From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from out162-62-57-49.mail.qq.com (out162-62-57-49.mail.qq.com [162.62.57.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 0F14E38F63F for ; Wed, 25 Mar 2026 07:49:23 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=162.62.57.49 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1774424970; cv=none; b=uNiYDU8zLWQD3LctaFb07Q0+4iNVJ4GRbmVtHy/bW34et5olwYB250AyK+adH7OLDRZENu/hW3RJt5uWgU2q4gZKKy6CL1qpTHF1GAdL0/33/BeOPi5mfCUyJIkDMObNsO3ZO93XH2edmPEQTXcY301lOwz4NrMrS4AtpubLnZ8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1774424970; c=relaxed/simple; bh=6fKYNMbV66ikt6LM6FfRtwkgONnLSIN3caLG5jvmMjM=; h=Message-ID:From:To:Cc:Subject:Date:In-Reply-To:References: MIME-Version; b=EcZY+6JOB9dGAw74YBvu5g5BY4RbRRUMdJlMAdSmFK3p/oiH6TvBAsXfJ/2CViQFoblfVlREPQIK4hsRUrsYUDExnVNxrUgf/+eMuzERqrJEU/piXW/y9Xfb4KZCu5suBTbvJXHCGcWTBp6M7k2QcSvRoCSe7u8ZUPetLVKDcW0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com; spf=pass smtp.mailfrom=qq.com; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b=i1cKzwqJ; arc=none smtp.client-ip=162.62.57.49 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=qq.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b="i1cKzwqJ" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201512; t=1774424959; bh=DBZj1fp06llBaMWL7aRaod48tx8cttJcQqEZOjpjEtQ=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=i1cKzwqJ+hqk1419QyXVe4ZbAMQ3ev3CN7cyUUiFYbCGzManxRqNUlmXkTIsT86XL gNeaxNRFxskbXOPwXA3idiPAzQj4k6Mpc0gyMWVOJ3hZc+f7vkRqy7YCupodXNLcfA 9TS0Maf4uxqDbIQB5nOKsgJB9oXpAXIujtFJ94i8= Received: from lxu-ped-host.. ([111.198.231.89]) by newxmesmtplogicsvrszc56-0.qq.com (NewEsmtp) with SMTP id C5117467; Wed, 25 Mar 2026 15:49:17 +0800 X-QQ-mid: xmsmtpt1774424957t40cvuzsb Message-ID: X-QQ-XMAILINFO: OZMlMiGBv3y9XZ/r5Fffqw18as81WnSN3+O0aW62wC87nDWiE2QrU/WxLNFgMd Ep4rPOQj12p8QUuwT/fajL2ulOM5aCJ3mG1XoJj5lc0FdnZz0NjOb0ExJCRZRhCNaJJer8oPJ85/ sGpMN5ZDxlD7Mr5UJWY/2GobNV47yYxbIWmU4D1IBEmpTAyrQNi6nMTAA6QSoMZ29Rgd4/ArTzuj sY8Wn5MLku7pkvMs5w5Mtd5PdNbx4KSBxiN858sQyrGUgy45SKML4pdFgfNoV3TeyS9e6ghVPs5q muqhsY1jT2zqiIKzPkHEBZqvodH/UzItT6t7ACQ0YLVYYZKqJM6sx9AfIyfVOK6ocgvgMjeoLZzN /6gUC+ziR7zIINIhFcDtb0HZGvaWY19YU1mxFj8+ONWXRNqyJqSRtrNH1VCYq9k75D6fjwRj26GC ycbx1MD8fejw67/ahTZ5Nd9ywfe6Rb3z5xdYJZ8FUeLkwv7cEGgJCWLnE0pzdtfq42uTxRrV6x04 j+P2GDvONbW0cw42KwsrZ2gy5PIVhi7sx8gJTOpkp/Qzod7rBSTgJx07+G2gzsYqdI+/MMjv+0xR Bk46xD0ab2gbkHOkLJ32KR2e9YWZUGWxNGjub1Ii6iYgZsQEupKtvYoABvc80t8mOM3hlyoQjr7P pvO2nekTCTGyp/+PjsPi4hC9QqPO/9SVRYObpZrM9rs4KLoo//LTc1b88fY8mB4MYwlggOK1SYl2 iuZE3Ow8PfMlU0R38CVzidt4o6i7kAHMqCIPqszsN4PVSj2hmyQng1nWrNEECfn/W63GjDaCzBcN iSZRa97tcJ52nYCcettZVgIcbfMM76qCfBXTIwcfEgHx/5xxSBhJLPaNPROuT5LPw1tb7J3MxOn2 006FlIoUnu26WLINUEPZQIwctBpiLYURjA+s4UZny222qPcrHg2qbNMpvXI7XZ0AvF/o4Oua4geq BBJ0B7VHkGPNo1Vb/F61xEse9RyC1U/D//b5kyKESMPjbd02SPT12P4JK9kuC6f265ytObBJ/xys njTWsVg0UhXCyDg+EBqOmt51DhP8eQmHWC2+l0RWeH2fQA3MS4E1NdcE2FosE= X-QQ-XMRINFO: NI4Ajvh11aEjEMj13RCX7UuhPEoou2bs1g== From: Edward Adam Davis To: syzbot+9013411dc43f3582823a@syzkaller.appspotmail.com Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: [syzbot] [gfs2?] INFO: task hung in gfs2_recover_journal (4) Date: Wed, 25 Mar 2026 15:49:17 +0800 X-OQ-MSGID: <20260325074916.486064-2-eadavis@qq.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <69c19ef0.050a0220.3bf4de.00a9.GAE@google.com> References: <69c19ef0.050a0220.3bf4de.00a9.GAE@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit #syz test diff --git a/fs/gfs2/bmap.c b/fs/gfs2/bmap.c index 1cd8ec0bce83..fd11d5aa93b6 100644 --- a/fs/gfs2/bmap.c +++ b/fs/gfs2/bmap.c @@ -2266,6 +2266,9 @@ int gfs2_map_journal_extents(struct gfs2_sbd *sdp, struct gfs2_jdesc *jd) u64 size; int rc; ktime_t start, end; + struct super_block *sb = sdp->sd_vfs; + sector_t maxsector = bdev_nr_sectors(sb->s_bdev); + u32 bshift = sdp->sd_fsb2bb_shift; start = ktime_get(); lblock_stop = i_size_read(jd->jd_inode) >> shift; @@ -2280,6 +2283,10 @@ int gfs2_map_journal_extents(struct gfs2_sbd *sdp, struct gfs2_jdesc *jd) rc = gfs2_block_map(jd->jd_inode, lblock, &bh, 0); if (rc || !buffer_mapped(&bh)) goto fail; + if (bh.b_blocknr << bshift > maxsector) { + rc = -EIO; + goto fail; + } rc = gfs2_add_jextent(jd, lblock, bh.b_blocknr, bh.b_size >> shift); if (rc) goto fail;