================================================================================
UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2846:24
index 4294967295 is out of range for type 's8[1365]' (aka 'signed char[1365]')
CPU: 0 PID: 275 Comm: jfsCommit Not tainted 5.15.158-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1e3/0x2d0 lib/dump_stack.c:106
 ubsan_epilogue lib/ubsan.c:151 [inline]
 __ubsan_handle_out_of_bounds+0x118/0x140 lib/ubsan.c:282
 dbJoin+0x2e9/0x310 fs/jfs/jfs_dmap.c:2846
 dbFreeBits+0x4ef/0xdb0 fs/jfs/jfs_dmap.c:2406
 dbFreeDmap fs/jfs/jfs_dmap.c:2155 [inline]
 dbFree+0x357/0x670 fs/jfs/jfs_dmap.c:409
 txFreeMap+0x966/0xd50 fs/jfs/jfs_txnmgr.c:2549
 xtTruncate+0xe58/0x3260 fs/jfs/jfs_xtree.c:3428
 jfs_free_zero_link+0x46a/0x6e0 fs/jfs/namei.c:758
 jfs_evict_inode+0x35b/0x440 fs/jfs/inode.c:153
 evict+0x2a4/0x620 fs/inode.c:587
 txUpdateMap+0x825/0x9e0 fs/jfs/jfs_txnmgr.c:2401
 txLazyCommit fs/jfs/jfs_txnmgr.c:2698 [inline]
 jfs_lazycommit+0x470/0xc30 fs/jfs/jfs_txnmgr.c:2766
 kthread+0x3f6/0x4f0 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:300
 </TASK>
================================================================================
================================================================================
UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2968:18
index -3 is out of range for type 's8[1365]' (aka 'signed char[1365]')
CPU: 0 PID: 275 Comm: jfsCommit Tainted: G    B             5.15.158-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1e3/0x2d0 lib/dump_stack.c:106
 ubsan_epilogue lib/ubsan.c:151 [inline]
 __ubsan_handle_out_of_bounds+0x118/0x140 lib/ubsan.c:282
 dbAdjTree+0x377/0x520 fs/jfs/jfs_dmap.c:2968
 dbJoin+0x255/0x310 fs/jfs/jfs_dmap.c:2909
 dbFreeBits+0x4ef/0xdb0 fs/jfs/jfs_dmap.c:2406
 dbFreeDmap fs/jfs/jfs_dmap.c:2155 [inline]
 dbFree+0x357/0x670 fs/jfs/jfs_dmap.c:409
 txFreeMap+0x966/0xd50 fs/jfs/jfs_txnmgr.c:2549
 xtTruncate+0xe58/0x3260 fs/jfs/jfs_xtree.c:3428
 jfs_free_zero_link+0x46a/0x6e0 fs/jfs/namei.c:758
 jfs_evict_inode+0x35b/0x440 fs/jfs/inode.c:153
 evict+0x2a4/0x620 fs/inode.c:587
 txUpdateMap+0x825/0x9e0 fs/jfs/jfs_txnmgr.c:2401
 txLazyCommit fs/jfs/jfs_txnmgr.c:2698 [inline]
 jfs_lazycommit+0x470/0xc30 fs/jfs/jfs_txnmgr.c:2766
 kthread+0x3f6/0x4f0 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:300
 </TASK>