loop1: detected capacity change from 0 to 32768 gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" gfs2: fsid=syz:syz: Now mounting FS (format 1802)... ================================================================================ UBSAN: array-index-out-of-bounds in fs/gfs2/bmap.c:898:46 index 11 is out of range for type 'u64[11]' (aka 'unsigned long long[11]') CPU: 1 PID: 5606 Comm: syz-executor.1 Not tainted 6.3.0-rc3-syzkaller-00031-g1e760fa3596e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e7/0x2d0 lib/dump_stack.c:106 ubsan_epilogue lib/ubsan.c:217 [inline] __ubsan_handle_out_of_bounds+0x11c/0x150 lib/ubsan.c:348 __gfs2_iomap_get+0x4b7/0x1490 fs/gfs2/bmap.c:898 gfs2_iomap_get fs/gfs2/bmap.c:1410 [inline] gfs2_block_map+0x296/0x800 fs/gfs2/bmap.c:1225 gfs2_write_alloc_required+0x399/0x660 fs/gfs2/bmap.c:2333 gfs2_jdesc_check+0x1c2/0x290 fs/gfs2/super.c:114 init_journal+0xd90/0x23e0 fs/gfs2/ops_fstype.c:804 init_inodes+0xdc/0x310 fs/gfs2/ops_fstype.c:889 gfs2_fill_super+0x1d02/0x2840 fs/gfs2/ops_fstype.c:1253 get_tree_bdev+0x402/0x620 fs/super.c:1303 gfs2_get_tree+0x54/0x210 fs/gfs2/ops_fstype.c:1338 vfs_get_tree+0x8c/0x270 fs/super.c:1510 do_new_mount+0x28f/0xae0 fs/namespace.c:3042 do_mount fs/namespace.c:3385 [inline] __do_sys_mount fs/namespace.c:3594 [inline] __se_sys_mount+0x2d9/0x3c0 fs/namespace.c:3571 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fa73408d62a Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa734e25f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000012553 RCX: 00007fa73408d62a RDX: 00000000200124c0 RSI: 0000000020012500 RDI: 00007fa734e25fe0 RBP: 00007fa734e26020 R08: 00007fa734e26020 R09: 000000000020400f R10: 000000000020400f R11: 0000000000000202 R12: 00000000200124c0 R13: 0000000020012500 R14: 00007fa734e25fe0 R15: 0000000020000100 ================================================================================