program: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000200)={{}, [@bcast, @netrom, @remote, @netrom, @remote, @default, @rose, @null]}, &(0x7f0000000280)=0x48) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x3, 'syz0\x00', @bcast, 0x9, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) listen(r0, 0x80000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) (async) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000006480)=ANY=[@ANYBLOB='fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,acl,no_splitbrain_check,hash,uid=', @ANYRES64=0x0, @ANYBLOB="ef3ef0c23683a9582d18944a1e2fcc21bd7f0512bef3e04b71c9d70c26"], 0x1, 0x58f3, &(0x7f0000010b40)="$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") (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x101100, 0x80) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x8010bc01, &(0x7f0000000340)={0x4, 0x10001, 0x6012aef9, 0x1, 0x10002}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x401) writev(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)="01a437d34322a5225babe09258252c55e817f538fe068be9", 0x18}, {&(0x7f00000006c0)='o', 0x1}], 0x2) (async) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'das16m1\x00', [0x2f00, 0xfffffff8, 0xd09b, 0x2, 0x0, 0xfffffffe, 0x1, 0x8, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x9, 0x3, 0x4, 0x5, 0x70f]}) (async, rerun: 32) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) (rerun: 32) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'comedi_test\x00', [0x9e1, 0x2166, 0x0, 0x100000, 0x88d6, 0x8f, 0xfffffffd, 0x10, 0x2, 0xffffffff, 0x200, 0x8, 0x344, 0x1, 0x7, 0x1, 0x9, 0x3, 0x9, 0xe, 0x100, 0x3, 0x80, 0x7ff, 0x1, 0x1, 0xb0c4, 0x7df, 0x8, 0x7, 0x1]}) [ 75.632940][ T45] Bluetooth: hci0: command tx timeout [ 75.744628][ T5343] ------------[ cut here ]------------ [ 75.774680][ T5343] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/das16m1.c:525:9 [ 75.780386][ T5343] shift exponent -8 is negative [ 75.830224][ T5343] CPU: 0 UID: 0 PID: 5343 Comm: syz.0.0 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 75.830245][ T5343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.830253][ T5343] Call Trace: [ 75.830258][ T5343] [ 75.830264][ T5343] dump_stack_lvl+0x189/0x250 [ 75.830367][ T5343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.830381][ T5343] ? __pfx__printk+0x10/0x10 [ 75.830406][ T5343] ubsan_epilogue+0xa/0x40 [ 75.830421][ T5343] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 75.830475][ T5343] ? __comedi_request_region+0x74/0x140 [ 75.830560][ T5343] das16m1_attach+0x8ee/0xb20 [ 75.830580][ T5343] comedi_device_attach+0x520/0x670 [ 75.830596][ T5343] comedi_unlocked_ioctl+0x686/0xf40 [ 75.830618][ T5343] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.830652][ T5343] ? __lock_acquire+0xab9/0xd20 [ 75.830676][ T5343] ? __fget_files+0x2a/0x420 [ 75.830692][ T5343] ? __fget_files+0x2a/0x420 [ 75.830706][ T5343] ? __fget_files+0x3a0/0x420 [ 75.830719][ T5343] ? __fget_files+0x2a/0x420 [ 75.830735][ T5343] ? bpf_lsm_file_ioctl+0x9/0x20 [ 75.830747][ T5343] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.830762][ T5343] __se_sys_ioctl+0xfc/0x170 [ 75.830777][ T5343] do_syscall_64+0xfa/0x3b0 [ 75.830823][ T5343] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.830840][ T5343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.830850][ T5343] ? clear_bhb_loop+0x60/0xb0 [ 75.830864][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.830875][ T5343] RIP: 0033:0x7f1b92b8e929 [ 75.830895][ T5343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.830905][ T5343] RSP: 002b:00007f1b939ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.830919][ T5343] RAX: ffffffffffffffda RBX: 00007f1b92db6160 RCX: 00007f1b92b8e929 [ 75.830927][ T5343] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000004 [ 75.830934][ T5343] RBP: 00007f1b92c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.830941][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.830948][ T5343] R13: 0000000000000000 R14: 00007f1b92db6160 R15: 00007fff0bef4e48 [ 75.830966][ T5343] [ 75.830971][ T5343] ---[ end trace ]--- [ 76.055343][ T5343] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 76.060948][ T5343] CPU: 0 UID: 0 PID: 5343 Comm: syz.0.0 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 76.070516][ T5343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.085933][ T5343] Call Trace: [ 76.090204][ T5343] [ 76.094474][ T5343] dump_stack_lvl+0x99/0x250 [ 76.100697][ T5343] ? __asan_memcpy+0x40/0x70 [ 76.107016][ T5343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.113399][ T5343] ? __pfx__printk+0x10/0x10 [ 76.117199][ T5343] panic+0x2db/0x790 [ 76.120743][ T5343] ? __pfx_panic+0x10/0x10 [ 76.124185][ T5343] ? _printk+0xcf/0x120 [ 76.127648][ T5343] ? __pfx__printk+0x10/0x10 [ 76.131774][ T5343] check_panic_on_warn+0x89/0xb0 [ 76.139945][ T5343] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 76.147829][ T5343] ? __comedi_request_region+0x74/0x140 [ 76.151568][ T5343] das16m1_attach+0x8ee/0xb20 [ 76.155566][ T5343] comedi_device_attach+0x520/0x670 [ 76.161370][ T5343] comedi_unlocked_ioctl+0x686/0xf40 [ 76.168566][ T5343] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 76.175265][ T5343] ? __lock_acquire+0xab9/0xd20 [ 76.181505][ T5343] ? __fget_files+0x2a/0x420 [ 76.187268][ T5343] ? __fget_files+0x2a/0x420 [ 76.193451][ T5343] ? __fget_files+0x3a0/0x420 [ 76.197267][ T5343] ? __fget_files+0x2a/0x420 [ 76.201649][ T5343] ? bpf_lsm_file_ioctl+0x9/0x20 [ 76.209774][ T5343] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 76.222428][ T5343] __se_sys_ioctl+0xfc/0x170 [ 76.225582][ T5343] do_syscall_64+0xfa/0x3b0 [ 76.228682][ T5343] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.234796][ T5343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.241184][ T5343] ? clear_bhb_loop+0x60/0xb0 [ 76.244014][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.248370][ T5343] RIP: 0033:0x7f1b92b8e929 [ 76.270850][ T5343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.278817][ T5343] RSP: 002b:00007f1b939ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.282377][ T5343] RAX: ffffffffffffffda RBX: 00007f1b92db6160 RCX: 00007f1b92b8e929 [ 76.286287][ T5343] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000004 [ 76.294262][ T5343] RBP: 00007f1b92c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 76.301905][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.321467][ T5343] R13: 0000000000000000 R14: 00007f1b92db6160 R15: 00007fff0bef4e48 [ 76.324811][ T5343] [ 76.326490][ T5343] Kernel Offset: disabled [ 76.328345][ T5343] Rebooting in 86400 seconds..