================================================================================ UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:622:15 index 19 is out of range for type 'xad_t [18]' CPU: 3 PID: 22941 Comm: syz-executor.1 Not tainted 6.6.0-rc3-syzkaller-00252-ge81a2dabc3f3 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x125/0x1b0 lib/dump_stack.c:106 ubsan_epilogue lib/ubsan.c:217 [inline] __ubsan_handle_out_of_bounds+0x111/0x150 lib/ubsan.c:348 xtInsert+0xe82/0xef0 fs/jfs/jfs_xtree.c:622 extAlloc+0x834/0xf00 fs/jfs/jfs_extent.c:145 jfs_get_block+0x428/0xb20 fs/jfs/inode.c:248 __block_write_begin_int+0x3c0/0x1560 fs/buffer.c:2120 __block_write_begin fs/buffer.c:2169 [inline] block_write_begin+0xb1/0x490 fs/buffer.c:2228 jfs_write_begin+0x31/0xd0 fs/jfs/inode.c:299 generic_perform_write+0x278/0x600 mm/filemap.c:3969 __generic_file_write_iter+0x1f9/0x240 mm/filemap.c:4064 generic_file_write_iter+0xe3/0x350 mm/filemap.c:4090 __kernel_write_iter+0x261/0x7e0 fs/read_write.c:517 dump_emit_page fs/coredump.c:888 [inline] dump_user_range+0x299/0x790 fs/coredump.c:915 elf_core_dump+0x2700/0x3900 fs/binfmt_elf.c:2142 do_coredump+0x2c96/0x3fc0 fs/coredump.c:764 get_signal+0x2434/0x2790 kernel/signal.c:2878 arch_do_signal_or_restart+0x90/0x7f0 arch/x86/kernel/signal.c:309 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0x11f/0x240 kernel/entry/common.c:204 irqentry_exit_to_user_mode+0x9/0x40 kernel/entry/common.c:309 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570 RIP: 0033:0x9a3cff5 Code: Unable to access opcode bytes at 0x9a3cfcb. RSP: 002b:0000000020000b38 EFLAGS: 00010217 RAX: 0000000000000000 RBX: 00007f9feb99bf80 RCX: 00007f9feb87cae9 RDX: 0000000020000b40 RSI: 0000000020000b30 RDI: 0000000008000000 RBP: 00007f9feb8c847a R08: 0000000020000bc0 R09: 0000000020000bc0 R10: 0000000020000b80 R11: 0000000000000206 R12: 0000000000000000 R13: 000000000000000b R14: 00007f9feb99bf80 R15: 00007fffc337c808 ================================================================================