program: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) gettid() (async) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000200)={'pcl726\x00', [0x4f0, 0x33, 0x2, 0x6, 0x7, 0x1ff, 0x0, 0x9, 0xd7, 0x7, 0x3, 0x2, 0xfffffffe, 0x1, 0x3, 0x9, 0xa, 0x5, 0x4, 0x8, 0x79b, 0x35, 0x8, 0xa7af, 0x0, 0x9, 0x10009, 0xf7f, 0x6, 0x9, 0x7]}) ioctl$COMEDI_SUBDINFO(r5, 0x80486402, &(0x7f0000000080)) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000100)={{r5}, "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"}) [ 74.853671][ T45] Bluetooth: hci0: command tx timeout [ 75.043253][ T5356] ------------[ cut here ]------------ [ 75.046743][ T5356] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl726.c:331:46 [ 75.051585][ T5356] shift exponent 51 is too large for 32-bit type 'int' [ 75.056135][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.0.0 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 75.056151][ T5356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.056157][ T5356] Call Trace: [ 75.056161][ T5356] [ 75.056166][ T5356] dump_stack_lvl+0x189/0x250 [ 75.056876][ T5356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.056884][ T5356] ? __pfx__printk+0x10/0x10 [ 75.056899][ T5356] ubsan_epilogue+0xa/0x40 [ 75.056909][ T5356] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 75.056955][ T5356] ? __kmalloc_noprof+0x29b/0x4f0 [ 75.056972][ T5356] pcl726_attach+0xac4/0xd50 [ 75.057021][ T5356] comedi_device_attach+0x51c/0x720 [ 75.057039][ T5356] comedi_unlocked_ioctl+0x5ff/0x1020 [ 75.057061][ T5356] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.057100][ T5356] ? __lock_acquire+0xab9/0xd20 [ 75.057124][ T5356] ? __fget_files+0x2a/0x420 [ 75.057140][ T5356] ? __fget_files+0x2a/0x420 [ 75.057151][ T5356] ? __fget_files+0x3a0/0x420 [ 75.057163][ T5356] ? __fget_files+0x2a/0x420 [ 75.057178][ T5356] ? bpf_lsm_file_ioctl+0x9/0x20 [ 75.057188][ T5356] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.057201][ T5356] __se_sys_ioctl+0xfc/0x170 [ 75.057213][ T5356] do_syscall_64+0xfa/0x3b0 [ 75.057255][ T5356] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.057268][ T5356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.057277][ T5356] ? clear_bhb_loop+0x60/0xb0 [ 75.057285][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.057291][ T5356] RIP: 0033:0x7fd506f8ebe9 [ 75.057300][ T5356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.057305][ T5356] RSP: 002b:00007fd507e42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.057314][ T5356] RAX: ffffffffffffffda RBX: 00007fd5071b5fa0 RCX: 00007fd506f8ebe9 [ 75.057318][ T5356] RDX: 0000200000000200 RSI: 0000000040946400 RDI: 0000000000000006 [ 75.057322][ T5356] RBP: 00007fd507011e19 R08: 0000000000000000 R09: 0000000000000000 [ 75.057326][ T5356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.057330][ T5356] R13: 00007fd5071b6038 R14: 00007fd5071b5fa0 R15: 00007fff1d8e7e08 [ 75.057345][ T5356] [ 75.057469][ T5356] ---[ end trace ]--- [ 75.180448][ T5356] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 75.183721][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.0.0 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 75.187952][ T5356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.192460][ T5356] Call Trace: [ 75.194226][ T5356] [ 75.195594][ T5356] dump_stack_lvl+0x99/0x250 [ 75.197665][ T5356] ? __asan_memcpy+0x40/0x70 [ 75.199920][ T5356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.202520][ T5356] ? __pfx__printk+0x10/0x10 [ 75.204530][ T5356] vpanic+0x281/0x750 [ 75.206367][ T5356] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.209071][ T5356] ? __pfx_vpanic+0x10/0x10 [ 75.211098][ T5356] panic+0xb9/0xc0 [ 75.213435][ T5356] ? __pfx_panic+0x10/0x10 [ 75.215661][ T5356] ? __pfx__printk+0x10/0x10 [ 75.217877][ T5356] check_panic_on_warn+0x89/0xb0 [ 75.220352][ T5356] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 75.223089][ T5356] ? __kmalloc_noprof+0x29b/0x4f0 [ 75.225172][ T5356] pcl726_attach+0xac4/0xd50 [ 75.227132][ T5356] comedi_device_attach+0x51c/0x720 [ 75.229270][ T5356] comedi_unlocked_ioctl+0x5ff/0x1020 [ 75.231612][ T5356] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.234608][ T5356] ? __lock_acquire+0xab9/0xd20 [ 75.237236][ T5356] ? __fget_files+0x2a/0x420 [ 75.239272][ T5356] ? __fget_files+0x2a/0x420 [ 75.241283][ T5356] ? __fget_files+0x3a0/0x420 [ 75.243339][ T5356] ? __fget_files+0x2a/0x420 [ 75.245500][ T5356] ? bpf_lsm_file_ioctl+0x9/0x20 [ 75.247680][ T5356] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.250224][ T5356] __se_sys_ioctl+0xfc/0x170 [ 75.252557][ T5356] do_syscall_64+0xfa/0x3b0 [ 75.254975][ T5356] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.257728][ T5356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.260378][ T5356] ? clear_bhb_loop+0x60/0xb0 [ 75.262547][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.265142][ T5356] RIP: 0033:0x7fd506f8ebe9 [ 75.267052][ T5356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.275273][ T5356] RSP: 002b:00007fd507e42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.279402][ T5356] RAX: ffffffffffffffda RBX: 00007fd5071b5fa0 RCX: 00007fd506f8ebe9 [ 75.283323][ T5356] RDX: 0000200000000200 RSI: 0000000040946400 RDI: 0000000000000006 [ 75.286690][ T5356] RBP: 00007fd507011e19 R08: 0000000000000000 R09: 0000000000000000 [ 75.290063][ T5356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.293720][ T5356] R13: 00007fd5071b6038 R14: 00007fd5071b5fa0 R15: 00007fff1d8e7e08 [ 75.297699][ T5356] [ 75.300236][ T5356] Kernel Offset: disabled [ 75.302461][ T5356] Rebooting in 86400 seconds..