4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
22 * Copyright (c) 2005, 2010, Oracle and/or its affiliates. All rights reserved.
23 * Copyright 2011 Nexenta Systems, Inc. All rights reserved.
24 * Copyright (c) 2013 by Delphix. All rights reserved.
28 #include <sys/dmu_impl.h>
30 #include <sys/dmu_tx.h>
31 #include <sys/dmu_objset.h>
32 #include <sys/dsl_dataset.h> /* for dsl_dataset_block_freeable() */
33 #include <sys/dsl_dir.h> /* for dsl_dir_tempreserve_*() */
34 #include <sys/dsl_pool.h>
35 #include <sys/zap_impl.h> /* for fzap_default_block_shift */
38 #include <sys/sa_impl.h>
39 #include <sys/zfs_context.h>
40 #include <sys/varargs.h>
42 typedef void (*dmu_tx_hold_func_t)(dmu_tx_t *tx, struct dnode *dn,
43 uint64_t arg1, uint64_t arg2);
47 dmu_tx_create_dd(dsl_dir_t *dd)
49 dmu_tx_t *tx = kmem_zalloc(sizeof (dmu_tx_t), KM_SLEEP);
52 tx->tx_pool = dd->dd_pool;
53 list_create(&tx->tx_holds, sizeof (dmu_tx_hold_t),
54 offsetof(dmu_tx_hold_t, txh_node));
55 list_create(&tx->tx_callbacks, sizeof (dmu_tx_callback_t),
56 offsetof(dmu_tx_callback_t, dcb_node));
57 tx->tx_start = gethrtime();
59 refcount_create(&tx->tx_space_written);
60 refcount_create(&tx->tx_space_freed);
66 dmu_tx_create(objset_t *os)
68 dmu_tx_t *tx = dmu_tx_create_dd(os->os_dsl_dataset->ds_dir);
70 tx->tx_lastsnap_txg = dsl_dataset_prev_snap_txg(os->os_dsl_dataset);
75 dmu_tx_create_assigned(struct dsl_pool *dp, uint64_t txg)
77 dmu_tx_t *tx = dmu_tx_create_dd(NULL);
79 ASSERT3U(txg, <=, dp->dp_tx.tx_open_txg);
88 dmu_tx_is_syncing(dmu_tx_t *tx)
90 return (tx->tx_anyobj);
94 dmu_tx_private_ok(dmu_tx_t *tx)
96 return (tx->tx_anyobj);
99 static dmu_tx_hold_t *
100 dmu_tx_hold_object_impl(dmu_tx_t *tx, objset_t *os, uint64_t object,
101 enum dmu_tx_hold_type type, uint64_t arg1, uint64_t arg2)
107 if (object != DMU_NEW_OBJECT) {
108 err = dnode_hold(os, object, tx, &dn);
114 if (err == 0 && tx->tx_txg != 0) {
115 mutex_enter(&dn->dn_mtx);
117 * dn->dn_assigned_txg == tx->tx_txg doesn't pose a
118 * problem, but there's no way for it to happen (for
121 ASSERT(dn->dn_assigned_txg == 0);
122 dn->dn_assigned_txg = tx->tx_txg;
123 (void) refcount_add(&dn->dn_tx_holds, tx);
124 mutex_exit(&dn->dn_mtx);
128 txh = kmem_zalloc(sizeof (dmu_tx_hold_t), KM_SLEEP);
132 txh->txh_type = type;
133 txh->txh_arg1 = arg1;
134 txh->txh_arg2 = arg2;
136 list_insert_tail(&tx->tx_holds, txh);
142 dmu_tx_add_new_object(dmu_tx_t *tx, objset_t *os, uint64_t object)
145 * If we're syncing, they can manipulate any object anyhow, and
146 * the hold on the dnode_t can cause problems.
148 if (!dmu_tx_is_syncing(tx)) {
149 (void) dmu_tx_hold_object_impl(tx, os,
150 object, THT_NEWOBJECT, 0, 0);
155 dmu_tx_check_ioerr(zio_t *zio, dnode_t *dn, int level, uint64_t blkid)
160 rw_enter(&dn->dn_struct_rwlock, RW_READER);
161 db = dbuf_hold_level(dn, level, blkid, FTAG);
162 rw_exit(&dn->dn_struct_rwlock);
164 return (SET_ERROR(EIO));
165 err = dbuf_read(db, zio, DB_RF_CANFAIL | DB_RF_NOPREFETCH);
171 dmu_tx_count_twig(dmu_tx_hold_t *txh, dnode_t *dn, dmu_buf_impl_t *db,
172 int level, uint64_t blkid, boolean_t freeable, uint64_t *history)
174 objset_t *os = dn->dn_objset;
175 dsl_dataset_t *ds = os->os_dsl_dataset;
176 int epbs = dn->dn_indblkshift - SPA_BLKPTRSHIFT;
177 dmu_buf_impl_t *parent = NULL;
181 if (level >= dn->dn_nlevels || history[level] == blkid)
184 history[level] = blkid;
186 space = (level == 0) ? dn->dn_datablksz : (1ULL << dn->dn_indblkshift);
188 if (db == NULL || db == dn->dn_dbuf) {
192 ASSERT(DB_DNODE(db) == dn);
193 ASSERT(db->db_level == level);
194 ASSERT(db->db.db_size == space);
195 ASSERT(db->db_blkid == blkid);
197 parent = db->db_parent;
200 freeable = (bp && (freeable ||
201 dsl_dataset_block_freeable(ds, bp, bp->blk_birth)));
204 txh->txh_space_tooverwrite += space;
206 txh->txh_space_towrite += space;
208 txh->txh_space_tounref += bp_get_dsize(os->os_spa, bp);
210 dmu_tx_count_twig(txh, dn, parent, level + 1,
211 blkid >> epbs, freeable, history);
216 dmu_tx_count_write(dmu_tx_hold_t *txh, uint64_t off, uint64_t len)
218 dnode_t *dn = txh->txh_dnode;
219 uint64_t start, end, i;
220 int min_bs, max_bs, min_ibs, max_ibs, epbs, bits;
226 min_bs = SPA_MINBLOCKSHIFT;
227 max_bs = SPA_MAXBLOCKSHIFT;
228 min_ibs = DN_MIN_INDBLKSHIFT;
229 max_ibs = DN_MAX_INDBLKSHIFT;
232 uint64_t history[DN_MAX_LEVELS];
233 int nlvls = dn->dn_nlevels;
237 * For i/o error checking, read the first and last level-0
238 * blocks (if they are not aligned), and all the level-1 blocks.
240 if (dn->dn_maxblkid == 0) {
241 delta = dn->dn_datablksz;
242 start = (off < dn->dn_datablksz) ? 0 : 1;
243 end = (off+len <= dn->dn_datablksz) ? 0 : 1;
244 if (start == 0 && (off > 0 || len < dn->dn_datablksz)) {
245 err = dmu_tx_check_ioerr(NULL, dn, 0, 0);
251 zio_t *zio = zio_root(dn->dn_objset->os_spa,
252 NULL, NULL, ZIO_FLAG_CANFAIL);
254 /* first level-0 block */
255 start = off >> dn->dn_datablkshift;
256 if (P2PHASE(off, dn->dn_datablksz) ||
257 len < dn->dn_datablksz) {
258 err = dmu_tx_check_ioerr(zio, dn, 0, start);
263 /* last level-0 block */
264 end = (off+len-1) >> dn->dn_datablkshift;
265 if (end != start && end <= dn->dn_maxblkid &&
266 P2PHASE(off+len, dn->dn_datablksz)) {
267 err = dmu_tx_check_ioerr(zio, dn, 0, end);
274 int shft = dn->dn_indblkshift - SPA_BLKPTRSHIFT;
275 for (i = (start>>shft)+1; i < end>>shft; i++) {
276 err = dmu_tx_check_ioerr(zio, dn, 1, i);
285 delta = P2NPHASE(off, dn->dn_datablksz);
288 min_ibs = max_ibs = dn->dn_indblkshift;
289 if (dn->dn_maxblkid > 0) {
291 * The blocksize can't change,
292 * so we can make a more precise estimate.
294 ASSERT(dn->dn_datablkshift != 0);
295 min_bs = max_bs = dn->dn_datablkshift;
299 * If this write is not off the end of the file
300 * we need to account for overwrites/unref.
302 if (start <= dn->dn_maxblkid) {
303 for (int l = 0; l < DN_MAX_LEVELS; l++)
306 while (start <= dn->dn_maxblkid) {
309 rw_enter(&dn->dn_struct_rwlock, RW_READER);
310 err = dbuf_hold_impl(dn, 0, start, FALSE, FTAG, &db);
311 rw_exit(&dn->dn_struct_rwlock);
314 txh->txh_tx->tx_err = err;
318 dmu_tx_count_twig(txh, dn, db, 0, start, B_FALSE,
323 * Account for new indirects appearing
324 * before this IO gets assigned into a txg.
327 epbs = min_ibs - SPA_BLKPTRSHIFT;
328 for (bits -= epbs * (nlvls - 1);
329 bits >= 0; bits -= epbs)
330 txh->txh_fudge += 1ULL << max_ibs;
336 delta = dn->dn_datablksz;
341 * 'end' is the last thing we will access, not one past.
342 * This way we won't overflow when accessing the last byte.
344 start = P2ALIGN(off, 1ULL << max_bs);
345 end = P2ROUNDUP(off + len, 1ULL << max_bs) - 1;
346 txh->txh_space_towrite += end - start + 1;
351 epbs = min_ibs - SPA_BLKPTRSHIFT;
354 * The object contains at most 2^(64 - min_bs) blocks,
355 * and each indirect level maps 2^epbs.
357 for (bits = 64 - min_bs; bits >= 0; bits -= epbs) {
360 ASSERT3U(end, >=, start);
361 txh->txh_space_towrite += (end - start + 1) << max_ibs;
364 * We also need a new blkid=0 indirect block
365 * to reference any existing file data.
367 txh->txh_space_towrite += 1ULL << max_ibs;
372 if (txh->txh_space_towrite + txh->txh_space_tooverwrite >
374 err = SET_ERROR(EFBIG);
377 txh->txh_tx->tx_err = err;
381 dmu_tx_count_dnode(dmu_tx_hold_t *txh)
383 dnode_t *dn = txh->txh_dnode;
384 dnode_t *mdn = DMU_META_DNODE(txh->txh_tx->tx_objset);
385 uint64_t space = mdn->dn_datablksz +
386 ((mdn->dn_nlevels-1) << mdn->dn_indblkshift);
388 if (dn && dn->dn_dbuf->db_blkptr &&
389 dsl_dataset_block_freeable(dn->dn_objset->os_dsl_dataset,
390 dn->dn_dbuf->db_blkptr, dn->dn_dbuf->db_blkptr->blk_birth)) {
391 txh->txh_space_tooverwrite += space;
392 txh->txh_space_tounref += space;
394 txh->txh_space_towrite += space;
395 if (dn && dn->dn_dbuf->db_blkptr)
396 txh->txh_space_tounref += space;
401 dmu_tx_hold_write(dmu_tx_t *tx, uint64_t object, uint64_t off, int len)
405 ASSERT(tx->tx_txg == 0);
406 ASSERT(len < DMU_MAX_ACCESS);
407 ASSERT(len == 0 || UINT64_MAX - off >= len - 1);
409 txh = dmu_tx_hold_object_impl(tx, tx->tx_objset,
410 object, THT_WRITE, off, len);
414 dmu_tx_count_write(txh, off, len);
415 dmu_tx_count_dnode(txh);
419 dmu_tx_count_free(dmu_tx_hold_t *txh, uint64_t off, uint64_t len)
421 uint64_t blkid, nblks, lastblk;
422 uint64_t space = 0, unref = 0, skipped = 0;
423 dnode_t *dn = txh->txh_dnode;
424 dsl_dataset_t *ds = dn->dn_objset->os_dsl_dataset;
425 spa_t *spa = txh->txh_tx->tx_pool->dp_spa;
427 uint64_t l0span = 0, nl1blks = 0;
429 if (dn->dn_nlevels == 0)
433 * The struct_rwlock protects us against dn_nlevels
434 * changing, in case (against all odds) we manage to dirty &
435 * sync out the changes after we check for being dirty.
436 * Also, dbuf_hold_impl() wants us to have the struct_rwlock.
438 rw_enter(&dn->dn_struct_rwlock, RW_READER);
439 epbs = dn->dn_indblkshift - SPA_BLKPTRSHIFT;
440 if (dn->dn_maxblkid == 0) {
441 if (off == 0 && len >= dn->dn_datablksz) {
445 rw_exit(&dn->dn_struct_rwlock);
449 blkid = off >> dn->dn_datablkshift;
450 nblks = (len + dn->dn_datablksz - 1) >> dn->dn_datablkshift;
452 if (blkid > dn->dn_maxblkid) {
453 rw_exit(&dn->dn_struct_rwlock);
456 if (blkid + nblks > dn->dn_maxblkid)
457 nblks = dn->dn_maxblkid - blkid + 1;
460 l0span = nblks; /* save for later use to calc level > 1 overhead */
461 if (dn->dn_nlevels == 1) {
463 for (i = 0; i < nblks; i++) {
464 blkptr_t *bp = dn->dn_phys->dn_blkptr;
465 ASSERT3U(blkid + i, <, dn->dn_nblkptr);
467 if (dsl_dataset_block_freeable(ds, bp, bp->blk_birth)) {
468 dprintf_bp(bp, "can free old%s", "");
469 space += bp_get_dsize(spa, bp);
471 unref += BP_GET_ASIZE(bp);
477 lastblk = blkid + nblks - 1;
479 dmu_buf_impl_t *dbuf;
480 uint64_t ibyte, new_blkid;
482 int err, i, blkoff, tochk;
485 ibyte = blkid << dn->dn_datablkshift;
486 err = dnode_next_offset(dn,
487 DNODE_FIND_HAVELOCK, &ibyte, 2, 1, 0);
488 new_blkid = ibyte >> dn->dn_datablkshift;
490 skipped += (lastblk >> epbs) - (blkid >> epbs) + 1;
494 txh->txh_tx->tx_err = err;
497 if (new_blkid > lastblk) {
498 skipped += (lastblk >> epbs) - (blkid >> epbs) + 1;
502 if (new_blkid > blkid) {
503 ASSERT((new_blkid >> epbs) > (blkid >> epbs));
504 skipped += (new_blkid >> epbs) - (blkid >> epbs) - 1;
505 nblks -= new_blkid - blkid;
508 blkoff = P2PHASE(blkid, epb);
509 tochk = MIN(epb - blkoff, nblks);
511 err = dbuf_hold_impl(dn, 1, blkid >> epbs, FALSE, FTAG, &dbuf);
513 txh->txh_tx->tx_err = err;
517 txh->txh_memory_tohold += dbuf->db.db_size;
520 * We don't check memory_tohold against DMU_MAX_ACCESS because
521 * memory_tohold is an over-estimation (especially the >L1
522 * indirect blocks), so it could fail. Callers should have
523 * already verified that they will not be holding too much
527 err = dbuf_read(dbuf, NULL, DB_RF_HAVESTRUCT | DB_RF_CANFAIL);
529 txh->txh_tx->tx_err = err;
530 dbuf_rele(dbuf, FTAG);
534 bp = dbuf->db.db_data;
537 for (i = 0; i < tochk; i++) {
538 if (dsl_dataset_block_freeable(ds, &bp[i],
540 dprintf_bp(&bp[i], "can free old%s", "");
541 space += bp_get_dsize(spa, &bp[i]);
543 unref += BP_GET_ASIZE(bp);
545 dbuf_rele(dbuf, FTAG);
551 rw_exit(&dn->dn_struct_rwlock);
554 * Add in memory requirements of higher-level indirects.
555 * This assumes a worst-possible scenario for dn_nlevels and a
556 * worst-possible distribution of l1-blocks over the region to free.
559 uint64_t blkcnt = 1 + ((l0span >> epbs) >> epbs);
562 * Here we don't use DN_MAX_LEVEL, but calculate it with the
563 * given datablkshift and indblkshift. This makes the
564 * difference between 19 and 8 on large files.
566 int maxlevel = 2 + (DN_MAX_OFFSET_SHIFT - dn->dn_datablkshift) /
567 (dn->dn_indblkshift - SPA_BLKPTRSHIFT);
569 while (level++ < maxlevel) {
570 txh->txh_memory_tohold += MAX(MIN(blkcnt, nl1blks), 1)
571 << dn->dn_indblkshift;
572 blkcnt = 1 + (blkcnt >> epbs);
576 /* account for new level 1 indirect blocks that might show up */
578 txh->txh_fudge += skipped << dn->dn_indblkshift;
579 skipped = MIN(skipped, DMU_MAX_DELETEBLKCNT >> epbs);
580 txh->txh_memory_tohold += skipped << dn->dn_indblkshift;
582 txh->txh_space_tofree += space;
583 txh->txh_space_tounref += unref;
587 dmu_tx_hold_free(dmu_tx_t *tx, uint64_t object, uint64_t off, uint64_t len)
594 ASSERT(tx->tx_txg == 0);
596 txh = dmu_tx_hold_object_impl(tx, tx->tx_objset,
597 object, THT_FREE, off, len);
601 dmu_tx_count_dnode(txh);
603 if (off >= (dn->dn_maxblkid+1) * dn->dn_datablksz)
605 if (len == DMU_OBJECT_END)
606 len = (dn->dn_maxblkid+1) * dn->dn_datablksz - off;
610 * For i/o error checking, we read the first and last level-0
611 * blocks if they are not aligned, and all the level-1 blocks.
613 * Note: dbuf_free_range() assumes that we have not instantiated
614 * any level-0 dbufs that will be completely freed. Therefore we must
615 * exercise care to not read or count the first and last blocks
616 * if they are blocksize-aligned.
618 if (dn->dn_datablkshift == 0) {
619 if (off != 0 || len < dn->dn_datablksz)
620 dmu_tx_count_write(txh, 0, dn->dn_datablksz);
622 /* first block will be modified if it is not aligned */
623 if (!IS_P2ALIGNED(off, 1 << dn->dn_datablkshift))
624 dmu_tx_count_write(txh, off, 1);
625 /* last block will be modified if it is not aligned */
626 if (!IS_P2ALIGNED(off + len, 1 << dn->dn_datablkshift))
627 dmu_tx_count_write(txh, off+len, 1);
631 * Check level-1 blocks.
633 if (dn->dn_nlevels > 1) {
634 int shift = dn->dn_datablkshift + dn->dn_indblkshift -
636 uint64_t start = off >> shift;
637 uint64_t end = (off + len) >> shift;
639 ASSERT(dn->dn_datablkshift != 0);
640 ASSERT(dn->dn_indblkshift != 0);
642 zio = zio_root(tx->tx_pool->dp_spa,
643 NULL, NULL, ZIO_FLAG_CANFAIL);
644 for (uint64_t i = start; i <= end; i++) {
645 uint64_t ibyte = i << shift;
646 err = dnode_next_offset(dn, 0, &ibyte, 2, 1, 0);
655 err = dmu_tx_check_ioerr(zio, dn, 1, i);
668 dmu_tx_count_free(txh, off, len);
672 dmu_tx_hold_zap(dmu_tx_t *tx, uint64_t object, int add, const char *name)
679 ASSERT(tx->tx_txg == 0);
681 txh = dmu_tx_hold_object_impl(tx, tx->tx_objset,
682 object, THT_ZAP, add, (uintptr_t)name);
687 dmu_tx_count_dnode(txh);
691 * We will be able to fit a new object's entries into one leaf
692 * block. So there will be at most 2 blocks total,
693 * including the header block.
695 dmu_tx_count_write(txh, 0, 2 << fzap_default_block_shift);
699 ASSERT3P(DMU_OT_BYTESWAP(dn->dn_type), ==, DMU_BSWAP_ZAP);
701 if (dn->dn_maxblkid == 0 && !add) {
705 * If there is only one block (i.e. this is a micro-zap)
706 * and we are not adding anything, the accounting is simple.
708 err = dmu_tx_check_ioerr(NULL, dn, 0, 0);
715 * Use max block size here, since we don't know how much
716 * the size will change between now and the dbuf dirty call.
718 bp = &dn->dn_phys->dn_blkptr[0];
719 if (dsl_dataset_block_freeable(dn->dn_objset->os_dsl_dataset,
721 txh->txh_space_tooverwrite += SPA_MAXBLOCKSIZE;
723 txh->txh_space_towrite += SPA_MAXBLOCKSIZE;
725 txh->txh_space_tounref += SPA_MAXBLOCKSIZE;
729 if (dn->dn_maxblkid > 0 && name) {
731 * access the name in this fat-zap so that we'll check
732 * for i/o errors to the leaf blocks, etc.
734 err = zap_lookup(dn->dn_objset, dn->dn_object, name,
742 err = zap_count_write(dn->dn_objset, dn->dn_object, name, add,
743 &txh->txh_space_towrite, &txh->txh_space_tooverwrite);
746 * If the modified blocks are scattered to the four winds,
747 * we'll have to modify an indirect twig for each.
749 epbs = dn->dn_indblkshift - SPA_BLKPTRSHIFT;
750 for (nblocks = dn->dn_maxblkid >> epbs; nblocks != 0; nblocks >>= epbs)
751 if (dn->dn_objset->os_dsl_dataset->ds_phys->ds_prev_snap_obj)
752 txh->txh_space_towrite += 3 << dn->dn_indblkshift;
754 txh->txh_space_tooverwrite += 3 << dn->dn_indblkshift;
758 dmu_tx_hold_bonus(dmu_tx_t *tx, uint64_t object)
762 ASSERT(tx->tx_txg == 0);
764 txh = dmu_tx_hold_object_impl(tx, tx->tx_objset,
765 object, THT_BONUS, 0, 0);
767 dmu_tx_count_dnode(txh);
771 dmu_tx_hold_space(dmu_tx_t *tx, uint64_t space)
774 ASSERT(tx->tx_txg == 0);
776 txh = dmu_tx_hold_object_impl(tx, tx->tx_objset,
777 DMU_NEW_OBJECT, THT_SPACE, space, 0);
779 txh->txh_space_towrite += space;
783 dmu_tx_holds(dmu_tx_t *tx, uint64_t object)
789 * By asserting that the tx is assigned, we're counting the
790 * number of dn_tx_holds, which is the same as the number of
791 * dn_holds. Otherwise, we'd be counting dn_holds, but
792 * dn_tx_holds could be 0.
794 ASSERT(tx->tx_txg != 0);
796 /* if (tx->tx_anyobj == TRUE) */
799 for (txh = list_head(&tx->tx_holds); txh;
800 txh = list_next(&tx->tx_holds, txh)) {
801 if (txh->txh_dnode && txh->txh_dnode->dn_object == object)
810 dmu_tx_dirty_buf(dmu_tx_t *tx, dmu_buf_impl_t *db)
813 int match_object = FALSE, match_offset = FALSE;
818 ASSERT(tx->tx_txg != 0);
819 ASSERT(tx->tx_objset == NULL || dn->dn_objset == tx->tx_objset);
820 ASSERT3U(dn->dn_object, ==, db->db.db_object);
827 /* XXX No checking on the meta dnode for now */
828 if (db->db.db_object == DMU_META_DNODE_OBJECT) {
833 for (txh = list_head(&tx->tx_holds); txh;
834 txh = list_next(&tx->tx_holds, txh)) {
835 ASSERT(dn == NULL || dn->dn_assigned_txg == tx->tx_txg);
836 if (txh->txh_dnode == dn && txh->txh_type != THT_NEWOBJECT)
838 if (txh->txh_dnode == NULL || txh->txh_dnode == dn) {
839 int datablkshift = dn->dn_datablkshift ?
840 dn->dn_datablkshift : SPA_MAXBLOCKSHIFT;
841 int epbs = dn->dn_indblkshift - SPA_BLKPTRSHIFT;
842 int shift = datablkshift + epbs * db->db_level;
843 uint64_t beginblk = shift >= 64 ? 0 :
844 (txh->txh_arg1 >> shift);
845 uint64_t endblk = shift >= 64 ? 0 :
846 ((txh->txh_arg1 + txh->txh_arg2 - 1) >> shift);
847 uint64_t blkid = db->db_blkid;
849 /* XXX txh_arg2 better not be zero... */
851 dprintf("found txh type %x beginblk=%llx endblk=%llx\n",
852 txh->txh_type, beginblk, endblk);
854 switch (txh->txh_type) {
856 if (blkid >= beginblk && blkid <= endblk)
859 * We will let this hold work for the bonus
860 * or spill buffer so that we don't need to
861 * hold it when creating a new object.
863 if (blkid == DMU_BONUS_BLKID ||
864 blkid == DMU_SPILL_BLKID)
867 * They might have to increase nlevels,
868 * thus dirtying the new TLIBs. Or the
869 * might have to change the block size,
870 * thus dirying the new lvl=0 blk=0.
877 * We will dirty all the level 1 blocks in
878 * the free range and perhaps the first and
879 * last level 0 block.
881 if (blkid >= beginblk && (blkid <= endblk ||
882 txh->txh_arg2 == DMU_OBJECT_END))
886 if (blkid == DMU_SPILL_BLKID)
890 if (blkid == DMU_BONUS_BLKID)
900 ASSERT(!"bad txh_type");
903 if (match_object && match_offset) {
909 panic("dirtying dbuf obj=%llx lvl=%u blkid=%llx but not tx_held\n",
910 (u_longlong_t)db->db.db_object, db->db_level,
911 (u_longlong_t)db->db_blkid);
916 * If we can't do 10 iops, something is wrong. Let us go ahead
917 * and hit zfs_dirty_data_max.
919 hrtime_t zfs_delay_max_ns = MSEC2NSEC(100);
920 int zfs_delay_resolution_ns = 100 * 1000; /* 100 microseconds */
923 * We delay transactions when we've determined that the backend storage
924 * isn't able to accommodate the rate of incoming writes.
926 * If there is already a transaction waiting, we delay relative to when
927 * that transaction finishes waiting. This way the calculated min_time
928 * is independent of the number of threads concurrently executing
931 * If we are the only waiter, wait relative to when the transaction
932 * started, rather than the current time. This credits the transaction for
933 * "time already served", e.g. reading indirect blocks.
935 * The minimum time for a transaction to take is calculated as:
936 * min_time = scale * (dirty - min) / (max - dirty)
937 * min_time is then capped at zfs_delay_max_ns.
939 * The delay has two degrees of freedom that can be adjusted via tunables.
940 * The percentage of dirty data at which we start to delay is defined by
941 * zfs_delay_min_dirty_percent. This should typically be at or above
942 * zfs_vdev_async_write_active_max_dirty_percent so that we only start to
943 * delay after writing at full speed has failed to keep up with the incoming
944 * write rate. The scale of the curve is defined by zfs_delay_scale. Roughly
945 * speaking, this variable determines the amount of delay at the midpoint of
949 * 10ms +-------------------------------------------------------------*+
965 * 2ms + (midpoint) * +
968 * | zfs_delay_scale ----------> ******** |
969 * 0 +-------------------------------------*********----------------+
970 * 0% <- zfs_dirty_data_max -> 100%
972 * Note that since the delay is added to the outstanding time remaining on the
973 * most recent transaction, the delay is effectively the inverse of IOPS.
974 * Here the midpoint of 500us translates to 2000 IOPS. The shape of the curve
975 * was chosen such that small changes in the amount of accumulated dirty data
976 * in the first 3/4 of the curve yield relatively small differences in the
979 * The effects can be easier to understand when the amount of delay is
980 * represented on a log scale:
983 * 100ms +-------------------------------------------------------------++
992 * + zfs_delay_scale ----------> ***** +
1003 * +--------------------------------------------------------------+
1004 * 0% <- zfs_dirty_data_max -> 100%
1006 * Note here that only as the amount of dirty data approaches its limit does
1007 * the delay start to increase rapidly. The goal of a properly tuned system
1008 * should be to keep the amount of dirty data out of that range by first
1009 * ensuring that the appropriate limits are set for the I/O scheduler to reach
1010 * optimal throughput on the backend storage, and then by changing the value
1011 * of zfs_delay_scale to increase the steepness of the curve.
1014 dmu_tx_delay(dmu_tx_t *tx, uint64_t dirty)
1016 dsl_pool_t *dp = tx->tx_pool;
1017 uint64_t delay_min_bytes =
1018 zfs_dirty_data_max * zfs_delay_min_dirty_percent / 100;
1019 hrtime_t wakeup, min_tx_time, now;
1021 if (dirty <= delay_min_bytes)
1025 * The caller has already waited until we are under the max.
1026 * We make them pass us the amount of dirty data so we don't
1027 * have to handle the case of it being >= the max, which could
1028 * cause a divide-by-zero if it's == the max.
1030 ASSERT3U(dirty, <, zfs_dirty_data_max);
1033 min_tx_time = zfs_delay_scale *
1034 (dirty - delay_min_bytes) / (zfs_dirty_data_max - dirty);
1035 if (now > tx->tx_start + min_tx_time)
1038 min_tx_time = MIN(min_tx_time, zfs_delay_max_ns);
1040 DTRACE_PROBE3(delay__mintime, dmu_tx_t *, tx, uint64_t, dirty,
1041 uint64_t, min_tx_time);
1043 mutex_enter(&dp->dp_lock);
1044 wakeup = MAX(tx->tx_start + min_tx_time,
1045 dp->dp_last_wakeup + min_tx_time);
1046 dp->dp_last_wakeup = wakeup;
1047 mutex_exit(&dp->dp_lock);
1051 mutex_enter(&curthread->t_delay_lock);
1052 while (cv_timedwait_hires(&curthread->t_delay_cv,
1053 &curthread->t_delay_lock, wakeup, zfs_delay_resolution_ns,
1054 CALLOUT_FLAG_ABSOLUTE | CALLOUT_FLAG_ROUNDUP) > 0)
1056 mutex_exit(&curthread->t_delay_lock);
1058 /* XXX High resolution callouts are not available */
1059 ASSERT(wakeup >= now);
1060 pause("dmu_tx_delay", NSEC_TO_TICK(wakeup - now));
1063 hrtime_t delta = wakeup - gethrtime();
1065 ts.tv_sec = delta / NANOSEC;
1066 ts.tv_nsec = delta % NANOSEC;
1067 (void) nanosleep(&ts, NULL);
1072 dmu_tx_try_assign(dmu_tx_t *tx, txg_how_t txg_how)
1075 spa_t *spa = tx->tx_pool->dp_spa;
1076 uint64_t memory, asize, fsize, usize;
1077 uint64_t towrite, tofree, tooverwrite, tounref, tohold, fudge;
1079 ASSERT0(tx->tx_txg);
1082 return (tx->tx_err);
1084 if (spa_suspended(spa)) {
1086 * If the user has indicated a blocking failure mode
1087 * then return ERESTART which will block in dmu_tx_wait().
1088 * Otherwise, return EIO so that an error can get
1089 * propagated back to the VOP calls.
1091 * Note that we always honor the txg_how flag regardless
1092 * of the failuremode setting.
1094 if (spa_get_failmode(spa) == ZIO_FAILURE_MODE_CONTINUE &&
1095 txg_how != TXG_WAIT)
1096 return (SET_ERROR(EIO));
1098 return (SET_ERROR(ERESTART));
1101 if (!tx->tx_waited &&
1102 dsl_pool_need_dirty_delay(tx->tx_pool)) {
1103 tx->tx_wait_dirty = B_TRUE;
1104 return (SET_ERROR(ERESTART));
1107 tx->tx_txg = txg_hold_open(tx->tx_pool, &tx->tx_txgh);
1108 tx->tx_needassign_txh = NULL;
1111 * NB: No error returns are allowed after txg_hold_open, but
1112 * before processing the dnode holds, due to the
1113 * dmu_tx_unassign() logic.
1116 towrite = tofree = tooverwrite = tounref = tohold = fudge = 0;
1117 for (txh = list_head(&tx->tx_holds); txh;
1118 txh = list_next(&tx->tx_holds, txh)) {
1119 dnode_t *dn = txh->txh_dnode;
1121 mutex_enter(&dn->dn_mtx);
1122 if (dn->dn_assigned_txg == tx->tx_txg - 1) {
1123 mutex_exit(&dn->dn_mtx);
1124 tx->tx_needassign_txh = txh;
1125 return (SET_ERROR(ERESTART));
1127 if (dn->dn_assigned_txg == 0)
1128 dn->dn_assigned_txg = tx->tx_txg;
1129 ASSERT3U(dn->dn_assigned_txg, ==, tx->tx_txg);
1130 (void) refcount_add(&dn->dn_tx_holds, tx);
1131 mutex_exit(&dn->dn_mtx);
1133 towrite += txh->txh_space_towrite;
1134 tofree += txh->txh_space_tofree;
1135 tooverwrite += txh->txh_space_tooverwrite;
1136 tounref += txh->txh_space_tounref;
1137 tohold += txh->txh_memory_tohold;
1138 fudge += txh->txh_fudge;
1142 * If a snapshot has been taken since we made our estimates,
1143 * assume that we won't be able to free or overwrite anything.
1145 if (tx->tx_objset &&
1146 dsl_dataset_prev_snap_txg(tx->tx_objset->os_dsl_dataset) >
1147 tx->tx_lastsnap_txg) {
1148 towrite += tooverwrite;
1149 tooverwrite = tofree = 0;
1152 /* needed allocation: worst-case estimate of write space */
1153 asize = spa_get_asize(tx->tx_pool->dp_spa, towrite + tooverwrite);
1154 /* freed space estimate: worst-case overwrite + free estimate */
1155 fsize = spa_get_asize(tx->tx_pool->dp_spa, tooverwrite) + tofree;
1156 /* convert unrefd space to worst-case estimate */
1157 usize = spa_get_asize(tx->tx_pool->dp_spa, tounref);
1158 /* calculate memory footprint estimate */
1159 memory = towrite + tooverwrite + tohold;
1163 * Add in 'tohold' to account for our dirty holds on this memory
1164 * XXX - the "fudge" factor is to account for skipped blocks that
1165 * we missed because dnode_next_offset() misses in-core-only blocks.
1167 tx->tx_space_towrite = asize +
1168 spa_get_asize(tx->tx_pool->dp_spa, tohold + fudge);
1169 tx->tx_space_tofree = tofree;
1170 tx->tx_space_tooverwrite = tooverwrite;
1171 tx->tx_space_tounref = tounref;
1174 if (tx->tx_dir && asize != 0) {
1175 int err = dsl_dir_tempreserve_space(tx->tx_dir, memory,
1176 asize, fsize, usize, &tx->tx_tempreserve_cookie, tx);
1185 dmu_tx_unassign(dmu_tx_t *tx)
1189 if (tx->tx_txg == 0)
1192 txg_rele_to_quiesce(&tx->tx_txgh);
1195 * Walk the transaction's hold list, removing the hold on the
1196 * associated dnode, and notifying waiters if the refcount drops to 0.
1198 for (txh = list_head(&tx->tx_holds); txh != tx->tx_needassign_txh;
1199 txh = list_next(&tx->tx_holds, txh)) {
1200 dnode_t *dn = txh->txh_dnode;
1204 mutex_enter(&dn->dn_mtx);
1205 ASSERT3U(dn->dn_assigned_txg, ==, tx->tx_txg);
1207 if (refcount_remove(&dn->dn_tx_holds, tx) == 0) {
1208 dn->dn_assigned_txg = 0;
1209 cv_broadcast(&dn->dn_notxholds);
1211 mutex_exit(&dn->dn_mtx);
1214 txg_rele_to_sync(&tx->tx_txgh);
1216 tx->tx_lasttried_txg = tx->tx_txg;
1221 * Assign tx to a transaction group. txg_how can be one of:
1223 * (1) TXG_WAIT. If the current open txg is full, waits until there's
1224 * a new one. This should be used when you're not holding locks.
1225 * It will only fail if we're truly out of space (or over quota).
1227 * (2) TXG_NOWAIT. If we can't assign into the current open txg without
1228 * blocking, returns immediately with ERESTART. This should be used
1229 * whenever you're holding locks. On an ERESTART error, the caller
1230 * should drop locks, do a dmu_tx_wait(tx), and try again.
1232 * (3) TXG_WAITED. Like TXG_NOWAIT, but indicates that dmu_tx_wait()
1233 * has already been called on behalf of this operation (though
1234 * most likely on a different tx).
1237 dmu_tx_assign(dmu_tx_t *tx, txg_how_t txg_how)
1241 ASSERT(tx->tx_txg == 0);
1242 ASSERT(txg_how == TXG_WAIT || txg_how == TXG_NOWAIT ||
1243 txg_how == TXG_WAITED);
1244 ASSERT(!dsl_pool_sync_context(tx->tx_pool));
1246 /* If we might wait, we must not hold the config lock. */
1247 ASSERT(txg_how != TXG_WAIT || !dsl_pool_config_held(tx->tx_pool));
1249 if (txg_how == TXG_WAITED)
1250 tx->tx_waited = B_TRUE;
1252 while ((err = dmu_tx_try_assign(tx, txg_how)) != 0) {
1253 dmu_tx_unassign(tx);
1255 if (err != ERESTART || txg_how != TXG_WAIT)
1261 txg_rele_to_quiesce(&tx->tx_txgh);
1267 dmu_tx_wait(dmu_tx_t *tx)
1269 spa_t *spa = tx->tx_pool->dp_spa;
1270 dsl_pool_t *dp = tx->tx_pool;
1272 ASSERT(tx->tx_txg == 0);
1273 ASSERT(!dsl_pool_config_held(tx->tx_pool));
1275 if (tx->tx_wait_dirty) {
1277 * dmu_tx_try_assign() has determined that we need to wait
1278 * because we've consumed much or all of the dirty buffer
1281 mutex_enter(&dp->dp_lock);
1282 while (dp->dp_dirty_total >= zfs_dirty_data_max)
1283 cv_wait(&dp->dp_spaceavail_cv, &dp->dp_lock);
1284 uint64_t dirty = dp->dp_dirty_total;
1285 mutex_exit(&dp->dp_lock);
1287 dmu_tx_delay(tx, dirty);
1289 tx->tx_wait_dirty = B_FALSE;
1292 * Note: setting tx_waited only has effect if the caller
1293 * used TX_WAIT. Otherwise they are going to destroy
1294 * this tx and try again. The common case, zfs_write(),
1297 tx->tx_waited = B_TRUE;
1298 } else if (spa_suspended(spa) || tx->tx_lasttried_txg == 0) {
1300 * If the pool is suspended we need to wait until it
1301 * is resumed. Note that it's possible that the pool
1302 * has become active after this thread has tried to
1303 * obtain a tx. If that's the case then tx_lasttried_txg
1304 * would not have been set.
1306 txg_wait_synced(dp, spa_last_synced_txg(spa) + 1);
1307 } else if (tx->tx_needassign_txh) {
1309 * A dnode is assigned to the quiescing txg. Wait for its
1310 * transaction to complete.
1312 dnode_t *dn = tx->tx_needassign_txh->txh_dnode;
1314 mutex_enter(&dn->dn_mtx);
1315 while (dn->dn_assigned_txg == tx->tx_lasttried_txg - 1)
1316 cv_wait(&dn->dn_notxholds, &dn->dn_mtx);
1317 mutex_exit(&dn->dn_mtx);
1318 tx->tx_needassign_txh = NULL;
1320 txg_wait_open(tx->tx_pool, tx->tx_lasttried_txg + 1);
1325 dmu_tx_willuse_space(dmu_tx_t *tx, int64_t delta)
1328 if (tx->tx_dir == NULL || delta == 0)
1332 ASSERT3U(refcount_count(&tx->tx_space_written) + delta, <=,
1333 tx->tx_space_towrite);
1334 (void) refcount_add_many(&tx->tx_space_written, delta, NULL);
1336 (void) refcount_add_many(&tx->tx_space_freed, -delta, NULL);
1342 dmu_tx_commit(dmu_tx_t *tx)
1346 ASSERT(tx->tx_txg != 0);
1349 * Go through the transaction's hold list and remove holds on
1350 * associated dnodes, notifying waiters if no holds remain.
1352 while (txh = list_head(&tx->tx_holds)) {
1353 dnode_t *dn = txh->txh_dnode;
1355 list_remove(&tx->tx_holds, txh);
1356 kmem_free(txh, sizeof (dmu_tx_hold_t));
1359 mutex_enter(&dn->dn_mtx);
1360 ASSERT3U(dn->dn_assigned_txg, ==, tx->tx_txg);
1362 if (refcount_remove(&dn->dn_tx_holds, tx) == 0) {
1363 dn->dn_assigned_txg = 0;
1364 cv_broadcast(&dn->dn_notxholds);
1366 mutex_exit(&dn->dn_mtx);
1370 if (tx->tx_tempreserve_cookie)
1371 dsl_dir_tempreserve_clear(tx->tx_tempreserve_cookie, tx);
1373 if (!list_is_empty(&tx->tx_callbacks))
1374 txg_register_callbacks(&tx->tx_txgh, &tx->tx_callbacks);
1376 if (tx->tx_anyobj == FALSE)
1377 txg_rele_to_sync(&tx->tx_txgh);
1379 list_destroy(&tx->tx_callbacks);
1380 list_destroy(&tx->tx_holds);
1382 dprintf("towrite=%llu written=%llu tofree=%llu freed=%llu\n",
1383 tx->tx_space_towrite, refcount_count(&tx->tx_space_written),
1384 tx->tx_space_tofree, refcount_count(&tx->tx_space_freed));
1385 refcount_destroy_many(&tx->tx_space_written,
1386 refcount_count(&tx->tx_space_written));
1387 refcount_destroy_many(&tx->tx_space_freed,
1388 refcount_count(&tx->tx_space_freed));
1390 kmem_free(tx, sizeof (dmu_tx_t));
1394 dmu_tx_abort(dmu_tx_t *tx)
1398 ASSERT(tx->tx_txg == 0);
1400 while (txh = list_head(&tx->tx_holds)) {
1401 dnode_t *dn = txh->txh_dnode;
1403 list_remove(&tx->tx_holds, txh);
1404 kmem_free(txh, sizeof (dmu_tx_hold_t));
1410 * Call any registered callbacks with an error code.
1412 if (!list_is_empty(&tx->tx_callbacks))
1413 dmu_tx_do_callbacks(&tx->tx_callbacks, ECANCELED);
1415 list_destroy(&tx->tx_callbacks);
1416 list_destroy(&tx->tx_holds);
1418 refcount_destroy_many(&tx->tx_space_written,
1419 refcount_count(&tx->tx_space_written));
1420 refcount_destroy_many(&tx->tx_space_freed,
1421 refcount_count(&tx->tx_space_freed));
1423 kmem_free(tx, sizeof (dmu_tx_t));
1427 dmu_tx_get_txg(dmu_tx_t *tx)
1429 ASSERT(tx->tx_txg != 0);
1430 return (tx->tx_txg);
1434 dmu_tx_pool(dmu_tx_t *tx)
1436 ASSERT(tx->tx_pool != NULL);
1437 return (tx->tx_pool);
1442 dmu_tx_callback_register(dmu_tx_t *tx, dmu_tx_callback_func_t *func, void *data)
1444 dmu_tx_callback_t *dcb;
1446 dcb = kmem_alloc(sizeof (dmu_tx_callback_t), KM_SLEEP);
1448 dcb->dcb_func = func;
1449 dcb->dcb_data = data;
1451 list_insert_tail(&tx->tx_callbacks, dcb);
1455 * Call all the commit callbacks on a list, with a given error code.
1458 dmu_tx_do_callbacks(list_t *cb_list, int error)
1460 dmu_tx_callback_t *dcb;
1462 while (dcb = list_head(cb_list)) {
1463 list_remove(cb_list, dcb);
1464 dcb->dcb_func(dcb->dcb_data, error);
1465 kmem_free(dcb, sizeof (dmu_tx_callback_t));
1470 * Interface to hold a bunch of attributes.
1471 * used for creating new files.
1472 * attrsize is the total size of all attributes
1473 * to be added during object creation
1475 * For updating/adding a single attribute dmu_tx_hold_sa() should be used.
1479 * hold necessary attribute name for attribute registration.
1480 * should be a very rare case where this is needed. If it does
1481 * happen it would only happen on the first write to the file system.
1484 dmu_tx_sa_registration_hold(sa_os_t *sa, dmu_tx_t *tx)
1488 if (!sa->sa_need_attr_registration)
1491 for (i = 0; i != sa->sa_num_attrs; i++) {
1492 if (!sa->sa_attr_table[i].sa_registered) {
1493 if (sa->sa_reg_attr_obj)
1494 dmu_tx_hold_zap(tx, sa->sa_reg_attr_obj,
1495 B_TRUE, sa->sa_attr_table[i].sa_name);
1497 dmu_tx_hold_zap(tx, DMU_NEW_OBJECT,
1498 B_TRUE, sa->sa_attr_table[i].sa_name);
1505 dmu_tx_hold_spill(dmu_tx_t *tx, uint64_t object)
1510 txh = dmu_tx_hold_object_impl(tx, tx->tx_objset, object,
1513 dn = txh->txh_dnode;
1518 /* If blkptr doesn't exist then add space to towrite */
1519 if (!(dn->dn_phys->dn_flags & DNODE_FLAG_SPILL_BLKPTR)) {
1520 txh->txh_space_towrite += SPA_MAXBLOCKSIZE;
1524 bp = &dn->dn_phys->dn_spill;
1525 if (dsl_dataset_block_freeable(dn->dn_objset->os_dsl_dataset,
1527 txh->txh_space_tooverwrite += SPA_MAXBLOCKSIZE;
1529 txh->txh_space_towrite += SPA_MAXBLOCKSIZE;
1530 if (!BP_IS_HOLE(bp))
1531 txh->txh_space_tounref += SPA_MAXBLOCKSIZE;
1536 dmu_tx_hold_sa_create(dmu_tx_t *tx, int attrsize)
1538 sa_os_t *sa = tx->tx_objset->os_sa;
1540 dmu_tx_hold_bonus(tx, DMU_NEW_OBJECT);
1542 if (tx->tx_objset->os_sa->sa_master_obj == 0)
1545 if (tx->tx_objset->os_sa->sa_layout_attr_obj)
1546 dmu_tx_hold_zap(tx, sa->sa_layout_attr_obj, B_TRUE, NULL);
1548 dmu_tx_hold_zap(tx, sa->sa_master_obj, B_TRUE, SA_LAYOUTS);
1549 dmu_tx_hold_zap(tx, sa->sa_master_obj, B_TRUE, SA_REGISTRY);
1550 dmu_tx_hold_zap(tx, DMU_NEW_OBJECT, B_TRUE, NULL);
1551 dmu_tx_hold_zap(tx, DMU_NEW_OBJECT, B_TRUE, NULL);
1554 dmu_tx_sa_registration_hold(sa, tx);
1556 if (attrsize <= DN_MAX_BONUSLEN && !sa->sa_force_spill)
1559 (void) dmu_tx_hold_object_impl(tx, tx->tx_objset, DMU_NEW_OBJECT,
1566 * dmu_tx_hold_sa(dmu_tx_t *tx, sa_handle_t *, attribute, add, size)
1568 * variable_size is the total size of all variable sized attributes
1569 * passed to this function. It is not the total size of all
1570 * variable size attributes that *may* exist on this object.
1573 dmu_tx_hold_sa(dmu_tx_t *tx, sa_handle_t *hdl, boolean_t may_grow)
1576 sa_os_t *sa = tx->tx_objset->os_sa;
1578 ASSERT(hdl != NULL);
1580 object = sa_handle_object(hdl);
1582 dmu_tx_hold_bonus(tx, object);
1584 if (tx->tx_objset->os_sa->sa_master_obj == 0)
1587 if (tx->tx_objset->os_sa->sa_reg_attr_obj == 0 ||
1588 tx->tx_objset->os_sa->sa_layout_attr_obj == 0) {
1589 dmu_tx_hold_zap(tx, sa->sa_master_obj, B_TRUE, SA_LAYOUTS);
1590 dmu_tx_hold_zap(tx, sa->sa_master_obj, B_TRUE, SA_REGISTRY);
1591 dmu_tx_hold_zap(tx, DMU_NEW_OBJECT, B_TRUE, NULL);
1592 dmu_tx_hold_zap(tx, DMU_NEW_OBJECT, B_TRUE, NULL);
1595 dmu_tx_sa_registration_hold(sa, tx);
1597 if (may_grow && tx->tx_objset->os_sa->sa_layout_attr_obj)
1598 dmu_tx_hold_zap(tx, sa->sa_layout_attr_obj, B_TRUE, NULL);
1600 if (sa->sa_force_spill || may_grow || hdl->sa_spill) {
1601 ASSERT(tx->tx_txg == 0);
1602 dmu_tx_hold_spill(tx, object);
1604 dmu_buf_impl_t *db = (dmu_buf_impl_t *)hdl->sa_bonus;
1609 if (dn->dn_have_spill) {
1610 ASSERT(tx->tx_txg == 0);
1611 dmu_tx_hold_spill(tx, object);