------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2780:24 index 4294967295 is out of range for type 's8[1365]' (aka 'signed char[1365]') CPU: 0 UID: 0 PID: 103 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 ubsan_epilogue+0xa/0x40 lib/ubsan.c:233 __ubsan_handle_out_of_bounds+0xe9/0xf0 lib/ubsan.c:455 dbJoin+0x29f/0x300 fs/jfs/jfs_dmap.c:2780 dbFreeBits+0x4e1/0xdb0 fs/jfs/jfs_dmap.c:2340 dbFreeDmap fs/jfs/jfs_dmap.c:2089 [inline] dbFree+0x336/0x650 fs/jfs/jfs_dmap.c:398 txFreeMap+0x7ff/0xde0 fs/jfs/jfs_txnmgr.c:2534 txUpdateMap+0x308/0x9c0 fs/jfs/jfs_txnmgr.c:-1 txLazyCommit fs/jfs/jfs_txnmgr.c:2664 [inline] jfs_lazycommit+0x43f/0xa90 fs/jfs/jfs_txnmgr.c:2733 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x439/0x7d0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---[ end trace ]--- Kernel panic - not syncing: UBSAN: panic_on_warn set ... CPU: 0 UID: 0 PID: 103 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: dump_stack_lvl+0x99/0x250 lib/dump_stack.c:120 vpanic+0x281/0x750 kernel/panic.c:430 panic+0xb9/0xc0 kernel/panic.c:566 check_panic_on_warn+0x89/0xb0 kernel/panic.c:323 __ubsan_handle_out_of_bounds+0xe9/0xf0 lib/ubsan.c:455 dbJoin+0x29f/0x300 fs/jfs/jfs_dmap.c:2780 dbFreeBits+0x4e1/0xdb0 fs/jfs/jfs_dmap.c:2340 dbFreeDmap fs/jfs/jfs_dmap.c:2089 [inline] dbFree+0x336/0x650 fs/jfs/jfs_dmap.c:398 txFreeMap+0x7ff/0xde0 fs/jfs/jfs_txnmgr.c:2534 txUpdateMap+0x308/0x9c0 fs/jfs/jfs_txnmgr.c:-1 txLazyCommit fs/jfs/jfs_txnmgr.c:2664 [inline] jfs_lazycommit+0x43f/0xa90 fs/jfs/jfs_txnmgr.c:2733 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x439/0x7d0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Kernel Offset: disabled Rebooting in 86400 seconds..