btrfs: fix double inode unlock for direct IO sync writes
authorFilipe Manana <fdmanana@suse.com>
Fri, 2 Aug 2024 08:38:51 +0000 (09:38 +0100)
committerDavid Sterba <dsterba@suse.com>
Fri, 2 Aug 2024 20:32:40 +0000 (22:32 +0200)
commite0391e92f9ab4fb3dbdeb139c967dcfa7ac4b115
tree422de414be47ecb4f421f3aac3a9cc572a47a656
parent1e7bec1f7d6533f08bc1c4ee94930c02361db86c
btrfs: fix double inode unlock for direct IO sync writes

If we do a direct IO sync write, at btrfs_sync_file(), and we need to skip
inode logging or we get an error starting a transaction or an error when
flushing delalloc, we end up unlocking the inode when we shouldn't under
the 'out_release_extents' label, and then unlock it again at
btrfs_direct_write().

Fix that by checking if we have to skip inode unlocking under that label.

Reported-by: syzbot+7dbbb74af6291b5a5a8b@syzkaller.appspotmail.com
Link: https://lore.kernel.org/linux-btrfs/000000000000dfd631061eaeb4bc@google.com/
Fixes: 939b656bc8ab ("btrfs: fix corruption after buffer fault in during direct IO append write")
Reviewed-by: Josef Bacik <josef@toxicpanda.com>
Signed-off-by: Filipe Manana <fdmanana@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
fs/btrfs/file.c