ctree.c

// SPDX-License-Identifier: GPL-2.0
/*
 * Copyright (C) 2007,2008 Oracle.  All rights reserved.
 */

#include <linux/sched.h>
#include <linux/slab.h>
#include <linux/rbtree.h>
#include <linux/mm.h>
#include "ctree.h"
#include "disk-io.h"
#include "transaction.h"
#include "print-tree.h"
#include "locking.h"
#include "volumes.h"
#include "qgroup.h"
#include "tree-mod-log.h"
#include "apfs_trace.h"

static int split_node(struct apfs_trans_handle *trans, struct apfs_root
		      *root, struct apfs_path *path, int level);
static int split_leaf(struct apfs_trans_handle *trans, struct apfs_root *root,
		      const struct apfs_key *ins_key, struct apfs_path *path,
		      int data_size, int extend);
static int push_node_left(struct apfs_trans_handle *trans,
			  struct extent_buffer *dst,
			  struct extent_buffer *src, int empty);
static int balance_node_right(struct apfs_trans_handle *trans,
			      struct extent_buffer *dst_buf,
			      struct extent_buffer *src_buf);
static void del_ptr(struct apfs_root *root, struct apfs_path *path,
		    int level, int slot);

static const struct apfs_csums {
	u16		size;
	const char	name[10];
	const char	driver[12];
} apfs_csums[] = {
	[APFS_CSUM_TYPE_CRC32] = { .size = 4, .name = "crc32c" },
	[APFS_CSUM_TYPE_XXHASH] = { .size = 8, .name = "xxhash64" },
	[APFS_CSUM_TYPE_SHA256] = { .size = 32, .name = "sha256" },
	[APFS_CSUM_TYPE_BLAKE2] = { .size = 32, .name = "blake2b",
				     .driver = "blake2b-256" },
};

int apfs_super_csum_size(const struct apfs_super_block *s)
{
	u16 t = apfs_super_csum_type(s);
	/*
	 * csum type is validated at mount time
	 */
	return apfs_csums[t].size;
}

const char *apfs_super_csum_name(u16 csum_type)
{
	/* csum type is validated at mount time */
	return apfs_csums[csum_type].name;
}

/*
 * Return driver name if defined, otherwise the name that's also a valid driver
 * name
 */
const char *apfs_super_csum_driver(u16 csum_type)
{
	/* csum type is validated at mount time */
	return apfs_csums[csum_type].driver[0] ?
		apfs_csums[csum_type].driver :
		apfs_csums[csum_type].name;
}

size_t __attribute_const__ apfs_get_num_csums(void)
{
	return ARRAY_SIZE(apfs_csums);
}

struct apfs_path *apfs_alloc_path(void)
{
	return kmem_cache_zalloc(apfs_path_cachep, GFP_NOFS);
}

/* this also releases the path */
void apfs_free_path(struct apfs_path *p)
{
	if (!p)
		return;
	apfs_release_path(p);
	kmem_cache_free(apfs_path_cachep, p);
}

/*
 * path release drops references on the extent buffers in the path
 * and it drops any locks held by this path
 *
 * It is safe to call this on paths that no locks or extent buffers held.
 */
noinline void apfs_release_path(struct apfs_path *p)
{
	int i;

	for (i = 0; i < APFS_MAX_LEVEL; i++) {
		p->slots[i] = 0;
		if (!p->nodes[i])
			continue;
		if (p->locks[i]) {
			apfs_tree_unlock_rw(p->nodes[i], p->locks[i]);
			p->locks[i] = 0;
		}
		free_extent_buffer(p->nodes[i]);
		p->nodes[i] = NULL;
	}
}

/*
 * safely gets a reference on the root node of a tree.  A lock
 * is not taken, so a concurrent writer may put a different node
 * at the root of the tree.  See apfs_lock_root_node for the
 * looping required.
 *
 * The extent buffer returned by this has a reference taken, so
 * it won't disappear.  It may stop being the root of the tree
 * at any time because there are no locks held.
 */
struct extent_buffer *apfs_root_node(struct apfs_root *root)
{
	struct extent_buffer *eb;

	while (1) {
		rcu_read_lock();
		eb = rcu_dereference(root->node);

		/*
		 * RCU really hurts here, we could free up the root node because
		 * it was COWed but we may not get the new root node yet so do
		 * the inc_not_zero dance and if it doesn't work then
		 * synchronize_rcu and try again.
		 */
		if (atomic_inc_not_zero(&eb->refs)) {
			rcu_read_unlock();
			break;
		}
		rcu_read_unlock();
		synchronize_rcu();
	}
	return eb;
}

/*
 * Cowonly root (not-shareable trees, everything not subvolume or reloc roots),
 * just get put onto a simple dirty list.  Transaction walks this list to make
 * sure they get properly updated on disk.
 */
static void add_root_to_dirty_list(struct apfs_root *root)
{
	struct apfs_fs_info *fs_info = root->fs_info;

	if (test_bit(APFS_ROOT_DIRTY, &root->state) ||
	    !test_bit(APFS_ROOT_TRACK_DIRTY, &root->state))
		return;

	spin_lock(&fs_info->trans_lock);
	if (!test_and_set_bit(APFS_ROOT_DIRTY, &root->state)) {
		/* Want the extent tree to be the last on the list */
		if (root->root_key.objectid == APFS_EXTENT_TREE_OBJECTID)
			list_move_tail(&root->dirty_list,
				       &fs_info->dirty_cowonly_roots);
		else
			list_move(&root->dirty_list,
				  &fs_info->dirty_cowonly_roots);
	}
	spin_unlock(&fs_info->trans_lock);
}

/*
 * used by snapshot creation to make a copy of a root for a tree with
 * a given objectid.  The buffer with the new root node is returned in
 * cow_ret, and this func returns zero on success or a negative error code.
 */
int apfs_copy_root(struct apfs_trans_handle *trans,
		      struct apfs_root *root,
		      struct extent_buffer *buf,
		      struct extent_buffer **cow_ret, u64 new_root_objectid)
{
	struct apfs_fs_info *fs_info = root->fs_info;
	struct extent_buffer *cow;
	int ret = 0;
	int level;
	struct apfs_disk_key disk_key;

	WARN_ON(test_bit(APFS_ROOT_SHAREABLE, &root->state) &&
		trans->transid != fs_info->running_transaction->transid);
	WARN_ON(test_bit(APFS_ROOT_SHAREABLE, &root->state) &&
		trans->transid != root->last_trans);

	level = apfs_header_level(buf);
	if (level == 0)
		apfs_item_key(buf, &disk_key, 0);
	else
		apfs_node_key(buf, &disk_key, 0);

	cow = apfs_alloc_tree_block(trans, root, 0, new_root_objectid,
				     &disk_key, level, buf->start, 0,
				     APFS_NESTING_NEW_ROOT);
	if (IS_ERR(cow))
		return PTR_ERR(cow);

	copy_extent_buffer_full(cow, buf);
	apfs_set_header_bytenr(cow, cow->start);
	apfs_set_header_generation(cow, trans->transid);
	apfs_set_header_backref_rev(cow, APFS_MIXED_BACKREF_REV);
	apfs_clear_header_flag(cow, APFS_HEADER_FLAG_WRITTEN |
				     APFS_HEADER_FLAG_RELOC);
	if (new_root_objectid == APFS_TREE_RELOC_OBJECTID)
		apfs_set_header_flag(cow, APFS_HEADER_FLAG_RELOC);
	else
		apfs_set_header_owner(cow, new_root_objectid);

	write_extent_buffer_fsid(cow, fs_info->fs_devices->metadata_uuid);

	WARN_ON(apfs_header_generation(buf) > trans->transid);
	if (new_root_objectid == APFS_TREE_RELOC_OBJECTID)
		ret = apfs_inc_ref(trans, root, cow, 1);
	else
		ret = apfs_inc_ref(trans, root, cow, 0);
	if (ret) {
		apfs_tree_unlock(cow);
		free_extent_buffer(cow);
		apfs_abort_transaction(trans, ret);
		return ret;
	}

	apfs_mark_buffer_dirty(cow);
	*cow_ret = cow;
	return 0;
}

/*
 * check if the tree block can be shared by multiple trees
 */
int apfs_block_can_be_shared(struct apfs_root *root,
			      struct extent_buffer *buf)
{
	/*
	 * Tree blocks not in shareable trees and tree roots are never shared.
	 * If a block was allocated after the last snapshot and the block was
	 * not allocated by tree relocation, we know the block is not shared.
	 */
	if (test_bit(APFS_ROOT_SHAREABLE, &root->state) &&
	    buf != root->node && buf != root->commit_root &&
	    (apfs_header_generation(buf) <=
	     apfs_root_last_snapshot(&root->root_item) ||
	     apfs_header_flag(buf, APFS_HEADER_FLAG_RELOC)))
		return 1;

	return 0;
}

static noinline int update_ref_for_cow(struct apfs_trans_handle *trans,
				       struct apfs_root *root,
				       struct extent_buffer *buf,
				       struct extent_buffer *cow,
				       int *last_ref)
{
	struct apfs_fs_info *fs_info = root->fs_info;
	u64 refs;
	u64 owner;
	u64 flags;
	u64 new_flags = 0;
	int ret;

	/*
	 * Backrefs update rules:
	 *
	 * Always use full backrefs for extent pointers in tree block
	 * allocated by tree relocation.
	 *
	 * If a shared tree block is no longer referenced by its owner
	 * tree (apfs_header_owner(buf) == root->root_key.objectid),
	 * use full backrefs for extent pointers in tree block.
	 *
	 * If a tree block is been relocating
	 * (root->root_key.objectid == APFS_TREE_RELOC_OBJECTID),
	 * use full backrefs for extent pointers in tree block.
	 * The reason for this is some operations (such as drop tree)
	 * are only allowed for blocks use full backrefs.
	 */

	if (apfs_block_can_be_shared(root, buf)) {
		ret = apfs_lookup_extent_info(trans, fs_info, buf->start,
					       apfs_header_level(buf), 1,
					       &refs, &flags);
		if (ret)
			return ret;
		if (refs == 0) {
			ret = -EROFS;
			apfs_handle_fs_error(fs_info, ret, NULL);
			return ret;
		}
	} else {
		refs = 1;
		if (root->root_key.objectid == APFS_TREE_RELOC_OBJECTID ||
		    apfs_header_backref_rev(buf) < APFS_MIXED_BACKREF_REV)
			flags = APFS_BLOCK_FLAG_FULL_BACKREF;
		else
			flags = 0;
	}

	owner = apfs_header_owner(buf);
	BUG_ON(owner == APFS_TREE_RELOC_OBJECTID &&
	       !(flags & APFS_BLOCK_FLAG_FULL_BACKREF));

	if (refs > 1) {
		if ((owner == root->root_key.objectid ||
		     root->root_key.objectid == APFS_TREE_RELOC_OBJECTID) &&
		    !(flags & APFS_BLOCK_FLAG_FULL_BACKREF)) {
			ret = apfs_inc_ref(trans, root, buf, 1);
			if (ret)
				return ret;

			if (root->root_key.objectid ==
			    APFS_TREE_RELOC_OBJECTID) {
				ret = apfs_dec_ref(trans, root, buf, 0);
				if (ret)
					return ret;
				ret = apfs_inc_ref(trans, root, cow, 1);
				if (ret)
					return ret;
			}
			new_flags |= APFS_BLOCK_FLAG_FULL_BACKREF;
		} else {

			if (root->root_key.objectid ==
			    APFS_TREE_RELOC_OBJECTID)
				ret = apfs_inc_ref(trans, root, cow, 1);
			else
				ret = apfs_inc_ref(trans, root, cow, 0);
			if (ret)
				return ret;
		}
		if (new_flags != 0) {
			int level = apfs_header_level(buf);

			ret = apfs_set_disk_extent_flags(trans, buf,
							  new_flags, level, 0);
			if (ret)
				return ret;
		}
	} else {
		if (flags & APFS_BLOCK_FLAG_FULL_BACKREF) {
			if (root->root_key.objectid ==
			    APFS_TREE_RELOC_OBJECTID)
				ret = apfs_inc_ref(trans, root, cow, 1);
			else
				ret = apfs_inc_ref(trans, root, cow, 0);
			if (ret)
				return ret;
			ret = apfs_dec_ref(trans, root, buf, 1);
			if (ret)
				return ret;
		}
		apfs_clean_tree_block(buf);
		*last_ref = 1;
	}
	return 0;
}

/*
 * does the dirty work in cow of a single block.  The parent block (if
 * supplied) is updated to point to the new cow copy.  The new buffer is marked
 * dirty and returned locked.  If you modify the block it needs to be marked
 * dirty again.
 *
 * search_start -- an allocation hint for the new block
 *
 * empty_size -- a hint that you plan on doing more cow.  This is the size in
 * bytes the allocator should try to find free next to the block it returns.
 * This is just a hint and may be ignored by the allocator.
 */
static noinline int __apfs_cow_block(struct apfs_trans_handle *trans,
			     struct apfs_root *root,
			     struct extent_buffer *buf,
			     struct extent_buffer *parent, int parent_slot,
			     struct extent_buffer **cow_ret,
			     u64 search_start, u64 empty_size,
			     enum apfs_lock_nesting nest)
{
	struct apfs_fs_info *fs_info = root->fs_info;
	struct apfs_disk_key disk_key;
	struct extent_buffer *cow;
	int level, ret;
	int last_ref = 0;
	int unlock_orig = 0;
	u64 parent_start = 0;

	if (*cow_ret == buf)
		unlock_orig = 1;

	apfs_assert_tree_locked(buf);

	WARN_ON(test_bit(APFS_ROOT_SHAREABLE, &root->state) &&
		trans->transid != fs_info->running_transaction->transid);
	WARN_ON(test_bit(APFS_ROOT_SHAREABLE, &root->state) &&
		trans->transid != root->last_trans);

	level = apfs_header_level(buf);

	if (level == 0)
		apfs_item_key(buf, &disk_key, 0);
	else
		apfs_node_key(buf, &disk_key, 0);

	if ((root->root_key.objectid == APFS_TREE_RELOC_OBJECTID) && parent)
		parent_start = parent->start;

	cow = apfs_alloc_tree_block(trans, root, parent_start,
				     root->root_key.objectid, &disk_key, level,
				     search_start, empty_size, nest);
	if (IS_ERR(cow))
		return PTR_ERR(cow);

	/* cow is set to blocking by apfs_init_new_buffer */

	copy_extent_buffer_full(cow, buf);
	apfs_set_header_bytenr(cow, cow->start);
	apfs_set_header_generation(cow, trans->transid);
	apfs_set_header_backref_rev(cow, APFS_MIXED_BACKREF_REV);
	apfs_clear_header_flag(cow, APFS_HEADER_FLAG_WRITTEN |
				     APFS_HEADER_FLAG_RELOC);
	if (root->root_key.objectid == APFS_TREE_RELOC_OBJECTID)
		apfs_set_header_flag(cow, APFS_HEADER_FLAG_RELOC);
	else
		apfs_set_header_owner(cow, root->root_key.objectid);

	write_extent_buffer_fsid(cow, fs_info->fs_devices->metadata_uuid);

	ret = update_ref_for_cow(trans, root, buf, cow, &last_ref);
	if (ret) {
		apfs_tree_unlock(cow);
		free_extent_buffer(cow);
		apfs_abort_transaction(trans, ret);
		return ret;
	}

	if (test_bit(APFS_ROOT_SHAREABLE, &root->state)) {
		ret = apfs_reloc_cow_block(trans, root, buf, cow);
		if (ret) {
			apfs_tree_unlock(cow);
			free_extent_buffer(cow);
			apfs_abort_transaction(trans, ret);
			return ret;
		}
	}

	if (buf == root->node) {
		WARN_ON(parent && parent != buf);
		if (root->root_key.objectid == APFS_TREE_RELOC_OBJECTID ||
		    apfs_header_backref_rev(buf) < APFS_MIXED_BACKREF_REV)
			parent_start = buf->start;

		atomic_inc(&cow->refs);
		ret = apfs_tree_mod_log_insert_root(root->node, cow, true);
		BUG_ON(ret < 0);
		rcu_assign_pointer(root->node, cow);

		apfs_free_tree_block(trans, root, buf, parent_start,
				      last_ref);
		free_extent_buffer(buf);
		add_root_to_dirty_list(root);
	} else {
		WARN_ON(trans->transid != apfs_header_generation(parent));
		apfs_tree_mod_log_insert_key(parent, parent_slot,
					      APFS_MOD_LOG_KEY_REPLACE, GFP_NOFS);
		apfs_set_node_blockptr(parent, parent_slot,
					cow->start);
		apfs_set_node_ptr_generation(parent, parent_slot,
					      trans->transid);
		apfs_mark_buffer_dirty(parent);
		if (last_ref) {
			ret = apfs_tree_mod_log_free_eb(buf);
			if (ret) {
				apfs_tree_unlock(cow);
				free_extent_buffer(cow);
				apfs_abort_transaction(trans, ret);
				return ret;
			}
		}
		apfs_free_tree_block(trans, root, buf, parent_start,
				      last_ref);
	}
	if (unlock_orig)
		apfs_tree_unlock(buf);
	free_extent_buffer_stale(buf);
	apfs_mark_buffer_dirty(cow);
	*cow_ret = cow;
	return 0;
}

static inline int should_cow_block(struct apfs_trans_handle *trans,
				   struct apfs_root *root,
				   struct extent_buffer *buf)
{
	if (apfs_is_testing(root->fs_info))
		return 0;

	/* Ensure we can see the FORCE_COW bit */
	smp_mb__before_atomic();

	/*
	 * We do not need to cow a block if
	 * 1) this block is not created or changed in this transaction;
	 * 2) this block does not belong to TREE_RELOC tree;
	 * 3) the root is not forced COW.
	 *
	 * What is forced COW:
	 *    when we create snapshot during committing the transaction,
	 *    after we've finished copying src root, we must COW the shared
	 *    block to ensure the metadata consistency.
	 */
	if (apfs_header_generation(buf) == trans->transid &&
	    !apfs_header_flag(buf, APFS_HEADER_FLAG_WRITTEN) &&
	    !(root->root_key.objectid != APFS_TREE_RELOC_OBJECTID &&
	      apfs_header_flag(buf, APFS_HEADER_FLAG_RELOC)) &&
	    !test_bit(APFS_ROOT_FORCE_COW, &root->state))
		return 0;
	return 1;
}

/*
 * cows a single block, see __apfs_cow_block for the real work.
 * This version of it has extra checks so that a block isn't COWed more than
 * once per transaction, as long as it hasn't been written yet
 */
noinline int apfs_cow_block(struct apfs_trans_handle *trans,
		    struct apfs_root *root, struct extent_buffer *buf,
		    struct extent_buffer *parent, int parent_slot,
		    struct extent_buffer **cow_ret,
		    enum apfs_lock_nesting nest)
{
	struct apfs_fs_info *fs_info = root->fs_info;
	u64 search_start;
	int ret;

	if (test_bit(APFS_ROOT_DELETING, &root->state))
		apfs_err(fs_info,
			"COW'ing blocks on a fs root that's being dropped");

	if (trans->transaction != fs_info->running_transaction)
		WARN(1, KERN_CRIT "trans %llu running %llu\n",
		       trans->transid,
		       fs_info->running_transaction->transid);

	if (trans->transid != fs_info->generation)
		WARN(1, KERN_CRIT "trans %llu running %llu\n",
		       trans->transid, fs_info->generation);

	if (!should_cow_block(trans, root, buf)) {
		*cow_ret = buf;
		return 0;
	}

	search_start = buf->start & ~((u64)SZ_1G - 1);

	/*
	 * Before CoWing this block for later modification, check if it's
	 * the subtree root and do the delayed subtree trace if needed.
	 *
	 * Also We don't care about the error, as it's handled internally.
	 */
	apfs_qgroup_trace_subtree_after_cow(trans, root, buf);
	ret = __apfs_cow_block(trans, root, buf, parent,
				 parent_slot, cow_ret, search_start, 0, nest);

	trace_apfs_cow_block(root, buf, *cow_ret);

	return ret;
}
ALLOW_ERROR_INJECTION(apfs_cow_block, ERRNO);

/*
 * helper function for defrag to decide if two blocks pointed to by a
 * node are actually close by
 */
static int close_blocks(u64 blocknr, u64 other, u32 blocksize)
{
	if (blocknr < other && other - (blocknr + blocksize) < 32768)
		return 1;
	if (blocknr > other && blocknr - (other + blocksize) < 32768)
		return 1;
	return 0;
}

/*
 * Compare two keys, on little-endian the disk order is same as CPU order and
 * we can avoid the conversion.
 */
static int comp_keys(const struct extent_buffer *eb,
		     const struct apfs_disk_key *disk_key,
		     const struct apfs_key *k2)
{
	struct apfs_key k1;

	apfs_disk_key_to_cpu(eb, &k1, disk_key);

	return apfs_comp_cpu_keys(eb, &k1, k2);
}

static inline int apfs_comp_str(const char *s1, const char *s2)
{
	trace_printk("s1 %s s2 %s res\n", s1 ? s1 : "NULL" ,
	       s2 ? s2 : "NULL");
	if (!s1 && !s2)
		return 0;
	else if (!s1 && s2)
		return -1;
	else if (s1 && !s2)
		return 1;
	trace_printk("s1 %s s2 %s res %d\n", s1 ,s2, strcmp(s1, s2));
	return strcmp(s1, s2);
}

static inline int apfs_comp_casestr(const char *s1, const char *s2)
{
	if (!s1 && !s2)
		return 0;
	else if (!s1 && s2)
		return -1;
	else if (s1 && !s2)
		return 1;
	return strcmp(s1, s2);
}

static noinline int
apfs_comp_fs_keys(const struct apfs_key *k1, const struct apfs_key *k2,
		  bool hashed)
{
	if (k1->oid != k2->oid)
		return k1->oid < k2->oid ? -1 : 1;

	if (k1->type != k2->type)
		return k1->type < k2->type ? -1 : 1;

	if (k1->type == APFS_TYPE_DIR_REC) {
		if (!hashed)
			return apfs_comp_str(k1->name, k2->name);
		if (k1->hash == k2->hash)
			return apfs_comp_str(k1->name, k2->name);
		return k1->hash < k2->hash ? -1 : 1;
	} else if (k1->type == APFS_TYPE_SNAP_NAME ||
		   k1->type == APFS_TYPE_XATTR) {
		return apfs_comp_str(k1->name, k2->name);
	}

	if (k1->offset < k2->offset)
		return -1;
	if (k1->offset > k2->offset)
		return 1;
	return 0;
}
/*
 * compare two keys in a memcmp fashion
 * One of k1/k2 must be valid cause we reply on the key->type to decide how to
 * compare.
 */
static noinline int
apfs_comp_normal_keys(const struct apfs_key *k1, const struct apfs_key *k2)

{
	/* type is on high bits */
	if (k1->type != k2->type)
		return k1->type < k2->type ? -1 : 1;
	if (k1->id != k2->id)
		return k1->id < k2->id ? -1 : 1;
	if (k1->offset != k2->offset)
		return k1->offset < k2->offset ? -1 : 1;

	return 0;
}

/*
 * same as comp_keys only with two apfs_key's
 */
int __pure apfs_comp_cpu_keys(const struct extent_buffer *eb,
			      const struct apfs_key *k1,
			      const struct apfs_key *k2)
{
	if (!apfs_is_fs_node(eb))
		return apfs_comp_normal_keys(k1, k2);

	return apfs_comp_fs_keys(k1, k2,
		apfs_is_normalization_insensitive(eb->fs_info->__super_copy));

}

/*
 * this is used by the defrag code to go through all the
 * leaves pointed to by a node and reallocate them so that
 * disk order is close to key order
 */
int apfs_realloc_node(struct apfs_trans_handle *trans,
		       struct apfs_root *root, struct extent_buffer *parent,
		       int start_slot, u64 *last_ret,
		       struct apfs_key *progress)
{
	return 0;
}

/*
 * search for key in the extent_buffer.  The items start at offset p,
 * and they are item_size apart.  There are 'max' items in p.
 *
 * the slot in the array is returned via slot, and it points to
 * the place where you would insert key if it is not found in
 * the array.
 *
 * slot may point to max if the key is bigger than all of the keys
 */
static noinline int generic_bin_search(struct extent_buffer *eb,
				       const struct apfs_key *key,
				       int max, int *slot)
{
	int low = 0;
	int high = max;
	int ret;

	if (low > high) {
		apfs_err(eb->fs_info,
		 "%s: low (%d) > high (%d) eb %llu owner %llu level %d",
			  __func__, low, high, eb->start,
			  apfs_header_owner(eb), apfs_header_level(eb));
		return -EINVAL;
	}

	while (low < high) {
		struct apfs_key tmp = {};
		int mid;

		mid = (low + high) / 2;

		apfs_item_key_to_cpu(eb, &tmp, mid);

		ret = apfs_comp_cpu_keys(eb, &tmp, key);
//		trace_printk("low %d mid %d high %d ret: %d\n", low, mid, high, ret);
//		apfs_print_key_raw(eb, &tmp);
//		trace_printk(" comp ");
//		apfs_print_key_raw(eb, key);
//		trace_printk("\n");

		if (ret < 0)
			low = mid + 1;
		else if (ret > 0)
			high = mid;
		else {
			*slot = mid;
			return 0;
		}
	}
	*slot = low;
	return 1;
}

/*
 * simple bin_search frontend that does the right thing for
 * leaves vs nodes
 */
int apfs_bin_search(struct extent_buffer *eb, const struct apfs_key *key,
		     int *slot)
{
	return generic_bin_search(eb, key, apfs_header_nritems(eb), slot);
}

static void root_add_used(struct apfs_root *root, u32 size)
{
	spin_lock(&root->accounting_lock);
	apfs_set_root_used(&root->root_item,
			    apfs_root_used(&root->root_item) + size);
	spin_unlock(&root->accounting_lock);
}

static void root_sub_used(struct apfs_root *root, u32 size)
{
	spin_lock(&root->accounting_lock);
	apfs_set_root_used(&root->root_item,
			    apfs_root_used(&root->root_item) - size);
	spin_unlock(&root->accounting_lock);
}

/* given a node and slot number, this reads the blocks it points to.  The
 * extent buffer is returned with a reference taken (but unlocked).
 */
struct extent_buffer *apfs_read_node_slot(struct extent_buffer *parent,
					   int slot)
{
	int level = apfs_header_level(parent);
	struct extent_buffer *eb;
	struct apfs_key first_key = {};

	if (slot < 0 || slot >= apfs_header_nritems(parent))
		return ERR_PTR(-ENOENT);

	BUG_ON(level == 0);

	apfs_node_key_to_cpu(parent, &first_key, slot);
	eb = read_tree_block(parent->fs_info, apfs_node_blockptr(parent, slot),
			     apfs_header_owner(parent),
			     apfs_node_ptr_generation(parent, slot),
			     level - 1, &first_key);
	if (!IS_ERR(eb) && !extent_buffer_uptodate(eb)) {
		free_extent_buffer(eb);
		eb = ERR_PTR(-EIO);
	}

	return eb;
}

/*
 * node level balancing, used to make sure nodes are in proper order for
 * item deletion.  We balance from the top down, so we have to make sure
 * that a deletion won't leave an node completely empty later on.
 */
static noinline int balance_level(struct apfs_trans_handle *trans,
			 struct apfs_root *root,
			 struct apfs_path *path, int level)
{
	struct apfs_fs_info *fs_info = root->fs_info;
	struct extent_buffer *right = NULL;
	struct extent_buffer *mid;
	struct extent_buffer *left = NULL;
	struct extent_buffer *parent = NULL;
	int ret = 0;
	int wret;
	int pslot;
	int orig_slot = path->slots[level];
	u64 orig_ptr;

	ASSERT(level > 0);

	mid = path->nodes[level];

	WARN_ON(path->locks[level] != APFS_WRITE_LOCK);
	WARN_ON(apfs_header_generation(mid) != trans->transid);

	orig_ptr = apfs_node_blockptr(mid, orig_slot);

	if (level < APFS_MAX_LEVEL - 1) {
		parent = path->nodes[level + 1];
		pslot = path->slots[level + 1];
	}

	/*
	 * deal with the case where there is only one pointer in the root
	 * by promoting the node below to a root
	 */
	if (!parent) {
		struct extent_buffer *child;

		if (apfs_header_nritems(mid) != 1)
			return 0;

		/* promote the child to a root */
		child = apfs_read_node_slot(mid, 0);
		if (IS_ERR(child)) {
			ret = PTR_ERR(child);
			apfs_handle_fs_error(fs_info, ret, NULL);
			goto enospc;
		}

		apfs_tree_lock(child);
		ret = apfs_cow_block(trans, root, child, mid, 0, &child,
				      APFS_NESTING_COW);
		if (ret) {
			apfs_tree_unlock(child);
			free_extent_buffer(child);
			goto enospc;
		}

		ret = apfs_tree_mod_log_insert_root(root->node, child, true);
		BUG_ON(ret < 0);
		rcu_assign_pointer(root->node, child);

		add_root_to_dirty_list(root);
		apfs_tree_unlock(child);

		path->locks[level] = 0;
		path->nodes[level] = NULL;
		apfs_clean_tree_block(mid);
		apfs_tree_unlock(mid);
		/* once for the path */
		free_extent_buffer(mid);

		root_sub_used(root, mid->len);
		apfs_free_tree_block(trans, root, mid, 0, 1);
		/* once for the root ptr */
		free_extent_buffer_stale(mid);
		return 0;
	}
	if (apfs_header_nritems(mid) >
	    APFS_NODEPTRS_PER_BLOCK(fs_info) / 4)
		return 0;

	left = apfs_read_node_slot(parent, pslot - 1);
	if (IS_ERR(left))
		left = NULL;

	if (left) {
		__apfs_tree_lock(left, APFS_NESTING_LEFT);
		wret = apfs_cow_block(trans, root, left,
				       parent, pslot - 1, &left,
				       APFS_NESTING_LEFT_COW);
		if (wret) {
			ret = wret;
			goto enospc;
		}
	}

	right = apfs_read_node_slot(parent, pslot + 1);
	if (IS_ERR(right))
		right = NULL;

	if (right) {
		__apfs_tree_lock(right, APFS_NESTING_RIGHT);
		wret = apfs_cow_block(trans, root, right,
				       parent, pslot + 1, &right,
				       APFS_NESTING_RIGHT_COW);
		if (wret) {
			ret = wret;
			goto enospc;
		}
	}

	/* first, try to make some room in the middle buffer */
	if (left) {
		orig_slot += apfs_header_nritems(left);
		wret = push_node_left(trans, left, mid, 1);
		if (wret < 0)
			ret = wret;
	}

	/*
	 * then try to empty the right most buffer into the middle
	 */
	if (right) {
		wret = push_node_left(trans, mid, right, 1);
		if (wret < 0 && wret != -ENOSPC)
			ret = wret;
		if (apfs_header_nritems(right) == 0) {
			apfs_clean_tree_block(right);
			apfs_tree_unlock(right);
			del_ptr(root, path, level + 1, pslot + 1);
			root_sub_used(root, right->len);
			apfs_free_tree_block(trans, root, right, 0, 1);
			free_extent_buffer_stale(right);
			right = NULL;
		} else {
			struct apfs_disk_key right_key;
			apfs_node_key(right, &right_key, 0);
			ret = apfs_tree_mod_log_insert_key(parent, pslot + 1,
					APFS_MOD_LOG_KEY_REPLACE, GFP_NOFS);
			BUG_ON(ret < 0);
			apfs_set_node_key(parent, &right_key, pslot + 1);
			apfs_mark_buffer_dirty(parent);
		}
	}
	if (apfs_header_nritems(mid) == 1) {
		/*
		 * we're not allowed to leave a node with one item in the
		 * tree during a delete.  A deletion from lower in the tree
		 * could try to delete the only pointer in this node.
		 * So, pull some keys from the left.
		 * There has to be a left pointer at this point because
		 * otherwise we would have pulled some pointers from the
		 * right
		 */
		if (!left) {
			ret = -EROFS;
			apfs_handle_fs_error(fs_info, ret, NULL);
			goto enospc;
		}
		wret = balance_node_right(trans, mid, left);
		if (wret < 0) {
			ret = wret;
			goto enospc;
		}
		if (wret == 1) {
			wret = push_node_left(trans, left, mid, 1);
			if (wret < 0)
				ret = wret;
		}
		BUG_ON(wret == 1);
	}
	if (apfs_header_nritems(mid) == 0) {
		apfs_clean_tree_block(mid);
		apfs_tree_unlock(mid);
		del_ptr(root, path, level + 1, pslot);
		root_sub_used(root, mid->len);
		apfs_free_tree_block(trans, root, mid, 0, 1);
		free_extent_buffer_stale(mid);
		mid = NULL;
	} else {
		/* update the parent key to reflect our changes */
		struct apfs_disk_key mid_key;
		apfs_node_key(mid, &mid_key, 0);
		ret = apfs_tree_mod_log_insert_key(parent, pslot,
				APFS_MOD_LOG_KEY_REPLACE, GFP_NOFS);
		BUG_ON(ret < 0);
		apfs_set_node_key(parent, &mid_key, pslot);
		apfs_mark_buffer_dirty(parent);
	}

	/* update the path */
	if (left) {
		if (apfs_header_nritems(left) > orig_slot) {
			atomic_inc(&left->refs);
			/* left was locked after cow */
			path->nodes[level] = left;
			path->slots[level + 1] -= 1;
			path->slots[level] = orig_slot;
			if (mid) {
				apfs_tree_unlock(mid);
				free_extent_buffer(mid);
			}
		} else {
			orig_slot -= apfs_header_nritems(left);
			path->slots[level] = orig_slot;
		}
	}
	/* double check we haven't messed things up */
	if (orig_ptr !=
	    apfs_node_blockptr(path->nodes[level], path->slots[level]))
		BUG();
enospc:
	if (right) {
		apfs_tree_unlock(right);
		free_extent_buffer(right);
	}
	if (left) {
		if (path->nodes[level] != left)
			apfs_tree_unlock(left);
		free_extent_buffer(left);
	}
	return ret;
}

/* Node balancing for insertion.  Here we only split or push nodes around
 * when they are completely full.  This is also done top down, so we
 * have to be pessimistic.
 */
static noinline int push_nodes_for_insert(struct apfs_trans_handle *trans,
					  struct apfs_root *root,
					  struct apfs_path *path, int level)
{
	struct apfs_fs_info *fs_info = root->fs_info;
	struct extent_buffer *right = NULL;
	struct extent_buffer *mid;
	struct extent_buffer *left = NULL;
	struct extent_buffer *parent = NULL;
	int ret = 0;
	int wret;
	int pslot;
	int orig_slot = path->slots[level];

	if (level == 0)
		return 1;

	mid = path->nodes[level];
	WARN_ON(apfs_header_generation(mid) != trans->transid);

	if (level < APFS_MAX_LEVEL - 1) {
		parent = path->nodes[level + 1];
		pslot = path->slots[level + 1];
	}

	if (!parent)
		return 1;

	left = apfs_read_node_slot(parent, pslot - 1);
	if (IS_ERR(left))
		left = NULL;

	/* first, try to make some room in the middle buffer */
	if (left) {
		u32 left_nr;

		__apfs_tree_lock(left, APFS_NESTING_LEFT);

		left_nr = apfs_header_nritems(left);
		if (left_nr >= APFS_NODEPTRS_PER_BLOCK(fs_info) - 1) {
			wret = 1;
		} else {
			ret = apfs_cow_block(trans, root, left, parent,
					      pslot - 1, &left,
					      APFS_NESTING_LEFT_COW);
			if (ret)
				wret = 1;
			else {
				wret = push_node_left(trans, left, mid, 0);
			}
		}
		if (wret < 0)
			ret = wret;
		if (wret == 0) {
			struct apfs_disk_key disk_key;
			orig_slot += left_nr;
			apfs_node_key(mid, &disk_key, 0);
			ret = apfs_tree_mod_log_insert_key(parent, pslot,
					APFS_MOD_LOG_KEY_REPLACE, GFP_NOFS);
			BUG_ON(ret < 0);
			apfs_set_node_key(parent, &disk_key, pslot);
			apfs_mark_buffer_dirty(parent);
			if (apfs_header_nritems(left) > orig_slot) {
				path->nodes[level] = left;
				path->slots[level + 1] -= 1;
				path->slots[level] = orig_slot;
				apfs_tree_unlock(mid);
				free_extent_buffer(mid);
			} else {
				orig_slot -=
					apfs_header_nritems(left);
				path->slots[level] = orig_slot;
				apfs_tree_unlock(left);
				free_extent_buffer(left);
			}
			return 0;
		}
		apfs_tree_unlock(left);
		free_extent_buffer(left);
	}
	right = apfs_read_node_slot(parent, pslot + 1);
	if (IS_ERR(right))
		right = NULL;

	/*
	 * then try to empty the right most buffer into the middle
	 */
	if (right) {
		u32 right_nr;

		__apfs_tree_lock(right, APFS_NESTING_RIGHT);

		right_nr = apfs_header_nritems(right);
		if (right_nr >= APFS_NODEPTRS_PER_BLOCK(fs_info) - 1) {
			wret = 1;
		} else {
			ret = apfs_cow_block(trans, root, right,
					      parent, pslot + 1,
					      &right, APFS_NESTING_RIGHT_COW);
			if (ret)
				wret = 1;
			else {
				wret = balance_node_right(trans, right, mid);
			}
		}
		if (wret < 0)
			ret = wret;
		if (wret == 0) {
			struct apfs_disk_key disk_key;

			apfs_node_key(right, &disk_key, 0);
			ret = apfs_tree_mod_log_insert_key(parent, pslot + 1,
					APFS_MOD_LOG_KEY_REPLACE, GFP_NOFS);
			BUG_ON(ret < 0);
			apfs_set_node_key(parent, &disk_key, pslot + 1);
			apfs_mark_buffer_dirty(parent);

			if (apfs_header_nritems(mid) <= orig_slot) {
				path->nodes[level] = right;
				path->slots[level + 1] += 1;
				path->slots[level] = orig_slot -
					apfs_header_nritems(mid);
				apfs_tree_unlock(mid);
				free_extent_buffer(mid);
			} else {
				apfs_tree_unlock(right);
				free_extent_buffer(right);
			}
			return 0;
		}
		apfs_tree_unlock(right);
		free_extent_buffer(right);
	}
	return 1;
}

/*
 * readahead one full node of leaves, finding things that are close
 * to the block in 'slot', and triggering ra on them.
 */
static void reada_for_search(struct apfs_fs_info *fs_info,
			     struct apfs_path *path,
			     int level, int slot, u64 objectid)
{
	struct extent_buffer *node;
	struct apfs_disk_key disk_key;
	u32 nritems;
	u64 search;
	u64 target;
	u64 nread = 0;
	u64 nread_max;
	struct extent_buffer *eb;
	u32 nr;
	u32 blocksize;
	u32 nscan = 0;

	if (level != 1 && path->reada != READA_FORWARD_ALWAYS)
		return;

	if (!path->nodes[level])
		return;

	node = path->nodes[level];

	/*
	 * Since the time between visiting leaves is much shorter than the time
	 * between visiting nodes, limit read ahead of nodes to 1, to avoid too
	 * much IO at once (possibly random).
	 */
	if (path->reada == READA_FORWARD_ALWAYS) {
		if (level > 1)
			nread_max = node->fs_info->nodesize;
		else
			nread_max = SZ_128K;
	} else {
		nread_max = SZ_64K;
	}

	search = apfs_node_blockptr(node, slot);
	blocksize = fs_info->nodesize;
	eb = find_extent_buffer(fs_info, search);
	if (eb) {
		free_extent_buffer(eb);
		return;
	}

	target = search;

	nritems = apfs_header_nritems(node);
	nr = slot;

	while (1) {
		if (path->reada == READA_BACK) {
			if (nr == 0)
				break;
			nr--;
		} else if (path->reada == READA_FORWARD ||
			   path->reada == READA_FORWARD_ALWAYS) {
			nr++;
			if (nr >= nritems)
				break;
		}
		if (path->reada == READA_BACK && objectid) {
			apfs_node_key(node, &disk_key, nr);
			if (apfs_disk_key_objectid(&disk_key) != objectid)
				break;
		}
		search = apfs_node_blockptr(node, nr);
		if (path->reada == READA_FORWARD_ALWAYS ||
		    (search <= target && target - search <= 65536) ||
		    (search > target && search - target <= 65536)) {
			apfs_readahead_node_child(node, nr);
			nread += blocksize;
		}
		nscan++;
		if (nread > nread_max || nscan > 32)
			break;
	}
}

static noinline void reada_for_balance(struct apfs_path *path, int level)
{
	struct extent_buffer *parent;
	int slot;
	int nritems;

	parent = path->nodes[level + 1];
	if (!parent)
		return;

	nritems = apfs_header_nritems(parent);
	slot = path->slots[level + 1];

	if (slot > 0)
		apfs_readahead_node_child(parent, slot - 1);
	if (slot + 1 < nritems)
		apfs_readahead_node_child(parent, slot + 1);
}


/*
 * when we walk down the tree, it is usually safe to unlock the higher layers
 * in the tree.  The exceptions are when our path goes through slot 0, because
 * operations on the tree might require changing key pointers higher up in the
 * tree.
 *
 * callers might also have set path->keep_locks, which tells this code to keep
 * the lock if the path points to the last slot in the block.  This is part of
 * walking through the tree, and selecting the next slot in the higher block.
 *
 * lowest_unlock sets the lowest level in the tree we're allowed to unlock.  so
 * if lowest_unlock is 1, level 0 won't be unlocked
 */
static noinline void unlock_up(struct apfs_path *path, int level,
			       int lowest_unlock, int min_write_lock_level,
			       int *write_lock_level)
{
	int i;
	int skip_level = level;
	int no_skips = 0;
	struct extent_buffer *t;

	for (i = level; i < APFS_MAX_LEVEL; i++) {
		if (!path->nodes[i])
			break;
		if (!path->locks[i])
			break;
		if (!no_skips && path->slots[i] == 0) {
			skip_level = i + 1;
			continue;
		}
		if (!no_skips && path->keep_locks) {
			u32 nritems;
			t = path->nodes[i];
			nritems = apfs_header_nritems(t);
			if (nritems < 1 || path->slots[i] >= nritems - 1) {
				skip_level = i + 1;
				continue;
			}
		}
		if (skip_level < i && i >= lowest_unlock)
			no_skips = 1;

		t = path->nodes[i];
		if (i >= lowest_unlock && i > skip_level) {
			apfs_tree_unlock_rw(t, path->locks[i]);
			path->locks[i] = 0;
			if (write_lock_level &&
			    i > min_write_lock_level &&
			    i <= *write_lock_level) {
				*write_lock_level = i - 1;
			}
		}
	}
}

/*
 * helper function for apfs_search_slot.  The goal is to find a block
 * in cache without setting the path to blocking.  If we find the block
 * we return zero and the path is unchanged.
 *
 * If we can't find the block, we set the path blocking and do some
 * reada.  -EAGAIN is returned and the search must be repeated.
 */
static int
read_block_for_search(struct apfs_root *root, struct apfs_path *p,
		      struct extent_buffer **eb_ret, int level, int slot,
		      const struct apfs_key *key)
{
	struct apfs_fs_info *fs_info = root->fs_info;
	u64 blocknr;
	u64 gen;
	struct extent_buffer *tmp;
	struct apfs_key first_key = {};
	int ret;
	int parent_level;

	blocknr = apfs_node_blockptr(*eb_ret, slot);
	gen = apfs_node_ptr_generation(*eb_ret, slot);
	parent_level = apfs_header_level(*eb_ret);
	apfs_node_key_to_cpu(*eb_ret, &first_key, slot);

	tmp = find_extent_buffer(fs_info, blocknr);
	if (tmp) {
		if (p->reada == READA_FORWARD_ALWAYS)
			reada_for_search(fs_info, p, level, slot, key->objectid);

		/* first we do an atomic uptodate check */
		if (apfs_buffer_uptodate(tmp, gen, 1) > 0) {
			/*
			 * Do extra check for first_key, eb can be stale due to
			 * being cached, read from scrub, or have multiple
			 * parents (shared tree blocks).
			 */
			if (apfs_verify_level_key(tmp,
					parent_level - 1, &first_key, gen)) {
				free_extent_buffer(tmp);
				return -EUCLEAN;
			}
			*eb_ret = tmp;
			return 0;
		}

		/* now we're allowed to do a blocking uptodate check */
		ret = apfs_read_buffer(tmp, gen, parent_level - 1, &first_key);
		if (!ret) {
			*eb_ret = tmp;
			return 0;
		}
		free_extent_buffer(tmp);
		apfs_release_path(p);
		return -EIO;
	}

	/*
	 * reduce lock contention at high levels
	 * of the btree by dropping locks before
	 * we read.  Don't release the lock on the current
	 * level because we need to walk this node to figure
	 * out which blocks to read.
	 */
	apfs_unlock_up_safe(p, level + 1);

	if (p->reada != READA_NONE)
		reada_for_search(fs_info, p, level, slot, key->objectid);

	ret = -EAGAIN;
	tmp = read_tree_block(fs_info, blocknr, root->root_key.objectid,
			      gen, parent_level - 1, &first_key);
	if (!IS_ERR(tmp)) {
		/*
		 * If the read above didn't mark this buffer up to date,
		 * it will never end up being up to date.  Set ret to EIO now
		 * and give up so that our caller doesn't loop forever
		 * on our EAGAINs.
		 */
		if (!extent_buffer_uptodate(tmp))
			ret = -EIO;
		free_extent_buffer(tmp);
	} else {
		ret = PTR_ERR(tmp);
	}

	apfs_release_path(p);
	return ret;
}

/*
 * helper function for apfs_search_slot.  This does all of the checks
 * for node-level blocks and does any balancing required based on
 * the ins_len.
 *
 * If no extra work was required, zero is returned.  If we had to
 * drop the path, -EAGAIN is returned and apfs_search_slot must
 * start over
 */
static int
setup_nodes_for_search(struct apfs_trans_handle *trans,
		       struct apfs_root *root, struct apfs_path *p,
		       struct extent_buffer *b, int level, int ins_len,
		       int *write_lock_level)
{
	struct apfs_fs_info *fs_info = root->fs_info;
	int ret = 0;

	if ((p->search_for_split || ins_len > 0) && apfs_header_nritems(b) >=
	    APFS_NODEPTRS_PER_BLOCK(fs_info) - 3) {

		if (*write_lock_level < level + 1) {
			*write_lock_level = level + 1;
			apfs_release_path(p);
			return -EAGAIN;
		}

		reada_for_balance(p, level);
		ret = split_node(trans, root, p, level);

		b = p->nodes[level];
	} else if (ins_len < 0 && apfs_header_nritems(b) <
		   APFS_NODEPTRS_PER_BLOCK(fs_info) / 2) {

		if (*write_lock_level < level + 1) {
			*write_lock_level = level + 1;
			apfs_release_path(p);
			return -EAGAIN;
		}

		reada_for_balance(p, level);
		ret = balance_level(trans, root, p, level);
		if (ret)
			return ret;

		b = p->nodes[level];
		if (!b) {
			apfs_release_path(p);
			return -EAGAIN;
		}
		BUG_ON(apfs_header_nritems(b) == 1);
	}
	return ret;
}

int apfs_find_item(struct apfs_root *fs_root, struct apfs_path *path,
		u64 iobjectid, u64 ioff, u8 key_type,
		struct apfs_key *found_key)
{
	int ret;
	struct apfs_key key = {};
	struct extent_buffer *eb;

	ASSERT(path);
	ASSERT(found_key);

	key.type = key_type;
	key.objectid = iobjectid;
	key.offset = ioff;

	ret = apfs_search_slot(NULL, fs_root, &key, path, 0, 0);
	if (ret < 0)
		return ret;

	eb = path->nodes[0];
	if (ret && path->slots[0] >= apfs_header_nritems(eb)) {
		ret = apfs_next_leaf(fs_root, path);
		if (ret)
			return ret;
		eb = path->nodes[0];
	}

	apfs_item_key_to_cpu(eb, found_key, path->slots[0]);
	if (found_key->type != key.type ||
			found_key->objectid != key.objectid)
		return 1;

	return 0;
}

static struct extent_buffer *apfs_search_slot_get_root(struct apfs_root *root,
							struct apfs_path *p,
							int write_lock_level)
{
	struct apfs_fs_info *fs_info = root->fs_info;
	struct extent_buffer *b;
	int root_lock;
	int level = 0;

	/* We try very hard to do read locks on the root */
	root_lock = APFS_READ_LOCK;

	if (p->search_commit_root) {
		/*
		 * The commit roots are read only so we always do read locks,
		 * and we always must hold the commit_root_sem when doing
		 * searches on them, the only exception is send where we don't
		 * want to block transaction commits for a long time, so
		 * we need to clone the commit root in order to avoid races
		 * with transaction commits that create a snapshot of one of
		 * the roots used by a send operation.
		 */
		if (p->need_commit_sem) {
			down_read(&fs_info->commit_root_sem);
			b = apfs_clone_extent_buffer(root->commit_root);
			up_read(&fs_info->commit_root_sem);
			if (!b)
				return ERR_PTR(-ENOMEM);

		} else {
			b = root->commit_root;
			atomic_inc(&b->refs);
		}
		level = apfs_header_level(b);
		/*
		 * Ensure that all callers have set skip_locking when
		 * p->search_commit_root = 1.
		 */
		ASSERT(p->skip_locking == 1);

		goto out;
	}

	if (p->skip_locking) {
		b = apfs_root_node(root);
		level = apfs_header_level(b);
		goto out;
	}

	/*
	 * If the level is set to maximum, we can skip trying to get the read
	 * lock.
	 */
	if (write_lock_level < APFS_MAX_LEVEL) {
		/*
		 * We don't know the level of the root node until we actually
		 * have it read locked
		 */
		b = apfs_read_lock_root_node(root);
		level = apfs_header_level(b);
		if (level > write_lock_level)
			goto out;

		/* Whoops, must trade for write lock */
		apfs_tree_read_unlock(b);
		free_extent_buffer(b);
	}

	b = apfs_lock_root_node(root);
	root_lock = APFS_WRITE_LOCK;

	/* The level might have changed, check again */
	level = apfs_header_level(b);

out:
	p->nodes[level] = b;
	if (!p->skip_locking)
		p->locks[level] = root_lock;
	/*
	 * Callers are responsible for dropping b's references.
	 */
	return b;
}


/*
 * apfs_search_slot - look for a key in a tree and perform necessary
 * modifications to preserve tree invariants.
 *
 * @trans:	Handle of transaction, used when modifying the tree
 * @p:		Holds all btree nodes along the search path
 * @root:	The root node of the tree
 * @key:	The key we are looking for
 * @ins_len:	Indicates purpose of search:
 *              >0  for inserts it's size of item inserted (*)
 *              <0  for deletions
 *               0  for plain searches, not modifying the tree
 *
 *              (*) If size of item inserted doesn't include
 *              sizeof(struct apfs_item), then p->search_for_extension must
 *              be set.
 * @cow:	boolean should CoW operations be performed. Must always be 1
 *		when modifying the tree.
 *
 * If @ins_len > 0, nodes and leaves will be split as we walk down the tree.
 * If @ins_len < 0, nodes will be merged as we walk down the tree (if possible)
 *
 * If @key is found, 0 is returned and you can find the item in the leaf level
 * of the path (level 0)
 *
 * If @key isn't found, 1 is returned and the leaf level of the path (level 0)
 * points to the slot where it should be inserted
 *
 * If an error is encountered while searching the tree a negative error number
 * is returned
 */
int apfs_search_slot(struct apfs_trans_handle *trans, struct apfs_root *root,
		      const struct apfs_key *key, struct apfs_path *p,
		      int ins_len, int cow)
{
	struct extent_buffer *b;
	int slot;
	int ret;
	int err;
	int level;
	int lowest_unlock = 1;
	/* everything at write_lock_level or lower must be write locked */
	int write_lock_level = 0;
	u8 lowest_level = 0;
	int min_write_lock_level;
	int prev_cmp;

	lowest_level = p->lowest_level;
	WARN_ON(lowest_level && ins_len > 0);
	WARN_ON(p->nodes[0] != NULL);
	BUG_ON(!cow && ins_len);

	if (ins_len < 0) {
		lowest_unlock = 2;

		/* when we are removing items, we might have to go up to level
		 * two as we update tree pointers  Make sure we keep write
		 * for those levels as well
		 */
		write_lock_level = 2;
	} else if (ins_len > 0) {
		/*
		 * for inserting items, make sure we have a write lock on
		 * level 1 so we can update keys
		 */
		write_lock_level = 1;
	}

	if (!cow)
		write_lock_level = -1;

	if (cow && (p->keep_locks || p->lowest_level))
		write_lock_level = APFS_MAX_LEVEL;

	min_write_lock_level = write_lock_level;

again:
	prev_cmp = -1;
	b = apfs_search_slot_get_root(root, p, write_lock_level);
	if (IS_ERR(b)) {
		ret = PTR_ERR(b);
		goto done;
	}

	while (b) {
		int dec = 0;

		level = apfs_header_level(b);

		if (cow) {
			bool last_level = (level == (APFS_MAX_LEVEL - 1));

			/*
			 * if we don't really need to cow this block
			 * then we don't want to set the path blocking,
			 * so we test it here
			 */
			if (!should_cow_block(trans, root, b))
				goto cow_done;

			/*
			 * must have write locks on this node and the
			 * parent
			 */
			if (level > write_lock_level ||
			    (level + 1 > write_lock_level &&
			    level + 1 < APFS_MAX_LEVEL &&
			    p->nodes[level + 1])) {
				write_lock_level = level + 1;
				apfs_release_path(p);
				goto again;
			}

			if (last_level)
				err = apfs_cow_block(trans, root, b, NULL, 0,
						      &b,
						      APFS_NESTING_COW);
			else
				err = apfs_cow_block(trans, root, b,
						      p->nodes[level + 1],
						      p->slots[level + 1], &b,
						      APFS_NESTING_COW);
			if (err) {
				ret = err;
				goto done;
			}
		}
cow_done:
		p->nodes[level] = b;
		/*
		 * Leave path with blocking locks to avoid massive
		 * lock context switch, this is made on purpose.
		 */

		/*
		 * we have a lock on b and as long as we aren't changing
		 * the tree, there is no way to for the items in b to change.
		 * It is safe to drop the lock on our parent before we
		 * go through the expensive btree search on b.
		 *
		 * If we're inserting or deleting (ins_len != 0), then we might
		 * be changing slot zero, which may require changing the parent.
		 * So, we can't drop the lock until after we know which slot
		 * we're operating on.
		 */
		if (!ins_len && !p->keep_locks) {
			int u = level + 1;

			if (u < APFS_MAX_LEVEL && p->locks[u]) {
				apfs_tree_unlock_rw(p->nodes[u], p->locks[u]);
				p->locks[u] = 0;
			}
		}

		/*
		 * If apfs_bin_search returns an exact match (prev_cmp == 0)
		 * we can safely assume the target key will always be in slot 0
		 * on lower levels due to the invariants APFS' btree provides,
		 * namely that a apfs_key_ptr entry always points to the
		 * lowest key in the child node, thus we can skip searching
		 * lower levels
		 */
		if (prev_cmp == 0) {
			slot = 0;
			ret = 0;
		} else {
			ret = apfs_bin_search(b, key, &slot);
			prev_cmp = ret;
			if (ret < 0)
				goto done;
		}

		if (level == 0) {
			p->slots[level] = slot;
			/*
			 * Item key already exists. In this case, if we are
			 * allowed to insert the item (for example, in dir_item
			 * case, item key collision is allowed), it will be
			 * merged with the original item. Only the item size
			 * grows, no new apfs item will be added. If
			 * search_for_extension is not set, ins_len already
			 * accounts the size apfs_item, deduct it here so leaf
			 * space check will be correct.
			 */
			if (ret == 0 && ins_len > 0 && !p->search_for_extension) {
				ASSERT(ins_len >= sizeof(struct apfs_item));
				ins_len -= sizeof(struct apfs_item);
			}
			if (ins_len > 0 &&
			    apfs_leaf_free_space(b) < ins_len) {
				if (write_lock_level < 1) {
					write_lock_level = 1;
					apfs_release_path(p);
					goto again;
				}

				err = split_leaf(trans, root, key,
						 p, ins_len, ret == 0);

				BUG_ON(err > 0);
				if (err) {
					ret = err;
					goto done;
				}
			}
			if (!p->search_for_split)
				unlock_up(p, level, lowest_unlock,
					  min_write_lock_level, NULL);
			goto done;
		}
		if (ret && slot > 0) {
			dec = 1;
			slot--;
		}
		p->slots[level] = slot;
		err = setup_nodes_for_search(trans, root, p, b, level, ins_len,
					     &write_lock_level);
		if (err == -EAGAIN)
			goto again;
		if (err) {
			ret = err;
			goto done;
		}
		b = p->nodes[level];
		slot = p->slots[level];

		/*
		 * Slot 0 is special, if we change the key we have to update
		 * the parent pointer which means we must have a write lock on
		 * the parent
		 */
		if (slot == 0 && ins_len && write_lock_level < level + 1) {
			write_lock_level = level + 1;
			apfs_release_path(p);
			goto again;
		}

		unlock_up(p, level, lowest_unlock, min_write_lock_level,
			  &write_lock_level);

		if (level == lowest_level) {
			if (dec)
				p->slots[level]++;
			goto done;
		}

		err = read_block_for_search(root, p, &b, level, slot, key);
		if (err == -EAGAIN)
			goto again;
		if (err) {
			ret = err;
			goto done;
		}

		if (!p->skip_locking) {
			level = apfs_header_level(b);
			if (level <= write_lock_level) {
				apfs_tree_lock(b);
				p->locks[level] = APFS_WRITE_LOCK;
			} else {
				apfs_tree_read_lock(b);
				p->locks[level] = APFS_READ_LOCK;
			}
			p->nodes[level] = b;
		}
	}
	ret = 1;
done:
	if (ret < 0 && !p->skip_release_on_error)
		apfs_release_path(p);
	return ret;
}
ALLOW_ERROR_INJECTION(apfs_search_slot, ERRNO);

/*
 * Like apfs_search_slot, this looks for a key in the given tree. It uses the
 * current state of the tree together with the operations recorded in the tree
 * modification log to search for the key in a previous version of this tree, as
 * denoted by the time_seq parameter.
 *
 * Naturally, there is no support for insert, delete or cow operations.
 *
 * The resulting path and return value will be set up as if we called
 * apfs_search_slot at that point in time with ins_len and cow both set to 0.
 */
int apfs_search_old_slot(struct apfs_root *root, const struct apfs_key *key,
			  struct apfs_path *p, u64 time_seq)
{
	struct apfs_fs_info *fs_info = root->fs_info;
	struct extent_buffer *b;
	int slot;
	int ret;
	int err;
	int level;
	int lowest_unlock = 1;
	u8 lowest_level = 0;

	lowest_level = p->lowest_level;
	WARN_ON(p->nodes[0] != NULL);

	if (p->search_commit_root) {
		BUG_ON(time_seq);
		return apfs_search_slot(NULL, root, key, p, 0, 0);
	}

again:
	b = apfs_get_old_root(root, time_seq);
	if (!b) {
		ret = -EIO;
		goto done;
	}
	level = apfs_header_level(b);
	p->locks[level] = APFS_READ_LOCK;

	while (b) {
		int dec = 0;

		level = apfs_header_level(b);
		p->nodes[level] = b;

		/*
		 * we have a lock on b and as long as we aren't changing
		 * the tree, there is no way to for the items in b to change.
		 * It is safe to drop the lock on our parent before we
		 * go through the expensive btree search on b.
		 */
		apfs_unlock_up_safe(p, level + 1);

		ret = apfs_bin_search(b, key, &slot);
		if (ret < 0)
			goto done;

		if (level == 0) {
			p->slots[level] = slot;
			unlock_up(p, level, lowest_unlock, 0, NULL);
			goto done;
		}

		if (ret && slot > 0) {
			dec = 1;
			slot--;
		}
		p->slots[level] = slot;
		unlock_up(p, level, lowest_unlock, 0, NULL);

		if (level == lowest_level) {
			if (dec)
				p->slots[level]++;
			goto done;
		}

		err = read_block_for_search(root, p, &b, level, slot, key);
		if (err == -EAGAIN)
			goto again;
		if (err) {
			ret = err;
			goto done;
		}

		level = apfs_header_level(b);
		apfs_tree_read_lock(b);
		b = apfs_tree_mod_log_rewind(fs_info, p, b, time_seq);
		if (!b) {
			ret = -ENOMEM;
			goto done;
		}
		p->locks[level] = APFS_READ_LOCK;
		p->nodes[level] = b;
	}
	ret = 1;
done:
	if (ret < 0)
		apfs_release_path(p);

	return ret;
}

/*
 * helper to use instead of search slot if no exact match is needed but
 * instead the next or previous item should be returned.
 * When find_higher is true, the next higher item is returned, the next lower
 * otherwise.
 * When return_any and find_higher are both true, and no higher item is found,
 * return the next lower instead.
 * When return_any is true and find_higher is false, and no lower item is found,
 * return the next higher instead.
 * It returns 0 if any item is found, 1 if none is found (tree empty), and
 * < 0 on error
 */
int apfs_search_slot_for_read(struct apfs_root *root,
			       const struct apfs_key *key,
			       struct apfs_path *p, int find_higher,
			       int return_any)
{
	int ret;
	struct extent_buffer *leaf;

again:
	ret = apfs_search_slot(NULL, root, key, p, 0, 0);
	if (ret <= 0)
		return ret;
	/*
	 * a return value of 1 means the path is at the position where the
	 * item should be inserted. Normally this is the next bigger item,
	 * but in case the previous item is the last in a leaf, path points
	 * to the first free slot in the previous leaf, i.e. at an invalid
	 * item.
	 */
	leaf = p->nodes[0];

	if (find_higher) {
		if (p->slots[0] >= apfs_header_nritems(leaf)) {
			ret = apfs_next_leaf(root, p);
			if (ret <= 0)
				return ret;
			if (!return_any)
				return 1;
			/*
			 * no higher item found, return the next
			 * lower instead
			 */
			return_any = 0;
			find_higher = 0;
			apfs_release_path(p);
			goto again;
		}
	} else {
		if (p->slots[0] == 0) {
			ret = apfs_prev_leaf(root, p);
			if (ret < 0)
				return ret;
			if (!ret) {
				leaf = p->nodes[0];
				if (p->slots[0] == apfs_header_nritems(leaf))
					p->slots[0]--;
				return 0;
			}
			if (!return_any)
				return 1;
			/*
			 * no lower item found, return the next
			 * higher instead
			 */
			return_any = 0;
			find_higher = 1;
			apfs_release_path(p);
			goto again;
		} else {
			--p->slots[0];
		}
	}
	return 0;
}

/*
 * adjust the pointers going up the tree, starting at level
 * making sure the right key of each node is points to 'key'.
 * This is used after shifting pointers to the left, so it stops
 * fixing up pointers when a given leaf/node is not in slot 0 of the
 * higher levels
 *
 */
static void fixup_low_keys(struct apfs_path *path,
			   struct apfs_disk_key *key, int level)
{
	int i;
	struct extent_buffer *t;
	int ret;

	for (i = level; i < APFS_MAX_LEVEL; i++) {
		int tslot = path->slots[i];

		if (!path->nodes[i])
			break;
		t = path->nodes[i];
		ret = apfs_tree_mod_log_insert_key(t, tslot,
				APFS_MOD_LOG_KEY_REPLACE, GFP_ATOMIC);
		BUG_ON(ret < 0);
		apfs_set_node_key(t, key, tslot);
		apfs_mark_buffer_dirty(path->nodes[i]);
		if (tslot != 0)
			break;
	}
}

/*
 * update item key.
 *
 * This function isn't completely safe. It's the caller's responsibility
 * that the new key won't break the order
 */
void apfs_set_item_key_safe(struct apfs_fs_info *fs_info,
			     struct apfs_path *path,
			     const struct apfs_key *new_key)
{
	struct apfs_disk_key disk_key;
	struct extent_buffer *eb;
	int slot;

	eb = path->nodes[0];
	slot = path->slots[0];
	if (slot > 0) {
		apfs_item_key(eb, &disk_key, slot - 1);
		if (unlikely(comp_keys(eb, &disk_key, new_key) >= 0)) {
			apfs_crit(fs_info,
		"slot %u key (%llu %u %llu) new key (%llu %u %llu)",
				   slot, apfs_disk_key_objectid(&disk_key),
				   apfs_disk_key_type(&disk_key),
				   apfs_disk_key_offset(&disk_key),
				   new_key->objectid, new_key->type,
				   new_key->offset);
			apfs_print_leaf(eb);
			BUG();
		}
	}
	if (slot < apfs_header_nritems(eb) - 1) {
		apfs_item_key(eb, &disk_key, slot + 1);
		if (unlikely(comp_keys(eb, &disk_key, new_key) <= 0)) {
			apfs_crit(fs_info,
		"slot %u key (%llu %u %llu) new key (%llu %u %llu)",
				   slot, apfs_disk_key_objectid(&disk_key),
				   apfs_disk_key_type(&disk_key),
				   apfs_disk_key_offset(&disk_key),
				   new_key->objectid, new_key->type,
				   new_key->offset);
			apfs_print_leaf(eb);
			BUG();
		}
	}

	apfs_cpu_key_to_disk(eb, &disk_key, new_key);
	apfs_set_item_key(eb, &disk_key, slot);
	apfs_mark_buffer_dirty(eb);
	if (slot == 0)
		fixup_low_keys(path, &disk_key, 1);
}

/*
 * Check key order of two sibling extent buffers.
 *
 * Return true if something is wrong.
 * Return false if everything is fine.
 *
 * Tree-checker only works inside one tree block, thus the following
 * corruption can not be detected by tree-checker:
 *
 * Leaf @left			| Leaf @right
 * --------------------------------------------------------------
 * | 1 | 2 | 3 | 4 | 5 | f6 |   | 7 | 8 |
 *
 * Key f6 in leaf @left itself is valid, but not valid when the next
 * key in leaf @right is 7.
 * This can only be checked at tree block merge time.
 * And since tree checker has ensured all key order in each tree block
 * is correct, we only need to bother the last key of @left and the first
 * key of @right.
 */
static bool check_sibling_keys(struct extent_buffer *left,
			       struct extent_buffer *right)
{
	struct apfs_key left_last = {};
	struct apfs_key right_first = {};
	int level = apfs_header_level(left);
	int nr_left = apfs_header_nritems(left);
	int nr_right = apfs_header_nritems(right);

	/* No key to check in one of the tree blocks */
	if (!nr_left || !nr_right)
		return false;

	if (level) {
		apfs_node_key_to_cpu(left, &left_last, nr_left - 1);
		apfs_node_key_to_cpu(right, &right_first, 0);
	} else {
		apfs_item_key_to_cpu(left, &left_last, nr_left - 1);
		apfs_item_key_to_cpu(right, &right_first, 0);
	}

	if (apfs_comp_cpu_keys(left, &left_last, &right_first) >= 0) {
		apfs_crit(left->fs_info,
"bad key order, sibling blocks, left last (%llu %u %llu) right first (%llu %u %llu)",
			   left_last.objectid, left_last.type,
			   left_last.offset, right_first.objectid,
			   right_first.type, right_first.offset);
		return true;
	}
	return false;
}

/*
 * try to push data from one node into the next node left in the
 * tree.
 *
 * returns 0 if some ptrs were pushed left, < 0 if there was some horrible
 * error, and > 0 if there was no room in the left hand block.
 */
static int push_node_left(struct apfs_trans_handle *trans,
			  struct extent_buffer *dst,
			  struct extent_buffer *src, int empty)
{
	struct apfs_fs_info *fs_info = trans->fs_info;
	int push_items = 0;
	int src_nritems;
	int dst_nritems;
	int ret = 0;

	src_nritems = apfs_header_nritems(src);
	dst_nritems = apfs_header_nritems(dst);
	push_items = APFS_NODEPTRS_PER_BLOCK(fs_info) - dst_nritems;
	WARN_ON(apfs_header_generation(src) != trans->transid);
	WARN_ON(apfs_header_generation(dst) != trans->transid);

	if (!empty && src_nritems <= 8)
		return 1;

	if (push_items <= 0)
		return 1;

	if (empty) {
		push_items = min(src_nritems, push_items);
		if (push_items < src_nritems) {
			/* leave at least 8 pointers in the node if
			 * we aren't going to empty it
			 */
			if (src_nritems - push_items < 8) {
				if (push_items <= 8)
					return 1;
				push_items -= 8;
			}
		}
	} else
		push_items = min(src_nritems - 8, push_items);

	/* dst is the left eb, src is the middle eb */
	if (check_sibling_keys(dst, src)) {
		ret = -EUCLEAN;
		apfs_abort_transaction(trans, ret);
		return ret;
	}
	ret = apfs_tree_mod_log_eb_copy(dst, src, dst_nritems, 0, push_items);
	if (ret) {
		apfs_abort_transaction(trans, ret);
		return ret;
	}
	copy_extent_buffer(dst, src,
			   apfs_node_key_ptr_offset(dst_nritems),
			   apfs_node_key_ptr_offset(0),
			   push_items * sizeof(struct apfs_key_ptr));

	if (push_items < src_nritems) {
		/*
		 * Don't call apfs_tree_mod_log_insert_move() here, key removal
		 * was already fully logged by apfs_tree_mod_log_eb_copy() above.
		 */
		memmove_extent_buffer(src, apfs_node_key_ptr_offset(0),
				      apfs_node_key_ptr_offset(push_items),
				      (src_nritems - push_items) *
				      sizeof(struct apfs_key_ptr));
	}
	apfs_set_header_nritems(src, src_nritems - push_items);
	apfs_set_header_nritems(dst, dst_nritems + push_items);
	apfs_mark_buffer_dirty(src);
	apfs_mark_buffer_dirty(dst);

	return ret;
}

/*
 * try to push data from one node into the next node right in the
 * tree.
 *
 * returns 0 if some ptrs were pushed, < 0 if there was some horrible
 * error, and > 0 if there was no room in the right hand block.
 *
 * this will  only push up to 1/2 the contents of the left node over
 */
static int balance_node_right(struct apfs_trans_handle *trans,
			      struct extent_buffer *dst,
			      struct extent_buffer *src)
{
	struct apfs_fs_info *fs_info = trans->fs_info;
	int push_items = 0;
	int max_push;
	int src_nritems;
	int dst_nritems;
	int ret = 0;

	WARN_ON(apfs_header_generation(src) != trans->transid);
	WARN_ON(apfs_header_generation(dst) != trans->transid);

	src_nritems = apfs_header_nritems(src);
	dst_nritems = apfs_header_nritems(dst);
	push_items = APFS_NODEPTRS_PER_BLOCK(fs_info) - dst_nritems;
	if (push_items <= 0)
		return 1;

	if (src_nritems < 4)
		return 1;

	max_push = src_nritems / 2 + 1;
	/* don't try to empty the node */
	if (max_push >= src_nritems)
		return 1;

	if (max_push < push_items)
		push_items = max_push;

	/* dst is the right eb, src is the middle eb */
	if (check_sibling_keys(src, dst)) {
		ret = -EUCLEAN;
		apfs_abort_transaction(trans, ret);
		return ret;
	}
	ret = apfs_tree_mod_log_insert_move(dst, push_items, 0, dst_nritems);
	BUG_ON(ret < 0);
	memmove_extent_buffer(dst, apfs_node_key_ptr_offset(push_items),
				      apfs_node_key_ptr_offset(0),
				      (dst_nritems) *
				      sizeof(struct apfs_key_ptr));

	ret = apfs_tree_mod_log_eb_copy(dst, src, 0, src_nritems - push_items,
					 push_items);
	if (ret) {
		apfs_abort_transaction(trans, ret);
		return ret;
	}
	copy_extent_buffer(dst, src,
			   apfs_node_key_ptr_offset(0),
			   apfs_node_key_ptr_offset(src_nritems - push_items),
			   push_items * sizeof(struct apfs_key_ptr));

	apfs_set_header_nritems(src, src_nritems - push_items);
	apfs_set_header_nritems(dst, dst_nritems + push_items);

	apfs_mark_buffer_dirty(src);
	apfs_mark_buffer_dirty(dst);

	return ret;
}

/*
 * helper function to insert a new root level in the tree.
 * A new node is allocated, and a single item is inserted to
 * point to the existing root
 *
 * returns zero on success or < 0 on failure.
 */
static noinline int insert_new_root(struct apfs_trans_handle *trans,
			   struct apfs_root *root,
			   struct apfs_path *path, int level)
{
	struct apfs_fs_info *fs_info = root->fs_info;
	u64 lower_gen;
	struct extent_buffer *lower;
	struct extent_buffer *c;
	struct extent_buffer *old;
	struct apfs_disk_key lower_key;
	int ret;

	BUG_ON(path->nodes[level]);
	BUG_ON(path->nodes[level-1] != root->node);

	lower = path->nodes[level-1];
	if (level == 1)
		apfs_item_key(lower, &lower_key, 0);
	else
		apfs_node_key(lower, &lower_key, 0);

	c = apfs_alloc_tree_block(trans, root, 0, root->root_key.objectid,
				   &lower_key, level, root->node->start, 0,
				   APFS_NESTING_NEW_ROOT);
	if (IS_ERR(c))
		return PTR_ERR(c);

	root_add_used(root, fs_info->nodesize);

	apfs_set_header_nritems(c, 1);
	apfs_set_node_key(c, &lower_key, 0);
	apfs_set_node_blockptr(c, 0, lower->start);
	lower_gen = apfs_header_generation(lower);
	WARN_ON(lower_gen != trans->transid);

	apfs_set_node_ptr_generation(c, 0, lower_gen);

	apfs_mark_buffer_dirty(c);

	old = root->node;
	ret = apfs_tree_mod_log_insert_root(root->node, c, false);
	BUG_ON(ret < 0);
	rcu_assign_pointer(root->node, c);

	/* the super has an extra ref to root->node */
	free_extent_buffer(old);

	add_root_to_dirty_list(root);
	atomic_inc(&c->refs);
	path->nodes[level] = c;
	path->locks[level] = APFS_WRITE_LOCK;
	path->slots[level] = 0;
	return 0;
}

/*
 * worker function to insert a single pointer in a node.
 * the node should have enough room for the pointer already
 *
 * slot and level indicate where you want the key to go, and
 * blocknr is the block the key points to.
 */
static void insert_ptr(struct apfs_trans_handle *trans,
		       struct apfs_path *path,
		       struct apfs_disk_key *key, u64 bytenr,
		       int slot, int level)
{
	struct extent_buffer *lower;
	int nritems;
	int ret;

	BUG_ON(!path->nodes[level]);
	apfs_assert_tree_locked(path->nodes[level]);
	lower = path->nodes[level];
	nritems = apfs_header_nritems(lower);
	BUG_ON(slot > nritems);
	BUG_ON(nritems == APFS_NODEPTRS_PER_BLOCK(trans->fs_info));
	if (slot != nritems) {
		if (level) {
			ret = apfs_tree_mod_log_insert_move(lower, slot + 1,
					slot, nritems - slot);
			BUG_ON(ret < 0);
		}
		memmove_extent_buffer(lower,
			      apfs_node_key_ptr_offset(slot + 1),
			      apfs_node_key_ptr_offset(slot),
			      (nritems - slot) * sizeof(struct apfs_key_ptr));
	}
	if (level) {
		ret = apfs_tree_mod_log_insert_key(lower, slot,
					    APFS_MOD_LOG_KEY_ADD, GFP_NOFS);
		BUG_ON(ret < 0);
	}
	apfs_set_node_key(lower, key, slot);
	apfs_set_node_blockptr(lower, slot, bytenr);
	WARN_ON(trans->transid == 0);
	apfs_set_node_ptr_generation(lower, slot, trans->transid);
	apfs_set_header_nritems(lower, nritems + 1);
	apfs_mark_buffer_dirty(lower);
}

/*
 * split the node at the specified level in path in two.
 * The path is corrected to point to the appropriate node after the split
 *
 * Before splitting this tries to make some room in the node by pushing
 * left and right, if either one works, it returns right away.
 *
 * returns 0 on success and < 0 on failure
 */
static noinline int split_node(struct apfs_trans_handle *trans,
			       struct apfs_root *root,
			       struct apfs_path *path, int level)
{
	struct apfs_fs_info *fs_info = root->fs_info;
	struct extent_buffer *c;
	struct extent_buffer *split;
	struct apfs_disk_key disk_key;
	int mid;
	int ret;
	u32 c_nritems;

	c = path->nodes[level];
	WARN_ON(apfs_header_generation(c) != trans->transid);
	if (c == root->node) {
		/*
		 * trying to split the root, lets make a new one
		 *
		 * tree mod log: We don't log_removal old root in
		 * insert_new_root, because that root buffer will be kept as a
		 * normal node. We are going to log removal of half of the
		 * elements below with apfs_tree_mod_log_eb_copy(). We're
		 * holding a tree lock on the buffer, which is why we cannot
		 * race with other tree_mod_log users.
		 */
		ret = insert_new_root(trans, root, path, level + 1);
		if (ret)
			return ret;
	} else {
		ret = push_nodes_for_insert(trans, root, path, level);
		c = path->nodes[level];
		if (!ret && apfs_header_nritems(c) <
		    APFS_NODEPTRS_PER_BLOCK(fs_info) - 3)
			return 0;
		if (ret < 0)
			return ret;
	}

	c_nritems = apfs_header_nritems(c);
	mid = (c_nritems + 1) / 2;
	apfs_node_key(c, &disk_key, mid);

	split = apfs_alloc_tree_block(trans, root, 0, root->root_key.objectid,
				       &disk_key, level, c->start, 0,
				       APFS_NESTING_SPLIT);
	if (IS_ERR(split))
		return PTR_ERR(split);

	root_add_used(root, fs_info->nodesize);
	ASSERT(apfs_header_level(c) == level);

	ret = apfs_tree_mod_log_eb_copy(split, c, 0, mid, c_nritems - mid);
	if (ret) {
		apfs_abort_transaction(trans, ret);
		return ret;
	}
	copy_extent_buffer(split, c,
			   apfs_node_key_ptr_offset(0),
			   apfs_node_key_ptr_offset(mid),
			   (c_nritems - mid) * sizeof(struct apfs_key_ptr));
	apfs_set_header_nritems(split, c_nritems - mid);
	apfs_set_header_nritems(c, mid);

	apfs_mark_buffer_dirty(c);
	apfs_mark_buffer_dirty(split);

	insert_ptr(trans, path, &disk_key, split->start,
		   path->slots[level + 1] + 1, level + 1);

	if (path->slots[level] >= mid) {
		path->slots[level] -= mid;
		apfs_tree_unlock(c);
		free_extent_buffer(c);
		path->nodes[level] = split;
		path->slots[level + 1] += 1;
	} else {
		apfs_tree_unlock(split);
		free_extent_buffer(split);
	}
	return 0;
}

/*
 * how many bytes are required to store the items in a leaf.  start
 * and nr indicate which items in the leaf to check.  This totals up the
 * space used both by the item structs and the item data
 *
 * NOTE: This function costs o(N) time.
 */
static int leaf_space_used(struct extent_buffer *l, int start, int nr)
{
	int i;
	int used = 0;

	ASSERT(start + nr <= apfs_header_nritems(l));

	for (i = 0; i < nr; ++i) {
		used += apfs_item_key_len(l, start + i);
		used += apfs_item_val_len(l, start + i);
	}

	return used;
}

/*
 * The space between the end of the leaf items and
 * the start of the leaf data.  IOW, how much room
 * the leaf has left for both items and data
 */
noinline int apfs_leaf_free_space(struct extent_buffer *leaf)
{
	struct apfs_fs_info *fs_info = leaf->fs_info;
	int nritems = apfs_header_nritems(leaf);
	int ret;

	ret = APFS_LEAF_DATA_SIZE(fs_info) - leaf_space_used(leaf, 0, nritems);
	if (ret < 0) {
		apfs_crit(fs_info,
			   "leaf free space ret %d, leaf data size %lu, used %d nritems %d",
			   ret,
			   (unsigned long) APFS_LEAF_DATA_SIZE(fs_info),
			   leaf_space_used(leaf, 0, nritems), nritems);
	}

	if (apfs_is_root_node(leaf))
		ret += sizeof(struct apfs_root_info);
	return ret;
}

/*
 * min slot controls the lowest index we're willing to push to the
 * right.  We'll push up to and including min_slot, but no lower
 */
static noinline int __push_leaf_right(struct apfs_path *path,
				      int data_size, int empty,
				      struct extent_buffer *right,
				      int free_space, u32 left_nritems,
				      u32 min_slot)
{
	struct apfs_fs_info *fs_info = right->fs_info;
	struct extent_buffer *left = path->nodes[0];
	struct extent_buffer *upper = path->nodes[1];
	struct apfs_map_token token;
	struct apfs_disk_key disk_key;
	int slot;
	u32 i;
	int push_space = 0;
	int push_items = 0;
	struct apfs_item *item;
	u32 nr;
	u32 right_nritems;
	u32 data_end;
	u32 this_item_size;

	if (empty)
		nr = 0;
	else
		nr = max_t(u32, 1, min_slot);

	if (path->slots[0] >= left_nritems)
		push_space += data_size;

	slot = path->slots[1];
	i = left_nritems - 1;
	while (i >= nr) {
		item = apfs_item_nr(i);

		if (!empty && push_items > 0) {
			if (path->slots[0] > i)
				break;
			if (path->slots[0] == i) {
				int space = apfs_leaf_free_space(left);

				if (space + push_space * 2 > free_space)
					break;
			}
		}

		if (path->slots[0] == i)
			push_space += data_size;

		this_item_size = apfs_item_size(left, item);
		if (this_item_size + sizeof(*item) + push_space > free_space)
			break;

		push_items++;
		push_space += this_item_size + sizeof(*item);
		if (i == 0)
			break;
		i--;
	}

	if (push_items == 0)
		goto out_unlock;

	WARN_ON(!empty && push_items == left_nritems);

	/* push left to right */
	right_nritems = apfs_header_nritems(right);

	push_space = apfs_item_end_nr(left, left_nritems - push_items);
	push_space -= leaf_data_end(left);

	/* make room in the right data area */
	data_end = leaf_data_end(right);
	memmove_extent_buffer(right,
			      APFS_LEAF_DATA_OFFSET + data_end - push_space,
			      APFS_LEAF_DATA_OFFSET + data_end,
			      APFS_LEAF_DATA_SIZE(fs_info) - data_end);

	/* copy from the left data area */
	copy_extent_buffer(right, left, APFS_LEAF_DATA_OFFSET +
		     APFS_LEAF_DATA_SIZE(fs_info) - push_space,
		     APFS_LEAF_DATA_OFFSET + leaf_data_end(left),
		     push_space);

	memmove_extent_buffer(right, apfs_item_nr_offset(right, push_items),
			      apfs_item_nr_offset(right, 0),
			      right_nritems * sizeof(struct apfs_item));

	/* copy the items from left to right */
	copy_extent_buffer(right, left, apfs_item_nr_offset(right, 0),
		   apfs_item_nr_offset(left, left_nritems - push_items),
		   push_items * sizeof(struct apfs_item));

	/* update the item pointers */
	apfs_init_map_token(&token, right);
	right_nritems += push_items;
	apfs_set_header_nritems(right, right_nritems);
	push_space = APFS_LEAF_DATA_SIZE(fs_info);
	for (i = 0; i < right_nritems; i++) {
		item = apfs_item_nr(i);
		push_space -= apfs_token_item_size(&token, item);
		apfs_set_token_item_offset(&token, item, push_space);
	}

	left_nritems -= push_items;
	apfs_set_header_nritems(left, left_nritems);

	if (left_nritems)
		apfs_mark_buffer_dirty(left);
	else
		apfs_clean_tree_block(left);

	apfs_mark_buffer_dirty(right);

	apfs_item_key(right, &disk_key, 0);
	apfs_set_node_key(upper, &disk_key, slot + 1);
	apfs_mark_buffer_dirty(upper);

	/* then fixup the leaf pointer in the path */
	if (path->slots[0] >= left_nritems) {
		path->slots[0] -= left_nritems;
		if (apfs_header_nritems(path->nodes[0]) == 0)
			apfs_clean_tree_block(path->nodes[0]);
		apfs_tree_unlock(path->nodes[0]);
		free_extent_buffer(path->nodes[0]);
		path->nodes[0] = right;
		path->slots[1] += 1;
	} else {
		apfs_tree_unlock(right);
		free_extent_buffer(right);
	}
	return 0;

out_unlock:
	apfs_tree_unlock(right);
	free_extent_buffer(right);
	return 1;
}

/*
 * push some data in the path leaf to the right, trying to free up at
 * least data_size bytes.  returns zero if the push worked, nonzero otherwise
 *
 * returns 1 if the push failed because the other node didn't have enough
 * room, 0 if everything worked out and < 0 if there were major errors.
 *
 * this will push starting from min_slot to the end of the leaf.  It won't
 * push any slot lower than min_slot
 */
static int push_leaf_right(struct apfs_trans_handle *trans, struct apfs_root
			   *root, struct apfs_path *path,
			   int min_data_size, int data_size,
			   int empty, u32 min_slot)
{
	struct extent_buffer *left = path->nodes[0];
	struct extent_buffer *right;
	struct extent_buffer *upper;
	int slot;
	int free_space;
	u32 left_nritems;
	int ret;

	if (!path->nodes[1])
		return 1;

	slot = path->slots[1];
	upper = path->nodes[1];
	if (slot >= apfs_header_nritems(upper) - 1)
		return 1;

	apfs_assert_tree_locked(path->nodes[1]);

	right = apfs_read_node_slot(upper, slot + 1);
	/*
	 * slot + 1 is not valid or we fail to read the right node,
	 * no big deal, just return.
	 */
	if (IS_ERR(right))
		return 1;

	__apfs_tree_lock(right, APFS_NESTING_RIGHT);

	free_space = apfs_leaf_free_space(right);
	if (free_space < data_size)
		goto out_unlock;

	/* cow and double check */
	ret = apfs_cow_block(trans, root, right, upper,
			      slot + 1, &right, APFS_NESTING_RIGHT_COW);
	if (ret)
		goto out_unlock;

	free_space = apfs_leaf_free_space(right);
	if (free_space < data_size)
		goto out_unlock;

	left_nritems = apfs_header_nritems(left);
	if (left_nritems == 0)
		goto out_unlock;

	if (check_sibling_keys(left, right)) {
		ret = -EUCLEAN;
		apfs_tree_unlock(right);
		free_extent_buffer(right);
		return ret;
	}
	if (path->slots[0] == left_nritems && !empty) {
		/* Key greater than all keys in the leaf, right neighbor has
		 * enough room for it and we're not emptying our leaf to delete
		 * it, therefore use right neighbor to insert the new item and
		 * no need to touch/dirty our left leaf. */
		apfs_tree_unlock(left);
		free_extent_buffer(left);
		path->nodes[0] = right;
		path->slots[0] = 0;
		path->slots[1]++;
		return 0;
	}

	return __push_leaf_right(path, min_data_size, empty,
				right, free_space, left_nritems, min_slot);
out_unlock:
	apfs_tree_unlock(right);
	free_extent_buffer(right);
	return 1;
}

/*
 * push some data in the path leaf to the left, trying to free up at
 * least data_size bytes.  returns zero if the push worked, nonzero otherwise
 *
 * max_slot can put a limit on how far into the leaf we'll push items.  The
 * item at 'max_slot' won't be touched.  Use (u32)-1 to make us do all the
 * items
 */
static noinline int __push_leaf_left(struct apfs_path *path, int data_size,
				     int empty, struct extent_buffer *left,
				     int free_space, u32 right_nritems,
				     u32 max_slot)
{
	struct apfs_fs_info *fs_info = left->fs_info;
	struct apfs_disk_key disk_key;
	struct extent_buffer *right = path->nodes[0];
	int i;
	int push_space = 0;
	int push_items = 0;
	struct apfs_item *item;
	u32 old_left_nritems;
	u32 nr;
	int ret = 0;
	u32 this_item_size;
	u32 old_left_item_size;
	struct apfs_map_token token;

	if (empty)
		nr = min(right_nritems, max_slot);
	else
		nr = min(right_nritems - 1, max_slot);

	for (i = 0; i < nr; i++) {
		item = apfs_item_nr(i);

		if (!empty && push_items > 0) {
			if (path->slots[0] < i)
				break;
			if (path->slots[0] == i) {
				int space = apfs_leaf_free_space(right);

				if (space + push_space * 2 > free_space)
					break;
			}
		}

		if (path->slots[0] == i)
			push_space += data_size;

		this_item_size = apfs_item_size(right, item);
		if (this_item_size + sizeof(*item) + push_space > free_space)
			break;

		push_items++;
		push_space += this_item_size + sizeof(*item);
	}

	if (push_items == 0) {
		ret = 1;
		goto out;
	}
	WARN_ON(!empty && push_items == apfs_header_nritems(right));

	/* push data from right to left */
	copy_extent_buffer(left, right,
			   apfs_item_nr_offset(left, apfs_header_nritems(left)),
			   apfs_item_nr_offset(right, 0),
			   push_items * sizeof(struct apfs_item));

	push_space = APFS_LEAF_DATA_SIZE(fs_info) -
		     apfs_item_offset_nr(right, push_items - 1);

	copy_extent_buffer(left, right, APFS_LEAF_DATA_OFFSET +
		     leaf_data_end(left) - push_space,
		     APFS_LEAF_DATA_OFFSET +
		     apfs_item_offset_nr(right, push_items - 1),
		     push_space);
	old_left_nritems = apfs_header_nritems(left);
	BUG_ON(old_left_nritems <= 0);

	apfs_init_map_token(&token, left);
	old_left_item_size = apfs_item_offset_nr(left, old_left_nritems - 1);
	for (i = old_left_nritems; i < old_left_nritems + push_items; i++) {
		u32 ioff;

		item = apfs_item_nr(i);

		ioff = apfs_token_item_offset(&token, item);
		apfs_set_token_item_offset(&token, item,
		      ioff - (APFS_LEAF_DATA_SIZE(fs_info) - old_left_item_size));
	}
	apfs_set_header_nritems(left, old_left_nritems + push_items);

	/* fixup right node */
	if (push_items > right_nritems)
		WARN(1, KERN_CRIT "push items %d nr %u\n", push_items,
		       right_nritems);

	if (push_items < right_nritems) {
		push_space = apfs_item_offset_nr(right, push_items - 1) -
						  leaf_data_end(right);
		memmove_extent_buffer(right, APFS_LEAF_DATA_OFFSET +
				      APFS_LEAF_DATA_SIZE(fs_info) - push_space,
				      APFS_LEAF_DATA_OFFSET +
				      leaf_data_end(right), push_space);

		memmove_extent_buffer(right, apfs_item_nr_offset(right, 0),
			      apfs_item_nr_offset(right, push_items),
			     (apfs_header_nritems(right) - push_items) *
			     sizeof(struct apfs_item));
	}

	apfs_init_map_token(&token, right);
	right_nritems -= push_items;
	apfs_set_header_nritems(right, right_nritems);
	push_space = APFS_LEAF_DATA_SIZE(fs_info);
	for (i = 0; i < right_nritems; i++) {
		item = apfs_item_nr(i);

		push_space = push_space - apfs_token_item_size(&token, item);
		apfs_set_token_item_offset(&token, item, push_space);
	}

	apfs_mark_buffer_dirty(left);
	if (right_nritems)
		apfs_mark_buffer_dirty(right);
	else
		apfs_clean_tree_block(right);

	apfs_item_key(right, &disk_key, 0);
	fixup_low_keys(path, &disk_key, 1);

	/* then fixup the leaf pointer in the path */
	if (path->slots[0] < push_items) {
		path->slots[0] += old_left_nritems;
		apfs_tree_unlock(path->nodes[0]);
		free_extent_buffer(path->nodes[0]);
		path->nodes[0] = left;
		path->slots[1] -= 1;
	} else {
		apfs_tree_unlock(left);
		free_extent_buffer(left);
		path->slots[0] -= push_items;
	}
	BUG_ON(path->slots[0] < 0);
	return ret;
out:
	apfs_tree_unlock(left);
	free_extent_buffer(left);
	return ret;
}

/*
 * push some data in the path leaf to the left, trying to free up at
 * least data_size bytes.  returns zero if the push worked, nonzero otherwise
 *
 * max_slot can put a limit on how far into the leaf we'll push items.  The
 * item at 'max_slot' won't be touched.  Use (u32)-1 to make us push all the
 * items
 */
static int push_leaf_left(struct apfs_trans_handle *trans, struct apfs_root
			  *root, struct apfs_path *path, int min_data_size,
			  int data_size, int empty, u32 max_slot)
{
	struct extent_buffer *right = path->nodes[0];
	struct extent_buffer *left;
	int slot;
	int free_space;
	u32 right_nritems;
	int ret = 0;

	slot = path->slots[1];
	if (slot == 0)
		return 1;
	if (!path->nodes[1])
		return 1;

	right_nritems = apfs_header_nritems(right);
	if (right_nritems == 0)
		return 1;

	apfs_assert_tree_locked(path->nodes[1]);

	left = apfs_read_node_slot(path->nodes[1], slot - 1);
	/*
	 * slot - 1 is not valid or we fail to read the left node,
	 * no big deal, just return.
	 */
	if (IS_ERR(left))
		return 1;

	__apfs_tree_lock(left, APFS_NESTING_LEFT);

	free_space = apfs_leaf_free_space(left);
	if (free_space < data_size) {
		ret = 1;
		goto out;
	}

	/* cow and double check */
	ret = apfs_cow_block(trans, root, left,
			      path->nodes[1], slot - 1, &left,
			      APFS_NESTING_LEFT_COW);
	if (ret) {
		/* we hit -ENOSPC, but it isn't fatal here */
		if (ret == -ENOSPC)
			ret = 1;
		goto out;
	}

	free_space = apfs_leaf_free_space(left);
	if (free_space < data_size) {
		ret = 1;
		goto out;
	}

	if (check_sibling_keys(left, right)) {
		ret = -EUCLEAN;
		goto out;
	}
	return __push_leaf_left(path, min_data_size,
			       empty, left, free_space, right_nritems,
			       max_slot);
out:
	apfs_tree_unlock(left);
	free_extent_buffer(left);
	return ret;
}

/*
 * split the path's leaf in two, making sure there is at least data_size
 * available for the resulting leaf level of the path.
 */
static noinline void copy_for_split(struct apfs_trans_handle *trans,
				    struct apfs_path *path,
				    struct extent_buffer *l,
				    struct extent_buffer *right,
				    int slot, int mid, int nritems)
{
	struct apfs_fs_info *fs_info = trans->fs_info;
	int data_copy_size;
	int rt_data_off;
	int i;
	struct apfs_disk_key disk_key;
	struct apfs_map_token token;

	nritems = nritems - mid;
	apfs_set_header_nritems(right, nritems);
	data_copy_size = apfs_item_end_nr(l, mid) - leaf_data_end(l);

	copy_extent_buffer(right, l, apfs_item_nr_offset(right, 0),
			   apfs_item_nr_offset(l, mid),
			   nritems * sizeof(struct apfs_item));

	copy_extent_buffer(right, l,
		     APFS_LEAF_DATA_OFFSET + APFS_LEAF_DATA_SIZE(fs_info) -
		     data_copy_size, APFS_LEAF_DATA_OFFSET +
		     leaf_data_end(l), data_copy_size);

	rt_data_off = APFS_LEAF_DATA_SIZE(fs_info) - apfs_item_end_nr(l, mid);

	apfs_init_map_token(&token, right);
	for (i = 0; i < nritems; i++) {
		struct apfs_item *item = apfs_item_nr(i);
		u32 ioff;

		ioff = apfs_token_item_offset(&token, item);
		apfs_set_token_item_offset(&token, item, ioff + rt_data_off);
	}

	apfs_set_header_nritems(l, mid);
	apfs_item_key(right, &disk_key, 0);
	insert_ptr(trans, path, &disk_key, right->start, path->slots[1] + 1, 1);

	apfs_mark_buffer_dirty(right);
	apfs_mark_buffer_dirty(l);
	BUG_ON(path->slots[0] != slot);

	if (mid <= slot) {
		apfs_tree_unlock(path->nodes[0]);
		free_extent_buffer(path->nodes[0]);
		path->nodes[0] = right;
		path->slots[0] -= mid;
		path->slots[1] += 1;
	} else {
		apfs_tree_unlock(right);
		free_extent_buffer(right);
	}

	BUG_ON(path->slots[0] < 0);
}

/*
 * double splits happen when we need to insert a big item in the middle
 * of a leaf.  A double split can leave us with 3 mostly empty leaves:
 * leaf: [ slots 0 - N] [ our target ] [ N + 1 - total in leaf ]
 *          A                 B                 C
 *
 * We avoid this by trying to push the items on either side of our target
 * into the adjacent leaves.  If all goes well we can avoid the double split
 * completely.
 */
static noinline int push_for_double_split(struct apfs_trans_handle *trans,
					  struct apfs_root *root,
					  struct apfs_path *path,
					  int data_size)
{
	int ret;
	int progress = 0;
	int slot;
	u32 nritems;
	int space_needed = data_size;

	slot = path->slots[0];
	if (slot < apfs_header_nritems(path->nodes[0]))
		space_needed -= apfs_leaf_free_space(path->nodes[0]);

	/*
	 * try to push all the items after our slot into the
	 * right leaf
	 */
	ret = push_leaf_right(trans, root, path, 1, space_needed, 0, slot);
	if (ret < 0)
		return ret;

	if (ret == 0)
		progress++;

	nritems = apfs_header_nritems(path->nodes[0]);
	/*
	 * our goal is to get our slot at the start or end of a leaf.  If
	 * we've done so we're done
	 */
	if (path->slots[0] == 0 || path->slots[0] == nritems)
		return 0;

	if (apfs_leaf_free_space(path->nodes[0]) >= data_size)
		return 0;

	/* try to push all the items before our slot into the next leaf */
	slot = path->slots[0];
	space_needed = data_size;
	if (slot > 0)
		space_needed -= apfs_leaf_free_space(path->nodes[0]);
	ret = push_leaf_left(trans, root, path, 1, space_needed, 0, slot);
	if (ret < 0)
		return ret;

	if (ret == 0)
		progress++;

	if (progress)
		return 0;
	return 1;
}

/*
 * split the path's leaf in two, making sure there is at least data_size
 * available for the resulting leaf level of the path.
 *
 * returns 0 if all went well and < 0 on failure.
 */
static noinline int split_leaf(struct apfs_trans_handle *trans,
			       struct apfs_root *root,
			       const struct apfs_key *ins_key,
			       struct apfs_path *path, int data_size,
			       int extend)
{
	struct apfs_disk_key disk_key;
	struct extent_buffer *l;
	u32 nritems;
	int mid;
	int slot;
	struct extent_buffer *right;
	struct apfs_fs_info *fs_info = root->fs_info;
	int ret = 0;
	int wret;
	int split;
	int num_doubles = 0;
	int tried_avoid_double = 0;

	l = path->nodes[0];
	slot = path->slots[0];
	if (extend && data_size + apfs_item_size_nr(l, slot) +
	    sizeof(struct apfs_item) > APFS_LEAF_DATA_SIZE(fs_info))
		return -EOVERFLOW;

	/* first try to make some room by pushing left and right */
	if (data_size && path->nodes[1]) {
		int space_needed = data_size;

		if (slot < apfs_header_nritems(l))
			space_needed -= apfs_leaf_free_space(l);

		wret = push_leaf_right(trans, root, path, space_needed,
				       space_needed, 0, 0);
		if (wret < 0)
			return wret;
		if (wret) {
			space_needed = data_size;
			if (slot > 0)
				space_needed -= apfs_leaf_free_space(l);
			wret = push_leaf_left(trans, root, path, space_needed,
					      space_needed, 0, (u32)-1);
			if (wret < 0)
				return wret;
		}
		l = path->nodes[0];

		/* did the pushes work? */
		if (apfs_leaf_free_space(l) >= data_size)
			return 0;
	}

	if (!path->nodes[1]) {
		ret = insert_new_root(trans, root, path, 1);
		if (ret)
			return ret;
	}
again:
	split = 1;
	l = path->nodes[0];
	slot = path->slots[0];
	nritems = apfs_header_nritems(l);
	mid = (nritems + 1) / 2;

	if (mid <= slot) {
		if (nritems == 1 ||
		    leaf_space_used(l, mid, nritems - mid) + data_size >
			APFS_LEAF_DATA_SIZE(fs_info)) {
			if (slot >= nritems) {
				split = 0;
			} else {
				mid = slot;
				if (mid != nritems &&
				    leaf_space_used(l, mid, nritems - mid) +
				    data_size > APFS_LEAF_DATA_SIZE(fs_info)) {
					if (data_size && !tried_avoid_double)
						goto push_for_double;
					split = 2;
				}
			}
		}
	} else {
		if (leaf_space_used(l, 0, mid) + data_size >
			APFS_LEAF_DATA_SIZE(fs_info)) {
			if (!extend && data_size && slot == 0) {
				split = 0;
			} else if ((extend || !data_size) && slot == 0) {
				mid = 1;
			} else {
				mid = slot;
				if (mid != nritems &&
				    leaf_space_used(l, mid, nritems - mid) +
				    data_size > APFS_LEAF_DATA_SIZE(fs_info)) {
					if (data_size && !tried_avoid_double)
						goto push_for_double;
					split = 2;
				}
			}
		}
	}

	if (split == 0)
		apfs_cpu_key_to_disk(l, &disk_key, ins_key);
	else
		apfs_item_key(l, &disk_key, mid);

	/*
	 * We have to about APFS_NESTING_NEW_ROOT here if we've done a double
	 * split, because we're only allowed to have MAX_LOCKDEP_SUBCLASSES
	 * subclasses, which is 8 at the time of this patch, and we've maxed it
	 * out.  In the future we could add a
	 * APFS_NESTING_SPLIT_THE_SPLITTENING if we need to, but for now just
	 * use APFS_NESTING_NEW_ROOT.
	 */
	right = apfs_alloc_tree_block(trans, root, 0, root->root_key.objectid,
				       &disk_key, 0, l->start, 0,
				       num_doubles ? APFS_NESTING_NEW_ROOT :
				       APFS_NESTING_SPLIT);
	if (IS_ERR(right))
		return PTR_ERR(right);

	root_add_used(root, fs_info->nodesize);

	if (split == 0) {
		if (mid <= slot) {
			apfs_set_header_nritems(right, 0);
			insert_ptr(trans, path, &disk_key,
				   right->start, path->slots[1] + 1, 1);
			apfs_tree_unlock(path->nodes[0]);
			free_extent_buffer(path->nodes[0]);
			path->nodes[0] = right;
			path->slots[0] = 0;
			path->slots[1] += 1;
		} else {
			apfs_set_header_nritems(right, 0);
			insert_ptr(trans, path, &disk_key,
				   right->start, path->slots[1], 1);
			apfs_tree_unlock(path->nodes[0]);
			free_extent_buffer(path->nodes[0]);
			path->nodes[0] = right;
			path->slots[0] = 0;
			if (path->slots[1] == 0)
				fixup_low_keys(path, &disk_key, 1);
		}
		/*
		 * We create a new leaf 'right' for the required ins_len and
		 * we'll do apfs_mark_buffer_dirty() on this leaf after copying
		 * the content of ins_len to 'right'.
		 */
		return ret;
	}

	copy_for_split(trans, path, l, right, slot, mid, nritems);

	if (split == 2) {
		BUG_ON(num_doubles != 0);
		num_doubles++;
		goto again;
	}

	return 0;

push_for_double:
	push_for_double_split(trans, root, path, data_size);
	tried_avoid_double = 1;
	if (apfs_leaf_free_space(path->nodes[0]) >= data_size)
		return 0;
	goto again;
}

static noinline int setup_leaf_for_split(struct apfs_trans_handle *trans,
					 struct apfs_root *root,
					 struct apfs_path *path, int ins_len)
{
	struct apfs_key key = {};
	struct extent_buffer *leaf;
	struct apfs_file_extent_item *fi;
	u64 extent_len = 0;
	u32 item_size;
	int ret;

	leaf = path->nodes[0];
	apfs_item_key_to_cpu(leaf, &key, path->slots[0]);

	BUG_ON(key.type != APFS_EXTENT_DATA_KEY &&
	       key.type != APFS_EXTENT_CSUM_KEY);

	if (apfs_leaf_free_space(leaf) >= ins_len)
		return 0;

	item_size = apfs_item_size_nr(leaf, path->slots[0]);
	if (key.type == APFS_EXTENT_DATA_KEY) {
		fi = apfs_item_ptr(leaf, path->slots[0],
				    struct apfs_file_extent_item);
		extent_len = apfs_file_extent_num_bytes(leaf, fi);
	}
	apfs_release_path(path);

	path->keep_locks = 1;
	path->search_for_split = 1;
	ret = apfs_search_slot(trans, root, &key, path, 0, 1);
	path->search_for_split = 0;
	if (ret > 0)
		ret = -EAGAIN;
	if (ret < 0)
		goto err;

	ret = -EAGAIN;
	leaf = path->nodes[0];
	/* if our item isn't there, return now */
	if (item_size != apfs_item_size_nr(leaf, path->slots[0]))
		goto err;

	/* the leaf has  changed, it now has room.  return now */
	if (apfs_leaf_free_space(path->nodes[0]) >= ins_len)
		goto err;

	if (key.type == APFS_EXTENT_DATA_KEY) {
		fi = apfs_item_ptr(leaf, path->slots[0],
				    struct apfs_file_extent_item);
		if (extent_len != apfs_file_extent_num_bytes(leaf, fi))
			goto err;
	}

	ret = split_leaf(trans, root, &key, path, ins_len, 1);
	if (ret)
		goto err;

	path->keep_locks = 0;
	apfs_unlock_up_safe(path, 1);
	return 0;
err:
	path->keep_locks = 0;
	return ret;
}

static noinline int split_item(struct apfs_path *path,
			       const struct apfs_key *new_key,
			       unsigned long split_offset)
{
	struct extent_buffer *leaf;
	struct apfs_item *item;
	struct apfs_item *new_item;
	int slot;
	char *buf;
	u32 nritems;
	u32 item_size;
	u32 orig_offset;
	struct apfs_disk_key disk_key;

	leaf = path->nodes[0];
	BUG_ON(apfs_leaf_free_space(leaf) < sizeof(struct apfs_item));

	item = apfs_item_nr(path->slots[0]);
	orig_offset = apfs_item_offset(leaf, item);
	item_size = apfs_item_size(leaf, item);

	buf = kmalloc(item_size, GFP_NOFS);
	if (!buf)
		return -ENOMEM;

	read_extent_buffer(leaf, buf, apfs_item_ptr_offset(leaf,
			    path->slots[0]), item_size);

	slot = path->slots[0] + 1;
	nritems = apfs_header_nritems(leaf);
	if (slot != nritems) {
		/* shift the items */
		memmove_extent_buffer(leaf, apfs_item_nr_offset(leaf, slot + 1),
				apfs_item_nr_offset(leaf, slot),
				(nritems - slot) * sizeof(struct apfs_item));
	}

	apfs_cpu_key_to_disk(leaf, &disk_key, new_key);
	apfs_set_item_key(leaf, &disk_key, slot);

	new_item = apfs_item_nr(slot);

	apfs_set_item_offset(leaf, new_item, orig_offset);
	apfs_set_item_size(leaf, new_item, item_size - split_offset);

	apfs_set_item_offset(leaf, item,
			      orig_offset + item_size - split_offset);
	apfs_set_item_size(leaf, item, split_offset);

	apfs_set_header_nritems(leaf, nritems + 1);

	/* write the data for the start of the original item */
	write_extent_buffer(leaf, buf,
			    apfs_item_ptr_offset(leaf, path->slots[0]),
			    split_offset);

	/* write the data for the new item */
	write_extent_buffer(leaf, buf + split_offset,
			    apfs_item_ptr_offset(leaf, slot),
			    item_size - split_offset);
	apfs_mark_buffer_dirty(leaf);

	BUG_ON(apfs_leaf_free_space(leaf) < 0);
	kfree(buf);
	return 0;
}

/*
 * This function splits a single item into two items,
 * giving 'new_key' to the new item and splitting the
 * old one at split_offset (from the start of the item).
 *
 * The path may be released by this operation.  After
 * the split, the path is pointing to the old item.  The
 * new item is going to be in the same node as the old one.
 *
 * Note, the item being split must be smaller enough to live alone on
 * a tree block with room for one extra struct apfs_item
 *
 * This allows us to split the item in place, keeping a lock on the
 * leaf the entire time.
 */
int apfs_split_item(struct apfs_trans_handle *trans,
		     struct apfs_root *root,
		     struct apfs_path *path,
		     const struct apfs_key *new_key,
		     unsigned long split_offset)
{
	int ret;
	ret = setup_leaf_for_split(trans, root, path,
				   sizeof(struct apfs_item));
	if (ret)
		return ret;

	ret = split_item(path, new_key, split_offset);
	return ret;
}

/*
 * This function duplicate a item, giving 'new_key' to the new item.
 * It guarantees both items live in the same tree leaf and the new item
 * is contiguous with the original item.
 *
 * This allows us to split file extent in place, keeping a lock on the
 * leaf the entire time.
 */
int apfs_duplicate_item(struct apfs_trans_handle *trans,
			 struct apfs_root *root,
			 struct apfs_path *path,
			 const struct apfs_key *new_key)
{
	struct extent_buffer *leaf;
	int ret;
	u32 item_size;

	leaf = path->nodes[0];
	item_size = apfs_item_size_nr(leaf, path->slots[0]);
	ret = setup_leaf_for_split(trans, root, path,
				   item_size + sizeof(struct apfs_item));
	if (ret)
		return ret;

	path->slots[0]++;
	setup_items_for_insert(root, path, new_key, &item_size, 1);
	leaf = path->nodes[0];
	memcpy_extent_buffer(leaf,
			     apfs_item_ptr_offset(leaf, path->slots[0]),
			     apfs_item_ptr_offset(leaf, path->slots[0] - 1),
			     item_size);
	return 0;
}

/*
 * make the item pointed to by the path smaller.  new_size indicates
 * how small to make it, and from_end tells us if we just chop bytes
 * off the end of the item or if we shift the item to chop bytes off
 * the front.
 */
void apfs_truncate_item(struct apfs_path *path, u32 new_size, int from_end)
{
	int slot;
	struct extent_buffer *leaf;
	struct apfs_item *item;
	u32 nritems;
	unsigned int data_end;
	unsigned int old_data_start;
	unsigned int old_size;
	unsigned int size_diff;
	int i;
	struct apfs_map_token token;

	leaf = path->nodes[0];
	slot = path->slots[0];

	old_size = apfs_item_size_nr(leaf, slot);
	if (old_size == new_size)
		return;

	nritems = apfs_header_nritems(leaf);
	data_end = leaf_data_end(leaf);

	old_data_start = apfs_item_offset_nr(leaf, slot);

	size_diff = old_size - new_size;

	BUG_ON(slot < 0);
	BUG_ON(slot >= nritems);

	/*
	 * item0..itemN ... dataN.offset..dataN.size .. data0.size
	 */
	/* first correct the data pointers */
	apfs_init_map_token(&token, leaf);
	for (i = slot; i < nritems; i++) {
		u32 ioff;
		item = apfs_item_nr(i);

		ioff = apfs_token_item_offset(&token, item);
		apfs_set_token_item_offset(&token, item, ioff + size_diff);
	}

	/* shift the data */
	if (from_end) {
		memmove_extent_buffer(leaf, APFS_LEAF_DATA_OFFSET +
			      data_end + size_diff, APFS_LEAF_DATA_OFFSET +
			      data_end, old_data_start + new_size - data_end);
	} else {
		struct apfs_disk_key disk_key;
		u64 offset;

		apfs_item_key(leaf, &disk_key, slot);

		if (apfs_disk_key_type(&disk_key) == APFS_EXTENT_DATA_KEY) {
			unsigned long ptr;
			struct apfs_file_extent_item *fi;

			fi = apfs_item_ptr(leaf, slot,
					    struct apfs_file_extent_item);
			fi = (struct apfs_file_extent_item *)(
			     (unsigned long)fi - size_diff);

			if (apfs_file_extent_type(leaf, fi) ==
			    APFS_FILE_EXTENT_INLINE) {
				ptr = apfs_item_ptr_offset(leaf, slot);
				memmove_extent_buffer(leaf, ptr,
				      (unsigned long)fi,
				      APFS_FILE_EXTENT_INLINE_DATA_START);
			}
		}

		memmove_extent_buffer(leaf, APFS_LEAF_DATA_OFFSET +
			      data_end + size_diff, APFS_LEAF_DATA_OFFSET +
			      data_end, old_data_start - data_end);

		offset = apfs_disk_key_offset(&disk_key);
		apfs_set_disk_key_offset(&disk_key, offset + size_diff);
		apfs_set_item_key(leaf, &disk_key, slot);
		if (slot == 0)
			fixup_low_keys(path, &disk_key, 1);
	}

	item = apfs_item_nr(slot);
	apfs_set_item_size(leaf, item, new_size);
	apfs_mark_buffer_dirty(leaf);

	if (apfs_leaf_free_space(leaf) < 0) {
		apfs_print_leaf(leaf);
		BUG();
	}
}

/*
 * make the item pointed to by the path bigger, data_size is the added size.
 */
void apfs_extend_item(struct apfs_path *path, u32 data_size)
{
	int slot;
	struct extent_buffer *leaf;
	struct apfs_item *item;
	u32 nritems;
	unsigned int data_end;
	unsigned int old_data;
	unsigned int old_size;
	int i;
	struct apfs_map_token token;

	leaf = path->nodes[0];

	nritems = apfs_header_nritems(leaf);
	data_end = leaf_data_end(leaf);

	if (apfs_leaf_free_space(leaf) < data_size) {
		apfs_print_leaf(leaf);
		BUG();
	}
	slot = path->slots[0];
	old_data = apfs_item_end_nr(leaf, slot);

	BUG_ON(slot < 0);
	if (slot >= nritems) {
		apfs_print_leaf(leaf);
		apfs_crit(leaf->fs_info, "slot %d too large, nritems %d",
			   slot, nritems);
		BUG();
	}

	/*
	 * item0..itemN ... dataN.offset..dataN.size .. data0.size
	 */
	/* first correct the data pointers */
	apfs_init_map_token(&token, leaf);
	for (i = slot; i < nritems; i++) {
		u32 ioff;
		item = apfs_item_nr(i);

		ioff = apfs_token_item_offset(&token, item);
		apfs_set_token_item_offset(&token, item, ioff - data_size);
	}

	/* shift the data */
	memmove_extent_buffer(leaf, APFS_LEAF_DATA_OFFSET +
		      data_end - data_size, APFS_LEAF_DATA_OFFSET +
		      data_end, old_data - data_end);

	data_end = old_data;
	old_size = apfs_item_size_nr(leaf, slot);
	item = apfs_item_nr(slot);
	apfs_set_item_size(leaf, item, old_size + data_size);
	apfs_mark_buffer_dirty(leaf);

	if (apfs_leaf_free_space(leaf) < 0) {
		apfs_print_leaf(leaf);
		BUG();
	}
}

/**
 * setup_items_for_insert - Helper called before inserting one or more items
 * to a leaf. Main purpose is to save stack depth by doing the bulk of the work
 * in a function that doesn't call apfs_search_slot
 *
 * @root:	root we are inserting items to
 * @path:	points to the leaf/slot where we are going to insert new items
 * @cpu_key:	array of keys for items to be inserted
 * @data_size:	size of the body of each item we are going to insert
 * @nr:		size of @cpu_key/@data_size arrays
 */
void setup_items_for_insert(struct apfs_root *root, struct apfs_path *path,
			    const struct apfs_key *cpu_key, u32 *data_size,
			    int nr)
{
	struct apfs_fs_info *fs_info = root->fs_info;
	struct apfs_item *item;
	int i;
	u32 nritems;
	unsigned int data_end;
	struct apfs_disk_key disk_key;
	struct extent_buffer *leaf;
	int slot;
	struct apfs_map_token token;
	u32 total_size;
	u32 total_data = 0;

	for (i = 0; i < nr; i++)
		total_data += data_size[i];
	total_size = total_data + (nr * sizeof(struct apfs_item));

	if (path->slots[0] == 0) {
		apfs_cpu_key_to_disk(path->nodes[0], &disk_key, cpu_key);
		fixup_low_keys(path, &disk_key, 1);
	}
	apfs_unlock_up_safe(path, 1);

	leaf = path->nodes[0];
	slot = path->slots[0];

	nritems = apfs_header_nritems(leaf);
	data_end = leaf_data_end(leaf);

	if (apfs_leaf_free_space(leaf) < total_size) {
		apfs_print_leaf(leaf);
		apfs_crit(fs_info, "not enough freespace need %u have %d",
			   total_size, apfs_leaf_free_space(leaf));
		BUG();
	}

	apfs_init_map_token(&token, leaf);
	if (slot != nritems) {
		unsigned int old_data = apfs_item_end_nr(leaf, slot);

		if (old_data < data_end) {
			apfs_print_leaf(leaf);
			apfs_crit(fs_info,
		"item at slot %d with data offset %u beyond data end of leaf %u",
				   slot, old_data, data_end);
			BUG();
		}
		/*
		 * item0..itemN ... dataN.offset..dataN.size .. data0.size
		 */
		/* first correct the data pointers */
		for (i = slot; i < nritems; i++) {
			u32 ioff;

			item = apfs_item_nr(i);
			ioff = apfs_token_item_offset(&token, item);
			apfs_set_token_item_offset(&token, item,
						    ioff - total_data);
		}
		/* shift the items */
		memmove_extent_buffer(leaf, apfs_item_nr_offset(leaf, slot + nr),
			      apfs_item_nr_offset(leaf, slot),
			      (nritems - slot) * sizeof(struct apfs_item));

		/* shift the data */
		memmove_extent_buffer(leaf, APFS_LEAF_DATA_OFFSET +
			      data_end - total_data, APFS_LEAF_DATA_OFFSET +
			      data_end, old_data - data_end);
		data_end = old_data;
	}

	/* setup the item for the new data */
	for (i = 0; i < nr; i++) {
		apfs_cpu_key_to_disk(leaf, &disk_key, cpu_key + i);
		apfs_set_item_key(leaf, &disk_key, slot + i);
		item = apfs_item_nr(slot + i);
		data_end -= data_size[i];
		apfs_set_token_item_offset(&token, item, data_end);
		apfs_set_token_item_size(&token, item, data_size[i]);
	}

	apfs_set_header_nritems(leaf, nritems + nr);
	apfs_mark_buffer_dirty(leaf);

	if (apfs_leaf_free_space(leaf) < 0) {
		apfs_print_leaf(leaf);
		BUG();
	}
}

/*
 * Given a key and some data, insert items into the tree.
 * This does all the path init required, making room in the tree if needed.
 */
int apfs_insert_empty_items(struct apfs_trans_handle *trans,
			    struct apfs_root *root,
			    struct apfs_path *path,
			    const struct apfs_key *cpu_key, u32 *data_size,
			    int nr)
{
	int ret = 0;
	int slot;
	int i;
	u32 total_size = 0;
	u32 total_data = 0;

	for (i = 0; i < nr; i++)
		total_data += data_size[i];

	total_size = total_data + (nr * sizeof(struct apfs_item));
	ret = apfs_search_slot(trans, root, cpu_key, path, total_size, 1);
	if (ret == 0)
		return -EEXIST;
	if (ret < 0)
		return ret;

	slot = path->slots[0];
	BUG_ON(slot < 0);

	setup_items_for_insert(root, path, cpu_key, data_size, nr);
	return 0;
}

/*
 * Given a key and some data, insert an item into the tree.
 * This does all the path init required, making room in the tree if needed.
 */
int apfs_insert_item(struct apfs_trans_handle *trans, struct apfs_root *root,
		      const struct apfs_key *cpu_key, void *data,
		      u32 data_size)
{
	int ret = 0;
	struct apfs_path *path;
	struct extent_buffer *leaf;
	unsigned long ptr;

	path = apfs_alloc_path();
	if (!path)
		return -ENOMEM;
	ret = apfs_insert_empty_item(trans, root, path, cpu_key, data_size);
	if (!ret) {
		leaf = path->nodes[0];
		ptr = apfs_item_ptr_offset(leaf, path->slots[0]);
		write_extent_buffer(leaf, data, ptr, data_size);
		apfs_mark_buffer_dirty(leaf);
	}
	apfs_free_path(path);
	return ret;
}

/*
 * delete the pointer from a given node.
 *
 * the tree should have been previously balanced so the deletion does not
 * empty a node.
 */
static void del_ptr(struct apfs_root *root, struct apfs_path *path,
		    int level, int slot)
{
	struct extent_buffer *parent = path->nodes[level];
	u32 nritems;
	int ret;

	nritems = apfs_header_nritems(parent);
	if (slot != nritems - 1) {
		if (level) {
			ret = apfs_tree_mod_log_insert_move(parent, slot,
					slot + 1, nritems - slot - 1);
			BUG_ON(ret < 0);
		}
		memmove_extent_buffer(parent,
			      apfs_node_key_ptr_offset(slot),
			      apfs_node_key_ptr_offset(slot + 1),
			      sizeof(struct apfs_key_ptr) *
			      (nritems - slot - 1));
	} else if (level) {
		ret = apfs_tree_mod_log_insert_key(parent, slot,
				APFS_MOD_LOG_KEY_REMOVE, GFP_NOFS);
		BUG_ON(ret < 0);
	}

	nritems--;
	apfs_set_header_nritems(parent, nritems);
	if (nritems == 0 && parent == root->node) {
		BUG_ON(apfs_header_level(root->node) != 1);
		/* just turn the root into a leaf and break */
		apfs_set_header_level(root->node, 0);
	} else if (slot == 0) {
		struct apfs_disk_key disk_key;

		apfs_node_key(parent, &disk_key, 0);
		fixup_low_keys(path, &disk_key, level + 1);
	}
	apfs_mark_buffer_dirty(parent);
}

/*
 * a helper function to delete the leaf pointed to by path->slots[1] and
 * path->nodes[1].
 *
 * This deletes the pointer in path->nodes[1] and frees the leaf
 * block extent.  zero is returned if it all worked out, < 0 otherwise.
 *
 * The path must have already been setup for deleting the leaf, including
 * all the proper balancing.  path->nodes[1] must be locked.
 */
static noinline void apfs_del_leaf(struct apfs_trans_handle *trans,
				    struct apfs_root *root,
				    struct apfs_path *path,
				    struct extent_buffer *leaf)
{
	WARN_ON(apfs_header_generation(leaf) != trans->transid);
	del_ptr(root, path, 1, path->slots[1]);

	/*
	 * apfs_free_extent is expensive, we want to make sure we
	 * aren't holding any locks when we call it
	 */
	apfs_unlock_up_safe(path, 0);

	root_sub_used(root, leaf->len);

	atomic_inc(&leaf->refs);
	apfs_free_tree_block(trans, root, leaf, 0, 1);
	free_extent_buffer_stale(leaf);
}
/*
 * delete the item at the leaf level in path.  If that empties
 * the leaf, remove it from the tree
 */
int apfs_del_items(struct apfs_trans_handle *trans, struct apfs_root *root,
		    struct apfs_path *path, int slot, int nr)
{
	struct apfs_fs_info *fs_info = root->fs_info;
	struct extent_buffer *leaf;
	struct apfs_item *item;
	u32 last_off;
	u32 dsize = 0;
	int ret = 0;
	int wret;
	int i;
	u32 nritems;

	leaf = path->nodes[0];
	last_off = apfs_item_offset_nr(leaf, slot + nr - 1);

	for (i = 0; i < nr; i++)
		dsize += apfs_item_size_nr(leaf, slot + i);

	nritems = apfs_header_nritems(leaf);

	if (slot + nr != nritems) {
		int data_end = leaf_data_end(leaf);
		struct apfs_map_token token;

		memmove_extent_buffer(leaf, APFS_LEAF_DATA_OFFSET +
			      data_end + dsize,
			      APFS_LEAF_DATA_OFFSET + data_end,
			      last_off - data_end);

		apfs_init_map_token(&token, leaf);
		for (i = slot + nr; i < nritems; i++) {
			u32 ioff;

			item = apfs_item_nr(i);
			ioff = apfs_token_item_offset(&token, item);
			apfs_set_token_item_offset(&token, item, ioff + dsize);
		}

		memmove_extent_buffer(leaf, apfs_item_nr_offset(leaf, slot),
			      apfs_item_nr_offset(leaf, slot + nr),
			      sizeof(struct apfs_item) *
			      (nritems - slot - nr));
	}
	apfs_set_header_nritems(leaf, nritems - nr);
	nritems -= nr;

	/* delete the leaf if we've emptied it */
	if (nritems == 0) {
		if (leaf == root->node) {
			apfs_set_header_level(leaf, 0);
		} else {
			apfs_clean_tree_block(leaf);
			apfs_del_leaf(trans, root, path, leaf);
		}
	} else {
		int used = leaf_space_used(leaf, 0, nritems);
		if (slot == 0) {
			struct apfs_disk_key disk_key;

			apfs_item_key(leaf, &disk_key, 0);
			fixup_low_keys(path, &disk_key, 1);
		}

		/* delete the leaf if it is mostly empty */
		if (used < APFS_LEAF_DATA_SIZE(fs_info) / 3) {
			/* push_leaf_left fixes the path.
			 * make sure the path still points to our leaf
			 * for possible call to del_ptr below
			 */
			slot = path->slots[1];
			atomic_inc(&leaf->refs);

			wret = push_leaf_left(trans, root, path, 1, 1,
					      1, (u32)-1);
			if (wret < 0 && wret != -ENOSPC)
				ret = wret;

			if (path->nodes[0] == leaf &&
			    apfs_header_nritems(leaf)) {
				wret = push_leaf_right(trans, root, path, 1,
						       1, 1, 0);
				if (wret < 0 && wret != -ENOSPC)
					ret = wret;
			}

			if (apfs_header_nritems(leaf) == 0) {
				path->slots[1] = slot;
				apfs_del_leaf(trans, root, path, leaf);
				free_extent_buffer(leaf);
				ret = 0;
			} else {
				/* if we're still in the path, make sure
				 * we're dirty.  Otherwise, one of the
				 * push_leaf functions must have already
				 * dirtied this buffer
				 */
				if (path->nodes[0] == leaf)
					apfs_mark_buffer_dirty(leaf);
				free_extent_buffer(leaf);
			}
		} else {
			apfs_mark_buffer_dirty(leaf);
		}
	}
	return ret;
}

/*
 * search the tree again to find a leaf with lesser keys
 * returns 0 if it found something or 1 if there are no lesser leaves.
 * returns < 0 on io errors.
 *
 * This may release the path, and so you may lose any locks held at the
 * time you call it.
 */
int apfs_prev_leaf(struct apfs_root *root, struct apfs_path *path)
{
	struct apfs_key key = {};
	struct apfs_disk_key found_key;
	int ret;
	int member_num;

	apfs_item_key_to_cpu(path->nodes[0], &key, 0);
	member_num = apfs_key_members(path->nodes[0], key.type);

	if (key.offset > 0 && member_num != 3) {
		key.offset--;
	} else if (key.type > 0) {
		key.type--;
		key.offset = (u64)-1;
	} else if (key.objectid > 0) {
		key.objectid--;
		key.type = (u8)-1;
		key.offset = (u64)-1;
	} else {
		return 1;
	}

	apfs_release_path(path);
	ret = apfs_search_slot(NULL, root, &key, path, 0, 0);
	if (ret < 0)
		return ret;
	apfs_item_key(path->nodes[0], &found_key, 0);
	ret = comp_keys(path->nodes[0], &found_key, &key);
	/*
	 * We might have had an item with the previous key in the tree right
	 * before we released our path. And after we released our path, that
	 * item might have been pushed to the first slot (0) of the leaf we
	 * were holding due to a tree balance. Alternatively, an item with the
	 * previous key can exist as the only element of a leaf (big fat item).
	 * Therefore account for these 2 cases, so that our callers (like
	 * apfs_previous_item) don't miss an existing item with a key matching
	 * the previous key we computed above.
	 */
	if (ret <= 0)
		return 0;
	return 1;
}

/*
 * A helper function to walk down the tree starting at min_key, and looking
 * for nodes or leaves that are have a minimum transaction id.
 * This is used by the btree defrag code, and tree logging
 *
 * This does not cow, but it does stuff the starting key it finds back
 * into min_key, so you can call apfs_search_slot with cow=1 on the
 * key and get a writable path.
 *
 * This honors path->lowest_level to prevent descent past a given level
 * of the tree.
 *
 * min_trans indicates the oldest transaction that you are interested
 * in walking through.  Any nodes or leaves older than min_trans are
 * skipped over (without reading them).
 *
 * returns zero if something useful was found, < 0 on error and 1 if there
 * was nothing in the tree that matched the search criteria.
 */
int apfs_search_forward(struct apfs_root *root, struct apfs_key *min_key,
			 struct apfs_path *path,
			 u64 min_trans)
{
	struct extent_buffer *cur;
	struct apfs_key found_key = {};
	int slot;
	int sret;
	u32 nritems;
	int level;
	int ret = 1;
	int keep_locks = path->keep_locks;

	path->keep_locks = 1;
again:
	cur = apfs_read_lock_root_node(root);
	level = apfs_header_level(cur);
	WARN_ON(path->nodes[level]);
	path->nodes[level] = cur;
	path->locks[level] = APFS_READ_LOCK;

	if (apfs_header_generation(cur) < min_trans) {
		ret = 1;
		goto out;
	}
	while (1) {
		nritems = apfs_header_nritems(cur);
		level = apfs_header_level(cur);
		sret = apfs_bin_search(cur, min_key, &slot);
		if (sret < 0) {
			ret = sret;
			goto out;
		}

		/* at the lowest level, we're done, setup the path and exit */
		if (level == path->lowest_level) {
			if (slot >= nritems)
				goto find_next_key;
			ret = 0;
			path->slots[level] = slot;
			apfs_item_key_to_cpu(cur, &found_key, slot);
			goto out;
		}
		if (sret && slot > 0)
			slot--;
		/*
		 * check this node pointer against the min_trans parameters.
		 * If it is too old, skip to the next one.
		 */
		while (slot < nritems) {
			u64 gen;

			gen = apfs_node_ptr_generation(cur, slot);
			if (gen < min_trans) {
				slot++;
				continue;
			}
			break;
		}
find_next_key:
		/*
		 * we didn't find a candidate key in this node, walk forward
		 * and find another one
		 */
		if (slot >= nritems) {
			path->slots[level] = slot;
			sret = apfs_find_next_key(root, path, min_key, level,
						  min_trans);
			if (sret == 0) {
				apfs_release_path(path);
				goto again;
			} else {
				goto out;
			}
		}
		/* save our key for returning back */
		apfs_node_key_to_cpu(cur, &found_key, slot);
		path->slots[level] = slot;
		if (level == path->lowest_level) {
			ret = 0;
			goto out;
		}
		cur = apfs_read_node_slot(cur, slot);
		if (IS_ERR(cur)) {
			ret = PTR_ERR(cur);
			goto out;
		}

		apfs_tree_read_lock(cur);

		path->locks[level - 1] = APFS_READ_LOCK;
		path->nodes[level - 1] = cur;
		unlock_up(path, level, 1, 0, NULL);
	}
out:
	path->keep_locks = keep_locks;
	if (ret == 0) {
		apfs_unlock_up_safe(path, path->lowest_level + 1);
		memcpy(min_key, &found_key, sizeof(found_key));
	}
	return ret;
}

/*
 * this is similar to apfs_next_leaf, but does not try to preserve
 * and fixup the path.  It looks for and returns the next key in the
 * tree based on the current path and the min_trans parameters.
 *
 * 0 is returned if another key is found, < 0 if there are any errors
 * and 1 is returned if there are no higher keys in the tree
 *
 * path->keep_locks should be set to 1 on the search made before
 * calling this function.
 */
int apfs_find_next_key(struct apfs_root *root, struct apfs_path *path,
			struct apfs_key *key, int level, u64 min_trans)
{
	int slot;
	struct extent_buffer *c;

	WARN_ON(!path->keep_locks && !path->skip_locking);
	while (level < APFS_MAX_LEVEL) {
		if (!path->nodes[level])
			return 1;

		slot = path->slots[level] + 1;
		c = path->nodes[level];
next:
		if (slot >= apfs_header_nritems(c)) {
			int ret;
			int orig_lowest;
			struct apfs_key cur_key = {};
			if (level + 1 >= APFS_MAX_LEVEL ||
			    !path->nodes[level + 1])
				return 1;

			if (path->locks[level + 1] || path->skip_locking) {
				level++;
				continue;
			}

			slot = apfs_header_nritems(c) - 1;
			if (level == 0)
				apfs_item_key_to_cpu(c, &cur_key, slot);
			else
				apfs_node_key_to_cpu(c, &cur_key, slot);

			orig_lowest = path->lowest_level;
			apfs_release_path(path);
			path->lowest_level = level;
			ret = apfs_search_slot(NULL, root, &cur_key, path,
						0, 0);
			path->lowest_level = orig_lowest;
			if (ret < 0)
				return ret;

			c = path->nodes[level];
			slot = path->slots[level];
			if (ret == 0)
				slot++;
			goto next;
		}

		if (level == 0)
			apfs_item_key_to_cpu(c, key, slot);
		else {
			u64 gen = apfs_node_ptr_generation(c, slot);

			if (gen < min_trans) {
				slot++;
				goto next;
			}
			apfs_node_key_to_cpu(c, key, slot);
		}
		return 0;
	}
	return 1;
}

/*
 * search the tree again to find a leaf with greater keys
 * returns 0 if it found something or 1 if there are no greater leaves.
 * returns < 0 on io errors.
 */
int apfs_next_leaf(struct apfs_root *root, struct apfs_path *path)
{
	return apfs_next_old_leaf(root, path, 0);
}

int apfs_next_old_leaf(struct apfs_root *root, struct apfs_path *path,
			u64 time_seq)
{
	int slot;
	int level;
	struct extent_buffer *c;
	struct extent_buffer *next;
	struct apfs_key key = {};
	u32 nritems;
	int ret;
	int i;

	nritems = apfs_header_nritems(path->nodes[0]);
	if (nritems == 0)
		return 1;

	apfs_item_key_to_cpu(path->nodes[0], &key, nritems - 1);
again:
	level = 1;
	next = NULL;
	apfs_release_path(path);

	path->keep_locks = 1;

	if (time_seq)
		ret = apfs_search_old_slot(root, &key, path, time_seq);
	else
		ret = apfs_search_slot(NULL, root, &key, path, 0, 0);
	path->keep_locks = 0;

	if (ret < 0)
		return ret;

	nritems = apfs_header_nritems(path->nodes[0]);
	/*
	 * by releasing the path above we dropped all our locks.  A balance
	 * could have added more items next to the key that used to be
	 * at the very end of the block.  So, check again here and
	 * advance the path if there are now more items available.
	 */
	if (nritems > 0 && path->slots[0] < nritems - 1) {
		if (ret == 0)
			path->slots[0]++;
		ret = 0;
		goto done;
	}
	/*
	 * So the above check misses one case:
	 * - after releasing the path above, someone has removed the item that
	 *   used to be at the very end of the block, and balance between leafs
	 *   gets another one with bigger key.offset to replace it.
	 *
	 * This one should be returned as well, or we can get leaf corruption
	 * later(esp. in __apfs_drop_extents()).
	 *
	 * And a bit more explanation about this check,
	 * with ret > 0, the key isn't found, the path points to the slot
	 * where it should be inserted, so the path->slots[0] item must be the
	 * bigger one.
	 */
	if (nritems > 0 && ret > 0 && path->slots[0] == nritems - 1) {
		ret = 0;
		goto done;
	}

	while (level < APFS_MAX_LEVEL) {
		if (!path->nodes[level]) {
			ret = 1;
			goto done;
		}

		slot = path->slots[level] + 1;
		c = path->nodes[level];
		if (slot >= apfs_header_nritems(c)) {
			level++;
			if (level == APFS_MAX_LEVEL) {
				ret = 1;
				goto done;
			}
			continue;
		}


		/*
		 * Our current level is where we're going to start from, and to
		 * make sure lockdep doesn't complain we need to drop our locks
		 * and nodes from 0 to our current level.
		 */
		for (i = 0; i < level; i++) {
			if (path->locks[level]) {
				apfs_tree_read_unlock(path->nodes[i]);
				path->locks[i] = 0;
			}
			free_extent_buffer(path->nodes[i]);
			path->nodes[i] = NULL;
		}

		next = c;
		ret = read_block_for_search(root, path, &next, level,
					    slot, &key);
		if (ret == -EAGAIN)
			goto again;

		if (ret < 0) {
			apfs_release_path(path);
			goto done;
		}

		if (!path->skip_locking) {
			ret = apfs_try_tree_read_lock(next);
			if (!ret && time_seq) {
				/*
				 * If we don't get the lock, we may be racing
				 * with push_leaf_left, holding that lock while
				 * itself waiting for the leaf we've currently
				 * locked. To solve this situation, we give up
				 * on our lock and cycle.
				 */
				free_extent_buffer(next);
				apfs_release_path(path);
				cond_resched();
				goto again;
			}
			if (!ret)
				apfs_tree_read_lock(next);
		}
		break;
	}
	path->slots[level] = slot;
	while (1) {
		level--;
		path->nodes[level] = next;
		path->slots[level] = 0;
		if (!path->skip_locking)
			path->locks[level] = APFS_READ_LOCK;
		if (!level)
			break;

		ret = read_block_for_search(root, path, &next, level,
					    0, &key);
		if (ret == -EAGAIN)
			goto again;

		if (ret < 0) {
			apfs_release_path(path);
			goto done;
		}

		if (!path->skip_locking)
			apfs_tree_read_lock(next);
	}
	ret = 0;
done:
	unlock_up(path, 0, 1, 0, NULL);

	return ret;
}

/*
 * this uses apfs_prev_leaf to walk backwards in the tree, and keeps
 * searching until it gets past min_objectid or finds an item of 'type'
 *
 * returns 0 if something is found, 1 if nothing was found and < 0 on error
 */
int apfs_previous_item(struct apfs_root *root,
			struct apfs_path *path, u64 min_objectid,
			int type)
{
	struct apfs_key found_key = {};
	struct extent_buffer *leaf;
	u32 nritems;
	int ret;

	while (1) {
		if (path->slots[0] == 0) {
			ret = apfs_prev_leaf(root, path);
			if (ret != 0)
				return ret;
		} else {
			path->slots[0]--;
		}
		leaf = path->nodes[0];
		nritems = apfs_header_nritems(leaf);
		if (nritems == 0)
			return 1;
		if (path->slots[0] == nritems)
			path->slots[0]--;

		apfs_item_key_to_cpu(leaf, &found_key, path->slots[0]);
		if (found_key.objectid < min_objectid)
			break;
		if (found_key.type == type)
			return 0;
		if (found_key.objectid == min_objectid &&
		    found_key.type < type)
			break;
	}
	return 1;
}

/*
 * search in extent tree to find a previous Metadata/Data extent item with
 * min objecitd.
 *
 * returns 0 if something is found, 1 if nothing was found and < 0 on error
 */
int apfs_previous_extent_item(struct apfs_root *root,
			struct apfs_path *path, u64 min_objectid)
{
	struct apfs_key found_key = {};
	struct extent_buffer *leaf;
	u32 nritems;
	int ret;

	while (1) {
		if (path->slots[0] == 0) {
			ret = apfs_prev_leaf(root, path);
			if (ret != 0)
				return ret;
		} else {
			path->slots[0]--;
		}
		leaf = path->nodes[0];
		nritems = apfs_header_nritems(leaf);
		if (nritems == 0)
			return 1;
		if (path->slots[0] == nritems)
			path->slots[0]--;

		apfs_item_key_to_cpu(leaf, &found_key, path->slots[0]);
		if (found_key.objectid < min_objectid)
			break;
		if (found_key.type == APFS_EXTENT_ITEM_KEY ||
		    found_key.type == APFS_METADATA_ITEM_KEY)
			return 0;
		if (found_key.objectid == min_objectid &&
		    found_key.type < APFS_EXTENT_ITEM_KEY)
			break;
	}
	return 1;
}

int
apfs_find_omap_paddr(struct apfs_root *root, u64 oid, u64 xid, u64 *paddr)
{
	struct apfs_key key = {};
	struct apfs_path *path;
	struct apfs_omap_item omap_item;
	u32 offset;
	int ret;

	key.id = oid;
	key.offset = xid;

	path = apfs_alloc_path();
	if (!path)
		return -ENOMEM;

	ret = apfs_search_slot(NULL, root, &key, path, 0, 0);
	if (ret == 0)
		goto found;
	if (ret < 0)
		goto out;

	ret = apfs_previous_item(root, path, oid, 0);
	if (ret > 0)
		ret = -ENOENT;
	if (ret)
		goto out;
found:
	offset = apfs_item_offset_nr(path->nodes[0], path->slots[0]);
	read_extent_buffer(path->nodes[0], &omap_item, offset,
			   sizeof(omap_item));
	*paddr = apfs_omap_paddr(&omap_item) << root->fs_info->block_size_bits;
out:
	apfs_free_path(path);
	if (ret)
		apfs_err(root->fs_info,
			 "failed to find oid %llu xid %llu in omap root %llu",
			 oid, xid, root->node->start);

	return ret;
}

int
apfs_read_generic(struct block_device *bdev, u64 bytenr, unsigned long len,
		  void *res)
{
	struct page *page;
	void *p;
	pgoff_t index;

	/* make sure our super fits in the device */
	if (bytenr + PAGE_SIZE >= i_size_read(bdev->bd_inode))
		return -EINVAL;

	/* make sure our super fits in the page */
	if (len > PAGE_SIZE)
		return -EINVAL;

	/* make sure our super doesn't straddle pages on disk */
	index = bytenr >> PAGE_SHIFT;
	if ((bytenr + len - 1) >> PAGE_SHIFT != index)
		return -EINVAL;

	page = read_cache_page_gfp(bdev->bd_inode->i_mapping, index, GFP_KERNEL);

	if (IS_ERR(page))
		return PTR_ERR(ERR_CAST(page));

	p = page_address(page);

	memcpy(res, p + offset_in_page(bytenr), len);

	put_page(page);

	return 0;
}
/*
int apfs_xfield_data(struct extent_buffer *eb, struct apfs_xfield_blob *xb,
		     int nr)
{
	unsigned long offset = sizeof(*xb);
	int count = apfs_xfield_blob_num(eb, xb);
	struct apfs_xfield *xfield;

	offset += count * sizeof(struct)
	xfield = (struct apfs_xfield *)(((char *)xb) + sizeof(struct apfs_xfield)));

	for (i = start; i < count; ++i) {
}
*/

/**
 * apfs_find_xfield - Find an extended field value in an inode or dentry record
 *
 * @offset_res: if not NULL, be xfield data offset of the @xb.
 */
struct apfs_xfield *
apfs_find_xfield(struct extent_buffer *eb, struct apfs_xfield_blob *xb,
		 enum apfs_xfield_type type, unsigned long start,
		 unsigned long *offset_res)
{
	struct apfs_xfield *xfield;
	struct apfs_xfield *ret = NULL;
	int count;
	int i;
	unsigned offset = 0;

	count = apfs_xfield_blob_num(eb, xb);
	xfield = (struct apfs_xfield *)(((char *)xb) + sizeof(*xb));

	for (i = start; i < count; ++i) {
		u16 xlen;

		/* Attribute length is padded to a multiple of 8 */
		xlen = round_up(apfs_xfield_size(eb, &xfield[i]), 8);

		if (apfs_xfield_type(eb, &xfield[i]) == type) {
			ret = &xfield[i];
			break;
		}
		offset += xlen;
	}

	if (i == count)
		return ERR_PTR(-ENOENT);
	if (!offset_res)
		return ret;

	offset += sizeof(*xb);
	offset += sizeof(*xfield) * count;

	for (i = 0; i < start; ++i) {
		u16 xlen;

		/* Attribute length is padded to a multiple of 8 */
		xlen = round_up(apfs_xfield_size(eb, &xfield[i]), 8);
		offset += xlen;
	}

	BUG_ON(offset >= eb->len);
	*offset_res = offset;

	return ret;
}

unsigned long
apfs_xfield_ext_offset(struct extent_buffer *eb, struct apfs_xfield_blob *xb,
		       int nr)
{
	struct apfs_xfield *xfield;
	int count;
	int i;
	unsigned offset = 0;
	u16 xlen;

	count = apfs_stack_xfield_blob_num(xb);
	xfield = (struct apfs_xfield *)(((char *)xb) + sizeof(*xb));

	ASSERT(nr < count);

	for (i = 0; i < nr; ++i) {
		/* Attribute length is padded to a multiple of 8 */
		xlen = round_up(apfs_stack_xfield_size(&xfield[i]), 8);

		offset += xlen;
	}

	offset += (unsigned long)xb;
	offset += sizeof(*xb);
	offset += sizeof(*xfield) * count;

	xlen = round_up(apfs_stack_xfield_size(&xfield[nr]), 8);

	BUG_ON(offset + xlen > eb->len);

	return offset;
}