usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
WARNING: CPU: 1 PID: 99 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x210/0x3c0 drivers/usb/gadget/udc/core.c:124
Modules linked in:
CPU: 1 UID: 0 PID: 99 Comm: klogd Not tainted syzkaller #0 3cc70382b65b9d7164db2b4c9185747e14a17ef7
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:usb_ep_enable+0x210/0x3c0 drivers/usb/gadget/udc/core.c:124
Code: 4d 00 48 c7 c0 a0 60 6d 86 49 c7 c0 c0 60 6d 86 4c 0f 44 c0 48 c7 c7 60 60 6d 86 48 c7 c6 63 74 1d 87 44 89 f2 e8 50 2b 4b fd <0f> 0b e9 4c ff ff ff e8 c4 59 ce fd 49 bc 00 00 00 00 00 fc ff df
RSP: 0018:ffffc90000230878 EFLAGS: 00010046
RAX: e2d8478abffe1200 RBX: ffff888104fc40b0 RCX: ffff88810cb4a600
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
RBP: ffffc900002308a0 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: dffffc0000000000
R13: ffff888104fc40b8 R14: 0000000000000081 R15: ffff888107f17bba
FS:  00007f02a09c9c80(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fde52c1c83c CR3: 000000010c7a6000 CR4: 00000000003526b0
Call Trace:
 <IRQ>
 hidg_set_alt+0x138/0xa70 drivers/usb/gadget/function/f_hid.c:1057
 set_config+0x812/0xd10 drivers/usb/gadget/composite.c:1021
 composite_setup+0x18b0/0x3320 drivers/usb/gadget/composite.c:1929
 configfs_composite_setup+0xc6/0x110 drivers/usb/gadget/configfs.c:1883
 dummy_timer+0x2eee/0x4900 drivers/usb/gadget/udc/dummy_hcd.c:1935
 __run_hrtimer kernel/time/hrtimer.c:1758 [inline]
 __hrtimer_run_queues+0x3ae/0x8e0 kernel/time/hrtimer.c:1822
 hrtimer_run_softirq+0x159/0x560 kernel/time/hrtimer.c:1839
 handle_softirqs+0x1aa/0x620 kernel/softirq.c:621
 __do_softirq kernel/softirq.c:659 [inline]
 invoke_softirq kernel/softirq.c:476 [inline]
 __irq_exit_rcu+0x47/0xb0 kernel/softirq.c:708
 irq_exit_rcu+0xd/0x30 kernel/softirq.c:720
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0x82/0x90 arch/x86/kernel/apic/apic.c:1049
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702
RIP: 0010:local_irq_disable_exit_to_user+0x1/0x20 include/linux/entry-common.h:230
Code: 22 01 5d e9 c1 20 34 04 cc e8 db 3f e4 ff eb e3 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <48> 89 e5 fa 5d e9 95 20 34 04 cc 0f 1f 40 00 90 90 90 90 90 90 90
RSP: 0018:ffffc90000e7fef8 EFLAGS: 00000246
RAX: ffff88810cb4a600 RBX: ffffc90000e7ff58 RCX: f8f8f8f8f8f8f8f8
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000e7ff58
RBP: ffffc90000e7ff20 R08: ffff88810a723783 R09: 1ffff110214e46f0
R10: dffffc0000000000 R11: ffffed10214e46f1 R12: 0000000000000000
R13: 0000000000000000 R14: ffffc90000e7ff58 R15: 0000000000000000
 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f02a0b19407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007ffd0c136b10 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
RAX: 0000000000000073 RBX: 00007f02a09c9c80 RCX: 00007f02a0b19407
RDX: 0000000000000073 RSI: 00007ffd0c136c50 RDI: 0000000000000003
RBP: 00007ffd0c137080 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd0c137098
R13: 00007ffd0c136c50 R14: 0000000000000058 R15: 00007ffd0c136c50
 </TASK>
---[ end trace 0000000000000000 ]---
configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED!
----------------
Code disassembly (best guess):
   0:	22 01                	and    (%rcx),%al
   2:	5d                   	pop    %rbp
   3:	e9 c1 20 34 04       	jmp    0x43420c9
   8:	cc                   	int3
   9:	e8 db 3f e4 ff       	call   0xffe43fe9
   e:	eb e3                	jmp    0xfffffff3
  10:	66 0f 1f 84 00 00 00 	nopw   0x0(%rax,%rax,1)
  17:	00 00
  19:	90                   	nop
  1a:	90                   	nop
  1b:	90                   	nop
  1c:	90                   	nop
  1d:	90                   	nop
  1e:	90                   	nop
  1f:	90                   	nop
  20:	90                   	nop
  21:	90                   	nop
  22:	90                   	nop
  23:	90                   	nop
  24:	90                   	nop
  25:	90                   	nop
  26:	90                   	nop
  27:	90                   	nop
  28:	90                   	nop
  29:	55                   	push   %rbp
* 2a:	48 89 e5             	mov    %rsp,%rbp <-- trapping instruction
  2d:	fa                   	cli
  2e:	5d                   	pop    %rbp
  2f:	e9 95 20 34 04       	jmp    0x43420c9
  34:	cc                   	int3
  35:	0f 1f 40 00          	nopl   0x0(%rax)
  39:	90                   	nop
  3a:	90                   	nop
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop