buf->di_height: 768 buf->di_depth: 0 inode->i_size: 176 ================================================================================ UBSAN: array-index-out-of-bounds in fs/gfs2/bmap.c:898:64 index 11 is out of range for type 'u64 [11]' CPU: 1 PID: 5512 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd1/0x138 lib/dump_stack.c:106 ubsan_epilogue+0xa/0x31 lib/ubsan.c:151 __ubsan_handle_out_of_bounds.cold+0x62/0x6c lib/ubsan.c:282 __gfs2_iomap_get+0x152f/0x1920 fs/gfs2/bmap.c:898 gfs2_iomap_get+0xb1/0x1e0 fs/gfs2/bmap.c:1396 gfs2_block_map+0x232/0xc20 fs/gfs2/bmap.c:1211 gfs2_write_alloc_required+0x3f1/0x510 fs/gfs2/bmap.c:2319 do_sync+0x707/0xcf0 fs/gfs2/quota.c:922 gfs2_quota_sync+0x2e6/0x660 fs/gfs2/quota.c:1318 gfs2_sync_fs+0x44/0xb0 fs/gfs2/super.c:650 sync_filesystem.part.0+0x75/0x1d0 fs/sync.c:56 sync_filesystem+0x8f/0xc0 fs/sync.c:43 generic_shutdown_super+0x74/0x410 fs/super.c:474 kill_block_super+0x9b/0xf0 fs/super.c:1386 gfs2_kill_sb+0x108/0x170 fs/gfs2/ops_fstype.c:1738 deactivate_locked_super+0x98/0x160 fs/super.c:332 deactivate_super+0xb1/0xd0 fs/super.c:363 cleanup_mnt+0x2ae/0x3d0 fs/namespace.c:1291 task_work_run+0x16f/0x270 kernel/task_work.c:179 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop kernel/entry/common.c:171 [inline] exit_to_user_mode_prepare+0x23c/0x250 kernel/entry/common.c:203 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fa200e8d567 Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fffcf264548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa200e8d567 RDX: 00007fffcf264619 RSI: 000000000000000a RDI: 00007fffcf264610 RBP: 00007fffcf264610 R08: 00000000ffffffff R09: 00007fffcf2643e0 R10: 0000555555d578b3 R11: 0000000000000246 R12: 00007fa200ee6b24 R13: 00007fffcf2656d0 R14: 0000555555d57810 R15: 00007fffcf265710 ================================================================================