program:
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'das16m1\x00', [0x2f00, 0x5, 0xd09a, 0x2, 0x0, 0xfffffffe, 0x1, 0x6, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x9, 0x3, 0x4, 0x5, 0x70f]})
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'pcl726\x00', [0x9e1, 0x2166, 0x0, 0x100000, 0x88d6, 0x8f, 0xfffffffd, 0x1, 0x2, 0xffffffff, 0x200, 0x8, 0x344, 0x1, 0x8, 0x1, 0xb, 0x3, 0x9, 0xe, 0x10100, 0x9, 0x80, 0x7ff, 0x1, 0x1, 0xb0c4, 0x7df, 0x8, 0x8, 0x8000]})
[ 75.005911][ T4689] Bluetooth: hci0: command tx timeout
[ 75.109844][ T5342] ------------[ cut here ]------------
[ 75.112465][ T5342] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl726.c:331:46
[ 75.122380][ T5342] shift exponent 8550 is too large for 32-bit type 'int'
[ 75.125975][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full)
[ 75.125995][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.126005][ T5342] Call Trace:
[ 75.126010][ T5342]
[ 75.126016][ T5342] dump_stack_lvl+0x189/0x250
[ 75.126129][ T5342] ? __pfx_dump_stack_lvl+0x10/0x10
[ 75.126146][ T5342] ? __pfx__printk+0x10/0x10
[ 75.126219][ T5342] ubsan_epilogue+0xa/0x40
[ 75.126248][ T5342] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 75.126338][ T5342] ? __kmalloc_noprof+0x29b/0x4f0
[ 75.126361][ T5342] pcl726_attach+0xac4/0xd50
[ 75.126423][ T5342] comedi_device_attach+0x520/0x670
[ 75.126443][ T5342] comedi_unlocked_ioctl+0x686/0xf40
[ 75.126461][ T5342] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 75.126486][ T5342] ? __lock_acquire+0xab9/0xd20
[ 75.126504][ T5342] ? __fget_files+0x2a/0x420
[ 75.126518][ T5342] ? __fget_files+0x2a/0x420
[ 75.126529][ T5342] ? __fget_files+0x3a0/0x420
[ 75.126538][ T5342] ? __fget_files+0x2a/0x420
[ 75.126551][ T5342] ? bpf_lsm_file_ioctl+0x9/0x20
[ 75.126560][ T5342] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 75.126570][ T5342] __se_sys_ioctl+0xfc/0x170
[ 75.126584][ T5342] do_syscall_64+0xfa/0x3b0
[ 75.126631][ T5342] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.126652][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.126665][ T5342] ? clear_bhb_loop+0x60/0xb0
[ 75.126679][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.126689][ T5342] RIP: 0033:0x7f98e5d8e929
[ 75.126703][ T5342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 75.126713][ T5342] RSP: 002b:00007f98e6be5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 75.126727][ T5342] RAX: ffffffffffffffda RBX: 00007f98e5fb6080 RCX: 00007f98e5d8e929
[ 75.126735][ T5342] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000004
[ 75.126743][ T5342] RBP: 00007f98e5e10b39 R08: 0000000000000000 R09: 0000000000000000
[ 75.126751][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 75.126758][ T5342] R13: 0000000000000000 R14: 00007f98e5fb6080 R15: 00007fff67ac0758
[ 75.126779][ T5342]
[ 75.126783][ T5342] ---[ end trace ]---
[ 75.241001][ T5342] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 75.244324][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full)
[ 75.249951][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.254650][ T5342] Call Trace:
[ 75.256006][ T5342]
[ 75.257392][ T5342] dump_stack_lvl+0x99/0x250
[ 75.259251][ T5342] ? __asan_memcpy+0x40/0x70
[ 75.261323][ T5342] ? __pfx_dump_stack_lvl+0x10/0x10
[ 75.263438][ T5342] ? __pfx__printk+0x10/0x10
[ 75.265679][ T5342] panic+0x2db/0x790
[ 75.268119][ T5342] ? __pfx_panic+0x10/0x10
[ 75.271103][ T5342] ? _printk+0xcf/0x120
[ 75.274366][ T5342] ? __pfx__printk+0x10/0x10
[ 75.277494][ T5342] check_panic_on_warn+0x89/0xb0
[ 75.280046][ T5342] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 75.282998][ T5342] ? __kmalloc_noprof+0x29b/0x4f0
[ 75.285148][ T5342] pcl726_attach+0xac4/0xd50
[ 75.286794][ T5342] comedi_device_attach+0x520/0x670
[ 75.288816][ T5342] comedi_unlocked_ioctl+0x686/0xf40
[ 75.290875][ T5342] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 75.293486][ T5342] ? __lock_acquire+0xab9/0xd20
[ 75.295719][ T5342] ? __fget_files+0x2a/0x420
[ 75.297803][ T5342] ? __fget_files+0x2a/0x420
[ 75.299996][ T5342] ? __fget_files+0x3a0/0x420
[ 75.302402][ T5342] ? __fget_files+0x2a/0x420
[ 75.304587][ T5342] ? bpf_lsm_file_ioctl+0x9/0x20
[ 75.306796][ T5342] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 75.309301][ T5342] __se_sys_ioctl+0xfc/0x170
[ 75.311209][ T5342] do_syscall_64+0xfa/0x3b0
[ 75.313964][ T5342] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.317525][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.321205][ T5342] ? clear_bhb_loop+0x60/0xb0
[ 75.323375][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.326284][ T5342] RIP: 0033:0x7f98e5d8e929
[ 75.328019][ T5342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 75.336071][ T5342] RSP: 002b:00007f98e6be5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 75.339522][ T5342] RAX: ffffffffffffffda RBX: 00007f98e5fb6080 RCX: 00007f98e5d8e929
[ 75.342942][ T5342] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000004
[ 75.345975][ T5342] RBP: 00007f98e5e10b39 R08: 0000000000000000 R09: 0000000000000000
[ 75.348690][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 75.351895][ T5342] R13: 0000000000000000 R14: 00007f98e5fb6080 R15: 00007fff67ac0758
[ 75.355505][ T5342]
[ 75.357328][ T5342] Kernel Offset: disabled
[ 75.359287][ T5342] Rebooting in 86400 seconds..