Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737]
CPU: 1 UID: 0 PID: 5680 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: usb_hub_wq hub_event
RIP: 0010:f_midi2_stop_eps+0x28e/0x4d0
Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 b7 49 64 fa 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 12 02 00 00 41 8b 1f 31 ff 89 de e8 79
RSP: 0018:ffffc90000a08950 EFLAGS: 00010002
RAX: 00000000000000e6 RBX: ffff888176a5c120 RCX: ffff88816e0bbb80
RDX: 0000000000000100 RSI: ffffffff8c4bda60 RDI: ffffffff8c4bda20
RBP: ffff888176a5c100 R08: 00000000619715b4 R09: 0000000069ba651c
R10: 0000000000000010 R11: ffffffff8eb59c60 R12: ffff888176a5c730
R13: dffffc0000000000 R14: ffff888176a5c128 R15: 0000000000000730
FS:  0000000000000000(0000) GS:ffff8882a8f51000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f60c11eb580 CR3: 000000016ee66000 CR4: 00000000000006f0
Call Trace:
 <IRQ>
 f_midi2_set_alt+0x11c/0xf00
 composite_setup+0x1ffd/0x3480
 configfs_composite_setup+0xc7/0x100
 dummy_timer+0x2e55/0x4b40
 __hrtimer_run_queues+0x3bc/0xa10
 hrtimer_run_softirq+0x17a/0x240
 handle_softirqs+0x225/0x840
 __irq_exit_rcu+0xca/0x220
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0xa6/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
Code: f7 e8 ad 4c d0 f5 f7 c3 00 02 00 00 74 05 e8 a0 2e fc f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> b4 62 c1 f5 65 8b 05 ad e2 99 07 85 c0 74 18 5b 41 5e e9 91 48
RSP: 0018:ffffc9000647e7f0 EFLAGS: 00000206
RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000001
RDX: 0000000000000006 RSI: ffffffff8e22c33a RDI: 0000000000000001
RBP: 0000000000000007 R08: ffffffff90578737 R09: 1ffffffff20af0e6
R10: dffffc0000000000 R11: fffffbfff20af0e7 R12: 0000000000000000
R13: dffffc0000000000 R14: ffff888104738000 R15: 1ffff110201ec094
 dummy_urb_enqueue+0x587/0x780
 usb_hcd_submit_urb+0x328/0x1b60
 usb_start_wait_urb+0x13f/0x5b0
 usb_control_msg+0x234/0x3e0
 usb_set_interface+0x521/0x1470
 snd_usb_midi_v2_create+0x621/0x4ac0
 snd_usb_create_stream+0x262/0x630
 usb_audio_probe+0x1447/0x2280
 usb_probe_interface+0x653/0xc60
 really_probe+0x254/0xae0
 __driver_probe_device+0x1e8/0x360
 driver_probe_device+0x4f/0x240
 __device_attach_driver+0x270/0x410
 bus_for_each_drv+0x258/0x2f0
 __device_attach+0x2c4/0x450
 device_initial_probe+0xa1/0xd0
 bus_probe_device+0x12a/0x220
 device_add+0x7d7/0xb80
 usb_set_configuration+0x1ad8/0x2180
 usb_generic_driver_probe+0x8d/0x150
 usb_probe_device+0x1c3/0x3b0
 really_probe+0x254/0xae0
 __driver_probe_device+0x1e8/0x360
 driver_probe_device+0x4f/0x240
 __device_attach_driver+0x270/0x410
 bus_for_each_drv+0x258/0x2f0
 __device_attach+0x2c4/0x450
 device_initial_probe+0xa1/0xd0
 bus_probe_device+0x12a/0x220
 device_add+0x7d7/0xb80
 usb_new_device+0x99d/0x1620
 hub_event+0x28e8/0x4d30
 process_scheduled_works+0xa8e/0x14e0
 worker_thread+0xa47/0xfb0
 kthread+0x388/0x470
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:f_midi2_stop_eps+0x28e/0x4d0
Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 b7 49 64 fa 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 12 02 00 00 41 8b 1f 31 ff 89 de e8 79
RSP: 0018:ffffc90000a08950 EFLAGS: 00010002
RAX: 00000000000000e6 RBX: ffff888176a5c120 RCX: ffff88816e0bbb80
RDX: 0000000000000100 RSI: ffffffff8c4bda60 RDI: ffffffff8c4bda20
RBP: ffff888176a5c100 R08: 00000000619715b4 R09: 0000000069ba651c
R10: 0000000000000010 R11: ffffffff8eb59c60 R12: ffff888176a5c730
R13: dffffc0000000000 R14: ffff888176a5c128 R15: 0000000000000730
FS:  0000000000000000(0000) GS:ffff8882a8f51000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f60c11eb580 CR3: 000000016ee66000 CR4: 00000000000006f0
