Extracting prog: 7m47.584266938s Minimizing prog: 9m3.6713804s Simplifying prog options: 0s Extracting C: 1m0.604302413s Simplifying C: 8m15.588678852s extracting reproducer from 42 programs testing a last program of every proc single: executing 7 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-socket$alg-bind$alg-accept4-recvmmsg$unix detailed listing: executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter detailed listing: executing program 0: r0 = syz_io_uring_setup(0x14d9, &(0x7f0000000480)={0x0, 0x5121, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e00, 0x0, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-syz_genetlink_get_family_id$ethtool-prctl$PR_SET_SECCOMP-ioctl$sock_FIOGETOWN-sched_setattr-mknodat-execveat-syz_io_uring_setup-madvise-madvise-mremap-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-syz_open_procfs-pread64-madvise-socket$kcm-sendmmsg$inet-sched_setscheduler-socketpair$tipc detailed listing: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4ad9, &(0x7f0000000300)={0x0, 0x9731, 0x4000, 0x3, 0x145}, &(0x7f00000003c0), 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r8 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r8, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x5}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000100)=0x2) socketpair$tipc(0x1e, 0x5fec4135622bbcad, 0x0, &(0x7f0000000140)) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class single: successfully extracted reproducer found reproducer with 5 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_disconnect-syz_usb_connect$hid detailed listing: executing program 0: syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_disconnect detailed listing: executing program 0: syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb}}]}}]}}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb}}]}}]}}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb}}]}}]}}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb}}]}}]}}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true reproducing took 29m51.126423978s repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff888124bdf4e0 (size 8): comm "kworker/1:5", pid 6084, jiffies 4294943713 hex dump (first 8 bytes): 00 b0 7c 0e 81 88 ff ff ..|..... backtrace (crc e740b5e2): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kvmalloc_node_noprof+0x50c/0x800 mm/slub.c:7136 kvmalloc_array_node_noprof include/linux/slab.h:1122 [inline] v4l2_ctrl_handler_init_class+0x59/0x80 drivers/media/v4l2-core/v4l2-ctrls-core.c:1706 msi2500_probe+0x2a6/0x470 drivers/media/usb/msi2500/msi2500.c:1248 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 usb_set_configuration+0x961/0xc70 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x83/0xd0 drivers/usb/core/generic.c:250 usb_probe_device+0x7c/0x1d0 drivers/usb/core/driver.c:291 BUG: memory leak unreferenced object 0xffff88810d4a8a00 (size 256): comm "kworker/1:5", pid 6084, jiffies 4294943713 hex dump (first 32 bytes): 58 87 e2 27 81 88 ff ff 58 87 e2 27 81 88 ff ff X..'....X..'.... 10 8a 4a 0d 81 88 ff ff 10 8a 4a 0d 81 88 ff ff ..J.......J..... backtrace (crc 8658624): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kvmalloc_node_noprof+0x50c/0x800 mm/slub.c:7136 v4l2_ctrl_new+0x2bf/0x1340 drivers/media/v4l2-core/v4l2-ctrls-core.c:2112 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2266 handler_new_ref+0x352/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1853 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 BUG: memory leak unreferenced object 0xffff88810e7cb240 (size 64): comm "kworker/1:5", pid 6084, jiffies 4294943713 hex dump (first 32 bytes): c0 b6 7c 0e 81 88 ff ff 68 87 e2 27 81 88 ff ff ..|.....h..'.... 00 00 00 00 00 00 00 00 00 8a 4a 0d 81 88 ff ff ..........J..... backtrace (crc 2df3337e): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] handler_new_ref+0xd7/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1861 v4l2_ctrl_new+0x67d/0x1340 drivers/media/v4l2-core/v4l2-ctrls-core.c:2195 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2266 handler_new_ref+0x352/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1853 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 BUG: memory leak unreferenced object 0xffff88810e7cb6c0 (size 64): comm "kworker/1:5", pid 6084, jiffies 4294943713 hex dump (first 32 bytes): 80 b7 7c 0e 81 88 ff ff 40 b2 7c 0e 81 88 ff ff ..|.....@.|..... 40 b2 7c 0e 81 88 ff ff 00 84 4a 0d 81 88 ff ff @.|.......J..... backtrace (crc 9842baf2): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] handler_new_ref+0xd7/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1861 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 usb_set_configuration+0x961/0xc70 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x83/0xd0 drivers/usb/core/generic.c:250 connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF final repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff888124bdf4e0 (size 8): comm "kworker/1:5", pid 6084, jiffies 4294943713 hex dump (first 8 bytes): 00 b0 7c 0e 81 88 ff ff ..|..... backtrace (crc e740b5e2): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kvmalloc_node_noprof+0x50c/0x800 mm/slub.c:7136 kvmalloc_array_node_noprof include/linux/slab.h:1122 [inline] v4l2_ctrl_handler_init_class+0x59/0x80 drivers/media/v4l2-core/v4l2-ctrls-core.c:1706 msi2500_probe+0x2a6/0x470 drivers/media/usb/msi2500/msi2500.c:1248 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 usb_set_configuration+0x961/0xc70 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x83/0xd0 drivers/usb/core/generic.c:250 usb_probe_device+0x7c/0x1d0 drivers/usb/core/driver.c:291 BUG: memory leak unreferenced object 0xffff88810d4a8a00 (size 256): comm "kworker/1:5", pid 6084, jiffies 4294943713 hex dump (first 32 bytes): 58 87 e2 27 81 88 ff ff 58 87 e2 27 81 88 ff ff X..'....X..'.... 10 8a 4a 0d 81 88 ff ff 10 8a 4a 0d 81 88 ff ff ..J.......J..... backtrace (crc 8658624): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kvmalloc_node_noprof+0x50c/0x800 mm/slub.c:7136 v4l2_ctrl_new+0x2bf/0x1340 drivers/media/v4l2-core/v4l2-ctrls-core.c:2112 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2266 handler_new_ref+0x352/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1853 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 BUG: memory leak unreferenced object 0xffff88810e7cb240 (size 64): comm "kworker/1:5", pid 6084, jiffies 4294943713 hex dump (first 32 bytes): c0 b6 7c 0e 81 88 ff ff 68 87 e2 27 81 88 ff ff ..|.....h..'.... 00 00 00 00 00 00 00 00 00 8a 4a 0d 81 88 ff ff ..........J..... backtrace (crc 2df3337e): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] handler_new_ref+0xd7/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1861 v4l2_ctrl_new+0x67d/0x1340 drivers/media/v4l2-core/v4l2-ctrls-core.c:2195 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2266 handler_new_ref+0x352/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1853 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 BUG: memory leak unreferenced object 0xffff88810e7cb6c0 (size 64): comm "kworker/1:5", pid 6084, jiffies 4294943713 hex dump (first 32 bytes): 80 b7 7c 0e 81 88 ff ff 40 b2 7c 0e 81 88 ff ff ..|.....@.|..... 40 b2 7c 0e 81 88 ff ff 00 84 4a 0d 81 88 ff ff @.|.......J..... backtrace (crc 9842baf2): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] handler_new_ref+0xd7/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1861 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 usb_set_configuration+0x961/0xc70 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x83/0xd0 drivers/usb/core/generic.c:250 connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF