program: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800620c4d878c3b4c23cf000018000000340000001400000003000000010000000100000f01000000fefffffffeffffff01000000d1000000000000000f02000000868e04000000000000"], 0x0, 0x4f}, 0x28) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000100)='./file2\x00', 0x418, &(0x7f0000000340)=ANY=[@ANYBLOB="0008b0cf8098a954f0c13d46c5f2da99dd78517bdc8c78047b090ec8e43f7def3d6e7ff57769de041cb1ee36eb9ef0278f3613aa6fc0a70281e7bdbe594f689dbe20a5c5b893c3751e0d41a772d4e6963860d07e3f3f06b10f3eeb3aa2324f6e3d348cf3fa4536d200214110447005e899317ac49bdb087c7ee9c6a7f01bf8f94692bfa45daf2422901aa20a1e0b8736e57abc12ff197cc72bc4b25cfc4ae212b63861ba8545d2000000000000000000ccd1c12bb71e6040ea5c", @ANYBLOB="68e277d01697a2e9feba147aeeaaa1017b81bfc9410475c0153ad021a10a41e171e245a5c6a81074587482ff8c1b070066ff13850a4009a9f54a31a54dbb87f6d9bca9ea70f5b7ff43b4c17bfdda825552b8c95a7ab3f4a00665d2c9c0b8464a4335d5e2"], 0x1, 0x14fe, &(0x7f0000001540)="$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") chmod(&(0x7f00000000c0)='./file0/file0\x00', 0x10d) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a00000308000000", @ANYRES32=0x0, @ANYBLOB="d447c8ed4c66000cea0069d9e341b2846df9b89836c7b143b2385ed5aec69e13a4d26028c49f175c6747c16d68145da295985113df81ed9483f12ac366db87a065cd416881ccef8540eabaf5780c3919161354d20f5193bc5c3d8bf1907434cf81f26bc862d95e"], 0x1c}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xfffffffffffffff7}]}) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x442, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x24, 0x10000, 0x10000004, 0x5, 0xcc7, 0xfff, 0x0, 0x3, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xc, 0xe69, 0x3c, 0xfffffffd, 0x106, 0x8000000, 0xfffffff8]}) [ 74.500506][ T5317] Bluetooth: hci0: command tx timeout [ 74.587467][ T5336] loop0: detected capacity change from 0 to 256 [ 74.643253][ T5336] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x9119b7e0) [ 74.647498][ T5336] exFAT-fs (loop0): invalid boot region [ 74.649609][ T5336] exFAT-fs (loop0): failed to recognize exfat type [ 74.750809][ T5336] ------------[ cut here ]------------ [ 74.753364][ T5336] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/aio_iiro_16.c:180:9 [ 74.756996][ T5336] shift exponent 36 is too large for 32-bit type 'int' [ 74.761562][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 74.761579][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.761585][ T5336] Call Trace: [ 74.761591][ T5336] [ 74.761596][ T5336] dump_stack_lvl+0x189/0x250 [ 74.761693][ T5336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.761708][ T5336] ? __pfx__printk+0x10/0x10 [ 74.761724][ T5336] ? preempt_schedule_irq+0xde/0x150 [ 74.761766][ T5336] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 74.761777][ T5336] ? __pfx___request_region_locked+0x10/0x10 [ 74.761791][ T5336] ubsan_epilogue+0xa/0x40 [ 74.761801][ T5336] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 74.761859][ T5336] aio_iiro_16_attach+0x5e8/0x790 [ 74.761906][ T5336] comedi_device_attach+0x51d/0x670 [ 74.761924][ T5336] comedi_unlocked_ioctl+0x686/0xf40 [ 74.761946][ T5336] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.761979][ T5336] ? __lock_acquire+0xab9/0xd20 [ 74.762003][ T5336] ? __fget_files+0x2a/0x420 [ 74.762020][ T5336] ? __fget_files+0x2a/0x420 [ 74.762034][ T5336] ? __fget_files+0x3a0/0x420 [ 74.762047][ T5336] ? __fget_files+0x2a/0x420 [ 74.762062][ T5336] ? bpf_lsm_file_ioctl+0x9/0x20 [ 74.762074][ T5336] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.762088][ T5336] __se_sys_ioctl+0xf9/0x170 [ 74.762102][ T5336] do_syscall_64+0xfa/0x3b0 [ 74.762112][ T5336] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.762121][ T5336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.762131][ T5336] ? clear_bhb_loop+0x60/0xb0 [ 74.762144][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.762155][ T5336] RIP: 0033:0x7f91dbf8e9a9 [ 74.762167][ T5336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.762177][ T5336] RSP: 002b:00007f91dcd48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.762188][ T5336] RAX: ffffffffffffffda RBX: 00007f91dc1b5fa0 RCX: 00007f91dbf8e9a9 [ 74.762196][ T5336] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000009 [ 74.762203][ T5336] RBP: 00007f91dc010d69 R08: 0000000000000000 R09: 0000000000000000 [ 74.762208][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.762240][ T5336] R13: 0000000000000000 R14: 00007f91dc1b5fa0 R15: 00007fff4e38afc8 [ 74.762261][ T5336] [ 74.762265][ T5336] ---[ end trace ]--- [ 74.873546][ T5336] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 74.876909][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 74.882281][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.887728][ T5336] Call Trace: [ 74.889388][ T5336] [ 74.890797][ T5336] dump_stack_lvl+0x99/0x250 [ 74.892811][ T5336] ? __asan_memcpy+0x40/0x70 [ 74.894936][ T5336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.897113][ T5336] ? __pfx__printk+0x10/0x10 [ 74.899046][ T5336] panic+0x2db/0x790 [ 74.900940][ T5336] ? __pfx_panic+0x10/0x10 [ 74.903811][ T5336] ? _printk+0xcf/0x120 [ 74.905898][ T5336] ? __pfx__printk+0x10/0x10 [ 74.908422][ T5336] ? preempt_schedule_irq+0xde/0x150 [ 74.911119][ T5336] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 74.913747][ T5336] check_panic_on_warn+0x89/0xb0 [ 74.916053][ T5336] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 74.918830][ T5336] aio_iiro_16_attach+0x5e8/0x790 [ 74.921003][ T5336] comedi_device_attach+0x51d/0x670 [ 74.923232][ T5336] comedi_unlocked_ioctl+0x686/0xf40 [ 74.925433][ T5336] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.928306][ T5336] ? __lock_acquire+0xab9/0xd20 [ 74.930691][ T5336] ? __fget_files+0x2a/0x420 [ 74.932838][ T5336] ? __fget_files+0x2a/0x420 [ 74.934807][ T5336] ? __fget_files+0x3a0/0x420 [ 74.936698][ T5336] ? __fget_files+0x2a/0x420 [ 74.938562][ T5336] ? bpf_lsm_file_ioctl+0x9/0x20 [ 74.940600][ T5336] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.942846][ T5336] __se_sys_ioctl+0xf9/0x170 [ 74.944788][ T5336] do_syscall_64+0xfa/0x3b0 [ 74.946694][ T5336] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.949005][ T5336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.952016][ T5336] ? clear_bhb_loop+0x60/0xb0 [ 74.954419][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.956854][ T5336] RIP: 0033:0x7f91dbf8e9a9 [ 74.958778][ T5336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.966618][ T5336] RSP: 002b:00007f91dcd48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.970108][ T5336] RAX: ffffffffffffffda RBX: 00007f91dc1b5fa0 RCX: 00007f91dbf8e9a9 [ 74.973410][ T5336] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000009 [ 74.976894][ T5336] RBP: 00007f91dc010d69 R08: 0000000000000000 R09: 0000000000000000 [ 74.980444][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.983807][ T5336] R13: 0000000000000000 R14: 00007f91dc1b5fa0 R15: 00007fff4e38afc8 [ 74.987283][ T5336] [ 74.989077][ T5336] Kernel Offset: disabled [ 74.990886][ T5336] Rebooting in 86400 seconds..