]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
btrfs: fix u32 to s64 type conversion in dirty_metadata_bytes accounting
authorDave Chen <davechen@synology.com>
Mon, 29 Jun 2026 07:08:43 +0000 (15:08 +0800)
committerDavid Sterba <dsterba@suse.com>
Tue, 14 Jul 2026 05:04:19 +0000 (07:04 +0200)
commit8b5a09ceb61b18b1f0797cd30a549d7dc85d8d50
treef8f11efa3f9962b9d5810d5df9f7128f2d079143
parentf0c1f14cc103a28ba80b3e48b88f23026709db3a
btrfs: fix u32 to s64 type conversion in dirty_metadata_bytes accounting

The percpu_counter dirty_metadata_bytes is updated by negating eb->len
and passing it to percpu_counter_add_batch(), whose amount parameter is
s64.  Since commit 84cda1a6087d ("btrfs: cache folio size and shift in
extent_buffer"), eb->len is u32.  The u32 result of -eb->len, when
widened to the s64 parameter, becomes a large positive value instead of
the intended negative value.  For eb->len == 16384 the counter adds
+4294950912 instead of subtracting 16384.

The counter therefore grows on every metadata writeback instead of
shrinking by the extent buffer size, permanently exceeding
BTRFS_DIRTY_METADATA_THRESH and causing __btrfs_btree_balance_dirty()
to trigger balance_dirty_pages_ratelimited() unconditionally, adding
unnecessary writeback pressure.

Cast eb->len to s64 before negation at both call sites so the
subtraction is performed in signed 64-bit arithmetic.

Reviewed-by: Filipe Manana <fdmanana@suse.com>
Fixes: 84cda1a6087d ("btrfs: cache folio size and shift in extent_buffer")
Signed-off-by: Dave Chen <davechen@synology.com>
Signed-off-by: Filipe Manana <fdmanana@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
fs/btrfs/extent_io.c