------------[ cut here ]------------ usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 WARNING: CPU: 0 PID: 0 at drivers/usb/gadget/udc/core.c:123 usb_ep_enable+0x210/0x3c0 drivers/usb/gadget/udc/core.c:122 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:usb_ep_enable+0x210/0x3c0 drivers/usb/gadget/udc/core.c:122 Code: 4d 00 48 c7 c0 e0 52 6d 86 49 c7 c0 00 53 6d 86 4c 0f 44 c0 48 c7 c7 a0 52 6d 86 48 c7 c6 46 ec 1c 87 44 89 f2 e8 20 c8 4b fd <0f> 0b e9 4c ff ff ff e8 e4 ef ce fd 49 bc 00 00 00 00 00 fc ff df RSP: 0018:ffffc90000007878 EFLAGS: 00010046 RAX: 5c68cb65df5dcf00 RBX: ffff8881043000b0 RCX: ffffffff874156c0 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 RBP: ffffc900000078a0 R08: ffff8881f6e294d3 R09: 1ffff1103edc529a R10: dffffc0000000000 R11: ffffed103edc529b R12: dffffc0000000000 R13: ffff8881043000b8 R14: 0000000000000081 R15: ffff88810d6d653a FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff7f0344130 CR3: 000000010cb72000 CR4: 00000000003526b0 Call Trace: hidg_set_alt+0x138/0xa70 drivers/usb/gadget/function/f_hid.c:1057 set_config+0x812/0xd10 drivers/usb/gadget/composite.c:1021 composite_setup+0x1885/0x32f0 drivers/usb/gadget/composite.c:1929 configfs_composite_setup+0xc6/0x110 drivers/usb/gadget/configfs.c:1883 dummy_timer+0x2eee/0x4900 drivers/usb/gadget/udc/dummy_hcd.c:1935 __run_hrtimer kernel/time/hrtimer.c:1757 [inline] __hrtimer_run_queues+0x3ae/0x8e0 kernel/time/hrtimer.c:1821 hrtimer_run_softirq+0x159/0x560 kernel/time/hrtimer.c:1838 handle_softirqs+0x1aa/0x620 kernel/softirq.c:621 __do_softirq kernel/softirq.c:659 [inline] invoke_softirq kernel/softirq.c:476 [inline] __irq_exit_rcu+0x47/0xb0 kernel/softirq.c:708 irq_exit_rcu+0xd/0x30 kernel/softirq.c:720 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x82/0x90 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702 RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:116 Code: cc cc cc cc cc cc cc b8 5c 57 53 33 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 a9 43 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2 RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a3b4fd RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000000bd24 RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000 R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87ecb868 arch_safe_halt arch/x86/include/asm/paravirt.h:-1 [inline] default_idle+0x17/0x30 arch/x86/kernel/process.c:754 arch_cpu_idle+0xd/0x20 arch/x86/kernel/process.c:791 default_idle_call+0x3e/0x80 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:193 [inline] do_idle+0x2fc/0x570 kernel/sched/idle.c:346 cpu_startup_entry+0x47/0x60 kernel/sched/idle.c:445 rest_init+0x10b/0x130 init/main.c:760 start_kernel+0x462/0x4bb init/main.c:1242 x86_64_start_reservations+0x2e/0x30 arch/x86/kernel/head64.c:507 x86_64_start_kernel+0x6a/0x7b arch/x86/kernel/head64.c:488 common_startup_64+0x13b/0x157 ---[ end trace 0000000000000000 ]--- configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED! ---------------- Code disassembly (best guess): 0: cc int3 1: cc int3 2: cc int3 3: cc int3 4: cc int3 5: cc int3 6: cc int3 7: b8 5c 57 53 33 mov $0x3353575c,%eax c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: f3 0f 1e fa endbr64 1b: 66 90 xchg %ax,%ax 1d: 0f 00 2d 23 a9 43 00 verw 0x43a923(%rip) # 0x43a947 24: 55 push %rbp 25: 48 89 e5 mov %rsp,%rbp 28: fb sti 29: f4 hlt * 2a: 5d pop %rbp <-- trapping instruction 2b: c3 ret 2c: cc int3 2d: cc int3 2e: cc int3 2f: cc int3 30: cc int3 31: cc int3 32: cc int3 33: cc int3 34: cc int3 35: cc int3 36: cc int3 37: b8 00 00 00 00 mov $0x0,%eax 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop