xref: /titanic_41/usr/src/uts/common/fs/ufs/ufs_vfsops.c (revision d29b2c4438482eb00488be49a1f5d6835f455546)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 /*
22  * Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
23  * Use is subject to license terms.
24  */
25 
26 /*	Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T	*/
27 /*	  All Rights Reserved  	*/
28 
29 /*
30  * University Copyright- Copyright (c) 1982, 1986, 1988
31  * The Regents of the University of California
32  * All Rights Reserved
33  *
34  * University Acknowledgment- Portions of this document are derived from
35  * software developed by the University of California, Berkeley, and its
36  * contributors.
37  */
38 
39 
40 #pragma ident	"%Z%%M%	%I%	%E% SMI"
41 
42 #include <sys/types.h>
43 #include <sys/t_lock.h>
44 #include <sys/param.h>
45 #include <sys/systm.h>
46 #include <sys/bitmap.h>
47 #include <sys/sysmacros.h>
48 #include <sys/kmem.h>
49 #include <sys/signal.h>
50 #include <sys/user.h>
51 #include <sys/proc.h>
52 #include <sys/disp.h>
53 #include <sys/buf.h>
54 #include <sys/pathname.h>
55 #include <sys/vfs.h>
56 #include <sys/vfs_opreg.h>
57 #include <sys/vnode.h>
58 #include <sys/file.h>
59 #include <sys/atomic.h>
60 #include <sys/uio.h>
61 #include <sys/dkio.h>
62 #include <sys/cred.h>
63 #include <sys/conf.h>
64 #include <sys/dnlc.h>
65 #include <sys/kstat.h>
66 #include <sys/acl.h>
67 #include <sys/fs/ufs_fsdir.h>
68 #include <sys/fs/ufs_fs.h>
69 #include <sys/fs/ufs_inode.h>
70 #include <sys/fs/ufs_mount.h>
71 #include <sys/fs/ufs_acl.h>
72 #include <sys/fs/ufs_panic.h>
73 #include <sys/fs/ufs_bio.h>
74 #include <sys/fs/ufs_quota.h>
75 #include <sys/fs/ufs_log.h>
76 #undef NFS
77 #include <sys/statvfs.h>
78 #include <sys/mount.h>
79 #include <sys/mntent.h>
80 #include <sys/swap.h>
81 #include <sys/errno.h>
82 #include <sys/debug.h>
83 #include "fs/fs_subr.h"
84 #include <sys/cmn_err.h>
85 #include <sys/dnlc.h>
86 #include <sys/fssnap_if.h>
87 #include <sys/sunddi.h>
88 #include <sys/bootconf.h>
89 #include <sys/policy.h>
90 #include <sys/zone.h>
91 
92 /*
93  * This is the loadable module wrapper.
94  */
95 #include <sys/modctl.h>
96 
97 int			ufsfstype;
98 vfsops_t		*ufs_vfsops;
99 static int		ufsinit(int, char *);
100 static int		mountfs();
101 extern int		highbit();
102 extern struct instats	ins;
103 extern struct vnode *common_specvp(struct vnode *vp);
104 extern vfs_t		EIO_vfs;
105 
106 struct  dquot *dquot, *dquotNDQUOT;
107 
108 /*
109  * Cylinder group summary information handling tunable.
110  * This defines when these deltas get logged.
111  * If the number of cylinders in the file system is over the
112  * tunable then we log csum updates. Otherwise the updates are only
113  * done for performance on unmount. After a panic they can be
114  * quickly constructed during mounting. See ufs_construct_si()
115  * called from ufs_getsummaryinfo().
116  *
117  * This performance feature can of course be disabled by setting
118  * ufs_ncg_log to 0, and fully enabled by setting it to 0xffffffff.
119  */
120 #define	UFS_LOG_NCG_DEFAULT 10000
121 uint32_t ufs_ncg_log = UFS_LOG_NCG_DEFAULT;
122 
123 /*
124  * ufs_clean_root indicates whether the root fs went down cleanly
125  */
126 static int ufs_clean_root = 0;
127 
128 /*
129  * UFS Mount options table
130  */
131 static char *intr_cancel[] = { MNTOPT_NOINTR, NULL };
132 static char *nointr_cancel[] = { MNTOPT_INTR, NULL };
133 static char *forcedirectio_cancel[] = { MNTOPT_NOFORCEDIRECTIO, NULL };
134 static char *noforcedirectio_cancel[] = { MNTOPT_FORCEDIRECTIO, NULL };
135 static char *largefiles_cancel[] = { MNTOPT_NOLARGEFILES, NULL };
136 static char *nolargefiles_cancel[] = { MNTOPT_LARGEFILES, NULL };
137 static char *logging_cancel[] = { MNTOPT_NOLOGGING, NULL };
138 static char *nologging_cancel[] = { MNTOPT_LOGGING, NULL };
139 static char *xattr_cancel[] = { MNTOPT_NOXATTR, NULL };
140 static char *noxattr_cancel[] = { MNTOPT_XATTR, NULL };
141 static char *quota_cancel[] = { MNTOPT_NOQUOTA, NULL };
142 static char *noquota_cancel[] = { MNTOPT_QUOTA, NULL };
143 static char *dfratime_cancel[] = { MNTOPT_NODFRATIME, NULL };
144 static char *nodfratime_cancel[] = { MNTOPT_DFRATIME, NULL };
145 
146 static mntopt_t mntopts[] = {
147 /*
148  *	option name		cancel option	default arg	flags
149  *		ufs arg flag
150  */
151 	{ MNTOPT_INTR,		intr_cancel,	NULL,		MO_DEFAULT,
152 		(void *)0 },
153 	{ MNTOPT_NOINTR,	nointr_cancel,	NULL,		0,
154 		(void *)UFSMNT_NOINTR },
155 	{ MNTOPT_SYNCDIR,	NULL,		NULL,		0,
156 		(void *)UFSMNT_SYNCDIR },
157 	{ MNTOPT_FORCEDIRECTIO,	forcedirectio_cancel, NULL,	0,
158 		(void *)UFSMNT_FORCEDIRECTIO },
159 	{ MNTOPT_NOFORCEDIRECTIO, noforcedirectio_cancel, NULL, 0,
160 		(void *)UFSMNT_NOFORCEDIRECTIO },
161 	{ MNTOPT_NOSETSEC,	NULL,		NULL,		0,
162 		(void *)UFSMNT_NOSETSEC },
163 	{ MNTOPT_LARGEFILES,	largefiles_cancel, NULL,	MO_DEFAULT,
164 		(void *)UFSMNT_LARGEFILES },
165 	{ MNTOPT_NOLARGEFILES,	nolargefiles_cancel, NULL,	0,
166 		(void *)0 },
167 	{ MNTOPT_LOGGING,	logging_cancel, NULL,		MO_TAG,
168 		(void *)UFSMNT_LOGGING },
169 	{ MNTOPT_NOLOGGING,	nologging_cancel, NULL,
170 		MO_NODISPLAY|MO_DEFAULT|MO_TAG, (void *)0 },
171 	{ MNTOPT_QUOTA,		quota_cancel, NULL,		MO_IGNORE,
172 		(void *)0 },
173 	{ MNTOPT_NOQUOTA,	noquota_cancel,	NULL,
174 		MO_NODISPLAY|MO_DEFAULT, (void *)0 },
175 	{ MNTOPT_GLOBAL,	NULL,		NULL,		0,
176 		(void *)0 },
177 	{ MNTOPT_XATTR,	xattr_cancel,		NULL,		MO_DEFAULT,
178 		(void *)0 },
179 	{ MNTOPT_NOXATTR,	noxattr_cancel,		NULL,		0,
180 		(void *)0 },
181 	{ MNTOPT_NOATIME,	NULL,		NULL,		0,
182 		(void *)UFSMNT_NOATIME },
183 	{ MNTOPT_DFRATIME,	dfratime_cancel, NULL,		0,
184 		(void *)0 },
185 	{ MNTOPT_NODFRATIME,	nodfratime_cancel, NULL,
186 		MO_NODISPLAY|MO_DEFAULT, (void *)UFSMNT_NODFRATIME },
187 	{ MNTOPT_ONERROR,	NULL,		UFSMNT_ONERROR_PANIC_STR,
188 		MO_DEFAULT|MO_HASVALUE,	(void *)0 },
189 };
190 
191 static mntopts_t ufs_mntopts = {
192 	sizeof (mntopts) / sizeof (mntopt_t),
193 	mntopts
194 };
195 
196 static vfsdef_t vfw = {
197 	VFSDEF_VERSION,
198 	"ufs",
199 	ufsinit,
200 	VSW_HASPROTO|VSW_CANREMOUNT|VSW_STATS,
201 	&ufs_mntopts
202 };
203 
204 /*
205  * Module linkage information for the kernel.
206  */
207 extern struct mod_ops mod_fsops;
208 
209 static struct modlfs modlfs = {
210 	&mod_fsops, "filesystem for ufs", &vfw
211 };
212 
213 static struct modlinkage modlinkage = {
214 	MODREV_1, (void *)&modlfs, NULL
215 };
216 
217 /*
218  * An attempt has been made to make this module unloadable.  In order to
219  * test it, we need a system in which the root fs is NOT ufs.  THIS HAS NOT
220  * BEEN DONE
221  */
222 
223 extern kstat_t *ufs_inode_kstat;
224 extern uint_t ufs_lockfs_key;
225 extern void ufs_lockfs_tsd_destructor(void *);
226 extern uint_t bypass_snapshot_throttle_key;
227 
228 int
229 _init(void)
230 {
231 	/*
232 	 * Create an index into the per thread array so that any thread doing
233 	 * VOP will have a lockfs mark on it.
234 	 */
235 	tsd_create(&ufs_lockfs_key, ufs_lockfs_tsd_destructor);
236 	tsd_create(&bypass_snapshot_throttle_key, NULL);
237 	return (mod_install(&modlinkage));
238 }
239 
240 int
241 _fini(void)
242 {
243 	return (EBUSY);
244 }
245 
246 int
247 _info(struct modinfo *modinfop)
248 {
249 	return (mod_info(&modlinkage, modinfop));
250 }
251 
252 extern struct vnode *makespecvp(dev_t dev, vtype_t type);
253 
254 extern kmutex_t	ufs_scan_lock;
255 
256 static int mountfs(struct vfs *, enum whymountroot, struct vnode *, char *,
257 		struct cred *, int, void *, int);
258 
259 
260 static int
261 ufs_mount(struct vfs *vfsp, struct vnode *mvp, struct mounta *uap,
262 	struct cred *cr)
263 
264 {
265 	char *data = uap->dataptr;
266 	int datalen = uap->datalen;
267 	dev_t dev;
268 	struct vnode *bvp;
269 	struct pathname dpn;
270 	int error;
271 	enum whymountroot why = ROOT_INIT;
272 	struct ufs_args args;
273 	int oflag, aflag;
274 	int fromspace = (uap->flags & MS_SYSSPACE) ?
275 	    UIO_SYSSPACE : UIO_USERSPACE;
276 
277 	if ((error = secpolicy_fs_mount(cr, mvp, vfsp)) != 0)
278 		return (error);
279 
280 	if (mvp->v_type != VDIR)
281 		return (ENOTDIR);
282 
283 	mutex_enter(&mvp->v_lock);
284 	if ((uap->flags & MS_REMOUNT) == 0 &&
285 	    (uap->flags & MS_OVERLAY) == 0 &&
286 	    (mvp->v_count != 1 || (mvp->v_flag & VROOT))) {
287 		mutex_exit(&mvp->v_lock);
288 		return (EBUSY);
289 	}
290 	mutex_exit(&mvp->v_lock);
291 
292 	/*
293 	 * Get arguments
294 	 */
295 	bzero(&args, sizeof (args));
296 	if ((uap->flags & MS_DATA) && data != NULL && datalen != 0) {
297 		int copy_result = 0;
298 
299 		if (datalen > sizeof (args))
300 			return (EINVAL);
301 		if (uap->flags & MS_SYSSPACE)
302 			bcopy(data, &args, datalen);
303 		else
304 			copy_result = copyin(data, &args, datalen);
305 		if (copy_result)
306 			return (EFAULT);
307 		datalen = sizeof (struct ufs_args);
308 	} else {
309 		datalen = 0;
310 	}
311 	/*
312 	 * Read in the mount point pathname
313 	 * (so we can record the directory the file system was last mounted on).
314 	 */
315 	if (error = pn_get(uap->dir, fromspace, &dpn))
316 		return (error);
317 
318 	/*
319 	 * Resolve path name of special file being mounted.
320 	 */
321 	if (error = lookupname(uap->spec, fromspace, FOLLOW, NULL, &bvp)) {
322 		pn_free(&dpn);
323 		return (error);
324 	}
325 	if (bvp->v_type != VBLK) {
326 		VN_RELE(bvp);
327 		pn_free(&dpn);
328 		return (ENOTBLK);
329 	}
330 	dev = bvp->v_rdev;
331 	if (getmajor(dev) >= devcnt) {
332 		pn_free(&dpn);
333 		VN_RELE(bvp);
334 		return (ENXIO);
335 	}
336 	if (uap->flags & MS_REMOUNT)
337 		why = ROOT_REMOUNT;
338 
339 	/*
340 	 * In SunCluster, requests to a global device are satisfied by
341 	 * a local device. We substitute the global pxfs node with a
342 	 * local spec node here.
343 	 */
344 	if (IS_PXFSVP(bvp)) {
345 		VN_RELE(bvp);
346 		bvp = makespecvp(dev, VBLK);
347 	}
348 
349 	/*
350 	 * Open block device mounted on.  We need this to
351 	 * check whether the caller has sufficient rights to
352 	 * access the device in question.
353 	 * When bio is fixed for vnodes this can all be vnode
354 	 * operations.
355 	 */
356 	if ((vfsp->vfs_flag & VFS_RDONLY) != 0 ||
357 	    (uap->flags & MS_RDONLY) != 0) {
358 		oflag = FREAD;
359 		aflag = VREAD;
360 	} else {
361 		oflag = FREAD | FWRITE;
362 		aflag = VREAD | VWRITE;
363 	}
364 	if ((error = VOP_ACCESS(bvp, aflag, 0, cr)) != 0 ||
365 	    (error = secpolicy_spec_open(cr, bvp, oflag)) != 0) {
366 		pn_free(&dpn);
367 		VN_RELE(bvp);
368 		return (error);
369 	}
370 
371 	/*
372 	 * Ensure that this device isn't already mounted or in progress on a
373 	 * mount unless this is a REMOUNT request or we are told to suppress
374 	 * mount checks. Global mounts require special handling.
375 	 */
376 	if ((uap->flags & MS_NOCHECK) == 0) {
377 		if ((uap->flags & MS_GLOBAL) == 0 &&
378 		    vfs_devmounting(dev, vfsp)) {
379 			pn_free(&dpn);
380 			VN_RELE(bvp);
381 			return (EBUSY);
382 		}
383 		if (vfs_devismounted(dev)) {
384 			if ((uap->flags & MS_REMOUNT) == 0) {
385 				pn_free(&dpn);
386 				VN_RELE(bvp);
387 				return (EBUSY);
388 			}
389 		}
390 	}
391 
392 	/*
393 	 * If the device is a tape, mount it read only
394 	 */
395 	if (devopsp[getmajor(dev)]->devo_cb_ops->cb_flag & D_TAPE) {
396 		vfsp->vfs_flag |= VFS_RDONLY;
397 		vfs_setmntopt(vfsp, MNTOPT_RO, NULL, 0);
398 	}
399 	if (uap->flags & MS_RDONLY)
400 		vfsp->vfs_flag |= VFS_RDONLY;
401 
402 	/*
403 	 * Mount the filesystem, free the device vnode on error.
404 	 */
405 	error = mountfs(vfsp, why, bvp, dpn.pn_path, cr, 0, &args, datalen);
406 	pn_free(&dpn);
407 	if (error) {
408 		VN_RELE(bvp);
409 	}
410 	return (error);
411 }
412 /*
413  * Mount root file system.
414  * "why" is ROOT_INIT on initial call ROOT_REMOUNT if called to
415  * remount the root file system, and ROOT_UNMOUNT if called to
416  * unmount the root (e.g., as part of a system shutdown).
417  *
418  * XXX - this may be partially machine-dependent; it, along with the VFS_SWAPVP
419  * operation, goes along with auto-configuration.  A mechanism should be
420  * provided by which machine-INdependent code in the kernel can say "get me the
421  * right root file system" and "get me the right initial swap area", and have
422  * that done in what may well be a machine-dependent fashion.
423  * Unfortunately, it is also file-system-type dependent (NFS gets it via
424  * bootparams calls, UFS gets it from various and sundry machine-dependent
425  * mechanisms, as SPECFS does for swap).
426  */
427 static int
428 ufs_mountroot(struct vfs *vfsp, enum whymountroot why)
429 {
430 	struct fs *fsp;
431 	int error;
432 	static int ufsrootdone = 0;
433 	dev_t rootdev;
434 	struct vnode *vp;
435 	struct vnode *devvp = 0;
436 	int ovflags;
437 	int doclkset;
438 	ufsvfs_t *ufsvfsp;
439 
440 	if (why == ROOT_INIT) {
441 		if (ufsrootdone++)
442 			return (EBUSY);
443 		rootdev = getrootdev();
444 		if (rootdev == (dev_t)NODEV)
445 			return (ENODEV);
446 		vfsp->vfs_dev = rootdev;
447 		vfsp->vfs_flag |= VFS_RDONLY;
448 	} else if (why == ROOT_REMOUNT) {
449 		vp = ((struct ufsvfs *)vfsp->vfs_data)->vfs_devvp;
450 		(void) dnlc_purge_vfsp(vfsp, 0);
451 		vp = common_specvp(vp);
452 		(void) VOP_PUTPAGE(vp, (offset_t)0, (size_t)0, B_INVAL, CRED());
453 		(void) bfinval(vfsp->vfs_dev, 0);
454 		fsp = getfs(vfsp);
455 
456 		ovflags = vfsp->vfs_flag;
457 		vfsp->vfs_flag &= ~VFS_RDONLY;
458 		vfsp->vfs_flag |= VFS_REMOUNT;
459 		rootdev = vfsp->vfs_dev;
460 	} else if (why == ROOT_UNMOUNT) {
461 		if (vfs_lock(vfsp) == 0) {
462 			(void) ufs_flush(vfsp);
463 			/*
464 			 * Mark the log as fully rolled
465 			 */
466 			ufsvfsp = (ufsvfs_t *)vfsp->vfs_data;
467 			fsp = ufsvfsp->vfs_fs;
468 			if (TRANS_ISTRANS(ufsvfsp) &&
469 			    !TRANS_ISERROR(ufsvfsp) &&
470 			    (fsp->fs_rolled == FS_NEED_ROLL)) {
471 				ml_unit_t *ul = ufsvfsp->vfs_log;
472 
473 				error = ufs_putsummaryinfo(ul->un_dev,
474 				    ufsvfsp, fsp);
475 				if (error == 0) {
476 					fsp->fs_rolled = FS_ALL_ROLLED;
477 					UFS_BWRITE2(NULL, ufsvfsp->vfs_bufp);
478 				}
479 			}
480 			vfs_unlock(vfsp);
481 		} else {
482 			ufs_update(0);
483 		}
484 
485 		vp = ((struct ufsvfs *)vfsp->vfs_data)->vfs_devvp;
486 		(void) VOP_CLOSE(vp, FREAD|FWRITE, 1,
487 		    (offset_t)0, CRED());
488 		return (0);
489 	}
490 	error = vfs_lock(vfsp);
491 	if (error)
492 		return (error);
493 
494 	devvp = makespecvp(rootdev, VBLK);
495 
496 	/* If RO media, don't call clkset() (see below) */
497 	doclkset = 1;
498 	if (why == ROOT_INIT) {
499 		error = VOP_OPEN(&devvp, FREAD|FWRITE, CRED());
500 		if (error == 0) {
501 			(void) VOP_CLOSE(devvp, FREAD|FWRITE, 1,
502 			    (offset_t)0, CRED());
503 		} else {
504 			doclkset = 0;
505 		}
506 	}
507 
508 	error = mountfs(vfsp, why, devvp, "/", CRED(), 1, NULL, 0);
509 	/*
510 	 * XXX - assumes root device is not indirect, because we don't set
511 	 * rootvp.  Is rootvp used for anything?  If so, make another arg
512 	 * to mountfs.
513 	 */
514 	if (error) {
515 		vfs_unlock(vfsp);
516 		if (why == ROOT_REMOUNT)
517 			vfsp->vfs_flag = ovflags;
518 		if (rootvp) {
519 			VN_RELE(rootvp);
520 			rootvp = (struct vnode *)0;
521 		}
522 		VN_RELE(devvp);
523 		return (error);
524 	}
525 	if (why == ROOT_INIT)
526 		vfs_add((struct vnode *)0, vfsp,
527 		    (vfsp->vfs_flag & VFS_RDONLY) ? MS_RDONLY : 0);
528 	vfs_unlock(vfsp);
529 	fsp = getfs(vfsp);
530 	clkset(doclkset ? fsp->fs_time : -1);
531 	ufsvfsp = (ufsvfs_t *)vfsp->vfs_data;
532 	if (ufsvfsp->vfs_log) {
533 		vfs_setmntopt(vfsp, MNTOPT_LOGGING, NULL, 0);
534 	}
535 	return (0);
536 }
537 
538 static int
539 remountfs(struct vfs *vfsp, dev_t dev, void *raw_argsp, int args_len)
540 {
541 	struct ufsvfs *ufsvfsp = (struct ufsvfs *)vfsp->vfs_data;
542 	struct ulockfs *ulp = &ufsvfsp->vfs_ulockfs;
543 	struct buf *bp = ufsvfsp->vfs_bufp;
544 	struct fs *fsp = (struct fs *)bp->b_un.b_addr;
545 	struct fs *fspt;
546 	struct buf *tpt = 0;
547 	int error = 0;
548 	int flags = 0;
549 
550 	if (args_len == sizeof (struct ufs_args) && raw_argsp)
551 		flags = ((struct ufs_args *)raw_argsp)->flags;
552 
553 	/* cannot remount to RDONLY */
554 	if (vfsp->vfs_flag & VFS_RDONLY)
555 		return (ENOTSUP);
556 
557 	/* whoops, wrong dev */
558 	if (vfsp->vfs_dev != dev)
559 		return (EINVAL);
560 
561 	/*
562 	 * synchronize w/ufs ioctls
563 	 */
564 	mutex_enter(&ulp->ul_lock);
565 	atomic_add_long(&ufs_quiesce_pend, 1);
566 
567 	/*
568 	 * reset options
569 	 */
570 	ufsvfsp->vfs_nointr  = flags & UFSMNT_NOINTR;
571 	ufsvfsp->vfs_syncdir = flags & UFSMNT_SYNCDIR;
572 	ufsvfsp->vfs_nosetsec = flags & UFSMNT_NOSETSEC;
573 	ufsvfsp->vfs_noatime = flags & UFSMNT_NOATIME;
574 	if ((flags & UFSMNT_NODFRATIME) || ufsvfsp->vfs_noatime)
575 		ufsvfsp->vfs_dfritime &= ~UFS_DFRATIME;
576 	else	/* dfratime, default behavior */
577 		ufsvfsp->vfs_dfritime |= UFS_DFRATIME;
578 	if (flags & UFSMNT_FORCEDIRECTIO)
579 		ufsvfsp->vfs_forcedirectio = 1;
580 	else	/* default is no direct I/O */
581 		ufsvfsp->vfs_forcedirectio = 0;
582 	ufsvfsp->vfs_iotstamp = lbolt;
583 
584 	/*
585 	 * set largefiles flag in ufsvfs equal to the
586 	 * value passed in by the mount command. If
587 	 * it is "nolargefiles", and the flag is set
588 	 * in the superblock, the mount fails.
589 	 */
590 	if (!(flags & UFSMNT_LARGEFILES)) {  /* "nolargefiles" */
591 		if (fsp->fs_flags & FSLARGEFILES) {
592 			error = EFBIG;
593 			goto remounterr;
594 		}
595 		ufsvfsp->vfs_lfflags &= ~UFS_LARGEFILES;
596 	} else	/* "largefiles" */
597 		ufsvfsp->vfs_lfflags |= UFS_LARGEFILES;
598 	/*
599 	 * read/write to read/write; all done
600 	 */
601 	if (fsp->fs_ronly == 0)
602 		goto remounterr;
603 
604 	/*
605 	 * fix-on-panic assumes RO->RW remount implies system-critical fs
606 	 * if it is shortly after boot; so, don't attempt to lock and fix
607 	 * (unless the user explicitly asked for another action on error)
608 	 * XXX UFSMNT_ONERROR_RDONLY rather than UFSMNT_ONERROR_PANIC
609 	 */
610 #define	BOOT_TIME_LIMIT	(180*hz)
611 	if (!(flags & UFSMNT_ONERROR_FLGMASK) && lbolt < BOOT_TIME_LIMIT) {
612 		cmn_err(CE_WARN, "%s is required to be mounted onerror=%s",
613 		    ufsvfsp->vfs_fs->fs_fsmnt, UFSMNT_ONERROR_PANIC_STR);
614 		flags |= UFSMNT_ONERROR_PANIC;
615 	}
616 
617 	if ((error = ufsfx_mount(ufsvfsp, flags)) != 0)
618 		goto remounterr;
619 
620 	/*
621 	 * quiesce the file system
622 	 */
623 	error = ufs_quiesce(ulp);
624 	if (error)
625 		goto remounterr;
626 
627 	tpt = UFS_BREAD(ufsvfsp, ufsvfsp->vfs_dev, SBLOCK, SBSIZE);
628 	if (tpt->b_flags & B_ERROR) {
629 		error = EIO;
630 		goto remounterr;
631 	}
632 	fspt = (struct fs *)tpt->b_un.b_addr;
633 	if (((fspt->fs_magic != FS_MAGIC) &&
634 	    (fspt->fs_magic != MTB_UFS_MAGIC)) ||
635 	    (fspt->fs_magic == FS_MAGIC &&
636 	    (fspt->fs_version != UFS_EFISTYLE4NONEFI_VERSION_2 &&
637 	    fspt->fs_version != UFS_VERSION_MIN)) ||
638 	    (fspt->fs_magic == MTB_UFS_MAGIC &&
639 	    (fspt->fs_version > MTB_UFS_VERSION_1 ||
640 	    fspt->fs_version < MTB_UFS_VERSION_MIN)) ||
641 	    fspt->fs_bsize > MAXBSIZE || fspt->fs_frag > MAXFRAG ||
642 	    fspt->fs_bsize < sizeof (struct fs) || fspt->fs_bsize < PAGESIZE) {
643 		tpt->b_flags |= B_STALE | B_AGE;
644 		error = EINVAL;
645 		goto remounterr;
646 	}
647 
648 	if (ufsvfsp->vfs_log && (ufsvfsp->vfs_log->un_flags & LDL_NOROLL)) {
649 		ufsvfsp->vfs_log->un_flags &= ~LDL_NOROLL;
650 		logmap_start_roll(ufsvfsp->vfs_log);
651 	}
652 
653 	if (TRANS_ISERROR(ufsvfsp))
654 		goto remounterr;
655 	TRANS_DOMATAMAP(ufsvfsp);
656 
657 	if ((fspt->fs_state + fspt->fs_time == FSOKAY) &&
658 	    fspt->fs_clean == FSLOG && !TRANS_ISTRANS(ufsvfsp)) {
659 		ufsvfsp->vfs_log = NULL;
660 		ufsvfsp->vfs_domatamap = 0;
661 		error = ENOSPC;
662 		goto remounterr;
663 	}
664 
665 	if (fspt->fs_state + fspt->fs_time == FSOKAY &&
666 	    (fspt->fs_clean == FSCLEAN ||
667 	    fspt->fs_clean == FSSTABLE ||
668 	    fspt->fs_clean == FSLOG)) {
669 
670 		/*
671 		 * Ensure that ufs_getsummaryinfo doesn't reconstruct
672 		 * the summary info.
673 		 */
674 		error = ufs_getsummaryinfo(vfsp->vfs_dev, ufsvfsp, fspt);
675 		if (error)
676 			goto remounterr;
677 
678 		/* preserve mount name */
679 		(void) strncpy(fspt->fs_fsmnt, fsp->fs_fsmnt, MAXMNTLEN);
680 		/* free the old cg space */
681 		kmem_free(fsp->fs_u.fs_csp, fsp->fs_cssize);
682 		/* switch in the new superblock */
683 		fspt->fs_rolled = FS_NEED_ROLL;
684 		bcopy(tpt->b_un.b_addr, bp->b_un.b_addr, fspt->fs_sbsize);
685 
686 		fsp->fs_clean = FSSTABLE;
687 	} /* superblock updated in memory */
688 	tpt->b_flags |= B_STALE | B_AGE;
689 	brelse(tpt);
690 	tpt = 0;
691 
692 	if (fsp->fs_clean != FSSTABLE) {
693 		error = ENOSPC;
694 		goto remounterr;
695 	}
696 
697 
698 	if (TRANS_ISTRANS(ufsvfsp)) {
699 		fsp->fs_clean = FSLOG;
700 		ufsvfsp->vfs_dio = 0;
701 	} else
702 		if (ufsvfsp->vfs_dio)
703 			fsp->fs_clean = FSSUSPEND;
704 
705 	TRANS_MATA_MOUNT(ufsvfsp);
706 
707 	fsp->fs_fmod = 0;
708 	fsp->fs_ronly = 0;
709 
710 	atomic_add_long(&ufs_quiesce_pend, -1);
711 	cv_broadcast(&ulp->ul_cv);
712 	mutex_exit(&ulp->ul_lock);
713 
714 	if (TRANS_ISTRANS(ufsvfsp)) {
715 
716 		/*
717 		 * start the delete thread
718 		 */
719 		ufs_thread_start(&ufsvfsp->vfs_delete, ufs_thread_delete, vfsp);
720 
721 		/*
722 		 * start the reclaim thread
723 		 */
724 		if (fsp->fs_reclaim & (FS_RECLAIM|FS_RECLAIMING)) {
725 			fsp->fs_reclaim &= ~FS_RECLAIM;
726 			fsp->fs_reclaim |=  FS_RECLAIMING;
727 			ufs_thread_start(&ufsvfsp->vfs_reclaim,
728 			    ufs_thread_reclaim, vfsp);
729 		}
730 	}
731 
732 	TRANS_SBWRITE(ufsvfsp, TOP_MOUNT);
733 
734 	return (0);
735 
736 remounterr:
737 	if (tpt)
738 		brelse(tpt);
739 	atomic_add_long(&ufs_quiesce_pend, -1);
740 	cv_broadcast(&ulp->ul_cv);
741 	mutex_exit(&ulp->ul_lock);
742 	return (error);
743 }
744 
745 /*
746  * If the device maxtransfer size is not available, we use ufs_maxmaxphys
747  * along with the system value for maxphys to determine the value for
748  * maxtransfer.
749  */
750 int ufs_maxmaxphys = (1024 * 1024);
751 
752 #include <sys/ddi.h>		/* for delay(9f) */
753 
754 int ufs_mount_error_delay = 20;	/* default to 20ms */
755 int ufs_mount_timeout = 60000;	/* default to 1 minute */
756 
757 static int
758 mountfs(struct vfs *vfsp, enum whymountroot why, struct vnode *devvp,
759 	char *path, cred_t *cr, int isroot, void *raw_argsp, int args_len)
760 {
761 	dev_t dev = devvp->v_rdev;
762 	struct fs *fsp;
763 	struct ufsvfs *ufsvfsp = 0;
764 	struct buf *bp = 0;
765 	struct buf *tp = 0;
766 	struct dk_cinfo ci;
767 	int error = 0;
768 	size_t len;
769 	int needclose = 0;
770 	int needtrans = 0;
771 	struct inode *rip;
772 	struct vnode *rvp = NULL;
773 	int flags = 0;
774 	kmutex_t *ihm;
775 	int elapsed;
776 	int status;
777 	extern	int	maxphys;
778 
779 	if (args_len == sizeof (struct ufs_args) && raw_argsp)
780 		flags = ((struct ufs_args *)raw_argsp)->flags;
781 
782 	ASSERT(vfs_lock_held(vfsp));
783 
784 	if (why == ROOT_INIT) {
785 		/*
786 		 * Open block device mounted on.
787 		 * When bio is fixed for vnodes this can all be vnode
788 		 * operations.
789 		 */
790 		error = VOP_OPEN(&devvp,
791 		    (vfsp->vfs_flag & VFS_RDONLY) ? FREAD : FREAD|FWRITE, cr);
792 		if (error)
793 			goto out;
794 		needclose = 1;
795 
796 		/*
797 		 * Refuse to go any further if this
798 		 * device is being used for swapping.
799 		 */
800 		if (IS_SWAPVP(devvp)) {
801 			error = EBUSY;
802 			goto out;
803 		}
804 	}
805 
806 	/*
807 	 * check for dev already mounted on
808 	 */
809 	if (vfsp->vfs_flag & VFS_REMOUNT) {
810 		error = remountfs(vfsp, dev, raw_argsp, args_len);
811 		if (error == 0)
812 			VN_RELE(devvp);
813 		return (error);
814 	}
815 
816 	ASSERT(devvp != 0);
817 
818 	/*
819 	 * Flush back any dirty pages on the block device to
820 	 * try and keep the buffer cache in sync with the page
821 	 * cache if someone is trying to use block devices when
822 	 * they really should be using the raw device.
823 	 */
824 	(void) VOP_PUTPAGE(common_specvp(devvp), (offset_t)0,
825 	    (size_t)0, B_INVAL, cr);
826 
827 	/*
828 	 * read in superblock
829 	 */
830 	ufsvfsp = kmem_zalloc(sizeof (struct ufsvfs), KM_SLEEP);
831 	tp = UFS_BREAD(ufsvfsp, dev, SBLOCK, SBSIZE);
832 	if (tp->b_flags & B_ERROR)
833 		goto out;
834 	fsp = (struct fs *)tp->b_un.b_addr;
835 
836 	if ((fsp->fs_magic != FS_MAGIC) && (fsp->fs_magic != MTB_UFS_MAGIC)) {
837 		cmn_err(CE_NOTE,
838 		    "mount: not a UFS magic number (0x%x)", fsp->fs_magic);
839 		error = EINVAL;
840 		goto out;
841 	}
842 
843 	if ((fsp->fs_magic == FS_MAGIC) &&
844 	    (fsp->fs_version != UFS_EFISTYLE4NONEFI_VERSION_2 &&
845 	    fsp->fs_version != UFS_VERSION_MIN)) {
846 		cmn_err(CE_NOTE,
847 		    "mount: unrecognized version of UFS on-disk format: %d",
848 		    fsp->fs_version);
849 		error = EINVAL;
850 		goto out;
851 	}
852 
853 	if ((fsp->fs_magic == MTB_UFS_MAGIC) &&
854 	    (fsp->fs_version > MTB_UFS_VERSION_1 ||
855 	    fsp->fs_version < MTB_UFS_VERSION_MIN)) {
856 		cmn_err(CE_NOTE,
857 		    "mount: unrecognized version of UFS on-disk format: %d",
858 		    fsp->fs_version);
859 		error = EINVAL;
860 		goto out;
861 	}
862 
863 #ifndef _LP64
864 	if (fsp->fs_magic == MTB_UFS_MAGIC) {
865 		/*
866 		 * Find the size of the device in sectors.  If the
867 		 * the size in sectors is greater than INT_MAX, it's
868 		 * a multi-terabyte file system, which can't be
869 		 * mounted by a 32-bit kernel.  We can't use the
870 		 * fsbtodb() macro in the next line because the macro
871 		 * casts the intermediate values to daddr_t, which is
872 		 * a 32-bit quantity in a 32-bit kernel.  Here we
873 		 * really do need the intermediate values to be held
874 		 * in 64-bit quantities because we're checking for
875 		 * overflow of a 32-bit field.
876 		 */
877 		if ((((diskaddr_t)(fsp->fs_size)) << fsp->fs_fsbtodb)
878 		    > INT_MAX) {
879 			cmn_err(CE_NOTE,
880 			    "mount: multi-terabyte UFS cannot be"
881 			    " mounted by a 32-bit kernel");
882 			error = EINVAL;
883 			goto out;
884 		}
885 
886 	}
887 #endif
888 
889 	if (fsp->fs_bsize > MAXBSIZE || fsp->fs_frag > MAXFRAG ||
890 	    fsp->fs_bsize < sizeof (struct fs) || fsp->fs_bsize < PAGESIZE) {
891 		error = EINVAL;	/* also needs translation */
892 		goto out;
893 	}
894 
895 	/*
896 	 * Allocate VFS private data.
897 	 */
898 	vfsp->vfs_bcount = 0;
899 	vfsp->vfs_data = (caddr_t)ufsvfsp;
900 	vfsp->vfs_fstype = ufsfstype;
901 	vfsp->vfs_dev = dev;
902 	vfsp->vfs_flag |= VFS_NOTRUNC;
903 	vfs_make_fsid(&vfsp->vfs_fsid, dev, ufsfstype);
904 	ufsvfsp->vfs_devvp = devvp;
905 
906 	/*
907 	 * Cross-link with vfs and add to instance list.
908 	 */
909 	ufsvfsp->vfs_vfs = vfsp;
910 	ufs_vfs_add(ufsvfsp);
911 
912 	ufsvfsp->vfs_dev = dev;
913 	ufsvfsp->vfs_bufp = tp;
914 
915 	ufsvfsp->vfs_dirsize = INODESIZE + (4 * ALLOCSIZE) + fsp->fs_fsize;
916 	ufsvfsp->vfs_minfrags =
917 	    (int)((int64_t)fsp->fs_dsize * fsp->fs_minfree / 100);
918 	/*
919 	 * if mount allows largefiles, indicate so in ufsvfs
920 	 */
921 	if (flags & UFSMNT_LARGEFILES)
922 		ufsvfsp->vfs_lfflags |= UFS_LARGEFILES;
923 	/*
924 	 * Initialize threads
925 	 */
926 	ufs_delete_init(ufsvfsp, 1);
927 	ufs_thread_init(&ufsvfsp->vfs_reclaim, 0);
928 
929 	/*
930 	 * Chicken and egg problem. The superblock may have deltas
931 	 * in the log.  So after the log is scanned we reread the
932 	 * superblock. We guarantee that the fields needed to
933 	 * scan the log will not be in the log.
934 	 */
935 	if (fsp->fs_logbno && fsp->fs_clean == FSLOG &&
936 	    (fsp->fs_state + fsp->fs_time == FSOKAY)) {
937 		error = lufs_snarf(ufsvfsp, fsp, (vfsp->vfs_flag & VFS_RDONLY));
938 		if (error) {
939 			/*
940 			 * Allow a ro mount to continue even if the
941 			 * log cannot be processed - yet.
942 			 */
943 			if (!(vfsp->vfs_flag & VFS_RDONLY)) {
944 				cmn_err(CE_WARN, "Error accessing ufs "
945 				    "log for %s; Please run fsck(1M)", path);
946 				goto out;
947 			}
948 		}
949 		tp->b_flags |= (B_AGE | B_STALE);
950 		brelse(tp);
951 		tp = UFS_BREAD(ufsvfsp, dev, SBLOCK, SBSIZE);
952 		fsp = (struct fs *)tp->b_un.b_addr;
953 		ufsvfsp->vfs_bufp = tp;
954 		if (tp->b_flags & B_ERROR)
955 			goto out;
956 	}
957 
958 	/*
959 	 * Set logging mounted flag used by lockfs
960 	 */
961 	ufsvfsp->vfs_validfs = UT_MOUNTED;
962 
963 	/*
964 	 * Copy the super block into a buffer in its native size.
965 	 * Use ngeteblk to allocate the buffer
966 	 */
967 	bp = ngeteblk(fsp->fs_bsize);
968 	ufsvfsp->vfs_bufp = bp;
969 	bp->b_edev = dev;
970 	bp->b_dev = cmpdev(dev);
971 	bp->b_blkno = SBLOCK;
972 	bp->b_bcount = fsp->fs_sbsize;
973 	bcopy(tp->b_un.b_addr, bp->b_un.b_addr, fsp->fs_sbsize);
974 	tp->b_flags |= B_STALE | B_AGE;
975 	brelse(tp);
976 	tp = 0;
977 
978 	fsp = (struct fs *)bp->b_un.b_addr;
979 	/*
980 	 * Mount fails if superblock flag indicates presence of large
981 	 * files and filesystem is attempted to be mounted 'nolargefiles'.
982 	 * The exception is for a read only mount of root, which we
983 	 * always want to succeed, so fsck can fix potential problems.
984 	 * The assumption is that we will remount root at some point,
985 	 * and the remount will enforce the mount option.
986 	 */
987 	if (!(isroot & (vfsp->vfs_flag & VFS_RDONLY)) &&
988 	    (fsp->fs_flags & FSLARGEFILES) &&
989 	    !(flags & UFSMNT_LARGEFILES)) {
990 		error = EFBIG;
991 		goto out;
992 	}
993 
994 	if (vfsp->vfs_flag & VFS_RDONLY) {
995 		fsp->fs_ronly = 1;
996 		fsp->fs_fmod = 0;
997 		if (((fsp->fs_state + fsp->fs_time) == FSOKAY) &&
998 		    ((fsp->fs_clean == FSCLEAN) ||
999 		    (fsp->fs_clean == FSSTABLE) ||
1000 		    (fsp->fs_clean == FSLOG))) {
1001 			if (isroot) {
1002 				if (fsp->fs_clean == FSLOG) {
1003 					if (fsp->fs_rolled == FS_ALL_ROLLED) {
1004 						ufs_clean_root = 1;
1005 					}
1006 				} else {
1007 					ufs_clean_root = 1;
1008 				}
1009 			}
1010 			fsp->fs_clean = FSSTABLE;
1011 		} else {
1012 			fsp->fs_clean = FSBAD;
1013 		}
1014 	} else {
1015 
1016 		fsp->fs_fmod = 0;
1017 		fsp->fs_ronly = 0;
1018 
1019 		TRANS_DOMATAMAP(ufsvfsp);
1020 
1021 		if ((TRANS_ISERROR(ufsvfsp)) ||
1022 		    (((fsp->fs_state + fsp->fs_time) == FSOKAY) &&
1023 		    fsp->fs_clean == FSLOG && !TRANS_ISTRANS(ufsvfsp))) {
1024 			ufsvfsp->vfs_log = NULL;
1025 			ufsvfsp->vfs_domatamap = 0;
1026 			error = ENOSPC;
1027 			goto out;
1028 		}
1029 
1030 		if (((fsp->fs_state + fsp->fs_time) == FSOKAY) &&
1031 		    (fsp->fs_clean == FSCLEAN ||
1032 		    fsp->fs_clean == FSSTABLE ||
1033 		    fsp->fs_clean == FSLOG))
1034 			fsp->fs_clean = FSSTABLE;
1035 		else {
1036 			if (isroot) {
1037 				/*
1038 				 * allow root partition to be mounted even
1039 				 * when fs_state is not ok
1040 				 * will be fixed later by a remount root
1041 				 */
1042 				fsp->fs_clean = FSBAD;
1043 				ufsvfsp->vfs_log = NULL;
1044 				ufsvfsp->vfs_domatamap = 0;
1045 			} else {
1046 				error = ENOSPC;
1047 				goto out;
1048 			}
1049 		}
1050 
1051 		if (fsp->fs_clean == FSSTABLE && TRANS_ISTRANS(ufsvfsp))
1052 			fsp->fs_clean = FSLOG;
1053 	}
1054 	TRANS_MATA_MOUNT(ufsvfsp);
1055 	needtrans = 1;
1056 
1057 	vfsp->vfs_bsize = fsp->fs_bsize;
1058 
1059 	/*
1060 	 * Read in summary info
1061 	 */
1062 	if (error = ufs_getsummaryinfo(dev, ufsvfsp, fsp))
1063 		goto out;
1064 
1065 	/*
1066 	 * lastwhinetime is set to zero rather than lbolt, so that after
1067 	 * mounting if the filesystem is found to be full, then immediately the
1068 	 * "file system message" will be logged.
1069 	 */
1070 	ufsvfsp->vfs_lastwhinetime = 0L;
1071 
1072 
1073 	mutex_init(&ufsvfsp->vfs_lock, NULL, MUTEX_DEFAULT, NULL);
1074 	(void) copystr(path, fsp->fs_fsmnt, sizeof (fsp->fs_fsmnt) - 1, &len);
1075 	bzero(fsp->fs_fsmnt + len, sizeof (fsp->fs_fsmnt) - len);
1076 
1077 	/*
1078 	 * Sanity checks for old file systems
1079 	 */
1080 	if (fsp->fs_postblformat == FS_42POSTBLFMT)
1081 		ufsvfsp->vfs_nrpos = 8;
1082 	else
1083 		ufsvfsp->vfs_nrpos = fsp->fs_nrpos;
1084 
1085 	/*
1086 	 * Initialize lockfs structure to support file system locking
1087 	 */
1088 	bzero(&ufsvfsp->vfs_ulockfs.ul_lockfs,
1089 	    sizeof (struct lockfs));
1090 	ufsvfsp->vfs_ulockfs.ul_fs_lock = ULOCKFS_ULOCK;
1091 	mutex_init(&ufsvfsp->vfs_ulockfs.ul_lock, NULL,
1092 	    MUTEX_DEFAULT, NULL);
1093 	cv_init(&ufsvfsp->vfs_ulockfs.ul_cv, NULL, CV_DEFAULT, NULL);
1094 
1095 	/*
1096 	 * We don't need to grab vfs_dqrwlock for this ufs_iget() call.
1097 	 * We are in the process of mounting the file system so there
1098 	 * is no need to grab the quota lock. If a quota applies to the
1099 	 * root inode, then it will be updated when quotas are enabled.
1100 	 *
1101 	 * However, we have an ASSERT(RW_LOCK_HELD(&ufsvfsp->vfs_dqrwlock))
1102 	 * in getinoquota() that we want to keep so grab it anyway.
1103 	 */
1104 	rw_enter(&ufsvfsp->vfs_dqrwlock, RW_READER);
1105 
1106 	error = ufs_iget_alloced(vfsp, UFSROOTINO, &rip, cr);
1107 
1108 	rw_exit(&ufsvfsp->vfs_dqrwlock);
1109 
1110 	if (error)
1111 		goto out;
1112 
1113 	/*
1114 	 * make sure root inode is a directory.  Returning ENOTDIR might
1115 	 * be confused with the mount point not being a directory, so
1116 	 * we use EIO instead.
1117 	 */
1118 	if ((rip->i_mode & IFMT) != IFDIR) {
1119 		/*
1120 		 * Mark this inode as subject for cleanup
1121 		 * to avoid stray inodes in the cache.
1122 		 */
1123 		rvp = ITOV(rip);
1124 		error = EIO;
1125 		goto out;
1126 	}
1127 
1128 	rvp = ITOV(rip);
1129 	mutex_enter(&rvp->v_lock);
1130 	rvp->v_flag |= VROOT;
1131 	mutex_exit(&rvp->v_lock);
1132 	ufsvfsp->vfs_root = rvp;
1133 	/* The buffer for the root inode does not contain a valid b_vp */
1134 	(void) bfinval(dev, 0);
1135 
1136 	/* options */
1137 	ufsvfsp->vfs_nosetsec = flags & UFSMNT_NOSETSEC;
1138 	ufsvfsp->vfs_nointr  = flags & UFSMNT_NOINTR;
1139 	ufsvfsp->vfs_syncdir = flags & UFSMNT_SYNCDIR;
1140 	ufsvfsp->vfs_noatime = flags & UFSMNT_NOATIME;
1141 	if ((flags & UFSMNT_NODFRATIME) || ufsvfsp->vfs_noatime)
1142 		ufsvfsp->vfs_dfritime &= ~UFS_DFRATIME;
1143 	else	/* dfratime, default behavior */
1144 		ufsvfsp->vfs_dfritime |= UFS_DFRATIME;
1145 	if (flags & UFSMNT_FORCEDIRECTIO)
1146 		ufsvfsp->vfs_forcedirectio = 1;
1147 	else if (flags & UFSMNT_NOFORCEDIRECTIO)
1148 		ufsvfsp->vfs_forcedirectio = 0;
1149 	ufsvfsp->vfs_iotstamp = lbolt;
1150 
1151 	ufsvfsp->vfs_nindiroffset = fsp->fs_nindir - 1;
1152 	ufsvfsp->vfs_nindirshift = highbit(ufsvfsp->vfs_nindiroffset);
1153 	ufsvfsp->vfs_ioclustsz = fsp->fs_bsize * fsp->fs_maxcontig;
1154 
1155 	if (cdev_ioctl(dev, DKIOCINFO, (intptr_t)&ci,
1156 	    FKIOCTL|FNATIVE|FREAD, CRED(), &status) == 0) {
1157 		ufsvfsp->vfs_iotransz = ci.dki_maxtransfer * DEV_BSIZE;
1158 	} else {
1159 		ufsvfsp->vfs_iotransz = MIN(maxphys, ufs_maxmaxphys);
1160 	}
1161 
1162 	if (ufsvfsp->vfs_iotransz <= 0) {
1163 		ufsvfsp->vfs_iotransz = MIN(maxphys, ufs_maxmaxphys);
1164 	}
1165 
1166 	/*
1167 	 * When logging, used to reserve log space for writes and truncs
1168 	 */
1169 	ufsvfsp->vfs_avgbfree = fsp->fs_cstotal.cs_nbfree / fsp->fs_ncg;
1170 
1171 	/*
1172 	 * Determine whether to log cylinder group summary info.
1173 	 */
1174 	ufsvfsp->vfs_nolog_si = (fsp->fs_ncg < ufs_ncg_log);
1175 
1176 	if (TRANS_ISTRANS(ufsvfsp)) {
1177 		/*
1178 		 * start the delete thread
1179 		 */
1180 		ufs_thread_start(&ufsvfsp->vfs_delete, ufs_thread_delete, vfsp);
1181 
1182 		/*
1183 		 * start reclaim thread if the filesystem was not mounted
1184 		 * read only.
1185 		 */
1186 		if (!fsp->fs_ronly && (fsp->fs_reclaim &
1187 		    (FS_RECLAIM|FS_RECLAIMING))) {
1188 			fsp->fs_reclaim &= ~FS_RECLAIM;
1189 			fsp->fs_reclaim |=  FS_RECLAIMING;
1190 			ufs_thread_start(&ufsvfsp->vfs_reclaim,
1191 			    ufs_thread_reclaim, vfsp);
1192 		}
1193 
1194 		/* Mark the fs as unrolled */
1195 		fsp->fs_rolled = FS_NEED_ROLL;
1196 	} else if (!fsp->fs_ronly && (fsp->fs_reclaim &
1197 	    (FS_RECLAIM|FS_RECLAIMING))) {
1198 		/*
1199 		 * If a file system that is mounted nologging, after
1200 		 * having previously been mounted logging, becomes
1201 		 * unmounted whilst the reclaim thread is in the throes
1202 		 * of reclaiming open/deleted inodes, a subsequent mount
1203 		 * of such a file system with logging disabled could lead
1204 		 * to inodes becoming lost.  So, start reclaim now, even
1205 		 * though logging was disabled for the previous mount, to
1206 		 * tidy things up.
1207 		 */
1208 		fsp->fs_reclaim &= ~FS_RECLAIM;
1209 		fsp->fs_reclaim |=  FS_RECLAIMING;
1210 		ufs_thread_start(&ufsvfsp->vfs_reclaim,
1211 		    ufs_thread_reclaim, vfsp);
1212 	}
1213 
1214 	if (!fsp->fs_ronly) {
1215 		TRANS_SBWRITE(ufsvfsp, TOP_MOUNT);
1216 		if (error = geterror(ufsvfsp->vfs_bufp))
1217 			goto out;
1218 	}
1219 
1220 	/* fix-on-panic initialization */
1221 	if (isroot && !(flags & UFSMNT_ONERROR_FLGMASK))
1222 		flags |= UFSMNT_ONERROR_PANIC;	/* XXX ..._RDONLY */
1223 
1224 	if ((error = ufsfx_mount(ufsvfsp, flags)) != 0)
1225 		goto out;
1226 
1227 	if (why == ROOT_INIT && isroot)
1228 		rootvp = devvp;
1229 
1230 	return (0);
1231 out:
1232 	if (error == 0)
1233 		error = EIO;
1234 	if (rvp) {
1235 		/* the following sequence is similar to ufs_unmount() */
1236 
1237 		/*
1238 		 * There's a problem that ufs_iget() puts inodes into
1239 		 * the inode cache before it returns them.  If someone
1240 		 * traverses that cache and gets a reference to our
1241 		 * inode, there's a chance they'll still be using it
1242 		 * after we've destroyed it.  This is a hard race to
1243 		 * hit, but it's happened (putting in a medium delay
1244 		 * here, and a large delay in ufs_scan_inodes() for
1245 		 * inodes on the device we're bailing out on, makes
1246 		 * the race easy to demonstrate).  The symptom is some
1247 		 * other part of UFS faulting on bad inode contents,
1248 		 * or when grabbing one of the locks inside the inode,
1249 		 * etc.  The usual victim is ufs_scan_inodes() or
1250 		 * someone called by it.
1251 		 */
1252 
1253 		/*
1254 		 * First, isolate it so that no new references can be
1255 		 * gotten via the inode cache.
1256 		 */
1257 		ihm = &ih_lock[INOHASH(UFSROOTINO)];
1258 		mutex_enter(ihm);
1259 		remque(rip);
1260 		mutex_exit(ihm);
1261 
1262 		/*
1263 		 * Now wait for all outstanding references except our
1264 		 * own to drain.  This could, in theory, take forever,
1265 		 * so don't wait *too* long.  If we time out, mark
1266 		 * it stale and leak it, so we don't hit the problem
1267 		 * described above.
1268 		 *
1269 		 * Note that v_count is an int, which means we can read
1270 		 * it in one operation.  Thus, there's no need to lock
1271 		 * around our tests.
1272 		 */
1273 		elapsed = 0;
1274 		while ((rvp->v_count > 1) && (elapsed < ufs_mount_timeout)) {
1275 			delay(ufs_mount_error_delay * drv_usectohz(1000));
1276 			elapsed += ufs_mount_error_delay;
1277 		}
1278 
1279 		if (rvp->v_count > 1) {
1280 			mutex_enter(&rip->i_tlock);
1281 			rip->i_flag |= ISTALE;
1282 			mutex_exit(&rip->i_tlock);
1283 			cmn_err(CE_WARN,
1284 			    "Timed out while cleaning up after "
1285 			    "failed mount of %s", path);
1286 		} else {
1287 
1288 			/*
1289 			 * Now we're the only one with a handle left, so tear
1290 			 * it down the rest of the way.
1291 			 */
1292 			if (ufs_rmidle(rip))
1293 				VN_RELE(rvp);
1294 			ufs_si_del(rip);
1295 			rip->i_ufsvfs = NULL;
1296 			rvp->v_vfsp = NULL;
1297 			rvp->v_type = VBAD;
1298 			VN_RELE(rvp);
1299 		}
1300 	}
1301 	if (needtrans) {
1302 		TRANS_MATA_UMOUNT(ufsvfsp);
1303 	}
1304 	if (ufsvfsp) {
1305 		ufs_vfs_remove(ufsvfsp);
1306 		ufs_thread_exit(&ufsvfsp->vfs_delete);
1307 		ufs_thread_exit(&ufsvfsp->vfs_reclaim);
1308 		mutex_destroy(&ufsvfsp->vfs_lock);
1309 		if (ufsvfsp->vfs_log) {
1310 			lufs_unsnarf(ufsvfsp);
1311 		}
1312 		kmem_free(ufsvfsp, sizeof (struct ufsvfs));
1313 	}
1314 	if (bp) {
1315 		bp->b_flags |= (B_STALE|B_AGE);
1316 		brelse(bp);
1317 	}
1318 	if (tp) {
1319 		tp->b_flags |= (B_STALE|B_AGE);
1320 		brelse(tp);
1321 	}
1322 	if (needclose) {
1323 		(void) VOP_CLOSE(devvp, (vfsp->vfs_flag & VFS_RDONLY) ?
1324 		    FREAD : FREAD|FWRITE, 1, (offset_t)0, cr);
1325 		bflush(dev);
1326 		(void) bfinval(dev, 1);
1327 	}
1328 	return (error);
1329 }
1330 
1331 /*
1332  * vfs operations
1333  */
1334 static int
1335 ufs_unmount(struct vfs *vfsp, int fflag, struct cred *cr)
1336 {
1337 	dev_t 		dev		= vfsp->vfs_dev;
1338 	struct ufsvfs	*ufsvfsp	= (struct ufsvfs *)vfsp->vfs_data;
1339 	struct fs	*fs		= ufsvfsp->vfs_fs;
1340 	struct ulockfs	*ulp		= &ufsvfsp->vfs_ulockfs;
1341 	struct vnode 	*bvp, *vp;
1342 	struct buf	*bp;
1343 	struct inode	*ip, *inext, *rip;
1344 	union ihead	*ih;
1345 	int 		error, flag, i;
1346 	struct lockfs	lockfs;
1347 	int		poll_events = POLLPRI;
1348 	extern struct pollhead ufs_pollhd;
1349 	refstr_t	*mountpoint;
1350 
1351 	ASSERT(vfs_lock_held(vfsp));
1352 
1353 	if (secpolicy_fs_unmount(cr, vfsp) != 0)
1354 		return (EPERM);
1355 	/*
1356 	 * Forced unmount is now supported through the
1357 	 * lockfs protocol.
1358 	 */
1359 	if (fflag & MS_FORCE) {
1360 		/*
1361 		 * Mark the filesystem as being unmounted now in
1362 		 * case of a forcible umount before we take any
1363 		 * locks inside UFS to prevent racing with a VFS_VGET()
1364 		 * request. Throw these VFS_VGET() requests away for
1365 		 * the duration of the forcible umount so they won't
1366 		 * use stale or even freed data later on when we're done.
1367 		 * It may happen that the VFS has had a additional hold
1368 		 * placed on it by someone other than UFS and thus will
1369 		 * not get freed immediately once we're done with the
1370 		 * umount by dounmount() - use VFS_UNMOUNTED to inform
1371 		 * users of this still-alive VFS that its corresponding
1372 		 * filesystem being gone so they can detect that and error
1373 		 * out.
1374 		 */
1375 		vfsp->vfs_flag |= VFS_UNMOUNTED;
1376 
1377 		ufs_thread_suspend(&ufsvfsp->vfs_delete);
1378 		mutex_enter(&ulp->ul_lock);
1379 		/*
1380 		 * If file system is already hard locked,
1381 		 * unmount the file system, otherwise
1382 		 * hard lock it before unmounting.
1383 		 */
1384 		if (!ULOCKFS_IS_HLOCK(ulp)) {
1385 			atomic_add_long(&ufs_quiesce_pend, 1);
1386 			lockfs.lf_lock = LOCKFS_HLOCK;
1387 			lockfs.lf_flags = 0;
1388 			lockfs.lf_key = ulp->ul_lockfs.lf_key + 1;
1389 			lockfs.lf_comlen = 0;
1390 			lockfs.lf_comment = NULL;
1391 			ufs_freeze(ulp, &lockfs);
1392 			ULOCKFS_SET_BUSY(ulp);
1393 			LOCKFS_SET_BUSY(&ulp->ul_lockfs);
1394 			(void) ufs_quiesce(ulp);
1395 			(void) ufs_flush(vfsp);
1396 			(void) ufs_thaw(vfsp, ufsvfsp, ulp);
1397 			atomic_add_long(&ufs_quiesce_pend, -1);
1398 			ULOCKFS_CLR_BUSY(ulp);
1399 			LOCKFS_CLR_BUSY(&ulp->ul_lockfs);
1400 			poll_events |= POLLERR;
1401 			pollwakeup(&ufs_pollhd, poll_events);
1402 		}
1403 		ufs_thread_continue(&ufsvfsp->vfs_delete);
1404 		mutex_exit(&ulp->ul_lock);
1405 	}
1406 
1407 	/* let all types of writes go through */
1408 	ufsvfsp->vfs_iotstamp = lbolt;
1409 
1410 	/* coordinate with global hlock thread */
1411 	if (TRANS_ISTRANS(ufsvfsp) && (ufsvfsp->vfs_validfs == UT_HLOCKING)) {
1412 		/*
1413 		 * last possibility for a forced umount to fail hence clear
1414 		 * VFS_UNMOUNTED if appropriate.
1415 		 */
1416 		if (fflag & MS_FORCE)
1417 			vfsp->vfs_flag &= ~VFS_UNMOUNTED;
1418 		return (EAGAIN);
1419 	}
1420 
1421 	ufsvfsp->vfs_validfs = UT_UNMOUNTED;
1422 
1423 	/* kill the reclaim thread */
1424 	ufs_thread_exit(&ufsvfsp->vfs_reclaim);
1425 
1426 	/* suspend the delete thread */
1427 	ufs_thread_suspend(&ufsvfsp->vfs_delete);
1428 
1429 	/*
1430 	 * drain the delete and idle queues
1431 	 */
1432 	ufs_delete_drain(vfsp, -1, 1);
1433 	ufs_idle_drain(vfsp);
1434 
1435 	/*
1436 	 * use the lockfs protocol to prevent new ops from starting
1437 	 * a forcible umount can not fail beyond this point as
1438 	 * we hard-locked the filesystem and drained all current consumers
1439 	 * before.
1440 	 */
1441 	mutex_enter(&ulp->ul_lock);
1442 
1443 	/*
1444 	 * if the file system is busy; return EBUSY
1445 	 */
1446 	if (ulp->ul_vnops_cnt || ulp->ul_falloc_cnt || ULOCKFS_IS_SLOCK(ulp)) {
1447 		error = EBUSY;
1448 		goto out;
1449 	}
1450 
1451 	/*
1452 	 * if this is not a forced unmount (!hard/error locked), then
1453 	 * get rid of every inode except the root and quota inodes
1454 	 * also, commit any outstanding transactions
1455 	 */
1456 	if (!ULOCKFS_IS_HLOCK(ulp) && !ULOCKFS_IS_ELOCK(ulp))
1457 		if (error = ufs_flush(vfsp))
1458 			goto out;
1459 
1460 	/*
1461 	 * ignore inodes in the cache if fs is hard locked or error locked
1462 	 */
1463 	rip = VTOI(ufsvfsp->vfs_root);
1464 	if (!ULOCKFS_IS_HLOCK(ulp) && !ULOCKFS_IS_ELOCK(ulp)) {
1465 		/*
1466 		 * Otherwise, only the quota and root inodes are in the cache.
1467 		 *
1468 		 * Avoid racing with ufs_update() and ufs_sync().
1469 		 */
1470 		mutex_enter(&ufs_scan_lock);
1471 
1472 		for (i = 0, ih = ihead; i < inohsz; i++, ih++) {
1473 			mutex_enter(&ih_lock[i]);
1474 			for (ip = ih->ih_chain[0];
1475 			    ip != (struct inode *)ih;
1476 			    ip = ip->i_forw) {
1477 				if (ip->i_ufsvfs != ufsvfsp)
1478 					continue;
1479 				if (ip == ufsvfsp->vfs_qinod)
1480 					continue;
1481 				if (ip == rip && ITOV(ip)->v_count == 1)
1482 					continue;
1483 				mutex_exit(&ih_lock[i]);
1484 				mutex_exit(&ufs_scan_lock);
1485 				error = EBUSY;
1486 				goto out;
1487 			}
1488 			mutex_exit(&ih_lock[i]);
1489 		}
1490 		mutex_exit(&ufs_scan_lock);
1491 	}
1492 
1493 	/*
1494 	 * if a snapshot exists and this is a forced unmount, then delete
1495 	 * the snapshot.  Otherwise return EBUSY.  This will insure the
1496 	 * snapshot always belongs to a valid file system.
1497 	 */
1498 	if (ufsvfsp->vfs_snapshot) {
1499 		if (ULOCKFS_IS_HLOCK(ulp) || ULOCKFS_IS_ELOCK(ulp)) {
1500 			(void) fssnap_delete(&ufsvfsp->vfs_snapshot);
1501 		} else {
1502 			error = EBUSY;
1503 			goto out;
1504 		}
1505 	}
1506 
1507 	/*
1508 	 * Close the quota file and invalidate anything left in the quota
1509 	 * cache for this file system.  Pass kcred to allow all quota
1510 	 * manipulations.
1511 	 */
1512 	(void) closedq(ufsvfsp, kcred);
1513 	invalidatedq(ufsvfsp);
1514 	/*
1515 	 * drain the delete and idle queues
1516 	 */
1517 	ufs_delete_drain(vfsp, -1, 0);
1518 	ufs_idle_drain(vfsp);
1519 
1520 	/*
1521 	 * discard the inodes for this fs (including root, shadow, and quota)
1522 	 */
1523 	for (i = 0, ih = ihead; i < inohsz; i++, ih++) {
1524 		mutex_enter(&ih_lock[i]);
1525 		for (inext = 0, ip = ih->ih_chain[0];
1526 		    ip != (struct inode *)ih;
1527 		    ip = inext) {
1528 			inext = ip->i_forw;
1529 			if (ip->i_ufsvfs != ufsvfsp)
1530 				continue;
1531 
1532 			/*
1533 			 * We've found the inode in the cache and as we
1534 			 * hold the hash mutex the inode can not
1535 			 * disappear from underneath us.
1536 			 * We also know it must have at least a vnode
1537 			 * reference count of 1.
1538 			 * We perform an additional VN_HOLD so the VN_RELE
1539 			 * in case we take the inode off the idle queue
1540 			 * can not be the last one.
1541 			 * It is safe to grab the writer contents lock here
1542 			 * to prevent a race with ufs_iinactive() putting
1543 			 * inodes into the idle queue while we operate on
1544 			 * this inode.
1545 			 */
1546 			rw_enter(&ip->i_contents, RW_WRITER);
1547 
1548 			vp = ITOV(ip);
1549 			VN_HOLD(vp)
1550 			remque(ip);
1551 			if (ufs_rmidle(ip))
1552 				VN_RELE(vp);
1553 			ufs_si_del(ip);
1554 			/*
1555 			 * rip->i_ufsvfsp is needed by bflush()
1556 			 */
1557 			if (ip != rip)
1558 				ip->i_ufsvfs = NULL;
1559 			/*
1560 			 * Set vnode's vfsops to dummy ops, which return
1561 			 * EIO. This is needed to forced unmounts to work
1562 			 * with lofs/nfs properly.
1563 			 */
1564 			if (ULOCKFS_IS_HLOCK(ulp) || ULOCKFS_IS_ELOCK(ulp))
1565 				vp->v_vfsp = &EIO_vfs;
1566 			else
1567 				vp->v_vfsp = NULL;
1568 			vp->v_type = VBAD;
1569 
1570 			rw_exit(&ip->i_contents);
1571 
1572 			VN_RELE(vp);
1573 		}
1574 		mutex_exit(&ih_lock[i]);
1575 	}
1576 	ufs_si_cache_flush(dev);
1577 
1578 	/*
1579 	 * kill the delete thread and drain the idle queue
1580 	 */
1581 	ufs_thread_exit(&ufsvfsp->vfs_delete);
1582 	ufs_idle_drain(vfsp);
1583 
1584 	bp = ufsvfsp->vfs_bufp;
1585 	bvp = ufsvfsp->vfs_devvp;
1586 	flag = !fs->fs_ronly;
1587 	if (flag) {
1588 		bflush(dev);
1589 		if (fs->fs_clean != FSBAD) {
1590 			if (fs->fs_clean == FSSTABLE)
1591 				fs->fs_clean = FSCLEAN;
1592 			fs->fs_reclaim &= ~FS_RECLAIM;
1593 		}
1594 		if (TRANS_ISTRANS(ufsvfsp) &&
1595 		    !TRANS_ISERROR(ufsvfsp) &&
1596 		    !ULOCKFS_IS_HLOCK(ulp) &&
1597 		    (fs->fs_rolled == FS_NEED_ROLL)) {
1598 			/*
1599 			 * ufs_flush() above has flushed the last Moby.
1600 			 * This is needed to ensure the following superblock
1601 			 * update really is the last metadata update
1602 			 */
1603 			error = ufs_putsummaryinfo(dev, ufsvfsp, fs);
1604 			if (error == 0) {
1605 				fs->fs_rolled = FS_ALL_ROLLED;
1606 			}
1607 		}
1608 		TRANS_SBUPDATE(ufsvfsp, vfsp, TOP_SBUPDATE_UNMOUNT);
1609 		/*
1610 		 * push this last transaction
1611 		 */
1612 		curthread->t_flag |= T_DONTBLOCK;
1613 		TRANS_BEGIN_SYNC(ufsvfsp, TOP_COMMIT_UNMOUNT, TOP_COMMIT_SIZE,
1614 		    error);
1615 		if (!error)
1616 			TRANS_END_SYNC(ufsvfsp, error, TOP_COMMIT_UNMOUNT,
1617 			    TOP_COMMIT_SIZE);
1618 		curthread->t_flag &= ~T_DONTBLOCK;
1619 	}
1620 
1621 	TRANS_MATA_UMOUNT(ufsvfsp);
1622 	lufs_unsnarf(ufsvfsp);		/* Release the in-memory structs */
1623 	ufsfx_unmount(ufsvfsp);		/* fix-on-panic bookkeeping */
1624 	kmem_free(fs->fs_u.fs_csp, fs->fs_cssize);
1625 
1626 	bp->b_flags |= B_STALE|B_AGE;
1627 	ufsvfsp->vfs_bufp = NULL;	/* don't point at freed buf */
1628 	brelse(bp);			/* free the superblock buf */
1629 
1630 	(void) VOP_PUTPAGE(common_specvp(bvp), (offset_t)0, (size_t)0,
1631 	    B_INVAL, cr);
1632 	(void) VOP_CLOSE(bvp, flag, 1, (offset_t)0, cr);
1633 	bflush(dev);
1634 	(void) bfinval(dev, 1);
1635 	VN_RELE(bvp);
1636 
1637 	/*
1638 	 * It is now safe to NULL out the ufsvfs pointer and discard
1639 	 * the root inode.
1640 	 */
1641 	rip->i_ufsvfs = NULL;
1642 	VN_RELE(ITOV(rip));
1643 
1644 	/* free up lockfs comment structure, if any */
1645 	if (ulp->ul_lockfs.lf_comlen && ulp->ul_lockfs.lf_comment)
1646 		kmem_free(ulp->ul_lockfs.lf_comment, ulp->ul_lockfs.lf_comlen);
1647 
1648 	/*
1649 	 * Remove from instance list.
1650 	 */
1651 	ufs_vfs_remove(ufsvfsp);
1652 
1653 	/*
1654 	 * For a forcible unmount, threads may be asleep in
1655 	 * ufs_lockfs_begin/ufs_check_lockfs.  These threads will need
1656 	 * the ufsvfs structure so we don't free it, yet.  ufs_update
1657 	 * will free it up after awhile.
1658 	 */
1659 	if (ULOCKFS_IS_HLOCK(ulp) || ULOCKFS_IS_ELOCK(ulp)) {
1660 		extern kmutex_t		ufsvfs_mutex;
1661 		extern struct ufsvfs	*ufsvfslist;
1662 
1663 		mutex_enter(&ufsvfs_mutex);
1664 		ufsvfsp->vfs_dontblock = 1;
1665 		ufsvfsp->vfs_next = ufsvfslist;
1666 		ufsvfslist = ufsvfsp;
1667 		mutex_exit(&ufsvfs_mutex);
1668 		/* wakeup any suspended threads */
1669 		cv_broadcast(&ulp->ul_cv);
1670 		mutex_exit(&ulp->ul_lock);
1671 	} else {
1672 		mutex_destroy(&ufsvfsp->vfs_lock);
1673 		kmem_free(ufsvfsp, sizeof (struct ufsvfs));
1674 	}
1675 
1676 	/*
1677 	 * Now mark the filesystem as unmounted since we're done with it.
1678 	 */
1679 	vfsp->vfs_flag |= VFS_UNMOUNTED;
1680 
1681 	return (0);
1682 out:
1683 	/* open the fs to new ops */
1684 	cv_broadcast(&ulp->ul_cv);
1685 	mutex_exit(&ulp->ul_lock);
1686 
1687 	if (TRANS_ISTRANS(ufsvfsp)) {
1688 		/* allow the delete thread to continue */
1689 		ufs_thread_continue(&ufsvfsp->vfs_delete);
1690 		/* restart the reclaim thread */
1691 		ufs_thread_start(&ufsvfsp->vfs_reclaim, ufs_thread_reclaim,
1692 		    vfsp);
1693 		/* coordinate with global hlock thread */
1694 		ufsvfsp->vfs_validfs = UT_MOUNTED;
1695 		/* check for trans errors during umount */
1696 		ufs_trans_onerror();
1697 
1698 		/*
1699 		 * if we have a seperate /usr it will never unmount
1700 		 * when halting. In order to not re-read all the
1701 		 * cylinder group summary info on mounting after
1702 		 * reboot the logging of summary info is re-enabled
1703 		 * and the super block written out.
1704 		 */
1705 		mountpoint = vfs_getmntpoint(vfsp);
1706 		if ((fs->fs_si == FS_SI_OK) &&
1707 		    (strcmp("/usr", refstr_value(mountpoint)) == 0)) {
1708 			ufsvfsp->vfs_nolog_si = 0;
1709 			UFS_BWRITE2(NULL, ufsvfsp->vfs_bufp);
1710 		}
1711 		refstr_rele(mountpoint);
1712 	}
1713 
1714 	return (error);
1715 }
1716 
1717 static int
1718 ufs_root(struct vfs *vfsp, struct vnode **vpp)
1719 {
1720 	struct ufsvfs *ufsvfsp;
1721 	struct vnode *vp;
1722 
1723 	if (!vfsp)
1724 		return (EIO);
1725 
1726 	ufsvfsp = (struct ufsvfs *)vfsp->vfs_data;
1727 	if (!ufsvfsp || !ufsvfsp->vfs_root)
1728 		return (EIO);	/* forced unmount */
1729 
1730 	vp = ufsvfsp->vfs_root;
1731 	VN_HOLD(vp);
1732 	*vpp = vp;
1733 	return (0);
1734 }
1735 
1736 /*
1737  * Get file system statistics.
1738  */
1739 static int
1740 ufs_statvfs(struct vfs *vfsp, struct statvfs64 *sp)
1741 {
1742 	struct fs *fsp;
1743 	struct ufsvfs *ufsvfsp;
1744 	int blk, i;
1745 	long max_avail, used;
1746 	dev32_t d32;
1747 
1748 	if (vfsp->vfs_flag & VFS_UNMOUNTED)
1749 		return (EIO);
1750 
1751 	ufsvfsp = (struct ufsvfs *)vfsp->vfs_data;
1752 	fsp = ufsvfsp->vfs_fs;
1753 	if ((fsp->fs_magic != FS_MAGIC) && (fsp->fs_magic != MTB_UFS_MAGIC))
1754 		return (EINVAL);
1755 	if (fsp->fs_magic == FS_MAGIC &&
1756 	    (fsp->fs_version != UFS_EFISTYLE4NONEFI_VERSION_2 &&
1757 	    fsp->fs_version != UFS_VERSION_MIN))
1758 		return (EINVAL);
1759 	if (fsp->fs_magic == MTB_UFS_MAGIC &&
1760 	    (fsp->fs_version > MTB_UFS_VERSION_1 ||
1761 	    fsp->fs_version < MTB_UFS_VERSION_MIN))
1762 		return (EINVAL);
1763 
1764 	/*
1765 	 * get the basic numbers
1766 	 */
1767 	(void) bzero(sp, sizeof (*sp));
1768 
1769 	sp->f_bsize = fsp->fs_bsize;
1770 	sp->f_frsize = fsp->fs_fsize;
1771 	sp->f_blocks = (fsblkcnt64_t)fsp->fs_dsize;
1772 	sp->f_bfree = (fsblkcnt64_t)fsp->fs_cstotal.cs_nbfree * fsp->fs_frag +
1773 	    fsp->fs_cstotal.cs_nffree;
1774 
1775 	sp->f_files = (fsfilcnt64_t)fsp->fs_ncg * fsp->fs_ipg;
1776 	sp->f_ffree = (fsfilcnt64_t)fsp->fs_cstotal.cs_nifree;
1777 
1778 	/*
1779 	 * Adjust the numbers based on things waiting to be deleted.
1780 	 * modifies f_bfree and f_ffree.  Afterwards, everything we
1781 	 * come up with will be self-consistent.  By definition, this
1782 	 * is a point-in-time snapshot, so the fact that the delete
1783 	 * thread's probably already invalidated the results is not a
1784 	 * problem.  Note that if the delete thread is ever extended to
1785 	 * non-logging ufs, this adjustment must always be made.
1786 	 */
1787 	if (TRANS_ISTRANS(ufsvfsp))
1788 		ufs_delete_adjust_stats(ufsvfsp, sp);
1789 
1790 	/*
1791 	 * avail = MAX(max_avail - used, 0)
1792 	 */
1793 	max_avail = fsp->fs_dsize - ufsvfsp->vfs_minfrags;
1794 
1795 	used = (fsp->fs_dsize - sp->f_bfree);
1796 
1797 	if (max_avail > used)
1798 		sp->f_bavail = (fsblkcnt64_t)max_avail - used;
1799 	else
1800 		sp->f_bavail = (fsblkcnt64_t)0;
1801 
1802 	sp->f_favail = sp->f_ffree;
1803 	(void) cmpldev(&d32, vfsp->vfs_dev);
1804 	sp->f_fsid = d32;
1805 	(void) strcpy(sp->f_basetype, vfssw[vfsp->vfs_fstype].vsw_name);
1806 	sp->f_flag = vf_to_stf(vfsp->vfs_flag);
1807 
1808 	/* keep coordinated with ufs_l_pathconf() */
1809 	sp->f_namemax = MAXNAMLEN;
1810 
1811 	if (fsp->fs_cpc == 0) {
1812 		bzero(sp->f_fstr, 14);
1813 		return (0);
1814 	}
1815 	blk = fsp->fs_spc * fsp->fs_cpc / NSPF(fsp);
1816 	for (i = 0; i < blk; i += fsp->fs_frag) /* CSTYLED */
1817 		/* void */;
1818 	i -= fsp->fs_frag;
1819 	blk = i / fsp->fs_frag;
1820 	bcopy(&(fs_rotbl(fsp)[blk]), sp->f_fstr, 14);
1821 	return (0);
1822 }
1823 
1824 /*
1825  * Flush any pending I/O to file system vfsp.
1826  * The ufs_update() routine will only flush *all* ufs files.
1827  * If vfsp is non-NULL, only sync this ufs (in preparation
1828  * for a umount).
1829  */
1830 /*ARGSUSED*/
1831 static int
1832 ufs_sync(struct vfs *vfsp, short flag, struct cred *cr)
1833 {
1834 	struct ufsvfs *ufsvfsp;
1835 	struct fs *fs;
1836 	int cheap = flag & SYNC_ATTR;
1837 	int error;
1838 
1839 	/*
1840 	 * SYNC_CLOSE means we're rebooting.  Toss everything
1841 	 * on the idle queue so we don't have to slog through
1842 	 * a bunch of uninteresting inodes over and over again.
1843 	 */
1844 	if (flag & SYNC_CLOSE)
1845 		ufs_idle_drain(NULL);
1846 
1847 	if (vfsp == NULL) {
1848 		ufs_update(flag);
1849 		return (0);
1850 	}
1851 
1852 	/* Flush a single ufs */
1853 	if (!vfs_matchops(vfsp, ufs_vfsops) || vfs_lock(vfsp) != 0)
1854 		return (0);
1855 
1856 	ufsvfsp = (struct ufsvfs *)vfsp->vfs_data;
1857 	if (!ufsvfsp)
1858 		return (EIO);
1859 	fs = ufsvfsp->vfs_fs;
1860 	mutex_enter(&ufsvfsp->vfs_lock);
1861 
1862 	if (ufsvfsp->vfs_dio &&
1863 	    fs->fs_ronly == 0 &&
1864 	    fs->fs_clean != FSBAD &&
1865 	    fs->fs_clean != FSLOG) {
1866 		/* turn off fast-io on unmount, so no fsck needed (4029401) */
1867 		ufsvfsp->vfs_dio = 0;
1868 		fs->fs_clean = FSACTIVE;
1869 		fs->fs_fmod = 1;
1870 	}
1871 
1872 	/* Write back modified superblock */
1873 	if (fs->fs_fmod == 0) {
1874 		mutex_exit(&ufsvfsp->vfs_lock);
1875 	} else {
1876 		if (fs->fs_ronly != 0) {
1877 			mutex_exit(&ufsvfsp->vfs_lock);
1878 			vfs_unlock(vfsp);
1879 			return (ufs_fault(ufsvfsp->vfs_root,
1880 			    "fs = %s update: ro fs mod\n", fs->fs_fsmnt));
1881 		}
1882 		fs->fs_fmod = 0;
1883 		mutex_exit(&ufsvfsp->vfs_lock);
1884 
1885 		TRANS_SBUPDATE(ufsvfsp, vfsp, TOP_SBUPDATE_UPDATE);
1886 	}
1887 	vfs_unlock(vfsp);
1888 
1889 	/*
1890 	 * Avoid racing with ufs_update() and ufs_unmount().
1891 	 *
1892 	 */
1893 	mutex_enter(&ufs_scan_lock);
1894 
1895 	(void) ufs_scan_inodes(1, ufs_sync_inode,
1896 	    (void *)(uintptr_t)cheap, ufsvfsp);
1897 
1898 	mutex_exit(&ufs_scan_lock);
1899 
1900 	bflush((dev_t)vfsp->vfs_dev);
1901 
1902 	/*
1903 	 * commit any outstanding async transactions
1904 	 */
1905 	curthread->t_flag |= T_DONTBLOCK;
1906 	TRANS_BEGIN_SYNC(ufsvfsp, TOP_COMMIT_UPDATE, TOP_COMMIT_SIZE, error);
1907 	if (!error) {
1908 		TRANS_END_SYNC(ufsvfsp, error, TOP_COMMIT_UPDATE,
1909 		    TOP_COMMIT_SIZE);
1910 	}
1911 	curthread->t_flag &= ~T_DONTBLOCK;
1912 
1913 	return (0);
1914 }
1915 
1916 
1917 void
1918 sbupdate(struct vfs *vfsp)
1919 {
1920 	struct ufsvfs *ufsvfsp = (struct ufsvfs *)vfsp->vfs_data;
1921 	struct fs *fs = ufsvfsp->vfs_fs;
1922 	struct buf *bp;
1923 	int blks;
1924 	caddr_t space;
1925 	int i;
1926 	size_t size;
1927 
1928 	/*
1929 	 * for ulockfs processing, limit the superblock writes
1930 	 */
1931 	if ((ufsvfsp->vfs_ulockfs.ul_sbowner) &&
1932 	    (curthread != ufsvfsp->vfs_ulockfs.ul_sbowner)) {
1933 		/* process later */
1934 		fs->fs_fmod = 1;
1935 		return;
1936 	}
1937 	ULOCKFS_SET_MOD((&ufsvfsp->vfs_ulockfs));
1938 
1939 	if (TRANS_ISTRANS(ufsvfsp)) {
1940 		mutex_enter(&ufsvfsp->vfs_lock);
1941 		ufs_sbwrite(ufsvfsp);
1942 		mutex_exit(&ufsvfsp->vfs_lock);
1943 		return;
1944 	}
1945 
1946 	blks = howmany(fs->fs_cssize, fs->fs_fsize);
1947 	space = (caddr_t)fs->fs_u.fs_csp;
1948 	for (i = 0; i < blks; i += fs->fs_frag) {
1949 		size = fs->fs_bsize;
1950 		if (i + fs->fs_frag > blks)
1951 			size = (blks - i) * fs->fs_fsize;
1952 		bp = UFS_GETBLK(ufsvfsp, ufsvfsp->vfs_dev,
1953 		    (daddr_t)(fsbtodb(fs, fs->fs_csaddr + i)),
1954 		    fs->fs_bsize);
1955 		bcopy(space, bp->b_un.b_addr, size);
1956 		space += size;
1957 		bp->b_bcount = size;
1958 		UFS_BRWRITE(ufsvfsp, bp);
1959 	}
1960 	mutex_enter(&ufsvfsp->vfs_lock);
1961 	ufs_sbwrite(ufsvfsp);
1962 	mutex_exit(&ufsvfsp->vfs_lock);
1963 }
1964 
1965 int ufs_vget_idle_count = 2;	/* Number of inodes to idle each time */
1966 static int
1967 ufs_vget(struct vfs *vfsp, struct vnode **vpp, struct fid *fidp)
1968 {
1969 	int error = 0;
1970 	struct ufid *ufid;
1971 	struct inode *ip;
1972 	struct ufsvfs *ufsvfsp = (struct ufsvfs *)vfsp->vfs_data;
1973 	struct ulockfs *ulp;
1974 
1975 	/*
1976 	 * Check for unmounted filesystem.
1977 	 */
1978 	if (vfsp->vfs_flag & VFS_UNMOUNTED) {
1979 		error = EIO;
1980 		goto errout;
1981 	}
1982 
1983 	/*
1984 	 * Keep the idle queue from getting too long by
1985 	 * idling an inode before attempting to allocate another.
1986 	 *    This operation must be performed before entering
1987 	 *    lockfs or a transaction.
1988 	 */
1989 	if (ufs_idle_q.uq_ne > ufs_idle_q.uq_hiwat)
1990 		if ((curthread->t_flag & T_DONTBLOCK) == 0) {
1991 			ins.in_vidles.value.ul += ufs_vget_idle_count;
1992 			ufs_idle_some(ufs_vget_idle_count);
1993 		}
1994 
1995 	ufid = (struct ufid *)fidp;
1996 
1997 	if (error = ufs_lockfs_begin(ufsvfsp, &ulp, ULOCKFS_VGET_MASK))
1998 		goto errout;
1999 
2000 	rw_enter(&ufsvfsp->vfs_dqrwlock, RW_READER);
2001 
2002 	error = ufs_iget(vfsp, ufid->ufid_ino, &ip, CRED());
2003 
2004 	rw_exit(&ufsvfsp->vfs_dqrwlock);
2005 
2006 	ufs_lockfs_end(ulp);
2007 
2008 	if (error)
2009 		goto errout;
2010 
2011 	/*
2012 	 * Check if the inode has been deleted or freed or is in transient state
2013 	 * since the last VFS_VGET() request for it, release it and don't return
2014 	 * it to the caller, presumably NFS, as it's no longer valid.
2015 	 */
2016 	if (ip->i_gen != ufid->ufid_gen || ip->i_mode == 0 ||
2017 	    (ip->i_flag & IDEL)) {
2018 		VN_RELE(ITOV(ip));
2019 		error = EINVAL;
2020 		goto errout;
2021 	}
2022 
2023 	*vpp = ITOV(ip);
2024 	return (0);
2025 
2026 errout:
2027 	*vpp = NULL;
2028 	return (error);
2029 }
2030 
2031 static int
2032 ufsinit(int fstype, char *name)
2033 {
2034 	static const fs_operation_def_t ufs_vfsops_template[] = {
2035 		VFSNAME_MOUNT,		{ .vfs_mount = ufs_mount },
2036 		VFSNAME_UNMOUNT,	{ .vfs_unmount = ufs_unmount },
2037 		VFSNAME_ROOT,		{ .vfs_root = ufs_root },
2038 		VFSNAME_STATVFS,	{ .vfs_statvfs = ufs_statvfs },
2039 		VFSNAME_SYNC,		{ .vfs_sync = ufs_sync },
2040 		VFSNAME_VGET,		{ .vfs_vget = ufs_vget },
2041 		VFSNAME_MOUNTROOT,	{ .vfs_mountroot = ufs_mountroot },
2042 		NULL,			NULL
2043 	};
2044 	int error;
2045 
2046 	ufsfstype = fstype;
2047 
2048 	error = vfs_setfsops(fstype, ufs_vfsops_template, &ufs_vfsops);
2049 	if (error != 0) {
2050 		cmn_err(CE_WARN, "ufsinit: bad vfs ops template");
2051 		return (error);
2052 	}
2053 
2054 	error = vn_make_ops(name, ufs_vnodeops_template, &ufs_vnodeops);
2055 	if (error != 0) {
2056 		(void) vfs_freevfsops_by_type(fstype);
2057 		cmn_err(CE_WARN, "ufsinit: bad vnode ops template");
2058 		return (error);
2059 	}
2060 
2061 	ufs_iinit();
2062 	return (0);
2063 }
2064 
2065 #ifdef __sparc
2066 
2067 /*
2068  * Mounting a mirrored SVM volume is only supported on ufs,
2069  * this is special-case boot code to support that configuration.
2070  * At this point, we have booted and mounted root on a
2071  * single component of the mirror.  Complete the boot
2072  * by configuring SVM and converting the root to the
2073  * dev_t of the mirrored root device.  This dev_t conversion
2074  * only works because the underlying device doesn't change.
2075  */
2076 int
2077 ufs_remountroot(struct vfs *vfsp)
2078 {
2079 	struct ufsvfs *ufsvfsp;
2080 	struct ulockfs *ulp;
2081 	dev_t new_rootdev;
2082 	dev_t old_rootdev;
2083 	struct vnode *old_rootvp;
2084 	struct vnode *new_rootvp;
2085 	int error, sberror = 0;
2086 	struct inode	*ip;
2087 	union ihead	*ih;
2088 	struct buf	*bp;
2089 	int i;
2090 
2091 	old_rootdev = rootdev;
2092 	old_rootvp = rootvp;
2093 
2094 	new_rootdev = getrootdev();
2095 	if (new_rootdev == (dev_t)NODEV) {
2096 		return (ENODEV);
2097 	}
2098 
2099 	new_rootvp = makespecvp(new_rootdev, VBLK);
2100 
2101 	error = VOP_OPEN(&new_rootvp,
2102 	    (vfsp->vfs_flag & VFS_RDONLY) ? FREAD : FREAD|FWRITE, CRED());
2103 	if (error) {
2104 		cmn_err(CE_CONT,
2105 		    "Cannot open mirrored root device, error %d\n", error);
2106 		return (error);
2107 	}
2108 
2109 	if (vfs_lock(vfsp) != 0) {
2110 		return (EBUSY);
2111 	}
2112 
2113 	ufsvfsp = (struct ufsvfs *)vfsp->vfs_data;
2114 	ulp = &ufsvfsp->vfs_ulockfs;
2115 
2116 	mutex_enter(&ulp->ul_lock);
2117 	atomic_add_long(&ufs_quiesce_pend, 1);
2118 
2119 	(void) ufs_quiesce(ulp);
2120 	(void) ufs_flush(vfsp);
2121 
2122 	/*
2123 	 * Convert root vfs to new dev_t, including vfs hash
2124 	 * table and fs id.
2125 	 */
2126 	vfs_root_redev(vfsp, new_rootdev, ufsfstype);
2127 
2128 	ufsvfsp->vfs_devvp = new_rootvp;
2129 	ufsvfsp->vfs_dev = new_rootdev;
2130 
2131 	bp = ufsvfsp->vfs_bufp;
2132 	bp->b_edev = new_rootdev;
2133 	bp->b_dev = cmpdev(new_rootdev);
2134 
2135 	/*
2136 	 * The buffer for the root inode does not contain a valid b_vp
2137 	 */
2138 	(void) bfinval(new_rootdev, 0);
2139 
2140 	/*
2141 	 * Here we hand-craft inodes with old root device
2142 	 * references to refer to the new device instead.
2143 	 */
2144 	mutex_enter(&ufs_scan_lock);
2145 
2146 	for (i = 0, ih = ihead; i < inohsz; i++, ih++) {
2147 		mutex_enter(&ih_lock[i]);
2148 		for (ip = ih->ih_chain[0];
2149 		    ip != (struct inode *)ih;
2150 		    ip = ip->i_forw) {
2151 			if (ip->i_ufsvfs != ufsvfsp)
2152 				continue;
2153 			if (ip == ufsvfsp->vfs_qinod)
2154 				continue;
2155 			if (ip->i_dev == old_rootdev) {
2156 				ip->i_dev = new_rootdev;
2157 			}
2158 
2159 			if (ip->i_devvp == old_rootvp) {
2160 				ip->i_devvp = new_rootvp;
2161 			}
2162 		}
2163 		mutex_exit(&ih_lock[i]);
2164 	}
2165 
2166 	mutex_exit(&ufs_scan_lock);
2167 
2168 	/*
2169 	 * Make Sure logging structures are using the new device
2170 	 * if logging is enabled.  Also start any logging thread that
2171 	 * needs to write to the device and couldn't earlier.
2172 	 */
2173 	if (ufsvfsp->vfs_log) {
2174 		buf_t		*bp, *tbp;
2175 		ml_unit_t	*ul = ufsvfsp->vfs_log;
2176 		struct fs	*fsp = ufsvfsp->vfs_fs;
2177 
2178 		/*
2179 		 * Update the main logging structure.
2180 		 */
2181 		ul->un_dev = new_rootdev;
2182 
2183 		/*
2184 		 * Get a new bp for the on disk structures.
2185 		 */
2186 		bp = ul->un_bp;
2187 		tbp = ngeteblk(dbtob(LS_SECTORS));
2188 		tbp->b_edev = new_rootdev;
2189 		tbp->b_dev = cmpdev(new_rootdev);
2190 		tbp->b_blkno = bp->b_blkno;
2191 		bcopy(bp->b_un.b_addr, tbp->b_un.b_addr, DEV_BSIZE);
2192 		bcopy(bp->b_un.b_addr, tbp->b_un.b_addr + DEV_BSIZE, DEV_BSIZE);
2193 		bp->b_flags |= (B_STALE | B_AGE);
2194 		brelse(bp);
2195 		ul->un_bp = tbp;
2196 
2197 		/*
2198 		 * Allocate new circular buffers.
2199 		 */
2200 		alloc_rdbuf(&ul->un_rdbuf, MAPBLOCKSIZE, MAPBLOCKSIZE);
2201 		alloc_wrbuf(&ul->un_wrbuf, ldl_bufsize(ul));
2202 
2203 		/*
2204 		 * Clear the noroll bit which indicates that logging
2205 		 * can't roll the log yet and start the logmap roll thread
2206 		 * unless the filesystem is still read-only in which case
2207 		 * remountfs() will do it when going to read-write.
2208 		 */
2209 		ASSERT(ul->un_flags & LDL_NOROLL);
2210 
2211 		if (!fsp->fs_ronly) {
2212 			ul->un_flags &= ~LDL_NOROLL;
2213 			logmap_start_roll(ul);
2214 		}
2215 
2216 		/*
2217 		 * Start the reclaim thread if needed.
2218 		 */
2219 		if (!fsp->fs_ronly && (fsp->fs_reclaim &
2220 		    (FS_RECLAIM|FS_RECLAIMING))) {
2221 			fsp->fs_reclaim &= ~FS_RECLAIM;
2222 			fsp->fs_reclaim |= FS_RECLAIMING;
2223 			ufs_thread_start(&ufsvfsp->vfs_reclaim,
2224 			    ufs_thread_reclaim, vfsp);
2225 			TRANS_SBWRITE(ufsvfsp, TOP_SBUPDATE_UPDATE);
2226 			if (sberror = geterror(ufsvfsp->vfs_bufp)) {
2227 				refstr_t	*mntpt;
2228 				mntpt = vfs_getmntpoint(vfsp);
2229 				cmn_err(CE_WARN,
2230 				    "Remountroot failed to update Reclaim"
2231 				    "state for filesystem %s "
2232 				    "Error writing SuperBlock %d",
2233 				    refstr_value(mntpt), error);
2234 				refstr_rele(mntpt);
2235 			}
2236 		}
2237 	}
2238 
2239 	rootdev = new_rootdev;
2240 	rootvp = new_rootvp;
2241 
2242 	atomic_add_long(&ufs_quiesce_pend, -1);
2243 	cv_broadcast(&ulp->ul_cv);
2244 	mutex_exit(&ulp->ul_lock);
2245 
2246 	vfs_unlock(vfsp);
2247 
2248 	error = VOP_CLOSE(old_rootvp, FREAD, 1, (offset_t)0, CRED());
2249 	if (error) {
2250 		cmn_err(CE_CONT,
2251 		    "close of root device component failed, error %d\n",
2252 		    error);
2253 	}
2254 	VN_RELE(old_rootvp);
2255 
2256 	return (sberror ? sberror : error);
2257 }
2258 
2259 #endif	/* __sparc */
2260