vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(3)
vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
vhci_hcd: connection closed
vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
BUG: unable to handle kernel NULL pointer dereference at 000000000000001c
vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
IP: atomic_inc arch/x86/include/asm/atomic.h:92 [inline]
IP: kthread_stop+0x47/0x640 kernel/kthread.c:525
vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
PGD a93f8067 P4D a93f8067 PUD 998c8067 PMD 0 
Oops: 0002 [#1] PREEMPT SMP KASAN
vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
Modules linked in:
vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
CPU: 1 PID: 3014 Comm: kworker/u4:4 Not tainted 4.14.202-syzkaller #0
vhci_hcd: connection closed
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usbip_event event_handler
task: ffff8880abaf24c0 task.stack: ffff8880abaf8000
RIP: 0010:atomic_inc arch/x86/include/asm/atomic.h:92 [inline]
RIP: 0010:kthread_stop+0x47/0x640 kernel/kthread.c:525
vhci_hcd: connection closed
RSP: 0018:ffff8880abaffc70 EFLAGS: 00010297
RAX: ffff8880abaf24c0 RBX: 0000000000000001 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000282
RBP: fffffffffffffffc R08: ffffffff8b9ae948 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff888237dc0918
R13: ffff888237dc0908 R14: fffffbfff1923f40 R15: ffffffff89859260
FS:  0000000000000000(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000000001c CR3: 000000009ac24000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 vhci_shutdown_connection+0x12a/0x240 drivers/usb/usbip/vhci_hcd.c:1035
vhci_hcd: connection closed
 event_handler+0x1c3/0x4a0 drivers/usb/usbip/usbip_event.c:92
 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116
vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
vhci_hcd: connection closed
 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250
vhci_hcd: connection closed
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Code: 00 65 8b 1d 2c 1a c9 7e 
vhci_hcd: vhci_device speed not set
83 
vhci_hcd: vhci_device speed not set
fb 
usb 13-2: new full-speed USB device number 2 using vhci_hcd
07 0f 87 5b 04 00 00 e8 8e d5 1e 00 89 db 48 0f a3 1d 3c 55 d0 08 0f 82 a2 03 00 00 e8 79 d5 1e 00 <f0> ff 45 20 48 8d 7d 24 48 b8 00 00 00 00 00 fc ff df 48 89 fa 
RIP: atomic_inc arch/x86/include/asm/atomic.h:92 [inline] RSP: ffff8880abaffc70
RIP: kthread_stop+0x47/0x640 kernel/kthread.c:525 RSP: ffff8880abaffc70
CR2: 000000000000001c
---[ end trace 4416104346ffdeeb ]---