program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='1', 0x1)
symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='dummy_udc.0', 0xb)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$eJzs3U1rG0cfAPD/ylLenOexAyG0PZRADk0JkWO7LykUkh5LGxpo76mwFRMsR8GSQ+wGmhyaSy8lFEppoPQD9N5j6Bfopwi0gVCCaQ+l4LLyylFsyW+RIyX6/WDtGe1KM6PZ/2pmV2IDGFjH0z+5iFcj4pskYqRlXT6ylcdXt1t+fHMqXZJYWfn0zyTOrXutJPs/nGVeiYhfv4o4ldtYbm1xabZUqZTns/xYfe7aWG1x6fSVudJMeaZ8dWJy8uzbkxPvvftO19r65sW/v//k/odnvz6x/N3PD4/cTeJ8HM7Wpe3qQhG3WjPHS/9mqUKcX7fheBcK6ydJryvArgxlcV6I9BgwEkNZ1AMvvy8jYgUYUIn4hwHVHAc05/Zdmge/MB59sDoB2tj+/Oq5kTjQmBsdWk6emhml893RLpSflvHLH/fupktsfh7i4BZ5gB25dTsizuTzG49/SXb8270zjZPHm1tfxqB9/kAv3U/HP8mtiA3xn1sb/0Sb8c9wm9jdja3jP/ewC8V0lI7/3m87/l07dI0OZbn/NcZ8heTylUr5TET8PyJORmF/mt/ses7Z5Qcrnda1jv/SJS2/ORbM6vEwv//p50yX6qVnaXOrR7cjXms7/k3W+j9p0//p+3Fxm2UcK997vdO6rdu/t1Z+inijbf8/uaKVbH59cqyxP4w194qN/rpz7LdO5fe6/Wn/H9q8/aNJ6/Xa2s7L+PHAP+VO63a7/+9LPmuk92WP3SjV6/PjEfuSj/PD6x+fePLcZr65fdr+kyfax/9m+386+fp8m+2/c/ROx037of+nd9T/O088+OiLHzqVv73+f6uROpk9sp3j33Yr+CzvHQAAAAAAAPSbXEQcjiRXXEvncsXi6vc7jsahXKVaq5+6XF24Oh2N38qORiHXvNI90vJ9iPHs+7DN/MS6/GREHImIb4cONvLFqWpluteNBwAAAAAAAAAAAAAAAAAAgD4x3OH3/6nfh3pdO2DPNW5ssL/XtQB6Yctb/nfjTk9AX9oy/oGX1s7j35kBeFn4/IfBJf5hcIl/GFzbjf/CyB5XBHjufP7D4BL/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FUXL1xIl5Xlxzen0vz09cWF2er109Pl2mxxbmGqOFWdv1acqVZnKuXiVHVuq9erVKvXxidi4cZYvVyrj9UWly7NVReu1i9dmSvNlC+VC8+lVQAAAAAAAAAAAAAAAAAAAPBiqS0uzZYqlfK8RMfEueiLauxlA1ft6un5fmmFRFcTPT4wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECL/wIAAP//AzIzTA==")
rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00')
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20863, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) (async)
write(r0, &(0x7f0000000200)='1', 0x1) (async)
symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') (async)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) (async)
write(r1, &(0x7f0000000500)='dummy_udc.0', 0xb) (async)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") (async)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') (async)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) (async)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async)
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20863, 0x0) (async)
[ 128.744928][ T4649] Bluetooth: hci0: command tx timeout
[ 128.887756][ T5321] loop0: detected capacity change from 0 to 1024
[ 128.972132][ T5321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 128.987255][ T5321] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck.
[ 128.999036][ T5321] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.0: missing EA_INODE flag
[ 129.001823][ T5321] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.0: error while reading EA inode 11 err=-117
[ 129.096250][ T26] audit: type=1800 audit(1790151566.905:2): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="overlay" ino=15 res=0 errno=0
[ 129.097624][ T5337] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers
[ 129.100105][ T26] audit: type=1804 audit(1790151566.905:3): pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.0" name="/newroot/0/file1/file0/file1" dev="overlay" ino=15 res=1 errno=0
[ 129.103363][ T5319] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 129.150927][ T5339] evm: overlay not supported
[ 129.167992][ T5338] overlayfs: failed lookup in lower (/, name='file2', err=-40): overlapping layers
[ 129.187736][ T5340] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers
[ 129.255749][ T5319] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03
[ 129.256733][ T5319] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 129.256751][ T5319] usb 5-1: Dual-Role OTG device on HNP port
[ 129.257002][ T5319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 129.263623][ C0] ------------[ cut here ]------------
[ 129.263636][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
[ 129.263646][ C0] WARNING: drivers/usb/gadget/udc/core.c:125 at usb_ep_enable+0x148/0x480, CPU#0: kworker/0:5/5319
[ 129.286593][ C0] Modules linked in:
[ 129.288259][ C0] CPU: 0 UID: 0 PID: 5319 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 129.292090][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 129.296192][ C0] Workqueue: usb_hub_wq hub_event
[ 129.298321][ C0] RIP: 0010:usb_ep_enable+0x1bc/0x480
[ 129.300334][ C0] Code: ca 84 74 fa 49 83 3f 00 48 c7 c0 20 69 d3 8c 49 c7 c0 40 69 d3 8c 4c 0f 44 c0 4c 89 f7 48 c7 c6 71 19 6b 8e 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 f0 dc 02 fa 65 8b
[ 129.308718][ C0] RSP: 0018:ffffc90000007910 EFLAGS: 00010082
[ 129.311633][ C0] RAX: ffffffff8cd36920 RBX: ffff8880342300e0 RCX: ffffffff8cd38740
[ 129.315542][ C0] RDX: 0000000000000081 RSI: ffffffff8e6b1971 RDI: ffffffff908866d0
[ 129.319087][ C0] RBP: dffffc0000000000 R08: ffffffff8cd36940 R09: 0000000000000002
[ 129.322663][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: ffffffff8cd38740
[ 129.326209][ C0] R13: 0000000000000081 R14: ffffffff908866d0 R15: ffff8880342300f8
[ 129.329928][ C0] FS: 0000000000000000(0000) GS:ffff88808c2c0000(0000) knlGS:0000000000000000
[ 129.333968][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 129.336852][ C0] CR2: 00007f4337db94c0 CR3: 00000000443d3000 CR4: 0000000000352ef0
[ 129.340278][ C0] Call Trace:
[ 129.341771][ C0]
[ 129.343036][ C0] hidg_set_alt+0x12a/0xa60
[ 129.345379][ C0] ? usb_gadget_set_state+0x12c/0x2d0
[ 129.348230][ C0] set_config+0x749/0x1160
[ 129.350446][ C0] composite_setup+0x1de7/0x3480
[ 129.352819][ C0] configfs_composite_setup+0xc7/0x100
[ 129.355508][ C0] dummy_timer+0x2f43/0x4cf0
[ 129.357513][ C0] ? call_timer_fn+0xd5/0x5f0
[ 129.359581][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 129.361818][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 129.364156][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 129.366757][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 129.368953][ C0] __hrtimer_run_queues+0x3bc/0xa10
[ 129.371551][ C0] hrtimer_run_softirq+0x1e3/0x2e0
[ 129.374111][ C0] handle_softirqs+0x226/0x860
[ 129.376249][ C0] ? __irq_exit_rcu+0xcb/0x220
[ 129.378388][ C0] __irq_exit_rcu+0xcb/0x220
[ 129.380442][ C0] irq_exit_rcu+0x9/0x30
[ 129.382375][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 129.384833][ C0]
[ 129.386156][ C0]
[ 129.387480][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 129.389975][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 129.392394][ C0] Code: f7 e8 4d 31 b9 f5 f7 c3 00 02 00 00 74 05 e8 00 8d e5 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 3e aa f5 65 48 8b 05 ec 50 ab 07 48 85 c0 74 18 5b 41 5e c3
[ 129.400186][ C0] RSP: 0018:ffffc9000ed96f50 EFLAGS: 00000206
[ 129.402531][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001
[ 129.405932][ C0] RDX: 0000000000000006 RSI: ffffffff8e4189c4 RDI: 0000000000000001
[ 129.409168][ C0] RBP: 0000000000000007 R08: ffffffff907a767f R09: 1ffffffff20f4ecf
[ 129.413087][ C0] R10: dffffc0000000000 R11: fffffbfff20f4ed0 R12: 0000000000000000
[ 129.423325][ C0] R13: dffffc0000000000 R14: ffff888034230000 R15: 1ffff11003f51694
[ 129.426621][ C0] dummy_urb_enqueue+0x587/0x780
[ 129.428920][ C0] usb_hcd_submit_urb+0x328/0x1b60
[ 129.430859][ C0] usb_start_wait_urb+0x13f/0x5b0
[ 129.433169][ C0] ? rcu_is_watching+0x16/0xb0
[ 129.434979][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 129.437022][ C0] usb_control_msg+0x234/0x3e0
[ 129.438795][ C0] ? kfree+0x1c5/0x650
[ 129.440374][ C0] usb_set_configuration+0x12b1/0x2180
[ 129.442328][ C0] usb_generic_driver_probe+0x8d/0x150
[ 129.444324][ C0] usb_probe_device+0x1c3/0x3b0
[ 129.446057][ C0] ? __pfx_usb_probe_device+0x10/0x10
[ 129.448096][ C0] really_probe+0x254/0xae0
[ 129.450995][ C0] __driver_probe_device+0x1e8/0x360
[ 129.453356][ C0] driver_probe_device+0x4f/0x240
[ 129.455522][ C0] __device_attach_driver+0x270/0x410
[ 129.457917][ C0] bus_for_each_drv+0x258/0x2f0
[ 129.460096][ C0] ? __pfx___device_attach_driver+0x10/0x10
[ 129.462863][ C0] ? __pfx_bus_for_each_drv+0x10/0x10
[ 129.465428][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 129.468146][ C0] __device_attach+0x2c4/0x450
[ 129.470550][ C0] ? __pfx___device_attach+0x10/0x10
[ 129.473084][ C0] ? do_raw_spin_unlock+0x4d/0x200
[ 129.475442][ C0] ? _raw_spin_unlock+0x28/0x50
[ 129.477613][ C0] device_initial_probe+0xa1/0xd0
[ 129.479812][ C0] bus_probe_device+0x12a/0x220
[ 129.482029][ C0] device_add+0x7d7/0xb80
[ 129.484150][ C0] usb_new_device+0x9aa/0x1690
[ 129.486664][ C0] ? __pfx_usb_new_device+0x10/0x10
[ 129.489373][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 129.491626][ C0] hub_event+0x28e8/0x4d30
[ 129.493638][ C0] ? do_raw_spin_unlock+0x4d/0x200
[ 129.495962][ C0] ? __pfx_hub_event+0x10/0x10
[ 129.498097][ C0] ? rcu_is_watching+0x16/0xb0
[ 129.500245][ C0] ? process_scheduled_works+0x97a/0x1630
[ 129.502913][ C0] process_scheduled_works+0xc3d/0x1630
[ 129.505543][ C0] ? __pfx_process_scheduled_works+0x10/0x10
[ 129.508249][ C0] ? assign_work+0x3cf/0x5d0
[ 129.510348][ C0] worker_thread+0xa47/0xfb0
[ 129.512361][ C0] ? __kthread_parkme+0x71/0x1f0
[ 129.514395][ C0] kthread+0x38b/0x480
[ 129.516359][ C0] ? __pfx_worker_thread+0x10/0x10
[ 129.518808][ C0] ? __pfx_kthread+0x10/0x10
[ 129.520939][ C0] ret_from_fork+0x514/0xb70
[ 129.523073][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 129.525343][ C0] ? __switch_to+0xc89/0x1420
[ 129.527488][ C0] ? __pfx_kthread+0x10/0x10
[ 129.529630][ C0] ret_from_fork_asm+0x1a/0x30
[ 129.532053][ C0]
[ 129.533719][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 129.537005][ C0] CPU: 0 UID: 0 PID: 5319 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 129.540810][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 129.545453][ C0] Workqueue: usb_hub_wq hub_event
[ 129.547687][ C0] Call Trace:
[ 129.549178][ C0]
[ 129.550517][ C0] vpanic+0x56d/0xa60
[ 129.552344][ C0] ? __pfx__printk+0x10/0x10
[ 129.554394][ C0] ? __pfx_vpanic+0x10/0x10
[ 129.556689][ C0] ? is_bpf_text_address+0x292/0x2b0
[ 129.559526][ C0] ? is_bpf_text_address+0x26/0x2b0
[ 129.562306][ C0] panic+0xc5/0xd0
[ 129.564112][ C0] ? __pfx_panic+0x10/0x10
[ 129.565794][ C0] ? ret_from_fork_asm+0x1a/0x30
[ 129.567818][ C0] __warn+0x315/0x4c0
[ 129.569612][ C0] ? usb_ep_enable+0x148/0x480
[ 129.571558][ C0] ? usb_ep_enable+0x148/0x480
[ 129.573448][ C0] __report_bug+0x276/0x570
[ 129.575285][ C0] ? __driver_probe_device+0x1e8/0x360
[ 129.577592][ C0] ? driver_probe_device+0x4f/0x240
[ 129.579730][ C0] ? __device_attach_driver+0x270/0x410
[ 129.582112][ C0] ? usb_ep_enable+0x148/0x480
[ 129.584131][ C0] ? __pfx___report_bug+0x10/0x10
[ 129.586309][ C0] report_bug_entry+0x19b/0x290
[ 129.588662][ C0] ? usb_ep_enable+0x1bc/0x480
[ 129.591009][ C0] ? usb_ep_enable+0x1c1/0x480
[ 129.593307][ C0] handle_bug+0xce/0x200
[ 129.595277][ C0] exc_invalid_op+0x1a/0x50
[ 129.597359][ C0] asm_exc_invalid_op+0x1a/0x20
[ 129.599534][ C0] RIP: 0010:usb_ep_enable+0x1bc/0x480
[ 129.601972][ C0] Code: ca 84 74 fa 49 83 3f 00 48 c7 c0 20 69 d3 8c 49 c7 c0 40 69 d3 8c 4c 0f 44 c0 4c 89 f7 48 c7 c6 71 19 6b 8e 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 f0 dc 02 fa 65 8b
[ 129.610164][ C0] RSP: 0018:ffffc90000007910 EFLAGS: 00010082
[ 129.612772][ C0] RAX: ffffffff8cd36920 RBX: ffff8880342300e0 RCX: ffffffff8cd38740
[ 129.616133][ C0] RDX: 0000000000000081 RSI: ffffffff8e6b1971 RDI: ffffffff908866d0
[ 129.619926][ C0] RBP: dffffc0000000000 R08: ffffffff8cd36940 R09: 0000000000000002
[ 129.623391][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: ffffffff8cd38740
[ 129.626899][ C0] R13: 0000000000000081 R14: ffffffff908866d0 R15: ffff8880342300f8
[ 129.630218][ C0] hidg_set_alt+0x12a/0xa60
[ 129.632161][ C0] ? usb_gadget_set_state+0x12c/0x2d0
[ 129.634355][ C0] set_config+0x749/0x1160
[ 129.636176][ C0] composite_setup+0x1de7/0x3480
[ 129.638356][ C0] configfs_composite_setup+0xc7/0x100
[ 129.640617][ C0] dummy_timer+0x2f43/0x4cf0
[ 129.643139][ C0] ? call_timer_fn+0xd5/0x5f0
[ 129.645262][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 129.647766][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 129.649992][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 129.652610][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 129.654812][ C0] __hrtimer_run_queues+0x3bc/0xa10
[ 129.657151][ C0] hrtimer_run_softirq+0x1e3/0x2e0
[ 129.659413][ C0] handle_softirqs+0x226/0x860
[ 129.661508][ C0] ? __irq_exit_rcu+0xcb/0x220
[ 129.663597][ C0] __irq_exit_rcu+0xcb/0x220
[ 129.665393][ C0] irq_exit_rcu+0x9/0x30
[ 129.667196][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 129.669646][ C0]
[ 129.670980][ C0]
[ 129.672303][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 129.674858][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 129.677710][ C0] Code: f7 e8 4d 31 b9 f5 f7 c3 00 02 00 00 74 05 e8 00 8d e5 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 3e aa f5 65 48 8b 05 ec 50 ab 07 48 85 c0 74 18 5b 41 5e c3
[ 129.685854][ C0] RSP: 0018:ffffc9000ed96f50 EFLAGS: 00000206
[ 129.688428][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001
[ 129.692508][ C0] RDX: 0000000000000006 RSI: ffffffff8e4189c4 RDI: 0000000000000001
[ 129.700928][ C0] RBP: 0000000000000007 R08: ffffffff907a767f R09: 1ffffffff20f4ecf
[ 129.704425][ C0] R10: dffffc0000000000 R11: fffffbfff20f4ed0 R12: 0000000000000000
[ 129.707662][ C0] R13: dffffc0000000000 R14: ffff888034230000 R15: 1ffff11003f51694
[ 129.711087][ C0] dummy_urb_enqueue+0x587/0x780
[ 129.714005][ C0] usb_hcd_submit_urb+0x328/0x1b60
[ 129.716634][ C0] usb_start_wait_urb+0x13f/0x5b0
[ 129.719053][ C0] ? rcu_is_watching+0x16/0xb0
[ 129.721858][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 129.724599][ C0] usb_control_msg+0x234/0x3e0
[ 129.726912][ C0] ? kfree+0x1c5/0x650
[ 129.728826][ C0] usb_set_configuration+0x12b1/0x2180
[ 129.731441][ C0] usb_generic_driver_probe+0x8d/0x150
[ 129.733741][ C0] usb_probe_device+0x1c3/0x3b0
[ 129.735929][ C0] ? __pfx_usb_probe_device+0x10/0x10
[ 129.738327][ C0] really_probe+0x254/0xae0
[ 129.740295][ C0] __driver_probe_device+0x1e8/0x360
[ 129.742515][ C0] driver_probe_device+0x4f/0x240
[ 129.744693][ C0] __device_attach_driver+0x270/0x410
[ 129.746979][ C0] bus_for_each_drv+0x258/0x2f0
[ 129.749081][ C0] ? __pfx___device_attach_driver+0x10/0x10
[ 129.751558][ C0] ? __pfx_bus_for_each_drv+0x10/0x10
[ 129.753825][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 129.756125][ C0] __device_attach+0x2c4/0x450
[ 129.758200][ C0] ? __pfx___device_attach+0x10/0x10
[ 129.760405][ C0] ? do_raw_spin_unlock+0x4d/0x200
[ 129.762632][ C0] ? _raw_spin_unlock+0x28/0x50
[ 129.764579][ C0] device_initial_probe+0xa1/0xd0
[ 129.766432][ C0] bus_probe_device+0x12a/0x220
[ 129.768350][ C0] device_add+0x7d7/0xb80
[ 129.770041][ C0] usb_new_device+0x9aa/0x1690
[ 129.771913][ C0] ? __pfx_usb_new_device+0x10/0x10
[ 129.774065][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 129.776335][ C0] hub_event+0x28e8/0x4d30
[ 129.778317][ C0] ? do_raw_spin_unlock+0x4d/0x200
[ 129.780468][ C0] ? __pfx_hub_event+0x10/0x10
[ 129.782715][ C0] ? rcu_is_watching+0x16/0xb0
[ 129.784757][ C0] ? process_scheduled_works+0x97a/0x1630
[ 129.787073][ C0] process_scheduled_works+0xc3d/0x1630
[ 129.789527][ C0] ? __pfx_process_scheduled_works+0x10/0x10
[ 129.792258][ C0] ? assign_work+0x3cf/0x5d0
[ 129.794349][ C0] worker_thread+0xa47/0xfb0
[ 129.796363][ C0] ? __kthread_parkme+0x71/0x1f0
[ 129.798643][ C0] kthread+0x38b/0x480
[ 129.800400][ C0] ? __pfx_worker_thread+0x10/0x10
[ 129.802684][ C0] ? __pfx_kthread+0x10/0x10
[ 129.804706][ C0] ret_from_fork+0x514/0xb70
[ 129.806825][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 129.809259][ C0] ? __switch_to+0xc89/0x1420
[ 129.811526][ C0] ? __pfx_kthread+0x10/0x10
[ 129.813684][ C0] ret_from_fork_asm+0x1a/0x30
[ 129.815844][ C0]
[ 129.817528][ C0] Kernel Offset: disabled
[ 129.819208][ C0] Rebooting in 86400 seconds..