------------[ cut here ]------------ usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 WARNING: CPU: 0 PID: 5945 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x2a8/0x528 drivers/usb/gadget/udc/core.c:124 Modules linked in: CPU: 0 PID: 5945 Comm: syz.2.540 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : usb_ep_enable+0x2a8/0x528 drivers/usb/gadget/udc/core.c:124 lr : usb_ep_enable+0x2a8/0x528 drivers/usb/gadget/udc/core.c:124 sp : ffff800008007880 x29: ffff800008007880 x28: 1fffe0001ed44cd2 x27: 1fffe0001ed44ce8 x26: dfff800000000000 x25: ffff0000f6a26690 x24: 1fffe00019f87821 x23: ffff0000cfc3c0e8 x22: dfff800000000000 x21: 0000000000000081 x20: ffff0000cd46793a x19: ffff0000cfc3c0e0 x18: 1fffe00033e6997e x17: 0000000000000000 x16: ffff800011bb65f8 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffe00033e699a3 x12: 0000000000000000 x11: ff00800008195f68 x10: 0000000000000000 x9 : 5b5d59e17bb66400 x8 : 5b5d59e17bb66400 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800008007318 x4 : ffff8000154a4e80 x3 : ffff800008541118 x2 : 0000000000000001 x1 : 0000000000000103 x0 : 0000000000000000 Call trace: usb_ep_enable+0x2a8/0x528 drivers/usb/gadget/udc/core.c:124 hidg_set_alt+0x128/0x820 drivers/usb/gadget/function/f_hid.c:822 set_config+0x668/0xdf8 drivers/usb/gadget/composite.c:986 composite_setup+0x1590/0x27f4 drivers/usb/gadget/composite.c:1893 configfs_composite_setup+0xc0/0x104 drivers/usb/gadget/configfs.c:1484 dummy_timer+0xdb0/0x29b0 drivers/usb/gadget/udc/dummy_hcd.c:1950 __run_hrtimer kernel/time/hrtimer.c:1751 [inline] __hrtimer_run_queues+0x444/0xc58 kernel/time/hrtimer.c:1815 hrtimer_run_softirq+0x164/0x408 kernel/time/hrtimer.c:1832 handle_softirqs+0x318/0xc90 kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0x23c/0x430 kernel/softirq.c:679 irq_exit_rcu+0x14/0x84 kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 __tlb_remove_page_size+0xcc/0x384 mm/mmu_gather.c:97 __tlb_remove_page include/asm-generic/tlb.h:460 [inline] zap_pte_range mm/memory.c:1454 [inline] zap_pmd_range mm/memory.c:1572 [inline] zap_pud_range mm/memory.c:1601 [inline] zap_p4d_range mm/memory.c:1622 [inline] unmap_page_range+0xde4/0x1f44 mm/memory.c:1643 unmap_single_vma mm/memory.c:1689 [inline] unmap_vmas+0x244/0x364 mm/memory.c:1728 exit_mmap+0x170/0x944 mm/mmap.c:3250 __mmput+0xe8/0x38c kernel/fork.c:1210 mmput+0x70/0xa8 kernel/fork.c:1232 exit_mm+0x20c/0x290 kernel/exit.c:572 do_exit+0x4d0/0x19ac kernel/exit.c:874 do_group_exit+0x198/0x238 kernel/exit.c:1030 get_signal+0x11f4/0x133c kernel/signal.c:2884 do_signal arch/arm64/kernel/signal.c:1095 [inline] do_notify_resume+0x364/0x2c84 arch/arm64/kernel/signal.c:1148 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x98/0x128 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 124341 hardirqs last enabled at (124340): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (124340): [] _raw_spin_unlock_irqrestore+0x48/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (124341): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (124341): [] _raw_spin_lock_irqsave+0xa4/0xb0 kernel/locking/spinlock.c:162 softirqs last enabled at (124276): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (124276): [] handle_softirqs+0xb1c/0xc90 kernel/softirq.c:624 softirqs last disabled at (124337): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED!