1/*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or https://opensource.org/licenses/CDDL-1.0.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21/*
22 * Copyright (c) 2005, 2010, Oracle and/or its affiliates. All rights reserved.
23 * Copyright (c) 2012, 2020 by Delphix. All rights reserved.
24 * Copyright (c) 2014 Spectra Logic Corporation, All rights reserved.
25 */
26
27#include <sys/zfs_context.h>
28#include <sys/dbuf.h>
29#include <sys/dnode.h>
30#include <sys/dmu.h>
31#include <sys/dmu_impl.h>
32#include <sys/dmu_tx.h>
33#include <sys/dmu_objset.h>
34#include <sys/dsl_dir.h>
35#include <sys/dsl_dataset.h>
36#include <sys/spa.h>
37#include <sys/zio.h>
38#include <sys/dmu_zfetch.h>
39#include <sys/range_tree.h>
40#include <sys/trace_zfs.h>
41#include <sys/zfs_project.h>
42
43dnode_stats_t dnode_stats = {
44	{ "dnode_hold_dbuf_hold",		KSTAT_DATA_UINT64 },
45	{ "dnode_hold_dbuf_read",		KSTAT_DATA_UINT64 },
46	{ "dnode_hold_alloc_hits",		KSTAT_DATA_UINT64 },
47	{ "dnode_hold_alloc_misses",		KSTAT_DATA_UINT64 },
48	{ "dnode_hold_alloc_interior",		KSTAT_DATA_UINT64 },
49	{ "dnode_hold_alloc_lock_retry",	KSTAT_DATA_UINT64 },
50	{ "dnode_hold_alloc_lock_misses",	KSTAT_DATA_UINT64 },
51	{ "dnode_hold_alloc_type_none",		KSTAT_DATA_UINT64 },
52	{ "dnode_hold_free_hits",		KSTAT_DATA_UINT64 },
53	{ "dnode_hold_free_misses",		KSTAT_DATA_UINT64 },
54	{ "dnode_hold_free_lock_misses",	KSTAT_DATA_UINT64 },
55	{ "dnode_hold_free_lock_retry",		KSTAT_DATA_UINT64 },
56	{ "dnode_hold_free_overflow",		KSTAT_DATA_UINT64 },
57	{ "dnode_hold_free_refcount",		KSTAT_DATA_UINT64 },
58	{ "dnode_free_interior_lock_retry",	KSTAT_DATA_UINT64 },
59	{ "dnode_allocate",			KSTAT_DATA_UINT64 },
60	{ "dnode_reallocate",			KSTAT_DATA_UINT64 },
61	{ "dnode_buf_evict",			KSTAT_DATA_UINT64 },
62	{ "dnode_alloc_next_chunk",		KSTAT_DATA_UINT64 },
63	{ "dnode_alloc_race",			KSTAT_DATA_UINT64 },
64	{ "dnode_alloc_next_block",		KSTAT_DATA_UINT64 },
65	{ "dnode_move_invalid",			KSTAT_DATA_UINT64 },
66	{ "dnode_move_recheck1",		KSTAT_DATA_UINT64 },
67	{ "dnode_move_recheck2",		KSTAT_DATA_UINT64 },
68	{ "dnode_move_special",			KSTAT_DATA_UINT64 },
69	{ "dnode_move_handle",			KSTAT_DATA_UINT64 },
70	{ "dnode_move_rwlock",			KSTAT_DATA_UINT64 },
71	{ "dnode_move_active",			KSTAT_DATA_UINT64 },
72};
73
74dnode_sums_t dnode_sums;
75
76static kstat_t *dnode_ksp;
77static kmem_cache_t *dnode_cache;
78
79static dnode_phys_t dnode_phys_zero __maybe_unused;
80
81int zfs_default_bs = SPA_MINBLOCKSHIFT;
82int zfs_default_ibs = DN_MAX_INDBLKSHIFT;
83
84#ifdef	_KERNEL
85static kmem_cbrc_t dnode_move(void *, void *, size_t, void *);
86#endif /* _KERNEL */
87
88static int
89dbuf_compare(const void *x1, const void *x2)
90{
91	const dmu_buf_impl_t *d1 = x1;
92	const dmu_buf_impl_t *d2 = x2;
93
94	int cmp = TREE_CMP(d1->db_level, d2->db_level);
95	if (likely(cmp))
96		return (cmp);
97
98	cmp = TREE_CMP(d1->db_blkid, d2->db_blkid);
99	if (likely(cmp))
100		return (cmp);
101
102	if (d1->db_state == DB_MARKER) {
103		ASSERT3S(d2->db_state, !=, DB_MARKER);
104		return (TREE_PCMP(d1->db_parent, d2));
105	} else if (d2->db_state == DB_MARKER) {
106		ASSERT3S(d1->db_state, !=, DB_MARKER);
107		return (TREE_PCMP(d1, d2->db_parent));
108	}
109
110	if (d1->db_state == DB_SEARCH) {
111		ASSERT3S(d2->db_state, !=, DB_SEARCH);
112		return (-1);
113	} else if (d2->db_state == DB_SEARCH) {
114		ASSERT3S(d1->db_state, !=, DB_SEARCH);
115		return (1);
116	}
117
118	return (TREE_PCMP(d1, d2));
119}
120
121static int
122dnode_cons(void *arg, void *unused, int kmflag)
123{
124	(void) unused, (void) kmflag;
125	dnode_t *dn = arg;
126
127	rw_init(&dn->dn_struct_rwlock, NULL, RW_NOLOCKDEP, NULL);
128	mutex_init(&dn->dn_mtx, NULL, MUTEX_DEFAULT, NULL);
129	mutex_init(&dn->dn_dbufs_mtx, NULL, MUTEX_DEFAULT, NULL);
130	cv_init(&dn->dn_notxholds, NULL, CV_DEFAULT, NULL);
131	cv_init(&dn->dn_nodnholds, NULL, CV_DEFAULT, NULL);
132
133	/*
134	 * Every dbuf has a reference, and dropping a tracked reference is
135	 * O(number of references), so don't track dn_holds.
136	 */
137	zfs_refcount_create_untracked(&dn->dn_holds);
138	zfs_refcount_create(&dn->dn_tx_holds);
139	list_link_init(&dn->dn_link);
140
141	memset(dn->dn_next_type, 0, sizeof (dn->dn_next_type));
142	memset(dn->dn_next_nblkptr, 0, sizeof (dn->dn_next_nblkptr));
143	memset(dn->dn_next_nlevels, 0, sizeof (dn->dn_next_nlevels));
144	memset(dn->dn_next_indblkshift, 0, sizeof (dn->dn_next_indblkshift));
145	memset(dn->dn_next_bonustype, 0, sizeof (dn->dn_next_bonustype));
146	memset(dn->dn_rm_spillblk, 0, sizeof (dn->dn_rm_spillblk));
147	memset(dn->dn_next_bonuslen, 0, sizeof (dn->dn_next_bonuslen));
148	memset(dn->dn_next_blksz, 0, sizeof (dn->dn_next_blksz));
149	memset(dn->dn_next_maxblkid, 0, sizeof (dn->dn_next_maxblkid));
150
151	for (int i = 0; i < TXG_SIZE; i++) {
152		multilist_link_init(&dn->dn_dirty_link[i]);
153		dn->dn_free_ranges[i] = NULL;
154		list_create(&dn->dn_dirty_records[i],
155		    sizeof (dbuf_dirty_record_t),
156		    offsetof(dbuf_dirty_record_t, dr_dirty_node));
157	}
158
159	dn->dn_allocated_txg = 0;
160	dn->dn_free_txg = 0;
161	dn->dn_assigned_txg = 0;
162	dn->dn_dirty_txg = 0;
163	dn->dn_dirtyctx = 0;
164	dn->dn_dirtyctx_firstset = NULL;
165	dn->dn_bonus = NULL;
166	dn->dn_have_spill = B_FALSE;
167	dn->dn_zio = NULL;
168	dn->dn_oldused = 0;
169	dn->dn_oldflags = 0;
170	dn->dn_olduid = 0;
171	dn->dn_oldgid = 0;
172	dn->dn_oldprojid = ZFS_DEFAULT_PROJID;
173	dn->dn_newuid = 0;
174	dn->dn_newgid = 0;
175	dn->dn_newprojid = ZFS_DEFAULT_PROJID;
176	dn->dn_id_flags = 0;
177
178	dn->dn_dbufs_count = 0;
179	avl_create(&dn->dn_dbufs, dbuf_compare, sizeof (dmu_buf_impl_t),
180	    offsetof(dmu_buf_impl_t, db_link));
181
182	dn->dn_moved = 0;
183	return (0);
184}
185
186static void
187dnode_dest(void *arg, void *unused)
188{
189	(void) unused;
190	dnode_t *dn = arg;
191
192	rw_destroy(&dn->dn_struct_rwlock);
193	mutex_destroy(&dn->dn_mtx);
194	mutex_destroy(&dn->dn_dbufs_mtx);
195	cv_destroy(&dn->dn_notxholds);
196	cv_destroy(&dn->dn_nodnholds);
197	zfs_refcount_destroy(&dn->dn_holds);
198	zfs_refcount_destroy(&dn->dn_tx_holds);
199	ASSERT(!list_link_active(&dn->dn_link));
200
201	for (int i = 0; i < TXG_SIZE; i++) {
202		ASSERT(!multilist_link_active(&dn->dn_dirty_link[i]));
203		ASSERT3P(dn->dn_free_ranges[i], ==, NULL);
204		list_destroy(&dn->dn_dirty_records[i]);
205		ASSERT0(dn->dn_next_nblkptr[i]);
206		ASSERT0(dn->dn_next_nlevels[i]);
207		ASSERT0(dn->dn_next_indblkshift[i]);
208		ASSERT0(dn->dn_next_bonustype[i]);
209		ASSERT0(dn->dn_rm_spillblk[i]);
210		ASSERT0(dn->dn_next_bonuslen[i]);
211		ASSERT0(dn->dn_next_blksz[i]);
212		ASSERT0(dn->dn_next_maxblkid[i]);
213	}
214
215	ASSERT0(dn->dn_allocated_txg);
216	ASSERT0(dn->dn_free_txg);
217	ASSERT0(dn->dn_assigned_txg);
218	ASSERT0(dn->dn_dirty_txg);
219	ASSERT0(dn->dn_dirtyctx);
220	ASSERT3P(dn->dn_dirtyctx_firstset, ==, NULL);
221	ASSERT3P(dn->dn_bonus, ==, NULL);
222	ASSERT(!dn->dn_have_spill);
223	ASSERT3P(dn->dn_zio, ==, NULL);
224	ASSERT0(dn->dn_oldused);
225	ASSERT0(dn->dn_oldflags);
226	ASSERT0(dn->dn_olduid);
227	ASSERT0(dn->dn_oldgid);
228	ASSERT0(dn->dn_oldprojid);
229	ASSERT0(dn->dn_newuid);
230	ASSERT0(dn->dn_newgid);
231	ASSERT0(dn->dn_newprojid);
232	ASSERT0(dn->dn_id_flags);
233
234	ASSERT0(dn->dn_dbufs_count);
235	avl_destroy(&dn->dn_dbufs);
236}
237
238static int
239dnode_kstats_update(kstat_t *ksp, int rw)
240{
241	dnode_stats_t *ds = ksp->ks_data;
242
243	if (rw == KSTAT_WRITE)
244		return (EACCES);
245	ds->dnode_hold_dbuf_hold.value.ui64 =
246	    wmsum_value(&dnode_sums.dnode_hold_dbuf_hold);
247	ds->dnode_hold_dbuf_read.value.ui64 =
248	    wmsum_value(&dnode_sums.dnode_hold_dbuf_read);
249	ds->dnode_hold_alloc_hits.value.ui64 =
250	    wmsum_value(&dnode_sums.dnode_hold_alloc_hits);
251	ds->dnode_hold_alloc_misses.value.ui64 =
252	    wmsum_value(&dnode_sums.dnode_hold_alloc_misses);
253	ds->dnode_hold_alloc_interior.value.ui64 =
254	    wmsum_value(&dnode_sums.dnode_hold_alloc_interior);
255	ds->dnode_hold_alloc_lock_retry.value.ui64 =
256	    wmsum_value(&dnode_sums.dnode_hold_alloc_lock_retry);
257	ds->dnode_hold_alloc_lock_misses.value.ui64 =
258	    wmsum_value(&dnode_sums.dnode_hold_alloc_lock_misses);
259	ds->dnode_hold_alloc_type_none.value.ui64 =
260	    wmsum_value(&dnode_sums.dnode_hold_alloc_type_none);
261	ds->dnode_hold_free_hits.value.ui64 =
262	    wmsum_value(&dnode_sums.dnode_hold_free_hits);
263	ds->dnode_hold_free_misses.value.ui64 =
264	    wmsum_value(&dnode_sums.dnode_hold_free_misses);
265	ds->dnode_hold_free_lock_misses.value.ui64 =
266	    wmsum_value(&dnode_sums.dnode_hold_free_lock_misses);
267	ds->dnode_hold_free_lock_retry.value.ui64 =
268	    wmsum_value(&dnode_sums.dnode_hold_free_lock_retry);
269	ds->dnode_hold_free_refcount.value.ui64 =
270	    wmsum_value(&dnode_sums.dnode_hold_free_refcount);
271	ds->dnode_hold_free_overflow.value.ui64 =
272	    wmsum_value(&dnode_sums.dnode_hold_free_overflow);
273	ds->dnode_free_interior_lock_retry.value.ui64 =
274	    wmsum_value(&dnode_sums.dnode_free_interior_lock_retry);
275	ds->dnode_allocate.value.ui64 =
276	    wmsum_value(&dnode_sums.dnode_allocate);
277	ds->dnode_reallocate.value.ui64 =
278	    wmsum_value(&dnode_sums.dnode_reallocate);
279	ds->dnode_buf_evict.value.ui64 =
280	    wmsum_value(&dnode_sums.dnode_buf_evict);
281	ds->dnode_alloc_next_chunk.value.ui64 =
282	    wmsum_value(&dnode_sums.dnode_alloc_next_chunk);
283	ds->dnode_alloc_race.value.ui64 =
284	    wmsum_value(&dnode_sums.dnode_alloc_race);
285	ds->dnode_alloc_next_block.value.ui64 =
286	    wmsum_value(&dnode_sums.dnode_alloc_next_block);
287	ds->dnode_move_invalid.value.ui64 =
288	    wmsum_value(&dnode_sums.dnode_move_invalid);
289	ds->dnode_move_recheck1.value.ui64 =
290	    wmsum_value(&dnode_sums.dnode_move_recheck1);
291	ds->dnode_move_recheck2.value.ui64 =
292	    wmsum_value(&dnode_sums.dnode_move_recheck2);
293	ds->dnode_move_special.value.ui64 =
294	    wmsum_value(&dnode_sums.dnode_move_special);
295	ds->dnode_move_handle.value.ui64 =
296	    wmsum_value(&dnode_sums.dnode_move_handle);
297	ds->dnode_move_rwlock.value.ui64 =
298	    wmsum_value(&dnode_sums.dnode_move_rwlock);
299	ds->dnode_move_active.value.ui64 =
300	    wmsum_value(&dnode_sums.dnode_move_active);
301	return (0);
302}
303
304void
305dnode_init(void)
306{
307	ASSERT(dnode_cache == NULL);
308	dnode_cache = kmem_cache_create("dnode_t", sizeof (dnode_t),
309	    0, dnode_cons, dnode_dest, NULL, NULL, NULL, 0);
310	kmem_cache_set_move(dnode_cache, dnode_move);
311
312	wmsum_init(&dnode_sums.dnode_hold_dbuf_hold, 0);
313	wmsum_init(&dnode_sums.dnode_hold_dbuf_read, 0);
314	wmsum_init(&dnode_sums.dnode_hold_alloc_hits, 0);
315	wmsum_init(&dnode_sums.dnode_hold_alloc_misses, 0);
316	wmsum_init(&dnode_sums.dnode_hold_alloc_interior, 0);
317	wmsum_init(&dnode_sums.dnode_hold_alloc_lock_retry, 0);
318	wmsum_init(&dnode_sums.dnode_hold_alloc_lock_misses, 0);
319	wmsum_init(&dnode_sums.dnode_hold_alloc_type_none, 0);
320	wmsum_init(&dnode_sums.dnode_hold_free_hits, 0);
321	wmsum_init(&dnode_sums.dnode_hold_free_misses, 0);
322	wmsum_init(&dnode_sums.dnode_hold_free_lock_misses, 0);
323	wmsum_init(&dnode_sums.dnode_hold_free_lock_retry, 0);
324	wmsum_init(&dnode_sums.dnode_hold_free_refcount, 0);
325	wmsum_init(&dnode_sums.dnode_hold_free_overflow, 0);
326	wmsum_init(&dnode_sums.dnode_free_interior_lock_retry, 0);
327	wmsum_init(&dnode_sums.dnode_allocate, 0);
328	wmsum_init(&dnode_sums.dnode_reallocate, 0);
329	wmsum_init(&dnode_sums.dnode_buf_evict, 0);
330	wmsum_init(&dnode_sums.dnode_alloc_next_chunk, 0);
331	wmsum_init(&dnode_sums.dnode_alloc_race, 0);
332	wmsum_init(&dnode_sums.dnode_alloc_next_block, 0);
333	wmsum_init(&dnode_sums.dnode_move_invalid, 0);
334	wmsum_init(&dnode_sums.dnode_move_recheck1, 0);
335	wmsum_init(&dnode_sums.dnode_move_recheck2, 0);
336	wmsum_init(&dnode_sums.dnode_move_special, 0);
337	wmsum_init(&dnode_sums.dnode_move_handle, 0);
338	wmsum_init(&dnode_sums.dnode_move_rwlock, 0);
339	wmsum_init(&dnode_sums.dnode_move_active, 0);
340
341	dnode_ksp = kstat_create("zfs", 0, "dnodestats", "misc",
342	    KSTAT_TYPE_NAMED, sizeof (dnode_stats) / sizeof (kstat_named_t),
343	    KSTAT_FLAG_VIRTUAL);
344	if (dnode_ksp != NULL) {
345		dnode_ksp->ks_data = &dnode_stats;
346		dnode_ksp->ks_update = dnode_kstats_update;
347		kstat_install(dnode_ksp);
348	}
349}
350
351void
352dnode_fini(void)
353{
354	if (dnode_ksp != NULL) {
355		kstat_delete(dnode_ksp);
356		dnode_ksp = NULL;
357	}
358
359	wmsum_fini(&dnode_sums.dnode_hold_dbuf_hold);
360	wmsum_fini(&dnode_sums.dnode_hold_dbuf_read);
361	wmsum_fini(&dnode_sums.dnode_hold_alloc_hits);
362	wmsum_fini(&dnode_sums.dnode_hold_alloc_misses);
363	wmsum_fini(&dnode_sums.dnode_hold_alloc_interior);
364	wmsum_fini(&dnode_sums.dnode_hold_alloc_lock_retry);
365	wmsum_fini(&dnode_sums.dnode_hold_alloc_lock_misses);
366	wmsum_fini(&dnode_sums.dnode_hold_alloc_type_none);
367	wmsum_fini(&dnode_sums.dnode_hold_free_hits);
368	wmsum_fini(&dnode_sums.dnode_hold_free_misses);
369	wmsum_fini(&dnode_sums.dnode_hold_free_lock_misses);
370	wmsum_fini(&dnode_sums.dnode_hold_free_lock_retry);
371	wmsum_fini(&dnode_sums.dnode_hold_free_refcount);
372	wmsum_fini(&dnode_sums.dnode_hold_free_overflow);
373	wmsum_fini(&dnode_sums.dnode_free_interior_lock_retry);
374	wmsum_fini(&dnode_sums.dnode_allocate);
375	wmsum_fini(&dnode_sums.dnode_reallocate);
376	wmsum_fini(&dnode_sums.dnode_buf_evict);
377	wmsum_fini(&dnode_sums.dnode_alloc_next_chunk);
378	wmsum_fini(&dnode_sums.dnode_alloc_race);
379	wmsum_fini(&dnode_sums.dnode_alloc_next_block);
380	wmsum_fini(&dnode_sums.dnode_move_invalid);
381	wmsum_fini(&dnode_sums.dnode_move_recheck1);
382	wmsum_fini(&dnode_sums.dnode_move_recheck2);
383	wmsum_fini(&dnode_sums.dnode_move_special);
384	wmsum_fini(&dnode_sums.dnode_move_handle);
385	wmsum_fini(&dnode_sums.dnode_move_rwlock);
386	wmsum_fini(&dnode_sums.dnode_move_active);
387
388	kmem_cache_destroy(dnode_cache);
389	dnode_cache = NULL;
390}
391
392
393#ifdef ZFS_DEBUG
394void
395dnode_verify(dnode_t *dn)
396{
397	int drop_struct_lock = FALSE;
398
399	ASSERT(dn->dn_phys);
400	ASSERT(dn->dn_objset);
401	ASSERT(dn->dn_handle->dnh_dnode == dn);
402
403	ASSERT(DMU_OT_IS_VALID(dn->dn_phys->dn_type));
404
405	if (!(zfs_flags & ZFS_DEBUG_DNODE_VERIFY))
406		return;
407
408	if (!RW_WRITE_HELD(&dn->dn_struct_rwlock)) {
409		rw_enter(&dn->dn_struct_rwlock, RW_READER);
410		drop_struct_lock = TRUE;
411	}
412	if (dn->dn_phys->dn_type != DMU_OT_NONE || dn->dn_allocated_txg != 0) {
413		int i;
414		int max_bonuslen = DN_SLOTS_TO_BONUSLEN(dn->dn_num_slots);
415		ASSERT3U(dn->dn_indblkshift, <=, SPA_MAXBLOCKSHIFT);
416		if (dn->dn_datablkshift) {
417			ASSERT3U(dn->dn_datablkshift, >=, SPA_MINBLOCKSHIFT);
418			ASSERT3U(dn->dn_datablkshift, <=, SPA_MAXBLOCKSHIFT);
419			ASSERT3U(1<<dn->dn_datablkshift, ==, dn->dn_datablksz);
420		}
421		ASSERT3U(dn->dn_nlevels, <=, 30);
422		ASSERT(DMU_OT_IS_VALID(dn->dn_type));
423		ASSERT3U(dn->dn_nblkptr, >=, 1);
424		ASSERT3U(dn->dn_nblkptr, <=, DN_MAX_NBLKPTR);
425		ASSERT3U(dn->dn_bonuslen, <=, max_bonuslen);
426		ASSERT3U(dn->dn_datablksz, ==,
427		    dn->dn_datablkszsec << SPA_MINBLOCKSHIFT);
428		ASSERT3U(ISP2(dn->dn_datablksz), ==, dn->dn_datablkshift != 0);
429		ASSERT3U((dn->dn_nblkptr - 1) * sizeof (blkptr_t) +
430		    dn->dn_bonuslen, <=, max_bonuslen);
431		for (i = 0; i < TXG_SIZE; i++) {
432			ASSERT3U(dn->dn_next_nlevels[i], <=, dn->dn_nlevels);
433		}
434	}
435	if (dn->dn_phys->dn_type != DMU_OT_NONE)
436		ASSERT3U(dn->dn_phys->dn_nlevels, <=, dn->dn_nlevels);
437	ASSERT(DMU_OBJECT_IS_SPECIAL(dn->dn_object) || dn->dn_dbuf != NULL);
438	if (dn->dn_dbuf != NULL) {
439		ASSERT3P(dn->dn_phys, ==,
440		    (dnode_phys_t *)dn->dn_dbuf->db.db_data +
441		    (dn->dn_object % (dn->dn_dbuf->db.db_size >> DNODE_SHIFT)));
442	}
443	if (drop_struct_lock)
444		rw_exit(&dn->dn_struct_rwlock);
445}
446#endif
447
448void
449dnode_byteswap(dnode_phys_t *dnp)
450{
451	uint64_t *buf64 = (void*)&dnp->dn_blkptr;
452	int i;
453
454	if (dnp->dn_type == DMU_OT_NONE) {
455		memset(dnp, 0, sizeof (dnode_phys_t));
456		return;
457	}
458
459	dnp->dn_datablkszsec = BSWAP_16(dnp->dn_datablkszsec);
460	dnp->dn_bonuslen = BSWAP_16(dnp->dn_bonuslen);
461	dnp->dn_extra_slots = BSWAP_8(dnp->dn_extra_slots);
462	dnp->dn_maxblkid = BSWAP_64(dnp->dn_maxblkid);
463	dnp->dn_used = BSWAP_64(dnp->dn_used);
464
465	/*
466	 * dn_nblkptr is only one byte, so it's OK to read it in either
467	 * byte order.  We can't read dn_bouslen.
468	 */
469	ASSERT(dnp->dn_indblkshift <= SPA_MAXBLOCKSHIFT);
470	ASSERT(dnp->dn_nblkptr <= DN_MAX_NBLKPTR);
471	for (i = 0; i < dnp->dn_nblkptr * sizeof (blkptr_t)/8; i++)
472		buf64[i] = BSWAP_64(buf64[i]);
473
474	/*
475	 * OK to check dn_bonuslen for zero, because it won't matter if
476	 * we have the wrong byte order.  This is necessary because the
477	 * dnode dnode is smaller than a regular dnode.
478	 */
479	if (dnp->dn_bonuslen != 0) {
480		dmu_object_byteswap_t byteswap;
481		ASSERT(DMU_OT_IS_VALID(dnp->dn_bonustype));
482		byteswap = DMU_OT_BYTESWAP(dnp->dn_bonustype);
483		dmu_ot_byteswap[byteswap].ob_func(DN_BONUS(dnp),
484		    DN_MAX_BONUS_LEN(dnp));
485	}
486
487	/* Swap SPILL block if we have one */
488	if (dnp->dn_flags & DNODE_FLAG_SPILL_BLKPTR)
489		byteswap_uint64_array(DN_SPILL_BLKPTR(dnp), sizeof (blkptr_t));
490}
491
492void
493dnode_buf_byteswap(void *vbuf, size_t size)
494{
495	int i = 0;
496
497	ASSERT3U(sizeof (dnode_phys_t), ==, (1<<DNODE_SHIFT));
498	ASSERT((size & (sizeof (dnode_phys_t)-1)) == 0);
499
500	while (i < size) {
501		dnode_phys_t *dnp = (void *)(((char *)vbuf) + i);
502		dnode_byteswap(dnp);
503
504		i += DNODE_MIN_SIZE;
505		if (dnp->dn_type != DMU_OT_NONE)
506			i += dnp->dn_extra_slots * DNODE_MIN_SIZE;
507	}
508}
509
510void
511dnode_setbonuslen(dnode_t *dn, int newsize, dmu_tx_t *tx)
512{
513	ASSERT3U(zfs_refcount_count(&dn->dn_holds), >=, 1);
514
515	dnode_setdirty(dn, tx);
516	rw_enter(&dn->dn_struct_rwlock, RW_WRITER);
517	ASSERT3U(newsize, <=, DN_SLOTS_TO_BONUSLEN(dn->dn_num_slots) -
518	    (dn->dn_nblkptr-1) * sizeof (blkptr_t));
519
520	if (newsize < dn->dn_bonuslen) {
521		/* clear any data after the end of the new size */
522		size_t diff = dn->dn_bonuslen - newsize;
523		char *data_end = ((char *)dn->dn_bonus->db.db_data) + newsize;
524		memset(data_end, 0, diff);
525	}
526
527	dn->dn_bonuslen = newsize;
528	if (newsize == 0)
529		dn->dn_next_bonuslen[tx->tx_txg & TXG_MASK] = DN_ZERO_BONUSLEN;
530	else
531		dn->dn_next_bonuslen[tx->tx_txg & TXG_MASK] = dn->dn_bonuslen;
532	rw_exit(&dn->dn_struct_rwlock);
533}
534
535void
536dnode_setbonus_type(dnode_t *dn, dmu_object_type_t newtype, dmu_tx_t *tx)
537{
538	ASSERT3U(zfs_refcount_count(&dn->dn_holds), >=, 1);
539	dnode_setdirty(dn, tx);
540	rw_enter(&dn->dn_struct_rwlock, RW_WRITER);
541	dn->dn_bonustype = newtype;
542	dn->dn_next_bonustype[tx->tx_txg & TXG_MASK] = dn->dn_bonustype;
543	rw_exit(&dn->dn_struct_rwlock);
544}
545
546void
547dnode_rm_spill(dnode_t *dn, dmu_tx_t *tx)
548{
549	ASSERT3U(zfs_refcount_count(&dn->dn_holds), >=, 1);
550	ASSERT(RW_WRITE_HELD(&dn->dn_struct_rwlock));
551	dnode_setdirty(dn, tx);
552	dn->dn_rm_spillblk[tx->tx_txg & TXG_MASK] = DN_KILL_SPILLBLK;
553	dn->dn_have_spill = B_FALSE;
554}
555
556static void
557dnode_setdblksz(dnode_t *dn, int size)
558{
559	ASSERT0(P2PHASE(size, SPA_MINBLOCKSIZE));
560	ASSERT3U(size, <=, SPA_MAXBLOCKSIZE);
561	ASSERT3U(size, >=, SPA_MINBLOCKSIZE);
562	ASSERT3U(size >> SPA_MINBLOCKSHIFT, <,
563	    1<<(sizeof (dn->dn_phys->dn_datablkszsec) * 8));
564	dn->dn_datablksz = size;
565	dn->dn_datablkszsec = size >> SPA_MINBLOCKSHIFT;
566	dn->dn_datablkshift = ISP2(size) ? highbit64(size - 1) : 0;
567}
568
569static dnode_t *
570dnode_create(objset_t *os, dnode_phys_t *dnp, dmu_buf_impl_t *db,
571    uint64_t object, dnode_handle_t *dnh)
572{
573	dnode_t *dn;
574
575	dn = kmem_cache_alloc(dnode_cache, KM_SLEEP);
576	dn->dn_moved = 0;
577
578	/*
579	 * Defer setting dn_objset until the dnode is ready to be a candidate
580	 * for the dnode_move() callback.
581	 */
582	dn->dn_object = object;
583	dn->dn_dbuf = db;
584	dn->dn_handle = dnh;
585	dn->dn_phys = dnp;
586
587	if (dnp->dn_datablkszsec) {
588		dnode_setdblksz(dn, dnp->dn_datablkszsec << SPA_MINBLOCKSHIFT);
589	} else {
590		dn->dn_datablksz = 0;
591		dn->dn_datablkszsec = 0;
592		dn->dn_datablkshift = 0;
593	}
594	dn->dn_indblkshift = dnp->dn_indblkshift;
595	dn->dn_nlevels = dnp->dn_nlevels;
596	dn->dn_type = dnp->dn_type;
597	dn->dn_nblkptr = dnp->dn_nblkptr;
598	dn->dn_checksum = dnp->dn_checksum;
599	dn->dn_compress = dnp->dn_compress;
600	dn->dn_bonustype = dnp->dn_bonustype;
601	dn->dn_bonuslen = dnp->dn_bonuslen;
602	dn->dn_num_slots = dnp->dn_extra_slots + 1;
603	dn->dn_maxblkid = dnp->dn_maxblkid;
604	dn->dn_have_spill = ((dnp->dn_flags & DNODE_FLAG_SPILL_BLKPTR) != 0);
605	dn->dn_id_flags = 0;
606
607	dmu_zfetch_init(&dn->dn_zfetch, dn);
608
609	ASSERT(DMU_OT_IS_VALID(dn->dn_phys->dn_type));
610	ASSERT(zrl_is_locked(&dnh->dnh_zrlock));
611	ASSERT(!DN_SLOT_IS_PTR(dnh->dnh_dnode));
612
613	mutex_enter(&os->os_lock);
614
615	/*
616	 * Exclude special dnodes from os_dnodes so an empty os_dnodes
617	 * signifies that the special dnodes have no references from
618	 * their children (the entries in os_dnodes).  This allows
619	 * dnode_destroy() to easily determine if the last child has
620	 * been removed and then complete eviction of the objset.
621	 */
622	if (!DMU_OBJECT_IS_SPECIAL(object))
623		list_insert_head(&os->os_dnodes, dn);
624	membar_producer();
625
626	/*
627	 * Everything else must be valid before assigning dn_objset
628	 * makes the dnode eligible for dnode_move().
629	 */
630	dn->dn_objset = os;
631
632	dnh->dnh_dnode = dn;
633	mutex_exit(&os->os_lock);
634
635	arc_space_consume(sizeof (dnode_t), ARC_SPACE_DNODE);
636
637	return (dn);
638}
639
640/*
641 * Caller must be holding the dnode handle, which is released upon return.
642 */
643static void
644dnode_destroy(dnode_t *dn)
645{
646	objset_t *os = dn->dn_objset;
647	boolean_t complete_os_eviction = B_FALSE;
648
649	ASSERT((dn->dn_id_flags & DN_ID_NEW_EXIST) == 0);
650
651	mutex_enter(&os->os_lock);
652	POINTER_INVALIDATE(&dn->dn_objset);
653	if (!DMU_OBJECT_IS_SPECIAL(dn->dn_object)) {
654		list_remove(&os->os_dnodes, dn);
655		complete_os_eviction =
656		    list_is_empty(&os->os_dnodes) &&
657		    list_link_active(&os->os_evicting_node);
658	}
659	mutex_exit(&os->os_lock);
660
661	/* the dnode can no longer move, so we can release the handle */
662	if (!zrl_is_locked(&dn->dn_handle->dnh_zrlock))
663		zrl_remove(&dn->dn_handle->dnh_zrlock);
664
665	dn->dn_allocated_txg = 0;
666	dn->dn_free_txg = 0;
667	dn->dn_assigned_txg = 0;
668	dn->dn_dirty_txg = 0;
669
670	dn->dn_dirtyctx = 0;
671	dn->dn_dirtyctx_firstset = NULL;
672	if (dn->dn_bonus != NULL) {
673		mutex_enter(&dn->dn_bonus->db_mtx);
674		dbuf_destroy(dn->dn_bonus);
675		dn->dn_bonus = NULL;
676	}
677	dn->dn_zio = NULL;
678
679	dn->dn_have_spill = B_FALSE;
680	dn->dn_oldused = 0;
681	dn->dn_oldflags = 0;
682	dn->dn_olduid = 0;
683	dn->dn_oldgid = 0;
684	dn->dn_oldprojid = ZFS_DEFAULT_PROJID;
685	dn->dn_newuid = 0;
686	dn->dn_newgid = 0;
687	dn->dn_newprojid = ZFS_DEFAULT_PROJID;
688	dn->dn_id_flags = 0;
689
690	dmu_zfetch_fini(&dn->dn_zfetch);
691	kmem_cache_free(dnode_cache, dn);
692	arc_space_return(sizeof (dnode_t), ARC_SPACE_DNODE);
693
694	if (complete_os_eviction)
695		dmu_objset_evict_done(os);
696}
697
698void
699dnode_allocate(dnode_t *dn, dmu_object_type_t ot, int blocksize, int ibs,
700    dmu_object_type_t bonustype, int bonuslen, int dn_slots, dmu_tx_t *tx)
701{
702	int i;
703
704	ASSERT3U(dn_slots, >, 0);
705	ASSERT3U(dn_slots << DNODE_SHIFT, <=,
706	    spa_maxdnodesize(dmu_objset_spa(dn->dn_objset)));
707	ASSERT3U(blocksize, <=,
708	    spa_maxblocksize(dmu_objset_spa(dn->dn_objset)));
709	if (blocksize == 0)
710		blocksize = 1 << zfs_default_bs;
711	else
712		blocksize = P2ROUNDUP(blocksize, SPA_MINBLOCKSIZE);
713
714	if (ibs == 0)
715		ibs = zfs_default_ibs;
716
717	ibs = MIN(MAX(ibs, DN_MIN_INDBLKSHIFT), DN_MAX_INDBLKSHIFT);
718
719	dprintf("os=%p obj=%llu txg=%llu blocksize=%d ibs=%d dn_slots=%d\n",
720	    dn->dn_objset, (u_longlong_t)dn->dn_object,
721	    (u_longlong_t)tx->tx_txg, blocksize, ibs, dn_slots);
722	DNODE_STAT_BUMP(dnode_allocate);
723
724	ASSERT(dn->dn_type == DMU_OT_NONE);
725	ASSERT0(memcmp(dn->dn_phys, &dnode_phys_zero, sizeof (dnode_phys_t)));
726	ASSERT(dn->dn_phys->dn_type == DMU_OT_NONE);
727	ASSERT(ot != DMU_OT_NONE);
728	ASSERT(DMU_OT_IS_VALID(ot));
729	ASSERT((bonustype == DMU_OT_NONE && bonuslen == 0) ||
730	    (bonustype == DMU_OT_SA && bonuslen == 0) ||
731	    (bonustype == DMU_OTN_UINT64_METADATA && bonuslen == 0) ||
732	    (bonustype != DMU_OT_NONE && bonuslen != 0));
733	ASSERT(DMU_OT_IS_VALID(bonustype));
734	ASSERT3U(bonuslen, <=, DN_SLOTS_TO_BONUSLEN(dn_slots));
735	ASSERT(dn->dn_type == DMU_OT_NONE);
736	ASSERT0(dn->dn_maxblkid);
737	ASSERT0(dn->dn_allocated_txg);
738	ASSERT0(dn->dn_assigned_txg);
739	ASSERT(zfs_refcount_is_zero(&dn->dn_tx_holds));
740	ASSERT3U(zfs_refcount_count(&dn->dn_holds), <=, 1);
741	ASSERT(avl_is_empty(&dn->dn_dbufs));
742
743	for (i = 0; i < TXG_SIZE; i++) {
744		ASSERT0(dn->dn_next_nblkptr[i]);
745		ASSERT0(dn->dn_next_nlevels[i]);
746		ASSERT0(dn->dn_next_indblkshift[i]);
747		ASSERT0(dn->dn_next_bonuslen[i]);
748		ASSERT0(dn->dn_next_bonustype[i]);
749		ASSERT0(dn->dn_rm_spillblk[i]);
750		ASSERT0(dn->dn_next_blksz[i]);
751		ASSERT0(dn->dn_next_maxblkid[i]);
752		ASSERT(!multilist_link_active(&dn->dn_dirty_link[i]));
753		ASSERT3P(list_head(&dn->dn_dirty_records[i]), ==, NULL);
754		ASSERT3P(dn->dn_free_ranges[i], ==, NULL);
755	}
756
757	dn->dn_type = ot;
758	dnode_setdblksz(dn, blocksize);
759	dn->dn_indblkshift = ibs;
760	dn->dn_nlevels = 1;
761	dn->dn_num_slots = dn_slots;
762	if (bonustype == DMU_OT_SA) /* Maximize bonus space for SA */
763		dn->dn_nblkptr = 1;
764	else {
765		dn->dn_nblkptr = MIN(DN_MAX_NBLKPTR,
766		    1 + ((DN_SLOTS_TO_BONUSLEN(dn_slots) - bonuslen) >>
767		    SPA_BLKPTRSHIFT));
768	}
769
770	dn->dn_bonustype = bonustype;
771	dn->dn_bonuslen = bonuslen;
772	dn->dn_checksum = ZIO_CHECKSUM_INHERIT;
773	dn->dn_compress = ZIO_COMPRESS_INHERIT;
774	dn->dn_dirtyctx = 0;
775
776	dn->dn_free_txg = 0;
777	dn->dn_dirtyctx_firstset = NULL;
778	dn->dn_dirty_txg = 0;
779
780	dn->dn_allocated_txg = tx->tx_txg;
781	dn->dn_id_flags = 0;
782
783	dnode_setdirty(dn, tx);
784	dn->dn_next_indblkshift[tx->tx_txg & TXG_MASK] = ibs;
785	dn->dn_next_bonuslen[tx->tx_txg & TXG_MASK] = dn->dn_bonuslen;
786	dn->dn_next_bonustype[tx->tx_txg & TXG_MASK] = dn->dn_bonustype;
787	dn->dn_next_blksz[tx->tx_txg & TXG_MASK] = dn->dn_datablksz;
788}
789
790void
791dnode_reallocate(dnode_t *dn, dmu_object_type_t ot, int blocksize,
792    dmu_object_type_t bonustype, int bonuslen, int dn_slots,
793    boolean_t keep_spill, dmu_tx_t *tx)
794{
795	int nblkptr;
796
797	ASSERT3U(blocksize, >=, SPA_MINBLOCKSIZE);
798	ASSERT3U(blocksize, <=,
799	    spa_maxblocksize(dmu_objset_spa(dn->dn_objset)));
800	ASSERT0(blocksize % SPA_MINBLOCKSIZE);
801	ASSERT(dn->dn_object != DMU_META_DNODE_OBJECT || dmu_tx_private_ok(tx));
802	ASSERT(tx->tx_txg != 0);
803	ASSERT((bonustype == DMU_OT_NONE && bonuslen == 0) ||
804	    (bonustype != DMU_OT_NONE && bonuslen != 0) ||
805	    (bonustype == DMU_OT_SA && bonuslen == 0));
806	ASSERT(DMU_OT_IS_VALID(bonustype));
807	ASSERT3U(bonuslen, <=,
808	    DN_BONUS_SIZE(spa_maxdnodesize(dmu_objset_spa(dn->dn_objset))));
809	ASSERT3U(bonuslen, <=, DN_BONUS_SIZE(dn_slots << DNODE_SHIFT));
810
811	dnode_free_interior_slots(dn);
812	DNODE_STAT_BUMP(dnode_reallocate);
813
814	/* clean up any unreferenced dbufs */
815	dnode_evict_dbufs(dn);
816
817	dn->dn_id_flags = 0;
818
819	rw_enter(&dn->dn_struct_rwlock, RW_WRITER);
820	dnode_setdirty(dn, tx);
821	if (dn->dn_datablksz != blocksize) {
822		/* change blocksize */
823		ASSERT0(dn->dn_maxblkid);
824		ASSERT(BP_IS_HOLE(&dn->dn_phys->dn_blkptr[0]) ||
825		    dnode_block_freed(dn, 0));
826
827		dnode_setdblksz(dn, blocksize);
828		dn->dn_next_blksz[tx->tx_txg & TXG_MASK] = blocksize;
829	}
830	if (dn->dn_bonuslen != bonuslen)
831		dn->dn_next_bonuslen[tx->tx_txg & TXG_MASK] = bonuslen;
832
833	if (bonustype == DMU_OT_SA) /* Maximize bonus space for SA */
834		nblkptr = 1;
835	else
836		nblkptr = MIN(DN_MAX_NBLKPTR,
837		    1 + ((DN_SLOTS_TO_BONUSLEN(dn_slots) - bonuslen) >>
838		    SPA_BLKPTRSHIFT));
839	if (dn->dn_bonustype != bonustype)
840		dn->dn_next_bonustype[tx->tx_txg & TXG_MASK] = bonustype;
841	if (dn->dn_nblkptr != nblkptr)
842		dn->dn_next_nblkptr[tx->tx_txg & TXG_MASK] = nblkptr;
843	if (dn->dn_phys->dn_flags & DNODE_FLAG_SPILL_BLKPTR && !keep_spill) {
844		dbuf_rm_spill(dn, tx);
845		dnode_rm_spill(dn, tx);
846	}
847
848	rw_exit(&dn->dn_struct_rwlock);
849
850	/* change type */
851	dn->dn_type = ot;
852
853	/* change bonus size and type */
854	mutex_enter(&dn->dn_mtx);
855	dn->dn_bonustype = bonustype;
856	dn->dn_bonuslen = bonuslen;
857	dn->dn_num_slots = dn_slots;
858	dn->dn_nblkptr = nblkptr;
859	dn->dn_checksum = ZIO_CHECKSUM_INHERIT;
860	dn->dn_compress = ZIO_COMPRESS_INHERIT;
861	ASSERT3U(dn->dn_nblkptr, <=, DN_MAX_NBLKPTR);
862
863	/* fix up the bonus db_size */
864	if (dn->dn_bonus) {
865		dn->dn_bonus->db.db_size =
866		    DN_SLOTS_TO_BONUSLEN(dn->dn_num_slots) -
867		    (dn->dn_nblkptr-1) * sizeof (blkptr_t);
868		ASSERT(dn->dn_bonuslen <= dn->dn_bonus->db.db_size);
869	}
870
871	dn->dn_allocated_txg = tx->tx_txg;
872	mutex_exit(&dn->dn_mtx);
873}
874
875#ifdef	_KERNEL
876static void
877dnode_move_impl(dnode_t *odn, dnode_t *ndn)
878{
879	ASSERT(!RW_LOCK_HELD(&odn->dn_struct_rwlock));
880	ASSERT(MUTEX_NOT_HELD(&odn->dn_mtx));
881	ASSERT(MUTEX_NOT_HELD(&odn->dn_dbufs_mtx));
882
883	/* Copy fields. */
884	ndn->dn_objset = odn->dn_objset;
885	ndn->dn_object = odn->dn_object;
886	ndn->dn_dbuf = odn->dn_dbuf;
887	ndn->dn_handle = odn->dn_handle;
888	ndn->dn_phys = odn->dn_phys;
889	ndn->dn_type = odn->dn_type;
890	ndn->dn_bonuslen = odn->dn_bonuslen;
891	ndn->dn_bonustype = odn->dn_bonustype;
892	ndn->dn_nblkptr = odn->dn_nblkptr;
893	ndn->dn_checksum = odn->dn_checksum;
894	ndn->dn_compress = odn->dn_compress;
895	ndn->dn_nlevels = odn->dn_nlevels;
896	ndn->dn_indblkshift = odn->dn_indblkshift;
897	ndn->dn_datablkshift = odn->dn_datablkshift;
898	ndn->dn_datablkszsec = odn->dn_datablkszsec;
899	ndn->dn_datablksz = odn->dn_datablksz;
900	ndn->dn_maxblkid = odn->dn_maxblkid;
901	ndn->dn_num_slots = odn->dn_num_slots;
902	memcpy(ndn->dn_next_type, odn->dn_next_type,
903	    sizeof (odn->dn_next_type));
904	memcpy(ndn->dn_next_nblkptr, odn->dn_next_nblkptr,
905	    sizeof (odn->dn_next_nblkptr));
906	memcpy(ndn->dn_next_nlevels, odn->dn_next_nlevels,
907	    sizeof (odn->dn_next_nlevels));
908	memcpy(ndn->dn_next_indblkshift, odn->dn_next_indblkshift,
909	    sizeof (odn->dn_next_indblkshift));
910	memcpy(ndn->dn_next_bonustype, odn->dn_next_bonustype,
911	    sizeof (odn->dn_next_bonustype));
912	memcpy(ndn->dn_rm_spillblk, odn->dn_rm_spillblk,
913	    sizeof (odn->dn_rm_spillblk));
914	memcpy(ndn->dn_next_bonuslen, odn->dn_next_bonuslen,
915	    sizeof (odn->dn_next_bonuslen));
916	memcpy(ndn->dn_next_blksz, odn->dn_next_blksz,
917	    sizeof (odn->dn_next_blksz));
918	memcpy(ndn->dn_next_maxblkid, odn->dn_next_maxblkid,
919	    sizeof (odn->dn_next_maxblkid));
920	for (int i = 0; i < TXG_SIZE; i++) {
921		list_move_tail(&ndn->dn_dirty_records[i],
922		    &odn->dn_dirty_records[i]);
923	}
924	memcpy(ndn->dn_free_ranges, odn->dn_free_ranges,
925	    sizeof (odn->dn_free_ranges));
926	ndn->dn_allocated_txg = odn->dn_allocated_txg;
927	ndn->dn_free_txg = odn->dn_free_txg;
928	ndn->dn_assigned_txg = odn->dn_assigned_txg;
929	ndn->dn_dirty_txg = odn->dn_dirty_txg;
930	ndn->dn_dirtyctx = odn->dn_dirtyctx;
931	ndn->dn_dirtyctx_firstset = odn->dn_dirtyctx_firstset;
932	ASSERT(zfs_refcount_count(&odn->dn_tx_holds) == 0);
933	zfs_refcount_transfer(&ndn->dn_holds, &odn->dn_holds);
934	ASSERT(avl_is_empty(&ndn->dn_dbufs));
935	avl_swap(&ndn->dn_dbufs, &odn->dn_dbufs);
936	ndn->dn_dbufs_count = odn->dn_dbufs_count;
937	ndn->dn_bonus = odn->dn_bonus;
938	ndn->dn_have_spill = odn->dn_have_spill;
939	ndn->dn_zio = odn->dn_zio;
940	ndn->dn_oldused = odn->dn_oldused;
941	ndn->dn_oldflags = odn->dn_oldflags;
942	ndn->dn_olduid = odn->dn_olduid;
943	ndn->dn_oldgid = odn->dn_oldgid;
944	ndn->dn_oldprojid = odn->dn_oldprojid;
945	ndn->dn_newuid = odn->dn_newuid;
946	ndn->dn_newgid = odn->dn_newgid;
947	ndn->dn_newprojid = odn->dn_newprojid;
948	ndn->dn_id_flags = odn->dn_id_flags;
949	dmu_zfetch_init(&ndn->dn_zfetch, ndn);
950
951	/*
952	 * Update back pointers. Updating the handle fixes the back pointer of
953	 * every descendant dbuf as well as the bonus dbuf.
954	 */
955	ASSERT(ndn->dn_handle->dnh_dnode == odn);
956	ndn->dn_handle->dnh_dnode = ndn;
957
958	/*
959	 * Invalidate the original dnode by clearing all of its back pointers.
960	 */
961	odn->dn_dbuf = NULL;
962	odn->dn_handle = NULL;
963	avl_create(&odn->dn_dbufs, dbuf_compare, sizeof (dmu_buf_impl_t),
964	    offsetof(dmu_buf_impl_t, db_link));
965	odn->dn_dbufs_count = 0;
966	odn->dn_bonus = NULL;
967	dmu_zfetch_fini(&odn->dn_zfetch);
968
969	/*
970	 * Set the low bit of the objset pointer to ensure that dnode_move()
971	 * recognizes the dnode as invalid in any subsequent callback.
972	 */
973	POINTER_INVALIDATE(&odn->dn_objset);
974
975	/*
976	 * Satisfy the destructor.
977	 */
978	for (int i = 0; i < TXG_SIZE; i++) {
979		list_create(&odn->dn_dirty_records[i],
980		    sizeof (dbuf_dirty_record_t),
981		    offsetof(dbuf_dirty_record_t, dr_dirty_node));
982		odn->dn_free_ranges[i] = NULL;
983		odn->dn_next_nlevels[i] = 0;
984		odn->dn_next_indblkshift[i] = 0;
985		odn->dn_next_bonustype[i] = 0;
986		odn->dn_rm_spillblk[i] = 0;
987		odn->dn_next_bonuslen[i] = 0;
988		odn->dn_next_blksz[i] = 0;
989	}
990	odn->dn_allocated_txg = 0;
991	odn->dn_free_txg = 0;
992	odn->dn_assigned_txg = 0;
993	odn->dn_dirty_txg = 0;
994	odn->dn_dirtyctx = 0;
995	odn->dn_dirtyctx_firstset = NULL;
996	odn->dn_have_spill = B_FALSE;
997	odn->dn_zio = NULL;
998	odn->dn_oldused = 0;
999	odn->dn_oldflags = 0;
1000	odn->dn_olduid = 0;
1001	odn->dn_oldgid = 0;
1002	odn->dn_oldprojid = ZFS_DEFAULT_PROJID;
1003	odn->dn_newuid = 0;
1004	odn->dn_newgid = 0;
1005	odn->dn_newprojid = ZFS_DEFAULT_PROJID;
1006	odn->dn_id_flags = 0;
1007
1008	/*
1009	 * Mark the dnode.
1010	 */
1011	ndn->dn_moved = 1;
1012	odn->dn_moved = (uint8_t)-1;
1013}
1014
1015static kmem_cbrc_t
1016dnode_move(void *buf, void *newbuf, size_t size, void *arg)
1017{
1018	dnode_t *odn = buf, *ndn = newbuf;
1019	objset_t *os;
1020	int64_t refcount;
1021	uint32_t dbufs;
1022
1023	/*
1024	 * The dnode is on the objset's list of known dnodes if the objset
1025	 * pointer is valid. We set the low bit of the objset pointer when
1026	 * freeing the dnode to invalidate it, and the memory patterns written
1027	 * by kmem (baddcafe and deadbeef) set at least one of the two low bits.
1028	 * A newly created dnode sets the objset pointer last of all to indicate
1029	 * that the dnode is known and in a valid state to be moved by this
1030	 * function.
1031	 */
1032	os = odn->dn_objset;
1033	if (!POINTER_IS_VALID(os)) {
1034		DNODE_STAT_BUMP(dnode_move_invalid);
1035		return (KMEM_CBRC_DONT_KNOW);
1036	}
1037
1038	/*
1039	 * Ensure that the objset does not go away during the move.
1040	 */
1041	rw_enter(&os_lock, RW_WRITER);
1042	if (os != odn->dn_objset) {
1043		rw_exit(&os_lock);
1044		DNODE_STAT_BUMP(dnode_move_recheck1);
1045		return (KMEM_CBRC_DONT_KNOW);
1046	}
1047
1048	/*
1049	 * If the dnode is still valid, then so is the objset. We know that no
1050	 * valid objset can be freed while we hold os_lock, so we can safely
1051	 * ensure that the objset remains in use.
1052	 */
1053	mutex_enter(&os->os_lock);
1054
1055	/*
1056	 * Recheck the objset pointer in case the dnode was removed just before
1057	 * acquiring the lock.
1058	 */
1059	if (os != odn->dn_objset) {
1060		mutex_exit(&os->os_lock);
1061		rw_exit(&os_lock);
1062		DNODE_STAT_BUMP(dnode_move_recheck2);
1063		return (KMEM_CBRC_DONT_KNOW);
1064	}
1065
1066	/*
1067	 * At this point we know that as long as we hold os->os_lock, the dnode
1068	 * cannot be freed and fields within the dnode can be safely accessed.
1069	 * The objset listing this dnode cannot go away as long as this dnode is
1070	 * on its list.
1071	 */
1072	rw_exit(&os_lock);
1073	if (DMU_OBJECT_IS_SPECIAL(odn->dn_object)) {
1074		mutex_exit(&os->os_lock);
1075		DNODE_STAT_BUMP(dnode_move_special);
1076		return (KMEM_CBRC_NO);
1077	}
1078	ASSERT(odn->dn_dbuf != NULL); /* only "special" dnodes have no parent */
1079
1080	/*
1081	 * Lock the dnode handle to prevent the dnode from obtaining any new
1082	 * holds. This also prevents the descendant dbufs and the bonus dbuf
1083	 * from accessing the dnode, so that we can discount their holds. The
1084	 * handle is safe to access because we know that while the dnode cannot
1085	 * go away, neither can its handle. Once we hold dnh_zrlock, we can
1086	 * safely move any dnode referenced only by dbufs.
1087	 */
1088	if (!zrl_tryenter(&odn->dn_handle->dnh_zrlock)) {
1089		mutex_exit(&os->os_lock);
1090		DNODE_STAT_BUMP(dnode_move_handle);
1091		return (KMEM_CBRC_LATER);
1092	}
1093
1094	/*
1095	 * Ensure a consistent view of the dnode's holds and the dnode's dbufs.
1096	 * We need to guarantee that there is a hold for every dbuf in order to
1097	 * determine whether the dnode is actively referenced. Falsely matching
1098	 * a dbuf to an active hold would lead to an unsafe move. It's possible
1099	 * that a thread already having an active dnode hold is about to add a
1100	 * dbuf, and we can't compare hold and dbuf counts while the add is in
1101	 * progress.
1102	 */
1103	if (!rw_tryenter(&odn->dn_struct_rwlock, RW_WRITER)) {
1104		zrl_exit(&odn->dn_handle->dnh_zrlock);
1105		mutex_exit(&os->os_lock);
1106		DNODE_STAT_BUMP(dnode_move_rwlock);
1107		return (KMEM_CBRC_LATER);
1108	}
1109
1110	/*
1111	 * A dbuf may be removed (evicted) without an active dnode hold. In that
1112	 * case, the dbuf count is decremented under the handle lock before the
1113	 * dbuf's hold is released. This order ensures that if we count the hold
1114	 * after the dbuf is removed but before its hold is released, we will
1115	 * treat the unmatched hold as active and exit safely. If we count the
1116	 * hold before the dbuf is removed, the hold is discounted, and the
1117	 * removal is blocked until the move completes.
1118	 */
1119	refcount = zfs_refcount_count(&odn->dn_holds);
1120	ASSERT(refcount >= 0);
1121	dbufs = DN_DBUFS_COUNT(odn);
1122
1123	/* We can't have more dbufs than dnode holds. */
1124	ASSERT3U(dbufs, <=, refcount);
1125	DTRACE_PROBE3(dnode__move, dnode_t *, odn, int64_t, refcount,
1126	    uint32_t, dbufs);
1127
1128	if (refcount > dbufs) {
1129		rw_exit(&odn->dn_struct_rwlock);
1130		zrl_exit(&odn->dn_handle->dnh_zrlock);
1131		mutex_exit(&os->os_lock);
1132		DNODE_STAT_BUMP(dnode_move_active);
1133		return (KMEM_CBRC_LATER);
1134	}
1135
1136	rw_exit(&odn->dn_struct_rwlock);
1137
1138	/*
1139	 * At this point we know that anyone with a hold on the dnode is not
1140	 * actively referencing it. The dnode is known and in a valid state to
1141	 * move. We're holding the locks needed to execute the critical section.
1142	 */
1143	dnode_move_impl(odn, ndn);
1144
1145	list_link_replace(&odn->dn_link, &ndn->dn_link);
1146	/* If the dnode was safe to move, the refcount cannot have changed. */
1147	ASSERT(refcount == zfs_refcount_count(&ndn->dn_holds));
1148	ASSERT(dbufs == DN_DBUFS_COUNT(ndn));
1149	zrl_exit(&ndn->dn_handle->dnh_zrlock); /* handle has moved */
1150	mutex_exit(&os->os_lock);
1151
1152	return (KMEM_CBRC_YES);
1153}
1154#endif	/* _KERNEL */
1155
1156static void
1157dnode_slots_hold(dnode_children_t *children, int idx, int slots)
1158{
1159	ASSERT3S(idx + slots, <=, DNODES_PER_BLOCK);
1160
1161	for (int i = idx; i < idx + slots; i++) {
1162		dnode_handle_t *dnh = &children->dnc_children[i];
1163		zrl_add(&dnh->dnh_zrlock);
1164	}
1165}
1166
1167static void
1168dnode_slots_rele(dnode_children_t *children, int idx, int slots)
1169{
1170	ASSERT3S(idx + slots, <=, DNODES_PER_BLOCK);
1171
1172	for (int i = idx; i < idx + slots; i++) {
1173		dnode_handle_t *dnh = &children->dnc_children[i];
1174
1175		if (zrl_is_locked(&dnh->dnh_zrlock))
1176			zrl_exit(&dnh->dnh_zrlock);
1177		else
1178			zrl_remove(&dnh->dnh_zrlock);
1179	}
1180}
1181
1182static int
1183dnode_slots_tryenter(dnode_children_t *children, int idx, int slots)
1184{
1185	ASSERT3S(idx + slots, <=, DNODES_PER_BLOCK);
1186
1187	for (int i = idx; i < idx + slots; i++) {
1188		dnode_handle_t *dnh = &children->dnc_children[i];
1189
1190		if (!zrl_tryenter(&dnh->dnh_zrlock)) {
1191			for (int j = idx; j < i; j++) {
1192				dnh = &children->dnc_children[j];
1193				zrl_exit(&dnh->dnh_zrlock);
1194			}
1195
1196			return (0);
1197		}
1198	}
1199
1200	return (1);
1201}
1202
1203static void
1204dnode_set_slots(dnode_children_t *children, int idx, int slots, void *ptr)
1205{
1206	ASSERT3S(idx + slots, <=, DNODES_PER_BLOCK);
1207
1208	for (int i = idx; i < idx + slots; i++) {
1209		dnode_handle_t *dnh = &children->dnc_children[i];
1210		dnh->dnh_dnode = ptr;
1211	}
1212}
1213
1214static boolean_t
1215dnode_check_slots_free(dnode_children_t *children, int idx, int slots)
1216{
1217	ASSERT3S(idx + slots, <=, DNODES_PER_BLOCK);
1218
1219	/*
1220	 * If all dnode slots are either already free or
1221	 * evictable return B_TRUE.
1222	 */
1223	for (int i = idx; i < idx + slots; i++) {
1224		dnode_handle_t *dnh = &children->dnc_children[i];
1225		dnode_t *dn = dnh->dnh_dnode;
1226
1227		if (dn == DN_SLOT_FREE) {
1228			continue;
1229		} else if (DN_SLOT_IS_PTR(dn)) {
1230			mutex_enter(&dn->dn_mtx);
1231			boolean_t can_free = (dn->dn_type == DMU_OT_NONE &&
1232			    zfs_refcount_is_zero(&dn->dn_holds) &&
1233			    !DNODE_IS_DIRTY(dn));
1234			mutex_exit(&dn->dn_mtx);
1235
1236			if (!can_free)
1237				return (B_FALSE);
1238			else
1239				continue;
1240		} else {
1241			return (B_FALSE);
1242		}
1243	}
1244
1245	return (B_TRUE);
1246}
1247
1248static uint_t
1249dnode_reclaim_slots(dnode_children_t *children, int idx, int slots)
1250{
1251	uint_t reclaimed = 0;
1252
1253	ASSERT3S(idx + slots, <=, DNODES_PER_BLOCK);
1254
1255	for (int i = idx; i < idx + slots; i++) {
1256		dnode_handle_t *dnh = &children->dnc_children[i];
1257
1258		ASSERT(zrl_is_locked(&dnh->dnh_zrlock));
1259
1260		if (DN_SLOT_IS_PTR(dnh->dnh_dnode)) {
1261			ASSERT3S(dnh->dnh_dnode->dn_type, ==, DMU_OT_NONE);
1262			dnode_destroy(dnh->dnh_dnode);
1263			dnh->dnh_dnode = DN_SLOT_FREE;
1264			reclaimed++;
1265		}
1266	}
1267
1268	return (reclaimed);
1269}
1270
1271void
1272dnode_free_interior_slots(dnode_t *dn)
1273{
1274	dnode_children_t *children = dmu_buf_get_user(&dn->dn_dbuf->db);
1275	int epb = dn->dn_dbuf->db.db_size >> DNODE_SHIFT;
1276	int idx = (dn->dn_object & (epb - 1)) + 1;
1277	int slots = dn->dn_num_slots - 1;
1278
1279	if (slots == 0)
1280		return;
1281
1282	ASSERT3S(idx + slots, <=, DNODES_PER_BLOCK);
1283
1284	while (!dnode_slots_tryenter(children, idx, slots)) {
1285		DNODE_STAT_BUMP(dnode_free_interior_lock_retry);
1286		kpreempt(KPREEMPT_SYNC);
1287	}
1288
1289	dnode_set_slots(children, idx, slots, DN_SLOT_FREE);
1290	dnode_slots_rele(children, idx, slots);
1291}
1292
1293void
1294dnode_special_close(dnode_handle_t *dnh)
1295{
1296	dnode_t *dn = dnh->dnh_dnode;
1297
1298	/*
1299	 * Ensure dnode_rele_and_unlock() has released dn_mtx, after final
1300	 * zfs_refcount_remove()
1301	 */
1302	mutex_enter(&dn->dn_mtx);
1303	if (zfs_refcount_count(&dn->dn_holds) > 0)
1304		cv_wait(&dn->dn_nodnholds, &dn->dn_mtx);
1305	mutex_exit(&dn->dn_mtx);
1306	ASSERT3U(zfs_refcount_count(&dn->dn_holds), ==, 0);
1307
1308	ASSERT(dn->dn_dbuf == NULL ||
1309	    dmu_buf_get_user(&dn->dn_dbuf->db) == NULL);
1310	zrl_add(&dnh->dnh_zrlock);
1311	dnode_destroy(dn); /* implicit zrl_remove() */
1312	zrl_destroy(&dnh->dnh_zrlock);
1313	dnh->dnh_dnode = NULL;
1314}
1315
1316void
1317dnode_special_open(objset_t *os, dnode_phys_t *dnp, uint64_t object,
1318    dnode_handle_t *dnh)
1319{
1320	dnode_t *dn;
1321
1322	zrl_init(&dnh->dnh_zrlock);
1323	VERIFY3U(1, ==, zrl_tryenter(&dnh->dnh_zrlock));
1324
1325	dn = dnode_create(os, dnp, NULL, object, dnh);
1326	DNODE_VERIFY(dn);
1327
1328	zrl_exit(&dnh->dnh_zrlock);
1329}
1330
1331static void
1332dnode_buf_evict_async(void *dbu)
1333{
1334	dnode_children_t *dnc = dbu;
1335
1336	DNODE_STAT_BUMP(dnode_buf_evict);
1337
1338	for (int i = 0; i < dnc->dnc_count; i++) {
1339		dnode_handle_t *dnh = &dnc->dnc_children[i];
1340		dnode_t *dn;
1341
1342		/*
1343		 * The dnode handle lock guards against the dnode moving to
1344		 * another valid address, so there is no need here to guard
1345		 * against changes to or from NULL.
1346		 */
1347		if (!DN_SLOT_IS_PTR(dnh->dnh_dnode)) {
1348			zrl_destroy(&dnh->dnh_zrlock);
1349			dnh->dnh_dnode = DN_SLOT_UNINIT;
1350			continue;
1351		}
1352
1353		zrl_add(&dnh->dnh_zrlock);
1354		dn = dnh->dnh_dnode;
1355		/*
1356		 * If there are holds on this dnode, then there should
1357		 * be holds on the dnode's containing dbuf as well; thus
1358		 * it wouldn't be eligible for eviction and this function
1359		 * would not have been called.
1360		 */
1361		ASSERT(zfs_refcount_is_zero(&dn->dn_holds));
1362		ASSERT(zfs_refcount_is_zero(&dn->dn_tx_holds));
1363
1364		dnode_destroy(dn); /* implicit zrl_remove() for first slot */
1365		zrl_destroy(&dnh->dnh_zrlock);
1366		dnh->dnh_dnode = DN_SLOT_UNINIT;
1367	}
1368	kmem_free(dnc, sizeof (dnode_children_t) +
1369	    dnc->dnc_count * sizeof (dnode_handle_t));
1370}
1371
1372/*
1373 * When the DNODE_MUST_BE_FREE flag is set, the "slots" parameter is used
1374 * to ensure the hole at the specified object offset is large enough to
1375 * hold the dnode being created. The slots parameter is also used to ensure
1376 * a dnode does not span multiple dnode blocks. In both of these cases, if
1377 * a failure occurs, ENOSPC is returned. Keep in mind, these failure cases
1378 * are only possible when using DNODE_MUST_BE_FREE.
1379 *
1380 * If the DNODE_MUST_BE_ALLOCATED flag is set, "slots" must be 0.
1381 * dnode_hold_impl() will check if the requested dnode is already consumed
1382 * as an extra dnode slot by an large dnode, in which case it returns
1383 * ENOENT.
1384 *
1385 * If the DNODE_DRY_RUN flag is set, we don't actually hold the dnode, just
1386 * return whether the hold would succeed or not. tag and dnp should set to
1387 * NULL in this case.
1388 *
1389 * errors:
1390 * EINVAL - Invalid object number or flags.
1391 * ENOSPC - Hole too small to fulfill "slots" request (DNODE_MUST_BE_FREE)
1392 * EEXIST - Refers to an allocated dnode (DNODE_MUST_BE_FREE)
1393 *        - Refers to a freeing dnode (DNODE_MUST_BE_FREE)
1394 *        - Refers to an interior dnode slot (DNODE_MUST_BE_ALLOCATED)
1395 * ENOENT - The requested dnode is not allocated (DNODE_MUST_BE_ALLOCATED)
1396 *        - The requested dnode is being freed (DNODE_MUST_BE_ALLOCATED)
1397 * EIO    - I/O error when reading the meta dnode dbuf.
1398 *
1399 * succeeds even for free dnodes.
1400 */
1401int
1402dnode_hold_impl(objset_t *os, uint64_t object, int flag, int slots,
1403    const void *tag, dnode_t **dnp)
1404{
1405	int epb, idx, err;
1406	int drop_struct_lock = FALSE;
1407	int type;
1408	uint64_t blk;
1409	dnode_t *mdn, *dn;
1410	dmu_buf_impl_t *db;
1411	dnode_children_t *dnc;
1412	dnode_phys_t *dn_block;
1413	dnode_handle_t *dnh;
1414
1415	ASSERT(!(flag & DNODE_MUST_BE_ALLOCATED) || (slots == 0));
1416	ASSERT(!(flag & DNODE_MUST_BE_FREE) || (slots > 0));
1417	IMPLY(flag & DNODE_DRY_RUN, (tag == NULL) && (dnp == NULL));
1418
1419	/*
1420	 * If you are holding the spa config lock as writer, you shouldn't
1421	 * be asking the DMU to do *anything* unless it's the root pool
1422	 * which may require us to read from the root filesystem while
1423	 * holding some (not all) of the locks as writer.
1424	 */
1425	ASSERT(spa_config_held(os->os_spa, SCL_ALL, RW_WRITER) == 0 ||
1426	    (spa_is_root(os->os_spa) &&
1427	    spa_config_held(os->os_spa, SCL_STATE, RW_WRITER)));
1428
1429	ASSERT((flag & DNODE_MUST_BE_ALLOCATED) || (flag & DNODE_MUST_BE_FREE));
1430
1431	if (object == DMU_USERUSED_OBJECT || object == DMU_GROUPUSED_OBJECT ||
1432	    object == DMU_PROJECTUSED_OBJECT) {
1433		if (object == DMU_USERUSED_OBJECT)
1434			dn = DMU_USERUSED_DNODE(os);
1435		else if (object == DMU_GROUPUSED_OBJECT)
1436			dn = DMU_GROUPUSED_DNODE(os);
1437		else
1438			dn = DMU_PROJECTUSED_DNODE(os);
1439		if (dn == NULL)
1440			return (SET_ERROR(ENOENT));
1441		type = dn->dn_type;
1442		if ((flag & DNODE_MUST_BE_ALLOCATED) && type == DMU_OT_NONE)
1443			return (SET_ERROR(ENOENT));
1444		if ((flag & DNODE_MUST_BE_FREE) && type != DMU_OT_NONE)
1445			return (SET_ERROR(EEXIST));
1446		DNODE_VERIFY(dn);
1447		/* Don't actually hold if dry run, just return 0 */
1448		if (!(flag & DNODE_DRY_RUN)) {
1449			(void) zfs_refcount_add(&dn->dn_holds, tag);
1450			*dnp = dn;
1451		}
1452		return (0);
1453	}
1454
1455	if (object == 0 || object >= DN_MAX_OBJECT)
1456		return (SET_ERROR(EINVAL));
1457
1458	mdn = DMU_META_DNODE(os);
1459	ASSERT(mdn->dn_object == DMU_META_DNODE_OBJECT);
1460
1461	DNODE_VERIFY(mdn);
1462
1463	if (!RW_WRITE_HELD(&mdn->dn_struct_rwlock)) {
1464		rw_enter(&mdn->dn_struct_rwlock, RW_READER);
1465		drop_struct_lock = TRUE;
1466	}
1467
1468	blk = dbuf_whichblock(mdn, 0, object * sizeof (dnode_phys_t));
1469	db = dbuf_hold(mdn, blk, FTAG);
1470	if (drop_struct_lock)
1471		rw_exit(&mdn->dn_struct_rwlock);
1472	if (db == NULL) {
1473		DNODE_STAT_BUMP(dnode_hold_dbuf_hold);
1474		return (SET_ERROR(EIO));
1475	}
1476
1477	/*
1478	 * We do not need to decrypt to read the dnode so it doesn't matter
1479	 * if we get the encrypted or decrypted version.
1480	 */
1481	err = dbuf_read(db, NULL, DB_RF_CANFAIL |
1482	    DB_RF_NO_DECRYPT | DB_RF_NOPREFETCH);
1483	if (err) {
1484		DNODE_STAT_BUMP(dnode_hold_dbuf_read);
1485		dbuf_rele(db, FTAG);
1486		return (err);
1487	}
1488
1489	ASSERT3U(db->db.db_size, >=, 1<<DNODE_SHIFT);
1490	epb = db->db.db_size >> DNODE_SHIFT;
1491
1492	idx = object & (epb - 1);
1493	dn_block = (dnode_phys_t *)db->db.db_data;
1494
1495	ASSERT(DB_DNODE(db)->dn_type == DMU_OT_DNODE);
1496	dnc = dmu_buf_get_user(&db->db);
1497	dnh = NULL;
1498	if (dnc == NULL) {
1499		dnode_children_t *winner;
1500		int skip = 0;
1501
1502		dnc = kmem_zalloc(sizeof (dnode_children_t) +
1503		    epb * sizeof (dnode_handle_t), KM_SLEEP);
1504		dnc->dnc_count = epb;
1505		dnh = &dnc->dnc_children[0];
1506
1507		/* Initialize dnode slot status from dnode_phys_t */
1508		for (int i = 0; i < epb; i++) {
1509			zrl_init(&dnh[i].dnh_zrlock);
1510
1511			if (skip) {
1512				skip--;
1513				continue;
1514			}
1515
1516			if (dn_block[i].dn_type != DMU_OT_NONE) {
1517				int interior = dn_block[i].dn_extra_slots;
1518
1519				dnode_set_slots(dnc, i, 1, DN_SLOT_ALLOCATED);
1520				dnode_set_slots(dnc, i + 1, interior,
1521				    DN_SLOT_INTERIOR);
1522				skip = interior;
1523			} else {
1524				dnh[i].dnh_dnode = DN_SLOT_FREE;
1525				skip = 0;
1526			}
1527		}
1528
1529		dmu_buf_init_user(&dnc->dnc_dbu, NULL,
1530		    dnode_buf_evict_async, NULL);
1531		winner = dmu_buf_set_user(&db->db, &dnc->dnc_dbu);
1532		if (winner != NULL) {
1533
1534			for (int i = 0; i < epb; i++)
1535				zrl_destroy(&dnh[i].dnh_zrlock);
1536
1537			kmem_free(dnc, sizeof (dnode_children_t) +
1538			    epb * sizeof (dnode_handle_t));
1539			dnc = winner;
1540		}
1541	}
1542
1543	ASSERT(dnc->dnc_count == epb);
1544
1545	if (flag & DNODE_MUST_BE_ALLOCATED) {
1546		slots = 1;
1547
1548		dnode_slots_hold(dnc, idx, slots);
1549		dnh = &dnc->dnc_children[idx];
1550
1551		if (DN_SLOT_IS_PTR(dnh->dnh_dnode)) {
1552			dn = dnh->dnh_dnode;
1553		} else if (dnh->dnh_dnode == DN_SLOT_INTERIOR) {
1554			DNODE_STAT_BUMP(dnode_hold_alloc_interior);
1555			dnode_slots_rele(dnc, idx, slots);
1556			dbuf_rele(db, FTAG);
1557			return (SET_ERROR(EEXIST));
1558		} else if (dnh->dnh_dnode != DN_SLOT_ALLOCATED) {
1559			DNODE_STAT_BUMP(dnode_hold_alloc_misses);
1560			dnode_slots_rele(dnc, idx, slots);
1561			dbuf_rele(db, FTAG);
1562			return (SET_ERROR(ENOENT));
1563		} else {
1564			dnode_slots_rele(dnc, idx, slots);
1565			while (!dnode_slots_tryenter(dnc, idx, slots)) {
1566				DNODE_STAT_BUMP(dnode_hold_alloc_lock_retry);
1567				kpreempt(KPREEMPT_SYNC);
1568			}
1569
1570			/*
1571			 * Someone else won the race and called dnode_create()
1572			 * after we checked DN_SLOT_IS_PTR() above but before
1573			 * we acquired the lock.
1574			 */
1575			if (DN_SLOT_IS_PTR(dnh->dnh_dnode)) {
1576				DNODE_STAT_BUMP(dnode_hold_alloc_lock_misses);
1577				dn = dnh->dnh_dnode;
1578			} else {
1579				dn = dnode_create(os, dn_block + idx, db,
1580				    object, dnh);
1581				dmu_buf_add_user_size(&db->db,
1582				    sizeof (dnode_t));
1583			}
1584		}
1585
1586		mutex_enter(&dn->dn_mtx);
1587		if (dn->dn_type == DMU_OT_NONE || dn->dn_free_txg != 0) {
1588			DNODE_STAT_BUMP(dnode_hold_alloc_type_none);
1589			mutex_exit(&dn->dn_mtx);
1590			dnode_slots_rele(dnc, idx, slots);
1591			dbuf_rele(db, FTAG);
1592			return (SET_ERROR(ENOENT));
1593		}
1594
1595		/* Don't actually hold if dry run, just return 0 */
1596		if (flag & DNODE_DRY_RUN) {
1597			mutex_exit(&dn->dn_mtx);
1598			dnode_slots_rele(dnc, idx, slots);
1599			dbuf_rele(db, FTAG);
1600			return (0);
1601		}
1602
1603		DNODE_STAT_BUMP(dnode_hold_alloc_hits);
1604	} else if (flag & DNODE_MUST_BE_FREE) {
1605
1606		if (idx + slots - 1 >= DNODES_PER_BLOCK) {
1607			DNODE_STAT_BUMP(dnode_hold_free_overflow);
1608			dbuf_rele(db, FTAG);
1609			return (SET_ERROR(ENOSPC));
1610		}
1611
1612		dnode_slots_hold(dnc, idx, slots);
1613
1614		if (!dnode_check_slots_free(dnc, idx, slots)) {
1615			DNODE_STAT_BUMP(dnode_hold_free_misses);
1616			dnode_slots_rele(dnc, idx, slots);
1617			dbuf_rele(db, FTAG);
1618			return (SET_ERROR(ENOSPC));
1619		}
1620
1621		dnode_slots_rele(dnc, idx, slots);
1622		while (!dnode_slots_tryenter(dnc, idx, slots)) {
1623			DNODE_STAT_BUMP(dnode_hold_free_lock_retry);
1624			kpreempt(KPREEMPT_SYNC);
1625		}
1626
1627		if (!dnode_check_slots_free(dnc, idx, slots)) {
1628			DNODE_STAT_BUMP(dnode_hold_free_lock_misses);
1629			dnode_slots_rele(dnc, idx, slots);
1630			dbuf_rele(db, FTAG);
1631			return (SET_ERROR(ENOSPC));
1632		}
1633
1634		/*
1635		 * Allocated but otherwise free dnodes which would
1636		 * be in the interior of a multi-slot dnodes need
1637		 * to be freed.  Single slot dnodes can be safely
1638		 * re-purposed as a performance optimization.
1639		 */
1640		if (slots > 1) {
1641			uint_t reclaimed =
1642			    dnode_reclaim_slots(dnc, idx + 1, slots - 1);
1643			if (reclaimed > 0)
1644				dmu_buf_sub_user_size(&db->db,
1645				    reclaimed * sizeof (dnode_t));
1646		}
1647
1648		dnh = &dnc->dnc_children[idx];
1649		if (DN_SLOT_IS_PTR(dnh->dnh_dnode)) {
1650			dn = dnh->dnh_dnode;
1651		} else {
1652			dn = dnode_create(os, dn_block + idx, db,
1653			    object, dnh);
1654			dmu_buf_add_user_size(&db->db, sizeof (dnode_t));
1655		}
1656
1657		mutex_enter(&dn->dn_mtx);
1658		if (!zfs_refcount_is_zero(&dn->dn_holds) || dn->dn_free_txg) {
1659			DNODE_STAT_BUMP(dnode_hold_free_refcount);
1660			mutex_exit(&dn->dn_mtx);
1661			dnode_slots_rele(dnc, idx, slots);
1662			dbuf_rele(db, FTAG);
1663			return (SET_ERROR(EEXIST));
1664		}
1665
1666		/* Don't actually hold if dry run, just return 0 */
1667		if (flag & DNODE_DRY_RUN) {
1668			mutex_exit(&dn->dn_mtx);
1669			dnode_slots_rele(dnc, idx, slots);
1670			dbuf_rele(db, FTAG);
1671			return (0);
1672		}
1673
1674		dnode_set_slots(dnc, idx + 1, slots - 1, DN_SLOT_INTERIOR);
1675		DNODE_STAT_BUMP(dnode_hold_free_hits);
1676	} else {
1677		dbuf_rele(db, FTAG);
1678		return (SET_ERROR(EINVAL));
1679	}
1680
1681	ASSERT0(dn->dn_free_txg);
1682
1683	if (zfs_refcount_add(&dn->dn_holds, tag) == 1)
1684		dbuf_add_ref(db, dnh);
1685
1686	mutex_exit(&dn->dn_mtx);
1687
1688	/* Now we can rely on the hold to prevent the dnode from moving. */
1689	dnode_slots_rele(dnc, idx, slots);
1690
1691	DNODE_VERIFY(dn);
1692	ASSERT3P(dnp, !=, NULL);
1693	ASSERT3P(dn->dn_dbuf, ==, db);
1694	ASSERT3U(dn->dn_object, ==, object);
1695	dbuf_rele(db, FTAG);
1696
1697	*dnp = dn;
1698	return (0);
1699}
1700
1701/*
1702 * Return held dnode if the object is allocated, NULL if not.
1703 */
1704int
1705dnode_hold(objset_t *os, uint64_t object, const void *tag, dnode_t **dnp)
1706{
1707	return (dnode_hold_impl(os, object, DNODE_MUST_BE_ALLOCATED, 0, tag,
1708	    dnp));
1709}
1710
1711/*
1712 * Can only add a reference if there is already at least one
1713 * reference on the dnode.  Returns FALSE if unable to add a
1714 * new reference.
1715 */
1716boolean_t
1717dnode_add_ref(dnode_t *dn, const void *tag)
1718{
1719	mutex_enter(&dn->dn_mtx);
1720	if (zfs_refcount_is_zero(&dn->dn_holds)) {
1721		mutex_exit(&dn->dn_mtx);
1722		return (FALSE);
1723	}
1724	VERIFY(1 < zfs_refcount_add(&dn->dn_holds, tag));
1725	mutex_exit(&dn->dn_mtx);
1726	return (TRUE);
1727}
1728
1729void
1730dnode_rele(dnode_t *dn, const void *tag)
1731{
1732	mutex_enter(&dn->dn_mtx);
1733	dnode_rele_and_unlock(dn, tag, B_FALSE);
1734}
1735
1736void
1737dnode_rele_and_unlock(dnode_t *dn, const void *tag, boolean_t evicting)
1738{
1739	uint64_t refs;
1740	/* Get while the hold prevents the dnode from moving. */
1741	dmu_buf_impl_t *db = dn->dn_dbuf;
1742	dnode_handle_t *dnh = dn->dn_handle;
1743
1744	refs = zfs_refcount_remove(&dn->dn_holds, tag);
1745	if (refs == 0)
1746		cv_broadcast(&dn->dn_nodnholds);
1747	mutex_exit(&dn->dn_mtx);
1748	/* dnode could get destroyed at this point, so don't use it anymore */
1749
1750	/*
1751	 * It's unsafe to release the last hold on a dnode by dnode_rele() or
1752	 * indirectly by dbuf_rele() while relying on the dnode handle to
1753	 * prevent the dnode from moving, since releasing the last hold could
1754	 * result in the dnode's parent dbuf evicting its dnode handles. For
1755	 * that reason anyone calling dnode_rele() or dbuf_rele() without some
1756	 * other direct or indirect hold on the dnode must first drop the dnode
1757	 * handle.
1758	 */
1759#ifdef ZFS_DEBUG
1760	ASSERT(refs > 0 || dnh->dnh_zrlock.zr_owner != curthread);
1761#endif
1762
1763	/* NOTE: the DNODE_DNODE does not have a dn_dbuf */
1764	if (refs == 0 && db != NULL) {
1765		/*
1766		 * Another thread could add a hold to the dnode handle in
1767		 * dnode_hold_impl() while holding the parent dbuf. Since the
1768		 * hold on the parent dbuf prevents the handle from being
1769		 * destroyed, the hold on the handle is OK. We can't yet assert
1770		 * that the handle has zero references, but that will be
1771		 * asserted anyway when the handle gets destroyed.
1772		 */
1773		mutex_enter(&db->db_mtx);
1774		dbuf_rele_and_unlock(db, dnh, evicting);
1775	}
1776}
1777
1778/*
1779 * Test whether we can create a dnode at the specified location.
1780 */
1781int
1782dnode_try_claim(objset_t *os, uint64_t object, int slots)
1783{
1784	return (dnode_hold_impl(os, object, DNODE_MUST_BE_FREE | DNODE_DRY_RUN,
1785	    slots, NULL, NULL));
1786}
1787
1788/*
1789 * Checks if the dnode itself is dirty, or is carrying any uncommitted records.
1790 * It is important to check both conditions, as some operations (eg appending
1791 * to a file) can dirty both as a single logical unit, but they are not synced
1792 * out atomically, so checking one and not the other can result in an object
1793 * appearing to be clean mid-way through a commit.
1794 *
1795 * Do not change this lightly! If you get it wrong, dmu_offset_next() can
1796 * detect a hole where there is really data, leading to silent corruption.
1797 */
1798boolean_t
1799dnode_is_dirty(dnode_t *dn)
1800{
1801	mutex_enter(&dn->dn_mtx);
1802
1803	for (int i = 0; i < TXG_SIZE; i++) {
1804		if (multilist_link_active(&dn->dn_dirty_link[i]) ||
1805		    !list_is_empty(&dn->dn_dirty_records[i])) {
1806			mutex_exit(&dn->dn_mtx);
1807			return (B_TRUE);
1808		}
1809	}
1810
1811	mutex_exit(&dn->dn_mtx);
1812
1813	return (B_FALSE);
1814}
1815
1816void
1817dnode_setdirty(dnode_t *dn, dmu_tx_t *tx)
1818{
1819	objset_t *os = dn->dn_objset;
1820	uint64_t txg = tx->tx_txg;
1821
1822	if (DMU_OBJECT_IS_SPECIAL(dn->dn_object)) {
1823		dsl_dataset_dirty(os->os_dsl_dataset, tx);
1824		return;
1825	}
1826
1827	DNODE_VERIFY(dn);
1828
1829#ifdef ZFS_DEBUG
1830	mutex_enter(&dn->dn_mtx);
1831	ASSERT(dn->dn_phys->dn_type || dn->dn_allocated_txg);
1832	ASSERT(dn->dn_free_txg == 0 || dn->dn_free_txg >= txg);
1833	mutex_exit(&dn->dn_mtx);
1834#endif
1835
1836	/*
1837	 * Determine old uid/gid when necessary
1838	 */
1839	dmu_objset_userquota_get_ids(dn, B_TRUE, tx);
1840
1841	multilist_t *dirtylist = &os->os_dirty_dnodes[txg & TXG_MASK];
1842	multilist_sublist_t *mls = multilist_sublist_lock_obj(dirtylist, dn);
1843
1844	/*
1845	 * If we are already marked dirty, we're done.
1846	 */
1847	if (multilist_link_active(&dn->dn_dirty_link[txg & TXG_MASK])) {
1848		multilist_sublist_unlock(mls);
1849		return;
1850	}
1851
1852	ASSERT(!zfs_refcount_is_zero(&dn->dn_holds) ||
1853	    !avl_is_empty(&dn->dn_dbufs));
1854	ASSERT(dn->dn_datablksz != 0);
1855	ASSERT0(dn->dn_next_bonuslen[txg & TXG_MASK]);
1856	ASSERT0(dn->dn_next_blksz[txg & TXG_MASK]);
1857	ASSERT0(dn->dn_next_bonustype[txg & TXG_MASK]);
1858
1859	dprintf_ds(os->os_dsl_dataset, "obj=%llu txg=%llu\n",
1860	    (u_longlong_t)dn->dn_object, (u_longlong_t)txg);
1861
1862	multilist_sublist_insert_head(mls, dn);
1863
1864	multilist_sublist_unlock(mls);
1865
1866	/*
1867	 * The dnode maintains a hold on its containing dbuf as
1868	 * long as there are holds on it.  Each instantiated child
1869	 * dbuf maintains a hold on the dnode.  When the last child
1870	 * drops its hold, the dnode will drop its hold on the
1871	 * containing dbuf. We add a "dirty hold" here so that the
1872	 * dnode will hang around after we finish processing its
1873	 * children.
1874	 */
1875	VERIFY(dnode_add_ref(dn, (void *)(uintptr_t)tx->tx_txg));
1876
1877	(void) dbuf_dirty(dn->dn_dbuf, tx);
1878
1879	dsl_dataset_dirty(os->os_dsl_dataset, tx);
1880}
1881
1882void
1883dnode_free(dnode_t *dn, dmu_tx_t *tx)
1884{
1885	mutex_enter(&dn->dn_mtx);
1886	if (dn->dn_type == DMU_OT_NONE || dn->dn_free_txg) {
1887		mutex_exit(&dn->dn_mtx);
1888		return;
1889	}
1890	dn->dn_free_txg = tx->tx_txg;
1891	mutex_exit(&dn->dn_mtx);
1892
1893	dnode_setdirty(dn, tx);
1894}
1895
1896/*
1897 * Try to change the block size for the indicated dnode.  This can only
1898 * succeed if there are no blocks allocated or dirty beyond first block
1899 */
1900int
1901dnode_set_blksz(dnode_t *dn, uint64_t size, int ibs, dmu_tx_t *tx)
1902{
1903	dmu_buf_impl_t *db;
1904	int err;
1905
1906	ASSERT3U(size, <=, spa_maxblocksize(dmu_objset_spa(dn->dn_objset)));
1907	if (size == 0)
1908		size = SPA_MINBLOCKSIZE;
1909	else
1910		size = P2ROUNDUP(size, SPA_MINBLOCKSIZE);
1911
1912	if (ibs == dn->dn_indblkshift)
1913		ibs = 0;
1914
1915	if (size == dn->dn_datablksz && ibs == 0)
1916		return (0);
1917
1918	rw_enter(&dn->dn_struct_rwlock, RW_WRITER);
1919
1920	/* Check for any allocated blocks beyond the first */
1921	if (dn->dn_maxblkid != 0)
1922		goto fail;
1923
1924	mutex_enter(&dn->dn_dbufs_mtx);
1925	for (db = avl_first(&dn->dn_dbufs); db != NULL;
1926	    db = AVL_NEXT(&dn->dn_dbufs, db)) {
1927		if (db->db_blkid != 0 && db->db_blkid != DMU_BONUS_BLKID &&
1928		    db->db_blkid != DMU_SPILL_BLKID) {
1929			mutex_exit(&dn->dn_dbufs_mtx);
1930			goto fail;
1931		}
1932	}
1933	mutex_exit(&dn->dn_dbufs_mtx);
1934
1935	if (ibs && dn->dn_nlevels != 1)
1936		goto fail;
1937
1938	dnode_setdirty(dn, tx);
1939	if (size != dn->dn_datablksz) {
1940		/* resize the old block */
1941		err = dbuf_hold_impl(dn, 0, 0, TRUE, FALSE, FTAG, &db);
1942		if (err == 0) {
1943			dbuf_new_size(db, size, tx);
1944		} else if (err != ENOENT) {
1945			goto fail;
1946		}
1947
1948		dnode_setdblksz(dn, size);
1949		dn->dn_next_blksz[tx->tx_txg & TXG_MASK] = size;
1950		if (db)
1951			dbuf_rele(db, FTAG);
1952	}
1953	if (ibs) {
1954		dn->dn_indblkshift = ibs;
1955		dn->dn_next_indblkshift[tx->tx_txg & TXG_MASK] = ibs;
1956	}
1957
1958	rw_exit(&dn->dn_struct_rwlock);
1959	return (0);
1960
1961fail:
1962	rw_exit(&dn->dn_struct_rwlock);
1963	return (SET_ERROR(ENOTSUP));
1964}
1965
1966static void
1967dnode_set_nlevels_impl(dnode_t *dn, int new_nlevels, dmu_tx_t *tx)
1968{
1969	uint64_t txgoff = tx->tx_txg & TXG_MASK;
1970	int old_nlevels = dn->dn_nlevels;
1971	dmu_buf_impl_t *db;
1972	list_t *list;
1973	dbuf_dirty_record_t *new, *dr, *dr_next;
1974
1975	ASSERT(RW_WRITE_HELD(&dn->dn_struct_rwlock));
1976
1977	ASSERT3U(new_nlevels, >, dn->dn_nlevels);
1978	dn->dn_nlevels = new_nlevels;
1979
1980	ASSERT3U(new_nlevels, >, dn->dn_next_nlevels[txgoff]);
1981	dn->dn_next_nlevels[txgoff] = new_nlevels;
1982
1983	/* dirty the left indirects */
1984	db = dbuf_hold_level(dn, old_nlevels, 0, FTAG);
1985	ASSERT(db != NULL);
1986	new = dbuf_dirty(db, tx);
1987	dbuf_rele(db, FTAG);
1988
1989	/* transfer the dirty records to the new indirect */
1990	mutex_enter(&dn->dn_mtx);
1991	mutex_enter(&new->dt.di.dr_mtx);
1992	list = &dn->dn_dirty_records[txgoff];
1993	for (dr = list_head(list); dr; dr = dr_next) {
1994		dr_next = list_next(&dn->dn_dirty_records[txgoff], dr);
1995
1996		IMPLY(dr->dr_dbuf == NULL, old_nlevels == 1);
1997		if (dr->dr_dbuf == NULL ||
1998		    (dr->dr_dbuf->db_level == old_nlevels - 1 &&
1999		    dr->dr_dbuf->db_blkid != DMU_BONUS_BLKID &&
2000		    dr->dr_dbuf->db_blkid != DMU_SPILL_BLKID)) {
2001			list_remove(&dn->dn_dirty_records[txgoff], dr);
2002			list_insert_tail(&new->dt.di.dr_children, dr);
2003			dr->dr_parent = new;
2004		}
2005	}
2006	mutex_exit(&new->dt.di.dr_mtx);
2007	mutex_exit(&dn->dn_mtx);
2008}
2009
2010int
2011dnode_set_nlevels(dnode_t *dn, int nlevels, dmu_tx_t *tx)
2012{
2013	int ret = 0;
2014
2015	rw_enter(&dn->dn_struct_rwlock, RW_WRITER);
2016
2017	if (dn->dn_nlevels == nlevels) {
2018		ret = 0;
2019		goto out;
2020	} else if (nlevels < dn->dn_nlevels) {
2021		ret = SET_ERROR(EINVAL);
2022		goto out;
2023	}
2024
2025	dnode_set_nlevels_impl(dn, nlevels, tx);
2026
2027out:
2028	rw_exit(&dn->dn_struct_rwlock);
2029	return (ret);
2030}
2031
2032/* read-holding callers must not rely on the lock being continuously held */
2033void
2034dnode_new_blkid(dnode_t *dn, uint64_t blkid, dmu_tx_t *tx, boolean_t have_read,
2035    boolean_t force)
2036{
2037	int epbs, new_nlevels;
2038	uint64_t sz;
2039
2040	ASSERT(blkid != DMU_BONUS_BLKID);
2041
2042	ASSERT(have_read ?
2043	    RW_READ_HELD(&dn->dn_struct_rwlock) :
2044	    RW_WRITE_HELD(&dn->dn_struct_rwlock));
2045
2046	/*
2047	 * if we have a read-lock, check to see if we need to do any work
2048	 * before upgrading to a write-lock.
2049	 */
2050	if (have_read) {
2051		if (blkid <= dn->dn_maxblkid)
2052			return;
2053
2054		if (!rw_tryupgrade(&dn->dn_struct_rwlock)) {
2055			rw_exit(&dn->dn_struct_rwlock);
2056			rw_enter(&dn->dn_struct_rwlock, RW_WRITER);
2057		}
2058	}
2059
2060	/*
2061	 * Raw sends (indicated by the force flag) require that we take the
2062	 * given blkid even if the value is lower than the current value.
2063	 */
2064	if (!force && blkid <= dn->dn_maxblkid)
2065		goto out;
2066
2067	/*
2068	 * We use the (otherwise unused) top bit of dn_next_maxblkid[txgoff]
2069	 * to indicate that this field is set. This allows us to set the
2070	 * maxblkid to 0 on an existing object in dnode_sync().
2071	 */
2072	dn->dn_maxblkid = blkid;
2073	dn->dn_next_maxblkid[tx->tx_txg & TXG_MASK] =
2074	    blkid | DMU_NEXT_MAXBLKID_SET;
2075
2076	/*
2077	 * Compute the number of levels necessary to support the new maxblkid.
2078	 * Raw sends will ensure nlevels is set correctly for us.
2079	 */
2080	new_nlevels = 1;
2081	epbs = dn->dn_indblkshift - SPA_BLKPTRSHIFT;
2082	for (sz = dn->dn_nblkptr;
2083	    sz <= blkid && sz >= dn->dn_nblkptr; sz <<= epbs)
2084		new_nlevels++;
2085
2086	ASSERT3U(new_nlevels, <=, DN_MAX_LEVELS);
2087
2088	if (!force) {
2089		if (new_nlevels > dn->dn_nlevels)
2090			dnode_set_nlevels_impl(dn, new_nlevels, tx);
2091	} else {
2092		ASSERT3U(dn->dn_nlevels, >=, new_nlevels);
2093	}
2094
2095out:
2096	if (have_read)
2097		rw_downgrade(&dn->dn_struct_rwlock);
2098}
2099
2100static void
2101dnode_dirty_l1(dnode_t *dn, uint64_t l1blkid, dmu_tx_t *tx)
2102{
2103	dmu_buf_impl_t *db = dbuf_hold_level(dn, 1, l1blkid, FTAG);
2104	if (db != NULL) {
2105		dmu_buf_will_dirty(&db->db, tx);
2106		dbuf_rele(db, FTAG);
2107	}
2108}
2109
2110/*
2111 * Dirty all the in-core level-1 dbufs in the range specified by start_blkid
2112 * and end_blkid.
2113 */
2114static void
2115dnode_dirty_l1range(dnode_t *dn, uint64_t start_blkid, uint64_t end_blkid,
2116    dmu_tx_t *tx)
2117{
2118	dmu_buf_impl_t *db_search;
2119	dmu_buf_impl_t *db;
2120	avl_index_t where;
2121
2122	db_search = kmem_zalloc(sizeof (dmu_buf_impl_t), KM_SLEEP);
2123
2124	mutex_enter(&dn->dn_dbufs_mtx);
2125
2126	db_search->db_level = 1;
2127	db_search->db_blkid = start_blkid + 1;
2128	db_search->db_state = DB_SEARCH;
2129	for (;;) {
2130
2131		db = avl_find(&dn->dn_dbufs, db_search, &where);
2132		if (db == NULL)
2133			db = avl_nearest(&dn->dn_dbufs, where, AVL_AFTER);
2134
2135		if (db == NULL || db->db_level != 1 ||
2136		    db->db_blkid >= end_blkid) {
2137			break;
2138		}
2139
2140		/*
2141		 * Setup the next blkid we want to search for.
2142		 */
2143		db_search->db_blkid = db->db_blkid + 1;
2144		ASSERT3U(db->db_blkid, >=, start_blkid);
2145
2146		/*
2147		 * If the dbuf transitions to DB_EVICTING while we're trying
2148		 * to dirty it, then we will be unable to discover it in
2149		 * the dbuf hash table. This will result in a call to
2150		 * dbuf_create() which needs to acquire the dn_dbufs_mtx
2151		 * lock. To avoid a deadlock, we drop the lock before
2152		 * dirtying the level-1 dbuf.
2153		 */
2154		mutex_exit(&dn->dn_dbufs_mtx);
2155		dnode_dirty_l1(dn, db->db_blkid, tx);
2156		mutex_enter(&dn->dn_dbufs_mtx);
2157	}
2158
2159#ifdef ZFS_DEBUG
2160	/*
2161	 * Walk all the in-core level-1 dbufs and verify they have been dirtied.
2162	 */
2163	db_search->db_level = 1;
2164	db_search->db_blkid = start_blkid + 1;
2165	db_search->db_state = DB_SEARCH;
2166	db = avl_find(&dn->dn_dbufs, db_search, &where);
2167	if (db == NULL)
2168		db = avl_nearest(&dn->dn_dbufs, where, AVL_AFTER);
2169	for (; db != NULL; db = AVL_NEXT(&dn->dn_dbufs, db)) {
2170		if (db->db_level != 1 || db->db_blkid >= end_blkid)
2171			break;
2172		if (db->db_state != DB_EVICTING)
2173			ASSERT(db->db_dirtycnt > 0);
2174	}
2175#endif
2176	kmem_free(db_search, sizeof (dmu_buf_impl_t));
2177	mutex_exit(&dn->dn_dbufs_mtx);
2178}
2179
2180void
2181dnode_set_dirtyctx(dnode_t *dn, dmu_tx_t *tx, const void *tag)
2182{
2183	/*
2184	 * Don't set dirtyctx to SYNC if we're just modifying this as we
2185	 * initialize the objset.
2186	 */
2187	if (dn->dn_dirtyctx == DN_UNDIRTIED) {
2188		dsl_dataset_t *ds = dn->dn_objset->os_dsl_dataset;
2189
2190		if (ds != NULL) {
2191			rrw_enter(&ds->ds_bp_rwlock, RW_READER, tag);
2192		}
2193		if (!BP_IS_HOLE(dn->dn_objset->os_rootbp)) {
2194			if (dmu_tx_is_syncing(tx))
2195				dn->dn_dirtyctx = DN_DIRTY_SYNC;
2196			else
2197				dn->dn_dirtyctx = DN_DIRTY_OPEN;
2198			dn->dn_dirtyctx_firstset = tag;
2199		}
2200		if (ds != NULL) {
2201			rrw_exit(&ds->ds_bp_rwlock, tag);
2202		}
2203	}
2204}
2205
2206static void
2207dnode_partial_zero(dnode_t *dn, uint64_t off, uint64_t blkoff, uint64_t len,
2208    dmu_tx_t *tx)
2209{
2210	dmu_buf_impl_t *db;
2211	int res;
2212
2213	rw_enter(&dn->dn_struct_rwlock, RW_READER);
2214	res = dbuf_hold_impl(dn, 0, dbuf_whichblock(dn, 0, off), TRUE, FALSE,
2215	    FTAG, &db);
2216	rw_exit(&dn->dn_struct_rwlock);
2217	if (res == 0) {
2218		db_lock_type_t dblt;
2219		boolean_t dirty;
2220
2221		dblt = dmu_buf_lock_parent(db, RW_READER, FTAG);
2222		/* don't dirty if not on disk and not dirty */
2223		dirty = !list_is_empty(&db->db_dirty_records) ||
2224		    (db->db_blkptr && !BP_IS_HOLE(db->db_blkptr));
2225		dmu_buf_unlock_parent(db, dblt, FTAG);
2226		if (dirty) {
2227			caddr_t data;
2228
2229			dmu_buf_will_dirty(&db->db, tx);
2230			data = db->db.db_data;
2231			memset(data + blkoff, 0, len);
2232		}
2233		dbuf_rele(db, FTAG);
2234	}
2235}
2236
2237void
2238dnode_free_range(dnode_t *dn, uint64_t off, uint64_t len, dmu_tx_t *tx)
2239{
2240	uint64_t blkoff, blkid, nblks;
2241	int blksz, blkshift, head, tail;
2242	int trunc = FALSE;
2243	int epbs;
2244
2245	blksz = dn->dn_datablksz;
2246	blkshift = dn->dn_datablkshift;
2247	epbs = dn->dn_indblkshift - SPA_BLKPTRSHIFT;
2248
2249	if (len == DMU_OBJECT_END) {
2250		len = UINT64_MAX - off;
2251		trunc = TRUE;
2252	}
2253
2254	/*
2255	 * First, block align the region to free:
2256	 */
2257	if (ISP2(blksz)) {
2258		head = P2NPHASE(off, blksz);
2259		blkoff = P2PHASE(off, blksz);
2260		if ((off >> blkshift) > dn->dn_maxblkid)
2261			return;
2262	} else {
2263		ASSERT(dn->dn_maxblkid == 0);
2264		if (off == 0 && len >= blksz) {
2265			/*
2266			 * Freeing the whole block; fast-track this request.
2267			 */
2268			blkid = 0;
2269			nblks = 1;
2270			if (dn->dn_nlevels > 1) {
2271				rw_enter(&dn->dn_struct_rwlock, RW_WRITER);
2272				dnode_dirty_l1(dn, 0, tx);
2273				rw_exit(&dn->dn_struct_rwlock);
2274			}
2275			goto done;
2276		} else if (off >= blksz) {
2277			/* Freeing past end-of-data */
2278			return;
2279		} else {
2280			/* Freeing part of the block. */
2281			head = blksz - off;
2282			ASSERT3U(head, >, 0);
2283		}
2284		blkoff = off;
2285	}
2286	/* zero out any partial block data at the start of the range */
2287	if (head) {
2288		ASSERT3U(blkoff + head, ==, blksz);
2289		if (len < head)
2290			head = len;
2291		dnode_partial_zero(dn, off, blkoff, head, tx);
2292		off += head;
2293		len -= head;
2294	}
2295
2296	/* If the range was less than one block, we're done */
2297	if (len == 0)
2298		return;
2299
2300	/* If the remaining range is past end of file, we're done */
2301	if ((off >> blkshift) > dn->dn_maxblkid)
2302		return;
2303
2304	ASSERT(ISP2(blksz));
2305	if (trunc)
2306		tail = 0;
2307	else
2308		tail = P2PHASE(len, blksz);
2309
2310	ASSERT0(P2PHASE(off, blksz));
2311	/* zero out any partial block data at the end of the range */
2312	if (tail) {
2313		if (len < tail)
2314			tail = len;
2315		dnode_partial_zero(dn, off + len, 0, tail, tx);
2316		len -= tail;
2317	}
2318
2319	/* If the range did not include a full block, we are done */
2320	if (len == 0)
2321		return;
2322
2323	ASSERT(IS_P2ALIGNED(off, blksz));
2324	ASSERT(trunc || IS_P2ALIGNED(len, blksz));
2325	blkid = off >> blkshift;
2326	nblks = len >> blkshift;
2327	if (trunc)
2328		nblks += 1;
2329
2330	/*
2331	 * Dirty all the indirect blocks in this range.  Note that only
2332	 * the first and last indirect blocks can actually be written
2333	 * (if they were partially freed) -- they must be dirtied, even if
2334	 * they do not exist on disk yet.  The interior blocks will
2335	 * be freed by free_children(), so they will not actually be written.
2336	 * Even though these interior blocks will not be written, we
2337	 * dirty them for two reasons:
2338	 *
2339	 *  - It ensures that the indirect blocks remain in memory until
2340	 *    syncing context.  (They have already been prefetched by
2341	 *    dmu_tx_hold_free(), so we don't have to worry about reading
2342	 *    them serially here.)
2343	 *
2344	 *  - The dirty space accounting will put pressure on the txg sync
2345	 *    mechanism to begin syncing, and to delay transactions if there
2346	 *    is a large amount of freeing.  Even though these indirect
2347	 *    blocks will not be written, we could need to write the same
2348	 *    amount of space if we copy the freed BPs into deadlists.
2349	 */
2350	if (dn->dn_nlevels > 1) {
2351		rw_enter(&dn->dn_struct_rwlock, RW_WRITER);
2352		uint64_t first, last;
2353
2354		first = blkid >> epbs;
2355		dnode_dirty_l1(dn, first, tx);
2356		if (trunc)
2357			last = dn->dn_maxblkid >> epbs;
2358		else
2359			last = (blkid + nblks - 1) >> epbs;
2360		if (last != first)
2361			dnode_dirty_l1(dn, last, tx);
2362
2363		dnode_dirty_l1range(dn, first, last, tx);
2364
2365		int shift = dn->dn_datablkshift + dn->dn_indblkshift -
2366		    SPA_BLKPTRSHIFT;
2367		for (uint64_t i = first + 1; i < last; i++) {
2368			/*
2369			 * Set i to the blockid of the next non-hole
2370			 * level-1 indirect block at or after i.  Note
2371			 * that dnode_next_offset() operates in terms of
2372			 * level-0-equivalent bytes.
2373			 */
2374			uint64_t ibyte = i << shift;
2375			int err = dnode_next_offset(dn, DNODE_FIND_HAVELOCK,
2376			    &ibyte, 2, 1, 0);
2377			i = ibyte >> shift;
2378			if (i >= last)
2379				break;
2380
2381			/*
2382			 * Normally we should not see an error, either
2383			 * from dnode_next_offset() or dbuf_hold_level()
2384			 * (except for ESRCH from dnode_next_offset).
2385			 * If there is an i/o error, then when we read
2386			 * this block in syncing context, it will use
2387			 * ZIO_FLAG_MUSTSUCCEED, and thus hang/panic according
2388			 * to the "failmode" property.  dnode_next_offset()
2389			 * doesn't have a flag to indicate MUSTSUCCEED.
2390			 */
2391			if (err != 0)
2392				break;
2393
2394			dnode_dirty_l1(dn, i, tx);
2395		}
2396		rw_exit(&dn->dn_struct_rwlock);
2397	}
2398
2399done:
2400	/*
2401	 * Add this range to the dnode range list.
2402	 * We will finish up this free operation in the syncing phase.
2403	 */
2404	mutex_enter(&dn->dn_mtx);
2405	{
2406		int txgoff = tx->tx_txg & TXG_MASK;
2407		if (dn->dn_free_ranges[txgoff] == NULL) {
2408			dn->dn_free_ranges[txgoff] = range_tree_create(NULL,
2409			    RANGE_SEG64, NULL, 0, 0);
2410		}
2411		range_tree_clear(dn->dn_free_ranges[txgoff], blkid, nblks);
2412		range_tree_add(dn->dn_free_ranges[txgoff], blkid, nblks);
2413	}
2414	dprintf_dnode(dn, "blkid=%llu nblks=%llu txg=%llu\n",
2415	    (u_longlong_t)blkid, (u_longlong_t)nblks,
2416	    (u_longlong_t)tx->tx_txg);
2417	mutex_exit(&dn->dn_mtx);
2418
2419	dbuf_free_range(dn, blkid, blkid + nblks - 1, tx);
2420	dnode_setdirty(dn, tx);
2421}
2422
2423static boolean_t
2424dnode_spill_freed(dnode_t *dn)
2425{
2426	int i;
2427
2428	mutex_enter(&dn->dn_mtx);
2429	for (i = 0; i < TXG_SIZE; i++) {
2430		if (dn->dn_rm_spillblk[i] == DN_KILL_SPILLBLK)
2431			break;
2432	}
2433	mutex_exit(&dn->dn_mtx);
2434	return (i < TXG_SIZE);
2435}
2436
2437/* return TRUE if this blkid was freed in a recent txg, or FALSE if it wasn't */
2438uint64_t
2439dnode_block_freed(dnode_t *dn, uint64_t blkid)
2440{
2441	int i;
2442
2443	if (blkid == DMU_BONUS_BLKID)
2444		return (FALSE);
2445
2446	if (dn->dn_free_txg)
2447		return (TRUE);
2448
2449	if (blkid == DMU_SPILL_BLKID)
2450		return (dnode_spill_freed(dn));
2451
2452	mutex_enter(&dn->dn_mtx);
2453	for (i = 0; i < TXG_SIZE; i++) {
2454		if (dn->dn_free_ranges[i] != NULL &&
2455		    range_tree_contains(dn->dn_free_ranges[i], blkid, 1))
2456			break;
2457	}
2458	mutex_exit(&dn->dn_mtx);
2459	return (i < TXG_SIZE);
2460}
2461
2462/* call from syncing context when we actually write/free space for this dnode */
2463void
2464dnode_diduse_space(dnode_t *dn, int64_t delta)
2465{
2466	uint64_t space;
2467	dprintf_dnode(dn, "dn=%p dnp=%p used=%llu delta=%lld\n",
2468	    dn, dn->dn_phys,
2469	    (u_longlong_t)dn->dn_phys->dn_used,
2470	    (longlong_t)delta);
2471
2472	mutex_enter(&dn->dn_mtx);
2473	space = DN_USED_BYTES(dn->dn_phys);
2474	if (delta > 0) {
2475		ASSERT3U(space + delta, >=, space); /* no overflow */
2476	} else {
2477		ASSERT3U(space, >=, -delta); /* no underflow */
2478	}
2479	space += delta;
2480	if (spa_version(dn->dn_objset->os_spa) < SPA_VERSION_DNODE_BYTES) {
2481		ASSERT((dn->dn_phys->dn_flags & DNODE_FLAG_USED_BYTES) == 0);
2482		ASSERT0(P2PHASE(space, 1<<DEV_BSHIFT));
2483		dn->dn_phys->dn_used = space >> DEV_BSHIFT;
2484	} else {
2485		dn->dn_phys->dn_used = space;
2486		dn->dn_phys->dn_flags |= DNODE_FLAG_USED_BYTES;
2487	}
2488	mutex_exit(&dn->dn_mtx);
2489}
2490
2491/*
2492 * Scans a block at the indicated "level" looking for a hole or data,
2493 * depending on 'flags'.
2494 *
2495 * If level > 0, then we are scanning an indirect block looking at its
2496 * pointers.  If level == 0, then we are looking at a block of dnodes.
2497 *
2498 * If we don't find what we are looking for in the block, we return ESRCH.
2499 * Otherwise, return with *offset pointing to the beginning (if searching
2500 * forwards) or end (if searching backwards) of the range covered by the
2501 * block pointer we matched on (or dnode).
2502 *
2503 * The basic search algorithm used below by dnode_next_offset() is to
2504 * use this function to search up the block tree (widen the search) until
2505 * we find something (i.e., we don't return ESRCH) and then search back
2506 * down the tree (narrow the search) until we reach our original search
2507 * level.
2508 */
2509static int
2510dnode_next_offset_level(dnode_t *dn, int flags, uint64_t *offset,
2511    int lvl, uint64_t blkfill, uint64_t txg)
2512{
2513	dmu_buf_impl_t *db = NULL;
2514	void *data = NULL;
2515	uint64_t epbs = dn->dn_phys->dn_indblkshift - SPA_BLKPTRSHIFT;
2516	uint64_t epb = 1ULL << epbs;
2517	uint64_t minfill, maxfill;
2518	boolean_t hole;
2519	int i, inc, error, span;
2520
2521	ASSERT(RW_LOCK_HELD(&dn->dn_struct_rwlock));
2522
2523	hole = ((flags & DNODE_FIND_HOLE) != 0);
2524	inc = (flags & DNODE_FIND_BACKWARDS) ? -1 : 1;
2525	ASSERT(txg == 0 || !hole);
2526
2527	if (lvl == dn->dn_phys->dn_nlevels) {
2528		error = 0;
2529		epb = dn->dn_phys->dn_nblkptr;
2530		data = dn->dn_phys->dn_blkptr;
2531	} else {
2532		uint64_t blkid = dbuf_whichblock(dn, lvl, *offset);
2533		error = dbuf_hold_impl(dn, lvl, blkid, TRUE, FALSE, FTAG, &db);
2534		if (error) {
2535			if (error != ENOENT)
2536				return (error);
2537			if (hole)
2538				return (0);
2539			/*
2540			 * This can only happen when we are searching up
2541			 * the block tree for data.  We don't really need to
2542			 * adjust the offset, as we will just end up looking
2543			 * at the pointer to this block in its parent, and its
2544			 * going to be unallocated, so we will skip over it.
2545			 */
2546			return (SET_ERROR(ESRCH));
2547		}
2548		error = dbuf_read(db, NULL,
2549		    DB_RF_CANFAIL | DB_RF_HAVESTRUCT |
2550		    DB_RF_NO_DECRYPT | DB_RF_NOPREFETCH);
2551		if (error) {
2552			dbuf_rele(db, FTAG);
2553			return (error);
2554		}
2555		data = db->db.db_data;
2556		rw_enter(&db->db_rwlock, RW_READER);
2557	}
2558
2559	if (db != NULL && txg != 0 && (db->db_blkptr == NULL ||
2560	    BP_GET_LOGICAL_BIRTH(db->db_blkptr) <= txg ||
2561	    BP_IS_HOLE(db->db_blkptr))) {
2562		/*
2563		 * This can only happen when we are searching up the tree
2564		 * and these conditions mean that we need to keep climbing.
2565		 */
2566		error = SET_ERROR(ESRCH);
2567	} else if (lvl == 0) {
2568		dnode_phys_t *dnp = data;
2569
2570		ASSERT(dn->dn_type == DMU_OT_DNODE);
2571		ASSERT(!(flags & DNODE_FIND_BACKWARDS));
2572
2573		for (i = (*offset >> DNODE_SHIFT) & (blkfill - 1);
2574		    i < blkfill; i += dnp[i].dn_extra_slots + 1) {
2575			if ((dnp[i].dn_type == DMU_OT_NONE) == hole)
2576				break;
2577		}
2578
2579		if (i == blkfill)
2580			error = SET_ERROR(ESRCH);
2581
2582		*offset = (*offset & ~(DNODE_BLOCK_SIZE - 1)) +
2583		    (i << DNODE_SHIFT);
2584	} else {
2585		blkptr_t *bp = data;
2586		uint64_t start = *offset;
2587		span = (lvl - 1) * epbs + dn->dn_datablkshift;
2588		minfill = 0;
2589		maxfill = blkfill << ((lvl - 1) * epbs);
2590
2591		if (hole)
2592			maxfill--;
2593		else
2594			minfill++;
2595
2596		if (span >= 8 * sizeof (*offset)) {
2597			/* This only happens on the highest indirection level */
2598			ASSERT3U((lvl - 1), ==, dn->dn_phys->dn_nlevels - 1);
2599			*offset = 0;
2600		} else {
2601			*offset = *offset >> span;
2602		}
2603
2604		for (i = BF64_GET(*offset, 0, epbs);
2605		    i >= 0 && i < epb; i += inc) {
2606			if (BP_GET_FILL(&bp[i]) >= minfill &&
2607			    BP_GET_FILL(&bp[i]) <= maxfill &&
2608			    (hole || BP_GET_LOGICAL_BIRTH(&bp[i]) > txg))
2609				break;
2610			if (inc > 0 || *offset > 0)
2611				*offset += inc;
2612		}
2613
2614		if (span >= 8 * sizeof (*offset)) {
2615			*offset = start;
2616		} else {
2617			*offset = *offset << span;
2618		}
2619
2620		if (inc < 0) {
2621			/* traversing backwards; position offset at the end */
2622			if (span < 8 * sizeof (*offset))
2623				*offset = MIN(*offset + (1ULL << span) - 1,
2624				    start);
2625		} else if (*offset < start) {
2626			*offset = start;
2627		}
2628		if (i < 0 || i >= epb)
2629			error = SET_ERROR(ESRCH);
2630	}
2631
2632	if (db != NULL) {
2633		rw_exit(&db->db_rwlock);
2634		dbuf_rele(db, FTAG);
2635	}
2636
2637	return (error);
2638}
2639
2640/*
2641 * Find the next hole, data, or sparse region at or after *offset.
2642 * The value 'blkfill' tells us how many items we expect to find
2643 * in an L0 data block; this value is 1 for normal objects,
2644 * DNODES_PER_BLOCK for the meta dnode, and some fraction of
2645 * DNODES_PER_BLOCK when searching for sparse regions thereof.
2646 *
2647 * Examples:
2648 *
2649 * dnode_next_offset(dn, flags, offset, 1, 1, 0);
2650 *	Finds the next/previous hole/data in a file.
2651 *	Used in dmu_offset_next().
2652 *
2653 * dnode_next_offset(mdn, flags, offset, 0, DNODES_PER_BLOCK, txg);
2654 *	Finds the next free/allocated dnode an objset's meta-dnode.
2655 *	Only finds objects that have new contents since txg (ie.
2656 *	bonus buffer changes and content removal are ignored).
2657 *	Used in dmu_object_next().
2658 *
2659 * dnode_next_offset(mdn, DNODE_FIND_HOLE, offset, 2, DNODES_PER_BLOCK >> 2, 0);
2660 *	Finds the next L2 meta-dnode bp that's at most 1/4 full.
2661 *	Used in dmu_object_alloc().
2662 */
2663int
2664dnode_next_offset(dnode_t *dn, int flags, uint64_t *offset,
2665    int minlvl, uint64_t blkfill, uint64_t txg)
2666{
2667	uint64_t initial_offset = *offset;
2668	int lvl, maxlvl;
2669	int error = 0;
2670
2671	if (!(flags & DNODE_FIND_HAVELOCK))
2672		rw_enter(&dn->dn_struct_rwlock, RW_READER);
2673
2674	if (dn->dn_phys->dn_nlevels == 0) {
2675		error = SET_ERROR(ESRCH);
2676		goto out;
2677	}
2678
2679	if (dn->dn_datablkshift == 0) {
2680		if (*offset < dn->dn_datablksz) {
2681			if (flags & DNODE_FIND_HOLE)
2682				*offset = dn->dn_datablksz;
2683		} else {
2684			error = SET_ERROR(ESRCH);
2685		}
2686		goto out;
2687	}
2688
2689	maxlvl = dn->dn_phys->dn_nlevels;
2690
2691	for (lvl = minlvl; lvl <= maxlvl; lvl++) {
2692		error = dnode_next_offset_level(dn,
2693		    flags, offset, lvl, blkfill, txg);
2694		if (error != ESRCH)
2695			break;
2696	}
2697
2698	while (error == 0 && --lvl >= minlvl) {
2699		error = dnode_next_offset_level(dn,
2700		    flags, offset, lvl, blkfill, txg);
2701	}
2702
2703	/*
2704	 * There's always a "virtual hole" at the end of the object, even
2705	 * if all BP's which physically exist are non-holes.
2706	 */
2707	if ((flags & DNODE_FIND_HOLE) && error == ESRCH && txg == 0 &&
2708	    minlvl == 1 && blkfill == 1 && !(flags & DNODE_FIND_BACKWARDS)) {
2709		error = 0;
2710	}
2711
2712	if (error == 0 && (flags & DNODE_FIND_BACKWARDS ?
2713	    initial_offset < *offset : initial_offset > *offset))
2714		error = SET_ERROR(ESRCH);
2715out:
2716	if (!(flags & DNODE_FIND_HAVELOCK))
2717		rw_exit(&dn->dn_struct_rwlock);
2718
2719	return (error);
2720}
2721
2722#if defined(_KERNEL)
2723EXPORT_SYMBOL(dnode_hold);
2724EXPORT_SYMBOL(dnode_rele);
2725EXPORT_SYMBOL(dnode_set_nlevels);
2726EXPORT_SYMBOL(dnode_set_blksz);
2727EXPORT_SYMBOL(dnode_free_range);
2728EXPORT_SYMBOL(dnode_evict_dbufs);
2729EXPORT_SYMBOL(dnode_evict_bonus);
2730#endif
2731
2732ZFS_MODULE_PARAM(zfs, zfs_, default_bs, INT, ZMOD_RW,
2733	"Default dnode block shift");
2734ZFS_MODULE_PARAM(zfs, zfs_, default_ibs, INT, ZMOD_RW,
2735	"Default dnode indirect block shift");
2736