program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)='1\n', 0x2) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nullb/nullb1/power\x00', 0x2, 0x0)
write(r1, &(0x7f0000000600)='1\n', 0x2)
nanosleep(&(0x7f0000001400)={0x1}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt\x00', 0x1ff) (async)
symlinkat(&(0x7f0000000040)='./config/nullb/nullb1/power/file0\x00', r0, &(0x7f0000000080)='./config\x00') (async)
r2 = fsopen(&(0x7f0000001100)='zonefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001200)='source\x00', &(0x7f0000001000)='/dev/nullb1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
move_mount(r3, &(0x7f0000001300)='\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./mnt\x00', 0x4)
[ 116.109003][ T4643] Bluetooth: hci0: command tx timeout
[ 116.339390][ T25] audit: type=1800 audit(1786383628.674:2): pid=5317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="zoned" dev="configfs" ino=4210 res=0 errno=0
[ 116.386751][ T25] audit: type=1800 audit(1786383628.694:3): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="power" dev="configfs" ino=4211 res=0 errno=0
[ 116.472910][ T5318] ------------[ cut here ]------------
[ 116.475212][ T5318] UBSAN: shift-out-of-bounds in drivers/block/null_blk/zoned.c:21:14
[ 116.502691][ T5318] shift exponent -1 is negative
[ 116.505520][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 116.505538][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 116.505546][ T5318] Call Trace:
[ 116.505554][ T5318]
[ 116.505561][ T5318] dump_stack_lvl+0xe8/0x150
[ 116.505629][ T5318] ubsan_epilogue+0xa/0x30
[ 116.505642][ T5318] __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[ 116.505708][ T5318] null_process_zoned_cmd+0xf76/0xf80
[ 116.505729][ T5318] ? blk_mq_start_request+0x4bf/0x870
[ 116.505745][ T5318] null_queue_rq+0x8bc/0xe70
[ 116.505767][ T5318] blk_mq_try_issue_directly+0x3f4/0x880
[ 116.505785][ T5318] ? __pfx_blk_mq_try_issue_directly+0x10/0x10
[ 116.505798][ T5318] ? ktime_get+0x1f5/0x220
[ 116.505815][ T5318] ? blk_account_io_start+0x578/0x8c0
[ 116.505830][ T5318] blk_mq_submit_bio+0x20c0/0x2a40
[ 116.505845][ T5318] ? blk_mq_submit_bio+0x306/0x2a40
[ 116.505861][ T5318] ? bio_associate_blkg_from_css+0x10a/0xf80
[ 116.505878][ T5318] ? __pfx_blk_mq_submit_bio+0x10/0x10
[ 116.505890][ T5318] ? blk_cgroup_bio_start+0x5d4/0x670
[ 116.505906][ T5318] ? percpu_ref_put+0x1e/0x230
[ 116.505920][ T5318] ? __pfx_blk_cgroup_bio_start+0x10/0x10
[ 116.505946][ T5318] ? __submit_bio+0x7e/0x340
[ 116.505964][ T5318] submit_bio_noacct_nocheck+0x2f4/0xa40
[ 116.505983][ T5318] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[ 116.506000][ T5318] ? submit_bio_noacct+0xf7b/0x1b20
[ 116.506016][ T5318] ? blkcg_set_ioprio+0x16b/0x2a0
[ 116.506034][ T5318] block_read_full_folio+0x7a6/0x810
[ 116.506052][ T5318] ? __pfx_blkdev_get_block+0x10/0x10
[ 116.506070][ T5318] filemap_read_folio+0x12c/0x3a0
[ 116.506091][ T5318] ? __pfx_blkdev_read_folio+0x10/0x10
[ 116.506105][ T5318] ? __pfx_filemap_read_folio+0x10/0x10
[ 116.506123][ T5318] ? filemap_add_folio+0x350/0x530
[ 116.506142][ T5318] do_read_cache_folio+0x354/0x590
[ 116.506155][ T5318] ? __pfx_blkdev_read_folio+0x10/0x10
[ 116.506174][ T5318] read_part_sector+0xb6/0x2b0
[ 116.506192][ T5318] adfspart_check_ICS+0xb1/0x960
[ 116.506208][ T5318] ? seq_buf_printf+0x212/0x2d0
[ 116.506293][ T5318] ? __pfx_adfspart_check_ICS+0x10/0x10
[ 116.506314][ T5318] ? bdev_disk_changed+0x56c/0x17a0
[ 116.506327][ T5318] ? bdev_disk_changed+0x56c/0x17a0
[ 116.506346][ T5318] bdev_disk_changed+0x851/0x17a0
[ 116.506375][ T5318] ? __pfx_bdev_disk_changed+0x10/0x10
[ 116.506393][ T5318] ? file_init_path+0x42e/0x5a0
[ 116.506409][ T5318] blkdev_get_whole+0x372/0x510
[ 116.506427][ T5318] bdev_open+0x324/0xd70
[ 116.506447][ T5318] bdev_file_open_by_dev+0x1be/0x240
[ 116.506464][ T5318] disk_scan_partitions+0x1bb/0x2c0
[ 116.506483][ T5318] add_disk_fwnode+0x24b/0x3a0
[ 116.506503][ T5318] null_add_dev+0x130b/0x1d70
[ 116.506522][ T5318] ? __pfx_null_add_dev+0x10/0x10
[ 116.506551][ T5318] ? configfs_write_iter+0x238/0x430
[ 116.506572][ T5318] nullb_device_power_store+0x240/0x380
[ 116.506591][ T5318] ? __pfx_nullb_device_power_store+0x10/0x10
[ 116.506607][ T5318] ? down_read+0x2be/0x330
[ 116.506624][ T5318] ? __pfx_nullb_device_power_store+0x10/0x10
[ 116.506640][ T5318] configfs_write_iter+0x337/0x430
[ 116.506658][ T5318] vfs_write+0x612/0xba0
[ 116.506681][ T5318] ? __pfx_vfs_write+0x10/0x10
[ 116.506705][ T5318] ? __fget_files+0x2a/0x420
[ 116.506725][ T5318] ksys_write+0x150/0x270
[ 116.506743][ T5318] ? __pfx_ksys_write+0x10/0x10
[ 116.506764][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.506778][ T5318] do_syscall_64+0x174/0x580
[ 116.506792][ T5318] ? trace_irq_disable+0x3b/0x140
[ 116.506806][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 116.506821][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.506832][ T5318] RIP: 0033:0x7fc02339e0d9
[ 116.506845][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 116.506855][ T5318] RSP: 002b:00007fc01f7d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 116.506868][ T5318] RAX: ffffffffffffffda RBX: 00007fc023626090 RCX: 00007fc02339e0d9
[ 116.506876][ T5318] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000004
[ 116.506882][ T5318] RBP: 00007fc023435024 R08: 0000000000000000 R09: 0000000000000000
[ 116.506889][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 116.506896][ T5318] R13: 00007fc023626128 R14: 00007fc023626090 R15: 00007ffd1af9d228
[ 116.506915][ T5318]
[ 116.943181][ T5318] ---[ end trace ]---
[ 116.945419][ T5318] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 116.949055][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 116.953245][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 116.957496][ T5318] Call Trace:
[ 116.971538][ T5318]
[ 116.973318][ T5318] vpanic+0x56c/0xa60
[ 116.975666][ T5318] ? __pfx_vpanic+0x10/0x10
[ 116.982996][ T5318] ? irqentry_exit+0x218/0x8f0
[ 116.986178][ T5318] panic+0xc5/0xd0
[ 116.992809][ T5318] ? __pfx_panic+0x10/0x10
[ 117.000894][ T5318] ? __pfx__printk+0x10/0x10
[ 117.004289][ T5318] check_panic_on_warn+0x89/0xb0
[ 117.011314][ T5318] __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[ 117.021060][ T5318] null_process_zoned_cmd+0xf76/0xf80
[ 117.023883][ T5318] ? blk_mq_start_request+0x4bf/0x870
[ 117.027128][ T5318] null_queue_rq+0x8bc/0xe70
[ 117.030153][ T5318] blk_mq_try_issue_directly+0x3f4/0x880
[ 117.034039][ T5318] ? __pfx_blk_mq_try_issue_directly+0x10/0x10
[ 117.037901][ T5318] ? ktime_get+0x1f5/0x220
[ 117.040282][ T5318] ? blk_account_io_start+0x578/0x8c0
[ 117.045624][ T5318] blk_mq_submit_bio+0x20c0/0x2a40
[ 117.050124][ T5318] ? blk_mq_submit_bio+0x306/0x2a40
[ 117.053495][ T5318] ? bio_associate_blkg_from_css+0x10a/0xf80
[ 117.057268][ T5318] ? __pfx_blk_mq_submit_bio+0x10/0x10
[ 117.060850][ T5318] ? blk_cgroup_bio_start+0x5d4/0x670
[ 117.064240][ T5318] ? percpu_ref_put+0x1e/0x230
[ 117.067274][ T5318] ? __pfx_blk_cgroup_bio_start+0x10/0x10
[ 117.071011][ T5318] ? __submit_bio+0x7e/0x340
[ 117.074007][ T5318] submit_bio_noacct_nocheck+0x2f4/0xa40
[ 117.077624][ T5318] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[ 117.081963][ T5318] ? submit_bio_noacct+0xf7b/0x1b20
[ 117.086180][ T5318] ? blkcg_set_ioprio+0x16b/0x2a0
[ 117.090759][ T5318] block_read_full_folio+0x7a6/0x810
[ 117.097565][ T5318] ? __pfx_blkdev_get_block+0x10/0x10
[ 117.105860][ T5318] filemap_read_folio+0x12c/0x3a0
[ 117.111625][ T5318] ? __pfx_blkdev_read_folio+0x10/0x10
[ 117.117245][ T5318] ? __pfx_filemap_read_folio+0x10/0x10
[ 117.122976][ T5318] ? filemap_add_folio+0x350/0x530
[ 117.128430][ T5318] do_read_cache_folio+0x354/0x590
[ 117.134995][ T5318] ? __pfx_blkdev_read_folio+0x10/0x10
[ 117.146218][ T5318] read_part_sector+0xb6/0x2b0
[ 117.148338][ T5318] adfspart_check_ICS+0xb1/0x960
[ 117.152718][ T5318] ? seq_buf_printf+0x212/0x2d0
[ 117.154904][ T5318] ? __pfx_adfspart_check_ICS+0x10/0x10
[ 117.157379][ T5318] ? bdev_disk_changed+0x56c/0x17a0
[ 117.159674][ T5318] ? bdev_disk_changed+0x56c/0x17a0
[ 117.183973][ T5318] bdev_disk_changed+0x851/0x17a0
[ 117.192057][ T5318] ? __pfx_bdev_disk_changed+0x10/0x10
[ 117.197278][ T5318] ? file_init_path+0x42e/0x5a0
[ 117.202280][ T5318] blkdev_get_whole+0x372/0x510
[ 117.207984][ T5318] bdev_open+0x324/0xd70
[ 117.215682][ T5318] bdev_file_open_by_dev+0x1be/0x240
[ 117.226316][ T5318] disk_scan_partitions+0x1bb/0x2c0
[ 117.236450][ T5318] add_disk_fwnode+0x24b/0x3a0
[ 117.246204][ T5318] null_add_dev+0x130b/0x1d70
[ 117.256091][ T5318] ? __pfx_null_add_dev+0x10/0x10
[ 117.265135][ T5318] ? configfs_write_iter+0x238/0x430
[ 117.276116][ T5318] nullb_device_power_store+0x240/0x380
[ 117.283050][ T5318] ? __pfx_nullb_device_power_store+0x10/0x10
[ 117.297155][ T5318] ? down_read+0x2be/0x330
[ 117.306526][ T5318] ? __pfx_nullb_device_power_store+0x10/0x10
[ 117.317334][ T5318] configfs_write_iter+0x337/0x430
[ 117.326070][ T5318] vfs_write+0x612/0xba0
[ 117.333387][ T5318] ? __pfx_vfs_write+0x10/0x10
[ 117.341886][ T5318] ? __fget_files+0x2a/0x420
[ 117.348431][ T5318] ksys_write+0x150/0x270
[ 117.354508][ T5318] ? __pfx_ksys_write+0x10/0x10
[ 117.362378][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.371924][ T5318] do_syscall_64+0x174/0x580
[ 117.379193][ T5318] ? trace_irq_disable+0x3b/0x140
[ 117.382603][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 117.384732][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.387395][ T5318] RIP: 0033:0x7fc02339e0d9
[ 117.389595][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 117.428846][ T5318] RSP: 002b:00007fc01f7d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 117.450572][ T5318] RAX: ffffffffffffffda RBX: 00007fc023626090 RCX: 00007fc02339e0d9
[ 117.466451][ T5318] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000004
[ 117.482676][ T5318] RBP: 00007fc023435024 R08: 0000000000000000 R09: 0000000000000000
[ 117.492617][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 117.496057][ T5318] R13: 00007fc023626128 R14: 00007fc023626090 R15: 00007ffd1af9d228
[ 117.499623][ T5318]
[ 117.517723][ T5318] Kernel Offset: disabled
[ 117.524709][ T5318] Rebooting in 86400 seconds..