------------[ cut here ]------------ usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 WARNING: CPU: 1 PID: 3927 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x2a8/0x528 drivers/usb/gadget/udc/core.c:124 Modules linked in: CPU: 1 PID: 3927 Comm: syslogd Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : usb_ep_enable+0x2a8/0x528 drivers/usb/gadget/udc/core.c:124 lr : usb_ep_enable+0x2a8/0x528 drivers/usb/gadget/udc/core.c:124 sp : ffff800008017880 x29: ffff800008017880 x28: 1fffe00019bc08c6 x27: 1fffe00019bc08dc x26: dfff800000000000 x25: ffff0000cde04630 x24: 1fffe0001a2b0821 x23: ffff0000d15840e8 x22: dfff800000000000 x21: 0000000000000081 x20: ffff0000f5deb33a x19: ffff0000d15840e0 x18: 0000000000000000 x17: 0000000000000000 x16: ffff8000082f591c x15: 0000000000000000 x14: 0000000000000001 x13: 1ffff00001002e60 x12: 0000000000000000 x11: ff0080000819676c x10: 0000000000000000 x9 : 6789c53574339000 x8 : 6789c53574339000 x7 : 00000000009880f0 x6 : 00000000009880d0 x5 : ffff800008017318 x4 : ffff8000164a6d18 x3 : ffff80000831ff30 x2 : 0000000000000001 x1 : 0000000000000102 x0 : 0000000000000000 Call trace: usb_ep_enable+0x2a8/0x528 drivers/usb/gadget/udc/core.c:124 hidg_set_alt+0x128/0x820 drivers/usb/gadget/function/f_hid.c:823 set_config+0x668/0xdf8 drivers/usb/gadget/composite.c:986 composite_setup+0x1590/0x27f4 drivers/usb/gadget/composite.c:1893 configfs_composite_setup+0xc0/0x104 drivers/usb/gadget/configfs.c:1484 dummy_timer+0xdb0/0x2aa8 drivers/usb/gadget/udc/dummy_hcd.c:1954 __run_hrtimer kernel/time/hrtimer.c:1751 [inline] __hrtimer_run_queues+0x444/0xc58 kernel/time/hrtimer.c:1815 hrtimer_run_softirq+0x164/0x408 kernel/time/hrtimer.c:1832 handle_softirqs+0x318/0xc90 kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901 do_softirq_own_stack+0x1c/0x28 arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0x23c/0x430 kernel/softirq.c:679 irq_exit_rcu+0x14/0x84 kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:585 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:122 [inline] kasan_quarantine_put+0xd4/0x200 mm/kasan/quarantine.c:240 ____kasan_slab_free+0x154/0x1b0 mm/kasan/common.c:239 __kasan_slab_free+0x18/0x28 mm/kasan/common.c:245 kasan_slab_free include/linux/kasan.h:177 [inline] slab_free_hook mm/slub.c:1735 [inline] slab_free_freelist_hook+0x16c/0x1e8 mm/slub.c:1761 slab_free mm/slub.c:3694 [inline] __kmem_cache_free+0xbc/0x21c mm/slub.c:3707 kfree+0xd0/0x1a8 mm/slab_common.c:988 skb_free_head net/core/skbuff.c:762 [inline] skb_release_data+0x3d8/0x63c net/core/skbuff.c:791 skb_release_all net/core/skbuff.c:856 [inline] __kfree_skb net/core/skbuff.c:870 [inline] consume_skb+0xa0/0x104 net/core/skbuff.c:1038 skb_free_datagram+0x20/0x30 net/core/datagram.c:322 __unix_dgram_recvmsg+0x7d0/0xb24 net/unix/af_unix.c:2543 unix_dgram_recvmsg+0xd0/0xe8 net/unix/af_unix.c:2560 sock_recvmsg_nosec net/socket.c:1023 [inline] sock_recvmsg net/socket.c:1041 [inline] sock_read_iter+0x26c/0x324 net/socket.c:1122 call_read_iter include/linux/fs.h:2265 [inline] new_sync_read fs/read_write.c:389 [inline] vfs_read+0x3cc/0x7b8 fs/read_write.c:470 ksys_read+0x12c/0x228 fs/read_write.c:613 __do_sys_read fs/read_write.c:623 [inline] __se_sys_read fs/read_write.c:621 [inline] __arm64_sys_read+0x7c/0x90 fs/read_write.c:621 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x12c arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:589 irq event stamp: 3301675 hardirqs last enabled at (3301674): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (3301674): [] _raw_spin_unlock_irqrestore+0x48/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (3301675): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (3301675): [] _raw_spin_lock_irqsave+0xa4/0xb0 kernel/locking/spinlock.c:162 softirqs last enabled at (3301176): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (3301671): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED! net_ratelimit: 68 callbacks suppressed