linux-stable/fs/nilfs2
Ryusuke Konishi be56dfc9be nilfs2: handle inconsistent state in nilfs_btnode_create_block()
commit 4811f7af60 upstream.

Syzbot reported that a buffer state inconsistency was detected in
nilfs_btnode_create_block(), triggering a kernel bug.

It is not appropriate to treat this inconsistency as a bug; it can occur
if the argument block address (the buffer index of the newly created
block) is a virtual block number and has been reallocated due to
corruption of the bitmap used to manage its allocation state.

So, modify nilfs_btnode_create_block() and its callers to treat it as a
possible filesystem error, rather than triggering a kernel bug.

Link: https://lkml.kernel.org/r/20240725052007.4562-1-konishi.ryusuke@gmail.com
Fixes: a60be987d4 ("nilfs2: B-tree node cache")
Signed-off-by: Ryusuke Konishi <konishi.ryusuke@gmail.com>
Reported-by: syzbot+89cc4f2324ed37988b60@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=89cc4f2324ed37988b60
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-08-03 08:54:33 +02:00
..
alloc.c nilfs2: fix incorrect inode allocation from reserved inodes 2024-07-11 12:49:22 +02:00
alloc.h nilfs2: fix incorrect inode allocation from reserved inodes 2024-07-11 12:49:22 +02:00
bmap.c nilfs2: fix infinite loop in nilfs_mdt_get_block() 2023-05-06 10:10:07 -07:00
bmap.h
btnode.c nilfs2: handle inconsistent state in nilfs_btnode_create_block() 2024-08-03 08:54:33 +02:00
btnode.h fs/nilfs2: Use the enum req_op and blk_opf_t types 2022-07-14 12:14:33 -06:00
btree.c nilfs2: handle inconsistent state in nilfs_btnode_create_block() 2024-08-03 08:54:33 +02:00
btree.h
cpfile.c
cpfile.h
dat.c nilfs2: fix incorrect inode allocation from reserved inodes 2024-07-11 12:49:22 +02:00
dat.h
dir.c nilfs2: fix kernel bug on rename operation of broken directory 2024-07-18 13:21:25 +02:00
direct.c nilfs2: fix failure to detect DAT corruption in btree and direct mappings 2024-04-03 15:28:34 +02:00
direct.h
export.h
file.c nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() 2024-02-23 09:25:11 +01:00
gcinode.c nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() 2023-09-29 17:20:46 -07:00
ifile.c nilfs2: fix incorrect inode allocation from reserved inodes 2024-07-11 12:49:22 +02:00
ifile.h
inode.c nilfs2: prevent kernel bug at submit_bh_wbc() 2024-04-03 15:28:34 +02:00
ioctl.c nilfs2: fix out-of-range warning 2024-06-12 11:11:31 +02:00
Kconfig fs: add CONFIG_BUFFER_HEAD 2023-08-02 09:13:09 -06:00
Makefile
mdt.c nilfs2: replace obvious uses of b_page with b_folio 2023-01-18 17:12:41 -08:00
mdt.h nilfs2: fix lockdep warnings during disk space reclamation 2022-04-01 11:46:09 -07:00
namei.c nilfs2: convert to ctime accessor functions 2023-07-24 10:30:02 +02:00
nilfs.h nilfs2: add missing check for inode numbers on directory entries 2024-07-11 12:49:15 +02:00
page.c nilfs2: prevent general protection fault in nilfs_clear_dirty_page() 2023-06-19 13:19:35 -07:00
page.h nilfs2: get rid of nilfs_mapping_init() 2022-04-01 11:46:09 -07:00
recovery.c nilfs2: fix data corruption in dsync block recovery for small block sizes 2024-02-23 09:25:11 +01:00
segbuf.c nilfs2: fix buffer corruption due to concurrent device reads 2023-06-19 13:19:33 -07:00
segbuf.h
segment.c nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro 2024-08-03 08:54:10 +02:00
segment.h
sufile.c nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() 2023-12-13 18:45:22 +01:00
sufile.h
super.c nilfs2: use setup_bdev_super to de-duplicate the mount code 2023-08-10 10:34:56 +02:00
sysfs.c
sysfs.h
the_nilfs.c nilfs2: fix inode number range checks 2024-07-11 12:49:15 +02:00
the_nilfs.h nilfs2: fix inode number range checks 2024-07-11 12:49:15 +02:00