------------[ cut here ]------------ usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 WARNING: drivers/usb/gadget/udc/core.c:125 at usb_ep_enable+0x148/0x480 drivers/usb/gadget/udc/core.c:124, CPU#0: ktimers/0/17 Modules linked in: CPU: 0 UID: 0 PID: 17 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 RIP: 0010:usb_ep_enable+0x1bc/0x480 drivers/usb/gadget/udc/core.c:124 Code: 7a ab ed fa 49 83 3f 00 48 c7 c0 20 e9 42 8c 49 c7 c0 40 e9 42 8c 4c 0f 44 c0 4c 89 f7 48 c7 c6 6a 0b d8 8d 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 00 62 7a fa 65 8b RSP: 0018:ffffc90000167698 EFLAGS: 00010286 RAX: ffffffff8c42e920 RBX: ffff888027838120 RCX: ffffffff8c430860 RDX: 0000000000000081 RSI: ffffffff8dd80b6a RDI: ffffffff90e27ac0 RBP: dffffc0000000000 R08: ffffffff8c42e940 R09: 0000000000000100 R10: 0000000000000100 R11: 0000000000000003 R12: ffffffff8c430860 R13: 0000000000000081 R14: ffffffff90e27ac0 R15: ffff888027838138 FS: 0000000000000000(0000) GS:ffff88812470f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f18a40b9d58 CR3: 0000000038248000 CR4: 00000000003526f0 Call Trace: hidg_set_alt+0x12a/0xa50 drivers/usb/gadget/function/f_hid.c:1042 set_config+0x749/0x1160 drivers/usb/gadget/composite.c:1018 composite_setup+0x1de7/0x3480 drivers/usb/gadget/composite.c:1901 configfs_composite_setup+0xbd/0x100 drivers/usb/gadget/configfs.c:1877 dummy_timer+0x2f60/0x4d50 drivers/usb/gadget/udc/dummy_hcd.c:1983 __run_hrtimer kernel/time/hrtimer.c:2079 [inline] __hrtimer_run_queues+0x3eb/0xaf0 kernel/time/hrtimer.c:2136 hrtimer_run_softirq+0x1e1/0x2e0 kernel/time/hrtimer.c:2153 handle_softirqs+0x1d4/0x6c0 kernel/softirq.c:669 __do_softirq kernel/softirq.c:703 [inline] run_ktimerd+0x6a/0x100 kernel/softirq.c:1208 smpboot_thread_fn+0x5f8/0xb30 kernel/smpboot.c:162 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: 7a ab jp 0xffffffad 2: ed in (%dx),%eax 3: fa cli 4: 49 83 3f 00 cmpq $0x0,(%r15) 8: 48 c7 c0 20 e9 42 8c mov $0xffffffff8c42e920,%rax f: 49 c7 c0 40 e9 42 8c mov $0xffffffff8c42e940,%r8 16: 4c 0f 44 c0 cmove %rax,%r8 1a: 4c 89 f7 mov %r14,%rdi 1d: 48 c7 c6 6a 0b d8 8d mov $0xffffffff8dd80b6a,%rsi 24: 44 89 ea mov %r13d,%edx 27: 4c 89 e1 mov %r12,%rcx * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: bd ea ff ff ff mov $0xffffffea,%ebp 34: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 39: e8 00 62 7a fa call 0xfa7a623e 3e: 65 gs 3f: 8b .byte 0x8b