ci starts bisection 2023-02-28 12:45:25.181865159 +0000 UTC m=+33451.129752894
bisecting fixing commit since b229b6ca5abbd63ff40c1396095b1b36b18139c3
building syzkaller on 2a71366bacf3bf9a3a1a149e631fb15a7d0f2077
ensuring issue is reproducible on original commit b229b6ca5abbd63ff40c1396095b1b36b18139c3

testing commit b229b6ca5abbd63ff40c1396095b1b36b18139c3 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: e0068cdde42a88b9d65b1107c7ad06cb4229f4c9f0c733c73649e54b78c18128
all runs: crashed: UBSAN: shift-out-of-bounds in dbFindCtl
testing current HEAD ae3419fbac845b4d3f3a9fae4cc80c68d82cdf6e
testing commit ae3419fbac845b4d3f3a9fae4cc80c68d82cdf6e gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: d7843c350f80ea90992a3907f9c1ea8976207f9e52a50072f4fe66cfdb299f24
all runs: crashed: UBSAN: shift-out-of-bounds in dbMount
revisions tested: 2, total time: 20m23.414875467s (build: 13m27.10164602s, test: 6m14.228239929s)
the crash still happens on HEAD
commit msg: vc_screen: don't clobber return value in vcs_read
crash: UBSAN: shift-out-of-bounds in dbMount
loop0: detected capacity change from 0 to 32768
================================================================================
UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:201:29
shift exponent -1 is negative
CPU: 1 PID: 5631 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x8a/0xa0 lib/dump_stack.c:106
 ubsan_epilogue lib/ubsan.c:217 [inline]
 __ubsan_handle_shift_out_of_bounds+0x156/0x2f0 lib/ubsan.c:387
 dbMount.cold+0x20/0x4a fs/jfs/jfs_dmap.c:201
 jfs_mount+0x1fe/0x6e0 fs/jfs/jfs_mount.c:121
 jfs_fill_super+0x54f/0xbe0 fs/jfs/super.c:556
 mount_bdev+0x2cb/0x3b0 fs/super.c:1371
 legacy_get_tree+0xfa/0x1f0 fs/fs_context.c:610
 vfs_get_tree+0x7f/0x320 fs/super.c:1501
 do_new_mount fs/namespace.c:3042 [inline]
 path_mount+0x829/0x1a20 fs/namespace.c:3372
 do_mount fs/namespace.c:3385 [inline]
 __do_sys_mount fs/namespace.c:3594 [inline]
 __se_sys_mount fs/namespace.c:3571 [inline]
 __x64_sys_mount+0x1f5/0x260 fs/namespace.c:3571
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f4bd6c8cada
Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f4bd7a1cf88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f4bd6c8cada
RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f4bd7a1cfe0
RBP: 00007f4bd7a1d020 R08: 00007f4bd7a1d020 R09: 0000000020000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000
R13: 0000000020000100 R14: 00007f4bd7a1cfe0 R15: 0000000020005980
 </TASK>
================================================================================