program:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="200a0200000093"], 0x0, 0x0})
clock_gettime(0x4, &(0x7f0000000000))
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0)
write(r2, &(0x7f0000000640)='3', 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000680)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000340)='\x00\x00\x00')
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x33)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b400000000000018691132000000000016000000000000009500740000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000500)={r4})
getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000540)={@dev, @local, @broadcast}, &(0x7f0000000580)=0xc)
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000380)="0a000100010000000001")
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000780)={0xa, 0x4004, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x46}, 0x9}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x4e, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f00000003c0)="0b00020002000000010001")
openat$snapshot(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000900)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r6, 0xe)
[ 93.797653][ T111] cfg80211: failed to load regulatory.db
[ 93.819163][ T5280] Bluetooth: hci0: command tx timeout
[ 94.233040][ T5313] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 94.384097][ T5313] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[ 94.386806][ T5313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 94.386823][ T5313] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 94.391328][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 94.391343][ T5313] usb 5-1: Product: syz
[ 94.391350][ T5313] usb 5-1: Manufacturer: syz
[ 94.391357][ T5313] usb 5-1: SerialNumber: syz
[ 95.056336][ T5326] video0: VIDIOC_CREATE_BUFS: error -22: index=0, count=0, memory=(null), capabilities=0x00000000, max num buffers=0, type=0
[ 95.465497][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI
[ 95.476001][ C0] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
[ 95.479706][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.483429][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.487608][ C0] RIP: 0010:gb_operation_message_alloc+0x174/0x280
[ 95.490544][ C0] Code: 00 e8 10 96 8e f8 48 8b 3d 79 48 a1 12 48 89 de e8 01 93 f5 f8 e9 94 00 00 00 e8 f7 95 8e f8 41 83 c7 08 4c 89 f0 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 91 00 00 00 66 45 89 3e 49 8d 7e 02 48 89
[ 95.498604][ C0] RSP: 0018:ffffc900000078a8 EFLAGS: 00010002
[ 95.501236][ C0] RAX: 0000000000000002 RBX: ffff8880534bcec0 RCX: ffffffff8fa8f000
[ 95.504523][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 000000000000007f
[ 95.507834][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000000
[ 95.511147][ C0] R10: ffff8880534bcec0 R11: fffffbfff20b477f R12: 0000000000000000
[ 95.514427][ C0] R13: 0000000000000800 R14: 0000000000000010 R15: 0000000000000000
[ 95.517585][ C0] FS: 0000000000000000(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000
[ 95.521690][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.524587][ C0] CR2: 0000200000000380 CR3: 0000000013132000 CR4: 0000000000352ef0
[ 95.527833][ C0] Call Trace:
[ 95.529295][ C0]
[ 95.530558][ C0] gb_operation_create_common+0xa9/0x650
[ 95.532935][ C0] gb_connection_recv+0x284/0x1280
[ 95.535083][ C0] ? __pfx_gb_connection_recv+0x10/0x10
[ 95.537395][ C0] ? do_raw_spin_unlock+0x4d/0x200
[ 95.539718][ C0] greybus_data_rcvd+0x22c/0x550
[ 95.541634][ C0] cport_in_callback+0x1bd/0x3b0
[ 95.543643][ C0] __usb_hcd_giveback_urb+0x378/0x540
[ 95.545978][ C0] dummy_timer+0xa91/0x4cc0
[ 95.547908][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 95.549986][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 95.552357][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 95.554498][ C0] __hrtimer_run_queues+0x3bc/0xa10
[ 95.556794][ C0] hrtimer_run_softirq+0x1e3/0x2e0
[ 95.558993][ C0] handle_softirqs+0x226/0x860
[ 95.561056][ C0] ? __irq_exit_rcu+0xcb/0x220
[ 95.563079][ C0] __irq_exit_rcu+0xcb/0x220
[ 95.565193][ C0] irq_exit_rcu+0x9/0x30
[ 95.567138][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 95.569539][ C0]
[ 95.570810][ C0]
[ 95.572109][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 95.574692][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 95.576910][ C0] Code: 3b 89 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c5 1e 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 95.584799][ C0] RSP: 0018:ffffffff8fa07ca0 EFLAGS: 00000242
[ 95.590230][ C0] RAX: 0000000000094b75 RBX: ffffffff819bed20 RCX: 8000000000000001
[ 95.593584][ C0] RDX: 0000000000000001 RSI: ffffffff8e46c609 RDI: ffffffff8c6deb80
[ 95.597108][ C0] RBP: ffffffff8fa07d78 R08: ffff88801fa33a1b R09: 1ffff11003f46743
[ 95.600254][ C0] R10: dffffc0000000000 R11: ffffed1003f46744 R12: 0000000000000000
[ 95.603634][ C0] R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000
[ 95.607079][ C0] ? do_idle+0x2e0/0x540
[ 95.608965][ C0] default_idle+0x9/0x20
[ 95.610855][ C0] default_idle_call+0x72/0xb0
[ 95.612915][ C0] do_idle+0x2e0/0x540
[ 95.614719][ C0] ? __pfx_do_idle+0x10/0x10
[ 95.616942][ C0] cpu_startup_entry+0x43/0x60
[ 95.619042][ C0] rest_init+0x378/0x3a0
[ 95.620733][ C0] ? __pfx_rest_init+0x10/0x10
[ 95.622706][ C0] ? __pfx_kernel_init+0x10/0x10
[ 95.624760][ C0] ? acpi_ut_status_exit+0x120/0x1f0
[ 95.627068][ C0] ? acpi_ut_status_exit+0x120/0x1f0
[ 95.629332][ C0] ? acpi_enable_subsystem+0x286/0x3c0
[ 95.631774][ C0] start_kernel+0x392/0x3e0
[ 95.633797][ C0] x86_64_start_reservations+0x24/0x30
[ 95.636180][ C0] x86_64_start_kernel+0x137/0x1b0
[ 95.638686][ C0] common_startup_64+0x13e/0x157
[ 95.641292][ C0]
[ 95.642612][ C0] Modules linked in:
[ 95.644294][ C0] ---[ end trace 0000000000000000 ]---
[ 95.646636][ C0] RIP: 0010:gb_operation_message_alloc+0x174/0x280
[ 95.646661][ C0] Code: 00 e8 10 96 8e f8 48 8b 3d 79 48 a1 12 48 89 de e8 01 93 f5 f8 e9 94 00 00 00 e8 f7 95 8e f8 41 83 c7 08 4c 89 f0 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 91 00 00 00 66 45 89 3e 49 8d 7e 02 48 89
[ 95.646670][ C0] RSP: 0018:ffffc900000078a8 EFLAGS: 00010002
[ 95.646681][ C0] RAX: 0000000000000002 RBX: ffff8880534bcec0 RCX: ffffffff8fa8f000
[ 95.646689][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 000000000000007f
[ 95.646697][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000000
[ 95.646705][ C0] R10: ffff8880534bcec0 R11: fffffbfff20b477f R12: 0000000000000000
[ 95.646714][ C0] R13: 0000000000000800 R14: 0000000000000010 R15: 0000000000000000
[ 95.646721][ C0] FS: 0000000000000000(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000
[ 95.646731][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.646740][ C0] CR2: 0000200000000380 CR3: 0000000013132000 CR4: 0000000000352ef0
[ 95.646773][ C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 95.690120][ C0] Kernel Offset: disabled
[ 95.691978][ C0] Rebooting in 86400 seconds..