general protection fault in input_ff

ID	Workflow	Result	Correct	Bug	Created	Started	Finished	Revision
aff3675b	repro-c	Reproduced: ✅	❓	general protection fault in input_ff_flush	2026/10/16 14:32	2026/10/16 14:32	2026/10/16 15:12	432c0077
93c8db90	repro-c		💥	general protection fault in input_ff_flush	2026/10/16 07:03	2026/10/16 07:03	2026/10/16 08:28	3f2522c6
bb29bdc5	repro-c		💥	general protection fault in input_ff_flush	2026/10/14 18:01	2026/10/14 18:01	2026/10/14 23:39	8fb0ae89
ed84439d	assessment-security	DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ✅ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌	❓	general protection fault in input_ff_flush	2026/10/06 00:54	2026/10/06 00:54	2026/10/06 01:19	1995e6c7

Title	Replies (including bot)	Last reply
[PATCH] Input: ff-core - clear flush and event hooks in input_ff_destroy()	1 (1)	2026/10/17 05:33
[syzbot] [input?] general protection fault in input_ff_flush	0 (2)	2026/10/16 20:40

Title

Replies (including bot)

Last reply

[PATCH] Input: ff-core - clear flush and event hooks in input_ff_destroy()

1 (1)

2026/10/17 05:33

[syzbot] [input?] general protection fault in input_ff_flush

0 (2)

2026/10/16 20:40

Created	Duration	User	Patch	Repo	Result
2026/10/16 20:40	25m	matheus.aalmeida@inf.ufrgs.br	patch	upstream	report job log log
2026/10/16 17:36	45m	retest repro		git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 2f2f7eeef8b0a1a9b9ca998231419873ccae8d4e	report job log log

Created

Duration

User

Patch

Repo

Result

2026/10/16 20:40

25m

matheus.aalmeida@inf.ufrgs.br

patch

upstream

report job log log

2026/10/16 17:36

45m

retest repro

git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 2f2f7eeef8b0a1a9b9ca998231419873ccae8d4e

report job log log

Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [*] Reproducer for general protection fault in input_ff_flush [+] opendir /sys/class/udc successful. [+] closedir /sys/class/udc successful. [+] Using UDC device: dummy_udc.2 [+] open /dev/raw-gadget successful (fd=3). [+] USB_RAW_IOCTL_INIT successful. [+] pthread_create ep0_loop successful. [+] pthread_create ep_io_loop successful. [+] USB_RAW_IOCTL_RUN successful. [*] Waiting for Logitech G920 to enumerate and bind... [+] Found Logitech G920 device: 0003:046D:C262.0001 [*] Starting deterministic fault injection rebind loop (1..100)... [+] fail_n=1: bind succeeded, scanning /dev/input to trigger bug... [*] Opened /dev/input/event4, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event4. [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event3. [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event0. [+] fail_n=6: bind succeeded, scanning /dev/input to trigger bug... [*] Opened /dev/input/event4, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event4. [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event3. [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event0. [+] fail_n=7: bind succeeded, scanning /dev/input to trigger bug... [*] Opened /dev/input/event4, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event4. [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event3. [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event0. [*] Tested fail_n=10 [+] fail_n=11: bind succeeded, scanning /dev/input to trigger bug... [*] Opened /dev/input/event4, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event4. [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event3. [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event0. [+] fail_n=15: bind succeeded, scanning /dev/input to trigger bug... [*] Opened /dev/input/event4, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event4. [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event3. [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event0. [*] Tested fail_n=20 [+] fail_n=30: bind succeeded, scanning /dev/input to trigger bug... [*] Opened /dev/input/event4, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event4. [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event3. [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event0. [+] fail_n=34: bind succeeded, scanning /dev/input to trigger bug... [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event3. [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event0. [+] fail_n=37: bind succeeded, scanning /dev/input to trigger bug... [*] Opened /dev/input/event3, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event3. [*] Opened /dev/input/event2, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event2. [*] Opened /dev/input/event1, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event1. [*] Opened /dev/input/event0, closing now (should crash if ff teardown leaked flush)... [*] Closed /dev/input/event0.

Crashes (4):
Time	Kernel	Commit	Syzkaller	Config	Log	Report	C repro	VM info	Assets (help?)	Manager	Title
2026/10/16 18:22	git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git	2f2f7eeef8b0	4f92358f	.config	console log	report	C			ci-upstream-kasan-gce	general protection fault in input_ff_flush
2026/10/12 11:20	upstream	24a19b953e2a	4f92358f	.config	console log	report		info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce	general protection fault in input_ff_flush
2026/10/07 06:00	upstream	69f80fef3153	f7710056	.config	console log	report		info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-root	general protection fault in input_ff_flush
2026/10/04 22:51	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	639df5d23876	57bbd979	.config	console log	report		info	[disk image] [vmlinux] [kernel image]	ci2-upstream-usb	general protection fault in input_ff_flush

Crashes (4):

Assets (help?)