bcachefs: Hold read lock in bch2_snapshot_tree_oldest_subvol()
authorAhmed Ehab <bottaawesome633@gmail.com>
Sat, 21 Sep 2024 21:00:36 +0000 (00:00 +0300)
committerKent Overstreet <kent.overstreet@linux.dev>
Sat, 21 Sep 2024 18:54:18 +0000 (14:54 -0400)
commit39c3aad43f6f9bcddd660f5874dcd760e8c04a94
treee76fcbf5fe59b623dcef7b16b59dfc7b97e5053a
parent025c55a4c7f11ea38521c6e797f3192ad8768c93
bcachefs: Hold read lock in bch2_snapshot_tree_oldest_subvol()

Syzbot reports a problem that a warning is triggered due to suspicious
use of rcu_dereference_check(). That is triggered by a call of
bch2_snapshot_tree_oldest_subvol().

The cause of the warning is that inside
bch2_snapshot_tree_oldest_subvol(), snapshot_t() is called which calls
rcu_dereference() that requires a read lock to be held. Also, the call
of bch2_snapshot_tree_next() eventually calls snapshot_t().

To fix this, call rcu_read_lock() before calling snapshot_t(). Then,
release the lock after the termination of the while loop.

Reported-by: <syzbot+f7c41a878676b72c16a6@syzkaller.appspotmail.com>
Signed-off-by: Ahmed Ehab <bottaawesome633@gmail.com>
Signed-off-by: Kent Overstreet <kent.overstreet@linux.dev>
fs/bcachefs/snapshot.c