From: "Denis V. Lunev" <den@openvz.org>
To: andrey.zhadchenko@virtuozzo.com
Cc: devel@openvz.org
Subject: [Devel] [PATCH hci-8.1 0/3] dm-qcow2: fix merges not stopping the users of the images they change
Date: Tue, 3 Nov 2026 09:37:05 +0100 [thread overview]
Message-ID: <20261103083708.131379-1-den@openvz.org> (raw)
Checking dm-qcow2 for the same problem showed that a merge does not
stop everything using the images it changes (VSTOR-153049,
VSTOR-153050):
- a backward merge of an inner image pauses that image, while reads
enter through the top one. A read reaching the inner image as the
merge starts oopses on a NULL qio->ext (patch 2);
- SEEK_HOLE/SEEK_DATA walks the images without an inflight ref, so
merge_backward complete frees an image under the walk (patch 3).
Patch 1 (VSTOR-153051) is the counterpart of dm-ploop patch 4, an
error path leaving state behind: after a failed refcount table
relocation, allocating writes past the old refcount coverage fail with
EIO until the device is suspended and resumed.
The series does not depend on the dm-ploop one.
Tested on dev-cl04, stock 6.12.0-211.52.1.22.11.vz10, dm-qcow2 built
out of tree, with a test-only kprobe module widening the windows:
- on the stock module, with 4K clusters and refcount_bits=64 so the
reftable relocates at 1G, a failed md page insert left every later
write past 1G failing with EIO; a seek went on with an image
qcow2_destroy() had freed; an intermediate merge oopsed in
submit_read_sliced_clu(). None of them reproduce with the series;
- the ploop pytest suite, qcow2 format, passes.
Denis V. Lunev (3):
dm-qcow2: fix a failed refcount table relocation leaking md pages
dm-qcow2: fix backward merge of an inner image racing its reads
dm-qcow2: fix SEEK_HOLE/SEEK_DATA using an image freed by a merge
drivers/md/dm-qcow2-cmd.c | 26 ++++++++++----------------
drivers/md/dm-qcow2-map.c | 19 ++++++++++++++-----
2 files changed, 24 insertions(+), 21 deletions(-)
base-commit: 09eb9a82fe872048d082391415d1cdeda2ac6879
--
2.53.0
_______________________________________________
Devel mailing list
Devel@openvz.org
https://lists.openvz.org/mailman/listinfo/devel
next reply other threads:[~2026-11-03 8:38 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-11-03 8:37 Denis V. Lunev [this message]
2026-11-03 8:37 ` [Devel] [PATCH hci-8.1 1/3] dm-qcow2: fix a failed refcount table relocation leaking md pages Denis V. Lunev
2026-11-03 8:45 ` no-reply
2026-11-03 8:37 ` [Devel] [PATCH hci-8.1 2/3] dm-qcow2: fix backward merge of an inner image racing its reads Denis V. Lunev
2026-11-03 8:44 ` no-reply
2026-11-03 8:37 ` [Devel] [PATCH hci-8.1 3/3] dm-qcow2: fix SEEK_HOLE/SEEK_DATA using an image freed by a merge Denis V. Lunev
2026-11-03 8:47 ` no-reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20261103083708.131379-1-den@openvz.org \
--to=den@openvz.org \
--cc=andrey.zhadchenko@virtuozzo.com \
--cc=devel@openvz.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.