HAMMER 53E/Many: Performance tuning

[dragonfly.git] / sys / vfs / hammer / hammer_inode.c

/*
 * Copyright (c) 2007-2008 The DragonFly Project.  All rights reserved.
 * 
 * This code is derived from software contributed to The DragonFly Project
 * by Matthew Dillon <dillon@backplane.com>
 * 
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 * 3. Neither the name of The DragonFly Project nor the names of its
 *    contributors may be used to endorse or promote products derived
 *    from this software without specific, prior written permission.
 * 
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
 * FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE
 * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
 * INCIDENTAL, SPECIAL, EXEMPLARY OR CONSEQUENTIAL DAMAGES (INCLUDING,
 * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
 * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
 * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 * 
 * $DragonFly: src/sys/vfs/hammer/hammer_inode.c,v 1.68 2008/06/10 05:06:20 dillon Exp $
 */

#include "hammer.h"
#include <vm/vm_extern.h>
#include <sys/buf.h>
#include <sys/buf2.h>

static int hammer_unload_inode(struct hammer_inode *ip);
static void hammer_flush_inode_core(hammer_inode_t ip, int flags);
static int hammer_setup_child_callback(hammer_record_t rec, void *data);
static int hammer_setup_parent_inodes(hammer_record_t record);

#ifdef DEBUG_TRUNCATE
extern struct hammer_inode *HammerTruncIp;
#endif

/*
 * The kernel is not actively referencing this vnode but is still holding
 * it cached.
 *
 * This is called from the frontend.
 */
int
hammer_vop_inactive(struct vop_inactive_args *ap)
{
        struct hammer_inode *ip = VTOI(ap->a_vp);

        /*
         * Degenerate case
         */
        if (ip == NULL) {
                vrecycle(ap->a_vp);
                return(0);
        }

        /*
         * If the inode no longer has visibility in the filesystem and is
         * fairly clean, try to recycle it immediately.  This can deadlock
         * in vfsync() if we aren't careful.
         * 
         * Do not queue the inode to the flusher if we still have visibility,
         * otherwise namespace calls such as chmod will unnecessarily generate
         * multiple inode updates.
         */
        hammer_inode_unloadable_check(ip, 0);
        if (ip->ino_data.nlinks == 0) {
                if (ip->flags & HAMMER_INODE_MODMASK)
                        hammer_flush_inode(ip, 0);
                else
                        vrecycle(ap->a_vp);
        }
        return(0);
}

/*
 * Release the vnode association.  This is typically (but not always)
 * the last reference on the inode.
 *
 * Once the association is lost we are on our own with regards to
 * flushing the inode.
 */
int
hammer_vop_reclaim(struct vop_reclaim_args *ap)
{
        struct hammer_inode *ip;
        struct vnode *vp;

        vp = ap->a_vp;

        if ((ip = vp->v_data) != NULL) {
                vp->v_data = NULL;
                ip->vp = NULL;
                if ((ip->flags & HAMMER_INODE_RECLAIM) == 0) {
                        ++hammer_count_reclaiming;
                        ++ip->hmp->inode_reclaims;
                        ip->flags |= HAMMER_INODE_RECLAIM;
                }
                hammer_rel_inode(ip, 1);
        }
        return(0);
}

/*
 * Return a locked vnode for the specified inode.  The inode must be
 * referenced but NOT LOCKED on entry and will remain referenced on
 * return.
 *
 * Called from the frontend.
 */
int
hammer_get_vnode(struct hammer_inode *ip, struct vnode **vpp)
{
        hammer_mount_t hmp;
        struct vnode *vp;
        int error = 0;

        hmp = ip->hmp;

        for (;;) {
                if ((vp = ip->vp) == NULL) {
                        error = getnewvnode(VT_HAMMER, hmp->mp, vpp, 0, 0);
                        if (error)
                                break;
                        hammer_lock_ex(&ip->lock);
                        if (ip->vp != NULL) {
                                hammer_unlock(&ip->lock);
                                vp->v_type = VBAD;
                                vx_put(vp);
                                continue;
                        }
                        hammer_ref(&ip->lock);
                        vp = *vpp;
                        ip->vp = vp;
                        vp->v_type =
                                hammer_get_vnode_type(ip->ino_data.obj_type);

                        if (ip->flags & HAMMER_INODE_RECLAIM) {
                                --hammer_count_reclaiming;
                                --hmp->inode_reclaims;
                                ip->flags &= ~HAMMER_INODE_RECLAIM;
                                if (hmp->flags & HAMMER_MOUNT_WAITIMAX)
                                        hammer_inode_wakereclaims(hmp);
                        }

                        switch(ip->ino_data.obj_type) {
                        case HAMMER_OBJTYPE_CDEV:
                        case HAMMER_OBJTYPE_BDEV:
                                vp->v_ops = &hmp->mp->mnt_vn_spec_ops;
                                addaliasu(vp, ip->ino_data.rmajor,
                                          ip->ino_data.rminor);
                                break;
                        case HAMMER_OBJTYPE_FIFO:
                                vp->v_ops = &hmp->mp->mnt_vn_fifo_ops;
                                break;
                        default:
                                break;
                        }

                        /*
                         * Only mark as the root vnode if the ip is not
                         * historical, otherwise the VFS cache will get
                         * confused.  The other half of the special handling
                         * is in hammer_vop_nlookupdotdot().
                         */
                        if (ip->obj_id == HAMMER_OBJID_ROOT &&
                            ip->obj_asof == hmp->asof) {
                                vp->v_flag |= VROOT;
                        }

                        vp->v_data = (void *)ip;
                        /* vnode locked by getnewvnode() */
                        /* make related vnode dirty if inode dirty? */
                        hammer_unlock(&ip->lock);
                        if (vp->v_type == VREG)
                                vinitvmio(vp, ip->ino_data.size);
                        break;
                }

                /*
                 * loop if the vget fails (aka races), or if the vp
                 * no longer matches ip->vp.
                 */
                if (vget(vp, LK_EXCLUSIVE) == 0) {
                        if (vp == ip->vp)
                                break;
                        vput(vp);
                }
        }
        *vpp = vp;
        return(error);
}

/*
 * Acquire a HAMMER inode.  The returned inode is not locked.  These functions
 * do not attach or detach the related vnode (use hammer_get_vnode() for
 * that).
 *
 * The flags argument is only applied for newly created inodes, and only
 * certain flags are inherited.
 *
 * Called from the frontend.
 */
struct hammer_inode *
hammer_get_inode(hammer_transaction_t trans, struct hammer_node **cache,
                 u_int64_t obj_id, hammer_tid_t asof, int flags, int *errorp)
{
        hammer_mount_t hmp = trans->hmp;
        struct hammer_inode_info iinfo;
        struct hammer_cursor cursor;
        struct hammer_inode *ip;

        /*
         * Determine if we already have an inode cached.  If we do then
         * we are golden.
         */
        iinfo.obj_id = obj_id;
        iinfo.obj_asof = asof;
loop:
        ip = hammer_ino_rb_tree_RB_LOOKUP_INFO(&hmp->rb_inos_root, &iinfo);
        if (ip) {
                hammer_ref(&ip->lock);
                *errorp = 0;
                return(ip);
        }

        /*
         * Impose a slow-down if HAMMER is heavily backlogged on cleaning
         * out reclaimed inodes.
         */
        if (hmp->inode_reclaims > HAMMER_RECLAIM_MIN &&
            curthread != hmp->flusher_td) {
                hammer_inode_waitreclaims(hmp);
        }

        /*
         * Allocate a new inode structure and deal with races later.
         */
        ip = kmalloc(sizeof(*ip), M_HAMMER, M_WAITOK|M_ZERO);
        ++hammer_count_inodes;
        ++hmp->count_inodes;
        ip->obj_id = obj_id;
        ip->obj_asof = iinfo.obj_asof;
        ip->hmp = hmp;
        ip->flags = flags & HAMMER_INODE_RO;
        if (hmp->ronly)
                ip->flags |= HAMMER_INODE_RO;
        ip->trunc_off = 0x7FFFFFFFFFFFFFFFLL;
        RB_INIT(&ip->rec_tree);
        TAILQ_INIT(&ip->target_list);

        /*
         * Locate the on-disk inode.
         */
retry:
        hammer_init_cursor(trans, &cursor, cache, NULL);
        cursor.key_beg.localization = HAMMER_LOCALIZE_INODE;
        cursor.key_beg.obj_id = ip->obj_id;
        cursor.key_beg.key = 0;
        cursor.key_beg.create_tid = 0;
        cursor.key_beg.delete_tid = 0;
        cursor.key_beg.rec_type = HAMMER_RECTYPE_INODE;
        cursor.key_beg.obj_type = 0;
        cursor.asof = iinfo.obj_asof;
        cursor.flags = HAMMER_CURSOR_GET_LEAF | HAMMER_CURSOR_GET_DATA |
                       HAMMER_CURSOR_ASOF;

        *errorp = hammer_btree_lookup(&cursor);
        if (*errorp == EDEADLK) {
                hammer_done_cursor(&cursor);
                goto retry;
        }

        /*
         * On success the B-Tree lookup will hold the appropriate
         * buffer cache buffers and provide a pointer to the requested
         * information.  Copy the information to the in-memory inode
         * and cache the B-Tree node to improve future operations.
         */
        if (*errorp == 0) {
                ip->ino_leaf = cursor.node->ondisk->elms[cursor.index].leaf;
                ip->ino_data = cursor.data->inode;
                hammer_cache_node(cursor.node, &ip->cache[0]);
                if (cache)
                        hammer_cache_node(cursor.node, cache);
        }

        /*
         * On success load the inode's record and data and insert the
         * inode into the B-Tree.  It is possible to race another lookup
         * insertion of the same inode so deal with that condition too.
         *
         * The cursor's locked node interlocks against others creating and
         * destroying ip while we were blocked.
         */
        if (*errorp == 0) {
                hammer_ref(&ip->lock);
                if (RB_INSERT(hammer_ino_rb_tree, &hmp->rb_inos_root, ip)) {
                        hammer_uncache_node(&ip->cache[0]);
                        hammer_uncache_node(&ip->cache[1]);
                        KKASSERT(ip->lock.refs == 1);
                        --hammer_count_inodes;
                        --hmp->count_inodes;
                        kfree(ip, M_HAMMER);
                        hammer_done_cursor(&cursor);
                        goto loop;
                }
                ip->flags |= HAMMER_INODE_ONDISK;
        } else {
                /*
                 * Do not panic on read-only accesses which fail, particularly
                 * historical accesses where the snapshot might not have
                 * complete connectivity.
                 */
                if ((flags & HAMMER_INODE_RO) == 0) {
                        kprintf("hammer_get_inode: failed ip %p obj_id %016llx cursor %p error %d\n",
                                ip, ip->obj_id, &cursor, *errorp);
                        Debugger("x");
                }
                if (ip->flags & HAMMER_INODE_RSV_INODES) {
                        ip->flags &= ~HAMMER_INODE_RSV_INODES; /* sanity */
                        --hmp->rsv_inodes;
                }
                hmp->rsv_databufs -= ip->rsv_databufs;
                ip->rsv_databufs = 0;                          /* sanity */

                --hammer_count_inodes;
                --hmp->count_inodes;
                kfree(ip, M_HAMMER);
                ip = NULL;
        }
        hammer_done_cursor(&cursor);
        return (ip);
}

/*
 * Create a new filesystem object, returning the inode in *ipp.  The
 * returned inode will be referenced.
 *
 * The inode is created in-memory.
 */
int
hammer_create_inode(hammer_transaction_t trans, struct vattr *vap,
                    struct ucred *cred, hammer_inode_t dip,
                    struct hammer_inode **ipp)
{
        hammer_mount_t hmp;
        hammer_inode_t ip;
        uid_t xuid;

        hmp = trans->hmp;
        ip = kmalloc(sizeof(*ip), M_HAMMER, M_WAITOK|M_ZERO);
        ++hammer_count_inodes;
        ++hmp->count_inodes;
        ip->obj_id = hammer_alloc_objid(trans, dip);
        KKASSERT(ip->obj_id != 0);
        ip->obj_asof = hmp->asof;
        ip->hmp = hmp;
        ip->flush_state = HAMMER_FST_IDLE;
        ip->flags = HAMMER_INODE_DDIRTY | HAMMER_INODE_ITIMES;

        ip->trunc_off = 0x7FFFFFFFFFFFFFFFLL;
        RB_INIT(&ip->rec_tree);
        TAILQ_INIT(&ip->target_list);

        ip->ino_leaf.atime = trans->time;
        ip->ino_data.mtime = trans->time;
        ip->ino_data.size = 0;
        ip->ino_data.nlinks = 0;

        /*
         * A nohistory designator on the parent directory is inherited by
         * the child.
         */
        ip->ino_data.uflags = dip->ino_data.uflags &
                              (SF_NOHISTORY|UF_NOHISTORY|UF_NODUMP);

        ip->ino_leaf.base.btype = HAMMER_BTREE_TYPE_RECORD;
        ip->ino_leaf.base.localization = HAMMER_LOCALIZE_INODE;
        ip->ino_leaf.base.obj_id = ip->obj_id;
        ip->ino_leaf.base.key = 0;
        ip->ino_leaf.base.create_tid = 0;
        ip->ino_leaf.base.delete_tid = 0;
        ip->ino_leaf.base.rec_type = HAMMER_RECTYPE_INODE;
        ip->ino_leaf.base.obj_type = hammer_get_obj_type(vap->va_type);

        ip->ino_data.obj_type = ip->ino_leaf.base.obj_type;
        ip->ino_data.version = HAMMER_INODE_DATA_VERSION;
        ip->ino_data.mode = vap->va_mode;
        ip->ino_data.ctime = trans->time;
        ip->ino_data.parent_obj_id = (dip) ? dip->ino_leaf.base.obj_id : 0;

        switch(ip->ino_leaf.base.obj_type) {
        case HAMMER_OBJTYPE_CDEV:
        case HAMMER_OBJTYPE_BDEV:
                ip->ino_data.rmajor = vap->va_rmajor;
                ip->ino_data.rminor = vap->va_rminor;
                break;
        default:
                break;
        }

        /*
         * Calculate default uid/gid and overwrite with information from
         * the vap.
         */
        xuid = hammer_to_unix_xid(&dip->ino_data.uid);
        xuid = vop_helper_create_uid(hmp->mp, dip->ino_data.mode, xuid, cred,
                                     &vap->va_mode);
        ip->ino_data.mode = vap->va_mode;

        if (vap->va_vaflags & VA_UID_UUID_VALID)
                ip->ino_data.uid = vap->va_uid_uuid;
        else if (vap->va_uid != (uid_t)VNOVAL)
                hammer_guid_to_uuid(&ip->ino_data.uid, vap->va_uid);
        else
                hammer_guid_to_uuid(&ip->ino_data.uid, xuid);

        if (vap->va_vaflags & VA_GID_UUID_VALID)
                ip->ino_data.gid = vap->va_gid_uuid;
        else if (vap->va_gid != (gid_t)VNOVAL)
                hammer_guid_to_uuid(&ip->ino_data.gid, vap->va_gid);
        else
                ip->ino_data.gid = dip->ino_data.gid;

        hammer_ref(&ip->lock);
        if (RB_INSERT(hammer_ino_rb_tree, &hmp->rb_inos_root, ip)) {
                hammer_unref(&ip->lock);
                panic("hammer_create_inode: duplicate obj_id %llx", ip->obj_id);
        }
        *ipp = ip;
        return(0);
}

/*
 * Called by hammer_sync_inode().
 */
static int
hammer_update_inode(hammer_cursor_t cursor, hammer_inode_t ip)
{
        hammer_transaction_t trans = cursor->trans;
        hammer_record_t record;
        int error;

retry:
        error = 0;

        /*
         * If the inode has a presence on-disk then locate it and mark
         * it deleted, setting DELONDISK.
         *
         * The record may or may not be physically deleted, depending on
         * the retention policy.
         */
        if ((ip->flags & (HAMMER_INODE_ONDISK|HAMMER_INODE_DELONDISK)) ==
            HAMMER_INODE_ONDISK) {
                hammer_normalize_cursor(cursor);
                cursor->key_beg.localization = HAMMER_LOCALIZE_INODE;
                cursor->key_beg.obj_id = ip->obj_id;
                cursor->key_beg.key = 0;
                cursor->key_beg.create_tid = 0;
                cursor->key_beg.delete_tid = 0;
                cursor->key_beg.rec_type = HAMMER_RECTYPE_INODE;
                cursor->key_beg.obj_type = 0;
                cursor->asof = ip->obj_asof;
                cursor->flags &= ~HAMMER_CURSOR_INITMASK;
                cursor->flags |= HAMMER_CURSOR_GET_LEAF | HAMMER_CURSOR_ASOF;
                cursor->flags |= HAMMER_CURSOR_BACKEND;

                error = hammer_btree_lookup(cursor);
                if (hammer_debug_inode)
                        kprintf("IPDEL %p %08x %d", ip, ip->flags, error);
                if (error) {
                        kprintf("error %d\n", error);
                        Debugger("hammer_update_inode");
                }

                if (error == 0) {
                        error = hammer_ip_delete_record(cursor, ip, trans->tid);
                        if (hammer_debug_inode)
                                kprintf(" error %d\n", error);
                        if (error && error != EDEADLK) {
                                kprintf("error %d\n", error);
                                Debugger("hammer_update_inode2");
                        }
                        if (error == 0) {
                                ip->flags |= HAMMER_INODE_DELONDISK;
                        }
                        if (cursor->node)
                                hammer_cache_node(cursor->node, &ip->cache[0]);
                }
                if (error == EDEADLK) {
                        hammer_done_cursor(cursor);
                        error = hammer_init_cursor(trans, cursor,
                                                   &ip->cache[0], ip);
                        if (hammer_debug_inode)
                                kprintf("IPDED %p %d\n", ip, error);
                        if (error == 0)
                                goto retry;
                }
        }

        /*
         * Ok, write out the initial record or a new record (after deleting
         * the old one), unless the DELETED flag is set.  This routine will
         * clear DELONDISK if it writes out a record.
         *
         * Update our inode statistics if this is the first application of
         * the inode on-disk.
         */
        if (error == 0 && (ip->flags & HAMMER_INODE_DELETED) == 0) {
                /*
                 * Generate a record and write it to the media
                 */
                record = hammer_alloc_mem_record(ip, 0);
                record->type = HAMMER_MEM_RECORD_INODE;
                record->flush_state = HAMMER_FST_FLUSH;
                record->leaf = ip->sync_ino_leaf;
                record->leaf.base.create_tid = trans->tid;
                record->leaf.data_len = sizeof(ip->sync_ino_data);
                record->data = (void *)&ip->sync_ino_data;
                record->flags |= HAMMER_RECF_INTERLOCK_BE;
                for (;;) {
                        error = hammer_ip_sync_record_cursor(cursor, record);
                        if (hammer_debug_inode)
                                kprintf("GENREC %p rec %08x %d\n",      
                                        ip, record->flags, error);
                        if (error != EDEADLK)
                                break;
                        hammer_done_cursor(cursor);
                        error = hammer_init_cursor(trans, cursor,
                                                   &ip->cache[0], ip);
                        if (hammer_debug_inode)
                                kprintf("GENREC reinit %d\n", error);
                        if (error)
                                break;
                }
                if (error) {
                        kprintf("error %d\n", error);
                        Debugger("hammer_update_inode3");
                }

                /*
                 * The record isn't managed by the inode's record tree,
                 * destroy it whether we succeed or fail.
                 */
                record->flags &= ~HAMMER_RECF_INTERLOCK_BE;
                record->flags |= HAMMER_RECF_DELETED_FE;
                record->flush_state = HAMMER_FST_IDLE;
                hammer_rel_mem_record(record);

                /*
                 * Finish up.
                 */
                if (error == 0) {
                        if (hammer_debug_inode)
                                kprintf("CLEANDELOND %p %08x\n", ip, ip->flags);
                        ip->sync_flags &= ~(HAMMER_INODE_DDIRTY |
                                            HAMMER_INODE_ITIMES);
                        ip->flags &= ~HAMMER_INODE_DELONDISK;

                        /*
                         * Root volume count of inodes
                         */
                        if ((ip->flags & HAMMER_INODE_ONDISK) == 0) {
                                hammer_modify_volume_field(trans,
                                                           trans->rootvol,
                                                           vol0_stat_inodes);
                                ++ip->hmp->rootvol->ondisk->vol0_stat_inodes;
                                hammer_modify_volume_done(trans->rootvol);
                                ip->flags |= HAMMER_INODE_ONDISK;
                                if (hammer_debug_inode)
                                        kprintf("NOWONDISK %p\n", ip);
                        }
                }
        }

        /*
         * If the inode has been destroyed, clean out any left-over flags
         * that may have been set by the frontend.
         */
        if (error == 0 && (ip->flags & HAMMER_INODE_DELETED)) { 
                ip->sync_flags &= ~(HAMMER_INODE_DDIRTY |
                                    HAMMER_INODE_ITIMES);
        }
        return(error);
}

/*
 * Update only the itimes fields.  This is done no-historically.  The
 * record is updated in-place on the disk.
 */
static int
hammer_update_itimes(hammer_cursor_t cursor, hammer_inode_t ip)
{
        hammer_transaction_t trans = cursor->trans;
        struct hammer_btree_leaf_elm *leaf;
        int error;

retry:
        error = 0;
        if ((ip->flags & (HAMMER_INODE_ONDISK|HAMMER_INODE_DELONDISK)) ==
            HAMMER_INODE_ONDISK) {
                hammer_normalize_cursor(cursor);
                cursor->key_beg.localization = HAMMER_LOCALIZE_INODE;
                cursor->key_beg.obj_id = ip->obj_id;
                cursor->key_beg.key = 0;
                cursor->key_beg.create_tid = 0;
                cursor->key_beg.delete_tid = 0;
                cursor->key_beg.rec_type = HAMMER_RECTYPE_INODE;
                cursor->key_beg.obj_type = 0;
                cursor->asof = ip->obj_asof;
                cursor->flags &= ~HAMMER_CURSOR_INITMASK;
                cursor->flags |= HAMMER_CURSOR_GET_LEAF | HAMMER_CURSOR_ASOF;
                cursor->flags |= HAMMER_CURSOR_BACKEND;

                error = hammer_btree_lookup(cursor);
                if (error) {
                        kprintf("error %d\n", error);
                        Debugger("hammer_update_itimes1");
                }
                if (error == 0) {
                        /*
                         * Do not generate UNDO records for atime updates.
                         */
                        leaf = cursor->leaf;
                        hammer_modify_node(trans, cursor->node, 
                                           &leaf->atime, sizeof(leaf->atime));
                        leaf->atime = ip->sync_ino_leaf.atime;
                        hammer_modify_node_done(cursor->node);
                        /*rec->ino_mtime = ip->sync_ino_rec.ino_mtime;*/
                        ip->sync_flags &= ~HAMMER_INODE_ITIMES;
                        /* XXX recalculate crc */
                        hammer_cache_node(cursor->node, &ip->cache[0]);
                }
                if (error == EDEADLK) {
                        hammer_done_cursor(cursor);
                        error = hammer_init_cursor(trans, cursor,
                                                   &ip->cache[0], ip);
                        if (error == 0)
                                goto retry;
                }
        }
        return(error);
}

/*
 * Release a reference on an inode, flush as requested.
 *
 * On the last reference we queue the inode to the flusher for its final
 * disposition.
 */
void
hammer_rel_inode(struct hammer_inode *ip, int flush)
{
        hammer_mount_t hmp = ip->hmp;

        /*
         * Handle disposition when dropping the last ref.
         */
        for (;;) {
                if (ip->lock.refs == 1) {
                        /*
                         * Determine whether on-disk action is needed for
                         * the inode's final disposition.
                         */
                        KKASSERT(ip->vp == NULL);
                        hammer_inode_unloadable_check(ip, 0);
                        if (ip->flags & HAMMER_INODE_MODMASK) {
                                if (hmp->rsv_inodes > desiredvnodes) {
                                        hammer_flush_inode(ip,
                                                           HAMMER_FLUSH_SIGNAL);
                                } else {
                                        hammer_flush_inode(ip, 0);
                                }
                        } else if (ip->lock.refs == 1) {
                                hammer_unload_inode(ip);
                                break;
                        }
                } else {
                        if (flush)
                                hammer_flush_inode(ip, 0);

                        /*
                         * The inode still has multiple refs, try to drop
                         * one ref.
                         */
                        KKASSERT(ip->lock.refs >= 1);
                        if (ip->lock.refs > 1) {
                                hammer_unref(&ip->lock);
                                break;
                        }
                }
        }
}

/*
 * Unload and destroy the specified inode.  Must be called with one remaining
 * reference.  The reference is disposed of.
 *
 * This can only be called in the context of the flusher.
 */
static int
hammer_unload_inode(struct hammer_inode *ip)
{
        hammer_mount_t hmp = ip->hmp;

        KASSERT(ip->lock.refs == 1,
                ("hammer_unload_inode: %d refs\n", ip->lock.refs));
        KKASSERT(ip->vp == NULL);
        KKASSERT(ip->flush_state == HAMMER_FST_IDLE);
        KKASSERT(ip->cursor_ip_refs == 0);
        KKASSERT(ip->lock.lockcount == 0);
        KKASSERT((ip->flags & HAMMER_INODE_MODMASK) == 0);

        KKASSERT(RB_EMPTY(&ip->rec_tree));
        KKASSERT(TAILQ_EMPTY(&ip->target_list));

        RB_REMOVE(hammer_ino_rb_tree, &hmp->rb_inos_root, ip);

        hammer_uncache_node(&ip->cache[0]);
        hammer_uncache_node(&ip->cache[1]);
        if (ip->objid_cache)
                hammer_clear_objid(ip);
        --hammer_count_inodes;
        --hmp->count_inodes;
        if (hmp->flags & HAMMER_MOUNT_WAITIMAX)
                hammer_inode_wakereclaims(hmp);

        if (ip->flags & HAMMER_INODE_RECLAIM) {
                --hammer_count_reclaiming;
                --hmp->inode_reclaims;
                ip->flags &= ~HAMMER_INODE_RECLAIM;
        }
        kfree(ip, M_HAMMER);

        return(0);
}

/*
 * Called on mount -u when switching from RW to RO or vise-versa.  Adjust
 * the read-only flag for cached inodes.
 *
 * This routine is called from a RB_SCAN().
 */
int
hammer_reload_inode(hammer_inode_t ip, void *arg __unused)
{
        hammer_mount_t hmp = ip->hmp;

        if (hmp->ronly || hmp->asof != HAMMER_MAX_TID)
                ip->flags |= HAMMER_INODE_RO;
        else
                ip->flags &= ~HAMMER_INODE_RO;
        return(0);
}

/*
 * A transaction has modified an inode, requiring updates as specified by
 * the passed flags.
 *
 * HAMMER_INODE_DDIRTY: Inode data has been updated
 * HAMMER_INODE_XDIRTY: Dirty in-memory records
 * HAMMER_INODE_BUFS:   Dirty buffer cache buffers
 * HAMMER_INODE_DELETED: Inode record/data must be deleted
 * HAMMER_INODE_ITIMES: mtime/atime has been updated
 */
void
hammer_modify_inode(hammer_inode_t ip, int flags)
{
        KKASSERT ((ip->flags & HAMMER_INODE_RO) == 0 ||
                  (flags & (HAMMER_INODE_DDIRTY |
                            HAMMER_INODE_XDIRTY | HAMMER_INODE_BUFS |
                            HAMMER_INODE_DELETED | HAMMER_INODE_ITIMES)) == 0);
        if ((ip->flags & HAMMER_INODE_RSV_INODES) == 0) {
                ip->flags |= HAMMER_INODE_RSV_INODES;
                ++ip->hmp->rsv_inodes;
        }

        ip->flags |= flags;
}

/*
 * Request that an inode be flushed.  This whole mess cannot block and may
 * recurse.  Once requested HAMMER will attempt to actively flush it until
 * the flush can be done.
 *
 * The inode may already be flushing, or may be in a setup state.  We can
 * place the inode in a flushing state if it is currently idle and flag it
 * to reflush if it is currently flushing.
 */
void
hammer_flush_inode(hammer_inode_t ip, int flags)
{
        hammer_record_t depend;
        int r, good;

        /*
         * Trivial 'nothing to flush' case.  If the inode is ina SETUP
         * state we have to put it back into an IDLE state so we can
         * drop the extra ref.
         */
        if ((ip->flags & HAMMER_INODE_MODMASK) == 0) {
                if (ip->flush_state == HAMMER_FST_SETUP) {
                        ip->flush_state = HAMMER_FST_IDLE;
                        hammer_rel_inode(ip, 0);
                }
                return;
        }

        /*
         * Our flush action will depend on the current state.
         */
        switch(ip->flush_state) {
        case HAMMER_FST_IDLE:
                /*
                 * We have no dependancies and can flush immediately.  Some
                 * our children may not be flushable so we have to re-test
                 * with that additional knowledge.
                 */
                hammer_flush_inode_core(ip, flags);
                break;
        case HAMMER_FST_SETUP:
                /*
                 * Recurse upwards through dependancies via target_list
                 * and start their flusher actions going if possible.
                 *
                 * 'good' is our connectivity.  -1 means we have none and
                 * can't flush, 0 means there weren't any dependancies, and
                 * 1 means we have good connectivity.
                 */
                good = 0;
                TAILQ_FOREACH(depend, &ip->target_list, target_entry) {
                        r = hammer_setup_parent_inodes(depend);
                        if (r < 0 && good == 0)
                                good = -1;
                        if (r > 0)
                                good = 1;
                }

                /*
                 * We can continue if good >= 0.  Determine how many records
                 * under our inode can be flushed (and mark them).
                 */
                if (good >= 0) {
                        hammer_flush_inode_core(ip, flags);
                } else {
                        ip->flags |= HAMMER_INODE_REFLUSH;
                        if (flags & HAMMER_FLUSH_SIGNAL) {
                                ip->flags |= HAMMER_INODE_RESIGNAL;
                                hammer_flusher_async(ip->hmp);
                        }
                }
                break;
        default:
                /*
                 * We are already flushing, flag the inode to reflush
                 * if needed after it completes its current flush.
                 */
                if ((ip->flags & HAMMER_INODE_REFLUSH) == 0)
                        ip->flags |= HAMMER_INODE_REFLUSH;
                if (flags & HAMMER_FLUSH_SIGNAL) {
                        ip->flags |= HAMMER_INODE_RESIGNAL;
                        hammer_flusher_async(ip->hmp);
                }
                break;
        }
}

/*
 * We are asked to recurse upwards and convert the record from SETUP
 * to FLUSH if possible.  record->ip is a parent of the caller's inode,
 * and record->target_ip is the caller's inode.
 *
 * Return 1 if the record gives us connectivity
 *
 * Return 0 if the record is not relevant 
 *
 * Return -1 if we can't resolve the dependancy and there is no connectivity.
 */
static int
hammer_setup_parent_inodes(hammer_record_t record)
{
        hammer_mount_t hmp = record->ip->hmp;
        hammer_record_t depend;
        hammer_inode_t ip;
        int r, good;

        KKASSERT(record->flush_state != HAMMER_FST_IDLE);
        ip = record->ip;

        /*
         * If the record is already flushing, is it in our flush group?
         *
         * If it is in our flush group but it is a general record or a 
         * delete-on-disk, it does not improve our connectivity (return 0),
         * and if the target inode is not trying to destroy itself we can't
         * allow the operation yet anyway (the second return -1).
         */
        if (record->flush_state == HAMMER_FST_FLUSH) {
                if (record->flush_group != hmp->flusher_next) {
                        ip->flags |= HAMMER_INODE_REFLUSH;
                        return(-1);
                }
                if (record->type == HAMMER_MEM_RECORD_ADD)
                        return(1);
                /* GENERAL or DEL */
                return(0);
        }

        /*
         * It must be a setup record.  Try to resolve the setup dependancies
         * by recursing upwards so we can place ip on the flush list.
         */
        KKASSERT(record->flush_state == HAMMER_FST_SETUP);

        good = 0;
        TAILQ_FOREACH(depend, &ip->target_list, target_entry) {
                r = hammer_setup_parent_inodes(depend);
                if (r < 0 && good == 0)
                        good = -1;
                if (r > 0)
                        good = 1;
        }

        /*
         * We can't flush ip because it has no connectivity (XXX also check
         * nlinks for pre-existing connectivity!).  Flag it so any resolution
         * recurses back down.
         */
        if (good < 0) {
                ip->flags |= HAMMER_INODE_REFLUSH;
                return(good);
        }

        /*
         * We are go, place the parent inode in a flushing state so we can
         * place its record in a flushing state.  Note that the parent
         * may already be flushing.  The record must be in the same flush
         * group as the parent.
         */
        if (ip->flush_state != HAMMER_FST_FLUSH)
                hammer_flush_inode_core(ip, HAMMER_FLUSH_RECURSION);
        KKASSERT(ip->flush_state == HAMMER_FST_FLUSH);
        KKASSERT(record->flush_state == HAMMER_FST_SETUP);

#if 0
        if (record->type == HAMMER_MEM_RECORD_DEL &&
            (record->target_ip->flags & (HAMMER_INODE_DELETED|HAMMER_INODE_DELONDISK)) == 0) {
                /*
                 * Regardless of flushing state we cannot sync this path if the
                 * record represents a delete-on-disk but the target inode
                 * is not ready to sync its own deletion.
                 *
                 * XXX need to count effective nlinks to determine whether
                 * the flush is ok, otherwise removing a hardlink will
                 * just leave the DEL record to rot.
                 */
                record->target_ip->flags |= HAMMER_INODE_REFLUSH;
                return(-1);
        } else
#endif
        if (ip->flush_group == ip->hmp->flusher_next) {
                /*
                 * This is the record we wanted to synchronize.
                 */
                record->flush_state = HAMMER_FST_FLUSH;
                record->flush_group = ip->flush_group;
                hammer_ref(&record->lock);
                if (record->type == HAMMER_MEM_RECORD_ADD)
                        return(1);

                /*
                 * A general or delete-on-disk record does not contribute
                 * to our visibility.  We can still flush it, however.
                 */
                return(0);
        } else {
                /*
                 * We couldn't resolve the dependancies, request that the
                 * inode be flushed when the dependancies can be resolved.
                 */
                ip->flags |= HAMMER_INODE_REFLUSH;
                return(-1);
        }
}

/*
 * This is the core routine placing an inode into the FST_FLUSH state.
 */
static void
hammer_flush_inode_core(hammer_inode_t ip, int flags)
{
        int go_count;

        /*
         * Set flush state and prevent the flusher from cycling into
         * the next flush group.  Do not place the ip on the list yet.
         * Inodes not in the idle state get an extra reference.
         */
        KKASSERT(ip->flush_state != HAMMER_FST_FLUSH);
        if (ip->flush_state == HAMMER_FST_IDLE)
                hammer_ref(&ip->lock);
        ip->flush_state = HAMMER_FST_FLUSH;
        ip->flush_group = ip->hmp->flusher_next;
        ++ip->hmp->flusher_lock;

        /*
         * We need to be able to vfsync/truncate from the backend.
         */
        KKASSERT((ip->flags & HAMMER_INODE_VHELD) == 0);
        if (ip->vp && (ip->vp->v_flag & VINACTIVE) == 0) {
                ip->flags |= HAMMER_INODE_VHELD;
                vref(ip->vp);
        }

        /*
         * Figure out how many in-memory records we can actually flush
         * (not including inode meta-data, buffers, etc).
         */
        if (flags & HAMMER_FLUSH_RECURSION) {
                go_count = 1;
        } else {
                go_count = RB_SCAN(hammer_rec_rb_tree, &ip->rec_tree, NULL,
                                   hammer_setup_child_callback, NULL);
        }

        /*
         * This is a more involved test that includes go_count.  If we
         * can't flush, flag the inode and return.  If go_count is 0 we
         * were are unable to flush any records in our rec_tree and
         * must ignore the XDIRTY flag.
         */
        if (go_count == 0) {
                if ((ip->flags & HAMMER_INODE_MODMASK_NOXDIRTY) == 0) {
                        ip->flags |= HAMMER_INODE_REFLUSH;
                        ip->flush_state = HAMMER_FST_SETUP;
                        if (ip->flags & HAMMER_INODE_VHELD) {
                                ip->flags &= ~HAMMER_INODE_VHELD;
                                vrele(ip->vp);
                        }
                        if (flags & HAMMER_FLUSH_SIGNAL) {
                                ip->flags |= HAMMER_INODE_RESIGNAL;
                                hammer_flusher_async(ip->hmp);
                        }
                        if (--ip->hmp->flusher_lock == 0)
                                wakeup(&ip->hmp->flusher_lock);
                        return;
                }
        }

        /*
         * Snapshot the state of the inode for the backend flusher.
         *
         * The truncation must be retained in the frontend until after
         * we've actually performed the record deletion.
         *
         * NOTE: The DELETING flag is a mod flag, but it is also sticky,
         * and stays in ip->flags.  Once set, it stays set until the
         * inode is destroyed.
         */
        ip->sync_flags = (ip->flags & HAMMER_INODE_MODMASK);
        ip->sync_trunc_off = ip->trunc_off;
        ip->sync_ino_leaf = ip->ino_leaf;
        ip->sync_ino_data = ip->ino_data;
        ip->trunc_off = 0x7FFFFFFFFFFFFFFFLL;
        ip->flags &= ~HAMMER_INODE_MODMASK;
#ifdef DEBUG_TRUNCATE
        if ((ip->sync_flags & HAMMER_INODE_TRUNCATED) && ip == HammerTruncIp)
                kprintf("truncateS %016llx\n", ip->sync_trunc_off);
#endif

        /*
         * The flusher list inherits our inode and reference.
         */
        TAILQ_INSERT_TAIL(&ip->hmp->flush_list, ip, flush_entry);
        if (--ip->hmp->flusher_lock == 0)
                wakeup(&ip->hmp->flusher_lock);

        if (flags & HAMMER_FLUSH_SIGNAL) {
                hammer_flusher_async(ip->hmp);
        }
}

/*
 * Callback for scan of ip->rec_tree.  Try to include each record in our
 * flush.  ip->flush_group has been set but the inode has not yet been
 * moved into a flushing state.
 *
 * If we get stuck on a record we have to set HAMMER_INODE_REFLUSH on
 * both inodes.
 *
 * We return 1 for any record placed or found in FST_FLUSH, which prevents
 * the caller from shortcutting the flush.
 */
static int
hammer_setup_child_callback(hammer_record_t rec, void *data)
{
        hammer_inode_t target_ip;
        hammer_inode_t ip;
        int r;

        /*
         * If the record has been deleted by the backend (it's being held
         * by the frontend in a race), just ignore it.
         */
        if (rec->flags & HAMMER_RECF_DELETED_BE)
                return(0);

        /*
         * If the record is in an idle state it has no dependancies and
         * can be flushed.
         */
        ip = rec->ip;
        r = 0;

        switch(rec->flush_state) {
        case HAMMER_FST_IDLE:
                /*
                 * Record has no setup dependancy, we can flush it.
                 */
                KKASSERT(rec->target_ip == NULL);
                rec->flush_state = HAMMER_FST_FLUSH;
                rec->flush_group = ip->flush_group;
                hammer_ref(&rec->lock);
                r = 1;
                break;
        case HAMMER_FST_SETUP:
                /*
                 * Record has a setup dependancy.  Try to include the
                 * target ip in the flush. 
                 *
                 * We have to be careful here, if we do not do the right
                 * thing we can lose track of dirty inodes and the system
                 * will lockup trying to allocate buffers.
                 */
                target_ip = rec->target_ip;
                KKASSERT(target_ip != NULL);
                KKASSERT(target_ip->flush_state != HAMMER_FST_IDLE);
                if (target_ip->flush_state == HAMMER_FST_FLUSH) {
                        /*
                         * If the target IP is already flushing in our group
                         * we are golden, otherwise make sure the target
                         * reflushes.
                         */
                        if (target_ip->flush_group == ip->flush_group) {
                                rec->flush_state = HAMMER_FST_FLUSH;
                                rec->flush_group = ip->flush_group;
                                hammer_ref(&rec->lock);
                                r = 1;
                        } else {
                                target_ip->flags |= HAMMER_INODE_REFLUSH;
                        }
                } else if (rec->type == HAMMER_MEM_RECORD_ADD) {
                        /*
                         * If the target IP is not flushing we can force
                         * it to flush, even if it is unable to write out
                         * any of its own records we have at least one in
                         * hand that we CAN deal with.
                         */
                        rec->flush_state = HAMMER_FST_FLUSH;
                        rec->flush_group = ip->flush_group;
                        hammer_ref(&rec->lock);
                        hammer_flush_inode_core(target_ip,
                                                HAMMER_FLUSH_RECURSION);
                        r = 1;
                } else {
                        /*
                         * General or delete-on-disk record.
                         *
                         * XXX this needs help.  If a delete-on-disk we could
                         * disconnect the target.  If the target has its own
                         * dependancies they really need to be flushed.
                         *
                         * XXX
                         */
                        rec->flush_state = HAMMER_FST_FLUSH;
                        rec->flush_group = ip->flush_group;
                        hammer_ref(&rec->lock);
                        hammer_flush_inode_core(target_ip,
                                                HAMMER_FLUSH_RECURSION);
                        r = 1;
                }
                break;
        case HAMMER_FST_FLUSH:
                /* 
                 * Record already associated with a flush group.  It had
                 * better be ours.
                 */
                KKASSERT(rec->flush_group == ip->flush_group);
                r = 1;
                break;
        }
        return(r);
}

/*
 * Wait for a previously queued flush to complete
 */
void
hammer_wait_inode(hammer_inode_t ip)
{
        while (ip->flush_state != HAMMER_FST_IDLE) {
                if (ip->flush_state == HAMMER_FST_SETUP) {
                        hammer_flush_inode(ip, HAMMER_FLUSH_SIGNAL);
                } else {
                        ip->flags |= HAMMER_INODE_FLUSHW;
                        tsleep(&ip->flags, 0, "hmrwin", 0);
                }
        }
}

/*
 * Called by the backend code when a flush has been completed.
 * The inode has already been removed from the flush list.
 *
 * A pipelined flush can occur, in which case we must re-enter the
 * inode on the list and re-copy its fields.
 */
void
hammer_flush_inode_done(hammer_inode_t ip)
{
        int dorel = 0;

        KKASSERT(ip->flush_state == HAMMER_FST_FLUSH);

        /*
         * Merge left-over flags back into the frontend and fix the state.
         */
        ip->flags |= ip->sync_flags;

        /*
         * The backend may have adjusted nlinks, so if the adjusted nlinks
         * does not match the fronttend set the frontend's RDIRTY flag again.
         */
        if (ip->ino_data.nlinks != ip->sync_ino_data.nlinks)
                ip->flags |= HAMMER_INODE_DDIRTY;

        /*
         * Fix up the dirty buffer status.  IO completions will also
         * try to clean up rsv_databufs.
         */
        if (ip->vp && RB_ROOT(&ip->vp->v_rbdirty_tree)) {
                ip->flags |= HAMMER_INODE_BUFS;
        } else {
                ip->hmp->rsv_databufs -= ip->rsv_databufs;
                ip->rsv_databufs = 0;
        }

        /*
         * Re-set the XDIRTY flag if some of the inode's in-memory records
         * could not be flushed.
         */
        KKASSERT((RB_EMPTY(&ip->rec_tree) &&
                  (ip->flags & HAMMER_INODE_XDIRTY) == 0) ||
                 (!RB_EMPTY(&ip->rec_tree) &&
                  (ip->flags & HAMMER_INODE_XDIRTY) != 0));

        /*
         * Do not lose track of inodes which no longer have vnode
         * assocations, otherwise they may never get flushed again.
         */
        if ((ip->flags & HAMMER_INODE_MODMASK) && ip->vp == NULL)
                ip->flags |= HAMMER_INODE_REFLUSH;

        /*
         * Adjust flush_state.  The target state (idle or setup) shouldn't
         * be terribly important since we will reflush if we really need
         * to do anything. XXX
         */
        if (TAILQ_EMPTY(&ip->target_list) && RB_EMPTY(&ip->rec_tree)) {
                ip->flush_state = HAMMER_FST_IDLE;
                dorel = 1;
        } else {
                ip->flush_state = HAMMER_FST_SETUP;
        }

        /*
         * Clean up the vnode ref
         */
        if (ip->flags & HAMMER_INODE_VHELD) {
                ip->flags &= ~HAMMER_INODE_VHELD;
                vrele(ip->vp);
        }

        /*
         * If the frontend made more changes and requested another flush,
         * then try to get it running.
         */
        if (ip->flags & HAMMER_INODE_REFLUSH) {
                ip->flags &= ~HAMMER_INODE_REFLUSH;
                if (ip->flags & HAMMER_INODE_RESIGNAL) {
                        ip->flags &= ~HAMMER_INODE_RESIGNAL;
                        hammer_flush_inode(ip, HAMMER_FLUSH_SIGNAL);
                } else {
                        hammer_flush_inode(ip, 0);
                }
        }

        /*
         * If the inode is now clean drop the space reservation.
         */
        if ((ip->flags & HAMMER_INODE_MODMASK) == 0 &&
            (ip->flags & HAMMER_INODE_RSV_INODES)) {
                ip->flags &= ~HAMMER_INODE_RSV_INODES;
                --ip->hmp->rsv_inodes;
        }

        /*
         * Finally, if the frontend is waiting for a flush to complete,
         * wake it up.
         */
        if (ip->flush_state != HAMMER_FST_FLUSH) {
                if (ip->flags & HAMMER_INODE_FLUSHW) {
                        ip->flags &= ~HAMMER_INODE_FLUSHW;
                        wakeup(&ip->flags);
                }
        }
        if (dorel)
                hammer_rel_inode(ip, 0);
}

/*
 * Called from hammer_sync_inode() to synchronize in-memory records
 * to the media.
 */
static int
hammer_sync_record_callback(hammer_record_t record, void *data)
{
        hammer_cursor_t cursor = data;
        hammer_transaction_t trans = cursor->trans;
        int error;

        /*
         * Skip records that do not belong to the current flush.
         */
        ++hammer_stats_record_iterations;
        if (record->flush_state != HAMMER_FST_FLUSH)
                return(0);

#if 1
        if (record->flush_group != record->ip->flush_group) {
                kprintf("sync_record %p ip %p bad flush group %d %d\n", record, record->ip, record->flush_group ,record->ip->flush_group);
                Debugger("blah2");
                return(0);
        }
#endif
        KKASSERT(record->flush_group == record->ip->flush_group);

        /*
         * Interlock the record using the BE flag.  Once BE is set the
         * frontend cannot change the state of FE.
         *
         * NOTE: If FE is set prior to us setting BE we still sync the
         * record out, but the flush completion code converts it to 
         * a delete-on-disk record instead of destroying it.
         */
        KKASSERT((record->flags & HAMMER_RECF_INTERLOCK_BE) == 0);
        record->flags |= HAMMER_RECF_INTERLOCK_BE;

        /*
         * The backend may have already disposed of the record.
         */
        if (record->flags & HAMMER_RECF_DELETED_BE) {
                error = 0;
                goto done;
        }

        /*
         * If the whole inode is being deleting all on-disk records will
         * be deleted very soon, we can't sync any new records to disk
         * because they will be deleted in the same transaction they were
         * created in (delete_tid == create_tid), which will assert.
         *
         * XXX There may be a case with RECORD_ADD with DELETED_FE set
         * that we currently panic on.
         */
        if (record->ip->sync_flags & HAMMER_INODE_DELETING) {
                switch(record->type) {
                case HAMMER_MEM_RECORD_DATA:
                        /*
                         * We don't have to do anything, if the record was
                         * committed the space will have been accounted for
                         * in the blockmap.
                         */
                        /* fall through */
                case HAMMER_MEM_RECORD_GENERAL:
                        record->flags |= HAMMER_RECF_DELETED_FE;
                        record->flags |= HAMMER_RECF_DELETED_BE;
                        error = 0;
                        goto done;
                case HAMMER_MEM_RECORD_ADD:
                        panic("hammer_sync_record_callback: illegal add "
                              "during inode deletion record %p", record);
                        break; /* NOT REACHED */
                case HAMMER_MEM_RECORD_INODE:
                        panic("hammer_sync_record_callback: attempt to "
                              "sync inode record %p?", record);
                        break; /* NOT REACHED */
                case HAMMER_MEM_RECORD_DEL:
                        /* 
                         * Follow through and issue the on-disk deletion
                         */
                        break;
                }
        }

        /*
         * If DELETED_FE is set we may have already sent dependant pieces
         * to the disk and we must flush the record as if it hadn't been
         * deleted.  This creates a bit of a mess because we have to
         * have ip_sync_record convert the record to MEM_RECORD_DEL before
         * it inserts the B-Tree record.  Otherwise the media sync might
         * be visible to the frontend.
         */
        if (record->flags & HAMMER_RECF_DELETED_FE) {
                if (record->type == HAMMER_MEM_RECORD_ADD) {
                        record->flags |= HAMMER_RECF_CONVERT_DELETE;
                } else {
                        KKASSERT(record->type != HAMMER_MEM_RECORD_DEL);
                        return(0);
                }
        }

        /*
         * Assign the create_tid for new records.  Deletions already
         * have the record's entire key properly set up.
         */
        if (record->type != HAMMER_MEM_RECORD_DEL)
                record->leaf.base.create_tid = trans->tid;
        for (;;) {
                error = hammer_ip_sync_record_cursor(cursor, record);
                if (error != EDEADLK)
                        break;
                hammer_done_cursor(cursor);
                error = hammer_init_cursor(trans, cursor, &record->ip->cache[0],
                                           record->ip);
                if (error)
                        break;
        }
        record->flags &= ~HAMMER_RECF_CONVERT_DELETE;

        if (error) {
                error = -error;
                if (error != -ENOSPC) {
                        kprintf("hammer_sync_record_callback: sync failed rec "
                                "%p, error %d\n", record, error);
                        Debugger("sync failed rec");
                }
        }
done:
        hammer_flush_record_done(record, error);
        return(error);
}

/*
 * XXX error handling
 */
int
hammer_sync_inode(hammer_inode_t ip)
{
        struct hammer_transaction trans;
        struct hammer_cursor cursor;
        hammer_record_t depend;
        hammer_record_t next;
        int error, tmp_error;
        u_int64_t nlinks;

        if ((ip->sync_flags & HAMMER_INODE_MODMASK) == 0)
                return(0);

        hammer_start_transaction_fls(&trans, ip->hmp);
        error = hammer_init_cursor(&trans, &cursor, &ip->cache[0], ip);
        if (error)
                goto done;

        /*
         * Any directory records referencing this inode which are not in
         * our current flush group must adjust our nlink count for the
         * purposes of synchronization to disk.
         *
         * Records which are in our flush group can be unlinked from our
         * inode now, potentially allowing the inode to be physically
         * deleted.
         */
        nlinks = ip->ino_data.nlinks;
        next = TAILQ_FIRST(&ip->target_list);
        while ((depend = next) != NULL) {
                next = TAILQ_NEXT(depend, target_entry);
                if (depend->flush_state == HAMMER_FST_FLUSH &&
                    depend->flush_group == ip->hmp->flusher_act) {
                        /*
                         * If this is an ADD that was deleted by the frontend
                         * the frontend nlinks count will have already been
                         * decremented, but the backend is going to sync its
                         * directory entry and must account for it.  The
                         * record will be converted to a delete-on-disk when
                         * it gets synced.
                         *
                         * If the ADD was not deleted by the frontend we
                         * can remove the dependancy from our target_list.
                         */
                        if (depend->flags & HAMMER_RECF_DELETED_FE) {
                                ++nlinks;
                        } else {
                                TAILQ_REMOVE(&ip->target_list, depend,
                                             target_entry);
                                depend->target_ip = NULL;
                        }
                } else if ((depend->flags & HAMMER_RECF_DELETED_FE) == 0) {
                        /*
                         * Not part of our flush group
                         */
                        KKASSERT((depend->flags & HAMMER_RECF_DELETED_BE) == 0);
                        switch(depend->type) {
                        case HAMMER_MEM_RECORD_ADD:
                                --nlinks;
                                break;
                        case HAMMER_MEM_RECORD_DEL:
                                ++nlinks;
                                break;
                        default:
                                break;
                        }
                }
        }

        /*
         * Set dirty if we had to modify the link count.
         */
        if (ip->sync_ino_data.nlinks != nlinks) {
                KKASSERT((int64_t)nlinks >= 0);
                ip->sync_ino_data.nlinks = nlinks;
                ip->sync_flags |= HAMMER_INODE_DDIRTY;
        }

#if 0
        /*
         * XXX DISABLED FOR NOW.  With the new reservation support
         * we cannot resync pending data without confusing the hell
         * out of the in-memory record tree.
         */
        /*
         * Queue up as many dirty buffers as we can then set a flag to
         * cause any further BIOs to go to the alternative queue.
         */
        if (ip->flags & HAMMER_INODE_VHELD)
                error = vfsync(ip->vp, MNT_NOWAIT, 1, NULL, NULL);
        ip->flags |= HAMMER_INODE_WRITE_ALT;

        /*
         * The buffer cache may contain dirty buffers beyond the inode
         * state we copied from the frontend to the backend.  Because
         * we are syncing our buffer cache on the backend, resync
         * the truncation point and the file size so we don't wipe out
         * any data.
         *
         * Syncing the buffer cache on the frontend has serious problems
         * because it prevents us from passively queueing dirty inodes
         * to the backend (the BIO's could stall indefinitely).
         */
        if (ip->flags & HAMMER_INODE_TRUNCATED) {
                ip->sync_trunc_off = ip->trunc_off;
                ip->sync_flags |= HAMMER_INODE_TRUNCATED;
        }
        if (ip->sync_ino_data.size != ip->ino_data.size) {
                ip->sync_ino_data.size = ip->ino_data.size;
                ip->sync_flags |= HAMMER_INODE_DDIRTY;
        }
#endif

        /*
         * If there is a trunction queued destroy any data past the (aligned)
         * truncation point.  Userland will have dealt with the buffer
         * containing the truncation point for us.
         *
         * We don't flush pending frontend data buffers until after we've
         * dealth with the truncation.
         *
         * Don't bother if the inode is or has been deleted.
         */
        if (ip->sync_flags & HAMMER_INODE_TRUNCATED) {
                /*
                 * Interlock trunc_off.  The VOP front-end may continue to
                 * make adjustments to it while we are blocked.
                 */
                off_t trunc_off;
                off_t aligned_trunc_off;

                trunc_off = ip->sync_trunc_off;
                aligned_trunc_off = (trunc_off + HAMMER_BUFMASK) &
                                    ~HAMMER_BUFMASK64;

                /*
                 * Delete any whole blocks on-media.  The front-end has
                 * already cleaned out any partial block and made it
                 * pending.  The front-end may have updated trunc_off
                 * while we were blocked so we only use sync_trunc_off.
                 */
                error = hammer_ip_delete_range(&cursor, ip,
                                                aligned_trunc_off,
                                                0x7FFFFFFFFFFFFFFFLL, 1);
                if (error)
                        Debugger("hammer_ip_delete_range errored");

                /*
                 * Clear the truncation flag on the backend after we have
                 * complete the deletions.  Backend data is now good again
                 * (including new records we are about to sync, below).
                 */
                ip->sync_flags &= ~HAMMER_INODE_TRUNCATED;
                ip->sync_trunc_off = 0x7FFFFFFFFFFFFFFFLL;
        } else {
                error = 0;
        }

        /*
         * Now sync related records.  These will typically be directory
         * entries or delete-on-disk records.
         *
         * Not all records will be flushed, but clear XDIRTY anyway.  We
         * will set it again in the frontend hammer_flush_inode_done() 
         * if records remain.
         */
        if (error == 0) {
                tmp_error = RB_SCAN(hammer_rec_rb_tree, &ip->rec_tree, NULL,
                                    hammer_sync_record_callback, &cursor);
                if (tmp_error < 0)
                        tmp_error = -error;
                if (tmp_error)
                        error = tmp_error;
        }

        /*
         * If we are deleting the inode the frontend had better not have
         * any active references on elements making up the inode.
         */
        if (error == 0 && ip->sync_ino_data.nlinks == 0 &&
                RB_EMPTY(&ip->rec_tree)  &&
            (ip->sync_flags & HAMMER_INODE_DELETING) &&
            (ip->flags & HAMMER_INODE_DELETED) == 0) {
                int count1 = 0;

                ip->flags |= HAMMER_INODE_DELETED;
                error = hammer_ip_delete_range_all(&cursor, ip, &count1);
                if (error == 0) {
                        ip->sync_flags &= ~HAMMER_INODE_DELETING;
                        ip->sync_flags &= ~HAMMER_INODE_TRUNCATED;
                        KKASSERT(RB_EMPTY(&ip->rec_tree));

                        /*
                         * Set delete_tid in both the frontend and backend
                         * copy of the inode record.  The DELETED flag handles
                         * this, do not set RDIRTY.
                         */
                        ip->ino_leaf.base.delete_tid = trans.tid;
                        ip->sync_ino_leaf.base.delete_tid = trans.tid;

                        /*
                         * Adjust the inode count in the volume header
                         */
                        if (ip->flags & HAMMER_INODE_ONDISK) {
                                hammer_modify_volume_field(&trans,
                                                           trans.rootvol,
                                                           vol0_stat_inodes);
                                --ip->hmp->rootvol->ondisk->vol0_stat_inodes;
                                hammer_modify_volume_done(trans.rootvol);
                        }
                } else {
                        ip->flags &= ~HAMMER_INODE_DELETED;
                        Debugger("hammer_ip_delete_range_all errored");
                }
        }

        ip->sync_flags &= ~HAMMER_INODE_BUFS;

        if (error)
                Debugger("RB_SCAN errored");

        /*
         * Now update the inode's on-disk inode-data and/or on-disk record.
         * DELETED and ONDISK are managed only in ip->flags.
         */
        switch(ip->flags & (HAMMER_INODE_DELETED | HAMMER_INODE_ONDISK)) {
        case HAMMER_INODE_DELETED|HAMMER_INODE_ONDISK:
                /*
                 * If deleted and on-disk, don't set any additional flags.
                 * the delete flag takes care of things.
                 *
                 * Clear flags which may have been set by the frontend.
                 */
                ip->sync_flags &= ~(HAMMER_INODE_DDIRTY|
                                    HAMMER_INODE_XDIRTY|HAMMER_INODE_ITIMES|
                                    HAMMER_INODE_DELETING);
                break;
        case HAMMER_INODE_DELETED:
                /*
                 * Take care of the case where a deleted inode was never
                 * flushed to the disk in the first place.
                 *
                 * Clear flags which may have been set by the frontend.
                 */
                ip->sync_flags &= ~(HAMMER_INODE_DDIRTY|
                                    HAMMER_INODE_XDIRTY|HAMMER_INODE_ITIMES|
                                    HAMMER_INODE_DELETING);
                while (RB_ROOT(&ip->rec_tree)) {
                        hammer_record_t record = RB_ROOT(&ip->rec_tree);
                        hammer_ref(&record->lock);
                        KKASSERT(record->lock.refs == 1);
                        record->flags |= HAMMER_RECF_DELETED_FE;
                        record->flags |= HAMMER_RECF_DELETED_BE;
                        hammer_rel_mem_record(record);
                }
                break;
        case HAMMER_INODE_ONDISK:
                /*
                 * If already on-disk, do not set any additional flags.
                 */
                break;
        default:
                /*
                 * If not on-disk and not deleted, set both dirty flags
                 * to force an initial record to be written.  Also set
                 * the create_tid for the inode.
                 *
                 * Set create_tid in both the frontend and backend
                 * copy of the inode record.
                 */
                ip->ino_leaf.base.create_tid = trans.tid;
                ip->sync_ino_leaf.base.create_tid = trans.tid;
                ip->sync_flags |= HAMMER_INODE_DDIRTY;
                break;
        }

        /*
         * If RDIRTY or DDIRTY is set, write out a new record.  If the inode
         * is already on-disk the old record is marked as deleted.
         *
         * If DELETED is set hammer_update_inode() will delete the existing
         * record without writing out a new one.
         *
         * If *ONLY* the ITIMES flag is set we can update the record in-place.
         */
        if (ip->flags & HAMMER_INODE_DELETED) {
                error = hammer_update_inode(&cursor, ip);
        } else 
        if ((ip->sync_flags & (HAMMER_INODE_DDIRTY | HAMMER_INODE_ITIMES)) ==
            HAMMER_INODE_ITIMES) {
                error = hammer_update_itimes(&cursor, ip);
        } else
        if (ip->sync_flags & (HAMMER_INODE_DDIRTY | HAMMER_INODE_ITIMES)) {
                error = hammer_update_inode(&cursor, ip);
        }
        if (error)
                Debugger("hammer_update_itimes/inode errored");
done:
        /*
         * Save the TID we used to sync the inode with to make sure we
         * do not improperly reuse it.
         */
        hammer_done_cursor(&cursor);
        hammer_done_transaction(&trans);
        return(error);
}

/*
 * This routine is called when the OS is no longer actively referencing
 * the inode (but might still be keeping it cached), or when releasing
 * the last reference to an inode.
 *
 * At this point if the inode's nlinks count is zero we want to destroy
 * it, which may mean destroying it on-media too.
 */
void
hammer_inode_unloadable_check(hammer_inode_t ip, int getvp)
{
        struct vnode *vp;

        /*
         * Set the DELETING flag when the link count drops to 0 and the
         * OS no longer has any opens on the inode.
         *
         * The backend will clear DELETING (a mod flag) and set DELETED
         * (a state flag) when it is actually able to perform the
         * operation.
         */
        if (ip->ino_data.nlinks == 0 &&
            (ip->flags & (HAMMER_INODE_DELETING|HAMMER_INODE_DELETED)) == 0) {
                ip->flags |= HAMMER_INODE_DELETING;
                ip->flags |= HAMMER_INODE_TRUNCATED;
                ip->trunc_off = 0;
                vp = NULL;
                if (getvp) {
                        if (hammer_get_vnode(ip, &vp) != 0)
                                return;
                }

                /*
                 * Final cleanup
                 */
                if (ip->vp) {
                        vtruncbuf(ip->vp, 0, HAMMER_BUFSIZE);
                        vnode_pager_setsize(ip->vp, 0);
                }
                if (getvp) {
                        vput(vp);
                }
        }
}

/*
 * Re-test an inode when a dependancy had gone away to see if we
 * can chain flush it.
 */
void
hammer_test_inode(hammer_inode_t ip)
{
        if (ip->flags & HAMMER_INODE_REFLUSH) {
                ip->flags &= ~HAMMER_INODE_REFLUSH;
                hammer_ref(&ip->lock);
                if (ip->flags & HAMMER_INODE_RESIGNAL) {
                        ip->flags &= ~HAMMER_INODE_RESIGNAL;
                        hammer_flush_inode(ip, HAMMER_FLUSH_SIGNAL);
                } else {
                        hammer_flush_inode(ip, 0);
                }
                hammer_rel_inode(ip, 0);
        }
}

/*
 * When a HAMMER inode is reclaimed it may have to be queued to the backend
 * for its final sync to disk.  Programs like blogbench can cause the backlog
 * to grow indefinitely.  Put a cap on the number of inodes we allow to be
 * in this state by giving the flusher time to drain.
 */
void
hammer_inode_waitreclaims(hammer_mount_t hmp)
{
        int count;
        int delay;
        int minpt;
        int maxpt;

        while (hmp->inode_reclaims > HAMMER_RECLAIM_MIN) {
                count = hmp->count_inodes;
                minpt = count * HAMMER_RECLAIM_SLOPCT / 100;
                maxpt = count * HAMMER_RECLAIM_MAXPCT / 100;

                if (hmp->inode_reclaims < minpt)
                        break;
                if (hmp->inode_reclaims < maxpt) {
                        delay = (hmp->inode_reclaims - minpt) * hz /
                                (maxpt - minpt);
                        if (delay == 0)
                                delay = 1;
                        hammer_flusher_async(hmp);
                        tsleep(&count, 0, "hmitik", delay);
                        break;
                }
                hmp->flags |= HAMMER_MOUNT_WAITIMAX;
                hammer_flusher_async(hmp);
                tsleep(&hmp->inode_reclaims, 0, "hmimax", hz / 10);
        }
}

void
hammer_inode_wakereclaims(hammer_mount_t hmp)
{
        int maxpt;

        if ((hmp->flags & HAMMER_MOUNT_WAITIMAX) == 0)
                return;
        maxpt = hmp->count_inodes * HAMMER_RECLAIM_MAXPCT / 100;
        if (hmp->inode_reclaims <= HAMMER_RECLAIM_MIN ||
            hmp->inode_reclaims < maxpt) {
                hmp->flags &= ~HAMMER_MOUNT_WAITIMAX;
                wakeup(&hmp->inode_reclaims);
        }
}