From: syzbot <syzbot+4f5f81e1456a1f645bf8@syzkaller.appspotmail.com>
To: bentiss@kernel.org, jikos@kernel.org,
linux-input@vger.kernel.org, linux-kernel@vger.kernel.org,
linux-usb@vger.kernel.org, oneukum@suse.com,
syzkaller-bugs@googlegroups.com
Subject: Re: [syzbot] [input?] [usb?] memory leak in dualshock4_get_calibration_data
Date: Wed, 12 Nov 2025 23:38:02 -0800 [thread overview]
Message-ID: <69158ada.a70a0220.3124cb.001d.GAE@google.com> (raw)
In-Reply-To: <148861b7-4f6b-45d9-8d52-1b21f8bb2395@suse.com>
Hello,
syzbot tried to test the proposed patch but the build/boot failed:
SYZFAIL: failed to recv rpc
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0
Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts.
2025/11/13 07:36:48 parsed 1 programs
[ 46.199818][ T5813] cgroup: Unknown subsys name 'net'
[ 46.379023][ T5813] cgroup: Unknown subsys name 'cpuset'
[ 46.385474][ T5813] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 54.888279][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 56.340369][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 56.421936][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 56.429766][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 56.436985][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 56.445171][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 56.452741][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 56.846094][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 56.854123][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 56.864851][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 56.872802][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 57.063354][ T5895] chnl_net:caif_netlink_parms(): no params data found
[ 57.083062][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state
[ 57.090193][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state
[ 57.097410][ T5895] bridge_slave_0: entered allmulticast mode
[ 57.104038][ T5895] bridge_slave_0: entered promiscuous mode
[ 57.113031][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state
[ 57.120155][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state
[ 57.127349][ T5895] bridge_slave_1: entered allmulticast mode
[ 57.133596][ T5895] bridge_slave_1: entered promiscuous mode
[ 57.144454][ T5895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 57.154187][ T5895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 57.168185][ T5895] team0: Port device team_slave_0 added
[ 57.174463][ T5895] team0: Port device team_slave_1 added
[ 57.186086][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 57.193078][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 57.219301][ T5895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 57.230889][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 57.237915][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 57.263881][ T5895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 57.281848][ T5895] hsr_slave_0: entered promiscuous mode
[ 57.287619][ T5895] hsr_slave_1: entered promiscuous mode
[ 57.317718][ T5895] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 57.325494][ T5895] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 57.334404][ T5895] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 57.349057][ T5895] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 57.361932][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state
[ 57.368995][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 57.376311][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state
[ 57.383366][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 57.402889][ T5895] 8021q: adding VLAN 0 to HW filter on device bond0
[ 57.412746][ T48] bridge0: port 1(bridge_slave_0) entered disabled state
[ 57.420421][ T48] bridge0: port 2(bridge_slave_1) entered disabled state
[ 57.430935][ T5895] 8021q: adding VLAN 0 to HW filter on device team0
[ 57.439750][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[ 57.446848][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 57.455906][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state
[ 57.463221][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 57.480670][ T5895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 57.523051][ T5895] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 57.539669][ T5895] veth0_vlan: entered promiscuous mode
[ 57.546689][ T5895] veth1_vlan: entered promiscuous mode
[ 57.557686][ T5895] veth0_macvtap: entered promiscuous mode
[ 57.564689][ T5895] veth1_macvtap: entered promiscuous mode
[ 57.574038][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 57.583627][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 57.592625][ T1005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.601383][ T1005] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.610479][ T1005] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.619249][ T1005] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.680555][ T1005] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 57.721144][ T1005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/11/13 07:37:01 executed programs: 0
[ 57.769104][ T1005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 57.819448][ T1005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 60.847880][ T1005] bridge_slave_1: left allmulticast mode
[ 60.856131][ T1005] bridge_slave_1: left promiscuous mode
[ 60.861839][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state
[ 60.869580][ T1005] bridge_slave_0: left allmulticast mode
[ 60.875248][ T1005] bridge_slave_0: left promiscuous mode
[ 60.881523][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state
[ 60.930394][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 60.940379][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 60.949636][ T1005] bond0 (unregistering): Released all slaves
[ 61.019603][ T1005] hsr_slave_0: left promiscuous mode
[ 61.025166][ T1005] hsr_slave_1: left promiscuous mode
[ 61.030851][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 61.038360][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 61.045838][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 61.053628][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 61.062820][ T1005] veth1_macvtap: left promiscuous mode
[ 61.068468][ T1005] veth0_macvtap: left promiscuous mode
[ 61.074011][ T1005] veth1_vlan: left promiscuous mode
[ 61.079293][ T1005] veth0_vlan: left promiscuous mode
[ 61.105155][ T1005] team0 (unregistering): Port device team_slave_1 removed
[ 61.113500][ T1005] team0 (unregistering): Port device team_slave_0 removed
[ 63.295265][ T5134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 63.302496][ T5134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 63.309684][ T5134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 63.317008][ T5134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 63.324371][ T5134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 63.362995][ T5989] chnl_net:caif_netlink_parms(): no params data found
[ 63.383696][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state
[ 63.390958][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state
[ 63.398237][ T5989] bridge_slave_0: entered allmulticast mode
[ 63.404497][ T5989] bridge_slave_0: entered promiscuous mode
[ 63.411309][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state
[ 63.418421][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state
[ 63.425574][ T5989] bridge_slave_1: entered allmulticast mode
[ 63.431855][ T5989] bridge_slave_1: entered promiscuous mode
[ 63.443227][ T5989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 63.453005][ T5989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 63.466713][ T5989] team0: Port device team_slave_0 added
[ 63.472987][ T5989] team0: Port device team_slave_1 added
[ 63.482893][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 63.489894][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 63.515910][ T5989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 63.527038][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 63.534021][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 63.560024][ T5989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 63.577524][ T5989] hsr_slave_0: entered promiscuous mode
[ 63.583382][ T5989] hsr_slave_1: entered promiscuous mode
[ 63.781644][ T5989] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 63.790644][ T5989] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 63.798849][ T5989] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 63.806845][ T5989] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 63.821643][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state
[ 63.828815][ T5989] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 63.836059][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state
[ 63.843125][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 63.865285][ T5989] 8021q: adding VLAN 0 to HW filter on device bond0
[ 63.875346][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 63.883832][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 63.894432][ T5989] 8021q: adding VLAN 0 to HW filter on device team0
[ 63.903560][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[ 63.910672][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 63.921689][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state
[ 63.928797][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 63.990298][ T5989] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 64.009155][ T5989] veth0_vlan: entered promiscuous mode
[ 64.016994][ T5989] veth1_vlan: entered promiscuous mode
[ 64.032046][ T5989] veth0_macvtap: entered promiscuous mode
[ 64.039726][ T5989] veth1_macvtap: entered promiscuous mode
[ 64.051239][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 64.061759][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 64.072138][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 64.096024][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 64.113835][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 64.126167][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 64.136390][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
SYZFAIL: failed to recv rpc
[ 64.136519][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 64.152984][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 64.154772][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
fd=3 want=4 recv=0 n=0
syzkaller build log:
go env (err=<nil>)
AR='ar'
CC='gcc'
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_ENABLED='1'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
CXX='g++'
GCCGO='gccgo'
GO111MODULE='auto'
GOAMD64='v1'
GOARCH='amd64'
GOAUTH='netrc'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOCACHEPROG=''
GODEBUG=''
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFIPS140='off'
GOFLAGS=''
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build4112260622=/tmp/go-build -gno-record-gcc-switches'
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs-2/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTELEMETRY='local'
GOTELEMETRYDIR='/syzkaller/.config/go/telemetry'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.24.4'
GOWORK=''
PKG_CONFIG='pkg-config'
git status (err=<nil>)
HEAD detached at 07e030dea6e
nothing to commit, working tree clean
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=07e030dea6e6d9ca88b75bb3be2810f47083b328 -X github.com/google/syzkaller/prog.gitRevisionDate=20251112-115923" ./sys/syz-sysgen | grep -q false || go install -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=07e030dea6e6d9ca88b75bb3be2810f47083b328 -X github.com/google/syzkaller/prog.gitRevisionDate=20251112-115923" ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=07e030dea6e6d9ca88b75bb3be2810f47083b328 -X github.com/google/syzkaller/prog.gitRevisionDate=20251112-115923" -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
mkdir -p ./bin/linux_amd64
g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \
-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include -DGOOS_linux=1 -DGOARCH_amd64=1 \
-DHOSTGOOS_linux=1 -DGIT_REVISION=\"07e030dea6e6d9ca88b75bb3be2810f47083b328\"
/usr/bin/ld: /tmp/ccqeZpgW.o: in function `Connection::Connect(char const*, char const*)':
executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x104): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
./tools/check-syzos.sh 2>/dev/null
Tested on:
commit: 24172e0d Merge tag 'arm64-fixes' of git://git.kernel.o..
git tree: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel config: https://syzkaller.appspot.com/x/.config?x=cb128cd5cb439809
dashboard link: https://syzkaller.appspot.com/bug?extid=4f5f81e1456a1f645bf8
compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
patch: https://syzkaller.appspot.com/x/patch.diff?x=16573c12580000
next prev parent reply other threads:[~2025-11-13 7:38 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-11-13 4:38 [syzbot] [input?] [usb?] memory leak in dualshock4_get_calibration_data syzbot
2025-11-13 7:23 ` Oliver Neukum
2025-11-13 7:38 ` syzbot [this message]
2025-11-15 1:12 ` Forwarded: syzbot
2025-11-15 1:44 ` Forwarded: syzbot
[not found] <4f060430-ec33-4ac0-b8e6-27316f01995f@gmail.com>
2025-11-15 2:18 ` [syzbot] [input?] [usb?] memory leak in dualshock4_get_calibration_data syzbot
[not found] <dd273a98-7870-422f-ba28-2ad657e27df3@gmail.com>
2025-11-15 2:41 ` syzbot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=69158ada.a70a0220.3124cb.001d.GAE@google.com \
--to=syzbot+4f5f81e1456a1f645bf8@syzkaller.appspotmail.com \
--cc=bentiss@kernel.org \
--cc=jikos@kernel.org \
--cc=linux-input@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-usb@vger.kernel.org \
--cc=oneukum@suse.com \
--cc=syzkaller-bugs@googlegroups.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.