ALSA: usb-audio: Cancel pending work at closing a MIDI substream (CVE-2022-49545) | HOL Guard CVE