From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from out162-62-57-252.mail.qq.com (out162-62-57-252.mail.qq.com [162.62.57.252]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id B4A1039A814 for ; Wed, 25 Mar 2026 10:25:34 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=162.62.57.252 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1774434338; cv=none; b=OumuhJtYlX+cIAu9h3Y5Aq1gQqlzURYtztmJJRYGCX8jFcmPx1siQNwfcub0Y0haH7f56q+H2RNt94mFw3lgyhJNcSQd5feMWyD+K8jmxeyC6wwhqa10ogEc9yImkUIc8j1/wRRyeYUqvHlIy5cP98TLXszXLCuC+P1O1g8rW9w= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1774434338; c=relaxed/simple; bh=gbqRodmtRN+TSRpI2pRioANoPHMz9Mm3i8vAujuhmlQ=; h=Message-ID:From:To:Cc:Subject:Date:In-Reply-To:References: MIME-Version; b=BfgKE4lSGq9/XVyaEhkfRGEN4+VkthR1lfylnPimNlxSORK79vUIo4vwgbC/EzXqZBipzGjmPtUGenAzDhv2BWIWUi6frvHP/0gBKHw5ph4hLUv82S7iVtMN8DbsVz/k4+zMoFNVLVzXdOwg42VSwFCCr51T5mveZcKN2R1n2B0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com; spf=pass smtp.mailfrom=qq.com; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b=cneuCKqm; arc=none smtp.client-ip=162.62.57.252 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=qq.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b="cneuCKqm" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201512; t=1774434329; bh=aVJoxZll4iCRZcy49J59HSN2TfyCFhwY7CTO2M7H6pM=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=cneuCKqm2eaCv+z9lCkHbnVflVzxX3xoHK1Bivo2YMTbzNvqmFQBTtcqCUXN8PtFS eLGfuEH2klxJuqvnIU/yS50OG0vkPH2LMCnyJfwuNtKajsztsMxXflABymsG89vpiU HDRhvqCcCcr0pKAwvlXoEYj0FzZbNuLRCPmrQX/g= Received: from lxu-ped-host.. ([111.198.231.89]) by newxmesmtplogicsvrszb43-0.qq.com (NewEsmtp) with SMTP id 65B1E22A; Wed, 25 Mar 2026 18:25:27 +0800 X-QQ-mid: xmsmtpt1774434327tmqybuuj6 Message-ID: X-QQ-XMAILINFO: OVFdYp27KdlJos7Q9RmAPrTc2TS/0X+dnQrS2m8K5WGl01FnK6oPF906i1AwvC yq1IP7AccoJFMZV+7zqhqPSwxgm/L/KO+mG8FzQFxpHsJWwhziZEu/PphE2ACV+05/ktHXlqCoMR DppLab6H0bFDNI9YkXga60fadhInLeYMRDvJED6AHiY83oPrDR5MSprERW2eONY8LRv1t4E5oFJX 1Ikc/NMvz+skhG/toVm4LDzot2EXTLcHdYBNbiwHJDmxNEV7GQ/6SnlDFSf6wmlz9CqKJSP4bNFi usyYYEAH1RAQnzFrGb/zddMk1uowt/7OAtHs/3DDNeX90XrGLfScn2TsiwatxovCPbboYaYmI+cv Be+uYnb0VBAfpe1hIdUYdNEss15yDIeKgldq8OK0XzTy7G3+T+tlcONwB2CqbP22Db3nMGagl+aX hlqNNbC4JW8TJf1UcZzs/0wHwUxN80jWKyApi1kLbY67M8+pepgACYlmmlS76xaHTt7zDDVUVKpY 3gAYmUAX0y3QuU5cKTS9HSa6iZmIzLYKWsn3ncTCTwlduOd/JrwsxGZgLCheLVKPc3qz3mX06uaz GaQJhhyLOZt7cQcOrIRcdy/bEd0yIB7kifmF4wmaEBgqZqoG86JnttDKpAXP07NnCkqV24j6ngTz XouDJjfybYE82H2GoKhSaB0tw0g4lKgQiQgKe3/TtBRdiFM6xZNou2k7IPotuEtmWvz/MQK5Hhcq QnPPKcszOTYCuyadAK7aYnKkeXuKfyazJ3zC6MjIFemCXO/6t+0MkJZsWrSHwKylUugJQnaM6+P2 iDFpYRzenMmBwaw1bvpY2NyIMi3CSWrj3D/i9aCO+q5jdj52nmy83PTpJ+2iG1BTzfcnIw9pq7qB vyg/9M53bb/RUKv635xLxPV19+Bf5VuY/VzuRYTlBdXUVy0WUigi/g4wVJfPIp6mCNAouoPEVZ7I ulDepxwKaVOdNygFriHBMBhq+wCgB8jzX4X0wN8+3H6wZUusdNo9B/6Qb0LjC2ZjAzpGRZ/Rmcj2 27h3YHDeejzbzK+heZzhUjv0134DQwToYtnOFNPBUmDIb1xpdGQCio/9EGiyU= X-QQ-XMRINFO: Nq+8W0+stu50tPAe92KXseR0ZZmBTk3gLg== From: Edward Adam Davis To: syzbot+9013411dc43f3582823a@syzkaller.appspotmail.com Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: [syzbot] [gfs2?] INFO: task hung in gfs2_recover_journal (4) Date: Wed, 25 Mar 2026 18:25:27 +0800 X-OQ-MSGID: <20260325102526.492660-2-eadavis@qq.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <69c19ef0.050a0220.3bf4de.00a9.GAE@google.com> References: <69c19ef0.050a0220.3bf4de.00a9.GAE@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit #syz test https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 09c0f7f1bcdb diff --git a/fs/gfs2/bmap.c b/fs/gfs2/bmap.c index 1cd8ec0bce83..fd11d5aa93b6 100644 --- a/fs/gfs2/bmap.c +++ b/fs/gfs2/bmap.c @@ -2266,6 +2266,9 @@ int gfs2_map_journal_extents(struct gfs2_sbd *sdp, struct gfs2_jdesc *jd) u64 size; int rc; ktime_t start, end; + struct super_block *sb = sdp->sd_vfs; + sector_t maxsector = bdev_nr_sectors(sb->s_bdev); + u32 bshift = sdp->sd_fsb2bb_shift; start = ktime_get(); lblock_stop = i_size_read(jd->jd_inode) >> shift; @@ -2280,6 +2283,10 @@ int gfs2_map_journal_extents(struct gfs2_sbd *sdp, struct gfs2_jdesc *jd) rc = gfs2_block_map(jd->jd_inode, lblock, &bh, 0); if (rc || !buffer_mapped(&bh)) goto fail; + if (bh.b_blocknr << bshift > maxsector) { + rc = -EIO; + goto fail; + } rc = gfs2_add_jextent(jd, lblock, bh.b_blocknr, bh.b_size >> shift); if (rc) goto fail;