program:
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'pcl812\x00', [0x2f00, 0x20, 0xd09a, 0xffffffff, 0x5, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0x5, 0x40000009, 0x832, 0x30000, 0x10000, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x1ff, 0x3, 0x4, 0x5, 0x70d]})
[ 86.423890][ T5320] Bluetooth: hci0: command tx timeout
[ 86.545712][ T5346] ------------[ cut here ]------------
[ 86.548000][ T5346] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10
[ 86.551350][ T5346] shift exponent 32 is too large for 32-bit type 'int'
[ 86.574277][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full)
[ 86.574290][ T5346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 86.574296][ T5346] Call Trace:
[ 86.574300][ T5346]
[ 86.574303][ T5346] dump_stack_lvl+0x189/0x250
[ 86.574399][ T5346] ? __pfx_dump_stack_lvl+0x10/0x10
[ 86.574415][ T5346] ? __pfx__printk+0x10/0x10
[ 86.574465][ T5346] ubsan_epilogue+0xa/0x40
[ 86.574484][ T5346] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 86.574531][ T5346] pcl812_attach+0x1b9e/0x2300
[ 86.574581][ T5346] comedi_device_attach+0x520/0x670
[ 86.574600][ T5346] comedi_unlocked_ioctl+0x686/0xf40
[ 86.574622][ T5346] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 86.574647][ T5346] ? __lock_acquire+0xab9/0xd20
[ 86.574663][ T5346] ? __fget_files+0x2a/0x420
[ 86.574674][ T5346] ? __fget_files+0x2a/0x420
[ 86.574683][ T5346] ? __fget_files+0x3a0/0x420
[ 86.574692][ T5346] ? __fget_files+0x2a/0x420
[ 86.574707][ T5346] ? bpf_lsm_file_ioctl+0x9/0x20
[ 86.574718][ T5346] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 86.574733][ T5346] __se_sys_ioctl+0xf9/0x170
[ 86.574747][ T5346] do_syscall_64+0xfa/0x3b0
[ 86.574792][ T5346] ? lockdep_hardirqs_on+0x9c/0x150
[ 86.574813][ T5346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.574826][ T5346] ? clear_bhb_loop+0x60/0xb0
[ 86.574842][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.574853][ T5346] RIP: 0033:0x7f349478e929
[ 86.574879][ T5346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 86.574891][ T5346] RSP: 002b:00007f34956c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 86.574904][ T5346] RAX: ffffffffffffffda RBX: 00007f34949b5fa0 RCX: 00007f349478e929
[ 86.574912][ T5346] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 86.574920][ T5346] RBP: 00007f3494810b39 R08: 0000000000000000 R09: 0000000000000000
[ 86.574928][ T5346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.574935][ T5346] R13: 0000000000000000 R14: 00007f34949b5fa0 R15: 00007fff6bf87938
[ 86.574953][ T5346]
[ 86.574958][ T5346] ---[ end trace ]---
[ 86.689820][ T5346] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 86.693056][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full)
[ 86.697466][ T5346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 86.702130][ T5346] Call Trace:
[ 86.703618][ T5346]
[ 86.704971][ T5346] dump_stack_lvl+0x99/0x250
[ 86.707025][ T5346] ? __asan_memcpy+0x40/0x70
[ 86.709068][ T5346] ? __pfx_dump_stack_lvl+0x10/0x10
[ 86.711327][ T5346] ? __pfx__printk+0x10/0x10
[ 86.713577][ T5346] panic+0x2db/0x790
[ 86.715530][ T5346] ? __pfx_panic+0x10/0x10
[ 86.717769][ T5346] ? _printk+0xcf/0x120
[ 86.719859][ T5346] ? __pfx__printk+0x10/0x10
[ 86.722034][ T5346] check_panic_on_warn+0x89/0xb0
[ 86.724265][ T5346] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 86.727075][ T5346] pcl812_attach+0x1b9e/0x2300
[ 86.729258][ T5346] comedi_device_attach+0x520/0x670
[ 86.731611][ T5346] comedi_unlocked_ioctl+0x686/0xf40
[ 86.734174][ T5346] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 86.736877][ T5346] ? __lock_acquire+0xab9/0xd20
[ 86.739206][ T5346] ? __fget_files+0x2a/0x420
[ 86.741310][ T5346] ? __fget_files+0x2a/0x420
[ 86.743431][ T5346] ? __fget_files+0x3a0/0x420
[ 86.745573][ T5346] ? __fget_files+0x2a/0x420
[ 86.747652][ T5346] ? bpf_lsm_file_ioctl+0x9/0x20
[ 86.750074][ T5346] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 86.752945][ T5346] __se_sys_ioctl+0xf9/0x170
[ 86.755116][ T5346] do_syscall_64+0xfa/0x3b0
[ 86.757060][ T5346] ? lockdep_hardirqs_on+0x9c/0x150
[ 86.759354][ T5346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.762201][ T5346] ? clear_bhb_loop+0x60/0xb0
[ 86.764302][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.766929][ T5346] RIP: 0033:0x7f349478e929
[ 86.768874][ T5346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 86.777473][ T5346] RSP: 002b:00007f34956c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 86.781246][ T5346] RAX: ffffffffffffffda RBX: 00007f34949b5fa0 RCX: 00007f349478e929
[ 86.784761][ T5346] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 86.788201][ T5346] RBP: 00007f3494810b39 R08: 0000000000000000 R09: 0000000000000000
[ 86.791695][ T5346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.795212][ T5346] R13: 0000000000000000 R14: 00007f34949b5fa0 R15: 00007fff6bf87938
[ 86.798627][ T5346]
[ 86.800323][ T5346] Kernel Offset: disabled
[ 86.802297][ T5346] Rebooting in 86400 seconds..