Extracting prog: 15m35.487082003s Minimizing prog: 5m2.593739939s Simplifying prog options: 0s Extracting C: 59.359922878s Simplifying C: 6m46.057851969s extracting reproducer from 42 programs testing a last program of every proc single: executing 7 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nfc_raw-getpgid-socket$inet6_udp-syz_usb_connect-openat$sysfs-prlimit64-sched_setscheduler-socket$kcm-sendmsg$kcm-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET-madvise-mlock2-socket$kcm-ioprio_set$pid-sendmsg$sock-write$cgroup_int-socket$nl_route-sendmsg$nl_route-recvmmsg detailed listing: executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) getpgid(0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000046f17720fd0b2001adf90102030109021b0001000010000904"], 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000200)=[{0x18, 0x84, 0x0, '\x00'}], 0x18}, 0xd1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf25140000000e0001006e657464657673696d0000000f0002006e65cff3b46575a37f92000008000300020000000800ce9a85"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x8000004) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="dcf2040000000000140003006e65746465767369"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$TOKEN_CREATE-bpf$PROG_LOAD-socket$nl_xfrm-sendmsg$nl_xfrm-sendmmsg$inet6-openat$ptmx-ioctl$TIOCSETD-ioctl$TIOCVHANGUP-syz_pidfd_open-socket$kcm-socket$inet-ioctl$sock_SIOCGIFINDEX-socket$nl_route-bind$netlink-getsockname$packet-sendmsg$nl_route-socket$nl_route-socket-getsockname$packet-sendmsg$nl_route detailed listing: executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f8000000190001002dbd70000000000000000000000000895fa6270000000000fe8000000000000000000000000000bb00000000000000000000000016000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000060000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000200a000000000000feffffffff7f4000020000000000000800000000000000000100000044000500ac1414bb000000000000000000000000000000003c00000002000000fe8000000000000000000000000000aa0600000004030000010400"/176], 0xf8}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000003e80)={0xa, 0x4e22, 0x5, @mcast1, 0x6400}, 0x1c, 0x0}}], 0x1, 0x4008810) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_pidfd_open(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-prctl$PR_SCHED_CORE-prlimit64-openat$sequencer-syz_open_dev$sndmidi-writev-socket$inet6_sctp-ioctl$TCSETSF2-mkdirat-symlinkat-linkat-unlink-openat$ptmx-ioctl$TIOCSETD-ioctl$TCSETS-ioctl$TIOCSTI-ioctl$TIOCSTI-syz_open_procfs-read$FUSE-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-ioctl$TIOCSTI detailed listing: executing program 0: syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) unlink(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') read$FUSE(r2, &(0x7f0000001340)={0x2020}, 0x203d) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x7) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_NEW-pipe-splice-splice-write-mmap-mprotect-mincore-fcntl$notify detailed listing: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000300)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7d, &(0x7f0000000200)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0") program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-setsockopt$inet_tcp_int-bind$inet-connect$inet-bpf$MAP_CREATE-mmap$IORING_OFF_SQ_RING-socket-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-syz_genetlink_get_family_id$ethtool-prctl$PR_SET_SECCOMP-ioctl$sock_FIOGETOWN-sched_setattr-execveat-madvise-madvise-mremap-syz_open_procfs-pread64-madvise-setsockopt$inet_tcp_TCP_CONGESTION detailed listing: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_disconnect detailed listing: executing program 0: syz_usb_connect(0x3, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) program crashed: memory leak in v4l2_ctrl_handler_init_class single: successfully extracted reproducer found reproducer with 3 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: syz_usb_connect(0x3, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true reproducing took 33m26.183016775s repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff88811ab9a318 (size 8): comm "kworker/1:1", pid 42, jiffies 4294942945 hex dump (first 8 bytes): 40 83 c8 1a 81 88 ff ff @....... backtrace (crc 436da8e1): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kvmalloc_node_noprof+0x50c/0x800 mm/slub.c:7136 kvmalloc_array_node_noprof include/linux/slab.h:1122 [inline] v4l2_ctrl_handler_init_class+0x59/0x80 drivers/media/v4l2-core/v4l2-ctrls-core.c:1706 msi2500_probe+0x2a6/0x470 drivers/media/usb/msi2500/msi2500.c:1248 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 usb_set_configuration+0x961/0xc70 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x83/0xd0 drivers/usb/core/generic.c:250 usb_probe_device+0x7c/0x1d0 drivers/usb/core/driver.c:291 BUG: memory leak unreferenced object 0xffff88812a7a4200 (size 256): comm "kworker/1:1", pid 42, jiffies 4294942945 hex dump (first 32 bytes): 58 77 15 09 81 88 ff ff 58 77 15 09 81 88 ff ff Xw......Xw...... 10 42 7a 2a 81 88 ff ff 10 42 7a 2a 81 88 ff ff .Bz*.....Bz*.... backtrace (crc 29e3564a): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kvmalloc_node_noprof+0x50c/0x800 mm/slub.c:7136 v4l2_ctrl_new+0x2bf/0x1340 drivers/media/v4l2-core/v4l2-ctrls-core.c:2112 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2266 handler_new_ref+0x352/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1853 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 BUG: memory leak unreferenced object 0xffff88811ac88240 (size 64): comm "kworker/1:1", pid 42, jiffies 4294942945 hex dump (first 32 bytes): 40 80 c8 1a 81 88 ff ff 68 77 15 09 81 88 ff ff @.......hw...... 00 00 00 00 00 00 00 00 00 42 7a 2a 81 88 ff ff .........Bz*.... backtrace (crc 466772d1): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] handler_new_ref+0xd7/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1861 v4l2_ctrl_new+0x67d/0x1340 drivers/media/v4l2-core/v4l2-ctrls-core.c:2195 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2266 handler_new_ref+0x352/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1853 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 BUG: memory leak unreferenced object 0xffff88811ac88040 (size 64): comm "kworker/1:1", pid 42, jiffies 4294942945 hex dump (first 32 bytes): 00 80 c8 1a 81 88 ff ff 40 82 c8 1a 81 88 ff ff ........@....... 40 82 c8 1a 81 88 ff ff 00 2c 62 2a 81 88 ff ff @........,b*.... backtrace (crc ccd27603): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] handler_new_ref+0xd7/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1861 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 usb_set_configuration+0x961/0xc70 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x83/0xd0 drivers/usb/core/generic.c:250 connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF final repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff88811ab9a318 (size 8): comm "kworker/1:1", pid 42, jiffies 4294942945 hex dump (first 8 bytes): 40 83 c8 1a 81 88 ff ff @....... backtrace (crc 436da8e1): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kvmalloc_node_noprof+0x50c/0x800 mm/slub.c:7136 kvmalloc_array_node_noprof include/linux/slab.h:1122 [inline] v4l2_ctrl_handler_init_class+0x59/0x80 drivers/media/v4l2-core/v4l2-ctrls-core.c:1706 msi2500_probe+0x2a6/0x470 drivers/media/usb/msi2500/msi2500.c:1248 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 usb_set_configuration+0x961/0xc70 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x83/0xd0 drivers/usb/core/generic.c:250 usb_probe_device+0x7c/0x1d0 drivers/usb/core/driver.c:291 BUG: memory leak unreferenced object 0xffff88812a7a4200 (size 256): comm "kworker/1:1", pid 42, jiffies 4294942945 hex dump (first 32 bytes): 58 77 15 09 81 88 ff ff 58 77 15 09 81 88 ff ff Xw......Xw...... 10 42 7a 2a 81 88 ff ff 10 42 7a 2a 81 88 ff ff .Bz*.....Bz*.... backtrace (crc 29e3564a): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kvmalloc_node_noprof+0x50c/0x800 mm/slub.c:7136 v4l2_ctrl_new+0x2bf/0x1340 drivers/media/v4l2-core/v4l2-ctrls-core.c:2112 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2266 handler_new_ref+0x352/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1853 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 BUG: memory leak unreferenced object 0xffff88811ac88240 (size 64): comm "kworker/1:1", pid 42, jiffies 4294942945 hex dump (first 32 bytes): 40 80 c8 1a 81 88 ff ff 68 77 15 09 81 88 ff ff @.......hw...... 00 00 00 00 00 00 00 00 00 42 7a 2a 81 88 ff ff .........Bz*.... backtrace (crc 466772d1): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] handler_new_ref+0xd7/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1861 v4l2_ctrl_new+0x67d/0x1340 drivers/media/v4l2-core/v4l2-ctrls-core.c:2195 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2266 handler_new_ref+0x352/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1853 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 BUG: memory leak unreferenced object 0xffff88811ac88040 (size 64): comm "kworker/1:1", pid 42, jiffies 4294942945 hex dump (first 32 bytes): 00 80 c8 1a 81 88 ff ff 40 82 c8 1a 81 88 ff ff ........@....... 40 82 c8 1a 81 88 ff ff 00 2c 62 2a 81 88 ff ff @........,b*.... backtrace (crc ccd27603): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] handler_new_ref+0xd7/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1861 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 usb_set_configuration+0x961/0xc70 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x83/0xd0 drivers/usb/core/generic.c:250 connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF