================================================================================
UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2855:24
index 1621 is out of range for type 's8[1365]' (aka 'signed char[1365]')
CPU: 0 PID: 241 Comm: jfsCommit Not tainted 5.15.186-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call trace:
 dump_backtrace+0x0/0x43c arch/arm64/kernel/stacktrace.c:152
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216
 __dump_stack+0x30/0x40 lib/dump_stack.c:88
 dump_stack_lvl+0xf8/0x160 lib/dump_stack.c:106
 dump_stack+0x1c/0x5c lib/dump_stack.c:113
 ubsan_epilogue+0x14/0x48 lib/ubsan.c:151
 __ubsan_handle_out_of_bounds+0xd4/0x108 lib/ubsan.c:282
 dbJoin+0x24c/0x2a4 fs/jfs/jfs_dmap.c:2855
 dbFreeBits+0x438/0xbd0 fs/jfs/jfs_dmap.c:2415
 dbFreeDmap fs/jfs/jfs_dmap.c:2164 [inline]
 dbFree+0x2d8/0x5c0 fs/jfs/jfs_dmap.c:413
 txFreeMap+0x640/0xb44 fs/jfs/jfs_txnmgr.c:2568
 txUpdateMap+0x294/0x7cc fs/jfs/jfs_txnmgr.c:-1
 txLazyCommit fs/jfs/jfs_txnmgr.c:2698 [inline]
 jfs_lazycommit+0x384/0x9bc fs/jfs/jfs_txnmgr.c:2766
 kthread+0x374/0x454 kernel/kthread.c:334
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:855
================================================================================
------------[ cut here ]------------
WARNING: CPU: 0 PID: 241 at fs/jfs/jfs_dmap.c:2950 dbAdjTree+0x3a8/0x414 fs/jfs/jfs_dmap.c:2950
Modules linked in:
CPU: 0 PID: 241 Comm: jfsCommit Not tainted 5.15.186-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : dbAdjTree+0x3a8/0x414 fs/jfs/jfs_dmap.c:2950
lr : dbAdjTree+0x3a8/0x414 fs/jfs/jfs_dmap.c:2950
sp : ffff80001ef979b0
x29: ffff80001ef979c0 x28: 0000000000000011 x27: 1fffe000190cd802
x26: dfff800000000000 x25: ffff0000c866c010 x24: 0000000000000656
x23: ffff0000c866c018 x22: 0000000000000155 x21: 0000000000000001
x20: 0000000000000004 x19: dfff800000000000 x18: 0000000000000001
x17: 0000000000000000 x16: ffff800008185de8 x15: 00000000ffffffff
x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100
x11: 0000000000000000 x10: 0000000000000000 x9 : ffff8000097ac2bc
x8 : ffff0000c6d38000 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001ef97298 x4 : ffff80001423f400 x3 : 0000000000000000
x2 : 0000000000000004 x1 : 0000000000000155 x0 : 0000000000000656
Call trace:
 dbAdjTree+0x3a8/0x414 fs/jfs/jfs_dmap.c:2950
 dbJoin+0x1ec/0x2a4 fs/jfs/jfs_dmap.c:2918
 dbFreeBits+0x438/0xbd0 fs/jfs/jfs_dmap.c:2415
 dbFreeDmap fs/jfs/jfs_dmap.c:2164 [inline]
 dbFree+0x2d8/0x5c0 fs/jfs/jfs_dmap.c:413
 txFreeMap+0x640/0xb44 fs/jfs/jfs_txnmgr.c:2568
 txUpdateMap+0x294/0x7cc fs/jfs/jfs_txnmgr.c:-1
 txLazyCommit fs/jfs/jfs_txnmgr.c:2698 [inline]
 jfs_lazycommit+0x384/0x9bc fs/jfs/jfs_txnmgr.c:2766
 kthread+0x374/0x454 kernel/kthread.c:334
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:855
irq event stamp: 512
hardirqs last  enabled at (511): [<ffff8000082f8f64>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (512): [<ffff8000111adf74>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (498): [<ffff80000819e9e8>] softirq_handle_end kernel/softirq.c:419 [inline]
softirqs last  enabled at (498): [<ffff80000819e9e8>] handle_softirqs+0xa4c/0xbf0 kernel/softirq.c:604
softirqs last disabled at (179): [<ffff80000819efec>] __do_softirq kernel/softirq.c:610 [inline]
softirqs last disabled at (179): [<ffff80000819efec>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (179): [<ffff80000819efec>] invoke_softirq kernel/softirq.c:457 [inline]
softirqs last disabled at (179): [<ffff80000819efec>] __irq_exit_rcu+0x240/0x440 kernel/softirq.c:659
---[ end trace e4b07dbd1e748dd9 ]---