vhci_hcd: stop threads kasan: CONFIG_KASAN_INLINE enabled vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) kasan: GPF could be caused by NULL-ptr deref or user memory access vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) general protection fault: 0000 [#1] PREEMPT SMP KASAN vhci_hcd: connection closed Modules linked in: CPU: 1 PID: 10176 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8880a52d23c0 task.stack: ffff888087520000 RIP: 0010:__lock_acquire+0x1cc/0x3f20 kernel/locking/lockdep.c:3369 vhci_hcd: release socket RSP: 0018:ffff888087527868 EFLAGS: 00010006 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 00000000000000fc RSI: 0000000000000000 RDI: 00000000000007e0 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000001 R11: ffff8880a52d23c0 R12: 00000000000007e0 R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8beb9d40 FS: 00007ff1a06df700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa6c4cdf020 CR3: 00000000a497a000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: vhci_hcd: disconnect device vhci_hcd: stop threads lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x8c/0xc0 kernel/locking/spinlock.c:160 try_to_wake_up+0x6a/0x1100 kernel/sched/core.c:1997 vhci_hcd: release socket store_attach+0x577/0x990 drivers/usb/usbip/vhci_sysfs.c:435 vhci_hcd: disconnect device dev_attr_store+0x56/0x80 drivers/base/core.c:738 sysfs_kf_write+0x106/0x160 fs/sysfs/file.c:142 kernfs_fop_write+0x289/0x440 fs/kernfs/file.c:316 __vfs_write+0xe4/0x630 fs/read_write.c:480 vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(3) vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd: connection closed vfs_write+0x17f/0x4d0 fs/read_write.c:544 SYSC_write fs/read_write.c:590 [inline] SyS_write+0xf2/0x210 fs/read_write.c:582 vhci_hcd: stop threads do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x41913f vhci_hcd: release socket RSP: 002b:00007ff1a06deb90 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000041913f RDX: 0000000000000008 RSI: 00007ff1a06debe0 RDI: 0000000000000005 RBP: 0000000000000005 R08: 0000000000000000 R09: 00007ff1a06deb30 R10: 0000000000000000 R11: 0000000000000293 R12: 00000000004afb38 R13: 00007ff1a06debe0 R14: 0000000000000000 R15: 0000000000022000 Code: 18 00 00 vhci_hcd: disconnect device 00 00 48 81 c4 80 01 00 00 44 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 48 b8 00 00 00 00 vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) 00 vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) fc vhci_hcd: connection closed ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 67 2a 00 00 49 81 3c 24 a0 57 2e 8b 0f 84 5f RIP: __lock_acquire+0x1cc/0x3f20 kernel/locking/lockdep.c:3369 RSP: ffff888087527868 ---[ end trace 9bc312ae5f5232c9 ]--- vhci_hcd: stop threads