ODEBUG: Out of memory. ODEBUG disabled
------------[ cut here ]------------
usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
WARNING: CPU: 1 PID: 4278 at drivers/usb/gadget/udc/core.c:108 usb_ep_enable+0x25f/0x440 drivers/usb/gadget/udc/core.c:107
Modules linked in:
CPU: 1 PID: 4278 Comm: udevd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:usb_ep_enable+0x25f/0x440 drivers/usb/gadget/udc/core.c:107
Code: 49 8b 0e 48 c7 c0 80 27 d5 8a 49 c7 c0 a0 27 d5 8a 4c 0f 44 c0 48 c7 c7 40 27 d5 8a 48 c7 c6 1d 96 e1 8b 89 ea e8 c1 94 7f 03 <0f> 0b e9 e1 fe ff ff e8 95 67 43 fb 49 bc 00 00 00 00 00 fc ff df
RSP: 0018:ffffc90000dd06a8 EFLAGS: 00010046
RAX: 021507ecc7be8a00 RBX: ffff888147dac0e0 RCX: ffff88807a0c3b80
RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000
RBP: 0000000000000081 R08: ffff8880b912795b R09: 1ffff11017224f2b
R10: dffffc0000000000 R11: ffffed1017224f2c R12: dffffc0000000000
R13: ffff888147dac10d R14: ffff888147dac0e8 R15: ffff88807da94f3a
FS: 00007f594c890880(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f594c852e41 CR3: 000000001efe5000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
hidg_set_alt+0x126/0xa00 drivers/usb/gadget/function/f_hid.c:822
set_config+0x734/0xfa0 drivers/usb/gadget/composite.c:972
composite_setup+0x1999/0x2b60 drivers/usb/gadget/composite.c:1878
configfs_composite_setup+0xc3/0x100 drivers/usb/gadget/configfs.c:1492
dummy_timer+0x1338/0x33c0 drivers/usb/gadget/udc/dummy_hcd.c:1930
call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
expire_timers kernel/time/timer.c:1699 [inline]
__run_timers+0x56c/0x810 kernel/time/timer.c:1970
run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
handle_softirqs+0x336/0x830 kernel/softirq.c:576
__do_softirq kernel/softirq.c:610 [inline]
invoke_softirq kernel/softirq.c:450 [inline]
__irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:tomoyo_check_acl+0xf2/0x420 security/tomoyo/domain.c:173
Code: 0f b6 36 31 ff 44 89 f6 e8 7b 6a d0 fd 45 85 f6 74 0a e8 11 68 d0 fd e9 d9 00 00 00 4c 89 fb 4c 8d 75 19 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 41 01 00 00 45 0f b6 3e 4c 8b 74 24 30
RSP: 0018:ffffc9000324f5b0 EFLAGS: 00000a02
RAX: 1ffff11005560a43 RBX: ffff88802af16830 RCX: ffff88807a0c3b80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff88802ab05200 R08: ffff88807a0c3b80 R09: 0000000000000002
R10: 000000000000005c R11: 0000000000000000 R12: dffffc0000000000
R13: ffff88802af16810 R14: ffff88802ab05219 R15: ffff88802af16830
tomoyo_path_number_perm+0x3c3/0x6b0 security/tomoyo/file.c:733
tomoyo_path_mknod+0x147/0x190 security/tomoyo/tomoyo.c:239
security_path_mknod+0xec/0x140 security/security.c:1148
may_o_create fs/namei.c:3292 [inline]
lookup_open fs/namei.c:3433 [inline]
open_last_lookups fs/namei.c:3540 [inline]
path_openat+0xba5/0x2fb0 fs/namei.c:3747
do_filp_open+0x1df/0x400 fs/namei.c:3777
do_sys_openat2+0x14b/0x500 fs/open.c:1255
do_sys_open fs/open.c:1271 [inline]
__do_sys_openat fs/open.c:1287 [inline]
__se_sys_openat fs/open.c:1282 [inline]
__x64_sys_openat+0x135/0x160 fs/open.c:1282
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f594c97e407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007ffdbb43aa60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f594c890880 RCX: 00007f594c97e407
RDX: 0000000000080241 RSI: 00007ffdbb43afc0 RDI: ffffffffffffff9c
RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000000001b6 R11: 0000000000000202 R12: 000055ddb9aeadfc
R13: 000055ddb9aeadfc R14: 0000000000000001 R15: 000055ddb9b05140
----------------
Code disassembly (best guess):
0: 0f b6 36 movzbl (%rsi),%esi
3: 31 ff xor %edi,%edi
5: 44 89 f6 mov %r14d,%esi
8: e8 7b 6a d0 fd call 0xfdd06a88
d: 45 85 f6 test %r14d,%r14d
10: 74 0a je 0x1c
12: e8 11 68 d0 fd call 0xfdd06828
17: e9 d9 00 00 00 jmp 0xf5
1c: 4c 89 fb mov %r15,%rbx
1f: 4c 8d 75 19 lea 0x19(%rbp),%r14
23: 4c 89 f0 mov %r14,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 42 0f b6 04 20 movzbl (%rax,%r12,1),%eax <-- trapping instruction
2f: 84 c0 test %al,%al
31: 0f 85 41 01 00 00 jne 0x178
37: 45 0f b6 3e movzbl (%r14),%r15d
3b: 4c 8b 74 24 30 mov 0x30(%rsp),%r14