------------[ cut here ]------------
usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
WARNING: CPU: 0 PID: 295 at drivers/usb/gadget/udc/core.c:134 usb_ep_enable+0x210/0x3c0 drivers/usb/gadget/udc/core.c:133
Modules linked in:
CPU: 0 UID: 0 PID: 295 Comm: syz-executor Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
RIP: 0010:usb_ep_enable+0x210/0x3c0 drivers/usb/gadget/udc/core.c:133
Code: 4d 00 48 c7 c0 20 c3 6d 86 49 c7 c0 40 c3 6d 86 4c 0f 44 c0 48 c7 c7 e0 c2 6d 86 48 c7 c6 d6 d7 1f 87 44 89 f2 e8 c0 d6 46 fd <0f> 0b e9 4c ff ff ff e8 74 ef cb fd 49 bc 00 00 00 00 00 fc ff df
RSP: 0018:ffffc90000007878 EFLAGS: 00010046
RAX: 03e79829881c0d00 RBX: ffff888106ec80b0 RCX: ffff888104b613c0
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
RBP: ffffc900000078a0 R08: ffff8881f6c29593 R09: 1ffff1103ed852b2
R10: dffffc0000000000 R11: ffffed103ed852b3 R12: dffffc0000000000
R13: ffff888106ec80b8 R14: 0000000000000081 R15: ffff88813d4540ba
FS:  00005555843c9500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4afeded200 CR3: 0000000104b2c000 CR4: 00000000003526b0
Call Trace:
 <IRQ>
 hidg_set_alt+0x138/0xa70 drivers/usb/gadget/function/f_hid.c:1057
 set_config+0x80f/0xd10 drivers/usb/gadget/composite.c:1021
 composite_setup+0x18b0/0x3320 drivers/usb/gadget/composite.c:1930
 configfs_composite_setup+0xc6/0x110 drivers/usb/gadget/configfs.c:1883
 dummy_timer+0x2eee/0x4900 drivers/usb/gadget/udc/dummy_hcd.c:1935
 __run_hrtimer kernel/time/hrtimer.c:1758 [inline]
 __hrtimer_run_queues+0x3ae/0x8e0 kernel/time/hrtimer.c:1822
 hrtimer_run_softirq+0x159/0x560 kernel/time/hrtimer.c:1839
 handle_softirqs+0x1b0/0x5b0 kernel/softirq.c:684
 __do_softirq kernel/softirq.c:722 [inline]
 invoke_softirq kernel/softirq.c:539 [inline]
 __irq_exit_rcu+0x47/0xb0 kernel/softirq.c:771
 irq_exit_rcu+0xd/0x30 kernel/softirq.c:783
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0x82/0x90 arch/x86/kernel/apic/apic.c:1049
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__sanitizer_cov_trace_pc+0x5/0x70 kernel/kcov.c:210
Code: e8 d0 90 55 00 5b 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc b8 3b 09 e1 fa 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 48 8b 45 08 65 48 8b 0d ec 88 7b 7e 65 8b 15 ed 88 7b 7e
RSP: 0018:ffffc9000b72fa80 EFLAGS: 00000293
RAX: ffffffff81f0e499 RBX: 0000000000000001 RCX: ffff888104b613c0
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88812eaa43d0
RBP: ffffc9000b72fab0 R08: ffff888116ff36e0 R09: ffff88812e80eee0
R10: ffff888116ff36e0 R11: ffff88812e80eee0 R12: 1ffff11025d5487a
R13: 0000000000000001 R14: ffff88812eaa43d0 R15: 0000000000000000
 inode_permission+0xf3/0x4c0 fs/namei.c:543
 may_lookup fs/namei.c:1768 [inline]
 link_path_walk+0x22d/0xeb0 fs/namei.c:2374
 path_parentat fs/namei.c:2635 [inline]
 __filename_parentat+0x231/0x660 fs/namei.c:2659
 filename_parentat fs/namei.c:2677 [inline]
 do_unlinkat+0xfe/0x5a0 fs/namei.c:4516
 __do_sys_unlink fs/namei.c:4589 [inline]
 __se_sys_unlink fs/namei.c:4587 [inline]
 __x64_sys_unlink+0x4b/0x60 fs/namei.c:4587
 x64_sys_call+0x286c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:88
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f670139ec07
Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffe80050fc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
RAX: ffffffffffffffda RBX: 000000000000a19a RCX: 00007f670139ec07
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffe80051080
RBP: 00007ffe80051080 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe80052170
R13: 00007f6701436fb3 R14: 00005555843c94e8 R15: 0000000000000009
 </TASK>
---[ end trace 0000000000000000 ]---
configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED!
----------------
Code disassembly (best guess):
   0:	e8 d0 90 55 00       	call   0x5590d5
   5:	5b                   	pop    %rbx
   6:	5d                   	pop    %rbp
   7:	c3                   	ret
   8:	cc                   	int3
   9:	cc                   	int3
   a:	cc                   	int3
   b:	cc                   	int3
   c:	cc                   	int3
   d:	cc                   	int3
   e:	cc                   	int3
   f:	cc                   	int3
  10:	cc                   	int3
  11:	cc                   	int3
  12:	cc                   	int3
  13:	cc                   	int3
  14:	cc                   	int3
  15:	b8 3b 09 e1 fa       	mov    $0xfae1093b,%eax
  1a:	90                   	nop
  1b:	90                   	nop
  1c:	90                   	nop
  1d:	90                   	nop
  1e:	90                   	nop
  1f:	90                   	nop
  20:	90                   	nop
  21:	90                   	nop
  22:	90                   	nop
  23:	90                   	nop
  24:	90                   	nop
  25:	f3 0f 1e fa          	endbr64
  29:	55                   	push   %rbp
* 2a:	48 89 e5             	mov    %rsp,%rbp <-- trapping instruction
  2d:	48 8b 45 08          	mov    0x8(%rbp),%rax
  31:	65 48 8b 0d ec 88 7b 	mov    %gs:0x7e7b88ec(%rip),%rcx        # 0x7e7b8925
  38:	7e
  39:	65 8b 15 ed 88 7b 7e 	mov    %gs:0x7e7b88ed(%rip),%edx        # 0x7e7b892d