vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(3) vhci_hcd: release socket vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) vhci_hcd: disconnect device vhci_hcd: connection closed BUG: unable to handle kernel NULL pointer dereference at 000000000000001c IP: atomic_inc arch/x86/include/asm/atomic.h:92 [inline] IP: kthread_stop+0x47/0x640 kernel/kthread.c:550 PGD 9c4db067 P4D 9c4db067 PUD 90e60067 PMD 0 Oops: 0002 [#1] PREEMPT SMP KASAN vhci_hcd: connection closed Modules linked in: CPU: 0 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.222-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: usbip_event event_handler task: ffff8880b5ff2140 task.stack: ffff8880b5ff8000 RIP: 0010:atomic_inc arch/x86/include/asm/atomic.h:92 [inline] RIP: 0010:kthread_stop+0x47/0x640 kernel/kthread.c:550 RSP: 0018:ffff8880b5fffc70 EFLAGS: 00010297 RAX: ffff8880b5ff2140 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000286 vhci_hcd: vhci_device speed not set RBP: fffffffffffffffc R08: ffffffff8ae0a5d8 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff888237cd0958 R13: ffff888237cd0948 R14: fffffbfff1924330 R15: ffffffff89858320 FS: 0000000000000000(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000001c CR3: 000000009aa8a000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: vhci_shutdown_connection+0x12a/0x240 drivers/usb/usbip/vhci_hcd.c:1037 usb 13-2: new full-speed USB device number 2 using vhci_hcd vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(3) event_handler+0x1c3/0x4a0 drivers/usb/usbip/usbip_event.c:92 vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) process_one_work+0x793/0x14a0 kernel/workqueue.c:2116 vhci_hcd: connection closed worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250 vhci_hcd: vhci_device speed not set kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) Code: 00 vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) vhci_hcd: connection closed 65 8b 1d 6c 2b ca 7e 83 fb 07 0f 87 5b 04 00 00 e8 2e ca 1d 00 89 db 48 0f a3 1d bc 62 d1 08 0f 82 a2 03 00 00 e8 19 ca 1d 00 ff 45 20 48 8d 7d 24 48 b8 00 00 00 00 00 fc ff df 48 89 fa RIP: atomic_inc arch/x86/include/asm/atomic.h:92 [inline] RSP: ffff8880b5fffc70 RIP: kthread_stop+0x47/0x640 kernel/kthread.c:550 RSP: ffff8880b5fffc70 CR2: 000000000000001c ---[ end trace 72b5a7b7bc0d1077 ]--- usb 11-2: new full-speed USB device number 2 using vhci_hcd