Song Liu b91d4797b3 md/raid5: fix oops during stripe resizing ... commit b44c018cdf upstream. KoWei reported crash during raid5 reshape: [ 1032.252932] Oops: 0002 [#1] SMP PTI [...] [ 1032.252943] RIP: 0010:memcpy_erms+0x6/0x10 [...] [ 1032.252947] RSP: 0018:ffffba1ac0c03b78 EFLAGS: 00010286 [ 1032.252949] RAX: 0000784ac0000000 RBX: ffff91bec3d09740 RCX: 0000000000001000 [ 1032.252951] RDX: 0000000000001000 RSI: ffff91be6781c000 RDI: 0000784ac0000000 [ 1032.252953] RBP: ffffba1ac0c03bd8 R08: 0000000000001000 R09: ffffba1ac0c03bf8 [ 1032.252954] R10: 0000000000000000 R11: 0000000000000000 R12: ffffba1ac0c03bf8 [ 1032.252955] R13: 0000000000001000 R14: 0000000000000000 R15: 0000000000000000 [ 1032.252958] FS: 0000000000000000(0000) GS:ffff91becf500000(0000) knlGS:0000000000000000 [ 1032.252959] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1032.252961] CR2: 0000784ac0000000 CR3: 000000031780a002 CR4: 00000000001606e0 [ 1032.252962] Call Trace: [ 1032.252969] ? async_memcpy+0x179/0x1000 [async_memcpy] [ 1032.252977] ? raid5_release_stripe+0x8e/0x110 [raid456] [ 1032.252982] handle_stripe_expansion+0x15a/0x1f0 [raid456] [ 1032.252988] handle_stripe+0x592/0x1270 [raid456] [ 1032.252993] handle_active_stripes.isra.0+0x3cb/0x5a0 [raid456] [ 1032.252999] raid5d+0x35c/0x550 [raid456] [ 1032.253002] ? schedule+0x42/0xb0 [ 1032.253006] ? schedule_timeout+0x10e/0x160 [ 1032.253011] md_thread+0x97/0x160 [ 1032.253015] ? wait_woken+0x80/0x80 [ 1032.253019] kthread+0x104/0x140 [ 1032.253022] ? md_start_sync+0x60/0x60 [ 1032.253024] ? kthread_park+0x90/0x90 [ 1032.253027] ret_from_fork+0x35/0x40 This is because cache_size_mutex was unlocked too early in resize_stripes, which races with grow_one_stripe() that grow_one_stripe() allocates a stripe with wrong pool_size. Fix this issue by unlocking cache_size_mutex after updating pool_size. Cc: <stable@vger.kernel.org> # v4.4+ Reported-by: KoWei Sung <winders@amazon.com> Signed-off-by: Song Liu <songliubraving@fb.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-11-05 11:43:22 +01:00
..
bcache	bcache: fix a lost wake-up problem caused by mca_cannibalize_lock	2020-10-01 13:17:18 +02:00
persistent-data	dm thin metadata: Fix use-after-free in dm_bm_set_read_only	2020-09-09 19:12:36 +02:00
Kconfig	…
Makefile	…
dm-bio-prison-v1.c	…
dm-bio-prison-v1.h	…
dm-bio-prison-v2.c	…
dm-bio-prison-v2.h	…
dm-bio-record.h	…
dm-bufio.c	…
dm-builtin.c	…
dm-cache-background-tracker.c	…
dm-cache-background-tracker.h	…
dm-cache-block-types.h	…
dm-cache-metadata.c	dm cache metadata: Avoid returning cmd->bm wild pointer on error	2020-09-09 19:12:35 +02:00
dm-cache-metadata.h	…
dm-cache-policy-internal.h	…
dm-cache-policy-smq.c	…
dm-cache-policy.c	…
dm-cache-policy.h	…
dm-cache-target.c	…
dm-clone-metadata.c	…
dm-clone-metadata.h	…
dm-clone-target.c	…
dm-core.h	…
dm-crypt.c	dm crypt: Initialize crypto wait structures	2020-09-09 19:12:35 +02:00
dm-delay.c	…
dm-dust.c	…
dm-era-target.c	…
dm-exception-store.c	…
dm-exception-store.h	…
dm-flakey.c	…
dm-init.c	…
dm-integrity.c	dm integrity: fix error reporting in bitmap mode after creation	2020-09-09 19:12:35 +02:00
dm-io.c	…
dm-ioctl.c	…
dm-kcopyd.c	…
dm-linear.c	…
dm-log-userspace-base.c	…
dm-log-userspace-transfer.c	…
dm-log-userspace-transfer.h	…
dm-log-writes.c	…
dm-log.c	…
dm-mpath.c	dm mpath: fix racey management of PG initialization	2020-09-09 19:12:35 +02:00
dm-mpath.h	…
dm-path-selector.c	…
dm-path-selector.h	…
dm-queue-length.c	…
dm-raid.c	…
dm-raid1.c	…
dm-region-hash.c	…
dm-round-robin.c	…
dm-rq.c	dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue()	2020-08-21 13:05:33 +02:00
dm-rq.h	…
dm-service-time.c	…
dm-snap-persistent.c	…
dm-snap-transient.c	…
dm-snap.c	…
dm-stats.c	…
dm-stats.h	…
dm-stripe.c	…
dm-switch.c	…
dm-sysfs.c	…
dm-table.c	dm table: do not allow request-based DM to stack on partitions	2020-10-01 13:17:14 +02:00
dm-target.c	…
dm-thin-metadata.c	dm thin metadata: Fix use-after-free in dm_bm_set_read_only	2020-09-09 19:12:36 +02:00
dm-thin-metadata.h	…
dm-thin.c	…
dm-uevent.c	…
dm-uevent.h	…
dm-unstripe.c	…
dm-verity-fec.c	…
dm-verity-fec.h	…
dm-verity-target.c	…
dm-verity-verify-sig.c	…
dm-verity-verify-sig.h	…
dm-verity.h	…
dm-writecache.c	dm writecache: handle DAX to partitions on persistent memory correctly	2020-09-09 19:12:35 +02:00
dm-zero.c	…
dm-zoned-metadata.c	…
dm-zoned-reclaim.c	…
dm-zoned-target.c	…
dm-zoned.h	…
dm.c	dm: fix bio splitting and its bio completion order for regular IO	2020-10-01 13:18:25 +02:00
dm.h	…
md-bitmap.c	md/bitmap: md_bitmap_get_counter returns wrong blocks	2020-11-05 11:43:20 +01:00
md-bitmap.h	…
md-cluster.c	md/bitmap: fix memory leak of temporary bitmap	2020-10-29 09:58:01 +01:00
md-cluster.h	…
md-faulty.c	…
md-linear.c	…
md-linear.h	…
md-multipath.c	…
md-multipath.h	…
md.c	…
md.h	…
raid0.c	…
raid0.h	…
raid1-10.c	…
raid1.c	…
raid1.h	…
raid5-cache.c	…
raid5-log.h	…
raid5-ppl.c	…
raid5.c	md/raid5: fix oops during stripe resizing	2020-11-05 11:43:22 +01:00
raid5.h	…
raid10.c	…
raid10.h	…