program: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='2', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000940)='dummy_udc.0', 0xb) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='10', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) [ 111.792746][ T5288] Bluetooth: hci0: command tx timeout [ 112.196581][ T5331] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 112.675419][ T804] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.847425][ T804] usb 5-1: Dual-Role OTG device on HNP port [ 112.855536][ T804] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 112.899036][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.920249][ T804] gspca_main: spca501-2.14.0 probing 0000:0000 [ 112.935797][ T804] gspca_spca501: reg write: error -32 [ 112.942958][ T804] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 112.952376][ T804] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 112.993697][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 112.999726][ C0] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 113.004481][ C0] CPU: 0 UID: 0 PID: 804 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 113.008451][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.013407][ C0] Workqueue: usb_hub_wq hub_event [ 113.016575][ C0] RIP: 0010:f_midi2_stop_eps+0x5f/0x4d0 [ 113.019345][ C0] Code: e8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 ef e8 e7 59 64 fa 41 bc 30 07 00 00 4c 03 65 00 4c 89 e0 48 c1 e8 03 48 89 44 24 10 <42> 0f b6 04 28 84 c0 0f 85 23 04 00 00 41 8b 1c 24 31 ff 89 de e8 [ 113.027332][ C0] RSP: 0018:ffffc90000007930 EFLAGS: 00010002 [ 113.030408][ C0] RAX: 00000000000000e6 RBX: 0000000000000001 RCX: ffff88801afb8000 [ 113.034417][ C0] RDX: 0000000000000100 RSI: 0000000000000008 RDI: ffff888012e60148 [ 113.038228][ C0] RBP: ffff888012e600f0 R08: ffff888012e6014f R09: 1ffff110025cc029 [ 113.041500][ C0] R10: dffffc0000000000 R11: ffffed10025cc02a R12: 0000000000000730 [ 113.044834][ C0] R13: dffffc0000000000 R14: ffff888012e60128 R15: 0000000000000001 [ 113.049231][ C0] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 113.053530][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.056279][ C0] CR2: 00007f70212c10f5 CR3: 0000000012e79000 CR4: 0000000000352ef0 [ 113.059353][ C0] Call Trace: [ 113.060807][ C0] [ 113.062032][ C0] f_midi2_set_alt+0x11c/0xf00 [ 113.063969][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 113.066272][ C0] composite_setup+0x1ffd/0x3480 [ 113.068788][ C0] configfs_composite_setup+0xc7/0x100 [ 113.071754][ C0] dummy_timer+0x2f43/0x4cf0 [ 113.073966][ C0] ? __lock_acquire+0x683/0x2cf0 [ 113.076097][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 113.078264][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 113.080497][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 113.083633][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 113.086228][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 113.088728][ C0] hrtimer_run_softirq+0x17a/0x240 [ 113.091238][ C0] handle_softirqs+0x225/0x840 [ 113.093634][ C0] ? __irq_exit_rcu+0xca/0x220 [ 113.096145][ C0] __irq_exit_rcu+0xca/0x220 [ 113.098741][ C0] irq_exit_rcu+0x9/0x30 [ 113.101066][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 113.103697][ C0] [ 113.105108][ C0] [ 113.106538][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.109691][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 113.113393][ C0] Code: f7 e8 8d 6d cd f5 f7 c3 00 02 00 00 74 05 e8 b0 5e f9 f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 24 81 be f5 65 8b 05 1d 01 98 07 85 c0 74 18 5b 41 5e e9 81 48 [ 113.122612][ C0] RSP: 0018:ffffc900042be7f0 EFLAGS: 00000206 [ 113.125870][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000001 [ 113.130370][ C0] RDX: 0000000000000006 RSI: ffffffff8e231fc8 RDI: 0000000000000001 [ 113.134425][ C0] RBP: 0000000000000007 R08: ffffffff9057c237 R09: 1ffffffff20af846 [ 113.138316][ C0] R10: dffffc0000000000 R11: fffffbfff20af847 R12: 0000000000000000 [ 113.142517][ C0] R13: dffffc0000000000 R14: ffff8880341f4000 R15: 1ffff11003a40c94 [ 113.147605][ C0] dummy_urb_enqueue+0x587/0x780 [ 113.150087][ C0] usb_hcd_submit_urb+0x328/0x1b60 [ 113.152690][ C0] usb_start_wait_urb+0x13f/0x5b0 [ 113.155694][ C0] ? trace_kmalloc+0x2a/0xf0 [ 113.158637][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 113.162019][ C0] usb_control_msg+0x234/0x3e0 [ 113.164542][ C0] usb_set_interface+0x521/0x1470 [ 113.167147][ C0] snd_usb_midi_v2_create+0x621/0x4ac0 [ 113.170571][ C0] ? __pfx_proc_audio_usbid_read+0x10/0x10 [ 113.174537][ C0] ? snd_card_rw_proc_new+0x10d/0x140 [ 113.177180][ C0] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 113.180038][ C0] ? usb_ifnum_to_if+0x262/0x2f0 [ 113.182800][ C0] snd_usb_create_stream+0x262/0x630 [ 113.186419][ C0] usb_audio_probe+0x1447/0x2280 [ 113.188996][ C0] ? __pfx_usb_audio_probe+0x10/0x10 [ 113.191479][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 113.194628][ C0] ? preempt_schedule_common+0x82/0xd0 [ 113.198222][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 113.201087][ C0] usb_probe_interface+0x653/0xc60 [ 113.203681][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 113.206581][ C0] really_probe+0x254/0xae0 [ 113.209385][ C0] __driver_probe_device+0x1e8/0x360 [ 113.212645][ C0] driver_probe_device+0x4f/0x240 [ 113.215577][ C0] __device_attach_driver+0x270/0x410 [ 113.218541][ C0] bus_for_each_drv+0x258/0x2f0 [ 113.221142][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 113.224807][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 113.228020][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 113.230662][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 113.233839][ C0] __device_attach+0x2c4/0x450 [ 113.237175][ C0] ? __pfx___device_attach+0x10/0x10 [ 113.240325][ C0] ? do_raw_spin_unlock+0x4d/0x210 [ 113.242552][ C0] ? _raw_spin_unlock+0x28/0x50 [ 113.245110][ C0] device_initial_probe+0xa1/0xd0 [ 113.247872][ C0] bus_probe_device+0x12a/0x220 [ 113.251088][ C0] device_add+0x7d7/0xb80 [ 113.253726][ C0] usb_set_configuration+0x1ad8/0x2180 [ 113.256562][ C0] usb_generic_driver_probe+0x8d/0x150 [ 113.259564][ C0] usb_probe_device+0x1c3/0x3b0 [ 113.262693][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 113.265848][ C0] really_probe+0x254/0xae0 [ 113.268541][ C0] __driver_probe_device+0x1e8/0x360 [ 113.271830][ C0] driver_probe_device+0x4f/0x240 [ 113.275254][ C0] __device_attach_driver+0x270/0x410 [ 113.278590][ C0] bus_for_each_drv+0x258/0x2f0 [ 113.281381][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 113.284643][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 113.287962][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 113.291010][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 113.294000][ C0] __device_attach+0x2c4/0x450 [ 113.296437][ C0] ? __pfx___device_attach+0x10/0x10 [ 113.299354][ C0] ? do_raw_spin_unlock+0x4d/0x210 [ 113.302370][ C0] ? _raw_spin_unlock+0x28/0x50 [ 113.304961][ C0] device_initial_probe+0xa1/0xd0 [ 113.307236][ C0] bus_probe_device+0x12a/0x220 [ 113.309487][ C0] device_add+0x7d7/0xb80 [ 113.311937][ C0] usb_new_device+0x99d/0x1620 [ 113.314988][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 113.317678][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 113.320091][ C0] hub_event+0x28e8/0x4d30 [ 113.322295][ C0] ? do_raw_spin_unlock+0x4d/0x210 [ 113.324942][ C0] ? __pfx_hub_event+0x10/0x10 [ 113.327485][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 113.330641][ C0] ? rcu_is_watching+0x15/0xb0 [ 113.333221][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 113.336094][ C0] process_scheduled_works+0xa8e/0x14e0 [ 113.338923][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 113.342236][ C0] ? assign_work+0x3cf/0x5d0 [ 113.344806][ C0] worker_thread+0xa47/0xfb0 [ 113.347086][ C0] kthread+0x388/0x470 [ 113.349009][ C0] ? __pfx_worker_thread+0x10/0x10 [ 113.351406][ C0] ? __pfx_kthread+0x10/0x10 [ 113.353681][ C0] ret_from_fork+0x514/0xb70 [ 113.355959][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 113.358500][ C0] ? __switch_to+0xc89/0x1420 [ 113.360718][ C0] ? __pfx_kthread+0x10/0x10 [ 113.362963][ C0] ret_from_fork_asm+0x1a/0x30 [ 113.365707][ C0] [ 113.367484][ C0] Modules linked in: [ 113.369506][ C0] ---[ end trace 0000000000000000 ]--- [ 113.372071][ C0] RIP: 0010:f_midi2_stop_eps+0x5f/0x4d0 [ 113.374636][ C0] Code: e8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 ef e8 e7 59 64 fa 41 bc 30 07 00 00 4c 03 65 00 4c 89 e0 48 c1 e8 03 48 89 44 24 10 <42> 0f b6 04 28 84 c0 0f 85 23 04 00 00 41 8b 1c 24 31 ff 89 de e8 [ 113.383270][ C0] RSP: 0018:ffffc90000007930 EFLAGS: 00010002 [ 113.385909][ C0] RAX: 00000000000000e6 RBX: 0000000000000001 RCX: ffff88801afb8000 [ 113.389065][ C0] RDX: 0000000000000100 RSI: 0000000000000008 RDI: ffff888012e60148 [ 113.392549][ C0] RBP: ffff888012e600f0 R08: ffff888012e6014f R09: 1ffff110025cc029 [ 113.395860][ C0] R10: dffffc0000000000 R11: ffffed10025cc02a R12: 0000000000000730 [ 113.399301][ C0] R13: dffffc0000000000 R14: ffff888012e60128 R15: 0000000000000001 [ 113.402864][ C0] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 113.406597][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.409282][ C0] CR2: 00007f70212c10f5 CR3: 0000000012e79000 CR4: 0000000000352ef0 [ 113.412883][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 113.417047][ C0] Kernel Offset: disabled [ 113.419049][ C0] Rebooting in 86400 seconds..