UBSAN: array-index-out-of-bounds in dtSplitRoot