1 /*
   2  * CDDL HEADER START
   3  *
   4  * The contents of this file are subject to the terms of the
   5  * Common Development and Distribution License (the "License").
   6  * You may not use this file except in compliance with the License.
   7  *
   8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
   9  * or http://www.opensolaris.org/os/licensing.
  10  * See the License for the specific language governing permissions
  11  * and limitations under the License.
  12  *
  13  * When distributing Covered Code, include this CDDL HEADER in each
  14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  15  * If applicable, add the following below this CDDL HEADER, with the
  16  * fields enclosed by brackets "[]" replaced with your own identifying
  17  * information: Portions Copyright [yyyy] [name of copyright owner]
  18  *
  19  * CDDL HEADER END
  20  */
  21 /*
  22  * Copyright (c) 2005, 2010, Oracle and/or its affiliates. All rights reserved.
  23  * Copyright 2011 Nexenta Systems, Inc.  All rights reserved.
  24  * Copyright (c) 2013 by Delphix. All rights reserved.
  25  * Copyright (c) 2013 by Saso Kiselkov. All rights reserved.
  26  * Copyright (c) 2013, Joyent, Inc. All rights reserved.
  27  */
  28 
  29 #include <sys/zfs_context.h>
  30 #include <sys/dmu.h>
  31 #include <sys/dmu_send.h>
  32 #include <sys/dmu_impl.h>
  33 #include <sys/dbuf.h>
  34 #include <sys/dmu_objset.h>
  35 #include <sys/dsl_dataset.h>
  36 #include <sys/dsl_dir.h>
  37 #include <sys/dmu_tx.h>
  38 #include <sys/spa.h>
  39 #include <sys/zio.h>
  40 #include <sys/dmu_zfetch.h>
  41 #include <sys/sa.h>
  42 #include <sys/sa_impl.h>
  43 
  44 /*
  45  * Number of times that zfs_free_range() took the slow path while doing
  46  * a zfs receive.  A nonzero value indicates a potential performance problem.
  47  */
  48 uint64_t zfs_free_range_recv_miss;
  49 
  50 static void dbuf_destroy(dmu_buf_impl_t *db);
  51 static boolean_t dbuf_undirty(dmu_buf_impl_t *db, dmu_tx_t *tx);
  52 static void dbuf_write(dbuf_dirty_record_t *dr, arc_buf_t *data, dmu_tx_t *tx);
  53 
  54 /*
  55  * Global data structures and functions for the dbuf cache.
  56  */
  57 static kmem_cache_t *dbuf_cache;
  58 
  59 /* ARGSUSED */
  60 static int
  61 dbuf_cons(void *vdb, void *unused, int kmflag)
  62 {
  63         dmu_buf_impl_t *db = vdb;
  64         bzero(db, sizeof (dmu_buf_impl_t));
  65 
  66         mutex_init(&db->db_mtx, NULL, MUTEX_DEFAULT, NULL);
  67         cv_init(&db->db_changed, NULL, CV_DEFAULT, NULL);
  68         refcount_create(&db->db_holds);
  69         return (0);
  70 }
  71 
  72 /* ARGSUSED */
  73 static void
  74 dbuf_dest(void *vdb, void *unused)
  75 {
  76         dmu_buf_impl_t *db = vdb;
  77         mutex_destroy(&db->db_mtx);
  78         cv_destroy(&db->db_changed);
  79         refcount_destroy(&db->db_holds);
  80 }
  81 
  82 /*
  83  * dbuf hash table routines
  84  */
  85 static dbuf_hash_table_t dbuf_hash_table;
  86 
  87 static uint64_t dbuf_hash_count;
  88 
  89 static uint64_t
  90 dbuf_hash(void *os, uint64_t obj, uint8_t lvl, uint64_t blkid)
  91 {
  92         uintptr_t osv = (uintptr_t)os;
  93         uint64_t crc = -1ULL;
  94 
  95         ASSERT(zfs_crc64_table[128] == ZFS_CRC64_POLY);
  96         crc = (crc >> 8) ^ zfs_crc64_table[(crc ^ (lvl)) & 0xFF];
  97         crc = (crc >> 8) ^ zfs_crc64_table[(crc ^ (osv >> 6)) & 0xFF];
  98         crc = (crc >> 8) ^ zfs_crc64_table[(crc ^ (obj >> 0)) & 0xFF];
  99         crc = (crc >> 8) ^ zfs_crc64_table[(crc ^ (obj >> 8)) & 0xFF];
 100         crc = (crc >> 8) ^ zfs_crc64_table[(crc ^ (blkid >> 0)) & 0xFF];
 101         crc = (crc >> 8) ^ zfs_crc64_table[(crc ^ (blkid >> 8)) & 0xFF];
 102 
 103         crc ^= (osv>>14) ^ (obj>>16) ^ (blkid>>16);
 104 
 105         return (crc);
 106 }
 107 
 108 #define DBUF_HASH(os, obj, level, blkid) dbuf_hash(os, obj, level, blkid);
 109 
 110 #define DBUF_EQUAL(dbuf, os, obj, level, blkid)         \
 111         ((dbuf)->db.db_object == (obj) &&            \
 112         (dbuf)->db_objset == (os) &&                 \
 113         (dbuf)->db_level == (level) &&                       \
 114         (dbuf)->db_blkid == (blkid))
 115 
 116 dmu_buf_impl_t *
 117 dbuf_find(dnode_t *dn, uint8_t level, uint64_t blkid)
 118 {
 119         dbuf_hash_table_t *h = &dbuf_hash_table;
 120         objset_t *os = dn->dn_objset;
 121         uint64_t obj = dn->dn_object;
 122         uint64_t hv = DBUF_HASH(os, obj, level, blkid);
 123         uint64_t idx = hv & h->hash_table_mask;
 124         dmu_buf_impl_t *db;
 125 
 126         mutex_enter(DBUF_HASH_MUTEX(h, idx));
 127         for (db = h->hash_table[idx]; db != NULL; db = db->db_hash_next) {
 128                 if (DBUF_EQUAL(db, os, obj, level, blkid)) {
 129                         mutex_enter(&db->db_mtx);
 130                         if (db->db_state != DB_EVICTING) {
 131                                 mutex_exit(DBUF_HASH_MUTEX(h, idx));
 132                                 return (db);
 133                         }
 134                         mutex_exit(&db->db_mtx);
 135                 }
 136         }
 137         mutex_exit(DBUF_HASH_MUTEX(h, idx));
 138         return (NULL);
 139 }
 140 
 141 /*
 142  * Insert an entry into the hash table.  If there is already an element
 143  * equal to elem in the hash table, then the already existing element
 144  * will be returned and the new element will not be inserted.
 145  * Otherwise returns NULL.
 146  */
 147 static dmu_buf_impl_t *
 148 dbuf_hash_insert(dmu_buf_impl_t *db)
 149 {
 150         dbuf_hash_table_t *h = &dbuf_hash_table;
 151         objset_t *os = db->db_objset;
 152         uint64_t obj = db->db.db_object;
 153         int level = db->db_level;
 154         uint64_t blkid = db->db_blkid;
 155         uint64_t hv = DBUF_HASH(os, obj, level, blkid);
 156         uint64_t idx = hv & h->hash_table_mask;
 157         dmu_buf_impl_t *dbf;
 158 
 159         mutex_enter(DBUF_HASH_MUTEX(h, idx));
 160         for (dbf = h->hash_table[idx]; dbf != NULL; dbf = dbf->db_hash_next) {
 161                 if (DBUF_EQUAL(dbf, os, obj, level, blkid)) {
 162                         mutex_enter(&dbf->db_mtx);
 163                         if (dbf->db_state != DB_EVICTING) {
 164                                 mutex_exit(DBUF_HASH_MUTEX(h, idx));
 165                                 return (dbf);
 166                         }
 167                         mutex_exit(&dbf->db_mtx);
 168                 }
 169         }
 170 
 171         mutex_enter(&db->db_mtx);
 172         db->db_hash_next = h->hash_table[idx];
 173         h->hash_table[idx] = db;
 174         mutex_exit(DBUF_HASH_MUTEX(h, idx));
 175         atomic_add_64(&dbuf_hash_count, 1);
 176 
 177         return (NULL);
 178 }
 179 
 180 /*
 181  * Remove an entry from the hash table.  This operation will
 182  * fail if there are any existing holds on the db.
 183  */
 184 static void
 185 dbuf_hash_remove(dmu_buf_impl_t *db)
 186 {
 187         dbuf_hash_table_t *h = &dbuf_hash_table;
 188         uint64_t hv = DBUF_HASH(db->db_objset, db->db.db_object,
 189             db->db_level, db->db_blkid);
 190         uint64_t idx = hv & h->hash_table_mask;
 191         dmu_buf_impl_t *dbf, **dbp;
 192 
 193         /*
 194          * We musn't hold db_mtx to maintin lock ordering:
 195          * DBUF_HASH_MUTEX > db_mtx.
 196          */
 197         ASSERT(refcount_is_zero(&db->db_holds));
 198         ASSERT(db->db_state == DB_EVICTING);
 199         ASSERT(!MUTEX_HELD(&db->db_mtx));
 200 
 201         mutex_enter(DBUF_HASH_MUTEX(h, idx));
 202         dbp = &h->hash_table[idx];
 203         while ((dbf = *dbp) != db) {
 204                 dbp = &dbf->db_hash_next;
 205                 ASSERT(dbf != NULL);
 206         }
 207         *dbp = db->db_hash_next;
 208         db->db_hash_next = NULL;
 209         mutex_exit(DBUF_HASH_MUTEX(h, idx));
 210         atomic_add_64(&dbuf_hash_count, -1);
 211 }
 212 
 213 static arc_evict_func_t dbuf_do_evict;
 214 
 215 static void
 216 dbuf_evict_user(dmu_buf_impl_t *db)
 217 {
 218         ASSERT(MUTEX_HELD(&db->db_mtx));
 219 
 220         if (db->db_level != 0 || db->db_evict_func == NULL)
 221                 return;
 222 
 223         if (db->db_user_data_ptr_ptr)
 224                 *db->db_user_data_ptr_ptr = db->db.db_data;
 225         db->db_evict_func(&db->db, db->db_user_ptr);
 226         db->db_user_ptr = NULL;
 227         db->db_user_data_ptr_ptr = NULL;
 228         db->db_evict_func = NULL;
 229 }
 230 
 231 boolean_t
 232 dbuf_is_metadata(dmu_buf_impl_t *db)
 233 {
 234         if (db->db_level > 0) {
 235                 return (B_TRUE);
 236         } else {
 237                 boolean_t is_metadata;
 238 
 239                 DB_DNODE_ENTER(db);
 240                 is_metadata = DMU_OT_IS_METADATA(DB_DNODE(db)->dn_type);
 241                 DB_DNODE_EXIT(db);
 242 
 243                 return (is_metadata);
 244         }
 245 }
 246 
 247 void
 248 dbuf_evict(dmu_buf_impl_t *db)
 249 {
 250         ASSERT(MUTEX_HELD(&db->db_mtx));
 251         ASSERT(db->db_buf == NULL);
 252         ASSERT(db->db_data_pending == NULL);
 253 
 254         dbuf_clear(db);
 255         dbuf_destroy(db);
 256 }
 257 
 258 void
 259 dbuf_init(void)
 260 {
 261         uint64_t hsize = 1ULL << 16;
 262         dbuf_hash_table_t *h = &dbuf_hash_table;
 263         int i;
 264 
 265         /*
 266          * The hash table is big enough to fill all of physical memory
 267          * with an average 4K block size.  The table will take up
 268          * totalmem*sizeof(void*)/4K (i.e. 2MB/GB with 8-byte pointers).
 269          */
 270         while (hsize * 4096 < physmem * PAGESIZE)
 271                 hsize <<= 1;
 272 
 273 retry:
 274         h->hash_table_mask = hsize - 1;
 275         h->hash_table = kmem_zalloc(hsize * sizeof (void *), KM_NOSLEEP);
 276         if (h->hash_table == NULL) {
 277                 /* XXX - we should really return an error instead of assert */
 278                 ASSERT(hsize > (1ULL << 10));
 279                 hsize >>= 1;
 280                 goto retry;
 281         }
 282 
 283         dbuf_cache = kmem_cache_create("dmu_buf_impl_t",
 284             sizeof (dmu_buf_impl_t),
 285             0, dbuf_cons, dbuf_dest, NULL, NULL, NULL, 0);
 286 
 287         for (i = 0; i < DBUF_MUTEXES; i++)
 288                 mutex_init(&h->hash_mutexes[i], NULL, MUTEX_DEFAULT, NULL);
 289 }
 290 
 291 void
 292 dbuf_fini(void)
 293 {
 294         dbuf_hash_table_t *h = &dbuf_hash_table;
 295         int i;
 296 
 297         for (i = 0; i < DBUF_MUTEXES; i++)
 298                 mutex_destroy(&h->hash_mutexes[i]);
 299         kmem_free(h->hash_table, (h->hash_table_mask + 1) * sizeof (void *));
 300         kmem_cache_destroy(dbuf_cache);
 301 }
 302 
 303 /*
 304  * Other stuff.
 305  */
 306 
 307 #ifdef ZFS_DEBUG
 308 static void
 309 dbuf_verify(dmu_buf_impl_t *db)
 310 {
 311         dnode_t *dn;
 312         dbuf_dirty_record_t *dr;
 313 
 314         ASSERT(MUTEX_HELD(&db->db_mtx));
 315 
 316         if (!(zfs_flags & ZFS_DEBUG_DBUF_VERIFY))
 317                 return;
 318 
 319         ASSERT(db->db_objset != NULL);
 320         DB_DNODE_ENTER(db);
 321         dn = DB_DNODE(db);
 322         if (dn == NULL) {
 323                 ASSERT(db->db_parent == NULL);
 324                 ASSERT(db->db_blkptr == NULL);
 325         } else {
 326                 ASSERT3U(db->db.db_object, ==, dn->dn_object);
 327                 ASSERT3P(db->db_objset, ==, dn->dn_objset);
 328                 ASSERT3U(db->db_level, <, dn->dn_nlevels);
 329                 ASSERT(db->db_blkid == DMU_BONUS_BLKID ||
 330                     db->db_blkid == DMU_SPILL_BLKID ||
 331                     !list_is_empty(&dn->dn_dbufs));
 332         }
 333         if (db->db_blkid == DMU_BONUS_BLKID) {
 334                 ASSERT(dn != NULL);
 335                 ASSERT3U(db->db.db_size, >=, dn->dn_bonuslen);
 336                 ASSERT3U(db->db.db_offset, ==, DMU_BONUS_BLKID);
 337         } else if (db->db_blkid == DMU_SPILL_BLKID) {
 338                 ASSERT(dn != NULL);
 339                 ASSERT3U(db->db.db_size, >=, dn->dn_bonuslen);
 340                 ASSERT0(db->db.db_offset);
 341         } else {
 342                 ASSERT3U(db->db.db_offset, ==, db->db_blkid * db->db.db_size);
 343         }
 344 
 345         for (dr = db->db_data_pending; dr != NULL; dr = dr->dr_next)
 346                 ASSERT(dr->dr_dbuf == db);
 347 
 348         for (dr = db->db_last_dirty; dr != NULL; dr = dr->dr_next)
 349                 ASSERT(dr->dr_dbuf == db);
 350 
 351         /*
 352          * We can't assert that db_size matches dn_datablksz because it
 353          * can be momentarily different when another thread is doing
 354          * dnode_set_blksz().
 355          */
 356         if (db->db_level == 0 && db->db.db_object == DMU_META_DNODE_OBJECT) {
 357                 dr = db->db_data_pending;
 358                 /*
 359                  * It should only be modified in syncing context, so
 360                  * make sure we only have one copy of the data.
 361                  */
 362                 ASSERT(dr == NULL || dr->dt.dl.dr_data == db->db_buf);
 363         }
 364 
 365         /* verify db->db_blkptr */
 366         if (db->db_blkptr) {
 367                 if (db->db_parent == dn->dn_dbuf) {
 368                         /* db is pointed to by the dnode */
 369                         /* ASSERT3U(db->db_blkid, <, dn->dn_nblkptr); */
 370                         if (DMU_OBJECT_IS_SPECIAL(db->db.db_object))
 371                                 ASSERT(db->db_parent == NULL);
 372                         else
 373                                 ASSERT(db->db_parent != NULL);
 374                         if (db->db_blkid != DMU_SPILL_BLKID)
 375                                 ASSERT3P(db->db_blkptr, ==,
 376                                     &dn->dn_phys->dn_blkptr[db->db_blkid]);
 377                 } else {
 378                         /* db is pointed to by an indirect block */
 379                         int epb = db->db_parent->db.db_size >> SPA_BLKPTRSHIFT;
 380                         ASSERT3U(db->db_parent->db_level, ==, db->db_level+1);
 381                         ASSERT3U(db->db_parent->db.db_object, ==,
 382                             db->db.db_object);
 383                         /*
 384                          * dnode_grow_indblksz() can make this fail if we don't
 385                          * have the struct_rwlock.  XXX indblksz no longer
 386                          * grows.  safe to do this now?
 387                          */
 388                         if (RW_WRITE_HELD(&dn->dn_struct_rwlock)) {
 389                                 ASSERT3P(db->db_blkptr, ==,
 390                                     ((blkptr_t *)db->db_parent->db.db_data +
 391                                     db->db_blkid % epb));
 392                         }
 393                 }
 394         }
 395         if ((db->db_blkptr == NULL || BP_IS_HOLE(db->db_blkptr)) &&
 396             (db->db_buf == NULL || db->db_buf->b_data) &&
 397             db->db.db_data && db->db_blkid != DMU_BONUS_BLKID &&
 398             db->db_state != DB_FILL && !dn->dn_free_txg) {
 399                 /*
 400                  * If the blkptr isn't set but they have nonzero data,
 401                  * it had better be dirty, otherwise we'll lose that
 402                  * data when we evict this buffer.
 403                  */
 404                 if (db->db_dirtycnt == 0) {
 405                         uint64_t *buf = db->db.db_data;
 406                         int i;
 407 
 408                         for (i = 0; i < db->db.db_size >> 3; i++) {
 409                                 ASSERT(buf[i] == 0);
 410                         }
 411                 }
 412         }
 413         DB_DNODE_EXIT(db);
 414 }
 415 #endif
 416 
 417 static void
 418 dbuf_update_data(dmu_buf_impl_t *db)
 419 {
 420         ASSERT(MUTEX_HELD(&db->db_mtx));
 421         if (db->db_level == 0 && db->db_user_data_ptr_ptr) {
 422                 ASSERT(!refcount_is_zero(&db->db_holds));
 423                 *db->db_user_data_ptr_ptr = db->db.db_data;
 424         }
 425 }
 426 
 427 static void
 428 dbuf_set_data(dmu_buf_impl_t *db, arc_buf_t *buf)
 429 {
 430         ASSERT(MUTEX_HELD(&db->db_mtx));
 431         ASSERT(db->db_buf == NULL || !arc_has_callback(db->db_buf));
 432         db->db_buf = buf;
 433         if (buf != NULL) {
 434                 ASSERT(buf->b_data != NULL);
 435                 db->db.db_data = buf->b_data;
 436                 if (!arc_released(buf))
 437                         arc_set_callback(buf, dbuf_do_evict, db);
 438                 dbuf_update_data(db);
 439         } else {
 440                 dbuf_evict_user(db);
 441                 db->db.db_data = NULL;
 442                 if (db->db_state != DB_NOFILL)
 443                         db->db_state = DB_UNCACHED;
 444         }
 445 }
 446 
 447 /*
 448  * Loan out an arc_buf for read.  Return the loaned arc_buf.
 449  */
 450 arc_buf_t *
 451 dbuf_loan_arcbuf(dmu_buf_impl_t *db)
 452 {
 453         arc_buf_t *abuf;
 454 
 455         mutex_enter(&db->db_mtx);
 456         if (arc_released(db->db_buf) || refcount_count(&db->db_holds) > 1) {
 457                 int blksz = db->db.db_size;
 458                 spa_t *spa;
 459 
 460                 mutex_exit(&db->db_mtx);
 461                 DB_GET_SPA(&spa, db);
 462                 abuf = arc_loan_buf(spa, blksz);
 463                 bcopy(db->db.db_data, abuf->b_data, blksz);
 464         } else {
 465                 abuf = db->db_buf;
 466                 arc_loan_inuse_buf(abuf, db);
 467                 dbuf_set_data(db, NULL);
 468                 mutex_exit(&db->db_mtx);
 469         }
 470         return (abuf);
 471 }
 472 
 473 uint64_t
 474 dbuf_whichblock(dnode_t *dn, uint64_t offset)
 475 {
 476         if (dn->dn_datablkshift) {
 477                 return (offset >> dn->dn_datablkshift);
 478         } else {
 479                 ASSERT3U(offset, <, dn->dn_datablksz);
 480                 return (0);
 481         }
 482 }
 483 
 484 static void
 485 dbuf_read_done(zio_t *zio, arc_buf_t *buf, void *vdb)
 486 {
 487         dmu_buf_impl_t *db = vdb;
 488 
 489         mutex_enter(&db->db_mtx);
 490         ASSERT3U(db->db_state, ==, DB_READ);
 491         /*
 492          * All reads are synchronous, so we must have a hold on the dbuf
 493          */
 494         ASSERT(refcount_count(&db->db_holds) > 0);
 495         ASSERT(db->db_buf == NULL);
 496         ASSERT(db->db.db_data == NULL);
 497         if (db->db_level == 0 && db->db_freed_in_flight) {
 498                 /* we were freed in flight; disregard any error */
 499                 arc_release(buf, db);
 500                 bzero(buf->b_data, db->db.db_size);
 501                 arc_buf_freeze(buf);
 502                 db->db_freed_in_flight = FALSE;
 503                 dbuf_set_data(db, buf);
 504                 db->db_state = DB_CACHED;
 505         } else if (zio == NULL || zio->io_error == 0) {
 506                 dbuf_set_data(db, buf);
 507                 db->db_state = DB_CACHED;
 508         } else {
 509                 ASSERT(db->db_blkid != DMU_BONUS_BLKID);
 510                 ASSERT3P(db->db_buf, ==, NULL);
 511                 VERIFY(arc_buf_remove_ref(buf, db));
 512                 db->db_state = DB_UNCACHED;
 513         }
 514         cv_broadcast(&db->db_changed);
 515         dbuf_rele_and_unlock(db, NULL);
 516 }
 517 
 518 static void
 519 dbuf_read_impl(dmu_buf_impl_t *db, zio_t *zio, uint32_t *flags)
 520 {
 521         dnode_t *dn;
 522         spa_t *spa;
 523         zbookmark_t zb;
 524         uint32_t aflags = ARC_NOWAIT;
 525 
 526         DB_DNODE_ENTER(db);
 527         dn = DB_DNODE(db);
 528         ASSERT(!refcount_is_zero(&db->db_holds));
 529         /* We need the struct_rwlock to prevent db_blkptr from changing. */
 530         ASSERT(RW_LOCK_HELD(&dn->dn_struct_rwlock));
 531         ASSERT(MUTEX_HELD(&db->db_mtx));
 532         ASSERT(db->db_state == DB_UNCACHED);
 533         ASSERT(db->db_buf == NULL);
 534 
 535         if (db->db_blkid == DMU_BONUS_BLKID) {
 536                 int bonuslen = MIN(dn->dn_bonuslen, dn->dn_phys->dn_bonuslen);
 537 
 538                 ASSERT3U(bonuslen, <=, db->db.db_size);
 539                 db->db.db_data = zio_buf_alloc(DN_MAX_BONUSLEN);
 540                 arc_space_consume(DN_MAX_BONUSLEN, ARC_SPACE_OTHER);
 541                 if (bonuslen < DN_MAX_BONUSLEN)
 542                         bzero(db->db.db_data, DN_MAX_BONUSLEN);
 543                 if (bonuslen)
 544                         bcopy(DN_BONUS(dn->dn_phys), db->db.db_data, bonuslen);
 545                 DB_DNODE_EXIT(db);
 546                 dbuf_update_data(db);
 547                 db->db_state = DB_CACHED;
 548                 mutex_exit(&db->db_mtx);
 549                 return;
 550         }
 551 
 552         /*
 553          * Recheck BP_IS_HOLE() after dnode_block_freed() in case dnode_sync()
 554          * processes the delete record and clears the bp while we are waiting
 555          * for the dn_mtx (resulting in a "no" from block_freed).
 556          */
 557         if (db->db_blkptr == NULL || BP_IS_HOLE(db->db_blkptr) ||
 558             (db->db_level == 0 && (dnode_block_freed(dn, db->db_blkid) ||
 559             BP_IS_HOLE(db->db_blkptr)))) {
 560                 arc_buf_contents_t type = DBUF_GET_BUFC_TYPE(db);
 561 
 562                 dbuf_set_data(db, arc_buf_alloc(dn->dn_objset->os_spa,
 563                     db->db.db_size, db, type));
 564                 DB_DNODE_EXIT(db);
 565                 bzero(db->db.db_data, db->db.db_size);
 566                 db->db_state = DB_CACHED;
 567                 *flags |= DB_RF_CACHED;
 568                 mutex_exit(&db->db_mtx);
 569                 return;
 570         }
 571 
 572         spa = dn->dn_objset->os_spa;
 573         DB_DNODE_EXIT(db);
 574 
 575         db->db_state = DB_READ;
 576         mutex_exit(&db->db_mtx);
 577 
 578         if (DBUF_IS_L2CACHEABLE(db))
 579                 aflags |= ARC_L2CACHE;
 580         if (DBUF_IS_L2COMPRESSIBLE(db))
 581                 aflags |= ARC_L2COMPRESS;
 582 
 583         SET_BOOKMARK(&zb, db->db_objset->os_dsl_dataset ?
 584             db->db_objset->os_dsl_dataset->ds_object : DMU_META_OBJSET,
 585             db->db.db_object, db->db_level, db->db_blkid);
 586 
 587         dbuf_add_ref(db, NULL);
 588 
 589         (void) arc_read(zio, spa, db->db_blkptr,
 590             dbuf_read_done, db, ZIO_PRIORITY_SYNC_READ,
 591             (*flags & DB_RF_CANFAIL) ? ZIO_FLAG_CANFAIL : ZIO_FLAG_MUSTSUCCEED,
 592             &aflags, &zb);
 593         if (aflags & ARC_CACHED)
 594                 *flags |= DB_RF_CACHED;
 595 }
 596 
 597 int
 598 dbuf_read(dmu_buf_impl_t *db, zio_t *zio, uint32_t flags)
 599 {
 600         int err = 0;
 601         int havepzio = (zio != NULL);
 602         int prefetch;
 603         dnode_t *dn;
 604 
 605         /*
 606          * We don't have to hold the mutex to check db_state because it
 607          * can't be freed while we have a hold on the buffer.
 608          */
 609         ASSERT(!refcount_is_zero(&db->db_holds));
 610 
 611         if (db->db_state == DB_NOFILL)
 612                 return (SET_ERROR(EIO));
 613 
 614         DB_DNODE_ENTER(db);
 615         dn = DB_DNODE(db);
 616         if ((flags & DB_RF_HAVESTRUCT) == 0)
 617                 rw_enter(&dn->dn_struct_rwlock, RW_READER);
 618 
 619         prefetch = db->db_level == 0 && db->db_blkid != DMU_BONUS_BLKID &&
 620             (flags & DB_RF_NOPREFETCH) == 0 && dn != NULL &&
 621             DBUF_IS_CACHEABLE(db);
 622 
 623         mutex_enter(&db->db_mtx);
 624         if (db->db_state == DB_CACHED) {
 625                 mutex_exit(&db->db_mtx);
 626                 if (prefetch)
 627                         dmu_zfetch(&dn->dn_zfetch, db->db.db_offset,
 628                             db->db.db_size, TRUE);
 629                 if ((flags & DB_RF_HAVESTRUCT) == 0)
 630                         rw_exit(&dn->dn_struct_rwlock);
 631                 DB_DNODE_EXIT(db);
 632         } else if (db->db_state == DB_UNCACHED) {
 633                 spa_t *spa = dn->dn_objset->os_spa;
 634 
 635                 if (zio == NULL)
 636                         zio = zio_root(spa, NULL, NULL, ZIO_FLAG_CANFAIL);
 637                 dbuf_read_impl(db, zio, &flags);
 638 
 639                 /* dbuf_read_impl has dropped db_mtx for us */
 640 
 641                 if (prefetch)
 642                         dmu_zfetch(&dn->dn_zfetch, db->db.db_offset,
 643                             db->db.db_size, flags & DB_RF_CACHED);
 644 
 645                 if ((flags & DB_RF_HAVESTRUCT) == 0)
 646                         rw_exit(&dn->dn_struct_rwlock);
 647                 DB_DNODE_EXIT(db);
 648 
 649                 if (!havepzio)
 650                         err = zio_wait(zio);
 651         } else {
 652                 /*
 653                  * Another reader came in while the dbuf was in flight
 654                  * between UNCACHED and CACHED.  Either a writer will finish
 655                  * writing the buffer (sending the dbuf to CACHED) or the
 656                  * first reader's request will reach the read_done callback
 657                  * and send the dbuf to CACHED.  Otherwise, a failure
 658                  * occurred and the dbuf went to UNCACHED.
 659                  */
 660                 mutex_exit(&db->db_mtx);
 661                 if (prefetch)
 662                         dmu_zfetch(&dn->dn_zfetch, db->db.db_offset,
 663                             db->db.db_size, TRUE);
 664                 if ((flags & DB_RF_HAVESTRUCT) == 0)
 665                         rw_exit(&dn->dn_struct_rwlock);
 666                 DB_DNODE_EXIT(db);
 667 
 668                 /* Skip the wait per the caller's request. */
 669                 mutex_enter(&db->db_mtx);
 670                 if ((flags & DB_RF_NEVERWAIT) == 0) {
 671                         while (db->db_state == DB_READ ||
 672                             db->db_state == DB_FILL) {
 673                                 ASSERT(db->db_state == DB_READ ||
 674                                     (flags & DB_RF_HAVESTRUCT) == 0);
 675                                 cv_wait(&db->db_changed, &db->db_mtx);
 676                         }
 677                         if (db->db_state == DB_UNCACHED)
 678                                 err = SET_ERROR(EIO);
 679                 }
 680                 mutex_exit(&db->db_mtx);
 681         }
 682 
 683         ASSERT(err || havepzio || db->db_state == DB_CACHED);
 684         return (err);
 685 }
 686 
 687 static void
 688 dbuf_noread(dmu_buf_impl_t *db)
 689 {
 690         ASSERT(!refcount_is_zero(&db->db_holds));
 691         ASSERT(db->db_blkid != DMU_BONUS_BLKID);
 692         mutex_enter(&db->db_mtx);
 693         while (db->db_state == DB_READ || db->db_state == DB_FILL)
 694                 cv_wait(&db->db_changed, &db->db_mtx);
 695         if (db->db_state == DB_UNCACHED) {
 696                 arc_buf_contents_t type = DBUF_GET_BUFC_TYPE(db);
 697                 spa_t *spa;
 698 
 699                 ASSERT(db->db_buf == NULL);
 700                 ASSERT(db->db.db_data == NULL);
 701                 DB_GET_SPA(&spa, db);
 702                 dbuf_set_data(db, arc_buf_alloc(spa, db->db.db_size, db, type));
 703                 db->db_state = DB_FILL;
 704         } else if (db->db_state == DB_NOFILL) {
 705                 dbuf_set_data(db, NULL);
 706         } else {
 707                 ASSERT3U(db->db_state, ==, DB_CACHED);
 708         }
 709         mutex_exit(&db->db_mtx);
 710 }
 711 
 712 /*
 713  * This is our just-in-time copy function.  It makes a copy of
 714  * buffers, that have been modified in a previous transaction
 715  * group, before we modify them in the current active group.
 716  *
 717  * This function is used in two places: when we are dirtying a
 718  * buffer for the first time in a txg, and when we are freeing
 719  * a range in a dnode that includes this buffer.
 720  *
 721  * Note that when we are called from dbuf_free_range() we do
 722  * not put a hold on the buffer, we just traverse the active
 723  * dbuf list for the dnode.
 724  */
 725 static void
 726 dbuf_fix_old_data(dmu_buf_impl_t *db, uint64_t txg)
 727 {
 728         dbuf_dirty_record_t *dr = db->db_last_dirty;
 729 
 730         ASSERT(MUTEX_HELD(&db->db_mtx));
 731         ASSERT(db->db.db_data != NULL);
 732         ASSERT(db->db_level == 0);
 733         ASSERT(db->db.db_object != DMU_META_DNODE_OBJECT);
 734 
 735         if (dr == NULL ||
 736             (dr->dt.dl.dr_data !=
 737             ((db->db_blkid  == DMU_BONUS_BLKID) ? db->db.db_data : db->db_buf)))
 738                 return;
 739 
 740         /*
 741          * If the last dirty record for this dbuf has not yet synced
 742          * and its referencing the dbuf data, either:
 743          *      reset the reference to point to a new copy,
 744          * or (if there a no active holders)
 745          *      just null out the current db_data pointer.
 746          */
 747         ASSERT(dr->dr_txg >= txg - 2);
 748         if (db->db_blkid == DMU_BONUS_BLKID) {
 749                 /* Note that the data bufs here are zio_bufs */
 750                 dr->dt.dl.dr_data = zio_buf_alloc(DN_MAX_BONUSLEN);
 751                 arc_space_consume(DN_MAX_BONUSLEN, ARC_SPACE_OTHER);
 752                 bcopy(db->db.db_data, dr->dt.dl.dr_data, DN_MAX_BONUSLEN);
 753         } else if (refcount_count(&db->db_holds) > db->db_dirtycnt) {
 754                 int size = db->db.db_size;
 755                 arc_buf_contents_t type = DBUF_GET_BUFC_TYPE(db);
 756                 spa_t *spa;
 757 
 758                 DB_GET_SPA(&spa, db);
 759                 dr->dt.dl.dr_data = arc_buf_alloc(spa, size, db, type);
 760                 bcopy(db->db.db_data, dr->dt.dl.dr_data->b_data, size);
 761         } else {
 762                 dbuf_set_data(db, NULL);
 763         }
 764 }
 765 
 766 void
 767 dbuf_unoverride(dbuf_dirty_record_t *dr)
 768 {
 769         dmu_buf_impl_t *db = dr->dr_dbuf;
 770         blkptr_t *bp = &dr->dt.dl.dr_overridden_by;
 771         uint64_t txg = dr->dr_txg;
 772 
 773         ASSERT(MUTEX_HELD(&db->db_mtx));
 774         ASSERT(dr->dt.dl.dr_override_state != DR_IN_DMU_SYNC);
 775         ASSERT(db->db_level == 0);
 776 
 777         if (db->db_blkid == DMU_BONUS_BLKID ||
 778             dr->dt.dl.dr_override_state == DR_NOT_OVERRIDDEN)
 779                 return;
 780 
 781         ASSERT(db->db_data_pending != dr);
 782 
 783         /* free this block */
 784         if (!BP_IS_HOLE(bp) && !dr->dt.dl.dr_nopwrite) {
 785                 spa_t *spa;
 786 
 787                 DB_GET_SPA(&spa, db);
 788                 zio_free(spa, txg, bp);
 789         }
 790         dr->dt.dl.dr_override_state = DR_NOT_OVERRIDDEN;
 791         dr->dt.dl.dr_nopwrite = B_FALSE;
 792 
 793         /*
 794          * Release the already-written buffer, so we leave it in
 795          * a consistent dirty state.  Note that all callers are
 796          * modifying the buffer, so they will immediately do
 797          * another (redundant) arc_release().  Therefore, leave
 798          * the buf thawed to save the effort of freezing &
 799          * immediately re-thawing it.
 800          */
 801         arc_release(dr->dt.dl.dr_data, db);
 802 }
 803 
 804 /*
 805  * Evict (if its unreferenced) or clear (if its referenced) any level-0
 806  * data blocks in the free range, so that any future readers will find
 807  * empty blocks.  Also, if we happen across any level-1 dbufs in the
 808  * range that have not already been marked dirty, mark them dirty so
 809  * they stay in memory.
 810  *
 811  * This is a no-op if the dataset is in the middle of an incremental
 812  * receive; see comment below for details.
 813  */
 814 void
 815 dbuf_free_range(dnode_t *dn, uint64_t start, uint64_t end, dmu_tx_t *tx)
 816 {
 817         dmu_buf_impl_t *db, *db_next;
 818         uint64_t txg = tx->tx_txg;
 819         int epbs = dn->dn_indblkshift - SPA_BLKPTRSHIFT;
 820         uint64_t first_l1 = start >> epbs;
 821         uint64_t last_l1 = end >> epbs;
 822 
 823         if (end > dn->dn_maxblkid && (end != DMU_SPILL_BLKID)) {
 824                 end = dn->dn_maxblkid;
 825                 last_l1 = end >> epbs;
 826         }
 827         dprintf_dnode(dn, "start=%llu end=%llu\n", start, end);
 828 
 829         mutex_enter(&dn->dn_dbufs_mtx);
 830         if (start >= dn->dn_unlisted_l0_blkid * dn->dn_datablksz) {
 831                 /* There can't be any dbufs in this range; no need to search. */
 832                 mutex_exit(&dn->dn_dbufs_mtx);
 833                 return;
 834         } else if (dmu_objset_is_receiving(dn->dn_objset)) {
 835                 /*
 836                  * If we are receiving, we expect there to be no dbufs in
 837                  * the range to be freed, because receive modifies each
 838                  * block at most once, and in offset order.  If this is
 839                  * not the case, it can lead to performance problems,
 840                  * so note that we unexpectedly took the slow path.
 841                  */
 842                 atomic_inc_64(&zfs_free_range_recv_miss);
 843         }
 844 
 845         for (db = list_head(&dn->dn_dbufs); db != NULL; db = db_next) {
 846                 db_next = list_next(&dn->dn_dbufs, db);
 847                 ASSERT(db->db_blkid != DMU_BONUS_BLKID);
 848 
 849                 if (db->db_level == 1 &&
 850                     db->db_blkid >= first_l1 && db->db_blkid <= last_l1) {
 851                         mutex_enter(&db->db_mtx);
 852                         if (db->db_last_dirty &&
 853                             db->db_last_dirty->dr_txg < txg) {
 854                                 dbuf_add_ref(db, FTAG);
 855                                 mutex_exit(&db->db_mtx);
 856                                 dbuf_will_dirty(db, tx);
 857                                 dbuf_rele(db, FTAG);
 858                         } else {
 859                                 mutex_exit(&db->db_mtx);
 860                         }
 861                 }
 862 
 863                 if (db->db_level != 0)
 864                         continue;
 865                 dprintf_dbuf(db, "found buf %s\n", "");
 866                 if (db->db_blkid < start || db->db_blkid > end)
 867                         continue;
 868 
 869                 /* found a level 0 buffer in the range */
 870                 mutex_enter(&db->db_mtx);
 871                 if (dbuf_undirty(db, tx)) {
 872                         /* mutex has been dropped and dbuf destroyed */
 873                         continue;
 874                 }
 875 
 876                 if (db->db_state == DB_UNCACHED ||
 877                     db->db_state == DB_NOFILL ||
 878                     db->db_state == DB_EVICTING) {
 879                         ASSERT(db->db.db_data == NULL);
 880                         mutex_exit(&db->db_mtx);
 881                         continue;
 882                 }
 883                 if (db->db_state == DB_READ || db->db_state == DB_FILL) {
 884                         /* will be handled in dbuf_read_done or dbuf_rele */
 885                         db->db_freed_in_flight = TRUE;
 886                         mutex_exit(&db->db_mtx);
 887                         continue;
 888                 }
 889                 if (refcount_count(&db->db_holds) == 0) {
 890                         ASSERT(db->db_buf);
 891                         dbuf_clear(db);
 892                         continue;
 893                 }
 894                 /* The dbuf is referenced */
 895 
 896                 if (db->db_last_dirty != NULL) {
 897                         dbuf_dirty_record_t *dr = db->db_last_dirty;
 898 
 899                         if (dr->dr_txg == txg) {
 900                                 /*
 901                                  * This buffer is "in-use", re-adjust the file
 902                                  * size to reflect that this buffer may
 903                                  * contain new data when we sync.
 904                                  */
 905                                 if (db->db_blkid != DMU_SPILL_BLKID &&
 906                                     db->db_blkid > dn->dn_maxblkid)
 907                                         dn->dn_maxblkid = db->db_blkid;
 908                                 dbuf_unoverride(dr);
 909                         } else {
 910                                 /*
 911                                  * This dbuf is not dirty in the open context.
 912                                  * Either uncache it (if its not referenced in
 913                                  * the open context) or reset its contents to
 914                                  * empty.
 915                                  */
 916                                 dbuf_fix_old_data(db, txg);
 917                         }
 918                 }
 919                 /* clear the contents if its cached */
 920                 if (db->db_state == DB_CACHED) {
 921                         ASSERT(db->db.db_data != NULL);
 922                         arc_release(db->db_buf, db);
 923                         bzero(db->db.db_data, db->db.db_size);
 924                         arc_buf_freeze(db->db_buf);
 925                 }
 926 
 927                 mutex_exit(&db->db_mtx);
 928         }
 929         mutex_exit(&dn->dn_dbufs_mtx);
 930 }
 931 
 932 static int
 933 dbuf_block_freeable(dmu_buf_impl_t *db)
 934 {
 935         dsl_dataset_t *ds = db->db_objset->os_dsl_dataset;
 936         uint64_t birth_txg = 0;
 937 
 938         /*
 939          * We don't need any locking to protect db_blkptr:
 940          * If it's syncing, then db_last_dirty will be set
 941          * so we'll ignore db_blkptr.
 942          */
 943         ASSERT(MUTEX_HELD(&db->db_mtx));
 944         if (db->db_last_dirty)
 945                 birth_txg = db->db_last_dirty->dr_txg;
 946         else if (db->db_blkptr)
 947                 birth_txg = db->db_blkptr->blk_birth;
 948 
 949         /*
 950          * If we don't exist or are in a snapshot, we can't be freed.
 951          * Don't pass the bp to dsl_dataset_block_freeable() since we
 952          * are holding the db_mtx lock and might deadlock if we are
 953          * prefetching a dedup-ed block.
 954          */
 955         if (birth_txg)
 956                 return (ds == NULL ||
 957                     dsl_dataset_block_freeable(ds, NULL, birth_txg));
 958         else
 959                 return (FALSE);
 960 }
 961 
 962 void
 963 dbuf_new_size(dmu_buf_impl_t *db, int size, dmu_tx_t *tx)
 964 {
 965         arc_buf_t *buf, *obuf;
 966         int osize = db->db.db_size;
 967         arc_buf_contents_t type = DBUF_GET_BUFC_TYPE(db);
 968         dnode_t *dn;
 969 
 970         ASSERT(db->db_blkid != DMU_BONUS_BLKID);
 971 
 972         DB_DNODE_ENTER(db);
 973         dn = DB_DNODE(db);
 974 
 975         /* XXX does *this* func really need the lock? */
 976         ASSERT(RW_WRITE_HELD(&dn->dn_struct_rwlock));
 977 
 978         /*
 979          * This call to dbuf_will_dirty() with the dn_struct_rwlock held
 980          * is OK, because there can be no other references to the db
 981          * when we are changing its size, so no concurrent DB_FILL can
 982          * be happening.
 983          */
 984         /*
 985          * XXX we should be doing a dbuf_read, checking the return
 986          * value and returning that up to our callers
 987          */
 988         dbuf_will_dirty(db, tx);
 989 
 990         /* create the data buffer for the new block */
 991         buf = arc_buf_alloc(dn->dn_objset->os_spa, size, db, type);
 992 
 993         /* copy old block data to the new block */
 994         obuf = db->db_buf;
 995         bcopy(obuf->b_data, buf->b_data, MIN(osize, size));
 996         /* zero the remainder */
 997         if (size > osize)
 998                 bzero((uint8_t *)buf->b_data + osize, size - osize);
 999 
1000         mutex_enter(&db->db_mtx);
1001         dbuf_set_data(db, buf);
1002         VERIFY(arc_buf_remove_ref(obuf, db));
1003         db->db.db_size = size;
1004 
1005         if (db->db_level == 0) {
1006                 ASSERT3U(db->db_last_dirty->dr_txg, ==, tx->tx_txg);
1007                 db->db_last_dirty->dt.dl.dr_data = buf;
1008         }
1009         mutex_exit(&db->db_mtx);
1010 
1011         dnode_willuse_space(dn, size-osize, tx);
1012         DB_DNODE_EXIT(db);
1013 }
1014 
1015 void
1016 dbuf_release_bp(dmu_buf_impl_t *db)
1017 {
1018         objset_t *os;
1019 
1020         DB_GET_OBJSET(&os, db);
1021         ASSERT(dsl_pool_sync_context(dmu_objset_pool(os)));
1022         ASSERT(arc_released(os->os_phys_buf) ||
1023             list_link_active(&os->os_dsl_dataset->ds_synced_link));
1024         ASSERT(db->db_parent == NULL || arc_released(db->db_parent->db_buf));
1025 
1026         (void) arc_release(db->db_buf, db);
1027 }
1028 
1029 dbuf_dirty_record_t *
1030 dbuf_dirty(dmu_buf_impl_t *db, dmu_tx_t *tx)
1031 {
1032         dnode_t *dn;
1033         objset_t *os;
1034         dbuf_dirty_record_t **drp, *dr;
1035         int drop_struct_lock = FALSE;
1036         boolean_t do_free_accounting = B_FALSE;
1037         int txgoff = tx->tx_txg & TXG_MASK;
1038 
1039         ASSERT(tx->tx_txg != 0);
1040         ASSERT(!refcount_is_zero(&db->db_holds));
1041         DMU_TX_DIRTY_BUF(tx, db);
1042 
1043         DB_DNODE_ENTER(db);
1044         dn = DB_DNODE(db);
1045         /*
1046          * Shouldn't dirty a regular buffer in syncing context.  Private
1047          * objects may be dirtied in syncing context, but only if they
1048          * were already pre-dirtied in open context.
1049          */
1050         ASSERT(!dmu_tx_is_syncing(tx) ||
1051             BP_IS_HOLE(dn->dn_objset->os_rootbp) ||
1052             DMU_OBJECT_IS_SPECIAL(dn->dn_object) ||
1053             dn->dn_objset->os_dsl_dataset == NULL);
1054         /*
1055          * We make this assert for private objects as well, but after we
1056          * check if we're already dirty.  They are allowed to re-dirty
1057          * in syncing context.
1058          */
1059         ASSERT(dn->dn_object == DMU_META_DNODE_OBJECT ||
1060             dn->dn_dirtyctx == DN_UNDIRTIED || dn->dn_dirtyctx ==
1061             (dmu_tx_is_syncing(tx) ? DN_DIRTY_SYNC : DN_DIRTY_OPEN));
1062 
1063         mutex_enter(&db->db_mtx);
1064         /*
1065          * XXX make this true for indirects too?  The problem is that
1066          * transactions created with dmu_tx_create_assigned() from
1067          * syncing context don't bother holding ahead.
1068          */
1069         ASSERT(db->db_level != 0 ||
1070             db->db_state == DB_CACHED || db->db_state == DB_FILL ||
1071             db->db_state == DB_NOFILL);
1072 
1073         mutex_enter(&dn->dn_mtx);
1074         /*
1075          * Don't set dirtyctx to SYNC if we're just modifying this as we
1076          * initialize the objset.
1077          */
1078         if (dn->dn_dirtyctx == DN_UNDIRTIED &&
1079             !BP_IS_HOLE(dn->dn_objset->os_rootbp)) {
1080                 dn->dn_dirtyctx =
1081                     (dmu_tx_is_syncing(tx) ? DN_DIRTY_SYNC : DN_DIRTY_OPEN);
1082                 ASSERT(dn->dn_dirtyctx_firstset == NULL);
1083                 dn->dn_dirtyctx_firstset = kmem_alloc(1, KM_SLEEP);
1084         }
1085         mutex_exit(&dn->dn_mtx);
1086 
1087         if (db->db_blkid == DMU_SPILL_BLKID)
1088                 dn->dn_have_spill = B_TRUE;
1089 
1090         /*
1091          * If this buffer is already dirty, we're done.
1092          */
1093         drp = &db->db_last_dirty;
1094         ASSERT(*drp == NULL || (*drp)->dr_txg <= tx->tx_txg ||
1095             db->db.db_object == DMU_META_DNODE_OBJECT);
1096         while ((dr = *drp) != NULL && dr->dr_txg > tx->tx_txg)
1097                 drp = &dr->dr_next;
1098         if (dr && dr->dr_txg == tx->tx_txg) {
1099                 DB_DNODE_EXIT(db);
1100 
1101                 if (db->db_level == 0 && db->db_blkid != DMU_BONUS_BLKID) {
1102                         /*
1103                          * If this buffer has already been written out,
1104                          * we now need to reset its state.
1105                          */
1106                         dbuf_unoverride(dr);
1107                         if (db->db.db_object != DMU_META_DNODE_OBJECT &&
1108                             db->db_state != DB_NOFILL)
1109                                 arc_buf_thaw(db->db_buf);
1110                 }
1111                 mutex_exit(&db->db_mtx);
1112                 return (dr);
1113         }
1114 
1115         /*
1116          * Only valid if not already dirty.
1117          */
1118         ASSERT(dn->dn_object == 0 ||
1119             dn->dn_dirtyctx == DN_UNDIRTIED || dn->dn_dirtyctx ==
1120             (dmu_tx_is_syncing(tx) ? DN_DIRTY_SYNC : DN_DIRTY_OPEN));
1121 
1122         ASSERT3U(dn->dn_nlevels, >, db->db_level);
1123         ASSERT((dn->dn_phys->dn_nlevels == 0 && db->db_level == 0) ||
1124             dn->dn_phys->dn_nlevels > db->db_level ||
1125             dn->dn_next_nlevels[txgoff] > db->db_level ||
1126             dn->dn_next_nlevels[(tx->tx_txg-1) & TXG_MASK] > db->db_level ||
1127             dn->dn_next_nlevels[(tx->tx_txg-2) & TXG_MASK] > db->db_level);
1128 
1129         /*
1130          * We should only be dirtying in syncing context if it's the
1131          * mos or we're initializing the os or it's a special object.
1132          * However, we are allowed to dirty in syncing context provided
1133          * we already dirtied it in open context.  Hence we must make
1134          * this assertion only if we're not already dirty.
1135          */
1136         os = dn->dn_objset;
1137         ASSERT(!dmu_tx_is_syncing(tx) || DMU_OBJECT_IS_SPECIAL(dn->dn_object) ||
1138             os->os_dsl_dataset == NULL || BP_IS_HOLE(os->os_rootbp));
1139         ASSERT(db->db.db_size != 0);
1140 
1141         dprintf_dbuf(db, "size=%llx\n", (u_longlong_t)db->db.db_size);
1142 
1143         if (db->db_blkid != DMU_BONUS_BLKID) {
1144                 /*
1145                  * Update the accounting.
1146                  * Note: we delay "free accounting" until after we drop
1147                  * the db_mtx.  This keeps us from grabbing other locks
1148                  * (and possibly deadlocking) in bp_get_dsize() while
1149                  * also holding the db_mtx.
1150                  */
1151                 dnode_willuse_space(dn, db->db.db_size, tx);
1152                 do_free_accounting = dbuf_block_freeable(db);
1153         }
1154 
1155         /*
1156          * If this buffer is dirty in an old transaction group we need
1157          * to make a copy of it so that the changes we make in this
1158          * transaction group won't leak out when we sync the older txg.
1159          */
1160         dr = kmem_zalloc(sizeof (dbuf_dirty_record_t), KM_SLEEP);
1161         if (db->db_level == 0) {
1162                 void *data_old = db->db_buf;
1163 
1164                 if (db->db_state != DB_NOFILL) {
1165                         if (db->db_blkid == DMU_BONUS_BLKID) {
1166                                 dbuf_fix_old_data(db, tx->tx_txg);
1167                                 data_old = db->db.db_data;
1168                         } else if (db->db.db_object != DMU_META_DNODE_OBJECT) {
1169                                 /*
1170                                  * Release the data buffer from the cache so
1171                                  * that we can modify it without impacting
1172                                  * possible other users of this cached data
1173                                  * block.  Note that indirect blocks and
1174                                  * private objects are not released until the
1175                                  * syncing state (since they are only modified
1176                                  * then).
1177                                  */
1178                                 arc_release(db->db_buf, db);
1179                                 dbuf_fix_old_data(db, tx->tx_txg);
1180                                 data_old = db->db_buf;
1181                         }
1182                         ASSERT(data_old != NULL);
1183                 }
1184                 dr->dt.dl.dr_data = data_old;
1185         } else {
1186                 mutex_init(&dr->dt.di.dr_mtx, NULL, MUTEX_DEFAULT, NULL);
1187                 list_create(&dr->dt.di.dr_children,
1188                     sizeof (dbuf_dirty_record_t),
1189                     offsetof(dbuf_dirty_record_t, dr_dirty_node));
1190         }
1191         if (db->db_blkid != DMU_BONUS_BLKID && os->os_dsl_dataset != NULL)
1192                 dr->dr_accounted = db->db.db_size;
1193         dr->dr_dbuf = db;
1194         dr->dr_txg = tx->tx_txg;
1195         dr->dr_next = *drp;
1196         *drp = dr;
1197 
1198         /*
1199          * We could have been freed_in_flight between the dbuf_noread
1200          * and dbuf_dirty.  We win, as though the dbuf_noread() had
1201          * happened after the free.
1202          */
1203         if (db->db_level == 0 && db->db_blkid != DMU_BONUS_BLKID &&
1204             db->db_blkid != DMU_SPILL_BLKID) {
1205                 mutex_enter(&dn->dn_mtx);
1206                 dnode_clear_range(dn, db->db_blkid, 1, tx);
1207                 mutex_exit(&dn->dn_mtx);
1208                 db->db_freed_in_flight = FALSE;
1209         }
1210 
1211         /*
1212          * This buffer is now part of this txg
1213          */
1214         dbuf_add_ref(db, (void *)(uintptr_t)tx->tx_txg);
1215         db->db_dirtycnt += 1;
1216         ASSERT3U(db->db_dirtycnt, <=, 3);
1217 
1218         mutex_exit(&db->db_mtx);
1219 
1220         if (db->db_blkid == DMU_BONUS_BLKID ||
1221             db->db_blkid == DMU_SPILL_BLKID) {
1222                 mutex_enter(&dn->dn_mtx);
1223                 ASSERT(!list_link_active(&dr->dr_dirty_node));
1224                 list_insert_tail(&dn->dn_dirty_records[txgoff], dr);
1225                 mutex_exit(&dn->dn_mtx);
1226                 dnode_setdirty(dn, tx);
1227                 DB_DNODE_EXIT(db);
1228                 return (dr);
1229         } else if (do_free_accounting) {
1230                 blkptr_t *bp = db->db_blkptr;
1231                 int64_t willfree = (bp && !BP_IS_HOLE(bp)) ?
1232                     bp_get_dsize(os->os_spa, bp) : db->db.db_size;
1233                 /*
1234                  * This is only a guess -- if the dbuf is dirty
1235                  * in a previous txg, we don't know how much
1236                  * space it will use on disk yet.  We should
1237                  * really have the struct_rwlock to access
1238                  * db_blkptr, but since this is just a guess,
1239                  * it's OK if we get an odd answer.
1240                  */
1241                 ddt_prefetch(os->os_spa, bp);
1242                 dnode_willuse_space(dn, -willfree, tx);
1243         }
1244 
1245         if (!RW_WRITE_HELD(&dn->dn_struct_rwlock)) {
1246                 rw_enter(&dn->dn_struct_rwlock, RW_READER);
1247                 drop_struct_lock = TRUE;
1248         }
1249 
1250         if (db->db_level == 0) {
1251                 dnode_new_blkid(dn, db->db_blkid, tx, drop_struct_lock);
1252                 ASSERT(dn->dn_maxblkid >= db->db_blkid);
1253         }
1254 
1255         if (db->db_level+1 < dn->dn_nlevels) {
1256                 dmu_buf_impl_t *parent = db->db_parent;
1257                 dbuf_dirty_record_t *di;
1258                 int parent_held = FALSE;
1259 
1260                 if (db->db_parent == NULL || db->db_parent == dn->dn_dbuf) {
1261                         int epbs = dn->dn_indblkshift - SPA_BLKPTRSHIFT;
1262 
1263                         parent = dbuf_hold_level(dn, db->db_level+1,
1264                             db->db_blkid >> epbs, FTAG);
1265                         ASSERT(parent != NULL);
1266                         parent_held = TRUE;
1267                 }
1268                 if (drop_struct_lock)
1269                         rw_exit(&dn->dn_struct_rwlock);
1270                 ASSERT3U(db->db_level+1, ==, parent->db_level);
1271                 di = dbuf_dirty(parent, tx);
1272                 if (parent_held)
1273                         dbuf_rele(parent, FTAG);
1274 
1275                 mutex_enter(&db->db_mtx);
1276                 /*
1277                  * Since we've dropped the mutex, it's possible that
1278                  * dbuf_undirty() might have changed this out from under us.
1279                  */
1280                 if (db->db_last_dirty == dr ||
1281                     dn->dn_object == DMU_META_DNODE_OBJECT) {
1282                         mutex_enter(&di->dt.di.dr_mtx);
1283                         ASSERT3U(di->dr_txg, ==, tx->tx_txg);
1284                         ASSERT(!list_link_active(&dr->dr_dirty_node));
1285                         list_insert_tail(&di->dt.di.dr_children, dr);
1286                         mutex_exit(&di->dt.di.dr_mtx);
1287                         dr->dr_parent = di;
1288                 }
1289                 mutex_exit(&db->db_mtx);
1290         } else {
1291                 ASSERT(db->db_level+1 == dn->dn_nlevels);
1292                 ASSERT(db->db_blkid < dn->dn_nblkptr);
1293                 ASSERT(db->db_parent == NULL || db->db_parent == dn->dn_dbuf);
1294                 mutex_enter(&dn->dn_mtx);
1295                 ASSERT(!list_link_active(&dr->dr_dirty_node));
1296                 list_insert_tail(&dn->dn_dirty_records[txgoff], dr);
1297                 mutex_exit(&dn->dn_mtx);
1298                 if (drop_struct_lock)
1299                         rw_exit(&dn->dn_struct_rwlock);
1300         }
1301 
1302         dnode_setdirty(dn, tx);
1303         DB_DNODE_EXIT(db);
1304         return (dr);
1305 }
1306 
1307 /*
1308  * Undirty a buffer in the transaction group referenced by the given
1309  * transaction.  Return whether this evicted the dbuf.
1310  */
1311 static boolean_t
1312 dbuf_undirty(dmu_buf_impl_t *db, dmu_tx_t *tx)
1313 {
1314         dnode_t *dn;
1315         uint64_t txg = tx->tx_txg;
1316         dbuf_dirty_record_t *dr, **drp;
1317 
1318         ASSERT(txg != 0);
1319         ASSERT(db->db_blkid != DMU_BONUS_BLKID);
1320         ASSERT0(db->db_level);
1321         ASSERT(MUTEX_HELD(&db->db_mtx));
1322 
1323         /*
1324          * If this buffer is not dirty, we're done.
1325          */
1326         for (drp = &db->db_last_dirty; (dr = *drp) != NULL; drp = &dr->dr_next)
1327                 if (dr->dr_txg <= txg)
1328                         break;
1329         if (dr == NULL || dr->dr_txg < txg)
1330                 return (B_FALSE);
1331         ASSERT(dr->dr_txg == txg);
1332         ASSERT(dr->dr_dbuf == db);
1333 
1334         DB_DNODE_ENTER(db);
1335         dn = DB_DNODE(db);
1336 
1337         /*
1338          * Note:  This code will probably work even if there are concurrent
1339          * holders, but it is untested in that scenerio, as the ZPL and
1340          * ztest have additional locking (the range locks) that prevents
1341          * that type of concurrent access.
1342          */
1343         ASSERT3U(refcount_count(&db->db_holds), ==, db->db_dirtycnt);
1344 
1345         dprintf_dbuf(db, "size=%llx\n", (u_longlong_t)db->db.db_size);
1346 
1347         ASSERT(db->db.db_size != 0);
1348 
1349         /*
1350          * Any space we accounted for in dp_dirty_* will be cleaned up by
1351          * dsl_pool_sync().  This is relatively rare so the discrepancy
1352          * is not a big deal.
1353          */
1354 
1355         *drp = dr->dr_next;
1356 
1357         /*
1358          * Note that there are three places in dbuf_dirty()
1359          * where this dirty record may be put on a list.
1360          * Make sure to do a list_remove corresponding to
1361          * every one of those list_insert calls.
1362          */
1363         if (dr->dr_parent) {
1364                 mutex_enter(&dr->dr_parent->dt.di.dr_mtx);
1365                 list_remove(&dr->dr_parent->dt.di.dr_children, dr);
1366                 mutex_exit(&dr->dr_parent->dt.di.dr_mtx);
1367         } else if (db->db_blkid == DMU_SPILL_BLKID ||
1368             db->db_level+1 == dn->dn_nlevels) {
1369                 ASSERT(db->db_blkptr == NULL || db->db_parent == dn->dn_dbuf);
1370                 mutex_enter(&dn->dn_mtx);
1371                 list_remove(&dn->dn_dirty_records[txg & TXG_MASK], dr);
1372                 mutex_exit(&dn->dn_mtx);
1373         }
1374         DB_DNODE_EXIT(db);
1375 
1376         if (db->db_state != DB_NOFILL) {
1377                 dbuf_unoverride(dr);
1378 
1379                 ASSERT(db->db_buf != NULL);
1380                 ASSERT(dr->dt.dl.dr_data != NULL);
1381                 if (dr->dt.dl.dr_data != db->db_buf)
1382                         VERIFY(arc_buf_remove_ref(dr->dt.dl.dr_data, db));
1383         }
1384         kmem_free(dr, sizeof (dbuf_dirty_record_t));
1385 
1386         ASSERT(db->db_dirtycnt > 0);
1387         db->db_dirtycnt -= 1;
1388 
1389         if (refcount_remove(&db->db_holds, (void *)(uintptr_t)txg) == 0) {
1390                 arc_buf_t *buf = db->db_buf;
1391 
1392                 ASSERT(db->db_state == DB_NOFILL || arc_released(buf));
1393                 dbuf_set_data(db, NULL);
1394                 VERIFY(arc_buf_remove_ref(buf, db));
1395                 dbuf_evict(db);
1396                 return (B_TRUE);
1397         }
1398 
1399         return (B_FALSE);
1400 }
1401 
1402 #pragma weak dmu_buf_will_dirty = dbuf_will_dirty
1403 void
1404 dbuf_will_dirty(dmu_buf_impl_t *db, dmu_tx_t *tx)
1405 {
1406         int rf = DB_RF_MUST_SUCCEED | DB_RF_NOPREFETCH;
1407 
1408         ASSERT(tx->tx_txg != 0);
1409         ASSERT(!refcount_is_zero(&db->db_holds));
1410 
1411         DB_DNODE_ENTER(db);
1412         if (RW_WRITE_HELD(&DB_DNODE(db)->dn_struct_rwlock))
1413                 rf |= DB_RF_HAVESTRUCT;
1414         DB_DNODE_EXIT(db);
1415         (void) dbuf_read(db, NULL, rf);
1416         (void) dbuf_dirty(db, tx);
1417 }
1418 
1419 void
1420 dmu_buf_will_not_fill(dmu_buf_t *db_fake, dmu_tx_t *tx)
1421 {
1422         dmu_buf_impl_t *db = (dmu_buf_impl_t *)db_fake;
1423 
1424         db->db_state = DB_NOFILL;
1425 
1426         dmu_buf_will_fill(db_fake, tx);
1427 }
1428 
1429 void
1430 dmu_buf_will_fill(dmu_buf_t *db_fake, dmu_tx_t *tx)
1431 {
1432         dmu_buf_impl_t *db = (dmu_buf_impl_t *)db_fake;
1433 
1434         ASSERT(db->db_blkid != DMU_BONUS_BLKID);
1435         ASSERT(tx->tx_txg != 0);
1436         ASSERT(db->db_level == 0);
1437         ASSERT(!refcount_is_zero(&db->db_holds));
1438 
1439         ASSERT(db->db.db_object != DMU_META_DNODE_OBJECT ||
1440             dmu_tx_private_ok(tx));
1441 
1442         dbuf_noread(db);
1443         (void) dbuf_dirty(db, tx);
1444 }
1445 
1446 #pragma weak dmu_buf_fill_done = dbuf_fill_done
1447 /* ARGSUSED */
1448 void
1449 dbuf_fill_done(dmu_buf_impl_t *db, dmu_tx_t *tx)
1450 {
1451         mutex_enter(&db->db_mtx);
1452         DBUF_VERIFY(db);
1453 
1454         if (db->db_state == DB_FILL) {
1455                 if (db->db_level == 0 && db->db_freed_in_flight) {
1456                         ASSERT(db->db_blkid != DMU_BONUS_BLKID);
1457                         /* we were freed while filling */
1458                         /* XXX dbuf_undirty? */
1459                         bzero(db->db.db_data, db->db.db_size);
1460                         db->db_freed_in_flight = FALSE;
1461                 }
1462                 db->db_state = DB_CACHED;
1463                 cv_broadcast(&db->db_changed);
1464         }
1465         mutex_exit(&db->db_mtx);
1466 }
1467 
1468 /*
1469  * Directly assign a provided arc buf to a given dbuf if it's not referenced
1470  * by anybody except our caller. Otherwise copy arcbuf's contents to dbuf.
1471  */
1472 void
1473 dbuf_assign_arcbuf(dmu_buf_impl_t *db, arc_buf_t *buf, dmu_tx_t *tx)
1474 {
1475         ASSERT(!refcount_is_zero(&db->db_holds));
1476         ASSERT(db->db_blkid != DMU_BONUS_BLKID);
1477         ASSERT(db->db_level == 0);
1478         ASSERT(DBUF_GET_BUFC_TYPE(db) == ARC_BUFC_DATA);
1479         ASSERT(buf != NULL);
1480         ASSERT(arc_buf_size(buf) == db->db.db_size);
1481         ASSERT(tx->tx_txg != 0);
1482 
1483         arc_return_buf(buf, db);
1484         ASSERT(arc_released(buf));
1485 
1486         mutex_enter(&db->db_mtx);
1487 
1488         while (db->db_state == DB_READ || db->db_state == DB_FILL)
1489                 cv_wait(&db->db_changed, &db->db_mtx);
1490 
1491         ASSERT(db->db_state == DB_CACHED || db->db_state == DB_UNCACHED);
1492 
1493         if (db->db_state == DB_CACHED &&
1494             refcount_count(&db->db_holds) - 1 > db->db_dirtycnt) {
1495                 mutex_exit(&db->db_mtx);
1496                 (void) dbuf_dirty(db, tx);
1497                 bcopy(buf->b_data, db->db.db_data, db->db.db_size);
1498                 VERIFY(arc_buf_remove_ref(buf, db));
1499                 xuio_stat_wbuf_copied();
1500                 return;
1501         }
1502 
1503         xuio_stat_wbuf_nocopy();
1504         if (db->db_state == DB_CACHED) {
1505                 dbuf_dirty_record_t *dr = db->db_last_dirty;
1506 
1507                 ASSERT(db->db_buf != NULL);
1508                 if (dr != NULL && dr->dr_txg == tx->tx_txg) {
1509                         ASSERT(dr->dt.dl.dr_data == db->db_buf);
1510                         if (!arc_released(db->db_buf)) {
1511                                 ASSERT(dr->dt.dl.dr_override_state ==
1512                                     DR_OVERRIDDEN);
1513                                 arc_release(db->db_buf, db);
1514                         }
1515                         dr->dt.dl.dr_data = buf;
1516                         VERIFY(arc_buf_remove_ref(db->db_buf, db));
1517                 } else if (dr == NULL || dr->dt.dl.dr_data != db->db_buf) {
1518                         arc_release(db->db_buf, db);
1519                         VERIFY(arc_buf_remove_ref(db->db_buf, db));
1520                 }
1521                 db->db_buf = NULL;
1522         }
1523         ASSERT(db->db_buf == NULL);
1524         dbuf_set_data(db, buf);
1525         db->db_state = DB_FILL;
1526         mutex_exit(&db->db_mtx);
1527         (void) dbuf_dirty(db, tx);
1528         dbuf_fill_done(db, tx);
1529 }
1530 
1531 /*
1532  * "Clear" the contents of this dbuf.  This will mark the dbuf
1533  * EVICTING and clear *most* of its references.  Unfortunately,
1534  * when we are not holding the dn_dbufs_mtx, we can't clear the
1535  * entry in the dn_dbufs list.  We have to wait until dbuf_destroy()
1536  * in this case.  For callers from the DMU we will usually see:
1537  *      dbuf_clear()->arc_buf_evict()->dbuf_do_evict()->dbuf_destroy()
1538  * For the arc callback, we will usually see:
1539  *      dbuf_do_evict()->dbuf_clear();dbuf_destroy()
1540  * Sometimes, though, we will get a mix of these two:
1541  *      DMU: dbuf_clear()->arc_buf_evict()
1542  *      ARC: dbuf_do_evict()->dbuf_destroy()
1543  */
1544 void
1545 dbuf_clear(dmu_buf_impl_t *db)
1546 {
1547         dnode_t *dn;
1548         dmu_buf_impl_t *parent = db->db_parent;
1549         dmu_buf_impl_t *dndb;
1550         int dbuf_gone = FALSE;
1551 
1552         ASSERT(MUTEX_HELD(&db->db_mtx));
1553         ASSERT(refcount_is_zero(&db->db_holds));
1554 
1555         dbuf_evict_user(db);
1556 
1557         if (db->db_state == DB_CACHED) {
1558                 ASSERT(db->db.db_data != NULL);
1559                 if (db->db_blkid == DMU_BONUS_BLKID) {
1560                         zio_buf_free(db->db.db_data, DN_MAX_BONUSLEN);
1561                         arc_space_return(DN_MAX_BONUSLEN, ARC_SPACE_OTHER);
1562                 }
1563                 db->db.db_data = NULL;
1564                 db->db_state = DB_UNCACHED;
1565         }
1566 
1567         ASSERT(db->db_state == DB_UNCACHED || db->db_state == DB_NOFILL);
1568         ASSERT(db->db_data_pending == NULL);
1569 
1570         db->db_state = DB_EVICTING;
1571         db->db_blkptr = NULL;
1572 
1573         DB_DNODE_ENTER(db);
1574         dn = DB_DNODE(db);
1575         dndb = dn->dn_dbuf;
1576         if (db->db_blkid != DMU_BONUS_BLKID && MUTEX_HELD(&dn->dn_dbufs_mtx)) {
1577                 list_remove(&dn->dn_dbufs, db);
1578                 (void) atomic_dec_32_nv(&dn->dn_dbufs_count);
1579                 membar_producer();
1580                 DB_DNODE_EXIT(db);
1581                 /*
1582                  * Decrementing the dbuf count means that the hold corresponding
1583                  * to the removed dbuf is no longer discounted in dnode_move(),
1584                  * so the dnode cannot be moved until after we release the hold.
1585                  * The membar_producer() ensures visibility of the decremented
1586                  * value in dnode_move(), since DB_DNODE_EXIT doesn't actually
1587                  * release any lock.
1588                  */
1589                 dnode_rele(dn, db);
1590                 db->db_dnode_handle = NULL;
1591         } else {
1592                 DB_DNODE_EXIT(db);
1593         }
1594 
1595         if (db->db_buf)
1596                 dbuf_gone = arc_buf_evict(db->db_buf);
1597 
1598         if (!dbuf_gone)
1599                 mutex_exit(&db->db_mtx);
1600 
1601         /*
1602          * If this dbuf is referenced from an indirect dbuf,
1603          * decrement the ref count on the indirect dbuf.
1604          */
1605         if (parent && parent != dndb)
1606                 dbuf_rele(parent, db);
1607 }
1608 
1609 static int
1610 dbuf_findbp(dnode_t *dn, int level, uint64_t blkid, int fail_sparse,
1611     dmu_buf_impl_t **parentp, blkptr_t **bpp)
1612 {
1613         int nlevels, epbs;
1614 
1615         *parentp = NULL;
1616         *bpp = NULL;
1617 
1618         ASSERT(blkid != DMU_BONUS_BLKID);
1619 
1620         if (blkid == DMU_SPILL_BLKID) {
1621                 mutex_enter(&dn->dn_mtx);
1622                 if (dn->dn_have_spill &&
1623                     (dn->dn_phys->dn_flags & DNODE_FLAG_SPILL_BLKPTR))
1624                         *bpp = &dn->dn_phys->dn_spill;
1625                 else
1626                         *bpp = NULL;
1627                 dbuf_add_ref(dn->dn_dbuf, NULL);
1628                 *parentp = dn->dn_dbuf;
1629                 mutex_exit(&dn->dn_mtx);
1630                 return (0);
1631         }
1632 
1633         if (dn->dn_phys->dn_nlevels == 0)
1634                 nlevels = 1;
1635         else
1636                 nlevels = dn->dn_phys->dn_nlevels;
1637 
1638         epbs = dn->dn_indblkshift - SPA_BLKPTRSHIFT;
1639 
1640         ASSERT3U(level * epbs, <, 64);
1641         ASSERT(RW_LOCK_HELD(&dn->dn_struct_rwlock));
1642         if (level >= nlevels ||
1643             (blkid > (dn->dn_phys->dn_maxblkid >> (level * epbs)))) {
1644                 /* the buffer has no parent yet */
1645                 return (SET_ERROR(ENOENT));
1646         } else if (level < nlevels-1) {
1647                 /* this block is referenced from an indirect block */
1648                 int err = dbuf_hold_impl(dn, level+1,
1649                     blkid >> epbs, fail_sparse, NULL, parentp);
1650                 if (err)
1651                         return (err);
1652                 err = dbuf_read(*parentp, NULL,
1653                     (DB_RF_HAVESTRUCT | DB_RF_NOPREFETCH | DB_RF_CANFAIL));
1654                 if (err) {
1655                         dbuf_rele(*parentp, NULL);
1656                         *parentp = NULL;
1657                         return (err);
1658                 }
1659                 *bpp = ((blkptr_t *)(*parentp)->db.db_data) +
1660                     (blkid & ((1ULL << epbs) - 1));
1661                 return (0);
1662         } else {
1663                 /* the block is referenced from the dnode */
1664                 ASSERT3U(level, ==, nlevels-1);
1665                 ASSERT(dn->dn_phys->dn_nblkptr == 0 ||
1666                     blkid < dn->dn_phys->dn_nblkptr);
1667                 if (dn->dn_dbuf) {
1668                         dbuf_add_ref(dn->dn_dbuf, NULL);
1669                         *parentp = dn->dn_dbuf;
1670                 }
1671                 *bpp = &dn->dn_phys->dn_blkptr[blkid];
1672                 return (0);
1673         }
1674 }
1675 
1676 static dmu_buf_impl_t *
1677 dbuf_create(dnode_t *dn, uint8_t level, uint64_t blkid,
1678     dmu_buf_impl_t *parent, blkptr_t *blkptr)
1679 {
1680         objset_t *os = dn->dn_objset;
1681         dmu_buf_impl_t *db, *odb;
1682 
1683         ASSERT(RW_LOCK_HELD(&dn->dn_struct_rwlock));
1684         ASSERT(dn->dn_type != DMU_OT_NONE);
1685 
1686         db = kmem_cache_alloc(dbuf_cache, KM_SLEEP);
1687 
1688         db->db_objset = os;
1689         db->db.db_object = dn->dn_object;
1690         db->db_level = level;
1691         db->db_blkid = blkid;
1692         db->db_last_dirty = NULL;
1693         db->db_dirtycnt = 0;
1694         db->db_dnode_handle = dn->dn_handle;
1695         db->db_parent = parent;
1696         db->db_blkptr = blkptr;
1697 
1698         db->db_user_ptr = NULL;
1699         db->db_user_data_ptr_ptr = NULL;
1700         db->db_evict_func = NULL;
1701         db->db_immediate_evict = 0;
1702         db->db_freed_in_flight = 0;
1703 
1704         if (blkid == DMU_BONUS_BLKID) {
1705                 ASSERT3P(parent, ==, dn->dn_dbuf);
1706                 db->db.db_size = DN_MAX_BONUSLEN -
1707                     (dn->dn_nblkptr-1) * sizeof (blkptr_t);
1708                 ASSERT3U(db->db.db_size, >=, dn->dn_bonuslen);
1709                 db->db.db_offset = DMU_BONUS_BLKID;
1710                 db->db_state = DB_UNCACHED;
1711                 /* the bonus dbuf is not placed in the hash table */
1712                 arc_space_consume(sizeof (dmu_buf_impl_t), ARC_SPACE_OTHER);
1713                 return (db);
1714         } else if (blkid == DMU_SPILL_BLKID) {
1715                 db->db.db_size = (blkptr != NULL) ?
1716                     BP_GET_LSIZE(blkptr) : SPA_MINBLOCKSIZE;
1717                 db->db.db_offset = 0;
1718         } else {
1719                 int blocksize =
1720                     db->db_level ? 1 << dn->dn_indblkshift : dn->dn_datablksz;
1721                 db->db.db_size = blocksize;
1722                 db->db.db_offset = db->db_blkid * blocksize;
1723         }
1724 
1725         /*
1726          * Hold the dn_dbufs_mtx while we get the new dbuf
1727          * in the hash table *and* added to the dbufs list.
1728          * This prevents a possible deadlock with someone
1729          * trying to look up this dbuf before its added to the
1730          * dn_dbufs list.
1731          */
1732         mutex_enter(&dn->dn_dbufs_mtx);
1733         db->db_state = DB_EVICTING;
1734         if ((odb = dbuf_hash_insert(db)) != NULL) {
1735                 /* someone else inserted it first */
1736                 kmem_cache_free(dbuf_cache, db);
1737                 mutex_exit(&dn->dn_dbufs_mtx);
1738                 return (odb);
1739         }
1740         list_insert_head(&dn->dn_dbufs, db);
1741         if (db->db_level == 0 && db->db_blkid >=
1742             dn->dn_unlisted_l0_blkid)
1743                 dn->dn_unlisted_l0_blkid = db->db_blkid + 1;
1744         db->db_state = DB_UNCACHED;
1745         mutex_exit(&dn->dn_dbufs_mtx);
1746         arc_space_consume(sizeof (dmu_buf_impl_t), ARC_SPACE_OTHER);
1747 
1748         if (parent && parent != dn->dn_dbuf)
1749                 dbuf_add_ref(parent, db);
1750 
1751         ASSERT(dn->dn_object == DMU_META_DNODE_OBJECT ||
1752             refcount_count(&dn->dn_holds) > 0);
1753         (void) refcount_add(&dn->dn_holds, db);
1754         (void) atomic_inc_32_nv(&dn->dn_dbufs_count);
1755 
1756         dprintf_dbuf(db, "db=%p\n", db);
1757 
1758         return (db);
1759 }
1760 
1761 static int
1762 dbuf_do_evict(void *private)
1763 {
1764         arc_buf_t *buf = private;
1765         dmu_buf_impl_t *db = buf->b_private;
1766 
1767         if (!MUTEX_HELD(&db->db_mtx))
1768                 mutex_enter(&db->db_mtx);
1769 
1770         ASSERT(refcount_is_zero(&db->db_holds));
1771 
1772         if (db->db_state != DB_EVICTING) {
1773                 ASSERT(db->db_state == DB_CACHED);
1774                 DBUF_VERIFY(db);
1775                 db->db_buf = NULL;
1776                 dbuf_evict(db);
1777         } else {
1778                 mutex_exit(&db->db_mtx);
1779                 dbuf_destroy(db);
1780         }
1781         return (0);
1782 }
1783 
1784 static void
1785 dbuf_destroy(dmu_buf_impl_t *db)
1786 {
1787         ASSERT(refcount_is_zero(&db->db_holds));
1788 
1789         if (db->db_blkid != DMU_BONUS_BLKID) {
1790                 /*
1791                  * If this dbuf is still on the dn_dbufs list,
1792                  * remove it from that list.
1793                  */
1794                 if (db->db_dnode_handle != NULL) {
1795                         dnode_t *dn;
1796 
1797                         DB_DNODE_ENTER(db);
1798                         dn = DB_DNODE(db);
1799                         mutex_enter(&dn->dn_dbufs_mtx);
1800                         list_remove(&dn->dn_dbufs, db);
1801                         (void) atomic_dec_32_nv(&dn->dn_dbufs_count);
1802                         mutex_exit(&dn->dn_dbufs_mtx);
1803                         DB_DNODE_EXIT(db);
1804                         /*
1805                          * Decrementing the dbuf count means that the hold
1806                          * corresponding to the removed dbuf is no longer
1807                          * discounted in dnode_move(), so the dnode cannot be
1808                          * moved until after we release the hold.
1809                          */
1810                         dnode_rele(dn, db);
1811                         db->db_dnode_handle = NULL;
1812                 }
1813                 dbuf_hash_remove(db);
1814         }
1815         db->db_parent = NULL;
1816         db->db_buf = NULL;
1817 
1818         ASSERT(!list_link_active(&db->db_link));
1819         ASSERT(db->db.db_data == NULL);
1820         ASSERT(db->db_hash_next == NULL);
1821         ASSERT(db->db_blkptr == NULL);
1822         ASSERT(db->db_data_pending == NULL);
1823 
1824         kmem_cache_free(dbuf_cache, db);
1825         arc_space_return(sizeof (dmu_buf_impl_t), ARC_SPACE_OTHER);
1826 }
1827 
1828 void
1829 dbuf_prefetch(dnode_t *dn, uint64_t blkid, zio_priority_t prio)
1830 {
1831         dmu_buf_impl_t *db = NULL;
1832         blkptr_t *bp = NULL;
1833 
1834         ASSERT(blkid != DMU_BONUS_BLKID);
1835         ASSERT(RW_LOCK_HELD(&dn->dn_struct_rwlock));
1836 
1837         if (dnode_block_freed(dn, blkid))
1838                 return;
1839 
1840         /* dbuf_find() returns with db_mtx held */
1841         if (db = dbuf_find(dn, 0, blkid)) {
1842                 /*
1843                  * This dbuf is already in the cache.  We assume that
1844                  * it is already CACHED, or else about to be either
1845                  * read or filled.
1846                  */
1847                 mutex_exit(&db->db_mtx);
1848                 return;
1849         }
1850 
1851         if (dbuf_findbp(dn, 0, blkid, TRUE, &db, &bp) == 0) {
1852                 if (bp && !BP_IS_HOLE(bp)) {
1853                         dsl_dataset_t *ds = dn->dn_objset->os_dsl_dataset;
1854                         uint32_t aflags = ARC_NOWAIT | ARC_PREFETCH;
1855                         zbookmark_t zb;
1856 
1857                         SET_BOOKMARK(&zb, ds ? ds->ds_object : DMU_META_OBJSET,
1858                             dn->dn_object, 0, blkid);
1859 
1860                         (void) arc_read(NULL, dn->dn_objset->os_spa,
1861                             bp, NULL, NULL, prio,
1862                             ZIO_FLAG_CANFAIL | ZIO_FLAG_SPECULATIVE,
1863                             &aflags, &zb);
1864                 }
1865                 if (db)
1866                         dbuf_rele(db, NULL);
1867         }
1868 }
1869 
1870 /*
1871  * Returns with db_holds incremented, and db_mtx not held.
1872  * Note: dn_struct_rwlock must be held.
1873  */
1874 int
1875 dbuf_hold_impl(dnode_t *dn, uint8_t level, uint64_t blkid, int fail_sparse,
1876     void *tag, dmu_buf_impl_t **dbp)
1877 {
1878         dmu_buf_impl_t *db, *parent = NULL;
1879 
1880         ASSERT(blkid != DMU_BONUS_BLKID);
1881         ASSERT(RW_LOCK_HELD(&dn->dn_struct_rwlock));
1882         ASSERT3U(dn->dn_nlevels, >, level);
1883 
1884         *dbp = NULL;
1885 top:
1886         /* dbuf_find() returns with db_mtx held */
1887         db = dbuf_find(dn, level, blkid);
1888 
1889         if (db == NULL) {
1890                 blkptr_t *bp = NULL;
1891                 int err;
1892 
1893                 ASSERT3P(parent, ==, NULL);
1894                 err = dbuf_findbp(dn, level, blkid, fail_sparse, &parent, &bp);
1895                 if (fail_sparse) {
1896                         if (err == 0 && bp && BP_IS_HOLE(bp))
1897                                 err = SET_ERROR(ENOENT);
1898                         if (err) {
1899                                 if (parent)
1900                                         dbuf_rele(parent, NULL);
1901                                 return (err);
1902                         }
1903                 }
1904                 if (err && err != ENOENT)
1905                         return (err);
1906                 db = dbuf_create(dn, level, blkid, parent, bp);
1907         }
1908 
1909         if (db->db_buf && refcount_is_zero(&db->db_holds)) {
1910                 arc_buf_add_ref(db->db_buf, db);
1911                 if (db->db_buf->b_data == NULL) {
1912                         dbuf_clear(db);
1913                         if (parent) {
1914                                 dbuf_rele(parent, NULL);
1915                                 parent = NULL;
1916                         }
1917                         goto top;
1918                 }
1919                 ASSERT3P(db->db.db_data, ==, db->db_buf->b_data);
1920         }
1921 
1922         ASSERT(db->db_buf == NULL || arc_referenced(db->db_buf));
1923 
1924         /*
1925          * If this buffer is currently syncing out, and we are are
1926          * still referencing it from db_data, we need to make a copy
1927          * of it in case we decide we want to dirty it again in this txg.
1928          */
1929         if (db->db_level == 0 && db->db_blkid != DMU_BONUS_BLKID &&
1930             dn->dn_object != DMU_META_DNODE_OBJECT &&
1931             db->db_state == DB_CACHED && db->db_data_pending) {
1932                 dbuf_dirty_record_t *dr = db->db_data_pending;
1933 
1934                 if (dr->dt.dl.dr_data == db->db_buf) {
1935                         arc_buf_contents_t type = DBUF_GET_BUFC_TYPE(db);
1936 
1937                         dbuf_set_data(db,
1938                             arc_buf_alloc(dn->dn_objset->os_spa,
1939                             db->db.db_size, db, type));
1940                         bcopy(dr->dt.dl.dr_data->b_data, db->db.db_data,
1941                             db->db.db_size);
1942                 }
1943         }
1944 
1945         (void) refcount_add(&db->db_holds, tag);
1946         dbuf_update_data(db);
1947         DBUF_VERIFY(db);
1948         mutex_exit(&db->db_mtx);
1949 
1950         /* NOTE: we can't rele the parent until after we drop the db_mtx */
1951         if (parent)
1952                 dbuf_rele(parent, NULL);
1953 
1954         ASSERT3P(DB_DNODE(db), ==, dn);
1955         ASSERT3U(db->db_blkid, ==, blkid);
1956         ASSERT3U(db->db_level, ==, level);
1957         *dbp = db;
1958 
1959         return (0);
1960 }
1961 
1962 dmu_buf_impl_t *
1963 dbuf_hold(dnode_t *dn, uint64_t blkid, void *tag)
1964 {
1965         dmu_buf_impl_t *db;
1966         int err = dbuf_hold_impl(dn, 0, blkid, FALSE, tag, &db);
1967         return (err ? NULL : db);
1968 }
1969 
1970 dmu_buf_impl_t *
1971 dbuf_hold_level(dnode_t *dn, int level, uint64_t blkid, void *tag)
1972 {
1973         dmu_buf_impl_t *db;
1974         int err = dbuf_hold_impl(dn, level, blkid, FALSE, tag, &db);
1975         return (err ? NULL : db);
1976 }
1977 
1978 void
1979 dbuf_create_bonus(dnode_t *dn)
1980 {
1981         ASSERT(RW_WRITE_HELD(&dn->dn_struct_rwlock));
1982 
1983         ASSERT(dn->dn_bonus == NULL);
1984         dn->dn_bonus = dbuf_create(dn, 0, DMU_BONUS_BLKID, dn->dn_dbuf, NULL);
1985 }
1986 
1987 int
1988 dbuf_spill_set_blksz(dmu_buf_t *db_fake, uint64_t blksz, dmu_tx_t *tx)
1989 {
1990         dmu_buf_impl_t *db = (dmu_buf_impl_t *)db_fake;
1991         dnode_t *dn;
1992 
1993         if (db->db_blkid != DMU_SPILL_BLKID)
1994                 return (SET_ERROR(ENOTSUP));
1995         if (blksz == 0)
1996                 blksz = SPA_MINBLOCKSIZE;
1997         if (blksz > SPA_MAXBLOCKSIZE)
1998                 blksz = SPA_MAXBLOCKSIZE;
1999         else
2000                 blksz = P2ROUNDUP(blksz, SPA_MINBLOCKSIZE);
2001 
2002         DB_DNODE_ENTER(db);
2003         dn = DB_DNODE(db);
2004         rw_enter(&dn->dn_struct_rwlock, RW_WRITER);
2005         dbuf_new_size(db, blksz, tx);
2006         rw_exit(&dn->dn_struct_rwlock);
2007         DB_DNODE_EXIT(db);
2008 
2009         return (0);
2010 }
2011 
2012 void
2013 dbuf_rm_spill(dnode_t *dn, dmu_tx_t *tx)
2014 {
2015         dbuf_free_range(dn, DMU_SPILL_BLKID, DMU_SPILL_BLKID, tx);
2016 }
2017 
2018 #pragma weak dmu_buf_add_ref = dbuf_add_ref
2019 void
2020 dbuf_add_ref(dmu_buf_impl_t *db, void *tag)
2021 {
2022         int64_t holds = refcount_add(&db->db_holds, tag);
2023         ASSERT(holds > 1);
2024 }
2025 
2026 /*
2027  * If you call dbuf_rele() you had better not be referencing the dnode handle
2028  * unless you have some other direct or indirect hold on the dnode. (An indirect
2029  * hold is a hold on one of the dnode's dbufs, including the bonus buffer.)
2030  * Without that, the dbuf_rele() could lead to a dnode_rele() followed by the
2031  * dnode's parent dbuf evicting its dnode handles.
2032  */
2033 #pragma weak dmu_buf_rele = dbuf_rele
2034 void
2035 dbuf_rele(dmu_buf_impl_t *db, void *tag)
2036 {
2037         mutex_enter(&db->db_mtx);
2038         dbuf_rele_and_unlock(db, tag);
2039 }
2040 
2041 /*
2042  * dbuf_rele() for an already-locked dbuf.  This is necessary to allow
2043  * db_dirtycnt and db_holds to be updated atomically.
2044  */
2045 void
2046 dbuf_rele_and_unlock(dmu_buf_impl_t *db, void *tag)
2047 {
2048         int64_t holds;
2049 
2050         ASSERT(MUTEX_HELD(&db->db_mtx));
2051         DBUF_VERIFY(db);
2052 
2053         /*
2054          * Remove the reference to the dbuf before removing its hold on the
2055          * dnode so we can guarantee in dnode_move() that a referenced bonus
2056          * buffer has a corresponding dnode hold.
2057          */
2058         holds = refcount_remove(&db->db_holds, tag);
2059         ASSERT(holds >= 0);
2060 
2061         /*
2062          * We can't freeze indirects if there is a possibility that they
2063          * may be modified in the current syncing context.
2064          */
2065         if (db->db_buf && holds == (db->db_level == 0 ? db->db_dirtycnt : 0))
2066                 arc_buf_freeze(db->db_buf);
2067 
2068         if (holds == db->db_dirtycnt &&
2069             db->db_level == 0 && db->db_immediate_evict)
2070                 dbuf_evict_user(db);
2071 
2072         if (holds == 0) {
2073                 if (db->db_blkid == DMU_BONUS_BLKID) {
2074                         mutex_exit(&db->db_mtx);
2075 
2076                         /*
2077                          * If the dnode moves here, we cannot cross this barrier
2078                          * until the move completes.
2079                          */
2080                         DB_DNODE_ENTER(db);
2081                         (void) atomic_dec_32_nv(&DB_DNODE(db)->dn_dbufs_count);
2082                         DB_DNODE_EXIT(db);
2083                         /*
2084                          * The bonus buffer's dnode hold is no longer discounted
2085                          * in dnode_move(). The dnode cannot move until after
2086                          * the dnode_rele().
2087                          */
2088                         dnode_rele(DB_DNODE(db), db);
2089                 } else if (db->db_buf == NULL) {
2090                         /*
2091                          * This is a special case: we never associated this
2092                          * dbuf with any data allocated from the ARC.
2093                          */
2094                         ASSERT(db->db_state == DB_UNCACHED ||
2095                             db->db_state == DB_NOFILL);
2096                         dbuf_evict(db);
2097                 } else if (arc_released(db->db_buf)) {
2098                         arc_buf_t *buf = db->db_buf;
2099                         /*
2100                          * This dbuf has anonymous data associated with it.
2101                          */
2102                         dbuf_set_data(db, NULL);
2103                         VERIFY(arc_buf_remove_ref(buf, db));
2104                         dbuf_evict(db);
2105                 } else {
2106                         VERIFY(!arc_buf_remove_ref(db->db_buf, db));
2107 
2108                         /*
2109                          * A dbuf will be eligible for eviction if either the
2110                          * 'primarycache' property is set or a duplicate
2111                          * copy of this buffer is already cached in the arc.
2112                          *
2113                          * In the case of the 'primarycache' a buffer
2114                          * is considered for eviction if it matches the
2115                          * criteria set in the property.
2116                          *
2117                          * To decide if our buffer is considered a
2118                          * duplicate, we must call into the arc to determine
2119                          * if multiple buffers are referencing the same
2120                          * block on-disk. If so, then we simply evict
2121                          * ourselves.
2122                          */
2123                         if (!DBUF_IS_CACHEABLE(db) ||
2124                             arc_buf_eviction_needed(db->db_buf))
2125                                 dbuf_clear(db);
2126                         else
2127                                 mutex_exit(&db->db_mtx);
2128                 }
2129         } else {
2130                 mutex_exit(&db->db_mtx);
2131         }
2132 }
2133 
2134 #pragma weak dmu_buf_refcount = dbuf_refcount
2135 uint64_t
2136 dbuf_refcount(dmu_buf_impl_t *db)
2137 {
2138         return (refcount_count(&db->db_holds));
2139 }
2140 
2141 void *
2142 dmu_buf_set_user(dmu_buf_t *db_fake, void *user_ptr, void *user_data_ptr_ptr,
2143     dmu_buf_evict_func_t *evict_func)
2144 {
2145         return (dmu_buf_update_user(db_fake, NULL, user_ptr,
2146             user_data_ptr_ptr, evict_func));
2147 }
2148 
2149 void *
2150 dmu_buf_set_user_ie(dmu_buf_t *db_fake, void *user_ptr, void *user_data_ptr_ptr,
2151     dmu_buf_evict_func_t *evict_func)
2152 {
2153         dmu_buf_impl_t *db = (dmu_buf_impl_t *)db_fake;
2154 
2155         db->db_immediate_evict = TRUE;
2156         return (dmu_buf_update_user(db_fake, NULL, user_ptr,
2157             user_data_ptr_ptr, evict_func));
2158 }
2159 
2160 void *
2161 dmu_buf_update_user(dmu_buf_t *db_fake, void *old_user_ptr, void *user_ptr,
2162     void *user_data_ptr_ptr, dmu_buf_evict_func_t *evict_func)
2163 {
2164         dmu_buf_impl_t *db = (dmu_buf_impl_t *)db_fake;
2165         ASSERT(db->db_level == 0);
2166 
2167         ASSERT((user_ptr == NULL) == (evict_func == NULL));
2168 
2169         mutex_enter(&db->db_mtx);
2170 
2171         if (db->db_user_ptr == old_user_ptr) {
2172                 db->db_user_ptr = user_ptr;
2173                 db->db_user_data_ptr_ptr = user_data_ptr_ptr;
2174                 db->db_evict_func = evict_func;
2175 
2176                 dbuf_update_data(db);
2177         } else {
2178                 old_user_ptr = db->db_user_ptr;
2179         }
2180 
2181         mutex_exit(&db->db_mtx);
2182         return (old_user_ptr);
2183 }
2184 
2185 void *
2186 dmu_buf_get_user(dmu_buf_t *db_fake)
2187 {
2188         dmu_buf_impl_t *db = (dmu_buf_impl_t *)db_fake;
2189         ASSERT(!refcount_is_zero(&db->db_holds));
2190 
2191         return (db->db_user_ptr);
2192 }
2193 
2194 boolean_t
2195 dmu_buf_freeable(dmu_buf_t *dbuf)
2196 {
2197         boolean_t res = B_FALSE;
2198         dmu_buf_impl_t *db = (dmu_buf_impl_t *)dbuf;
2199 
2200         if (db->db_blkptr)
2201                 res = dsl_dataset_block_freeable(db->db_objset->os_dsl_dataset,
2202                     db->db_blkptr, db->db_blkptr->blk_birth);
2203 
2204         return (res);
2205 }
2206 
2207 blkptr_t *
2208 dmu_buf_get_blkptr(dmu_buf_t *db)
2209 {
2210         dmu_buf_impl_t *dbi = (dmu_buf_impl_t *)db;
2211         return (dbi->db_blkptr);
2212 }
2213 
2214 static void
2215 dbuf_check_blkptr(dnode_t *dn, dmu_buf_impl_t *db)
2216 {
2217         /* ASSERT(dmu_tx_is_syncing(tx) */
2218         ASSERT(MUTEX_HELD(&db->db_mtx));
2219 
2220         if (db->db_blkptr != NULL)
2221                 return;
2222 
2223         if (db->db_blkid == DMU_SPILL_BLKID) {
2224                 db->db_blkptr = &dn->dn_phys->dn_spill;
2225                 BP_ZERO(db->db_blkptr);
2226                 return;
2227         }
2228         if (db->db_level == dn->dn_phys->dn_nlevels-1) {
2229                 /*
2230                  * This buffer was allocated at a time when there was
2231                  * no available blkptrs from the dnode, or it was
2232                  * inappropriate to hook it in (i.e., nlevels mis-match).
2233                  */
2234                 ASSERT(db->db_blkid < dn->dn_phys->dn_nblkptr);
2235                 ASSERT(db->db_parent == NULL);
2236                 db->db_parent = dn->dn_dbuf;
2237                 db->db_blkptr = &dn->dn_phys->dn_blkptr[db->db_blkid];
2238                 DBUF_VERIFY(db);
2239         } else {
2240                 dmu_buf_impl_t *parent = db->db_parent;
2241                 int epbs = dn->dn_phys->dn_indblkshift - SPA_BLKPTRSHIFT;
2242 
2243                 ASSERT(dn->dn_phys->dn_nlevels > 1);
2244                 if (parent == NULL) {
2245                         mutex_exit(&db->db_mtx);
2246                         rw_enter(&dn->dn_struct_rwlock, RW_READER);
2247                         (void) dbuf_hold_impl(dn, db->db_level+1,
2248                             db->db_blkid >> epbs, FALSE, db, &parent);
2249                         rw_exit(&dn->dn_struct_rwlock);
2250                         mutex_enter(&db->db_mtx);
2251                         db->db_parent = parent;
2252                 }
2253                 db->db_blkptr = (blkptr_t *)parent->db.db_data +
2254                     (db->db_blkid & ((1ULL << epbs) - 1));
2255                 DBUF_VERIFY(db);
2256         }
2257 }
2258 
2259 static void
2260 dbuf_sync_indirect(dbuf_dirty_record_t *dr, dmu_tx_t *tx)
2261 {
2262         dmu_buf_impl_t *db = dr->dr_dbuf;
2263         dnode_t *dn;
2264         zio_t *zio;
2265 
2266         ASSERT(dmu_tx_is_syncing(tx));
2267 
2268         dprintf_dbuf_bp(db, db->db_blkptr, "blkptr=%p", db->db_blkptr);
2269 
2270         mutex_enter(&db->db_mtx);
2271 
2272         ASSERT(db->db_level > 0);
2273         DBUF_VERIFY(db);
2274 
2275         /* Read the block if it hasn't been read yet. */
2276         if (db->db_buf == NULL) {
2277                 mutex_exit(&db->db_mtx);
2278                 (void) dbuf_read(db, NULL, DB_RF_MUST_SUCCEED);
2279                 mutex_enter(&db->db_mtx);
2280         }
2281         ASSERT3U(db->db_state, ==, DB_CACHED);
2282         ASSERT(db->db_buf != NULL);
2283 
2284         DB_DNODE_ENTER(db);
2285         dn = DB_DNODE(db);
2286         /* Indirect block size must match what the dnode thinks it is. */
2287         ASSERT3U(db->db.db_size, ==, 1<<dn->dn_phys->dn_indblkshift);
2288         dbuf_check_blkptr(dn, db);
2289         DB_DNODE_EXIT(db);
2290 
2291         /* Provide the pending dirty record to child dbufs */
2292         db->db_data_pending = dr;
2293 
2294         mutex_exit(&db->db_mtx);
2295         dbuf_write(dr, db->db_buf, tx);
2296 
2297         zio = dr->dr_zio;
2298         mutex_enter(&dr->dt.di.dr_mtx);
2299         dbuf_sync_list(&dr->dt.di.dr_children, tx);
2300         ASSERT(list_head(&dr->dt.di.dr_children) == NULL);
2301         mutex_exit(&dr->dt.di.dr_mtx);
2302         zio_nowait(zio);
2303 }
2304 
2305 static void
2306 dbuf_sync_leaf(dbuf_dirty_record_t *dr, dmu_tx_t *tx)
2307 {
2308         arc_buf_t **datap = &dr->dt.dl.dr_data;
2309         dmu_buf_impl_t *db = dr->dr_dbuf;
2310         dnode_t *dn;
2311         objset_t *os;
2312         uint64_t txg = tx->tx_txg;
2313 
2314         ASSERT(dmu_tx_is_syncing(tx));
2315 
2316         dprintf_dbuf_bp(db, db->db_blkptr, "blkptr=%p", db->db_blkptr);
2317 
2318         mutex_enter(&db->db_mtx);
2319         /*
2320          * To be synced, we must be dirtied.  But we
2321          * might have been freed after the dirty.
2322          */
2323         if (db->db_state == DB_UNCACHED) {
2324                 /* This buffer has been freed since it was dirtied */
2325                 ASSERT(db->db.db_data == NULL);
2326         } else if (db->db_state == DB_FILL) {
2327                 /* This buffer was freed and is now being re-filled */
2328                 ASSERT(db->db.db_data != dr->dt.dl.dr_data);
2329         } else {
2330                 ASSERT(db->db_state == DB_CACHED || db->db_state == DB_NOFILL);
2331         }
2332         DBUF_VERIFY(db);
2333 
2334         DB_DNODE_ENTER(db);
2335         dn = DB_DNODE(db);
2336 
2337         if (db->db_blkid == DMU_SPILL_BLKID) {
2338                 mutex_enter(&dn->dn_mtx);
2339                 dn->dn_phys->dn_flags |= DNODE_FLAG_SPILL_BLKPTR;
2340                 mutex_exit(&dn->dn_mtx);
2341         }
2342 
2343         /*
2344          * If this is a bonus buffer, simply copy the bonus data into the
2345          * dnode.  It will be written out when the dnode is synced (and it
2346          * will be synced, since it must have been dirty for dbuf_sync to
2347          * be called).
2348          */
2349         if (db->db_blkid == DMU_BONUS_BLKID) {
2350                 dbuf_dirty_record_t **drp;
2351 
2352                 ASSERT(*datap != NULL);
2353                 ASSERT0(db->db_level);
2354                 ASSERT3U(dn->dn_phys->dn_bonuslen, <=, DN_MAX_BONUSLEN);
2355                 bcopy(*datap, DN_BONUS(dn->dn_phys), dn->dn_phys->dn_bonuslen);
2356                 DB_DNODE_EXIT(db);
2357 
2358                 if (*datap != db->db.db_data) {
2359                         zio_buf_free(*datap, DN_MAX_BONUSLEN);
2360                         arc_space_return(DN_MAX_BONUSLEN, ARC_SPACE_OTHER);
2361                 }
2362                 db->db_data_pending = NULL;
2363                 drp = &db->db_last_dirty;
2364                 while (*drp != dr)
2365                         drp = &(*drp)->dr_next;
2366                 ASSERT(dr->dr_next == NULL);
2367                 ASSERT(dr->dr_dbuf == db);
2368                 *drp = dr->dr_next;
2369                 kmem_free(dr, sizeof (dbuf_dirty_record_t));
2370                 ASSERT(db->db_dirtycnt > 0);
2371                 db->db_dirtycnt -= 1;
2372                 dbuf_rele_and_unlock(db, (void *)(uintptr_t)txg);
2373                 return;
2374         }
2375 
2376         os = dn->dn_objset;
2377 
2378         /*
2379          * This function may have dropped the db_mtx lock allowing a dmu_sync
2380          * operation to sneak in. As a result, we need to ensure that we
2381          * don't check the dr_override_state until we have returned from
2382          * dbuf_check_blkptr.
2383          */
2384         dbuf_check_blkptr(dn, db);
2385 
2386         /*
2387          * If this buffer is in the middle of an immediate write,
2388          * wait for the synchronous IO to complete.
2389          */
2390         while (dr->dt.dl.dr_override_state == DR_IN_DMU_SYNC) {
2391                 ASSERT(dn->dn_object != DMU_META_DNODE_OBJECT);
2392                 cv_wait(&db->db_changed, &db->db_mtx);
2393                 ASSERT(dr->dt.dl.dr_override_state != DR_NOT_OVERRIDDEN);
2394         }
2395 
2396         if (db->db_state != DB_NOFILL &&
2397             dn->dn_object != DMU_META_DNODE_OBJECT &&
2398             refcount_count(&db->db_holds) > 1 &&
2399             dr->dt.dl.dr_override_state != DR_OVERRIDDEN &&
2400             *datap == db->db_buf) {
2401                 /*
2402                  * If this buffer is currently "in use" (i.e., there
2403                  * are active holds and db_data still references it),
2404                  * then make a copy before we start the write so that
2405                  * any modifications from the open txg will not leak
2406                  * into this write.
2407                  *
2408                  * NOTE: this copy does not need to be made for
2409                  * objects only modified in the syncing context (e.g.
2410                  * DNONE_DNODE blocks).
2411                  */
2412                 int blksz = arc_buf_size(*datap);
2413                 arc_buf_contents_t type = DBUF_GET_BUFC_TYPE(db);
2414                 *datap = arc_buf_alloc(os->os_spa, blksz, db, type);
2415                 bcopy(db->db.db_data, (*datap)->b_data, blksz);
2416         }
2417         db->db_data_pending = dr;
2418 
2419         mutex_exit(&db->db_mtx);
2420 
2421         dbuf_write(dr, *datap, tx);
2422 
2423         ASSERT(!list_link_active(&dr->dr_dirty_node));
2424         if (dn->dn_object == DMU_META_DNODE_OBJECT) {
2425                 list_insert_tail(&dn->dn_dirty_records[txg&TXG_MASK], dr);
2426                 DB_DNODE_EXIT(db);
2427         } else {
2428                 /*
2429                  * Although zio_nowait() does not "wait for an IO", it does
2430                  * initiate the IO. If this is an empty write it seems plausible
2431                  * that the IO could actually be completed before the nowait
2432                  * returns. We need to DB_DNODE_EXIT() first in case
2433                  * zio_nowait() invalidates the dbuf.
2434                  */
2435                 DB_DNODE_EXIT(db);
2436                 zio_nowait(dr->dr_zio);
2437         }
2438 }
2439 
2440 void
2441 dbuf_sync_list(list_t *list, dmu_tx_t *tx)
2442 {
2443         dbuf_dirty_record_t *dr;
2444 
2445         while (dr = list_head(list)) {
2446                 if (dr->dr_zio != NULL) {
2447                         /*
2448                          * If we find an already initialized zio then we
2449                          * are processing the meta-dnode, and we have finished.
2450                          * The dbufs for all dnodes are put back on the list
2451                          * during processing, so that we can zio_wait()
2452                          * these IOs after initiating all child IOs.
2453                          */
2454                         ASSERT3U(dr->dr_dbuf->db.db_object, ==,
2455                             DMU_META_DNODE_OBJECT);
2456                         break;
2457                 }
2458                 list_remove(list, dr);
2459                 if (dr->dr_dbuf->db_level > 0)
2460                         dbuf_sync_indirect(dr, tx);
2461                 else
2462                         dbuf_sync_leaf(dr, tx);
2463         }
2464 }
2465 
2466 /* ARGSUSED */
2467 static void
2468 dbuf_write_ready(zio_t *zio, arc_buf_t *buf, void *vdb)
2469 {
2470         dmu_buf_impl_t *db = vdb;
2471         dnode_t *dn;
2472         blkptr_t *bp = zio->io_bp;
2473         blkptr_t *bp_orig = &zio->io_bp_orig;
2474         spa_t *spa = zio->io_spa;
2475         int64_t delta;
2476         uint64_t fill = 0;
2477         int i;
2478 
2479         ASSERT(db->db_blkptr == bp);
2480 
2481         DB_DNODE_ENTER(db);
2482         dn = DB_DNODE(db);
2483         delta = bp_get_dsize_sync(spa, bp) - bp_get_dsize_sync(spa, bp_orig);
2484         dnode_diduse_space(dn, delta - zio->io_prev_space_delta);
2485         zio->io_prev_space_delta = delta;
2486 
2487         if (BP_IS_HOLE(bp)) {
2488                 ASSERT(bp->blk_fill == 0);
2489                 DB_DNODE_EXIT(db);
2490                 return;
2491         }
2492 
2493         ASSERT((db->db_blkid != DMU_SPILL_BLKID &&
2494             BP_GET_TYPE(bp) == dn->dn_type) ||
2495             (db->db_blkid == DMU_SPILL_BLKID &&
2496             BP_GET_TYPE(bp) == dn->dn_bonustype));
2497         ASSERT(BP_GET_LEVEL(bp) == db->db_level);
2498 
2499         mutex_enter(&db->db_mtx);
2500 
2501 #ifdef ZFS_DEBUG
2502         if (db->db_blkid == DMU_SPILL_BLKID) {
2503                 ASSERT(dn->dn_phys->dn_flags & DNODE_FLAG_SPILL_BLKPTR);
2504                 ASSERT(!(BP_IS_HOLE(db->db_blkptr)) &&
2505                     db->db_blkptr == &dn->dn_phys->dn_spill);
2506         }
2507 #endif
2508 
2509         if (db->db_level == 0) {
2510                 mutex_enter(&dn->dn_mtx);
2511                 if (db->db_blkid > dn->dn_phys->dn_maxblkid &&
2512                     db->db_blkid != DMU_SPILL_BLKID)
2513                         dn->dn_phys->dn_maxblkid = db->db_blkid;
2514                 mutex_exit(&dn->dn_mtx);
2515 
2516                 if (dn->dn_type == DMU_OT_DNODE) {
2517                         dnode_phys_t *dnp = db->db.db_data;
2518                         for (i = db->db.db_size >> DNODE_SHIFT; i > 0;
2519                             i--, dnp++) {
2520                                 if (dnp->dn_type != DMU_OT_NONE)
2521                                         fill++;
2522                         }
2523                 } else {
2524                         fill = 1;
2525                 }
2526         } else {
2527                 blkptr_t *ibp = db->db.db_data;
2528                 ASSERT3U(db->db.db_size, ==, 1<<dn->dn_phys->dn_indblkshift);
2529                 for (i = db->db.db_size >> SPA_BLKPTRSHIFT; i > 0; i--, ibp++) {
2530                         if (BP_IS_HOLE(ibp))
2531                                 continue;
2532                         fill += ibp->blk_fill;
2533                 }
2534         }
2535         DB_DNODE_EXIT(db);
2536 
2537         bp->blk_fill = fill;
2538 
2539         mutex_exit(&db->db_mtx);
2540 }
2541 
2542 /*
2543  * The SPA will call this callback several times for each zio - once
2544  * for every physical child i/o (zio->io_phys_children times).  This
2545  * allows the DMU to monitor the progress of each logical i/o.  For example,
2546  * there may be 2 copies of an indirect block, or many fragments of a RAID-Z
2547  * block.  There may be a long delay before all copies/fragments are completed,
2548  * so this callback allows us to retire dirty space gradually, as the physical
2549  * i/os complete.
2550  */
2551 /* ARGSUSED */
2552 static void
2553 dbuf_write_physdone(zio_t *zio, arc_buf_t *buf, void *arg)
2554 {
2555         dmu_buf_impl_t *db = arg;
2556         objset_t *os = db->db_objset;
2557         dsl_pool_t *dp = dmu_objset_pool(os);
2558         dbuf_dirty_record_t *dr;
2559         int delta = 0;
2560 
2561         dr = db->db_data_pending;
2562         ASSERT3U(dr->dr_txg, ==, zio->io_txg);
2563 
2564         /*
2565          * The callback will be called io_phys_children times.  Retire one
2566          * portion of our dirty space each time we are called.  Any rounding
2567          * error will be cleaned up by dsl_pool_sync()'s call to
2568          * dsl_pool_undirty_space().
2569          */
2570         delta = dr->dr_accounted / zio->io_phys_children;
2571         dsl_pool_undirty_space(dp, delta, zio->io_txg);
2572 }
2573 
2574 /* ARGSUSED */
2575 static void
2576 dbuf_write_done(zio_t *zio, arc_buf_t *buf, void *vdb)
2577 {
2578         dmu_buf_impl_t *db = vdb;
2579         blkptr_t *bp = zio->io_bp;
2580         blkptr_t *bp_orig = &zio->io_bp_orig;
2581         uint64_t txg = zio->io_txg;
2582         dbuf_dirty_record_t **drp, *dr;
2583 
2584         ASSERT0(zio->io_error);
2585         ASSERT(db->db_blkptr == bp);
2586 
2587         /*
2588          * For nopwrites and rewrites we ensure that the bp matches our
2589          * original and bypass all the accounting.
2590          */
2591         if (zio->io_flags & (ZIO_FLAG_IO_REWRITE | ZIO_FLAG_NOPWRITE)) {
2592                 ASSERT(BP_EQUAL(bp, bp_orig));
2593         } else {
2594                 objset_t *os;
2595                 dsl_dataset_t *ds;
2596                 dmu_tx_t *tx;
2597 
2598                 DB_GET_OBJSET(&os, db);
2599                 ds = os->os_dsl_dataset;
2600                 tx = os->os_synctx;
2601 
2602                 (void) dsl_dataset_block_kill(ds, bp_orig, tx, B_TRUE);
2603                 dsl_dataset_block_born(ds, bp, tx);
2604         }
2605 
2606         mutex_enter(&db->db_mtx);
2607 
2608         DBUF_VERIFY(db);
2609 
2610         drp = &db->db_last_dirty;
2611         while ((dr = *drp) != db->db_data_pending)
2612                 drp = &dr->dr_next;
2613         ASSERT(!list_link_active(&dr->dr_dirty_node));
2614         ASSERT(dr->dr_txg == txg);
2615         ASSERT(dr->dr_dbuf == db);
2616         ASSERT(dr->dr_next == NULL);
2617         *drp = dr->dr_next;
2618 
2619 #ifdef ZFS_DEBUG
2620         if (db->db_blkid == DMU_SPILL_BLKID) {
2621                 dnode_t *dn;
2622 
2623                 DB_DNODE_ENTER(db);
2624                 dn = DB_DNODE(db);
2625                 ASSERT(dn->dn_phys->dn_flags & DNODE_FLAG_SPILL_BLKPTR);
2626                 ASSERT(!(BP_IS_HOLE(db->db_blkptr)) &&
2627                     db->db_blkptr == &dn->dn_phys->dn_spill);
2628                 DB_DNODE_EXIT(db);
2629         }
2630 #endif
2631 
2632         if (db->db_level == 0) {
2633                 ASSERT(db->db_blkid != DMU_BONUS_BLKID);
2634                 ASSERT(dr->dt.dl.dr_override_state == DR_NOT_OVERRIDDEN);
2635                 if (db->db_state != DB_NOFILL) {
2636                         if (dr->dt.dl.dr_data != db->db_buf)
2637                                 VERIFY(arc_buf_remove_ref(dr->dt.dl.dr_data,
2638                                     db));
2639                         else if (!arc_released(db->db_buf))
2640                                 arc_set_callback(db->db_buf, dbuf_do_evict, db);
2641                 }
2642         } else {
2643                 dnode_t *dn;
2644 
2645                 DB_DNODE_ENTER(db);
2646                 dn = DB_DNODE(db);
2647                 ASSERT(list_head(&dr->dt.di.dr_children) == NULL);
2648                 ASSERT3U(db->db.db_size, ==, 1<<dn->dn_phys->dn_indblkshift);
2649                 if (!BP_IS_HOLE(db->db_blkptr)) {
2650                         int epbs =
2651                             dn->dn_phys->dn_indblkshift - SPA_BLKPTRSHIFT;
2652                         ASSERT3U(BP_GET_LSIZE(db->db_blkptr), ==,
2653                             db->db.db_size);
2654                         ASSERT3U(dn->dn_phys->dn_maxblkid
2655                             >> (db->db_level * epbs), >=, db->db_blkid);
2656                         arc_set_callback(db->db_buf, dbuf_do_evict, db);
2657                 }
2658                 DB_DNODE_EXIT(db);
2659                 mutex_destroy(&dr->dt.di.dr_mtx);
2660                 list_destroy(&dr->dt.di.dr_children);
2661         }
2662         kmem_free(dr, sizeof (dbuf_dirty_record_t));
2663 
2664         cv_broadcast(&db->db_changed);
2665         ASSERT(db->db_dirtycnt > 0);
2666         db->db_dirtycnt -= 1;
2667         db->db_data_pending = NULL;
2668 
2669         dbuf_rele_and_unlock(db, (void *)(uintptr_t)txg);
2670 }
2671 
2672 static void
2673 dbuf_write_nofill_ready(zio_t *zio)
2674 {
2675         dbuf_write_ready(zio, NULL, zio->io_private);
2676 }
2677 
2678 static void
2679 dbuf_write_nofill_done(zio_t *zio)
2680 {
2681         dbuf_write_done(zio, NULL, zio->io_private);
2682 }
2683 
2684 static void
2685 dbuf_write_override_ready(zio_t *zio)
2686 {
2687         dbuf_dirty_record_t *dr = zio->io_private;
2688         dmu_buf_impl_t *db = dr->dr_dbuf;
2689 
2690         dbuf_write_ready(zio, NULL, db);
2691 }
2692 
2693 static void
2694 dbuf_write_override_done(zio_t *zio)
2695 {
2696         dbuf_dirty_record_t *dr = zio->io_private;
2697         dmu_buf_impl_t *db = dr->dr_dbuf;
2698         blkptr_t *obp = &dr->dt.dl.dr_overridden_by;
2699 
2700         mutex_enter(&db->db_mtx);
2701         if (!BP_EQUAL(zio->io_bp, obp)) {
2702                 if (!BP_IS_HOLE(obp))
2703                         dsl_free(spa_get_dsl(zio->io_spa), zio->io_txg, obp);
2704                 arc_release(dr->dt.dl.dr_data, db);
2705         }
2706         mutex_exit(&db->db_mtx);
2707 
2708         dbuf_write_done(zio, NULL, db);
2709 }
2710 
2711 /* Issue I/O to commit a dirty buffer to disk. */
2712 static void
2713 dbuf_write(dbuf_dirty_record_t *dr, arc_buf_t *data, dmu_tx_t *tx)
2714 {
2715         dmu_buf_impl_t *db = dr->dr_dbuf;
2716         dnode_t *dn;
2717         objset_t *os;
2718         dmu_buf_impl_t *parent = db->db_parent;
2719         uint64_t txg = tx->tx_txg;
2720         zbookmark_t zb;
2721         zio_prop_t zp;
2722         zio_t *zio;
2723         int wp_flag = 0;
2724 
2725         DB_DNODE_ENTER(db);
2726         dn = DB_DNODE(db);
2727         os = dn->dn_objset;
2728 
2729         if (db->db_state != DB_NOFILL) {
2730                 if (db->db_level > 0 || dn->dn_type == DMU_OT_DNODE) {
2731                         /*
2732                          * Private object buffers are released here rather
2733                          * than in dbuf_dirty() since they are only modified
2734                          * in the syncing context and we don't want the
2735                          * overhead of making multiple copies of the data.
2736                          */
2737                         if (BP_IS_HOLE(db->db_blkptr)) {
2738                                 arc_buf_thaw(data);
2739                         } else {
2740                                 dbuf_release_bp(db);
2741                         }
2742                 }
2743         }
2744 
2745         if (parent != dn->dn_dbuf) {
2746                 /* Our parent is an indirect block. */
2747                 /* We have a dirty parent that has been scheduled for write. */
2748                 ASSERT(parent && parent->db_data_pending);
2749                 /* Our parent's buffer is one level closer to the dnode. */
2750                 ASSERT(db->db_level == parent->db_level-1);
2751                 /*
2752                  * We're about to modify our parent's db_data by modifying
2753                  * our block pointer, so the parent must be released.
2754                  */
2755                 ASSERT(arc_released(parent->db_buf));
2756                 zio = parent->db_data_pending->dr_zio;
2757         } else {
2758                 /* Our parent is the dnode itself. */
2759                 ASSERT((db->db_level == dn->dn_phys->dn_nlevels-1 &&
2760                     db->db_blkid != DMU_SPILL_BLKID) ||
2761                     (db->db_blkid == DMU_SPILL_BLKID && db->db_level == 0));
2762                 if (db->db_blkid != DMU_SPILL_BLKID)
2763                         ASSERT3P(db->db_blkptr, ==,
2764                             &dn->dn_phys->dn_blkptr[db->db_blkid]);
2765                 zio = dn->dn_zio;
2766         }
2767 
2768         ASSERT(db->db_level == 0 || data == db->db_buf);
2769         ASSERT3U(db->db_blkptr->blk_birth, <=, txg);
2770         ASSERT(zio);
2771 
2772         SET_BOOKMARK(&zb, os->os_dsl_dataset ?
2773             os->os_dsl_dataset->ds_object : DMU_META_OBJSET,
2774             db->db.db_object, db->db_level, db->db_blkid);
2775 
2776         if (db->db_blkid == DMU_SPILL_BLKID)
2777                 wp_flag = WP_SPILL;
2778         wp_flag |= (db->db_state == DB_NOFILL) ? WP_NOFILL : 0;
2779 
2780         dmu_write_policy(os, dn, db->db_level, wp_flag, &zp);
2781         DB_DNODE_EXIT(db);
2782 
2783         if (db->db_level == 0 && dr->dt.dl.dr_override_state == DR_OVERRIDDEN) {
2784                 ASSERT(db->db_state != DB_NOFILL);
2785                 dr->dr_zio = zio_write(zio, os->os_spa, txg,
2786                     db->db_blkptr, data->b_data, arc_buf_size(data), &zp,
2787                     dbuf_write_override_ready, NULL, dbuf_write_override_done,
2788                     dr, ZIO_PRIORITY_ASYNC_WRITE, ZIO_FLAG_MUSTSUCCEED, &zb);
2789                 mutex_enter(&db->db_mtx);
2790                 dr->dt.dl.dr_override_state = DR_NOT_OVERRIDDEN;
2791                 zio_write_override(dr->dr_zio, &dr->dt.dl.dr_overridden_by,
2792                     dr->dt.dl.dr_copies, dr->dt.dl.dr_nopwrite);
2793                 mutex_exit(&db->db_mtx);
2794         } else if (db->db_state == DB_NOFILL) {
2795                 ASSERT(zp.zp_checksum == ZIO_CHECKSUM_OFF ||
2796                     zp.zp_checksum == ZIO_CHECKSUM_NOPARITY);
2797                 dr->dr_zio = zio_write(zio, os->os_spa, txg,
2798                     db->db_blkptr, NULL, db->db.db_size, &zp,
2799                     dbuf_write_nofill_ready, NULL, dbuf_write_nofill_done, db,
2800                     ZIO_PRIORITY_ASYNC_WRITE,
2801                     ZIO_FLAG_MUSTSUCCEED | ZIO_FLAG_NODATA, &zb);
2802         } else {
2803                 ASSERT(arc_released(data));
2804                 dr->dr_zio = arc_write(zio, os->os_spa, txg,
2805                     db->db_blkptr, data, DBUF_IS_L2CACHEABLE(db),
2806                     DBUF_IS_L2COMPRESSIBLE(db), &zp, dbuf_write_ready,
2807                     dbuf_write_physdone, dbuf_write_done, db,
2808                     ZIO_PRIORITY_ASYNC_WRITE, ZIO_FLAG_MUSTSUCCEED, &zb);
2809         }
2810 }