doge 64c1bb3bfc block: Prevent QCOW data loss from stale punch-hole ...

QCOW metadata published a fully deallocated cluster before the
caller performed the host punch-hole. Under multi-queue load, a
concurrent metadata flush could make the cluster allocatable, and
another queue could reuse it before the delayed punch ran. If reused as
an L2 table, the stale punch erased live metadata and made guest data
unreachable.

This was observed in production as confirmed guest data loss, with
allocated guest clusters becoming refcounted but unreachable from the
QCOW mapping.

Keep punch-pending clusters out of both free lists. Publish a cluster
only after the host punch succeeds, so another metadata flush is
required before reuse.

Add deterministic coverage for the cross-queue schedule and for host
operation failures.

Signed-off-by: doge <me@crackerben.com>

2026-07-23 11:58:11 +00:00

..

formats

block: Prevent QCOW data loss from stale punch-hole

2026-07-23 11:58:11 +00:00

io

block: Add a SyncCompletionQueue for the sync engines

2026-07-22 09:43:56 +00:00

aligned_buffer.rs

block: qcow: Drop own O_DIRECT alignment handling

2026-06-20 11:46:17 +00:00

aligned_file.rs

block: Test AlignedFile vectored positioned I/O

2026-07-21 08:37:00 +00:00

disk_file.rs

block: flush cached qcow2 metadata on device pause

2026-07-19 18:26:37 +00:00

error.rs

block: qcow: Remove From<qcow::Error> for BlockError

2026-03-20 22:21:24 +00:00

factory.rs

block: vhd: Enable O_DIRECT for fixed VHD images

2026-06-20 11:46:17 +00:00

lib.rs

build: Bump vm-memory and dependents

2026-07-20 17:51:23 +00:00

sparse.rs

block: sparse: Add unit tests for write_zeroes and punch_hole fallback

2026-07-18 17:47:50 +00:00