program: r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcl726\x00', [0xa61f, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x1, 0x9, 0x0, 0x1, 0xb687, 0x1, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x9, 0x6, 0x5, 0x3ff, 0x10000, 0x7ff, 0xe2df, 0x9, 0x1, 0x4, 0x3, 0x1, 0xb, 0x5]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000001140)={[{@minixdf}, {@nodelalloc}, {@minixdf}]}, 0x10, 0x236, &(0x7f0000000300)="$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") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4480}, 0x20000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x2, 0x3}, 0x20) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000005580)=[{{&(0x7f0000000080)={0xa, 0x4e03, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000880)={0xa, 0x4e22, 0x2, @local, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1400000000000000290000000b35c4427000f762e8ba6590a3cd146da604b49b05f1000900000000d54bf11dfdfb069b0c61a4c76181384836a5cf82db248d59b2523d7b4c296a4241a9135ddad48a87b81cb1a50001"], 0x18}}], 0x2, 0x4000084) syz_read_part_table(0x1057, &(0x7f0000000000)="$eJzsz8GJwlAUBdD7J5NhwiymhEkTU4pYgzsbkGApboON2YG4iUQ/pgIR4ZzF59/L48ELL9WV5G9Tw/m49Le3yXfb5SO7R//VD11+Dttlw/7UJtNvqbEfk891kv/LHGs9zd/hPl9qWdKsxudeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADv4RoAAP//uvwMeg==") r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r6, 0x29, 0xd1, 0x0, 0x4) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYRESOCT, @ANYRESDEC], 0x1, 0x1df, &(0x7f00000002c0)="$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") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x92, 0x2, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, @perf_config_ext={0xdc, 0x7fffffffffffffff}, 0x0, 0xe7, 0x6, 0x7, 0x6, 0x80000004, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, r8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x47}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r10, 0x402c5639, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x80}]}, 0x10) bind$inet6(r12, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r12, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x840, 0x2d) [ 74.755265][ T5321] Bluetooth: hci0: command tx timeout [ 74.840735][ T5342] ------------[ cut here ]------------ [ 74.846786][ T5342] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl726.c:331:46 [ 74.913093][ T5343] loop0: detected capacity change from 0 to 128 [ 74.957854][ T5342] shift exponent -2147450880 is negative [ 74.970068][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 74.970087][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.970095][ T5342] Call Trace: [ 74.970101][ T5342] [ 74.970107][ T5342] dump_stack_lvl+0x189/0x250 [ 74.970217][ T5342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.970232][ T5342] ? __pfx__printk+0x10/0x10 [ 74.970258][ T5342] ubsan_epilogue+0xa/0x40 [ 74.970276][ T5342] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 74.970328][ T5342] ? __kmalloc_noprof+0x29b/0x4f0 [ 74.970351][ T5342] pcl726_attach+0xac4/0xd50 [ 74.970399][ T5342] comedi_device_attach+0x520/0x670 [ 74.970413][ T5342] comedi_unlocked_ioctl+0x686/0xf40 [ 74.970434][ T5342] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.970462][ T5342] ? __lock_acquire+0xab9/0xd20 [ 74.970487][ T5342] ? __fget_files+0x2a/0x420 [ 74.970504][ T5342] ? __fget_files+0x2a/0x420 [ 74.970518][ T5342] ? __fget_files+0x3a0/0x420 [ 74.970531][ T5342] ? __fget_files+0x2a/0x420 [ 74.970549][ T5342] ? bpf_lsm_file_ioctl+0x9/0x20 [ 74.970563][ T5342] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.970579][ T5342] __se_sys_ioctl+0xfc/0x170 [ 74.970593][ T5342] do_syscall_64+0xfa/0x3b0 [ 74.970635][ T5342] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.970647][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.970660][ T5342] ? clear_bhb_loop+0x60/0xb0 [ 74.970676][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.970687][ T5342] RIP: 0033:0x7f140d18e929 [ 74.970700][ T5342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.970712][ T5342] RSP: 002b:00007f140dfdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.970726][ T5342] RAX: ffffffffffffffda RBX: 00007f140d3b5fa0 RCX: 00007f140d18e929 [ 74.970734][ T5342] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 74.970742][ T5342] RBP: 00007f140d210b39 R08: 0000000000000000 R09: 0000000000000000 [ 74.970750][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.970758][ T5342] R13: 0000000000000000 R14: 00007f140d3b5fa0 R15: 00007ffd13d1c158 [ 74.970779][ T5342] [ 74.970783][ T5342] ---[ end trace ]--- [ 75.218681][ T5343] ======================================================= [ 75.218681][ T5343] WARNING: The mand mount option has been deprecated and [ 75.218681][ T5343] and is ignored by this kernel. Remove the mand [ 75.218681][ T5343] option from the mount to silence this warning. [ 75.218681][ T5343] ======================================================= [ 75.338275][ T5342] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 75.348472][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 75.358116][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.369948][ T5342] Call Trace: [ 75.371468][ T5342] [ 75.372798][ T5342] dump_stack_lvl+0x99/0x250 [ 75.374764][ T5342] ? __asan_memcpy+0x40/0x70 [ 75.376723][ T5342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.389617][ T5342] ? __pfx__printk+0x10/0x10 [ 75.392324][ T5342] panic+0x2db/0x790 [ 75.394449][ T5342] ? __pfx_panic+0x10/0x10 [ 75.396861][ T5342] ? _printk+0xcf/0x120 [ 75.410199][ T5342] ? __pfx__printk+0x10/0x10 [ 75.413010][ T5342] check_panic_on_warn+0x89/0xb0 [ 75.415528][ T5342] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 75.428253][ T5342] ? __kmalloc_noprof+0x29b/0x4f0 [ 75.430608][ T5342] pcl726_attach+0xac4/0xd50 [ 75.432758][ T5342] comedi_device_attach+0x520/0x670 [ 75.442316][ T5342] comedi_unlocked_ioctl+0x686/0xf40 [ 75.448495][ T5342] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.470976][ T5342] ? __lock_acquire+0xab9/0xd20 [ 75.473204][ T5342] ? __fget_files+0x2a/0x420 [ 75.475347][ T5342] ? __fget_files+0x2a/0x420 [ 75.491262][ T5342] ? __fget_files+0x3a0/0x420 [ 75.493513][ T5342] ? __fget_files+0x2a/0x420 [ 75.495673][ T5342] ? bpf_lsm_file_ioctl+0x9/0x20 [ 75.508263][ T5342] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.511102][ T5342] __se_sys_ioctl+0xfc/0x170 [ 75.513380][ T5342] do_syscall_64+0xfa/0x3b0 [ 75.515500][ T5342] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.528182][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.531204][ T5342] ? clear_bhb_loop+0x60/0xb0 [ 75.533409][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.541761][ T5342] RIP: 0033:0x7f140d18e929 [ 75.543660][ T5342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.567908][ T5342] RSP: 002b:00007f140dfdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.578457][ T5342] RAX: ffffffffffffffda RBX: 00007f140d3b5fa0 RCX: 00007f140d18e929 [ 75.582330][ T5342] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 75.586034][ T5342] RBP: 00007f140d210b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.600609][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.605319][ T5342] R13: 0000000000000000 R14: 00007f140d3b5fa0 R15: 00007ffd13d1c158 [ 75.625474][ T5342] [ 75.627093][ T5342] Kernel Offset: disabled [ 75.628975][ T5342] Rebooting in 86400 seconds..