iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/fs/btrfs
History
ChenXiaoSong 89840b12c8 btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() 
[ Upstream commit f7e942b5bb35d8e3af54053d19a6bf04143a3955 ]

Syzkaller reported BUG as follows:

  BUG: sleeping function called from invalid context at
       include/linux/sched/mm.h:274
  Call Trace:
   <TASK>
   dump_stack_lvl+0xcd/0x134
   __might_resched.cold+0x222/0x26b
   kmem_cache_alloc+0x2e7/0x3c0
   update_qgroup_limit_item+0xe1/0x390
   btrfs_qgroup_inherit+0x147b/0x1ee0
   create_subvol+0x4eb/0x1710
   btrfs_mksubvol+0xfe5/0x13f0
   __btrfs_ioctl_snap_create+0x2b0/0x430
   btrfs_ioctl_snap_create_v2+0x25a/0x520
   btrfs_ioctl+0x2a1c/0x5ce0
   __x64_sys_ioctl+0x193/0x200
   do_syscall_64+0x35/0x80

Fix this by calling qgroup_dirty() on @dstqgroup, and update limit item in
btrfs_run_qgroups() later outside of the spinlock context.

CC: stable@vger.kernel.org # 4.9+
Reviewed-by: Qu Wenruo <wqu@suse.com>
Signed-off-by: ChenXiaoSong <chenxiaosong2@huawei.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-12-08 11:15:41 +01:00
..
tests
btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()
2022-11-25 17:35:37 +01:00
acl.c
btrfs: preserve i_mode if __btrfs_set_acl() fails
2018-03-11 16:21:35 +01:00
async-thread.c
btrfs: fix memory ordering between normal and ordered work functions
2021-11-26 11:48:42 +01:00
async-thread.h
Btrfs: fix crash during unmount due to race with delayed inode workers
2020-04-24 07:59:00 +02:00
backref.c
btrfs: remove BUG_ON(!eie) in find_parent_nodes
2022-01-27 08:47:38 +01:00
backref.h
…
btrfs_inode.h
Btrfs: add a flags field to btrfs_fs_info
2016-09-26 17:59:49 +02:00
check-integrity.c
btrfs: convert printk(KERN_* to use pr_* calls
2016-09-26 18:08:44 +02:00
check-integrity.h
fs: have submit_bh users pass in op and flags separately
2016-06-07 13:41:38 -06:00
compression.c
btrfs: mark compressed range uptodate only if all bio succeed
2021-08-08 08:38:53 +02:00
compression.h
…
ctree.c
btrfs: fix race when cloning extent buffer during rewind of an old root
2021-03-24 10:59:22 +01:00
ctree.h
btrfs: export helpers for subvolume name/id resolution
2020-08-26 10:29:03 +02:00
dedupe.h
btrfs: expand cow_file_range() to support in-band dedup and subpage-blocksize
2016-07-26 13:52:25 +02:00
delayed-inode.c
btrfs: abort transaction if we fail to update the delayed inode
2021-07-20 16:20:59 +02:00
delayed-inode.h
Btrfs: fix ->iterate_shared() by upgrading i_rwsem for delayed nodes
2016-06-25 06:20:10 -07:00
delayed-ref.c
Btrfs: fix race between adding and putting tree mod seq elements and nodes
2020-02-14 16:31:07 -05:00
delayed-ref.h
Btrfs: remove unused function btrfs_add_delayed_qgroup_reserve()
2016-08-03 11:02:51 +01:00
dev-replace.c
btrfs: Ensure replaced device doesn't have pending chunk allocation
2019-07-10 09:55:46 +02:00
dev-replace.h
…
dir-item.c
btrfs: unsplit printed strings
2016-09-26 18:08:44 +02:00
disk-io.c
btrfs: reject log replay if there is unsupported RO compat flag
2022-08-25 11:09:27 +02:00
disk-io.h
Btrfs: fix memory leak of block group cache
2016-09-26 17:59:49 +02:00
export.c
btrfs: fix type of parameter generation in btrfs_get_dentry
2022-11-10 15:46:07 +01:00
export.h
btrfs: fix type of parameter generation in btrfs_get_dentry
2022-11-10 15:46:07 +01:00
extent_io.c
Btrfs: fix missing error return if writeback for extent buffer never started
2020-11-18 18:26:24 +01:00
extent_io.h
btrfs: fix potential deadlock in the search ioctl
2020-09-12 11:47:35 +02:00
extent_map.c
Btrfs: fix race between using extent maps and merging them
2020-02-28 15:42:12 +01:00
extent_map.h
…
extent-tree.c
btrfs: unlock newly allocated extent buffer after error
2022-03-16 12:49:01 +01:00
file-item.c
btrfs: fix error handling in btrfs_del_csums
2021-06-10 12:42:36 +02:00
file.c
btrfs: return value from btrfs_mark_extent_written() in case of error
2021-06-16 11:36:34 +02:00
free-space-cache.c
btrfs: clarify error returns values in __load_free_space_cache
2021-03-03 17:44:36 +01:00
free-space-cache.h
btrfs: convert pr_* to btrfs_* where possible
2016-09-26 19:37:04 +02:00
free-space-tree.c
Merge branch 'fst-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux into for-linus-4.9
2016-10-12 13:16:00 -07:00
free-space-tree.h
…
hash.c
crypto: Work around deallocated stack frame reference gcc bug on sparc.
2017-06-24 07:11:17 +02:00
hash.h
btrfs: advertise which crc32c implementation is being used at module load
2016-06-06 14:08:28 +02:00
inode-item.c
…
inode-map.c
Btrfs: fix hang when loading existing inode cache off disk
2020-01-29 10:24:31 +01:00
inode-map.h
…
inode.c
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
2021-09-22 11:42:57 +02:00
ioctl.c
btrfs: fix metadata extent leak after failure to create subvolume
2021-05-22 10:40:16 +02:00
Kconfig
btrfs: disable build on platforms having page size 256K
2021-07-20 16:20:59 +02:00
locking.c
…
locking.h
…
lzo.c
btrfs: convert printk(KERN_* to use pr_* calls
2016-09-26 18:08:44 +02:00
Makefile
btrfs: Move leaf and node validation checker to tree-checker.c
2018-12-08 13:05:11 +01:00
math.h
…
ordered-data.c
Btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered extents
2020-02-28 15:42:53 +01:00
ordered-data.h
Btrfs: fix race setting block group readonly during device replace
2016-05-30 12:58:21 +01:00
orphan.c
…
print-tree.c
btrfs: convert printk(KERN_* to use pr_* calls
2016-09-26 18:08:44 +02:00
print-tree.h
…
props.c
btrfs: simpilify btrfs_subvol_inherit_props
2016-07-26 13:54:22 +02:00
props.h
…
qgroup.c
btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
2022-12-08 11:15:41 +01:00
qgroup.h
btrfs: qgroup: Refactor btrfs_qgroup_insert_dirty_extent()
2016-08-25 03:58:21 -07:00
raid56.c
btrfs: fix raid6 qstripe kmap
2021-03-11 13:48:03 +01:00
raid56.h
…
rcu-string.h
…
reada.c
btrfs: fix use-after-free on readahead extent after failure to create it
2020-11-10 10:23:57 +01:00
relocation.c
btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
2021-05-22 10:40:17 +02:00
root-tree.c
Btrfs: do not abort transaction at btrfs_update_root() after failure to COW path
2019-05-31 06:48:12 -07:00
scrub.c
btrfs: scrub: Don't use inode page cache in scrub_handle_errored_block()
2020-12-29 13:45:05 +01:00
send.c
btrfs: send: in case of IO error log it
2022-02-23 11:56:39 +01:00
send.h
…
struct-funcs.c
btrfs: struct-funcs, constify readers
2018-12-08 13:05:12 +01:00
super.c
btrfs: don't show full path of bind mounts in subvol=
2020-08-26 10:29:03 +02:00
sysfs.c
btrfs: sysfs: don't leak memory when failing add fsid
2019-05-31 06:48:12 -07:00
sysfs.h
…
transaction.c
btrfs: clear defrag status of a root if starting transaction fails
2021-07-20 16:20:56 +02:00
transaction.h
btrfs: convert pr_* to btrfs_* where possible
2016-09-26 19:37:04 +02:00
tree-checker.c
btrfs: tree-checker: Fix misleading group system information
2018-12-08 13:05:13 +01:00
tree-checker.h
btrfs: tree-checker: Fix false panic for sanity test
2018-12-08 13:05:12 +01:00
tree-defrag.c
…
tree-log.c
btrfs: fix lost error handling when looking up extended ref on log replay
2022-08-25 11:09:28 +02:00
tree-log.h
Btrfs: fix lockdep warning on deadlock against an inode's log mutex
2016-08-25 03:58:32 -07:00
ulist.c
…
ulist.h
…
uuid-tree.c
btrfs: handle ENOENT in btrfs_uuid_tree_iterate
2020-01-04 13:38:57 +01:00
volumes.c
btrfs: sysfs: init devices outside of the chunk_mutex
2020-12-11 13:37:58 +01:00
volumes.h
btrfs: Remove btrfs_bio::flags member
2019-12-21 10:41:57 +01:00
xattr.c
btrfs: check if root is readonly while setting security xattr
2022-09-05 10:23:56 +02:00
xattr.h
…
zlib.c
btrfs: convert printk(KERN_* to use pr_* calls
2016-09-26 18:08:44 +02:00