Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 1 UID: 0 PID: 11612 Comm: syz.0.2182 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:set_link_state+0x27/0x1000
Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 b0 4c 10 fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 bb e5 7d fa 49 8b 16 4d 8d a6 a3 00
RSP: 0018:ffffc9000677f780 EFLAGS: 00010046
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8881715fd940
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff52000cefeec R12: 0000000000000246
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  00007f1bb7a166c0(0000) GS:ffff8882a8f4b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: fffffffffffffe70 CR3: 000000016069e000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 dummy_pullup+0xc4/0x120
 usb_gadget_disconnect_locked+0x126/0x480
 gadget_unbind_driver+0xc2/0x410
 device_release_driver_internal+0x48b/0x880
 driver_detach+0x1f3/0x2d0
 bus_remove_driver+0x226/0x320
 usb_gadget_unregister_driver+0x4e/0x70
 raw_release+0xd7/0x260
 __fput+0x418/0xa50
 task_work_run+0x1d9/0x270
 do_exit+0x73a/0x2360
 do_group_exit+0x22d/0x2f0
 get_signal+0x121b/0x12c0
 arch_do_signal_or_restart+0xbb/0x860
 exit_to_user_mode_loop+0x104/0x730
 do_syscall_64+0x353/0x580
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1bb6b9dcab
Code: Unable to access opcode bytes at 0x7f1bb6b9dc81.
RSP: 002b:00007f1bb7a13f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f1bb6b9dcab
RDX: 00007f1bb7a14fd0 RSI: 0000000080085502 RDI: 0000000000000003
RBP: 00007f1bb7a14fd0 R08: 0000000000000000 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
R13: 0000000800000000 R14: 0000000000000000 R15: 00007f1bb6c5386a
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:set_link_state+0x27/0x1000
Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 b0 4c 10 fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 bb e5 7d fa 49 8b 16 4d 8d a6 a3 00
RSP: 0018:ffffc9000677f780 EFLAGS: 00010046
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8881715fd940
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff52000cefeec R12: 0000000000000246
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  00007f1bb7a166c0(0000) GS:ffff8882a8f4b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: fffffffffffffe70 CR3: 000000016069e000 CR4: 00000000000006f0
