------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2780:24 index 4278910975 is out of range for type 's8[1365]' (aka 'signed char[1365]') CPU: 1 UID: 0 PID: 5993 Comm: syz.3.75 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:231 [inline] __ubsan_handle_out_of_bounds+0x121/0x150 lib/ubsan.c:429 dbJoin+0x2ed/0x310 fs/jfs/jfs_dmap.c:2780 dbFreeBits+0x4db/0xd90 fs/jfs/jfs_dmap.c:2340 dbFreeDmap fs/jfs/jfs_dmap.c:2089 [inline] dbFree+0x35b/0x680 fs/jfs/jfs_dmap.c:409 txFreeMap+0x96a/0xd50 fs/jfs/jfs_txnmgr.c:2515 xtTruncate+0xe65/0x3270 fs/jfs/jfs_xtree.c:2467 jfs_free_zero_link+0x46e/0x6e0 fs/jfs/namei.c:759 jfs_evict_inode+0x35f/0x440 fs/jfs/inode.c:153 evict+0x4e8/0x9b0 fs/inode.c:725 __dentry_kill+0x20d/0x630 fs/dcache.c:615 dput+0x19f/0x2b0 fs/dcache.c:857 __fput+0x5d2/0x880 fs/file_table.c:439 task_work_run+0x24f/0x310 kernel/task_work.c:239 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x168/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f36b377dff9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff8cc88698 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 000000000001802a RCX: 00007f36b377dff9 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007f36b3937a80 R08: 0000000000000001 R09: 00007fff8cc8898f R10: 00007f36b3600000 R11: 0000000000000246 R12: 00000000000188f4 R13: 00007fff8cc887a0 R14: 0000000000000032 R15: ffffffffffffffff ---[ end trace ]---