program:
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl812\x00', [0x2f00, 0x20, 0xd09a, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0x5, 0x40000009, 0x830, 0x30000, 0x10000, 0x9, 0x800, 0xe2df, 0x2, 0x8001, 0x7, 0x3, 0x4, 0x5, 0x70f]})
[ 74.804199][ T5335] syz.0.0 (5335) used greatest stack depth: 15[ 74.116534][ T5316] Bluetooth: hci0: command tx timeout
[ 74.148707][ T5335] ------------[ cut here ]------------
[ 74.151174][ T5335] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10
[ 74.180924][ T5335] shift exponent 32 is too large for 32-bit type 'int'
[ 74.184088][ T5335] CPU: 0 UID: 0 PID: 5335 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full)
[ 74.184110][ T5335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.184119][ T5335] Call Trace:
[ 74.184127][ T5335]
[ 74.184133][ T5335] dump_stack_lvl+0x189/0x250
[ 74.184235][ T5335] ? __pfx_dump_stack_lvl+0x10/0x10
[ 74.184253][ T5335] ? __pfx__printk+0x10/0x10
[ 74.184281][ T5335] ubsan_epilogue+0xa/0x40
[ 74.184301][ T5335] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 74.184393][ T5335] pcl812_attach+0x1b9e/0x2300
[ 74.184552][ T5335] comedi_device_attach+0x520/0x670
[ 74.184566][ T5335] comedi_unlocked_ioctl+0x686/0xf40
[ 74.184582][ T5335] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 74.184611][ T5335] ? __lock_acquire+0xab9/0xd20
[ 74.184644][ T5335] ? __fget_files+0x2a/0x420
[ 74.184675][ T5335] ? __fget_files+0x2a/0x420
[ 74.184690][ T5335] ? __fget_files+0x3a0/0x420
[ 74.184704][ T5335] ? __fget_files+0x2a/0x420
[ 74.184728][ T5335] ? bpf_lsm_file_ioctl+0x9/0x20
[ 74.184742][ T5335] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 74.184757][ T5335] __se_sys_ioctl+0xf9/0x170
[ 74.184772][ T5335] do_syscall_64+0xfa/0x3b0
[ 74.184883][ T5335] ? lockdep_hardirqs_on+0x9c/0x150
[ 74.184906][ T5335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.184921][ T5335] ? clear_bhb_loop+0x60/0xb0
[ 74.184936][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.184950][ T5335] RIP: 0033:0x7f8a6878e929
[ 74.184965][ T5335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.184976][ T5335] RSP: 002b:00007f8a6954c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 74.184993][ T5335] RAX: ffffffffffffffda RBX: 00007f8a689b5fa0 RCX: 00007f8a6878e929
[ 74.185003][ T5335] RDX: 0000200000000300 RSI: 0000000040946400 RDI: 0000000000000003
[ 74.185012][ T5335] RBP: 00007f8a68810b39 R08: 0000000000000000 R09: 0000000000000000
[ 74.185021][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 74.185028][ T5335] R13: 0000000000000000 R14: 00007f8a689b5fa0 R15: 00007ffca295f148
[ 74.185050][ T5335]
[ 74.185055][ T5335] ---[ end trace ]---
[ 74.309351][ T5335] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 74.312792][ T5335] CPU: 0 UID: 0 PID: 5335 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full)
[ 74.317567][ T5335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.322284][ T5335] Call Trace:
[ 74.323987][ T5335]
[ 74.325717][ T5335] dump_stack_lvl+0x99/0x250
[ 74.328087][ T5335] ? __asan_memcpy+0x40/0x70
[ 74.330204][ T5335] ? __pfx_dump_stack_lvl+0x10/0x10
[ 74.332428][ T5335] ? __pfx__printk+0x10/0x10
[ 74.334535][ T5335] panic+0x2db/0x790
[ 74.336276][ T5335] ? __pfx_panic+0x10/0x10
[ 74.338087][ T5335] ? _printk+0xcf/0x120
[ 74.340086][ T5335] ? __pfx__printk+0x10/0x10
[ 74.342261][ T5335] check_panic_on_warn+0x89/0xb0
[ 74.344821][ T5335] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 74.347712][ T5335] pcl812_attach+0x1b9e/0x2300
[ 74.349849][ T5335] comedi_device_attach+0x520/0x670
[ 74.352006][ T5335] comedi_unlocked_ioctl+0x686/0xf40
[ 74.354748][ T5335] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 74.358241][ T5335] ? __lock_acquire+0xab9/0xd20
[ 74.361308][ T5335] ? __fget_files+0x2a/0x420
[ 74.363408][ T5335] ? __fget_files+0x2a/0x420
[ 74.365460][ T5335] ? __fget_files+0x3a0/0x420
[ 74.367676][ T5335] ? __fget_files+0x2a/0x420
[ 74.369549][ T5335] ? bpf_lsm_file_ioctl+0x9/0x20
[ 74.371519][ T5335] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 74.373804][ T5335] __se_sys_ioctl+0xf9/0x170
[ 74.375779][ T5335] do_syscall_64+0xfa/0x3b0
[ 74.377843][ T5335] ? lockdep_hardirqs_on+0x9c/0x150
[ 74.380719][ T5335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.384141][ T5335] ? clear_bhb_loop+0x60/0xb0
[ 74.387097][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.389978][ T5335] RIP: 0033:0x7f8a6878e929
[ 74.392026][ T5335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.400176][ T5335] RSP: 002b:00007f8a6954c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 74.405012][ T5335] RAX: ffffffffffffffda RBX: 00007f8a689b5fa0 RCX: 00007f8a6878e929
[ 74.408675][ T5335] RDX: 0000200000000300 RSI: 0000000040946400 RDI: 0000000000000003
[ 74.412083][ T5335] RBP: 00007f8a68810b39 R08: 0000000000000000 R09: 0000000000000000
[ 74.415484][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 74.419120][ T5335] R13: 0000000000000000 R14: 00007f8a689b5fa0 R15: 00007ffca295f148
[ 74.423289][ T5335]
[ 74.425020][ T5335] Kernel Offset: disabled
[ 74.426795][ T5335] Rebooting in 86400 seconds..