]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
btrfs: fix NULL dereference on root when tracing inode eviction
authorMiquel Sabaté Solà <mssola@mssola.com>
Tue, 21 Oct 2025 09:11:25 +0000 (11:11 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 17 Jan 2026 15:31:20 +0000 (16:31 +0100)
commit582ba48e4a4c06fef6bdcf4e57b7b9af660bbd0c
tree5e88bd43c19ebf2b4903e5b70b7bd218e632cf2e
parentec3695dd0acd5c724f15f2484b33f4ccc519c44d
btrfs: fix NULL dereference on root when tracing inode eviction

[ Upstream commit f157dd661339fc6f5f2b574fe2429c43bd309534 ]

When evicting an inode the first thing we do is to setup tracing for it,
which implies fetching the root's id. But in btrfs_evict_inode() the
root might be NULL, as implied in the next check that we do in
btrfs_evict_inode().

Hence, we either should set the ->root_objectid to 0 in case the root is
NULL, or we move tracing setup after checking that the root is not
NULL. Setting the rootid to 0 at least gives us the possibility to trace
this call even in the case when the root is NULL, so that's the solution
taken here.

Fixes: 1abe9b8a138c ("Btrfs: add initial tracepoint support for btrfs")
Reported-by: syzbot+d991fea1b4b23b1f6bf8@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=d991fea1b4b23b1f6bf8
Signed-off-by: Miquel Sabaté Solà <mssola@mssola.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
include/trace/events/btrfs.h