Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [*] Reproducer for general protection fault in input_ff_flush [+] opendir /sys/class/udc successful. [+] closedir /sys/class/udc successful. [+] Using UDC device: dummy_udc.2 [+] open /dev/raw-gadget successful (fd=3). [+] USB_RAW_IOCTL_INIT successful. [+] pthread_create ep0_loop successful. [+] pthread_create ep_io_loop successful. [+] USB_RAW_IOCTL_RUN successful. [*] Waiting for Logitech G920 to enumerate and bind... [ 128.821982][ T5755] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 128.988073][ T5755] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice=96.02 [ 128.989282][ T5755] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.989336][ T5755] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.989382][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [+] Found Logitech G920 device: 0003:046D:C262.0001 [*] Starting deterministic fault injection rebind loop (1..100)... [ 129.122075][ T5755] logitech-hidpp-device 0003:046D:C262.0001: Unable to initialize force feedback support, errno -1 [ 129.125676][ T5755] input: HID 046d:c262 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:046D:C262.0001/input/input5 [ 129.231340][ T5755] logitech-hidpp-device 0003:046D:C262.0001: input,hidraw0: USB HID v1.11 Joystick [HID 046d:c262] on usb-dummy_hcd.2-1/input0 [ 129.463069][ T5922] logitech-hidpp-device 0003:046D:C262.0001: Unable to initialize force feedback support, errno -1 [ 129.466947][ T5922] input: HID 046d:c262 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:046D:C262.0001/input/input6 [+] fail_n=1: bind succeeded, scanning /dev/input to trigger bug... [ 129.525726][ T5922] logitech-hidpp-device 0003:046D:C262.0001: input,hidraw0: USB HID v1.11 Joystick [HID 046d:c262] on usb-dummy_hcd.2-1/input0 [*] Opened /dev/input/event4, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event4. [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event3. [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event0. [ 129.794880][ T5922] FAULT_INJECTION: forcing a failure. [ 129.794880][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 129.794940][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 129.794964][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 129.794987][ T5922] Call Trace: [ 129.794999][ T5922] [ 129.795009][ T5922] dump_stack_lvl+0xe8/0x150 [ 129.795058][ T5922] should_fail_ex+0x410/0x560 [ 129.795089][ T5922] should_failslab+0xa8/0x100 [ 129.795116][ T5922] ? do_getname+0x2e/0x250 [ 129.795141][ T5922] kmem_cache_alloc_noprof+0xa1/0x600 [ 129.795161][ T5922] ? call_rcu+0x64d/0x8b0 [ 129.795184][ T5922] ? do_getname+0x2e/0x250 [ 129.795214][ T5922] do_getname+0x2e/0x250 [ 129.795238][ T5922] ? getname_flags+0x11/0x20 [ 129.795265][ T5922] do_sys_openat2+0xcc/0x200 [ 129.795294][ T5922] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.795321][ T5922] ? fput_close_sync+0x11f/0x240 [ 129.795348][ T5922] ? __pfx_fput_close_sync+0x10/0x10 [ 129.795386][ T5922] __x64_sys_openat+0x138/0x170 [ 129.795523][ T5922] do_syscall_64+0x166/0x520 [ 129.795546][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.795620][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 129.795649][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.795666][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 129.795692][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 129.795706][ T5922] RSP: 002b:00007ffd51c0a978 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.795726][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 129.795738][ T5922] RDX: 0000000000000001 RSI: 00007f0a3c10a918 RDI: ffffffffffffff9c [ 129.795749][ T5922] RBP: 000055556d0e69c0 R08: 0000000000000000 R09: 0000000000000000 [ 129.795758][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 129.795768][ T5922] R13: 0000000000000002 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 129.795797][ T5922] [ 129.834963][ T5922] FAULT_INJECTION: forcing a failure. [ 129.834963][ T5922] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.835002][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 129.835026][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 129.835038][ T5922] Call Trace: [ 129.835047][ T5922] [ 129.835056][ T5922] dump_stack_lvl+0xe8/0x150 [ 129.835094][ T5922] should_fail_ex+0x410/0x560 [ 129.835133][ T5922] strncpy_from_user+0x36/0x2c0 [ 129.835167][ T5922] do_getname+0x77/0x250 [ 129.835203][ T5922] do_sys_openat2+0xcc/0x200 [ 129.835239][ T5922] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.835272][ T5922] ? fput_close_sync+0x11f/0x240 [ 129.835305][ T5922] ? __pfx_fput_close_sync+0x10/0x10 [ 129.835346][ T5922] __x64_sys_openat+0x138/0x170 [ 129.835384][ T5922] do_syscall_64+0x166/0x520 [ 129.835410][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.835438][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 129.835465][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.835487][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 129.835517][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 129.835535][ T5922] RSP: 002b:00007ffd51c0a978 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.835558][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 129.835575][ T5922] RDX: 0000000000000001 RSI: 00007f0a3c10a918 RDI: ffffffffffffff9c [ 129.835590][ T5922] RBP: 000055556d0e69c0 R08: 0000000000000000 R09: 0000000000000000 [ 129.835603][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 129.835617][ T5922] R13: 0000000000000003 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 129.835659][ T5922] [ 129.872498][ T5922] FAULT_INJECTION: forcing a failure. [ 129.872498][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 129.872579][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 129.872642][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 129.872674][ T5922] Call Trace: [ 129.872695][ T5922] [ 129.872717][ T5922] dump_stack_lvl+0xe8/0x150 [ 129.872820][ T5922] should_fail_ex+0x410/0x560 [ 129.872916][ T5922] should_failslab+0xa8/0x100 [ 129.873008][ T5922] ? alloc_empty_file+0x5b/0x1d0 [ 129.873093][ T5922] kmem_cache_alloc_noprof+0xa1/0x600 [ 129.873149][ T5922] ? stack_depot_save_flags+0x33/0x7f0 [ 129.873227][ T5922] ? alloc_empty_file+0x5b/0x1d0 [ 129.873309][ T5922] ? kmem_cache_alloc_noprof+0x156/0x600 [ 129.873383][ T5922] alloc_empty_file+0x5b/0x1d0 [ 129.873489][ T5922] path_openat+0xa2/0x1d60 [ 129.873560][ T5922] ? __lock_acquire+0x747/0x2de0 [ 129.873654][ T5922] do_file_open+0x23e/0x4a0 [+] fail_n=6: bind succeeded, scanning /dev/input to trigger bug... [ 129.873729][ T5922] ? __pfx_do_file_open+0x10/0x10 [ 129.873856][ T5922] ? _raw_spin_unlock+0x28/0x50 [ 129.873913][ T5922] ? alloc_fd+0x651/0x6c0 [ 129.874038][ T5922] do_sys_openat2+0x115/0x200 [ 129.874123][ T5922] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.874210][ T5922] ? fput_close_sync+0x11f/0x240 [ 129.874285][ T5922] ? __pfx_fput_close_sync+0x10/0x10 [ 129.874415][ T5922] __x64_sys_openat+0x138/0x170 [ 129.874505][ T5922] do_syscall_64+0x166/0x520 [ 129.874570][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.874631][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 129.874697][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.874767][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 129.874836][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [*] Opened /dev/input/event4, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event4. [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [ 129.874886][ T5922] RSP: 002b:00007ffd51c0a978 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.874962][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 129.875025][ T5922] RDX: 0000000000000001 RSI: 00007f0a3c10a918 RDI: ffffffffffffff9c [ 129.875066][ T5922] RBP: 000055556d0e69c0 R08: 0000000000000000 R09: 0000000000000000 [ 129.875098][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [*] Closed /dev/input/event3. [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event0. [ 129.875131][ T5922] R13: 0000000000000004 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 129.875226][ T5922] [ 129.920386][ T5922] FAULT_INJECTION: forcing a failure. [ 129.920386][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 129.920642][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 129.920722][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 129.920759][ T5922] Call Trace: [ 129.920791][ T5922] [ 129.920838][ T5922] dump_stack_lvl+0xe8/0x150 [ 129.921436][ T5922] should_fail_ex+0x410/0x560 [ 129.921600][ T5922] should_failslab+0xa8/0x100 [ 129.921691][ T5922] ? security_file_alloc+0x34/0x310 [ 129.921771][ T5922] kmem_cache_alloc_noprof+0xa1/0x600 [ 129.921845][ T5922] ? rcu_is_watching+0x16/0xb0 [ 129.922194][ T5922] ? security_file_alloc+0x34/0x310 [ 129.922323][ T5922] security_file_alloc+0x34/0x310 [ 129.922378][ T5922] init_file+0x90/0x2b0 [ 129.922411][ T5922] alloc_empty_file+0x74/0x1d0 [ 129.922441][ T5922] path_openat+0xa2/0x1d60 [ 129.922472][ T5922] ? __lock_acquire+0x747/0x2de0 [ 129.922543][ T5922] do_file_open+0x23e/0x4a0 [ 129.922574][ T5922] ? __pfx_do_file_open+0x10/0x10 [ 129.922625][ T5922] ? _raw_spin_unlock+0x28/0x50 [ 129.922708][ T5922] ? alloc_fd+0x651/0x6c0 [ 129.922884][ T5922] do_sys_openat2+0x115/0x200 [ 129.922987][ T5922] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.923138][ T5922] ? fput_close_sync+0x11f/0x240 [ 129.923231][ T5922] ? __pfx_fput_close_sync+0x10/0x10 [ 129.923348][ T5922] __x64_sys_openat+0x138/0x170 [ 129.923394][ T5922] do_syscall_64+0x166/0x520 [ 129.923421][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.923453][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 129.923534][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.923605][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 129.923674][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 129.923724][ T5922] RSP: 002b:00007ffd51c0a978 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.924084][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 129.924147][ T5922] RDX: 0000000000000001 RSI: 00007f0a3c10a918 RDI: ffffffffffffff9c [ 129.924181][ T5922] RBP: 000055556d0e69c0 R08: 0000000000000000 R09: 0000000000000000 [ 129.924207][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 129.924240][ T5922] R13: 0000000000000005 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 129.924333][ T5922] [ 129.967180][ T5922] FAULT_INJECTION: forcing a failure. [ 129.967180][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 129.967285][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 129.967355][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 129.967402][ T5922] Call Trace: [ 129.967435][ T5922] [ 129.967459][ T5922] dump_stack_lvl+0xe8/0x150 [ 129.967572][ T5922] should_fail_ex+0x410/0x560 [ 129.967688][ T5922] should_failslab+0xa8/0x100 [ 129.967724][ T5922] __kmalloc_noprof+0xfe/0x720 [ 129.967749][ T5922] ? rcu_is_watching+0x16/0xb0 [ 129.967800][ T5922] ? tomoyo_realpath_from_path+0xef/0x640 [ 129.967877][ T5922] ? tomoyo_realpath_from_path+0xef/0x640 [ 129.967928][ T5922] tomoyo_realpath_from_path+0xef/0x640 [ 129.968041][ T5922] tomoyo_check_open_permission+0x229/0x470 [ 129.968133][ T5922] ? tomoyo_check_open_permission+0x1d3/0x470 [ 129.968224][ T5922] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 129.968316][ T5922] ? __asan_memset+0x22/0x50 [ 129.968487][ T5922] ? __up_read+0x29c/0x930 [ 129.968671][ T5922] ? mnt_get_write_access+0x66/0x280 [ 129.968776][ T5922] ? tomoyo_file_open+0x163/0x220 [ 129.968869][ T5922] security_file_open+0xa9/0x240 [ 129.968954][ T5922] do_dentry_open+0x4a0/0x1380 [ 129.969217][ T5922] vfs_open+0x3b/0x340 [ 129.969316][ T5922] ? path_openat+0x1428/0x1d60 [ 129.969389][ T5922] path_openat+0x1443/0x1d60 [ 129.969721][ T5922] do_file_open+0x23e/0x4a0 [ 129.969817][ T5922] ? __pfx_do_file_open+0x10/0x10 [ 129.969940][ T5922] ? _raw_spin_unlock+0x28/0x50 [ 129.970003][ T5922] ? alloc_fd+0x651/0x6c0 [ 129.970259][ T5922] do_sys_openat2+0x115/0x200 [ 129.970297][ T5922] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.970324][ T5922] ? fput_close_sync+0x11f/0x240 [ 129.970352][ T5922] ? __pfx_fput_close_sync+0x10/0x10 [ 129.970385][ T5922] __x64_sys_openat+0x138/0x170 [ 129.970417][ T5922] do_syscall_64+0x166/0x520 [ 129.970473][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.970530][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 129.970596][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.970659][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 129.970716][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 129.970889][ T5922] RSP: 002b:00007ffd51c0a978 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.970954][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 129.970997][ T5922] RDX: 0000000000000001 RSI: 00007f0a3c10a918 RDI: ffffffffffffff9c [ 129.971031][ T5922] RBP: 000055556d0e69c0 R08: 0000000000000000 R09: 0000000000000000 [ 129.971063][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 129.971103][ T5922] R13: 0000000000000006 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 129.971194][ T5922] [ 129.973467][ T5922] ERROR: Out of memory at tomoyo_realpath_from_path. [ 130.103223][ T5922] logitech-hidpp-device 0003:046D:C262.0001: Unable to initialize force feedback support, errno -1 [ 130.166537][ T5922] input: HID 046d:c262 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:046D:C262.0001/input/input7 [ 130.404489][ T5922] logitech-hidpp-device 0003:046D:C262.0001: input,hidraw0: USB HID v1.11 Joystick [HID 046d:c262] on usb-dummy_hcd.2-1/input0 [ 131.237571][ T5922] FAULT_INJECTION: forcing a failure. [ 131.237571][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 131.237675][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 131.237755][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.237791][ T5922] Call Trace: [ 131.237816][ T5922] [ 131.237840][ T5922] dump_stack_lvl+0xe8/0x150 [ 131.237876][ T5922] should_fail_ex+0x410/0x560 [ 131.237911][ T5922] should_failslab+0xa8/0x100 [ 131.237942][ T5922] __kmalloc_noprof+0xfe/0x720 [ 131.237990][ T5922] ? tomoyo_encode+0x2ad/0x570 [ 131.238049][ T5922] ? tomoyo_encode+0x2ad/0x570 [ 131.238132][ T5922] tomoyo_encode+0x2ad/0x570 [ 131.238213][ T5922] tomoyo_realpath_from_path+0x5fa/0x640 [ 131.238318][ T5922] tomoyo_check_open_permission+0x229/0x470 [ 131.238431][ T5922] ? tomoyo_check_open_permission+0x1d3/0x470 [ 131.238515][ T5922] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 131.238608][ T5922] ? __asan_memset+0x22/0x50 [ 131.238701][ T5922] ? __up_read+0x29c/0x930 [ 131.238876][ T5922] ? mnt_get_write_access+0x66/0x280 [ 131.238982][ T5922] ? tomoyo_file_open+0x163/0x220 [ 131.239129][ T5922] security_file_open+0xa9/0x240 [ 131.239212][ T5922] do_dentry_open+0x4a0/0x1380 [ 131.239535][ T5922] vfs_open+0x3b/0x340 [ 131.239638][ T5922] ? path_openat+0x1428/0x1d60 [ 131.239721][ T5922] path_openat+0x1443/0x1d60 [ 131.239844][ T5922] do_file_open+0x23e/0x4a0 [ 131.239937][ T5922] ? __pfx_do_file_open+0x10/0x10 [ 131.240078][ T5922] ? _raw_spin_unlock+0x28/0x50 [ 131.240146][ T5922] ? alloc_fd+0x651/0x6c0 [ 131.240275][ T5922] do_sys_openat2+0x115/0x200 [ 131.240393][ T5922] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.240486][ T5922] ? fput_close_sync+0x11f/0x240 [ 131.240579][ T5922] ? __pfx_fput_close_sync+0x10/0x10 [ 131.240721][ T5922] __x64_sys_openat+0x138/0x170 [ 131.240834][ T5922] do_syscall_64+0x166/0x520 [ 131.240912][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.240980][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 131.241060][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.241122][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 131.241182][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 131.241232][ T5922] RSP: 002b:00007ffd51c0a978 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.241301][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 131.241358][ T5922] RDX: 0000000000000001 RSI: 00007f0a3c10a918 RDI: ffffffffffffff9c [ 131.241395][ T5922] RBP: 000055556d0e69c0 R08: 0000000000000000 R09: 0000000000000000 [+] fail_n=7: bind succeeded, scanning /dev/input to trigger bug... [ 131.241432][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 131.241475][ T5922] R13: 0000000000000007 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 131.241571][ T5922] [ 131.423304][ T5922] logitech-hidpp-device 0003:046D:C262.0001: Unable to initialize force feedback support, errno -1 [ 131.519098][ T5922] input: HID 046d:c262 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:046D:C262.0001/input/input8 [ 131.632970][ T5922] logitech-hidpp-device 0003:046D:C262.0001: input,hidraw0: USB HID v1.11 Joystick [HID 046d:c262] on usb-dummy_hcd.2-1/input0 [*] Opened /dev/input/event4, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event4. [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event3. [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event0. [ 131.908141][ T5922] FAULT_INJECTION: forcing a failure. [ 131.908141][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 131.908181][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 131.908209][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.908223][ T5922] Call Trace: [ 131.908234][ T5922] [ 131.908363][ T5922] dump_stack_lvl+0xe8/0x150 [ 131.908409][ T5922] should_fail_ex+0x410/0x560 [ 131.908452][ T5922] should_failslab+0xa8/0x100 [ 131.908489][ T5922] __kmalloc_cache_noprof+0xa3/0x600 [ 131.908521][ T5922] ? kernfs_fop_open+0x3ac/0xce0 [ 131.908556][ T5922] ? kernfs_fop_open+0x3ac/0xce0 [ 131.908601][ T5922] kernfs_fop_open+0x3ac/0xce0 [ 131.908645][ T5922] ? __pfx_kernfs_fop_open+0x10/0x10 [ 131.908682][ T5922] do_dentry_open+0x816/0x1380 [ 131.908731][ T5922] vfs_open+0x3b/0x340 [ 131.908759][ T5922] ? path_openat+0x1428/0x1d60 [ 131.908785][ T5922] path_openat+0x1443/0x1d60 [ 131.908828][ T5922] do_file_open+0x23e/0x4a0 [ 131.908864][ T5922] ? __pfx_do_file_open+0x10/0x10 [ 131.908927][ T5922] ? _raw_spin_unlock+0x28/0x50 [*] Tested fail_n=10 [ 131.908952][ T5922] ? alloc_fd+0x651/0x6c0 [ 131.909000][ T5922] do_sys_openat2+0x115/0x200 [ 131.909040][ T5922] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.909077][ T5922] ? fput_close_sync+0x11f/0x240 [ 131.909113][ T5922] ? __pfx_fput_close_sync+0x10/0x10 [ 131.909159][ T5922] __x64_sys_openat+0x138/0x170 [ 131.909202][ T5922] do_syscall_64+0x166/0x520 [ 131.909232][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.909268][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 131.909300][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.909325][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 131.909349][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 131.909369][ T5922] RSP: 002b:00007ffd51c0a978 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.909396][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 131.909414][ T5922] RDX: 0000000000000001 RSI: 00007f0a3c10a918 RDI: ffffffffffffff9c [ 131.909431][ T5922] RBP: 000055556d0e69c0 R08: 0000000000000000 R09: 0000000000000000 [ 131.909447][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 131.909462][ T5922] R13: 0000000000000008 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 131.909500][ T5922] [ 132.024611][ T5922] FAULT_INJECTION: forcing a failure. [ 132.024611][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 132.024691][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 132.024754][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 132.024786][ T5922] Call Trace: [ 132.024808][ T5922] [ 132.024831][ T5922] dump_stack_lvl+0xe8/0x150 [ 132.024952][ T5922] should_fail_ex+0x410/0x560 [ 132.025049][ T5922] should_failslab+0xa8/0x100 [ 132.025143][ T5922] ? seq_open+0x5f/0x140 [ 132.025209][ T5922] kmem_cache_alloc_noprof+0xa1/0x600 [ 132.025273][ T5922] ? __kasan_kmalloc+0x93/0xb0 [ 132.025358][ T5922] ? seq_open+0x5f/0x140 [ 132.025443][ T5922] seq_open+0x5f/0x140 [ 132.025517][ T5922] kernfs_fop_open+0x575/0xce0 [ 132.025614][ T5922] ? __pfx_kernfs_fop_open+0x10/0x10 [ 132.025684][ T5922] do_dentry_open+0x816/0x1380 [ 132.025790][ T5922] vfs_open+0x3b/0x340 [ 132.025856][ T5922] ? path_openat+0x1428/0x1d60 [ 132.026028][ T5922] path_openat+0x1443/0x1d60 [ 132.026231][ T5922] do_file_open+0x23e/0x4a0 [ 132.026721][ T5922] ? __pfx_do_file_open+0x10/0x10 [ 132.026846][ T5922] ? _raw_spin_unlock+0x28/0x50 [ 132.027079][ T5922] ? alloc_fd+0x651/0x6c0 [ 132.027201][ T5922] do_sys_openat2+0x115/0x200 [ 132.027296][ T5922] ? __pfx_do_sys_openat2+0x10/0x10 [ 132.027784][ T5922] ? fput_close_sync+0x11f/0x240 [ 132.027820][ T5922] ? __pfx_fput_close_sync+0x10/0x10 [ 132.027858][ T5922] __x64_sys_openat+0x138/0x170 [ 132.028194][ T5922] do_syscall_64+0x166/0x520 [ 132.028292][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.028355][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 132.028382][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.028404][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 132.028426][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 132.028443][ T5922] RSP: 002b:00007ffd51c0a978 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.028466][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 132.028481][ T5922] RDX: 0000000000000001 RSI: 00007f0a3c10a918 RDI: ffffffffffffff9c [ 132.028495][ T5922] RBP: 000055556d0e69c0 R08: 0000000000000000 R09: 0000000000000000 [ 132.028507][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 132.028521][ T5922] R13: 0000000000000009 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 132.028620][ T5922] [ 132.086507][ T5922] FAULT_INJECTION: forcing a failure. [ 132.086507][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 132.086602][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 132.086675][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 132.086707][ T5922] Call Trace: [ 132.086729][ T5922] [ 132.086751][ T5922] dump_stack_lvl+0xe8/0x150 [ 132.086847][ T5922] should_fail_ex+0x410/0x560 [ 132.086958][ T5922] should_failslab+0xa8/0x100 [ 132.087043][ T5922] __kmalloc_cache_noprof+0xa3/0x600 [ 132.087120][ T5922] ? mutex_init_lockdep+0xdf/0x110 [ 132.087187][ T5922] ? kernfs_fop_open+0x7e6/0xce0 [ 132.087262][ T5922] ? kernfs_fop_open+0x7e6/0xce0 [ 132.087353][ T5922] kernfs_fop_open+0x7e6/0xce0 [ 132.087451][ T5922] ? __pfx_kernfs_fop_open+0x10/0x10 [ 132.087526][ T5922] do_dentry_open+0x816/0x1380 [ 132.087632][ T5922] vfs_open+0x3b/0x340 [ 132.087682][ T5922] ? path_openat+0x1428/0x1d60 [ 132.087754][ T5922] path_openat+0x1443/0x1d60 [ 132.087904][ T5922] do_file_open+0x23e/0x4a0 [ 132.088089][ T5922] ? __pfx_do_file_open+0x10/0x10 [ 132.088246][ T5922] ? _raw_spin_unlock+0x28/0x50 [ 132.088310][ T5922] ? alloc_fd+0x651/0x6c0 [ 132.088429][ T5922] do_sys_openat2+0x115/0x200 [ 132.088527][ T5922] ? __pfx_do_sys_openat2+0x10/0x10 [ 132.088616][ T5922] ? fput_close_sync+0x11f/0x240 [ 132.088719][ T5922] ? __pfx_fput_close_sync+0x10/0x10 [ 132.088834][ T5922] __x64_sys_openat+0x138/0x170 [ 132.088990][ T5922] do_syscall_64+0x166/0x520 [ 132.089074][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.089142][ T5922] ? clear_bhb_loop+0x70/0xc0 [+] fail_n=11: bind succeeded, scanning /dev/input to trigger bug... [ 132.089219][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.089291][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 132.089349][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 132.089406][ T5922] RSP: 002b:00007ffd51c0a978 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.089522][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 132.089567][ T5922] RDX: 0000000000000001 RSI: 00007f0a3c10a918 RDI: ffffffffffffff9c [ 132.089604][ T5922] RBP: 000055556d0e69c0 R08: 0000000000000000 R09: 0000000000000000 [ 132.089654][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 132.089687][ T5922] R13: 000000000000000a R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 132.089855][ T5922] [ 132.353323][ T5922] logitech-hidpp-device 0003:046D:C262.0001: Unable to initialize force feedback support, errno -1 [ 132.400876][ T5922] input: HID 046d:c262 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:046D:C262.0001/input/input9 [*] Opened /dev/input/event4, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event4. [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event3. [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event0. [ 132.707702][ T5922] logitech-hidpp-device 0003:046D:C262.0001: input,hidraw0: USB HID v1.11 Joystick [HID 046d:c262] on usb-dummy_hcd.2-1/input0 [ 133.068239][ T5922] FAULT_INJECTION: forcing a failure. [ 133.068239][ T5922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.068387][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 133.068414][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.068429][ T5922] Call Trace: [ 133.068438][ T5922] [ 133.068449][ T5922] dump_stack_lvl+0xe8/0x150 [ 133.068494][ T5922] should_fail_ex+0x410/0x560 [ 133.068538][ T5922] _copy_from_iter+0x1d3/0x1660 [ 133.068590][ T5922] ? __pfx__copy_from_iter+0x10/0x10 [ 133.068623][ T5922] ? trace_kmalloc+0x2a/0xf0 [ 133.068653][ T5922] ? __kmalloc_noprof+0x38c/0x720 [ 133.068680][ T5922] ? __kmalloc_noprof+0x1ab/0x720 [ 133.068707][ T5922] ? kernfs_fop_write_iter+0x157/0x540 [ 133.068752][ T5922] kernfs_fop_write_iter+0x19a/0x540 [ 133.068796][ T5922] vfs_write+0x612/0xba0 [ 133.068834][ T5922] ? __pfx_vfs_write+0x10/0x10 [ 133.068874][ T5922] ? __fget_files+0x2a/0x420 [ 133.068916][ T5922] ksys_write+0x150/0x270 [ 133.068944][ T5922] ? __pfx_ksys_write+0x10/0x10 [ 133.068985][ T5922] do_syscall_64+0x166/0x520 [ 133.069015][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.069041][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 133.069071][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.069095][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 133.069117][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 133.069292][ T5922] RSP: 002b:00007ffd51c0a9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.069320][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 133.069338][ T5922] RDX: 0000000000000013 RSI: 00007ffd51c0aad0 RDI: 0000000000000004 [ 133.069354][ T5922] RBP: 000055556d0e69c0 R08: 0000000000000000 R09: 0000000000000000 [ 133.069370][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 133.069387][ T5922] R13: 000000000000000c R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 133.069426][ T5922] [ 133.153457][ T5922] FAULT_INJECTION: forcing a failure. [ 133.153457][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 133.153494][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 133.153518][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.153532][ T5922] Call Trace: [ 133.153540][ T5922] [ 133.153550][ T5922] dump_stack_lvl+0xe8/0x150 [ 133.153590][ T5922] should_fail_ex+0x410/0x560 [ 133.153628][ T5922] should_failslab+0xa8/0x100 [ 133.153667][ T5922] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 133.153696][ T5922] ? __lock_acquire+0x747/0x2de0 [ 133.153721][ T5922] ? __kernfs_new_node+0xa9/0x980 [ 133.153753][ T5922] ? __kernfs_new_node+0xa9/0x980 [ 133.153788][ T5922] kstrdup+0x42/0x100 [ 133.153816][ T5922] __kernfs_new_node+0xa9/0x980 [ 133.153899][ T5922] ? __pfx___kernfs_new_node+0x10/0x10 [ 133.153995][ T5922] ? kernfs_root+0x1c/0x230 [ 133.154086][ T5922] ? kernfs_root+0x1c/0x230 [ 133.154159][ T5922] ? kernfs_root+0x1c/0x230 [ 133.154214][ T5922] ? kernfs_root+0x1c/0x230 [ 133.154278][ T5922] kernfs_new_node+0xea/0x140 [ 133.154364][ T5922] kernfs_create_link+0xa7/0x200 [ 133.154467][ T5922] sysfs_do_create_link_sd+0x83/0x110 [ 133.154535][ T5922] driver_sysfs_add+0x89/0x210 [ 133.154988][ T5922] really_probe+0x142/0xae0 [ 133.155137][ T5922] __driver_probe_device+0x1e8/0x360 [ 133.155184][ T5922] device_driver_attach+0xe0/0x1d0 [ 133.155216][ T5922] bind_store+0x1d0/0x220 [ 133.155245][ T5922] ? __pfx_sysfs_kf_write+0x10/0x10 [ 133.155273][ T5922] kernfs_fop_write_iter+0x3a4/0x540 [ 133.155369][ T5922] vfs_write+0x612/0xba0 [ 133.155495][ T5922] ? __pfx_vfs_write+0x10/0x10 [ 133.155599][ T5922] ? __fget_files+0x2a/0x420 [ 133.155772][ T5922] ksys_write+0x150/0x270 [ 133.155848][ T5922] ? __pfx_ksys_write+0x10/0x10 [ 133.155943][ T5922] do_syscall_64+0x166/0x520 [ 133.156010][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.156073][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 133.156146][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.156195][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 133.156250][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 133.156294][ T5922] RSP: 002b:00007ffd51c0a9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.156358][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 133.156407][ T5922] RDX: 0000000000000013 RSI: 00007ffd51c0aad0 RDI: 0000000000000004 [ 133.156440][ T5922] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000000 [ 133.156480][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 133.156514][ T5922] R13: 000000000000000d R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 133.156608][ T5922] [ 133.178979][ T5922] logitech-hidpp-device 0003:046D:C262.0001: really_probe: driver_sysfs_add failed [ 133.255527][ T5922] FAULT_INJECTION: forcing a failure. [ 133.255527][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 133.255622][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 133.255686][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.255719][ T5922] Call Trace: [ 133.255741][ T5922] [ 133.255757][ T5922] dump_stack_lvl+0xe8/0x150 [ 133.255876][ T5922] should_fail_ex+0x410/0x560 [ 133.255985][ T5922] should_failslab+0xa8/0x100 [ 133.256063][ T5922] ? __kernfs_new_node+0xe6/0x980 [ 133.256128][ T5922] kmem_cache_alloc_noprof+0xa1/0x600 [+] fail_n=15: bind succeeded, scanning /dev/input to trigger bug... [ 133.256199][ T5922] ? kstrdup+0x81/0x100 [ 133.256266][ T5922] ? __kernfs_new_node+0xe6/0x980 [ 133.256350][ T5922] __kernfs_new_node+0xe6/0x980 [ 133.256453][ T5922] ? __pfx___kernfs_new_node+0x10/0x10 [ 133.256564][ T5922] ? kernfs_root+0x1c/0x230 [ 133.256647][ T5922] ? kernfs_root+0x1c/0x230 [ 133.256703][ T5922] ? kernfs_root+0x1c/0x230 [ 133.256744][ T5922] ? kernfs_root+0x1c/0x230 [ 133.256819][ T5922] kernfs_new_node+0xea/0x140 [ 133.256904][ T5922] kernfs_create_link+0xa7/0x200 [ 133.256998][ T5922] sysfs_do_create_link_sd+0x83/0x110 [ 133.257071][ T5922] driver_sysfs_add+0x89/0x210 [ 133.257164][ T5922] really_probe+0x142/0xae0 [ 133.257269][ T5922] __driver_probe_device+0x1e8/0x360 [ 133.257363][ T5922] device_driver_attach+0xe0/0x1d0 [ 133.257458][ T5922] bind_store+0x1d0/0x220 [ 133.257550][ T5922] ? __pfx_sysfs_kf_write+0x10/0x10 [*] Opened /dev/input/event4, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event4. [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [ 133.257607][ T5922] kernfs_fop_write_iter+0x3a4/0x540 [ 133.257641][ T5922] vfs_write+0x612/0xba0 [ 133.257671][ T5922] ? __pfx_vfs_write+0x10/0x10 [ 133.257728][ T5922] ? __fget_files+0x2a/0x420 [ 133.257839][ T5922] ksys_write+0x150/0x270 [ 133.257920][ T5922] ? __pfx_ksys_write+0x10/0x10 [ 133.258013][ T5922] do_syscall_64+0x166/0x520 [*] Closed /dev/input/event3. [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [ 133.258079][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.258134][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 133.258207][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.258272][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 133.258332][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event0. [ 133.258375][ T5922] RSP: 002b:00007ffd51c0a9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.258429][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 133.258471][ T5922] RDX: 0000000000000013 RSI: 00007ffd51c0aad0 RDI: 0000000000000004 [ 133.258504][ T5922] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000000 [ 133.258537][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 133.258577][ T5922] R13: 000000000000000e R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 133.258663][ T5922] [ 133.294154][ T5922] logitech-hidpp-device 0003:046D:C262.0001: really_probe: driver_sysfs_add failed [ 133.377296][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.377389][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.471893][ T5922] logitech-hidpp-device 0003:046D:C262.0001: Unable to initialize force feedback support, errno -1 [ 133.559947][ T5922] input: HID 046d:c262 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:046D:C262.0001/input/input10 [ 133.819835][ T5922] logitech-hidpp-device 0003:046D:C262.0001: input,hidraw0: USB HID v1.11 Joystick [HID 046d:c262] on usb-dummy_hcd.2-1/input0 [ 134.226368][ T5922] FAULT_INJECTION: forcing a failure. [ 134.226368][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 134.226405][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 134.226430][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.226444][ T5922] Call Trace: [ 134.226453][ T5922] [ 134.226462][ T5922] dump_stack_lvl+0xe8/0x150 [ 134.226501][ T5922] should_fail_ex+0x410/0x560 [ 134.226539][ T5922] should_failslab+0xa8/0x100 [ 134.226569][ T5922] ? __kernfs_new_node+0xe6/0x980 [ 134.226598][ T5922] kmem_cache_alloc_noprof+0xa1/0x600 [ 134.226626][ T5922] ? __kernfs_new_node+0xe6/0x980 [ 134.226660][ T5922] __kernfs_new_node+0xe6/0x980 [ 134.226710][ T5922] ? __pfx___kernfs_new_node+0x10/0x10 [ 134.226739][ T5922] ? kernfs_root+0x1c/0x230 [ 134.226772][ T5922] ? kernfs_root+0x1c/0x230 [ 134.226797][ T5922] ? kernfs_root+0x1c/0x230 [ 134.226820][ T5922] ? kernfs_root+0x1c/0x230 [ 134.226852][ T5922] kernfs_new_node+0xea/0x140 [ 134.226885][ T5922] kernfs_create_link+0xa7/0x200 [ 134.226923][ T5922] sysfs_do_create_link_sd+0x83/0x110 [ 134.226951][ T5922] driver_sysfs_add+0xec/0x210 [ 134.226990][ T5922] really_probe+0x142/0xae0 [ 134.227031][ T5922] __driver_probe_device+0x1e8/0x360 [ 134.227077][ T5922] device_driver_attach+0xe0/0x1d0 [ 134.227116][ T5922] bind_store+0x1d0/0x220 [ 134.227164][ T5922] ? __pfx_sysfs_kf_write+0x10/0x10 [ 134.227185][ T5922] kernfs_fop_write_iter+0x3a4/0x540 [ 134.227225][ T5922] vfs_write+0x612/0xba0 [ 134.227260][ T5922] ? __pfx_vfs_write+0x10/0x10 [ 134.227297][ T5922] ? __fget_files+0x2a/0x420 [ 134.227329][ T5922] ksys_write+0x150/0x270 [ 134.227357][ T5922] ? __pfx_ksys_write+0x10/0x10 [ 134.227396][ T5922] do_syscall_64+0x166/0x520 [ 134.227422][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.227446][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 134.227474][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.227497][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 134.227518][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 134.227536][ T5922] RSP: 002b:00007ffd51c0a9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.227560][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 134.227576][ T5922] RDX: 0000000000000013 RSI: 00007ffd51c0aad0 RDI: 0000000000000004 [ 134.227590][ T5922] RBP: 000055556d0e69c0 R08: 0000000000000000 R09: 0000000000000000 [ 134.227603][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 134.227617][ T5922] R13: 0000000000000010 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 134.227653][ T5922] [ 134.229343][ T5922] logitech-hidpp-device 0003:046D:C262.0001: really_probe: driver_sysfs_add failed [ 134.303877][ T5922] FAULT_INJECTION: forcing a failure. [ 134.303877][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 134.303977][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 134.304039][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.304181][ T5922] Call Trace: [ 134.304231][ T5922] [ 134.304262][ T5922] dump_stack_lvl+0xe8/0x150 [ 134.304368][ T5922] should_fail_ex+0x410/0x560 [ 134.304475][ T5922] should_failslab+0xa8/0x100 [ 134.304582][ T5922] __kmalloc_cache_noprof+0xa3/0x600 [ 134.304670][ T5922] ? devres_open_group+0x7c/0x400 [ 134.304733][ T5922] ? devres_open_group+0x7c/0x400 [ 134.304815][ T5922] devres_open_group+0x7c/0x400 [ 134.304880][ T5922] ? down_interruptible+0x6d/0xe0 [*] Tested fail_n=20 [ 134.304997][ T5922] hid_device_probe+0x39b/0x870 [ 134.305115][ T5922] ? __pfx_hid_device_probe+0x10/0x10 [ 134.305179][ T5922] really_probe+0x254/0xae0 [ 134.305297][ T5922] __driver_probe_device+0x1e8/0x360 [ 134.305392][ T5922] device_driver_attach+0xe0/0x1d0 [ 134.305503][ T5922] bind_store+0x1d0/0x220 [ 134.305607][ T5922] ? __pfx_sysfs_kf_write+0x10/0x10 [ 134.305670][ T5922] kernfs_fop_write_iter+0x3a4/0x540 [ 134.305774][ T5922] vfs_write+0x612/0xba0 [ 134.306082][ T5922] ? __pfx_vfs_write+0x10/0x10 [ 134.306262][ T5922] ? __fget_files+0x2a/0x420 [ 134.306310][ T5922] ksys_write+0x150/0x270 [ 134.306336][ T5922] ? __pfx_ksys_write+0x10/0x10 [ 134.306377][ T5922] do_syscall_64+0x166/0x520 [ 134.306405][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.306430][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 134.306459][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.306484][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 134.306517][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 134.306535][ T5922] RSP: 002b:00007ffd51c0a9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.306560][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 134.306577][ T5922] RDX: 0000000000000013 RSI: 00007ffd51c0aad0 RDI: 0000000000000004 [ 134.306592][ T5922] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000000 [ 134.306607][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 134.306621][ T5922] R13: 0000000000000011 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 134.306700][ T5922] [ 134.333250][ T5922] logitech-hidpp-device 0003:046D:C262.0001: probe with driver logitech-hidpp-device failed with error -12 [ 134.398869][ T5922] FAULT_INJECTION: forcing a failure. [ 134.398869][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 134.398962][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 134.399042][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.399185][ T5922] Call Trace: [ 134.399250][ T5922] [ 134.399281][ T5922] dump_stack_lvl+0xe8/0x150 [ 134.399416][ T5922] should_fail_ex+0x410/0x560 [ 134.399534][ T5922] should_failslab+0xa8/0x100 [ 134.399630][ T5922] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 134.399689][ T5922] ? hidpp_probe+0x107/0x1ce0 [ 134.399753][ T5922] ? hidpp_probe+0x107/0x1ce0 [ 134.399837][ T5922] devm_kmalloc+0x7f/0x340 [ 134.399902][ T5922] ? devres_open_group+0x7c/0x400 [ 134.399965][ T5922] ? hid_device_probe+0x39b/0x870 [ 134.400021][ T5922] ? really_probe+0x254/0xae0 [ 134.400255][ T5922] ? __driver_probe_device+0x1e8/0x360 [ 134.400377][ T5922] hidpp_probe+0x107/0x1ce0 [ 134.400676][ T5922] ? __mutex_trylock_common+0x15f/0x270 [ 134.400774][ T5922] ? __pfx___mutex_trylock_common+0x10/0x10 [ 134.400857][ T5922] ? __pfx_hidpp_probe+0x10/0x10 [ 134.400912][ T5922] ? rcu_is_watching+0x16/0xb0 [ 134.400986][ T5922] ? trace_contention_end+0x3d/0x140 [ 134.401259][ T5922] ? hid_lookup_quirk+0x350/0x600 [ 134.401356][ T5922] ? __mutex_unlock_slowpath+0x731/0x900 [ 134.401443][ T5922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.401533][ T5922] ? hid_match_id+0x313/0x340 [ 134.401605][ T5922] ? hid_lookup_quirk+0x350/0x600 [ 134.401729][ T5922] hid_device_probe+0x46a/0x870 [ 134.401829][ T5922] ? __pfx_hid_device_probe+0x10/0x10 [ 134.401898][ T5922] really_probe+0x254/0xae0 [ 134.402009][ T5922] __driver_probe_device+0x1e8/0x360 [ 134.402101][ T5922] device_driver_attach+0xe0/0x1d0 [ 134.402203][ T5922] bind_store+0x1d0/0x220 [ 134.402292][ T5922] ? __pfx_sysfs_kf_write+0x10/0x10 [ 134.402353][ T5922] kernfs_fop_write_iter+0x3a4/0x540 [ 134.402457][ T5922] vfs_write+0x612/0xba0 [ 134.402544][ T5922] ? __pfx_vfs_write+0x10/0x10 [ 134.402632][ T5922] ? __fget_files+0x2a/0x420 [ 134.402742][ T5922] ksys_write+0x150/0x270 [ 134.402816][ T5922] ? __pfx_ksys_write+0x10/0x10 [ 134.402914][ T5922] do_syscall_64+0x166/0x520 [ 134.402989][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.403060][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 134.403126][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.403188][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 134.403254][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 134.403304][ T5922] RSP: 002b:00007ffd51c0a9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.403368][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 134.403409][ T5922] RDX: 0000000000000013 RSI: 00007ffd51c0aad0 RDI: 0000000000000004 [ 134.403450][ T5922] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000000 [ 134.403493][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 134.403536][ T5922] R13: 0000000000000012 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 134.403634][ T5922] [ 134.434880][ T5922] logitech-hidpp-device 0003:046D:C262.0001: probe with driver logitech-hidpp-device failed with error -12 [ 134.505980][ T5922] FAULT_INJECTION: forcing a failure. [ 134.505980][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 134.519345][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 134.519406][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.519445][ T5922] Call Trace: [ 134.519468][ T5922] [ 134.519490][ T5922] dump_stack_lvl+0xe8/0x150 [ 134.519888][ T5922] should_fail_ex+0x410/0x560 [ 134.519991][ T5922] should_failslab+0xa8/0x100 [ 134.520051][ T5922] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 134.520076][ T5922] ? hid_open_report+0x177/0xf00 [ 134.520103][ T5922] ? hid_open_report+0x177/0xf00 [ 134.520137][ T5922] kmemdup_noprof+0x2b/0x70 [ 134.520162][ T5922] hid_open_report+0x177/0xf00 [ 134.520238][ T5922] ? __pfx_hid_open_report+0x10/0x10 [ 134.520326][ T5922] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.520397][ T5922] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 134.520488][ T5922] hidpp_probe+0x27e/0x1ce0 [ 134.520846][ T5922] ? __mutex_trylock_common+0x15f/0x270 [ 134.520890][ T5922] ? __pfx___mutex_trylock_common+0x10/0x10 [ 134.520917][ T5922] ? __pfx_hidpp_probe+0x10/0x10 [ 134.520936][ T5922] ? rcu_is_watching+0x16/0xb0 [ 134.521197][ T5922] ? trace_contention_end+0x3d/0x140 [ 134.521303][ T5922] ? hid_lookup_quirk+0x350/0x600 [ 134.521406][ T5922] ? __mutex_unlock_slowpath+0x731/0x900 [ 134.521499][ T5922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.521710][ T5922] ? hid_match_id+0x313/0x340 [ 134.521783][ T5922] ? hid_lookup_quirk+0x350/0x600 [ 134.521866][ T5922] hid_device_probe+0x46a/0x870 [ 134.521952][ T5922] ? __pfx_hid_device_probe+0x10/0x10 [ 134.522015][ T5922] really_probe+0x254/0xae0 [ 134.522141][ T5922] __driver_probe_device+0x1e8/0x360 [ 134.522262][ T5922] device_driver_attach+0xe0/0x1d0 [ 134.522355][ T5922] bind_store+0x1d0/0x220 [ 134.522441][ T5922] ? __pfx_sysfs_kf_write+0x10/0x10 [ 134.522496][ T5922] kernfs_fop_write_iter+0x3a4/0x540 [ 134.522599][ T5922] vfs_write+0x612/0xba0 [ 134.522710][ T5922] ? __pfx_vfs_write+0x10/0x10 [ 134.522839][ T5922] ? __fget_files+0x2a/0x420 [ 134.522945][ T5922] ksys_write+0x150/0x270 [ 134.523020][ T5922] ? __pfx_ksys_write+0x10/0x10 [ 134.523103][ T5922] do_syscall_64+0x166/0x520 [ 134.523174][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.523230][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 134.523303][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.523357][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 134.523419][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 134.523461][ T5922] RSP: 002b:00007ffd51c0a9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.523524][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 134.523586][ T5922] RDX: 0000000000000013 RSI: 00007ffd51c0aad0 RDI: 0000000000000004 [ 134.523632][ T5922] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000000 [ 134.523671][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 134.523704][ T5922] R13: 0000000000000013 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 134.523788][ T5922] [ 134.562199][ T5922] logitech-hidpp-device 0003:046D:C262.0001: hidpp_probe:parse failed [ 134.562705][ T5922] logitech-hidpp-device 0003:046D:C262.0001: probe with driver logitech-hidpp-device failed with error -12 [ 134.705326][ T5922] FAULT_INJECTION: forcing a failure. [ 134.705326][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 134.705419][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 134.705482][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.705514][ T5922] Call Trace: [ 134.705538][ T5922] [ 134.705567][ T5922] dump_stack_lvl+0xe8/0x150 [ 134.705673][ T5922] should_fail_ex+0x410/0x560 [ 134.705767][ T5922] should_failslab+0xa8/0x100 [ 134.705988][ T5922] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 134.706273][ T5922] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 134.706505][ T5922] ? hid_open_report+0x1fa/0xf00 [ 134.706599][ T5922] ? hid_open_report+0x1fa/0xf00 [ 134.706724][ T5922] kmemdup_noprof+0x2b/0x70 [ 134.706800][ T5922] hid_open_report+0x1fa/0xf00 [ 134.706925][ T5922] ? __pfx_hid_open_report+0x10/0x10 [ 134.706994][ T5922] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.707192][ T5922] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 134.707298][ T5922] hidpp_probe+0x27e/0x1ce0 [ 134.707373][ T5922] ? __mutex_trylock_common+0x15f/0x270 [ 134.707466][ T5922] ? __pfx___mutex_trylock_common+0x10/0x10 [ 134.707549][ T5922] ? __pfx_hidpp_probe+0x10/0x10 [ 134.707603][ T5922] ? rcu_is_watching+0x16/0xb0 [ 134.707645][ T5922] ? trace_contention_end+0x3d/0x140 [ 134.707680][ T5922] ? hid_lookup_quirk+0x350/0x600 [ 134.707709][ T5922] ? __mutex_unlock_slowpath+0x731/0x900 [ 134.707739][ T5922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.707919][ T5922] ? hid_match_id+0x313/0x340 [ 134.707939][ T5922] ? hid_lookup_quirk+0x350/0x600 [ 134.707963][ T5922] hid_device_probe+0x46a/0x870 [ 134.708119][ T5922] ? __pfx_hid_device_probe+0x10/0x10 [ 134.708140][ T5922] really_probe+0x254/0xae0 [ 134.708175][ T5922] __driver_probe_device+0x1e8/0x360 [ 134.708206][ T5922] device_driver_attach+0xe0/0x1d0 [ 134.708237][ T5922] bind_store+0x1d0/0x220 [ 134.708293][ T5922] ? __pfx_sysfs_kf_write+0x10/0x10 [ 134.708350][ T5922] kernfs_fop_write_iter+0x3a4/0x540 [ 134.708476][ T5922] vfs_write+0x612/0xba0 [ 134.708567][ T5922] ? __pfx_vfs_write+0x10/0x10 [ 134.708766][ T5922] ? __fget_files+0x2a/0x420 [ 134.708880][ T5922] ksys_write+0x150/0x270 [ 134.708950][ T5922] ? __pfx_ksys_write+0x10/0x10 [ 134.709054][ T5922] do_syscall_64+0x166/0x520 [ 134.709120][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.709182][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 134.709254][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.709310][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 134.709372][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 134.709416][ T5922] RSP: 002b:00007ffd51c0a9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.709488][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 134.709537][ T5922] RDX: 0000000000000013 RSI: 00007ffd51c0aad0 RDI: 0000000000000004 [ 134.709571][ T5922] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000000 [ 134.709612][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 134.709639][ T5922] R13: 0000000000000014 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 134.710203][ T5922] [ 134.743224][ T5922] logitech-hidpp-device 0003:046D:C262.0001: hidpp_probe:parse failed [ 134.743468][ T5922] logitech-hidpp-device 0003:046D:C262.0001: probe with driver logitech-hidpp-device failed with error -12 [ 134.819778][ T5922] FAULT_INJECTION: forcing a failure. [ 134.819778][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 134.819864][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 134.819933][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.819966][ T5922] Call Trace: [ 134.819987][ T5922] [ 134.819995][ T5922] dump_stack_lvl+0xe8/0x150 [ 134.820745][ T5922] should_fail_ex+0x410/0x560 [ 134.820859][ T5922] ? alloc_vmap_area+0x21c/0x1420 [ 134.820950][ T5922] should_failslab+0xa8/0x100 [ 134.821036][ T5922] ? alloc_vmap_area+0x21c/0x1420 [ 134.821120][ T5922] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 134.821198][ T5922] ? alloc_vmap_area+0x21c/0x1420 [ 134.821298][ T5922] alloc_vmap_area+0x21c/0x1420 [ 134.821465][ T5922] ? __pfx_alloc_vmap_area+0x10/0x10 [ 134.821550][ T5922] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 134.821773][ T5922] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 134.821849][ T5922] ? __get_vm_area_node+0x155/0x2f0 [ 134.821922][ T5922] __get_vm_area_node+0x200/0x2f0 [ 134.822007][ T5922] __vmalloc_node_range_noprof+0x343/0x1540 [ 134.822797][ T5922] ? hid_open_report+0x2c4/0xf00 [ 134.823152][ T5922] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 134.823216][ T5922] ? kasan_quarantine_put+0xbb/0x1f0 [ 134.823282][ T5922] ? lockdep_hardirqs_on+0x7b/0x110 [ 134.823361][ T5922] ? hid_open_report+0x2c4/0xf00 [ 134.823446][ T5922] vzalloc_noprof+0xb2/0xe0 [ 134.823735][ T5922] ? hid_open_report+0x2c4/0xf00 [+] fail_n=30: bind succeeded, scanning /dev/input to trigger bug... [ 134.823851][ T5922] hid_open_report+0x2c4/0xf00 [ 134.823973][ T5922] ? __pfx_hid_open_report+0x10/0x10 [ 134.824049][ T5922] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.824228][ T5922] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 134.824316][ T5922] hidpp_probe+0x27e/0x1ce0 [ 134.824405][ T5922] ? __mutex_trylock_common+0x15f/0x270 [ 134.824492][ T5922] ? __pfx___mutex_trylock_common+0x10/0x10 [ 134.824528][ T5922] ? __pfx_hidpp_probe+0x10/0x10 [ 134.824546][ T5922] ? rcu_is_watching+0x16/0xb0 [ 134.824570][ T5922] ? trace_contention_end+0x3d/0x140 [ 134.824689][ T5922] ? hid_lookup_quirk+0x350/0x600 [ 134.824791][ T5922] ? __mutex_unlock_slowpath+0x731/0x900 [ 134.824886][ T5922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.825183][ T5922] ? hid_match_id+0x313/0x340 [ 134.825204][ T5922] ? hid_lookup_quirk+0x350/0x600 [ 134.825321][ T5922] hid_device_probe+0x46a/0x870 [ 134.825400][ T5922] ? __pfx_hid_device_probe+0x10/0x10 [*] Opened /dev/input/event4, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event4. [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [ 134.825441][ T5922] really_probe+0x254/0xae0 [ 134.825545][ T5922] __driver_probe_device+0x1e8/0x360 [ 134.825716][ T5922] device_driver_attach+0xe0/0x1d0 [ 134.825843][ T5922] bind_store+0x1d0/0x220 [ 134.825935][ T5922] ? __pfx_sysfs_kf_write+0x10/0x10 [ 134.825990][ T5922] kernfs_fop_write_iter+0x3a4/0x540 [ 134.826376][ T5922] vfs_write+0x612/0xba0 [ 134.826484][ T5922] ? __pfx_vfs_write+0x10/0x10 [ 134.826913][ T5922] ? __fget_files+0x2a/0x420 [ 134.827004][ T5922] ksys_write+0x150/0x270 [*] Closed /dev/input/event3. [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event0. [ 134.827117][ T5922] ? __pfx_ksys_write+0x10/0x10 [ 134.827195][ T5922] do_syscall_64+0x166/0x520 [ 134.827220][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.827240][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 134.827267][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.827327][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 134.827396][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 134.827462][ T5922] RSP: 002b:00007ffd51c0a9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.827524][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 134.827744][ T5922] RDX: 0000000000000013 RSI: 00007ffd51c0aad0 RDI: 0000000000000004 [ 134.827777][ T5922] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000000 [ 134.827817][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 134.827897][ T5922] R13: 0000000000000015 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 134.827993][ T5922] [ 134.921090][ T5922] syz-executor183: vmalloc error: size 110848, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 134.948388][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 134.948452][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.948481][ T5922] Call Trace: [ 134.948623][ T5922] [ 134.948655][ T5922] dump_stack_lvl+0xe8/0x150 [ 134.948751][ T5922] warn_alloc+0x24d/0x270 [ 134.948827][ T5922] ? lockdep_hardirqs_on+0x7b/0x110 [ 134.948912][ T5922] ? __pfx_warn_alloc+0x10/0x10 [ 134.948981][ T5922] ? kfree+0x1c5/0x650 [ 134.949342][ T5922] ? __get_vm_area_node+0x219/0x2f0 [ 134.949378][ T5922] __vmalloc_node_range_noprof+0x36b/0x1540 [ 134.949429][ T5922] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 134.949496][ T5922] ? kasan_quarantine_put+0xbb/0x1f0 [ 134.949564][ T5922] ? lockdep_hardirqs_on+0x7b/0x110 [ 134.949647][ T5922] ? hid_open_report+0x2c4/0xf00 [ 134.949774][ T5922] vzalloc_noprof+0xb2/0xe0 [ 134.949876][ T5922] ? hid_open_report+0x2c4/0xf00 [ 134.949972][ T5922] hid_open_report+0x2c4/0xf00 [ 134.950081][ T5922] ? __pfx_hid_open_report+0x10/0x10 [ 134.950166][ T5922] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.950232][ T5922] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 134.950331][ T5922] hidpp_probe+0x27e/0x1ce0 [ 134.950380][ T5922] ? __mutex_trylock_common+0x15f/0x270 [ 134.950419][ T5922] ? __pfx___mutex_trylock_common+0x10/0x10 [ 134.950452][ T5922] ? __pfx_hidpp_probe+0x10/0x10 [ 134.950473][ T5922] ? rcu_is_watching+0x16/0xb0 [ 134.950551][ T5922] ? trace_contention_end+0x3d/0x140 [ 134.950677][ T5922] ? hid_lookup_quirk+0x350/0x600 [ 134.950773][ T5922] ? __mutex_unlock_slowpath+0x731/0x900 [ 134.950872][ T5922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.950959][ T5922] ? hid_match_id+0x313/0x340 [ 134.951045][ T5922] ? hid_lookup_quirk+0x350/0x600 [ 134.951143][ T5922] hid_device_probe+0x46a/0x870 [ 134.951291][ T5922] ? __pfx_hid_device_probe+0x10/0x10 [ 134.951359][ T5922] really_probe+0x254/0xae0 [ 134.951459][ T5922] __driver_probe_device+0x1e8/0x360 [ 134.951557][ T5922] device_driver_attach+0xe0/0x1d0 [ 134.951659][ T5922] bind_store+0x1d0/0x220 [ 134.951746][ T5922] ? __pfx_sysfs_kf_write+0x10/0x10 [ 134.951800][ T5922] kernfs_fop_write_iter+0x3a4/0x540 [ 134.952386][ T5922] vfs_write+0x612/0xba0 [ 134.952518][ T5922] ? __pfx_vfs_write+0x10/0x10 [ 134.952636][ T5922] ? __fget_files+0x2a/0x420 [ 134.952721][ T5922] ksys_write+0x150/0x270 [ 134.952795][ T5922] ? __pfx_ksys_write+0x10/0x10 [ 134.952893][ T5922] do_syscall_64+0x166/0x520 [ 134.952975][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.953039][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 134.953112][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.953175][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 134.953230][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 134.953280][ T5922] RSP: 002b:00007ffd51c0a9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.953343][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 134.953379][ T5922] RDX: 0000000000000013 RSI: 00007ffd51c0aad0 RDI: 0000000000000004 [ 134.953428][ T5922] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000000 [ 134.953462][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 134.953495][ T5922] R13: 0000000000000015 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 134.953593][ T5922] [ 134.988949][ T5922] Mem-Info: [ 134.988987][ T5922] active_anon:3776 inactive_anon:0 isolated_anon:0 [ 134.988987][ T5922] active_file:0 inactive_file:45596 isolated_file:0 [ 134.988987][ T5922] unevictable:0 dirty:6732 writeback:0 [ 134.988987][ T5922] slab_reclaimable:9891 slab_unreclaimable:78696 [ 134.988987][ T5922] mapped:2805 shmem:530 pagetables:873 [ 134.988987][ T5922] sec_pagetables:0 bounce:0 [ 134.988987][ T5922] kernel_misc_reclaimable:0 [ 134.988987][ T5922] free:1412645 free_pcp:8270 free_cma:0 [ 134.989374][ T5922] Node 0 active_anon:15104kB inactive_anon:0kB active_file:0kB inactive_file:182184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11220kB dirty:26920kB writeback:0kB shmem:2120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9920kB pagetables:3364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 134.989507][ T5922] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 134.989838][ T5922] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.000415][ T5922] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 135.000548][ T5922] Node 0 DMA32 free:1687128kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:15104kB inactive_anon:0kB active_file:0kB inactive_file:182184kB unevictable:0kB writepending:26920kB zspages:0kB present:3129332kB managed:2527508kB mlocked:0kB bounce:0kB free_pcp:33080kB local_pcp:12412kB free_cma:0kB [ 135.000719][ T5922] lowmem_reserve[]: 0 0 0 0 0 [ 135.000829][ T5922] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.000977][ T5922] lowmem_reserve[]: 0 0 0 0 0 [ 135.001472][ T5922] Node 1 Normal free:3948092kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.001720][ T5922] lowmem_reserve[]: 0 0 0 0 0 [ 135.001843][ T5922] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 135.009832][ T5922] Node 0 DMA32: 1408*4kB (UE) 915*8kB (UM) 422*16kB (UM) 423*32kB (UME) 228*64kB (UM) 147*128kB (UM) 88*256kB (UM) 45*512kB (UME) 22*1024kB (UME) 6*2048kB (UME) 376*4096kB (UM) = 1687128kB [ 135.010297][ T5922] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 135.010803][ T5922] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 6*16kB (UM) 9*32kB (UM) 6*64kB (UM) 6*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3948092kB [ 135.021073][ T5922] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.021137][ T5922] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 135.028874][ T5922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.028956][ T5922] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 135.029006][ T5922] 46122 total pagecache pages [ 135.029054][ T5922] 0 pages in swap cache [ 135.029068][ T5922] Free swap = 124996kB [ 135.029089][ T5922] Total swap = 124996kB [ 135.029119][ T5922] 2097051 pages RAM [ 135.029139][ T5922] 0 pages HighMem/MovableOnly [ 135.029159][ T5922] 433558 pages reserved [ 135.029180][ T5922] 0 pages cma reserved [ 135.029326][ T5922] logitech-hidpp-device 0003:046D:C262.0001: hidpp_probe:parse failed [ 135.029498][ T5922] logitech-hidpp-device 0003:046D:C262.0001: probe with driver logitech-hidpp-device failed with error -12 [ 135.128476][ T5922] FAULT_INJECTION: forcing a failure. [ 135.128476][ T5922] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 135.128590][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [+] fail_n=34: bind succeeded, scanning /dev/input to trigger bug... [ 135.128655][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.128685][ T5922] Call Trace: [ 135.128692][ T5922] [ 135.128701][ T5922] dump_stack_lvl+0xe8/0x150 [ 135.128799][ T5922] should_fail_ex+0x410/0x560 [ 135.128924][ T5922] prepare_alloc_pages+0x223/0x600 [ 135.129006][ T5922] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 135.129092][ T5922] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 135.129178][ T5922] ? __pfx_policy_nodemask+0x10/0x10 [ 135.129292][ T5922] alloc_pages_mpol+0x21e/0x390 [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event3. [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [ 135.129396][ T5922] alloc_pages_noprof+0xb1/0x2b0 [ 135.129480][ T5922] get_free_pages_noprof+0xf/0x80 [ 135.129557][ T5922] __kasan_populate_vmalloc+0x38/0x1c0 [ 135.129665][ T5922] ? do_raw_spin_unlock+0xf5/0x200 [ 135.129770][ T5922] alloc_vmap_area+0xd1a/0x1420 [ 135.129901][ T5922] ? __pfx_alloc_vmap_area+0x10/0x10 [ 135.129984][ T5922] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 135.130088][ T5922] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [ 135.130159][ T5922] ? __get_vm_area_node+0x155/0x2f0 [ 135.130231][ T5922] __get_vm_area_node+0x200/0x2f0 [ 135.130306][ T5922] __vmalloc_node_range_noprof+0x343/0x1540 [ 135.130370][ T5922] ? hid_open_report+0x2c4/0xf00 [ 135.130562][ T5922] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.130626][ T5922] ? kasan_quarantine_put+0xbb/0x1f0 [ 135.130690][ T5922] ? lockdep_hardirqs_on+0x7b/0x110 [ 135.130765][ T5922] ? hid_open_report+0x2c4/0xf00 [*] Closed /dev/input/event0. [ 135.130852][ T5922] vzalloc_noprof+0xb2/0xe0 [ 135.130916][ T5922] ? hid_open_report+0x2c4/0xf00 [ 135.131004][ T5922] hid_open_report+0x2c4/0xf00 [ 135.131410][ T5922] ? __pfx_hid_open_report+0x10/0x10 [ 135.131497][ T5922] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.131564][ T5922] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 135.131707][ T5922] hidpp_probe+0x27e/0x1ce0 [ 135.131788][ T5922] ? __mutex_trylock_common+0x15f/0x270 [ 135.131891][ T5922] ? __pfx___mutex_trylock_common+0x10/0x10 [ 135.132001][ T5922] ? __pfx_hidpp_probe+0x10/0x10 [ 135.132076][ T5922] ? rcu_is_watching+0x16/0xb0 [ 135.132156][ T5922] ? trace_contention_end+0x3d/0x140 [ 135.132270][ T5922] ? hid_lookup_quirk+0x350/0x600 [ 135.132366][ T5922] ? __mutex_unlock_slowpath+0x731/0x900 [ 135.132462][ T5922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.132547][ T5922] ? hid_match_id+0x313/0x340 [ 135.132630][ T5922] ? hid_lookup_quirk+0x350/0x600 [ 135.132725][ T5922] hid_device_probe+0x46a/0x870 [ 135.132813][ T5922] ? __pfx_hid_device_probe+0x10/0x10 [ 135.132875][ T5922] really_probe+0x254/0xae0 [ 135.132962][ T5922] __driver_probe_device+0x1e8/0x360 [ 135.133066][ T5922] device_driver_attach+0xe0/0x1d0 [ 135.133438][ T5922] bind_store+0x1d0/0x220 [ 135.133779][ T5922] ? __pfx_sysfs_kf_write+0x10/0x10 [ 135.133842][ T5922] kernfs_fop_write_iter+0x3a4/0x540 [ 135.133934][ T5922] vfs_write+0x612/0xba0 [ 135.134466][ T5922] ? __pfx_vfs_write+0x10/0x10 [ 135.134693][ T5922] ? __fget_files+0x2a/0x420 [ 135.134787][ T5922] ksys_write+0x150/0x270 [ 135.134997][ T5922] ? __pfx_ksys_write+0x10/0x10 [ 135.135054][ T5922] do_syscall_64+0x166/0x520 [ 135.135083][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.135282][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 135.135351][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.135419][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 135.135502][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 135.135645][ T5922] RSP: 002b:00007ffd51c0a9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.135665][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 135.135731][ T5922] RDX: 0000000000000013 RSI: 00007ffd51c0aad0 RDI: 0000000000000004 [ 135.135773][ T5922] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000000 [ 135.135806][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 135.135840][ T5922] R13: 0000000000000016 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90 [ 135.135931][ T5922] [ 135.176374][ T5922] logitech-hidpp-device 0003:046D:C262.0001: hidpp_probe:parse failed [ 135.190481][ T5922] logitech-hidpp-device 0003:046D:C262.0001: probe with driver logitech-hidpp-device failed with error -12 [ 135.265073][ T5922] FAULT_INJECTION: forcing a failure. [ 135.265073][ T5922] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 135.265167][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz-executor183 Not tainted syzkaller #0 PREEMPT(full) [ 135.265224][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.265257][ T5922] Call Trace: [ 135.265286][ T5922] [ 135.265308][ T5922] dump_stack_lvl+0xe8/0x150 [ 135.265406][ T5922] should_fail_ex+0x410/0x560 [ 135.265509][ T5922] prepare_alloc_pages+0x223/0x600 [ 135.265597][ T5922] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 135.265680][ T5922] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 135.265754][ T5922] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 135.265836][ T5922] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 135.265921][ T5922] ? __pfx_policy_nodemask+0x10/0x10 [ 135.266004][ T5922] __alloc_pages_noprof+0x10/0x100 [ 135.266078][ T5922] alloc_pages_bulk_noprof+0x5fa/0x7c0 [+] fail_n=37: bind succeeded, scanning /dev/input to trigger bug... [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [ 135.266173][ T5922] ? alloc_pages_noprof+0x140/0x2b0 [ 135.266260][ T5922] __kasan_populate_vmalloc+0xb7/0x1c0 [ 135.266351][ T5922] alloc_vmap_area+0xd1a/0x1420 [ 135.266535][ T5922] ? __pfx_alloc_vmap_area+0x10/0x10 [ 135.266613][ T5922] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 135.266694][ T5922] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 135.266763][ T5922] ? __get_vm_area_node+0x155/0x2f0 [*] Closed /dev/input/event3. [ 135.266829][ T5922] __get_vm_area_node+0x200/0x2f0 [ 135.266911][ T5922] __vmalloc_node_range_noprof+0x343/0x1540 [ 135.266967][ T5922] ? hid_open_report+0x2c4/0xf00 [ 135.267140][ T5922] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.267194][ T5922] ? kasan_quarantine_put+0xbb/0x1f0 [ 135.267260][ T5922] ? lockdep_hardirqs_on+0x7b/0x110 [ 135.267334][ T5922] ? hid_open_report+0x2c4/0xf00 [ 135.267412][ T5922] vzalloc_noprof+0xb2/0xe0 [ 135.267492][ T5922] ? hid_open_report+0x2c4/0xf00 [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event0. [ 135.267577][ T5922] hid_open_report+0x2c4/0xf00 [ 135.267691][ T5922] ? __pfx_hid_open_report+0x10/0x10 [ 135.267767][ T5922] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.267830][ T5922] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 135.267912][ T5922] hidpp_probe+0x27e/0x1ce0 [ 135.268006][ T5922] ? __mutex_trylock_common+0x15f/0x270 [ 135.268103][ T5922] ? __pfx___mutex_trylock_common+0x10/0x10 [ 135.268206][ T5922] ? __pfx_hidpp_probe+0x10/0x10 [ 135.268259][ T5922] ? rcu_is_watching+0x16/0xb0 [ 135.268313][ T5922] ? trace_contention_end+0x3d/0x140 [ 135.269022][ T5922] ? hid_lookup_quirk+0x350/0x600 [ 135.269615][ T5922] ? __mutex_unlock_slowpath+0x731/0x900 [ 135.269721][ T5922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.269900][ T5922] ? hid_match_id+0x313/0x340 [ 135.269985][ T5922] ? hid_lookup_quirk+0x350/0x600 [ 135.270432][ T5922] hid_device_probe+0x46a/0x870 [ 135.270778][ T5922] ? __pfx_hid_device_probe+0x10/0x10 [ 135.270877][ T5922] really_probe+0x254/0xae0 [ 135.270993][ T5922] __driver_probe_device+0x1e8/0x360 [ 135.271081][ T5922] device_driver_attach+0xe0/0x1d0 [ 135.271175][ T5922] bind_store+0x1d0/0x220 [ 135.271259][ T5922] ? __pfx_sysfs_kf_write+0x10/0x10 [ 135.271312][ T5922] kernfs_fop_write_iter+0x3a4/0x540 [ 135.271406][ T5922] vfs_write+0x612/0xba0 [ 135.271632][ T5922] ? __pfx_vfs_write+0x10/0x10 [ 135.271723][ T5922] ? __fget_files+0x2a/0x420 [ 135.271800][ T5922] ksys_write+0x150/0x270 [ 135.271874][ T5922] ? __pfx_ksys_write+0x10/0x10 [ 135.271954][ T5922] do_syscall_64+0x166/0x520 [ 135.272020][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.272088][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 135.272154][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.272225][ T5922] RIP: 0033:0x7f0a3c0c5d5e [ 135.272287][ T5922] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 135.272331][ T5922] RSP: 002b:00007ffd51c0a9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.272395][ T5922] RAX: ffffffffffffffda RBX: 000055556d0e5400 RCX: 00007f0a3c0c5d5e [ 135.272677][ T5922] RDX: 0000000000000013 RSI: 00007ffd51c0aad0 RDI: 0000000000000004 [ 135.272718][ T5922] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000000 [ 135.272738][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3c10808d [ 135.272789][ T5922] R13: 0000000000000017 R14: 00007ffd51c0aad0 R15: 00007ffd51c0aa90