program:
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x20, 0x4, 0x4, 0x5, 0x6, 0x6, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x2001e, 0x1, 0x0, 0x1a449, 0x3, 0x6, 0x81, 0xcaa7, 0x4, 0x1e58, 0xb, 0x3, 0x3c, 0x8, 0x80000000, 0x0, 0xa38e]})
[ 73.922992][ T4685] Bluetooth: hci0: command tx timeout
[ 73.957031][ T5337] ------------[ cut here ]------------
[ 73.959434][ T5337] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/aio_iiro_16.c:180:9
[ 73.981059][ T5337] shift exponent 32 is too large for 32-bit type 'int'
[ 73.989086][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full)
[ 73.989106][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 73.989114][ T5337] Call Trace:
[ 73.989120][ T5337]
[ 73.989126][ T5337] dump_stack_lvl+0x189/0x250
[ 73.989207][ T5337] ? __pfx_dump_stack_lvl+0x10/0x10
[ 73.989223][ T5337] ? __pfx__printk+0x10/0x10
[ 73.989247][ T5337] ? __pfx___request_region_locked+0x10/0x10
[ 73.989270][ T5337] ubsan_epilogue+0xa/0x40
[ 73.989286][ T5337] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 73.989340][ T5337] ? __request_region+0xc2/0xe0
[ 73.989390][ T5337] ? comedi_request_region+0x7b/0x180
[ 73.989436][ T5337] aio_iiro_16_attach+0x5e8/0x790
[ 73.989455][ T5337] comedi_device_attach+0x520/0x670
[ 73.989474][ T5337] comedi_unlocked_ioctl+0x686/0xf40
[ 73.989501][ T5337] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 73.989542][ T5337] ? __lock_acquire+0xab9/0xd20
[ 73.989573][ T5337] ? __fget_files+0x2a/0x420
[ 73.989594][ T5337] ? __fget_files+0x2a/0x420
[ 73.989611][ T5337] ? __fget_files+0x3a0/0x420
[ 73.989626][ T5337] ? __fget_files+0x2a/0x420
[ 73.989645][ T5337] ? bpf_lsm_file_ioctl+0x9/0x20
[ 73.989659][ T5337] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 73.989676][ T5337] __se_sys_ioctl+0xf9/0x170
[ 73.989692][ T5337] do_syscall_64+0xfa/0x3b0
[ 73.989732][ T5337] ? lockdep_hardirqs_on+0x9c/0x150
[ 73.989751][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 73.989765][ T5337] ? clear_bhb_loop+0x60/0xb0
[ 73.989785][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 73.989798][ T5337] RIP: 0033:0x7efd4718e929
[ 73.989811][ T5337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 73.989822][ T5337] RSP: 002b:00007efd47f5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 73.989837][ T5337] RAX: ffffffffffffffda RBX: 00007efd473b5fa0 RCX: 00007efd4718e929
[ 73.989847][ T5337] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[ 73.989856][ T5337] RBP: 00007efd47210b39 R08: 0000000000000000 R09: 0000000000000000
[ 73.989870][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 73.989877][ T5337] R13: 0000000000000000 R14: 00007efd473b5fa0 R15: 00007ffcd11ab118
[ 73.989897][ T5337]
[ 73.989901][ T5337] ---[ end trace ]---
[ 74.120617][ T5337] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 74.123845][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full)
[ 74.128198][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.133014][ T5337] Call Trace:
[ 74.134544][ T5337]
[ 74.135881][ T5337] dump_stack_lvl+0x99/0x250
[ 74.137934][ T5337] ? __asan_memcpy+0x40/0x70
[ 74.139931][ T5337] ? __pfx_dump_stack_lvl+0x10/0x10
[ 74.142399][ T5337] ? __pfx__printk+0x10/0x10
[ 74.144744][ T5337] panic+0x2db/0x790
[ 74.146615][ T5337] ? __pfx_panic+0x10/0x10
[ 74.148631][ T5337] ? _printk+0xcf/0x120
[ 74.150551][ T5337] ? __pfx__printk+0x10/0x10
[ 74.152762][ T5337] check_panic_on_warn+0x89/0xb0
[ 74.154881][ T5337] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 74.157549][ T5337] ? __request_region+0xc2/0xe0
[ 74.159607][ T5337] ? comedi_request_region+0x7b/0x180
[ 74.161910][ T5337] aio_iiro_16_attach+0x5e8/0x790
[ 74.164307][ T5337] comedi_device_attach+0x520/0x670
[ 74.166731][ T5337] comedi_unlocked_ioctl+0x686/0xf40
[ 74.169071][ T5337] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 74.171506][ T5337] ? __lock_acquire+0xab9/0xd20
[ 74.173578][ T5337] ? __fget_files+0x2a/0x420
[ 74.175587][ T5337] ? __fget_files+0x2a/0x420
[ 74.177516][ T5337] ? __fget_files+0x3a0/0x420
[ 74.179477][ T5337] ? __fget_files+0x2a/0x420
[ 74.181482][ T5337] ? bpf_lsm_file_ioctl+0x9/0x20
[ 74.183678][ T5337] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 74.186261][ T5337] __se_sys_ioctl+0xf9/0x170
[ 74.188339][ T5337] do_syscall_64+0xfa/0x3b0
[ 74.190449][ T5337] ? lockdep_hardirqs_on+0x9c/0x150
[ 74.192671][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.195210][ T5337] ? clear_bhb_loop+0x60/0xb0
[ 74.197194][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.199785][ T5337] RIP: 0033:0x7efd4718e929
[ 74.201721][ T5337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.210234][ T5337] RSP: 002b:00007efd47f5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 74.213759][ T5337] RAX: ffffffffffffffda RBX: 00007efd473b5fa0 RCX: 00007efd4718e929
[ 74.217139][ T5337] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[ 74.220434][ T5337] RBP: 00007efd47210b39 R08: 0000000000000000 R09: 0000000000000000
[ 74.223806][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 74.227258][ T5337] R13: 0000000000000000 R14: 00007efd473b5fa0 R15: 00007ffcd11ab118
[ 74.230704][ T5337]
[ 74.232405][ T5337] Kernel Offset: disabled
[ 74.234390][ T5337] Rebooting in 86400 seconds..