Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 1 UID: 0 PID: 17207 Comm: syz.0.2306 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:set_link_state+0x27/0x1000
Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 a0 e5 0f fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 fb e1 7d fa 49 8b 16 4d 8d a6 a3 00
RSP: 0018:ffffc90004a6f780 EFLAGS: 00010046
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88816cfebc00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff5200094deec R12: 0000000000000246
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  00007f5596bf66c0(0000) GS:ffff8882a8f49000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055fa8d05bbf8 CR3: 000000010e792000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 dummy_pullup+0xc4/0x120
 usb_gadget_disconnect_locked+0x126/0x480
 gadget_unbind_driver+0xc2/0x410
 device_release_driver_internal+0x48b/0x880
 driver_detach+0x1f3/0x2d0
 bus_remove_driver+0x226/0x320
 usb_gadget_unregister_driver+0x4e/0x70
 raw_release+0xd7/0x260
 __fput+0x418/0xa50
 task_work_run+0x1d9/0x270
 do_exit+0x73a/0x2360
 do_group_exit+0x22d/0x2f0
 get_signal+0x121b/0x12c0
 arch_do_signal_or_restart+0xbb/0x860
 exit_to_user_mode_loop+0x104/0x730
 do_syscall_64+0x353/0x580
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f559899dd6b
Code: Unable to access opcode bytes at 0x7f559899dd41.
RSP: 002b:00007f5596bf3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f559899dd6b
RDX: 00007f5596bf4fd0 RSI: 0000000080085502 RDI: 0000000000000003
RBP: 00007f5596bf4fd0 R08: 0000000000000000 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
R13: 0000000800000000 R14: 0000000000000000 R15: 00007f5598a538e2
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:set_link_state+0x27/0x1000
Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 a0 e5 0f fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 fb e1 7d fa 49 8b 16 4d 8d a6 a3 00
RSP: 0018:ffffc90004a6f780 EFLAGS: 00010046
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88816cfebc00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff5200094deec R12: 0000000000000246
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  00007f5596bf66c0(0000) GS:ffff8882a8f49000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055fa8d05bbf8 CR3: 000000010e792000 CR4: 00000000000006f0
