loop0: detected capacity change from 0 to 32768

 ... Log Wrap ... Log Wrap ... Log Wrap ...


 ... Log Wrap ... Log Wrap ... Log Wrap ...


 ... Log Wrap ... Log Wrap ... Log Wrap ...

ERROR: (device loop0): diWrite: ixpxd invalid

ERROR: (device loop0): txCommit: 

ERROR: (device loop0): diWrite: ixpxd invalid

ERROR: (device loop0): txCommit: 

loop0: detected capacity change from 32768 to 32767
ERROR: (device loop0): diRead: i_ino != di_number

jfs_lookup: iget failed on inum 32
netlink: 4 bytes leftover after parsing attributes in process `syz.0.0'.
netlink: 15 bytes leftover after parsing attributes in process `syz.0.0'.
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2867:24
index 83886080 is out of range for type 's8[1365]' (aka 'signed char[1365]')
CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 ubsan_epilogue+0xa/0x30 lib/ubsan.c:233
 __ubsan_handle_out_of_bounds+0xe8/0xf0 lib/ubsan.c:455
 dbJoin+0xcc4/0xd60 fs/jfs/jfs_dmap.c:2867
 dbFreeBits+0x4a2/0xd70 fs/jfs/jfs_dmap.c:2427
 dbFreeDmap fs/jfs/jfs_dmap.c:2176 [inline]
 dbFree+0x324/0x650 fs/jfs/jfs_dmap.c:485
 txFreeMap+0x9e6/0xde0 fs/jfs/jfs_txnmgr.c:2517
 xtTruncate+0xd16/0x2eb0 fs/jfs/jfs_xtree.c:2481
 jfs_truncate_nolock+0x2a7/0x340 fs/jfs/inode.c:381
 jfs_truncate+0xce/0x140 fs/jfs/inode.c:420
 jfs_setattr+0x4ee/0x750 fs/jfs/file.c:123
 notify_change+0xbba/0xea0 fs/attr.c:556
 do_truncate+0x1c2/0x250 fs/open.c:68
 handle_truncate fs/namei.c:4305 [inline]
 do_open fs/namei.c:4704 [inline]
 path_openat+0x2fed/0x3830 fs/namei.c:4863
 do_file_open+0x23e/0x4a0 fs/namei.c:4892
 do_sys_openat2+0x115/0x200 fs/open.c:1368
 do_sys_open fs/open.c:1374 [inline]
 __do_sys_open fs/open.c:1382 [inline]
 __se_sys_open fs/open.c:1378 [inline]
 __x64_sys_open+0x11e/0x150 fs/open.c:1378
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa83d79de99
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa839bf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007fa83da25fa0 RCX: 00007fa83d79de99
RDX: 0000000000000000 RSI: 0000000000080242 RDI: 0000200000000580
RBP: 00007fa83d833eaf R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa83da26038 R14: 00007fa83da25fa0 R15: 00007ffe9cc4de38
 </TASK>
---[ end trace ]---