]> git.sesse.net Git - bcachefs-tools-debian/blobdiff - libbcachefs/fs-io.c
Update bcachefs sources to 7bfc741f64 bcachefs: Fix a null ptr deref during journal...
[bcachefs-tools-debian] / libbcachefs / fs-io.c
index d4384303a9a1d9c65ed6eee4f62c94ae6ccd52f1..0aa3afade4ea03900518727f60e6b6949f8c073e 100644 (file)
@@ -1,11 +1,15 @@
+// SPDX-License-Identifier: GPL-2.0
 #ifndef NO_BCACHEFS_FS
 
 #include "bcachefs.h"
+#include "alloc_foreground.h"
+#include "bkey_on_stack.h"
 #include "btree_update.h"
 #include "buckets.h"
 #include "clock.h"
 #include "error.h"
 #include "extents.h"
+#include "extent_update.h"
 #include "fs.h"
 #include "fs-io.h"
 #include "fsck.h"
@@ -14,6 +18,7 @@
 #include "io.h"
 #include "keylist.h"
 #include "quota.h"
+#include "reflink.h"
 
 #include <linux/aio.h>
 #include <linux/backing-dev.h>
@@ -33,29 +38,18 @@ struct quota_res {
        u64                             sectors;
 };
 
-struct bchfs_write_op {
-       struct bch_inode_info           *inode;
-       s64                             sectors_added;
-       bool                            is_dio;
-       bool                            unalloc;
-       u64                             new_i_size;
-
-       /* must be last: */
-       struct bch_write_op             op;
-};
-
 struct bch_writepage_io {
        struct closure                  cl;
-       u64                             new_sectors;
+       struct bch_inode_info           *inode;
 
        /* must be last: */
-       struct bchfs_write_op           op;
+       struct bch_write_op             op;
 };
 
 struct dio_write {
-       struct closure                  cl;
+       struct completion               done;
        struct kiocb                    *req;
-       struct task_struct              *task;
+       struct mm_struct                *mm;
        unsigned                        loop:1,
                                        sync:1,
                                        free_iov:1;
@@ -65,7 +59,7 @@ struct dio_write {
        struct iovec                    inline_vecs[2];
 
        /* must be last: */
-       struct bchfs_write_op           iop;
+       struct bch_write_op             op;
 };
 
 struct dio_read {
@@ -120,7 +114,7 @@ static void bch2_quota_reservation_put(struct bch_fs *c,
        BUG_ON(res->sectors > inode->ei_quota_reserved);
 
        bch2_quota_acct(c, inode->ei_qid, Q_SPC,
-                       -((s64) res->sectors), BCH_QUOTA_PREALLOC);
+                       -((s64) res->sectors), KEY_TYPE_QUOTA_PREALLOC);
        inode->ei_quota_reserved -= res->sectors;
        mutex_unlock(&inode->ei_quota_lock);
 
@@ -137,7 +131,7 @@ static int bch2_quota_reservation_add(struct bch_fs *c,
 
        mutex_lock(&inode->ei_quota_lock);
        ret = bch2_quota_acct(c, inode->ei_qid, Q_SPC, sectors,
-                             check_enospc ? BCH_QUOTA_PREALLOC : BCH_QUOTA_NOCHECK);
+                             check_enospc ? KEY_TYPE_QUOTA_PREALLOC : KEY_TYPE_QUOTA_NOCHECK);
        if (likely(!ret)) {
                inode->ei_quota_reserved += sectors;
                res->sectors += sectors;
@@ -191,9 +185,9 @@ static int inode_set_size(struct bch_inode_info *inode,
        return 0;
 }
 
-static int __must_check bch2_write_inode_size(struct bch_fs *c,
-                                             struct bch_inode_info *inode,
-                                             loff_t new_size, unsigned fields)
+int __must_check bch2_write_inode_size(struct bch_fs *c,
+                                      struct bch_inode_info *inode,
+                                      loff_t new_size, unsigned fields)
 {
        struct inode_new_size s = {
                .new_size       = new_size,
@@ -219,429 +213,329 @@ static void i_sectors_acct(struct bch_fs *c, struct bch_inode_info *inode,
                quota_res->sectors -= sectors;
                inode->ei_quota_reserved -= sectors;
        } else {
-               bch2_quota_acct(c, inode->ei_qid, Q_SPC, sectors, BCH_QUOTA_WARN);
+               bch2_quota_acct(c, inode->ei_qid, Q_SPC, sectors, KEY_TYPE_QUOTA_WARN);
        }
 #endif
        inode->v.i_blocks += sectors;
        mutex_unlock(&inode->ei_quota_lock);
 }
 
-/* normal i_size/i_sectors update machinery: */
-
-static s64 sum_sector_overwrites(struct bkey_i *new, struct btree_iter *_iter,
-                                bool *allocating)
-{
-       struct btree_iter iter;
-       struct bkey_s_c old;
-       s64 delta = 0;
-
-       bch2_btree_iter_init(&iter, _iter->c, BTREE_ID_EXTENTS, POS_MIN,
-                            BTREE_ITER_SLOTS);
+/* page state: */
 
-       bch2_btree_iter_link(_iter, &iter);
-       bch2_btree_iter_copy(&iter, _iter);
+/* stored in page->private: */
 
-       for_each_btree_key_continue(&iter, BTREE_ITER_SLOTS, old) {
-               if (bkey_cmp(new->k.p, bkey_start_pos(old.k)) <= 0)
-                       break;
+struct bch_page_sector {
+       /* Uncompressed, fully allocated replicas: */
+       unsigned                nr_replicas:3;
 
-               if (allocating &&
-                   !bch2_extent_is_fully_allocated(old))
-                       *allocating = true;
+       /* Owns PAGE_SECTORS * replicas_reserved sized reservation: */
+       unsigned                replicas_reserved:3;
 
-               delta += (min(new->k.p.offset,
-                             old.k->p.offset) -
-                         max(bkey_start_offset(&new->k),
-                             bkey_start_offset(old.k))) *
-                       (bkey_extent_is_allocation(&new->k) -
-                        bkey_extent_is_allocation(old.k));
-       }
+       /* i_sectors: */
+       enum {
+               SECTOR_UNALLOCATED,
+               SECTOR_RESERVED,
+               SECTOR_DIRTY,
+               SECTOR_ALLOCATED,
+       }                       state:2;
+};
 
-       bch2_btree_iter_unlink(&iter);
+struct bch_page_state {
+       spinlock_t              lock;
+       atomic_t                write_count;
+       struct bch_page_sector  s[PAGE_SECTORS];
+};
 
-       return delta;
+static inline struct bch_page_state *__bch2_page_state(struct page *page)
+{
+       return page_has_private(page)
+               ? (struct bch_page_state *) page_private(page)
+               : NULL;
 }
 
-static int bch2_extent_update(struct btree_trans *trans,
-                             struct bch_inode_info *inode,
-                             struct disk_reservation *disk_res,
-                             struct quota_res *quota_res,
-                             struct btree_iter *extent_iter,
-                             struct bkey_i *k,
-                             u64 new_i_size,
-                             bool may_allocate,
-                             bool direct,
-                             s64 *total_delta)
+static inline struct bch_page_state *bch2_page_state(struct page *page)
 {
-       struct btree_iter *inode_iter = NULL;
-       struct bch_inode_unpacked inode_u;
-       struct bkey_inode_buf inode_p;
-       bool allocating = false;
-       bool extended = false;
-       s64 i_sectors_delta;
-       int ret;
-
-       bch2_trans_begin_updates(trans);
-
-       ret = bch2_btree_iter_traverse(extent_iter);
-       if (ret)
-               return ret;
-
-       bch2_extent_trim_atomic(k, extent_iter);
-
-       i_sectors_delta = sum_sector_overwrites(k, extent_iter, &allocating);
-       if (!may_allocate && allocating)
-               return -ENOSPC;
-
-       bch2_trans_update(trans, BTREE_INSERT_ENTRY(extent_iter, k));
-
-       new_i_size = min(k->k.p.offset << 9, new_i_size);
-
-       /* XXX: inode->i_size locking */
-       if (i_sectors_delta ||
-           new_i_size > inode->ei_inode.bi_size) {
-               inode_iter = bch2_trans_get_iter(trans,
-                       BTREE_ID_INODES,
-                       POS(k->k.p.inode, 0),
-                       BTREE_ITER_SLOTS|BTREE_ITER_INTENT);
-               if (IS_ERR(inode_iter))
-                       return PTR_ERR(inode_iter);
-
-               ret = bch2_btree_iter_traverse(inode_iter);
-               if (ret)
-                       goto err;
-
-               inode_u = inode->ei_inode;
-               inode_u.bi_sectors += i_sectors_delta;
-
-               /* XXX: this is slightly suspect */
-               if (!(inode_u.bi_flags & BCH_INODE_I_SIZE_DIRTY) &&
-                   new_i_size > inode_u.bi_size) {
-                       inode_u.bi_size = new_i_size;
-                       extended = true;
-               }
-
-               bch2_inode_pack(&inode_p, &inode_u);
-               bch2_trans_update(trans,
-                       BTREE_INSERT_ENTRY(inode_iter, &inode_p.inode.k_i));
-       }
-
-       ret = bch2_trans_commit(trans, disk_res,
-                               &inode->ei_journal_seq,
-                               BTREE_INSERT_NOFAIL|
-                               BTREE_INSERT_ATOMIC|
-                               BTREE_INSERT_NOUNLOCK|
-                               BTREE_INSERT_USE_RESERVE);
-       if (ret)
-               goto err;
-
-       inode->ei_inode.bi_sectors += i_sectors_delta;
-
-       EBUG_ON(i_sectors_delta &&
-               inode->ei_inode.bi_sectors != inode_u.bi_sectors);
-
-       if (extended) {
-               inode->ei_inode.bi_size = new_i_size;
-
-               if (direct) {
-                       spin_lock(&inode->v.i_lock);
-                       if (new_i_size > inode->v.i_size)
-                               i_size_write(&inode->v, new_i_size);
-                       spin_unlock(&inode->v.i_lock);
-               }
-       }
-
-       if (direct)
-               i_sectors_acct(trans->c, inode, quota_res, i_sectors_delta);
+       EBUG_ON(!PageLocked(page));
 
-       if (total_delta)
-               *total_delta += i_sectors_delta;
-err:
-       if (!IS_ERR_OR_NULL(inode_iter))
-               bch2_trans_iter_put(trans, inode_iter);
-       return ret;
+       return __bch2_page_state(page);
 }
 
-static int bchfs_write_index_update(struct bch_write_op *wop)
+/* for newly allocated pages: */
+static void __bch2_page_state_release(struct page *page)
 {
-       struct bchfs_write_op *op = container_of(wop,
-                               struct bchfs_write_op, op);
-       struct quota_res *quota_res = op->is_dio
-               ? &container_of(op, struct dio_write, iop)->quota_res
-               : NULL;
-       struct bch_inode_info *inode = op->inode;
-       struct keylist *keys = &op->op.insert_keys;
-       struct bkey_i *k = bch2_keylist_front(keys);
-       struct btree_trans trans;
-       struct btree_iter *iter;
-       int ret;
+       struct bch_page_state *s = __bch2_page_state(page);
 
-       BUG_ON(k->k.p.inode != inode->v.i_ino);
+       if (!s)
+               return;
 
-       bch2_trans_init(&trans, wop->c);
-       bch2_trans_preload_iters(&trans);
+       ClearPagePrivate(page);
+       set_page_private(page, 0);
+       put_page(page);
+       kfree(s);
+}
 
-       iter = bch2_trans_get_iter(&trans,
-                               BTREE_ID_EXTENTS,
-                               bkey_start_pos(&k->k),
-                               BTREE_ITER_INTENT);
+static void bch2_page_state_release(struct page *page)
+{
+       struct bch_page_state *s = bch2_page_state(page);
 
-       do {
-               BKEY_PADDED(k) tmp;
+       if (!s)
+               return;
 
-               bkey_copy(&tmp.k, bch2_keylist_front(keys));
+       ClearPagePrivate(page);
+       set_page_private(page, 0);
+       put_page(page);
+       kfree(s);
+}
 
-               ret = bch2_extent_update(&trans, inode,
-                               &wop->res, quota_res,
-                               iter, &tmp.k,
-                               op->new_i_size,
-                               !op->unalloc,
-                               op->is_dio,
-                               &op->sectors_added);
-               if (ret == -EINTR)
-                       continue;
-               if (ret)
-                       break;
+/* for newly allocated pages: */
+static struct bch_page_state *__bch2_page_state_create(struct page *page,
+                                                      gfp_t gfp)
+{
+       struct bch_page_state *s;
 
-               if (bkey_cmp(iter->pos, bch2_keylist_front(keys)->k.p) < 0)
-                       bch2_cut_front(iter->pos, bch2_keylist_front(keys));
-               else
-                       bch2_keylist_pop_front(keys);
-       } while (!bch2_keylist_empty(keys));
+       s = kzalloc(sizeof(*s), GFP_NOFS|gfp);
+       if (!s)
+               return NULL;
 
-       bch2_trans_exit(&trans);
+       spin_lock_init(&s->lock);
+       /*
+        * migrate_page_move_mapping() assumes that pages with private data
+        * have their count elevated by 1.
+        */
+       get_page(page);
+       set_page_private(page, (unsigned long) s);
+       SetPagePrivate(page);
+       return s;
+}
 
-       return ret;
+static struct bch_page_state *bch2_page_state_create(struct page *page,
+                                                    gfp_t gfp)
+{
+       return bch2_page_state(page) ?: __bch2_page_state_create(page, gfp);
 }
 
-static inline void bch2_fswrite_op_init(struct bchfs_write_op *op,
-                                       struct bch_fs *c,
-                                       struct bch_inode_info *inode,
-                                       struct bch_io_opts opts,
-                                       bool is_dio)
+static inline unsigned inode_nr_replicas(struct bch_fs *c, struct bch_inode_info *inode)
 {
-       op->inode               = inode;
-       op->sectors_added       = 0;
-       op->is_dio              = is_dio;
-       op->unalloc             = false;
-       op->new_i_size          = U64_MAX;
+       /* XXX: this should not be open coded */
+       return inode->ei_inode.bi_data_replicas
+               ? inode->ei_inode.bi_data_replicas - 1
+               : c->opts.data_replicas;
+}
 
-       bch2_write_op_init(&op->op, c, opts);
-       op->op.target           = opts.foreground_target;
-       op->op.index_update_fn  = bchfs_write_index_update;
-       op_journal_seq_set(&op->op, &inode->ei_journal_seq);
+static inline unsigned sectors_to_reserve(struct bch_page_sector *s,
+                                                 unsigned nr_replicas)
+{
+       return max(0, (int) nr_replicas -
+                  s->nr_replicas -
+                  s->replicas_reserved);
 }
 
-static inline struct bch_io_opts io_opts(struct bch_fs *c, struct bch_inode_info *inode)
+static int bch2_get_page_disk_reservation(struct bch_fs *c,
+                               struct bch_inode_info *inode,
+                               struct page *page, bool check_enospc)
 {
-       struct bch_io_opts opts = bch2_opts_to_inode_opts(c->opts);
+       struct bch_page_state *s = bch2_page_state_create(page, 0);
+       unsigned nr_replicas = inode_nr_replicas(c, inode);
+       struct disk_reservation disk_res = { 0 };
+       unsigned i, disk_res_sectors = 0;
+       int ret;
 
-       bch2_io_opts_apply(&opts, bch2_inode_opts_get(&inode->ei_inode));
-       return opts;
-}
+       if (!s)
+               return -ENOMEM;
 
-/* page state: */
+       for (i = 0; i < ARRAY_SIZE(s->s); i++)
+               disk_res_sectors += sectors_to_reserve(&s->s[i], nr_replicas);
 
-/* stored in page->private: */
+       if (!disk_res_sectors)
+               return 0;
 
-/*
- * bch_page_state has to (unfortunately) be manipulated with cmpxchg - we could
- * almost protected it with the page lock, except that bch2_writepage_io_done has
- * to update the sector counts (and from interrupt/bottom half context).
- */
-struct bch_page_state {
-union { struct {
-       /* existing data: */
-       unsigned                sectors:PAGE_SECTOR_SHIFT + 1;
-       unsigned                nr_replicas:4;
-       unsigned                compressed:1;
+       ret = bch2_disk_reservation_get(c, &disk_res,
+                                       disk_res_sectors, 1,
+                                       !check_enospc
+                                       ? BCH_DISK_RESERVATION_NOFAIL
+                                       : 0);
+       if (unlikely(ret))
+               return ret;
 
-       /* Owns PAGE_SECTORS sized reservation: */
-       unsigned                reserved:1;
-       unsigned                reservation_replicas:4;
+       for (i = 0; i < ARRAY_SIZE(s->s); i++)
+               s->s[i].replicas_reserved +=
+                       sectors_to_reserve(&s->s[i], nr_replicas);
 
-       /* Owns PAGE_SECTORS sized quota reservation: */
-       unsigned                quota_reserved:1;
+       return 0;
+}
 
-       /*
-        * Number of sectors on disk - for i_blocks
-        * Uncompressed size, not compressed size:
-        */
-       unsigned                dirty_sectors:PAGE_SECTOR_SHIFT + 1;
-};
-       /* for cmpxchg: */
-       unsigned long           v;
+struct bch2_page_reservation {
+       struct disk_reservation disk;
+       struct quota_res        quota;
 };
-};
-
-#define page_state_cmpxchg(_ptr, _new, _expr)                          \
-({                                                                     \
-       unsigned long _v = READ_ONCE((_ptr)->v);                        \
-       struct bch_page_state _old;                                     \
-                                                                       \
-       do {                                                            \
-               _old.v = _new.v = _v;                                   \
-               _expr;                                                  \
-                                                                       \
-               EBUG_ON(_new.sectors + _new.dirty_sectors > PAGE_SECTORS);\
-       } while (_old.v != _new.v &&                                    \
-                (_v = cmpxchg(&(_ptr)->v, _old.v, _new.v)) != _old.v); \
-                                                                       \
-       _old;                                                           \
-})
 
-static inline struct bch_page_state *page_state(struct page *page)
+static void bch2_page_reservation_init(struct bch_fs *c,
+                       struct bch_inode_info *inode,
+                       struct bch2_page_reservation *res)
 {
-       struct bch_page_state *s = (void *) &page->private;
-
-       BUILD_BUG_ON(sizeof(*s) > sizeof(page->private));
+       memset(res, 0, sizeof(*res));
 
-       if (!PagePrivate(page))
-               SetPagePrivate(page);
-
-       return s;
+       res->disk.nr_replicas = inode_nr_replicas(c, inode);
 }
 
-static inline unsigned page_res_sectors(struct bch_page_state s)
+static void bch2_page_reservation_put(struct bch_fs *c,
+                       struct bch_inode_info *inode,
+                       struct bch2_page_reservation *res)
 {
-
-       return s.reserved ? s.reservation_replicas * PAGE_SECTORS : 0;
+       bch2_disk_reservation_put(c, &res->disk);
+       bch2_quota_reservation_put(c, inode, &res->quota);
 }
 
-static void __bch2_put_page_reservation(struct bch_fs *c, struct bch_inode_info *inode,
-                                       struct bch_page_state s)
+static int bch2_page_reservation_get(struct bch_fs *c,
+                       struct bch_inode_info *inode, struct page *page,
+                       struct bch2_page_reservation *res,
+                       unsigned offset, unsigned len, bool check_enospc)
 {
-       struct disk_reservation res = { .sectors = page_res_sectors(s) };
-       struct quota_res quota_res = { .sectors = s.quota_reserved ? PAGE_SECTORS : 0 };
+       struct bch_page_state *s = bch2_page_state_create(page, 0);
+       unsigned i, disk_sectors = 0, quota_sectors = 0;
+       int ret;
 
-       bch2_quota_reservation_put(c, inode, &quota_res);
-       bch2_disk_reservation_put(c, &res);
-}
+       if (!s)
+               return -ENOMEM;
 
-static void bch2_put_page_reservation(struct bch_fs *c, struct bch_inode_info *inode,
-                                     struct page *page)
-{
-       struct bch_page_state s;
+       for (i = round_down(offset, block_bytes(c)) >> 9;
+            i < round_up(offset + len, block_bytes(c)) >> 9;
+            i++) {
+               disk_sectors += sectors_to_reserve(&s->s[i],
+                                               res->disk.nr_replicas);
+               quota_sectors += s->s[i].state == SECTOR_UNALLOCATED;
+       }
+
+       if (disk_sectors) {
+               ret = bch2_disk_reservation_add(c, &res->disk,
+                                               disk_sectors,
+                                               !check_enospc
+                                               ? BCH_DISK_RESERVATION_NOFAIL
+                                               : 0);
+               if (unlikely(ret))
+                       return ret;
+       }
 
-       s = page_state_cmpxchg(page_state(page), s, {
-               s.reserved              = 0;
-               s.quota_reserved        = 0;
-       });
+       if (quota_sectors) {
+               ret = bch2_quota_reservation_add(c, inode, &res->quota,
+                                                quota_sectors,
+                                                check_enospc);
+               if (unlikely(ret)) {
+                       struct disk_reservation tmp = {
+                               .sectors = disk_sectors
+                       };
+
+                       bch2_disk_reservation_put(c, &tmp);
+                       res->disk.sectors -= disk_sectors;
+                       return ret;
+               }
+       }
 
-       __bch2_put_page_reservation(c, inode, s);
+       return 0;
 }
 
-static int bch2_get_page_reservation(struct bch_fs *c, struct bch_inode_info *inode,
-                                    struct page *page, bool check_enospc)
+static void bch2_clear_page_bits(struct page *page)
 {
-       struct bch_page_state *s = page_state(page), new, old;
-
-       /* XXX: this should not be open coded */
-       unsigned nr_replicas = inode->ei_inode.bi_data_replicas
-               ? inode->ei_inode.bi_data_replicas - 1
-               : c->opts.data_replicas;
+       struct bch_inode_info *inode = to_bch_ei(page->mapping->host);
+       struct bch_fs *c = inode->v.i_sb->s_fs_info;
+       struct bch_page_state *s = bch2_page_state(page);
+       struct disk_reservation disk_res = { 0 };
+       int i, dirty_sectors = 0;
 
-       struct disk_reservation disk_res = bch2_disk_reservation_init(c,
-                                               nr_replicas);
-       struct quota_res quota_res = { 0 };
-       int ret = 0;
+       if (!s)
+               return;
 
-       /*
-        * XXX: this could likely be quite a bit simpler, page reservations
-        * _should_ only be manipulated with page locked:
-        */
+       EBUG_ON(!PageLocked(page));
+       EBUG_ON(PageWriteback(page));
 
-       old = page_state_cmpxchg(s, new, {
-               if (new.reserved
-                   ? (new.reservation_replicas < disk_res.nr_replicas)
-                   : (new.sectors < PAGE_SECTORS ||
-                      new.nr_replicas < disk_res.nr_replicas ||
-                      new.compressed)) {
-                       int sectors = (disk_res.nr_replicas * PAGE_SECTORS -
-                                      page_res_sectors(new) -
-                                      disk_res.sectors);
-
-                       if (sectors > 0) {
-                               ret = bch2_disk_reservation_add(c, &disk_res, sectors,
-                                               !check_enospc
-                                               ? BCH_DISK_RESERVATION_NOFAIL : 0);
-                               if (unlikely(ret))
-                                       goto err;
-                       }
+       for (i = 0; i < ARRAY_SIZE(s->s); i++) {
+               disk_res.sectors += s->s[i].replicas_reserved;
+               s->s[i].replicas_reserved = 0;
 
-                       new.reserved = 1;
-                       new.reservation_replicas = disk_res.nr_replicas;
+               if (s->s[i].state == SECTOR_DIRTY) {
+                       dirty_sectors++;
+                       s->s[i].state = SECTOR_UNALLOCATED;
                }
+       }
 
-               if (!new.quota_reserved &&
-                   new.sectors + new.dirty_sectors < PAGE_SECTORS) {
-                       ret = bch2_quota_reservation_add(c, inode, &quota_res,
-                                               PAGE_SECTORS - quota_res.sectors,
-                                               check_enospc);
-                       if (unlikely(ret))
-                               goto err;
+       bch2_disk_reservation_put(c, &disk_res);
 
-                       new.quota_reserved = 1;
-               }
-       });
+       if (dirty_sectors)
+               i_sectors_acct(c, inode, NULL, -dirty_sectors);
 
-       quota_res.sectors -= (new.quota_reserved - old.quota_reserved) * PAGE_SECTORS;
-       disk_res.sectors -= page_res_sectors(new) - page_res_sectors(old);
-err:
-       bch2_quota_reservation_put(c, inode, &quota_res);
-       bch2_disk_reservation_put(c, &disk_res);
-       return ret;
+       bch2_page_state_release(page);
 }
 
-static void bch2_clear_page_bits(struct page *page)
+static void bch2_set_page_dirty(struct bch_fs *c,
+                       struct bch_inode_info *inode, struct page *page,
+                       struct bch2_page_reservation *res,
+                       unsigned offset, unsigned len)
 {
-       struct bch_inode_info *inode = to_bch_ei(page->mapping->host);
-       struct bch_fs *c = inode->v.i_sb->s_fs_info;
-       struct bch_page_state s;
+       struct bch_page_state *s = bch2_page_state(page);
+       unsigned i, dirty_sectors = 0;
 
-       if (!PagePrivate(page))
-               return;
+       WARN_ON((u64) page_offset(page) + offset + len >
+               round_up((u64) i_size_read(&inode->v), block_bytes(c)));
 
-       s.v = xchg(&page_state(page)->v, 0);
-       ClearPagePrivate(page);
+       spin_lock(&s->lock);
 
-       if (s.dirty_sectors)
-               i_sectors_acct(c, inode, NULL, -s.dirty_sectors);
+       for (i = round_down(offset, block_bytes(c)) >> 9;
+            i < round_up(offset + len, block_bytes(c)) >> 9;
+            i++) {
+               unsigned sectors = sectors_to_reserve(&s->s[i],
+                                               res->disk.nr_replicas);
 
-       __bch2_put_page_reservation(c, inode, s);
-}
+               /*
+                * This can happen if we race with the error path in
+                * bch2_writepage_io_done():
+                */
+               sectors = min_t(unsigned, sectors, res->disk.sectors);
 
-int bch2_set_page_dirty(struct page *page)
-{
-       struct bch_inode_info *inode = to_bch_ei(page->mapping->host);
-       struct bch_fs *c = inode->v.i_sb->s_fs_info;
-       struct quota_res quota_res = { 0 };
-       struct bch_page_state old, new;
+               s->s[i].replicas_reserved += sectors;
+               res->disk.sectors -= sectors;
 
-       old = page_state_cmpxchg(page_state(page), new,
-               new.dirty_sectors = PAGE_SECTORS - new.sectors;
-               new.quota_reserved = 0;
-       );
+               if (s->s[i].state == SECTOR_UNALLOCATED)
+                       dirty_sectors++;
 
-       quota_res.sectors += old.quota_reserved * PAGE_SECTORS;
+               s->s[i].state = max_t(unsigned, s->s[i].state, SECTOR_DIRTY);
+       }
+
+       spin_unlock(&s->lock);
 
-       if (old.dirty_sectors != new.dirty_sectors)
-               i_sectors_acct(c, inode, &quota_res,
-                              new.dirty_sectors - old.dirty_sectors);
-       bch2_quota_reservation_put(c, inode, &quota_res);
+       if (dirty_sectors)
+               i_sectors_acct(c, inode, &res->quota, dirty_sectors);
 
-       return __set_page_dirty_nobuffers(page);
+       if (!PageDirty(page))
+               __set_page_dirty_nobuffers(page);
 }
 
-int bch2_page_mkwrite(struct vm_fault *vmf)
+vm_fault_t bch2_page_fault(struct vm_fault *vmf)
+{
+       struct file *file = vmf->vma->vm_file;
+       struct bch_inode_info *inode = file_bch_inode(file);
+       int ret;
+
+       bch2_pagecache_add_get(&inode->ei_pagecache_lock);
+       ret = filemap_fault(vmf);
+       bch2_pagecache_add_put(&inode->ei_pagecache_lock);
+
+       return ret;
+}
+
+vm_fault_t bch2_page_mkwrite(struct vm_fault *vmf)
 {
        struct page *page = vmf->page;
        struct file *file = vmf->vma->vm_file;
        struct bch_inode_info *inode = file_bch_inode(file);
-       struct address_space *mapping = inode->v.i_mapping;
+       struct address_space *mapping = file->f_mapping;
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
+       struct bch2_page_reservation res;
+       unsigned len;
+       loff_t isize;
        int ret = VM_FAULT_LOCKED;
 
+       bch2_page_reservation_init(c, inode, &res);
+
        sb_start_pagefault(inode->v.i_sb);
        file_update_time(file);
 
@@ -651,39 +545,39 @@ int bch2_page_mkwrite(struct vm_fault *vmf)
         * a write_invalidate_inode_pages_range() that works without dropping
         * page lock before invalidating page
         */
-       if (current->pagecache_lock != &mapping->add_lock)
-               pagecache_add_get(&mapping->add_lock);
+       bch2_pagecache_add_get(&inode->ei_pagecache_lock);
 
        lock_page(page);
-       if (page->mapping != mapping ||
-           page_offset(page) > i_size_read(&inode->v)) {
+       isize = i_size_read(&inode->v);
+
+       if (page->mapping != mapping || page_offset(page) >= isize) {
                unlock_page(page);
                ret = VM_FAULT_NOPAGE;
                goto out;
        }
 
-       if (bch2_get_page_reservation(c, inode, page, true)) {
+       len = min_t(loff_t, PAGE_SIZE, isize - page_offset(page));
+
+       if (bch2_page_reservation_get(c, inode, page, &res, 0, len, true)) {
                unlock_page(page);
                ret = VM_FAULT_SIGBUS;
                goto out;
        }
 
-       if (!PageDirty(page))
-               set_page_dirty(page);
+       bch2_set_page_dirty(c, inode, page, &res, 0, len);
+       bch2_page_reservation_put(c, inode, &res);
+
        wait_for_stable_page(page);
 out:
-       if (current->pagecache_lock != &mapping->add_lock)
-               pagecache_add_put(&mapping->add_lock);
+       bch2_pagecache_add_put(&inode->ei_pagecache_lock);
        sb_end_pagefault(inode->v.i_sb);
+
        return ret;
 }
 
 void bch2_invalidatepage(struct page *page, unsigned int offset,
                         unsigned int length)
 {
-       EBUG_ON(!PageLocked(page));
-       EBUG_ON(PageWriteback(page));
-
        if (offset || length < PAGE_SIZE)
                return;
 
@@ -692,10 +586,6 @@ void bch2_invalidatepage(struct page *page, unsigned int offset,
 
 int bch2_releasepage(struct page *page, gfp_t gfp_mask)
 {
-       /* XXX: this can't take locks that are held while we allocate memory */
-       EBUG_ON(!PageLocked(page));
-       EBUG_ON(PageWriteback(page));
-
        if (PageDirty(page))
                return 0;
 
@@ -709,53 +599,38 @@ int bch2_migrate_page(struct address_space *mapping, struct page *newpage,
 {
        int ret;
 
-       ret = migrate_page_move_mapping(mapping, newpage, page, NULL, mode, 0);
+       EBUG_ON(!PageLocked(page));
+       EBUG_ON(!PageLocked(newpage));
+
+       ret = migrate_page_move_mapping(mapping, newpage, page, 0);
        if (ret != MIGRATEPAGE_SUCCESS)
                return ret;
 
        if (PagePrivate(page)) {
-               *page_state(newpage) = *page_state(page);
                ClearPagePrivate(page);
+               get_page(newpage);
+               set_page_private(newpage, page_private(page));
+               set_page_private(page, 0);
+               put_page(page);
+               SetPagePrivate(newpage);
        }
 
-       migrate_page_copy(newpage, page);
+       if (mode != MIGRATE_SYNC_NO_COPY)
+               migrate_page_copy(newpage, page);
+       else
+               migrate_page_states(newpage, page);
        return MIGRATEPAGE_SUCCESS;
 }
 #endif
 
-/* readpages/writepages: */
-
-static bool bio_can_add_page_contig(struct bio *bio, struct page *page)
-{
-       sector_t offset = (sector_t) page->index << PAGE_SECTOR_SHIFT;
-
-       return bio->bi_vcnt < bio->bi_max_vecs &&
-               bio_end_sector(bio) == offset;
-}
-
-static int bio_add_page_contig(struct bio *bio, struct page *page)
-{
-       sector_t offset = (sector_t) page->index << PAGE_SECTOR_SHIFT;
-
-       EBUG_ON(!bio->bi_max_vecs);
-
-       if (!bio->bi_vcnt)
-               bio->bi_iter.bi_sector = offset;
-       else if (!bio_can_add_page_contig(bio, page))
-               return -1;
-
-       __bio_add_page(bio, page, PAGE_SIZE, 0);
-       return 0;
-}
-
 /* readpage(s): */
 
 static void bch2_readpages_end_io(struct bio *bio)
 {
+       struct bvec_iter_all iter;
        struct bio_vec *bv;
-       int i;
 
-       bio_for_each_segment_all(bv, bio, i) {
+       bio_for_each_segment_all(bv, bio, iter) {
                struct page *page = bv->bv_page;
 
                if (!bio->bi_status) {
@@ -770,200 +645,245 @@ static void bch2_readpages_end_io(struct bio *bio)
        bio_put(bio);
 }
 
+static inline void page_state_init_for_read(struct page *page)
+{
+       SetPagePrivate(page);
+       page->private = 0;
+}
+
 struct readpages_iter {
        struct address_space    *mapping;
-       struct list_head        pages;
+       struct page             **pages;
        unsigned                nr_pages;
+       unsigned                nr_added;
+       unsigned                idx;
+       pgoff_t                 offset;
 };
 
-static inline void page_state_init_for_read(struct page *page)
+static int readpages_iter_init(struct readpages_iter *iter,
+                              struct address_space *mapping,
+                              struct list_head *pages, unsigned nr_pages)
 {
-       struct bch_page_state *s = page_state(page);
+       memset(iter, 0, sizeof(*iter));
 
-       BUG_ON(s->reserved);
-       s->sectors      = 0;
-       s->compressed   = 0;
-}
+       iter->mapping   = mapping;
+       iter->offset    = list_last_entry(pages, struct page, lru)->index;
 
-static int readpage_add_page(struct readpages_iter *iter, struct page *page)
-{
-       int ret;
+       iter->pages = kmalloc_array(nr_pages, sizeof(struct page *), GFP_NOFS);
+       if (!iter->pages)
+               return -ENOMEM;
 
-       prefetchw(&page->flags);
+       while (!list_empty(pages)) {
+               struct page *page = list_last_entry(pages, struct page, lru);
 
-       ret = add_to_page_cache_lru(page, iter->mapping,
-                                   page->index, GFP_NOFS);
-       if (!ret)
-               page_state_init_for_read(page);
+               __bch2_page_state_create(page, __GFP_NOFAIL);
 
-       put_page(page);
-       return ret;
+               iter->pages[iter->nr_pages++] = page;
+               list_del(&page->lru);
+       }
+
+       return 0;
 }
 
 static inline struct page *readpage_iter_next(struct readpages_iter *iter)
 {
-       while (iter->nr_pages) {
-               struct page *page =
-                       list_last_entry(&iter->pages, struct page, lru);
+       struct page *page;
+       unsigned i;
+       int ret;
 
-               prefetchw(&page->flags);
-               list_del(&page->lru);
-               iter->nr_pages--;
+       BUG_ON(iter->idx > iter->nr_added);
+       BUG_ON(iter->nr_added > iter->nr_pages);
 
-               if (!readpage_add_page(iter, page))
-                       return page;
+       if (iter->idx < iter->nr_added)
+               goto out;
+
+       while (1) {
+               if (iter->idx == iter->nr_pages)
+                       return NULL;
+
+               ret = add_to_page_cache_lru_vec(iter->mapping,
+                               iter->pages     + iter->nr_added,
+                               iter->nr_pages  - iter->nr_added,
+                               iter->offset    + iter->nr_added,
+                               GFP_NOFS);
+               if (ret > 0)
+                       break;
+
+               page = iter->pages[iter->nr_added];
+               iter->idx++;
+               iter->nr_added++;
+
+               __bch2_page_state_release(page);
+               put_page(page);
        }
 
-       return NULL;
-}
+       iter->nr_added += ret;
 
-#define for_each_readpage_page(_iter, _page)                           \
-       for (;                                                          \
-            ((_page) = __readpage_next_page(&(_iter)));)               \
+       for (i = iter->idx; i < iter->nr_added; i++)
+               put_page(iter->pages[i]);
+out:
+       EBUG_ON(iter->pages[iter->idx]->index != iter->offset + iter->idx);
+
+       return iter->pages[iter->idx];
+}
 
 static void bch2_add_page_sectors(struct bio *bio, struct bkey_s_c k)
 {
        struct bvec_iter iter;
        struct bio_vec bv;
-       bool compressed = bch2_extent_is_compressed(k);
-       unsigned nr_ptrs = bch2_extent_nr_dirty_ptrs(k);
+       unsigned nr_ptrs = k.k->type == KEY_TYPE_reflink_v
+               ? 0 : bch2_bkey_nr_ptrs_fully_allocated(k);
+       unsigned state = k.k->type == KEY_TYPE_reservation
+               ? SECTOR_RESERVED
+               : SECTOR_ALLOCATED;
 
        bio_for_each_segment(bv, bio, iter) {
-               struct bch_page_state *s = page_state(bv.bv_page);
-
-               /* sectors in @k from the start of this page: */
-               unsigned k_sectors = k.k->size - (iter.bi_sector - k.k->p.offset);
-
-               unsigned page_sectors = min(bv.bv_len >> 9, k_sectors);
-
-               s->nr_replicas = !s->sectors
-                       ? nr_ptrs
-                       : min_t(unsigned, s->nr_replicas, nr_ptrs);
+               struct bch_page_state *s = bch2_page_state(bv.bv_page);
+               unsigned i;
+
+               for (i = bv.bv_offset >> 9;
+                    i < (bv.bv_offset + bv.bv_len) >> 9;
+                    i++) {
+                       s->s[i].nr_replicas = nr_ptrs;
+                       s->s[i].state = state;
+               }
+       }
+}
 
-               BUG_ON(s->sectors + page_sectors > PAGE_SECTORS);
-               s->sectors += page_sectors;
+static bool extent_partial_reads_expensive(struct bkey_s_c k)
+{
+       struct bkey_ptrs_c ptrs = bch2_bkey_ptrs_c(k);
+       struct bch_extent_crc_unpacked crc;
+       const union bch_extent_entry *i;
 
-               s->compressed |= compressed;
-       }
+       bkey_for_each_crc(k.k, ptrs, crc, i)
+               if (crc.csum_type || crc.compression_type)
+                       return true;
+       return false;
 }
 
 static void readpage_bio_extend(struct readpages_iter *iter,
-                               struct bio *bio, u64 offset,
+                               struct bio *bio,
+                               unsigned sectors_this_extent,
                                bool get_more)
 {
-       struct page *page;
-       pgoff_t page_offset;
-       int ret;
-
-       while (bio_end_sector(bio) < offset &&
+       while (bio_sectors(bio) < sectors_this_extent &&
               bio->bi_vcnt < bio->bi_max_vecs) {
-               page_offset = bio_end_sector(bio) >> PAGE_SECTOR_SHIFT;
+               pgoff_t page_offset = bio_end_sector(bio) >> PAGE_SECTOR_SHIFT;
+               struct page *page = readpage_iter_next(iter);
+               int ret;
 
-               if (iter->nr_pages) {
-                       page = list_last_entry(&iter->pages, struct page, lru);
-                       if (page->index != page_offset)
+               if (page) {
+                       if (iter->offset + iter->idx != page_offset)
                                break;
 
-                       list_del(&page->lru);
-                       iter->nr_pages--;
-               } else if (get_more) {
-                       rcu_read_lock();
-                       page = radix_tree_lookup(&iter->mapping->i_pages, page_offset);
-                       rcu_read_unlock();
+                       iter->idx++;
+               } else {
+                       if (!get_more)
+                               break;
 
-                       if (page && !radix_tree_exceptional_entry(page))
+                       page = xa_load(&iter->mapping->i_pages, page_offset);
+                       if (page && !xa_is_value(page))
                                break;
 
                        page = __page_cache_alloc(readahead_gfp_mask(iter->mapping));
                        if (!page)
                                break;
 
-                       page->index = page_offset;
-                       ClearPageReadahead(bio->bi_io_vec[bio->bi_vcnt - 1].bv_page);
-               } else {
-                       break;
-               }
+                       if (!__bch2_page_state_create(page, 0)) {
+                               put_page(page);
+                               break;
+                       }
 
-               ret = readpage_add_page(iter, page);
-               if (ret)
-                       break;
+                       ret = add_to_page_cache_lru(page, iter->mapping,
+                                                   page_offset, GFP_NOFS);
+                       if (ret) {
+                               __bch2_page_state_release(page);
+                               put_page(page);
+                               break;
+                       }
 
-               __bio_add_page(bio, page, PAGE_SIZE, 0);
-       }
+                       put_page(page);
+               }
 
-       if (!iter->nr_pages)
-               SetPageReadahead(bio->bi_io_vec[bio->bi_vcnt - 1].bv_page);
+               BUG_ON(!bio_add_page(bio, page, PAGE_SIZE, 0));
+       }
 }
 
-static void bchfs_read(struct bch_fs *c, struct btree_iter *iter,
+static void bchfs_read(struct btree_trans *trans, struct btree_iter *iter,
                       struct bch_read_bio *rbio, u64 inum,
                       struct readpages_iter *readpages_iter)
 {
-       struct bio *bio = &rbio->bio;
+       struct bch_fs *c = trans->c;
+       struct bkey_on_stack sk;
        int flags = BCH_READ_RETRY_IF_STALE|
                BCH_READ_MAY_PROMOTE;
+       int ret = 0;
 
        rbio->c = c;
        rbio->start_time = local_clock();
 
+       bkey_on_stack_init(&sk);
+retry:
        while (1) {
-               BKEY_PADDED(k) tmp;
                struct bkey_s_c k;
-               unsigned bytes;
+               unsigned bytes, sectors, offset_into_extent;
 
-               bch2_btree_iter_set_pos(iter, POS(inum, bio->bi_iter.bi_sector));
+               bch2_btree_iter_set_pos(iter,
+                               POS(inum, rbio->bio.bi_iter.bi_sector));
 
                k = bch2_btree_iter_peek_slot(iter);
-               BUG_ON(!k.k);
+               ret = bkey_err(k);
+               if (ret)
+                       break;
 
-               if (IS_ERR(k.k)) {
-                       int ret = bch2_btree_iter_unlock(iter);
-                       BUG_ON(!ret);
-                       bcache_io_error(c, bio, "btree IO error %i", ret);
-                       bio_endio(bio);
-                       return;
-               }
+               bkey_on_stack_reassemble(&sk, c, k);
+               k = bkey_i_to_s_c(sk.k);
 
-               bkey_reassemble(&tmp.k, k);
-               bch2_btree_iter_unlock(iter);
-               k = bkey_i_to_s_c(&tmp.k);
+               offset_into_extent = iter->pos.offset -
+                       bkey_start_offset(k.k);
+               sectors = k.k->size - offset_into_extent;
 
-               if (readpages_iter) {
-                       bool want_full_extent = false;
+               ret = bch2_read_indirect_extent(trans,
+                                       &offset_into_extent, sk.k);
+               if (ret)
+                       break;
 
-                       if (bkey_extent_is_data(k.k)) {
-                               struct bkey_s_c_extent e = bkey_s_c_to_extent(k);
-                               struct bch_extent_crc_unpacked crc;
-                               const union bch_extent_entry *i;
+               sectors = min(sectors, k.k->size - offset_into_extent);
 
-                               extent_for_each_crc(e, crc, i)
-                                       want_full_extent |= ((crc.csum_type != 0) |
-                                                            (crc.compression_type != 0));
-                       }
+               bch2_trans_unlock(trans);
 
-                       readpage_bio_extend(readpages_iter,
-                                           bio, k.k->p.offset,
-                                           want_full_extent);
-               }
+               if (readpages_iter)
+                       readpage_bio_extend(readpages_iter, &rbio->bio, sectors,
+                                           extent_partial_reads_expensive(k));
 
-               bytes = (min_t(u64, k.k->p.offset, bio_end_sector(bio)) -
-                        bio->bi_iter.bi_sector) << 9;
-               swap(bio->bi_iter.bi_size, bytes);
+               bytes = min(sectors, bio_sectors(&rbio->bio)) << 9;
+               swap(rbio->bio.bi_iter.bi_size, bytes);
 
-               if (bytes == bio->bi_iter.bi_size)
+               if (rbio->bio.bi_iter.bi_size == bytes)
                        flags |= BCH_READ_LAST_FRAGMENT;
 
                if (bkey_extent_is_allocation(k.k))
-                       bch2_add_page_sectors(bio, k);
+                       bch2_add_page_sectors(&rbio->bio, k);
 
-               bch2_read_extent(c, rbio, k, flags);
+               bch2_read_extent(c, rbio, k, offset_into_extent, flags);
 
                if (flags & BCH_READ_LAST_FRAGMENT)
-                       return;
+                       break;
 
-               swap(bio->bi_iter.bi_size, bytes);
-               bio_advance(bio, bytes);
+               swap(rbio->bio.bi_iter.bi_size, bytes);
+               bio_advance(&rbio->bio, bytes);
        }
+
+       if (ret == -EINTR)
+               goto retry;
+
+       if (ret) {
+               bcache_io_error(c, &rbio->bio, "btree IO error %i", ret);
+               bio_endio(&rbio->bio);
+       }
+
+       bkey_on_stack_exit(&sk, c);
 }
 
 int bch2_readpages(struct file *file, struct address_space *mapping,
@@ -971,40 +891,48 @@ int bch2_readpages(struct file *file, struct address_space *mapping,
 {
        struct bch_inode_info *inode = to_bch_ei(mapping->host);
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
-       struct bch_io_opts opts = io_opts(c, inode);
-       struct btree_iter iter;
+       struct bch_io_opts opts = io_opts(c, &inode->ei_inode);
+       struct btree_trans trans;
+       struct btree_iter *iter;
        struct page *page;
-       struct readpages_iter readpages_iter = {
-               .mapping = mapping, .nr_pages = nr_pages
-       };
+       struct readpages_iter readpages_iter;
+       int ret;
 
-       bch2_btree_iter_init(&iter, c, BTREE_ID_EXTENTS, POS_MIN,
-                            BTREE_ITER_SLOTS);
+       ret = readpages_iter_init(&readpages_iter, mapping, pages, nr_pages);
+       BUG_ON(ret);
 
-       INIT_LIST_HEAD(&readpages_iter.pages);
-       list_add(&readpages_iter.pages, pages);
-       list_del_init(pages);
+       bch2_trans_init(&trans, c, 0, 0);
 
-       if (current->pagecache_lock != &mapping->add_lock)
-               pagecache_add_get(&mapping->add_lock);
+       iter = bch2_trans_get_iter(&trans, BTREE_ID_EXTENTS, POS_MIN,
+                                  BTREE_ITER_SLOTS);
 
-       while ((page = readpage_iter_next(&readpages_iter))) {
-               unsigned n = max_t(unsigned,
-                                  min_t(unsigned, readpages_iter.nr_pages + 1,
-                                        BIO_MAX_PAGES),
-                                  c->sb.encoded_extent_max >> PAGE_SECTOR_SHIFT);
+       bch2_pagecache_add_get(&inode->ei_pagecache_lock);
 
+       while ((page = readpage_iter_next(&readpages_iter))) {
+               pgoff_t index = readpages_iter.offset + readpages_iter.idx;
+               unsigned n = min_t(unsigned,
+                                  readpages_iter.nr_pages -
+                                  readpages_iter.idx,
+                                  BIO_MAX_PAGES);
                struct bch_read_bio *rbio =
                        rbio_init(bio_alloc_bioset(GFP_NOFS, n, &c->bio_read),
                                  opts);
 
+               readpages_iter.idx++;
+
+               bio_set_op_attrs(&rbio->bio, REQ_OP_READ, 0);
+               rbio->bio.bi_iter.bi_sector = (sector_t) index << PAGE_SECTOR_SHIFT;
                rbio->bio.bi_end_io = bch2_readpages_end_io;
-               bio_add_page_contig(&rbio->bio, page);
-               bchfs_read(c, &iter, rbio, inode->v.i_ino, &readpages_iter);
+               BUG_ON(!bio_add_page(&rbio->bio, page, PAGE_SIZE, 0));
+
+               bchfs_read(&trans, iter, rbio, inode->v.i_ino,
+                          &readpages_iter);
        }
 
-       if (current->pagecache_lock != &mapping->add_lock)
-               pagecache_add_put(&mapping->add_lock);
+       bch2_pagecache_add_put(&inode->ei_pagecache_lock);
+
+       bch2_trans_exit(&trans);
+       kfree(readpages_iter.pages);
 
        return 0;
 }
@@ -1012,23 +940,30 @@ int bch2_readpages(struct file *file, struct address_space *mapping,
 static void __bchfs_readpage(struct bch_fs *c, struct bch_read_bio *rbio,
                             u64 inum, struct page *page)
 {
-       struct btree_iter iter;
+       struct btree_trans trans;
+       struct btree_iter *iter;
 
-       page_state_init_for_read(page);
+       bch2_page_state_create(page, __GFP_NOFAIL);
 
        bio_set_op_attrs(&rbio->bio, REQ_OP_READ, REQ_SYNC);
-       bio_add_page_contig(&rbio->bio, page);
+       rbio->bio.bi_iter.bi_sector =
+               (sector_t) page->index << PAGE_SECTOR_SHIFT;
+       BUG_ON(!bio_add_page(&rbio->bio, page, PAGE_SIZE, 0));
+
+       bch2_trans_init(&trans, c, 0, 0);
+       iter = bch2_trans_get_iter(&trans, BTREE_ID_EXTENTS, POS_MIN,
+                                  BTREE_ITER_SLOTS);
 
-       bch2_btree_iter_init(&iter, c, BTREE_ID_EXTENTS, POS_MIN,
-                            BTREE_ITER_SLOTS);
-       bchfs_read(c, &iter, rbio, inum, NULL);
+       bchfs_read(&trans, iter, rbio, inum, NULL);
+
+       bch2_trans_exit(&trans);
 }
 
 int bch2_readpage(struct file *file, struct page *page)
 {
        struct bch_inode_info *inode = to_bch_ei(page->mapping->host);
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
-       struct bch_io_opts opts = io_opts(c, inode);
+       struct bch_io_opts opts = io_opts(c, &inode->ei_inode);
        struct bch_read_bio *rbio;
 
        rbio = rbio_init(bio_alloc_bioset(GFP_NOFS, 1, &c->bio_read), opts);
@@ -1053,7 +988,7 @@ static int bch2_read_single_page(struct page *page,
        DECLARE_COMPLETION_ONSTACK(done);
 
        rbio = rbio_init(bio_alloc_bioset(GFP_NOFS, 1, &c->bio_read),
-                        io_opts(c, inode));
+                        io_opts(c, &inode->ei_inode));
        rbio->bio.bi_private = &done;
        rbio->bio.bi_end_io = bch2_read_single_page_end_io;
 
@@ -1080,7 +1015,9 @@ struct bch_writepage_state {
 static inline struct bch_writepage_state bch_writepage_state_init(struct bch_fs *c,
                                                                  struct bch_inode_info *inode)
 {
-       return (struct bch_writepage_state) { .opts = io_opts(c, inode) };
+       return (struct bch_writepage_state) {
+               .opts = io_opts(c, &inode->ei_inode)
+       };
 }
 
 static void bch2_writepage_io_free(struct closure *cl)
@@ -1088,47 +1025,71 @@ static void bch2_writepage_io_free(struct closure *cl)
        struct bch_writepage_io *io = container_of(cl,
                                        struct bch_writepage_io, cl);
 
-       bio_put(&io->op.op.wbio.bio);
+       bio_put(&io->op.wbio.bio);
 }
 
 static void bch2_writepage_io_done(struct closure *cl)
 {
        struct bch_writepage_io *io = container_of(cl,
                                        struct bch_writepage_io, cl);
-       struct bch_fs *c = io->op.op.c;
-       struct bio *bio = &io->op.op.wbio.bio;
+       struct bch_fs *c = io->op.c;
+       struct bio *bio = &io->op.wbio.bio;
+       struct bvec_iter_all iter;
        struct bio_vec *bvec;
        unsigned i;
 
-       if (io->op.op.error) {
-               bio_for_each_segment_all(bvec, bio, i)
+       if (io->op.error) {
+               bio_for_each_segment_all(bvec, bio, iter) {
+                       struct bch_page_state *s;
+
                        SetPageError(bvec->bv_page);
-               set_bit(AS_EIO, &io->op.inode->v.i_mapping->flags);
+                       mapping_set_error(bvec->bv_page->mapping, -EIO);
+
+                       s = __bch2_page_state(bvec->bv_page);
+                       spin_lock(&s->lock);
+                       for (i = 0; i < PAGE_SECTORS; i++)
+                               s->s[i].nr_replicas = 0;
+                       spin_unlock(&s->lock);
+               }
+       }
+
+       if (io->op.flags & BCH_WRITE_WROTE_DATA_INLINE) {
+               bio_for_each_segment_all(bvec, bio, iter) {
+                       struct bch_page_state *s;
+
+                       s = __bch2_page_state(bvec->bv_page);
+                       spin_lock(&s->lock);
+                       for (i = 0; i < PAGE_SECTORS; i++)
+                               s->s[i].nr_replicas = 0;
+                       spin_unlock(&s->lock);
+               }
        }
 
        /*
         * racing with fallocate can cause us to add fewer sectors than
         * expected - but we shouldn't add more sectors than expected:
         */
-       BUG_ON(io->op.sectors_added > (s64) io->new_sectors);
+       BUG_ON(io->op.i_sectors_delta > 0);
 
        /*
         * (error (due to going RO) halfway through a page can screw that up
         * slightly)
         * XXX wtf?
-          BUG_ON(io->op.sectors_added - io->new_sectors >= (s64) PAGE_SECTORS);
+          BUG_ON(io->op.op.i_sectors_delta >= PAGE_SECTORS);
         */
 
        /*
         * PageWriteback is effectively our ref on the inode - fixup i_blocks
         * before calling end_page_writeback:
         */
-       if (io->op.sectors_added != io->new_sectors)
-               i_sectors_acct(c, io->op.inode, NULL,
-                              io->op.sectors_added - (s64) io->new_sectors);
+       i_sectors_acct(c, io->inode, NULL, io->op.i_sectors_delta);
 
-       bio_for_each_segment_all(bvec, bio, i)
-               end_page_writeback(bvec->bv_page);
+       bio_for_each_segment_all(bvec, bio, iter) {
+               struct bch_page_state *s = __bch2_page_state(bvec->bv_page);
+
+               if (atomic_dec_and_test(&s->write_count))
+                       end_page_writeback(bvec->bv_page);
+       }
 
        closure_return_with_destructor(&io->cl, bch2_writepage_io_free);
 }
@@ -1138,7 +1099,7 @@ static void bch2_writepage_do_io(struct bch_writepage_state *w)
        struct bch_writepage_io *io = w->io;
 
        w->io = NULL;
-       closure_call(&io->op.op.cl, bch2_write, NULL, &io->cl);
+       closure_call(&io->op.cl, bch2_write, NULL, &io->cl);
        continue_at(&io->cl, bch2_writepage_io_done, NULL);
 }
 
@@ -1147,28 +1108,32 @@ static void bch2_writepage_do_io(struct bch_writepage_state *w)
  * possible, else allocating a new one:
  */
 static void bch2_writepage_io_alloc(struct bch_fs *c,
+                                   struct writeback_control *wbc,
                                    struct bch_writepage_state *w,
                                    struct bch_inode_info *inode,
-                                   struct page *page,
+                                   u64 sector,
                                    unsigned nr_replicas)
 {
        struct bch_write_op *op;
-       u64 offset = (u64) page->index << PAGE_SECTOR_SHIFT;
 
        w->io = container_of(bio_alloc_bioset(GFP_NOFS,
                                              BIO_MAX_PAGES,
                                              &c->writepage_bioset),
-                            struct bch_writepage_io, op.op.wbio.bio);
+                            struct bch_writepage_io, op.wbio.bio);
 
        closure_init(&w->io->cl, NULL);
-       w->io->new_sectors      = 0;
-       bch2_fswrite_op_init(&w->io->op, c, inode, w->opts, false);
-       op                      = &w->io->op.op;
+       w->io->inode            = inode;
+
+       op                      = &w->io->op;
+       bch2_write_op_init(op, c, w->opts);
+       op->target              = w->opts.foreground_target;
+       op_journal_seq_set(op, &inode->ei_journal_seq);
        op->nr_replicas         = nr_replicas;
        op->res.nr_replicas     = nr_replicas;
        op->write_point         = writepoint_hashed(inode->ei_last_dirtied);
-       op->pos                 = POS(inode->v.i_ino, offset);
-       op->wbio.bio.bi_iter.bi_sector = offset;
+       op->pos                 = POS(inode->v.i_ino, sector);
+       op->wbio.bio.bi_iter.bi_sector = sector;
+       op->wbio.bio.bi_opf     = wbc_to_write_flags(wbc);
 }
 
 static int __bch2_writepage(struct page *page,
@@ -1178,10 +1143,11 @@ static int __bch2_writepage(struct page *page,
        struct bch_inode_info *inode = to_bch_ei(page->mapping->host);
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
        struct bch_writepage_state *w = data;
-       struct bch_page_state new, old;
-       unsigned offset;
+       struct bch_page_state *s, orig;
+       unsigned i, offset, nr_replicas_this_write = U32_MAX;
        loff_t i_size = i_size_read(&inode->v);
        pgoff_t end_index = i_size >> PAGE_SHIFT;
+       int ret;
 
        EBUG_ON(!PageUptodate(page));
 
@@ -1205,46 +1171,101 @@ static int __bch2_writepage(struct page *page,
         */
        zero_user_segment(page, offset, PAGE_SIZE);
 do_io:
-       /* Before unlocking the page, transfer reservation to w->io: */
-       old = page_state_cmpxchg(page_state(page), new, {
-               EBUG_ON(!new.reserved &&
-                       (new.sectors != PAGE_SECTORS ||
-                       new.compressed));
+       s = bch2_page_state_create(page, __GFP_NOFAIL);
+
+       ret = bch2_get_page_disk_reservation(c, inode, page, true);
+       if (ret) {
+               SetPageError(page);
+               mapping_set_error(page->mapping, ret);
+               unlock_page(page);
+               return 0;
+       }
+
+       /* Before unlocking the page, get copy of reservations: */
+       orig = *s;
 
-               if (new.reserved)
-                       new.nr_replicas = new.reservation_replicas;
-               new.reserved = 0;
+       for (i = 0; i < PAGE_SECTORS; i++) {
+               if (s->s[i].state < SECTOR_DIRTY)
+                       continue;
+
+               nr_replicas_this_write =
+                       min_t(unsigned, nr_replicas_this_write,
+                             s->s[i].nr_replicas +
+                             s->s[i].replicas_reserved);
+       }
 
-               new.compressed |= w->opts.compression != 0;
+       for (i = 0; i < PAGE_SECTORS; i++) {
+               if (s->s[i].state < SECTOR_DIRTY)
+                       continue;
+
+               s->s[i].nr_replicas = w->opts.compression
+                       ? 0 : nr_replicas_this_write;
+
+               s->s[i].replicas_reserved = 0;
+               s->s[i].state = SECTOR_ALLOCATED;
+       }
 
-               new.sectors += new.dirty_sectors;
-               new.dirty_sectors = 0;
-       });
+       BUG_ON(atomic_read(&s->write_count));
+       atomic_set(&s->write_count, 1);
 
        BUG_ON(PageWriteback(page));
        set_page_writeback(page);
+
        unlock_page(page);
 
-       if (w->io &&
-           (w->io->op.op.res.nr_replicas != new.nr_replicas ||
-            !bio_can_add_page_contig(&w->io->op.op.wbio.bio, page)))
-               bch2_writepage_do_io(w);
+       offset = 0;
+       while (1) {
+               unsigned sectors = 1, dirty_sectors = 0, reserved_sectors = 0;
+               u64 sector;
+
+               while (offset < PAGE_SECTORS &&
+                      orig.s[offset].state < SECTOR_DIRTY)
+                       offset++;
 
-       if (!w->io)
-               bch2_writepage_io_alloc(c, w, inode, page, new.nr_replicas);
+               if (offset == PAGE_SECTORS)
+                       break;
 
-       w->io->new_sectors += new.sectors - old.sectors;
+               sector = ((u64) page->index << PAGE_SECTOR_SHIFT) + offset;
+
+               while (offset + sectors < PAGE_SECTORS &&
+                      orig.s[offset + sectors].state >= SECTOR_DIRTY)
+                       sectors++;
+
+               for (i = offset; i < offset + sectors; i++) {
+                       reserved_sectors += orig.s[i].replicas_reserved;
+                       dirty_sectors += orig.s[i].state == SECTOR_DIRTY;
+               }
 
-       BUG_ON(inode != w->io->op.inode);
-       BUG_ON(bio_add_page_contig(&w->io->op.op.wbio.bio, page));
+               if (w->io &&
+                   (w->io->op.res.nr_replicas != nr_replicas_this_write ||
+                    bio_full(&w->io->op.wbio.bio, PAGE_SIZE) ||
+                    w->io->op.wbio.bio.bi_iter.bi_size >= (256U << 20) ||
+                    bio_end_sector(&w->io->op.wbio.bio) != sector))
+                       bch2_writepage_do_io(w);
 
-       if (old.reserved)
-               w->io->op.op.res.sectors += old.reservation_replicas * PAGE_SECTORS;
+               if (!w->io)
+                       bch2_writepage_io_alloc(c, wbc, w, inode, sector,
+                                               nr_replicas_this_write);
 
-       w->io->op.new_i_size = i_size;
+               atomic_inc(&s->write_count);
 
-       if (wbc->sync_mode == WB_SYNC_ALL)
-               w->io->op.op.wbio.bio.bi_opf |= REQ_SYNC;
+               BUG_ON(inode != w->io->inode);
+               BUG_ON(!bio_add_page(&w->io->op.wbio.bio, page,
+                                    sectors << 9, offset << 9));
+
+               /* Check for writing past i_size: */
+               WARN_ON((bio_end_sector(&w->io->op.wbio.bio) << 9) >
+                       round_up(i_size, block_bytes(c)));
+
+               w->io->op.res.sectors += reserved_sectors;
+               w->io->op.i_sectors_delta -= dirty_sectors;
+               w->io->op.new_i_size = i_size;
+
+               offset += sectors;
+       }
+
+       if (atomic_dec_and_test(&s->write_count))
+               end_page_writeback(page);
 
        return 0;
 }
@@ -1287,15 +1308,20 @@ int bch2_write_begin(struct file *file, struct address_space *mapping,
 {
        struct bch_inode_info *inode = to_bch_ei(mapping->host);
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
+       struct bch2_page_reservation *res;
        pgoff_t index = pos >> PAGE_SHIFT;
        unsigned offset = pos & (PAGE_SIZE - 1);
        struct page *page;
        int ret = -ENOMEM;
 
-       BUG_ON(inode_unhashed(&inode->v));
+       res = kmalloc(sizeof(*res), GFP_KERNEL);
+       if (!res)
+               return -ENOMEM;
+
+       bch2_page_reservation_init(c, inode, res);
+       *fsdata = res;
 
-       /* Not strictly necessary - same reason as mkwrite(): */
-       pagecache_add_get(&mapping->add_lock);
+       bch2_pagecache_add_get(&inode->ei_pagecache_lock);
 
        page = grab_cache_page_write_begin(mapping, index, flags);
        if (!page)
@@ -1324,7 +1350,8 @@ readpage:
        if (ret)
                goto err;
 out:
-       ret = bch2_get_page_reservation(c, inode, page, true);
+       ret = bch2_page_reservation_get(c, inode, page, res,
+                                       offset, len, true);
        if (ret) {
                if (!PageUptodate(page)) {
                        /*
@@ -1346,7 +1373,9 @@ err:
        put_page(page);
        *pagep = NULL;
 err_unlock:
-       pagecache_add_put(&mapping->add_lock);
+       bch2_pagecache_add_put(&inode->ei_pagecache_lock);
+       kfree(res);
+       *fsdata = NULL;
        return ret;
 }
 
@@ -1356,6 +1385,8 @@ int bch2_write_end(struct file *file, struct address_space *mapping,
 {
        struct bch_inode_info *inode = to_bch_ei(mapping->host);
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
+       struct bch2_page_reservation *res = fsdata;
+       unsigned offset = pos & (PAGE_SIZE - 1);
 
        lockdep_assert_held(&inode->v.i_rwsem);
 
@@ -1378,17 +1409,18 @@ int bch2_write_end(struct file *file, struct address_space *mapping,
        if (copied) {
                if (!PageUptodate(page))
                        SetPageUptodate(page);
-               if (!PageDirty(page))
-                       set_page_dirty(page);
+
+               bch2_set_page_dirty(c, inode, page, res, offset, copied);
 
                inode->ei_last_dirtied = (unsigned long) current;
-       } else {
-               bch2_put_page_reservation(c, inode, page);
        }
 
        unlock_page(page);
        put_page(page);
-       pagecache_add_put(&mapping->add_lock);
+       bch2_pagecache_add_put(&inode->ei_pagecache_lock);
+
+       bch2_page_reservation_put(c, inode, res);
+       kfree(res);
 
        return copied;
 }
@@ -1402,21 +1434,30 @@ static int __bch2_buffered_write(struct bch_inode_info *inode,
 {
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
        struct page *pages[WRITE_BATCH_PAGES];
+       struct bch2_page_reservation res;
        unsigned long index = pos >> PAGE_SHIFT;
        unsigned offset = pos & (PAGE_SIZE - 1);
        unsigned nr_pages = DIV_ROUND_UP(offset + len, PAGE_SIZE);
-       unsigned i, copied = 0, nr_pages_copied = 0;
+       unsigned i, reserved = 0, set_dirty = 0;
+       unsigned copied = 0, nr_pages_copied = 0;
        int ret = 0;
 
        BUG_ON(!len);
        BUG_ON(nr_pages > ARRAY_SIZE(pages));
 
+       bch2_page_reservation_init(c, inode, &res);
+
        for (i = 0; i < nr_pages; i++) {
                pages[i] = grab_cache_page_write_begin(mapping, index + i, 0);
                if (!pages[i]) {
                        nr_pages = i;
-                       ret = -ENOMEM;
-                       goto out;
+                       if (!i) {
+                               ret = -ENOMEM;
+                               goto out;
+                       }
+                       len = min_t(unsigned, len,
+                                   nr_pages * PAGE_SIZE - offset);
+                       break;
                }
        }
 
@@ -1437,19 +1478,25 @@ static int __bch2_buffered_write(struct bch_inode_info *inode,
                }
        }
 
-       for (i = 0; i < nr_pages; i++) {
-               ret = bch2_get_page_reservation(c, inode, pages[i], true);
-
-               if (ret && !PageUptodate(pages[i])) {
-                       ret = bch2_read_single_page(pages[i], mapping);
-                       if (ret)
-                               goto out;
-
-                       ret = bch2_get_page_reservation(c, inode, pages[i], true);
+       while (reserved < len) {
+               struct page *page = pages[(offset + reserved) >> PAGE_SHIFT];
+               unsigned pg_offset = (offset + reserved) & (PAGE_SIZE - 1);
+               unsigned pg_len = min_t(unsigned, len - reserved,
+                                       PAGE_SIZE - pg_offset);
+retry_reservation:
+               ret = bch2_page_reservation_get(c, inode, page, &res,
+                                               pg_offset, pg_len, true);
+
+               if (ret && !PageUptodate(page)) {
+                       ret = bch2_read_single_page(page, mapping);
+                       if (!ret)
+                               goto retry_reservation;
                }
 
                if (ret)
                        goto out;
+
+               reserved += pg_len;
        }
 
        if (mapping_writably_mapped(mapping))
@@ -1459,10 +1506,10 @@ static int __bch2_buffered_write(struct bch_inode_info *inode,
        while (copied < len) {
                struct page *page = pages[(offset + copied) >> PAGE_SHIFT];
                unsigned pg_offset = (offset + copied) & (PAGE_SIZE - 1);
-               unsigned pg_bytes = min_t(unsigned, len - copied,
-                                         PAGE_SIZE - pg_offset);
+               unsigned pg_len = min_t(unsigned, len - copied,
+                                       PAGE_SIZE - pg_offset);
                unsigned pg_copied = iov_iter_copy_from_user_atomic(page,
-                                               iter, pg_offset, pg_bytes);
+                                               iter, pg_offset, pg_len);
 
                if (!pg_copied)
                        break;
@@ -1475,14 +1522,6 @@ static int __bch2_buffered_write(struct bch_inode_info *inode,
        if (!copied)
                goto out;
 
-       nr_pages_copied = DIV_ROUND_UP(offset + copied, PAGE_SIZE);
-       inode->ei_last_dirtied = (unsigned long) current;
-
-       spin_lock(&inode->v.i_lock);
-       if (pos + copied > inode->v.i_size)
-               i_size_write(&inode->v, pos + copied);
-       spin_unlock(&inode->v.i_lock);
-
        if (copied < len &&
            ((offset + copied) & (PAGE_SIZE - 1))) {
                struct page *page = pages[(offset + copied) >> PAGE_SHIFT];
@@ -1492,23 +1531,38 @@ static int __bch2_buffered_write(struct bch_inode_info *inode,
                        copied -= (offset + copied) & (PAGE_SIZE - 1);
                }
        }
-out:
-       for (i = 0; i < nr_pages_copied; i++) {
-               if (!PageUptodate(pages[i]))
-                       SetPageUptodate(pages[i]);
-               if (!PageDirty(pages[i]))
-                       set_page_dirty(pages[i]);
-               unlock_page(pages[i]);
-               put_page(pages[i]);
+
+       spin_lock(&inode->v.i_lock);
+       if (pos + copied > inode->v.i_size)
+               i_size_write(&inode->v, pos + copied);
+       spin_unlock(&inode->v.i_lock);
+
+       while (set_dirty < copied) {
+               struct page *page = pages[(offset + set_dirty) >> PAGE_SHIFT];
+               unsigned pg_offset = (offset + set_dirty) & (PAGE_SIZE - 1);
+               unsigned pg_len = min_t(unsigned, copied - set_dirty,
+                                       PAGE_SIZE - pg_offset);
+
+               if (!PageUptodate(page))
+                       SetPageUptodate(page);
+
+               bch2_set_page_dirty(c, inode, page, &res, pg_offset, pg_len);
+               unlock_page(page);
+               put_page(page);
+
+               set_dirty += pg_len;
        }
 
+       nr_pages_copied = DIV_ROUND_UP(offset + copied, PAGE_SIZE);
+       inode->ei_last_dirtied = (unsigned long) current;
+out:
        for (i = nr_pages_copied; i < nr_pages; i++) {
-               if (!PageDirty(pages[i]))
-                       bch2_put_page_reservation(c, inode, pages[i]);
                unlock_page(pages[i]);
                put_page(pages[i]);
        }
 
+       bch2_page_reservation_put(c, inode, &res);
+
        return copied ?: ret;
 }
 
@@ -1521,7 +1575,7 @@ static ssize_t bch2_buffered_write(struct kiocb *iocb, struct iov_iter *iter)
        ssize_t written = 0;
        int ret = 0;
 
-       pagecache_add_get(&mapping->add_lock);
+       bch2_pagecache_add_get(&inode->ei_pagecache_lock);
 
        do {
                unsigned offset = pos & (PAGE_SIZE - 1);
@@ -1578,7 +1632,7 @@ again:
                balance_dirty_pages_ratelimited(mapping);
        } while (iov_iter_count(iter));
 
-       pagecache_add_put(&mapping->add_lock);
+       bch2_pagecache_add_put(&inode->ei_pagecache_lock);
 
        return written ? written : ret;
 }
@@ -1614,7 +1668,7 @@ static int bch2_direct_IO_read(struct kiocb *req, struct iov_iter *iter)
        struct file *file = req->ki_filp;
        struct bch_inode_info *inode = file_bch_inode(file);
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
-       struct bch_io_opts opts = io_opts(c, inode);
+       struct bch_io_opts opts = io_opts(c, &inode->ei_inode);
        struct dio_read *dio;
        struct bio *bio;
        loff_t offset = req->ki_pos;
@@ -1702,62 +1756,98 @@ start:
        }
 }
 
-/* O_DIRECT writes */
+ssize_t bch2_read_iter(struct kiocb *iocb, struct iov_iter *iter)
+{
+       struct file *file = iocb->ki_filp;
+       struct bch_inode_info *inode = file_bch_inode(file);
+       struct address_space *mapping = file->f_mapping;
+       size_t count = iov_iter_count(iter);
+       ssize_t ret;
+
+       if (!count)
+               return 0; /* skip atime */
+
+       if (iocb->ki_flags & IOCB_DIRECT) {
+               struct blk_plug plug;
+
+               ret = filemap_write_and_wait_range(mapping,
+                                       iocb->ki_pos,
+                                       iocb->ki_pos + count - 1);
+               if (ret < 0)
+                       return ret;
+
+               file_accessed(file);
+
+               blk_start_plug(&plug);
+               ret = bch2_direct_IO_read(iocb, iter);
+               blk_finish_plug(&plug);
+
+               if (ret >= 0)
+                       iocb->ki_pos += ret;
+       } else {
+               bch2_pagecache_add_get(&inode->ei_pagecache_lock);
+               ret = generic_file_read_iter(iocb, iter);
+               bch2_pagecache_add_put(&inode->ei_pagecache_lock);
+       }
+
+       return ret;
+}
 
-static void bch2_dio_write_loop_async(struct closure *);
+/* O_DIRECT writes */
 
 static long bch2_dio_write_loop(struct dio_write *dio)
 {
+       bool kthread = (current->flags & PF_KTHREAD) != 0;
+       struct bch_fs *c = dio->op.c;
        struct kiocb *req = dio->req;
        struct address_space *mapping = req->ki_filp->f_mapping;
-       struct bch_inode_info *inode = dio->iop.inode;
-       struct bio *bio = &dio->iop.op.wbio.bio;
+       struct bch_inode_info *inode = file_bch_inode(req->ki_filp);
+       struct bio *bio = &dio->op.wbio.bio;
+       struct bvec_iter_all iter;
        struct bio_vec *bv;
-       bool sync;
+       unsigned unaligned;
+       u64 new_i_size;
+       bool sync = dio->sync;
        long ret;
-       int i;
 
        if (dio->loop)
                goto loop;
 
-       inode_dio_begin(&inode->v);
-       __pagecache_block_get(&mapping->add_lock);
-
-       /* Write and invalidate pagecache range that we're writing to: */
-       ret = write_invalidate_inode_pages_range(mapping, req->ki_pos,
-                               req->ki_pos + iov_iter_count(&dio->iter) - 1);
-       if (unlikely(ret))
-               goto err;
-
        while (1) {
-               BUG_ON(current->pagecache_lock);
-               current->pagecache_lock = &mapping->add_lock;
-               if (current != dio->task)
-                       use_mm(dio->task->mm);
+               if (kthread)
+                       use_mm(dio->mm);
+               BUG_ON(current->faults_disabled_mapping);
+               current->faults_disabled_mapping = mapping;
 
                ret = bio_iov_iter_get_pages(bio, &dio->iter);
 
-               if (current != dio->task)
-                       unuse_mm(dio->task->mm);
-               current->pagecache_lock = NULL;
+               current->faults_disabled_mapping = NULL;
+               if (kthread)
+                       unuse_mm(dio->mm);
 
                if (unlikely(ret < 0))
                        goto err;
 
-               /* gup might have faulted pages back in: */
-               ret = write_invalidate_inode_pages_range(mapping,
-                               req->ki_pos + (dio->iop.op.written << 9),
-                               req->ki_pos + iov_iter_count(&dio->iter) - 1);
-               if (unlikely(ret))
+               unaligned = bio->bi_iter.bi_size & (block_bytes(c) - 1);
+               bio->bi_iter.bi_size -= unaligned;
+               iov_iter_revert(&dio->iter, unaligned);
+
+               if (!bio->bi_iter.bi_size) {
+                       /*
+                        * bio_iov_iter_get_pages was only able to get <
+                        * blocksize worth of pages:
+                        */
+                       bio_for_each_segment_all(bv, bio, iter)
+                               put_page(bv->bv_page);
+                       ret = -EFAULT;
                        goto err;
+               }
 
-               dio->iop.op.pos = POS(inode->v.i_ino,
-                               (req->ki_pos >> 9) + dio->iop.op.written);
+               dio->op.pos = POS(inode->v.i_ino,
+                                 (req->ki_pos >> 9) + dio->op.written);
 
                task_io_account_write(bio->bi_iter.bi_size);
 
-               closure_call(&dio->iop.op.cl, bch2_write, NULL, &dio->cl);
-
                if (!dio->sync && !dio->loop && dio->iter.count) {
                        struct iovec *iov = dio->inline_vecs;
 
@@ -1765,8 +1855,8 @@ static long bch2_dio_write_loop(struct dio_write *dio)
                                iov = kmalloc(dio->iter.nr_segs * sizeof(*iov),
                                              GFP_KERNEL);
                                if (unlikely(!iov)) {
-                                       dio->iop.op.error = -ENOMEM;
-                                       goto err_wait_io;
+                                       dio->sync = sync = true;
+                                       goto do_io;
                                }
 
                                dio->free_iov = true;
@@ -1775,35 +1865,44 @@ static long bch2_dio_write_loop(struct dio_write *dio)
                        memcpy(iov, dio->iter.iov, dio->iter.nr_segs * sizeof(*iov));
                        dio->iter.iov = iov;
                }
-err_wait_io:
+do_io:
                dio->loop = true;
+               closure_call(&dio->op.cl, bch2_write, NULL, NULL);
 
-               if (!dio->sync) {
-                       continue_at(&dio->cl, bch2_dio_write_loop_async, NULL);
+               if (sync)
+                       wait_for_completion(&dio->done);
+               else
                        return -EIOCBQUEUED;
-               }
-
-               closure_sync(&dio->cl);
 loop:
-               bio_for_each_segment_all(bv, bio, i)
+               i_sectors_acct(c, inode, &dio->quota_res,
+                              dio->op.i_sectors_delta);
+               dio->op.i_sectors_delta = 0;
+
+               new_i_size = req->ki_pos + ((u64) dio->op.written << 9);
+
+               spin_lock(&inode->v.i_lock);
+               if (new_i_size > inode->v.i_size)
+                       i_size_write(&inode->v, new_i_size);
+               spin_unlock(&inode->v.i_lock);
+
+               bio_for_each_segment_all(bv, bio, iter)
                        put_page(bv->bv_page);
-               if (!dio->iter.count || dio->iop.op.error)
+               if (!dio->iter.count || dio->op.error)
                        break;
+
                bio_reset(bio);
+               reinit_completion(&dio->done);
        }
 
-       ret = dio->iop.op.error ?: ((long) dio->iop.op.written << 9);
+       ret = dio->op.error ?: ((long) dio->op.written << 9);
 err:
-       __pagecache_block_put(&mapping->add_lock);
-       bch2_disk_reservation_put(dio->iop.op.c, &dio->iop.op.res);
-       bch2_quota_reservation_put(dio->iop.op.c, inode, &dio->quota_res);
+       bch2_pagecache_block_put(&inode->ei_pagecache_lock);
+       bch2_disk_reservation_put(c, &dio->op.res);
+       bch2_quota_reservation_put(c, inode, &dio->quota_res);
 
        if (dio->free_iov)
                kfree(dio->iter.iov);
 
-       closure_debug_destroy(&dio->cl);
-
-       sync = dio->sync;
        bio_put(bio);
 
        /* inode->i_dio_count is our ref on inode and thus bch_fs */
@@ -1816,141 +1915,155 @@ err:
        return ret;
 }
 
-static void bch2_dio_write_loop_async(struct closure *cl)
+static void bch2_dio_write_loop_async(struct bch_write_op *op)
 {
-       struct dio_write *dio = container_of(cl, struct dio_write, cl);
+       struct dio_write *dio = container_of(op, struct dio_write, op);
 
-       bch2_dio_write_loop(dio);
+       if (dio->sync)
+               complete(&dio->done);
+       else
+               bch2_dio_write_loop(dio);
 }
 
-static int bch2_direct_IO_write(struct kiocb *req,
-                               struct iov_iter *iter,
-                               bool swap)
+static noinline
+ssize_t bch2_direct_write(struct kiocb *req, struct iov_iter *iter)
 {
        struct file *file = req->ki_filp;
+       struct address_space *mapping = file->f_mapping;
        struct bch_inode_info *inode = file_bch_inode(file);
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
+       struct bch_io_opts opts = io_opts(c, &inode->ei_inode);
        struct dio_write *dio;
        struct bio *bio;
-       loff_t offset = req->ki_pos;
+       bool locked = true, extending;
        ssize_t ret;
 
-       lockdep_assert_held(&inode->v.i_rwsem);
+       prefetch(&c->opts);
+       prefetch((void *) &c->opts + 64);
+       prefetch(&inode->ei_inode);
+       prefetch((void *) &inode->ei_inode + 64);
 
-       if (unlikely(!iter->count))
-               return 0;
+       inode_lock(&inode->v);
 
-       if (unlikely((offset|iter->count) & (block_bytes(c) - 1)))
-               return -EINVAL;
+       ret = generic_write_checks(req, iter);
+       if (unlikely(ret <= 0))
+               goto err;
+
+       ret = file_remove_privs(file);
+       if (unlikely(ret))
+               goto err;
+
+       ret = file_update_time(file);
+       if (unlikely(ret))
+               goto err;
+
+       if (unlikely((req->ki_pos|iter->count) & (block_bytes(c) - 1)))
+               goto err;
+
+       inode_dio_begin(&inode->v);
+       bch2_pagecache_block_get(&inode->ei_pagecache_lock);
+
+       extending = req->ki_pos + iter->count > inode->v.i_size;
+       if (!extending) {
+               inode_unlock(&inode->v);
+               locked = false;
+       }
 
        bio = bio_alloc_bioset(GFP_KERNEL,
                               iov_iter_npages(iter, BIO_MAX_PAGES),
                               &c->dio_write_bioset);
-       dio = container_of(bio, struct dio_write, iop.op.wbio.bio);
-       closure_init(&dio->cl, NULL);
+       dio = container_of(bio, struct dio_write, op.wbio.bio);
+       init_completion(&dio->done);
        dio->req                = req;
-       dio->task               = current;
+       dio->mm                 = current->mm;
        dio->loop               = false;
-       dio->sync               = is_sync_kiocb(req) ||
-               offset + iter->count > inode->v.i_size;
+       dio->sync               = is_sync_kiocb(req) || extending;
        dio->free_iov           = false;
        dio->quota_res.sectors  = 0;
        dio->iter               = *iter;
-       bch2_fswrite_op_init(&dio->iop, c, inode, io_opts(c, inode), true);
-       dio->iop.op.write_point = writepoint_hashed((unsigned long) dio->task);
-       dio->iop.op.flags |= BCH_WRITE_NOPUT_RESERVATION;
+
+       bch2_write_op_init(&dio->op, c, opts);
+       dio->op.end_io          = bch2_dio_write_loop_async;
+       dio->op.target          = opts.foreground_target;
+       op_journal_seq_set(&dio->op, &inode->ei_journal_seq);
+       dio->op.write_point     = writepoint_hashed((unsigned long) current);
+       dio->op.flags |= BCH_WRITE_NOPUT_RESERVATION;
 
        if ((req->ki_flags & IOCB_DSYNC) &&
            !c->opts.journal_flush_disabled)
-               dio->iop.op.flags |= BCH_WRITE_FLUSH;
+               dio->op.flags |= BCH_WRITE_FLUSH;
 
        ret = bch2_quota_reservation_add(c, inode, &dio->quota_res,
                                         iter->count >> 9, true);
        if (unlikely(ret))
-               goto err;
-
-       ret = bch2_disk_reservation_get(c, &dio->iop.op.res, iter->count >> 9,
-                                       dio->iop.op.opts.data_replicas, 0);
-       if (unlikely(ret)) {
-               if (bch2_check_range_allocated(c, POS(inode->v.i_ino,
-                                                     offset >> 9),
-                                              iter->count >> 9))
-                       goto err;
-
-               dio->iop.unalloc = true;
-       }
-
-       dio->iop.op.nr_replicas = dio->iop.op.res.nr_replicas;
+               goto err_put_bio;
+
+       dio->op.nr_replicas     = dio->op.opts.data_replicas;
+
+       ret = bch2_disk_reservation_get(c, &dio->op.res, iter->count >> 9,
+                                       dio->op.opts.data_replicas, 0);
+       if (unlikely(ret) &&
+           !bch2_check_range_allocated(c, POS(inode->v.i_ino,
+                                              req->ki_pos >> 9),
+                                       iter->count >> 9,
+                                       dio->op.opts.data_replicas))
+               goto err_put_bio;
+
+       ret = write_invalidate_inode_pages_range(mapping,
+                                       req->ki_pos,
+                                       req->ki_pos + iter->count - 1);
+       if (unlikely(ret))
+               goto err_put_bio;
 
-       return bch2_dio_write_loop(dio);
+       ret = bch2_dio_write_loop(dio);
 err:
-       bch2_disk_reservation_put(c, &dio->iop.op.res);
+       if (locked)
+               inode_unlock(&inode->v);
+       if (ret > 0)
+               req->ki_pos += ret;
+       return ret;
+err_put_bio:
+       bch2_pagecache_block_put(&inode->ei_pagecache_lock);
+       bch2_disk_reservation_put(c, &dio->op.res);
        bch2_quota_reservation_put(c, inode, &dio->quota_res);
-       closure_debug_destroy(&dio->cl);
        bio_put(bio);
-       return ret;
-}
-
-ssize_t bch2_direct_IO(struct kiocb *req, struct iov_iter *iter)
-{
-       struct blk_plug plug;
-       ssize_t ret;
-
-       blk_start_plug(&plug);
-       ret = iov_iter_rw(iter) == WRITE
-               ? bch2_direct_IO_write(req, iter, false)
-               : bch2_direct_IO_read(req, iter);
-       blk_finish_plug(&plug);
-
-       return ret;
-}
-
-static ssize_t
-bch2_direct_write(struct kiocb *iocb, struct iov_iter *iter)
-{
-       return bch2_direct_IO_write(iocb, iter, true);
+       inode_dio_end(&inode->v);
+       goto err;
 }
 
-static ssize_t __bch2_write_iter(struct kiocb *iocb, struct iov_iter *from)
+ssize_t bch2_write_iter(struct kiocb *iocb, struct iov_iter *from)
 {
        struct file *file = iocb->ki_filp;
        struct bch_inode_info *inode = file_bch_inode(file);
-       ssize_t ret;
+       ssize_t ret;
+
+       if (iocb->ki_flags & IOCB_DIRECT)
+               return bch2_direct_write(iocb, from);
 
        /* We can write back this queue in page reclaim */
        current->backing_dev_info = inode_to_bdi(&inode->v);
+       inode_lock(&inode->v);
+
+       ret = generic_write_checks(iocb, from);
+       if (ret <= 0)
+               goto unlock;
+
        ret = file_remove_privs(file);
        if (ret)
-               goto out;
+               goto unlock;
 
        ret = file_update_time(file);
        if (ret)
-               goto out;
-
-       ret = iocb->ki_flags & IOCB_DIRECT
-               ? bch2_direct_write(iocb, from)
-               : bch2_buffered_write(iocb, from);
+               goto unlock;
 
+       ret = bch2_buffered_write(iocb, from);
        if (likely(ret > 0))
                iocb->ki_pos += ret;
-out:
+unlock:
+       inode_unlock(&inode->v);
        current->backing_dev_info = NULL;
-       return ret;
-}
 
-ssize_t bch2_write_iter(struct kiocb *iocb, struct iov_iter *from)
-{
-       struct bch_inode_info *inode = file_bch_inode(iocb->ki_filp);
-       bool direct = iocb->ki_flags & IOCB_DIRECT;
-       ssize_t ret;
-
-       inode_lock(&inode->v);
-       ret = generic_write_checks(iocb, from);
        if (ret > 0)
-               ret = __bch2_write_iter(iocb, from);
-       inode_unlock(&inode->v);
-
-       if (ret > 0 && !direct)
                ret = generic_write_sync(iocb, ret);
 
        return ret;
@@ -1975,10 +2088,9 @@ int bch2_fsync(struct file *file, loff_t start, loff_t end, int datasync)
        if (ret)
                return ret;
 out:
-       if (c->opts.journal_flush_disabled)
-               return 0;
-
-       ret = bch2_journal_flush_seq(&c->journal, inode->ei_journal_seq);
+       if (!c->opts.journal_flush_disabled)
+               ret = bch2_journal_flush_seq(&c->journal,
+                                            inode->ei_journal_seq);
        ret2 = file_check_and_advance_wb_err(file);
 
        return ret ?: ret2;
@@ -1986,66 +2098,18 @@ out:
 
 /* truncate: */
 
-static int __bch2_fpunch(struct bch_fs *c, struct bch_inode_info *inode,
-                        u64 start_offset, u64 end_offset, u64 *journal_seq)
-{
-       struct bpos start       = POS(inode->v.i_ino, start_offset);
-       struct bpos end         = POS(inode->v.i_ino, end_offset);
-       unsigned max_sectors    = KEY_SIZE_MAX & (~0 << c->block_bits);
-       struct btree_trans trans;
-       struct btree_iter *iter;
-       struct bkey_s_c k;
-       int ret = 0;
-
-       bch2_trans_init(&trans, c);
-       bch2_trans_preload_iters(&trans);
-
-       iter = bch2_trans_get_iter(&trans, BTREE_ID_EXTENTS, start,
-                                  BTREE_ITER_INTENT);
-
-       while ((k = bch2_btree_iter_peek(iter)).k &&
-              !(ret = btree_iter_err(k)) &&
-              bkey_cmp(iter->pos, end) < 0) {
-               struct disk_reservation disk_res =
-                       bch2_disk_reservation_init(c, 0);
-               struct bkey_i delete;
-
-               bkey_init(&delete.k);
-               delete.k.p = iter->pos;
-
-               /* create the biggest key we can */
-               bch2_key_resize(&delete.k, max_sectors);
-               bch2_cut_back(end, &delete.k);
-
-               ret = bch2_extent_update(&trans, inode,
-                               &disk_res, NULL, iter, &delete,
-                               0, true, true, NULL);
-               bch2_disk_reservation_put(c, &disk_res);
-
-               if (ret == -EINTR)
-                       ret = 0;
-               if (ret)
-                       break;
-
-               bch2_btree_iter_cond_resched(iter);
-       }
-
-       bch2_trans_exit(&trans);
-
-       return ret;
-}
-
 static inline int range_has_data(struct bch_fs *c,
                                  struct bpos start,
                                  struct bpos end)
 {
-
-       struct btree_iter iter;
+       struct btree_trans trans;
+       struct btree_iter *iter;
        struct bkey_s_c k;
        int ret = 0;
 
-       for_each_btree_key(&iter, c, BTREE_ID_EXTENTS,
-                          start, 0, k) {
+       bch2_trans_init(&trans, c, 0, 0);
+
+       for_each_btree_key(&trans, iter, BTREE_ID_EXTENTS, start, 0, k, ret) {
                if (bkey_cmp(bkey_start_pos(k.k), end) >= 0)
                        break;
 
@@ -2055,7 +2119,7 @@ static inline int range_has_data(struct bch_fs *c,
                }
        }
 
-       return bch2_btree_iter_unlock(&iter) ?: ret;
+       return bch2_trans_exit(&trans) ?: ret;
 }
 
 static int __bch2_truncate_page(struct bch_inode_info *inode,
@@ -2063,8 +2127,10 @@ static int __bch2_truncate_page(struct bch_inode_info *inode,
 {
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
        struct address_space *mapping = inode->v.i_mapping;
+       struct bch_page_state *s;
        unsigned start_offset = start & (PAGE_SIZE - 1);
        unsigned end_offset = ((end - 1) & (PAGE_SIZE - 1)) + 1;
+       unsigned i;
        struct page *page;
        int ret = 0;
 
@@ -2096,31 +2162,42 @@ static int __bch2_truncate_page(struct bch_inode_info *inode,
                }
        }
 
+       s = bch2_page_state_create(page, 0);
+       if (!s) {
+               ret = -ENOMEM;
+               goto unlock;
+       }
+
        if (!PageUptodate(page)) {
                ret = bch2_read_single_page(page, mapping);
                if (ret)
                        goto unlock;
        }
 
+       if (index != start >> PAGE_SHIFT)
+               start_offset = 0;
+       if (index != end >> PAGE_SHIFT)
+               end_offset = PAGE_SIZE;
+
+       for (i = round_up(start_offset, block_bytes(c)) >> 9;
+            i < round_down(end_offset, block_bytes(c)) >> 9;
+            i++) {
+               s->s[i].nr_replicas     = 0;
+               s->s[i].state           = SECTOR_UNALLOCATED;
+       }
+
+       zero_user_segment(page, start_offset, end_offset);
+
        /*
         * Bit of a hack - we don't want truncate to fail due to -ENOSPC.
         *
         * XXX: because we aren't currently tracking whether the page has actual
         * data in it (vs. just 0s, or only partially written) this wrong. ick.
         */
-       ret = bch2_get_page_reservation(c, inode, page, false);
+       ret = bch2_get_page_disk_reservation(c, inode, page, false);
        BUG_ON(ret);
 
-       if (index == start >> PAGE_SHIFT &&
-           index == end >> PAGE_SHIFT)
-               zero_user_segment(page, start_offset, end_offset);
-       else if (index == start >> PAGE_SHIFT)
-               zero_user_segment(page, start_offset, PAGE_SIZE);
-       else if (index == end >> PAGE_SHIFT)
-               zero_user_segment(page, 0, end_offset);
-
-       if (!PageDirty(page))
-               set_page_dirty(page);
+       __set_page_dirty_nobuffers(page);
 unlock:
        unlock_page(page);
        put_page(page);
@@ -2131,17 +2208,23 @@ out:
 static int bch2_truncate_page(struct bch_inode_info *inode, loff_t from)
 {
        return __bch2_truncate_page(inode, from >> PAGE_SHIFT,
-                                   from, from + PAGE_SIZE);
+                                   from, round_up(from, PAGE_SIZE));
 }
 
-static int bch2_extend(struct bch_inode_info *inode, struct iattr *iattr)
+static int bch2_extend(struct bch_inode_info *inode,
+                      struct bch_inode_unpacked *inode_u,
+                      struct iattr *iattr)
 {
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
        struct address_space *mapping = inode->v.i_mapping;
        int ret;
 
-       ret = filemap_write_and_wait_range(mapping,
-                       inode->ei_inode.bi_size, S64_MAX);
+       /*
+        * sync appends:
+        *
+        * this has to be done _before_ extending i_size:
+        */
+       ret = filemap_write_and_wait_range(mapping, inode_u->bi_size, S64_MAX);
        if (ret)
                return ret;
 
@@ -2181,19 +2264,41 @@ int bch2_truncate(struct bch_inode_info *inode, struct iattr *iattr)
 {
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
        struct address_space *mapping = inode->v.i_mapping;
+       struct bch_inode_unpacked inode_u;
+       struct btree_trans trans;
+       struct btree_iter *iter;
        u64 new_i_size = iattr->ia_size;
-       bool shrink;
+       s64 i_sectors_delta = 0;
        int ret = 0;
 
        inode_dio_wait(&inode->v);
-       pagecache_block_get(&mapping->add_lock);
+       bch2_pagecache_block_get(&inode->ei_pagecache_lock);
+
+       /*
+        * fetch current on disk i_size: inode is locked, i_size can only
+        * increase underneath us:
+        */
+       bch2_trans_init(&trans, c, 0, 0);
+       iter = bch2_inode_peek(&trans, &inode_u, inode->v.i_ino, 0);
+       ret = PTR_ERR_OR_ZERO(iter);
+       bch2_trans_exit(&trans);
+
+       if (ret)
+               goto err;
 
-       BUG_ON(inode->v.i_size < inode->ei_inode.bi_size);
+       /*
+        * check this before next assertion; on filesystem error our normal
+        * invariants are a bit broken (truncate has to truncate the page cache
+        * before the inode).
+        */
+       ret = bch2_journal_error(&c->journal);
+       if (ret)
+               goto err;
 
-       shrink = iattr->ia_size <= inode->v.i_size;
+       BUG_ON(inode->v.i_size < inode_u.bi_size);
 
-       if (!shrink) {
-               ret = bch2_extend(inode, iattr);
+       if (iattr->ia_size > inode->v.i_size) {
+               ret = bch2_extend(inode, &inode_u, iattr);
                goto err;
        }
 
@@ -2201,9 +2306,19 @@ int bch2_truncate(struct bch_inode_info *inode, struct iattr *iattr)
        if (unlikely(ret))
                goto err;
 
-       if (iattr->ia_size > inode->ei_inode.bi_size)
+       /*
+        * When extending, we're going to write the new i_size to disk
+        * immediately so we need to flush anything above the current on disk
+        * i_size first:
+        *
+        * Also, when extending we need to flush the page that i_size currently
+        * straddles - if it's mapped to userspace, we need to ensure that
+        * userspace has to redirty it and call .mkwrite -> set_page_dirty
+        * again to allocate the part of the page that was extended.
+        */
+       if (iattr->ia_size > inode_u.bi_size)
                ret = filemap_write_and_wait_range(mapping,
-                               inode->ei_inode.bi_size,
+                               inode_u.bi_size,
                                iattr->ia_size - 1);
        else if (iattr->ia_size & (PAGE_SIZE - 1))
                ret = filemap_write_and_wait_range(mapping,
@@ -2222,13 +2337,11 @@ int bch2_truncate(struct bch_inode_info *inode, struct iattr *iattr)
 
        truncate_setsize(&inode->v, iattr->ia_size);
 
-       /*
-        * XXX: need a comment explaining why PAGE_SIZE and not block_bytes()
-        * here:
-        */
-       ret = __bch2_fpunch(c, inode,
-                       round_up(iattr->ia_size, PAGE_SIZE) >> 9,
-                       U64_MAX, &inode->ei_journal_seq);
+       ret = bch2_fpunch(c, inode->v.i_ino,
+                       round_up(iattr->ia_size, block_bytes(c)) >> 9,
+                       U64_MAX, &inode->ei_journal_seq, &i_sectors_delta);
+       i_sectors_acct(c, inode, NULL, i_sectors_delta);
+
        if (unlikely(ret))
                goto err;
 
@@ -2239,23 +2352,22 @@ int bch2_truncate(struct bch_inode_info *inode, struct iattr *iattr)
                               ATTR_MTIME|ATTR_CTIME);
        mutex_unlock(&inode->ei_update_lock);
 err:
-       pagecache_block_put(&mapping->add_lock);
+       bch2_pagecache_block_put(&inode->ei_pagecache_lock);
        return ret;
 }
 
 /* fallocate: */
 
-static long bch2_fpunch(struct bch_inode_info *inode, loff_t offset, loff_t len)
+static long bchfs_fpunch(struct bch_inode_info *inode, loff_t offset, loff_t len)
 {
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
-       struct address_space *mapping = inode->v.i_mapping;
-       u64 discard_start = round_up(offset, PAGE_SIZE) >> 9;
-       u64 discard_end = round_down(offset + len, PAGE_SIZE) >> 9;
+       u64 discard_start = round_up(offset, block_bytes(c)) >> 9;
+       u64 discard_end = round_down(offset + len, block_bytes(c)) >> 9;
        int ret = 0;
 
        inode_lock(&inode->v);
        inode_dio_wait(&inode->v);
-       pagecache_block_get(&mapping->add_lock);
+       bch2_pagecache_block_get(&inode->ei_pagecache_lock);
 
        ret = __bch2_truncate_page(inode,
                                   offset >> PAGE_SHIFT,
@@ -2274,33 +2386,40 @@ static long bch2_fpunch(struct bch_inode_info *inode, loff_t offset, loff_t len)
 
        truncate_pagecache_range(&inode->v, offset, offset + len - 1);
 
-       if (discard_start < discard_end)
-               ret = __bch2_fpunch(c, inode, discard_start, discard_end,
-                                   &inode->ei_journal_seq);
+       if (discard_start < discard_end) {
+               s64 i_sectors_delta = 0;
+
+               ret = bch2_fpunch(c, inode->v.i_ino,
+                                 discard_start, discard_end,
+                                 &inode->ei_journal_seq,
+                                 &i_sectors_delta);
+               i_sectors_acct(c, inode, NULL, i_sectors_delta);
+       }
 err:
-       pagecache_block_put(&mapping->add_lock);
+       bch2_pagecache_block_put(&inode->ei_pagecache_lock);
        inode_unlock(&inode->v);
 
        return ret;
 }
 
-static long bch2_fcollapse(struct bch_inode_info *inode,
-                          loff_t offset, loff_t len)
+static long bchfs_fcollapse_finsert(struct bch_inode_info *inode,
+                                  loff_t offset, loff_t len,
+                                  bool insert)
 {
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
        struct address_space *mapping = inode->v.i_mapping;
+       struct bkey_on_stack copy;
        struct btree_trans trans;
        struct btree_iter *src, *dst;
-       BKEY_PADDED(k) copy;
-       struct bkey_s_c k;
-       loff_t new_size;
+       loff_t shift, new_size;
+       u64 src_start;
        int ret;
 
        if ((offset | len) & (block_bytes(c) - 1))
                return -EINVAL;
 
-       bch2_trans_init(&trans, c);
-       bch2_trans_preload_iters(&trans);
+       bkey_on_stack_init(&copy);
+       bch2_trans_init(&trans, c, BTREE_ITER_MAX, 256);
 
        /*
         * We need i_mutex to keep the page cache consistent with the extents
@@ -2310,117 +2429,189 @@ static long bch2_fcollapse(struct bch_inode_info *inode,
         */
        inode_lock(&inode->v);
        inode_dio_wait(&inode->v);
-       pagecache_block_get(&mapping->add_lock);
+       bch2_pagecache_block_get(&inode->ei_pagecache_lock);
 
-       ret = -EINVAL;
-       if (offset + len >= inode->v.i_size)
-               goto err;
+       if (insert) {
+               ret = -EFBIG;
+               if (inode->v.i_sb->s_maxbytes - inode->v.i_size < len)
+                       goto err;
 
-       if (inode->v.i_size < len)
-               goto err;
+               ret = -EINVAL;
+               if (offset >= inode->v.i_size)
+                       goto err;
+
+               src_start       = U64_MAX;
+               shift           = len;
+       } else {
+               ret = -EINVAL;
+               if (offset + len >= inode->v.i_size)
+                       goto err;
+
+               src_start       = offset + len;
+               shift           = -len;
+       }
 
-       new_size = inode->v.i_size - len;
+       new_size = inode->v.i_size + shift;
 
        ret = write_invalidate_inode_pages_range(mapping, offset, LLONG_MAX);
        if (ret)
                goto err;
 
-       dst = bch2_trans_get_iter(&trans, BTREE_ID_EXTENTS,
-                       POS(inode->v.i_ino, offset >> 9),
-                       BTREE_ITER_SLOTS|BTREE_ITER_INTENT);
-       BUG_ON(IS_ERR_OR_NULL(dst));
+       if (insert) {
+               i_size_write(&inode->v, new_size);
+               mutex_lock(&inode->ei_update_lock);
+               ret = bch2_write_inode_size(c, inode, new_size,
+                                           ATTR_MTIME|ATTR_CTIME);
+               mutex_unlock(&inode->ei_update_lock);
+       } else {
+               s64 i_sectors_delta = 0;
+
+               ret = bch2_fpunch(c, inode->v.i_ino,
+                                 offset >> 9, (offset + len) >> 9,
+                                 &inode->ei_journal_seq,
+                                 &i_sectors_delta);
+               i_sectors_acct(c, inode, NULL, i_sectors_delta);
+
+               if (ret)
+                       goto err;
+       }
 
        src = bch2_trans_get_iter(&trans, BTREE_ID_EXTENTS,
-                       POS_MIN, BTREE_ITER_SLOTS);
+                       POS(inode->v.i_ino, src_start >> 9),
+                       BTREE_ITER_INTENT);
        BUG_ON(IS_ERR_OR_NULL(src));
 
-       while (bkey_cmp(dst->pos,
-                       POS(inode->v.i_ino,
-                           round_up(new_size, PAGE_SIZE) >> 9)) < 0) {
-               struct disk_reservation disk_res;
+       dst = bch2_trans_copy_iter(&trans, src);
+       BUG_ON(IS_ERR_OR_NULL(dst));
 
-               ret = bch2_btree_iter_traverse(dst);
-               if (ret)
-                       goto btree_iter_err;
+       while (1) {
+               struct disk_reservation disk_res =
+                       bch2_disk_reservation_init(c, 0);
+               struct bkey_i delete;
+               struct bkey_s_c k;
+               struct bpos next_pos;
+               struct bpos move_pos = POS(inode->v.i_ino, offset >> 9);
+               struct bpos atomic_end;
+               unsigned trigger_flags = 0;
+
+               k = insert
+                       ? bch2_btree_iter_peek_prev(src)
+                       : bch2_btree_iter_peek(src);
+               if ((ret = bkey_err(k)))
+                       goto bkey_err;
+
+               if (!k.k || k.k->p.inode != inode->v.i_ino)
+                       break;
+
+               BUG_ON(bkey_cmp(src->pos, bkey_start_pos(k.k)));
 
-               bch2_btree_iter_set_pos(src,
-                       POS(dst->pos.inode, dst->pos.offset + (len >> 9)));
+               if (insert &&
+                   bkey_cmp(k.k->p, POS(inode->v.i_ino, offset >> 9)) <= 0)
+                       break;
+reassemble:
+               bkey_on_stack_reassemble(&copy, c, k);
+
+               if (insert &&
+                   bkey_cmp(bkey_start_pos(k.k), move_pos) < 0)
+                       bch2_cut_front(move_pos, copy.k);
 
-               k = bch2_btree_iter_peek_slot(src);
-               if ((ret = btree_iter_err(k)))
-                       goto btree_iter_err;
+               copy.k->k.p.offset += shift >> 9;
+               bch2_btree_iter_set_pos(dst, bkey_start_pos(&copy.k->k));
 
-               bkey_reassemble(&copy.k, k);
+               ret = bch2_extent_atomic_end(dst, copy.k, &atomic_end);
+               if (ret)
+                       goto bkey_err;
+
+               if (bkey_cmp(atomic_end, copy.k->k.p)) {
+                       if (insert) {
+                               move_pos = atomic_end;
+                               move_pos.offset -= shift >> 9;
+                               goto reassemble;
+                       } else {
+                               bch2_cut_back(atomic_end, copy.k);
+                       }
+               }
 
-               bch2_cut_front(src->pos, &copy.k);
-               copy.k.k.p.offset -= len >> 9;
+               bkey_init(&delete.k);
+               delete.k.p = copy.k->k.p;
+               delete.k.size = copy.k->k.size;
+               delete.k.p.offset -= shift >> 9;
 
-               bch2_extent_trim_atomic(&copy.k, dst);
+               next_pos = insert ? bkey_start_pos(&delete.k) : delete.k.p;
 
-               BUG_ON(bkey_cmp(dst->pos, bkey_start_pos(&copy.k.k)));
+               if (copy.k->k.size == k.k->size) {
+                       /*
+                        * If we're moving the entire extent, we can skip
+                        * running triggers:
+                        */
+                       trigger_flags |= BTREE_TRIGGER_NORUN;
+               } else {
+                       /* We might end up splitting compressed extents: */
+                       unsigned nr_ptrs =
+                               bch2_bkey_nr_ptrs_allocated(bkey_i_to_s_c(copy.k));
+
+                       ret = bch2_disk_reservation_get(c, &disk_res,
+                                       copy.k->k.size, nr_ptrs,
+                                       BCH_DISK_RESERVATION_NOFAIL);
+                       BUG_ON(ret);
+               }
 
-               ret = bch2_disk_reservation_get(c, &disk_res, copy.k.k.size,
-                               bch2_extent_nr_dirty_ptrs(bkey_i_to_s_c(&copy.k)),
-                               BCH_DISK_RESERVATION_NOFAIL);
-               BUG_ON(ret);
+               bch2_btree_iter_set_pos(src, bkey_start_pos(&delete.k));
 
-               ret = bch2_extent_update(&trans, inode,
-                               &disk_res, NULL,
-                               dst, &copy.k,
-                               0, true, true, NULL);
+               ret =   bch2_trans_update(&trans, src, &delete, trigger_flags) ?:
+                       bch2_trans_update(&trans, dst, copy.k, trigger_flags) ?:
+                       bch2_trans_commit(&trans, &disk_res,
+                                         &inode->ei_journal_seq,
+                                         BTREE_INSERT_NOFAIL);
                bch2_disk_reservation_put(c, &disk_res);
-btree_iter_err:
+bkey_err:
+               if (!ret)
+                       bch2_btree_iter_set_pos(src, next_pos);
+
                if (ret == -EINTR)
                        ret = 0;
                if (ret)
                        goto err;
-               /*
-                * XXX: if we error here we've left data with multiple
-                * pointers... which isn't a _super_ serious problem...
-                */
 
-               bch2_btree_iter_cond_resched(src);
+               bch2_trans_cond_resched(&trans);
        }
        bch2_trans_unlock(&trans);
 
-       ret = __bch2_fpunch(c, inode,
-                       round_up(new_size, block_bytes(c)) >> 9,
-                       U64_MAX, &inode->ei_journal_seq);
-       if (ret)
-               goto err;
-
-       i_size_write(&inode->v, new_size);
-       mutex_lock(&inode->ei_update_lock);
-       ret = bch2_write_inode_size(c, inode, new_size,
-                                   ATTR_MTIME|ATTR_CTIME);
-       mutex_unlock(&inode->ei_update_lock);
+       if (!insert) {
+               i_size_write(&inode->v, new_size);
+               mutex_lock(&inode->ei_update_lock);
+               ret = bch2_write_inode_size(c, inode, new_size,
+                                           ATTR_MTIME|ATTR_CTIME);
+               mutex_unlock(&inode->ei_update_lock);
+       }
 err:
        bch2_trans_exit(&trans);
-       pagecache_block_put(&mapping->add_lock);
+       bkey_on_stack_exit(&copy, c);
+       bch2_pagecache_block_put(&inode->ei_pagecache_lock);
        inode_unlock(&inode->v);
        return ret;
 }
 
-static long bch2_fallocate(struct bch_inode_info *inode, int mode,
-                          loff_t offset, loff_t len)
+static long bchfs_fallocate(struct bch_inode_info *inode, int mode,
+                           loff_t offset, loff_t len)
 {
        struct address_space *mapping = inode->v.i_mapping;
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
        struct btree_trans trans;
        struct btree_iter *iter;
        struct bpos end_pos;
-       loff_t block_start, block_end;
-       loff_t end = offset + len;
+       loff_t end              = offset + len;
+       loff_t block_start      = round_down(offset,    block_bytes(c));
+       loff_t block_end        = round_up(end,         block_bytes(c));
        unsigned sectors;
-       unsigned replicas = io_opts(c, inode).data_replicas;
+       unsigned replicas = io_opts(c, &inode->ei_inode).data_replicas;
        int ret;
 
-       bch2_trans_init(&trans, c);
-       bch2_trans_preload_iters(&trans);
+       bch2_trans_init(&trans, c, BTREE_ITER_MAX, 0);
 
        inode_lock(&inode->v);
        inode_dio_wait(&inode->v);
-       pagecache_block_get(&mapping->add_lock);
+       bch2_pagecache_block_get(&inode->ei_pagecache_lock);
 
        if (!(mode & FALLOC_FL_KEEP_SIZE) && end > inode->v.i_size) {
                ret = inode_newsize_ok(&inode->v, end);
@@ -2443,12 +2634,6 @@ static long bch2_fallocate(struct bch_inode_info *inode, int mode,
                        goto err;
 
                truncate_pagecache_range(&inode->v, offset, end - 1);
-
-               block_start     = round_up(offset, PAGE_SIZE);
-               block_end       = round_down(end, PAGE_SIZE);
-       } else {
-               block_start     = round_down(offset, PAGE_SIZE);
-               block_end       = round_up(end, PAGE_SIZE);
        }
 
        iter = bch2_trans_get_iter(&trans, BTREE_ID_EXTENTS,
@@ -2457,17 +2642,20 @@ static long bch2_fallocate(struct bch_inode_info *inode, int mode,
        end_pos = POS(inode->v.i_ino, block_end >> 9);
 
        while (bkey_cmp(iter->pos, end_pos) < 0) {
+               s64 i_sectors_delta = 0;
                struct disk_reservation disk_res = { 0 };
                struct quota_res quota_res = { 0 };
                struct bkey_i_reservation reservation;
                struct bkey_s_c k;
 
+               bch2_trans_begin(&trans);
+
                k = bch2_btree_iter_peek_slot(iter);
-               if ((ret = btree_iter_err(k)))
-                       goto btree_iter_err;
+               if ((ret = bkey_err(k)))
+                       goto bkey_err;
 
                /* already reserved */
-               if (k.k->type == BCH_RESERVATION &&
+               if (k.k->type == KEY_TYPE_reservation &&
                    bkey_s_c_to_reservation(k).v->nr_replicas >= replicas) {
                        bch2_btree_iter_next_slot(iter);
                        continue;
@@ -2480,78 +2668,93 @@ static long bch2_fallocate(struct bch_inode_info *inode, int mode,
                }
 
                bkey_reservation_init(&reservation.k_i);
-               reservation.k.type      = BCH_RESERVATION;
+               reservation.k.type      = KEY_TYPE_reservation;
                reservation.k.p         = k.k->p;
                reservation.k.size      = k.k->size;
 
-               bch2_cut_front(iter->pos, &reservation.k_i);
-               bch2_cut_back(end_pos, &reservation.k);
+               bch2_cut_front(iter->pos,       &reservation.k_i);
+               bch2_cut_back(end_pos,          &reservation.k_i);
 
                sectors = reservation.k.size;
-               reservation.v.nr_replicas = bch2_extent_nr_dirty_ptrs(k);
+               reservation.v.nr_replicas = bch2_bkey_nr_ptrs_allocated(k);
 
                if (!bkey_extent_is_allocation(k.k)) {
                        ret = bch2_quota_reservation_add(c, inode,
                                        &quota_res,
                                        sectors, true);
                        if (unlikely(ret))
-                               goto btree_iter_err;
+                               goto bkey_err;
                }
 
                if (reservation.v.nr_replicas < replicas ||
-                   bch2_extent_is_compressed(k)) {
+                   bch2_bkey_sectors_compressed(k)) {
                        ret = bch2_disk_reservation_get(c, &disk_res, sectors,
                                                        replicas, 0);
                        if (unlikely(ret))
-                               goto btree_iter_err;
+                               goto bkey_err;
 
                        reservation.v.nr_replicas = disk_res.nr_replicas;
                }
 
-               ret = bch2_extent_update(&trans, inode,
-                               &disk_res, &quota_res,
-                               iter, &reservation.k_i,
-                               0, true, true, NULL);
-
+               ret = bch2_extent_update(&trans, iter, &reservation.k_i,
+                               &disk_res, &inode->ei_journal_seq,
+                               0, &i_sectors_delta);
+               i_sectors_acct(c, inode, &quota_res, i_sectors_delta);
+bkey_err:
                bch2_quota_reservation_put(c, inode, &quota_res);
                bch2_disk_reservation_put(c, &disk_res);
-btree_iter_err:
                if (ret == -EINTR)
                        ret = 0;
                if (ret)
                        goto err;
        }
-       bch2_trans_unlock(&trans);
 
-       if (!(mode & FALLOC_FL_KEEP_SIZE) &&
-           end > inode->v.i_size) {
-               i_size_write(&inode->v, end);
+       /*
+        * Do we need to extend the file?
+        *
+        * If we zeroed up to the end of the file, we dropped whatever writes
+        * were going to write out the current i_size, so we have to extend
+        * manually even if FL_KEEP_SIZE was set:
+        */
+       if (end >= inode->v.i_size &&
+           (!(mode & FALLOC_FL_KEEP_SIZE) ||
+            (mode & FALLOC_FL_ZERO_RANGE))) {
+               struct btree_iter *inode_iter;
+               struct bch_inode_unpacked inode_u;
+
+               do {
+                       bch2_trans_begin(&trans);
+                       inode_iter = bch2_inode_peek(&trans, &inode_u,
+                                                    inode->v.i_ino, 0);
+                       ret = PTR_ERR_OR_ZERO(inode_iter);
+               } while (ret == -EINTR);
 
-               mutex_lock(&inode->ei_update_lock);
-               ret = bch2_write_inode_size(c, inode, inode->v.i_size, 0);
-               mutex_unlock(&inode->ei_update_lock);
-       }
+               bch2_trans_unlock(&trans);
+
+               if (ret)
+                       goto err;
 
-       /* blech */
-       if ((mode & FALLOC_FL_KEEP_SIZE) &&
-           (mode & FALLOC_FL_ZERO_RANGE) &&
-           inode->ei_inode.bi_size != inode->v.i_size) {
-               /* sync appends.. */
+               /*
+                * Sync existing appends before extending i_size,
+                * as in bch2_extend():
+                */
                ret = filemap_write_and_wait_range(mapping,
-                                       inode->ei_inode.bi_size, S64_MAX);
+                                       inode_u.bi_size, S64_MAX);
                if (ret)
                        goto err;
 
-               if (inode->ei_inode.bi_size != inode->v.i_size) {
-                       mutex_lock(&inode->ei_update_lock);
-                       ret = bch2_write_inode_size(c, inode,
-                                                   inode->v.i_size, 0);
-                       mutex_unlock(&inode->ei_update_lock);
-               }
+               if (mode & FALLOC_FL_KEEP_SIZE)
+                       end = inode->v.i_size;
+               else
+                       i_size_write(&inode->v, end);
+
+               mutex_lock(&inode->ei_update_lock);
+               ret = bch2_write_inode_size(c, inode, end, 0);
+               mutex_unlock(&inode->ei_update_lock);
        }
 err:
        bch2_trans_exit(&trans);
-       pagecache_block_put(&mapping->add_lock);
+       bch2_pagecache_block_put(&inode->ei_pagecache_lock);
        inode_unlock(&inode->v);
        return ret;
 }
@@ -2560,48 +2763,183 @@ long bch2_fallocate_dispatch(struct file *file, int mode,
                             loff_t offset, loff_t len)
 {
        struct bch_inode_info *inode = file_bch_inode(file);
+       struct bch_fs *c = inode->v.i_sb->s_fs_info;
+       long ret;
+
+       if (!percpu_ref_tryget(&c->writes))
+               return -EROFS;
 
        if (!(mode & ~(FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE)))
-               return bch2_fallocate(inode, mode, offset, len);
+               ret = bchfs_fallocate(inode, mode, offset, len);
+       else if (mode == (FALLOC_FL_PUNCH_HOLE|FALLOC_FL_KEEP_SIZE))
+               ret = bchfs_fpunch(inode, offset, len);
+       else if (mode == FALLOC_FL_INSERT_RANGE)
+               ret = bchfs_fcollapse_finsert(inode, offset, len, true);
+       else if (mode == FALLOC_FL_COLLAPSE_RANGE)
+               ret = bchfs_fcollapse_finsert(inode, offset, len, false);
+       else
+               ret = -EOPNOTSUPP;
+
+       percpu_ref_put(&c->writes);
+
+       return ret;
+}
+
+static void mark_range_unallocated(struct bch_inode_info *inode,
+                                  loff_t start, loff_t end)
+{
+       pgoff_t index = start >> PAGE_SHIFT;
+       pgoff_t end_index = (end - 1) >> PAGE_SHIFT;
+       struct pagevec pvec;
 
-       if (mode == (FALLOC_FL_PUNCH_HOLE|FALLOC_FL_KEEP_SIZE))
-               return bch2_fpunch(inode, offset, len);
+       pagevec_init(&pvec);
 
-       if (mode == FALLOC_FL_COLLAPSE_RANGE)
-               return bch2_fcollapse(inode, offset, len);
+       do {
+               unsigned nr_pages, i, j;
+
+               nr_pages = pagevec_lookup_range(&pvec, inode->v.i_mapping,
+                                               &index, end_index);
+               if (nr_pages == 0)
+                       break;
+
+               for (i = 0; i < nr_pages; i++) {
+                       struct page *page = pvec.pages[i];
+                       struct bch_page_state *s;
+
+                       lock_page(page);
+                       s = bch2_page_state(page);
+
+                       if (s) {
+                               spin_lock(&s->lock);
+                               for (j = 0; j < PAGE_SECTORS; j++)
+                                       s->s[j].nr_replicas = 0;
+                               spin_unlock(&s->lock);
+                       }
+
+                       unlock_page(page);
+               }
+               pagevec_release(&pvec);
+       } while (index <= end_index);
+}
+
+loff_t bch2_remap_file_range(struct file *file_src, loff_t pos_src,
+                            struct file *file_dst, loff_t pos_dst,
+                            loff_t len, unsigned remap_flags)
+{
+       struct bch_inode_info *src = file_bch_inode(file_src);
+       struct bch_inode_info *dst = file_bch_inode(file_dst);
+       struct bch_fs *c = src->v.i_sb->s_fs_info;
+       s64 i_sectors_delta = 0;
+       u64 aligned_len;
+       loff_t ret = 0;
+
+       if (remap_flags & ~(REMAP_FILE_DEDUP|REMAP_FILE_ADVISORY))
+               return -EINVAL;
+
+       if (remap_flags & REMAP_FILE_DEDUP)
+               return -EOPNOTSUPP;
+
+       if ((pos_src & (block_bytes(c) - 1)) ||
+           (pos_dst & (block_bytes(c) - 1)))
+               return -EINVAL;
+
+       if (src == dst &&
+           abs(pos_src - pos_dst) < len)
+               return -EINVAL;
+
+       bch2_lock_inodes(INODE_LOCK|INODE_PAGECACHE_BLOCK, src, dst);
+
+       file_update_time(file_dst);
+
+       inode_dio_wait(&src->v);
+       inode_dio_wait(&dst->v);
+
+       ret = generic_remap_file_range_prep(file_src, pos_src,
+                                           file_dst, pos_dst,
+                                           &len, remap_flags);
+       if (ret < 0 || len == 0)
+               goto err;
+
+       aligned_len = round_up((u64) len, block_bytes(c));
+
+       ret = write_invalidate_inode_pages_range(dst->v.i_mapping,
+                               pos_dst, pos_dst + len - 1);
+       if (ret)
+               goto err;
+
+       mark_range_unallocated(src, pos_src, pos_src + aligned_len);
+
+       ret = bch2_remap_range(c,
+                              POS(dst->v.i_ino, pos_dst >> 9),
+                              POS(src->v.i_ino, pos_src >> 9),
+                              aligned_len >> 9,
+                              &dst->ei_journal_seq,
+                              pos_dst + len, &i_sectors_delta);
+       if (ret < 0)
+               goto err;
+
+       /*
+        * due to alignment, we might have remapped slightly more than requsted
+        */
+       ret = min((u64) ret << 9, (u64) len);
+
+       /* XXX get a quota reservation */
+       i_sectors_acct(c, dst, NULL, i_sectors_delta);
+
+       spin_lock(&dst->v.i_lock);
+       if (pos_dst + ret > dst->v.i_size)
+               i_size_write(&dst->v, pos_dst + ret);
+       spin_unlock(&dst->v.i_lock);
+err:
+       bch2_unlock_inodes(INODE_LOCK|INODE_PAGECACHE_BLOCK, src, dst);
 
-       return -EOPNOTSUPP;
+       return ret;
 }
 
 /* fseek: */
 
-static bool page_is_data(struct page *page)
+static int page_data_offset(struct page *page, unsigned offset)
 {
-       /* XXX: should only have to check PageDirty */
-       return PagePrivate(page) &&
-               (page_state(page)->sectors ||
-                page_state(page)->dirty_sectors);
+       struct bch_page_state *s = bch2_page_state(page);
+       unsigned i;
+
+       if (s)
+               for (i = offset >> 9; i < PAGE_SECTORS; i++)
+                       if (s->s[i].state >= SECTOR_DIRTY)
+                               return i << 9;
+
+       return -1;
 }
 
-static loff_t bch2_next_pagecache_data(struct inode *vinode,
+static loff_t bch2_seek_pagecache_data(struct inode *vinode,
                                       loff_t start_offset,
                                       loff_t end_offset)
 {
        struct address_space *mapping = vinode->i_mapping;
        struct page *page;
-       pgoff_t index;
-
-       for (index = start_offset >> PAGE_SHIFT;
-            index < end_offset >> PAGE_SHIFT;
-            index++) {
-               if (find_get_pages(mapping, &index, 1, &page)) {
+       pgoff_t start_index     = start_offset >> PAGE_SHIFT;
+       pgoff_t end_index       = end_offset >> PAGE_SHIFT;
+       pgoff_t index           = start_index;
+       loff_t ret;
+       int offset;
+
+       while (index <= end_index) {
+               if (find_get_pages_range(mapping, &index, end_index, 1, &page)) {
                        lock_page(page);
 
-                       if (page_is_data(page))
-                               end_offset =
-                                       min(end_offset,
-                                       max(start_offset,
-                                           ((loff_t) index) << PAGE_SHIFT));
+                       offset = page_data_offset(page,
+                                       page->index == start_index
+                                       ? start_offset & (PAGE_SIZE - 1)
+                                       : 0);
+                       if (offset >= 0) {
+                               ret = clamp(((loff_t) page->index << PAGE_SHIFT) +
+                                           offset,
+                                           start_offset, end_offset);
+                               unlock_page(page);
+                               put_page(page);
+                               return ret;
+                       }
+
                        unlock_page(page);
                        put_page(page);
                } else {
@@ -2616,7 +2954,8 @@ static loff_t bch2_seek_data(struct file *file, u64 offset)
 {
        struct bch_inode_info *inode = file_bch_inode(file);
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
-       struct btree_iter iter;
+       struct btree_trans trans;
+       struct btree_iter *iter;
        struct bkey_s_c k;
        u64 isize, next_data = MAX_LFS_FILESIZE;
        int ret;
@@ -2625,8 +2964,10 @@ static loff_t bch2_seek_data(struct file *file, u64 offset)
        if (offset >= isize)
                return -ENXIO;
 
-       for_each_btree_key(&iter, c, BTREE_ID_EXTENTS,
-                          POS(inode->v.i_ino, offset >> 9), 0, k) {
+       bch2_trans_init(&trans, c, 0, 0);
+
+       for_each_btree_key(&trans, iter, BTREE_ID_EXTENTS,
+                          POS(inode->v.i_ino, offset >> 9), 0, k, ret) {
                if (k.k->p.inode != inode->v.i_ino) {
                        break;
                } else if (bkey_extent_is_data(k.k)) {
@@ -2636,48 +2977,70 @@ static loff_t bch2_seek_data(struct file *file, u64 offset)
                        break;
        }
 
-       ret = bch2_btree_iter_unlock(&iter);
+       ret = bch2_trans_exit(&trans) ?: ret;
        if (ret)
                return ret;
 
        if (next_data > offset)
-               next_data = bch2_next_pagecache_data(&inode->v,
+               next_data = bch2_seek_pagecache_data(&inode->v,
                                                     offset, next_data);
 
-       if (next_data > isize)
+       if (next_data >= isize)
                return -ENXIO;
 
        return vfs_setpos(file, next_data, MAX_LFS_FILESIZE);
 }
 
-static bool page_slot_is_data(struct address_space *mapping, pgoff_t index)
+static int __page_hole_offset(struct page *page, unsigned offset)
+{
+       struct bch_page_state *s = bch2_page_state(page);
+       unsigned i;
+
+       if (!s)
+               return 0;
+
+       for (i = offset >> 9; i < PAGE_SECTORS; i++)
+               if (s->s[i].state < SECTOR_DIRTY)
+                       return i << 9;
+
+       return -1;
+}
+
+static loff_t page_hole_offset(struct address_space *mapping, loff_t offset)
 {
+       pgoff_t index = offset >> PAGE_SHIFT;
        struct page *page;
-       bool ret;
+       int pg_offset;
+       loff_t ret = -1;
 
        page = find_lock_entry(mapping, index);
-       if (!page || radix_tree_exception(page))
-               return false;
+       if (!page || xa_is_value(page))
+               return offset;
+
+       pg_offset = __page_hole_offset(page, offset & (PAGE_SIZE - 1));
+       if (pg_offset >= 0)
+               ret = ((loff_t) index << PAGE_SHIFT) + pg_offset;
 
-       ret = page_is_data(page);
        unlock_page(page);
 
        return ret;
 }
 
-static loff_t bch2_next_pagecache_hole(struct inode *vinode,
+static loff_t bch2_seek_pagecache_hole(struct inode *vinode,
                                       loff_t start_offset,
                                       loff_t end_offset)
 {
        struct address_space *mapping = vinode->i_mapping;
-       pgoff_t index;
+       loff_t offset = start_offset, hole;
+
+       while (offset < end_offset) {
+               hole = page_hole_offset(mapping, offset);
+               if (hole >= 0 && hole <= end_offset)
+                       return max(start_offset, hole);
 
-       for (index = start_offset >> PAGE_SHIFT;
-            index < end_offset >> PAGE_SHIFT;
-            index++)
-               if (!page_slot_is_data(mapping, index))
-                       end_offset = max(start_offset,
-                                        ((loff_t) index) << PAGE_SHIFT);
+               offset += PAGE_SIZE;
+               offset &= PAGE_MASK;
+       }
 
        return end_offset;
 }
@@ -2686,7 +3049,8 @@ static loff_t bch2_seek_hole(struct file *file, u64 offset)
 {
        struct bch_inode_info *inode = file_bch_inode(file);
        struct bch_fs *c = inode->v.i_sb->s_fs_info;
-       struct btree_iter iter;
+       struct btree_trans trans;
+       struct btree_iter *iter;
        struct bkey_s_c k;
        u64 isize, next_hole = MAX_LFS_FILESIZE;
        int ret;
@@ -2695,15 +3059,17 @@ static loff_t bch2_seek_hole(struct file *file, u64 offset)
        if (offset >= isize)
                return -ENXIO;
 
-       for_each_btree_key(&iter, c, BTREE_ID_EXTENTS,
+       bch2_trans_init(&trans, c, 0, 0);
+
+       for_each_btree_key(&trans, iter, BTREE_ID_EXTENTS,
                           POS(inode->v.i_ino, offset >> 9),
-                          BTREE_ITER_SLOTS, k) {
+                          BTREE_ITER_SLOTS, k, ret) {
                if (k.k->p.inode != inode->v.i_ino) {
-                       next_hole = bch2_next_pagecache_hole(&inode->v,
+                       next_hole = bch2_seek_pagecache_hole(&inode->v,
                                        offset, MAX_LFS_FILESIZE);
                        break;
                } else if (!bkey_extent_is_data(k.k)) {
-                       next_hole = bch2_next_pagecache_hole(&inode->v,
+                       next_hole = bch2_seek_pagecache_hole(&inode->v,
                                        max(offset, bkey_start_offset(k.k) << 9),
                                        k.k->p.offset << 9);
 
@@ -2714,7 +3080,7 @@ static loff_t bch2_seek_hole(struct file *file, u64 offset)
                }
        }
 
-       ret = bch2_btree_iter_unlock(&iter);
+       ret = bch2_trans_exit(&trans) ?: ret;
        if (ret)
                return ret;
 
@@ -2754,13 +3120,13 @@ int bch2_fs_fsio_init(struct bch_fs *c)
        pr_verbose_init(c->opts, "");
 
        if (bioset_init(&c->writepage_bioset,
-                       4, offsetof(struct bch_writepage_io, op.op.wbio.bio),
+                       4, offsetof(struct bch_writepage_io, op.wbio.bio),
                        BIOSET_NEED_BVECS) ||
            bioset_init(&c->dio_read_bioset,
                        4, offsetof(struct dio_read, rbio.bio),
                        BIOSET_NEED_BVECS) ||
            bioset_init(&c->dio_write_bioset,
-                       4, offsetof(struct dio_write, iop.op.wbio.bio),
+                       4, offsetof(struct dio_write, op.wbio.bio),
                        BIOSET_NEED_BVECS))
                ret = -ENOMEM;