xref: /linux/fs/fs-writeback.c (revision 9368f0f9419cde028a6e58331065900ff089bc36)
1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  * fs/fs-writeback.c
4  *
5  * Copyright (C) 2002, Linus Torvalds.
6  *
7  * Contains all the functions related to writing back and waiting
8  * upon dirty inodes against superblocks, and writing back dirty
9  * pages against inodes.  ie: data writeback.  Writeout of the
10  * inode itself is not handled here.
11  *
12  * 10Apr2002	Andrew Morton
13  *		Split out of fs/inode.c
14  *		Additions for address_space-based writeback
15  */
16 
17 #include <linux/kernel.h>
18 #include <linux/export.h>
19 #include <linux/spinlock.h>
20 #include <linux/slab.h>
21 #include <linux/sched.h>
22 #include <linux/fs.h>
23 #include <linux/mm.h>
24 #include <linux/pagemap.h>
25 #include <linux/kthread.h>
26 #include <linux/writeback.h>
27 #include <linux/blkdev.h>
28 #include <linux/backing-dev.h>
29 #include <linux/tracepoint.h>
30 #include <linux/device.h>
31 #include <linux/memcontrol.h>
32 #include "internal.h"
33 
34 /*
35  * 4MB minimal write chunk size
36  */
37 #define MIN_WRITEBACK_PAGES	(4096UL >> (PAGE_SHIFT - 10))
38 
39 /*
40  * Passed into wb_writeback(), essentially a subset of writeback_control
41  */
42 struct wb_writeback_work {
43 	long nr_pages;
44 	struct super_block *sb;
45 	enum writeback_sync_modes sync_mode;
46 	unsigned int tagged_writepages:1;
47 	unsigned int for_kupdate:1;
48 	unsigned int range_cyclic:1;
49 	unsigned int for_background:1;
50 	unsigned int for_sync:1;	/* sync(2) WB_SYNC_ALL writeback */
51 	unsigned int auto_free:1;	/* free on completion */
52 	enum wb_reason reason;		/* why was writeback initiated? */
53 
54 	struct list_head list;		/* pending work list */
55 	struct wb_completion *done;	/* set if the caller waits */
56 };
57 
58 /*
59  * If an inode is constantly having its pages dirtied, but then the
60  * updates stop dirtytime_expire_interval seconds in the past, it's
61  * possible for the worst case time between when an inode has its
62  * timestamps updated and when they finally get written out to be two
63  * dirtytime_expire_intervals.  We set the default to 12 hours (in
64  * seconds), which means most of the time inodes will have their
65  * timestamps written to disk after 12 hours, but in the worst case a
66  * few inodes might not their timestamps updated for 24 hours.
67  */
68 static unsigned int dirtytime_expire_interval = 12 * 60 * 60;
69 
70 static inline struct inode *wb_inode(struct list_head *head)
71 {
72 	return list_entry(head, struct inode, i_io_list);
73 }
74 
75 /*
76  * Include the creation of the trace points after defining the
77  * wb_writeback_work structure and inline functions so that the definition
78  * remains local to this file.
79  */
80 #define CREATE_TRACE_POINTS
81 #include <trace/events/writeback.h>
82 
83 EXPORT_TRACEPOINT_SYMBOL_GPL(wbc_writepage);
84 
85 static bool wb_io_lists_populated(struct bdi_writeback *wb)
86 {
87 	if (wb_has_dirty_io(wb)) {
88 		return false;
89 	} else {
90 		set_bit(WB_has_dirty_io, &wb->state);
91 		WARN_ON_ONCE(!wb->avg_write_bandwidth);
92 		atomic_long_add(wb->avg_write_bandwidth,
93 				&wb->bdi->tot_write_bandwidth);
94 		return true;
95 	}
96 }
97 
98 static void wb_io_lists_depopulated(struct bdi_writeback *wb)
99 {
100 	if (wb_has_dirty_io(wb) && list_empty(&wb->b_dirty) &&
101 	    list_empty(&wb->b_io) && list_empty(&wb->b_more_io)) {
102 		clear_bit(WB_has_dirty_io, &wb->state);
103 		WARN_ON_ONCE(atomic_long_sub_return(wb->avg_write_bandwidth,
104 					&wb->bdi->tot_write_bandwidth) < 0);
105 	}
106 }
107 
108 /**
109  * inode_io_list_move_locked - move an inode onto a bdi_writeback IO list
110  * @inode: inode to be moved
111  * @wb: target bdi_writeback
112  * @head: one of @wb->b_{dirty|io|more_io|dirty_time}
113  *
114  * Move @inode->i_io_list to @list of @wb and set %WB_has_dirty_io.
115  * Returns %true if @inode is the first occupant of the !dirty_time IO
116  * lists; otherwise, %false.
117  */
118 static bool inode_io_list_move_locked(struct inode *inode,
119 				      struct bdi_writeback *wb,
120 				      struct list_head *head)
121 {
122 	assert_spin_locked(&wb->list_lock);
123 	assert_spin_locked(&inode->i_lock);
124 	WARN_ON_ONCE(inode_state_read(inode) & I_FREEING);
125 
126 	list_move(&inode->i_io_list, head);
127 
128 	/* dirty_time doesn't count as dirty_io until expiration */
129 	if (head != &wb->b_dirty_time)
130 		return wb_io_lists_populated(wb);
131 
132 	wb_io_lists_depopulated(wb);
133 	return false;
134 }
135 
136 static void wb_wakeup(struct bdi_writeback *wb)
137 {
138 	spin_lock_irq(&wb->work_lock);
139 	if (test_bit(WB_registered, &wb->state))
140 		mod_delayed_work(bdi_wq, &wb->dwork, 0);
141 	spin_unlock_irq(&wb->work_lock);
142 }
143 
144 /*
145  * This function is used when the first inode for this wb is marked dirty. It
146  * wakes-up the corresponding bdi thread which should then take care of the
147  * periodic background write-out of dirty inodes. Since the write-out would
148  * starts only 'dirty_writeback_interval' centisecs from now anyway, we just
149  * set up a timer which wakes the bdi thread up later.
150  *
151  * Note, we wouldn't bother setting up the timer, but this function is on the
152  * fast-path (used by '__mark_inode_dirty()'), so we save few context switches
153  * by delaying the wake-up.
154  *
155  * We have to be careful not to postpone flush work if it is scheduled for
156  * earlier. Thus we use queue_delayed_work().
157  */
158 static void wb_wakeup_delayed(struct bdi_writeback *wb)
159 {
160 	unsigned long timeout;
161 
162 	timeout = msecs_to_jiffies(dirty_writeback_interval * 10);
163 	spin_lock_irq(&wb->work_lock);
164 	if (test_bit(WB_registered, &wb->state))
165 		queue_delayed_work(bdi_wq, &wb->dwork, timeout);
166 	spin_unlock_irq(&wb->work_lock);
167 }
168 
169 static void finish_writeback_work(struct wb_writeback_work *work)
170 {
171 	struct wb_completion *done = work->done;
172 
173 	if (work->auto_free)
174 		kfree(work);
175 	if (done) {
176 		wait_queue_head_t *waitq = done->waitq;
177 
178 		/* @done can't be accessed after the following dec */
179 		if (atomic_dec_and_test(&done->cnt))
180 			wake_up_all(waitq);
181 	}
182 }
183 
184 static void wb_queue_work(struct bdi_writeback *wb,
185 			  struct wb_writeback_work *work)
186 {
187 	trace_writeback_queue(wb, work);
188 
189 	if (work->done)
190 		atomic_inc(&work->done->cnt);
191 
192 	spin_lock_irq(&wb->work_lock);
193 
194 	if (test_bit(WB_registered, &wb->state)) {
195 		list_add_tail(&work->list, &wb->work_list);
196 		mod_delayed_work(bdi_wq, &wb->dwork, 0);
197 	} else
198 		finish_writeback_work(work);
199 
200 	spin_unlock_irq(&wb->work_lock);
201 }
202 
203 /**
204  * wb_wait_for_completion - wait for completion of bdi_writeback_works
205  * @done: target wb_completion
206  *
207  * Wait for one or more work items issued to @bdi with their ->done field
208  * set to @done, which should have been initialized with
209  * DEFINE_WB_COMPLETION().  This function returns after all such work items
210  * are completed.  Work items which are waited upon aren't freed
211  * automatically on completion.
212  */
213 void wb_wait_for_completion(struct wb_completion *done)
214 {
215 	atomic_dec(&done->cnt);		/* put down the initial count */
216 	wait_event(*done->waitq, !atomic_read(&done->cnt));
217 }
218 
219 #ifdef CONFIG_CGROUP_WRITEBACK
220 
221 /*
222  * Parameters for foreign inode detection, see wbc_detach_inode() to see
223  * how they're used.
224  *
225  * These paramters are inherently heuristical as the detection target
226  * itself is fuzzy.  All we want to do is detaching an inode from the
227  * current owner if it's being written to by some other cgroups too much.
228  *
229  * The current cgroup writeback is built on the assumption that multiple
230  * cgroups writing to the same inode concurrently is very rare and a mode
231  * of operation which isn't well supported.  As such, the goal is not
232  * taking too long when a different cgroup takes over an inode while
233  * avoiding too aggressive flip-flops from occasional foreign writes.
234  *
235  * We record, very roughly, 2s worth of IO time history and if more than
236  * half of that is foreign, trigger the switch.  The recording is quantized
237  * to 16 slots.  To avoid tiny writes from swinging the decision too much,
238  * writes smaller than 1/8 of avg size are ignored.
239  */
240 #define WB_FRN_TIME_SHIFT	13	/* 1s = 2^13, upto 8 secs w/ 16bit */
241 #define WB_FRN_TIME_AVG_SHIFT	3	/* avg = avg * 7/8 + new * 1/8 */
242 #define WB_FRN_TIME_CUT_DIV	8	/* ignore rounds < avg / 8 */
243 #define WB_FRN_TIME_PERIOD	(2 * (1 << WB_FRN_TIME_SHIFT))	/* 2s */
244 
245 #define WB_FRN_HIST_SLOTS	16	/* inode->i_wb_frn_history is 16bit */
246 #define WB_FRN_HIST_UNIT	(WB_FRN_TIME_PERIOD / WB_FRN_HIST_SLOTS)
247 					/* each slot's duration is 2s / 16 */
248 #define WB_FRN_HIST_THR_SLOTS	(WB_FRN_HIST_SLOTS / 2)
249 					/* if foreign slots >= 8, switch */
250 #define WB_FRN_HIST_MAX_SLOTS	(WB_FRN_HIST_THR_SLOTS / 2 + 1)
251 					/* one round can affect upto 5 slots */
252 #define WB_FRN_MAX_IN_FLIGHT	1024	/* don't queue too many concurrently */
253 
254 /*
255  * Maximum inodes per isw.  A specific value has been chosen to make
256  * struct inode_switch_wbs_context fit into 1024 bytes kmalloc.
257  */
258 #define WB_MAX_INODES_PER_ISW  ((1024UL - sizeof(struct inode_switch_wbs_context)) \
259                                 / sizeof(struct inode *))
260 
261 static atomic_t isw_nr_in_flight = ATOMIC_INIT(0);
262 static struct workqueue_struct *isw_wq;
263 
264 void __inode_attach_wb(struct inode *inode, struct folio *folio)
265 {
266 	struct backing_dev_info *bdi = inode_to_bdi(inode);
267 	struct bdi_writeback *wb = NULL;
268 
269 	if (inode_cgwb_enabled(inode)) {
270 		struct cgroup_subsys_state *memcg_css;
271 
272 		if (folio) {
273 			memcg_css = mem_cgroup_css_from_folio(folio);
274 			wb = wb_get_create(bdi, memcg_css, GFP_ATOMIC);
275 		} else {
276 			/* must pin memcg_css, see wb_get_create() */
277 			memcg_css = task_get_css(current, memory_cgrp_id);
278 			wb = wb_get_create(bdi, memcg_css, GFP_ATOMIC);
279 			css_put(memcg_css);
280 		}
281 	}
282 
283 	if (!wb)
284 		wb = &bdi->wb;
285 
286 	/*
287 	 * There may be multiple instances of this function racing to
288 	 * update the same inode.  Use cmpxchg() to tell the winner.
289 	 */
290 	if (unlikely(cmpxchg(&inode->i_wb, NULL, wb)))
291 		wb_put(wb);
292 }
293 
294 /**
295  * inode_cgwb_move_to_attached - put the inode onto wb->b_attached list
296  * @inode: inode of interest with i_lock held
297  * @wb: target bdi_writeback
298  *
299  * Remove the inode from wb's io lists and if necessarily put onto b_attached
300  * list.  Only inodes attached to cgwb's are kept on this list.
301  */
302 static void inode_cgwb_move_to_attached(struct inode *inode,
303 					struct bdi_writeback *wb)
304 {
305 	assert_spin_locked(&wb->list_lock);
306 	assert_spin_locked(&inode->i_lock);
307 	WARN_ON_ONCE(inode_state_read(inode) & I_FREEING);
308 
309 	inode_state_clear(inode, I_SYNC_QUEUED);
310 	if (wb != &wb->bdi->wb)
311 		list_move(&inode->i_io_list, &wb->b_attached);
312 	else
313 		list_del_init(&inode->i_io_list);
314 	wb_io_lists_depopulated(wb);
315 }
316 
317 /**
318  * locked_inode_to_wb_and_lock_list - determine a locked inode's wb and lock it
319  * @inode: inode of interest with i_lock held
320  *
321  * Returns @inode's wb with its list_lock held.  @inode->i_lock must be
322  * held on entry and is released on return.  The returned wb is guaranteed
323  * to stay @inode's associated wb until its list_lock is released.
324  */
325 static struct bdi_writeback *
326 locked_inode_to_wb_and_lock_list(struct inode *inode)
327 	__releases(&inode->i_lock)
328 	__acquires(&wb->list_lock)
329 {
330 	while (true) {
331 		struct bdi_writeback *wb = inode_to_wb(inode);
332 
333 		/*
334 		 * inode_to_wb() association is protected by both
335 		 * @inode->i_lock and @wb->list_lock but list_lock nests
336 		 * outside i_lock.  Drop i_lock and verify that the
337 		 * association hasn't changed after acquiring list_lock.
338 		 */
339 		wb_get(wb);
340 		spin_unlock(&inode->i_lock);
341 		spin_lock(&wb->list_lock);
342 
343 		/* i_wb may have changed inbetween, can't use inode_to_wb() */
344 		if (likely(wb == inode->i_wb)) {
345 			wb_put(wb);	/* @inode already has ref */
346 			return wb;
347 		}
348 
349 		spin_unlock(&wb->list_lock);
350 		wb_put(wb);
351 		cpu_relax();
352 		spin_lock(&inode->i_lock);
353 	}
354 }
355 
356 /**
357  * inode_to_wb_and_lock_list - determine an inode's wb and lock it
358  * @inode: inode of interest
359  *
360  * Same as locked_inode_to_wb_and_lock_list() but @inode->i_lock isn't held
361  * on entry.
362  */
363 static struct bdi_writeback *inode_to_wb_and_lock_list(struct inode *inode)
364 	__acquires(&wb->list_lock)
365 {
366 	spin_lock(&inode->i_lock);
367 	return locked_inode_to_wb_and_lock_list(inode);
368 }
369 
370 struct inode_switch_wbs_context {
371 	/* List of queued switching contexts for the wb */
372 	struct llist_node	list;
373 
374 	/*
375 	 * Multiple inodes can be switched at once.  The switching procedure
376 	 * consists of two parts, separated by a RCU grace period.  To make
377 	 * sure that the second part is executed for each inode gone through
378 	 * the first part, all inode pointers are placed into a NULL-terminated
379 	 * array embedded into struct inode_switch_wbs_context.  Otherwise
380 	 * an inode could be left in a non-consistent state.
381 	 */
382 	struct inode		*inodes[];
383 };
384 
385 static void bdi_down_write_wb_switch_rwsem(struct backing_dev_info *bdi)
386 {
387 	down_write(&bdi->wb_switch_rwsem);
388 }
389 
390 static void bdi_up_write_wb_switch_rwsem(struct backing_dev_info *bdi)
391 {
392 	up_write(&bdi->wb_switch_rwsem);
393 }
394 
395 static bool inode_do_switch_wbs(struct inode *inode,
396 				struct bdi_writeback *old_wb,
397 				struct bdi_writeback *new_wb)
398 {
399 	struct address_space *mapping = inode->i_mapping;
400 	XA_STATE(xas, &mapping->i_pages, 0);
401 	struct folio *folio;
402 	bool switched = false;
403 
404 	spin_lock(&inode->i_lock);
405 	xa_lock_irq(&mapping->i_pages);
406 
407 	/*
408 	 * Once I_FREEING or I_WILL_FREE are visible under i_lock, the eviction
409 	 * path owns the inode and we shouldn't modify ->i_io_list.
410 	 */
411 	if (unlikely(inode_state_read(inode) & (I_FREEING | I_WILL_FREE)))
412 		goto skip_switch;
413 
414 	trace_inode_switch_wbs(inode, old_wb, new_wb);
415 
416 	/*
417 	 * Count and transfer stats.  Note that PAGECACHE_TAG_DIRTY points
418 	 * to possibly dirty folios while PAGECACHE_TAG_WRITEBACK points to
419 	 * folios actually under writeback.
420 	 */
421 	xas_for_each_marked(&xas, folio, ULONG_MAX, PAGECACHE_TAG_DIRTY) {
422 		if (folio_test_dirty(folio)) {
423 			long nr = folio_nr_pages(folio);
424 			wb_stat_mod(old_wb, WB_RECLAIMABLE, -nr);
425 			wb_stat_mod(new_wb, WB_RECLAIMABLE, nr);
426 		}
427 	}
428 
429 	xas_set(&xas, 0);
430 	xas_for_each_marked(&xas, folio, ULONG_MAX, PAGECACHE_TAG_WRITEBACK) {
431 		long nr = folio_nr_pages(folio);
432 		WARN_ON_ONCE(!folio_test_writeback(folio));
433 		wb_stat_mod(old_wb, WB_WRITEBACK, -nr);
434 		wb_stat_mod(new_wb, WB_WRITEBACK, nr);
435 	}
436 
437 	if (mapping_tagged(mapping, PAGECACHE_TAG_WRITEBACK)) {
438 		atomic_dec(&old_wb->writeback_inodes);
439 		atomic_inc(&new_wb->writeback_inodes);
440 	}
441 
442 	wb_get(new_wb);
443 
444 	/*
445 	 * Transfer to @new_wb's IO list if necessary.  If the @inode is dirty,
446 	 * the specific list @inode was on is ignored and the @inode is put on
447 	 * ->b_dirty which is always correct including from ->b_dirty_time.
448 	 * If the @inode was clean, it means it was on the b_attached list, so
449 	 * move it onto the b_attached list of @new_wb.
450 	 */
451 	if (!list_empty(&inode->i_io_list)) {
452 		inode->i_wb = new_wb;
453 
454 		if (inode_state_read(inode) & I_DIRTY_ALL) {
455 			/*
456 			 * We need to keep b_dirty list sorted by
457 			 * dirtied_time_when. However properly sorting the
458 			 * inode in the list gets too expensive when switching
459 			 * many inodes. So just attach inode at the end of the
460 			 * dirty list and clobber the dirtied_time_when.
461 			 */
462 			inode->dirtied_time_when = jiffies;
463 			inode_io_list_move_locked(inode, new_wb,
464 						  &new_wb->b_dirty);
465 		} else {
466 			inode_cgwb_move_to_attached(inode, new_wb);
467 		}
468 	} else {
469 		inode->i_wb = new_wb;
470 	}
471 
472 	/* ->i_wb_frn updates may race wbc_detach_inode() but doesn't matter */
473 	inode->i_wb_frn_winner = 0;
474 	inode->i_wb_frn_avg_time = 0;
475 	inode->i_wb_frn_history = 0;
476 	switched = true;
477 skip_switch:
478 	/*
479 	 * Paired with an acquire fence in unlocked_inode_to_wb_begin() and
480 	 * ensures that the new wb is visible if they see !I_WB_SWITCH.
481 	 */
482 	smp_wmb();
483 	inode_state_clear(inode, I_WB_SWITCH);
484 
485 	xa_unlock_irq(&mapping->i_pages);
486 	spin_unlock(&inode->i_lock);
487 
488 	return switched;
489 }
490 
491 static void process_inode_switch_wbs(struct bdi_writeback *new_wb,
492 				     struct inode_switch_wbs_context *isw)
493 {
494 	struct backing_dev_info *bdi = inode_to_bdi(isw->inodes[0]);
495 	struct bdi_writeback *old_wb = isw->inodes[0]->i_wb;
496 	unsigned long nr_switched = 0;
497 	struct inode **inodep;
498 
499 	/*
500 	 * If @inode switches cgwb membership while sync_inodes_sb() is
501 	 * being issued, sync_inodes_sb() might miss it.  Synchronize.
502 	 */
503 	down_read(&bdi->wb_switch_rwsem);
504 
505 	inodep = isw->inodes;
506 	/*
507 	 * By the time control reaches here, RCU grace period has passed
508 	 * since I_WB_SWITCH assertion and all wb stat update transactions
509 	 * between unlocked_inode_to_wb_begin/end() are guaranteed to be
510 	 * synchronizing against the i_pages lock.
511 	 *
512 	 * Grabbing old_wb->list_lock, inode->i_lock and the i_pages lock
513 	 * gives us exclusion against all wb related operations on @inode
514 	 * including IO list manipulations and stat updates.
515 	 */
516 relock:
517 	if (old_wb < new_wb) {
518 		spin_lock(&old_wb->list_lock);
519 		spin_lock_nested(&new_wb->list_lock, SINGLE_DEPTH_NESTING);
520 	} else {
521 		spin_lock(&new_wb->list_lock);
522 		spin_lock_nested(&old_wb->list_lock, SINGLE_DEPTH_NESTING);
523 	}
524 
525 	while (*inodep) {
526 		WARN_ON_ONCE((*inodep)->i_wb != old_wb);
527 		if (inode_do_switch_wbs(*inodep, old_wb, new_wb))
528 			nr_switched++;
529 		inodep++;
530 		if (*inodep && need_resched()) {
531 			spin_unlock(&new_wb->list_lock);
532 			spin_unlock(&old_wb->list_lock);
533 			cond_resched();
534 			goto relock;
535 		}
536 	}
537 
538 	spin_unlock(&new_wb->list_lock);
539 	spin_unlock(&old_wb->list_lock);
540 
541 	up_read(&bdi->wb_switch_rwsem);
542 
543 	if (nr_switched) {
544 		wb_wakeup(new_wb);
545 		wb_put_many(old_wb, nr_switched);
546 	}
547 
548 	for (inodep = isw->inodes; *inodep; inodep++)
549 		iput(*inodep);
550 	wb_put(new_wb);
551 	kfree(isw);
552 	atomic_dec(&isw_nr_in_flight);
553 }
554 
555 void inode_switch_wbs_work_fn(struct work_struct *work)
556 {
557 	struct bdi_writeback *new_wb = container_of(work, struct bdi_writeback,
558 						    switch_work);
559 	struct inode_switch_wbs_context *isw, *next_isw;
560 	struct llist_node *list;
561 
562 	/*
563 	 * Grab out reference to wb so that it cannot get freed under us
564 	 * after we process all the isw items.
565 	 */
566 	wb_get(new_wb);
567 	while (1) {
568 		list = llist_del_all(&new_wb->switch_wbs_ctxs);
569 		/* Nothing to do? */
570 		if (!list)
571 			break;
572 		/*
573 		 * In addition to synchronizing among switchers, I_WB_SWITCH
574 		 * tells the RCU protected stat update paths to grab the i_page
575 		 * lock so that stat transfer can synchronize against them.
576 		 * Let's continue after I_WB_SWITCH is guaranteed to be
577 		 * visible.
578 		 */
579 		synchronize_rcu();
580 
581 		llist_for_each_entry_safe(isw, next_isw, list, list)
582 			process_inode_switch_wbs(new_wb, isw);
583 	}
584 	wb_put(new_wb);
585 }
586 
587 static bool inode_prepare_wbs_switch(struct inode *inode,
588 				     struct bdi_writeback *new_wb)
589 {
590 	/*
591 	 * Paired with smp_mb() in cgroup_writeback_umount().
592 	 * isw_nr_in_flight must be increased before checking SB_ACTIVE and
593 	 * grabbing an inode, otherwise isw_nr_in_flight can be observed as 0
594 	 * in cgroup_writeback_umount() and the isw_wq will be not flushed.
595 	 */
596 	smp_mb();
597 
598 	if (IS_DAX(inode))
599 		return false;
600 
601 	/* while holding I_WB_SWITCH, no one else can update the association */
602 	spin_lock(&inode->i_lock);
603 	if (!(inode->i_sb->s_flags & SB_ACTIVE) ||
604 	    inode_state_read(inode) & (I_WB_SWITCH | I_FREEING | I_WILL_FREE) ||
605 	    inode_to_wb(inode) == new_wb) {
606 		spin_unlock(&inode->i_lock);
607 		return false;
608 	}
609 	inode_state_set(inode, I_WB_SWITCH);
610 	__iget(inode);
611 	spin_unlock(&inode->i_lock);
612 
613 	return true;
614 }
615 
616 static void wb_queue_isw(struct bdi_writeback *wb,
617 			 struct inode_switch_wbs_context *isw)
618 {
619 	if (llist_add(&isw->list, &wb->switch_wbs_ctxs))
620 		queue_work(isw_wq, &wb->switch_work);
621 }
622 
623 /**
624  * inode_switch_wbs - change the wb association of an inode
625  * @inode: target inode
626  * @new_wb_id: ID of the new wb
627  *
628  * Switch @inode's wb association to the wb identified by @new_wb_id.  The
629  * switching is performed asynchronously and may fail silently.
630  */
631 static void inode_switch_wbs(struct inode *inode, int new_wb_id)
632 {
633 	struct backing_dev_info *bdi = inode_to_bdi(inode);
634 	struct cgroup_subsys_state *memcg_css;
635 	struct inode_switch_wbs_context *isw;
636 	struct bdi_writeback *new_wb = NULL;
637 
638 	/* noop if seems to be already in progress */
639 	if (inode_state_read_once(inode) & I_WB_SWITCH)
640 		return;
641 
642 	/* avoid queueing a new switch if too many are already in flight */
643 	if (atomic_read(&isw_nr_in_flight) > WB_FRN_MAX_IN_FLIGHT)
644 		return;
645 
646 	isw = kzalloc(struct_size(isw, inodes, 2), GFP_ATOMIC);
647 	if (!isw)
648 		return;
649 
650 	atomic_inc(&isw_nr_in_flight);
651 
652 	/* find and pin the new wb */
653 	rcu_read_lock();
654 	memcg_css = css_from_id(new_wb_id, &memory_cgrp_subsys);
655 	if (memcg_css && !css_tryget(memcg_css))
656 		memcg_css = NULL;
657 	rcu_read_unlock();
658 	if (!memcg_css)
659 		goto out_free;
660 
661 	new_wb = wb_get_create(bdi, memcg_css, GFP_ATOMIC);
662 	css_put(memcg_css);
663 	if (!new_wb)
664 		goto out_free;
665 
666 	if (!inode_prepare_wbs_switch(inode, new_wb))
667 		goto out_free;
668 
669 	isw->inodes[0] = inode;
670 
671 	trace_inode_switch_wbs_queue(inode->i_wb, new_wb, 1);
672 	wb_queue_isw(new_wb, isw);
673 	return;
674 
675 out_free:
676 	atomic_dec(&isw_nr_in_flight);
677 	if (new_wb)
678 		wb_put(new_wb);
679 	kfree(isw);
680 }
681 
682 static bool isw_prepare_wbs_switch(struct bdi_writeback *new_wb,
683 				   struct inode_switch_wbs_context *isw,
684 				   struct list_head *list, int *nr)
685 {
686 	struct inode *inode;
687 
688 	list_for_each_entry(inode, list, i_io_list) {
689 		if (!inode_prepare_wbs_switch(inode, new_wb))
690 			continue;
691 
692 		isw->inodes[*nr] = inode;
693 		(*nr)++;
694 
695 		if (*nr >= WB_MAX_INODES_PER_ISW - 1)
696 			return true;
697 	}
698 	return false;
699 }
700 
701 /**
702  * cleanup_offline_cgwb - detach associated inodes
703  * @wb: target wb
704  *
705  * Switch all inodes attached to @wb to a nearest living ancestor's wb in order
706  * to eventually release the dying @wb.  Returns %true if not all inodes were
707  * switched and the function has to be restarted.
708  */
709 bool cleanup_offline_cgwb(struct bdi_writeback *wb)
710 {
711 	struct cgroup_subsys_state *memcg_css;
712 	struct inode_switch_wbs_context *isw;
713 	struct bdi_writeback *new_wb;
714 	int nr;
715 	bool restart = false;
716 
717 	isw = kzalloc(struct_size(isw, inodes, WB_MAX_INODES_PER_ISW),
718 		      GFP_KERNEL);
719 	if (!isw)
720 		return restart;
721 
722 	atomic_inc(&isw_nr_in_flight);
723 
724 	for (memcg_css = wb->memcg_css->parent; memcg_css;
725 	     memcg_css = memcg_css->parent) {
726 		new_wb = wb_get_create(wb->bdi, memcg_css, GFP_KERNEL);
727 		if (new_wb)
728 			break;
729 	}
730 	if (unlikely(!new_wb))
731 		new_wb = &wb->bdi->wb; /* wb_get() is noop for bdi's wb */
732 
733 	nr = 0;
734 	spin_lock(&wb->list_lock);
735 	/*
736 	 * In addition to the inodes that have completed writeback, also switch
737 	 * cgwbs for those inodes only with dirty timestamps. Otherwise, those
738 	 * inodes won't be written back for a long time when lazytime is
739 	 * enabled, and thus pinning the dying cgwbs. It won't break the
740 	 * bandwidth restrictions, as writeback of inode metadata is not
741 	 * accounted for.
742 	 */
743 	restart = isw_prepare_wbs_switch(new_wb, isw, &wb->b_attached, &nr);
744 	if (!restart)
745 		restart = isw_prepare_wbs_switch(new_wb, isw, &wb->b_dirty_time,
746 						 &nr);
747 	spin_unlock(&wb->list_lock);
748 
749 	/* no attached inodes? bail out */
750 	if (nr == 0) {
751 		atomic_dec(&isw_nr_in_flight);
752 		wb_put(new_wb);
753 		kfree(isw);
754 		return restart;
755 	}
756 
757 	trace_inode_switch_wbs_queue(wb, new_wb, nr);
758 	wb_queue_isw(new_wb, isw);
759 
760 	return restart;
761 }
762 
763 /**
764  * wbc_attach_and_unlock_inode - associate wbc with target inode and unlock it
765  * @wbc: writeback_control of interest
766  * @inode: target inode
767  *
768  * @inode is locked and about to be written back under the control of @wbc.
769  * Record @inode's writeback context into @wbc and unlock the i_lock.  On
770  * writeback completion, wbc_detach_inode() should be called.  This is used
771  * to track the cgroup writeback context.
772  */
773 static void wbc_attach_and_unlock_inode(struct writeback_control *wbc,
774 		struct inode *inode)
775 	__releases(&inode->i_lock)
776 {
777 	if (!inode_cgwb_enabled(inode)) {
778 		spin_unlock(&inode->i_lock);
779 		return;
780 	}
781 
782 	wbc->wb = inode_to_wb(inode);
783 	wbc->inode = inode;
784 
785 	wbc->wb_id = wbc->wb->memcg_css->id;
786 	wbc->wb_lcand_id = inode->i_wb_frn_winner;
787 	wbc->wb_tcand_id = 0;
788 	wbc->wb_bytes = 0;
789 	wbc->wb_lcand_bytes = 0;
790 	wbc->wb_tcand_bytes = 0;
791 
792 	wb_get(wbc->wb);
793 	spin_unlock(&inode->i_lock);
794 
795 	/*
796 	 * A dying wb indicates that either the blkcg associated with the
797 	 * memcg changed or the associated memcg is dying.  In the first
798 	 * case, a replacement wb should already be available and we should
799 	 * refresh the wb immediately.  In the second case, trying to
800 	 * refresh will keep failing.
801 	 */
802 	if (unlikely(wb_dying(wbc->wb) && !css_is_dying(wbc->wb->memcg_css)))
803 		inode_switch_wbs(inode, wbc->wb_id);
804 }
805 
806 /**
807  * wbc_attach_fdatawrite_inode - associate wbc and inode for fdatawrite
808  * @wbc: writeback_control of interest
809  * @inode: target inode
810  *
811  * This function is to be used by __filemap_fdatawrite_range(), which is an
812  * alternative entry point into writeback code, and first ensures @inode is
813  * associated with a bdi_writeback and attaches it to @wbc.
814  */
815 void wbc_attach_fdatawrite_inode(struct writeback_control *wbc,
816 		struct inode *inode)
817 {
818 	spin_lock(&inode->i_lock);
819 	inode_attach_wb(inode, NULL);
820 	wbc_attach_and_unlock_inode(wbc, inode);
821 }
822 EXPORT_SYMBOL_GPL(wbc_attach_fdatawrite_inode);
823 
824 /**
825  * wbc_detach_inode - disassociate wbc from inode and perform foreign detection
826  * @wbc: writeback_control of the just finished writeback
827  *
828  * To be called after a writeback attempt of an inode finishes and undoes
829  * wbc_attach_and_unlock_inode().  Can be called under any context.
830  *
831  * As concurrent write sharing of an inode is expected to be very rare and
832  * memcg only tracks page ownership on first-use basis severely confining
833  * the usefulness of such sharing, cgroup writeback tracks ownership
834  * per-inode.  While the support for concurrent write sharing of an inode
835  * is deemed unnecessary, an inode being written to by different cgroups at
836  * different points in time is a lot more common, and, more importantly,
837  * charging only by first-use can too readily lead to grossly incorrect
838  * behaviors (single foreign page can lead to gigabytes of writeback to be
839  * incorrectly attributed).
840  *
841  * To resolve this issue, cgroup writeback detects the majority dirtier of
842  * an inode and transfers the ownership to it.  To avoid unnecessary
843  * oscillation, the detection mechanism keeps track of history and gives
844  * out the switch verdict only if the foreign usage pattern is stable over
845  * a certain amount of time and/or writeback attempts.
846  *
847  * On each writeback attempt, @wbc tries to detect the majority writer
848  * using Boyer-Moore majority vote algorithm.  In addition to the byte
849  * count from the majority voting, it also counts the bytes written for the
850  * current wb and the last round's winner wb (max of last round's current
851  * wb, the winner from two rounds ago, and the last round's majority
852  * candidate).  Keeping track of the historical winner helps the algorithm
853  * to semi-reliably detect the most active writer even when it's not the
854  * absolute majority.
855  *
856  * Once the winner of the round is determined, whether the winner is
857  * foreign or not and how much IO time the round consumed is recorded in
858  * inode->i_wb_frn_history.  If the amount of recorded foreign IO time is
859  * over a certain threshold, the switch verdict is given.
860  */
861 void wbc_detach_inode(struct writeback_control *wbc)
862 {
863 	struct bdi_writeback *wb = wbc->wb;
864 	struct inode *inode = wbc->inode;
865 	unsigned long avg_time, max_bytes, max_time;
866 	u16 history;
867 	int max_id;
868 
869 	if (!wb)
870 		return;
871 
872 	history = inode->i_wb_frn_history;
873 	avg_time = inode->i_wb_frn_avg_time;
874 
875 	/* pick the winner of this round */
876 	if (wbc->wb_bytes >= wbc->wb_lcand_bytes &&
877 	    wbc->wb_bytes >= wbc->wb_tcand_bytes) {
878 		max_id = wbc->wb_id;
879 		max_bytes = wbc->wb_bytes;
880 	} else if (wbc->wb_lcand_bytes >= wbc->wb_tcand_bytes) {
881 		max_id = wbc->wb_lcand_id;
882 		max_bytes = wbc->wb_lcand_bytes;
883 	} else {
884 		max_id = wbc->wb_tcand_id;
885 		max_bytes = wbc->wb_tcand_bytes;
886 	}
887 
888 	/*
889 	 * Calculate the amount of IO time the winner consumed and fold it
890 	 * into the running average kept per inode.  If the consumed IO
891 	 * time is lower than avag / WB_FRN_TIME_CUT_DIV, ignore it for
892 	 * deciding whether to switch or not.  This is to prevent one-off
893 	 * small dirtiers from skewing the verdict.
894 	 */
895 	max_time = DIV_ROUND_UP((max_bytes >> PAGE_SHIFT) << WB_FRN_TIME_SHIFT,
896 				wb->avg_write_bandwidth);
897 	if (avg_time)
898 		avg_time += (max_time >> WB_FRN_TIME_AVG_SHIFT) -
899 			    (avg_time >> WB_FRN_TIME_AVG_SHIFT);
900 	else
901 		avg_time = max_time;	/* immediate catch up on first run */
902 
903 	if (max_time >= avg_time / WB_FRN_TIME_CUT_DIV) {
904 		int slots;
905 
906 		/*
907 		 * The switch verdict is reached if foreign wb's consume
908 		 * more than a certain proportion of IO time in a
909 		 * WB_FRN_TIME_PERIOD.  This is loosely tracked by 16 slot
910 		 * history mask where each bit represents one sixteenth of
911 		 * the period.  Determine the number of slots to shift into
912 		 * history from @max_time.
913 		 */
914 		slots = min(DIV_ROUND_UP(max_time, WB_FRN_HIST_UNIT),
915 			    (unsigned long)WB_FRN_HIST_MAX_SLOTS);
916 		history <<= slots;
917 		if (wbc->wb_id != max_id)
918 			history |= (1U << slots) - 1;
919 
920 		if (history)
921 			trace_inode_foreign_history(inode, wbc, history);
922 
923 		/*
924 		 * Switch if the current wb isn't the consistent winner.
925 		 * If there are multiple closely competing dirtiers, the
926 		 * inode may switch across them repeatedly over time, which
927 		 * is okay.  The main goal is avoiding keeping an inode on
928 		 * the wrong wb for an extended period of time.
929 		 */
930 		if (hweight16(history) > WB_FRN_HIST_THR_SLOTS)
931 			inode_switch_wbs(inode, max_id);
932 	}
933 
934 	/*
935 	 * Multiple instances of this function may race to update the
936 	 * following fields but we don't mind occassional inaccuracies.
937 	 */
938 	inode->i_wb_frn_winner = max_id;
939 	inode->i_wb_frn_avg_time = min(avg_time, (unsigned long)U16_MAX);
940 	inode->i_wb_frn_history = history;
941 
942 	wb_put(wbc->wb);
943 	wbc->wb = NULL;
944 }
945 EXPORT_SYMBOL_GPL(wbc_detach_inode);
946 
947 /**
948  * wbc_account_cgroup_owner - account writeback to update inode cgroup ownership
949  * @wbc: writeback_control of the writeback in progress
950  * @folio: folio being written out
951  * @bytes: number of bytes being written out
952  *
953  * @bytes from @folio are about to written out during the writeback
954  * controlled by @wbc.  Keep the book for foreign inode detection.  See
955  * wbc_detach_inode().
956  */
957 void wbc_account_cgroup_owner(struct writeback_control *wbc, struct folio *folio,
958 			      size_t bytes)
959 {
960 	struct cgroup_subsys_state *css;
961 	int id;
962 
963 	/*
964 	 * pageout() path doesn't attach @wbc to the inode being written
965 	 * out.  This is intentional as we don't want the function to block
966 	 * behind a slow cgroup.  Ultimately, we want pageout() to kick off
967 	 * regular writeback instead of writing things out itself.
968 	 */
969 	if (!wbc->wb || wbc->no_cgroup_owner)
970 		return;
971 
972 	css = mem_cgroup_css_from_folio(folio);
973 	/* dead cgroups shouldn't contribute to inode ownership arbitration */
974 	if (!(css->flags & CSS_ONLINE))
975 		return;
976 
977 	id = css->id;
978 
979 	if (id == wbc->wb_id) {
980 		wbc->wb_bytes += bytes;
981 		return;
982 	}
983 
984 	if (id == wbc->wb_lcand_id)
985 		wbc->wb_lcand_bytes += bytes;
986 
987 	/* Boyer-Moore majority vote algorithm */
988 	if (!wbc->wb_tcand_bytes)
989 		wbc->wb_tcand_id = id;
990 	if (id == wbc->wb_tcand_id)
991 		wbc->wb_tcand_bytes += bytes;
992 	else
993 		wbc->wb_tcand_bytes -= min(bytes, wbc->wb_tcand_bytes);
994 }
995 EXPORT_SYMBOL_GPL(wbc_account_cgroup_owner);
996 
997 /**
998  * wb_split_bdi_pages - split nr_pages to write according to bandwidth
999  * @wb: target bdi_writeback to split @nr_pages to
1000  * @nr_pages: number of pages to write for the whole bdi
1001  *
1002  * Split @wb's portion of @nr_pages according to @wb's write bandwidth in
1003  * relation to the total write bandwidth of all wb's w/ dirty inodes on
1004  * @wb->bdi.
1005  */
1006 static long wb_split_bdi_pages(struct bdi_writeback *wb, long nr_pages)
1007 {
1008 	unsigned long this_bw = wb->avg_write_bandwidth;
1009 	unsigned long tot_bw = atomic_long_read(&wb->bdi->tot_write_bandwidth);
1010 
1011 	if (nr_pages == LONG_MAX)
1012 		return LONG_MAX;
1013 
1014 	/*
1015 	 * This may be called on clean wb's and proportional distribution
1016 	 * may not make sense, just use the original @nr_pages in those
1017 	 * cases.  In general, we wanna err on the side of writing more.
1018 	 */
1019 	if (!tot_bw || this_bw >= tot_bw)
1020 		return nr_pages;
1021 	else
1022 		return DIV_ROUND_UP_ULL((u64)nr_pages * this_bw, tot_bw);
1023 }
1024 
1025 /**
1026  * bdi_split_work_to_wbs - split a wb_writeback_work to all wb's of a bdi
1027  * @bdi: target backing_dev_info
1028  * @base_work: wb_writeback_work to issue
1029  * @skip_if_busy: skip wb's which already have writeback in progress
1030  *
1031  * Split and issue @base_work to all wb's (bdi_writeback's) of @bdi which
1032  * have dirty inodes.  If @base_work->nr_page isn't %LONG_MAX, it's
1033  * distributed to the busy wbs according to each wb's proportion in the
1034  * total active write bandwidth of @bdi.
1035  */
1036 static void bdi_split_work_to_wbs(struct backing_dev_info *bdi,
1037 				  struct wb_writeback_work *base_work,
1038 				  bool skip_if_busy)
1039 {
1040 	struct bdi_writeback *last_wb = NULL;
1041 	struct bdi_writeback *wb = list_entry(&bdi->wb_list,
1042 					      struct bdi_writeback, bdi_node);
1043 
1044 	might_sleep();
1045 restart:
1046 	rcu_read_lock();
1047 	list_for_each_entry_continue_rcu(wb, &bdi->wb_list, bdi_node) {
1048 		DEFINE_WB_COMPLETION(fallback_work_done, bdi);
1049 		struct wb_writeback_work fallback_work;
1050 		struct wb_writeback_work *work;
1051 		long nr_pages;
1052 
1053 		if (last_wb) {
1054 			wb_put(last_wb);
1055 			last_wb = NULL;
1056 		}
1057 
1058 		/* SYNC_ALL writes out I_DIRTY_TIME too */
1059 		if (!wb_has_dirty_io(wb) &&
1060 		    (base_work->sync_mode == WB_SYNC_NONE ||
1061 		     list_empty(&wb->b_dirty_time)))
1062 			continue;
1063 		if (skip_if_busy && writeback_in_progress(wb))
1064 			continue;
1065 
1066 		nr_pages = wb_split_bdi_pages(wb, base_work->nr_pages);
1067 
1068 		work = kmalloc(sizeof(*work), GFP_ATOMIC);
1069 		if (work) {
1070 			*work = *base_work;
1071 			work->nr_pages = nr_pages;
1072 			work->auto_free = 1;
1073 			wb_queue_work(wb, work);
1074 			continue;
1075 		}
1076 
1077 		/*
1078 		 * If wb_tryget fails, the wb has been shutdown, skip it.
1079 		 *
1080 		 * Pin @wb so that it stays on @bdi->wb_list.  This allows
1081 		 * continuing iteration from @wb after dropping and
1082 		 * regrabbing rcu read lock.
1083 		 */
1084 		if (!wb_tryget(wb))
1085 			continue;
1086 
1087 		/* alloc failed, execute synchronously using on-stack fallback */
1088 		work = &fallback_work;
1089 		*work = *base_work;
1090 		work->nr_pages = nr_pages;
1091 		work->auto_free = 0;
1092 		work->done = &fallback_work_done;
1093 
1094 		wb_queue_work(wb, work);
1095 		last_wb = wb;
1096 
1097 		rcu_read_unlock();
1098 		wb_wait_for_completion(&fallback_work_done);
1099 		goto restart;
1100 	}
1101 	rcu_read_unlock();
1102 
1103 	if (last_wb)
1104 		wb_put(last_wb);
1105 }
1106 
1107 /**
1108  * cgroup_writeback_by_id - initiate cgroup writeback from bdi and memcg IDs
1109  * @bdi_id: target bdi id
1110  * @memcg_id: target memcg css id
1111  * @reason: reason why some writeback work initiated
1112  * @done: target wb_completion
1113  *
1114  * Initiate flush of the bdi_writeback identified by @bdi_id and @memcg_id
1115  * with the specified parameters.
1116  */
1117 int cgroup_writeback_by_id(u64 bdi_id, int memcg_id,
1118 			   enum wb_reason reason, struct wb_completion *done)
1119 {
1120 	struct backing_dev_info *bdi;
1121 	struct cgroup_subsys_state *memcg_css;
1122 	struct bdi_writeback *wb;
1123 	struct wb_writeback_work *work;
1124 	unsigned long dirty;
1125 	int ret;
1126 
1127 	/* lookup bdi and memcg */
1128 	bdi = bdi_get_by_id(bdi_id);
1129 	if (!bdi)
1130 		return -ENOENT;
1131 
1132 	rcu_read_lock();
1133 	memcg_css = css_from_id(memcg_id, &memory_cgrp_subsys);
1134 	if (memcg_css && !css_tryget(memcg_css))
1135 		memcg_css = NULL;
1136 	rcu_read_unlock();
1137 	if (!memcg_css) {
1138 		ret = -ENOENT;
1139 		goto out_bdi_put;
1140 	}
1141 
1142 	/*
1143 	 * And find the associated wb.  If the wb isn't there already
1144 	 * there's nothing to flush, don't create one.
1145 	 */
1146 	wb = wb_get_lookup(bdi, memcg_css);
1147 	if (!wb) {
1148 		ret = -ENOENT;
1149 		goto out_css_put;
1150 	}
1151 
1152 	/*
1153 	 * The caller is attempting to write out most of
1154 	 * the currently dirty pages.  Let's take the current dirty page
1155 	 * count and inflate it by 25% which should be large enough to
1156 	 * flush out most dirty pages while avoiding getting livelocked by
1157 	 * concurrent dirtiers.
1158 	 *
1159 	 * BTW the memcg stats are flushed periodically and this is best-effort
1160 	 * estimation, so some potential error is ok.
1161 	 */
1162 	dirty = memcg_page_state(mem_cgroup_from_css(memcg_css), NR_FILE_DIRTY);
1163 	dirty = dirty * 10 / 8;
1164 
1165 	/* issue the writeback work */
1166 	work = kzalloc(sizeof(*work), GFP_NOWAIT);
1167 	if (work) {
1168 		work->nr_pages = dirty;
1169 		work->sync_mode = WB_SYNC_NONE;
1170 		work->range_cyclic = 1;
1171 		work->reason = reason;
1172 		work->done = done;
1173 		work->auto_free = 1;
1174 		wb_queue_work(wb, work);
1175 		ret = 0;
1176 	} else {
1177 		ret = -ENOMEM;
1178 	}
1179 
1180 	wb_put(wb);
1181 out_css_put:
1182 	css_put(memcg_css);
1183 out_bdi_put:
1184 	bdi_put(bdi);
1185 	return ret;
1186 }
1187 
1188 /**
1189  * cgroup_writeback_umount - flush inode wb switches for umount
1190  * @sb: target super_block
1191  *
1192  * This function is called when a super_block is about to be destroyed and
1193  * flushes in-flight inode wb switches.  An inode wb switch goes through
1194  * RCU and then workqueue, so the two need to be flushed in order to ensure
1195  * that all previously scheduled switches are finished.  As wb switches are
1196  * rare occurrences and synchronize_rcu() can take a while, perform
1197  * flushing iff wb switches are in flight.
1198  */
1199 void cgroup_writeback_umount(struct super_block *sb)
1200 {
1201 
1202 	if (!(sb->s_bdi->capabilities & BDI_CAP_WRITEBACK))
1203 		return;
1204 
1205 	/*
1206 	 * SB_ACTIVE should be reliably cleared before checking
1207 	 * isw_nr_in_flight, see generic_shutdown_super().
1208 	 */
1209 	smp_mb();
1210 
1211 	if (atomic_read(&isw_nr_in_flight)) {
1212 		/*
1213 		 * Use rcu_barrier() to wait for all pending callbacks to
1214 		 * ensure that all in-flight wb switches are in the workqueue.
1215 		 */
1216 		rcu_barrier();
1217 		flush_workqueue(isw_wq);
1218 	}
1219 }
1220 
1221 static int __init cgroup_writeback_init(void)
1222 {
1223 	isw_wq = alloc_workqueue("inode_switch_wbs", WQ_PERCPU, 0);
1224 	if (!isw_wq)
1225 		return -ENOMEM;
1226 	return 0;
1227 }
1228 fs_initcall(cgroup_writeback_init);
1229 
1230 #else	/* CONFIG_CGROUP_WRITEBACK */
1231 
1232 static void bdi_down_write_wb_switch_rwsem(struct backing_dev_info *bdi) { }
1233 static void bdi_up_write_wb_switch_rwsem(struct backing_dev_info *bdi) { }
1234 
1235 static void inode_cgwb_move_to_attached(struct inode *inode,
1236 					struct bdi_writeback *wb)
1237 {
1238 	assert_spin_locked(&wb->list_lock);
1239 	assert_spin_locked(&inode->i_lock);
1240 	WARN_ON_ONCE(inode_state_read(inode) & I_FREEING);
1241 
1242 	inode_state_clear(inode, I_SYNC_QUEUED);
1243 	list_del_init(&inode->i_io_list);
1244 	wb_io_lists_depopulated(wb);
1245 }
1246 
1247 static struct bdi_writeback *
1248 locked_inode_to_wb_and_lock_list(struct inode *inode)
1249 	__releases(&inode->i_lock)
1250 	__acquires(&wb->list_lock)
1251 {
1252 	struct bdi_writeback *wb = inode_to_wb(inode);
1253 
1254 	spin_unlock(&inode->i_lock);
1255 	spin_lock(&wb->list_lock);
1256 	return wb;
1257 }
1258 
1259 static struct bdi_writeback *inode_to_wb_and_lock_list(struct inode *inode)
1260 	__acquires(&wb->list_lock)
1261 {
1262 	struct bdi_writeback *wb = inode_to_wb(inode);
1263 
1264 	spin_lock(&wb->list_lock);
1265 	return wb;
1266 }
1267 
1268 static long wb_split_bdi_pages(struct bdi_writeback *wb, long nr_pages)
1269 {
1270 	return nr_pages;
1271 }
1272 
1273 static void bdi_split_work_to_wbs(struct backing_dev_info *bdi,
1274 				  struct wb_writeback_work *base_work,
1275 				  bool skip_if_busy)
1276 {
1277 	might_sleep();
1278 
1279 	if (!skip_if_busy || !writeback_in_progress(&bdi->wb)) {
1280 		base_work->auto_free = 0;
1281 		wb_queue_work(&bdi->wb, base_work);
1282 	}
1283 }
1284 
1285 static inline void wbc_attach_and_unlock_inode(struct writeback_control *wbc,
1286 					       struct inode *inode)
1287 	__releases(&inode->i_lock)
1288 {
1289 	spin_unlock(&inode->i_lock);
1290 }
1291 
1292 #endif	/* CONFIG_CGROUP_WRITEBACK */
1293 
1294 /*
1295  * Add in the number of potentially dirty inodes, because each inode
1296  * write can dirty pagecache in the underlying blockdev.
1297  */
1298 static unsigned long get_nr_dirty_pages(void)
1299 {
1300 	return global_node_page_state(NR_FILE_DIRTY) +
1301 		get_nr_dirty_inodes();
1302 }
1303 
1304 static void wb_start_writeback(struct bdi_writeback *wb, enum wb_reason reason)
1305 {
1306 	if (!wb_has_dirty_io(wb))
1307 		return;
1308 
1309 	/*
1310 	 * All callers of this function want to start writeback of all
1311 	 * dirty pages. Places like vmscan can call this at a very
1312 	 * high frequency, causing pointless allocations of tons of
1313 	 * work items and keeping the flusher threads busy retrieving
1314 	 * that work. Ensure that we only allow one of them pending and
1315 	 * inflight at the time.
1316 	 */
1317 	if (test_bit(WB_start_all, &wb->state) ||
1318 	    test_and_set_bit(WB_start_all, &wb->state))
1319 		return;
1320 
1321 	wb->start_all_reason = reason;
1322 	wb_wakeup(wb);
1323 }
1324 
1325 /**
1326  * wb_start_background_writeback - start background writeback
1327  * @wb: bdi_writback to write from
1328  *
1329  * Description:
1330  *   This makes sure WB_SYNC_NONE background writeback happens. When
1331  *   this function returns, it is only guaranteed that for given wb
1332  *   some IO is happening if we are over background dirty threshold.
1333  *   Caller need not hold sb s_umount semaphore.
1334  */
1335 void wb_start_background_writeback(struct bdi_writeback *wb)
1336 {
1337 	/*
1338 	 * We just wake up the flusher thread. It will perform background
1339 	 * writeback as soon as there is no other work to do.
1340 	 */
1341 	trace_writeback_wake_background(wb);
1342 	wb_wakeup(wb);
1343 }
1344 
1345 /*
1346  * Remove the inode from the writeback list it is on.
1347  */
1348 void inode_io_list_del(struct inode *inode)
1349 {
1350 	struct bdi_writeback *wb;
1351 
1352 	/*
1353 	 * FIXME: ext4 can call here from ext4_evict_inode() after evict() already
1354 	 * unlinked the inode.
1355 	 */
1356 	if (list_empty_careful(&inode->i_io_list))
1357 		return;
1358 
1359 	wb = inode_to_wb_and_lock_list(inode);
1360 	spin_lock(&inode->i_lock);
1361 
1362 	inode_state_clear(inode, I_SYNC_QUEUED);
1363 	list_del_init(&inode->i_io_list);
1364 	wb_io_lists_depopulated(wb);
1365 
1366 	spin_unlock(&inode->i_lock);
1367 	spin_unlock(&wb->list_lock);
1368 }
1369 EXPORT_SYMBOL(inode_io_list_del);
1370 
1371 /*
1372  * mark an inode as under writeback on the sb
1373  */
1374 void sb_mark_inode_writeback(struct inode *inode)
1375 {
1376 	struct super_block *sb = inode->i_sb;
1377 	unsigned long flags;
1378 
1379 	if (list_empty(&inode->i_wb_list)) {
1380 		spin_lock_irqsave(&sb->s_inode_wblist_lock, flags);
1381 		if (list_empty(&inode->i_wb_list)) {
1382 			list_add_tail(&inode->i_wb_list, &sb->s_inodes_wb);
1383 			trace_sb_mark_inode_writeback(inode);
1384 		}
1385 		spin_unlock_irqrestore(&sb->s_inode_wblist_lock, flags);
1386 	}
1387 }
1388 
1389 /*
1390  * clear an inode as under writeback on the sb
1391  */
1392 void sb_clear_inode_writeback(struct inode *inode)
1393 {
1394 	struct super_block *sb = inode->i_sb;
1395 	unsigned long flags;
1396 
1397 	if (!list_empty(&inode->i_wb_list)) {
1398 		spin_lock_irqsave(&sb->s_inode_wblist_lock, flags);
1399 		if (!list_empty(&inode->i_wb_list)) {
1400 			list_del_init(&inode->i_wb_list);
1401 			trace_sb_clear_inode_writeback(inode);
1402 		}
1403 		spin_unlock_irqrestore(&sb->s_inode_wblist_lock, flags);
1404 	}
1405 }
1406 
1407 /*
1408  * Redirty an inode: set its when-it-was dirtied timestamp and move it to the
1409  * furthest end of its superblock's dirty-inode list.
1410  *
1411  * Before stamping the inode's ->dirtied_when, we check to see whether it is
1412  * already the most-recently-dirtied inode on the b_dirty list.  If that is
1413  * the case then the inode must have been redirtied while it was being written
1414  * out and we don't reset its dirtied_when.
1415  */
1416 static void redirty_tail_locked(struct inode *inode, struct bdi_writeback *wb)
1417 {
1418 	assert_spin_locked(&inode->i_lock);
1419 
1420 	inode_state_clear(inode, I_SYNC_QUEUED);
1421 	/*
1422 	 * When the inode is being freed just don't bother with dirty list
1423 	 * tracking. Flush worker will ignore this inode anyway and it will
1424 	 * trigger assertions in inode_io_list_move_locked().
1425 	 */
1426 	if (inode_state_read(inode) & I_FREEING) {
1427 		list_del_init(&inode->i_io_list);
1428 		wb_io_lists_depopulated(wb);
1429 		return;
1430 	}
1431 	if (!list_empty(&wb->b_dirty)) {
1432 		struct inode *tail;
1433 
1434 		tail = wb_inode(wb->b_dirty.next);
1435 		if (time_before(inode->dirtied_when, tail->dirtied_when))
1436 			inode->dirtied_when = jiffies;
1437 	}
1438 	inode_io_list_move_locked(inode, wb, &wb->b_dirty);
1439 }
1440 
1441 static void redirty_tail(struct inode *inode, struct bdi_writeback *wb)
1442 {
1443 	spin_lock(&inode->i_lock);
1444 	redirty_tail_locked(inode, wb);
1445 	spin_unlock(&inode->i_lock);
1446 }
1447 
1448 /*
1449  * requeue inode for re-scanning after bdi->b_io list is exhausted.
1450  */
1451 static void requeue_io(struct inode *inode, struct bdi_writeback *wb)
1452 {
1453 	inode_io_list_move_locked(inode, wb, &wb->b_more_io);
1454 }
1455 
1456 static void inode_sync_complete(struct inode *inode)
1457 {
1458 	assert_spin_locked(&inode->i_lock);
1459 
1460 	inode_state_clear(inode, I_SYNC);
1461 	/* If inode is clean an unused, put it into LRU now... */
1462 	inode_lru_list_add(inode);
1463 	/* Called with inode->i_lock which ensures memory ordering. */
1464 	inode_wake_up_bit(inode, __I_SYNC);
1465 }
1466 
1467 static bool inode_dirtied_after(struct inode *inode, unsigned long t)
1468 {
1469 	bool ret = time_after(inode->dirtied_when, t);
1470 #ifndef CONFIG_64BIT
1471 	/*
1472 	 * For inodes being constantly redirtied, dirtied_when can get stuck.
1473 	 * It _appears_ to be in the future, but is actually in distant past.
1474 	 * This test is necessary to prevent such wrapped-around relative times
1475 	 * from permanently stopping the whole bdi writeback.
1476 	 */
1477 	ret = ret && time_before_eq(inode->dirtied_when, jiffies);
1478 #endif
1479 	return ret;
1480 }
1481 
1482 /*
1483  * Move expired (dirtied before dirtied_before) dirty inodes from
1484  * @delaying_queue to @dispatch_queue.
1485  */
1486 static int move_expired_inodes(struct list_head *delaying_queue,
1487 			       struct list_head *dispatch_queue,
1488 			       unsigned long dirtied_before)
1489 {
1490 	LIST_HEAD(tmp);
1491 	struct list_head *pos, *node;
1492 	struct super_block *sb = NULL;
1493 	struct inode *inode;
1494 	int do_sb_sort = 0;
1495 	int moved = 0;
1496 
1497 	while (!list_empty(delaying_queue)) {
1498 		inode = wb_inode(delaying_queue->prev);
1499 		if (inode_dirtied_after(inode, dirtied_before))
1500 			break;
1501 		spin_lock(&inode->i_lock);
1502 		list_move(&inode->i_io_list, &tmp);
1503 		moved++;
1504 		inode_state_set(inode, I_SYNC_QUEUED);
1505 		spin_unlock(&inode->i_lock);
1506 		if (sb_is_blkdev_sb(inode->i_sb))
1507 			continue;
1508 		if (sb && sb != inode->i_sb)
1509 			do_sb_sort = 1;
1510 		sb = inode->i_sb;
1511 	}
1512 
1513 	/* just one sb in list, splice to dispatch_queue and we're done */
1514 	if (!do_sb_sort) {
1515 		list_splice(&tmp, dispatch_queue);
1516 		goto out;
1517 	}
1518 
1519 	/*
1520 	 * Although inode's i_io_list is moved from 'tmp' to 'dispatch_queue',
1521 	 * we don't take inode->i_lock here because it is just a pointless overhead.
1522 	 * Inode is already marked as I_SYNC_QUEUED so writeback list handling is
1523 	 * fully under our control.
1524 	 */
1525 	while (!list_empty(&tmp)) {
1526 		sb = wb_inode(tmp.prev)->i_sb;
1527 		list_for_each_prev_safe(pos, node, &tmp) {
1528 			inode = wb_inode(pos);
1529 			if (inode->i_sb == sb)
1530 				list_move(&inode->i_io_list, dispatch_queue);
1531 		}
1532 	}
1533 out:
1534 	return moved;
1535 }
1536 
1537 /*
1538  * Queue all expired dirty inodes for io, eldest first.
1539  * Before
1540  *         newly dirtied     b_dirty    b_io    b_more_io
1541  *         =============>    gf         edc     BA
1542  * After
1543  *         newly dirtied     b_dirty    b_io    b_more_io
1544  *         =============>    g          fBAedc
1545  *                                           |
1546  *                                           +--> dequeue for IO
1547  */
1548 static void queue_io(struct bdi_writeback *wb, struct wb_writeback_work *work,
1549 		     unsigned long dirtied_before)
1550 {
1551 	int moved;
1552 	unsigned long time_expire_jif = dirtied_before;
1553 
1554 	assert_spin_locked(&wb->list_lock);
1555 	list_splice_init(&wb->b_more_io, &wb->b_io);
1556 	moved = move_expired_inodes(&wb->b_dirty, &wb->b_io, dirtied_before);
1557 	if (!work->for_sync)
1558 		time_expire_jif = jiffies - dirtytime_expire_interval * HZ;
1559 	moved += move_expired_inodes(&wb->b_dirty_time, &wb->b_io,
1560 				     time_expire_jif);
1561 	if (moved)
1562 		wb_io_lists_populated(wb);
1563 	trace_writeback_queue_io(wb, work, dirtied_before, moved);
1564 }
1565 
1566 static int write_inode(struct inode *inode, struct writeback_control *wbc)
1567 {
1568 	int ret;
1569 
1570 	if (inode->i_sb->s_op->write_inode && !is_bad_inode(inode)) {
1571 		trace_writeback_write_inode_start(inode, wbc);
1572 		ret = inode->i_sb->s_op->write_inode(inode, wbc);
1573 		trace_writeback_write_inode(inode, wbc);
1574 		return ret;
1575 	}
1576 	return 0;
1577 }
1578 
1579 /*
1580  * Wait for writeback on an inode to complete. Called with i_lock held.
1581  * Caller must make sure inode cannot go away when we drop i_lock.
1582  */
1583 void inode_wait_for_writeback(struct inode *inode)
1584 {
1585 	struct wait_bit_queue_entry wqe;
1586 	struct wait_queue_head *wq_head;
1587 
1588 	assert_spin_locked(&inode->i_lock);
1589 
1590 	if (!(inode_state_read(inode) & I_SYNC))
1591 		return;
1592 
1593 	wq_head = inode_bit_waitqueue(&wqe, inode, __I_SYNC);
1594 	for (;;) {
1595 		prepare_to_wait_event(wq_head, &wqe.wq_entry, TASK_UNINTERRUPTIBLE);
1596 		/* Checking I_SYNC with inode->i_lock guarantees memory ordering. */
1597 		if (!(inode_state_read(inode) & I_SYNC))
1598 			break;
1599 		spin_unlock(&inode->i_lock);
1600 		schedule();
1601 		spin_lock(&inode->i_lock);
1602 	}
1603 	finish_wait(wq_head, &wqe.wq_entry);
1604 }
1605 
1606 /*
1607  * Sleep until I_SYNC is cleared. This function must be called with i_lock
1608  * held and drops it. It is aimed for callers not holding any inode reference
1609  * so once i_lock is dropped, inode can go away.
1610  */
1611 static void inode_sleep_on_writeback(struct inode *inode)
1612 	__releases(inode->i_lock)
1613 {
1614 	struct wait_bit_queue_entry wqe;
1615 	struct wait_queue_head *wq_head;
1616 	bool sleep;
1617 
1618 	assert_spin_locked(&inode->i_lock);
1619 
1620 	wq_head = inode_bit_waitqueue(&wqe, inode, __I_SYNC);
1621 	prepare_to_wait_event(wq_head, &wqe.wq_entry, TASK_UNINTERRUPTIBLE);
1622 	/* Checking I_SYNC with inode->i_lock guarantees memory ordering. */
1623 	sleep = !!(inode_state_read(inode) & I_SYNC);
1624 	spin_unlock(&inode->i_lock);
1625 	if (sleep)
1626 		schedule();
1627 	finish_wait(wq_head, &wqe.wq_entry);
1628 }
1629 
1630 /*
1631  * Find proper writeback list for the inode depending on its current state and
1632  * possibly also change of its state while we were doing writeback.  Here we
1633  * handle things such as livelock prevention or fairness of writeback among
1634  * inodes. This function can be called only by flusher thread - noone else
1635  * processes all inodes in writeback lists and requeueing inodes behind flusher
1636  * thread's back can have unexpected consequences.
1637  */
1638 static void requeue_inode(struct inode *inode, struct bdi_writeback *wb,
1639 			  struct writeback_control *wbc,
1640 			  unsigned long dirtied_before)
1641 {
1642 	if (inode_state_read(inode) & I_FREEING)
1643 		return;
1644 
1645 	/*
1646 	 * Sync livelock prevention. Each inode is tagged and synced in one
1647 	 * shot. If still dirty, it will be redirty_tail()'ed below.  Update
1648 	 * the dirty time to prevent enqueue and sync it again.
1649 	 */
1650 	if ((inode_state_read(inode) & I_DIRTY) &&
1651 	    (wbc->sync_mode == WB_SYNC_ALL || wbc->tagged_writepages))
1652 		inode->dirtied_when = jiffies;
1653 
1654 	if (wbc->pages_skipped) {
1655 		/*
1656 		 * Writeback is not making progress due to locked buffers.
1657 		 * Skip this inode for now. Although having skipped pages
1658 		 * is odd for clean inodes, it can happen for some
1659 		 * filesystems so handle that gracefully.
1660 		 */
1661 		if (inode_state_read(inode) & I_DIRTY_ALL)
1662 			redirty_tail_locked(inode, wb);
1663 		else
1664 			inode_cgwb_move_to_attached(inode, wb);
1665 		return;
1666 	}
1667 
1668 	if (mapping_tagged(inode->i_mapping, PAGECACHE_TAG_DIRTY)) {
1669 		/*
1670 		 * We didn't write back all the pages.  nfs_writepages()
1671 		 * sometimes bales out without doing anything.
1672 		 */
1673 		if (wbc->nr_to_write <= 0 &&
1674 		    !inode_dirtied_after(inode, dirtied_before)) {
1675 			/* Slice used up. Queue for next turn. */
1676 			requeue_io(inode, wb);
1677 		} else {
1678 			/*
1679 			 * Writeback blocked by something other than
1680 			 * congestion. Delay the inode for some time to
1681 			 * avoid spinning on the CPU (100% iowait)
1682 			 * retrying writeback of the dirty page/inode
1683 			 * that cannot be performed immediately.
1684 			 */
1685 			redirty_tail_locked(inode, wb);
1686 		}
1687 	} else if (inode_state_read(inode) & I_DIRTY) {
1688 		/*
1689 		 * Filesystems can dirty the inode during writeback operations,
1690 		 * such as delayed allocation during submission or metadata
1691 		 * updates after data IO completion.
1692 		 */
1693 		redirty_tail_locked(inode, wb);
1694 	} else if (inode_state_read(inode) & I_DIRTY_TIME) {
1695 		inode->dirtied_when = jiffies;
1696 		inode_io_list_move_locked(inode, wb, &wb->b_dirty_time);
1697 		inode_state_clear(inode, I_SYNC_QUEUED);
1698 	} else {
1699 		/* The inode is clean. Remove from writeback lists. */
1700 		inode_cgwb_move_to_attached(inode, wb);
1701 	}
1702 }
1703 
1704 /*
1705  * Write out an inode and its dirty pages (or some of its dirty pages, depending
1706  * on @wbc->nr_to_write), and clear the relevant dirty flags from i_state.
1707  *
1708  * This doesn't remove the inode from the writeback list it is on, except
1709  * potentially to move it from b_dirty_time to b_dirty due to timestamp
1710  * expiration.  The caller is otherwise responsible for writeback list handling.
1711  *
1712  * The caller is also responsible for setting the I_SYNC flag beforehand and
1713  * calling inode_sync_complete() to clear it afterwards.
1714  */
1715 static int
1716 __writeback_single_inode(struct inode *inode, struct writeback_control *wbc)
1717 {
1718 	struct address_space *mapping = inode->i_mapping;
1719 	long nr_to_write = wbc->nr_to_write;
1720 	unsigned dirty;
1721 	int ret;
1722 
1723 	WARN_ON(!(inode_state_read_once(inode) & I_SYNC));
1724 
1725 	trace_writeback_single_inode_start(inode, wbc, nr_to_write);
1726 
1727 	ret = do_writepages(mapping, wbc);
1728 
1729 	/*
1730 	 * Make sure to wait on the data before writing out the metadata.
1731 	 * This is important for filesystems that modify metadata on data
1732 	 * I/O completion. We don't do it for sync(2) writeback because it has a
1733 	 * separate, external IO completion path and ->sync_fs for guaranteeing
1734 	 * inode metadata is written back correctly.
1735 	 */
1736 	if (wbc->sync_mode == WB_SYNC_ALL && !wbc->for_sync) {
1737 		int err = filemap_fdatawait(mapping);
1738 		if (ret == 0)
1739 			ret = err;
1740 	}
1741 
1742 	/*
1743 	 * If the inode has dirty timestamps and we need to write them, call
1744 	 * mark_inode_dirty_sync() to notify the filesystem about it and to
1745 	 * change I_DIRTY_TIME into I_DIRTY_SYNC.
1746 	 */
1747 	if ((inode_state_read_once(inode) & I_DIRTY_TIME) &&
1748 	    (wbc->sync_mode == WB_SYNC_ALL ||
1749 	     time_after(jiffies, inode->dirtied_time_when +
1750 			dirtytime_expire_interval * HZ))) {
1751 		trace_writeback_lazytime(inode);
1752 		mark_inode_dirty_sync(inode);
1753 	}
1754 
1755 	/*
1756 	 * Get and clear the dirty flags from i_state.  This needs to be done
1757 	 * after calling writepages because some filesystems may redirty the
1758 	 * inode during writepages due to delalloc.  It also needs to be done
1759 	 * after handling timestamp expiration, as that may dirty the inode too.
1760 	 */
1761 	spin_lock(&inode->i_lock);
1762 	dirty = inode_state_read(inode) & I_DIRTY;
1763 	inode_state_clear(inode, dirty);
1764 
1765 	/*
1766 	 * Paired with smp_mb() in __mark_inode_dirty().  This allows
1767 	 * __mark_inode_dirty() to test i_state without grabbing i_lock -
1768 	 * either they see the I_DIRTY bits cleared or we see the dirtied
1769 	 * inode.
1770 	 *
1771 	 * I_DIRTY_PAGES is always cleared together above even if @mapping
1772 	 * still has dirty pages.  The flag is reinstated after smp_mb() if
1773 	 * necessary.  This guarantees that either __mark_inode_dirty()
1774 	 * sees clear I_DIRTY_PAGES or we see PAGECACHE_TAG_DIRTY.
1775 	 */
1776 	smp_mb();
1777 
1778 	if (mapping_tagged(mapping, PAGECACHE_TAG_DIRTY))
1779 		inode_state_set(inode, I_DIRTY_PAGES);
1780 	else if (unlikely(inode_state_read(inode) & I_PINNING_NETFS_WB)) {
1781 		if (!(inode_state_read(inode) & I_DIRTY_PAGES)) {
1782 			inode_state_clear(inode, I_PINNING_NETFS_WB);
1783 			wbc->unpinned_netfs_wb = true;
1784 			dirty |= I_PINNING_NETFS_WB; /* Cause write_inode */
1785 		}
1786 	}
1787 
1788 	spin_unlock(&inode->i_lock);
1789 
1790 	/* Don't write the inode if only I_DIRTY_PAGES was set */
1791 	if (dirty & ~I_DIRTY_PAGES) {
1792 		int err = write_inode(inode, wbc);
1793 		if (ret == 0)
1794 			ret = err;
1795 	}
1796 	wbc->unpinned_netfs_wb = false;
1797 	trace_writeback_single_inode(inode, wbc, nr_to_write);
1798 	return ret;
1799 }
1800 
1801 /*
1802  * Write out an inode's dirty data and metadata on-demand, i.e. separately from
1803  * the regular batched writeback done by the flusher threads in
1804  * writeback_sb_inodes().  @wbc controls various aspects of the write, such as
1805  * whether it is a data-integrity sync (%WB_SYNC_ALL) or not (%WB_SYNC_NONE).
1806  *
1807  * To prevent the inode from going away, either the caller must have a reference
1808  * to the inode, or the inode must have I_WILL_FREE or I_FREEING set.
1809  */
1810 static int writeback_single_inode(struct inode *inode,
1811 				  struct writeback_control *wbc)
1812 {
1813 	struct bdi_writeback *wb;
1814 	int ret = 0;
1815 
1816 	spin_lock(&inode->i_lock);
1817 	if (!icount_read(inode))
1818 		WARN_ON(!(inode_state_read(inode) & (I_WILL_FREE | I_FREEING)));
1819 	else
1820 		WARN_ON(inode_state_read(inode) & I_WILL_FREE);
1821 
1822 	if (inode_state_read(inode) & I_SYNC) {
1823 		/*
1824 		 * Writeback is already running on the inode.  For WB_SYNC_NONE,
1825 		 * that's enough and we can just return.  For WB_SYNC_ALL, we
1826 		 * must wait for the existing writeback to complete, then do
1827 		 * writeback again if there's anything left.
1828 		 */
1829 		if (wbc->sync_mode != WB_SYNC_ALL)
1830 			goto out;
1831 		inode_wait_for_writeback(inode);
1832 	}
1833 	WARN_ON(inode_state_read(inode) & I_SYNC);
1834 	/*
1835 	 * If the inode is already fully clean, then there's nothing to do.
1836 	 *
1837 	 * For data-integrity syncs we also need to check whether any pages are
1838 	 * still under writeback, e.g. due to prior WB_SYNC_NONE writeback.  If
1839 	 * there are any such pages, we'll need to wait for them.
1840 	 */
1841 	if (!(inode_state_read(inode) & I_DIRTY_ALL) &&
1842 	    (wbc->sync_mode != WB_SYNC_ALL ||
1843 	     !mapping_tagged(inode->i_mapping, PAGECACHE_TAG_WRITEBACK)))
1844 		goto out;
1845 	inode_state_set(inode, I_SYNC);
1846 	wbc_attach_and_unlock_inode(wbc, inode);
1847 
1848 	ret = __writeback_single_inode(inode, wbc);
1849 
1850 	wbc_detach_inode(wbc);
1851 
1852 	wb = inode_to_wb_and_lock_list(inode);
1853 	spin_lock(&inode->i_lock);
1854 	/*
1855 	 * If the inode is freeing, its i_io_list shoudn't be updated
1856 	 * as it can be finally deleted at this moment.
1857 	 */
1858 	if (!(inode_state_read(inode) & I_FREEING)) {
1859 		/*
1860 		 * If the inode is now fully clean, then it can be safely
1861 		 * removed from its writeback list (if any). Otherwise the
1862 		 * flusher threads are responsible for the writeback lists.
1863 		 */
1864 		if (!(inode_state_read(inode) & I_DIRTY_ALL))
1865 			inode_cgwb_move_to_attached(inode, wb);
1866 		else if (!(inode_state_read(inode) & I_SYNC_QUEUED)) {
1867 			if ((inode_state_read(inode) & I_DIRTY))
1868 				redirty_tail_locked(inode, wb);
1869 			else if (inode_state_read(inode) & I_DIRTY_TIME) {
1870 				inode->dirtied_when = jiffies;
1871 				inode_io_list_move_locked(inode,
1872 							  wb,
1873 							  &wb->b_dirty_time);
1874 			}
1875 		}
1876 	}
1877 
1878 	spin_unlock(&wb->list_lock);
1879 	inode_sync_complete(inode);
1880 out:
1881 	spin_unlock(&inode->i_lock);
1882 	return ret;
1883 }
1884 
1885 static long writeback_chunk_size(struct bdi_writeback *wb,
1886 				 struct wb_writeback_work *work)
1887 {
1888 	long pages;
1889 
1890 	/*
1891 	 * WB_SYNC_ALL mode does livelock avoidance by syncing dirty
1892 	 * inodes/pages in one big loop. Setting wbc.nr_to_write=LONG_MAX
1893 	 * here avoids calling into writeback_inodes_wb() more than once.
1894 	 *
1895 	 * The intended call sequence for WB_SYNC_ALL writeback is:
1896 	 *
1897 	 *      wb_writeback()
1898 	 *          writeback_sb_inodes()       <== called only once
1899 	 *              write_cache_pages()     <== called once for each inode
1900 	 *                   (quickly) tag currently dirty pages
1901 	 *                   (maybe slowly) sync all tagged pages
1902 	 */
1903 	if (work->sync_mode == WB_SYNC_ALL || work->tagged_writepages)
1904 		pages = LONG_MAX;
1905 	else {
1906 		pages = min(wb->avg_write_bandwidth / 2,
1907 			    global_wb_domain.dirty_limit / DIRTY_SCOPE);
1908 		pages = min(pages, work->nr_pages);
1909 		pages = round_down(pages + MIN_WRITEBACK_PAGES,
1910 				   MIN_WRITEBACK_PAGES);
1911 	}
1912 
1913 	return pages;
1914 }
1915 
1916 /*
1917  * Write a portion of b_io inodes which belong to @sb.
1918  *
1919  * Return the number of pages and/or inodes written.
1920  *
1921  * NOTE! This is called with wb->list_lock held, and will
1922  * unlock and relock that for each inode it ends up doing
1923  * IO for.
1924  */
1925 static long writeback_sb_inodes(struct super_block *sb,
1926 				struct bdi_writeback *wb,
1927 				struct wb_writeback_work *work)
1928 {
1929 	struct writeback_control wbc = {
1930 		.sync_mode		= work->sync_mode,
1931 		.tagged_writepages	= work->tagged_writepages,
1932 		.for_kupdate		= work->for_kupdate,
1933 		.for_background		= work->for_background,
1934 		.for_sync		= work->for_sync,
1935 		.range_cyclic		= work->range_cyclic,
1936 		.range_start		= 0,
1937 		.range_end		= LLONG_MAX,
1938 	};
1939 	unsigned long start_time = jiffies;
1940 	long write_chunk;
1941 	long total_wrote = 0;  /* count both pages and inodes */
1942 	unsigned long dirtied_before = jiffies;
1943 
1944 	if (work->for_kupdate)
1945 		dirtied_before = jiffies -
1946 			msecs_to_jiffies(dirty_expire_interval * 10);
1947 
1948 	while (!list_empty(&wb->b_io)) {
1949 		struct inode *inode = wb_inode(wb->b_io.prev);
1950 		struct bdi_writeback *tmp_wb;
1951 		long wrote;
1952 
1953 		if (inode->i_sb != sb) {
1954 			if (work->sb) {
1955 				/*
1956 				 * We only want to write back data for this
1957 				 * superblock, move all inodes not belonging
1958 				 * to it back onto the dirty list.
1959 				 */
1960 				redirty_tail(inode, wb);
1961 				continue;
1962 			}
1963 
1964 			/*
1965 			 * The inode belongs to a different superblock.
1966 			 * Bounce back to the caller to unpin this and
1967 			 * pin the next superblock.
1968 			 */
1969 			break;
1970 		}
1971 
1972 		/*
1973 		 * Don't bother with new inodes or inodes being freed, first
1974 		 * kind does not need periodic writeout yet, and for the latter
1975 		 * kind writeout is handled by the freer.
1976 		 */
1977 		spin_lock(&inode->i_lock);
1978 		if (inode_state_read(inode) & (I_NEW | I_FREEING | I_WILL_FREE)) {
1979 			redirty_tail_locked(inode, wb);
1980 			spin_unlock(&inode->i_lock);
1981 			continue;
1982 		}
1983 		if ((inode_state_read(inode) & I_SYNC) && wbc.sync_mode != WB_SYNC_ALL) {
1984 			/*
1985 			 * If this inode is locked for writeback and we are not
1986 			 * doing writeback-for-data-integrity, move it to
1987 			 * b_more_io so that writeback can proceed with the
1988 			 * other inodes on s_io.
1989 			 *
1990 			 * We'll have another go at writing back this inode
1991 			 * when we completed a full scan of b_io.
1992 			 */
1993 			requeue_io(inode, wb);
1994 			spin_unlock(&inode->i_lock);
1995 			trace_writeback_sb_inodes_requeue(inode);
1996 			continue;
1997 		}
1998 		spin_unlock(&wb->list_lock);
1999 
2000 		/*
2001 		 * We already requeued the inode if it had I_SYNC set and we
2002 		 * are doing WB_SYNC_NONE writeback. So this catches only the
2003 		 * WB_SYNC_ALL case.
2004 		 */
2005 		if (inode_state_read(inode) & I_SYNC) {
2006 			/* Wait for I_SYNC. This function drops i_lock... */
2007 			inode_sleep_on_writeback(inode);
2008 			/* Inode may be gone, start again */
2009 			spin_lock(&wb->list_lock);
2010 			continue;
2011 		}
2012 		inode_state_set(inode, I_SYNC);
2013 		wbc_attach_and_unlock_inode(&wbc, inode);
2014 
2015 		write_chunk = writeback_chunk_size(wb, work);
2016 		wbc.nr_to_write = write_chunk;
2017 		wbc.pages_skipped = 0;
2018 
2019 		/*
2020 		 * We use I_SYNC to pin the inode in memory. While it is set
2021 		 * evict_inode() will wait so the inode cannot be freed.
2022 		 */
2023 		__writeback_single_inode(inode, &wbc);
2024 
2025 		wbc_detach_inode(&wbc);
2026 		work->nr_pages -= write_chunk - wbc.nr_to_write;
2027 		wrote = write_chunk - wbc.nr_to_write - wbc.pages_skipped;
2028 		wrote = wrote < 0 ? 0 : wrote;
2029 		total_wrote += wrote;
2030 
2031 		if (need_resched()) {
2032 			/*
2033 			 * We're trying to balance between building up a nice
2034 			 * long list of IOs to improve our merge rate, and
2035 			 * getting those IOs out quickly for anyone throttling
2036 			 * in balance_dirty_pages().  cond_resched() doesn't
2037 			 * unplug, so get our IOs out the door before we
2038 			 * give up the CPU.
2039 			 */
2040 			blk_flush_plug(current->plug, false);
2041 			cond_resched();
2042 		}
2043 
2044 		/*
2045 		 * Requeue @inode if still dirty.  Be careful as @inode may
2046 		 * have been switched to another wb in the meantime.
2047 		 */
2048 		tmp_wb = inode_to_wb_and_lock_list(inode);
2049 		spin_lock(&inode->i_lock);
2050 		if (!(inode_state_read(inode) & I_DIRTY_ALL))
2051 			total_wrote++;
2052 		requeue_inode(inode, tmp_wb, &wbc, dirtied_before);
2053 		inode_sync_complete(inode);
2054 		spin_unlock(&inode->i_lock);
2055 
2056 		if (unlikely(tmp_wb != wb)) {
2057 			spin_unlock(&tmp_wb->list_lock);
2058 			spin_lock(&wb->list_lock);
2059 		}
2060 
2061 		/*
2062 		 * bail out to wb_writeback() often enough to check
2063 		 * background threshold and other termination conditions.
2064 		 */
2065 		if (total_wrote) {
2066 			if (time_is_before_jiffies(start_time + HZ / 10UL))
2067 				break;
2068 			if (work->nr_pages <= 0)
2069 				break;
2070 		}
2071 	}
2072 	return total_wrote;
2073 }
2074 
2075 static long __writeback_inodes_wb(struct bdi_writeback *wb,
2076 				  struct wb_writeback_work *work)
2077 {
2078 	unsigned long start_time = jiffies;
2079 	long wrote = 0;
2080 
2081 	while (!list_empty(&wb->b_io)) {
2082 		struct inode *inode = wb_inode(wb->b_io.prev);
2083 		struct super_block *sb = inode->i_sb;
2084 
2085 		if (!super_trylock_shared(sb)) {
2086 			/*
2087 			 * super_trylock_shared() may fail consistently due to
2088 			 * s_umount being grabbed by someone else. Don't use
2089 			 * requeue_io() to avoid busy retrying the inode/sb.
2090 			 */
2091 			redirty_tail(inode, wb);
2092 			continue;
2093 		}
2094 		wrote += writeback_sb_inodes(sb, wb, work);
2095 		up_read(&sb->s_umount);
2096 
2097 		/* refer to the same tests at the end of writeback_sb_inodes */
2098 		if (wrote) {
2099 			if (time_is_before_jiffies(start_time + HZ / 10UL))
2100 				break;
2101 			if (work->nr_pages <= 0)
2102 				break;
2103 		}
2104 	}
2105 	/* Leave any unwritten inodes on b_io */
2106 	return wrote;
2107 }
2108 
2109 static long writeback_inodes_wb(struct bdi_writeback *wb, long nr_pages,
2110 				enum wb_reason reason)
2111 {
2112 	struct wb_writeback_work work = {
2113 		.nr_pages	= nr_pages,
2114 		.sync_mode	= WB_SYNC_NONE,
2115 		.range_cyclic	= 1,
2116 		.reason		= reason,
2117 	};
2118 	struct blk_plug plug;
2119 
2120 	blk_start_plug(&plug);
2121 	spin_lock(&wb->list_lock);
2122 	if (list_empty(&wb->b_io))
2123 		queue_io(wb, &work, jiffies);
2124 	__writeback_inodes_wb(wb, &work);
2125 	spin_unlock(&wb->list_lock);
2126 	blk_finish_plug(&plug);
2127 
2128 	return nr_pages - work.nr_pages;
2129 }
2130 
2131 /*
2132  * Explicit flushing or periodic writeback of "old" data.
2133  *
2134  * Define "old": the first time one of an inode's pages is dirtied, we mark the
2135  * dirtying-time in the inode's address_space.  So this periodic writeback code
2136  * just walks the superblock inode list, writing back any inodes which are
2137  * older than a specific point in time.
2138  *
2139  * Try to run once per dirty_writeback_interval.  But if a writeback event
2140  * takes longer than a dirty_writeback_interval interval, then leave a
2141  * one-second gap.
2142  *
2143  * dirtied_before takes precedence over nr_to_write.  So we'll only write back
2144  * all dirty pages if they are all attached to "old" mappings.
2145  */
2146 static long wb_writeback(struct bdi_writeback *wb,
2147 			 struct wb_writeback_work *work)
2148 {
2149 	long nr_pages = work->nr_pages;
2150 	unsigned long dirtied_before = jiffies;
2151 	struct inode *inode;
2152 	long progress;
2153 	struct blk_plug plug;
2154 	bool queued = false;
2155 
2156 	blk_start_plug(&plug);
2157 	for (;;) {
2158 		/*
2159 		 * Stop writeback when nr_pages has been consumed
2160 		 */
2161 		if (work->nr_pages <= 0)
2162 			break;
2163 
2164 		/*
2165 		 * Background writeout and kupdate-style writeback may
2166 		 * run forever. Stop them if there is other work to do
2167 		 * so that e.g. sync can proceed. They'll be restarted
2168 		 * after the other works are all done.
2169 		 */
2170 		if ((work->for_background || work->for_kupdate) &&
2171 		    !list_empty(&wb->work_list))
2172 			break;
2173 
2174 		/*
2175 		 * For background writeout, stop when we are below the
2176 		 * background dirty threshold
2177 		 */
2178 		if (work->for_background && !wb_over_bg_thresh(wb))
2179 			break;
2180 
2181 
2182 		spin_lock(&wb->list_lock);
2183 
2184 		trace_writeback_start(wb, work);
2185 		if (list_empty(&wb->b_io)) {
2186 			/*
2187 			 * Kupdate and background works are special and we want
2188 			 * to include all inodes that need writing. Livelock
2189 			 * avoidance is handled by these works yielding to any
2190 			 * other work so we are safe.
2191 			 */
2192 			if (work->for_kupdate) {
2193 				dirtied_before = jiffies -
2194 					msecs_to_jiffies(dirty_expire_interval *
2195 							 10);
2196 			} else if (work->for_background)
2197 				dirtied_before = jiffies;
2198 
2199 			queue_io(wb, work, dirtied_before);
2200 			queued = true;
2201 		}
2202 		if (work->sb)
2203 			progress = writeback_sb_inodes(work->sb, wb, work);
2204 		else
2205 			progress = __writeback_inodes_wb(wb, work);
2206 		trace_writeback_written(wb, work);
2207 
2208 		/*
2209 		 * Did we write something? Try for more
2210 		 *
2211 		 * Dirty inodes are moved to b_io for writeback in batches.
2212 		 * The completion of the current batch does not necessarily
2213 		 * mean the overall work is done. So we keep looping as long
2214 		 * as made some progress on cleaning pages or inodes.
2215 		 */
2216 		if (progress || !queued) {
2217 			spin_unlock(&wb->list_lock);
2218 			continue;
2219 		}
2220 
2221 		/*
2222 		 * No more inodes for IO, bail
2223 		 */
2224 		if (list_empty(&wb->b_more_io)) {
2225 			spin_unlock(&wb->list_lock);
2226 			break;
2227 		}
2228 
2229 		/*
2230 		 * Nothing written. Wait for some inode to
2231 		 * become available for writeback. Otherwise
2232 		 * we'll just busyloop.
2233 		 */
2234 		trace_writeback_wait(wb, work);
2235 		inode = wb_inode(wb->b_more_io.prev);
2236 		spin_lock(&inode->i_lock);
2237 		spin_unlock(&wb->list_lock);
2238 		/* This function drops i_lock... */
2239 		inode_sleep_on_writeback(inode);
2240 	}
2241 	blk_finish_plug(&plug);
2242 
2243 	return nr_pages - work->nr_pages;
2244 }
2245 
2246 /*
2247  * Return the next wb_writeback_work struct that hasn't been processed yet.
2248  */
2249 static struct wb_writeback_work *get_next_work_item(struct bdi_writeback *wb)
2250 {
2251 	struct wb_writeback_work *work = NULL;
2252 
2253 	spin_lock_irq(&wb->work_lock);
2254 	if (!list_empty(&wb->work_list)) {
2255 		work = list_entry(wb->work_list.next,
2256 				  struct wb_writeback_work, list);
2257 		list_del_init(&work->list);
2258 	}
2259 	spin_unlock_irq(&wb->work_lock);
2260 	return work;
2261 }
2262 
2263 static long wb_check_background_flush(struct bdi_writeback *wb)
2264 {
2265 	if (wb_over_bg_thresh(wb)) {
2266 
2267 		struct wb_writeback_work work = {
2268 			.nr_pages	= LONG_MAX,
2269 			.sync_mode	= WB_SYNC_NONE,
2270 			.for_background	= 1,
2271 			.range_cyclic	= 1,
2272 			.reason		= WB_REASON_BACKGROUND,
2273 		};
2274 
2275 		return wb_writeback(wb, &work);
2276 	}
2277 
2278 	return 0;
2279 }
2280 
2281 static long wb_check_old_data_flush(struct bdi_writeback *wb)
2282 {
2283 	unsigned long expired;
2284 	long nr_pages;
2285 
2286 	/*
2287 	 * When set to zero, disable periodic writeback
2288 	 */
2289 	if (!dirty_writeback_interval)
2290 		return 0;
2291 
2292 	expired = wb->last_old_flush +
2293 			msecs_to_jiffies(dirty_writeback_interval * 10);
2294 	if (time_before(jiffies, expired))
2295 		return 0;
2296 
2297 	wb->last_old_flush = jiffies;
2298 	nr_pages = get_nr_dirty_pages();
2299 
2300 	if (nr_pages) {
2301 		struct wb_writeback_work work = {
2302 			.nr_pages	= nr_pages,
2303 			.sync_mode	= WB_SYNC_NONE,
2304 			.for_kupdate	= 1,
2305 			.range_cyclic	= 1,
2306 			.reason		= WB_REASON_PERIODIC,
2307 		};
2308 
2309 		return wb_writeback(wb, &work);
2310 	}
2311 
2312 	return 0;
2313 }
2314 
2315 static long wb_check_start_all(struct bdi_writeback *wb)
2316 {
2317 	long nr_pages;
2318 
2319 	if (!test_bit(WB_start_all, &wb->state))
2320 		return 0;
2321 
2322 	nr_pages = get_nr_dirty_pages();
2323 	if (nr_pages) {
2324 		struct wb_writeback_work work = {
2325 			.nr_pages	= wb_split_bdi_pages(wb, nr_pages),
2326 			.sync_mode	= WB_SYNC_NONE,
2327 			.range_cyclic	= 1,
2328 			.reason		= wb->start_all_reason,
2329 		};
2330 
2331 		nr_pages = wb_writeback(wb, &work);
2332 	}
2333 
2334 	clear_bit(WB_start_all, &wb->state);
2335 	return nr_pages;
2336 }
2337 
2338 
2339 /*
2340  * Retrieve work items and do the writeback they describe
2341  */
2342 static long wb_do_writeback(struct bdi_writeback *wb)
2343 {
2344 	struct wb_writeback_work *work;
2345 	long wrote = 0;
2346 
2347 	set_bit(WB_writeback_running, &wb->state);
2348 	while ((work = get_next_work_item(wb)) != NULL) {
2349 		trace_writeback_exec(wb, work);
2350 		wrote += wb_writeback(wb, work);
2351 		finish_writeback_work(work);
2352 	}
2353 
2354 	/*
2355 	 * Check for a flush-everything request
2356 	 */
2357 	wrote += wb_check_start_all(wb);
2358 
2359 	/*
2360 	 * Check for periodic writeback, kupdated() style
2361 	 */
2362 	wrote += wb_check_old_data_flush(wb);
2363 	wrote += wb_check_background_flush(wb);
2364 	clear_bit(WB_writeback_running, &wb->state);
2365 
2366 	return wrote;
2367 }
2368 
2369 /*
2370  * Handle writeback of dirty data for the device backed by this bdi. Also
2371  * reschedules periodically and does kupdated style flushing.
2372  */
2373 void wb_workfn(struct work_struct *work)
2374 {
2375 	struct bdi_writeback *wb = container_of(to_delayed_work(work),
2376 						struct bdi_writeback, dwork);
2377 	long pages_written;
2378 
2379 	set_worker_desc("flush-%s", bdi_dev_name(wb->bdi));
2380 
2381 	if (likely(!current_is_workqueue_rescuer() ||
2382 		   !test_bit(WB_registered, &wb->state))) {
2383 		/*
2384 		 * The normal path.  Keep writing back @wb until its
2385 		 * work_list is empty.  Note that this path is also taken
2386 		 * if @wb is shutting down even when we're running off the
2387 		 * rescuer as work_list needs to be drained.
2388 		 */
2389 		do {
2390 			pages_written = wb_do_writeback(wb);
2391 			trace_writeback_pages_written(pages_written);
2392 		} while (!list_empty(&wb->work_list));
2393 	} else {
2394 		/*
2395 		 * bdi_wq can't get enough workers and we're running off
2396 		 * the emergency worker.  Don't hog it.  Hopefully, 1024 is
2397 		 * enough for efficient IO.
2398 		 */
2399 		pages_written = writeback_inodes_wb(wb, 1024,
2400 						    WB_REASON_FORKER_THREAD);
2401 		trace_writeback_pages_written(pages_written);
2402 	}
2403 
2404 	if (!list_empty(&wb->work_list))
2405 		wb_wakeup(wb);
2406 	else if (wb_has_dirty_io(wb) && dirty_writeback_interval)
2407 		wb_wakeup_delayed(wb);
2408 }
2409 
2410 /*
2411  * Start writeback of all dirty pages on this bdi.
2412  */
2413 static void __wakeup_flusher_threads_bdi(struct backing_dev_info *bdi,
2414 					 enum wb_reason reason)
2415 {
2416 	struct bdi_writeback *wb;
2417 
2418 	if (!bdi_has_dirty_io(bdi))
2419 		return;
2420 
2421 	list_for_each_entry_rcu(wb, &bdi->wb_list, bdi_node)
2422 		wb_start_writeback(wb, reason);
2423 }
2424 
2425 void wakeup_flusher_threads_bdi(struct backing_dev_info *bdi,
2426 				enum wb_reason reason)
2427 {
2428 	rcu_read_lock();
2429 	__wakeup_flusher_threads_bdi(bdi, reason);
2430 	rcu_read_unlock();
2431 }
2432 
2433 /*
2434  * Wakeup the flusher threads to start writeback of all currently dirty pages
2435  */
2436 void wakeup_flusher_threads(enum wb_reason reason)
2437 {
2438 	struct backing_dev_info *bdi;
2439 
2440 	/*
2441 	 * If we are expecting writeback progress we must submit plugged IO.
2442 	 */
2443 	blk_flush_plug(current->plug, true);
2444 
2445 	rcu_read_lock();
2446 	list_for_each_entry_rcu(bdi, &bdi_list, bdi_list)
2447 		__wakeup_flusher_threads_bdi(bdi, reason);
2448 	rcu_read_unlock();
2449 }
2450 
2451 /*
2452  * Wake up bdi's periodically to make sure dirtytime inodes gets
2453  * written back periodically.  We deliberately do *not* check the
2454  * b_dirtytime list in wb_has_dirty_io(), since this would cause the
2455  * kernel to be constantly waking up once there are any dirtytime
2456  * inodes on the system.  So instead we define a separate delayed work
2457  * function which gets called much more rarely.  (By default, only
2458  * once every 12 hours.)
2459  *
2460  * If there is any other write activity going on in the file system,
2461  * this function won't be necessary.  But if the only thing that has
2462  * happened on the file system is a dirtytime inode caused by an atime
2463  * update, we need this infrastructure below to make sure that inode
2464  * eventually gets pushed out to disk.
2465  */
2466 static void wakeup_dirtytime_writeback(struct work_struct *w);
2467 static DECLARE_DELAYED_WORK(dirtytime_work, wakeup_dirtytime_writeback);
2468 
2469 static void wakeup_dirtytime_writeback(struct work_struct *w)
2470 {
2471 	struct backing_dev_info *bdi;
2472 
2473 	rcu_read_lock();
2474 	list_for_each_entry_rcu(bdi, &bdi_list, bdi_list) {
2475 		struct bdi_writeback *wb;
2476 
2477 		list_for_each_entry_rcu(wb, &bdi->wb_list, bdi_node)
2478 			if (!list_empty(&wb->b_dirty_time))
2479 				wb_wakeup(wb);
2480 	}
2481 	rcu_read_unlock();
2482 	schedule_delayed_work(&dirtytime_work, dirtytime_expire_interval * HZ);
2483 }
2484 
2485 static int dirtytime_interval_handler(const struct ctl_table *table, int write,
2486 			       void *buffer, size_t *lenp, loff_t *ppos)
2487 {
2488 	int ret;
2489 
2490 	ret = proc_dointvec_minmax(table, write, buffer, lenp, ppos);
2491 	if (ret == 0 && write)
2492 		mod_delayed_work(system_percpu_wq, &dirtytime_work, 0);
2493 	return ret;
2494 }
2495 
2496 static const struct ctl_table vm_fs_writeback_table[] = {
2497 	{
2498 		.procname	= "dirtytime_expire_seconds",
2499 		.data		= &dirtytime_expire_interval,
2500 		.maxlen		= sizeof(dirtytime_expire_interval),
2501 		.mode		= 0644,
2502 		.proc_handler	= dirtytime_interval_handler,
2503 		.extra1		= SYSCTL_ZERO,
2504 	},
2505 };
2506 
2507 static int __init start_dirtytime_writeback(void)
2508 {
2509 	schedule_delayed_work(&dirtytime_work, dirtytime_expire_interval * HZ);
2510 	register_sysctl_init("vm", vm_fs_writeback_table);
2511 	return 0;
2512 }
2513 __initcall(start_dirtytime_writeback);
2514 
2515 /**
2516  * __mark_inode_dirty -	internal function to mark an inode dirty
2517  *
2518  * @inode: inode to mark
2519  * @flags: what kind of dirty, e.g. I_DIRTY_SYNC.  This can be a combination of
2520  *	   multiple I_DIRTY_* flags, except that I_DIRTY_TIME can't be combined
2521  *	   with I_DIRTY_PAGES.
2522  *
2523  * Mark an inode as dirty.  We notify the filesystem, then update the inode's
2524  * dirty flags.  Then, if needed we add the inode to the appropriate dirty list.
2525  *
2526  * Most callers should use mark_inode_dirty() or mark_inode_dirty_sync()
2527  * instead of calling this directly.
2528  *
2529  * CAREFUL!  We only add the inode to the dirty list if it is hashed or if it
2530  * refers to a blockdev.  Unhashed inodes will never be added to the dirty list
2531  * even if they are later hashed, as they will have been marked dirty already.
2532  *
2533  * In short, ensure you hash any inodes _before_ you start marking them dirty.
2534  *
2535  * Note that for blockdevs, inode->dirtied_when represents the dirtying time of
2536  * the block-special inode (/dev/hda1) itself.  And the ->dirtied_when field of
2537  * the kernel-internal blockdev inode represents the dirtying time of the
2538  * blockdev's pages.  This is why for I_DIRTY_PAGES we always use
2539  * page->mapping->host, so the page-dirtying time is recorded in the internal
2540  * blockdev inode.
2541  */
2542 void __mark_inode_dirty(struct inode *inode, int flags)
2543 {
2544 	struct super_block *sb = inode->i_sb;
2545 	int dirtytime = 0;
2546 	struct bdi_writeback *wb = NULL;
2547 
2548 	trace_writeback_mark_inode_dirty(inode, flags);
2549 
2550 	if (flags & I_DIRTY_INODE) {
2551 		/*
2552 		 * Inode timestamp update will piggback on this dirtying.
2553 		 * We tell ->dirty_inode callback that timestamps need to
2554 		 * be updated by setting I_DIRTY_TIME in flags.
2555 		 */
2556 		if (inode_state_read_once(inode) & I_DIRTY_TIME) {
2557 			spin_lock(&inode->i_lock);
2558 			if (inode_state_read(inode) & I_DIRTY_TIME) {
2559 				inode_state_clear(inode, I_DIRTY_TIME);
2560 				flags |= I_DIRTY_TIME;
2561 			}
2562 			spin_unlock(&inode->i_lock);
2563 		}
2564 
2565 		/*
2566 		 * Notify the filesystem about the inode being dirtied, so that
2567 		 * (if needed) it can update on-disk fields and journal the
2568 		 * inode.  This is only needed when the inode itself is being
2569 		 * dirtied now.  I.e. it's only needed for I_DIRTY_INODE, not
2570 		 * for just I_DIRTY_PAGES or I_DIRTY_TIME.
2571 		 */
2572 		trace_writeback_dirty_inode_start(inode, flags);
2573 		if (sb->s_op->dirty_inode)
2574 			sb->s_op->dirty_inode(inode,
2575 				flags & (I_DIRTY_INODE | I_DIRTY_TIME));
2576 		trace_writeback_dirty_inode(inode, flags);
2577 
2578 		/* I_DIRTY_INODE supersedes I_DIRTY_TIME. */
2579 		flags &= ~I_DIRTY_TIME;
2580 	} else {
2581 		/*
2582 		 * Else it's either I_DIRTY_PAGES, I_DIRTY_TIME, or nothing.
2583 		 * (We don't support setting both I_DIRTY_PAGES and I_DIRTY_TIME
2584 		 * in one call to __mark_inode_dirty().)
2585 		 */
2586 		dirtytime = flags & I_DIRTY_TIME;
2587 		WARN_ON_ONCE(dirtytime && flags != I_DIRTY_TIME);
2588 	}
2589 
2590 	/*
2591 	 * Paired with smp_mb() in __writeback_single_inode() for the
2592 	 * following lockless i_state test.  See there for details.
2593 	 */
2594 	smp_mb();
2595 
2596 	if ((inode_state_read_once(inode) & flags) == flags)
2597 		return;
2598 
2599 	spin_lock(&inode->i_lock);
2600 	if ((inode_state_read(inode) & flags) != flags) {
2601 		const int was_dirty = inode_state_read(inode) & I_DIRTY;
2602 
2603 		inode_attach_wb(inode, NULL);
2604 
2605 		inode_state_set(inode, flags);
2606 
2607 		/*
2608 		 * Grab inode's wb early because it requires dropping i_lock and we
2609 		 * need to make sure following checks happen atomically with dirty
2610 		 * list handling so that we don't move inodes under flush worker's
2611 		 * hands.
2612 		 */
2613 		if (!was_dirty) {
2614 			wb = locked_inode_to_wb_and_lock_list(inode);
2615 			spin_lock(&inode->i_lock);
2616 		}
2617 
2618 		/*
2619 		 * If the inode is queued for writeback by flush worker, just
2620 		 * update its dirty state. Once the flush worker is done with
2621 		 * the inode it will place it on the appropriate superblock
2622 		 * list, based upon its state.
2623 		 */
2624 		if (inode_state_read(inode) & I_SYNC_QUEUED)
2625 			goto out_unlock;
2626 
2627 		/*
2628 		 * Only add valid (hashed) inodes to the superblock's
2629 		 * dirty list.  Add blockdev inodes as well.
2630 		 */
2631 		if (!S_ISBLK(inode->i_mode)) {
2632 			if (inode_unhashed(inode))
2633 				goto out_unlock;
2634 		}
2635 		if (inode_state_read(inode) & I_FREEING)
2636 			goto out_unlock;
2637 
2638 		/*
2639 		 * If the inode was already on b_dirty/b_io/b_more_io, don't
2640 		 * reposition it (that would break b_dirty time-ordering).
2641 		 */
2642 		if (!was_dirty) {
2643 			struct list_head *dirty_list;
2644 			bool wakeup_bdi = false;
2645 
2646 			inode->dirtied_when = jiffies;
2647 			if (dirtytime)
2648 				inode->dirtied_time_when = jiffies;
2649 
2650 			if (inode_state_read(inode) & I_DIRTY)
2651 				dirty_list = &wb->b_dirty;
2652 			else
2653 				dirty_list = &wb->b_dirty_time;
2654 
2655 			wakeup_bdi = inode_io_list_move_locked(inode, wb,
2656 							       dirty_list);
2657 
2658 			/*
2659 			 * If this is the first dirty inode for this bdi,
2660 			 * we have to wake-up the corresponding bdi thread
2661 			 * to make sure background write-back happens
2662 			 * later.
2663 			 */
2664 			if (wakeup_bdi &&
2665 			    (wb->bdi->capabilities & BDI_CAP_WRITEBACK))
2666 				wb_wakeup_delayed(wb);
2667 
2668 			spin_unlock(&wb->list_lock);
2669 			spin_unlock(&inode->i_lock);
2670 			trace_writeback_dirty_inode_enqueue(inode);
2671 
2672 			return;
2673 		}
2674 	}
2675 out_unlock:
2676 	if (wb)
2677 		spin_unlock(&wb->list_lock);
2678 	spin_unlock(&inode->i_lock);
2679 }
2680 EXPORT_SYMBOL(__mark_inode_dirty);
2681 
2682 /*
2683  * The @s_sync_lock is used to serialise concurrent sync operations
2684  * to avoid lock contention problems with concurrent wait_sb_inodes() calls.
2685  * Concurrent callers will block on the s_sync_lock rather than doing contending
2686  * walks. The queueing maintains sync(2) required behaviour as all the IO that
2687  * has been issued up to the time this function is enter is guaranteed to be
2688  * completed by the time we have gained the lock and waited for all IO that is
2689  * in progress regardless of the order callers are granted the lock.
2690  */
2691 static void wait_sb_inodes(struct super_block *sb)
2692 {
2693 	LIST_HEAD(sync_list);
2694 
2695 	/*
2696 	 * We need to be protected against the filesystem going from
2697 	 * r/o to r/w or vice versa.
2698 	 */
2699 	WARN_ON(!rwsem_is_locked(&sb->s_umount));
2700 
2701 	mutex_lock(&sb->s_sync_lock);
2702 
2703 	/*
2704 	 * Splice the writeback list onto a temporary list to avoid waiting on
2705 	 * inodes that have started writeback after this point.
2706 	 *
2707 	 * Use rcu_read_lock() to keep the inodes around until we have a
2708 	 * reference. s_inode_wblist_lock protects sb->s_inodes_wb as well as
2709 	 * the local list because inodes can be dropped from either by writeback
2710 	 * completion.
2711 	 */
2712 	rcu_read_lock();
2713 	spin_lock_irq(&sb->s_inode_wblist_lock);
2714 	list_splice_init(&sb->s_inodes_wb, &sync_list);
2715 
2716 	/*
2717 	 * Data integrity sync. Must wait for all pages under writeback, because
2718 	 * there may have been pages dirtied before our sync call, but which had
2719 	 * writeout started before we write it out.  In which case, the inode
2720 	 * may not be on the dirty list, but we still have to wait for that
2721 	 * writeout.
2722 	 */
2723 	while (!list_empty(&sync_list)) {
2724 		struct inode *inode = list_first_entry(&sync_list, struct inode,
2725 						       i_wb_list);
2726 		struct address_space *mapping = inode->i_mapping;
2727 
2728 		/*
2729 		 * Move each inode back to the wb list before we drop the lock
2730 		 * to preserve consistency between i_wb_list and the mapping
2731 		 * writeback tag. Writeback completion is responsible to remove
2732 		 * the inode from either list once the writeback tag is cleared.
2733 		 */
2734 		list_move_tail(&inode->i_wb_list, &sb->s_inodes_wb);
2735 
2736 		/*
2737 		 * The mapping can appear untagged while still on-list since we
2738 		 * do not have the mapping lock. Skip it here, wb completion
2739 		 * will remove it.
2740 		 */
2741 		if (!mapping_tagged(mapping, PAGECACHE_TAG_WRITEBACK))
2742 			continue;
2743 
2744 		spin_unlock_irq(&sb->s_inode_wblist_lock);
2745 
2746 		spin_lock(&inode->i_lock);
2747 		if (inode_state_read(inode) & (I_FREEING | I_WILL_FREE | I_NEW)) {
2748 			spin_unlock(&inode->i_lock);
2749 
2750 			spin_lock_irq(&sb->s_inode_wblist_lock);
2751 			continue;
2752 		}
2753 		__iget(inode);
2754 		spin_unlock(&inode->i_lock);
2755 		rcu_read_unlock();
2756 
2757 		/*
2758 		 * We keep the error status of individual mapping so that
2759 		 * applications can catch the writeback error using fsync(2).
2760 		 * See filemap_fdatawait_keep_errors() for details.
2761 		 */
2762 		filemap_fdatawait_keep_errors(mapping);
2763 
2764 		cond_resched();
2765 
2766 		iput(inode);
2767 
2768 		rcu_read_lock();
2769 		spin_lock_irq(&sb->s_inode_wblist_lock);
2770 	}
2771 	spin_unlock_irq(&sb->s_inode_wblist_lock);
2772 	rcu_read_unlock();
2773 	mutex_unlock(&sb->s_sync_lock);
2774 }
2775 
2776 static void __writeback_inodes_sb_nr(struct super_block *sb, unsigned long nr,
2777 				     enum wb_reason reason, bool skip_if_busy)
2778 {
2779 	struct backing_dev_info *bdi = sb->s_bdi;
2780 	DEFINE_WB_COMPLETION(done, bdi);
2781 	struct wb_writeback_work work = {
2782 		.sb			= sb,
2783 		.sync_mode		= WB_SYNC_NONE,
2784 		.tagged_writepages	= 1,
2785 		.done			= &done,
2786 		.nr_pages		= nr,
2787 		.reason			= reason,
2788 	};
2789 
2790 	if (!bdi_has_dirty_io(bdi) || bdi == &noop_backing_dev_info)
2791 		return;
2792 	WARN_ON(!rwsem_is_locked(&sb->s_umount));
2793 
2794 	bdi_split_work_to_wbs(sb->s_bdi, &work, skip_if_busy);
2795 	wb_wait_for_completion(&done);
2796 }
2797 
2798 /**
2799  * writeback_inodes_sb_nr -	writeback dirty inodes from given super_block
2800  * @sb: the superblock
2801  * @nr: the number of pages to write
2802  * @reason: reason why some writeback work initiated
2803  *
2804  * Start writeback on some inodes on this super_block. No guarantees are made
2805  * on how many (if any) will be written, and this function does not wait
2806  * for IO completion of submitted IO.
2807  */
2808 void writeback_inodes_sb_nr(struct super_block *sb,
2809 			    unsigned long nr,
2810 			    enum wb_reason reason)
2811 {
2812 	__writeback_inodes_sb_nr(sb, nr, reason, false);
2813 }
2814 EXPORT_SYMBOL(writeback_inodes_sb_nr);
2815 
2816 /**
2817  * writeback_inodes_sb	-	writeback dirty inodes from given super_block
2818  * @sb: the superblock
2819  * @reason: reason why some writeback work was initiated
2820  *
2821  * Start writeback on some inodes on this super_block. No guarantees are made
2822  * on how many (if any) will be written, and this function does not wait
2823  * for IO completion of submitted IO.
2824  */
2825 void writeback_inodes_sb(struct super_block *sb, enum wb_reason reason)
2826 {
2827 	writeback_inodes_sb_nr(sb, get_nr_dirty_pages(), reason);
2828 }
2829 EXPORT_SYMBOL(writeback_inodes_sb);
2830 
2831 /**
2832  * try_to_writeback_inodes_sb - try to start writeback if none underway
2833  * @sb: the superblock
2834  * @reason: reason why some writeback work was initiated
2835  *
2836  * Invoke __writeback_inodes_sb_nr if no writeback is currently underway.
2837  */
2838 void try_to_writeback_inodes_sb(struct super_block *sb, enum wb_reason reason)
2839 {
2840 	if (!down_read_trylock(&sb->s_umount))
2841 		return;
2842 
2843 	__writeback_inodes_sb_nr(sb, get_nr_dirty_pages(), reason, true);
2844 	up_read(&sb->s_umount);
2845 }
2846 EXPORT_SYMBOL(try_to_writeback_inodes_sb);
2847 
2848 /**
2849  * sync_inodes_sb	-	sync sb inode pages
2850  * @sb: the superblock
2851  *
2852  * This function writes and waits on any dirty inode belonging to this
2853  * super_block.
2854  */
2855 void sync_inodes_sb(struct super_block *sb)
2856 {
2857 	struct backing_dev_info *bdi = sb->s_bdi;
2858 	DEFINE_WB_COMPLETION(done, bdi);
2859 	struct wb_writeback_work work = {
2860 		.sb		= sb,
2861 		.sync_mode	= WB_SYNC_ALL,
2862 		.nr_pages	= LONG_MAX,
2863 		.range_cyclic	= 0,
2864 		.done		= &done,
2865 		.reason		= WB_REASON_SYNC,
2866 		.for_sync	= 1,
2867 	};
2868 
2869 	/*
2870 	 * Can't skip on !bdi_has_dirty() because we should wait for !dirty
2871 	 * inodes under writeback and I_DIRTY_TIME inodes ignored by
2872 	 * bdi_has_dirty() need to be written out too.
2873 	 */
2874 	if (bdi == &noop_backing_dev_info)
2875 		return;
2876 	WARN_ON(!rwsem_is_locked(&sb->s_umount));
2877 
2878 	/* protect against inode wb switch, see inode_switch_wbs_work_fn() */
2879 	bdi_down_write_wb_switch_rwsem(bdi);
2880 	bdi_split_work_to_wbs(bdi, &work, false);
2881 	wb_wait_for_completion(&done);
2882 	bdi_up_write_wb_switch_rwsem(bdi);
2883 
2884 	wait_sb_inodes(sb);
2885 }
2886 EXPORT_SYMBOL(sync_inodes_sb);
2887 
2888 /**
2889  * write_inode_now	-	write an inode to disk
2890  * @inode: inode to write to disk
2891  * @sync: whether the write should be synchronous or not
2892  *
2893  * This function commits an inode to disk immediately if it is dirty. This is
2894  * primarily needed by knfsd.
2895  *
2896  * The caller must either have a ref on the inode or must have set I_WILL_FREE.
2897  */
2898 int write_inode_now(struct inode *inode, int sync)
2899 {
2900 	struct writeback_control wbc = {
2901 		.nr_to_write = LONG_MAX,
2902 		.sync_mode = sync ? WB_SYNC_ALL : WB_SYNC_NONE,
2903 		.range_start = 0,
2904 		.range_end = LLONG_MAX,
2905 	};
2906 
2907 	if (!mapping_can_writeback(inode->i_mapping))
2908 		wbc.nr_to_write = 0;
2909 
2910 	might_sleep();
2911 	return writeback_single_inode(inode, &wbc);
2912 }
2913 EXPORT_SYMBOL(write_inode_now);
2914 
2915 /**
2916  * sync_inode_metadata - write an inode to disk
2917  * @inode: the inode to sync
2918  * @wait: wait for I/O to complete.
2919  *
2920  * Write an inode to disk and adjust its dirty state after completion.
2921  *
2922  * Note: only writes the actual inode, no associated data or other metadata.
2923  */
2924 int sync_inode_metadata(struct inode *inode, int wait)
2925 {
2926 	struct writeback_control wbc = {
2927 		.sync_mode = wait ? WB_SYNC_ALL : WB_SYNC_NONE,
2928 		.nr_to_write = 0, /* metadata-only */
2929 	};
2930 
2931 	return writeback_single_inode(inode, &wbc);
2932 }
2933 EXPORT_SYMBOL(sync_inode_metadata);
2934