program:
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcl812\x00', [0x2f00, 0x20, 0xd09a, 0x2, 0x101, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x9, 0x3, 0x4, 0x5, 0x70f]})
[ 76.351335][ T4691] Bluetooth: hci0: command tx timeout
[ 76.423940][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.427034][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 76.434586][ T5342] ------------[ cut here ]------------
[ 76.437075][ T5342] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10
[ 76.440600][ T5342] shift exponent 32 is too large for 32-bit type 'int'
[ 76.462177][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full)
[ 76.462195][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 76.462203][ T5342] Call Trace:
[ 76.462208][ T5342]
[ 76.462213][ T5342] dump_stack_lvl+0x189/0x250
[ 76.462309][ T5342] ? __pfx_dump_stack_lvl+0x10/0x10
[ 76.462324][ T5342] ? __pfx__printk+0x10/0x10
[ 76.462349][ T5342] ubsan_epilogue+0xa/0x40
[ 76.462364][ T5342] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 76.462421][ T5342] pcl812_attach+0x1b9e/0x2300
[ 76.462476][ T5342] comedi_device_attach+0x520/0x670
[ 76.462496][ T5342] comedi_unlocked_ioctl+0x686/0xf40
[ 76.462520][ T5342] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 76.462556][ T5342] ? __lock_acquire+0xab9/0xd20
[ 76.462582][ T5342] ? __fget_files+0x2a/0x420
[ 76.462600][ T5342] ? __fget_files+0x2a/0x420
[ 76.462613][ T5342] ? __fget_files+0x3a0/0x420
[ 76.462628][ T5342] ? __fget_files+0x2a/0x420
[ 76.462643][ T5342] ? bpf_lsm_file_ioctl+0x9/0x20
[ 76.462656][ T5342] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 76.462670][ T5342] __se_sys_ioctl+0xfc/0x170
[ 76.462683][ T5342] do_syscall_64+0xfa/0x3b0
[ 76.462724][ T5342] ? lockdep_hardirqs_on+0x9c/0x150
[ 76.462737][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.462748][ T5342] ? clear_bhb_loop+0x60/0xb0
[ 76.462764][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.462775][ T5342] RIP: 0033:0x7f282418e929
[ 76.462785][ T5342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 76.462794][ T5342] RSP: 002b:00007f2825064038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 76.462808][ T5342] RAX: ffffffffffffffda RBX: 00007f28243b5fa0 RCX: 00007f282418e929
[ 76.462815][ T5342] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[ 76.462822][ T5342] RBP: 00007f2824210b39 R08: 0000000000000000 R09: 0000000000000000
[ 76.462827][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 76.462833][ T5342] R13: 0000000000000000 R14: 00007f28243b5fa0 R15: 00007ffeb5502eb8
[ 76.462852][ T5342]
[ 76.462856][ T5342] ---[ end trace ]---
[ 76.578331][ T5342] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 76.581799][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full)
[ 76.586648][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 76.591364][ T5342] Call Trace:
[ 76.593092][ T5342]
[ 76.594592][ T5342] dump_stack_lvl+0x99/0x250
[ 76.596682][ T5342] ? __asan_memcpy+0x40/0x70
[ 76.598733][ T5342] ? __pfx_dump_stack_lvl+0x10/0x10
[ 76.601044][ T5342] ? __pfx__printk+0x10/0x10
[ 76.603088][ T5342] panic+0x2db/0x790
[ 76.604843][ T5342] ? __pfx_panic+0x10/0x10
[ 76.606780][ T5342] ? _printk+0xcf/0x120
[ 76.608724][ T5342] ? __pfx__printk+0x10/0x10
[ 76.610962][ T5342] check_panic_on_warn+0x89/0xb0
[ 76.613442][ T5342] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 76.616449][ T5342] pcl812_attach+0x1b9e/0x2300
[ 76.618719][ T5342] comedi_device_attach+0x520/0x670
[ 76.621022][ T5342] comedi_unlocked_ioctl+0x686/0xf40
[ 76.623371][ T5342] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 76.625872][ T5342] ? __lock_acquire+0xab9/0xd20
[ 76.628033][ T5342] ? __fget_files+0x2a/0x420
[ 76.630224][ T5342] ? __fget_files+0x2a/0x420
[ 76.632493][ T5342] ? __fget_files+0x3a0/0x420
[ 76.634836][ T5342] ? __fget_files+0x2a/0x420
[ 76.637051][ T5342] ? bpf_lsm_file_ioctl+0x9/0x20
[ 76.639325][ T5342] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 76.641962][ T5342] __se_sys_ioctl+0xfc/0x170
[ 76.644110][ T5342] do_syscall_64+0xfa/0x3b0
[ 76.646164][ T5342] ? lockdep_hardirqs_on+0x9c/0x150
[ 76.648240][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.651080][ T5342] ? clear_bhb_loop+0x60/0xb0
[ 76.653243][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.655895][ T5342] RIP: 0033:0x7f282418e929
[ 76.657895][ T5342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 76.666178][ T5342] RSP: 002b:00007f2825064038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 76.670045][ T5342] RAX: ffffffffffffffda RBX: 00007f28243b5fa0 RCX: 00007f282418e929
[ 76.673522][ T5342] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[ 76.676815][ T5342] RBP: 00007f2824210b39 R08: 0000000000000000 R09: 0000000000000000
[ 76.680193][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 76.683798][ T5342] R13: 0000000000000000 R14: 00007f28243b5fa0 R15: 00007ffeb5502eb8
[ 76.686978][ T5342]
[ 76.688555][ T5342] Kernel Offset: disabled
[ 76.690216][ T5342] Rebooting in 86400 seconds..