program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28)
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40018002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0)
write(r2, &(0x7f0000000600)='2', 0x1)
symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000940)='dummy_udc.0', 0xb)
[ 93.411740][ T4638] Bluetooth: hci0: command tx timeout
[ 93.446736][ T9] cfg80211: failed to load regulatory.db
[ 94.057450][ T5307] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 94.208212][ T5307] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[ 94.213610][ T5307] usb 5-1: Dual-Role OTG device on HNP port
[ 94.216507][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 94.249782][ T5307] gspca_main: spca501-2.14.0 probing 0000:0000
[ 94.261681][ T5307] gspca_spca501: reg write: error -32
[ 94.264998][ T5307] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05
[ 94.268836][ T5307] spca501 5-1:1.0: probe with driver spca501 failed with error -22
[ 94.276984][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI
[ 94.282080][ C0] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737]
[ 94.285498][ C0] CPU: 0 UID: 0 PID: 5307 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full)
[ 94.289308][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.293512][ C0] Workqueue: usb_hub_wq hub_event
[ 94.295751][ C0] RIP: 0010:f_midi2_stop_eps+0x5f/0x4d0
[ 94.297984][ C0] Code: e8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 ef e8 67 fe 63 fa 41 bc 30 07 00 00 4c 03 65 00 4c 89 e0 48 c1 e8 03 48 89 44 24 10 <42> 0f b6 04 28 84 c0 0f 85 23 04 00 00 41 8b 1c 24 31 ff 89 de e8
[ 94.305566][ C0] RSP: 0018:ffffc90000007930 EFLAGS: 00010002
[ 94.308211][ C0] RAX: 00000000000000e6 RBX: 0000000000000001 RCX: ffff88801fc52580
[ 94.311675][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: ffff88801fd14148
[ 94.315008][ C0] RBP: ffff88801fd140f0 R08: ffff88801fd1414f R09: 1ffff11003fa2829
[ 94.318350][ C0] R10: dffffc0000000000 R11: ffffed1003fa282a R12: 0000000000000730
[ 94.321836][ C0] R13: dffffc0000000000 R14: ffff88801fd14128 R15: 0000000000000001
[ 94.325284][ C0] FS: 0000000000000000(0000) GS:ffff88808c533000(0000) knlGS:0000000000000000
[ 94.329106][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.331918][ C0] CR2: 00007f25ad0350f5 CR3: 00000000127f2000 CR4: 0000000000352ef0
[ 94.335074][ C0] Call Trace:
[ 94.336509][ C0]
[ 94.337657][ C0] f_midi2_set_alt+0x11c/0xf00
[ 94.339486][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 94.341616][ C0] composite_setup+0x1ffd/0x3480
[ 94.343559][ C0] configfs_composite_setup+0xc7/0x100
[ 94.345571][ C0] dummy_timer+0x2f43/0x4cf0
[ 94.347396][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 94.349622][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 94.351653][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 94.354037][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 94.356087][ C0] __hrtimer_run_queues+0x3bc/0xa10
[ 94.358284][ C0] hrtimer_run_softirq+0x1e3/0x2e0
[ 94.360444][ C0] handle_softirqs+0x226/0x860
[ 94.362534][ C0] ? __irq_exit_rcu+0xcb/0x220
[ 94.364589][ C0] __irq_exit_rcu+0xcb/0x220
[ 94.366609][ C0] irq_exit_rcu+0x9/0x30
[ 94.368454][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 94.370773][ C0]
[ 94.372036][ C0]
[ 94.373292][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 94.375917][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50
[ 94.378371][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ca 67 c9 f5 48 89 df e8 22 dd c9 f5 e8 bd f1 f5 f5 fb bf 01 00 00 00 22 ff ba f5 65 48 8b 05 da 6f 95 07 48 85 c0 74 07 5b c3 cc cc
[ 94.386763][ C0] RSP: 0018:ffffc9000da367b0 EFLAGS: 00000206
[ 94.389392][ C0] RAX: 0000000000002769 RBX: ffffc9000da36968 RCX: 8000000000000001
[ 94.392770][ C0] RDX: 0000000000000006 RSI: ffffffff8e2348f6 RDI: 0000000000000001
[ 94.395927][ C0] RBP: ffffc9000da368f0 R08: ffffffff9057d237 R09: 1ffffffff20afa46
[ 94.399165][ C0] R10: dffffc0000000000 R11: fffffbfff20afa47 R12: dffffc0000000000
[ 94.402172][ C0] R13: ffff88801fc53e00 R14: ffffc9000da36868 R15: ffffc9000da36960
[ 94.405411][ C0] wait_for_completion_timeout+0x2c5/0x610
[ 94.407977][ C0] ? wait_for_completion_timeout+0x265/0x610
[ 94.410421][ C0] ? __pfx_wait_for_completion_timeout+0x10/0x10
[ 94.413257][ C0] usb_start_wait_urb+0x1e9/0x5b0
[ 94.415423][ C0] ? trace_kmalloc+0x2a/0xf0
[ 94.417488][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 94.419796][ C0] usb_control_msg+0x234/0x3e0
[ 94.421867][ C0] usb_set_interface+0x521/0x1470
[ 94.424084][ C0] snd_usb_midi_v2_create+0x621/0x4ac0
[ 94.426483][ C0] ? __pfx_proc_audio_usbid_read+0x10/0x10
[ 94.428998][ C0] ? snd_card_rw_proc_new+0x10d/0x140
[ 94.431341][ C0] ? __pfx_snd_usb_midi_v2_create+0x10/0x10
[ 94.433948][ C0] ? usb_ifnum_to_if+0x262/0x2f0
[ 94.436194][ C0] snd_usb_create_stream+0x262/0x630
[ 94.438501][ C0] usb_audio_probe+0x1447/0x2280
[ 94.440698][ C0] ? __pfx_usb_audio_probe+0x10/0x10
[ 94.443071][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 94.445668][ C0] usb_probe_interface+0x653/0xc60
[ 94.447934][ C0] ? __pfx_usb_probe_interface+0x10/0x10
[ 94.450416][ C0] really_probe+0x254/0xae0
[ 94.452335][ C0] __driver_probe_device+0x1e8/0x360
[ 94.454612][ C0] driver_probe_device+0x4f/0x240
[ 94.456805][ C0] __device_attach_driver+0x270/0x410
[ 94.459158][ C0] bus_for_each_drv+0x258/0x2f0
[ 94.461254][ C0] ? __pfx___device_attach_driver+0x10/0x10
[ 94.463865][ C0] ? __pfx_bus_for_each_drv+0x10/0x10
[ 94.466152][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 94.468640][ C0] __device_attach+0x2c4/0x450
[ 94.470583][ C0] ? __pfx___device_attach+0x10/0x10
[ 94.472787][ C0] ? do_raw_spin_unlock+0x4d/0x200
[ 94.474834][ C0] ? _raw_spin_unlock+0x28/0x50
[ 94.476831][ C0] device_initial_probe+0xa1/0xd0
[ 94.478826][ C0] bus_probe_device+0x12a/0x220
[ 94.480847][ C0] device_add+0x7d7/0xb80
[ 94.482795][ C0] usb_set_configuration+0x1ad8/0x2180
[ 94.485152][ C0] usb_generic_driver_probe+0x8d/0x150
[ 94.487455][ C0] usb_probe_device+0x1c3/0x3b0
[ 94.489529][ C0] ? __pfx_usb_probe_device+0x10/0x10
[ 94.491800][ C0] really_probe+0x254/0xae0
[ 94.493822][ C0] __driver_probe_device+0x1e8/0x360
[ 94.496174][ C0] driver_probe_device+0x4f/0x240
[ 94.498324][ C0] __device_attach_driver+0x270/0x410
[ 94.500639][ C0] bus_for_each_drv+0x258/0x2f0
[ 94.502757][ C0] ? __pfx___device_attach_driver+0x10/0x10
[ 94.505318][ C0] ? __pfx_bus_for_each_drv+0x10/0x10
[ 94.507613][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 94.510099][ C0] __device_attach+0x2c4/0x450
[ 94.512196][ C0] ? __pfx___device_attach+0x10/0x10
[ 94.514486][ C0] ? do_raw_spin_unlock+0x4d/0x200
[ 94.516622][ C0] ? _raw_spin_unlock+0x28/0x50
[ 94.518653][ C0] device_initial_probe+0xa1/0xd0
[ 94.520791][ C0] bus_probe_device+0x12a/0x220
[ 94.522942][ C0] device_add+0x7d7/0xb80
[ 94.524788][ C0] usb_new_device+0x9aa/0x1690
[ 94.526836][ C0] ? __pfx_usb_new_device+0x10/0x10
[ 94.529060][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 94.531268][ C0] hub_event+0x28e8/0x4d30
[ 94.533164][ C0] ? do_raw_spin_unlock+0x4d/0x200
[ 94.535324][ C0] ? __pfx_hub_event+0x10/0x10
[ 94.537425][ C0] ? process_scheduled_works+0xa1a/0x14c0
[ 94.539802][ C0] ? rcu_is_watching+0x16/0xb0
[ 94.541823][ C0] ? process_scheduled_works+0xa1a/0x14c0
[ 94.544311][ C0] process_scheduled_works+0xa88/0x14c0
[ 94.546867][ C0] ? __pfx_process_scheduled_works+0x10/0x10
[ 94.549496][ C0] ? assign_work+0x3cf/0x5d0
[ 94.551597][ C0] worker_thread+0xa47/0xfb0
[ 94.553741][ C0] ? __kthread_parkme+0x71/0x1f0
[ 94.555977][ C0] kthread+0x38b/0x480
[ 94.557692][ C0] ? __pfx_worker_thread+0x10/0x10
[ 94.559549][ C0] ? __pfx_kthread+0x10/0x10
[ 94.561163][ C0] ret_from_fork+0x514/0xb70
[ 94.563243][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 94.565446][ C0] ? __switch_to+0xc89/0x1420
[ 94.567591][ C0] ? __pfx_kthread+0x10/0x10
[ 94.569660][ C0] ret_from_fork_asm+0x1a/0x30
[ 94.571777][ C0]
[ 94.573088][ C0] Modules linked in:
[ 94.574693][ C0] ---[ end trace 0000000000000000 ]---
[ 94.577067][ C0] RIP: 0010:f_midi2_stop_eps+0x5f/0x4d0
[ 94.579564][ C0] Code: e8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 ef e8 67 fe 63 fa 41 bc 30 07 00 00 4c 03 65 00 4c 89 e0 48 c1 e8 03 48 89 44 24 10 <42> 0f b6 04 28 84 c0 0f 85 23 04 00 00 41 8b 1c 24 31 ff 89 de e8
[ 94.587733][ C0] RSP: 0018:ffffc90000007930 EFLAGS: 00010002
[ 94.589824][ C0] RAX: 00000000000000e6 RBX: 0000000000000001 RCX: ffff88801fc52580
[ 94.592614][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: ffff88801fd14148
[ 94.595603][ C0] RBP: ffff88801fd140f0 R08: ffff88801fd1414f R09: 1ffff11003fa2829
[ 94.598816][ C0] R10: dffffc0000000000 R11: ffffed1003fa282a R12: 0000000000000730
[ 94.602108][ C0] R13: dffffc0000000000 R14: ffff88801fd14128 R15: 0000000000000001
[ 94.605337][ C0] FS: 0000000000000000(0000) GS:ffff88808c533000(0000) knlGS:0000000000000000
[ 94.609007][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.611813][ C0] CR2: 00007f25ad0350f5 CR3: 00000000127f2000 CR4: 0000000000352ef0
[ 94.615292][ C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 94.618801][ C0] Kernel Offset: disabled
[ 94.620738][ C0] Rebooting in 86400 seconds..