program: syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c60511920000010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./mysys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='dummy_hcd.0\x00', 0xb) r1 = syz_mount_image$nilfs2(&(0x7f00000008c0), &(0x7f0000000e00)='./file0\x00', 0x10000, &(0x7f0000000940)=ANY=[], 0x0, 0xdab, &(0x7f0000000e80)="$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") ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x3, 0x0, 0x5, 0xfb, 0x6b, 0x7, 0x8, 0x7}], 0x1, 0x38, 0x0, 0x7}) (async) renameat2(r1, &(0x7f0000000040)='none\x00', r0, &(0x7f0000000080)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x0) (async) close(r0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='dummy_hcd.0\x00', 0xb) (async) close(r2) (async) nanosleep(&(0x7f0000000400)={0x1}, 0x0) [ 77.172216][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.176956][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.250817][ T5326] dummy_hcd dummy_hcd.0: remove, state 4 [ 77.253660][ T5326] usb usb5: USB disconnect, device number 1 [ 77.272105][ T4654] Bluetooth: hci0: command tx timeout [ 77.354824][ T5326] dummy_hcd dummy_hcd.0: stopped [ 77.358859][ T5326] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 77.364338][ T5327] loop0: detected capacity change from 0 to 4096 [ 77.446118][ T5328] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.541919][ T5324] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 77.545806][ T5324] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 77.548928][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 77.552429][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.556552][ T5324] RIP: 0010:set_link_state+0x27/0x1000 [ 77.558819][ T5324] Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 60 94 0e fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 fb c6 7d fa 49 8b 16 4d 8d a6 a3 00 [ 77.566325][ T5324] RSP: 0018:ffffc9000f81f9c0 EFLAGS: 00010046 [ 77.568588][ T5324] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88803678a540 [ 77.571065][ T5324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.574019][ T5324] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 77.577244][ T5324] R10: dffffc0000000000 R11: fffff52001f03f34 R12: 0000000000000246 [ 77.580407][ T5324] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.583610][ T5324] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 77.587106][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.589695][ T5324] CR2: 00007fc896aa1df0 CR3: 00000000127d7000 CR4: 0000000000352ef0 [ 77.592869][ T5324] Call Trace: [ 77.594167][ T5324] [ 77.595301][ T5324] ? rcu_is_watching+0x15/0xb0 [ 77.596951][ T5324] ? __pfx_dummy_pullup+0x10/0x10 [ 77.598557][ T5324] dummy_pullup+0xc4/0x120 [ 77.600055][ T5324] ? __pfx_dummy_pullup+0x10/0x10 [ 77.601873][ T5324] usb_gadget_disconnect_locked+0x126/0x480 [ 77.603858][ T5324] gadget_unbind_driver+0xc2/0x410 [ 77.605690][ T5324] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 77.607667][ T5324] device_release_driver_internal+0x48b/0x880 [ 77.610189][ T5324] driver_detach+0x1f3/0x2d0 [ 77.611903][ T5324] bus_remove_driver+0x226/0x320 [ 77.613665][ T5324] usb_gadget_unregister_driver+0x4e/0x70 [ 77.615621][ T5324] raw_release+0xd7/0x260 [ 77.617293][ T5324] ? __pfx_raw_release+0x10/0x10 [ 77.619079][ T5324] __fput+0x418/0xa50 [ 77.620444][ T5324] task_work_run+0x1d9/0x270 [ 77.621986][ T5324] ? __pfx_task_work_run+0x10/0x10 [ 77.623650][ T5324] ? do_raw_spin_unlock+0x4d/0x210 [ 77.625583][ T5324] do_exit+0x73a/0x2360 [ 77.627336][ T5324] ? try_to_wake_up+0x8c5/0x14d0 [ 77.629362][ T5324] ? __pfx_do_exit+0x10/0x10 [ 77.631133][ T5324] ? preempt_schedule_thunk+0x16/0x40 [ 77.633003][ T5324] ? preempt_schedule_thunk+0x16/0x40 [ 77.634864][ T5324] do_group_exit+0x22d/0x2f0 [ 77.636520][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.638724][ T5324] __x64_sys_exit_group+0x3f/0x40 [ 77.640589][ T5324] x64_sys_call+0x221a/0x2240 [ 77.642333][ T5324] do_syscall_64+0x174/0x580 [ 77.644194][ T5324] ? trace_irq_disable+0x3b/0x140 [ 77.646276][ T5324] ? clear_bhb_loop+0x70/0xc0 [ 77.648250][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.650762][ T5324] RIP: 0033:0x7fa01e59e0d9 [ 77.652653][ T5324] Code: Unable to access opcode bytes at 0x7fa01e59e0af. [ 77.655490][ T5324] RSP: 002b:00007fff4608fdf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 77.659068][ T5324] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fa01e59e0d9 [ 77.662164][ T5324] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 77.665282][ T5324] RBP: 00000000000000f7 R08: 00007fff460909b7 R09: 000000000000000b [ 77.668370][ T5324] R10: 00007fa01e825fa0 R11: 0000000000000246 R12: 0000000000000003 [ 77.671447][ T5324] R13: 00007fa01e82627c R14: 00007fa01e826278 R15: 00007fa01e826270 [ 77.674650][ T5324] [ 77.675893][ T5324] Modules linked in: [ 77.677463][ T5324] ---[ end trace 0000000000000000 ]--- [ 77.679579][ T5324] RIP: 0010:set_link_state+0x27/0x1000 [ 77.681779][ T5324] Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 60 94 0e fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 fb c6 7d fa 49 8b 16 4d 8d a6 a3 00 [ 77.689077][ T5324] RSP: 0018:ffffc9000f81f9c0 EFLAGS: 00010046 [ 77.691525][ T5324] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88803678a540 [ 77.694611][ T5324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.697707][ T5324] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 77.700505][ T5324] R10: dffffc0000000000 R11: fffff52001f03f34 R12: 0000000000000246 [ 77.703573][ T5324] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.706881][ T5324] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 77.710512][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.713321][ T5324] CR2: 00007fc896aa1df0 CR3: 00000000127d7000 CR4: 0000000000352ef0 [ 77.716706][ T5324] Kernel panic - not syncing: Fatal exception [ 77.719724][ T5324] Kernel Offset: disabled [ 77.721639][ T5324] Rebooting in 86400 seconds..