configfs-gadget.g1 gadget.2: common->fsg is NULL in fsg_setup at 466
------------[ cut here ]------------
1
WARNING: drivers/usb/gadget/function/f_mass_storage.c:315 at __fsg_is_set.part.0.isra.0+0x2c/0x3a drivers/usb/gadget/function/f_mass_storage.c:315, CPU#1: swapper/1/0
Modules linked in:
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
RIP: 0010:__fsg_is_set.part.0.isra.0+0x2c/0x3a drivers/usb/gadget/function/f_mass_storage.c:315
Code: 41 89 d4 55 48 89 f5 53 48 89 fb e8 ce fb b6 00 48 8d bb d8 00 00 00 44 89 e1 48 89 ea 48 c7 c6 60 85 dc 8c e8 65 60 eb ff 90 <0f> 0b 90 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 a1 fb b6 00 4c 89 e2
RSP: 0018:ffffc90000a18a40 EFLAGS: 00010082
RAX: 0000000000000000 RBX: ffff88802a70cc00 RCX: 0000000000000000
RDX: ffff88801fa84b00 RSI: ffffffff81404f99 RDI: fffff52000143138
RBP: ffffffff8cdca200 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000102 R11: 0000000000000001 R12: 00000000000001d2
R13: ffff8880337310e8 R14: 0000000000000000 R15: ffffc90000a18de0
FS: 0000000000000000(0000) GS:ffff888123c64000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f30e1ae2ff8 CR3: 000000007c7c6000 CR4: 00000000003526f0
Call Trace:
__fsg_is_set drivers/usb/gadget/function/f_mass_storage.c:864 [inline]
fsg_setup.cold+0x38/0x4c drivers/usb/gadget/function/f_mass_storage.c:466
composite_setup+0xad8/0x9290 drivers/usb/gadget/composite.c:2239
configfs_composite_setup+0xfb/0x130 drivers/usb/gadget/configfs.c:1877
dummy_timer+0x2039/0x3700 drivers/usb/gadget/udc/dummy_hcd.c:1951
__run_hrtimer kernel/time/hrtimer.c:2067 [inline]
__hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2124
hrtimer_run_softirq+0x1ca/0x360 kernel/time/hrtimer.c:2141
handle_softirqs+0x1e6/0x9d0 kernel/softirq.c:645
__do_softirq kernel/softirq.c:679 [inline]
invoke_softirq kernel/softirq.c:519 [inline]
__irq_exit_rcu+0x194/0x210 kernel/softirq.c:767
irq_exit_rcu+0x9/0x30 kernel/softirq.c:784
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1062
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64
Code: 38 9c 02 e9 c3 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 66 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffc900001a7e00 EFLAGS: 00000242
RAX: 000000000003d1bf RBX: ffff88801fa84b00 RCX: ffffffff8bcf5115
RDX: 0000000000000001 RSI: ffffffff8e3eaf43 RDI: ffffffff8c620d80
RBP: ffffed1003f50960 R08: 0000000000000001 R09: ffffed10170a67bd
R10: ffff8880b8533deb R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 1ffff92000034fc4 R15: dffffc0000000000
arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline]
default_idle+0x9/0x10 arch/x86/kernel/process.c:768
default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
cpuidle_idle_call kernel/sched/idle.c:199 [inline]
do_idle+0x3ae/0x5b0 kernel/sched/idle.c:355
cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454
start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312
common_startup_64+0x13e/0x158
----------------
Code disassembly (best guess), 1 bytes skipped:
0: 9c pushf
1: 02 e9 add %cl,%ch
3: c3 ret
4: 4f 03 00 rex.WRXB add (%r8),%r8
7: 0f 1f 00 nopl (%rax)
a: 90 nop
b: 90 nop
c: 90 nop
d: 90 nop
e: 90 nop
f: 90 nop
10: 90 nop
11: 90 nop
12: 90 nop
13: 90 nop
14: 90 nop
15: 90 nop
16: 90 nop
17: 90 nop
18: 90 nop
19: 90 nop
1a: f3 0f 1e fa endbr64
1e: 66 90 xchg %ax,%ax
20: 0f 00 2d c3 66 1c 00 verw 0x1c66c3(%rip) # 0x1c66ea
27: fb sti
28: f4 hlt
* 29: c3 ret <-- trapping instruction
2a: cc int3
2b: cc int3
2c: cc int3
2d: cc int3
2e: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1)
35: 00 00 00
38: 66 90 xchg %ax,%ax
3a: 90 nop
3b: 90 nop
3c: 90 nop
3d: 90 nop
3e: 90 nop