Ryusuke Konishi be56dfc9be nilfs2: handle inconsistent state in nilfs_btnode_create_block() ...

commit 4811f7af60 upstream.

Syzbot reported that a buffer state inconsistency was detected in
nilfs_btnode_create_block(), triggering a kernel bug.

It is not appropriate to treat this inconsistency as a bug; it can occur
if the argument block address (the buffer index of the newly created
block) is a virtual block number and has been reallocated due to
corruption of the bitmap used to manage its allocation state.

So, modify nilfs_btnode_create_block() and its callers to treat it as a
possible filesystem error, rather than triggering a kernel bug.

Link: https://lkml.kernel.org/r/20240725052007.4562-1-konishi.ryusuke@gmail.com
Fixes: a60be987d4 ("nilfs2: B-tree node cache")
Signed-off-by: Ryusuke Konishi <konishi.ryusuke@gmail.com>
Reported-by: syzbot+89cc4f2324ed37988b60@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=89cc4f2324ed37988b60
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-08-03 08:54:33 +02:00

..

alloc.c

nilfs2: fix incorrect inode allocation from reserved inodes

2024-07-11 12:49:22 +02:00

alloc.h

nilfs2: fix incorrect inode allocation from reserved inodes

2024-07-11 12:49:22 +02:00

bmap.c

nilfs2: fix infinite loop in nilfs_mdt_get_block()

2023-05-06 10:10:07 -07:00

bmap.h

…

btnode.c

nilfs2: handle inconsistent state in nilfs_btnode_create_block()

2024-08-03 08:54:33 +02:00

btnode.h

fs/nilfs2: Use the enum req_op and blk_opf_t types

2022-07-14 12:14:33 -06:00

btree.c

nilfs2: handle inconsistent state in nilfs_btnode_create_block()

2024-08-03 08:54:33 +02:00

btree.h

…

cpfile.c

…

cpfile.h

…

dat.c

nilfs2: fix incorrect inode allocation from reserved inodes

2024-07-11 12:49:22 +02:00

dat.h

…

dir.c

nilfs2: fix kernel bug on rename operation of broken directory

2024-07-18 13:21:25 +02:00

direct.c

nilfs2: fix failure to detect DAT corruption in btree and direct mappings

2024-04-03 15:28:34 +02:00

direct.h

…

export.h

…

file.c

nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()

2024-02-23 09:25:11 +01:00

gcinode.c

nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()

2023-09-29 17:20:46 -07:00

ifile.c

nilfs2: fix incorrect inode allocation from reserved inodes

2024-07-11 12:49:22 +02:00

ifile.h

…

inode.c

nilfs2: prevent kernel bug at submit_bh_wbc()

2024-04-03 15:28:34 +02:00

ioctl.c

nilfs2: fix out-of-range warning

2024-06-12 11:11:31 +02:00

Kconfig

fs: add CONFIG_BUFFER_HEAD

2023-08-02 09:13:09 -06:00

Makefile

…

mdt.c

nilfs2: replace obvious uses of b_page with b_folio

2023-01-18 17:12:41 -08:00

mdt.h

…

namei.c

nilfs2: convert to ctime accessor functions

2023-07-24 10:30:02 +02:00

nilfs.h

nilfs2: add missing check for inode numbers on directory entries

2024-07-11 12:49:15 +02:00

page.c

nilfs2: prevent general protection fault in nilfs_clear_dirty_page()

2023-06-19 13:19:35 -07:00

page.h

…

recovery.c

nilfs2: fix data corruption in dsync block recovery for small block sizes

2024-02-23 09:25:11 +01:00

segbuf.c

nilfs2: fix buffer corruption due to concurrent device reads

2023-06-19 13:19:33 -07:00

segbuf.h

…

segment.c

nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro

2024-08-03 08:54:10 +02:00

segment.h

…

sufile.c

nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()

2023-12-13 18:45:22 +01:00

sufile.h

…

super.c

nilfs2: use setup_bdev_super to de-duplicate the mount code

2023-08-10 10:34:56 +02:00

sysfs.c

…

sysfs.h

…

the_nilfs.c

nilfs2: fix inode number range checks

2024-07-11 12:49:15 +02:00

the_nilfs.h

nilfs2: fix inode number range checks

2024-07-11 12:49:15 +02:00