From nobody Mon Dec 1 21:31:19 2025 Received: from mail-pj1-f47.google.com (mail-pj1-f47.google.com [209.85.216.47]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 739FA2550AF for ; Mon, 1 Dec 2025 12:17:17 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.216.47 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1764591439; cv=none; b=KW6Olk4al92w424TWqxuLpesz6caKuTfaw48/PBUOguCoUQx0wFN3blKpJYw5GqxjIlx8Bj/qqDZPxZUHj9mAR0ttjx/di+uUKAzfarZMm1Jk4VLqo/C/KNURPX60XsF+tGJayndWyKwamAJWU5hTsg/Pk5bsvuSWmctZLQekAM= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1764591439; c=relaxed/simple; bh=u7aOx9eKX85WMhjYKGLulfWhDMdEpmU4UT4wA6MLSnw=; h=From:To:Cc:Subject:Date:Message-Id:In-Reply-To:References: MIME-Version; b=o7B4wxgnuXK+Jah77zO9Va5n9S/ImArwxQQkHpFJdQj0dUCQxN/qJleHeEElBhBtELC0UCBO/MGTmFtCots5vv26BodsHRf617ZwFmGknU48ohnCqVazu8DGha6RW2S3LSh6gKCMQYTqMxiuecEmuzFZBJXF05EWhbTOcrXeKmw= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=VLXDGFzF; arc=none smtp.client-ip=209.85.216.47 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="VLXDGFzF" Received: by mail-pj1-f47.google.com with SMTP id 98e67ed59e1d1-3434700be69so5852254a91.1 for ; Mon, 01 Dec 2025 04:17:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1764591437; x=1765196237; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=JzQZn23yhZ520wZAxPYFCVxk+XIfXKrdt4/IxzzgKXs=; b=VLXDGFzFDiAJJS6xlNZt/LxQYl3b6K3VJ1H11FogFa+f1EiMXx9oOMutLeJl/jI9PW rdRcqu2oQT0uiBhgJditUYjAALFqXQqX3xBKeZXpsZFiaNQsmrhUFZMuxDWeC6rukAyo PrCbEytyGi85DFUxo0yTe8azRW3zb8kXDQmw/81HdLa9jDJ/F6iUnE094Ho0hJxJ2ECp pueDdnCwH7YkciOWQ5SxX5cFhojbfHc+FtBqoH6hI/72p4uJql99QT60VekQCMGbssId hlD49MGUqBzjKUSzKUx4y+AVghGbNRDDYISpb/Dpuduw6LXUeVfVPcMOnPJzKFgqOKDS nImA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1764591437; x=1765196237; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=JzQZn23yhZ520wZAxPYFCVxk+XIfXKrdt4/IxzzgKXs=; b=tXyfknFnZ00rT2SfSdthH/XZqWrquS+p0DHGPCmfJB3k2RMME1IWZxJZAExzLUkgkS K2MIVLeitaa3cLp6lpEw51GBpIgffspcRcuQ14YXyJZJzDBoJF0jt6Nppe/lHHpfxZ6b c6Et2uxSsm1OySu3WCsFlAQSpk3Emp45NqDLoaIgXOmHbeUOX+nnBEdbqSnSQbg264LC B6LYV6DF069NaUyzx1sbzhB9rqZEMRrpfA5wduS8RLybCdzNS/cKQujKVNyTCpojCAt/ Q7KxlzcaM5fZ97g3uUlILSTTFhUdhDJyDCCrvFVkeb3pNFncY8d2jA2PSr3N7TJ7PNEt t54g== X-Gm-Message-State: AOJu0YwwDJ4aswUvDDJWunnZ6oq95VrVGEb5nlGtm+rfmLuFB87D0MwQ 90N8Udh1gDENqliZhPu4RrhArF4dxM1lt/MKhawJKEst6MvG/FoGQ72eQ9EEJRQxVEE= X-Gm-Gg: ASbGncsGjmFfxdZwSNkInowFdxuF0UFuWH1Q4wGNH2vXOrbr6HF7px6NFaVsnN4+DXk yCAnz/h2jAA8mf9Qf1WYl0GBqz6R0l3n6gqP2Plw6BZTxeLuC4UzeuFtvU6HR7gEj7+gb31U+hm Ha7C1zBUeT26c/s0dhYX9FeSGg1ZgSKUpI1tTiE9i+VUQAHamIcck9pSBwn9aD09vEMp6Jc8h54 dlPN0EuJxbf74VBVPCoIheuE1IYz4igwCmehuD1VG4hWapjzoXDCVyq5o6dvF6P7KpBDkGWhGJ6 Xb+7uC9VUnwnSltPhEAoBimTV/4C3IooQvkIioDn1Hl3hVkGoUwCJnkzKcHGtDvS6fEd1DU075w IkKtpKqyZal39YjBoP/kkvMT4b6VKU8NEhsGfZy5dh4KcczDI074BZRZ83s1vJgXkNaxddbRtm/ iH0s9MOZkKRIcJgF95O6tZhw78Lm0= X-Google-Smtp-Source: AGHT+IFvuHqvEYnUoIOGYPRErw2714sO5VkGglyDWqrHE7Z6y6XVPEe4W6f7g2gVi3wG4QN1tX27SA== X-Received: by 2002:a17:90b:1a84:b0:32b:65e6:ec48 with SMTP id 98e67ed59e1d1-3475ebd2f41mr24584187a91.8.1764591435157; Mon, 01 Dec 2025 04:17:15 -0800 (PST) Received: from localhost.localdomain ([114.79.136.226]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3475e9b46f4sm8095381a91.3.2025.12.01.04.17.11 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 01 Dec 2025 04:17:14 -0800 (PST) From: Prithvi Tambewagh To: syzbot+96d38c6e1655c1420a72@syzkaller.appspotmail.com, jlbec@evilplan.org, joseph.qi@linux.alibaba.com, mark@fasheh.com Cc: linux-kernel@vger.kernel.org, ocfs2-devel@lists.linux.dev, syzkaller-bugs@googlegroups.com, Prithvi Tambewagh Subject: Syzbot testing for v3: ocfs2: fix kernel BUG in ocfs2_find_victim_chain Date: Mon, 1 Dec 2025 17:47:03 +0530 Message-Id: <20251201121703.128667-1-activprithvi@gmail.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: <000000000000560ff106204134d2@google.com> References: <000000000000560ff106204134d2@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" #syz test git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git = 939f15e640f193616691d3bcde0089760e75b0d3 Signed-off-by: Prithvi Tambewagh Reported-by: syzbot+96d38c6e1655c1420a72@syzkaller.appspotmail.com Tested-by: syzbot+96d38c6e1655c1420a72@syzkaller.appspotmail.com --- fs/ocfs2/suballoc.c | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/fs/ocfs2/suballoc.c b/fs/ocfs2/suballoc.c index 6ac4dcd54588..e93fc842bb20 100644 --- a/fs/ocfs2/suballoc.c +++ b/fs/ocfs2/suballoc.c @@ -1992,6 +1992,16 @@ static int ocfs2_claim_suballoc_bits(struct ocfs2_al= loc_context *ac, } =20 cl =3D (struct ocfs2_chain_list *) &fe->id2.i_chain; + if (!le16_to_cpu(cl->cl_next_free_rec) || + le16_to_cpu(cl->cl_next_free_rec) > le16_to_cpu(cl->cl_count)) { + status =3D ocfs2_error(ac->ac_inode->i_sb, + "Chain allocator dinode %llu has invalid next " + "free chain record %u, but only %u total\n", + (unsigned long long)le64_to_cpu(fe->i_blkno), + le16_to_cpu(cl->cl_next_free_rec), + le16_to_cpu(cl->cl_count)); + goto bail; + } =20 victim =3D ocfs2_find_victim_chain(cl); ac->ac_chain =3D victim; base-commit: 939f15e640f193616691d3bcde0089760e75b0d3 --=20 2.34.1