------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address 000000000000001c
WARNING: CPU: 1 PID: 4871 at arch/arm64/mm/fault.c:373 __do_kernel_fault+0x16c/0x1dc arch/arm64/mm/fault.c:373
Modules linked in:
CPU: 1 PID: 4871 Comm: kworker/u4:8 Not tainted 5.12.0-rc2-syzkaller-00059-g144c79ef3353 #0
Hardware name: linux,dummy-virt (DT)
Workqueue: usbip_event event_handler
pstate: 60400009 (nZCv daif +PAN -UAO -TCO BTYPE=--)
pc : __do_kernel_fault+0x16c/0x1dc arch/arm64/mm/fault.c:373
lr : __do_kernel_fault+0x16c/0x1dc arch/arm64/mm/fault.c:373
sp : ffff80001581ba30
x29: ffff80001581ba30 x28: faff000028168000 
x27: ffff8000139c8820 x26: f9ff00002b9d5a6c 
x25: 0000000000000000 x24: 0000000000000000 
x23: 0000000096000006 x22: 000000000000001c 
x21: 0000000000000025 x20: ffff80001581bb60 
x19: 0000000096000006 x18: 00000000fffffffb 
x17: 0000000000000000 x16: 0000000000000000 
x15: 0000000000000020 x14: 6c656e72656b2073 
x13: 0000000000002393 x12: ffff80001581b6e0 
x11: ffff800013a80b38 x10: ffff8000139deff8 
x9 : ffff800013a7b570 x8 : ffff8000139cb570 
x7 : ffff800013a7b570 x6 : fffffffffffcec60 
x5 : ffff00007fbd9948 x4 : 0000000000002751 
x3 : 0000000000000001 x2 : 0000000000000000 
x1 : 0000000000000000 x0 : faff000028168000 
Call trace:
 __do_kernel_fault+0x16c/0x1dc arch/arm64/mm/fault.c:373
 do_page_fault+0x1b8/0x394 arch/arm64/mm/fault.c:661
 do_translation_fault+0xb0/0xc0 arch/arm64/mm/fault.c:672
 do_mem_abort+0x44/0xbc arch/arm64/mm/fault.c:805
 el1_abort+0x40/0x6c arch/arm64/kernel/entry-common.c:167
 el1_sync_handler+0xac/0xd0 arch/arm64/kernel/entry-common.c:259
 el1_sync+0x70/0x100 arch/arm64/kernel/entry.S:656
 __lse_atomic_fetch_add_relaxed arch/arm64/include/asm/atomic_lse.h:52 [inline]
 arch_atomic_fetch_add_relaxed arch/arm64/include/asm/atomic.h:49 [inline]
 atomic_fetch_add_relaxed include/asm-generic/atomic-instrumented.h:143 [inline]
 __refcount_add include/linux/refcount.h:193 [inline]
 __refcount_inc include/linux/refcount.h:250 [inline]
 refcount_inc include/linux/refcount.h:267 [inline]
 get_task_struct include/linux/sched/task.h:104 [inline]
 kthread_stop+0x28/0x15c kernel/kthread.c:616
 vhci_shutdown_connection+0x80/0x370 drivers/usb/usbip/vhci_hcd.c:1023
 event_handler+0xc0/0x1ac drivers/usb/usbip/usbip_event.c:78
 process_one_work+0x1d8/0x364 kernel/workqueue.c:2275
 worker_thread+0x70/0x434 kernel/workqueue.c:2421
 kthread+0x174/0x180 kernel/kthread.c:292
 ret_from_fork+0x10/0x34 arch/arm64/kernel/entry.S:958