================================================================================ UBSAN: array-index-out-of-bounds in fs/jfs/jfs_imap.c:2360:2 index 134217728 is out of range for type 'struct iagctl[128]' CPU: 1 PID: 18584 Comm: syz-executor.4 Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 Call trace: dump_backtrace+0x1b8/0x1e4 arch/arm64/kernel/stacktrace.c:291 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:298 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd0/0x124 lib/dump_stack.c:106 dump_stack+0x1c/0x28 lib/dump_stack.c:113 ubsan_epilogue lib/ubsan.c:217 [inline] __ubsan_handle_out_of_bounds+0xfc/0x148 lib/ubsan.c:348 diNewExt+0x280c/0x2b44 fs/jfs/jfs_imap.c:2360 diAllocExt fs/jfs/jfs_imap.c:1949 [inline] diAllocAG+0xa68/0x1b8c fs/jfs/jfs_imap.c:1666 diAlloc+0x17c/0x15c4 fs/jfs/jfs_imap.c:1587 ialloc+0x84/0x78c fs/jfs/jfs_inode.c:56 jfs_mkdir+0x190/0x9f4 fs/jfs/namei.c:225 vfs_mkdir+0x27c/0x3e4 fs/namei.c:4106 do_mkdirat+0x248/0x574 fs/namei.c:4129 __do_sys_mkdirat fs/namei.c:4144 [inline] __se_sys_mkdirat fs/namei.c:4142 [inline] __arm64_sys_mkdirat+0x90/0xa8 fs/namei.c:4142 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:51 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:136 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:155 el0_svc+0x54/0x158 arch/arm64/kernel/entry-common.c:678 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:696 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:595 ================================================================================ ================================================================================ UBSAN: array-index-out-of-bounds in fs/jfs/jfs_imap.c:2361:2 index 134217728 is out of range for type 'struct iagctl[128]' CPU: 1 PID: 18584 Comm: syz-executor.4 Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 Call trace: dump_backtrace+0x1b8/0x1e4 arch/arm64/kernel/stacktrace.c:291 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:298 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd0/0x124 lib/dump_stack.c:106 dump_stack+0x1c/0x28 lib/dump_stack.c:113 ubsan_epilogue lib/ubsan.c:217 [inline] __ubsan_handle_out_of_bounds+0xfc/0x148 lib/ubsan.c:348 diNewExt+0x2840/0x2b44 fs/jfs/jfs_imap.c:2361 diAllocExt fs/jfs/jfs_imap.c:1949 [inline] diAllocAG+0xa68/0x1b8c fs/jfs/jfs_imap.c:1666 diAlloc+0x17c/0x15c4 fs/jfs/jfs_imap.c:1587 ialloc+0x84/0x78c fs/jfs/jfs_inode.c:56 jfs_mkdir+0x190/0x9f4 fs/jfs/namei.c:225 vfs_mkdir+0x27c/0x3e4 fs/namei.c:4106 do_mkdirat+0x248/0x574 fs/namei.c:4129 __do_sys_mkdirat fs/namei.c:4144 [inline] __se_sys_mkdirat fs/namei.c:4142 [inline] __arm64_sys_mkdirat+0x90/0xa8 fs/namei.c:4142 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:51 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:136 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:155 el0_svc+0x54/0x158 arch/arm64/kernel/entry-common.c:678 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:696 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:595 ================================================================================