_lbs;
6022 		set_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags);
6023 		pr_info("%s: logical block size configured successfully, array will not be assembled in old kernels (<= 6.18)\n",
6024 			mdname(mddev));
6025 		return len;
6026 	}
6027 
6028 	err = mddev_lock(mddev);
6029 	if (err)
6030 		goto unlock;
6031 
6032 	err = mddev_set_logical_block_size(mddev, lbs);
6033 
6034 unlock:
6035 	mddev_unlock(mddev);
6036 	return err ?: len;
6037 }
6038 
6039 static struct md_sysfs_entry md_logical_block_size =
6040 __ATTR(logical_block_size, 0644, lbs_show, lbs_store);
6041 
6042 static struct attribute *md_default_attrs[] = {
6043 	&md_level.attr,
6044 	&md_new_level.attr,
6045 	&md_bitmap_type.attr,
6046 	&md_layout.attr,
6047 	&md_raid_disks.attr,
6048 	&md_uuid.attr,
6049 	&md_chunk_size.attr,
6050 	&md_size.attr,
6051 	&md_resync_start.attr,
6052 	&md_metadata.attr,
6053 	&md_new_device.attr,
6054 	&md_safe_delay.attr,
6055 	&md_array_state.attr,
6056 	&md_reshape_position.attr,
6057 	&md_reshape_direction.attr,
6058 	&md_array_size.attr,
6059 	&max_corr_read_errors.attr,
6060 	&md_consistency_policy.attr,
6061 	&md_fail_last_dev.attr,
6062 	&md_serialize_policy.attr,
6063 	&md_logical_block_size.attr,
6064 	NULL,
6065 };
6066 ATTRIBUTE_GROUPS(md_default);
6067 
6068 static struct attribute *md_redundancy_attrs[] = {
6069 	&md_scan_mode.attr,
6070 	&md_last_scan_mode.attr,
6071 	&md_mismatches.attr,
6072 	&md_sync_min.attr,
6073 	&md_sync_max.attr,
6074 	&md_sync_io_depth.attr,
6075 	&md_sync_speed.attr,
6076 	&md_sync_force_parallel.attr,
6077 	&md_sync_completed.attr,
6078 	&md_min_sync.attr,
6079 	&md_max_sync.attr,
6080 	&md_suspend_lo.attr,
6081 	&md_suspend_hi.attr,
6082 	&md_bitmap.attr,
6083 	&md_degraded.attr,
6084 	NULL,
6085 };
6086 static const struct attribute_group md_redundancy_group = {
6087 	.name = NULL,
6088 	.attrs = md_redundancy_attrs,
6089 };
6090 
6091 static ssize_t
6092 md_attr_show(struct kobject *kobj, struct attribute *attr, char *page)
6093 {
6094 	struct md_sysfs_entry *entry = container_of(attr, struct md_sysfs_entry, attr);
6095 	struct mddev *mddev = container_of(kobj, struct mddev, kobj);
6096 	ssize_t rv;
6097 
6098 	if (!entry->show)
6099 		return -EIO;
6100 	spin_lock(&all_mddevs_lock);
6101 	if (!mddev_get(mddev)) {
6102 		spin_unlock(&all_mddevs_lock);
6103 		return -EBUSY;
6104 	}
6105 	spin_unlock(&all_mddevs_lock);
6106 
6107 	rv = entry->show(mddev, page);
6108 	mddev_put(mddev);
6109 	return rv;
6110 }
6111 
6112 static ssize_t
6113 md_attr_store(struct kobject *kobj, struct attribute *attr,
6114 	      const char *page, size_t length)
6115 {
6116 	struct md_sysfs_entry *entry = container_of(attr, struct md_sysfs_entry, attr);
6117 	struct mddev *mddev = container_of(kobj, struct mddev, kobj);
6118 	ssize_t rv;
6119 	struct kernfs_node *kn = NULL;
6120 
6121 	if (!entry->store)
6122 		return -EIO;
6123 	if (!capable(CAP_SYS_ADMIN))
6124 		return -EACCES;
6125 
6126 	if (entry->store == array_state_store && cmd_match(page, "clear"))
6127 		kn = sysfs_break_active_protection(kobj, attr);
6128 
6129 	spin_lock(&all_mddevs_lock);
6130 	if (!mddev_get(mddev)) {
6131 		spin_unlock(&all_mddevs_lock);
6132 		if (kn)
6133 			sysfs_unbreak_active_protection(kn);
6134 		return -EBUSY;
6135 	}
6136 	spin_unlock(&all_mddevs_lock);
6137 	rv = entry->store(mddev, page, length);
6138 
6139 	/*
6140 	 * For "array_state=clear", dropping the extra kobject reference from
6141 	 * sysfs_break_active_protection() can trigger md kobject deletion.
6142 	 * Restore active protection before mddev_put() so deletion happens
6143 	 * after the sysfs write path fully unwinds.
6144 	 */
6145 	if (kn)
6146 		sysfs_unbreak_active_protection(kn);
6147 	mddev_put(mddev);
6148 
6149 	return rv;
6150 }
6151 
6152 static void md_kobj_release(struct kobject *ko)
6153 {
6154 	struct mddev *mddev = container_of(ko, struct mddev, kobj);
6155 
6156 	if (legacy_async_del_gendisk) {
6157 		if (mddev->sysfs_state)
6158 			sysfs_put(mddev->sysfs_state);
6159 		if (mddev->sysfs_level)
6160 			sysfs_put(mddev->sysfs_level);
6161 		del_gendisk(mddev->gendisk);
6162 	}
6163 	put_disk(mddev->gendisk);
6164 }
6165 
6166 static const struct sysfs_ops md_sysfs_ops = {
6167 	.show	= md_attr_show,
6168 	.store	= md_attr_store,
6169 };
6170 static const struct kobj_type md_ktype = {
6171 	.release	= md_kobj_release,
6172 	.sysfs_ops	= &md_sysfs_ops,
6173 	.default_groups	= md_default_groups,
6174 };
6175 
6176 int mdp_major = 0;
6177 
6178 /* stack the limit for all rdevs into lim */
6179 int mddev_stack_rdev_limits(struct mddev *mddev, struct queue_limits *lim,
6180 		unsigned int flags)
6181 {
6182 	struct md_rdev *rdev;
6183 
6184 	rdev_for_each(rdev, mddev) {
6185 		queue_limits_stack_bdev(lim, rdev->bdev, rdev->data_offset,
6186 					mddev->gendisk->disk_name);
6187 		if ((flags & MDDEV_STACK_INTEGRITY) &&
6188 		    !queue_limits_stack_integrity_bdev(lim, rdev->bdev))
6189 			return -EINVAL;
6190 	}
6191 
6192 	/*
6193 	 * Before RAID adding folio support, the logical_block_size
6194 	 * should be smaller than the page size.
6195 	 */
6196 	if (lim->logical_block_size > PAGE_SIZE) {
6197 		pr_err("%s: logical_block_size must not larger than PAGE_SIZE\n",
6198 			mdname(mddev));
6199 		return -EINVAL;
6200 	}
6201 
6202 	/* Only 1.x meta needs to set logical block size */
6203 	if (mddev->major_version == 0)
6204 		return 0;
6205 
6206 	/*
6207 	 * Fix forward compatibility issue. Only set LBS by default for
6208 	 * new arrays, mddev->events == 0 indicates the array was just
6209 	 * created. When assembling an array, read LBS from the superblock
6210 	 * instead — LBS is 0 in superblocks created by old kernels.
6211 	 */
6212 	if (!mddev->events) {
6213 		pr_info("%s: array will not be assembled in old kernels that lack configurable LBS support (<= 6.18)\n",
6214 			mdname(mddev));
6215 		mddev->logical_block_size = lim->logical_block_size;
6216 	}
6217 
6218 	if (!mddev->logical_block_size)
6219 		pr_warn("%s: echo current LBS to md/logical_block_size to prevent data loss issues from LBS changes.\n"
6220 			"\tNote: After setting, array will not be assembled in old kernels (<= 6.18)\n",
6221 			mdname(mddev));
6222 
6223 	return 0;
6224 }
6225 EXPORT_SYMBOL_GPL(mddev_stack_rdev_limits);
6226 
6227 /* apply the extra stacking limits from a new rdev into mddev */
6228 int mddev_stack_new_rdev(struct mddev *mddev, struct md_rdev *rdev)
6229 {
6230 	struct queue_limits lim;
6231 
6232 	if (mddev_is_dm(mddev))
6233 		return 0;
6234 
6235 	if (queue_logical_block_size(rdev->bdev->bd_disk->queue) >
6236 	    queue_logical_block_size(mddev->gendisk->queue)) {
6237 		pr_err("%s: incompatible logical_block_size, can not add\n",
6238 		       mdname(mddev));
6239 		return -EINVAL;
6240 	}
6241 
6242 	lim = queue_limits_start_update(mddev->gendisk->queue);
6243 	queue_limits_stack_bdev(&lim, rdev->bdev, rdev->data_offset,
6244 				mddev->gendisk->disk_name);
6245 
6246 	if (!queue_limits_stack_integrity_bdev(&lim, rdev->bdev)) {
6247 		pr_err("%s: incompatible integrity profile for %pg\n",
6248 		       mdname(mddev), rdev->bdev);
6249 		queue_limits_cancel_update(mddev->gendisk->queue);
6250 		return -ENXIO;
6251 	}
6252 
6253 	return queue_limits_commit_update(mddev->gendisk->queue, &lim);
6254 }
6255 EXPORT_SYMBOL_GPL(mddev_stack_new_rdev);
6256 
6257 /* update the optimal I/O size after a reshape */
6258 void mddev_update_io_opt(struct mddev *mddev, unsigned int nr_stripes)
6259 {
6260 	struct queue_limits lim;
6261 
6262 	if (mddev_is_dm(mddev))
6263 		return;
6264 
6265 	/* don't bother updating io_opt if we can't suspend the array */
6266 	if (mddev_suspend(mddev, false) < 0)
6267 		return;
6268 	lim = queue_limits_start_update(mddev->gendisk->queue);
6269 	lim.io_opt = lim.io_min * nr_stripes;
6270 	queue_limits_commit_update(mddev->gendisk->queue, &lim);
6271 	mddev_resume(mddev);
6272 }
6273 EXPORT_SYMBOL_GPL(mddev_update_io_opt);
6274 
6275 static void mddev_delayed_delete(struct work_struct *ws)
6276 {
6277 	struct mddev *mddev = container_of(ws, struct mddev, del_work);
6278 
6279 	kobject_put(&mddev->kobj);
6280 }
6281 
6282 void md_init_stacking_limits(struct queue_limits *lim)
6283 {
6284 	blk_set_stacking_limits(lim);
6285 	lim->features = BLK_FEAT_WRITE_CACHE | BLK_FEAT_FUA |
6286 			BLK_FEAT_IO_STAT | BLK_FEAT_NOWAIT;
6287 }
6288 EXPORT_SYMBOL_GPL(md_init_stacking_limits);
6289 
6290 struct mddev *md_alloc(dev_t dev, char *name)
6291 {
6292 	/*
6293 	 * If dev is zero, name is the name of a device to allocate with
6294 	 * an arbitrary minor number.  It will be "md_???"
6295 	 * If dev is non-zero it must be a device number with a MAJOR of
6296 	 * MD_MAJOR or mdp_major.  In this case, if "name" is NULL, then
6297 	 * the device is being created by opening a node in /dev.
6298 	 * If "name" is not NULL, the device is being created by
6299 	 * writing to /sys/module/md_mod/parameters/new_array.
6300 	 */
6301 	static DEFINE_MUTEX(disks_mutex);
6302 	struct mddev *mddev;
6303 	struct gendisk *disk;
6304 	int partitioned;
6305 	int shift;
6306 	int unit;
6307 	int error;
6308 
6309 	/*
6310 	 * Wait for any previous instance of this device to be completely
6311 	 * removed (mddev_delayed_delete).
6312 	 */
6313 	flush_workqueue(md_misc_wq);
6314 
6315 	mutex_lock(&disks_mutex);
6316 	mddev = mddev_alloc(dev);
6317 	if (IS_ERR(mddev)) {
6318 		error = PTR_ERR(mddev);
6319 		goto out_unlock;
6320 	}
6321 
6322 	partitioned = (MAJOR(mddev->unit) != MD_MAJOR);
6323 	shift = partitioned ? MdpMinorShift : 0;
6324 	unit = MINOR(mddev->unit) >> shift;
6325 
6326 	if (name && !dev) {
6327 		/* Need to ensure that 'name' is not a duplicate.
6328 		 */
6329 		struct mddev *mddev2;
6330 		spin_lock(&all_mddevs_lock);
6331 
6332 		list_for_each_entry(mddev2, &all_mddevs, all_mddevs)
6333 			if (mddev2->gendisk &&
6334 			    strcmp(mddev2->gendisk->disk_name, name) == 0) {
6335 				spin_unlock(&all_mddevs_lock);
6336 				error = -EEXIST;
6337 				goto out_free_mddev;
6338 			}
6339 		spin_unlock(&all_mddevs_lock);
6340 	}
6341 	if (name && dev)
6342 		/*
6343 		 * Creating /dev/mdNNN via "newarray", so adjust hold_active.
6344 		 */
6345 		mddev->hold_active = UNTIL_STOP;
6346 
6347 	disk = blk_alloc_disk(NULL, NUMA_NO_NODE);
6348 	if (IS_ERR(disk)) {
6349 		error = PTR_ERR(disk);
6350 		goto out_free_mddev;
6351 	}
6352 
6353 	disk->major = MAJOR(mddev->unit);
6354 	disk->first_minor = unit << shift;
6355 	disk->minors = 1 << shift;
6356 	if (name)
6357 		strcpy(disk->disk_name, name);
6358 	else if (partitioned)
6359 		sprintf(disk->disk_name, "md_d%d", unit);
6360 	else
6361 		sprintf(disk->disk_name, "md%d", unit);
6362 	disk->fops = &md_fops;
6363 	disk->private_data = mddev;
6364 
6365 	disk->events |= DISK_EVENT_MEDIA_CHANGE;
6366 	mddev->gendisk = disk;
6367 	error = add_disk(disk);
6368 	if (error)
6369 		goto out_put_disk;
6370 
6371 	kobject_init(&mddev->kobj, &md_ktype);
6372 	error = kobject_add(&mddev->kobj, &disk_to_dev(disk)->kobj, "%s", "md");
6373 	if (error) {
6374 		/*
6375 		 * The disk is already live at this point.  Clear the hold flag
6376 		 * and let mddev_put take care of the deletion, as it isn't any
6377 		 * different from a normal close on last release now.
6378 		 */
6379 		mddev->hold_active = 0;
6380 		mutex_unlock(&disks_mutex);
6381 		mddev_put(mddev);
6382 		return ERR_PTR(error);
6383 	}
6384 
6385 	kobject_uevent(&mddev->kobj, KOBJ_ADD);
6386 	mddev->sysfs_state = sysfs_get_dirent_safe(mddev->kobj.sd, "array_state");
6387 	mddev->sysfs_level = sysfs_get_dirent_safe(mddev->kobj.sd, "level");
6388 	mutex_unlock(&disks_mutex);
6389 	return mddev;
6390 
6391 out_put_disk:
6392 	put_disk(disk);
6393 out_free_mddev:
6394 	mddev_free(mddev);
6395 out_unlock:
6396 	mutex_unlock(&disks_mutex);
6397 	return ERR_PTR(error);
6398 }
6399 
6400 static int md_alloc_and_put(dev_t dev, char *name)
6401 {
6402 	struct mddev *mddev = md_alloc(dev, name);
6403 
6404 	if (legacy_async_del_gendisk)
6405 		pr_warn("md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+\n");
6406 
6407 	if (IS_ERR(mddev))
6408 		return PTR_ERR(mddev);
6409 	mddev_put(mddev);
6410 	return 0;
6411 }
6412 
6413 static void md_probe(dev_t dev)
6414 {
6415 	if (MAJOR(dev) == MD_MAJOR && MINOR(dev) >= 512)
6416 		return;
6417 	if (create_on_open)
6418 		md_alloc_and_put(dev, NULL);
6419 }
6420 
6421 static int add_named_array(const char *val, const struct kernel_param *kp)
6422 {
6423 	/*
6424 	 * val must be "md_*" or "mdNNN".
6425 	 * For "md_*" we allocate an array with a large free minor number, and
6426 	 * set the name to val.  val must not already be an active name.
6427 	 * For "mdNNN" we allocate an array with the minor number NNN
6428 	 * which must not already be in use.
6429 	 */
6430 	int len = strlen(val);
6431 	char buf[DISK_NAME_LEN];
6432 	unsigned long devnum;
6433 
6434 	while (len && val[len-1] == '\n')
6435 		len--;
6436 	if (len >= DISK_NAME_LEN)
6437 		return -E2BIG;
6438 	strscpy(buf, val, len+1);
6439 	if (strncmp(buf, "md_", 3) == 0)
6440 		return md_alloc_and_put(0, buf);
6441 	if (strncmp(buf, "md", 2) == 0 &&
6442 	    isdigit(buf[2]) &&
6443 	    kstrtoul(buf+2, 10, &devnum) == 0 &&
6444 	    devnum <= MINORMASK)
6445 		return md_alloc_and_put(MKDEV(MD_MAJOR, devnum), NULL);
6446 
6447 	return -EINVAL;
6448 }
6449 
6450 static void md_safemode_timeout(struct timer_list *t)
6451 {
6452 	struct mddev *mddev = timer_container_of(mddev, t, safemode_timer);
6453 
6454 	mddev->safemode = 1;
6455 	if (mddev->external)
6456 		sysfs_notify_dirent_safe(mddev->sysfs_state);
6457 
6458 	md_wakeup_thread(mddev->thread);
6459 }
6460 
6461 static int start_dirty_degraded;
6462 
6463 /*
6464  * Read bitmap superblock and return the bitmap_id based on disk version.
6465  * This is used as fallback when default bitmap version and on-disk version
6466  * doesn't match, and mdadm is not the latest version to set bitmap_type.
6467  */
6468 static enum md_submodule_id md_bitmap_get_id_from_sb(struct mddev *mddev)
6469 {
6470 	struct md_rdev *rdev;
6471 	struct page *sb_page;
6472 	bitmap_super_t *sb;
6473 	enum md_submodule_id id = ID_BITMAP_NONE;
6474 	sector_t sector;
6475 	u32 version;
6476 
6477 	if (!mddev->bitmap_info.offset)
6478 		return ID_BITMAP_NONE;
6479 
6480 	sb_page = alloc_page(GFP_KERNEL);
6481 	if (!sb_page) {
6482 		pr_warn("md: %s: failed to allocate memory for bitmap\n",
6483 			mdname(mddev));
6484 		return ID_BITMAP_NONE;
6485 	}
6486 
6487 	sector = mddev->bitmap_info.offset;
6488 
6489 	rdev_for_each(rdev, mddev) {
6490 		u32 iosize;
6491 
6492 		if (!test_bit(In_sync, &rdev->flags) ||
6493 		    test_bit(Faulty, &rdev->flags) ||
6494 		    test_bit(Bitmap_sync, &rdev->flags))
6495 			continue;
6496 
6497 		iosize = roundup(sizeof(bitmap_super_t),
6498 				 bdev_logical_block_size(rdev->bdev));
6499 		if (sync_page_io(rdev, sector, iosize, sb_page, REQ_OP_READ,
6500 				 true))
6501 			goto read_ok;
6502 	}
6503 	pr_warn("md: %s: failed to read bitmap from any device\n",
6504 		mdname(mddev));
6505 	goto out;
6506 
6507 read_ok:
6508 	sb = kmap_local_page(sb_page);
6509 	if (sb->magic != cpu_to_le32(BITMAP_MAGIC)) {
6510 		pr_warn("md: %s: invalid bitmap magic 0x%x\n",
6511 			mdname(mddev), le32_to_cpu(sb->magic));
6512 		goto out_unmap;
6513 	}
6514 
6515 	version = le32_to_cpu(sb->version);
6516 	switch (version) {
6517 	case BITMAP_MAJOR_LO:
6518 	case BITMAP_MAJOR_HI:
6519 	case BITMAP_MAJOR_CLUSTERED:
6520 		id = ID_BITMAP;
6521 		break;
6522 	case BITMAP_MAJOR_LOCKLESS:
6523 		id = ID_LLBITMAP;
6524 		break;
6525 	default:
6526 		pr_warn("md: %s: unknown bitmap version %u\n",
6527 			mdname(mddev), version);
6528 		break;
6529 	}
6530 
6531 out_unmap:
6532 	kunmap_local(sb);
6533 out:
6534 	__free_page(sb_page);
6535 	return id;
6536 }
6537 
6538 int md_bitmap_create_nosysfs(struct mddev *mddev)
6539 {
6540 	enum md_submodule_id orig_id = mddev->bitmap_id;
6541 	enum md_submodule_id sb_id;
6542 	int err;
6543 
6544 	if (mddev->bitmap_id == ID_BITMAP_NONE)
6545 		return -EINVAL;
6546 
6547 	if (!mddev_set_bitmap_ops_nosysfs(mddev)) {
6548 		mddev->bitmap_id = orig_id;
6549 		return -ENOENT;
6550 	}
6551 
6552 	err = mddev->bitmap_ops->create(mddev);
6553 	if (!err)
6554 		return 0;
6555 
6556 	/*
6557 	 * Create failed, if default bitmap version and on-disk version
6558 	 * doesn't match, and mdadm is not the latest version to set
6559 	 * bitmap_type, set bitmap_ops based on the disk version.
6560 	 */
6561 	mddev->bitmap_ops = NULL;
6562 
6563 	sb_id = md_bitmap_get_id_from_sb(mddev);
6564 	if (sb_id == ID_BITMAP_NONE || sb_id == orig_id) {
6565 		mddev->bitmap_id = orig_id;
6566 		return err;
6567 	}
6568 
6569 	pr_info("md: %s: bitmap version mismatch, switching from %d to %d\n",
6570 		mdname(mddev), orig_id, sb_id);
6571 
6572 	mddev->bitmap_id = sb_id;
6573 	if (!mddev_set_bitmap_ops_nosysfs(mddev)) {
6574 		mddev->bitmap_id = orig_id;
6575 		return -ENOENT;
6576 	}
6577 
6578 	err = mddev->bitmap_ops->create(mddev);
6579 	if (err) {
6580 		mddev->bitmap_ops = NULL;
6581 		mddev->bitmap_id = orig_id;
6582 	}
6583 
6584 	return err;
6585 }
6586 
6587 static int md_bitmap_create(struct mddev *mddev)
6588 {
6589 	int err;
6590 
6591 	err = md_bitmap_create_nosysfs(mddev);
6592 	if (err)
6593 		return err;
6594 
6595 	if (!mddev_is_dm(mddev) && mddev->bitmap_ops->groups)
6596 		md_bitmap_sysfs_add(mddev);
6597 
6598 	return 0;
6599 }
6600 
6601 void md_bitmap_destroy_nosysfs(struct mddev *mddev)
6602 {
6603 	if (!md_bitmap_registered(mddev))
6604 		return;
6605 
6606 	mddev->bitmap_ops->destroy(mddev);
6607 	mddev->bitmap_ops = NULL;
6608 }
6609 
6610 static void md_bitmap_destroy(struct mddev *mddev)
6611 {
6612 	if (!mddev_is_dm(mddev) && mddev->bitmap_ops &&
6613 	    mddev->bitmap_ops->groups)
6614 		md_bitmap_sysfs_del(mddev);
6615 
6616 	md_bitmap_destroy_nosysfs(mddev);
6617 }
6618 
6619 static void md_bitmap_set_none(struct mddev *mddev)
6620 {
6621 	mddev->bitmap_id = ID_BITMAP_NONE;
6622 	if (!mddev_set_bitmap_ops_nosysfs(mddev))
6623 		return;
6624 
6625 	if (!mddev_is_dm(mddev) && mddev->bitmap_ops->groups)
6626 		md_bitmap_sysfs_add(mddev);
6627 }
6628 
6629 int md_run(struct mddev *mddev)
6630 {
6631 	int err;
6632 	struct md_rdev *rdev;
6633 	struct md_personality *pers;
6634 	bool nowait = true;
6635 
6636 	if (list_empty(&mddev->disks))
6637 		/* cannot run an array with no devices.. */
6638 		return -EINVAL;
6639 
6640 	if (mddev->pers)
6641 		return -EBUSY;
6642 	/* Cannot run until previous stop completes properly */
6643 	if (mddev->sysfs_active)
6644 		return -EBUSY;
6645 
6646 	/*
6647 	 * Analyze all RAID superblock(s)
6648 	 */
6649 	if (!mddev->raid_disks) {
6650 		if (!mddev->persistent)
6651 			return -EINVAL;
6652 		err = analyze_sbs(mddev);
6653 		if (err)
6654 			return -EINVAL;
6655 	}
6656 
6657 	if (mddev->level != LEVEL_NONE)
6658 		request_module("md-level-%d", mddev->level);
6659 	else if (mddev->clevel[0])
6660 		request_module("md-%s", mddev->clevel);
6661 
6662 	/*
6663 	 * Drop all container device buffers, from now on
6664 	 * the only valid external interface is through the md
6665 	 * device.
6666 	 */
6667 	clear_bit(MD_HAS_SUPERBLOCK, &mddev->flags);
6668 	rdev_for_each(rdev, mddev) {
6669 		if (test_bit(Faulty, &rdev->flags))
6670 			continue;
6671 		sync_blockdev(rdev->bdev);
6672 		invalidate_bdev(rdev->bdev);
6673 		if (mddev->ro != MD_RDONLY && rdev_read_only(rdev)) {
6674 			mddev->ro = MD_RDONLY;
6675 			if (!mddev_is_dm(mddev))
6676 				set_disk_ro(mddev->gendisk, 1);
6677 		}
6678 
6679 		if (rdev->sb_page)
6680 			set_bit(MD_HAS_SUPERBLOCK, &mddev->flags);
6681 
6682 		/* perform some consistency tests on the device.
6683 		 * We don't want the data to overlap the metadata,
6684 		 * Internal Bitmap issues have been handled elsewhere.
6685 		 */
6686 		if (rdev->meta_bdev) {
6687 			/* Nothing to check */;
6688 		} else if (rdev->data_offset < rdev->sb_start) {
6689 			if (mddev->dev_sectors &&
6690 			    rdev->data_offset + mddev->dev_sectors
6691 			    > rdev->sb_start) {
6692 				pr_warn("md: %s: data overlaps metadata\n",
6693 					mdname(mddev));
6694 				return -EINVAL;
6695 			}
6696 		} else {
6697 			if (rdev->sb_start + rdev->sb_size/512
6698 			    > rdev->data_offset) {
6699 				pr_warn("md: %s: metadata overlaps data\n",
6700 					mdname(mddev));
6701 				return -EINVAL;
6702 			}
6703 		}
6704 		sysfs_notify_dirent_safe(rdev->sysfs_state);
6705 		nowait = nowait && bdev_nowait(rdev->bdev);
6706 	}
6707 
6708 	pers = get_pers(mddev->level, mddev->clevel);
6709 	if (!pers)
6710 		return -EINVAL;
6711 	if (mddev->level != pers->head.id) {
6712 		mddev->level = pers->head.id;
6713 		mddev->new_level = pers->head.id;
6714 	}
6715 	strscpy(mddev->clevel, pers->head.name, sizeof(mddev->clevel));
6716 
6717 	if (mddev->reshape_position != MaxSector &&
6718 	    pers->start_reshape == NULL) {
6719 		/* This personality cannot handle reshaping... */
6720 		put_pers(pers);
6721 		return -EINVAL;
6722 	}
6723 
6724 	if (pers->sync_request) {
6725 		/* Warn if this is a potentially silly
6726 		 * configuration.
6727 		 */
6728 		struct md_rdev *rdev2;
6729 		int warned = 0;
6730 
6731 		rdev_for_each(rdev, mddev)
6732 			rdev_for_each(rdev2, mddev) {
6733 				if (rdev < rdev2 &&
6734 				    rdev->bdev->bd_disk ==
6735 				    rdev2->bdev->bd_disk) {
6736 					pr_warn("%s: WARNING: %pg appears to be on the same physical disk as %pg.\n",
6737 						mdname(mddev),
6738 						rdev->bdev,
6739 						rdev2->bdev);
6740 					warned = 1;
6741 				}
6742 			}
6743 
6744 		if (warned)
6745 			pr_warn("True protection against single-disk failure might be compromised.\n");
6746 	}
6747 
6748 	/* dm-raid expect sync_thread to be frozen until resume */
6749 	if (!mddev_is_dm(mddev))
6750 		mddev->recovery = 0;
6751 
6752 	/* may be over-ridden by personality */
6753 	mddev->resync_max_sectors = mddev->dev_sectors;
6754 
6755 	mddev->ok_start_degraded = start_dirty_degraded;
6756 
6757 	if (start_readonly && md_is_rdwr(mddev))
6758 		mddev->ro = MD_AUTO_READ; /* read-only, but switch on first write */
6759 
6760 	err = pers->run(mddev);
6761 	if (err)
6762 		pr_warn("md: pers->run() failed ...\n");
6763 	else if (pers->size(mddev, 0, 0) < mddev->array_sectors) {
6764 		WARN_ONCE(!mddev->external_size,
6765 			  "%s: default size too small, but 'external_size' not in effect?\n",
6766 			  __func__);
6767 		pr_warn("md: invalid array_size %llu > default size %llu\n",
6768 			(unsigned long long)mddev->array_sectors / 2,
6769 			(unsigned long long)pers->size(mddev, 0, 0) / 2);
6770 		err = -EINVAL;
6771 	}
6772 	if (err == 0 && pers->sync_request &&
6773 	    (mddev->bitmap_info.file || mddev->bitmap_info.offset)) {
6774 		err = md_bitmap_create(mddev);
6775 		if (err)
6776 			pr_warn("%s: failed to create bitmap (%d)\n",
6777 				mdname(mddev), err);
6778 	}
6779 	if (err)
6780 		goto bitmap_abort;
6781 
6782 	if (mddev->bitmap_info.max_write_behind > 0) {
6783 		bool create_pool = false;
6784 
6785 		rdev_for_each(rdev, mddev) {
6786 			if (test_bit(WriteMostly, &rdev->flags) &&
6787 			    rdev_init_serial(rdev))
6788 				create_pool = true;
6789 		}
6790 		if (create_pool && mddev->serial_info_pool == NULL) {
6791 			mddev->serial_info_pool =
6792 				mempool_create_kmalloc_pool(NR_SERIAL_INFOS,
6793 						    sizeof(struct serial_info));
6794 			if (!mddev->serial_info_pool) {
6795 				err = -ENOMEM;
6796 				goto bitmap_abort;
6797 			}
6798 		}
6799 	}
6800 
6801 	if (pers->sync_request) {
6802 		if (mddev->kobj.sd &&
6803 		    sysfs_create_group(&mddev->kobj, &md_redundancy_group))
6804 			pr_warn("md: cannot register extra attributes for %s\n",
6805 				mdname(mddev));
6806 		mddev->sysfs_action = sysfs_get_dirent_safe(mddev->kobj.sd, "sync_action");
6807 		mddev->sysfs_completed = sysfs_get_dirent_safe(mddev->kobj.sd, "sync_completed");
6808 		mddev->sysfs_degraded = sysfs_get_dirent_safe(mddev->kobj.sd, "degraded");
6809 	} else if (mddev->ro == MD_AUTO_READ)
6810 		mddev->ro = MD_RDWR;
6811 
6812 	atomic_set(&mddev->max_corr_read_errors,
6813 		   MD_DEFAULT_MAX_CORRECTED_READ_ERRORS);
6814 	mddev->safemode = 0;
6815 	if (mddev_is_clustered(mddev))
6816 		mddev->safemode_delay = 0;
6817 	else
6818 		mddev->safemode_delay = DEFAULT_SAFEMODE_DELAY;
6819 	mddev->in_sync = 1;
6820 	smp_wmb();
6821 	spin_lock(&mddev->lock);
6822 	mddev->pers = pers;
6823 	spin_unlock(&mddev->lock);
6824 	rdev_for_each(rdev, mddev)
6825 		if (rdev->raid_disk >= 0)
6826 			sysfs_link_rdev(mddev, rdev); /* failure here is OK */
6827 
6828 	if (mddev->degraded && md_is_rdwr(mddev))
6829 		/* This ensures that recovering status is reported immediately
6830 		 * via sysfs - until a lack of spares is confirmed.
6831 		 */
6832 		set_bit(MD_RECOVERY_RECOVER, &mddev->recovery);
6833 	set_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
6834 
6835 	if (mddev->sb_flags)
6836 		md_update_sb(mddev, 0);
6837 
6838 	if (IS_ENABLED(CONFIG_MD_BITMAP) && !mddev->bitmap_info.file &&
6839 	    !mddev->bitmap_info.offset)
6840 		md_bitmap_set_none(mddev);
6841 
6842 	md_new_event();
6843 	return 0;
6844 
6845 bitmap_abort:
6846 	mddev_detach(mddev);
6847 	if (mddev->private)
6848 		pers->free(mddev, mddev->private);
6849 	mddev->private = NULL;
6850 	put_pers(pers);
6851 	md_bitmap_destroy(mddev);
6852 	return err;
6853 }
6854 EXPORT_SYMBOL_GPL(md_run);
6855 
6856 int do_md_run(struct mddev *mddev)
6857 {
6858 	int err;
6859 
6860 	set_bit(MD_NOT_READY, &mddev->flags);
6861 	err = md_run(mddev);
6862 	if (err)
6863 		goto out;
6864 
6865 	if (md_bitmap_registered(mddev)) {
6866 		err = mddev->bitmap_ops->load(mddev);
6867 		if (err) {
6868 			md_bitmap_destroy(mddev);
6869 			goto out;
6870 		}
6871 	}
6872 
6873 	if (mddev_is_clustered(mddev))
6874 		md_allow_write(mddev);
6875 
6876 	/* run start up tasks that require md_thread */
6877 	md_start(mddev);
6878 
6879 	md_wakeup_thread(mddev->sync_thread); /* possibly kick off a reshape */
6880 
6881 	set_capacity_and_notify(mddev->gendisk, mddev->array_sectors);
6882 	clear_bit(MD_NOT_READY, &mddev->flags);
6883 	mddev->changed = 1;
6884 	kobject_uevent(&disk_to_dev(mddev->gendisk)->kobj, KOBJ_CHANGE);
6885 	sysfs_notify_dirent_safe(mddev->sysfs_state);
6886 	sysfs_notify_dirent_safe(mddev->sysfs_action);
6887 	sysfs_notify_dirent_safe(mddev->sysfs_degraded);
6888 out:
6889 	clear_bit(MD_NOT_READY, &mddev->flags);
6890 	return err;
6891 }
6892 
6893 int md_start(struct mddev *mddev)
6894 {
6895 	int ret = 0;
6896 
6897 	if (mddev->pers->start) {
6898 		set_bit(MD_RECOVERY_WAIT, &mddev->recovery);
6899 		ret = mddev->pers->start(mddev);
6900 		clear_bit(MD_RECOVERY_WAIT, &mddev->recovery);
6901 		md_wakeup_thread(mddev->sync_thread);
6902 	}
6903 	return ret;
6904 }
6905 EXPORT_SYMBOL_GPL(md_start);
6906 
6907 static int restart_array(struct mddev *mddev)
6908 {
6909 	struct gendisk *disk = mddev->gendisk;
6910 	struct md_rdev *rdev;
6911 	bool has_journal = false;
6912 	bool has_readonly = false;
6913 
6914 	/* Complain if it has no devices */
6915 	if (list_empty(&mddev->disks))
6916 		return -ENXIO;
6917 	if (!mddev->pers)
6918 		return -EINVAL;
6919 	if (md_is_rdwr(mddev))
6920 		return -EBUSY;
6921 
6922 	rcu_read_lock();
6923 	rdev_for_each_rcu(rdev, mddev) {
6924 		if (test_bit(Journal, &rdev->flags) &&
6925 		    !test_bit(Faulty, &rdev->flags))
6926 			has_journal = true;
6927 		if (rdev_read_only(rdev))
6928 			has_readonly = true;
6929 	}
6930 	rcu_read_unlock();
6931 	if (test_bit(MD_HAS_JOURNAL, &mddev->flags) && !has_journal)
6932 		/* Don't restart rw with journal missing/faulty */
6933 			return -EINVAL;
6934 	if (has_readonly)
6935 		return -EROFS;
6936 
6937 	mddev->safemode = 0;
6938 	mddev->ro = MD_RDWR;
6939 	set_disk_ro(disk, 0);
6940 	pr_debug("md: %s switched to read-write mode.\n", mdname(mddev));
6941 	/* Kick recovery or resync if necessary */
6942 	set_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
6943 	md_wakeup_thread(mddev->sync_thread);
6944 	sysfs_notify_dirent_safe(mddev->sysfs_state);
6945 	return 0;
6946 }
6947 
6948 static void md_clean(struct mddev *mddev)
6949 {
6950 	mddev->array_sectors = 0;
6951 	mddev->external_size = 0;
6952 	mddev->dev_sectors = 0;
6953 	mddev->raid_disks = 0;
6954 	mddev->resync_offset = 0;
6955 	mddev->resync_min = 0;
6956 	mddev->resync_max = MaxSector;
6957 	mddev->reshape_position = MaxSector;
6958 	/* we still need mddev->external in export_rdev, do not clear it yet */
6959 	mddev->persistent = 0;
6960 	mddev->level = LEVEL_NONE;
6961 	mddev->clevel[0] = 0;
6962 
6963 	/*
6964 	 * For legacy_async_del_gendisk mode, it can stop the array in the
6965 	 * middle of assembling it, then it still can access the array. So
6966 	 * it needs to clear MD_CLOSING. If not legacy_async_del_gendisk,
6967 	 * it can't open the array again after stopping it. So it doesn't
6968 	 * clear MD_CLOSING.
6969 	 */
6970 	if (legacy_async_del_gendisk && mddev->hold_active) {
6971 		clear_bit(MD_CLOSING, &mddev->flags);
6972 	} else {
6973 		/* if UNTIL_STOP is set, it's cleared here */
6974 		mddev->hold_active = 0;
6975 		/* Don't clear MD_CLOSING, or mddev can be opened again. */
6976 		mddev->flags &= BIT_ULL_MASK(MD_CLOSING);
6977 	}
6978 	mddev->sb_flags = 0;
6979 	mddev->ro = MD_RDWR;
6980 	mddev->metadata_type[0] = 0;
6981 	mddev->chunk_sectors = 0;
6982 	mddev->ctime = mddev->utime = 0;
6983 	mddev->layout = 0;
6984 	mddev->logical_block_size = 0;
6985 	mddev->max_disks = 0;
6986 	mddev->events = 0;
6987 	mddev->can_decrease_events = 0;
6988 	mddev->delta_disks = 0;
6989 	mddev->reshape_backwards = 0;
6990 	mddev->new_level = LEVEL_NONE;
6991 	mddev->new_layout = 0;
6992 	mddev->new_chunk_sectors = 0;
6993 	mddev->curr_resync = MD_RESYNC_NONE;
6994 	atomic64_set(&mddev->resync_mismatches, 0);
6995 	mddev->suspend_lo = mddev->suspend_hi = 0;
6996 	mddev->sync_speed_min = mddev->sync_speed_max = 0;
6997 	mddev->recovery = 0;
6998 	mddev->in_sync = 0;
6999 	mddev->changed = 0;
7000 	mddev->degraded = 0;
7001 	mddev->safemode = 0;
7002 	mddev->private = NULL;
7003 	mddev->cluster_info = NULL;
7004 	mddev->bitmap_info.offset = 0;
7005 	mddev->bitmap_info.default_offset = 0;
7006 	mddev->bitmap_info.default_space = 0;
7007 	mddev->bitmap_info.chunksize = 0;
7008 	mddev->bitmap_info.daemon_sleep = 0;
7009 	mddev->bitmap_info.max_write_behind = 0;
7010 	mddev->bitmap_info.nodes = 0;
7011 }
7012 
7013 static void __md_stop_writes(struct mddev *mddev)
7014 {
7015 	timer_delete_sync(&mddev->safemode_timer);
7016 
7017 	if (md_is_rdwr(mddev) || !mddev_is_dm(mddev)) {
7018 		if (mddev->pers && mddev->pers->quiesce) {
7019 			mddev->pers->quiesce(mddev, 1);
7020 			mddev->pers->quiesce(mddev, 0);
7021 		}
7022 
7023 		if (md_bitmap_enabled(mddev, true))
7024 			mddev->bitmap_ops->flush(mddev);
7025 	}
7026 
7027 	if (md_is_rdwr(mddev) &&
7028 	    ((!mddev->in_sync && !mddev_is_clustered(mddev)) ||
7029 	     mddev->sb_flags)) {
7030 		/* mark array as shutdown cleanly */
7031 		if (!mddev_is_clustered(mddev))
7032 			mddev->in_sync = 1;
7033 		md_update_sb(mddev, 1);
7034 	}
7035 	/* disable policy to guarantee rdevs free resources for serialization */
7036 	clear_bit(MD_SERIALIZE_POLICY, &mddev->flags);
7037 	mddev_destroy_serial_pool(mddev, NULL);
7038 }
7039 
7040 void md_stop_writes(struct mddev *mddev)
7041 {
7042 	mddev_lock_nointr(mddev);
7043 	set_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
7044 	stop_sync_thread(mddev, true);
7045 	__md_stop_writes(mddev);
7046 	mddev_unlock(mddev);
7047 }
7048 EXPORT_SYMBOL_GPL(md_stop_writes);
7049 
7050 static void mddev_detach(struct mddev *mddev)
7051 {
7052 	if (md_bitmap_enabled(mddev, false))
7053 		mddev->bitmap_ops->wait_behind_writes(mddev);
7054 	if (mddev->pers && mddev->pers->quiesce && !is_md_suspended(mddev)) {
7055 		mddev->pers->quiesce(mddev, 1);
7056 		mddev->pers->quiesce(mddev, 0);
7057 	}
7058 	md_unregister_thread(mddev, &mddev->thread);
7059 
7060 	/* the unplug fn references 'conf' */
7061 	if (!mddev_is_dm(mddev))
7062 		blk_sync_queue(mddev->gendisk->queue);
7063 }
7064 
7065 static void __md_stop(struct mddev *mddev)
7066 {
7067 	struct md_personality *pers = mddev->pers;
7068 
7069 	md_bitmap_destroy(mddev);
7070 	mddev_detach(mddev);
7071 	spin_lock(&mddev->lock);
7072 	mddev->pers = NULL;
7073 	spin_unlock(&mddev->lock);
7074 	if (mddev->private)
7075 		pers->free(mddev, mddev->private);
7076 	mddev->private = NULL;
7077 	put_pers(pers);
7078 	clear_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
7079 }
7080 
7081 void md_stop(struct mddev *mddev)
7082 {
7083 	lockdep_assert_held(&mddev->reconfig_mutex);
7084 
7085 	/* stop the array and free an attached data structures.
7086 	 * This is called from dm-raid
7087 	 */
7088 	__md_stop_writes(mddev);
7089 	__md_stop(mddev);
7090 }
7091 
7092 EXPORT_SYMBOL_GPL(md_stop);
7093 
7094 /* ensure 'mddev->pers' exist before calling md_set_readonly() */
7095 static int md_set_readonly(struct mddev *mddev)
7096 {
7097 	int err = 0;
7098 	int did_freeze = 0;
7099 
7100 	if (mddev->external && test_bit(MD_SB_CHANGE_PENDING, &mddev->sb_flags))
7101 		return -EBUSY;
7102 
7103 	if (!test_bit(MD_RECOVERY_FROZEN, &mddev->recovery)) {
7104 		did_freeze = 1;
7105 		set_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
7106 	}
7107 
7108 	stop_sync_thread(mddev, false);
7109 	wait_event(mddev->sb_wait,
7110 		   !test_bit(MD_SB_CHANGE_PENDING, &mddev->sb_flags));
7111 	mddev_lock_nointr(mddev);
7112 
7113 	if (test_bit(MD_RECOVERY_RUNNING, &mddev->recovery)) {
7114 		pr_warn("md: %s still in use.\n",mdname(mddev));
7115 		err = -EBUSY;
7116 		goto out;
7117 	}
7118 
7119 	__md_stop_writes(mddev);
7120 
7121 	if (mddev->ro == MD_RDONLY) {
7122 		err  = -ENXIO;
7123 		goto out;
7124 	}
7125 
7126 	mddev->ro = MD_RDONLY;
7127 	set_disk_ro(mddev->gendisk, 1);
7128 
7129 out:
7130 	if (!err || did_freeze) {
7131 		clear_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
7132 		set_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
7133 		sysfs_notify_dirent_safe(mddev->sysfs_state);
7134 	}
7135 
7136 	return err;
7137 }
7138 
7139 /* mode:
7140  *   0 - completely stop and dis-assemble array
7141  *   2 - stop but do not disassemble array
7142  */
7143 static int do_md_stop(struct mddev *mddev, int mode)
7144 {
7145 	struct gendisk *disk = mddev->gendisk;
7146 	struct md_rdev *rdev;
7147 	int did_freeze = 0;
7148 
7149 	if (!test_bit(MD_RECOVERY_FROZEN, &mddev->recovery)) {
7150 		did_freeze = 1;
7151 		set_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
7152 	}
7153 
7154 	stop_sync_thread(mddev, true);
7155 
7156 	if (mddev->sysfs_active ||
7157 	    test_bit(MD_RECOVERY_RUNNING, &mddev->recovery)) {
7158 		pr_warn("md: %s still in use.\n",mdname(mddev));
7159 		if (did_freeze) {
7160 			clear_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
7161 			set_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
7162 		}
7163 		return -EBUSY;
7164 	}
7165 	if (mddev->pers) {
7166 		if (!md_is_rdwr(mddev))
7167 			set_disk_ro(disk, 0);
7168 
7169 		if (mode == 2 && mddev->pers->sync_request &&
7170 		    mddev->to_remove == NULL)
7171 			mddev->to_remove = &md_redundancy_group;
7172 
7173 		__md_stop_writes(mddev);
7174 		__md_stop(mddev);
7175 
7176 		/* tell userspace to handle 'inactive' */
7177 		sysfs_notify_dirent_safe(mddev->sysfs_state);
7178 
7179 		rdev_for_each(rdev, mddev)
7180 			if (rdev->raid_disk >= 0)
7181 				sysfs_unlink_rdev(mddev, rdev);
7182 
7183 		set_capacity_and_notify(disk, 0);
7184 		mddev->changed = 1;
7185 
7186 		if (!md_is_rdwr(mddev))
7187 			mddev->ro = MD_RDWR;
7188 	}
7189 	/*
7190 	 * Free resources if final stop
7191 	 */
7192 	if (mode == 0) {
7193 		pr_info("md: %s stopped.\n", mdname(mddev));
7194 
7195 		if (mddev->bitmap_info.file) {
7196 			struct file *f = mddev->bitmap_info.file;
7197 			spin_lock(&mddev->lock);
7198 			mddev->bitmap_info.file = NULL;
7199 			spin_unlock(&mddev->lock);
7200 			fput(f);
7201 		}
7202 		mddev->bitmap_info.offset = 0;
7203 
7204 		export_array(mddev);
7205 		md_clean(mddev);
7206 		if (!legacy_async_del_gendisk)
7207 			set_bit(MD_DELETED, &mddev->flags);
7208 	}
7209 	md_new_event();
7210 	sysfs_notify_dirent_safe(mddev->sysfs_state);
7211 	return 0;
7212 }
7213 
7214 #ifndef MODULE
7215 static void autorun_array(struct mddev *mddev)
7216 {
7217 	struct md_rdev *rdev;
7218 	int err;
7219 
7220 	if (list_empty(&mddev->disks))
7221 		return;
7222 
7223 	pr_info("md: running: ");
7224 
7225 	rdev_for_each(rdev, mddev) {
7226 		pr_cont("<%pg>", rdev->bdev);
7227 	}
7228 	pr_cont("\n");
7229 
7230 	err = do_md_run(mddev);
7231 	if (err) {
7232 		pr_warn("md: do_md_run() returned %d\n", err);
7233 		do_md_stop(mddev, 0);
7234 	}
7235 }
7236 
7237 /*
7238  * lets try to run arrays based on all disks that have arrived
7239  * until now. (those are in pending_raid_disks)
7240  *
7241  * the method: pick the first pending disk, collect all disks with
7242  * the same UUID, remove all from the pending list and put them into
7243  * the 'same_array' list. Then order this list based on superblock
7244  * update time (freshest comes first), kick out 'old' disks and
7245  * compare superblocks. If everything's fine then run it.
7246  *
7247  * If "unit" is allocated, then bump its reference count
7248  */
7249 static void autorun_devices(int part)
7250 {
7251 	struct md_rdev *rdev0, *rdev, *tmp;
7252 	struct mddev *mddev;
7253 
7254 	pr_info("md: autorun ...\n");
7255 	while (!list_empty(&pending_raid_disks)) {
7256 		int unit;
7257 		dev_t dev;
7258 		LIST_HEAD(candidates);
7259 		rdev0 = list_entry(pending_raid_disks.next,
7260 					 struct md_rdev, same_set);
7261 
7262 		pr_debug("md: considering %pg ...\n", rdev0->bdev);
7263 		INIT_LIST_HEAD(&candidates);
7264 		rdev_for_each_list(rdev, tmp, &pending_raid_disks)
7265 			if (super_90_load(rdev, rdev0, 0) >= 0) {
7266 				pr_debug("md:  adding %pg ...\n",
7267 					 rdev->bdev);
7268 				list_move(&rdev->same_set, &candidates);
7269 			}
7270 		/*
7271 		 * now we have a set of devices, with all of them having
7272 		 * mostly sane superblocks. It's time to allocate the
7273 		 * mddev.
7274 		 */
7275 		if (part) {
7276 			dev = MKDEV(mdp_major,
7277 				    rdev0->preferred_minor << MdpMinorShift);
7278 			unit = MINOR(dev) >> MdpMinorShift;
7279 		} else {
7280 			dev = MKDEV(MD_MAJOR, rdev0->preferred_minor);
7281 			unit = MINOR(dev);
7282 		}
7283 		if (rdev0->preferred_minor != unit) {
7284 			pr_warn("md: unit number in %pg is bad: %d\n",
7285 				rdev0->bdev, rdev0->preferred_minor);
7286 			break;
7287 		}
7288 
7289 		mddev = md_alloc(dev, NULL);
7290 		if (IS_ERR(mddev))
7291 			break;
7292 
7293 		if (mddev_suspend_and_lock(mddev))
7294 			pr_warn("md: %s locked, cannot run\n", mdname(mddev));
7295 		else if (mddev->raid_disks || mddev->major_version
7296 			 || !list_empty(&mddev->disks)) {
7297 			pr_warn("md: %s already running, cannot run %pg\n",
7298 				mdname(mddev), rdev0->bdev);
7299 			mddev_unlock_and_resume(mddev);
7300 		} else {
7301 			pr_debug("md: created %s\n", mdname(mddev));
7302 			mddev->persistent = 1;
7303 			rdev_for_each_list(rdev, tmp, &candidates) {
7304 				list_del_init(&rdev->same_set);
7305 				if (bind_rdev_to_array(rdev, mddev))
7306 					export_rdev(rdev);
7307 			}
7308 			autorun_array(mddev);
7309 			mddev_unlock_and_resume(mddev);
7310 		}
7311 		/* on success, candidates will be empty, on error
7312 		 * it won't...
7313 		 */
7314 		rdev_for_each_list(rdev, tmp, &candidates) {
7315 			list_del_init(&rdev->same_set);
7316 			export_rdev(rdev);
7317 		}
7318 		mddev_put(mddev);
7319 	}
7320 	pr_info("md: ... autorun DONE.\n");
7321 }
7322 #endif /* !MODULE */
7323 
7324 static int get_version(void __user *arg)
7325 {
7326 	mdu_version_t ver;
7327 
7328 	ver.major = MD_MAJOR_VERSION;
7329 	ver.minor = MD_MINOR_VERSION;
7330 	ver.patchlevel = MD_PATCHLEVEL_VERSION;
7331 
7332 	if (copy_to_user(arg, &ver, sizeof(ver)))
7333 		return -EFAULT;
7334 
7335 	return 0;
7336 }
7337 
7338 static int get_array_info(struct mddev *mddev, void __user *arg)
7339 {
7340 	mdu_array_info_t info;
7341 	int nr,working,insync,failed,spare;
7342 	struct md_rdev *rdev;
7343 
7344 	nr = working = insync = failed = spare = 0;
7345 	rcu_read_lock();
7346 	rdev_for_each_rcu(rdev, mddev) {
7347 		nr++;
7348 		if (test_bit(Faulty, &rdev->flags))
7349 			failed++;
7350 		else {
7351 			working++;
7352 			if (test_bit(In_sync, &rdev->flags))
7353 				insync++;
7354 			else if (test_bit(Journal, &rdev->flags))
7355 				/* TODO: add journal count to md_u.h */
7356 				;
7357 			else
7358 				spare++;
7359 		}
7360 	}
7361 	rcu_read_unlock();
7362 
7363 	info.major_version = mddev->major_version;
7364 	info.minor_version = mddev->minor_version;
7365 	info.patch_version = MD_PATCHLEVEL_VERSION;
7366 	info.ctime         = clamp_t(time64_t, mddev->ctime, 0, U32_MAX);
7367 	info.level         = mddev->level;
7368 	info.size          = mddev->dev_sectors / 2;
7369 	if (info.size != mddev->dev_sectors / 2) /* overflow */
7370 		info.size = -1;
7371 	info.nr_disks      = nr;
7372 	info.raid_disks    = mddev->raid_disks;
7373 	info.md_minor      = mddev->md_minor;
7374 	info.not_persistent= !mddev->persistent;
7375 
7376 	info.utime         = clamp_t(time64_t, mddev->utime, 0, U32_MAX);
7377 	info.state         = 0;
7378 	if (mddev->in_sync)
7379 		info.state = (1<<MD_SB_CLEAN);
7380 	if (mddev->bitmap && mddev->bitmap_info.offset)
7381 		info.state |= (1<<MD_SB_BITMAP_PRESENT);
7382 	if (mddev_is_clustered(mddev))
7383 		info.state |= (1<<MD_SB_CLUSTERED);
7384 	info.active_disks  = insync;
7385 	info.working_disks = working;
7386 	info.failed_disks  = failed;
7387 	info.spare_disks   = spare;
7388 
7389 	info.layout        = mddev->layout;
7390 	info.chunk_size    = mddev->chunk_sectors << 9;
7391 
7392 	if (copy_to_user(arg, &info, sizeof(info)))
7393 		return -EFAULT;
7394 
7395 	return 0;
7396 }
7397 
7398 static int get_bitmap_file(struct mddev *mddev, void __user * arg)
7399 {
7400 	mdu_bitmap_file_t *file = NULL; /* too big for stack allocation */
7401 	char *ptr;
7402 	int err;
7403 
7404 	file = kzalloc_obj(*file, GFP_NOIO);
7405 	if (!file)
7406 		return -ENOMEM;
7407 
7408 	err = 0;
7409 	spin_lock(&mddev->lock);
7410 	/* bitmap enabled */
7411 	if (mddev->bitmap_info.file) {
7412 		ptr = file_path(mddev->bitmap_info.file, file->pathname,
7413 				sizeof(file->pathname));
7414 		if (IS_ERR(ptr))
7415 			err = PTR_ERR(ptr);
7416 		else
7417 			memmove(file->pathname, ptr,
7418 				sizeof(file->pathname)-(ptr-file->pathname));
7419 	}
7420 	spin_unlock(&mddev->lock);
7421 
7422 	if (err == 0 &&
7423 	    copy_to_user(arg, file, sizeof(*file)))
7424 		err = -EFAULT;
7425 
7426 	kfree(file);
7427 	return err;
7428 }
7429 
7430 static int get_disk_info(struct mddev *mddev, void __user * arg)
7431 {
7432 	mdu_disk_info_t info;
7433 	struct md_rdev *rdev;
7434 
7435 	if (copy_from_user(&info, arg, sizeof(info)))
7436 		return -EFAULT;
7437 
7438 	rcu_read_lock();
7439 	rdev = md_find_rdev_nr_rcu(mddev, info.number);
7440 	if (rdev) {
7441 		info.major = MAJOR(rdev->bdev->bd_dev);
7442 		info.minor = MINOR(rdev->bdev->bd_dev);
7443 		info.raid_disk = rdev->raid_disk;
7444 		info.state = 0;
7445 		if (test_bit(Faulty, &rdev->flags))
7446 			info.state |= (1<<MD_DISK_FAULTY);
7447 		else if (test_bit(In_sync, &rdev->flags)) {
7448 			info.state |= (1<<MD_DISK_ACTIVE);
7449 			info.state |= (1<<MD_DISK_SYNC);
7450 		}
7451 		if (test_bit(Journal, &rdev->flags))
7452 			info.state |= (1<<MD_DISK_JOURNAL);
7453 		if (test_bit(WriteMostly, &rdev->flags))
7454 			info.state |= (1<<MD_DISK_WRITEMOSTLY);
7455 		if (test_bit(FailFast, &rdev->flags))
7456 			info.state |= (1<<MD_DISK_FAILFAST);
7457 	} else {
7458 		info.major = info.minor = 0;
7459 		info.raid_disk = -1;
7460 		info.state = (1<<MD_DISK_REMOVED);
7461 	}
7462 	rcu_read_unlock();
7463 
7464 	if (copy_to_user(arg, &info, sizeof(info)))
7465 		return -EFAULT;
7466 
7467 	return 0;
7468 }
7469 
7470 int md_add_new_disk(struct mddev *mddev, struct mdu_disk_info_s *info)
7471 {
7472 	struct md_rdev *rdev;
7473 	dev_t dev = MKDEV(info->major,info->minor);
7474 
7475 	if (mddev_is_clustered(mddev) &&
7476 		!(info->state & ((1 << MD_DISK_CLUSTER_ADD) | (1 << MD_DISK_CANDIDATE)))) {
7477 		pr_warn("%s: Cannot add to clustered mddev.\n",
7478 			mdname(mddev));
7479 		return -EINVAL;
7480 	}
7481 
7482 	if (info->major != MAJOR(dev) || info->minor != MINOR(dev))
7483 		return -EOVERFLOW;
7484 
7485 	if (!mddev->raid_disks) {
7486 		int err;
7487 		/* expecting a device which has a superblock */
7488 		rdev = md_import_device(dev, mddev->major_version, mddev->minor_version);
7489 		if (IS_ERR(rdev)) {
7490 			pr_warn("md: md_import_device returned %ld\n",
7491 				PTR_ERR(rdev));
7492 			return PTR_ERR(rdev);
7493 		}
7494 		if (!list_empty(&mddev->disks)) {
7495 			struct md_rdev *rdev0
7496 				= list_entry(mddev->disks.next,
7497 					     struct md_rdev, same_set);
7498 			err = super_types[mddev->major_version]
7499 				.load_super(rdev, rdev0, mddev->minor_version);
7500 			if (err < 0) {
7501 				pr_warn("md: %pg has different UUID to %pg\n",
7502 					rdev->bdev,
7503 					rdev0->bdev);
7504 				export_rdev(rdev);
7505 				return -EINVAL;
7506 			}
7507 		}
7508 		err = bind_rdev_to_array(rdev, mddev);
7509 		if (err)
7510 			export_rdev(rdev);
7511 		return err;
7512 	}
7513 
7514 	/*
7515 	 * md_add_new_disk can be used once the array is assembled
7516 	 * to add "hot spares".  They must already have a superblock
7517 	 * written
7518 	 */
7519 	if (mddev->pers) {
7520 		int err;
7521 		if (!mddev->pers->hot_add_disk) {
7522 			pr_warn("%s: personality does not support diskops!\n",
7523 				mdname(mddev));
7524 			return -EINVAL;
7525 		}
7526 		if (mddev->persistent)
7527 			rdev = md_import_device(dev, mddev->major_version,
7528 						mddev->minor_version);
7529 		else
7530 			rdev = md_import_device(dev, -1, -1);
7531 		if (IS_ERR(rdev)) {
7532 			pr_warn("md: md_import_device returned %ld\n",
7533 				PTR_ERR(rdev));
7534 			return PTR_ERR(rdev);
7535 		}
7536 		/* set saved_raid_disk if appropriate */
7537 		if (!mddev->persistent) {
7538 			if (info->state & (1<<MD_DISK_SYNC)  &&
7539 			    info->raid_disk < mddev->raid_disks) {
7540 				rdev->raid_disk = info->raid_disk;
7541 				clear_bit(Bitmap_sync, &rdev->flags);
7542 			} else
7543 				rdev->raid_disk = -1;
7544 			rdev->saved_raid_disk = rdev->raid_disk;
7545 		} else
7546 			super_types[mddev->major_version].
7547 				validate_super(mddev, NULL/*freshest*/, rdev);
7548 		if ((info->state & (1<<MD_DISK_SYNC)) &&
7549 		     rdev->raid_disk != info->raid_disk) {
7550 			/* This was a hot-add request, but events doesn't
7551 			 * match, so reject it.
7552 			 */
7553 			export_rdev(rdev);
7554 			return -EINVAL;
7555 		}
7556 
7557 		clear_bit(In_sync, &rdev->flags); /* just to be sure */
7558 		if (info->state & (1<<MD_DISK_WRITEMOSTLY))
7559 			set_bit(WriteMostly, &rdev->flags);
7560 		else
7561 			clear_bit(WriteMostly, &rdev->flags);
7562 		if (info->state & (1<<MD_DISK_FAILFAST))
7563 			set_bit(FailFast, &rdev->flags);
7564 		else
7565 			clear_bit(FailFast, &rdev->flags);
7566 
7567 		if (info->state & (1<<MD_DISK_JOURNAL)) {
7568 			struct md_rdev *rdev2;
7569 			bool has_journal = false;
7570 
7571 			/* make sure no existing journal disk */
7572 			rdev_for_each(rdev2, mddev) {
7573 				if (test_bit(Journal, &rdev2->flags)) {
7574 					has_journal = true;
7575 					break;
7576 				}
7577 			}
7578 			if (has_journal || mddev->bitmap) {
7579 				export_rdev(rdev);
7580 				return -EBUSY;
7581 			}
7582 			set_bit(Journal, &rdev->flags);
7583 		}
7584 		/*
7585 		 * check whether the device shows up in other nodes
7586 		 */
7587 		if (mddev_is_clustered(mddev)) {
7588 			if (info->state & (1 << MD_DISK_CANDIDATE))
7589 				set_bit(Candidate, &rdev->flags);
7590 			else if (info->state & (1 << MD_DISK_CLUSTER_ADD)) {
7591 				/* --add initiated by this node */
7592 				err = mddev->cluster_ops->add_new_disk(mddev, rdev);
7593 				if (err) {
7594 					export_rdev(rdev);
7595 					return err;
7596 				}
7597 			}
7598 		}
7599 
7600 		rdev->raid_disk = -1;
7601 		err = bind_rdev_to_array(rdev, mddev);
7602 
7603 		if (err)
7604 			export_rdev(rdev);
7605 
7606 		if (mddev_is_clustered(mddev)) {
7607 			if (info->state & (1 << MD_DISK_CANDIDATE)) {
7608 				if (!err) {
7609 					err = mddev->cluster_ops->new_disk_ack(
7610 							mddev, err == 0);
7611 					if (err)
7612 						md_kick_rdev_from_array(rdev);
7613 				}
7614 			} else {
7615 				if (err)
7616 					mddev->cluster_ops->add_new_disk_cancel(mddev);
7617 				else
7618 					err = add_bound_rdev(rdev);
7619 			}
7620 
7621 		} else if (!err)
7622 			err = add_bound_rdev(rdev);
7623 
7624 		return err;
7625 	}
7626 
7627 	/* otherwise, md_add_new_disk is only allowed
7628 	 * for major_version==0 superblocks
7629 	 */
7630 	if (mddev->major_version != 0) {
7631 		pr_warn("%s: ADD_NEW_DISK not supported\n", mdname(mddev));
7632 		return -EINVAL;
7633 	}
7634 
7635 	if (!(info->state & (1<<MD_DISK_FAULTY))) {
7636 		int err;
7637 		rdev = md_import_device(dev, -1, 0);
7638 		if (IS_ERR(rdev)) {
7639 			pr_warn("md: error, md_import_device() returned %ld\n",
7640 				PTR_ERR(rdev));
7641 			return PTR_ERR(rdev);
7642 		}
7643 		rdev->desc_nr = info->number;
7644 		if (info->raid_disk < mddev->raid_disks)
7645 			rdev->raid_disk = info->raid_disk;
7646 		else
7647 			rdev->raid_disk = -1;
7648 
7649 		if (rdev->raid_disk < mddev->raid_disks)
7650 			if (info->state & (1<<MD_DISK_SYNC))
7651 				set_bit(In_sync, &rdev->flags);
7652 
7653 		if (info->state & (1<<MD_DISK_WRITEMOSTLY))
7654 			set_bit(WriteMostly, &rdev->flags);
7655 		if (info->state & (1<<MD_DISK_FAILFAST))
7656 			set_bit(FailFast, &rdev->flags);
7657 
7658 		if (!mddev->persistent) {
7659 			pr_debug("md: nonpersistent superblock ...\n");
7660 			rdev->sb_start = bdev_nr_sectors(rdev->bdev);
7661 		} else
7662 			rdev->sb_start = calc_dev_sboffset(rdev);
7663 		rdev->sectors = rdev->sb_start;
7664 
7665 		err = bind_rdev_to_array(rdev, mddev);
7666 		if (err) {
7667 			export_rdev(rdev);
7668 			return err;
7669 		}
7670 	}
7671 
7672 	return 0;
7673 }
7674 
7675 static int hot_remove_disk(struct mddev *mddev, dev_t dev)
7676 {
7677 	struct md_rdev *rdev;
7678 
7679 	if (!mddev->pers)
7680 		return -ENODEV;
7681 
7682 	rdev = find_rdev(mddev, dev);
7683 	if (!rdev)
7684 		return -ENXIO;
7685 
7686 	if (rdev->raid_disk < 0)
7687 		goto kick_rdev;
7688 
7689 	clear_bit(Blocked, &rdev->flags);
7690 	remove_and_add_spares(mddev, rdev);
7691 
7692 	if (rdev->raid_disk >= 0)
7693 		goto busy;
7694 
7695 kick_rdev:
7696 	if (mddev_is_clustered(mddev) &&
7697 	    mddev->cluster_ops->remove_disk(mddev, rdev))
7698 		goto busy;
7699 
7700 	md_kick_rdev_from_array(rdev);
7701 	set_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags);
7702 	if (!mddev->thread)
7703 		md_update_sb(mddev, 1);
7704 	md_new_event();
7705 
7706 	return 0;
7707 busy:
7708 	pr_debug("md: cannot remove active disk %pg from %s ...\n",
7709 		 rdev->bdev, mdname(mddev));
7710 	return -EBUSY;
7711 }
7712 
7713 static int hot_add_disk(struct mddev *mddev, dev_t dev)
7714 {
7715 	int err;
7716 	struct md_rdev *rdev;
7717 
7718 	if (!mddev->pers)
7719 		return -ENODEV;
7720 
7721 	if (mddev->major_version != 0) {
7722 		pr_warn("%s: HOT_ADD may only be used with version-0 superblocks.\n",
7723 			mdname(mddev));
7724 		return -EINVAL;
7725 	}
7726 	if (!mddev->pers->hot_add_disk) {
7727 		pr_warn("%s: personality does not support diskops!\n",
7728 			mdname(mddev));
7729 		return -EINVAL;
7730 	}
7731 
7732 	rdev = md_import_device(dev, -1, 0);
7733 	if (IS_ERR(rdev)) {
7734 		pr_warn("md: error, md_import_device() returned %ld\n",
7735 			PTR_ERR(rdev));
7736 		return -EINVAL;
7737 	}
7738 
7739 	if (mddev->persistent)
7740 		rdev->sb_start = calc_dev_sboffset(rdev);
7741 	else
7742 		rdev->sb_start = bdev_nr_sectors(rdev->bdev);
7743 
7744 	rdev->sectors = rdev->sb_start;
7745 
7746 	if (test_bit(Faulty, &rdev->flags)) {
7747 		pr_warn("md: can not hot-add faulty %pg disk to %s!\n",
7748 			rdev->bdev, mdname(mddev));
7749 		err = -EINVAL;
7750 		goto abort_export;
7751 	}
7752 
7753 	clear_bit(In_sync, &rdev->flags);
7754 	rdev->desc_nr = -1;
7755 	rdev->saved_raid_disk = -1;
7756 	err = bind_rdev_to_array(rdev, mddev);
7757 	if (err)
7758 		goto abort_export;
7759 
7760 	/*
7761 	 * The rest should better be atomic, we can have disk failures
7762 	 * noticed in interrupt contexts ...
7763 	 */
7764 
7765 	rdev->raid_disk = -1;
7766 
7767 	set_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags);
7768 	if (!mddev->thread)
7769 		md_update_sb(mddev, 1);
7770 	/*
7771 	 * Kick recovery, maybe this spare has to be added to the
7772 	 * array immediately.
7773 	 */
7774 	set_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
7775 	md_new_event();
7776 	return 0;
7777 
7778 abort_export:
7779 	export_rdev(rdev);
7780 	return err;
7781 }
7782 
7783 static int set_bitmap_file(struct mddev *mddev, int fd)
7784 {
7785 	int err = 0;
7786 
7787 	if (!md_bitmap_registered(mddev) ||
7788 	    mddev->bitmap_id == ID_BITMAP_NONE)
7789 		return -EINVAL;
7790 
7791 	if (mddev->pers) {
7792 		if (!mddev->pers->quiesce || !mddev->thread)
7793 			return -EBUSY;
7794 		if (mddev->recovery || mddev->sync_thread)
7795 			return -EBUSY;
7796 		/* we should be able to change the bitmap.. */
7797 	}
7798 
7799 	if (fd >= 0) {
7800 		struct inode *inode;
7801 		struct file *f;
7802 
7803 		if (mddev->bitmap || mddev->bitmap_info.file)
7804 			return -EEXIST; /* cannot add when bitmap is present */
7805 
7806 		if (!IS_ENABLED(CONFIG_MD_BITMAP_FILE)) {
7807 			pr_warn("%s: bitmap files not supported by this kernel\n",
7808 				mdname(mddev));
7809 			return -EINVAL;
7810 		}
7811 		pr_warn("%s: using deprecated bitmap file support\n",
7812 			mdname(mddev));
7813 
7814 		f = fget(fd);
7815 
7816 		if (f == NULL) {
7817 			pr_warn("%s: error: failed to get bitmap file\n",
7818 				mdname(mddev));
7819 			return -EBADF;
7820 		}
7821 
7822 		inode = f->f_mapping->host;
7823 		if (!S_ISREG(inode->i_mode)) {
7824 			pr_warn("%s: error: bitmap file must be a regular file\n",
7825 				mdname(mddev));
7826 			err = -EBADF;
7827 		} else if (!(f->f_mode & FMODE_WRITE)) {
7828 			pr_warn("%s: error: bitmap file must open for write\n",
7829 				mdname(mddev));
7830 			err = -EBADF;
7831 		} else if (atomic_read(&inode->i_writecount) != 1) {
7832 			pr_warn("%s: error: bitmap file is already in use\n",
7833 				mdname(mddev));
7834 			err = -EBUSY;
7835 		}
7836 		if (err) {
7837 			fput(f);
7838 			return err;
7839 		}
7840 		mddev->bitmap_info.file = f;
7841 		mddev->bitmap_info.offset = 0; /* file overrides offset */
7842 	} else if (mddev->bitmap == NULL)
7843 		return -ENOENT; /* cannot remove what isn't there */
7844 	err = 0;
7845 	if (mddev->pers) {
7846 		if (fd >= 0) {
7847 			err = md_bitmap_create(mddev);
7848 			if (!err)
7849 				err = mddev->bitmap_ops->load(mddev);
7850 
7851 			if (err) {
7852 				md_bitmap_destroy(mddev);
7853 				md_bitmap_set_none(mddev);
7854 				fd = -1;
7855 			}
7856 		} else if (fd < 0) {
7857 			md_bitmap_destroy(mddev);
7858 			md_bitmap_set_none(mddev);
7859 		}
7860 	}
7861 
7862 	if (fd < 0) {
7863 		struct file *f = mddev->bitmap_info.file;
7864 		if (f) {
7865 			spin_lock(&mddev->lock);
7866 			mddev->bitmap_info.file = NULL;
7867 			spin_unlock(&mddev->lock);
7868 			fput(f);
7869 		}
7870 	}
7871 
7872 	return err;
7873 }
7874 
7875 /*
7876  * md_set_array_info is used two different ways
7877  * The original usage is when creating a new array.
7878  * In this usage, raid_disks is > 0 and it together with
7879  *  level, size, not_persistent,layout,chunksize determine the
7880  *  shape of the array.
7881  *  This will always create an array with a type-0.90.0 superblock.
7882  * The newer usage is when assembling an array.
7883  *  In this case raid_disks will be 0, and the major_version field is
7884  *  use to determine which style super-blocks are to be found on the devices.
7885  *  The minor and patch _version numbers are also kept incase the
7886  *  super_block handler wishes to interpret them.
7887  */
7888 int md_set_array_info(struct mddev *mddev, struct mdu_array_info_s *info)
7889 {
7890 	if (info->raid_disks == 0) {
7891 		/* just setting version number for superblock loading */
7892 		if (info->major_version < 0 ||
7893 		    info->major_version >= ARRAY_SIZE(super_types) ||
7894 		    super_types[info->major_version].name == NULL) {
7895 			/* maybe try to auto-load a module? */
7896 			pr_warn("md: superblock version %d not known\n",
7897 				info->major_version);
7898 			return -EINVAL;
7899 		}
7900 		mddev->major_version = info->major_version;
7901 		mddev->minor_version = info->minor_version;
7902 		mddev->patch_version = info->patch_version;
7903 		mddev->persistent = !info->not_persistent;
7904 		/* ensure mddev_put doesn't delete this now that there
7905 		 * is some minimal configuration.
7906 		 */
7907 		mddev->ctime         = ktime_get_real_seconds();
7908 		return 0;
7909 	}
7910 	mddev->major_version = MD_MAJOR_VERSION;
7911 	mddev->minor_version = MD_MINOR_VERSION;
7912 	mddev->patch_version = MD_PATCHLEVEL_VERSION;
7913 	mddev->ctime         = ktime_get_real_seconds();
7914 
7915 	mddev->level         = info->level;
7916 	mddev->clevel[0]     = 0;
7917 	mddev->dev_sectors   = 2 * (sector_t)info->size;
7918 	mddev->raid_disks    = info->raid_disks;
7919 	/* don't set md_minor, it is determined by which /dev/md* was
7920 	 * openned
7921 	 */
7922 	if (info->state & (1<<MD_SB_CLEAN))
7923 		mddev->resync_offset = MaxSector;
7924 	else
7925 		mddev->resync_offset = 0;
7926 	mddev->persistent    = ! info->not_persistent;
7927 	mddev->external	     = 0;
7928 
7929 	mddev->layout        = info->layout;
7930 	if (mddev->level == 0)
7931 		/* Cannot trust RAID0 layout info here */
7932 		mddev->layout = -1;
7933 	mddev->chunk_sectors = info->chunk_size >> 9;
7934 
7935 	if (mddev->persistent) {
7936 		mddev->max_disks = MD_SB_DISKS;
7937 		mddev->flags = 0;
7938 		mddev->sb_flags = 0;
7939 	}
7940 	set_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags);
7941 
7942 	mddev->bitmap_info.default_offset = MD_SB_BYTES >> 9;
7943 	mddev->bitmap_info.default_space = 64*2 - (MD_SB_BYTES >> 9);
7944 	mddev->bitmap_info.offset = 0;
7945 
7946 	mddev->reshape_position = MaxSector;
7947 
7948 	/*
7949 	 * Generate a 128 bit UUID
7950 	 */
7951 	get_random_bytes(mddev->uuid, 16);
7952 
7953 	mddev->new_level = mddev->level;
7954 	mddev->new_chunk_sectors = mddev->chunk_sectors;
7955 	mddev->new_layout = mddev->layout;
7956 	mddev->delta_disks = 0;
7957 	mddev->reshape_backwards = 0;
7958 
7959 	return 0;
7960 }
7961 
7962 void md_set_array_sectors(struct mddev *mddev, sector_t array_sectors)
7963 {
7964 	lockdep_assert_held(&mddev->reconfig_mutex);
7965 
7966 	if (mddev->external_size)
7967 		return;
7968 
7969 	mddev->array_sectors = array_sectors;
7970 }
7971 EXPORT_SYMBOL(md_set_array_sectors);
7972 
7973 static int update_size(struct mddev *mddev, sector_t num_sectors)
7974 {
7975 	struct md_rdev *rdev;
7976 	int rv;
7977 	int fit = (num_sectors == 0);
7978 	sector_t old_dev_sectors = mddev->dev_sectors;
7979 
7980 	if (mddev->pers->resize == NULL)
7981 		return -EINVAL;
7982 	/* The "num_sectors" is the number of sectors of each device that
7983 	 * is used.  This can only make sense for arrays with redundancy.
7984 	 * linear and raid0 always use whatever space is available. We can only
7985 	 * consider changing this number if no resync or reconstruction is
7986 	 * happening, and if the new size is acceptable. It must fit before the
7987 	 * sb_start or, if that is <data_offset, it must fit before the size
7988 	 * of each device.  If num_sectors is zero, we find the largest size
7989 	 * that fits.
7990 	 */
7991 	if (test_bit(MD_RECOVERY_RUNNING, &mddev->recovery))
7992 		return -EBUSY;
7993 	if (!md_is_rdwr(mddev))
7994 		return -EROFS;
7995 
7996 	rdev_for_each(rdev, mddev) {
7997 		sector_t avail = rdev->sectors;
7998 
7999 		if (fit && (num_sectors == 0 || num_sectors > avail))
8000 			num_sectors = avail;
8001 		if (avail < num_sectors)
8002 			return -ENOSPC;
8003 	}
8004 	rv = mddev->pers->resize(mddev, num_sectors);
8005 	if (!rv) {
8006 		if (mddev_is_clustered(mddev))
8007 			mddev->cluster_ops->update_size(mddev, old_dev_sectors);
8008 		else if (!mddev_is_dm(mddev))
8009 			set_capacity_and_notify(mddev->gendisk,
8010 						mddev->array_sectors);
8011 	}
8012 	return rv;
8013 }
8014 
8015 static int update_raid_disks(struct mddev *mddev, int raid_disks)
8016 {
8017 	int rv;
8018 	struct md_rdev *rdev;
8019 	/* change the number of raid disks */
8020 	if (mddev->pers->check_reshape == NULL)
8021 		return -EINVAL;
8022 	if (!md_is_rdwr(mddev))
8023 		return -EROFS;
8024 	if (raid_disks <= 0 ||
8025 	    (mddev->max_disks && raid_disks >= mddev->max_disks))
8026 		return -EINVAL;
8027 	if (test_bit(MD_RECOVERY_RUNNING, &mddev->recovery) ||
8028 	    test_bit(MD_RESYNCING_REMOTE, &mddev->recovery) ||
8029 	    mddev->reshape_position != MaxSector)
8030 		return -EBUSY;
8031 
8032 	rdev_for_each(rdev, mddev) {
8033 		if (mddev->raid_disks < raid_disks &&
8034 		    rdev->data_offset < rdev->new_data_offset)
8035 			return -EINVAL;
8036 		if (mddev->raid_disks > raid_disks &&
8037 		    rdev->data_offset > rdev->new_data_offset)
8038 			return -EINVAL;
8039 	}
8040 
8041 	mddev->delta_disks = raid_disks - mddev->raid_disks;
8042 	if (mddev->delta_disks < 0)
8043 		mddev->reshape_backwards = 1;
8044 	else if (mddev->delta_disks > 0)
8045 		mddev->reshape_backwards = 0;
8046 
8047 	rv = mddev->pers->check_reshape(mddev);
8048 	if (rv < 0) {
8049 		mddev->delta_disks = 0;
8050 		mddev->reshape_backwards = 0;
8051 	}
8052 	return rv;
8053 }
8054 
8055 static int get_cluster_ops(struct mddev *mddev)
8056 {
8057 	xa_lock(&md_submodule);
8058 	mddev->cluster_ops = xa_load(&md_submodule, ID_CLUSTER);
8059 	if (mddev->cluster_ops &&
8060 	    !try_module_get(mddev->cluster_ops->head.owner))
8061 		mddev->cluster_ops = NULL;
8062 	xa_unlock(&md_submodule);
8063 
8064 	return mddev->cluster_ops == NULL ? -ENOENT : 0;
8065 }
8066 
8067 static void put_cluster_ops(struct mddev *mddev)
8068 {
8069 	if (!mddev->cluster_ops)
8070 		return;
8071 
8072 	mddev->cluster_ops->leave(mddev);
8073 	module_put(mddev->cluster_ops->head.owner);
8074 	mddev->cluster_ops = NULL;
8075 }
8076 
8077 /*
8078  * update_array_info is used to change the configuration of an
8079  * on-line array.
8080  * The version, ctime,level,size,raid_disks,not_persistent, layout,chunk_size
8081  * fields in the info are checked against the array.
8082  * Any differences that cannot be handled will cause an error.
8083  * Normally, only one change can be managed at a time.
8084  */
8085 static int update_array_info(struct mddev *mddev, mdu_array_info_t *info)
8086 {
8087 	int rv = 0;
8088 	int cnt = 0;
8089 	int state = 0;
8090 
8091 	/* calculate expected state,ignoring low bits */
8092 	if (mddev->bitmap && mddev->bitmap_info.offset)
8093 		state |= (1 << MD_SB_BITMAP_PRESENT);
8094 
8095 	if (mddev->major_version != info->major_version ||
8096 	    mddev->minor_version != info->minor_version ||
8097 /*	    mddev->patch_version != info->patch_version || */
8098 	    mddev->ctime         != info->ctime         ||
8099 	    mddev->level         != info->level         ||
8100 /*	    mddev->layout        != info->layout        || */
8101 	    mddev->persistent	 != !info->not_persistent ||
8102 	    mddev->chunk_sectors != info->chunk_size >> 9 ||
8103 	    /* ignore bottom 8 bits of state, and allow SB_BITMAP_PRESENT to change */
8104 	    ((state^info->state) & 0xfffffe00)
8105 		)
8106 		return -EINVAL;
8107 	/* Check there is only one change */
8108 	if (info->size >= 0 && mddev->dev_sectors / 2 != info->size)
8109 		cnt++;
8110 	if (mddev->raid_disks != info->raid_disks)
8111 		cnt++;
8112 	if (mddev->layout != info->layout)
8113 		cnt++;
8114 	if ((state ^ info->state) & (1<<MD_SB_BITMAP_PRESENT))
8115 		cnt++;
8116 	if (cnt == 0)
8117 		return 0;
8118 	if (cnt > 1)
8119 		return -EINVAL;
8120 
8121 	if (mddev->layout != info->layout) {
8122 		/* Change layout
8123 		 * we don't need to do anything at the md level, the
8124 		 * personality will take care of it all.
8125 		 */
8126 		if (mddev->pers->check_reshape == NULL)
8127 			return -EINVAL;
8128 		else {
8129 			mddev->new_layout = info->layout;
8130 			rv = mddev->pers->check_reshape(mddev);
8131 			if (rv)
8132 				mddev->new_layout = mddev->layout;
8133 			return rv;
8134 		}
8135 	}
8136 	if (info->size >= 0 && mddev->dev_sectors / 2 != info->size)
8137 		rv = update_size(mddev, (sector_t)info->size * 2);
8138 
8139 	if (mddev->raid_disks    != info->raid_disks)
8140 		rv = update_raid_disks(mddev, info->raid_disks);
8141 
8142 	if ((state ^ info->state) & (1<<MD_SB_BITMAP_PRESENT)) {
8143 		if (mddev->pers->quiesce == NULL || mddev->thread == NULL) {
8144 			rv = -EINVAL;
8145 			goto err;
8146 		}
8147 		if (mddev->recovery || mddev->sync_thread) {
8148 			rv = -EBUSY;
8149 			goto err;
8150 		}
8151 		if (info->state & (1<<MD_SB_BITMAP_PRESENT)) {
8152 			/* add the bitmap */
8153 			if (mddev->bitmap) {
8154 				rv = -EEXIST;
8155 				goto err;
8156 			}
8157 			if (mddev->bitmap_info.default_offset == 0) {
8158 				rv = -EINVAL;
8159 				goto err;
8160 			}
8161 			mddev->bitmap_info.offset =
8162 				mddev->bitmap_info.default_offset;
8163 			mddev->bitmap_info.space =
8164 				mddev->bitmap_info.default_space;
8165 			mddev->bitmap_id = ID_BITMAP;
8166 			rv = md_bitmap_create(mddev);
8167 			if (!rv)
8168 				rv = mddev->bitmap_ops->load(mddev);
8169 
8170 			if (rv) {
8171 				md_bitmap_destroy(mddev);
8172 				mddev->bitmap_info.offset = 0;
8173 				md_bitmap_set_none(mddev);
8174 			}
8175 		} else {
8176 			struct md_bitmap_stats stats;
8177 
8178 			rv = mddev->bitmap_ops->get_stats(mddev->bitmap, &stats);
8179 			if (rv)
8180 				goto err;
8181 
8182 			if (stats.file) {
8183 				rv = -EINVAL;
8184 				goto err;
8185 			}
8186 
8187 			if (mddev->bitmap_info.nodes) {
8188 				/* hold PW on all the bitmap lock */
8189 				if (mddev->cluster_ops->lock_all_bitmaps(mddev) <= 0) {
8190 					pr_warn("md: can't change bitmap to none since the array is in use by more than one node\n");
8191 					rv = -EPERM;
8192 					mddev->cluster_ops->unlock_all_bitmaps(mddev);
8193 					goto err;
8194 				}
8195 
8196 				mddev->bitmap_info.nodes = 0;
8197 				put_cluster_ops(mddev);
8198 				mddev->safemode_delay = DEFAULT_SAFEMODE_DELAY;
8199 			}
8200 			md_bitmap_destroy(mddev);
8201 			mddev->bitmap_info.offset = 0;
8202 			md_bitmap_set_none(mddev);
8203 		}
8204 	}
8205 	md_update_sb(mddev, 1);
8206 	return rv;
8207 err:
8208 	return rv;
8209 }
8210 
8211 static int set_disk_faulty(struct mddev *mddev, dev_t dev)
8212 {
8213 	struct md_rdev *rdev;
8214 	int err = 0;
8215 
8216 	if (mddev->pers == NULL)
8217 		return -ENODEV;
8218 
8219 	rcu_read_lock();
8220 	rdev = md_find_rdev_rcu(mddev, dev);
8221 	if (!rdev)
8222 		err =  -ENODEV;
8223 	else {
8224 		md_error(mddev, rdev);
8225 		if (test_bit(MD_BROKEN, &mddev->flags))
8226 			err = -EBUSY;
8227 	}
8228 	rcu_read_unlock();
8229 	return err;
8230 }
8231 
8232 /*
8233  * We have a problem here : there is no easy way to give a CHS
8234  * virtual geometry. We currently pretend that we have a 2 heads
8235  * 4 sectors (with a BIG number of cylinders...). This drives
8236  * dosfs just mad... ;-)
8237  */
8238 static int md_getgeo(struct gendisk *disk, struct hd_geometry *geo)
8239 {
8240 	struct mddev *mddev = disk->private_data;
8241 
8242 	geo->heads = 2;
8243 	geo->sectors = 4;
8244 	geo->cylinders = mddev->array_sectors / 8;
8245 	return 0;
8246 }
8247 
8248 static inline int md_ioctl_valid(unsigned int cmd)
8249 {
8250 	switch (cmd) {
8251 	case GET_ARRAY_INFO:
8252 	case GET_DISK_INFO:
8253 	case RAID_VERSION:
8254 		return 0;
8255 	case ADD_NEW_DISK:
8256 	case GET_BITMAP_FILE:
8257 	case HOT_ADD_DISK:
8258 	case HOT_REMOVE_DISK:
8259 	case RESTART_ARRAY_RW:
8260 	case RUN_ARRAY:
8261 	case SET_ARRAY_INFO:
8262 	case SET_BITMAP_FILE:
8263 	case SET_DISK_FAULTY:
8264 	case STOP_ARRAY:
8265 	case STOP_ARRAY_RO:
8266 	case CLUSTERED_DISK_NACK:
8267 		if (!capable(CAP_SYS_ADMIN))
8268 			return -EACCES;
8269 		return 0;
8270 	default:
8271 		return -ENOTTY;
8272 	}
8273 }
8274 
8275 static bool md_ioctl_need_suspend(unsigned int cmd)
8276 {
8277 	switch (cmd) {
8278 	case ADD_NEW_DISK:
8279 	case HOT_ADD_DISK:
8280 	case HOT_REMOVE_DISK:
8281 	case SET_BITMAP_FILE:
8282 	case SET_ARRAY_INFO:
8283 		return true;
8284 	default:
8285 		return false;
8286 	}
8287 }
8288 
8289 static int __md_set_array_info(struct mddev *mddev, void __user *argp)
8290 {
8291 	mdu_array_info_t info;
8292 	int err;
8293 
8294 	if (!argp)
8295 		memset(&info, 0, sizeof(info));
8296 	else if (copy_from_user(&info, argp, sizeof(info)))
8297 		return -EFAULT;
8298 
8299 	if (mddev->pers) {
8300 		err = update_array_info(mddev, &info);
8301 		if (err)
8302 			pr_warn("md: couldn't update array info. %d\n", err);
8303 		return err;
8304 	}
8305 
8306 	if (!list_empty(&mddev->disks)) {
8307 		pr_warn("md: array %s already has disks!\n", mdname(mddev));
8308 		return -EBUSY;
8309 	}
8310 
8311 	if (mddev->raid_disks) {
8312 		pr_warn("md: array %s already initialised!\n", mdname(mddev));
8313 		return -EBUSY;
8314 	}
8315 
8316 	err = md_set_array_info(mddev, &info);
8317 	if (err)
8318 		pr_warn("md: couldn't set array info. %d\n", err);
8319 
8320 	return err;
8321 }
8322 
8323 static int md_ioctl(struct block_device *bdev, blk_mode_t mode,
8324 			unsigned int cmd, unsigned long arg)
8325 {
8326 	int err = 0;
8327 	void __user *argp = (void __user *)arg;
8328 	struct mddev *mddev = NULL;
8329 
8330 	err = md_ioctl_valid(cmd);
8331 	if (err)
8332 		return err;
8333 
8334 	/*
8335 	 * Commands dealing with the RAID driver but not any
8336 	 * particular array:
8337 	 */
8338 	if (cmd == RAID_VERSION)
8339 		return get_version(argp);
8340 
8341 	/*
8342 	 * Commands creating/starting a new array:
8343 	 */
8344 
8345 	mddev = bdev->bd_disk->private_data;
8346 
8347 	/* Some actions do not requires the mutex */
8348 	switch (cmd) {
8349 	case GET_ARRAY_INFO:
8350 		if (!mddev->raid_disks && !mddev->external)
8351 			return -ENODEV;
8352 		return get_array_info(mddev, argp);
8353 
8354 	case GET_DISK_INFO:
8355 		if (!mddev->raid_disks && !mddev->external)
8356 			return -ENODEV;
8357 		return get_disk_info(mddev, argp);
8358 
8359 	case SET_DISK_FAULTY:
8360 		return set_disk_faulty(mddev, new_decode_dev(arg));
8361 
8362 	case GET_BITMAP_FILE:
8363 		return get_bitmap_file(mddev, argp);
8364 	}
8365 
8366 	if (cmd == STOP_ARRAY || cmd == STOP_ARRAY_RO) {
8367 		/* Need to flush page cache, and ensure no-one else opens
8368 		 * and writes
8369 		 */
8370 		err = mddev_set_closing_and_sync_blockdev(mddev, 1);
8371 		if (err)
8372 			return err;
8373 	}
8374 
8375 	if (!md_is_rdwr(mddev))
8376 		flush_work(&mddev->sync_work);
8377 
8378 	err = md_ioctl_need_suspend(cmd) ? mddev_suspend_and_lock(mddev) :
8379 					   mddev_lock(mddev);
8380 	if (err) {
8381 		pr_debug("md: ioctl lock interrupted, reason %d, cmd %d\n",
8382 			 err, cmd);
8383 		goto out;
8384 	}
8385 
8386 	if (cmd == SET_ARRAY_INFO) {
8387 		err = __md_set_array_info(mddev, argp);
8388 		goto unlock;
8389 	}
8390 
8391 	/*
8392 	 * Commands querying/configuring an existing array:
8393 	 */
8394 	/* if we are not initialised yet, only ADD_NEW_DISK, STOP_ARRAY,
8395 	 * RUN_ARRAY, and GET_ and SET_BITMAP_FILE are allowed */
8396 	if ((!mddev->raid_disks && !mddev->external)
8397 	    && cmd != ADD_NEW_DISK && cmd != STOP_ARRAY
8398 	    && cmd != RUN_ARRAY && cmd != SET_BITMAP_FILE
8399 	    && cmd != GET_BITMAP_FILE) {
8400 		err = -ENODEV;
8401 		goto unlock;
8402 	}
8403 
8404 	/*
8405 	 * Commands even a read-only array can execute:
8406 	 */
8407 	switch (cmd) {
8408 	case RESTART_ARRAY_RW:
8409 		err = restart_array(mddev);
8410 		goto unlock;
8411 
8412 	case STOP_ARRAY:
8413 		err = do_md_stop(mddev, 0);
8414 		goto unlock;
8415 
8416 	case STOP_ARRAY_RO:
8417 		if (mddev->pers)
8418 			err = md_set_readonly(mddev);
8419 		goto unlock;
8420 
8421 	case HOT_REMOVE_DISK:
8422 		err = hot_remove_disk(mddev, new_decode_dev(arg));
8423 		goto unlock;
8424 
8425 	case ADD_NEW_DISK:
8426 		/* We can support ADD_NEW_DISK on read-only arrays
8427 		 * only if we are re-adding a preexisting device.
8428 		 * So require mddev->pers and MD_DISK_SYNC.
8429 		 */
8430 		if (mddev->pers) {
8431 			mdu_disk_info_t info;
8432 			if (copy_from_user(&info, argp, sizeof(info)))
8433 				err = -EFAULT;
8434 			else if (!(info.state & (1<<MD_DISK_SYNC)))
8435 				/* Need to clear read-only for this */
8436 				break;
8437 			else
8438 				err = md_add_new_disk(mddev, &info);
8439 			goto unlock;
8440 		}
8441 		break;
8442 	}
8443 
8444 	/*
8445 	 * The remaining ioctls are changing the state of the
8446 	 * superblock, so we do not allow them on read-only arrays.
8447 	 */
8448 	if (!md_is_rdwr(mddev) && mddev->pers) {
8449 		if (mddev->ro != MD_AUTO_READ) {
8450 			err = -EROFS;
8451 			goto unlock;
8452 		}
8453 		mddev->ro = MD_RDWR;
8454 		sysfs_notify_dirent_safe(mddev->sysfs_state);
8455 		set_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
8456 		/* mddev_unlock will wake thread */
8457 		/* If a device failed while we were read-only, we
8458 		 * need to make sure the metadata is updated now.
8459 		 */
8460 		if (test_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags)) {
8461 			mddev_unlock(mddev);
8462 			wait_event(mddev->sb_wait,
8463 				   !test_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags) &&
8464 				   !test_bit(MD_SB_CHANGE_PENDING, &mddev->sb_flags));
8465 			mddev_lock_nointr(mddev);
8466 		}
8467 	}
8468 
8469 	switch (cmd) {
8470 	case ADD_NEW_DISK:
8471 	{
8472 		mdu_disk_info_t info;
8473 		if (copy_from_user(&info, argp, sizeof(info)))
8474 			err = -EFAULT;
8475 		else
8476 			err = md_add_new_disk(mddev, &info);
8477 		goto unlock;
8478 	}
8479 
8480 	case CLUSTERED_DISK_NACK:
8481 		if (mddev_is_clustered(mddev))
8482 			mddev->cluster_ops->new_disk_ack(mddev, false);
8483 		else
8484 			err = -EINVAL;
8485 		goto unlock;
8486 
8487 	case HOT_ADD_DISK:
8488 		err = hot_add_disk(mddev, new_decode_dev(arg));
8489 		goto unlock;
8490 
8491 	case RUN_ARRAY:
8492 		err = do_md_run(mddev);
8493 		goto unlock;
8494 
8495 	case SET_BITMAP_FILE:
8496 		err = set_bitmap_file(mddev, (int)arg);
8497 		goto unlock;
8498 
8499 	default:
8500 		err = -EINVAL;
8501 		goto unlock;
8502 	}
8503 
8504 unlock:
8505 	if (mddev->hold_active == UNTIL_IOCTL &&
8506 	    err != -EINVAL)
8507 		mddev->hold_active = 0;
8508 
8509 	md_ioctl_need_suspend(cmd) ? mddev_unlock_and_resume(mddev) :
8510 				     mddev_unlock(mddev);
8511 
8512 out:
8513 	if (cmd == STOP_ARRAY_RO || (err && cmd == STOP_ARRAY))
8514 		clear_bit(MD_CLOSING, &mddev->flags);
8515 	return err;
8516 }
8517 #ifdef CONFIG_COMPAT
8518 static int md_compat_ioctl(struct block_device *bdev, blk_mode_t mode,
8519 		    unsigned int cmd, unsigned long arg)
8520 {
8521 	switch (cmd) {
8522 	case HOT_REMOVE_DISK:
8523 	case HOT_ADD_DISK:
8524 	case SET_DISK_FAULTY:
8525 	case SET_BITMAP_FILE:
8526 		/* These take in integer arg, do not convert */
8527 		break;
8528 	default:
8529 		arg = (unsigned long)compat_ptr(arg);
8530 		break;
8531 	}
8532 
8533 	return md_ioctl(bdev, mode, cmd, arg);
8534 }
8535 #endif /* CONFIG_COMPAT */
8536 
8537 static int md_set_read_only(struct block_device *bdev, bool ro)
8538 {
8539 	struct mddev *mddev = bdev->bd_disk->private_data;
8540 	int err;
8541 
8542 	err = mddev_lock(mddev);
8543 	if (err)
8544 		return err;
8545 
8546 	if (!mddev->raid_disks && !mddev->external) {
8547 		err = -ENODEV;
8548 		goto out_unlock;
8549 	}
8550 
8551 	/*
8552 	 * Transitioning to read-auto need only happen for arrays that call
8553 	 * md_write_start and which are not ready for writes yet.
8554 	 */
8555 	if (!ro && mddev->ro == MD_RDONLY && mddev->pers) {
8556 		err = restart_array(mddev);
8557 		if (err)
8558 			goto out_unlock;
8559 		mddev->ro = MD_AUTO_READ;
8560 	}
8561 
8562 out_unlock:
8563 	mddev_unlock(mddev);
8564 	return err;
8565 }
8566 
8567 static int md_open(struct gendisk *disk, blk_mode_t mode)
8568 {
8569 	struct mddev *mddev;
8570 	int err;
8571 
8572 	spin_lock(&all_mddevs_lock);
8573 	mddev = mddev_get(disk->private_data);
8574 	spin_unlock(&all_mddevs_lock);
8575 	if (!mddev)
8576 		return -ENODEV;
8577 
8578 	err = mutex_lock_interruptible(&mddev->open_mutex);
8579 	if (err)
8580 		goto out;
8581 
8582 	err = -ENODEV;
8583 	if (test_bit(MD_CLOSING, &mddev->flags))
8584 		goto out_unlock;
8585 
8586 	atomic_inc(&mddev->openers);
8587 	mutex_unlock(&mddev->open_mutex);
8588 
8589 	disk_check_media_change(disk);
8590 	return 0;
8591 
8592 out_unlock:
8593 	mutex_unlock(&mddev->open_mutex);
8594 out:
8595 	mddev_put(mddev);
8596 	return err;
8597 }
8598 
8599 static void md_release(struct gendisk *disk)
8600 {
8601 	struct mddev *mddev = disk->private_data;
8602 
8603 	BUG_ON(!mddev);
8604 	atomic_dec(&mddev->openers);
8605 	mddev_put(mddev);
8606 }
8607 
8608 static unsigned int md_check_events(struct gendisk *disk, unsigned int clearing)
8609 {
8610 	struct mddev *mddev = disk->private_data;
8611 	unsigned int ret = 0;
8612 
8613 	if (mddev->changed)
8614 		ret = DISK_EVENT_MEDIA_CHANGE;
8615 	mddev->changed = 0;
8616 	return ret;
8617 }
8618 
8619 static void md_free_disk(struct gendisk *disk)
8620 {
8621 	struct mddev *mddev = disk->private_data;
8622 
8623 	mddev_free(mddev);
8624 }
8625 
8626 const struct block_device_operations md_fops =
8627 {
8628 	.owner		= THIS_MODULE,
8629 	.submit_bio	= md_submit_bio,
8630 	.open		= md_open,
8631 	.release	= md_release,
8632 	.ioctl		= md_ioctl,
8633 #ifdef CONFIG_COMPAT
8634 	.compat_ioctl	= md_compat_ioctl,
8635 #endif
8636 	.getgeo		= md_getgeo,
8637 	.check_events	= md_check_events,
8638 	.set_read_only	= md_set_read_only,
8639 	.free_disk	= md_free_disk,
8640 };
8641 
8642 static int md_thread(void *arg)
8643 {
8644 	struct md_thread *thread = arg;
8645 
8646 	/*
8647 	 * md_thread is a 'system-thread', it's priority should be very
8648 	 * high. We avoid resource deadlocks individually in each
8649 	 * raid personality. (RAID5 does preallocation) We also use RR and
8650 	 * the very same RT priority as kswapd, thus we will never get
8651 	 * into a priority inversion deadlock.
8652 	 *
8653 	 * we definitely have to have equal or higher priority than
8654 	 * bdflush, otherwise bdflush will deadlock if there are too
8655 	 * many dirty RAID5 blocks.
8656 	 */
8657 
8658 	allow_signal(SIGKILL);
8659 	while (!kthread_should_stop()) {
8660 
8661 		/* We need to wait INTERRUPTIBLE so that
8662 		 * we don't add to the load-average.
8663 		 * That means we need to be sure no signals are
8664 		 * pending
8665 		 */
8666 		if (signal_pending(current))
8667 			flush_signals(current);
8668 
8669 		wait_event_interruptible_timeout
8670 			(thread->wqueue,
8671 			 test_bit(THREAD_WAKEUP, &thread->flags)
8672 			 || kthread_should_stop() || kthread_should_park(),
8673 			 thread->timeout);
8674 
8675 		clear_bit(THREAD_WAKEUP, &thread->flags);
8676 		if (kthread_should_park())
8677 			kthread_parkme();
8678 		if (!kthread_should_stop())
8679 			thread->run(thread);
8680 	}
8681 
8682 	return 0;
8683 }
8684 
8685 static void md_wakeup_thread_directly(struct md_thread __rcu **thread)
8686 {
8687 	struct md_thread *t;
8688 
8689 	rcu_read_lock();
8690 	t = rcu_dereference(*thread);
8691 	if (t)
8692 		wake_up_process(t->tsk);
8693 	rcu_read_unlock();
8694 }
8695 
8696 void __md_wakeup_thread(struct md_thread __rcu *thread)
8697 {
8698 	struct md_thread *t;
8699 
8700 	t = rcu_dereference(thread);
8701 	if (t) {
8702 		pr_debug("md: waking up MD thread %s.\n", t->tsk->comm);
8703 		set_bit(THREAD_WAKEUP, &t->flags);
8704 		if (wq_has_sleeper(&t->wqueue))
8705 			wake_up(&t->wqueue);
8706 	}
8707 }
8708 EXPORT_SYMBOL(__md_wakeup_thread);
8709 
8710 struct md_thread *md_register_thread(void (*run) (struct md_thread *),
8711 		struct mddev *mddev, const char *name)
8712 {
8713 	struct md_thread *thread;
8714 
8715 	thread = kzalloc_obj(struct md_thread);
8716 	if (!thread)
8717 		return NULL;
8718 
8719 	init_waitqueue_head(&thread->wqueue);
8720 
8721 	thread->run = run;
8722 	thread->mddev = mddev;
8723 	thread->timeout = MAX_SCHEDULE_TIMEOUT;
8724 	thread->tsk = kthread_run(md_thread, thread,
8725 				  "%s_%s",
8726 				  mdname(thread->mddev),
8727 				  name);
8728 	if (IS_ERR(thread->tsk)) {
8729 		kfree(thread);
8730 		return NULL;
8731 	}
8732 	return thread;
8733 }
8734 EXPORT_SYMBOL(md_register_thread);
8735 
8736 void md_unregister_thread(struct mddev *mddev, struct md_thread __rcu **threadp)
8737 {
8738 	struct md_thread *thread = rcu_dereference_protected(*threadp,
8739 					lockdep_is_held(&mddev->reconfig_mutex));
8740 
8741 	if (!thread)
8742 		return;
8743 
8744 	rcu_assign_pointer(*threadp, NULL);
8745 	synchronize_rcu();
8746 
8747 	pr_debug("interrupting MD-thread pid %d\n", task_pid_nr(thread->tsk));
8748 	kthread_stop(thread->tsk);
8749 	kfree(thread);
8750 }
8751 EXPORT_SYMBOL(md_unregister_thread);
8752 
8753 void md_error(struct mddev *mddev, struct md_rdev *rdev)
8754 {
8755 	if (!rdev || test_bit(Faulty, &rdev->flags))
8756 		return;
8757 
8758 	if (!mddev->pers || !mddev->pers->error_handler)
8759 		return;
8760 	mddev->pers->error_handler(mddev, rdev);
8761 
8762 	if (mddev->pers->head.id == ID_RAID0 ||
8763 	    mddev->pers->head.id == ID_LINEAR)
8764 		return;
8765 
8766 	if (mddev->degraded && !test_bit(MD_BROKEN, &mddev->flags))
8767 		set_bit(MD_RECOVERY_RECOVER, &mddev->recovery);
8768 	sysfs_notify_dirent_safe(rdev->sysfs_state);
8769 	set_bit(MD_RECOVERY_INTR, &mddev->recovery);
8770 	if (!test_bit(MD_BROKEN, &mddev->flags)) {
8771 		set_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
8772 		md_wakeup_thread(mddev->thread);
8773 	}
8774 	if (mddev->event_work.func)
8775 		queue_work(md_misc_wq, &mddev->event_work);
8776 	md_new_event();
8777 }
8778 EXPORT_SYMBOL(md_error);
8779 
8780 /* seq_file implementation /proc/mdstat */
8781 
8782 static void status_unused(struct seq_file *seq)
8783 {
8784 	int i = 0;
8785 	struct md_rdev *rdev;
8786 
8787 	seq_printf(seq, "unused devices: ");
8788 
8789 	list_for_each_entry(rdev, &pending_raid_disks, same_set) {
8790 		i++;
8791 		seq_printf(seq, "%pg ", rdev->bdev);
8792 	}
8793 	if (!i)
8794 		seq_printf(seq, "<none>");
8795 
8796 	seq_printf(seq, "\n");
8797 }
8798 
8799 static void status_personalities(struct seq_file *seq)
8800 {
8801 	struct md_submodule_head *head;
8802 	unsigned long i;
8803 
8804 	seq_puts(seq, "Personalities : ");
8805 
8806 	xa_lock(&md_submodule);
8807 	xa_for_each(&md_submodule, i, head)
8808 		if (head->type == MD_PERSONALITY)
8809 			seq_printf(seq, "[%s] ", head->name);
8810 	xa_unlock(&md_submodule);
8811 
8812 	seq_puts(seq, "\n");
8813 }
8814 
8815 static int status_resync(struct seq_file *seq, struct mddev *mddev)
8816 {
8817 	sector_t max_sectors, resync, res;
8818 	unsigned long dt, db = 0;
8819 	sector_t rt, curr_mark_cnt, resync_mark_cnt;
8820 	int scale, recovery_active;
8821 	unsigned int per_milli;
8822 
8823 	if (test_bit(MD_RECOVERY_SYNC, &mddev->recovery) ||
8824 	    test_bit(MD_RECOVERY_RESHAPE, &mddev->recovery))
8825 		max_sectors = mddev->resync_max_sectors;
8826 	else
8827 		max_sectors = mddev->dev_sectors;
8828 
8829 	resync = mddev->curr_resync;
8830 	if (resync < MD_RESYNC_ACTIVE) {
8831 		if (test_bit(MD_RECOVERY_DONE, &mddev->recovery))
8832 			/* Still cleaning up */
8833 			resync = max_sectors;
8834 	} else if (resync > max_sectors) {
8835 		resync = max_sectors;
8836 	} else {
8837 		res = atomic_read(&mddev->recovery_active);
8838 		/*
8839 		 * Resync has started, but the subtraction has overflowed or
8840 		 * yielded one of the special values. Force it to active to
8841 		 * ensure the status reports an active resync.
8842 		 */
8843 		if (resync < res || resync - res < MD_RESYNC_ACTIVE)
8844 			resync = MD_RESYNC_ACTIVE;
8845 		else
8846 			resync -= res;
8847 	}
8848 
8849 	if (resync == MD_RESYNC_NONE) {
8850 		if (test_bit(MD_RESYNCING_REMOTE, &mddev->recovery)) {
8851 			struct md_rdev *rdev;
8852 
8853 			rdev_for_each(rdev, mddev)
8854 				if (rdev->raid_disk >= 0 &&
8855 				    !test_bit(Faulty, &rdev->flags) &&
8856 				    rdev->recovery_offset != MaxSector &&
8857 				    rdev->recovery_offset) {
8858 					seq_printf(seq, "\trecover=REMOTE");
8859 					return 1;
8860 				}
8861 			if (mddev->reshape_position != MaxSector)
8862 				seq_printf(seq, "\treshape=REMOTE");
8863 			else
8864 				seq_printf(seq, "\tresync=REMOTE");
8865 			return 1;
8866 		}
8867 		if (mddev->resync_offset < MaxSector) {
8868 			seq_printf(seq, "\tresync=PENDING");
8869 			return 1;
8870 		}
8871 		return 0;
8872 	}
8873 	if (resync < MD_RESYNC_ACTIVE) {
8874 		seq_printf(seq, "\tresync=DELAYED");
8875 		return 1;
8876 	}
8877 
8878 	WARN_ON(max_sectors == 0);
8879 	/* Pick 'scale' such that (resync>>scale)*1000 will fit
8880 	 * in a sector_t, and (max_sectors>>scale) will fit in a
8881 	 * u32, as those are the requirements for sector_div.
8882 	 * Thus 'scale' must be at least 10
8883 	 */
8884 	scale = 10;
8885 	if (sizeof(sector_t) > sizeof(unsigned long)) {
8886 		while ( max_sectors/2 > (1ULL<<(scale+32)))
8887 			scale++;
8888 	}
8889 	res = (resync>>scale)*1000;
8890 	sector_div(res, (u32)((max_sectors>>scale)+1));
8891 
8892 	per_milli = res;
8893 	{
8894 		int i, x = per_milli/50, y = 20-x;
8895 		seq_printf(seq, "[");
8896 		for (i = 0; i < x; i++)
8897 			seq_printf(seq, "=");
8898 		seq_printf(seq, ">");
8899 		for (i = 0; i < y; i++)
8900 			seq_printf(seq, ".");
8901 		seq_printf(seq, "] ");
8902 	}
8903 	seq_printf(seq, " %s =%3u.%u%% (%llu/%llu)",
8904 		   (test_bit(MD_RECOVERY_RESHAPE, &mddev->recovery)?
8905 		    "reshape" :
8906 		    (test_bit(MD_RECOVERY_CHECK, &mddev->recovery)?
8907 		     "check" :
8908 		     (test_bit(MD_RECOVERY_SYNC, &mddev->recovery) ?
8909 		      "resync" : "recovery"))),
8910 		   per_milli/10, per_milli % 10,
8911 		   (unsigned long long) resync/2,
8912 		   (unsigned long long) max_sectors/2);
8913 
8914 	/*
8915 	 * dt: time from mark until now
8916 	 * db: blocks written from mark until now
8917 	 * rt: remaining time
8918 	 *
8919 	 * rt is a sector_t, which is always 64bit now. We are keeping
8920 	 * the original algorithm, but it is not really necessary.
8921 	 *
8922 	 * Original algorithm:
8923 	 *   So we divide before multiply in case it is 32bit and close
8924 	 *   to the limit.
8925 	 *   We scale the divisor (db) by 32 to avoid losing precision
8926 	 *   near the end of resync when the number of remaining sectors
8927 	 *   is close to 'db'.
8928 	 *   We then divide rt by 32 after multiplying by db to compensate.
8929 	 *   The '+1' avoids division by zero if db is very small.
8930 	 */
8931 	dt = ((jiffies - mddev->resync_mark) / HZ);
8932 	if (!dt) dt++;
8933 
8934 	curr_mark_cnt = mddev->curr_mark_cnt;
8935 	recovery_active = atomic_read(&mddev->recovery_active);
8936 	resync_mark_cnt = mddev->resync_mark_cnt;
8937 
8938 	if (curr_mark_cnt >= (recovery_active + resync_mark_cnt))
8939 		db = curr_mark_cnt - (recovery_active + resync_mark_cnt);
8940 
8941 	rt = max_sectors - resync;    /* number of remaining sectors */
8942 	rt = div64_u64(rt, db/32+1);
8943 	rt *= dt;
8944 	rt >>= 5;
8945 
8946 	seq_printf(seq, " finish=%lu.%lumin", (unsigned long)rt / 60,
8947 		   ((unsigned long)rt % 60)/6);
8948 
8949 	seq_printf(seq, " speed=%ldK/sec", db/2/dt);
8950 	return 1;
8951 }
8952 
8953 static void *md_seq_start(struct seq_file *seq, loff_t *pos)
8954 	__acquires(&all_mddevs_lock)
8955 {
8956 	seq->poll_event = atomic_read(&md_event_count);
8957 	spin_lock(&all_mddevs_lock);
8958 
8959 	return seq_list_start_head(&all_mddevs, *pos);
8960 }
8961 
8962 static void *md_seq_next(struct seq_file *seq, void *v, loff_t *pos)
8963 {
8964 	return seq_list_next(v, &all_mddevs, pos);
8965 }
8966 
8967 static void md_seq_stop(struct seq_file *seq, void *v)
8968 	__releases(&all_mddevs_lock)
8969 {
8970 	spin_unlock(&all_mddevs_lock);
8971 }
8972 
8973 static void md_bitmap_status(struct seq_file *seq, struct mddev *mddev)
8974 {
8975 	struct md_bitmap_stats stats;
8976 	unsigned long used_pages;
8977 	unsigned long chunk_kb;
8978 	int err;
8979 
8980 	if (!md_bitmap_enabled(mddev, false))
8981 		return;
8982 
8983 	err = mddev->bitmap_ops->get_stats(mddev->bitmap, &stats);
8984 	if (err)
8985 		return;
8986 
8987 	chunk_kb = mddev->bitmap_info.chunksize >> 10;
8988 	used_pages = stats.pages - stats.missing_pages;
8989 
8990 	seq_printf(seq, "bitmap: %lu/%lu pages [%luKB], %lu%s chunk",
8991 		   used_pages, stats.pages, used_pages << (PAGE_SHIFT - 10),
8992 		   chunk_kb ? chunk_kb : mddev->bitmap_info.chunksize,
8993 		   chunk_kb ? "KB" : "B");
8994 
8995 	if (stats.file) {
8996 		seq_puts(seq, ", file: ");
8997 		seq_file_path(seq, stats.file, " \t\n");
8998 	}
8999 
9000 	seq_putc(seq, '\n');
9001 }
9002 
9003 static int md_seq_show(struct seq_file *seq, void *v)
9004 {
9005 	struct mddev *mddev;
9006 	sector_t sectors;
9007 	struct md_rdev *rdev;
9008 
9009 	if (v == &all_mddevs) {
9010 		status_personalities(seq);
9011 		if (list_empty(&all_mddevs))
9012 			status_unused(seq);
9013 		return 0;
9014 	}
9015 
9016 	mddev = list_entry(v, struct mddev, all_mddevs);
9017 	if (!mddev_get(mddev))
9018 		return 0;
9019 
9020 	spin_unlock(&all_mddevs_lock);
9021 
9022 	/* prevent bitmap to be freed after checking */
9023 	mutex_lock(&mddev->bitmap_info.mutex);
9024 
9025 	spin_lock(&mddev->lock);
9026 	if (mddev->pers || mddev->raid_disks || !list_empty(&mddev->disks)) {
9027 		seq_printf(seq, "%s : ", mdname(mddev));
9028 		if (mddev->pers) {
9029 			if (test_bit(MD_BROKEN, &mddev->flags))
9030 				seq_printf(seq, "broken");
9031 			else
9032 				seq_printf(seq, "active");
9033 			if (mddev->ro == MD_RDONLY)
9034 				seq_printf(seq, " (read-only)");
9035 			if (mddev->ro == MD_AUTO_READ)
9036 				seq_printf(seq, " (auto-read-only)");
9037 			seq_printf(seq, " %s", mddev->pers->head.name);
9038 		} else {
9039 			seq_printf(seq, "inactive");
9040 		}
9041 
9042 		sectors = 0;
9043 		rcu_read_lock();
9044 		rdev_for_each_rcu(rdev, mddev) {
9045 			seq_printf(seq, " %pg[%d]", rdev->bdev, rdev->desc_nr);
9046 
9047 			if (test_bit(WriteMostly, &rdev->flags))
9048 				seq_printf(seq, "(W)");
9049 			if (test_bit(Journal, &rdev->flags))
9050 				seq_printf(seq, "(J)");
9051 			if (test_bit(Faulty, &rdev->flags)) {
9052 				seq_printf(seq, "(F)");
9053 				continue;
9054 			}
9055 			if (rdev->raid_disk < 0)
9056 				seq_printf(seq, "(S)"); /* spare */
9057 			if (test_bit(Replacement, &rdev->flags))
9058 				seq_printf(seq, "(R)");
9059 			sectors += rdev->sectors;
9060 		}
9061 		rcu_read_unlock();
9062 
9063 		if (!list_empty(&mddev->disks)) {
9064 			if (mddev->pers)
9065 				seq_printf(seq, "\n      %llu blocks",
9066 					   (unsigned long long)
9067 					   mddev->array_sectors / 2);
9068 			else
9069 				seq_printf(seq, "\n      %llu blocks",
9070 					   (unsigned long long)sectors / 2);
9071 		}
9072 		if (mddev->persistent) {
9073 			if (mddev->major_version != 0 ||
9074 			    mddev->minor_version != 90) {
9075 				seq_printf(seq," super %d.%d",
9076 					   mddev->major_version,
9077 					   mddev->minor_version);
9078 			}
9079 		} else if (mddev->external)
9080 			seq_printf(seq, " super external:%s",
9081 				   mddev->metadata_type);
9082 		else
9083 			seq_printf(seq, " super non-persistent");
9084 
9085 		if (mddev->pers) {
9086 			mddev->pers->status(seq, mddev);
9087 			seq_printf(seq, "\n      ");
9088 			if (mddev->pers->sync_request) {
9089 				if (status_resync(seq, mddev))
9090 					seq_printf(seq, "\n      ");
9091 			}
9092 		} else
9093 			seq_printf(seq, "\n       ");
9094 
9095 		md_bitmap_status(seq, mddev);
9096 
9097 		seq_printf(seq, "\n");
9098 	}
9099 	spin_unlock(&mddev->lock);
9100 	mutex_unlock(&mddev->bitmap_info.mutex);
9101 	spin_lock(&all_mddevs_lock);
9102 
9103 	if (mddev == list_last_entry(&all_mddevs, struct mddev, all_mddevs))
9104 		status_unused(seq);
9105 
9106 	mddev_put_locked(mddev);
9107 	return 0;
9108 }
9109 
9110 static const struct seq_operations md_seq_ops = {
9111 	.start  = md_seq_start,
9112 	.next   = md_seq_next,
9113 	.stop   = md_seq_stop,
9114 	.show   = md_seq_show,
9115 };
9116 
9117 static int md_seq_open(struct inode *inode, struct file *file)
9118 {
9119 	struct seq_file *seq;
9120 	int error;
9121 
9122 	error = seq_open(file, &md_seq_ops);
9123 	if (error)
9124 		return error;
9125 
9126 	seq = file->private_data;
9127 	seq->poll_event = atomic_read(&md_event_count);
9128 	return error;
9129 }
9130 
9131 static int md_unloading;
9132 static __poll_t mdstat_poll(struct file *filp, poll_table *wait)
9133 {
9134 	struct seq_file *seq = filp->private_data;
9135 	__poll_t mask;
9136 
9137 	if (md_unloading)
9138 		return EPOLLIN|EPOLLRDNORM|EPOLLERR|EPOLLPRI;
9139 	poll_wait(filp, &md_event_waiters, wait);
9140 
9141 	/* always allow read */
9142 	mask = EPOLLIN | EPOLLRDNORM;
9143 
9144 	if (seq->poll_event != atomic_read(&md_event_count))
9145 		mask |= EPOLLERR | EPOLLPRI;
9146 	return mask;
9147 }
9148 
9149 static const struct proc_ops mdstat_proc_ops = {
9150 	.proc_open	= md_seq_open,
9151 	.proc_read	= seq_read,
9152 	.proc_lseek	= seq_lseek,
9153 	.proc_release	= seq_release,
9154 	.proc_poll	= mdstat_poll,
9155 };
9156 
9157 int register_md_submodule(struct md_submodule_head *msh)
9158 {
9159 	return xa_insert(&md_submodule, msh->id, msh, GFP_KERNEL);
9160 }
9161 EXPORT_SYMBOL_GPL(register_md_submodule);
9162 
9163 void unregister_md_submodule(struct md_submodule_head *msh)
9164 {
9165 	xa_erase(&md_submodule, msh->id);
9166 }
9167 EXPORT_SYMBOL_GPL(unregister_md_submodule);
9168 
9169 int md_setup_cluster(struct mddev *mddev, int nodes)
9170 {
9171 	int ret = get_cluster_ops(mddev);
9172 
9173 	if (ret) {
9174 		request_module("md-cluster");
9175 		ret = get_cluster_ops(mddev);
9176 	}
9177 
9178 	/* ensure module won't be unloaded */
9179 	if (ret) {
9180 		pr_warn("can't find md-cluster module or get its reference.\n");
9181 		return ret;
9182 	}
9183 
9184 	ret = mddev->cluster_ops->join(mddev, nodes);
9185 	if (!ret)
9186 		mddev->safemode_delay = 0;
9187 	return ret;
9188 }
9189 
9190 void md_cluster_stop(struct mddev *mddev)
9191 {
9192 	put_cluster_ops(mddev);
9193 }
9194 
9195 static bool is_rdev_holder_idle(struct md_rdev *rdev, bool init)
9196 {
9197 	unsigned long last_events = rdev->last_events;
9198 
9199 	if (!bdev_is_partition(rdev->bdev))
9200 		return true;
9201 
9202 	/*
9203 	 * If rdev is partition, and user doesn't issue IO to the array, the
9204 	 * array is still not idle if user issues IO to other partitions.
9205 	 */
9206 	rdev->last_events = part_stat_read_accum(rdev->bdev->bd_disk->part0,
9207 						 sectors) -
9208 			    part_stat_read_accum(rdev->bdev, sectors);
9209 
9210 	return init || rdev->last_events <= last_events;
9211 }
9212 
9213 /*
9214  * mddev is idle if following conditions are matched since last check:
9215  * 1) mddev doesn't have normal IO completed;
9216  * 2) mddev doesn't have inflight normal IO;
9217  * 3) if any member disk is partition, and other partitions don't have IO
9218  *    completed;
9219  *
9220  * Noted this checking rely on IO accounting is enabled.
9221  */
9222 static bool is_mddev_idle(struct mddev *mddev, int init)
9223 {
9224 	unsigned long last_events = mddev->normal_io_events;
9225 	struct gendisk *disk;
9226 	struct md_rdev *rdev;
9227 	bool idle = true;
9228 
9229 	disk = mddev_is_dm(mddev) ? mddev->dm_gendisk : mddev->gendisk;
9230 	if (!disk)
9231 		return true;
9232 
9233 	mddev->normal_io_events = part_stat_read_accum(disk->part0, sectors);
9234 	if (!init && (mddev->normal_io_events > last_events ||
9235 		      bdev_count_inflight(disk->part0)))
9236 		idle = false;
9237 
9238 	rcu_read_lock();
9239 	rdev_for_each_rcu(rdev, mddev)
9240 		if (!is_rdev_holder_idle(rdev, init))
9241 			idle = false;
9242 	rcu_read_unlock();
9243 
9244 	return idle;
9245 }
9246 
9247 void md_done_sync(struct mddev *mddev, int blocks)
9248 {
9249 	/* another "blocks" (512byte) blocks have been synced */
9250 	atomic_sub(blocks, &mddev->recovery_active);
9251 	wake_up(&mddev->recovery_wait);
9252 }
9253 EXPORT_SYMBOL(md_done_sync);
9254 
9255 void md_sync_error(struct mddev *mddev)
9256 {
9257 	// stop recovery, signal do_sync ....
9258 	set_bit(MD_RECOVERY_INTR, &mddev->recovery);
9259 	md_wakeup_thread(mddev->thread);
9260 }
9261 EXPORT_SYMBOL(md_sync_error);
9262 
9263 /* md_write_start(mddev, bi)
9264  * If we need to update some array metadata (e.g. 'active' flag
9265  * in superblock) before writing, schedule a superblock update
9266  * and wait for it to complete.
9267  * A return value of 'false' means that the write wasn't recorded
9268  * and cannot proceed as the array is being suspend.
9269  */
9270 void md_write_start(struct mddev *mddev, struct bio *bi)
9271 {
9272 	int did_change = 0;
9273 
9274 	if (bio_data_dir(bi) != WRITE)
9275 		return;
9276 
9277 	BUG_ON(mddev->ro == MD_RDONLY);
9278 	if (mddev->ro == MD_AUTO_READ) {
9279 		/* need to switch to read/write */
9280 		mddev->ro = MD_RDWR;
9281 		set_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
9282 		md_wakeup_thread(mddev->thread);
9283 		md_wakeup_thread(mddev->sync_thread);
9284 		did_change = 1;
9285 	}
9286 	rcu_read_lock();
9287 	percpu_ref_get(&mddev->writes_pending);
9288 	smp_mb(); /* Match smp_mb in set_in_sync() */
9289 	if (mddev->safemode == 1)
9290 		mddev->safemode = 0;
9291 	/* sync_checkers is always 0 when writes_pending is in per-cpu mode */
9292 	if (mddev->in_sync || mddev->sync_checkers) {
9293 		spin_lock(&mddev->lock);
9294 		if (mddev->in_sync) {
9295 			mddev->in_sync = 0;
9296 			set_bit(MD_SB_CHANGE_CLEAN, &mddev->sb_flags);
9297 			set_bit(MD_SB_CHANGE_PENDING, &mddev->sb_flags);
9298 			md_wakeup_thread(mddev->thread);
9299 			did_change = 1;
9300 		}
9301 		spin_unlock(&mddev->lock);
9302 	}
9303 	rcu_read_unlock();
9304 	if (did_change)
9305 		sysfs_notify_dirent_safe(mddev->sysfs_state);
9306 	if (!test_bit(MD_HAS_SUPERBLOCK, &mddev->flags))
9307 		return;
9308 	wait_event(mddev->sb_wait,
9309 		   !test_bit(MD_SB_CHANGE_PENDING, &mddev->sb_flags));
9310 }
9311 EXPORT_SYMBOL(md_write_start);
9312 
9313 /* md_write_inc can only be called when md_write_start() has
9314  * already been called at least once of the current request.
9315  * It increments the counter and is useful when a single request
9316  * is split into several parts.  Each part causes an increment and
9317  * so needs a matching md_write_end().
9318  * Unlike md_write_start(), it is safe to call md_write_inc() inside
9319  * a spinlocked region.
9320  */
9321 void md_write_inc(struct mddev *mddev, struct bio *bi)
9322 {
9323 	if (bio_data_dir(bi) != WRITE)
9324 		return;
9325 	WARN_ON_ONCE(mddev->in_sync || !md_is_rdwr(mddev));
9326 	percpu_ref_get(&mddev->writes_pending);
9327 }
9328 EXPORT_SYMBOL(md_write_inc);
9329 
9330 void md_write_end(struct mddev *mddev)
9331 {
9332 	percpu_ref_put(&mddev->writes_pending);
9333 
9334 	if (mddev->safemode == 2)
9335 		md_wakeup_thread(mddev->thread);
9336 	else if (mddev->safemode_delay)
9337 		/* The roundup() ensures this only performs locking once
9338 		 * every ->safemode_delay jiffies
9339 		 */
9340 		mod_timer(&mddev->safemode_timer,
9341 			  roundup(jiffies, mddev->safemode_delay) +
9342 			  mddev->safemode_delay);
9343 }
9344 
9345 EXPORT_SYMBOL(md_write_end);
9346 
9347 /* This is used by raid0 and raid10 */
9348 void md_submit_discard_bio(struct mddev *mddev, struct md_rdev *rdev,
9349 			struct bio *bio, sector_t start, sector_t size)
9350 {
9351 	struct bio *discard_bio = NULL;
9352 
9353 	__blkdev_issue_discard(rdev->bdev, start, size, GFP_NOIO, &discard_bio);
9354 	if (!discard_bio)
9355 		return;
9356 
9357 	bio_chain(discard_bio, bio);
9358 	bio_clone_blkg_association(discard_bio, bio);
9359 	mddev_trace_remap(mddev, discard_bio, bio->bi_iter.bi_sector);
9360 	submit_bio_noacct(discard_bio);
9361 }
9362 EXPORT_SYMBOL_GPL(md_submit_discard_bio);
9363 
9364 static void md_bitmap_start(struct mddev *mddev,
9365 			    struct md_io_clone *md_io_clone)
9366 {
9367 	md_bitmap_fn *fn = unlikely(md_io_clone->rw == STAT_DISCARD) ?
9368 			   mddev->bitmap_ops->start_discard :
9369 			   mddev->bitmap_ops->start_write;
9370 
9371 	if (mddev->pers->bitmap_sector)
9372 		mddev->pers->bitmap_sector(mddev, &md_io_clone->offset,
9373 					   &md_io_clone->sectors);
9374 
9375 	fn(mddev, md_io_clone->offset, md_io_clone->sectors);
9376 }
9377 
9378 static void md_bitmap_end(struct mddev *mddev, struct md_io_clone *md_io_clone)
9379 {
9380 	md_bitmap_fn *fn = unlikely(md_io_clone->rw == STAT_DISCARD) ?
9381 			   mddev->bitmap_ops->end_discard :
9382 			   mddev->bitmap_ops->end_write;
9383 
9384 	fn(mddev, md_io_clone->offset, md_io_clone->sectors);
9385 }
9386 
9387 static void md_end_clone_io(struct bio *bio)
9388 {
9389 	struct md_io_clone *md_io_clone = container_of(bio, struct md_io_clone,
9390 						       bio_clone);
9391 	struct bio *orig_bio = md_io_clone->orig_bio;
9392 	struct mddev *mddev = md_io_clone->mddev;
9393 	struct completion *reshape_completion = bio->bi_private;
9394 
9395 	if (bio_data_dir(orig_bio) == WRITE && md_bitmap_enabled(mddev, false))
9396 		md_bitmap_end(mddev, md_io_clone);
9397 
9398 	if (bio->bi_status && !orig_bio->bi_status)
9399 		orig_bio->bi_status = bio->bi_status;
9400 
9401 	if (md_io_clone->start_time)
9402 		bio_end_io_acct(orig_bio, md_io_clone->start_time);
9403 
9404 	bio_put(bio);
9405 	if (unlikely(reshape_completion))
9406 		complete(reshape_completion);
9407 	else
9408 		bio_endio(orig_bio);
9409 	percpu_ref_put(&mddev->active_io);
9410 }
9411 
9412 static void md_clone_bio(struct mddev *mddev, struct bio **bio)
9413 {
9414 	struct block_device *bdev = (*bio)->bi_bdev;
9415 	struct md_io_clone *md_io_clone;
9416 	struct bio *clone =
9417 		bio_alloc_clone(bdev, *bio, GFP_NOIO, &mddev->io_clone_set);
9418 
9419 	md_io_clone = container_of(clone, struct md_io_clone, bio_clone);
9420 	md_io_clone->orig_bio = *bio;
9421 	md_io_clone->mddev = mddev;
9422 	if (blk_queue_io_stat(bdev->bd_disk->queue))
9423 		md_io_clone->start_time = bio_start_io_acct(*bio);
9424 
9425 	if (bio_data_dir(*bio) == WRITE && md_bitmap_enabled(mddev, false)) {
9426 		md_io_clone->offset = (*bio)->bi_iter.bi_sector;
9427 		md_io_clone->sectors = bio_sectors(*bio);
9428 		md_io_clone->rw = op_stat_group(bio_op(*bio));
9429 		md_bitmap_start(mddev, md_io_clone);
9430 	}
9431 
9432 	clone->bi_end_io = md_end_clone_io;
9433 	clone->bi_private = NULL;
9434 	*bio = clone;
9435 }
9436 
9437 void md_account_bio(struct mddev *mddev, struct bio **bio)
9438 {
9439 	percpu_ref_get(&mddev->active_io);
9440 	md_clone_bio(mddev, bio);
9441 }
9442 EXPORT_SYMBOL_GPL(md_account_bio);
9443 
9444 /* md_allow_write(mddev)
9445  * Calling this ensures that the array is marked 'active' so that writes
9446  * may proceed without blocking.  It is important to call this before
9447  * attempting a GFP_KERNEL allocation while holding the mddev lock.
9448  * Must be called with mddev_lock held.
9449  */
9450 void md_allow_write(struct mddev *mddev)
9451 {
9452 	if (!mddev->pers)
9453 		return;
9454 	if (!md_is_rdwr(mddev))
9455 		return;
9456 	if (!mddev->pers->sync_request)
9457 		return;
9458 
9459 	spin_lock(&mddev->lock);
9460 	if (mddev->in_sync) {
9461 		mddev->in_sync = 0;
9462 		set_bit(MD_SB_CHANGE_CLEAN, &mddev->sb_flags);
9463 		set_bit(MD_SB_CHANGE_PENDING, &mddev->sb_flags);
9464 		if (mddev->safemode_delay &&
9465 		    mddev->safemode == 0)
9466 			mddev->safemode = 1;
9467 		spin_unlock(&mddev->lock);
9468 		md_update_sb(mddev, 0);
9469 		sysfs_notify_dirent_safe(mddev->sysfs_state);
9470 		/* wait for the dirty state to be recorded in the metadata */
9471 		wait_event(mddev->sb_wait,
9472 			   !test_bit(MD_SB_CHANGE_PENDING, &mddev->sb_flags));
9473 	} else
9474 		spin_unlock(&mddev->lock);
9475 }
9476 EXPORT_SYMBOL_GPL(md_allow_write);
9477 
9478 static sector_t md_sync_max_sectors(struct mddev *mddev,
9479 				    enum sync_action action)
9480 {
9481 	switch (action) {
9482 	case ACTION_RESYNC:
9483 	case ACTION_CHECK:
9484 	case ACTION_REPAIR:
9485 		atomic64_set(&mddev->resync_mismatches, 0);
9486 		fallthrough;
9487 	case ACTION_RESHAPE:
9488 		return mddev->resync_max_sectors;
9489 	case ACTION_RECOVER:
9490 		return mddev->dev_sectors;
9491 	default:
9492 		return 0;
9493 	}
9494 }
9495 
9496 /*
9497  * If lazy recovery is requested and all rdevs are in sync, select the rdev with
9498  * the higest index to perfore recovery to build initial xor data, this is the
9499  * same as old bitmap.
9500  */
9501 static bool mddev_select_lazy_recover_rdev(struct mddev *mddev)
9502 {
9503 	struct md_rdev *recover_rdev = NULL;
9504 	struct md_rdev *rdev;
9505 	bool ret = false;
9506 
9507 	rcu_read_lock();
9508 	rdev_for_each_rcu(rdev, mddev) {
9509 		if (rdev->raid_disk < 0)
9510 			continue;
9511 
9512 		if (test_bit(Faulty, &rdev->flags) ||
9513 		    !test_bit(In_sync, &rdev->flags))
9514 			break;
9515 
9516 		if (!recover_rdev || recover_rdev->raid_disk < rdev->raid_disk)
9517 			recover_rdev = rdev;
9518 	}
9519 
9520 	if (recover_rdev) {
9521 		clear_bit(In_sync, &recover_rdev->flags);
9522 		ret = true;
9523 	}
9524 
9525 	rcu_read_unlock();
9526 	return ret;
9527 }
9528 
9529 static sector_t md_sync_position(struct mddev *mddev, enum sync_action action)
9530 {
9531 	sector_t start = 0;
9532 	struct md_rdev *rdev;
9533 
9534 	switch (action) {
9535 	case ACTION_CHECK:
9536 	case ACTION_REPAIR:
9537 		return mddev->resync_min;
9538 	case ACTION_RESYNC:
9539 		if (!mddev->bitmap)
9540 			return mddev->resync_offset;
9541 		return 0;
9542 	case ACTION_RESHAPE:
9543 		/*
9544 		 * If the original node aborts reshaping then we continue the
9545 		 * reshaping, so set again to avoid restart reshape from the
9546 		 * first beginning
9547 		 */
9548 		if (mddev_is_clustered(mddev) &&
9549 		    mddev->reshape_position != MaxSector)
9550 			return mddev->reshape_position;
9551 		return 0;
9552 	case ACTION_RECOVER:
9553 		start = MaxSector;
9554 		rcu_read_lock();
9555 		rdev_for_each_rcu(rdev, mddev)
9556 			if (rdev_needs_recovery(rdev, start))
9557 				start = rdev->recovery_offset;
9558 		rcu_read_unlock();
9559 
9560 		/*
9561 		 * If there are no spares, and raid456 lazy initial recover is
9562 		 * requested.
9563 		 */
9564 		if (test_bit(MD_RECOVERY_LAZY_RECOVER, &mddev->recovery) &&
9565 		    start == MaxSector && mddev_select_lazy_recover_rdev(mddev))
9566 			start = 0;
9567 
9568 		/* If there is a bitmap, we need to make sure all
9569 		 * writes that started before we added a spare
9570 		 * complete before we start doing a recovery.
9571 		 * Otherwise the write might complete and (via
9572 		 * bitmap_endwrite) set a bit in the bitmap after the
9573 		 * recovery has checked that bit and skipped that
9574 		 * region.
9575 		 */
9576 		if (mddev->bitmap) {
9577 			mddev->pers->quiesce(mddev, 1);
9578 			mddev->pers->quiesce(mddev, 0);
9579 		}
9580 		return start;
9581 	default:
9582 		return MaxSector;
9583 	}
9584 }
9585 
9586 static bool sync_io_within_limit(struct mddev *mddev)
9587 {
9588 	/*
9589 	 * For raid456, sync IO is stripe(4k) per IO, for other levels, it's
9590 	 * RESYNC_PAGES(64k) per IO.
9591 	 */
9592 	return atomic_read(&mddev->recovery_active) <
9593 	       (raid_is_456(mddev) ? 8 : 128) * sync_io_depth(mddev);
9594 }
9595 
9596 /*
9597  * Update sync offset and mddev status when sync completes
9598  */
9599 static void md_finish_sync(struct mddev *mddev, enum sync_action action)
9600 {
9601 	struct md_rdev *rdev;
9602 
9603 	switch (action) {
9604 	case ACTION_RESYNC:
9605 	case ACTION_REPAIR:
9606 		if (!test_bit(MD_RECOVERY_INTR, &mddev->recovery))
9607 			mddev->curr_resync = MaxSector;
9608 		mddev->resync_offset = mddev->curr_resync;
9609 		break;
9610 	case ACTION_RECOVER:
9611 		if (!test_bit(MD_RECOVERY_INTR, &mddev->recovery))
9612 			mddev->curr_resync = MaxSector;
9613 		rcu_read_lock();
9614 		rdev_for_each_rcu(rdev, mddev)
9615 			if (mddev->delta_disks >= 0 &&
9616 			    rdev_needs_recovery(rdev, mddev->curr_resync))
9617 				rdev->recovery_offset = mddev->curr_resync;
9618 		rcu_read_unlock();
9619 		break;
9620 	case ACTION_RESHAPE:
9621 		if (!test_bit(MD_RECOVERY_INTR, &mddev->recovery) &&
9622 		    mddev->delta_disks > 0 &&
9623 		    mddev->pers->finish_reshape &&
9624 		    mddev->pers->size &&
9625 		    !mddev_is_dm(mddev)) {
9626 			mddev_lock_nointr(mddev);
9627 			md_set_array_sectors(mddev, mddev->pers->size(mddev, 0, 0));
9628 			mddev_unlock(mddev);
9629 			if (!mddev_is_clustered(mddev))
9630 				set_capacity_and_notify(mddev->gendisk,
9631 							mddev->array_sectors);
9632 		}
9633 		if (mddev->pers->finish_reshape)
9634 			mddev->pers->finish_reshape(mddev);
9635 		break;
9636 	/* */
9637 	case ACTION_CHECK:
9638 	default:
9639 		break;
9640 	}
9641 }
9642 
9643 #define SYNC_MARKS	10
9644 #define	SYNC_MARK_STEP	(3*HZ)
9645 #define UPDATE_FREQUENCY (5*60*HZ)
9646 void md_do_sync(struct md_thread *thread)
9647 {
9648 	struct mddev *mddev = thread->mddev;
9649 	struct mddev *mddev2;
9650 	unsigned int currspeed = 0, window;
9651 	sector_t max_sectors,j, io_sectors, recovery_done;
9652 	unsigned long mark[SYNC_MARKS];
9653 	unsigned long update_time;
9654 	sector_t mark_cnt[SYNC_MARKS];
9655 	int last_mark,m;
9656 	sector_t last_check;
9657 	int skipped = 0;
9658 	enum sync_action action;
9659 	const char *desc;
9660 	struct blk_plug plug;
9661 	int ret;
9662 
9663 	/* just incase thread restarts... */
9664 	if (test_bit(MD_RECOVERY_DONE, &mddev->recovery))
9665 		return;
9666 
9667 	if (test_bit(MD_RECOVERY_INTR, &mddev->recovery))
9668 		goto skip;
9669 
9670 	if (test_bit(MD_RECOVERY_WAIT, &mddev->recovery) ||
9671 	    !md_is_rdwr(mddev)) {/* never try to sync a read-only array */
9672 		set_bit(MD_RECOVERY_INTR, &mddev->recovery);
9673 		goto skip;
9674 	}
9675 
9676 	if (mddev_is_clustered(mddev)) {
9677 		ret = mddev->cluster_ops->resync_start(mddev);
9678 		if (ret)
9679 			goto skip;
9680 
9681 		set_bit(MD_CLUSTER_RESYNC_LOCKED, &mddev->flags);
9682 		if (!(test_bit(MD_RECOVERY_SYNC, &mddev->recovery) ||
9683 			test_bit(MD_RECOVERY_RESHAPE, &mddev->recovery) ||
9684 			test_bit(MD_RECOVERY_RECOVER, &mddev->recovery))
9685 		     && ((unsigned long long)mddev->curr_resync_completed
9686 			 < (unsigned long long)mddev->resync_max_sectors))
9687 			goto skip;
9688 	}
9689 
9690 	action = md_sync_action(mddev);
9691 	if (action == ACTION_FROZEN || action == ACTION_IDLE) {
9692 		set_bit(MD_RECOVERY_INTR, &mddev->recovery);
9693 		goto skip;
9694 	}
9695 
9696 	desc = md_sync_action_name(action);
9697 	mddev->last_sync_action = action;
9698 
9699 	/*
9700 	 * Before starting a resync we must have set curr_resync to
9701 	 * 2, and then checked that every "conflicting" array has curr_resync
9702 	 * less than ours.  When we find one that is the same or higher
9703 	 * we wait on resync_wait.  To avoid deadlock, we reduce curr_resync
9704 	 * to 1 if we choose to yield (based arbitrarily on address of mddev structure).
9705 	 * This will mean we have to start checking from the beginning again.
9706 	 *
9707 	 */
9708 	if (mddev_is_clustered(mddev))
9709 		mddev->cluster_ops->resync_start_notify(mddev);
9710 	do {
9711 		int mddev2_minor = -1;
9712 		mddev->curr_resync = MD_RESYNC_DELAYED;
9713 
9714 	try_again:
9715 		if (test_bit(MD_RECOVERY_INTR, &mddev->recovery))
9716 			goto skip;
9717 		spin_lock(&all_mddevs_lock);
9718 		list_for_each_entry(mddev2, &all_mddevs, all_mddevs) {
9719 			if (test_bit(MD_DELETED, &mddev2->flags))
9720 				continue;
9721 			if (mddev2 == mddev)
9722 				continue;
9723 			if (!mddev->parallel_resync
9724 			&&  mddev2->curr_resync
9725 			&&  match_mddev_units(mddev, mddev2)) {
9726 				DEFINE_WAIT(wq);
9727 				if (mddev < mddev2 &&
9728 				    mddev->curr_resync == MD_RESYNC_DELAYED) {
9729 					/* arbitrarily yield */
9730 					mddev->curr_resync = MD_RESYNC_YIELDED;
9731 					wake_up(&resync_wait);
9732 				}
9733 				if (mddev > mddev2 &&
9734 				    mddev->curr_resync == MD_RESYNC_YIELDED)
9735 					/* no need to wait here, we can wait the next
9736 					 * time 'round when curr_resync == 2
9737 					 */
9738 					continue;
9739 				/* We need to wait 'interruptible' so as not to
9740 				 * contribute to the load average, and not to
9741 				 * be caught by 'softlockup'
9742 				 */
9743 				prepare_to_wait(&resync_wait, &wq, TASK_INTERRUPTIBLE);
9744 				if (!test_bit(MD_RECOVERY_INTR, &mddev->recovery) &&
9745 				    mddev2->curr_resync >= mddev->curr_resync) {
9746 					if (mddev2_minor != mddev2->md_minor) {
9747 						mddev2_minor = mddev2->md_minor;
9748 						pr_info("md: delaying %s of %s until %s has finished (they share one or more physical units)\n",
9749 							desc, mdname(mddev),
9750 							mdname(mddev2));
9751 					}
9752 					spin_unlock(&all_mddevs_lock);
9753 
9754 					if (signal_pending(current))
9755 						flush_signals(current);
9756 					schedule();
9757 					finish_wait(&resync_wait, &wq);
9758 					goto try_again;
9759 				}
9760 				finish_wait(&resync_wait, &wq);
9761 			}
9762 		}
9763 		spin_unlock(&all_mddevs_lock);
9764 	} while (mddev->curr_resync < MD_RESYNC_DELAYED);
9765 
9766 	max_sectors = md_sync_max_sectors(mddev, action);
9767 	j = md_sync_position(mddev, action);
9768 
9769 	pr_info("md: %s of RAID array %s\n", desc, mdname(mddev));
9770 	pr_debug("md: minimum _guaranteed_  speed: %d KB/sec/disk.\n", speed_min(mddev));
9771 	pr_debug("md: using maximum available idle IO bandwidth (but not more than %d KB/sec) for %s.\n",
9772 		 speed_max(mddev), desc);
9773 
9774 	is_mddev_idle(mddev, 1); /* this initializes IO event counters */
9775 
9776 	io_sectors = 0;
9777 	for (m = 0; m < SYNC_MARKS; m++) {
9778 		mark[m] = jiffies;
9779 		mark_cnt[m] = io_sectors;
9780 	}
9781 	last_mark = 0;
9782 	mddev->resync_mark = mark[last_mark];
9783 	mddev->resync_mark_cnt = mark_cnt[last_mark];
9784 
9785 	/*
9786 	 * Tune reconstruction:
9787 	 */
9788 	window = 32 * (PAGE_SIZE / 512);
9789 	pr_debug("md: using %dk window, over a total of %lluk.\n",
9790 		 window/2, (unsigned long long)max_sectors/2);
9791 
9792 	atomic_set(&mddev->recovery_active, 0);
9793 	last_check = 0;
9794 
9795 	if (j >= MD_RESYNC_ACTIVE) {
9796 		pr_debug("md: resuming %s of %s from checkpoint.\n",
9797 			 desc, mdname(mddev));
9798 		mddev->curr_resync = j;
9799 	} else
9800 		mddev->curr_resync = MD_RESYNC_ACTIVE; /* no longer delayed */
9801 	mddev->curr_resync_completed = j;
9802 	sysfs_notify_dirent_safe(mddev->sysfs_completed);
9803 	md_new_event();
9804 	update_time = jiffies;
9805 
9806 	blk_start_plug(&plug);
9807 	while (j < max_sectors) {
9808 		sector_t sectors;
9809 
9810 		skipped = 0;
9811 
9812 		if (!test_bit(MD_RECOVERY_RESHAPE, &mddev->recovery) &&
9813 		    ((mddev->curr_resync > mddev->curr_resync_completed &&
9814 		      (mddev->curr_resync - mddev->curr_resync_completed)
9815 		      > (max_sectors >> 4)) ||
9816 		     time_after_eq(jiffies, update_time + UPDATE_FREQUENCY) ||
9817 		     (j - mddev->curr_resync_completed)*2
9818 		     >= mddev->resync_max - mddev->curr_resync_completed ||
9819 		     mddev->curr_resync_completed > mddev->resync_max
9820 			    )) {
9821 			/* time to update curr_resync_completed */
9822 			wait_event(mddev->recovery_wait,
9823 				   atomic_read(&mddev->recovery_active) == 0);
9824 			mddev->curr_resync_completed = j;
9825 			if (test_bit(MD_RECOVERY_SYNC, &mddev->recovery) &&
9826 			    j > mddev->resync_offset)
9827 				mddev->resync_offset = j;
9828 			update_time = jiffies;
9829 			set_bit(MD_SB_CHANGE_CLEAN, &mddev->sb_flags);
9830 			sysfs_notify_dirent_safe(mddev->sysfs_completed);
9831 		}
9832 
9833 		while (j >= mddev->resync_max &&
9834 		       !test_bit(MD_RECOVERY_INTR, &mddev->recovery)) {
9835 			/* As this condition is controlled by user-space,
9836 			 * we can block indefinitely, so use '_interruptible'
9837 			 * to avoid triggering warnings.
9838 			 */
9839 			flush_signals(current); /* just in case */
9840 			wait_event_interruptible(mddev->recovery_wait,
9841 						 mddev->resync_max > j
9842 						 || test_bit(MD_RECOVERY_INTR,
9843 							     &mddev->recovery));
9844 		}
9845 
9846 		if (test_bit(MD_RECOVERY_INTR, &mddev->recovery))
9847 			break;
9848 
9849 		if (mddev->bitmap_ops && mddev->bitmap_ops->skip_sync_blocks) {
9850 			sectors = mddev->bitmap_ops->skip_sync_blocks(mddev, j);
9851 			if (sectors)
9852 				goto update;
9853 		}
9854 
9855 		sectors = mddev->pers->sync_request(mddev, j, max_sectors,
9856 						    &skipped);
9857 		if (sectors == 0) {
9858 			set_bit(MD_RECOVERY_INTR, &mddev->recovery);
9859 			break;
9860 		}
9861 
9862 		if (!skipped) { /* actual IO requested */
9863 			io_sectors += sectors;
9864 			atomic_add(sectors, &mddev->recovery_active);
9865 		}
9866 
9867 		if (test_bit(MD_RECOVERY_INTR, &mddev->recovery))
9868 			break;
9869 
9870 update:
9871 		j += sectors;
9872 		if (j > max_sectors)
9873 			/* when skipping, extra large numbers can be returned. */
9874 			j = max_sectors;
9875 		if (j >= MD_RESYNC_ACTIVE)
9876 			mddev->curr_resync = j;
9877 		mddev->curr_mark_cnt = io_sectors;
9878 		if (last_check == 0)
9879 			/* this is the earliest that rebuild will be
9880 			 * visible in /proc/mdstat
9881 			 */
9882 			md_new_event();
9883 
9884 		if (last_check + window > io_sectors || j == max_sectors)
9885 			continue;
9886 
9887 		last_check = io_sectors;
9888 	repeat:
9889 		if (time_after_eq(jiffies, mark[last_mark] + SYNC_MARK_STEP )) {
9890 			/* step marks */
9891 			int next = (last_mark+1) % SYNC_MARKS;
9892 
9893 			mddev->resync_mark = mark[next];
9894 			mddev->resync_mark_cnt = mark_cnt[next];
9895 			mark[next] = jiffies;
9896 			mark_cnt[next] = io_sectors - atomic_read(&mddev->recovery_active);
9897 			last_mark = next;
9898 		}
9899 
9900 		if (test_bit(MD_RECOVERY_INTR, &mddev->recovery))
9901 			break;
9902 
9903 		/*
9904 		 * this loop exits only if either when we are slower than
9905 		 * the 'hard' speed limit, or the system was IO-idle for
9906 		 * a jiffy.
9907 		 * the system might be non-idle CPU-wise, but we only care
9908 		 * about not overloading the IO subsystem. (things like an
9909 		 * e2fsck being done on the RAID array should execute fast)
9910 		 */
9911 		cond_resched();
9912 
9913 		recovery_done = io_sectors - atomic_read(&mddev->recovery_active);
9914 		currspeed = ((unsigned long)(recovery_done - mddev->resync_mark_cnt))/2
9915 			/((jiffies-mddev->resync_mark)/HZ +1) +1;
9916 
9917 		if (currspeed > speed_min(mddev)) {
9918 			if (currspeed > speed_max(mddev)) {
9919 				msleep(500);
9920 				goto repeat;
9921 			}
9922 			if (!sync_io_within_limit(mddev) &&
9923 			    !is_mddev_idle(mddev, 0)) {
9924 				/*
9925 				 * Give other IO more of a chance.
9926 				 * The faster the devices, the less we wait.
9927 				 */
9928 				wait_event(mddev->recovery_wait,
9929 					   !atomic_read(&mddev->recovery_active));
9930 			}
9931 		}
9932 	}
9933 	pr_info("md: %s: %s %s.\n",mdname(mddev), desc,
9934 		test_bit(MD_RECOVERY_INTR, &mddev->recovery)
9935 		? "interrupted" : "done");
9936 	/*
9937 	 * this also signals 'finished resyncing' to md_stop
9938 	 */
9939 	blk_finish_plug(&plug);
9940 	wait_event(mddev->recovery_wait, !atomic_read(&mddev->recovery_active));
9941 
9942 	if (!test_bit(MD_RECOVERY_RESHAPE, &mddev->recovery) &&
9943 	    mddev->curr_resync >= MD_RESYNC_ACTIVE) {
9944 		/* All sync IO completes after recovery_active becomes 0 */
9945 		mddev->curr_resync_completed = mddev->curr_resync;
9946 		sysfs_notify_dirent_safe(mddev->sysfs_completed);
9947 	}
9948 	mddev->pers->sync_request(mddev, max_sectors, max_sectors, &skipped);
9949 
9950 	if (mddev->curr_resync > MD_RESYNC_ACTIVE)
9951 		md_finish_sync(mddev, action);
9952  skip:
9953 	/* set CHANGE_PENDING here since maybe another update is needed,
9954 	 * so other nodes are informed. It should be harmless for normal
9955 	 * raid */
9956 	set_mask_bits(&mddev->sb_flags, 0,
9957 		      BIT(MD_SB_CHANGE_PENDING) | BIT(MD_SB_CHANGE_DEVS));
9958 	spin_lock(&mddev->lock);
9959 	if (!test_bit(MD_RECOVERY_INTR, &mddev->recovery)) {
9960 		/* We completed so min/max setting can be forgotten if used. */
9961 		if (test_bit(MD_RECOVERY_REQUESTED, &mddev->recovery))
9962 			mddev->resync_min = 0;
9963 		mddev->resync_max = MaxSector;
9964 	} else if (test_bit(MD_RECOVERY_REQUESTED, &mddev->recovery))
9965 		mddev->resync_min = mddev->curr_resync_completed;
9966 	set_bit(MD_RECOVERY_DONE, &mddev->recovery);
9967 	mddev->curr_resync = MD_RESYNC_NONE;
9968 	spin_unlock(&mddev->lock);
9969 
9970 	wake_up(&resync_wait);
9971 	md_wakeup_thread(mddev->thread);
9972 	return;
9973 }
9974 EXPORT_SYMBOL_GPL(md_do_sync);
9975 
9976 static bool rdev_removeable(struct md_rdev *rdev)
9977 {
9978 	/* rdev is not used. */
9979 	if (rdev->raid_disk < 0)
9980 		return false;
9981 
9982 	/* There are still inflight io, don't remove this rdev. */
9983 	if (atomic_read(&rdev->nr_pending))
9984 		return false;
9985 
9986 	/*
9987 	 * An error occurred but has not yet been acknowledged by the metadata
9988 	 * handler, don't remove this rdev.
9989 	 */
9990 	if (test_bit(Blocked, &rdev->flags))
9991 		return false;
9992 
9993 	/* Fautly rdev is not used, it's safe to remove it. */
9994 	if (test_bit(Faulty, &rdev->flags))
9995 		return true;
9996 
9997 	/* Journal disk can only be removed if it's faulty. */
9998 	if (test_bit(Journal, &rdev->flags))
9999 		return false;
10000 
10001 	/*
10002 	 * 'In_sync' is cleared while 'raid_disk' is valid, which means
10003 	 * replacement has just become active from pers->spare_active(), and
10004 	 * then pers->hot_remove_disk() will replace this rdev with replacement.
10005 	 */
10006 	if (!test_bit(In_sync, &rdev->flags))
10007 		return true;
10008 
10009 	return false;
10010 }
10011 
10012 static bool rdev_is_spare(struct md_rdev *rdev)
10013 {
10014 	return !test_bit(Candidate, &rdev->flags) && rdev->raid_disk >= 0 &&
10015 	       !test_bit(In_sync, &rdev->flags) &&
10016 	       !test_bit(Journal, &rdev->flags) &&
10017 	       !test_bit(Faulty, &rdev->flags);
10018 }
10019 
10020 static bool rdev_addable(struct md_rdev *rdev)
10021 {
10022 	struct mddev *mddev;
10023 
10024 	mddev = READ_ONCE(rdev->mddev);
10025 	if (!mddev)
10026 		return false;
10027 
10028 	/* rdev is already used, don't add it again. */
10029 	if (test_bit(Candidate, &rdev->flags) || rdev->raid_disk >= 0 ||
10030 	    test_bit(Faulty, &rdev->flags))
10031 		return false;
10032 
10033 	/* Allow to add journal disk. */
10034 	if (test_bit(Journal, &rdev->flags))
10035 		return true;
10036 
10037 	/* Allow to add if array is read-write. */
10038 	if (md_is_rdwr(mddev))
10039 		return true;
10040 
10041 	/*
10042 	 * For read-only array, only allow to readd a rdev. And if bitmap is
10043 	 * used, don't allow to readd a rdev that is too old.
10044 	 */
10045 	if (rdev->saved_raid_disk >= 0 && !test_bit(Bitmap_sync, &rdev->flags))
10046 		return true;
10047 
10048 	return false;
10049 }
10050 
10051 static bool md_spares_need_change(struct mddev *mddev)
10052 {
10053 	struct md_rdev *rdev;
10054 
10055 	rcu_read_lock();
10056 	rdev_for_each_rcu(rdev, mddev) {
10057 		if (rdev_removeable(rdev) || rdev_addable(rdev)) {
10058 			rcu_read_unlock();
10059 			return true;
10060 		}
10061 	}
10062 	rcu_read_unlock();
10063 	return false;
10064 }
10065 
10066 static int remove_spares(struct mddev *mddev, struct md_rdev *this)
10067 {
10068 	struct md_rdev *rdev;
10069 	int removed = 0;
10070 
10071 	rdev_for_each(rdev, mddev) {
10072 		if ((this == NULL || rdev == this) && rdev_removeable(rdev) &&
10073 		    !mddev->pers->hot_remove_disk(mddev, rdev)) {
10074 			sysfs_unlink_rdev(mddev, rdev);
10075 			rdev->saved_raid_disk = rdev->raid_disk;
10076 			rdev->raid_disk = -1;
10077 			removed++;
10078 		}
10079 	}
10080 
10081 	if (removed && mddev->kobj.sd)
10082 		sysfs_notify_dirent_safe(mddev->sysfs_degraded);
10083 
10084 	return removed;
10085 }
10086 
10087 static int remove_and_add_spares(struct mddev *mddev,
10088 				 struct md_rdev *this)
10089 {
10090 	struct md_rdev *rdev;
10091 	int spares = 0;
10092 	int removed = 0;
10093 
10094 	if (this && test_bit(MD_RECOVERY_RUNNING, &mddev->recovery))
10095 		/* Mustn't remove devices when resync thread is running */
10096 		return 0;
10097 
10098 	removed = remove_spares(mddev, this);
10099 	if (this && removed)
10100 		goto no_add;
10101 
10102 	rdev_for_each(rdev, mddev) {
10103 		if (this && this != rdev)
10104 			continue;
10105 		if (rdev_is_spare(rdev))
10106 			spares++;
10107 		if (!rdev_addable(rdev))
10108 			continue;
10109 		if (!test_bit(Journal, &rdev->flags))
10110 			rdev->recovery_offset = 0;
10111 		if (mddev->pers->hot_add_disk(mddev, rdev) == 0) {
10112 			/* failure here is OK */
10113 			sysfs_link_rdev(mddev, rdev);
10114 			if (!test_bit(Journal, &rdev->flags))
10115 				spares++;
10116 			md_new_event();
10117 			set_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags);
10118 		}
10119 	}
10120 no_add:
10121 	if (removed)
10122 		set_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags);
10123 	return spares;
10124 }
10125 
10126 static bool md_choose_sync_action(struct mddev *mddev, int *spares)
10127 {
10128 	/* Check if reshape is in progress first. */
10129 	if (mddev->reshape_position != MaxSector) {
10130 		if (mddev->pers->check_reshape == NULL ||
10131 		    mddev->pers->check_reshape(mddev) != 0)
10132 			return false;
10133 
10134 		set_bit(MD_RECOVERY_RESHAPE, &mddev->recovery);
10135 		clear_bit(MD_RECOVERY_RECOVER, &mddev->recovery);
10136 		clear_bit(MD_RECOVERY_LAZY_RECOVER, &mddev->recovery);
10137 		return true;
10138 	}
10139 
10140 	/* Check if resync is in progress. */
10141 	if (mddev->resync_offset < MaxSector) {
10142 		remove_spares(mddev, NULL);
10143 		set_bit(MD_RECOVERY_SYNC, &mddev->recovery);
10144 		clear_bit(MD_RECOVERY_RECOVER, &mddev->recovery);
10145 		clear_bit(MD_RECOVERY_LAZY_RECOVER, &mddev->recovery);
10146 		return true;
10147 	}
10148 
10149 	/*
10150 	 * Remove any failed drives, then add spares if possible. Spares are
10151 	 * also removed and re-added, to allow the personality to fail the
10152 	 * re-add.
10153 	 */
10154 	*spares = remove_and_add_spares(mddev, NULL);
10155 	if (*spares || test_bit(MD_RECOVERY_LAZY_RECOVER, &mddev->recovery)) {
10156 		clear_bit(MD_RECOVERY_SYNC, &mddev->recovery);
10157 		clear_bit(MD_RECOVERY_CHECK, &mddev->recovery);
10158 		clear_bit(MD_RECOVERY_REQUESTED, &mddev->recovery);
10159 
10160 		/* Start new recovery. */
10161 		set_bit(MD_RECOVERY_RECOVER, &mddev->recovery);
10162 		return true;
10163 	}
10164 
10165 	/* Delay to choose resync/check/repair in md_do_sync(). */
10166 	if (test_bit(MD_RECOVERY_SYNC, &mddev->recovery))
10167 		return true;
10168 
10169 	/* Nothing to be done */
10170 	return false;
10171 }
10172 
10173 static void md_start_sync(struct work_struct *ws)
10174 {
10175 	struct mddev *mddev = container_of(ws, struct mddev, sync_work);
10176 	int spares = 0;
10177 	bool suspend = false;
10178 	char *name;
10179 
10180 	/*
10181 	 * If reshape is still in progress, spares won't be added or removed
10182 	 * from conf until reshape is done.
10183 	 */
10184 	if (mddev->reshape_position == MaxSector &&
10185 	    md_spares_need_change(mddev)) {
10186 		suspend = true;
10187 		mddev_suspend(mddev, false);
10188 	}
10189 
10190 	mddev_lock_nointr(mddev);
10191 	if (!md_is_rdwr(mddev)) {
10192 		/*
10193 		 * On a read-only array we can:
10194 		 * - remove failed devices
10195 		 * - add already-in_sync devices if the array itself is in-sync.
10196 		 * As we only add devices that are already in-sync, we can
10197 		 * activate the spares immediately.
10198 		 */
10199 		remove_and_add_spares(mddev, NULL);
10200 		goto not_running;
10201 	}
10202 
10203 	if (!md_choose_sync_action(mddev, &spares))
10204 		goto not_running;
10205 
10206 	if (!mddev->pers->sync_request)
10207 		goto not_running;
10208 
10209 	/*
10210 	 * We are adding a device or devices to an array which has the bitmap
10211 	 * stored on all devices. So make sure all bitmap pages get written.
10212 	 */
10213 	if (spares && md_bitmap_enabled(mddev, true))
10214 		mddev->bitmap_ops->write_all(mddev);
10215 
10216 	name = test_bit(MD_RECOVERY_RESHAPE, &mddev->recovery) ?
10217 			"reshape" : "resync";
10218 	rcu_assign_pointer(mddev->sync_thread,
10219 			   md_register_thread(md_do_sync, mddev, name));
10220 	if (!mddev->sync_thread) {
10221 		pr_warn("%s: could not start resync thread...\n",
10222 			mdname(mddev));
10223 		/* leave the spares where they are, it shouldn't hurt */
10224 		goto not_running;
10225 	}
10226 
10227 	mddev_unlock(mddev);
10228 	/*
10229 	 * md_start_sync was triggered by MD_RECOVERY_NEEDED, so we should
10230 	 * not set it again. Otherwise, we may cause issue like this one:
10231 	 *     https://bugzilla.kernel.org/show_bug.cgi?id=218200
10232 	 * Therefore, use __mddev_resume(mddev, false).
10233 	 */
10234 	if (suspend)
10235 		__mddev_resume(mddev, false);
10236 	md_wakeup_thread(mddev->sync_thread);
10237 	sysfs_notify_dirent_safe(mddev->sysfs_action);
10238 	md_new_event();
10239 	return;
10240 
10241 not_running:
10242 	clear_bit(MD_RECOVERY_SYNC, &mddev->recovery);
10243 	clear_bit(MD_RECOVERY_RESHAPE, &mddev->recovery);
10244 	clear_bit(MD_RECOVERY_REQUESTED, &mddev->recovery);
10245 	clear_bit(MD_RECOVERY_CHECK, &mddev->recovery);
10246 	clear_bit(MD_RECOVERY_RUNNING, &mddev->recovery);
10247 	mddev_unlock(mddev);
10248 	/*
10249 	 * md_start_sync was triggered by MD_RECOVERY_NEEDED, so we should
10250 	 * not set it again. Otherwise, we may cause issue like this one:
10251 	 *     https://bugzilla.kernel.org/show_bug.cgi?id=218200
10252 	 * Therefore, use __mddev_resume(mddev, false).
10253 	 */
10254 	if (suspend)
10255 		__mddev_resume(mddev, false);
10256 
10257 	wake_up(&resync_wait);
10258 	if (test_and_clear_bit(MD_RECOVERY_RECOVER, &mddev->recovery) &&
10259 	    mddev->sysfs_action)
10260 		sysfs_notify_dirent_safe(mddev->sysfs_action);
10261 }
10262 
10263 static void unregister_sync_thread(struct mddev *mddev)
10264 {
10265 	if (!test_bit(MD_RECOVERY_DONE, &mddev->recovery)) {
10266 		/* resync/recovery still happening */
10267 		clear_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
10268 		return;
10269 	}
10270 
10271 	if (WARN_ON_ONCE(!mddev->sync_thread))
10272 		return;
10273 
10274 	md_reap_sync_thread(mddev);
10275 }
10276 
10277 static bool md_should_do_recovery(struct mddev *mddev)
10278 {
10279 	/*
10280 	 * As long as one of the following flags is set,
10281 	 * recovery needs to do or cleanup.
10282 	 */
10283 	if (test_bit(MD_RECOVERY_NEEDED, &mddev->recovery) ||
10284 	    test_bit(MD_RECOVERY_DONE, &mddev->recovery))
10285 		return true;
10286 
10287 	/*
10288 	 * If no flags are set and it is in read-only status,
10289 	 * there is nothing to do.
10290 	 */
10291 	if (!md_is_rdwr(mddev))
10292 		return false;
10293 
10294 	/*
10295 	 * MD_SB_CHANGE_PENDING indicates that the array is switching from clean to
10296 	 * active, and no action is needed for now.
10297 	 * All other MD_SB_* flags require to update the superblock.
10298 	 */
10299 	if (mddev->sb_flags & ~ (1<<MD_SB_CHANGE_PENDING))
10300 		return true;
10301 
10302 	/*
10303 	 * If the array is not using external metadata and there has been no data
10304 	 * written for some time, then the array's status needs to be set to
10305 	 * in_sync.
10306 	 */
10307 	if (mddev->external == 0 && mddev->safemode == 1)
10308 		return true;
10309 
10310 	/*
10311 	 * When the system is about to restart or the process receives an signal,
10312 	 * the array needs to be synchronized as soon as possible.
10313 	 * Once the data synchronization is completed, need to change the array
10314 	 * status to in_sync.
10315 	 */
10316 	if (mddev->safemode == 2 && !mddev->in_sync &&
10317 	    mddev->resync_offset == MaxSector)
10318 		return true;
10319 
10320 	return false;
10321 }
10322 
10323 /*
10324  * This routine is regularly called by all per-raid-array threads to
10325  * deal with generic issues like resync and super-block update.
10326  * Raid personalities that don't have a thread (linear/raid0) do not
10327  * need this as they never do any recovery or update the superblock.
10328  *
10329  * It does not do any resync itself, but rather "forks" off other threads
10330  * to do that as needed.
10331  * When it is determined that resync is needed, we set MD_RECOVERY_RUNNING in
10332  * "->recovery" and create a thread at ->sync_thread.
10333  * When the thread finishes it sets MD_RECOVERY_DONE
10334  * and wakeups up this thread which will reap the thread and finish up.
10335  * This thread also removes any faulty devices (with nr_pending == 0).
10336  *
10337  * The overall approach is:
10338  *  1/ if the superblock needs updating, update it.
10339  *  2/ If a recovery thread is running, don't do anything else.
10340  *  3/ If recovery has finished, clean up, possibly marking spares active.
10341  *  4/ If there are any faulty devices, remove them.
10342  *  5/ If array is degraded, try to add spares devices
10343  *  6/ If array has spares or is not in-sync, start a resync thread.
10344  */
10345 void md_check_recovery(struct mddev *mddev)
10346 {
10347 	if (md_bitmap_enabled(mddev, false) && mddev->bitmap_ops->daemon_work)
10348 		mddev->bitmap_ops->daemon_work(mddev);
10349 
10350 	if (signal_pending(current)) {
10351 		if (mddev->pers->sync_request && !mddev->external) {
10352 			pr_debug("md: %s in immediate safe mode\n",
10353 				 mdname(mddev));
10354 			mddev->safemode = 2;
10355 		}
10356 		flush_signals(current);
10357 	}
10358 
10359 	if (!md_should_do_recovery(mddev))
10360 		return;
10361 
10362 	if (mddev_trylock(mddev)) {
10363 		bool try_set_sync = mddev->safemode != 0;
10364 
10365 		if (!mddev->external && mddev->safemode == 1)
10366 			mddev->safemode = 0;
10367 
10368 		if (!md_is_rdwr(mddev)) {
10369 			struct md_rdev *rdev;
10370 
10371 			if (test_bit(MD_RECOVERY_RUNNING, &mddev->recovery)) {
10372 				unregister_sync_thread(mddev);
10373 				goto unlock;
10374 			}
10375 
10376 			if (!mddev->external && mddev->in_sync)
10377 				/*
10378 				 * 'Blocked' flag not needed as failed devices
10379 				 * will be recorded if array switched to read/write.
10380 				 * Leaving it set will prevent the device
10381 				 * from being removed.
10382 				 */
10383 				rdev_for_each(rdev, mddev)
10384 					clear_bit(Blocked, &rdev->flags);
10385 
10386 			/*
10387 			 * There is no thread, but we need to call
10388 			 * ->spare_active and clear saved_raid_disk
10389 			 */
10390 			set_bit(MD_RECOVERY_INTR, &mddev->recovery);
10391 			md_reap_sync_thread(mddev);
10392 
10393 			/*
10394 			 * Let md_start_sync() to remove and add rdevs to the
10395 			 * array.
10396 			 */
10397 			if (md_spares_need_change(mddev)) {
10398 				set_bit(MD_RECOVERY_RUNNING, &mddev->recovery);
10399 				queue_work(md_misc_wq, &mddev->sync_work);
10400 			}
10401 
10402 			clear_bit(MD_RECOVERY_RECOVER, &mddev->recovery);
10403 			clear_bit(MD_RECOVERY_LAZY_RECOVER, &mddev->recovery);
10404 			clear_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
10405 			clear_bit(MD_SB_CHANGE_PENDING, &mddev->sb_flags);
10406 
10407 			goto unlock;
10408 		}
10409 
10410 		if (mddev_is_clustered(mddev)) {
10411 			struct md_rdev *rdev, *tmp;
10412 			/* kick the device if another node issued a
10413 			 * remove disk.
10414 			 */
10415 			rdev_for_each_safe(rdev, tmp, mddev) {
10416 				if (rdev->raid_disk < 0 &&
10417 				    test_and_clear_bit(ClusterRemove, &rdev->flags))
10418 					md_kick_rdev_from_array(rdev);
10419 			}
10420 		}
10421 
10422 		if (try_set_sync && !mddev->external && !mddev->in_sync) {
10423 			spin_lock(&mddev->lock);
10424 			set_in_sync(mddev);
10425 			spin_unlock(&mddev->lock);
10426 		}
10427 
10428 		if (mddev->sb_flags)
10429 			md_update_sb(mddev, 0);
10430 
10431 		/*
10432 		 * Never start a new sync thread if MD_RECOVERY_RUNNING is
10433 		 * still set.
10434 		 */
10435 		if (test_bit(MD_RECOVERY_RUNNING, &mddev->recovery)) {
10436 			unregister_sync_thread(mddev);
10437 			goto unlock;
10438 		}
10439 
10440 		/* Set RUNNING before clearing NEEDED to avoid
10441 		 * any transients in the value of "sync_action".
10442 		 */
10443 		mddev->curr_resync_completed = 0;
10444 		spin_lock(&mddev->lock);
10445 		set_bit(MD_RECOVERY_RUNNING, &mddev->recovery);
10446 		spin_unlock(&mddev->lock);
10447 		/* Clear some bits that don't mean anything, but
10448 		 * might be left set
10449 		 */
10450 		clear_bit(MD_RECOVERY_INTR, &mddev->recovery);
10451 		clear_bit(MD_RECOVERY_DONE, &mddev->recovery);
10452 
10453 		if (test_and_clear_bit(MD_RECOVERY_NEEDED, &mddev->recovery) &&
10454 		    !test_bit(MD_RECOVERY_FROZEN, &mddev->recovery)) {
10455 			queue_work(md_misc_wq, &mddev->sync_work);
10456 		} else {
10457 			clear_bit(MD_RECOVERY_RUNNING, &mddev->recovery);
10458 			wake_up(&resync_wait);
10459 		}
10460 
10461 	unlock:
10462 		wake_up(&mddev->sb_wait);
10463 		mddev_unlock(mddev);
10464 	}
10465 }
10466 EXPORT_SYMBOL(md_check_recovery);
10467 
10468 void md_reap_sync_thread(struct mddev *mddev)
10469 {
10470 	struct md_rdev *rdev;
10471 	sector_t old_dev_sectors = mddev->dev_sectors;
10472 	bool is_reshaped = test_bit(MD_RECOVERY_RESHAPE, &mddev->recovery);
10473 
10474 	/* resync has finished, collect result */
10475 	md_unregister_thread(mddev, &mddev->sync_thread);
10476 	atomic_inc(&mddev->sync_seq);
10477 
10478 	if (!test_bit(MD_RECOVERY_INTR, &mddev->recovery) &&
10479 	    !test_bit(MD_RECOVERY_REQUESTED, &mddev->recovery) &&
10480 	    mddev->degraded != mddev->raid_disks) {
10481 		/* success...*/
10482 		/* activate any spares */
10483 		if (mddev->pers->spare_active(mddev)) {
10484 			sysfs_notify_dirent_safe(mddev->sysfs_degraded);
10485 			set_bit(MD_SB_CHANGE_DEVS, &mddev->sb_flags);
10486 		}
10487 	}
10488 
10489 	/* If array is no-longer degraded, then any saved_raid_disk
10490 	 * information must be scrapped.
10491 	 */
10492 	if (!mddev->degraded)
10493 		rdev_for_each(rdev, mddev)
10494 			rdev->saved_raid_disk = -1;
10495 
10496 	md_update_sb(mddev, 1);
10497 	/* MD_SB_CHANGE_PENDING should be cleared by md_update_sb, so we can
10498 	 * call resync_finish here if MD_CLUSTER_RESYNC_LOCKED is set by
10499 	 * clustered raid */
10500 	if (test_and_clear_bit(MD_CLUSTER_RESYNC_LOCKED, &mddev->flags))
10501 		mddev->cluster_ops->resync_finish(mddev);
10502 	clear_bit(MD_RECOVERY_RUNNING, &mddev->recovery);
10503 	clear_bit(MD_RECOVERY_DONE, &mddev->recovery);
10504 	clear_bit(MD_RECOVERY_SYNC, &mddev->recovery);
10505 	clear_bit(MD_RECOVERY_RESHAPE, &mddev->recovery);
10506 	clear_bit(MD_RECOVERY_REQUESTED, &mddev->recovery);
10507 	clear_bit(MD_RECOVERY_CHECK, &mddev->recovery);
10508 	clear_bit(MD_RECOVERY_LAZY_RECOVER, &mddev->recovery);
10509 	/*
10510 	 * We call mddev->cluster_ops->update_size here because sync_size could
10511 	 * be changed by md_update_sb, and MD_RECOVERY_RESHAPE is cleared,
10512 	 * so it is time to update size across cluster.
10513 	 */
10514 	if (mddev_is_clustered(mddev) && is_reshaped &&
10515 	    mddev->pers->finish_reshape &&
10516 	    !test_bit(MD_CLOSING, &mddev->flags))
10517 		mddev->cluster_ops->update_size(mddev, old_dev_sectors);
10518 	/* flag recovery needed just to double check */
10519 	set_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
10520 	sysfs_notify_dirent_safe(mddev->sysfs_completed);
10521 	sysfs_notify_dirent_safe(mddev->sysfs_action);
10522 	md_new_event();
10523 	if (mddev->event_work.func)
10524 		queue_work(md_misc_wq, &mddev->event_work);
10525 	wake_up(&resync_wait);
10526 }
10527 EXPORT_SYMBOL(md_reap_sync_thread);
10528 
10529 void md_wait_for_blocked_rdev(struct md_rdev *rdev, struct mddev *mddev)
10530 {
10531 	sysfs_notify_dirent_safe(rdev->sysfs_state);
10532 	wait_event_timeout(rdev->blocked_wait, !rdev_blocked(rdev),
10533 			   msecs_to_jiffies(5000));
10534 	rdev_dec_pending(rdev, mddev);
10535 }
10536 EXPORT_SYMBOL(md_wait_for_blocked_rdev);
10537 
10538 void md_finish_reshape(struct mddev *mddev)
10539 {
10540 	/* called be personality module when reshape completes. */
10541 	struct md_rdev *rdev;
10542 
10543 	rdev_for_each(rdev, mddev) {
10544 		if (rdev->data_offset > rdev->new_data_offset)
10545 			rdev->sectors += rdev->data_offset - rdev->new_data_offset;
10546 		else
10547 			rdev->sectors -= rdev->new_data_offset - rdev->data_offset;
10548 		rdev->data_offset = rdev->new_data_offset;
10549 	}
10550 }
10551 EXPORT_SYMBOL(md_finish_reshape);
10552 
10553 /* Bad block management */
10554 
10555 /* Returns true on success, false on failure */
10556 bool rdev_set_badblocks(struct md_rdev *rdev, sector_t s, int sectors,
10557 			int is_new)
10558 {
10559 	struct mddev *mddev = rdev->mddev;
10560 
10561 	/*
10562 	 * Recording new badblocks for faulty rdev will force unnecessary
10563 	 * super block updating. This is fragile for external management because
10564 	 * userspace daemon may trying to remove this device and deadlock may
10565 	 * occur. This will be probably solved in the mdadm, but it is safer to
10566 	 * avoid it.
10567 	 */
10568 	if (test_bit(Faulty, &rdev->flags))
10569 		return true;
10570 
10571 	if (is_new)
10572 		s += rdev->new_data_offset;
10573 	else
10574 		s += rdev->data_offset;
10575 
10576 	if (!badblocks_set(&rdev->badblocks, s, sectors, 0)) {
10577 		/*
10578 		 * Mark the disk as Faulty when setting badblocks fails,
10579 		 * otherwise, bad sectors may be read.
10580 		 */
10581 		md_error(mddev, rdev);
10582 		return false;
10583 	}
10584 
10585 	/* Make sure they get written out promptly */
10586 	if (test_bit(ExternalBbl, &rdev->flags))
10587 		sysfs_notify_dirent_safe(rdev->sysfs_unack_badblocks);
10588 	sysfs_notify_dirent_safe(rdev->sysfs_state);
10589 	set_mask_bits(&mddev->sb_flags, 0,
10590 		      BIT(MD_SB_CHANGE_CLEAN) | BIT(MD_SB_CHANGE_PENDING));
10591 	md_wakeup_thread(rdev->mddev->thread);
10592 	return true;
10593 }
10594 EXPORT_SYMBOL_GPL(rdev_set_badblocks);
10595 
10596 void rdev_clear_badblocks(struct md_rdev *rdev, sector_t s, int sectors,
10597 			  int is_new)
10598 {
10599 	if (is_new)
10600 		s += rdev->new_data_offset;
10601 	else
10602 		s += rdev->data_offset;
10603 
10604 	if (!badblocks_clear(&rdev->badblocks, s, sectors))
10605 		return;
10606 
10607 	if (test_bit(ExternalBbl, &rdev->flags))
10608 		sysfs_notify_dirent_safe(rdev->sysfs_badblocks);
10609 }
10610 EXPORT_SYMBOL_GPL(rdev_clear_badblocks);
10611 
10612 static int md_notify_reboot(struct notifier_block *this,
10613 			    unsigned long code, void *x)
10614 {
10615 	struct mddev *mddev;
10616 
10617 	spin_lock(&all_mddevs_lock);
10618 	list_for_each_entry(mddev, &all_mddevs, all_mddevs) {
10619 		if (!mddev_get(mddev))
10620 			continue;
10621 		spin_unlock(&all_mddevs_lock);
10622 		if (mddev_trylock(mddev)) {
10623 			if (mddev->pers)
10624 				__md_stop_writes(mddev);
10625 			if (mddev->persistent)
10626 				mddev->safemode = 2;
10627 			mddev_unlock(mddev);
10628 		}
10629 		spin_lock(&all_mddevs_lock);
10630 		mddev_put_locked(mddev);
10631 	}
10632 	spin_unlock(&all_mddevs_lock);
10633 
10634 	return NOTIFY_DONE;
10635 }
10636 
10637 static struct notifier_block md_notifier = {
10638 	.notifier_call	= md_notify_reboot,
10639 	.next		= NULL,
10640 	.priority	= INT_MAX, /* before any real devices */
10641 };
10642 
10643 static void md_geninit(void)
10644 {
10645 	pr_debug("md: sizeof(mdp_super_t) = %d\n", (int)sizeof(mdp_super_t));
10646 
10647 	proc_create("mdstat", S_IRUGO, NULL, &mdstat_proc_ops);
10648 }
10649 
10650 static int __init md_init(void)
10651 {
10652 	int ret = md_bitmap_init();
10653 
10654 	if (ret)
10655 		return ret;
10656 
10657 	ret = md_llbitmap_init();
10658 	if (ret)
10659 		goto err_bitmap;
10660 
10661 	ret = -ENOMEM;
10662 	md_misc_wq = alloc_workqueue("md_misc", WQ_PERCPU, 0);
10663 	if (!md_misc_wq)
10664 		goto err_misc_wq;
10665 
10666 	ret = __register_blkdev(MD_MAJOR, "md", md_probe);
10667 	if (ret < 0)
10668 		goto err_md;
10669 
10670 	ret = __register_blkdev(0, "mdp", md_probe);
10671 	if (ret < 0)
10672 		goto err_mdp;
10673 	mdp_major = ret;
10674 
10675 	register_reboot_notifier(&md_notifier);
10676 	raid_table_header = register_sysctl("dev/raid", raid_table);
10677 
10678 	md_geninit();
10679 	return 0;
10680 
10681 err_mdp:
10682 	unregister_blkdev(MD_MAJOR, "md");
10683 err_md:
10684 	destroy_workqueue(md_misc_wq);
10685 err_misc_wq:
10686 	md_llbitmap_exit();
10687 err_bitmap:
10688 	md_bitmap_exit();
10689 	return ret;
10690 }
10691 
10692 static void check_sb_changes(struct mddev *mddev, struct md_rdev *rdev)
10693 {
10694 	struct mdp_superblock_1 *sb = page_address(rdev->sb_page);
10695 	struct md_rdev *rdev2, *tmp;
10696 	int role, ret;
10697 
10698 	/*
10699 	 * If size is changed in another node then we need to
10700 	 * do resize as well.
10701 	 */
10702 	if (mddev->dev_sectors != le64_to_cpu(sb->size)) {
10703 		ret = mddev->pers->resize(mddev, le64_to_cpu(sb->size));
10704 		if (ret)
10705 			pr_info("md-cluster: resize failed\n");
10706 		else if (md_bitmap_enabled(mddev, false))
10707 			mddev->bitmap_ops->update_sb(mddev->bitmap);
10708 	}
10709 
10710 	/* Check for change of roles in the active devices */
10711 	rdev_for_each_safe(rdev2, tmp, mddev) {
10712 		if (test_bit(Faulty, &rdev2->flags)) {
10713 			if (test_bit(ClusterRemove, &rdev2->flags))
10714 				set_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
10715 			continue;
10716 		}
10717 
10718 		/* Check if the roles changed */
10719 		role = le16_to_cpu(sb->dev_roles[rdev2->desc_nr]);
10720 
10721 		if (test_bit(Candidate, &rdev2->flags)) {
10722 			if (role == MD_DISK_ROLE_FAULTY) {
10723 				pr_info("md: Removing Candidate device %pg because add failed\n",
10724 					rdev2->bdev);
10725 				md_kick_rdev_from_array(rdev2);
10726 				continue;
10727 			}
10728 			else
10729 				clear_bit(Candidate, &rdev2->flags);
10730 		}
10731 
10732 		if (role != rdev2->raid_disk) {
10733 			/*
10734 			 * got activated except reshape is happening.
10735 			 */
10736 			if (rdev2->raid_disk == -1 && role != MD_DISK_ROLE_SPARE &&
10737 			    !(le32_to_cpu(sb->feature_map) &
10738 			      MD_FEATURE_RESHAPE_ACTIVE) &&
10739 			    !mddev->cluster_ops->resync_status_get(mddev)) {
10740 				/*
10741 				 * -1 to make raid1_add_disk() set conf->fullsync
10742 				 * to 1. This could avoid skipping sync when the
10743 				 * remote node is down during resyncing.
10744 				 */
10745 				if ((le32_to_cpu(sb->feature_map)
10746 				    & MD_FEATURE_RECOVERY_OFFSET))
10747 					rdev2->saved_raid_disk = -1;
10748 				else
10749 					rdev2->saved_raid_disk = role;
10750 				ret = remove_and_add_spares(mddev, rdev2);
10751 				pr_info("Activated spare: %pg\n",
10752 					rdev2->bdev);
10753 				/* wakeup mddev->thread here, so array could
10754 				 * perform resync with the new activated disk */
10755 				set_bit(MD_RECOVERY_NEEDED, &mddev->recovery);
10756 				md_wakeup_thread(mddev->thread);
10757 			}
10758 			/* device faulty
10759 			 * We just want to do the minimum to mark the disk
10760 			 * as faulty. The recovery is performed by the
10761 			 * one who initiated the error.
10762 			 */
10763 			if (role == MD_DISK_ROLE_FAULTY ||
10764 			    role == MD_DISK_ROLE_JOURNAL) {
10765 				md_error(mddev, rdev2);
10766 				clear_bit(Blocked, &rdev2->flags);
10767 			}
10768 		}
10769 	}
10770 
10771 	if (mddev->raid_disks != le32_to_cpu(sb->raid_disks)) {
10772 		ret = update_raid_disks(mddev, le32_to_cpu(sb->raid_disks));
10773 		if (ret)
10774 			pr_warn("md: updating array disks failed. %d\n", ret);
10775 	}
10776 
10777 	/*
10778 	 * Since mddev->delta_disks has already updated in update_raid_disks,
10779 	 * so it is time to check reshape.
10780 	 */
10781 	if (test_bit(MD_RESYNCING_REMOTE, &mddev->recovery) &&
10782 	    (le32_to_cpu(sb->feature_map) & MD_FEATURE_RESHAPE_ACTIVE)) {
10783 		/*
10784 		 * reshape is happening in the remote node, we need to
10785 		 * update reshape_position and call start_reshape.
10786 		 */
10787 		mddev->reshape_position = le64_to_cpu(sb->reshape_position);
10788 		if (mddev->pers->update_reshape_pos)
10789 			mddev->pers->update_reshape_pos(mddev);
10790 		if (mddev->pers->start_reshape)
10791 			mddev->pers->start_reshape(mddev);
10792 	} else if (test_bit(MD_RESYNCING_REMOTE, &mddev->recovery) &&
10793 		   mddev->reshape_position != MaxSector &&
10794 		   !(le32_to_cpu(sb->feature_map) & MD_FEATURE_RESHAPE_ACTIVE)) {
10795 		/* reshape is just done in another node. */
10796 		mddev->reshape_position = MaxSector;
10797 		if (mddev->pers->update_reshape_pos)
10798 			mddev->pers->update_reshape_pos(mddev);
10799 	}
10800 
10801 	/* Finally set the event to be up to date */
10802 	mddev->events = le64_to_cpu(sb->events);
10803 }
10804 
10805 static int read_rdev(struct mddev *mddev, struct md_rdev *rdev)
10806 {
10807 	int err;
10808 	struct page *swapout = rdev->sb_page;
10809 	struct mdp_superblock_1 *sb;
10810 
10811 	/* Store the sb page of the rdev in the swapout temporary
10812 	 * variable in case we err in the future
10813 	 */
10814 	rdev->sb_page = NULL;
10815 	err = alloc_disk_sb(rdev);
10816 	if (err == 0) {
10817 		ClearPageUptodate(rdev->sb_page);
10818 		rdev->sb_loaded = 0;
10819 		err = super_types[mddev->major_version].
10820 			load_super(rdev, NULL, mddev->minor_version);
10821 	}
10822 	if (err < 0) {
10823 		pr_warn("%s: %d Could not reload rdev(%d) err: %d. Restoring old values\n",
10824 				__func__, __LINE__, rdev->desc_nr, err);
10825 		if (rdev->sb_page)
10826 			put_page(rdev->sb_page);
10827 		rdev->sb_page = swapout;
10828 		rdev->sb_loaded = 1;
10829 		return err;
10830 	}
10831 
10832 	sb = page_address(rdev->sb_page);
10833 	/* Read the offset unconditionally, even if MD_FEATURE_RECOVERY_OFFSET
10834 	 * is not set
10835 	 */
10836 
10837 	if ((le32_to_cpu(sb->feature_map) & MD_FEATURE_RECOVERY_OFFSET))
10838 		rdev->recovery_offset = le64_to_cpu(sb->recovery_offset);
10839 
10840 	/* The other node finished recovery, call spare_active to set
10841 	 * device In_sync and mddev->degraded
10842 	 */
10843 	if (rdev->recovery_offset == MaxSector &&
10844 	    !test_bit(In_sync, &rdev->flags) &&
10845 	    mddev->pers->spare_active(mddev))
10846 		sysfs_notify_dirent_safe(mddev->sysfs_degraded);
10847 
10848 	put_page(swapout);
10849 	return 0;
10850 }
10851 
10852 void md_reload_sb(struct mddev *mddev, int nr)
10853 {
10854 	struct md_rdev *rdev = NULL, *iter;
10855 	int err;
10856 
10857 	/* Find the rdev */
10858 	rdev_for_each_rcu(iter, mddev) {
10859 		if (iter->desc_nr == nr) {
10860 			rdev = iter;
10861 			break;
10862 		}
10863 	}
10864 
10865 	if (!rdev) {
10866 		pr_warn("%s: %d Could not find rdev with nr %d\n", __func__, __LINE__, nr);
10867 		return;
10868 	}
10869 
10870 	err = read_rdev(mddev, rdev);
10871 	if (err < 0)
10872 		return;
10873 
10874 	check_sb_changes(mddev, rdev);
10875 
10876 	/* Read all rdev's to update recovery_offset */
10877 	rdev_for_each_rcu(rdev, mddev) {
10878 		if (!test_bit(Faulty, &rdev->flags))
10879 			read_rdev(mddev, rdev);
10880 	}
10881 }
10882 EXPORT_SYMBOL(md_reload_sb);
10883 
10884 #ifndef MODULE
10885 
10886 /*
10887  * Searches all registered partitions for autorun RAID arrays
10888  * at boot time.
10889  */
10890 
10891 static DEFINE_MUTEX(detected_devices_mutex);
10892 static LIST_HEAD(all_detected_devices);
10893 struct detected_devices_node {
10894 	struct list_head list;
10895 	dev_t dev;
10896 };
10897 
10898 void md_autodetect_dev(dev_t dev)
10899 {
10900 	struct detected_devices_node *node_detected_dev;
10901 
10902 	node_detected_dev = kzalloc_obj(*node_detected_dev);
10903 	if (node_detected_dev) {
10904 		node_detected_dev->dev = dev;
10905 		mutex_lock(&detected_devices_mutex);
10906 		list_add_tail(&node_detected_dev->list, &all_detected_devices);
10907 		mutex_unlock(&detected_devices_mutex);
10908 	}
10909 }
10910 
10911 void md_autostart_arrays(int part)
10912 {
10913 	struct md_rdev *rdev;
10914 	struct detected_devices_node *node_detected_dev;
10915 	dev_t dev;
10916 	int i_scanned, i_passed;
10917 
10918 	i_scanned = 0;
10919 	i_passed = 0;
10920 
10921 	pr_info("md: Autodetecting RAID arrays.\n");
10922 
10923 	mutex_lock(&detected_devices_mutex);
10924 	while (!list_empty(&all_detected_devices) && i_scanned < INT_MAX) {
10925 		i_scanned++;
10926 		node_detected_dev = list_entry(all_detected_devices.next,
10927 					struct detected_devices_node, list);
10928 		list_del(&node_detected_dev->list);
10929 		dev = node_detected_dev->dev;
10930 		kfree(node_detected_dev);
10931 		mutex_unlock(&detected_devices_mutex);
10932 		rdev = md_import_device(dev,0, 90);
10933 		mutex_lock(&detected_devices_mutex);
10934 		if (IS_ERR(rdev))
10935 			continue;
10936 
10937 		if (test_bit(Faulty, &rdev->flags))
10938 			continue;
10939 
10940 		set_bit(AutoDetected, &rdev->flags);
10941 		list_add(&rdev->same_set, &pending_raid_disks);
10942 		i_passed++;
10943 	}
10944 	mutex_unlock(&detected_devices_mutex);
10945 
10946 	pr_debug("md: Scanned %d and added %d devices.\n", i_scanned, i_passed);
10947 
10948 	autorun_devices(part);
10949 }
10950 
10951 #endif /* !MODULE */
10952 
10953 static __exit void md_exit(void)
10954 {
10955 	struct mddev *mddev;
10956 	int delay = 1;
10957 
10958 	unregister_blkdev(MD_MAJOR,"md");
10959 	unregister_blkdev(mdp_major, "mdp");
10960 	unregister_reboot_notifier(&md_notifier);
10961 	unregister_sysctl_table(raid_table_header);
10962 
10963 	/* We cannot unload the modules while some process is
10964 	 * waiting for us in select() or poll() - wake them up
10965 	 */
10966 	md_unloading = 1;
10967 	while (waitqueue_active(&md_event_waiters)) {
10968 		/* not safe to leave yet */
10969 		wake_up(&md_event_waiters);
10970 		msleep(delay);
10971 		delay += delay;
10972 	}
10973 	remove_proc_entry("mdstat", NULL);
10974 
10975 	spin_lock(&all_mddevs_lock);
10976 	list_for_each_entry(mddev, &all_mddevs, all_mddevs) {
10977 		if (!mddev_get(mddev))
10978 			continue;
10979 		spin_unlock(&all_mddevs_lock);
10980 		export_array(mddev);
10981 		mddev->ctime = 0;
10982 		mddev->hold_active = 0;
10983 		/*
10984 		 * As the mddev is now fully clear, mddev_put will schedule
10985 		 * the mddev for destruction by a workqueue, and the
10986 		 * destroy_workqueue() below will wait for that to complete.
10987 		 */
10988 		spin_lock(&all_mddevs_lock);
10989 		mddev_put_locked(mddev);
10990 	}
10991 	spin_unlock(&all_mddevs_lock);
10992 
10993 	destroy_workqueue(md_misc_wq);
10994 	md_bitmap_exit();
10995 }
10996 
10997 subsys_initcall(md_init);
10998 module_exit(md_exit)
10999 
11000 static int get_ro(char *buffer, const struct kernel_param *kp)
11001 {
11002 	return sprintf(buffer, "%d\n", start_readonly);
11003 }
11004 static int set_ro(const char *val, const struct kernel_param *kp)
11005 {
11006 	return kstrtouint(val, 10, (unsigned int *)&start_readonly);
11007 }
11008 
11009 module_param_call(start_ro, set_ro, get_ro, NULL, S_IRUSR|S_IWUSR);
11010 module_param(start_dirty_degraded, int, S_IRUGO|S_IWUSR);
11011 module_param_call(new_array, add_named_array, NULL, NULL, S_IWUSR);
11012 module_param(create_on_open, bool, S_IRUSR|S_IWUSR);
11013 module_param(legacy_async_del_gendisk, bool, 0600);
11014 module_param(check_new_feature, bool, 0600);
11015 
11016 MODULE_LICENSE("GPL");
11017 MODULE_DESCRIPTION("MD RAID framework");
11018 MODULE_ALIAS("md");
11019 MODULE_ALIAS_BLOCKDEV_MAJOR(MD_MAJOR);
11020