Extracting prog: 6m27.823837459s Minimizing prog: 9m1.14531407s Simplifying prog options: 0s Extracting C: 59.380619801s Simplifying C: 9m59.145244701s extracting reproducer from 40 programs testing a last program of every proc single: executing 7 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-mkdir-openat$autofs-mount$fuse-mount-chdir-openat$autofs-open-ioctl$AUTOFS_DEV_IOCTL_CATATONIC-ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER detailed listing: executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) mkdir(0x0, 0xa) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x3}}, './file1/../file0\x00'}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): write$uinput_user_dev-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_open_dev$hidraw-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_disconnect detailed listing: executing program 0: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0x11, 0x8, 0x80, 0x1, 0x4003, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xfffffc00, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x6, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0xfffff9bc, 0x5, 0xfffffff3, 0x6, 0x40ca, 0xf9, 0xe, 0x82c0, 0x8, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x4, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x44, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x3, 0x1, 0x3, 0x3, 0x80, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xd, 0xa2, 0x8000, 0x0, 0x5, 0x2, 0x5, 0x9, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x373ff589, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x35, 0x800083, 0x200, 0x80, 0x3, 0x3, 0x2950bfaf, 0x1000, 0xa2, 0x8000, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x2, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xffff, 0x7, 0xb, 0x5, 0x8, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x5, 0x2, 0x57, 0x9, 0x1, 0x2101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x54, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x4, 0x6c1b, 0x0, 0x4, 0x4, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_disconnect(r1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_disconnect-syz_open_dev$hidraw-syz_usb_connect$hid-syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hidraw(0x0, 0x0, 0x4040) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class single: successfully extracted reproducer found reproducer with 6 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_disconnect-syz_open_dev$hidraw-syz_usb_connect$hid detailed listing: executing program 0: syz_usb_connect(0x3, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hidraw(0x0, 0x0, 0x4040) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_disconnect-syz_open_dev$hidraw detailed listing: executing program 0: syz_usb_connect(0x3, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hidraw(0x0, 0x0, 0x4040) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_disconnect detailed listing: executing program 0: syz_usb_connect(0x3, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: syz_usb_connect(0x3, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x3, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true reproducing took 32m35.452549995s repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff88811bc177a8 (size 8): comm "kworker/0:0", pid 9, jiffies 4294942626 hex dump (first 8 bytes): 00 ad 7d 11 81 88 ff ff ..}..... backtrace (crc c8a59b1a): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kvmalloc_node_noprof+0x50c/0x800 mm/slub.c:7136 kvmalloc_array_node_noprof include/linux/slab.h:1122 [inline] v4l2_ctrl_handler_init_class+0x59/0x80 drivers/media/v4l2-core/v4l2-ctrls-core.c:1706 msi2500_probe+0x2a6/0x470 drivers/media/usb/msi2500/msi2500.c:1248 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 usb_set_configuration+0x961/0xc70 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x83/0xd0 drivers/usb/core/generic.c:250 usb_probe_device+0x7c/0x1d0 drivers/usb/core/driver.c:291 BUG: memory leak unreferenced object 0xffff888127c25e00 (size 256): comm "kworker/0:0", pid 9, jiffies 4294942626 hex dump (first 32 bytes): 58 67 b0 1b 81 88 ff ff 58 67 b0 1b 81 88 ff ff Xg......Xg...... 10 5e c2 27 81 88 ff ff 10 5e c2 27 81 88 ff ff .^.'.....^.'.... backtrace (crc 41b07ab0): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kvmalloc_node_noprof+0x50c/0x800 mm/slub.c:7136 v4l2_ctrl_new+0x2bf/0x1340 drivers/media/v4l2-core/v4l2-ctrls-core.c:2112 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2266 handler_new_ref+0x352/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1853 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 BUG: memory leak unreferenced object 0xffff8881117dabc0 (size 64): comm "kworker/0:0", pid 9, jiffies 4294942626 hex dump (first 32 bytes): 40 ac 7d 11 81 88 ff ff 68 67 b0 1b 81 88 ff ff @.}.....hg...... 00 00 00 00 00 00 00 00 00 5e c2 27 81 88 ff ff .........^.'.... backtrace (crc d9a97b8): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] handler_new_ref+0xd7/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1861 v4l2_ctrl_new+0x67d/0x1340 drivers/media/v4l2-core/v4l2-ctrls-core.c:2195 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2266 handler_new_ref+0x352/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1853 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 BUG: memory leak unreferenced object 0xffff8881117dac40 (size 64): comm "kworker/0:0", pid 9, jiffies 4294942626 hex dump (first 32 bytes): 80 ac 7d 11 81 88 ff ff c0 ab 7d 11 81 88 ff ff ..}.......}..... c0 ab 7d 11 81 88 ff ff 00 58 c2 27 81 88 ff ff ..}......X.'.... backtrace (crc d946bc43): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] handler_new_ref+0xd7/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1861 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 usb_set_configuration+0x961/0xc70 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x83/0xd0 drivers/usb/core/generic.c:250 connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF final repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff88811bc177a8 (size 8): comm "kworker/0:0", pid 9, jiffies 4294942626 hex dump (first 8 bytes): 00 ad 7d 11 81 88 ff ff ..}..... backtrace (crc c8a59b1a): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kvmalloc_node_noprof+0x50c/0x800 mm/slub.c:7136 kvmalloc_array_node_noprof include/linux/slab.h:1122 [inline] v4l2_ctrl_handler_init_class+0x59/0x80 drivers/media/v4l2-core/v4l2-ctrls-core.c:1706 msi2500_probe+0x2a6/0x470 drivers/media/usb/msi2500/msi2500.c:1248 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 usb_set_configuration+0x961/0xc70 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x83/0xd0 drivers/usb/core/generic.c:250 usb_probe_device+0x7c/0x1d0 drivers/usb/core/driver.c:291 BUG: memory leak unreferenced object 0xffff888127c25e00 (size 256): comm "kworker/0:0", pid 9, jiffies 4294942626 hex dump (first 32 bytes): 58 67 b0 1b 81 88 ff ff 58 67 b0 1b 81 88 ff ff Xg......Xg...... 10 5e c2 27 81 88 ff ff 10 5e c2 27 81 88 ff ff .^.'.....^.'.... backtrace (crc 41b07ab0): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kvmalloc_node_noprof+0x50c/0x800 mm/slub.c:7136 v4l2_ctrl_new+0x2bf/0x1340 drivers/media/v4l2-core/v4l2-ctrls-core.c:2112 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2266 handler_new_ref+0x352/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1853 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 BUG: memory leak unreferenced object 0xffff8881117dabc0 (size 64): comm "kworker/0:0", pid 9, jiffies 4294942626 hex dump (first 32 bytes): 40 ac 7d 11 81 88 ff ff 68 67 b0 1b 81 88 ff ff @.}.....hg...... 00 00 00 00 00 00 00 00 00 5e c2 27 81 88 ff ff .........^.'.... backtrace (crc d9a97b8): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] handler_new_ref+0xd7/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1861 v4l2_ctrl_new+0x67d/0x1340 drivers/media/v4l2-core/v4l2-ctrls-core.c:2195 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2266 handler_new_ref+0x352/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1853 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 BUG: memory leak unreferenced object 0xffff8881117dac40 (size 64): comm "kworker/0:0", pid 9, jiffies 4294942626 hex dump (first 32 bytes): 80 ac 7d 11 81 88 ff ff c0 ab 7d 11 81 88 ff ff ..}.......}..... c0 ab 7d 11 81 88 ff ff 00 58 c2 27 81 88 ff ff ..}......X.'.... backtrace (crc d946bc43): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] handler_new_ref+0xd7/0x450 drivers/media/v4l2-core/v4l2-ctrls-core.c:1861 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2416 [inline] v4l2_ctrl_add_handler+0x131/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2390 msi2500_probe+0x2dd/0x470 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x246/0x5b0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:581 [inline] really_probe+0x12f/0x430 drivers/base/dd.c:659 __driver_probe_device+0xc3/0x1a0 drivers/base/dd.c:801 driver_probe_device+0x2a/0x120 drivers/base/dd.c:831 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:959 bus_for_each_drv+0xcf/0x120 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1031 device_initial_probe+0x6a/0x70 drivers/base/dd.c:1086 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574 device_add+0x983/0xc80 drivers/base/core.c:3689 usb_set_configuration+0x961/0xc70 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x83/0xd0 drivers/usb/core/generic.c:250 connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF