Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737]
CPU: 1 UID: 0 PID: 7296 Comm: kworker/1:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: usb_hub_wq hub_event
RIP: 0010:f_midi2_stop_eps+0x28e/0x4d0
Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 d7 49 64 fa 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 12 02 00 00 41 8b 1f 31 ff 89 de e8 39
RSP: 0018:ffffc90000a08950 EFLAGS: 00010002
RAX: 00000000000000e6 RBX: ffff8881b8644120 RCX: ffff88816cef5940
RDX: 0000000000000100 RSI: ffffffff8c4bda60 RDI: ffffffff8c4bda20
RBP: ffff8881b8644100 R08: 00000000888e43e4 R09: 00000000c17753f2
R10: 0000000000000010 R11: ffffffff8eb59c60 R12: ffff8881b8644730
R13: dffffc0000000000 R14: ffff8881b8644128 R15: 0000000000000730
FS:  0000000000000000(0000) GS:ffff8882a8f51000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555571c569e8 CR3: 000000017506a000 CR4: 00000000000006f0
Call Trace:
 <IRQ>
 f_midi2_set_alt+0x11c/0xf00
 composite_setup+0x1ffd/0x3480
 configfs_composite_setup+0xc7/0x100
 dummy_timer+0x2e55/0x4b40
 __hrtimer_run_queues+0x3bc/0xa10
 hrtimer_run_softirq+0x17a/0x240
 handle_softirqs+0x225/0x840
 __irq_exit_rcu+0xca/0x220
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0xa6/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:_raw_spin_unlock_irq+0x29/0x50
Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ca d6 cf f5 48 89 df e8 22 4c d0 f5 e8 1d 2e fc f5 fb bf 01 00 00 00 <e8> 42 62 c1 f5 65 8b 05 3b e2 99 07 85 c0 74 07 5b c3 cc cc cc cc
RSP: 0018:ffffc900073a6678 EFLAGS: 00000206
RAX: 00000000000a3703 RBX: ffff88823c63a880 RCX: 0000000000000001
RDX: 0000000000000006 RSI: ffffffff8e22c33a RDI: 0000000000000001
RBP: 1ffff1102d9deb2b R08: ffffffff90578737 R09: 1ffffffff20af0e6
R10: dffffc0000000000 R11: fffffbfff20af0e7 R12: ffff88816cef596c
R13: dffffc0000000000 R14: ffffffff8bd18590 R15: ffff88816cef5958
 schedule+0xea/0x2b0
 schedule_timeout+0x152/0x2c0
 wait_for_completion_timeout+0x2cf/0x610
 usb_start_wait_urb+0x1e9/0x5b0
 usb_control_msg+0x234/0x3e0
 usb_set_interface+0x521/0x1470
 snd_usb_midi_v2_create+0x621/0x4ac0
 snd_usb_create_stream+0x262/0x630
 usb_audio_probe+0x1447/0x2280
 usb_probe_interface+0x653/0xc60
 really_probe+0x254/0xae0
 __driver_probe_device+0x1e8/0x360
 driver_probe_device+0x4f/0x240
 __device_attach_driver+0x270/0x410
 bus_for_each_drv+0x258/0x2f0
 __device_attach+0x2c4/0x450
 device_initial_probe+0xa1/0xd0
 bus_probe_device+0x12a/0x220
 device_add+0x7d7/0xb80
 usb_set_configuration+0x1ad8/0x2180
 usb_generic_driver_probe+0x8d/0x150
 usb_probe_device+0x1c3/0x3b0
 really_probe+0x254/0xae0
 __driver_probe_device+0x1e8/0x360
 driver_probe_device+0x4f/0x240
 __device_attach_driver+0x270/0x410
 bus_for_each_drv+0x258/0x2f0
 __device_attach+0x2c4/0x450
 device_initial_probe+0xa1/0xd0
 bus_probe_device+0x12a/0x220
 device_add+0x7d7/0xb80
 usb_new_device+0x99d/0x1620
 hub_event+0x28e8/0x4d30
 process_scheduled_works+0xa8e/0x14e0
 worker_thread+0xa47/0xfb0
 kthread+0x388/0x470
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:f_midi2_stop_eps+0x28e/0x4d0
Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 d7 49 64 fa 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 12 02 00 00 41 8b 1f 31 ff 89 de e8 39
RSP: 0018:ffffc90000a08950 EFLAGS: 00010002
RAX: 00000000000000e6 RBX: ffff8881b8644120 RCX: ffff88816cef5940
RDX: 0000000000000100 RSI: ffffffff8c4bda60 RDI: ffffffff8c4bda20
RBP: ffff8881b8644100 R08: 00000000888e43e4 R09: 00000000c17753f2
R10: 0000000000000010 R11: ffffffff8eb59c60 R12: ffff8881b8644730
R13: dffffc0000000000 R14: ffff8881b8644128 R15: 0000000000000730
FS:  0000000000000000(0000) GS:ffff8882a8f51000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555571c569e8 CR3: 000000017506a000 CR4: 00000000000006f0
