ERROR: (device loop5): remounting filesystem as read-only ERROR: (device loop5): diWrite: ixpxd invalid ERROR: (device loop5): txAbort: ------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:784:21 index -1 is out of range for type 'struct dtslot[128]' CPU: 0 UID: 0 PID: 9228 Comm: syz.5.453 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Call trace: show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C) __dump_stack+0x30/0x40 lib/dump_stack.c:94 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120 dump_stack+0x1c/0x28 lib/dump_stack.c:129 ubsan_epilogue+0x14/0x48 lib/ubsan.c:233 __ubsan_handle_out_of_bounds+0xd0/0xfc lib/ubsan.c:455 dtSearch+0x1664/0x1d00 fs/jfs/jfs_dtree.c:784 jfs_lookup+0x13c/0x32c fs/jfs/namei.c:1461 lookup_open fs/namei.c:4413 [inline] open_last_lookups fs/namei.c:4540 [inline] path_openat+0x1038/0x3114 fs/namei.c:4784 do_filp_open+0x18c/0x36c fs/namei.c:4814 do_open_execat+0x124/0x4d8 fs/exec.c:783 alloc_bprm+0x3c/0x548 fs/exec.c:1409 do_execveat_common+0x168/0x834 fs/exec.c:1810 do_execveat fs/exec.c:1944 [inline] __do_sys_execveat fs/exec.c:2018 [inline] __se_sys_execveat fs/exec.c:2012 [inline] __arm64_sys_execveat+0xd0/0xec fs/exec.c:2012 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x26c arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 ---[ end trace ]--- ERROR: (device loop5): dtSearch: stack overrun! ERROR: (device loop5): remounting filesystem as read-only btstack dump: bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 0, index = 0 jfs_lookup: dtSearch returned -5 ERROR: (device loop5): dtSearch: stack overrun! btstack dump: bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 0, index = 0 jfs_lookup: dtSearch returned -5 ERROR: (device loop5): dtSearch: stack overrun! btstack dump: bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 0, index = 0 jfs_lookup: dtSearch returned -5 ERROR: (device loop5): dtSearch: stack overrun! btstack dump: bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 0, index = 0 jfs_lookup: dtSearch returned -5 ERROR: (device loop5): dtSearch: stack overrun! btstack dump: bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 0, index = 0 jfs_lookup: dtSearch returned -5 ERROR: (device loop5): dtSearch: stack overrun! btstack dump: bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 0, index = 0 jfs_lookup: dtSearch returned -5 ERROR: (device loop5): dtSearch: stack overrun! btstack dump: bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 0, index = 0 jfs_lookup: dtSearch returned -5 ERROR: (device loop5): dtSearch: stack overrun! btstack dump: bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 0, index = 0 jfs_lookup: dtSearch returned -5 ERROR: (device loop5): dtSearch: stack overrun! btstack dump: bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 20, index = 0 bn = 0, index = 0 bn = 0, index = 0 jfs_lookup: dtSearch returned -5 ERROR: (device loop5): dtReadFirst: stbl[0] out of bound