------------[ cut here ]------------
usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
WARNING: CPU: 0 PID: 0 at drivers/usb/gadget/udc/core.c:134 usb_ep_enable+0x210/0x3c0 drivers/usb/gadget/udc/core.c:133
Modules linked in:
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
RIP: 0010:usb_ep_enable+0x210/0x3c0 drivers/usb/gadget/udc/core.c:133
Code: 4d 00 48 c7 c0 a0 c1 6d 86 49 c7 c0 c0 c1 6d 86 4c 0f 44 c0 48 c7 c7 60 c1 6d 86 48 c7 c6 a2 d6 1f 87 44 89 f2 e8 00 c0 46 fd <0f> 0b e9 4c ff ff ff e8 b4 d8 cb fd 49 bc 00 00 00 00 00 fc ff df
RSP: 0018:ffffc90000007878 EFLAGS: 00010046
RAX: e958d90b8be76300 RBX: ffff8881053780b0 RCX: ffffffff87c156c0
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
RBP: ffffc900000078a0 R08: ffff8881f6c29593 R09: 1ffff1103ed852b2
R10: dffffc0000000000 R11: ffffed103ed852b3 R12: dffffc0000000000
R13: ffff8881053780b8 R14: 0000000000000081 R15: ffff888118351bba
FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5adf79ffd0 CR3: 000000010d3c8000 CR4: 00000000003526b0
DR0: 0000000000000017 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
hidg_set_alt+0x138/0xa70 drivers/usb/gadget/function/f_hid.c:1057
set_config+0x80f/0xd10 drivers/usb/gadget/composite.c:1021
composite_setup+0x18b0/0x3320 drivers/usb/gadget/composite.c:1930
configfs_composite_setup+0xc6/0x110 drivers/usb/gadget/configfs.c:1883
dummy_timer+0x2eee/0x4900 drivers/usb/gadget/udc/dummy_hcd.c:1935
__run_hrtimer kernel/time/hrtimer.c:1758 [inline]
__hrtimer_run_queues+0x3ae/0x8e0 kernel/time/hrtimer.c:1822
hrtimer_run_softirq+0x159/0x560 kernel/time/hrtimer.c:1839
handle_softirqs+0x1b0/0x5b0 kernel/softirq.c:684
__do_softirq kernel/softirq.c:722 [inline]
invoke_softirq kernel/softirq.c:539 [inline]
__irq_exit_rcu+0x47/0xb0 kernel/softirq.c:771
irq_exit_rcu+0xd/0x30 kernel/softirq.c:783
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0x82/0x90 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702
RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:116
Code: cc cc cc cc cc cc cc b8 8b 27 37 b1 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 99 3c 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90
RSP: 0018:ffffffff87c07da0 EFLAGS: 000002c2
RAX: ffff8881f6c00000 RBX: ffffffff87c156c0 RCX: ffffffff85aac53d
RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000292cdc
RBP: ffffffff87c07da0 R08: ffff8881f6c396fb R09: 1ffff1103ed872df
R10: dffffc0000000000 R11: ffffed103ed872e0 R12: 0000000000000000
R13: 1ffffffff0f82ad8 R14: dffffc0000000000 R15: ffffffff886dd6a8
arch_safe_halt arch/x86/include/asm/paravirt.h:-1 [inline]
default_idle+0x17/0x30 arch/x86/kernel/process.c:754
arch_cpu_idle+0xd/0x20 arch/x86/kernel/process.c:791
default_idle_call+0x3e/0x80 kernel/sched/idle.c:117
cpuidle_idle_call kernel/sched/idle.c:193 [inline]
do_idle+0x2fc/0x570 kernel/sched/idle.c:346
cpu_startup_entry+0x47/0x60 kernel/sched/idle.c:445
rest_init+0x10b/0x130 init/main.c:760
start_kernel+0x46a/0x4bb init/main.c:1242
x86_64_start_reservations+0x2e/0x30 arch/x86/kernel/head64.c:507
x86_64_start_kernel+0x6a/0x7b arch/x86/kernel/head64.c:488
common_startup_64+0x13b/0x157
---[ end trace 0000000000000000 ]---
configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED!
----------------
Code disassembly (best guess):
0: cc int3
1: cc int3
2: cc int3
3: cc int3
4: cc int3
5: cc int3
6: cc int3
7: b8 8b 27 37 b1 mov $0xb137278b,%eax
c: 90 nop
d: 90 nop
e: 90 nop
f: 90 nop
10: 90 nop
11: 90 nop
12: 90 nop
13: 90 nop
14: 90 nop
15: 90 nop
16: 90 nop
17: f3 0f 1e fa endbr64
1b: 66 90 xchg %ax,%ax
1d: 0f 00 2d 83 99 3c 00 verw 0x3c9983(%rip) # 0x3c99a7
24: 55 push %rbp
25: 48 89 e5 mov %rsp,%rbp
28: fb sti
29: f4 hlt
* 2a: 5d pop %rbp <-- trapping instruction
2b: c3 ret
2c: cc int3
2d: cc int3
2e: cc int3
2f: cc int3
30: cc int3
31: cc int3
32: cc int3
33: cc int3
34: cc int3
35: cc int3
36: cc int3
37: b8 00 00 00 00 mov $0x0,%eax
3c: 90 nop
3d: 90 nop
3e: 90 nop
3f: 90 nop