------------[ cut here ]------------ WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x1b4/0x1d8 drivers/usb/gadget/udc/core.c:124, CPU#0: syz.0.3795/17925 usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 Modules linked in: Kernel panic - not syncing: kernel: panic_on_warn set ... CPU: 0 UID: 0 PID: 17925 Comm: syz.0.3795 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: frame pointer underflow [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:8321c4bc r6:00000000 r5:82327e98 r4:00000001 [<80201ae4>] (show_stack) from [<8021e83c>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201ae4>] (show_stack) from [<8021e83c>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021e7e0>] (dump_stack_lvl) from [<8021e868>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:8321c4bc r6:00000000 r5:848c9900 r4:83483d7c [<8021e850>] (dump_stack) from [<802026b8>] (vpanic+0x114/0x320 kernel/panic.c:651) [<802025a4>] (vpanic) from [<802028f8>] (trace_suspend_resume+0x0/0x100 kernel/panic.c:788) r7:810f5f60 [<802028c4>] (panic) from [<80251b90>] (check_panic_on_warn kernel/panic.c:525 [inline]) [<802028c4>] (panic) from [<80251b90>] (get_taint+0x0/0x1c kernel/panic.c:520) r3:8320b188 r2:00000001 r1:8230da08 r0:8231538c [<80251b18>] (check_panic_on_warn) from [<80251d0c>] (__warn+0x98/0x1a4 kernel/panic.c:1104) [<80251c74>] (__warn) from [<80252000>] (warn_slowpath_fmt+0x1e8/0x1f4 kernel/panic.c:1144) r8:00000009 r7:82452108 r6:df801cac r5:848c9900 r4:00000000 [<80251e1c>] (warn_slowpath_fmt) from [<810f5f60>] (usb_ep_enable+0x1b4/0x1d8 drivers/usb/gadget/udc/core.c:124) r10:868882b0 r9:8731a510 r8:848dd05c r7:86e59400 r6:00000000 r5:86e596e4 r4:848dd05c [<810f5dac>] (usb_ep_enable) from [<811539a0>] (hidg_set_alt+0x58/0x2bc drivers/usb/gadget/function/f_hid.c:1042) r7:86e59400 r6:00000000 r5:86e596e4 r4:86e596e4 [<81153948>] (hidg_set_alt) from [<810f0454>] (set_config drivers/usb/gadget/composite.c:1018 [inline]) [<81153948>] (hidg_set_alt) from [<810f0454>] (composite_setup+0x11a8/0x2160 drivers/usb/gadget/composite.c:1901) r10:86e12edc r9:8731a510 r8:848dd6b0 r7:81153948 r6:00000000 r5:86e596e4 r4:868882b0 r3:00000004 [<810ef2ac>] (composite_setup) from [<810f2bb8>] (configfs_composite_setup+0x6c/0x84 drivers/usb/gadget/configfs.c:1877) r10:0000d000 r9:86581480 r8:8688853c r7:df801e6c r6:a00e0193 r5:868882b0 r4:848dd6b0 [<810f2b4c>] (configfs_composite_setup) from [<810fcfb0>] (dummy_timer+0x8f0/0x1020 drivers/usb/gadget/udc/dummy_hcd.c:1955) r9:86581480 r8:86baa1c0 r7:848dd000 r6:84e4c1b4 r5:00000000 r4:86baa1c4 [<810fc6c0>] (dummy_timer) from [<803345e8>] (__run_hrtimer kernel/time/hrtimer.c:2074 [inline]) [<810fc6c0>] (dummy_timer) from [<803345e8>] (__hrtimer_run_queues+0x168/0x3a4 kernel/time/hrtimer.c:2131) r10:00000306 r9:810fc6c0 r8:000000c0 r7:00000306 r6:dddc8100 r5:dddc8210 r4:84e4c168 [<80334480>] (__hrtimer_run_queues) from [<803348b0>] (hrtimer_run_softirq+0x8c/0xc8 kernel/time/hrtimer.c:2148) r10:848c9900 r9:0000003b r8:9aca0000 r7:00000020 r6:000000f0 r5:200e0113 r4:dddc8100 [<80334824>] (hrtimer_run_softirq) from [<8025b2f8>] (handle_softirqs+0x160/0x4e8 kernel/softirq.c:645) r9:00000100 r8:00000101 r6:00000009 r5:00000008 r4:832030a0 [<8025b198>] (handle_softirqs) from [<8025b81c>] (__do_softirq kernel/softirq.c:679 [inline]) [<8025b198>] (handle_softirqs) from [<8025b81c>] (invoke_softirq kernel/softirq.c:519 [inline]) [<8025b198>] (handle_softirqs) from [<8025b81c>] (__irq_exit_rcu+0x150/0x1d4 kernel/softirq.c:758) r10:00000000 r9:848c9900 r8:00000000 r7:ea691de8 r6:824e5a18 r5:825201fc r4:848c9900 [<8025b6cc>] (__irq_exit_rcu) from [<8025bb64>] (irq_exit+0x10/0x18 kernel/softirq.c:787) r5:825201fc r4:830d70ec [<8025bb54>] (irq_exit) from [<81bafa7c>] (generic_handle_arch_irq+0x7c/0x80 kernel/irq/handle.c:293) [<81bafa00>] (generic_handle_arch_irq) from [<81b7caa0>] (call_with_stack+0x1c/0x20 arch/arm/lib/call_with_stack.S:40) r9:848c9900 r8:866ac3c0 r7:ea691e1c r6:ffffffff r5:200e0013 r4:80291460 [<81b7ca84>] (call_with_stack) from [<80200bec>] (__irq_svc+0x8c/0xbc arch/arm/kernel/entry-armv.S:228) Exception stack(0xea691de8 to 0xea691e30) 1de0: 00000001 00000002 00000001 848c9900 dddd1880 8320b484 1e00: 830d7880 00000000 866ac3c0 848c9900 00000000 ea691e8c ea691e28 ea691e38 1e20: 81bbdd00 80291460 200e0013 ffffffff [<802913a0>] (finish_task_switch) from [<81bb393c>] (context_switch kernel/sched/core.c:5536 [inline]) [<802913a0>] (finish_task_switch) from [<81bb393c>] (__schedule+0x540/0x146c kernel/sched/core.c:7284) r10:00000001 r9:866ac3c0 r8:00000000 r7:00000000 r6:848c9900 r5:848ca080 r4:84901900 [<81bb33fc>] (__schedule) from [<81bb4894>] (__schedule_loop kernel/sched/core.c:7361 [inline]) [<81bb33fc>] (__schedule) from [<81bb4894>] (schedule+0x2c/0xec kernel/sched/core.c:7376) r10:00000001 r9:848c9900 r8:00000000 r7:848c9900 r6:00000000 r5:ea691fb0 r4:848c9900 [<81bb4868>] (schedule) from [<8022b530>] (do_work_pending+0x34/0x4f0 arch/arm/kernel/signal.c:613) r5:ea691fb0 r4:848c9900 [<8022b4fc>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) Exception stack(0xea691fb0 to 0xea691ff8) 1fa0: ffffffff 00000004 000001fc 00000000 1fc0: 00000000 00000000 00000000 00000000 003562d8 00000000 00000001 76fd30dc 1fe0: 20000110 20000110 00019560 00019560 20000010 ffffffff r10:00000001 r9:848c9900 r8:00000000 r7:848c9900 r6:ffffffff r5:20000010 r4:00019560 Rebooting in 86400 seconds..