program:
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x5275, 0xfffffff8, 0x10000, 0x4, 0xd523, 0x2, 0x8, 0x7, 0xa, 0x104, 0x2, 0x1, 0x2, 0xff8a, 0x6, 0x101, 0x0, 0x5f57d33c, 0x4, 0x3, 0x81, 0x8cd, 0x0, 0x20001e58, 0xb, 0x5, 0x100, 0x8, 0x6, 0x0, 0x2]})
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x5275, 0xfffffff8, 0x10000, 0x4, 0xd523, 0x2, 0x8, 0x7, 0xa, 0x104, 0x2, 0x1, 0x2, 0xff8a, 0x6, 0x101, 0x0, 0x5f57d33c, 0x4, 0x3, 0x81, 0x8cd, 0x0, 0x20001e58, 0xb, 0x5, 0x100, 0x8, 0x6, 0x0, 0x2]}) (async)
[ 75.069324][ T4685] Bluetooth: hci0: command tx timeout
[ 75.136739][ T5336] ------------[ cut here ]------------
[ 75.139111][ T5336] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10
[ 75.142750][ T5336] shift exponent -8 is negative
[ 75.144756][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full)
[ 75.144771][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.144778][ T5336] Call Trace:
[ 75.144785][ T5336]
[ 75.144791][ T5336] dump_stack_lvl+0x189/0x250
[ 75.144877][ T5336] ? __pfx_dump_stack_lvl+0x10/0x10
[ 75.144890][ T5336] ? __pfx__printk+0x10/0x10
[ 75.144912][ T5336] ubsan_epilogue+0xa/0x40
[ 75.144925][ T5336] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 75.144979][ T5336] pcl812_attach+0x1b9e/0x2300
[ 75.145033][ T5336] comedi_device_attach+0x51d/0x670
[ 75.145049][ T5336] comedi_unlocked_ioctl+0x686/0xf40
[ 75.145070][ T5336] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 75.145123][ T5336] ? __lock_acquire+0xab9/0xd20
[ 75.145149][ T5336] ? __fget_files+0x2a/0x420
[ 75.145164][ T5336] ? __fget_files+0x2a/0x420
[ 75.145174][ T5336] ? __fget_files+0x3a0/0x420
[ 75.145186][ T5336] ? __fget_files+0x2a/0x420
[ 75.145201][ T5336] ? bpf_lsm_file_ioctl+0x9/0x20
[ 75.145212][ T5336] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 75.145225][ T5336] __se_sys_ioctl+0xf9/0x170
[ 75.145237][ T5336] do_syscall_64+0xfa/0x3b0
[ 75.145272][ T5336] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.145294][ T5336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.145305][ T5336] ? clear_bhb_loop+0x60/0xb0
[ 75.145313][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.145320][ T5336] RIP: 0033:0x7fee0398e9a9
[ 75.145329][ T5336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 75.145335][ T5336] RSP: 002b:00007fedffdf5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 75.145343][ T5336] RAX: ffffffffffffffda RBX: 00007fee03bb5fa0 RCX: 00007fee0398e9a9
[ 75.145348][ T5336] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[ 75.145352][ T5336] RBP: 00007fee03a10d69 R08: 0000000000000000 R09: 0000000000000000
[ 75.145357][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 75.145363][ T5336] R13: 0000000000000000 R14: 00007fee03bb5fa0 R15: 00007fffba95d2b8
[ 75.145378][ T5336]
[ 75.302137][ T5336] ---[ end trace ]---
[ 75.304048][ T5336] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 75.307096][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full)
[ 75.312448][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.316725][ T5336] Call Trace:
[ 75.318118][ T5336]
[ 75.319395][ T5336] dump_stack_lvl+0x99/0x250
[ 75.321329][ T5336] ? __asan_memcpy+0x40/0x70
[ 75.323362][ T5336] ? __pfx_dump_stack_lvl+0x10/0x10
[ 75.325401][ T5336] ? __pfx__printk+0x10/0x10
[ 75.327474][ T5336] panic+0x2db/0x790
[ 75.329149][ T5336] ? __pfx_panic+0x10/0x10
[ 75.330992][ T5336] ? _printk+0xcf/0x120
[ 75.332849][ T5336] ? __pfx__printk+0x10/0x10
[ 75.334723][ T5336] check_panic_on_warn+0x89/0xb0
[ 75.336878][ T5336] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 75.339625][ T5336] pcl812_attach+0x1b9e/0x2300
[ 75.341656][ T5336] comedi_device_attach+0x51d/0x670
[ 75.344032][ T5336] comedi_unlocked_ioctl+0x686/0xf40
[ 75.346373][ T5336] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 75.348875][ T5336] ? __lock_acquire+0xab9/0xd20
[ 75.351059][ T5336] ? __fget_files+0x2a/0x420
[ 75.353155][ T5336] ? __fget_files+0x2a/0x420
[ 75.355238][ T5336] ? __fget_files+0x3a0/0x420
[ 75.357363][ T5336] ? __fget_files+0x2a/0x420
[ 75.359366][ T5336] ? bpf_lsm_file_ioctl+0x9/0x20
[ 75.361345][ T5336] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 75.363637][ T5336] __se_sys_ioctl+0xf9/0x170
[ 75.365541][ T5336] do_syscall_64+0xfa/0x3b0
[ 75.367307][ T5336] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.369560][ T5336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.372182][ T5336] ? clear_bhb_loop+0x60/0xb0
[ 75.374244][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.376786][ T5336] RIP: 0033:0x7fee0398e9a9
[ 75.378693][ T5336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 75.387191][ T5336] RSP: 002b:00007fedffdf5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 75.391055][ T5336] RAX: ffffffffffffffda RBX: 00007fee03bb5fa0 RCX: 00007fee0398e9a9
[ 75.394731][ T5336] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[ 75.398365][ T5336] RBP: 00007fee03a10d69 R08: 0000000000000000 R09: 0000000000000000
[ 75.401769][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 75.405201][ T5336] R13: 0000000000000000 R14: 00007fee03bb5fa0 R15: 00007fffba95d2b8
[ 75.408693][ T5336]
[ 75.410424][ T5336] Kernel Offset: disabled
[ 75.412476][ T5336] Rebooting in 86400 seconds..