------------[ cut here ]------------ usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 WARNING: drivers/usb/gadget/udc/core.c:125 at usb_ep_enable+0x148/0x480 drivers/usb/gadget/udc/core.c:124, CPU#1: swapper/1/0 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:usb_ep_enable+0x1bc/0x480 drivers/usb/gadget/udc/core.c:124 Code: ca 08 7a fa 49 83 3f 00 48 c7 c0 a0 01 b2 8c 49 c7 c0 c0 01 b2 8c 4c 0f 44 c0 4c 89 f7 48 c7 c6 a2 87 4e 8e 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 a0 2c 0b fa 65 8b RSP: 0018:ffffc90000a18910 EFLAGS: 00010082 RAX: ffffffff8cb201a0 RBX: ffff8880233380e0 RCX: ffffffff8cb21fc0 RDX: 0000000000000081 RSI: ffffffff8e4e87a2 RDI: ffffffff90668df0 RBP: dffffc0000000000 R08: ffffffff8cb201c0 R09: 0000000000000002 R10: 0000000000000003 R11: 0000000000000100 R12: ffffffff8cb21fc0 R13: 0000000000000081 R14: ffffffff90668df0 R15: ffff8880233380f8 FS: 0000000000000000(0000) GS:ffff888125012000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f847e3eb7c0 CR3: 000000002a566000 CR4: 00000000003526f0 Call Trace: hidg_set_alt+0x12a/0xa60 drivers/usb/gadget/function/f_hid.c:1042 set_config+0x749/0x1160 drivers/usb/gadget/composite.c:1018 composite_setup+0x1de7/0x3480 drivers/usb/gadget/composite.c:1901 configfs_composite_setup+0xc7/0x100 drivers/usb/gadget/configfs.c:1877 dummy_timer+0x2f43/0x4cf0 drivers/usb/gadget/udc/dummy_hcd.c:1951 __run_hrtimer kernel/time/hrtimer.c:2066 [inline] __hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2123 hrtimer_run_softirq+0x17a/0x240 kernel/time/hrtimer.c:2140 handle_softirqs+0x225/0x840 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: ec 76 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3f 0e 00 fb f4 bc 05 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffc900001a7e40 EFLAGS: 00000246 RAX: 00000000001025f5 RBX: ffffffff819b74b0 RCX: 0000000080000001 RDX: 0000000000000001 RSI: ffffffff8e252afe RDI: ffffffff8c4c7780 RBP: ffffc900001a7f10 R08: ffff8880b8733b9b R09: 1ffff110170e6773 R10: dffffc0000000000 R11: ffffed10170e6774 R12: 0000000000000000 R13: 1ffff11003c54bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x157 ---------------- Code disassembly (best guess): 0: ca 08 7a lret $0x7a08 3: fa cli 4: 49 83 3f 00 cmpq $0x0,(%r15) 8: 48 c7 c0 a0 01 b2 8c mov $0xffffffff8cb201a0,%rax f: 49 c7 c0 c0 01 b2 8c mov $0xffffffff8cb201c0,%r8 16: 4c 0f 44 c0 cmove %rax,%r8 1a: 4c 89 f7 mov %r14,%rdi 1d: 48 c7 c6 a2 87 4e 8e mov $0xffffffff8e4e87a2,%rsi 24: 44 89 ea mov %r13d,%edx 27: 4c 89 e1 mov %r12,%rcx * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: bd ea ff ff ff mov $0xffffffea,%ebp 34: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 39: e8 a0 2c 0b fa call 0xfa0b2cde 3e: 65 gs 3f: 8b .byte 0x8b