ERROR: (device loop3): dtReadFirst: stbl[0] out of bound ERROR: (device loop3): remounting filesystem as read-only ------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:784:21 index -1 is out of range for type 'struct dtslot[128]' CPU: 0 UID: 0 PID: 7344 Comm: syz.3.123 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Call trace: show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C) __dump_stack+0x30/0x40 lib/dump_stack.c:94 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120 dump_stack+0x1c/0x28 lib/dump_stack.c:129 ubsan_epilogue+0x14/0x48 lib/ubsan.c:233 __ubsan_handle_out_of_bounds+0xd0/0xfc lib/ubsan.c:455 dtSearch+0x1664/0x1d00 fs/jfs/jfs_dtree.c:784 jfs_lookup+0x13c/0x32c fs/jfs/namei.c:1461 __lookup_slow+0x254/0x378 fs/namei.c:1858 lookup_slow+0x5c/0x80 fs/namei.c:1875 walk_component fs/namei.c:2221 [inline] link_path_walk+0xaf8/0x152c fs/namei.c:2589 path_parentat fs/namei.c:2793 [inline] __filename_parentat+0x1c8/0x544 fs/namei.c:2817 filename_parentat fs/namei.c:2835 [inline] filename_create+0xd0/0x2d8 fs/namei.c:4860 do_mkdirat+0xc8/0x448 fs/namei.c:5156 __do_sys_mkdirat fs/namei.c:5186 [inline] __se_sys_mkdirat fs/namei.c:5184 [inline] __arm64_sys_mkdirat+0x8c/0xa4 fs/namei.c:5184 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x26c arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 ---[ end trace ]--- MetaData crosses page boundary!! lblock = f8f8f8f8f8, size = -1886420992 CPU: 0 UID: 0 PID: 7344 Comm: syz.3.123 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Call trace: show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C) __dump_stack+0x30/0x40 lib/dump_stack.c:94 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120 dump_stack+0x1c/0x28 lib/dump_stack.c:129 __get_metapage+0x9ac/0xe90 fs/jfs/jfs_metapage.c:705 dtSearch+0x50c/0x1d00 fs/jfs/jfs_dtree.c:624 jfs_lookup+0x13c/0x32c fs/jfs/namei.c:1461 __lookup_slow+0x254/0x378 fs/namei.c:1858 lookup_slow+0x5c/0x80 fs/namei.c:1875 walk_component fs/namei.c:2221 [inline] link_path_walk+0xaf8/0x152c fs/namei.c:2589 path_parentat fs/namei.c:2793 [inline] __filename_parentat+0x1c8/0x544 fs/namei.c:2817 filename_parentat fs/namei.c:2835 [inline] filename_create+0xd0/0x2d8 fs/namei.c:4860 do_mkdirat+0xc8/0x448 fs/namei.c:5156 __do_sys_mkdirat fs/namei.c:5186 [inline] __se_sys_mkdirat fs/namei.c:5184 [inline] __arm64_sys_mkdirat+0x8c/0xa4 fs/namei.c:5184 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x26c arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 bread failed! jfs_lookup: dtSearch returned -5 MetaData crosses page boundary!! lblock = f8f8f8f8f8, size = -1886420992 CPU: 0 UID: 0 PID: 7344 Comm: syz.3.123 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Call trace: show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C) __dump_stack+0x30/0x40 lib/dump_stack.c:94 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120 dump_stack+0x1c/0x28 lib/dump_stack.c:129 __get_metapage+0x9ac/0xe90 fs/jfs/jfs_metapage.c:705 dtSearch+0x50c/0x1d00 fs/jfs/jfs_dtree.c:624 jfs_lookup+0x13c/0x32c fs/jfs/namei.c:1461 __lookup_slow+0x254/0x378 fs/namei.c:1858 lookup_slow+0x5c/0x80 fs/namei.c:1875 walk_component fs/namei.c:2221 [inline] link_path_walk+0xaf8/0x152c fs/namei.c:2589 path_lookupat+0xc0/0x780 fs/namei.c:2745 do_o_path+0xa0/0x1d0 fs/namei.c:4758 path_openat+0x2ab8/0x3114 fs/namei.c:4780 do_filp_open+0x18c/0x36c fs/namei.c:4814 do_sys_openat2+0x11c/0x1f0 fs/open.c:1430 do_sys_open fs/open.c:1436 [inline] __do_sys_openat fs/open.c:1452 [inline] __se_sys_openat fs/open.c:1447 [inline] __arm64_sys_openat+0x120/0x158 fs/open.c:1447 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x26c arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 bread failed! jfs_lookup: dtSearch returned -5