Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737]
CPU: 0 UID: 0 PID: 8090 Comm: syz.2.927 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:f_midi2_stop_eps+0x28e/0x4d0
Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 47 87 63 fa 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 12 02 00 00 41 8b 1f 31 ff 89 de e8 d9
RSP: 0018:ffffc90000007930 EFLAGS: 00010002
RAX: 00000000000000e6 RBX: ffff888110408120 RCX: ffff8881043b5a00
RDX: 0000000000000100 RSI: ffffffff8c4be160 RDI: ffffffff8c4be120
RBP: ffff888110408100 R08: 00000000aff54dfd R09: 000000002a22b6ea
R10: 0000000000000010 R11: ffffffff8eb59ca0 R12: ffff888110408730
R13: dffffc0000000000 R14: ffff888110408128 R15: 0000000000000730
FS:  00007f819323e6c0(0000) GS:ffff88818d94d000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f819261f948 CR3: 0000000161ab4000 CR4: 00000000000006f0
Call Trace:
 <IRQ>
 f_midi2_set_alt+0x11c/0xf00
 composite_setup+0x1ffd/0x3480
 configfs_composite_setup+0xc7/0x100
 dummy_timer+0x2f43/0x4cf0
 __hrtimer_run_queues+0x3bc/0xa10
 hrtimer_run_softirq+0x17a/0x240
 handle_softirqs+0x225/0x840
 __irq_exit_rcu+0xca/0x220
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0xa6/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:its_return_thunk+0x0/0x10
Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 5b 77 5e f5 cc
RSP: 0018:ffffc900098f7348 EFLAGS: 00000293
RAX: ffffffff82408e6e RBX: 0000000000000001 RCX: ffff8881043b5a00
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: ffff888163090d30 R08: ffff888163090d7f R09: 1ffff1102c6121af
R10: dffffc0000000000 R11: ffffed102c6121b0 R12: 0000000000000002
R13: 0000000000000001 R14: ffff888163090d78 R15: 00000000001b9cf7
 page_table_check_clear+0x2be/0x500
 __zap_vma_range+0x3a14/0x4f70
 unmap_vmas+0x390/0x550
 exit_mmap+0x293/0x9f0
 __mmput+0x118/0x420
 exit_mm+0x221/0x2d0
 do_exit+0x6cd/0x2360
 do_group_exit+0x22d/0x2f0
 get_signal+0x121b/0x12c0
 arch_do_signal_or_restart+0xbb/0x860
 exit_to_user_mode_loop+0x104/0x730
 do_syscall_64+0x353/0x580
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f819239e019
Code: Unable to access opcode bytes at 0x7f819239dfef.
RSP: 002b:00007f819323e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f8192625fa8 RCX: 00007f819239e019
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8192625fa8
RBP: 00007f8192625fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f8192626038 R14: 00007fff49a02da0 R15: 00007fff49a02e88
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:f_midi2_stop_eps+0x28e/0x4d0
Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 47 87 63 fa 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 12 02 00 00 41 8b 1f 31 ff 89 de e8 d9
RSP: 0018:ffffc90000007930 EFLAGS: 00010002
RAX: 00000000000000e6 RBX: ffff888110408120 RCX: ffff8881043b5a00
RDX: 0000000000000100 RSI: ffffffff8c4be160 RDI: ffffffff8c4be120
RBP: ffff888110408100 R08: 00000000aff54dfd R09: 000000002a22b6ea
R10: 0000000000000010 R11: ffffffff8eb59ca0 R12: ffff888110408730
R13: dffffc0000000000 R14: ffff888110408128 R15: 0000000000000730
FS:  00007f819323e6c0(0000) GS:ffff88818d94d000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f819261f948 CR3: 0000000161ab4000 CR4: 00000000000006f0
