program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
epoll_create(0x2) (async)
epoll_create1(0x0) (async)
write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
r2 = openat$cgroup_pressure(r0, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0)
mkdirat(r3, &(0x7f0000000180)='nullb1\x00', 0x1ff) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='my_configfs/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r4, &(0x7f0000000200)='1\x00', 0x2) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0)
write(r5, &(0x7f0000000280)='128\x00', 0x4) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='my_configfs/nullb/nullb1/size\x00', 0x1, 0x0)
write(r6, &(0x7f0000000300)='1024\x00', 0x5)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='my_configfs/nullb/nullb1/power\x00', 0x1, 0x0)
write(r7, &(0x7f0000000380)='1\x00', 0x2)
[ 109.553567][ T44] Bluetooth: hci0: command tx timeout
[ 109.768110][ T5331] ------------[ cut here ]------------
[ 109.770944][ T5331] UBSAN: shift-out-of-bounds in drivers/block/null_blk/zoned.c:21:14
[ 109.780429][ T5331] shift exponent -1 is negative
[ 109.783300][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 109.783318][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 109.783325][ T5331] Call Trace:
[ 109.783332][ T5331]
[ 109.783339][ T5331] dump_stack_lvl+0xe8/0x150
[ 109.785062][ T5331] ubsan_epilogue+0xa/0x30
[ 109.785077][ T5331] __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[ 109.785156][ T5331] null_process_zoned_cmd+0xf76/0xf80
[ 109.785173][ T5331] ? blk_mq_start_request+0x4bf/0x870
[ 109.785195][ T5331] null_queue_rq+0x8bc/0xe70
[ 109.785222][ T5331] blk_mq_try_issue_directly+0x3f4/0x880
[ 109.785243][ T5331] ? __pfx_blk_mq_try_issue_directly+0x10/0x10
[ 109.785259][ T5331] ? ktime_get+0x1f5/0x220
[ 109.785277][ T5331] ? blk_account_io_start+0x578/0x8c0
[ 109.785292][ T5331] blk_mq_submit_bio+0x20c0/0x2a40
[ 109.785314][ T5331] ? blk_mq_submit_bio+0x306/0x2a40
[ 109.785332][ T5331] ? bio_associate_blkg_from_css+0x10a/0xf80
[ 109.785353][ T5331] ? __pfx_blk_mq_submit_bio+0x10/0x10
[ 109.785367][ T5331] ? blk_cgroup_bio_start+0x5d4/0x670
[ 109.785389][ T5331] ? percpu_ref_put+0x1e/0x230
[ 109.785406][ T5331] ? __pfx_blk_cgroup_bio_start+0x10/0x10
[ 109.785426][ T5331] ? __submit_bio+0x7e/0x340
[ 109.785445][ T5331] submit_bio_noacct_nocheck+0x2f4/0xa40
[ 109.785467][ T5331] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[ 109.785486][ T5331] ? submit_bio_noacct+0xf7b/0x1b20
[ 109.785505][ T5331] ? blkcg_set_ioprio+0x16b/0x2a0
[ 109.785526][ T5331] block_read_full_folio+0x7a6/0x810
[ 109.785543][ T5331] ? __pfx_blkdev_get_block+0x10/0x10
[ 109.785568][ T5331] filemap_read_folio+0x12c/0x3a0
[ 109.785582][ T5331] ? __pfx_blkdev_read_folio+0x10/0x10
[ 109.785599][ T5331] ? __pfx_filemap_read_folio+0x10/0x10
[ 109.785614][ T5331] ? filemap_add_folio+0x350/0x530
[ 109.785636][ T5331] do_read_cache_folio+0x354/0x590
[ 109.785659][ T5331] ? __pfx_blkdev_read_folio+0x10/0x10
[ 109.785681][ T5331] read_part_sector+0xb6/0x2b0
[ 109.785702][ T5331] adfspart_check_ICS+0xb1/0x960
[ 109.785719][ T5331] ? seq_buf_printf+0x212/0x2d0
[ 109.785777][ T5331] ? __pfx_adfspart_check_ICS+0x10/0x10
[ 109.785796][ T5331] ? bdev_disk_changed+0x56c/0x17a0
[ 109.785809][ T5331] ? bdev_disk_changed+0x56c/0x17a0
[ 109.785829][ T5331] bdev_disk_changed+0x851/0x17a0
[ 109.785861][ T5331] ? __pfx_bdev_disk_changed+0x10/0x10
[ 109.785883][ T5331] ? file_init_path+0x42e/0x5a0
[ 109.785901][ T5331] blkdev_get_whole+0x372/0x510
[ 109.785921][ T5331] bdev_open+0x324/0xd70
[ 109.785945][ T5331] bdev_file_open_by_dev+0x1be/0x240
[ 109.785963][ T5331] disk_scan_partitions+0x1bb/0x2c0
[ 109.785979][ T5331] add_disk_fwnode+0x24b/0x3a0
[ 109.785994][ T5331] null_add_dev+0x130b/0x1d70
[ 109.786016][ T5331] ? __pfx_null_add_dev+0x10/0x10
[ 109.786081][ T5331] ? configfs_write_iter+0x238/0x430
[ 109.786104][ T5331] nullb_device_power_store+0x240/0x380
[ 109.786122][ T5331] ? __pfx_nullb_device_power_store+0x10/0x10
[ 109.786142][ T5331] ? down_read+0x2be/0x330
[ 109.786156][ T5331] ? __pfx_nullb_device_power_store+0x10/0x10
[ 109.786174][ T5331] configfs_write_iter+0x337/0x430
[ 109.786193][ T5331] vfs_write+0x612/0xba0
[ 109.786219][ T5331] ? __pfx_vfs_write+0x10/0x10
[ 109.786244][ T5331] ? __fget_files+0x2a/0x420
[ 109.786267][ T5331] ksys_write+0x150/0x270
[ 109.786286][ T5331] ? __pfx_ksys_write+0x10/0x10
[ 109.786309][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.786323][ T5331] do_syscall_64+0x174/0x580
[ 109.786338][ T5331] ? trace_irq_disable+0x3b/0x140
[ 109.786353][ T5331] ? clear_bhb_loop+0x40/0x90
[ 109.786370][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.786381][ T5331] RIP: 0033:0x7f1c32b9e0d9
[ 109.786398][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 109.786407][ T5331] RSP: 002b:00007f1c33aacfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 109.786419][ T5331] RAX: ffffffffffffffda RBX: 00007f1c32e26090 RCX: 00007f1c32b9e0d9
[ 109.786426][ T5331] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000007
[ 109.786440][ T5331] RBP: 00007f1c32c35024 R08: 0000000000000000 R09: 0000000000000000
[ 109.786446][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 109.786454][ T5331] R13: 00007f1c32e26128 R14: 00007f1c32e26090 R15: 00007ffe0dd0b6f8
[ 109.786475][ T5331]
[ 110.009056][ T5331] ---[ end trace ]---
[ 110.011413][ T5331] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 110.015067][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 110.019699][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 110.024528][ T5331] Call Trace:
[ 110.026115][ T5331]
[ 110.027624][ T5331] vpanic+0x56c/0xa60
[ 110.029601][ T5331] ? __pfx_vpanic+0x10/0x10
[ 110.031819][ T5331] ? irqentry_exit+0x218/0x8f0
[ 110.034250][ T5331] panic+0xc5/0xd0
[ 110.036087][ T5331] ? __pfx_panic+0x10/0x10
[ 110.038299][ T5331] ? __pfx__printk+0x10/0x10
[ 110.040489][ T5331] check_panic_on_warn+0x89/0xb0
[ 110.042866][ T5331] __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[ 110.045895][ T5331] null_process_zoned_cmd+0xf76/0xf80
[ 110.048609][ T5331] ? blk_mq_start_request+0x4bf/0x870
[ 110.051282][ T5331] null_queue_rq+0x8bc/0xe70
[ 110.053573][ T5331] blk_mq_try_issue_directly+0x3f4/0x880
[ 110.056114][ T5331] ? __pfx_blk_mq_try_issue_directly+0x10/0x10
[ 110.059001][ T5331] ? ktime_get+0x1f5/0x220
[ 110.061259][ T5331] ? blk_account_io_start+0x578/0x8c0
[ 110.064053][ T5331] blk_mq_submit_bio+0x20c0/0x2a40
[ 110.066622][ T5331] ? blk_mq_submit_bio+0x306/0x2a40
[ 110.068997][ T5331] ? bio_associate_blkg_from_css+0x10a/0xf80
[ 110.071691][ T5331] ? __pfx_blk_mq_submit_bio+0x10/0x10
[ 110.074116][ T5331] ? blk_cgroup_bio_start+0x5d4/0x670
[ 110.076610][ T5331] ? percpu_ref_put+0x1e/0x230
[ 110.079124][ T5331] ? __pfx_blk_cgroup_bio_start+0x10/0x10
[ 110.081944][ T5331] ? __submit_bio+0x7e/0x340
[ 110.084014][ T5331] submit_bio_noacct_nocheck+0x2f4/0xa40
[ 110.086434][ T5331] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[ 110.089246][ T5331] ? submit_bio_noacct+0xf7b/0x1b20
[ 110.091367][ T5331] ? blkcg_set_ioprio+0x16b/0x2a0
[ 110.093736][ T5331] block_read_full_folio+0x7a6/0x810
[ 110.096238][ T5331] ? __pfx_blkdev_get_block+0x10/0x10
[ 110.098790][ T5331] filemap_read_folio+0x12c/0x3a0
[ 110.101149][ T5331] ? __pfx_blkdev_read_folio+0x10/0x10
[ 110.103604][ T5331] ? __pfx_filemap_read_folio+0x10/0x10
[ 110.106184][ T5331] ? filemap_add_folio+0x350/0x530
[ 110.108652][ T5331] do_read_cache_folio+0x354/0x590
[ 110.111100][ T5331] ? __pfx_blkdev_read_folio+0x10/0x10
[ 110.113773][ T5331] read_part_sector+0xb6/0x2b0
[ 110.116049][ T5331] adfspart_check_ICS+0xb1/0x960
[ 110.118239][ T5331] ? seq_buf_printf+0x212/0x2d0
[ 110.120341][ T5331] ? __pfx_adfspart_check_ICS+0x10/0x10
[ 110.123017][ T5331] ? bdev_disk_changed+0x56c/0x17a0
[ 110.125338][ T5331] ? bdev_disk_changed+0x56c/0x17a0
[ 110.127655][ T5331] bdev_disk_changed+0x851/0x17a0
[ 110.129877][ T5331] ? __pfx_bdev_disk_changed+0x10/0x10
[ 110.132343][ T5331] ? file_init_path+0x42e/0x5a0
[ 110.134555][ T5331] blkdev_get_whole+0x372/0x510
[ 110.136809][ T5331] bdev_open+0x324/0xd70
[ 110.138758][ T5331] bdev_file_open_by_dev+0x1be/0x240
[ 110.141104][ T5331] disk_scan_partitions+0x1bb/0x2c0
[ 110.143568][ T5331] add_disk_fwnode+0x24b/0x3a0
[ 110.145713][ T5331] null_add_dev+0x130b/0x1d70
[ 110.147747][ T5331] ? __pfx_null_add_dev+0x10/0x10
[ 110.150107][ T5331] ? configfs_write_iter+0x238/0x430
[ 110.152436][ T5331] nullb_device_power_store+0x240/0x380
[ 110.154827][ T5331] ? __pfx_nullb_device_power_store+0x10/0x10
[ 110.157323][ T5331] ? down_read+0x2be/0x330
[ 110.159663][ T5331] ? __pfx_nullb_device_power_store+0x10/0x10
[ 110.162625][ T5331] configfs_write_iter+0x337/0x430
[ 110.165144][ T5331] vfs_write+0x612/0xba0
[ 110.167320][ T5331] ? __pfx_vfs_write+0x10/0x10
[ 110.169848][ T5331] ? __fget_files+0x2a/0x420
[ 110.171983][ T5331] ksys_write+0x150/0x270
[ 110.173998][ T5331] ? __pfx_ksys_write+0x10/0x10
[ 110.176251][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.179186][ T5331] do_syscall_64+0x174/0x580
[ 110.181530][ T5331] ? trace_irq_disable+0x3b/0x140
[ 110.184100][ T5331] ? clear_bhb_loop+0x40/0x90
[ 110.186195][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.188887][ T5331] RIP: 0033:0x7f1c32b9e0d9
[ 110.191078][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 110.200774][ T5331] RSP: 002b:00007f1c33aacfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 110.204836][ T5331] RAX: ffffffffffffffda RBX: 00007f1c32e26090 RCX: 00007f1c32b9e0d9
[ 110.208877][ T5331] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000007
[ 110.212769][ T5331] RBP: 00007f1c32c35024 R08: 0000000000000000 R09: 0000000000000000
[ 110.216428][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 110.220266][ T5331] R13: 00007f1c32e26128 R14: 00007f1c32e26090 R15: 00007ffe0dd0b6f8
[ 110.224284][ T5331]
[ 110.226276][ T5331] Kernel Offset: disabled
[ 110.228343][ T5331] Rebooting in 86400 seconds..