Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 0 UID: 0 PID: 6746 Comm: syz.0.188 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:set_link_state+0x27/0x1000
Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 60 47 11 fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 cb 43 7f fa 49 8b 16 4d 8d a6 a3 00
RSP: 0018:ffffc90006437780 EFLAGS: 00010046
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888012b85a00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff52000c86eec R12: 0000000000000246
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  00007f17237f66c0(0000) GS:ffff88818d95c000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3abdc26038 CR3: 00000001bf320000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 dummy_pullup+0xc4/0x120
 usb_gadget_disconnect_locked+0x126/0x480
 gadget_unbind_driver+0xc2/0x410
 device_release_driver_internal+0x48b/0x880
 driver_detach+0x1f3/0x2d0
 bus_remove_driver+0x226/0x320
 usb_gadget_unregister_driver+0x4e/0x70
 raw_release+0xd7/0x260
 __fput+0x418/0xa50
 task_work_run+0x1d9/0x270
 do_exit+0x73a/0x2360
 do_group_exit+0x22d/0x2f0
 get_signal+0x121b/0x12c0
 arch_do_signal_or_restart+0xbb/0x860
 exit_to_user_mode_loop+0x104/0x730
 do_syscall_64+0x353/0x580
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f172555e90e
Code: Unable to access opcode bytes at 0x7f172555e8e4.
RSP: 002b:00007f17237f5f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
RAX: fffffffffffffdfc RBX: 00007f17237f66c0 RCX: 00007f172555e90e
RDX: 00007f17237f5fb0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007f1725635024 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f1725826038 R14: 00007f1725825fa0 R15: 00007ffdd8b7fcc8
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:set_link_state+0x27/0x1000
Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 60 47 11 fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 cb 43 7f fa 49 8b 16 4d 8d a6 a3 00
RSP: 0018:ffffc90006437780 EFLAGS: 00010046
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888012b85a00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff52000c86eec R12: 0000000000000246
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  00007f17237f66c0(0000) GS:ffff88818d95c000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3abdc26038 CR3: 00000001bf320000 CR4: 00000000000006f0
