Linux kernel -stable discussions
 help / color / mirror / Atom feed
From: Sasha Levin <sashal@kernel.org>
To: gregkh@linuxfoundation.org
Cc: ebiggers@google.com, tytso@mit.edu, stable@vger.kernel.org
Subject: Re: FAILED: patch "[PATCH] ext4: fix deadlock allocating crypto bounce page from mempool" failed to apply to 4.19-stable tree
Date: Sun, 9 Feb 2020 10:57:57 -0500	[thread overview]
Message-ID: <20200209155757.GC3584@sasha-vm> (raw)
In-Reply-To: <1581247561145212@kroah.com>

On Sun, Feb 09, 2020 at 12:26:01PM +0100, gregkh@linuxfoundation.org wrote:
>
>The patch below does not apply to the 4.19-stable tree.
>If someone wants it applied there, or to any other stable or longterm
>tree, then please email the backport, including the original git commit
>id to <stable@vger.kernel.org>.
>
>thanks,
>
>greg k-h
>
>------------------ original commit in Linus's tree ------------------
>
>From 547c556f4db7c09447ecf5f833ab6aaae0c5ab58 Mon Sep 17 00:00:00 2001
>From: Eric Biggers <ebiggers@google.com>
>Date: Tue, 31 Dec 2019 12:11:49 -0600
>Subject: [PATCH] ext4: fix deadlock allocating crypto bounce page from mempool
>
>ext4_writepages() on an encrypted file has to encrypt the data, but it
>can't modify the pagecache pages in-place, so it encrypts the data into
>bounce pages and writes those instead.  All bounce pages are allocated
>from a mempool using GFP_NOFS.
>
>This is not correct use of a mempool, and it can deadlock.  This is
>because GFP_NOFS includes __GFP_DIRECT_RECLAIM, which enables the "never
>fail" mode for mempool_alloc() where a failed allocation will fall back
>to waiting for one of the preallocated elements in the pool.
>
>But since this mode is used for all a bio's pages and not just the
>first, it can deadlock waiting for pages already in the bio to be freed.
>
>This deadlock can be reproduced by patching mempool_alloc() to pretend
>that pool->alloc() always fails (so that it always falls back to the
>preallocations), and then creating an encrypted file of size > 128 KiB.
>
>Fix it by only using GFP_NOFS for the first page in the bio.  For
>subsequent pages just use GFP_NOWAIT, and if any of those fail, just
>submit the bio and start a new one.
>
>This will need to be fixed in f2fs too, but that's less straightforward.
>
>Fixes: c9af28fdd449 ("ext4 crypto: don't let data integrity writebacks fail with ENOMEM")
>Cc: stable@vger.kernel.org
>Signed-off-by: Eric Biggers <ebiggers@google.com>
>Link: https://lore.kernel.org/r/20191231181149.47619-1-ebiggers@kernel.org
>Signed-off-by: Theodore Ts'o <tytso@mit.edu>

I've worked around not having these patches:

592ddec7578a ("ext4: use IS_ENCRYPTED() to check encryption status")
53bc1d854c64 ("fscrypt: support encrypting multiple filesystem blocks per page")
d2d0727b1654 ("fscrypt: simplify bounce page handling")

And queued the backport to 4.19-4.4.

-- 
Thanks,
Sasha

  reply	other threads:[~2020-02-09 15:58 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-02-09 11:26 FAILED: patch "[PATCH] ext4: fix deadlock allocating crypto bounce page from mempool" failed to apply to 4.19-stable tree gregkh
2020-02-09 15:57 ` Sasha Levin [this message]
2020-02-09 17:12   ` Greg KH

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20200209155757.GC3584@sasha-vm \
    --to=sashal@kernel.org \
    --cc=ebiggers@google.com \
    --cc=gregkh@linuxfoundation.org \
    --cc=stable@vger.kernel.org \
    --cc=tytso@mit.edu \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox