From nobody Sat Feb 7 15:22:02 2026 Received: from mail-pf1-f169.google.com (mail-pf1-f169.google.com [209.85.210.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 835D62DAFC7 for ; Sat, 20 Dec 2025 08:45:09 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.210.169 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1766220311; cv=none; b=I3Ewc99PXiDryvXiTrp+XKPxM5qg17A4QVrIH9JCj3aOTAc1w4znR5vouYt8z77rJhufi4QyWfNPgJ/k5OR6JlXFqXvEW+MAd5VREg2kZJYeytsBN39lJRWQE+ob0eDrq4TyH3fo2bRXh/0qyqTad3SQDOEqb2v6sktpEDuPv3c= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1766220311; c=relaxed/simple; bh=J0Yw3Qm88S6dU5y9y7zh3BQNbj9xD1mfKKQdCpdKmi4=; h=From:To:Cc:Subject:Date:Message-Id:In-Reply-To:References: MIME-Version; b=pS5WB1A/mGzyMx7/2mh9G3oOZpudoCT5iaK+l7kRMvbYzV3wXnM9GFlx0MZWU3T3gdDP2LBcY8caqsM/ZYFsfzxJ680hQEJGGr2pWuE+u/2jpdxiUAzRhEskvAbvbR2y7p/U2rJhEOH5JYldWzvvy33DlbCOHDQxQnJmig57BHw= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=A4aqB44W; arc=none smtp.client-ip=209.85.210.169 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="A4aqB44W" Received: by mail-pf1-f169.google.com with SMTP id d2e1a72fcca58-7b89c1ce9easo2874250b3a.2 for ; Sat, 20 Dec 2025 00:45:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1766220309; x=1766825109; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=PHcc/gUYD8O9iFczjfCBRvxFz2eukzvKpiF4TuWiqbc=; b=A4aqB44WHJfWvcu9DrDHEuP+3PixvBXjwWpmLnmpSGn6cG7N3M2SKHDmIDoXKjqM+O ZhHkaGjQGA3ScIg4GJ+1YpUeDIqPvO4zWLL6NyZoqZAAPgd/oiNQlNRuFM53ALeRjrbS HYQvkoYLqf2EV0HI9AjQ7MnoogLlh2YkQsQ3F4tr961d75Yw3CyPM6o8d8ZrDDYZvlvn 9ZsvhkMY9AkyCnGLfm2M5wuq4SFuW4xrLXaK2RLVEHWRaWvgzQHrRVD48Qn2An/keaR7 vLSjF5HW6/JrJMqAXDeoanKI5qPZlnWo99vMnFC9g5KPJkycZzbvApinVBhFb2xaYyfJ KOkQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1766220309; x=1766825109; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=PHcc/gUYD8O9iFczjfCBRvxFz2eukzvKpiF4TuWiqbc=; b=SuSRGV5OiVl3DHY3GxC2LRiCBP7eHQZjnoo/QbNQ03XuCmdSq/nhHBDSS7iEbQLz47 QXfXoVtGokhcSUpaphEaeO/hD1j8nErOrrJeoFwoa7CWHC+/TKYWIIMAyin1zDdq3Xa3 qieKp4360A56ZNhYE026Re8Sl73KTBQMv6uox+zLP2WJfFdhmHwJnSDuOmzFH1H/J2b7 uD4dSnpw/Atm4Xmu+l2iag4rk9UzTjpMLfSY3z+TA7wjc20UToyG/9FKmYW+Jt7eCVas BqCkDX9KAgS/CNqyqP8o35qdeMxVhyomE4iN7uoXDzlw3RWe4BsOrGnHc6udG3Pqt+Pk /1jA== X-Forwarded-Encrypted: i=1; AJvYcCVZGoT0fBPDeG+h0lhaSTNERgu1pailfBQ+2uF+8Q1poYLrqJuTexegSAyVLMGWLyhzQDeqnXt9kQZfrZk=@vger.kernel.org X-Gm-Message-State: AOJu0YyJ8+vljPy5NreZZFsWJC6iveeTTOPKYWCm7RwYs2QJoqR6SwK1 jODTnEYN+3tgrQhQDjPXgmf10A8sC1vC8tLLhJMQtpsY3GUTegu7Z9yW X-Gm-Gg: AY/fxX4ObTeI/Hr4CJMqPS5+jk1j229E6iwKUuspoQDHWtxdorDgdjaQAVWqrZK6sCX 9/SYDagv+QNG8GU8nAyLfPaEZd2+voxbIiW4INYt8poFaxEoW66Yn/niuWff3EdXFzfEHFEGrSl vYujR8BV2b+5iFh0gVZyC6SIH7xQ5V9LzPQEwjSsRAtp9H30lL/RSi7i64iVRE4M00OdKNTnmWp vfR3tiAfxnnHwoo4tQU4wlwmqWst0lBdEYOZfsG4R2Rn8fOx7RexGW8hhEnKKqdZYANwddVt+Y2 UczmdwJktRo5ytLIzUgJ3SmR1PKc3GGrCPedUubiZ64sM0q2SUspTQBeZQSQ/fr/8526bfsAY5B P8P3AaZpvkoxlHfSVe+86Ohhr4E7NwFGH59Ov6a8G60/UVy6oGGGsENTGosRZXWyWcfT0bCEJR0 03F/w0IwB53sO29ULmAgjVuC9GEgGb X-Google-Smtp-Source: AGHT+IF0+TiBaxAg9YnMnfln/1+S7rZY108uH43EV8K5mEl1+/rtxxQ+xY7hqB1M1a5TI4tqF0uFzA== X-Received: by 2002:a05:6a00:e17:b0:7b9:ef46:ec70 with SMTP id d2e1a72fcca58-7ff65d7cdadmr4898289b3a.23.1766220308570; Sat, 20 Dec 2025 00:45:08 -0800 (PST) Received: from localhost.localdomain ([111.125.231.172]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7ff7aa328aesm4574551b3a.5.2025.12.20.00.45.04 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 20 Dec 2025 00:45:08 -0800 (PST) From: Prithvi Tambewagh To: syzbot+af14efe17dfa46173239@syzkaller.appspotmail.com, jlbec@evilplan.org, joseph.qi@linux.alibaba.com, mark@fasheh.com Cc: heming.zhao@suse.com, linux-kernel@vger.kernel.org, ocfs2-devel@lists.linux.dev, syzkaller-bugs@googlegroups.com, Prithvi Tambewagh Subject: Syzbot test for ocfs2: Add check for total number of chains in chain list Date: Sat, 20 Dec 2025 14:14:57 +0530 Message-Id: <20251220084457.107038-1-activprithvi@gmail.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: <67117fd9.050a0220.10f4f4.0004.GAE@google.com> References: <67117fd9.050a0220.10f4f4.0004.GAE@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" #syz test git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git = 36c254515dc6592c44db77b84908358979dd6b50 Signed-off-by: Prithvi Tambewagh Reported-by: syzbot+af14efe17dfa46173239@syzkaller.appspotmail.com Tested-by: syzbot+af14efe17dfa46173239@syzkaller.appspotmail.com --- fs/ocfs2/suballoc.c | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/fs/ocfs2/suballoc.c b/fs/ocfs2/suballoc.c index f7b483f0de2a..7ea63e9cc4f8 100644 --- a/fs/ocfs2/suballoc.c +++ b/fs/ocfs2/suballoc.c @@ -671,6 +671,21 @@ static int ocfs2_block_group_alloc(struct ocfs2_super = *osb, BUG_ON(ocfs2_is_cluster_bitmap(alloc_inode)); =20 cl =3D &fe->id2.i_chain; + unsigned int block_size =3D osb->sb->s_blocksize; + unsigned int max_cl_count =3D + (block_size - offsetof(struct ocfs2_chain_list, cl_recs)) / + sizeof(struct ocfs2_chain_rec); + + if (!le16_to_cpu(cl->cl_count) || + le16_to_cpu(cl->cl_count) > max_cl_count) { + ocfs2_error(osb->sb, + "Invalid chain list: cl_count %u " + "exceeds max %u", + le16_to_cpu(cl->cl_count), max_cl_count); + status =3D -EIO; + goto bail; + } + status =3D ocfs2_reserve_clusters_with_limit(osb, le16_to_cpu(cl->cl_cpg), max_block, flags, &ac); base-commit: 36c254515dc6592c44db77b84908358979dd6b50 --=20 2.34.1