This is a note to let you know that I've just added the patch titled

    md/dm-raid: don't call md_reap_sync_thread() directly

to the 6.7-stable tree which can be found at:
    
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary

The filename of the patch is:
     md-dm-raid-don-t-call-md_reap_sync_thread-directly.patch
and it can be found in the queue-6.7 subdirectory.

If you, or anyone else, feels it should not be added to the stable tree,
please let <[email protected]> know about it.



commit 0c0a9af923658fed374bcc356f52a74ae76e3b13
Author: Yu Kuai <[email protected]>
Date:   Tue Mar 5 15:23:03 2024 +0800

    md/dm-raid: don't call md_reap_sync_thread() directly
    
    [ Upstream commit cd32b27a66db8776d8b8e82ec7d7dde97a8693b0 ]
    
    Currently md_reap_sync_thread() is called from raid_message() directly
    without holding 'reconfig_mutex', this is definitely unsafe because
    md_reap_sync_thread() can change many fields that is protected by
    'reconfig_mutex'.
    
    However, hold 'reconfig_mutex' here is still problematic because this
    will cause deadlock, for example, commit 130443d60b1b ("md: refactor
    idle/frozen_sync_thread() to fix deadlock").
    
    Fix this problem by using stop_sync_thread() to unregister sync_thread,
    like md/raid did.
    
    Fixes: be83651f0050 ("DM RAID: Add message/status support for changing sync 
action")
    Cc: [email protected] # v6.7+
    Signed-off-by: Yu Kuai <[email protected]>
    Signed-off-by: Xiao Ni <[email protected]>
    Acked-by: Mike Snitzer <[email protected]>
    Signed-off-by: Song Liu <[email protected]>
    Link: 
https://lore.kernel.org/r/[email protected]
    Signed-off-by: Sasha Levin <[email protected]>

diff --git a/drivers/md/dm-raid.c b/drivers/md/dm-raid.c
index fff9336fee767..8d38cdb221453 100644
--- a/drivers/md/dm-raid.c
+++ b/drivers/md/dm-raid.c
@@ -3719,6 +3719,7 @@ static int raid_message(struct dm_target *ti, unsigned 
int argc, char **argv,
 {
        struct raid_set *rs = ti->private;
        struct mddev *mddev = &rs->md;
+       int ret = 0;
 
        if (!mddev->pers || !mddev->pers->sync_request)
                return -EINVAL;
@@ -3726,17 +3727,24 @@ static int raid_message(struct dm_target *ti, unsigned 
int argc, char **argv,
        if (test_bit(RT_FLAG_RS_SUSPENDED, &rs->runtime_flags))
                return -EBUSY;
 
-       if (!strcasecmp(argv[0], "frozen"))
-               set_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
-       else
-               clear_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
+       if (!strcasecmp(argv[0], "frozen")) {
+               ret = mddev_lock(mddev);
+               if (ret)
+                       return ret;
 
-       if (!strcasecmp(argv[0], "idle") || !strcasecmp(argv[0], "frozen")) {
-               if (mddev->sync_thread) {
-                       set_bit(MD_RECOVERY_INTR, &mddev->recovery);
-                       md_reap_sync_thread(mddev);
-               }
-       } else if (decipher_sync_action(mddev, mddev->recovery) != st_idle)
+               md_frozen_sync_thread(mddev);
+               mddev_unlock(mddev);
+       } else if (!strcasecmp(argv[0], "idle")) {
+               ret = mddev_lock(mddev);
+               if (ret)
+                       return ret;
+
+               md_idle_sync_thread(mddev);
+               mddev_unlock(mddev);
+       }
+
+       clear_bit(MD_RECOVERY_FROZEN, &mddev->recovery);
+       if (decipher_sync_action(mddev, mddev->recovery) != st_idle)
                return -EBUSY;
        else if (!strcasecmp(argv[0], "resync"))
                ; /* MD_RECOVERY_NEEDED set below */

Reply via email to