program:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/direction\x00', 0x1, 0x0)
write(r2, &(0x7f0000000540)='2', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='2', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0)
write(r4, &(0x7f00000006c0)='3', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0)
write(r5, &(0x7f0000000780)='2', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_num_groups\x00', 0x1, 0x0)
write(r6, &(0x7f0000000840)='3', 0x1)
symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r7, &(0x7f0000000940)='dummy_udc.0', 0xb)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha3-384,ecb(aes))\x00'}, 0x58)
syz_usb_connect(0x0, 0x5b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002ffa940081915130000010203010902"], 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="5b35e06e", 0x4)
[ 93.532932][ T4651] Bluetooth: hci0: command tx timeout
[ 93.943740][ T5335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 93.965739][ T5335] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 94.159015][ T804] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 94.310753][ T804] usb 5-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 94.315374][ T804] usb 5-1: Dual-Role OTG device on HNP port
[ 94.318966][ T804] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[ 94.323074][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 94.351580][ T804] gspca_main: spca501-2.14.0 probing 0000:0000
[ 94.359728][ T804] gspca_spca501: reg write: error -32
[ 94.361979][ T804] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05
[ 94.364937][ T804] spca501 5-1:1.0: probe with driver spca501 failed with error -22
[ 94.373484][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI
[ 94.378340][ C0] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737]
[ 94.381697][ C0] CPU: 0 UID: 0 PID: 804 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full)
[ 94.385497][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.389699][ C0] Workqueue: usb_hub_wq hub_event
[ 94.391995][ C0] RIP: 0010:f_midi2_stop_eps+0x28e/0x4d0
[ 94.394384][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 47 eb 63 fa 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 12 02 00 00 41 8b 1f 31 ff 89 de e8 79
[ 94.402597][ C0] RSP: 0018:ffffc90000007930 EFLAGS: 00010002
[ 94.405192][ C0] RAX: 00000000000000e6 RBX: ffff888052698120 RCX: ffff88801d3d8000
[ 94.408060][ C0] RDX: 0000000000000100 RSI: ffffffff8c4bed60 RDI: ffffffff8c4bed20
[ 94.411118][ C0] RBP: ffff888052698100 R08: 0000000072205dfe R09: 000000005eb7409a
[ 94.414371][ C0] R10: 0000000000000010 R11: ffffffff8eb59c60 R12: ffff888052698730
[ 94.417868][ C0] R13: dffffc0000000000 R14: ffff888052698128 R15: 0000000000000730
[ 94.421116][ C0] FS: 0000000000000000(0000) GS:ffff88808c53f000(0000) knlGS:0000000000000000
[ 94.424526][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.426945][ C0] CR2: 00007ffe6b320f58 CR3: 0000000012016000 CR4: 0000000000352ef0
[ 94.429926][ C0] Call Trace:
[ 94.431256][ C0]
[ 94.432338][ C0] f_midi2_set_alt+0x11c/0xf00
[ 94.434219][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 94.436342][ C0] composite_setup+0x1ffd/0x3480
[ 94.438395][ C0] configfs_composite_setup+0xc7/0x100
[ 94.440705][ C0] dummy_timer+0x2f43/0x4cf0
[ 94.442772][ C0] ? __irq_exit_rcu+0xca/0x220
[ 94.444691][ C0] ? __lock_acquire+0x683/0x2cf0
[ 94.446687][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 94.448790][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 94.450645][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 94.452853][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 94.454740][ C0] __hrtimer_run_queues+0x3bc/0xa10
[ 94.456820][ C0] hrtimer_run_softirq+0x17a/0x240
[ 94.458974][ C0] handle_softirqs+0x225/0x840
[ 94.460895][ C0] ? __irq_exit_rcu+0xca/0x220
[ 94.462830][ C0] __irq_exit_rcu+0xca/0x220
[ 94.464616][ C0] irq_exit_rcu+0x9/0x30
[ 94.466361][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 94.468520][ C0]
[ 94.469543][ C0]
[ 94.470690][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 94.472912][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 94.475308][ C0] Code: f7 e8 8d 0b cd f5 f7 c3 00 02 00 00 74 05 e8 b0 00 f9 f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 24 21 be f5 65 8b 05 1d b1 97 07 85 c0 74 18 5b 41 5e e9 81 48
[ 94.482195][ C0] RSP: 0018:ffffc90003c4e7f0 EFLAGS: 00000206
[ 94.484735][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 0000000080000001
[ 94.488211][ C0] RDX: 0000000000000006 RSI: ffffffff8e231249 RDI: 0000000000000001
[ 94.491476][ C0] RBP: 0000000000000007 R08: ffffffff9057be37 R09: 1ffffffff20af7c6
[ 94.494568][ C0] R10: dffffc0000000000 R11: fffffbfff20af7c7 R12: 0000000000000000
[ 94.497860][ C0] R13: dffffc0000000000 R14: ffff88803428c000 R15: 1ffff11003ef1094
[ 94.501115][ C0] dummy_urb_enqueue+0x587/0x780
[ 94.503186][ C0] usb_hcd_submit_urb+0x328/0x1b60
[ 94.505345][ C0] usb_start_wait_urb+0x13f/0x5b0
[ 94.507543][ C0] ? trace_kmalloc+0x2a/0xf0
[ 94.509505][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 94.512342][ C0] usb_control_msg+0x234/0x3e0
[ 94.514928][ C0] usb_set_interface+0x521/0x1470
[ 94.517622][ C0] snd_usb_midi_v2_create+0x621/0x4ac0
[ 94.520055][ C0] ? __pfx_proc_audio_usbid_read+0x10/0x10
[ 94.522549][ C0] ? snd_card_rw_proc_new+0x10d/0x140
[ 94.524781][ C0] ? __pfx_snd_usb_midi_v2_create+0x10/0x10
[ 94.527289][ C0] ? usb_ifnum_to_if+0x262/0x2f0
[ 94.529377][ C0] snd_usb_create_stream+0x262/0x630
[ 94.531554][ C0] usb_audio_probe+0x1447/0x2280
[ 94.533706][ C0] ? __pfx_usb_audio_probe+0x10/0x10
[ 94.536058][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 94.538586][ C0] usb_probe_interface+0x653/0xc60
[ 94.540653][ C0] ? __pfx_usb_probe_interface+0x10/0x10
[ 94.542884][ C0] really_probe+0x254/0xae0
[ 94.544696][ C0] __driver_probe_device+0x1e8/0x360
[ 94.546640][ C0] driver_probe_device+0x4f/0x240
[ 94.548684][ C0] __device_attach_driver+0x270/0x410
[ 94.550890][ C0] bus_for_each_drv+0x258/0x2f0
[ 94.552999][ C0] ? __pfx___device_attach_driver+0x10/0x10
[ 94.555327][ C0] ? __pfx_bus_for_each_drv+0x10/0x10
[ 94.557477][ C0] ? lockdep_hardirqs_on+0x7a/0x110
[ 94.559496][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 94.561842][ C0] __device_attach+0x2c4/0x450
[ 94.563696][ C0] ? __pfx___device_attach+0x10/0x10
[ 94.565663][ C0] ? do_raw_spin_unlock+0x4d/0x210
[ 94.567567][ C0] ? _raw_spin_unlock+0x28/0x50
[ 94.569318][ C0] device_initial_probe+0xa1/0xd0
[ 94.571113][ C0] bus_probe_device+0x12a/0x220
[ 94.573243][ C0] device_add+0x7d7/0xb80
[ 94.575334][ C0] usb_set_configuration+0x1ad8/0x2180
[ 94.577946][ C0] usb_generic_driver_probe+0x8d/0x150
[ 94.580327][ C0] usb_probe_device+0x1c3/0x3b0
[ 94.582723][ C0] ? __pfx_usb_probe_device+0x10/0x10
[ 94.585313][ C0] really_probe+0x254/0xae0
[ 94.587509][ C0] __driver_probe_device+0x1e8/0x360
[ 94.589968][ C0] driver_probe_device+0x4f/0x240
[ 94.592369][ C0] __device_attach_driver+0x270/0x410
[ 94.594813][ C0] bus_for_each_drv+0x258/0x2f0
[ 94.596593][ C0] ? __pfx___device_attach_driver+0x10/0x10
[ 94.598864][ C0] ? __pfx_bus_for_each_drv+0x10/0x10
[ 94.601265][ C0] ? lockdep_hardirqs_on+0x7a/0x110
[ 94.603430][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 94.605489][ C0] __device_attach+0x2c4/0x450
[ 94.607368][ C0] ? __pfx___device_attach+0x10/0x10
[ 94.609405][ C0] ? do_raw_spin_unlock+0x4d/0x210
[ 94.611334][ C0] ? _raw_spin_unlock+0x28/0x50
[ 94.613263][ C0] device_initial_probe+0xa1/0xd0
[ 94.615244][ C0] bus_probe_device+0x12a/0x220
[ 94.617222][ C0] device_add+0x7d7/0xb80
[ 94.618883][ C0] usb_new_device+0x99d/0x1620
[ 94.620697][ C0] ? __pfx_usb_new_device+0x10/0x10
[ 94.622861][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 94.625014][ C0] hub_event+0x28e8/0x4d30
[ 94.626861][ C0] ? do_raw_spin_unlock+0x4d/0x210
[ 94.629025][ C0] ? __pfx_hub_event+0x10/0x10
[ 94.630976][ C0] ? process_scheduled_works+0xa20/0x14e0
[ 94.633269][ C0] ? rcu_is_watching+0x15/0xb0
[ 94.635209][ C0] ? process_scheduled_works+0xa20/0x14e0
[ 94.637594][ C0] process_scheduled_works+0xa8e/0x14e0
[ 94.639783][ C0] ? __pfx_process_scheduled_works+0x10/0x10
[ 94.642270][ C0] ? assign_work+0x3cf/0x5d0
[ 94.644179][ C0] worker_thread+0xa47/0xfb0
[ 94.646103][ C0] kthread+0x388/0x470
[ 94.647598][ C0] ? __pfx_worker_thread+0x10/0x10
[ 94.649586][ C0] ? __pfx_kthread+0x10/0x10
[ 94.651408][ C0] ret_from_fork+0x514/0xb70
[ 94.653371][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 94.655518][ C0] ? __switch_to+0xc89/0x1420
[ 94.657805][ C0] ? __pfx_kthread+0x10/0x10
[ 94.659771][ C0] ret_from_fork_asm+0x1a/0x30
[ 94.662553][ C0]
[ 94.663918][ C0] Modules linked in:
[ 94.665593][ C0] ---[ end trace 0000000000000000 ]---
[ 94.667908][ C0] RIP: 0010:f_midi2_stop_eps+0x28e/0x4d0
[ 94.670056][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 47 eb 63 fa 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 12 02 00 00 41 8b 1f 31 ff 89 de e8 79
[ 94.677490][ C0] RSP: 0018:ffffc90000007930 EFLAGS: 00010002
[ 94.680090][ C0] RAX: 00000000000000e6 RBX: ffff888052698120 RCX: ffff88801d3d8000
[ 94.683499][ C0] RDX: 0000000000000100 RSI: ffffffff8c4bed60 RDI: ffffffff8c4bed20
[ 94.686920][ C0] RBP: ffff888052698100 R08: 0000000072205dfe R09: 000000005eb7409a
[ 94.690097][ C0] R10: 0000000000000010 R11: ffffffff8eb59c60 R12: ffff888052698730
[ 94.693341][ C0] R13: dffffc0000000000 R14: ffff888052698128 R15: 0000000000000730
[ 94.696449][ C0] FS: 0000000000000000(0000) GS:ffff88808c53f000(0000) knlGS:0000000000000000
[ 94.700174][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.702658][ C0] CR2: 00007ffe6b320f58 CR3: 0000000012016000 CR4: 0000000000352ef0
[ 94.706001][ C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 94.709408][ C0] Kernel Offset: disabled
[ 94.711208][ C0] Rebooting in 86400 seconds..